run402 2.14.0 → 2.15.1

package/cli.mjs

@@ -240,6 +240,16 @@ switch (cmd) {
     await run(sub, rest);
     break;
   }
+  case "notifications": {
+    const { run } = await import("./lib/notifications.mjs");
+    await run(sub, rest);
+    break;
+  }
+  case "webhook-secret": {
+    const { runWebhookSecret } = await import("./lib/notifications.mjs");
+    await runWebhookSecret(sub, rest);
+    break;
+  }
   case "logs": {
     const { run } = await import("./lib/logs.mjs");
     await run(sub, rest);

package/lib/doctor.mjs

@@ -96,21 +96,25 @@ export async function run(sub, args = []) {
     });
   }
 
-  // 3. Keystore.
+  // 3. Project keystore. The wallet itself lives in allowance.json (verified
+  // by check 2 above); this checks the per-project keys (anon_key /
+  // service_key) that `run402 projects provision` writes. An empty store is
+  // normal for fresh installs that haven't provisioned a project yet, so
+  // report informationally as `ok` rather than warning.
   try {
     const keystore = loadKeyStore();
-    const walletCount = Object.keys(keystore?.wallets ?? {}).length;
+    const projectCount = Object.keys(keystore?.projects ?? {}).length;
     checks.push({
-      name: "keystore",
-      status: walletCount > 0 ? "ok" : "empty",
-      value: { wallet_count: walletCount },
-      ...(walletCount === 0 && {
-        hint: "Run 'run402 init' to generate a wallet.",
+      name: "projects",
+      status: "ok",
+      value: { project_count: projectCount },
+      ...(projectCount === 0 && {
+        hint: "No projects yet — run 'run402 projects provision' to create one (wallet is already set up).",
       }),
     });
   } catch (err) {
     checks.push({
-      name: "keystore",
+      name: "projects",
       status: "error",
       message: err instanceof Error ? err.message : String(err),
     });
@@ -165,7 +169,51 @@ export async function run(sub, args = []) {
     });
   }
 
-  const allOk = checks.every((c) => c.status === "ok");
+  // 6. Operator health snapshot (v1.55).
+  try {
+    const sdk = getSdk();
+    const status = await sdk.admin.getOperatorStatus();
+    const gaps = [];
+    if (status.operator_contact.email_status !== "verified") {
+      gaps.push(`operator email not verified (${status.operator_contact.email_status}) — run 'run402 agent contact --email ...' then reply to the challenge`);
+    }
+    if (status.operator_contact.passkey_status !== "verified") {
+      gaps.push("operator passkey not bound — run 'run402 agent passkey enroll' after email verification");
+    }
+    if (Array.isArray(status.skipped_notifications) && status.skipped_notifications.length > 0) {
+      gaps.push(`${status.skipped_notifications.length} notification(s) skipped due to missing verified recipient`);
+    }
+    if (Array.isArray(status.critical_items) && status.critical_items.length > 0) {
+      for (const item of status.critical_items) {
+        gaps.push(`${item.kind}: ${item.detail}`);
+      }
+    }
+    if (gaps.length > 0) {
+      checks.push({
+        name: "operator_health",
+        status: "warning",
+        value: { gaps },
+        hint: "Address the above gaps; they're what 'run402 notifications' is designed to surface.",
+      });
+    } else {
+      checks.push({ name: "operator_health", status: "ok" });
+    }
+  } catch (err) {
+    // Operator status endpoint may not be reachable if the operator-binding
+    // substrate isn't deployed yet on the target API. Don't fail the whole
+    // doctor over it — emit as a soft warning.
+    checks.push({
+      name: "operator_health",
+      status: "skipped",
+      message: err instanceof Error ? err.message : String(err),
+      ...(verbose && { hint: "GET /agent/v1/operator/status not reachable; requires v1.55+ gateway." }),
+    });
+  }
+
+  // 'warning' counts as ok for exit-code purposes — gaps are surfaced in
+  // output but don't fail the doctor. Only hard 'error' / 'missing' /
+  // 'empty' fail.
+  const allOk = checks.every((c) => c.status === "ok" || c.status === "warning" || c.status === "skipped");
 
