@usesigil/kit 0.15.0 → 0.17.0

package/dist/dashboard/index.js

@@ -13,10 +13,10 @@
  * ```
  */
 import { SigilSdkDomainError } from "../errors/sdk.js";
-import { SIGIL_ERROR__SDK__INVALID_CONFIG } from "../errors/codes.js";
+import { SIGIL_ERROR__SDK__INVALID_CONFIG, SIGIL_ERROR__SDK__MAINNET_CONFIRMATION_REQUIRED, } from "../errors/codes.js";
+import { getSigilModuleLogger } from "../logger.js";
 import * as reads from "./reads.js";
 import * as mutations from "./mutations.js";
-import * as constraintReads from "./constraint-reads.js";
 import { discoverVaults as discoverVaultsImpl } from "./discover.js";
 // ─── fromJSON — MCP round-trip deserialization (PR 3.A) ─────────────────────
 export { txResultFromJSON, vaultStateFromJSON, agentDataFromJSON, spendingDataFromJSON, activityRowFromJSON, activityDataFromJSON, healthDataFromJSON, policyDataFromJSON, discoveredVaultFromJSON, overviewDataFromJSON, } from "./from-json.js";
@@ -28,8 +28,16 @@ export { txResultFromJSON, vaultStateFromJSON, agentDataFromJSON, spendingDataFr
 // @experimental These helpers and the OverviewContext shape may change while
 // the composition surface is iterated on. Pin your SDK version if you depend
 // on them directly.
-export { buildVaultState, buildAgents, buildSpending, buildHealth, buildPolicy, buildActivityRows, DEFAULT_OVERVIEW_ACTIVITY_LIMIT, } from "./reads.js";
-export { findConstraintsPda, findPendingConstraintsPda, findPendingCloseConstraintsPda, fetchConstraints, fetchPendingConstraintsUpdate, fetchPendingCloseConstraints, } from "./constraint-reads.js";
+export { buildVaultState, buildAgents, buildSpending, buildHealth, buildPolicy, buildActivityRows, buildAgentDetail, buildRiskMetrics, buildAuditTrail, deriveRiskLevel, DEFAULT_OVERVIEW_ACTIVITY_LIMIT, } from "./reads.js";
+export { CLOSE_VAULT_PENDING_PDA_ORDER, findPendingOwnerPda, findPendingAgentGrantPda, enumerateExistingPendingPdasForClose, } from "./close-vault.js";
+export { PostAssertionValidationError, validatePostAssertionEntries, DX_CODE_POST_ASSERTION_VALIDATION, } from "./post-assertion-validation.js";
+// ─── DxError helpers (FE↔BE contract v2.2 C2) ────────────────────────────────
+// `toDxError` is the sole DxError construction funnel. `categorizeDxError`
+// classifies a DxError's code into the four UX categories the FE routes to
+// ("program" / "user" / "network" / "unknown"). `isOnChainReverted` is the
+// public helper for routing specific 6000-range codes to custom UI (the
+// constraint-violation banner specifically). Prefer `categorizeDxError`.
+export { toDxError, categorizeDxError, isOnChainReverted, DX_ERROR_CODE_UNMAPPED, } from "./errors.js";
 /**
  * Owner-side client for Sigil vault management.
  *
@@ -85,6 +93,12 @@ export class OwnerClient {
     vault;
     owner;
     network;
+    /**
+     * Snapshot of `OwnerClientConfig.requireMainnetConfirmation`. Private +
+     * readonly so post-construction mutation of the source config cannot
+     * disable the gate. See {@link OwnerClient.assertMainnetConfirmed}.
+     */
+    requireMainnetConfirmation;
     constructor(config) {
         if (!config.rpc)
             throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_CONFIG, "OwnerClientConfig.rpc is required", { context: { field: "rpc", expected: "Rpc<SolanaRpcApi>" } });
@@ -98,6 +112,64 @@ export class OwnerClient {
         this.vault = config.vault;
         this.owner = config.owner;
         this.network = config.network;
+        this.requireMainnetConfirmation = config.requireMainnetConfirmation;
+    }
+    /**
+     * AL2 mainnet confirmation gate (H-9, Phase 10 Bucket 1). Run from
+     * every OwnerClient mutation method before forwarding to the underlying
+     * `mutations.*` builder. Mirrors the seal-side gate in
+     * `createSigilClient.executeAndConfirm` so the destructive-owner-action
+     * surface and the destructive-agent-action surface share one contract.
+     *
+     * State table (matches the seal.ts gate):
+     *   network    requireFlag   opts.confirmed   outcome
+     *   ─────────  ────────────  ──────────────   ───────────────
+     *   devnet     (any)         (any)            PROCEED (no-op)
+     *   mainnet    true          true             PROCEED
+     *   mainnet    true          undefined/false  THROW MAINNET_CONFIRMATION_REQUIRED
+     *   mainnet    undefined     undefined        WARN + PROCEED (0.16.x default)
+     *   mainnet    undefined     true/false       PROCEED (no warn)
+     *   mainnet    false         (any)            PROCEED (no warn — explicit opt-out)
+     *
+     * @internal Not part of the public surface; used by the mutation methods
+     * on this class. Callers should not depend on the helper name or shape.
