@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/cli/commands/engine.js

@@ -0,0 +1,107 @@
+/**
+ * `decision-oracle engine register` — register this oracle with the decision engine NOW, instead of
+ * lazily at its first decide (docs/ENGINE-CONTRACT.md "Registration"). The engine prices an oracle
+ * by its plan, and an unregistered oracle has none: the payments facilitator refuses its offers
+ * (`plan_inactive`) until it exists there. Registered with no plan row of its own, it runs at the
+ * engine's Standard plan at once — payable and listed. Only IXO's OWN oracles move to the IXO-owned
+ * plan (staff, in the engine's admin editor); a third-party oracle needs nothing more.
+ *
+ * It is the oracle's OWN engine client (cli/lib/engine.ts) — the exact `POST /v1/oracles/register`
+ * the Worker makes: an invocation minted as `did:web:<ORACLE_HOSTNAME>`, the ADR-36 proof over the
+ * `ORACLE_SECP_MNEMONIC` address, and the owner's `OWNER_DELEGATION_CAR`. The engine resolves that
+ * did:web by fetching `https://<ORACLE_HOSTNAME>/.well-known/did.json`, so run it against the env
+ * that is deployed (`--env devnet`) once the deploy has landed. Idempotent on the engine: running it
+ * again re-proves the same binding. Then it reads `GET /v1/oracles/me` for the billing status.
+ *
+ * It reads `GET /v1/oracles/me` FIRST: the engine upserts by did:web, so registering a did:web the
+ * engine already binds to ANOTHER address moves the oracle's identity (its fees, its plan, the
+ * address the chain's grants name). That is refused without `--yes`; same address or not yet
+ * registered ⇒ it proceeds.
+ *
+ *   decision-oracle engine register [--env <name>] [--env-file <path>] [--engine-url <url>]
+ *     [--network devnet] [--yes] [--json]
+ */
+import { EngineError } from "../../lib/engine/types.js";
+import { oracleWebDid } from "../../lib/ixo/ucan.js";
+import { parse, UsageError } from "../lib/args.js";
+import { resolveNetwork } from "../lib/chain.js";
+import { loadProjectConfig } from "../lib/devvars.js";
+import { cliEngine, describeError, engineUrlFor } from "../lib/engine.js";
+export async function run(argv) {
+    const [verb, ...rest] = argv;
+    if (verb !== "register") {
+        throw new UsageError(verb === undefined
+            ? "engine needs a subcommand (register)"
+            : `unknown engine subcommand: ${verb}`);
+    }
+    const { values } = parse(rest, {
+        options: {
+            env: { type: "string" },
+            "env-file": { type: "string" },
+            "engine-url": { type: "string" },
+            network: { type: "string" },
+            yes: { type: "boolean" },
+            json: { type: "boolean" },
+        },
+    });
+    const config = loadProjectConfig({ env: values.env, envFile: values["env-file"] });
+    const engineUrl = engineUrlFor({
+        network: resolveNetwork(values.network ?? config.IXO_NETWORK),
+        engineUrl: values["engine-url"],
+        devVars: config,
+    });
+    const { engine } = cliEngine(config, engineUrl);
+    const did = oracleWebDid(config);
+    try {
+        const bound = await registeredAddress(engine);
+        if (bound !== null && bound !== config.ORACLE_ADDRESS && !values.yes) {
+            console.error(`${did} is registered with ${engineUrl} as ${bound} — this would re-bind it to ${config.ORACLE_ADDRESS}`);
+            console.error("  an identity change: the engine's record of this oracle (fees, plan) moves to the new address. Re-run with --yes if that is intended.");
+            return 1;
+        }
+        await engine.register();
+        const me = await engine.me();
+        if (values.json) {
+            console.log(JSON.stringify({ did, address: config.ORACLE_ADDRESS, engine: engineUrl, me }));
+        }
+        else {
+            console.log(`registered ${did} (${config.ORACLE_ADDRESS}) with ${engineUrl}`);
+            console.log(`billing: ${me.billingStatus}`);
+            if (me.billingStatus !== "ok" && me.manageSubscriptionUrl) {
+                console.log(`  the owner's credits are short — top up at ${me.manageSubscriptionUrl}`);
+            }
+            if (bound !== null && bound !== config.ORACLE_ADDRESS) {
+                console.log(`  re-bound: ${bound} → ${config.ORACLE_ADDRESS}`);
+            }
+            console.log("payable now at the engine's Standard plan terms — nothing more to do (IXO staff move IXO's own oracles to the IXO-owned plan)");
