@shroud-fi/self-host-relayer 0.1.0

package/dist/esm/relay.js

@@ -0,0 +1,79 @@
+/**
+ * Core relay logic. Pure function — given a validated request + viem clients,
+ * encodes the ERC-2771 wrapped calldata and broadcasts via the relayer EOA.
+ *
+ * Privacy invariants:
+ *   - The relayer EOA's private key is held in a viem account closure. It is
+ *     never logged, serialized, or attached to thrown errors.
+ *   - The stealth address is data, not key material.
+ *   - The permit (v, r, s, deadline) is a one-time authorization for the
+ *     specific (owner, spender, value, deadline) bound at signing time.
+ */
+import { encodeFunctionData, } from 'viem';
+import { RelayBroadcastError } from './errors.js';
+const SWEEP_ABI = [
+    {
+        type: 'function',
+        name: 'sweepERC20WithPermit',
+        stateMutability: 'nonpayable',
+        inputs: [
+            { name: 'token', type: 'address' },
+            { name: 'destination', type: 'address' },
+            { name: 'deadline', type: 'uint256' },
+            { name: 'v', type: 'uint8' },
+            { name: 'r', type: 'bytes32' },
+            { name: 's', type: 'bytes32' },
+        ],
+        outputs: [],
+    },
+];
+/**
+ * Build the ERC-2771-wrapped calldata: encoded sweepERC20WithPermit(...) with
+ * the 20-byte stealth address appended. ShroudFiRelayer's ERC2771Context
+ * reads _msgSender() as the appended address when msg.sender is the trusted
+ * forwarder (= the relayer EOA = `account` here).
+ */
+export function buildRelayCalldata(req) {
+    const inner = encodeFunctionData({
+        abi: SWEEP_ABI,
+        functionName: 'sweepERC20WithPermit',
+        args: [
+            req.token,
+            req.destination,
+            BigInt(req.deadline),
+            req.v,
+            req.r,
+            req.s,
+        ],
+    });
+    const suffix = req.stealthAddress.slice(2).toLowerCase();
+    // Inner is `0x...`; concatenate stealth bytes (20 = 40 hex chars).
+    return (inner + suffix);
+}
+/**
+ * Broadcast the wrapped tx. Waits for the receipt before returning.
+ *
+ * Throws RelayBroadcastError on any underlying viem error. Errors are wrapped
+ * to strip out potentially key-bearing payloads from the visible message.
+ */
+export async function relayRequest(ctx, req) {
+    const data = buildRelayCalldata(req);
+    try {
+        const txHash = await ctx.walletClient.sendTransaction({
+            account: ctx.account,
+            chain: ctx.walletClient.chain ?? null,
+            to: ctx.relayerContract,
+            data,
+            value: 0n,
+        });
+        const receipt = await ctx.publicClient.waitForTransactionReceipt({
+            hash: txHash,
+        });
+        return { txHash, blockNumber: receipt.blockNumber };
+    }
+    catch (err) {
+        const name = err instanceof Error ? err.name : 'UnknownError';
+        throw new RelayBroadcastError(name, { cause: err });
+    }
+}
+//# sourceMappingURL=relay.js.map

package/dist/esm/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","sourceRoot":"","sources":["../../src/relay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,kBAAkB,GAQnB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGlD,MAAM,SAAS,GAAG;IAChB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,sBAAsB;QAC5B,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;YACxC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;YACrC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5B,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9B,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B;QACD,OAAO,EAAE,EAAE;KACZ;CACO,CAAC;AAkBX;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAiB;IAClD,MAAM,KAAK,GAAG,kBAAkB,CAAC;QAC/B,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,sBAAsB;QACpC,IAAI,EAAE;YACJ,GAAG,CAAC,KAAK;YACT,GAAG,CAAC,WAAW;YACf,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACpB,GAAG,CAAC,CAAC;YACL,GAAG,CAAC,CAAC;YACL,GAAG,CAAC,CAAC;SACN;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,mEAAmE;IACnE,OAAO,CAAC,KAAK,GAAG,MAAM,CAAQ,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAa,EACb,GAAiB;IAEjB,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,eAAe,CAAC;YACpD,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,IAAI,IAAI;YACrC,EAAE,EAAE,GAAG,CAAC,eAAe;YACvB,IAAI;YACJ,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,yBAAyB,CAAC;YAC/D,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;QAC9D,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/esm/server.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Fastify server for @shroud-fi/self-host-relayer.
