tenzro-wallet 0.1.0

package/dist/ports/adapters/tenzro-identity-adapter.d.ts

@@ -0,0 +1,44 @@
+/**
+ * TenzroIdentityAdapter — wraps the SDK's `IdentityClient.resolveDidDocument`
+ * and exposes the narrow `TenzroIdentityPort` the kernel uses.
+ *
+ * Mapping `DidDocument` → tenzro-native address:
+ *   - Find the verification method whose key is tagged for the tenzro-native
+ *     surface. The DID Document carries a list of `verificationMethod`
+ *     entries; the one we want has a controller key suitable for native
+ *     signing (Ed25519, the canonical scheme for tenzro-native per
+ *     `SurfaceKey`).
+ *   - Decode `publicKeyMultibase` (multibase prefix `z` → base58btc) to raw
+ *     public-key bytes.
+ *   - Base58-encode those bytes — that *is* the Tenzro address (per the
+ *     SDK's `Address = Base58-encoded` convention).
+ *
+ * What's NOT here: per-surface address resolution for EVM/SVM/Canton.
+ * The current kernel only needs tenzro-native recipient resolution because
+ * that's the only surface that accepts TDIP recipients today; EVM/SVM
+ * recipients arrive as raw addresses, Canton as raw partyId. Extending
+ * to full surface-aware resolution lands when M4 adds Canton-via-DID.
+ */
+import type { TdipDid } from '../../types/identity.js';
+import type { TenzroIdentityPort } from '../tenzro-identity.js';
+/**
+ * The slice of `IdentityClient` the adapter touches. Listed explicitly so
+ * tests can inject a hand-rolled object. Mirrors the pattern used by
+ * `TenzroSdkAdapter` / `TenzroClientLike`.
+ */
+export interface IdentityClientLike {
+    resolveDidDocument(did: string): Promise<{
+        verificationMethod: ReadonlyArray<{
+            id: string;
+            type: string;
+            controller: string;
+            publicKeyMultibase?: string;
+        }>;
+    }>;
+}
+export declare class TenzroIdentityAdapter implements TenzroIdentityPort {
+    private readonly client;
+    constructor(client: IdentityClientLike);
+    resolveTenzroAddress(did: TdipDid): Promise<string | undefined>;
+}
+//# sourceMappingURL=tenzro-identity-adapter.d.ts.map

package/dist/ports/adapters/tenzro-identity-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenzro-identity-adapter.d.ts","sourceRoot":"","sources":["../../../src/ports/adapters/tenzro-identity-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QACvC,kBAAkB,EAAE,aAAa,CAAC;YAChC,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,UAAU,EAAE,MAAM,CAAC;YACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;SAC7B,CAAC,CAAC;KACJ,CAAC,CAAC;CACJ;AAED,qBAAa,qBAAsB,YAAW,kBAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,kBAAkB;IAEjD,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAatE"}

