sealbridge 0.0.1 → 0.1.0

package/dist/cli/dist/network.js

@@ -0,0 +1,320 @@
+// SPDX-License-Identifier: Apache-2.0
+import { readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { inviteShareCommand } from './invite-share.js';
+import { publicSettingsFlags, publicProfileSummary } from './public-settings.js';
+import { createSignedAgentCard, createInviteToken, discoverAgentCards } from '../../packages/core/dist/index.js';
+import { startLocalRelay, HttpRelayClient } from '../../packages/relay/dist/index.js';
+import { WorkerNode, RequesterClient, PolicyAutoApprovalProvider, InteractiveCliApprovalProvider, } from '../../packages/runtime/dist/index.js';
+import { CommandAgentAdapter, ClaudeCodeAdapter, CodexCliAdapter, OpenAICompatibleAdapter, SandboxAgentAdapter, } from '../../packages/adapters/dist/index.js';
+import { createReceiveHook } from './receive-hook.js';
+import { contactsPath, loadContacts, contactsApproval, addContact } from './contacts.js';
+const REPEATABLE = new Set(['--allow-requester', '--open-allow-task-type']);
+const LLM_ADAPTERS = new Set(['claude', 'codex', 'openai']);
+function flags(args) {
+    const out = new Map();
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (!arg.startsWith('--'))
+            throw new Error('Unexpected argument: ' + arg);
+        const next = args[i + 1];
+        const value = next !== undefined && !next.startsWith('--') ? args[++i] : true;
+        if (REPEATABLE.has(arg)) {
+            if (typeof value !== 'string' || value.trim() === '')
+                throw new Error('Missing ' + arg);
+            const previous = out.get(arg);
+            out.set(arg, (typeof previous === 'string' && previous ? previous + ',' : '') + value);
+            continue;
+        }
+        if (out.has(arg))
+            throw new Error('Duplicate option: ' + arg);
+        out.set(arg, value);
+    }
+    return out;
+}
+function text(f, name, fallback) {
+    const value = f.get('--' + name) ?? fallback;
+    if (typeof value !== 'string')
+        throw new Error('Missing --' + name);
+    return value;
+}
+function approval(key, automatic, acceptance) {
+    return automatic
+        ? new PolicyAutoApprovalProvider(key, undefined, { acceptance })
+        : new InteractiveCliApprovalProvider(key);
+}
+function optionalCount(parsed, name) {
+    if (!parsed.has('--' + name))
+        return undefined;
+    const raw = text(parsed, name);
+    if (!/^[1-9]\d*$/.test(raw))
+        throw new Error('INVALID_' + name.toUpperCase().replaceAll('-', '_'));
+    const value = Number(raw);
+    if (!Number.isSafeInteger(value))
+        throw new Error('INVALID_' + name.toUpperCase().replaceAll('-', '_'));
+    return value;
+}
+function allowRequesterDids(parsed) {
+    const raw = parsed.get('--allow-requester');
+    if (raw === undefined)
+        return [];
+    if (typeof raw !== 'string')
+        throw new Error('Missing --allow-requester');
+    const dids = raw
+        .split(',')
+        .map((part) => part.trim())
+        .filter(Boolean);
+    if (dids.length === 0)
+        throw new Error('Missing --allow-requester');
+    return dids;
+}
+function workerAcceptance(parsed) {
+    return {
+        allowedRequesterDids: allowRequesterDids(parsed),
+        allowAnyRequester: parsed.has('--allow-any-requester'),
+        maxInputTokens: optionalCount(parsed, 'max-input-tokens'),
+        maxOutputTokens: optionalCount(parsed, 'max-output-tokens'),
+        maxToolInvocations: optionalCount(parsed, 'max-tool-invocations'),
+        maxWallClockSeconds: optionalCount(parsed, 'max-wall-clock-seconds'),
+        maxConcurrentTasks: optionalCount(parsed, 'max-concurrent-tasks'),
+        maxTasksPerRequesterPerMinute: optionalCount(parsed, 'max-requests-per-minute'),
+        publishToRegistry: parsed.has('--publish'),
+    };
+}
+function openRateLimit(parsed) {
+    const raw = parsed.get('--open-rate-limit-per-did');
+    if (raw === undefined)
+        return undefined;
+    const match = typeof raw === 'string' ? /^([1-9]\d*)(?:\/(?:m|min|60s))?$/.exec(raw) : null;
+    if (!match || !Number.isSafeInteger(Number(match[1])))
+        throw new Error('INVALID_OPEN_RATE_LIMIT_PER_DID');
+    return Number(match[1]);
+}
+function assertLlmAutoAccept(adapter, automatic, acceptance) {
+    if (!automatic || !LLM_ADAPTERS.has(adapter))
+        return;
+    if (acceptance.allowAnyRequester || (acceptance.allowedRequesterDids?.length ?? 0) > 0)
+        return;
+    throw new Error('LLM_AUTO_ACCEPT_REQUIRES_ALLOWLIST: --auto-accept with the ' +
+        adapter +
+        ' adapter can spend the worker owner API key. Pass --allow-requester <did> ' +
+        '(repeatable or comma-separated) or --allow-any-requester.');
+}
+export async function networkCommand(command, args) {
+    const sub = ['relay', 'worker', 'invite'].includes(command) ? args.shift() : undefined;
+    if (command === 'worker' && sub === 'public') {
+        const index = args.indexOf('--settings');
+        if (index < 0 || !args[index + 1])
+            throw new Error('Missing --settings');
+        const settings = JSON.parse(readFileSync(args[index + 1], 'utf8'));
+        args.splice(index, 2);
+        if (args.some(a => ['--open', '--publish', '--auto-accept', '--auto-approve', '--yes', '--allow-any-requester', '--access-mode'].includes(a) || a.startsWith('--open-') || a === '--max-tasks-per-day'))