+ *
+ * Endpoints:
+ *   POST /relay   - submit a permit-signed sweep request
+ *   GET  /health  - liveness probe
+ *
+ * Privacy invariants:
+ *   - Request body is validated then discarded — never logged.
+ *   - Error responses carry only error class names, never inner messages.
+ *   - The forwarder EOA's private key is read from config once, then held in
+ *     a viem account closure. Never logged, never serialized to disk.
+ */
+import { type FastifyInstance } from 'fastify';
+import type { ServiceConfig } from './types.js';
+export declare function buildServer(cfg: ServiceConfig): Promise<FastifyInstance>;
+export declare function startServer(cfg: ServiceConfig): Promise<FastifyInstance>;
+//# sourceMappingURL=server.d.ts.map

package/dist/esm/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AA6BxD,OAAO,KAAK,EAIV,aAAa,EACd,MAAM,YAAY,CAAC;AAgFpB,wBAAsB,WAAW,CAC/B,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,eAAe,CAAC,CA+Q1B;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAI9E"}

package/dist/esm/server.js

@@ -0,0 +1,377 @@
+/**
+ * Fastify server for @shroud-fi/self-host-relayer.
+ *
+ * Endpoints:
+ *   POST /relay   - submit a permit-signed sweep request
+ *   GET  /health  - liveness probe
+ *
+ * Privacy invariants:
+ *   - Request body is validated then discarded — never logged.
+ *   - Error responses carry only error class names, never inner messages.
+ *   - The forwarder EOA's private key is read from config once, then held in
+ *     a viem account closure. Never logged, never serialized to disk.
+ */
+import Fastify from 'fastify';
+import cors from '@fastify/cors';
+import rateLimit from '@fastify/rate-limit';
+import { createPublicClient, createWalletClient, http, isAddress, recoverTypedDataAddress, serializeSignature, getAddress, } from 'viem';
+import { base, baseSepolia } from 'viem/chains';
+import { privateKeyToAccount } from 'viem/accounts';
+import { AuthorizationContractMismatchError, EthRelayerNotConfiguredError, InvalidRelayEthRequestError, InvalidRelayRequestError, } from './errors.js';
+import { relayRequest } from './relay.js';
+import { relayEthRequest } from './relay-eth.js';
+const HEX32_RE = /^0x[0-9a-fA-F]{64}$/;
+function isHex32(s) {
+    return typeof s === 'string' && HEX32_RE.test(s);
+}
+function validateRequest(body) {
+    if (typeof body !== 'object' || body === null) {
+        throw new InvalidRelayRequestError();
+    }
+    const b = body;
+    if (!isAddress(b.token))
+        throw new InvalidRelayRequestError();
+    if (!isAddress(b.destination))
+        throw new InvalidRelayRequestError();
+    if (!isAddress(b.stealthAddress))
+        throw new InvalidRelayRequestError();
+    if (typeof b.deadline !== 'string' || !/^\d+$/.test(b.deadline)) {
+        throw new InvalidRelayRequestError();
+    }
+    if (typeof b.v !== 'number' || b.v < 0 || b.v > 255) {
+        throw new InvalidRelayRequestError();
+    }
+    if (!isHex32(b.r))
+        throw new InvalidRelayRequestError();
+    if (!isHex32(b.s))
+        throw new InvalidRelayRequestError();
+    return {
+        token: b.token,
+        destination: b.destination,
+        stealthAddress: b.stealthAddress,
+        deadline: b.deadline,
+        v: b.v,
+        r: b.r,
+        s: b.s,
+    };
+}
+const HEX_PREFIXED_RE = /^0x[0-9a-fA-F]+$/;
+function isHex(s) {
+    return typeof s === 'string' && HEX_PREFIXED_RE.test(s);
+}
+function validateEthRequest(body) {
+    if (typeof body !== 'object' || body === null) {
+        throw new InvalidRelayEthRequestError();
+    }
+    const b = body;
+    if (!isAddress(b.stealthAddress))
+        throw new InvalidRelayEthRequestError();
+    if (!isAddress(b.destination))
