run402 4.70.9 → 4.71.0

package/gitvault-surface.json

@@ -1,5 +1,5 @@
 {
-  "surface_version": "4.70.9",
+  "surface_version": "4.71.0",
   "verbs": [
     "repos create",
     "repos list",

package/lib/cold-start.mjs

@@ -14,6 +14,14 @@
  * untouched; this module does not replace it, only the one path `repos
  * create` needs when it discovers there is no tier and nothing else has
  * set one up yet.
+ *
+ * add-room-invite design D9 splits the funded-wallet half (allowance →
+ * faucet-if-empty → brief settlement poll) out as {@link ensureFundedWallet}
+ * — `rooms join <key>` needs exactly that half, with NO tier purchase and NO
+ * project creation (the claim itself is the one x402 payment that funds the
+ * onboarding). {@link foldColdStartChain} is now their composition —
+ * `ensureFundedWallet` followed by the tier step — so every EXISTING caller
+ * (`repos create`/`resume`/`join`) is unchanged.
  */
 import { readAllowance, saveAllowance } from "./config.mjs";
 import { getSdk } from "./sdk.mjs";
@@ -22,13 +30,16 @@ const USDC_ABI = [{ name: "balanceOf", type: "function", stateMutability: "view"
 const USDC_SEPOLIA = "0x036CbD53842c5426634e7929541eC2318f3dCF7e";
 
 /**
+ * Allowance → faucet-if-empty → brief settlement poll. NO tier purchase, no
+ * project creation — the caller decides what (if anything) to pay for next.
+ *
  * @param {(line: string) => void} announce Called once per step, so the
  *   caller can print each one it took (client-surface spec: "announcing
  *   each step").
- * @returns {Promise<{allowance_created: boolean, faucet_requested: boolean, tier: object|null}>}
+ * @returns {Promise<{allowance_created: boolean, faucet_requested: boolean, address: string}>}
  */
-export async function foldColdStartChain(announce = () => {}) {
-  const out = { allowance_created: false, faucet_requested: false, tier: null };
+export async function ensureFundedWallet(announce = () => {}) {
+  const out = { allowance_created: false, faucet_requested: false, address: "" };
 
   let allowance = readAllowance();
   if (!allowance) {
@@ -40,6 +51,7 @@ export async function foldColdStartChain(announce = () => {}) {
     out.allowance_created = true;
     announce(`allowance created: ${allowance.address}`);
   }
+  out.address = allowance.address;
 
   const { createPublicClient, http } = await import("viem");
   const { baseSepolia } = await import("viem/chains");
@@ -48,7 +60,7 @@ export async function foldColdStartChain(announce = () => {}) {
   try {
     balance = Number(await client.readContract({ address: USDC_SEPOLIA, abi: USDC_ABI, functionName: "balanceOf", args: [allowance.address] }));
   } catch {
-    /* an RPC hiccup here is not fatal — the tier purchase below will surface a real payment failure if the balance really is zero */
+    /* an RPC hiccup here is not fatal — the payment below will surface a real failure if the balance really is zero */
   }
   if (balance === 0) {
     announce("balance is 0 — requesting the testnet faucet");
@@ -70,8 +82,22 @@ export async function foldColdStartChain(announce = () => {}) {
     saveAllowance({ ...allowance, funded: true, lastFaucet: new Date().toISOString() });
   }
 
-  announce("subscribing to the prototype tier (one x402 testnet payment, perpetual)");
-  out.tier = await getSdk().tier.set("prototype");
-  announce(`prototype tier active${out.tier?.status === "already_active" ? " (already active)" : ""}`);
   return out;
 }
+
+/**
+ * `ensureFundedWallet` + the tier step. Unchanged from before the split —
+ * every existing caller (`repos create`/`resume`/`join`) keeps working with
+ * no edits.
+ *
+ * @param {(line: string) => void} announce Called once per step.
+ * @returns {Promise<{allowance_created: boolean, faucet_requested: boolean, tier: object|null}>}
+ */
+export async function foldColdStartChain(announce = () => {}) {
+  const funded = await ensureFundedWallet(announce);
+
+  announce("subscribing to the prototype tier (one x402 testnet payment, perpetual)");
+  const tier = await getSdk().tier.set("prototype");
+  announce(`prototype tier active${tier?.status === "already_active" ? " (already active)" : ""}`);
+  return { allowance_created: funded.allowance_created, faucet_requested: funded.faucet_requested, tier };
+}

