@seedhape/core 0.1.0

package/dist/types.d.ts

@@ -0,0 +1,195 @@
+/**
+ * Shared domain types for the Seedhape stack.
+ *
+ * Money is NEVER represented as a float. On-chain amounts are bigint in the
+ * asset's base units (USDC = 6 decimals). INR amounts are bigint in paise
+ * (1 INR = 100 paise). Conversion happens only at explicit boundaries.
+ */
+export type Address = `0x${string}`;
+export type Hex = `0x${string}`;
+/** CAIP-2 style network identifier. x402 v2 uses these. */
+export type NetworkId = "eip155:8453" | "eip155:84532" | "eip155:137" | string;
+export declare const NETWORKS: Record<string, {
+    caip2: NetworkId;
+    chainId: number;
+    name: string;
+}>;
+export interface AssetRef {
+    /** ERC-20 contract address. */
+    address: Address;
+    network: NetworkId;
+    decimals: number;
+    symbol: string;
+    /** EIP-712 domain name/version of the token, needed for EIP-3009 signing. */
+    eip712?: {
+        name: string;
+        version: string;
+    };
+}
+/** USDC deployments. `eip712.name` matters — Base mainnet uses "USDC", some testnets differ. */
+export declare const USDC: Record<string, AssetRef>;
+export type MandateHash = Hex;
+/**
+ * Intent Mandate — signed ONCE by the human, off the hot path.
+ * This is the constraint envelope every later payment must fit inside.
+ */
+export interface IntentMandate {
+    /** Wallet that owns the funds (the human). */
+    subject: Address;
+    /** Session key / smart-account delegate that will actually sign payments. */
+    agent: Address;
+    /** Freeform description of what the agent is authorised to do, for the audit log. */
+    purpose: string;
+    /** Max value of a single payment, in asset base units. */
+    maxPerTransaction: bigint;
+    /** Max cumulative value inside a rolling window, in asset base units. */
+    maxPerPeriod: bigint;
+    /** Rolling window length in seconds (e.g. 86400 for a daily cap). */
+    periodSeconds: number;
+    /** Max number of payments inside the rolling window. Guards slow-drain. */
+    maxTxPerPeriod: number;
+    /** Empty array = any merchant allowed (subject to other rules). */
+    allowedPayTo: Address[];
+    /** Host allowlist for the x402 resource, e.g. ["api.weather.in"]. Empty = any. */
+    allowedHosts: string[];
+    /** Assets this mandate covers. */
+    asset: AssetRef;
+    notBefore: number;
+    expiry: number;
+    nonce: Hex;
+    /** Chain the EIP-712 signature is bound to. */
+    chainId: number;
+}
+export interface SignedIntentMandate {
+    mandate: IntentMandate;
+    hash: MandateHash;
+    signature: Hex;
+    /** Optional MetaMask ERC-7710 context created for this mandate. */
+    delegation?: {
+        provider: "metamask-erc7710";
+        delegate?: Address;
+        delegationManager: Address;
+        permissionContext: Hex;
+        delegator: Address;
+        allowanceAmount?: bigint;
+        expiry?: number;
+    };
+    /** Official AP2 open Checkout and Payment SD-JWTs, once authorized. */
+    ap2?: {
+        checkout: string;
+        payment: string;
+        issuer: string;
+        issuedAt: number;
+        expiresAt: number;
+    };
+    /** Set when the user revokes early. */
+    revokedAt?: number;
+}
+/**
+ * Cart Mandate — built from the merchant's 402 challenge.
+ * Binds a concrete quote to the intent it is being justified under.
+ */
+export interface CartMandate {
+    intentHash: MandateHash;
+    payTo: Address;
+    /** Full resource URL being purchased. */
+    resource: string;
+    /** Human-readable description supplied by the merchant. */
+    description: string;
+    amount: bigint;
+    asset: AssetRef;
+    quotedAt: number;
+    expiry: number;
+    nonce: Hex;
+    chainId: number;
+}
+export interface SignedCartMandate {
+    mandate: CartMandate;
+    hash: MandateHash;
+    signature: Hex;
+}
+/**
+ * Payment Mandate — the final authorisation, bound to both prior mandates
+ * and to the exact x402 payload that will hit the wire.
+ */
+export interface PaymentMandate {
+    intentHash: MandateHash;
+    cartHash: MandateHash;
+    payTo: Address;
+    amount: bigint;
+    asset: AssetRef;
+    /** keccak256 of the canonical JSON of the x402 payment payload. */
+    payloadHash: Hex;
+    createdAt: number;
+    nonce: Hex;
+    chainId: number;
+}
+export interface SignedPaymentMandate {
+    mandate: PaymentMandate;
+    hash: MandateHash;
