@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/cli/commands/submit-claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-claim.js","sourceRoot":"","sources":["../../../src/cli/commands/submit-claim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACL,SAAS,EACT,OAAO,EACP,IAAI,EACJ,UAAU,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,WAAW,GAA2B;IAC1C,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AAEF,mCAAmC;AACnC,SAAS,QAAQ,CAAC,KAAe;IAC/B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,IAAI,CAAC,UAAU,IAAI,8BAA8B,CAAC,CAAC;QAC/D,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE;YACP,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACxC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACzB;KACF,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAA4B,CAAC;IAC3F,MAAM,UAAU,GACd,CAAC,MAAM,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACxE,IAAI,CAAC,cAAc,YAAY,iBAAiB,OAAO,YAAY,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,YAAY,gBAAgB,CAAC,CAAC;IACxF,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,YAAY,eAAe,CAAC,CAAC;IAEzF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,KAAK,OAAO,GAAG,CAAC,CAAC;IAEzD,OAAO,CACL;QACE,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,GAAG;QAClB,MAAM,EAAE,+EAA+E;QACvF,KAAK,EAAE;YACL,eAAe,YAAY,YAAY,SAAS,GAAG;YACnD,YAAY,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC7C,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;YAC9E,sFAAsF;SACvF;KACF,EACD,GAAG,CACJ,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAEpD,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;QACpF,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,eAAe,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE;YACnE,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,IAAI,CAAC,gBAAgB,IAAI,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,CAAC;QACtE,uFAAuF;QACvF,OAAO,CAAC,QAAQ,CAAC,GAAG;YAClB;gBACE,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;oBACtB,EAAE,EAAE,QAAQ,GAAG,EAAE;oBACjB,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,GAAG;oBACV,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,EAAE;oBACf,eAAe,EAAE,GAAG,QAAQ,sBAAsB,YAAY,IAAI,GAAG,EAAE;iBACxE,CAAC;aACH;SACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,sDAAsD,OAAO,EAAE,CAAC,CAAC;IAE7E,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG;QACV,OAAO,EAAE,+BAA+B;QACxC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;YAC9C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE;gBACJ;oBACE,OAAO,EAAE,oCAAoC;oBAC7C,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAC7C,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC;wBAC5C,YAAY;wBACZ,OAAO;wBACP,QAAQ,EAAE,MAAM,CAAC,GAAG;wBACpB,YAAY,EAAE,MAAM,CAAC,OAAO;wBAC5B,YAAY;wBACZ,SAAS,EAAE,KAAK;wBAChB,MAAM,EAAE,EAAE;qBACX,CAAC,CACH,CAAC,MAAM,EAAE;iBACX;aACF;SACF,CAAC;KACH,CAAC;IACF,OAAO,CACL;QACE,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,MAAM,EAAE,yBAAyB;QACjC,KAAK,EAAE,CAAC,eAAe,YAAY,EAAE,EAAE,YAAY,OAAO,EAAE,EAAE,UAAU,YAAY,EAAE,CAAC;QACvF,GAAG,EAAE,YAAY;KAClB,EACD,GAAG,CACJ,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,GAAG,CAAC,CAAC;IAE9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,gBAAgB,YAAY,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CACT,kDAAkD,YAAY,6BAA6B,CAC5F,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,15 @@
+#!/usr/bin/env bun
+/**
+ * `decision-oracle` — the CLI a provider runs (`bunx @ixo/decision-oracle init …`, then `bunx decision-oracle …`
+ * from inside the generated project). This file is only the dispatcher: it maps a command to its
+ * module in `commands/`, turns a bad invocation into usage + exit 64 (EX_USAGE, the sysexits
+ * convention every shell script already knows) and anything else into one error line + exit 1.
+ * The read-only commands stay importable and testable without a subprocess; the signing ones do
+ * not — `fail()` and `confirm()` (cli/lib/chain.ts) end the PROCESS mid-sequence by design, since
+ * "stop, successfully, half way through a chain sequence" is not something a return value can say.
+ *
+ * Command modules are imported lazily: most of them pull in the chain/engine stack, and a `--help`
+ * or an `init` has no business loading any of it.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG"}

