@usesigil/kit 0.15.0 → 0.17.0

package/dist/seal/intent-digest.js

@@ -0,0 +1,372 @@
+/**
+ * AL3 — `computeSealInputDigest()` per-call intent digest.
+ * Phase 9 Batch I (ISC-69..76, 143, 148, 150, 153, 155).
+ *
+ * SHA-256 over a canonical Borsh-style encoding of the SealInput envelope
+ * (vault, agent identity, mint, amount, target protocol, network, sealed
+ * instructions). Mirrors the discipline of TA-19's `policy_preview_digest`
+ * (`sdk/kit/src/policy/compute-policy-preview-digest.ts`) — same primitive
+ * (SHA-256 via the shared `canonical-encode.ts` helper), same APPEND-ONLY
+ * field ordering, same byte-equal cross-runtime test fixture pattern.
+ *
+ * **What this defends against**
+ * TA-19 binds the POLICY STATE the owner approved (allowlists, caps,
+ * cosign flag, agent set hash). It does NOT bind the specific call the
+ * agent is making — a compromised agent can still propose a transfer to
+ * an attacker-controlled but still-allowlisted recipient, or reorder
+ * instruction account metas to swap a destination, and the policy
+ * checks all pass. AL3 closes that gap: the owner approves a SPECIFIC
+ * intent (recipient, amount, mint, ix shape) in the preview UI, the SDK
+ * hashes that intent into a 32-byte digest, and `executeSeal` rejects
+ * if the bundle assembled at submit time produces a different digest.
+ *
+ * **Canonical encoding (FIXED — DO NOT REORDER)**
+ *
+ *   1. intent_version: u8 = 1                          (1 byte, reserved
+ *                                                       for future format
+ *                                                       evolution per
+ *                                                       Council ISC-155)
+ *   2. network_id: u8                                  (1 byte; 0=devnet,
+ *                                                       1=mainnet — binds
+ *                                                       AL4 isMainnet so
+ *                                                       a mainnet bundle
+ *                                                       can't be replayed
+ *                                                       through a devnet
+ *                                                       preview)
+ *   3. vault: Pubkey                                   (32 bytes)
+ *   4. agent: Pubkey                                   (32 bytes —
+ *                                                       agent IDENTITY,
+ *                                                       not signer)
+ *   5. token_mint: Pubkey                              (32 bytes)
+ *   6. amount: u64 LE                                  (8 bytes)
+ *   7. target_protocol: Pubkey                         (32 bytes; system
+ *                                                       program if the
+ *                                                       caller omitted
+ *                                                       targetProtocol)
+ *   8. instructions: Vec<Ix>                           (u32 LE length ++
+ *                                                       each ix below)
+ *
+ *   Each ix:
+ *     a. program_address: Pubkey                       (32 bytes)
+ *     b. accounts: Vec<(address: Pubkey, role: u8)>    (u32 LE length ++
+ *                                                       each 33-byte
+ *                                                       entry)
+ *     c. data: Vec<u8>                                 (u32 LE length ++
+ *                                                       data bytes)
+ *
+ * **Discipline guardrails**
+ *
+ * - NEVER `JSON.stringify` the input. Object property iteration order is
+ *   not stable across engines and silent reorderings would invalidate
+ *   the digest invariant. The canonical encoder walks fields explicitly.
+ * - 32-byte pubkey comparisons use `Buffer.compare` on raw bytes (NOT
+ *   base58 lexicographic) so the byte ordering matches Solana's
+ *   `Pubkey::cmp` exactly. Council ISC-150 flagged this as a critical
+ *   bug class — base58 lex doesn't preserve the canonical byte ordering
+ *   when leading-zero counts differ.
+ * - Account meta order is preserved as supplied. Reordering metas — even
+ *   identical pubkeys — produces a different digest. This is the load-
+ *   bearing protection against "swap recipient slots" attacks.
+ * - `intent_version: u8 = 1` at position 1 reserves the discriminant
+ *   for future format upgrades. A v2 SealInput format would write
+ *   `intent_version: 2` and the on-chain verifier could route to the
+ *   correct decoder by reading the first byte.
+ *
+ * **Canonical input contract (load-bearing)**
+ *
+ * `seal()` hashes the **pre-rewrite, post-filter** DeFi instructions:
+ *
+ *   1. ComputeBudget program ixs are NOT in the input (wallet adapters
+ *      may prepend their own; the user-approved intent shouldn't pin
+ *      a specific budget). `seal()` filters these out via
+ *      `params.instructions.filter(ix => ix.programAddress !== COMPUTE_BUDGET_PROGRAM)`
+ *      before computing the digest.
+ *   2. Top-level System program ixs are NOT in the input (`isProtocolAllowed`
+ *      would reject them anyway; `seal()` strips them in the same filter).
+ *   3. Agent-ATA → vault-ATA rewrites happen AFTER the digest is
+ *      computed. The digest reflects what the USER APPROVED (agent
+ *      ATAs), not what the SDK SUBMITTED (vault ATAs). Any future
+ *      on-chain verifier MUST receive the pre-rewrite projection as
+ *      an explicit argument; re-deriving from the submitted tx bytes
+ *      is impossible.
+ *   4. `outputStablecoinAccount` and `additionalAtaReplacements` from
+ *      `SealParams` are NOT bound by the digest in 0.16.x — they are
+ *      caller-supplied overrides that materially change downstream
+ *      ATA flow. Phase 9 Batch M §RP flagged this as a HIGH gap. A
+ *      preview UI that wants tight intent binding MUST refuse any
+ *      `SealParams` carrying these overrides until 0.16.1 hashes them
+ *      into the canonical encoding.
+ *
+ * Any re-implementation that wants to verify a digest produced by
+ * `seal()` MUST apply the same filter + use the pre-rewrite ix list.
