@ixo/decision-oracle 0.2.1 → 0.2.2

package/README.md

@@ -41,9 +41,9 @@ publishing a protocol and its rubric, and for anyone who needs a claim judged th
   its IID document and its Ed25519 verification key, creates its Matrix account, then the oracle
   entity with its full public identity — profile, domain card, Agent Card — the `#eval` service and
   the protocol links that make you discoverable in the IXO portal's marketplace.
-- **Drive all of it with the shipped Claude skills.** `init` copies six skills into
+- **Drive all of it with the shipped Claude skills.** `init` copies eight skills into
   `.claude/skills/`: `create-oracle`, `write-facts`, `create-rubric`, `publish-protocol`,
-  `create-collection`, `decision-api-oracle`.
+  `create-collection`, `decision-api-oracle`, `decision-api-client`, `add-openhands-support`.
 
 ## How it works
 
@@ -101,20 +101,9 @@ One `ClaimIngest` Workflow per claim; every step is checkpointed and retried ind
 | **A decision engine host** | defaults per `IXO_NETWORK` (see [Configuration](#configuration)); `EVAL_ENGINE_HOSTNAME` overrides it for a local engine or a tunnel |
 | **An AI provider** | only if the rubric you serve declares AI checks (or a `unique` rule with its judge on): the Cloudflare AI Gateway by default (the `ai` binding + `AI_GATEWAY_ID`, paid from your Cloudflare credits), or an OpenRouter key with `AI_PROVIDER=openrouter` |
 
-> **Not on npm yet.** `@ixo/decision-oracle` is `v0.1.0` and unpublished, so `bunx @ixo/decision-oracle …`
-> does not resolve. Until it ships, work from a clone:
->
-> ```bash
-> git clone <this repo> && cd eval-oracle && bun install
-> bun packages/eval-oracle/src/cli/index.ts init ../my-oracle
-> ```
->
-> Then point the new project's one dependency at the workspace — `"@ixo/decision-oracle":
-> "file:<path to>/eval-oracle/packages/eval-oracle"` in its `package.json` — or, to test what npm
-> would actually ship, build a tarball (`cd packages/eval-oracle && bun run build && bun pm pack`)
-> and depend on `"file:<path to>/ixo-decision-oracle-0.1.0.tgz"`. Inside the generated project, run the
-> CLI the same way: `bun <path to>/eval-oracle/packages/eval-oracle/src/cli/index.ts <command>`.
-> Everything below is written as `bunx decision-oracle …`, which is what it becomes once published.
+Install from npm: `bunx @ixo/decision-oracle init <dir>` scaffolds a project that depends on
+`@ixo/decision-oracle`, and inside it the CLI is `bunx decision-oracle …`. The customer-side SDK
+and CLI is `@ixo/decision-oracle-client` (`npm i @ixo/decision-oracle-client`).
 
 ## Quick start
 
@@ -484,7 +473,7 @@ other MCP clients").
 | `publish-protocol --rubric <file> --form <file> [--entity <did>] [--phase entity\|resources\|room\|all] [--yes]` | anchors a claim form and rubric as a protocol entity on chain | once per protocol; resumable after a half-finished run |
 | `publish-protocol --phase rub --protocol <did> --rubric <file> --form <file> [--yes]` | anchors — or replaces, delete+add in one tx — `#rub` ALONE on a protocol that already carries its `#vct`; a no-op when the same rubric id is already anchored | adopting someone else's protocol, or publishing a new version of your rules |
 | `create-deed --protocol <did> --title "<name>" [--description <text>] [--type <type>] [--entity <did>] [--phase entity\|room\|claims\|all] [--yes]` | creates the deed entity that hosts claims and links it to the protocol | before a collection — a collection's entity is a deed, never the protocol |
-| `create-collection --entity <deed did> --protocol <did> --eval-amount <uixo> [--eval-denom <denom>] [--fund <amount>] [--evaluate <addr,…>] [--submit <addr,…>] [--max-custom-amount <amount><denom>] [--quota <n>] [--days <n>] [--phase collection\|fund\|grants\|all] [--yes]` | creates the claim collection, sets its evaluation payment, funds its admin account and grants the Evaluate/Submit roles (the evaluate grant's `MaxCustomAmount` is written explicitly: `0<eval-denom>` unless you pass more — claims that carry coins need at least the largest claim amount, or approvals fail) | standing up a collection, or hiring your own oracle to prove the loop |
+| `create-collection --entity <deed did> --protocol <did> --eval-amount <uixo> [--eval-denom <denom>] [--fund <amount>] [--evaluate <addr,…>] [--submit <addr,…>] [--max-custom-amount <amount><denom>] [--quota <n>] [--days <n>] [--phase collection\|fund\|grants\|all] [--yes]` | creates the claim collection, sets its evaluation payment (`--eval-amount 0` leaves that leg empty, as a per-review or 0-minimum oracle registers), funds its admin account and grants the Evaluate/Submit roles (the evaluate grant's `MaxCustomAmount` is written explicitly: `0<eval-denom>` unless you pass more — claims that carry coins need at least the largest claim amount, or approvals fail) | standing up a collection, or hiring your own oracle to prove the loop |
 | `submit-claim --collection <id> --answers <file> [--file <question>=<path> …] [--yes]` | submits a claim as the logged-in wallet: media upload, claim-bot save, the chain message | putting a real claim through your deployed oracle |
 
 ## Configuration
@@ -741,7 +730,7 @@ packages/eval-oracle/         THE package — @ixo/decision-oracle
   src/                        the Worker: routes, workflows, the facts lane, the CLI
   src/facts/  src/testing/    the two node-safe public subpaths
   migrations/                 the D1 migrations — shipped, never hand-written by a consumer
-  skills/                     the six Claude skills `init` copies into a new project
+  skills/                     the eight Claude skills `init` copies into a new project
   templates/project/          exactly what `decision-oracle init` generates
   dev/                        engine-conformance harnesses (ours, not published)
   docs/                       api.md (the API reference) + guide.md (the walkthrough)
@@ -789,7 +778,6 @@ symlinks are not packed). CI diffs them — change one, copy it to the other.
 
 ## Status
 
-`v0.1.0`. Not yet published to npm — install it from a clone or a `bun pm pack` tarball (see
-[Prerequisites](#prerequisites)).
+Published on npm: `@ixo/decision-oracle` 0.2.2 and `@ixo/decision-oracle-client` 0.1.1.
 
 Apache License 2.0: `LICENSE` at the repo root and in each package.

package/dist/cli/commands/create-collection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-collection.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/create-collection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAqQH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA+HzD"}
+{"version":3,"file":"create-collection.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/create-collection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAwQH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgIzD"}

package/dist/cli/commands/create-collection.js

@@ -90,7 +90,10 @@ async function createCollection(signer, entityDid, protocolDid, admin, denom, am
                 submission: leg(null),
                 approval: leg(null),
                 rejection: leg(null),
-                evaluation: leg([{ denom, amount }]),
+                // `0` is an EMPTY leg — the chain refuses a zero coin ("amount is not positive"), and an
+                // empty evaluation leg is what a 0-minimum oracle (EVALUATION_MIN_AMOUNT "0", per-review
+                // billing) registers.
+                evaluation: leg(amount === "0" ? null : [{ denom, amount }]),
             }),
         }),
     };
@@ -102,7 +105,7 @@ async function createCollection(signer, entityDid, protocolDid, admin, denom, am
             `entity (deed): ${entityDid}`,
             `protocol: ${protocolDid}`,
             `admin account (the deed's): ${admin}`,
-            `evaluation leg: ${amount}${denom} (no isOraclePayment flag)`,
+            `evaluation leg: ${amount === "0" ? "empty" : `${amount}${denom}`} (no isOraclePayment flag)`,
             `quota: ${quota}, window: ${days} days from now`,
         ],
         fee: STANDARD_FEE,
@@ -253,7 +256,7 @@ export async function run(argv) {
     const evalAmount = values["eval-amount"] ??
         (RUNS.collection(phase) ? fail("--eval-amount is required to create the collection") : "0");
     if (!/^[0-9]+$/.test(evalAmount))
-        fail("--eval-amount must be a positive integer (uixo units)");
+        fail("--eval-amount must be a whole number of base units (0 = an empty evaluation leg)");
     const yes = values.yes === true;
     const quota = Number(values.quota ?? "100");
     const days = Number(values.days ?? "90");

