@ixo/decision-oracle 0.0.0-stage → 0.2.1

package/dist/cli/lib/devvars.d.ts

@@ -0,0 +1,59 @@
+/**
+ * A provider's project configuration as the CLI reads it — the same two files `wrangler dev` reads:
+ * the non-secret `vars` in `wrangler.jsonc` (plus `env.<name>.vars` for a named environment) and
+ * the secrets in `.dev.vars`. Both, because a real project keeps its identity (`ORACLE_HOSTNAME`,
+ * `ORACLE_DID`, …) in the committed wrangler file and only its keys in the uncommitted one: reading
+ * `.dev.vars` alone would leave every command that builds a `Config` unable to say who this oracle
+ * is. Paths are resolved against the directory the CLI was run from: the CLI runs inside the
+ * provider's project, so "the project" is wherever they are.
+ */
+import { type Config } from "../../config.js";
+/**
+ * The dotenv subset `wrangler dev` reads from `.dev.vars`: `KEY=value` per line, optional matching
+ * quotes around the value, `#` comments (a whole line, or trailing an unquoted value), blank lines
+ * ignored.
+ */
+export declare function readDevVars(path: string): Record<string, string>;
+/**
+ * `wrangler.jsonc`'s dialect → JSON: comments stripped outside strings, trailing commas dropped.
+ * Hand-rolled because this is the only file the CLI reads in it and every JSONC package on npm is a
+ * far bigger promise (and a new dependency) than twenty lines.
+ */
+export declare function parseJsonc(text: string): unknown;
+/** The two flags every config-reading command takes, and what they select. */
+export interface ProjectEnvOptions {
+    /** `--env-file <path>` — the secrets file, else `.dev.vars` in the project. */
+    envFile?: string;
+    /** `--env <name>` — the wrangler environment whose `vars` block to overlay. */
+    env?: string;
+}
+/**
+ * The project's env as `wrangler dev` assembles it: top-level `vars`, then `env.<name>.vars` when
+ * `--env` names one, then `.dev.vars` — secrets and local overrides win, which is exactly the
+ * precedence wrangler applies. The env block is OVERLAID rather than replacing the top level (a
+ * wrangler env redeclares its vars wholesale, so the two differ only for a var the env block
+ * omits — and inheriting the top-level value is what a provider means when they run a command).
+ */
+export declare function readProjectEnv(cwd: string, opts?: ProjectEnvOptions): Record<string, string>;
+/**
+ * The project's config exactly as its `wrangler dev` has it. Throws (naming the files, or the
+ * missing var) — for the commands that genuinely cannot run without an identity, e.g. anything
+ * holding the oracle's engine client.
+ */
+export declare function loadProjectConfig(opts?: ProjectEnvOptions): Config;
+/**
+ * The same config when there IS one, `undefined` when there isn't — for commands that only want it
+ * as a HINT (which engine to talk to), and must still work in a directory that holds nothing but a
+ * rubric and a form.
+ */
+export declare function tryProjectConfig(opts?: ProjectEnvOptions): Config | undefined;
+/**
+ * The oracle's OWN base URL for the commands that call its API (`register`, `scan`): `--kit` wins,
+ * else the project's `ORACLE_HOSTNAME` — the host that IS its did:web. `http` only for localhost,
+ * the same rule the engine client applies to the engine.
+ */
+export declare function oracleUrlFor(opts: {
+    kit?: string;
+    devVars?: Config;
+}): string;
+//# sourceMappingURL=devvars.d.ts.map

package/dist/cli/lib/devvars.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devvars.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/devvars.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EAAE,KAAK,MAAM,EAAc,MAAM,cAAc,CAAC;AAGvD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkBhE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CA8ChD;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAgBD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,iBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwChG;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,iBAAsB,GAAG,MAAM,CAOtE;AAmBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,iBAAsB,GAAG,MAAM,GAAG,SAAS,CAMjF;AAKD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAI7E"}

package/dist/cli/lib/devvars.js

@@ -0,0 +1,206 @@
+/**
+ * A provider's project configuration as the CLI reads it — the same two files `wrangler dev` reads:
+ * the non-secret `vars` in `wrangler.jsonc` (plus `env.<name>.vars` for a named environment) and
+ * the secrets in `.dev.vars`. Both, because a real project keeps its identity (`ORACLE_HOSTNAME`,
+ * `ORACLE_DID`, …) in the committed wrangler file and only its keys in the uncommitted one: reading
+ * `.dev.vars` alone would leave every command that builds a `Config` unable to say who this oracle
+ * is. Paths are resolved against the directory the CLI was run from: the CLI runs inside the
+ * provider's project, so "the project" is wherever they are.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import process from "node:process";
+import { loadConfig } from "../../config.js";
+/**
+ * The dotenv subset `wrangler dev` reads from `.dev.vars`: `KEY=value` per line, optional matching
+ * quotes around the value, `#` comments (a whole line, or trailing an unquoted value), blank lines
+ * ignored.