+ */
+import { base58Decode32, sha256, writeU32Le, writeU64Le, writeU8, } from "../canonical-encode.js";
+import { SigilSdkDomainError } from "../errors/sdk.js";
+import { SIGIL_ERROR__SDK__INVALID_AMOUNT, SIGIL_ERROR__SDK__INVALID_NETWORK, SIGIL_ERROR__SDK__INVALID_PARAMS, } from "../errors/codes.js";
+/**
+ * Network discriminant used at canonical position 2. Devnet and mainnet
+ * are the two values bound by the digest; testnet and localnet are
+ * coerced to devnet for digest purposes (the cap/allowlist contract is
+ * the same on all non-mainnet networks).
+ *
+ * @internal The numeric discriminants are an encoding detail of the
+ * canonical digest layout. Callers should pass `network: "devnet" |
+ * "mainnet"` to {@link computeSealInputDigest} and let the encoder map
+ * to the wire value. Consumers wanting a CAIP-2 string for cross-system
+ * binding should use `CAIP2_SOLANA_*` from `../caip2-network.js`.
+ */
+export const NETWORK_ID_DEVNET = 0;
+/** @internal See {@link NETWORK_ID_DEVNET}. */
+export const NETWORK_ID_MAINNET = 1;
+/** Canonical default for an omitted `targetProtocol` — the system program ID. */
+const SYSTEM_PROGRAM_ZEROS = new Uint8Array(32);
+/**
+ * Magic prefix prepended to the canonical encoding (D-6 close, Bucket 2
+ * 2026-05-21). Protects against cross-format digest collisions if Sigil ever
+ * introduces a different SHA-256-based digest with the same field shape.
+ * Mirror of `INTENT_DIGEST_MAGIC` in `programs/sigil/src/utils/intent_digest.rs:33`.
+ */
+const INTENT_DIGEST_MAGIC = new Uint8Array([0x53, 0x49, 0x47, 0x31]); // "SIG1"
+/**
+ * Intent format version. Bucket 2 bumped from v1 → v2 to discriminate the
+ * magic-prefix addition and the on-chain scalar verifier ABI. v1 was the
+ * prior client-only digest without prefix; any old v1 fixture is now
+ * unverifiable on-chain by construction.
+ */
+const INTENT_VERSION_V2 = 2;
+/**
+ * Compute the canonical AL3 intent digest over a `SealIntentInput`.
+ *
+ * @returns 32-byte SHA-256 digest. Stable across Node, Bun, and the
+ * browser (Phase 9 Batch L hex fixtures lock this down).
+ *
+ * @throws if any pubkey doesn't base58-decode to exactly 32 bytes, if
+ *   `amount` is negative, or if `network` isn't `"devnet"` or `"mainnet"`.
+ */
+export function computeSealInputDigest(input) {
+    if (input.amount < 0n) {
+        throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_AMOUNT, `computeSealInputDigest: amount must be non-negative, got ${input.amount}`, {
+            context: {
+                operation: "computeSealInputDigest",
+                field: "amount",
+                received: input.amount.toString(),
+            },
+        });
+    }
+    const networkId = input.network === "mainnet"
+        ? NETWORK_ID_MAINNET
+        : input.network === "devnet"
+            ? NETWORK_ID_DEVNET
+            : -1;
+    if (networkId < 0) {
+        throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_NETWORK, `computeSealInputDigest: network must be 'devnet' or 'mainnet', got ${String(input.network)}`, {
+            context: {
+                operation: "computeSealInputDigest",
+                received: String(input.network),
+            },
+        });
+    }
+    // Decode all pubkeys up front so any malformed input fails before we
+    // start the hash walk (clear error messages > corrupt digests).
+    const vaultBytes = base58Decode32(input.vault);
+    const agentBytes = base58Decode32(input.agent);
+    const tokenMintBytes = base58Decode32(input.tokenMint);
+    const targetProtocolBytes = input.targetProtocol === undefined
+        ? SYSTEM_PROGRAM_ZEROS
+        : base58Decode32(input.targetProtocol);
+    const decodedIxs = input.instructions.map((ix, idx) => {
+        if (!ix.programAddress) {
+            throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_PARAMS, `computeSealInputDigest: ix[${idx}].programAddress is required`, {
+                context: {
+                    operation: "computeSealInputDigest",
+                    field: `ix[${idx}].programAddress`,
+                    ixIndex: idx,
+                },
+            });
+        }
+        const programAddress = base58Decode32(ix.programAddress);
+        const accounts = (ix.accounts ?? []).map((acc, accIdx) => {
+            if (!acc.address) {
+                throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_PARAMS, `computeSealInputDigest: ix[${idx}].accounts[${accIdx}].address is required`, {
+                    context: {
+                        operation: "computeSealInputDigest",
+                        field: `ix[${idx}].accounts[${accIdx}].address`,
+                        ixIndex: idx,
+                        accountIndex: accIdx,
+                    },
+                });
+            }
+            const role = acc.role;
+            if (role === undefined || role === null) {
+                throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_PARAMS, `computeSealInputDigest: ix[${idx}].accounts[${accIdx}].role is required`, {
+                    context: {
+                        operation: "computeSealInputDigest",
+                        field: `ix[${idx}].accounts[${accIdx}].role`,
+                        ixIndex: idx,
+                        accountIndex: accIdx,
+                    },
+                });
+            }
+            // §RP Batch I L-1: AccountRole enum values are 0..3 (READONLY,
+            // WRITABLE, READONLY_SIGNER, WRITABLE_SIGNER). Reject anything
+            // outside that range — a caller bypassing the enum to pass
+            // role=257 would silently truncate to 1 in the digest while the
+            // submitted tx encodes role=1 too (no exec divergence), but the
+            // digest then masks bit-pattern information that a future
+            // verifier might rely on.
