cascrow-sdk 0.4.0 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # Changelog
 
+## 0.8.0 — 2026-10-20
+
+Not published yet when the second half of these changes landed; everything below ships in one 0.8.0.
+
+- **`requestHumanReview(contractId, { milestoneId?, reason? })` and `humanReviews(contractId)`.** Either party of a contract can ask for a person at cascrow to review a verification outcome (Art. 22(3) GDPR); a person decides within one month and both parties receive the decision with its reasons (`human_review.decided`). A request already open on that milestone returns `{ status: "ALREADY_OPEN", dueAt }` instead of throwing. New types `HumanReviewRequestResult` and `HumanReviewEntry`.
+- **`verifyCascrowSignature(rawBody, headers, secret, { toleranceSeconds })`** and the header names (`CASCROW_SIGNATURE_HEADER`, `CASCROW_TIMESTAMP_HEADER`, `CASCROW_REPLAY_WINDOW_SECONDS`): verify a webhook or agent callback — HMAC-SHA256 over `"t=" + <unix ms> + "." + <raw body>`, refused outside a 300-second window. WebCrypto, Node 18 falls back to `node:crypto`.
+- **`rotateCallbackSecret()`** returns a new callback signing secret once (409 `NO_CALLBACK_URL` without a callback URL); `setDiscoverable()` returns `callbackSecretSet`, and `callbackSecret` only in the answer that first set a callback URL.
+- **`createContract()` takes `reviewWindowDays` and `panelDecidesAlone`** and returns `reviewTerms` (`ReviewTerms`; null on an older server). Refusals: `REVIEW_WINDOW_OUT_OF_RANGE`, `REVIEW_WINDOW_NEEDS_BUSINESS`, `REVIEW_MODE_CONFLICT`.
+- **Type change: `ReputationResult.stats` is `null`** when the builder has not consented to publishing their figures; `getReputation()` throws the server's 404 for an address that publishes nothing. Code that read `stats.successRate` unguarded must check for null.
+- `V3_CLIENT_TEXT` carries `noArbiterVeto` (the sentence every acceptance door shows) and a hint for `SCREENING_UNAVAILABLE` (the new-money sanctions screen fails closed; retry).
+- **`setDiscoverable()` takes `showNameOnCertificates` and `consentVersion`**, and returns `showNameOnCertificates`. Turning `discoverable` or `showNameOnCertificates` ON publishes the account holder's name and needs their consent: without `consentVersion` the server changes nothing and answers 400 `CONSENT_REQUIRED` with the exact text to show and the version to send (`GET /api/agent/settings` returns the same texts). Send `consentVersion` only after the account holder agreed; turning either off needs nothing.
+- `CASCROW_SIGNER_PIN` is `cascrow-signer@0.2.0`: cascrow's wallet challenge is now a Sign-In with Ethereum message, which 0.1.0 refuses to sign. The doc comment on `register()`'s `walletNote` describes the new flow (`GET /api/user/wallet/challenge?address=<your wallet>` → sign the message → `POST /api/user/wallet`, or `npx cascrow-signer link`).
+
+## 0.7.0 — 2026-09-27
+
+- **`joinContract()` returns `{ contractId, status, activated }`**, and the new export `joinedLine(result)` renders it: `activated: true` — a $0 contract, active now; `false` — wait for the payer's MilestoneEscrowV3 offer and accept it with your own key.
+- **`reviewContract()` returns `{ status }`** — the `txHash` in its type never existed: a review completes a verification-only milestone and moves no money.
+- **New stream action `NOT_COMPLETABLE_WITHOUT_ESCROW`** (with `error` and `remedy`): the panel approved a milestone that carries an amount without a MilestoneEscrowV3 escrow, so nothing completed it and no money moved — contact support, do not resubmit. `mcpSubmit` throws the server's 409 with that code and its hint; `watchVerification` / `waitForProof` return on the first poll with `notCompletableWithoutEscrow: true`. An exhaustive `switch` over `action` will ask for the new arm — that is intended.
+- **Breaking: `releaseHoldUntil` is removed** from `VerificationResult`, `ProofStatus`, `WatchResult` and the `mcpSubmit` result, with the v2 release window it reported.
+- New hint for `RELEASE_HOLD_REMOVED` (the server refuses `releaseHoldHours` on contract creation).
+- **Breaking: `fundMilestone()` is removed** (cascrow Phase 6 — the v2 RLUSD escrow is gone). A contract whose milestones have `amountUSD` 0 is active by itself once the builder has joined; there is nothing to fund. A milestone with an amount above 0 is a MilestoneEscrowV3 escrow in native XRP: the payer offers terms with `client.v3.offer`, the builder accepts with its own key, and the payer funds it with one transaction from its own machine — `npx cascrow-signer@0.2.0 fund --milestone <id>`. The SDK signs nothing.
+- `ReputationResult.stats.totalReleasedUsd` (the value released over every escrow version) and `totalXrpReleased` (native XRP released by MilestoneEscrowV3 escrows). `totalRlusdReleased` is deprecated — the retired v2 escrow only, same value — and goes at the next major.
+- Doc comments no longer say "funds released" for a COMPLETED milestone: a verification-only milestone held no money, and a MilestoneEscrowV3 milestone is paid out on chain by its parties.
+
+## 0.6.0 — not published on its own, released as part of 0.7.0
+
+- `client.v3.offer / acceptance / submitAcceptance / prepare / reportTx / attestation / claims` — the MilestoneEscrowV3 remote calls. The SDK signs nothing and has no keystore or file access; signing is the separate, pinned `cascrow-signer` package (`CASCROW_SIGNER_PIN`). `reportTx` accepts a transaction hash only.
+- `V3Signer` is deliberately NOT part of the SDK: the one implementation of the signer's checks lives in `cascrow-signer` (import its API directly, `import { createSigner } from "cascrow-signer"`), so a browser bundle of this SDK can never pull in a keystore.
+- The verification stream's `action` may be `V3_RECOMMENDATION` (a MilestoneEscrowV3 verdict — a recommendation that moves no money); `mcpSubmit` returns `verdict: "v3_recommendation"` with `decision` and `manifestHash`. Errors with a V3 code carry `.hint` (who can act, and how), also appended to the message.
+
+## 0.5.0 — not published on its own, released as part of 0.7.0
+
+- **Breaking: `escrowFund()` is removed.** It sent the agent's EVM private key to cascrow, which signed the deposit server-side; cascrow no longer accepts, stores or signs with anyone's key. Fund a v2 escrow by signing locally: `GET /api/agent/escrow-prepare` returns the two unsigned transactions, you sign and broadcast them with your own wallet, then `POST /api/escrow/sync`. Funding a MilestoneEscrowV3 contract from an API client is not available yet. **If you ever passed a private key to `escrowFund`, treat that key as exposed and move its funds to a new wallet.**
+- `register()` returns `wallet: null` and `walletNote`: cascrow no longer generates a wallet at registration. Link your own with `GET /api/user/wallet/challenge` → sign → `POST /api/user/wallet`.
+
 ## 0.4.0 — 2026-09-25
 
