@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/facts/types.d.ts

@@ -0,0 +1,278 @@
+/**
+ * The facts API's types — everything a provider's handler is handed and everything it may hand
+ * back, public through `@ixo/decision-oracle/facts`.
+ *
+ * The shape of the deal (spec §3.4): a handler answers ONE named fact off the rubric's work order
+ * (the engine's manifest — the kit never parses a rubric). It gets the pulled claim, the frozen
+ * ctx, the declaration the engine published for that name, the `send` payload already resolved,
+ * and `tools` — the kit's own machinery (the stock lane, HTTP with UCAN, the AI judge, attachment
+ * bytes, C2PA, the buyer statement) so a handler almost never has to reach for `fetch`. It returns
+ * a value; the RUNNER (lib/facts/runner.ts) turns that into a frozen fact under rules a handler
+ * cannot break — a plain return is an `ok` fact, an error carries the MANIFEST's `onError`, and a
+ * throw is an error too. That is the invariant: a fact handler can never turn a failure into an
+ * approve. Only `fact.retryLater()` gets out, as the transient signal the workflow step retries on.
+ *
+ * Type-only, on purpose: this file must stay loadable in plain node (the `./facts` subpath is what
+ * a provider imports from their test suite), so it imports nothing but types.
+ */
+import type { Config } from "../config.js";
+import type { OracleEnv } from "../env.js";
+import type { Agreement, Manifest, ManifestAi, ManifestExt } from "../lib/engine/types.js";
+import type { AiFact, CtxFacts, ExtFact, FactSettings, FrequencyFact, Provenance, Transcript, UniqueFact } from "../lib/facts/factset.js";
+import type { FrequencyRule, UniqueRule } from "../lib/facts/stock/rule-defaults.js";
+import type { PulledClaim } from "../lib/ixo/index.js";
+import type { Attachment, AttachmentBody } from "../lib/ixo/attachments.js";
+import type { ClaimIntent, LinkedResource } from "../lib/ixo/blocksync/types.js";
+import type { QueryClient } from "../lib/ixo/chain.js";
+import type { Logger } from "../lib/logger.js";
+/** The chain shapes a handler reading `tools.chain` types against — re-exported through `./facts`. */
+export type { ClaimIntent, LinkedResource };
+/**
+ * A `send` entry in declared order: a scalar value, or an attachment on the named question. Defined
+ * here rather than in the AI connector because it is what `tools.ai.judge()` takes — the connector
+ * (stock/ai-check.ts) imports it back from this file.
+ */
+export type AiSendEntry = {
+    kind: "text";
+    key: string;
+    value: unknown;
+} | {
+    kind: "attachment";
+    key: string;
+    attachment: Attachment;
+};
+/** What EVERY handler sees: the claim, its answers, the build's frozen ctx, and the work order. */
+export interface FactInputBase {
+    claim: PulledClaim;
+    /** `claim.body` — the credentialSubject, verbatim. */
+    answers: Record<string, unknown>;
+    /** The build's ONE clock read and the collection window — never re-read the clock in a handler. */
+    ctx: CtxFacts;
+    /** The oracle's ai/image policy for this build (`defineOracle` `policies`). */
+    settings: FactSettings;
+    /** The whole work order — `fields`, `derived`, `ctx`, `usedBy`: context a handler may read. */
+    manifest: Manifest;
+}
+export interface ExtInput extends FactInputBase {
+    /** The `<name>` in `ext.<name>` — the work-order key this handler is answering. */
+    name: string;
+    expected: ManifestExt;
+    /** The declared `send` map resolved against the answers + ctx (`~derived` slots are null). */
+    send: Record<string, unknown>;
+    /** The `~derived` refs the engine, not the kit, computes — reported, never guessed. */
+    unresolved: string[];
+}
+export interface AiInput extends FactInputBase {
+    name: string;
+    check: ManifestAi;
+    send: Record<string, unknown>;
+    unresolved: string[];
+    /** The `send` map as typed, ordered model inputs — attachments on the lane, scalars as text. */
+    inputs: AiSendEntry[];
+}
+/**
+ * ONE call, SEVERAL declared sources — what a grouped handler (`group([...], handler)`) is handed.
+ * The case it exists for: four criteria judged by one structured model call. Answering them as four
+ * single handlers buys four completions for one judgment; a group buys one.
+ *
+ * It is a cheaper way to ANSWER, never a looser way to fail — every name a group returns is held to
+ * exactly the rules a single handler's fact meets (the manifest's `onError`, the fact cache, the
+ * type check), and a name it leaves out becomes that name's own error fact. See `runner.ts`.
+ */
+export interface GroupInput extends FactInputBase {
+    /**
+     * The names THIS call must answer: the group's declared names, minus any the work order does not
+     * declare and any a previous attempt already paid for (the fact cache wins). Answer these.