package/dist/cli/commands/create-collection.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-collection.js","sourceRoot":"","sources":["../../../src/cli/commands/create-collection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAmB,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACL,SAAS,EACT,OAAO,EACP,IAAI,EACJ,UAAU,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAsB,MAAM,gBAAgB,CAAC;AAIjE,SAAS,YAAY,CAAC,KAAyB;IAC7C,MAAM,KAAK,GAAG,KAAK,IAAI,KAAK,CAAC;IAC7B,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACxF,IAAI,CAAC,oBAAoB,KAAK,gCAAgC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,IAAI,GAAG;IACX,UAAU,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,KAAK;IAC3D,IAAI,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK;IAC/C,MAAM,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK;CACpD,CAAC;AAEF,4FAA4F;AAC5F,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,CAAC,GAAG,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,wBAAwB,KAAK,uCAAuC,CAAC,CAAC;IACjG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAqB,EACrB,SAAiB,EACjB,WAAmB,EACnB,KAAa,EACb,KAAa,EACb,MAAc,EACd,KAAa,EACb,IAAY,EACZ,GAAY;IAEZ,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,gGAAgG;IAChG,sBAAsB;IACtB,MAAM,GAAG,GAAG,CAAC,SAAqD,EAAE,EAAE,CACpE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,SAAS,IAAI,EAAE;QACvB,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IACL,MAAM,GAAG,GAAG;QACV,OAAO,EAAE,yCAAyC;QAClD,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC;YACxD,MAAM,EAAE,MAAM,CAAC,OAAO;YACtB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;YACrC,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;YAC1C,KAAK,EAAE,KAAyB;YAChC,KAAK,EAAE,CAAqB;YAC5B,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAChD,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC;gBACrB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC;gBACnB,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC;gBACpB,UAAU,EAAE,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;aACrC,CAAC;SACH,CAAC;KACH,CAAC;IACF,OAAO,CACL;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,MAAM,EAAE,qBAAqB;QAC7B,KAAK,EAAE;YACL,kBAAkB,SAAS,EAAE;YAC7B,aAAa,WAAW,EAAE;YAC1B,+BAA+B,KAAK,EAAE;YACtC,mBAAmB,MAAM,GAAG,KAAK,4BAA4B;YAC7D,UAAU,KAAK,aAAa,IAAI,gBAAgB;SACjD;QACD,GAAG,EAAE,YAAY;KAClB,EACD,GAAG,CACJ,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAAqB,EACrB,KAAa,EACb,KAAa,EACb,MAAc,EACd,GAAY;IAEZ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG;QACV,OAAO,EAAE,8BAA8B;QACvC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7C,WAAW,EAAE,MAAM,CAAC,OAAO;YAC3B,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SAC5B,CAAC;KACH,CAAC;IACF,OAAO,CACL;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,MAAM,EAAE,6CAA6C;QACrD,KAAK,EAAE,CAAC,OAAO,KAAK,EAAE,EAAE,WAAW,MAAM,GAAG,KAAK,EAAE,CAAC;QACpD,GAAG,EAAE,YAAY;KAClB,EACD,GAAG,CACJ,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,GAAG,KAAK,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,MAAqB,EACrB,SAAiB,EACjB,KAAa,EACb,YAAoB,EACpB,UAAoB,EACpB,QAAkB,EAClB,eAAkD,EAClD,GAAY;IAEZ,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,CAAC,cAAsB,EAAE,OAAe,EAAE,KAAiB,EAAE,EAAE,CAAC,CAAC;QAChF,OAAO,EAAE,gDAAgD;QACzD,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,WAAW,CAAC;YAC/D,EAAE,EAAE,SAAS;YACb,YAAY,EAAE,MAAM,CAAC,OAAO;YAC5B,IAAI,EAAE,OAAO;YACb,cAAc;YACd,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC5C,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBACjC,UAAU;aACX,CAAC;SACH,CAAC;KACH,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CACnE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,WAAW,CAAC;QACxD,KAAK;QACL,WAAW,EAAE;YACX,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,WAAW,CAAC;gBACtD,YAAY;gBACZ,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,GAAuB;gBACnC,UAAU,EAAE,UAAU;gBACtB,eAAe,EAAE,CAAC,eAAe,CAAC;aACnC,CAAC;SACH;KACF,CAAC,CACH,CAAC,MAAM,EAAE,CAAC;IACX,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CACnE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,WAAW,CAAC;QACtD,KAAK;QACL,WAAW,EAAE;YACX,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC;gBACpD,YAAY;gBACZ,UAAU,EAAE,GAAuB;aACpC,CAAC;SACH;KACF,CAAC,CACH,CAAC,MAAM,EAAE,CAAC;IACX,MAAM,IAAI,GAAG;QACX,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtB,QAAQ,CAAC,CAAC,EAAE,gDAAgD,EAAE,QAAQ,CAAC,CACxE;QACD,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,8CAA8C,EAAE,UAAU,CAAC,CAAC;KAChG,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAC7E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CACL;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,MAAM,EAAE,6DAA6D;QACrE,KAAK,EAAE;YACL,eAAe,YAAY,EAAE;YAC7B,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;YACjD,iCAAiC,eAAe,CAAC,MAAM,GAAG,eAAe,CAAC,KAAK,iGAAiG;YAChL,cAAc,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;SAChD;QACD,GAAG,EAAE,YAAY;KAClB,EACD,GAAG,CACJ,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,2BAA2B,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,wBAAwB,IAAI,GAAG,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,uBAAuB,CACpC,MAAqB,EACrB,SAAiB,EACjB,SAAiB,EACjB,WAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;QAC7C,IAAI,CACF,YAAY,SAAS,0EAA0E,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,IAAI,CACF,GAAG,SAAS,kDAAkD,SAAS,uBAAuB,CAC/F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACxD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,CAEvE,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,IAAI,CACF,GAAG,SAAS,UAAU,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,UAAU,WAAW,yDAAyD,CACpJ,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,mBAAmB,WAAW,kCAAkC,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE;YACP,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACzB;KACF,CAAC,CAAC;IACH,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC;IACjD,MAAM,OAAO,GAAe,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,+FAA+F;IAC/F,gGAAgG;IAChG,+EAA+E;IAC/E,MAAM,UAAU,GACd,MAAM,CAAC,aAAa,CAAC;QACrB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9F,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,uDAAuD,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;IAElF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,OAAO,KAAK,OAAO,GAAG,CAAC,CAAC;IAEtD,mGAAmG;IACnG,gGAAgG;IAChG,8DAA8D;IAC9D,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC;IAE9C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,IAAI,CACF,wBAAwB,SAAS,0DAA0D,CAC5F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;IAElC,IAAI,UAAU,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAE5E,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,cAAc,UAAU,CAAC,EAAE,sBAAsB,SAAS,QAAQ,WAAW,sBAAsB,CACpG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YACzE,MAAM,gBAAgB,CACpB,MAAM,EACN,SAAS,EACT,WAAW,EACX,KAAK,EACL,SAAS,EACT,UAAU,EACV,KAAK,EACL,IAAI,EACJ,GAAG,CACJ,CAAC;YACF,gEAAgE;YAChE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC5D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC9C,UAAU,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CACF,6FAA6F,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CACF,oBAAoB,SAAS,QAAQ,WAAW,kDAAkD,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;QACrC,WAAW,CAAC,IAAI,CACd,GAAG,CAAC,MAAM,mBAAmB,CAC3B,MAAM,EACN,SAAS,EACT,KAAK,EACL,UAAU,CAAC,EAAE,EACb,UAAU,EACV,QAAQ,EACR,eAAe,EACf,GAAG,CACJ,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,EAAE,EAAE,IAAI,wBAAwB,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC/F,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"create-collection.js","sourceRoot":"","sources":["../../../src/cli/commands/create-collection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAmB,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACL,SAAS,EACT,OAAO,EACP,IAAI,EACJ,UAAU,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAsB,MAAM,gBAAgB,CAAC;AAIjE,SAAS,YAAY,CAAC,KAAyB;IAC7C,MAAM,KAAK,GAAG,KAAK,IAAI,KAAK,CAAC;IAC7B,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACxF,IAAI,CAAC,oBAAoB,KAAK,gCAAgC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,IAAI,GAAG;IACX,UAAU,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,KAAK;IAC3D,IAAI,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK;IAC/C,MAAM,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK;CACpD,CAAC;AAEF,4FAA4F;AAC5F,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,CAAC,GAAG,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,wBAAwB,KAAK,uCAAuC,CAAC,CAAC;IACjG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAqB,EACrB,SAAiB,EACjB,WAAmB,EACnB,KAAa,EACb,KAAa,EACb,MAAc,EACd,KAAa,EACb,IAAY,EACZ,GAAY;IAEZ,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,gGAAgG;IAChG,sBAAsB;IACtB,MAAM,GAAG,GAAG,CAAC,SAAqD,EAAE,EAAE,CACpE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,SAAS,IAAI,EAAE;QACvB,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IACL,MAAM,GAAG,GAAG;QACV,OAAO,EAAE,yCAAyC;QAClD,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC;YACxD,MAAM,EAAE,MAAM,CAAC,OAAO;YACtB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;YACrC,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;YAC1C,KAAK,EAAE,KAAyB;YAChC,KAAK,EAAE,CAAqB;YAC5B,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAChD,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC;gBACrB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC;gBACnB,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC;gBACpB,yFAAyF;gBACzF,yFAAyF;gBACzF,sBAAsB;gBACtB,UAAU,EAAE,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;aAC7D,CAAC;SACH,CAAC;KACH,CAAC;IACF,OAAO,CACL;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,MAAM,EAAE,qBAAqB;QAC7B,KAAK,EAAE;YACL,kBAAkB,SAAS,EAAE;YAC7B,aAAa,WAAW,EAAE;YAC1B,+BAA+B,KAAK,EAAE;YACtC,mBAAmB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,EAAE,4BAA4B;YAC7F,UAAU,KAAK,aAAa,IAAI,gBAAgB;SACjD;QACD,GAAG,EAAE,YAAY;KAClB,EACD,GAAG,CACJ,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAAqB,EACrB,KAAa,EACb,KAAa,EACb,MAAc,EACd,GAAY;IAEZ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG;QACV,OAAO,EAAE,8BAA8B;QACvC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7C,WAAW,EAAE,MAAM,CAAC,OAAO;YAC3B,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SAC5B,CAAC;KACH,CAAC;IACF,OAAO,CACL;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,MAAM,EAAE,6CAA6C;QACrD,KAAK,EAAE,CAAC,OAAO,KAAK,EAAE,EAAE,WAAW,MAAM,GAAG,KAAK,EAAE,CAAC;QACpD,GAAG,EAAE,YAAY;KAClB,EACD,GAAG,CACJ,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,GAAG,KAAK,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,MAAqB,EACrB,SAAiB,EACjB,KAAa,EACb,YAAoB,EACpB,UAAoB,EACpB,QAAkB,EAClB,eAAkD,EAClD,GAAY;IAEZ,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,CAAC,cAAsB,EAAE,OAAe,EAAE,KAAiB,EAAE,EAAE,CAAC,CAAC;QAChF,OAAO,EAAE,gDAAgD;QACzD,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,WAAW,CAAC;YAC/D,EAAE,EAAE,SAAS;YACb,YAAY,EAAE,MAAM,CAAC,OAAO;YAC5B,IAAI,EAAE,OAAO;YACb,cAAc;YACd,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC5C,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBACjC,UAAU;aACX,CAAC;SACH,CAAC;KACH,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CACnE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,WAAW,CAAC;QACxD,KAAK;QACL,WAAW,EAAE;YACX,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,WAAW,CAAC;gBACtD,YAAY;gBACZ,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,GAAuB;gBACnC,UAAU,EAAE,UAAU;gBACtB,eAAe,EAAE,CAAC,eAAe,CAAC;aACnC,CAAC;SACH;KACF,CAAC,CACH,CAAC,MAAM,EAAE,CAAC;IACX,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CACnE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,WAAW,CAAC;QACtD,KAAK;QACL,WAAW,EAAE;YACX,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC;gBACpD,YAAY;gBACZ,UAAU,EAAE,GAAuB;aACpC,CAAC;SACH;KACF,CAAC,CACH,CAAC,MAAM,EAAE,CAAC;IACX,MAAM,IAAI,GAAG;QACX,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtB,QAAQ,CAAC,CAAC,EAAE,gDAAgD,EAAE,QAAQ,CAAC,CACxE;QACD,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,8CAA8C,EAAE,UAAU,CAAC,CAAC;KAChG,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAC7E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CACL;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,MAAM,EAAE,6DAA6D;QACrE,KAAK,EAAE;YACL,eAAe,YAAY,EAAE;YAC7B,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;YACjD,iCAAiC,eAAe,CAAC,MAAM,GAAG,eAAe,CAAC,KAAK,iGAAiG;YAChL,cAAc,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;SAChD;QACD,GAAG,EAAE,YAAY;KAClB,EACD,GAAG,CACJ,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,2BAA2B,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,wBAAwB,IAAI,GAAG,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,uBAAuB,CACpC,MAAqB,EACrB,SAAiB,EACjB,SAAiB,EACjB,WAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;QAC7C,IAAI,CACF,YAAY,SAAS,0EAA0E,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,IAAI,CACF,GAAG,SAAS,kDAAkD,SAAS,uBAAuB,CAC/F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACxD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,CAEvE,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,IAAI,CACF,GAAG,SAAS,UAAU,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,UAAU,WAAW,yDAAyD,CACpJ,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,mBAAmB,WAAW,kCAAkC,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE;YACP,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACzB;KACF,CAAC,CAAC;IACH,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC;IACjD,MAAM,OAAO,GAAe,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,+FAA+F;IAC/F,gGAAgG;IAChG,+EAA+E;IAC/E,MAAM,UAAU,GACd,MAAM,CAAC,aAAa,CAAC;QACrB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9F,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;QAC9B,IAAI,CAAC,kFAAkF,CAAC,CAAC;IAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;IAElF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,OAAO,KAAK,OAAO,GAAG,CAAC,CAAC;IAEtD,mGAAmG;IACnG,gGAAgG;IAChG,8DAA8D;IAC9D,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC;IAE9C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,IAAI,CACF,wBAAwB,SAAS,0DAA0D,CAC5F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;IAElC,IAAI,UAAU,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAE5E,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,cAAc,UAAU,CAAC,EAAE,sBAAsB,SAAS,QAAQ,WAAW,sBAAsB,CACpG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YACzE,MAAM,gBAAgB,CACpB,MAAM,EACN,SAAS,EACT,WAAW,EACX,KAAK,EACL,SAAS,EACT,UAAU,EACV,KAAK,EACL,IAAI,EACJ,GAAG,CACJ,CAAC;YACF,gEAAgE;YAChE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC5D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC9C,UAAU,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CACF,6FAA6F,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CACF,oBAAoB,SAAS,QAAQ,WAAW,kDAAkD,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;QACrC,WAAW,CAAC,IAAI,CACd,GAAG,CAAC,MAAM,mBAAmB,CAC3B,MAAM,EACN,SAAS,EACT,KAAK,EACL,UAAU,CAAC,EAAE,EACb,UAAU,EACV,QAAQ,EACR,eAAe,EACf,GAAG,CACJ,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,EAAE,EAAE,IAAI,wBAAwB,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC/F,OAAO,CAAC,CAAC;AACX,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ixo/decision-oracle",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "license": "Apache-2.0",
   "description": "Run an IXO evaluation oracle: pull claims, produce facts with your handlers, let the decision engine decide, sign on chain",
   "keywords": [

