@zodiac-os/sdk 1.2.0 → 1.4.0

package/README.md

@@ -99,6 +99,40 @@ const newRoles = eth.roles['New Roles']({
 })
 ```
 
+### Canonical Roles mods
+
+Every Safe has a canonical Roles mod hosting policies applied through the app. When you use the Safe label on the `roles` accessor, it resolves to that Safe's canonical Roles mod automatically.
+
+```ts
+// Enable roles on an existing Safe in your org
+const daoRoles = eth.roles['GG DAO']({
+  roles: [
+    /* ... */
+  ],
+})
+```
+
+### Circular references between new nodes
+
+New nodes can reference each other before either has been invoked — use the uninvoked factory as a forward reference:
+
+```ts
+const safe = eth.safe['New Safe']({
+  nonce: 0n,
+  threshold: 1,
+  owners: [eth.user['Alice Sample']],
+  // Forward reference to a Roles mod that doesn't exist yet
+  modules: [eth.roles['New Roles']],
+})
+
+const roles = eth.roles['New Roles']({
+  nonce: 0n,
+  target: safe,
+})
+```
+
+References are resolved by label at `apply()` time, so both sides of the cycle must be included in the call.
+
 ### Referencing users
 
 `eth.user[handle]` resolves a user to their personal Safe address on the current chain:

package/dist/allow/index.d.mts

@@ -0,0 +1,2 @@
+import { a as EVERYTHING, c as Scoping, i as ConditionFunction, l as TargetPermission, n as ChainPrefix, o as FunctionPermission, r as chainIdFor, s as Options, t as CHAIN_IDS, u as buildAllowKit } from "../index-DTBaxN7b.mjs";
+export { CHAIN_IDS, ChainPrefix, ConditionFunction, EVERYTHING, FunctionPermission, Options, Scoping, TargetPermission, buildAllowKit, chainIdFor };

package/dist/allow/index.mjs

@@ -0,0 +1,3 @@
+import { n as chainIdFor, t as CHAIN_IDS } from "../networks-BTW1qAAa.mjs";
+import { n as EVERYTHING, t as buildAllowKit } from "../allow-Dzh6t_l8.mjs";
+export { CHAIN_IDS, EVERYTHING, buildAllowKit, chainIdFor };

package/dist/allow-Dzh6t_l8.mjs

@@ -0,0 +1,122 @@
+import { a as walkContracts, i as readAbi } from "./networks-BTW1qAAa.mjs";
+import { c, coercePermission } from "zodiac-roles-sdk";
+import { Interface, isError } from "ethers";
+import { Operator, ParameterType } from "zodiac-roles-deployments";
+//#region src/allow/types.ts
+const EVERYTHING = Symbol.for("@zodiac-os/allow-kit/EVERYTHING");
+//#endregion
+//#region src/allow/runtime.ts
+function buildAllowKit(abisDir, contractsConfig) {
+	const kit = {};
+	for (const node of walkContracts(contractsConfig)) {
+		const abi = readAbi(abisDir, node);
+		if (!abi) {
+			attachAt(kit, [node.chain, ...node.segments], missingAbiProxy(node));
+			continue;
+		}
+		attachAt(kit, [node.chain, ...node.segments], makeAllowContract(node.address, abi));
+	}
+	return kit;
+}
+function attachAt(root, segments, value) {
+	let cursor = root;
+	for (let i = 0; i < segments.length - 1; i++) {
+		const seg = segments[i];
+		if (!(seg in cursor)) cursor[seg] = {};
+		cursor = cursor[seg];
+	}
+	cursor[segments[segments.length - 1]] = value;
+}
+function missingAbiProxy(node) {
+	const explain = () => {
+		throw new Error(`ABI missing for ${node.chain}.${node.segments.join(".")} (${node.address}). Run \`zodiac-os pull-contracts\` to fetch it, or paste the ABI JSON manually at <abisDir>/${node.chain}/${node.segments.join("/")}.json`);
+	};
+	return new Proxy({}, {
+		get: explain,
+		has: explain
+	});
+}
+function makeAllowContract(address, abi) {
+	const iface = Interface.from(abi);
+	const lowerAddr = address.toLowerCase();
+	const allowEverything = (options) => ({
+		targetAddress: lowerAddr,
+		send: options?.send,
+		delegatecall: options?.delegatecall
+	});
+	const has = (name) => {
+		try {
+			const fn = iface.getFunction(name);
+			if (!fn) return false;
+			return fn.stateMutability !== "view" && fn.stateMutability !== "pure";
+		} catch (error) {
+			if (!isError(error, "INVALID_ARGUMENT")) throw error;
+			return false;
+		}
+	};
+	return new Proxy({}, {
+		get: (_target, prop) => {
+			if (prop === EVERYTHING) return allowEverything;
+			if (typeof prop !== "string") return void 0;
+			if (!has(prop)) return void 0;
+			return makeAllowFunction(iface.getFunction(prop), lowerAddr);
+		},
+		has: (_target, prop) => {
+			if (prop === EVERYTHING) return true;
+			return typeof prop === "string" && has(prop);
+		}
+	});
+}
+function makeAllowFunction(fn, targetAddress) {
+	const inputs = fn.inputs;
+	return (...args) => {
+		const scopings = args.slice(0, inputs.length);
+		const hasScopings = scopings.some((s) => s !== void 0 && s !== null);
+		const options = args[inputs.length] ?? {};
+		const condition = hasScopings ? c.calldataMatches(scopings, inputs)() : void 0;
+		return applyOptions(coercePermission({
+			targetAddress,
+			signature: fn.format("sighash"),
+			condition
+		}), options);
+	};
+}
+const emptyCalldataMatches = {
+	paramType: ParameterType.Calldata,
+	operator: Operator.Matches,
+	children: []
+};
+const applyGlobalAllowance = (condition, allowanceCondition) => {
+	const base = condition ?? emptyCalldataMatches;
+	if (base.paramType !== ParameterType.Calldata || base.operator !== Operator.Matches) throw new Error("Global allowance can only be applied to calldata matches nodes");
+	return {
+		...base,
+		children: [...base.children ?? [], allowanceCondition]
+	};
+};
+const applyOptions = (permission, options) => {
+	let condition = permission.condition;
+	if (options.etherWithinAllowance) {
+		if (!options.send) throw new Error("`etherWithinAllowance` can only be used if `send` is allowed");
+		condition = applyGlobalAllowance(condition, {
+			paramType: ParameterType.None,
+			operator: Operator.EtherWithinAllowance,
+			compValue: options.etherWithinAllowance
+		});
+	}
+	if (options.callWithinAllowance) condition = applyGlobalAllowance(condition, {
+		paramType: ParameterType.None,
+		operator: Operator.CallWithinAllowance,
+		compValue: options.callWithinAllowance
+	});
+	return {
+		...permission,
+		send: options.send,
+		delegatecall: options.delegatecall,
+		condition
+	};
+};
+//#endregion
+export { EVERYTHING as n, buildAllowKit as t };
+
+//# sourceMappingURL=allow-Dzh6t_l8.mjs.map

package/dist/allow-Dzh6t_l8.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow-Dzh6t_l8.mjs","names":[],"sources":["../src/allow/types.ts","../src/allow/runtime.ts"],"sourcesContent":["import type { BigNumberish, BytesLike, ParamType } from 'ethers'\nimport type {\n  Condition,\n  FunctionPermission,\n  TargetPermission,\n} from 'zodiac-roles-sdk'\n\nexport type Options = {\n  send?: boolean\n  delegatecall?: boolean\n  etherWithinAllowance?: `0x${string}`\n  callWithinAllowance?: `0x${string}`\n}\n\nexport type PrimitiveValue = BigNumberish | BytesLike | string | boolean\n\n// Signature matches `zodiac-roles-sdk` so values from `c.*` are assignable.\nexport type ConditionFunction<T = unknown> = (\n  abiType: ParamType,\n  _?: T\n) => Condition\n\ntype RequireAtLeastOne<T> = {\n  [K in keyof T]-?: Required<Pick<T, K>> & Partial<Pick<T, Exclude<keyof T, K>>>\n}[keyof T]\n\ntype ArrayElement<T extends readonly unknown[]> = T extends readonly (infer U)[]\n  ? U\n  : never\n\nexport type PrimitiveScoping<T extends PrimitiveValue> =\n  | T\n  | ConditionFunction<T>\n\nexport type ArrayScoping<T extends readonly any[]> =\n  | readonly Scoping<ArrayElement<T>>[]\n  | ConditionFunction<T>\n\nexport type StructScoping<T extends { [key: string]: any }> =\n  | RequireAtLeastOne<{ [K in keyof T]?: Scoping<T[K]> }>\n  | ConditionFunction<T>\n\nexport type Scoping<T> = T extends PrimitiveValue\n  ? PrimitiveScoping<T>\n  : T extends readonly any[]\n    ? ArrayScoping<T>\n    : T extends { [key: string]: any }\n      ? StructScoping<T>\n      : unknown\n\nexport type { FunctionPermission, TargetPermission }\n\nexport const EVERYTHING = Symbol.for('@zodiac-os/allow-kit/EVERYTHING')\nexport type EVERYTHING = typeof EVERYTHING\n","import { Interface, FunctionFragment, isError, type InterfaceAbi } from 'ethers'\nimport { c, coercePermission } from 'zodiac-roles-sdk'\nimport type {\n  Condition,\n  FunctionPermission,\n  TargetPermission,\n} from 'zodiac-roles-sdk'\nimport { ParameterType, Operator } from 'zodiac-roles-deployments'\nimport { readAbi, walkContracts, type ContractNode } from './abi'\nimport { EVERYTHING, type Options } from './types'\n\nexport function buildAllowKit(\n  abisDir: string,\n  contractsConfig: Record<string, any>\n): Record<string, any> {\n  const kit: Record<string, any> = {}\n  for (const node of walkContracts(contractsConfig)) {\n    const abi = readAbi(abisDir, node)\n    if (!abi) {\n      // Defer the error until the user touches this contract — otherwise an\n      // ABI missing for one chain crashes all unrelated role definitions.