@toon-protocol/rig 2.9.0 → 2.10.1

package/dist/{network-bootstrap-HTNM7BBX.js → network-bootstrap-HV5VUZFU.js}

@@ -1,6 +1,4 @@
 import {
-  DEVNET_CHAIN_RPC_URLS,
-  DEVNET_ZONE,
   DISCOVERY_TIMEOUT_MS,
   ILP_PEER_INFO_KIND,
   SolanaChannelUnderivableError,
@@ -10,18 +8,15 @@ import {
   evmPresetForChain,
   evmTokenBalance,
   genesisSeedPubkeys,
-  isDevnetZonePeer,
   loadGenesisSeed,
   pickPaymentPeer,
   resolveChainSettlement,
   selectSettlementChain,
   solanaPresetForChain,
   solanaTokenBalance
-} from "./chunk-LTQPBBHA.js";
+} from "./chunk-WRQAOOVM.js";
 import "./chunk-3HRFDH7H.js";
 export {
-  DEVNET_CHAIN_RPC_URLS,
-  DEVNET_ZONE,
   DISCOVERY_TIMEOUT_MS,
   ILP_PEER_INFO_KIND,
   SolanaChannelUnderivableError,
@@ -31,7 +26,6 @@ export {
   evmPresetForChain,
   evmTokenBalance,
   genesisSeedPubkeys,
-  isDevnetZonePeer,
   loadGenesisSeed,
   pickPaymentPeer,
   resolveChainSettlement,
@@ -39,4 +33,4 @@ export {
   solanaPresetForChain,
   solanaTokenBalance
 };
-//# sourceMappingURL=network-bootstrap-HTNM7BBX.js.map
+//# sourceMappingURL=network-bootstrap-HV5VUZFU.js.map

package/dist/{standalone-mode-FPFEEL72.js → standalone-mode-T6H7OOBQ.js}

@@ -1,6 +1,6 @@
 import {
   resolveIdentity
-} from "./chunk-XGFBDUQX.js";
+} from "./chunk-GZUDRNOK.js";
 import {
   StandalonePublisher
 } from "./chunk-MKCF2OY2.js";
@@ -22,7 +22,7 @@ import {
   resolveChainSettlement,
   selectSettlementChain,
   solanaTokenBalance
-} from "./chunk-LTQPBBHA.js";
+} from "./chunk-WRQAOOVM.js";
 import {
   fetchRemoteState
 } from "./chunk-3HRFDH7H.js";
@@ -706,4 +706,4 @@ export {
   createStandaloneContext,
   resolveNetworkTopology
 };
-//# sourceMappingURL=standalone-mode-FPFEEL72.js.map
+//# sourceMappingURL=standalone-mode-T6H7OOBQ.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toon-protocol/rig",
-  "version": "2.9.0",
+  "version": "2.10.1",
   "description": "Git-to-TOON write path core — build git objects and NIP-34 events for the Rig control plane",
   "license": "MIT",
   "author": "Jonathan Green",
@@ -44,10 +44,13 @@
   "dependencies": {
     "@toon-format/toon": "^1.0.0",
     "@toon-protocol/core": "^2.0.1",
+    "nostr-tools": "^2.20.0",
     "@toon-protocol/client": "^0.20.0"
   },
   "optionalDependencies": {
-    "@ar.io/sdk": "^4.0.0"
+    "@ar.io/sdk": "^4.0.3",
+    "@ar.io/solana-contracts": "^1.0.1",
+    "@solana/kit": "^6.8.0"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",

package/dist/chunk-LTQPBBHA.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/standalone/network-bootstrap.ts"],"sourcesContent":["/**\n * Network bootstrap for the standalone (embedded-client) rig path (#264):\n * resolve the payment topology — uplink, ILP destinations/routes, settlement\n * chain and its on-chain parameters — from the network itself instead of\n * hand-fed constants.\n *\n * Sources, in strict precedence order (first hit wins, per field):\n *\n *   1. EXPLICIT USER CONFIG — env vars / shared client-config file fields.\n *   2. LIVE kind:10032 ANNOUNCE — the payment peer's `IlpPeerInfo` event\n *      discovered on the relay-origin (the relay the paid command resolved\n *      via `rig remote`, i.e. what the user pointed rig at). The announce\n *      carries `btpEndpoint`/`httpEndpoint` (uplink), `ilpAddress` (channel\n *      anchor), `supportedChains` + `settlementAddresses` (settlement), and\n *      the out-of-band `routes` map (`{publish, store}` ILP destinations).\n *   3. GENESIS SEED — `@toon-protocol/core`'s committed genesis peer seed\n *      (core >= 2.0.1 ships the live devnet apex), the offline fallback when\n *      the relay is unreachable or serves no valid announce.\n *\n * Chain-level parameters the announce does NOT carry (EVM TokenNetwork\n * contract, token address, RPC URL) are derived per selected chain:\n * explicit config > announce (`tokenNetworks`/`preferredTokens`, when a peer\n * announces them) > the deployed-devnet endpoint table (canonical\n * `*.devnet.toonprotocol.dev` hosts, keyed off the announce's own hostnames)\n * > core's deterministic chain presets (`CHAIN_PRESETS`, matched by chain\n * id — e.g. `evm:31337` is the Foundry/anvil deploy whose TOON contract\n * addresses are deterministic).\n *\n * Settlement-chain selection (#260 root cause 4) — simple and predictable:\n *\n *   1. EXPLICIT — `TOON_CLIENT_CHAIN` env / `chain` config field (family or\n *      full chain id), or the first entry of an explicit `supportedChains`.\n *   2. PERSISTED CHANNEL — the chain of the most recently used live channel\n *      recorded for this identity in the #262 channel map (a channel there\n *      means collateral is already locked on that chain).\n *   3. FUNDED — the first announced chain (EVM or Solana, in announce\n *      order) where the identity's token balance is > 0 (one `eth_call` /\n *      `getTokenAccountsByOwner` per candidate).\n *   4. DEFAULT — the first EVM chain the peer announces (else the first\n *      announced chain), with a printed rationale.\n *\n * This module is pure Node + `@toon-protocol/core` (rig's own core 2.x —\n * distinct from the embedded client's internal core; see\n * `../cli/standalone-mode.ts` for the coexistence note).\n */\n\nimport {\n  CHAIN_PRESETS,\n  GenesisPeerLoader,\n  isEventExpired,\n  parseIlpPeerInfo,\n  resolveClientNetwork,\n  type GenesisPeer,\n  type IlpPeerInfo,\n} from '@toon-protocol/core';\nimport {\n  queryRelay,\n  type NostrEvent,\n  type WebSocketFactory,\n} from '../remote-state.js';\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** kind:10032 — ILP peer info announcement (mirrors core's constant). */\nexport const ILP_PEER_INFO_KIND = 10032;\n\n/** Publish/store ILP route hints riding out-of-band in announce content. */\nexport interface AnnouncedRoutes {\n  publish?: string;\n  store?: string;\n}\n\n/** One schema-valid, unexpired kind:10032 announce seen on the relay. */\nexport interface AnnouncedPeer {\n  /** Announcing identity (event author, hex). */\n  pubkey: string;\n  /** Parsed + validated `IlpPeerInfo` (rig's core 2.x parser). */\n  info: IlpPeerInfo;\n  /** Out-of-band `routes` content field, when present and well-formed. */\n  routes?: AnnouncedRoutes;\n  /** Announce timestamp (freshness tiebreaker). */\n  createdAt: number;\n}\n\n/** Per-chain settlement parameters resolved for the embedded client. */\nexport interface ChainSettlement {\n  /** Chain id as announced/configured, e.g. `evm:31337`. */\n  chain: string;\n  /** `evm` | `solana` | `mina` | … (first chain-id segment). */\n  family: string;\n  /** JSON-RPC / GraphQL endpoint, when derivable. */\n  rpcUrl?: string;\n  /** Preferred token (USDC / SPL mint) address, when derivable. */\n  tokenAddress?: string;\n  /** EVM TokenNetwork contract, when derivable (EVM only). */\n  tokenNetwork?: string;\n  /** Solana payment-channel program id, when derivable (Solana only). */\n  programId?: string;\n}\n\n/** Why a settlement chain was selected (documented rule, in order). */\nexport type ChainSelectionReason =\n  | 'explicit'\n  | 'persisted-channel'\n  | 'funded'\n  | 'default';\n\n/** The selected settlement chain plus its rationale. */\nexport interface ChainSelection {\n  chain: string;\n  reason: ChainSelectionReason;\n  /** One human-readable line explaining the pick. */\n  detail: string;\n}\n\n// ---------------------------------------------------------------------------\n// Announce discovery\n// ---------------------------------------------------------------------------\n\n/** Default bounded wait for the kind:10032 relay query. */\nexport const DISCOVERY_TIMEOUT_MS = 5000;\n\nfunction parseRoutes(content: string): AnnouncedRoutes | undefined {\n  try {\n    const parsed = JSON.parse(content) as { routes?: unknown };\n    const routes = parsed.routes;\n    if (typeof routes !