+ */
+export function readDevVars(path) {
+    const out = {};
+    for (const raw of readFileSync(path, "utf8").split("\n")) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const eq = line.indexOf("=");
+        if (eq === -1)
+            continue;
+        const key = line.slice(0, eq).trim();
+        let value = line.slice(eq + 1).trim();
+        const quote = value[0];
+        if ((quote === '"' || quote === "'") && value.length >= 2 && value.endsWith(quote)) {
+            value = value.slice(1, -1);
+        }
+        else {
+            value = value.replace(/\s+#.*$/, "");
+        }
+        out[key] = value;
+    }
+    return out;
+}
+/**
+ * `wrangler.jsonc`'s dialect → JSON: comments stripped outside strings, trailing commas dropped.
+ * Hand-rolled because this is the only file the CLI reads in it and every JSONC package on npm is a
+ * far bigger promise (and a new dependency) than twenty lines.
+ */
+export function parseJsonc(text) {
+    let out = "";
+    let inString = false;
+    let escaped = false;
+    let comment = null;
+    for (let i = 0; i < text.length; i++) {
+        const ch = text[i];
+        const next = text[i + 1];
+        if (comment === "line") {
+            if (ch === "\n") {
+                comment = null;
+                out += ch;
+            }
+            continue;
+        }
+        if (comment === "block") {
+            if (ch === "*" && next === "/") {
+                comment = null;
+                i++;
+            }
+            continue;
+        }
+        if (inString) {
+            out += ch;
+            if (escaped)
+                escaped = false;
+            else if (ch === "\\")
+                escaped = true;
+            else if (ch === '"')
+                inString = false;
+            continue;
+        }
+        if (ch === '"') {
+            inString = true;
+            out += ch;
+            continue;
+        }
+        // Only outside a string is `//` a comment — a URL in a var value keeps its slashes.
+        if (ch === "/" && (next === "/" || next === "*")) {
+            comment = next === "/" ? "line" : "block";
+            i++;
+            continue;
+        }
+        // A trailing comma is legal here and fatal to `JSON.parse` — dropped as the closer arrives,
+        // which is the one moment a comma inside a string can no longer be mistaken for one.
+        if (ch === "}" || ch === "]")
+            out = out.replace(/,\s*$/, "");
+        out += ch;
+    }
+    return JSON.parse(out);
+}
+/** wrangler's vars are JSON, the config schema is strings — primitives coerce, structures are not
+ *  config this package has, so they are dropped rather than stringified into nonsense. */
+function assignVars(into, vars) {
+    for (const [key, value] of Object.entries(vars ?? {})) {
+        if (typeof value === "string")
+            into[key] = value;
+        else if (typeof value === "number" || typeof value === "boolean")
+            into[key] = String(value);
+    }
+}
+/**
+ * The project's env as `wrangler dev` assembles it: top-level `vars`, then `env.<name>.vars` when
+ * `--env` names one, then `.dev.vars` — secrets and local overrides win, which is exactly the
+ * precedence wrangler applies. The env block is OVERLAID rather than replacing the top level (a
+ * wrangler env redeclares its vars wholesale, so the two differ only for a var the env block
+ * omits — and inheriting the top-level value is what a provider means when they run a command).
+ */
+export function readProjectEnv(cwd, opts = {}) {
+    const vars = {};
+    let found = false;
+    // Both JSON spellings wrangler accepts; `wrangler.toml` is deliberately not read — one parser,
+    // and the template (and everything `init` generates) is jsonc.