\n      attachAt(kit, [node.chain, ...node.segments], missingAbiProxy(node))\n      continue\n    }\n    attachAt(\n      kit,\n      [node.chain, ...node.segments],\n      makeAllowContract(node.address, abi as InterfaceAbi)\n    )\n  }\n  return kit\n}\n\nfunction attachAt(root: Record<string, any>, segments: string[], value: any) {\n  let cursor = root\n  for (let i = 0; i < segments.length - 1; i++) {\n    const seg = segments[i]!\n    if (!(seg in cursor)) cursor[seg] = {}\n    cursor = cursor[seg]\n  }\n  cursor[segments[segments.length - 1]!] = value\n}\n\nfunction missingAbiProxy(node: ContractNode) {\n  const explain = () => {\n    throw new Error(\n      `ABI missing for ${node.chain}.${node.segments.join('.')} ` +\n        `(${node.address}). Run \\`zodiac-os pull-contracts\\` to fetch it, or ` +\n        `paste the ABI JSON manually at <abisDir>/${node.chain}/${node.segments.join('/')}.json`\n    )\n  }\n  return new Proxy(\n    {},\n    {\n      get: explain,\n      has: explain,\n    }\n  )\n}\n\nfunction makeAllowContract(\n  address: `0x${string}`,\n  abi: InterfaceAbi\n): Record<string | symbol, any> {\n  const iface = Interface.from(abi)\n  const lowerAddr = address.toLowerCase() as `0x${string}`\n\n  const allowEverything = (options?: Options): TargetPermission => ({\n    targetAddress: lowerAddr,\n    send: options?.send,\n    delegatecall: options?.delegatecall,\n  })\n\n  const has = (name: string) => {\n    try {\n      const fn = iface.getFunction(name)\n      if (!fn) return false\n      return fn.stateMutability !== 'view' && fn.stateMutability !== 'pure'\n    } catch (error) {\n      if (!isError(error as any, 'INVALID_ARGUMENT')) throw error\n      return false\n    }\n  }\n\n  return new Proxy(\n    {},\n    {\n      get: (_target, prop) => {\n        if (prop === EVERYTHING) return allowEverything\n        if (typeof prop !== 'string') return undefined\n        if (!has(prop)) return undefined\n        const fn = iface.getFunction(prop)!\n        return makeAllowFunction(fn, lowerAddr)\n      },\n      has: (_target, prop) => {\n        if (prop === EVERYTHING) return true\n        return typeof prop === 'string' && has(prop)\n      },\n    }\n  )\n}\n\nfunction makeAllowFunction(\n  fn: FunctionFragment,\n  targetAddress: `0x${string}`\n): (...args: any[]) => FunctionPermission {\n  const inputs = fn.inputs\n  return (...args: any[]) => {\n    const scopings = args.slice(0, inputs.length)\n    const hasScopings = scopings.some((s) => s !== undefined && s !== null)\n    const options: Options = args[inputs.length] ?? {}\n    const condition = hasScopings\n      ? c.calldataMatches(scopings, inputs)()\n      : undefined\n    const preset = {\n      targetAddress,\n      signature: fn.format('sighash'),\n      condition,\n    }\n    return applyOptions(coercePermission(preset as any) as any, options)\n  }\n}\n\nconst emptyCalldataMatches: Condition = {\n  paramType: ParameterType.Calldata,\n  operator: Operator.Matches,\n  children: [],\n}\n\nconst applyGlobalAllowance = (\n  condition: Condition | undefined,\n  allowanceCondition: Condition\n): Condition => {\n  const base = condition ?? emptyCalldataMatches\n  if (\n    base.paramType !== ParameterType.Calldata ||\n    base.operator !== Operator.Matches\n  ) {\n    throw new Error(\n      'Global allowance can only be applied to calldata matches nodes'\n    )\n  }\n  return {\n    ...base,\n    children: [...(base.children ?? []), allowanceCondition],\n  }\n}\n\nconst applyOptions = (\n  permission: FunctionPermission & { condition?: Condition },\n  options: Options\n): FunctionPermission => {\n  let condition = permission.condition\n  if (options.etherWithinAllowance) {\n    if (!options.send) {\n      throw new Error(\n        '`etherWithinAllowance` can only be used if `send` is allowed'\n      )\n    }\n    condition = applyGlobalAllowance(condition, {\n      paramType: ParameterType.None,\n      operator: Operator.EtherWithinAllowance,\n      compValue: options.etherWithinAllowance,\n    })\n  }\n  if (options.callWithinAllowance) {\n    condition = applyGlobalAllowance(condition, {\n      paramType: ParameterType.None,\n      operator: Operator.CallWithinAllowance,\n      compValue: options.callWithinAllowance,\n    })\n  }\n  return {\n    ...permission,\n    send: options.send,\n    delegatecall: options.delegatecall,\n    condition,\n  }\n}\n"],"mappings":";;;;;AAoDA,MAAa,aAAa,OAAO,IAAI,kCAAkC;;;ACzCvE,SAAgB,cACd,SACA,iBACqB;CACrB,MAAM,MAA2B,EAAE;AACnC,MAAK,MAAM,QAAQ,cAAc,gBAAgB,EAAE;EACjD,MAAM,MAAM,QAAQ,SAAS,KAAK;AAClC,MAAI,CAAC,KAAK;AAGR,YAAS,KAAK,CAAC,KAAK,OAAO,GAAG,KAAK,SAAS,EAAE,gBAAgB,KAAK,CAAC;AACpE;;AAEF,WACE,KACA,CAAC,KAAK,OAAO,GAAG,KAAK,SAAS,EAC9B,kBAAkB,KAAK,SAAS,IAAoB,CACrD;;AAEH,QAAO;;AAGT,SAAS,SAAS,MAA2B,UAAoB,OAAY;CAC3E,IAAI,SAAS;AACb,MAAK,IAAI,IAAI,GAAG,IAAI,SAAS,SAAS,GAAG,KAAK;EAC5C,MAAM,MAAM,SAAS;AACrB,MAAI,EAAE,OAAO,QAAS,QAAO,OAAO,EAAE;AACtC,WAAS,OAAO;;AAElB,QAAO,SAAS,SAAS,SAAS,MAAO;;AAG3C,SAAS,gBAAgB,MAAoB;CAC3C,MAAM,gBAAgB;AACpB,QAAM,IAAI,MACR,mBAAmB,KAAK,MAAM,GAAG,KAAK,SAAS,KAAK,IAAI,CAAC,IACnD,KAAK,QAAQ,+FAC2B,KAAK,MAAM,GAAG,KAAK,SAAS,KAAK,IAAI,CAAC,OACrF;;AAEH,QAAO,IAAI,MACT,EAAE,EACF;EACE,KAAK;EACL,KAAK;EACN,CACF;;AAGH,SAAS,kBACP,SACA,KAC8B;CAC9B,MAAM,QAAQ,UAAU,KAAK,IAAI;CACjC,MAAM,YAAY,QAAQ,aAAa;CAEvC,MAAM,mBAAmB,aAAyC;EAChE,eAAe;EACf,MAAM,SAAS;EACf,cAAc,SAAS;EACxB;CAED,MAAM,OAAO,SAAiB;AAC5B,MAAI;GACF,MAAM,KAAK,MAAM,YAAY,KAAK;AAClC,OAAI,CAAC,GAAI,QAAO;AAChB,UAAO,GAAG,oBAAoB,UAAU,GAAG,oBAAoB;WACxD,OAAO;AACd,OAAI,CAAC,QAAQ,OAAc,mBAAmB,CAAE,OAAM;AACtD,UAAO;;;AAIX,QAAO,IAAI,MACT,EAAE,EACF;EACE,MAAM,SAAS,SAAS;AACtB,OAAI,SAAS,WAAY,QAAO;AAChC,OAAI,OAAO,SAAS,SAAU,QAAO,KAAA;AACrC,OAAI,CAAC,IAAI,KAAK,CAAE,QAAO,KAAA;AAEvB,UAAO,kBADI,MAAM,YAAY,KAAK,EACL,UAAU;;EAEzC,MAAM,SAAS,SAAS;AACtB,OAAI,SAAS,WAAY,QAAO;AAChC,UAAO,OAAO,SAAS,YAAY,IAAI,KAAK;;EAE/C,CACF;;AAGH,SAAS,kBACP,IACA,eACwC;CACxC,MAAM,SAAS,GAAG;AAClB,SAAQ,GAAG,SAAgB;EACzB,MAAM,WAAW,KAAK,MAAM,GAAG,OAAO,OAAO;EAC7C,MAAM,cAAc,SAAS,MAAM,MAAM,MAAM,KAAA,KAAa,MAAM,KAAK;EACvE,MAAM,UAAmB,KAAK,OAAO,WAAW,EAAE;EAClD,MAAM,YAAY,cACd,EAAE,gBAAgB,UAAU,OAAO,EAAE,GACrC,KAAA;AAMJ,SAAO,aAAa,iBALL;GACb;GACA,WAAW,GAAG,OAAO,UAAU;GAC/B;GACD,CACkD,EAAS,QAAQ;;;AAIxE,MAAM,uBAAkC;CACtC,WAAW,cAAc;CACzB,UAAU,SAAS;CACnB,UAAU,EAAE;CACb;AAED,MAAM,wBACJ,WACA,uBACc;CACd,MAAM,OAAO,aAAa;AAC1B,KACE,KAAK,cAAc,cAAc,YACjC,KAAK,aAAa,SAAS,QAE3B,OAAM,IAAI,MACR,iEACD;AAEH,QAAO;EACL,GAAG;EACH,UAAU,CAAC,GAAI,KAAK,YAAY,EAAE,EAAG,mBAAmB;EACzD;;AAGH,MAAM,gBACJ,YACA,YACuB;CACvB,IAAI,YAAY,WAAW;AAC3B,KAAI,QAAQ,sBAAsB;AAChC,MAAI,CAAC,QAAQ,KACX,OAAM,IAAI,MACR,+DACD;AAEH,cAAY,qBAAqB,WAAW;GAC1C,WAAW,cAAc;GACzB,UAAU,SAAS;GACnB,WAAW,QAAQ;GACpB,CAAC;;AAEJ,KAAI,QAAQ,oBACV,aAAY,qBAAqB,WAAW;EAC1C,WAAW,cAAc;EACzB,UAAU,SAAS;EACnB,WAAW,QAAQ;EACpB,CAAC;AAEJ,QAAO;EACL,GAAG;EACH,MAAM,QAAQ;EACd,cAAc,QAAQ;EACtB;EACD"}

package/dist/cli/config.d.mts

@@ -0,0 +1,35 @@
+//#region src/cli/config.d.ts
+type Contracts = {
+  [chain: string]: ContractsNode;
+};
+type ContractsNode = `0x${string}` | {
+  [name: string]: ContractsNode;
+};
+interface ZodiacConfig {
+  apiKey: `zodiac_${string}`;
+  /**
+   * Contracts the `allow` kit should know about, keyed by chain prefix.
+   * Nested objects are allowed for grouping related addresses.
+   */
+  contracts?: Contracts;
+  /**
+   * Directory where fetched ABIs are stored and read from.
+   * Resolved relative to the project root (cwd). Defaults to `./abis`.
+   */
+  abisDir?: string;
+  /**
+   * Directory where generated type declarations (e.g. `allow.d.ts`) are
+   * written. Resolved relative to the project root (cwd).
+   * Defaults to `./.zodiac-os`.