package/lib/command-manifest.mjs

@@ -257,7 +257,14 @@ export const COMMAND_MANIFEST = [
   { path: ["subscriptions", "add"], positionals: [], projectScoped: false, legacyPositionalProject: false, minimalArgs: [], runStyle: "sub" },
   { path: ["subscriptions", "list"], positionals: [], projectScoped: false, legacyPositionalProject: false, minimalArgs: [], runStyle: "sub" },
   { path: ["subscriptions", "rm"], positionals: [p("subscription_id")], projectScoped: false, legacyPositionalProject: false, minimalArgs: ["r_1"], runStyle: "sub" },
-  { path: ["rooms", "join"], positionals: [], projectScoped: true, legacyPositionalProject: false, minimalArgs: [], runStyle: "sub" },
+  // add-room-invite design D9: `rooms join` is one verb, two forms — no
+  // positional registers a presence (the behaviorally-tested path, unchanged
+  // by the optional positional below since minimalArgs stays empty); a
+  // `kri1_…` positional claims a room seat first (a real x402 payment + an
+  // org-membership mutation), so that form is never behaviorally exercised
+  // here — the same reasoning `repos join`'s own row states.
+  { path: ["rooms", "join"], positionals: [p("key", { required: false })], projectScoped: true, legacyPositionalProject: false, minimalArgs: [], runStyle: "sub" },
+  { path: ["rooms", "invite"], positionals: [], projectScoped: true, legacyPositionalProject: false, minimalArgs: [], runStyle: "sub", skipBehavioral: "mints a single-use bearer key from a live room, registering the inviter's presence and posting a real room message — never run against the gate's own checkout" },
   { path: ["rooms", "leave"], positionals: [], projectScoped: true, legacyPositionalProject: false, minimalArgs: [], runStyle: "sub" },
   { path: ["messages", "send"], positionals: [p("body")], projectScoped: true, legacyPositionalProject: false, minimalArgs: ["hello"], runStyle: "sub" },
   { path: ["messages", "list"], positionals: [], projectScoped: true, legacyPositionalProject: false, minimalArgs: [], runStyle: "sub" },

package/lib/org-context.mjs

@@ -98,13 +98,19 @@ function orgFromRoomEnv(env) {
  * best-effort, gracefully degrading like `findBindingKey`: no repository,
  * no pin, or a shape-invalid value all answer `null` rather than throwing,
  * so a bare directory or a checkout with no gitvault remote costs nothing.
+ * Checks a real vault checkout's pin first (gated on `r402.repoId`), then
+ * falls back to the bare org/room pin a room-only `rooms join <key>` writes
+ * in a directory with no vault at all (add-room-invite design D10).
  */
 async function readGitvaultPinnedOrgId(cwd) {
   try {
-    const { readPinnedGitvaultRepo } = await import("#sdk/node");
+    const { readPinnedGitvaultRepo, readPinnedRoomBinding } = await import("#sdk/node");
     const pinned = await readPinnedGitvaultRepo(cwd);
     const orgId = trimmed(pinned?.org_id);
-    return orgId && ORG_ID_RE.test(orgId) ? orgId : null;
+    if (orgId && ORG_ID_RE.test(orgId)) return orgId;
+    const bare = await readPinnedRoomBinding(cwd);
+    const bareOrgId = trimmed(bare?.org_id);
+    return bareOrgId && ORG_ID_RE.test(bareOrgId) ? bareOrgId : null;
   } catch {
     return null;
   }

package/lib/rooms-context.mjs

@@ -36,13 +36,24 @@ import { describeRejectedValue } from "../core-dist/redact.js";
 export const ROOM_ENV = "RUN402_ROOM";
 export const PRESENCE_ENV = "RUN402_PRESENCE_ID";
 
-/** `r402.room` from `cwd`'s LOCAL git config (kygit-handoff design D10) — best-effort, `null` on any absence or failure. */
+/**
+ * `r402.room` from `cwd`'s LOCAL git config (kygit-handoff design D10) —
+ * best-effort, `null` on any absence or failure. Checks a real vault
+ * checkout's pin first (`readPinnedGitvaultRepo`, gated on `r402.repoId`
+ * being present), then falls back to the bare room/org pin `rooms join
+ * <key>` writes in a directory with NO vault at all (add-room-invite design
+ * D10) — `readPinnedGitvaultRepo` would otherwise see that pin as absent,
+ * since it never sets `r402.repoId`.
+ */
 async function readGitvaultPinnedRoom(cwd) {
   try {
-    const { readPinnedGitvaultRepo } = await import("#sdk/node");
+    const { readPinnedGitvaultRepo, readPinnedRoomBinding } = await import("#sdk/node");
     const pinned = await readPinnedGitvaultRepo(cwd);
     const room = typeof pinned?.room === "string" ? pinned.room.trim() : "";
-    return room.length > 0 ? room : null;
+    if (room.length > 0) return room;
+    const bare = await readPinnedRoomBinding(cwd);
+    const bareRoom = typeof bare?.room === "string" ? bare.room.trim() : "";
+    return bareRoom.length > 0 ? bareRoom : null;
   } catch {
     return null;
   }

package/lib/rooms.mjs

@@ -10,6 +10,7 @@
  * Gateway subsystem: add-agent-messaging (/orgs/v1/:org_id/rooms/:room_key/*).
  * Session presence cache: ./.run402/messaging.json (gitignore).
  */
+import { readFileSync } from "node:fs";
 import { getSdk } from "./sdk.mjs";
 import { fail, reportSdkError } from "./sdk-errors.mjs";
 import {
@@ -22,6 +23,7 @@ import {
   positionalArgs,
   requirePositionalCount,
   failUnknownSubcommand,
+  validateRegularFile,
 } from "./argparse.mjs";
 import {
   resolveRoom,
@@ -29,19 +31,23 @@ import {
   withPresenceRetry,
   registerFreshPresence,
   rememberPresence,
-  getRoomState,
   updateRoomState,
 } from "./rooms-context.mjs";
 import { resolveTaskLabel } from "./harness-context.mjs";
+import { ensureFundedWallet } from "./cold-start.mjs";
 