 - `waitForProof(proofId, { timeoutMs, intervalMs })` — wait for a proof already submitted. Upload starts verification by itself, so this, not `verify()`, is the call after `submitProof`. Stops by throwing on 401 / 403 / 404 (waiting does not change them), returns `{ pending: true, interrupted: true }` when the run died, and honours `Retry-After` on 429 / 503.

package/README.md

@@ -1,6 +1,6 @@
 # cascrow-sdk
 
-TypeScript client for [Cascrow](https://cascrow.com) — trust infrastructure for the agent economy: AI verification, on-chain reputation, and milestone escrow on the XRP Ledger.
+TypeScript client for [Cascrow](https://cascrow.com) — trust infrastructure for the agent economy: AI verification, on-chain reputation, and — for paid work — the remote half of a non-custodial milestone escrow (MilestoneEscrowV3, native XRP).
 
 For AI agents connecting through Claude, Cursor, or Codex, use [`cascrow-mcp`](https://www.npmjs.com/package/cascrow-mcp) instead — it's the same API, exposed as MCP tools. This package is for plain application code (backends, scripts, other platforms) that want to call Cascrow directly without going through an LLM tool call.
 
@@ -21,7 +21,9 @@ const { contractId, inviteLink } = await client.createContract({
   milestones: [
     {
       title: "Ship the landing page", // printed on the certificate — keep it short
-      amountUSD: 500,
+      // 0 / absent = verification only, active once the builder joins. Above 0 = a
+      // MilestoneEscrowV3 escrow in native XRP (see "Agent-to-agent flow" below).
+      amountUSD: 0,
       daysUntilDeadline: 7,
       // The bar the AI panel judges the proof against:
       verificationCriteria: "Responsive down to 320px, LCP under 2 s on mobile, CTA links to /signup",
@@ -38,11 +40,11 @@ Get an API key via `client.register({ email, password })` (no CAPTCHA, no email
 
 ## Sandbox
 
-Escrow currently settles on the XRPL EVM Testnet (chain 1449000) using MockRLUSD, a freely mintable test token — every `amountUSD` you see in the examples below moves test funds, not real money. AI verification is real (live calls to the 5-model panel), and NFT certificates are issued on XRP Ledger Mainnet. See the [Guide](https://cascrow.com/guide) for wallet setup and getting test RLUSD from the faucet.
+MilestoneEscrowV3 runs on the XRPL EVM Sidechain **testnet** (chain 1449000) with native test XRP from the faucet — an `amountUSD` above 0 in the examples below moves test XRP, not real money. The escrow is a smart contract with no platform role: cascrow holds no key that can move escrowed funds, never signs an escrow transaction and is never the arbiter. AI verification is real (live calls to the 5-model panel), and NFT certificates are issued on XRP Ledger Mainnet. See the [Guide](https://cascrow.com/guide) for wallet setup and test XRP.
 
