@shroud-fi/agent-runtime 0.1.0

package/dist/esm/browser.js

@@ -0,0 +1,87 @@
+/**
+ * createShroudAgentFromBrowserWallet — browser / EIP-1193 wallet entry point.
+ *
+ * Flow:
+ *   1. Ask the wallet to sign BROWSER_KEY_MESSAGE via personal_sign.
+ *   2. HKDF the signature bytes to a deterministic 32-byte master seed.
+ *   3. Delegate to createShroudAgent.
+ *
+ * The same wallet always produces the same agent identity — no localStorage,
+ * no persistence. Bumping BROWSER_KEY_MESSAGE forks the identity space.
+ *
+ * Privacy invariants:
+ *   - No console.* anywhere.
+ *   - The signature bytes never appear in error messages or stack frames.
+ *   - The derived master seed is passed to createShroudAgent and immediately
+ *     consumed by createAgentIdentity; no caller-visible reference is retained.
+ */
+import { hkdf } from '@noble/hashes/hkdf';
+import { sha256 } from '@noble/hashes/sha256';
+import { createShroudAgent } from './factory.js';
+import { BROWSER_KEY_MESSAGE, BROWSER_MASTER_SEED_LENGTH, HKDF_BROWSER_INFO, HKDF_BROWSER_SALT, } from './constants.js';
+import { BrowserWalletSignatureRejectedError, MissingBrowserWalletError, } from './errors.js';
+export { BROWSER_KEY_MESSAGE, HKDF_BROWSER_SALT, HKDF_BROWSER_INFO, } from './constants.js';
+/**
+ * Decode a 0x-prefixed hex string (e.g. an EIP-191 signature) into bytes.
+ * Returns null on malformed input — callers map this to a privacy-safe error
+ * rather than surfacing the raw value.
+ */
+function hexToBytesSafe(hex) {
+    if (typeof hex !== 'string')
+        return null;
+    const stripped = hex.startsWith('0x') ? hex.slice(2) : hex;
+    if (stripped.length === 0 || stripped.length % 2 !== 0)
+        return null;
+    const out = new Uint8Array(stripped.length / 2);
+    for (let i = 0; i < out.length; i++) {
+        const byte = parseInt(stripped.slice(i * 2, i * 2 + 2), 16);
+        if (Number.isNaN(byte))
+            return null;
+        out[i] = byte;
+    }
+    return out;
+}
+/**
+ * Build a ShroudAgent from a browser wallet adapter (e.g. MetaMask).
+ *
+ * @throws MissingBrowserWalletError if the adapter is missing required fields.
+ * @throws BrowserWalletSignatureRejectedError if the signature request is rejected.
+ */
+export async function createShroudAgentFromBrowserWallet(args) {
+    const wallet = args.wallet;
+    if (wallet === undefined ||
+        wallet === null ||
+        typeof wallet.signMessage !== 'function' ||
+        typeof wallet.address !== 'string' ||
+        !wallet.address.startsWith('0x')) {
+        throw new MissingBrowserWalletError();
+    }
+    let signature;
+    try {
+        signature = await wallet.signMessage(BROWSER_KEY_MESSAGE);
+    }
+    catch {
+        // Never surface the underlying rejection reason — could embed wallet
+        // metadata or user prompt text.
+        throw new BrowserWalletSignatureRejectedError();
+    }
+    const sigBytes = hexToBytesSafe(signature);
+    if (sigBytes === null || sigBytes.length === 0) {
+        throw new BrowserWalletSignatureRejectedError();
+    }
+    // HKDF-SHA256: extract + expand the signature into a deterministic 32-byte
+    // master seed. The signature is the IKM, not the salt — salt and info are
+    // constant version tags.
+    const masterSeed = hkdf(sha256, sigBytes, HKDF_BROWSER_SALT, HKDF_BROWSER_INFO, BROWSER_MASTER_SEED_LENGTH);
+    const config = {
+        masterSeed,
+        transport: args.transport,
+        startBlock: args.startBlock,
+        ...(args.stealthContract !== undefined
+            ? { stealthContract: args.stealthContract }
+            : {}),
+        ...(args.finality !== undefined ? { finality: args.finality } : {}),
+    };
+    return createShroudAgent(config);
+}
+//# sourceMappingURL=browser.js.map

