@ashlr/hub 2.2.0 → 3.0.1

package/dist/core/fleet/quota.js

@@ -0,0 +1,198 @@
+/**
+ * quota.ts — M46: per-backend rolling-window rate/quota ledger.
+ *
+ * Subscription frontier backends (Claude / Codex) are flat-fee but RATE-LIMITED
+ * (not token-billed), so the fleet must throttle dispatches per backend. This
+ * ledger records each dispatch and answers "how many in the last window?" and
+ * "are we still under the configured cap?".
+ *
+ * Persistence discipline mirrors daemon/state.ts EXACTLY:
+ *  - Atomic writes (tmp file + POSIX rename).
+ *  - NEVER throws — load returns a fresh empty ledger on missing/corrupt file;
+ *    record swallows any persistence error.
+ *  - mkdir -p the parent dir.
+ *  - Bounded history (last ~2000 events).
+ *  - Homedir re-resolved at call time so tests can relocate HOME.
+ *
+ * No new runtime deps; node builtins only. evalQuota mirrors evalBudget's
+ * three-level (ok/warn/over) semantics with a null-cap-disabled path.
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync, } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Maximum number of dispatch events retained in quota.json. */
+const MAX_EVENTS = 2000;
+// ---------------------------------------------------------------------------
+// windowToMs — EXTENDS rollup's vocabulary with sub-day windows (local copy)
+// ---------------------------------------------------------------------------
+/**
+ * Convert a window label to milliseconds. Extends rollup.ts's day-granularity
+ * vocabulary with sub-day windows used by rate limits. Unknown labels fall back
+ * to 1h (the most conservative useful default for rate caps).
+ */
+export function windowToMs(window) {
+    switch (window) {
+        case '1m': return 60_000;
+        case '5m': return 5 * 60_000;
+        case '15m': return 15 * 60_000;
+        case '1h': return 3_600_000;
+        case '1d': return 86_400_000;
+        case '7d': return 7 * 86_400_000;
+        case '30d': return 30 * 86_400_000;
+        default: return 3_600_000;
+    }
+}
+// ---------------------------------------------------------------------------
+// Path helpers (re-resolved at call time so tests can relocate HOME)
+// ---------------------------------------------------------------------------
+function fleetDir() {
+    return join(homedir(), '.ashlr', 'fleet');
+}
+/** Absolute path to the fleet quota ledger file. */
+export function fleetQuotaPath() {
+    return join(fleetDir(), 'quota.json');
+}
+// ---------------------------------------------------------------------------
+// Fresh default
+// ---------------------------------------------------------------------------
+function freshQuota() {
+    return { events: [] };
+}
+// ---------------------------------------------------------------------------
+// Load
+// ---------------------------------------------------------------------------
+/**
+ * Read and parse fleetQuotaPath(). NEVER throws.
+ * Returns a fresh empty ledger when the file is missing or malformed.
+ */
+export function loadFleetQuota() {
+    const p = fleetQuotaPath();
+    if (!existsSync(p))
+        return freshQuota();
+    try {
+        const raw = readFileSync(p, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+            return freshQuota();
+        }
+        const obj = parsed;
+        const events = Array.isArray(obj['events'])
+            ? obj['events'].filter((e) => typeof e === 'object' &&
+                e !== null &&
+                !Array.isArray(e) &&
+                typeof e['backend'] === 'string' &&
+                typeof e['ts'] === 'string')
+            : [];
+        return { events };
+    }
+    catch {
+        // Corrupt JSON or any other read error — return a fresh empty ledger.
+        return freshQuota();
+    }
+}
+// ---------------------------------------------------------------------------
+// Save (atomic) — internal
+// ---------------------------------------------------------------------------
+/**
+ * Atomically write the ledger via tmp-file + rename (POSIX-atomic).
+ * Creates ~/.ashlr/fleet recursively. Bounds events. Never throws.
