@stellar-agent-services/provider-kit 0.0.0-stage → 0.1.0

package/dist/cli/register.js

@@ -0,0 +1,209 @@
+// provider-kit register: puts the provider in the Stellar 8004 identity registry, or updates its
+// registration (docs/provider-standard.md §7).
+//
+// The registration file names the manifest [I1]. It goes on chain as a data: URI when it fits in
+// 8 KiB, or as --agent-uri, an HTTPS URL where you host it (--out writes the file).
+//
+// Who signs:
+// - By default the developer's own wallet, on a local approval page (cli/approval.ts). A new agent is
+//   registered from the payTo account: the registry makes the registering account the agent's owner and
+//   its wallet, so [I3] holds at once. A payTo without a USDC trustline gets one first [P2], and a new
+//   testnet account gets test XLM. An update is signed by the agent's owner, or an address it approved.
+// - With --source, a key in the Stellar CLI keychain (https://developers.stellar.org/docs/tools/cli), for
+//   scripts and CI. With an owner other than payTo, set_agent_wallet needs both the owner's and the payTo
+//   account's signatures, so the command is printed for a tool that can collect them.
+// This command never sees a secret either way. A new agent's id is saved to the --config file [I2].
+import { readFile, rename, writeFile } from "node:fs/promises";
+import { stellarAddressKind } from "@stellar-agent-services/protocol";
+import { mayActFor, registrationDataUri, registrationFile, registryConfig } from "../registration.js";
+import { ApprovalError, describeOutcome } from "./approval.js";
+import { explorerUrl, networkName, shortAddress } from "./owner-chain.js";
+import { accountSteps, registerStep } from "./owner-steps.js";
+import { ownerIo, quote, UsageError } from "./shared.js";
+import { loadTarget } from "./target.js";
+export async function register(flags, io = ownerIo(flags)) {
+    const target = await loadTarget(flags);
+    if ("problems" in target) {
+        console.error(`The provider would not pass Provider Standard v1 checks, so it is not registered:\n${target.problems.map((problem) => `  ✗ ${problem}`).join("\n")}`);
+        return 1;
+    }
+    const { manifest, manifestUrl } = target;
+    const { network, payTo } = manifest.payment.accepts[0];
+    if (manifestUrl.startsWith("http://"))
+        throw new Error("a dev-mode provider (http://localhost) can't be registered: deploy it on HTTPS first");
+    const file = registrationFile(manifest, manifestUrl);
+    if (flags.out !== undefined)
+        await writeFile(flags.out, `${JSON.stringify(file, null, 2)}\n`);
+    let agentUri = flags["agent-uri"];
+    if (agentUri === undefined) {
+        try {
+            agentUri = registrationDataUri(file);
+        }
+        catch {
+            throw new Error("the registration file is over 8 KiB: host it at an HTTPS URL (--out writes it) and pass --agent-uri <url>");
+        }
+    }
+    else if (!agentUri.startsWith("https://")) {
+        throw new UsageError("--agent-uri must be an https:// URL");
+    }
+    console.log(`Registration file [I1]:\n${JSON.stringify(file, null, 2)}\n`);
+    const registration = { manifest, manifestUrl, network, payTo, agentUri };
+    const signed = flags.source === undefined ? await withWallet(flags, io, registration) : await withStellarCli(flags, io, registration);
+    if (signed.agentId !== undefined)
+        await saveNewAgentId(flags, signed.agentId);
+    return signed.code;
+}
+/** The developer's own wallet signs, on the local approval page. */
+async function withWallet(flags, io, { manifest, manifestUrl, network, payTo, agentUri }) {
+    const agentId = manifest.provider.agentId;
+    if (flags["dry-run"]) {
+        const method = agentId === undefined ? "register_with_uri" : "set_agent_uri";
+        console.log(`Dry run. Without --dry-run, a page opens where your wallet signs ${method} on ${network}. Nothing was signed.`);
+        return { code: 0 };
+    }
+    if (agentId === undefined && stellarAddressKind(payTo) !== "account") {
+        console.error(`payTo ${payTo} is a contract, which can't sign the registration in a wallet. Register with --source <owner key>, then set the agent wallet to payTo [I3].`);
+        return { code: 1 };
+    }
+    const registry = io.registry(network, flags.rpc);
+    const chain = io.chain(network, flags.rpc);
+    const owner = agentId === undefined ? payTo : await registry.agentOwner(agentId);
+    if (owner === undefined) {
+        console.error(`Agent ${agentId} does not exist in the ${network} identity registry [I2]. To register a new agent, remove provider.agentId.`);
+        return { code: 1 };
+    }
+    const name = manifest.provider.name;
+    const identity = registryConfig(network).contracts.identity;
+    let registered;
+    const plan = {
+        command: "provider-kit register",