 export const IMPORTANCE = ["normal", "high"];
 
 const ROOM_FLAGS = ["--project", "--org", "--room"];
+const INVITE_VALUE_FLAGS = [...ROOM_FLAGS, "--note", "--note-file", "--expires-in"];
 
 const HELP = `run402 rooms — arrive in a room, see who is live, leave when done
 
 Usage:
   run402 rooms join [--name <name>] [--task <text>]
+  run402 rooms join <kri1_…> [--json]
+  run402 rooms invite [--note <text> | --note-file <path> | stdin]
+                      [--room <key>] [--expires-in <seconds>] [--json]
   run402 rooms leave [<presence_id>]
 
 Addressing:
@@ -50,6 +56,27 @@ Addressing:
   (omit both)       Resolved from RUN402_ROOM, a .run402.json binding, or the
                     wallet profile's selected org
 
+Room Invite (mint a key from the room you stand in, join through one):
+  - \`rooms invite\` mints a single-use \`kri1_…\` bearer key. Whoever claims it
+    FIRST becomes a permanent \`viewer\` of this org — the narrowest membership
+    that can message, and NEVER wider: there is no --role, and a viewer can
+    never be auto-admitted as a vault writer. To bring a collaborator into the
+    CODE (a vault, a checkpoint, write access), use \`run402 repos invite\`
+    instead — this door is talk-only.
+  - The key is printed to stdout EXACTLY ONCE (\`--json\` still keeps it out of
+    stderr). It is not recoverable if lost — mint a new one.
+  - \`rooms join <kri1_…>\` folds a funded-wallet chain (allowance → faucet if
+    empty → briefly wait for settlement) and pays a $0.01 testnet seat via
+    x402 to claim it — the payment IS the join, so a joiner with no funds
+    fails closed rather than joining unpaid. No tier is purchased, no project
+    is created. A same-payer replay never pays twice.
+  - After a key-form join: the host org becomes this wallet's current org,
+    and the binding is written where the next \`run402 messages wait\` reads
+    it from — \`.run402.json\` in a plain directory, or local git config
+    (\`r402.orgId\`/\`r402.room\`, excluded from git via .git/info/exclude) when
+    standing inside a git repository (never a .run402.json committed into a
+    stranger's clone).
+
 Notes:
   - join registers this session's presence and returns who else is live, what
     they are working on, and what they have claimed — the arrive-and-look call.
@@ -194,6 +221,261 @@ async function leave(argv) {
   }
 }
 