package/dist/cli/index.js

@@ -0,0 +1,206 @@
+#!/usr/bin/env bun
+/**
+ * `decision-oracle` — the CLI a provider runs (`bunx @ixo/decision-oracle init …`, then `bunx decision-oracle …`
+ * from inside the generated project). This file is only the dispatcher: it maps a command to its
+ * module in `commands/`, turns a bad invocation into usage + exit 64 (EX_USAGE, the sysexits
+ * convention every shell script already knows) and anything else into one error line + exit 1.
+ * The read-only commands stay importable and testable without a subprocess; the signing ones do
+ * not — `fail()` and `confirm()` (cli/lib/chain.ts) end the PROCESS mid-sequence by design, since
+ * "stop, successfully, half way through a chain sequence" is not something a return value can say.
+ *
+ * Command modules are imported lazily: most of them pull in the chain/engine stack, and a `--help`
+ * or an `init` has no business loading any of it.
+ */
+import process from "node:process";
+import { runInit } from "./commands/init.js";
+import { runSkillsSync } from "./commands/skills.js";
+import { parse, UsageError } from "./lib/args.js";
+const USAGE = `usage: decision-oracle <command> [options]
+
+project
+  init <dir> [--name <project-name>]   generate a new oracle project (never installs for you)
+  skills sync [--dir <path>]           refresh the package's Claude skills (default .claude/skills)
+
+identity
+  derive ("<mnemonic>" | --new)        the ORACLE_* lines for .dev.vars, from a chain mnemonic
+  login                                sign in to ixo AuthHub — once per network
+  logout                               forget that network's saved session ({ removed, path })
+  delegation --audience <did> --out <file>       mint an owner→oracle claim-bot delegation CAR
+                                                 (--for engine mints the billing one instead)
+
+chain (needs a login; nothing is signed without --yes)
+  oracle init --protocol <did> --kit-url <url> [--logo <url>] [--openhands]
+                                                 provision this oracle (13 steps): fund its wallet,
+                                                 its IID + Ed25519 key, its Matrix account, its
+                                                 entity + profile + domain card + agent card
+  publish-protocol --rubric <file> --form <file> publish a protocol entity + its #vct and #rub
+  publish-protocol --phase rub --protocol <did> --rubric <file> --form <file>
+                                                 anchor/replace #rub alone on a protocol that
+                                                 already has its form
+  create-deed --protocol <did> --title <name>    create a deed linked to that protocol
+  create-collection --entity <deed> --protocol <did> --eval-amount <uixo>
+                                                 create/fund/grant a claim collection
+  submit-claim --collection <id> --answers <file>  submit a test claim as the logged-in wallet
+  org create --name <name> [--logo <url>]        create an organisation (a dao entity) your login
+                                                 controls — or print the one it owns by that name
+  org balance --entity <did>                     an organisation's admin account and its balances
+  org fund --entity <did> --amount <n> [--coin ixo|usdc]
+                                                 send coins from your wallet to that admin account
+
+this oracle
+  register --collection <id>           enrol a collection with this oracle, as its owner
+  scan --collection <id>               make this oracle scan an enrolled collection now
+  relink [--collection <id>]…         operator: link watched collections to their company's
+                                       Decision API sources, as register does (ORACLE_ADMIN_DIDS)
+  erase (<claimId>… | --collection <id>) [--yes]
+                                       as the collection's owner, erase claims' transcripts and
+                                       registry text (the oracle never deletes them on its own)
+  manifest <protocol did>              the engine's work order for a protocol's rubric
+  engine register [--env <name>]       register this oracle with the engine now (payable at the
+                                       Standard plan at once), not lazily at the first decide
+
+the Decision API (API_LANE on; signed as your login, --kit <url> or .dev.vars' host)
+  api source create --name <n> --contact <email> --entity <did>
+                                                 add this oracle to your organisation — its
+                                                 webhook secret shown ONCE; pending-link
+  api source link <sourceId>                       sign the organisation's link at the engine and
+                                                 sync it: pending-link → active
+  api sources                                      the sources your login belongs to
+  api key create --source <id> --scopes <s,…> [--name <n>] [--max-spend-cents <n>]
+                                                 mint an API key — shown ONCE
