@usesigil/kit 0.8.1 → 0.11.0

package/dist/index.js

@@ -1,20 +1,24 @@
 // @usesigil/kit — Kit-native SDK for Sigil
 // ESM-only, zero web3.js dependency
 // ─── Generated Client ─────────────────────────────────────────────────────────
-export * from "./generated/index.js";
-// ─── Type Constants + Permissions ─────────────────────────────────────────────
 //
-// The legacy 21-bit permission bitmasks (`SWAP_ONLY`, `PERPS_ONLY`,
-// `TRANSFER_ONLY`, `ESCROW_ONLY`, `PERPS_FULL`), the `ACTION_PERMISSION_MAP`
-// table, and the permission helpers built on top of them (`hasPermission`,
-// `permissionsToStrings`, `stringsToPermissions`, `PermissionBuilder`) are no
-// longer re-exported here. They encode a pre-v6 permission model that the
-// on-chain program replaced with a 2-bit capability enum (`0 = Disabled`,
-// `1 = Observer`, `2 = Operator`), and the presets that previously used those
-// bitmasks now register agents with invalid capability values (either
-// silently Observer or rejected with `InvalidArgument`). Use
-// {@link FULL_CAPABILITY} / {@link FULL_PERMISSIONS} (both equal `2n`) for
-// any preset or vault-creation flow that needs spending authority.
+// v0.9.0 barrel surgery (A12): was `export * from "./generated/index.js"`
+// which pulled ~500 Codama exports (37 instruction builders + 60+ event/
+// struct types + 82 hex error constants) into the root barrel. Consumers
+// should go through `seal()` / `createSigilClient()` / `createVault()` for
+// instruction building, and `SIGIL_PROGRAM_ADDRESS` (re-exported from
+// `types.js` below) for the program ID. Account decoders stay public —
+// they're the supported way to parse vault state fetched from an RPC.
+export * from "./generated/accounts/index.js";
+// ─── Type Constants + Capability ──────────────────────────────────────────────
+//
+// Legacy 21-bit permission bitmasks and their helpers (`SWAP_ONLY`,
+// `PERPS_ONLY`, `TRANSFER_ONLY`, `ESCROW_ONLY`, `PERPS_FULL`,
+// `ACTION_PERMISSION_MAP`, `hasPermission`, `permissionsToStrings`,
+// `stringsToPermissions`, `PermissionBuilder`) were DELETED in the A11
+// cleanup — they encoded a pre-v6 permission model the on-chain program no
+// longer supports. Use {@link FULL_CAPABILITY} (2n) for operator agents and
+// put granular per-action restrictions in `InstructionConstraints`.
 export { 
 // Program
 SIGIL_PROGRAM_ADDRESS, 
@@ -102,9 +106,28 @@ export { seal, createSigilClient,
 /** @deprecated Use createSigilClient(). Removed at v1.0. */
 SigilClient, replaceAgentAtas, } from "./seal.js";
 // ─── Create Vault ──────────────────────────────────────────────────────────
+// ─── Sprint 2: Sigil Facade + SigilVault + Hooks + Plugins ──────────────────
+export { Sigil } from "./sigil.js";
+export { SigilVault } from "./vault-handle.js";
+export { composeHooks, invokeHook, newCorrelationId } from "./hooks.js";
+export { runPlugins, validatePluginList } from "./plugin.js";
 export { createVault, createAndSendVault } from "./create-vault.js";
 // ─── Vault Presets ───────────────────────────────────────────────────────────
-export { VAULT_PRESETS, getPreset, listPresets, presetToCreateVaultFields, } from "./presets.js";
+export { VAULT_PRESETS, getPreset, listPresets, presetToCreateVaultFields, 
+// v0.9.0 A10: orthogonal SAFETY_PRESETS for timelock + cap defaults.
+SAFETY_PRESETS, applySafetyPreset, requireResolvedSafetyPreset, } from "./presets.js";
+// ─── v0.9.0 helpers (A3, A4, A9) ────────────────────────────────────────────
+// Strict USD parser, policy-gated ATA builder, aggregate cap validator.
+export { parseUsd } from "./helpers/parse-usd.js";
+export { initializeVaultAtas, } from "./helpers/ata.js";
+export { validateAgentCapAggregate, } from "./helpers/validate-cap-aggregate.js";
+// ─── v0.9.0 logger (A5) ─────────────────────────────────────────────────────
+// SigilLogger interface + NOOP_LOGGER default + createConsoleLogger opt-in.
+// setSigilModuleLogger / getSigilModuleLogger are for SDK internals; the
+// consumer-facing install point is SigilClient.create(config.logger).
+export { NOOP_LOGGER, createConsoleLogger, resolveLogger, setSigilModuleLogger, getSigilModuleLogger, } from "./logger.js";
+// ─── v0.9.0 genesis hash constants (A7) ─────────────────────────────────────
+export { SOLANA_DEVNET_GENESIS_HASH, SOLANA_MAINNET_GENESIS_HASH, } from "./seal.js";
 // ─── Owner Transaction ───────────────────────────────────────────────────────
 export { buildOwnerTransaction } from "./owner-transaction.js";
 // ─── Inscribe / withVault ─────────────────────────────────────────────────────
@@ -143,9 +166,11 @@ export { KNOWN_PROTOCOLS, KNOWN_TOKENS, SYSTEM_PROGRAMS, getTokenInfo, getProtoc
 // Internally the class is still called `SigilError`; the rename happens at
 // the public export boundary. Internal code in sdk/kit/src/ continues to
 // use `SigilError`. Targeted full rename for a follow-up cleanup PR.
