@seedhape/local-wallet 0.2.0

package/dist/agent-identity.d.ts

@@ -0,0 +1,45 @@
+import { type ReadyAgent } from "@seedhape/core";
+import { restoreIdentityCredentials } from "./keychain.js";
+import { type LocalIdentityBackupPayload } from "./identity-backup.js";
+/**
+ * Create (or resume) this machine's ERC-8004 identity with Seedhape hosting its
+ * public metadata and, when enabled, sponsoring gas. No configuration needed.
+ */
+export declare function setupSeedhapeHostedAgent(dataDirectory: string, display: {
+    name: string;
+    description: string;
+}, log?: (line: string) => void, options?: {
+    fetchImpl?: typeof fetch;
+}): Promise<ReadyAgent>;
+/**
+ * Load a ready Seedhape-hosted identity for the local MCP server and keep its
+ * key directory fresh while the server runs. Returns undefined when none exists.
+ */
+export declare function loadSeedhapeHostedAgent(dataDirectory: string, onError?: (error: unknown) => void): Promise<{
+    identityRef: string;
+    signatureAgent: string;
+    keyId: string;
+    /** Fresh Web Bot Auth headers for one request, including Agent-Identity. */
+    signRequest: (url: string) => Promise<{
+        "Agent-Identity": string;
+        "Signature-Agent": string;
+        "Signature-Input": string;
+        Signature: string;
+    }>;
+    refreshDirectory: () => Promise<void>;
+    stop: () => void;
+} | undefined>;
+export declare function setupSelfCustodiedAgent(dataDirectory: string, existingIdentityRef?: string, replaceExistingRegistration?: boolean): Promise<ReadyAgent>;
+export declare function loadSelfCustodiedAgent(dataDirectory: string): Promise<ReadyAgent | undefined>;
+export declare function selfCustodiedMetadataPaths(dataDirectory: string): {
+    state: string;
+    keys: string;
+    metadata: string;
+};
+export declare function createSelfCustodiedMetadataHandler(dataDirectory: string): Promise<(request: Request) => Promise<Response>>;
+export declare function createSelfCustodiedBackupPayload(dataDirectory: string): Promise<LocalIdentityBackupPayload>;
+export declare function restoreSelfCustodiedBackupPayload(dataDirectory: string, payload: LocalIdentityBackupPayload, restoreCredentials?: typeof restoreIdentityCredentials): Promise<{
+    controller: string;
+    identityRef: string;
+}>;
+//# sourceMappingURL=agent-identity.d.ts.map

package/dist/agent-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-identity.d.ts","sourceRoot":"","sources":["../src/agent-identity.ts"],"names":[],"mappings":"AAMA,OAAO,EAQL,KAAK,UAAU,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAKL,0BAA0B,EAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAmB,KAAK,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAoCxF;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAe,EAAE,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAwC7N;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,GAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAe;;;;IAkB7G,4EAA4E;uBACnD,MAAM;;;;;;;;eAIlC;AAED,wBAAsB,uBAAuB,CAAC,aAAa,EAAE,MAAM,EAAE,mBAAmB,CAAC,EAAE,MAAM,EAAE,2BAA2B,UAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAkC3J;AAED,wBAAsB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAyBnG;AAED,wBAAgB,0BAA0B,CAAC,aAAa,EAAE,MAAM;;;;EAE/D;AAED,wBAAsB,kCAAkC,CAAC,aAAa,EAAE,MAAM,oDAK7E;AAED,wBAAsB,gCAAgC,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAoBjH;AAED,wBAAsB,iCAAiC,CACrD,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,0BAA0B,EACnC,kBAAkB,GAAE,OAAO,0BAAuD,GACjF,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAoCtD"}

package/dist/agent-identity.js

@@ -0,0 +1,300 @@
+import { createPublicClient, createWalletClient, formatEther, http } from "viem";
+import { privateKeyToAccount } from "viem/accounts";
+import { createHash, randomBytes } from "node:crypto";
+import { lstat, mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { base, baseSepolia } from "viem/chains";
+import { createViemAgentIdentityAccount, FileAgentMetadataPublisher, FileAgentOperationalKeyStore, FileAgentSetupStorage, createFileAgentMetadataHandler, loadAgentTrustConfig, setupAgent, } from "@seedhape/core";
+import { createOrGetIdentityController, createOrGetIdentityKeyStoreMasterKey, identityControllerPrivateKey, identityKeyStoreMasterKey, restoreIdentityCredentials, } from "./keychain.js";
+import { validatePayload } from "./identity-backup.js";
+import { SeedhapeMetadataPublisher, fetchIdentityConfig, requestGasSponsorship, startDirectoryRefresher, trustConfigFrom, uploadDirectory } from "./seedhape-identity.js";
+const INSTANCE_ID = "local-primary";
+function paths(dataDirectory) {
+    const root = `${dataDirectory.replace(/\/$/, "")}/agent-identity`;
+    return { state: `${root}/state`, keys: `${root}/keys`, metadata: `${root}/metadata` };
+}
+function requiredMetadataOrigin() {
+    const value = process.env.SEEDHAPE_AGENT_METADATA_ORIGIN;
+    if (!value)