   if (json) {
     console.log(JSON.stringify({ ok: allOk, checks }, null, 2));
@@ -175,12 +223,17 @@ export async function run(sub, args = []) {
     for (const c of checks) {
       const icon =
         c.status === "ok" ? "✓"
+        : c.status === "warning" ? "⚠"
+        : c.status === "skipped" ? "·"
         : c.status === "missing" || c.status === "empty" ? "⚠"
         : "✗";
       const status = c.status === "ok" ? "ok" : c.status;
       console.log(`  ${icon} ${c.name.padEnd(16)} ${status}`);
       if (c.hint) console.log(`     → ${c.hint}`);
       if (c.message) console.log(`     ${c.message}`);
+      if (c.value && c.value.gaps && Array.isArray(c.value.gaps)) {
+        for (const gap of c.value.gaps) console.log(`     • ${gap}`);
+      }
     }
   }
 

package/lib/notifications.mjs

@@ -0,0 +1,174 @@
+/**
+ * run402 notifications — Operator health notifications.
+ *
+ * Wraps the v1.55 `add-operator-health-notifications` API surface:
+ *
+ *   - run402 notifications list [--type ...] [--since ...] [--limit N] [--offset N]
+ *   - run402 notifications get <id>
+ *   - run402 notifications preferences [get|set ...]
+ *   - run402 notifications test
+ *   - run402 webhook-secret rotate
+ *
+ * All commands use the allowance-wallet auth path (SIWX). The assurance
+ * ladder is enforced server-side; CLI surfaces 403 errors with the
+ * required-assurance hint.
+ */
+
+import { allowanceAuthHeaders } from "./config.mjs";
+import { getSdk } from "./sdk.mjs";
+import { reportSdkError, fail } from "./sdk-errors.mjs";
+import { assertKnownFlags, flagValue, normalizeArgv, positionalArgs } from "./argparse.mjs";
+
+const HELP = `run402 notifications — Operator health notifications
+
+Usage:
+  run402 notifications list [--type <event_type>] [--since <iso>] [--limit N] [--offset N]
+  run402 notifications get <id>
+  run402 notifications preferences
+  run402 notifications preferences set <key>=<value> [<key>=<value> ...]
+  run402 notifications test
+
+Examples:
+  run402 notifications list --limit 10
+  run402 notifications list --type project_past_due --since 2026-05-01T00:00:00Z
+  run402 notifications get 9b21fa0a-...
+  run402 notifications preferences
+  run402 notifications preferences set digest_cadence=weekly digest_day_of_week=1
+  run402 notifications preferences set webhook_url=https://my-receiver.example.com/hook
+  run402 notifications test
+
+Auth ladder (enforced server-side):
+  - SIWX wallet:      read own notifications + preferences
+  - email_verified:   cross-wallet rollup reads + multi-wallet preference updates
+  - operator_passkey: webhook URL changes, webhook secret rotation
+`;
+
+async function list(args) {
+  const parsedArgs = normalizeArgv(args);
+  const valueFlags = ["--type", "--since", "--limit", "--offset"];
+  assertKnownFlags(parsedArgs, [...valueFlags, "--help", "-h"], valueFlags);
+  const extra = positionalArgs(parsedArgs, valueFlags);
+  if (extra.length > 0) {
+    fail({ code: "BAD_USAGE", message: `Unexpected argument for notifications list: ${extra[0]}` });
+  }
+  allowanceAuthHeaders("/agent/v1/notifications");
+  const opts = {};
+  const type = flagValue(parsedArgs, "--type");
+  const since = flagValue(parsedArgs, "--since");
+  const limit = flagValue(parsedArgs, "--limit");
+  const offset = flagValue(parsedArgs, "--offset");
+  if (type) opts.type = type;
+  if (since) opts.since = since;
+  if (limit != null) opts.limit = Number(limit);
