tenjin-cli 0.1.0-alpha.1 → 0.1.0-alpha.3

package/dist/{chunk-EZROUI5U.js → chunk-ESPNTPQ2.js}

@@ -3,29 +3,53 @@ import {
   CliError,
   configPath,
   external_exports
-} from "./chunk-YG2DO46P.js";
+} from "./chunk-OYMYCW7J.js";
 
 // src/lib/config.ts
 import { readFile } from "fs/promises";
 var atomicString = external_exports.string().regex(/^\d+$/, "expected an atomic USDC integer string");
+var PublishModeSchema = external_exports.enum(["review", "auto", "full-auto"]);
+function parsePublishModeFlag(value, flagName) {
+  const parsed = PublishModeSchema.safeParse(value);
+  if (parsed.success) return parsed.data;
+  throw new CliError("USAGE", `Invalid ${flagName} ${JSON.stringify(value)}`, {
+    fix: 'Use "review", "auto", or "full-auto".'
+  });
+}
+var PublishConfigSchema = external_exports.object({
+  mode: PublishModeSchema,
+  defaultPrice: atomicString
+});
 var ConfigSchema = external_exports.object({
   maxAutoSpend: atomicString,
   sessionBudget: atomicString,
   confirm: external_exports.union([external_exports.literal("always"), external_exports.string().regex(/^above:\d+$/)]),
   allowlistCreators: external_exports.array(external_exports.string()),
   baseUrl: external_exports.url(),
-  rpcUrl: external_exports.url()
+  rpcUrl: external_exports.url(),
+  /**
+   * Evaluation-cohort opt-in (spec 09 §3): when true, lookup sends
+   * X-Tenjin-Eval-Cohort: 1 and the server stores the generalized question for
+   * 90 days. Off by default; no query text is retained server-side without it.
+   */
+  evalCohort: external_exports.boolean(),
+  publish: PublishConfigSchema
 });
-var RawConfigSchema = ConfigSchema.partial();
+var RawConfigSchema = ConfigSchema.partial().extend({ publish: PublishConfigSchema.partial().passthrough().optional() }).passthrough();
 var CONFIG_DEFAULTS = {
   maxAutoSpend: "0",
   sessionBudget: "0",
   confirm: "always",
   allowlistCreators: [],
   baseUrl: "https://tenjin.blog",
-  rpcUrl: "https://mainnet.base.org"
+  rpcUrl: "https://mainnet.base.org",
+  evalCohort: false,
+  publish: { mode: "review", defaultPrice: "100000" }
 };
-var CONFIG_KEYS = Object.keys(CONFIG_DEFAULTS);
+var CONFIG_KEYS = Object.keys(CONFIG_DEFAULTS).filter(
+  (key) => key !== "publish"
+);
+var PUBLISH_CONFIG_KEYS = ["publish.mode", "publish.defaultPrice"];
 async function loadRawConfig(dir) {
   const path = configPath(dir);
   let raw;
@@ -57,16 +81,58 @@ async function loadRawConfig(dir) {
   return parsed.data;
 }
 function resolveSettings(input) {
-  const { config, flags, env } = input;
+  const { config, flags, env, project } = input;
   return {
     maxAutoSpend: fileOrDefault("maxAutoSpend", config),
     sessionBudget: fileOrDefault("sessionBudget", config),
     confirm: fileOrDefault("confirm", config),
     allowlistCreators: fileOrDefault("allowlistCreators", config),
     baseUrl: resolveBaseUrl(config, flags, env),
-    rpcUrl: fileOrDefault("rpcUrl", config)
+    rpcUrl: fileOrDefault("rpcUrl", config),
+    evalCohort: fileOrDefault("evalCohort", config),
+    publishMode: resolvePublishMode({ config, project, env }),
+    publishDefaultPrice: resolvePublishDefaultPrice({ config, project })
   };
 }
+var FULL_AUTO_DOWNGRADE_WARNING = 'Ignoring publish.mode "full-auto" from a committed .tenjin.json (cloning a repo must not enable auto-publish); using "auto". Add .tenjin.json to .gitignore to opt in.';
+function coercePublishMode(raw) {
+  if (raw === void 0 || raw.length === 0) return void 0;
+  const parsed = PublishModeSchema.safeParse(raw);
+  return parsed.success ? parsed.data : void 0;
+}
+function resolvePublishMode(input) {
+  const { config, project, env, flag } = input;
+  let winner = { value: CONFIG_DEFAULTS.publish.mode, source: "default" };
+  const fromFile = config.publish?.mode;
+  if (fromFile !== void 0) winner = { value: fromFile, source: "file" };
+  if (project !== void 0 && project.publish?.mode !== void 0) {
+    const fromProject = project.publish.mode;
+    if (fromProject === "full-auto" && !project.gitignored) {
+      winner = { value: "auto", source: "project", downgradedWarning: FULL_AUTO_DOWNGRADE_WARNING };
+    } else {
+      winner = { value: fromProject, source: "project" };
+    }
+  }
+  const fromEnv = coercePublishMode(env.TENJIN_PUBLISH_MODE);
+  if (fromEnv !== void 0) winner = { value: fromEnv, source: "env" };
+  const fromFlag = coercePublishMode(flag);
+  if (fromFlag !== void 0) winner = { value: fromFlag, source: "flag" };
+  return winner;
+}
+function resolvePublishDefaultPrice(input) {
+  const { config, project } = input;
+  let result = {
+    value: CONFIG_DEFAULTS.publish.defaultPrice,
+    source: "default"
+  };
+  if (config.publish?.defaultPrice !== void 0) {
+    result = { value: config.publish.defaultPrice, source: "file" };
+  }
+  if (project?.publish?.defaultPrice !== void 0) {
+    result = { value: project.publish.defaultPrice, source: "project" };
+  }
+  return result;
+}
 function fileOrDefault(key, config) {
   const fromFile = config[key];
   if (fromFile !== void 0) return { value: fromFile, source: "file" };
@@ -125,11 +191,17 @@ function toMoney(atomic) {
 }
 
 export {
+  PublishModeSchema,
+  parsePublishModeFlag,
   RawConfigSchema,
+  CONFIG_DEFAULTS,
   CONFIG_KEYS,
+  PUBLISH_CONFIG_KEYS,
   loadRawConfig,
   resolveSettings,
+  resolvePublishMode,
+  resolvePublishDefaultPrice,
   parseUsdToAtomic,
   toMoney
 };
-//# sourceMappingURL=chunk-EZROUI5U.js.map
+//# sourceMappingURL=chunk-ESPNTPQ2.js.map

package/dist/chunk-ESPNTPQ2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/config.ts","../src/lib/money.ts"],"sourcesContent":["import { readFile } from 'node:fs/promises';\nimport { z } from 'zod';\nimport { CliError } from './errors';\nimport { configPath } from './paths';\nimport { writeFileAtomic } from './atomic-json';\n\n/** A non-negative integer string in USDC atomic units (6-decimal base). */\nconst atomicString = z.string().regex(/^\\d+$/, 'expected an atomic USDC integer string');\n\n/** The publish consent mode (B3, D38). `full-auto` is loosening-gated, below. */\nexport const PublishModeSchema = z.enum(['review', 'auto', 'full-auto']);\nexport type PublishMode = z.infer<typeof PublishModeSchema>;\n\n/**\n * Validate a publish-mode value at a command edge (`--mode`, `--publish-mode`):\n * an unrecognized value is USAGE (exit 2), never silently dropped. `flagName` is\n * woven into the message so the failing flag is named.\n */\nexport function parsePublishModeFlag(value: string, flagName: string): PublishMode {\n  const parsed = PublishModeSchema.safeParse(value);\n  if (parsed.success) return parsed.data;\n  throw new CliError('USAGE', `Invalid ${flagName} ${JSON.stringify(value)}`, {\n    fix: 'Use \"review\", \"auto\", or \"full-auto\".',\n  });\n}\n\n/**\n * The publish block (B3): `mode` governs the confirm cascade a `publish` runs,\n * `defaultPrice` is the atomic USDC price a card is published at when no\n * per-publish price is given. Stored atomic like the spend keys.