== 'object' || routes === null) return undefined;\n    const { publish, store } = routes as Record<string, unknown>;\n    const out: AnnouncedRoutes = {\n      ...(typeof publish === 'string' && publish.length > 0 ? { publish } : {}),\n      ...(typeof store === 'string' && store.length > 0 ? { store } : {}),\n    };\n    return out.publish || out.store ? out : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Query `relayUrl` for kind:10032 announces and return the latest\n * schema-valid, unexpired announce per author. Invalid/expired events are\n * skipped silently (the relay serves plenty of non-peer 10032 experiments).\n */\nexport async function discoverAnnouncedPeers(\n  relayUrl: string,\n  options: {\n    timeoutMs?: number;\n    webSocketFactory?: WebSocketFactory;\n  } = {}\n): Promise<AnnouncedPeer[]> {\n  const factory =\n    options.webSocketFactory ?? defaultDiscoveryWebSocketFactory();\n  const events = await queryRelay(\n    relayUrl,\n    { kinds: [ILP_PEER_INFO_KIND], limit: 100 },\n    options.timeoutMs ?? DISCOVERY_TIMEOUT_MS,\n    factory\n  );\n\n  const latestByAuthor = new Map<string, NostrEvent>();\n  for (const event of events) {\n    if (event.kind !== ILP_PEER_INFO_KIND) continue;\n    const prev = latestByAuthor.get(event.pubkey);\n    if (!prev || event.created_at > prev.created_at) {\n      latestByAuthor.set(event.pubkey, event);\n    }\n  }\n\n  const peers: AnnouncedPeer[] = [];\n  for (const event of latestByAuthor.values()) {\n    if (isEventExpired(event as Parameters<typeof isEventExpired>[0])) {\n      continue;\n    }\n    let info: IlpPeerInfo;\n    try {\n      info = parseIlpPeerInfo(event as Parameters<typeof parseIlpPeerInfo>[0]);\n    } catch {\n      continue; // not a schema-valid IlpPeerInfo announce\n    }\n    const routes = parseRoutes(event.content);\n    peers.push({\n      pubkey: event.pubkey,\n      info,\n      ...(routes ? { routes } : {}),\n      createdAt: event.created_at,\n    });\n  }\n  return peers;\n}\n\nfunction defaultDiscoveryWebSocketFactory(): WebSocketFactory {\n  return (url) => {\n    const ctor = (\n      globalThis as {\n        WebSocket?: new (url: string) => ReturnType<WebSocketFactory>;\n      }\n    ).WebSocket;\n    if (!ctor) {\n      throw new Error(\n        'No global WebSocket constructor (Node >= 22 required) for announce discovery'\n      );\n    }\n    return new ctor(url);\n  };\n}\n\n/**\n * Pick THE payment peer among discovered announces:\n *\n *   1. the announce authored by a genesis-seed pubkey (the committed apex\n *      identity — the strongest signal),\n *   2. else an announce that can actually take paid writes: has an uplink\n *      endpoint AND `settlementAddresses`, preferring one whose own\n *      `ilpAddress` is its `routes.publish` (the publish edge — that is\n *      where rig pays first),\n *   3. freshest `created_at` breaks remaining ties.\n */\nexport function pickPaymentPeer(\n  peers: AnnouncedPeer[],\n  seedPubkeys: readonly string[]\n): AnnouncedPeer | undefined {\n  const seeded = peers.filter((p) => seedPubkeys.includes(p.pubkey));\n  if (seeded.length > 0) {\n    return seeded.sort((a, b) => b.createdAt - a.createdAt)[0];\n  }\n\n  const payable = peers.filter(\n    (p) =>\n      (p.info.httpEndpoint || p.info.btpEndpoint) &&\n      p.info.settlementAddresses &&\n      Object.keys(p.info.settlementAddresses).length > 0\n  );\n  if (payable.length === 0) return undefined;\n  const publishEdges = payable.filter(\n    (p) => p.routes?.publish !== undefined && p.routes.publish === p.info.ilpAddress\n  );\n  const pool = publishEdges.length > 0 ? publishEdges : payable;\n  return pool.sort((a, b) => b.createdAt - a.createdAt)[0];\n}\n\n// ---------------------------------------------------------------------------\n// Per-chain settlement derivation\n// ---------------------------------------------------------------------------\n\n/**\n * The one deployed-network endpoint table rig ships: the canonical TOON\n * devnet (`*.devnet.toonprotocol.dev`, see toon-meta docs/deployment.md).\n * Chain RPC endpoints are deployment infrastructure the kind:10032 announce\n * does not carry (yet), so when the discovered peer's own endpoints live\n * under this zone, its self-hosted chains resolve to the canonical hosts.\n * Same status as `DEVNET_FAUCET_URL` in `../cli/fund.ts`. Everything here\n * is overridable by explicit `chainRpcUrls` config.\n */\nexport const DEVNET_ZONE = 'devnet.toonprotocol.dev';\n\n/** Canonical devnet chain RPC endpoints (self-hosted chains only). */\nexport const DEVNET_CHAIN_RPC_URLS: Readonly<Record<string, string>> = {\n  'evm:31337': 'https://evm-rpc.devnet.toonprotocol.dev',\n  'solana:devnet': 'https://solana-rpc.devnet.toonprotocol.dev',\n};\n\n/** Hostname of a ws(s)/http(s) URL, or undefined when unparsable. */\nfunction hostOf(url: string | undefined): string | undefined {\n  if (!url) return undefined;\n  try {\n    return new URL(url).hostname;\n  } catch {\n    return undefined;\n  }\n}\n\n/** True when the announce's own endpoints live under the TOON devnet zone. */\nexport function isDevnetZonePeer(\n  peer: Pick<AnnouncedPeer, 'info'> | undefined\n): boolean {\n  if (!peer) return false;\n  return [\n    hostOf(peer.info.httpEndpoint),\n    hostOf(peer.info.btpEndpoint),\n    hostOf(peer.info.relayUrl),\n  ].some((h) => h !== undefined && (h === DEVNET_ZONE || h.endsWith(`.${DEVNET_ZONE}`)));\n}\n\n/** Numeric chain id of an `evm:<id>` / `evm:<name>:<id>` chain key. */\nexport function evmChainIdOf(chain: string): number | undefined {\n  const parts = chain.split(':');\n  if (parts[0] !== 'evm') return undefined;\n  const raw = parts.length >= 3 ? parts[2] : parts[1];\n  const id = Number.parseInt(raw ?? '', 10);\n  return Number.isNaN(id) ? undefined : id;\n}\n\n/**\n * Core chain preset matching an EVM chain key by numeric chain id. Presets\n * carry the DETERMINISTIC TOON contract addresses per chain (e.g. the\n * `anvil` 31337 Foundry deploy), which is what makes `tokenNetwork`\n * derivable without the announce carrying it.