package/dist/esm/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mCAAmC,EACnC,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAUxB;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,IAA4C;IAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,CAAC,WAAW,KAAK,UAAU;QACxC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,yBAAyB,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,gCAAgC;QAChC,MAAM,IAAI,mCAAmC,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,mCAAmC,EAAE,CAAC;IAClD,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,yBAAyB;IACzB,MAAM,UAAU,GAAG,IAAI,CACrB,MAAM,EACN,QAAQ,EACR,iBAAiB,EACjB,iBAAiB,EACjB,0BAA0B,CAC3B,CAAC;IAEF,MAAM,MAAM,GAAG;QACb,UAAU;QACV,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;IAEF,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC"}

package/dist/esm/constants.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Agent runtime constants.
+ *
+ * BROWSER_KEY_MESSAGE is the personal-sign payload the browser factory asks
+ * MetaMask (or any EIP-1193 wallet) to sign. It is HKDF'd into a deterministic
+ * 32-byte master seed so the same wallet always produces the same agent
+ * identity — no localStorage, no key persistence.
+ *
+ * Versioning the message string is load-bearing: bumping `-v1` to `-v2` will
+ * derive a different identity even for the same wallet. Treat as a one-way
+ * cryptographic input; never rename without a migration story.
+ */
+export declare const BROWSER_KEY_MESSAGE = "ShroudFi-Demo-Key-Derivation-v1";
+export declare const HKDF_BROWSER_SALT: Uint8Array<ArrayBuffer>;
+export declare const HKDF_BROWSER_INFO: Uint8Array<ArrayBuffer>;
+export declare const BROWSER_MASTER_SEED_LENGTH = 32;
+//# sourceMappingURL=constants.d.ts.map

package/dist/esm/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,mBAAmB,oCACG,CAAC;AAEpC,eAAO,MAAM,iBAAiB,yBAA+C,CAAC;AAC9E,eAAO,MAAM,iBAAiB,yBAAgD,CAAC;AAE/E,eAAO,MAAM,0BAA0B,KAAK,CAAC"}

package/dist/esm/constants.js

@@ -0,0 +1,17 @@
+/**
+ * Agent runtime constants.
+ *
+ * BROWSER_KEY_MESSAGE is the personal-sign payload the browser factory asks
+ * MetaMask (or any EIP-1193 wallet) to sign. It is HKDF'd into a deterministic
+ * 32-byte master seed so the same wallet always produces the same agent
+ * identity — no localStorage, no key persistence.
+ *
+ * Versioning the message string is load-bearing: bumping `-v1` to `-v2` will
+ * derive a different identity even for the same wallet. Treat as a one-way
+ * cryptographic input; never rename without a migration story.
+ */
+export const BROWSER_KEY_MESSAGE = 'ShroudFi-Demo-Key-Derivation-v1';
+export const HKDF_BROWSER_SALT = new TextEncoder().encode('ShroudFi-Demo-v1');
+export const HKDF_BROWSER_INFO = new TextEncoder().encode('agent-master-seed');
+export const BROWSER_MASTER_SEED_LENGTH = 32;
+//# sourceMappingURL=constants.js.map

package/dist/esm/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,iCAAiC,CAAC;AAEpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC"}