+            throw new Error('CONFLICTING_PUBLIC_SETTINGS');
+        return networkCommand('worker', ['start', ...args, ...publicSettingsFlags(settings)]);
+    }
+    if (command === 'invite' && sub !== 'create')
+        return inviteShareCommand(sub ?? '', args);
+    if ((command === 'relay' || command === 'worker') && sub !== 'start')
+        throw new Error('Expected ' + command + ' start');
+    const f = flags(args);
+    const allowPrivateRelay = f.has('--allow-private-relay');
+    if (command === 'relay') {
+        const port = Number(text(f, 'port', '8787'));
+        if (!Number.isInteger(port) || port < 0 || port > 65535)
+            throw new Error('INVALID_PORT');
+        const relay = await startLocalRelay({ port, host: text(f, 'host', '127.0.0.1') });
+        console.log(JSON.stringify({ relay: relay.url }));
+        await new Promise((resolve) => {
+            const stop = () => resolve();
+            process.once('SIGINT', stop);
+            process.once('SIGTERM', stop);
+        });
+        await relay.close();
+        return;
+    }
+    if (command === 'discover') {
+        const client = new HttpRelayClient(text(f, 'relay'), { allowPrivateRelay });
+        console.log(JSON.stringify(discoverAgentCards(await client.discover(), {
+            ...(f.has('--skill') ? { skillId: text(f, 'skill') } : {}),
+            ...(f.has('--task-type') ? { taskType: text(f, 'task-type') } : {}),
+            ...(f.has('--did') ? { did: text(f, 'did') } : {}),
+        }), null, 2));
+        return;
+    }
+    const key = JSON.parse(readFileSync(text(f, 'key'), 'utf8'));
+    if (command === 'invite') {
+        const card = createSignedAgentCard({
+            name: text(f, 'name', 'Sealbridge Worker'),
+            agentDid: key.did,
+            relayEndpoint: text(f, 'relay'),
+            skills: [{ id: 'json-task', name: 'JSON task' }],
+        }, key);
+        console.log(createInviteToken({ agentCard: card, expiresInSeconds: Number(text(f, 'expires-in', '3600')) }, key));
+        return;
+    }
+    const automatic = ['yes', 'auto-accept', 'auto-approve'].some((name) => f.has('--' + name));
+    if (command === 'worker') {
+        const accessMode = text(f, 'access-mode', f.has('--open') ? 'open' : 'invite-only');
+        if (!['invite-only', 'open'].includes(accessMode) || (f.has('--open') && accessMode !== 'open'))
+            throw new Error('INVALID_ACCESS_MODE');
+        const onInboxRecord = f.has('--on-receive')
+            ? createReceiveHook(text(f, 'on-receive')) : undefined;
+        if (onInboxRecord && !f.has('--inbox'))
+            throw new Error('--on-receive requires --inbox');
+        const adapterName = text(f, 'adapter', 'sandbox');
+        const acceptance = workerAcceptance(f);
+        const contactFile = f.has('--contacts') ? text(f, 'contacts') : contactsPath();
+        const explicitAcceptance = { ...acceptance };
+        acceptance.allowedRequesterDids = [...new Set([
+                ...(acceptance.allowedRequesterDids ?? []),
+                ...loadContacts(contactFile, key.did).filter(c => c.allow && !c.revoked).map(c => c.ownerDid),
+            ])];
+        const rateLimit = openRateLimit(f);
+        const allowedTaskTypes = f.has('--open-allow-task-type')
+            ? [...new Set(text(f, 'open-allow-task-type').split(',').map((value) => value.trim()))]
+            : undefined;
+        if (allowedTaskTypes?.some((value) => !value))
+            throw new Error('INVALID_OPEN_ALLOW_TASK_TYPE');
+        if ((allowedTaskTypes || rateLimit !== undefined) && accessMode !== 'open')
+            throw new Error('OPEN_POLICY_REQUIRES_OPEN_MODE');
+        if (allowedTaskTypes && f.has('--task-type') && !allowedTaskTypes.includes(text(f, 'task-type')))
+            throw new Error('CONFLICTING_OPEN_TASK_TYPE');
+        if (rateLimit !== undefined)
+            acceptance.maxTasksPerRequesterPerMinute = Math.min(acceptance.maxTasksPerRequesterPerMinute ?? rateLimit, rateLimit);
+        const openPolicy = {};
+        const openFlags = {
+            maxInputTokens: 'open-max-input-tokens',
+            maxOutputTokens: 'open-max-output-tokens',
+            maxToolInvocations: 'open-max-tool-calls',
+            maxWallClockSeconds: 'open-max-wall-seconds',
+        };
+        for (const field of Object.keys(openFlags)) {
+            const limit = optionalCount(f, openFlags[field]);
+            if (limit !== undefined)
+                openPolicy[field] = limit;
+        }
+        if (Object.keys(openPolicy).length && accessMode !== 'open')
+            throw new Error('OPEN_POLICY_REQUIRES_OPEN_MODE');
+        if (accessMode === 'open')
+            for (const field of Object.keys(openFlags)) {
+                const general = acceptance[field];
+                if (general !== undefined)
+                    openPolicy[field] = Math.min(openPolicy[field] ?? general, general);
+            }
+        assertLlmAutoAccept(adapterName, automatic, acceptance);
+        let adapter;
+        switch (adapterName) {
+            case 'command':
+                adapter = new CommandAgentAdapter({ command: text(f, 'cmd') });
+                break;
+            case 'claude':