package/skills/README.md

@@ -17,3 +17,5 @@ installed package (leaving any skill of your own in that directory alone).
 
 `reference/engine-contract.md` (here, beside the skills) is the decision engine's contract —
 background for all eight, not an interface anyone codes against.
+`reference/linked-docs.md` is the linked-document rules: where an entity's documents are uploaded,
+each proof's format, and how to read one.

package/skills/add-openhands-support/SKILL.md

@@ -21,7 +21,7 @@ and wait for their OK. Dry-run every chain step first (`create-oracle` step 8's
 ## The adapter (copy, don't rewrite)
 
 Source of truth: `examples/street-check-oracle` in the eval-oracle repo (an `init` project with
-the adapter added, deployed on devnet), itself ported from `ixoworld/openhands-oracle`. Copy:
+the adapter added, deployed on devnet). Copy:
 
 | Path | What it is |
 | --- | --- |
@@ -48,20 +48,23 @@ bun run db:migrate:remote                # must apply BOTH databases — copy th
 bun run cf-typegen && bun run check
 ```
 
-## Pricing — never leave it at 0
+## Pricing — set it deliberately per env
 
 `src/pricing.ts` `CHECK_PRICE_DENOM` / `CHECK_PRICE_AMOUNT` feed `pricing.evaluation` AND the
-ceiling written on every minted grant. Denom = the app's `NEXT_PUBLIC_ASK_DENOM` (`uixo` on
-devnet, `upay` on testnet/mainnet). At 0 the oracle works for free while the engine bills its
-owner per decision. The picker shows the price from `/v1/info`, and the poster's escrow carries it;
-an ask escrowing less is refused 402 and never judged. Default, unless the provider names one:
-`350_000` base units — 0.35 IXO on devnet, 0.35 PAY ($0.35) on testnet/mainnet, Openhands' own
-check fee (`QI_CHECKER_BASE_UPAY`), which covers the engine's $0.30 per decision.
+ceiling written on every minted grant. Denom = the app's ask denom (`uixo` on devnet, `upay` on
+testnet/mainnet). In a template project the `EVALUATION_DENOM` / `EVALUATION_MIN_AMOUNT` vars in
+`wrangler.jsonc` override `pricing.evaluation` for that env — so set `EVALUATION_DENOM=upay` and
+`EVALUATION_MIN_AMOUNT=<the check price>` in the testnet AND mainnet envs (mainnet will not boot
+without them), or `EVALUATION_MIN_AMOUNT=0` for an oracle IXO bills per review (its collections
+carry an empty evaluation leg). Outside per-review billing, 0 means the oracle works for free while
+the engine bills its owner per decision. The picker shows the price from `/v1/info`, and the
+poster's escrow carries it; an ask escrowing less is refused 402 and never judged. Default, unless
+the provider names one: `350_000` base units — 0.35 IXO on devnet, 0.35 PAY ($0.35) on
+testnet/mainnet, Openhands' own check fee, which covers the engine's $0.30 per decision.
 
 ## Being listed and hired
 
-The app's picker (`packages/openhands-data/src/oracles.ts`, with `NEXT_PUBLIC_CHECKER_ADDRESS`
-UNSET) lists an oracle when its entity has: `#acard` with a **`check-openhands`** service (next to
+The app's picker lists an oracle when its entity has: `#acard` with a **`check-openhands`** service (next to
 `check-measure`, priced in PAY — the app reads the service id, and `check-openhands` is what marks
 the oracle Openhands-compatible); `#orz` granting `ORACLE_ADDRESS`; `#eval` = an https base URL
 whose `/v1/info` answers that address, the ask denom, and `policies.allowAiChecks: true` (else it
@@ -77,10 +80,8 @@ bunx decision-oracle oracle init --protocol <any ask's protocol, or the app's cl
   --kit-url https://<host> --logo https://<host>/logo.svg --openhands --network <n>   # dry run; then --yes
 ```
 
-Hire/scan nudges go to the PICKED oracle's `#eval`; that routing is the `demo/oracle-picker` change
-in openhands-network. The app build has it when `packages/openhands-data/src/oracles.ts` reads the
-`#eval` endpoint and `app/ask/post.ts` passes `checker.endpoint` to `notifyOracle` — and in use,
-when the hire nudge shows up in THIS oracle's logs after a post.
+Hire/scan nudges go to the PICKED oracle's `#eval`; you know the app routes to you when the hire
+nudge shows up in THIS oracle's logs after a post.
 
 Then, right after deploy: `bunx decision-oracle engine register --env <env> --env-file .dev.vars`.
 The Openhands app lists only registered oracles, and otherwise the engine (and the Decision
@@ -105,9 +106,9 @@ Console) learns the oracle only at its first decision.
 | --- | --- |
 | Hire nudge 404 | the adapter's routes are not wrapped in `src/index.ts` `fetch` |
 | Every claim rejected `weather` "unreachable" | `weather` left as a stub; copy `src/facts/weather.ts` (Open-Meteo, no key) |
-| Oracle missing from the picker | no `check-openhands` service on `#acard`, no `#orz`/https `#eval`, not `engine register`ed, price unreadable, or `NEXT_PUBLIC_CHECKER_ADDRESS` set (single-checker mode) |
-| Picker shows the oracle at 0 | `pricing.ts` still 0, or its denom ≠ the ask denom |
+| Oracle missing from the picker | no `check-openhands` service on `#acard`, no `#orz`/https `#eval`, not `engine register`ed, or its price unreadable |
+| Picker shows the oracle at 0 | `pricing.ts` / that env's `EVALUATION_MIN_AMOUNT` still 0 on an oracle not billed per review, or the denom ≠ the ask denom |
 | `withinRadius` fails for everyone | the ask's place was geocoded from a word ("You" → a village in Burkina Faso); set the place by name |
 | Console "Could not read this oracle's prices" | the console reads the Decision API price list; a chain-lane oracle has none (`API_LANE` off) — console-side, not an oracle fault |
-| Wrangler can't resolve `protobufjs/minimal.js` | inside the eval-oracle workspace there is one hoisted protobufjs; drop openhands-oracle's `alias` |
+| Wrangler can't resolve `protobufjs/minimal.js` | inside the eval-oracle workspace there is one hoisted protobufjs; drop any protobufjs `alias` you copied in |
 | `chain.test.ts` fails after a denom change | the "foreign denom" fixtures used your new denom; give them one you are not paid in |

package/skills/create-collection/SKILL.md

@@ -60,11 +60,13 @@ protocol.
      `create-deed` refuses a protocol without one)
    - the deed: an existing domain entity DID that already links the protocol, OR a title (+ optional
      description) for a new one — the title is what the portal's picker shows
-   - evaluation payment: denom + amount. This is the oracle's income per decision AND the minimum
-     that oracle's own `pricing.evaluation` accepts, so confirm the number with whoever owns the
-     oracle rather than guessing
+   - evaluation payment: denom + amount. This is the oracle's income per decision AND must meet the
+     minimum that oracle accepts (its `EVALUATION_DENOM` / `EVALUATION_MIN_AMOUNT`), so confirm the
+     number with whoever owns the oracle rather than guessing
    - optional admin funding amount (`--fund`) — covers the first evaluation payouts, see the gotcha
    - the oracle address to grant Evaluate; the agent address(es) to grant Submit (comma-separated)
+     — `--submit addr1,addr2` is also how to restrict who may claim, e.g. a payouts collection only
+     two people may submit to
    - quota and window in days if the defaults (100, 90) aren't right — state them explicitly rather
      than silently applying them
 
@@ -94,6 +96,10 @@ protocol.
      [--max-custom-amount 0uixo] [--phase collection|fund|grants|all] [--yes]
    ```
 
+   `--eval-denom` must equal the oracle's `EVALUATION_DENOM` — on mainnet the USDC ibc denom or
+   `upay`, never `uixo`. `--eval-amount 0` writes an EMPTY evaluation leg (the chain refuses a zero
+   coin): that is what a collection for a per-review-billed or 0-minimum oracle registers with.
+
    `--max-custom-amount` is the evaluate grant's `MaxCustomAmount`, written explicitly (`0<eval
    denom>` by default). The chain holds EVERY non-empty evaluation amount to it (its denom must be
    listed), and the oracle sends an ordinary claim's own coins by default — so if the protocol's
@@ -161,6 +167,12 @@ protocol.
 
 7. **Report the run** — the output contract below.
 
