tenzro-sdk 0.1.0 → 0.2.0

package/dist/rpc.js

@@ -1,14 +1,32 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RpcCallError = exports.RpcClient = void 0;
+exports.RpcCallError = exports.RpcClient = exports.Eip1193Transport = void 0;
+/**
+ * Adapter that turns an EIP-1193 provider into an `RpcTransport`. Used
+ * by `TenzroClient.fromInjected()` and any direct consumer that wants
+ * to route SDK calls through `window.tenzro` rather than a network
+ * endpoint.
+ */
+class Eip1193Transport {
+    provider;
+    constructor(provider) {
+        this.provider = provider;
+    }
+    async call(method, params = []) {
+        return this.provider.request({ method, params });
+    }
+}
+exports.Eip1193Transport = Eip1193Transport;
 class RpcClient {
     endpoint;
     apiEndpoint;
     timeout;
     requestId = 0;
-    constructor(endpoint, apiEndpoint, timeout = 30000) {
+    transport;
+    constructor(endpoint, apiEndpoint, timeout = 30000, transport) {
         this.endpoint = endpoint;
         this.timeout = timeout;
+        this.transport = transport;
         // Derive API endpoint from RPC endpoint if not provided
         if (apiEndpoint) {
             this.apiEndpoint = apiEndpoint;
@@ -25,15 +43,38 @@ class RpcClient {
         }
     }
     async call(method, params = []) {
+        // Injected-provider path: the extension owns auth + routing.
+        if (this.transport) {
+            return this.transport.call(method, params);
+        }
         // Use modular arithmetic to prevent overflow beyond Number.MAX_SAFE_INTEGER
         this.requestId = (this.requestId + 1) % Number.MAX_SAFE_INTEGER;
         const id = this.requestId;
         const controller = new AbortController();
         const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+        // Ambient auth: forward `Authorization: DPoP <jwt>` and `DPoP: <proof>`
+        // headers from environment variables when set (Node only). This mirrors
+        // the Rust SDK's RpcClient and keeps SDK callsites free of private-key
+        // handling — the holder mints the JWT once during onboarding via
+        // AuthClient, then exports the token + per-call DPoP proof through
+        // TENZRO_BEARER_JWT / TENZRO_DPOP_PROOF.
+        const headers = { "Content-Type": "application/json" };
+        const proc = globalThis.process;
+        const env = proc && proc.env ? proc.env : undefined;
+        if (env) {
+            const bearer = env.TENZRO_BEARER_JWT;
+            if (bearer && bearer.length > 0) {
+                headers["Authorization"] = `DPoP ${bearer}`;
+            }
+            const dpop = env.TENZRO_DPOP_PROOF;
+            if (dpop && dpop.length > 0) {
+                headers["DPoP"] = dpop;
+            }
+        }
         try {
             const response = await fetch(this.endpoint, {
                 method: "POST",
-                headers: { "Content-Type": "application/json" },
+                headers,
                 body: JSON.stringify({ jsonrpc: "2.0", method, params, id }),
                 signal: controller.signal,
             });
@@ -105,6 +146,72 @@ class RpcClient {
             clearTimeout(timeoutId);
         }
     }
+    /**
+     * Authenticated POST to the Web API. The `/wallet/*` endpoints
+     * require a fresh DPoP proof per request that signs over the exact
+     * `(method, htu)` pair — only the wallet kernel can produce that
+     * proof, so the SDK accepts both the bearer JWT and the proof as
+     * explicit arguments instead of reading them from ambient env.
+     */
+    async postWithAuth(path, body, bearerJwt, dpopProof) {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+        try {
+            const response = await fetch(`${this.apiEndpoint}${path}`, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Accept: "application/json",
+                    Authorization: `DPoP ${bearerJwt}`,
+                    DPoP: dpopProof,
+                },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+            }
+            return (await response.json());
+        }
+        catch (error) {
+            if (error instanceof Error && error.name === "AbortError") {
+                throw new Error(`Request timed out after ${this.timeout}ms`);
+            }
+            throw error;
+        }
+        finally {
+            clearTimeout(timeoutId);
+        }
+    }
+    /** Authenticated GET counterpart to {@link postWithAuth}. */
+    async getWithAuth(path, bearerJwt, dpopProof) {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+        try {
+            const response = await fetch(`${this.apiEndpoint}${path}`, {
+                method: "GET",
+                headers: {
+                    Accept: "application/json",
+                    Authorization: `DPoP ${bearerJwt}`,
+                    DPoP: dpopProof,
+                },
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+            }
+            return (await response.json());
+        }
+        catch (error) {
+            if (error instanceof Error && error.name === "AbortError") {
+                throw new Error(`Request timed out after ${this.timeout}ms`);
+            }
+            throw error;
+        }
+        finally {
+            clearTimeout(timeoutId);
+        }
+    }
     getEndpoint() {
         return this.endpoint;
     }

