@ixo/decision-oracle 0.0.0-stage → 0.2.1

package/dist/cli/commands/facts-run.js

@@ -0,0 +1,409 @@
+/**
+ * `decision-oracle facts run` — the handler dev loop: YOUR handlers, a claim file on disk, the LIVE work
+ * order, and nothing else. No chain write, no D1 row, no claim pulled from Matrix, and no credits
+ * spent on a decision — `--preview` asks the engine's dev route, which decides nothing and bills
+ * nothing.
+ *
+ *   decision-oracle facts run --protocol <did> --claim <file> [--collection <id>] [--agent <address>]
+ *     [--facts src/facts/index.ts] [--preview] [--no-ai] [--json]
+ *     [--engine-url <url>] [--network devnet|testnet|mainnet] [--env-file <path>] [--env <name>]
+ *
+ * The claim file is either a FLAT answers object — the same file `submit-claim --answers` takes, so
+ * a protocol's `sample-claim.json` works as it stands — or the envelope
+ * `{ answers, attachments: [{ question, name, mediaType, path }] }` when a claim carries files.
+ * An attachment `path` is relative to the claim file itself and its bytes ride as `data:` URLs, so
+ * `tools.attachments.bytes()` works exactly as it does against Matrix, without the claim bot.
+ *
+ * What is REAL here: the manifest (read from the engine), the runner and its rules, the tools
+ * (HTTP, UCAN headers, `tools.ai.judge` against the configured AI provider — that one spends money), `validateFacts`
+ * and the frozen FactSet. What is not: `ctx` without `--collection` — its clock is the real one, so
+ * a date rule reads the instant it would in production, but the collection window and submission
+ * plane around it are a sample's empty ones; the stock `unique` lane, which reads this oracle's D1
+ * registries and is answered here by the fail-closed placeholder below (`uniqueNotRun`) so the rest
+ * of the run still happens; and C2PA provenance, which cannot instantiate its WASM outside a Worker
+ * — it reads as inconclusive here and is only ever screened for real in the deployed oracle.
+ *
+ * Exit codes: 0 every declared fact answered · 1 issues (or a failure worth fixing) · 2 the rubric
+ * is unusable · 64 usage, including a handlers module that exports no `facts`.
+ */
+import { readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import process from "node:process";
+import { pathToFileURL } from "node:url";
+import { z } from "zod";
+import { isFactsConfig } from "../../facts/fact.js";
+import { isManifestUnusable } from "../../lib/engine/types.js";
+import { AppError } from "../../lib/errors.js";
+import { resolveCtx } from "../../lib/facts/ctx.js";
+import { FactSetV1 } from "../../lib/facts/factset.js";
+import { producerOf } from "../../lib/facts/tools.js";
+import { validateFacts } from "../../lib/facts/validate.js";
+import { createLogger } from "../../lib/logger.js";
+import { generateTraceContext } from "../../lib/tracing.js";
+import { sampleCtx } from "../../testing/samples.js";
+import { restAiFromEnv } from "../lib/ai-rest.js";
+import { parse, UsageError } from "../lib/args.js";
+import { resolveNetwork } from "../lib/chain.js";
+import { loadProjectConfig, oracleUrlFor, readProjectEnv } from "../lib/devvars.js";
+import { cliEngine, describeError, engineUrlFor } from "../lib/engine.js";
+/** The claim file, validated at the edge: a typo in it must name itself, not crash a handler. */
+const Answers = z.record(z.string(), z.unknown());
+const ClaimEnvelope = z.object({
+    answers: Answers,
+    attachments: z
+        .array(z.object({
+        /** The root question the file was answered on — what `tools.attachments.on()` filters by. */
+        question: z.string().min(1),
+        name: z.string().min(1),
+        mediaType: z.string().min(1),
+        /** Relative to the claim file's own directory. */
+        path: z.string().min(1),
+    }))
+        .optional(),
+});
+/**
+ * Either shape (header): an `answers` key holding an OBJECT is the envelope, anything else is a
+ * flat answers document. The heuristic is the whole rule — a claim form with its own `answers`
+ * question still reads flat unless that answer is itself an object, which no claim form produces.