+     */
+    names: string[];
+    /** Per name, the same input a single `ExtHandler` gets — its declaration and its resolved `send`. */
+    sources: Record<string, ExtInput>;
+}
+/** One fact per name. A name left out is that name's `error` fact, with the rubric's own `onError`. */
+export type GroupResult = Record<string, ExtResult>;
+/**
+ * What `group(names, handler)` builds — an entry in `defineFacts({ groups: [...] })`. Two handlers
+ * for one name is refused where the table is written (`defineFacts`), not raced at runtime.
+ */
+export interface FactGroup {
+    readonly kind: "fact-group";
+    names: readonly string[];
+    handler: GroupHandler;
+}
+export interface UniqueInput extends FactInputBase {
+    rule: UniqueRule;
+}
+export interface FrequencyInput extends FactInputBase {
+    /** Null when the manifest declared the rule without `max`/`per` — unrunnable by the stock lane. */
+    rule: FrequencyRule | null;
+}
+/** `fact.error(detail)` — the runner stamps the manifest's onError; a handler never chooses it. */
+export interface FactErrorDraft {
+    status: "error";
+    detail: string;
+    transcript?: Transcript;
+}
+export type ExtResult = boolean | number | ExtFact | FactErrorDraft;
+export type AiResult = boolean | AiFact | FactErrorDraft;
+export type ExtHandler = (input: ExtInput, tools: ExtTools) => Promise<ExtResult> | ExtResult;
+export type AiHandler = (input: AiInput, tools: AiTools) => Promise<AiResult> | AiResult;
+export type GroupHandler = (input: GroupInput, tools: FactTools) => Promise<GroupResult> | GroupResult;
+export type UniqueHandler = (input: UniqueInput, tools: FactTools) => Promise<UniqueFact> | UniqueFact;
+export type FrequencyHandler = (input: FrequencyInput, tools: FactTools) => Promise<FrequencyFact> | FrequencyFact;
+/**
+ * What `defineFacts()` returns — the per-name handler table the runner routes through. Every name
+ * the provider did NOT list runs the stock lane, so a config is always a diff against stock, never
+ * a replacement of it. The `"*"` key under `ai` is the one wildcard: it catches every check the
+ * table does not name (a named handler still wins).
+ */
+export interface FactsConfig {
+    readonly kind: "facts-config";
+    ext: Record<string, ExtHandler>;
+    ai: Record<string, AiHandler>;
+    /** `group([...], handler)` entries — one handler answering several sources from one call. */
+    groups: FactGroup[];
+    unique?: UniqueHandler;
+    frequency?: FrequencyHandler;
+}
+/** What a provider writes — everything optional; `defineFacts` fills the gaps. */
+export interface FactsDeclaration {
+    ext?: Record<string, ExtHandler>;
+    ai?: Record<string, AiHandler>;
+    groups?: FactGroup[];
+    unique?: UniqueHandler;
+    frequency?: FrequencyHandler;
+}
+export interface HttpJsonInit {
+    method?: "GET" | "POST";
+    headers?: Record<string, string>;
+    body?: unknown;
+    timeoutMs?: number;
+    /** Default 3. Only a 5xx, 408, 429 or network error is retried; any other 4xx is answered once. */
+    attempts?: number;
+    /**
+     * Sign the call as this oracle: a self-signed UCAN from its did:web to THE HOST OF `url` (never
+     * an audience you name, so a token can only reach the host it was minted for). `true` signs
+     * `{ can: "*", with: "ixo:external-source" }`; `{ capability }` signs yours — set in code, never
+     * the rubric's `expected.capability`. An IXO service capability throws (an error fact).
+     */
+    ucan?: true | {
+        capability: {
+            can: string;
+            with: string;
+        };
+    };
+}
+export interface HttpJsonResult<T = unknown> {
+    ok: boolean;
+    /** null = no HTTP response at all (network error / timeout on every attempt). */
+    status: number | null;
+    body: T | null;
+    /** The §A.14.1 "why did the engine decide this" record — hand it back on the fact. */
+    transcript: Transcript;
+}
+/**
+ * The chain, as a handler may read it. The package's `exports` block deep imports, so without this
+ * a handler answering a chain-shaped fact (is the agent's card still the one we agreed to?) would
+ * hand-roll GraphQL against `config.BLOCKSYNC_GRAPHQL_URL` — untyped, unparsed, and duplicated per
+ * oracle.
+ *
+ * READS ONLY, and generic on purpose: nothing here knows what an agent card is. The act lane
+ * (signing) is the package's, never a handler's. Nor is there a general message-history read: the
+ * ONE thing an oracle may look up about what preceded a claim is the agent's own commitment
+ * (`claimIntent`), and it is on this interface precisely so it can be one filtered query rather
+ * than a handler paging the chain.
+ *
+ * Blocksync being unreachable throws (`AppError.unavailable`), which the runner lets through as the
+ * workflow step's retry signal — the deliberate opposite of an empty answer, which is a FACT (this
+ * entity anchors nothing; this agent filed no intent). Catch one only if "could not read the chain"
+ * is genuinely the fact you mean, and say so with `fact.error`.
