@claudexor/orchestrator 3.5.0 → 3.6.0

package/dist/credential-differential.js

@@ -0,0 +1,110 @@
+import { liveUnusableFor } from "./credential-cooldown.js";
+import { staticRotationCandidates } from "./credential-profile-rotation.js";
+import { probeCredentialProfileStatus, profileStatusAdmits, vendorVerifiedProfileStatus, } from "./credential-profiles.js";
+/** Bounded per-code TTLs (clearing contract, half one: self-expiry). A vendor
+ * 401/403 is high-confidence and worth hours; an entitlement/probe verdict can
+ * be model- or configuration-shaped, so it self-heals within the hour even if
+ * nothing clears it earlier. The ledger clamps every write to 24h max. */
+const UNUSABLE_TTL_MS = {
+    auth_revoked: 6 * 60 * 60_000,
+    capability_refused: 60 * 60_000,
+    verification_failed: 60 * 60_000,
+};
+function observation(args, code, source, model, detail) {
+    return {
+        harness_id: args.harnessId,
+        profile_id: args.profileId,
+        model,
+        code,
+        source,
+        detail,
+        observed_at: args.now.toISOString(),
+        expires_at: new Date(args.now.getTime() + UNUSABLE_TTL_MS[code]).toISOString(),
+    };
+}
+/**
+ * The differential verdict for ONE subject, from evidence that already exists.
+ * Returns a typed observation ONLY when the evidence distinguishes a dead
+ * credential from spent quota; "quota spent" and "inconclusive" both return
+ * null (rotation's cooldown/limit machinery already owns those).
+ */
+export async function differentialSubjectVerdict(args) {
+    const profileId = args.profile?.profile_id ?? null;
+    const ctx = { harnessId: args.harnessId, profileId, now: args.now ?? new Date() };
+    // 1. The attempt's own stream: a typed NON-RETRYABLE auth/entitlement
+    // refusal the vendor just sent under this exact credential. An auth
+    // rejection condemns the credential for every model; an entitlement refusal
+    // may be model-scoped, so it condemns only the model this attempt ran.
+    const refusal = args.transients.find((t) => !t.retryable && (t.category === "auth_failed" || t.category === "capability_refused"));
+    if (refusal) {
+        return observation(ctx, refusal.category === "auth_failed" ? "auth_revoked" : "capability_refused", "attempt_stream", refusal.category === "auth_failed" ? null : args.model, refusal.adapterCode);
+    }
+    // 2. The quota poller's last authenticated vendor contact: a typed
+    // `auth_revoked` absence means the vendor rejected this subject's own token.
+    const revoked = args.quota.absences.find((a) => a.subject.harness === args.harnessId &&
+        (a.subject.subject_id ?? null) === profileId &&
+        a.reason === "auth_revoked");
+    if (revoked)
+        return observation(ctx, "auth_revoked", "vendor_poller", null, revoked.detail);
+    // 3. The local doctor probe (pinned profiles only — the default subject has
+    // no per-profile probe surface): a FAILED verification, vendor overlay
+    // included, is a dead-credential fact the quota path cannot see.
+    if (args.profile && args.probe) {
+        const status = vendorVerifiedProfileStatus(await probeCredentialProfileStatus(args.profile, args.probe), args.quota);
+        if (status.verification === "failed") {
+            return observation(ctx, "verification_failed", "local_probe", null, status.detail ?? null);
+        }
+    }
+    return null;
+}
+/**
+ * Factory for the SIBLING probe `rotateSpecOnTypedLimit` fires next to its
+ * candidate-readiness probe (grok amendment: the current subject is
+ * structurally excluded from `staticRotationCandidates`, so it gets its own
+ * call, never a seat in the candidate list). Records the observation through
+ * the caller's sink when one is configured; the rotation module owns the run
+ * event.
