@claudexor/orchestrator 1.0.1 → 2.1.3

package/dist/candidateOutputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidateOutputs.js","sourceRoot":"","sources":["../src/candidateOutputs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACrF,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAqB,EAAE,IAAY,EAAE,OAAgB;IACxF,MAAM,KAAK,GACT,SAAS,CAAC,QAAQ;QAClB,SAAS,CAAC,OAAO;QACjB,SAAS,CAAC,UAAU;QACpB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED;2DAC2D;AAC3D,MAAM,UAAU,sBAAsB,CAAC,YAAoB,EAAE,OAAgB;IAC3E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,+BAA+B,CAAC,CAAC;IACjE,IAAI,QAAQ,GAA2C,IAAI,CAAC;IAC5D,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,QAAQ,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;IACpE,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC;IACvD,OAAO,GAAG,EAAE;QACV,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1D,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU;SAC3B,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,SAAS,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;SACxF,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,OAAO;QACL,MAAM,EACJ,GAAG,KAAK,CAAC,YAAY,MAAM;YAC3B,kEAAkE;YAClE,kFAAkF;QACpF,OAAO,EACL,wBAAwB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;YAChG,4BAA4B,KAAK,EAAE;KACtC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAIvC;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,SAAS;QAChE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QAClC,uEAAuE;QACvE,sDAAsD;QACtD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,eAAe;YACvF,SAAS;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5D,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,sDAAsD,CAAC,EAAE,CAAC;QAC9F,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9E,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAO9C;IACC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;KAC/F,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE;QAC5D,GAAG,KAAK,CAAC,MAAM;QACf,QAAQ,EAAE;YACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YACzB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B;QACD,cAAc,EAAE,QAAQ;KACzB,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7C,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/contract-gates.d.ts

@@ -0,0 +1,21 @@
+import type { AccessProfile, GateResult, ProjectConfig, TaskContract, TestCommandGrant, TestCommandInvocation } from "@claudexor/schema";
+import type { GateSpec } from "@claudexor/review";
+type GateCommands = TaskContract["tests"]["commands"];
+/** Merge the three command authorities once and attach external grants only
+ * to versioned project commands. Spec/operator commands are explicit input. */
+export declare function resolveContractGates(input: {
+    repoRoot: string;
+    effectiveAccess: AccessProfile;
+    config: ProjectConfig;
+    trustGrants: TestCommandGrant[];
+    specCommands: TestCommandInvocation[];
+    operatorCommands: TestCommandInvocation[];
+    projectCommands: TestCommandInvocation[];
+}): {
+    commands: GateCommands;
+    autoProtectedPaths: string[];
+};
+export declare function gateSpecsFromContract(contract: TaskContract): GateSpec[];
+export declare function renderTestsEvidence(contract: TaskContract, gates?: GateResult[]): string;
+export {};
+//# sourceMappingURL=contract-gates.d.ts.map

package/dist/contract-gates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-gates.d.ts","sourceRoot":"","sources":["../src/contract-gates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,KAAK,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC;AAEtD;+EAC+E;AAC/E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,aAAa,CAAC;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,YAAY,EAAE,qBAAqB,EAAE,CAAC;IACtC,gBAAgB,EAAE,qBAAqB,EAAE,CAAC;IAC1C,eAAe,EAAE,qBAAqB,EAAE,CAAC;CAC1C,GAAG;IAAE,QAAQ,EAAE,YAAY,CAAC;IAAC,kBAAkB,EAAE,MAAM,EAAE,CAAA;CAAE,CA+C3D;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,YAAY,GAAG,QAAQ,EAAE,CAaxE;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,MAAM,CAiCxF"}

package/dist/contract-gates.js

@@ -0,0 +1,93 @@
+import { canonicalProjectRoot, containsSecretLikeToken, hashJson, sha256 } from "@claudexor/util";
+import { gateProtectedPaths } from "./runSupport.js";
+/** Merge the three command authorities once and attach external grants only
+ * to versioned project commands. Spec/operator commands are explicit input. */
+export function resolveContractGates(input) {
+    const projectDigest = sha256(canonicalProjectRoot(input.repoRoot));
+    const configDigest = hashJson(input.config);
+    const seen = new Set();
+    const sourced = [