+  api keys --source <id>                           a source's keys, masked
+  api key revoke --source <id> <prefix|masked key> [--grace-days <n>]
+  api admin sources                                every source (your DID in ORACLE_ADMIN_DIDS)
+  api admin pause <sourceId> [--note <text>]
+  api admin resume <sourceId>
+  api admin protocols <sourceId> <did,…>|--none    replace a source's allowed protocols
+  api admin billing-mode <sourceId> x402|none
+  (a source link, a key revoke and every admin change is a dry run without --yes; --json prints the raw answer;
+  api --help for the flags)
+
+your handlers
+  protocol review <protocol did>       what a protocol's rubric asks your oracle to produce
+  facts scaffold <protocol did> [--all]          a stub handler + a test per name needing one
+  facts run --protocol <did> --claim <file> [--preview] [--no-ai]
+                                       run your handlers against a claim file (its answers, or
+                                       { answers, attachments }) — no chain, no credits; a rubric's
+                                       dup lane needs D1, so here it stands in as "review"
+
+rubric authoring
+  rubric fetch-form --protocol <did> --out <file>   download a protocol's live claim form (#vct)
+  rubric validate --rubric <file> --form <file>     check a rubric with the engine's own binder
+
+every network-facing command takes --network devnet|testnet|mainnet (default devnet); every
+engine-facing one takes --engine-url <url>.
+`;
+/** Nested verbs dispatch on their second positional — `<group> <verb>`. */
+function subcommand(group, rest, verbs) {
+    const [verb, ...subrest] = rest;
+    if (verb === undefined)
+        throw new UsageError(`${group} needs a subcommand (${verbs.join("|")})`);
+    if (!verbs.includes(verb))
+        throw new UsageError(`unknown ${group} subcommand: ${verb}`);
+    return [verb, subrest];
+}
+async function main(argv) {
+    const [command, ...rest] = argv;
+    switch (command) {
+        case "init": {
+            const { values, positionals } = parse(rest, { options: { name: { type: "string" } } });
+            const dir = positionals[0];
+            if (!dir)
+                throw new UsageError("init needs a target directory");
+            const project = await runInit({ dir, name: values.name });
+            console.log(`created ${project.dir}\n`);
+            console.log("next:");
+            console.log(`  cd ${dir} && bun install`);
+            console.log("  bunx decision-oracle derive --new                      your two keys → .dev.vars");
+            console.log("  bunx decision-oracle login                             AuthHub, once per network");
+            console.log("  bunx decision-oracle delegation --for engine           → OWNER_DELEGATION_CAR");
+            console.log("  bunx decision-oracle protocol review <protocol did>    what you must produce");
+            return 0;
+        }
+        case "skills": {
+            const [, subrest] = subcommand("skills", rest, ["sync"]);
+            const { values } = parse(subrest, { options: { dir: { type: "string" } } });
+            const dir = values.dir ?? ".claude/skills";
+            const synced = await runSkillsSync({ dir });
+            console.log(`synced ${synced.length} skills into ${dir}: ${synced.join(", ")}`);
+            return 0;
+        }
+        case "derive":
+            return (await import("./commands/derive.js")).run(rest);
+        case "login":
+            return (await import("./commands/login.js")).run(rest);
+        case "logout":
+            return (await import("./commands/logout.js")).run(rest);
+        case "org":
+            return (await import("./commands/org.js")).run(rest);
+        case "delegation":
+            return (await import("./commands/delegation.js")).run(rest);
+        case "oracle": {
+            const [, subrest] = subcommand("oracle", rest, ["init"]);
+            return (await import("./commands/oracle-init.js")).run(subrest);
+        }
+        case "publish-protocol":
+            return (await import("./commands/publish-protocol.js")).run(rest);
+        case "create-deed":
+            return (await import("./commands/create-deed.js")).run(rest);
+        case "create-collection":
+            return (await import("./commands/create-collection.js")).run(rest);
+        case "submit-claim":
+            return (await import("./commands/submit-claim.js")).run(rest);
+        case "register":
+            return (await import("./commands/register.js")).run(rest);
+        case "scan":
+            return (await import("./commands/scan.js")).run(rest);
+        case "relink":
+            return (await import("./commands/relink.js")).run(rest);
+        case "erase":
+            return (await import("./commands/erase.js")).run(rest);
+        case "manifest":
+            return (await import("./commands/manifest.js")).run(rest);
+        case "engine":
+            return (await import("./commands/engine.js")).run(rest);