+ */
+export function currentSubjectProber(args) {
+    return async () => {
+        const verdict = await differentialSubjectVerdict(args);
+        if (verdict) {
+            try {
+                args.record?.(verdict);
+            }
+            catch {
+                /* the evidence sink must never fail the rotation decision */
+            }
+        }
+        return verdict;
+    };
+}
+/**
+ * Fresh profile readiness for one rotation decision epoch (hoisted from the
+ * orchestrator so the composition lives beside the probe it siblings).
+ * Accounts uses the same probe wrapper + vendor overlay + admission predicate
+ * when projecting next_up. A LIVE `credential_unusable` observation refuses a
+ * candidate at this SAME composition point (A7): rotating INTO a profile we
+ * observed dead would spend a whole attempt to rediscover the refusal.
+ */
+export async function readyProfilesForRotation(args) {
+    const profiles = staticRotationCandidates({
+        registry: args.registry,
+        harnessId: args.harnessId,
+        policy: args.policy,
+        current: args.current,
+        excluded: args.excluded ?? new Set(),
+    });
+    const entries = await Promise.all(profiles.map(async (profile) => ({
+        profile,
+        // Rotating INTO a profile the vendor has already rejected would spend a
+        // whole attempt to rediscover the 401 the poller reported a minute ago.
+        status: vendorVerifiedProfileStatus(await probeCredentialProfileStatus(profile, args.probe), args.quota),
+    })));
+    return new Set(entries
+        .filter(({ profile, status }) => profileStatusAdmits(profile, status) &&
+        liveUnusableFor(args.unusable ?? [], args.harnessId, profile.profile_id, args.model) ===
+            null)
+        .map(({ profile }) => profile.profile_id));
+}
+//# sourceMappingURL=credential-differential.js.map

package/dist/credential-differential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-differential.js","sourceRoot":"","sources":["../src/credential-differential.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAsB,MAAM,kCAAkC,CAAC;AAChG,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,EACnB,2BAA2B,GAE5B,MAAM,0BAA0B,CAAC;AAGlC;;;0EAG0E;AAC1E,MAAM,eAAe,GAA0D;IAC7E,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,MAAM;IAC7B,kBAAkB,EAAE,EAAE,GAAG,MAAM;IAC/B,mBAAmB,EAAE,EAAE,GAAG,MAAM;CACjC,CAAC;AAEF,SAAS,WAAW,CAClB,IAAgE,EAChE,IAA2C,EAC3C,MAA+C,EAC/C,KAAoB,EACpB,MAAqB;IAErB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,KAAK;QACL,IAAI;QACJ,MAAM;QACN,MAAM;QACN,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;KAC/E,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAWhD;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC;IACnD,MAAM,GAAG,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;IAClF,sEAAsE;IACtE,oEAAoE;IACpE,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,IAAI,CAAC,CAAC,QAAQ,KAAK,oBAAoB,CAAC,CAC7F,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,WAAW,CAChB,GAAG,EACH,OAAO,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,oBAAoB,EAC1E,gBAAgB,EAChB,OAAO,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EACtD,OAAO,CAAC,WAAW,CACpB,CAAC;IACJ,CAAC;IACD,mEAAmE;IACnE,6EAA6E;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS;QACpC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,SAAS;QAC5C,CAAC,CAAC,MAAM,KAAK,cAAc,CAC9B,CAAC;IACF,IAAI,OAAO;QAAE,OAAO,WAAW,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5F,4EAA4E;IAC5E,uEAAuE;IACvE,iEAAiE;IACjE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,2BAA2B,CACxC,MAAM,4BAA4B,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAC5D,IAAI,CAAC,KAAK,CACX,CAAC;QACF,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,WAAW,CAAC,GAAG,EAAE,qBAAqB,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAQpC;IACC,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAU9C;IACC,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG,EAAE;KACrC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO;QACP,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,EAAE,2BAA2B,CACjC,MAAM,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EACvD,IAAI,CAAC,KAAK,CACX;KACF,CAAC,CAAC,CACJ,CAAC;IACF,OAAO,IAAI,GAAG,CACZ,OAAO;SACJ,MAAM,CACL,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CACtB,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC;QACpC,eAAe,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC;YAClF,IAAI,CACT;SACA,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAC5C,CAAC;AACJ,CAAC"}

package/dist/credential-preflight.d.ts

@@ -0,0 +1,36 @@
+/**
+ * PRE-SPAWN credential preflight of the LEGACY default subject (W5.4
+ * `profile_headroom_preflight` + A4 live blocks + A5 pool-exhausted split),
+ * split from `credential-profile-rotation` so each file stays under the
+ * complexity cap. Under the unified account model (INV-135) this module
+ * serves ONLY harnesses with no registered subscription rows (unmigrated
+ * stores): pinned runs refuse strictly in the account-resolution owner
+ * (D-U6 — a pin never rotates), and unpinned runs of migrated harnesses
+ * route through the quota-aware account pool. Re-exported through
+ * `credential-profiles` like its siblings.