+Payout ASKS (a deed or request with its organisation links and `#payoutTerms`) are posted only
+through OpenHands, not with these commands. A company paying people from its OWN collection runs
+its own self-hosted payouts facilitator instead: enable the collection there
+(`/v1/payouts/collections`) with a `fromDecision` rule on `$.<amount field>`, and name the same
+amount field and currency in the oracle's `payouts` config.
+
 ## Output contract
 
 Always end with this block, verbatim, filled in from this run:
@@ -187,7 +199,8 @@ account, a phase that was dry-run but never confirmed, or a delegation nobody ha
 | Creating the collection before the deed links the protocol | run `create-deed --phase claims`; the picker reads `linkedClaim` → claims-config |
 | Granting Evaluate and expecting the oracle to pull claims | it also needs the claim-bot delegation (step 5) |
 | Leaving the admin account unfunded | every evaluation debits it, rejects included — pass `--fund` |
-| Guessing the evaluation amount | it must meet the oracle's `pricing.evaluation.minAmount`, or register 402s |
+| Guessing the evaluation amount | it must meet the oracle's `EVALUATION_MIN_AMOUNT` in its `EVALUATION_DENOM`, or register 402s |
+| `--eval-amount 0` expecting a zero coin | it writes an empty evaluation leg — right only for a per-review-billed or 0-minimum oracle |
 | Running with `--yes` first | dry-run, show the plan, then confirm |
 | Re-running `create-deed --phase claims` for no reason | it rewrites the doc under a new cid and adds a second `linkedClaim` — resume from `claims` only when that phase actually failed |
 

package/skills/create-collection/reference/collection.md

@@ -36,7 +36,8 @@ First the portal's gate: `--entity` must not be a protocol, must have a `linkedC
 the protocol, `startDate` = now − 1 day, `endDate` = now + `--days`, `quota`, and four payment legs
 (submission / approval / rejection / evaluation), each `Payment{ account: <deed admin>, amount,
 isOraclePayment: false }` — only `evaluation` carries a nonzero amount (`--eval-amount` /
-`--eval-denom`); the other three legs are empty. `isOraclePayment` is never turned on by this command
+`--eval-denom`); the other three legs are empty. With `--eval-amount 0` all four are empty — the
+chain refuses a zero coin, so `0` means no evaluation payment at all. `isOraclePayment` is never turned on by this command
 on ANY leg: the chain rule is that it is only ever legal on the approval leg, so setting it on
 evaluation would be a protocol violation. After signing, it polls Blocksync for a few seconds waiting
 for the new collection to index before moving on to fund/grants.

package/skills/create-oracle/SKILL.md

@@ -17,6 +17,33 @@ a protocol's rubric declares (`bunx decision-oracle protocol review <did>`); thi
 those names and nothing else. It never parses a rubric, never binds a form, never decides. If the
 manifest is `unusable`, there is nothing to build against yet — stop and say so.
 
+## Which skill do I need?
+
+Run an oracle for a protocol → this skill. Write the code that answers each fact → `write-facts`.
+Write the rules claims are judged by → `create-rubric`. Put a claim form and its rules on chain →
+`publish-protocol`. Open a place for claims to be submitted and hire an oracle on it →
+`create-collection`. Let apps and agents ask the oracle for decisions over HTTP →
+`decision-api-oracle`; test that from the customer's side → `decision-api-client`. Be hireable from
+the Openhands app → `add-openhands-support`.
+
+**Words used throughout:**
+
+- **Oracle** — the service this package is: it gathers the evidence for each claim and asks the
+  engine for a verdict.
+- **Protocol** — a published kind of claim: the form people fill in plus the rules it is judged by.
+- **Rubric** — those rules, written down: what counts as approve, reject or "needs a person".
+- **Claim** — one submission: someone's answers (and files) on a protocol's form.
+- **Collection** — a place on chain where claims for one protocol are submitted and paid for.
+- **Engine** — IXO's decision engine: it reads the facts your oracle sends and gives the verdict.
+- **Decision / receipt** — the engine's verdict, and its signed proof that it gave it; the oracle
+  records both and puts the proof on chain.
+- **PAY / `upay`** — IXO's US-dollar token (1 PAY = 1 USD); `upay` is its smallest unit, a
+  millionth of a PAY.
+- **did:web** — this oracle's web identity, a name tied to its domain; other services check its
+  signatures by fetching `https://<host>/.well-known/did.json`.
+- **Delegation** — a signed permission one party gives another, such as the owner letting the engine
+  bill their subscription, or letting the oracle read their claims.
+
 ## When to use
 
 - "Build / set up / configure an oracle for protocol X", "what would my oracle need to produce"
@@ -86,11 +113,18 @@ and any `ERROR: this source will not be called` (the audience is not the endpoin
 the name shows as `refused: fix the rubric`, the command exits 1, and only the protocol owner can fix
 it; no handler stands in). Then fill in `src/index.ts` with the provider's answers (the interview
 table below):
-`supportedProtocols: ["<protocol did>"]`, `pricing.evaluation` (denom + `minAmount` in integer base
-units — the on-chain evaluation payment a collection must carry, or register refuses it; optionally
-`pricing.byProtocol` to charge a different fee per protocol DID — `minAmount: "0"` accepts a
-collection whose evaluation leg is empty, for a protocol whose income isn't the evaluation split),
-and `policies`: `allowAiChecks` true iff anything asks for a model (an `ai` check, or a `unique` rule
+`supportedProtocols: ["<protocol did>"]`, the evaluation fee, and `policies`.
+
+The fee is the on-chain evaluation payment a collection must carry, or register refuses it. Set it
+per wrangler env with the `EVALUATION_DENOM` / `EVALUATION_MIN_AMOUNT` vars (both or neither; the
+minimum in integer base units) — they replace `pricing.evaluation` from `defineOracle`, and they
+are REQUIRED on mainnet: the worker refuses to start without them. A third-party oracle typically
+charges Noble USDC (`ibc/6BBE9BD4246F8E04948D5A4EEE7164B2630263B9EBB5E7DC5F0A46C62A2FF97B`); an
+IXO-managed oracle billed per review uses `upay` / `0`, which accepts a collection whose evaluation
+leg is empty. `pricing.byProtocol` still wins for the protocols it names. The effective price is
+what `GET /v1/info` shows as `pricing`.
+
+The `policies`: `allowAiChecks` true iff anything asks for a model (an `ai` check, or a `unique` rule
 with its judge on), `allowImageChecks` true iff a check reads a photo and the provider wants C2PA
 screening, `autoSign` true only when unattended chain writes are deliberate (the `AUTO_SIGN` var
 gates it too — both must be on), and `allowStandingApprovals` — REQUIRED, no default: `true` lets a
@@ -158,6 +192,10 @@ printf 'OWNER_DELEGATION_CAR="%s"\n' "$(cat owner-delegation.car)" >> .dev.vars
   before it lapses.
 - Only the human can do the login. Run it in the background so the loopback callback lands, and tell
   them to finish in the browser.
+- **The owner must hold an IXO subscription before `engine register`**, or it answers 402
+  `NO_SUBSCRIPTION`. A subscription created by the subscriptions workflow (not the portal) also
+  needs a Stripe customer: the owner calls the subscriptions API's `POST /api/v1/payments/intent`
+  once (a SetupIntent — nothing is charged).
 - **A 402 at register is the owner's credits, not a bug**: `NO_SUBSCRIPTION` (none at all) or
   `INSUFFICIENT_CREDITS` (below one decision's price, carrying `manageSubscriptionUrl`). Send the
   owner to that portal URL to buy credits, then register again — nothing here can fake it.
@@ -183,10 +221,11 @@ finds this oracle. One command does all of it:
 
 ```bash
 bunx decision-oracle oracle init --protocol <protocol did> --kit-url http://localhost:8787 \
-  [--logo <url>] [--only <step>] [--relogin] [--network <n>] [--yes]
+  [--logo <url>] [--openhands [--price-pay <n>]] [--only <step>] [--relogin] \
+  [--network <n>] [--yes]
 ```
 