+        ...input.specCommands.map((command) => ({ command, source: "spec" })),
+        ...input.operatorCommands.map((command) => ({ command, source: "operator" })),
+        ...input.projectCommands.map((command) => ({ command, source: "project" })),
+    ];
+    const commands = sourced
+        .filter(({ command }) => {
+        const digest = hashJson(command);
+        if (seen.has(digest))
+            return false;
+        seen.add(digest);
+        return true;
+    })
+        .map(({ command, source }, index) => {
+        if (containsSecretLikeToken(JSON.stringify(command))) {
+            throw new Error(`gate command ${index + 1} contains secret-like token; refusing to persist artifact`);
+        }
+        const commandDigest = hashJson(command);
+        const trustGrant = source === "project"
+            ? (input.trustGrants.find((candidate) => candidate.projectDigest === projectDigest &&
+                candidate.configDigest === configDigest &&
+                candidate.commandDigest === commandDigest &&
+                candidate.accessProfile === input.effectiveAccess) ?? null)
+            : null;
+        return {
+            id: `gate-${index + 1}`,
+            ...command,
+            required: true,
+            trust_required: source === "project",
+            trust_grant: trustGrant,
+        };
+    });
+    return {
+        commands,
+        autoProtectedPaths: [
+            ...new Set(gateProtectedPaths(commands.flatMap(({ program, args }) => [program, ...args]))),
+        ],
+    };
+}
+export function gateSpecsFromContract(contract) {
+    return contract.tests.commands.map((command) => ({
+        id: command.id,
+        program: command.program,
+        args: command.args,
+        cwd: command.cwd,
+        envAllowlist: command.envAllowlist,
+        trustRequired: command.trust_required,
+        trustGrant: command.trust_grant,
+        projectRoot: contract.repo.root,
+        accessProfile: contract.access.effective_profile,
+        required: command.required,
+    }));
+}
+export function renderTestsEvidence(contract, gates) {
+    const specs = gateSpecsFromContract(contract);
+    if (gates === undefined || gates.length === 0) {
+        if (specs.length === 0)
+            return "(no test commands configured)";
+        const heading = gates
+            ? "Configured test commands did not produce gate results before this review:"
+            : "Configured test commands (not run yet):";
+        return [
+            heading,
+            ...specs.map((spec) => `- ${spec.id}${spec.required === false ? " (optional)" : ""}: ${JSON.stringify([spec.program, ...spec.args])}`),
+        ].join("\n");
+    }
+    const required = gates.filter((gate) => gate.required);
+    const lines = [
+        `Gate results: required ${required.filter((gate) => gate.status === "passed").length}/${required.length} passed; total ${gates.length}.`,
+    ];
+    const appendTail = (label, text) => {
+        if (!text)
+            return;
+        lines.push(`  ${label}: |`, ...text.split(/\r?\n/).map((line) => `    ${line}`));
+    };
+    for (const gate of gates) {
+        lines.push(`- ${gate.id}${gate.required === false ? " (optional)" : ""}: ${gate.status}; exit=${gate.exit_code ?? "null"}; duration_ms=${gate.duration_ms}`, `  command: ${gate.command}`);
+        if (gate.output_truncated)
+            lines.push("  output_truncated: true");
+        appendTail("stdout_tail", gate.stdout_tail);
+        appendTail("stderr_tail", gate.stderr_tail);
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=contract-gates.js.map

package/dist/contract-gates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-gates.js","sourceRoot":"","sources":["../src/contract-gates.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAKrD;+EAC+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,KAQpC;IACC,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAG;QACd,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC;QAC9E,GAAG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC,CAAC;QACtF,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;KACrF,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO;SACrB,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,gBAAgB,KAAK,GAAG,CAAC,2DAA2D,CACrF,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,UAAU,GACd,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CACrB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,aAAa,KAAK,aAAa;gBACzC,SAAS,CAAC,YAAY,KAAK,YAAY;gBACvC,SAAS,CAAC,aAAa,KAAK,aAAa;gBACzC,SAAS,CAAC,aAAa,KAAK,KAAK,CAAC,eAAe,CACpD,IAAI,IAAI,CAAC;YACZ,CAAC,CAAC,IAAI,CAAC;QACX,OAAO;YACL,EAAE,EAAE,QAAQ,KAAK,GAAG,CAAC,EAAE;YACvB,GAAG,OAAO;YACV,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,MAAM,KAAK,SAAS;YACpC,WAAW,EAAE,UAAU;SACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,OAAO;QACL,QAAQ;QACR,kBAAkB,EAAE;YAClB,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;SAC5F;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAsB;IAC1D,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/C,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,aAAa,EAAE,OAAO,CAAC,cAAc;QACrC,UAAU,EAAE,OAAO,CAAC,WAAW;QAC/B,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;QAC/B,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB;QAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAsB,EAAE,KAAoB;IAC9E,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,+BAA+B,CAAC;QAC/D,MAAM,OAAO,GAAG,KAAK;YACnB,CAAC,CAAC,2EAA2E;YAC7E,CAAC,CAAC,yCAAyC,CAAC;QAC9C,OAAO;YACL,OAAO;YACP,GAAG,KAAK,CAAC,GAAG,CACV,CAAC,IAAI,EAAE,EAAE,CACP,KAAK,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CACjH;SACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG;QACZ,0BAA0B,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,kBAAkB,KAAK,CAAC,MAAM,GAAG;KACzI,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,IAAmB,EAAQ,EAAE;QAC9D,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,UAAU,IAAI,CAAC,SAAS,IAAI,MAAM,iBAAiB,IAAI,CAAC,WAAW,EAAE,EAChJ,cAAc,IAAI,CAAC,OAAO,EAAE,CAC7B,CAAC;QACF,IAAI,IAAI,CAAC,gBAAgB;YAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAClE,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/credential-profiles.d.ts

@@ -0,0 +1,162 @@
+import type { CredentialProfile, HarnessEvent, HarnessRunSpec, QuotaSnapshot } from "@claudexor/schema";
+/**
+ * The ONE resolve owner for credential profiles (INV-135): explicit id →
+ * durable registry entry for exactly this harness. Unknown, disabled, or
+ * harness-mismatched ids throw a typed refusal — an explicit profile must
+ * never silently become the default credential ladder.
+ */
+export declare function resolveCredentialProfile(registry: readonly CredentialProfile[], wanted: string, harnessId: string): CredentialProfile;
+export declare function selectedProfileAvailability(input: {
+    registry: readonly CredentialProfile[];
+    profileId?: string | null;
+    harnessId: string;
+    probe?: (profile: CredentialProfile) => Promise<{
+        availability: string;
+        verification: string;
+        detail?: string | null;
+    }>;
+}): Promise<string | null>;
+export interface ProfilePolicy {
+    limit_action: "fail" | "ask" | "rotate";
+    rotation_eligible: string[];
+    headroom_threshold: number;
+}
+/** Typed quota evidence for a profile over its headroom bound (provenance). */
+export interface HeadroomBreach {
+    constraint_id: string;
+    used_ratio: number;
+    threshold: number;
+    resets_at: string | null;
+}
+/**
+ * Proactive headroom check (W5.4 `profile_headroom_preflight`): the SELECTED
+ * profile's freshest snapshot windows against the policy threshold. Unknown
+ * usage is NOT a breach — rotation never triggers on missing data.
+ */
+export declare function profileHeadroomBreach(snapshots: readonly QuotaSnapshot[], harnessId: string, profileId: string | null, threshold: number): HeadroomBreach | null;
+/**
+ * The next rotation target after `currentProfileId` (W5.4): policy order wins
+ * (`rotation_eligible`), else every enabled profile of the harness in registry
+ * order. The current profile and disabled/unknown ids never come back; a
+ * profile already over the headroom bound is skipped (rotating INTO a spent
+ * subscription is not a failover). Cross-subscription rotation of one vendor
+ * is allowed by owner decision — but rotation NEVER crosses credential kinds
+ * (release wave round-16 BLOCK): a subscription→API-key swap silently changes
+ * the payment model mid-attempt, and the attempt's first-wins auth-route
+ * receipt (decided once before spawn) would misvalue metered usage as
+ * subscription entitlement, bypassing a finite cash cap.
+ */
+export declare function nextEligibleProfile(registry: readonly CredentialProfile[], harnessId: string, policy: ProfilePolicy, current: Pick<CredentialProfile, "profile_id" | "credential_kind"> | null, snapshots: readonly QuotaSnapshot[], excluded?: ReadonlySet<string>): CredentialProfile | null;
+/**
+ * `rotation_retry_eligible` (sol #30): a failover retry is allowed ONLY when
+ * the attempt saw a TYPED vendor limit AND produced no deliverable and no
+ * workspace mutation — a partially-acted attempt never silently reruns.