+        title: agentId === undefined ? "Register your service" : "Update your registration",
+        intro: agentId === undefined
+            ? `Add ${name} to the Stellar 8004 identity registry, so agents can find it and check whom they pay.`
+            : `Point agent ${agentId}'s registration at your manifest, ${manifestUrl}.`,
+        network,
+        account: agentId === undefined
+            ? { address: payTo, label: "Payout account", reason: "The account your service is paid to (payTo). Registering from it makes it the agent's owner and wallet." }
+            : { address: owner, label: "Agent owner", reason: "Only the agent's owner, the address approved for it, or an operator of the owner's can change its registration." },
+        outline: [{ id: "register", title: agentId === undefined ? "Register" : "Update registration" }],
+        async steps(address) {
+            if (agentId === undefined && address !== payTo) {
+                throw new ApprovalError("Connect your payout account", `Your wallet connected ${shortAddress(address)}. Switch it to ${shortAddress(payTo)}, the manifest's payTo: the account that registers becomes the agent's wallet, which must be payTo [I3].`, "connect");
+            }
+            if (agentId !== undefined && !(await mayActFor(registry, agentId, owner, address))) {
+                throw new ApprovalError("This account can't change the registration", `Your wallet connected ${shortAddress(address)}. Switch it to agent ${agentId}'s owner, ${shortAddress(owner)}, or an address it approved.`, "connect");
+            }
+            const steps = await accountSteps(chain, address, { trustline: agentId === undefined });
+            steps.push(registerStep(chain, {
+                identity,
+                caller: address,
+                agentUri,
+                manifestUrl,
+                providerName: name,
+                ...(agentId === undefined ? {} : { agentId }),
+                onRegistered: (id) => (registered = id),
+            }));
+            return steps;
+        },
+        result() {
+            if (registered === undefined) {
+                return { title: "Registration updated", message: `Agent ${agentId} now names your manifest. Run provider-kit check to confirm.`, details: [{ label: "Agent", value: String(agentId) }] };
+            }
+            const next = flags.config === undefined ? "Add the id to your provider's config and restart it" : "provider-kit saves the id to your config: restart the provider";
+            return {
+                title: "Your service is registered",
+                message: `It is agent ${registered} on ${networkName(network)}. ${next}, then run provider-kit check.`,
+                details: [
+                    { label: "Agent", value: String(registered) },
+                    { label: "Owner and wallet", value: payTo, mono: true, href: explorerUrl(network, "account", payTo) },
+                ],
+            };
+        },
+    };
+    const outcome = await io.approve(plan, chain);
+    if (outcome.status !== "done") {
+        console.log(describeOutcome(outcome));
+        return { code: 1 };
+    }
+    if (registered === undefined) {
+        console.log(`Updated the registration of agent ${agentId} on ${network}.`);
+        return { code: 0 };
+    }
+    console.log(`Registered agent ${registered} on ${network}.`);
+    return { code: 0, agentId: registered };
+}
+/** --source: the Stellar CLI signs with a key from its keychain. */
+async function withStellarCli(flags, io, { manifest, network, payTo, agentUri }) {
+    const source = flags.source;
+    const stellar = await io.stellar();
+    const owner = stellar ? (await stellar(["keys", "address", source])).trim() : `$(stellar keys address ${source})`;
+    const contracts = registryConfig(network).contracts;
+    const cliNetwork = flags.network ?? (network === "stellar:pubnet" ? "mainnet" : "testnet");
+    const invoke = (fn, args) => ["contract", "invoke", "--id", contracts.identity, "--source-account", source, "--network", cliNetwork, "--", fn, ...args];
+    const agentId = manifest.provider.agentId;
+    const write = agentId === undefined
+        ? invoke("register_with_uri", ["--caller", owner, "--agent_uri", agentUri])
+        : invoke("set_agent_uri", ["--caller", owner, "--agent_id", String(agentId), "--new_uri", agentUri]);
+    const walletNote = () => {
+        if (owner === payTo)
+            return;
+        console.log(`\nThe agent wallet must be payTo (${payTo}) [I3]. Setting it needs the owner's and payTo's signatures:`);
+        console.log(`  stellar ${invoke("set_agent_wallet", ["--caller", owner, "--agent_id", String(agentId ?? "<agent id>"), "--new_wallet", payTo]).map(quote).join(" ")}`);
+        console.log("Registering with the payTo account as --source avoids this step.");
