@temporalabs/treasury 0.1.1 → 0.1.2

package/dist/version.js

@@ -7,7 +7,7 @@
  * Same resolution trick as registry.ts: this file sits at src/ top level and the bundle at dist/
  * top level, so `../package.json` is the package manifest at the repository root from both.
  * Resolved from this file's REAL path: under `--preserve-symlinks-main`, `import.meta.url` is the
- * path of a symlink to the bundle (npm's `.bin/treasury-mcp`), and `../package.json` from there is a
+ * path of a symlink to the bundle (npm's `.bin/treasury`), and `../package.json` from there is a
  * file in whatever directory holds the link.
  */
 import { readFileSync, realpathSync } from "node:fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@temporalabs/treasury",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -10,6 +10,7 @@
     "LICENSE",
     "NOTICE",
     "THIRD_PARTY_NOTICES.md",
+    "THIRD_PARTY_NOTICES.connect-page.md",
     "dist",
     "registry"
   ],
@@ -22,7 +23,7 @@
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "bin": {
-    "treasury-mcp": "./dist/mcp-server.mjs"
+    "treasury": "./dist/treasury.mjs"
   },
   "exports": {
     ".": {
@@ -34,19 +35,18 @@
     "node": ">=22"
   },
   "scripts": {
-    "prepack": "npm run build && git diff --exit-code -- dist/mcp-server.mjs THIRD_PARTY_NOTICES.md",
+    "prepack": "npm run build && git diff --exit-code -- dist/treasury.mjs THIRD_PARTY_NOTICES.md",
     "build": "tsc -b && tsup && tsx scripts/third-party-notices.ts --write && bash scripts/sync-plugin.sh",
     "typecheck": "tsc -b && tsc -p tsconfig.scripts.json",
     "test": "tsc -b && tsc -p tsconfig.scripts.json && vitest run",
     "test:fork": "tsc -b && TREASURY_FORK=1 vitest run --testTimeout 300000 tests/fork.test.ts",
-    "mcp": "tsx src/mcp/server.ts",
+    "cli": "tsx src/cli.ts",
     "registry:check": "tsx scripts/registry-check.ts",
     "notices:check": "tsx scripts/third-party-notices.ts",
     "plugin:check": "bash scripts/sync-plugin.sh --check && bash scripts/check-versions.sh",
     "lint:skill": "bash scripts/lint-skill.sh"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.20.0",
     "viem": "^2.37.0",
     "zod": "^4.1.0"
   },

package/registry/vaults.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "reconciledAtIso": "2026-09-18T16:25:46Z",
+  "reconciledAtIso": "2026-10-04T21:22:04Z",
   "vaults": [
     {
       "symbol": "tlCashPlusUSDC2",
@@ -10,7 +10,7 @@
       "address": "0x040fCA12673778FEED5DA7b2ccFbbAb0cc0134Cf",
       "chassis": "morpho-v2",
       "backend": "tempora",
-      "isDefault": true,
+      "isDefault": false,
       "asset": {
         "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
         "symbol": "USDC",
@@ -30,7 +30,7 @@
         "Morpho Vault V2. maxDeposit() and maxWithdraw() return 0 to every caller by protocol design; the pre-flight simulates the real call and earn_balance simulates the exit. Neither reads those views.",
         "Withdrawals are served from idle USDC, then through the vault's liquidity adapter; a withdrawal larger than that reverts until positions are unwound. earn_balance reports exitableNow by simulating the withdrawal.",
         "No fee is set: performanceFee() = 0 and managementFee() = 0 at block 51372415. The curator can introduce one, and the vault's fee timelocks are 0 (timelock(setPerformanceFee) = timelock(setManagementFee) = 0 at block 51404161), so a change needs no notice. Read both fees before depositing.",
-        "The DEFAULT vault, and open to any account: it is in depositable."
+        "The DEMO vault. Open to any account and in depositable, but not the default: name it with `--vault tlCashPlusUSDC2`. Its structure is the one Test 2B restores as a sibling."
       ]
     },
     {
@@ -60,9 +60,110 @@
       "notes": [
         "8-decimal shares against a 6-decimal asset — a share amount is never an asset amount here.",
         "getInstantWithdrawalFuses() returns three fuses (measured at block 51361109), so a withdrawal is served from the vault's liquid balance and then, in fuse order, by unwinding its positions in the same transaction. A withdrawal larger than what those positions can release in-block still reverts; earn_balance reports exitableNow, which simulates the withdrawal rather than reading maxWithdraw.",
-        "Deposits need role 800 on the AccessManager. An account without it gets WHITELIST_GATED from earn_status and earn_quote, and this client refuses to build a deposit for it. Withdrawals are public.",
+        "Deposits need role 800 on the AccessManager. An account without it gets WHITELIST_GATED from earn_status and earn_quote. Neither earn prepare_deposit nor connect deposit checks the role: a deposit built for such an account reverts on-chain (AccessManagedUnauthorized), so run earn_status for the account first. Withdrawals are public.",
         "Whitelist-gated (role 800 on its AccessManager): not in depositable. Listed so that an admitted account's position can be read and exited; a non-member gets WHITELIST_GATED from earn_status before anything is built."
