twzrd-x402-gate 0.8.1 → 0.8.3

package/README.md

@@ -2,9 +2,58 @@
 
 **TWZRD is the default `onBeforePaymentCreation` policy engine for official x402 clients.**
 
-Agent-side firewall: after the client selects the exact payment requirement and **before**
-payment payload creation / wallet signing — free preflight + merchant_card wash refuse.
-Chain-neutral envelope; **Solana-deep** reputation only (Base/EVM = explicit `unknown`).
+**Core product (buyer gate):** after the client selects the exact payment requirement and
+**before** payment payload creation / wallet signing — free preflight + merchant_card wash
+refuse. Protects the **payer** from a risky **merchant** (`payTo`). Chain-neutral envelope;
+**Solana-deep** reputation only (Base/EVM = explicit `unknown`).
+
+**Optional (0.8.1):** a resource-server settle hook so merchants can apply **customer policy**
+before they settle and serve (abuse, sanctions, bots, “don’t serve this payer”). Not an equal
+mirror of the buyer problem — settled USDC is final; wash resistance is mainly TWZRD scoring.
+
+## Seller settle guard (`onBeforeSettle`) — optional 0.8.1
+
+Resource servers can screen the **payer** before *they* settle an inbound payment and serve
+the resource. Use for merchant policy (abuse / sanctions / bots / customer selection). TWZRD is
+not in the settlement path: advisory + fail-open by default. Attaches to official
+`x402ResourceServer.onBeforeSettle` (inherited by `@x402/express|hono|next|fastify` and Python x402).
+
+Do **not** treat this as “protect merchant reputation by rejecting USDC” — anyone can still
+transfer on-chain. Wash/sybil edges are primarily discounted in TWZRD scoring, not forced
+revenue refusal.
+
+```bash
+npm install twzrd-x402-gate@0.8.2
+```
+
+```typescript
+import { x402ResourceServer } from "@x402/core/server";
+import { createTwzrdSettleGuard, twzrdPayerScreen } from "twzrd-x402-gate";
+
+const server = new x402ResourceServer(facilitator);
+server.onBeforeSettle(
+  createTwzrdSettleGuard({ screen: twzrdPayerScreen() }),
+);
+```
+
+**Defaults (fail-open / advisory):**
+
+| Behavior | Default |
+|----------|---------|
+| Abort settlement | `decision=block` **or** `wash_flagged=true` |
+| `warn` | **allowed** (continues) unless you set `abortOn.warn` |
+| Default screen | free `GET /v1/intel/merchant_card/{payer}` via `twzrdPayerScreen()` |
+| Screen/extract timeout | `timeoutMs: 3000` — on timeout, **continue** (fail-open) |
+| Unresolved payer / null screen / screen error | **continue** unless `failOpen: false` |
+| Paid `/v1/intel/trust` | **not** default — inject a custom `screen` if you want it |
+
+Payer identity prefers signed/encoded scheme fields (EIP-3009 `authorization.from`, Permit2
+`permit2Authorization.from`, exact-SVM `payload.transaction` via optional peer `@x402/svm`)
+over client-supplied loose aliases — so a spoofed `payload.payer` cannot bypass screening.
+
+Offline demo: `npx tsx examples/seller-settle-guard.ts`  
+Fixture-backed SVM extract tests live in `test/seller-hook.test.ts` +
+`test/fixtures/exact-svm-transfer-checked.ts`.
 
 
 ## Demonstrable refuse mechanism (free, fail-open, reproducible)
@@ -14,7 +63,7 @@ Chain-neutral envelope; **Solana-deep** reputation only (Base/EVM = explicit `un
 Install the published gate and run against wash fixtures:
 
 ```bash
-npm install twzrd-x402-gate@0.7.1
+npm install twzrd-x402-gate@0.8.2
 # from package root after install, or from a checkout:
 npm run wash-dogfood
 ```
@@ -34,7 +83,7 @@ Gate dogfood: `approved=false` `reason=twzrd_decision_block`, **USDC spent = 0**
 
 **Accurate paste line:**
 
-> Preflight returned decision=block on wash seller 7G73PL… / HuSiSpc… (preflight_id 378468 / 378469, wash_flagged=true). Gate approved=false reason=twzrd_decision_block. No USDC spent. No tx broadcast. Repro: `npm i twzrd-x402-gate@0.7.1 && npm run wash-dogfood` or gist above.
+> Preflight returned decision=block on wash seller 7G73PL… / HuSiSpc… (preflight_id 378468 / 378469, wash_flagged=true). Gate approved=false reason=twzrd_decision_block. No USDC spent. No tx broadcast. Repro: `npm i twzrd-x402-gate@0.8.1 && npm run wash-dogfood` or gist above.
 