\n */\nconst PublishConfigSchema = z.object({\n  mode: PublishModeSchema,\n  defaultPrice: atomicString,\n});\n\n/**\n * The persisted config shape. Spend keys are stored atomic (accepted as decimal\n * USD at the command edge, see lib/money); `confirm` is the stored form\n * \"always\" | \"above:<atomic>\". These are client-enforced guardrails, not a\n * security boundary — any process that runs the CLI can also edit this file.\n */\nexport const ConfigSchema = z.object({\n  maxAutoSpend: atomicString,\n  sessionBudget: atomicString,\n  confirm: z.union([z.literal('always'), z.string().regex(/^above:\\d+$/)]),\n  allowlistCreators: z.array(z.string()),\n  baseUrl: z.url(),\n  rpcUrl: z.url(),\n  /**\n   * Evaluation-cohort opt-in (spec 09 §3): when true, lookup sends\n   * X-Tenjin-Eval-Cohort: 1 and the server stores the generalized question for\n   * 90 days. Off by default; no query text is retained server-side without it.\n   */\n  evalCohort: z.boolean(),\n  publish: PublishConfigSchema,\n});\nexport type Config = z.infer<typeof ConfigSchema>;\n\n/**\n * Values as they may appear in config.json — every known key optional; absent =\n * default. `.passthrough()` PRESERVES unknown keys through load + persist: without\n * it an older binary's `config set` would strip (and re-serialize away) any newer\n * block a later CLI wrote, e.g. B3's `publish.*`. Known keys are still validated;\n * unknown keys ride along untouched.\n */\nexport const RawConfigSchema = ConfigSchema.partial()\n  // The publish block is itself partial + passthrough: `config set publish.mode`\n  // writes only the one subkey, and a subkey a newer CLI adds (e.g. publish.*\n  // beyond mode/defaultPrice) survives an older binary's set, same reason the\n  // outer object passes unknown keys through.\n  .extend({ publish: PublishConfigSchema.partial().passthrough().optional() })\n  .passthrough();\nexport type PartialConfig = z.infer<typeof RawConfigSchema>;\n\nexport const CONFIG_DEFAULTS: Config = {\n  maxAutoSpend: '0',\n  sessionBudget: '0',\n  confirm: 'always',\n  allowlistCreators: [],\n  baseUrl: 'https://tenjin.blog',\n  rpcUrl: 'https://mainnet.base.org',\n  evalCohort: false,\n  publish: { mode: 'review', defaultPrice: '100000' },\n};\n\n/**\n * Scalar keys `config get/set/list` render one line each. `publish` is excluded:\n * it is a nested block addressed by the dotted `publish.mode`/`publish.defaultPrice`\n * keys (see PUBLISH_CONFIG_KEYS), so it is never rendered as a bare scalar.\n */\nexport type ScalarConfigKey = Exclude<keyof Config, 'publish'>;\nexport const CONFIG_KEYS = (Object.keys(CONFIG_DEFAULTS) as Array<keyof Config>).filter(\n  (key): key is ScalarConfigKey => key !== 'publish',\n);\n\n/** The dotted keys `config get/set` accept for the nested publish block. */\nexport const PUBLISH_CONFIG_KEYS = ['publish.mode', 'publish.defaultPrice'] as const;\nexport type PublishConfigKey = (typeof PUBLISH_CONFIG_KEYS)[number];\n\n/**\n * Read and validate config.json WITHOUT applying defaults, so provenance can\n * distinguish \"present in file\" from \"absent\". Missing file is fine (returns\n * {}); malformed JSON or a failed schema is CONFIG_INVALID with a fix.\n */\nexport async function loadRawConfig(dir: string): Promise<PartialConfig> {\n  const path = configPath(dir);\n  let raw: string;\n  try {\n    raw = await readFile(path, 'utf8');\n  } catch (err) {\n    if (isNotFound(err)) return {};\n    throw new CliError('CONFIG_INVALID', `Could not read config at ${path}`, {\n      fix: `Check file permissions on ${path}.`,\n      cause: err,\n    });\n  }\n  let json: unknown;\n  try {\n    json = JSON.parse(raw);\n  } catch (err) {\n    throw new CliError('CONFIG_INVALID', `Config at ${path} is not valid JSON`, {\n      fix: `Fix the JSON syntax in ${path}, or delete it to restore defaults.`,\n      cause: err,\n    });\n  }\n  const parsed = RawConfigSchema.safeParse(json);\n  if (!parsed.success) {\n    throw new CliError('CONFIG_INVALID', `Config at ${path} is invalid`, {\n      fix: `Correct the reported keys in ${path}, or delete it to restore defaults.`,\n      details: parsed.error.issues,\n    });\n  }\n  return parsed.data;\n}\n\n/** File values merged over defaults — the effective persisted config. The nested\n *  publish block is merged per-subkey so a file that sets only publish.mode keeps\n *  the default defaultPrice (a shallow spread would drop it). */\nexport async function loadConfig(dir: string): Promise<Config> {\n  const raw = await loadRawConfig(dir);\n  return {\n    ...CONFIG_DEFAULTS,\n    ...raw,\n    publish: {\n      mode: raw.publish?.mode ?? CONFIG_DEFAULTS.publish.mode,\n      defaultPrice: raw.publish?.defaultPrice ?? CONFIG_DEFAULTS.publish.defaultPrice,\n    },\n  };\n}\n\nexport type Provenance = 'default' | 'file' | 'project' | 'env' | 'flag';\n\nexport interface ResolvedSetting<T> {\n  value: T;\n  source: Provenance;\n}\n\n/**\n * The per-project `.tenjin.json` layer (B3, D38): publish overrides discovered by\n * walking up from cwd, plus whether that file is gitignored. `gitignored` gates\n * `full-auto` — a committed file requesting it is downgraded (loosening gate).\n */\nexport interface ProjectPublishLayer {\n  publish?: { mode?: PublishMode; defaultPrice?: string };\n  gitignored: boolean;\n}\n\n/** publish.mode resolution: value, source, and the downgrade warning (if any). */\nexport interface PublishModeResolution {\n  value: PublishMode;\n  source: Provenance;\n  /** Set when a committed `.tenjin.json`'s `full-auto` was downgraded to `auto`. */\n  downgradedWarning?: string;\n}\n\n/** Effective value + where it came from, per key. What `config` (bare) renders. */\nexport interface EffectiveSettings {\n  maxAutoSpend: ResolvedSetting<string>;\n  sessionBudget: ResolvedSetting<string>;\n  confirm: ResolvedSetting<string>;\n  allowlistCreators: ResolvedSetting<string[]>;\n  baseUrl: ResolvedSetting<string>;\n  rpcUrl: ResolvedSetting<string>;\n  evalCohort: ResolvedSetting<boolean>;\n  publishMode: PublishModeResolution;\n  publishDefaultPrice: ResolvedSetting<string>;\n}\n\n/** CLI flags that participate in settings precedence (`--base-url`). */\nexport interface SettingsFlags {\n  baseUrl?: string;\n}\n\nexport interface ResolveSettingsInput {\n  /** Raw file values (present keys only) — from loadRawConfig, not loadConfig. */\n  config: PartialConfig;\n  flags: SettingsFlags;\n  env: NodeJS.ProcessEnv;\n  /** The nearest `.tenjin.json` layer, when one was found (see publish-settings). */\n  project?: ProjectPublishLayer;\n}\n\n/**\n * Apply precedence flag > env > file > default per key, returning each effective\n * value with its source. In B1 only baseUrl has flag/env overrides\n * (`--base-url`, TENJIN_BASE_URL); the rest resolve file-or-default. B3 adds the\n * publish keys, which additionally fold in the per-project `.tenjin.json` layer.