+    const wranglerPath = ["wrangler.jsonc", "wrangler.json"]
+        .map((name) => resolve(cwd, name))
+        .find((path) => existsSync(path));
+    if (wranglerPath) {
+        found = true;
+        const doc = parseJsonc(readFileSync(wranglerPath, "utf8"));
+        assignVars(vars, doc.vars);
+        if (opts.env) {
+            const block = doc.env?.[opts.env];
+            // Silently falling back to the top-level vars would point a command at the WRONG deployment.
+            if (!block) {
+                const declared = Object.keys(doc.env ?? {}).join(", ") || "(none)";
+                throw new Error(`${wranglerPath} declares no env '${opts.env}' — it declares: ${declared}`);
+            }
+            assignVars(vars, block.vars);
+        }
+    }
+    const secretsPath = resolve(cwd, opts.envFile ?? ".dev.vars");
+    if (existsSync(secretsPath)) {
+        found = true;
+        Object.assign(vars, readDevVars(secretsPath));
+    }
+    else if (opts.envFile) {
+        throw new Error(`no ${secretsPath} — the --env-file path does not exist; create it first — oracle init only writes into an existing --env-file`);
+    }
+    if (!found) {
+        throw new Error(`no wrangler.jsonc, wrangler.json or .dev.vars in ${cwd} — run this from your oracle project (or pass --env-file <path>); wrangler.toml is not read`);
+    }
+    return vars;
+}
+/**
+ * The project's config exactly as its `wrangler dev` has it. Throws (naming the files, or the
+ * missing var) — for the commands that genuinely cannot run without an identity, e.g. anything
+ * holding the oracle's engine client.
+ */
+export function loadProjectConfig(opts = {}) {
+    const vars = readProjectEnv(process.cwd(), opts);
+    try {
+        return loadConfig(vars);
+    }
+    catch (err) {
+        throw new Error(explainConfig(err, opts));
+    }
+}
+/**
+ * `loadConfig` fails with a Zod issue list — right for a Worker's boot log, wrong on a terminal,
+ * where what a provider needs is WHICH var and WHERE it goes. Vars that are simply not set (by far
+ * the common case: a project generated by `init` still holds the placeholders) collapse into one
+ * "missing …" list; any other issue is passed through as the schema worded it.
+ */
+function explainConfig(err, opts) {
+    const message = err instanceof Error ? err.message : String(err);
+    const issues = message.replace(/^Invalid environment configuration: /, "").split("; ");
+    const unset = issues.filter((i) => i.includes("received undefined"));
+    const problems = [
+        ...(unset.length > 0 ? [`missing ${unset.map((i) => i.split(":")[0]).join(", ")}`] : []),
+        ...issues.filter((i) => !i.includes("received undefined")),
+    ].join("; ");
+    return `${problems} — set it in wrangler.jsonc "vars" or ${opts.envFile ?? ".dev.vars"} (\`bunx decision-oracle derive\` prints the identity lines)`;
+}
+/**
+ * The same config when there IS one, `undefined` when there isn't — for commands that only want it
+ * as a HINT (which engine to talk to), and must still work in a directory that holds nothing but a
+ * rubric and a form.
+ */
+export function tryProjectConfig(opts = {}) {
+    try {
+        return loadProjectConfig(opts);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The local runbook's port — where `wrangler dev` serves this oracle when nothing says otherwise. */
+const LOCAL_ORACLE_HOST = "localhost:8787";
+/**
+ * The oracle's OWN base URL for the commands that call its API (`register`, `scan`): `--kit` wins,
+ * else the project's `ORACLE_HOSTNAME` — the host that IS its did:web. `http` only for localhost,
+ * the same rule the engine client applies to the engine.