+  if (offset != null) opts.offset = Number(offset);
+  try {
+    const data = await getSdk().admin.listNotifications(opts);
+    console.log(JSON.stringify(data, null, 2));
+  } catch (err) {
+    reportSdkError(err);
+  }
+}
+
+async function get(args) {
+  const parsedArgs = normalizeArgv(args);
+  assertKnownFlags(parsedArgs, ["--help", "-h"]);
+  const positionals = positionalArgs(parsedArgs);
+  if (positionals.length !== 1) {
+    fail({ code: "BAD_USAGE", message: "Usage: run402 notifications get <id>" });
+  }
+  allowanceAuthHeaders("/agent/v1/notifications");
+  try {
+    const data = await getSdk().admin.getNotification(positionals[0]);
+    console.log(JSON.stringify(data, null, 2));
+  } catch (err) {
+    reportSdkError(err);
+  }
+}
+
+async function preferences(args) {
+  const parsedArgs = normalizeArgv(args);
+  assertKnownFlags(parsedArgs, ["--help", "-h"]);
+  const positionals = positionalArgs(parsedArgs);
+  allowanceAuthHeaders("/agent/v1/notifications/preferences");
+
+  if (positionals.length === 0) {
+    // GET preferences
+    try {
+      const data = await getSdk().admin.getNotificationPreferences();
+      console.log(JSON.stringify(data, null, 2));
+    } catch (err) {
+      reportSdkError(err);
+    }
+    return;
+  }
+
+  if (positionals[0] !== "set") {
+    fail({ code: "BAD_USAGE", message: "Usage: run402 notifications preferences [set <key>=<value> ...]" });
+  }
+
+  // SET — parse remaining positional args as key=value
+  const patch = {};
+  for (const kv of positionals.slice(1)) {
+    const eq = kv.indexOf("=");
+    if (eq <= 0) {
+      fail({ code: "BAD_USAGE", message: `Expected key=value, got: ${kv}` });
+    }
+    const key = kv.slice(0, eq);
+    const rawValue = kv.slice(eq + 1);
+    if (key === "digest_day_of_week" || key === "digest_hour_utc") {
+      patch[key] = Number(rawValue);
+    } else if (key === "webhook_url" && (rawValue === "null" || rawValue === "")) {
+      patch[key] = null;
+    } else {
+      patch[key] = rawValue;
+    }
+  }
+  try {
+    const data = await getSdk().admin.setNotificationPreferences(patch);
+    console.log(JSON.stringify(data, null, 2));
+  } catch (err) {
+    reportSdkError(err);
+  }
+}
+
+async function test(args) {
+  const parsedArgs = normalizeArgv(args);
+  assertKnownFlags(parsedArgs, ["--help", "-h"]);
+  const extra = positionalArgs(parsedArgs);
+  if (extra.length > 0) {
+    fail({ code: "BAD_USAGE", message: `Unexpected argument for notifications test: ${extra[0]}` });
+  }
+  allowanceAuthHeaders("/agent/v1/notifications/test");
+  try {
+    const data = await getSdk().admin.testNotification();
+    console.log(JSON.stringify(data, null, 2));
+  } catch (err) {
+    reportSdkError(err);
+  }
+}
+
+export async function run(sub, args) {
+  if (!sub || sub === "--help" || sub === "-h") {
+    console.log(HELP);
+    process.exit(0);
+  }
+  switch (sub) {
+    case "list":
+      await list(args);
+      return;
+    case "get":
+      await get(args);
+      return;
+    case "preferences":
+      await preferences(args);
+      return;
+    case "test":
+      await test(args);
+      return;
+    default:
+      fail({ code: "BAD_USAGE", message: `Unknown notifications subcommand: ${sub}\n\n${HELP}` });
+  }
+}
+
+// `run402 webhook-secret rotate` lives in cli/lib/webhook-secret.mjs as
+// its own top-level command, separate from this notifications module.