+ */
+export declare function rotationRetryEligible(input: {
+    sawTypedLimit: boolean;
+    deliverableEmpty: boolean;
+}): boolean;
+type EmitFn = (type: "route.profile.headroom_exceeded" | "route.profile.rotated" | "route.profile.rotation_exhausted", payload: Record<string, unknown>) => void;
+/**
+ * `profile_headroom_preflight` (W5.4): BEFORE spawn, the selected profile's
+ * freshest quota windows are checked against the policy threshold. A breach
+ * is always a typed event; `rotate` swaps to the next eligible profile with
+ * provenance, `ask`/`fail` proceed on the selected profile — the runtime
+ * `vendor_limit_rejected` evidence stays the terminating truth.
+ */
+export declare function preflightCredentialProfile(args: {
+    profile: CredentialProfile;
+    harnessId: string;
+    policy: ProfilePolicy;
+    registry: readonly CredentialProfile[];
+    snapshots: readonly QuotaSnapshot[];
+    emit: EmitFn;
+}): CredentialProfile;
+/**
+ * Default-subject start selection (INV-135, owner scope "auto-balance"): when
+ * NO profile is pinned, the policy is `rotate`, and the DEFAULT store's own
+ * fresh quota window is at/over the headroom bound, pick the first eligible
+ * SUBSCRIPTION profile instead of spawning into a near-certain vendor limit.
+ * Strictly opt-in: `fail`/`ask` keep today's default-user behavior untouched
+ * (the profile engine's fail action governs PINNED profiles only — throwing
+ * here would brick every default user at 90% quota). Unknown or stale usage
+ * never rotates.
+ */
+export declare function preflightDefaultSubject(args: {
+    harnessId: string;
+    policy: ProfilePolicy;
+    registry: readonly CredentialProfile[];
+    snapshots: readonly QuotaSnapshot[];
+    emit: EmitFn;
+}): CredentialProfile | null;
+/**
+ * Reactive failover plan (`vendor_limit_rejected`, W5.4): rotation fires ONLY
+ * on the typed predicate under a `rotate` policy, marks the current profile
+ * tried (at most once per attempt each), and returns the next target with
+ * provenance already emitted — or null when the attempt must fail as-is.
+ * `currentProfile: null` is the DEFAULT subject: allowed ONLY when the caller
+ * proves the attempt's pre-spawn route was vendor_native (a metered default
+ * hitting a limit is a budget fact, not a subscription to fail over from).
+ */
+export declare function planReactiveRotation(args: {
+    currentProfile: CredentialProfile | null;
+    defaultRouteWasVendorNative?: boolean;
+    harnessId: string;
+    attemptId: string;
+    policy: ProfilePolicy;
+    registry: readonly CredentialProfile[];
+    snapshots: readonly QuotaSnapshot[];
+    triedProfiles: Set<string>;
+    sawTypedLimit: boolean;
+    deliverableEmpty: boolean;
+    lastLimit: {
+        retryDelayMs: number | null;
+        resetsAt: string | null;
+    } | null;
+    emit: EmitFn;
+}): CredentialProfile | null;
+/**
+ * INV-135 at the engine boundary: a cached vendor session resumes ONLY under
+ * exactly the profile it was recorded with (null-default equality included) —
+ * regardless of what the caller's map claims. Preflight rotation changing the
+ * profile therefore starts fresh.
+ */
+export declare function resumeSessionForProfile(cached: {
+    sessionId: string;
+    profileId: string | null;
+} | undefined, profile: CredentialProfile | null): string | null;
+/**
+ * Record a harness-emitted native session id for future thread resume; the
+ * observer never fails the run. profileId is the adapter's per-event stamp —
+ * the EFFECTIVE profile (rotation makes it differ from the requested id).
+ */
+export declare function observeNativeSessionEvent(input: {
+    onSessionObserved?: (harnessId: string, nativeSessionId: string, observedModel?: string | null, profileId?: string | null) => void;
+} | undefined, harnessId: string, ev: HarnessEvent): void;
+/**
+ * Shared reactive-failover step for BOTH lanes: given the attempt's typed
+ * evidence, plan a rotation and rebuild the spec on a NEW vendor session
+ * under the next profile — or return null when the attempt must fail as-is.