package/dist/ports/adapters/tenzro-identity-adapter.js

@@ -0,0 +1,60 @@
+/**
+ * TenzroIdentityAdapter — wraps the SDK's `IdentityClient.resolveDidDocument`
+ * and exposes the narrow `TenzroIdentityPort` the kernel uses.
+ *
+ * Mapping `DidDocument` → tenzro-native address:
+ *   - Find the verification method whose key is tagged for the tenzro-native
+ *     surface. The DID Document carries a list of `verificationMethod`
+ *     entries; the one we want has a controller key suitable for native
+ *     signing (Ed25519, the canonical scheme for tenzro-native per
+ *     `SurfaceKey`).
+ *   - Decode `publicKeyMultibase` (multibase prefix `z` → base58btc) to raw
+ *     public-key bytes.
+ *   - Base58-encode those bytes — that *is* the Tenzro address (per the
+ *     SDK's `Address = Base58-encoded` convention).
+ *
+ * What's NOT here: per-surface address resolution for EVM/SVM/Canton.
+ * The current kernel only needs tenzro-native recipient resolution because
+ * that's the only surface that accepts TDIP recipients today; EVM/SVM
+ * recipients arrive as raw addresses, Canton as raw partyId. Extending
+ * to full surface-aware resolution lands when M4 adds Canton-via-DID.
+ */
+import { base58Decode, base58Encode } from "../../crypto/solana.js";
+export class TenzroIdentityAdapter {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async resolveTenzroAddress(did) {
+        const doc = await this.client.resolveDidDocument(did);
+        // Pick the first Ed25519 verification method — that's the tenzro-native
+        // signing key. The W3C type tag for Ed25519 is `Ed25519VerificationKey2020`
+        // (or the older `Ed25519VerificationKey2018`); accept both since the
+        // node-side serialization isn't pinned in the SDK.
+        const vm = doc.verificationMethod.find((m) => m.type === 'Ed25519VerificationKey2020' || m.type === 'Ed25519VerificationKey2018');
+        if (!vm || !vm.publicKeyMultibase)
+            return undefined;
+        const pubkey = decodeMultibase(vm.publicKeyMultibase);
+        return base58Encode(pubkey);
+    }
+}
+/**
+ * Decode a multibase string to raw bytes. Multibase prefixes the encoded
+ * string with a single character identifying the base; `z` is base58btc,
+ * which is what Tenzro / W3C DID v1 use for Ed25519 keys.
+ *
+ * Spec: https://github.com/multiformats/multibase
+ */
+function decodeMultibase(s) {
+    if (s.length === 0)
+        throw new Error('multibase: empty input');
+    const prefix = s[0];
+    const body = s.slice(1);
+    switch (prefix) {
+        case 'z':
+            return base58Decode(body);
+        default:
+            throw new Error(`multibase: unsupported prefix '${prefix}' (expected 'z')`);
+    }
+}
+//# sourceMappingURL=tenzro-identity-adapter.js.map

package/dist/ports/adapters/tenzro-identity-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenzro-identity-adapter.js","sourceRoot":"","sources":["../../../src/ports/adapters/tenzro-identity-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAoBpE,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,MAA0B;QAA1B,WAAM,GAAN,MAAM,CAAoB;IAAG,CAAC;IAE3D,KAAK,CAAC,oBAAoB,CAAC,GAAY;QACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACtD,wEAAwE;QACxE,4EAA4E;QAC5E,qEAAqE;QACrE,mDAAmD;QACnD,MAAM,EAAE,GAAG,GAAG,CAAC,kBAAkB,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,4BAA4B,IAAI,CAAC,CAAC,IAAI,KAAK,4BAA4B,CAC1F,CAAC;QACF,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,kBAAkB;YAAE,OAAO,SAAS,CAAC;QACpD,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;QACtD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B;YACE,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,kBAAkB,CAAC,CAAC;IAChF,CAAC;AACH,CAAC"}