+    signature: Hex;
+}
+export type SpendStatus = "pending" | "settled" | "failed" | "blocked";
+export interface SpendRecord {
+    id: string;
+    userId: string;
+    intentHash: MandateHash;
+    cartHash?: MandateHash;
+    paymentHash?: MandateHash;
+    ap2?: {
+        checkoutMandate: string;
+        paymentMandate: string;
+        checkoutJwt: string;
+    };
+    resource: string;
+    host: string;
+    payTo: Address;
+    amount: bigint;
+    asset: AssetRef;
+    /** INR paise value at execution time, from the FX snapshot. */
+    inrPaise: bigint;
+    /** USD-per-INR rate used, scaled 1e8, retained for audit. */
+    fxRateScaled: bigint;
+    status: SpendStatus;
+    /** On-chain settlement tx from the facilitator, when known. */
+    txHash?: Hex;
+    createdAt: number;
+    settledAt?: number;
+    /** Populated when status === "blocked". */
+    blockReason?: string;
+}
+/** A completed onramp fill — the tax cost basis lot. */
+export interface OnrampLot {
+    id: string;
+    userId: string;
+    /** USDC base units acquired. */
+    quantity: bigint;
+    /** Remaining unconsumed quantity, for FIFO. */
+    remaining: bigint;
+    /** Total INR paise paid, inclusive of provider fees. */
+    costInrPaise: bigint;
+    acquiredAt: number;
+    providerTxId: string;
+    provider: string;
+}
+/** Persisted hosted-commerce event, shared by the web app and its Store. */
+export interface CommerceEvent {
+    id: string;
+    side: "buyer" | "merchant";
+    status: "prepared" | "settled" | "failed";
+    productId: string;
+    amount?: string;
+    payer?: string;
+    transaction?: string;
+    at: number;
+}
+export interface PolicyDecision {
+    allowed: boolean;
+    /** Machine-readable reason codes, e.g. ["PER_TX_CAP_EXCEEDED"]. */
+    reasons: string[];
+    /** Human-readable explanation surfaced back to the agent and the user. */
+    explanation: string;
+    /** True when the payment is legal under the mandate but flagged as unusual. */
+    requiresConfirmation?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,OAAO,GAAG,KAAK,MAAM,EAAE,CAAC;AACpC,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,EAAE,CAAC;AAEhC,2DAA2D;AAC3D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,YAAY,GAAG,MAAM,CAAC;AAE/E,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAIxF,CAAC;AAEF,MAAM,WAAW,QAAQ;IACvB,+BAA+B;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,SAAS,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED,gGAAgG;AAChG,eAAO,MAAM,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAezC,CAAC;AAMF,MAAM,MAAM,WAAW,GAAG,GAAG,CAAC;AAE9B;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,KAAK,EAAE,OAAO,CAAC;IACf,qFAAqF;IACrF,OAAO,EAAE,MAAM,CAAC;IAGhB,0DAA0D;IAC1D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,YAAY,EAAE,OAAO,EAAE,CAAC;IACxB,kFAAkF;IAClF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kCAAkC;IAClC,KAAK,EAAE,QAAQ,CAAC;IAEhB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,GAAG,CAAC;IACX,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,GAAG,CAAC;IACf,mEAAmE;IACnE,UAAU,CAAC,EAAE;QACX,QAAQ,EAAE,kBAAkB,CAAC;QAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,iBAAiB,EAAE,GAAG,CAAC;QACvB,SAAS,EAAE,OAAO,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,uEAAuE;IACvE,GAAG,CAAC,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,WAAW,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,GAAG,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,GAAG,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,WAAW,CAAC;IACxB,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,mEAAmE;IACnE,WAAW,EAAE,GAAG,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,GAAG,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,GAAG,CAAC;CAChB;AAMD,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEvE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,WAAW,CAAC;IACxB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,GAAG,CAAC,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAE/E,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAEhB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;IAErB,MAAM,EAAE,WAAW,CAAC;IACpB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wDAAwD;AACxD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,UAAU,CAAC;IAC3B,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,mEAAmE;IACnE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC"}