+ */
+export declare function rotateSpecOnTypedLimit(args: {
+    spec: HarnessRunSpec;
+    harnessId: string;
+    attemptId: string;
+    policy: ProfilePolicy;
+    registry: readonly CredentialProfile[];
+    snapshots: readonly QuotaSnapshot[];
+    triedProfiles: Set<string>;
+    sawTypedLimit: boolean;
+    deliverableEmpty: boolean;
+    lastLimit: {
+        retryDelayMs: number | null;
+        resetsAt: string | null;
+    } | null;
+    emit: EmitFn;
+    newSessionId: () => string;
+    /** Pre-spawn route estimate for a profile-less spec: default-subject
+     * rotation is allowed ONLY off a vendor_native attempt. */
+    defaultRouteWasVendorNative?: boolean;
+}): HarnessRunSpec | null;
+export {};
+//# sourceMappingURL=credential-profiles.d.ts.map

package/dist/credential-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-profiles.d.ts","sourceRoot":"","sources":["../src/credential-profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,aAAa,EACd,MAAM,mBAAmB,CAAC;AAG3B;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,iBAAiB,CASnB;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC;QAC9C,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,CAAC,CAAC;CACJ,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgBzB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IACxC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,SAAS,aAAa,EAAE,EACnC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,SAAS,EAAE,MAAM,GAChB,cAAc,GAAG,IAAI,CAmBvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,iBAAiB,CAAC,GAAG,IAAI,EACzE,SAAS,EAAE,SAAS,aAAa,EAAE,EACnC,QAAQ,GAAE,WAAW,CAAC,MAAM,CAAa,GACxC,iBAAiB,GAAG,IAAI,CA2B1B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAEV;AAED,KAAK,MAAM,GAAG,CACZ,IAAI,EACA,iCAAiC,GACjC,uBAAuB,GACvB,kCAAkC,EACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,IAAI,CAAC;AAuDV;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,iBAAiB,CAoDpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,iBAAiB,GAAG,IAAI,CAqC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,cAAc,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,iBAAiB,GAAG,IAAI,CAqC3B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,SAAS,EACnE,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAChC,MAAM,GAAG,IAAI,CAGf;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EACD;IACE,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,EAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,KACtB,IAAI,CAAC;CACX,GACD,SAAS,EACb,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,YAAY,GACf,IAAI,CAeN;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B;+DAC2D;IAC3D,2BAA2B,CAAC,EAAE,OAAO,CAAC;CACvC,GAAG,cAAc,GAAG,IAAI,CAsBxB"}

package/dist/credential-profiles.js

@@ -0,0 +1,357 @@
+import { HarnessRunSpec as HarnessRunSpecSchema } from "@claudexor/schema";
+/**
+ * The ONE resolve owner for credential profiles (INV-135): explicit id →
+ * durable registry entry for exactly this harness. Unknown, disabled, or
+ * harness-mismatched ids throw a typed refusal — an explicit profile must
+ * never silently become the default credential ladder.
+ */
+export function resolveCredentialProfile(registry, wanted, harnessId) {
+    const match = registry.find((p) => p.profile_id === wanted && p.harness_id === harnessId);
+    if (!match) {
+        throw new Error(`credential profile "${wanted}" is not registered for harness "${harnessId}"`);
+    }
+    if (!match.enabled) {
+        throw new Error(`credential profile "${wanted}" (${harnessId}) is disabled`);
+    }
+    return match;
+}
+export async function selectedProfileAvailability(input) {
+    if (!input.profileId)
+        return null;
+    let profile;
+    try {
+        profile = resolveCredentialProfile(input.registry, input.profileId, input.harnessId);
+    }
+    catch (error) {
+        return error instanceof Error ? error.message : String(error);
+    }
+    if (!input.probe)
+        return `harness "${input.harnessId}" has no profile probe`;
+    const result = await input.probe(profile);
+    const verificationAdmits = result.verification === "passed" ||
+        (profile.credential_kind === "api_key" && result.verification === "not_run");
+    return result.availability === "available" && verificationAdmits
+        ? "available"
+        : (result.detail ?? `${result.availability}/${result.verification}`);
+}
+/**
+ * Proactive headroom check (W5.4 `profile_headroom_preflight`): the SELECTED
+ * profile's freshest snapshot windows against the policy threshold. Unknown
+ * usage is NOT a breach — rotation never triggers on missing data.
+ */
+export function profileHeadroomBreach(snapshots, harnessId, profileId, threshold) {
+    for (const snapshot of snapshots) {
+        // FRESH evidence only (release wave tier1 #3): a stale or unknown reading
+        // must never breach headroom, rotate a profile away, or fail selection.