+        case "api":
+            return (await import("./commands/api.js")).run(rest);
+        case "protocol": {
+            const [, subrest] = subcommand("protocol", rest, ["review"]);
+            return (await import("./commands/protocol-review.js")).run(subrest);
+        }
+        case "facts": {
+            const [verb, subrest] = subcommand("facts", rest, ["scaffold", "run"]);
+            return verb === "scaffold"
+                ? (await import("./commands/facts-scaffold.js")).run(subrest)
+                : (await import("./commands/facts-run.js")).run(subrest);
+        }
+        case "rubric": {
+            const [verb, subrest] = subcommand("rubric", rest, ["fetch-form", "validate"]);
+            return verb === "fetch-form"
+                ? (await import("./commands/rubric-fetch-form.js")).run(subrest)
+                : (await import("./commands/rubric-validate.js")).run(subrest);
+        }
+        case undefined:
+        case "--help":
+        case "-h":
+        case "help":
+            console.log(USAGE);
+            return 0;
+        default:
+            throw new UsageError(`unknown command: ${command}`);
+    }
+}
+try {
+    process.exitCode = await main(process.argv.slice(2));
+}
+catch (err) {
+    if (err instanceof UsageError) {
+        console.error(`${err.message}\n\n${USAGE}`);
+        process.exitCode = 64;
+    }
+    else {
+        console.error(`error: ${err instanceof Error ? err.message : String(err)}`);
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AAEH,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6Eb,CAAC;AAEF,2EAA2E;AAC3E,SAAS,UAAU,CAAC,KAAa,EAAE,IAAc,EAAE,KAAe;IAChE,MAAM,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC;IAChC,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,wBAAwB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,WAAW,KAAK,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACxF,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEhC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,EAAE,CAAC;YACZ,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YACvF,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,iBAAiB,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CACT,oFAAoF,CACrF,CAAC;YACF,OAAO,CAAC,GAAG,CACT,oFAAoF,CACrF,CAAC;YACF,OAAO,CAAC,GAAG,CACT,iFAAiF,CAClF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;YAC9F,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACzD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,gBAAgB,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChF,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEvD,KAAK,OAAO;YACV,OAAO,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEtD,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEvD,KAAK,KAAK;YACR,OAAO,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEpD,KAAK,YAAY;YACf,OAAO,CAAC,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE3D,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/D,CAAC;QAED,KAAK,kBAAkB;YACrB,OAAO,CAAC,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEjE,KAAK,aAAa;YAChB,OAAO,CAAC,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE5D,KAAK,mBAAmB;YACtB,OAAO,CAAC,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAElE,KAAK,cAAc;YACjB,OAAO,CAAC,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE7D,KAAK,UAAU;YACb,OAAO,CAAC,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEzD,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEvD,KAAK,OAAO;YACV,OAAO,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEtD,KAAK,UAAU;YACb,OAAO,CAAC,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEzD,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEvD,KAAK,KAAK;YACR,OAAO,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEpD,KAAK,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC;QAED,KAAK,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YACvE,OAAO,IAAI,KAAK,UAAU;gBACxB,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC1D,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;YAC/E,OAAO,IAAI,KAAK,YAAY;gBAC1B,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC7D,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;QAED,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC;QACV,KAAK,MAAM;YACT,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,CAAC,CAAC;QAEX;YACE,MAAM,IAAI,UAAU,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,IAAI,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,QAAQ,GAAG,EAAE,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/cli/lib/agent-card-schema.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The Agent Card JSON Schema (draft 2020-12) as the engine generates it from its Zod source
+ * (eval-engine `src/lib/agent-card/schema.ts`, served at `GET /v1/agent-card-schema`). The offline
+ * fallback for `identity-cards.ts` `agentCardSchema`: the engine's Zod is canonical, so this copy
+ * changes only in lock-step with it (ixo-oracles-cli keeps the same snapshot).
+ */
+export declare const AGENT_CARD_SCHEMA_SNAPSHOT: Record<string, unknown>;
+//# sourceMappingURL=agent-card-schema.d.ts.map