package/dist/rpc.js.map

@@ -1 +1 @@
-{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../src/rpc.ts"],"names":[],"mappings":";;;AAoBA,MAAa,SAAS;IACZ,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,OAAO,CAAS;IAChB,SAAS,GAAW,CAAC,CAAC;IAE9B,YAAY,QAAgB,EAAE,WAAoB,EAAE,UAAkB,KAAK;QACzE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,wDAAwD;QACxD,IAAI,WAAW,EAAE;YACf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;SAChC;aAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE;YAClD,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;SACjF;aAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;YACrF,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACrD;aAAM;YACL,2DAA2D;YAC3D,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC;SAC7B;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,SAAoB,EAAE;QAClD,4EAA4E;QAC5E,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAChE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAE1B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI;YACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBAC5D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAChB,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;aAC9E;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAC;YAEvD,IAAI,IAAI,CAAC,KAAK,EAAE;gBACd,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aAC9E;YAED,OAAO,IAAI,CAAC,MAAW,CAAC;SACzB;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;aAClE;YACD,MAAM,KAAK,CAAC;SACb;gBAAS;YACR,YAAY,CAAC,SAAS,CAAC,CAAC;SACzB;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,IAAY;QACvB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI;YACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,EAAE;gBACzD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAChB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;aACpE;YAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;SACrC;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;aAC9D;YACD,MAAM,KAAK,CAAC;SACb;gBAAS;YACR,YAAY,CAAC,SAAS,CAAC,CAAC;SACzB;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI;YACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAChB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;aACpE;YAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;SACrC;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;aAC9D;YACD,MAAM,KAAK,CAAC;SACb;gBAAS;YACR,YAAY,CAAC,SAAS,CAAC,CAAC;SACzB;IACH,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF;AAxHD,8BAwHC;AAED,MAAa,YAAa,SAAQ,KAAK;IAClB;IAAsC;IAAzD,YAAmB,IAAY,EAAE,OAAe,EAAS,IAAc;QACrE,KAAK,CAAC,aAAa,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QADtB,SAAI,GAAJ,IAAI,CAAQ;QAA0B,SAAI,GAAJ,IAAI,CAAU;QAErE,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AALD,oCAKC"}
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../src/rpc.ts"],"names":[],"mappings":";;;AAiCA;;;;;GAKG;AACH,MAAa,gBAAgB;IAER;IADnB,YACmB,QAKhB;QALgB,aAAQ,GAAR,QAAQ,CAKxB;IACA,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,SAA8C,EAAE;QAC5E,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;CACF;AAbD,4CAaC;AAED,MAAa,SAAS;IACZ,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,OAAO,CAAS;IAChB,SAAS,GAAW,CAAC,CAAC;IACb,SAAS,CAA2B;IAErD,YACE,QAAgB,EAChB,WAAoB,EACpB,UAAkB,KAAK,EACvB,SAAwB;QAExB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,wDAAwD;QACxD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QACjC,CAAC;aAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;QAClF,CAAC;aAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,2DAA2D;YAC3D,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,SAA8C,EAAE;QAC5E,6DAA6D;QAC7D,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAI,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,4EAA4E;QAC5E,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAChE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAE1B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,iEAAiE;QACjE,mEAAmE;QACnE,yCAAyC;QACzC,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAI,UAEZ,CAAC,OAAO,CAAC;QACX,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACpD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACrC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,eAAe,CAAC,GAAG,QAAQ,MAAM,EAAE,CAAC;YAC9C,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACnC,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YACzB,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBAC5D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAC;YAEvD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/E,CAAC;YAED,OAAO,IAAI,CAAC,MAAW,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,IAAY;QACvB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,EAAE;gBACzD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,IAAa,EACb,SAAiB,EACjB,SAAiB;QAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,QAAQ,SAAS,EAAE;oBAClC,IAAI,EAAE,SAAS;iBAChB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,WAAW,CACf,IAAY,EACZ,SAAiB,EACjB,SAAiB;QAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,EAAE;gBACzD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,QAAQ,SAAS,EAAE;oBAClC,IAAI,EAAE,SAAS;iBAChB;gBACD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF;AAzOD,8BAyOC;AAED,MAAa,YAAa,SAAQ,KAAK;IAClB;IAAsC;IAAzD,YAAmB,IAAY,EAAE,OAAe,EAAS,IAAc;QACrE,KAAK,CAAC,aAAa,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QADtB,SAAI,GAAJ,IAAI,CAAQ;QAA0B,SAAI,GAAJ,IAAI,CAAU;QAErE,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AALD,oCAKC"}