+     */
+    assertMainnetConfirmed(methodName, opts) {
+        if (this.network !== "mainnet")
+            return;
+        const gateEnabled = this.requireMainnetConfirmation === true;
+        const explicitOptOut = this.requireMainnetConfirmation === false;
+        const confirmed = opts?.mainnetConfirmed === true;
+        if (gateEnabled && !confirmed) {
+            throw new SigilSdkDomainError(SIGIL_ERROR__SDK__MAINNET_CONFIRMATION_REQUIRED, `OwnerClient.${methodName} on mainnet requires \`mainnetConfirmed: true\` ` +
+                `in the per-call options or \`requireMainnetConfirmation: false\` on ` +
+                `the OwnerClientConfig. ` +
+                `Opt-in: ${methodName}(..., { mainnetConfirmed: true }). ` +
+                `Opt-out: createOwnerClient({ ..., requireMainnetConfirmation: false }). ` +
+                `Docs: https://github.com/Sigil-Trade/sigil/blob/main/sdk/kit/MIGRATION.md`, {
+                context: {
+                    method: methodName,
+                    network: "mainnet",
+                    vault: this.vault.toString(),
+                },
+            });
+        }
+        if (!gateEnabled &&
+            !explicitOptOut &&
+            opts?.mainnetConfirmed === undefined) {
+            // §RP Batch K LOW-2 fix: structured logger so consumers' pino /
+            // OpenTelemetry pipelines capture the warning. Matches the
+            // seal.ts gate's warn behaviour.
+            getSigilModuleLogger().warn(`[Sigil] OwnerClient.${methodName} called on mainnet without ` +
+                `\`mainnetConfirmed: true\`. @usesigil/kit 0.16.x defaults ` +
+                `\`requireMainnetConfirmation\` to false; v1.0 will flip the default ` +
+                `to true and this call will throw ` +
+                `SIGIL_ERROR__SDK__MAINNET_CONFIRMATION_REQUIRED. Adopt early by ` +
+                `setting \`requireMainnetConfirmation: true\` on OwnerClientConfig ` +
+                `and passing \`mainnetConfirmed: true\` per call, OR silence this ` +
+                `warning by explicitly setting \`requireMainnetConfirmation: false\`. ` +
+                `See: https://github.com/Sigil-Trade/sigil/blob/main/sdk/kit/MIGRATION.md`);
+        }
     }
     // ─── Reads (stateless, fetch fresh every call) ──────────────────────────────
     async getVaultState() {
@@ -135,70 +207,181 @@ export class OwnerClient {
     async getOverview(options) {
         return reads.getOverview(this.rpc, this.vault, this.network, options);
     }
+    /**
+     * Single-agent detail wrapper around `getAgentProfile` + activity
+     * enrichment (S10). Returns the dashboard-friendly {@link AgentData}
+     * shape — same fields as one entry in `getAgents()` — for the requested
+     * agent. Throws via `toDxError` when the agent is not registered.
+     */
+    async getAgentDetail(agent) {
+        return reads.getAgentDetail(this.rpc, this.vault, agent, this.network);
+    }
+    /**
+     * Risk-tilt summary (S11) — combines spending velocity + alert evaluation
+     * into a four-level UI risk badge plus the underlying numeric metrics.
+     * Use for the dashboard's "is something concerning right now?" indicator.
+     * One state resolution; no activity fetch.
+     */
+    async getRiskMetrics() {
+        return reads.getRiskMetrics(this.rpc, this.vault, this.network);
+    }
+    /**
+     * Governance + security audit trail (S12) — the policy/agent/security
+     * subset of `getVaultActivity`. Trades and fund movements are excluded;
+     * for those use `getActivity()`. Default limit is 100; pass `since` to
+     * filter to events after a given Unix-ms timestamp.
+     */
+    async getAuditTrail(opts) {
+        return reads.getAuditTrail(this.rpc, this.vault, this.network, opts);
+    }
     // ─── Vault Lifecycle ────────────────────────────────────────────────────────
-    /** Zero args. Immediate. */
+    /** Zero args. Immediate. AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}. */
     async freezeVault(opts) {
+        this.assertMainnetConfirmed("freezeVault", opts);
         return mutations.freezeVault(this.rpc, this.vault, this.owner, this.network, opts);
     }
     /**
      * Reactivates a frozen vault. Optionally adds a new agent during reactivation.