+        throw new Error("Set SEEDHAPE_AGENT_METADATA_ORIGIN to the public HTTPS origin where your local metadata handler is served.");
+    const url = new URL(value);
+    if (url.protocol !== "https:" || url.pathname !== "/" || url.search || url.hash)
+        throw new Error("SEEDHAPE_AGENT_METADATA_ORIGIN must be an HTTPS origin without a path.");
+    return url.origin;
+}
+const seedhapeMarker = (dataDirectory) => join(dataDirectory.replace(/\/$/, ""), "agent-identity", "seedhape.json");
+const usesOwnMetadataOrigin = () => Boolean(process.env.SEEDHAPE_AGENT_METADATA_ORIGIN);
+/** Wait for Seedhape's one-time gas top-up (or report why the user must fund the controller). */
+async function ensureControllerGas(controller, balance, minimum, sponsored, network, log) {
+    if (balance >= minimum)
+        return;
+    if (!sponsored)
+        throw new Error(`Send at least ${formatEther(minimum - balance)} ${network === "base" ? "Base ETH" : "Base Sepolia ETH"} to the identity controller ${controller}, then run setup again.`);
+    log("     Seedhape is covering the network fee for this identity…");
+    const deadline = Date.now() + 180_000;
+    for (;;) {
+        const result = await requestGasSponsorship(controller);
+        if (result.outcome === "funded")
+            return;
+        if (result.outcome === "manual")
+            throw new Error(`${result.reason} Send ${formatEther(minimum - balance)} ETH on ${network} to ${controller} and run setup again.`);
+        if (Date.now() > deadline)
+            throw new Error(`The sponsored top-up (${result.transactionHash}) is still pending. Run setup again in a minute; nothing is lost.`);
+        await new Promise((resolve) => setTimeout(resolve, 10_000));
+    }
+}
+/**
+ * Create (or resume) this machine's ERC-8004 identity with Seedhape hosting its
+ * public metadata and, when enabled, sponsoring gas. No configuration needed.
+ */
+export async function setupSeedhapeHostedAgent(dataDirectory, display, log = () => { }, options = {}) {
+    const config = await fetchIdentityConfig();
+    if (!config.enabled)
+        throw new Error("On-chain agent identity isn't enabled on this Seedhape deployment yet.");
+    const trust = trustConfigFrom(config);
+    const accountId = process.env.SEEDHAPE_AGENT_IDENTITY_CONTROLLER_ID ?? INSTANCE_ID;
+    const controller = privateKeyToAccount(await createOrGetIdentityController(accountId));
+    const chain = trust.chainId === 8453 ? base : baseSepolia;
+    const publicClient = createPublicClient({ chain, transport: http(trust.rpcUrl) });
+    if (await publicClient.getChainId() !== trust.chainId)
+        throw new Error("The Base RPC does not match the configured network.");
+    const { state, keys, metadata } = paths(dataDirectory);
+    const setupStorage = new FileAgentSetupStorage(state);
+    const saved = await setupStorage.load(INSTANCE_ID);
+    if (saved?.stage !== "ready") {
+        const minimum = BigInt(config.minimumControllerBalanceWei);
+        await ensureControllerGas(controller.address, await publicClient.getBalance({ address: controller.address }), minimum, config.gasSponsored, config.network, log);
+    }
+    const keyStore = new FileAgentOperationalKeyStore(keys, await createOrGetIdentityKeyStoreMasterKey(accountId));
+    const publisher = new SeedhapeMetadataPublisher(metadata, config.signatureAgent, keyStore, controller);
+    // A resumed setup verifies the live directory, so give it a fresh signature first.
+    if (saved?.identityRef && saved.keyId && saved.keyStoreRef && saved.publicJwk && saved.directoryUri) {
+        await uploadDirectory(keyStore, { identityRef: saved.identityRef, keyId: saved.keyId, keyStoreRef: saved.keyStoreRef, publicJwk: saved.publicJwk, directoryUri: saved.directoryUri }, controller);
+    }
+    const walletClient = createWalletClient({ account: controller, chain, transport: http(trust.rpcUrl) });
+    try {
+        const agent = await setupAgent({
+            instanceId: INSTANCE_ID,
+            display: saved?.display ?? { ...display, image: `${config.signatureAgent}/brand/seedhape-icon-192.png`, services: [] },
+            accountProvider: createViemAgentIdentityAccount({ walletClient, account: controller, chainId: trust.chainId }),
+            storage: setupStorage,
+            keyStore,
+            metadataPublisher: publisher,
+            trust,
+            ...(options.fetchImpl ? { fetchImpl: options.fetchImpl } : {}),
+        });
+        await mkdir(dirname(seedhapeMarker(dataDirectory)), { recursive: true, mode: 0o700 });
+        await writeFile(seedhapeMarker(dataDirectory), JSON.stringify({ version: 1, signatureAgent: config.signatureAgent }), { mode: 0o600 });
+        return agent;
+    }
+    finally {
+        publisher.stop();
+    }
+}
+/**
+ * Load a ready Seedhape-hosted identity for the local MCP server and keep its
+ * key directory fresh while the server runs. Returns undefined when none exists.
