@ixo/decision-oracle 0.2.20 → 0.2.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/README.md +15 -15
  2. package/dist/lib/facts/stock/ai-check.d.ts +8 -0
  3. package/dist/lib/facts/stock/ai-check.d.ts.map +1 -1
  4. package/dist/lib/facts/stock/ai-check.js +12 -4
  5. package/dist/lib/facts/stock/ai-check.js.map +1 -1
  6. package/docs/api.md +8 -3
  7. package/docs/guide.md +11 -7
  8. package/package.json +2 -9
  9. package/skills/create-oracle/SKILL.md +13 -6
  10. package/skills/decision-api-oracle/SKILL.md +4 -4
  11. package/templates/project/README.md +4 -2
  12. package/templates/project/wrangler.jsonc +9 -4
package/README.md CHANGED
@@ -7,7 +7,7 @@ for (a courier API says the parcel arrived, a model says the photo shows what it
7
7
  says this is not a duplicate), hands those facts to the IXO **decision engine**, and signs the
8
8
  verdict the engine returns on chain with your own key.
9
9
 
10
- This repository is the package that is all of that **except the facts**. You write a config object
10
+ This package is all of that **except the facts**. You write a config object
11
11
  and a handful of async functions; `@ixo/decision-oracle` brings the claim pulling, the engine handshake,
12
12
  the D1 ledgers, human-review folds, the chain write, billing pauses, email and Matrix notices, the
13
13
  cron and the Workflows. It is for developers who want to run an oracle as a service, for teams
@@ -16,9 +16,8 @@ publishing a protocol and its rubric, and for anyone who needs a claim judged th
16
16
  **The rubric is the work order. The engine decides. You produce facts and sign.**
17
17
 
18
18
  > **Learn more**
19
- > · Step-by-step guide: [`packages/eval-oracle/docs/guide.md`](https://github.com/ixoworld/eval-oralce/blob/main/packages/eval-oracle/docs/guide.md)
20
- > · Full API reference: [`packages/eval-oracle/docs/api.md`](https://github.com/ixoworld/eval-oralce/blob/main/packages/eval-oracle/docs/api.md)
21
- > · The engine's wire contract: [`docs/ENGINE-CONTRACT.md`](https://github.com/ixoworld/eval-oralce/blob/main/docs/ENGINE-CONTRACT.md)
19
+ > · Step-by-step guide: [docs.ixo.world — Decision oracle](https://docs.ixo.world/build-an-oracle/decision-oracle)
20
+ > · Full API reference: [docs.ixo.world — Decision oracle API reference](https://docs.ixo.world/build-an-oracle/decision-oracle/api-reference)
22
21
 
23
22
  ---
24
23
 
@@ -360,7 +359,7 @@ whole surface. `out.issues` is empty iff the engine would accept this FactSet. T
360
359
  Pass `stock` in `fakeTools({ … })` (or `runFacts`'s `stock` option) when the handler under test
361
360
  wraps it.
362
361
 
363
- Full reference: [`packages/eval-oracle/docs/api.md`](https://github.com/ixoworld/eval-oralce/blob/main/packages/eval-oracle/docs/api.md).
362
+ Full reference: [Decision oracle API reference](https://docs.ixo.world/build-an-oracle/decision-oracle/api-reference).
364
363
 
365
364
  ## CLI reference
366
365
 
@@ -467,7 +466,7 @@ under `--json` that dry run prints nothing on stdout.
467
466
  Agents reach the same lane through the hosted MCP server at `https://<oracle>/v1/mcp` —
468
467
  `claude mcp add --transport http ixo https://<oracle>/v1/mcp --header "Authorization: Bearer eo_live_…"`
469
468
  (plus `X-Payment-Delegation` for an `x402` source): `submit_claim`, `get_decision`, `list_protocols`,
470
- `verify_receipt`, under the key's own scopes and limits (`docs/api.md`, "Use with Claude Code and
469
+ `verify_receipt`, under the key's own scopes and limits ([API reference](https://docs.ixo.world/build-an-oracle/decision-oracle/api-reference), "Use with Claude Code and
471
470
  other MCP clients").
472
471
 
473
472
  ### Protocol authoring (the commissioner's side)
@@ -493,7 +492,7 @@ Two places, and the split is the rule: **public config in `wrangler.jsonc` `vars
493
492
  | Var | What it is |
494
493
  | --- | --- |
495
494
  | `IXO_NETWORK` | `devnet` / `testnet` / `mainnet` — supplies every per-network URL below |
496
- | `ORACLE_HOSTNAME` | the host this oracle's `did:web` is served from; **must equal the Custom Domain in `routes`** |
495
+ | `ORACLE_HOSTNAME` | the host this oracle's `did:web` is served from: your Custom Domain in `routes`, or, with no custom domain, the Worker's free `<worker>.<account>.workers.dev` host |
497
496
  | `ORACLE_ADDRESS`, `ORACLE_DID` | the public chain identity (asserted against `ORACLE_SECP_MNEMONIC` at first use — a mismatch fails loud) |
498
497
  | `ORACLE_MATRIX_USER_ID` | the oracle bot's MXID, `@did-ixo-<address>:<homeserver>` |
499
498
  | `ORACLE_ENTITY_DID` | the on-chain oracle ENTITY from `oracle init` — **required for a deployed oracle**: unset on a non-local `ORACLE_HOSTNAME`, `/health/ready` fails its `identity` check (local dev is exempt). Unset, the Matrix review card also falls back to `ORACLE_DID` and reviews work only from the portal page |
@@ -598,7 +597,7 @@ The bindings the template declares: **D1** (`DB` — the ledgers), **KV** (`CACH
598
597
  two **Workflows** (`CLAIM_WORKFLOW`, `REVIEW_WORKFLOW`), a **Durable Object** (`SEQUENCE_MANAGER`,
599
598
  the chain sequence keeper), two **rate limiters** (`API_RATE_LIMITER` per IP, `API_KEY_RATE_LIMITER`
600
599
  per API key for the Decision API lane), **email** (`EMAIL`), and three **cron** triggers (every minute, every five minutes, hourly — keep all three) — plus an
601
- optional **R2** bucket (`API_UPLOADS`, commented out: absent ⇒ the upload route answers 501), and an optional answer archive (`ANSWERS_ARCHIVE`, commented out: bound ⇒ every evaluated ask, answer and photo is kept in that private bucket, one `<askId>-<title>/` folder per ask, shaped by `defineOracle`'s `archive` hooks — [guide §12](https://github.com/ixoworld/eval-oralce/blob/main/packages/eval-oracle/docs/guide.md#12-operating-it)). Every binding and the whole `vars` block are redeclared per env — they inherit
600
+ optional **R2** bucket (`API_UPLOADS`, commented out: absent ⇒ the upload route answers 501), and an optional answer archive (`ANSWERS_ARCHIVE`, commented out: bound ⇒ every evaluated ask, answer and photo is kept in that private bucket, one `<askId>-<title>/` folder per ask, shaped by `defineOracle`'s `archive` hooks — [guide, "Operating it"](https://docs.ixo.world/build-an-oracle/decision-oracle#12-operating-it)). Every binding and the whole `vars` block are redeclared per env — they inherit
602
601
  nothing from the top level.
603
602
 
604
603
  `db:migrate:remote` applies the migrations that ship **inside the package** (`migrations_dir`
@@ -607,9 +606,13 @@ per-environment step: for a named env, run `wrangler d1 migrations apply <name>-
607
606
  --env testnet`, likewise `--env production`. A Worker deployed against an unmigrated D1 fails on
608
607
  its first claim.
609
608
 