package/lib/webhook-secret.mjs

@@ -0,0 +1,45 @@
+/**
+ * run402 webhook-secret — Manage the operator webhook signing secret.
+ *
+ * Split out from notifications.mjs so the SURFACE inventory parser sees
+ * `webhook-secret:rotate` as its own command, separate from the
+ * `notifications:*` group.
+ */
+
+import { allowanceAuthHeaders } from "./config.mjs";
+import { getSdk } from "./sdk.mjs";
+import { reportSdkError, fail } from "./sdk-errors.mjs";
+import { assertKnownFlags, normalizeArgv } from "./argparse.mjs";
+
+const HELP = `run402 webhook-secret — Manage the operator webhook signing secret
+
+Usage:
+  run402 webhook-secret rotate
+
+Notes:
+  - Returns the new plaintext secret EXACTLY once. Store it immediately.
+  - Previous secret remains valid for 24 hours after rotation.
+  - Requires operator_passkey assurance level.
+`;
+
+export async function run(sub, args = []) {
+  if (!sub || sub === "--help" || sub === "-h") {
+    console.log(HELP);
+    process.exit(0);
+  }
+  if (sub !== "rotate") {
+    fail({ code: "BAD_USAGE", message: "Usage: run402 webhook-secret rotate" });
+  }
+  const parsedArgs = normalizeArgv(args);
+  assertKnownFlags(parsedArgs, ["--help", "-h"]);
+  allowanceAuthHeaders("/agent/v1/webhook-secret/rotate");
+  try {
+    const data = await getSdk().admin.rotateWebhookSecret();
+    console.log(JSON.stringify(data, null, 2));
+    console.error(""); // separator
+    console.error("⚠  Store this secret NOW — it will not be shown again.");
+    console.error("⚠  Your previous secret remains valid for the next 24 hours.");
+  } catch (err) {
+    reportSdkError(err);
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "2.14.0",
+  "version": "2.15.1",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 and MPP micropayments.",
   "type": "module",
   "bin": {

package/sdk/dist/namespaces/admin.d.ts

@@ -65,6 +65,108 @@ export interface AdminProjectFinanceResult {
     }>;
     notes: string;
 }
+export type NotificationKind = "digest" | "lifecycle_event" | "threshold_alert" | "missing_verified_recipient";
+export type NotificationChannel = "email" | "webhook" | "skipped";
+export type NotificationDeliveryStatus = "delivered" | "failed_transient" | "failed_permanent" | "skipped_no_recipient" | "skipped_disabled";
+export interface NotificationRow {
+    id: string;
+    recipient_email: string | null;
+    kind: NotificationKind;
+    event_type: string | null;
+    channel: NotificationChannel;
+    delivery_status: NotificationDeliveryStatus;
+    delivery_error: string | null;
+    attempt_count: number;
+    is_test: boolean;
+    related_project_id: string | null;
+    related_billing_account_id: string | null;
+    related_wallet_address: string | null;
+    created_at: string;
+    redacted_at: string | null;
+    /** Payload JSON, or null when the row has been redacted. */
+    payload: Record<string, unknown> | null;
+}
+export interface ListNotificationsOptions {
+    type?: string;
+    /** ISO timestamp; only notifications created at or after this time. */
+    since?: string;
+    /** Default 50, max 200. */
+    limit?: number;
+    offset?: number;
+}
+export interface ListNotificationsResult {
+    notifications: NotificationRow[];
+    pagination: {
+        limit: number;
+        offset: number;
+        returned: number;
+    };
+}
+export interface NotificationPreferences {
+    channels: {
+        email: boolean;
+        webhook: boolean;
+    };
+    webhook_url: string | null;
+    webhook_signing_secret_configured: boolean;
+    digest_cadence: "off" | "daily" | "weekly" | "monthly";
+    /** 1=Monday..7=Sunday. */
+    digest_day_of_week: number;
+    /** 0..23 UTC. */
+    digest_hour_utc: number;
+    threshold_alerts: "off" | "digest_only" | "immediate";
+    lifecycle_events: "off" | "critical_only" | "all";
+    /** Schema-enforced; always "always". */
+    security_events: "always";
+    /** BCP-47 (e.g. "en-US"). */
+    locale: string;
+    /** IANA timezone (e.g. "UTC"). */
+    timezone: string;
+}
+export type NotificationPreferencesPatch = Partial<Omit<NotificationPreferences, "webhook_signing_secret_configured" | "security_events">> & {
+    /** Cannot be changed away from "always" — server returns 400. */
+    security_events?: "always";
+};
+export interface TestNotificationResult {
+    status: "queued";
+    source_event_id: string;
+    note: string;
+}
+export interface RotateWebhookSecretResult {
+    webhook_signing_secret: string;
+    rotated_at: string;
+    grace_window_hours: number;
+    note: string;
+}
+export interface OperatorStatusResult {
+    operator_contact: {
+        email_status: "none" | "pending" | "verified" | "bouncing";
+        passkey_status: "none" | "pending" | "verified";
+        recovery_gap: boolean;
+    };
+    critical_items: Array<{
+        kind: string;
+        detail: string;
+    }>;
+    skipped_notifications: Array<{
+        id: string;
+        event_type: string;
+        related_project_id: string | null;
+        related_billing_account_id: string | null;
+        related_wallet_address: string | null;
+        created_at: string;
+    }>;
+    billing_accounts: Array<Record<string, unknown>>;
+    projects: Array<Record<string, unknown>>;
+    active_thresholds: Array<{
+        resource: string;
+        level: "warn" | "critical";
+        scope_kind: string;
+        scope_id: string;
+        crossed_at: string;
+        last_observed_value: number | null;
+    }>;
+}
 export declare class Admin {
     private readonly client;
     constructor(client: Client);
@@ -78,6 +180,28 @@ export declare class Admin {
     verifyAgentContactEmail(): Promise<AgentContactResult>;
     /** Email a passkey enrollment link to the verified operator email. */
     startOperatorPasskeyEnrollment(): Promise<AgentContactResult>;
+    /** List operator notification audit rows (paginated, filterable). */
+    listNotifications(opts?: ListNotificationsOptions): Promise<ListNotificationsResult>;
+    /** Retrieve a single notification audit row by id. */
+    getNotification(id: string): Promise<NotificationRow>;
+    /** Read the current operator notification preferences. */
+    getNotificationPreferences(): Promise<NotificationPreferences>;
+    /** Patch operator notification preferences (assurance ladder applies). */
+    setNotificationPreferences(patch: NotificationPreferencesPatch): Promise<NotificationPreferences>;
+    /**
+     * Trigger a real test notification. Sends a sample `project_past_due`
+     * event through the normal worker pipeline; the audit row is marked
+     * `is_test: true`. Rate-limited per wallet at 1/min.
+     */
+    testNotification(): Promise<TestNotificationResult>;
+    /**
+     * Rotate the operator's webhook signing secret. The new plaintext secret
+     * is returned EXACTLY once. The previous secret remains valid for 24
+     * hours (dual-secret grace window). Requires `operator_passkey` assurance.
+     */
+    rotateWebhookSecret(): Promise<RotateWebhookSecretResult>;
+    /** Compact operator-health snapshot for the authenticated wallet. */
+    getOperatorStatus(): Promise<OperatorStatusResult>;
     /**
      * Fetch per-project finance for platform operators.
      *

