cspr402 0.4.7

package/dist/ows.js

@@ -0,0 +1,565 @@
+"use strict";
+// OWS (Open Wallet Standard) wallet integration for cards402.
+//
+// Agents use an OWS wallet instead of a raw STELLAR_WALLET_SECRET:
+//   - Keys are encrypted at rest in the OWS vault file
+//   - BIP-44 derivation (m/44'/148'/0') for Stellar
+//   - Same wallet works across EVM, Solana, Stellar (multi-chain portability)
+//   - Supports passphrase protection and API key scoping
+//
+// Signing bridge: stellar-sdk computes the correct network-passphrase-prefixed
+// hash; OWS ed25519-signs that hash; we attach the result as a DecoratedSignature.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.payVCCOWS = void 0;
+exports.createOWSWallet = createOWSWallet;
+exports.importStellarKey = importStellarKey;
+exports.getOWSPublicKey = getOWSPublicKey;
+exports.getOWSBalance = getOWSBalance;
+exports.onboardAgent = onboardAgent;
+exports.checkSorobanTxLanded = checkSorobanTxLanded;
+exports.addUsdcTrustlineOWS = addUsdcTrustlineOWS;
+exports.payViaContractOWS = payViaContractOWS;
+exports.purchaseCardOWS = purchaseCardOWS;
+const stellar_ows_core_1 = require("@ctx.com/stellar-ows-core");
+const stellar_sdk_1 = require("@stellar/stellar-sdk");
+const errors_1 = require("./errors");
+const soroban_1 = require("./soroban");
+const USDC_ISSUER = 'GA5ZSEJYB37JRC5AVCIA5MOP4RHTM335X2KGX3IHOJAPP5RE34K4KZVN';
+const STELLAR_CHAIN = 'stellar';
+function assertSorobanPayment(payment) {
+    if (payment.type !== 'soroban_contract') {
+        throw new Error(`Expected soroban_contract payment instructions, got ${payment.type}`);
+    }
+}
+function withTimeout(promise, ms = 15000) {
+    return Promise.race([
+        promise,
+        new Promise((_, reject) => setTimeout(() => reject(new Error(`Horizon request timed out after ${ms}ms`)), ms)),
+    ]);
+}
+// ── Wallet helpers ────────────────────────────────────────────────────────────
+/** Extract the Stellar G-address from an OWS WalletInfo. */
+function getStellarAddress(wallet) {
+    const account = wallet.accounts.find((a) => a.chainId.includes('stellar'));
+    if (!account)
+        throw new Error(`OWS wallet "${wallet.name}" has no Stellar account`);
+    return account.address;
+}
+/**
+ * Create an OWS wallet, or return the existing one if a wallet with this
+ * name already exists in the vault. Idempotent by design — calling it
+ * twice with the same name is safe and returns the same keys, so skill.md
+ * flows and agent retries don't duplicate state.
+ *
+ * Wallets are stored encrypted at `~/.ows/wallets/<name>.vault` by
+ * default. If the vault file is lost, the funds it controls become
+ * unreachable — cards402 never sees private keys and can't recover
+ * them. Agents running on ephemeral filesystems (Lambda, Cloud Run,
+ * scratch containers) should pass a `vaultPath` pointing at a
+ * persistent volume, or set the `OWS_VAULT_PATH` environment variable.
+ */
+function createOWSWallet(name, passphrase, vaultPath) {
+    // Fast path: existing wallet. Returns immediately if one is already in
+    // the vault under this name.
+    try {
+        const existing = (0, stellar_ows_core_1.getWallet)(name, vaultPath ?? null);
+        return { walletId: existing.id, publicKey: getStellarAddress(existing) };
+    }
+    catch {
+        /* not found — fall through to create */
+    }
+    const wallet = (0, stellar_ows_core_1.createWallet)(name, passphrase ?? null, undefined, vaultPath ?? null);
+    return { walletId: wallet.id, publicKey: getStellarAddress(wallet) };
+}
+/**
+ * Import an existing Stellar secret key (S...) into an OWS wallet.
+ * Useful for migrating from a raw STELLAR_WALLET_SECRET to OWS custody.
+ */
+function importStellarKey(name, stellarSecret, passphrase, vaultPath) {
+    const keypair = stellar_sdk_1.Keypair.fromSecret(stellarSecret);
+    const ed25519KeyHex = Buffer.from(keypair.rawSecretKey()).toString('hex');
+    const wallet = (0, stellar_ows_core_1.importWalletPrivateKey)(name, '', // secp256k1 key (EVM) — not used for Stellar
+    passphrase ?? null, vaultPath ?? null, STELLAR_CHAIN, null, // secp256K1Key — not used
+    ed25519KeyHex);
+    return { walletId: wallet.id, publicKey: getStellarAddress(wallet) };
+}
+/** Get the Stellar public key (G-address) for a named OWS wallet. */
+function getOWSPublicKey(walletName, vaultPath) {
+    const wallet = (0, stellar_ows_core_1.getWallet)(walletName, vaultPath ?? null);
+    return getStellarAddress(wallet);
+}
+/** Check XLM and USDC balances for an OWS wallet. */
+async function getOWSBalance(walletName, vaultPath, networkPassphrase) {
+    const publicKey = getOWSPublicKey(walletName, vaultPath);
+    const server = new stellar_sdk_1.Horizon.Server((0, soroban_1.getHorizonUrl)(networkPassphrase));
+    const account = await withTimeout(server.loadAccount(publicKey));
+    let xlm = '0', usdc = '0';
+    for (const b of account.balances) {
+        if (b.asset_type === 'native')
+            xlm = b.balance;
+        if (b.asset_type === 'credit_alphanum4' &&
+            b.asset_code === 'USDC' &&
+            b.asset_issuer === USDC_ISSUER)
+            usdc = b.balance;
+    }
+    return { xlm, usdc };
+}
+/**
+ * One-shot agent setup: reports `initializing` to cards402, creates or
+ * fetches the OWS wallet, reports `awaiting_funding` with the wallet
+ * address, and returns the public key + current balance. Idempotent —
+ * safe to call on every agent startup.