-export { SigilError as SigilKitError, SigilShieldError, SigilTeeError, SigilX402Error, SigilComposeError, SigilSdkDomainError, SigilRpcError, SIGIL_KIT_VERSION, walk as walkSigilCause, 
-// Code constants — all 47.
-SIGIL_ERROR__SHIELD__POLICY_DENIED, SIGIL_ERROR__SHIELD__CONFIG_INVALID, SIGIL_ERROR__SHIELD__RATE_LIMIT_EXCEEDED, SIGIL_ERROR__SHIELD__SESSION_BINDING, SIGIL_ERROR__TEE__ATTESTATION_FAILED, SIGIL_ERROR__TEE__CERT_CHAIN_INVALID, SIGIL_ERROR__TEE__PCR_MISMATCH, SIGIL_ERROR__COMPOSE__MISSING_PARAM, SIGIL_ERROR__COMPOSE__INVALID_BIGINT, SIGIL_ERROR__COMPOSE__UNSUPPORTED_ACTION, SIGIL_ERROR__X402__HEADER_MALFORMED, SIGIL_ERROR__X402__PAYMENT_FAILED, SIGIL_ERROR__X402__UNSUPPORTED, SIGIL_ERROR__X402__DESTINATION_BLOCKED, SIGIL_ERROR__X402__REPLAY, SIGIL_ERROR__SDK__INVALID_CONFIG, SIGIL_ERROR__SDK__INVALID_PARAMS, SIGIL_ERROR__SDK__INVALID_NETWORK, SIGIL_ERROR__SDK__INVALID_AMOUNT, SIGIL_ERROR__SDK__INVALID_CAPABILITY, SIGIL_ERROR__SDK__INVALID_ACTION_TYPE, SIGIL_ERROR__SDK__OWNER_AGENT_COLLISION, SIGIL_ERROR__SDK__VAULT_NOT_FOUND, SIGIL_ERROR__SDK__VAULT_INACTIVE, SIGIL_ERROR__SDK__VAULT_SLOTS_EXHAUSTED, SIGIL_ERROR__SDK__POLICY_NOT_FOUND, SIGIL_ERROR__SDK__AGENT_NOT_REGISTERED, SIGIL_ERROR__SDK__AGENT_PAUSED, SIGIL_ERROR__SDK__AGENT_ZERO_CAPABILITY, SIGIL_ERROR__SDK__SIGNER_INVALID, SIGIL_ERROR__SDK__SIGNATURE_INVALID, SIGIL_ERROR__SDK__SPL_TOKEN_OP_BLOCKED, SIGIL_ERROR__SDK__PROTOCOL_NOT_ALLOWED, SIGIL_ERROR__SDK__PROTOCOL_NOT_TARGETED, SIGIL_ERROR__SDK__INSTRUCTION_COUNT, SIGIL_ERROR__SDK__CAP_EXCEEDED, SIGIL_ERROR__SDK__ATA_NON_CANONICAL, SIGIL_ERROR__SDK__ALT_INTEGRITY, SIGIL_ERROR__SDK__ALT_NOT_DEPLOYED, SIGIL_ERROR__SDK__SEAL_FAILED, SIGIL_ERROR__SDK__UNKNOWN, SIGIL_ERROR__RPC__TX_FAILED, SIGIL_ERROR__RPC__CONFIRMATION_TIMEOUT, SIGIL_ERROR__RPC__SIMULATION_FAILED, SIGIL_ERROR__RPC__DRAIN_DETECTED, SIGIL_ERROR__RPC__TX_TOO_LARGE, SIGIL_ERROR__RPC__RATE_LIMITED, SIGIL_ERROR__RPC__INSTRUCTION_REQUIRED, SIGIL_ERROR__PROGRAM__GENERIC, } from "./errors/index.js";
+// v0.9.0 A12: the 49 `SIGIL_ERROR__*` code constants are no longer
+// re-exported from the root barrel — import them from the `./errors`
+// subpath: `import { SIGIL_ERROR__SDK__CAP_EXCEEDED } from "@usesigil/kit/errors"`.
+// Error classes + domain-union types stay at root for catch-block narrowing.