+                adapter = new ClaudeCodeAdapter(f.has('--cmd') ? { command: text(f, 'cmd') } : {});
+                break;
+            case 'codex':
+                adapter = new CodexCliAdapter(f.has('--cmd') ? { command: text(f, 'cmd') } : {});
+                break;
+            case 'openai':
+                adapter = new OpenAICompatibleAdapter({
+                    model: text(f, 'model', 'gpt-4o-mini'),
+                    ...(f.has('--endpoint') ? { endpoint: text(f, 'endpoint') } : {}),
+                });
+                break;
+            case 'sandbox':
+                adapter = new SandboxAgentAdapter(text(f, 'cmd', 'return input;'));
+                break;
+            default:
+                throw new Error('UNKNOWN_ADAPTER');
+        }
+        if (f.has('--skill') || f.has('--task-type')) {
+            const skillId = text(f, 'skill', adapter.skills[0]?.id ?? 'json-task');
+            adapter.skills = [{ id: skillId, name: skillId,
+                    ...(f.has('--task-type') ? { taskTypes: [text(f, 'task-type')] } : {}),
+                }];
+        }
+        if (allowedTaskTypes)
+            adapter.skills = adapter.skills.map((skill) => ({ ...skill, taskTypes: allowedTaskTypes }));
+        const worker = new WorkerNode({
+            ...(f.has('--max-tasks-per-day') ? { dailyLimit: {
+                    path: join(dirname(contactsPath()), 'daily-tasks.json'),
+                    maxTasks: optionalCount(f, 'max-tasks-per-day'),
+                } } : {}),
+            accessMode: accessMode,
+            ...(Object.keys(openPolicy).length ? { openPolicy } : {}),
+            owner: key,
+            relay: new HttpRelayClient(text(f, 'relay'), key, { allowPrivateRelay }),
+            relayUrl: text(f, 'relay'),
+            adapter,
+            name: text(f, 'name', adapter.name),
+            approvalProvider: contactsApproval(contactFile, key, automatic, explicitAcceptance, approval(key, false)),
+            auditPath: f.has('--audit') ? text(f, 'audit') : undefined,
+            inboxPath: f.has('--inbox') ? text(f, 'inbox') : undefined,
+            onInboxRecord,
+            onEvent: (event, taskId, error) => console.error(JSON.stringify({ event, taskId, ...error })),
+            ...acceptance,
+            allowPrivateRelay,
+        });
+        if (f.has('--preview')) {
+            console.log(JSON.stringify(publicProfileSummary(worker.agentCard, acceptance.maxTasksPerRequesterPerMinute, optionalCount(f, 'max-tasks-per-day'), automatic), null, 2));
+            return;
+        }
+        if (acceptance.publishToRegistry)
+            await worker.register();
+        if (accessMode === 'open' && automatic && !acceptance.allowedRequesterDids?.length)
+            console.error(`[Sealbridge WARNING] Worker started in --open mode with ${f.has('--yes') ? '--yes' : 'automatic approval'} and no requester allowlist. Any requester can submit tasks for automatic acceptance within configured limits.`);
+        console.log(worker.invite());
+        const stop = () => worker.stop();
+        process.once('SIGINT', stop);
+        process.once('SIGTERM', stop);
+        try {
+            await worker.start({ once: f.has('--once') });
+        }
+        finally {
+            process.removeListener('SIGINT', stop);
+            process.removeListener('SIGTERM', stop);
+        }
+        return;
+    }
+    if (command === 'delegate') {
+        if (f.has('--save-contact'))
+            addContact(f.has('--contacts') ? text(f, 'contacts') : contactsPath(), key, text(f, 'to'), text(f, 'save-contact'), allowPrivateRelay);
+        let outputSchema = {};
+        if (f.has('--output-schema')) {
+            const value = text(f, 'output-schema');
+            outputSchema = JSON.parse(value.trim().startsWith('{') ? value : readFileSync(value, 'utf8'));
+        }
+        const client = new RequesterClient({
+            owner: key,
+            ...(f.has('--relay')
+                ? { relay: new HttpRelayClient(text(f, 'relay'), key, { allowPrivateRelay }) }
+                : {}),
+            approvalProvider: approval(key, automatic),
+            auditPath: f.has('--audit') ? text(f, 'audit') : undefined,
+            allowPrivateRelay,
+        });
+        const result = await client.delegate({
+            to: text(f, 'to', f.has('--discover') || f.has('--task-type') ? '' : undefined),
+            ...(f.has('--discover') || f.has('--task-type') ? { discover: {
+                    ...(f.has('--discover') ? { skillId: text(f, 'discover') } : {}),
+                    ...(f.has('--task-type') ? { taskType: text(f, 'task-type') } : {}),
+                } } : {}),
+            title: text(f, 'title'),
+            description: text(f, 'description'),
+            input: JSON.parse(text(f, 'input')),
+            outputSchema,
+        });
+        if (f.has('--out'))
+            writeFileSync(text(f, 'out'), JSON.stringify(result.deliverable, null, 2) + '\n', {
+                flag: 'wx',
+                mode: 0o600,
+            });
+        console.log(JSON.stringify({
+            taskId: result.taskId,
+            state: result.state,
+            deliverable: result.deliverable,
+            audit: 'VALID',
+        }));
+        return;
+    }
+    throw new Error('UNKNOWN_NETWORK_COMMAND');
+}
+//# sourceMappingURL=network.js.map