610
- **The Custom Domain in `routes` must equal `ORACLE_HOSTNAME`** for the env you deploy: callers
611
- verify you by fetching `https://<ORACLE_HOSTNAME>/.well-known/did.json`, and the engine binds its
612
- records to that did:web.
609
+ **`ORACLE_HOSTNAME` must be the host the env is served from**: callers verify you by fetching
610
+ `https://<ORACLE_HOSTNAME>/.well-known/did.json`, and the engine binds its records to that did:web.
611
+ A custom domain is optional. Without one, delete that env's `routes` entry and set
612
+ `ORACLE_HOSTNAME` to the Worker's free `<worker name>.<your account subdomain>.workers.dev` host
613
+ (wrangler prints it on deploy; with no `routes`, wrangler serves `workers.dev` by default). With
614
+ one, the Custom Domain in `routes` must equal `ORACLE_HOSTNAME`. Pick the host before `oracle
615
+ init`: it IS the oracle's identity, so moving to a custom domain later means a new did:web.
613
616
 
614
617
  ### Declaring yourself on chain
615
618
 
@@ -726,9 +729,6 @@ the exception** — the hosted subscriptions API resolves the ENGINE's did:web t
726
729
  delegation, so that leg needs a public tunnel in front of the engine, with the tunnel host set as
727
730
  the engine's hostname everywhere and the CAR minted for that same audience.
728
731
 
729
- The full runbook, plus the two engine-conformance harnesses:
730
- [`packages/eval-oracle/dev/README.md`](https://github.com/ixoworld/eval-oralce/blob/main/packages/eval-oracle/dev/README.md).
731
-
732
732
  ## Repository layout
733
733
 