+async function readStdinTextLocal() {
+  const chunks = [];
+  for await (const chunk of process.stdin) {
+    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));
+  }
+  return Buffer.concat(chunks).toString("utf-8");
+}
+
+/**
+ * `rooms invite`'s note is a PLAIN STRING, ≤4 KiB (design D7) — not the
+ * structured `kygit.invite-note.v1` JSON `run402 repos invite` reads: the
+ * gateway already reads every room message in plaintext, so there is
+ * nothing to seal and nothing to schema-validate beyond a length cap.
+ * Optional — `undefined` when nothing was supplied and stdin is a TTY.
+ */
+async function readRoomInviteNote(a) {
+  const inline = flagValue(a, "--note");
+  const noteFile = flagValue(a, "--note-file");
+  if (inline != null && noteFile != null) {
+    fail({ code: "BAD_USAGE", message: "Pass either --note or --note-file, not both.", hint: "run402 rooms invite --help" });
+  }
+  if (inline != null) return inline;
+  if (noteFile != null) {
+    validateRegularFile(noteFile, "--note-file");
+    return readFileSync(noteFile, "utf-8");
+  }
+  if (process.stdin?.isTTY) return undefined; // no note source given — the note is optional
+  const text = await readStdinTextLocal();
+  return text.trim().length > 0 ? text : undefined;
+}
+
+/**
+ * `run402 rooms invite` (add-room-invite design D7) — mint from the room
+ * this checkout stands in: register-or-resume the inviter's OWN presence
+ * FIRST (reusing {@link ensurePresence}, the same logic `rooms join`'s
+ * no-key form already runs) so the row carries `inviter_presence_id`, mint,
+ * post ONE room fact naming the invite id (never the key), echo the
+ * gateway's blast-radius warning to stderr, and print the `kri1_` key to
+ * stdout EXACTLY ONCE. A presence or fact failure is reported on the result
+ * and never voids the mint.
+ */
+async function invite(argv) {
+  const a = normalizeArgv(argv);
+  assertKnownFlags(a, [...INVITE_VALUE_FLAGS, "--json", "--help", "-h"], INVITE_VALUE_FLAGS);
+  requirePositionalCount(positionalArgs(a, INVITE_VALUE_FLAGS), INVITE_VALUE_FLAGS, {
+    min: 0, max: 0, command: "run402 rooms invite",
+  });
+
+  const room = await resolveRoom({
+    org: flagValue(a, "--org"), room: flagValue(a, "--room"), project: flagValue(a, "--project"),
+  });
+  const note = await readRoomInviteNote(a);
+  const expiresRaw = flagValue(a, "--expires-in");
+  const expiresInSeconds = expiresRaw != null ? parseIntegerFlag("--expires-in", expiresRaw, { min: 60, max: 86400 }) : undefined;
+  const asJson = a.includes("--json");
+
+  const sdk = getSdk();
+  try {
+    const { task } = await resolveTaskLabel({});
+    // design D7: register (or resume) the inviter's OWN presence BEFORE
+    // minting, so the row carries `inviter_presence_id`. A failure here is
+    // reported, never thrown — the mint proceeds without one.
+    let inviterPresence = null;
+    let inviterPresenceReport = { registered: false };
+    try {
+      const presence = await ensurePresence(room, { task });
+      inviterPresence = presence;
+      inviterPresenceReport = { registered: true, presence_id: presence.presence_id, name: presence.name };
+    } catch (e) {
+      inviterPresenceReport = { registered: false, error: e instanceof Error ? e.message : String(e) };
+    }
+
+    const result = await sdk.rooms.invite(room.orgId, room.roomKey, {
+      ...(note !== undefined ? { note } : {}),
+      ...(inviterPresence ? { inviterPresenceId: inviterPresence.presence_id } : {}),
+      ...(expiresInSeconds != null ? { expiresInSeconds } : {}),
+    });
+
+    for (const w of result.warnings ?? []) {
+      console.error(w.message ?? `${w.code}`);
+    }
+    console.error(`invite minted: role ${result.role}, expires ${result.expires_at}, room ${result.room?.room_key ?? room.roomKey}`);
+    console.error("recipient runs: run402 rooms join <key printed below>");
+
+    // design D7: post ONE room fact AFTER the mint succeeds — never before
+    // (a mint refusal must leave no orphan message), and never naming the
+    // key, only the invite id.
+    let roomFact = { posted: false, reason: "inviter presence was not registered" };
+    if (inviterPresence) {
+      const inviteShort = result.invite_id.slice(0, 8);
+      try {
+        const sent = await sdk.rooms.sendMessage(room.orgId, room.roomKey, {
+          body: `Invited another agent to this room (invite ${inviteShort}, expires ${result.expires_at}).`,
+          presenceId: inviterPresence.presence_id,
+          idempotencyKey: `room-invite:${result.invite_id}:minted`,
+        });
+        roomFact = { posted: true, message_id: sent.message_id, cursor: sent.cursor };
+        // The inviter's own fact must not wake the inviter's next `messages
+        // wait` — advance this checkout's stored cursor past it (best-effort).
+        try { updateRoomState(room.orgId, room.roomKey, { cursor: sent.cursor }); } catch { /* never fails a mint */ }
+      } catch (e) {
+        roomFact = { posted: false, reason: e instanceof Error ? e.message : String(e) };
+      }
+    }
+    if (inviterPresenceReport.registered === false) {
+      console.error(`note: your own presence was not registered (${inviterPresenceReport.error}) — the invite still mints and is claimable`);
+    }
+    if (roomFact.posted === false && inviterPresence) {
+      console.error(`note: the room fact was not posted (${roomFact.reason}) — the invite still mints and remains claimable`);
+    }
+
+    const finalResult = { ...result, inviter_presence: inviterPresenceReport, room_fact: roomFact };
+    if (asJson) {
+      printInviteResultJson(finalResult);
+    } else {
+      printInviteResultKeyOnly(result);
+    }
+  } catch (err) {
+    reportSdkError(err);
+  }
+}
+
+/** The key rides the JSON result — still stdout, still exactly once. */
+function printInviteResultJson(finalResult) {
+  console.log(JSON.stringify(finalResult, null, 2));
+}
+
+/** The key alone, so `KEY=$(run402 rooms invite ...)` works — everything else (the warning, the mint summary) is on stderr. */
+function printInviteResultKeyOnly(result) {
+  console.log(result.key);
+}
+
+/**
+ * `run402 rooms join <kri1_…>` (add-room-invite design D9/D10) — parse the
+ * key CLIENT-SIDE first (a wrong-kind vault key refuses by name before ANY
+ * network call, including the faucet), fold `ensureFundedWallet` (allowance