 ## Verification without escrow
 
-Get an independent second opinion from 5 AI models on any AI-generated work — no contract, no payment:
+Get a second opinion from 5 AI models from different providers on any AI-generated work — no contract, no payment:
 
 ```ts
 const client = new CascrowClient(); // no apiKey needed — anonymous mode
@@ -68,15 +70,26 @@ const builder = new CascrowClient({ apiKey: builderKey });
 const { contractId, inviteLink } = await requester.createContract({
   milestones: [{ title: "Build the API", amountUSD: 1000 }],
 });
-await requester.escrowFund({ contractId, agentPrivateKey: requesterEvmKey }); // escrows the milestone's own amountUSD; testnet MockRLUSD, not real funds — see Sandbox above
-
 await builder.joinContract(inviteLink!);
+
+// MilestoneEscrowV3 (native XRP, testnet): the payer offers terms, the builder accepts with
+// its own key, the payer funds with ONE transaction from its own machine. The SDK signs
+// nothing — signing is the separate, pinned local signer (npx cascrow-signer@0.2.0):
+await requester.v3.offer({ milestoneId, reviewPeriodSec: 72 * 3600, watcherDeclared: false });
+//   builder:   npx cascrow-signer@0.2.0 accept --milestone <milestoneId>
+//   requester: npx cascrow-signer@0.2.0 fund --milestone <milestoneId>
+// cascrow never accepts, creates, stores or signs with a private key (escrowFund(), which
+// took one, was removed in 0.5.0 — if you ever passed a key to it, treat that key as exposed).
+// A contract with amountUSD 0 needs none of this: it is active once the builder has joined.
+
 const { proofId } = await builder.submitProof({ milestoneId, content: "Done — see PR #12, all tests pass." });
 // Upload starts verification by itself — wait for it, don't start it again.
 const result = await builder.waitForProof(proofId);
-
+// For a MilestoneEscrowV3 milestone the AI verdict is a signed, non-binding recommendation:
+// the builder claims on chain (npx cascrow-signer@0.2.0 submit-claim --milestone <id> --proof-hash <manifestHash>),
+// the payer releases or objects before the objection deadline.
 if (!result.pending && result.milestoneStatus === "COMPLETED") {
-  console.log("Funds released automatically.");
+  console.log("Milestone complete.");
 }
 ```
 
@@ -93,11 +106,13 @@ if (!result.pending && result.milestoneStatus === "COMPLETED") {
 | `listMyContracts` | `GET /api/agent/my-contracts` |
 | `joinContract` | `POST /api/contracts/join` |
 | `reviewContract` | `POST /api/contracts/review` — pass `milestoneId` when more than one milestone is pending review |
-| `reviewQueue` | `GET /api/agent/review-queue` — the contracts on which you, as funder, still owe a verdict. The pull behind the `manual_review.required` webhook: an undecided milestone auto-approves after 48 h and releases the escrow |
+| `requestHumanReview` | `POST /api/human-review` — either party asks a person at cascrow to review a verification outcome (Art. 22(3) GDPR); an open one returns `{ status: "ALREADY_OPEN", dueAt }` |
+| `humanReviews` | `GET /api/human-review` (`?contractId=`) — the requests on a contract and their decisions |
+| `reviewQueue` | `GET /api/agent/review-queue` — the contracts on which you, as funder, still owe a verdict. The pull behind the `manual_review.required` webhook: verification-only ($0) contracts; an undecided milestone is completed automatically when its review window closes only when the panel's own verdict opened the review with a YES — any other review goes to cascrow's human review instead; the window is the contract's `reviewWindowDays` (default 14 days; 48h on an agent contract created before 2026-10-20 in review mode `MANUAL_AUTO` or `AUTO`). Moves no money |
+| `v3Claims` | `GET /api/agent/v3-claims` — as payer of a MilestoneEscrowV3 escrow, the claims that release it unless your own wallet calls `object(escrowId)` before `objectionDeadline`. Throws `V3_INDEX_STALE` (503) while the index is not current: read the chain then |
+| `v3.offer` / `v3.acceptance` / `v3.submitAcceptance` / `v3.prepare` / `v3.reportTx` / `v3.attestation` / `v3.claims` | MilestoneEscrowV3, remote half. `prepare` returns an UNSIGNED transaction — rebuild `data` and check `to`/`chainId` yourself before signing; `reportTx` takes a hash only. This SDK signs nothing: use the separate local signer, pinned — `npx cascrow-signer@0.2.0` (or `import { createSigner } from "cascrow-signer"` in Node). There is deliberately no `V3Signer` in this package. |
 | `checkInvites` | `GET /api/agent/pending-invites` |
 | `handoff` | `POST /api/agent/handoff` |
-| `fundMilestone` | `POST /api/agent/fund-milestone` |
-| `escrowFund` | `POST /api/agent/escrow-fund` |
 | `submitProof` | `POST /api/proof/upload` |
 | `getProofStatus` | `GET /api/agent/proof-status/{proofId}` |
 | `waitForProof` | poll `getProofStatus` until the proof settles — the call to make after `submitProof` |
@@ -107,7 +122,28 @@ if (!result.pending && result.milestoneStatus === "COMPLETED") {
 | `watchVerification` | `submitProof` + poll |
 | `getReputation` | `GET /api/agent/reputation/{walletAddress}` |
 | `discoverAgents` | `GET /api/agent/discover` |
-| `setDiscoverable` | `PATCH /api/agent/settings` |
+| `setDiscoverable` | `PATCH /api/agent/settings` — setting `callbackUrl` on an account without a callback secret returns `callbackSecret`, once |
+| `rotateCallbackSecret` | `POST /api/agent/settings/callback-secret` — a new callback signing secret, shown once; the previous one stops verifying |
+
+## Verifying webhooks and callbacks
+
+Every webhook and agent callback is signed the same way: `X-Cascrow-Timestamp` (ISO 8601) and
+`X-Cascrow-Signature: sha256=HMAC-SHA256(secret, "t=" + <unix ms of the timestamp> + "." + <raw body>)`.
+Verify the RAW body, before JSON parsing, and refuse a timestamp more than 5 minutes off:
+
+```ts
+import { verifyCascrowSignature } from "cascrow-sdk";
+
+const check = await verifyCascrowSignature({
+  secret: process.env.CASCROW_CALLBACK_SECRET!, // or the webhook endpoint's secret
+  body: rawBody,
+  signature: req.headers["x-cascrow-signature"],
+  timestamp: req.headers["x-cascrow-timestamp"],
+});
+if (!check.ok) return res.status(401).send(check.reason);
+```
+
+Delivery is at least once for chain-driven events — dedupe on `data.outboxId`.
 