734
734
  ```text
@@ -784,6 +784,6 @@ symlinks are not packed). CI diffs them — change one, copy it to the other.
784
784
 
785
785
  ## Status
786
786
 
787
- Published on npm: `@ixo/decision-oracle` 0.2.20 and `@ixo/decision-oracle-client` 0.1.1.
787
+ Published on npm: `@ixo/decision-oracle` 0.2.22 and `@ixo/decision-oracle-client` 0.1.1.
788
788
 
789
789
  Apache License 2.0: `LICENSE` at the repo root and in each package.
package/dist/lib/facts/stock/ai-check.d.ts CHANGED
@@ -56,6 +56,14 @@ export declare const aiCallTimeoutMs: (sent: readonly AiInput[]) => number;
56
56
  * which the code turns into an error fact (the rubric's `onError`) — an unreadable photo is not
57
57
  * evidence of anything, so it must never become `valid:false` and a gate reject.
58
58
  *
59
+ * STRICTNESS is the rubric's, not this prefix's (2026-10-21). The prefix used to say "do not give
60
+ * benefit of the doubt", which overrode every rubric that asks for leniency (the OpenHands
61
+ * bridge's "a dim or low-resolution photo is still evidence … let your score carry the doubt").
62
+ * So it is neutral: each rule is judged as its own text states it, lenient where it says so,
63
+ * failing on doubt where it says so, and a rule silent on doubt fails when the inputs do not show
64
+ * what it requires. It adds no rule of its own either — a screen or a print is not a real photo
65
+ * only where a rule asks for one.
66
+ *
59
67
  * COMPARISON is the one variant of the prefix, added when two or more images reach the model (a
60
68
  * before/after pair): the work being judged changes the subject between the photos, so an
61
69
  * expected change (cleaner, a colour revealed, other light) must not read as a different subject —
package/dist/lib/facts/stock/ai-check.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"ai-check.d.ts","sourceRoot":"","sources":["../../../../src/lib/facts/stock/ai-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAc,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,KAAK,OAAO,EAUb,MAAM,aAAa,CAAC;AAarB,qGAAqG;AACrG,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AAQxD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QAAY,CAAC;AAC5C,eAAO,MAAM,uBAAuB,QAAgB,CAAC;AACrD,eAAO,MAAM,eAAe,SAAU,SAAS,OAAO,EAAE,KAAG,MAGnC,CAAC;AAMzB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EACvC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GAClC,MAAM,CAuCR;AAmED,iGAAiG;AACjG,MAAM,MAAM,SAAS,GAAG,IAAI,CAC1B,YAAY,EACZ,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,KAAK,CAC/F,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAM1F;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE;IACL,KAAK,EAAE,WAAW,CAAC;IACnB,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC7B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,EACD,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,CAsXjB"}
1
+ {"version":3,"file":"ai-check.d.ts","sourceRoot":"","sources":["../../../../src/lib/facts/stock/ai-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAc,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,KAAK,OAAO,EAUb,MAAM,aAAa,CAAC;AAarB,qGAAqG;AACrG,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AAQxD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QAAY,CAAC;AAC5C,eAAO,MAAM,uBAAuB,QAAgB,CAAC;AACrD,eAAO,MAAM,eAAe,SAAU,SAAS,OAAO,EAAE,KAAG,MAGnC,CAAC;AAMzB;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EACvC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GAClC,MAAM,CAuCR;AAmED,iGAAiG;AACjG,MAAM,MAAM,SAAS,GAAG,IAAI,CAC1B,YAAY,EACZ,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,KAAK,CAC/F,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAM1F;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE;IACL,KAAK,EAAE,WAAW,CAAC;IACnB,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC7B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,EACD,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,MAAM,CAAC,CAsXjB"}
package/dist/lib/facts/stock/ai-check.js CHANGED
@@ -59,6 +59,14 @@ const ruleId = (i) => `R${i + 1}`;
59
59
  * which the code turns into an error fact (the rubric's `onError`) — an unreadable photo is not
60
60
  * evidence of anything, so it must never become `valid:false` and a gate reject.
61
61
  *
62
+ * STRICTNESS is the rubric's, not this prefix's (2026-10-21). The prefix used to say "do not give
63
+ * benefit of the doubt", which overrode every rubric that asks for leniency (the OpenHands
64
+ * bridge's "a dim or low-resolution photo is still evidence … let your score carry the doubt").
65
+ * So it is neutral: each rule is judged as its own text states it, lenient where it says so,
66
+ * failing on doubt where it says so, and a rule silent on doubt fails when the inputs do not show
67
+ * what it requires. It adds no rule of its own either — a screen or a print is not a real photo
68
+ * only where a rule asks for one.
69
+ *
62
70
  * COMPARISON is the one variant of the prefix, added when two or more images reach the model (a
63
71
  * before/after pair): the work being judged changes the subject between the photos, so an
64
72
  * expected change (cleaner, a colour revealed, other light) must not read as a different subject —
@@ -67,7 +75,7 @@ const ruleId = (i) => `R${i + 1}`;
67
75
  export function aiSystemPrompt(check, opts = {}) {
68
76
  const rules = check.instructions.map((rule, i) => `[${ruleId(i)}] ${rule}`).join("\n");
69
77
  return [
70
- "You are a strict compliance evaluator. You receive one or more INPUTS (text, images, documents) and a numbered ruleset. You decide whether the inputs satisfy EVERY rule.",
78
+ "You are a compliance evaluator. You receive one or more INPUTS (text, images, documents) and a numbered ruleset. You decide whether the inputs satisfy EVERY rule.",
71
79
  "",
72
80
  "INPUTS",
73
81
  "Each input is labeled [INPUT 1: <kind>], [INPUT 2: <kind>], and so on. For an image or document the label also states the file's name and MIME type, e.g. [INPUT 1: file — filename: \"report.pdf\", type: application/pdf] — a rule about a file's name or file type is judged from that label. A rule may target a specific input by number, or apply to all of them. If a rule names an input that was not provided, that rule FAILS.",
@@ -85,9 +93,9 @@ export function aiSystemPrompt(check, opts = {}) {
85
93
  "",
86
94
  "VERDICT POLICY",
87
95
  "- valid = true only if ZERO rules fail and ZERO are undeterminable.",
88
- "- Judge what is present. Do not infer intent, context, or missing content.",
89
- "- Do not give benefit of the doubt. If the inputs are readable and a rule requires something they do not show, that rule FAILS.",
90
- "- If an input is too blurred, dark, cropped, truncated or otherwise unreadable to judge a rule either way, that rule is UNDETERMINABLE: list it in `undeterminable_rules`, never in `failed_rules`. Undeterminable means the evidence cannot be read, never that the answer is unwelcome or uncertain; a readable input you are unsure about is judged and scored.",
96
+ "- Judge each rule exactly as its own text states it, against what is present in the inputs. Add no requirement a rule does not state, and drop none it does.",
97
+ "- How strict to be is the ruleset's to say, not yours. Where a rule tells you to be lenient, to read evidence generously, or to let doubt lower your score rather than fail, do that. Where a rule tells you to fail on doubt, or on anything missing, fail. Where a rule says neither, it fails when the inputs do not show what it requires.",
98
+ "- If an input cannot be read well enough to judge a rule either way — even read the way the ruleset says to read it — that rule is UNDETERMINABLE: list it in `undeterminable_rules`, never in `failed_rules`. Undeterminable means the evidence cannot be read, never that the answer is unwelcome or uncertain; a readable input you are unsure about is judged and scored.",
91
99
  "",
92
100
  ...(opts.comparison ? COMPARISON : []),
93
101
  "SCORE (0-100)",
package/dist/lib/facts/stock/ai-check.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"ai-check.js","sourceRoot":"","sources":["../../../../src/lib/facts/stock/ai-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEvF,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAK7E,OAAO,EAEL,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,aAAa,EACb,cAAc,EACd,QAAQ,EAER,qBAAqB,EACrB,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAEhB,gBAAgB,EAChB,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAW7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAExD;;;GAGG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAwB,EAAU,EAAE,CAClE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;IAC7E,CAAC,CAAC,uBAAuB;IACzB,CAAC,CAAC,kBAAkB,CAAC;AAEzB;4CAC4C;AAC5C,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAElD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAuC,EACvC,IAAI,GAA6B,EAAE;IAEnC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,OAAO;QACL,2KAA2K;QAC3K,EAAE;QACF,QAAQ;QACR,0aAA0a;QAC1a,8UAA8U;QAC9U,maAAma;QACna,EAAE;QACF,eAAe;QACf,yPAAyP;QACzP,mZAAmZ;QACnZ,EAAE;QACF,QAAQ;QACR,uFAAuF;QACvF,6LAA6L;QAC7L,gCAAgC;QAChC,EAAE;QACF,gBAAgB;QAChB,qEAAqE;QACrE,4EAA4E;QAC5E,iIAAiI;QACjI,oWAAoW;QACpW,EAAE;QACF,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,eAAe;QACf,oGAAoG;QACpG,2DAA2D;QAC3D,uDAAuD;QACvD,+DAA+D;QAC/D,uDAAuD;QACvD,2EAA2E;QAC3E,EAAE;QACF,wEAAwE;QACxE,EAAE;QACF,SAAS;QACT,KAAK;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,GAAG;IACjB,YAAY;IACZ,keAAke;IACle,iOAAiO;IACjO,EAAE;CACH,CAAC;AAEF;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAClC,GAAW,EACX,KAAmB;IAEnB,IAAI,CAAC;QACH,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,wFAAwF;QACxF,8CAA8C;QAC9C,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,IAAI,SAAS,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe;IACtB,MAAM,UAAU,GAA4B;QAC1C,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAC1D,oBAAoB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAClE,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,iEAAiE;SAC/E;KACF,CAAC;IACF,UAAU,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvC,UAAU,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YACjC,oBAAoB,EAAE,KAAK;SAC5B;KACF,CAAC;AACJ,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAmB,EAAE,IAAe;IACvE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC9C,OAAO,cAAc,CACnB,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,EAClF,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAQC,EACD,IAAe;IAEf,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,EAAE,uBAAuB,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;IAExD,MAAM,WAAW,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,OAAO;QACf,OAAO;QACP,MAAM;QACN,UAAU,EAAE;YACV,OAAO,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;YACpE,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,CAAC;SACb;KACF,CAAC,CAAC;IAEH,gHAAgH;IAChH,+FAA+F;IAC/F,0FAA0F;IAC1F,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa;QAAE,OAAO,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAE3E,kGAAkG;IAClG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEvB,2FAA2F;IAC3F,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,gFAAgF;IAChF,MAAM,YAAY,GAChB,EAAE,CAAC;IACL,6EAA6E;IAC7E,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;aACjC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7B,0FAA0F;QAC1F,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACrF,IAAI,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,0FAA0F;QAC1F,iFAAiF;QACjF,MAAM,KAAK,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QACpF,8FAA8F;QAC9F,yCAAyC;QACzC,MAAM,OAAO,GAAG,QAAQ,KAAK,YAAY,IAAI,IAAI,KAAK,KAAK,CAAC;QAC5D,+FAA+F;QAC/F,kFAAkF;QAClF,MAAM,GAAG,GACP,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ;YACxD,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,uBAAuB,CAAC;QAC9B,IAAI,KAAK,GAAsB,IAAI,CAAC;QACpC,IAAI,OAA2B,CAAC;QAChC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,GAAG,6CAA6C,CAAC;QAC1D,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;YACpD,OAAO,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzE,CAAC;aAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACZ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;gBACnB,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,sDAAsD;gBACrF,wFAAwF;gBACxF,wDAAwD;gBACxD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;oBAClE,OAAO,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,QAAQ,CAAC,uBAAuB,CAAC,QAAQ,CAAC;gBACjG,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACvC,qFAAqF;gBACrF,oEAAoE;gBACpE,OAAO,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,iFAAiF;gBACjF,OAAO,WAAW,CAAC,mBAAmB,KAAK,CAAC,GAAG,yCAAyC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO;YAAE,MAAM,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CACT,MAAM,qBAAqB,CAAC;YAC1B,UAAU,EAAE,GAAG;YACf,IAAI;YACJ,KAAK;YACL,OAAO;YACP,WAAW,EAAE,eAAe;SAC7B,CAAC,CACH,CAAC;QAEF,2FAA2F;QAC3F,iGAAiG;QACjG,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,IAAI,gBAAgB,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACvF,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,qBAAqB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7E,IAAI,QAAQ,EAAE,CAAC;gBACb,YAAY,CAAC,IAAI,CAAC;oBAChB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,GAAG,CAAC,SAAS;oBACvB,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,kGAAkG;IAClG,sFAAsF;IACtF,wFAAwF;IACxF,4FAA4F;IAC5F,yCAAyC;IACzC,MAAM,QAAQ,GAA0C,EAAE,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,mBAAmB,CACpC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC7D,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,QAAQ,CACb,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,GAAG,CAAC,GAAG,sEAAsE,MAAM,GAAG,KAAK,EAAE,CAAC;YACvH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACzC,KAAK,EAAE,IAAI;gBACX,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;gBACzB,GAAG,EAAE,GAAG,CAAC,GAAG;aACb,CAAC,CAAC;YACH,MAAM,UAAU,GAAe;gBAC7B,OAAO,EAAE,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBACjF,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;gBACrD,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,QAAQ;aACrB,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,KAAK,EAAE,+DAA+D;gBAC7E,MAAM;gBACN,WAAW,EAAE,EAAE;gBACf,KAAK,EAAE,GAAG,EAAE,mCAAmC;gBAC/C,UAAU;aACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM,aAAa,GAAG,CAAC,IAAmC,EAAa,EAAE;QACvE,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,sFAAsF;IACtF,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAiB,gBAAgB,CAAC,IAAI,EAAE;QACpD,KAAK;QACL,yFAAyF;QACzF,MAAM,EAAE,cAAc,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QACrE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,4BAA4B;QAChE,MAAM,EAAE,eAAe,EAAE;QACzB,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;QACjD,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAMvC,IAAI,EACJ,QAAQ,CAAC,GAAG,EACZ,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,OAAO,EAChB,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAC1C,CAAC,MAAM,EAAE,EAAE;QACT,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAC5E,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QACpE,CAAC;QACD,MAAM,cAAc,GAAG,GAAG,CAAC,oBAAoB,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,KAAK,GAAG,uBAAuB,EAAE,CAAC;YACpC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,cAAc,KAAK,cAAc,uBAAuB,QAAQ;aACzE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACL,WAAW,EAAE,MAAkB;gBAC/B,cAAc,EAAE,cAA0B;gBAC1C,KAAK;gBACL,WAAW,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;aACzF;SACF,CAAC;IACJ,CAAC;IACD,2FAA2F;IAC3F,6FAA6F;IAC7F,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,EAC/B,QAAQ,CAAC,IAAI,CACd,CAAC;IAEF,kGAAkG;IAClG,+FAA+F;IAC/F,kGAAkG;IAClG,gFAAgF;IAChF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAe;QAC7B,GAAG,OAAO,CAAC,UAAU;QACrB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,KAAK,EAAE,MAAM;QACb,KAAK,EACH,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAC7B,CAAC,CAAC;gBACE,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB;YACH,CAAC,CAAC,IAAI;KACX,CAAC;IACF,oEAAoE;IACpE,WAAW,CAAC,IAAI,EAAE;QAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK;QACL,IAAI,EAAE,IAAI;QACV,MAAM;QACN,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC;QACvC,KAAK;KACN,CAAC,CAAC;IAEH,yFAAyF;IACzF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,4FAA4F;QAC5F,MAAM,uBAAuB,CAC3B,IAAI,EACJ,QAAQ,CAAC,QAAQ,EACjB,OAAO,CAAC,MAAM,EACd,YAAY,EACZ,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAClC,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,+FAA+F;IAC/F,6FAA6F;IAC7F,8FAA8F;IAC9F,cAAc;IACd,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CACzF,gBAAgB,CACjB,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;YACvC,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY;YACZ,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,WAAW,CACxB,aAAa,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAClC,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;YAChC,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;YAC/B,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,IAAI;YACvC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1E,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAU,EAAE;QACtC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC;IAC9D,CAAC,CAAC;IAEF,gGAAgG;IAChG,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,mBAAmB,cAAc;aAC7C,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;aACtC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC1C,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,cAAc;YACd,MAAM,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;SACjC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,6BAA6B;IACrE,MAAM,MAAM,GACV,WAAW;QACX,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YACvB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3E,uFAAuF;IACvF,+FAA+F;IAC/F,MAAM,OAAO,GAAe;QAC1B,GAAG,UAAU;QACb,QAAQ,EAAE;YACR,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG;YAC1C,IAAI,EAAE;gBACJ,OAAO,EAAE;oBACP,YAAY,EAAE,WAAW;oBACzB,MAAM;oBACN,KAAK;oBACL,KAAK;iBACN;aACF;SACF;KACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;QAC3B,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE;QAC/C,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;QAC7B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;KACrC,CAAC,CAAC;IACH,6FAA6F;IAC7F,qFAAqF;IACrF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC1E,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,KAAK;QACZ,MAAM;QACN,WAAW;QACX,KAAK;QACL,UAAU,EAAE,OAAO;KACpB,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"ai-check.js","sourceRoot":"","sources":["../../../../src/lib/facts/stock/ai-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEvF,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAK7E,OAAO,EAEL,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,aAAa,EACb,cAAc,EACd,QAAQ,EAER,qBAAqB,EACrB,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAEhB,gBAAgB,EAChB,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAW7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAExD;;;GAGG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAwB,EAAU,EAAE,CAClE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;IAC7E,CAAC,CAAC,uBAAuB;IACzB,CAAC,CAAC,kBAAkB,CAAC;AAEzB;4CAC4C;AAC5C,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAuC,EACvC,IAAI,GAA6B,EAAE;IAEnC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,OAAO;QACL,oKAAoK;QACpK,EAAE;QACF,QAAQ;QACR,0aAA0a;QAC1a,8UAA8U;QAC9U,maAAma;QACna,EAAE;QACF,eAAe;QACf,yPAAyP;QACzP,mZAAmZ;QACnZ,EAAE;QACF,QAAQ;QACR,uFAAuF;QACvF,6LAA6L;QAC7L,gCAAgC;QAChC,EAAE;QACF,gBAAgB;QAChB,qEAAqE;QACrE,8JAA8J;QAC9J,gVAAgV;QAChV,+WAA+W;QAC/W,EAAE;QACF,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,eAAe;QACf,oGAAoG;QACpG,2DAA2D;QAC3D,uDAAuD;QACvD,+DAA+D;QAC/D,uDAAuD;QACvD,2EAA2E;QAC3E,EAAE;QACF,wEAAwE;QACxE,EAAE;QACF,SAAS;QACT,KAAK;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,GAAG;IACjB,YAAY;IACZ,keAAke;IACle,iOAAiO;IACjO,EAAE;CACH,CAAC;AAEF;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAClC,GAAW,EACX,KAAmB;IAEnB,IAAI,CAAC;QACH,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,wFAAwF;QACxF,8CAA8C;QAC9C,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,IAAI,SAAS,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe;IACtB,MAAM,UAAU,GAA4B;QAC1C,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAC1D,oBAAoB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAClE,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,iEAAiE;SAC/E;KACF,CAAC;IACF,UAAU,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvC,UAAU,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YACjC,oBAAoB,EAAE,KAAK;SAC5B;KACF,CAAC;AACJ,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAmB,EAAE,IAAe;IACvE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC9C,OAAO,cAAc,CACnB,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,EAClF,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAQC,EACD,IAAe;IAEf,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,EAAE,uBAAuB,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;IAExD,MAAM,WAAW,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,OAAO;QACf,OAAO;QACP,MAAM;QACN,UAAU,EAAE;YACV,OAAO,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;YACpE,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,CAAC;SACb;KACF,CAAC,CAAC;IAEH,gHAAgH;IAChH,+FAA+F;IAC/F,0FAA0F;IAC1F,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa;QAAE,OAAO,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAE3E,kGAAkG;IAClG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEvB,2FAA2F;IAC3F,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,gFAAgF;IAChF,MAAM,YAAY,GAChB,EAAE,CAAC;IACL,6EAA6E;IAC7E,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;aACjC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7B,0FAA0F;QAC1F,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACrF,IAAI,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,0FAA0F;QAC1F,iFAAiF;QACjF,MAAM,KAAK,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QACpF,8FAA8F;QAC9F,yCAAyC;QACzC,MAAM,OAAO,GAAG,QAAQ,KAAK,YAAY,IAAI,IAAI,KAAK,KAAK,CAAC;QAC5D,+FAA+F;QAC/F,kFAAkF;QAClF,MAAM,GAAG,GACP,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ;YACxD,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,uBAAuB,CAAC;QAC9B,IAAI,KAAK,GAAsB,IAAI,CAAC;QACpC,IAAI,OAA2B,CAAC;QAChC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,GAAG,6CAA6C,CAAC;QAC1D,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;YACpD,OAAO,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzE,CAAC;aAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACZ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;gBACnB,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,sDAAsD;gBACrF,wFAAwF;gBACxF,wDAAwD;gBACxD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;oBAClE,OAAO,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,QAAQ,CAAC,uBAAuB,CAAC,QAAQ,CAAC;gBACjG,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACvC,qFAAqF;gBACrF,oEAAoE;gBACpE,OAAO,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,iFAAiF;gBACjF,OAAO,WAAW,CAAC,mBAAmB,KAAK,CAAC,GAAG,yCAAyC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO;YAAE,MAAM,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CACT,MAAM,qBAAqB,CAAC;YAC1B,UAAU,EAAE,GAAG;YACf,IAAI;YACJ,KAAK;YACL,OAAO;YACP,WAAW,EAAE,eAAe;SAC7B,CAAC,CACH,CAAC;QAEF,2FAA2F;QAC3F,iGAAiG;QACjG,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,IAAI,gBAAgB,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACvF,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,qBAAqB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7E,IAAI,QAAQ,EAAE,CAAC;gBACb,YAAY,CAAC,IAAI,CAAC;oBAChB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,GAAG,CAAC,SAAS;oBACvB,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,kGAAkG;IAClG,sFAAsF;IACtF,wFAAwF;IACxF,4FAA4F;IAC5F,yCAAyC;IACzC,MAAM,QAAQ,GAA0C,EAAE,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,mBAAmB,CACpC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC7D,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,QAAQ,CACb,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,GAAG,CAAC,GAAG,sEAAsE,MAAM,GAAG,KAAK,EAAE,CAAC;YACvH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACzC,KAAK,EAAE,IAAI;gBACX,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;gBACzB,GAAG,EAAE,GAAG,CAAC,GAAG;aACb,CAAC,CAAC;YACH,MAAM,UAAU,GAAe;gBAC7B,OAAO,EAAE,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBACjF,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;gBACrD,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,QAAQ;aACrB,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,KAAK,EAAE,+DAA+D;gBAC7E,MAAM;gBACN,WAAW,EAAE,EAAE;gBACf,KAAK,EAAE,GAAG,EAAE,mCAAmC;gBAC/C,UAAU;aACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM,aAAa,GAAG,CAAC,IAAmC,EAAa,EAAE;QACvE,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,sFAAsF;IACtF,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAiB,gBAAgB,CAAC,IAAI,EAAE;QACpD,KAAK;QACL,yFAAyF;QACzF,MAAM,EAAE,cAAc,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QACrE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,4BAA4B;QAChE,MAAM,EAAE,eAAe,EAAE;QACzB,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;QACjD,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAMvC,IAAI,EACJ,QAAQ,CAAC,GAAG,EACZ,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,OAAO,EAChB,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAC1C,CAAC,MAAM,EAAE,EAAE;QACT,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAC5E,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QACpE,CAAC;QACD,MAAM,cAAc,GAAG,GAAG,CAAC,oBAAoB,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,KAAK,GAAG,uBAAuB,EAAE,CAAC;YACpC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,cAAc,KAAK,cAAc,uBAAuB,QAAQ;aACzE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACL,WAAW,EAAE,MAAkB;gBAC/B,cAAc,EAAE,cAA0B;gBAC1C,KAAK;gBACL,WAAW,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;aACzF;SACF,CAAC;IACJ,CAAC;IACD,2FAA2F;IAC3F,6FAA6F;IAC7F,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,EAC/B,QAAQ,CAAC,IAAI,CACd,CAAC;IAEF,kGAAkG;IAClG,+FAA+F;IAC/F,kGAAkG;IAClG,gFAAgF;IAChF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAe;QAC7B,GAAG,OAAO,CAAC,UAAU;QACrB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,KAAK,EAAE,MAAM;QACb,KAAK,EACH,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAC7B,CAAC,CAAC;gBACE,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB;YACH,CAAC,CAAC,IAAI;KACX,CAAC;IACF,oEAAoE;IACpE,WAAW,CAAC,IAAI,EAAE;QAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK;QACL,IAAI,EAAE,IAAI;QACV,MAAM;QACN,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC;QACvC,KAAK;KACN,CAAC,CAAC;IAEH,yFAAyF;IACzF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,4FAA4F;QAC5F,MAAM,uBAAuB,CAC3B,IAAI,EACJ,QAAQ,CAAC,QAAQ,EACjB,OAAO,CAAC,MAAM,EACd,YAAY,EACZ,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAClC,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,+FAA+F;IAC/F,6FAA6F;IAC7F,8FAA8F;IAC9F,cAAc;IACd,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CACzF,gBAAgB,CACjB,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;YACvC,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY;YACZ,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,WAAW,CACxB,aAAa,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAClC,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;YAChC,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;YAC/B,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,IAAI;YACvC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1E,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAU,EAAE;QACtC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC;IAC9D,CAAC,CAAC;IAEF,gGAAgG;IAChG,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,mBAAmB,cAAc;aAC7C,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;aACtC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC1C,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,cAAc;YACd,MAAM,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;SACjC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,6BAA6B;IACrE,MAAM,MAAM,GACV,WAAW;QACX,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YACvB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3E,uFAAuF;IACvF,+FAA+F;IAC/F,MAAM,OAAO,GAAe;QAC1B,GAAG,UAAU;QACb,QAAQ,EAAE;YACR,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG;YAC1C,IAAI,EAAE;gBACJ,OAAO,EAAE;oBACP,YAAY,EAAE,WAAW;oBACzB,MAAM;oBACN,KAAK;oBACL,KAAK;iBACN;aACF;SACF;KACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;QAC3B,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE;QAC/C,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;QAC7B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;KACrC,CAAC,CAAC;IACH,6FAA6F;IAC7F,qFAAqF;IACrF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC1E,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,KAAK;QACZ,MAAM;QACN,WAAW;QACX,KAAK;QACL,UAAU,EAAE,OAAO;KACpB,CAAC;AACJ,CAAC"}