\n */\nexport function resolveSettings(input: ResolveSettingsInput): EffectiveSettings {\n  const { config, flags, env, project } = input;\n  return {\n    maxAutoSpend: fileOrDefault('maxAutoSpend', config),\n    sessionBudget: fileOrDefault('sessionBudget', config),\n    confirm: fileOrDefault('confirm', config),\n    allowlistCreators: fileOrDefault('allowlistCreators', config),\n    baseUrl: resolveBaseUrl(config, flags, env),\n    rpcUrl: fileOrDefault('rpcUrl', config),\n    evalCohort: fileOrDefault('evalCohort', config),\n    publishMode: resolvePublishMode({ config, project, env }),\n    publishDefaultPrice: resolvePublishDefaultPrice({ config, project }),\n  };\n}\n\n/**\n * The loosening gate (D38): a committed (not-gitignored) `.tenjin.json` requesting\n * `full-auto` is downgraded to `auto`, never silently honored — cloning a repo\n * must not enable auto-publish. `full-auto` from global config / env / flag (all\n * inherently local, not cloned) is always honored.\n */\nconst FULL_AUTO_DOWNGRADE_WARNING =\n  'Ignoring publish.mode \"full-auto\" from a committed .tenjin.json (cloning a repo must not enable auto-publish); using \"auto\". Add .tenjin.json to .gitignore to opt in.';\n\nfunction coercePublishMode(raw: string | undefined): PublishMode | undefined {\n  if (raw === undefined || raw.length === 0) return undefined;\n  const parsed = PublishModeSchema.safeParse(raw);\n  return parsed.success ? parsed.data : undefined;\n}\n\n/**\n * Resolve publish.mode through global file < project `.tenjin.json` < env\n * (TENJIN_PUBLISH_MODE) < flag (`--mode`). Total: an invalid env/flag value is\n * ignored (validation lives at the command edge, like baseUrl). The project\n * layer's `full-auto` is gated on that file being gitignored.\n */\nexport function resolvePublishMode(input: {\n  config: PartialConfig;\n  project?: ProjectPublishLayer;\n  env: NodeJS.ProcessEnv;\n  flag?: string;\n}): PublishModeResolution {\n  const { config, project, env, flag } = input;\n  let winner: PublishModeResolution = { value: CONFIG_DEFAULTS.publish.mode, source: 'default' };\n\n  const fromFile = config.publish?.mode;\n  if (fromFile !== undefined) winner = { value: fromFile, source: 'file' };\n\n  if (project !== undefined && project.publish?.mode !== undefined) {\n    const fromProject = project.publish.mode;\n    if (fromProject === 'full-auto' && !project.gitignored) {\n      winner = { value: 'auto', source: 'project', downgradedWarning: FULL_AUTO_DOWNGRADE_WARNING };\n    } else {\n      winner = { value: fromProject, source: 'project' };\n    }\n  }\n\n  const fromEnv = coercePublishMode(env.TENJIN_PUBLISH_MODE);\n  if (fromEnv !== undefined) winner = { value: fromEnv, source: 'env' };\n\n  const fromFlag = coercePublishMode(flag);\n  if (fromFlag !== undefined) winner = { value: fromFlag, source: 'flag' };\n\n  return winner;\n}\n\n/** Resolve publish.defaultPrice (atomic) through global file < project < default. */\nexport function resolvePublishDefaultPrice(input: {\n  config: PartialConfig;\n  project?: ProjectPublishLayer;\n}): ResolvedSetting<string> {\n  const { config, project } = input;\n  let result: ResolvedSetting<string> = {\n    value: CONFIG_DEFAULTS.publish.defaultPrice,\n    source: 'default',\n  };\n  if (config.publish?.defaultPrice !== undefined) {\n    result = { value: config.publish.defaultPrice, source: 'file' };\n  }\n  if (project?.publish?.defaultPrice !== undefined) {\n    result = { value: project.publish.defaultPrice, source: 'project' };\n  }\n  return result;\n}\n\n/** Persist a full, validated config via the atomic writer (0700 dir, 0644 file). */\nexport async function writeConfig(dir: string, config: Config): Promise<void> {\n  const validated = ConfigSchema.parse(config);\n  await writeFileAtomic(configPath(dir), `${JSON.stringify(validated, null, 2)}\\n`, {\n    mode: 0o644,\n    dirMode: 0o700,\n  });\n}\n\nfunction fileOrDefault<K extends keyof Config>(\n  key: K,\n  config: PartialConfig,\n): ResolvedSetting<Config[K]> {\n  const fromFile = config[key];\n  // PartialConfig[K] is Config[K] | undefined; narrowing an indexed access of a\n  // type parameter doesn't refine K, so assert the excluded-undefined type.\n  if (fromFile !== undefined) return { value: fromFile as Config[K], source: 'file' };\n  return { value: CONFIG_DEFAULTS[key], source: 'default' };\n}\n\nfunction resolveBaseUrl(\n  config: PartialConfig,\n  flags: SettingsFlags,\n  env: NodeJS.ProcessEnv,\n): ResolvedSetting<string> {\n  if (flags.baseUrl !== undefined && flags.baseUrl.length > 0) {\n    return { value: flags.baseUrl, source: 'flag' };\n  }\n  const fromEnv = env.TENJIN_BASE_URL;\n  if (fromEnv !== undefined && fromEnv.length > 0) {\n    return { value: fromEnv, source: 'env' };\n  }\n  if (config.baseUrl !== undefined) return { value: config.baseUrl, source: 'file' };\n  return { value: CONFIG_DEFAULTS.baseUrl, source: 'default' };\n}\n\nfunction isNotFound(err: unknown): boolean {\n  return (\n    typeof err === 'object' &&\n    err !== null &&\n    'code' in err &&\n    (err as { code?: unknown }).code === 'ENOENT'\n  );\n}\n","import { CliError } from './errors';\nimport type { Money } from '../schemas';\n\n/** USDC is a 6-decimal token; one dollar is 1_000_000 atomic units. */\nconst USDC_DECIMALS = 6;\n\n/**\n * Decimal USD at the CLI edge -> atomic USDC string (O1). Accepts \"0\", \"0.25\",\n * \"5\"; rejects negatives, non-numeric input, and more than 6 decimal places as\n * USAGE so a fat-fingered amount fails loudly instead of truncating money.\n * String math throughout — a float would lose precision at the 6th decimal.\n */\nexport function parseUsdToAtomic(input: string): string {\n  const trimmed = input.trim();\n  if (!/^\\d+(\\.\\d+)?$/.test(trimmed)) {\n    throw new CliError('USAGE', `Invalid USD amount: ${JSON.stringify(input)}`, {\n      fix: 'Pass a non-negative decimal like 0.25 or 5.',\n    });\n  }\n  const [whole, frac = ''] = trimmed.split('.');\n  if (frac.length > USDC_DECIMALS) {\n    throw new CliError(\n      'USAGE',\n      `USD amount ${JSON.stringify(input)} has more than 6 decimal places`,\n      {\n        fix: 'USDC supports at most 6 decimal places (micro-dollars).',\n      },\n    );\n  }\n  const atomic = BigInt(`${whole}${frac.padEnd(USDC_DECIMALS, '0')}`);\n  return atomic.toString();\n}\n\n/**\n * Atomic USDC string -> decimal USD string, trailing zeros trimmed (\"250000\" ->\n * \"0.25\", \"5000000\" -> \"5\", \"0\" -> \"0\"). Throws INTERNAL on a malformed atomic\n * value: atomic strings come from validated config or on-chain reads, so a bad\n * one is a bug, not user input.\n */\nexport function atomicToUsd(atomic: string): string {\n  const trimmed = atomic.trim();\n  if (!/^\\d+$/.test(trimmed)) {\n    throw new CliError('INTERNAL', `Malformed atomic amount: ${JSON.stringify(atomic)}`);\n  }\n  const value = BigInt(trimmed);\n  const base = 10n ** BigInt(USDC_DECIMALS);\n  const whole = value / base;\n  const frac = (value % base).toString().padStart(USDC_DECIMALS, '0').replace(/0+$/, '');\n  return frac.length > 0 ? `${whole}.