package/dist/cli/lib/agent-card-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-card-schema.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/agent-card-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAkK9D,CAAC"}

package/dist/cli/lib/agent-card-schema.js

@@ -0,0 +1,169 @@
+/**
+ * The Agent Card JSON Schema (draft 2020-12) as the engine generates it from its Zod source
+ * (eval-engine `src/lib/agent-card/schema.ts`, served at `GET /v1/agent-card-schema`). The offline
+ * fallback for `identity-cards.ts` `agentCardSchema`: the engine's Zod is canonical, so this copy
+ * changes only in lock-step with it (ixo-oracles-cli keeps the same snapshot).
+ */
+export const AGENT_CARD_SCHEMA_SNAPSHOT = {
+    $schema: "https://json-schema.org/draft/2020-12/schema",
+    type: "object",
+    properties: {
+        "@context": {
+            minItems: 1,
+            type: "array",
+            items: {
+                $ref: "#/$defs/__schema0",
+            },
+        },
+        id: {
+            type: "string",
+            minLength: 1,
+        },
+        type: {
+            type: "array",
+            items: {
+                $ref: "#/$defs/__schema1",
+            },
+            allOf: [
+                {
+                    contains: {
+                        const: "VerifiableCredential",
+                    },
+                },
+                {
+                    contains: {
+                        const: "ixo:AgentCard",
+                    },
+                },
+            ],
+        },
+        issuer: {
+            type: "object",
+            properties: {
+                id: {
+                    type: "string",
+                    minLength: 1,
+                },
+            },
+            required: ["id"],
+            additionalProperties: false,
+        },
+        validFrom: {
+            type: "string",
+            format: "date-time",
+            pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$",
+        },
+        credentialSubject: {
+            type: "object",
+            properties: {
+                id: {
+                    type: "string",
+                    pattern: "^did:ixo:entity:.+$",
+                },
+                name: {
+                    type: "string",
+                    minLength: 1,
+                },
+                description: {
+                    type: "string",
+                    minLength: 1,
+                },
+                version: {
+                    type: "string",
+                    minLength: 1,
+                },
+                services: {
+                    minItems: 1,
+                    maxItems: 20,
+                    type: "array",
+                    items: {
+                        $ref: "#/$defs/__schema2",
+                    },
+                },
+            },
+            required: ["id", "name", "description", "version", "services"],
+            additionalProperties: false,
+        },
+        proof: {
+            type: "object",
+            properties: {},
+            additionalProperties: {},
+        },
+    },
+    required: ["@context", "id", "type", "issuer", "validFrom", "credentialSubject"],
+    additionalProperties: false,
+    $defs: {
+        __schema0: {
+            type: "string",
+            minLength: 1,
+        },
+        __schema1: {
+            type: "string",
+        },
+        __schema2: {
+            type: "object",
+            properties: {
+                id: {
+                    type: "string",
+                    pattern: "^[a-z0-9]+(?:-[a-z0-9]+)*$",
+                },
+                name: {
+                    type: "string",
+                    minLength: 1,
+                },
+                description: {
+                    type: "string",
+                    minLength: 1,
+                },
+                price: {
+                    type: "object",
+                    properties: {
+                        amount: {
+                            type: "number",
+                            minimum: 0,
+                        },
+                        currency: {
+                            type: "string",
+                            const: "PAY",
+                        },
+                    },
+                    required: ["amount", "currency"],
+                    additionalProperties: false,
+                },
+                deliverables: {
+                    type: "string",
+                    minLength: 1,
+                },
+                doneMeans: {
+                    minItems: 1,
+                    maxItems: 10,
+                    type: "array",
+                    items: {
+                        $ref: "#/$defs/__schema3",
+                    },
+                },
+                tags: {
+                    type: "array",
+                    items: {
+                        type: "string",
+                        minLength: 1,
+                    },
+                },
+                examples: {
+                    type: "array",
+                    items: {
+                        type: "string",
+                        minLength: 1,
+                    },
+                },
+            },
+            required: ["id", "name", "description", "price", "deliverables", "doneMeans"],
+            additionalProperties: false,
+        },
+        __schema3: {
+            type: "string",
+            minLength: 1,
+        },
+    },
+};
+//# sourceMappingURL=agent-card-schema.js.map