 This is a **reproducible demonstration** that the free gate blocks known wash sellers with stamped `preflight_id`s and zero spend. It is **not** proof that external agents already default to this path at scale.
 
@@ -116,17 +165,27 @@ Canonical path for every agent that spends USDC on Solana x402:
 
 **Order note:** `onWarnUpsell` (points at paid `/trust`) fires on preflight `warn` **before** the merchant_card wash check. A wash-flagged seller that preflighted as `warn` may still get the upsell hook, then be refused on step 2.
 
-Dogfood:
+Dogfood (one public live proof path):
 - Free only (wash refuse): `npm run wash-dogfood` → [`examples/wash-refuse-dogfood.ts`](./examples/wash-refuse-dogfood.ts)
 - Official client + Path E hook (live Solana ≤$0.001): `npm run official-dogfood` → [`examples/official-x402-dogfood.ts`](./examples/official-x402-dogfood.ts). Needs `@x402/fetch` `@x402/svm` `@x402/core` `@solana/kit` `@scure/base` and a funded Solana key (`SVM_KEYPAIR_PATH` or `~/.agentcash/solana-wallet.json`). `--block` exercises hard `gateOnCanSpend` abort with $0 spend.
+- Multi-hook composition (amount cap then TWZRD, abort short-circuit) is proven offline against the real `x402Client` in `test/x402-official-compat.test.ts`.
+- Release identity: `CLIENT_VERSION` is read from `package.json` (single source of truth); `npm test` includes `version-identity`; `npm run pack-smoke` packs the tarball and checks the installed header.
 
 ## Install
 
 ```bash
-npm install twzrd-x402-gate@0.7.1
+npm install twzrd-x402-gate@0.8.2
 ```
 
-Current npm truth: check `npm view twzrd-x402-gate version` (do not pin stale **0.5.4**).
+Current npm truth: `0.8.2` (buyer gate + optional seller settle guard + payer-extract hardening).
+Check `npm view twzrd-x402-gate version` if in doubt (do not pin stale **0.5.4** / **0.7.1**).
+
+Optional settle guard (resource-server **payer** policy): see **Seller settle guard
+(`onBeforeSettle`) — optional 0.8.1** above. Do not confuse with facilitator
+`createOnBeforeSettleHook` in `@wzrd_sol/plugin-trustgate/facilitator` — that screens
+the **merchant/payTo** on a brokered settle (buyer-side counterparty check at the rail).
+
+Live card screen: `npx tsx examples/seller-settle-guard.ts --live <payerWallet>`
 
 ## TWZRD Payment Control (protocol-neutral authorization core)
 
@@ -299,6 +358,18 @@ Library: `import { safeFetch } from "twzrd-x402-gate/safe-fetch"`.
 
 ## Quickstart: `installTwzrdAutoGate` (default-on)
 
+Canonical entry point (design: `docs/strategy/install-autogate-design.md`). One name, three adapters:
+
+| Call | Adapter |
+|------|---------|
+| `installTwzrdAutoGate(payWrap, opts?)` | Fetch: guard raw fetch → pay client |
+| `installTwzrdAutoGate(x402Client, opts?)` | Official x402 `onBeforePaymentCreation` |
+| `installTwzrdAutoGate("mpp", opts)` | MPP `onChallenge` (returns handler) |
+
+Aliases: `installTwzrdX402ClientHook`, `createTwzrdMppOnChallenge` remain; docs prefer AutoGate.
+Kill switch: `TWZRD_GATE_ENABLED=false` or `TWZRD_AUTO_GATE=0`. Uninstall x402 installs with `uninstallTwzrdAutoGate(client)`.
+
+
 `installTwzrdAutoGate` is the one-liner form of "guard the raw fetch, then hand it to your
 x402 client." It takes a `payWrap` function — whatever composes your paying client on top of
 a fetch — and returns a fetch that's already gated: a blocked seller throws before your client
@@ -592,6 +663,16 @@ A 402 whose payment requirements yield **no identifiable seller wallet** (missin
 | `disabled` (`installTwzrdAutoGate` only) | `TWZRD_AUTO_GATE=0`/`false` | `false` | Bypass the guard entirely — `payWrap` gets the raw, unguarded fetch |
 | `attribution` | `TWZRD_ATTRIBUTION_INTEGRATION` + `TWZRD_ATTRIBUTION_RUN_ID` | — | Opt-in run attribution (see below) |
 