+ * → faucet-if-empty → brief settlement poll, announced on stderr), claim
+ * through the SDK's paid fetch, then leave arrival state exactly where
+ * `run402 messages wait` reads it: the host org as this wallet's current
+ * org; the binding written to `.run402.json` outside a git repository, or
+ * pinned in local git config (and `.run402/` excluded from git) inside one;
+ * the returned cursor persisted. There is no `--no-init` — the payment IS
+ * the claim.
+ */
+async function joinWithKey(key, a) {
+  const asJson = a.includes("--json");
+
+  // Parse-only pre-check (design D9): refuses a `kgh1_`/`kgi1_` vault key by
+  // name, synchronously, before `ensureFundedWallet` ever touches the
+  // network — the gateway (faucet included) must never be contacted for a
+  // wrong-kind key.
+  const { parseRoomInviteKey } = await import("#sdk/node");
+  try {
+    parseRoomInviteKey(key);
+  } catch (err) {
+    reportSdkError(err);
+    return;
+  }
+
+  try {
+    await ensureFundedWallet((line) => console.error(line));
+    const result = await getSdk().rooms.join(key);
+
+    // Arrival state (design D10) — best-effort throughout: the claim already
+    // succeeded, and none of this may fail a completed join.
+    try {
+      const { setSelectedOrgId } = await import("./org-context.mjs");
+      setSelectedOrgId(result.org_id);
+    } catch { /* best-effort */ }
+
+    const cwd = process.cwd();
+    let insideGitRepo = false;
+    try {
+      const { hardenedGit } = await import("#sdk/node");
+      await hardenedGit(cwd, ["rev-parse", "--git-dir"]);
+      insideGitRepo = true;
+    } catch {
+      insideGitRepo = false;
+    }
+    if (!insideGitRepo) {
+      try {
+        const { updateBindingFile } = await import("./wallet-context.mjs");
+        updateBindingFile(cwd, { org: result.org_id, room: result.room.room_key });
+      } catch { /* best-effort */ }
+    } else {
+      try {
+        const { pinRoomBinding, excludeMessagingCacheFromGit } = await import("#sdk/node");
+        await pinRoomBinding(cwd, { org_id: result.org_id, room_key: result.room.room_key });
+        await excludeMessagingCacheFromGit(cwd);
+      } catch { /* best-effort */ }
+    }
+    if (typeof result.cursor === "string") {
+      try { updateRoomState(result.org_id, result.room.room_key, { cursor: result.cursor }); } catch { /* best-effort */ }
+    }
+    // Live-proof defect A: cache the presence the CLAIM ITSELF registered,
+    // exactly the way `registerFreshPresence`'s no-key `join` already does
+    // via `rememberPresence` — without this, the joiner's very next
+    // coordination call (no cached presence_id) registers a SECOND presence
+    // for the same arrival. Guarded for an older gateway that predates the
+    // `presence` field: `rememberPresence` itself no-ops on anything that
+    // isn't `{presence_id: string, ...}`, so this never throws either way.
+    try { rememberPresence(result.org_id, result.room.room_key, result.presence); } catch { /* best-effort */ }
+
+    const nextActions = [...(result.next_actions ?? [])];
+    if (!nextActions.some((na) => na.type === "wait_room")) {
+      nextActions.push({ type: "wait_room", command: "run402 messages wait", why: "Block until the other agent speaks; silence returns who is still here." });
+    }
+
+    if (asJson) {
+      printClaimResultJson(result, nextActions);
+    } else {
+      renderClaimResultText(result, nextActions);
+    }
+  } catch (err) {
+    reportSdkError(err);
+  }
+}
+
+function printClaimResultJson(result, nextActions) {
+  console.log(JSON.stringify({ ...result, next_actions: nextActions }, null, 2));
+}
+
+function renderClaimResultText(result, nextActions) {
+  // The note is plain text, not a structured schema — printed verbatim as
+  // Markdown (it may already contain Markdown formatting the inviter wrote).
+  if (result.note) {
+    console.log(result.note);
+    console.error("");
+  }
+  console.error(`joined org ${result.org_id}, room ${result.room.room_key} — role ${result.membership.role}`);
+  if (result.deduplicated) {
+    console.error("note: this key was already claimed by this same payer — no second payment was made (safe replay)");
+  }
+  console.error(`seat: $${(result.seat.amount_usd_micros / 1_000_000).toFixed(2)} on ${result.seat.network}${result.seat.charge_id ? ` (charge ${result.seat.charge_id})` : ""}`);
+  if (result.inviter) {
+    const labels = [result.inviter.program, result.inviter.model].filter(Boolean).join("/");
+    const liveness = result.inviter.state === "active" ? "live" : result.inviter.state;
+    console.error(`invited by ${result.inviter.name}${labels ? ` (${labels})` : ""} — ${liveness}`);
+  } else {
+    console.error("invited by: unknown (the inviter never registered a presence)");
+  }
+  const others = (result.live_presences ?? []);
+  if (others.length > 0) console.error(`also live: ${others.map((p) => p.name).join(", ")}`);
+  const recent = result.recent_messages ?? [];
+  if (recent.length > 0) {
+    console.error(`recent messages (${recent.length}):`);
+    for (const m of recent.slice().reverse()) {
+      console.error(`  ${m.sender ?? "?"}: ${m.body_snippet ?? m.body ?? ""}`);
+    }
+  }
+  for (const na of nextActions) {
+    if (na.command) console.error(`next: ${na.command}${na.why ? ` — ${na.why}` : ""}`);
+  }
+}
+
 export async function run(sub, args) {
   const argv = Array.isArray(args) ? args : [];
   if (!sub || hasHelp([sub, ...argv])) {
@@ -202,7 +484,22 @@ export async function run(sub, args) {
   }
   switch (sub) {
     case "join": {
-      await who(argv);
+      // `run402 rooms join <kri1_…>` (add-room-invite design D9): a
+      // positional key form claims a seat and arrives; no positional keeps
+      // the existing arrive-and-look behavior unchanged.
+      const a = normalizeArgv(argv);
+      const positionals = positionalArgs(a, ["--name", "--task", ...ROOM_FLAGS]);
+      if (positionals.length === 0) {
+        await who(argv);
+        break;
+      }
+      assertKnownFlags(a, ["--json", "--help", "-h"], []);
+      requirePositionalCount(positionals, [], { min: 1, max: 1, command: "run402 rooms join [<kri1_…>]" });
+      await joinWithKey(positionals[0], a);
+      break;
+    }
+    case "invite": {
+      await invite(argv);
       break;
     }
     case "leave": {