package/dist/seed-agent.d.ts

@@ -0,0 +1,52 @@
+import { RpcClient } from "./rpc";
+/**
+ * Client for the SeedAgent treasury earmark and protocol-owned bootstrap
+ * agent registry (Spec 10).
+ *
+ * The SeedAgent earmark is a genesis-funded TNZO allocation governed by
+ * a decay schedule and `Charter`s that enumerate which `OperationKind`s
+ * a seed agent may exercise (inference, task marketplace, bridge, etc.)
+ * with per-charter spend caps, target throughput, and counterparty
+ * filters.
+ *
+ * All endpoints here are read-only — provisioning, monthly decay, and
+ * sunset wind-down land in a later wave with the off-chain provisioning
+ * daemon and governance-executor mutation paths.
+ */
+export declare class SeedAgentClient {
+    private rpc;
+    constructor(rpc: RpcClient);
+    /**
+     * Returns the singleton `TreasuryEarmark` — genesis allocation,
+     * decay schedule, master enabled flag, and surplus-burn disposition.
+     * @returns Current `TreasuryEarmark`
+     */
+    getTreasuryEarmark(): Promise<any>;
+    /**
+     * Fetch a single `Charter` by its identifier.
+     * @param charterId - Charter identifier
+     * @returns Charter record or null if not found
+     */
+    getSeedAgentCharter(charterId: string): Promise<any>;
+    /**
+     * List every registered `Charter` (active and sunset).
+     * @returns Array of charter records
+     */
+    listSeedAgentCharters(): Promise<any[]>;
+    /**
+     * List provisioned `SeedAgentRecord`s, optionally filtered by charter.
+     * @param charterId - Optional charter filter
+     * @returns Array of seed agent records
+     */
+    listSeedAgents(charterId?: string): Promise<any[]>;
+    /**
+     * Returns network activity metrics over the requested window. Used by
+     * the SeedAgent counterparty filter and the organic-activity dashboards
+     * to exclude protocol-owned bootstrap traffic during the 12-month
+     * earmark window.
+     * @param windowBlocks - Optional rolling window (in blocks)
+     * @returns Activity metrics snapshot
+     */
+    getNetworkActivity(windowBlocks?: number): Promise<any>;
+}
+//# sourceMappingURL=seed-agent.d.ts.map

package/dist/seed-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-agent.d.ts","sourceRoot":"","sources":["../src/seed-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAElC;;;;;;;;;;;;;GAaG;AACH,qBAAa,eAAe;IACd,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,SAAS;IAElC;;;;OAIG;IACG,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC;IAIxC;;;;OAIG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAI1D;;;OAGG;IACG,qBAAqB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAI7C;;;;OAIG;IACG,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAKxD;;;;;;;OAOG;IACG,kBAAkB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAI9D"}