+ */
+export async function loadSeedhapeHostedAgent(dataDirectory, onError = () => { }) {
+    if (usesOwnMetadataOrigin())
+        return undefined;
+    try {
+        await readFile(seedhapeMarker(dataDirectory));
+    }
+    catch {
+        return undefined;
+    }
+    const { state, keys } = paths(dataDirectory);
+    const saved = await new FileAgentSetupStorage(state).load(INSTANCE_ID);
+    if (saved?.stage !== "ready" || !saved.identityRef || !saved.keyId || !saved.keyStoreRef || !saved.publicJwk || !saved.directoryUri || !saved.signatureAgent)
+        return undefined;
+    const accountId = process.env.SEEDHAPE_AGENT_IDENTITY_CONTROLLER_ID ?? INSTANCE_ID;
+    const masterKey = await identityKeyStoreMasterKey(accountId);
+    if (!masterKey)
+        throw new Error("This machine's identity key store is missing from the OS keychain. Restore your identity backup.");
+    const keyStore = new FileAgentOperationalKeyStore(keys, masterKey);
+    const directory = { identityRef: saved.identityRef, keyId: saved.keyId, keyStoreRef: saved.keyStoreRef, publicJwk: saved.publicJwk, directoryUri: saved.directoryUri };
+    const refresher = startDirectoryRefresher(keyStore, directory, onError);
+    await refresher.refresh(true);
+    const signer = await keyStore.getSigner(saved.keyStoreRef);
+    return {
+        identityRef: saved.identityRef,
+        signatureAgent: saved.signatureAgent,
+        keyId: saved.keyId,
+        /** Fresh Web Bot Auth headers for one request, including Agent-Identity. */
+        signRequest: async (url) => ({ ...await signer.signRequest({ url, signatureAgent: saved.signatureAgent, keyId: saved.keyId }), "Agent-Identity": saved.identityRef }),
+        refreshDirectory: () => refresher.refresh(),
+        stop: refresher.stop,
+    };
+}
+export async function setupSelfCustodiedAgent(dataDirectory, existingIdentityRef, replaceExistingRegistration = false) {
+    const trust = loadAgentTrustConfig();
+    if (!trust)
+        throw new Error("Enable the trust SDK and set Base registry/AgentTrust addresses before local identity setup.");
+    const metadataOrigin = requiredMetadataOrigin();
+    const accountId = process.env.SEEDHAPE_AGENT_IDENTITY_CONTROLLER_ID ?? INSTANCE_ID;
+    const controllerKey = await createOrGetIdentityController(accountId);
+    const controller = privateKeyToAccount(controllerKey);
+    const chain = trust.chainId === 8453 ? base : baseSepolia;
+    const publicClient = createPublicClient({ chain, transport: http(trust.rpcUrl) });
+    if (await publicClient.getChainId() !== trust.chainId)
+        throw new Error("The configured RPC does not match the selected Base network.");
+    const balance = await publicClient.getBalance({ address: controller.address });
+    const minimum = BigInt(process.env.SEEDHAPE_AGENT_TRUST_MIN_CONTROLLER_BALANCE_WEI ?? "2000000000000000");
+    if (balance < minimum)
+        throw new Error(`Fund the self-custodied identity controller ${controller.address} with at least ${formatEther(minimum - balance)} ${trust.network === "base" ? "Base ETH" : "Base Sepolia ETH"}, then rerun 'seedhape identity:setup'.`);
+    const walletClient = createWalletClient({ account: controller, chain, transport: http(trust.rpcUrl) });
+    const { state, keys, metadata } = paths(dataDirectory);
+    const keyStore = new FileAgentOperationalKeyStore(keys, await createOrGetIdentityKeyStoreMasterKey(accountId));
+    const setupStorage = new FileAgentSetupStorage(state);
+    const metadataPublisher = new FileAgentMetadataPublisher(metadata, metadataOrigin);
+    return setupAgent({
+        instanceId: INSTANCE_ID,
+        existingIdentityRef,
+        replaceExistingRegistration,
+        display: {
+            name: process.env.SEEDHAPE_AGENT_IDENTITY_NAME ?? "My Seedhape agent",
+            description: process.env.SEEDHAPE_AGENT_IDENTITY_DESCRIPTION ?? "A self-custodied Seedhape agent.",
+            image: process.env.SEEDHAPE_AGENT_IDENTITY_IMAGE ?? `${metadataOrigin}/favicon.ico`,
+            services: [],
+        },
+        accountProvider: createViemAgentIdentityAccount({ walletClient, account: controller, chainId: trust.chainId }),
+        storage: setupStorage,
+        keyStore,
+        metadataPublisher,
+        trust,
+    });
+}
+export async function loadSelfCustodiedAgent(dataDirectory) {
+    const trust = loadAgentTrustConfig();
+    if (!trust)
+        return undefined;
+    const metadataOrigin = requiredMetadataOrigin();
+    const { state, keys, metadata } = paths(dataDirectory);
+    const setupStorage = new FileAgentSetupStorage(state);
+    const saved = await setupStorage.load(INSTANCE_ID);
+    if (!saved)
+        return undefined;
+    const accountId = process.env.SEEDHAPE_AGENT_IDENTITY_CONTROLLER_ID ?? INSTANCE_ID;
+    const controllerKey = await identityControllerPrivateKey(accountId);
+    const masterKey = await identityKeyStoreMasterKey(accountId);
+    if (!controllerKey || !masterKey)
+        throw new Error("Local identity keys are missing from the OS keychain. Restore your identity-controller backup and key-store backup before starting the trusted agent.");
+    if (!saved.display)
+        throw new Error("Local identity setup has no saved registration details; run `seedhape identity:setup` to resume.");
+    const controller = privateKeyToAccount(controllerKey);
+    const chain = trust.chainId === 8453 ? base : baseSepolia;
+    const walletClient = createWalletClient({ account: controller, chain, transport: http(trust.rpcUrl) });