${frac}` : whole.toString();\n}\n\n/** Dual-form money object for machine output. */\nexport function toMoney(atomic: string): Money {\n  return { atomic, usd: atomicToUsd(atomic) };\n}\n\n/**\n * Canonical USD for human COPY (a price a person reads): always at least two\n * decimals (\"0.10\", \"5.00\"), keeping any finer precision below a cent\n * (\"0.000001\"). Distinct from `atomicToUsd`, which trims to the shortest exact\n * form for machine output; use this only where a dollar amount is shown to a human.\n */\nexport function formatUsdDisplay(atomic: string): string {\n  const [whole, frac = ''] = atomicToUsd(atomic).split('.');\n  return `${whole}.${frac.padEnd(2, '0')}`;\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,gBAAgB;AAOzB,IAAM,eAAe,iBAAE,OAAO,EAAE,MAAM,SAAS,wCAAwC;AAGhF,IAAM,oBAAoB,iBAAE,KAAK,CAAC,UAAU,QAAQ,WAAW,CAAC;AAQhE,SAAS,qBAAqB,OAAe,UAA+B;AACjF,QAAM,SAAS,kBAAkB,UAAU,KAAK;AAChD,MAAI,OAAO,QAAS,QAAO,OAAO;AAClC,QAAM,IAAI,SAAS,SAAS,WAAW,QAAQ,IAAI,KAAK,UAAU,KAAK,CAAC,IAAI;AAAA,IAC1E,KAAK;AAAA,EACP,CAAC;AACH;AAOA,IAAM,sBAAsB,iBAAE,OAAO;AAAA,EACnC,MAAM;AAAA,EACN,cAAc;AAChB,CAAC;AAQM,IAAM,eAAe,iBAAE,OAAO;AAAA,EACnC,cAAc;AAAA,EACd,eAAe;AAAA,EACf,SAAS,iBAAE,MAAM,CAAC,iBAAE,QAAQ,QAAQ,GAAG,iBAAE,OAAO,EAAE,MAAM,aAAa,CAAC,CAAC;AAAA,EACvE,mBAAmB,iBAAE,MAAM,iBAAE,OAAO,CAAC;AAAA,EACrC,SAAS,iBAAE,IAAI;AAAA,EACf,QAAQ,iBAAE,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMd,YAAY,iBAAE,QAAQ;AAAA,EACtB,SAAS;AACX,CAAC;AAUM,IAAM,kBAAkB,aAAa,QAAQ,EAKjD,OAAO,EAAE,SAAS,oBAAoB,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAC1E,YAAY;AAGR,IAAM,kBAA0B;AAAA,EACrC,cAAc;AAAA,EACd,eAAe;AAAA,EACf,SAAS;AAAA,EACT,mBAAmB,CAAC;AAAA,EACpB,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,SAAS,EAAE,MAAM,UAAU,cAAc,SAAS;AACpD;AAQO,IAAM,cAAe,OAAO,KAAK,eAAe,EAA0B;AAAA,EAC/E,CAAC,QAAgC,QAAQ;AAC3C;AAGO,IAAM,sBAAsB,CAAC,gBAAgB,sBAAsB;AAQ1E,eAAsB,cAAc,KAAqC;AACvE,QAAM,OAAO,WAAW,GAAG;AAC3B,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,SAAS,MAAM,MAAM;AAAA,EACnC,SAAS,KAAK;AACZ,QAAI,WAAW,GAAG,EAAG,QAAO,CAAC;AAC7B,UAAM,IAAI,SAAS,kBAAkB,4BAA4B,IAAI,IAAI;AAAA,MACvE,KAAK,6BAA6B,IAAI;AAAA,MACtC,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,SAAS,KAAK;AACZ,UAAM,IAAI,SAAS,kBAAkB,aAAa,IAAI,sBAAsB;AAAA,MAC1E,KAAK,0BAA0B,IAAI;AAAA,MACnC,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,QAAM,SAAS,gBAAgB,UAAU,IAAI;AAC7C,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,SAAS,kBAAkB,aAAa,IAAI,eAAe;AAAA,MACnE,KAAK,gCAAgC,IAAI;AAAA,MACzC,SAAS,OAAO,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AACA,SAAO,OAAO;AAChB;AA2EO,SAAS,gBAAgB,OAAgD;AAC9E,QAAM,EAAE,QAAQ,OAAO,KAAK,QAAQ,IAAI;AACxC,SAAO;AAAA,IACL,cAAc,cAAc,gBAAgB,MAAM;AAAA,IAClD,eAAe,cAAc,iBAAiB,MAAM;AAAA,IACpD,SAAS,cAAc,WAAW,MAAM;AAAA,IACxC,mBAAmB,cAAc,qBAAqB,MAAM;AAAA,IAC5D,SAAS,eAAe,QAAQ,OAAO,GAAG;AAAA,IAC1C,QAAQ,cAAc,UAAU,MAAM;AAAA,IACtC,YAAY,cAAc,cAAc,MAAM;AAAA,IAC9C,aAAa,mBAAmB,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,IACxD,qBAAqB,2BAA2B,EAAE,QAAQ,QAAQ,CAAC;AAAA,EACrE;AACF;AAQA,IAAM,8BACJ;AAEF,SAAS,kBAAkB,KAAkD;AAC3E,MAAI,QAAQ,UAAa,IAAI,WAAW,EAAG,QAAO;AAClD,QAAM,SAAS,kBAAkB,UAAU,GAAG;AAC9C,SAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAQO,SAAS,mBAAmB,OAKT;AACxB,QAAM,EAAE,QAAQ,SAAS,KAAK,KAAK,IAAI;AACvC,MAAI,SAAgC,EAAE,OAAO,gBAAgB,QAAQ,MAAM,QAAQ,UAAU;AAE7F,QAAM,WAAW,OAAO,SAAS;AACjC,MAAI,aAAa,OAAW,UAAS,EAAE,OAAO,UAAU,QAAQ,OAAO;AAEvE,MAAI,YAAY,UAAa,QAAQ,SAAS,SAAS,QAAW;AAChE,UAAM,cAAc,QAAQ,QAAQ;AACpC,QAAI,gBAAgB,eAAe,CAAC,QAAQ,YAAY;AACtD,eAAS,EAAE,OAAO,QAAQ,QAAQ,WAAW,mBAAmB,4BAA4B;AAAA,IAC9F,OAAO;AACL,eAAS,EAAE,OAAO,aAAa,QAAQ,UAAU;AAAA,IACnD;AAAA,EACF;AAEA,QAAM,UAAU,kBAAkB,IAAI,mBAAmB;AACzD,MAAI,YAAY,OAAW,UAAS,EAAE,OAAO,SAAS,QAAQ,MAAM;AAEpE,QAAM,WAAW,kBAAkB,IAAI;AACvC,MAAI,aAAa,OAAW,UAAS,EAAE,OAAO,UAAU,QAAQ,OAAO;AAEvE,SAAO;AACT;AAGO,SAAS,2BAA2B,OAGf;AAC1B,QAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,MAAI,SAAkC;AAAA,IACpC,OAAO,gBAAgB,QAAQ;AAAA,IAC/B,QAAQ;AAAA,EACV;AACA,MAAI,OAAO,SAAS,iBAAiB,QAAW;AAC9C,aAAS,EAAE,OAAO,OAAO,QAAQ,cAAc,QAAQ,OAAO;AAAA,EAChE;AACA,MAAI,SAAS,SAAS,iBAAiB,QAAW;AAChD,aAAS,EAAE,OAAO,QAAQ,QAAQ,cAAc,QAAQ,UAAU;AAAA,EACpE;AACA,SAAO;AACT;AAWA,SAAS,cACP,KACA,QAC4B;AAC5B,QAAM,WAAW,OAAO,GAAG;AAG3B,MAAI,aAAa,OAAW,QAAO,EAAE,OAAO,UAAuB,QAAQ,OAAO;AAClF,SAAO,EAAE,OAAO,gBAAgB,GAAG,GAAG,QAAQ,UAAU;AAC1D;AAEA,SAAS,eACP,QACA,OACA,KACyB;AACzB,MAAI,MAAM,YAAY,UAAa,MAAM,QAAQ,SAAS,GAAG;AAC3D,WAAO,EAAE,OAAO,MAAM,SAAS,QAAQ,OAAO;AAAA,EAChD;AACA,QAAM,UAAU,IAAI;AACpB,MAAI,YAAY,UAAa,QAAQ,SAAS,GAAG;AAC/C,WAAO,EAAE,OAAO,SAAS,QAAQ,MAAM;AAAA,EACzC;AACA,MAAI,OAAO,YAAY,OAAW,QAAO,EAAE,OAAO,OAAO,SAAS,QAAQ,OAAO;AACjF,SAAO,EAAE,OAAO,gBAAgB,SAAS,QAAQ,UAAU;AAC7D;AAEA,SAAS,WAAW,KAAuB;AACzC,SACE,OAAO,QAAQ,YACf,QAAQ,QACR,UAAU,OACT,IAA2B,SAAS;AAEzC;;;AC7UA,IAAM,gBAAgB;AAQf,SAAS,iBAAiB,OAAuB;AACtD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,gBAAgB,KAAK,OAAO,GAAG;AAClC,UAAM,IAAI,SAAS,SAAS,uBAAuB,KAAK,UAAU,KAAK,CAAC,IAAI;AAAA,MAC1E,KAAK;AAAA,IACP,CAAC;AAAA,EACH;AACA,QAAM,CAAC,OAAO,OAAO,EAAE,IAAI,QAAQ,MAAM,GAAG;AAC5C,MAAI,KAAK,SAAS,eAAe;AAC/B,UAAM,IAAI;AAAA,MACR;AAAA,MACA,cAAc,KAAK,UAAU,KAAK,CAAC;AAAA,MACnC;AAAA,QACE,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,OAAO,GAAG,KAAK,GAAG,KAAK,OAAO,eAAe,GAAG,CAAC,EAAE;AAClE,SAAO,OAAO,SAAS;AACzB;AAQO,SAAS,YAAY,QAAwB;AAClD,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,CAAC,QAAQ,KAAK,OAAO,GAAG;AAC1B,UAAM,IAAI,SAAS,YAAY,4BAA4B,KAAK,UAAU,MAAM,CAAC,EAAE;AAAA,EACrF;AACA,QAAM,QAAQ,OAAO,OAAO;AAC5B,QAAM,OAAO,OAAO,OAAO,aAAa;AACxC,QAAM,QAAQ,QAAQ;AACtB,QAAM,QAAQ,QAAQ,MAAM,SAAS,EAAE,SAAS,eAAe,GAAG,EAAE,QAAQ,OAAO,EAAE;AACrF,SAAO,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,MAAM,SAAS;AAC/D;AAGO,SAAS,QAAQ,QAAuB;AAC7C,SAAO,EAAE,QAAQ,KAAK,YAAY,MAAM,EAAE;AAC5C;","names":[]}

package/dist/chunk-FJPLRISB.js

@@ -0,0 +1,79 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+
+// package.json
+var package_default = {
+  name: "tenjin-cli",
+  version: "0.1.0-alpha.3",
+  type: "module",
+  description: "Tenjin agent CLI for the x402 knowledge marketplace.",
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/BackTrackCo/tenjin-agent.git"
+  },
+  homepage: "https://tenjin.blog/agents",
+  bugs: "https://github.com/BackTrackCo/tenjin-agent/issues",
+  keywords: [
+    "x402",
+    "usdc",
+    "base",
+    "ai-agents",
+    "agent-payments",
+    "mcp",
+    "knowledge-marketplace",
+    "micropayments",
+    "claude",
+    "codex",
+    "cli"
+  ],
+  bin: {
+    tenjin: "dist/index.js"
+  },
+  engines: {
+    node: ">=22"
+  },
+  files: [
+    "dist",
+    "skills",
+    "NOTICE.md"
+  ],
+  packageManager: "pnpm@11.11.0",
+  scripts: {
+    build: "tsup",
+    test: "vitest run",
+    typecheck: "tsc --noEmit",
+    lint: "eslint .",
+    format: "prettier --write .",
+    "format:check": "prettier --check .",
+    check: "pnpm run build && pnpm run test",
+    "sync:skill": "node scripts/sync-skill.mjs",
+    "pack-smoke": "bash scripts/pack-smoke.sh",
+    changeset: "changeset",
+    prepublishOnly: "pnpm run build",
+    prepare: "git config core.hooksPath .githooks || true"
+  },
+  devDependencies: {
+    "@changesets/cli": "^2.31.1",
+    "@eslint/js": "^9",
+    "@types/node": "^25",
+    "@x402/core": "2.17.0",
+    "@x402/evm": "2.17.0",
+    "@x402/extensions": "2.17.0",
+    commander: "^14.0.1",
+    eslint: "^9",
+    "eslint-config-prettier": "^10",