package/dist/cli/dist/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjF,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EACL,UAAU,EACV,eAAe,EACf,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACzF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAC5E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC5D,SAAS,KAAK,CAAC,IAAc;IAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,GAAG,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;YACvF,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,SAAS,IAAI,CAAC,CAA6B,EAAE,IAAY,EAAE,QAAiB;IAC1E,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,QAAQ,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,QAAQ,CACf,GAAY,EACZ,SAAkB,EAClB,UAAmC;IAEnC,OAAO,SAAS;QACd,CAAC,CAAC,IAAI,0BAA0B,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC;QAChE,CAAC,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AACD,SAAS,aAAa,CAAC,MAAkC,EAAE,IAAY;IACrE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,kBAAkB,CAAC,MAAkC;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,GAAG;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,gBAAgB,CAAC,MAAkC;IAC1D,OAAO;QACL,oBAAoB,EAAE,kBAAkB,CAAC,MAAM,CAAC;QAChD,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACtD,cAAc,EAAE,aAAa,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACzD,eAAe,EAAE,aAAa,CAAC,MAAM,EAAE,mBAAmB,CAAC;QAC3D,kBAAkB,EAAE,aAAa,CAAC,MAAM,EAAE,sBAAsB,CAAC;QACjE,mBAAmB,EAAE,aAAa,CAAC,MAAM,EAAE,wBAAwB,CAAC;QACpE,kBAAkB,EAAE,aAAa,CAAC,MAAM,EAAE,sBAAsB,CAAC;QACjE,6BAA6B,EAAE,aAAa,CAAC,MAAM,EAAE,yBAAyB,CAAC;QAC/E,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;KAC3C,CAAC;AACJ,CAAC;AACD,SAAS,aAAa,CAAC,MAAkC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACpD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AACD,SAAS,mBAAmB,CAC1B,OAAe,EACf,SAAkB,EAClB,UAAkC;IAElC,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IACrD,IAAI,UAAU,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO;IAC/F,MAAM,IAAI,KAAK,CACb,6DAA6D;QAC3D,OAAO;QACP,4EAA4E;QAC5E,2DAA2D,CAC9D,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,IAAc;IAClE,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,IAAI,OAAO,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAC,WAAW,EAAC,eAAe,EAAC,gBAAgB,EAAC,OAAO,EAAC,uBAAuB,EAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,qBAAqB,CAAC;YAC/L,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,OAAO,cAAc,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACzF,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,CAAC,IAAI,GAAG,KAAK,OAAO;QAClE,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,OAAO,GAAG,QAAQ,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACzD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE;YACrE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACd,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAY,CAAC;IACxE,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,qBAAqB,CAChC;YACE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC;YAC1C,QAAQ,EAAE,GAAG,CAAC,GAAG;YACjB,aAAa,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC;YAC/B,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;SACjD,EACD,GAAG,CACJ,CAAC;QACF,OAAO,CAAC,GAAG,CACT,iBAAiB,CACf,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,EAAE,EAC5E,GAAG,CACJ,CACF,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAC5F,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACpF,IAAI,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,UAAU,KAAK,MAAM,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;YACzC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,IAAI,aAAa,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACzF,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QAC/E,MAAM,kBAAkB,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;QAC7C,UAAU,CAAC,oBAAoB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;gBAC5C,GAAG,CAAC,UAAU,CAAC,oBAAoB,IAAI,EAAE,CAAC;gBAC1C,GAAG,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aAC9F,CAAC,CAAC,CAAC;QACJ,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,gBAAgB,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;YACtD,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,gBAAgB,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,IAAI,CAAC,gBAAgB,IAAI,SAAS,KAAK,SAAS,CAAC,IAAI,UAAU,KAAK,MAAM;YACxE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,IAAI,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,SAAS;YACzB,UAAU,CAAC,6BAA6B,GAAG,IAAI,CAAC,GAAG,CACjD,UAAU,CAAC,6BAA6B,IAAI,SAAS,EAAE,SAAS,CAAC,CAAC;QACtE,MAAM,UAAU,GAAe,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG;YAChB,cAAc,EAAE,uBAAuB;YACvC,eAAe,EAAE,wBAAwB;YACzC,kBAAkB,EAAE,qBAAqB;YACzC,mBAAmB,EAAE,uBAAuB;SACpC,CAAC;QACX,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAyB,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACjD,IAAI,KAAK,KAAK,SAAS;gBAAE,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QACrD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,IAAI,UAAU,KAAK,MAAM;YACzD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,IAAI,UAAU,KAAK,MAAM;YAAE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAyB,EAAE,CAAC;gBAC9F,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBAClC,IAAI,OAAO,KAAK,SAAS;oBAAE,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,EAAE,OAAO,CAAC,CAAC;YACjG,CAAC;QACD,mBAAmB,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,OAAqB,CAAC;QAC1B,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,SAAS;gBACZ,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC/D,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnF,MAAM;YACR,KAAK,OAAO;gBACV,OAAO,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACjF,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,GAAG,IAAI,uBAAuB,CAAC;oBACpC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC;oBACtC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClE,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;gBACnE,MAAM;YACR;gBACE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,WAAW,CAAC,CAAC;YACvE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO;oBAC5C,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,gBAAgB;YAClB,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;YAC5B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,EAAE,kBAAkB,CAAC;oBACvD,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,mBAAmB,CAAE;iBACjD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACT,UAAU,EAAE,UAAoC;YAChD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,KAAK,EAAE,GAAG;YACV,KAAK,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,CAAC;YACxE,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC;YAC1B,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;YACnC,gBAAgB,EAAE,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,kBAAkB,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzG,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC1D,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC1D,aAAa;YACb,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAC7F,GAAG,UAAU;YACb,iBAAiB;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,6BAA6B,EACxG,aAAa,CAAC,CAAC,EAAE,mBAAmB,CAAC,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,IAAI,UAAU,CAAC,iBAAiB;YAAE,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1D,IAAI,UAAU,KAAK,MAAM,IAAI,SAAS,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,MAAM;YAChF,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,gHAAgH,CAAC,CAAC;QAC5O,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACvC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAAE,UAAU,CACrC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAC9E,IAAI,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,iBAAiB,CAC3C,CAAC;QACF,IAAI,YAAY,GAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YACvC,YAAY,GAAG,IAAI,CAAC,KAAK,CACvB,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CACzD,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,KAAK,EAAE,GAAG;YACV,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;gBAClB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE;gBAC9E,CAAC,CAAC,EAAE,CAAC;YACP,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;YAC1C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC1D,iBAAiB;SAClB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,EAAE,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE;oBAC5D,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACT,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC;YACvB,WAAW,EAAE,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACnC,YAAY;SACb,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;YAChB,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;gBAChF,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,OAAO;SACf,CAAC,CACH,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAC7C,CAAC"}