+    return setupAgent({
+        instanceId: INSTANCE_ID,
+        display: saved.display,
+        accountProvider: createViemAgentIdentityAccount({ walletClient, account: controller, chainId: trust.chainId }),
+        storage: setupStorage,
+        keyStore: new FileAgentOperationalKeyStore(keys, masterKey),
+        metadataPublisher: new FileAgentMetadataPublisher(metadata, metadataOrigin),
+        trust,
+    });
+}
+export function selfCustodiedMetadataPaths(dataDirectory) {
+    return paths(dataDirectory);
+}
+export async function createSelfCustodiedMetadataHandler(dataDirectory) {
+    const { keys, metadata } = paths(dataDirectory);
+    const accountId = process.env.SEEDHAPE_AGENT_IDENTITY_CONTROLLER_ID ?? INSTANCE_ID;
+    const keyStore = new FileAgentOperationalKeyStore(keys, await createOrGetIdentityKeyStoreMasterKey(accountId));
+    return createFileAgentMetadataHandler({ directory: metadata, keyStore });
+}
+export async function createSelfCustodiedBackupPayload(dataDirectory) {
+    const accountId = process.env.SEEDHAPE_AGENT_IDENTITY_CONTROLLER_ID ?? INSTANCE_ID;
+    const controllerPrivateKey = await identityControllerPrivateKey(accountId);
+    const keyStoreMasterKey = await identityKeyStoreMasterKey(accountId);
+    if (!controllerPrivateKey || !keyStoreMasterKey)
+        throw new Error("Local identity credentials are missing from the OS keychain.");
+    const { state: stateDirectory, keys } = paths(dataDirectory);
+    const files = await readIdentityFiles(join(dataDirectory, "agent-identity"));
+    const payload = {
+        version: 1,
+        accountId,
+        controllerPrivateKey,
+        keyStoreMasterKey: keyStoreMasterKey.toString("base64url"),
+        files,
+    };
+    validatePayload(payload);
+    const setup = await new FileAgentSetupStorage(stateDirectory).load(INSTANCE_ID);
+    if (setup?.stage !== "ready" || !setup.keyStoreRef)
+        throw new Error("A completed local identity setup is required before creating a backup.");
+    const signer = await new FileAgentOperationalKeyStore(keys, keyStoreMasterKey).getSigner(setup.keyStoreRef);
+    if (typeof signer.signRequest !== "function")
+        throw new Error("The local Web Bot Auth signer could not be validated for backup.");
+    return payload;
+}
+export async function restoreSelfCustodiedBackupPayload(dataDirectory, payload, restoreCredentials = restoreIdentityCredentials) {
+    validatePayload(payload);
+    const account = privateKeyToAccount(payload.controllerPrivateKey);
+    await mkdir(dataDirectory, { recursive: true, mode: 0o700 });
+    const root = join(dataDirectory, "agent-identity");
+    try {
+        await lstat(root);
+        throw new Error("An identity data directory already exists here. Back it up or choose a fresh SEEDHAPE_DATA_DIR before restoring.");
+    }
+    catch (error) {
+        if (error instanceof Error && error.message.includes("already exists"))
+            throw error;
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const staging = join(dataDirectory, `.agent-identity.restore-${randomBytes(8).toString("hex")}`);
+    try {
+        for (const [relativePath, encoded] of Object.entries(payload.files)) {
+            const target = join(staging, ...relativePath.split("/"));
+            await mkdir(dirname(target), { recursive: true, mode: 0o700 });
+            await writeFile(target, Buffer.from(encoded, "base64url"), { flag: "wx", mode: 0o600 });
+        }
+        const stateDirectory = join(staging, "state");
+        const keys = join(staging, "keys");
+        const setup = await new FileAgentSetupStorage(stateDirectory).load(INSTANCE_ID);
+        if (!setup?.keyStoreRef || !setup.identityRef || setup.stage !== "ready" || setup.controller.toLowerCase() !== account.address.toLowerCase()) {
+            throw new Error("Restored setup state does not describe a ready identity owned by the backed-up controller.");
+        }
+        await new FileAgentOperationalKeyStore(keys, Buffer.from(payload.keyStoreMasterKey, "base64url")).getSigner(setup.keyStoreRef);
+        const identityHash = createHash("sha256").update(setup.identityRef).digest("hex");
+        const metadata = JSON.parse(Buffer.from(payload.files[`metadata/${identityHash}.directory.json`] ?? "", "base64url").toString("utf8"));
+        if (metadata.identityRef !== setup.identityRef || metadata.keyId !== setup.keyId)
+            throw new Error("Restored public key directory does not match the setup state.");
+        await restoreCredentials(payload.accountId, payload.controllerPrivateKey, Buffer.from(payload.keyStoreMasterKey, "base64url"));
+        await rename(staging, root);
+        return { controller: account.address, identityRef: setup.identityRef };
+    }
+    catch (error) {
+        await rm(staging, { recursive: true, force: true });
+        throw error;
+    }
+}
+async function readIdentityFiles(root) {
+    const files = {};
+    let size = 0;
+    async function walk(directory, prefix) {
+        const entries = await readdir(directory, { withFileTypes: true });
+        for (const entry of entries) {
+            const relative = `${prefix}/${entry.name}`;
+            if (entry.isSymbolicLink())
+                throw new Error("Identity backup refuses symbolic links.");
+            const absolute = join(directory, entry.name);
+            if (entry.isDirectory())
+                await walk(absolute, relative);
+            else if (entry.isFile()) {
+                const bytes = await readFile(absolute);