+        }
+        return 0;
+    }
+    catch (err) {
+        console.error(describeError(err));
+        if (err instanceof EngineError && err.status === 402) {
+            // The engine's own message points at the old portal; the real flow is the Decision Console's
+            // credits page, signed in as the account that owns this oracle (the one that minted
+            // OWNER_DELEGATION_CAR) — its first purchase is what creates the subscription.
+            const owner = err.details?.ownerDid;
+            const credits = config.CONSOLE_URL
+                ? `${config.CONSOLE_URL.replace(/\/+$/, "")}/billing/credits`
+                : "the Decision Console › Billing › Credits";
+            console.error(`  the oracle's owner ${typeof owner === "string" ? owner : "(the account that minted OWNER_DELEGATION_CAR)"} must buy credits at ${credits}, signed in as that account, then run this again`);
+        }
+        return 1;
+    }
+}
+/** The address the engine binds this did:web to, or null when it is not registered (404). */
+async function registeredAddress(engine) {
+    try {
+        const me = await engine.me();
+        return me.address ?? null;
+    }
+    catch (err) {
+        if (err instanceof EngineError && err.status === 404)
+            return null;
+        throw err;
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/cli/commands/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/cli/commands/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAkB,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEvF,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7B,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,sCAAsC;YACxC,CAAC,CAAC,8BAA8B,IAAI,EAAE,CACzC,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE;YACP,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACxB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC1B;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,CAAC;QAC7D,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;QAC/B,OAAO,EAAE,MAAM;KAChB,CAAC,CAAC;IACH,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAEjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACrE,OAAO,CAAC,KAAK,CACX,GAAG,GAAG,uBAAuB,SAAS,OAAO,KAAK,+BAA+B,MAAM,CAAC,cAAc,EAAE,CACzG,CAAC;YACF,OAAO,CAAC,KAAK,CACX,wIAAwI,CACzI,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,KAAK,MAAM,CAAC,cAAc,UAAU,SAAS,EAAE,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;YAC5C,IAAI,EAAE,CAAC,aAAa,KAAK,IAAI,IAAI,EAAE,CAAC,qBAAqB,EAAE,CAAC;gBAC1D,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE,CAAC,qBAAqB,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,CAAC,GAAG,CACT,+HAA+H,CAChI,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACrD,6FAA6F;YAC7F,oFAAoF;YACpF,+EAA+E;YAC/E,MAAM,KAAK,GAAI,GAAG,CAAC,OAA8C,EAAE,QAAQ,CAAC;YAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW;gBAChC,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB;gBAC7D,CAAC,CAAC,0CAA0C,CAAC;YAC/C,OAAO,CAAC,KAAK,CACX,wBAAwB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gDAAgD,wBAAwB,OAAO,kDAAkD,CAC9L,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,iBAAiB,CAAC,MAA2B;IAC1D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/cli/commands/erase.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `decision-oracle erase` — the collection OWNER erases chain claims' data on this oracle (company
+ * authority D12: the oracle never deletes it on its own). A loop over `DELETE /v1/claims/:id/body`,
+ * signed as the AuthHub session `decision-oracle login` saved, which must be the collection's CURRENT
+ * chain owner. Each erase strips the claim's fact transcripts and registry text; the decision, the
+ * receipt and the digests stay. Idempotent: an already-erased claim answers 204 again.
+ *
+ *   decision-oracle erase <claimId>… | --collection <id>  [--yes]
+ *     [--network devnet|testnet|mainnet] [--kit <url>] [--env-file <path>]
+ *
+ * `--collection` erases EVERY claim of that collection this oracle has seen (`GET /v1/claims`,
+ * paged), except those still being decided (`queued` / `processing` — the route refuses them `409`),
+ * which it skips and lists. Without `--yes` it is a dry run: it prints what it would erase and stops.
+ * A `429` waits its `Retry-After` (or a short backoff) and retries.
+ */
+export declare function run(argv: string[]): Promise<number>;
+//# sourceMappingURL=erase.d.ts.map