package/dist/seed-agent.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SeedAgentClient = void 0;
+/**
+ * Client for the SeedAgent treasury earmark and protocol-owned bootstrap
+ * agent registry (Spec 10).
+ *
+ * The SeedAgent earmark is a genesis-funded TNZO allocation governed by
+ * a decay schedule and `Charter`s that enumerate which `OperationKind`s
+ * a seed agent may exercise (inference, task marketplace, bridge, etc.)
+ * with per-charter spend caps, target throughput, and counterparty
+ * filters.
+ *
+ * All endpoints here are read-only — provisioning, monthly decay, and
+ * sunset wind-down land in a later wave with the off-chain provisioning
+ * daemon and governance-executor mutation paths.
+ */
+class SeedAgentClient {
+    rpc;
+    constructor(rpc) {
+        this.rpc = rpc;
+    }
+    /**
+     * Returns the singleton `TreasuryEarmark` — genesis allocation,
+     * decay schedule, master enabled flag, and surplus-burn disposition.
+     * @returns Current `TreasuryEarmark`
+     */
+    async getTreasuryEarmark() {
+        return this.rpc.call("tenzro_getTreasuryEarmark", []);
+    }
+    /**
+     * Fetch a single `Charter` by its identifier.
+     * @param charterId - Charter identifier
+     * @returns Charter record or null if not found
+     */
+    async getSeedAgentCharter(charterId) {
+        return this.rpc.call("tenzro_getSeedAgentCharter", [charterId]);
+    }
+    /**
+     * List every registered `Charter` (active and sunset).
+     * @returns Array of charter records
+     */
+    async listSeedAgentCharters() {
+        return this.rpc.call("tenzro_listSeedAgentCharters", []);
+    }
+    /**
+     * List provisioned `SeedAgentRecord`s, optionally filtered by charter.
+     * @param charterId - Optional charter filter
+     * @returns Array of seed agent records
+     */
+    async listSeedAgents(charterId) {
+        const params = charterId === undefined ? [] : [charterId];
+        return this.rpc.call("tenzro_listSeedAgents", params);
+    }
+    /**
+     * Returns network activity metrics over the requested window. Used by
+     * the SeedAgent counterparty filter and the organic-activity dashboards
+     * to exclude protocol-owned bootstrap traffic during the 12-month
+     * earmark window.
+     * @param windowBlocks - Optional rolling window (in blocks)
+     * @returns Activity metrics snapshot
+     */
+    async getNetworkActivity(windowBlocks) {
+        const params = windowBlocks === undefined ? [] : [windowBlocks];
+        return this.rpc.call("tenzro_getNetworkActivity", params);
+    }
+}
+exports.SeedAgentClient = SeedAgentClient;
+//# sourceMappingURL=seed-agent.js.map

package/dist/seed-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-agent.js","sourceRoot":"","sources":["../src/seed-agent.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;GAaG;AACH,MAAa,eAAe;IACN;IAApB,YAAoB,GAAc;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAEtC;;;;OAIG;IACH,KAAK,CAAC,kBAAkB;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qBAAqB;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAQ,8BAA8B,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,SAAkB;QACrC,MAAM,MAAM,GAAc,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAQ,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CAAC,YAAqB;QAC5C,MAAM,MAAM,GAAc,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;CACF;AAnDD,0CAmDC"}

