@usesigil/kit 0.1.0

package/dist/core/policies.d.ts

@@ -0,0 +1,75 @@
+/** Policy configuration for the Sigil wrapper (pure string addresses) */
+export interface ShieldPolicies {
+    /** Maximum spend per rolling window, per token. e.g. "500 USDC/day" or { mint, amount } */
+    maxSpend?: SpendLimit | SpendLimit[] | string | string[];
+    /** Maximum single transaction size in lamports-equivalent value */
+    maxTransactionSize?: bigint | string;
+    /** Allowed protocol program IDs (base58 strings) */
+    allowedProtocols?: string[];
+    /** Allowed token mints (base58 strings) */
+    allowedTokens?: string[];
+    /** Block unknown (unregistered) program IDs. Default: true */
+    blockUnknownPrograms?: boolean;
+    /** Maximum transactions per time window */
+    rateLimit?: RateLimitConfig;
+}
+export interface SpendLimit {
+    /** SPL token mint address (base58 string) */
+    mint: string;
+    /** Maximum amount in token's native decimals (e.g. 500_000_000 for 500 USDC) */
+    amount: bigint;
+    /** Window duration in milliseconds. Default: 86_400_000 (24h) */
+    windowMs?: number;
+}
+export interface RateLimitConfig {
+    /** Max number of transactions in the window */
+    maxTransactions: number;
+    /** Window duration in milliseconds. Default: 3_600_000 (1 hour) */
+    windowMs?: number;
+}
+/** Result from a custom policy check */
+export interface PolicyCheckResult {
+    allowed: boolean;
+    reason?: string;
+}
+/** Analysis of a transaction's contents (pure string addresses) */
+export interface TransactionAnalysis {
+    /** Program IDs invoked by the transaction (base58 strings) */
+    programIds: string[];
+    /** Token transfers detected in the transaction */
+    transfers: TokenTransfer[];
+    /** Total estimated value of outgoing transfers, in lamports-equivalent */
+    estimatedValueLamports: bigint;
+}
+export interface TokenTransfer {
+    /** Token mint address (base58 string) */
+    mint: string;
+    /** Amount in native token decimals */
+    amount: bigint;
+    /** "outgoing" = tokens leaving the wallet, "incoming" = tokens arriving */
+    direction: "outgoing" | "incoming" | "unknown";
+    /** Destination account (base58 string) */
+    destination?: string;
+}
+/** Default secure policies — applied when shield() is called with no config */
+export declare const DEFAULT_POLICIES: Required<Pick<ShieldPolicies, "blockUnknownPrograms" | "rateLimit">> & {
+    maxSpend: SpendLimit[];
+};
+/**
+ * Parse a human-readable spend limit string like "500 USDC/day" into a SpendLimit.
+ */
+export declare function parseSpendLimit(input: string): SpendLimit;
+/** Internal resolved policy representation */
+export interface ResolvedPolicies {
+    spendLimits: SpendLimit[];
+    maxTransactionSize: bigint | undefined;
+    allowedProtocols: Set<string> | undefined;
+    allowedTokens: Set<string> | undefined;
+    blockUnknownPrograms: boolean;
+    rateLimit: Required<RateLimitConfig>;
+}
+/**
+ * Normalize user-provided policies into a resolved internal format.
+ */
+export declare function resolvePolicies(input?: ShieldPolicies): ResolvedPolicies;
+//# sourceMappingURL=policies.d.ts.map

package/dist/core/policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../src/core/policies.ts"],"names":[],"mappings":"AAGA,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,UAAU,GAAG,UAAU,EAAE,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;IACzD,mEAAmE;IACnE,kBAAkB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrC,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,2CAA2C;IAC3C,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,+CAA+C;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,kDAAkD;IAClD,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,0EAA0E;IAC1E,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAC/C,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC,IAAI,CAAC,cAAc,EAAE,sBAAsB,GAAG,WAAW,CAAC,CAC3D,GAAG;IAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;CA0B3B,CAAC;AAUF;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CA4CzD;AAED,8CAA8C;AAC9C,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC1C,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACvC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,SAAS,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;CACtC;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,CAAC,EAAE,cAAc,GAAG,gBAAgB,CAyDxE"}