+ */
+import type { CredentialProfile, CredentialUnusableObservation, QuotaSnapshot } from "@claudexor/schema";
+import { type EmitFn, type ProfilePolicy } from "./credential-profile-rotation.js";
+/**
+ * Default-subject start selection (INV-135, owner scope "auto-balance"): when
+ * NO profile is pinned, the EFFECTIVE action is `rotate` (explicit, or `auto`
+ * on a subscription route — A6), and the DEFAULT store's own fresh quota
+ * window is at/over the headroom bound, pick the first eligible SUBSCRIPTION
+ * profile instead of spawning into a near-certain vendor limit. Explicit
+ * `fail`/`ask` keep the pre-A6 default-user behavior untouched (strict
+ * refusal is the PINNED lane's business, owned by account-resolution —
+ * throwing here on a bare breach would brick every default user at 90%
+ * quota). Unknown or stale usage never rotates.
+ */
+export declare function preflightDefaultSubject(args: {
+    harnessId: string;
+    policy: ProfilePolicy;
+    registry: readonly CredentialProfile[];
+    snapshots: readonly QuotaSnapshot[];
+    readyProfileIds: ReadonlySet<string>;
+    defaultRoute: "local_session" | "api_key" | null;
+    unusable?: readonly CredentialUnusableObservation[];
+    model?: string | null;
+    emit: EmitFn;
+}): CredentialProfile | null;
+//# sourceMappingURL=credential-preflight.d.ts.map

package/dist/credential-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-preflight.d.ts","sourceRoot":"","sources":["../src/credential-preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EACV,iBAAiB,EACjB,6BAA6B,EAC7B,aAAa,EACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAKL,KAAK,MAAM,EACX,KAAK,aAAa,EACnB,MAAM,kCAAkC,CAAC;AAE1C;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,YAAY,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACpD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,iBAAiB,GAAG,IAAI,CA6E3B"}

package/dist/credential-preflight.js

@@ -0,0 +1,78 @@
+import { credentialPoolExhausted, profileQuotaBlock } from "./credential-cooldown.js";
+import { effectiveLimitAction, emitRotationExhausted, nextEligibleProfile, profileHeadroomBreach, } from "./credential-profile-rotation.js";
+/**
+ * Default-subject start selection (INV-135, owner scope "auto-balance"): when
+ * NO profile is pinned, the EFFECTIVE action is `rotate` (explicit, or `auto`
+ * on a subscription route — A6), and the DEFAULT store's own fresh quota
+ * window is at/over the headroom bound, pick the first eligible SUBSCRIPTION
+ * profile instead of spawning into a near-certain vendor limit. Explicit
+ * `fail`/`ask` keep the pre-A6 default-user behavior untouched (strict
+ * refusal is the PINNED lane's business, owned by account-resolution —
+ * throwing here on a bare breach would brick every default user at 90%
+ * quota). Unknown or stale usage never rotates.