package/dist/esm/errors.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Privacy-safe error classes for @shroud-fi/agent-runtime.
+ *
+ * Invariants (mirrored from @shroud-fi/scanning + @shroud-fi/payments):
+ *   - No 32-byte hex (key material) in any message.
+ *   - No ephemeral pubkey bytes in any message.
+ *   - No raw signature bytes in any message.
+ *   - No transfer amounts in any message.
+ *   - Messages carry short, structured reasons only.
+ */
+export declare class AgentRuntimeError extends Error {
+    readonly name: string;
+    constructor(message: string);
+}
+export declare class AgentNotStartedError extends AgentRuntimeError {
+    readonly name: string;
+    constructor();
+}
+export declare class AgentAlreadyStartedError extends AgentRuntimeError {
+    readonly name: string;
+    constructor();
+}
+export declare class MissingBrowserWalletError extends AgentRuntimeError {
+    readonly name: string;
+    constructor();
+}
+export declare class BrowserWalletSignatureRejectedError extends AgentRuntimeError {
+    readonly name: string;
+    constructor();
+}
+/**
+ * Thrown when `sweepViaRelayer` is called but no relayer contract has been
+ * registered for the agent's chain. Callers can pass an explicit
+ * `relayerContract` to override the lookup.
+ */
+export declare class RelayerContractNotConfiguredError extends AgentRuntimeError {
+    readonly name: string;
+    constructor();
+}
+/**
+ * P5.1 — thrown when the caller tries to use the ETH gasless sweep path but
+ * has not provided a `selfHostEndpoint`. ETH gasless requires a self-host
+ * relayer service that builds + broadcasts the EIP-7702 type-0x04 tx; there
+ * is no third-party fallback (Gelato's 7702 surface is wallet-shaped, not
+ * relayer-shaped).
+ */
+export declare class EthRelayerEndpointRequiredError extends AgentRuntimeError {
+    readonly name: string;
+    constructor();
+}
+/**
+ * P5.1 — thrown when no ShroudFiEthRelayer contract has been registered for
+ * the agent's chain and the caller did not pass `ethRelayerContract` to
+ * override the manifest lookup.
+ */
+export declare class EthRelayerContractNotConfiguredError extends AgentRuntimeError {
+    readonly name: string;
+    constructor();
+}
+/**
+ * @deprecated Retained as a soft-removed export — callers updated to use
+ * EthRelayerEndpointRequiredError or the gasless ETH path directly. P5.1
+ * activated the previously-stubbed ETH-via-relayer path.
+ */
+export declare class RelayerNotAvailableForETHError extends AgentRuntimeError {
+    readonly name: string;
+    constructor();
+}
+/**
+ * M3 — thrown when `register()` is called but the agent's registrant wallet
+ * already has a non-empty stealth meta-address on file in the canonical
+ * ERC-6538 registry for scheme 1. Callers should treat this as benign and
+ * skip the registration tx; `ensureRegistered` does this automatically.
+ *
+ * Privacy: the registrant wallet address is NOT placed in `.message` — it
+ * would link the agent's runtime wallet to the error log. Callers who need
+ * to display the wallet must source it from `transport.walletClient.account`
+ * themselves.
+ */
+export declare class AlreadyRegisteredError extends AgentRuntimeError {
+    readonly name: string;
+    constructor();
+}
+/**
+ * M3 — wraps an underlying error thrown while `ensureRegistered` runs inside
+ * `agent.sendToWallet` with `autoRegister: true`. Preserves the original via
+ * the standard `cause` chain so callers can introspect without parsing
+ * strings.
+ *
+ * Privacy: the inner error MUST itself comply with the runtime's no-amount /
+ * no-wallet / no-key rule. This wrapper never inlines key, signature, or
+ * amount material into its own message.
+ */
+export declare class AutoRegistrationFailedError extends AgentRuntimeError {
+    readonly name: string;
+    constructor(cause?: unknown);
+}
+/**
+ * M3 — thrown when `register()` is invoked on a transport that has no
+ * `walletClient` (or no account on the walletClient). Registration is a state
+ * change tx that needs a signer; read-only transports cannot register.
+ */
+export declare class RegistrationRequiresWalletError extends AgentRuntimeError {
+    readonly name: string;
+    constructor();
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/esm/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,SAAkB,IAAI,EAAE,MAAM,CAAuB;gBACzC,OAAO,EAAE,MAAM;CAG5B;AAED,qBAAa,oBAAqB,SAAQ,iBAAiB;IACzD,SAAkB,IAAI,EAAE,MAAM,CAA0B;;CAIzD;AAED,qBAAa,wBAAyB,SAAQ,iBAAiB;IAC7D,SAAkB,IAAI,EAAE,MAAM,CAA8B;;CAI7D;AAED,qBAAa,yBAA0B,SAAQ,iBAAiB;IAC9D,SAAkB,IAAI,EAAE,MAAM,CAA+B;;CAI9D;AAED,qBAAa,mCAAoC,SAAQ,iBAAiB;IACxE,SAAkB,IAAI,EAAE,MAAM,CAAyC;;CAIxE;AAED;;;;GAIG;AACH,qBAAa,iCAAkC,SAAQ,iBAAiB;IACtE,SAAkB,IAAI,EAAE,MAAM,CAAuC;;CAItE;AAED;;;;;;GAMG;AACH,qBAAa,+BAAgC,SAAQ,iBAAiB;IACpE,SAAkB,IAAI,EAAE,MAAM,CAAqC;;CAMpE;AAED;;;;GAIG;AACH,qBAAa,oCAAqC,SAAQ,iBAAiB;IACzE,SAAkB,IAAI,EAAE,MAAM,CAA0C;;CAIzE;AAED;;;;GAIG;AACH,qBAAa,8BAA+B,SAAQ,iBAAiB;IACnE,SAAkB,IAAI,EAAE,MAAM,CAAoC;;CAInE;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAuB,SAAQ,iBAAiB;IAC3D,SAAkB,IAAI,EAAE,MAAM,CAA4B;;CAI3D;AAED;;;;;;;;;GASG;AACH,qBAAa,2BAA4B,SAAQ,iBAAiB;IAChE,SAAkB,IAAI,EAAE,MAAM,CAAiC;gBACnD,KAAK,CAAC,EAAE,OAAO;CAS5B;AAED;;;;GAIG;AACH,qBAAa,+BAAgC,SAAQ,iBAAiB;IACpE,SAAkB,IAAI,EAAE,MAAM,CAAqC;;CAIpE"}