+ */
+function readClaimFile(path) {
+    const doc = JSON.parse(readFileSync(path, "utf8"));
+    if (doc === null || typeof doc !== "object" || Array.isArray(doc)) {
+        throw new Error("expected a JSON object: the claim answers, or { answers, attachments }");
+    }
+    const answers = doc.answers;
+    return answers !== null && typeof answers === "object" && !Array.isArray(answers)
+        ? ClaimEnvelope.parse(doc)
+        : { answers: Answers.parse(doc) };
+}
+/** The digest the placeholder below carries — nothing could mistake it for a real body digest. */
+const UNIQUE_NOT_RUN = "cli:not-run";
+/**
+ * The `unique` lane under the CLI. The stock one reads this oracle's D1 duplicate registries, which
+ * a laptop run has none of — and failing there showed a provider NOTHING: not one fact, no
+ * `validateFacts`, no preview, for any rubric with dup detection on. So the fact is produced,
+ * fail-closed and unmistakably labelled: band `review`, score 0, a digest no body could have. The
+ * engine then decides what it would for any unresolved duplicate check — review, never a pass — and
+ * the rest of the run reads normally. The real answer needs either a `facts.unique` handler or the
+ * deployed oracle.
+ */
+const uniqueNotRun = ({ rule }) => ({
+    ruleId: rule.id,
+    digest: UNIQUE_NOT_RUN,
+    scoreBps: 0,
+    band: "review",
+    detail: "unique lane not run under the CLI (needs the deployed oracle's D1)",
+});
+export async function run(argv) {
+    const { values } = parse(argv, {
+        options: {
+            protocol: { type: "string" },
+            claim: { type: "string" },
+            collection: { type: "string" },
+            agent: { type: "string" },
+            facts: { type: "string" },
+            preview: { type: "boolean" },
+            "no-ai": { type: "boolean" },
+            json: { type: "boolean" },
+            "engine-url": { type: "string" },
+            network: { type: "string" },
+            "env-file": { type: "string" },
+            env: { type: "string" },
+        },
+    });
+    const protocolDid = values.protocol;
+    const claimPath = values.claim;
+    if (!protocolDid || !claimPath) {
+        throw new UsageError("facts run needs --protocol <did> and --claim <file>");
+    }
+    // `--json` is a machine reading stdout: the report lines are suppressed, errors still go to stderr.
+    const say = (line) => {
+        if (!values.json)
+            console.log(line);
+    };
+    const cwd = process.cwd();
+    let config;
+    try {
+        config = loadProjectConfig({ envFile: values["env-file"], env: values.env });
+    }
+    catch (err) {
+        // One line naming the file or the missing var — a first run in a fresh project lands here.
+        console.error(err instanceof Error ? err.message : String(err));
+        return 1;
+    }
+    // The handlers and the claim BEFORE the network: a typo in either is worth failing on for free.
+    const factsPath = resolve(cwd, values.facts ?? "src/facts/index.ts");
+    let facts;
+    try {
+        const module = (await import(pathToFileURL(factsPath).href));
+        if (!isFactsConfig(module.facts)) {
+            console.error(`${factsPath}: export \`facts\` from \`defineFacts(...)\` — that is what runs`);
+            return 64;
+        }
+        facts = module.facts;
+    }
+    catch (err) {
+        console.error(`could not load ${factsPath}: ${err instanceof Error ? err.message : err}`);
+        return 64;
+    }
+    const claimFile = resolve(cwd, claimPath);
+    let attachments;
+    let answers;
+    try {
+        const doc = readClaimFile(claimFile);
+        answers = doc.answers;
+        attachments = (doc.attachments ?? []).map((att) => {
+            const bytes = readFileSync(resolve(dirname(claimFile), att.path));
+            return {
+                question: att.question,
+                name: att.name,
+                mediaType: att.mediaType,
+                // The bytes ARE the reference here (there is no bot to fetch them from), and every reader
+                // in the kit already understands a data: URL (lib/ixo/attachments.ts).
+                url: `data:${att.mediaType};base64,${Buffer.from(bytes).toString("base64")}`,
+                size: bytes.byteLength,
+            };
+        });
+    }
+    catch (err) {
+        console.error(`could not read ${claimFile}: ${err instanceof Error ? err.message : err}`);
+        return 64;
+    }
+    const engineUrl = engineUrlFor({
+        network: resolveNetwork(values.network),
+        engineUrl: values["engine-url"],
+        devVars: config,
+    });
+    const { config: pointed, engine } = cliEngine(config, engineUrl);
+    say(`${protocolDid} @ ${engineUrl}`);
+    let manifest;
+    try {
+        const resolved = await engine.getManifest(protocolDid);
+        if (isManifestUnusable(resolved)) {
+            console.error(`${protocolDid} — UNUSABLE; the engine cannot bind this protocol's rubric:`);
+            for (const issue of resolved.issues) {
+                console.error(`  ${issue.code} ${issue.path}: ${issue.message}`);
+            }
+            return 2;
+        }
+        manifest = resolved;
+    }
+    catch (err) {
+        console.error(describeError(err));
+        return 1;
+    }
+    say(`rubricId ${manifest.rubricId}`);
+    const trace = generateTraceContext();
+    const claim = {
+        claimId: `preview-${Date.now()}`,
+        collectionId: values.collection ?? "0",
+        network: pointed.IXO_NETWORK,
+        // No store in a dry run — the cellnode posture (`media: null`); the lane is never read.