+## Gate adoption proof (no-spend harness)
+
+Deterministic install→transcript path for operators (no wallet, no USDC):
+
+```bash
+npm run adoption-proof -- --integration <YOUR_ID> --run-id <UUID>
+```
+
+Emits `twzrd.gate_adoption_transcript.v1` JSON: block path aborts with `signerInvocations: 0`, allow path emits decision, attribution headers stamped on mocked preflight. Full acceptance criteria (what counts as `EXTERNAL_RUN` vs dogfood): monorepo `docs/strategy/gate-adoption-operator-proof.md`.
+
 ## Run attribution (optional, for integration correlation)
 
 When you set `attribution`, the gate stamps **only the TWZRD preflight request** (never the
@@ -632,8 +713,10 @@ If you're composing `withTwzrdGuard` manually instead, pass the raw (non-paying)
 
 `GET /v1/intel/trust/{wallet}` is the **paid** ($0.05 USDC) deep-intel surface — not a gate.
 `POST /v1/intel/preflight` is the **free** `ReadinessCard` for the pre-spend decision.
-This package only ever calls the free preflight; you decide whether to proceed before any
-USDC leaves your wallet.
+The gate path only ever calls free endpoints — the preflight plus, by default
+(`refuseWashFlagged: true`), the free merchant_card wash check. Paid intel
+(`quickCheck`, `autoReceipt`) is opt-in and never runs implicitly; you decide
+whether to proceed before any USDC leaves your wallet.
 
 ## License
 

package/dist/adoption-proof.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Gate Adoption Proof Harness — deterministic, no-spend, package-local.
+ *
+ * Closes the install→transcript gap for operators who already installed
+ * installTwzrdX402ClientHook / installTwzrdAutoGate:
+ *   1) exact selectedRequirements reach the pre-sign hook
+ *   2) onDecision emits a verdict
+ *   3) block path aborts and never invokes a wallet/signer stub
+ *   4) attribution (integration + runId + client) is stamped on preflight only
+ *
+ * This harness is correlation / integration evidence. It is NOT EXTERNAL_RUN
+ * by itself (see docs/strategy/gate-adoption-operator-proof.md).
+ */
+import { type X402SelectedRequirements } from "./x402-client-hook.js";
+export declare const ADOPTION_TRANSCRIPT_SCHEMA: "twzrd.gate_adoption_transcript.v1";
+/** Fixture merchant pubkey (base58-shaped); not a live spend target. */
+export declare const ADOPTION_PROOF_SELLER = "sLJ4uneGcD1mg6hKtkLYsY5HCw1nJ8GpNAmbzBWPBgk";
+export declare const ADOPTION_PROOF_NETWORK = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
+export declare const ADOPTION_PROOF_RESOURCE = "https://merchant.example/twzrd-adoption-proof";
+export type GateAdoptionStepName = "block_path" | "allow_path";
+export type GateAdoptionStep = {
+    name: GateAdoptionStepName;
+    selectedRequirements: X402SelectedRequirements;
+    abort: boolean;
+    reason?: string;
+    decisionEmitted: boolean;
+    verdict: string;
+    approved: boolean;
+    /**
+     * payTo as reported by the hook's onDecision callback (hook-derived).
+     * Used to prove selectedRequirements reached the real hook path — not
+     * merely echoed from harness-local selectedRequirements.
+     */
+    hookPayTo?: string;
+    /**
+     * seller_wallet from the preflight JSON body the hook actually POSTed
+     * (hook-derived via mocked fetch recorder).
+     */
+    preflightSellerWallet?: string | null;
+    /** Count of wallet/signer stub invocations during this step (must be 0). */
+    signerInvocations: number;
+    /** Headers observed on the mocked preflight fetch for this step. */
+    preflightAttribution: {
+        integration: string | null;
+        runId: string | null;
+        client: string | null;
+    };
+};
+export type GateAdoptionAssertions = {
+    selectedRequirementReachedHook: boolean;
+    decisionEmitted: boolean;
+    blockedPathNeverInvokesSigner: boolean;
+    allowPathNeverInvokesSigner: boolean;
+    attributionSurfaced: boolean;
+};
+/**
+ * Lineage of this transcript.
+ * - dogfood: package harness, CI, or TWZRD-authored run
+ * - external_candidate: operator-supplied integration id (still needs server-side join for EXTERNAL_RUN)
+ */
+export type GateAdoptionLineage = "dogfood" | "external_candidate";
+export type GateAdoptionTranscript = {
+    schema: typeof ADOPTION_TRANSCRIPT_SCHEMA;
+    package: "twzrd-x402-gate";
+    packageVersion: string;
+    proofKind: "local_deterministic_harness";
+    mode: "no_spend";
+    integration: string;
+    runId: string;
+    lineage: GateAdoptionLineage;
+    clientHeader: string;
+    steps: GateAdoptionStep[];
+    assertions: GateAdoptionAssertions;
+    ok: boolean;
+    /**
+     * What this transcript is NOT. Operators must not treat package downloads,
+     * free preflight hits alone, or self-authored runIds as EXTERNAL_RUN.
+     */
+    notExternalRunProof: string[];
+    /** Human pointer to the acceptance contract. */
+    acceptanceDoc: "docs/strategy/gate-adoption-operator-proof.md";
+};
+export type RunGateAdoptionProofOptions = {
+    /** Stable integration label (e.g. "acme-agent-v1"). Default dogfood label. */
+    integration?: string;
+    /** Per-run id. Default random UUID. Echo in your issue / transcript. */
+    runId?: string;
+    /**
+     * Mark lineage external_candidate when the operator sets a non-internal integration id.
+     * Still not EXTERNAL_RUN without server-side observation (see acceptance doc).
+     */
+    lineage?: GateAdoptionLineage;
+};
+/**
+ * Run the deterministic no-spend adoption proof.
+ * Never contacts a wallet; never spends USDC. Preflight is mocked.
+ */
+export declare function runGateAdoptionProof(opts?: RunGateAdoptionProofOptions): Promise<GateAdoptionTranscript>;
+/** CLI entry: print one JSON transcript to stdout; exit 0 if ok else 1. */
+export declare function main(argv?: string[]): Promise<number>;
+//# sourceMappingURL=adoption-proof.d.ts.map