package/lib/sdk-errors.mjs

@@ -63,6 +63,20 @@ export function parseFlagJson(name, value) {
   }
 }
 
+// Live-proof defect B — the gateway's own terminal room-invite claim
+// refusals (never settled; see `sdk/src/namespaces/rooms.ts`'s
+// `ROOM_INVITE_TERMINAL_REFUSAL_CODES`, the source of truth this mirrors).
+// A small, deliberate duplication rather than an import, so this
+// dependency-free error reporter stays that way — these five strings are
+// gateway-owned and stable.
+const ROOM_INVITE_TERMINAL_REFUSAL_CODES = new Set([
+  "ROOM_INVITE_KEY_INVALID",
+  "ROOM_INVITE_KEY_EXPIRED",
+  "ROOM_INVITE_KEY_REVOKED",
+  "ROOM_INVITE_KEY_ALREADY_CLAIMED",
+  "ROOM_INVITE_CLAIM_REQUIRES_WALLET",
+]);
+
 export function reportSdkError(err) {
   if (err?.name === "ProjectCredentialNotFound" || err?.code === "PROJECT_CREDENTIAL_NOT_FOUND") {
     fail({
@@ -137,6 +151,17 @@ export function reportSdkError(err) {
     }
   }
 
+  // Live-proof defect B: a terminal room-invite claim refusal is the
+  // gateway's OWN typed envelope by the time it reaches here (the SDK's
+  // default paid fetch classifies these five codes as `"failed"`, never
+  // `"ambiguous"` — see `sdk/src/node/paid-fetch.ts` and
+  // `isTerminalRoomInviteRefusal`), so the truthful, reassuring fact —
+  // no payment was charged — is worth stating explicitly rather than
+  // leaving the caller to infer it from `mutation_state`.
+  if (ROOM_INVITE_TERMINAL_REFUSAL_CODES.has(payload.code) && payload.hint === undefined) {
+    payload.hint = "This key was not claimable (already used, expired, revoked, or this route requires a wallet, not a session) — you were not charged; no payment was made for this attempt.";
+  }
+
   // Keep `status: "error"` as the outer envelope even if the response body
   // happened to contain its own `status` field (e.g. `{"status":"degraded"}`
   // from /health 503 responses). Downstream scripts match on this sentinel.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "4.70.9",
+  "version": "4.71.0",
   "description": "CLI for Run402 — full-stack backend infrastructure for AI agents: Postgres, auth, storage, serverless functions and atomic deploys. Paid with x402/MPP. Includes $0.03 image generation.",
   "type": "module",
   "bin": {

