@ashlr/hub 3.5.1 → 3.8.0

package/dist/core/policy/local-only.d.ts

@@ -25,6 +25,20 @@
  * make impossible, so `test/local-only-dispatch-paths.test.ts` enumerates every
  * known path and asserts it refuses.
  *
+ * TWO AXES, ONE PREDICATE (docs/LOCALITY-VS-SPEND.md)
+ * --------------------------------------------------
+ * This module answers two different questions and must not confuse them:
+ *
+ *   `EngineLocality`  'local' | 'cloud'              — where does the process run?
+ *   `Meteredness`     'free' | 'metered' | 'unknown' — can this spend money?
+ *
+ * `decidePermission` reads METEREDNESS and refuses anything that is not provably
+ * `'free'`, `'unknown'` included. Locality is still published, unchanged, for the
+ * consumers that genuinely mean "on this machine" — local-fleet membership, pool
+ * tiering, local-context injection. They are not interchangeable: `ashlrcode` is
+ * a local process that this hub hands paid credentials, and reading its locality
+ * as permission is exactly how it kept them.
+ *
  * MODE RESOLUTION (config + env, env can only ENABLE)
  * --------------------------------------------------
  *   persisted : cfg.foundry.localOnly === true   (canonical)
@@ -86,6 +100,16 @@ export declare function localOnlyEnabled(cfg?: AshlrConfig, env?: EnvLike): bool
  * tier 'mid' but locality 'cloud'. Conflating the two is how money gets spent.
  */
 export type EngineLocality = 'local' | 'cloud';
+/**
+ * Provider ids served from this machine. Everything else is treated as cloud.
+ *
+ * Exported so the parity suite can iterate the authority's OWN enumeration
+ * rather than restating it — a test carrying its own copy of this list would be
+ * the duplication this module exists to prevent. Consumers ask
+ * `providerLocality` / `providerMeteredness`; nothing outside this file should
+ * read the set to make a decision.
+ */
+export declare const LOCAL_PROVIDER_IDS: ReadonlySet<string>;
 /** The engine that is permitted in every mode: in-process, no model call. */
 export declare const ALWAYS_PERMITTED_ENGINE: EngineId;
 /**
@@ -100,6 +124,105 @@ export declare function isLoopbackEndpoint(baseUrl: string | undefined): boolean
 export declare function engineLocality(engine: string, cfg?: AshlrConfig, env?: EnvLike): EngineLocality;
 /** Classify a provider id from `providers.ts` / the plugin provider registry. */
 export declare function providerLocality(providerId: string): EngineLocality;
+/**
+ * Can this subject bill you?
+ *
+ * SEPARATE FROM `EngineLocality` ON PURPOSE (docs/LOCALITY-VS-SPEND.md). Those
+ * two questions —
+ *
+ *   locality:    where does the inference run?  (processes and endpoints)
+ *   meteredness: can this spend money?          (credentials and billing)
+ *
+ * — coincide for every subject except CLI agents, which is why one answer served
+ * both for as long as it did. For `ashlrcode` they do not: it is a local PROCESS
+ * that this hub hands `CLAUDE_CODE_OAUTH_TOKEN` / `ANTHROPIC_AUTH_TOKEN` and the
+ * config dirs where subscription auth lives (`run/sandboxed-engine.ts:782` and
+ * its env builder), after which the hub controls nothing. Local, and spendable.
+ *
+ * Reclassifying it as `'cloud'` would fix spend and break locality: local-fleet
+ * membership, pool tiering and local-context injection all legitimately want
+ * "runs on this machine". So this is a SECOND axis, never a rename of the first.
+ *
+ * `'unknown'` is a real answer, not a placeholder. A policy whose purpose is
+ * preventing spend cannot treat "I cannot tell" as "safe" — that is precisely
+ * how the `ashlrcode` gap survived. `decidePermission` refuses anything that is
+ * not provably `'free'`, `'unknown'` included.
+ */
+export type Meteredness = 'free' | 'metered' | 'unknown';
+/**
+ * Meteredness of every cli-agent the hub ships, stated EXPLICITLY.
+ *
+ * A cli-agent is the one engine kind whose spend the hub cannot read off an
+ * endpoint: the binary chooses its own backend after the spawn. So each one is
+ * classified by hand here, and `test/local-only-consumer-parity.test.ts` fails
+ * if a new cli-agent reaches the registry without an entry.
+ *
+ *   claude / codex / hermes / opencode — reach a vendor over the network. Metered.
+ *
+ *   ashlrcode — METERED. `docs/ECOSYSTEM-MAP.md:151`: consumes `@anthropic-ai/sdk`
+ *     + OpenAI (routing xAI/DeepSeek/Groq/Ollama) — cloud inference BY DEFAULT —
+ *     and the hub hands every cli-agent spawn working subscription credentials.
+ *     There is no flag the hub passes and `ac` honours, and no probe the hub can
+ *     read, so "pointed at Ollama" is not a claim this process can verify.
+ *     Owner decision (docs/LOCALITY-VS-SPEND.md, Option A). Option B — classify
+ *     it `'free'` only when an ashlrcode-side local mode is CONFIRMED — stays the
+ *     target, and must not ship before its enforcement exists.
+ *
+ *   aw — UNKNOWN, not metered. `docs/ECOSYSTEM-MAP.md:155` describes a
+ *     fully-local agent fleet where "no data leaves the machine unless cloud
+ *     fallback is opted into". That opt-in lives in aw's own `.env` and agent
+ *     configs, which this hub neither reads nor controls — so the honest answer
+ *     is that we do not know, and `'unknown'` says exactly that. It is refused
+ *     under local-only and priced as spend, identically to `'metered'`; the
+ *     distinction is truthfulness in the refusal, not a difference in effect.