+    };
+    if (flags["dry-run"] || !stellar) {
+        if (!stellar)
+            console.log("The Stellar CLI (`stellar`) is not installed: https://developers.stellar.org/docs/tools/cli. Run this once it is:");
+        else
+            console.log("Dry run. This would run:");
+        console.log(`  stellar ${write.map(quote).join(" ")}`);
+        walletNote();
+        return { code: stellar ? 0 : 1 };
+    }
+    console.log(`Signing with "${source}" (${owner}) on ${cliNetwork}...`);
+    const stdout = await stellar(write);
+    if (agentId !== undefined) {
+        console.log(`Updated the registration of agent ${agentId} on ${network}.`);
+        walletNote();
+        return { code: 0 };
+    }
+    const id = Number(stdout.trim().replace(/^"|"$/g, ""));
+    if (!Number.isInteger(id))
+        throw new Error(`the registry answered "${stdout.trim()}", not an agent id`);
+    console.log(`Registered agent ${id} on ${network}.`);
+    walletNote();
+    return { code: 0, agentId: id };
+}
+async function saveNewAgentId(flags, agentId) {
+    if (flags.config === undefined) {
+        console.log(`Next: add "agentId": ${agentId} to "provider" in your provider's config (AGENT_ID for the example) [I2], restart it, then run provider-kit check.`);
+        return;
+    }
+    if (await saveAgentId(flags.config, agentId))
+        console.log(`Saved "agentId": ${agentId} to ${flags.config} [I2].`);
+    else
+        console.log(`${flags.config} reads provider.agentId from the environment: set it to ${agentId} [I2].`);
+    console.log("Next: restart the provider, then run provider-kit check.");
+}
+/**
+ * Writes `agentId` into a gateway config's provider object, keeping the rest of the file as it was: its keys,
+ * their order and its indentation. False, and nothing written, when the file reads provider.agentId from the
+ * environment.
+ */
+export async function saveAgentId(path, agentId) {
+    const text = await readFile(path, "utf8");
+    const config = JSON.parse(text);
+    const provider = config.provider;
+    if (typeof provider !== "object" || provider === null || Array.isArray(provider))
+        throw new Error(`${path} has no "provider" object`);
+    if (typeof provider["agentId"] === "string")
+        return false;
+    provider["agentId"] = agentId;
+    const indent = /^[ \t]+(?=")/m.exec(text)?.[0] ?? 2;
+    // Written beside the file, then renamed over it, so an interrupted write never leaves half a config.
+    const temporary = `${path}.${process.pid}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(config, null, indent)}\n`);
+    await rename(temporary, path);
+    return true;
+}
+//# sourceMappingURL=register.js.map

package/dist/cli/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/cli/register.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,+CAA+C;AAC/C,EAAE;AACF,iGAAiG;AACjG,oFAAoF;AACpF,EAAE;AACF,aAAa;AACb,sGAAsG;AACtG,wGAAwG;AACxG,uGAAuG;AACvG,wGAAwG;AACxG,0GAA0G;AAC1G,0GAA0G;AAC1G,sFAAsF;AACtF,oGAAoG;AAEpG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAA8C,MAAM,kCAAkC,CAAC;AAClH,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACtG,OAAO,EAAE,aAAa,EAAE,eAAe,EAAqB,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAA+B,MAAM,aAAa,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAgBzC,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAe,EAAE,KAAc,OAAO,CAAC,KAAK,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,sFAAsF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrK,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IACzC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAE/I,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,MAAM,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9F,IAAI,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAE3E,MAAM,YAAY,GAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACvF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IACtI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,oEAAoE;AACpE,KAAK,UAAU,UAAU,CAAC,KAAe,EAAE,EAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAgB;IACvH,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC1C,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,eAAe,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,oEAAoE,MAAM,OAAO,OAAO,uBAAuB,CAAC,CAAC;QAC7H,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;QACrE,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,6IAA6I,CAAC,CAAC;QAC3K,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,SAAS,OAAO,0BAA0B,OAAO,4EAA4E,CAAC,CAAC;QAC7I,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrB,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;IAC5D,IAAI,UAA8B,CAAC;IACnC,MAAM,IAAI,GAAiB;QACzB,OAAO,EAAE,uBAAuB;QAChC,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,0BAA0B;QACnF,KAAK,EACH,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,OAAO,IAAI,wFAAwF;YACrG,CAAC,CAAC,eAAe,OAAO,qCAAqC,WAAW,GAAG;QAC/E,OAAO;QACP,OAAO,EACL,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,yGAAyG,EAAE;YAChK,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,iHAAiH,EAAE;QACzK,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC;QAChG,KAAK,CAAC,KAAK,CAAC,OAAO;YACjB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC/C,MAAM,IAAI,aAAa,CACrB,6BAA6B,EAC7B,yBAAyB,YAAY,CAAC,OAAO,CAAC,kBAAkB,YAAY,CAAC,KAAK,CAAC,0GAA0G,EAC7L,SAAS,CACV,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,aAAa,CACrB,4CAA4C,EAC5C,yBAAyB,YAAY,CAAC,OAAO,CAAC,wBAAwB,OAAO,aAAa,YAAY,CAAC,KAAK,CAAC,8BAA8B,EAC3I,SAAS,CACV,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC,CAAC;YACvF,KAAK,CAAC,IAAI,CACR,YAAY,CAAC,KAAK,EAAE;gBAClB,QAAQ;gBACR,MAAM,EAAE,OAAO;gBACf,QAAQ;gBACR,WAAW;gBACX,YAAY,EAAE,IAAI;gBAClB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;gBAC7C,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC;aACxC,CAAC,CACH,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM;YACJ,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,SAAS,OAAO,8DAA8D,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3L,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,gEAAgE,CAAC;YACnK,OAAO;gBACL,KAAK,EAAE,4BAA4B;gBACnC,OAAO,EAAE,eAAe,UAAU,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,gCAAgC;gBACtG,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE;oBAC7C,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;iBACtG;aACF,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,qCAAqC,OAAO,OAAO,OAAO,GAAG,CAAC,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,OAAO,OAAO,GAAG,CAAC,CAAC;IAC7D,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAC1C,CAAC;AAED,oEAAoE;AACpE,KAAK,UAAU,cAAc,CAAC,KAAe,EAAE,EAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAgB;IAC9G,MAAM,MAAM,GAAG,KAAK,CAAC,MAAO,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,0BAA0B,MAAM,GAAG,CAAC;IAClH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,IAAc,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1K,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC1C,MAAM,KAAK,GACT,OAAO,KAAK,SAAS;QACnB,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC3E,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzG,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO;QAC5B,OAAO,CAAC,GAAG,CAAC,qCAAqC,KAAK,8DAA8D,CAAC,CAAC;QACtH,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,kBAAkB,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,IAAI,YAAY,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvK,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAClF,CAAC,CAAC;IAEF,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,mHAAmH,CAAC,CAAC;;YAC1I,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,MAAM,KAAK,QAAQ,UAAU,KAAK,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,qCAAqC,OAAO,OAAO,OAAO,GAAG,CAAC,CAAC;QAC3E,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrB,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IACxG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,OAAO,OAAO,GAAG,CAAC,CAAC;IACrD,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAe,EAAE,OAAe;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,oHAAoH,CAAC,CAAC;QACjK,OAAO;IACT,CAAC;IACD,IAAI,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;;QAC7G,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,2DAA2D,OAAO,QAAQ,CAAC,CAAC;IAC5G,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2B,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC;IACtI,IAAI,OAAQ,QAAoC,CAAC,SAAS,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtF,QAAoC,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;IAC3D,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpD,qGAAqG;IACrG,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC/C,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/request-validation.d.ts

@@ -0,0 +1,5 @@
+import { type CliFlags, type OwnerIo } from "./shared.js";
+/** Where the command reaches the outside world. Tests replace it. */
+export type RequestValidationIo = OwnerIo;
+export declare function requestValidation(flags: CliFlags, io?: RequestValidationIo): Promise<number>;
+//# sourceMappingURL=request-validation.d.ts.map

package/dist/cli/request-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-validation.d.ts","sourceRoot":"","sources":["../../src/cli/request-validation.ts"],"names":[],"mappings":"AAoBA,OAAO,EAA8B,KAAK,QAAQ,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAGtF,qEAAqE;AACrE,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAU1C,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAE,mBAAoC,GAAG,OAAO,CAAC,MAAM,CAAC,CAalH"}

package/dist/cli/request-validation.js

@@ -0,0 +1,144 @@
+// provider-kit request-validation: asks a verifier to check the provider, with validation_request in the
+// Stellar 8004 Validation Registry (docs/verification.md).