+        throw new InvalidRelayEthRequestError();
+    if (typeof b.chainId !== 'number')
+        throw new InvalidRelayEthRequestError();
+    if (typeof b.deadline !== 'string' || !/^\d+$/.test(b.deadline)) {
+        throw new InvalidRelayEthRequestError();
+    }
+    if (!isHex(b.signature))
+        throw new InvalidRelayEthRequestError();
+    const auth = b.authorization;
+    if (typeof auth !== 'object' || auth === null)
+        throw new InvalidRelayEthRequestError();
+    if (!isAddress(auth.address))
+        throw new InvalidRelayEthRequestError();
+    if (typeof auth.chainId !== 'number')
+        throw new InvalidRelayEthRequestError();
+    if (typeof auth.nonce !== 'number' || auth.nonce < 0) {
+        throw new InvalidRelayEthRequestError();
+    }
+    if (!isHex32(auth.r))
+        throw new InvalidRelayEthRequestError();
+    if (!isHex32(auth.s))
+        throw new InvalidRelayEthRequestError();
+    if (auth.yParity !== 0 && auth.yParity !== 1)
+        throw new InvalidRelayEthRequestError();
+    return {
+        stealthAddress: b.stealthAddress,
+        destination: b.destination,
+        chainId: b.chainId,
+        deadline: b.deadline,
+        signature: b.signature,
+        authorization: {
+            address: auth.address,
+            chainId: auth.chainId,
+            nonce: auth.nonce,
+            r: auth.r,
+            s: auth.s,
+            yParity: auth.yParity,
+        },
+    };
+}
+export async function buildServer(cfg) {
+    const fastify = Fastify({
+        // Logging stripped of body — only method, url, status, response time.
+        logger: { level: 'info' },
+        disableRequestLogging: true,
+    });
+    await fastify.register(cors, {
+        origin: (origin, cb) => {
+            // Allow same-host requests (no Origin header) for curl/healthchecks.
+            if (origin === undefined)
+                return cb(null, true);
+            if (cfg.allowedOrigins.includes(origin))
+                return cb(null, true);
+            return cb(new Error('Origin not allowed'), false);
+        },
+    });
+    await fastify.register(rateLimit, {
+        max: cfg.rateLimitPerMinute,
+        timeWindow: '1 minute',
+    });
+    const chain = cfg.chainId === 8453 ? base : baseSepolia;
+    const account = privateKeyToAccount(cfg.forwarderPrivateKey);
+    // Viem's OP-stack chain extension widens the tx type set. Our relayRequest
+    // signature uses a generic Chain; cast at the boundary so the OP extensions
+    // don't bleed into our public types.
+    const publicClient = createPublicClient({
+        chain,
+        transport: http(cfg.rpcUrl, { batch: false }),
+    });
+    const walletClient = createWalletClient({
+        chain,
+        account,
+        transport: http(cfg.rpcUrl, { batch: false }),
+    });
+    fastify.get('/health', async () => ({ ok: true, chainId: cfg.chainId }));
+    fastify.post('/relay', async (req, reply) => {
+        let validated;
+        try {
+            validated = validateRequest(req.body);
+        }
+        catch (err) {
+            const name = err instanceof Error ? err.name : 'InvalidRelayRequestError';
+            reply.status(400);
+            const body = { ok: false, error: name };
+            return body;
+        }
+        // Diagnostic pre-flight: read on-chain state for the (stealth, token) pair
+        // before broadcasting. NOT key material — all four values (balance,
+        // allowance, nonce, name) are public reads. Off in prod by default; flip
+        // cfg.debugDiagnostics = true (DEBUG_DIAGNOSTICS=1 env) to enable when
+        // troubleshooting permit digest mismatches.
