@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/cli/commands/facts-scaffold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts-scaffold.js","sourceRoot":"","sources":["../../../src/cli/commands/facts-scaffold.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAqC,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAiB,MAAM,kBAAkB,CAAC;AAE3D,4FAA4F;AAC5F,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QAC1C,OAAO,EAAE;YACP,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACxB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC/B;KACF,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAC;IAEtE,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;QAC/B,OAAO,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC;IAEH,IAAI,QAAmD,CAAC;IACxD,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,gBAAgB,SAAS,yBAAyB,CAAC,CAAC;QACxE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,mGAAmG;IACnG,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CACT,YAAY,IAAI,wEAAwE,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,QAAQ,CAAC,MAAM,KAAK,CAAC;YACnB,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,0GAA0G,CAC/G,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,8FAA8F;QAC9F,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CACT,mBAAmB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,4DAA4D,CACtG,CAAC;YACF,SAAS;QACX,CAAC;QACD,gGAAgG;QAChG,2CAA2C;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAgB,CAAC;QACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAe,CAAC;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;QACtD,8FAA8F;QAC9F,yFAAyF;QACzF,IACE,CAAC,KAAK,CACJ,GAAG,EACH,WAAW,EACX,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAC5E,EACD,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnB,gGAAgG;QAChG,iFAAiF;QACjF,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,WAAW,GACf,IAAI,CAAC,IAAI,KAAK,KAAK;YACjB,CAAC,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;YAChD,CAAC,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;QAChE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC;IAChG,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,yFAAyF;AACzF,SAAS,KAAK,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,mBAAmB,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uFAAuF;AACvF,SAAS,eAAe,CAAC,OAAe,EAAE,WAAmB;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,MAAmB;IAChD,OAAO;;OAEF,IAAI,QAAQ,MAAM,CAAC,MAAM,oBAAoB,MAAM,CAAC,OAAO,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;mCAClF,MAAM,CAAC,QAAQ,cAAc,MAAM,CAAC,QAAQ;;;;;eAKhE,IAAI;wCACqB,IAAI;;CAE3C,CAAC;AACF,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,KAAiB;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,OAAO;;OAEF,IAAI,0BAA0B,KAAK,CAAC,OAAO,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;;EAElG,YAAY;;;;;eAKC,IAAI;wCACqB,IAAI;;CAE3C,CAAC;AACF,CAAC;AAED,mGAAmG;AACnG,SAAS,WAAW,CAAC,IAAc,EAAE,UAAkB,EAAE,WAAmB;IAC1E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC5B,OAAO;;;WAGE,IAAI,YAAY,UAAU;;YAEzB,IAAI;;+CAE+B,IAAI,OAAO,IAAI;;mCAE3B,IAAI,OAAO,IAAI,KAAK,WAAW;;;;iBAIjD,IAAI,IAAI,IAAI;;kCAEK,IAAI;;;;CAIrC,CAAC;AACF,CAAC;AAED;sEACsE;AACtE,SAAS,UAAU,CAAC,OAAmB;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,IAAkB,EAAE,EAAE,CACnC,OAAO;SACJ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,KAAK,GAAI,CAAC,KAAK,EAAE,IAAI,CAAW;SACnC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO;QACL,2DAA2D;QAC3D,6FAA6F;QAC7F,4FAA4F;QAC5F,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC;QACpF,EAAE;QACF,oCAAoC;QACpC,GAAG,KAAK;QACR,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/cli/commands/init.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `decision-oracle init <dir>` — generate a provider's project: the template with `{{name}}` and the
+ * package version substituted, plus the shipped skills in `.claude/skills/`.
+ *
+ * It never runs an install (a provider chooses their own package manager and their own moment) and
+ * never writes a `.dev.vars`: the only identity file it leaves is the example to fill in.
+ */
+export interface InitOptions {
+    dir: string;
+    /** Defaults to the target directory's name. */
+    name?: string;
+}
+export interface InitResult {
+    dir: string;
+    name: string;
+}
+export declare function runInit({ dir, name }: InitOptions): Promise<InitResult>;
+//# sourceMappingURL=init.d.ts.map

package/dist/cli/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAKD,wBAAsB,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA0B7E"}