+//
+// prepareValidationRequest() runs first, so nothing is signed for a provider a verifier couldn't validate,
+// an account that may not ask for the agent, or a validator that is the provider itself. The request
+// document goes on chain as a data: URI.
+//
+// Who signs: by default the agent owner's own wallet, on a local approval page (cli/approval.ts). The account
+// the wallet connects is checked as the signer before anything is built. With --source, a key in the
+// Stellar CLI keychain (https://developers.stellar.org/docs/tools/cli), for scripts and CI. This command
+// never sees a secret either way. Afterwards it reads the registry back to confirm the request landed, and
+// prints the request hash, which the verifier's answer names.
+import { writeFile } from "node:fs/promises";
+import { stellarAddressKind, validationRequestBytes } from "@stellar-agent-services/protocol";
+import { prepareValidationRequest, validationRequestArguments, ValidationRequestError } from "../validation-request.js";
+import { ApprovalError, describeOutcome } from "./approval.js";
+import { explorerUrl } from "./owner-chain.js";
+import { accountSteps, validationRequestStep } from "./owner-steps.js";
+import { ownerIo, quote, UsageError } from "./shared.js";
+import { loadTarget } from "./target.js";
+export async function requestValidation(flags, io = ownerIo(flags)) {
+    const { source, validator } = flags;
+    if (validator === undefined)
+        throw new UsageError("request-validation needs --validator <the verifier's G... address>");
+    if (stellarAddressKind(validator) !== "account")
+        throw new UsageError("--validator must be a G... account address");
+    const target = await loadTarget(flags);
+    if ("problems" in target) {
+        console.error(`The provider would not pass Provider Standard v1 checks, so no validation is requested:\n${target.problems.map((problem) => `  ✗ ${problem}`).join("\n")}`);
+        return 1;
+    }
+    const { manifest, manifestUrl } = target;
+    const network = manifest.payment.accepts[0].network;
+    const request = { manifest, manifestUrl, validator, network, registry: io.registry(network, flags.rpc) };
+    return source === undefined ? withWallet(flags, io, request) : withStellarCli(flags, io, request, source);
+}
+/** The agent owner's own wallet signs, on the local approval page. */
+async function withWallet(flags, io, { manifest, manifestUrl, validator, network, registry }) {
+    // One time for the request: checking it again with the wallet's account as the signer gives the same bytes and hash.
+    const now = io.now();
+    const prepared = await prepareValidationRequest(manifest, manifestUrl, { validator, registry, now: () => now });
+    printRequest(prepared);
+    if (flags["dry-run"]) {
+        console.log(`\nDry run. Without --dry-run, a page opens where the agent owner's wallet signs validation_request on ${network}. Nothing was signed.`);
+        return 0;
+    }
+    const { agentId } = prepared.request;
+    const owner = await registry.agentOwner(agentId);
+    const chain = io.chain(network, flags.rpc);
+    const plan = {
+        command: "provider-kit request-validation",
+        title: "Request validation",
+        intro: `Ask a verifier to check ${manifest.provider.name}. Its answer goes on chain in the Stellar 8004 Validation Registry, and its receipt gives your badges.`,
+        network,
+        ...(owner === undefined
+            ? {}
+            : { account: { address: owner, label: "Agent owner", reason: "The registry takes a request only from the agent's owner, the address approved for it, or an operator of the owner's." } }),
+        outline: [{ id: "request-validation", title: "Request validation" }],
+        async steps(address) {
+            try {
+                await prepareValidationRequest(manifest, manifestUrl, { validator, registry, signer: address, now: () => now });
+            }
+            catch (error) {
+                if (error instanceof ValidationRequestError)
+                    throw new ApprovalError("This account can't ask for validation", error.problems.join(" "), "connect");
+                throw error;
+            }
+            const steps = await accountSteps(chain, address, { trustline: false });
+            steps.push(validationRequestStep(chain, address, prepared));
+            return steps;
+        },
+        result: () => ({
+            title: "Validation requested",
+            message: "A verifier running verifier watch finds the request on chain, checks your service and answers there. provider-kit status shows its answer.",
+            details: [
+                { label: "Request hash", value: prepared.requestHash, mono: true },
+                { label: "Verifier", value: validator, mono: true, href: explorerUrl(network, "account", validator) },
+                { label: "Agent", value: String(agentId) },
+            ],
+        }),
+    };
+    const outcome = await io.approve(plan, chain);
+    if (outcome.status !== "done") {
+        console.log(describeOutcome(outcome));
+        return 1;
+    }
+    return confirm(flags, registry, prepared, network);
+}
+/** --source: the Stellar CLI signs with a key from its keychain. */
+async function withStellarCli(flags, io, { manifest, manifestUrl, validator, network, registry }, source) {
+    const cliNetwork = flags.network ?? (network === "stellar:pubnet" ? "mainnet" : "testnet");
+    // The registry checks who asks by the signing key's address. Without the Stellar CLI it stays unknown,
+    // and the command is printed for later.