+ */
+function saveFleetQuota(q) {
+    try {
+        const dir = fleetDir();
+        if (!existsSync(dir)) {
+            mkdirSync(dir, { recursive: true });
+        }
+        const bounded = {
+            events: q.events.slice(-MAX_EVENTS),
+        };
+        const dest = fleetQuotaPath();
+        const tmp = dest + '.tmp';
+        writeFileSync(tmp, JSON.stringify(bounded, null, 2) + '\n', 'utf8');
+        renameSync(tmp, dest);
+    }
+    catch {
+        // Persistence failure must not crash the fleet — swallow silently.
+    }
+}
+// ---------------------------------------------------------------------------
+// Record a dispatch
+// ---------------------------------------------------------------------------
+/**
+ * Append a dispatch event for `backend` (ts = now) and persist. Never throws.
+ */
+export function recordUse(backend) {
+    try {
+        const q = loadFleetQuota();
+        q.events.push({ backend, ts: new Date().toISOString() });
+        saveFleetQuota(q);
+    }
+    catch {
+        // Never throws.
+    }
+}
+// ---------------------------------------------------------------------------
+// Window counting
+// ---------------------------------------------------------------------------
+/**
+ * Count events for `backend` whose ts is within the last `windowMs`
+ * (ts >= now - windowMs). Reads the ledger internally; `now` is injectable for
+ * deterministic tests (defaults to Date.now()).
+ */
+export function usesInWindow(backend, windowMs, now) {
+    const nowMs = now ?? Date.now();
+    const cutoff = nowMs - windowMs;
+    const q = loadFleetQuota();
+    let count = 0;
+    for (const ev of q.events) {
+        if (ev.backend !== backend)
+            continue;
+        const t = Date.parse(ev.ts);
+        if (Number.isNaN(t))
+            continue;
+        if (t >= cutoff)
+            count++;
+    }
+    return count;
+}
+// ---------------------------------------------------------------------------
+// Limit check
+// ---------------------------------------------------------------------------
+/**
+ * True when `backend` is still UNDER its configured rate limit (or unlimited).
+ *
+ * Mirrors evalBudget's null-cap-disabled logic: when no
+ * cfg.foundry.limits[backend] is configured, the backend is unlimited ⇒ always
+ * within limit. Otherwise true iff usesInWindow(...) < limit.max. `now` is
+ * injectable for tests.
+ */
+export function withinLimit(backend, cfg, now) {
+    const limit = cfg.foundry?.limits?.[backend];
+    if (!limit)
+        return true; // no cap configured ⇒ unlimited
+    const used = usesInWindow(backend, windowToMs(limit.window), now);
+    return used < limit.max;
+}
+// ---------------------------------------------------------------------------
+// Three-level quota evaluation (mirrors evalBudget)
+// ---------------------------------------------------------------------------
+/**
+ * Evaluate a backend's rate-limit status as 'ok' | 'warn' | 'over', mirroring
+ * evalBudget: 'over' at >= 100% of the cap, 'warn' at >= 80%, else 'ok'. When no
+ * cap is configured the backend is unlimited ⇒ always 'ok'. `now` is injectable.
+ */
+export function evalQuota(backend, cfg, now) {
+    const limit = cfg.foundry?.limits?.[backend];
+    if (!limit || limit.max <= 0)
+        return 'ok'; // unlimited (or nonsensical cap)
+    const used = usesInWindow(backend, windowToMs(limit.window), now);
+    if (used >= limit.max)
+        return 'over';
+    if (used >= limit.max * 0.8)
+        return 'warn';
+    return 'ok';
+}
+//# sourceMappingURL=quota.js.map