package/dist/adoption-proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adoption-proof.d.ts","sourceRoot":"","sources":["../src/adoption-proof.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAKL,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,0BAA0B,EAAG,mCAA4C,CAAC;AAEvF,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,gDAAgD,CAAC;AACnF,eAAO,MAAM,sBAAsB,4CAA4C,CAAC;AAChF,eAAO,MAAM,uBAAuB,kDAAkD,CAAC;AAEvF,MAAM,MAAM,oBAAoB,GAAG,YAAY,GAAG,YAAY,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,oBAAoB,EAAE,wBAAwB,CAAC;IAC/C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oEAAoE;IACpE,oBAAoB,EAAE;QACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,8BAA8B,EAAE,OAAO,CAAC;IACxC,eAAe,EAAE,OAAO,CAAC;IACzB,6BAA6B,EAAE,OAAO,CAAC;IACvC,2BAA2B,EAAE,OAAO,CAAC;IACrC,mBAAmB,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,oBAAoB,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,OAAO,0BAA0B,CAAC;IAC1C,OAAO,EAAE,iBAAiB,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,6BAA6B,CAAC;IACzC,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,mBAAmB,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,UAAU,EAAE,sBAAsB,CAAC;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ;;;OAGG;IACH,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gDAAgD;IAChD,aAAa,EAAE,+CAA+C,CAAC;CAChE,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC/B,CAAC;AA8FF;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,GAAE,2BAAgC,GACrC,OAAO,CAAC,sBAAsB,CAAC,CAsLjC;AAED,2EAA2E;AAC3E,wBAAsB,IAAI,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBlF"}