+export { SigilError as SigilKitError, SigilShieldError, SigilTeeError, SigilX402Error, SigilComposeError, SigilSdkDomainError, SigilRpcError, SIGIL_KIT_VERSION, walk as walkSigilCause, } from "./errors/index.js";
 // ─── Dashboard / Owner Client ────────────────────────────────────────────────
 // Re-exported from the dashboard subpath for convenience. Consumers preferring
 // a single import path can use these; the dashboard subpath remains the

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,oCAAoC;AAEpC,iFAAiF;AACjF,cAAc,sBAAsB,CAAC;AAErC,iFAAiF;AACjF,EAAE;AACF,oEAAoE;AACpE,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,8EAA8E;AAC9E,sEAAsE;AACtE,6DAA6D;AAC7D,2EAA2E;AAC3E,mEAAmE;AACnE,OAAO;AACL,UAAU;AACV,qBAAqB;AACrB,gBAAgB;AAChB,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB;AACjB,MAAM;AACN,YAAY,EAKZ,GAAG,EACH,UAAU,EACV,IAAI;AACJ,cAAc;AACd,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,gBAAgB;AAChB,SAAS;AACT,mBAAmB;AACnB,8DAA8D;AAC9D,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,8BAA8B,EAC9B,sBAAsB;AACtB,qDAAqD;AACrD,mBAAmB;AAEnB,WAAW;AACX,gBAAgB;AAChB,eAAe;AACf,cAAc,EACd,UAAU;AACV,gBAAgB;AAChB,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB;AACtB,mBAAmB;AACnB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB;AACxB,YAAY;AACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,aAAa;AACb,oBAAoB;AACpB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB;AACtB,eAAe;AACf,OAAO,GACR,MAAM,YAAY,CAAC;AAGpB,gFAAgF;AAChF,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAa7B,iFAAiF;AACjF,OAAO,EACL,WAAW,EACX,YAAY,EACZ,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAM/B,gFAAgF;AAChF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE9D,iFAAiF;AACjF,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AAGvB,iFAAiF;AACjF,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAOrB,iFAAiF;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,QAAQ,EACR,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAG5B,iFAAiF;AACjF,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,QAAQ,EACR,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAWzB,iFAAiF;AACjF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGvE,gFAAgF;AAChF,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,wBAAwB;AACxB,2EAA2E;AAC3E,WAAW,EACX,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAMjC,gFAAgF;AAChF,OAAO,EACL,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAG9B,gFAAgF;AAChF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AASjC,gFAAgF;AAChF,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAQ9B,gFAAgF;AAChF,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAOlC,gFAAgF;AAChF,OAAO,EACL,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAMjC,gFAAgF;AAChF,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,uBAAuB,EACvB,sBAAsB,EACtB,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAWjC,gFAAgF;AAChF,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1E,gFAAgF;AAChF,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAQvE,iFAAiF;AACjF,OAAO,EACL,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,GAChB,MAAM,eAAe,CAAC;AAWvB,iFAAiF;AACjF,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,eAAe,EACf,WAAW,EACX,aAAa,GACd,MAAM,gBAAgB,CAAC;AAcxB,+EAA+E;AAC/E,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAGzE,iFAAiF;AACjF,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,uBAAuB,EACvB,qBAAqB,EACrB,YAAY,EACZ,uBAAuB,EACvB,mBAAmB,EACnB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAQ3B,gFAAgF;AAChF,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAMhC,gFAAgF;AAChF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AASzE,+EAA+E;AAC/E,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,MAAM,EACN,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAUrB,8EAA8E;AAC9E,OAAO,EACL,IAAI,EACJ,iBAAiB;AACjB,4DAA4D;AAC5D,WAAW,EACX,gBAAgB,GACjB,MAAM,WAAW,CAAC;AAUnB,8EAA8E;AAC9E,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAQpE,gFAAgF;AAChF,OAAO,EACL,aAAa,EACb,SAAS,EACT,WAAW,EACX,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AAGtB,gFAAgF;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAM/D,iFAAiF;AACjF,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,QAAQ,EACR,SAAS,GACV,MAAM,eAAe,CAAC;AAQvB,8EAA8E;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAOhE,8EAA8E;AAC9E,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAG1B,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,wEAAwE;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAE7B,6EAA6E;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,gFAAgF;AAChF,qEAAqE;AACrE,6EAA6E;AAC7E,0EAA0E;AAC1E,wEAAwE;AACxE,uEAAuE;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,aAAa,EACb,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAGzB,gFAAgF;AAChF,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,sEAAsE;AACtE,6EAA6E;AAC7E,EAAE;AACF,yEAAyE;AACzE,sFAAsF;AACtF,2EAA2E;AAC3E,yEAAyE;AACzE,qEAAqE;AACrE,OAAO,EACL,UAAU,IAAI,aAAa,EAC3B,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,IAAI,IAAI,cAAc;AAWtB,2BAA2B;AAC3B,kCAAkC,EAClC,mCAAmC,EACnC,wCAAwC,EACxC,oCAAoC,EACpC,oCAAoC,EACpC,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,wCAAwC,EACxC,mCAAmC,EACnC,iCAAiC,EACjC,8BAA8B,EAC9B,sCAAsC,EACtC,yBAAyB,EACzB,gCAAgC,EAChC,gCAAgC,EAChC,iCAAiC,EACjC,gCAAgC,EAChC,oCAAoC,EACpC,qCAAqC,EACrC,uCAAuC,EACvC,iCAAiC,EACjC,gCAAgC,EAChC,uCAAuC,EACvC,kCAAkC,EAClC,sCAAsC,EACtC,8BAA8B,EAC9B,uCAAuC,EACvC,gCAAgC,EAChC,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,EACtC,uCAAuC,EACvC,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,EACnC,+BAA+B,EAC/B,kCAAkC,EAClC,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,EAC3B,sCAAsC,EACtC,mCAAmC,EACnC,gCAAgC,EAChC,8BAA8B,EAC9B,8BAA8B,EAC9B,sCAAsC,EACtC,6BAA6B,GAC9B,MAAM,mBAAmB,CAAC;AA8C3B,gFAAgF;AAChF,+EAA+E;AAC/E,wEAAwE;AACxE,0EAA0E;AAC1E,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGtE,+EAA+E;AAC/E,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,EACb,oBAAoB,GACrB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,oCAAoC;AAEpC,iFAAiF;AACjF,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,cAAc,+BAA+B,CAAC;AAE9C,iFAAiF;AACjF,EAAE;AACF,oEAAoE;AACpE,8DAA8D;AAC9D,oEAAoE;AACpE,uEAAuE;AACvE,2EAA2E;AAC3E,4EAA4E;AAC5E,oEAAoE;AACpE,OAAO;AACL,UAAU;AACV,qBAAqB;AACrB,gBAAgB;AAChB,