\n */\nexport function evmPresetForChain(chain: string):\n  | { rpcUrl: string; usdcAddress: string; tokenNetworkAddress: string }\n  | undefined {\n  const id = evmChainIdOf(chain);\n  if (id === undefined) return undefined;\n  for (const preset of Object.values(CHAIN_PRESETS)) {\n    if (preset.chainId === id) {\n      return {\n        rpcUrl: preset.rpcUrl,\n        usdcAddress: preset.usdcAddress,\n        tokenNetworkAddress: preset.tokenNetworkAddress,\n      };\n    }\n  }\n  return undefined;\n}\n\n/**\n * Public-cluster Solana preset matching a `solana:<cluster>` chain key. Draws\n * from core's client network presets (`resolveClientNetwork`) — the same\n * tables the daemon and townhouse resolve — so the deployed public-devnet\n * program/mint and the mainnet-beta RPC + Circle USDC mint come from ONE\n * source. `programId` is present only where the TOON payment-channel program\n * is actually deployed (public devnet today; mainnet-beta once deployed).\n * Self-hosted validators (e.g. the TOON devnet's own `solana-rpc.*` box) have\n * their own regenerated program ids — those must come from the announce or\n * explicit config, never a preset.\n */\nexport function solanaPresetForChain(chain: string):\n  | { rpcUrl?: string; tokenMint?: string; programId?: string }\n  | undefined {\n  const [family, cluster] = chain.split(':');\n  if (family !== 'solana' || !cluster) return undefined;\n  const tier =\n    cluster === 'mainnet-beta'\n      ? 'mainnet'\n      : cluster === 'devnet'\n        ? 'devnet'\n        : cluster === 'testnet'\n          ? 'testnet'\n          : undefined;\n  if (!tier) return undefined;\n  const presets = resolveClientNetwork(tier);\n  // Look up by the exact chain key: the `testnet` tier resolves to the\n  // deployed `solana:devnet` cluster, so `solana:testnet` correctly finds\n  // nothing (TOON has no deployment on Solana's testnet cluster).\n  const rpcUrl = presets.chainRpcUrls[chain];\n  const tokenMint = presets.preferredTokens[chain];\n  const programId =\n    presets.solanaChannel && presets.supportedChains.includes(chain)\n      ? presets.solanaChannel.programId\n      : undefined;\n  if (!rpcUrl && !tokenMint && !programId) return undefined;\n  return {\n    ...(rpcUrl ? { rpcUrl } : {}),\n    ...(tokenMint ? { tokenMint } : {}),\n    ...(programId ? { programId } : {}),\n  };\n}\n\n/** Explicit per-chain maps from the shared client-config file. */\nexport interface ExplicitChainConfig {\n  chainRpcUrls?: Record<string, string>;\n  preferredTokens?: Record<string, string>;\n  tokenNetworks?: Record<string, string>;\n}\n\n/**\n * Resolve one chain's settlement parameters: explicit config > announce >\n * devnet endpoint table (RPC only, devnet-zone peers) > core chain preset.\n * Fields stay undefined when no source covers them — callers decide whether\n * that is fatal (see {@link TokenNetworkUnderivableError} /\n * {@link SolanaChannelUnderivableError}).\n *\n * For `solana:*` chains the chain-keyed maps carry the SPL analogues: the\n * `preferredTokens` entry is the token mint, and the `tokenNetworks` entry is\n * the payment-channel PROGRAM id (the map is chain-keyed settlement-contract\n * addressing — TokenNetwork contract on EVM, channel program on Solana),\n * surfaced as {@link ChainSettlement.programId}.\n */\nexport function resolveChainSettlement(\n  chain: string,\n  explicit: ExplicitChainConfig,\n  announce?: AnnouncedPeer\n): ChainSettlement {\n  const family = chain.split(':')[0] ?? chain;\n  const evmPreset = family === 'evm' ? evmPresetForChain(chain) : undefined;\n  const devnetRpc = isDevnetZonePeer(announce)\n    ? DEVNET_CHAIN_RPC_URLS[chain]\n    : undefined;\n  // The devnet zone SELF-HOSTS this chain (its own validator): the\n  // public-cluster preset addresses do not exist there (the devnet's Solana\n  // program id is regenerated per redeploy), so presets must not fill gaps —\n  // only the announce or explicit config can (else the caller fails fast\n  // with an actionable error instead of an on-chain \"program not found\").\n  // Detected via the announcing peer's zone OR the resolved RPC host, so an\n  // explicit zone RPC is protected even when discovery was skipped/failed.\n  const explicitOrZoneRpc = explicit.chainRpcUrls?.[chain] ?? devnetRpc;\n  const rpcHost = hostOf(explicitOrZoneRpc);\n  const zoneSelfHosted =\n    (isDevnetZonePeer(announce) &&\n      DEVNET_CHAIN_RPC_URLS[chain] !== undefined) ||\n    (rpcHost !== undefined &&\n      (rpcHost === DEVNET_ZONE || rpcHost.endsWith(`.${DEVNET_ZONE}`)));\n  const solPreset =\n    family === 'solana' && !zoneSelfHosted\n      ? solanaPresetForChain(chain)\n      : undefined;\n\n  const rpcUrl = explicitOrZoneRpc ?? evmPreset?.rpcUrl ?? solPreset?.rpcUrl;\n  const tokenAddress =\n    explicit.preferredTokens?.[chain] ??\n    announce?.info.preferredTokens?.[chain] ??\n    (evmPreset?.usdcAddress || undefined) ??\n    solPreset?.tokenMint;\n  const tokenNetwork =\n    family === 'evm'\n      ? (explicit.tokenNetworks?.[chain] ??\n        announce?.info.tokenNetworks?.[chain] ??\n        (evmPreset?.tokenNetworkAddress || undefined))\n      : undefined;\n  const programId =\n    family === 'solana'\n      ? (explicit.tokenNetworks?.[chain] ??\n        announce?.info.tokenNetworks?.[chain] ??\n        solPreset?.programId)\n      : undefined;\n\n  return {\n    chain,\n    family,\n    ...(rpcUrl ? { rpcUrl } : {}),\n    ...(tokenAddress ? { tokenAddress } : {}),\n    ...(tokenNetwork ? { tokenNetwork } : {}),\n    ...(programId ? { programId } : {}),\n  };\n}\n\n/** An EVM chain was selected but its TokenNetwork cannot be derived. */\nexport class TokenNetworkUnderivableError extends Error {\n  constructor(chain: string, announce: AnnouncedPeer | undefined, relayUrl: string) {\n    const announceRef = announce\n      ? `the kind:10032 announce from ${announce.pubkey.slice(0, 16)}… on ${relayUrl}`\n      : `no kind:10032 announce was found on ${relayUrl}`;\n    super(\n      `cannot derive the TokenNetwork contract for settlement chain ` +\n        `\"${chain}\": ${announceRef} carries no tokenNetworks[\"${chain}\"], ` +\n        `and no built-in chain preset matches its chain id — add ` +\n        `tokenNetworks[\"${chain}\"] to the client config (or pick another ` +\n        `chain via TOON_CLIENT_CHAIN / the chain config field)`\n    );\n    this.name = 'TokenNetworkUnderivableError';\n  }\n}\n\n/**\n * A Solana chain was selected but its channel parameters cannot be derived.\n * The missing pieces are named so the error is directly actionable: a\n * `solanaChannel` config object always works; the chain-keyed maps\n * (`tokenNetworks` = program id, `preferredTokens` = mint,\n * `chainRpcUrls` = RPC) work per-chain.