package/sdk/dist/namespaces/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/namespaces/admin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAC3E,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAC3B,aAAa,GACb,eAAe,GACf,gBAAgB,GAChB,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,yBAAyB,EAAE,4BAA4B,CAAC;IACxD,sBAAsB,EAAE,yBAAyB,CAAC;IAClD,eAAe,EAAE,mBAAmB,CAAC;IACrC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC,CAAC,EAAE,MAAM,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,CAAC;AAE9D,MAAM,WAAW,0BAA0B;IACzC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,iBAAiB,EAAE;QACjB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,qBAAqB,EAAE,MAAM,CAAC;QAC9B,wBAAwB,EAAE,MAAM,CAAC;QACjC,uBAAuB,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,qBAAqB,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,KAAK,EAAE,MAAM,CAAC;CACf;AAID,qBAAa,KAAK;IACJ,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C,wEAAwE;IAClE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQ9D,4EAA4E;IACtE,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAYzE,+EAA+E;IACzE,qBAAqB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAO1D,0DAA0D;IACpD,uBAAuB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAO5D,sEAAsE;IAChE,8BAA8B,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAOnE;;;;;;;;OAQG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,0BAA+B,GACpC,OAAO,CAAC,yBAAyB,CAAC;CAoBtC"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/namespaces/admin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAC3E,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAC3B,aAAa,GACb,eAAe,GACf,gBAAgB,GAChB,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,yBAAyB,EAAE,4BAA4B,CAAC;IACxD,sBAAsB,EAAE,yBAAyB,CAAC;IAClD,eAAe,EAAE,mBAAmB,CAAC;IACrC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC,CAAC,EAAE,MAAM,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,CAAC;AAE9D,MAAM,WAAW,0BAA0B;IACzC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,iBAAiB,EAAE;QACjB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,qBAAqB,EAAE,MAAM,CAAC;QAC9B,wBAAwB,EAAE,MAAM,CAAC;QACjC,uBAAuB,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,qBAAqB,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,KAAK,EAAE,MAAM,CAAC;CACf;AAQD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,4BAA4B,CAAC;AAC/G,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAClE,MAAM,MAAM,0BAA0B,GAClC,WAAW,GACX,kBAAkB,GAClB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,IAAI,EAAE,gBAAgB,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,eAAe,EAAE,0BAA0B,CAAC;IAC5C,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,eAAe,EAAE,CAAC;IACjC,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CACjE;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iCAAiC,EAAE,OAAO,CAAC;IAC3C,cAAc,EAAE,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IACvD,0BAA0B;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,KAAK,GAAG,aAAa,GAAG,WAAW,CAAC;IACtD,gBAAgB,EAAE,KAAK,GAAG,eAAe,GAAG,KAAK,CAAC;IAClD,wCAAwC;IACxC,eAAe,EAAE,QAAQ,CAAC;IAC1B,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAChD,IAAI,CAAC,uBAAuB,EAAE,mCAAmC,GAAG,iBAAiB,CAAC,CACvF,GAAG;IACF,iEAAiE;IACjE,eAAe,CAAC,EAAE,QAAQ,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,QAAQ,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE;QAChB,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;QAC3D,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;QAChD,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;IACF,cAAc,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD,qBAAqB,EAAE,KAAK,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;QACtC,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,iBAAiB,EAAE,KAAK,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;QAC3B,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;KACpC,CAAC,CAAC;CACJ;AAED,qBAAa,KAAK;IACJ,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C,wEAAwE;IAClE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQ9D,4EAA4E;IACtE,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAYzE,+EAA+E;IACzE,qBAAqB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAO1D,0DAA0D;IACpD,uBAAuB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAO5D,sEAAsE;IAChE,8BAA8B,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAWnE,qEAAqE;IAC/D,iBAAiB,CAAC,IAAI,GAAE,wBAA6B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAe9F,sDAAsD;IAChD,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAO3D,0DAA0D;IACpD,0BAA0B,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAOpE,0EAA0E;IACpE,0BAA0B,CAC9B,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,uBAAuB,CAAC;IAWnC;;;;OAIG;IACG,gBAAgB,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAOzD;;;;OAIG;IACG,mBAAmB,IAAI,OAAO,CAAC,yBAAyB,CAAC;IAO/D,qEAAqE;IAC/D,iBAAiB,IAAI,OAAO,CAAC,oBAAoB,CAAC;IAOxD;;;;;;;;OAQG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,0BAA+B,GACpC,OAAO,CAAC,yBAAyB,CAAC;CAoBtC"}