package/dist/core/policies.js

@@ -0,0 +1,126 @@
+import { KNOWN_TOKENS } from "./registry.js";
+import { ShieldConfigError } from "./errors.js";
+/** Default secure policies — applied when shield() is called with no config */
+export const DEFAULT_POLICIES = {
+    maxSpend: [
+        {
+            // 1000 USDC/day default cap
+            mint: "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
+            amount: BigInt(1_000_000_000), // 1000 * 10^6
+            windowMs: 86_400_000,
+        },
+        {
+            // 1000 USDT/day default cap
+            mint: "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB",
+            amount: BigInt(1_000_000_000),
+            windowMs: 86_400_000,
+        },
+        {
+            // 10 SOL/day default cap
+            mint: "So11111111111111111111111111111111111111112",
+            amount: BigInt(10_000_000_000), // 10 * 10^9
+            windowMs: 86_400_000,
+        },
+    ],
+    blockUnknownPrograms: true,
+    rateLimit: {
+        maxTransactions: 60,
+        windowMs: 3_600_000, // 1 hour
+    },
+};
+const WINDOW_ALIASES = {
+    "/day": 86_400_000,
+    "/hour": 3_600_000,
+    "/hr": 3_600_000,
+    "/min": 60_000,
+    "/minute": 60_000,
+};
+/**
+ * Parse a human-readable spend limit string like "500 USDC/day" into a SpendLimit.
+ */
+export function parseSpendLimit(input) {
+    const trimmed = input.trim();
+    // Match pattern: "<amount> <symbol>/<window>"
+    const match = trimmed.match(/^(\d+(?:\.\d+)?)\s+(\w+)(\/\w+)?$/);
+    if (!match) {
+        throw new ShieldConfigError(`Invalid spend limit format: "${input}". Expected format: "500 USDC/day"`);
+    }
+    const [, amountStr, symbol, windowStr] = match;
+    const windowMs = windowStr ? WINDOW_ALIASES[windowStr] : 86_400_000;
+    if (windowStr && !windowMs) {
+        throw new ShieldConfigError(`Unknown time window: "${windowStr}". Supported: /day, /hour, /hr, /min, /minute`);
+    }
+    // Find token by symbol
+    let foundMint;
+    let foundDecimals;
+    for (const [mint, info] of KNOWN_TOKENS) {
+        if (info.symbol.toUpperCase() === symbol.toUpperCase()) {
+            foundMint = mint;
+            foundDecimals = info.decimals;
+            break;
+        }
+    }
+    if (!foundMint || foundDecimals === undefined) {
+        throw new ShieldConfigError(`Unknown token symbol: "${symbol}". Use a known token (USDC, USDT, SOL, wBTC, wETH, mSOL, jitoSOL, bSOL) or pass a SpendLimit object with the mint address.`);
+    }
+    const amountFloat = parseFloat(amountStr);
+    const amountNative = BigInt(Math.round(amountFloat * 10 ** foundDecimals));
+    return {
+        mint: foundMint,
+        amount: amountNative,
+        windowMs,
+    };
+}
+/**
+ * Normalize user-provided policies into a resolved internal format.
+ */
+export function resolvePolicies(input) {
+    const resolved = {
+        spendLimits: [...DEFAULT_POLICIES.maxSpend],
+        maxTransactionSize: undefined,
+        allowedProtocols: undefined,
+        allowedTokens: undefined,
+        blockUnknownPrograms: DEFAULT_POLICIES.blockUnknownPrograms,
+        rateLimit: {
+            maxTransactions: DEFAULT_POLICIES.rateLimit.maxTransactions,
+            windowMs: DEFAULT_POLICIES.rateLimit.windowMs ?? 3_600_000,
+        },
+    };
+    if (!input)
+        return resolved;
+    // Parse spend limits
+    if (input.maxSpend !== undefined) {
+        const limits = Array.isArray(input.maxSpend)
+            ? input.maxSpend
+            : [input.maxSpend];
+        resolved.spendLimits = limits.map((l) => typeof l === "string" ? parseSpendLimit(l) : l);
+    }
+    // Max transaction size
+    if (input.maxTransactionSize !== undefined) {
+        resolved.maxTransactionSize =
+            typeof input.maxTransactionSize === "string"
+                ? parseSpendLimit(input.maxTransactionSize).amount
+                : input.maxTransactionSize;
+    }
+    // Allowed protocols
+    if (input.allowedProtocols !== undefined) {
+        resolved.allowedProtocols = new Set(input.allowedProtocols);
+    }
+    // Allowed tokens
+    if (input.allowedTokens !== undefined) {
+        resolved.allowedTokens = new Set(input.allowedTokens);
+    }
+    // Block unknown programs
+    if (input.blockUnknownPrograms !== undefined) {
+        resolved.blockUnknownPrograms = input.blockUnknownPrograms;
+    }
+    // Rate limit
+    if (input.rateLimit !== undefined) {
+        resolved.rateLimit = {
+            maxTransactions: input.rateLimit.maxTransactions,
+            windowMs: input.rateLimit.windowMs ?? 3_600_000,
+        };
+    }
+    return resolved;
+}
+//# sourceMappingURL=policies.js.map