+    ox: "0.14.30",
+    prettier: "^3",
+    tsup: "^8.5.0",
+    typescript: "^6",
+    "typescript-eslint": "^8",
+    viem: "^2.53.1",
+    vitest: "^4.1.9",
+    zod: "^4.4.3"
+  }
+};
+
+export {
+  package_default
+};
+//# sourceMappingURL=chunk-FJPLRISB.js.map

package/dist/chunk-FJPLRISB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../package.json"],"sourcesContent":["{\n  \"name\": \"tenjin-cli\",\n  \"version\": \"0.1.0-alpha.3\",\n  \"type\": \"module\",\n  \"description\": \"Tenjin agent CLI for the x402 knowledge marketplace.\",\n  \"license\": \"MIT\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/BackTrackCo/tenjin-agent.git\"\n  },\n  \"homepage\": \"https://tenjin.blog/agents\",\n  \"bugs\": \"https://github.com/BackTrackCo/tenjin-agent/issues\",\n  \"keywords\": [\n    \"x402\",\n    \"usdc\",\n    \"base\",\n    \"ai-agents\",\n    \"agent-payments\",\n    \"mcp\",\n    \"knowledge-marketplace\",\n    \"micropayments\",\n    \"claude\",\n    \"codex\",\n    \"cli\"\n  ],\n  \"bin\": {\n    \"tenjin\": \"dist/index.js\"\n  },\n  \"engines\": {\n    \"node\": \">=22\"\n  },\n  \"files\": [\n    \"dist\",\n    \"skills\",\n    \"NOTICE.md\"\n  ],\n  \"packageManager\": \"pnpm@11.11.0\",\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"test\": \"vitest run\",\n    \"typecheck\": \"tsc --noEmit\",\n    \"lint\": \"eslint .\",\n    \"format\": \"prettier --write .\",\n    \"format:check\": \"prettier --check .\",\n    \"check\": \"pnpm run build && pnpm run test\",\n    \"sync:skill\": \"node scripts/sync-skill.mjs\",\n    \"pack-smoke\": \"bash scripts/pack-smoke.sh\",\n    \"changeset\": \"changeset\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"prepare\": \"git config core.hooksPath .githooks || true\"\n  },\n  \"devDependencies\": {\n    \"@changesets/cli\": \"^2.31.1\",\n    \"@eslint/js\": \"^9\",\n    \"@types/node\": \"^25\",\n    \"@x402/core\": \"2.17.0\",\n    \"@x402/evm\": \"2.17.0\",\n    \"@x402/extensions\": \"2.17.0\",\n    \"commander\": \"^14.0.1\",\n    \"eslint\": \"^9\",\n    \"eslint-config-prettier\": \"^10\",\n    \"ox\": \"0.14.30\",\n    \"prettier\": \"^3\",\n    \"tsup\": \"^8.5.0\",\n    \"typescript\": \"^6\",\n    \"typescript-eslint\": \"^8\",\n    \"viem\": \"^2.53.1\",\n    \"vitest\": \"^4.1.9\",\n    \"zod\": \"^4.4.3\"\n  }\n}\n"],"mappings":";;;AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,MAAQ;AAAA,EACR,aAAe;AAAA,EACf,SAAW;AAAA,EACX,YAAc;AAAA,IACZ,MAAQ;AAAA,IACR,KAAO;AAAA,EACT;AAAA,EACA,UAAY;AAAA,EACZ,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,QAAU;AAAA,EACZ;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,gBAAkB;AAAA,EAClB,SAAW;AAAA,IACT,OAAS;AAAA,IACT,MAAQ;AAAA,IACR,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,QAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,OAAS;AAAA,IACT,cAAc;AAAA,IACd,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,SAAW;AAAA,EACb;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,cAAc;AAAA,IACd,eAAe;AAAA,IACf,cAAc;AAAA,IACd,aAAa;AAAA,IACb,oBAAoB;AAAA,IACpB,WAAa;AAAA,IACb,QAAU;AAAA,IACV,0BAA0B;AAAA,IAC1B,IAAM;AAAA,IACN,UAAY;AAAA,IACZ,MAAQ;AAAA,IACR,YAAc;AAAA,IACd,qBAAqB;AAAA,IACrB,MAAQ;AAAA,IACR,QAAU;AAAA,IACV,KAAO;AAAA,EACT;AACF;","names":[]}

package/dist/chunk-GO75V3NZ.js

@@ -0,0 +1,160 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  PublishModeSchema,
+  loadRawConfig,
+  parseUsdToAtomic,
+  resolvePublishDefaultPrice,
+  resolvePublishMode,
+  resolveSettings
+} from "./chunk-ESPNTPQ2.js";
+import {
+  parseConfirmPolicy
+} from "./chunk-UO22YNY4.js";
+import {
+  CliError,
+  external_exports
+} from "./chunk-OYMYCW7J.js";
+
+// src/lib/settings.ts
+import { execFile } from "child_process";
+import { readFile, stat } from "fs/promises";
+import { homedir } from "os";
+import { dirname, join } from "path";
+async function resolveContextSettings(ctx) {
+  const config = await loadRawConfig(ctx.dataDir);
+  const s = resolveSettings({ config, flags: { baseUrl: ctx.flags.baseUrl }, env: process.env });
+  return {
+    baseUrl: s.baseUrl.value,
+    rpcUrl: s.rpcUrl.value,
+    evalCohort: s.evalCohort.value,
+    policy: {
+      maxAutoSpendAtomic: BigInt(s.maxAutoSpend.value),
+      sessionBudgetAtomic: BigInt(s.sessionBudget.value),
+      confirm: parseConfirmPolicy(s.confirm.value),
+      allowlistCreators: s.allowlistCreators.value
+    }
+  };
+}
+var PROJECT_CONFIG_FILE = ".tenjin.json";
+var ProjectConfigSchema = external_exports.object({
+  publish: external_exports.object({
+    mode: PublishModeSchema.optional(),
+    defaultPrice: external_exports.string().optional()
+  }).passthrough().optional()
+}).passthrough();
+async function resolvePublishSettings(input, deps = {}) {
+  const env = input.env ?? process.env;
+  const config = await loadRawConfig(input.dataDir);
+  const project = await loadProjectConfig(input.cwd, deps);
+  const layer = project?.layer;
+  const mode = resolvePublishMode({ config, project: layer, env, flag: input.flag });
+  const price = resolvePublishDefaultPrice({ config, project: layer });
+  const warnings = mode.downgradedWarning !== void 0 ? [mode.downgradedWarning] : [];
+  return {
+    mode: mode.value,
+    modeSource: mode.source,
+    defaultPriceAtomic: price.value,
+    defaultPriceSource: price.source,
+    warnings,
+    ...project !== null ? { projectConfigPath: project.path } : {}
+  };
+}
+async function loadProjectConfig(cwd, deps = {}) {
+  const path = await findProjectConfigFile(cwd, deps);
+  if (path === null) return null;
+  let json;
+  try {
+    json = JSON.parse(await readFile(path, "utf8"));
+  } catch (err) {
+    throw new CliError("CONFIG_INVALID", `${PROJECT_CONFIG_FILE} at ${path} could not be read`, {
+      fix: `Fix or delete ${path} (must be a readable JSON file).`,
+      cause: err
+    });
+  }
+  const parsed = ProjectConfigSchema.safeParse(json);
+  if (!parsed.success) {
+    throw new CliError("CONFIG_INVALID", `${PROJECT_CONFIG_FILE} at ${path} is invalid`, {
+      fix: `Correct the reported keys in ${path}, or delete it.`,
+      details: parsed.error.issues
+    });
+  }
+  const isGitignored = deps.isGitignored ?? defaultIsGitignored;
+  const gitignored = await isGitignored(path);
+  const layer = { gitignored };
+  if (parsed.data.publish !== void 0) {
+    const { mode, defaultPrice } = parsed.data.publish;
+    layer.publish = {
+      ...mode !== void 0 ? { mode } : {},
+      ...defaultPrice !== void 0 ? { defaultPrice: parseProjectPrice(defaultPrice, path) } : {}
+    };
+  }
+  return { path, layer };
+}
+function parseProjectPrice(decimalUsd, path) {
+  try {
+    return parseUsdToAtomic(decimalUsd);
+  } catch (err) {
+    throw new CliError(
+      "CONFIG_INVALID",
+      `${PROJECT_CONFIG_FILE} at ${path} has an invalid publish.defaultPrice`,
+      { fix: 'Use a non-negative decimal USD amount like "0.10".', cause: err }
+    );
+  }
+}
+async function findProjectConfigFile(cwd, deps) {
+  const homeDir = deps.homeDir ?? homedir();
+  const isForeignOwned = deps.isForeignOwned ?? defaultIsForeignOwned;