       ]
+    },
+    {
+      "symbol": "tlCashPlusUSDC2B",
+      "name": "Tempora Labs Cash Plus USDC (Test 2B)",
+      "warning": "TEST VAULT — unproven. It exists to exercise this product, not to hold savings. Deposit only an amount you are fully prepared to lose entirely, and do not move significant funds into it. Show this warning before preparing any deposit.",
+      "chainId": 8453,
+      "address": "0x91BcEbA5feCB9E92d80F1845B55cC56621E9352F",
+      "chassis": "morpho-v2",
+      "backend": "tempora",
+      "isDefault": true,
+      "asset": {
+        "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+        "symbol": "USDC",
+        "decimals": 6
+      },
+      "shareDecimals": 18,
+      "depositOpen": {
+        "open": true,
+        "method": "simulated-deposit-from-stranger",
+        "measuredAtBlock": 52097648,
+        "measuredAtIso": "2026-10-02T23:44:03Z",
+        "detail": "deposit(1 USDC, 0x…dEaD) from 0x…dEaD reverted 0xe65b7a77 TransferFromReverted at block 52097648 — it reached the token pull, so access is open; maxDeposit() reads 0 to every caller on this chassis by design and is not consulted."
+      },
+      "deployedAtBlock": 51436870,
+      "notes": [
+        "18-decimal shares against a 6-decimal asset — a share amount is never an asset amount here.",
+        "Morpho Vault V2. maxDeposit() and maxWithdraw() return 0 to every caller by protocol design; the pre-flight simulates the real call and earn_balance simulates the exit. Neither reads those views.",
+        "Withdrawals are served from idle USDC, then through the vault's liquidity adapter; a withdrawal larger than that reverts until positions are unwound. earn_balance reports exitableNow by simulating the withdrawal.",
+        "No fee is set: performanceFee() = 0 and managementFee() = 0 at block 52097648. The curator can introduce one, and the vault's fee timelocks are 0 (timelock(setPerformanceFee) = timelock(setManagementFee) = 0 at block 52097648), so a change needs no notice. Read both fees before depositing.",
+        "Three configured adapters (measured at block 52097648); Treasury does not model the fund's allocation across them — read the vault's positions on-chain before a first deposit.",
+        "Morpho's own app has no page for this vault (app.morpho.org answered 404 for it on 2026-10-02, and Morpho's API does not list it), unlike Test 2. Positions cannot be cross-checked there; verify on-chain or on BaseScan instead.",
+        "The DEFAULT vault on Base, and open to any account: it is in depositable."
+      ]
+    },
+    {
+      "symbol": "tlCashPlusUSDC2C",
+      "name": "Tempora Labs Cash Plus USDC (Test 2C)",
+      "warning": "TEST VAULT — unproven. It exists to exercise this product, not to hold savings. Deposit only an amount you are fully prepared to lose entirely, and do not move significant funds into it. Show this warning before preparing any deposit.",
+      "chainId": 42161,
+      "address": "0x4057a63953142Ac2b3E5dB1954Fc14d578662587",
+      "chassis": "morpho-v2",
+      "backend": "tempora",
+      "isDefault": true,
+      "asset": {
+        "address": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
+        "symbol": "USDC",
+        "decimals": 6
+      },
+      "shareDecimals": 18,
+      "depositOpen": {
+        "open": true,
+        "method": "simulated-deposit-from-stranger",
+        "measuredAtBlock": 511070816,
+        "measuredAtIso": "2026-10-02T18:43:33Z",
+        "detail": "deposit(1 USDC, 0x…dEaD) from 0x…dEaD reverted 0xe65b7a77 TransferFromReverted at block 511070816 — it reached the token pull, so access is open; maxDeposit() reads 0 to every caller on this chassis by design and is not consulted."
+      },
+      "deployedAtBlock": 510270114,
+      "notes": [
+        "On Arbitrum One (chain 42161). Calls for this vault are sent on Arbitrum, and its RPC is TREASURY_RPC_ARBITRUM.",
+        "The asset is native USDC on Arbitrum One, not bridged USDC.e, which is a different token this vault does not take.",
+        "18-decimal shares against a 6-decimal asset — a share amount is never an asset amount here.",
+        "Morpho Vault V2. maxDeposit() and maxWithdraw() return 0 to every caller by protocol design; the pre-flight simulates the real call and earn_balance simulates the exit. Neither reads those views.",
+        "Withdrawals are served from idle USDC, then through the vault's liquidity adapter; a withdrawal larger than that reverts until positions are unwound. earn_balance reports exitableNow by simulating the withdrawal.",
+        "No fee is set: performanceFee() = 0 and managementFee() = 0 at block 511070816. The curator can introduce one, and the vault's fee timelocks are 0 (timelock(setPerformanceFee) = timelock(setManagementFee) = 0 at block 511070816), so a change needs no notice. Read both fees before depositing.",
+        "The default vault on Arbitrum One, and open to any account: it is in depositable."
+      ]
+    },
+    {
+      "symbol": "tlCashPlusUSDG2D",
+      "name": "Tempora Labs Cash Plus USDG (Test 2D)",
+      "warning": "TEST VAULT — unproven. It exists to exercise this product, not to hold savings. Deposit only an amount you are fully prepared to lose entirely, and do not move significant funds into it. Show this warning before preparing any deposit.",
+      "chainId": 4663,
+      "address": "0x758f00731943aA88e8C7fB709e0B727903B4F833",
+      "chassis": "morpho-v2",
+      "backend": "tempora",
+      "isDefault": true,
+      "asset": {
+        "address": "0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",
+        "symbol": "USDG",
+        "decimals": 6
+      },
+      "shareDecimals": 18,
+      "depositOpen": {
+        "open": true,
+        "method": "simulated-deposit-from-stranger",
+        "measuredAtBlock": 79974900,
+        "measuredAtIso": "2026-10-04T13:35:53Z",
+        "detail": "deposit(1 USDG, 0x…dEaD) from 0x…dEaD reverted 0xe65b7a77 TransferFromReverted at block 79974900 — it reached the token pull, so access is open; maxDeposit() reads 0 to every caller on this chassis by design and is not consulted."