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB;AACjB,MAAM;AACN,YAAY,EAKZ,GAAG,EACH,UAAU,EACV,IAAI;AACJ,cAAc;AACd,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,gBAAgB;AAChB,SAAS;AACT,mBAAmB;AACnB,8DAA8D;AAC9D,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,8BAA8B,EAC9B,sBAAsB;AACtB,qDAAqD;AACrD,mBAAmB;AAEnB,WAAW;AACX,gBAAgB;AAChB,eAAe;AACf,cAAc,EACd,UAAU;AACV,gBAAgB;AAChB,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB;AACtB,mBAAmB;AACnB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB;AACxB,YAAY;AACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,aAAa;AACb,oBAAoB;AACpB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB;AACtB,eAAe;AACf,OAAO,GACR,MAAM,YAAY,CAAC;AAGpB,gFAAgF;AAChF,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAa7B,iFAAiF;AACjF,OAAO,EACL,WAAW,EACX,YAAY,EACZ,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAM/B,gFAAgF;AAChF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE9D,iFAAiF;AACjF,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AAGvB,iFAAiF;AACjF,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAOrB,iFAAiF;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,QAAQ,EACR,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAG5B,iFAAiF;AACjF,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,QAAQ,EACR,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAWzB,iFAAiF;AACjF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGvE,gFAAgF;AAChF,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,wBAAwB;AACxB,2EAA2E;AAC3E,WAAW,EACX,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAMjC,gFAAgF;AAChF,OAAO,EACL,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAG9B,gFAAgF;AAChF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AASjC,gFAAgF;AAChF,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAQ9B,gFAAgF;AAChF,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAOlC,gFAAgF;AAChF,OAAO,EACL,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAMjC,gFAAgF;AAChF,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,uBAAuB,EACvB,sBAAsB,EACtB,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAWjC,gFAAgF;AAChF,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1E,gFAAgF;AAChF,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAQvE,iFAAiF;AACjF,OAAO,EACL,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,GAChB,MAAM,eAAe,CAAC;AAWvB,iFAAiF;AACjF,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,eAAe,EACf,WAAW,EACX,aAAa,GACd,MAAM,gBAAgB,CAAC;AAcxB,+EAA+E;AAC/E,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAGzE,iFAAiF;AACjF,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,uBAAuB,EACvB,qBAAqB,EACrB,YAAY,EACZ,uBAAuB,EACvB,mBAAmB,EACnB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAQ3B,gFAAgF;AAChF,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAMhC,gFAAgF;AAChF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AASzE,+EAA+E;AAC/E,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,MAAM,EACN,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAUrB,8EAA8E;AAC9E,OAAO,EACL,IAAI,EACJ,iBAAiB;AACjB,4DAA4D;AAC5D,WAAW,EACX,gBAAgB,GACjB,MAAM,WAAW,CAAC;AAUnB,8EAA8E;AAC9E,+EAA+E;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAQnC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAQ/C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAQxE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAS7D,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAQpE,gFAAgF;AAChF,OAAO,EACL,aAAa,EACb,SAAS,EACT,WAAW,EACX,yBAAyB;AACzB,qEAAqE;AACrE,cAAc,EACd,iBAAiB,EACjB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AAQtB,+EAA+E;AAC/E,wEAAwE;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EACL,mBAAmB,GAEpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,yBAAyB,GAE1B,MAAM,qCAAqC,CAAC;AAE7C,+EAA+E;AAC/E,4EAA4E;AAC5E,yEAAyE;AACzE,sEAAsE;AACtE,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,GAErB,MAAM,aAAa,CAAC;AAErB,+EAA+E;AAC/E,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,WAAW,CAAC;AAEnB,gFAAgF;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAM/D,iFAAiF;AACjF,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,QAAQ,EACR,SAAS,GACV,MAAM,eAAe,CAAC;AAQvB,8EAA8E;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAOhE,8EAA8E;AAC9E,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAG1B,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,wEAAwE;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAE7B,6EAA6E;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,gFAAgF;AAChF,qEAAqE;AACrE,6EAA6E;AAC7E,0EAA0E;AAC1E,wEAAwE;AACxE,uEAAuE;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,aAAa,EACb,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAGzB,gFAAgF;AAChF,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,sEAAsE;AACtE,6EAA6E;AAC7E,EAAE;AACF,yEAAyE;AACzE,sFAAsF;AACtF,2EAA2E;AAC3E,yEAAyE;AACzE,qEAAqE;AACrE,mEAAmE;AACnE,qEAAqE;AACrE,oFAAoF;AACpF,6EAA6E;AAC7E,OAAO,EACL,UAAU,IAAI,aAAa,EAC3B,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,IAAI,IAAI,cAAc,GAWvB,MAAM,mBAAmB,CAAC;AA8C3B,gFAAgF;AAChF,+EAA+E;AAC/E,wEAAwE;AACxE,0EAA0E;AAC1E,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGtE,+EAA+E;AAC/E,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,EACb,oBAAoB,GACrB,MAAM,sBAAsB,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,77 @@
+/**
+ * SigilLogger — pluggable structured logger for `@usesigil/kit`.
+ *
+ * Every internal `console.warn` / `console.error` / `console.debug` in the
+ * SDK routes through an injected `SigilLogger`. Consumers embedding the
+ * SDK into their own application decide where that output goes — a
+ * Pino/Bunyan/Winston instance, an OpenTelemetry span, a custom appender,
+ * or the bundled `NOOP_LOGGER` that discards everything.
+ *
+ * Default behavior: `NOOP_LOGGER`. No output is emitted unless the
+ * consumer explicitly opts in. This matters because the SDK is embedded
+ * in TEE-signed agent workflows where stray stdout/stderr can leak
+ * sensitive fields (vault addresses, mint addresses, cap values) to
+ * unintended destinations.
+ *
+ * For local development and test suites, `createConsoleLogger()` returns
+ * a drop-in forwarder that emits to `console.*`.
+ *
+ * Rationale: see the plan in
+ * `.claude/worktrees/<wt>/Plans/recursive-snuggling-reddy.md` step A5.