package/dist/core/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../src/core/policies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AA6DhD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAEI;IAC/B,QAAQ,EAAE;QACR;YACE,4BAA4B;YAC5B,IAAI,EAAE,8CAA8C;YACpD,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,cAAc;YAC7C,QAAQ,EAAE,UAAU;SACrB;QACD;YACE,4BAA4B;YAC5B,IAAI,EAAE,8CAA8C;YACpD,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC;YAC7B,QAAQ,EAAE,UAAU;SACrB;QACD;YACE,yBAAyB;YACzB,IAAI,EAAE,6CAA6C;YACnD,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,YAAY;YAC5C,QAAQ,EAAE,UAAU;SACrB;KACF;IACD,oBAAoB,EAAE,IAAI;IAC1B,SAAS,EAAE;QACT,eAAe,EAAE,EAAE;QACnB,QAAQ,EAAE,SAAS,EAAE,SAAS;KAC/B;CACF,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,MAAM;IACd,SAAS,EAAE,MAAM;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,8CAA8C;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,iBAAiB,CACzB,gCAAgC,KAAK,oCAAoC,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACpE,IAAI,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,iBAAiB,CACzB,yBAAyB,SAAS,+CAA+C,CAClF,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,SAA6B,CAAC;IAClC,IAAI,aAAiC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;YACvD,SAAS,GAAG,IAAI,CAAC;YACjB,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC9B,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,MAAM,4HAA4H,CAC7J,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,IAAI,aAAa,CAAC,CAAC,CAAC;IAE3E,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,YAAY;QACpB,QAAQ;KACT,CAAC;AACJ,CAAC;AAYD;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,MAAM,QAAQ,GAAqB;QACjC,WAAW,EAAE,CAAC,GAAG,gBAAgB,CAAC,QAAQ,CAAC;QAC3C,kBAAkB,EAAE,SAAS;QAC7B,gBAAgB,EAAE,SAAS;QAC3B,aAAa,EAAE,SAAS;QACxB,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB;QAC3D,SAAS,EAAE;YACT,eAAe,EAAE,gBAAgB,CAAC,SAAS,CAAC,eAAe;YAC3D,QAAQ,EAAE,gBAAgB,CAAC,SAAS,CAAC,QAAQ,IAAI,SAAS;SAC3D;KACF,CAAC;IAEF,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAE5B,qBAAqB;IACrB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC1C,CAAC,CAAC,KAAK,CAAC,QAAQ;YAChB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrB,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC3C,QAAQ,CAAC,kBAAkB;YACzB,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;gBAC1C,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM;gBAClD,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,oBAAoB;IACpB,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,QAAQ,CAAC,gBAAgB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC9D,CAAC;IAED,iBAAiB;IACjB,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,QAAQ,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,yBAAyB;IACzB,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC7C,QAAQ,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IAC7D,CAAC;IAED,aAAa;IACb,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,QAAQ,CAAC,SAAS,GAAG;YACnB,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,eAAe;YAChD,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,IAAI,SAAS;SAChD,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/registry.d.ts

@@ -0,0 +1,29 @@
+/** Known Solana DeFi protocol program IDs */
+export declare const KNOWN_PROTOCOLS: ReadonlyMap<string, string>;
+/** Program IDs that are always allowed (system programs, token programs) */
+export declare const SYSTEM_PROGRAMS: ReadonlySet<string>;
+/** Common SPL token mints on Solana */
+export declare const KNOWN_TOKENS: ReadonlyMap<string, {
+    symbol: string;
+    decimals: number;
+}>;
+/**
+ * Look up a token's symbol and decimals by mint address.
+ */
+export declare function getTokenInfo(mint: string): {
+    symbol: string;
+    decimals: number;
+} | undefined;
+/**
+ * Look up a protocol's name by program ID.
+ */
+export declare function getProtocolName(programId: string): string | undefined;
+/**
+ * Check if a program ID is a known system program (always allowed).
+ */
+export declare function isSystemProgram(programId: string): boolean;
+/**
+ * Check if a program ID is a known DeFi protocol.
+ */
+export declare function isKnownProtocol(programId: string): boolean;
+//# sourceMappingURL=registry.d.ts.map