+   */
+  typesDir?: string;
+}
+declare const defineConfig: (config: ZodiacConfig) => ZodiacConfig;
+declare function loadConfig(configPath?: string): Promise<ZodiacConfig>;
+declare const DEFAULT_ABIS_DIR = "abis";
+declare const DEFAULT_TYPES_DIR = ".zodiac-os";
+declare function resolveAbisDir(config: ZodiacConfig): string;
+declare function resolveTypesDir(config: ZodiacConfig): string;
+//#endregion
+export { Contracts, ContractsNode, DEFAULT_ABIS_DIR, DEFAULT_TYPES_DIR, ZodiacConfig, defineConfig, loadConfig, resolveAbisDir, resolveTypesDir };
+//# sourceMappingURL=config.d.mts.map

package/dist/cli/config.mjs

@@ -0,0 +1,31 @@
+import { pathToFileURL } from "url";
+import { resolve } from "path";
+//#region src/cli/config.ts
+const defineConfig = (config) => config;
+const DEFAULT_CONFIG_PATH = "zodiac.config.ts";
+async function loadConfig(configPath = DEFAULT_CONFIG_PATH) {
+	const absolutePath = resolve(process.cwd(), configPath);
+	let mod;
+	try {
+		mod = await import(pathToFileURL(absolutePath).href);
+	} catch (error) {
+		if (error?.code === "ERR_MODULE_NOT_FOUND" || error?.code === "ENOENT") throw new Error(`Config file not found: ${absolutePath}`);
+		throw error;
+	}
+	const config = mod.default ?? mod.config;
+	if (!config) throw new Error(`Config file must export a default value or a named "config" export: ${absolutePath}`);
+	if (!config.apiKey) throw new Error(`Config is missing required field "apiKey"`);
+	return config;
+}
+const DEFAULT_ABIS_DIR = "abis";
+const DEFAULT_TYPES_DIR = ".zodiac-os";
+function resolveAbisDir(config) {
+	return resolve(process.cwd(), config.abisDir ?? "abis");
+}
+function resolveTypesDir(config) {
+	return resolve(process.cwd(), config.typesDir ?? ".zodiac-os");
+}
+//#endregion
+export { DEFAULT_ABIS_DIR, DEFAULT_TYPES_DIR, defineConfig, loadConfig, resolveAbisDir, resolveTypesDir };
+
+//# sourceMappingURL=config.mjs.map

package/dist/cli/config.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.mjs","names":[],"sources":["../../src/cli/config.ts"],"sourcesContent":["import { pathToFileURL } from 'url'\nimport { resolve } from 'path'\n\nexport type Contracts = {\n  [chain: string]: ContractsNode\n}\nexport type ContractsNode = `0x${string}` | { [name: string]: ContractsNode }\n\nexport interface ZodiacConfig {\n  apiKey: `zodiac_${string}`\n  /**\n   * Contracts the `allow` kit should know about, keyed by chain prefix.\n   * Nested objects are allowed for grouping related addresses.\n   */\n  contracts?: Contracts\n  /**\n   * Directory where fetched ABIs are stored and read from.\n   * Resolved relative to the project root (cwd). Defaults to `./abis`.\n   */\n  abisDir?: string\n  /**\n   * Directory where generated type declarations (e.g. `allow.d.ts`) are\n   * written. Resolved relative to the project root (cwd).\n   * Defaults to `./.zodiac-os`.\n   */\n  typesDir?: string\n}\n\nexport const defineConfig = (config: ZodiacConfig): ZodiacConfig => config\n\nconst DEFAULT_CONFIG_PATH = 'zodiac.config.ts'\n\nexport async function loadConfig(\n  configPath: string = DEFAULT_CONFIG_PATH\n): Promise<ZodiacConfig> {\n  const absolutePath = resolve(process.cwd(), configPath)\n\n  let mod: Record<string, unknown>\n  try {\n    mod = await import(pathToFileURL(absolutePath).href)\n  } catch (error: any) {\n    if (error?.code === 'ERR_MODULE_NOT_FOUND' || error?.code === 'ENOENT') {\n      throw new Error(`Config file not found: ${absolutePath}`)\n    }\n    throw error\n  }\n\n  const config = (mod.default ?? mod.config) as ZodiacConfig | undefined\n  if (!config) {\n    throw new Error(\n      `Config file must export a default value or a named \"config\" export: ${absolutePath}`\n    )\n  }\n\n  if (!config.apiKey) {\n    throw new Error(`Config is missing required field \"apiKey\"`)\n  }\n\n  return config\n}\n\nexport const DEFAULT_ABIS_DIR = 'abis'\nexport const DEFAULT_TYPES_DIR = '.zodiac-os'\n\nexport function resolveAbisDir(config: ZodiacConfig): string {\n  return resolve(process.cwd(), config.abisDir ?? DEFAULT_ABIS_DIR)\n}\n\nexport function resolveTypesDir(config: ZodiacConfig): string {\n  return resolve(process.cwd(), config.typesDir ?? DEFAULT_TYPES_DIR)\n}\n"],"mappings":";;;AA4BA,MAAa,gBAAgB,WAAuC;AAEpE,MAAM,sBAAsB;AAE5B,eAAsB,WACpB,aAAqB,qBACE;CACvB,MAAM,eAAe,QAAQ,QAAQ,KAAK,EAAE,WAAW;CAEvD,IAAI;AACJ,KAAI;AACF,QAAM,MAAM,OAAO,cAAc,aAAa,CAAC;UACxC,OAAY;AACnB,MAAI,OAAO,SAAS,0BAA0B,OAAO,SAAS,SAC5D,OAAM,IAAI,MAAM,0BAA0B,eAAe;AAE3D,QAAM;;CAGR,MAAM,SAAU,IAAI,WAAW,IAAI;AACnC,KAAI,CAAC,OACH,OAAM,IAAI,MACR,uEAAuE,eACxE;AAGH,KAAI,CAAC,OAAO,OACV,OAAM,IAAI,MAAM,4CAA4C;AAG9D,QAAO;;AAGT,MAAa,mBAAmB;AAChC,MAAa,oBAAoB;AAEjC,SAAgB,eAAe,QAA8B;AAC3D,QAAO,QAAQ,QAAQ,KAAK,EAAE,OAAO,WAAA,OAA4B;;AAGnE,SAAgB,gBAAgB,QAA8B;AAC5D,QAAO,QAAQ,QAAQ,KAAK,EAAE,OAAO,YAAA,aAA8B"}

package/dist/cli.mjs

@@ -1,33 +1,15 @@
 #!/usr/bin/env node
 import { t as ApiClient } from "./api-D6ee2Q2b.mjs";
+import { a as walkContracts, i as readAbi, n as chainIdFor, o as writeAbi, r as abiFilePath } from "./networks-BTW1qAAa.mjs";
+import { loadConfig, resolveAbisDir, resolveTypesDir } from "./cli/config.mjs";
 import { invariant } from "@epic-web/invariant";
+import fs from "node:fs";
+import path from "node:path";
 import { Command } from "commander";
-import { fileURLToPath, pathToFileURL } from "url";
-import { join, resolve } from "path";
+import { fileURLToPath } from "url";
+import { join } from "path";
 import { ModuleKind, Project, ScriptTarget, VariableDeclarationKind } from "ts-morph";
 import { mkdirSync, writeFileSync } from "fs";
-import { defineConfig } from "@gnosis-guild/eth-sdk";
-import { gatherABIs } from "@gnosis-guild/eth-sdk/dist/abi-management/index.js";
-import { generateSdk } from "@gnosis-guild/eth-sdk/dist/client/index.js";
-import { createEthSdkConfig } from "@gnosis-guild/eth-sdk/dist/config/types.js";
-import { realFs } from "@gnosis-guild/eth-sdk/dist/peripherals/fs.js";
-//#region src/cli/config.ts
-const DEFAULT_CONFIG_PATH = "zodiac.config.ts";
-async function loadConfig(configPath = DEFAULT_CONFIG_PATH) {
-	const absolutePath = resolve(process.cwd(), configPath);
-	let mod;
-	try {
-		mod = await import(pathToFileURL(absolutePath).href);
-	} catch (error) {
-		if (error?.code === "ERR_MODULE_NOT_FOUND" || error?.code === "ENOENT") throw new Error(`Config file not found: ${absolutePath}`);
-		throw error;
-	}
-	const config = mod.default ?? mod.config;
-	if (!config) throw new Error(`Config file must export a default value or a named "config" export: ${absolutePath}`);
-	if (!config.apiKey) throw new Error(`Config is missing required field "apiKey"`);
-	return config;
-}
-//#endregion
 //#region src/cli/commands/pullOrg.ts
 function resolveNodeModulesDir() {
 	const match = fileURLToPath(import.meta.url).match(/^(.+[/\\]node_modules)[/\\]/);
@@ -132,24 +114,231 @@ const pullOrg = async (config) => {
 	for (const outputFile of emitResult.getOutputFiles()) writeFileSync(join(outDir, outputFile.getFilePath().includes(".d.ts") ? "index.d.ts" : "index.js"), outputFile.getText());
 };
 //#endregion
+//#region src/allow/fetch.ts
+async function fetchAbi(chainId, address) {
+	const url = `https://api.abi.pub/v1/chains/${chainId}/etherscan?module=contract&action=getabi&address=${address}`;
+	let body;
+	try {
+		const resp = await fetch(url);
+		if (!resp.ok) return null;
+		body = await resp.json();
+	} catch {
+		return null;
+	}
+	if (body.status !== "1" || typeof body.result !== "string") return null;
+	try {
+		const parsed = JSON.parse(body.result);
+		if (!Array.isArray(parsed) || parsed.length === 0) return null;
+		return parsed;
+	} catch {
+		return null;
+	}
+}
+//#endregion
+//#region src/allow/codegen.ts
+function generateAllowTypes(abisDir, contractsConfig) {
+	const root = /* @__PURE__ */ new Map();
+	for (const node of walkContracts(contractsConfig)) {
+		const abi = readAbi(abisDir, node);
+		if (!abi) continue;
+		insertIntoTree(root, [node.chain, ...node.segments], {
+			node,
+			abi
+		});
+	}
+	const out = [];
+	out.push("// AUTO-GENERATED by `zodiac-os pull-contracts`. Do not edit.");
+	out.push("/* eslint-disable */");
+	out.push("");
+	out.push(`import type { FunctionPermission, TargetPermission } from "zodiac-roles-sdk";`);
+	out.push(`import type { Scoping, Options, EVERYTHING } from "@zodiac-os/sdk/allow";`);
+	out.push("");
+	out.push("declare global {");
+	out.push("  interface AllowKit " + renderTree(root, "  "));
+	out.push("}");
+	out.push("");
+	out.push("export {};");
+	out.push("");
+	return out.join("\n");
+}
+function insertIntoTree(tree, segments, leaf) {
+	const [first, ...rest] = segments;
+	if (!first) throw new Error("empty segments");
+	if (rest.length === 0) {
+		tree.set(first, leaf);
+		return;
+	}
+	let child = tree.get(first);
+	if (!child || child.node) {