package/dist/core/fleet/quota.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota.js","sourceRoot":"","sources":["../../../src/core/fleet/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,gEAAgE;AAChE,MAAM,UAAU,GAAG,IAAI,CAAC;AAgBxB,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,IAAI,CAAC,CAAE,OAAO,MAAM,CAAC;QAC1B,KAAK,IAAI,CAAC,CAAE,OAAO,CAAC,GAAG,MAAM,CAAC;QAC9B,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;QAC/B,KAAK,IAAI,CAAC,CAAE,OAAO,SAAS,CAAC;QAC7B,KAAK,IAAI,CAAC,CAAE,OAAO,UAAU,CAAC;QAC9B,KAAK,IAAI,CAAC,CAAE,OAAO,CAAC,GAAG,UAAU,CAAC;QAClC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC;QACnC,OAAO,CAAC,CAAI,OAAO,SAAS,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAE9E,SAAS,QAAQ;IACf,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,SAAS,UAAU;IACjB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACxB,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,CAAC,CAAE,GAAG,CAAC,QAAQ,CAAe,CAAC,MAAM,CACjC,CAAC,CAAC,EAAwB,EAAE,CAC1B,OAAO,CAAC,KAAK,QAAQ;gBACrB,CAAC,KAAK,IAAI;gBACV,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBACjB,OAAQ,CAA6B,CAAC,SAAS,CAAC,KAAK,QAAQ;gBAC7D,OAAQ,CAA6B,CAAC,IAAI,CAAC,KAAK,QAAQ,CAC3D;YACH,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,cAAc,CAAC,CAAa;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,OAAO,GAAe;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;SACpC,CAAC;QACF,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC;QAC1B,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,OAAiB;IACzC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;QAC3B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzD,cAAc,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAiB,EACjB,QAAgB,EAChB,GAAY;IAEZ,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAChC,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,EAAE,CAAC,OAAO,KAAK,OAAO;YAAE,SAAS;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,IAAI,MAAM;YAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CACzB,OAAiB,EACjB,GAAgB,EAChB,GAAY;IAEZ,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,CAAC,gCAAgC;IACzD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAClE,OAAO,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACvB,OAAiB,EACjB,GAAgB,EAChB,GAAY;IAEZ,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAC5E,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAClE,IAAI,IAAI,IAAI,KAAK,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,IAAI,IAAI,KAAK,CAAC,GAAG,GAAG,GAAG;QAAE,OAAO,MAAM,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/fleet/router.d.ts

@@ -0,0 +1,46 @@
+/**
+ * router.ts — M46: capability-tiered backend router for the autonomous fleet.
+ *
+ * Maps a discovered WorkItem to the backend (EngineId) that should attempt it,
+ * honoring cfg.foundry.allowedBackends and PATH availability. The policy is a
+ * pure, DETERMINISTIC heuristic (no Math.random, no clock): the same item +
+ * config always routes the same way, so the decision is unit-testable and the
+ * senior load is split predictably across frontier backends.
+ *
+ * GUARDRAILS:
+ *  - NEVER returns a backend not in allowedBackends (default ['builtin']).
+ *  - NEVER returns an external backend that fails engineInstalled() — falls back
+ *    to 'builtin' (which is always available).
+ *  - Pure except for engineInstalled()'s PATH probe (read-only, never throws).
+ *
+ * ROUTING HEURISTIC (documented):
+ *  - LOW-effort / bulk classes — source 'doc'|'dep'|'todo'|'test', OR effort<=2
+ *    — go to 'builtin' (local loop, unbounded, $0). No reason to spend a
+ *    rate-limited frontier seat on cheap, mechanical work.
+ *  - HIGH-difficulty / important classes — source 'security'|'issue', OR
+ *    effort>=4, OR a high score — go to a FRONTIER backend (prefer 'claude',
+ *    else 'codex') when it is allowed AND installed, else fall back to 'builtin'.
+ *  - MEDIUM (everything else) stays on 'builtin' UNLESS a frontier backend is
+ *    allowed+installed AND the item is src-touching (a 'test' or 'todo' that
+ *    is not low-effort, or any non-bulk source) — then it gets a frontier seat.
+ *  - When MULTIPLE frontier backends are allowed+installed, alternate
+ *    DETERMINISTICALLY by a stable hash of item.id so 'claude' and 'codex'
+ *    share the senior load evenly.
+ */
+import type { AshlrConfig, EngineId, EngineTier, WorkItem } from '../types.js';
+/** The outcome of routing a WorkItem to a backend. */
+export interface RouteDecision {
+    /** Backend chosen to attempt the item. Always allowed + (if external) installed. */
+    backend: EngineId;
+    /** Tier of the chosen backend ('local' | 'frontier'). */
+    tier: EngineTier;
+    /** Short human-readable rationale. */
+    reason: string;
+}
+/**
+ * Route a WorkItem to the backend that should attempt it.