+ *     Calling it `'metered'` would assert a fact about a third-party config we
+ *     have not read, which is the same mistake in the opposite direction.
+ */
+export declare const CLI_AGENT_METEREDNESS: Readonly<Record<string, Meteredness>>;
+/**
+ * Meteredness of a raw endpoint. A loopback URL genuinely cannot bill anyone.
+ *
+ * An absent or unparseable URL is `'unknown'` rather than `'metered'`: we are
+ * not asserting it costs money, we are saying we cannot tell. Both are refused.
+ */
+export declare function endpointMeteredness(baseUrl: string | undefined): Meteredness;
+/**
+ * Meteredness of a provider id. The free set is the same roster as
+ * `LOCAL_PROVIDER_IDS` — for a PROVIDER the two axes really do coincide, because
+ * a provider id names a serving runtime rather than an agent that picks its own
+ * backend. Everything else in the provider id space is a billed vendor.
+ */
+export declare function providerMeteredness(providerId: string): Meteredness;
+/**
+ * Meteredness of an engine id.
+ *
+ *   builtin           — in-process, no model call. Free.
+ *   cli-agent         — `CLI_AGENT_METEREDNESS`; an agent registered through
+ *                       `cfg.foundry.engines` that nobody classified is 'unknown'.
+ *   api-model         — the resolved base URL decides, exactly as locality does:
+ *                       a self-hosted endpoint behind an API key is still free if
+ *                       it answers on loopback. No resolvable URL ⇒ 'unknown'.
+ *   absent from registry — 'unknown', except `llama-server`, which older builds
+ *                       synthesise inline in `run/engines.ts`.
+ */
+export declare function engineMeteredness(engine: string, cfg?: AshlrConfig, env?: EnvLike): Meteredness;
+/**
+ * Meteredness of an id that may come from EITHER id space.
+ *
+ * `run/budget.ts` documents a provider id but `run/sandboxed-engine.ts` calls it
+ * with an engine id (`:1825`, `:2161`, `:3061`). Rather than leave that mismatch
+ * load-bearing, this resolver names the ambiguity and settles it by ASKING WHICH
+ * SPACE THE ID IS IN, in this order:
+ *
+ *   1. a free provider id (`ollama`, `lmstudio`, …) → free;
+ *   2. an id the engine registry resolves → `engineMeteredness` is authoritative,
+ *      so `'local-coder'` (loopback, absent from the provider roster) is free and
+ *      `'aw'` keeps its honest `'unknown'` instead of being flattened to metered;
+ *   3. anything else → the provider id space, where "not in the free set" means a
+ *      billed vendor, so `'anthropic'` is metered rather than being mistaken for
+ *      an unclassified engine.
+ */
+export declare function subjectMeteredness(id: string, cfg?: AshlrConfig, env?: EnvLike): Meteredness;
 /**
  * Resolve the engine id behind an executable name.
  *
@@ -119,7 +242,13 @@ export interface LocalOnlySubject {
     kind: LocalOnlySubjectKind;
     /** Engine id, provider id, or base URL — whatever the operator would recognise. */
     id: string;
+    /**
+     * Where the inference runs. Carried for diagnostics and for the consumers
+     * that legitimately ask "on this machine?" — NOT what the permission turns on.
+     */
     locality: EngineLocality;
+    /** Whether this subject can spend. THIS is what `decidePermission` reads. */
+    meteredness: Meteredness;
 }
 export interface LocalOnlyVerdict {
     /** False means: do not dispatch. Refuse, loudly, naming `reason`. */
@@ -149,7 +278,12 @@ export declare function endpointPermitted(baseUrl: string, cfg?: AshlrConfig, en
  * engine id. A binary that maps to no known engine is permitted — it is not a
  * hub-managed agent, and refusing every unrecognised executable would break
  * phantom wrapping and local tooling. Every engine the hub can actually route
- * to IS in the registry, so a cloud seat always resolves.
+ * to IS in the registry, so a spendable seat always resolves.
+ *
+ * THIS IS THE SITE THE METEREDNESS SPLIT WAS FOR. `ac` resolves to `ashlrcode`,
+ * which was classified local and therefore permitted — and then handed
+ * `CLAUDE_CODE_OAUTH_TOKEN` by the very next call. It now resolves to `metered`
+ * and is refused, with no change needed at `run/engines.ts:455` itself.
  */
 export declare function binPermitted(bin: string, cfg?: AshlrConfig, env?: EnvLike): LocalOnlyVerdict;
 /**
@@ -169,7 +303,13 @@ export declare class LocalOnlyRefusal extends Error {
 export declare function isLocalOnlyRefusal(err: unknown): err is LocalOnlyRefusal;
 /** Throw `LocalOnlyRefusal` when `verdict` refuses; otherwise return. */
 export declare function assertPermitted(verdict: LocalOnlyVerdict): void;
-/** Keep only engines permitted under the current mode. */
+/**
+ * Keep only engines permitted under the current mode.
+ *
+ * Delegates to `enginePermitted` rather than re-deriving the answer: a filter
+ * that reached for `engineLocality` would hand the routers a set the dispatcher
+ * then refuses, which is the "mysteriously worse result" this module forbids.