package/dist/cli/dist/public-settings.d.ts

@@ -0,0 +1,27 @@
+import type { SignedAgentCard } from '@acp/core';
+export interface PublicSettings {
+    public: boolean;
+    taskTypes: string[];
+    maxInputTokens: number;
+    maxOutputTokens: number;
+    maxToolCalls: number;
+    maxWallSeconds: number;
+    maxJobsPerPersonPerMinute: number;
+    maxJobsPerDay: number;
+    alwaysAsk: boolean;
+}
+export declare function publicSettingsFlags(s: PublicSettings): string[];
+export declare function publicProfileSummary(card: SignedAgentCard, rate?: number, daily?: number, automatic?: boolean): {
+    name: string;
+    access: string;
+    jobs: string[];
+    perJob: Partial<Pick<import("@acp/core").BudgetSpec, "maxInputTokens" | "maxOutputTokens" | "maxToolInvocations" | "maxWallClockSeconds">>;
+    hostLimits: {
+        perPersonPerMinute: number | null;
+        perDay: number | null;
+        dayReset: string;
+    };
+    approval: string;
+    notice: string;
+    signedCard: SignedAgentCard;
+};

package/dist/cli/dist/public-settings.js

@@ -0,0 +1,33 @@
+export function publicSettingsFlags(s) {
+    if (!s || Object.keys(s).sort().join(',') !== ['public', 'taskTypes', 'maxInputTokens', 'maxOutputTokens',
+        'maxToolCalls', 'maxWallSeconds', 'maxJobsPerPersonPerMinute', 'maxJobsPerDay', 'alwaysAsk'].sort().join(',') ||
+        typeof s.public !== 'boolean' || typeof s.alwaysAsk !== 'boolean' || !Array.isArray(s.taskTypes) || !s.taskTypes.length ||
+        s.taskTypes.some(t => typeof t !== 'string' || !/^[a-zA-Z0-9_.-]+$/.test(t)))
+        throw new Error('INVALID_PUBLIC_SETTINGS');
+    const mapping = { maxInputTokens: 'open-max-input-tokens', maxOutputTokens: 'open-max-output-tokens',
+        maxToolCalls: 'open-max-tool-calls', maxWallSeconds: 'open-max-wall-seconds',
+        maxJobsPerPersonPerMinute: 'open-rate-limit-per-did', maxJobsPerDay: 'max-tasks-per-day' };
+    for (const field of Object.keys(mapping))
+        if (!Number.isSafeInteger(s[field]) || s[field] < 1)
+            throw new Error('INVALID_PUBLIC_SETTINGS');
+    const flags = ['--max-tasks-per-day', String(s.maxJobsPerDay)];
+    if (!s.public)
+        return flags;
+    flags.push('--open', '--publish', '--open-allow-task-type', [...new Set(s.taskTypes)].join(','));
+    for (const field of Object.keys(mapping))
+        if (field !== 'maxJobsPerDay')
+            flags.push('--' + mapping[field], String(s[field]));
+    // Explicit false is the existing G3 opt-in; absence never implies auto-accept.
+    if (!s.alwaysAsk)
+        flags.push('--auto-accept', '--allow-any-requester');
+    return flags;
+}
+export function publicProfileSummary(card, rate, daily, automatic = false) {
+    return { name: card.payload.name, access: card.payload.accessMode === 'open' ? 'Strangers may request jobs' : 'Invite only',
+        jobs: card.payload.skills.flatMap(s => s.taskTypes ?? []), perJob: card.payload.openPolicy ?? {},
+        hostLimits: { perPersonPerMinute: rate ?? null, perDay: daily ?? null, dayReset: '00:00 UTC' },
+        approval: automatic ? 'Automatic acceptance explicitly enabled' : 'Owner approval required',
+        notice: 'Host rate and daily limits are not advertised in the signed openPolicy. Available capacity is checked at admission.',
+        signedCard: card };
+}
+//# sourceMappingURL=public-settings.js.map