+ * This replaces raw `console.*` calls scattered across 13 files.
+ */
+/** Structured logger interface. All methods are side-effect-only. */
+export interface SigilLogger {
+    /** Diagnostic messages — verbose, disabled by default. */
+    debug(message: string, context?: Record<string, unknown>): void;
+    /** Informational messages — nominal operational events. */
+    info(message: string, context?: Record<string, unknown>): void;
+    /** Warnings — unexpected but recoverable conditions. */
+    warn(message: string, context?: Record<string, unknown>): void;
+    /**
+     * Errors — failures the caller should know about. The `err` parameter
+     * is the originating exception, if any; it is logged separately from
+     * `context` to encourage structured-field reporting.
+     */
+    error(message: string, err?: unknown, context?: Record<string, unknown>): void;
+}
+/**
+ * `NOOP_LOGGER` — discards every log call. Exported as a `const` so
+ * consumers may pass it explicitly; also used internally as the fallback
+ * when a `SigilClient` / `OwnerClient` is constructed without a logger.
+ */
+export declare const NOOP_LOGGER: SigilLogger;
+/**
+ * `createConsoleLogger` — opt-in logger that forwards to `console.*`.
+ *
+ * Use in test suites and development when you want SDK output on stderr/
+ * stdout. Not the default, because production consumers should inject
+ * their own structured logger (pino, bunyan, otel, etc.) rather than
+ * rely on `console`.
+ */
+export declare function createConsoleLogger(): SigilLogger;
+/**
+ * Internal helper: if the caller supplied a logger, use it; otherwise
+ * return the no-op default. All public SDK entry points (SigilClient,
+ * OwnerClient, seal, shielded-fetch, etc.) should call this once during
+ * construction so the rest of the module can assume a non-null logger.
+ *
+ * Marked public so subpackages (dashboard, custody) can reuse the same
+ * resolution rule.
+ */
+export declare function resolveLogger(logger: SigilLogger | undefined): SigilLogger;
+/**
+ * Set the module-level logger used by leaf SDK utilities that don't
+ * accept a per-call logger parameter.
+ *
+ * Called by `SigilClient.create()` / `new SigilClient()` / `OwnerClient`
+ * constructors when `config.logger` is provided, so an application's
+ * chosen logger reaches every corner of the SDK.
+ */
+export declare function setSigilModuleLogger(logger: SigilLogger): void;
+/**
+ * Read the current module-level logger. Internal SDK sites that cannot
+ * thread a per-call logger should call this to emit warnings/errors.
+ */
+export declare function getSigilModuleLogger(): SigilLogger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,0DAA0D;IAC1D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,2DAA2D;IAC3D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,wDAAwD;IACxD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D;;;;OAIG;IACH,KAAK,CACH,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAAC;CACT;AAQD;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,WAKxB,CAAC;AAMH;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,WAAW,CA6CjD;AAMD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,CAE1E;AAuBD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAE9D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,WAAW,CAElD"}

package/dist/logger.js

@@ -0,0 +1,153 @@
+/**
+ * SigilLogger — pluggable structured logger for `@usesigil/kit`.
+ *
+ * Every internal `console.warn` / `console.error` / `console.debug` in the
+ * SDK routes through an injected `SigilLogger`. Consumers embedding the
+ * SDK into their own application decide where that output goes — a
+ * Pino/Bunyan/Winston instance, an OpenTelemetry span, a custom appender,
+ * or the bundled `NOOP_LOGGER` that discards everything.
+ *
+ * Default behavior: `NOOP_LOGGER`. No output is emitted unless the
+ * consumer explicitly opts in. This matters because the SDK is embedded
+ * in TEE-signed agent workflows where stray stdout/stderr can leak
+ * sensitive fields (vault addresses, mint addresses, cap values) to
+ * unintended destinations.
+ *
+ * For local development and test suites, `createConsoleLogger()` returns
+ * a drop-in forwarder that emits to `console.*`.
+ *
+ * Rationale: see the plan in
+ * `.claude/worktrees/<wt>/Plans/recursive-snuggling-reddy.md` step A5.
+ * This replaces raw `console.*` calls scattered across 13 files.
+ */
+// ---------------------------------------------------------------------------
+// NOOP logger — zero-output default
+// ---------------------------------------------------------------------------
+const noop = () => undefined;
+/**
+ * `NOOP_LOGGER` — discards every log call. Exported as a `const` so
+ * consumers may pass it explicitly; also used internally as the fallback
+ * when a `SigilClient` / `OwnerClient` is constructed without a logger.
+ */
+export const NOOP_LOGGER = Object.freeze({
+    debug: noop,
+    info: noop,
+    warn: noop,
+    error: noop,
+});
+// ---------------------------------------------------------------------------
+// Console logger — opt-in forwarder to `console.*`
+// ---------------------------------------------------------------------------
+/**
+ * `createConsoleLogger` — opt-in logger that forwards to `console.*`.
+ *
+ * Use in test suites and development when you want SDK output on stderr/
+ * stdout. Not the default, because production consumers should inject
+ * their own structured logger (pino, bunyan, otel, etc.) rather than
+ * rely on `console`.