+ *
+ * The backend broadcasts these transitions over the live SSE dashboard
+ * feed, so operators see the agent moving through states in real time.
+ */
+async function onboardAgent(opts) {
+    const { Cards402Client } = await Promise.resolve().then(() => __importStar(require('./client')));
+    const client = new Cards402Client({ apiKey: opts.apiKey, baseUrl: opts.baseUrl });
+    // 1. Signal "spinning up" before we touch the filesystem. Best-effort:
+    //    reportStatus swallows errors so a backend hiccup can't block setup.
+    await client.reportStatus('initializing', { detail: 'creating wallet' });
+    // 2. Create or fetch the wallet. Idempotent via createOWSWallet's
+    //    getWallet-first path.
+    const { publicKey } = createOWSWallet(opts.walletName, opts.passphrase, opts.vaultPath);
+    // 3. Fetch balance. On a fresh wallet this hits Horizon and may 404
+    //    if the account isn't activated yet (< 1 XLM on-chain). Swallow
+    //    that case and return 0/0; the dashboard will show "Awaiting
+    //    deposit" and the next getOWSBalance call will see the funds.
+    let balance = { xlm: '0', usdc: '0' };
+    try {
+        balance = await getOWSBalance(opts.walletName, opts.vaultPath);
+    }
+    catch {
+        /* unactivated account — normal on first run */
+    }
+    // 4. Report the wallet address so the dashboard can show it and
+    //    start polling Horizon for the balance.
+    await client.reportStatus('awaiting_funding', {
+        wallet_public_key: publicKey,
+        detail: `xlm=${balance.xlm} usdc=${balance.usdc}`,
+    });
+    return { publicKey, balance };
+}
+function owsSignTx(tx, walletName, publicKey, passphrase, vaultPath) {
+    // The oceans404 Stellar fork's signTransaction expects the full transaction
+    // envelope XDR, NOT just the hash. It internally:
+    //   1. Parses the XDR envelope
+    //   2. Builds the network-passphrase-prefixed signature payload
+    //   3. Ed25519-signs the sha256 of that payload
+    //   4. Returns the raw 64-byte signature
+    const envelopeXdr = tx
+        .toEnvelope()
+        .toXDR('hex');
+    const { signature: sigHex } = (0, stellar_ows_core_1.signTransaction)(walletName, STELLAR_CHAIN, envelopeXdr, passphrase ?? null, null, vaultPath ?? null);
+    const pubKeyBytes = stellar_sdk_1.StrKey.decodeEd25519PublicKey(publicKey);
+    const hint = pubKeyBytes.slice(-4);
+    tx.signatures.push(new stellar_sdk_1.xdr.DecoratedSignature({
+        hint,
+        signature: Buffer.from(sigHex, 'hex'),
+    }));
+    return tx;
+}
+// ── Soroban tx landed-check ──────────────────────────────────────────────────
+/**
+ * Check whether a Soroban tx hash has materialized on the Stellar
+ * ledger. Returns:
+ *   - 'landed'  — Horizon returned a successful tx record
+ *   - 'dropped' — Horizon 404s and the caller has already exhausted
+ *                 the inclusion window client-side, so the tx is
+ *                 almost certainly gone
+ *   - 'pending' — Horizon is down or the tx is still in the
+ *                 mempool; caller should wait rather than resubmit
+ *
+ * Used by purchaseCardOWS's resume branch to decide whether a
+ * dropped-pre-apply Soroban tx should be re-submitted or whether we
+ * should wait for a still-in-flight one to finalize.
+ */
+async function checkSorobanTxLanded(txHash, opts = {}) {
+    const horizonUrl = (0, soroban_1.getHorizonUrl)(opts.networkPassphrase);
+    try {
+        const res = await fetch(`${horizonUrl}/transactions/${txHash}`, {
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (res.ok) {
+            const body = (await res.json());
+            return body.successful === false ? 'dropped' : 'landed';
+        }
+        if (res.status === 404) {
+            // Horizon doesn't know about this tx. The caller reached us
+            // only after an in-process submit already timed out past the
+            // 120s Soroban inclusion window, so a 404 now is as good a
+            // signal as we'll get that the tx was dropped pre-apply.