+		child = /* @__PURE__ */ new Map();
+		tree.set(first, child);
+	}
+	insertIntoTree(child, rest, leaf);
+}
+function renderTree(tree, indent) {
+	const lines = ["{"];
+	for (const [key, value] of tree) {
+		const safeKey = renderPropKey(key);
+		if (value instanceof Map) lines.push(`${indent}  ${safeKey}: ${renderTree(value, indent + "  ")};`);
+		else {
+			const { node, abi } = value;
+			lines.push(`${indent}  ${safeKey}: ${renderContractType(node, abi, indent + "  ")};`);
+		}
+	}
+	lines.push(`${indent}}`);
+	return lines.join("\n");
+}
+function renderPropKey(name) {
+	return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);
+}
+function renderContractType(node, abi, indent) {
+	const members = [];
+	const seen = /* @__PURE__ */ new Set();
+	members.push(`${indent}  [EVERYTHING]: (options?: Options) => TargetPermission;`);
+	for (const fragment of abi) {
+		if (fragment.type !== "function") continue;
+		if (fragment.stateMutability === "view" || fragment.stateMutability === "pure") continue;
+		const name = fragment.name;
+		if (!name || seen.has(name)) continue;
+		seen.add(name);
+		members.push(renderFunctionSignature(fragment, indent + "  "));
+	}
+	return [
+		"{",
+		...members,
+		`${indent}}`
+	].join("\n");
+}
+function renderFunctionSignature(fragment, indent) {
+	const name = renderPropKey(fragment.name);
+	const params = [];
+	for (const input of fragment.inputs ?? []) {
+		const paramName = sanitizeParamName(input.name || `arg${params.length}`, params.length);
+		params.push(`${paramName}?: Scoping<${tsTypeFor(input)}>`);
+	}
+	params.push(`options?: Options`);
+	return `${indent}${name}: (${params.join(", ")}) => FunctionPermission;`;
+}
+function sanitizeParamName(name, index) {
+	const cleaned = name.replace(/[^A-Za-z0-9_$]/g, "_");
+	if (!cleaned || /^[0-9]/.test(cleaned)) return `arg${index}`;
+	return new Set([
+		"function",
+		"class",
+		"new",
+		"number",
+		"string",
+		"object",
+		"boolean",
+		"symbol",
+		"default",
+		"return",
+		"this",
+		"void",
+		"delete",
+		"in",
+		"of",
+		"for",
+		"while",
+		"switch",
+		"case",
+		"if",
+		"else",
+		"null",
+		"true",
+		"false",
+		"undefined",
+		"any",
+		"never",
+		"unknown"
+	]).has(cleaned) ? `_${cleaned}` : cleaned;
+}
+function tsTypeFor(fragment) {
+	const type = fragment.type;
+	const arrayMatch = /^(.*)\[(\d*)\]$/.exec(type);
+	if (arrayMatch) return `readonly (${tsTypeFor({
+		...fragment,
+		type: arrayMatch[1]
+	})})[]`;
+	if (type === "tuple") {
+		const components = fragment.components ?? [];
+		if (components.length === 0) return "Record<string, unknown>";
+		return `{ ${components.map((c, i) => {
+			return `${renderPropKey(sanitizeParamName(c.name || `f${i}`, i))}: ${tsTypeFor(c)}`;
+		}).join("; ")} }`;
+	}
+	if (type === "address") return "`0x${string}`";
+	if (type === "bool") return "boolean";
+	if (type === "string") return "string";
+	if (type === "bytes") return "import(\"ethers\").BytesLike";
+	if (/^bytes\d+$/.test(type)) return "`0x${string}`";
+	if (/^u?int\d*$/.test(type)) return "import(\"ethers\").BigNumberish";
+	return "unknown";
+}
+function writeGenerated(outFile, source) {
+	fs.mkdirSync(path.dirname(outFile), { recursive: true });
+	fs.writeFileSync(outFile, source, "utf8");
+}
+//#endregion
 //#region src/cli/commands/pullContracts.ts
 const pullContracts = async (config) => {
 	if (!config.contracts || Object.keys(config.contracts).length === 0) {
 		console.log("No contracts defined in config, skipping.");
 		return;
 	}
-	const cwd = process.cwd();
-	const ethSdkConfig = createEthSdkConfig(defineConfig({ contracts: config.contracts }));
-	const ctx = {
-		cliArgs: { workingDirPath: cwd },
-		config: ethSdkConfig,
-		fs: realFs
-	};
-	console.log("Fetching contract ABIs...");
-	await gatherABIs(ctx);
-	console.log("Generating typed SDK...");
-	await generateSdk(ctx);
+	const abisDir = resolveAbisDir(config);
+	const generatedFile = path.join(resolveTypesDir(config), "allow.d.ts");
+	let missing = 0;
+	let fetched = 0;
+	let existing = 0;
+	for (const node of walkContracts(config.contracts)) {
+		const file = abiFilePath(abisDir, node);
+		if (fs.existsSync(file)) {
+			existing++;
+			report(node.chain, node.segments, node.address, "ok", file);
+			continue;
+		}
+		let chainId;
+		try {
+			chainId = chainIdFor(node.chain);
+		} catch (error) {
+			missing++;
+			report(node.chain, node.segments, node.address, "missing", file, error.message);
+			continue;
+		}
+		const abi = await fetchAbi(chainId, node.address);
+		if (!abi) {
+			missing++;
+			report(node.chain, node.segments, node.address, "missing", file, `api.abi.pub returned no ABI for chain ${chainId}`);
+			continue;
+		}
+		writeAbi(abisDir, node, abi);
+		fetched++;
+		report(node.chain, node.segments, node.address, "fetched", file);
+	}
+	console.log("");
+	console.log(`Contracts summary: ${existing} existing, ${fetched} fetched, ${missing} missing.`);
+	if (missing > 0) {
+		console.log("");
+		console.log("Missing ABIs must be provided manually. Paste the contract");
+		console.log("ABI JSON at the paths listed above and re-run `zodiac-os pull-contracts`.");
+	}
+	writeGenerated(generatedFile, generateAllowTypes(abisDir, config.contracts));
+	console.log("");
+	console.log(`Wrote typings to ${path.relative(process.cwd(), generatedFile)}`);
+	if (missing > 0) process.exit(1);
 };
+function report(chain, segments, address, status, file, reason) {
+	const label = `${chain}.${segments.join(".")}`.padEnd(40, " ");
+	const tag = {
+		ok: "  cached  ",
+		fetched: "  fetched ",
+		missing: "  MISSING "
+	}[status];
+	const suffix = reason ? ` — ${reason}` : "";
+	console.log(`${tag} ${label} ${address}${suffix}`);
+	if (status === "missing") console.log(`            → paste ABI at ${file}`);
+}
 //#endregion
 //#region src/cli/run.ts
 const run = async (argv = process.argv) => {

package/dist/cli.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cli.mjs","names":[],"sources":["../src/cli/config.ts","../src/cli/commands/pullOrg.ts","../src/cli/commands/pullContracts.ts","../src/cli/run.ts","../src/cli/index.ts"],"sourcesContent":["import type { EthSdkContracts } from '@gnosis-guild/eth-sdk'\nimport { pathToFileURL } from 'url'\nimport { resolve } from 'path'\n\nexport interface ZodiacConfig {\n  apiKey: `zodiac_${string}`\n  contracts?: EthSdkContracts\n}\n\nexport const defineConfig = (config: ZodiacConfig): ZodiacConfig => config\n\nconst DEFAULT_CONFIG_PATH = 'zodiac.config.ts'\n\nexport async function loadConfig(\n  configPath: string = DEFAULT_CONFIG_PATH\n): Promise<ZodiacConfig> {\n  const absolutePath = resolve(process.cwd(), configPath)\n\n  let mod: Record<string, unknown>\n  try {\n    mod = await import(pathToFileURL(absolutePath).href)\n  } catch (error: any) {\n    if (error?.code === 'ERR_MODULE_NOT_FOUND' || error?.code === 'ENOENT') {\n      throw new Error(`Config file not found: ${absolutePath}`)\n    }\n    throw error\n  }\n\n  const config = (mod.default ?? mod.config) as ZodiacConfig | undefined\n  if (!config) {\n    throw new Error(\n      `Config file must export a default value or a named \"config\" export: ${absolutePath}`\n    )\n  }\n\n  if (!config.apiKey) {\n    throw new Error(`Config is missing required field \"apiKey\"`)\n  }\n\n  return config\n}\n","import type { ZodiacConfig } from '../config'\nimport { ApiClient } from '../../api'\nimport { invariant } from '@epic-web/invariant'\nimport {\n  ModuleKind,\n  Project,\n  ScriptTarget,\n  VariableDeclarationKind,\n} from 'ts-morph'\nimport { mkdirSync, writeFileSync } from 'fs'\nimport { join } from 'path'\nimport { fileURLToPath } from 'url'\n\nfunction resolveNodeModulesDir(): string {\n  const selfPath = fileURLToPath(import.meta.url)\n  const match = selfPath.match(/^(.