+      },
+      "deployedAtBlock": 79381803,
+      "notes": [
+        "On Robinhood Chain (chain 4663). Calls for this vault are sent on Robinhood Chain, and its RPC is TREASURY_RPC_ROBINHOOD.",
+        "The asset is USDG (Global Dollar), not USDC: the first vault in this registry whose asset is not USDC. Amounts in and out of this vault are USDG, in USDG's own 6 decimals; a tool argument or result field named for USDC (amount_usdc, usdcValue) carries USDG here.",
+        "18-decimal shares against a 6-decimal asset — a share amount is never an asset amount here.",
+        "Morpho Vault V2. maxDeposit() and maxWithdraw() return 0 to every caller by protocol design; the pre-flight simulates the real call and earn_balance simulates the exit. Neither reads those views.",
+        "Withdrawals are served from idle USDG, then through the vault's liquidity adapter; a withdrawal larger than that reverts until positions are unwound. earn_balance reports exitableNow by simulating the withdrawal.",
+        "No fee is set: performanceFee() = 0 and managementFee() = 0 at block 79974900. The curator can introduce one, and the vault's fee timelocks are 0 (timelock(setPerformanceFee) = timelock(setManagementFee) = 0 at block 79974900), so a change needs no notice. Read both fees before depositing.",
+        "Three configured adapters (measured at block 79974900); Treasury does not model the fund's allocation across them — read the vault's positions on-chain before a first deposit.",
+        "The public Robinhood Chain endpoint answered a single eth_getLogs over 674,901 blocks (79,300,000 to 79,974,900, on 2026-10-04), which covers this vault's whole history; it does not serve state at past blocks, which nothing in this client reads.",
+        "The default vault on Robinhood Chain, and open to any account: it is in depositable."
+      ]
     }
   ]
 }

package/dist/mcp/server.d.ts

@@ -1,8 +0,0 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-/**
- * What a signer must do for these calls to land exactly once. Each rule is a failure measured on a
- * real Base round trip, not a precaution (2026-09-13, two runs through these tools).
- * The server cannot enforce any of them — it never signs — so it states them with every build.
- */
-export declare const SIGNER_RULES: readonly ["Before signing, check every call's destination against the addresses the operator gave: `to`, and the receiver/owner named in `description`. Do not sign a call whose destination you did not confirm.", "Set the nonce explicitly from eth_getTransactionCount(account, \"pending\") immediately before each send. A load-balanced RPC can hand a signing library a stale nonce, and the send is then rejected as \"nonce too low\" (measured 2026-09-14, mainnet.base.org).", "Set the gas limit to the call's gasAdvice (estimate × 1.5).", "Wait for each receipt before sending the next call, and poll for it on a provider that serves receipts: a public endpoint may refuse eth_getTransactionReceipt (measured 2026-09-14, publicnode). A failed receipt poll does not mean the transaction failed.", "If a send or receipt poll fails for any reason other than an on-chain revert, read the account's nonce on a DIFFERENT provider before re-sending. A nonce that moved means the transaction was accepted; re-sending it would repeat the deposit or withdrawal."];
-export declare function buildServer(): McpServer;

package/dist/mcp/server.js

@@ -1,368 +0,0 @@
-/**
- * Agent Treasury — MCP server (earn skill).
- *
- * Read tools, quotes, and UNSIGNED call builders only. There is no `sign` and no `send` tool, and
- * there will not be one here: the skill supplies intent, the consumer supplies the signer. Anything
- * that holds a key lives outside this process and receives the calls this server emits.
- *
- * Eight tools, all `earn_`-prefixed so later skills can sit beside them
- * in one namespace:
- *
- *   earn_vaults    earn_terms     earn_quote (direction)   earn_status (no args = health)
- *   earn_balance   earn_claim     earn_prepare_deposit     earn_prepare_withdraw
- *
- * Two contracts worth stating here because they are easy to erode:
- *
- * 1. `earn_prepare_*` return an ENVELOPE, `{ requires_signature, status: "unsigned", calls }`,
- *    not a bare array. This cannot stop a model reporting "deposited" — nothing at this boundary
- *    can — but it makes an unsigned build structurally distinguishable from a completed one, so a
- *    consumer or a test can assert on it. Wrapped HERE only: `buildDeposit`/`buildWithdraw` still
- *    return arrays, so a direct library consumer (see docs/runbooks/sign_and_send.md) gets the
- *    naked calls exactly as before.
- * 2. The address argument is `account` everywhere. It was `depositor`, `owner` and `principal` in
- *    three different tools. `receiver` stays distinct because it genuinely is: `account` owns the
- *    shares, `receiver` is where the money lands.
- */
-import { realpathSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { z } from "zod";
-import { redactEndpoints, registerSecretSource } from "../redact.js";
-import { isAddress, getAddress } from "viem";
-import { isSupportedChainId, makePublicClient, rpcUrlFromEnv, logsRpcUrlFromEnv, rpcSourceForEnv, resolvedRpcSecrets, publicRpcHint, logsFallbackUrlFromEnv } from "../client.js";
-import { defaultVault, depositableVaults, listVaults, loadRegistry, resolveVault } from "../registry.js";
-import { linksFor } from "../links.js";
-import { PACKAGE_VERSION } from "../version.js";
-import { preflightDeposit } from "../preflight.js";
-import { getPosition } from "../position.js";
-import { quoteDeposit, quoteWithdraw } from "../quote.js";
-import { buildDeposit, buildWithdraw } from "../build.js";
-import { DISCLOSURES } from "../disclosures.js";
-const addressArg = z
-    .string()
-    .refine((s) => isAddress(s), "must be an EVM address")
-    .transform((s) => getAddress(s));
-const amountArg = z.string().regex(/^\d+(\.\d+)?$/, 'plain decimal USDC amount, e.g. "25" or "12.5"');
-const vaultArg = z.string().optional().describe("the vault's ERC-20 ticker, e.g. tlCashPlusUSDC2 (earn_vaults lists them); omit for the default vault");
-const accountArg = addressArg.describe("the account whose shares these are — the depositor, the owner, the holder");
-function supportedVault(symbol) {
-    const vault = resolveVault(symbol);
-    if (!isSupportedChainId(vault.chainId))
-        throw new Error(`chain ${vault.chainId} unsupported`);
-    return vault;
-}
-function clientFor(symbol) {
-    const vault = supportedVault(symbol);
-    return { vault, client: makePublicClient(vault.chainId, rpcUrlFromEnv(vault.chainId)) };
-}
-/** Shapes that mean "the transport failed", as opposed to a verdict about the vault. */
-const RPC_FAILURE = /RPC Request failed|HTTP request failed|reads failed|over rate limit|rate.?limit|"unreachable"|fetch failed|ETIMEDOUT|ECONNREFUSED/i;
-/**
- * Serialise a tool result, and when the payload shows a TRANSPORT failure while no RPC is
- * configured, attach the one sentence that turns "this is broken" into "set this variable".