+        if (cfg.debugDiagnostics === true)
+            try {
+                const tokenAbi = [
+                    { type: 'function', name: 'balanceOf', stateMutability: 'view', inputs: [{ name: 'a', type: 'address' }], outputs: [{ type: 'uint256' }] },
+                    { type: 'function', name: 'allowance', stateMutability: 'view', inputs: [{ name: 'o', type: 'address' }, { name: 's', type: 'address' }], outputs: [{ type: 'uint256' }] },
+                    { type: 'function', name: 'nonces', stateMutability: 'view', inputs: [{ name: 'a', type: 'address' }], outputs: [{ type: 'uint256' }] },
+                    { type: 'function', name: 'name', stateMutability: 'view', inputs: [], outputs: [{ type: 'string' }] },
+                    { type: 'function', name: 'version', stateMutability: 'view', inputs: [], outputs: [{ type: 'string' }] },
+                ];
+                const [bal, allow, nonce, name] = await Promise.all([
+                    publicClient.readContract({ address: validated.token, abi: tokenAbi, functionName: 'balanceOf', args: [validated.stealthAddress] }),
+                    publicClient.readContract({ address: validated.token, abi: tokenAbi, functionName: 'allowance', args: [validated.stealthAddress, cfg.relayerContract] }),
+                    publicClient.readContract({ address: validated.token, abi: tokenAbi, functionName: 'nonces', args: [validated.stealthAddress] }),
+                    publicClient.readContract({ address: validated.token, abi: tokenAbi, functionName: 'name' }),
+                ]);
+                let probedVersion = 'unprobed';
+                try {
+                    probedVersion = (await publicClient.readContract({
+                        address: validated.token,
+                        abi: tokenAbi,
+                        functionName: 'version',
+                    }));
+                }
+                catch {
+                    probedVersion = 'NOT_EXPOSED(fallback_to_1)';
+                }
+                const now = Math.floor(Date.now() / 1000);
+                fastify.log.info({
+                    stealth: validated.stealthAddress,
+                    token: validated.token,
+                    balance: bal.toString(),
+                    allowance: allow.toString(),
+                    nonce: nonce.toString(),
+                    tokenName: name,
+                    probedVersion,
+                    deadline: validated.deadline,
+                    nowUnix: now,
+                    deadlineDelta: Number(BigInt(validated.deadline) - BigInt(now)),
+                    v: validated.v,
+                }, 'relay preflight state');
+                // Signature recovery: rebuild the same EIP-712 message the agent SHOULD
+                // have signed (under both "1" and probed version) and see which (if any)
+                // recovers to the stealth address. Whichever ONE matches tells us the
+                // exact domain used. If NEITHER matches, the failure is in value/nonce/
+                // chainId/spender — list those candidates too.
+                try {
+                    const fullSig = serializeSignature({ r: validated.r, s: validated.s, v: BigInt(validated.v) });
+                    const message = {
+                        owner: validated.stealthAddress,
+                        spender: cfg.relayerContract,
+                        value: bal,
+                        nonce,
+                        deadline: BigInt(validated.deadline),
+                    };
+                    const types = {
+                        Permit: [
+                            { name: 'owner', type: 'address' },
+                            { name: 'spender', type: 'address' },
+                            { name: 'value', type: 'uint256' },
+                            { name: 'nonce', type: 'uint256' },
+                            { name: 'deadline', type: 'uint256' },
+                        ],
+                    };
+                    const candidates = [
+                        { label: 'name=' + name + ',ver=1,chain=' + cfg.chainId,
+                            domain: { name, version: '1', chainId: cfg.chainId, verifyingContract: validated.token } },
+                    ];
+                    if (probedVersion !== 'unprobed' && probedVersion !== 'NOT_EXPOSED(fallback_to_1)') {
+                        candidates.push({
+                            label: 'name=' + name + ',ver=' + probedVersion + ',chain=' + cfg.chainId,
+                            domain: { name, version: probedVersion, chainId: cfg.chainId, verifyingContract: validated.token },
+                        });
+                    }
+                    const recoveries = [];
+                    for (const c of candidates) {
+                        const recovered = await recoverTypedDataAddress({
+                            domain: c.domain,
+                            types,
+                            primaryType: 'Permit',
+                            message,
+                            signature: fullSig,
+                        });
+                        recoveries.push({
+                            label: c.label,
+                            recovered,
+                            matches: recovered.toLowerCase() === validated.stealthAddress.toLowerCase(),
+                        });
+                    }
+                    fastify.log.info({ recoveries, expectedStealth: validated.stealthAddress }, 'sig recovery probe');
+                }
+                catch (sigErr) {
+                    fastify.log.warn({ name: sigErr instanceof Error ? sigErr.name : 'unknown', msg: sigErr instanceof Error ? sigErr.message.slice(0, 200) : '' }, 'sig recovery threw');
+                }
+            }
+            catch (probeErr) {
+                fastify.log.warn({ name: probeErr instanceof Error ? probeErr.name : 'unknown' }, 'preflight probe failed');
+            }
+        try {
+            const result = await relayRequest({
+                publicClient,
+                walletClient,
+                account,
+                relayerContract: cfg.relayerContract,
+            }, validated);
+            const body = {
+                ok: true,
+                txHash: result.txHash,
+                blockNumber: result.blockNumber.toString(),
+            };
+            return body;
+        }
+        catch (err) {
+            const name = err instanceof Error ? err.name : 'RelayBroadcastError';
+            // Diagnostic: walk the cause chain and emit each viem error class +
+            // shortMessage (revert reason). These are public on-chain values, never
+            // key material. Logged via fastify.log.error so the operator can find
+            // the actual revert without surfacing it to clients.