+ */
+export function oracleUrlFor(opts) {
+    const explicit = opts.kit?.replace(/\/+$/, "");
+    if (explicit)
+        return /^https?:\/\//.test(explicit) ? explicit : withScheme(explicit);
+    return withScheme(opts.devVars?.ORACLE_HOSTNAME ?? LOCAL_ORACLE_HOST);
+}
+const withScheme = (host) => `${/^(localhost|127\.0\.0\.1)(:|$)/.test(host) ? "http" : "https"}://${host}`;
+//# sourceMappingURL=devvars.js.map

package/dist/cli/lib/devvars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devvars.js","sourceRoot":"","sources":["../../../src/cli/lib/devvars.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAe,UAAU,EAAE,MAAM,cAAc,CAAC;AAGvD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnF,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAA4B,IAAI,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,OAAO,GAAG,IAAI,CAAC;gBACf,GAAG,IAAI,EAAE,CAAC;YACZ,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/B,OAAO,GAAG,IAAI,CAAC;gBACf,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,IAAI,EAAE,CAAC;YACV,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,CAAC;iBACxB,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBAChC,IAAI,EAAE,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,IAAI,CAAC;YAChB,GAAG,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,oFAAoF;QACpF,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,4FAA4F;QAC5F,qFAAqF;QACrF,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7D,GAAG,IAAI,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAeD;0FAC0F;AAC1F,SAAS,UAAU,CAAC,IAA4B,EAAE,IAAyC;IACzF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACtD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;aAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,IAAI,GAAsB,EAAE;IACtE,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,+FAA+F;IAC/F,+DAA+D;IAC/D,MAAM,YAAY,GAAG,CAAC,gBAAgB,EAAE,eAAe,CAAC;SACrD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;SACjC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAgB,CAAC;QAC1E,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,6FAA6F;YAC7F,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;gBACnE,MAAM,IAAI,KAAK,CAAC,GAAG,YAAY,qBAAqB,IAAI,CAAC,GAAG,oBAAoB,QAAQ,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,MAAM,WAAW,8GAA8G,CAChI,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,oDAAoD,GAAG,6FAA6F,CACrJ,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAI,GAAsB,EAAE;IAC5D,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAA4B,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,GAAY,EAAE,IAAuB;IAC1D,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;KAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,GAAG,QAAQ,yCAAyC,IAAI,CAAC,OAAO,IAAI,WAAW,8DAA8D,CAAC;AACvJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAI,GAAsB,EAAE;IAC3D,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAwC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,QAAQ;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrF,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,IAAI,iBAAiB,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAC1C,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,IAAI,EAAE,CAAC"}

package/dist/cli/lib/engine.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Talking to the decision engine from the CLI: which engine, and a client that is the SAME code
+ * path a deployed oracle takes — a real `@ixo/ucan` invocation minted as `did:web:<ORACLE_HOSTNAME>`
+ * against the engine's did:web — so what a provider sees here is what their Worker will see.
+ *
+ * The KV the client caches in is a `Map`: the engine's did:web, the registered marker and the
+ * manifest cache live only as long as the process, which is what makes every CLI run a fresh read.
+ */
+import type { Config } from "../../config.js";
+import { type EngineClient } from "../../lib/engine/client.js";
+import { type Manifest, type ManifestUnusable } from "../../lib/engine/types.js";
+import { type IxoNetwork } from "../../networks.js";
+/**
+ * Which engine a command talks to: `--engine-url` wins, then the project's `.dev.vars`
+ * `EVAL_ENGINE_HOSTNAME` (how a local `wrangler dev` engine is named), then the network's own
+ * engine host. `http` only for localhost — the same rule the runtime client applies
+ * (`engineBaseUrl`), so a hostname behaves identically here and in the Worker.
+ *
+ * The project's engine deliberately outranks `--network`: a provider pointing at a local or
+ * tunnelled engine means it, and the engine reads the chain named in the request, not in this URL.
+ */
+export declare function engineUrlFor(opts: {
+    network: IxoNetwork;
+    engineUrl?: string;
+    devVars?: Config;
+}): string;
+/** The `host[:port]` a base URL names — what the engine client keys its did:web and scheme on. */
+export declare function engineHostOf(url: string): string;
+export interface CliEngine {
+    config: Config;
+    engine: EngineClient;
+    /** What the client wrote to its KV — e.g. the `engine-registered:` marker after a register. */
+    store: Map<string, string>;
+    /** The same Map, behind the `KVNamespace` face the package's own helpers take. */
+    cache: KVNamespace;
+}
+/**
+ * The oracle's own engine client, pointed at `engineUrl`. The logger is on at `error` only: a
+ * command's own printed lines tell the story, not the Worker's structured logs.
+ */
+export declare function cliEngine(config: Config, engineUrl: string): CliEngine;
+/**
+ * The work order for a protocol, read the way ANYONE can: a plain public GET, no invocation, no
+ * project. `protocol review` and `facts scaffold` are identity-independent by design — a provider
+ * sizes up a protocol before they have an oracle at all — so neither may go through the oracle's
+ * own client (which wants a `Config`). `facts run` does use the client: it needs a Config anyway.