+            return 'dropped';
+        }
+        // Horizon returned an unexpected status — don't make a
+        // resubmit decision based on a flaky response.
+        return 'pending';
+    }
+    catch {
+        // Network error hitting Horizon. Treat as pending — we'd
+        // rather wait than risk a double-pay on an unreliable signal.
+        return 'pending';
+    }
+}
+/**
+ * Add a USDC trustline to the OWS wallet's Stellar account.
+ *
+ * Idempotent: if the trustline already exists, returns `null` without
+ * submitting a tx (Stellar accepts redundant `changeTrust` ops and
+ * silently no-ops them, but charges the base fee each time — so
+ * pre-checking saves ~0.00001 XLM per accidental re-run). Returns the
+ * new tx hash when a trustline is actually opened.
+ */
+async function addUsdcTrustlineOWS(opts) {
+    const { walletName, passphrase, vaultPath, networkPassphrase = stellar_sdk_1.Networks.PUBLIC } = opts;
+    const publicKey = getOWSPublicKey(walletName, vaultPath);
+    const horizonUrl = (0, soroban_1.getHorizonUrl)(networkPassphrase);
+    const server = new stellar_sdk_1.Horizon.Server(horizonUrl);
+    const account = await withTimeout(server.loadAccount(publicKey));
+    // Pre-check: already have a USDC trustline to the cards402-recognised
+    // issuer? Return null without spending a fee.
+    const balances = account.balances;
+    const hasTrustline = balances.some((b) => b.asset_type === 'credit_alphanum4' &&
+        b.asset_code === 'USDC' &&
+        b.asset_issuer === USDC_ISSUER);
+    if (hasTrustline)
+        return null;
+    const tx = new stellar_sdk_1.TransactionBuilder(account, { fee: stellar_sdk_1.BASE_FEE, networkPassphrase })
+        .addOperation(stellar_sdk_1.Operation.changeTrust({ asset: new stellar_sdk_1.Asset('USDC', USDC_ISSUER) }))
+        .setTimeout(300)
+        .build();
+    owsSignTx(tx, walletName, publicKey, passphrase, vaultPath);
+    const result = await server.submitTransaction(tx);
+    return result.hash;
+}
+/**
+ * Max total submit attempts made by payViaContractOWS before giving up
+ * and surfacing the last error to the caller. Retries are ONLY triggered
+ * by the `dropped: true` marker on the submit error — any other error
+ * (on-chain failure, validation, network, timeout without dropped
+ * signal) propagates immediately. 3 attempts is a comfortable upper
+ * bound: flaky mainnet RPC usually recovers within one retry, and
+ * retrying forever past a real incident just burns wallet fees.
+ */
+const PAY_VIA_CONTRACT_MAX_ATTEMPTS = 3;
+/**
+ * Milliseconds to wait between retry attempts. Lets any in-flight
+ * original tx have one more ledger-close window to materialize before
+ * we build the retry. Stellar ledger close is ~5s, so 6s covers
+ * "one more ledger" plus a small buffer.
+ */
+const PAY_VIA_CONTRACT_RETRY_DELAY_MS = 6_000;
+async function payViaContractOWS(opts, deps = {}) {
+    const { walletName, payment, paymentAsset = 'usdc', passphrase, vaultPath, networkPassphrase = stellar_sdk_1.Networks.PUBLIC, sorobanRpcUrl, } = opts;
+    // Resolve injectable deps — each defaults to the module-level
+    // real implementation, so production callers never notice the
+    // parameter exists. Tests inject stubs to exercise the retry
+    // state machine without touching real Soroban / OWS vault.
+    const buildTx = deps.buildContractPaymentTx ?? soroban_1.buildContractPaymentTx;
+    const submitTx = deps.submitSorobanTx ?? soroban_1.submitSorobanTx;
+    const signTx = deps.owsSignTx ?? owsSignTx;
+    const pubKeyOf = deps.getOWSPublicKey ?? getOWSPublicKey;
+    assertSorobanPayment(payment);
+    if (!stellar_sdk_1.StrKey.isValidContract(payment.contract_id)) {
+        throw new Error(`Invalid contract_id in order response: ${payment.contract_id}`);
+    }
+    const publicKey = pubKeyOf(walletName, vaultPath);
+    const { fn, amountDecimal } = (0, soroban_1.selectContractCall)(payment, paymentAsset);
+    const amountStroops = (0, soroban_1.decimalToStroops)(amountDecimal);
+    // Retry loop. First attempt uses the current on-chain sequence; any
+    // retry reuses the sequence from the previous attempt via the
+    // preservedSequence plumbing in buildContractPaymentTx. This gives
+    // us mutual exclusion with the prior (possibly still in-mempool)
+    // tx — at most one can land regardless of which the network picks.
+    //
+    // Retries only trigger on the `dropped: true` marker from
+    // submitSorobanTx, which is only set when Horizon explicitly reports
+    // 404 after the 120s client-side inclusion deadline. Any other error
+    // — on-chain failure, validation, submit-level error, txHash-
+    // attached-but-not-dropped — propagates out unchanged so
+    // purchaseCardOWS's caller-side handling stays correct.