package/docs/api.md CHANGED
@@ -1021,6 +1021,11 @@ numbered ruleset appended, the typed inputs last, strict structured output.
1021
1021
 
1022
1022
  - **Policy gate:** `settings.allowAiChecks === false` ⇒ returns `error / ai-checks-disabled` with
1023
1023
  **no model call**. Never approve on a check that did not run.
1024
+ - **Strictness is your rules':** the prompt judges each rule exactly as its text states it and adds
1025
+ no rule of its own. A rule that says to be lenient (a dim photo is still evidence, let doubt lower
1026
+ the score rather than fail) is judged leniently; a rule that says to fail on doubt fails on doubt;
1027
+ a rule silent on it fails when the inputs do not show what it requires. A check for screens,
1028
+ prints or generated images runs only where one of your rules asks for a real photo.
1024
1029
  - **Model:** `opts.model` overrides the pinned `AI_CHECK_MODEL`.
1025
1030
  - **Images:** sent at the pinned `AI_IMAGE_DETAIL` (default `high`), and the transcript records it.
1026
1031
  - **Provider:** `AI_PROVIDER` — the Cloudflare AI Gateway (the `AI` binding + `AI_GATEWAY_ID`) by
@@ -1034,8 +1039,8 @@ numbered ruleset appended, the typed inputs last, strict structured output.
1034
1039
  two calls under one name can never collide on the provider's cache.
1035
1040
  - **Three outcomes per rule:** the strict schema is `{ failed_rules, undeterminable_rules, reason,
1036
1041
  valid, score }`. A rule the readable evidence refutes **fails**; a rule the model cannot judge
1037
- either way because an input is too blurred, dark, cropped, truncated or not sent is
1038
- **undeterminable**. Any undeterminable rule makes the fact an `error` (the rubric's `onError`,
1042
+ either way because an input is too blurred, dark, cropped, truncated or not sent — even read the
1043
+ way your rules say to read it — is **undeterminable**. Any undeterminable rule makes the fact an `error` (the rubric's `onError`,
1039
1044
  detail `undeterminable: R1 (<rule text>) — <model reason>`), never `valid: false`, even when
1040
1045
  another rule failed: an unreadable photo is not evidence that the work was not done.
1041
1046
  - **Comparison guidance:** when two or more images reach the model (a before/after pair), the
@@ -1624,7 +1629,7 @@ once deployed. Every value is validated by Zod at isolate start, so a bad env fa
1624
1629
  | `EVAL_ENGINE_HOSTNAME` | vars | per network | The engine you ask for decisions. A host you **call** — its `did:web` is the invocation audience. Set it for a local engine or a tunnel |
1625
1630
  | `CLAIM_BOT_URL_OVERRIDE` | `.dev.vars` | derived | Local harnesses only — the bot URL is normally derived as `https://claim.bot.<homeserver domain>` |
1626
1631
  | `IXO_CLIENT_SEQUENCE_MIN_DELAY_MS` | vars | `1000` | Read by the sequence keeper off `env`: the minimum gap between two sequence allocations |
1627
- | `ORACLE_HOSTNAME` | vars | **required** | *Your* canonical `did:web` host. Every inbound invocation's audience is pinned to this, never the request `Host`; it is also the issuer of every invocation you mint. It must equal the Custom Domain in `routes` for that env |
1632
+ | `ORACLE_HOSTNAME` | vars | **required** | *Your* canonical `did:web` host. Every inbound invocation's audience is pinned to this, never the request `Host`; it is also the issuer of every invocation you mint. It must equal the Custom Domain in `routes` for that env, or, with no `routes`, the env's `<worker>.<account>.workers.dev` host |
1628
1633
  | `ORACLE_DID` | vars | **required** | `did:ixo:<address>` — the runtime chain identity |
1629
1634
  | `ORACLE_ADDRESS` | vars | **required** | Must be the `ORACLE_SECP_MNEMONIC` wallet's address — asserted at first use, fails loud |
1630
1635
  | `ORACLE_MATRIX_USER_ID` | vars | **required** | The MXID derived from `ORACLE_DID` (cross-checked, never re-derived) |
package/docs/guide.md CHANGED
@@ -103,9 +103,12 @@ asserted against the mnemonic before the first signature: a hand-typed one that
103
103
  never signs as someone else.
104
104
 
105
105
  Also set, in `wrangler.jsonc` `vars`: `IXO_NETWORK`, and `ORACLE_HOSTNAME` — the host your
106
- `did:web` is served from (`localhost:8787` while developing). **It must equal the Custom Domain in
107
- `routes` for any environment you deploy**, because callers resolve you by fetching
108
- `https://<host>/.well-known/did.json`. And in `.dev.vars`: `UNIQUE_HMAC_KEY`, any long random
106
+ `did:web` is served from (`localhost:8787` while developing). **It must be the host each
107
+ environment you deploy is served from**, because callers resolve you by fetching
108
+ `https://<host>/.well-known/did.json`. A custom domain is optional: delete that env's `routes`
109
+ entry and the Worker is served on its free `<worker name>.<account subdomain>.workers.dev` host —
110
+ set `ORACLE_HOSTNAME` to that. With a custom domain, it must equal the Custom Domain in `routes`.
111
+ Pick the host before `oracle init` (§10): it is the oracle's identity. And in `.dev.vars`: `UNIQUE_HMAC_KEY`, any long random
109
112
  string, if the rubric you serve declares a `unique` rule.
110
113
 
111
114
  Both of these keys are, at this point, only strings in your files. `decision-oracle oracle init` (§10)
@@ -241,7 +244,7 @@ every name you leave alone is a name that cannot have a bug.
241
244
  | --- | --- | --- |
242
245
  | `ext.<name>` | The declared endpoint accepts a self-signed UCAN POST (the resolved `send` map plus the whole claim body under `claimBody`; audience the endpoint's own did:web, capability `ixo:external-source`) and answers the strict `{ valid: boolean }` / `{ score: 0..10000 }` contract. An outage (5xx, 429, timeout) retries the workflow step and is never frozen as a verdict; only a 4xx refusal or a malformed answer becomes an error fact | It is a vendor API with different auth, capability or response shape · it needs your own system, database or secret · its `send` map reads a `~derived` value, or its `audience` is not the endpoint's did:web (the stock lane always answers either `error`) |
243
246
  | `ext.<name>` + a geo handler (`withinRadius`, `located`, `beforeAfter` from `@ixo/decision-oracle/facts`) | The rubric asks where or when a photo was taken. Missing GPS or capture time is an error (your `onError`), never `false`; the evidence grade (`camera` / `browser-reported` / `claim`) is in the reason. Send per-photo `capturedAt.{before,after}` from your form for phones that strip EXIF ([api.md](./api.md#geo-evidence-grades-and-capturedat)) | You need a different source ladder or a stricter grade |
244
- | `ai.<name>` | A plain stock AI judgment against the rubric's own `instructions` is what the author meant. Evidence the model cannot read (too dark, blurred, cropped) is an error (your `onError`), never a failed rule; a before/after pair is judged knowing the work changes the subject | A different model or vision vendor is required · the inputs need re-slicing or a pre-check (a missing photo, an unreadable file) · `send` reads a `~derived` value |
247
+ | `ai.<name>` | A plain stock AI judgment against the rubric's own `instructions` is what the author meant. The judge is as strict or as lenient as the instructions say, no more. Evidence the model cannot read (too dark, blurred, cropped) is an error (your `onError`), never a failed rule; a before/after pair is judged knowing the work changes the subject | A different model or vision vendor is required · the inputs need re-slicing or a pre-check (a missing photo, an unreadable file) · `send` reads a `~derived` value |
245
248
  | `unique` | Always — this oracle's own D1 registries, a keyed body digest, CID and perceptual-hash attachment lanes, a JS trigram near-text lane and the gray-zone same-event judge. Only claims registered earlier count, and a claim that never reached a decision (failed ingest, `invalid_facts`, a content refusal) never blocks a resubmission | Only a wholly different duplicate strategy, e.g. a vendor registry you already run. The `UniqueFact` shape is still fixed |
246
249
  | `frequency` | Always — one Blocksync submission count over the claim's own UTC calendar window (a failed read retries the step, never freezes `unresolved`) | Same: only when the count lives somewhere else |
247
250
  | `sizeProbes` | Always — the package probes the named roots itself | Never; not a handler's concern |
@@ -983,8 +986,9 @@ Before shipping an environment, check all four:
983
986
 
984
987
  1. the **D1 and KV ids** in that env's block are real (named envs inherit nothing — every binding
985
988
  and the whole `vars` block is redeclared per env);
986
- 2. the **Custom Domain** in `routes` equals that env's `ORACLE_HOSTNAME`, character for character —
987
- callers resolve your `did:web` by fetching it;
989
+ 2. that env's `ORACLE_HOSTNAME` is, character for character, the host it is served from — the
990
+ **Custom Domain** in `routes`, or, with no `routes`, its `workers.dev` host — callers resolve
991
+ your `did:web` by fetching it;
988
992
  3. every **secret** is set with `wrangler secret put` for that env — including
989
993
  `ORACLE_MATRIX_ACCESS_TOKEN`, the one `oracle init` wrote into your local `.dev.vars`
990
994
  (`wrangler secret put ORACLE_MATRIX_ACCESS_TOKEN`, then paste it);
@@ -1529,7 +1533,7 @@ own retries, and a terminal failure clears it.
1529
1533
 
1530
1534
  | Symptom | Cause | Fix |
1531
1535
  | --- | --- | --- |
1532
- | `401` on any `/v1` call | The invocation's audience is not `did:web:<ORACLE_HOSTNAME>`, or `/.well-known/did.json` is not served from that host | Make `ORACLE_HOSTNAME`, the Custom Domain and the audience the same string. Check `SERVICE_ED25519_MNEMONIC` is set |
1536
+ | `401` on any `/v1` call | The invocation's audience is not `did:web:<ORACLE_HOSTNAME>`, or `/.well-known/did.json` is not served from that host | Make `ORACLE_HOSTNAME`, the served host (Custom Domain or `workers.dev`) and the audience the same string. Check `SERVICE_ED25519_MNEMONIC` is set |
1533
1537
  | `401` from the claim bot, the UCAN Store or the VFS claims lane (`claim.store-denied`), on an invocation minted as `did:ixo:…` | That DID has no IID document, or the `SERVICE_ED25519_MNEMONIC` key is not a verification method on it — the resolver has nothing to check the signature against | Re-run `oracle init --protocol <protocol did> --kit-url https://<your host> --yes`: every step already done says `skip`, so only the missing `iid` / `key` writes anything. (`--protocol` and `--kit-url` are always required, and `--only <step>` without `--yes` is still just a dry run) |
1534
1538
  | `bunx @ixo/decision-oracle@<version>` says `No version matching … found (but package exists)` right after a release | bun's cached copy of the package list is older than the release | `bun pm cache rm`, then run it again — or `BUN_INSTALL_CACHE_DIR=$(mktemp -d) bunx @ixo/decision-oracle@<version> …` |
1535
1539
  | A protocol shows as "Unnamed" in the portal, the console or the Openhands app | It has no `#pro` profile: `publish-protocol` writes one only with `--name` | `publish-protocol --phase profile --entity <protocol did> --rubric <file> --form <file> --name "<name>" [--description "<text>"] --yes` |
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ixo/decision-oracle",
3
- "version": "0.2.20",
3
+ "version": "0.2.22",
4
4
  "license": "Apache-2.0",
5
5
  "description": "Run an IXO evaluation oracle: pull claims, produce facts with your handlers, let the decision engine decide, sign on chain",
6
6
  "keywords": [
@@ -12,14 +12,7 @@
12
12
  "hono",
13
13
  "d1"
14
14
  ],
15
- "repository": {
16
- "type": "git",
17
- "url": "git+https://github.com/ixoworld/eval-oralce.git"
18
- },
19
- "bugs": {
20
- "url": "https://github.com/ixoworld/eval-oralce/issues"
21
- },
22
- "homepage": "https://github.com/ixoworld/eval-oralce#readme",
15
+ "homepage": "https://docs.ixo.world/build-an-oracle/decision-oracle",
23
16
  "type": "module",
24
17
  "exports": {
25
18
  ".": {
package/skills/create-oracle/SKILL.md CHANGED
@@ -97,8 +97,14 @@ it in an agent session, or the mnemonic lands in the transcript.
97
97
  `wrangler.jsonc` `vars` (top level and every env), not `.dev.vars`.
98
98
 
99
99
  `ORACLE_HOSTNAME` (the host the did:web is served from) is `localhost:8787` in `.dev.vars` for local
100
- dev ONLY. Each deployed env's host lives in that env's `wrangler.jsonc` `vars` and must equal its
101
- Custom Domain in `routes`; a per-env secrets file (`.dev.vars.<env>`) must NOT carry a localhost
100
+ dev ONLY. Each deployed env's host lives in that env's `wrangler.jsonc` `vars` and must be the
101
+ host that env is served from. **A custom domain is optional**: without one, delete that env's
102
+ `routes` entry (with no `routes`, wrangler serves the Worker on `workers.dev`; `"workers_dev": true`
103
+ says so explicitly) and set `ORACLE_HOSTNAME` to the free `<worker name>.<account subdomain>.workers.dev`
104
+ host — the env's `name` (e.g. `<project>-devnet`) plus the account's workers.dev subdomain
105
+ (dashboard → Workers & Pages; the first deploy prints the URL). With a custom domain,
106
+ `ORACLE_HOSTNAME` must equal the Custom Domain in `routes`. Choose before `oracle init`: the host IS
107
+ the did:web, so changing it later is a new identity. A per-env secrets file (`.dev.vars.<env>`) must NOT carry a localhost
102
108
  `ORACLE_HOSTNAME`, or `engine register --env-file .dev.vars.<env>` registers localhost. Also put
103
109
  `UNIQUE_HMAC_KEY` in `.dev.vars` (any long random string; rotating it orphans every registered
104
110
  duplicate digest). `derive "<existing mnemonic>"` uses a wallet the provider already holds instead of
@@ -322,8 +328,9 @@ bun run deploy:devnet # or deploy:testnet / deploy:production (`--env
322
328
  wrangler secret put ORACLE_MATRIX_ACCESS_TOKEN # the value step 8 wrote into .dev.vars
323
329
  ```
324
330
 
