@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/lib/facts/runner.js

@@ -0,0 +1,438 @@
+/**
+ * The facts runner — ONE place that runs a handler, whoever wrote it (spec §3.4). The stock
+ * producer is this with an empty handler table; a provider's `defineFacts({ ext, ai, … })` is the
+ * same run with some names routed elsewhere. That is the point: the guarantees below hold
+ * identically for both, because there is only one code path.
+ *
+ * What the runner guarantees around every handler:
+ *  - **Normalization** — a plain `true` / `8200` becomes an `ok` fact; a `fact.error(...)` draft
+ *    becomes a full error fact.
+ *  - **Fail closed** — an error fact carries the MANIFEST's `onError`, stamped here, overriding
+ *    whatever the handler put there. A THROW is the same thing: an error fact, never an approve,
+ *    never a lost claim. A handler cannot upgrade its own failure.
+ *  - **One retry signal** — `fact.retryLater()`, the kit's own loud `AppError`s, and a retryable
+ *    `EngineError` (the eval engine's own 5xx / `UNAVAILABLE` / `RATE_LIMITED`, e.g.
+ *    `tools.agreement()`'s read) all get out, as `unavailable`, so the workflow step retries
+ *    instead of freezing a verdict — the stock ext and AI lanes throw the same way for an outage.
+ *    BOUNDED: on the step's last attempt (`finalAttempt`) the transient ones freeze as the
+ *    rubric's `onError` instead, so an outage that outlives the retries still ends as a fact. The rule (task-14, 2026-09-14): a deterministic failure is a
+ *    fact; a transient one is a retry — claims are decided once, so a claim held for review over
+ *    trouble the engine never actually judged can never be re-run. A NON-retryable `EngineError`
+ *    (a real 404 / wrong-shaped document / counterparty mismatch) is still a fact: that IS the
+ *    engine's answer.
+ *  - **The fact cache** — a prior crashed attempt's paid answer is returned verbatim and the
+ *    handler never runs (producer.ts `FactCache`; `unique`/`frequency` never go through it).
+ *  - **The fan-out cap** — at most `MAX_CONCURRENT_CONNECTORS` ext/ai handlers in flight.
+ *
+ * NODE-SAFE by construction: this module is what `@ixo/decision-oracle/facts` and a provider's test
+ * suite pull in, so it imports only types, the pure `send.ts` / `rule-defaults.ts` readers, the
+ * `fact` helpers and `AppError`. Nothing here may reach `cloudflare:*`, a `.wasm`, D1 or KV — the
+ * stock lanes arrive as `deps.stock`, already built by whoever has a runtime.
+ */
+import { fact, RetryLater } from "../../facts/fact.js";
+import { EngineError } from "../engine/types.js";
+import { AppError } from "../errors.js";
+import { frequencyRuleOf, uniqueRuleOf } from "./stock/rule-defaults.js";
+import { aiEntries, derivedSendRefs, resolveSendPayload } from "./stock/send.js";
+/**
+ * Connector fan-out cap over the ext+ai lanes: a rubric declaring 30 AI checks must not open 30
+ * model calls at once — the isolate allows 6 simultaneous outbound connections, OpenRouter
+ * throttles bursts, and a misauthored rubric should degrade to "slower", never to a socket/429
+ * storm. 4 keeps a typical rubric fully parallel; results are keyed by name, so order never
+ * matters. `unique`/`frequency` run beside the pool — one registry/count read each, not fan-out.
+ */
+export const MAX_CONCURRENT_CONNECTORS = 4;
+/** Run tasks with at most `limit` in flight — the tiny worker pool the cap needs, nothing more. */
+async function inPool(limit, tasks) {
+    let next = 0;
+    const worker = async () => {
+        while (next < tasks.length) {
+            const task = tasks[next++];
+            if (task)
+                await task();
+        }
+    };
+    await Promise.all(Array.from({ length: Math.min(limit, tasks.length) }, worker));
+}
+/**
+ * The basics every handler input is built from — one object, built once per run, spread into each
+ * ext/ai/unique/frequency input. Exported because `tools.stock()` (lib/facts/tools.ts) has to hand
+ * a stock lane the SAME input the runner would have: two builders would drift.