+    let preservedSequence;
+    let suggestedFee;
+    let lastErr;
+    for (let attempt = 0; attempt < PAY_VIA_CONTRACT_MAX_ATTEMPTS; attempt++) {
+        const { tx, server } = await buildTx({
+            contractId: payment.contract_id,
+            fn,
+            fromPublicKey: publicKey,
+            amountStroops,
+            orderId: payment.order_id,
+            networkPassphrase,
+            rpcUrl: sorobanRpcUrl,
+            preservedSequence,
+            fee: suggestedFee,
+        });
+        // Capture the sequence this tx uses BEFORE signing / submitting.
+        // On retry we'll feed this back in as preservedSequence so the
+        // next build lands on the same number.
+        const thisSeq = tx.sequence;
+        signTx(tx, walletName, publicKey, passphrase, vaultPath);
+        try {
+            return await submitTx(tx, server, (0, soroban_1.getHorizonUrl)(networkPassphrase));
+        }
+        catch (err) {
+            lastErr = err;
+            // Fee too low — retry with the network's required fee as floor.
+            // The tx was rejected pre-apply so no sequence was consumed;
+            // grab a fresh one on the next build (don't set preservedSequence).
+            if (err instanceof soroban_1.InsufficientFeeError) {
+                if (attempt >= PAY_VIA_CONTRACT_MAX_ATTEMPTS - 1)
+                    throw err;
+                suggestedFee = err.requiredFee;
+                continue;
+            }
+            const dropped = err?.dropped === true;
+            // Not dropped → propagate. This covers on-chain failures
+            // (sequence already consumed, retry would fail tx_bad_seq),
+            // validation errors (same error on retry), and the
+            // "txHash-attached-but-Horizon-unreachable" case (where we
+            // DON'T know whether the tx is still pending — a retry with
+            // the same sequence might race, a retry with a fresh sequence
+            // might double-pay).
+            if (!dropped)
+                throw err;
+            // Dropped pre-apply. Reuse this sequence for the next build
+            // so the retry is mutually exclusive with the prior tx.
+            preservedSequence = thisSeq;
+            // No more attempts budgeted → surface the last error.
+            if (attempt >= PAY_VIA_CONTRACT_MAX_ATTEMPTS - 1)
+                throw err;
+            // Small delay before retry so any in-flight original gets one
+            // more ledger-close window to materialize. If it lands during
+            // the wait, our retry's matching sequence will be consumed and
+            // the retry submit will fail with tx_bad_seq — which is
+            // exactly the safety property we wanted.
+            await new Promise((r) => setTimeout(r, PAY_VIA_CONTRACT_RETRY_DELAY_MS));
+        }
+    }
+    // Unreachable — the loop either returns on success or throws on
+    // failure inside the catch. Fall-through exists only to satisfy the
+    // TS return-type checker.
+    throw lastErr ?? new Error('payViaContractOWS: retry loop exited without result');
+}
+// Back-compat aliases for the old exported names.
+/** @deprecated Use `payViaContractOWS` — the old direct-Stellar path no longer matches the backend. */
+exports.payVCCOWS = payViaContractOWS;
+/**
+ * Full purchase flow using an OWS wallet: create order → pay the receiver
+ * contract on Stellar → wait for card. Any failure after the order exists
+ * is wrapped as a ResumableError so the caller can retry via `--resume`
+ * without minting a new order.
+ *
+ * Soroban RPC backpressure is tolerated: if submitSorobanTx throws with a
+ * txHash attached (deadline reached but tx may still land), we proceed to
+ * waitForCard — the cards402 backend watcher is the source of truth and
+ * will credit the order when the tx finalizes.
+ */
+async function purchaseCardOWS(opts) {
+    const { Cards402Client } = await Promise.resolve().then(() => __importStar(require('./client')));
+    const client = new Cards402Client({ apiKey: opts.apiKey, baseUrl: opts.baseUrl });
+    const paymentAsset = opts.paymentAsset ?? 'usdc';
+    let orderId;
+    let payment;
+    let skipPayment = false;
+    if (opts.resume) {
+        let priorTxHash;
+        let priorPhase;
+        if (typeof opts.resume === 'string') {
+            orderId = opts.resume;
+        }
+        else {
+            orderId = opts.resume.orderId;
+            payment = opts.resume.payment;
+            priorTxHash = opts.resume.txHash;
+            priorPhase = opts.resume.phase;
+        }
+        // Check where the order is — if the payment already landed (or is
+        // landing), we can skip straight to waitForCard.
+        const status = await client.getOrder(orderId);
+        if (status.phase === 'ready' && status.card) {
+            return { ...status.card, order_id: orderId };
+        }
+        if (status.phase === 'failed' ||
+            status.phase === 'refunded' ||
+            status.phase === 'rejected' ||
+            status.phase === 'expired') {
+            throw new errors_1.OrderFailedError(orderId, status.error ?? status.phase, status.refund);
+        }
+        if (status.phase !== 'awaiting_payment') {
+            // processing / awaiting_approval — backend is working, just wait.
+            skipPayment = true;
+        }
+        else if (payment) {
+            // Caller handed in a fresh payment object — resubmit.