 ## Errors
 

package/dist/client.d.ts

@@ -1,4 +1,5 @@
-import type { Contract, CreateContractInput, CreateContractResult, DiscoverAgentsResult, MyContractSummary, ReviewQueueResult, RegisterInput, RegisterResult, ReputationResult, VerificationResult, VerifyWorkInput, VerifyWorkResult } from "./types.js";
+import type { Contract, CreateContractInput, CreateContractResult, DiscoverAgentsResult, MyContractSummary, ReviewQueueResult, HumanReviewEntry, HumanReviewRequestResult, V3ClaimsResult, RegisterInput, RegisterResult, ReputationResult, VerificationResult, VerifyWorkInput, VerifyWorkResult } from "./types.js";
+import type { V3AcceptanceData, V3Action, V3Attestation, V3OfferInput, V3PreparedTx } from "./v3.js";
 export interface CascrowClientOptions {
     /** API key starting with csk_. Omit only for endpoints that support anonymous use (register, getReputation, verifyWork). */
     apiKey?: string;
@@ -11,10 +12,14 @@ export type WatchResult = {
     /** The verdict on this proof, or `null` when the route reported none. */
     decision: "YES" | "NO" | null;
     confidence: number | null;
-    /** `"COMPLETED"` means the funds were released. */
+    /** `"COMPLETED"`: the milestone is complete (see `escrowVersion` for whether money was held). */
     milestoneStatus?: string;
-    /** Set when the payout is only SCHEDULED — no funds have moved. */
-    releaseHoldUntil?: string | null;
+    /**
+     * The milestone carries an amount without a MilestoneEscrowV3 escrow, so no
+     * verdict can complete it (cascrow has a case open; contact support, do not
+     * resubmit). Read it BEFORE `decision`: a YES here is not done.
+     */
+    notCompletableWithoutEscrow: boolean;
     /**
      * The milestone is TERMINAL (`terminalStatus`: EXPIRED or COMPLETED) and this
      * proof's verdict cannot move it. Read this BEFORE `decision`.
@@ -29,6 +34,21 @@ export type WatchResult = {
      * this proof's `"NO"` or `null`; the payout, if any, is not this proof's.
      */
     approvedWithoutThisVerdict: boolean;
+    /**
+     * `3` for a MilestoneEscrowV3 milestone, `2` otherwise (absent on an older server).
+     * On `3` the verdict is a RECOMMENDATION and moves no money: read
+     * `submissionVerdict` / `claimReady`, and claim on chain with `manifestHash`
+     * (`npx cascrow-signer submit-claim --proof-hash <manifestHash>`).
+     */
+    escrowVersion?: 2 | 3;
+    /** V3 only: the sealed submission this proof belongs to (one evidence request = one submission). */
+    submissionId?: string | null;
+    /** V3 only: the submission's manifest hash — the proofHash a claim names on chain. */
+    manifestHash?: string | null;
+    /** V3 only: the SUBMISSION's write-once verdict — YES only when every proof in it has a definite yes. */
+    submissionVerdict?: "YES" | "NO" | "PENDING" | null;
+    /** V3 only: `submissionVerdict === "YES"` — the claim cascrow recommends. */
+    claimReady?: boolean;
     reasoning?: string;
 } | {
     pending: true;
@@ -45,6 +65,35 @@ export declare class CascrowClient {
     private readonly apiKey?;
     private readonly baseUrl;
     constructor(options?: CascrowClientOptions);
+    /**
+     * MilestoneEscrowV3 — the remote half. cascrow prepares and reads; YOU sign and
+     * send with your own key. This SDK never signs: use the separate, pinned
+     * `cascrow-signer` package (`npx cascrow-signer@<pin> …`, see CASCROW_SIGNER_PIN),
+     * which checks every prepared transaction against its own chain and contract.
+     */
+    readonly v3: {
+        /** As PAYER: offer terms for a milestone. 409 `OFFER_EXISTS` names the open offer. */
+        offer: (input: V3OfferInput) => Promise<Record<string, unknown>>;
+        /** As PAYEE: the frozen offer to check and sign (EIP-712). 409 `V3_NOT_OFFERED` before the payer offered. */
+        acceptance: (milestoneId: string) => Promise<V3AcceptanceData>;
+        /** As PAYEE: hand over the acceptance signature — binding until acceptBy. */
+        submitAcceptance: (offerId: string, signature: string) => Promise<{
+            escrowId: string;
+            acceptBy: string;
+        }>;
+        /** An UNSIGNED transaction. Rebuild `data` and check `to`/`chainId` yourself before signing. */
+        prepare: (milestoneId: string, action: V3Action, extra?: {
+            proofHash?: string;
+            reasonHash?: string;
+            newDeadline?: string | number;
+        }) => Promise<V3PreparedTx>;
+        /** After YOU broadcast: the hash as a hint to re-read the chain. Only a hash — never a signed transaction. */
+        reportTx: (milestoneId: string, txHash: string) => Promise<Record<string, unknown>>;
+        /** cascrow's signed, NON-BINDING AI recommendation for a claim. 409 `ATTESTATION_PENDING` while the panel runs. */
+        attestation: (escrowId: string, claimIndex: number) => Promise<V3Attestation>;
+        /** As PAYER: open claims you can still object to (same as `v3Claims()`). */
+        claims: () => Promise<V3ClaimsResult>;
+    };
     private authHeaders;
     /**
      * Every non-streaming call carries a deadline (SEC-073).
@@ -78,9 +127,20 @@ export declare class CascrowClient {
         contracts: MyContractSummary[];
         total: number;
     }>;
-    /** Join an existing contract as the Builder using an invite code. */
+    /**
+     * Join an existing contract as the Builder using an invite code.
+     *
+     * `activated: true` — a $0 verification contract: it is active (`status: "FUNDED"`)
+     * and you can submit proof now. `activated: false` — the milestones carry an amount:
+     * wait for the payer's MilestoneEscrowV3 offer and accept it with your own wallet key
+     * (`npx cascrow-signer@0.2.0 accept --milestone <id>`, or `client.v3.acceptance` +
+     * `client.v3.submitAcceptance`); proof is accepted once the payer has funded it.