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
      */
     async resumeVault(newAgent, opts) {
+        this.assertMainnetConfirmed("resumeVault", opts);
         return mutations.resumeVault(this.rpc, this.vault, this.owner, this.network, newAgent, opts);
     }
+    /**
+     * Phase 8 alias for {@link resumeVault} matching the on-chain
+     * `reactivate_vault` instruction name. Prefer this in new code.
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
+     */
+    async reactivateVault(newAgent, opts) {
+        this.assertMainnetConfirmed("reactivateVault", opts);
+        return mutations.reactivateVault(this.rpc, this.vault, this.owner, this.network, newAgent, opts);
+    }
+    /**
+     * Phase 8 owner-side observe-only toggle. `newValue: true` puts the
+     * vault into read-only mode (all `validate_and_authorize` calls reject);
+     * `newValue: false` resumes spending.
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
+     */
+    async setObserveOnly(newValue, opts) {
+        this.assertMainnetConfirmed("setObserveOnly", opts);
+        return mutations.setObserveOnly(this.rpc, this.vault, this.owner, this.network, newValue, opts);
+    }
+    /**
+     * Phase 8 owner-side queue of a new agent capability grant. The grant
+     * becomes effective only after {@link applyAgentGrant} (subject to the
+     * cosign_required gate if enabled). `capability` is the on-chain
+     * `AgentCapability` discriminant (0=READ_ONLY, 1=OPERATOR, 2=FULL).
+     * `spendingLimitUsd` is in 6-decimal USDC units.
+     *
+     * D-9.3 (Phase 10 Bucket 1): tightened from `number` to the literal
+     * union `0 | 1 | 2`. Matches the on-chain enum exactly and gives the
+     * dashboard IDE autocomplete. Codama-generated builders keep `number`
+     * internally; the OwnerClient is the type boundary.
+     */
+    async queueAgentGrant(agent, capability, spendingLimitUsd, opts) {
+        this.assertMainnetConfirmed("queueAgentGrant", opts);
+        return mutations.queueAgentGrant(this.rpc, this.vault, this.owner, this.network, agent, capability, spendingLimitUsd, opts);
+    }
+    /**
+     * Phase 8 owner-side apply of a previously-queued agent capability
+     * grant. Closes the PendingAgentGrant PDA and mutates the agent set.
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
+     */
+    async applyAgentGrant(opts) {
+        this.assertMainnetConfirmed("applyAgentGrant", opts);
+        return mutations.applyAgentGrant(this.rpc, this.vault, this.owner, this.network, opts);
+    }
+    /**
+     * Phase 8 owner-side cancel of a previously-queued agent grant. Closes
+     * the PendingAgentGrant PDA and returns rent to the owner.
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
+     */
+    async cancelAgentGrant(opts) {
+        this.assertMainnetConfirmed("cancelAgentGrant", opts);
+        return mutations.cancelAgentGrant(this.rpc, this.vault, this.owner, this.network, opts);
+    }
     /**
      * Permanently closes vault and reclaims rent.
-     * Requires: all agents revoked, zero active escrows, zero active sessions,
+     * Requires: all agents revoked, zero active sessions,
      * constraints closed, no pending policy update.
      * May need computeUnits: 400_000 for complex vaults (default applied).
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
      */
     async closeVault(opts) {
+        this.assertMainnetConfirmed("closeVault", opts);
         return mutations.closeVault(this.rpc, this.vault, this.owner, this.network, opts);
     }
     // syncPositions method DELETED — position counter system removed per council
     // decision (9-1 vote, 2026-04-19). See Plans/we-need-to-plan-serialized-summit.md.
     // ─── Fund Management ────────────────────────────────────────────────────────
-    /** Token-2022 mints blocked by on-chain program. Standard SPL only (USDC, USDT). */
+    /**
+     * Token-2022 mints blocked by on-chain program. Standard SPL only (USDC, USDT).
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
+     */
     async deposit(mint, amount, opts) {
+        this.assertMainnetConfirmed("deposit", opts);
         return mutations.deposit(this.rpc, this.vault, this.owner, this.network, mint, amount, opts);
     }
-    /** Token-2022 mints blocked by on-chain program. Standard SPL only (USDC, USDT). */
+    /**
+     * Token-2022 mints blocked by on-chain program. Standard SPL only (USDC, USDT).
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
+     */
     async withdraw(mint, amount, opts) {
+        this.assertMainnetConfirmed("withdraw", opts);
         return mutations.withdraw(this.rpc, this.vault, this.owner, this.network, mint, amount, opts);
     }
     // ─── Agent Management ───────────────────────────────────────────────────────
     /**
      * Immediate — additive, no timelock required.
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
      * @param spendingLimit — per-agent 24h cap in 6-decimal USD. Pass 0n for unlimited (NOT recommended).
      */
     async addAgent(agent, permissions, spendingLimit, opts) {
+        this.assertMainnetConfirmed("addAgent", opts);
         return mutations.addAgent(this.rpc, this.vault, this.owner, this.network, agent, permissions, spendingLimit, opts);
     }
-    /** Immediate — protective action, no timelock required. */
+    /**
+     * Immediate — protective action, no timelock required.