package/sdk/dist/namespaces/rooms.d.ts

@@ -29,7 +29,7 @@
  * keep coordinating.
  */
 import type { Client } from "../kernel.js";
-import type { AckRoomMessageOptions, CreatedRoomClaim, CreateRoomClaimInput, ListPresencesOptions, ListRoomClaimsOptions, ListRoomMessagesOptions, PresenceRegistration, RegisterPresenceOptions, RoomAckResult, RoomClaimList, RoomClaimReleaseResult, RoomMessage, RoomLeaveResult, RoomList, RoomMessagePage, RoomMessageWaitResult, RoomPresence, RoomPresenceList, RoomSummary, SendRoomMessageInput, SentRoomMessage, WaitForRoomMessagesOptions } from "./rooms.types.js";
+import type { AckRoomMessageOptions, CreatedRoomClaim, CreateRoomClaimInput, ListPresencesOptions, ListRoomClaimsOptions, ListRoomMessagesOptions, PresenceRegistration, RegisterPresenceOptions, RoomAckResult, RoomClaimList, RoomClaimReleaseResult, RoomInviteJoinResult, RoomInviteMintOptions, RoomInviteMintResult, RoomMessage, RoomLeaveResult, RoomList, RoomMessagePage, RoomMessageWaitResult, RoomPresence, RoomPresenceList, RoomSummary, SendRoomMessageInput, SentRoomMessage, WaitForRoomMessagesOptions } from "./rooms.types.js";
 export declare class Rooms {
     private readonly client;
     constructor(client: Client);
@@ -172,6 +172,36 @@ export declare class Rooms {
      * `already_released: true` with the original time.
      */
     releaseClaim(orgId: string, roomKey: string, claimId: string): Promise<RoomClaimReleaseResult>;
+    /**
+     * Mint a Room Invite Key from the room the caller stands in
+     * (`POST /orgs/v1/:org_id/rooms/:room_key/invites`) — a single-use bearer
+     * key (`kri1_…`) whose claimant becomes a permanent `viewer` of the org,
+     * the narrowest membership that can message (design D4: never `--role`,
+     * never wider, never auto-admitted as a vault writer). Requires
+     * `developer`+ (session, wallet, or admin credential — a delegate is
+     * refused, since a room invite confers org membership).
+     *
+     * `invite_id` and `master_secret` are generated LOCALLY (design D3): the
+     * gateway never sees `master_secret`, only the SHA-256 `auth_hash` this
+     * call derives and sends. The assembled key is returned exactly ONCE —
+     * nothing here or downstream persists it.
+     */
+    invite(orgId: string, roomKey: string, opts?: RoomInviteMintOptions): Promise<RoomInviteMintResult>;
+    /**
+     * Claim a Room Invite Key (`POST /rooms/v1/invites/:invite_id/claim`) —
+     * parses the key CLIENT-SIDE first, refusing a `kgh1_`/`kgi1_` vault key
+     * BY NAME (pointing at `run402 repos resume`/`run402 repos join`) before
+     * any network call (design D3). The claim is an x402-PAID resource (the
+     * `room_seat` SKU, testnet only): the VERIFIED PAYER of that payment
+     * becomes the claimant, so this call is sent through the client's paid
+     * fetch WITHOUT a bearer credential (`withAuth: false`) — no
+     * `SIGN-IN-WITH-X` header, and any cached control-plane session is
+     * deliberately not attached, exactly matching the gateway's own
+     * `403 ROOM_INVITE_CLAIM_REQUIRES_WALLET` refusal for a bearer-credentialed
+     * request at this route. A same-payer replay never pays twice
+     * (`deduplicated: true`, no second charge).
+     */
+    join(key: string): Promise<RoomInviteJoinResult>;
     /**
      * Return a room-scoped sub-client with `(orgId, roomKey)` pre-bound.
      * Synchronous — both ids are explicit. For a project's default room
@@ -187,6 +217,26 @@ export declare class Rooms {
      */
     forProject(projectId: string): Promise<ScopedRoom>;
 }
+/**
+ * Terminal room-invite claim refusals the gateway's own x402 paywall NEVER
+ * settles for (design D5 — the paywall buffers and settles only on a
+ * sub-400 response, so any of these five codes means no payment ever
+ * completed, refunded or otherwise). Live-proof defect B: without this, a
+ * spent/expired/revoked key, or a bearer credential presented to the claim
+ * route, surfaced as a generic `X402_PAYMENT_OUTCOME_AMBIGUOUS` — alarming
+ * and wrong, since the gateway had already answered with one of these and
+ * moved no funds. `node/paid-fetch.ts`'s default paid fetch recognizes a
+ * response carrying one of these codes, FROM this SDK's own configured API
+ * origin, as `"failed"` rather than `"ambiguous"` — letting the gateway's
+ * own typed envelope (not a synthesized payment-attempt error) reach the
+ * caller. Scoped by CODE, never by route: an arbitrary third-party paid URL
+ * — even one that echoes one of these exact strings — is never treated as
+ * this SDK's own origin, so its non-2xx after dispatch stays genuinely
+ * ambiguous, unchanged.
+ */
+export declare const ROOM_INVITE_TERMINAL_REFUSAL_CODES: ReadonlySet<string>;
+/** True when `envelope.code` is one of {@link ROOM_INVITE_TERMINAL_REFUSAL_CODES}. */
+export declare function isTerminalRoomInviteRefusal(envelope: Record<string, unknown> | null | undefined): boolean;
 /**
  * A room-scoped sub-client returned by {@link Rooms.scoped} /
  * {@link Rooms.forProject}. The `(orgId, roomKey)` pair is bound at
@@ -225,5 +275,7 @@ export declare class ScopedRoom {
     listClaims(opts?: ListRoomClaimsOptions): Promise<RoomClaimList>;
     /** See {@link Rooms.releaseClaim}. */
     releaseClaim(claimId: string): Promise<RoomClaimReleaseResult>;
+    /** See {@link Rooms.invite} — pre-bound to this room. */
+    invite(opts?: RoomInviteMintOptions): Promise<RoomInviteMintResult>;
 }
 //# sourceMappingURL=rooms.d.ts.map

