@shieldedtech/moth-wallet 0.2.0

package/dist/daemon/api-keys.d.ts

@@ -0,0 +1,66 @@
+export interface ApiKeyRecord {
+    readonly id: string;
+    readonly label: string;
+    readonly salt: string;
+    readonly hashedSecret: string;
+    readonly createdAt: string;
+    readonly revokedAt?: string;
+    /** Scopes this key holds. Defaults to ['write'] (full daemon access)
+     *  on records that predate scopes. Enforced by the daemon's
+     *  per-method gate (server.ts): a read-only key is rejected from
+     *  every write verb. */
+    readonly scopes?: readonly string[];
+}
+export interface ApiKeyGenerated {
+    readonly record: ApiKeyRecord;
+    /** The plaintext token `<id>.<secret-hex>`. Returned ONCE to the
+     *  caller (the `key gen` CLI command surfaces it on stdout); the
+     *  store never persists this value. */
+    readonly token: string;
+}
+export interface ApiKeyAuthResult {
+    readonly apiKeyId: string;
+    readonly label: string;
+    readonly scopes: readonly string[];
+}
+export declare class ApiKeyStore {
+    private readonly dir;
+    constructor(opts?: {
+        dir?: string;
+    });
+    /**
+     * Generate, persist, and return a new API key. The plaintext token
+     * is surfaced ONCE in the returned `token` field and never
+     * persisted — once the CLI has shown it to the operator there is
+     * no way to recover it.
+     *
+     * `scopes` defaults to `['write']` (full daemon access) so
+     * existing call sites that don't pass it keep their previous
+     * semantics. A read-only key passes `['read']`; a key that needs
+     * both passes `['read', 'write']`.
+     */
+    generate(label: string, scopes?: readonly string[]): ApiKeyGenerated;
+    /**
+     * Verify a wire token. Returns the auth result on success or null
+     * on any failure (unknown id, wrong secret, revoked key). Always
+     * runs the hash compare even when the id is unknown so the timing
+     * profile doesn't leak id presence.
+     */
+    verify(token: string): ApiKeyAuthResult | null;
+    list(): readonly ApiKeyRecord[];
+    /**
+     * Mark a key revoked. Returns the updated record, or null if no
+     * key with that id exists. Revoked records are kept on disk so
+     * audit lines reference a real id.
+     */
+    revoke(id: string): ApiKeyRecord | null;
+    /** Whether the store currently has at least one non-revoked key.
+     *  Used by `daemon serve` to refuse a TCP bind that would have no
+     *  way to authenticate any caller. */
+    hasActiveKey(): boolean;
+    /** Filesystem location — exposed for tests + CLI status output. */
+    get directory(): string;
+    private read;
+    private write;
+}
+//# sourceMappingURL=api-keys.d.ts.map

package/dist/daemon/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/daemon/api-keys.ts"],"names":[],"mappings":"AAwCA,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;4BAGwB;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;2CAEuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEjB,IAAI,GAAE;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAM;IAKrC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,SAAS,MAAM,EAAc,GAAG,eAAe;IA4B/E;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IA0C9C,IAAI,IAAI,SAAS,YAAY,EAAE;IAc/B;;;;OAIG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAYvC;;0CAEsC;IACtC,YAAY,IAAI,OAAO;IAIvB,mEAAmE;IACnE,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,OAAO,CAAC,IAAI;IAeZ,OAAO,CAAC,KAAK;CAUd"}