+            // skipPayment stays false; fall through.
+        }
+        else if (priorTxHash && priorPhase === 'unpaid') {
+            // F1-resume fix: we have a captured tx hash from a prior
+            // ResumableError where the client never saw the tx land. Check
+            // Horizon ONE MORE TIME to see if it's materialized since the
+            // error fired — Soroban RPCs occasionally report NOT_FOUND
+            // briefly past the 120s inclusion window before the tx shows
+            // up. If Horizon still doesn't know about it, call it dropped
+            // and rebuild the payment from the order's persisted
+            // instructions (the backend returns `payment` on the order
+            // response for pending_payment orders) so we can resubmit
+            // instead of defaulting to a 5-minute waitForCard hang.
+            const landed = await checkSorobanTxLanded(priorTxHash);
+            if (landed === 'landed') {
+                // Tx is on the ledger — backend will see the Soroban event
+                // any second. Wait.
+                skipPayment = true;
+            }
+            else if (landed === 'dropped' && status.payment) {
+                // Dropped pre-apply. Rebuild payment from the backend's
+                // view of the order (which includes the original Soroban
+                // contract invocation parameters) and re-submit.
+                payment = status.payment;
+                // skipPayment stays false — fall through to the submit path.
+            }
+            else {
+                // Still pending, or we couldn't tell. Be conservative and
+                // wait — resubmitting a tx that's actually still in the
+                // mempool would double-pay if both eventually land.
+                skipPayment = true;
+            }
+        }
+        else {
+            // No prior tx context (either bare-string resume, or the
+            // saved state had no txHash). Conservative wait.
+            skipPayment = true;
+        }
+    }
+    else {
+        const order = await client.createOrder({ amount_usdc: opts.amountUsdc });
+        orderId = order.order_id;
+        payment = order.payment;
+    }
+    if (!skipPayment) {
+        if (!payment) {
+            // Unreachable: the resume branch sets skipPayment when payment is
+            // missing, and the create branch always sets payment.
+            throw new errors_1.ResumableError(orderId, 'internal: payment instructions missing for an unpaid order', 'unpaid');
+        }
+        // USDC payments need a trustline on the wallet's Stellar account. If the
+        // agent is paying in USDC and never added one, add it now so the
+        // purchase doesn't silently fail on the payment step.
+        if (paymentAsset === 'usdc') {
+            try {
+                const bal = await getOWSBalance(opts.walletName, opts.vaultPath);
+                if (bal.usdc === '0') {
+                    const publicKey = getOWSPublicKey(opts.walletName, opts.vaultPath);
+                    const server = new stellar_sdk_1.Horizon.Server((0, soroban_1.getHorizonUrl)(opts.networkPassphrase));
+                    const account = await withTimeout(server.loadAccount(publicKey));
+                    const hasTrustline = account.balances.some((b) => b.asset_type === 'credit_alphanum4' &&
+                        b.asset_code === 'USDC' &&
+                        b.asset_issuer === USDC_ISSUER);
+                    if (!hasTrustline) {
+                        await addUsdcTrustlineOWS({
+                            walletName: opts.walletName,
+                            passphrase: opts.passphrase,
+                            vaultPath: opts.vaultPath,
+                            networkPassphrase: opts.networkPassphrase,
+                        });
+                    }
+                }
+            }
+            catch (err) {
+                throw new errors_1.ResumableError(orderId, `failed to ensure USDC trustline: ${err instanceof Error ? err.message : String(err)}. The wallet needs at least 2 XLM (1 for the account reserve, 1 for the trustline)`, 'unpaid', undefined, err);
+            }
+        }
+        try {
+            await payViaContractOWS({
+                walletName: opts.walletName,
+                payment,
+                paymentAsset,
+                passphrase: opts.passphrase,
+                vaultPath: opts.vaultPath,
+                networkPassphrase: opts.networkPassphrase,
+            });
+        }
+        catch (err) {
+            // submitSorobanTx attaches `txHash` to its error when the envelope
+            // has been accepted onto the network but we gave up waiting for
+            // finalization. The DISPOSITION of that hash matters:
+            //
+            //   - dropped: true    → payViaContractOWS exhausted its retry
+            //                        budget on a provably-dropped tx. There
+            //                        is no in-mempool tx to wait for, and
+            //                        waitForCard would hang the full timeout.
+            //                        Surface as ResumableError('unpaid') so
+            //                        the CLI can save the saved state and
+            //                        the next --resume run can try again.
+            //
+            //   - dropped: false / — envelope may still land (e.g. Horizon
+            //     absent          unreachable, couldn't confirm either way).
+            //                        Fall through to waitForCard so the
+            //                        backend watcher has a chance to credit
+            //                        the order if the tx finalizes.
+            //
+            //   - no txHash        → submit never reached a known hash (pre-
+            //                        simulation failure, trustline add error,
+            //                        etc.). Resumable as 'unpaid'.
+            const errWithHash = err;
+            const hasHash = typeof errWithHash.txHash === 'string';
+            const dropped = errWithHash.dropped === true;
+            if (!hasHash || dropped) {
+                throw new errors_1.ResumableError(orderId, err instanceof Error ? err.message : String(err), 'unpaid', errWithHash.txHash, err);
+            }
+            // hasHash && !dropped — envelope may still land. Fall through.