+[/\\\\]node_modules)[/\\\\]/)\n  if (match) return match[1]\n  // Fallback for development (running from source, not from node_modules)\n  return join(process.cwd(), 'node_modules')\n}\n\nconst toLiteral = (value: unknown, indent = 0): string => {\n  const pad = '  '.repeat(indent)\n  const childPad = '  '.repeat(indent + 1)\n\n  if (value === null) return 'null'\n  if (typeof value === 'bigint') return `${value}n`\n  if (typeof value === 'string') return JSON.stringify(value)\n  if (typeof value === 'number' || typeof value === 'boolean')\n    return String(value)\n  if (Array.isArray(value)) {\n    if (value.length === 0) return '[]'\n    return `[\\n${value.map((v) => `${childPad}${toLiteral(v, indent + 1)}`).join(',\\n')},\\n${pad}]`\n  }\n  if (typeof value === 'object') {\n    const entries = Object.entries(value as Record<string, unknown>)\n    if (entries.length === 0) return '{}'\n    const props = entries.map(\n      ([k, v]) =>\n        `${childPad}${/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(k) ? k : JSON.stringify(k)}: ${toLiteral(v, indent + 1)}`\n    )\n    return `{\\n${props.join(',\\n')},\\n${pad}}`\n  }\n  return String(value)\n}\n\nexport const pullOrg = async (config: ZodiacConfig) => {\n  const client = new ApiClient({\n    apiKey: config.apiKey,\n  })\n\n  const [users, workspaceVaults] = await Promise.all([\n    client.listUsers(),\n    client.listVaults(),\n  ])\n\n  const allRawVaults = workspaceVaults.flatMap((ws) => ws.vaults)\n\n  const { result: accounts } = await client.resolveConstellation(\n    workspaceVaults[0].workspaceId, // can just use any workspace to resolve\n    {\n      specification: allRawVaults.map((vault) => ({\n        type: 'SAFE',\n        chain: vault.chain,\n        address: vault.address,\n      })),\n    }\n  )\n\n  let accountIndex = 0\n  const vaultsRecord: Record<string, unknown> = {}\n  for (const ws of workspaceVaults) {\n    const wsVaults: Record<string, unknown> = {}\n    for (const vault of ws.vaults) {\n      const account = accounts[accountIndex++]\n      invariant(\n        account.type === 'SAFE',\n        `Expected SAFE account for vault ${vault.id}`\n      )\n      wsVaults[vault.label] = {\n        id: vault.id,\n        label: vault.label,\n        address: account.address,\n        chain: vault.chain,\n        threshold: account.threshold,\n        owners: [...account.owners],\n        modules: [...account.modules],\n      }\n    }\n    vaultsRecord[ws.workspaceName] = {\n      workspaceId: ws.workspaceId,\n      workspaceName: ws.workspaceName,\n      vaults: wsVaults,\n    }\n  }\n\n  const nameCount = new Map<string, number>()\n  for (const user of users) {\n    nameCount.set(user.fullName, (nameCount.get(user.fullName) ?? 0) + 1)\n  }\n\n  const usersRecord: Record<string, unknown> = {}\n  for (const user of users) {\n    const handle =\n      nameCount.get(user.fullName)! > 1\n        ? `${user.fullName} (${user.id})`\n        : user.fullName\n    usersRecord[handle] = {\n      id: user.id,\n      fullName: user.fullName,\n      personalSafes: user.personalSafes,\n    }\n  }\n\n  const outDir = join(resolveNodeModulesDir(), '.zodiac-os')\n\n  mkdirSync(outDir, { recursive: true })\n\n  // Write package.json so .zodiac-os is importable\n  writeFileSync(\n    join(outDir, 'package.json'),\n    JSON.stringify(\n      {\n        name: '.zodiac-os',\n        type: 'module',\n        main: 'index.js',\n        types: 'index.d.ts',\n      },\n      null,\n      2\n    )\n  )\n\n  // Use ts-morph to generate TS, then emit JS + d.ts\n  const project = new Project({\n    compilerOptions: {\n      declaration: true,\n      module: ModuleKind.ESNext,\n      target: ScriptTarget.ESNext,\n      outDir,\n    },\n    useInMemoryFileSystem: true,\n  })\n\n  const sourceFile = project.createSourceFile('index.ts', '')\n\n  sourceFile.addVariableStatement({\n    isExported: true,\n    declarationKind: VariableDeclarationKind.Const,\n    declarations: [\n      {\n        name: 'users',\n        initializer: `${toLiteral(usersRecord)} as const`,\n      },\n    ],\n  })\n\n  sourceFile.addVariableStatement({\n    isExported: true,\n    declarationKind: VariableDeclarationKind.Const,\n    declarations: [\n      {\n        name: 'vaults',\n        initializer: `${toLiteral(vaultsRecord)} as const`,\n      },\n    ],\n  })\n\n  const emitResult = sourceFile.getEmitOutput()\n  for (const outputFile of emitResult.getOutputFiles()) {\n    const filePath = outputFile.getFilePath()\n    const fileName = filePath.includes('.d.ts') ? 'index.d.ts' : 'index.js'\n    writeFileSync(join(outDir, fileName), outputFile.getText())\n  }\n}\n","import type { ZodiacConfig } from '../config'\nimport { defineConfig } from '@gnosis-guild/eth-sdk'\nimport { gatherABIs } from '@gnosis-guild/eth-sdk/dist/abi-management'\nimport { generateSdk } from '@gnosis-guild/eth-sdk/dist/client'\nimport { createEthSdkConfig } from '@gnosis-guild/eth-sdk/dist/config/types'\nimport { realFs } from '@gnosis-guild/eth-sdk/dist/peripherals/fs'\n\nexport const pullContracts = async (config: ZodiacConfig) => {\n  if (!config.contracts || Object.keys(config.contracts).length === 0) {\n    console.log('No contracts defined in config, skipping.')\n    return\n  }\n\n  const cwd = process.cwd()\n  const ethSdkConfig = createEthSdkConfig(\n    defineConfig({\n      contracts: config.contracts,\n    })\n  )\n\n  const ctx = {\n    cliArgs: { workingDirPath: cwd },\n    config: ethSdkConfig,\n    fs: realFs,\n  }\n\n  console.log('Fetching contract ABIs...')\n  await gatherABIs(ctx)\n\n  console.log('Generating typed SDK...')\n  await generateSdk(ctx)\n}\n","import { Command } from 'commander'\nimport { loadConfig } from './config'\nimport { pullOrg } from './commands/pullOrg'\nimport { pullContracts } from './commands/pullContracts'\n\nexport const run = async (argv: string[] = process.argv) => {\n  const program = new Command()\n\n  program\n    .name('zodiac-os')\n    .description('Zodiac OS SDK CLI – pull org data and contract ABIs')\n    .version('1.0.0')\n    .option(\n      '-c, --config <path>',\n      'path to the config file',\n      'zodiac.config.ts'\n    )\n\n  program\n    .command('pull-org')\n    .description('Fetch Zodiac users and vaults, generate TypeScript types')\n    .action(async (_opts, cmd) => {\n      const config = await loadConfig(cmd.optsWithGlobals().config)\n      await pullOrg(config)\n    })\n\n  program\n    .command('pull-contracts')\n    .description('Fetch contract ABIs, generate typed permissions kit')\n    .action(async (_opts, cmd) => {\n      const config = await loadConfig(cmd.optsWithGlobals().config)\n      await pullContracts(config)\n    })\n\n  program\n    .command('pull')\n    .description('Fetch Zodiac org and contracts ABI, generate SDK functions')\n    .action(async (_opts, cmd) => {\n      const config = await loadConfig(cmd.optsWithGlobals().config)\n      await Promise.all([pullOrg(config), pullContracts(config)])\n    })\n\n  await program.parseAsync(argv)\n}\n","#!/usr/bin/env node\nimport { run } from './run'\n\nrun().then(\n  () => {\n    process.exit(0)\n  },\n  (error: unknown) => {\n    if (error) console.error(error)\n    process.exit(1)\n  }\n)\n"],"mappings":";;;;;;;;;;;;;;AAWA,MAAM,sBAAsB;AAE5B,eAAsB,WACpB,aAAqB,qBACE;CACvB,MAAM,eAAe,QAAQ,QAAQ,KAAK,EAAE,WAAW;CAEvD,IAAI;AACJ,KAAI;AACF,QAAM,MAAM,OAAO,cAAc,aAAa,CAAC;UACxC,OAAY;AACnB,MAAI,OAAO,SAAS,0BAA0B,OAAO,SAAS,SAC5D,OAAM,IAAI,MAAM,0BAA0B,eAAe;AAE3D,QAAM;;CAGR,MAAM,SAAU,IAAI,WAAW,IAAI;AACnC,KAAI,CAAC,OACH,OAAM,IAAI,MACR,uEAAuE,eACxE;AAGH,KAAI,CAAC,OAAO,OACV,OAAM,IAAI,MAAM,4CAA4C;AAG9D,QAAO;;;;AC1BT,SAAS,wBAAgC;CAEvC,MAAM,QADW,cAAc,OAAO,KAAK,IAAI,CACxB,MAAM,8BAA8B;AAC3D,KAAI,MAAO,QAAO,MAAM;AAExB,QAAO,KAAK,QAAQ,KAAK,EAAE,eAAe;;AAG5C,MAAM,aAAa,OAAgB,SAAS,MAAc;CACxD,MAAM,MAAM,KAAK,OAAO,OAAO;CAC/B,MAAM,WAAW,KAAK,OAAO,SAAS,EAAE;AAExC,KAAI,UAAU,KAAM,QAAO;AAC3B,KAAI,OAAO,UAAU,SAAU,QAAO,GAAG,MAAM;AAC/C,KAAI,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,MAAM;AAC3D,KAAI,OAAO,UAAU,YAAY,OAAO,UAAU,UAChD,QAAO,OAAO,MAAM;AACtB,KAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,MAAM,MAAM,KAAK,MAAM,GAAG,WAAW,UAAU,GAAG,SAAS,EAAE,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,IAAI;;AAE/F,KAAI,OAAO,UAAU,UAAU;EAC7B,MAAM,UAAU,OAAO,QAAQ,MAAiC;AAChE,MAAI,QAAQ,WAAW,EAAG,QAAO;AAKjC,SAAO,MAJO,QAAQ,KACnB,CAAC,GAAG,OACH,GAAG,WAAW,6BAA6B,KAAK,EAAE,GAAG,IAAI,KAAK,UAAU,EAAE,CAAC,IAAI,UAAU,GAAG,SAAS,EAAE,GAC1G,CACkB,KAAK,MAAM,CAAC,KAAK,IAAI;;AAE1C,QAAO,OAAO,MAAM;;AAGtB,MAAa,UAAU,OAAO,WAAyB;CACrD,MAAM,SAAS,IAAI,UAAU,EAC3B,QAAQ,OAAO,QAChB,CAAC;CAEF,MAAM,CAAC,OAAO,mBAAmB,MAAM,QAAQ,IAAI,CACjD,OAAO,WAAW,EAClB,OAAO,YAAY,CACpB,CAAC;CAEF,MAAM,eAAe,gBAAgB,SAAS,OAAO,GAAG,OAAO;CAE/D,MAAM,EAAE,QAAQ,aAAa,MAAM,OAAO,qBACxC,gBAAgB,GAAG,aACnB,EACE,eAAe,aAAa,KAAK,WAAW;EAC1C,MAAM;EACN,OAAO,MAAM;EACb,SAAS,MAAM;EAChB,EAAE,EACJ,CACF;CAED,IAAI,eAAe;CACnB,MAAM,eAAwC,EAAE;AAChD,MAAK,MAAM,MAAM,iBAAiB;EAChC,MAAM,WAAoC,EAAE;AAC5C,OAAK,MAAM,SAAS,GAAG,QAAQ;GAC7B,MAAM,UAAU,SAAS;AACzB,aACE,QAAQ,SAAS,QACjB,mCAAmC,MAAM,KAC1C;AACD,YAAS,MAAM,SAAS;IACtB,IAAI,MAAM;IACV,OAAO,MAAM;IACb,SAAS,QAAQ;IACjB,OAAO,MAAM;IACb,WAAW,QAAQ;IACnB,QAAQ,CAAC,GAAG,QAAQ,OAAO;IAC3B,SAAS,CAAC,GAAG,QAAQ,QAAQ;IAC9B;;AAEH,eAAa,GAAG,iBAAiB;GAC/B,aAAa,GAAG;GAChB,eAAe,GAAG;GAClB,QAAQ;GACT;;CAGH,MAAM,4BAAY,IAAI,KAAqB;AAC3C,MAAK,MAAM,QAAQ,MACjB,WAAU,IAAI,KAAK,WAAW,UAAU,IAAI,KAAK,SAAS,IAAI,KAAK,EAAE;CAGvE,MAAM,cAAuC,EAAE;AAC/C,MAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,SACJ,UAAU,IAAI,KAAK,SAAS,GAAI,IAC5B,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,KAC7B,KAAK;AACX,cAAY,UAAU;GACpB,IAAI,KAAK;GACT,UAAU,KAAK;GACf,eAAe,KAAK;GACrB;;CAGH,MAAM,SAAS,KAAK,uBAAuB,EAAE,aAAa;AAE1D,WAAU,QAAQ,EAAE,WAAW,MAAM,CAAC;AAGtC,eACE,KAAK,QAAQ,eAAe,EAC5B,KAAK,UACH;EACE,MAAM;EACN,MAAM;EACN,MAAM;EACN,OAAO;EACR,EACD,MACA,EACD,CACF;CAaD,MAAM,aAVU,IAAI,QAAQ;EAC1B,iBAAiB;GACf,aAAa;GACb,QAAQ,WAAW;GACnB,QAAQ,aAAa;GACrB;GACD;EACD,uBAAuB;EACxB,CAAC,CAEyB,iBAAiB,YAAY,GAAG;AAE3D,YAAW,qBAAqB;EAC9B,YAAY;EACZ,iBAAiB,wBAAwB;EACzC,cAAc,CACZ;GACE,MAAM;GACN,aAAa,GAAG,UAAU,YAAY,CAAC;GACxC,CACF;EACF,CAAC;AAEF,YAAW,qBAAqB;EAC9B,YAAY;EACZ,iBAAiB,wBAAwB;EACzC,cAAc,CACZ;GACE,MAAM;GACN,aAAa,GAAG,UAAU,aAAa,CAAC;GACzC,CACF;EACF,CAAC;CAEF,MAAM,aAAa,WAAW,eAAe;AAC7C,MAAK,MAAM,cAAc,WAAW,gBAAgB,CAGlD,eAAc,KAAK,QAFF,WAAW,aAAa,CACf,SAAS,QAAQ,GAAG,eAAe,WACzB,EAAE,WAAW,SAAS,CAAC;;;;ACrK/D,MAAa,gBAAgB,OAAO,WAAyB;AAC3D,KAAI,CAAC,OAAO,aAAa,OAAO,KAAK,OAAO,UAAU,CAAC,WAAW,GAAG;AACnE,UAAQ,IAAI,4CAA4C;AACxD;;CAGF,MAAM,MAAM,QAAQ,KAAK;CACzB,MAAM,eAAe,mBACnB,aAAa,EACX,WAAW,OAAO,WACnB,CAAC,CACH;CAED,MAAM,MAAM;EACV,SAAS,EAAE,gBAAgB,KAAK;EAChC,QAAQ;EACR,IAAI;EACL;AAED,SAAQ,IAAI,4BAA4B;AACxC,OAAM,WAAW,IAAI;AAErB,SAAQ,IAAI,0BAA0B;AACtC,OAAM,YAAY,IAAI;;;;ACzBxB,MAAa,MAAM,OAAO,OAAiB,QAAQ,SAAS;CAC1D,MAAM,UAAU,IAAI,SAAS;AAE7B,SACG,KAAK,YAAY,CACjB,YAAY,sDAAsD,CAClE,QAAQ,QAAQ,CAChB,OACC,uBACA,2BACA,mBACD;AAEH,SACG,QAAQ,WAAW,CACnB,YAAY,2DAA2D,CACvE,OAAO,OAAO,OAAO,QAAQ;AAE5B,QAAM,QADS,MAAM,WAAW,IAAI,iBAAiB,CAAC,OAAO,CACxC;GACrB;AAEJ,SACG,QAAQ,iBAAiB,CACzB,YAAY,sDAAsD,CAClE,OAAO,OAAO,OAAO,QAAQ;AAE5B,QAAM,cADS,MAAM,WAAW,IAAI,iBAAiB,CAAC,OAAO,CAClC;GAC3B;AAEJ,SACG,QAAQ,OAAO,CACf,YAAY,6DAA6D,CACzE,OAAO,OAAO,OAAO,QAAQ;EAC5B,MAAM,SAAS,MAAM,WAAW,IAAI,iBAAiB,CAAC,OAAO;AAC7D,QAAM,QAAQ,IAAI,CAAC,QAAQ,OAAO,EAAE,cAAc,OAAO,CAAC,CAAC;GAC3D;AAEJ,OAAM,QAAQ,WAAW,KAAK;;;;ACvChC,KAAK,CAAC,WACE;AACJ,SAAQ,KAAK,EAAE;IAEhB,UAAmB;AAClB,KAAI,MAAO,SAAQ,MAAM,MAAM;AAC/B,SAAQ,KAAK,EAAE;EAElB"}
+{"version":3,"file":"cli.mjs","names":[],"sources":["../src/cli/commands/pullOrg.ts","../src/allow/fetch.ts","../src/allow/codegen.ts","../src/cli/commands/pullContracts.ts","../src/cli/run.ts","../src/cli/index.ts"],"sourcesContent":["import type { ZodiacConfig } from '../config'\nimport { ApiClient } from '../../api'\nimport { invariant } from '@epic-web/invariant'\nimport {\n  ModuleKind,\n  Project,\n  ScriptTarget,\n  VariableDeclarationKind,\n} from 'ts-morph'\nimport { mkdirSync, writeFileSync } from 'fs'\nimport { join } from 'path'\nimport { fileURLToPath } from 'url'\n\nfunction resolveNodeModulesDir(): string {\n  const selfPath = fileURLToPath(import.meta.url)\n  const match = selfPath.match(/^(.+[/\\\\]node_modules)[/\\\\]/)\n  if (match) return match[1]\n  // Fallback for development (running from source, not from node_modules)\n  return join(process.cwd(), 'node_modules')\n}\n\nconst toLiteral = (value: unknown, indent = 0): string => {\n  const pad = '  '.repeat(indent)\n  const childPad = '  '.repeat(indent + 1)\n\n  if (value === null) return 'null'\n  if (typeof value === 'bigint') return `${value}n`\n  if (typeof value === 'string') return JSON.stringify(value)\n  if (typeof value === 'number' || typeof value === 'boolean')\n    return String(value)\n  if (Array.isArray(value)) {\n    if (value.length === 0) return '[]'\n    return `[\\n${value.map((v) => `${childPad}${toLiteral(v, indent + 1)}`).join(',\\n')},\\n${pad}]`\n  }\n  if (typeof value === 'object') {\n    const entries = Object.entries(value as Record<string, unknown>)\n    if (entries.length === 0) return '{}'\n    const props = entries.map(\n      ([k, v]) =>\n        `${childPad}${/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(k) ? k : JSON.stringify(k)}: ${toLiteral(v, indent + 1)}`\n    )\n    return `{\\n${props.join(',\\n')},\\n${pad}}`\n  }\n  return String(value)\n}\n\nexport const pullOrg = async (config: ZodiacConfig) => {\n  const client = new ApiClient({\n    apiKey: config.apiKey,\n  })\n\n  const [users, workspaceVaults] = await Promise.all([\n    client.listUsers(),\n    client.listVaults(),\n  ])\n\n  const allRawVaults = workspaceVaults.flatMap((ws) => ws.vaults)\n\n  const { result: accounts } = await client.resolveConstellation(\n    workspaceVaults[0].workspaceId, // can just use any workspace to resolve\n    {\n      specification: allRawVaults.map((vault) => ({\n        type: 'SAFE',\n        chain: vault.chain,\n        address: vault.address,\n      })),\n    }\n  )\n\n  let accountIndex = 0\n  const vaultsRecord: Record<string, unknown> = {}\n  for (const ws of workspaceVaults) {\n    const wsVaults: Record<string, unknown> = {}\n    for (const vault of ws.vaults) {\n      const account = accounts[accountIndex++]\n      invariant(\n        account.type === 'SAFE',\n        `Expected SAFE account for vault ${vault.id}`\n      )\n      wsVaults[vault.label] = {\n        id: vault.id,\n        label: vault.label,\n        address: account.address,\n        chain: vault.chain,\n        threshold: account.threshold,\n        owners: [...account.owners],\n        modules: [...account.modules],\n      }\n    }\n    vaultsRecord[ws.workspaceName] = {\n      workspaceId: ws.workspaceId,\n      workspaceName: ws.workspaceName,\n      vaults: wsVaults,\n    }\n  }\n\n  const nameCount = new Map<string, number>()\n  for (const user of users) {\n    nameCount.set(user.fullName, (nameCount.get(user.fullName) ?? 0) + 1)\n  }\n\n  const usersRecord: Record<string, unknown> = {}\n  for (const user of users) {\n    const handle =\n      nameCount.get(user.fullName)! > 1\n        ? `${user.fullName} (${user.id})`\n        : user.fullName\n    usersRecord[handle] = {\n      id: user.id,\n      fullName: user.fullName,\n      personalSafes: user.personalSafes,\n    }\n  }\n\n  const outDir = join(resolveNodeModulesDir(), '.zodiac-os')\n\n  mkdirSync(outDir, { recursive: true })\n\n  // Write package.json so .zodiac-os is importable\n  writeFileSync(\n    join(outDir, 'package.json'),\n    JSON.stringify(\n      {\n        name: '.zodiac-os',\n        type: 'module',\n        main: 'index.js',\n        types: 'index.d.ts',\n      },\n      null,\n      2\n    )\n  )\n\n  // Use ts-morph to generate TS, then emit JS + d.ts\n  const project = new Project({\n    compilerOptions: {\n      declaration: true,\n      module: ModuleKind.ESNext,\n      target: ScriptTarget.ESNext,\n      outDir,\n    },\n    useInMemoryFileSystem: true,\n  })\n\n  const sourceFile = project.createSourceFile('index.ts', '')\n\n  sourceFile.addVariableStatement({\n    isExported: true,\n    declarationKind: VariableDeclarationKind.Const,\n    declarations: [\n      {\n        name: 'users',\n        initializer: `${toLiteral(usersRecord)} as const`,\n      },\n    ],\n  })\n\n  sourceFile.addVariableStatement({\n    isExported: true,\n    declarationKind: VariableDeclarationKind.Const,\n    declarations: [\n      {\n        name: 'vaults',\n        initializer: `${toLiteral(vaultsRecord)} as const`,\n      },\n    ],\n  })\n\n  const emitResult = sourceFile.getEmitOutput()\n  for (const outputFile of emitResult.getOutputFiles()) {\n    const filePath = outputFile.getFilePath()\n    const fileName = filePath.includes('.d.ts') ? 'index.d.ts' : 'index.js'\n    writeFileSync(join(outDir, fileName), outputFile.getText())\n  }\n}\n","import { chainIdFor, type ChainPrefix } from './networks'\n\nexport type AbiFragment = Record<string, any>\nexport type Abi = AbiFragment[]\n\n// Returns null on any failure so callers can fall back to a manual ABI file.\nexport async function fetchAbi(\n  chainId: number,\n  address: `0x${string}`\n): Promise<Abi | null> {\n  const url = `https://api.abi.pub/v1/chains/${chainId}/etherscan?module=contract&action=getabi&address=${address}`\n  let body: { status?: string; message?: string; result?: string }\n  try {\n    const resp = await fetch(url)\n    if (!resp.ok) return null\n    body = (await resp.json()) as typeof body\n  } catch {\n    return null\n  }\n  if (body.status !== '1' || typeof body.result !== 'string') return null\n  try {\n    const parsed = JSON.parse(body.result)\n    if (!Array.isArray(parsed) || parsed.length === 0) return null\n    return parsed as Abi\n  } catch {\n    return null\n  }\n}\n\nexport const fetchAbiForPrefix = (\n  prefix: ChainPrefix,\n  address: `0x${string}`\n) => fetchAbi(chainIdFor(prefix), address)\n","import fs from 'node:fs'\nimport path from 'node:path'\nimport { walkContracts, readAbi, type ContractNode } from './abi'\nimport type { Abi, AbiFragment } from './fetch'\n\n// Emits named tuple elements per ABI input — this is the reason we don't rely\n// on viem/abitype, which produces unnamed tuples (microsoft/TypeScript#44939).\nexport function generateAllowTypes(\n  abisDir: string,\n  contractsConfig: Record<string, any>\n): string {\n  type Tree = Map<string, Tree | { node: ContractNode; abi: Abi }>\n\n  const root: Tree = new Map()\n  for (const node of walkContracts(contractsConfig)) {\n    const abi = readAbi(abisDir, node)\n    if (!abi) continue\n    insertIntoTree(root, [node.chain, ...node.segments], { node, abi })\n  }\n\n  const out: string[] = []\n  out.push('// AUTO-GENERATED by `zodiac-os pull-contracts`. Do not edit.')