+ */
 export declare function filterPermittedEngines<T extends string>(engines: readonly T[], cfg?: AshlrConfig, env?: EnvLike): T[];
 /**
  * Engines from `candidates` that sit at `tier` AND are permitted right now.

package/dist/core/policy/local-only.js

@@ -25,6 +25,20 @@
  * make impossible, so `test/local-only-dispatch-paths.test.ts` enumerates every
  * known path and asserts it refuses.
  *
+ * TWO AXES, ONE PREDICATE (docs/LOCALITY-VS-SPEND.md)
+ * --------------------------------------------------
+ * This module answers two different questions and must not confuse them:
+ *
+ *   `EngineLocality`  'local' | 'cloud'              — where does the process run?
+ *   `Meteredness`     'free' | 'metered' | 'unknown' — can this spend money?
+ *
+ * `decidePermission` reads METEREDNESS and refuses anything that is not provably
+ * `'free'`, `'unknown'` included. Locality is still published, unchanged, for the
+ * consumers that genuinely mean "on this machine" — local-fleet membership, pool
+ * tiering, local-context injection. They are not interchangeable: `ashlrcode` is
+ * a local process that this hub hands paid credentials, and reading its locality
+ * as permission is exactly how it kept them.
+ *
  * MODE RESOLUTION (config + env, env can only ENABLE)
  * --------------------------------------------------
  *   persisted : cfg.foundry.localOnly === true   (canonical)
@@ -182,8 +196,16 @@ export function localOnlyEnabled(cfg, env = process.env) {
  * opencode) reaches a vendor over the network and is classified 'cloud'.
  */
 const LOCAL_CLI_AGENTS = new Set(['ashlrcode', 'aw']);
-/** Provider ids served from this machine. Everything else is treated as cloud. */
-const LOCAL_PROVIDER_IDS = new Set([
+/**
+ * Provider ids served from this machine. Everything else is treated as cloud.
+ *
+ * Exported so the parity suite can iterate the authority's OWN enumeration
+ * rather than restating it — a test carrying its own copy of this list would be
+ * the duplication this module exists to prevent. Consumers ask
+ * `providerLocality` / `providerMeteredness`; nothing outside this file should
+ * read the set to make a decision.
+ */
+export const LOCAL_PROVIDER_IDS = new Set([
     'ollama',
     'lmstudio',
     'llama-server',
@@ -267,6 +289,129 @@ export function engineLocality(engine, cfg, env = process.env) {
 export function providerLocality(providerId) {
     return LOCAL_PROVIDER_IDS.has(providerId.trim().toLowerCase()) ? 'local' : 'cloud';
 }
+/**
+ * Meteredness of every cli-agent the hub ships, stated EXPLICITLY.
+ *
+ * A cli-agent is the one engine kind whose spend the hub cannot read off an
+ * endpoint: the binary chooses its own backend after the spawn. So each one is
+ * classified by hand here, and `test/local-only-consumer-parity.test.ts` fails
+ * if a new cli-agent reaches the registry without an entry.
+ *
+ *   claude / codex / hermes / opencode — reach a vendor over the network. Metered.
+ *
+ *   ashlrcode — METERED. `docs/ECOSYSTEM-MAP.md:151`: consumes `@anthropic-ai/sdk`
+ *     + OpenAI (routing xAI/DeepSeek/Groq/Ollama) — cloud inference BY DEFAULT —
+ *     and the hub hands every cli-agent spawn working subscription credentials.
+ *     There is no flag the hub passes and `ac` honours, and no probe the hub can
+ *     read, so "pointed at Ollama" is not a claim this process can verify.
+ *     Owner decision (docs/LOCALITY-VS-SPEND.md, Option A). Option B — classify
+ *     it `'free'` only when an ashlrcode-side local mode is CONFIRMED — stays the
+ *     target, and must not ship before its enforcement exists.
+ *
+ *   aw — UNKNOWN, not metered. `docs/ECOSYSTEM-MAP.md:155` describes a
+ *     fully-local agent fleet where "no data leaves the machine unless cloud
+ *     fallback is opted into". That opt-in lives in aw's own `.env` and agent
+ *     configs, which this hub neither reads nor controls — so the honest answer
+ *     is that we do not know, and `'unknown'` says exactly that. It is refused
+ *     under local-only and priced as spend, identically to `'metered'`; the
+ *     distinction is truthfulness in the refusal, not a difference in effect.
+ *     Calling it `'metered'` would assert a fact about a third-party config we
+ *     have not read, which is the same mistake in the opposite direction.
+ */
+export const CLI_AGENT_METEREDNESS = Object.freeze({
+    claude: 'metered',
+    codex: 'metered',
+    hermes: 'metered',
+    opencode: 'metered',
+    ashlrcode: 'metered',
+    aw: 'unknown',
+});
+/**
+ * Meteredness of a raw endpoint. A loopback URL genuinely cannot bill anyone.
+ *
+ * An absent or unparseable URL is `'unknown'` rather than `'metered'`: we are
+ * not asserting it costs money, we are saying we cannot tell. Both are refused.
+ */
+export function endpointMeteredness(baseUrl) {
+    if (typeof baseUrl !== 'string' || baseUrl.trim().length === 0)
+        return 'unknown';
+    try {
+        new URL(baseUrl.trim());
+    }
+    catch {
+        return 'unknown';
+    }
+    return isLoopbackEndpoint(baseUrl) ? 'free' : 'metered';
+}
+/**
+ * Meteredness of a provider id. The free set is the same roster as
+ * `LOCAL_PROVIDER_IDS` — for a PROVIDER the two axes really do coincide, because
+ * a provider id names a serving runtime rather than an agent that picks its own
+ * backend. Everything else in the provider id space is a billed vendor.