+            if (typeof role !== "number" || role < 0 || role > 3) {
+                throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_PARAMS, `computeSealInputDigest: ix[${idx}].accounts[${accIdx}].role must be an AccountRole (0..3), got ${String(role)}`, {
+                    context: {
+                        operation: "computeSealInputDigest",
+                        field: `ix[${idx}].accounts[${accIdx}].role`,
+                        ixIndex: idx,
+                        accountIndex: accIdx,
+                        received: String(role),
+                    },
+                });
+            }
+            return {
+                address: base58Decode32(acc.address),
+                role,
+            };
+        });
+        const data = ix.data ? new Uint8Array(ix.data) : new Uint8Array(0);
+        return { programAddress, accounts, data };
+    });
+    // Compute exact buffer size:
+    //   4 (magic "SIG1") + 1 (intent_version) + 1 (network_id) + 32 (vault) +
+    //   32 (agent) + 32 (token_mint) + 8 (amount) + 32 (target_protocol) +
+    //   4 (ix count) + sum over ixs of [32 (programAddress) + 4 (accounts
+    //   count) + sum (33 per account) + 4 (data length) + data.length]
+    //
+    // D-6 close (Bucket 2 2026-05-21): the leading `INTENT_DIGEST_MAGIC`
+    // bytes ("SIG1") bring fixed header to 146 (was 142). v2 encoder.
+    const FIXED = 4 + 1 + 1 + 32 + 32 + 32 + 8 + 32 + 4;
+    let ixsBytes = 0;
+    for (const ix of decodedIxs) {
+        ixsBytes += 32 + 4 + ix.accounts.length * 33 + 4 + ix.data.length;
+    }
+    const buf = new Uint8Array(FIXED + ixsBytes);
+    const view = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);
+    let off = 0;
+    buf.set(INTENT_DIGEST_MAGIC, off);
+    off += 4;
+    off = writeU8(view, off, INTENT_VERSION_V2);
+    off = writeU8(view, off, networkId);
+    buf.set(vaultBytes, off);
+    off += 32;
+    buf.set(agentBytes, off);
+    off += 32;
+    buf.set(tokenMintBytes, off);
+    off += 32;
+    off = writeU64Le(view, off, input.amount);
+    buf.set(targetProtocolBytes, off);
+    off += 32;
+    off = writeU32Le(view, off, decodedIxs.length);
+    for (const ix of decodedIxs) {
+        buf.set(ix.programAddress, off);
+        off += 32;
+        off = writeU32Le(view, off, ix.accounts.length);
+        for (const acc of ix.accounts) {
+            buf.set(acc.address, off);
+            off += 32;
+            off = writeU8(view, off, acc.role);
+        }
+        off = writeU32Le(view, off, ix.data.length);
+        buf.set(ix.data, off);
+        off += ix.data.length;
+    }
+    if (off !== buf.length) {
+        throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_PARAMS, `computeSealInputDigest: encoded ${off} bytes, expected ${buf.length}. ` +
+            `If you added a field to SealIntentInput, update the FIXED/ixsBytes ` +
+            `sizing AND the encoder body in the SAME commit.`, {
+            context: {
+                operation: "computeSealInputDigest",
+                field: "encoder_size_invariant",
+                encoded: off,
+                expected: buf.length,
+            },
+        });
+    }
+    return sha256(buf);
+}
+/**
+ * Compute the canonical scalar AL3 intent digest (D-1 + D-6 close, Bucket
+ * 2 2026-05-21).
+ *
+ * SHA-256 over: `b"SIG1" || u8(2) || u8(network_id) || vault || agent ||
+ * token_mint || u64_le(amount) || target_protocol`. Total 142 bytes.
+ *
+ * The on-chain verifier at `programs/sigil/src/utils/intent_digest.rs`
+ * recomputes this same digest from `validate_and_authorize`'s typed
+ * arguments and rejects bundle execution on byte-equal mismatch
+ * (`ErrIntentDigestMismatch` code 6102). Network discriminant is derived
+ * on-chain from the program's build feature; the caller does NOT pin it
+ * — the encoder here just writes the byte the caller's wallet computed,
+ * and Rust verifies the byte matches its own network. Wrong-network
+ * digests fail by construction.
+ *
+ * @returns 32-byte SHA-256 digest, byte-equal to the Rust verifier output.
+ *
+ * @throws if any pubkey doesn't base58-decode to 32 bytes, if `amount`
+ *   is negative, or if `network` isn't `"devnet"` or `"mainnet"`.
+ */
+export function computeScalarIntentDigest(input) {
+    if (input.amount < 0n) {
+        throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_AMOUNT, `computeScalarIntentDigest: amount must be non-negative, got ${input.amount}`, {
+            context: {
+                operation: "computeScalarIntentDigest",
+                field: "amount",
+                received: input.amount.toString(),
+            },
+        });
+    }
+    const networkId = input.network === "mainnet"
+        ? NETWORK_ID_MAINNET
+        : input.network === "devnet"
+            ? NETWORK_ID_DEVNET
+            : -1;
+    if (networkId < 0) {
+        throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_NETWORK, `computeScalarIntentDigest: network must be 'devnet' or 'mainnet', got ${String(input.network)}`, {
+            context: {
+                operation: "computeScalarIntentDigest",
+                received: String(input.network),
+            },
+        });
+    }
+    const vaultBytes = base58Decode32(input.vault);
+    const agentBytes = base58Decode32(input.agent);
+    const tokenMintBytes = base58Decode32(input.tokenMint);
+    const targetProtocolBytes = input.targetProtocol === undefined
+        ? SYSTEM_PROGRAM_ZEROS
+        : base58Decode32(input.targetProtocol);
+    // 4 magic + 1 version + 1 network_id + 32 + 32 + 32 + 8 + 32 = 142 bytes.