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
+     */
     async pauseAgent(agent, opts) {
+        this.assertMainnetConfirmed("pauseAgent", opts);
         return mutations.pauseAgent(this.rpc, this.vault, this.owner, this.network, agent, opts);
     }
-    /** Immediate — protective action, no timelock required. */
+    /**
+     * Immediate — protective action, no timelock required.
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
+     */
     async unpauseAgent(agent, opts) {
+        this.assertMainnetConfirmed("unpauseAgent", opts);
         return mutations.unpauseAgent(this.rpc, this.vault, this.owner, this.network, agent, opts);
     }
-    /** Immediate — protective action, no timelock required. */
+    /**
+     * Immediate — protective action, no timelock required.
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
+     */
     async revokeAgent(agent, opts) {
+        this.assertMainnetConfirmed("revokeAgent", opts);
         return mutations.revokeAgent(this.rpc, this.vault, this.owner, this.network, agent, opts);
     }
     /**
      * Timelocked — queue/apply/cancel pattern.
      * Direct update_agent_permissions deleted (TOCTOU fix).
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
      *
      * @param spendingLimit — per-agent 24h cap in 6-decimal USD. Pass 0n for unlimited (NOT recommended).
      */
     async queueAgentPermissions(agent, permissions, spendingLimit, opts) {
+        this.assertMainnetConfirmed("queueAgentPermissions", opts);
         return mutations.queueAgentPermissions(this.rpc, this.vault, this.owner, this.network, agent, permissions, spendingLimit, opts);
     }
     async applyAgentPermissions(agent, opts) {
+        this.assertMainnetConfirmed("applyAgentPermissions", opts);
         return mutations.applyAgentPermissions(this.rpc, this.vault, this.owner, this.network, agent, opts);
     }
     async cancelAgentPermissions(agent, opts) {
+        this.assertMainnetConfirmed("cancelAgentPermissions", opts);
         return mutations.cancelAgentPermissions(this.rpc, this.vault, this.owner, this.network, agent, opts);
     }
     // ─── Policy (all timelocked — MIN_TIMELOCK_DURATION = 1800s) ────────────────
@@ -206,57 +389,115 @@ export class OwnerClient {
      * Direct updatePolicy deleted (TOCTOU fix).
      * All policy changes go through queue/apply with mandatory timelock.
      * Note: timelock values < 1800 are rejected on-chain (TimelockTooShort).
+     * AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}.
      */
     async queuePolicyUpdate(changes, opts) {
+        this.assertMainnetConfirmed("queuePolicyUpdate", opts);
         return mutations.queuePolicyUpdate(this.rpc, this.vault, this.owner, this.network, changes, opts);
     }
+    /** AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}. */
     async applyPendingPolicy(opts) {
+        this.assertMainnetConfirmed("applyPendingPolicy", opts);
         return mutations.applyPendingPolicy(this.rpc, this.vault, this.owner, this.network, opts);
     }
+    /** AL2 mainnet gate: see {@link OwnerClient.assertMainnetConfirmed}. */
     async cancelPendingPolicy(opts) {
+        this.assertMainnetConfirmed("cancelPendingPolicy", opts);
         return mutations.cancelPendingPolicy(this.rpc, this.vault, this.owner, this.network, opts);
     }
-    // ─── Constraint Reads (Phase A1.5) ──────────────────────────────────────
-    /** Get the constraints PDA address for this vault. */
-    async findConstraintsPda() {
-        return constraintReads.findConstraintsPda(this.vault);
-    }
-    /** Fetch the InstructionConstraints account (raw bytes). */
-    async fetchConstraints() {
-        return constraintReads.fetchConstraints(this.rpc, this.vault);
-    }
-    /** Fetch the PendingConstraintsUpdate account (raw bytes). */
-    async fetchPendingConstraintsUpdate() {
-        return constraintReads.fetchPendingConstraintsUpdate(this.rpc, this.vault);
-    }
-    /** Fetch the PendingCloseConstraints account (raw bytes). */
-    async fetchPendingCloseConstraints() {
-        return constraintReads.fetchPendingCloseConstraints(this.rpc, this.vault);
-    }
-    // ─── Constraints (timelocked for modifications/deletion) ────────────────────
-    /** Immediate — additive, creates constraints that didn't exist. */
-    async createConstraints(entries, opts) {
-        return mutations.createConstraints(this.rpc, this.vault, this.owner, this.network, entries, opts);
-    }
-    /** Timelocked — existing queue/apply pattern. */
-    async queueConstraintsUpdate(entries, opts) {
-        return mutations.queueConstraintsUpdate(this.rpc, this.vault, this.owner, this.network, entries, opts);
-    }
-    async applyConstraintsUpdate(opts) {
-        return mutations.applyConstraintsUpdate(this.rpc, this.vault, this.owner, this.network, opts);
-    }
-    async cancelConstraintsUpdate(opts) {
-        return mutations.cancelConstraintsUpdate(this.rpc, this.vault, this.owner, this.network, opts);
+    // ─── Phase 8 Ownership Transfer (M-2, audit 2026-05-21) ─────────────────────
+    //
+    // On-chain handlers live at programs/sigil/src/instructions/
+    // {initiate,accept,cancel}_ownership_transfer.rs plus the Squads V4
+    // accept-multisig variant. Cosign + timelock rules per the Rust handlers
+    // are documented on each method below.