-**A full on-chain identity is mandatory** (owner, 2026-10-01): every oracle built with this kit gets
+**A full on-chain identity is mandatory**: every oracle built with this kit gets
 its entity, its `#pro` profile, its `#dmn` domain card and its `#acard` Agent Card — this command
 does all four. `--logo <url>` is optional, but ASK the provider for one: without it the portal and
 the console show a placeholder, and every run prints `⚠ recommended: --logo`.
@@ -260,7 +299,8 @@ where a live token would have skipped (it mints a new Matrix device — not a ca
 ### 9. Deploy it
 
 ```bash
-bun run db:migrate:remote        # BEFORE the first deploy of that environment
+bun run db:migrate:remote        # BEFORE the first deploy of the default env; for a named env:
+                                 #   bunx wrangler d1 migrations apply DB --remote --env <env>
 bun run deploy                   # or deploy:testnet / deploy:production
 wrangler secret put ORACLE_MATRIX_ACCESS_TOKEN     # the value step 8 wrote into .dev.vars
 ```
@@ -308,18 +348,20 @@ bunx decision-oracle register --collection <collection id> [--delegation delegat
 bunx decision-oracle scan --collection <collection id>     # discover claims now, not at the next tick
 ```
 
-`--delegation` is the owner→oracle claim-bot CAR (`delegation --for bot --audience
-did:ixo:<ORACLE_ADDRESS>`): without it the oracle holds the on-chain grant but still cannot pull
-claim bodies from Matrix. A refusal names its gate — not the chain owner, no Evaluate grant for
-`ORACLE_ADDRESS`, or an evaluation payment below the required fee (`pricing.byProtocol` for that
-collection's protocol, else `pricing.evaluation.minAmount`).
+Claim bodies are pulled from the VFS claims lane first (under the oracle's own Evaluate grant), then
+the Matrix claim bot, then the IPFS gateway or a declared cellnode. `--delegation` is the
+owner→oracle claim-bot CAR (`delegation --for bot --audience did:ixo:<ORACLE_ADDRESS>`); it matters
+only for claims stored in Matrix — without it those bodies cannot be pulled. A refusal names its
+gate — not the chain owner, no Evaluate grant for `ORACLE_ADDRESS`, or an evaluation payment below
+the required fee (`pricing.byProtocol` for that collection's protocol, else the env's
+`EVALUATION_MIN_AMOUNT`).
 
 ## Interview slots (ask, don't assume)
 
 | Slot | Ask | Lands in |
 | --- | --- | --- |
 | Protocol | the DID, and which network | `--protocol`, `supportedProtocols` |
-| Pricing | denom + minimum per-evaluation payment; any protocol priced differently (incl. free)? | `pricing.evaluation`, optionally `pricing.byProtocol` |
+| Pricing | denom + minimum per-evaluation payment per network; any protocol priced differently (incl. free)? | `EVALUATION_DENOM` / `EVALUATION_MIN_AMOUNT` per env, optionally `pricing.byProtocol` |
 | AI / image policy | does the work order declare `ai` checks; do any read images | `policies.allowAiChecks` / `allowImageChecks` |
 | Auto-sign | should this oracle sign `MsgEvaluateClaim` unattended | `policies.autoSign` + the `AUTO_SIGN` var |
 | Standing approvals | may a signed-in AI app's own auto-approve limits pay without a per-claim approval (hosted MCP) — IXO's own oracles say yes | `policies.allowStandingApprovals` (required) |
@@ -352,7 +394,8 @@ collection's protocol, else `pricing.evaluation.minAmount`).
 | Register answers 402 and the agent retries | it is the owner's credits — send them to the printed portal URL, then re-run |
 | `.dev.vars` edited but the old value still in play | a running `wrangler dev` reloads source, not secrets — restart it |
 | `ORACLE_ADDRESS` typed by hand | must match the mnemonic exactly — asserted at first use |
-| Guessing `pricing.evaluation.minAmount` | ask what the collection's on-chain evaluation payment is (or will be) — too low and register 402s |
+| Guessing `EVALUATION_MIN_AMOUNT` | ask what the collection's on-chain evaluation payment is (or will be) — set too high and register 402s |
+| No `EVALUATION_DENOM` in the mainnet env | the worker refuses to start — set both vars in every env you deploy |
 | `allowAiChecks: false` while the work order declares AI checks | every `ai` fact freezes `error` and the rubric's `onError` decides — ask first |
 | `ORACLE_HOSTNAME` ≠ the deployed Custom Domain | callers resolve the did:web by fetching that host — they must be the same string |
 | `ORACLE_ENTITY_DID` left unset after `oracle init` (or set only at the top level) | the deployed oracle fails `/health/ready` (`identity`); the Matrix review card can't resolve it, so reviews only work from the portal page |
@@ -360,7 +403,7 @@ collection's protocol, else `pricing.evaluation.minAmount`).
 | Skipping `--logo` without asking | the identity is still complete, but the portal and the console show a placeholder — ask the provider for a logo URL and pass `--logo` |
 | Not re-running `oracle init` after the deploy | `#eval` and both cards still name `localhost` and `#pro` may be missing — re-run with the deployed `--kit-url` and `--yes` |
 | Treating `⚠ domain indexer …` as a failure | it is a warning and the exit code is 0 — the entity is on chain either way |
-| Registering with the on-chain grant but no claim-bot delegation | the oracle can't pull bodies — mint `delegation --for bot` and pass `--delegation` |
+| Registering with the on-chain grant but no claim-bot delegation | Matrix-stored claims can't be pulled — mint `delegation --for bot` and pass `--delegation` |
 
 ## Worked example
 
@@ -389,6 +432,8 @@ restart, re-register. Restart both dev servers after any `.dev.vars` edit.
   default and cap; the routes, cron lanes, pause reasons and billing the package already owns).
 - `../reference/engine-contract.md` — the engine's side: register, the error table, billing,
   receipts, review folds. Background, not an interface.
+- `../reference/linked-docs.md` — the linked-document rules: Vault first, the IXO IPFS gateway as
+  the fallback, each proof's format, and `readLinkedDoc`.
 
 ## Output contract
 

package/skills/create-rubric/SKILL.md

@@ -93,8 +93,9 @@ default here is the author's call — ask.
 
 ## Rules that bite (the engine's, not opinions)
 
-- `claimSchema.proof` is the chain's `#vct` proof copied verbatim (a CID, compared as a string) —
-  never computed.
+- `claimSchema.proof` is the chain's `#vct` proof copied verbatim, compared as a string — sha256 hex
+  for a protocol published with the CLI, a CID for one published through the Portal. Never
+  computed.
 - File content is never machine-judged: presence / type / size only. "Does the photo show X" is
   `ManualScore` + `ReviewTask`, `answer` boolean or enum, `map` covering every answer — or an
   `aiChecks` entry, which an oracle answers.

package/skills/create-rubric/reference/format-cheatsheet.md

@@ -16,7 +16,7 @@ format still shows `constants` / `@const` refs; those do not exist (inline liter
     "@type": "Rubric",
     "title": "…", "description": "…",                        // display-only
     "claimSchema": { "@type": "ClaimSchemaBinding", "protocol": "did:ixo:entity:…", "resource": "#vct",
-                     "proof": "<the protocol's #vct LinkedResource proof, VERBATIM — a CID, compared as a string>" },
+                     "proof": "<the protocol's #vct LinkedResource proof, VERBATIM — sha256 hex (CLI) or a CID (Portal), compared as a string>" },
     "derived":   [ … ],   "gates": [ … ],   "scoring": { … },   "review": { … },   "settlement": { … },
     "sources":   [ … ],   "aiChecks": [ … ],   "unique": { … },   "frequency": { … }
   }

package/skills/decision-api-client/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: decision-api-client
-description: Use when testing a Decision API oracle from the CUSTOMER side — minting a test source, API key and payment delegation on devnet, running the TypeScript SDK (@ixo/decision-oracle-client) or its CLI against a live oracle, connecting Claude Code to an oracle's hosted MCP server (/v1/mcp), running the docs agent test — or when debugging a client-side failure (402 not paid, SCOPE, DELEGATION_EXPIRED, terms_mismatch, a receipt that will not verify).
+description: Use when testing a Decision API oracle from the CUSTOMER side — minting a test source, API key and payment delegation on devnet, running the TypeScript SDK (@ixo/decision-oracle-client) or its CLI against a live oracle, connecting Claude Code to an oracle's hosted MCP server (/v1/mcp), or when debugging a client-side failure (402 not paid, SCOPE, DELEGATION_EXPIRED, terms_mismatch, a receipt that will not verify).
 ---
 
 # The Decision API from the customer side, on devnet
@@ -10,17 +10,17 @@ description: Use when testing a Decision API oracle from the CUSTOMER side — m
 A Decision API oracle (`API_LANE` on; set one up with `decision-api-oracle`) is used by customers
 through three doors, all over the same `/v1/api` routes with an API key:
 
-- the SDK and CLI, `@ixo/decision-oracle-client` (`packages/client` in this repo);
+- the SDK and CLI, `@ixo/decision-oracle-client` (on npm);
 - the hosted MCP server at `https://<oracle>/v1/mcp` (four tools, the same key, or a sign-in
   through AuthHub with an approval per submit);
-- plain HTTP, with the docs (`site`, and its `llms-full.txt` for agents).
+- plain HTTP, with the Decision API docs (their `llms-full.txt` is written for agents).
 
 A source in billing mode `x402` answers a submit with `402`. The payer pays it with the
 customer's **payment delegation**, a UCAN to the facilitator carrying a `billing/pay` cap. The
 price is held when the claim is accepted and paid only on the engine's receipt.
 
 The worked target is IXO's devnet example: SwiftDrop, at `https://shipment-delivery-oracle.devnet.ixo.earth`,
-protocol `did:ixo:entity:c2f5a188d28f3d4bf6351873d3d268ea`, price 20¢. Its `/demo/orders?route=<id>`
+protocol `did:ixo:entity:c2f5a188d28f3d4bf6351873d3d268ea`, price 60¢. Its `/demo/orders?route=<id>`
 issues a fresh courier route per id, with real order ids and delivery codes. Use a new route per
 test claim, so the duplicate lane never sees a repeat.
 
@@ -46,45 +46,42 @@ bunx decision-oracle login --network devnet     # once; a browser step for the h
 ```
 
 The session's DID must be in the oracle's `ORACLE_ADMIN_DIDS` to set a source's billing mode and
-protocols. For IXO's example it already is. Its deed needs devnet PAY; top up in the console
+protocols — on someone else's oracle, ask its operator to do those two steps. Its deed needs devnet PAY; top up in the console
 (`decision-console.devnet.ixo.earth`, Credits).
 
 ### 1. Credentials: a source, two keys and a delegation
 
-**In this repo** (one command; secrets are written to the file with mode 600 and never printed):
-
-```bash
-cd packages/client
-bun run devnet:credentials -- --oracle https://shipment-delivery-oracle.devnet.ixo.earth \
-  --protocol did:ixo:entity:c2f5a188d28f3d4bf6351873d3d268ea --out ~/.ixo/decision-api-devnet.env
-#   --source src_…      reuse an existing source; --max-pay 2 (PAY); --days 7
-```
-
-It writes `IXO_ORACLE_URL`, `IXO_PROTOCOL_DID`, `IXO_SOURCE_ID`, `IXO_API_KEY` (claims:write,
-claims:read, webhooks:manage), `IXO_API_KEY_READONLY` (claims:read) and `IXO_PAYMENT_DELEGATION`.
-
-**Anywhere else:**
-
 ```bash
 eo() { bunx decision-oracle "$@" --kit https://<oracle> --network devnet --json; }
-eo api source create --name <n> --contact <email>        # sourceId + webhookSecret, shown once
+eo api source create --name <n> --contact <email> --entity <org did>   # sourceId + webhookSecret, shown once
 eo api admin billing-mode <sourceId> x402 --yes          # operator only
 eo api admin protocols <sourceId> <protocolDid> --yes    # operator only
 eo api key create --source <sourceId> --scopes claims:write,claims:read --name test
 ```
 
-For the delegation, use the console's Keys page ("Payment delegation"), which shows
-`IXO_PAYMENT_DELEGATION` once.
+`--entity` is required: the organisation the source belongs to, which the login must control (make
+one with `decision-oracle org create --name …`). The source stays `pending-link` until
+`eo api source link <sourceId> --yes`. For the delegation, use the console's Keys page ("Payment
+delegation"), which shows `IXO_PAYMENT_DELEGATION` once.
+
+Keep the values in a file of your own (mode 600), never printed: the client reads `IXO_ORACLE_URL`,
+`IXO_API_KEY` and `IXO_PAYMENT_DELEGATION` from the environment. Mint a second, read-only key
+(`--scopes claims:read`) for the `SCOPE` check.
 
 Revoke keys you no longer need: `eo api key revoke --source <id> <8-char prefix> --yes`.
 
-### 2. The SDK smoke (this repo)
+### 2. The CLI and the SDK
+
+With the `IXO_*` variables from step 1 in the environment:
 
 ```bash
-cd packages/client && bun run build && node dev/devnet-smoke.ts   # --env <file> --photo <jpg>
+npx @ixo/decision-oracle-client submit claim.json      # waits up to 60 s; pays the 402
+npx @ixo/decision-oracle-client watch apc_…            # the timeline to the decision
+npx @ixo/decision-oracle-client keys                   # the source's keys, masked
 ```
 
-It runs under plain node, through the BUILT dist. That is what a customer installs. It checks:
+The SDK is the same package (`npm i @ixo/decision-oracle-client`; pass `paymentDelegation` to pay
+402s). A passing run shows:
 
 - the work order and its price;
 - an upload;
@@ -92,25 +89,12 @@ It runs under plain node, through the BUILT dist. That is what a customer instal
 - a decision, and a payment on the record;
 - `verifyReceipt` against the engine's did.json;
 - events;
-- a replay with the same key naming the same claim;
-- `SCOPE` for the read-only key;
-- the CLI reading the claim.
-
-It spends one claim. Every line must read `PASS`. Any verdict counts (`reject` is normal for a
-parcel photo that doesn't match).
+- a replay with the same idempotency key naming the same claim;
+- `SCOPE` for the read-only key.
 