+ */
+export function providerMeteredness(providerId) {
+    return LOCAL_PROVIDER_IDS.has(providerId.trim().toLowerCase()) ? 'free' : 'metered';
+}
+/**
+ * Meteredness of an engine id.
+ *
+ *   builtin           — in-process, no model call. Free.
+ *   cli-agent         — `CLI_AGENT_METEREDNESS`; an agent registered through
+ *                       `cfg.foundry.engines` that nobody classified is 'unknown'.
+ *   api-model         — the resolved base URL decides, exactly as locality does:
+ *                       a self-hosted endpoint behind an API key is still free if
+ *                       it answers on loopback. No resolvable URL ⇒ 'unknown'.
+ *   absent from registry — 'unknown', except `llama-server`, which older builds
+ *                       synthesise inline in `run/engines.ts`.
+ */
+export function engineMeteredness(engine, cfg, env = process.env) {
+    const id = engine.trim().toLowerCase();
+    if (id === ALWAYS_PERMITTED_ENGINE)
+        return 'free';
+    const spec = resolveEngineSpec(engine, cfg);
+    if (!spec) {
+        if (id === 'llama-server')
+            return endpointMeteredness(llamaServerBaseUrl(cfg, env));
+        return 'unknown';
+    }
+    if (spec.kind === 'builtin')
+        return 'free';
+    if (spec.kind === 'cli-agent')
+        return CLI_AGENT_METEREDNESS[id] ?? 'unknown';
+    const api = spec.api;
+    const fromEnv = api?.baseUrlEnv ? env[api.baseUrlEnv]?.trim() : undefined;
+    const baseUrl = (fromEnv && fromEnv.length > 0 ? fromEnv : undefined) ?? api?.defaultBaseUrl;
+    return endpointMeteredness(baseUrl);
+}
+/**
+ * Meteredness of an id that may come from EITHER id space.
+ *
+ * `run/budget.ts` documents a provider id but `run/sandboxed-engine.ts` calls it
+ * with an engine id (`:1825`, `:2161`, `:3061`). Rather than leave that mismatch
+ * load-bearing, this resolver names the ambiguity and settles it by ASKING WHICH
+ * SPACE THE ID IS IN, in this order:
+ *
+ *   1. a free provider id (`ollama`, `lmstudio`, …) → free;
+ *   2. an id the engine registry resolves → `engineMeteredness` is authoritative,
+ *      so `'local-coder'` (loopback, absent from the provider roster) is free and
+ *      `'aw'` keeps its honest `'unknown'` instead of being flattened to metered;
+ *   3. anything else → the provider id space, where "not in the free set" means a
+ *      billed vendor, so `'anthropic'` is metered rather than being mistaken for
+ *      an unclassified engine.
+ */
+export function subjectMeteredness(id, cfg, env = process.env) {
+    const key = id.trim().toLowerCase();
+    if (key.length === 0)
+        return 'unknown';
+    if (LOCAL_PROVIDER_IDS.has(key))
+        return 'free';
+    const isEngineId = key === ALWAYS_PERMITTED_ENGINE ||
+        key === 'llama-server' || // may be synthesised inline rather than registered
+        resolveEngineSpec(id, cfg) !== undefined;
+    if (isEngineId)
+        return engineMeteredness(id, cfg, env);
+    return providerMeteredness(id);
+}
 /**
  * Resolve the engine id behind an executable name.
  *
@@ -311,7 +456,10 @@ const SUBJECT_NOUN = {
  */
 export function decidePermission(subject, cfg, env = process.env) {
     const mode = resolveLocalOnlyMode(cfg, env);
-    if (!mode.enabled || subject.locality === 'local') {
+    // THE RULE: refuse anything not PROVABLY free. Reading `locality` here is
+    // what let `ashlrcode` — a local process holding paid credentials — through,
+    // and treating 'unknown' as permitted is the same mistake one step removed.
+    if (!mode.enabled || subject.meteredness === 'free') {
         return { permitted: true, subject, mode, reason: null };
     }
     return { permitted: false, subject, mode, reason: refusalReason(subject, mode) };
@@ -323,18 +471,37 @@ export function decidePermission(subject, cfg, env = process.env) {
  */
 function refusalReason(subject, mode) {
     const noun = SUBJECT_NOUN[subject.kind];
-    return (`local-only: refusing to dispatch to cloud ${noun} '${subject.id}'. ${mode.detail} ` +
-        `No cloud ${noun} is reachable while local-only is on — ` +
+    // 'unknown' gets its own sentence on purpose. Told "refusing to dispatch to
+    // cloud engine 'aw'" an operator reads a misclassification and goes to turn
+    // the mode off; told the hub cannot verify it is free, they get the truth.