+    const stellar = await io.stellar();
+    let signer;
+    try {
+        signer = stellar === undefined ? undefined : (await stellar(["keys", "address", source])).trim();
+    }
+    catch {
+        signer = undefined;
+    }
+    const prepared = await prepareValidationRequest(manifest, manifestUrl, { validator, registry, now: () => io.now(), ...(signer === undefined ? {} : { signer }) });
+    printRequest(prepared);
+    const args = validationRequestArguments(prepared, { source, network: cliNetwork, caller: signer ?? `$(stellar keys address ${source})` });
+    const command = `stellar ${args.map(quote).join(" ")}`;
+    if (stellar === undefined || signer === undefined) {
+        console.log(stellar === undefined
+            ? "\nThe Stellar CLI (`stellar`) is not installed: https://developers.stellar.org/docs/tools/cli. Run this once it is:"
+            : `\nThe Stellar CLI could not read key "${source}". Once it can, run:`);
+        console.log(`  ${command}`);
+        return 1;
+    }
+    if (flags["dry-run"]) {
+        console.log(`\nDry run. This would run:\n  ${command}`);
+        return 0;
+    }
+    console.log(`\nSigning with "${source}" (${signer}) on ${cliNetwork}...`);
+    await stellar(args);
+    return confirm(flags, registry, prepared, network);
+}
+function printRequest(prepared) {
+    console.log(`Validation request:\n${JSON.stringify(prepared.request, null, 2)}\n`);
+    console.log(`  request_hash  ${prepared.requestHash}`);
+    console.log(`  request_uri   a data: URI holding the request itself (${prepared.requestUri.length} characters)`);
+}
+/** After sending: writes --out, then reads the registry back before telling the developer what's next. */
+async function confirm(flags, registry, prepared, network) {
+    const { request, requestHash } = prepared;
+    if (flags.out !== undefined)
+        await writeFile(flags.out, validationRequestBytes(request));
+    const record = await registry.validation(requestHash);
+    if (record?.agentId !== request.agentId || record.validator !== request.validator) {
+        console.log("Sent, but the registry does not show the request yet. Look its hash up again before sending another.");
+        return 1;
+    }
+    console.log(`Requested: agent ${request.agentId} asks ${request.validator} for validation on ${network}.`);
+    if (flags.out !== undefined)
+        console.log(`The request document is in ${flags.out}.`);
+    console.log("Next: nothing to send. A verifier running `verifier watch` finds the request on chain, checks the provider and");
+    console.log("answers there, and provider-kit status shows its answer. A verifier working by hand answers with:");
+    console.log(`  verifier publish <receipt.json> --request-hash ${requestHash} --response-uri <https url> --source <its key>`);
+    return 0;
+}
+//# sourceMappingURL=request-validation.js.map

package/dist/cli/request-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-validation.js","sourceRoot":"","sources":["../../src/cli/request-validation.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,2DAA2D;AAC3D,EAAE;AACF,2GAA2G;AAC3G,qGAAqG;AACrG,yCAAyC;AACzC,EAAE;AACF,8GAA8G;AAC9G,qGAAqG;AACrG,yGAAyG;AACzG,2GAA2G;AAC3G,8DAA8D;AAE9D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAA8C,MAAM,kCAAkC,CAAC;AAE1I,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,sBAAsB,EAAkC,MAAM,0BAA0B,CAAC;AACxJ,OAAO,EAAE,aAAa,EAAE,eAAe,EAAqB,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAA+B,MAAM,aAAa,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAazC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAe,EAAE,KAA0B,OAAO,CAAC,KAAK,CAAC;IAC/F,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACpC,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,oEAAoE,CAAC,CAAC;IACxH,IAAI,kBAAkB,CAAC,SAAS,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,4FAA4F,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3K,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpD,MAAM,OAAO,GAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAClH,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC5G,CAAC;AAED,sEAAsE;AACtE,KAAK,UAAU,UAAU,CAAC,KAAe,EAAE,EAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAW;IACtH,qHAAqH;IACrH,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IACrB,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAChH,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvB,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,yGAAyG,OAAO,uBAAuB,CAAC,CAAC;QACrJ,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAiB;QACzB,OAAO,EAAE,iCAAiC;QAC1C,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