+ */
+export interface ChainTools {
+    /** The LinkedResources an entity DID anchors — `#rub`, `#vct`, a card, with their `proof` hashes. */
+    linkedResources(entityDid: string): Promise<LinkedResource[]>;
+    /**
+     * The newest `MsgClaimIntent` this agent filed on this collection before `before` (the claim's
+     * submission date), or null when it filed none — a clock to measure delivery from, and the tx
+     * hash to cite for it. Pass `after` to floor the search: nothing filed before the user consented
+     * can be this agreement's commitment, so an older intent from a previous engagement on the same
+     * collection must not be picked up as this claim's clock.
+     *
+     * ONE server-side filtered query, never a scan: the indexer narrows by message type, by the
+     * agent/collection inside the message's jsonb `value`, and by time, and returns at most one row.
+     * A handler must not page the chain looking for this itself.
+     */
+    claimIntent(params: {
+        agentAddress: string;
+        collectionId: string;
+        before: string;
+        after?: string;
+    }): Promise<ClaimIntent | null>;
+    /**
+     * The chain RPC query client (`@ixo/impactxclient-sdk`) for this oracle's network — balances,
+     * grants, module state. The SDK is heavy, so it loads on FIRST call and the client is memoised
+     * per isolate; a handler that never asks never pays for it.
+     */
+    query(): Promise<QueryClient>;
+}
+/**
+ * The kit's machinery, per fact — what makes a handler a few lines instead of a connector. Built
+ * per target so `stock()` means "the stock lane for THIS fact": wrap it, fall back to it, or
+ * ignore it.
+ *
+ * The type parameter is which fact `stock()` answers, so `return tools.stock()` type-checks as the
+ * body of a handler with no cast: an ext handler sees `Promise<ExtFact>`, an ai handler
+ * `Promise<AiFact>` (`ExtTools` / `AiTools` below). `unique`/`frequency` handlers get the bare
+ * union — their `stock()` throws by design, because such a handler REPLACES its lane wholesale.
+ */
+export interface FactTools<F extends ExtFact | AiFact = ExtFact | AiFact> {
+    /** The stock lane for this fact — the batteries a custom handler wraps rather than reimplements. */
+    stock(): Promise<F>;
+    http: {
+        json<T = unknown>(url: string, init?: HttpJsonInit): Promise<HttpJsonResult<T>>;
+        /**
+         * A self-signed UCAN invocation addressed to `audience` — this oracle's did:web signs it.
+         * `audience` must be the did:web of the host you send it to; prefer `json(url, { ucan })`,
+         * which binds it for you. `capability` defaults to `ixo:external-source`; yours is set in
+         * code, never the rubric's `expected.capability`. An IXO service capability throws.
+         */
+        ucanHeaders(audience: string, capability?: {
+            can: string;
+            with: string;
+        }): Promise<Record<string, string>>;
+    };
+    ai: {
+        judge(instructions: string[], inputs: AiSendEntry[], opts?: {
+            model?: string;
+        }): Promise<AiFact>;
+        /** The declared `send` map as the judge's typed inputs — the attachment lane included. */
+        inputsFor(check: ManifestAi): AiSendEntry[];
+    };
+    attachments: {
+        on(question: string): Attachment[];
+        bytes(att: Attachment, opts?: {
+            maxBytes?: number;
+            timeoutMs?: number;
+        }): Promise<AttachmentBody>;
+        size(att: Attachment): Promise<number | null>;
+    };
+    c2pa: {
+        screen(bytes: Uint8Array | ArrayBuffer, mediaType?: string): Promise<Provenance | null>;
+    };
+    /** Blocksync + chain RPC reads — see `ChainTools`. */
+    chain: ChainTools;
+    /**
+     * The engine's buyer statement — read LAST, right before returning the fact it feeds (the engine
+     * records the snapshot current at decision time on its receipt). Omit `counterparty` for the
+     * claim's own agent, the usual question; pass an explicit `null` for the COLLECTION's own terms,
+     * the statement that names no counterparty.