\n */\nexport class SolanaChannelUnderivableError extends Error {\n  constructor(\n    chain: string,\n    missing: string[],\n    announce: AnnouncedPeer | undefined,\n    relayUrl: string\n  ) {\n    const announceRef = announce\n      ? `the kind:10032 announce from ${announce.pubkey.slice(0, 16)}… on ${relayUrl} does not carry them`\n      : `no kind:10032 announce was found on ${relayUrl}`;\n    super(\n      `cannot derive the Solana channel parameters for settlement chain ` +\n        `\"${chain}\" (missing: ${missing.join(', ')}): ${announceRef}, and ` +\n        `no built-in preset covers this cluster — add a solanaChannel ` +\n        `{ rpcUrl, programId, tokenMint } object to the client config (or ` +\n        `set tokenNetworks[\"${chain}\"] = <program id>, ` +\n        `preferredTokens[\"${chain}\"] = <mint>, chainRpcUrls[\"${chain}\"]), ` +\n        `or pick another chain via TOON_CLIENT_CHAIN / the chain config field`\n    );\n    this.name = 'SolanaChannelUnderivableError';\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Settlement-chain selection (#260 root cause 4)\n// ---------------------------------------------------------------------------\n\n/** The slice of a #262 channel-map record chain selection consumes. */\nexport interface ChannelRecordLike {\n  chain: string;\n  lastUsedAt: string;\n  /** True when the withdraw flow closed/settled the channel. */\n  closed: boolean;\n}\n\n/** Async token-balance probe (injectable; default is a raw `eth_call`). */\nexport type EvmBalanceProbe = (args: {\n  rpcUrl: string;\n  tokenAddress: string;\n  owner: string;\n}) => Promise<bigint>;\n\n/**\n * Async SPL token-balance probe (injectable; default is a raw\n * `getTokenAccountsByOwner`). `tokenAddress` is the SPL mint and `owner`\n * the identity's base58 Solana address — the same argument shape as\n * {@link EvmBalanceProbe} so both feed the one funded-chain loop.\n */\nexport type SolanaBalanceProbe = (args: {\n  rpcUrl: string;\n  tokenAddress: string;\n  owner: string;\n}) => Promise<bigint>;\n\nexport interface SelectChainOptions {\n  /**\n   * Explicit chain choice: full chain id (`evm:31337`), a family\n   * (`evm` | `solana` | `mina`) matched against announced chains, or the\n   * first entry of an explicit `supportedChains` config.\n   */\n  explicitChain?: string;\n  /** Chains the payment peer announces (announce order preserved). */\n  announcedChains: readonly string[];\n  /** #262 channel-map records for this identity (any anchor). */\n  records?: readonly ChannelRecordLike[];\n  /** Identity's EVM address (funded-chain probe, `evm:*` candidates). */\n  evmAddress?: string;\n  /**\n   * Identity's base58 Solana address (funded-chain probe, `solana:*`\n   * candidates). Absent (e.g. the identity's Ed25519 key could not be\n   * derived) means Solana chains are simply not probed.\n   */\n  solanaAddress?: string;\n  /** Per-chain settlement resolver (for RPC/token of probe candidates). */\n  resolveSettlement: (chain: string) => ChainSettlement;\n  /** EVM balance probe; probe errors just skip the candidate. */\n  probeBalance?: EvmBalanceProbe;\n  /** Solana balance probe; probe errors just skip the candidate. */\n  probeSolanaBalance?: SolanaBalanceProbe;\n}\n\n/**\n * Select the settlement chain per the documented rule: explicit >\n * persisted channel > funded chain (EVM + Solana, in announce order) >\n * first announced EVM chain.\n */\nexport async function selectSettlementChain(\n  options: SelectChainOptions\n): Promise<ChainSelection> {\n  const { explicitChain, announcedChains } = options;\n\n  // 1 — explicit config always wins (even when the peer does not announce\n  // it: the user may know better than a stale announce).\n  if (explicitChain) {\n    if (explicitChain.includes(':')) {\n      return {\n        chain: explicitChain,\n        reason: 'explicit',\n        detail: `chain ${explicitChain} set by config`,\n      };\n    }\n    const familyMatch = announcedChains.find(\n      (c) => (c.split(':')[0] ?? c) === explicitChain\n    );\n    if (!familyMatch) {\n      throw new Error(\n        `configured chain family \"${explicitChain}\" is not announced by the ` +\n          `payment peer (announced: ${announcedChains.join(', ') || 'none'}) — ` +\n          'set a full chain id (e.g. \"evm:31337\") to force it'\n      );\n    }\n    return {\n      chain: familyMatch,\n      reason: 'explicit',\n      detail: `chain family \"${explicitChain}\" set by config → ${familyMatch}`,\n    };\n  }\n\n  // 2 — a live persisted channel means collateral is already locked there.\n  const live = (options.records ?? [])\n    .filter((r) => !r.closed && announcedChains.includes(r.chain))\n    .sort((a, b) => b.lastUsedAt.localeCompare(a.lastUsedAt));\n  const persisted = live[0];\n  if (persisted) {\n    return {\n      chain: persisted.chain,\n      reason: 'persisted-channel',\n      detail: `existing payment channel on ${persisted.chain} (rig channel map)`,\n    };\n  }\n\n  // 3 — first announced chain where the identity holds tokens, probing\n  // EVM and Solana candidates in ANNOUNCE ORDER (the peer's stated\n  // preference breaks a both-funded tie). Families without an address or\n  // probe are skipped, as are candidates whose RPC/token are underivable.\n  const evmChains = announcedChains.filter((c) => c.startsWith('evm:'));\n  for (const chain of announcedChains) {\n    const family = chain.split(':')[0];\n    let probe: EvmBalanceProbe | SolanaBalanceProbe | undefined;\n    let owner: string | undefined;\n    if (family === 'evm') {\n      probe = options.probeBalance;\n      owner = options.evmAddress;\n    } else if (family === 'solana') {\n      probe = options.probeSolanaBalance;\n      owner = options.solanaAddress;\n    }\n    if (!probe || !owner) continue;\n    const settlement = options.resolveSettlement(chain);\n    if (!settlement.rpcUrl || !settlement.tokenAddress) continue;\n    try {\n      const balance = await probe({\n        rpcUrl: settlement.rpcUrl,\n        tokenAddress: settlement.tokenAddress,\n        owner,\n      });\n      if (balance > 0n) {\n        return {\n          chain,\n          reason: 'funded',\n          detail: `wallet holds ${balance} token base units on ${chain}`,\n        };\n      }\n    } catch {\n      // Unreachable RPC / bad token — not a candidate; fall through.\n    }\n  }\n\n  // 4 — predictable default: the first EVM chain the peer announces.\n  const fallback = evmChains[0] ?? announcedChains[0];\n  if (!fallback) {\n    throw new Error(\n      'the payment peer announces no settlement chains — cannot select a ' +\n        'chain for paid writes (set supportedChains/chain in the client config)'\n    );\n  }\n  return {\n    chain: fallback,\n    reason: 'default',\n    detail: evmChains[0]\n      ? `first EVM chain announced by the payment peer`\n      : `first chain announced by the payment peer (no EVM chain announced)`,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Default balance probes (raw JSON-RPC, no extra deps)\n// ---------------------------------------------------------------------------\n\n/** ERC-20 `balanceOf(address)` selector. */\nconst BALANCE_OF_SELECTOR = '0x70a08231';\n\n/**\n * Read an ERC-20 balance with one raw `eth_call` (keeps the probe free of\n * viem — the embedded client is not started yet when selection runs).\n */\nexport async function evmTokenBalance(args: {\n  rpcUrl: string;\n  tokenAddress: string;\n  owner: string;\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n}): Promise<bigint> {\n  const fetchImpl = args.fetchImpl ?? fetch;\n  const owner = args.owner.replace(/^0x/, '').toLowerCase().padStart(64, '0');\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), args.timeoutMs ?? 