+        if (snapshot.freshness !== "fresh")
+            continue;
+        if (snapshot.subject.harness !== harnessId)
+            continue;
+        if ((snapshot.subject.subject_id ?? null) !== profileId)
+            continue;
+        for (const constraint of snapshot.constraints) {
+            if (constraint.used_ratio !== null && constraint.used_ratio >= threshold) {
+                return {
+                    constraint_id: constraint.id,
+                    used_ratio: constraint.used_ratio,
+                    threshold,
+                    resets_at: constraint.resets_at,
+                };
+            }
+        }
+    }
+    return null;
+}
+/**
+ * The next rotation target after `currentProfileId` (W5.4): policy order wins
+ * (`rotation_eligible`), else every enabled profile of the harness in registry
+ * order. The current profile and disabled/unknown ids never come back; a
+ * profile already over the headroom bound is skipped (rotating INTO a spent
+ * subscription is not a failover). Cross-subscription rotation of one vendor
+ * is allowed by owner decision — but rotation NEVER crosses credential kinds
+ * (release wave round-16 BLOCK): a subscription→API-key swap silently changes
+ * the payment model mid-attempt, and the attempt's first-wins auth-route
+ * receipt (decided once before spawn) would misvalue metered usage as
+ * subscription entitlement, bypassing a finite cash cap.
+ */
+export function nextEligibleProfile(registry, harnessId, policy, current, snapshots, excluded = new Set()) {
+    const pool = registry.filter((p) => p.harness_id === harnessId && p.enabled);
+    const ordered = policy.rotation_eligible.length > 0
+        ? policy.rotation_eligible
+            .map((id) => pool.find((p) => p.profile_id === id))
+            .filter((p) => p !== undefined)
+        : pool;
+    for (const candidate of ordered) {
+        if (candidate.profile_id === current?.profile_id)
+            continue;
+        if (excluded.has(candidate.profile_id))
+            continue;
+        // Fail-CLOSED kind guard (round-17 hardening of the round-16 BLOCK): the
+        // kind comes from the TYPED current profile in hand — never re-found in
+        // a freshly reloaded pool, where a mid-flight disable/remove of the
+        // current profile would have silently dropped the cross-kind prohibition.
+        if (current !== null && candidate.credential_kind !== current.credential_kind)
+            continue;
+        // `current === null` is the DEFAULT subject (the vendor-native store): the
+        // same round-16 BLOCK applies — rotating the subscription default INTO an
+        // api_key profile would silently change the payment model mid-attempt.
+        if (current === null && candidate.credential_kind === "api_key")
+            continue;
+        if (profileHeadroomBreach(snapshots, harnessId, candidate.profile_id, policy.headroom_threshold))
+            continue;
+        return candidate;
+    }
+    return null;
+}
+/**
+ * `rotation_retry_eligible` (sol #30): a failover retry is allowed ONLY when
+ * the attempt saw a TYPED vendor limit AND produced no deliverable and no
+ * workspace mutation — a partially-acted attempt never silently reruns.
+ */
+export function rotationRetryEligible(input) {
+    return input.sawTypedLimit && input.deliverableEmpty;
+}
+function emitRotationExhausted(args) {
+    const excluded = args.excluded ?? new Set();
+    const candidates = args.registry
+        .filter((profile) => profile.harness_id === args.harnessId && profile.enabled)
+        .map((profile) => {
+        const breach = profileHeadroomBreach(args.snapshots, args.harnessId, profile.profile_id, args.policy.headroom_threshold);
+        const rejected = profile.profile_id === args.current?.profile_id
+            ? "current"
+            : args.policy.rotation_eligible.length > 0 &&
+                !args.policy.rotation_eligible.includes(profile.profile_id)
+                ? "not_in_rotation_policy"
+                : excluded.has(profile.profile_id)
+                    ? "already_tried"
+                    : args.current && profile.credential_kind !== args.current.credential_kind
+                        ? "credential_kind_mismatch"
+                        : args.current === null && profile.credential_kind === "api_key"
+                            ? "credential_kind_mismatch"
+                            : breach
+                                ? "headroom_exceeded"
+                                : "not_selected";
+        return {
+            profile_id: profile.profile_id,
+            credential_kind: profile.credential_kind,
+            rejected,
+            headroom: breach,
+        };
+    });
+    args.emit("route.profile.rotation_exhausted", {
+        harness_id: args.harnessId,
+        attempt_id: args.attemptId,
+        from_profile_id: args.current?.profile_id ?? null,
+        reason: args.reason,
+        threshold: args.policy.headroom_threshold,
+        candidates,
+    });
+}
+/**
+ * `profile_headroom_preflight` (W5.4): BEFORE spawn, the selected profile's
+ * freshest quota windows are checked against the policy threshold. A breach
+ * is always a typed event; `rotate` swaps to the next eligible profile with
+ * provenance, `ask`/`fail` proceed on the selected profile — the runtime
+ * `vendor_limit_rejected` evidence stays the terminating truth.