package/dist/settlement.d.ts

@@ -20,21 +20,63 @@ export declare class SettlementClient {
      */
     getSettlement(receiptId: string): Promise<SettlementReceipt | null>;
     /**
-     * Create an escrow that releases payment when conditions are met.
-     * @param payee - Address receiving the payment
-     * @param amount - Amount to escrow (in smallest unit)
+     * Create an on-chain escrow via a signed `CreateEscrow` transaction.
+     *
+     * The escrow_id is derived deterministically by the VM as
+     * `SHA-256("tenzro/escrow/id" || payer || nonce_le)` and the funds are
+     * locked at a vault address derived from that escrow_id. Only the signing
+     * payer can later release or refund.
+     *
+     * Authentication is ambient: the underlying RPC call carries the OAuth
+     * 2.1 bearer JWT and per-request DPoP proof from `TENZRO_BEARER_JWT` /
+     * `TENZRO_DPOP_PROOF` (set after onboarding via {@link AuthClient}). This
+     * SDK no longer takes raw private keys — signing happens server-side
+     * against the holder's MPC wallet, gated by the DPoP-bound bearer.
+     *
+     * @param payer - Payer address (the holder's MPC wallet address)
+     * @param payee - Recipient address upon successful release
+     * @param amount - Amount to lock in escrow (in wei, smallest unit)
      * @param asset - Asset identifier (e.g., "TNZO")
-     * @param conditions - JSON-encoded release conditions
-     * @returns Escrow ID
+     * @param expiresAt - Unix timestamp in milliseconds when the escrow expires
+     * @param releaseConditions - One of: "timeout" | "provider" | "consumer" |
+     *   "both" | "verifier" | "custom"
+     * @returns Transaction hash
      */
-    createEscrow(payee: string, amount: bigint, asset: string, conditions: string): Promise<string>;
+    createEscrow(payer: string, payee: string, amount: bigint, asset: string, expiresAt: bigint, releaseConditions: string): Promise<string>;
     /**
-     * Release funds from an escrow.
-     * @param escrowId - The escrow identifier
-     * @param proof - Optional proof that conditions are met
+     * Release escrowed funds to the payee via a signed `ReleaseEscrow` transaction.
+     * Only the original payer can submit this — the VM rejects releases from any
+     * other address. Authentication is ambient (see {@link createEscrow}).
+     *
+     * @param payer - Payer address (the holder's MPC wallet address)
+     * @param escrowId - 32-byte escrow id (hex with or without 0x)
+     * @param proof - Optional proof bytes (hex with or without 0x)
      * @returns Transaction hash
      */
-    releaseEscrow(escrowId: string, proof?: string): Promise<string>;
+    releaseEscrow(payer: string, escrowId: string, proof?: string): Promise<string>;
+    /**
+     * Refund escrowed funds back to the payer via a signed `RefundEscrow` transaction.
+     * Only the original payer can submit this, AND the escrow must be expired
+     * (or use Timeout/Custom release conditions). Authentication is ambient
+     * (see {@link createEscrow}).
+     */
+    refundEscrow(payer: string, escrowId: string): Promise<string>;
+    /** Inspect an escrow record by its 32-byte id. */
+    getEscrow(escrowId: string): Promise<any>;
+    /**
+     * List every escrow whose `payer` matches the given address.
+     * @param payer - Payer address (the wallet that created the escrow)
+     * @returns Array of escrow records (empty if payer has none)
+     */
+    listEscrowsByPayer(payer: string): Promise<any[]>;
+    /**
+     * List every escrow whose `payee` matches the given address.
+     * @param payee - Payee address (the recipient on successful release)
+     * @returns Array of escrow records (empty if payee has none)
+     */
+    listEscrowsByPayee(payee: string): Promise<any[]>;
+    /** Internal helper: fetch nonce + chain_id with safe defaults. */
+    private fetchNonceAndChainId;
     /**
      * Open a micropayment channel for streaming payments.
      * @param payee - Address receiving payments

package/dist/settlement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settlement.d.ts","sourceRoot":"","sources":["../src/settlement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE9D;;;GAGG;AACH,qBAAa,gBAAgB;IACf,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,SAAS;IAElC;;;;OAIG;IACG,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAInE;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAMzE;;;;;;;OAOG;IACG,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC;IAWlB;;;;;OAKG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMtE;;;;;OAKG;IACG,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IASzE;;;;OAIG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAK3D"}
+{"version":3,"file":"settlement.d.ts","sourceRoot":"","sources":["../src/settlement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE9D;;;GAGG;AACH,qBAAa,gBAAgB;IACf,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,SAAS;IAElC;;;;OAIG;IACG,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAInE;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAMzE;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,MAAM,CAAC;IAwDlB;;;;;;;;;OASG;IACG,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC;IAqClB;;;;;OAKG;IACG,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC;IA2BlB,kDAAkD;IAC5C,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAM/C;;;;OAIG;IACG,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAIvD;;;;OAIG;IACG,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAIvD,kEAAkE;YACpD,oBAAoB;IAuBlC;;;;;OAKG;IACG,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IASzE;;;;OAIG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAK3D"}