+        lane: "cellnode",
+        metadata: {
+            agentDid: null,
+            agentAddress: values.agent ?? null,
+            schemaType: null,
+            submissionDate: null,
+            amount: [],
+            payment: { useIntent: false, guaranteed: false, amount: [] },
+            evaluation: null,
+        },
+        body: answers,
+        attachments,
+        // No media store in a dry run: every attachment carries its own bytes.
+        media: null,
+    };
+    // The real collection window costs one Blocksync read and needs an id. Without one the clock is
+    // still NOW — a "claim is not in the future" rule has to be judged against the same instant the
+    // deployed oracle would freeze, not against `sampleCtx`'s fixed one, which quietly rewrites the
+    // answer — but the window and submission plane around it are the sample's empty ones.
+    let ctx;
+    if (values.collection) {
+        try {
+            ctx = await resolveCtx({ config: pointed, trace }, {
+                collectionId: values.collection,
+                submitter: null,
+                submitterAddress: claim.metadata.agentAddress,
+                submissionDate: null,
+            });
+        }
+        catch (err) {
+            console.error(describeError(err));
+            return 1;
+        }
+    }
+    else {
+        ctx = sampleCtx({ now: new Date().toISOString() });
+        say("ctx: clock is now, window is a sample — pass --collection <id> for the real window and " +
+            "submission plane");
+    }
+    const settings = { allowAiChecks: !values["no-ai"], allowImageChecks: !values["no-ai"] };
+    if (manifest.hasAiChecks && settings.allowImageChecks) {
+        say("c2pa: inconclusive under the CLI — image provenance is only screened in the deployed oracle");
+    }
+    // On the gateway there is no binding in a terminal — the REST stand-in speaks for it (ai-rest.ts),
+    // built once, at the first model call: a missing token is that call's error, not the run's.
+    const aiSpend = new Map();
+    let restAi;
+    const cliEnv = pointed.AI_PROVIDER === "cloudflare"
+        ? {
+            get AI() {
+                restAi ??= restAiFromEnv({
+                    ...readProjectEnv(cwd, { envFile: values["env-file"], env: values.env }),
+                    ...process.env,
+                });
+                return restAi;
+            },
+        }
+        : undefined;
+    const deps = {
+        config: pointed,
+        // The connector's own lines are half the value of a dry run ("it did call your endpoint") —
+        // except under `--json`, where the only thing allowed on stdout is the JSON.
+        logger: createLogger({ level: values.json ? "error" : "info", pretty: true }),
+        trace,
+        media: null,
+        cache: undefined,
+        // The buyer statement a handler may read (`tools.agreement`) is an AUTHENTICATED, registered
+        // engine read (client.ts's `getAgreement` mints an invocation and runs the register handshake) —
+        // it needs `ORACLE_SECP_MNEMONIC`, `OWNER_DELEGATION_CAR` and an on-chain grant for this oracle,
+        // same as everything else this CLI does against a live engine.
+        engine,
+        db: undefined,
+        factCache: undefined,
+        env: cliEnv,
+        aiSpend,
+        settings,
+        ctx,
+    };
+    let produced;
+    try {
+        // The provider's own `unique` handler always wins; the placeholder stands in only for the stock
+        // lane this run cannot honestly execute (see `uniqueNotRun`).
+        const stock = manifest.unique && !facts.unique ? { unique: uniqueNotRun } : undefined;
+        produced = await producerOf(facts, stock)(claim, manifest, deps);
+    }
+    catch (err) {
+        // Whatever actually failed, named: a handler's `fact.retryLater(...)` arrives here as
+        // `unavailable` (runner.ts), and a rubric declaring `unique` must not make every such throw
+        // read as a D1 problem — the hint below is gated on the stock lane's OWN error, never on a proxy.