+ */
+export function preflightDefaultSubject(args) {
+    const { harnessId, policy, registry, snapshots, readyProfileIds, defaultRoute, model, emit } = args;
+    // A6: `auto` resolves by the DEFAULT subject's route — a subscription
+    // default rotates, a metered or unknown default keeps today's behavior.
+    const action = effectiveLimitAction(policy, defaultRoute);
+    if (action !== "rotate" || defaultRoute !== "local_session")
+        return null;
+    const breach = profileHeadroomBreach(snapshots, harnessId, null, policy.headroom_threshold, model);
+    // Same A4 cooldown reader as the pinned lane: the default subject's own
+    // observed live block (reactive cooldown / spent window) rotates too. The
+    // guard above pins `defaultRoute === "local_session"`, so the block is read
+    // for the SUBSCRIPTION default subject only.
+    const block = breach ? null : profileQuotaBlock(snapshots, harnessId, null, defaultRoute, model);
+    if (!breach && !block)
+        return null;
+    emit("route.profile.headroom_exceeded", {
+        harness_id: harnessId,
+        profile_id: null,
+        action,
+        constraint_id: breach?.constraint_id ?? block?.constraint_id ?? null,
+        used_ratio: breach?.used_ratio ?? null,
+        threshold: policy.headroom_threshold,
+        resets_at: breach?.resets_at ?? block?.resets_at ?? null,
+    });
+    const next = nextEligibleProfile(registry, harnessId, policy, null, snapshots, readyProfileIds, new Set(), model);
+    if (!next) {
+        const candidates = emitRotationExhausted({
+            current: null,
+            harnessId,
+            policy,
+            registry,
+            snapshots,
+            readyProfileIds,
+            unusable: args.unusable,
+            model,
+            reason: "profile_headroom_preflight",
+            emit,
+        });
+        // Same A5 preflight split as the pinned lane: the DEFAULT subject's own
+        // observed live block with no eligible alternative refuses typed before
+        // spawn; a bare headroom breach proceeds (not proven spent).
+        const hard = block ?? profileQuotaBlock(snapshots, harnessId, null, defaultRoute, model);
+        if (hard) {
+            throw credentialPoolExhausted({
+                harnessId,
+                profileId: null,
+                reason: "profile_headroom_preflight",
+                candidates,
+                subjectLimit: { resets_at: hard.resets_at },
+            });
+        }
+        return null;
+    }
+    emit("route.profile.rotated", {
+        harness_id: harnessId,
+        from_profile_id: null,
+        to_profile_id: next.profile_id,
+        reason: "profile_headroom_preflight",
+        constraint_id: breach?.constraint_id ?? block?.constraint_id ?? null,
+        used_ratio: breach?.used_ratio ?? null,
+        resets_at: breach?.resets_at ?? block?.resets_at ?? null,
+    });
+    return next;
+}
+//# sourceMappingURL=credential-preflight.js.map

package/dist/credential-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-preflight.js","sourceRoot":"","sources":["../src/credential-preflight.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACtF,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GAGtB,MAAM,kCAAkC,CAAC;AAE1C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAUvC;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAC1F,IAAI,CAAC;IACP,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,QAAQ,IAAI,YAAY,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACzE,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,EACT,SAAS,EACT,IAAI,EACJ,MAAM,CAAC,kBAAkB,EACzB,KAAK,CACN,CAAC;IACF,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACjG,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,iCAAiC,EAAE;QACtC,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,IAAI;QAChB,MAAM;QACN,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,KAAK,EAAE,aAAa,IAAI,IAAI;QACpE,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI;QACtC,SAAS,EAAE,MAAM,CAAC,kBAAkB;QACpC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,SAAS,IAAI,IAAI;KACzD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,mBAAmB,CAC9B,QAAQ,