325
- Before deploying: the D1/KV ids for that env are real, the Custom Domain equals that env's
326
- `ORACLE_HOSTNAME`, and every secret is set with `wrangler secret put`. **Then run step 8 again with
331
+ Before deploying: the D1/KV ids for that env are real, that env's `ORACLE_HOSTNAME` is the host
332
+ it will be served from (its Custom Domain in `routes`, or, with no `routes`, its `workers.dev`
333
+ host), and every secret is set with `wrangler secret put`. **Then run step 8 again with
327
334
  `--kit-url https://<the deployed host>` and `--yes`**: the `service` step re-points `#eval` at the
328
335
  real host and `profile` anchors the `#pro` it had to skip. `fund` may act again too — it is a floor
329
336
  check, so a wallet the first run's own `iid`/`key` transactions left below 1 IXO is topped back
@@ -389,7 +396,7 @@ the required fee (`pricing.byProtocol` for that collection's protocol, else the
389
396
  | Identity | a fresh wallet, or an existing mnemonic to derive from | `derive`, `.dev.vars` + `wrangler.jsonc` vars |
390
397
  | Owner | who owns this oracle — the AuthHub login whose subscription pays the engine | `login`, `delegation --for engine` |
391
398
  | Funding | nothing to ask — `oracle init` keeps the wallet topped up to 1 IXO for gas | `oracle init` (the `fund` step) |
392
- | Hosts | the did:web host per env (it IS the identity) | `ORACLE_HOSTNAME`, `routes` |
399
+ | Hosts | the did:web host per env (it IS the identity): a custom domain, or the free `workers.dev` host | `ORACLE_HOSTNAME`, `routes` (none for `workers.dev`) |
393
400
  | Contact | the address that gets pause / review notices | `register --contact-email` |
394
401
 