+ *
+ * PURE + DETERMINISTIC (modulo engineInstalled's read-only PATH probe). Never
+ * throws. Honors allowedBackends and PATH availability — see module heuristic.
+ */
+export declare function routeBackend(item: WorkItem, cfg: AshlrConfig): RouteDecision;

package/dist/core/fleet/router.js

@@ -0,0 +1,121 @@
+/**
+ * router.ts — M46: capability-tiered backend router for the autonomous fleet.
+ *
+ * Maps a discovered WorkItem to the backend (EngineId) that should attempt it,
+ * honoring cfg.foundry.allowedBackends and PATH availability. The policy is a
+ * pure, DETERMINISTIC heuristic (no Math.random, no clock): the same item +
+ * config always routes the same way, so the decision is unit-testable and the
+ * senior load is split predictably across frontier backends.
+ *
+ * GUARDRAILS:
+ *  - NEVER returns a backend not in allowedBackends (default ['builtin']).
+ *  - NEVER returns an external backend that fails engineInstalled() — falls back
+ *    to 'builtin' (which is always available).
+ *  - Pure except for engineInstalled()'s PATH probe (read-only, never throws).
+ *
+ * ROUTING HEURISTIC (documented):
+ *  - LOW-effort / bulk classes — source 'doc'|'dep'|'todo'|'test', OR effort<=2
+ *    — go to 'builtin' (local loop, unbounded, $0). No reason to spend a
+ *    rate-limited frontier seat on cheap, mechanical work.
+ *  - HIGH-difficulty / important classes — source 'security'|'issue', OR
+ *    effort>=4, OR a high score — go to a FRONTIER backend (prefer 'claude',
+ *    else 'codex') when it is allowed AND installed, else fall back to 'builtin'.
+ *  - MEDIUM (everything else) stays on 'builtin' UNLESS a frontier backend is
+ *    allowed+installed AND the item is src-touching (a 'test' or 'todo' that
+ *    is not low-effort, or any non-bulk source) — then it gets a frontier seat.
+ *  - When MULTIPLE frontier backends are allowed+installed, alternate
+ *    DETERMINISTICALLY by a stable hash of item.id so 'claude' and 'codex'
+ *    share the senior load evenly.
+ */
+import { engineInstalled } from '../run/engines.js';
+import { engineTierOf } from '../run/sandboxed-engine.js';
+/** Frontier backends in preference order — first allowed+installed wins ties. */
+const FRONTIER_PREFERENCE = ['claude', 'codex'];
+/** Bulk / low-difficulty sources that route to the local builtin loop. */
+const BULK_SOURCES = new Set(['doc', 'dep', 'todo', 'test']);
+/** High-difficulty / important sources that warrant a frontier seat. */
+const SENIOR_SOURCES = new Set(['security', 'issue']);
+/** Score at/above which an item is considered "important" (frontier-worthy). */
+const HIGH_SCORE = 7;
+/**
+ * Stable, deterministic 32-bit FNV-1a hash of a string. Used only to pick which
+ * frontier backend handles an item — NOT a security primitive.
+ */
+function stableHash(s) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < s.length; i++) {
+        h ^= s.charCodeAt(i);
+        // 32-bit FNV prime multiply (kept in unsigned 32-bit range).
+        h = Math.imul(h, 0x01000193);
+    }
+    return h >>> 0;
+}
+/**
+ * The allowed backends, defaulting to ['builtin'] when foundry is absent.
+ * Always contains at least 'builtin' as a guaranteed fallback.
+ */
+function allowedSet(cfg) {
+    const allowed = cfg.foundry?.allowedBackends ?? ['builtin'];
+    const set = new Set(allowed);
+    set.add('builtin'); // builtin is always a valid fallback target
+    return set;
+}
+/**
+ * The frontier backends that are BOTH allowed and installed, in preference
+ * order. Empty when none qualify (caller then falls back to 'builtin').
+ */
+function availableFrontiers(cfg) {
+    const allowed = allowedSet(cfg);
+    return FRONTIER_PREFERENCE.filter((e) => allowed.has(e) && engineInstalled(e));
+}
+/**
+ * Pick a frontier backend deterministically. With one candidate, returns it;
+ * with multiple, alternates by a stable hash of item.id so the senior load is
+ * split predictably (no clock, no randomness). Returns null when none qualify.