package/dist/types.js

@@ -0,0 +1,30 @@
+/**
+ * Shared domain types for the Seedhape stack.
+ *
+ * Money is NEVER represented as a float. On-chain amounts are bigint in the
+ * asset's base units (USDC = 6 decimals). INR amounts are bigint in paise
+ * (1 INR = 100 paise). Conversion happens only at explicit boundaries.
+ */
+export const NETWORKS = {
+    base: { caip2: "eip155:8453", chainId: 8453, name: "base" },
+    "base-sepolia": { caip2: "eip155:84532", chainId: 84532, name: "base-sepolia" },
+    polygon: { caip2: "eip155:137", chainId: 137, name: "polygon" },
+};
+/** USDC deployments. `eip712.name` matters — Base mainnet uses "USDC", some testnets differ. */
+export const USDC = {
+    base: {
+        address: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+        network: "eip155:8453",
+        decimals: 6,
+        symbol: "USDC",
+        eip712: { name: "USDC", version: "2" },
+    },
+    "base-sepolia": {
+        address: "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+        network: "eip155:84532",
+        decimals: 6,
+        symbol: "USDC",
+        eip712: { name: "USDC", version: "2" },
+    },
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,MAAM,CAAC,MAAM,QAAQ,GAAwE;IAC3F,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;IAC3D,cAAc,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE;IAC/E,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;CAChE,CAAC;AAYF,gGAAgG;AAChG,MAAM,CAAC,MAAM,IAAI,GAA6B;IAC5C,IAAI,EAAE;QACJ,OAAO,EAAE,4CAA4C;QACrD,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE;KACvC;IACD,cAAc,EAAE;QACd,OAAO,EAAE,4CAA4C;QACrD,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE;KACvC;CACF,CAAC"}

package/dist/util/canonical.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Deterministic JSON serialisation, used wherever a hash must be reproducible
+ * across processes and language runtimes (mandate payload hashes, audit
+ * exports). Follows RFC 8785 key ordering. bigints serialise as decimal
+ * strings, since JSON has no bigint and silently coercing to Number would
+ * corrupt amounts above 2^53.
+ */
+export declare function canonicalJson(value: unknown): string;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/util/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../src/util/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAqBpD"}

package/dist/util/canonical.js

@@ -0,0 +1,35 @@
+/**
+ * Deterministic JSON serialisation, used wherever a hash must be reproducible
+ * across processes and language runtimes (mandate payload hashes, audit
+ * exports). Follows RFC 8785 key ordering. bigints serialise as decimal
+ * strings, since JSON has no bigint and silently coercing to Number would
+ * corrupt amounts above 2^53.
+ */
+export function canonicalJson(value) {
+    return ser(value);
+    function ser(v) {
+        if (v === null || v === undefined)
+            return "null";
+        if (typeof v === "bigint")
+            return JSON.stringify(v.toString());
+        if (typeof v === "boolean")
+            return v ? "true" : "false";
+        if (typeof v === "number") {
+            if (!Number.isFinite(v))
+                throw new Error("non-finite number");
+            return Object.is(v, -0) ? "0" : String(v);
+        }
+        if (typeof v === "string")
+            return JSON.stringify(v);
+        if (Array.isArray(v))
+            return `[${v.map(ser).join(",")}]`;
+        if (typeof v === "object") {
+            const e = Object.entries(v)
+                .filter(([, x]) => x !== undefined)
+                .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+            return `{${e.map(([k, x]) => `${JSON.stringify(k)}:${ser(x)}`).join(",")}}`;
+        }
+        throw new Error(`cannot canonicalize ${typeof v}`);
+    }
+}
+//# sourceMappingURL=canonical.js.map

package/dist/util/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../src/util/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IAElB,SAAS,GAAG,CAAC,CAAU;QACrB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACjD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACxD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QACzD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC;iBACnD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;iBAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC"}