+        console.error(describeError(err));
+        if (err instanceof AppError && /ProducerDeps\.db/.test(err.message)) {
+            console.error("unique: stock lane needs D1 — write a facts.unique handler or test it in the deployed worker");
+        }
+        return 1;
+    }
+    for (const [name, answer] of Object.entries(produced.ext))
+        say(factLine("ext", name, answer));
+    for (const [name, answer] of Object.entries(produced.ai))
+        say(factLine("ai", name, answer));
+    // The run's model spend (the stock ai lane, `tools.ai.judge`): tokens always; USD when the provider
+    // says it at call time (OpenRouter) — the gateway keeps its own in its logs.
+    for (const [model, spent] of aiSpend) {
+        const usd = spent.microUsd === null
+            ? "USD in the AI Gateway's logs"
+            : `$${(spent.microUsd / 1e6).toFixed(6)}`;
+        say(`AI spend: ${model} ${spent.promptTokens}+${spent.completionTokens} tokens — ${usd}`);
+    }
+    if (produced.unique) {
+        say(produced.unique.digest === UNIQUE_NOT_RUN
+            ? "unique  not run under the CLI → review (needs the deployed oracle's D1)"
+            : `unique ${produced.unique.band} ${produced.unique.scoreBps}bps (${produced.unique.ruleId})`);
+    }
+    if (produced.frequency) {
+        const f = produced.frequency;
+        say(`frequency ${f.count}/${f.max} per ${f.per ?? "?"} breach=${f.breach}`);
+    }
+    const valid = validateFacts(produced, manifest);
+    if (valid.ok) {
+        say("issues: none");
+    }
+    else {
+        // The same codes the engine would answer with — a fact that misses the work order is never sent.
+        console.error(`issues: ${valid.issues.length}`);
+        for (const issue of valid.issues)
+            console.error(`  ${issue.code} ${issue.path}: ${issue.message}`);
+    }
+    if (values.preview && !valid.ok) {
+        // Never sent: the engine would refuse this FactSet for the same reasons, and a preview that
+        // "failed" on a fact the oracle never produced teaches the wrong lesson.
+        console.error("--preview skipped: fix the issues above first");
+    }
+    let decision = null;
+    if (values.preview && valid.ok) {
+        const frozen = freeze(produced, claim, ctx, settings);
+        const oracleUrl = oracleUrlFor({ devVars: pointed });
+        if (!(await didDocumentServed(oracleUrl))) {
+            console.error("start `bun run dev` first — the engine resolves your did:web from it");
+            return 1;
+        }
+        try {
+            decision = await engine.preview({
+                subject: {
+                    kind: "claim",
+                    claimId: claim.claimId,
+                    collectionId: claim.collectionId,
+                    protocolDid,
+                },
+                rubric: { id: manifest.rubricId },
+                facts: frozen,
+            });
+        }
+        catch (err) {
+            console.error(describeError(err));
+            return 1;
+        }
+        say(`decision: ${decision.decision.status} ${decision.decision.verdict} (${decision.decision.action}, total ${decision.decision.totalBps ?? "—"}bps)`);
+        for (const reason of decision.decision.reasons)
+            say(`  ${reason.code}: ${reason.reason}`);
+    }
+    if (values.json) {
+        console.log(JSON.stringify({ ...produced, issues: valid.ok ? [] : valid.issues, decision: decision?.decision ?? null }, null, 2));
+    }
+    return valid.ok ? 0 : 1;
+}
+const factLine = (kind, name, answer) => answer.status === "ok"
+    ? `${kind}.${name} ok ${JSON.stringify(answer.value)}${answer.reason ? ` — ${answer.reason}` : ""}`
+    : `${kind}.${name} error(${answer.onError}) ${answer.detail}`;
+/** The wire FactSet, frozen exactly as lib/facts/builder.ts freezes one — the strict parse is the
+ *  contract asserted on our side, so a dry run fails here rather than as a 400 from the engine. */
+function freeze(produced, claim, ctx, settings) {
+    const attachments = claim.attachments.map((att) => ({
+        question: att.question,
+        name: att.name,
+        mediaType: att.mediaType,
+        cid: att.cid ?? null,
+        size: att.size ?? null,
+    }));
+    return FactSetV1.parse({
+        version: 1,
+        frozenAt: ctx.now,
+        answers: claim.body,
+        attachments,
+        ctx,
+        ext: produced.ext,
+        ai: produced.ai,
+        ...(produced.unique !== undefined ? { unique: produced.unique } : {}),
+        ...(produced.frequency !== undefined ? { frequency: produced.frequency } : {}),
+        settings,
+    });
+}
+/**
+ * Is this oracle's did:web actually being served? The engine verifies our invocation by fetching
+ * `/.well-known/did.json` from `ORACLE_HOSTNAME`, so a preview from a laptop with nothing running
+ * there fails on the ENGINE's side with an auth error that says nothing about the real cause.