+        }
+    }
+    try {
+        const card = await client.waitForCard(orderId, opts.waitForCardOpts);
+        return { ...card, order_id: orderId };
+    }
+    catch (err) {
+        // OrderFailedError is terminal — propagate unchanged so the CLI
+        // surfaces the real reason instead of a misleading resume hint.
+        if (err instanceof errors_1.OrderFailedError)
+            throw err;
+        // Auth / budget / validation errors from the client are also terminal.
+        if (err instanceof errors_1.Cards402Error && err.code !== 'wait_timeout')
+            throw err;
+        // Everything else (network blip, SSE disconnect, wait_timeout) — wrap
+        // as resumable. The order is paid at this point; resuming will just
+        // re-attach to the stream.
+        throw new errors_1.ResumableError(orderId, err instanceof Error ? err.message : String(err), 'paid', undefined, err);
+    }
+}
+//# sourceMappingURL=ows.js.map

package/dist/ows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ows.js","sourceRoot":"","sources":["../src/ows.ts"],"names":[],"mappings":";AAAA,8DAA8D;AAC9D,EAAE;AACF,mEAAmE;AACnE,uDAAuD;AACvD,oDAAoD;AACpD,8EAA8E;AAC9E,yDAAyD;AACzD,EAAE;AACF,+EAA+E;AAC/E,mFAAmF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EnF,0CAeC;AAMD,4CAkBC;AAGD,0CAGC;AAGD,sCAoBC;AAiCD,oCA+BC;AAqED,oDA4BC;AAoBD,kDA0BC;AA0DD,8CAwGC;AAkED,0CAmMC;AApwBD,gEAMmC;AAEnC,sDAW8B;AAG9B,qCAA2E;AAC3E,uCAOmB;AAEnB,MAAM,WAAW,GAAG,0DAA0D,CAAC;AAC/E,MAAM,aAAa,GAAG,SAAS,CAAC;AAEhC,SAAS,oBAAoB,CAC3B,OAA4B;IAE5B,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,uDAAuD,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAI,OAAmB,EAAE,EAAE,GAAG,KAAK;IACrD,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,OAAO;QACP,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CACnF;KACF,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF,4DAA4D;AAC5D,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,CAAC,IAAI,0BAA0B,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,eAAe,CAC7B,IAAY,EACZ,UAAmB,EACnB,SAAkB;IAElB,uEAAuE;IACvE,6BAA6B;IAC7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,4BAAM,EAAC,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;QACjD,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,+BAAS,EAAC,IAAI,EAAE,UAAU,IAAI,IAAI,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;IACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAC9B,IAAY,EACZ,aAAqB,EACrB,UAAmB,EACnB,SAAkB;IAElB,MAAM,OAAO,GAAG,qBAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAA,yCAAsB,EACnC,IAAI,EACJ,EAAE,EAAE,6CAA6C;IACjD,UAAU,IAAI,IAAI,EAClB,SAAS,IAAI,IAAI,EACjB,aAAa,EACb,IAAI,EAAE,0BAA0B;IAChC,aAAa,CACd,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,qEAAqE;AACrE,SAAgB,eAAe,CAAC,UAAkB,EAAE,SAAkB;IACpE,MAAM,MAAM,GAAG,IAAA,4BAAM,EAAC,UAAU,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;IACrD,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,qDAAqD;AAC9C,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,SAAkB,EAClB,iBAA0B;IAE1B,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,qBAAO,CAAC,MAAM,CAAC,IAAA,uBAAa,EAAC,iBAAiB,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,GAAG,GAAG,EACX,IAAI,GAAG,GAAG,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ;YAAE,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC;QAC/C,IACE,CAAC,CAAC,UAAU,KAAK,kBAAkB;YACnC,CAAC,CAAC,UAAU,KAAK,MAAM;YACvB,CAAC,CAAC,YAAY,KAAK,WAAW;YAE9B,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAwBD;;;;;;;;GAQG;AACI,KAAK,UAAU,YAAY,CAAC,IAAsB;IACvD,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAElF,uEAAuE;IACvE,yEAAyE;IACzE,MAAM,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAEzE,kEAAkE;IAClE,2BAA2B;IAC3B,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAExF,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,kEAAkE;IAClE,IAAI,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IAED,gEAAgE;IAChE,4CAA4C;IAC5C,MAAM,MAAM,CAAC,YAAY,CAAC,kBAAkB,EAAE;QAC5C,iBAAiB,EAAE,SAAS;QAC5B,MAAM,EAAE,OAAO,OAAO,CAAC,GAAG,SAAS,OAAO,CAAC,IAAI,EAAE;KAClD,CAAC,CAAC;IAEH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAiBD,SAAS,SAAS,CAChB,EAAK,EACL,UAAkB,EAClB,SAAiB,EACjB,UAAmB,EACnB,SAAkB;IAElB,4EAA4E;IAC5E,kDAAkD;IAClD,+BAA+B;IAC/B,gEAAgE;IAChE,gDAAgD;IAChD,yCAAyC;IACzC,MAAM,WAAW,