package/dist/cli/lib/agent-card-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-card-schema.js","sourceRoot":"","sources":["../../../src/cli/lib/agent-card-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA4B;IACjE,OAAO,EAAE,8CAA8C;IACvD,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,UAAU,EAAE;YACV,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,mBAAmB;aAC1B;SACF;QACD,EAAE,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,CAAC;SACb;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,mBAAmB;aAC1B;YACD,KAAK,EAAE;gBACL;oBACE,QAAQ,EAAE;wBACR,KAAK,EAAE,sBAAsB;qBAC9B;iBACF;gBACD;oBACE,QAAQ,EAAE;wBACR,KAAK,EAAE,eAAe;qBACvB;iBACF;aACF;SACF;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,EAAE,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,CAAC;iBACb;aACF;YACD,QAAQ,EAAE,CAAC,IAAI,CAAC;YAChB,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,WAAW;YACnB,OAAO,EACL,sRAAsR;SACzR;QACD,iBAAiB,EAAE;YACjB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,EAAE,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,qBAAqB;iBAC/B;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,CAAC;iBACb;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,CAAC;iBACb;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,CAAC;iBACb;gBACD,QAAQ,EAAE;oBACR,QAAQ,EAAE,CAAC;oBACX,QAAQ,EAAE,EAAE;oBACZ,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE;wBACL,IAAI,EAAE,mBAAmB;qBAC1B;iBACF;aACF;YACD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,CAAC;YAC9D,oBAAoB,EAAE,KAAK;SAC5B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;YACd,oBAAoB,EAAE,EAAE;SACzB;KACF;IACD,QAAQ,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC;IAChF,oBAAoB,EAAE,KAAK;IAC3B,KAAK,EAAE;QACL,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,CAAC;SACb;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;SACf;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,EAAE,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,4BAA4B;iBACtC;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,CAAC;iBACb;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,CAAC;iBACb;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,CAAC;yBACX;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,KAAK;yBACb;qBACF;oBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;oBAChC,oBAAoB,EAAE,KAAK;iBAC5B;gBACD,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,CAAC;iBACb;gBACD,SAAS,EAAE;oBACT,QAAQ,EAAE,CAAC;oBACX,QAAQ,EAAE,EAAE;oBACZ,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE;wBACL,IAAI,EAAE,mBAAmB;qBAC1B;iBACF;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,SAAS,EAAE,CAAC;qBACb;iBACF;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,SAAS,EAAE,CAAC;qBACb;iBACF;aACF;YACD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,CAAC;YAC7E,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,CAAC;SACb;KACF;CACF,CAAC"}