5000);\n  try {\n    const res = await fetchImpl(args.rpcUrl, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({\n        jsonrpc: '2.0',\n        id: 1,\n        method: 'eth_call',\n        params: [\n          { to: args.tokenAddress, data: `${BALANCE_OF_SELECTOR}${owner}` },\n          'latest',\n        ],\n      }),\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      throw new Error(`eth_call failed: HTTP ${res.status}`);\n    }\n    const body = (await res.json()) as { result?: unknown; error?: { message?: string } };\n    if (typeof body.result !== 'string') {\n      throw new Error(`eth_call failed: ${body.error?.message ?? 'no result'}`);\n    }\n    return BigInt(body.result === '0x' ? '0x0' : body.result);\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\n/**\n * Read an SPL token balance with one raw `getTokenAccountsByOwner` call\n * (keeps the probe free of @solana/web3.js — the embedded client is not\n * started yet when selection runs). `tokenAddress` is the mint; balances\n * are summed across all of the owner's token accounts for that mint (an\n * owner can hold the mint in more than one account).\n */\nexport async function solanaTokenBalance(args: {\n  rpcUrl: string;\n  tokenAddress: string;\n  owner: string;\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n}): Promise<bigint> {\n  const fetchImpl = args.fetchImpl ?? fetch;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), args.timeoutMs ?? 5000);\n  try {\n    const res = await fetchImpl(args.rpcUrl, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({\n        jsonrpc: '2.0',\n        id: 1,\n        method: 'getTokenAccountsByOwner',\n        params: [\n          args.owner,\n          { mint: args.tokenAddress },\n          { encoding: 'jsonParsed' },\n        ],\n      }),\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      throw new Error(`getTokenAccountsByOwner failed: HTTP ${res.status}`);\n    }\n    const body = (await res.json()) as {\n      result?: { value?: unknown };\n      error?: { message?: string };\n    };\n    const accounts = body.result?.value;\n    if (!Array.isArray(accounts)) {\n      throw new Error(\n        `getTokenAccountsByOwner failed: ${body.error?.message ?? 'no result'}`\n      );\n    }\n    let total = 0n;\n    for (const account of accounts) {\n      const amount = (\n        account as {\n          account?: {\n            data?: {\n              parsed?: { info?: { tokenAmount?: { amount?: unknown } } };\n            };\n          };\n        }\n      )?.account?.data?.parsed?.info?.tokenAmount?.amount;\n      if (typeof amount === 'string') total += BigInt(amount);\n    }\n    return total;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Genesis seed access (rig's own core 2.x — live devnet apex since 2.0.1)\n// ---------------------------------------------------------------------------\n\n/** The committed genesis peer seed (first entry), if any. */\nexport function loadGenesisSeed(): GenesisPeer | undefined {\n  return GenesisPeerLoader.loadGenesisPeers()[0];\n}\n\n/** All committed genesis-seed pubkeys (announce-selection preference). */\nexport function genesisSeedPubkeys(): string[] {\n  return GenesisPeerLoader.loadGenesisPeers().map((p) => p.pubkey);\n}\n"],"mappings":";;;;;AA8CA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAYA,IAAM,qBAAqB;AAwD3B,IAAM,uBAAuB;AAEpC,SAAS,YAAY,SAA8C;AACjE,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,UAAM,SAAS,OAAO;AACtB,QAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,UAAM,EAAE,SAAS,MAAM,IAAI;AAC3B,UAAM,MAAuB;AAAA,MAC3B,GAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;AAAA,MACvE,GAAI,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,EAAE,MAAM,IAAI,CAAC;AAAA,IACnE;AACA,WAAO,IAAI,WAAW,IAAI,QAAQ,MAAM;AAAA,EAC1C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,eAAsB,uBACpB,UACA,UAGI,CAAC,GACqB;AAC1B,QAAM,UACJ,QAAQ,oBAAoB,iCAAiC;AAC/D,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA,EAAE,OAAO,CAAC,kBAAkB,GAAG,OAAO,IAAI;AAAA,IAC1C,QAAQ,aAAa;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,iBAAiB,oBAAI,IAAwB;AACnD,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,SAAS,mBAAoB;AACvC,UAAM,OAAO,eAAe,IAAI,MAAM,MAAM;AAC5C,QAAI,CAAC,QAAQ,MAAM,aAAa,KAAK,YAAY;AAC/C,qBAAe,IAAI,MAAM,QAAQ,KAAK;AAAA,IACxC;AAAA,EACF;AAEA,QAAM,QAAyB,CAAC;AAChC,aAAW,SAAS,eAAe,OAAO,GAAG;AAC3C,QAAI,eAAe,KAA6C,GAAG;AACjE;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,aAAO,iBAAiB,KAA+C;AAAA,IACzE,QAAQ;AACN;AAAA,IACF;AACA,UAAM,SAAS,YAAY,MAAM,OAAO;AACxC,UAAM,KAAK;AAAA,MACT,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,MAC3B,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,SAAS,mCAAqD;AAC5D,SAAO,CAAC,QAAQ;AACd,UAAM,OACJ,WAGA;AACF,QAAI,CAAC,MAAM;AACT,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO,IAAI,KAAK,GAAG;AAAA,EACrB;AACF;AAaO,SAAS,gBACd,OACA,aAC2B;AAC3B,QAAM,SAAS,MAAM,OAAO,CAAC,MAAM,YAAY,SAAS,EAAE,MAAM,CAAC;AACjE,MAAI,OAAO,SAAS,GAAG;AACrB,WAAO,OAAO,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AAAA,EAC3D;AAEA,QAAM,UAAU,MAAM;AAAA,IACpB,CAAC,OACE,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAC/B,EAAE,KAAK,uBACP,OAAO,KAAK,EAAE,KAAK,mBAAmB,EAAE,SAAS;AAAA,EACrD;AACA,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAM,eAAe,QAAQ;AAAA,IAC3B,CAAC,MAAM,EAAE,QAAQ,YAAY,UAAa,EAAE,OAAO,YAAY,EAAE,KAAK;AAAA,EACxE;AACA,QAAM,OAAO,aAAa,SAAS,IAAI,eAAe;AACtD,SAAO,KAAK,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACzD;AAeO,IAAM,cAAc;AAGpB,IAAM,wBAA0D;AAAA,EACrE,aAAa;AAAA,EACb,iBAAiB;AACnB;AAGA,SAAS,OAAO,KAA6C;AAC3D,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACF,WAAO,IAAI,IAAI,GAAG,EAAE;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,iBACd,MACS;AACT,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO;AAAA,IACL,OAAO,KAAK,KAAK,YAAY;AAAA,IAC7B,OAAO,KAAK,KAAK,WAAW;AAAA,IAC5B,OAAO,KAAK,KAAK,QAAQ;AAAA,EAC3B,EAAE,KAAK,CAAC,MAAM,MAAM,WAAc,MAAM,eAAe,EAAE,SAAS,IAAI,WAAW,EAAE,EAAE;AACvF;AAGO,SAAS,aAAa,OAAmC;AAC9D,QAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,MAAI,MAAM,CAAC,MAAM,MAAO,QAAO;AAC/B,QAAM,MAAM,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC;AAClD,QAAM,KAAK,OAAO,SAAS,OAAO,IAAI,EAAE;AACxC,SAAO,OAAO,MAAM,EAAE,IAAI,SAAY;AACxC;AAQO,SAAS,kBAAkB,OAEpB;AACZ,QAAM,KAAK,aAAa,KAAK;AAC7B,MAAI,OAAO,OAAW,QAAO;AAC7B,aAAW,UAAU,OAAO,OAAO,aAAa,GAAG;AACjD,QAAI,OAAO,YAAY,IAAI;AACzB,aAAO;AAAA,QACL,QAAQ,OAAO;AAAA,QACf,aAAa,OAAO;AAAA,QACpB,qBAAqB,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAaO,SAAS,qBAAqB,OAEvB;AACZ,QAAM,CAAC,QAAQ,OAAO,IAAI,MAAM,MAAM,GAAG;AACzC,MAAI,WAAW,YAAY,CAAC,QAAS,QAAO;AAC5C,QAAM,OACJ,YAAY,iBACR,YACA,YAAY,WACV,WACA,YAAY,YACV,YACA;AACV,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,UAAU,qBAAqB,IAAI;AAIzC,QAAM,SAAS,QAAQ,aAAa,KAAK;AACzC,QAAM,YAAY,QAAQ,gBAAgB,KAAK;AAC/C,QAAM,YACJ,QAAQ,iBAAiB,QAAQ,gBAAgB,SAAS,KAAK,IAC3D,QAAQ,cAAc,YACtB;AACN,MAAI,CAAC,UAAU,CAAC,aAAa,CAAC,UAAW,QAAO;AAChD,SAAO;AAAA,IACL,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,IAC3B,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,IACjC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,EACnC;AACF;AAsBO,SAAS,uBACd,OACA,UACA,UACiB;AACjB,QAAM,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK;AACtC,QAAM,YAAY,WAAW,QAAQ,kBAAkB,KAAK,IAAI;AAChE,QAAM,YAAY,iBAAiB,QAAQ,IACvC,sBAAsB,KAAK,IAC3B;AAQJ,QAAM,oBAAoB,SAAS,eAAe,KAAK,KAAK;AAC5D,QAAM,UAAU,OAAO,iBAAiB;AACxC,QAAM,iBACH,iBAAiB,QAAQ,KACxB,sBAAsB,KAAK,MAAM,UAClC,YAAY,WACV,YAAY,eAAe,QAAQ,SAAS,IAAI,WAAW,EAAE;AAClE,QAAM,YACJ,WAAW,YAAY,CAAC,iBACpB,qBAAqB,KAAK,IAC1B;AAEN,QAAM,SAAS,qBAAqB,WAAW,UAAU,WAAW;AACpE,QAAM,eACJ,SAAS,kBAAkB,KAAK,KAChC,UAAU,KAAK,kBAAkB,KAAK,MACrC,WAAW,eAAe,WAC3B,WAAW;AACb,QAAM,eACJ,WAAW,QACN,SAAS,gBAAgB,KAAK,KAC/B,UAAU,KAAK,gBAAgB,KAAK,MACnC,WAAW,uBAAuB,UACnC;AACN,QAAM,YACJ,WAAW,WACN,SAAS,gBAAgB,KAAK,KAC/B,UAAU,KAAK,gBAAgB,KAAK,KACpC,WAAW,YACX;AAEN,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,IAC3B,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,IACvC,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,IACvC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,EACnC;AACF;AAGO,IAAM,+BAAN,cAA2C,MAAM;AAAA,EACtD,YAAY,OAAe,UAAqC,UAAkB;AAChF,UAAM,cAAc,WAChB,gCAAgC,SAAS,OAAO,MAAM,GAAG,EAAE,CAAC,aAAQ,QAAQ,KAC5E,uCAAuC,QAAQ;AACnD;AAAA,MACE,iEACM,KAAK,MAAM,WAAW,8BAA8B,KAAK,mFAE3C,KAAK;AAAA,IAE3B;AACA,SAAK,OAAO;AAAA,EACd;AACF;AASO,IAAM,gCAAN,cAA4C,MAAM;AAAA,EACvD,YACE,OACA,SACA,UACA,UACA;AACA,UAAM,cAAc,WAChB,gCAAgC,SAAS,OAAO,MAAM,GAAG,EAAE,CAAC,aAAQ,QAAQ,yBAC5E,uCAAuC,QAAQ;AACnD;AAAA,MACE,qEACM,KAAK,eAAe,QAAQ,KAAK,IAAI,CAAC,MAAM,WAAW,+JAGrC,KAAK,uCACP,KAAK,8BAA8B,KAAK;AAAA,IAEhE;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAiEA,eAAsB,sBACpB,SACyB;AACzB,QAAM,EAAE,eAAe,gBAAgB,IAAI;AAI3C,MAAI,eAAe;AACjB,QAAI,cAAc,SAAS,GAAG,GAAG;AAC/B,aAAO;AAAA,QACL,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,QAAQ,SAAS,aAAa;AAAA,MAChC;AAAA,IACF;AACA,UAAM,cAAc,gBAAgB;AAAA,MAClC,CAAC,OAAO,EAAE,MAAM,GAAG,EAAE,CAAC,KAAK,OAAO;AAAA,IACpC;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI;AAAA,QACR,4BAA4B,aAAa,sDACX,gBAAgB,KAAK,IAAI,KAAK,MAAM;AAAA,MAEpE;AAAA,IACF;AACA,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ,iBAAiB,aAAa,0BAAqB,WAAW;AAAA,IACxE;AAAA,EACF;AAGA,QAAM,QAAQ,QAAQ,WAAW,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,gBAAgB,SAAS,EAAE,KAAK,CAAC,EAC5D,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,cAAc,EAAE,UAAU,CAAC;AAC1D,QAAM,YAAY,KAAK,CAAC;AACxB,MAAI,WAAW;AACb,WAAO;AAAA,MACL,OAAO,UAAU;AAAA,MACjB,QAAQ;AAAA,MACR,QAAQ,+BAA+B,UAAU,KAAK;AAAA,IACxD;AAAA,EACF;AAMA,QAAM,YAAY,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,CAAC;AACpE,aAAW,SAAS,iBAAiB;AACnC,UAAM,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC;AACjC,QAAI;AACJ,QAAI;AACJ,QAAI,WAAW,OAAO;AACpB,cAAQ,QAAQ;AAChB,cAAQ,QAAQ;AAAA,IAClB,WAAW,WAAW,UAAU;AAC9B,cAAQ,QAAQ;AAChB,cAAQ,QAAQ;AAAA,IAClB;AACA,QAAI,CAAC,SAAS,CAAC,MAAO;AACtB,UAAM,aAAa,QAAQ,kBAAkB,KAAK;AAClD,QAAI,CAAC,WAAW,UAAU,CAAC,WAAW,aAAc;AACpD,QAAI;AACF,YAAM,UAAU,MAAM,MAAM;AAAA,QAC1B,QAAQ,WAAW;AAAA,QACnB,cAAc,WAAW;AAAA,QACzB;AAAA,MACF,CAAC;AACD,UAAI,UAAU,IAAI;AAChB,eAAO;AAAA,UACL;AAAA,UACA,QAAQ;AAAA,UACR,QAAQ,gBAAgB,OAAO,wBAAwB,KAAK;AAAA,QAC9D;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,QAAM,WAAW,UAAU,CAAC,KAAK,gBAAgB,CAAC;AAClD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,QAAQ,UAAU,CAAC,IACf,kDACA;AAAA,EACN;AACF;AAOA,IAAM,sBAAsB;AAM5B,eAAsB,gBAAgB,MAMlB;AAClB,QAAM,YAAY,KAAK,aAAa;AACpC,QAAM,QAAQ,KAAK,MAAM,QAAQ,OAAO,EAAE,EAAE,YAAY,EAAE,SAAS,IAAI,GAAG;AAC1E,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,aAAa,GAAI;AACzE,MAAI;AACF,UAAM,MAAM,MAAM,UAAU,KAAK,QAAQ;AAAA,MACvC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU;AAAA,QACnB,SAAS;AAAA,QACT,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN,EAAE,IAAI,KAAK,cAAc,MAAM,GAAG,mBAAmB,GAAG,KAAK,GAAG;AAAA,UAChE;AAAA,QACF;AAAA,MACF,CAAC;AAAA,MACD,QAAQ,WAAW;AAAA,IACrB,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,IAAI,MAAM,yBAAyB,IAAI,MAAM,EAAE;AAAA,IACvD;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,QAAI,OAAO,KAAK,WAAW,UAAU;AACnC,YAAM,IAAI,MAAM,oBAAoB,KAAK,OAAO,WAAW,WAAW,EAAE;AAAA,IAC1E;AACA,WAAO,OAAO,KAAK,WAAW,OAAO,QAAQ,KAAK,MAAM;AAAA,EAC1D,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;AASA,eAAsB,mBAAmB,MAMrB;AAClB,QAAM,YAAY,KAAK,aAAa;AACpC,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,aAAa,GAAI;AACzE,MAAI;AACF,UAAM,MAAM,MAAM,UAAU,KAAK,QAAQ;AAAA,MACvC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU;AAAA,QACnB,SAAS;AAAA,QACT,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN,KAAK;AAAA,UACL,EAAE,MAAM,KAAK,aAAa;AAAA,UAC1B,EAAE,UAAU,aAAa;AAAA,QAC3B;AAAA,MACF,CAAC;AAAA,MACD,QAAQ,WAAW;AAAA,IACrB,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,IAAI,MAAM,wCAAwC,IAAI,MAAM,EAAE;AAAA,IACtE;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAI7B,UAAM,WAAW,KAAK,QAAQ;AAC9B,QAAI,CAAC,MAAM,QAAQ,QAAQ,GAAG;AAC5B,YAAM,IAAI;AAAA,QACR,mCAAmC,KAAK,OAAO,WAAW,WAAW;AAAA,MACvE;AAAA,IACF;AACA,QAAI,QAAQ;AACZ,eAAW,WAAW,UAAU;AAC9B,YAAM,SACJ,SAOC,SAAS,MAAM,QAAQ,MAAM,aAAa;AAC7C,UAAI,OAAO,WAAW,SAAU,UAAS,OAAO,MAAM;AAAA,IACxD;AACA,WAAO;AAAA,EACT,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;AAOO,SAAS,kBAA2C;AACzD,SAAO,kBAAkB,iBAAiB,EAAE,CAAC;AAC/C;AAGO,SAAS,qBAA+B;AAC7C,SAAO,kBAAkB,iBAAiB,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM;AACjE;","names":[]}

package/dist/chunk-XGFBDUQX.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/cli/identity.ts"],"sourcesContent":["/**\n * Identity resolution for the standalone-only `rig` CLI (#248).\n *\n * One precedence chain, used by every command that signs or pays:\n *\n *   1. `RIG_MNEMONIC` environment variable\n *   2. `TOON_CLIENT_MNEMONIC` environment variable — DEPRECATED alias of the\n *      env tier (a one-line stderr warning fires when it is the source)\n *   3. project-local `.env` — walked up from the working directory (through\n *      the repo root to the filesystem root); ONLY the `RIG_MNEMONIC` line is\n *      parsed out of it (never loaded into the process env, never required\n *      to exist)\n *   4. the shared `~/.toon-client` state dir (`TOON_CLIENT_HOME` override):\n *      encrypted keystore (`keystorePath` + `TOON_CLIENT_KEYSTORE_PASSWORD`,\n *      auto-password fallback for daemon-provisioned keystores), then the\n *      plain `mnemonic` config field — the pre-#248 standalone-context logic\n *\n * The BIP-44 `mnemonicAccountIndex` from the shared config file applies to\n * every source (same convention as the daemon), so the derived pubkey never\n * depends on WHERE the phrase came from.\n *\n * The phrase itself is never written anywhere by rig (not to git config, not\n * to any repo file) and never printed — callers report only the SOURCE and\n * the derived pubkey.\n *\n * Key derivation and keystore decryption live in the `@toon-protocol/client`\n * dependency, loaded via dynamic import so this module can be statically\n * imported by every command without dragging the client into runs that fail\n * earlier (usage errors, missing git repo, …).