,2BAA2B,QAAQ,CAAC,QAAQ,CAAC,IAAI,wGAAwG;QAChK,OAAO;QACP,GAAG,CAAC,KAAK,KAAK,SAAS;YACrB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,uHAAuH,EAAE,EAAE,CAAC;QAC3L,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACpE,KAAK,CAAC,KAAK,CAAC,OAAO;YACjB,IAAI,CAAC;gBACH,MAAM,wBAAwB,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YAClH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,sBAAsB;oBAAE,MAAM,IAAI,aAAa,CAAC,uCAAuC,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;gBACnJ,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACb,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,4IAA4I;YACrJ,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE;gBAClE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE;gBACrG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;aAC3C;SACF,CAAC;KACH,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,oEAAoE;AACpE,KAAK,UAAU,cAAc,CAAC,KAAe,EAAE,EAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAW,EAAE,MAAc;IAC1I,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3F,uGAAuG;IACvG,wCAAwC;IACxC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAClK,YAAY,CAAC,QAAQ,CAAC,CAAC;IAEvB,MAAM,IAAI,GAAG,0BAA0B,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,IAAI,0BAA0B,MAAM,GAAG,EAAE,CAAC,CAAC;IAC1I,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvD,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CACT,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,qHAAqH;YACvH,CAAC,CAAC,yCAAyC,MAAM,sBAAsB,CAC1E,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,MAAM,MAAM,QAAQ,UAAU,KAAK,CAAC,CAAC;IAC1E,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,QAAmC;IACvD,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,2DAA2D,QAAQ,CAAC,UAAU,CAAC,MAAM,cAAc,CAAC,CAAC;AACnH,CAAC;AAED,0GAA0G;AAC1G,KAAK,UAAU,OAAO,CAAC,KAAe,EAAE,QAAwB,EAAE,QAAmC,EAAE,OAAuB;IAC5H,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC;IAC1C,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,MAAM,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,sGAAsG,CAAC,CAAC;QACpH,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,OAAO,SAAS,OAAO,CAAC,SAAS,sBAAsB,OAAO,GAAG,CAAC,CAAC;IAC3G,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,gHAAgH,CAAC,CAAC;IAC9H,OAAO,CAAC,GAAG,CAAC,mGAAmG,CAAC,CAAC;IACjH,OAAO,CAAC,GAAG,CAAC,oDAAoD,WAAW,gDAAgD,CAAC,CAAC;IAC7H,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/serve.d.ts

@@ -0,0 +1,25 @@
+import { type Listening } from "../http/node-server.js";
+import { type Provider, type ProviderConfig } from "../provider.js";
+import { type CliFlags } from "./shared.js";
+export interface GatewayOptions {
+    /** Allows http://localhost [M6]. */
+    dev?: boolean;
+    noWorkers?: boolean;
+    port?: number;
+    /** Serves under another origin than the config's, such as a tunnel's. */
+    baseUrl?: string;
+    env?: NodeJS.ProcessEnv;
+    /** Where the summary goes. Default: the console. */
+    log?: (line: string) => void;
+}
+export interface ServedGateway {
+    config: ProviderConfig;
+    provider: Provider;
+    server: Listening;
+}
+/** Loads and checks a gateway config, starts the provider and listens, then prints what it serves. */
+export declare function serveGateway(path: string, options?: GatewayOptions): Promise<ServedGateway>;
+export declare function serve(flags: CliFlags): Promise<number>;
+/** On SIGTERM or SIGINT: runs `stop` once, then exits 0, or 1 when it fails. */
+export declare function stopOnSignals(stop: () => Promise<unknown>, log: (line: string) => void): void;
+//# sourceMappingURL=serve.d.ts.map

package/dist/cli/serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/cli/serve.ts"],"names":[],"mappings":"AASA,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAkB,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACpF,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAExD,MAAM,WAAW,cAAc;IAC7B,oCAAoC;IACpC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,oDAAoD;IACpD,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,SAAS,CAAC;CACnB;AAED,sGAAsG;AACtG,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CA8BrG;AAED,wBAAsB,KAAK,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAU5D;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAgB7F"}

package/dist/cli/serve.js

@@ -0,0 +1,73 @@
+// provider-kit serve --config <file>: gateway mode.
+//
+// Loads and checks the config (failing closed), runs the startup checks, then listens. SIGTERM and
+// SIGINT stop it gracefully: no new connections, requests in flight finish, the store closes. Paid
+// jobs that were still queued or running resume on the next start.