package/dist/ports/adapters/tenzro-sdk-adapter.d.ts

@@ -0,0 +1,86 @@
+/**
+ * TenzroSdkAdapter — the only kernel file that imports from `tenzro-sdk`.
+ *
+ * Wraps a `TenzroClient` (or any object with the same shape — useful when
+ * tests want to swap a partial fake) and exposes the narrow `TenzroRpcPort`
+ * surface the kernel actually uses. If the SDK's shape changes, this is the
+ * single file that breaks; the rest of the kernel stays put.
+ *
+ * Two construction paths:
+ *
+ *  1. **Direct fetch transport** — `fromClient(new TenzroClient(config))`
+ *     is the M2 path: the kernel/host owns the bearer JWT + DPoP proof and
+ *     the SDK's default `RpcClient` reads them from ambient env (`rpc.ts`).
+ *
+ *  2. **Injected EIP-1193 transport** — `fromInjected({rdns, timeoutMs})`
+ *     is the M6 path: a dApp page loads, discovers `window.tenzro` via
+ *     EIP-6963, and routes every `client.rpc.call(...)` through
+ *     `provider.request(...)` so the extension owns auth + user
+ *     confirmation. The SDK's `TenzroClient.fromInjected()` does the
+ *     discovery + transport wiring for us.
+ */
+import { type TenzroClient as SdkTenzroClient, type TenzroConfig, TenzroNotInstalledError } from 'tenzro-sdk';
+import type { TenzroRpcPort, TenzroSendArgs, TenzroTxStatus } from '../tenzro-rpc.js';
+/**
+ * Just the slice of `TenzroClient` the adapter touches. Listed explicitly so
+ * tests can inject a hand-rolled object instead of the full SDK class.
+ */
+export interface TenzroClientLike {
+    getNonce(address: string): Promise<number>;
+    getChainId(): Promise<number>;
+    getFinalizedBlock(): Promise<number>;
+    getTransaction(hash: string): Promise<{
+        hash: string;
+        blockHeight?: number;
+    } | null>;
+    sendTransaction(params: {
+        from: string;
+        to: string;
+        value: bigint;
+        gas_limit?: number;
+        gas_price?: number;
+        nonce?: number;
+        chain_id?: number;
+    }): Promise<string>;
+}
+export declare class TenzroSdkAdapter implements TenzroRpcPort {
+    private readonly client;
+    constructor(client: TenzroClientLike);
+    /** Construct from a real `TenzroClient`. The cast is safe because
+     *  `TenzroClient` already implements `TenzroClientLike`. */
+    static fromClient(client: SdkTenzroClient): TenzroSdkAdapter;
+    /**
+     * Construct an adapter that routes RPCs through an injected EIP-1193
+     * provider (`window.tenzro`) discovered via EIP-6963.
+     *
+     * Resolves only after the extension announces a provider matching
+     * `rdns` (defaults to `TENZRO_PROVIDER_RDNS`). Rejects with the SDK's
+     * `TenzroNotInstalledError` if no announcement arrives within
+     * `timeoutMs` (default 3000) — dApps should catch that and render an
+     * "Install Tenzro" CTA.
+     *
+     * The SDK's `fromInjected` wires `Eip1193Transport` internally, so
+     * neither this adapter nor the rest of the kernel needs to know that
+     * the underlying transport is a `provider.request(...)` call rather
+     * than a `fetch` to `rpc.tenzro.network`.
+     *
+     * Re-exports `TenzroNotInstalledError` so callers don't need a second
+     * dependency on `tenzro-sdk` purely to type the catch arm.
+     */
+    static fromInjected(options?: {
+        config?: TenzroConfig;
+        timeoutMs?: number;
+        rdns?: string;
+    }): Promise<TenzroSdkAdapter>;
+    getNonce(address: string): Promise<number>;
+    getChainId(): Promise<number>;
+    sendTransaction(args: TenzroSendArgs): Promise<string>;
+    getTransaction(hash: string): Promise<TenzroTxStatus | null>;
+}
+/**
+ * Re-export so kernel consumers can `instanceof`-check the not-installed
+ * case without taking a direct dependency on `tenzro-sdk`. The kernel's
+ * adapter layer is the only place SDK types should leak in from.
+ */
+export { TenzroNotInstalledError };
+//# sourceMappingURL=tenzro-sdk-adapter.d.ts.map

package/dist/ports/adapters/tenzro-sdk-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenzro-sdk-adapter.d.ts","sourceRoot":"","sources":["../../../src/ports/adapters/tenzro-sdk-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,KAAK,YAAY,IAAI,eAAe,EAEpC,KAAK,YAAY,EACjB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEtF;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,IAAI,CAAC,CAAC;IACV,eAAe,CAAC,MAAM,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrB;AAED,qBAAa,gBAAiB,YAAW,aAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,gBAAgB;IAErD;gEAC4D;IAC5D,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,gBAAgB;IAI5D;;;;;;;;;;;;;;;;;OAiBG;WACU,YAAY,CAAC,OAAO,CAAC,EAAE;QAClC,MAAM,CAAC,EAAE,YAAY,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAK7B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI1C,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAIvB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IActD,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;CAcnE;AAED;;;;GAIG;AACH,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/ports/adapters/tenzro-sdk-adapter.js