package/dist/cli/dist/public-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-settings.js","sourceRoot":"","sources":["../src/public-settings.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,mBAAmB,CAAC,CAAiB;IACnD,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAC,WAAW,EAAC,gBAAgB,EAAC,iBAAiB;QAClG,cAAc,EAAC,gBAAgB,EAAC,2BAA2B,EAAC,eAAe,EAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACzG,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM;QACvH,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7H,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,uBAAuB,EAAE,eAAe,EAAE,wBAAwB;QAClG,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAE,uBAAuB;QAC5E,yBAAyB,EAAE,yBAAyB,EAAE,aAAa,EAAE,mBAAmB,EAAW,CAAC;IACtG,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAA6B;QAClE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjG,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAA6B;QAClE,IAAI,KAAK,KAAK,eAAe;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrF,+EAA+E;IAC/E,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,IAAqB,EAAE,IAAa,EAAE,KAAc,EAAE,SAAS,GAAG,KAAK;IAC1G,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,aAAa;QACzH,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE;QAChG,UAAU,EAAE,EAAE,kBAAkB,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE;QAC9F,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,yBAAyB;QAC3F,MAAM,EAAE,qHAAqH;QAC7H,UAAU,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC"}

package/dist/cli/dist/receipt.d.ts

@@ -0,0 +1,39 @@
+import type { AuditVerificationOptions } from '@acp/ledger';
+export declare function createReceipt(raw: string, anchor?: AuditVerificationOptions): {
+    version: number;
+    status: string;
+    message: string;
+    paymentNotice: string;
+    verification: {
+        valid: boolean;
+        status: "VALID" | "INVALID";
+        statusLabel: string;
+        trustAnchorVerified: boolean;
+        truncationChecked: boolean;
+    };
+    taskId: string | null;
+    who: string[];
+    what: string;
+    when: {
+        firstSignedAt: string | null;
+        lastSignedAt: string | null;
+        timeSource: string;
+        timezone: string;
+    };
+    usage: {
+        inputTokens: number | null;
+        outputTokens: number | null;
+        toolCalls: number | null;
+        elapsedMs: number | null;
+        source: string;
+    };
+    budget: {
+        inputTokens: number | null;
+        outputTokens: number | null;
+        toolCalls: number | null;
+        elapsedSeconds: number | null;
+    };
+    privacy: string;
+};
+export declare function receiptHtml(receipt: ReturnType<typeof createReceipt>): string;
+export declare function receiptCommand(args: string[]): void;