package/dist/core/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CA8CtD,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAQ9C,CAAC;AAEH,uCAAuC;AACvC,eAAO,MAAM,YAAY,EAAE,WAAW,CACpC,MAAM,EACN;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAmDpC,CAAC;AAEH;;GAEG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,GACX;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAElD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE1D"}

package/dist/core/registry.js

@@ -0,0 +1,125 @@
+/** Known Solana DeFi protocol program IDs */
+export const KNOWN_PROTOCOLS = new Map([
+    // DEX Aggregators
+    ["JUP6LkbZbjS1jKKwapdHNy74zcZ3tLUZoi5QNyVTaV4", "Jupiter V6"],
+    ["JUP4Fb2cqiRUcaTHdrPC8h2gNsA2ETXiPDD33WcPX7a", "Jupiter V4"],
+    ["JUP2jxvXaqu7NQY1GmNF4m1vodw12LVXYxbFL2uN4e7", "Jupiter V2"],
+    // Jupiter Extended
+    ["JLend2fEim9xUFcaHsyGePEoBzFLvkjMi3MnPcSuCdu", "Jupiter Lend"],
+    ["j1to2GQCsfSHNPfVKMcrUNyRBK8DPYECpEVPLkz1MKv", "Jupiter Trigger"],
+    ["DCA265Vj8a9CEuX1eb1LWRnDT7uK6q1xMipnNyatn23M", "Jupiter Recurring"],
+    // DEXes
+    ["whirLbMiicVdio4qvUfM5KAg6Ct8VwpYzGff3uctyCc", "Orca Whirlpool"],
+    ["9W959DqEETiGZocYWCQPaJ6sBmUzgfxXfqGeTEdp3aQP", "Orca Whirlpool V2"],
+    ["675kPX9MHTjS2zt1qfr1NYHuzeLXfQM9H24wFSUt1Mp8", "Raydium AMM V4"],
+    ["CAMMCzo5YL8w4VFF8KVHrK22GGUsp5VTaW7grrKgrWqK", "Raydium CLMM"],
+    ["CPMMoo8L3F4NbTegBCKVNunggL7H1ZpdTHKxQB5qKP1C", "Raydium CPMM"],
+    ["LBUZKhRxPF3XUpBCjp4YzTKgLccjZhTSDM9YuVaPwxo", "Meteora DLMM"],
+    ["Eo7WjKq67rjJQSZxS6z3YkapzY3eMj6Xy8X5EQVn5UaB", "Meteora Pools"],
+    ["SSwpkEEcbUqx4vtoEByFjSkhKdCT862DNVb52nZg1UZ", "Saber Stable Swap"],
+    ["DecZY86MU5Gj7kppfUCEmd4LbXXuyZH1yHaP2NTqdiZB", "Openbook V2"],
+    // Perpetuals / Leverage
+    ["FLASH6Lo6h3iasJKWDs2F8TkW2UKf3s15C8PMGuVfgBn", "Flash Trade"],
+    ["FSWAPViR8ny5K96hezav8jynVubP2dJ2L7SbKzds2hwm", "Flash Composability"],
+    ["dRiftyHA39MWEi3m9aunc5MzRF1JYuBsbn6VPcn33UH", "Drift Protocol"],
+    ["MNGOHoFrnGrovWiCc9kHZB8xEBKM1XPYnZCpWFbRCev", "Mango Markets V4"],
+    // Lending / Borrowing
+    ["KLend2g3cP87ber8CzRaqeECGwNvLFM9acPVcRkRHvM", "Kamino Lending"],
+    ["MFv2hWf31Z9kbCa1snEPYctwafyhdvnV7FZnsebVacA", "Marginfi V2"],
+    ["So1endDq2YkqhipRh3WViPa8hFMqDSRbsHTE15WSnBt", "Solend"],
+    // Staking / Liquid Staking
+    ["MarBmsSgKXdrN1egZf5sqe1TMai9K1rChYNDJgjq7aD", "Marinade Finance"],
+    ["SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy", "Stake Pool Program"],
+    ["J1toso1uCk3RLmjorhTtrVwY9HJ7X8V9yYac6Y7kGCPn", "Jito Staking"],
+    // System Programs (always allowed)
+    ["11111111111111111111111111111111", "System Program"],
+    ["TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "Token Program"],
+    ["ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL", "Associated Token"],