+ */
+export function factInputBase(claim, manifest, deps) {
+    return { claim, answers: claim.body, ctx: deps.ctx, settings: deps.settings, manifest };
+}
+/** One declared source's input: the `send` map resolved, the `~derived` refs reported. */
+export function buildExtInput(base, name, expected) {
+    return {
+        ...base,
+        name,
+        expected,
+        send: resolveSendPayload(expected.send, base.claim.body, base.ctx),
+        unresolved: derivedSendRefs(expected.send),
+    };
+}
+/** One declared check's input — plus the `send` map as the model's typed, ordered inputs. */
+export function buildAiInput(base, name, check) {
+    const send = resolveSendPayload(check.send, base.claim.body, base.ctx);
+    return {
+        ...base,
+        name,
+        check,
+        send,
+        unresolved: derivedSendRefs(check.send),
+        inputs: aiEntries(base.claim, check, send),
+    };
+}
+/**
+ * A handler that returned something that is neither a plain value nor a fact (a string, a number
+ * where only a boolean is a verdict, `undefined`, `null`, a bare object) is a bug in the handler —
+ * and it has to read as an unanswered fact that NAMES the problem, not as `detail: undefined` or a
+ * "cannot read properties" crash three lines later.
+ */
+function badReturn(result, onError, expected) {
+    const kind = result === null ? "null" : typeof result;
+    return { status: "error", onError, detail: `handler returned ${kind} — expected ${expected}` };
+}
+/** A plain return becomes an `ok` fact; anything that failed carries the manifest's `onError`. */
+export function normalizeExt(result, onError) {
+    if (typeof result === "boolean" || typeof result === "number")
+        return fact.ok(result);
+    if (typeof result !== "object" || result === null) {
+        return badReturn(result, onError, "boolean/number/a fact");
+    }
+    if (result.status === "ok")
+        return result;
+    if (result.status !== "error")
+        return badReturn(result, onError, "boolean/number/a fact");
+    return {
+        status: "error",
+        onError,
+        detail: result.detail,
+        ...(result.transcript ? { transcript: result.transcript } : {}),
+    };
+}
+/** Same, for an AI check: a bare `true`/`false` is a verdict nothing failed under. */
+export function normalizeAi(result, onError) {
+    if (typeof result === "boolean")
+        return fact.ai.ok(result);
+    if (typeof result !== "object" || result === null) {
+        return badReturn(result, onError, "boolean/a fact");
+    }
+    if (result.status === "ok")
+        return result;
+    if (result.status !== "error")
+        return badReturn(result, onError, "boolean/a fact");
+    return {
+        status: "error",
+        onError,
+        detail: result.detail,
+        ...(result.transcript ? { transcript: result.transcript } : {}),
+    };
+}
+/**
+ * What a throw out of an ext/ai handler becomes. Three things are let through instead of frozen:
+ * `fact.retryLater()`, the public "not the claim's fault, ask me again"; an `AppError` — the kit's
+ * own fail-loudly signal, which the stock lanes throw for a signing/config fault the workflow step
+ * must retry rather than pay a verdict for; and a retryable `EngineError` — the eval engine's own
+ * 5xx / `UNAVAILABLE` / `RATE_LIMITED` (`tools.agreement()`'s read, task-14 2026-09-14: a devnet
+ * claim was held for review on every fact because the engine's own outage got frozen as an error
+ * fact, and a claim is decided once, so it could never be re-run). The rule is the same one chain
+ * reads already follow (`tools.chain` — an outage throws and retries; an empty answer is a fact):
+ * **a deterministic failure is a fact; a transient one is a retry.** A NON-retryable `EngineError`
+ * (a real 404 / wrong-shaped document / counterparty mismatch) is still the handler crashing on a
+ * genuine answer, and reads as an unanswered fact with the rubric's fallback — never as an approve.
+ *
+ * Split in two because a GROUP owes several names one detail: it stamps the same crash onto each
+ * of them, under each one's own `onError`.
+ */
+function detailForThrow(deps, kind, name, err) {
+    const transient = err instanceof RetryLater ||
+        (err instanceof AppError && err.status === 503) ||
+        (err instanceof EngineError && err.retryable);
+    // The step's last attempt: no retry is left to wait the outage out, so the fallback is the fact.
+    if (transient && deps.finalAttempt) {
+        const detail = `still unavailable on the last attempt: ${err.message}`;
+        deps.logger.warn("facts.retries-exhausted", { kind, name, detail });
+        return detail;
+    }
+    if (err instanceof RetryLater)
+        throw AppError.unavailable(err.message, err);
+    if (err instanceof AppError)
+        throw err;
+    if (err instanceof EngineError && err.retryable)
+        throw AppError.unavailable(err.message, err);
+    deps.logger.warn("facts.handler-threw", { kind, name, error: String(err) });
+    return err instanceof Error ? err.message : String(err);
+}
+function factForThrow(deps, kind, name, onError, err) {
+    return { status: "error", onError, detail: detailForThrow(deps, kind, name, err) };
+}
+/**
+ * `facts.handler` around one handler call: op the lane (`ext-source` / `ai-check` for the stock
+ * lanes, `custom` for a provider's, `group` / `unique` / `frequency`), route the fact's name,
+ * outcome what came back (`ok` / `error`) — `error` too for a throw let out as a retry. A
+ * fact-cache hit is recorded by the caller as `cached`, with no call to time. The call also runs
+ * inside a `facts.handler` trace span, labelled like the metric (observability spec §4).
