feat(api): add authorization engine, contract, and sync command