- * Attached as a FIELD rather than appended to prose, so a consumer can branch on it.
- */
-const text = (v) => {
-    let body = typeof v === "string" ? v : JSON.stringify(v, null, 2);
-    if (RPC_FAILURE.test(body)) {
-        const hint = publicRpcHint(8453);
-        if (hint) {
-            body =
-                typeof v === "string"
-                    ? `${body}\n\n${hint}`
-                    : JSON.stringify({ ...v, setup_required: hint }, null, 2);
-        }
-    }
-    return { content: [{ type: "text", text: body }] };
-};
-/** An unsigned build never leaves this server as a bare array. See contract 1 in the file header. */
-/**
- * 🔴 THE ONE PLACE THE VAULT'S WARNING IS ATTACHED TO A RESPONSE. Every response that can be the
- * last thing an agent reads before a signer sees calldata goes through here.
- *
- * It exists as a chokepoint rather than three tidy literals for a reason worth keeping. The warning
- * first shipped on `earn_vaults` alone — a DISCOVERY call — while the warning's own text says to
- * show it before preparing a deposit. A caller who names a vault directly never makes that call, so
- * the disclosure reached whoever happened to have listed recently and nobody else. The repair added
- * it to three call sites, and two of those three were then unguarded: deleting the field from them
- * left the whole suite green.
- *
- * A test per call site would only have guarded the sites someone remembered to write a test for,
- * which is the same defect one level up. So: attach it HERE, and `server.unit.test.ts` asserts this
- * is the only place in the file that writes a `warning` field. A fourth money-committing tool then
- * gets the disclosure by going through this helper, and a hand-rolled one is caught by that test
- * rather than by someone noticing.
- *
- * Withdrawals deliberately do NOT call this. The warning is about COMMITTING money, not retrieving
- * it, and a disclosure repeated where it does not apply is what teaches a reader to skip the one
- * that does. That absence is asserted too.
- */
-const commitsMoney = (vault) => ({ warning: vault.warning });
-const unsigned = (calls, vault) => text({
-    requires_signature: true,
-    status: "unsigned",
-    // before `next_step`, so it is not past the field a reader stops at
-    ...(vault === undefined ? {} : commitsMoney(vault)),
-    next_step: "Hand these calls to a signer IN ORDER, following `signer_rules`. A call carrying `precondition` must not be estimated or sent until that read holds on the RPC the signer sends through. Nothing has been submitted; no funds have moved.",
-    signer_rules: SIGNER_RULES,
-    calls,
-});
-/**
- * What a signer must do for these calls to land exactly once. Each rule is a failure measured on a
- * real Base round trip, not a precaution (2026-09-13, two runs through these tools).
- * The server cannot enforce any of them — it never signs — so it states them with every build.
- */
-export const SIGNER_RULES = [
-    "Before signing, check every call's destination against the addresses the operator gave: `to`, and the receiver/owner named in `description`. Do not sign a call whose destination you did not confirm.",
-    "Set the nonce explicitly from eth_getTransactionCount(account, \"pending\") immediately before each send. A load-balanced RPC can hand a signing library a stale nonce, and the send is then rejected as \"nonce too low\" (measured 2026-09-14, mainnet.base.org).",
-    "Set the gas limit to the call's gasAdvice (estimate × 1.5).",
-    "Wait for each receipt before sending the next call, and poll for it on a provider that serves receipts: a public endpoint may refuse eth_getTransactionReceipt (measured 2026-09-14, publicnode). A failed receipt poll does not mean the transaction failed.",
-    "If a send or receipt poll fails for any reason other than an on-chain revert, read the account's nonce on a DIFFERENT provider before re-sending. A nonce that moved means the transaction was accepted; re-sending it would repeat the deposit or withdrawal.",
-];
-/**
- * Every handler runs inside this. The MCP SDK forwards a thrown error's `.message` to the caller
- * verbatim, and viem's messages carry the transport URL — a keyed provider URL is a secret.
- * Anything that escapes a handler is re-thrown with endpoints masked.
- */
-const guarded = (fn) => async (...a) => {
-    try {
-        return await fn(...a);
-    }
-    catch (e) {
-        const msg = e instanceof Error ? e.message : String(e);
-        const redacted = redactEndpoints(msg);
-        // A thrown transport error on the public endpoint gets the same sentence a returned one does.