package/dist/settlement.js

@@ -29,33 +29,191 @@ class SettlementClient {
         ]);
     }
     /**
-     * Create an escrow that releases payment when conditions are met.
-     * @param payee - Address receiving the payment
-     * @param amount - Amount to escrow (in smallest unit)
+     * Create an on-chain escrow via a signed `CreateEscrow` transaction.
+     *
+     * The escrow_id is derived deterministically by the VM as
+     * `SHA-256("tenzro/escrow/id" || payer || nonce_le)` and the funds are
+     * locked at a vault address derived from that escrow_id. Only the signing
+     * payer can later release or refund.
+     *
+     * Authentication is ambient: the underlying RPC call carries the OAuth
+     * 2.1 bearer JWT and per-request DPoP proof from `TENZRO_BEARER_JWT` /
+     * `TENZRO_DPOP_PROOF` (set after onboarding via {@link AuthClient}). This
+     * SDK no longer takes raw private keys — signing happens server-side
+     * against the holder's MPC wallet, gated by the DPoP-bound bearer.
+     *
+     * @param payer - Payer address (the holder's MPC wallet address)
+     * @param payee - Recipient address upon successful release
+     * @param amount - Amount to lock in escrow (in wei, smallest unit)
      * @param asset - Asset identifier (e.g., "TNZO")
-     * @param conditions - JSON-encoded release conditions
-     * @returns Escrow ID
+     * @param expiresAt - Unix timestamp in milliseconds when the escrow expires
+     * @param releaseConditions - One of: "timeout" | "provider" | "consumer" |
+     *   "both" | "verifier" | "custom"
+     * @returns Transaction hash
      */
-    async createEscrow(payee, amount, asset, conditions) {
-        return this.rpc.call("tenzro_createEscrow", [
-            {
+    async createEscrow(payer, payee, amount, asset, expiresAt, releaseConditions) {
+        const conditionsJson = (() => {
+            switch (releaseConditions.toLowerCase()) {
+                case "timeout":
+                    return { type: "Timeout" };
+                case "provider":
+                case "provider_signature":
+                    return { type: "ProviderSignature" };
+                case "consumer":
+                case "consumer_signature":
+                    return { type: "ConsumerSignature" };
+                case "both":
+                case "both_signatures":
+                    return { type: "BothSignatures" };
+                case "verifier":
+                case "verifier_signature":
+                    return { type: "VerifierSignature" };
+                case "custom":
+                    return { type: "Custom", data: "" };
+                default:
+                    throw new Error(`unsupported release condition '${releaseConditions}': use timeout|provider|consumer|both|verifier|custom`);
+            }
+        })();
+        const { nonce, chainId } = await this.fetchNonceAndChainId(payer);
+        const txType = {
+            type: "CreateEscrow",
+            data: {
                 payee,
                 amount: amount.toString(),
-                asset,
-                conditions,
+                asset_id: asset,
+                expires_at: Number(expiresAt),
+                release_conditions: conditionsJson,
+            },
+        };
+        const result = await this.rpc.call("tenzro_signAndSendTransaction", [
+            {
+                from: payer,
+                to: payee,
+                value: 0,
+                gas_limit: 75_000,
+                gas_price: 1_000_000_000,
+                nonce,
+                chain_id: chainId,
+                tx_type: txType,
             },
         ]);
+        return typeof result === "string"
+            ? result
+            : result?.tx_hash || result?.transaction_hash || "";
     }
     /**
-     * Release funds from an escrow.
-     * @param escrowId - The escrow identifier
-     * @param proof - Optional proof that conditions are met
+     * Release escrowed funds to the payee via a signed `ReleaseEscrow` transaction.
+     * Only the original payer can submit this — the VM rejects releases from any
+     * other address. Authentication is ambient (see {@link createEscrow}).
+     *
+     * @param payer - Payer address (the holder's MPC wallet address)
+     * @param escrowId - 32-byte escrow id (hex with or without 0x)
+     * @param proof - Optional proof bytes (hex with or without 0x)
      * @returns Transaction hash
      */
-    async releaseEscrow(escrowId, proof) {
-        return this.rpc.call("tenzro_releaseEscrow", [
-            { escrow_id: escrowId, proof },
+    async releaseEscrow(payer, escrowId, proof) {
+        const escrowIdBytes = parseEscrowId(escrowId);
+        const proofBytes = proof
+            ? Array.from(hexToBytes(proof))