+                size += bytes.length;
+                if (size > 8 * 1024 * 1024)
+                    throw new Error("Local identity data exceeds the 8 MB backup limit.");
+                files[relative] = bytes.toString("base64url");
+            }
+            else
+                throw new Error("Identity backup contains an unsupported filesystem entry.");
+        }
+    }
+    for (const directory of ["state", "keys", "metadata"])
+        await walk(join(root, directory), directory);
+    return files;
+}
+//# sourceMappingURL=agent-identity.js.map

package/dist/agent-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-identity.js","sourceRoot":"","sources":["../src/agent-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,oBAAoB,EACpB,UAAU,GAEX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,6BAA6B,EAC7B,oCAAoC,EACpC,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAmC,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE1K,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC,SAAS,KAAK,CAAC,aAAqB;IAClC,MAAM,IAAI,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC;IAClE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,sBAAsB;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAC;IAC1I,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC3K,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,aAAqB,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;AAC5H,MAAM,qBAAqB,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;AAExF,iGAAiG;AACjG,KAAK,UAAU,mBAAmB,CAAC,UAAyB,EAAE,OAAe,EAAE,OAAe,EAAE,SAAkB,EAAE,OAAe,EAAE,GAA2B;IAC9J,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO;IAC/B,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,+BAA+B,UAAU,yBAAyB,CAAC,CAAC;IAC3M,GAAG,CAAC,8DAA8D,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACtC,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO;QACxC,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,SAAS,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC,WAAW,OAAO,OAAO,UAAU,uBAAuB,CAAC,CAAC;QACpK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,eAAe,mEAAmE,CAAC,CAAC;QAC/J,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,aAAqB,EAAE,OAA8C,EAAE,MAA8B,GAAG,EAAE,GAAE,CAAC,EAAE,UAAwC,EAAE;IACtM,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,WAAW,CAAC;IACnF,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,6BAA6B,CAAC,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAC1D,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClF,IAAI,MAAM,YAAY,CAAC,UAAU,EAAE,KAAK,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC9H,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,KAAK,EAAE,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC3D,MAAM,mBAAmB,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnK,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,4BAA4B,CAAC,IAAI,EAAE,MAAM,oCAAoC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/G,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACvG,mFAAmF;IACnF,IAAI,KAAK,EAAE,WAAW,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACpG,MAAM,eAAe,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,UAAU,CAAC,CAAC;IACpM,CAAC;IACD,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvG,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC;YAC7B,UAAU,EAAE,WAAW;YACvB,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,cAAc,8BAA8B,EAAE,QAAQ,EAAE,EAAE,EAAE;YACtH,eAAe,EAAE,8BAA8B,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9G,OAAO,EAAE,YAAY;YACrB,QAAQ;YACR,iBAAiB,EAAE,SAAS;YAC5B,KAAK;YACL,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,MAAM,SAAS,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvI,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,IAAI,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,aAAqB,EAAE,UAAoC,GAAG,EAAE,GAAE,CAAC;IAC/G,IAAI,qBAAqB,EAAE;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,CAAC;QAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IAClF,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,KAAK,EAAE,KAAK,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IAC/K,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,WAAW,CAAC;IACnF,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;IACpI,MAAM,QAAQ,GAAG,IAAI,4BAA4B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;IACvK,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3D,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,4EAA4E;QAC5E,WAAW,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,cAAe,EAAE,KAAK,EAAE,KAAK,CAAC,KAAM,EAAE,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,WAAY,EAAE,CAAC;QAChL,gBAAgB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE;QAC3C,IAAI,EAAE,SAAS,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,aAAqB,EAAE,mBAA4B,EAAE,2BAA2B,GAAG,KAAK;IACpI,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAC5H,MAAM,cAAc,GAAG,sBAAsB,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,WAAW,CAAC;IACnF,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,SAAS,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAC1D,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClF,IAAI,MAAM,YAAY,CAAC,UAAU,EAAE,KAAK,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACvI,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,+CAA+C,IAAI,kBAAkB,CAAC,CAAC;IAC1G,IAAI,OAAO,GAAG,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,UAAU,CAAC,OAAO,kBAAkB,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,yCAAyC,CAAC,CAAC;IACjQ,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,4BAA4B,CAAC,IAAI,EAAE,MAAM,oCAAoC