EACR,SAAS,EACT,MAAM,EACN,IAAI,EACJ,SAAS,EACT,eAAe,EACf,IAAI,GAAG,EAAE,EACT,KAAK,CACN,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,UAAU,GAAG,qBAAqB,CAAC;YACvC,OAAO,EAAE,IAAI;YACb,SAAS;YACT,MAAM;YACN,QAAQ;YACR,SAAS;YACT,eAAe;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK;YACL,MAAM,EAAE,4BAA4B;YACpC,IAAI;SACL,CAAC,CAAC;QACH,wEAAwE;QACxE,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,IAAI,GAAG,KAAK,IAAI,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QACzF,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,uBAAuB,CAAC;gBAC5B,SAAS;gBACT,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,4BAA4B;gBACpC,UAAU;gBACV,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,uBAAuB,EAAE;QAC5B,UAAU,EAAE,SAAS;QACrB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,IAAI,CAAC,UAAU;QAC9B,MAAM,EAAE,4BAA4B;QACpC,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,KAAK,EAAE,aAAa,IAAI,IAAI;QACpE,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI;QACtC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,SAAS,IAAI,IAAI;KACzD,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/credential-profile-rotation.d.ts

@@ -1,9 +1,32 @@
-import type { CredentialProfile, HarnessRunSpec, QuotaSnapshot } from "@claudexor/schema";
+import type { CredentialProfile, CredentialUnusableObservation, HarnessRunSpec, QuotaSnapshot } from "@claudexor/schema";
+import { type PoolExhaustionCandidate } from "./credential-cooldown.js";
+import type { AttemptOutputMarkers } from "./attemptOutputMarkers.js";
+import { type RotationEvidence } from "./rotation-predicate.js";
+export { rotationRetryEligible, type RotationEvidence } from "./rotation-predicate.js";
 export interface ProfilePolicy {
-    limit_action: "fail" | "ask" | "rotate";
+    limit_action: "auto" | "fail" | "ask" | "rotate";
     rotation_eligible: string[];
     headroom_threshold: number;
 }
+/** The typed auth route of the subject a limit decision is about: a pinned
+ * profile's credential kind, or the default subject's pre-spawn route
+ * estimate. `null` = honestly unknown (an unresolved default route). */
+export type SubjectRoute = "local_session" | "api_key" | null;
+/** The route of a limit decision's subject: a pinned profile decides by its
+ * own credential kind; the default subject decides by the caller's route
+ * estimate. ONE owner, so every consumer classifies the subject alike. */
+export declare function limitSubjectRoute(profile: Pick<CredentialProfile, "credential_kind"> | null, defaultRoute?: SubjectRoute): SubjectRoute;
+/**
+ * THE effective-policy resolver (A6, owner decision 1=A): the stored default
+ * `auto` resolves BY CREDENTIAL KIND — `rotate` for subscription
+ * (`local_session`) subjects, `fail` for metered API-key or unknown routes —
+ * while explicitly persisted `fail`/`ask`/`rotate` pass through untouched
+ * (3=A: a stored value is never reinterpreted, only ABSENT changed meaning).
+ * Every `limit_action` comparison in the engine and every projection
+ * (`next_up`, Accounts) resolves through this one function, so admission and
+ * display can never disagree about what `auto` does (INV-135).
+ */
+export declare function effectiveLimitAction(policy: Pick<ProfilePolicy, "limit_action">, route: SubjectRoute): "fail" | "ask" | "rotate";
 /** Typed quota evidence for a profile over its headroom bound (provenance). */
 export interface HeadroomBreach {
     constraint_id: string;
@@ -43,58 +66,27 @@ export declare function profileHeadroomBreach(snapshots: readonly QuotaSnapshot[
  * subscription entitlement, bypassing a finite cash cap.
  */
 export declare function nextEligibleProfile(registry: readonly CredentialProfile[], harnessId: string, policy: ProfilePolicy, current: Pick<CredentialProfile, "profile_id" | "credential_kind"> | null, snapshots: readonly QuotaSnapshot[], readyProfileIds: ReadonlySet<string>, excluded?: ReadonlySet<string>, model?: string | null): CredentialProfile | null;
-/**
- * `rotation_retry_eligible` (sol #30): a failover retry is allowed ONLY when
- * the attempt saw a TYPED vendor limit AND produced no deliverable and no
- * workspace mutation — a partially-acted attempt never silently reruns.