\n */\n\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, join } from 'node:path';\n\n/** Where the mnemonic came from (reported in output; the phrase never is). */\nexport type IdentitySourceKind =\n  /** `RIG_MNEMONIC` environment variable. */\n  | 'env'\n  /** `TOON_CLIENT_MNEMONIC` environment variable (deprecated alias). */\n  | 'env-alias'\n  /** `RIG_MNEMONIC` parsed out of a project-local `.env` file. */\n  | 'dotenv'\n  /** Encrypted keystore referenced by the shared client config. */\n  | 'keystore'\n  /** Plain `mnemonic` field of the shared client config file. */\n  | 'config';\n\n/** A resolved signing identity: source + derived pubkey (never the phrase). */\nexport interface ResolvedIdentity {\n  /** The BIP-39 phrase. Handle with care; never log or persist it. */\n  mnemonic: string;\n  /** BIP-44 account index used for derivation (shared config, default 0). */\n  accountIndex: number;\n  source: IdentitySourceKind;\n  /** Human-facing source label, e.g. `RIG_MNEMONIC env` or a file path. */\n  sourceLabel: string;\n  /** Derived Nostr pubkey (hex) — the repo owner / `toon.owner` value. */\n  pubkey: string;\n}\n\n/** No mnemonic could be resolved anywhere on the chain. */\nexport class MissingIdentityError extends Error {\n  constructor(configPath: string) {\n    super(\n      'no identity found — rig needs a BIP-39 seed phrase to sign and pay.\\n' +\n        'Generate one now (no BIP-39 tooling needed):\\n' +\n        '  • `rig identity create` — mint a fresh identity into the encrypted ' +\n        'keystore (shows the phrase once to back up)\\n' +\n        'Or point rig at an existing phrase (highest precedence first):\\n' +\n        '  • RIG_MNEMONIC environment variable\\n' +\n        '  • RIG_MNEMONIC=<phrase> in a project-local .env file (gitignore it!)\\n' +\n        `  • the shared client config at ${configPath} (mnemonic or ` +\n        'keystorePath + TOON_CLIENT_KEYSTORE_PASSWORD)'\n    );\n    this.name = 'MissingIdentityError';\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Shared client config conventions (duplicated from client-mcp — the same\n// note as standalone/nonce-guard.ts: no @toon-protocol/client-mcp import)\n// ---------------------------------------------------------------------------\n\n/**\n * Duplicated daemon convention (client-mcp `daemon/config.ts`): the password\n * used to encrypt a keystore rig auto-provisions (`rig identity create`\n * with no `TOON_CLIENT_KEYSTORE_PASSWORD` set) so the identity reloads across\n * runs with no env var. At-rest obfuscation only.\n */\nexport const DEFAULT_KEYSTORE_PASSWORD = 'toon-client-default';\n\n/** Shared client state dir: `TOON_CLIENT_HOME`, else `~/.toon-client`. */\nexport function clientStateDir(env: NodeJS.ProcessEnv): string {\n  return env['TOON_CLIENT_HOME'] ?? join(homedir(), '.toon-client');\n}\n\n/** Shared client config file path (`<state-dir>/config.json`). */\nexport function clientConfigPath(env: NodeJS.ProcessEnv): string {\n  return join(clientStateDir(env), 'config.json');\n}\n\n/** Default encrypted-keystore path (`<state-dir>/keystore.json`) — the same\n * convention the daemon's first-run provisioning uses. */\nexport function clientKeystorePath(env: NodeJS.ProcessEnv): string {\n  return join(clientStateDir(env), 'keystore.json');\n}\n\n/** The subset of the shared client config file identity resolution reads. */\nexport interface ClientConfigIdentityFields {\n  mnemonic?: unknown;\n  mnemonicAccountIndex?: unknown;\n  keystorePath?: unknown;\n  keystoreAutoPassword?: unknown;\n}\n\nexport function readClientConfigFile(path: string): ClientConfigIdentityFields {\n  try {\n    return JSON.parse(readFileSync(path, 'utf8')) as ClientConfigIdentityFields;\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === 'ENOENT') return {};\n    throw new Error(\n      `failed to read client config at ${path}: ${err instanceof Error ? err.message : String(err)}`\n    );\n  }\n}\n\n/**\n * Link a freshly written keystore into the shared client config so the\n * keystore tier of {@link resolveIdentity} (and the daemon) picks it up on the\n * next run — merging into any existing config, preserving every other field,\n * and writing owner-only (mode 0o600). `keystoreAutoPassword` records whether\n * rig chose the default password (so a user-set password still requires the\n * env var to decrypt, exactly like the daemon's first-run convention).\n */\nexport function linkKeystoreInClientConfig(\n  env: NodeJS.ProcessEnv,\n  keystorePath: string,\n  autoPassword: boolean\n): string {\n  const configPath = clientConfigPath(env);\n  mkdirSync(dirname(configPath), { recursive: true });\n  const existing = readClientConfigFile(configPath) as Record<string, unknown>;\n  const merged: Record<string, unknown> = {\n    ...existing,\n    keystorePath,\n    ...(autoPassword\n      ? { keystoreAutoPassword: true }\n      : // A user-set password: drop any stale auto flag so decryption\n        // requires TOON_CLIENT_KEYSTORE_PASSWORD.\n        { keystoreAutoPassword: false }),\n  };\n  writeFileSync(configPath, JSON.stringify(merged, null, 2) + '\\n', {\n    encoding: 'utf8',\n    mode: 0o600,\n  });\n  return configPath;\n}\n\n// ---------------------------------------------------------------------------\n// .env parsing (RIG_MNEMONIC only — never arbitrary env loading)\n// ---------------------------------------------------------------------------\n\nconst DOTENV_LINE_RE = /^\\s*(?:export\\s+)?RIG_MNEMONIC\\s*=\\s*(.*)\\s*$/;\n\n/**\n * Extract ONLY the `RIG_MNEMONIC` value from `.env` file content. Supports\n * `export ` prefixes, single/double quotes, full-line `#` comments, and\n * inline ` #` comments on unquoted values. Multiple assignments: the last\n * one wins (shell-sourcing semantics). An empty value counts as unset.\n * Nothing is ever loaded into `process.env`.\n */\nexport function parseDotenvMnemonic(content: string): string | undefined {\n  let found: string | undefined;\n  for (const line of content.split(/\\r?\\n/)) {\n    const match = DOTENV_LINE_RE.exec(line);\n    if (!match) continue;\n    let value = (match[1] ?? '').trim();\n    const quote = value[0];\n    if ((quote === '\"' || quote === \"'\") && value.length >= 2 && value.endsWith(quote)) {\n      value = value.slice(1, -1);\n    } else {\n      // Unquoted: an inline comment starts at the first whitespace-preceded #.\n      const hash = value.search(/\\s#/);\n      if (hash !== -1) value = value.slice(0, hash);\n      value = value.trim();\n    }\n    if (value !== '') found = value;\n  }\n  return found;\n}\n\n/**\n * Walk up from `startDir` (the working directory — the walk passes through\n * the repo root) to the filesystem root, returning the first `.env` file\n * that defines `RIG_MNEMONIC`. `stopDir` bounds the walk (tests).\n */\nexport function findDotenvMnemonic(\n  startDir: string,\n  stopDir?: string\n): { path: string; mnemonic: string } | undefined {\n  let dir = startDir;\n  for (;;) {\n    const candidate = join(dir, '.env');\n    if (existsSync(candidate)) {\n      try {\n        const mnemonic = parseDotenvMnemonic(readFileSync(candidate, 'utf8'));\n        if (mnemonic !== undefined) return { path: candidate, mnemonic };\n      } catch {\n        // Unreadable .env → keep walking; the file is never required.\n      }\n    }\n    if (stopDir !