package/dist/adoption-proof.js

@@ -0,0 +1,290 @@
+/**
+ * Gate Adoption Proof Harness — deterministic, no-spend, package-local.
+ *
+ * Closes the install→transcript gap for operators who already installed
+ * installTwzrdX402ClientHook / installTwzrdAutoGate:
+ *   1) exact selectedRequirements reach the pre-sign hook
+ *   2) onDecision emits a verdict
+ *   3) block path aborts and never invokes a wallet/signer stub
+ *   4) attribution (integration + runId + client) is stamped on preflight only
+ *
+ * This harness is correlation / integration evidence. It is NOT EXTERNAL_RUN
+ * by itself (see docs/strategy/gate-adoption-operator-proof.md).
+ */
+import { CLIENT_VERSION } from "./version.js";
+import { installTwzrdX402ClientHook, } from "./x402-client-hook.js";
+export const ADOPTION_TRANSCRIPT_SCHEMA = "twzrd.gate_adoption_transcript.v1";
+/** Fixture merchant pubkey (base58-shaped); not a live spend target. */
+export const ADOPTION_PROOF_SELLER = "sLJ4uneGcD1mg6hKtkLYsY5HCw1nJ8GpNAmbzBWPBgk";
+export const ADOPTION_PROOF_NETWORK = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
+export const ADOPTION_PROOF_RESOURCE = "https://merchant.example/twzrd-adoption-proof";
+function mockClient() {
+    let hook;
+    const client = {
+        onBeforePaymentCreation(h) {
+            hook = h;
+            return client;
+        },
+    };
+    return {
+        client,
+        async fire(ctx) {
+            if (!hook)
+                throw new Error("adoption-proof: hook not installed");
+            return hook(ctx);
+        },
+    };
+}
+function preflightCard(decision, canSpend) {
+    return {
+        readiness_card: {
+            decision,
+            can_spend: canSpend,
+            trust_score: decision === "block" || !canSpend ? 10 : 90,
+            seller_wallet: ADOPTION_PROOF_SELLER,
+        },
+        preflight_id: decision === "block" || !canSpend ? 1 : 2,
+    };
+}
+function recordingPreflightFetch(body) {
+    let last = null;
+    let lastSeller = null;
+    const fetchImpl = (async (_url, init) => {
+        last = new Headers(init?.headers);
+        lastSeller = null;
+        if (typeof init?.body === "string") {
+            try {
+                const parsed = JSON.parse(init.body);
+                if (typeof parsed.seller_wallet === "string")
+                    lastSeller = parsed.seller_wallet;
+            }
+            catch {
+                // ignore non-JSON bodies
+            }
+        }
+        return new Response(JSON.stringify(body), {
+            status: 200,
+            headers: { "content-type": "application/json" },
+        });
+    });
+    return {
+        fetch: fetchImpl,
+        lastHeaders: () => last,
+        lastSellerWallet: () => lastSeller,
+    };
+}
+function baseRequirements(amount) {
+    return {
+        payTo: ADOPTION_PROOF_SELLER,
+        network: ADOPTION_PROOF_NETWORK,
+        amount,
+        asset: "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
+        resource: ADOPTION_PROOF_RESOURCE,
+        scheme: "exact",
+    };
+}
+function isInternalIntegration(integration) {
+    const i = integration.toLowerCase();
+    return (i.startsWith("twzrd-") ||
+        i.startsWith("twzrd/") ||
+        i.startsWith("ops-") ||
+        i.startsWith("test-") ||
+        i === "dogfood" ||
+        i.includes("dogfood") ||
+        i.includes("internal") ||
+        i.includes("ci-") ||
+        i === "gate-adoption-proof");
+}
+/**
+ * Run the deterministic no-spend adoption proof.
+ * Never contacts a wallet; never spends USDC. Preflight is mocked.
+ */
+export async function runGateAdoptionProof(opts = {}) {
+    const integration = opts.integration?.trim() || "gate-adoption-proof";
+    const runId = opts.runId?.trim() ||
+        (typeof crypto !== "undefined" && "randomUUID" in crypto
+            ? crypto.randomUUID()
+            : `run-${Date.now()}`);
+    const lineage = opts.lineage ??
+        (isInternalIntegration(integration) ? "dogfood" : "external_candidate");
+    const clientHeader = `twzrd-x402-gate/${CLIENT_VERSION}`;
+    const steps = [];
+    // ── block path: can_spend false → abort, signer must stay 0 ─────────────
+    {
+        const signerInvocations = { n: 0 };
+        const signer = {
+            async sign() {
+                signerInvocations.n += 1;
+                throw new Error("adoption-proof: signer must not be called");
+            },
+        };
+        const { fetch, lastHeaders, lastSellerWallet } = recordingPreflightFetch(preflightCard("warn", false));
+        const { client, fire } = mockClient();
+        let decisionDetail;
+        installTwzrdX402ClientHook(client, {
+            gateOnCanSpend: true,
+            refuseWashFlagged: false,
+            fetch,
+            attribution: { integration, runId },
+            onDecision: (d) => {
+                decisionDetail = {
+                    approved: d.approved,
+                    verdict: d.verdict,
+                    reason: d.reason,
+                    payTo: d.payTo,
+                };
+            },
+        });
+        // Operator would call wallet.signMessage only after hook returns non-abort.
+        // We only invoke signer if the hook allows — proving block never reaches it.
+        const req = baseRequirements("1000");
+        const result = await fire({ selectedRequirements: req });
+        const abort = Boolean(result && typeof result === "object" && "abort" in result && result.abort);
+        if (!abort) {
+            await signer.sign();
+        }
+        const h = lastHeaders();
+        const abortReason = abort && result && typeof result === "object" && "reason" in result
+            ? String(result.reason)
+            : undefined;
+        steps.push({
+            name: "block_path",
+            selectedRequirements: req,
+            abort,
+            reason: abortReason,
+            decisionEmitted: decisionDetail != null,
+            verdict: decisionDetail?.verdict ?? "missing",