package/dist/esm/errors.js

@@ -0,0 +1,137 @@
+/**
+ * Privacy-safe error classes for @shroud-fi/agent-runtime.
+ *
+ * Invariants (mirrored from @shroud-fi/scanning + @shroud-fi/payments):
+ *   - No 32-byte hex (key material) in any message.
+ *   - No ephemeral pubkey bytes in any message.
+ *   - No raw signature bytes in any message.
+ *   - No transfer amounts in any message.
+ *   - Messages carry short, structured reasons only.
+ */
+export class AgentRuntimeError extends Error {
+    name = 'AgentRuntimeError';
+    constructor(message) {
+        super(message);
+    }
+}
+export class AgentNotStartedError extends AgentRuntimeError {
+    name = 'AgentNotStartedError';
+    constructor() {
+        super('Agent has not been started — call start() first');
+    }
+}
+export class AgentAlreadyStartedError extends AgentRuntimeError {
+    name = 'AgentAlreadyStartedError';
+    constructor() {
+        super('Agent already started — call stop() before start() again');
+    }
+}
+export class MissingBrowserWalletError extends AgentRuntimeError {
+    name = 'MissingBrowserWalletError';
+    constructor() {
+        super('Browser wallet adapter missing required signMessage or address');
+    }
+}
+export class BrowserWalletSignatureRejectedError extends AgentRuntimeError {
+    name = 'BrowserWalletSignatureRejectedError';
+    constructor() {
+        super('Browser wallet rejected signature request');
+    }
+}
+/**
+ * Thrown when `sweepViaRelayer` is called but no relayer contract has been
+ * registered for the agent's chain. Callers can pass an explicit
+ * `relayerContract` to override the lookup.
+ */
+export class RelayerContractNotConfiguredError extends AgentRuntimeError {
+    name = 'RelayerContractNotConfiguredError';
+    constructor() {
+        super('Relayer contract not configured for this chain');
+    }
+}
+/**
+ * P5.1 — thrown when the caller tries to use the ETH gasless sweep path but
+ * has not provided a `selfHostEndpoint`. ETH gasless requires a self-host
+ * relayer service that builds + broadcasts the EIP-7702 type-0x04 tx; there
+ * is no third-party fallback (Gelato's 7702 surface is wallet-shaped, not
+ * relayer-shaped).
+ */
+export class EthRelayerEndpointRequiredError extends AgentRuntimeError {
+    name = 'EthRelayerEndpointRequiredError';
+    constructor() {
+        super('ETH gasless sweep requires a self-host relayer endpoint — pass relayerOptions.selfHostEndpoint');
+    }
+}
+/**
+ * P5.1 — thrown when no ShroudFiEthRelayer contract has been registered for
+ * the agent's chain and the caller did not pass `ethRelayerContract` to
+ * override the manifest lookup.
+ */
+export class EthRelayerContractNotConfiguredError extends AgentRuntimeError {
+    name = 'EthRelayerContractNotConfiguredError';
+    constructor() {
+        super('ShroudFiEthRelayer contract not configured for this chain');
+    }
+}
+/**
+ * @deprecated Retained as a soft-removed export — callers updated to use
+ * EthRelayerEndpointRequiredError or the gasless ETH path directly. P5.1
+ * activated the previously-stubbed ETH-via-relayer path.
+ */
+export class RelayerNotAvailableForETHError extends AgentRuntimeError {
+    name = 'RelayerNotAvailableForETHError';
+    constructor() {
+        super('Relayer sweep does not support ETH — use direct sweep or ERC-20');
+    }
+}
+/**
+ * M3 — thrown when `register()` is called but the agent's registrant wallet
+ * already has a non-empty stealth meta-address on file in the canonical
+ * ERC-6538 registry for scheme 1. Callers should treat this as benign and
+ * skip the registration tx; `ensureRegistered` does this automatically.
+ *
+ * Privacy: the registrant wallet address is NOT placed in `.message` — it