+     */
+    agreement(counterparty?: string | null): Promise<Agreement | null>;
+    logger: Logger;
+    config: Config;
+    env: OracleEnv;
+}
+/** `FactTools` as an ext handler sees it: `stock()` is the external-source lane for its own name. */
+export type ExtTools = FactTools<ExtFact>;
+/** `FactTools` as an ai handler sees it: `stock()` is the OpenRouter lane for its own check. */
+export type AiTools = FactTools<AiFact>;
+//# sourceMappingURL=types.d.ts.map

package/dist/facts/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/facts/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,KAAK,EACV,MAAM,EACN,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,aAAa,EACb,UAAU,EACV,UAAU,EACV,UAAU,EACX,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,sGAAsG;AACtG,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;AAE5C;;;;GAIG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAC;AAEhE,mGAAmG;AACnG,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,WAAW,CAAC;IACnB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,mGAAmG;IACnG,GAAG,EAAE,QAAQ,CAAC;IACd,+EAA+E;IAC/E,QAAQ,EAAE,YAAY,CAAC;IACvB,+FAA+F;IAC/F,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,QAAS,SAAQ,aAAa;IAC7C,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,WAAW,CAAC;IACtB,8FAA8F;IAC9F,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,uFAAuF;IACvF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,OAAQ,SAAQ,aAAa;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gGAAgG;IAChG,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAW,SAAQ,aAAa;IAC/C;;;OAGG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,qGAAqG;IACrG,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;CACnC;AAED,uGAAuG;AACvG,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAEpD;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,WAAY,SAAQ,aAAa;IAChD,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,mGAAmG;IACnG,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;CAC5B;AAED,mGAAmG;AACnG,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,cAAc,CAAC;AACpE,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,cAAc,CAAC;AAEzD,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;AAC9F,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;AACzF,MAAM,MAAM,YAAY,GAAG,CACzB,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,SAAS,KACb,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC;AACxC,MAAM,MAAM,aAAa,GAAG,CAC1B,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,SAAS,KACb,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;AACtC,MAAM,MAAM,gBAAgB,GAAG,CAC7B,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,SAAS,KACb,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9B,6FAA6F;IAC7F,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjC,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mGAAmG;IACnG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,IAAI,GAAG;QAAE,UAAU,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,OAAO;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,iFAAiF;IACjF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,sFAAsF;IACtF,UAAU,EAAE,UAAU,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,UAAU;IACzB,qGAAqG;IACrG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9D;;;;;;;;;;OAUG;IACH,WAAW,CAAC,MAAM,EAAE;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAChC;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC,SAAS,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM;IACtE,oGAAoG;IACpG,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,EAAE;QACJ,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF;;;;;WAKG;QACH,WAAW,CACT,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,GACzC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KACpC,CAAC;IACF,EAAE,EAAE;QACF,KAAK,CACH,YAAY,EAAE,MAAM,EAAE,EACtB,MAAM,EAAE,WAAW,EAAE,EACrB,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,GACxB,OAAO,CAAC,MAAM,CAAC,CAAC;QACnB,0FAA0F;QAC1F,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,EAAE,CAAC;KAC7C,CAAC;IACF,WAAW,EAAE;QACX,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CAAC;QACnC,KAAK,CACH,GAAG,EAAE,UAAU,EACf,IAAI,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,GAC/C,OAAO,CAAC,cAAc,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;KAC/C,CAAC;IACF,IAAI,EAAE;QACJ,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;KACzF,CAAC;IACF,sDAAsD;IACtD,KAAK,EAAE,UAAU,CAAC;IAClB;;;;;OAKG;IACH,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,SAAS,CAAC;CAChB;AAED,qGAAqG;AACrG,MAAM,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;AAC1C,gGAAgG;AAChG,MAAM,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC"}

package/dist/facts/types.js

@@ -0,0 +1,19 @@
+/**
+ * The facts API's types — everything a provider's handler is handed and everything it may hand
+ * back, public through `@ixo/decision-oracle/facts`.
+ *
+ * The shape of the deal (spec §3.4): a handler answers ONE named fact off the rubric's work order
+ * (the engine's manifest — the kit never parses a rubric). It gets the pulled claim, the frozen
+ * ctx, the declaration the engine published for that name, the `send` payload already resolved,
+ * and `tools` — the kit's own machinery (the stock lane, HTTP with UCAN, the AI judge, attachment
+ * bytes, C2PA, the buyer statement) so a handler almost never has to reach for `fetch`. It returns
+ * a value; the RUNNER (lib/facts/runner.ts) turns that into a frozen fact under rules a handler
+ * cannot break — a plain return is an `ok` fact, an error carries the MANIFEST's `onError`, and a
+ * throw is an error too. That is the invariant: a fact handler can never turn a failure into an
+ * approve. Only `fact.retryLater()` gets out, as the transient signal the workflow step retries on.
+ *
+ * Type-only, on purpose: this file must stay loadable in plain node (the `./facts` subpath is what
+ * a provider imports from their test suite), so it imports nothing but types.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/facts/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/facts/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG"}

package/dist/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `@ixo/decision-oracle` — the package index: what a provider's worker entry imports.
+ *
+ * The whole runtime surface is `defineOracle()` (define-oracle.ts): it validates and registers the
+ * provider's config and hands back every export the Workers runtime needs. Everything else here is
+ * types — the config shape, the env contract a provider's wrangler.jsonc must satisfy (env.ts),
+ * the validated config, and the network table `IXO_NETWORK` defaults from (networks.ts), exported
+ * so a provider can name a network or a default without hardcoding a URL.