395
402
  ## Safety rules
@@ -417,7 +424,7 @@ the required fee (`pricing.byProtocol` for that collection's protocol, else the
417
424
  | Guessing `EVALUATION_MIN_AMOUNT` | ask what the collection's on-chain evaluation payment is (or will be) — set too high and register 402s |
418
425
  | No `EVALUATION_DENOM` in the mainnet env | the worker refuses to start — set both vars in every env you deploy |
419
426
  | `allowAiChecks: false` while the work order declares AI checks | every `ai` fact freezes `error` and the rubric's `onError` decides — ask first |
420
- | `ORACLE_HOSTNAME` ≠ the deployed Custom Domain | callers resolve the did:web by fetching that host — they must be the same string |
427
+ | `ORACLE_HOSTNAME` ≠ the host the env is served from (its Custom Domain, or its `workers.dev` host) | callers resolve the did:web by fetching that host — they must be the same string |
421
428
  | `ORACLE_ENTITY_DID` left unset after `oracle init` (or set only at the top level) | the deployed oracle fails `/health/ready` (`identity`); the Matrix review card can't resolve it, so reviews only work from the portal page |
422
429
  | Running `oracle init --yes` with nothing serving `--kit-url` | `profile`, `domain` and `acard` skip (all three are built from the live `GET /v1/info`) — start `bun run dev`, or deploy, before the run that should anchor them |
423
430
  | Skipping `--logo` without asking | the identity is still complete, but the portal, the console and the Openhands app show a placeholder — ask the provider for a logo (URL or image file) and pass `--logo` |
package/skills/decision-api-oracle/SKILL.md CHANGED
@@ -46,7 +46,7 @@ is the package CLI.
46
46
  ### 0. Prerequisites
47
47
 