+ */
+export function preflightCredentialProfile(args) {
+    const { profile, harnessId, policy, registry, snapshots, emit } = args;
+    const breach = profileHeadroomBreach(snapshots, harnessId, profile.profile_id, policy.headroom_threshold);
+    if (!breach)
+        return profile;
+    emit("route.profile.headroom_exceeded", {
+        harness_id: harnessId,
+        profile_id: profile.profile_id,
+        action: policy.limit_action,
+        constraint_id: breach.constraint_id,
+        used_ratio: breach.used_ratio,
+        threshold: breach.threshold,
+        resets_at: breach.resets_at,
+    });
+    if (policy.limit_action === "fail") {
+        // The documented FAIL action fails (release wave tier1 #4): a FRESH breach
+        // under fail refuses before spawn with the evidence, instead of silently
+        // proceeding into a vendor rejection.
+        throw new Error(`credential profile "${profile.profile_id}" (${harnessId}) is over its headroom threshold ` +
+            `(${breach.constraint_id} at ${Math.round(breach.used_ratio * 100)}% >= ${Math.round(breach.threshold * 100)}%; ` +
+            `limit_action=fail${breach.resets_at ? `; resets ${breach.resets_at}` : ""})`);
+    }
+    if (policy.limit_action !== "rotate")
+        return profile;
+    const next = nextEligibleProfile(registry, harnessId, policy, profile, snapshots);
+    if (!next) {
+        emitRotationExhausted({
+            current: profile,
+            harnessId,
+            policy,
+            registry,
+            snapshots,
+            reason: "profile_headroom_preflight",
+            emit,
+        });
+        return profile;
+    }
+    emit("route.profile.rotated", {
+        harness_id: harnessId,
+        from_profile_id: profile.profile_id,
+        to_profile_id: next.profile_id,
+        reason: "profile_headroom_preflight",
+        constraint_id: breach.constraint_id,
+        used_ratio: breach.used_ratio,
+        resets_at: breach.resets_at,
+    });
+    return next;
+}
+/**
+ * Default-subject start selection (INV-135, owner scope "auto-balance"): when
+ * NO profile is pinned, the policy is `rotate`, and the DEFAULT store's own
+ * fresh quota window is at/over the headroom bound, pick the first eligible
+ * SUBSCRIPTION profile instead of spawning into a near-certain vendor limit.
+ * Strictly opt-in: `fail`/`ask` keep today's default-user behavior untouched
+ * (the profile engine's fail action governs PINNED profiles only — throwing
+ * here would brick every default user at 90% quota). Unknown or stale usage
+ * never rotates.
+ */
+export function preflightDefaultSubject(args) {
+    const { harnessId, policy, registry, snapshots, emit } = args;
+    if (policy.limit_action !== "rotate")
+        return null;
+    const breach = profileHeadroomBreach(snapshots, harnessId, null, policy.headroom_threshold);
+    if (!breach)
+        return null;
+    emit("route.profile.headroom_exceeded", {
+        harness_id: harnessId,
+        profile_id: null,
+        action: policy.limit_action,
+        constraint_id: breach.constraint_id,
+        used_ratio: breach.used_ratio,
+        threshold: breach.threshold,
+        resets_at: breach.resets_at,
+    });
+    const next = nextEligibleProfile(registry, harnessId, policy, null, snapshots);
+    if (!next) {
+        emitRotationExhausted({
+            current: null,
+            harnessId,
+            policy,
+            registry,
+            snapshots,
+            reason: "profile_headroom_preflight",
+            emit,
+        });
+        return null;
+    }
+    emit("route.profile.rotated", {
+        harness_id: harnessId,
+        from_profile_id: null,
+        to_profile_id: next.profile_id,
+        reason: "profile_headroom_preflight",
+        constraint_id: breach.constraint_id,
+        used_ratio: breach.used_ratio,
+        resets_at: breach.resets_at,
+    });
+    return next;
+}
+/**
+ * Reactive failover plan (`vendor_limit_rejected`, W5.4): rotation fires ONLY
+ * on the typed predicate under a `rotate` policy, marks the current profile
+ * tried (at most once per attempt each), and returns the next target with
+ * provenance already emitted — or null when the attempt must fail as-is.