+ * would link the agent's runtime wallet to the error log. Callers who need
+ * to display the wallet must source it from `transport.walletClient.account`
+ * themselves.
+ */
+export class AlreadyRegisteredError extends AgentRuntimeError {
+    name = 'AlreadyRegisteredError';
+    constructor() {
+        super('Agent is already registered in the ERC-6538 registry');
+    }
+}
+/**
+ * M3 — wraps an underlying error thrown while `ensureRegistered` runs inside
+ * `agent.sendToWallet` with `autoRegister: true`. Preserves the original via
+ * the standard `cause` chain so callers can introspect without parsing
+ * strings.
+ *
+ * Privacy: the inner error MUST itself comply with the runtime's no-amount /
+ * no-wallet / no-key rule. This wrapper never inlines key, signature, or
+ * amount material into its own message.
+ */
+export class AutoRegistrationFailedError extends AgentRuntimeError {
+    name = 'AutoRegistrationFailedError';
+    constructor(cause) {
+        super('Auto-registration failed');
+        // Use the standard ES2022 `cause` slot. Avoid serializing the inner
+        // error into the message itself — the privacy invariant tests would
+        // catch a leak if the wrapped error embedded sensitive bytes.
+        if (cause !== undefined) {
+            this.cause = cause;
+        }
+    }
+}
+/**
+ * M3 — thrown when `register()` is invoked on a transport that has no
+ * `walletClient` (or no account on the walletClient). Registration is a state
+ * change tx that needs a signer; read-only transports cannot register.
+ */
+export class RegistrationRequiresWalletError extends AgentRuntimeError {
+    name = 'RegistrationRequiresWalletError';
+    constructor() {
+        super('Registration requires a walletClient with an account');
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/esm/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACxB,IAAI,GAAW,mBAAmB,CAAC;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,iBAAiB;IACvC,IAAI,GAAW,sBAAsB,CAAC;IACxD;QACE,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,iBAAiB;IAC3C,IAAI,GAAW,0BAA0B,CAAC;IAC5D;QACE,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACpE,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,iBAAiB;IAC5C,IAAI,GAAW,2BAA2B,CAAC;IAC7D;QACE,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC1E,CAAC;CACF;AAED,MAAM,OAAO,mCAAoC,SAAQ,iBAAiB;IACtD,IAAI,GAAW,qCAAqC,CAAC;IACvE;QACE,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACrD,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,iCAAkC,SAAQ,iBAAiB;IACpD,IAAI,GAAW,mCAAmC,CAAC;IACrE;QACE,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC1D,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,+BAAgC,SAAQ,iBAAiB;IAClD,IAAI,GAAW,iCAAiC,CAAC;IACnE;QACE,KAAK,CACH,gGAAgG,CACjG,CAAC;IACJ,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,oCAAqC,SAAQ,iBAAiB;IACvD,IAAI,GAAW,sCAAsC,CAAC;IACxE;QACE,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACrE,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,8BAA+B,SAAQ,iBAAiB;IACjD,IAAI,GAAW,gCAAgC,CAAC;IAClE;QACE,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC3E,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAuB,SAAQ,iBAAiB;IACzC,IAAI,GAAW,wBAAwB,CAAC;IAC1D;QACE,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAChE,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,2BAA4B,SAAQ,iBAAiB;IAC9C,IAAI,GAAW,6BAA6B,CAAC;IAC/D,YAAY,KAAe;QACzB,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAClC,oEAAoE;QACpE,oEAAoE;QACpE,8DAA8D;QAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACvB,IAA4B,CAAC,KAAK,GAAG,KAAK,CAAC;QAC9C,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,+BAAgC,SAAQ,iBAAiB;IAClD,IAAI,GAAW,iCAAiC,CAAC;IACnE;QACE,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAChE,CAAC;CACF"}