+ */
+async function didDocumentServed(oracleUrl) {
+    try {
+        const res = await fetch(`${oracleUrl}/.well-known/did.json`, {
+            headers: { accept: "application/json" },
+            signal: AbortSignal.timeout(5000),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=facts-run.js.map

package/dist/cli/commands/facts-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts-run.js","sourceRoot":"","sources":["../../../src/cli/commands/facts-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,kBAAkB,EAAiB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAQjD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEvE,iGAAiG;AACjG,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAClD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,CAAC;SACX,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,6FAA6F;QAC7F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,kDAAkD;QAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACxB,CAAC,CACH;SACA,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,OAAO,GAAI,GAA6B,CAAC,OAAO,CAAC;IACvD,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/E,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1B,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,kGAAkG;AAClG,MAAM,cAAc,GAAG,aAAa,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAkB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,EAAE,IAAI,CAAC,EAAE;IACf,MAAM,EAAE,cAAc;IACtB,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,oEAAoE;CAC7E,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE;YACP,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACzB,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACxB;KACF,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;IAC/B,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAC;IAC9E,CAAC;IACD,oGAAoG;IACpG,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2FAA2F;QAC3F,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,gGAAgG;IAChG,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,IAAI,oBAAoB,CAAC,CAAC;IACrE,IAAI,KAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAwB,CAAC;QACpF,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,kEAAkE,CAAC,CAAC;YAC9F,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,kBAAkB,SAAS,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1F,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,WAAyB,CAAC;IAC9B,IAAI,OAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACtB,WAAW,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAClE,OAAO;gBACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,0FAA0F;gBAC1F,uEAAuE;gBACvE,GAAG,EAAE,QAAQ,GAAG,CAAC,SAAS,WAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAC5E,IAAI,EAAE,KAAK,CAAC,UAAU;aACvB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,kBAAkB,SAAS,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1F,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;QAC/B,OAAO,EAAE,MAAM;KAChB,CAAC,CAAC;IACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjE,GAAG,CAAC,GAAG,WAAW,MAAM,SAAS,EAAE,CAAC,CAAC;IAErC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,GAAG,WAAW,6DAA6D,CAAC,CAAC;YAC3F,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,GAAG,CAAC,YAAY,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAgB;QACzB,OAAO,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE;QAChC,YAAY,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG;QACtC,OAAO,EAAE,OAAO,CAAC,WAAW;QAC5B,wFAAwF;QACxF,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YAClC,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5D,UAAU,EAAE,IAAI;SACjB;QACD,IAAI,EAAE,OAAO;QACb,WAAW;QACX,uEAAuE;QACvE,KAAK,EAAE,IAAI;KACZ,CAAC;IAEF,gGAAgG;IAChG,gGAAgG;IAChG,gGAAgG;IAChG,sFAAsF;IACtF,IAAI,GAAa,CAAC;IAClB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,UAAU,CACpB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAC1B;gBACE,YAAY,EAAE,MAAM,CAAC,UAAU;gBAC/B,SAAS,EAAE,IAAI;gBACf,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;gBAC7C,cAAc,EAAE,IAAI;aACrB,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACnD,GAAG,CACD,yFAAyF;YACvF,kBAAkB,CACrB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IACzF,IAAI,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACtD,GAAG,CACD,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,mGAAmG;IACnG,4FAA4F;IAC5F,MAAM,OAAO,GAAY,IAAI,GAAG,EAAE,CAAC;IACnC,IAAI,MAAoC,CAAC;IACzC,MAAM,MAAM,GACV,OAAO,CAAC,WAAW,KAAK,YAAY;QAClC,CAAC,CAAE;YACC,IAAI,EAAE;gBACJ,MAAM,KAAK,aAAa,CAAC;oBACvB,GAAG,cAAc,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;oBACxE,GAAG,OAAO,CAAC,GAAG;iBACf,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;SACuB;QAC5B,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,IAAI,GAAiB;QACzB,MAAM,EAAE,OAAO;QACf,4FAA4F;QAC5F,6EAA6E;QAC7E,MAAM,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7E,KAAK;QACL,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,SAAS;QAChB,6FAA6F;QAC7F,iGAAiG;QACjG,iGAAiG;QACjG,+DAA+D;QAC/D,MAAM;QACN,EAAE,EAAE,SAAS;QACb,SAAS,EAAE,SAAS;QACpB,GAAG,EAAE,MAAM;QACX,OAAO;QACP,QAAQ;QACR,GAAG;KACJ,CAAC;IAEF,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,gGAAgG;QAChG,8DAA8D;QAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sFAAsF;QACtF,4FAA4F;QAC5F,kGAAkG;QAClG