+ */
+export declare function fetchManifest(engineUrl: string, protocolDid: string): Promise<Manifest | ManifestUnusable>;
+/** One line per manifest: the work order's shape when usable, the engine's issues when not. */
+export declare function summarizeManifest(m: Manifest | ManifestUnusable): string;
+/** One line for whatever a step threw — the engine's envelope fields when it is an `EngineError`.
+ *  Never a stack trace: an unreachable engine or a 4xx is an expected answer, not a crash. */
+export declare function describeError(err: unknown): string;
+//# sourceMappingURL=engine.d.ts.map

package/dist/cli/lib/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAsB,KAAK,YAAY,EAAiB,MAAM,yBAAyB,CAAC;AAC/F,OAAO,EAGL,KAAK,QAAQ,EAEb,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,KAAK,UAAU,EAAY,MAAM,gBAAgB,CAAC;AAE3D;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,OAAO,EAAE,UAAU,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAMT;AAED,kGAAkG;AAClG,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;IACrB,+FAA+F;IAC/F,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,kFAAkF;IAClF,KAAK,EAAE,WAAW,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,CAsBtE;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,GAAG,gBAAgB,CAAC,CAgBtC;AAED,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,QAAQ,GAAG,gBAAgB,GAAG,MAAM,CAcxE;AAED;8FAC8F;AAC9F,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAWlD"}

package/dist/cli/lib/engine.js

@@ -0,0 +1,112 @@
+/**
+ * Talking to the decision engine from the CLI: which engine, and a client that is the SAME code
+ * path a deployed oracle takes — a real `@ixo/ucan` invocation minted as `did:web:<ORACLE_HOSTNAME>`
+ * against the engine's did:web — so what a provider sees here is what their Worker will see.
+ *
+ * The KV the client caches in is a `Map`: the engine's did:web, the registered marker and the
+ * manifest cache live only as long as the process, which is what makes every CLI run a fresh read.
+ */
+import { createEngineClient, engineBaseUrl } from "../../lib/engine/client.js";
+import { EngineError, isManifestUnusable, ManifestResponse, } from "../../lib/engine/types.js";
+import { createLogger } from "../../lib/logger.js";
+import { generateTraceContext } from "../../lib/tracing.js";
+import { NETWORKS } from "../../networks.js";
+/**
+ * Which engine a command talks to: `--engine-url` wins, then the project's `.dev.vars`
+ * `EVAL_ENGINE_HOSTNAME` (how a local `wrangler dev` engine is named), then the network's own
+ * engine host. `http` only for localhost — the same rule the runtime client applies
+ * (`engineBaseUrl`), so a hostname behaves identically here and in the Worker.
+ *
+ * The project's engine deliberately outranks `--network`: a provider pointing at a local or
+ * tunnelled engine means it, and the engine reads the chain named in the request, not in this URL.
+ */
+export function engineUrlFor(opts) {
+    const explicit = opts.engineUrl?.replace(/\/+$/, "");
+    if (explicit) {
+        return /^https?:\/\//.test(explicit) ? explicit : engineBaseUrl(explicit);
+    }
+    return engineBaseUrl(opts.devVars?.EVAL_ENGINE_HOSTNAME ?? NETWORKS[opts.network].engineHost);
+}
+/** The `host[:port]` a base URL names — what the engine client keys its did:web and scheme on. */
+export function engineHostOf(url) {
+    return new URL(url).host;
+}
+/**
+ * The oracle's own engine client, pointed at `engineUrl`. The logger is on at `error` only: a
+ * command's own printed lines tell the story, not the Worker's structured logs.
+ */
+export function cliEngine(config, engineUrl) {
+    const pointed = { ...config, EVAL_ENGINE_HOSTNAME: engineHostOf(engineUrl) };
+    const store = new Map();
+    const cache = {
+        async get(key, type) {
+            const value = store.get(key) ?? null;
+            return value !== null && type === "json" ? JSON.parse(value) : value;
+        },
+        async put(key, value) {
+            store.set(key, value);
+        },
+        async delete(key) {
+            store.delete(key);
+        },
+    };
+    const engine = createEngineClient({
+        config: pointed,
+        logger: createLogger({ level: "error", pretty: true }),
+        trace: generateTraceContext(),
+        cache,
+    });
+    return { config: pointed, engine, store, cache };
+}
+/**
+ * The work order for a protocol, read the way ANYONE can: a plain public GET, no invocation, no
+ * project. `protocol review` and `facts scaffold` are identity-independent by design — a provider
+ * sizes up a protocol before they have an oracle at all — so neither may go through the oracle's
+ * own client (which wants a `Config`). `facts run` does use the client: it needs a Config anyway.