+    ["TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "Token 2022"],
+    ["ComputeBudget111111111111111111111111111111", "Compute Budget"],
+    ["SysvarRent111111111111111111111111111111111", "Sysvar Rent"],
+    ["SysvarC1ock11111111111111111111111111111111", "Sysvar Clock"],
+]);
+/** Program IDs that are always allowed (system programs, token programs) */
+export const SYSTEM_PROGRAMS = new Set([
+    "11111111111111111111111111111111",
+    "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA",
+    "ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL",
+    "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",
+    "ComputeBudget111111111111111111111111111111",
+    "SysvarRent111111111111111111111111111111111",
+    "SysvarC1ock11111111111111111111111111111111",
+]);
+/** Common SPL token mints on Solana */
+export const KNOWN_TOKENS = new Map([
+    // Stablecoins
+    [
+        "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
+        { symbol: "USDC", decimals: 6 },
+    ],
+    [
+        "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB",
+        { symbol: "USDT", decimals: 6 },
+    ],
+    [
+        "USDSwr9ApdHk5bvJKMjzff41FfuX8bSxdKcR81vTwcA",
+        { symbol: "USDS", decimals: 6 },
+    ],
+    // SOL
+    [
+        "So11111111111111111111111111111111111111112",
+        { symbol: "SOL", decimals: 9 },
+    ],
+    // Wrapped BTC
+    [
+        "3NZ9JMVBmGAqocybic2c7LQCJScmgsAZ6vQqTDzcqmJh",
+        { symbol: "wBTC", decimals: 8 },
+    ],
+    [
+        "cbbtcf3aa214zXHbiAZQwf4122FBYbraNdFqgw4iMij",
+        { symbol: "cbBTC", decimals: 8 },
+    ],
+    // Ethereum
+    [
+        "7vfCXTUXx5WJV5JADk17DUJ4ksgau7utNKj4b963voxs",
+        { symbol: "wETH", decimals: 8 },
+    ],
+    // Liquid Staking
+    [
+        "mSoLzYCxHdYgdzU16g5QSh3i5K3z3KZK7ytfqcJm7So",
+        { symbol: "mSOL", decimals: 9 },
+    ],
+    [
+        "J1toso1uCk3RLmjorhTtrVwY9HJ7X8V9yYac6Y7kGCPn",
+        { symbol: "jitoSOL", decimals: 9 },
+    ],
+    [
+        "bSo13r4TkiE4KumL71LsHTPpL2euBYLFx6h9HP3piy1",
+        { symbol: "bSOL", decimals: 9 },
+    ],
+]);
+/**
+ * Look up a token's symbol and decimals by mint address.
+ */
+export function getTokenInfo(mint) {
+    return KNOWN_TOKENS.get(mint);
+}
+/**
+ * Look up a protocol's name by program ID.
+ */
+export function getProtocolName(programId) {
+    return KNOWN_PROTOCOLS.get(programId);
+}
+/**
+ * Check if a program ID is a known system program (always allowed).
+ */
+export function isSystemProgram(programId) {
+    return SYSTEM_PROGRAMS.has(programId);
+}
+/**
+ * Check if a program ID is a known DeFi protocol.
+ */
+export function isKnownProtocol(programId) {
+    return KNOWN_PROTOCOLS.has(programId);
+}
+//# sourceMappingURL=registry.js.map