+ *
+ * NOT the worker entry any more: `wrangler.jsonc` points at src/dev-worker.ts, this package's own
+ * dev/test oracle, which is never published.
+ *
+ * The act seam's types are here too, since `policies.act` is written in the same config object;
+ * the FUNCTION that releases a held decision is worker-only and lives at
+ * `@ixo/decision-oracle/runtime` (src/runtime.ts).
+ */
+export type { ActContext, ActDecision, ActFacts, ActPolicy } from "./act.js";
+export type { Config } from "./config.js";
+export type { OracleWorker } from "./define-oracle.js";
+export { defineOracle } from "./define-oracle.js";
+export type { OracleBindings, OracleEnv, OracleVars } from "./env.js";
+export type { IxoNetwork } from "./networks.js";
+export { NETWORKS, networkDefaults } from "./networks.js";
+export type { ArchiveAbout, ArchiveAnswerView, ArchiveAsk, ArchiveDoc, ArchiveHooks, ArchiveKind, OracleConfig, } from "./oracle.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAC1E,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACvD,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACX,YAAY,GACb,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+/**
+ * `@ixo/decision-oracle` — the package index: what a provider's worker entry imports.
+ *
+ * The whole runtime surface is `defineOracle()` (define-oracle.ts): it validates and registers the
+ * provider's config and hands back every export the Workers runtime needs. Everything else here is
+ * types — the config shape, the env contract a provider's wrangler.jsonc must satisfy (env.ts),
+ * the validated config, and the network table `IXO_NETWORK` defaults from (networks.ts), exported
+ * so a provider can name a network or a default without hardcoding a URL.
+ *
+ * NOT the worker entry any more: `wrangler.jsonc` points at src/dev-worker.ts, this package's own
+ * dev/test oracle, which is never published.
+ *
+ * The act seam's types are here too, since `policies.act` is written in the same config object;
+ * the FUNCTION that releases a held decision is worker-only and lives at
+ * `@ixo/decision-oracle/runtime` (src/runtime.ts).
+ */
+export { defineOracle } from "./define-oracle.js";
+export { NETWORKS, networkDefaults } from "./networks.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/lib/api-lane/accept.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The door from the API router into durable execution — the `startApiClaim` seam
+ * (src/contracts/start-api-claim.ts, Go Prod §4.6, §11.3). Two calls because only a paid claim may
+ * run (§11.4): `recordApiClaims` after `/verify` has reserved the price, then `startApiClaims`.
+ *
+ * `recordApiClaims` writes each claim in ONE `db.batch` — `claim_ingests` (`queued`, `lane: api`),
+ * `api_claims` (canonical body, its digest, the erasure-proof `submitterDigest`) and `api_charges`
+ * (`reserved`) — every insert `onConflictDoNothing`, so the `claim_ingests` primary key stays the
+ * whole duplicate guard, as it is for the cron. It starts nothing.
+ *
+ * `startApiClaims` starts only what may run: a claim whose price is reserved, or a free one. The
+ * caller's word is not enough for money (§1.3 "never for an unpaid run"), so the charge row is read
+ * again here. `createBatch` skips an id that already exists, so a repeat is free. The `accepted`
+ * event (timeline + `claim.accepted`) is the workflow's first notify, not this request's: a
+ * 100-claim batch must not wait on 100 records built and posted.
+ */
+import type { RecordApiClaims, StartApiClaims, SubmitClaimRequest } from "../../contracts/index.js";
+import type { ApiClaimContent } from "../engine/types.js";
+/**
+ * The claim CONTENT (contract "The claim content and `contentDigest`", company authority D3): the
+ * strict-parsed submit minus transport (`webhookUrl`), with the resolved `protocolDid`. Only the
+ * caller's own `submitter` — an oracle fill is never the app's word — and the attachments as sent,
+ * before media-type detection rewrites them, so the SDK recomputes the same digest from what the
+ * app holds. An absent optional stays absent.
+ */
+export declare function claimContent(body: SubmitClaimRequest, protocolDid: string): ApiClaimContent;
+export declare const recordApiClaims: RecordApiClaims;
+export declare const startApiClaims: StartApiClaims;
+//# sourceMappingURL=accept.d.ts.map

package/dist/lib/api-lane/accept.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accept.d.ts","sourceRoot":"","sources":["../../../src/lib/api-lane/accept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAEV,eAAe,EAEf,cAAc,EACd,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AA0BvD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,GAAG,eAAe,CAQ3F;AAED,eAAO,MAAM,eAAe,EAAE,eAW7B,CAAC;AAwHF,eAAO,MAAM,cAAc,EAAE,cAM5B,CAAC"}

package/dist/lib/api-lane/accept.js

@@ -0,0 +1,218 @@
+/**
+ * The door from the API router into durable execution — the `startApiClaim` seam
+ * (src/contracts/start-api-claim.ts, Go Prod §4.6, §11.3). Two calls because only a paid claim may
+ * run (§11.4): `recordApiClaims` after `/verify` has reserved the price, then `startApiClaims`.