+            : [];
+        const { nonce, chainId } = await this.fetchNonceAndChainId(payer);
+        const txType = {
+            type: "ReleaseEscrow",
+            data: {
+                escrow_id: Array.from(escrowIdBytes),
+                proof: {
+                    proof_type: "Timeout",
+                    proof_data: proofBytes,
+                    signatures: [],
+                },
+            },
+        };
+        const result = await this.rpc.call("tenzro_signAndSendTransaction", [
+            {
+                from: payer,
+                to: "0x0000000000000000000000000000000000000000000000000000000000000000",
+                value: 0,
+                gas_limit: 60_000,
+                gas_price: 1_000_000_000,
+                nonce,
+                chain_id: chainId,
+                tx_type: txType,
+            },
+        ]);
+        return typeof result === "string"
+            ? result
+            : result?.tx_hash || result?.transaction_hash || "";
+    }
+    /**
+     * Refund escrowed funds back to the payer via a signed `RefundEscrow` transaction.
+     * Only the original payer can submit this, AND the escrow must be expired
+     * (or use Timeout/Custom release conditions). Authentication is ambient
+     * (see {@link createEscrow}).
+     */
+    async refundEscrow(payer, escrowId) {
+        const escrowIdBytes = parseEscrowId(escrowId);
+        const { nonce, chainId } = await this.fetchNonceAndChainId(payer);
+        const txType = {
+            type: "RefundEscrow",
+            data: { escrow_id: Array.from(escrowIdBytes) },
+        };
+        const result = await this.rpc.call("tenzro_signAndSendTransaction", [
+            {
+                from: payer,
+                to: "0x0000000000000000000000000000000000000000000000000000000000000000",
+                value: 0,
+                gas_limit: 50_000,
+                gas_price: 1_000_000_000,
+                nonce,
+                chain_id: chainId,
+                tx_type: txType,
+            },
         ]);
+        return typeof result === "string"
+            ? result
+            : result?.tx_hash || result?.transaction_hash || "";
+    }
+    /** Inspect an escrow record by its 32-byte id. */
+    async getEscrow(escrowId) {
+        const escrowIdBytes = parseEscrowId(escrowId);
+        const escrowIdHex = "0x" + bytesToHex(escrowIdBytes);
+        return this.rpc.call("tenzro_getEscrow", [{ escrow_id: escrowIdHex }]);
+    }
+    /**
+     * List every escrow whose `payer` matches the given address.
+     * @param payer - Payer address (the wallet that created the escrow)
+     * @returns Array of escrow records (empty if payer has none)
+     */
+    async listEscrowsByPayer(payer) {
+        return this.rpc.call("tenzro_listEscrowsByPayer", [payer]);
+    }
+    /**
+     * List every escrow whose `payee` matches the given address.
+     * @param payee - Payee address (the recipient on successful release)
+     * @returns Array of escrow records (empty if payee has none)
+     */
+    async listEscrowsByPayee(payee) {
+        return this.rpc.call("tenzro_listEscrowsByPayee", [payee]);
+    }
+    /** Internal helper: fetch nonce + chain_id with safe defaults. */
+    async fetchNonceAndChainId(address) {
+        let nonce = 0;
+        let chainId = 1337;
+        try {
+            const nonceHex = await this.rpc.call("eth_getTransactionCount", [address, "latest"]);
+            nonce = parseInt(nonceHex.replace(/^0x/, ""), 16) || 0;
+        }
+        catch (_) {
+            // ignore — default to 0
+        }
+        try {
+            const chainIdHex = await this.rpc.call("eth_chainId", []);
+            chainId = parseInt(chainIdHex.replace(/^0x/, ""), 16) || 1337;
+        }
+        catch (_) {
+            // ignore — default to 1337
+        }
+        return { nonce, chainId };
     }
     /**
      * Open a micropayment channel for streaming payments.
@@ -83,4 +241,27 @@ class SettlementClient {
     }
 }
 exports.SettlementClient = SettlementClient;
+function hexToBytes(hex) {
+    const clean = hex.replace(/^0x/, "");
+    if (clean.length % 2 !== 0) {
+        throw new Error(`invalid hex string (odd length): ${hex}`);
+    }
+    const bytes = new Uint8Array(clean.length / 2);
+    for (let i = 0; i < bytes.length; i++) {
+        bytes[i] = parseInt(clean.substring(i * 2, i * 2 + 2), 16);
+    }
+    return bytes;
+}
+function bytesToHex(bytes) {
+    return Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+}
+function parseEscrowId(s) {
+    const bytes = hexToBytes(s);
+    if (bytes.length !== 32) {
+        throw new Error(`escrow_id must be 32 bytes, got ${bytes.length}`);
+    }
+    return bytes;
+}
 //# sourceMappingURL=settlement.js.map