+            approved: decisionDetail?.approved ?? false,
+            hookPayTo: decisionDetail?.payTo,
+            preflightSellerWallet: lastSellerWallet(),
+            signerInvocations: signerInvocations.n,
+            preflightAttribution: {
+                integration: h?.get("x-twzrd-integration") ?? null,
+                runId: h?.get("x-twzrd-run-id") ?? null,
+                client: h?.get("x-twzrd-client") ?? null,
+            },
+        });
+    }
+    // ── allow path: decision allow, still no real wallet spend ──────────────
+    {
+        const signerInvocations = { n: 0 };
+        const { fetch, lastHeaders, lastSellerWallet } = recordingPreflightFetch(preflightCard("allow", true));
+        const { client, fire } = mockClient();
+        let decisionDetail;
+        installTwzrdX402ClientHook(client, {
+            gateOnCanSpend: true,
+            refuseWashFlagged: false,
+            preflightMinScore: 40,
+            fetch,
+            attribution: { integration, runId },
+            onDecision: (d) => {
+                decisionDetail = {
+                    approved: d.approved,
+                    verdict: d.verdict,
+                    reason: d.reason,
+                    payTo: d.payTo,
+                };
+            },
+        });
+        const req = baseRequirements("1000");
+        const result = await fire({ selectedRequirements: req });
+        const abort = Boolean(result && typeof result === "object" && "abort" in result && result.abort);
+        // Allow path: payload construction would run next — we do not call a wallet signer
+        // in this no_spend harness (proves allow decision without spend).
+        void signerInvocations;
+        const h = lastHeaders();
+        steps.push({
+            name: "allow_path",
+            selectedRequirements: req,
+            abort,
+            reason: abort && result && typeof result === "object" && "reason" in result
+                ? String(result.reason)
+                : undefined,
+            decisionEmitted: decisionDetail != null,
+            verdict: decisionDetail?.verdict ?? "missing",
+            approved: decisionDetail?.approved ?? false,
+            hookPayTo: decisionDetail?.payTo,
+            preflightSellerWallet: lastSellerWallet(),
+            signerInvocations: signerInvocations.n,
+            preflightAttribution: {
+                integration: h?.get("x-twzrd-integration") ?? null,
+                runId: h?.get("x-twzrd-run-id") ?? null,
+                client: h?.get("x-twzrd-client") ?? null,
+            },
+        });
+    }
+    const block = steps.find((s) => s.name === "block_path");
+    const allow = steps.find((s) => s.name === "allow_path");
+    // Hook-derived only: onDecision.payTo, abort reason, and preflight POST body.
+    // Do NOT use step.selectedRequirements (harness-echo) for this flag.
+    const blockHookSawSeller = block.hookPayTo === ADOPTION_PROOF_SELLER ||
+        (typeof block.reason === "string" && block.reason.includes(ADOPTION_PROOF_SELLER)) ||
+        block.preflightSellerWallet === ADOPTION_PROOF_SELLER;
+    const allowHookSawSeller = allow.hookPayTo === ADOPTION_PROOF_SELLER ||
+        allow.preflightSellerWallet === ADOPTION_PROOF_SELLER;
+    const assertions = {
+        selectedRequirementReachedHook: blockHookSawSeller && allowHookSawSeller,
+        decisionEmitted: block.decisionEmitted && allow.decisionEmitted,
+        blockedPathNeverInvokesSigner: block.abort === true && block.signerInvocations === 0,
+        allowPathNeverInvokesSigner: allow.signerInvocations === 0 && allow.abort === false,
+        attributionSurfaced: block.preflightAttribution.integration === integration &&
+            block.preflightAttribution.runId === runId &&
+            block.preflightAttribution.client === clientHeader &&
+            allow.preflightAttribution.integration === integration &&
+            allow.preflightAttribution.runId === runId,
+    };
+    const ok = Object.values(assertions).every(Boolean);
+    return {
+        schema: ADOPTION_TRANSCRIPT_SCHEMA,
+        package: "twzrd-x402-gate",
+        packageVersion: CLIENT_VERSION,
+        proofKind: "local_deterministic_harness",
+        mode: "no_spend",
+        integration,
+        runId,
+        lineage,
+        clientHeader,
+        steps,
+        assertions,
+        ok,
+        notExternalRunProof: [
+            "package_download_counts",
+            "preflight_hits_alone",
+            "self_authored_run_id_without_operator_transcript",
+            "this_harness_alone_without_server_side_join",
+        ],
+        acceptanceDoc: "docs/strategy/gate-adoption-operator-proof.md",
+    };
+}
+/** CLI entry: print one JSON transcript to stdout; exit 0 if ok else 1. */
+export async function main(argv = process.argv.slice(2)) {
+    let integration;
+    let runId;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "--integration" && argv[i + 1])
+            integration = argv[++i];
+        else if (a === "--run-id" && argv[i + 1])
+            runId = argv[++i];
+        else if (a === "--help" || a === "-h") {
+            process.stdout.write("Usage: npm run adoption-proof -- [--integration <id>] [--run-id <uuid>]\n" +
+                "Deterministic no-spend gate adoption transcript (JSON on stdout).\n" +
+                "See docs/strategy/gate-adoption-operator-proof.md\n");
+            return 0;
+        }
+    }
+    const transcript = await runGateAdoptionProof({ integration, runId });
+    process.stdout.write(`${JSON.stringify(transcript, null, 2)}\n`);
+    return transcript.ok ? 0 : 1;
+}
+const isDirect = typeof process !== "undefined" &&
+    process.argv[1] &&
+    (process.argv[1].endsWith("adoption-proof.ts") ||
+        process.argv[1].endsWith("adoption-proof.js"));
+if (isDirect) {
+    main().then((code) => process.exit(code), (err) => {
+        console.error(err);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=adoption-proof.js.map