+ *
+ * `recordApiClaims` writes each claim in ONE `db.batch` — `claim_ingests` (`queued`, `lane: api`),
+ * `api_claims` (canonical body, its digest, the erasure-proof `submitterDigest`) and `api_charges`
+ * (`reserved`) — every insert `onConflictDoNothing`, so the `claim_ingests` primary key stays the
+ * whole duplicate guard, as it is for the cron. It starts nothing.
+ *
+ * `startApiClaims` starts only what may run: a claim whose price is reserved, or a free one. The
+ * caller's word is not enough for money (§1.3 "never for an unpaid run"), so the charge row is read
+ * again here. `createBatch` skips an id that already exists, so a repeat is free. The `accepted`
+ * event (timeline + `claim.accepted`) is the workflow's first notify, not this request's: a
+ * 100-claim batch must not wait on 100 records built and posted.
+ */
+import { and, eq, inArray, isNull, like } from "drizzle-orm";
+import { getDb } from "../../db/client.js";
+import { apiCharges, apiClaims, apiUploads, claimIngests } from "../../db/schema.js";
+import { AppError } from "../errors.js";
+import { hmacDigest } from "../facts/stock/normalize.js";
+import { contentDigest } from "../hash.js";
+import { instanceIdFor } from "../ids.js";
+import { depsFromEnv } from "../ixo/index.js";
+import { currentCorrelation } from "../metrics.js";
+import { schemeOf, sealHeader } from "../payments/header-seal.js";
+import { apiScopeId, UPLOAD_KEY_PREFIX } from "./ids.js";
+import { withMediaTypes } from "./media-type.js";
+import { bodyDigest } from "./source.js";
+/** Under createBatch's ceiling (100) and D1's 100 bound parameters per statement, which the
+ *  start read spends on the ids PLUS its `status = 'queued'`. */
+const CHUNK = 99;
+/** Upload ids per bind UPDATE — 90 ids + 4 other bound parameters stays under D1's 100. */
+const UPLOADS_PER_BIND = 90;
+function chunk(items, size) {
+    const out = [];
+    for (let i = 0; i < items.length; i += size)
+        out.push(items.slice(i, i + size));
+    return out;
+}
+/**
+ * The claim CONTENT (contract "The claim content and `contentDigest`", company authority D3): the
+ * strict-parsed submit minus transport (`webhookUrl`), with the resolved `protocolDid`. Only the
+ * caller's own `submitter` — an oracle fill is never the app's word — and the attachments as sent,
+ * before media-type detection rewrites them, so the SDK recomputes the same digest from what the
+ * app holds. An absent optional stays absent.
+ */
+export function claimContent(body, protocolDid) {
+    return {
+        protocolDid,
+        answers: body.answers,
+        ...(body.attachments !== undefined ? { attachments: body.attachments } : {}),
+        ...(body.submitter !== undefined ? { submitter: body.submitter } : {}),
+        ...(body.metadata !== undefined ? { metadata: body.metadata } : {}),
+    };
+}
+export const recordApiClaims = async (env, claims) => {
+    const { config, logger } = depsFromEnv(env);
+    const db = getDb(env);
+    // Stored as detected, so every evaluate and fold reads one frozen type; `requestDigest` was taken
+    // over the caller's own request, so an identical resubmit still compares equal.
+    const attachments = await withMediaTypes(claims.map((c) => c.attachments));
+    return Promise.all(claims.map((c, i) => recordOne(db, logger, config, { ...c, attachments: attachments[i] ?? [] })));
+};
+async function recordOne(db, logger, config, claim) {
+    const { claimId, sourceId } = claim;
+    const digest = await submitterDigest(logger, config.UNIQUE_HMAC_KEY, sourceId, claim.submitter);
+    // The verified header embeds the payer's reusable payment delegation: kept sealed, its scheme in
+    // the clear beside it (payments/header-seal.ts).