+ */
+export function createConsoleLogger() {
+    return {
+        debug: (message, context) => {
+            if (context !== undefined) {
+                // eslint-disable-next-line no-console
+                console.debug(message, context);
+            }
+            else {
+                // eslint-disable-next-line no-console
+                console.debug(message);
+            }
+        },
+        info: (message, context) => {
+            if (context !== undefined) {
+                // eslint-disable-next-line no-console
+                console.info(message, context);
+            }
+            else {
+                // eslint-disable-next-line no-console
+                console.info(message);
+            }
+        },
+        warn: (message, context) => {
+            if (context !== undefined) {
+                // eslint-disable-next-line no-console
+                console.warn(message, context);
+            }
+            else {
+                // eslint-disable-next-line no-console
+                console.warn(message);
+            }
+        },
+        error: (message, err, context) => {
+            if (err !== undefined && context !== undefined) {
+                // eslint-disable-next-line no-console
+                console.error(message, err, context);
+            }
+            else if (err !== undefined) {
+                // eslint-disable-next-line no-console
+                console.error(message, err);
+            }
+            else if (context !== undefined) {
+                // eslint-disable-next-line no-console
+                console.error(message, context);
+            }
+            else {
+                // eslint-disable-next-line no-console
+                console.error(message);
+            }
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// resolveLogger — internal helper for SDK entry points
+// ---------------------------------------------------------------------------
+/**
+ * Internal helper: if the caller supplied a logger, use it; otherwise
+ * return the no-op default. All public SDK entry points (SigilClient,
+ * OwnerClient, seal, shielded-fetch, etc.) should call this once during
+ * construction so the rest of the module can assume a non-null logger.
+ *
+ * Marked public so subpackages (dashboard, custody) can reuse the same
+ * resolution rule.
+ */
+export function resolveLogger(logger) {
+    return logger ?? NOOP_LOGGER;
+}
+// ---------------------------------------------------------------------------
+// Module-level logger — leaf-utility fallback
+// ---------------------------------------------------------------------------
+//
+// Some SDK internals (walk(), alt-loader, balance-tracker, dashboard
+// reads, etc.) are called from deep in the stack where threading a
+// per-call `logger` argument would require signature changes across
+// many consumers. For these sites, the SDK uses a module-level logger
+// that SigilClient / OwnerClient constructors set from config.logger
+// during initialization.
+//
+// Default: NOOP_LOGGER — nothing is emitted until a consumer opts in.
+//
+// Trade-off: this is module-local mutable state. Tests that want to
+// observe warnings should call `setSigilModuleLogger` in `beforeEach`
+// and reset with `setSigilModuleLogger(NOOP_LOGGER)` in `afterEach`.
+// The state is process-wide, so parallel test suites must NOT share a
+// worker unless all cooperate on the reset.
+let _sigilModuleLogger = NOOP_LOGGER;
+/**
+ * Set the module-level logger used by leaf SDK utilities that don't
+ * accept a per-call logger parameter.
+ *
+ * Called by `SigilClient.create()` / `new SigilClient()` / `OwnerClient`
+ * constructors when `config.logger` is provided, so an application's
+ * chosen logger reaches every corner of the SDK.
+ */
+export function setSigilModuleLogger(logger) {
+    _sigilModuleLogger = logger;
+}
+/**
+ * Read the current module-level logger. Internal SDK sites that cannot
+ * thread a per-call logger should call this to emit warnings/errors.
+ */
+export function getSigilModuleLogger() {
+    return _sigilModuleLogger;
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAsBH,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,IAAI,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;AAEnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAgB,MAAM,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;CACZ,CAAC,CAAC;AAEH,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YAC1B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YACzB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YACzB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;YAC/B,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC/C,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACvC,CAAC;iBAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC7B,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC9B,CAAC;iBAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,MAA+B;IAC3D,OAAO,MAAM,IAAI,WAAW,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;AAC9E,EAAE;AACF,qEAAqE;AACrE,mEAAmE;AACnE,oEAAoE;AACpE,sEAAsE;AACtE,qEAAqE;AACrE,yBAAyB;AACzB,EAAE;AACF,sEAAsE;AACtE,EAAE;AACF,oEAAoE;AACpE,sEAAsE;AACtE,qEAAqE;AACrE,sEAAsE;AACtE,4CAA4C;AAE5C,IAAI,kBAAkB,GAAgB,WAAW,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,kBAAkB,GAAG,MAAM,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,kBAAkB,CAAC;AAC5B,CAAC"}

package/dist/plugin.d.ts

@@ -0,0 +1,110 @@
+/**
+ * SigilPolicyPlugin — consumer-supplied policy checks that run inside
+ * the `seal()` pre-flight.
+ *
+ * Plugins are the **rejection surface** of the SDK — distinct from
+ * `SealHooks`, which are observe-only. A plugin's `check()` returns
+ * either `{ allow: true }` or `{ allow: false, reason, code? }`; the
+ * first rejection short-circuits and `seal()` throws
+ * `SigilSdkDomainError(SIGIL_ERROR__SDK__PLUGIN_REJECTED)`.
+ *
+ * Run order inside `seal()`:
+ *   1. Parameter validation (basic shape checks)
+ *   2. `hooks.onBeforeBuild` — may abort cleanly via `{ skipSeal: true }`
+ *   3. **Plugin checks** — first `{ allow: false }` throws
+ *   4. `resolveVaultState` + capability check + constraint check
+ *   5. Transaction assembly
+ *
+ * Plugins see the vault's resolved on-chain state if they need it, but
+ * they MUST NOT perform their own RPC calls — they receive the
+ * pre-resolved state as context. Async plugin `check()` is supported
+ * for cases where the plugin delegates to an external service
+ * (feature-flag servers, compliance APIs) but the plugin runner will
+ * log a warning if any plugin takes >1s.
+ *
+ * Consumer-supplied logger + hooks still fire around plugin execution
+ * (a rejecting plugin triggers `onError` before the throw propagates).
+ */
+import type { Address, Instruction } from "./kit-adapter.js";
+import type { SigilSdkErrorCode } from "./errors/codes.js";
+/**
+ * Read-only data surface passed to every plugin `check()` call. The
+ * plugin runner populates this once per `seal()` invocation and shares
+ * it across all plugins; plugins must treat everything as immutable.