== undefined && dir === stopDir) return undefined;\n    const parent = dirname(dir);\n    if (parent === dir) return undefined;\n    dir = parent;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Resolution\n// ---------------------------------------------------------------------------\n\nexport interface ResolveIdentityOptions {\n  env: NodeJS.ProcessEnv;\n  /** Working directory the `.env` walk starts from. */\n  cwd: string;\n  /** Stderr line sink for the deprecated-alias warning. */\n  warn(line: string): void;\n  /** Bound the `.env` walk-up (tests only). */\n  dotenvStopDir?: string;\n}\n\n/** The resolved source before any derivation (dependency-free). */\ninterface MnemonicSource {\n  mnemonic: string;\n  source: IdentitySourceKind;\n  sourceLabel: string;\n}\n\nfunction resolveMnemonicSource(\n  options: ResolveIdentityOptions,\n  file: ClientConfigIdentityFields,\n  configPath: string\n): MnemonicSource | { keystorePath: string } {\n  const { env } = options;\n\n  const rigEnv = env['RIG_MNEMONIC']?.trim();\n  if (rigEnv) {\n    return { mnemonic: rigEnv, source: 'env', sourceLabel: 'RIG_MNEMONIC env' };\n  }\n\n  const aliasEnv = env['TOON_CLIENT_MNEMONIC']?.trim();\n  if (aliasEnv) {\n    options.warn(\n      'rig: TOON_CLIENT_MNEMONIC is deprecated — rename the variable to RIG_MNEMONIC'\n    );\n    return {\n      mnemonic: aliasEnv,\n      source: 'env-alias',\n      sourceLabel: 'TOON_CLIENT_MNEMONIC env (deprecated alias)',\n    };\n  }\n\n  const dotenv = findDotenvMnemonic(options.cwd, options.dotenvStopDir);\n  if (dotenv) {\n    return {\n      mnemonic: dotenv.mnemonic,\n      source: 'dotenv',\n      sourceLabel: dotenv.path,\n    };\n  }\n\n  if (typeof file.keystorePath === 'string' && file.keystorePath !== '') {\n    return { keystorePath: file.keystorePath };\n  }\n  if (typeof file.mnemonic === 'string' && file.mnemonic.trim() !== '') {\n    return {\n      mnemonic: file.mnemonic.trim(),\n      source: 'config',\n      sourceLabel: configPath,\n    };\n  }\n  throw new MissingIdentityError(configPath);\n}\n\n/**\n * Load the client key helpers. `@toon-protocol/client` is a regular runtime\n * dependency (#259); the import stays dynamic purely so commands that fail\n * earlier never pay its startup cost.\n */\nasync function loadClientKeys(): Promise<{\n  loadKeystore(path: string, password: string): string;\n  deriveNostrKeyFromMnemonic(\n    mnemonic: string,\n    accountIndex?: number\n  ): { secretKey: Uint8Array; pubkey: string };\n}> {\n  return await import('@toon-protocol/client');\n}\n\n/**\n * Resolve the CLI signing identity along the precedence chain and derive its\n * Nostr pubkey. Throws {@link MissingIdentityError} (with the full\n * three-option remediation) when nothing on the chain yields a phrase.\n */\nexport async function resolveIdentity(\n  options: ResolveIdentityOptions\n): Promise<ResolvedIdentity> {\n  const configPath = clientConfigPath(options.env);\n  const file = readClientConfigFile(configPath);\n  const picked = resolveMnemonicSource(options, file, configPath);\n\n  const keys = await loadClientKeys();\n  let source: MnemonicSource;\n  if ('keystorePath' in picked) {\n    const password =\n      options.env['TOON_CLIENT_KEYSTORE_PASSWORD'] ??\n      (file.keystoreAutoPassword === true ? DEFAULT_KEYSTORE_PASSWORD : undefined);\n    if (!password) {\n      throw new Error(\n        `keystorePath is set in ${configPath} but TOON_CLIENT_KEYSTORE_PASSWORD is not provided`\n      );\n    }\n    source = {\n      mnemonic: keys.loadKeystore(picked.keystorePath, password),\n      source: 'keystore',\n      sourceLabel: picked.keystorePath,\n    };\n  } else {\n    source = picked;\n  }\n\n  const accountIndex =\n    typeof file.mnemonicAccountIndex === 'number' ? file.mnemonicAccountIndex : 0;\n  const { pubkey } = keys.deriveNostrKeyFromMnemonic(source.mnemonic, accountIndex);\n  return { ...source, accountIndex, pubkey };\n}\n"],"mappings":";AA+BA,SAAS,YAAY,WAAW,cAAc,qBAAqB;AACnE,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AA6BvB,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAC9C,YAAY,YAAoB;AAC9B;AAAA,MACE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uCAOqC,UAAU;AAAA,IAEjD;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAaO,IAAM,4BAA4B;AAGlC,SAAS,eAAe,KAAgC;AAC7D,SAAO,IAAI,kBAAkB,KAAK,KAAK,QAAQ,GAAG,cAAc;AAClE;AAGO,SAAS,iBAAiB,KAAgC;AAC/D,SAAO,KAAK,eAAe,GAAG,GAAG,aAAa;AAChD;AAIO,SAAS,mBAAmB,KAAgC;AACjE,SAAO,KAAK,eAAe,GAAG,GAAG,eAAe;AAClD;AAUO,SAAS,qBAAqB,MAA0C;AAC7E,MAAI;AACF,WAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,EAC9C,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,SAAU,QAAO,CAAC;AAC9D,UAAM,IAAI;AAAA,MACR,mCAAmC,IAAI,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC9F;AAAA,EACF;AACF;AAUO,SAAS,2BACd,KACA,cACA,cACQ;AACR,QAAM,aAAa,iBAAiB,GAAG;AACvC,YAAU,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAClD,QAAM,WAAW,qBAAqB,UAAU;AAChD,QAAM,SAAkC;AAAA,IACtC,GAAG;AAAA,IACH;AAAA,IACA,GAAI,eACA,EAAE,sBAAsB,KAAK;AAAA;AAAA;AAAA,MAG7B,EAAE,sBAAsB,MAAM;AAAA;AAAA,EACpC;AACA,gBAAc,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,MAAM;AAAA,IAChE,UAAU;AAAA,IACV,MAAM;AAAA,EACR,CAAC;AACD,SAAO;AACT;AAMA,IAAM,iBAAiB;AAShB,SAAS,oBAAoB,SAAqC;AACvE,MAAI;AACJ,aAAW,QAAQ,QAAQ,MAAM,OAAO,GAAG;AACzC,UAAM,QAAQ,eAAe,KAAK,IAAI;AACtC,QAAI,CAAC,MAAO;AACZ,QAAI,SAAS,MAAM,CAAC,KAAK,IAAI,KAAK;AAClC,UAAM,QAAQ,MAAM,CAAC;AACrB,SAAK,UAAU,OAAO,UAAU,QAAQ,MAAM,UAAU,KAAK,MAAM,SAAS,KAAK,GAAG;AAClF,cAAQ,MAAM,MAAM,GAAG,EAAE;AAAA,IAC3B,OAAO;AAEL,YAAM,OAAO,MAAM,OAAO,KAAK;AAC/B,UAAI,SAAS,GAAI,SAAQ,MAAM,MAAM,GAAG,IAAI;AAC5C,cAAQ,MAAM,KAAK;AAAA,IACrB;AACA,QAAI,UAAU,GAAI,SAAQ;AAAA,EAC5B;AACA,SAAO;AACT;AAOO,SAAS,mBACd,UACA,SACgD;AAChD,MAAI,MAAM;AACV,aAAS;AACP,UAAM,YAAY,KAAK,KAAK,MAAM;AAClC,QAAI,WAAW,SAAS,GAAG;AACzB,UAAI;AACF,cAAM,WAAW,oBAAoB,aAAa,WAAW,MAAM,CAAC;AACpE,YAAI,aAAa,OAAW,QAAO,EAAE,MAAM,WAAW,SAAS;AAAA,MACjE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,YAAY,UAAa,QAAQ,QAAS,QAAO;AACrD,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK,QAAO;AAC3B,UAAM;AAAA,EACR;AACF;AAuBA,SAAS,sBACP,SACA,MACA,YAC2C;AAC3C,QAAM,EAAE,IAAI,IAAI;AAEhB,QAAM,SAAS,IAAI,cAAc,GAAG,KAAK;AACzC,MAAI,QAAQ;AACV,WAAO,EAAE,UAAU,QAAQ,QAAQ,OAAO,aAAa,mBAAmB;AAAA,EAC5E;AAEA,QAAM,WAAW,IAAI,sBAAsB,GAAG,KAAK;AACnD,MAAI,UAAU;AACZ,YAAQ;AAAA,MACN;AAAA,IACF;AACA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,aAAa;AAAA,IACf;AAAA,EACF;AAEA,QAAM,SAAS,mBAAmB,QAAQ,KAAK,QAAQ,aAAa;AACpE,MAAI,QAAQ;AACV,WAAO;AAAA,MACL,UAAU,OAAO;AAAA,MACjB,QAAQ;AAAA,MACR,aAAa,OAAO;AAAA,IACtB;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,iBAAiB,YAAY,KAAK,iBAAiB,IAAI;AACrE,WAAO,EAAE,cAAc,KAAK,aAAa;AAAA,EAC3C;AACA,MAAI,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,KAAK,MAAM,IAAI;AACpE,WAAO;AAAA,MACL,UAAU,KAAK,SAAS,KAAK;AAAA,MAC7B,QAAQ;AAAA,MACR,aAAa;AAAA,IACf;AAAA,EACF;AACA,QAAM,IAAI,qBAAqB,UAAU;AAC3C;AAOA,eAAe,iBAMZ;AACD,SAAO,MAAM,OAAO,uBAAuB;AAC7C;AAOA,eAAsB,gBACpB,SAC2B;AAC3B,QAAM,aAAa,iBAAiB,QAAQ,GAAG;AAC/C,QAAM,OAAO,qBAAqB,UAAU;AAC5C,QAAM,SAAS,sBAAsB,SAAS,MAAM,UAAU;AAE9D,QAAM,OAAO,MAAM,eAAe;AAClC,MAAI;AACJ,MAAI,kBAAkB,QAAQ;AAC5B,UAAM,WACJ,QAAQ,IAAI,+BAA+B,MAC1C,KAAK,yBAAyB,OAAO,4BAA4B;AACpE,QAAI,CAAC,UAAU;AACb,YAAM,IAAI;AAAA,QACR,0BAA0B,UAAU;AAAA,MACtC;AAAA,IACF;AACA,aAAS;AAAA,MACP,UAAU,KAAK,aAAa,OAAO,cAAc,QAAQ;AAAA,MACzD,QAAQ;AAAA,MACR,aAAa,OAAO;AAAA,IACtB;AAAA,EACF,OAAO;AACL,aAAS;AAAA,EACX;AAEA,QAAM,eACJ,OAAO,KAAK,yBAAyB,WAAW,KAAK,uBAAuB;AAC9E,QAAM,EAAE,OAAO,IAAI,KAAK,2BAA2B,OAAO,UAAU,YAAY;AAChF,SAAO,EAAE,GAAG,QAAQ,cAAc,OAAO;AAC3C;","names":[]}