package/dist/daemon/api-keys.js

@@ -0,0 +1,222 @@
+// API-key store for the daemon's stage-2 AuthN. Keys live as
+// individual JSON files under ~/.moth/api-keys/ (mode 0700 dir,
+// 0600 files). Each file is one record:
+//
+//   {
+//     "id":           "<8-char hex prefix>",
+//     "label":        "ci-bot",
+//     "salt":         "<hex>",
+//     "hashedSecret": "<hex>",
+//     "createdAt":    "<iso>",
+//     "revokedAt":    "<iso?>",
+//     "scopes":       ["read", "write"]   // reserved; stage-2.5
+//   }
+//
+// The token presented on the wire is `<id>.<secret-hex>`; the
+// server splits on the dot, looks up the record by id, and
+// timing-safe-compares sha256(salt || secret) against
+// `hashedSecret`. Plain SHA-256 is fine because the secret is 32
+// bytes of CSPRNG output — brute force is not viable. No need
+// for Argon2id's CPU/memory cost on a high-entropy secret; the
+// cost there exists to slow human-passphrase guessing.
+import { randomBytes, timingSafeEqual, createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, resolve, sep } from 'node:path';
+/**
+ * The on-disk id of a key is exactly 8 lowercase hex chars — derived
+ * from the first 4 random bytes of the key's secret. Tokens that
+ * don't parse to this shape can never have been generated by us, so
+ * every read/write path validates against this regex BEFORE touching
+ * the filesystem. Without it, a malicious token like
+ * `../../etc/passwd.<anything>` would let `read()` attempt to stat
+ * arbitrary files inside the user's home — a path-traversal primitive
+ * that future bugs could compound into a real exploit even though
+ * the JSON.parse + hash check would still reject the contents.
+ */
+const ID_RE = /^[0-9a-f]{8}$/;
+export class ApiKeyStore {
+    dir;
+    constructor(opts = {}) {
+        this.dir = opts.dir ?? join(homedir(), '.moth', 'api-keys');
+        mkdirSync(this.dir, { recursive: true, mode: 0o700 });
+    }
+    /**
+     * Generate, persist, and return a new API key. The plaintext token
+     * is surfaced ONCE in the returned `token` field and never
+     * persisted — once the CLI has shown it to the operator there is
+     * no way to recover it.
+     *
+     * `scopes` defaults to `['write']` (full daemon access) so
+     * existing call sites that don't pass it keep their previous
+     * semantics. A read-only key passes `['read']`; a key that needs
+     * both passes `['read', 'write']`.
+     */
+    generate(label, scopes = ['write']) {
+        if (!label.trim())
+            throw new Error('API key label is required');
+        const VALID = new Set(['read', 'write']);
+        const normalised = Array.from(new Set(scopes.map((s) => s.trim()))).filter((s) => s.length > 0);
+        if (normalised.length === 0) {
+            throw new Error('at least one scope is required (read, write, or both)');
+        }
+        for (const s of normalised) {
+            if (!VALID.has(s)) {
+                throw new Error(`unknown scope "${s}"; valid: read, write`);
+            }
+        }
+        const secretBytes = randomBytes(32);
+        const id = secretBytes.subarray(0, 4).toString('hex'); // 8-char hex id
+        const salt = randomBytes(16).toString('hex');
+        const hashedSecret = hashSecret(salt, secretBytes.toString('hex'));
+        const record = {
+            id,
+            label: label.trim(),
+            salt,
+            hashedSecret,
+            createdAt: new Date().toISOString(),
+            scopes: normalised,
+        };
+        this.write(record);
+        return { record, token: `${id}.${secretBytes.toString('hex')}` };
+    }
+    /**
+     * Verify a wire token. Returns the auth result on success or null
+     * on any failure (unknown id, wrong secret, revoked key). Always
+     * runs the hash compare even when the id is unknown so the timing
+     * profile doesn't leak id presence.
+     */
+    verify(token) {
+        const dot = token.indexOf('.');
+        if (dot <= 0 || dot === token.length - 1) {
+            // Still hash a dummy to keep timing stable.
+            timingSafeCompareHex(hashSecret('00'.repeat(16), '00'.repeat(32)), hashSecret('00'.repeat(16), '00'.repeat(32)));
+            return null;
+        }
+        const id = token.slice(0, dot);
+        const secret = token.slice(dot + 1);
+        // Validate the id shape BEFORE any filesystem use. An id that
+        // doesn't match the canonical 8-hex format could never have been
+        // generated by us, so we reject it as failed-auth without
+        // touching the disk. Defense-in-depth against path-traversal
+        // tokens like `../../etc/passwd.<anything>`.
+        if (!ID_RE.test(id)) {
+            timingSafeCompareHex(hashSecret('00'.repeat(16), secret), hashSecret('00'.repeat(16), '00'.repeat(32)));
+            return null;
+        }
+        const record = this.read(id);
+        if (!record || record.revokedAt) {
+            // Run a dummy hash to keep the timing profile uniform.
+            timingSafeCompareHex(hashSecret('00'.repeat(16), secret), hashSecret('00'.repeat(16), '00'.repeat(32)));
+            return null;
+        }
+        const presented = hashSecret(record.salt, secret);
+        if (!timingSafeCompareHex(presented, record.hashedSecret))
+            return null;
+        return {
+            apiKeyId: record.id,
+            label: record.label,
+            scopes: record.scopes ?? ['write'],
+        };
+    }
+    list() {
+        if (!existsSync(this.dir))
+            return [];
+        const out = [];
+        for (const name of readdirSync(this.dir)) {
+            if (!name.endsWith('.key'))
+                continue;
+            try {
+                out.push(JSON.parse(readFileSync(join(this.dir, name), 'utf-8')));
+            }
+            catch {
+                /* skip unreadable / malformed entries */
+            }
+        }
+        return out;
+    }
+    /**
+     * Mark a key revoked. Returns the updated record, or null if no
+     * key with that id exists. Revoked records are kept on disk so
+     * audit lines reference a real id.
+     */
+    revoke(id) {
+        const existing = this.read(id);
+        if (!existing)
+            return null;
+        if (existing.revokedAt)
+            return existing;
+        const updated = {
+            ...existing,
+            revokedAt: new Date().toISOString(),
+        };
+        this.write(updated);
+        return updated;
+    }
+    /** Whether the store currently has at least one non-revoked key.
+     *  Used by `daemon serve` to refuse a TCP bind that would have no
+     *  way to authenticate any caller. */
+    hasActiveKey() {
+        return this.list().some((r) => !r.revokedAt);
+    }
+    /** Filesystem location — exposed for tests + CLI status output. */
+    get directory() {
+        return this.dir;
+    }
+    read(id) {
+        // Belt-and-suspenders: re-validate at the IO boundary. Callers
+        // are supposed to gate on ID_RE before getting here, but a
+        // future refactor could miss a path. Cheap to check twice.
+        if (!ID_RE.test(id))
+            return null;
+        const path = join(this.dir, `${id}.key`);
+        if (!isInside(this.dir, path))
+            return null;
+        if (!existsSync(path))
+            return null;
+        try {
+            return JSON.parse(readFileSync(path, 'utf-8'));
+        }
+        catch {
+            return null;
+        }
+    }
+    write(record) {
+        if (!ID_RE.test(record.id)) {
+            throw new Error(`refusing to write key with malformed id: ${record.id}`);
+        }
+        const path = join(this.dir, `${record.id}.key`);
+        if (!isInside(this.dir, path)) {
+            throw new Error(`refusing to write key outside ${this.dir}`);
+        }
+        writeFileSync(path, JSON.stringify(record, null, 2) + '\n', { mode: 0o600 });
+    }
+}
+/**
+ * True iff `child`, resolved against the filesystem, is the same as
+ * or a descendant of `parent`. Used as a defense-in-depth check
+ * after the id regex — even if `..` somehow appeared in a path
+ * (e.g. because Node added a quirk), this would catch it before any
+ * read/write touched a file outside the api-keys directory.
+ */
+function isInside(parent, child) {
+    const p = resolve(parent);
+    const c = resolve(child);
+    return c === p || c.startsWith(p + sep);
+}
+function hashSecret(saltHex, secretHex) {
+    const h = createHash('sha256');
+    h.update(Buffer.from(saltHex, 'hex'));
+    h.update(Buffer.from(secretHex, 'hex'));
+    return h.digest('hex');
+}
+function timingSafeCompareHex(a, b) {
+    if (a.length !== b.length)
+        return false;
+    const ab = Buffer.from(a, 'hex');
+    const bb = Buffer.from(b, 'hex');
+    if (ab.length !== bb.length)
+        return false;
+    return timingSafeEqual(ab, bb);
+}
+//# sourceMappingURL=api-keys.js.map