+            const chain = [];
+            let cursor = err;
+            let depth = 0;
+            while (cursor instanceof Error && depth < 6) {
+                const sm = cursor.shortMessage;
+                const frame = { name: cursor.name };
+                if (sm !== undefined)
+                    frame.shortMessage = sm;
+                chain.push(frame);
+                cursor = cursor.cause;
+                depth++;
+            }
+            fastify.log.error({ chain }, 'relay broadcast failed');
+            reply.status(502);
+            const body = { ok: false, error: name };
+            return body;
+        }
+    });
+    // ─── /relay-eth — P5.1 EIP-7702 ETH gasless sweep ─────────────────────
+    fastify.post('/relay-eth', async (req, reply) => {
+        // Refuse early if the operator hasn't pinned the deployed ETH relayer.
+        if (cfg.ethRelayerContract === undefined) {
+            reply.status(501);
+            const body = {
+                ok: false,
+                error: new EthRelayerNotConfiguredError().name,
+            };
+            return body;
+        }
+        let validated;
+        try {
+            validated = validateEthRequest(req.body);
+        }
+        catch (err) {
+            const name = err instanceof Error ? err.name : 'InvalidRelayEthRequestError';
+            reply.status(400);
+            const body = { ok: false, error: name };
+            return body;
+        }
+        // Defence in depth: the authorization MUST delegate to the configured
+        // ETH relayer contract. A mismatch means either (a) the SDK is talking
+        // to a different deployment, or (b) someone is trying to delegate to an
+        // attacker contract via this relayer. Either way, refuse.
+        if (getAddress(validated.authorization.address) !==
+            getAddress(cfg.ethRelayerContract)) {
+            reply.status(400);
+            const body = {
+                ok: false,
+                error: new AuthorizationContractMismatchError().name,
+            };
+            return body;
+        }
+        // Chain ID consistency: the SDK's chainId must match this service's chain.
+        if (validated.chainId !== cfg.chainId) {
+            reply.status(400);
+            const body = {
+                ok: false,
+                error: new InvalidRelayEthRequestError().name,
+            };
+            return body;
+        }
+        try {
+            const result = await relayEthRequest({ publicClient, walletClient, account }, validated);
+            const body = {
+                ok: true,
+                txHash: result.txHash,
+                blockNumber: result.blockNumber.toString(),
+            };
+            return body;
+        }
+        catch (err) {
+            const name = err instanceof Error ? err.name : 'RelayBroadcastError';
+            // Same cause-chain diagnostic as /relay. Public on-chain data only —
+            // never signatures or amounts.