@@ -0,0 +1,100 @@
+/**
+ * TenzroSdkAdapter — the only kernel file that imports from `tenzro-sdk`.
+ *
+ * Wraps a `TenzroClient` (or any object with the same shape — useful when
+ * tests want to swap a partial fake) and exposes the narrow `TenzroRpcPort`
+ * surface the kernel actually uses. If the SDK's shape changes, this is the
+ * single file that breaks; the rest of the kernel stays put.
+ *
+ * Two construction paths:
+ *
+ *  1. **Direct fetch transport** — `fromClient(new TenzroClient(config))`
+ *     is the M2 path: the kernel/host owns the bearer JWT + DPoP proof and
+ *     the SDK's default `RpcClient` reads them from ambient env (`rpc.ts`).
+ *
+ *  2. **Injected EIP-1193 transport** — `fromInjected({rdns, timeoutMs})`
+ *     is the M6 path: a dApp page loads, discovers `window.tenzro` via
+ *     EIP-6963, and routes every `client.rpc.call(...)` through
+ *     `provider.request(...)` so the extension owns auth + user
+ *     confirmation. The SDK's `TenzroClient.fromInjected()` does the
+ *     discovery + transport wiring for us.
+ */
+import { TenzroClient, TenzroNotInstalledError, } from 'tenzro-sdk';
+export class TenzroSdkAdapter {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    /** Construct from a real `TenzroClient`. The cast is safe because
+     *  `TenzroClient` already implements `TenzroClientLike`. */
+    static fromClient(client) {
+        return new TenzroSdkAdapter(client);
+    }
+    /**
+     * Construct an adapter that routes RPCs through an injected EIP-1193
+     * provider (`window.tenzro`) discovered via EIP-6963.
+     *
+     * Resolves only after the extension announces a provider matching
+     * `rdns` (defaults to `TENZRO_PROVIDER_RDNS`). Rejects with the SDK's
+     * `TenzroNotInstalledError` if no announcement arrives within
+     * `timeoutMs` (default 3000) — dApps should catch that and render an
+     * "Install Tenzro" CTA.
+     *
+     * The SDK's `fromInjected` wires `Eip1193Transport` internally, so
+     * neither this adapter nor the rest of the kernel needs to know that
+     * the underlying transport is a `provider.request(...)` call rather
+     * than a `fetch` to `rpc.tenzro.network`.
+     *
+     * Re-exports `TenzroNotInstalledError` so callers don't need a second
+     * dependency on `tenzro-sdk` purely to type the catch arm.
+     */
+    static async fromInjected(options) {
+        const client = await TenzroClient.fromInjected(options);
+        return TenzroSdkAdapter.fromClient(client);
+    }
+    getNonce(address) {
+        return this.client.getNonce(address);
+    }
+    getChainId() {
+        return this.client.getChainId();
+    }
+    async sendTransaction(args) {
+        // Map our camelCase port shape to the SDK's snake_case wire shape.
+        const params = {
+            from: args.from,
+            to: args.to,
+            value: args.value,
+        };
+        if (args.gasLimit !== undefined)
+            params.gas_limit = args.gasLimit;
+        if (args.gasPrice !== undefined)
+            params.gas_price = args.gasPrice;
+        if (args.nonce !== undefined)
+            params.nonce = args.nonce;
+        if (args.chainId !== undefined)
+            params.chain_id = args.chainId;
+        return this.client.sendTransaction(params);
+    }
+    async getTransaction(hash) {
+        const tx = await this.client.getTransaction(hash);
+        if (tx === null)
+            return null;
+        // The SDK's `Transaction` has no explicit status field; we infer:
+        //  - `blockHeight` unset → still in mempool → 'pending'
+        //  - `blockHeight` set, ≤ finalized → 'finalized'
+        //  - `blockHeight` set, > finalized → 'included'
+        if (tx.blockHeight === undefined) {
+            return { hash: tx.hash, status: 'pending' };
+        }
+        const finalized = await this.client.getFinalizedBlock();
+        const status = tx.blockHeight <= finalized ? 'finalized' : 'included';
+        return { hash: tx.hash, status, blockHeight: tx.blockHeight };
+    }
+}
+/**
+ * Re-export so kernel consumers can `instanceof`-check the not-installed
+ * case without taking a direct dependency on `tenzro-sdk`. The kernel's
+ * adapter layer is the only place SDK types should leak in from.
+ */
+export { TenzroNotInstalledError };
+//# sourceMappingURL=tenzro-sdk-adapter.js.map