package/sdk/dist/namespaces/rooms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rooms.d.ts","sourceRoot":"","sources":["../../src/namespaces/rooms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EACV,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,aAAa,EACb,aAAa,EACb,sBAAsB,EACtB,WAAW,EACX,eAAe,EACf,QAAQ,EACR,eAAe,EACf,qBAAqB,EACrB,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,0BAA0B,EAC3B,MAAM,kBAAkB,CAAC;AAqC1B,qBAAa,KAAK;IACJ,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;;;;;;;OAUG;IACG,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAS5C;;;;;;;;OAQG;IACG,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAU/D;;;;;;;;;;;;;;;;OAgBG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAgBzF;;;;;;;;;OASG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,oBAAoB,CAAC;IAoBhC;;;;;OAKG;IACG,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;;OAGG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAgB5F;;;;;;;;;;;OAWG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IA8BxG;;;;;;;;OAQG;IACG,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,eAAe,CAAC;IAa3B;;;;;;;;;;;;;;;OAeG;IACG,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,0BAA+B,GACpC,OAAO,CAAC,qBAAqB,CAAC;IAqEjC;;;OAGG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAgBzF;;;;;OAKG;IACG,UAAU,CACd,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,aAAa,CAAC;IAmBzB;;;;;;;;OAQG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyBzG;;;;;OAKG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,aAAa,CAAC;IAa1G;;;;;OAKG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAgBpG;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU;IAIlD;;;;;;OAMG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAiBzD;AAED;;;;GAIG;AACH,qBAAa,UAAU;IAMT,OAAO,CAAC,QAAQ,CAAC,KAAK;IALlC,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEI,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAWzE,6BAA6B;IAC7B,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC;IAI3B,+BAA+B;IAC/B,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAInD,0CAA0C;IAC1C,gBAAgB,CAAC,IAAI,GAAE,uBAA4B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAInF,uCAAuC;IACvC,aAAa,CAAC,IAAI,GAAE,oBAAyB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIzE,qCAAqC;IACrC,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAItD,qCAAqC;IACrC,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAIlE,sCAAsC;IACtC,YAAY,CAAC,IAAI,GAAE,uBAA4B,GAAG,OAAO,CAAC,eAAe,CAAC;IAI1E,oCAAoC;IACpC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAInD,yCAAyC;IACzC,eAAe,CAAC,IAAI,GAAE,0BAA+B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAItF,oCAAoC;IACpC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,aAAa,CAAC;IAIvF,qCAAqC;IACrC,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAInE,oCAAoC;IACpC,UAAU,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,aAAa,CAAC;IAIpE,sCAAsC;IACtC,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAG/D"}
+{"version":3,"file":"rooms.d.ts","sourceRoot":"","sources":["../../src/namespaces/rooms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,OAAO,KAAK,EACV,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,aAAa,EACb,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,QAAQ,EACR,eAAe,EACf,qBAAqB,EACrB,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,0BAA0B,EAC3B,MAAM,kBAAkB,CAAC;AA2D1B,qBAAa,KAAK;IACJ,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;;;;;;;OAUG;IACG,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAS5C;;;;;;;;OAQG;IACG,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAU/D;;;;;;;;;;;;;;;;OAgBG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAgBzF;;;;;;;;;OASG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,oBAAoB,CAAC;IAoBhC;;;;;OAKG;IACG,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;;OAGG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAgB5F;;;;;;;;;;;OAWG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IA8BxG;;;;;;;;OAQG;IACG,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,eAAe,CAAC;IAa3B;;;;;;;;;;;;;;;OAeG;IACG,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,0BAA+B,GACpC,OAAO,CAAC,qBAAqB,CAAC;IAqEjC;;;OAGG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAgBzF;;;;;OAKG;IACG,UAAU,CACd,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,aAAa,CAAC;IAmBzB;;;;;;;;OAQG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyBzG;;;;;OAKG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,aAAa,CAAC;IAa1G;;;;;OAKG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAkBpG;;;;;;;;;;;;;OAaG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAyD7G;;;;;;;;;;;;;OAaG;IACG,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAmBtD;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU;IAIlD;;;;;;OAMG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAiBzD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,kCAAkC,EAAE,WAAW,CAAC,MAAM,CAMjE,CAAC;AAEH,sFAAsF;AACtF,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAGzG;AAED;;;;GAIG;AACH,qBAAa,UAAU;IAMT,OAAO,CAAC,QAAQ,CAAC,KAAK;IALlC,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEI,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAWzE,6BAA6B;IAC7B,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC;IAI3B,+BAA+B;IAC/B,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAInD,0CAA0C;IAC1C,gBAAgB,CAAC,IAAI,GAAE,uBAA4B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAInF,uCAAuC;IACvC,aAAa,CAAC,IAAI,GAAE,oBAAyB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIzE,qCAAqC;IACrC,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAItD,qCAAqC;IACrC,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAIlE,sCAAsC;IACtC,YAAY,CAAC,IAAI,GAAE,uBAA4B,GAAG,OAAO,CAAC,eAAe,CAAC;IAI1E,oCAAoC;IACpC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAInD,yCAAyC;IACzC,eAAe,CAAC,IAAI,GAAE,0BAA+B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAItF,oCAAoC;IACpC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,aAAa,CAAC;IAIvF,qCAAqC;IACrC,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAInE,oCAAoC;IACpC,UAAU,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,aAAa,CAAC;IAIpE,sCAAsC;IACtC,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAI9D,yDAAyD;IACzD,MAAM,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAGxE"}