+    const header = claim.charge?.paymentHeader;
+    const paymentHeader = header ? await sealHeader(config, header) : null;
+    const uploadIds = claim.attachments.flatMap((a) => ("uploadId" in a ? [a.uploadId] : []));
+    const [ingest] = await db.batch([
+        db
+            .insert(claimIngests)
+            .values({
+            claimId,
+            collectionId: apiScopeId(sourceId, claim.protocolDid),
+            status: "queued",
+            lane: "api",
+        })
+            .onConflictDoNothing()
+            .returning({ claimId: claimIngests.claimId }),
+        db
+            .insert(apiClaims)
+            .values({
+            claimId,
+            sourceId,
+            protocolDid: claim.protocolDid,
+            body: claim.answers,
+            bodyDigest: await bodyDigest(claim.answers),
+            attachments: claim.attachments,
+            submitter: claim.submitter,
+            submitterDigest: digest,
+            metadata: claim.metadata,
+            idempotencyKey: claim.idempotencyKey,
+            requestDigest: claim.requestDigest,
+            content: claim.content,
+            contentDigest: await contentDigest(claim.content),
+            submittedBy: claim.submittedBy,
+            submittedVia: claim.submittedVia?.name ?? null,
+            submittedViaVerified: claim.submittedVia?.verified ?? null,
+            webhookUrl: claim.webhookUrl,
+            via: claim.oauth ? `oauth:${claim.oauth.clientId}` : null,
+        })
+            .onConflictDoNothing(),
+        // The uploads the claim names become ITS files: bound once (never re-bound to another claim),
+        // and kept until the organisation erases the claim (retention.ts) — `deleteAt` cleared, so an
+        // upload made before the owner's 2026-10-11 rule loses the old orphan clock it carried. Chunked:
+        // the ids plus the source, the prefix and the two set values must fit D1's 100 bound
+        // parameters, and a claim may name 100 uploads — one statement failed here AFTER `/verify`
+        // reserved the price. Still inside this one batch, so the bind is all or nothing.
+        ...chunk(uploadIds, UPLOADS_PER_BIND).map((ids) => db
+            .update(apiUploads)
+            .set({ claimId, deleteAt: null })
+            .where(and(inArray(apiUploads.uploadId, ids), eq(apiUploads.sourceId, sourceId), isNull(apiUploads.claimId), 
+        // checkSubmission refused an export already; the bind never takes one either.
+        like(apiUploads.r2Key, `${UPLOAD_KEY_PREFIX}%`)))),
+        ...(claim.charge
+            ? [
+                db
+                    .insert(apiCharges)
+                    .values({
+                    claimId,
+                    sourceId,
+                    amount: claim.charge.amount,
+                    amountCents: claim.charge.amountCents,
+                    offerId: claim.charge.offerId,
+                    payerDid: claim.charge.payerDid,
+                    paymentHeader,
+                    scheme: header ? schemeOf(header) : null,
+                    keyPrefix: claim.keyPrefix,
+                    via: claim.oauth ? `oauth:${claim.oauth.grantId}` : null,
+                    status: "reserved",
+                })
+                    .onConflictDoNothing(),
+            ]
+            : []),
+    ]);
+    if (ingest.length > 0)
+        return { claimId, status: "recorded" };
+    const charge = await db.query.apiCharges.findFirst({
+        columns: { status: true },
+        where: eq(apiCharges.claimId, claimId),
+    });
+    // `offered` is a chain claim's charge state (review billing), never an API claim's.
+    const status = charge?.status === "offered" ? null : (charge?.status ?? null);
+    return { claimId, status: "exists", charge: status };
+}
+/**
+ * HMAC of `sourceId|submitter` (§6.1): the frequency count's key, and it survives erasure. Without
+ * `UNIQUE_HMAC_KEY` a submitter could never be counted — not now and not after the key is set, the
+ * digest is written once — so the accept refuses loudly (a 500 the operator fixes) rather than
+ * store a claim whose frequency fact is `unresolved` forever.
+ */
+async function submitterDigest(logger, key, sourceId, submitter) {
+    if (!submitter)
+        return null;
+    if (!key) {
+        logger.error("api.submitter-digest-unkeyed", { sourceId });
+        throw AppError.internal("UNIQUE_HMAC_KEY is not set: a submitter cannot be recorded");
+    }
+    return hmacDigest(key, [sourceId, "|", submitter]);
+}
+export const startApiClaims = async (env, claimIds) => {
+    const { logger } = depsFromEnv(env);
+    const db = getDb(env);
+    for (let i = 0; i < claimIds.length; i += CHUNK) {
+        await startChunk(env, db, logger, claimIds.slice(i, i + CHUNK));
+    }
+};
+async function startChunk(env, db, logger, claimIds) {
+    const ids = [...claimIds];
+    // Only a claim still `queued` may start — the cron's `filterUnseen`: past the instance retention
+    // window `createBatch` would happily start a processed or failed claim again (a second decide).
+    const [claims, charges] = await Promise.all([
+        db
+            .select({
+            claimId: apiClaims.claimId,
+            sourceId: apiClaims.sourceId,
+            protocolDid: apiClaims.protocolDid,
+            receivedAt: apiClaims.receivedAt,
+        })
+            .from(apiClaims)
+            .innerJoin(claimIngests, eq(claimIngests.claimId, apiClaims.claimId))
+            .where(and(inArray(apiClaims.claimId, ids), eq(claimIngests.status, "queued"))),
+        db
+            .select({ claimId: apiCharges.claimId, status: apiCharges.status })
+            .from(apiCharges)
+            .where(inArray(apiCharges.claimId, ids)),
+    ]);
+    const chargeOf = new Map(charges.map((c) => [c.claimId, c.status]));
+    const runnable = claims.filter((c) => {
+        const status = chargeOf.get(c.claimId);
+        return status === undefined || status === "reserved";
+    });
+    const held = ids.filter((id) => !runnable.some((c) => c.claimId === id));
+    if (held.length > 0) {
+        logger.warn("api.start-held", {
+            claimIds: held,
+            reason: "not recorded, already started, or the charge is not reserved",
+        });
+    }
+    if (runnable.length === 0)
+        return;
+    const correlation = currentCorrelation();
+    await env.CLAIM_WORKFLOW.createBatch(await Promise.all(runnable.map(async (c) => ({
+        id: await instanceIdFor(c.claimId),
+        params: {
+            claimId: c.claimId,
+            collectionId: apiScopeId(c.sourceId, c.protocolDid),
+            lane: "api",
+            // The accepting request's trace, read off its scope so the seam's signature stays put.