+ */
+async function timeHandler(deps, op, name, run, outcomeOf) {
+    const started = Date.now();
+    let outcome = "error";
+    try {
+        const fact = await inHandlerSpan(deps, op, name, run);
+        outcome = outcomeOf(fact);
+        return fact;
+    }
+    finally {
+        deps.metrics?.timing("facts.handler", Date.now() - started, {
+            op,
+            route: name,
+            outcome,
+            id: deps.protocolDid,
+        });
+    }
+}
+const inHandlerSpan = (deps, op, route, fn) => deps.span ? deps.span("facts.handler", { op, route, id: deps.protocolDid }, fn) : fn();
+const statusOf = (fact) => fact.status;
+const answered = () => "ok";
+/** `unique`/`frequency` have no error shape — a throw is loud, `retryLater` still means retry. */
+function rethrow(err) {
+    throw err instanceof RetryLater ? AppError.unavailable(err.message, err) : err;
+}
+/**
+ * Produce every fact the work order names: `facts.<kind>[name]` if the provider listed it, the
+ * stock lane otherwise. The result is exactly what a `FactsProducer` returns — validate.ts holds
+ * it to the order before anything is frozen.
+ */
+export async function runHandlers(facts, claim, manifest, deps) {
+    const { logger } = deps;
+    const base = factInputBase(claim, manifest, deps);
+    // A handler for a name the rubric never declares produces nothing — say so once, loudly enough
+    // to find in logs: a typo'd key is otherwise a silently-stock fact. `ai["*"]` is the wildcard.
+    for (const name of Object.keys(facts.ext)) {
+        if (!(name in manifest.ext))
+            logger.warn("facts.handler-unused", { kind: "ext", name });
+    }
+    for (const name of Object.keys(facts.ai)) {
+        if (name !== "*" && !(name in manifest.ai)) {
+            logger.warn("facts.handler-unused", { kind: "ai", name });
+        }
+    }
+    // A group's names are ext names too, so the same rule applies to each of them — and the ones the
+    // work order DOES declare are claimed here, because a grouped name must not also run the single
+    // (or stock) lane: that would be two answers for one fact, decided by whichever wrote last.
+    const groupedNames = new Set();
+    for (const g of facts.groups) {
+        for (const name of g.names) {
+            if (name in manifest.ext)
+                groupedNames.add(name);
+            else
+                logger.warn("facts.handler-unused", { kind: "ext", name });
+        }
+    }
+    // Same for the rule lanes: a `unique`/`frequency` handler written for a rubric that declares no
+    // such rule is dead code, and silence would read as "my dup handler ran".
+    if (facts.unique && !manifest.unique)
+        logger.warn("facts.handler-unused", { kind: "unique" });
+    if (facts.frequency && !manifest.frequency) {
+        logger.warn("facts.handler-unused", { kind: "frequency" });
+    }
+    // A declared frequency rule without `max`/`per` (an older engine's `{ ruleId }`) cannot run:
+    // the stock lane produces nothing, and validate.ts refuses the build as our/the engine's bug
+    // (rule-defaults.ts). A CUSTOM handler still runs — it may know the rule another way.
+    const frequencyRule = manifest.frequency ? frequencyRuleOf(manifest.frequency) : null;
+    if (manifest.frequency && !frequencyRule && !facts.frequency) {
+        logger.warn("stock.frequency-unrunnable", { ruleId: manifest.frequency.ruleId });
+    }
+    // A prior crashed attempt's already-resolved answers (fact-cache.ts), read ONCE before any
+    // handler runs: a hit is returned verbatim — transcript, error status and all — instead of
+    // re-running (and re-paying) it. A cached fact may predate THIS attempt's `frozenAt`; that is
+    // sound: the wire only asserts `frozenAt === ctx.now` (factset.ts), and a fact's own timing
+    // lives in its transcript. `unique`/`frequency` never go through here — registry state and
+    // calendar windows must be fresh per attempt.
+    const declared = Object.keys(manifest.ext).length > 0 || Object.keys(manifest.ai).length > 0;
+    const cached = new Map((deps.factCache && declared ? await deps.factCache.read(claim.claimId) : []).flatMap((row) => row.kind === "ext" || row.kind === "ai"
+        ? [[`${row.kind}:${row.name}`, row.fact]]
+        : []));
+    // `stock.fact-cache-hit` — and `stock.frequency-unrunnable` above — keep their `stock.` names
+    // though both moved here from stock/index.ts: deployed log queries already name them.