package/dist/cli/commands/erase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"erase.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/erase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAeH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAwDzD"}

package/dist/cli/commands/erase.js

@@ -0,0 +1,117 @@
+/**
+ * `decision-oracle erase` — the collection OWNER erases chain claims' data on this oracle (company
+ * authority D12: the oracle never deletes it on its own). A loop over `DELETE /v1/claims/:id/body`,
+ * signed as the AuthHub session `decision-oracle login` saved, which must be the collection's CURRENT
+ * chain owner. Each erase strips the claim's fact transcripts and registry text; the decision, the
+ * receipt and the digests stay. Idempotent: an already-erased claim answers 204 again.
+ *
+ *   decision-oracle erase <claimId>… | --collection <id>  [--yes]
+ *     [--network devnet|testnet|mainnet] [--kit <url>] [--env-file <path>]
+ *
+ * `--collection` erases EVERY claim of that collection this oracle has seen (`GET /v1/claims`,
+ * paged), except those still being decided (`queued` / `processing` — the route refuses them `409`),
+ * which it skips and lists. Without `--yes` it is a dry run: it prints what it would erase and stops.
+ * A `429` waits its `Retry-After` (or a short backoff) and retries.
+ */
+import { setTimeout as sleep } from "node:timers/promises";
+import { parse, UsageError } from "../lib/args.js";
+import { confirm, resolveNetwork } from "../lib/chain.js";
+import { oracleUrlFor, tryProjectConfig } from "../lib/devvars.js";
+import { kitFetch, loadSession } from "../lib/session.js";
+/** Ids printed per list; the rest is a count. */
+const SHOWN = 5;
+/** Attempts per call while the oracle answers `429`. */
+const ATTEMPTS = 5;
+export async function run(argv) {
+    const { values, positionals } = parse(argv, {
+        options: {
+            collection: { type: "string" },
+            yes: { type: "boolean" },
+            network: { type: "string" },
+            kit: { type: "string" },
+            "env-file": { type: "string" },
+        },
+    });
+    if (values.collection ? positionals.length > 0 : positionals.length === 0) {
+        throw new UsageError("erase needs <claimId>… or --collection <id> (not both)");
+    }
+    const network = resolveNetwork(values.network);
+    const kitUrl = oracleUrlFor({
+        kit: values.kit,
+        devVars: tryProjectConfig({ envFile: values["env-file"] }),
+    });
+    const session = await loadSession(network);
+    const call = (path, method) => withRetry(() => kitFetch(session, kitUrl, path, { method }));
+    const { claimIds, inFlight } = values.collection
+        ? await claimsOf(call, values.collection)
+        : { claimIds: positionals, inFlight: [] };
+    if (inFlight.length > 0) {
+        console.log(`skipping ${inFlight.length} still being decided: ${sample(inFlight)}`);
+    }
+    confirm({
+        network,
+        signer: session.did,
+        action: `erase ${claimIds.length} claim(s)' transcripts and registry text — cannot be undone`,
+        lines: [`oracle  : ${kitUrl}`, `claims  : ${sample(claimIds)}`],
+    }, values.yes === true, { proceeding: "erasing…" });
+    const busy = [];
+    const failed = [];
+    let erased = 0;
+    for (const claimId of claimIds) {
+        const res = await call(`/v1/claims/${encodeURIComponent(claimId)}/body`, "DELETE");
+        if (res.ok)
+            erased++;
+        else if (res.status === 409)
+            busy.push(claimId);
+        else {
+            failed.push(claimId);
+            console.log(`${res.status} ${claimId} ${await res.text()}`);
+        }
+    }
+    console.log(`erased ${erased} of ${claimIds.length}`);
+    if (busy.length > 0)
+        console.log(`still being decided (retry later): ${sample(busy)}`);
+    if (failed.length > 0)
+        console.log(`failed: ${sample(failed)}`);
+    return failed.length === 0 ? 0 : 1;
+}
+/** Every claim id of the collection this oracle has seen, split by whether it can be erased now. */
+async function claimsOf(call, collectionId) {
+    const claimIds = [];
+    const inFlight = [];
+    let cursor = null;
+    do {
+        const query = new URLSearchParams({
+            collectionId,
+            limit: "500",
+            ...(cursor ? { cursor } : {}),
+        });
+        const res = await call(`/v1/claims?${query}`, "GET");
+        if (!res.ok)
+            throw new Error(`listing ${collectionId}: ${res.status} ${await res.text()}`);
+        const page = (await res.json());
+        for (const c of page.items) {
+            const deciding = c.ingestStatus === "queued" || c.ingestStatus === "processing";
+            (deciding ? inFlight : claimIds).push(c.claimId);
+        }
+        cursor = page.nextCursor;
+    } while (cursor);
+    return { claimIds, inFlight };
+}
+/** A fresh invocation per attempt (each is short-lived); a `429` waits `Retry-After` or backs off. */
+async function withRetry(send) {
+    for (let attempt = 1;; attempt++) {
+        const { res } = await send();
+        if (res.status !== 429 || attempt === ATTEMPTS)
+            return res;
+        const after = Number(res.headers.get("retry-after"));
+        await sleep(Number.isFinite(after) && after > 0 ? after * 1000 : 500 * 2 ** attempt);
+    }
+}
+function sample(ids) {
+    if (ids.length === 0)
+        return "none";
+    const shown = ids.slice(0, SHOWN).join(", ");
+    return ids.length > SHOWN ? `${shown} … (+${ids.length - SHOWN} more)` : shown;
+}
+//# sourceMappingURL=erase.js.map