+     * `joinedLine(result)` renders that as one sentence.
+     */
     joinContract(inviteCode: string): Promise<{
         contractId: string;
+        status: string;
+        activated: boolean;
     }>;
     /**
      * Approve or reject a borderline (PENDING_REVIEW) MILESTONE. Only valid when
@@ -101,8 +161,31 @@ export declare class CascrowClient {
      * Additive optional third argument — every existing call site still compiles.
      */
     reviewContract(contractId: string, decision: "APPROVE" | "REJECT", milestoneId?: string): Promise<{
+        /**
+         * The contract's status after the decision. APPROVE completes a verification-only
+         * ($0) milestone — no money moves; there is no transaction. A MilestoneEscrowV3
+         * milestone is refused here: its payer releases or objects on chain.
+         */
         status: string;
-        txHash: string | null;
+    }>;
+    /**
+     * Ask for a person at cascrow to review a verification outcome (Art. 22(3) GDPR) —
+     * as the funder OR the builder, at any time, on any milestone the panel decided. A
+     * person decides within one month (`dueAt`); both parties receive the decision with
+     * its reasons (webhook `human_review.decided`, or read it with {@link humanReviews}).
+     * On a verification-only contract the decision can complete, reject or revoke a
+     * completion (withdrawing its certificate); on a MilestoneEscrowV3 milestone it is a
+     * statement and changes nothing on chain. `milestoneId` is required once the contract
+     * has more than one milestone. A request already open on that milestone is NOT
+     * thrown: it returns `{ status: "ALREADY_OPEN", dueAt }` — there is nothing to retry.
+     */
+    requestHumanReview(contractId: string, opts?: {
+        milestoneId?: string;
+        reason?: string;
+    }): Promise<HumanReviewRequestResult>;
+    /** The human-review requests on a contract you are a party to, newest first, with their decisions. */
+    humanReviews(contractId: string): Promise<{
+        requests: HumanReviewEntry[];
     }>;
     /**
      * The contracts on which THIS agent, as funder, still owes a manual verdict.
@@ -110,8 +193,9 @@ export declare class CascrowClient {
      * The pull behind the `manual_review.required` webhook. A webhook that does
      * not arrive — the agent was down, the endpoint 500'd, the subscription was
      * never made — is a decision that never gets made, and `cron/cancel-expired`
-     * then auto-approves the milestone after 48 h (agent contracts) or 14 days
-     * (human) and releases the escrow. The whole point of the 60–85 confidence
+     * then completes the milestone after 48 h (agent contracts in MANUAL_AUTO or
+     * AUTO) or 14 days (every other contract) — verification-only contracts, so
+     * no money moves, and nobody decided it. The whole point of the 60–85 confidence
      * band is that somebody looks.
      *
      * Every browser surface the funder has for this asks
@@ -128,6 +212,14 @@ export declare class CascrowClient {
      * not read a short list as "that was all".
      */
     reviewQueue(): Promise<ReviewQueueResult>;
+    /**
+     * As the PAYER of a MilestoneEscrowV3 escrow: the claims that release it to the
+     * builder unless your own wallet calls `object(escrowId)` before
+     * `objectionDeadline` — the pull behind the `claim.submitted` webhook. cascrow
+     * cannot object for you. Throws with code `V3_INDEX_STALE` (503) while the index
+     * is not current; read the chain directly then.
+     */
+    v3Claims(): Promise<V3ClaimsResult>;
     /** Check for pending contract invites sent to this agent. */
     checkInvites(): Promise<{
         invites: unknown[];
@@ -141,46 +233,6 @@ export declare class CascrowClient {
     }): Promise<{
         handoffId: string;
     }>;
-    /** Fund (activate) a milestone via MetaMask/browser flow so it can receive proof. */
-    fundMilestone(contractId: string, milestoneId?: string): Promise<{
-        milestoneId: string;
-        contractId: string;
-        status: string;
-    }>;
-    /**
-     * Fund a milestone with real on-chain RLUSD escrow using the agent's own EVM
-     * private key.
-     *
-     * **The escrowed amount is the milestone's own `amountUSD`.** The route
-     * destructures `{ contractId, milestoneId, agentPrivateKey }` and funds
-     * `milestone.amountUSD`; a body `amountUSD` has never been read.
-     *
-     * SEC-120 removed the parameter from both MCP tool schemas, the OpenAPI spec
-     * and the CLI — and stopped here, at the one surface where the demand was
-     * enforced by the COMPILER rather than merely written down: `amountUSD:
-     * number`, no `?`, and `input` forwarded whole. That is the same defect the
-     * removal was about, at the door that states it most strongly, and it
-     * survived because the correction was checked against the places that
-     * document the parameter rather than against the places that require it.
-     *
-     * It is deprecated rather than deleted: deleting it would break compilation
-     * for every existing caller, which is a worse answer than telling them the
-     * truth. It is no longer forwarded, so the request body now says what the
-     * server actually reads.
-     */
-    escrowFund(input: {
-        contractId: string;
-        agentPrivateKey: string;
-        /** @deprecated Ignored. The escrowed amount is the milestone's own `amountUSD`. */
-        amountUSD?: number;
-        milestoneId?: string;
-    }): Promise<{
-        milestoneId: string;
-        contractId: string;
-        txHash: string;
-        amountUSD: number;
-        status: string;
-    }>;
     /**
      * Submit a text proof report for a milestone. Verification starts by itself —
      * wait for the verdict with `waitForProof(proofId)`; do not call `verify()` for it,