+    const buf = new Uint8Array(142);
+    const view = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);
+    let off = 0;
+    buf.set(INTENT_DIGEST_MAGIC, off);
+    off += 4;
+    off = writeU8(view, off, INTENT_VERSION_V2);
+    off = writeU8(view, off, networkId);
+    buf.set(vaultBytes, off);
+    off += 32;
+    buf.set(agentBytes, off);
+    off += 32;
+    buf.set(tokenMintBytes, off);
+    off += 32;
+    off = writeU64Le(view, off, input.amount);
+    buf.set(targetProtocolBytes, off);
+    off += 32;
+    if (off !== 142) {
+        throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_PARAMS, `computeScalarIntentDigest: encoded ${off} bytes, expected 142.`, {
+            context: {
+                operation: "computeScalarIntentDigest",
+                field: "encoder_size_invariant",
+                encoded: off,
+                expected: 142,
+            },
+        });
+    }
+    return sha256(buf);
+}
+//# sourceMappingURL=intent-digest.js.map

package/dist/seal/intent-digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-digest.js","sourceRoot":"","sources":["../../src/seal/intent-digest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqGG;AAGH,OAAO,EACL,cAAc,EACd,MAAM,EACN,UAAU,EACV,UAAU,EACV,OAAO,GACR,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,gCAAgC,EAChC,iCAAiC,EACjC,gCAAgC,GACjC,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAU,CAAC;AAC5C,+CAA+C;AAC/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAU,CAAC;AA+B7C,iFAAiF;AACjF,MAAM,oBAAoB,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;AAE/E;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,4DAA4D,KAAK,CAAC,MAAM,EAAE,EAC1E;YACE,OAAO,EAAE;gBACP,SAAS,EAAE,wBAAwB;gBACnC,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;aACzB;SACX,CACF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GACb,KAAK,CAAC,OAAO,KAAK,SAAS;QACzB,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;YAC1B,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,CAAC,CAAC,CAAC;IACX,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,mBAAmB,CAC3B,iCAAiC,EACjC,sEAAsE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAC7F;YACE,OAAO,EAAE;gBACP,SAAS,EAAE,wBAAwB;gBACnC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;aACvB;SACX,CACF,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,gEAAgE;IAChE,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,SAAmB,CAAC,CAAC;IACjE,MAAM,mBAAmB,GACvB,KAAK,CAAC,cAAc,KAAK,SAAS;QAChC,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,cAAwB,CAAC,CAAC;IAUrD,MAAM,UAAU,GAAgB,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE;QACjE,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,8BAA8B,GAAG,8BAA8B,EAC/D;gBACE,OAAO,EAAE;oBACP,SAAS,EAAE,wBAAwB;oBACnC,KAAK,EAAE,MAAM,GAAG,kBAAkB;oBAClC,OAAO,EAAE,GAAG;iBACJ;aACX,CACF,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,cAAc,CAAC,EAAE,CAAC,cAAwB,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YACvD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,8BAA8B,GAAG,cAAc,MAAM,uBAAuB,EAC5E;oBACE,OAAO,EAAE;wBACP,SAAS,EAAE,wBAAwB;wBACnC,KAAK,EAAE,MAAM,GAAG,cAAc,MAAM,WAAW;wBAC/C,OAAO,EAAE,GAAG;wBACZ,YAAY,EAAE,MAAM;qBACZ;iBACX,CACF,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACtB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACxC,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,8BAA8B,GAAG,cAAc,MAAM,oBAAoB,EACzE;oBACE,OAAO,EAAE;wBACP,SAAS,EAAE,wBAAwB;wBACnC,KAAK,EAAE,MAAM,GAAG,cAAc,MAAM,QAAQ;wBAC5C,OAAO,EAAE,GAAG;wBACZ,YAAY,EAAE,MAAM;qBACZ;iBACX,CACF,CAAC;YACJ,CAAC;YACD,+DAA+D;YAC/D,+DAA+D;YAC/D,2DAA2D;YAC3D,gEAAgE;YAChE,gEAAgE;YAChE,0DAA0D;YAC1D,0BAA0B;YAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,8BAA8B,GAAG,cAAc,MAAM,6CAA6C,MAAM,CAAC,IAAI,CAAC,EAAE,EAChH;oBACE,OAAO,EAAE;wBACP,SAAS,EAAE,wBAAwB;wBACnC,KAAK,EAAE,MAAM,GAAG,cAAc,MAAM,QAAQ;wBAC5C,OAAO,EAAE,GAAG;wBACZ,YAAY,EAAE,MAAM;wBACpB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC;qBACd;iBACX,CACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,OAAiB,CAAC;gBAC9C,IAAI;aACL,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,0EAA0E;IAC1E,uEAAuE;IACvE,sEAAsE;IACtE,mEAAmE;IACnE,EAAE;IACF,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,QAAQ,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAEtE,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAClC,GAAG,IAAI,CAAC,CAAC;IACT,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC5C,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACpC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACzB,GAAG,IAAI,EAAE,CAAC;IACV,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACzB,GAAG,IAAI,EAAE,CAAC;IACV,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAC7B,GAAG,IAAI,EAAE,CAAC;IACV,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAClC,GAAG,IAAI,EAAE,CAAC;IACV,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAChC,GAAG,IAAI,EAAE,CAAC;QACV,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC1B,GAAG,IAAI,EAAE,CAAC;YACV,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtB,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,IAAI,GAAG,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,mCAAmC,GAAG,oBAAoB,GAAG,CAAC,MAAM,IAAI;YACtE,qEAAqE;YACrE,iDAAiD,EACnD;YACE,OAAO,EAAE;gBACP,SAAS,EAAE,wBAAwB;gBACnC,KAAK,EAAE,wBAAwB;gBAC/B,OAAO,EAAE,GAAG;gBACZ,QAAQ,EAAE,GAAG,CAAC,MAAM;aACZ;SACX,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAsBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAwB;IAExB,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,+DAA+D,KAAK,CAAC,MAAM,EAAE,EAC7E;YACE,OAAO,EAAE;gBACP,SAAS,EAAE,2BAA2B;gBACtC,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;aACzB;SACX,CACF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GACb,KAAK,CAAC,OAAO,KAAK,SAAS;QACzB,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;YAC1B,