package/dist/wallet/provider.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Wallet abstraction.
+ *
+ * The custody boundary is the single most important decision in this stack, so
+ * it is an interface rather than an implementation. Three things must be true
+ * of whatever you plug in here:
+ *
+ *   1. The server must never be able to move the user's whole balance. It signs
+ *      with a *session key* that a smart account has granted a bounded, revocable
+ *      spend permission to. The user's root key never touches this process.
+ *
+ *   2. The on-chain permission must be at least as tight as the AP2 mandate.
+ *      The policy engine is defence in depth; the spend permission is the
+ *      security boundary. If they disagree, on-chain wins and that is correct.
+ *
+ *   3. Revocation must be possible without this server's cooperation. If a user
+ *      can only revoke by asking us nicely, we are custodial in substance
+ *      whatever the architecture diagram says.
+ *
+ * `LocalSessionKeySigner` below satisfies (1) and (2) for development. For
+ * production, implement this interface against Turnkey, Privy, Coinbase CDP,
+ * or MetaMask Delegation Toolkit so the key material lives in an enclave with
+ * its own policy engine, not in this process's memory.
+ */
+import type { Address, Hex } from "../types.js";
+export interface SessionKeyGrant {
+    /** Smart account that owns the funds. */
+    account: Address;
+    /** Session key permitted to spend from it. */
+    sessionKey: Address;
+    token: Address;
+    /** Max spend per period, in token base units. Enforced on-chain. */
+    allowance: bigint;
+    periodSeconds: number;
+    start: number;
+    end: number;
+    /** Tx that registered the permission, for audit. */
+    grantTx?: Hex;
+}
+export interface WalletProvider {
+    /** Address that appears as `from` in EIP-3009 authorisations. */
+    readonly address: Address;
+    signTypedData(args: {
+        domain: Record<string, unknown>;
+        types: Record<string, unknown>;
+        primaryType: string;
+        message: Record<string, unknown>;
+    }): Promise<Hex>;
+    /** Current on-chain spend permission, if the provider can report one. */
+    currentGrant(): Promise<SessionKeyGrant | null>;
+    /** Remaining allowance in the active on-chain period. */
+    remainingAllowance(): Promise<bigint | null>;
+}
+/**
+ * Development signer. The private key is a session key, NOT the user's root key.
+ *
+ * Do not ship this to production as-is: the key sits in process memory and in
+ * whatever environment variable you loaded it from. It exists so the rest of
+ * the stack can be exercised end to end without an enclave dependency.
+ */
+export declare class LocalSessionKeySigner implements WalletProvider {
+    private readonly grant;
+    private readonly spentThisPeriod;
+    readonly address: Address;
+    private readonly account;
+    constructor(privateKey: Hex, grant?: SessionKeyGrant | null, spentThisPeriod?: () => Promise<bigint>);
+    signTypedData(args: {
+        domain: Record<string, unknown>;
+        types: Record<string, unknown>;
+        primaryType: string;
+        message: Record<string, unknown>;
+    }): Promise<Hex>;
+    currentGrant(): Promise<SessionKeyGrant | null>;
+    remainingAllowance(): Promise<bigint | null>;
+}
+/**
+ * Production adapter for a custody service or smart-account signer.
+ *
+ * The service owns the key and enforces its own policy. This process only
+ * receives a signature and a read-only grant snapshot. The HTTP contract is:
+ *   POST {baseUrl}/sign-typed-data -> { signature: "0x..." }
+ *   GET  {baseUrl}/grant            -> { grant: SessionKeyGrant | null }
+ *   GET  {baseUrl}/remaining       -> { remaining: "123" | null }
+ */
+export declare class HttpCustodyWalletProvider implements WalletProvider {
+    private readonly cfg;
+    readonly address: Address;
+    private readonly fetchImpl;
+    private readonly baseUrl;
+    constructor(cfg: {
+        baseUrl: string;
+        bearerToken: string;
+        address: Address;
+        fetchImpl?: typeof fetch;
+    });
+    signTypedData(args: {
+        domain: Record<string, unknown>;
+        types: Record<string, unknown>;
+        primaryType: string;
+        message: Record<string, unknown>;
+    }): Promise<Hex>;
+    currentGrant(): Promise<SessionKeyGrant | null>;
+    remainingAllowance(): Promise<bigint | null>;
+    private request;
+}
+/**
+ * Refuses to sign anything. Used when a user has connected the MCP server but
+ * has not yet granted a spend permission, so `pay` tools fail with a clear
+ * message instead of a confusing signature error.
+ */
+export declare class UnfundedWallet implements WalletProvider {
+    readonly address: Address;
+    constructor(address: Address);
+    signTypedData(): Promise<Hex>;
+    currentGrant(): Promise<null>;
+    remainingAllowance(): Promise<null>;
+}
+//# sourceMappingURL=provider.d.ts.map