+    /**
+     * Queue an ownership transfer for this vault. The pending PDA carries
+     * the target `newOwner` plus the configured timelock (default 48h).
+     * The transfer is finalised only by a follow-up
+     * {@link OwnerClient.acceptOwnershipTransfer} (wallet) or
+     * {@link OwnerClient.acceptOwnershipTransferMultisig} (Squads V4).
+     *
+     * Cosign: if `policy.cosign_required = true`, the on-chain handler
+     * (ISC-129 interim cosign gate) requires a non-owner co-signer. Build
+     * the tx with the cosign session pubkey in the signer set; this method
+     * does not add it for you.
+     *
+     * Errors:
+     *  - 6094 `ErrPendingOwnershipExists` — a previous transfer is still
+     *    pending. Call {@link OwnerClient.cancelOwnershipTransfer} first.
+     *  - 6098 `ErrInvalidOwnershipTarget` — `newOwner` is a system program
+     *    / sysvar (would permanently brick the vault).
+     *  - 6080 `ErrCosignRequired` — cosign-opted-in policy and no co-signer.
+     *
+     * @param newOwner         Target pubkey for the transfer.
+     * @param isMultisigTarget `true` when `newOwner` is a Squads V4
+     *                         multisig PDA. The accept handler enforces
+     *                         the matching ix variant.
+     */
+    async initiateOwnershipTransfer(newOwner, isMultisigTarget, opts) {
+        this.assertMainnetConfirmed("initiateOwnershipTransfer", opts);
+        return mutations.initiateOwnershipTransfer(this.rpc, this.vault, this.owner, this.network, newOwner, isMultisigTarget, opts);
     }
-    /** Timelocked — direct close_instruction_constraints deleted (TOCTOU fix). */
-    async queueCloseConstraints(opts) {
-        return mutations.queueCloseConstraints(this.rpc, this.vault, this.owner, this.network, opts);
+    /**
+     * Finalise a previously-initiated ownership transfer when the new
+     * owner is a wallet (keypair) signer. The `OwnerClient` must be
+     * constructed with the NEW owner as `config.owner` — the on-chain
+     * handler verifies the signer matches `pending.new_owner`.
+     *
+     * Timelock: rejects with 6104 `ErrPendingOwnershipNotReady` if the
+     * configured window (default 48h) has not elapsed since
+     * {@link OwnerClient.initiateOwnershipTransfer}.
+     *
+     * Post-condition: `vault.owner` is overwritten with the new owner;
+     * `vault.vault_authority` (the immutable PDA seed) is unchanged.
+     * Existing PDA-derivation helpers continue to resolve the same
+     * vault address.
+     */
+    async acceptOwnershipTransfer(opts) {
+        this.assertMainnetConfirmed("acceptOwnershipTransfer", opts);
+        return mutations.acceptOwnershipTransfer(this.rpc, this.vault, this.owner, this.network, opts);
     }
-    async applyCloseConstraints(opts) {
-        return mutations.applyCloseConstraints(this.rpc, this.vault, this.owner, this.network, opts);
+    /**
+     * Finalise a previously-initiated ownership transfer when the new
+     * owner is a Squads V4 multisig PDA. The PDA itself has no private
+     * key; the Squads program is the CPI caller. This method's
+     * `multisigPda` is the address declared at initiate time; the fee
+     * payer is `this.owner` (any wallet that funds the tx — typically a
+     * member of the Squads).
+     *
+     * Caller is responsible for routing this ix through the Squads V4
+     * proposal flow so it executes under the Squads program signer seeds.
+     *
+     * The on-chain handler verifies:
+     *   1. `multisig_pda.owner == SQUADS_V4_PROGRAM_ID`
+     *   2. `multisig_pda.key() == pending.new_owner`
+     *   3. `pending.is_multisig_target == true`
+     *
+     * Errors mirror {@link OwnerClient.acceptOwnershipTransfer} plus a
+     * mismatch rejection if the queued `is_multisig_target` flag does
+     * not match.