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,CAAC,CAAC,CAAC;IACX,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,mBAAmB,CAC3B,iCAAiC,EACjC,yEAAyE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAChG;YACE,OAAO,EAAE;gBACP,SAAS,EAAE,2BAA2B;gBACtC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;aACvB;SACX,CACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,SAAmB,CAAC,CAAC;IACjE,MAAM,mBAAmB,GACvB,KAAK,CAAC,cAAc,KAAK,SAAS;QAChC,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,cAAwB,CAAC,CAAC;IAErD,0EAA0E;IAC1E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAEtE,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAClC,GAAG,IAAI,CAAC,CAAC;IACT,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC5C,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACpC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACzB,GAAG,IAAI,EAAE,CAAC;IACV,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACzB,GAAG,IAAI,EAAE,CAAC;IACV,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAC7B,GAAG,IAAI,EAAE,CAAC;IACV,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAClC,GAAG,IAAI,EAAE,CAAC;IAEV,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,sCAAsC,GAAG,uBAAuB,EAChE;YACE,OAAO,EAAE;gBACP,SAAS,EAAE,2BAA2B;gBACtC,KAAK,EAAE,wBAAwB;gBAC/B,OAAO,EAAE,GAAG;gBACZ,QAAQ,EAAE,GAAG;aACL;SACX,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC"}

package/dist/seal.d.ts

@@ -14,8 +14,9 @@
  * - Vault funded with tokens and ATAs created
  */
 import type { Address, AddressesByLookupTableAddress, Instruction, Rpc, SolanaRpcApi, TransactionSigner } from "./kit-adapter.js";
-import { compileTransaction } from "./kit-adapter.js";
+import { compileTransaction, AccountRole, fetchEncodedAccounts } from "./kit-adapter.js";
 import { type SigilPolicyPlugin } from "./plugin.js";
+import { type SigilCaip2Chain } from "./caip2-network.js";
 import { type ResolvedVaultState, type ResolvedVaultStateForOwner, type ResolvedBudget } from "./state-resolver.js";
 import { type Blockhash, type SendAndConfirmOptions } from "./rpc-helpers.js";
 import { type AgentError } from "./agent-errors.js";
@@ -108,11 +109,33 @@ export interface SealParams {
      */
     plugins?: readonly SigilPolicyPlugin[];
 }
+/**
+ * Result of building (but NOT sending) a Sigil-sealed transaction.
+ *
+ * `SealResult` is a BUILD-time artifact — it carries the compiled transaction
+ * and pre-flight diagnostics. It does NOT include emitted events: events come
+ * from on-chain `emit!()` calls during execution, parseable from the resulting
+ * transaction's log messages.
+ *
+ * To consume events, call `executeAndConfirm()` (returns `ExecuteResult` with
+ * the signature) and then fetch + parse the transaction logs using the
+ * discriminator map in `generated/event-discriminators.ts` (which covers all
+ * Phase 3-8 events including AutoRevoked, SandwichIntegrityViolation,
+ * ProtectedWritableRejected, StableFloorViolation, RecipientCapExceeded,
+ * MintDeltaCapExceeded, AtaAuthorityChanged, OutputBelowFloor,
+ * DeclarationInconsistent, OwnershipTransferInitiated/Accepted/Cancelled,
+ * and FreezeVaultEvent with `freeze_reason`).
+ *
+ * `intentDigest` is the AL3 per-call SealInput digest — SHA-256 over the
+ * canonical encoding of (vault, agent, mint, amount, target_protocol,
+ * network, instructions[]). See `sdk/kit/src/seal/intent-digest.ts` for the
+ * canonical-encoding spec. Callers that want intent-binding (Phase 9 Batch I)
+ * can surface this digest in their preview UI and re-verify it at
+ * execute-time via `computeSealInputDigest(...)`.
+ */
 export interface SealResult {
     ok: true;
     transaction: ReturnType<typeof compileTransaction>;
-    /** Whether this action is spending (amount > 0). */
-    isSpending: boolean;
     warnings: string[];
     txSizeBytes: number;
     /** Block height after which the blockhash expires. Sign and send before this. */
@@ -124,9 +147,97 @@ export interface SealResult {
         tokenBalance: bigint;
         knownRecipients: Set<string>;
     };
+    /**
+     * AL3 per-call intent digest (Phase 9 Batch I). 32-byte SHA-256 over the
+     * canonical SealInput encoding. Surfaces the exact intent the SDK sealed,
+     * so consumers (preview UIs, executeSeal re-verification) can bind owner
+     * approval to this specific bundle.
+     */
+    intentDigest: Uint8Array;
+    /**
+     * AL4 network identity (Phase 9 Batch J). CAIP-2 chain id of the network
+     * the bundle targets. Carries enough information to differentiate
+     * mainnet from devnet (and, in future, testnet / localnet) for UI
+     * confirmation prompts. The chain id is bound into AL3's `intentDigest`
+     * via `network_id` at canonical position 2 (intent-digest.ts), so a
+     * bundle approved on devnet cannot be replayed on mainnet without
+     * detection.
+     */
+    network: SigilCaip2Chain;
+    /**
+     * AL4 isMainnet boolean (Phase 9 Batch J). `true` only when `network`
+     * matches the canonical mainnet-beta CAIP-2 chain id. Wire to UI
+     * confirmation chrome (mainnet warning banner, etc).
+     */
+    isMainnet: boolean;
 }
+/** One decoded account as returned by `fetchEncodedAccounts`. */
+type FetchedAccount = Awaited<ReturnType<typeof fetchEncodedAccounts>>[number];
+/** A readonly account meta appended to an instruction's remaining_accounts. */
+type ReadonlyMeta = {
+    address: Address;
+    role: AccountRole;
+};
 /** Replace agent ATAs with vault ATAs in DeFi instruction account lists. */
 export declare function replaceAgentAtas(instructions: Instruction[], replacements: Map<Address, Address>): Instruction[];
+/**
+ * F-Q4 satisfier helper — resolve the mints of VAULT-OWNED Token-2022 token
+ * accounts among the sandwiched DeFi instruction's writable accounts.