-### 3. The CLI by hand
-
-```bash
-set -a; . ~/.ixo/decision-api-devnet.env; set +a
-node packages/client/dist/cli/index.js submit claim.json      # waits up to 60 s; pays the 402
-node packages/client/dist/cli/index.js watch apc_…            # the timeline to the decision
-node packages/client/dist/cli/index.js keys                   # the source's keys, masked
-```
+Any verdict counts (`reject` is normal for a parcel photo that doesn't match).
 
-Outside this repo: `npx @ixo/decision-oracle-client …` (once published).
-
-### 4. MCP from Claude Code
+### 3. MCP from Claude Code
 
 The route ships with the oracle package, so the oracle must be deployed from a version that has
 `src/routes/v1/mcp`. Check with `curl -s -o /dev/null -w "%{http_code}" -X POST https://<oracle>/v1/mcp`:
@@ -159,55 +143,25 @@ the console) must make the next claim ask again. "Don't ask again" works only on
 `policies.allowStandingApprovals` is `true`; otherwise setting it is refused (`403`, reason
 `standing_approvals_off`) and every claim asks.
 
-### 5. The docs agent test (this repo)
-
-```bash
-(cd site && bun install && bun run build)
-set -a; . ~/.ixo/decision-api-devnet.env; set +a
-bun site/agent-test/run.ts            # exit 0 pass · 1 fail · 2 skipped (no credentials)
-```
-
-A Claude model gets only the site's `llms-full.txt`, the key, the delegation and one
-`http_request` tool locked to the oracle's origin. It must reach a decision it paid for itself.
-The script checks the result, not the model's word. It costs a few cents of model usage plus
-one claim.
-
-### 6. Card scenarios (devnet, Stripe test mode)
+### 4. Card scenarios (devnet, Stripe test mode)
 
-Card needs an oracle whose protocol costs **≥ 50¢ per claim** (Stripe's minimum capture; SwiftDrop is
-60¢ for this) and whose plan accepts `card`. Which scenario runs is set on the **facilitator side**:
-the payer's default saved card and default way to pay. Saving a test card and completing 3-D Secure
-need the facilitator's Stripe test key, so that half belongs to whoever owns the facilitator
-(ixo-pay-facilitator `.claude/skills/devnet-card-check`). This half pays:
+Card needs an oracle whose protocol costs **≥ 50¢ per claim** (Stripe's minimum capture; the
+example is 60¢ for this) and whose plan accepts `card`. Which scenario runs is set on the
+**facilitator side**: the payer's default saved card and default way to pay. Saving a test card and
+completing 3-D Secure need the facilitator's Stripe test key, so that half belongs to whoever runs
+the facilitator. This half pays — an SDK submit with `prefer: "card"` (`"upay"` = PAY first; unset =
+the payer's console default), and after a 3-D Secure confirm a resume with the SAME offer and key
+(`{ idempotencyKey: err.idempotencyKey, resumePayment: err.paymentRequired }`):
 
-```bash
-cd packages/client && bun run build
-node dev/devnet-card.ts submit card      # prefer card; `upay` = PAY first; `none` = the console default
-node dev/devnet-card.ts resume           # after a 3-D Secure confirm: the SAME offer, same key
-```
-
-| Payer's default card (facilitator side) | Run | Expect |
+| Payer's default card (facilitator side) | Submit with | Expect |
 | --- | --- | --- |
-| `pm_card_authenticationRequired` | `submit card` | `CARD_AUTHENTICATION_REQUIRED` + `confirmUrl`; once confirmed, `resume` → paid with the SAME PaymentIntent. Left unconfirmed, the facilitator cancels it ~17 min later, never charged |
-| `pm_card_chargeCustomerFail` | `submit card` | declined at authorize → paid with PAY for the same 402 |
-| `pm_card_createDispute` | `submit card`, then again once the dispute is open | paid by card; then `card_blocked` → PAY (no PaymentIntent created); after the dispute is won, card again |
-| `pm_card_visa`, preference `card` | `submit none` | the SDK reads `/v1/payer/preferences` with the delegation → card |
+| `pm_card_authenticationRequired` | `prefer: "card"` | `CARD_AUTHENTICATION_REQUIRED` + `confirmUrl`; once confirmed, the resume → paid with the SAME PaymentIntent. Left unconfirmed, the facilitator cancels it ~17 min later, never charged |
+| `pm_card_chargeCustomerFail` | `prefer: "card"` | declined at authorize → paid with PAY for the same 402 |
+| `pm_card_createDispute` | `prefer: "card"`, then again once the dispute is open | paid by card; then `card_blocked` → PAY (no PaymentIntent created); after the dispute is won, card again |
+| `pm_card_visa`, preference `card` | no `prefer` | the SDK reads `/v1/payer/preferences` with the delegation → card |
 
 Every claim's record names the rail: `stripe-manual-capture` / `usd` / cents, or `ixo-pay` / `upay`.
-A run that answers `SPEND_CAP` has used up the delegation's `maxAmount`: mint a new one. Proven end to
-end on 2026-10-01, pre-company-authority (2026-10-10) (SwiftDrop at 60¢; each card capture paid IXO
-its 20% fee).
-
-## Working on the client in this repo (maintainers)
-
-- **`@ixo/x402-ixo-pay` comes from npm** (0.5.2, published from ixo-pay-facilitator
-  `packages/x402-ixo-pay`) as an ordinary runtime dependency; the client's `dist/` imports it. A
-  facilitator wire change means a new version published there, then a bump here.
-- **`packages/client/scripts/pack-test.sh`** (run first by `pack-smoke.sh`) proves the tarball
-  stands alone: every dependency is a registry version (no git, `file:` or workspace spec), it
-  installs with git turned off, and it pays and runs its bin under plain node.
-- **Types come from the OpenAPI.** Run `bun run generate` after the OpenAPI changes. It uses
-  `npx` with TypeScript 5, because TS 7 has no JS compiler API and openapi-typescript needs one.
+A run that answers `SPEND_CAP` has used up the delegation's `maxAmount`: mint a new one.
 
 ## When something fails
 
@@ -218,11 +172,11 @@ its 20% fee).
 | MCP `SUBMITTER_REQUIRED` | The protocol has a frequency rule (its work order says `facts.frequency: true`), so `submit_claim` needs `submitter`, your stable id for the person (e.g. the courier id). Without it the engine would reject the claim, so it is refused before any approval or charge. |
 | The AI asks you to upload a photo | There is no upload over sign-in. Give it an https link; `submit_claim` attaches `{ question, url }` and the oracle fetches it. No `mediaType` is needed: the oracle reads it from the URL's extension, else a `HEAD`, when it accepts the claim. |
 | Claude Code refuses `submit_claim` ("real-world transaction") | Its safety check is holding back a tool that may spend. Allow only this tool: `/permissions` › Allow › `mcp__<server>__submit_claim`. Never turn the safety check off. Every charge still needs the user's AuthHub approval or their auto-approve limits. |
-| `PaymentError DELEGATION_WRONG_ORACLE` | The delegation is bound to other oracles. Re-sign it naming this oracle's `did:web` (console Keys › Payment delegation; `devnet:credentials` binds to `--oracle`). |
+| `PaymentError DELEGATION_WRONG_ORACLE` | The delegation is bound to other oracles. Re-sign it naming this oracle's `did:web` (console Keys › Payment delegation). |
 | `PaymentError CARD_NOT_SAVED` | The payer has no saved card and the 402 took card only (or `prefer: "card"` with no PAY to fall back to). Save a card on the console's card page, or pay with PAY. |
 | `PaymentError CARD_AUTHENTICATION_REQUIRED` | The bank wants 3-D Secure. Open `err.confirmUrl` and confirm within 15 min, then resubmit with `{ idempotencyKey: err.idempotencyKey, resumePayment: err.paymentRequired }` — never a fresh offer. `OFFER_EXPIRED` on the resume: the gate no longer takes that offer; submit afresh. `INVALID_RESUME`: the offer passed is not this oracle's card 402. |
 | `402 INSUFFICIENT_CREDITS` (+ `fundingUrl`) | The session's deed has too little devnet PAY. Top up in the console. |
-| `402 SPEND_CAP` | The key's daily cap or the delegation's `maxAmount` is spent. Mint a delegation with a higher `--max-pay`. |
+| `402 SPEND_CAP` | The key's daily cap or the delegation's `maxAmount` is spent. Mint a new delegation with a higher cap (console Keys › Payment delegation). |
 | `403 PAYER_NOT_MEMBER` | The delegation's issuer isn't the source's owner or a member. Mint it from the owner's session. |
 | `409 IDEMPOTENCY_MISMATCH` | Same `Idempotency-Key`, different body. Use a new key per new claim. |
 | `terms_mismatch` on the paid resend | `accepted` wasn't the offer entry verbatim. Hand-built headers must copy it byte for byte. |

package/skills/decision-api-oracle/SKILL.md

@@ -11,7 +11,9 @@ The Decision API (`API_LANE`) is an oracle's second intake: paid, off-chain clai
 `/v1/api`, decided by the same engine, never written to chain. The oracle holds the sources, keys,
 uploads, reviews and webhooks; the engine decides and bills per the oracle's **plan** (the Standard
 plan from the moment it registers, unless IXO sets another);
-the payments facilitator settles each claim in PAY; the Decision Console
+the payments facilitator settles each claim the ways that plan allows — by card and/or USDC on Base
+for a third-party oracle, PAY only for IXO-run ones — into the oracle's own earnings addresses
+(`EARNINGS_ADDRESS` / `EARNINGS_BASE_WALLET`); the Decision Console
 (`decision-console.devnet.ixo.earth`) is the UI over all of it.
 