package/dist/cli/commands/erase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erase.js","sourceRoot":"","sources":["../../../src/cli/commands/erase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEvD,iDAAiD;AACjD,MAAM,KAAK,GAAG,CAAC,CAAC;AAChB,wDAAwD;AACxD,MAAM,QAAQ,GAAG,CAAC,CAAC;AAInB,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QAC1C,OAAO,EAAE;YACP,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC/B;KACF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,UAAU,CAAC,wDAAwD,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAElG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,UAAU;QAC9C,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;QACzC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,MAAM,yBAAyB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,CACL;QACE,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,GAAG;QACnB,MAAM,EAAE,SAAS,QAAQ,CAAC,MAAM,6DAA6D;QAC7F,KAAK,EAAE,CAAC,aAAa,MAAM,EAAE,EAAE,aAAa,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;KAChE,EACD,MAAM,CAAC,GAAG,KAAK,IAAI,EACnB,EAAE,UAAU,EAAE,UAAU,EAAE,CAC3B,CAAC;IAEF,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnF,IAAI,GAAG,CAAC,EAAE;YAAE,MAAM,EAAE,CAAC;aAChB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAC3C,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,OAAO,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,sCAAsC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,oGAAoG;AACpG,KAAK,UAAU,QAAQ,CACrB,IAAU,EACV,YAAoB;IAEpB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,GAAG,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;YAChC,YAAY;YACZ,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC;YAChF,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC,QAAQ,MAAM,EAAE;IACjB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,sGAAsG;AACtG,KAAK,UAAU,SAAS,CAAC,IAAsC;IAC7D,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,GAAa;IAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,GAAG,CAAC,MAAM,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AACjF,CAAC"}

package/dist/cli/commands/facts-run.d.ts

@@ -0,0 +1,30 @@
+/**
+ * `decision-oracle facts run` — the handler dev loop: YOUR handlers, a claim file on disk, the LIVE work
+ * order, and nothing else. No chain write, no D1 row, no claim pulled from Matrix, and no credits
+ * spent on a decision — `--preview` asks the engine's dev route, which decides nothing and bills
+ * nothing.
+ *
+ *   decision-oracle facts run --protocol <did> --claim <file> [--collection <id>] [--agent <address>]
+ *     [--facts src/facts/index.ts] [--preview] [--no-ai] [--json]
+ *     [--engine-url <url>] [--network devnet|testnet|mainnet] [--env-file <path>] [--env <name>]
+ *
+ * The claim file is either a FLAT answers object — the same file `submit-claim --answers` takes, so
+ * a protocol's `sample-claim.json` works as it stands — or the envelope
+ * `{ answers, attachments: [{ question, name, mediaType, path }] }` when a claim carries files.
+ * An attachment `path` is relative to the claim file itself and its bytes ride as `data:` URLs, so
+ * `tools.attachments.bytes()` works exactly as it does against Matrix, without the claim bot.
+ *
+ * What is REAL here: the manifest (read from the engine), the runner and its rules, the tools
+ * (HTTP, UCAN headers, `tools.ai.judge` against the configured AI provider — that one spends money), `validateFacts`
+ * and the frozen FactSet. What is not: `ctx` without `--collection` — its clock is the real one, so
+ * a date rule reads the instant it would in production, but the collection window and submission
+ * plane around it are a sample's empty ones; the stock `unique` lane, which reads this oracle's D1
+ * registries and is answered here by the fail-closed placeholder below (`uniqueNotRun`) so the rest
+ * of the run still happens; and C2PA provenance, which cannot instantiate its WASM outside a Worker
+ * — it reads as inconclusive here and is only ever screened for real in the deployed oracle.
+ *
+ * Exit codes: 0 every declared fact answered · 1 issues (or a failure worth fixing) · 2 the rubric
+ * is unusable · 64 usage, including a handlers module that exports no `facts`.
+ */
+export declare function run(argv: string[]): Promise<number>;
+//# sourceMappingURL=facts-run.d.ts.map

package/dist/cli/commands/facts-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts-run.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/facts-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AA0FH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoSzD"}