+ *
+ * The on-chain F-Q4 gate (`validate_and_authorize` → `destination_check`) vets
+ * the mint EXTENSIONS of any vault-owned Token-2022 token account a swap
+ * delivers into the vault — a PermanentDelegate / TransferHook /
+ * ConfidentialTransfer mint could let a third party drain or hide the holding
+ * out-of-band. To do so it reads the token account's mint (bytes[0..32]) and
+ * REQUIRES that mint resolvable in validate's `remaining_accounts`, else it
+ * reverts `ErrToken2022OutputMintUnresolvable` (6106). The F-Q1a writable set
+ * does NOT carry the mint (a mint is read-only in a swap), so this resolves it.
+ *
+ * Mirrors the on-chain demand EXACTLY (destination_check.rs:166-219): an account
+ * triggers the gate iff it is owned by the Token-2022 program, has >= 72 bytes,
+ * and its token-account authority (bytes[32..64]) is the vault. For each such
+ * account this returns its mint (bytes[0..32]) as a READONLY meta.
+ *
+ * It is PLUMBING, not enforcement: it only adds read-only classification
+ * accounts; the on-chain gate stays the sole enforcer. A mint missed here can
+ * only cause a fail-closed 6106 revert (never a drain); a mint added that the
+ * gate does not demand is harmless (the gate looks it up by pubkey on demand).
+ *
+ * @param fetched     results of `fetchEncodedAccounts` over the candidate
+ *                    writable accounts (each carries its own on-chain bytes).
+ * @param vault       the vault PDA — only token accounts it authorizes are vetted.
+ * @param alreadySeen pubkeys already appended to remaining_accounts (the F-Q1a
+ *                    writable set) — skip re-adding them.
+ * @returns deduped READONLY metas, one per distinct vault-owned T22 output mint.
+ */
+export declare function resolveT22OutputMintMetas(fetched: ReadonlyArray<FetchedAccount>, vault: Address, alreadySeen: ReadonlySet<Address>): ReadonlyMeta[];
+/**
+ * M3-01 satisfier helper (derivation half) — the vault's canonical USDC + USDT
+ * associated token accounts that finalize's `stable_balance_floor` must see.
+ *
+ * The on-chain floor (finalize_session) sums the vault's combined USDC+USDT
+ * balance and counts ONLY each stablecoin's CANONICAL ATA (M3-01 pin). Sources
+ * 1+2 (the named vaultTokenAccount + outputStablecoinAccount) cover the session
+ * token and — sometimes — USDC, so a vault that holds reserve in the OTHER
+ * stablecoin would under-count and falsely revert. This derives both canonical
+ * stablecoin ATAs and drops any already present on finalize (a named account or
+ * the F-Q1a writable set); the remainder are fed to finalize's
+ * remaining_accounts (on-chain "Source 3").
+ *
+ * Pure derivation (no RPC) — existence is checked separately — so it is
+ * trivially testable. `deriveAta` is legacy-SPL (correct for the current
+ * USDC/USDT mints; a Token-2022 stablecoin would need a T22-aware derivation,
+ * matching the on-chain SCOPE note in finalize_session.rs).
+ */
+export declare function deriveStablecoinFloorCandidates(vault: Address, usdcMint: Address, usdtMint: Address, alreadyPresent: ReadonlySet<Address>): Promise<Address[]>;
+/**
+ * M3-01 satisfier helper (existence half) — given the fetched candidate
+ * accounts (parallel to `candidates`), return the EXISTING ones as READONLY
+ * metas for finalize's remaining_accounts. A non-existent ATA is harmless
+ * on-chain (the floor skips any non-token-program account), but we omit it to
+ * save wire bytes. Mirrors the F-Q4 `resolveT22OutputMintMetas` existence gate.
+ */
+export declare function resolveStablecoinFloorMetas(fetched: ReadonlyArray<FetchedAccount>, candidates: ReadonlyArray<Address>): ReadonlyMeta[];
 /**
  * Seal arbitrary DeFi instructions with Sigil security.
  *
@@ -197,6 +308,26 @@ export interface SigilClientConfig {
      * throws `SigilSdkDomainError(SIGIL_ERROR__SDK__PLUGIN_REJECTED)`.
      */
     plugins?: readonly import("./plugin.js").SigilPolicyPlugin[];
+    /**
+     * AL2 mainnet confirmation gate (Phase 9 Batch K). Per Council
+     * D-3 this defaults to **`false`** in 0.16.x for back-compat;
+     * the default flips to `true` in v1.0.
+     *
+     * When `true` AND `network === "mainnet"`, every `executeAndConfirm`
+     * call requires the per-call opts to carry `mainnetConfirmed: true`
+     * or it throws `SIGIL_ERROR__SDK__MAINNET_CONFIRMATION_REQUIRED`
+     * with full context (vault, network, docs URL, opt-in snippet).
+     * Narrow on the string code; there is no numeric alias.
+     *
+     * When unset on a mainnet client, the SDK emits `console.warn` on
+     * every mainnet `executeAndConfirm` to telegraph the v1.0 flip.
+     * Set explicitly to `false` to silence the warning during your
+     * migration window.
+     *
+     * Devnet clients ignore this flag entirely — the gate never fires
+     * off-mainnet.
+     */
+    requireMainnetConfirmation?: boolean;
 }
 /**
  * Options for `client.seal()`.
@@ -227,7 +358,31 @@ export interface ClientSealOpts {
      * Defaults to a fresh `newCorrelationId()` if omitted.
      */
     correlationId?: string;
+    /**
+     * AL2 explicit mainnet confirmation (Phase 9 Batch K). Pair with
+     * `SigilClientConfig.requireMainnetConfirmation: true` to opt into
+     * the mainnet gate. When `true`, `executeAndConfirm` on a mainnet
+     * client proceeds; when `false` or undefined (with the gate enabled),
+     * throws `SIGIL_ERROR__SDK__MAINNET_CONFIRMATION_REQUIRED` (legacy
+     * numeric code 7020).