package/dist/cli/lib/ai-rest.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The `AI` binding, for a terminal (spec 2026-10-02 §7). `facts run` executes a provider's handlers
+ * outside Workers, where there is no binding — so on `AI_PROVIDER=cloudflare` it gets this stand-in:
+ * the same Responses body, POSTed to the account's REST endpoint with a Cloudflare API token and
+ * the gateway named by header. Same model, same gateway, same bill. `getLog` is not offered (the
+ * REST route answers no log id anyway) — the CLI prints the run's token spend instead of a ledger.
+ */
+import type { AiGatewayBinding } from "../../env.js";
+export declare function restAiBinding(accountId: string, token: string): AiGatewayBinding;
+/** From the shell or the project's `.dev.vars` — both or a one-line error naming both. */
+export declare function restAiFromEnv(vars: Record<string, string | undefined>): AiGatewayBinding;
+//# sourceMappingURL=ai-rest.d.ts.map

package/dist/cli/lib/ai-rest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-rest.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/ai-rest.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAElD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAmBhF;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,gBAAgB,CASxF"}

package/dist/cli/lib/ai-rest.js

@@ -0,0 +1,36 @@
+/**
+ * The `AI` binding, for a terminal (spec 2026-10-02 §7). `facts run` executes a provider's handlers
+ * outside Workers, where there is no binding — so on `AI_PROVIDER=cloudflare` it gets this stand-in:
+ * the same Responses body, POSTed to the account's REST endpoint with a Cloudflare API token and
+ * the gateway named by header. Same model, same gateway, same bill. `getLog` is not offered (the
+ * REST route answers no log id anyway) — the CLI prints the run's token spend instead of a ledger.
+ */
+export function restAiBinding(accountId, token) {
+    return {
+        gateway: (id) => ({
+            run: (req) => fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/ai/v1/responses`, {
+                method: "POST",
+                headers: {
+                    ...req.headers,
+                    "content-type": "application/json",
+                    authorization: `Bearer ${token}`,
+                    "cf-aig-gateway-id": id,
+                },
+                body: JSON.stringify(req.query),
+            }),
+            getLog: async () => {
+                throw new Error("getLog is not available from the CLI");
+            },
+        }),
+    };
+}
+/** From the shell or the project's `.dev.vars` — both or a one-line error naming both. */
+export function restAiFromEnv(vars) {
+    const accountId = vars.CLOUDFLARE_ACCOUNT_ID;
+    const token = vars.CLOUDFLARE_API_TOKEN;
+    if (!accountId || !token) {
+        throw new Error("AI_PROVIDER=cloudflare needs CLOUDFLARE_ACCOUNT_ID and CLOUDFLARE_API_TOKEN (Workers AI: Read) in the shell or .dev.vars");
+    }
+    return restAiBinding(accountId, token);
+}
+//# sourceMappingURL=ai-rest.js.map

package/dist/cli/lib/ai-rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-rest.js","sourceRoot":"","sources":["../../../src/cli/lib/ai-rest.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,KAAa;IAC5D,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAChB,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,KAAK,CAAC,iDAAiD,SAAS,kBAAkB,EAAE;gBAClF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,GAAG,GAAG,CAAC,OAAO;oBACd,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,mBAAmB,EAAE,EAAE;iBACxB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;aAChC,CAAC;YACJ,MAAM,EAAE,KAAK,IAAI,EAAE;gBACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,IAAwC;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC;IACxC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,0HAA0H,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC"}