package/dist/adoption-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adoption-proof.js","sourceRoot":"","sources":["../src/adoption-proof.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,0BAA0B,GAK3B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,0BAA0B,GAAG,mCAA4C,CAAC;AAEvF,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,yCAAyC,CAAC;AAChF,MAAM,CAAC,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AAkFvF,SAAS,UAAU;IAIjB,IAAI,IAIS,CAAC;IACd,MAAM,MAAM,GAAmB;QAC7B,uBAAuB,CAAC,CAAC;YACvB,IAAI,GAAG,CAAC,CAAC;YACT,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;IACF,OAAO;QACL,MAAM;QACN,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAoC,EAAE,QAAiB;IAC5E,OAAO;QACL,cAAc,EAAE;YACd,QAAQ;YACR,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YACxD,aAAa,EAAE,qBAAqB;SACrC;QACD,YAAY,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAa;IAK5C,IAAI,IAAI,GAAmB,IAAI,CAAC;IAChC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,IAAa,EAAE,IAA4C,EAAE,EAAE;QACvF,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAmD,CAAC,CAAC;QAC9E,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAgC,CAAC;gBACpE,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;oBAAE,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC;YAClF,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;YACxC,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC,CAA4B,CAAC;IAC9B,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;QACvB,gBAAgB,EAAE,GAAG,EAAE,CAAC,UAAU;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO;QACL,KAAK,EAAE,qBAAqB;QAC5B,OAAO,EAAE,sBAAsB;QAC/B,MAAM;QACN,KAAK,EAAE,8CAA8C;QACrD,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,OAAO;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAmB;IAChD,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,CACL,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;QACtB,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;QACtB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACpB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;QACrB,CAAC,KAAK,SAAS;QACf,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACjB,CAAC,KAAK,qBAAqB,CAC5B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAoC,EAAE;IAEtC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,qBAAqB,CAAC;IACtE,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAClB,CAAC,OAAO,MAAM,KAAK,WAAW,IAAI,YAAY,IAAI,MAAM;YACtD,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE;YACrB,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC3B,MAAM,OAAO,GACX,IAAI,CAAC,OAAO;QACZ,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAE1E,MAAM,YAAY,GAAG,mBAAmB,cAAc,EAAE,CAAC;IACzD,MAAM,KAAK,GAAuB,EAAE,CAAC;IAErC,2EAA2E;IAC3E,CAAC;QACC,MAAM,iBAAiB,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG;YACb,KAAK,CAAC,IAAI;gBACR,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,CAAC;SACF,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,uBAAuB,CACtE,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAC7B,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;QACtC,IAAI,cAES,CAAC;QAEd,0BAA0B,CAAC,MAAM,EAAE;YACjC,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,KAAK;YACxB,KAAK;YACL,WAAW,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;YACnC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,cAAc,GAAG;oBACf,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;iBACf,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;QAEH,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QACjG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,WAAW,GACf,KAAK,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM;YACjE,CAAC,CAAC,MAAM,CAAE,MAA6B,CAAC,MAAM,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,YAAY;YAClB,oBAAoB,EAAE,GAAG;YACzB,KAAK;YACL,MAAM,EAAE,WAAW;YACnB,eAAe,EAAE,cAAc,IAAI,IAAI;YACvC,OAAO,EAAE,cAAc,EAAE,OAAO,