@@ -218,17 +270,18 @@ export declare class CascrowClient {
         milestoneTitle?: string;
         /**
          * The MILESTONE's state, which is the question most callers are actually asking.
-         * `"COMPLETED"` means the funds were released.
+         * `"COMPLETED"`: the milestone is complete — a verification-only milestone held no
+         * money; a MilestoneEscrowV3 milestone was paid out on chain by its parties.
          */
         milestoneStatus?: string;
         /**
-         * SEC-058. Set when the payout is SCHEDULED rather than done: the milestone is at
-         * `VERIFIED`, the funds are still in escrow, the funder can contest until this
-         * instant, and the instant itself can move. The route has returned it since
-         * 2026-09-12; a TypeScript caller could not read it without a cast, so
-         * `milestoneStatus: "VERIFIED"` looked like a completed payout.
+         * `true`: this proof's milestone carries an amount without a MilestoneEscrowV3
+         * escrow, so no verdict can complete it — the verdict doors answer 409
+         * `NOT_COMPLETABLE_WITHOUT_ESCROW` and cascrow has a case open. Stop polling,
+         * contact support, do not resubmit. (Replaces `releaseHoldUntil`, which reported
+         * the removed v2 release window.)
          */
-        releaseHoldUntil?: string | null;
+        notCompletableWithoutEscrow?: boolean;
         /**
          * `true` when the milestone (or, for a legacy contract-level proof, the contract)
          * is TERMINAL — `EXPIRED` or `COMPLETED` — so no verdict on this proof can move it
@@ -247,6 +300,21 @@ export declare class CascrowClient {
          * refunded or no escrow existed. Null when not recorded.
          */
         terminalReason?: string | null;
+        /**
+         * `3` for a MilestoneEscrowV3 milestone, `2` otherwise (absent on an older server).
+         * On `3` the verdict is a RECOMMENDATION and moves no money: read
+         * `submissionVerdict` / `claimReady`, and claim on chain with `manifestHash`
+         * (`npx cascrow-signer submit-claim --proof-hash <manifestHash>`).
+         */
+        escrowVersion?: 2 | 3;
+        /** V3 only: the sealed submission this proof belongs to (one evidence request = one submission). */
+        submissionId?: string | null;
+        /** V3 only: the submission's manifest hash — the proofHash a claim names on chain. */
+        manifestHash?: string | null;
+        /** V3 only: the SUBMISSION's write-once verdict — YES only when every proof in it has a definite yes. */
+        submissionVerdict?: "YES" | "NO" | "PENDING" | null;
+        /** V3 only: `submissionVerdict === "YES"` — the claim cascrow recommends. */
+        claimReady?: boolean;
         reasoning?: string;
     }>;
     /**
@@ -264,7 +332,9 @@ export declare class CascrowClient {
     }): Promise<VerificationResult>;
     /**
      * Submit proof and get an immediate verdict in one call — runs the full
-     * 5-model pipeline and, on approval, releases funds and mints the NFT.
+     * 5-model pipeline. On approval a verification-only milestone completes and its NFT
+     * is minted; for a MilestoneEscrowV3 milestone the verdict is a recommendation
+     * (`verdict: "v3_recommendation"`) and moves no money.
      */
     mcpSubmit(input: {
         contractId: string;
@@ -292,16 +362,28 @@ export declare class CascrowClient {
          *  - `panel_unavailable` — fewer than three of the five models answered. OUR
          *    outage, not a judgement of the work, and resubmitting will not help.
          *
-         * `releaseHoldUntil` is the other half: an `approved` verdict with a hold means
-         * APPROVED and NOT PAID — the funder can contest until then, and the date can move.
+         * An approved milestone that nothing can complete (an amount without a
+         * MilestoneEscrowV3 escrow) is not a 200: the route answers 409
+         * `NOT_COMPLETABLE_WITHOUT_ESCROW`, thrown as a `CascrowApiError` with its hint.
+         */
+        /**
+         * `v3_recommendation`: the milestone is a MilestoneEscrowV3 escrow and the panel's
+         * verdict is a RECOMMENDATION — it moves no money. `decision` carries it; the payee
+         * claims on chain with the same evidence (`manifestHash`), the payer releases or objects.
          */
-        verdict: "approved" | "rejected" | "pending_review" | "decided_elsewhere" | "panel_unavailable";
+        verdict: "approved" | "rejected" | "pending_review" | "decided_elsewhere" | "panel_unavailable" | "v3_recommendation";
+        /** With `v3_recommendation`: the panel's YES/NO on this one file — NOT the claim verdict; read `submissionVerdict`. */
+        decision?: string | null;
+        /** With `v3_recommendation`: the sealed submission's manifest hash (the claim's proofHash). */
+        manifestHash?: string | null;
+        /** With `v3_recommendation`: the submission's verdict — YES only when every file has a definite AI yes. */
+        submissionVerdict?: "YES" | "NO" | "PENDING";
+        /** With `v3_recommendation`: true exactly when `submissionVerdict` is YES. */
+        claimReady?: boolean;
         confidence: number | null;
         reasoning: string;
         onChainUrl: string | null;
         proofId: string | null;
-        /** Set when `verdict` is `approved` but the payout is scheduled rather than done. */
-        releaseHoldUntil: string | null;
         /**
          * With `decided_elsewhere`: the TERMINAL status the milestone was already in
          * (`"EXPIRED"`, `"COMPLETED"`) — it was closed before this submission could settle
@@ -403,16 +485,47 @@ export declare class CascrowClient {
         minRate?: number;
         limit?: number;
     }): Promise<DiscoverAgentsResult>;
-    /** Configure this agent's discovery settings, skills, and callback URL. */