+  const warn = deps.warn ?? ((message) => process.stderr.write(`${message}
+`));
+  let dir = cwd;
+  for (; ; ) {
+    const candidate = join(dir, PROJECT_CONFIG_FILE);
+    if (await pathExists(candidate)) {
+      if (await isForeignOwned(candidate)) {
+        warn(`Ignoring ${candidate}: not owned by the current user.`);
+      } else {
+        return candidate;
+      }
+    }
+    if (await pathExists(join(dir, ".git"))) return null;
+    if (dir === homeDir) return null;
+    const parent = dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+async function defaultIsForeignOwned(filePath) {
+  const uid = process.getuid?.();
+  if (uid === void 0) return false;
+  try {
+    return (await stat(filePath)).uid !== uid;
+  } catch {
+    return false;
+  }
+}
+async function pathExists(path) {
+  try {
+    await stat(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function defaultIsGitignored(filePath) {
+  return new Promise((resolve) => {
+    execFile(
+      "git",
+      ["check-ignore", "--quiet", "--", filePath],
+      { cwd: dirname(filePath) },
+      (err) => resolve(err === null)
+    );
+  });
+}
+
+export {
+  resolveContextSettings,
+  resolvePublishSettings,
+  loadProjectConfig,
+  pathExists
+};
+//# sourceMappingURL=chunk-GO75V3NZ.js.map

package/dist/chunk-GO75V3NZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/settings.ts"],"sourcesContent":["import { execFile } from 'node:child_process';\nimport { readFile, stat } from 'node:fs/promises';\nimport { homedir } from 'node:os';\nimport { dirname, join } from 'node:path';\nimport { z } from 'zod';\nimport { CliError } from './errors';\nimport {\n  PublishModeSchema,\n  loadRawConfig,\n  resolvePublishDefaultPrice,\n  resolvePublishMode,\n  resolveSettings,\n} from './config';\nimport type { Provenance, ProjectPublishLayer, PublishMode } from './config';\nimport { parseUsdToAtomic } from './money';\nimport { parseConfirmPolicy, type SpendPolicy } from './policy';\nimport type { CommandContext } from '../context';\n\n/**\n * The effective runtime settings a B2 command needs, resolved once through the\n * same precedence (flag > env > file > default) config/doctor use. Spend values\n * arrive atomic from config and are handed on as bigint for the policy layer.\n */\nexport interface ResolvedSettings {\n  baseUrl: string;\n  rpcUrl: string;\n  policy: SpendPolicy;\n  /** Lookup-only privacy opt-in; sends X-Tenjin-Eval-Cohort: 1 when true. */\n  evalCohort: boolean;\n}\n\nexport async function resolveContextSettings(ctx: CommandContext): Promise<ResolvedSettings> {\n  const config = await loadRawConfig(ctx.dataDir);\n  const s = resolveSettings({ config, flags: { baseUrl: ctx.flags.baseUrl }, env: process.env });\n  return {\n    baseUrl: s.baseUrl.value,\n    rpcUrl: s.rpcUrl.value,\n    evalCohort: s.evalCohort.value,\n    policy: {\n      maxAutoSpendAtomic: BigInt(s.maxAutoSpend.value),\n      sessionBudgetAtomic: BigInt(s.sessionBudget.value),\n      confirm: parseConfirmPolicy(s.confirm.value),\n      allowlistCreators: s.allowlistCreators.value,\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Publish consent settings (B3, D38)\n//\n// The publish mode/price cascade extends the same precedence machinery\n// (resolvePublishMode / resolvePublishDefaultPrice in lib/config) with a\n// per-project layer that needs I/O the pure resolvers can't do: it walks up from\n// cwd for a `.tenjin.json` and asks git whether that file is committed (the\n// loosening gate on `full-auto`). It lives here beside resolveContextSettings so\n// there is one settings resolver, not a parallel one.\n// ---------------------------------------------------------------------------\n\nexport const PROJECT_CONFIG_FILE = '.tenjin.json';\n\n/**\n * The per-project override file. `publish.defaultPrice` is DECIMAL USD (\"0.10\"),\n * because a hand-edited project file is a human edge (O1) — unlike config.json,\n * which stores atomic because `config set` converts at the command edge. The\n * decimal string is converted to atomic at load via the same money util the\n * config command uses. Partial + passthrough: forward-compatible with subkeys a\n * newer CLI adds, same posture as the global config.\n */\nconst ProjectConfigSchema = z\n  .object({\n    publish: z\n      .object({\n        mode: PublishModeSchema.optional(),\n        defaultPrice: z.string().optional(),\n      })\n      .passthrough()\n      .optional(),\n  })\n  .passthrough();\n\nexport interface LoadedProjectConfig {\n  /** Absolute path of the discovered `.tenjin.json`. */\n  path: string;\n  layer: ProjectPublishLayer;\n}\n\nexport interface PublishSettingsDeps {\n  /** git check-ignore seam; defaults to shelling out to git (see wallet/passphrase). */\n  isGitignored?: (filePath: string) => Promise<boolean>;\n  /** Ownership seam; defaults to stat().uid vs process uid. Gates a planted file. */\n  isForeignOwned?: (filePath: string) => Promise<boolean>;\n  /** One-line stderr warning sink; defaults to process.stderr. */\n  warn?: (message: string) => void;\n  /** Upper bound of the walk; defaults to the user's home directory. */\n  homeDir?: string;\n}\n\nexport interface ResolvedPublishSettings {\n  mode: PublishMode;\n  modeSource: Provenance;\n  defaultPriceAtomic: string;\n  defaultPriceSource: Provenance;\n  /** Non-fatal notices for stderr (e.g. the full-auto downgrade). */\n  warnings: string[];\n  /** The `.tenjin.json` that contributed the project layer, if one was found. */\n  projectConfigPath?: string;\n}\n\n/**\n * Resolve the effective publish mode + default price across every layer:\n * global config.json < project `.tenjin.json` < env (TENJIN_PUBLISH_MODE) <\n * flag (`--mode`), with the `full-auto` loosening gate applied to the project\n * layer. The seam a `publish` command (B3.2) resolves its consent through.\n */\nexport async function resolvePublishSettings(\n  input: { dataDir: string; cwd: string; flag?: string; env?: NodeJS.ProcessEnv },\n  deps: PublishSettingsDeps = {},\n): Promise<ResolvedPublishSettings> {\n  const env = input.env ?? process.env;\n  const config = await loadRawConfig(input.dataDir);\n  const project = await loadProjectConfig(input.cwd, deps);\n  const layer = project?.layer;\n\n  const mode = resolvePublishMode({ config, project: layer, env, flag: input.flag });\n  const price = resolvePublishDefaultPrice({ config, project: layer });\n  const warnings = mode.downgradedWarning !== undefined ? [mode.downgradedWarning] : [];\n\n  return {\n    mode: mode.value,\n    modeSource: mode.source,\n    defaultPriceAtomic: price.value,\n    defaultPriceSource: price.source,\n    warnings,\n    ...(project !== null ? { projectConfigPath: project.path } : {}),\n  };\n}\n\n/**\n * Find the nearest `.tenjin.json` walking up from cwd toward the repo root (the\n * first directory holding a `.git`, inclusive), never crossing above $HOME, then\n * load, validate, and check whether it is gitignored. A file not owned by the\n * current user is ignored with a stderr warning (a planted config on a shared\n * host must not become the honored project layer). Null when none is found; a\n * present-but-unreadable/malformed file is CONFIG_INVALID (never silently\n * skipped).