+            const chain = [];
+            let cursor = err;
+            let depth = 0;
+            while (cursor instanceof Error && depth < 6) {
+                const sm = cursor.shortMessage;
+                const frame = { name: cursor.name };
+                if (sm !== undefined)
+                    frame.shortMessage = sm;
+                chain.push(frame);
+                cursor = cursor.cause;
+                depth++;
+            }
+            fastify.log.error({ chain }, 'relay-eth broadcast failed');
+            reply.status(502);
+            const body = { ok: false, error: name };
+            return body;
+        }
+    });
+    return fastify;
+}
+export async function startServer(cfg) {
+    const fastify = await buildServer(cfg);
+    await fastify.listen({ port: cfg.port, host: '127.0.0.1' });
+    return fastify;
+}
+//# sourceMappingURL=server.js.map

package/dist/esm/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,OAAiC,MAAM,SAAS,CAAC;AACxD,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,SAAS,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,IAAI,EACJ,SAAS,EACT,uBAAuB,EACvB,kBAAkB,EAClB,UAAU,GAOX,MAAM,MAAM,CAAC;AAEd,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAQjD,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAEvC,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAe,CAAC;QAAE,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACxE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAqB,CAAC;QAAE,MAAM,IAAI,wBAAwB,EAAE,CAAC;IAC9E,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAwB,CAAC;QAAE,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACjF,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACxD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACxD,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAgB;QACzB,WAAW,EAAE,CAAC,CAAC,WAAsB;QACrC,cAAc,EAAE,CAAC,CAAC,cAAyB;QAC3C,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,CAAC,EAAE,CAAC,CAAC,CAAC;QACN,CAAC,EAAE,CAAC,CAAC,CAAQ;QACb,CAAC,EAAE,CAAC,CAAC,CAAQ;KACd,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAwB,CAAC;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IACpF,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAqB,CAAC;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IACjF,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC3E,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,CAAC,aAAoD,CAAC;IACpE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IACvF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAiB,CAAC;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAChF,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC9E,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC9D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC9D,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IACtF,OAAO;QACL,cAAc,EAAE,CAAC,CAAC,cAAyB;QAC3C,WAAW,EAAE,CAAC,CAAC,WAAsB;QACrC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,aAAa,EAAE;YACb,OAAO,EAAE,IAAI,CAAC,OAAkB;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,CAAC,EAAE,IAAI,CAAC,CAAQ;YAChB,CAAC,EAAE,IAAI,CAAC,CAAQ;YAChB,OAAO,EAAE,IAAI,CAAC,OAAgB;SAC/B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAkB;IAElB,MAAM,OAAO,GAAG,OAAO,CAAC;QACtB,sEAAsE;QACtE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;QACzB,qBAAqB,EAAE,IAAI;KAC5B,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC3B,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE;YACrB,qEAAqE;YACrE,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAChD,IAAI,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO,EAAE,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE;QAChC,GAAG,EAAE,GAAG,CAAC,kBAAkB;QAC3B,UAAU,EAAE,UAAU;KACvB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IACxD,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7D,2EAA2E;IAC3E,4EAA4E;IAC5E,qCAAqC;IACrC,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;KAC9C,CAA0D,CAAC;IAC5D,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,KAAK;QACL,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;KAC9C,CAAmE,CAAC;IAErE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAEzE,OAAO,CAAC,IAAI,CAAoB,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7D,IAAI,SAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAC1E,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,MAAM,IAAI,GAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,2EAA2E;QAC3E,oEAAoE;QACpE,yEAAyE;QACzE,uEAAuE;QACvE,4CAA4C;QAC5C,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;YAAE,IAAI,CAAC;gBACtC,MAAM,QAAQ,GAAG;oBACf,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;oBAC1I,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;oBAC1K,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;oBACvI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE;oBACtG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE;iBACjG,CAAC;gBACX,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBAClD,YAAY,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAoB;oBACtJ,YAAY,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE,CAAoB;oBAC3K,YAAY,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAoB;oBACnJ,YAAY,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,CAAoB;iBAChH,CAAC,CAAC;gBACH,IAAI,aAAa,GAAG,UAAU,CAAC;gBAC/B,IAAI,CAAC;oBACH,aAAa,GAAG,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC;wBAC/C,OAAO,EAAE,SAAS,CAAC,KAAK;wBACxB,GAAG,EAAE,QAAQ;wBACb,YAAY,EAAE,SAAS;qBACxB,CAAC,CAAW,CAAC;gBAChB,CAAC;gBAAC,MAAM,CAAC;oBACP,aAAa,GAAG,4BAA4B,CAAC;gBAC/C,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;gBAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBACf,OAAO,EAAE,SAAS,CAAC,cAAc;oBACjC,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE;oBACvB,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE;oBAC3B,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;oBACvB,SAAS,EAAE,IAAI;oBACf,aAAa;oBACb,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,OAAO,EAAE,GAAG;oBACZ,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC/D,CAAC,EAAE,SAAS,CAAC,CAAC;iBACf,EAAE,uBAAuB,CAAC,CAAC;gBAE5B,wEAAwE;gBACxE,yEAAyE;gBACzE,sEAAsE;gBACtE,wEAAwE;gBACxE,+CAA+C;gBAC/C,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC/F,MAAM,OAAO,GAAG;wBACd,KAAK,EAAE,SAAS,CAAC,cAAc;wBAC/B,OAAO,EAAE,GAAG,CAAC,eAAe;wBAC5B,KAAK,EAAE,GAAG;wBACV,KAAK;wBACL,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;qBAC5B,CAAC;oBACX,MAAM,KAAK,GAAG;wBACZ,MAAM,EAAE;4BACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;4BAClC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;4BACpC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;4BAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;4BAClC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;yBACtC;qBACO,CAAC;oBACX,MAAM,UAAU,GAAqH;wBACnI,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,GAAG,eAAe,GAAG,GAAG,CAAC,OAAO;4BACrD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,iBAAiB,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE;qBAC7F,CAAC;oBACF,IAAI,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,4BAA4B,EAAE,CAAC;wBACnF,UAAU,CAAC,IAAI,CAAC;4BACd,KAAK,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,GAAG,GAAG,CAAC,OAAO;4BACzE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,iBAAiB,EAAE,SAAS,CAAC,KAAK,EAAE;yBACnG,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,UAAU,GAAkE,EAAE,CAAC;oBACrF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;wBAC3B,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC;4BAC9C,MAAM,EAAE,CAAC,CAAC,MAAM;4BAChB,KAAK;4BACL,WAAW,EAAE,QAAQ;4BACrB,OAAO;4BACP,SAAS,EAAE,OAAO;yBACnB,CAAC,CAAC;wBACH,UAAU,CAAC,IAAI,CAAC;4BACd,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,SAAS;4BACT,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,cAAc,CAAC,WAAW,EAAE;yBAC5E,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBACpG,CAAC;gBAAC,OAAO,MAAM,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBACxK,CAAC;YACH,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,wBAAwB,CAAC,CAAC;YAC9G,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B;gBACE,YAAY;gBACZ,YAAY;gBACZ,OAAO;gBACP,eAAe,EAAE,GAAG,CAAC,eAAe;aACrC,EACD,SAAS,CACV,CAAC;YACF,MAAM,IAAI,GAAkB;gBAC1B,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE;aAC3C,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC;YACrE,oEAAoE;YACpE,wEAAwE;YACxE,sEAAsE;YACtE,qDAAqD;YACrD,MAAM,KAAK,GAAmD,EAAE,CAAC;YACjE,IAAI,MAAM,GAAY,GAAG,CAAC;YAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,MAAM,YAAY,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC5C,MAAM,EAAE,GAAI,MAAoC,CAAC,YAAY,CAAC;gBAC9D,MAAM,KAAK,GAA4C,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC7E,IAAI,EAAE,KAAK,SAAS;oBAAE,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClB,MAAM,GAAI,MAA8B,CAAC,KAAK,CAAC;gBAC/C,KAAK,EAAE,CAAC;YACV,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,wBAAwB,CAAC,CAAC;YACvD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,MAAM,IAAI,GAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,OAAO,CAAC,IAAI,CAAoB,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACjE,uEAAuE;QACvE,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACzC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,MAAM,IAAI,GAAkB;gBAC1B,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,4BAA4B,EAAE,CAAC,IAAI;aAC/C,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,SAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B,CAAC;YAC7E,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,MAAM,IAAI,GAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sEAAsE;QACtE,uEAAuE;QACvE,wEAAwE;QACxE,0DAA0D;QAC1D,IACE,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC;YAC3C,UAAU,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAClC,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,MAAM,IAAI,GAAkB;gBAC1B,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,kCAAkC,EAAE,CAAC,IAAI;aACrD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,2EAA2E;QAC3E,IAAI,SAAS,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,MAAM,IAAI,GAAkB;gBAC1B,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,2BAA2B,EAAE,CAAC,IAAI;aAC9C,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,EACvC,SAAS,CACV,CAAC;YACF,MAAM,IAAI,GAAkB;gBAC1B,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE;aAC3C,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC;YACrE,qEAAqE;YACrE,+BAA+B;YAC/B,MAAM,KAAK,GAAmD,EAAE,CAAC;YACjE,IAAI,MAAM,GAAY,GAAG,CAAC;YAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,MAAM,YAAY,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC5C,MAAM,EAAE,GAAI,MAAoC,CAAC,YAAY,CAAC;gBAC9D,MAAM,KAAK,GAA4C,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC7E,IAAI,EAAE,KAAK,SAAS;oBAAE,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClB,MAAM,GAAI,MAA8B,CAAC,KAAK,CAAC;gBAC/C,KAAK,EAAE,CAAC;YACV,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,4BAA4B,CAAC,CAAC;YAC3D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClB,MAAM,IAAI,GAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAkB;IAClD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/esm/types.d.ts

@@ -0,0 +1,83 @@
+import type { Address, Hex } from 'viem';
+/**
+ * Inbound relay request from a browser/agent.