+    /**
+     * Configure this agent's discovery settings, whether its name is shown on the
+     * public check page of its certificates, skills, and callback URL.
+     *
+     * Turning `discoverable` or `showNameOnCertificates` ON publishes the account
+     * holder's name and needs their consent. Without `consentVersion` the server
+     * changes nothing and answers 400 `CONSENT_REQUIRED` with the exact text to
+     * show and the version to send; `GET /api/agent/settings` returns the same texts.
+     * Send `consentVersion` only after the account holder agreed. Turning either
+     * off needs nothing.
+     */
     setDiscoverable(options: {
         discoverable?: boolean;
+        showNameOnCertificates?: boolean;
+        consentVersion?: string;
         skills?: string[];
-        callbackUrl?: string;
+        callbackUrl?: string | null;
     }): Promise<{
         discoverable?: boolean;
+        showNameOnCertificates?: boolean;
         skills?: string[];
-        callbackUrl?: string;
+        callbackUrl?: string | null;
         profileUrl?: string;
+        /** Whether callbacks are signed with a secret this account has. */
+        callbackSecretSet?: boolean;
+        /**
+         * Present ONLY in the answer that set a callback URL on an account without a
+         * secret: the signing secret for callbacks, shown once. Store it; verify each
+         * callback with `verifyCascrowSignature`. Lost it? `rotateCallbackSecret()`.
+         */
+        callbackSecret?: string;
+        callbackSecretNotice?: string;
+    }>;
+    /**
+     * Replace this agent's callback signing secret and return the new one, once.
+     * The previous secret stops verifying immediately. 409 `NO_CALLBACK_URL` when
+     * no callback URL is set (set one with `setDiscoverable({ callbackUrl })`).
+     */
+    rotateCallbackSecret(): Promise<{
+        callbackSecret: string;
+        message: string;
     }>;
 }
 //# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,QAAQ,EACR,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EAEpB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EACjB,MAAM,YAAY,CAAC;AA6BpB,MAAM,WAAW,oBAAoB;IACnC,4HAA4H;IAC5H,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA6GD,8DAA8D;AAC9D,MAAM,MAAM,WAAW,GAEjB;IACE,OAAO,EAAE,KAAK,CAAC;IACf,yEAAyE;IACzE,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;OAGG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wFAAwF;IACxF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;OAIG;IACH,0BAA0B,EAAE,OAAO,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IACE,OAAO,EAAE,IAAI,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,IAAI,CAAC;IAC3B,+JAA+J;IAC/J,WAAW,CAAC,EAAE,IAAI,CAAC;CACpB,CAAC;AA2FR,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,GAAE,oBAAyB;IAK9C,OAAO,CAAC,WAAW;IAInB;;;;;;;;;;;;;OAaG;YACW,OAAO;IA0ErB,8HAA8H;IACxH,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAI7D,6DAA6D;IACvD,UAAU,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAMhD,oHAAoH;IAC9G,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2C/E,gEAAgE;IAC1D,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIxD,gEAAgE;IAC1D,eAAe,CAAC,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAO,GAAG,OAAO,CAAC;QAC/E,SAAS,EAAE,iBAAiB,EAAE,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAKF,qEAAqE;IAC/D,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAIvE;;;;;;;;;;;;;;;;;OAiBG;IACG,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,GAAG,QAAQ,EAC9B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAQrD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAI/C,6DAA6D;IACvD,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;IAIrD,6DAA6D;IACvD,OAAO,CAAC,KAAK,EAAE;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAMlC,qFAAqF;IAC/E,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAInI;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,UAAU,CAAC,KAAK,EAAE;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,mFAAmF;QACnF,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAO3G;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOnH,uFAAuF;IACjF,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;;;;WAMG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;WAGG;QACH,UAAU,CAAC,EAAE,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;QAC9D,0EAA0E;QAC1E,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,0EAA0E;QAC1E,QAAQ,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;WAGG;QACH,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB;;;;;;WAMG;QACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC;;;;;;;WAOG;QACH,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,sEAAsE;QACtE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B;;;;;WAKG;QACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAIF;;;;;;;;;OASG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,UAAU,GAAG,UAAU,CAAA;KAAO,GACpD,OAAO,CAAC,kBAAkB,CAAC;IAwI9B;;;OAGG;IACG,SAAS,CAAC,KAAK,EAAE;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE;YACR,WAAW,EAAE,MAAM,CAAC;YACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACxC,CAAC;KACH,GAAG,OAAO,CAAC;QACV;;;;;;;;;;;;;;;;;WAiBG;QACH,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;QAChG,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,qFAAqF;QACrF,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC;;;;;WAKG;QACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;IA+CF;;;;;;OAMG;IACG,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAInE;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO;IAKhD;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,iBAAiB,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IAKjH;;;;;;;;;;;;;OAaG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAkEpH;;;;;;;;;;;;;OAaG;IACG,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIrE,oFAAoF;IAC9E,cAAc,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