+    const cacheHit = (kind, name) => {
+        const hit = cached.get(`${kind}:${name}`);
+        if (hit)
+            logger.info("stock.fact-cache-hit", { claimId: claim.claimId, kind, name });
+        return hit;
+    };
+    /**
+     * The per-fact wrapper, written ONCE for both lanes: cache hit short-circuits (and is never
+     * re-written), the handler runs under the try/catch, whatever comes back is normalized against
+     * the MANIFEST's `onError`, and the resolved fact is cached. Splitting this per kind is how the
+     * guarantees would drift — a rule changed on `ext` and forgotten on `ai`.
+     */
+    const runFact = async (kind, name, onError, target, input, handler, normalize, op) => {
+        const hit = cacheHit(kind, name);
+        if (hit) {
+            deps.metrics?.timing("facts.handler", 0, {
+                op,
+                route: name,
+                outcome: "cached",
+                id: deps.protocolDid,
+            });
+            return hit;
+        }
+        const resolved = await timeHandler(deps, op, name, async () => {
+            try {
+                // `deps.tools` is target-blind in its TYPE (it answers every kind), but the target it
+                // is given picks the lane `stock()` runs — so tools for an ext target are `ExtTools`
+                // and for an ai target `AiTools`, which is what the handler is declared to take.
+                return normalize(await handler(input, deps.tools(target)), onError);
+            }
+            catch (err) {
+                // The one cast: an error fact is the same object in both unions (factset.ts).
+                return factForThrow(deps, kind, name, onError, err);
+            }
+        }, statusOf);
+        await deps.factCache?.write(claim.claimId, kind, name, resolved);
+        return resolved;
+    };
+    const ext = {};
+    const ai = {};
+    /**
+     * A grouped handler: ONE call, one slot in the fan-out cap, several facts — for the oracle whose
+     * four criteria come out of a single structured model call. Everything the per-fact wrapper
+     * guarantees still holds per NAME: each fact carries its OWN declaration's `onError`, each is
+     * cached on its own, and a crash freezes every name the call owed. What a group adds is the
+     * silence rule — a name the handler forgot is that name's error, because "no fact" is not an
+     * answer and must never read as one — and a name nobody asked for, which is dropped with a warning
+     * rather than written (a rule could not read it anyway).
+     */
+    const runGroup = async (g, declared) => {
+        const pending = [];
+        const cachedHere = new Set();
+        for (const [name, expected] of declared) {
+            const hit = cacheHit("ext", name);
+            if (hit) {
+                ext[name] = hit;
+                cachedHere.add(name);
+            }
+            else
+                pending.push([name, expected]);
+        }
+        // Every name already paid for by an earlier attempt — the CALL is what the cache is saving here.
+        if (pending.length === 0)
+            return;
+        const names = pending.map(([name]) => name);
+        const sources = {};
+        for (const [name, expected] of pending)
+            sources[name] = buildExtInput(base, name, expected);
+        const label = `group(${g.names.join(", ")})`;
+        let answers = {};
+        let failure = null;
+        // `error` until the call answers — also when a retry signal escapes the catch below.
+        let outcome = "error";
+        const started = Date.now();
+        try {
+            const returned = await inHandlerSpan(deps, "group", label, async () => g.handler({ ...base, names, sources }, deps.tools({ kind: "group", names })));
+            if (typeof returned !== "object" || returned === null) {
+                const kind = returned === null ? "null" : typeof returned;
+                failure = `handler returned ${kind} — expected an object of facts, one per name`;
+            }
+            else {
+                answers = returned;
+                outcome = "ok";
+            }
+        }
+        catch (err) {
+            failure = detailForThrow(deps, "ext", label, err);
+        }
+        finally {
+            // One point per CALL, like the fan-out cap: a group's names share it. The call answered
+            // (even `{}` — the missing names are each their own error fact) unless it failed or threw.
+            deps.metrics?.timing("facts.handler", Date.now() - started, {
+                op: "group",
+                route: label,
+                outcome,
+                id: deps.protocolDid,
+            });
+        }
+        for (const name of Object.keys(answers)) {
+            // A name this call was not asked for: undeclared by the rubric, or owned by another handler.
+            // Never written — but never silent either. A name answered from the CACHE above is neither:
+            // a handler that always returns all of them is right, and the cached fact simply wins.