+ *
+ * Privacy invariants:
+ *   - The stealth address's PRIVATE key NEVER appears here. Only the EIP-2612
+ *     permit signature (v, r, s, deadline) + the public stealth address.
+ *   - No `amount` field — the contract reads `balanceOf(stealth)` on-chain.
+ *   - The relayer service NEVER logs the full body.
+ */
+export interface RelayRequest {
+    readonly token: Address;
+    readonly destination: Address;
+    readonly stealthAddress: Address;
+    readonly deadline: string;
+    readonly v: number;
+    readonly r: Hex;
+    readonly s: Hex;
+}
+export interface RelaySuccess {
+    readonly ok: true;
+    readonly txHash: Hex;
+    readonly blockNumber: string;
+}
+export interface RelayFailure {
+    readonly ok: false;
+    readonly error: string;
+}
+export type RelayResponse = RelaySuccess | RelayFailure;
+export interface ServiceConfig {
+    readonly chainId: number;
+    readonly rpcUrl: string;
+    readonly relayerContract: Address;
+    readonly forwarderPrivateKey: Hex;
+    readonly allowedOrigins: readonly string[];
+    readonly port: number;
+    readonly rateLimitPerMinute: number;
+    /**
+     * When true, the /relay handler emits per-request preflight + EIP-712
+     * signature-recovery probe logs. These are valuable for debugging permit
+     * digest mismatches but produce one log line per request and surface
+     * (public) on-chain state. Off by default; enable only when troubleshooting.
+     */
+    readonly debugDiagnostics?: boolean;
+    /**
+     * Address of the ShroudFiEthRelayer contract for the P5.1 ETH gasless path.
+     * Used by /relay-eth as a defence-in-depth check that the inbound
+     * authorization's `address` field matches the deployed contract. When
+     * undefined, /relay-eth returns 501 Not Implemented.
+     */
+    readonly ethRelayerContract?: Address;
+}
+/**
+ * Inbound /relay-eth request. The shape mirrors what
+ * @shroud-fi/relayer's relayedSweepETH serialises on the SDK side.
+ *
+ * Privacy invariants:
+ *   - The stealth EOA's PRIVATE key NEVER appears here. Only the public
+ *     stealth address + two signatures (EIP-7702 SET_CODE auth + EIP-712
+ *     EthSweep).
+ *   - The signature is a spending-authorisation credential bound to the
+ *     specific (destination, deadline, chainId, stealthEOA) tuple. Never
+ *     logged in full; only the class name of any error appears in server
+ *     logs.
+ *   - No `amount` field — the contract reads address(this).balance under
+ *     EIP-7702 delegation.
+ */
+export interface RelayEthRequest {
+    readonly stealthAddress: Address;
+    readonly destination: Address;
+    readonly chainId: number;
+    readonly deadline: string;
+    readonly signature: Hex;
+    readonly authorization: {
+        readonly address: Address;
+        readonly chainId: number;
+        readonly nonce: number;
+        readonly r: Hex;
+        readonly s: Hex;
+        readonly yParity: 0 | 1;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;IAChB,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,YAAY,CAAC;AAExD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CACvC;AAID;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE;QACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QAChB,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QAChB,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;KACzB,CAAC;CACH"}

package/dist/esm/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/esm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":""}