package/dist/wallet/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/wallet/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,eAAe;IAC9B,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,oDAAoD;IACpD,OAAO,CAAC,EAAE,GAAG,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,aAAa,CAAC,IAAI,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjB,yEAAyE;IACzE,YAAY,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEhD,yDAAyD;IACzD,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC9C;AAED;;;;;;GAMG;AACH,qBAAa,qBAAsB,YAAW,cAAc;IAMxD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,eAAe;IANlC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;gBAG/D,UAAU,EAAE,GAAG,EACE,KAAK,GAAE,eAAe,GAAG,IAAW,EACpC,eAAe,GAAE,MAAM,OAAO,CAAC,MAAM,CAAkB;IAMpE,aAAa,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,GAAG,CAAC;IAKV,YAAY,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAI/C,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAMnD;AAED;;;;;;;;GAQG;AACH,qBAAa,yBAA0B,YAAW,cAAc;IAKlD,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJhC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAEJ,GAAG,EAAE;QAChC,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;KAC1B;IAMK,aAAa,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,GAAG,CAAC;IAaV,YAAY,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAqB/C,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAMpC,OAAO;CAetB;AAED;;;;GAIG;AACH,qBAAa,cAAe,YAAW,cAAc;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO;gBAAhB,OAAO,EAAE,OAAO;IAC/B,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC;IAM7B,YAAY;IAGZ,kBAAkB;CAGzB"}

package/dist/wallet/provider.js

@@ -0,0 +1,160 @@
+/**
+ * Wallet abstraction.
+ *
+ * The custody boundary is the single most important decision in this stack, so
+ * it is an interface rather than an implementation. Three things must be true
+ * of whatever you plug in here:
+ *
+ *   1. The server must never be able to move the user's whole balance. It signs
+ *      with a *session key* that a smart account has granted a bounded, revocable
+ *      spend permission to. The user's root key never touches this process.
+ *
+ *   2. The on-chain permission must be at least as tight as the AP2 mandate.
+ *      The policy engine is defence in depth; the spend permission is the
+ *      security boundary. If they disagree, on-chain wins and that is correct.
+ *
+ *   3. Revocation must be possible without this server's cooperation. If a user
+ *      can only revoke by asking us nicely, we are custodial in substance
+ *      whatever the architecture diagram says.
+ *
+ * `LocalSessionKeySigner` below satisfies (1) and (2) for development. For
+ * production, implement this interface against Turnkey, Privy, Coinbase CDP,
+ * or MetaMask Delegation Toolkit so the key material lives in an enclave with
+ * its own policy engine, not in this process's memory.
+ */
+import { privateKeyToAccount } from "viem/accounts";
+/**
+ * Development signer. The private key is a session key, NOT the user's root key.
+ *
+ * Do not ship this to production as-is: the key sits in process memory and in
+ * whatever environment variable you loaded it from. It exists so the rest of
+ * the stack can be exercised end to end without an enclave dependency.
+ */
+export class LocalSessionKeySigner {
+    grant;
+    spentThisPeriod;
+    address;
+    account;
+    constructor(privateKey, grant = null, spentThisPeriod = async () => 0n) {
+        this.grant = grant;
+        this.spentThisPeriod = spentThisPeriod;
+        this.account = privateKeyToAccount(privateKey);
+        this.address = this.account.address;
+    }
+    async signTypedData(args) {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        return this.account.signTypedData(args);
+    }
+    async currentGrant() {
+        return this.grant;
+    }
+    async remainingAllowance() {
+        if (!this.grant)
+            return null;
+        const spent = await this.spentThisPeriod();
+        const left = this.grant.allowance - spent;
+        return left > 0n ? left : 0n;
+    }
+}
+/**
+ * Production adapter for a custody service or smart-account signer.
+ *
+ * The service owns the key and enforces its own policy. This process only
+ * receives a signature and a read-only grant snapshot. The HTTP contract is:
+ *   POST {baseUrl}/sign-typed-data -> { signature: "0x..." }
+ *   GET  {baseUrl}/grant            -> { grant: SessionKeyGrant | null }
+ *   GET  {baseUrl}/remaining       -> { remaining: "123" | null }
+ */
+export class HttpCustodyWalletProvider {
+    cfg;
+    address;
+    fetchImpl;
+    baseUrl;
+    constructor(cfg) {
+        this.cfg = cfg;
+        this.address = cfg.address;
+        this.baseUrl = cfg.baseUrl.replace(/\/$/, "");
+        this.fetchImpl = cfg.fetchImpl ?? fetch;
+    }
+    async signTypedData(args) {
+        const response = await this.request("/sign-typed-data", {
+            method: "POST",
+            body: JSON.stringify(args),
+            headers: { "content-type": "application/json" },
+        });
+        const signature = response.signature;
+        if (typeof signature !== "string" || !/^0x[0-9a-fA-F]+$/.test(signature)) {
+            throw new Error("Custody service returned an invalid typed-data signature.");
+        }
+        return signature;
+    }
+    async currentGrant() {
+        const response = await this.request("/grant");
+        const grant = response.grant;
+        if (!grant)
+            return null;
+        if (typeof grant.account !== "string" || typeof grant.sessionKey !== "string" ||
+            typeof grant.token !== "string" || typeof grant.allowance !== "string" && typeof grant.allowance !== "number" ||
+            typeof grant.periodSeconds !== "number" || typeof grant.start !== "number" || typeof grant.end !== "number") {
+            throw new Error("Custody service returned an invalid spend grant.");
+        }
+        return {
+            account: grant.account,
+            sessionKey: grant.sessionKey,
+            token: grant.token,
+            allowance: BigInt(grant.allowance),
+            periodSeconds: grant.periodSeconds,
+            start: grant.start,
+            end: grant.end,
+            grantTx: typeof grant.grantTx === "string" ? grant.grantTx : undefined,
+        };
+    }
+    async remainingAllowance() {
+        const response = await this.request("/remaining");
+        const remaining = response.remaining;
+        return remaining === null || remaining === undefined ? null : BigInt(remaining);
+    }
+    async request(path, init = {}) {
+        const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+            ...init,
+            headers: {
+                authorization: `Bearer ${this.cfg.bearerToken}`,
+                accept: "application/json",
+                ...(init.headers ?? {}),
+            },
+        });
+        const text = await response.text();
+        let body;
+        try {
+            body = text ? JSON.parse(text) : null;
+        }
+        catch {
+            body = text;
+        }
+        if (!response.ok)
+            throw new Error(`Custody service ${path} failed with ${response.status}: ${String(text)}`);
+        return body;
+    }
+}
+/**
+ * Refuses to sign anything. Used when a user has connected the MCP server but
+ * has not yet granted a spend permission, so `pay` tools fail with a clear
+ * message instead of a confusing signature error.
+ */
+export class UnfundedWallet {
+    address;
+    constructor(address) {
+        this.address = address;
+    }
+    async signTypedData() {
+        throw new Error("No spend permission has been granted for this wallet. Run the `grant_spend_permission` " +
+            "flow to authorise a session key before attempting a payment.");
+    }
+    async currentGrant() {
+        return null;
+    }
+    async remainingAllowance() {
+        return null;
+    }
+}
+//# sourceMappingURL=provider.js.map