+    const head = subject.meteredness === 'unknown'
+        ? `local-only: refusing to dispatch to ${noun} '${subject.id}' — the hub cannot verify it is free. ` +
+            `It may reach a paid backend after dispatch and nothing here would see it, so it is not provably free and is refused. `
+        : `local-only: refusing to dispatch to cloud ${noun} '${subject.id}'. `;
+    const tail = subject.meteredness === 'unknown'
+        ? ''
+        : `No cloud ${noun} is reachable while local-only is on — `;
+    return (`${head}${mode.detail} ${tail}` +
         `run this work on a local engine (builtin, local-coder, llama-server), or turn the mode off with ` +
         `cfg.foundry.localOnly=false (and unset ${LOCAL_ONLY_ENV_VAR}).`);
 }
 /** Is this ENGINE permitted right now? */
 export function enginePermitted(engine, cfg, env = process.env) {
-    return decidePermission({ kind: 'engine', id: engine, locality: engineLocality(engine, cfg, env) }, cfg, env);
+    return decidePermission({
+        kind: 'engine',
+        id: engine,
+        locality: engineLocality(engine, cfg, env),
+        meteredness: engineMeteredness(engine, cfg, env),
+    }, cfg, env);
 }
 /** Is this PROVIDER permitted right now? */
 export function providerPermitted(providerId, cfg, env = process.env) {
-    return decidePermission({ kind: 'provider', id: providerId, locality: providerLocality(providerId) }, cfg, env);
+    return decidePermission({
+        kind: 'provider',
+        id: providerId,
+        locality: providerLocality(providerId),
+        meteredness: providerMeteredness(providerId),
+    }, cfg, env);
 }
 /** Is this raw OpenAI-compatible ENDPOINT permitted right now? */
 export function endpointPermitted(baseUrl, cfg, env = process.env) {
@@ -342,6 +509,7 @@ export function endpointPermitted(baseUrl, cfg, env = process.env) {
         kind: 'endpoint',
         id: baseUrl,
         locality: isLoopbackEndpoint(baseUrl) ? 'local' : 'cloud',
+        meteredness: endpointMeteredness(baseUrl),
     }, cfg, env);
 }
 /**
@@ -351,14 +519,22 @@ export function endpointPermitted(baseUrl, cfg, env = process.env) {
  * engine id. A binary that maps to no known engine is permitted — it is not a
  * hub-managed agent, and refusing every unrecognised executable would break
  * phantom wrapping and local tooling. Every engine the hub can actually route
- * to IS in the registry, so a cloud seat always resolves.
+ * to IS in the registry, so a spendable seat always resolves.
+ *
+ * THIS IS THE SITE THE METEREDNESS SPLIT WAS FOR. `ac` resolves to `ashlrcode`,
+ * which was classified local and therefore permitted — and then handed
+ * `CLAUDE_CODE_OAUTH_TOKEN` by the very next call. It now resolves to `metered`
+ * and is refused, with no change needed at `run/engines.ts:455` itself.
  */
 export function binPermitted(bin, cfg, env = process.env) {
     const id = engineIdForBin(bin, cfg);
     if (id === undefined) {
         return {
             permitted: true,
-            subject: { kind: 'engine', id: bin, locality: 'local' },
+            // Deliberate: an executable no engine claims is outside the roster this
+            // policy governs, so it is 'free' in the only sense that applies — the
+            // hub is not handing it a seat, or credentials, or work.
+            subject: { kind: 'engine', id: bin, locality: 'local', meteredness: 'free' },
             mode: resolveLocalOnlyMode(cfg, env),
             reason: null,
         };
@@ -371,7 +547,7 @@ export function binPermitted(bin, cfg, env = process.env) {
  * heuristic here could know.
  */
 export function cloudSubjectPermitted(kind, id, cfg, env = process.env) {
-    return decidePermission({ kind, id, locality: 'cloud' }, cfg, env);
+    return decidePermission({ kind, id, locality: 'cloud', meteredness: 'metered' }, cfg, env);
 }
 // ---------------------------------------------------------------------------
 // Refusal
@@ -403,12 +579,18 @@ export function assertPermitted(verdict) {
 // ---------------------------------------------------------------------------
 // Routing helpers
 // ---------------------------------------------------------------------------
-/** Keep only engines permitted under the current mode. */
+/**
+ * Keep only engines permitted under the current mode.
+ *
+ * Delegates to `enginePermitted` rather than re-deriving the answer: a filter
+ * that reached for `engineLocality` would hand the routers a set the dispatcher
+ * then refuses, which is the "mysteriously worse result" this module forbids.
+ */
 export function filterPermittedEngines(engines, cfg, env = process.env) {
     const mode = resolveLocalOnlyMode(cfg, env);
     if (!mode.enabled)
         return [...engines];
-    return engines.filter((e) => engineLocality(e, cfg, env) === 'local');
+    return engines.filter((e) => enginePermitted(e, cfg, env).permitted);
 }
 /**
  * Engines from `candidates` that sit at `tier` AND are permitted right now.
@@ -431,7 +613,8 @@ export function permittedEnginesAtTier(tier, candidates, cfg, env = process.env)
  * and no endpoint credentials — only the subject id and the mode source.
  */
 export function localOnlyReasonTag(verdict) {
-    return `local-only(${verdict.mode.source}): cloud ${SUBJECT_NOUN[verdict.subject.kind]} '${verdict.subject.id}' refused`;
+    const adjective = verdict.subject.meteredness === 'unknown' ? 'unclassified' : 'cloud';
+    return `local-only(${verdict.mode.source}): ${adjective} ${SUBJECT_NOUN[verdict.subject.kind]} '${verdict.subject.id}' refused`;
 }
 /**
  * Build the operator snapshot. Read-only: resolves the mode, classifies every
@@ -453,11 +636,17 @@ export function localOnlyPolicySnapshot(cfg, env = process.env) {
     ids.add('llama-server'); // may be synthesised inline rather than registered
     const refuses = [];
     for (const id of [...ids].sort()) {
-        if (engineLocality(id, cfg, env) !== 'cloud')
+        // The list the UI renders MUST be the set the dispatcher refuses, so it is
+        // computed from meteredness — the same axis `decidePermission` reads. A
+        // panel filtered by locality would omit `ashlrcode` while the dispatcher
+        // refused it, and "Nothing can spend money while this is on" would be false
+        // in the one place an operator goes to check it.