package/dist/ports/adapters/tenzro-sdk-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenzro-sdk-adapter.js","sourceRoot":"","sources":["../../../src/ports/adapters/tenzro-sdk-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAEL,YAAY,EAEZ,uBAAuB,GACxB,MAAM,YAAY,CAAC;AA0BpB,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;IAAG,CAAC;IAEzD;gEAC4D;IAC5D,MAAM,CAAC,UAAU,CAAC,MAAuB;QACvC,OAAO,IAAI,gBAAgB,CAAC,MAAqC,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,OAIzB;QACC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAoB;QACxC,mEAAmE;QACnE,MAAM,MAAM,GAAuD;YACjE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7B,kEAAkE;QAClE,wDAAwD;QACxD,kDAAkD;QAClD,iDAAiD;QACjD,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACxD,MAAM,MAAM,GAA6B,EAAE,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;QAChG,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IAChE,CAAC;CACF;AAED;;;;GAIG;AACH,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/ports/agent/acp.d.ts

@@ -0,0 +1,66 @@
+/**
+ * AcpPort — buyer-side OpenAI Agentic Commerce Protocol (ACP).
+ *
+ * ACP went live with ChatGPT Instant Checkout on 2026-02-16 (Etsy /
+ * Shopify / PayPal). Per `reference_agentic_payments_2026.md`, Tenzro's
+ * adopt-don't-rebuild stance is: implement the *buyer* side so a Tenzro
+ * agent can complete a ChatGPT-initiated purchase.
+ *
+ * The wallet is the buyer agent. It receives an ACP `CheckoutSession`
+ * from the merchant (typically through ChatGPT), confirms with the user
+ * via the standard consent flow, and submits a `CheckoutAuthorization`
+ * back. Settlement happens on the merchant side; the wallet does not
+ * transfer funds directly through ACP — it provides authorisation that
+ * the merchant redeems via their PSP (Stripe is the typical processor).
+ *
+ * SDK status (2026-05): `tenzro-sdk` does NOT yet expose an ACP client.
+ * This port is declared so the kernel surface is stable; `AcpSdkAdapter`
+ * lands when the SDK ships `AcpClient` (tracked as DESIGN.md §11 SDK gap).
+ *
+ * Wire shape follows the public ACP v1 spec:
+ *   • CheckoutSession: { id, merchant, line_items[], total, currency,
+ *                        psp, expires_at }
+ *   • CheckoutAuthorization: { session_id, buyer, payment_method,
+ *                              authorisation_proof, signature }
+ */
+export interface AcpLineItem {
+    readonly sku: string;
+    readonly description: string;
+    readonly quantity: number;
+    readonly unitPrice: string;
+}
+export interface AcpCheckoutSession {
+    readonly sessionId: string;
+    readonly merchant: string;
+    readonly lineItems: readonly AcpLineItem[];
+    readonly total: string;
+    readonly currency: string;
+    /** Payment service provider (e.g. "stripe", "adyen"). */
+    readonly psp: string;
+    readonly expiresAt: number;
+}
+export interface AcpAuthorizeRequest {
+    readonly sessionId: string;
+    /** Buyer DID — the agent / human authorising the purchase. */
+    readonly buyer: string;
+    /**
+     * Payment method handle issued by the buyer's PSP. ACP carries the
+     * handle, not raw card data.
+     */
+    readonly paymentMethod: string;
+}
+export interface AcpAuthorizationResult {
+    readonly sessionId: string;
+    readonly authorizationId: string;
+    readonly status: 'authorised' | 'declined' | 'pending';
+    readonly reason?: string;
+}
+export interface AcpPort {
+    /** Fetch a checkout session by id (typically issued by the merchant). */
+    getSession(sessionId: string): Promise<AcpCheckoutSession>;
+    /** Authorise a checkout session. The wallet runs its consent flow first. */
+    authorize(req: AcpAuthorizeRequest): Promise<AcpAuthorizationResult>;
+    /** Cancel a session before authorisation. */
+    cancel(sessionId: string): Promise<void>;
+}
+//# sourceMappingURL=acp.d.ts.map