+     *
+     * Devnet clients ignore this flag entirely. Mainnet clients with the
+     * gate DISABLED (default in 0.16.x) only `console.warn` if this is
+     * undefined — they do not throw. Narrow rejections on the string
+     * code `SIGIL_ERROR__SDK__MAINNET_CONFIRMATION_REQUIRED`.
+     */
+    mainnetConfirmed?: boolean;
 }
+/**
+ * Result of `executeAndConfirm()` — a Sigil-sealed transaction that has been
+ * signed, sent, and confirmed on-chain.
+ *
+ * To consume on-chain events emitted by the sealed transaction (e.g.
+ * `OwnershipTransferAccepted`, `FreezeVaultEvent`, `SandwichIntegrityViolation`),
+ * fetch the transaction with `rpc.getTransaction(signature)` and parse the log
+ * messages against `generated/event-discriminators.ts`. Phase 7 + Phase 8 added
+ * 12 new event types; all are present in the discriminator map.
+ */
 export interface ExecuteResult {
     signature: string;
     sealResult: SealResult;
@@ -316,6 +471,13 @@ export declare class SigilClient {
     private readonly blockhashCacheInstance;
     private readonly altCacheInstance;
     private readonly onErrorCallback?;
+    /**
+     * AL2 mainnet confirmation flag, snapshotted at construction (Phase 9
+     * Batch K §RP HIGH-2 fix). Captured by value so subsequent
+     * `config.requireMainnetConfirmation = ...` mutations cannot silently
+     * disable the gate post-construction.
+     */
+    private readonly requireMainnetConfirmation?;
     readonly rpc: Rpc<SolanaRpcApi>;
     readonly vault: Address;
     readonly agent: TransactionSigner;
@@ -386,4 +548,5 @@ export declare class SigilClient {
     getTokenBalances(): Promise<TokenBalance[]>;
     static createVault(opts: CreateVaultOptions): Promise<CreateVaultResult>;
 }
+export {};
 //# sourceMappingURL=seal.d.ts.map

package/dist/seal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"seal.d.ts","sourceRoot":"","sources":["../src/seal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EACV,OAAO,EACP,6BAA6B,EAC7B,WAAW,EACX,GAAG,EACH,YAAY,EACZ,iBAAiB,EAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAe,MAAM,kBAAkB,CAAC;AAQnE,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,aAAa,CAAC;AAMrB,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAE/B,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAKL,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC3B,MAAM,kBAAkB,CAAC;AAmB1B,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEvE,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,mBAAmB,CAAC;AAwC3B,MAAM,WAAW,UAAU;IACzB,kCAAkC;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,mEAAmE;IACnE,KAAK,EAAE,iBAAiB,CAAC;IACzB,mGAAmG;IACnG,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,8DAA8D;IAC9D,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACvB,yGAAyG;IACzG,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC9B;;;;;;;;OAQG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;OAYG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,sFAAsF;IACtF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sGAAsG;IACtG,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,uEAAuE;IACvE,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC;IACjC,+EAA+E;IAC/E,mBAAmB,CAAC,EAAE,6BAA6B,CAAC;IACpD,qFAAqF;IACrF,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,yBAAyB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,YAAY,EAAE,SAAS,CAAC;IACvC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;IACnD,oDAAoD;IACpD,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gFAAgF;IAChF,YAAY,CAAC,EAAE;QACb,YAAY,EAAE,OAAO,CAAC;QACtB,aAAa,EAAE,OAAO,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;KAC9B,CAAC;CACH;AAID,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,WAAW,EAAE,EAC3B,YAAY,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,GAClC,WAAW,EAAE,CAmBf;AAYD;;;;;;;;;;;;GAYG;AACH,wBAAsB,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CA0lBlE;AAID,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,iBAAiB,CAAC;IACzB,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iHAAiH;IACjH,OAAO,CAAC,EAAE,CACR,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAC5D,IAAI,CAAC;IACV;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,OAAO,aAAa,EAAE,WAAW,CAAC;IAC3C;;;;;;;;;;;;;;;;OAgBG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,YAAY,EAAE,SAAS,CAAC;IACvC;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,OAAO,aAAa,EAAE,iBAAiB,EAAE,CAAC;CAC9D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC;IACjC,mBAAmB,CAAC,EAAE,6BAA6B,CAAC;IACpD,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yBAAyB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,YAAY,EAAE,SAAS,CAAC;IACvC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;CACxB;AAID;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,4CAA4C;IAC5C,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,qBAAqB;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,oBAAoB;IACpB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,eAAe;IACf,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAEvC,yEAAyE;IACzE,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE7E,gDAAgD;IAChD,iBAAiB,CACf,YAAY,EAAE,WAAW,EAAE,EAC3B,IAAI,EAAE,cAAc,GAAG;QAAE,cAAc,CAAC,EAAE,qBAAqB,CAAA;KAAE,GAChE,OAAO,CAAC,aAAa,CAAC,CAAC;IAE1B,yCAAyC;IACzC,gBAAgB,IAAI,IAAI,CAAC;IAEzB,gCAAgC;IAChC,aAAa,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAErD,8CAA8C;IAC9C,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAE1C,qBAAqB;IACrB,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE5B,gCAAgC;IAChC,gBAAgB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;CAC7C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,cAAc,CA0M3E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,cAAc,CAAC,CAgBzB;AAWD,iEAAiE;AACjE,eAAO,MAAM,0BAA0B,iDACS,CAAC;AAEjD,uEAAuE;AACvE,eAAO,MAAM,2BAA2B,iDACQ,CAAC;AAiBjD,gDAAgD;AAChD,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AA8HD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAiB;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAA+B;IAChE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAEvC;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO;IA0DP;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,MAAM,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAyBpE;;;;;;OAMG;IACG,IAAI,CACR,YAAY,EAAE,WAAW,EAAE,EAC3B,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,UAAU,CAAC;IA0DtB;;;;;OAKG;IACG,iBAAiB,CACrB,YAAY,EAAE,WAAW,EAAE,EAC3B,IAAI,EAAE,cAAc,GAAG;QAAE,cAAc,CAAC,EAAE,qBAAqB,CAAA;KAAE,GAChE,OAAO,CAAC,aAAa,CAAC;IAqBzB,gBAAgB,IAAI,IAAI;IAOxB,OAAO,KAAK,WAAW,GAEtB;IAEK,aAAa,IAAI,OAAO,CAAC,0BAA0B,CAAC;IASpD,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC;IAIzC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC;IAI3B,gBAAgB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;WAIpC,WAAW,CACtB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC;CAG9B"}