\n  out.push('/* eslint-disable */')\n  out.push('')\n  out.push(\n    `import type { FunctionPermission, TargetPermission } from \"zodiac-roles-sdk\";`\n  )\n  out.push(\n    `import type { Scoping, Options, EVERYTHING } from \"@zodiac-os/sdk/allow\";`\n  )\n  out.push('')\n  out.push('declare global {')\n  out.push('  interface AllowKit ' + renderTree(root, '  '))\n  out.push('}')\n  out.push('')\n  out.push('export {};')\n  out.push('')\n  return out.join('\\n')\n}\n\nfunction insertIntoTree(\n  tree: Map<string, any>,\n  segments: string[],\n  leaf: { node: ContractNode; abi: Abi }\n): void {\n  const [first, ...rest] = segments\n  if (!first) throw new Error('empty segments')\n  if (rest.length === 0) {\n    tree.set(first, leaf)\n    return\n  }\n  let child = tree.get(first)\n  if (!child || child.node) {\n    child = new Map()\n    tree.set(first, child)\n  }\n  insertIntoTree(child, rest, leaf)\n}\n\nfunction renderTree(tree: Map<string, any>, indent: string): string {\n  const lines: string[] = ['{']\n  for (const [key, value] of tree) {\n    const safeKey = renderPropKey(key)\n    if (value instanceof Map) {\n      lines.push(`${indent}  ${safeKey}: ${renderTree(value, indent + '  ')};`)\n    } else {\n      const { node, abi } = value as { node: ContractNode; abi: Abi }\n      lines.push(\n        `${indent}  ${safeKey}: ${renderContractType(node, abi, indent + '  ')};`\n      )\n    }\n  }\n  lines.push(`${indent}}`)\n  return lines.join('\\n')\n}\n\nfunction renderPropKey(name: string): string {\n  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name)\n}\n\nfunction renderContractType(\n  node: ContractNode,\n  abi: Abi,\n  indent: string\n): string {\n  const members: string[] = []\n  const seen = new Set<string>()\n  members.push(\n    `${indent}  [EVERYTHING]: (options?: Options) => TargetPermission;`\n  )\n  for (const fragment of abi) {\n    if (fragment.type !== 'function') continue\n    if (\n      fragment.stateMutability === 'view' ||\n      fragment.stateMutability === 'pure'\n    ) {\n      continue\n    }\n    const name = fragment.name as string\n    if (!name || seen.has(name)) continue\n    seen.add(name)\n    members.push(renderFunctionSignature(fragment, indent + '  '))\n  }\n  return ['{', ...members, `${indent}}`].join('\\n')\n}\n\nfunction renderFunctionSignature(\n  fragment: AbiFragment,\n  indent: string\n): string {\n  const name = renderPropKey(fragment.name as string)\n  const params: string[] = []\n  for (const input of (fragment.inputs as AbiFragment[]) ?? []) {\n    const paramName = sanitizeParamName(\n      input.name || `arg${params.length}`,\n      params.length\n    )\n    params.push(`${paramName}?: Scoping<${tsTypeFor(input)}>`)\n  }\n  params.push(`options?: Options`)\n  return `${indent}${name}: (${params.join(', ')}) => FunctionPermission;`\n}\n\nfunction sanitizeParamName(name: string, index: number): string {\n  const cleaned = name.replace(/[^A-Za-z0-9_$]/g, '_')\n  if (!cleaned || /^[0-9]/.test(cleaned)) return `arg${index}`\n  // Named tuple element labels can't collide with TS reserved words.\n  const reserved = new Set([\n    'function',\n    'class',\n    'new',\n    'number',\n    'string',\n    'object',\n    'boolean',\n    'symbol',\n    'default',\n    'return',\n    'this',\n    'void',\n    'delete',\n    'in',\n    'of',\n    'for',\n    'while',\n    'switch',\n    'case',\n    'if',\n    'else',\n    'null',\n    'true',\n    'false',\n    'undefined',\n    'any',\n    'never',\n    'unknown',\n  ])\n  return reserved.has(cleaned) ? `_${cleaned}` : cleaned\n}\n\nfunction tsTypeFor(fragment: AbiFragment): string {\n  const type = fragment.type as string\n\n  const arrayMatch = /^(.*)\\[(\\d*)\\]$/.exec(type)\n  if (arrayMatch) {\n    const inner: AbiFragment = { ...fragment, type: arrayMatch[1] }\n    return `readonly (${tsTypeFor(inner)})[]`\n  }\n\n  if (type === 'tuple') {\n    const components = (fragment.components as AbiFragment[]) ?? []\n    if (components.length === 0) return 'Record<string, unknown>'\n    const fields = components.map((c, i) => {\n      const key = sanitizeParamName(c.name || `f${i}`, i)\n      return `${renderPropKey(key)}: ${tsTypeFor(c)}`\n    })\n    return `{ ${fields.join('; ')} }`\n  }\n\n  if (type === 'address') return '`0x${string}`'\n  if (type === 'bool') return 'boolean'\n  if (type === 'string') return 'string'\n  if (type === 'bytes') return 'import(\"ethers\").BytesLike'\n  if (/^bytes\\d+$/.test(type)) return '`0x${string}`'\n  if (/^u?int\\d*$/.test(type)) return 'import(\"ethers\").BigNumberish'\n  return 'unknown'\n}\n\nexport function writeGenerated(outFile: string, source: string): void {\n  fs.mkdirSync(path.dirname(outFile), { recursive: true })\n  fs.writeFileSync(outFile, source, 'utf8')\n}\n","import fs from 'node:fs'\nimport path from 'node:path'\nimport type { ZodiacConfig } from '../config'\nimport { resolveAbisDir, resolveTypesDir } from '../config'\nimport { abiFilePath, walkContracts, writeAbi } from '../../allow/abi'\nimport { fetchAbi } from '../../allow/fetch'\nimport { chainIdFor } from '../../allow/networks'\nimport { generateAllowTypes, writeGenerated } from '../../allow/codegen'\n\ntype Status = 'ok' | 'fetched' | 'missing'\n\nexport const pullContracts = async (config: ZodiacConfig) => {\n  if (!config.contracts || Object.keys(config.contracts).length === 0) {\n    console.log('No contracts defined in config, skipping.')\n    return\n  }\n\n  const abisDir = resolveAbisDir(config)\n  const generatedFile = path.join(resolveTypesDir(config), 'allow.d.ts')\n\n  let missing = 0\n  let fetched = 0\n  let existing = 0\n\n  for (const node of walkContracts(config.contracts)) {\n    const file = abiFilePath(abisDir, node)\n\n    if (fs.existsSync(file)) {\n      existing++\n      report(node.chain, node.segments, node.address, 'ok', file)\n      continue\n    }\n\n    let chainId: number\n    try {\n      chainId = chainIdFor(node.chain)\n    } catch (error) {\n      missing++\n      report(\n        node.chain,\n        node.segments,\n        node.address,\n        'missing',\n        file,\n        (error as Error).message\n      )\n      continue\n    }\n\n    const abi = await fetchAbi(chainId, node.address)\n    if (!abi) {\n      missing++\n      report(\n        node.chain,\n        node.segments,\n        node.address,\n        'missing',\n        file,\n        `api.abi.pub returned no ABI for chain ${chainId}`\n      )\n      continue\n    }\n    writeAbi(abisDir, node, abi)\n    fetched++\n    report(node.chain, node.segments, node.address, 'fetched', file)\n  }\n\n  console.log('')\n  console.log(\n    `Contracts summary: ${existing} existing, ${fetched} fetched, ${missing} missing.`\n  )\n  if (missing > 0) {\n    console.log('')\n    console.log('Missing ABIs must be provided manually. Paste the contract')\n    console.log(\n      'ABI JSON at the paths listed above and re-run `zodiac-os pull-contracts`.'\n    )\n  }\n\n  const source = generateAllowTypes(abisDir, config.contracts)\n  writeGenerated(generatedFile, source)\n  console.log('')\n  console.log(`Wrote typings to ${path.relative(process.cwd(), generatedFile)}`)\n\n  if (missing > 0) process.exit(1)\n}\n\nfunction report(\n  chain: string,\n  segments: string[],\n  address: string,\n  status: Status,\n  file: string,\n  reason?: string\n) {\n  const label = `${chain}.${segments.join('.')}`.padEnd(40, ' ')\n  const tag = {\n    ok: '  cached  ',\n    fetched: '  fetched ',\n    missing: '  MISSING ',\n  }[status]\n  const suffix = reason ? ` — ${reason}` : ''\n  console.log(`${tag} ${label} ${address}${suffix}`)\n  if (status === 'missing') {\n    console.log(`            → paste ABI at ${file}`)\n  }\n}\n","import { Command } from 'commander'\nimport { loadConfig } from './config'\nimport { pullOrg } from './commands/pullOrg'\nimport { pullContracts } from './commands/pullContracts'\n\nexport const run = async (argv: string[] = process.argv) => {\n  const program = new Command()\n\n  program\n    .name('zodiac-os')\n    .description('Zodiac OS SDK CLI – pull org data and contract ABIs')\n    .version('1.0.0')\n    .option(\n      '-c, --config <path>',\n      'path to the config file',\n      'zodiac.config.ts'\n    )\n\n  program\n    .command('pull-org')\n    .description('Fetch Zodiac users and vaults, generate TypeScript types')\n    .action(async (_opts, cmd) => {\n      const config = await loadConfig(cmd.optsWithGlobals().config)\n      await pullOrg(config)\n    })\n\n  program\n    .command('pull-contracts')\n    .description('Fetch contract ABIs, generate typed permissions kit')\n    .action(async (_opts, cmd) => {\n      const config = await loadConfig(cmd.optsWithGlobals().config)\n      await pullContracts(config)\n    })\n\n  program\n    .command('pull')\n    .description('Fetch Zodiac org and contracts ABI, generate SDK functions')\n    .action(async (_opts, cmd) => {\n      const config = await loadConfig(cmd.optsWithGlobals().config)\n      await Promise.all([pullOrg(config), pullContracts(config)])\n    })\n\n  await program.parseAsync(argv)\n}\n","#!