package/dist/ports/agent/acp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp.d.ts","sourceRoot":"","sources":["../../../src/ports/agent/acp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,WAAW,EAAE,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,yDAAyD;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACtB,yEAAyE;IACzE,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE3D,4EAA4E;IAC5E,SAAS,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAErE,6CAA6C;IAC7C,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C"}

package/dist/ports/agent/acp.js

@@ -0,0 +1,27 @@
+/**
+ * AcpPort — buyer-side OpenAI Agentic Commerce Protocol (ACP).
+ *
+ * ACP went live with ChatGPT Instant Checkout on 2026-02-16 (Etsy /
+ * Shopify / PayPal). Per `reference_agentic_payments_2026.md`, Tenzro's
+ * adopt-don't-rebuild stance is: implement the *buyer* side so a Tenzro
+ * agent can complete a ChatGPT-initiated purchase.
+ *
+ * The wallet is the buyer agent. It receives an ACP `CheckoutSession`
+ * from the merchant (typically through ChatGPT), confirms with the user
+ * via the standard consent flow, and submits a `CheckoutAuthorization`
+ * back. Settlement happens on the merchant side; the wallet does not
+ * transfer funds directly through ACP — it provides authorisation that
+ * the merchant redeems via their PSP (Stripe is the typical processor).
+ *
+ * SDK status (2026-05): `tenzro-sdk` does NOT yet expose an ACP client.
+ * This port is declared so the kernel surface is stable; `AcpSdkAdapter`
+ * lands when the SDK ships `AcpClient` (tracked as DESIGN.md §11 SDK gap).
+ *
+ * Wire shape follows the public ACP v1 spec:
+ *   • CheckoutSession: { id, merchant, line_items[], total, currency,
+ *                        psp, expires_at }
+ *   • CheckoutAuthorization: { session_id, buyer, payment_method,
+ *                              authorisation_proof, signature }
+ */
+export {};
+//# sourceMappingURL=acp.js.map

package/dist/ports/agent/acp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp.js","sourceRoot":"","sources":["../../../src/ports/agent/acp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG"}