+ */
+function pickFrontier(item, cfg) {
+    const frontiers = availableFrontiers(cfg);
+    if (frontiers.length === 0)
+        return null;
+    if (frontiers.length === 1)
+        return frontiers[0];
+    const idx = stableHash(item.id) % frontiers.length;
+    return frontiers[idx];
+}
+/** Build a decision for a concrete backend, deriving its tier. */
+function decide(backend, reason) {
+    return { backend, tier: engineTierOf(backend), reason };
+}
+/**
+ * Route a WorkItem to the backend that should attempt it.
+ *
+ * PURE + DETERMINISTIC (modulo engineInstalled's read-only PATH probe). Never
+ * throws. Honors allowedBackends and PATH availability — see module heuristic.
+ */
+export function routeBackend(item, cfg) {
+    const source = item.source;
+    const effort = typeof item.effort === 'number' ? item.effort : 3;
+    const score = typeof item.score === 'number' ? item.score : 0;
+    // ── LOW-effort / bulk → builtin (local, unbounded, $0) ───────────────────
+    if (BULK_SOURCES.has(source) || effort <= 2) {
+        return decide('builtin', `bulk/low-effort (${source}, effort ${effort}) → local builtin`);
+    }
+    // ── HIGH-difficulty / important → frontier when available, else builtin ──
+    const isSenior = SENIOR_SOURCES.has(source) || effort >= 4 || score >= HIGH_SCORE;
+    if (isSenior) {
+        const frontier = pickFrontier(item, cfg);
+        if (frontier) {
+            return decide(frontier, `senior (${source}, effort ${effort}, score ${score}) → frontier ${frontier}`);
+        }
+        return decide('builtin', `senior (${source}) but no frontier allowed+installed → local builtin`);
+    }
+    // ── MEDIUM → builtin unless a frontier is available (src-touching) ───────
+    // Anything that reached here is a non-bulk source with effort 3 — treat it as
+    // src-touching and give it a frontier seat when one is allowed+installed.
+    const frontier = pickFrontier(item, cfg);
+    if (frontier) {
+        return decide(frontier, `medium src-touching (${source}, effort ${effort}) → frontier ${frontier}`);
+    }
+    return decide('builtin', `medium (${source}, effort ${effort}) → local builtin`);
+}
+//# sourceMappingURL=router.js.map

package/dist/core/fleet/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/core/fleet/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAY1D,iFAAiF;AACjF,MAAM,mBAAmB,GAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAErE,0EAA0E;AAC1E,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAElF,wEAAwE;AACxE,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAE3E,gFAAgF;AAChF,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB;;;GAGG;AACH,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrB,6DAA6D;QAC7D,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,GAAgB;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAW,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,4CAA4C;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAgB;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,mBAAmB,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAc,EAAE,GAAgB;IACpD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,CAAE,CAAC;IACjD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;IACnD,OAAO,SAAS,CAAC,GAAG,CAAE,CAAC;AACzB,CAAC;AAED,kEAAkE;AAClE,SAAS,MAAM,CAAC,OAAiB,EAAE,MAAc;IAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc,EAAE,GAAgB;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,4EAA4E;IAC5E,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC,SAAS,EAAE,oBAAoB,MAAM,YAAY,MAAM,mBAAmB,CAAC,CAAC;IAC5F,CAAC;IAED,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,KAAK,IAAI,UAAU,CAAC;IAClF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,QAAQ,EAAE,WAAW,MAAM,YAAY,MAAM,WAAW,KAAK,gBAAgB,QAAQ,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,MAAM,CAAC,SAAS,EAAE,WAAW,MAAM,qDAAqD,CAAC,CAAC;IACnG,CAAC;IAED,4EAA4E;IAC5E,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,QAAQ,EAAE,wBAAwB,MAAM,YAAY,MAAM,gBAAgB,QAAQ,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,EAAE,WAAW,MAAM,YAAY,MAAM,mBAAmB,CAAC,CAAC;AACnF,CAAC"}

package/dist/core/fleet/self.d.ts

@@ -0,0 +1,58 @@
+/**
+ * self.ts — M54 (v5 Open Fleet): the self-improving fleet's safety harness.