package/dist/cli/commands/init.js

@@ -0,0 +1,34 @@
+/**
+ * `decision-oracle init <dir>` — generate a provider's project: the template with `{{name}}` and the
+ * package version substituted, plus the shipped skills in `.claude/skills/`.
+ *
+ * It never runs an install (a provider chooses their own package manager and their own moment) and
+ * never writes a `.dev.vars`: the only identity file it leaves is the example to fill in.
+ */
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { basename, join, resolve } from "node:path";
+import { copySkills, copyTemplate, packageRoot } from "../lib/project.js";
+/** The name becomes the worker name, the D1 database name and the package name — all three agree. */
+const NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
+export async function runInit({ dir, name }) {
+    const target = resolve(dir);
+    const projectName = name ?? basename(target);
+    if (!NAME_RE.test(projectName)) {
+        throw new Error(`"${projectName}" cannot be a project name: lowercase letters, digits and dashes only ` +
+            "(it is used verbatim as the worker name, the D1 database name and the package name)");
+    }
+    if (existsSync(target) && readdirSync(target).length > 0) {
+        throw new Error(`${target} is not empty — init generates a whole project, it never merges`);
+    }
+    const root = packageRoot();
+    const { version } = JSON.parse(readFileSync(join(root, "package.json"), "utf8"));
+    copyTemplate(join(root, "templates", "project"), target, {
+        name: projectName,
+        // Pin the generated project to the package that generated it: a project whose template and
+        // installed package disagree about the facts API is the one skew a provider cannot debug.
+        packageVersion: `^${version}`,
+    });
+    copySkills(join(root, "skills"), join(target, ".claude", "skills"));
+    return { dir: target, name: projectName };
+}
+//# sourceMappingURL=init.js.map

package/dist/cli/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAavE,qGAAqG;AACrG,MAAM,OAAO,GAAG,sBAAsB,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAe;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,IAAI,WAAW,wEAAwE;YACrF,qFAAqF,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,iEAAiE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAE9E,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE;QACvD,IAAI,EAAE,WAAW;QACjB,2FAA2F;QAC3F,0FAA0F;QAC1F,cAAc,EAAE,IAAI,OAAO,EAAE;KAC9B,CAAC,CAAC;IACH,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEpE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC5C,CAAC"}

package/dist/cli/commands/login.d.ts

@@ -0,0 +1,9 @@
+/**
+ * `decision-oracle login` — run this ONCE per network before any other chain command. Opens (or prints)
+ * the ixo AuthHub login URL, waits for the callback (loopback server OR a pasted URL), and saves the
+ * session every other command reads. See `lib/authhub.ts` for the flow and its load-bearing quirks.
+ *
+ *   decision-oracle login [--network devnet|testnet|mainnet]
+ */
+export declare function run(argv: string[]): Promise<number>;
+//# sourceMappingURL=login.d.ts.map

package/dist/cli/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAIzD"}

package/dist/cli/commands/login.js

@@ -0,0 +1,16 @@
+/**
+ * `decision-oracle login` — run this ONCE per network before any other chain command. Opens (or prints)
+ * the ixo AuthHub login URL, waits for the callback (loopback server OR a pasted URL), and saves the
+ * session every other command reads. See `lib/authhub.ts` for the flow and its load-bearing quirks.
+ *
+ *   decision-oracle login [--network devnet|testnet|mainnet]
+ */
+import { parse } from "../lib/args.js";
+import { runLogin } from "../lib/authhub.js";
+import { resolveNetwork } from "../lib/chain.js";
+export async function run(argv) {
+    const { values } = parse(argv, { options: { network: { type: "string" } } });
+    await runLogin(resolveNetwork(values.network));
+    return 0;
+}
+//# sourceMappingURL=login.js.map

package/dist/cli/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/cli/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7E,MAAM,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/commands/logout.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `decision-oracle logout` — forget the saved AuthHub session for one network: deletes
+ * `~/.ixo/publish-session-<network>.json` (the file `login` wrote, shared with the portal-side
+ * publish tooling) and prints `{ removed, path }`. Never reads the file, so nothing in it can be
+ * printed; a missing file is `removed: false`, not an error, so a script can run it blind.
+ *
+ *   decision-oracle logout [--network devnet|testnet|mainnet]
+ */
+export declare function run(argv: string[]): Promise<number>;
+//# sourceMappingURL=logout.d.ts.map

package/dist/cli/commands/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/logout.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAYzD"}