package/dist/esm/factory.d.ts

@@ -0,0 +1,19 @@
+/**
+ * createShroudAgent — server / Node entry point.
+ *
+ * Validates configuration, resolves the stealth contract address from the
+ * transport's chain, builds an AgentIdentity from the optional master seed,
+ * and constructs a ShroudAgent.
+ *
+ * Privacy: no seed or key bytes ever appear in error messages. Validation
+ * errors are short structured reasons only.
+ */
+import { ShroudAgent } from './agent.js';
+import type { ShroudAgentConfig } from './types.js';
+/**
+ * Build a fully-wired ShroudAgent from a config.
+ *
+ * @throws AgentRuntimeError on missing/invalid transport or negative startBlock.
+ */
+export declare function createShroudAgent(config: ShroudAgentConfig): ShroudAgent;
+//# sourceMappingURL=factory.d.ts.map

package/dist/esm/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CA2BxE"}

package/dist/esm/factory.js

@@ -0,0 +1,43 @@
+/**
+ * createShroudAgent — server / Node entry point.
+ *
+ * Validates configuration, resolves the stealth contract address from the
+ * transport's chain, builds an AgentIdentity from the optional master seed,
+ * and constructs a ShroudAgent.
+ *
+ * Privacy: no seed or key bytes ever appear in error messages. Validation
+ * errors are short structured reasons only.
+ */
+import { createAgentIdentity } from '@shroud-fi/core';
+import { getShroudFiStealth } from '@shroud-fi/transport';
+import { ShroudAgent } from './agent.js';
+import { AgentRuntimeError } from './errors.js';
+/**
+ * Build a fully-wired ShroudAgent from a config.
+ *
+ * @throws AgentRuntimeError on missing/invalid transport or negative startBlock.
+ */
+export function createShroudAgent(config) {
+    if (config.transport === undefined || config.transport.publicClient === undefined) {
+        throw new AgentRuntimeError('transport.publicClient is required');
+    }
+    if (config.startBlock < 0n) {
+        throw new AgentRuntimeError('startBlock must be non-negative');
+    }
+    const chainId = config.transport.chain.id;
+    const stealthContract = config.stealthContract ?? getShroudFiStealth(chainId);
+    const identity = createAgentIdentity(config.masterSeed);
+    const opts = {
+        identity,
+        transport: config.transport,
+        stealthContract,
+        startBlock: config.startBlock,
+        ...(config.finality !== undefined ? { finality: config.finality } : {}),
+        ...(config.announcer !== undefined ? { announcer: config.announcer } : {}),
+        ...(config.autoRegister !== undefined
+            ? { autoRegister: config.autoRegister }
+            : {}),
+    };
+    return new ShroudAgent(opts);
+}
+//# sourceMappingURL=factory.js.map

package/dist/esm/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAClF,MAAM,IAAI,iBAAiB,CAAC,oCAAoC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,iBAAiB,CAAC,iCAAiC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1C,MAAM,eAAe,GACnB,MAAM,CAAC,eAAe,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAExD,MAAM,IAAI,GAA+B;QACvC,QAAQ;QACR,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,eAAe;QACf,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE;YACvC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/esm/index.d.ts

@@ -0,0 +1,6 @@
+export { ShroudAgent } from './agent.js';
+export { createShroudAgent } from './factory.js';
+export { createShroudAgentFromBrowserWallet, BROWSER_KEY_MESSAGE, HKDF_BROWSER_SALT, HKDF_BROWSER_INFO, } from './browser.js';
+export type { ShroudAgentConfig, ShroudAgentStartOptions, BrowserWalletAdapter, AgentSweepResult, AgentRelayerSweepOptions, AgentRelayerSweepResult, AgentRelayerEthSweepOptions, AgentRelayerEthSweepResult, } from './types.js';
+export { AgentRuntimeError, AgentNotStartedError, AgentAlreadyStartedError, MissingBrowserWalletError, BrowserWalletSignatureRejectedError, RelayerNotAvailableForETHError, RelayerContractNotConfiguredError, EthRelayerEndpointRequiredError, EthRelayerContractNotConfiguredError, AlreadyRegisteredError, AutoRegistrationFailedError, RegistrationRequiresWalletError, } from './errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,kCAAkC,EAClC,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,iCAAiC,EACjC,+BAA+B,EAC/B,oCAAoC,EACpC,sBAAsB,EACtB,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,aAAa,CAAC"}