GAAI,EAAkE;SACpF,UAAU,EAAE;SACZ,KAAK,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAA,kCAAO,EACnC,UAAU,EACV,aAAa,EACb,WAAW,EACX,UAAU,IAAI,IAAI,EAClB,IAAI,EACJ,SAAS,IAAI,IAAI,CAClB,CAAC;IAEF,MAAM,WAAW,GAAG,oBAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,EAAE,CAAC,UAAU,CAAC,IAAI,CAChB,IAAI,iBAAG,CAAC,kBAAkB,CAAC;QACzB,IAAI;QACJ,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;KACtC,CAAC,CACH,CAAC;IACF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,OAAuC,EAAE;IAEzC,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,iBAAiB,MAAM,EAAE,EAAE;YAC9D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6B,CAAC;YAC5D,OAAO,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1D,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,4DAA4D;YAC5D,6DAA6D;YAC7D,2DAA2D;YAC3D,yDAAyD;YACzD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,uDAAuD;QACvD,+CAA+C;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,8DAA8D;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAWD;;;;;;;;GAQG;AACI,KAAK,UAAU,mBAAmB,CAAC,IAAmB;IAC3D,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,GAAG,sBAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IACxF,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,iBAAiB,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,IAAI,qBAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,sEAAsE;IACtE,8CAA8C;IAC9C,MAAM,QAAQ,GAAI,OAAmE,CAAC,QAAQ,CAAC;IAC/F,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,UAAU,KAAK,kBAAkB;QACnC,CAAC,CAAC,UAAU,KAAK,MAAM;QACvB,CAAC,CAAC,YAAY,KAAK,WAAW,CACjC,CAAC;IACF,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,EAAE,GAAG,IAAI,gCAAkB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,sBAAQ,EAAE,iBAAiB,EAAE,CAAC;SAC7E,YAAY,CAAC,uBAAS,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,mBAAK,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;SAC9E,UAAU,CAAC,GAAG,CAAC;SACf,KAAK,EAAE,CAAC;IAEX,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAClD,OAAQ,MAA2B,CAAC,IAAI,CAAC;AAC3C,CAAC;AAuCD;;;;;;;;GAQG;AACH,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,+BAA+B,GAAG,KAAK,CAAC;AAEvC,KAAK,UAAU,iBAAiB,CACrC,IAA2B,EAC3B,OAA8B,EAAE;IAEhC,MAAM,EACJ,UAAU,EACV,OAAO,EACP,YAAY,GAAG,MAAM,EACrB,UAAU,EACV,SAAS,EACT,iBAAiB,GAAG,sBAAQ,CAAC,MAAM,EACnC,aAAa,GACd,GAAG,IAAI,CAAC;IAET,8DAA8D;IAC9D,8DAA8D;IAC9D,6DAA6D;IAC7D,2DAA2D;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,IAAI,gCAAsB,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,yBAAe,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC;IAEzD,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,oBAAM,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,0CAA0C,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,IAAA,4BAAkB,EAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,IAAA,0BAAgB,EAAC,aAAa,CAAC,CAAC;IAEtD,oEAAoE;IACpE,8DAA8D;IAC9D,mEAAmE;IACnE,iEAAiE;IACjE,mEAAmE;IACnE,EAAE;IACF,0DAA0D;IAC1D,qEAAqE;IACrE,qEAAqE;IACrE,8DAA8D;IAC9D,yDAAyD;IACzD,wDAAwD;IACxD,IAAI,iBAAqC,CAAC;IAC1C,IAAI,YAAgC,CAAC;IACrC,IAAI,OAAgB,CAAC;IACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,6BAA6B,EAAE,OAAO,EAAE,EAAE,CAAC;QACzE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;YACnC,UAAU,EAAE,OAAO,CAAC,WAAW;YAC/B,EAAE;YACF,aAAa,EAAE,SAAS;YACxB,aAAa;YACb,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,iBAAiB;YACjB,MAAM,EAAE,aAAa;YACrB,iBAAiB;YACjB,GAAG,EAAE,YAAY;SAClB,CAAC,CAAC;QACH,iEAAiE;QACjE,+DAA+D;QAC/D,uCAAuC;QACvC,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC;QAE5B,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAEzD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAA,uBAAa,EAAC,iBAAiB,CAAC,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,gEAAgE;YAChE,6DAA6D;YAC7D,oEAAoE;YACpE,IAAI,GAAG,YAAY,8BAAoB,EAAE,CAAC;gBACxC,IAAI,OAAO,IAAI,6BAA6B,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;gBAC5D,YAAY,GAAG,GAAG,CAAC,WAAW,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAI,GAAqC,EAAE,OAAO,KAAK,IAAI,CAAC;YACzE,yDAAyD;YACzD,4DAA4D;YAC5D,mDAAmD;YACnD,2DAA2D;YAC3D,4DAA4D;YAC5D,8DAA8D;YAC9D,qBAAqB;YACrB,IAAI,CAAC,OAAO;gBAAE,MAAM,GAAG,CAAC;YACxB,4DAA4D;YAC5D,wDAAwD;YACxD,iBAAiB,GAAG,OAAO,CAAC;YAC5B,sDAAsD;YACtD,IAAI,OAAO,IAAI,6BAA6B,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5D,8DAA8D;YAC9D,8DAA8D;YAC9D,+DAA+D;YAC