+ */
+export async function fetchManifest(engineUrl, protocolDid) {
+    const url = `${engineUrl}/v1/rubrics/manifest?protocol=${encodeURIComponent(protocolDid)}`;
+    let res;
+    try {
+        res = await fetch(url, { headers: { accept: "application/json" } });
+    }
+    catch (err) {
+        throw new Error(`engine unreachable at ${engineUrl} — is it running? (${err instanceof Error ? err.message : String(err)})`);
+    }
+    if (!res.ok) {
+        throw new Error(`engine answered ${res.status} from ${url}: ${(await res.text()).slice(0, 300)}`);
+    }
+    return ManifestResponse.parse(await res.json());
+}
+/** One line per manifest: the work order's shape when usable, the engine's issues when not. */
+export function summarizeManifest(m) {
+    if (isManifestUnusable(m))
+        return `200 unusable issues=${JSON.stringify(m.issues)}`;
+    return [
+        `200 usable rubricId=${m.rubricId}`,
+        `formProof.drifted=${m.formProof.drifted}`,
+        `ext=[${Object.keys(m.ext)}]`,
+        `ai=[${Object.keys(m.ai)}]`,
+        `fields=${m.fields.length}`,
+        `derived=${m.derived.length}`,
+        `review=${JSON.stringify(m.review?.tasks ?? [])}`,
+        `unique=${JSON.stringify(m.unique ?? null)}`,
+        `frequency=${JSON.stringify(m.frequency ?? null)}`,
+        `sizeProbes=${JSON.stringify(m.sizeProbes ?? [])}`,
+    ].join(" ");
+}
+/** One line for whatever a step threw — the engine's envelope fields when it is an `EngineError`.
+ *  Never a stack trace: an unreachable engine or a 4xx is an expected answer, not a crash. */
+export function describeError(err) {
+    if (err instanceof EngineError) {
+        const requestId = err.requestId ? ` requestId=${err.requestId}` : "";
+        const details = err.details === undefined ? "" : ` details=${JSON.stringify(err.details)}`;
+        return `EngineError ${err.status} ${err.code}${requestId}: ${err.message}${details}`;
+    }
+    if (err instanceof Error) {
+        const cause = err.cause instanceof Error ? ` ← ${err.cause.message}` : "";
+        return `${err.message}${cause}`;
+    }
+    return String(err);
+}
+//# sourceMappingURL=engine.js.map

package/dist/cli/lib/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/cli/lib/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,kBAAkB,EAAqB,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC/F,OAAO,EACL,WAAW,EACX,kBAAkB,EAElB,gBAAgB,GAEjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAmB,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAI5B;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC;AAChG,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AAC3B,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,SAAiB;IACzD,MAAM,OAAO,GAAW,EAAE,GAAG,MAAM,EAAE,oBAAoB,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;IACrF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,KAAK,GAAG;QACZ,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAa;YAClC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;YACrC,OAAO,KAAK,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;YAClC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAW;YACtB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;KACwB,CAAC;IAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACtD,KAAK,EAAE,oBAAoB,EAAE;QAC7B,KAAK;KACN,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,WAAmB;IAEnB,MAAM,GAAG,GAAG,GAAG,SAAS,iCAAiC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3F,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yBAAyB,SAAS,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,mBAAmB,GAAG,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,iBAAiB,CAAC,CAA8B;IAC9D,IAAI,kBAAkB,CAAC,CAAC,CAAC;QAAE,OAAO,uBAAuB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpF,OAAO;QACL,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QACnC,qBAAqB,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE;QAC1C,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG;QAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG;QAC3B,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE;QAC3B,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE;QAC7B,UAAU,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;QACjD,UAAU,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE;QAC5C,aAAa,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE;QAClD,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;KACnD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;8FAC8F;AAC9F,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3F,OAAO,eAAe,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,SAAS,KAAK,GAAG,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,GAAG,GAAG,CAAC,OAAO,GAAG,KAAK,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC"}

package/dist/cli/lib/identity-cards.d.ts

@@ -0,0 +1,188 @@
+/**
+ * The two public cards `oracle init` anchors on the oracle entity — `#dmn` (the domain card the
+ * domain indexer, the portal and the console list) and `#acard` (the Agent Card the portal's
+ * contract flow reads). Pure builders plus the two read-only probes a step's skip decision needs;
+ * no signing, no upload (that is `anchorDoc` in the command, the one path every resource takes).