+ *
+ * The fleet may modify ashlr-hub's OWN source, but it may NEVER weaken its own
+ * safety guarantees. Two pure mechanisms enforce that:
+ *
+ *   1. `guardSafetyTests(diff)` — the never-weaken guard. Refuses, BY CONSTRUCTION
+ *      and BEFORE any verification runs, any diff that deletes a safety/invariant
+ *      test file or removes net assertions from one. A self-authored change can
+ *      fix bugs and add tests, but can never disarm the gates that keep the fleet
+ *      safe.
+ *   2. `selfEvalParity(runSuite)` — the self-eval harness contract: a self-target
+ *      change is only eligible when the invariant suite is green with the foundry
+ *      flag OFF *and* ON. Higher-order + pure so it is unit-testable with a stub
+ *      runner; the gated auto-merge pass supplies the real suite runner.
+ *
+ * Plus `isSelfTargetProposal` — detect when a proposal targets ashlr-hub itself
+ * (by package name, not a brittle absolute path).
+ *
+ * All functions are PURE (except the bounded fs read in isSelfTargetProposal) and
+ * NEVER throw.
+ */
+import type { AshlrConfig, Proposal } from '../types.js';
+/**
+ * True when `proposal` targets ashlr-hub's own source tree — detected by reading
+ * the repo's package.json `name` (=== '@ashlr/hub'), never a hardcoded path.
+ * Bounded read; never throws; false on any doubt.
+ */
+export declare function isSelfTargetProposal(proposal: Proposal, _cfg?: AshlrConfig): boolean;
+/** Whether a repo-relative path names a safety/invariant test file. */
+export declare function isSafetyTestFile(path: string): boolean;
+export interface SafetyGuardVerdict {
+    /** True ⇒ the diff weakens a safety guarantee and MUST be refused. */
+    weakened: boolean;
+    reason: string;
+    /** Safety files the diff touched (for the audit trail). */
+    files: string[];
+}
+/**
+ * The never-weaken guard. Refuses (weakened:true) when the diff:
+ *   - deletes a safety/invariant test file, OR
+ *   - removes more assertions than it adds from a safety/invariant test file.
+ * Conservative by design: a diff that touches a safety file and nets out
+ * assertions is refused even if it also adds unrelated code. PURE; never throws.
+ */
+export declare function guardSafetyTests(diff: string): SafetyGuardVerdict;
+export interface SelfEvalVerdict {
+    ok: boolean;
+    reason: string;
+}
+/**
+ * The self-eval harness contract: a self-target change is eligible only when the
+ * invariant suite is green with the foundry flag OFF *and* ON. `runSuite(flagOn)`
+ * runs the suite in the (already diff-applied) sandbox worktree and returns
+ * whether it passed. PURE over its injected runner; never throws — a runner that
+ * throws counts as a failing suite (fail-closed).
+ */
+export declare function selfEvalParity(runSuite: (flagOn: boolean) => boolean): SelfEvalVerdict;

package/dist/core/fleet/self.js

@@ -0,0 +1,187 @@
+/**
+ * self.ts — M54 (v5 Open Fleet): the self-improving fleet's safety harness.
+ *
+ * The fleet may modify ashlr-hub's OWN source, but it may NEVER weaken its own
+ * safety guarantees. Two pure mechanisms enforce that:
+ *
+ *   1. `guardSafetyTests(diff)` — the never-weaken guard. Refuses, BY CONSTRUCTION
+ *      and BEFORE any verification runs, any diff that deletes a safety/invariant
+ *      test file or removes net assertions from one. A self-authored change can
+ *      fix bugs and add tests, but can never disarm the gates that keep the fleet
+ *      safe.
+ *   2. `selfEvalParity(runSuite)` — the self-eval harness contract: a self-target
+ *      change is only eligible when the invariant suite is green with the foundry
+ *      flag OFF *and* ON. Higher-order + pure so it is unit-testable with a stub
+ *      runner; the gated auto-merge pass supplies the real suite runner.