package/dist/core/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAgC,IAAI,GAAG,CAAC;IAClE,kBAAkB;IAClB,CAAC,6CAA6C,EAAE,YAAY,CAAC;IAC7D,CAAC,6CAA6C,EAAE,YAAY,CAAC;IAC7D,CAAC,6CAA6C,EAAE,YAAY,CAAC;IAE7D,mBAAmB;IACnB,CAAC,6CAA6C,EAAE,cAAc,CAAC;IAC/D,CAAC,6CAA6C,EAAE,iBAAiB,CAAC;IAClE,CAAC,8CAA8C,EAAE,mBAAmB,CAAC;IAErE,QAAQ;IACR,CAAC,6CAA6C,EAAE,gBAAgB,CAAC;IACjE,CAAC,8CAA8C,EAAE,mBAAmB,CAAC;IACrE,CAAC,8CAA8C,EAAE,gBAAgB,CAAC;IAClE,CAAC,8CAA8C,EAAE,cAAc,CAAC;IAChE,CAAC,8CAA8C,EAAE,cAAc,CAAC;IAChE,CAAC,6CAA6C,EAAE,cAAc,CAAC;IAC/D,CAAC,8CAA8C,EAAE,eAAe,CAAC;IACjE,CAAC,6CAA6C,EAAE,mBAAmB,CAAC;IACpE,CAAC,8CAA8C,EAAE,aAAa,CAAC;IAE/D,wBAAwB;IACxB,CAAC,8CAA8C,EAAE,aAAa,CAAC;IAC/D,CAAC,8CAA8C,EAAE,qBAAqB,CAAC;IACvE,CAAC,6CAA6C,EAAE,gBAAgB,CAAC;IACjE,CAAC,6CAA6C,EAAE,kBAAkB,CAAC;IAEnE,sBAAsB;IACtB,CAAC,6CAA6C,EAAE,gBAAgB,CAAC;IACjE,CAAC,6CAA6C,EAAE,aAAa,CAAC;IAC9D,CAAC,6CAA6C,EAAE,QAAQ,CAAC;IAEzD,2BAA2B;IAC3B,CAAC,6CAA6C,EAAE,kBAAkB,CAAC;IACnE,CAAC,6CAA6C,EAAE,oBAAoB,CAAC;IACrE,CAAC,8CAA8C,EAAE,cAAc,CAAC;IAEhE,mCAAmC;IACnC,CAAC,kCAAkC,EAAE,gBAAgB,CAAC;IACtD,CAAC,6CAA6C,EAAE,eAAe,CAAC;IAChE,CAAC,8CAA8C,EAAE,kBAAkB,CAAC;IACpE,CAAC,6CAA6C,EAAE,YAAY,CAAC;IAC7D,CAAC,6CAA6C,EAAE,gBAAgB,CAAC;IACjE,CAAC,6CAA6C,EAAE,aAAa,CAAC;IAC9D,CAAC,6CAA6C,EAAE,cAAc,CAAC;CAChE,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IAC1D,kCAAkC;IAClC,6CAA6C;IAC7C,8CAA8C;IAC9C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;CAC9C,CAAC,CAAC;AAEH,uCAAuC;AACvC,MAAM,CAAC,MAAM,YAAY,GAGrB,IAAI,GAAG,CAAC;IACV,cAAc;IACd;QACE,8CAA8C;QAC9C,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;KAChC;IACD;QACE,8CAA8C;QAC9C,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;KAChC;IACD;QACE,6CAA6C;QAC7C,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;KAChC;IAED,MAAM;IACN;QACE,6CAA6C;QAC7C,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE;KAC/B;IAED,cAAc;IACd;QACE,8CAA8C;QAC9C,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;KAChC;IACD;QACE,6CAA6C;QAC7C,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE;KACjC;IAED,WAAW;IACX;QACE,8CAA8C;QAC9C,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;KAChC;IAED,iBAAiB;IACjB;QACE,6CAA6C;QAC7C,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;KAChC;IACD;QACE,8CAA8C;QAC9C,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE;KACnC;IACD;QACE,6CAA6C;QAC7C,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;KAChC;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY;IAEZ,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,OAAO,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,OAAO,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,OAAO,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC"}