package/dist/cli/commands/logout.js

@@ -0,0 +1,28 @@
+/**
+ * `decision-oracle logout` — forget the saved AuthHub session for one network: deletes
+ * `~/.ixo/publish-session-<network>.json` (the file `login` wrote, shared with the portal-side
+ * publish tooling) and prints `{ removed, path }`. Never reads the file, so nothing in it can be
+ * printed; a missing file is `removed: false`, not an error, so a script can run it blind.
+ *
+ *   decision-oracle logout [--network devnet|testnet|mainnet]
+ */
+import { rm } from "node:fs/promises";
+import { parse } from "../lib/args.js";
+import { resolveNetwork } from "../lib/chain.js";
+import { sessionPath } from "../lib/session.js";
+export async function run(argv) {
+    const { values } = parse(argv, { options: { network: { type: "string" } } });
+    const path = sessionPath(resolveNetwork(values.network));
+    let removed = true;
+    try {
+        await rm(path);
+    }
+    catch (err) {
+        if (err.code !== "ENOENT")
+            throw err;
+        removed = false;
+    }
+    console.log(JSON.stringify({ removed, path }));
+    return 0;
+}
+//# sourceMappingURL=logout.js.map

package/dist/cli/commands/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../../src/cli/commands/logout.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;QAChE,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/commands/manifest.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `decision-oracle manifest <protocol did>` — the rubric's work order as the engine's binder computed it
+ * (`GET /v1/rubrics/manifest`, docs/ENGINE-CONTRACT.md "Manifest"), read through the oracle's OWN
+ * engine client, so this is the exact call and the exact parse the facts lane makes. The route is
+ * public on the engine, so a plain curl answers the same bytes; this prints the summary the facts
+ * lane keys on, or the whole response with `--json`.
+ *
+ *   decision-oracle manifest <protocol did> [--rubric <sha256 pin>] [--json]
+ *     [--engine-url <url>] [--network devnet] [--env-file <path>]
+ */
+export declare function run(argv: string[]): Promise<number>;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/cli/commands/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgCzD"}

package/dist/cli/commands/manifest.js

@@ -0,0 +1,48 @@
+/**
+ * `decision-oracle manifest <protocol did>` — the rubric's work order as the engine's binder computed it
+ * (`GET /v1/rubrics/manifest`, docs/ENGINE-CONTRACT.md "Manifest"), read through the oracle's OWN
+ * engine client, so this is the exact call and the exact parse the facts lane makes. The route is
+ * public on the engine, so a plain curl answers the same bytes; this prints the summary the facts
+ * lane keys on, or the whole response with `--json`.
+ *
+ *   decision-oracle manifest <protocol did> [--rubric <sha256 pin>] [--json]
+ *     [--engine-url <url>] [--network devnet] [--env-file <path>]
+ */
+import { parse, UsageError } from "../lib/args.js";
+import { resolveNetwork } from "../lib/chain.js";
+import { loadProjectConfig } from "../lib/devvars.js";
+import { cliEngine, describeError, engineUrlFor, summarizeManifest } from "../lib/engine.js";
+export async function run(argv) {
+    const { values, positionals } = parse(argv, {
+        options: {
+            rubric: { type: "string" },
+            json: { type: "boolean" },
+            "engine-url": { type: "string" },
+            network: { type: "string" },
+            "env-file": { type: "string" },
+        },
+    });
+    const did = positionals[0];
+    if (!did)
+        throw new UsageError("manifest needs a protocol did");
+    // The client is the oracle's own, so it wants the oracle's own config — the identity it would
+    // mint as. The manifest read itself is public; everything else about the call is real.
+    const config = loadProjectConfig({ envFile: values["env-file"] });
+    const engineUrl = engineUrlFor({
+        network: resolveNetwork(values.network),
+        engineUrl: values["engine-url"],
+        devVars: config,
+    });
+    const { engine } = cliEngine(config, engineUrl);
+    console.log(`${did} @ ${engineUrl}`);
+    try {
+        const manifest = await engine.getManifest(did, { rubric: values.rubric });
+        console.log(values.json ? JSON.stringify(manifest, null, 2) : summarizeManifest(manifest));
+        return 0;
+    }
+    catch (err) {
+        console.error(describeError(err));
+        return 1;
+    }
+}
+//# sourceMappingURL=manifest.js.map