package/dist/settlement.js.map

@@ -1 +1 @@
-{"version":3,"file":"settlement.js","sourceRoot":"","sources":["../src/settlement.ts"],"names":[],"mappings":";;;AAGA;;;GAGG;AACH,MAAa,gBAAgB;IACP;IAApB,YAAoB,GAAc;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAEtC;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,OAAyB;QACpC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAoB,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAA2B,sBAAsB,EAAE;YACrE,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,MAAc,EACd,KAAa,EACb,UAAkB;QAElB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAS,qBAAqB,EAAE;YAClD;gBACE,KAAK;gBACL,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzB,KAAK;gBACL,UAAU;aACX;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,KAAc;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAS,sBAAsB,EAAE;YACnD,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,OAAe;QACrD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAS,2BAA2B,EAAE;YACxD;gBACE,KAAK;gBACL,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;aAC5B;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACjD,EAAE,UAAU,EAAE,SAAS,EAAE;SAC1B,CAAC,CAAC;IACL,CAAC;CACF;AApFD,4CAoFC"}
+{"version":3,"file":"settlement.js","sourceRoot":"","sources":["../src/settlement.ts"],"names":[],"mappings":";;;AAGA;;;GAGG;AACH,MAAa,gBAAgB;IACP;IAApB,YAAoB,GAAc;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAEtC;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,OAAyB;QACpC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAoB,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAA2B,sBAAsB,EAAE;YACrE,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,KAAa,EACb,MAAc,EACd,KAAa,EACb,SAAiB,EACjB,iBAAyB;QAEzB,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;YAC3B,QAAQ,iBAAiB,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxC,KAAK,SAAS;oBACZ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBAC7B,KAAK,UAAU,CAAC;gBAChB,KAAK,oBAAoB;oBACvB,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBACvC,KAAK,UAAU,CAAC;gBAChB,KAAK,oBAAoB;oBACvB,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBACvC,KAAK,MAAM,CAAC;gBACZ,KAAK,iBAAiB;oBACpB,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;gBACpC,KAAK,UAAU,CAAC;gBAChB,KAAK,oBAAoB;oBACvB,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBACvC,KAAK,QAAQ;oBACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACtC;oBACE,MAAM,IAAI,KAAK,CACb,kCAAkC,iBAAiB,uDAAuD,CAC3G,CAAC;YACN,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE;gBACJ,KAAK;gBACL,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzB,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC;gBAC7B,kBAAkB,EAAE,cAAc;aACnC;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAM,+BAA+B,EAAE;YACvE;gBACE,IAAI,EAAE,KAAK;gBACX,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,MAAM;gBACjB,SAAS,EAAE,aAAa;gBACxB,KAAK;gBACL,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,MAAM;aAChB;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,MAAM,KAAK,QAAQ;YAC/B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACxD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,aAAa,CACjB,KAAa,EACb,QAAgB,EAChB,KAAc;QAEd,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,KAAK;YACtB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE;gBACJ,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;gBACpC,KAAK,EAAE;oBACL,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,UAAU;oBACtB,UAAU,EAAE,EAAE;iBACf;aACF;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAM,+BAA+B,EAAE;YACvE;gBACE,IAAI,EAAE,KAAK;gBACX,EAAE,EAAE,oEAAoE;gBACxE,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,MAAM;gBACjB,SAAS,EAAE,aAAa;gBACxB,KAAK;gBACL,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,MAAM;aAChB;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,MAAM,KAAK,QAAQ;YAC/B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,QAAgB;QAEhB,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE9C,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;SAC/C,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAM,+BAA+B,EAAE;YACvE;gBACE,IAAI,EAAE,KAAK;gBACX,EAAE,EAAE,oEAAoE;gBACxE,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,MAAM;gBACjB,SAAS,EAAE,aAAa;gBACxB,KAAK;gBACL,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,MAAM;aAChB;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,MAAM,KAAK,QAAQ;YAC/B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACxD,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAa;QACpC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAQ,2BAA2B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAa;QACpC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAQ,2BAA2B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,kEAAkE;IAC1D,KAAK,CAAC,oBAAoB,CAChC,OAAe;QAEf,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAClC,yBAAyB,EACzB,CAAC,OAAO,EAAE,QAAQ,CAAC,CACpB,CAAC;YACF,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,wBAAwB;QAC1B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAS,aAAa,EAAE,EAAE,CAAC,CAAC;YAClE,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;QAChE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,2BAA2B;QAC7B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,OAAe;QACrD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAS,2BAA2B,EAAE;YACxD;gBACE,KAAK;gBACL,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;aAC5B;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACjD,EAAE,UAAU,EAAE,SAAS,EAAE;SAC1B,CAAC,CAAC;IACL,CAAC;CACF;AA9QD,4CA8QC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}