package/dist/core/state.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Client-side spending state tracker.
+ * Maintains rolling windows for spend tracking and rate limiting.
+ * Supports optional persistence via a pluggable storage backend.
+ */
+export interface SpendEntry {
+    /** Token mint address (base58) */
+    mint: string;
+    /** Amount in native token decimals */
+    amount: bigint;
+    /** Unix timestamp in milliseconds */
+    timestamp: number;
+}
+export interface TxEntry {
+    /** Unix timestamp in milliseconds */
+    timestamp: number;
+}
+/** Pluggable storage interface for persistence */
+export interface ShieldStorage {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+}
+export declare class ShieldState {
+    private spendEntries;
+    private txEntries;
+    private storage;
+    constructor(storage?: ShieldStorage);
+    /**
+     * Record a spend event for a token.
+     */
+    recordSpend(mint: string, amount: bigint): void;
+    /**
+     * Record a transaction event for rate limiting.
+     */
+    recordTransaction(): void;
+    /**
+     * Get total spend for a token mint within the given time window.
+     */
+    getSpendInWindow(mint: string, windowMs: number): bigint;
+    /**
+     * Get number of transactions within the given time window.
+     */
+    getTransactionCountInWindow(windowMs: number): number;
+    /**
+     * Remove expired entries older than the given window.
+     */
+    pruneExpired(maxWindowMs: number): void;
+    /**
+     * Save current state for potential rollback (used by signAllTransactions).
+     */
+    checkpoint(): {
+        spends: SpendEntry[];
+        txs: TxEntry[];
+    };
+    /**
+     * Restore state to a previous checkpoint (undo phantom spends).
+     */
+    rollback(cp: {
+        spends: SpendEntry[];
+        txs: TxEntry[];
+    }): void;
+    /**
+     * Reset all state.
+     */
+    reset(): void;
+    /** Load state from storage */
+    private load;
+    /** Persist state to storage */
+    private persist;
+}
+//# sourceMappingURL=state.d.ts.map

package/dist/core/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/core/state.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,UAAU;IACzB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,OAAO;IACtB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AASD,qBAAa,WAAW;IACtB,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,SAAS,CAAiB;IAClC,OAAO,CAAC,OAAO,CAAuB;gBAE1B,OAAO,CAAC,EAAE,aAAa;IAKnC;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAe/C;;OAEG;IACH,iBAAiB,IAAI,IAAI;IAUzB;;OAEG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAWxD;;OAEG;IACH,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAWrD;;OAEG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAOvC;;OAEG;IACH,UAAU,IAAI;QAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAAC,GAAG,EAAE,OAAO,EAAE,CAAA;KAAE;IAOtD;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE;QAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAAC,GAAG,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,IAAI;IAM5D;;OAEG;IACH,KAAK,IAAI,IAAI;IAMb,8BAA8B;IAC9B,OAAO,CAAC,IAAI;IA+BZ,+BAA+B;IAC/B,OAAO,CAAC,OAAO;CAmBhB"}