package/dist/cli/dist/receipt.js

@@ -0,0 +1,90 @@
+// SPDX-License-Identifier: Apache-2.0
+import { readFileSync, writeFileSync } from 'node:fs';
+import { parseJsonl, verifyAudit } from '../../packages/ledger/dist/index.js';
+const object = (v) => v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+const safeId = (v) => typeof v === 'string' && /^(?:task_[a-zA-Z0-9_-]{1,100}|did:key:z[1-9A-HJ-NP-Za-km-z]{20,100})$/.test(v) ? v : '[redacted]';
+const time = (v) => typeof v === 'string' && Number.isFinite(Date.parse(v)) ? new Date(v).toISOString() : null;
+const count = (v) => typeof v === 'number' && Number.isSafeInteger(v) && v >= 0 ? v : null;
+export function createReceipt(raw, anchor) {
+    let bundle;
+    let verification;
+    try {
+        bundle = parseJsonl(raw);
+        verification = verifyAudit(bundle, anchor);
+    }
+    catch {
+        verification = { valid: false, status: 'INVALID', statusLabel: 'INVALID', trustAnchorVerified: false, truncationChecked: false };
+    }
+    // Do not reflect verifier exception text or any payload from an invalid record.
+    const { reason: _reason, ...checked } = verification;
+    const entries = verification.valid ? bundle.entries : [];
+    const events = entries.map(e => e.body.eventType);
+    const required = ['PROPOSE', 'ACCEPT', 'START', 'DELIVER', 'VERIFY_ACCEPT', 'SETTLED'];
+    let position = -1;
+    const complete = required.every(event => { position = events.indexOf(event, position + 1); return position >= 0; }) && events.at(-1) === 'SETTLED';
+    // A locally reconstructed checkpoint cannot prove the log is the latest one.
+    const anchored = !!(anchor?.head || anchor?.expectedLastEntryHash || anchor?.trustAnchor?.head || anchor?.trustAnchor?.expectedLastEntryHash);
+    const status = !verification.valid ? 'INVALID' : !complete ? 'INCOMPLETE' : !anchored ? 'UNCONFIRMED' : 'COMPLETED';
+    const proposal = object(entries.find(e => e.body.eventType === 'PROPOSE')?.body.payload);
+    const manifest = object(object(proposal.proposal).payload);
+    const delivery = object(entries.find(e => e.body.eventType === 'DELIVER')?.body.payload);
+    const usage = object(object(delivery.usage).payload);
+    const budget = object(manifest.budget);
+    return {
+        version: 1, status,
+        message: status === 'COMPLETED' ? 'Completed. Both sides signed this record.' :
+            status === 'UNCONFIRMED' ? 'Settlement recorded; completeness unconfirmed without an independent audit head.' :
+                status === 'INCOMPLETE' ? 'Incomplete record; completion not established.' : 'Invalid record; completion not established.',
+        paymentNotice: 'SETTLED is not proof of payment. Sealbridge settlement records work, not money.',
+        verification: checked,
+        taskId: entries.length ? safeId(entries[0].body.taskId) : null,
+        who: entries.length ? bundle.checkpoint.actor.payload.actors.map(safeId) : [],
+        what: 'Task content redacted for privacy; inspect the original audit locally for details.',
+        when: { firstSignedAt: time(entries[0]?.actorSignature.signedAt), lastSignedAt: time(entries.at(-1)?.actorSignature.signedAt),
+            timeSource: 'Participant signing clocks; not an independent timestamp authority', timezone: 'UTC' },
+        usage: { inputTokens: count(usage.inputTokens), outputTokens: count(usage.outputTokens),
+            toolCalls: count(usage.toolCalls), elapsedMs: count(usage.wallTimeMs), source: 'Recorded delivery usage; null means unavailable' },
+        budget: { inputTokens: count(budget.maxInputTokens), outputTokens: count(budget.maxOutputTokens),
+            toolCalls: count(budget.maxToolInvocations), elapsedSeconds: count(budget.maxWallClockSeconds) },
+        privacy: 'Inputs, outputs, names, titles, descriptions, paths and arbitrary error text are omitted. Public DIDs remain for accountability.',
+    };
+}
+export function receiptHtml(receipt) {
+    const escape = (s) => s.replace(/[&<>"']/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
+    const value = (v) => escape(v === null ? 'Not recorded' : String(v));
+    const row = (label, v) => '<tr><th scope="row">' + escape(label) + '</th><td>' + value(v) + '</td></tr>';
+    return '<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width">' +
+        '<meta http-equiv="Content-Security-Policy" content="default-src \'none\'; style-src \'unsafe-inline\'">' +
+        '<title>Sealbridge receipt</title><style>body{font:16px system-ui;max-width:56rem;margin:3rem auto;padding:1rem;line-height:1.6}pre,td{white-space:pre-wrap;overflow-wrap:anywhere}table{width:100%;border-collapse:collapse}th,td{text-align:left;padding:.5rem;border-bottom:1px solid #ccc}th{width:12rem}details{margin-top:2rem}</style>' +
+        '<h1>Sealbridge receipt</h1><h2>' + escape(receipt.message) + '</h2><p>' + escape(receipt.paymentNotice) +
+        '</p><table><caption>Recorded task summary</caption>' + row('Job', receipt.taskId) +
+        row('Participants', receipt.who.join('\n') || null) + row('What', receipt.what) +
+        row('First signed (UTC)', receipt.when.firstSignedAt) + row('Last signed (UTC)', receipt.when.lastSignedAt) +
+        row('Input tokens used', receipt.usage.inputTokens) + row('Output tokens used', receipt.usage.outputTokens) +
+        row('Tool calls used', receipt.usage.toolCalls) + row('Elapsed milliseconds', receipt.usage.elapsedMs) +
+        row('Verification', receipt.verification.statusLabel) + '</table><p>' + escape(receipt.when.timeSource) +
+        '</p><p>' + escape(receipt.privacy) + '</p><details><summary>Technical details</summary><pre>' +
+        escape(JSON.stringify(receipt, null, 2)) + '</pre></details></html>\n';
+}
+export function receiptCommand(args) {
+    const input = args.shift();
+    if (!input || input.startsWith('--'))
+        throw new Error('Usage: sealbridge receipt <audit.jsonl> [--out <prefix>] [--trust-anchor <json>]');
+    const options = new Map();
+    for (let i = 0; i < args.length; i += 2) {
+        if (!['--out', '--trust-anchor'].includes(args[i]) || options.has(args[i]) || !args[i + 1] || args[i + 1].startsWith('--'))
+            throw new Error('INVALID_RECEIPT_OPTION');
+        options.set(args[i], args[i + 1]);
+    }
+    const anchor = options.has('--trust-anchor') ? JSON.parse(readFileSync(options.get('--trust-anchor'), 'utf8')) : undefined;
+    if (anchor !== undefined && (!anchor || typeof anchor !== 'object' || Array.isArray(anchor)))
+        throw new Error('INVALID_TRUST_ANCHOR');
+    const receipt = createReceipt(readFileSync(input, 'utf8'), anchor);
+    const prefix = options.get('--out') ?? input + '.receipt';
+    writeFileSync(prefix + '.json', JSON.stringify(receipt, null, 2) + '\n', { flag: 'wx', mode: 0o600 });
+    writeFileSync(prefix + '.html', receiptHtml(receipt), { flag: 'wx', mode: 0o600 });
+    console.log(JSON.stringify(receipt));
+    if (receipt.status === 'INVALID' || receipt.status === 'INCOMPLETE')
+        process.exitCode = 1;
+}
+//# sourceMappingURL=receipt.js.map