-        const hint = RPC_FAILURE.test(redacted) ? publicRpcHint(8453) : undefined;
-        throw new Error(hint ? `${redacted}\n\n${hint}` : redacted);
-    }
-};
-export function buildServer() {
-    // 🔴 Value-based redaction, registered before any handler can run. `redactEndpoints` masks the
-    // resolved RPC URL and its credential-bearing parts wherever they appear — including inside a
-    // provider's own error body, which is prose in JSON and which no shape rule matches
-    // (review, reproduced against a real viem client and a real 401).
-    registerSecretSource(resolvedRpcSecrets);
-    const server = new McpServer({ name: "treasury", version: PACKAGE_VERSION });
-    server.registerTool("earn_vaults", {
-        title: "List vaults",
-        description: "Every vault in the registry. `symbol` is the vault's own on-chain ERC-20 ticker — the value every other tool takes as `vault` — and `name` its `name()`; `links` are openable without any RPC endpoint, so an operator can verify the contract independently. SHOW `warning` TO THE DEPOSITOR — every vault offered today is a test vault. Each row also carries its backend, chassis, decimals and MEASURED deposit-open status. `default` is used when a tool is called without `vault`; `depositable` is the subset any account can put money into today: ERC-4626 chassis + measured open. `defaultAccess` says whether the default takes deposits from any account (`open`) or only whitelisted ones (`whitelist`); for `whitelist`, run earn_status for the account before preparing a deposit.",
-        inputSchema: {},
-    }, guarded(async () => {
-        const reg = loadRegistry();
-        return text({
-            reconciledAtIso: reg.reconciledAtIso,
-            default: defaultVault().symbol,
-            defaultAccess: defaultVault().depositOpen.open ? "open" : "whitelist",
-            depositable: depositableVaults().map((v) => v.symbol),
-            vaults: listVaults().map((v) => ({
-                symbol: v.symbol,
-                name: v.name,
-                warning: v.warning,
-                links: linksFor(v),
-                backend: v.backend,
-                isDefault: v.isDefault,
-                chainId: v.chainId,
-                address: v.address,
-                chassis: v.chassis,
-                asset: v.asset,
-                shareDecimals: v.shareDecimals,
-                depositOpen: v.depositOpen,
-                notes: v.notes,
-            })),
-        });
-    }));
-    server.registerTool("earn_terms", {
-        title: "Pre-deposit disclosures",
-        description: "The disclosures every distribution surface must present before a depositor's first deposit. Show these to the operator and record acknowledgement before building any deposit.",
-        inputSchema: {},
-    }, guarded(async () => text(DISCLOSURES)));
-    server.registerTool("earn_status", {
-        title: "Server health, or a deposit pre-flight verdict",
-        description: "With NO arguments: is the server up and the RPC reachable — chain id, latest block, registry version, and which env var supplied the RPC (never the URL). With `account`: simulates deposit() from that address and reports OPEN_READY, NEEDS_APPROVAL, WHITELIST_GATED, REVERTED_OTHER, REFUSED_BY_CLIENT or UNRESOLVED, never trusting maxDeposit(). The `mode` field says which answer you got.",
-        inputSchema: { vault: vaultArg, account: accountArg.optional(), amount_usdc: amountArg.optional() },
-    }, guarded(async ({ vault: symbol, account, amount_usdc }) => {
-        if (account !== undefined) {
-            const { vault, client } = clientFor(symbol);
-            const args = amount_usdc === undefined ? { vault, depositor: account, client } : { vault, depositor: account, client, assetsHuman: amount_usdc };
-            const verdict = await preflightDeposit(args);
-            // spread FIRST so the discriminant cannot be overwritten by a field of the same name
-            return text({ ...verdict, mode: "preflight", account, ...commitsMoney(vault) });
-        }
-        // Health. A partial call (a vault but no account) is answered here too, and says so in
-        // STRUCTURE rather than in prose — a note is exactly what a consumer skips, and the risk is
-        // a loud health result being read as a preflight pass.
-        //
-        // A schema error would also close this. It is not taken because a structural carrier is more
-        // forgiving to an exploring agent: `earn_status` stays answerable in every state, including
-        // a malformed call. This is NOT rejected on the must-never-throw rule below — that rule governs
-        // a RUNTIME failure on the health path (a dead RPC must yield a verdict, not an exception),
-        // whereas a partial-args call is an INPUT problem settled by MCP's own invalid-params layer
-        // before the handler body runs. The two are different layers, and conflating them would license
-        // "never validate inputs on a path that must not throw", which is not the rule.
-        //
-        // Only the account-missing case is "partial": `vault` HAS a default (documented as "omit for
-        // the default vault" across the whole tool surface), `account` has none. So {account, no vault}
-        // is a complete preflight against the default, not a partial call.
-        const partial = symbol !== undefined ? { requested: "preflight", missing: ["account"] } : {};
-        const vault = supportedVault(symbol);
-        const src = rpcSourceForEnv(vault.chainId);
-        const base = {
-            mode: "health",
-            ...partial,
-            server: "treasury",
-            version: PACKAGE_VERSION,
-            registry: { schemaVersion: loadRegistry().schemaVersion, vaults: loadRegistry().vaults.length, reconciledAtIso: loadRegistry().reconciledAtIso },
-            chainId: vault.chainId,
-            rpcSource: src.source,
-            rpcConfigured: src.configured,
-        };
-        // 🔴 The health path RETURNS a verdict when the RPC is unreachable. It must never throw: a
-        // tool that throws on a dead RPC answers nothing, which is the whole point of having it.