package/dist/ports/agent/adapters/acp-adapter.d.ts

@@ -0,0 +1,67 @@
+/**
+ * AcpSdkAdapter — buyer-side OpenAI Agentic Commerce Protocol (ACP) wrapper.
+ *
+ * **SDK status (2026-05):** `tenzro-sdk` does NOT yet expose an `AcpClient`.
+ * This adapter therefore depends on a structural `AcpClientLike` interface
+ * the kernel defines itself, mirroring the public ACP v1 wire shape. When
+ * the SDK ships `AcpClient`, swap `AcpClientLike` for the SDK type and
+ * delete the structural definition — the wire mapping below is already
+ * the one we'll need.
+ *
+ * Wire shape pinned to the public ACP spec:
+ *   GET  /sessions/{id}                  → AcpCheckoutSession (snake_case)
+ *   POST /sessions/{id}/authorize        → AcpAuthorizationResult
+ *   POST /sessions/{id}/cancel           → 204
+ *
+ * Field-mapping rules, identical to the rest of the agent-port adapter set:
+ *   - snake_case on the wire ↔ camelCase on the port.
+ *   - decimal-string amounts on the wire (ACP carries no bigint over the
+ *     wire — all amounts are "1234.56" strings — so we forward verbatim).
+ *   - missing optional fields use the conditional-spread idiom required
+ *     by the kernel's `exactOptionalPropertyTypes: true`.
+ */
+import type { AcpAuthorizationResult, AcpAuthorizeRequest, AcpCheckoutSession, AcpPort } from '../acp.js';
+interface RawLineItem {
+    readonly sku: string;
+    readonly description: string;
+    readonly quantity: number;
+    readonly unit_price: string;
+}
+interface RawCheckoutSession {
+    readonly session_id: string;
+    readonly merchant: string;
+    readonly line_items: ReadonlyArray<RawLineItem>;
+    readonly total: string;
+    readonly currency: string;
+    readonly psp: string;
+    readonly expires_at: number;
+}
+interface RawAuthorizationResult {
+    readonly session_id: string;
+    readonly authorization_id: string;
+    readonly status: 'authorised' | 'declined' | 'pending';
+    readonly reason?: string;
+}
+/**
+ * Structural shape the adapter expects from the SDK client. When `tenzro-sdk`
+ * exposes `AcpClient`, this becomes `import type { AcpClient } from 'tenzro-sdk'`
+ * and the structural type goes away.
+ */
+export interface AcpClientLike {
+    getSession(sessionId: string): Promise<RawCheckoutSession>;
+    authorize(req: {
+        session_id: string;
+        buyer: string;
+        payment_method: string;
+    }): Promise<RawAuthorizationResult>;
+    cancel(sessionId: string): Promise<void>;
+}
+export declare class AcpSdkAdapter implements AcpPort {
+    private readonly client;
+    constructor(client: AcpClientLike);
+    getSession(sessionId: string): Promise<AcpCheckoutSession>;
+    authorize(req: AcpAuthorizeRequest): Promise<AcpAuthorizationResult>;
+    cancel(sessionId: string): Promise<void>;
+}
+export {};
+//# sourceMappingURL=acp-adapter.d.ts.map

package/dist/ports/agent/adapters/acp-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-adapter.d.ts","sourceRoot":"","sources":["../../../../src/ports/agent/adapters/acp-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAElB,OAAO,EACR,MAAM,WAAW,CAAC;AAEnB,UAAU,WAAW;IACnB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC3D,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAgCD,qBAAa,aAAc,YAAW,OAAO;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAE5C,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI1D,SAAS,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IASpE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C"}

package/dist/ports/agent/adapters/acp-adapter.js

@@ -0,0 +1,70 @@
+/**
+ * AcpSdkAdapter — buyer-side OpenAI Agentic Commerce Protocol (ACP) wrapper.
+ *
+ * **SDK status (2026-05):** `tenzro-sdk` does NOT yet expose an `AcpClient`.
+ * This adapter therefore depends on a structural `AcpClientLike` interface
+ * the kernel defines itself, mirroring the public ACP v1 wire shape. When
+ * the SDK ships `AcpClient`, swap `AcpClientLike` for the SDK type and
+ * delete the structural definition — the wire mapping below is already
+ * the one we'll need.
+ *
+ * Wire shape pinned to the public ACP spec:
+ *   GET  /sessions/{id}                  → AcpCheckoutSession (snake_case)
+ *   POST /sessions/{id}/authorize        → AcpAuthorizationResult
+ *   POST /sessions/{id}/cancel           → 204
+ *
+ * Field-mapping rules, identical to the rest of the agent-port adapter set:
+ *   - snake_case on the wire ↔ camelCase on the port.
+ *   - decimal-string amounts on the wire (ACP carries no bigint over the
+ *     wire — all amounts are "1234.56" strings — so we forward verbatim).
+ *   - missing optional fields use the conditional-spread idiom required
+ *     by the kernel's `exactOptionalPropertyTypes: true`.
+ */
+function mapLineItem(raw) {
+    return {
+        sku: raw.sku,
+        description: raw.description,
+        quantity: raw.quantity,
+        unitPrice: raw.unit_price,
+    };
+}
+function mapSession(raw) {
+    return {
+        sessionId: raw.session_id,
+        merchant: raw.merchant,
+        lineItems: raw.line_items.map(mapLineItem),
+        total: raw.total,
+        currency: raw.currency,
+        psp: raw.psp,
+        expiresAt: raw.expires_at,
+    };
+}
+function mapAuthorizationResult(raw) {
+    return {
+        sessionId: raw.session_id,
+        authorizationId: raw.authorization_id,
+        status: raw.status,
+        ...(raw.reason !== undefined ? { reason: raw.reason } : {}),
+    };
+}
+export class AcpSdkAdapter {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async getSession(sessionId) {
+        return mapSession(await this.client.getSession(sessionId));
+    }
+    async authorize(req) {
+        const raw = await this.client.authorize({
+            session_id: req.sessionId,
+            buyer: req.buyer,
+            payment_method: req.paymentMethod,
+        });
+        return mapAuthorizationResult(raw);
+    }
+    async cancel(sessionId) {
+        await this.client.cancel(sessionId);
+    }
+}
+//# sourceMappingURL=acp-adapter.js.map