+ */
+export interface PluginContext {
+    readonly vault: Address;
+    readonly agent: Address;
+    readonly tokenMint: Address;
+    readonly amount: bigint;
+    readonly network: "devnet" | "mainnet";
+    readonly instructions: readonly Instruction[];
+    /** Stable ID for this `seal()` invocation — matches `SealHookContext.correlationId`. */
+    readonly correlationId: string;
+}
+/**
+ * Successful plugin check. May carry advisory metadata that downstream
+ * plugins or hooks can observe via `SealHooks.onBeforeSign`.
+ */
+export interface PluginAllow {
+    readonly allow: true;
+    /** Optional metadata (flag names, rule IDs, etc.) for downstream visibility. */
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+/**
+ * Rejection result. `reason` must be a human-readable string; `code`
+ * is optional but recommended for machine-readable catch blocks.
+ */
+export interface PluginReject {
+    readonly allow: false;
+    readonly reason: string;
+    readonly code?: SigilSdkErrorCode;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export type PluginResult = PluginAllow | PluginReject;
+export interface SigilPolicyPlugin {
+    /**
+     * Display name used in logs + the rejection error's context. Must be
+     * unique per plugin instance — the runner enforces this via config
+     * validation.
+     */
+    readonly name: string;
+    /**
+     * Observe-only lifecycle: called once when the plugin is registered
+     * on a `SigilClient` / `Sigil` facade. Use for opening connections,
+     * prewarming caches, etc. Throws during init fail the client
+     * construction with `SIGIL_ERROR__SDK__INVALID_CONFIG`.
+     */
+    readonly init?: () => void | Promise<void>;
+    /**
+     * Policy check. Returns `{ allow: true }` to continue or
+     * `{ allow: false, reason, code? }` to reject. Must not throw under
+     * normal operation — the plugin runner treats a throw as a hard
+     * rejection with the error message as the reason.
+     */
+    check(ctx: PluginContext): PluginResult | Promise<PluginResult>;
+}
+/**
+ * Run every plugin's `check()` in registration order. Returns on the
+ * first rejection with a `SigilSdkDomainError`; otherwise returns
+ * successfully. Plugins that take >1 second log a warning via the
+ * module logger.
+ *
+ * Throws:
+ *   - `SigilSdkDomainError(SIGIL_ERROR__SDK__PLUGIN_REJECTED)` on first
+ *     plugin that returns `{ allow: false }` OR throws.
+ *
+ * @internal — consumers invoke this via `seal()` / `SigilClient`.
+ */
+export declare function runPlugins(plugins: readonly SigilPolicyPlugin[] | undefined, ctx: PluginContext): Promise<void>;
+/**
+ * Validate a plugin list at client-construction time. Rejects:
+ *   - Non-array input
+ *   - Duplicate plugin names
+ *   - Plugins without `name` or `check`
+ *
+ * Called by `createSigilClient` / `Sigil.quickstart` / `Sigil.fromVault`
+ * when `config.plugins` is present.
+ */
+export declare function validatePluginList(plugins: unknown): asserts plugins is readonly SigilPolicyPlugin[];
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAU3D;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9C,wFAAwF;IACxF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAID;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;AAItD,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3C;;;;;OAKG;IACH,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACjE;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,EACjD,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAiDf;AAID;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,OAAO,IAAI,SAAS,iBAAiB,EAAE,CA+CjD"}

package/dist/plugin.js

@@ -0,0 +1,119 @@
+/**
+ * SigilPolicyPlugin — consumer-supplied policy checks that run inside
+ * the `seal()` pre-flight.
+ *
+ * Plugins are the **rejection surface** of the SDK — distinct from
+ * `SealHooks`, which are observe-only. A plugin's `check()` returns
+ * either `{ allow: true }` or `{ allow: false, reason, code? }`; the
+ * first rejection short-circuits and `seal()` throws
+ * `SigilSdkDomainError(SIGIL_ERROR__SDK__PLUGIN_REJECTED)`.
+ *
+ * Run order inside `seal()`:
+ *   1. Parameter validation (basic shape checks)
+ *   2. `hooks.onBeforeBuild` — may abort cleanly via `{ skipSeal: true }`
+ *   3. **Plugin checks** — first `{ allow: false }` throws
+ *   4. `resolveVaultState` + capability check + constraint check
+ *   5. Transaction assembly
+ *
+ * Plugins see the vault's resolved on-chain state if they need it, but
+ * they MUST NOT perform their own RPC calls — they receive the
+ * pre-resolved state as context. Async plugin `check()` is supported
+ * for cases where the plugin delegates to an external service
+ * (feature-flag servers, compliance APIs) but the plugin runner will
+ * log a warning if any plugin takes >1s.
+ *
+ * Consumer-supplied logger + hooks still fire around plugin execution
+ * (a rejecting plugin triggers `onError` before the throw propagates).
+ */
+import { SigilSdkDomainError } from "./errors/sdk.js";
+import { SIGIL_ERROR__SDK__PLUGIN_REJECTED, SIGIL_ERROR__SDK__INVALID_CONFIG, } from "./errors/codes.js";
+import { getSigilModuleLogger } from "./logger.js";
+// ─── Plugin runner ──────────────────────────────────────────────────────────
+/**
+ * Run every plugin's `check()` in registration order. Returns on the
+ * first rejection with a `SigilSdkDomainError`; otherwise returns
+ * successfully. Plugins that take >1 second log a warning via the
+ * module logger.