-        try {
-            const client = makePublicClient(vault.chainId, rpcUrlFromEnv(vault.chainId));
-            return text({ ...base, rpc: "ok", latestBlock: (await client.getBlockNumber()).toString() });
-        }
-        catch (e) {
-            const reason = redactEndpoints(e instanceof Error ? e.message : String(e));
-            return text({ ...base, rpc: "unreachable", latestBlock: null, reason });
-        }
-    }));
-    server.registerTool("earn_quote", {
-        title: "Quote a deposit or a withdrawal",
-        description: "Pre-trade quote, in USDC. direction=deposit: expected shares (previewDeposit), share price, and the access verdict from a simulated deposit(). This client quotes no rate: an ERC-4626 vault exposes none, and it calls no yield API. direction=withdraw: shares burned (previewWithdraw), shares held, a simulated withdraw() verdict, `instantLiquidity` — the vault's own liquid balance of the asset, which is chassis-specific in BOTH directions: a Fusion vault without instant-withdrawal fuses pays only from it, so there it is the ceiling maxWithdraw() does not know; a Morpho V2 vault holds almost none and still pays out of its markets, so there it is near zero and NOT a ceiling — the simulated verdict is what decides — maxWithdraw advisory only (Morpho V2 returns 0 by design), and queue depth. Run before the matching earn_prepare_* tool.",
-        inputSchema: {
-            vault: vaultArg,
-            account: accountArg,
-            amount_usdc: amountArg,
-            direction: z.enum(["deposit", "withdraw"]).describe("which side to quote — required, there is no default"),
-        },
-    }, guarded(async ({ vault: symbol, account, amount_usdc, direction }) => {
-        const { vault, client } = clientFor(symbol);
-        // 🔴 The tag is emitted from INSIDE each branch, beside the fields that branch produces —
-        // never `{ direction, ...quote }` from the input argument. Measured in review: with the tag
-        // taken from the input, swapping these two branches left `tsc -b` clean and all 61 tests
-        // passing, and the result read `{ direction: "deposit", sharesToBurn: … }` — the tag said
-        // deposit while the body was a withdrawal. A guard derived from the wrong side of the thing
-        // it guards cannot detect the bug it exists for. Emitted here, tag and body are consistent
-        // BY CONSTRUCTION; a swapped route is then wrong about the REQUEST, which the handler test
-        // catches by asserting requested === returned, and never lying about the BODY.
-        if (direction === "deposit") {
-            return text({
-                direction: "deposit",
-                ...commitsMoney(vault),
-                ...(await quoteDeposit({ vault, depositor: account, assetsHuman: amount_usdc, client })),
-            });
-        }
-        return text({ direction: "withdraw", ...(await quoteWithdraw({ vault, owner: account, assetsHuman: amount_usdc, client })) });
-    }));
-    server.registerTool("earn_prepare_deposit", {
-        title: "Prepare an unsigned deposit",
-        description: "Returns the UNSIGNED calls for a deposit — [approve(asset → vault), deposit(assets, receiver)] — inside an envelope with requires_signature: true. Amount is USDC. NOTHING IS SUBMITTED: hand the calls to a signer in order. This tool cannot sign or send, and the deposit has not happened until the signer's transactions confirm. Each call also carries `function` and `args` — the same call `data` encodes, decoded, e.g. `approve(address spender, uint256 value)` with `{ spender, value }` — so an operator without a CLI signer can fill a block explorer's Write Contract form directly. `args` values are RAW contract units, which is what the form takes; `description` is the human sentence.",
-        inputSchema: {
-            vault: vaultArg,
-            account: accountArg.describe("the depositing account — the one that signs both calls; step 2's allowance precondition is read for it"),
-            amount_usdc: amountArg,
-            receiver: addressArg.describe("where the SHARES land — usually the account, not necessarily"),
-        },
-    }, guarded(async ({ vault: symbol, account, amount_usdc, receiver }) => {
-        const vault = supportedVault(symbol);
-        return unsigned(buildDeposit(vault, { assetsHuman: amount_usdc, receiver, account }), vault);
-    }));
-    server.registerTool("earn_prepare_withdraw", {
-        title: "Prepare an unsigned withdrawal",
-        description: "Returns the UNSIGNED call for a withdrawal in USDC terms — withdraw(assets, receiver, owner) — inside an envelope with requires_signature: true. To empty the account pass all=true with shares_exact copied verbatim from earn_balance.sharesExact (redeem of the exact balance; never a rounded number). NOTHING IS SUBMITTED and no funds have moved until a signer confirms. Each call also carries `function` and `args` — the same call `data` encodes, decoded, e.g. `approve(address spender, uint256 value)` with `{ spender, value }` — so an operator without a CLI signer can fill a block explorer's Write Contract form directly. `args` values are RAW contract units, which is what the form takes; `description` is the human sentence.",
-        inputSchema: {
-            vault: vaultArg,
-            receiver: addressArg.describe("where the USDC lands — NOT necessarily the account"),
-            account: accountArg.describe("whose shares are burnt"),
-            amount_usdc: amountArg.optional(),
-            all: z.boolean().optional(),
-            shares_exact: z.string().regex(/^\d+(\.\d+)?$/).optional(),
-        },
-    }, guarded(async ({ vault: symbol, receiver, account, amount_usdc, all, shares_exact }) => {
-        const vault = supportedVault(symbol);
-        // ⚠️ `receiver` and `account` are DIFFERENT slots and both are addresses, so a transposition
-        // here type-checks. `account` is the owner whose shares burn; `receiver` is the payee.