+            if (!names.includes(name) && !cachedHere.has(name)) {
+                logger.warn("facts.group-extra-fact", { group: label, name });
+            }
+        }
+        for (const [name, expected] of pending) {
+            const resolved = failure !== null
+                ? { status: "error", onError: expected.onError, detail: failure }
+                : name in answers
+                    ? normalizeExt(answers[name], expected.onError)
+                    : {
+                        status: "error",
+                        onError: expected.onError,
+                        detail: `handler returned no fact for ${name}`,
+                    };
+            ext[name] = resolved;
+            await deps.factCache?.write(claim.claimId, "ext", name, resolved);
+        }
+    };
+    // ONE task per group, not one per name: the cap counts the CALL, which is what costs money. A
+    // group none of whose names the work order declares has nothing to call (each name warned above).
+    const groupTasks = [];
+    for (const g of facts.groups) {
+        const declared = Object.entries(manifest.ext).filter(([name]) => g.names.includes(name));
+        if (declared.length > 0)
+            groupTasks.push(() => runGroup(g, declared));
+    }
+    const connectors = [
+        ...groupTasks,
+        ...Object.entries(manifest.ext)
+            .filter(([name]) => !groupedNames.has(name))
+            .map(([name, expected]) => async () => {
+            ext[name] = await runFact("ext", name, expected.onError, { kind: "ext", name, expected }, buildExtInput(base, name, expected), facts.ext[name] ?? deps.stock.ext, normalizeExt, facts.ext[name] ? "custom" : "ext-source");
+        }),
+        ...Object.entries(manifest.ai).map(([name, check]) => async () => {
+            ai[name] = await runFact("ai", name, check.onError, { kind: "ai", name, check }, buildAiInput(base, name, check), 
+            // `ai["*"]` is the catch-all for every check the table does not name — one handler for a
+            // rubric with thirty checks. A named handler still wins.
+            facts.ai[name] ?? facts.ai["*"] ?? deps.stock.ai, normalizeAi, (facts.ai[name] ?? facts.ai["*"]) ? "custom" : "ai-check");
+        }),
+    ];
+    const runUnique = async () => {
+        if (!manifest.unique)
+            return undefined;
+        const input = { ...base, rule: uniqueRuleOf(manifest.unique) };
+        try {
+            return await timeHandler(deps, "unique", manifest.unique.ruleId, async () => (facts.unique ?? deps.stock.unique)(input, deps.tools({ kind: "unique" })), answered);
+        }
+        catch (err) {
+            return rethrow(err);
+        }
+    };
+    const runFrequency = async () => {
+        // Declared-but-unrunnable is only the stock lane's dead end (warned above) — a custom handler
+        // is still asked, with a null rule.
+        if (!manifest.frequency || (!frequencyRule && !facts.frequency))
+            return undefined;
+        const input = { ...base, rule: frequencyRule };
+        try {
+            return await timeHandler(deps, "frequency", manifest.frequency.ruleId, async () => (facts.frequency ?? deps.stock.frequency)(input, deps.tools({ kind: "frequency" })), answered);
+        }
+        catch (err) {
+            return rethrow(err);
+        }
+    };
+    const [, unique, frequency] = await Promise.all([
+        inPool(MAX_CONCURRENT_CONNECTORS, connectors),
+        runUnique(),
+        runFrequency(),
+    ]);
+    const produced = { ext, ai };
+    // Keys only when produced: the FactSet is strict and its key set is the wire contract.
+    if (unique)
+        produced.unique = unique;
+    if (frequency)
+        produced.frequency = frequency;
+    return produced;
+}
+//# sourceMappingURL=runner.js.map

package/dist/lib/facts/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/lib/facts/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAkBpD,OAAO,EAAE,WAAW,EAAoD,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAMrC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAsC9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,mGAAmG;AACnG,KAAK,UAAU,MAAM,CAAC,KAAa,EAAE,KAA8B;IACjE,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3B,IAAI,IAAI;gBAAE,MAAM,IAAI,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAkB,EAClB,QAAkB,EAClB,IAA0C;IAE1C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC1F,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,IAAmB,EAAE,IAAY,EAAE,QAAqB;IACpF,OAAO;QACL,GAAG,IAAI;QACP,IAAI;QACJ,QAAQ;QACR,IAAI,EAAE,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;QAClE,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,IAAmB,EAAE,IAAY,EAAE,KAAiB;IAC/E,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACvE,OAAO;QACL,GAAG,IAAI;QACP,IAAI;QACJ,KAAK;QACL,IAAI;QACJ,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;QACvC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAChB,MAAe,EACf,OAA4B,EAC5B,QAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC;IACtD