+        const meteredness = engineMeteredness(id, cfg, env);
+        if (meteredness === 'free')
             continue;
         refuses.push({
             engine: id,
-            reason: refusalReason({ kind: 'engine', id, locality: 'cloud' }, asIfEnabled),
+            reason: refusalReason({ kind: 'engine', id, locality: engineLocality(id, cfg, env), meteredness }, asIfEnabled),
         });
     }
     return {

package/dist/core/policy/local-only.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-only.js","sourceRoot":"","sources":["../../../src/core/policy/local-only.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAErF,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,wEAAwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAkBrD,yEAAyE;AACzE,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAMxG,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACxD,+EAA+E;IAC/E,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;AACnE,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,GAA4B;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,IAAI,GAAG,GAAyC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAwC,CAAC;IACvE,IAAI,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAwC,CAAC;IACrE,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,IAAI,sBAAsB,GAAG,KAAK,CAAC;AAEnC,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,IAAI,OAAO;QAAE,sBAAsB,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,6BAA6B;IAC3C,sBAAsB,GAAG,KAAK,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,UAAU;QAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,UAAU,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,QAAQ;YAChB,MAAM,EACJ,4DAA4D;gBAC5D,GAAG,kBAAkB,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,yCAAyC;gBAC3F,sFAAsF;gBACtF,yEAAyE;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,YAAY;YACpB,MAAM,EACJ,+DAA+D,kBAAkB,4BAA4B;SAChH,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,2DAA2D;SACpE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EACJ,2CAA2C,kBAAkB,YAAY;gBACzE,uDAAuD;SAC1D,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,8EAA8E;IAC9E,+CAA+C;IAC/C,IAAI,GAAG,KAAK,SAAS,IAAI,sBAAsB,EAAE,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;YACf,MAAM,EACJ,2FAA2F;gBAC3F,6DAA6D;SAChE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;QACb,MAAM,EACJ,MAAM,KAAK,KAAK;YACd,CAAC,CAAC,sBAAsB,kBAAkB,6DAA6D;YACvG,CAAC,CAAC,2EAA2E;KAClF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe,OAAO,CAAC,GAAG;IAC7D,OAAO,oBAAoB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,2BAA2B;AAC3B,MAAM,UAAU,gBAAgB,CAAC,GAAiB,EAAE,MAAe,OAAO,CAAC,GAAG;IAC5E,OAAO,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC;AAChD,CAAC;AAeD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;AAE3E,kFAAkF;AAClF,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,QAAQ;IACR,UAAU;IACV,cAAc;IACd,aAAa;IACb,OAAO;IACP,SAAS;CACV,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAqB,CAAC;AAE7D;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,oCAAoC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAA4B,EAAE,GAAY;IACpE,MAAM,MAAM,GAAI,GAAsD,EAAE,CAAC,QAAQ,CAEpE,CAAC;IACd,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,aAAa,CAAqC,CAAC;IAChF,OAAO,CACL,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;QAC5B,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE;QACpC,0BAA0B,CAC3B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,EAAE,KAAK,uBAAuB;QAAE,OAAO,OAAO,CAAC;IAEnD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAkB,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,EAAE,KAAK,cAAc,EAAE,CAAC;YAC1B,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAEnF,6EAA6E;IAC7E,8EAA8E;IAC9E,uEAAuE;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,OAAO,GAAG,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,cAAc,CAAC;IAC7F,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACzD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,OAAO,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACrF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,GAAiB;IAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC5C,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QACxC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;aAC3C,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aACjE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAyBD,MAAM,YAAY,GAAmD;IACnE,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAyB,EACzB,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAyB,EAAE,IAAmB;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,CACL,6CAA6C,IAAI,KAAK,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,MAAM,GAAG;QACpF,YAAY,IAAI,yCAAyC;QACzD,kGAAkG;QAClG,0CAA0C,kBAAkB,IAAI,CACjE,CAAC;AACJ,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,OAAO,gBAAgB,CACrB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAC1E,GAAG,EACH,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,OAAO,gBAAgB,CACrB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,EAAE,EAC5E,GAAG,EACH,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,OAAO,gBAAgB,CACrB;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,OAAO;QACX,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;KAC1D,EACD,GAAG,EACH,GAAG,CACJ,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO;YACL,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE;YACvD,IAAI,EAAE,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC;YACpC,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAA0B,EAC1B,EAAU,EACV,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,OAAO,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,oEAAoE;AACpE,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,6CAA6C;IACpC,IAAI,GAAG,oBAA6B,CAAC;IACrC,OAAO,CAAmB;IAEnC,YAAY,OAAyB;QACnC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,qBAAqB,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,GAAG,YAAY,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACX,GAA0B,CAAC,IAAI,KAAK,oBAAoB,CAC1D,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,0DAA0D;AAC1D,MAAM,UAAU,sBAAsB,CACpC,OAAqB,EACrB,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,OAAO,CAAC,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAgB,EAChB,UAA+B,EAC/B,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QAClC,MAAM,YAAY,GAAG,MAAM,KAAK,uBAAuB;YACrD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI,OAAO,CAAC;QACpD,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAyB;IAC1D,OAAO,cAAc,OAAO,CAAC,IAAI,CAAC,MAAM,YAAY,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;AAC3H,CAAC;AAqCD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,6EAA6E;IAC7E,qCAAqC;IACrC,MAAM,WAAW,GAAkB,IAAI,CAAC,OAAO;QAC7C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC;YACE,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,+DAA+D;SACxE,CAAC;IAEN,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,mDAAmD;IAC5E,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjC,IAAI,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,OAAO;YAAE,SAAS;QACvD,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,WAAW,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,6EAA6E;QAC7E,oEAAoE;QACpE,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;QAC1D,OAAO;QACP,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"local-only.js","sourceRoot":"","sources":["../../../src/core/policy/local-only.