package/dist/cli/commands/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/cli/commands/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAE1F,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QAC1C,OAAO,EAAE;YACP,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACzB,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC/B;KACF,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;IAEhE,8FAA8F;IAC9F,uFAAuF;IACvF,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;QAC/B,OAAO,EAAE,MAAM;KAChB,CAAC,CAAC;IACH,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEhD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3F,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/cli/commands/oracle-init.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `decision-oracle oracle init` — provision the WHOLE oracle: its wallet, its chain identity, its Matrix
+ * account and its on-chain entity with its full public identity (profile, domain card, agent card),
+ * in thirteen steps that each re-decide themselves against LIVE state. Every oracle built with the
+ * kit carries all of it (owner, 2026-10-01); `--logo` is the one optional input, and its absence is
+ * said out loud because the portal and the console then show a placeholder.
+ *
+ *   decision-oracle oracle init --protocol did:ixo:entity:… --kit-url https://my-oracle.example.com \
+ *     [--network devnet] [--env-file .dev.vars] [--logo <url>] [--openhands [--price-pay <n>]] \
+ *     [--only <step>] [--relogin] [--yes]
+ *
+ * Dry run by default: every step prints `do` or `skip (<why>)` and NOTHING is signed, created or
+ * written. `--yes` runs the same thirteen decisions and executes them. Re-running is always safe —
+ * the skip decision comes from the chain, the homeserver and the entity themselves, never from a
+ * marker this command wrote, so a partial failure, a redeploy or a second provider running it twice
+ * all converge on the same state.
+ *
+ *   1 fund      the AuthHub session tops ORACLE_ADDRESS up to FUND_UIXO (it pays for MsgEvaluateClaim)
+ *   2 iid       the oracle's OWN wallet creates `did:ixo:<ORACLE_ADDRESS>` + its `#matrix` service
+ *   3 key       … and adds the SERVICE_ED25519_MNEMONIC key, so UCANs minted as that DID resolve
+ *   4 matrix    … and creates + logs into the oracle's Matrix account (ORACLE_MATRIX_ACCESS_TOKEN)
+ *   5 entity    the session creates the oracle ENTITY (services + protocol edge inline)
+ *   6 orz       … its `#orz` authz config (the portal's entity→account bridge)
+ *   7 profile   … its `#pro` profile, built from the RUNNING oracle's `GET /v1/info`
+ *   8 domain    … its `#dmn` domain card (the portal's shape; added, or replaced when it drifted)
+ *   9 acard     … its `#acard` Agent Card (validated against the engine's schema; same rule)
+ *  10 linked    … the oracle→protocol edge, 11 service the `#eval` endpoint, 12 backlink the way back
+ *  13 index     the domain indexer is told the entity exists — AFTER `domain`, so it reads the card
+ *               (skipped when it already holds the anchored card; a failure is a warning, never fatal)
+ *
+ * TWO signers, deliberately. Steps 2–4 are the ORACLE's own identity: only its key may write its own
+ * IID document, and only its key can prove the address to the rooms bot. Everything else is the
+ * AuthHub session, which OWNS the entity it creates (`ownerAddress`/`ownerDid`/`controller`) — that
+ * owner does not have to be the oracle's runtime identity, and the oracle's `ORACLE_ADDRESS` still
+ * needs its own `EvaluateClaimAuthorization` on any collection. So the oracle's mnemonics
+ * (`ORACLE_SECP_MNEMONIC`, `SERVICE_ED25519_MNEMONIC`) are required only by steps 2–4: a deployed
+ * oracle whose keys live only in its worker secrets still runs `--only orz|profile|domain|acard…`
+ * on the session alone, from the public vars and `/v1/info`.
+ *
+ * No `--entity` flag: the entity is found by THIS ORACLE, never by its owner — one session may own
+ * the entities of several oracles. `ORACLE_ENTITY_DID`, when set, pins it (checked to be an oracle
+ * entity the session owns); otherwise it is the session's oracle entity whose `#orz` grants
+ * `ORACLE_ADDRESS` (the portal's own entity→account bridge, so it survives a moved host), else whose
+ * `#eval` is `--kit-url` (written inline by `entity`, so a run that died before `orz` still finds
+ * it). See `resolveOracleEntity`. `--only <step>` runs exactly one step, for debugging a stuck run.
+ */
+export declare function run(argv: string[]): Promise<number>;
+//# sourceMappingURL=oracle-init.d.ts.map

package/dist/cli/commands/oracle-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oracle-init.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/oracle-init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAwnCH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAuNzD"}