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,IAAI,eAAe,QAAQ,EAAE,EAAE,CAAC;AACjG,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,YAAY,CAAC,MAAiB,EAAE,OAA4B;IAC1E,IAAI,OAAO,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACtF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC1F,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,MAAgB,EAAE,OAA4B;IACxE,IAAI,OAAO,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACnF,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,cAAc,CACrB,IAAiD,EACjD,IAAkB,EAClB,IAAY,EACZ,GAAY;IAEZ,MAAM,SAAS,GACb,GAAG,YAAY,UAAU;QACzB,CAAC,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;QAC/C,CAAC,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAChD,iGAAiG;IACjG,IAAI,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,0CAA2C,GAAa,CAAC,OAAO,EAAE,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,GAAG,YAAY,UAAU;QAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5E,IAAI,GAAG,YAAY,QAAQ;QAAE,MAAM,GAAG,CAAC;IACvC,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,SAAS;QAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CACnB,IAAiD,EACjD,IAAkB,EAClB,IAAY,EACZ,OAA4B,EAC5B,GAAY;IAEZ,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;AACrF,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CACxB,IAAgB,EAChB,EAAU,EACV,IAAY,EACZ,GAAqB,EACrB,SAA8B;IAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACtD,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE;YAC1D,EAAE;YACF,KAAK,EAAE,IAAI;YACX,OAAO;YACP,EAAE,EAAE,IAAI,CAAC,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAAG,CAAI,IAAgB,EAAE,EAAU,EAAE,KAAa,EAAE,EAAoB,EAAE,EAAE,CAC7F,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAEzF,MAAM,QAAQ,GAAG,CAAC,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;AACzD,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC;AAE5B,kGAAkG;AAClG,SAAS,OAAO,CAAC,GAAY;IAC3B,MAAM,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAkB,EAClB,KAAkB,EAClB,QAAkB,EAClB,IAAgB;IAEhB,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAElD,+FAA+F;IAC/F,+FAA+F;IAC/F,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACzC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,iGAAiG;IACjG,gGAAgG;IAChG,4FAA4F;IAC5F,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,IAAI,IAAI,QAAQ,CAAC,GAAG;gBAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;;gBAC5C,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,gGAAgG;IAChG,0EAA0E;IAC1E,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,6FAA6F;IAC7F,6FAA6F;IAC7F,sFAAsF;IACtF,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,IAAI,QAAQ,CAAC,SAAS,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,2FAA2F;IAC3F,2FAA2F;IAC3F,8FAA8F;IAC9F,4FAA4F;IAC5F,2FAA2F;IAC3F,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3F,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;QACrC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,IAAI,CAAU,CAAC;QAClD,CAAC,CAAC,EAAE,CACP,CACF,CAAC;IACF,8FAA8F;IAC9F,sFAAsF;IACtF,MAAM,QAAQ,GAAG,CAAC,IAAkB,EAAE,IAAY,EAAgC,EAAE;QAClF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,OAAO,GAAG,KAAK,EACnB,IAAkB,EAClB,IAAY,EACZ,OAA4B,EAC5B,MAAkB,EAClB,KAAQ,EACR,OAA+C,EAC/C,SAAyD,EACzD,EAAU,EACE,EAAE;QACd,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,EAAE;gBACvC,EAAE;gBACF,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,QAAQ;gBACjB,EAAE,EAAE,IAAI,CAAC,WAAW;aACrB,CAAC,CAAC;YACH,OAAO,GAAQ,CAAC;QAClB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,IAAI,EACJ,EAAE,EACF,IAAI,EACJ,KAAK,IAAI,EAAE;YACT,IAAI,CAAC;gBACH,sFAAsF;gBACtF,qFAAqF;gBACrF,iFAAiF;gBACjF,OAAO,SAAS,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAM,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,8EAA8E;gBAC9E,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAM,CAAC;YAC3D,CAAC;QACH,CAAC,EACD,QAAQ,CACT,CAAC;QACF,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjE,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,EAAE,GAA2B,EAAE,CAAC;IAEtC;;;;;;;;OAQG;IACH,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAY,EAAE,QAAiC,EAAiB,EAAE;QACxF,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,IAAI,CAAC,GAAG,GAAc,CAAC;gBAC3B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;;gBAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,iGAAiG;QACjG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,GAA6B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAE7C,IAAI,OAAO,GAAgB,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,qFAAqF;QACrF,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CACpE,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAC7E,CAAC;YACF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC;gBAC1D,OAAO,GAAG,oBAAoB,IAAI,8CAA8C,CAAC;YACnF,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,QAAQ,CAAC;gBACnB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,wFAAwF;YACxF,2FAA2F;YAC3F,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE;gBAC1D,EAAE,EAAE,OAAO;gBACX,KAAK,EAAE,KAAK;gBACZ,OAAO;gBACP,EAAE,EAAE,IAAI,CAAC,WAAW;aACrB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,6FAA6F;YAC7F,4FAA4F;YAC5F,uFAAuF;YACvF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;YACvC,MAAM,QAAQ,GACZ,OAAO,KAAK,IAAI;gBACd,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;gBACjE,CAAC,CAAC,IAAI,IAAI,OAAO;oBACf,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAc,EAAE,QAAQ,CAAC,OAAO,CAAC;oBAC5D,CAAC,CAAC;wBACE,MAAM,EAAE,OAAO;wBACf,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,MAAM,EAAE,gCAAgC,IAAI,EAAE;qBAC/C,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;YACrB,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,CAAC;IAEF,8FAA8F;IAC9F,kGAAkG;IAClG,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACzF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,UAAU,GAA4B;QAC1C,GAAG,UAAU;QACb,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aAC3C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CACvB,KAAK,EACL,IAAI,EACJ,QAAQ,CAAC,OAAO,EAChB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC/B,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EACnC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EACjC,YAAY,EACZ,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAC1C,CAAC;QACJ,CAAC,CAAC;QACJ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE;YAC/D,EAAE,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CACtB,IAAI,EACJ,IAAI,EACJ,KAAK,CAAC,OAAO,EACb,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAC3B,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;YAC/B,yFAAyF;YACzF,yDAAyD;YACzD,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,EAChD,WAAW,EACX,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAC1D,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,IAAqC,EAAE;QAC5D,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACvC,MAAM,KAAK,GAAgB,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CACtB,IAAI,EACJ,QAAQ,EACR,QAAQ,CAAC,MAAM,CAAC,MAAM,EACtB,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EACtF,QAAQ,CACT,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,KAAK,IAAwC,EAAE;QAClE,8FAA8F;QAC9F,oCAAoC;QACpC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAClF,MAAM,KAAK,GAAmB,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CACtB,IAAI,EACJ,WAAW,EACX,QAAQ,CAAC,SAAS,CAAC,MAAM,EACzB,KAAK,IAAI,EAAE,CACT,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,EACrF,QAAQ,CACT,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,MAAM,CAAC,yBAAyB,EAAE,UAAU,CAAC;QAC7C,SAAS,EAAE;QACX,YAAY,EAAE;KACf,CAAC,CAAC;IACH,MAAM,QAAQ,GAAkB,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5C,uFAAuF;IACvF,IAAI,MAAM;QAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;IACrC,IAAI,SAAS;QAAE,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;IAC9C,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/lib/facts/stock/ai-check.d.ts

@@ -0,0 +1,100 @@
+/**
+ * The AI-check connector (§A.15) — the stock way a rubric's `ai.<name>` gets its value: the
+ * configured AI provider (ai-provider.ts — Cloudflare AI Gateway by default, OpenRouter opt-in) with
+ * the pinned `AI_CHECK_MODEL`, a deterministic prompt composed from the
+ * authored `instructions`, typed + labelled inputs (ai-inputs.ts lanes, archive expansion, and the
+ * C2PA provenance short-circuit for images), strict structured output, the confidence floor, and
+ * the frozen transcript. Same retry/onError/freeze discipline as the external-source connector.
+ *
+ * Run as the stock `ai` lane (../tools.ts `stockLanes`) for every check in the work order; a
+ * provider's handler may wrap it (`tools.stock()`), reach the judge with its own rules
+ * (`tools.ai.judge`), or replace it per check — or for all of them: the model call is a vendor
+ * trade-off, which is exactly why it lives in the oracle and not in the engine.
+ */
+import type { AiSendEntry } from "../../../facts/types.js";
+import type { PulledClaim } from "../../ixo/index.js";
+import type { ExpectedAi } from "../expected.js";
+import type { AiFact } from "../factset.js";
+import type { ProducerDeps } from "../producer.js";
+/** One AI check (§A.15): the claim, the declared check and its typed, ordered inputs (runner.ts). */
+export interface AiCheckInput {
+    claim: PulledClaim;
+    /** The `<name>` in `ai.<name>` — the work-order key (expected.ts). */
+    name: string;
+    check: ExpectedAi;
+    entries: AiSendEntry[];
+}
+/**
+ * The cap for lanes that ride to the model as base64 (image/pdf/video/audio) — above it the file
+ * becomes a descriptor input instead (§6.1). A constant, not config: it guards the request size,
+ * not a policy anyone tunes (`maxSizeMB` rules are where oversize is policy). Exported because
+ * `tools.attachments.bytes` defaults to the SAME cap — a handler reading a file itself must not
+ * quietly get a different limit from the lane beside it.
+ */
+export declare const MAX_AI_ATTACHMENT_BYTES: number;
+/**
+ * The fixed evaluator prompt. The instruction boilerplate is a STATIC prefix shared by EVERY check
+ * (prompt-cache hit across checks); the per-check numbered RULESET sits at the END of the system
+ * message, and the labelled inputs arrive in the user message, LAST.