-        if (all) {
-            if (!shares_exact)
-                throw new Error("all=true requires shares_exact (copy earn_balance.sharesExact verbatim)");
-            return unsigned(buildWithdraw(vault, { receiver, owner: account, all: true, sharesExact: shares_exact }));
-        }
-        if (!amount_usdc)
-            throw new Error("provide amount_usdc, or all=true with shares_exact");
-        return unsigned(buildWithdraw(vault, { receiver, owner: account, assetsHuman: amount_usdc }));
-    }));
-    server.registerTool("earn_balance", {
-        title: "Earn position",
-        description: "Shares held (exact string + display), current USDC value, WHAT CAN ACTUALLY BE WITHDRAWN NOW (`exit`, measured by simulating the withdrawal — `usdcValue` is what the position is worth, `exit.exitableNow` is what the vault can pay, `exit.instantLiquidity` is the vault's own liquid balance of the asset, chassis-specific in both directions — a Fusion vault without instant-withdrawal fuses pays only from it, so there it is the ceiling and `usdcValue` can exceed `exitableNow` by 10x while `maxWithdraw()` — `exit.maxWithdrawSays` — reports the larger one; a Morpho V2 vault holds almost none and still pays out of its markets, so there a near-zero `instantLiquidity` is not a ceiling and `exitableNow` is the verdict), entry basis and accrued yield derived from the vault's own Deposit/Withdraw events for this account, and share price. `scan.complete` says whether the event window covered the whole position; `sharesExact` is what earn_prepare_withdraw({ all }) needs. `scan.depositTxs` and `scan.withdrawTxs` carry the transactions behind those events — `{ txHash, blockNumber, amountUsdc }`, oldest first — so an operator can be shown an explorer link without anyone rebuilding the log query; each list holds at most the 100 most recent, while `scan.deposits`/`scan.withdrawals` stay the totals.",
-        inputSchema: {
-            vault: vaultArg,
-            account: accountArg,
-            lookback_blocks: z.number().int().positive().optional().describe("how far back to scan for Deposit/Withdraw events; default: from the vault's deployment block, i.e. the whole history. The EFFECTIVE window is max_log_requests × the provider's eth_getLogs cap (Alchemy free 10 blocks, Base public 2,000); if the configured RPC cannot cover it, Base's public endpoint serves the scan and scan.source says so"),
-            max_log_requests: z.number().int().positive().max(400).optional().describe("cap on eth_getLogs calls per event per scan; default 100 (= 1,000 blocks on Alchemy free, 200,000 on Base public). scan.wholeHistory says whether the scan actually covered every block since the vault was deployed — scan.complete alone is only a reconciliation and can be vacuously true. For an older vault, a provider with a wide eth_getLogs range (TREASURY_LOGS_RPC_BASE) is what makes it whole"),
-        },
-    }, guarded(async ({ vault: symbol, account, lookback_blocks, max_log_requests }) => {
-        const vault = supportedVault(symbol);
-        const logsUrl = logsRpcUrlFromEnv(vault.chainId);
-        const client = makePublicClient(vault.chainId, logsUrl);
-        // `logsFallbackUrlFromEnv` returns undefined when the operator opted out or when the fallback
-        // would be the primary itself — the wiring is a one-liner precisely so it can be unit-tested
-        // (measured in review: mutating this line to `undefined` left every position-layer test green;
-        // `server.unit.test.ts` is what fails now).
-        const fallbackUrl = logsFallbackUrlFromEnv(vault.chainId, logsUrl);
-        const fallbackClient = fallbackUrl === undefined ? undefined : makePublicClient(vault.chainId, fallbackUrl);
-        return text(await getPosition({
-            vault,
-            principal: account,
-            client,
-            ...(fallbackClient ? { fallbackClient } : {}),
-            ...(lookback_blocks === undefined ? {} : { lookbackBlocks: BigInt(lookback_blocks) }),
-            ...(max_log_requests === undefined ? {} : { maxLogRequests: max_log_requests }),
-        }));
-    }));
-    server.registerTool("earn_claim", {
-        title: "Claim a queued withdrawal",
-        description: "Finalizes a queued withdrawal on chassis that settle asynchronously. No vault in the current registry queues — Morpho V2 and Fusion settle in the withdraw transaction — so this reports that nothing is claimable. Present so callers can code against the full contract before an async chassis (e.g. a queued-redemption fund) is added.",
-        inputSchema: { receipt_id: z.string() },
-    }, guarded(async ({ receipt_id }) => text({
-        receipt_id,
-        status: "nothing_to_claim",
-        note: "No chassis in the registry queues withdrawals; a withdraw() that succeeded already delivered the USDC. When an async chassis is added, this tool will finalize its claim handle.",
-    })));
-    return server;
-}
-async function main() {
-    const server = buildServer();
-    await server.connect(new StdioServerTransport());
-}
-/**
- * True only when THIS module is the file Node was asked to run. The comparison is by resolved path,
- * not by name: an earlier guard tested `process.argv[1]` against `/server\.(ts|mjs|js)$/`, which is
- * the basename of whatever was invoked — so the published bin (`treasury-mcp`, a symlink npm makes)
- * never matched and exited silently (#22), while any unrelated script named `*server.mjs` that merely
- * imported this module matched and seized stdio. Node resolves the main module's symlink before
- * evaluating it, so `import.meta.url` is already the real path and the two sides agree for a bin.
- * Anything unresolvable is treated as "not the entry point": the module loads and does nothing.
- */
-function isEntryPoint() {
-    const invoked = process.argv[1];
-    if (!invoked)
-        return false;
-    try {
-        return realpathSync(invoked) === realpathSync(fileURLToPath(import.meta.url));
-    }
-    catch {
-        return false;
-    }
-}
-if (isEntryPoint()) {
-    main().catch((e) => {
-        // Defence-in-depth: HARDENED, NOT TESTED. main() only builds the server and connects a stdio
-        // transport — every RPC URL is resolved inside a handler body, so nothing reachable here can
-        // carry one. This guard exists so that stays true if main() ever grows.