+ *
+ * Both are VC envelopes around content taken from the RUNNING oracle (`GET <kit-url>/v1/info`), so
+ * "is the live card current?" compares content, never bytes: `validFrom` is the one field that
+ * changes on every build, and it is the one field the comparison ignores.
+ */
+import { type LinkedDocRef } from "../../facts/linked-doc.js";
+/** What `/v1/info` (plus a probe of the Decision API) tells us about the oracle being carded. */
+export interface CardSource {
+    entityDid: string;
+    /** The entity owner — the AuthHub session's DID — which issues both cards, as the portal does. */
+    issuerDid: string;
+    name: string;
+    description: string;
+    kitUrl: string;
+    /** `--logo`; absent ⇒ no `logo` / `image` at all (the indexer then lists no `logo_url`). */
+    logo?: string;
+    /** The effective on-chain evaluation fee for the protocol (`evaluationFeeFor`); absent ⇒ the kit
+     *  publishes no pricing, and no `claim-evaluation` service is carded. */
+    evaluationFee?: {
+        denom: string;
+        minAmount: string;
+    };
+    /** The Decision API's published price for the protocol (`publishedPrice`, as the kit serves it);
+     *  absent ⇒ the lane is off or offers nothing for it, and no `decision-api` service is carded. */
+    api?: {
+        amountMicroUsd: number;
+    };
+    /** `--openhands`: the per-review price the OpenHands app bills, in µUSD (`/v1/info`'s
+     *  `pricing.api`, else `--price-pay`); absent ⇒ no `check-openhands` service is carded. */
+    openhands?: {
+        amountMicroUsd: number;
+    };
+}
+/**
+ * The portal's oracle domain card (impacts-x-web `lib/oracle/entityCreation.ts`
+ * `createDomainCardResource`), field for field, minus the fields an evaluation oracle has no
+ * source for (LLM model, comms style, location). `logo` / `image` appear only with `--logo`: the
+ * portal's own producer writes an empty ImageObject, which the indexer then serves as a
+ * `logo_url` of "" — absent is the honest answer.
+ */
+export declare function buildDomainCard(src: CardSource, validFrom?: string): {
+    "@context": (string | {
+        attribute: string;
+        schema: string;
+        ixo: string;
+        prov: string;
+        proj: string;
+        xsd: string;
+        id: string;
+        type: string;
+        "ixo:vector": {
+            "@container": string;
+            "@type": string;
+        };
+        "@protected": boolean;
+    })[];
+    id: string;
+    type: string[];
+    issuer: {
+        id: string;
+    };
+    validFrom: string;
+    credentialSchema: {
+        id: string;
+        type: string;
+    };
+    credentialSubject: {
+        id: string;
+        type: string[];
+        additionalType: string[];
+        name: string;
+        description: string;
+        url: string;
+        sameAs: never[];
+        logo?: {
+            type: string;
+            id: string;
+            contentUrl: string;
+        } | undefined;
+        image?: {
+            type: string;
+            id: string;
+            contentUrl: string;
+        }[] | undefined;
+        keywords: string[];
+        knowsAbout: string[];
+        composition: {
+            type: string;
+            hasPart: never[];
+        };
+        makesOffer: never[];
+        relationships: {
+            "prov:wasAssociatedWith": never[];
+            memberOf: never[];
+            funding: never[];
+        };
+        agents: never[];
+        credentials: never[];
+        attributes: never[];
+        project: {};
+    };
+};
+/**
+ * The Agent Card (ixo-oracles-cli `buildAgentCard`; the engine's strict schema, agent-contracts
+ * §A.2), built non-interactively. The schema is closed — no `url` anywhere — so the kit URL lives in
+ * the service text, which is also what the portal shows (`fetchAgentCard` → `parseDisplayCard`
+ * needs `subject.id === entity`, a name, and ≥ 1 service with id/name/deliverables/price.amount).