package/dist/cli/lib/args.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Argument parsing for every CLI command: `node:util`'s `parseArgs` with the two settings this CLI
+ * always wants — positionals allowed, unknown flags refused — and its throws turned into one
+ * `UsageError` the dispatcher can render with the usage text. No dependency, and one place to
+ * change if that ever stops being true.
+ */
+import { type ParseArgsConfig } from "node:util";
+export type Options = NonNullable<ParseArgsConfig["options"]>;
+type Value<O> = O extends {
+    multiple: true;
+} ? O extends {
+    type: "boolean";
+} ? boolean[] : string[] : O extends {
+    type: "boolean";
+} ? boolean : string;
+/**
+ * What `parseArgs` returns for `options`, named here because its own result type is internal to
+ * `node:util` — an inferred return type cannot be written into this package's `.d.ts`.
+ */
+export interface Parsed<T extends Options> {
+    values: {
+        [K in keyof T]?: Value<T[K]>;
+    };
+    positionals: string[];
+}
+/** A bad invocation, not a failure: the dispatcher prints usage and exits 64 (EX_USAGE). */
+export declare class UsageError extends Error {
+}
+export declare function parse<const T extends Options>(argv: string[], config: {
+    options: T;
+}): Parsed<T>;
+export {};
+//# sourceMappingURL=args.d.ts.map

package/dist/cli/lib/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/args.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,eAAe,EAAa,MAAM,WAAW,CAAC;AAE5D,MAAM,MAAM,OAAO,GAAG,WAAW,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;AAE9D,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GACxC,CAAC,SAAS;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GAC3B,OAAO,EAAE,GACT,MAAM,EAAE,GACV,CAAC,SAAS;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GAC3B,OAAO,GACP,MAAM,CAAC;AAEb;;;GAGG;AACH,MAAM,WAAW,MAAM,CAAC,CAAC,SAAS,OAAO;IACvC,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAAE,CAAC;IACzC,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,4FAA4F;AAC5F,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAExC,wBAAgB,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE;IAAE,OAAO,EAAE,CAAC,CAAA;CAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAWhG"}

package/dist/cli/lib/args.js

@@ -0,0 +1,24 @@
+/**
+ * Argument parsing for every CLI command: `node:util`'s `parseArgs` with the two settings this CLI
+ * always wants — positionals allowed, unknown flags refused — and its throws turned into one
+ * `UsageError` the dispatcher can render with the usage text. No dependency, and one place to
+ * change if that ever stops being true.
+ */
+import { parseArgs } from "node:util";
+/** A bad invocation, not a failure: the dispatcher prints usage and exits 64 (EX_USAGE). */
+export class UsageError extends Error {
+}
+export function parse(argv, config) {
+    try {
+        return parseArgs({
+            args: argv,
+            options: config.options,
+            allowPositionals: true,
+            strict: true,
+        });
+    }
+    catch (err) {
+        throw new UsageError(err instanceof Error ? err.message : String(err));
+    }
+}
+//# sourceMappingURL=args.js.map

package/dist/cli/lib/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../../src/cli/lib/args.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAwB,SAAS,EAAE,MAAM,WAAW,CAAC;AAqB5D,4FAA4F;AAC5F,MAAM,OAAO,UAAW,SAAQ,KAAK;CAAG;AAExC,MAAM,UAAU,KAAK,CAA0B,IAAc,EAAE,MAAsB;IACnF,IAAI,CAAC;QACH,OAAO,SAAS,CAAC;YACf,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,IAAI;SACb,CAAc,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/cli/lib/authhub.d.ts

@@ -0,0 +1,7 @@
+import { type IxoNetwork } from "../../networks.js";
+/**
+ * Full login flow: print the URL (best-effort `open` on darwin), wait for either the loopback
+ * callback or a pasted URL, verify `state`, exchange the code, save the session.
+ */
+export declare function runLogin(network: IxoNetwork): Promise<void>;
+//# sourceMappingURL=authhub.d.ts.map

package/dist/cli/lib/authhub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authhub.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/authhub.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,UAAU,EAAY,MAAM,gBAAgB,CAAC;AA4J3D;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAoFjE"}