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,YAAY,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,KAAK,CACX,8FAA8F,CAC/F,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9F,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5F,oGAAoG;IACpG,6EAA6E;IAC7E,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,GAAG,GACP,KAAK,CAAC,QAAQ,KAAK,IAAI;YACrB,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,aAAa,KAAK,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,gBAAgB,aAAa,GAAG,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,GAAG,CACD,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,cAAc;YACvC,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,UAAU,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,QAAQ,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC7B,GAAG,CAAC,aAAa,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI,GAAG,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QACb,GAAG,CAAC,cAAc,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,iGAAiG;QACjG,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM;YAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAChC,4FAA4F;QAC5F,yEAAyE;QACzE,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,QAAQ,GAAsD,IAAI,CAAC;IACvE,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;YACtF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;gBAC9B,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,WAAW;iBACZ;gBACD,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBACjC,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,GAAG,CACD,aAAa,QAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,MAAM,CAClJ,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO;YAAE,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,EAAE,EAC3F,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,IAAkB,EAAE,IAAY,EAAE,MAAwB,EAAU,EAAE,CACtF,MAAM,CAAC,MAAM,KAAK,IAAI;IACpB,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IACnG,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,UAAU,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;AAElE;mGACmG;AACnG,SAAS,MAAM,CACb,QAAuB,EACvB,KAAkB,EAClB,GAAa,EACb,QAAsB;IAEtB,MAAM,WAAW,GAAqB,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;KACvB,CAAC,CAAC,CAAC;IACJ,OAAO,SAAS,CAAC,KAAK,CAAC;QACrB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,GAAG,CAAC,GAAG;QACjB,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,WAAW;QACX,GAAG;QACH,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,uBAAuB,EAAE;YAC3D,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cli/commands/facts-scaffold.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `decision-oracle facts scaffold <did>` — write a stub handler, and a test for it, for every name in a
+ * protocol's work order that needs one (`--all`: for every declared name). The classification is
+ * `protocol review`'s, shared through lib/workorder.ts.
+ *
+ *   decision-oracle facts scaffold <protocol did> [--all] [--dir src/facts]
+ *     [--engine-url <url>] [--network devnet|testnet|mainnet] [--env-file <path>]
+ *
+ * A stub is a VISIBLE error — `fact.error("not implemented: <name>")` — never `tools.stock()` and
+ * never a plausible-looking value. A forgotten stub must fail the fact (and, through the rubric's
+ * own `onError`, send the claim to review or reject); a forgotten stub that returned a pass would
+ * approve claims on evidence nobody ever produced. The generated test asserts exactly that error,
+ * so it goes red the moment someone implements the handler — which is the reminder to write the
+ * real test.
+ *
+ * Nothing is ever overwritten: a file that exists is reported as `skipped` and left alone.
+ *
+ * Exit codes: 0 written (or nothing to write) · 2 the rubric is unusable · 1 the engine refused the
+ * call or is unreachable · 64 usage.
+ */
+export declare function run(argv: string[]): Promise<number>;
+//# sourceMappingURL=facts-scaffold.d.ts.map

package/dist/cli/commands/facts-scaffold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts-scaffold.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/facts-scaffold.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAeH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgGzD"}

package/dist/cli/commands/facts-scaffold.js

@@ -0,0 +1,208 @@
+/**
+ * `decision-oracle facts scaffold <did>` — write a stub handler, and a test for it, for every name in a
+ * protocol's work order that needs one (`--all`: for every declared name). The classification is
+ * `protocol review`'s, shared through lib/workorder.ts.
+ *
+ *   decision-oracle facts scaffold <protocol did> [--all] [--dir src/facts]
+ *     [--engine-url <url>] [--network devnet|testnet|mainnet] [--env-file <path>]
+ *
+ * A stub is a VISIBLE error — `fact.error("not implemented: <name>")` — never `tools.stock()` and
+ * never a plausible-looking value. A forgotten stub must fail the fact (and, through the rubric's
+ * own `onError`, send the claim to review or reject); a forgotten stub that returned a pass would
+ * approve claims on evidence nobody ever produced. The generated test asserts exactly that error,
+ * so it goes red the moment someone implements the handler — which is the reminder to write the
+ * real test.