package/dist/daemon/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../src/daemon/api-keys.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,gEAAgE;AAChE,wCAAwC;AACxC,EAAE;AACF,MAAM;AACN,6CAA6C;AAC7C,gCAAgC;AAChC,+BAA+B;AAC/B,+BAA+B;AAC/B,+BAA+B;AAC/B,gCAAgC;AAChC,iEAAiE;AACjE,MAAM;AACN,EAAE;AACF,8DAA8D;AAC9D,2DAA2D;AAC3D,sDAAsD;AACtD,iEAAiE;AACjE,8DAA8D;AAC9D,+DAA+D;AAC/D,uDAAuD;AAEvD,OAAO,EAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAC,MAAM,aAAa,CAAC;AACrE,OAAO,EAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAC,MAAM,SAAS,CAAC;AACxF,OAAO,EAAC,OAAO,EAAC,MAAM,SAAS,CAAC;AAChC,OAAO,EAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAC,MAAM,WAAW,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,MAAM,KAAK,GAAG,eAAe,CAAC;AA8B9B,MAAM,OAAO,WAAW;IACL,GAAG,CAAS;IAE7B,YAAY,OAAuB,EAAE;QACnC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5D,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAa,EAAE,SAA4B,CAAC,OAAO,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB;QACvE,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,MAAM,MAAM,GAAiB;YAC3B,EAAE;YACF,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACnB,IAAI;YACJ,YAAY;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,UAAU;SACnB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,EAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAC,CAAC;IACjE,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAa;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,4CAA4C;YAC5C,oBAAoB,CAClB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAC5C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAC7C,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACpC,8DAA8D;QAC9D,iEAAiE;QACjE,0DAA0D;QAC1D,6DAA6D;QAC7D,6CAA6C;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,oBAAoB,CAClB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EACnC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAC7C,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YAChC,uDAAuD;YACvD,oBAAoB,CAClB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EACnC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAC7C,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC;SACnC,CAAC;IACJ,CAAC;IAED,IAAI;QACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YACrC,IAAI,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAiB,CAAC,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,EAAU;QACf,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,QAAQ,CAAC,SAAS;YAAE,OAAO,QAAQ,CAAC;QACxC,MAAM,OAAO,GAAiB;YAC5B,GAAG,QAAQ;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;0CAEsC;IACtC,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,mEAAmE;IACnE,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,IAAI,CAAC,EAAU;QACrB,+DAA+D;QAC/D,2DAA2D;QAC3D,2DAA2D;QAC3D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAiB,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAoB;QAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IAC7E,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,SAAiB;IACpD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAS,EAAE,CAAS;IAChD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC"}