-        process.stderr.write(`treasury mcp: ${redactEndpoints(String(e))}\n`);
-        process.exit(1);
-    });
-}
-//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAClL,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzG,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC;KACrD,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,gDAAgD,CAAC,CAAC;AACtG,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sGAAsG,CAAC,CAAC;AACxJ,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,2EAA2E,CAAC,CAAC;AAEpH,SAAS,cAAc,CAAC,MAAe;IACrC,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,MAAe;IAChC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,wFAAwF;AACxF,MAAM,WAAW,GAAG,oIAAoI,CAAC;AAEzJ;;;;GAIG;AACH,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE;IAC1B,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAClE,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI;gBACF,OAAO,CAAC,KAAK,QAAQ;oBACnB,CAAC,CAAC,GAAG,IAAI,OAAO,IAAI,EAAE;oBACtB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAI,CAA6B,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC9D,CAAC,CAAC;AAEF,qGAAqG;AACrG;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAEzE,MAAM,QAAQ,GAAG,CAAC,KAAqB,EAAE,KAAkB,EAAE,EAAE,CAC7D,IAAI,CAAC;IACH,kBAAkB,EAAE,IAAI;IACxB,MAAM,EAAE,UAAU;IAClB,oEAAoE;IACpE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACnD,SAAS,EACP,2OAA2O;IAC7O,YAAY,EAAE,YAAY;IAC1B,KAAK;CACN,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,wMAAwM;IACxM,qQAAqQ;IACrQ,6DAA6D;IAC7D,+PAA+P;IAC/P,gQAAgQ;CACxP,CAAC;AAEX;;;;GAIG;AACH,MAAM,OAAO,GACX,CAAyB,EAA2B,EAAE,EAAE,CACxD,KAAK,EAAE,GAAG,CAAI,EAAc,EAAE;IAC5B,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACtC,8FAA8F;QAC9F,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC,CAAC;AAEJ,MAAM,UAAU,WAAW;IACzB,+FAA+F;IAC/F,8FAA8F;IAC9F,oFAAoF;IACpF,kEAAkE;IAClE,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7E,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,uwBAAuwB;QACzwB,WAAW,EAAE,EAAE;KAChB,EACD,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;YACV,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,OAAO,EAAE,YAAY,EAAE,CAAC,MAAM;YAC9B,aAAa,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW;YACrE,WAAW,EAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YACrD,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;aACf,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,gLAAgL;QAC7L,WAAW,EAAE,EAAE;KAChB,EACD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CACvC,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,gDAAgD;QACvD,WAAW,EACT,oYAAoY;QACtY,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE;KACpG,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE;QACxD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;YACjJ,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7C,qFAAqF;YACrF,OAAO,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,uFAAuF;QACvF,4FAA4F;QAC5F,uDAAuD;QACvD,EAAE;QACF,6FAA6F;QAC7F,4FAA4F;QAC5F,gGAAgG;QAChG,4FAA4F;QAC5F,4FAA4F;QAC5F,gGAAgG;QAChG,gFAAgF;QAChF,EAAE;QACF,6FAA6F;QAC7F,gGAAgG;QAChG,mEAAmE;QACnE,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,QAAQ;YACd,GAAG,OAAO;YACV,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,eAAe,EAAE;YAChJ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,GAAG,CAAC,MAAM;YACrB,aAAa,EAAE,GAAG,CAAC,UAAU;SAC9B,CAAC;QACF,2FAA2F;QAC3F,yFAAyF;QACzF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,iCAAiC;QACxC,WAAW,EACT,y0BAAy0B;QAC30B,WAAW,EAAE;YACX,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,UAAU;YACnB,WAAW,EAAE,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC;SAC3G;KACF,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE;QACnE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,0FAA0F;QAC1F,4FAA4F;QAC5F,yFAAyF;QACzF,0FAA0F;QAC1F,4FAA4F;QAC5F,2FAA2F;QAC3F,2FAA2F;QAC3F,+EAA+E;QAC/E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;gBACV,SAAS,EAAE,SAAkB;gBAC7B,GAAG,YAAY,CAAC,KAAK,CAAC;gBACtB,GAAG,CAAC,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;aACzF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,SAAS,EAAE,UAAmB,EAAE,GAAG,CAAC,MAAM,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACzI,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,grBAAgrB;QAClrB,WAAW,EAAE;YACX,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,wGAAwG,CAAC;YACtI,WAAW,EAAE,SAAS;YACtB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,8DAA8D,CAAC;SAC9F;KACF,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;QAClE,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/F,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,gCAAgC;QACvC,WAAW,EACT,0tBAA0tB;QAC5tB,WAAW,EAAE;YACX,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,oDAAoD,CAAC;YACnF,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YACtD,WAAW,EAAE,SAAS,CAAC,QAAQ,EAAE;YACjC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;SAC3D;KACF,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE;QACrF,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACrC,6FAA6F;QAC7F,uFAAuF;QACvF,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;YAC9G,OAAO,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxF,OAAO,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,qxCAAqxC;QACvxC,WAAW,EAAE;YACX,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,UAAU;YACnB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oVAAoV,CAAC;YACtZ,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6YAA6Y,CAAC;SAC1d;KACF,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,EAAE;QAC9E,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,8FAA8F;QAC9F,6FAA6F;QAC7F,+FAA+F;QAC/F,4CAA4C;QAC5C,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC5G,OAAO,IAAI,CACT,MAAM,WAAW,CAAC;YAChB,KAAK;YACL,SAAS,EAAE,OAAO;YAClB,MAAM;YACN,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC;SAChF,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,6UAA6U;QAC/U,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;KACxC,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAC/B,IAAI,CAAC;QACH,UAAU;QACV,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,kLAAkL;KACzL,CAAC,CAAC,CACN,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY;IACnB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,YAAY,EAAE,EAAE,CAAC;IACnB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACjB,6FAA6F;QAC7F,6FAA6F;QAC7F,wEAAwE;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}