/D,wDAAwD;YACxD,yCAAyC;YACzC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,gEAAgE;IAChE,oEAAoE;IACpE,0BAA0B;IAC1B,MAAM,OAAO,IAAI,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AACpF,CAAC;AAED,kDAAkD;AAElD,uGAAuG;AAC1F,QAAA,SAAS,GAAG,iBAAiB,CAAC;AAkD3C;;;;;;;;;;GAUG;AACI,KAAK,UAAU,eAAe,CACnC,IAAyB;IAEzB,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;IAEjD,IAAI,OAAe,CAAC;IACpB,IAAI,OAAwC,CAAC;IAC7C,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,WAA+B,CAAC;QACpC,IAAI,UAAyC,CAAC;QAC9C,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC9B,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC9B,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACjC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QACjC,CAAC;QACD,kEAAkE;QAClE,iDAAiD;QACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/C,CAAC;QACD,IACE,MAAM,CAAC,KAAK,KAAK,QAAQ;YACzB,MAAM,CAAC,KAAK,KAAK,UAAU;YAC3B,MAAM,CAAC,KAAK,KAAK,UAAU;YAC3B,MAAM,CAAC,KAAK,KAAK,SAAS,EAC1B,CAAC;YACD,MAAM,IAAI,yBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACxC,kEAAkE;YAClE,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,sDAAsD;YACtD,yCAAyC;QAC3C,CAAC;aAAM,IAAI,WAAW,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClD,yDAAyD;YACzD,+DAA+D;YAC/D,8DAA8D;YAC9D,2DAA2D;YAC3D,6DAA6D;YAC7D,8DAA8D;YAC9D,qDAAqD;YACrD,2DAA2D;YAC3D,0DAA0D;YAC1D,wDAAwD;YACxD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACvD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,2DAA2D;gBAC3D,oBAAoB;gBACpB,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;iBAAM,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClD,wDAAwD;gBACxD,yDAAyD;gBACzD,iDAAiD;gBACjD,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;gBACzB,6DAA6D;YAC/D,CAAC;iBAAM,CAAC;gBACN,0DAA0D;gBAC1D,wDAAwD;gBACxD,oDAAoD;gBACpD,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,yDAAyD;YACzD,iDAAiD;YACjD,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzE,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC;QACzB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,kEAAkE;YAClE,sDAAsD;YACtD,MAAM,IAAI,uBAAc,CACtB,OAAO,EACP,4DAA4D,EAC5D,QAAQ,CACT,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,iEAAiE;QACjE,sDAAsD;QACtD,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;oBACrB,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;oBACnE,MAAM,MAAM,GAAG,IAAI,qBAAO,CAAC,MAAM,CAAC,IAAA,uBAAa,EAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;oBACzE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;oBACjE,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,UAAU,KAAK,kBAAkB;wBACnC,CAAC,CAAC,UAAU,KAAK,MAAM;wBACvB,CAAC,CAAC,YAAY,KAAK,WAAW,CACjC,CAAC;oBACF,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,MAAM,mBAAmB,CAAC;4BACxB,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;yBAC1C,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,uBAAc,CACtB,OAAO,EACP,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,oFAAoF,EACxK,QAAQ,EACR,SAAS,EACT,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC;gBACtB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO;gBACP,YAAY;gBACZ,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,gEAAgE;YAChE,sDAAsD;YACtD,EAAE;YACF,+DAA+D;YAC/D,gEAAgE;YAChE,8DAA8D;YAC9D,kEAAkE;YAClE,gEAAgE;YAChE,8DAA8D;YAC9D,8DAA8D;YAC9D,EAAE;YACF,+DAA+D;YAC/D,iEAAiE;YACjE,4DAA4D;YAC5D,gEAAgE;YAChE,wDAAwD;YACxD,EAAE;YACF,iEAAiE;YACjE,kEAAkE;YAClE,uDAAuD;YACvD,MAAM,WAAW,GAAG,GAAqD,CAAC;YAC1E,MAAM,OAAO,GAAG,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC;YACvD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,KAAK,IAAI,CAAC;YAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,uBAAc,CACtB,OAAO,EACP,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,QAAQ,EACR,WAAW,CAAC,MAAM,EAClB,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,+DAA+D;QACjE,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACrE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gEAAgE;QAChE,gEAAgE;QAChE,IAAI,GAAG,YAAY,yBAAgB;YAAE,MAAM,GAAG,CAAC;QAC/C,uEAAuE;QACvE,IAAI,GAAG,YAAY,sBAAa,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;YAAE,MAAM,GAAG,CAAC;QAC3E,sEAAsE;QACtE,oEAAoE;QACpE,2BAA2B;QAC3B,MAAM,IAAI,uBAAc,CACtB,OAAO,EACP,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,MAAM,EACN,SAAS,EACT,GAAG,CACJ,CAAC;IACJ,CAAC;AACH,CAAC"}