+//
+// serveGateway() is the same start, for `provider-kit dev` and for `try` when it starts the provider itself.
+import { loadGatewayConfig } from "../gateway/config.js";
+import { listen } from "../http/node-server.js";
+import { createProvider } from "../provider.js";
+import { UsageError } from "./shared.js";
+/** Loads and checks a gateway config, starts the provider and listens, then prints what it serves. */
+export async function serveGateway(path, options = {}) {
+    const log = options.log ?? ((line) => console.log(line));
+    const { config, listen: where } = await loadGatewayConfig(path, {
+        ...(options.env === undefined ? {} : { env: options.env }),
+        overrides: {
+            ...(options.dev ? { dev: true } : {}),
+            ...(options.noWorkers ? { runQueuedJobs: false } : {}),
+            ...(options.port === undefined ? {} : { port: options.port }),
+            ...(options.baseUrl === undefined ? {} : { baseUrl: options.baseUrl }),
+        },
+    });
+    const provider = createProvider(config);
+    try {
+        await provider.ready();
+    }
+    catch (error) {
+        await provider.close();
+        throw error;
+    }
+    const server = await listen(provider, where);
+    log(`provider-kit: serving ${config.provider.name}`);
+    log(`  listening  ${server.url}`);
+    log(`  manifest   ${provider.manifestUrl}`);
+    log(`  network    ${config.network}, payTo ${config.payTo}`);
+    for (const service of provider.manifest.services) {
+        const usdc = Number(service.price.amount) / 1e7;
+        log(`  service    ${service.name}: ${usdc} USDC, ${service.charge}, ${service.capacity?.concurrency} at a time`);
+    }
+    if (config.dev)
+        log("  dev mode: http://localhost is allowed. Never use it in production.");
+    return { config, provider, server };
+}
+export async function serve(flags) {
+    if (flags.config === undefined)
+        throw new UsageError("serve needs --config <file>");
+    const port = flags.port === undefined ? undefined : Number(flags.port);
+    const { server } = await serveGateway(flags.config, {
+        ...(flags.dev ? { dev: true } : {}),
+        ...(flags["no-workers"] ? { noWorkers: true } : {}),
+        ...(port === undefined ? {} : { port }),
+    });
+    stopOnSignals(() => server.close(), (line) => console.log(line));
+    return -1;
+}
+/** On SIGTERM or SIGINT: runs `stop` once, then exits 0, or 1 when it fails. */
+export function stopOnSignals(stop, log) {
+    let stopping = false;
+    const handle = (signal) => {
+        if (stopping)
+            return;
+        stopping = true;
+        log(`provider-kit: ${signal}, finishing requests in flight`);
+        stop().then(() => process.exit(0), (error) => {
+            console.error("provider-kit: shutdown failed:", error);
+            process.exit(1);
+        });
+    };
+    process.on("SIGTERM", () => handle("SIGTERM"));
+    process.on("SIGINT", () => handle("SIGINT"));
+}
+//# sourceMappingURL=serve.js.map

package/dist/cli/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../src/cli/serve.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,mGAAmG;AACnG,mGAAmG;AACnG,mEAAmE;AACnE,EAAE;AACF,6GAA6G;AAE7G,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAkB,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAsC,MAAM,gBAAgB,CAAC;AACpF,OAAO,EAAE,UAAU,EAAiB,MAAM,aAAa,CAAC;AAoBxD,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,UAA0B,EAAE;IAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE;QAC9D,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1D,SAAS,EAAE;YACT,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACvE;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE7C,GAAG,CAAC,yBAAyB,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,GAAG,CAAC,gBAAgB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5C,GAAG,CAAC,gBAAgB,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;QAChD,GAAG,CAAC,gBAAgB,OAAO,CAAC,IAAI,KAAK,IAAI,UAAU,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE,WAAW,YAAY,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,MAAM,CAAC,GAAG;QAAE,GAAG,CAAC,sEAAsE,CAAC,CAAC;IAC5F,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,KAAe;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE;QAClD,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KACxC,CAAC,CAAC;IACH,aAAa,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,IAA4B,EAAE,GAA2B;IACrF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE;QAChC,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,GAAG,CAAC,iBAAiB,MAAM,gCAAgC,CAAC,CAAC;QAC7D,IAAI,EAAE,CAAC,IAAI,CACT,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EACrB,CAAC,KAAK,EAAE,EAAE;YACR,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC/C,CAAC"}