package/dist/esm/index.js

@@ -0,0 +1,16 @@
+// Public surface — @shroud-fi/agent-runtime
+//
+// Phase 4: ergonomic wrapper around @shroud-fi/core + @shroud-fi/payments +
+// @shroud-fi/scanning + @shroud-fi/transport. Two construction paths:
+//   - createShroudAgent(config) — server / Node / AI agent (deterministic seed)
+//   - createShroudAgentFromBrowserWallet(args) — browser (MetaMask-derived seed)
+//
+// Re-exports trimmed to what callers actually need; deeper helpers stay
+// inside the upstream packages.
+// Class + factories
+export { ShroudAgent } from './agent.js';
+export { createShroudAgent } from './factory.js';
+export { createShroudAgentFromBrowserWallet, BROWSER_KEY_MESSAGE, HKDF_BROWSER_SALT, HKDF_BROWSER_INFO, } from './browser.js';
+// Errors
+export { AgentRuntimeError, AgentNotStartedError, AgentAlreadyStartedError, MissingBrowserWalletError, BrowserWalletSignatureRejectedError, RelayerNotAvailableForETHError, RelayerContractNotConfiguredError, EthRelayerEndpointRequiredError, EthRelayerContractNotConfiguredError, AlreadyRegisteredError, AutoRegistrationFailedError, RegistrationRequiresWalletError, } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,4EAA4E;AAC5E,sEAAsE;AACtE,gFAAgF;AAChF,iFAAiF;AACjF,EAAE;AACF,wEAAwE;AACxE,gCAAgC;AAEhC,oBAAoB;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,kCAAkC,EAClC,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AActB,SAAS;AACT,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,iCAAiC,EACjC,+BAA+B,EAC/B,oCAAoC,EACpC,sBAAsB,EACtB,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,aAAa,CAAC"}