\n */\nexport async function loadProjectConfig(\n  cwd: string,\n  deps: PublishSettingsDeps = {},\n): Promise<LoadedProjectConfig | null> {\n  const path = await findProjectConfigFile(cwd, deps);\n  if (path === null) return null;\n\n  let json: unknown;\n  try {\n    // readFile is inside the try: a raced delete (ENOENT), a directory named\n    // .tenjin.json (EISDIR), or a permission error (EACCES) is a bad project file,\n    // not an INTERNAL fault.\n    json = JSON.parse(await readFile(path, 'utf8'));\n  } catch (err) {\n    throw new CliError('CONFIG_INVALID', `${PROJECT_CONFIG_FILE} at ${path} could not be read`, {\n      fix: `Fix or delete ${path} (must be a readable JSON file).`,\n      cause: err,\n    });\n  }\n  const parsed = ProjectConfigSchema.safeParse(json);\n  if (!parsed.success) {\n    throw new CliError('CONFIG_INVALID', `${PROJECT_CONFIG_FILE} at ${path} is invalid`, {\n      fix: `Correct the reported keys in ${path}, or delete it.`,\n      details: parsed.error.issues,\n    });\n  }\n\n  const isGitignored = deps.isGitignored ?? defaultIsGitignored;\n  const gitignored = await isGitignored(path);\n  const layer: ProjectPublishLayer = { gitignored };\n  if (parsed.data.publish !== undefined) {\n    const { mode, defaultPrice } = parsed.data.publish;\n    layer.publish = {\n      ...(mode !== undefined ? { mode } : {}),\n      ...(defaultPrice !== undefined\n        ? { defaultPrice: parseProjectPrice(defaultPrice, path) }\n        : {}),\n    };\n  }\n  return { path, layer };\n}\n\n/**\n * Convert a `.tenjin.json` decimal-USD price to atomic via the shared money\n * parser. parseUsdToAtomic throws USAGE on a bad amount; re-raise as\n * CONFIG_INVALID naming the file, so it reads like the file's other errors.\n */\nfunction parseProjectPrice(decimalUsd: string, path: string): string {\n  try {\n    return parseUsdToAtomic(decimalUsd);\n  } catch (err) {\n    throw new CliError(\n      'CONFIG_INVALID',\n      `${PROJECT_CONFIG_FILE} at ${path} has an invalid publish.defaultPrice`,\n      { fix: 'Use a non-negative decimal USD amount like \"0.10\".', cause: err },\n    );\n  }\n}\n\nasync function findProjectConfigFile(\n  cwd: string,\n  deps: PublishSettingsDeps,\n): Promise<string | null> {\n  const homeDir = deps.homeDir ?? homedir();\n  const isForeignOwned = deps.isForeignOwned ?? defaultIsForeignOwned;\n  const warn = deps.warn ?? ((message: string) => process.stderr.write(`${message}\\n`));\n\n  let dir = cwd;\n  // Bounded by $HOME (a shared-host trust boundary) and the filesystem root\n  // (dirname('/') === '/'), whichever comes first.\n  for (;;) {\n    const candidate = join(dir, PROJECT_CONFIG_FILE);\n    if (await pathExists(candidate)) {\n      if (await isForeignOwned(candidate)) {\n        // A file owned by another user (e.g. /tmp/.tenjin.json on a shared box)\n        // must never become the honored layer; skip it and keep walking.\n        warn(`Ignoring ${candidate}: not owned by the current user.`);\n      } else {\n        return candidate;\n      }\n    }\n    if (await pathExists(join(dir, '.git'))) return null; // repo root, no file\n    if (dir === homeDir) return null; // never cross above $HOME\n    const parent = dirname(dir);\n    if (parent === dir) return null;\n    dir = parent;\n  }\n}\n\n/**\n * True when the file is owned by a different uid than the process. On a platform\n * without a uid model (Windows: process.getuid is undefined) this is always\n * false — the ownership gate is a POSIX shared-host protection.\n */\nasync function defaultIsForeignOwned(filePath: string): Promise<boolean> {\n  const uid = process.getuid?.();\n  if (uid === undefined) return false;\n  try {\n    return (await stat(filePath)).uid !== uid;\n  } catch {\n    return false;\n  }\n}\n\n/** True when a path exists (of any type). Shared with the candidate command's\n *  repo-root walk so the two `.git`/file probes stay one implementation. */\nexport async function pathExists(path: string): Promise<boolean> {\n  try {\n    await stat(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * True only on a git check-ignore exit 0 (the path is ignored). Exit 1 (tracked)\n * and any error (git absent, not a repo) resolve false: `full-auto` is honored\n * from a project file ONLY when git positively confirms it is ignored. Uses\n * execFile with an argv array (never a shell), matching wallet/passphrase.ts.\n */\nfunction defaultIsGitignored(filePath: string): Promise<boolean> {\n  return new Promise((resolve) => {\n    execFile(\n      'git',\n      ['check-ignore', '--quiet', '--', filePath],\n      { cwd: dirname(filePath) },\n      (err) => resolve(err === null),\n    );\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,gBAAgB;AACzB,SAAS,UAAU,YAAY;AAC/B,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AA4B9B,eAAsB,uBAAuB,KAAgD;AAC3F,QAAM,SAAS,MAAM,cAAc,IAAI,OAAO;AAC9C,QAAM,IAAI,gBAAgB,EAAE,QAAQ,OAAO,EAAE,SAAS,IAAI,MAAM,QAAQ,GAAG,KAAK,QAAQ,IAAI,CAAC;AAC7F,SAAO;AAAA,IACL,SAAS,EAAE,QAAQ;AAAA,IACnB,QAAQ,EAAE,OAAO;AAAA,IACjB,YAAY,EAAE,WAAW;AAAA,IACzB,QAAQ;AAAA,MACN,oBAAoB,OAAO,EAAE,aAAa,KAAK;AAAA,MAC/C,qBAAqB,OAAO,EAAE,cAAc,KAAK;AAAA,MACjD,SAAS,mBAAmB,EAAE,QAAQ,KAAK;AAAA,MAC3C,mBAAmB,EAAE,kBAAkB;AAAA,IACzC;AAAA,EACF;AACF;AAaO,IAAM,sBAAsB;AAUnC,IAAM,sBAAsB,iBACzB,OAAO;AAAA,EACN,SAAS,iBACN,OAAO;AAAA,IACN,MAAM,kBAAkB,SAAS;AAAA,IACjC,cAAc,iBAAE,OAAO,EAAE,SAAS;AAAA,EACpC,CAAC,EACA,YAAY,EACZ,SAAS;AACd,CAAC,EACA,YAAY;AAoCf,eAAsB,uBACpB,OACA,OAA4B,CAAC,GACK;AAClC,QAAM,MAAM,MAAM,OAAO,QAAQ;AACjC,QAAM,SAAS,MAAM,cAAc,MAAM,OAAO;AAChD,QAAM,UAAU,MAAM,kBAAkB,MAAM,KAAK,IAAI;AACvD,QAAM,QAAQ,SAAS;AAEvB,QAAM,OAAO,mBAAmB,EAAE,QAAQ,SAAS,OAAO,KAAK,MAAM,MAAM,KAAK,CAAC;AACjF,QAAM,QAAQ,2BAA2B,EAAE,QAAQ,SAAS,MAAM,CAAC;AACnE,QAAM,WAAW,KAAK,sBAAsB,SAAY,CAAC,KAAK,iBAAiB,IAAI,CAAC;AAEpF,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,YAAY,KAAK;AAAA,IACjB,oBAAoB,MAAM;AAAA,IAC1B,oBAAoB,MAAM;AAAA,IAC1B;AAAA,IACA,GAAI,YAAY,OAAO,EAAE,mBAAmB,QAAQ,KAAK,IAAI,CAAC;AAAA,EAChE;AACF;AAWA,eAAsB,kBACpB,KACA,OAA4B,CAAC,GACQ;AACrC,QAAM,OAAO,MAAM,sBAAsB,KAAK,IAAI;AAClD,MAAI,SAAS,KAAM,QAAO;AAE1B,MAAI;AACJ,MAAI;AAIF,WAAO,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AAAA,EAChD,SAAS,KAAK;AACZ,UAAM,IAAI,SAAS,kBAAkB,GAAG,mBAAmB,OAAO,IAAI,sBAAsB;AAAA,MAC1F,KAAK,iBAAiB,IAAI;AAAA,MAC1B,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,QAAM,SAAS,oBAAoB,UAAU,IAAI;AACjD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,SAAS,kBAAkB,GAAG,mBAAmB,OAAO,IAAI,eAAe;AAAA,MACnF,KAAK,gCAAgC,IAAI;AAAA,MACzC,SAAS,OAAO,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AAEA,QAAM,eAAe,KAAK,gBAAgB;AAC1C,QAAM,aAAa,MAAM,aAAa,IAAI;AAC1C,QAAM,QAA6B,EAAE,WAAW;AAChD,MAAI,OAAO,KAAK,YAAY,QAAW;AACrC,UAAM,EAAE,MAAM,aAAa,IAAI,OAAO,KAAK;AAC3C,UAAM,UAAU;AAAA,MACd,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,MACrC,GAAI,iBAAiB,SACjB,EAAE,cAAc,kBAAkB,cAAc,IAAI,EAAE,IACtD,CAAC;AAAA,IACP;AAAA,EACF;AACA,SAAO,EAAE,MAAM,MAAM;AACvB;AAOA,SAAS,kBAAkB