 The worked run is **`examples/shipment-delivery`** in this package's repo — SwiftDrop Express, a
@@ -44,18 +46,16 @@ is the package CLI.
 ### 0. Prerequisites
 
 ```bash
-bunx wrangler whoami                        # the Cloudflare account that owns the ixo.earth zone
+bunx wrangler whoami                        # the Cloudflare account that owns your host's zone
 bunx decision-oracle login --network devnet     # the OWNER's AuthHub session — once
 ```
 
 - `login` opens a browser: run it in the background and tell the human to finish there (**HUMAN**).
   The session is the owner: it publishes the protocol, owns the oracle entity, and is the operator.
-  Put the session's OWN DID (`did:ixo:<address>` — `login` prints the address; the session file
-  `~/.ixo/publish-session-<network>.json` has the `did`) in `ORACLE_ADMIN_DIDS` in every `vars` block
-  of `wrangler.jsonc`. The example ships IXO's DID there — a copy of it must
-  replace it with the owner's.
-- The account must hold the zone of the host (`*.ixo.earth` for IXO's deployments), or the Custom
-  Domain cannot attach. If `whoami` shows another account, stop and say so (**HUMAN**).
+  Put the session's OWN DID (`did:ixo:<address>` — `login` prints the address) in
+  `ORACLE_ADMIN_DIDS` in every `vars` block of `wrangler.jsonc`. The example ships IXO's DID there —
+  a copy of it must replace it with the owner's.
+- The account must hold the zone of the host, or the Custom Domain cannot attach. If `whoami` shows another account, stop and say so (**HUMAN**).
 
 ### 1. The protocol (example: publish `protocol/`; a provider: their protocol's DID)
 
@@ -160,15 +160,14 @@ If the engine already binds this did:web to a DIFFERENT address, it prints old
 that is an identity change — ask the owner before re-running with `--yes`.
 
 Registering is the whole step for a provider: an oracle with no plan of its own runs at the
-engine's **Standard** plan at once (payable in PAY, take 20%, paid to the owner's deed account,
-listed in the Decision Console). Nothing to request. Done when the oracle appears in the engine's
+engine's **Standard** plan at once (payable by card and/or USDC on Base, into the oracle's earnings
+addresses; listed in the Decision Console). PAY is for IXO-run oracles only. Nothing to request. Done when the oracle appears in the engine's
 `GET /v1/oracles` (the console's list).
 
-**Example only (IXO's own oracles):** IXO staff switch the oracle to the IXO-owned plan in the
-engine's admin plan editor (**HUMAN**, IXO staff) — the example's README names its terms. Done when
-IXO confirms the oracle's plan version is > 0 (Standard is version 0).
+An oracle IXO runs for itself moves to an IXO plan only on IXO's side: ask IXO to move it
+(**HUMAN**), and it is done when IXO confirms the plan.
 
-### 7. On chain — the full identity (mandatory, owner 2026-10-01)
+### 7. On chain — the full identity (mandatory)
 
 Every oracle built with the kit has a full on-chain identity — the entity, its `#pro` profile, its
 `#dmn` domain card and its `#acard` Agent Card (which lists the `decision-api` service at the lane's published
@@ -191,9 +190,12 @@ The oracle is not done until readiness passes. A 503 there names nothing; the op
 
 ### 8. Operator: a source, its protocol, its billing, a key
 
-The smoke (step 9) does all of this itself; for a real partner:
+The smoke (step 9) does all of this itself; for a real partner. A source belongs to an
+organisation entity (`--entity`): the partner's, or one made with `org create` (`org balance` /
+`org fund` check and top up its admin account):
 
 ```bash
+bunx decision-oracle org create --name "<partner>" --network devnet --yes      # → { entityDid } — once, idempotent by name
 K="--kit https://shipment-delivery-oracle.devnet.ixo.earth --network devnet"
 bunx decision-oracle api source create --name "<partner>" --contact <email> --entity <org did> $K  # as a controller of the org; pending-link; secret shown ONCE
 bunx decision-oracle api admin protocols <sourceId> <protocol did> $K              # dry run → --yes
@@ -205,7 +207,9 @@ bunx decision-oracle api review-billing disable --source <sourceId> $K
 ```
 
 `review-billing` exists only while IXO's plan bills the oracle's reviews per review (`/v1/info`
-`reviewBilling.mode: "x402"`; `enable` refuses otherwise). The login must be the organisation's
+`reviewBilling.mode: "x402"`; `enable` refuses otherwise), and needs `API_LANE` AND `API_PAYMENTS`
+on, a published `pricing.api` price, and the organisation's collections created with
+`--eval-amount 0` (an empty evaluation leg — `create-collection`). The login must be the organisation's
 owner on chain — the reviews come out of ITS credits — and `--cap` (PAY) is a lifetime total,
 never refunded: raise it by running `enable` again with a higher `--cap`.
 
@@ -238,18 +242,16 @@ Three people, three keys — never the same account twice:
   `api admin billing-mode` and `api admin protocols`. It must NOT be the organisation's
   controller or the reviewer: the engine refuses any review grant chain through the oracle's
   identities, its owner included.
-- **the organisation's controller** (`--org-controller`, a test account's key file or its address in
-  `~/.ixo/test-accounts-registry.json`; on devnet the default is SwiftDrop's admin Sara,
-  `~/.config/ixo-payouts/test-accounts/swiftdrop-sara.json`, controller of `--entity`'s default,
-  SwiftDrop's organisation `did:ixo:entity:2eeb3a4c03f3755872ada894734e47d2`): a source belongs to
-  an organisation (D10), so the controller creates it (`POST /v1/api/sources { entityDid }` →
+- **the organisation's controller** (`--org-controller`, a key file or an account address; pass
+  `--entity` with the organisation it controls — the smoke's defaults are the example's own
+  devnet accounts): a source belongs to an organisation, so the controller creates it (`POST /v1/api/sources { entityDid }` →
   `pending-link`), signs the `SourceCompanyLink` (kid = the did:key of the Ed25519 key on its IID,
   canonical payload) and PUTs it to the ENGINE (`PUT /v1/sources/:oracleDid/:sourceId/company`,
   UCAN `company/link`), syncs (`POST /v1/api/sources/:id/company/sync` → `active`), mints and
   revokes the keys, and invites the reviewer. Its key needs no chain write: it already controls the
   entity.
-- **the reviewer** (`--reviewer`, from `~/.ixo/test-accounts.json`; default the network's first
-  account that is neither of the two — make one with the `ixo-test-account` skill): a MEMBER. The
+- **the reviewer** (`--reviewer <address|did>`, a third account that is neither of the two): a
+  MEMBER. The
   controller invites it by DID with role `reviewer` and PUTs its role grant (≤ 30 days); the member
   registers a `did:key` reviewer key, grants it `claims/review` on the source and answers through
   the API with that two-link `reviewerGrant` (controller → member → key).
@@ -259,19 +261,18 @@ fixtures, decides one stop per row of the example's outcome table (approve prepa
 review cash short · review GPS far · partial refused · reject wrong code · reject unknown order ·
 review reused photo, held on `unique:SD-DUP-1` with its `duplicates[]` naming the earlier claim ·
 reject the same order claimed again by its courier (same `submitter`) · review dispatch down), answers the cash review (and the
-claim-level `SD-RT-CHECKS` asked beside it) as a member does in the Decision Console (devnet's
-reviewer is Dan — never an oracle operator's account, which the engine refuses in a reviewer grant), waits for the engine's fold (`decided partial`), walks
+claim-level `SD-RT-CHECKS` asked beside it) as a member does in the Decision Console (never an
+oracle operator's account, which the engine refuses in a reviewer grant), waits for the engine's fold (`decided partial`), walks
 the rest of the surface, then revokes its keys and DELETEs its sources as the controller (`--keep`
 keeps both). Each run spends ~13 engine decisions (and one review fold) of the owner's
 credits. Then, on the owner's OK:
 
 - `--frequency` — one courier over the daily limit (26 more decisions);
 - `--paid` — one x402 claim paid from the session's own devnet deed. Needs a **subscription deed**
-  whose admin holds PAY and has granted the facilitator (`ixo173l540tvyu43ghmtstl2wu2lqztdt5e05e05c6`)
-  a `SendAuthorization` — the subscriptions service's devnet purchase / top-up does both (**HUMAN**
-  if absent). Check: `curl "https://devnet.ixo.earth/rest/cosmos/authz/v1beta1/grants?granter=<deed admin>&grantee=ixo173l540tvyu43ghmtstl2wu2lqztdt5e05e05c6&msg_type_url=/cosmos.bank.v1beta1.MsgSend"`.
-  Spends one decision price of PAY (60¢ in the example). The next SwiftDrop smoke after the
-  company-authority joint deploy runs with `--paid`.
+  whose admin holds PAY and has granted the payments facilitator's address a `SendAuthorization` —
+  the subscriptions service's devnet purchase / top-up does both (**HUMAN** if absent). Check:
+  `curl "https://devnet.ixo.earth/rest/cosmos/authz/v1beta1/grants?granter=<deed admin>&grantee=<facilitator address>&msg_type_url=/cosmos.bank.v1beta1.MsgSend"`.
+  Spends one decision price of PAY (60¢ in the example).
 
 ### 10. Verify — the six member / review emails
 
@@ -292,7 +293,8 @@ With the owner's email as the test inbox, in the console (**HUMAN** clicks; you
 ### 11. Payments on (a provider turning it on)
 
 `API_PAYMENTS: "true"`, `X402_FACILITATOR_URL`, `X402_NETWORK` (`cosmos:devnet-1` / `cosmos:pandora-8`
-/ `cosmos:ixo-5`) and `EARNINGS_ADDRESS` (the operator's own `ixo1…`, each offer's `payTo`; unset ⇒ no PAY)
+/ `cosmos:ixo-5`) and the payees — `EARNINGS_ADDRESS` (your own `ixo1…`, each offer's `payTo` for
+PAY and USDC on IXO; unset ⇒ no PAY) and `EARNINGS_BASE_WALLET` (your `0x…`, for USDC on Base) —
 in the env's vars, a price (`pricing.api` in `defineOracle`, whole cents), and the
 oracle registered with the engine (step 6) — the facilitator reads the oracle's terms from its plan
 (Standard unless IXO set another). `API_PAYMENTS:
@@ -316,7 +318,7 @@ Decision Console shows the price and card eligibility read-only.
 | `PROTOCOL_NOT_ALLOWED` on submit | the source's allow-list lacks it — empty means NONE; `api admin protocols <src> <did> --yes` |
 | 503 `SOURCE_PAUSED` `payments-disabled` | `API_PAYMENTS` is off and the source bills `x402` — turn payments on, or `api admin billing-mode <src> none` |
 | 402 again after a `PAYMENT-SIGNATURE` | the facilitator refused the payer: no deed / no `SendAuthorization` / not enough PAY — the fresh 402's error says which |
-| offers refused `plan_inactive`, `accepts: []` | the engine has nobody to pay: the oracle is not registered (step 6), or its owner has no oracle claims collection / deed account to receive the Standard payout (the owner's subscription sets that up — **HUMAN**); the refusal's reason says which |
+| offers refused `plan_inactive`, `accepts: []` | the facilitator finds no active plan for the oracle: it is not registered with the engine (step 6 — registered, it runs on Standard at once), or, for an IXO-run oracle, IXO has not activated its plan (**HUMAN**: ask IXO). A way to pay whose payee is unset (`EARNINGS_ADDRESS` for PAY / USDC on IXO, `EARNINGS_BASE_WALLET` for USDC on Base) is simply not offered |
 | Not listed in the console | not registered with the engine (step 6), or not payable (the row above); or the host is not a `*.ixo.earth` Custom Domain; or `CORS_ORIGINS` lacks `https://decision-console.devnet.ixo.earth` |
 | Every API claim rejects with `frequency` | the caller sends no `submitter` — an uncountable window fails closed; send the courier id |
 | 409 `REVIEW_EXPIRED` on a review answer | the paid claim's `answerBy` (its x402 reservation's expiry: extended up to 30 days for the review, else 24 h after verify) has passed — it can no longer be paid, and nothing was written. Answer paid reviews before the date the emails state |
@@ -332,5 +334,5 @@ Decision Console shows the price and card eligibility read-only.
 Say plainly what is done and what is owed: the protocol DID and where it was written, the
 worker's host and did:web, the oracle entity DID (`/v1/info` `entityDid`) and the `/health/ready`
 answer, which ids and secrets were set (names only), the engine registration and
-billing status, whether the oracle is listed/payable (for IXO's own: the plan version IXO confirmed), the smoke's last line and
+billing status, whether the oracle is listed/payable, the smoke's last line and
 any FAIL lines verbatim, the email rows seen, and every HUMAN step still open.