package/sdk/dist/namespaces/admin.js

@@ -54,6 +54,64 @@ export class Admin {
             context: "starting operator passkey enrollment",
         });
     }
+    // ---------------------------------------------------------------------------
+    // Operator notifications (v1.55, add-operator-health-notifications).
+    // ---------------------------------------------------------------------------
+    /** List operator notification audit rows (paginated, filterable). */
+    async listNotifications(opts = {}) {
+        const q = [];
+        if (opts.type)
+            q.push(`type=${encodeURIComponent(opts.type)}`);
+        if (opts.since)
+            q.push(`since=${encodeURIComponent(opts.since)}`);
+        if (opts.limit != null)
+            q.push(`limit=${opts.limit}`);
+        if (opts.offset != null)
+            q.push(`offset=${opts.offset}`);
+        const url = q.length > 0
+            ? `/agent/v1/notifications?${q.join("&")}`
+            : "/agent/v1/notifications";
+        return this.client.request(url, {
+            method: "GET",
+            context: "listing notifications",
+        });
+    }
+    /** Retrieve a single notification audit row by id. */
+    async getNotification(id) {
+        return this.client.request(`/agent/v1/notifications/${encodeURIComponent(id)}`, { method: "GET", context: "fetching notification" });
+    }
+    /** Read the current operator notification preferences. */
+    async getNotificationPreferences() {
+        return this.client.request("/agent/v1/notifications/preferences", { method: "GET", context: "fetching notification preferences" });
+    }
+    /** Patch operator notification preferences (assurance ladder applies). */
+    async setNotificationPreferences(patch) {
+        return this.client.request("/agent/v1/notifications/preferences", {
+            method: "PATCH",
+            body: patch,
+            context: "updating notification preferences",
+        });
+    }
+    /**
+     * Trigger a real test notification. Sends a sample `project_past_due`
+     * event through the normal worker pipeline; the audit row is marked
+     * `is_test: true`. Rate-limited per wallet at 1/min.
+     */
+    async testNotification() {
+        return this.client.request("/agent/v1/notifications/test", { method: "POST", context: "triggering test notification" });
+    }
+    /**
+     * Rotate the operator's webhook signing secret. The new plaintext secret
+     * is returned EXACTLY once. The previous secret remains valid for 24
+     * hours (dual-secret grace window). Requires `operator_passkey` assurance.
+     */
+    async rotateWebhookSecret() {
+        return this.client.request("/agent/v1/webhook-secret/rotate", { method: "POST", context: "rotating webhook signing secret" });
+    }
+    /** Compact operator-health snapshot for the authenticated wallet. */
+    async getOperatorStatus() {
+        return this.client.request("/agent/v1/operator/status", { method: "GET", context: "fetching operator status" });
+    }
     /**
      * Fetch per-project finance for platform operators.
      *