48
48
  ```bash
49
- bunx wrangler whoami # the Cloudflare account that owns your host's zone
49
+ bunx wrangler whoami # the Cloudflare account the oracle deploys to
50
50
  bunx decision-oracle login --network devnet # the OWNER's AuthHub session — once
51
51
  ```
52
52
 
@@ -55,7 +55,7 @@ bunx decision-oracle login --network devnet # the OWNER's AuthHub session
55
55
  Put the session's OWN DID (`did:ixo:<address>` — `login` prints the address) in
56
56
  `ORACLE_ADMIN_DIDS` in every `vars` block of `wrangler.jsonc`. The example ships IXO's DID there —
57
57
  a copy of it must replace it with the owner's.
58
- - The account must hold the zone of the host, or the Custom Domain cannot attach. If `whoami` shows another account, stop and say so (**HUMAN**).
58
+ - A custom domain is optional. Without one, delete each env's `routes` entry and set that env's `ORACLE_HOSTNAME` to the Worker's free `<worker name>.<account subdomain>.workers.dev` host (the first deploy prints it). With one, the account must hold the zone of the host, or the Custom Domain cannot attach — if `whoami` shows another account, stop and say so (**HUMAN**). Either way the host IS the did:web: pick it before `oracle init`.
59
59
 
60
60
  ### 1. The protocol (example: publish `protocol/`; a provider: their protocol's DID)
61
61
 
@@ -313,13 +313,13 @@ Decision Console shows the price and card eligibility read-only.
313
313
 
314
314
  | Symptom | Cause → fix |
315
315
  | --- | --- |
316
- | Console / CLI 401 `UNAUTHORIZED` on a UCAN call | audience mismatch: the invocation names the did:web read from `<host>/.well-known/did.json` — `ORACLE_HOSTNAME` must equal the Custom Domain, and `--kit` must be that host |
316
+ | Console / CLI 401 `UNAUTHORIZED` on a UCAN call | audience mismatch: the invocation names the did:web read from `<host>/.well-known/did.json` — `ORACLE_HOSTNAME` must equal the host the env is served from (its Custom Domain, or its `workers.dev` host), and `--kit` must be that host |
317
317
  | Worker 500s on every request after deploy; logs say `WEBHOOK_ENCRYPTION_KEY: required when API_LANE is on` | the secret is missing in that env — `bunx wrangler secret put WEBHOOK_ENCRYPTION_KEY --env <env>` (for a new deployment only; never replace an existing one) |
318
318
  | `PROTOCOL_NOT_ALLOWED` on submit | the source's allow-list lacks it — empty means NONE; `api admin protocols <src> <did> --yes` |
319
319
  | 503 `SOURCE_PAUSED` `payments-disabled` | `API_PAYMENTS` is off and the source bills `x402` — turn payments on, or `api admin billing-mode <src> none` |
320
320
  | 402 again after a `PAYMENT-SIGNATURE` | the facilitator refused the payer: no deed / no `SendAuthorization` / not enough PAY — the fresh 402's error says which |
321
321
  | offers refused `plan_inactive`, `accepts: []` | the facilitator finds no active plan for the oracle: it is not registered with the engine (step 6 — registered, it runs on Standard at once), or, for an IXO-run oracle, IXO has not activated its plan (**HUMAN**: ask IXO). A way to pay whose payee is unset (`EARNINGS_ADDRESS` for PAY / USDC on IXO, `EARNINGS_BASE_WALLET` for USDC on Base) is simply not offered |
322
- | Not listed in the console | not registered with the engine (step 6), or not payable (the row above); or the host is not a `*.ixo.earth` Custom Domain; or `CORS_ORIGINS` lacks `https://decision-console.devnet.ixo.earth` |
322
+ | Not listed in the console | not registered with the engine (step 6), or not payable (the row above); or `https://<ORACLE_HOSTNAME>/.well-known/did.json` does not answer; or `CORS_ORIGINS` lacks `https://decision-console.devnet.ixo.earth` |
323
323
  | Every API claim rejects with `frequency` | the caller sends no `submitter` — an uncountable window fails closed; send the courier id |
324
324
  | 409 `REVIEW_EXPIRED` on a review answer | the paid claim's `answerBy` (its x402 reservation's expiry: extended up to 30 days for the review, else 24 h after verify) has passed — it can no longer be paid, and nothing was written. Answer paid reviews before the date the emails state |
325
325
  | Claims go `pending_review` on `SD-RT-CHECKS` (example) | an errored fact (onError `review`) held them for a person: the AI provider unavailable (the photo check — no gateway credits, or `OPENROUTER_API_KEY` missing on `openrouter`), or the orders endpoint unreachable (`DEMO_ORDERS` off, or an `ORD-…-E` order) — read the claim's report; fix it, and new claims decide again (the held ones are answered in the console). A rubric without a claim-level ReviewTask parks such claims `review` with NO task — give it one |
package/templates/project/README.md CHANGED
@@ -143,8 +143,10 @@ under `/v1` requires a UCAN invocation addressed to `did:web:<ORACLE_HOSTNAME>`.
143
143
  bun run deploy:devnet # or deploy:testnet / deploy:production
144
144
  ```
145
145
 
146
- The Custom Domain in `routes` must equal `ORACLE_HOSTNAME` — the did:web document is served from
147
- it, and that is how anyone verifies who you are.
146
+ `ORACLE_HOSTNAME` must be the host the env is served from — the did:web document is served from
147
+ it, and that is how anyone verifies who you are. A custom domain is optional: with no `routes`
148
+ entry, the Worker is served on its free `<worker name>.<account subdomain>.workers.dev` host, and
149
+ `ORACLE_HOSTNAME` is that host. With one, it must equal the Custom Domain in `routes`.
148
150
 
149
151
  `GET /v1/info` only answers a portal that already knows your host. For discovery that starts from
150
152
  the protocol, declare yourself on chain — an oracle entity, a `#eval` service pointing at your
package/templates/project/wrangler.jsonc CHANGED
@@ -5,7 +5,9 @@
5
5
  "compatibility_date": "2026-07-07",
6
6
  "compatibility_flags": ["nodejs_compat"],
7
7
 
8
- // The Custom Domain IS the did:web identity — it must equal ORACLE_HOSTNAME below.
8
+ // The host IS the did:web identity — ORACLE_HOSTNAME below must be the host the Worker is served
9
+ // from. A custom domain is optional: with no `routes`, the Worker is served on its free
10
+ // `<name>.<account subdomain>.workers.dev` host — set ORACLE_HOSTNAME to that.
9
11
  // "routes": [{ "pattern": "<your ORACLE_HOSTNAME>", "custom_domain": true }],
10
12
 
11
13
  // D1 is the oracle's database: the ledger tables the package owns. `migrations_dir` points INTO
@@ -156,7 +158,8 @@
156
158
 
157
159
  // THIS oracle's did:web host — the audience every inbound UCAN invocation must name, and the
158
160
  // issuer of every invocation this oracle mints. It must equal the Custom Domain in `routes`
159
- // for the env you deploy: callers resolve you by fetching https://<host>/.well-known/did.json.
161
+ // (or, with no `routes`, the env's `workers.dev` host) for the env you deploy: callers resolve
162
+ // you by fetching https://<host>/.well-known/did.json.
160
163
  "ORACLE_HOSTNAME": "<REPLACE: the host your did:web is served from>",
161
164
 
162
165
  // This oracle's PUBLIC chain identifiers, printed together by `bunx decision-oracle derive`.
@@ -231,7 +234,8 @@
231
234
  // keeps the deployed name explicit and independent of the top-level one.
232
235
  "name": "{{name}}-devnet",
233
236
  // The Custom Domain IS the identity: it must equal ORACLE_HOSTNAME below. Declared here so
234
- // the deploy attaches it (and its DNS record) instead of it being a dashboard step.
237
+ // the deploy attaches it (and its DNS record) instead of it being a dashboard step. Optional:
238
+ // delete `routes` to serve on the free workers.dev host, and set ORACLE_HOSTNAME to that.
235
239
  "routes": [{ "pattern": "<REPLACE: your devnet host>", "custom_domain": true }],
236
240
  "vars": {
237
241
  "ENVIRONMENT": "staging",
@@ -340,7 +344,8 @@
340
344
  // keeps the deployed name explicit and independent of the top-level one.
341
345
  "name": "{{name}}-testnet",
342
346
  // The Custom Domain IS the identity: it must equal ORACLE_HOSTNAME below. Declared here so
343
- // the deploy attaches it (and its DNS record) instead of it being a dashboard step.
347
+ // the deploy attaches it (and its DNS record) instead of it being a dashboard step. Optional:
348
+ // delete `routes` to serve on the free workers.dev host, and set ORACLE_HOSTNAME to that.
344
349
  "routes": [{ "pattern": "<REPLACE: your testnet host>", "custom_domain": true }],
345
350
  "vars": {
346
351
  "ENVIRONMENT": "staging",