+ *
+ * Throws:
+ *   - `SigilSdkDomainError(SIGIL_ERROR__SDK__PLUGIN_REJECTED)` on first
+ *     plugin that returns `{ allow: false }` OR throws.
+ *
+ * @internal — consumers invoke this via `seal()` / `SigilClient`.
+ */
+export async function runPlugins(plugins, ctx) {
+    if (!plugins || plugins.length === 0)
+        return;
+    for (const plugin of plugins) {
+        const start = Date.now();
+        let result;
+        try {
+            result = await plugin.check(ctx);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err ?? "unknown");
+            throw new SigilSdkDomainError(SIGIL_ERROR__SDK__PLUGIN_REJECTED, `Plugin "${plugin.name}" threw during check(): ${message}`, {
+                cause: err,
+                context: {
+                    plugin: plugin.name,
+                    reason: message,
+                    correlationId: ctx.correlationId,
+                },
+            });
+        }
+        const elapsedMs = Date.now() - start;
+        if (elapsedMs > 1000) {
+            getSigilModuleLogger().warn(`[SigilPolicyPlugin] "${plugin.name}" took ${elapsedMs}ms — plugin checks should be fast`, { plugin: plugin.name, elapsedMs });
+        }
+        if (!result.allow) {
+            throw new SigilSdkDomainError(SIGIL_ERROR__SDK__PLUGIN_REJECTED, `Plugin "${plugin.name}" rejected the operation: ${result.reason}`, {
+                context: {
+                    plugin: plugin.name,
+                    reason: result.reason,
+                    code: result.code,
+                    metadata: result.metadata,
+                    correlationId: ctx.correlationId,
+                },
+            });
+        }
+    }
+}
+// ─── Plugin list validation ─────────────────────────────────────────────────
+/**
+ * Validate a plugin list at client-construction time. Rejects:
+ *   - Non-array input
+ *   - Duplicate plugin names
+ *   - Plugins without `name` or `check`
+ *
+ * Called by `createSigilClient` / `Sigil.quickstart` / `Sigil.fromVault`
+ * when `config.plugins` is present.
+ */
+export function validatePluginList(plugins) {
+    if (!Array.isArray(plugins)) {
+        throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_CONFIG, `SigilClientConfig.plugins must be an array of SigilPolicyPlugin (received ${typeof plugins})`, { context: { field: "plugins", expected: "SigilPolicyPlugin[]" } });
+    }
+    const names = new Set();
+    for (let i = 0; i < plugins.length; i++) {
+        const p = plugins[i];
+        if (!p || typeof p !== "object") {
+            throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_CONFIG, `Plugin at index ${i} is not an object (received ${typeof p})`, { context: { field: `plugins[${i}]`, expected: "object" } });
+        }
+        const pluginObj = p;
+        if (typeof pluginObj.name !== "string" || pluginObj.name.length === 0) {
+            throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_CONFIG, `Plugin at index ${i} is missing a non-empty string "name"`, { context: { field: `plugins[${i}].name`, expected: "string" } });
+        }
+        if (typeof pluginObj.check !== "function") {
+            throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_CONFIG, `Plugin "${pluginObj.name}" is missing a check() function`, {
+                context: {
+                    field: `plugins[${pluginObj.name}].check`,
+                    expected: "function",
+                },
+            });
+        }
+        if (names.has(pluginObj.name)) {
+            throw new SigilSdkDomainError(SIGIL_ERROR__SDK__INVALID_CONFIG, `Duplicate plugin name "${pluginObj.name}" — plugin names must be unique per client`, { context: { field: "plugins[].name", expected: "unique" } });
+        }
+        names.add(pluginObj.name);
+    }
+}
+//# sourceMappingURL=plugin.js.map

package/dist/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EACL,iCAAiC,EACjC,gCAAgC,GACjC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAwEnD,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAiD,EACjD,GAAkB;IAElB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE7C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC;YAChE,MAAM,IAAI,mBAAmB,CAC3B,iCAAiC,EACjC,WAAW,MAAM,CAAC,IAAI,2BAA2B,OAAO,EAAE,EAC1D;gBACE,KAAK,EAAE,GAAG;gBACV,OAAO,EAAE;oBACP,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,MAAM,EAAE,OAAO;oBACf,aAAa,EAAE,GAAG,CAAC,aAAa;iBACjC;aACF,CACF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACrC,IAAI,SAAS,GAAG,IAAI,EAAE,CAAC;YACrB,oBAAoB,EAAE,CAAC,IAAI,CACzB,wBAAwB,MAAM,CAAC,IAAI,UAAU,SAAS,mCAAmC,EACzF,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,CACnC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAC3B,iCAAiC,EACjC,WAAW,MAAM,CAAC,IAAI,6BAA6B,MAAM,CAAC,MAAM,EAAE,EAClE;gBACE,OAAO,EAAE;oBACP,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,aAAa,EAAE,GAAG,CAAC,aAAa;iBACjC;aACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAgB;IAEhB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,6EAA6E,OAAO,OAAO,GAAG,EAC9F,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,qBAAqB,EAAE,EAAE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,mBAAmB,CAAC,+BAA+B,OAAO,CAAC,GAAG,EAC9D,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAC5D,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,CAA+B,CAAC;QAClD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,mBAAmB,CAAC,uCAAuC,EAC3D,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1C,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,WAAW,SAAS,CAAC,IAAI,iCAAiC,EAC1D;gBACE,OAAO,EAAE;oBACP,KAAK,EAAE,WAAW,SAAS,CAAC,IAAI,SAAS;oBACzC,QAAQ,EAAE,UAAU;iBACrB;aACF,CACF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,EAChC,0BAA0B,SAAS,CAAC,IAAI,4CAA4C,EACpF,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}