,YAAoB,MAAsB;AACnE,MAAI;AACF,WAAO,iBAAiB,UAAU;AAAA,EACpC,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR;AAAA,MACA,GAAG,mBAAmB,OAAO,IAAI;AAAA,MACjC,EAAE,KAAK,sDAAsD,OAAO,IAAI;AAAA,IAC1E;AAAA,EACF;AACF;AAEA,eAAe,sBACb,KACA,MACwB;AACxB,QAAM,UAAU,KAAK,WAAW,QAAQ;AACxC,QAAM,iBAAiB,KAAK,kBAAkB;AAC9C,QAAM,OAAO,KAAK,SAAS,CAAC,YAAoB,QAAQ,OAAO,MAAM,GAAG,OAAO;AAAA,CAAI;AAEnF,MAAI,MAAM;AAGV,aAAS;AACP,UAAM,YAAY,KAAK,KAAK,mBAAmB;AAC/C,QAAI,MAAM,WAAW,SAAS,GAAG;AAC/B,UAAI,MAAM,eAAe,SAAS,GAAG;AAGnC,aAAK,YAAY,SAAS,kCAAkC;AAAA,MAC9D,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,MAAM,WAAW,KAAK,KAAK,MAAM,CAAC,EAAG,QAAO;AAChD,QAAI,QAAQ,QAAS,QAAO;AAC5B,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK,QAAO;AAC3B,UAAM;AAAA,EACR;AACF;AAOA,eAAe,sBAAsB,UAAoC;AACvE,QAAM,MAAM,QAAQ,SAAS;AAC7B,MAAI,QAAQ,OAAW,QAAO;AAC9B,MAAI;AACF,YAAQ,MAAM,KAAK,QAAQ,GAAG,QAAQ;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,WAAW,MAAgC;AAC/D,MAAI;AACF,UAAM,KAAK,IAAI;AACf,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQA,SAAS,oBAAoB,UAAoC;AAC/D,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B;AAAA,MACE;AAAA,MACA,CAAC,gBAAgB,WAAW,MAAM,QAAQ;AAAA,MAC1C,EAAE,KAAK,QAAQ,QAAQ,EAAE;AAAA,MACzB,CAAC,QAAQ,QAAQ,QAAQ,IAAI;AAAA,IAC/B;AAAA,EACF,CAAC;AACH;","names":[]}

package/dist/chunk-HIVZG55D.js

@@ -0,0 +1,204 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  Hash,
+  abytes,
+  aexists,
+  anumber,
+  aoutput,
+  clean,
+  createHasher,
+  rotlBH,
+  rotlBL,
+  rotlSH,
+  rotlSL,
+  split,
+  swap32IfBE,
+  toBytes,
+  u32
+} from "./chunk-5CLSD5YN.js";
+
+// node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/esm/sha3.js
+var _0n = BigInt(0);
+var _1n = BigInt(1);
+var _2n = BigInt(2);
+var _7n = BigInt(7);
+var _256n = BigInt(256);
+var _0x71n = BigInt(113);
+var SHA3_PI = [];
+var SHA3_ROTL = [];
+var _SHA3_IOTA = [];
+for (let round = 0, R = _1n, x = 1, y = 0; round < 24; round++) {
+  [x, y] = [y, (2 * x + 3 * y) % 5];
+  SHA3_PI.push(2 * (5 * y + x));
+  SHA3_ROTL.push((round + 1) * (round + 2) / 2 % 64);
+  let t = _0n;
+  for (let j = 0; j < 7; j++) {
+    R = (R << _1n ^ (R >> _7n) * _0x71n) % _256n;
+    if (R & _2n)
+      t ^= _1n << (_1n << /* @__PURE__ */ BigInt(j)) - _1n;
+  }
+  _SHA3_IOTA.push(t);
+}
+var IOTAS = split(_SHA3_IOTA, true);
+var SHA3_IOTA_H = IOTAS[0];
+var SHA3_IOTA_L = IOTAS[1];
+var rotlH = (h, l, s) => s > 32 ? rotlBH(h, l, s) : rotlSH(h, l, s);
+var rotlL = (h, l, s) => s > 32 ? rotlBL(h, l, s) : rotlSL(h, l, s);
+function keccakP(s, rounds = 24) {
+  const B = new Uint32Array(5 * 2);
+  for (let round = 24 - rounds; round < 24; round++) {
+    for (let x = 0; x < 10; x++)
+      B[x] = s[x] ^ s[x + 10] ^ s[x + 20] ^ s[x + 30] ^ s[x + 40];
+    for (let x = 0; x < 10; x += 2) {
+      const idx1 = (x + 8) % 10;
+      const idx0 = (x + 2) % 10;
+      const B0 = B[idx0];
+      const B1 = B[idx0 + 1];
+      const Th = rotlH(B0, B1, 1) ^ B[idx1];
+      const Tl = rotlL(B0, B1, 1) ^ B[idx1 + 1];
+      for (let y = 0; y < 50; y += 10) {
+        s[x + y] ^= Th;
+        s[x + y + 1] ^= Tl;
+      }
+    }
+    let curH = s[2];
+    let curL = s[3];
+    for (let t = 0; t < 24; t++) {
+      const shift = SHA3_ROTL[t];
+      const Th = rotlH(curH, curL, shift);
+      const Tl = rotlL(curH, curL, shift);
+      const PI = SHA3_PI[t];
+      curH = s[PI];
+      curL = s[PI + 1];
+      s[PI] = Th;
+      s[PI + 1] = Tl;
+    }
+    for (let y = 0; y < 50; y += 10) {
+      for (let x = 0; x < 10; x++)
+        B[x] = s[y + x];
+      for (let x = 0; x < 10; x++)
+        s[y + x] ^= ~B[(x + 2) % 10] & B[(x + 4) % 10];
+    }
+    s[0] ^= SHA3_IOTA_H[round];
+    s[1] ^= SHA3_IOTA_L[round];
+  }
+  clean(B);
+}
+var Keccak = class _Keccak extends Hash {
+  // NOTE: we accept arguments in bytes instead of bits here.
+  constructor(blockLen, suffix, outputLen, enableXOF = false, rounds = 24) {
+    super();
+    this.pos = 0;
+    this.posOut = 0;
+    this.finished = false;
+    this.destroyed = false;
+    this.enableXOF = false;
+    this.blockLen = blockLen;
+    this.suffix = suffix;
+    this.outputLen = outputLen;
+    this.enableXOF = enableXOF;
+    this.rounds = rounds;
+    anumber(outputLen);
+    if (!(0 < blockLen && blockLen < 200))
+      throw new Error("only keccak-f1600 function is supported");
+    this.state = new Uint8Array(200);
+    this.state32 = u32(this.state);
+  }
+  clone() {
+    return this._cloneInto();
+  }
+  keccak() {
+    swap32IfBE(this.state32);
+    keccakP(this.state32, this.rounds);
+    swap32IfBE(this.state32);
+    this.posOut = 0;
+    this.pos = 0;
+  }
+  update(data) {
+    aexists(this);
+    data = toBytes(data);
+    abytes(data);
+    const { blockLen, state } = this;
+    const len = data.length;
+    for (let pos = 0; pos < len; ) {
+      const take = Math.min(blockLen - this.pos, len - pos);
+      for (let i = 0; i < take; i++)
+        state[this.pos++] ^= data[pos++];
+      if (this.pos === blockLen)
+        this.keccak();
+    }
+    return this;
+  }
+  finish() {
+    if (this.finished)
+      return;
+    this.finished = true;
+    const { state, suffix, pos, blockLen } = this;
+    state[pos] ^= suffix;
+    if ((suffix & 128) !== 0 && pos === blockLen - 1)
+      this.keccak();
+    state[blockLen - 1] ^= 128;
+    this.keccak();
+  }
+  writeInto(out) {
+    aexists(this, false);
+    abytes(out);
+    this.finish();
+    const bufferOut = this.state;
+    const { blockLen } = this;
+    for (let pos = 0, len = out.length; pos < len; ) {
+      if (this.posOut >= blockLen)
+        this.keccak();
+      const take = Math.min(blockLen - this.posOut, len - pos);
+      out.set(bufferOut.subarray(this.posOut, this.posOut + take), pos);
+      this.posOut += take;
+      pos += take;
+    }
+    return out;
+  }
+  xofInto(out) {
+    if (!this.enableXOF)
+      throw new Error("XOF is not possible for this instance");
+    return this.writeInto(out);
+  }
+  xof(bytes) {
+    anumber(bytes);
+    return this.xofInto(new Uint8Array(bytes));
+  }
+  digestInto(out) {
+    aoutput(out, this);
+    if (this.finished)
+      throw new Error("digest() was already called");
+    this.writeInto(out);
+    this.destroy();
+    return out;
+  }
+  digest() {
+    return this.digestInto(new Uint8Array(this.outputLen));
+  }
+  destroy() {
+    this.destroyed = true;
+    clean(this.state);
+  }
+  _cloneInto(to) {
+    const { blockLen, suffix, outputLen, rounds, enableXOF } = this;
+    to || (to = new _Keccak(blockLen, suffix, outputLen, enableXOF, rounds));
+    to.state32.set(this.state32);
+    to.pos = this.pos;
+    to.posOut = this.posOut;
+    to.finished = this.finished;
+    to.rounds = rounds;
+    to.suffix = suffix;
+    to.outputLen = outputLen;
+    to.enableXOF = enableXOF;
+    to.destroyed = this.destroyed;
+    return to;
+  }
+};
+var gen = (suffix, blockLen, outputLen) => createHasher(() => new Keccak(blockLen, suffix, outputLen));
+var keccak_256 = /* @__PURE__ */ (() => gen(1, 136, 256 / 8))();
+
+export {
+  keccak_256
+};
+//# sourceMappingURL=chunk-HIVZG55D.js.map