IAAI,SAAS;YAC7C,QAAQ,EAAE,cAAc,EAAE,QAAQ,IAAI,KAAK;YAC3C,SAAS,EAAE,cAAc,EAAE,KAAK;YAChC,qBAAqB,EAAE,gBAAgB,EAAE;YACzC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;YACtC,oBAAoB,EAAE;gBACpB,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,qBAAqB,CAAC,IAAI,IAAI;gBAClD,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI;gBACvC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI;aACzC;SACF,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,CAAC;QACC,MAAM,iBAAiB,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,uBAAuB,CACtE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAC7B,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;QACtC,IAAI,cAES,CAAC;QAEd,0BAA0B,CAAC,MAAM,EAAE;YACjC,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,KAAK;YACxB,iBAAiB,EAAE,EAAE;YACrB,KAAK;YACL,WAAW,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;YACnC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,cAAc,GAAG;oBACf,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;iBACf,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QACjG,mFAAmF;QACnF,kEAAkE;QAClE,KAAK,iBAAiB,CAAC;QACvB,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,YAAY;YAClB,oBAAoB,EAAE,GAAG;YACzB,KAAK;YACL,MAAM,EAAE,KAAK,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM;gBACzE,CAAC,CAAC,MAAM,CAAE,MAA6B,CAAC,MAAM,CAAC;gBAC/C,CAAC,CAAC,SAAS;YACb,eAAe,EAAE,cAAc,IAAI,IAAI;YACvC,OAAO,EAAE,cAAc,EAAE,OAAO,IAAI,SAAS;YAC7C,QAAQ,EAAE,cAAc,EAAE,QAAQ,IAAI,KAAK;YAC3C,SAAS,EAAE,cAAc,EAAE,KAAK;YAChC,qBAAqB,EAAE,gBAAgB,EAAE;YACzC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;YACtC,oBAAoB,EAAE;gBACpB,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,qBAAqB,CAAC,IAAI,IAAI;gBAClD,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI;gBACvC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI;aACzC;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAE,CAAC;IAE1D,8EAA8E;IAC9E,qEAAqE;IACrE,MAAM,kBAAkB,GACtB,KAAK,CAAC,SAAS,KAAK,qBAAqB;QACzC,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;QAClF,KAAK,CAAC,qBAAqB,KAAK,qBAAqB,CAAC;IACxD,MAAM,kBAAkB,GACtB,KAAK,CAAC,SAAS,KAAK,qBAAqB;QACzC,KAAK,CAAC,qBAAqB,KAAK,qBAAqB,CAAC;IAExD,MAAM,UAAU,GAA2B;QACzC,8BAA8B,EAAE,kBAAkB,IAAI,kBAAkB;QACxE,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,eAAe;QAC/D,6BAA6B,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC;QACpF,2BAA2B,EAAE,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QACnF,mBAAmB,EACjB,KAAK,CAAC,oBAAoB,CAAC,WAAW,KAAK,WAAW;YACtD,KAAK,CAAC,oBAAoB,CAAC,KAAK,KAAK,KAAK;YAC1C,KAAK,CAAC,oBAAoB,CAAC,MAAM,KAAK,YAAY;YAClD,KAAK,CAAC,oBAAoB,CAAC,WAAW,KAAK,WAAW;YACtD,KAAK,CAAC,oBAAoB,CAAC,KAAK,KAAK,KAAK;KAC7C,CAAC;IAEF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEpD,OAAO;QACL,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,iBAAiB;QAC1B,cAAc,EAAE,cAAc;QAC9B,SAAS,EAAE,6BAA6B;QACxC,IAAI,EAAE,UAAU;QAChB,WAAW;QACX,KAAK;QACL,OAAO;QACP,YAAY;QACZ,KAAK;QACL,UAAU;QACV,EAAE;QACF,mBAAmB,EAAE;YACnB,yBAAyB;YACzB,sBAAsB;YACtB,kDAAkD;YAClD,6CAA6C;SAC9C;QACD,aAAa,EAAE,+CAA+C;KAC/D,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,IAAI,WAA+B,CAAC;IACpC,IAAI,KAAyB,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,eAAe,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aAC7D,IAAI,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACvD,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2EAA2E;gBACzE,qEAAqE;gBACrE,qDAAqD,CACxD,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACjE,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,QAAQ,GACZ,OAAO,OAAO,KAAK,WAAW;IAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACf,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAEnD,IAAI,QAAQ,EAAE,CAAC;IACb,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5B,CAAC,GAAG,EAAE,EAAE;QACN,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CACF,CAAC;AACJ,CAAC"}