/usr/bin/env node\nimport { run } from './run'\n\nrun().then(\n  () => {\n    process.exit(0)\n  },\n  (error: unknown) => {\n    if (error) console.error(error)\n    process.exit(1)\n  }\n)\n"],"mappings":";;;;;;;;;;;;;AAaA,SAAS,wBAAgC;CAEvC,MAAM,QADW,cAAc,OAAO,KAAK,IAAI,CACxB,MAAM,8BAA8B;AAC3D,KAAI,MAAO,QAAO,MAAM;AAExB,QAAO,KAAK,QAAQ,KAAK,EAAE,eAAe;;AAG5C,MAAM,aAAa,OAAgB,SAAS,MAAc;CACxD,MAAM,MAAM,KAAK,OAAO,OAAO;CAC/B,MAAM,WAAW,KAAK,OAAO,SAAS,EAAE;AAExC,KAAI,UAAU,KAAM,QAAO;AAC3B,KAAI,OAAO,UAAU,SAAU,QAAO,GAAG,MAAM;AAC/C,KAAI,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,MAAM;AAC3D,KAAI,OAAO,UAAU,YAAY,OAAO,UAAU,UAChD,QAAO,OAAO,MAAM;AACtB,KAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,MAAM,MAAM,KAAK,MAAM,GAAG,WAAW,UAAU,GAAG,SAAS,EAAE,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,IAAI;;AAE/F,KAAI,OAAO,UAAU,UAAU;EAC7B,MAAM,UAAU,OAAO,QAAQ,MAAiC;AAChE,MAAI,QAAQ,WAAW,EAAG,QAAO;AAKjC,SAAO,MAJO,QAAQ,KACnB,CAAC,GAAG,OACH,GAAG,WAAW,6BAA6B,KAAK,EAAE,GAAG,IAAI,KAAK,UAAU,EAAE,CAAC,IAAI,UAAU,GAAG,SAAS,EAAE,GAC1G,CACkB,KAAK,MAAM,CAAC,KAAK,IAAI;;AAE1C,QAAO,OAAO,MAAM;;AAGtB,MAAa,UAAU,OAAO,WAAyB;CACrD,MAAM,SAAS,IAAI,UAAU,EAC3B,QAAQ,OAAO,QAChB,CAAC;CAEF,MAAM,CAAC,OAAO,mBAAmB,MAAM,QAAQ,IAAI,CACjD,OAAO,WAAW,EAClB,OAAO,YAAY,CACpB,CAAC;CAEF,MAAM,eAAe,gBAAgB,SAAS,OAAO,GAAG,OAAO;CAE/D,MAAM,EAAE,QAAQ,aAAa,MAAM,OAAO,qBACxC,gBAAgB,GAAG,aACnB,EACE,eAAe,aAAa,KAAK,WAAW;EAC1C,MAAM;EACN,OAAO,MAAM;EACb,SAAS,MAAM;EAChB,EAAE,EACJ,CACF;CAED,IAAI,eAAe;CACnB,MAAM,eAAwC,EAAE;AAChD,MAAK,MAAM,MAAM,iBAAiB;EAChC,MAAM,WAAoC,EAAE;AAC5C,OAAK,MAAM,SAAS,GAAG,QAAQ;GAC7B,MAAM,UAAU,SAAS;AACzB,aACE,QAAQ,SAAS,QACjB,mCAAmC,MAAM,KAC1C;AACD,YAAS,MAAM,SAAS;IACtB,IAAI,MAAM;IACV,OAAO,MAAM;IACb,SAAS,QAAQ;IACjB,OAAO,MAAM;IACb,WAAW,QAAQ;IACnB,QAAQ,CAAC,GAAG,QAAQ,OAAO;IAC3B,SAAS,CAAC,GAAG,QAAQ,QAAQ;IAC9B;;AAEH,eAAa,GAAG,iBAAiB;GAC/B,aAAa,GAAG;GAChB,eAAe,GAAG;GAClB,QAAQ;GACT;;CAGH,MAAM,4BAAY,IAAI,KAAqB;AAC3C,MAAK,MAAM,QAAQ,MACjB,WAAU,IAAI,KAAK,WAAW,UAAU,IAAI,KAAK,SAAS,IAAI,KAAK,EAAE;CAGvE,MAAM,cAAuC,EAAE;AAC/C,MAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,SACJ,UAAU,IAAI,KAAK,SAAS,GAAI,IAC5B,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,KAC7B,KAAK;AACX,cAAY,UAAU;GACpB,IAAI,KAAK;GACT,UAAU,KAAK;GACf,eAAe,KAAK;GACrB;;CAGH,MAAM,SAAS,KAAK,uBAAuB,EAAE,aAAa;AAE1D,WAAU,QAAQ,EAAE,WAAW,MAAM,CAAC;AAGtC,eACE,KAAK,QAAQ,eAAe,EAC5B,KAAK,UACH;EACE,MAAM;EACN,MAAM;EACN,MAAM;EACN,OAAO;EACR,EACD,MACA,EACD,CACF;CAaD,MAAM,aAVU,IAAI,QAAQ;EAC1B,iBAAiB;GACf,aAAa;GACb,QAAQ,WAAW;GACnB,QAAQ,aAAa;GACrB;GACD;EACD,uBAAuB;EACxB,CAAC,CAEyB,iBAAiB,YAAY,GAAG;AAE3D,YAAW,qBAAqB;EAC9B,YAAY;EACZ,iBAAiB,wBAAwB;EACzC,cAAc,CACZ;GACE,MAAM;GACN,aAAa,GAAG,UAAU,YAAY,CAAC;GACxC,CACF;EACF,CAAC;AAEF,YAAW,qBAAqB;EAC9B,YAAY;EACZ,iBAAiB,wBAAwB;EACzC,cAAc,CACZ;GACE,MAAM;GACN,aAAa,GAAG,UAAU,aAAa,CAAC;GACzC,CACF;EACF,CAAC;CAEF,MAAM,aAAa,WAAW,eAAe;AAC7C,MAAK,MAAM,cAAc,WAAW,gBAAgB,CAGlD,eAAc,KAAK,QAFF,WAAW,aAAa,CACf,SAAS,QAAQ,GAAG,eAAe,WACzB,EAAE,WAAW,SAAS,CAAC;;;;ACtK/D,eAAsB,SACpB,SACA,SACqB;CACrB,MAAM,MAAM,iCAAiC,QAAQ,mDAAmD;CACxG,IAAI;AACJ,KAAI;EACF,MAAM,OAAO,MAAM,MAAM,IAAI;AAC7B,MAAI,CAAC,KAAK,GAAI,QAAO;AACrB,SAAQ,MAAM,KAAK,MAAM;SACnB;AACN,SAAO;;AAET,KAAI,KAAK,WAAW,OAAO,OAAO,KAAK,WAAW,SAAU,QAAO;AACnE,KAAI;EACF,MAAM,SAAS,KAAK,MAAM,KAAK,OAAO;AACtC,MAAI,CAAC,MAAM,QAAQ,OAAO,IAAI,OAAO,WAAW,EAAG,QAAO;AAC1D,SAAO;SACD;AACN,SAAO;;;;;AClBX,SAAgB,mBACd,SACA,iBACQ;CAGR,MAAM,uBAAa,IAAI,KAAK;AAC5B,MAAK,MAAM,QAAQ,cAAc,gBAAgB,EAAE;EACjD,MAAM,MAAM,QAAQ,SAAS,KAAK;AAClC,MAAI,CAAC,IAAK;AACV,iBAAe,MAAM,CAAC,KAAK,OAAO,GAAG,KAAK,SAAS,EAAE;GAAE;GAAM;GAAK,CAAC;;CAGrE,MAAM,MAAgB,EAAE;AACxB,KAAI,KAAK,gEAAgE;AACzE,KAAI,KAAK,uBAAuB;AAChC,KAAI,KAAK,GAAG;AACZ,KAAI,KACF,gFACD;AACD,KAAI,KACF,4EACD;AACD,KAAI,KAAK,GAAG;AACZ,KAAI,KAAK,mBAAmB;AAC5B,KAAI,KAAK,0BAA0B,WAAW,MAAM,KAAK,CAAC;AAC1D,KAAI,KAAK,IAAI;AACb,KAAI,KAAK,GAAG;AACZ,KAAI,KAAK,aAAa;AACtB,KAAI,KAAK,GAAG;AACZ,QAAO,IAAI,KAAK,KAAK;;AAGvB,SAAS,eACP,MACA,UACA,MACM;CACN,MAAM,CAAC,OAAO,GAAG,QAAQ;AACzB,KAAI,CAAC,MAAO,OAAM,IAAI,MAAM,iBAAiB;AAC7C,KAAI,KAAK,WAAW,GAAG;AACrB,OAAK,IAAI,OAAO,KAAK;AACrB;;CAEF,IAAI,QAAQ,KAAK,IAAI,MAAM;AAC3B,KAAI,CAAC,SAAS,MAAM,MAAM;AACxB,0BAAQ,IAAI,KAAK;AACjB,OAAK,IAAI,OAAO,MAAM;;AAExB,gBAAe,OAAO,MAAM,KAAK;;AAGnC,SAAS,WAAW,MAAwB,QAAwB;CAClE,MAAM,QAAkB,CAAC,IAAI;AAC7B,MAAK,MAAM,CAAC,KAAK,UAAU,MAAM;EAC/B,MAAM,UAAU,cAAc,IAAI;AAClC,MAAI,iBAAiB,IACnB,OAAM,KAAK,GAAG,OAAO,IAAI,QAAQ,IAAI,WAAW,OAAO,SAAS,KAAK,CAAC,GAAG;OACpE;GACL,MAAM,EAAE,MAAM,QAAQ;AACtB,SAAM,KACJ,GAAG,OAAO,IAAI,QAAQ,IAAI,mBAAmB,MAAM,KAAK,SAAS,KAAK,CAAC,GACxE;;;AAGL,OAAM,KAAK,GAAG,OAAO,GAAG;AACxB,QAAO,MAAM,KAAK,KAAK;;AAGzB,SAAS,cAAc,MAAsB;AAC3C,QAAO,6BAA6B,KAAK,KAAK,GAAG,OAAO,KAAK,UAAU,KAAK;;AAG9E,SAAS,mBACP,MACA,KACA,QACQ;CACR,MAAM,UAAoB,EAAE;CAC5B,MAAM,uBAAO,IAAI,KAAa;AAC9B,SAAQ,KACN,GAAG,OAAO,0DACX;AACD,MAAK,MAAM,YAAY,KAAK;AAC1B,MAAI,SAAS,SAAS,WAAY;AAClC,MACE,SAAS,oBAAoB,UAC7B,SAAS,oBAAoB,OAE7B;EAEF,MAAM,OAAO,SAAS;AACtB,MAAI,CAAC,QAAQ,KAAK,IAAI,KAAK,CAAE;AAC7B,OAAK,IAAI,KAAK;AACd,UAAQ,KAAK,wBAAwB,UAAU,SAAS,KAAK,CAAC;;AAEhE,QAAO;EAAC;EAAK,GAAG;EAAS,GAAG,OAAO;EAAG,CAAC,KAAK,KAAK;;AAGnD,SAAS,wBACP,UACA,QACQ;CACR,MAAM,OAAO,cAAc,SAAS,KAAe;CACnD,MAAM,SAAmB,EAAE;AAC3B,MAAK,MAAM,SAAU,SAAS,UAA4B,EAAE,EAAE;EAC5D,MAAM,YAAY,kBAChB,MAAM,QAAQ,MAAM,OAAO,UAC3B,OAAO,OACR;AACD,SAAO,KAAK,GAAG,UAAU,aAAa,UAAU,MAAM,CAAC,GAAG;;AAE5D,QAAO,KAAK,oBAAoB;AAChC,QAAO,GAAG,SAAS,KAAK,KAAK,OAAO,KAAK,KAAK,CAAC;;AAGjD,SAAS,kBAAkB,MAAc,OAAuB;CAC9D,MAAM,UAAU,KAAK,QAAQ,mBAAmB,IAAI;AACpD,KAAI,CAAC,WAAW,SAAS,KAAK,QAAQ,CAAE,QAAO,MAAM;AAgCrD,QA9BiB,IAAI,IAAI;EACvB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,CACc,IAAI,QAAQ,GAAG,IAAI,YAAY;;AAGjD,SAAS,UAAU,UAA+B;CAChD,MAAM,OAAO,SAAS;CAEtB,MAAM,aAAa,kBAAkB,KAAK,KAAK;AAC/C,KAAI,WAEF,QAAO,aAAa,UADO;EAAE,GAAG;EAAU,MAAM,WAAW;EAAI,CAC3B,CAAC;AAGvC,KAAI,SAAS,SAAS;EACpB,MAAM,aAAc,SAAS,cAAgC,EAAE;AAC/D,MAAI,WAAW,WAAW,EAAG,QAAO;AAKpC,SAAO,KAJQ,WAAW,KAAK,GAAG,MAAM;AAEtC,UAAO,GAAG,cADE,kBAAkB,EAAE,QAAQ,IAAI,KAAK,EAAE,CACvB,CAAC,IAAI,UAAU,EAAE;IAC7C,CACiB,KAAK,KAAK,CAAC;;AAGhC,KAAI,SAAS,UAAW,QAAO;AAC/B,KAAI,SAAS,OAAQ,QAAO;AAC5B,KAAI,SAAS,SAAU,QAAO;AAC9B,KAAI,SAAS,QAAS,QAAO;AAC7B,KAAI,aAAa,KAAK,KAAK,CAAE,QAAO;AACpC,KAAI,aAAa,KAAK,KAAK,CAAE,QAAO;AACpC,QAAO;;AAGT,SAAgB,eAAe,SAAiB,QAAsB;AACpE,IAAG,UAAU,KAAK,QAAQ,QAAQ,EAAE,EAAE,WAAW,MAAM,CAAC;AACxD,IAAG,cAAc,SAAS,QAAQ,OAAO;;;;ACnL3C,MAAa,gBAAgB,OAAO,WAAyB;AAC3D,KAAI,CAAC,OAAO,aAAa,OAAO,KAAK,OAAO,UAAU,CAAC,WAAW,GAAG;AACnE,UAAQ,IAAI,4CAA4C;AACxD;;CAGF,MAAM,UAAU,eAAe,OAAO;CACtC,MAAM,gBAAgB,KAAK,KAAK,gBAAgB,OAAO,EAAE,aAAa;CAEtE,IAAI,UAAU;CACd,IAAI,UAAU;CACd,IAAI,WAAW;AAEf,MAAK,MAAM,QAAQ,cAAc,OAAO,UAAU,EAAE;EAClD,MAAM,OAAO,YAAY,SAAS,KAAK;AAEvC,MAAI,GAAG,WAAW,KAAK,EAAE;AACvB;AACA,UAAO,KAAK,OAAO,KAAK,UAAU,KAAK,SAAS,MAAM,KAAK;AAC3D;;EAGF,IAAI;AACJ,MAAI;AACF,aAAU,WAAW,KAAK,MAAM;WACzB,OAAO;AACd;AACA,UACE,KAAK,OACL,KAAK,UACL,KAAK,SACL,WACA,MACC,MAAgB,QAClB;AACD;;EAGF,MAAM,MAAM,MAAM,SAAS,SAAS,KAAK,QAAQ;AACjD,MAAI,CAAC,KAAK;AACR;AACA,UACE,KAAK,OACL,KAAK,UACL,KAAK,SACL,WACA,MACA,yCAAyC,UAC1C;AACD;;AAEF,WAAS,SAAS,MAAM,IAAI;AAC5B;AACA,SAAO,KAAK,OAAO,KAAK,UAAU,KAAK,SAAS,WAAW,KAAK;;AAGlE,SAAQ,IAAI,GAAG;AACf,SAAQ,IACN,sBAAsB,SAAS,aAAa,QAAQ,YAAY,QAAQ,WACzE;AACD,KAAI,UAAU,GAAG;AACf,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,6DAA6D;AACzE,UAAQ,IACN,4EACD;;AAIH,gBAAe,eADA,mBAAmB,SAAS,OAAO,UAAU,CACvB;AACrC,SAAQ,IAAI,GAAG;AACf,SAAQ,IAAI,oBAAoB,KAAK,SAAS,QAAQ,KAAK,EAAE,cAAc,GAAG;AAE9E,KAAI,UAAU,EAAG,SAAQ,KAAK,EAAE;;AAGlC,SAAS,OACP,OACA,UACA,SACA,QACA,MACA,QACA;CACA,MAAM,QAAQ,GAAG,MAAM,GAAG,SAAS,KAAK,IAAI,GAAG,OAAO,IAAI,IAAI;CAC9D,MAAM,MAAM;EACV,IAAI;EACJ,SAAS;EACT,SAAS;EACV,CAAC;CACF,MAAM,SAAS,SAAS,MAAM,WAAW;AACzC,SAAQ,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,UAAU,SAAS;AAClD,KAAI,WAAW,UACb,SAAQ,IAAI,8BAA8B,OAAO;;;;ACnGrD,MAAa,MAAM,OAAO,OAAiB,QAAQ,SAAS;CAC1D,MAAM,UAAU,IAAI,SAAS;AAE7B,SACG,KAAK,YAAY,CACjB,YAAY,sDAAsD,CAClE,QAAQ,QAAQ,CAChB,OACC,uBACA,2BACA,mBACD;AAEH,SACG,QAAQ,WAAW,CACnB,YAAY,2DAA2D,CACvE,OAAO,OAAO,OAAO,QAAQ;AAE5B,QAAM,QADS,MAAM,WAAW,IAAI,iBAAiB,CAAC,OAAO,CACxC;GACrB;AAEJ,SACG,QAAQ,iBAAiB,CACzB,YAAY,sDAAsD,CAClE,OAAO,OAAO,OAAO,QAAQ;AAE5B,QAAM,cADS,MAAM,WAAW,IAAI,iBAAiB,CAAC,OAAO,CAClC;GAC3B;AAEJ,SACG,QAAQ,OAAO,CACf,YAAY,6DAA6D,CACzE,OAAO,OAAO,OAAO,QAAQ;EAC5B,MAAM,SAAS,MAAM,WAAW,IAAI,iBAAiB,CAAC,OAAO;AAC7D,QAAM,QAAQ,IAAI,CAAC,QAAQ,OAAO,EAAE,cAAc,OAAO,CAAC,CAAC;GAC3D;AAEJ,OAAM,QAAQ,WAAW,KAAK;;;;ACvChC,KAAK,CAAC,WACE;AACJ,SAAQ,KAAK,EAAE;IAEhB,UAAmB;AAClB,KAAI,MAAO,SAAQ,MAAM,MAAM;AAC/B,SAAQ,KAAK,EAAE;EAElB"}