package/dist/core/state.js

@@ -0,0 +1,169 @@
+/**
+ * Client-side spending state tracker.
+ * Maintains rolling windows for spend tracking and rate limiting.
+ * Supports optional persistence via a pluggable storage backend.
+ */
+const STORAGE_KEY_SPENDS = "sigil:spends";
+const STORAGE_KEY_TXS = "sigil:txs";
+/** Max entries to keep in each tracker to prevent unbounded growth */
+const MAX_SPEND_ENTRIES = 5000;
+const MAX_TX_ENTRIES = 5000;
+export class ShieldState {
+    spendEntries = [];
+    txEntries = [];
+    storage;
+    constructor(storage) {
+        this.storage = storage ?? detectStorage();
+        this.load();
+    }
+    /**
+     * Record a spend event for a token.
+     */
+    recordSpend(mint, amount) {
+        this.spendEntries.push({
+            mint,
+            amount,
+            timestamp: Date.now(),
+        });
+        // Trim to max entries
+        if (this.spendEntries.length > MAX_SPEND_ENTRIES) {
+            this.spendEntries = this.spendEntries.slice(-MAX_SPEND_ENTRIES);
+        }
+        this.persist();
+    }
+    /**
+     * Record a transaction event for rate limiting.
+     */
+    recordTransaction() {
+        this.txEntries.push({ timestamp: Date.now() });
+        if (this.txEntries.length > MAX_TX_ENTRIES) {
+            this.txEntries = this.txEntries.slice(-MAX_TX_ENTRIES);
+        }
+        this.persist();
+    }
+    /**
+     * Get total spend for a token mint within the given time window.
+     */
+    getSpendInWindow(mint, windowMs) {
+        const cutoff = Date.now() - windowMs;
+        let total = BigInt(0);
+        for (const entry of this.spendEntries) {
+            if (entry.mint === mint && entry.timestamp >= cutoff) {
+                total += entry.amount;
+            }
+        }
+        return total;
+    }
+    /**
+     * Get number of transactions within the given time window.
+     */
+    getTransactionCountInWindow(windowMs) {
+        const cutoff = Date.now() - windowMs;
+        let count = 0;
+        for (const entry of this.txEntries) {
+            if (entry.timestamp >= cutoff) {
+                count++;
+            }
+        }
+        return count;
+    }
+    /**
+     * Remove expired entries older than the given window.
+     */
+    pruneExpired(maxWindowMs) {
+        const cutoff = Date.now() - maxWindowMs;
+        this.spendEntries = this.spendEntries.filter((e) => e.timestamp >= cutoff);
+        this.txEntries = this.txEntries.filter((e) => e.timestamp >= cutoff);
+        this.persist();
+    }
+    /**
+     * Save current state for potential rollback (used by signAllTransactions).
+     */
+    checkpoint() {
+        return {
+            spends: [...this.spendEntries],
+            txs: [...this.txEntries],
+        };
+    }
+    /**
+     * Restore state to a previous checkpoint (undo phantom spends).
+     */
+    rollback(cp) {
+        this.spendEntries = cp.spends;
+        this.txEntries = cp.txs;
+        this.persist();
+    }
+    /**
+     * Reset all state.
+     */
+    reset() {
+        this.spendEntries = [];
+        this.txEntries = [];
+        this.persist();
+    }
+    /** Load state from storage */
+    load() {
+        if (!this.storage)
+            return;
+        try {
+            const spendsRaw = this.storage.getItem(STORAGE_KEY_SPENDS);
+            if (spendsRaw) {
+                const parsed = JSON.parse(spendsRaw);
+                this.spendEntries = parsed.map((e) => ({
+                    mint: e.mint,
+                    amount: BigInt(e.amount),
+                    timestamp: e.timestamp,
+                }));
+            }
+        }
+        catch {
+            this.spendEntries = [];
+        }
+        try {
+            const txsRaw = this.storage.getItem(STORAGE_KEY_TXS);
+            if (txsRaw) {
+                this.txEntries = JSON.parse(txsRaw);
+            }
+        }
+        catch {
+            this.txEntries = [];
+        }
+    }
+    /** Persist state to storage */
+    persist() {
+        if (!this.storage)
+            return;
+        try {
+            const spendsJson = JSON.stringify(this.spendEntries.map((e) => ({
+                mint: e.mint,
+                amount: e.amount.toString(),
+                timestamp: e.timestamp,
+            })));
+            this.storage.setItem(STORAGE_KEY_SPENDS, spendsJson);
+            const txsJson = JSON.stringify(this.txEntries);
+            this.storage.setItem(STORAGE_KEY_TXS, txsJson);
+        }
+        catch {
+            // Storage unavailable — continue with in-memory only
+        }
+    }
+}
+/**
+ * Detect available storage backend.
+ * Returns localStorage if available (browser), null otherwise (Node.js).
+ */
+function detectStorage() {
+    try {
+        if (typeof globalThis !== "undefined") {
+            const g = globalThis;
+            if (g.localStorage) {
+                return g.localStorage;
+            }
+        }
+    }
+    catch {
+        // localStorage not available
+    }
+    return null;
+}
+//# sourceMappingURL=state.js.map

package/dist/core/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/core/state.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAsBH,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAC1C,MAAM,eAAe,GAAG,WAAW,CAAC;AAEpC,sEAAsE;AACtE,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,MAAM,OAAO,WAAW;IACd,YAAY,GAAiB,EAAE,CAAC;IAChC,SAAS,GAAc,EAAE,CAAC;IAC1B,OAAO,CAAuB;IAEtC,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,aAAa,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAY,EAAE,MAAc;QACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YACrB,IAAI;YACJ,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,sBAAsB;QACtB,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACjD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE/C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,IAAY,EAAE,QAAgB;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QACrC,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC;gBACrD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,2BAA2B,CAAC,QAAgB;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QACrC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC;gBAC9B,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,WAAmB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO;YACL,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;YAC9B,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,EAA4C;QACnD,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,CAAC;QACxB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,8BAA8B;IACtB,IAAI;QACV,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAC3D,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAIjC,CAAC;gBACH,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACrC,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;oBACxB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACvB,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACzB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACrD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAc,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,+BAA+B;IACvB,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAC/B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC3B,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC,CACJ,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;YAErD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,IAAI,OAAO,UAAU,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,UAAqC,CAAC;YAChD,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBACnB,OAAO,CAAC,CAAC,YAA6B,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}