+     */
+    async acceptOwnershipTransferMultisig(multisigPda, opts) {
+        this.assertMainnetConfirmed("acceptOwnershipTransferMultisig", opts);
+        return mutations.acceptOwnershipTransferMultisig(this.rpc, this.vault, multisigPda, this.owner, this.network, opts);
     }
-    async cancelCloseConstraints(opts) {
-        return mutations.cancelCloseConstraints(this.rpc, this.vault, this.owner, this.network, opts);
+    /**
+     * Cancel a queued ownership transfer during the timelock window.
+     * `this.owner` MUST match `pending.current_owner` (the pubkey that
+     * called {@link OwnerClient.initiateOwnershipTransfer}); the on-chain
+     * handler rejects with a require-keys-eq violation otherwise.
+     *
+     * Closes the pending PDA and returns rent to the current owner. After
+     * this lands, {@link OwnerClient.initiateOwnershipTransfer} is
+     * callable again.
+     *
+     * Cosign: D4 symmetric gate — if `policy.cosign_required`,
+     * cancellation also requires a non-owner co-signer in the signer set.
+     */
+    async cancelOwnershipTransfer(opts) {
+        this.assertMainnetConfirmed("cancelOwnershipTransfer", opts);
+        return mutations.cancelOwnershipTransfer(this.rpc, this.vault, this.owner, this.network, opts);
     }
     // ─── Static (pre-client) ────────────────────────────────────────────────────
     /**

package/dist/dashboard/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dashboard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AASH,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,gCAAgC,EAAE,MAAM,oBAAoB,CAAC;AAqBtE,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,eAAe,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,cAAc,IAAI,kBAAkB,EAAE,MAAM,eAAe,CAAC;AA6BrE,+EAA+E;AAC/E,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,gFAAgF;AAChF,wEAAwE;AACxE,qEAAqE;AACrE,2EAA2E;AAC3E,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,oBAAoB;AACpB,OAAO,EACL,eAAe,EACf,WAAW,EACX,aAAa,EACb,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,+BAA+B,GAChC,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,8BAA8B,EAC9B,gBAAgB,EAChB,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;GAQG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,iFAAiF;IACjF,2EAA2E;IAC3E,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,oEAAoE;IACpE,2EAA2E;IAC3E,0BAA0B;IAC1B,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,WAAW;IACb,GAAG,CAAoB;IACvB,KAAK,CAAU;IACf,KAAK,CAAoB;IACzB,OAAO,CAAuB;IAEvC,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG;YACb,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,mCAAmC,EACnC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,CAC7D,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK;YACf,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,qCAAqC,EACrC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CACrD,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK;YACf,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,qCAAqC,EACrC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,CAC/D,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,OAAO;YACjB,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,uCAAuC,EACvC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,sBAAsB,EAAE,EAAE,CACpE,CAAC;QAEJ,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAChC,CAAC;IAED,+EAA+E;IAE/E,KAAK,CAAC,aAAa;QACjB,OAAO,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,+EAA+E;IAE/E,4BAA4B;IAC5B,KAAK,CAAC,WAAW,CAAC,IAAa;QAC7B,OAAO,SAAS,CAAC,WAAW,CAC1B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,QAA4D,EAC5D,IAAa;QAEb,OAAO,SAAS,CAAC,WAAW,CAC1B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,IAAa;QAC5B,OAAO,SAAS,CAAC,UAAU,CACzB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,mFAAmF;IAEnF,+EAA+E;IAE/E,oFAAoF;IACpF,KAAK,CAAC,OAAO,CACX,IAAa,EACb,MAAc,EACd,IAAa;QAEb,OAAO,SAAS,CAAC,OAAO,CACtB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,EACJ,MAAM,EACN,IAAI,CACL,CAAC;IACJ,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,QAAQ,CACZ,IAAa,EACb,MAAc,EACd,IAAa;QAEb,OAAO,SAAS,CAAC,QAAQ,CACvB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,EACJ,MAAM,EACN,IAAI,CACL,CAAC;IACJ,CAAC;IAED,+EAA+E;IAE/E;;;OAGG;IACH,KAAK,CAAC,QAAQ,CACZ,KAAc,EACd,WAA2B,EAC3B,aAA2B,EAC3B,IAAa;QAEb,OAAO,SAAS,CAAC,QAAQ,CACvB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,WAAW,EACX,aAAa,EACb,IAAI,CACL,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,UAAU,CAAC,KAAc,EAAE,IAAa;QAC5C,OAAO,SAAS,CAAC,UAAU,CACzB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,YAAY,CAAC,KAAc,EAAE,IAAa;QAC9C,OAAO,SAAS,CAAC,YAAY,CAC3B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,WAAW,CAAC,KAAc,EAAE,IAAa;QAC7C,OAAO,SAAS,CAAC,WAAW,CAC1B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,qBAAqB,CACzB,KAAc,EACd,WAA2B,EAC3B,aAA2B,EAC3B,IAAa;QAEb,OAAO,SAAS,CAAC,qBAAqB,CACpC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,WAAW,EACX,aAAa,EACb,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,KAAc,EACd,IAAa;QAEb,OAAO,SAAS,CAAC,qBAAqB,CACpC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,KAAc,EACd,IAAa;QAEb,OAAO,SAAS,CAAC,sBAAsB,CACrC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IAED,+EAA+E;IAE/E;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAsB,EACtB,IAAa;QAEb,OAAO,SAAS,CAAC,iBAAiB,CAChC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,OAAO,EACP,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAa;QACpC,OAAO,SAAS,CAAC,kBAAkB,CACjC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAa;QACrC,OAAO,SAAS,CAAC,mBAAmB,CAClC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,2EAA2E;IAE3E,sDAAsD;IACtD,KAAK,CAAC,kBAAkB;QACtB,OAAO,eAAe,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,4DAA4D;IAC5D,KAAK,CAAC,gBAAgB;QACpB,OAAO,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,6BAA6B;QACjC,OAAO,eAAe,CAAC,6BAA6B,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,4BAA4B;QAChC,OAAO,eAAe,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED,+EAA+E;IAE/E,mEAAmE;IACnE,KAAK,CAAC,iBAAiB,CACrB,OAA0B,EAC1B,IAAa;QAEb,OAAO,SAAS,CAAC,iBAAiB,CAChC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,OAAO,EACP,IAAI,CACL,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,sBAAsB,CAC1B,OAA0B,EAC1B,IAAa;QAEb,OAAO,SAAS,CAAC,sBAAsB,CACrC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,OAAO,EACP,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,IAAa;QACxC,OAAO,SAAS,CAAC,sBAAsB,CACrC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,IAAa;QACzC,OAAO,SAAS,CAAC,uBAAuB,CACtC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,qBAAqB,CAAC,IAAa;QACvC,OAAO,SAAS,CAAC,qBAAqB,CACpC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAa;QACvC,OAAO,SAAS,CAAC,qBAAqB,CACpC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,IAAa;QACxC,OAAO,SAAS,CAAC,sBAAsB,CACrC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,+EAA+E;IAE/E;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CACzB,GAAsB,EACtB,KAAc,EACd,OAA6B;QAE7B,OAAO,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dashboard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AASH,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,gCAAgC,EAChC,+CAA+C,GAChD,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAuBpD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,cAAc,IAAI,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAgCrE,+EAA+E;AAC/E,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,gFAAgF;AAChF,wEAAwE;AACxE,qEAAqE;AACrE,2EAA2E;AAC3E,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,oBAAoB;AACpB,OAAO,EACL,eAAe,EACf,WAAW,EACX,aAAa,EACb,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,+BAA+B,GAChC,MAAM,YAAY,CAAC;AASpB,OAAO,EACL,6BAA6B,EAC7B,mBAAmB,EACnB,wBAAwB,EACxB,oCAAoC,GACrC,MAAM,kBAAkB,CAAC;AAW1B,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,iCAAiC,GAClC,MAAM,gCAAgC,CAAC;AAMxC,gFAAgF;AAChF,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,wEAAwE;AACxE,yEAAyE;AACzE,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAGrB;;;;;;;;GAQG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,iFAAiF;IACjF,2EAA2E;IAC3E,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,oEAAoE;IACpE,2EAA2E;IAC3E,0BAA0B;IAC1B,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,WAAW;IACb,GAAG,CAAoB;IACvB,KAAK,CAAU;IACf,KAAK,CAAoB;IACzB,OAAO,CAAuB;IACvC;;;;OAIG;IACc,0BAA0B,CAAW;IAEtD,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG;YACb,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,mCAAmC,EACnC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,CAC7D,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK;YACf,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,qCAAqC,EACrC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CACrD,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK;YACf,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,qCAAqC,EACrC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,CAC/D,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,OAAO;YACjB,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,uCAAuC,EACvC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,sBAAsB,EAAE,EAAE,CACpE,CAAC;QAEJ,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,0BAA0B,GAAG,MAAM,CAAC,0BAA0B,CAAC;IACtE,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,sBAAsB,CAC5B,UAAkB,EAClB,IAAqC;QAErC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,0BAA0B,KAAK,IAAI,CAAC;QAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,0BAA0B,KAAK,KAAK,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,EAAE,gBAAgB,KAAK,IAAI,CAAC;QAClD,IAAI,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAmB,CAC3B,+CAA+C,EAC/C,eAAe,UAAU,kDAAkD;gBACzE,sEAAsE;gBACtE,yBAAyB;gBACzB,WAAW,UAAU,qCAAqC;gBAC1D,0EAA0E;gBAC1E,2EAA2E,EAC7E;gBACE,OAAO,EAAE;oBACP,MAAM,EAAE,UAAU;oBAClB,OAAO,EAAE,SAAS;oBAClB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;iBACpB;aACX,CACF,CAAC;QACJ,CAAC;QACD,IACE,CAAC,WAAW;YACZ,CAAC,cAAc;YACf,IAAI,EAAE,gBAAgB,KAAK,SAAS,EACpC,CAAC;YACD,gEAAgE;YAChE,2DAA2D;YAC3D,iCAAiC;YACjC,oBAAoB,EAAE,CAAC,IAAI,CACzB,uBAAuB,UAAU,6BAA6B;gBAC5D,4DAA4D;gBAC5D,sEAAsE;gBACtE,mCAAmC;gBACnC,kEAAkE;gBAClE,oEAAoE;gBACpE,mEAAmE;gBACnE,uEAAuE;gBACvE,0EAA0E,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+EAA+E;IAE/E,KAAK,CAAC,aAAa;QACjB,OAAO,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,KAAc;QACjC,OAAO,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc;QAClB,OAAO,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,IAAwB;QAC1C,OAAO,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;IAED,+EAA+E;IAE/E,8FAA8F;IAC9F,KAAK,CAAC,WAAW,CAAC,IAAa;QAC7B,IAAI,CAAC,sBAAsB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO,SAAS,CAAC,WAAW,CAC1B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CACf,QAA4D,EAC5D,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO,SAAS,CAAC,WAAW,CAC1B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CACnB,QAA4D,EAC5D,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QACrD,OAAO,SAAS,CAAC,eAAe,CAC9B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,QAAiB,EAAE,IAAa;QACnD,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QACpD,OAAO,SAAS,CAAC,cAAc,CAC7B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,eAAe,CACnB,KAAc,EACd,UAAqB,EACrB,gBAAwB,EACxB,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QACrD,OAAO,SAAS,CAAC,eAAe,CAC9B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,UAAU,EACV,gBAAgB,EAChB,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,IAAa;QACjC,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QACrD,OAAO,SAAS,CAAC,eAAe,CAC9B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,IAAa;QAClC,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACtD,OAAO,SAAS,CAAC,gBAAgB,CAC/B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,IAAa;QAC5B,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC,UAAU,CACzB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,mFAAmF;IAEnF,+EAA+E;IAE/E;;;OAGG;IACH,KAAK,CAAC,OAAO,CACX,IAAa,EACb,MAAc,EACd,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC,OAAO,CACtB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,EACJ,MAAM,EACN,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CACZ,IAAa,EACb,MAAc,EACd,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC,QAAQ,CACvB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,EACJ,MAAM,EACN,IAAI,CACL,CAAC;IACJ,CAAC;IAED,+EAA+E;IAE/E;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CACZ,KAAc,EACd,WAA2B,EAC3B,aAA2B,EAC3B,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC,QAAQ,CACvB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,WAAW,EACX,aAAa,EACb,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,KAAc,EAAE,IAAa;QAC5C,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC,UAAU,CACzB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,KAAc,EAAE,IAAa;QAC9C,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,SAAS,CAAC,YAAY,CAC3B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,KAAc,EAAE,IAAa;QAC7C,IAAI,CAAC,sBAAsB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO,SAAS,CAAC,WAAW,CAC1B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,qBAAqB,CACzB,KAAc,EACd,WAA2B,EAC3B,aAA2B,EAC3B,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC,qBAAqB,CACpC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,WAAW,EACX,aAAa,EACb,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,KAAc,EACd,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC,qBAAqB,CACpC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,KAAc,EACd,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAC5D,OAAO,SAAS,CAAC,sBAAsB,CACrC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IAED,+EAA+E;IAE/E;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAsB,EACtB,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QACvD,OAAO,SAAS,CAAC,iBAAiB,CAChC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,OAAO,EACP,IAAI,CACL,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,kBAAkB,CAAC,IAAa;QACpC,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;QACxD,OAAO,SAAS,CAAC,kBAAkB,CACjC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,mBAAmB,CAAC,IAAa;QACrC,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACzD,OAAO,SAAS,CAAC,mBAAmB,CAClC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,EAAE;IACF,6DAA6D;IAC7D,oEAAoE;IACpE,yEAAyE;IACzE,uCAAuC;IAEvC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,CAAC,yBAAyB,CAC7B,QAAiB,EACjB,gBAAyB,EACzB,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;QAC/D,OAAO,SAAS,CAAC,yBAAyB,CACxC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,gBAAgB,EAChB,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,uBAAuB,CAAC,IAAa;QACzC,IAAI,CAAC,sBAAsB,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO,SAAS,CAAC,uBAAuB,CACtC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,+BAA+B,CACnC,WAAoB,EACpB,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC;QACrE,OAAO,SAAS,CAAC,+BAA+B,CAC9C,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,WAAW,EACX,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,uBAAuB,CAAC,IAAa;QACzC,IAAI,CAAC,sBAAsB,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO,SAAS,CAAC,uBAAuB,CACtC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,+EAA+E;IAE/E;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CACzB,GAAsB,EACtB,KAAc,EACd,OAA6B;QAE7B,OAAO,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;CACF"}