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/G,MAAM,YAAY,GAAG,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,IAAI,0BAA0B,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACnF,OAAO,UAAU,CAAC;QAChB,UAAU,EAAE,WAAW;QACvB,mBAAmB;QACnB,2BAA2B;QAC3B,OAAO,EAAE;YACP,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,mBAAmB;YACrE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mCAAmC,IAAI,kCAAkC;YAClG,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,GAAG,cAAc,cAAc;YACnF,QAAQ,EAAE,EAAE;SACb;QACD,eAAe,EAAE,8BAA8B,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9G,OAAO,EAAE,YAAY;QACrB,QAAQ;QACR,iBAAiB;QACjB,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,aAAqB;IAChE,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,cAAc,GAAG,sBAAsB,EAAE,CAAC;IAChD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,WAAW,CAAC;IACnF,MAAM,aAAa,GAAG,MAAM,4BAA4B,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC,aAAa,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uJAAuJ,CAAC,CAAC;IAC3M,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;IACxI,MAAM,UAAU,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAC1D,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvG,OAAO,UAAU,CAAC;QAChB,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,eAAe,EAAE,8BAA8B,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9G,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,IAAI,4BAA4B,CAAC,IAAI,EAAE,SAAS,CAAC;QAC3D,iBAAiB,EAAE,IAAI,0BAA0B,CAAC,QAAQ,EAAE,cAAc,CAAC;QAC3E,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,aAAqB;IAC9D,OAAO,KAAK,CAAC,aAAa,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,aAAqB;IAC5E,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,WAAW,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,4BAA4B,CAAC,IAAI,EAAE,MAAM,oCAAoC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/G,OAAO,8BAA8B,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,aAAqB;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,WAAW,CAAC;IACnF,MAAM,oBAAoB,GAAG,MAAM,4BAA4B,CAAC,SAAS,CAAC,CAAC;IAC3E,MAAM,iBAAiB,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,oBAAoB,IAAI,CAAC,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACjI,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAA+B;QAC1C,OAAO,EAAE,CAAC;QACV,SAAS;QACT,oBAAoB;QACpB,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC1D,KAAK;KACN,CAAC;IACF,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,IAAI,qBAAqB,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChF,IAAI,KAAK,EAAE,KAAK,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC9I,MAAM,MAAM,GAAG,MAAM,IAAI,4BAA4B,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5G,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAClI,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,aAAqB,EACrB,OAAmC,EACnC,qBAAwD,0BAA0B;IAElF,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClE,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,kHAAkH,CAAC,CAAC;IACtI,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAAE,MAAM,KAAK,CAAC;QACpF,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,2BAA2B,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,MAAM,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,qBAAqB,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7I,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,IAAI,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/H,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,YAAY,iBAAiB,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA6C,CAAC;QACnL,IAAI,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnK,MAAM,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC;QAC/H,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,UAAU,IAAI,CAAC,SAAiB,EAAE,MAAc;QACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;iBACnD,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBACrB,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBAClG,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAChD,CAAC;;gBAAM,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC;QAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IACpG,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/hosted.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Talks to the user's Seedhape account. The local wallet holds the key, but
+ * Seedhape holds the rules: every payment is checked and reserved there before
+ * the key signs, and reported back afterwards. If Seedhape can't be reached, no
+ * payment is made (fail closed).
+ */
+export declare const seedhapeUrl: () => string;
+export declare class SeedhapeUnreachableError extends Error {
+    constructor(cause: unknown);
+}
+export declare class SeedhapeAuthError extends Error {
+    constructor();
+}
+export declare function saveToken(token: string, url?: string): Promise<void>;
+export declare function loadToken(url?: string): Promise<string | null>;
+export declare function deleteToken(url?: string): Promise<boolean>;
+/** POST JSON to the Seedhape API with the stored token. Network failures become SeedhapeUnreachableError. */
+export declare function hostedPost<T>(path: string, body: unknown): Promise<{
+    status: number;
+    body: T;
+}>;
+/** Check that the stored token works, returning the account's spending status. */
+export declare function whoAmI(): Promise<{
+    ok: boolean;
+    detail: string;
+}>;
+/**
+ * Browser sign-in using Seedhape's OAuth server (the same one Claude and ChatGPT
+ * use for the hosted MCP): dynamic client registration, a loopback redirect,
+ * and PKCE. The token is stored in the OS keychain.