package/dist/daemon/audit-log.d.ts

@@ -0,0 +1,65 @@
+export type AuditDecision = 'auto-approve' | 'user-approve' | 'user-denied';
+export interface AuditRpcEntry {
+    readonly ts: string;
+    readonly kind: 'rpc';
+    readonly wallet: string;
+    readonly network: string;
+    readonly verb: string;
+    readonly summary: string;
+    readonly details?: readonly string[];
+    readonly decision: AuditDecision;
+    readonly txHash?: string;
+    readonly contractAddress?: string;
+    readonly status?: string;
+    readonly error?: {
+        readonly code: string;
+        readonly message: string;
+    };
+    /** Connection transport ('unix' | 'tcp') the RPC arrived on. */
+    readonly transport?: 'unix' | 'tcp';
+    /** API key id once the connection authenticated; absent on Unix
+     *  transport without an auth handler. */
+    readonly apiKeyId?: string;
+    /** Connection-id (per-daemon-process) for correlating multiple
+     *  RPCs from the same client connection. */
+    readonly connId?: number;
+}
+export interface AuditLifecycleEntry {
+    readonly ts: string;
+    readonly kind: 'lifecycle';
+    readonly wallet: string;
+    readonly network: string;
+    readonly event: 'daemon-start' | 'daemon-stop' | 'socket-bound' | 'sync-complete' | 'shutdown-signal' | 'auth-success' | 'auth-failure';
+    readonly message?: string;
+    readonly apiKeyId?: string;
+}
+export type AuditEntry = AuditRpcEntry | AuditLifecycleEntry;
+export interface AuditLogOptions {
+    /** Override the default `~/.moth/` directory. Used by tests. */
+    readonly dir?: string;
+    /** Override the file name. Defaults to `daemon-audit.log`. */
+    readonly filename?: string;
+}
+export declare class AuditLog {
+    private readonly path;
+    constructor(opts?: AuditLogOptions);
+    /** Append one JSONL entry. Best-effort, silent on error. */
+    record(entry: AuditEntry): void;
+    /** Convenience: stamp `ts` with the current time and record an
+     *  RPC entry. Split from the lifecycle variant so TypeScript can
+     *  narrow on the discriminated union at the call site. */
+    recordRpc(entry: Omit<AuditRpcEntry, 'ts' | 'kind'>): void;
+    /** Same as `recordRpc` for lifecycle events. */
+    recordLifecycle(entry: Omit<AuditLifecycleEntry, 'ts' | 'kind'>): void;
+    /** Rotate the live file to `<path>.YYYY-MM-DD` when the file's
+     *  most-recent mtime is on a different day than today. Called
+     *  before every append; the per-write cost is one stat() syscall.
+     *  Idempotent — once today's file exists, the check returns
+     *  immediately. */
+    private maybeRotate;
+    /** Test helper: full path to the live log file. */
+    get filePath(): string;
+    /** Test helper: directory the log lives in. */
+    get directory(): string;
+}
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/daemon/audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../src/daemon/audit-log.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,cAAc,GAAG,aAAa,CAAC;AAE5E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAC,CAAC;IACnE,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACpC;6CACyC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;gDAC4C;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EACV,cAAc,GACd,aAAa,GACb,cAAc,GACd,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,cAAc,CAAC;IACnB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,mBAAmB,CAAC;AAE7D,MAAM,WAAW,eAAe;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAElB,IAAI,GAAE,eAAoB;IAMtC,4DAA4D;IAC5D,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAS/B;;8DAE0D;IAC1D,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI;IAI1D,gDAAgD;IAChD,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI;IAItE;;;;uBAImB;IACnB,OAAO,CAAC,WAAW;IAcnB,mDAAmD;IACnD,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,+CAA+C;IAC/C,IAAI,SAAS,IAAI,MAAM,CAEtB;CACF"}