package/dist/cli/dist/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../src/receipt.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAGtD,MAAM,MAAM,GAAG,CAAC,CAAU,EAAuB,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7G,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,uEAAuE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;AAC3J,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxH,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpG,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAAiC;IAC1E,IAAI,MAA+B,CAAC;IACpC,IAAI,YAA4C,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,YAAY,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IACnI,CAAC;IACD,gFAAgF;IAChF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,YAAY,CAAC;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;IACvF,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;IACnJ,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,qBAAqB,IAAI,MAAM,EAAE,WAAW,EAAE,IAAI,IAAI,MAAM,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAC9I,MAAM,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;IACpH,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,MAAM;QAClB,OAAO,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;YAC7E,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,kFAAkF,CAAC,CAAC;gBAC/G,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,6CAA6C;QAC5H,aAAa,EAAE,iFAAiF;QAChG,YAAY,EAAE,OAAO;QACrB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9D,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAO,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9E,IAAI,EAAE,oFAAoF;QAC1F,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC;YAC3H,UAAU,EAAE,oEAAoE,EAAE,QAAQ,EAAE,KAAK,EAAE;QACrG,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC;YACrF,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,iDAAiD,EAAE;QACpI,MAAM,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC;YAC9F,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE;QAClG,OAAO,EAAE,kIAAkI;KAC5I,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,OAAyC;IACnE,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACxI,MAAM,KAAK,GAAG,CAAC,CAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,CAAyB,EAAE,EAAE,CAAC,sBAAsB,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;IACzI,OAAO,0GAA0G;QAC/G,yGAAyG;QACzG,8UAA8U;QAC9U,iCAAiC,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;QACxG,qDAAqD,GAAG,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC;QAClF,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;QAC/E,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;QAC3G,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAC3G,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QACtG,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;QACvG,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,wDAAwD;QAC9F,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,2BAA2B,CAAC;AAC3E,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAC1I,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACtK,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAE,EAAE,MAAM,CAAC,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;IACxJ,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtI,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,GAAG,UAAU,CAAC;IAC1D,aAAa,CAAC,MAAM,GAAG,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtG,aAAa,CAAC,MAAM,GAAG,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AAC5F,CAAC"}

package/dist/cli/dist/receive-hook.d.ts

@@ -0,0 +1,2 @@
+/** Only the local owner's command is shell code. Remote records travel on stdin. */
+export declare function createReceiveHook(command: string): (record: string) => void;

package/dist/cli/dist/receive-hook.js

@@ -0,0 +1,35 @@
+// SPDX-License-Identifier: Apache-2.0
+import { spawn } from 'node:child_process';
+/** Only the local owner's command is shell code. Remote records travel on stdin. */
+export function createReceiveHook(command) {
+    if (!command.trim())
+        throw new Error('Missing --on-receive');
+    return (record) => {
+        const warn = () => console.error('ACP_ON_RECEIVE_FAILED');
+        try {
+            const child = spawn(command, {
+                shell: true,
+                windowsHide: true,
+                stdio: ['pipe', 'ignore', 'ignore'],
+            });
+            let reported = false;
+            const failed = () => {
+                if (!reported) {
+                    reported = true;
+                    warn();
+                }
+            };
+            child.on('error', failed);
+            child.on('exit', (code) => { if (code !== 0)
+                failed(); });
+            child.stdin.on('error', failed);
+            child.stdin.end(record);
+            // A notification must not keep a --once worker alive until the hook exits.
+            child.unref();
+        }
+        catch {
+            warn();
+        }
+    };
+}
+//# sourceMappingURL=receive-hook.js.map

package/dist/cli/dist/receive-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receive-hook.js","sourceRoot":"","sources":["../src/receive-hook.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;gBAC3B,KAAK,EAAE,IAAI;gBACX,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAAC,QAAQ,GAAG,IAAI,CAAC;oBAAC,IAAI,EAAE,CAAC;gBAAC,CAAC;YAC7C,CAAC,CAAC;YACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,KAAK,CAAC,KAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,KAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,2EAA2E;YAC3E,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/examples/two-owner-demo/alice-policy.json

@@ -0,0 +1,4 @@
+{
+  "requiredGates": ["contract_acceptance", "external_side_effect", "budget_increase", "redelegation", "final_verification"],
+  "autoApprove": []
+}

package/dist/examples/two-owner-demo/bob-policy.json

@@ -0,0 +1,4 @@
+{
+  "requiredGates": ["contract_acceptance", "external_side_effect", "budget_increase", "redelegation", "final_verification"],
+  "autoApprove": []
+}