+ */
+export declare function loginWithBrowser(log: (line: string) => void): Promise<void>;
+export type HostedRequirement = {
+    scheme: string;
+    network: string;
+    maxAmountRequired: string;
+    payTo: string;
+    asset: string;
+    resource?: string;
+    description?: string;
+    maxTimeoutSeconds?: number;
+};
+export type HostedRefusal = {
+    ok: false;
+    code: string;
+    error: string;
+    hint: string;
+    recovery?: {
+        tool: string;
+    };
+    authorizationId?: string;
+    approvalId?: string;
+    approvalUrl?: string;
+};
+export type HostedAuthorization = {
+    ok: true;
+    authorizationId: string;
+    mandateHash: string;
+    amount: string;
+    payTo: string;
+    network: string;
+    expiresAt: number;
+};
+export declare function authorizePayment(input: {
+    agentId: string;
+    url: string;
+    requirement: HostedRequirement;
+    purchaseId?: string;
+    confirmUnusual?: boolean;
+    approvalId?: string;
+    method?: "GET" | "POST";
+    bodySha256?: string;
+}): Promise<HostedAuthorization | HostedRefusal>;
+export declare function settlePayment(input: {
+    authorizationId: string;
+    status: "settled" | "failed";
+    txHash?: string;
+    error?: string;
+}): Promise<void>;
+/** Call a tool on the hosted Seedhape MCP and return its text result. */
+export declare function callHostedTool(name: string, args: Record<string, unknown>): Promise<string>;
+//# sourceMappingURL=hosted.d.ts.map

package/dist/hosted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted.d.ts","sourceRoot":"","sources":["../src/hosted.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,eAAO,MAAM,WAAW,cAAoF,CAAC;AAE7G,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,KAAK,EAAE,OAAO;CAI3B;AAED,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAyD;AAC3I,wBAAsB,SAAS,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAuF;AACnK,wBAAsB,WAAW,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAsD;AAE9H,6GAA6G;AAC7G,wBAAsB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC,CAiBrG;AAED,kFAAkF;AAClF,wBAAsB,MAAM,IAAI,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAevE;AAQD;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CA8CjF;AAID,MAAM,MAAM,iBAAiB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAClM,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AACvL,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhK,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,iBAAiB,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,mBAAmB,GAAG,aAAa,CAAC,CAO9Q;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAKpJ;AAED,yEAAyE;AACzE,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBjG"}

package/dist/hosted.js

@@ -0,0 +1,180 @@
+/**
+ * Talks to the user's Seedhape account. The local wallet holds the key, but
+ * Seedhape holds the rules: every payment is checked and reserved there before
+ * the key signs, and reported back afterwards. If Seedhape can't be reached, no
+ * payment is made (fail closed).
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { createServer } from "node:http";
+import { spawn } from "node:child_process";
+import keytar from "keytar";
+const TOKEN_SERVICE = "seedhape-account-token";
+export const seedhapeUrl = () => (process.env.SEEDHAPE_URL ?? "https://www.seedhape.com").replace(/\/$/, "");
+export class SeedhapeUnreachableError extends Error {
+    constructor(cause) {
+        super(`Seedhape could not be reached (${cause instanceof Error ? cause.message : String(cause)}). No payment was made; try again when you're back online.`);
+        this.name = "SeedhapeUnreachableError";
+    }
+}
+export class SeedhapeAuthError extends Error {
+    constructor() {
+        super("This local wallet isn't signed in to Seedhape. Run `seedhape login` in a terminal, then try again.");
+        this.name = "SeedhapeAuthError";
+    }
+}
+export async function saveToken(token, url = seedhapeUrl()) { await keytar.setPassword(TOKEN_SERVICE, url, token); }
+export async function loadToken(url = seedhapeUrl()) { return process.env.SEEDHAPE_TOKEN ?? await keytar.getPassword(TOKEN_SERVICE, url); }
+export async function deleteToken(url = seedhapeUrl()) { return keytar.deletePassword(TOKEN_SERVICE, url); }
+/** POST JSON to the Seedhape API with the stored token. Network failures become SeedhapeUnreachableError. */
+export async function hostedPost(path, body) {
+    const token = await loadToken();
+    if (!token)
+        throw new SeedhapeAuthError();
+    let response;
+    try {
+        response = await fetch(`${seedhapeUrl()}${path}`, {
+            method: "POST",
+            headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(20_000),
+        });
+    }
+    catch (error) {
+        throw new SeedhapeUnreachableError(error);
+    }
+    if (response.status === 401)
+        throw new SeedhapeAuthError();
+    if (response.status >= 500)
+        throw new SeedhapeUnreachableError(`HTTP ${response.status}`);
+    return { status: response.status, body: await response.json() };
+}
+/** Check that the stored token works, returning the account's spending status. */
+export async function whoAmI() {
+    const token = await loadToken();
+    if (!token)
+        return { ok: false, detail: "not signed in" };
+    try {
+        const response = await fetch(`${seedhapeUrl()}/mcp`, {
+            method: "POST",
+            headers: { "content-type": "application/json", accept: "application/json, text/event-stream", authorization: `Bearer ${token}` },
+            body: JSON.stringify({ jsonrpc: "2.0", id: 1, method: "tools/call", params: { name: "spending_status", arguments: {} } }),
+            signal: AbortSignal.timeout(20_000),
+        });
+        if (response.status === 401)
+            return { ok: false, detail: "the saved sign-in has expired; run `seedhape login` again" };
+        return { ok: response.ok, detail: response.ok ? "signed in" : `HTTP ${response.status}` };
+    }
+    catch (error) {
+        return { ok: false, detail: new SeedhapeUnreachableError(error).message };
+    }
+}
+function openBrowser(url) {
+    const command = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
+    const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+    try {
+        spawn(command, args, { stdio: "ignore", detached: true }).unref();
+    }
+    catch { /* the URL is printed as a fallback */ }
+}
+/**
+ * Browser sign-in using Seedhape's OAuth server (the same one Claude and ChatGPT
+ * use for the hosted MCP): dynamic client registration, a loopback redirect,
+ * and PKCE. The token is stored in the OS keychain.