package/dist/daemon/audit-log.js

@@ -0,0 +1,73 @@
+// Append-only JSONL audit log for the wallet daemon. One JSON object
+// per line. Rotated daily — when the first write of the day sees a
+// log file last modified on an earlier day, it renames the file to
+// `daemon-audit.log.YYYY-MM-DD` and starts a fresh one.
+//
+// Stage-1.5 implementation. Stage 3+ will add hash-chaining for
+// tamper evidence (Trillian-style); for now the file is plain JSONL
+// and trusts the host's filesystem mode (`0600`).
+//
+// All writes are best-effort and silent on error: the audit log
+// must never crash the daemon. Errors during write are dropped on
+// the floor — if they matter, you'll notice the missing entries
+// later.
+import { appendFileSync, existsSync, mkdirSync, renameSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+export class AuditLog {
+    path;
+    constructor(opts = {}) {
+        const dir = opts.dir ?? join(homedir(), '.moth');
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        this.path = join(dir, opts.filename ?? 'daemon-audit.log');
+    }
+    /** Append one JSONL entry. Best-effort, silent on error. */
+    record(entry) {
+        this.maybeRotate();
+        try {
+            appendFileSync(this.path, `${JSON.stringify(entry)}\n`, { mode: 0o600 });
+        }
+        catch {
+            /* audit must never crash the daemon */
+        }
+    }
+    /** Convenience: stamp `ts` with the current time and record an
+     *  RPC entry. Split from the lifecycle variant so TypeScript can
+     *  narrow on the discriminated union at the call site. */
+    recordRpc(entry) {
+        this.record({ ...entry, kind: 'rpc', ts: new Date().toISOString() });
+    }
+    /** Same as `recordRpc` for lifecycle events. */
+    recordLifecycle(entry) {
+        this.record({ ...entry, kind: 'lifecycle', ts: new Date().toISOString() });
+    }
+    /** Rotate the live file to `<path>.YYYY-MM-DD` when the file's
+     *  most-recent mtime is on a different day than today. Called
+     *  before every append; the per-write cost is one stat() syscall.
+     *  Idempotent — once today's file exists, the check returns
+     *  immediately. */
+    maybeRotate() {
+        if (!existsSync(this.path))
+            return;
+        try {
+            const stat = statSync(this.path);
+            const today = new Date().toISOString().slice(0, 10);
+            const fileDay = stat.mtime.toISOString().slice(0, 10);
+            if (fileDay !== today) {
+                renameSync(this.path, `${this.path}.${fileDay}`);
+            }
+        }
+        catch {
+            /* skip rotation on any error; the next write will retry */
+        }
+    }
+    /** Test helper: full path to the live log file. */
+    get filePath() {
+        return this.path;
+    }
+    /** Test helper: directory the log lives in. */
+    get directory() {
+        return dirname(this.path);
+    }
+}
+//# sourceMappingURL=audit-log.js.map