+ *
+ * Plus `isSelfTargetProposal` — detect when a proposal targets ashlr-hub itself
+ * (by package name, not a brittle absolute path).
+ *
+ * All functions are PURE (except the bounded fs read in isSelfTargetProposal) and
+ * NEVER throw.
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+// ---------------------------------------------------------------------------
+// Self-target detection
+// ---------------------------------------------------------------------------
+/** The package name that identifies ashlr-hub's own repo. */
+const SELF_PACKAGE_NAME = '@ashlr/hub';
+/**
+ * True when `proposal` targets ashlr-hub's own source tree — detected by reading
+ * the repo's package.json `name` (=== '@ashlr/hub'), never a hardcoded path.
+ * Bounded read; never throws; false on any doubt.
+ */
+export function isSelfTargetProposal(proposal, _cfg) {
+    const repo = proposal.repo;
+    if (!repo)
+        return false;
+    try {
+        const pkgPath = join(repo, 'package.json');
+        if (!existsSync(pkgPath))
+            return false;
+        const raw = readFileSync(pkgPath, 'utf8');
+        if (raw.length > 256 * 1024)
+            return false; // bounded
+        const pkg = JSON.parse(raw);
+        return pkg.name === SELF_PACKAGE_NAME;
+    }
+    catch {
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// The never-weaken guard
+// ---------------------------------------------------------------------------
+/**
+ * Patterns for test files whose weakening would disarm a safety invariant. A
+ * diff that deletes one of these, or nets out assertions from one, is refused.
+ */
+const SAFETY_FILE_PATTERNS = [
+    /^test\/h\d+[.-].*\.test\.ts$/, // h1..h8 hardening / invariant suites
+    /^test\/m45\.foundry\.test\.ts$/, // sandboxed-engine containment
+    /^test\/m47[._].*\.test\.ts$/, // merge gate + provenance
+    /^test\/m51\.trust\.test\.ts$/, // tri-tier trust
+    /^test\/m52\..*\.test\.ts$/, // OS confinement
+    /^test\/m54\..*\.test\.ts$/, // the self-improvement guard itself
+    /daemon-gates/, // daemon-no-primitive source grep-guard
+    /proposal-only/,
+    /\.safety\./,
+];
+/** Whether a repo-relative path names a safety/invariant test file. */
+export function isSafetyTestFile(path) {
+    const p = path.replace(/^\.\//, '');
+    return SAFETY_FILE_PATTERNS.some((re) => re.test(p));
+}
+/** Lines that represent a test assertion or block — the protected substance. */
+const ASSERTION_RE = /^\s*(it|test|describe|expect|assert|toBe|toEqual|toThrow|toMatch)\b/;
+/** Split a unified diff into per-file sections and tally assertion deltas. */
+function parseDiff(diff) {
+    const files = [];
+    let cur = null;
+    for (const line of diff.split('\n')) {
+        if (line.startsWith('diff --git')) {
+            if (cur)
+                files.push(cur);
+            // `diff --git a/<path> b/<path>` — take the b/ path.
+            const m = line.match(/ b\/(.+)$/);
+            cur = { path: m ? m[1] : '', deleted: false, addedAssertions: 0, removedAssertions: 0 };
+            continue;
+        }
+        if (!cur)
+            continue;
+        if (line.startsWith('deleted file mode')) {
+            cur.deleted = true;
+            continue;
+        }
+        if (line.startsWith('+++ /dev/null')) {
+            cur.deleted = true;
+            continue;
+        }
+        // `--- a/path` / `+++ b/path` headers are not content; refine the path from +++.
+        if (line.startsWith('+++ b/')) {
+            cur.path = line.slice('+++ b/'.length);
+            continue;
+        }
+        if (line.startsWith('---') || line.startsWith('+++'))
+            continue;
+        if (line.startsWith('+') && ASSERTION_RE.test(line.slice(1)))
+            cur.addedAssertions++;
+        else if (line.startsWith('-') && ASSERTION_RE.test(line.slice(1)))
+            cur.removedAssertions++;
+    }
+    if (cur)
+        files.push(cur);
+    return files;
+}
+/**
+ * The never-weaken guard. Refuses (weakened:true) when the diff:
+ *   - deletes a safety/invariant test file, OR
+ *   - removes more assertions than it adds from a safety/invariant test file.