+ */
+export async function loginWithBrowser(log) {
+    const base = seedhapeUrl();
+    const verifier = randomBytes(32).toString("base64url");
+    const challenge = createHash("sha256").update(verifier).digest("base64url");
+    const state = randomBytes(16).toString("base64url");
+    let resolveCode = () => { };
+    let rejectCode = () => { };
+    const codePromise = new Promise((resolve, reject) => { resolveCode = resolve; rejectCode = reject; });
+    const server = createServer((request, response) => {
+        const url = new URL(request.url ?? "/", "http://127.0.0.1");
+        if (url.pathname !== "/callback") {
+            response.writeHead(404).end();
+            return;
+        }
+        const done = (message) => response.writeHead(200, { "content-type": "text/html" }).end(`<!doctype html><meta charset="utf-8"><title>Seedhape</title><body style="font-family:sans-serif;background:#04050a;color:#e9ecf2;display:grid;place-items:center;height:100vh"><p>${message}</p></body>`);
+        if (url.searchParams.get("state") !== state) {
+            done("Sign-in failed: state mismatch. Close this tab and run seedhape login again.");
+            rejectCode(new Error("OAuth state mismatch."));
+            return;
+        }
+        const code = url.searchParams.get("code");
+        if (!code) {
+            done("Sign-in was cancelled. You can close this tab.");
+            rejectCode(new Error(url.searchParams.get("error") ?? "Sign-in was cancelled."));
+            return;
+        }
+        done("You're signed in. You can close this tab and return to your agent.");
+        resolveCode(code);
+    });
+    await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+    const redirectUri = `http://127.0.0.1:${server.address().port}/callback`;
+    try {
+        const registration = await fetch(`${base}/oauth/register`, {
+            method: "POST", headers: { "content-type": "application/json" },
+            body: JSON.stringify({ redirect_uris: [redirectUri], client_name: "Seedhape local wallet" }),
+        }).catch((error) => { throw new SeedhapeUnreachableError(error); });
+        const client = await registration.json();
+        if (!registration.ok || !client.client_id)
+            throw new Error(client.error ?? "Seedhape did not register this local wallet.");
+        const authorize = new URL(`${base}/oauth/authorize`);
+        authorize.search = new URLSearchParams({ response_type: "code", client_id: client.client_id, redirect_uri: redirectUri, code_challenge: challenge, code_challenge_method: "S256", state, scope: "mcp" }).toString();
+        log(`Opening your browser to sign in:\n  ${authorize.toString()}`);
+        openBrowser(authorize.toString());
+        const timeout = setTimeout(() => rejectCode(new Error("Sign-in timed out after 5 minutes.")), 5 * 60_000);
+        const code = await codePromise.finally(() => clearTimeout(timeout));
+        const token = await fetch(`${base}/oauth/token`, {
+            method: "POST",
+            body: new URLSearchParams({ grant_type: "authorization_code", code, redirect_uri: redirectUri, client_id: client.client_id, code_verifier: verifier }),
+        });
+        const issued = await token.json();
+        if (!token.ok || !issued.access_token)
+            throw new Error(issued.error ?? "Seedhape did not issue a token.");
+        await saveToken(issued.access_token, base);
+    }
+    finally {
+        server.close();
+    }
+}
+export async function authorizePayment(input) {
+    const { body } = await hostedPost("/api/local-wallet/authorize", {
+        agent_id: input.agentId, url: input.url, requirement: input.requirement,
+        ...(input.purchaseId ? { purchase_id: input.purchaseId } : {}), ...(input.confirmUnusual ? { confirm_unusual: true } : {}),
+        ...(input.approvalId ? { approval_id: input.approvalId } : {}), ...(input.method ? { method: input.method } : {}), ...(input.bodySha256 ? { body_sha256: input.bodySha256 } : {}),
+    });
+    return body;
+}
+export async function settlePayment(input) {
+    await hostedPost("/api/local-wallet/settle", {
+        authorization_id: input.authorizationId, status: input.status,
+        ...(input.txHash ? { tx_hash: input.txHash } : {}), ...(input.error ? { error: input.error.slice(0, 1000) } : {}),
+    });
+}
+/** Call a tool on the hosted Seedhape MCP and return its text result. */
+export async function callHostedTool(name, args) {
+    const token = await loadToken();
+    if (!token)
+        throw new SeedhapeAuthError();
+    let response;
+    try {
+        response = await fetch(`${seedhapeUrl()}/mcp`, {
+            method: "POST",
+            headers: { "content-type": "application/json", accept: "application/json, text/event-stream", authorization: `Bearer ${token}` },
+            body: JSON.stringify({ jsonrpc: "2.0", id: randomBytes(4).readUInt32BE(0), method: "tools/call", params: { name, arguments: args } }),
+            signal: AbortSignal.timeout(30_000),
+        });
+    }
+    catch (error) {
+        throw new SeedhapeUnreachableError(error);
+    }
+    if (response.status === 401)
+        throw new SeedhapeAuthError();
+    const body = await response.json();
+    if (body.error)
+        throw new Error(body.error.message ?? `Seedhape tool ${name} failed.`);
+    return body.result?.content?.map((item) => item.text ?? "").join("\n") ?? "";
+}
+//# sourceMappingURL=hosted.js.map