package/dist/esm/types.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Public types for @shroud-fi/agent-runtime.
+ *
+ * The runtime composes @shroud-fi/core + @shroud-fi/payments + @shroud-fi/scanning
+ * + @shroud-fi/transport behind a single ShroudAgent class. Types stay narrow:
+ * no leaky internal shapes from scanner detector or payment receipt parsing.
+ */
+import type { Address, Hex } from 'viem';
+import type { ShroudFiTransport } from '@shroud-fi/transport';
+import type { DetectedPayment, FinalityLevel } from '@shroud-fi/scanning';
+import type { SweepReceipt } from '@shroud-fi/payments';
+/**
+ * Configuration for createShroudAgent (Path 1 — server / AI agent).
+ *
+ * `masterSeed` is the deterministic 32-byte root. If omitted, the underlying
+ * createAgentIdentity generates a random seed — useful for ephemeral testing
+ * but not for production agents (they cannot recover funds after restart).
+ */
+export interface ShroudAgentConfig {
+    readonly masterSeed?: Uint8Array;
+    readonly transport: ShroudFiTransport;
+    /** Defaults to getShroudFiStealth(chainId) from @shroud-fi/transport. */
+    readonly stealthContract?: Address;
+    /**
+     * ERC-5564 announcer contract address. Defaults to the canonical singleton
+     * exported from @shroud-fi/transport. Override only for local Anvil testing
+     * where the canonical address is absent — production paths should never
+     * touch this.
+     */
+    readonly announcer?: Address;
+    readonly startBlock: bigint;
+    readonly finality?: FinalityLevel;
+    /**
+     * M3 — when `true`, `agent.sendToWallet` calls `ensureRegistered()` before
+     * dispatching the payment. The agent will publish its stealth meta-address
+     * into the canonical ERC-6538 registry the first time `sendToWallet` runs,
+     * making the agent itself reachable as a recipient by anyone who knows the
+     * registrant wallet address.
+     *
+     * Default `false` — preserves the existing send/sendERC20/sweep behavior
+     * for agents that never want to be a *recipient* of stealth payments.
+     *
+     * Auto-registration requires `transport.walletClient` with an account; if
+     * the walletClient is missing the registration step throws
+     * `RegistrationRequiresWalletError` wrapped in `AutoRegistrationFailedError`.
+     */
+    readonly autoRegister?: boolean;
+}
+/**
+ * Start-time options.
+ *
+ * `backfillFrom` opt-in switches start() to hybrid mode: first iterates
+ * scanRange(backfillFrom, latestSafe), then transitions to live watch().
+ * Useful for recovering payments missed while the agent was offline.
+ */
+export interface ShroudAgentStartOptions {
+    readonly backfillFrom?: bigint;
+    readonly signal?: AbortSignal;
+}
+/**
+ * EIP-1193-compatible browser wallet adapter.
+ *
+ * Intentionally narrow: only the surface the browser factory actually uses.
+ * Callers wrap window.ethereum into this in the demo app. The runtime never
+ * touches window.ethereum directly to keep this package Node-safe.
+ */
+export interface BrowserWalletAdapter {
+    readonly address: Address;
+    signMessage(message: string): Promise<Hex>;
+}
+/**
+ * Result returned by agent.sweep(). Wraps the underlying SweepReceipt with
+ * the originating detection so callers can correlate sweeps to detections
+ * without keeping a separate map.
+ */
+export interface AgentSweepResult {
+    readonly swept: SweepReceipt;
+    readonly detection: DetectedPayment;
+}
+/**
+ * Subset of @shroud-fi/relayer's `RelayerSweepOptions` that the agent-runtime
+ * forwards verbatim. Re-typed locally so the agent-runtime type surface stays
+ * decoupled from the relayer package — callers that never touch the relayer
+ * still get a clean type tree without the optional peer dep being resolved.
+ */
+export interface AgentRelayerSweepOptions {
+    readonly deadlineSecs?: bigint;
+    readonly pollIntervalMs?: number;
+    readonly pollTimeoutMs?: number;
+    readonly gelatoApiKey?: string;
+    readonly signal?: AbortSignal;
+    /**
+     * If set, the agent dispatches the sweep to a self-hosted relayer service
+     * via HTTP POST instead of Gelato. The endpoint must implement the
+     * `/relay` contract from `@shroud-fi/self-host-relayer`.
+     *
+     * Self-host bypasses Gelato entirely — useful for anon-stack deployments
+     * or when Gelato Gas Tank is paywalled.
+     */
+    readonly selfHostEndpoint?: string;
+}
+/**
+ * Result returned by agent.sweepViaRelayer(). Mirrors AgentSweepResult shape
+ * but wraps the relayer's `RelayerSweepReceipt` instead of `SweepReceipt`.
+ *
+ * The relayer receipt has NO amount fields (privacy invariant); the demo and
+ * other consumers can re-query balance if a display number is required.
+ */
+export interface AgentRelayerSweepResult {
+    readonly swept: {
+        readonly taskId: string;
+        readonly txHash: Hex;
+        readonly status: 'submitted' | 'pending' | 'success' | 'failed' | 'cancelled';
+        readonly relayerContract: Address;
+        readonly token: Address;
+        readonly destination: Address;
+        readonly blockNumber?: bigint;
+    };
+    readonly detection: DetectedPayment;
+}
+/**
+ * P5.1 — options forwarded to relayedSweepETH. Locally typed so the
+ * agent-runtime type tree stays decoupled from @shroud-fi/relayer.
+ */
+export interface AgentRelayerEthSweepOptions {
+    readonly deadlineSecs?: bigint;
+    readonly pollTimeoutMs?: number;
+    readonly signal?: AbortSignal;
+    /**
+     * Self-host relayer service URL. Required — there's no third-party fallback
+     * for the EIP-7702 path. Endpoint must implement POST /relay-eth per
+     * @shroud-fi/self-host-relayer.
+     */
+    readonly selfHostEndpoint: string;
+}
+/**
+ * P5.1 — result of agent.sweepEthViaRelayer(). Mirrors AgentSweepResult shape
+ * with the relayer's ETH receipt. No amount fields.
+ */
+export interface AgentRelayerEthSweepResult {
+    readonly swept: {
+        readonly txHash: Hex;
+        readonly status: 'success';
+        readonly blockNumber: bigint;
+        readonly ethRelayerContract: Address;
+        readonly destination: Address;
+        readonly stealthAddress: Address;
+    };
+    readonly detection: DetectedPayment;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,yEAAyE;IACzE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAC5C;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;QAC9E,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;QAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACxB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;QAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;QACrC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;QAC9B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;KAClC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC"}