package/sdk/dist/namespaces/admin.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/namespaces/admin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAsE1C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEjF,MAAM,OAAO,KAAK;IACa;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,wEAAwE;IACxE,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAoB,aAAa,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE;YACjB,OAAO,EAAE,iBAAiB;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,eAAe,CAAC,OAAqB;QACzC,MAAM,IAAI,GAA2B,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5D,IAAI,OAAO,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC9C,IAAI,OAAO,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAEpD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,mBAAmB,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,qBAAqB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,0BAA0B,EAAE;YACzE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,+BAA+B;SACzC,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,uBAAuB;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,gCAAgC,EAAE;YAC/E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,2CAA2C;SACrD,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,8BAA8B;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,kCAAkC,EAAE;YACjF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CACrB,SAAiB,EACjB,OAAmC,EAAE;QAErC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACpC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,UAAU,CAClB,2BAA2B,MAAM,CAAC,MAAM,CAAC,uCAAuC,EAChF,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE9C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,8BAA8B,kBAAkB,CAAC,SAAS,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAClG;YACE,OAAO;YACP,OAAO,EAAE,0BAA0B;SACpC,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/namespaces/admin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAsE1C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAkHjF,MAAM,OAAO,KAAK;IACa;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,wEAAwE;IACxE,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAoB,aAAa,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE;YACjB,OAAO,EAAE,iBAAiB;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,eAAe,CAAC,OAAqB;QACzC,MAAM,IAAI,GAA2B,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5D,IAAI,OAAO,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC9C,IAAI,OAAO,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAEpD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,mBAAmB,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,qBAAqB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,0BAA0B,EAAE;YACzE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,+BAA+B;SACzC,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,uBAAuB;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,gCAAgC,EAAE;YAC/E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,2CAA2C;SACrD,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,8BAA8B;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,kCAAkC,EAAE;YACjF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,qEAAqE;IACrE,8EAA8E;IAE9E,qEAAqE;IACrE,KAAK,CAAC,iBAAiB,CAAC,OAAiC,EAAE;QACzD,MAAM,CAAC,GAAa,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,IAAI;YAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,KAAK;YAAE,CAAC,CAAC,IAAI,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI;YAAE,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI;YAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC1C,CAAC,CAAC,yBAAyB,CAAC;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAA0B,GAAG,EAAE;YACvD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,eAAe,CAAC,EAAU;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,2BAA2B,kBAAkB,CAAC,EAAE,CAAC,EAAE,EACnD,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE,CACpD,CAAC;IACJ,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,0BAA0B;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,qCAAqC,EACrC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,0BAA0B,CAC9B,KAAmC;QAEnC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,qCAAqC,EACrC;YACE,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,KAA2C;YACjD,OAAO,EAAE,mCAAmC;SAC7C,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,8BAA8B,EAC9B,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAC5D,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,iCAAiC,EACjC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAC/D,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,iBAAiB;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,2BAA2B,EAC3B,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,CACvD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CACrB,SAAiB,EACjB,OAAmC,EAAE;QAErC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACpC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,UAAU,CAClB,2BAA2B,MAAM,CAAC,MAAM,CAAC,uCAAuC,EAChF,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE9C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,8BAA8B,kBAAkB,CAAC,SAAS,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAClG;YACE,OAAO;YACP,OAAO,EAAE,0BAA0B;SACpC,CACF,CAAC;IACJ,CAAC;CACF"}