+ * `currentProfile: null` is the DEFAULT subject: allowed ONLY when the caller
+ * proves the attempt's pre-spawn route was vendor_native (a metered default
+ * hitting a limit is a budget fact, not a subscription to fail over from).
+ */
+export function planReactiveRotation(args) {
+    if (!rotationRetryEligible(args))
+        return null;
+    if (args.policy.limit_action !== "rotate")
+        return null;
+    if (args.currentProfile === null && args.defaultRouteWasVendorNative !== true)
+        return null;
+    if (args.currentProfile)
+        args.triedProfiles.add(args.currentProfile.profile_id);
+    const next = nextEligibleProfile(args.registry, args.harnessId, args.policy, args.currentProfile, args.snapshots, args.triedProfiles);
+    if (!next) {
+        emitRotationExhausted({
+            current: args.currentProfile,
+            harnessId: args.harnessId,
+            policy: args.policy,
+            registry: args.registry,
+            snapshots: args.snapshots,
+            excluded: args.triedProfiles,
+            attemptId: args.attemptId,
+            reason: "vendor_limit_rejected",
+            emit: args.emit,
+        });
+        return null;
+    }
+    args.emit("route.profile.rotated", {
+        harness_id: args.harnessId,
+        attempt_id: args.attemptId,
+        from_profile_id: args.currentProfile?.profile_id ?? null,
+        to_profile_id: next.profile_id,
+        reason: "vendor_limit_rejected",
+        retry_delay_ms: args.lastLimit?.retryDelayMs ?? null,
+        resets_at: args.lastLimit?.resetsAt ?? null,
+    });
+    return next;
+}
+/**
+ * INV-135 at the engine boundary: a cached vendor session resumes ONLY under
+ * exactly the profile it was recorded with (null-default equality included) —
+ * regardless of what the caller's map claims. Preflight rotation changing the
+ * profile therefore starts fresh.
+ */
+export function resumeSessionForProfile(cached, profile) {
+    if (!cached)
+        return null;
+    return (cached.profileId ?? null) === (profile?.profile_id ?? null) ? cached.sessionId : null;
+}
+/**
+ * Record a harness-emitted native session id for future thread resume; the
+ * observer never fails the run. profileId is the adapter's per-event stamp —
+ * the EFFECTIVE profile (rotation makes it differ from the requested id).
+ */
+export function observeNativeSessionEvent(input, harnessId, ev) {
+    if (!input?.onSessionObserved || ev.type !== "started")
+        return;
+    const nid = ev.payload?.["native_session_id"];
+    if (typeof nid === "string" && nid.length > 0) {
+        try {
+            input.onSessionObserved(harnessId, nid, ev.observed_model ?? null, ev.credential_profile_id ?? null);
+        }
+        catch {
+            /* observer errors must never fail the run */
+        }
+    }
+}
+/**
+ * Shared reactive-failover step for BOTH lanes: given the attempt's typed
+ * evidence, plan a rotation and rebuild the spec on a NEW vendor session
+ * under the next profile — or return null when the attempt must fail as-is.
+ */
+export function rotateSpecOnTypedLimit(args) {
+    const rotation = planReactiveRotation({
+        currentProfile: args.spec.credential_profile ?? null,
+        defaultRouteWasVendorNative: args.defaultRouteWasVendorNative,
+        harnessId: args.harnessId,
+        attemptId: args.attemptId,
+        policy: args.policy,
+        registry: args.registry,
+        snapshots: args.snapshots,
+        triedProfiles: args.triedProfiles,
+        sawTypedLimit: args.sawTypedLimit,
+        deliverableEmpty: args.deliverableEmpty,
+        lastLimit: args.lastLimit,
+        emit: args.emit,
+    });
+    if (!rotation)
+        return null;
+    return HarnessRunSpecSchema.parse({
+        ...args.spec,
+        session_id: args.newSessionId(),
+        credential_profile: rotation,
+        resume_session_id: null,
+    });
+}
+//# sourceMappingURL=credential-profiles.js.map