package/dist/ports/agent/adapters/acp-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-adapter.js","sourceRoot":"","sources":["../../../../src/ports/agent/adapters/acp-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAiDH,SAAS,WAAW,CAAC,GAAgB;IACnC,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;QAC1C,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAA2B;IACzD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAEtD,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,OAAO,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAwB;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YACtC,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,cAAc,EAAE,GAAG,CAAC,aAAa;SAClC,CAAC,CAAC;QACH,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/ports/agent/adapters/agent-bond-adapter.d.ts

@@ -0,0 +1,31 @@
+/**
+ * AgentBondSdkAdapter — wraps `BondClient` so the kernel can drive the
+ * Agent-Swarm Spec 9 bond primitive without owning the typed-tx encoding.
+ *
+ * Wire:
+ *   post     → BondClient.postAgentBond(controller, agentDid, controllerDid, amount)
+ *   increase → BondClient.increaseAgentBond(controller, agentDid, amount)
+ *   withdraw → BondClient.withdrawAgentBond(controller, agentDid)
+ *   get      → BondClient.getAgentBond(bondId)
+ *   list     → BondClient.listAgentBondsByController(controllerDid)
+ *
+ * The SDK already handles `tenzro_signAndSendTransaction` routing for
+ * hybrid (server-side MPC) signing, so we forward verbatim.
+ */
+import type { BondClient } from 'tenzro-sdk';
+import type { AgentBondPort, AgentBondRecord, IncreaseAgentBondRequest, PostAgentBondRequest, WithdrawAgentBondRequest } from '../agent-bond.js';
+/**
+ * Slice of `BondClient` the adapter relies on, anchored to the SDK via
+ * `Pick<>` so a method-rename in `tenzro-sdk` breaks the build.
+ */
+export type BondClientLike = Pick<BondClient, 'postAgentBond' | 'increaseAgentBond' | 'withdrawAgentBond' | 'getAgentBond' | 'listAgentBondsByController'>;
+export declare class AgentBondSdkAdapter implements AgentBondPort {
+    private readonly client;
+    constructor(client: BondClientLike);
+    post(req: PostAgentBondRequest): Promise<string>;
+    increase(req: IncreaseAgentBondRequest): Promise<string>;
+    withdraw(req: WithdrawAgentBondRequest): Promise<string>;
+    get(bondId: string): Promise<AgentBondRecord | null>;
+    listByController(controllerDid: string): Promise<AgentBondRecord[]>;
+}
+//# sourceMappingURL=agent-bond-adapter.d.ts.map

package/dist/ports/agent/adapters/agent-bond-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-bond-adapter.d.ts","sourceRoot":"","sources":["../../../../src/ports/agent/adapters/agent-bond-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EAEf,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,kBAAkB,CAAC;AAE1B;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,UAAU,EACR,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,cAAc,GACd,4BAA4B,CAC/B,CAAC;AAsBF,qBAAa,mBAAoB,YAAW,aAAa;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,cAAc;IAEnD,IAAI,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIhD,QAAQ,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIxD,QAAQ,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAKpD,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;CAa1E"}