+            ...correlation,
+        },
+    }))));
+}
+//# sourceMappingURL=accept.js.map

package/dist/lib/api-lane/accept.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accept.js","sourceRoot":"","sources":["../../../src/lib/api-lane/accept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAS7D,OAAO,EAAiB,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGlF,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC;iEACiE;AACjE,MAAM,KAAK,GAAG,EAAE,CAAC;AAEjB,2FAA2F;AAC3F,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,SAAS,KAAK,CAAI,KAAmB,EAAE,IAAY;IACjD,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAChF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAwB,EAAE,WAAmB;IACxE,OAAO;QACL,WAAW;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAoB,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;IACpE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACtB,kGAAkG;IAClG,gFAAgF;IAChF,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAC3E,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,KAAK,UAAU,SAAS,CACtB,EAAY,EACZ,MAAc,EACd,MAAkE,EAClE,KAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAChG,iGAAiG;IACjG,iDAAiD;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC;IAC3C,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC;QAC9B,EAAE;aACC,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,CAAC;YACN,OAAO;YACP,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC;YACrD,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC;aACD,mBAAmB,EAAE;aACrB,SAAS,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;QAC/C,EAAE;aACC,MAAM,CAAC,SAAS,CAAC;aACjB,MAAM,CAAC;YACN,OAAO;YACP,QAAQ;YACR,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,KAAK,CAAC,OAAO;YACnB,UAAU,EAAE,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;YAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,MAAM;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,aAAa,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;YACjD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,IAAI,IAAI;YAC9C,oBAAoB,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,IAAI,IAAI;YAC1D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;SAC1D,CAAC;aACD,mBAAmB,EAAE;QACxB,8FAA8F;QAC9F,8FAA8F;QAC9F,iGAAiG;QACjG,qFAAqF;QACrF,2FAA2F;QAC3F,kFAAkF;QAClF,GAAG,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAChD,EAAE;aACC,MAAM,CAAC,UAAU,CAAC;aAClB,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAChC,KAAK,CACJ,GAAG,CACD,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,EACjC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACjC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAC1B,8EAA8E;QAC9E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,iBAAiB,GAAG,CAAC,CAChD,CACF,CACJ;QACD,GAAG,CAAC,KAAK,CAAC,MAAM;YACd,CAAC,CAAC;gBACE,EAAE;qBACC,MAAM,CAAC,UAAU,CAAC;qBAClB,MAAM,CAAC;oBACN,OAAO;oBACP,QAAQ;oBACR,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;oBAC3B,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;oBACrC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;oBAC7B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;oBAC/B,aAAa;oBACb,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;oBACxC,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;oBACxD,MAAM,EAAE,UAAU;iBACnB,CAAC;qBACD,mBAAmB,EAAE;aACzB;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QACjD,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QACzB,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC;KACvC,CAAC,CAAC;IACH,oFAAoF;IACpF,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;IAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAc,EACd,GAAuB,EACvB,QAAgB,EAChB,SAAwB;IAExB,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3D,MAAM,QAAQ,CAAC,QAAQ,CAAC,4DAA4D,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAmB,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;IACpE,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;QAChD,MAAM,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC,CAAC;AAEF,KAAK,UAAU,UAAU,CACvB,GAAc,EACd,EAAY,EACZ,MAAc,EACd,QAA2B;IAE3B,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC1B,iGAAiG;IACjG,gGAAgG;IAChG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1C,EAAE;aACC,MAAM,CAAC;YACN,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,UAAU,EAAE,SAAS,CAAC,UAAU;SACjC,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,SAAS,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;aACpE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjF,EAAE;aACC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;aAClE,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;KAC3C,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;YAC5B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,8DAA8D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,MAAM,GAAG,CAAC,cAAc,CAAC,WAAW,CAClC,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,EAAE,EAAE,MAAM,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,MAAM,EAAE;YACN,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;YACnD,IAAI,EAAE,KAAc;YACpB,uFAAuF;YACvF,GAAG,WAAW;SACf;KACF,CAAC,CAAC,CACJ,CACF,CAAC;AACJ,CAAC"}