package/dist/daemon/audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../src/daemon/audit-log.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,mEAAmE;AACnE,mEAAmE;AACnE,wDAAwD;AACxD,EAAE;AACF,gEAAgE;AAChE,oEAAoE;AACpE,kDAAkD;AAClD,EAAE;AACF,gEAAgE;AAChE,kEAAkE;AAClE,gEAAgE;AAChE,SAAS;AAET,OAAO,EAAC,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAC,MAAM,SAAS,CAAC;AACpF,OAAO,EAAC,OAAO,EAAC,MAAM,SAAS,CAAC;AAChC,OAAO,EAAC,OAAO,EAAE,IAAI,EAAC,MAAM,WAAW,CAAC;AAqDxC,MAAM,OAAO,QAAQ;IACF,IAAI,CAAS;IAE9B,YAAY,OAAwB,EAAE;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QACjD,SAAS,CAAC,GAAG,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,CAAC;IAC7D,CAAC;IAED,4DAA4D;IAC5D,MAAM,CAAC,KAAiB;QACtB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;IAED;;8DAE0D;IAC1D,SAAS,CAAC,KAAyC;QACjD,IAAI,CAAC,MAAM,CAAC,EAAC,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAC,CAAC,CAAC;IACrE,CAAC;IAED,gDAAgD;IAChD,eAAe,CAAC,KAA+C;QAC7D,IAAI,CAAC,MAAM,CAAC,EAAC,GAAG,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAC,CAAC,CAAC;IAC3E,CAAC;IAED;;;;uBAImB;IACX,WAAW;QACjB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACtB,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,+CAA+C;IAC/C,IAAI,SAAS;QACX,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/daemon/client.d.ts

@@ -0,0 +1,63 @@
+import type { DaemonBind } from './server.js';
+export interface DaemonClient {
+    /** Issue an RPC; resolves with the daemon's result or rejects with a
+     *  DaemonProtocolError carrying the daemon-reported code+message. */
+    call<R = unknown>(method: string, params?: unknown, opts?: {
+        timeoutMs?: number;
+    }): Promise<R>;
+    /** Close the underlying socket. In-flight calls reject with code CLOSED. */
+    close(): void;
+    readonly closed: boolean;
+    /** Daemon-reported build identifier from the version handshake. */
+    readonly daemonVersion: string;
+    /** API key id this client authenticated as. Present when a `token`
+     *  was passed to `connectDaemonBind`; absent for Unix-transport
+     *  clients hitting a daemon with no auth handler. */
+    readonly apiKeyId?: string;
+}
+export interface ConnectDaemonOptions {
+    /** Override the per-call default. Individual call() invocations can
+     *  still pass their own timeoutMs. */
+    readonly defaultTimeoutMs?: number;
+    /** Optional logger hook. Defaults to silent. */
+    readonly onLog?: (level: 'info' | 'warn' | 'error', msg: string) => void;
+    /**
+     * Stage-2 token in `<id>.<secret>` format. When set, the client
+     * issues an `auth` RPC after the version handshake and returns
+     * null if it fails (treating "bad token" the same as "no daemon"
+     * — see the connectDaemon docstring). Omit on Unix-transport
+     * connections to a daemon with no auth handler.
+     */
+    readonly token?: string;
+}
+/**
+ * Try to connect to the daemon at the given Unix-socket path. Stage-1
+ * entry point — kept for backwards compatibility. For TCP transports
+ * use `connectDaemonTcp(host, port)` or the unified
+ * `connectDaemonBind(bind)`.
+ *
+ * Returns:
+ *   - DaemonClient on successful connect + handshake
+ *   - null if the file doesn't exist, the connect is refused, or the
+ *     handshake reports an incompatible protocol version
+ *
+ * Throws only on genuinely-unexpected conditions (filesystem error,
+ * malformed daemon response). Network-style failures are folded into
+ * null so the CLI can fall back to standalone without a try/catch.
+ */
+export declare function connectDaemon(socketPath: string, opts?: ConnectDaemonOptions): Promise<DaemonClient | null>;
+/**
+ * Stage-2 entry point. Connect to a daemon listening on loopback TCP
+ * (or, at stage 3, a TLS-terminating reverse proxy in front of the
+ * daemon's loopback bind). Same fall-back-to-null semantics as
+ * `connectDaemon`.
+ */
+export declare function connectDaemonTcp(host: string, port: number, opts?: ConnectDaemonOptions): Promise<DaemonClient | null>;
+/**
+ * Transport-agnostic entry point. Both `connectDaemon` and
+ * `connectDaemonTcp` route through here. The handshake + dispatcher
+ * setup is identical across transports — only the underlying socket
+ * factory differs.
+ */
+export declare function connectDaemonBind(bind: DaemonBind, opts?: ConnectDaemonOptions): Promise<DaemonClient | null>;
+//# sourceMappingURL=client.d.ts.map

package/dist/daemon/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/daemon/client.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B;yEACqE;IACrE,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7F,4EAA4E;IAC5E,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;yDAEqD;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC;0CACsC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,gDAAgD;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACzE;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAE9B;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAE9B;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CA2D9B"}