- */
-export declare function rotationRetryEligible(input: {
-    sawTypedLimit: boolean;
-    deliverableEmpty: boolean;
-}): boolean;
-type EmitFn = (type: "route.profile.headroom_exceeded" | "route.profile.rotated" | "route.profile.rotation_exhausted", payload: Record<string, unknown>) => void;
-/**
- * `profile_headroom_preflight` (W5.4): BEFORE spawn, the selected profile's
- * freshest quota windows are checked against the policy threshold. A breach
- * is always a typed event; `rotate` swaps to the next eligible profile with
- * provenance, `ask`/`fail` proceed on the selected profile — the runtime
- * `vendor_limit_rejected` evidence stays the terminating truth.
- */
-export declare function preflightCredentialProfile(args: {
-    profile: CredentialProfile;
-    harnessId: string;
-    policy: ProfilePolicy;
-    registry: readonly CredentialProfile[];
-    snapshots: readonly QuotaSnapshot[];
-    readyProfileIds: ReadonlySet<string>;
-    model?: string | null;
-    emit: EmitFn;
-}): CredentialProfile;
-/**
- * Default-subject start selection (INV-135, owner scope "auto-balance"): when
- * NO profile is pinned, the policy is `rotate`, and the DEFAULT store's own
- * fresh quota window is at/over the headroom bound, pick the first eligible
- * SUBSCRIPTION profile instead of spawning into a near-certain vendor limit.
- * Strictly opt-in: `fail`/`ask` keep today's default-user behavior untouched
- * (the profile engine's fail action governs PINNED profiles only — throwing
- * here would brick every default user at 90% quota). Unknown or stale usage
- * never rotates.
- */
-export declare function preflightDefaultSubject(args: {
+export type EmitFn = (type: "route.profile.headroom_exceeded" | "route.profile.rotated" | "route.profile.rotation_exhausted" | "route.profile.credential_unusable", payload: Record<string, unknown>) => void;
+export declare function emitRotationExhausted(args: {
+    current: Pick<CredentialProfile, "profile_id" | "credential_kind"> | null;
     harnessId: string;
     policy: ProfilePolicy;
     registry: readonly CredentialProfile[];
     snapshots: readonly QuotaSnapshot[];
     readyProfileIds: ReadonlySet<string>;
-    defaultRoute: "local_session" | "api_key" | null;
+    excluded?: ReadonlySet<string>;
+    unusable?: readonly CredentialUnusableObservation[];
+    attemptId?: string;
     model?: string | null;
+    reason: "profile_headroom_preflight" | "vendor_limit_rejected" | "structural_pre_progress_failure";
     emit: EmitFn;
-}): CredentialProfile | null;
+}): PoolExhaustionCandidate[];
 /**
- * Reactive failover plan (`vendor_limit_rejected`, W5.4): rotation fires ONLY
- * on the typed predicate under a `rotate` policy, marks the current profile
- * tried (at most once per attempt each), and returns the next target with
- * provenance already emitted — or null when the attempt must fail as-is.
+ * Reactive failover plan (`vendor_limit_rejected` / structural, W5.4 + A2):
+ * rotation fires ONLY on the typed evidence predicate under a `rotate`
+ * policy, marks the current profile tried (at most once per attempt each),
+ * and returns the next target with provenance already emitted — or null when
+ * the attempt must fail as-is.
  * `currentProfile: null` is the DEFAULT subject: allowed ONLY when the caller
  * proves the attempt's pre-spawn route was vendor_native (a metered default
  * hitting a limit is a budget fact, not a subscription to fail over from).