+ *
+ * DATA BOUNDARY belongs to that static prefix, not to any check: the inputs are authored by the
+ * party being evaluated, and `valid` is derived from `failed_rules` while the confidence floor
+ * reads `score` — the two fields an injected instruction would aim at. A per-run nonce delimiter
+ * would bust the cached prefix for every check, so the boundary is stated instead.
+ *
+ * THREE outcomes per rule, not two (eval critique P0-4): a rule the evidence refutes FAILS; a rule
+ * the evidence cannot be READ for (too blurred, dark, cropped, a file not sent) is UNDETERMINABLE,
+ * which the code turns into an error fact (the rubric's `onError`) — an unreadable photo is not
+ * evidence of anything, so it must never become `valid:false` and a gate reject.
+ *
+ * COMPARISON is the one variant of the prefix, added when two or more images reach the model (a
+ * before/after pair): the work being judged changes the subject between the photos, so an
+ * expected change (cleaner, a colour revealed, other light) must not read as a different subject —
+ * the generalisation of the wording Spongy Shine had to write into its `sameBoat` rule.
+ */
+export declare function aiSystemPrompt(check: Pick<ExpectedAi, "instructions">, opts?: {
+    comparison?: boolean;
+}): string;
+/** What the judge needs off `ProducerDeps` — no db, no engine: a model call and its evidence. */
+export type JudgeDeps = Pick<ProducerDeps, "config" | "logger" | "trace" | "media" | "cache" | "settings" | "aiSpend" | "aiCalls" | "env">;
+/**
+ * One DECLARED AI check (§A.15): the judge below, run with the rubric's own `instructions` and
+ * `onError`. Nothing else distinguishes it — which is why `tools.ai.judge` can offer the same
+ * machinery to a handler that answers a check its own way.
+ */
+export declare function resolveAiCheck(input: AiCheckInput, deps: JudgeDeps): Promise<AiFact>;
+/**
+ * The judge (§A.15) via OpenRouter — `reasoning: {effort: "low"}`, no `temperature` key
+ * (GPT-5.x rejects it), no `max_tokens` cap (the strict schema bounds the shape),
+ * `provider: {sort: "latency"}`, strict json_schema out, `model` defaulting to the pinned
+ * `AI_CHECK_MODEL`.
+ *
+ * Inputs are typed and labelled: scalar send values become text inputs (`key: value`); a
+ * file/signature-bound ref becomes an image input (`image/*`, at the pinned `AI_IMAGE_DETAIL`) or a
+ * file input (PDF, via the file-parser plugin), or one of the §6.1 lanes. A PUBLICLY fetchable
+ * attachment is passed by URL; a private store's media (the claim bot, the VFS claims lane) is
+ * UCAN-authenticated (OpenRouter cannot fetch it), so those bytes are fetched here and inlined
+ * base64.
+ *
+ * Never trust the model's arithmetic: `valid` is DERIVED IN CODE (`failed_rules.length === 0` —
+ * the model's own `valid` field is ignored), the score is clamped 0..100, and a score below the
+ * AI_CHECK_MIN_CONFIDENCE floor is the UNREACHABLE path (→ onError), not a trusted verdict. So is
+ * any non-2xx / unparseable / schema-miss / empty completion — never a `valid:false`. Any rule in
+ * `undeterminable_rules` is an error fact too (→ onError), whatever else failed: the model could not
+ * read the evidence, which is never a verdict on it (P0-4).
+ *
+ * The transcript freezes model id, the full request (inlined attachments recorded as CID + byte
+ * sha256, NOT the base64 — the bytes are already content-addressed in Matrix), the raw response,
+ * the OpenRouter generation id and the last-attempt latency — a recorded outside opinion
+ * (§A.15.3), never re-derived on replay.
+ */
+export declare function judgeWithModel(input: {
+    claim: PulledClaim;
+    /** The fact this judgment answers — the idempotency key and every log line's `check`. */
+    name: string;
+    instructions: string[];
+    onError: "review" | "reject";
+    entries: AiSendEntry[];
+    model?: string;
+}, deps: JudgeDeps): Promise<AiFact>;
+//# sourceMappingURL=ai-check.d.ts.map

package/dist/lib/facts/stock/ai-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-check.d.ts","sourceRoot":"","sources":["../../../../src/lib/facts/stock/ai-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAc,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAyBhD,qGAAqG;AACrG,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AAYxD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EACvC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GAClC,MAAM,CAuCR;AAmED,iGAAiG;AACjG,MAAM,MAAM,SAAS,GAAG,IAAI,CAC1B,YAAY,EACZ,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,KAAK,CAC/F,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAM1F;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE;IACL,KAAK,EAAE,WAAW,CAAC;IACnB,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC7B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,EACD,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,CAuXjB"}