package/skills/publish-protocol/SKILL.md

@@ -14,8 +14,9 @@ submissions against it. This skill composes two things:
 
 - **`create-rubric`** authors and validates the form + rubric pair. The decision engine owns the
   rubric format; `bunx decision-oracle rubric validate` is that engine over HTTP.
-- **`bunx decision-oracle publish-protocol`** does the chain authoring: `MsgCreateEntity` → Matrix
-  upload → `MsgAddLinkedResource` (`#vct` + `#rub`) + `MsgAddService` → source the Matrix room.
+- **`bunx decision-oracle publish-protocol`** does the chain authoring: `MsgCreateEntity` → upload
+  to the IXO Vault (else the IXO IPFS gateway; never Matrix media) → `MsgAddLinkedResource` (`#vct`
+  + `#rub`) + `MsgAddService` → source the Matrix room.
   Phases `entity` / `resources` / `room` (default `all`), resumable with `--entity <did> --phase <p>`.
   Plus `rub`, which is a different job — see below.
 
@@ -89,6 +90,17 @@ There are two jobs here, and picking the wrong one fails on chain:
    protocols are linked to this entity". `create-collection`'s `reference/claims-stack.md` has the
    model.
 
+**Proofs.** Both proofs this command writes are the sha256 HEX of the exact uploaded bytes — the
+engine string-compares them, and the `#rub` proof IS the rubric's id. A protocol published through
+the Portal carries a CID as its `#vct` proof instead. Never recompute someone else's proof: read the
+anchored value off chain and use it verbatim (`--phase rub` does exactly that).
+`../reference/linked-docs.md` has the rules for every linked document in one place.
+
+**No profile yet — the protocol shows as "Unnamed".** `publish-protocol` writes no `#pro` profile,
+so Portals and Consoles list the protocol as "Unnamed" until one is anchored on it. The profile is a
+`#pro` linked resource: type `Settings`, `application/ld+json`, its proof the CIDv1 of the uploaded
+bytes. This CLI has no flag for it — tell the user it is still owed.
+
 ## Adopting a protocol that already has its form — `--phase rub`
 
 Use this when the protocol EXISTS and carries a `#vct` already: IXO's own oracle-service-claim
@@ -116,7 +128,7 @@ Three things to expect:
   prints `already anchored` and does nothing — no upload, no transaction, no fee.
 - **Only the protocol's owner can anchor.** If the session doesn't own it, the rubric is still
   uploaded and the exact messages are printed, composed for the owner to broadcast. Send them those
-  lines; they sign them. (Same posture as `oracle init --phase backlink`.)
+  lines; they sign them. (Same posture as `oracle init --only backlink`.)
 - **The room is not this command's business.** A protocol that already has claims already has its
   room; `--phase rub` never touches it.
 
@@ -149,3 +161,6 @@ owed: a phase that failed, an un-invited bot, or a rubric change that would need
 
 `reference/publishing.md` — phase-by-phase detail (what each signs and uploads), resuming a partial
 run, the Matrix identity rule, and the network endpoints.
+
+`../reference/linked-docs.md` — the linked-document rules: where uploads go, each proof's format,
+and how to read one.

package/skills/publish-protocol/reference/publishing.md

@@ -64,7 +64,7 @@ bunx decision-oracle publish-protocol --phase rub --protocol <did> \
 **Ownership.** The chain checks the signer against the DID's authentication relationship, so only
 the protocol's owner can anchor. When the session is not the owner the messages are composed for the
 owner, printed, and not broadcast — the upload has already happened, so all they have to do is sign
-the printed lines. Same behaviour as `oracle init --phase backlink`.
+the printed lines. Same behaviour as `oracle init --only backlink`.
 
 `--form` stays required: it is what the engine's binder validates the rubric against before anything
 is written. Get it with `rubric fetch-form --protocol <did> --out form.json`, which downloads the

package/skills/reference/engine-contract.md

@@ -78,7 +78,7 @@ entries are exactly what a handler returns, after the runner normalized it.
 | 400 `INVALID_ADDRESS_PROOF` | register proof bad | non-retryable; `ORACLE_SECP_MNEMONIC` ≠ `ORACLE_ADDRESS` — a config bug |
 | 403 `NO_EVALUATE_GRANT` | not hired for this collection | retry once (a grant may have just landed), then pause the collection |
 | 402 `INSUFFICIENT_CREDITS` | the OWNER's credits are exhausted | pause every watched collection, log `details.manageSubscriptionUrl`; the cron resumes when `/me` says ok |
-| 402 `NO_SUBSCRIPTION` (register) | the delegated owner has no subscription | non-retryable; the owner subscribes in the portal, then register again |
+| 402 `NO_SUBSCRIPTION` (register) | the delegated owner has no subscription | non-retryable; the owner subscribes in the portal, then register again. A subscription made by the subscriptions workflow (not the portal) also needs a Stripe customer: the owner calls the subscriptions API's `POST /api/v1/payments/intent` once (a SetupIntent, no charge) |
 | 403 `DELEGATION_NOT_FOR_ORACLE` (register) | the CAR's `billing/pay` names a different oracle | non-retryable; re-mint with `--oracle did:web:<this host>` |
 | 400 `BAD_REQUEST` (register, naming `ownerDelegation`) | the CAR is malformed, mis-addressed or expired | non-retryable; re-mint, then register again |
 | 409 `RUBRIC_PIN_MISMATCH` | our pin ≠ the chain's `#rub` proof | invalidate the cached manifest, re-read, rebuild, retry once |

package/skills/reference/linked-docs.md

@@ -0,0 +1,35 @@
+# Linked documents (what an entity's LinkedResources point at)
+
+Every public document an entity carries — a protocol's form (`#vct`) and rubric (`#rub`), an
+oracle's `#orz`, `#pro` profile, `#dmn` domain card and `#acard` Agent Card, an ask's documents —
+is a LinkedResource: an https URL (`serviceEndpoint`) plus a hash of the exact bytes (`proof`).
+The CLI writes and reads them for you; these are the rules it follows, for anything you write or
+read yourself.
+
+## Where the bytes go
+
+1. **The IXO Vault first** — `https://{devnet.|testnet.|}vfs.ixo.earth/public/cid/<cid>`, uploaded
+   under a UCAN signed by the document's OWNER (the AuthHub session). Public at once, no auth.
+2. **The IXO IPFS gateway as the fallback** — `https://ipfs.gateway.ixo.world/ipfs/<cid>`. Never a
+   public gateway (`ipfs.io` and friends rate-limit).
+3. **Never Matrix media for a new document.** Old documents keep their Matrix download URLs and stay
+   readable; nothing new is written there.
+
+`serviceEndpoint` is always that full https URL — never a bare `ipfs:` or `mxc://`.
+
+## The proof, by resource
+
+| Resource | `proof` |
+| --- | --- |
+| `#vct`, `#rub`, `#orz` (`application/json`) | **sha256 hex** of the bytes. The engine string-compares it: a rubric's `claimSchema.proof` must equal the `#vct` proof verbatim, and a `#rub` proof is the rubric's id |
+| `#pro` (type `Settings`), `#dmn`, `#acard` (`application/ld+json`) | **CIDv1, raw, sha256** (`bafkrei…`) of the bytes |
+
+A protocol published through the Portal has a CID as its `#vct` proof. **Never recompute someone
+else's proof** — read the anchored value off chain and use it verbatim.
+
+## Reading one
+
+`readLinkedDoc(resource)` from `@ixo/decision-oracle/facts` (node-safe): a plain GET with no auth.
+It accepts Vault and gateway URLs, bare `ipfs:` / `ipfs://` CIDs (resolved through the IXO
+gateway) and old Matrix download URLs, hashes the bytes the way the proof was made (hex or CID), and
+fails closed on a mismatch. `linkedDocUrl(endpoint)` gives just the fetchable URL.

package/skills/write-facts/reference/facts-api.md

@@ -88,8 +88,8 @@ over whatever a handler put there. **A handler cannot turn its own failure into
 **A deterministic failure is a fact; a transient one is a retry.** Don't `catch` a transient
 engine/chain error yourself and turn it into `fact.error(...)` — that freezes a verdict over
 trouble that was never the claim's fault, and a claim is decided once, so it can never be re-run
-(task-14, 2026-09-14: a devnet claim was held for review on every fact because the engine's own 5xx
-got frozen this way). `tools.agreement()` and `tools.chain.*` already let a retryable failure
+(a claim whose every fact froze over the engine's own 5xx this way is held for review on all of
+them). `tools.agreement()` and `tools.chain.*` already let a retryable failure
 propagate instead of catching it — see below.
 
 ## One call, many facts
@@ -149,7 +149,7 @@ does: `readAnswer(answers, "$q.row.col")` and `rootQuestionName("$deliveryPhoto"
 answers `[]`. Blocksync being *unreachable* is a different thing and throws, which the runner passes
 through as the step's retry signal — so a chain outage retries instead of freezing a verdict. Catch
 it only if "could not read the chain" is genuinely the fact you mean, and then say so with
-`fact.error`. `tools.agreement()` follows the same rule against the eval engine (task-14): a real
+`fact.error`. `tools.agreement()` follows the same rule against the eval engine: a real
 "no agreement on file" is `null`, a transient engine outage throws.
 
 **There is no GENERAL chain message-history read, and you must not build one.** The one thing an