+ * Conservative by design: a diff that touches a safety file and nets out
+ * assertions is refused even if it also adds unrelated code. PURE; never throws.
+ */
+export function guardSafetyTests(diff) {
+    const touched = [];
+    if (!diff || !diff.trim())
+        return { weakened: false, reason: 'empty diff', files: [] };
+    let parsed;
+    try {
+        parsed = parseDiff(diff);
+    }
+    catch {
+        // Unparseable diff over self ⇒ refuse (ambiguous = unsafe).
+        return { weakened: true, reason: 'unparseable diff over self-target — refused', files: [] };
+    }
+    for (const f of parsed) {
+        if (!f.path || !isSafetyTestFile(f.path))
+            continue;
+        touched.push(f.path);
+        if (f.deleted) {
+            return {
+                weakened: true,
+                reason: `diff deletes safety/invariant test file '${f.path}' — refused`,
+                files: touched,
+            };
+        }
+        if (f.removedAssertions > f.addedAssertions) {
+            return {
+                weakened: true,
+                reason: `diff removes ${f.removedAssertions - f.addedAssertions} net assertion(s) from safety test '${f.path}' — refused`,
+                files: touched,
+            };
+        }
+    }
+    return { weakened: false, reason: 'no safety test weakened', files: touched };
+}
+/**
+ * The self-eval harness contract: a self-target change is eligible only when the
+ * invariant suite is green with the foundry flag OFF *and* ON. `runSuite(flagOn)`
+ * runs the suite in the (already diff-applied) sandbox worktree and returns
+ * whether it passed. PURE over its injected runner; never throws — a runner that
+ * throws counts as a failing suite (fail-closed).
+ */
+export function selfEvalParity(runSuite) {
+    let offGreen;
+    let onGreen;
+    try {
+        offGreen = runSuite(false);
+    }
+    catch {
+        offGreen = false;
+    }
+    if (!offGreen) {
+        return { ok: false, reason: 'invariant suite not green with foundry flag OFF' };
+    }
+    try {
+        onGreen = runSuite(true);
+    }
+    catch {
+        onGreen = false;
+    }
+    if (!onGreen) {
+        return { ok: false, reason: 'invariant suite not green with foundry flag ON' };
+    }
+    return { ok: true, reason: 'invariant suite green flag-off AND flag-on' };
+}
+//# sourceMappingURL=self.js.map

package/dist/core/fleet/self.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self.js","sourceRoot":"","sources":["../../../src/core/fleet/self.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAEvC;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAkB,EAAE,IAAkB;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI;YAAE,OAAO,KAAK,CAAC,CAAC,UAAU;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAClD,OAAO,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,oBAAoB,GAAsB;IAC9C,8BAA8B,EAAE,sCAAsC;IACtE,gCAAgC,EAAE,+BAA+B;IACjE,6BAA6B,EAAE,0BAA0B;IACzD,8BAA8B,EAAE,iBAAiB;IACjD,2BAA2B,EAAE,iBAAiB;IAC9C,2BAA2B,EAAE,oCAAoC;IACjE,cAAc,EAAE,wCAAwC;IACxD,eAAe;IACf,YAAY;CACb,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,MAAM,YAAY,GAAG,qEAAqE,CAAC;AAiB3F,8EAA8E;AAC9E,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,IAAI,GAAG,GAAoB,IAAI,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,IAAI,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,qDAAqD;YACrD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAClC,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;YACzF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,iFAAiF;QACjF,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,eAAe,EAAE,CAAC;aAC/E,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,GAAG;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACvF,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;QAC5D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,6CAA6C,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,4CAA4C,CAAC,CAAC,IAAI,aAAa;gBACvE,KAAK,EAAE,OAAO;aACf,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC;YAC5C,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,gBAAgB,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,eAAe,uCAAuC,CAAC,CAAC,IAAI,aAAa;gBACzH,KAAK,EAAE,OAAO;aACf,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAChF,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAsC;IACnE,IAAI,QAAiB,CAAC;IACtB,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC;QACH,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;AAC5E,CAAC"}