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAGH,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAErF,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,wEAAwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAkBrD,yEAAyE;AACzE,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAMxG,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACxD,+EAA+E;IAC/E,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;AACnE,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,GAA4B;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,IAAI,GAAG,GAAyC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAwC,CAAC;IACvE,IAAI,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAwC,CAAC;IACrE,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,IAAI,sBAAsB,GAAG,KAAK,CAAC;AAEnC,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,IAAI,OAAO;QAAE,sBAAsB,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,6BAA6B;IAC3C,sBAAsB,GAAG,KAAK,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,UAAU;QAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,UAAU,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,QAAQ;YAChB,MAAM,EACJ,4DAA4D;gBAC5D,GAAG,kBAAkB,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,yCAAyC;gBAC3F,sFAAsF;gBACtF,yEAAyE;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,YAAY;YACpB,MAAM,EACJ,+DAA+D,kBAAkB,4BAA4B;SAChH,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,2DAA2D;SACpE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EACJ,2CAA2C,kBAAkB,YAAY;gBACzE,uDAAuD;SAC1D,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,8EAA8E;IAC9E,+CAA+C;IAC/C,IAAI,GAAG,KAAK,SAAS,IAAI,sBAAsB,EAAE,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;YACf,MAAM,EACJ,2FAA2F;gBAC3F,6DAA6D;SAChE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;QACb,MAAM,EACJ,MAAM,KAAK,KAAK;YACd,CAAC,CAAC,sBAAsB,kBAAkB,6DAA6D;YACvG,CAAC,CAAC,2EAA2E;KAClF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe,OAAO,CAAC,GAAG;IAC7D,OAAO,oBAAoB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,2BAA2B;AAC3B,MAAM,UAAU,gBAAgB,CAAC,GAAiB,EAAE,MAAe,OAAO,CAAC,GAAG;IAC5E,OAAO,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC;AAChD,CAAC;AAeD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;AAE3E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,QAAQ;IACR,UAAU;IACV,cAAc;IACd,aAAa;IACb,OAAO;IACP,SAAS;CACV,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAqB,CAAC;AAE7D;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,oCAAoC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAA4B,EAAE,GAAY;IACpE,MAAM,MAAM,GAAI,GAAsD,EAAE,CAAC,QAAQ,CAEpE,CAAC;IACd,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,aAAa,CAAqC,CAAC;IAChF,OAAO,CACL,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;QAC5B,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE;QACpC,0BAA0B,CAC3B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,EAAE,KAAK,uBAAuB;QAAE,OAAO,OAAO,CAAC;IAEnD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAkB,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,EAAE,KAAK,cAAc,EAAE,CAAC;YAC1B,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAEnF,6EAA6E;IAC7E,8EAA8E;IAC9E,uEAAuE;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,OAAO,GAAG,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,cAAc,CAAC;IAC7F,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACzD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,OAAO,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACrF,CAAC;AAgCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA0C,MAAM,CAAC,MAAM,CAAC;IACxF,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,SAAS;IACnB,SAAS,EAAE,SAAS;IACpB,EAAE,EAAE,SAAS;CACd,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA2B;IAC7D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjF,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,OAAO,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,EAAE,KAAK,uBAAuB;QAAE,OAAO,MAAM,CAAC;IAElD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAkB,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,EAAE,KAAK,cAAc;YAAE,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACpF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,qBAAqB,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;IAE7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,OAAO,GAAG,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,cAAc,CAAC;IAC7F,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAU,EACV,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/C,MAAM,UAAU,GACd,GAAG,KAAK,uBAAuB;QAC/B,GAAG,KAAK,cAAc,IAAI,mDAAmD;QAC7E,iBAAiB,CAAC,EAAc,EAAE,GAAG,CAAC,KAAK,SAAS,CAAC;IACvD,IAAI,UAAU;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,mBAAmB,CAAC,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,GAAiB;IAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC5C,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QACxC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;aAC3C,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aACjE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AA+BD,MAAM,YAAY,GAAmD;IACnE,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAyB,EACzB,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,0EAA0E;IAC1E,6EAA6E;IAC7E,4EAA4E;IAC5E,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACpD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAyB,EAAE,IAAmB;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,IAAI,GACR,OAAO,CAAC,WAAW,KAAK,SAAS;QAC/B,CAAC,CAAC,uCAAuC,IAAI,KAAK,OAAO,CAAC,EAAE,wCAAwC;YAClG,uHAAuH;QACzH,CAAC,CAAC,6CAA6C,IAAI,KAAK,OAAO,CAAC,EAAE,KAAK,CAAC;IAC5E