+ *
+ * `price` is in PAY (1 PAY = 1 USD). The chain lane is paid by the collection's on-chain evaluation
+ * leg, never in PAY, so its PAY price is 0 and the effective fee is named in its description; the
+ * Decision API's per-decision price is a USD price already, so it carries over exactly. A service
+ * with no price behind it is not carded at all — never advertised as free.
+ */
+export declare function buildAgentCard(src: CardSource, validFrom?: string): {
+    "@context": string[];
+    id: string;
+    type: string[];
+    issuer: {
+        id: string;
+    };
+    validFrom: string;
+    credentialSubject: {
+        id: string;
+        name: string;
+        description: string;
+        version: string;
+        services: ({
+            id: string;
+            name: string;
+            description: string;
+            price: {
+                amount: number;
+                currency: string;
+            };
+            deliverables: string;
+            doneMeans: string[];
+            tags: string[];
+        } | {
+            tags?: undefined;
+            id: string;
+            name: string;
+            description: string;
+            price: {
+                amount: number;
+                currency: string;
+            };
+            deliverables: string;
+            doneMeans: string[];
+        })[];
+    };
+};
+type Card = Record<string, unknown>;
+/** Whether a kit-owned field differs between the live card and the one the kit would write. */
+export declare function cardDrifted(fragment: string, live: Card, ours: Card, logo: boolean): boolean;
+/**
+ * The kit's fields laid onto the live card: the envelope's id/issuer/validFrom and the owned
+ * subject fields are ours, the rest is the live card's — so a replace never drops the provider's
+ * additions (on the Agent Card, their services follow the kit's).
+ */
+export declare function mergeCard(fragment: string, live: Card, ours: Card, logo: boolean): Card;
+/**
+ * The schema the engine serves at `GET /v1/agent-card-schema` (public), else the bundled snapshot
+ * — ixo-oracles-cli's `fetchAgentCardSchema`, same fallback: validation must never depend on the
+ * engine being reachable, and the snapshot is what the engine's Zod generates.
+ */
+export declare function agentCardSchema(engineHost: string): Promise<{
+    schema: Record<string, unknown>;
+    source: string;
+}>;
+/** Human-readable violations; empty = valid. `@cfworker/json-schema`, the validator already in
+ *  this package (Ajv compiles code, which a Worker forbids — one validator everywhere). */
+export declare function validateAgentCard(card: unknown, schema: Record<string, unknown>): string[];
+/** An anchored document as served (`readLinkedDoc`: a Vault, IPFS or Matrix address; its `proof`
+ *  checked when one is passed): its bytes and their JSON — null when it cannot be read, is not
+ *  JSON, or is not the bytes its proof names. */
+export declare function fetchDoc(resource: LinkedDocRef): Promise<{
+    bytes: Uint8Array;
+    json: unknown;
+} | null>;
+/** A JSON read whose failure is only a skip or a warning — null when it cannot be read. */
+export declare function fetchJson(url: string): Promise<unknown>;
+export {};
+//# sourceMappingURL=identity-cards.d.ts.map

package/dist/cli/lib/identity-cards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-cards.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/identity-cards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,KAAK,YAAY,EAAiB,MAAM,wBAAwB,CAAC;AAI1E,iGAAiG;AACjG,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,kGAAkG;IAClG,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;6EACyE;IACzE,aAAa,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD;sGACkG;IAClG,GAAG,CAAC,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC;+FAC2F;IAC3F,SAAS,CAAC,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CACxC;AAmBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,SAA2B;;;;;;;;;;;YAZjE,YAAY;YAAW,OAAO;;;;;;;QAkBpC,EAAE;;;;QAGV,EAAE;QACF,IAAI;;;;;;;;;;;;;;;;;;;;;;;YAaW,IAAI;YAAuB,OAAO;;;;YAEhC,wBAAwB;YAAM,QAAQ;YAAM,OAAO;;;;;;;EAOzE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,SAA2B;;;;;QA+DtE,EAAE;;;;;;;;;;;;;gBAtDK,MAAM;gBAAK,QAAQ;;;;;;;;;;;gBAwCnB,MAAM;gBAA4C,QAAQ;;;;;;EAwB9E;AAED,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA8CpC,+FAA+F;AAC/F,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAM5F;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAoBvF;AAID;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAS9D;AAED;2FAC2F;AAC3F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAG1F;AAED;;iDAEiD;AACjD,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAC,CAGtD;AAED,2FAA2F;AAC3F,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO7D"}