+ *
+ * Nothing is ever overwritten: a file that exists is reported as `skipped` and left alone.
+ *
+ * Exit codes: 0 written (or nothing to write) · 2 the rubric is unusable · 1 the engine refused the
+ * call or is unreachable · 64 usage.
+ */
+import { existsSync, mkdirSync, writeFileSync } from "node:fs";
+import { dirname, join, relative, resolve } from "node:path";
+import process from "node:process";
+import { isManifestUnusable } from "../../lib/engine/types.js";
+import { parse, UsageError } from "../lib/args.js";
+import { resolveNetwork } from "../lib/chain.js";
+import { tryProjectConfig } from "../lib/devvars.js";
+import { engineUrlFor, fetchManifest } from "../lib/engine.js";
+import { classify } from "../lib/workorder.js";
+/** Where the generated tests go — beside the provider's own, in the project's test tree. */
+const TEST_DIR = "test/facts";
+export async function run(argv) {
+    const { values, positionals } = parse(argv, {
+        options: {
+            all: { type: "boolean" },
+            dir: { type: "string" },
+            "engine-url": { type: "string" },
+            network: { type: "string" },
+            "env-file": { type: "string" },
+        },
+    });
+    const did = positionals[0];
+    if (!did)
+        throw new UsageError("facts scaffold needs a protocol did");
+    const engineUrl = engineUrlFor({
+        network: resolveNetwork(values.network),
+        engineUrl: values["engine-url"],
+        devVars: tryProjectConfig({ envFile: values["env-file"] }),
+    });
+    let manifest;
+    try {
+        manifest = await fetchManifest(engineUrl, did);
+    }
+    catch (err) {
+        console.error(err instanceof Error ? err.message : String(err));
+        return 1;
+    }
+    if (isManifestUnusable(manifest)) {
+        console.error(`${did} — UNUSABLE (${engineUrl}); nothing to scaffold:`);
+        for (const issue of manifest.issues) {
+            console.error(`  ${issue.code} ${issue.path}: ${issue.message}`);
+        }
+        return 2;
+    }
+    const order = classify(manifest);
+    // A refused source (audience ≠ endpoint) is the rubric's to fix — never a stub (lib/workorder.ts).
+    const declared = [...order.ext, ...order.ai].filter((w) => !w.refused);
+    for (const name of order.refused) {
+        console.log(`skipping ${name} — refused: its audience is not its endpoint's did:web; fix the rubric`);
+    }
+    const wanted = values.all ? declared : declared.filter((w) => !w.stock);
+    console.log(`${did} @ ${engineUrl}`);
+    if (wanted.length === 0) {
+        console.log(declared.length === 0
+            ? "no sources or AI checks declared — nothing to scaffold."
+            : "every declared name is stock-shaped — nothing to scaffold (--all writes a stub for each of them anyway).");
+        return 0;
+    }
+    const cwd = process.cwd();
+    const factsDir = resolve(cwd, values.dir ?? "src/facts");
+    const testsDir = resolve(cwd, TEST_DIR);
+    const written = [];
+    for (const work of wanted) {
+        // A fact name is a rubric author's string; only an identifier can be a `const` and an import.
+        if (!/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(work.name)) {
+            console.log(`cannot scaffold ${work.kind}.${work.name} — not a JavaScript identifier; write this handler by hand`);
+            continue;
+        }
+        // `work` was classified from THIS manifest, so its declaration is there — the cast is the index
+        // signature's, not a claim about the data.
+        const source = manifest.ext[work.name];
+        const check = manifest.ai[work.name];
+        const handlerPath = join(factsDir, `${work.name}.ts`);
+        // The test rides WITH its stub, never on its own: a handler someone already implemented would
+        // otherwise gain a test asserting it is not implemented, and turn a working project red.
+        if (!write(cwd, handlerPath, work.kind === "ext" ? extStub(work.name, source) : aiStub(work.name, check))) {
+            continue;
+        }
+        written.push(work);
+        // The generated test declares the same fact to `sampleManifest` — an `expect` for a source, the
+        // instructions for a check — so it runs the handler the way the work order will.