IASvH,2EAA2E;IACrE,eAAe,CAAC,OAAO,EAAE;QAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAGtG"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,QAAQ,EACR,mBAAmB,EACnB,oBAAoB,EAEpB,oBAAoB,EAEpB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACxB,cAAc,EACd,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA6BrG,MAAM,WAAW,oBAAoB;IACnC,4HAA4H;IAC5H,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAsHD,8DAA8D;AAC9D,MAAM,MAAM,WAAW,GAEjB;IACE,OAAO,EAAE,KAAK,CAAC;IACf,yEAAyE;IACzE,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iGAAiG;IACjG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,2BAA2B,EAAE,OAAO,CAAC;IACrC;;;OAGG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wFAAwF;IACxF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;OAIG;IACH,0BAA0B,EAAE,OAAO,CAAC;IACpC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACtB,oGAAoG;IACpG,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yGAAyG;IACzG,iBAAiB,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC;IACpD,6EAA6E;IAC7E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IACE,OAAO,EAAE,IAAI,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,IAAI,CAAC;IAC3B,+JAA+J;IAC/J,WAAW,CAAC,EAAE,IAAI,CAAC;CACpB,CAAC;AA8FR,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,GAAE,oBAAyB;IAK9C;;;;;OAKG;IACH,QAAQ,CAAC,EAAE;QACT,sFAAsF;uBACvE,YAAY,KAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,6GAA6G;kCACnF,MAAM,KAAG,OAAO,CAAC,gBAAgB,CAAC;QAE5D,6EAA6E;oCACjD,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QAEvG,gGAAgG;+BAEjF,MAAM,UACX,QAAQ,UACT;YAAE,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,KAChF,OAAO,CAAC,YAAY,CAAC;QAOxB,8GAA8G;gCACtF,MAAM,UAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAKjF,mHAAmH;gCAC3F,MAAM,cAAc,MAAM,KAAG,OAAO,CAAC,aAAa,CAAC;QAE3E,4EAA4E;sBAChE,OAAO,CAAC,cAAc,CAAC;MACnC;IAEF,OAAO,CAAC,WAAW;IAInB;;;;;;;;;;;;;OAaG;YACW,OAAO;IA0ErB,8HAA8H;IACxH,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAI7D,6DAA6D;IACvD,UAAU,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAMhD,oHAAoH;IAC9G,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA8C/E,gEAAgE;IAC1D,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIxD,gEAAgE;IAC1D,eAAe,CAAC,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAO,GAAG,OAAO,CAAC;QAC/E,SAAS,EAAE,iBAAiB,EAAE,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAKF;;;;;;;;;OASG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAI3G;;;;;;;;;;;;;;;;;OAiBG;IACG,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,GAAG,QAAQ,EAC9B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;QACT;;;;WAIG;QACH,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IAQF;;;;;;;;;;OAUG;IACG,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GACnD,OAAO,CAAC,wBAAwB,CAAC;IAiBpC,sGAAsG;IAChG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAIjF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAI/C;;;;;;OAMG;IACG,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC;IAIzC,6DAA6D;IACvD,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;IAIrD,6DAA6D;IACvD,OAAO,CAAC,KAAK,EAAE;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAmBlC;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOnH,uFAAuF;IACjF,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;;;;WAMG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;WAGG;QACH,UAAU,CAAC,EAAE,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;QAC9D,0EAA0E;QAC1E,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,0EAA0E;QAC1E,QAAQ,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;;WAIG;QACH,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB;;;;;;WAMG;QACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;QACtC;;;;;;;WAOG;QACH,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,sEAAsE;QACtE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B;;;;;WAKG;QACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B;;;;;WAKG;QACH,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACtB,oGAAoG;QACpG,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,sFAAsF;QACtF,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,yGAAyG;QACzG,iBAAiB,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC;QACpD,6EAA6E;QAC7E,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAIF;;;;;;;;;OASG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,UAAU,GAAG,UAAU,CAAA;KAAO,GACpD,OAAO,CAAC,kBAAkB,CAAC;IAwJ9B;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE;YACR,WAAW,EAAE,MAAM,CAAC;YACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACxC,CAAC;KACH,GAAG,OAAO,CAAC;QACV;;;;;;;;;;;;;;;;;;WAkBG;QACH;;;;WAIG;QACH,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;QACtH,uHAAuH;QACvH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,+FAA+F;QAC/F,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,2GAA2G;QAC3G,iBAAiB,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,SAAS,CAAC;QAC7C,8EAA8E;QAC9E,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB;;;;;WAKG;QACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;IA4DF;;;;;;OAMG;IACG,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAInE;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO;IAKhD;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,iBAAiB,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IAKjH;;;;;;;;;;;;;OAaG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IA+EpH;;;;;;;;;;;;;OAaG;IACG,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIrE,oFAAoF;IAC9E,cAAc,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IASvH;;;;;;;;;;OAUG;IACG,eAAe,CAAC,OAAO,EAAE;QAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,GAAG,OAAO,CAAC;QACV,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,mEAAmE;QACnE,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B;;;;WAIG;QACH,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IAIF;;;;OAIG;IACG,oBAAoB,IAAI,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAGnF"}