+{"version":3,"file":"seal.d.ts","sourceRoot":"","sources":["../src/seal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EACV,OAAO,EACP,6BAA6B,EAC7B,WAAW,EACX,GAAG,EACH,YAAY,EACZ,iBAAiB,EAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACrB,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,aAAa,CAAC;AASrB,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAKL,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAE/B,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAKL,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC3B,MAAM,kBAAkB,CAAC;AAmB1B,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEvE,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,mBAAmB,CAAC;AAyC3B,MAAM,WAAW,UAAU;IACzB,kCAAkC;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,mEAAmE;IACnE,KAAK,EAAE,iBAAiB,CAAC;IACzB,mGAAmG;IACnG,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,8DAA8D;IAC9D,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACvB,yGAAyG;IACzG,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC9B;;;;;;;;OAQG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;OAYG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,sFAAsF;IACtF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sGAAsG;IACtG,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,uEAAuE;IACvE,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC;IACjC,+EAA+E;IAC/E,mBAAmB,CAAC,EAAE,6BAA6B,CAAC;IACpD,qFAAqF;IACrF,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,yBAAyB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,YAAY,EAAE,SAAS,CAAC;IACvC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;IACnD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gFAAgF;IAChF,YAAY,CAAC,EAAE;QACb,YAAY,EAAE,OAAO,CAAC;QACtB,aAAa,EAAE,OAAO,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;KAC9B,CAAC;IACF;;;;;OAKG;IACH,YAAY,EAAE,UAAU,CAAC;IACzB;;;;;;;;OAQG;IACH,OAAO,EAAE,eAAe,CAAC;IACzB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAID,iEAAiE;AACjE,KAAK,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,+EAA+E;AAC/E,KAAK,YAAY,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAE5D,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,WAAW,EAAE,EAC3B,YAAY,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,GAClC,WAAW,EAAE,CAmBf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,EACtC,KAAK,EAAE,OAAO,EACd,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,GAChC,YAAY,EAAE,CAuBhB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,GACnC,OAAO,CAAC,OAAO,EAAE,CAAC,CAMpB;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,EACtC,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,GACjC,YAAY,EAAE,CAQhB;AAYD;;;;;;;;;;;;GAYG;AACH,wBAAsB,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAy1BlE;AAID,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,iBAAiB,CAAC;IACzB,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iHAAiH;IACjH,OAAO,CAAC,EAAE,CACR,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAC5D,IAAI,CAAC;IACV;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,OAAO,aAAa,EAAE,WAAW,CAAC;IAC3C;;;;;;;;;;;;;;;;OAgBG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,YAAY,EAAE,SAAS,CAAC;IACvC;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,OAAO,aAAa,EAAE,iBAAiB,EAAE,CAAC;IAC7D;;;;;;;;;;;;;;;;;;OAkBG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC;IACjC,mBAAmB,CAAC,EAAE,6BAA6B,CAAC;IACpD,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yBAAyB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,YAAY,EAAE,SAAS,CAAC;IACvC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;OAYG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;CACxB;AAID;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,4CAA4C;IAC5C,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,qBAAqB;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,oBAAoB;IACpB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,eAAe;IACf,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAEvC,yEAAyE;IACzE,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE7E,gDAAgD;IAChD,iBAAiB,CACf,YAAY,EAAE,WAAW,EAAE,EAC3B,IAAI,EAAE,cAAc,GAAG;QAAE,cAAc,CAAC,EAAE,qBAAqB,CAAA;KAAE,GAChE,OAAO,CAAC,aAAa,CAAC,CAAC;IAE1B,yCAAyC;IACzC,gBAAgB,IAAI,IAAI,CAAC;IAEzB,gCAAgC;IAChC,aAAa,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAErD,8CAA8C;IAC9C,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAE1C,qBAAqB;IACrB,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE5B,gCAAgC;IAChC,gBAAgB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;CAC7C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,cAAc,CA+Q3E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,cAAc,CAAC,CAgBzB;AAWD,iEAAiE;AACjE,eAAO,MAAM,0BAA0B,iDACS,CAAC;AAEjD,uEAAuE;AACvE,eAAO,MAAM,2BAA2B,iDACQ,CAAC;AAiBjD,gDAAgD;AAChD,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AA8HD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAiB;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAA+B;IAChE;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAU;IACtD,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAEvC;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO;IAsEP;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,MAAM,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAyBpE;;;;;;OAMG;IACG,IAAI,CACR,YAAY,EAAE,WAAW,EAAE,EAC3B,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,UAAU,CAAC;IA0DtB;;;;;OAKG;IACG,iBAAiB,CACrB,YAAY,EAAE,WAAW,EAAE,EAC3B,IAAI,EAAE,cAAc,GAAG;QAAE,cAAc,CAAC,EAAE,qBAAqB,CAAA;KAAE,GAChE,OAAO,CAAC,aAAa,CAAC;IA6DzB,gBAAgB,IAAI,IAAI;IAOxB,OAAO,KAAK,WAAW,GAEtB;IAEK,aAAa,IAAI,OAAO,CAAC,0BAA0B,CAAC;IASpD,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC;IAIzC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC;IAI3B,gBAAgB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;WAIpC,WAAW,CACtB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC;CAG9B"}