+        const importPath = importSpecifier(testsDir, handlerPath);
+        const declaration = work.kind === "ext"
+            ? `{ expect: ${JSON.stringify(source.expect)} }`
+            : `{ instructions: ${JSON.stringify(check.instructions)} }`;
+        write(cwd, join(testsDir, `${work.name}.test.ts`), handlerTest(work, importPath, declaration));
+    }
+    if (written.length > 0)
+        console.log(`\nadd to ${relative(cwd, join(factsDir, "index.ts"))}:\n`);
+    for (const line of tableLines(written))
+        console.log(line ? `  ${line}` : "");
+    return 0;
+}
+/** Write unless it exists — a handler someone already wrote is never ours to replace. */
+function write(cwd, path, body) {
+    const shown = relative(cwd, path);
+    if (existsSync(path)) {
+        console.log(`skipped ${shown} (already exists)`);
+        return false;
+    }
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, body);
+    console.log(`wrote ${shown}`);
+    return true;
+}
+/** `../../src/facts/<name>` — how the generated test imports the handler beside it. */
+function importSpecifier(fromDir, handlerPath) {
+    const rel = relative(fromDir, handlerPath.replace(/\.ts$/, "")).split("\\").join("/");
+    return rel.startsWith(".") ? rel : `./${rel}`;
+}
+function extStub(name, source) {
+    return `import { fact, type ExtHandler } from "@ixo/decision-oracle/facts";
+/**
+ * \`${name}\` — ${source.expect} source, onError ${source.onError}. Declared send map: ${JSON.stringify(source.send)}.
+ * Endpoint the rubric declares: ${source.endpoint} (audience ${source.audience}).
+ * Replace the body below with the real read. Never return a guessed value: an unreachable or
+ * unknown answer is \`fact.error(...)\` (the rubric's own onError decides), a transient failure is
+ * \`throw fact.retryLater(...)\`.
+ */
+export const ${name}: ExtHandler = async (input, tools) => {
+  return fact.error("not implemented: ${name}");
+};
+`;
+}
+function aiStub(name, check) {
+    const instructions = check.instructions.map((line) => ` *   - ${line}`).join("\n");
+    return `import { fact, type AiHandler } from "@ixo/decision-oracle/facts";
+/**
+ * \`${name}\` — AI check, onError ${check.onError}. Declared send map: ${JSON.stringify(check.send)}.
+ * The instructions the rubric declares, ALL of which must hold for a \`true\` verdict:
+${instructions}
+ * Replace the body below with the real judgment (\`tools.ai.judge\` runs the kit's own model call).
+ * Never return a guessed value: an unreachable or unknown answer is \`fact.error(...)\` (the rubric's
+ * own onError decides), a transient failure is \`throw fact.retryLater(...)\`.
+ */
+export const ${name}: AiHandler = async (input, tools) => {
+  return fact.error("not implemented: ${name}");
+};
+`;
+}
+/** The test that goes red the day the stub is implemented — the reminder to write the real one. */
+function handlerTest(work, importPath, declaration) {
+    const { name, kind } = work;
+    return `import { defineFacts } from "@ixo/decision-oracle/facts";
+import { fakeTools, runFacts, sampleClaim, sampleManifest } from "@ixo/decision-oracle/testing";
+import { describe, expect, it } from "vitest";
+import { ${name} } from "${importPath}";
+
+describe("${name}", () => {
+  it("is not implemented yet — replace this with what the real handler must answer", async () => {
+    const out = await runFacts(defineFacts({ ${kind}: { ${name} } }), {
+      claim: sampleClaim({}),
+      manifest: sampleManifest({ ${kind}: { ${name}: ${declaration} } }),
+      tools: fakeTools(),
+    });
+
+    expect(out.${kind}.${name}).toMatchObject({
+      status: "error",
+      detail: "not implemented: ${name}",
+    });
+  });
+});
+`;
+}
+/** The `defineFacts` table the new handlers belong in — printed, never written: that file is the
+ *  provider's, and it usually already holds handlers of their own. */
+function tableLines(written) {
+    if (written.length === 0)
+        return [];
+    const names = (kind) => written
+        .filter((w) => w.kind === kind)
+        .map((w) => w.name)
+        .join(", ");
+    const lanes = ["ext", "ai"]
+        .filter((kind) => names(kind).length > 0)
+        .map((kind) => `  ${kind}: { ${names(kind)} },`);
+    return [
+        'import { defineFacts } from "@ixo/decision-oracle/facts";',
+        // The specifier is quoted with `JSON.stringify` rather than written inline so this generated
+        // line is not itself mistaken for an import of this file (scripts/build.ts rewrites those).
+        ...written.map((w) => `import { ${w.name} } from ${JSON.stringify(`./${w.name}`)};`),
+        "",
+        "export const facts = defineFacts({",
+        ...lanes,
+        "});",
+    ];
+}
+//# sourceMappingURL=facts-scaffold.js.map