@@ -109,19 +101,31 @@ export declare function planReactiveRotation(args: {
     snapshots: readonly QuotaSnapshot[];
     readyProfileIds: ReadonlySet<string>;
     triedProfiles: Set<string>;
-    sawTypedLimit: boolean;
-    deliverableEmpty: boolean;
+    evidence: RotationEvidence;
     lastLimit: {
         retryDelayMs: number | null;
         resetsAt: string | null;
     } | null;
+    unusable?: readonly CredentialUnusableObservation[];
     model?: string | null;
     emit: EmitFn;
 }): CredentialProfile | null;
 /**
- * Shared reactive-failover step for BOTH lanes: given the attempt's typed
- * evidence, plan a rotation and rebuild the spec on a NEW vendor session
- * under the next profile — or return null when the attempt must fail as-is.
+ * Shared reactive-failover step for BOTH lanes: fold the try's lane-local
+ * facts + output markers into the typed rotation evidence, probe candidate
+ * readiness ONLY when the predicate could actually fire (the probe spends
+ * seconds), then plan a rotation and rebuild the spec on a NEW vendor session
+ * under the next profile. `null` = the failure was never rotation's business
+ * (fail as-is: transient machinery, plain errors), or the pool ran out with
+ * NO credential evidence anywhere (the evidence gate below) so the attempt
+ * keeps its true failure. `{ poolExhausted }` = the
+ * failure WAS rotation-eligible under a `rotate` policy, the pool has
+ * nowhere left to go, and the decision carries credential evidence — the
+ * attempt must terminalize on this typed refusal
+ * BEFORE the transient gate can burn same-profile retries on the
+ * already-refused subject (A5 ordering: a typed vendor limit classifies as
+ * retryable-transient, so falling through would retry the spent credential).
+ * Callers invoke this only after the try ended in a terminal error.
  */
 export declare function rotateSpecOnTypedLimit(args: {
     spec: HarnessRunSpec;
@@ -130,10 +134,27 @@ export declare function rotateSpecOnTypedLimit(args: {
     policy: ProfilePolicy;
     registry: readonly CredentialProfile[];
     snapshots: readonly QuotaSnapshot[];
-    readyProfileIds: ReadonlySet<string>;
+    /** Fresh candidate-readiness probe (readyProfileIdsForRotation); called at
+     * most once, and only for an eligible try under a `rotate` policy. */
+    probeReadyProfiles: () => Promise<ReadonlySet<string>>;
+    /** A7 SIBLING probe of the CURRENT/triggering subject (never a candidate —
+     * `staticRotationCandidates` excludes the current identity structurally):
+     * existing poller/stream/doctor evidence only, never a spawned mini-run.
+     * Fires exactly when the candidate probe fires; a typed verdict is emitted,
+     * recorded, and carried into the pool terminal's provenance. */
+    probeCurrentSubject?: () => Promise<CredentialUnusableObservation | null>;
+    /** Live typed `credential_unusable` observations for this decision epoch —
+     * candidates they condemn are refused with a typed reason. */
+    liveUnusable?: readonly CredentialUnusableObservation[];
     triedProfiles: Set<string>;
+    markers: AttemptOutputMarkers;
     sawTypedLimit: boolean;
+    sawRetryable: boolean;
+    attemptErrored: boolean;
     deliverableEmpty: boolean;
+    /** Candidate lane only: the workspace diff is non-empty. The read-only lane
+     * omits it — file_change markers are its only mutation truth. */
+    workspaceDiffNonEmpty?: boolean;
     lastLimit: {
         retryDelayMs: number | null;
         resetsAt: string | null;
@@ -143,6 +164,11 @@ export declare function rotateSpecOnTypedLimit(args: {
     /** Pre-spawn route estimate for a profile-less spec: default-subject
      * rotation is allowed ONLY off a vendor_native attempt. */
     defaultRouteWasVendorNative?: boolean;
-}): HarnessRunSpec | null;
-export {};
+    /** D-U6 (unified account model): an EXPLICIT pin is strict — a typed vendor
+     * limit fails the attempt with its evidence, never a silent rotation onto a
+     * sibling account. Pool-selected rows (unpinned runs) still rotate. */
+    pinned?: boolean;
+}): Promise<HarnessRunSpec | {
+    poolExhausted: Error;
+} | null>;
 //# sourceMappingURL=credential-profile-rotation.d.ts.map