package/dist/wallet/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/wallet/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAoCpD;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IAMb;IACA;IANV,OAAO,CAAU;IACT,OAAO,CAAyC;IAEjE,YACE,UAAe,EACE,QAAgC,IAAI,EACpC,kBAAyC,KAAK,IAAI,EAAE,CAAC,EAAE;QADvD,UAAK,GAAL,KAAK,CAA+B;QACpC,oBAAe,GAAf,eAAe,CAAwC;QAExE,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAKnB;QACC,8DAA8D;QAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAW,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QAC1C,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/B,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAAyB;IAKP;IAJpB,OAAO,CAAU;IACT,SAAS,CAAe;IACxB,OAAO,CAAS;IAEjC,YAA6B,GAK5B;QAL4B,QAAG,GAAH,GAAG,CAK/B;QACC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAKnB;QACC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,SAAS,GAAI,QAAoC,CAAC,SAAS,CAAC;QAClE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,SAAgB,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAI,QAAuD,CAAC,KAAK,CAAC;QAC7E,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;YACzE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YAC7G,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAChH,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAkB;YACjC,UAAU,EAAE,KAAK,CAAC,UAAqB;YACvC,KAAK,EAAE,KAAK,CAAC,KAAgB;YAC7B,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;YAClC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAc,CAAC,CAAC,CAAC,SAAS;SAC9E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,SAAS,GAAI,QAAmD,CAAC,SAAS,CAAC;QACjF,OAAO,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClF,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAoB,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAC9D,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE;gBAC/C,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;aACxB;SACF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;QAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,gBAAgB,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7G,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACJ;IAArB,YAAqB,OAAgB;QAAhB,YAAO,GAAP,OAAO,CAAS;IAAG,CAAC;IACzC,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,KAAK,CACb,yFAAyF;YACvF,8DAA8D,CACjE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,kBAAkB;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}