,MAAM,IAAI,GACR,OAAO,CAAC,WAAW,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,YAAY,IAAI,yCAAyC,CAAC;IAChE,OAAO,CACL,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE;QAC/B,kGAAkG;QAClG,0CAA0C,kBAAkB,IAAI,CACjE,CAAC;AACJ,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,OAAO,gBAAgB,CACrB;QACE,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,MAAM;QACV,QAAQ,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC;QAC1C,WAAW,EAAE,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC;KACjD,EACD,GAAG,EACH,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,OAAO,gBAAgB,CACrB;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,UAAU;QACd,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC;QACtC,WAAW,EAAE,mBAAmB,CAAC,UAAU,CAAC;KAC7C,EACD,GAAG,EACH,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,OAAO,gBAAgB,CACrB;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,OAAO;QACX,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;QACzD,WAAW,EAAE,mBAAmB,CAAC,OAAO,CAAC;KAC1C,EACD,GAAG,EACH,GAAG,CACJ,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO;YACL,SAAS,EAAE,IAAI;YACf,wEAAwE;YACxE,uEAAuE;YACvE,yDAAyD;YACzD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;YAC5E,IAAI,EAAE,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC;YACpC,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAA0B,EAC1B,EAAU,EACV,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,OAAO,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAC7F,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,oEAAoE;AACpE,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,6CAA6C;IACpC,IAAI,GAAG,oBAA6B,CAAC;IACrC,OAAO,CAAmB;IAEnC,YAAY,OAAyB;QACnC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,qBAAqB,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,GAAG,YAAY,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACX,GAA0B,CAAC,IAAI,KAAK,oBAAoB,CAC1D,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAqB,EACrB,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAgB,EAChB,UAA+B,EAC/B,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QAClC,MAAM,YAAY,GAAG,MAAM,KAAK,uBAAuB;YACrD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI,OAAO,CAAC;QACpD,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAyB;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;IACvF,OAAO,cAAc,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;AAClI,CAAC;AAqCD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAiB,EACjB,MAAe,OAAO,CAAC,GAAG;IAE1B,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,6EAA6E;IAC7E,qCAAqC;IACrC,MAAM,WAAW,GAAkB,IAAI,CAAC,OAAO;QAC7C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC;YACE,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,+DAA+D;SACxE,CAAC;IAEN,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,mDAAmD;IAC5E,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjC,2EAA2E;QAC3E,wEAAwE;QACxE,yEAAyE;QACzE,4EAA4E;QAC5E,iDAAiD;QACjD,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACpD,IAAI,WAAW,KAAK,MAAM;YAAE,SAAS;QACrC,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,aAAa,CACnB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,EAC3E,WAAW,CACZ;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,6EAA6E;QAC7E,oEAAoE;QACpE,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;QAC1D,OAAO;QACP,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC"}

package/dist/core/run/budget.d.ts

@@ -4,7 +4,12 @@
  * Pure, deterministic functions — no I/O, no side effects. All functions
  * return new objects; RunUsage is never mutated in place.
  */
-import type { RunUsage, RunBudget } from '../types.js';
+import type { AshlrConfig, RunUsage, RunBudget } from '../types.js';
+/**
+ * Test-only: drop memoised answers so suites that vary env or registry entries
+ * stay independent of each other's ordering.
+ */
+export declare function __resetBudgetMeterednessCacheForTests(): void;
 /**
  * Return a fresh, zeroed RunUsage.
  */
@@ -48,19 +53,28 @@ export declare const CACHE_READ_MULT = 0.1;
 /**
  * Estimated USD cost for a single model call.
  *
- * - Local providers (ollama, lmstudio) → always 0.
- * - Cloud providers → looked up from the static price table by matching
- *   the provider id (case-insensitive prefix match against known keys).
- *   Falls back to a conservative $3/$15 per-M-token estimate when unknown.
+ * - PROVABLY FREE subjects → 0. That is `subjectMeteredness(...) === 'free'`:
+ *   loopback endpoints and the local serving runtimes, whatever they are called
+ *   in either id space.
+ * - Everything else → looked up from the static price table by matching the id
+ *   (case-insensitive prefix match against known keys). Falls back to a
+ *   conservative $3/$15 per-M-token estimate when nothing matches — which is
+ *   where `'ashlrcode'` lands, ON PURPOSE. A metered subject must never report
+ *   $0; a wrong number invites scrutiny, a zero ends it.
  * - M246: optional cache token params (default 0) add tiered cache pricing
  *   on top of the base cost. Existing callers with no cache args are unaffected.
  *
- * @param provider       Provider id string (e.g. 'ollama', 'anthropic', 'openai').
+ * @param subject        Provider id OR engine id — e.g. 'ollama', 'anthropic',
+ *                       'local-coder', 'ashlrcode'. Both id spaces resolve; see
+ *                       `meterednessOf` for why this parameter used to lie.
  * @param tokensIn       Number of prompt/input tokens (non-cached).
  * @param tokensOut      Number of completion/output tokens.
  * @param cacheRead      M246: Cache-read tokens (0 by default).
  * @param cacheWrite5m   M246: 5-min TTL cache-write tokens (0 by default).
  * @param cacheWrite1h   M246: 1-hour TTL cache-write tokens (0 by default).
- * @returns Estimated USD cost as a number (0 for local).
+ * @param cfg            Optional config, so engines registered through
+ *                       `cfg.foundry.engines` classify correctly. Omitting it
+ *                       can only make a subject LESS provably free, never more.
+ * @returns Estimated USD cost as a number (0 only when provably free).
  */
-export declare function estCostUsd(provider: string, tokensIn: number, tokensOut: number, cacheRead?: number, cacheWrite5m?: number, cacheWrite1h?: number): number;
+export declare function estCostUsd(subject: string, tokensIn: number, tokensOut: number, cacheRead?: number, cacheWrite5m?: number, cacheWrite1h?: number, cfg?: AshlrConfig): number;