package/dist/credential-profile-rotation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-profile-rotation.d.ts","sourceRoot":"","sources":["../src/credential-profile-rotation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAI1F,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IACxC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,iBAAiB,CAAC,GAAG,IAAI,CAAC;IAC1E,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAChC,GAAG,iBAAiB,EAAE,CAsBtB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,SAAS,aAAa,EAAE,EACnC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,cAAc,GAAG,IAAI,CAoBvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,iBAAiB,CAAC,GAAG,IAAI,EACzE,SAAS,EAAE,SAAS,aAAa,EAAE,EACnC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,QAAQ,GAAE,WAAW,CAAC,MAAM,CAAa,EACzC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,iBAAiB,GAAG,IAAI,CAsB1B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAEV;AAED,KAAK,MAAM,GAAG,CACZ,IAAI,EACA,iCAAiC,GACjC,uBAAuB,GACvB,kCAAkC,EACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,IAAI,CAAC;AA4FV;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,iBAAiB,CA4DpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,YAAY,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAAC;IACjD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,iBAAiB,GAAG,IAAI,CAuD3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,cAAc,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,iBAAiB,GAAG,IAAI,CAyC3B;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B;+DAC2D;IAC3D,2BAA2B,CAAC,EAAE,OAAO,CAAC;CACvC,GAAG,cAAc,GAAG,IAAI,CAwBxB"}
+{"version":3,"file":"credential-profile-rotation.d.ts","sourceRoot":"","sources":["../src/credential-profile-rotation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,6BAA6B,EAC7B,cAAc,EACd,aAAa,EACd,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAKL,KAAK,uBAAuB,EAE7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEvF,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IACjD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;wEAEwE;AACxE,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,SAAS,GAAG,IAAI,CAAC;AAE9D;;0EAE0E;AAC1E,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,GAAG,IAAI,EAC1D,YAAY,GAAE,YAAmB,GAChC,YAAY,CAGd;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,EAC3C,KAAK,EAAE,YAAY,GAClB,MAAM,GAAG,KAAK,GAAG,QAAQ,CAG3B;AAED,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,iBAAiB,CAAC,GAAG,IAAI,CAAC;IAC1E,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAChC,GAAG,iBAAiB,EAAE,CAsBtB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,SAAS,aAAa,EAAE,EACnC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,cAAc,GAAG,IAAI,CAoBvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,iBAAiB,CAAC,GAAG,IAAI,EACzE,SAAS,EAAE,SAAS,aAAa,EAAE,EACnC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,QAAQ,GAAE,WAAW,CAAC,MAAM,CAAa,EACzC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,iBAAiB,GAAG,IAAI,CAmC1B;AAED,MAAM,MAAM,MAAM,GAAG,CACnB,IAAI,EACA,iCAAiC,GACjC,uBAAuB,GACvB,kCAAkC,GAClC,mCAAmC,EACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,IAAI,CAAC;AAkFV,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,iBAAiB,CAAC,GAAG,IAAI,CAAC;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EACJ,4BAA4B,GAAG,uBAAuB,GAAG,iCAAiC,CAAC;IAC7F,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,uBAAuB,EAAE,CAa5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,cAAc,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,QAAQ,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACpD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,iBAAiB,GAAG,IAAI,CAmD3B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC;0EACsE;IACtE,kBAAkB,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD;;;;oEAIgE;IAChE,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAC;IAC1E;kEAC8D;IAC9D,YAAY,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACxD,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,EAAE,oBAAoB,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B;qEACiE;IACjE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,SAAS,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B;+DAC2D;IAC3D,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC;;2EAEuE;IACvE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,cAAc,GAAG;IAAE,aAAa,EAAE,KAAK,CAAA;CAAE,GAAG,IAAI,CAAC,CAkI5D"}