@claudexor/orchestrator 3.5.0 → 3.8.0

package/dist/account-pool.d.ts

@@ -0,0 +1,62 @@
+import type { CredentialProfile, QuotaSnapshot } from "@claudexor/schema";
+/**
+ * Quota-aware ACCOUNT POOL of the unified account model (INV-135 rewrite,
+ * owner decisions D-U1 + K.5): with no explicit pin and no thread binding, an
+ * unpinned run routes to the best enabled+ready account row of its harness.
+ *
+ * Ranking (D3 freshness preserved — stale quota never authorizes routing):
+ *   1. rows with FRESH model-applicable quota evidence and headroom below the
+ *      exhaustion bound, by known headroom DESCENDING;
+ *   2. rows with unknown/stale quota (eligible, but never ranked as known
+ *      headroom);
+ *   3. exhausted rows (fresh evidence at/over the policy threshold) — never
+ *      selected; they only count toward "the pool is exhausted".
+ * Ties break deterministically by profile id (ascending).
+ *
+ * The pool contains SUBSCRIPTION-kind rows only: an api_key row is a paid
+ * route and is never silently selected (INV-061); it remains an explicit pin
+ * target. Pool exhaustion is the typed `credential_pool_exhausted` terminal
+ * (owner Q3=A); the paid API-key ROUTE serves it only under the EXPLICIT
+ * api_key preference — never silently under auto.
+ */
+export type PoolQuotaVerdict = {
+    kind: "fresh_headroom";
+    headroom: number;
+} | {
+    kind: "unknown";
+} | {
+    kind: "exhausted";
+    resets_at: string | null;
+};
+export interface PoolCandidate {
+    profile: CredentialProfile;
+    verdict: PoolQuotaVerdict;
+}
+/** The subscription-kind enabled rows of one harness (the static pool). */
+export declare function accountPoolRows(registry: readonly CredentialProfile[], harnessId: string): CredentialProfile[];
+/**
+ * Rank one harness's READY pool rows per the unified-model comparator. Rows
+ * outside `readyProfileIds` are excluded entirely (not ready ≠ exhausted).
+ */
+export declare function rankAccountPool(args: {
+    registry: readonly CredentialProfile[];
+    harnessId: string;
+    snapshots: readonly QuotaSnapshot[];
+    readyProfileIds: ReadonlySet<string>;
+    headroomThreshold: number;
+    model?: string | null;
+}): PoolCandidate[];
+export type PoolSelection = {
+    outcome: "selected";
+    candidate: PoolCandidate;
+} | {
+    /** Every ready row is exhausted, or nothing is ready at all: the run
+     * terminalizes on the typed `credential_pool_exhausted` refusal (Q3=A)
+     * unless the EXPLICIT api_key preference opts into the paid route. */
+    outcome: "exhausted" | "empty";
+    /** Earliest known window reset among exhausted rows, when any. */
+    resets_at: string | null;
+};
+/** Select the unpinned-run account from the pool (or report why not). */
+export declare function selectFromAccountPool(args: Parameters<typeof rankAccountPool>[0]): PoolSelection;
+//# sourceMappingURL=account-pool.d.ts.map

package/dist/account-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../src/account-pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAK1E;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEpD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,gBAAgB,CAAC;CAC3B;AAED,2EAA2E;AAC3E,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,SAAS,EAAE,MAAM,GAChB,iBAAiB,EAAE,CAKrB;AAyBD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GAAG,aAAa,EAAE,CAgElB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GACjD;IACE;;0EAEsE;IACtE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;IAC/B,kEAAkE;IAClE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEN,yEAAyE;AACzE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAahG"}

package/dist/account-pool.js

@@ -0,0 +1,103 @@
+import { quotaConstraintAppliesToModel } from "@claudexor/budget";
+import { profileQuotaBlock } from "./credential-cooldown.js";
+import { limitSubjectRoute, profileHeadroomBreach } from "./credential-profile-rotation.js";
+/** The subscription-kind enabled rows of one harness (the static pool). */
+export function accountPoolRows(registry, harnessId) {
+    return registry.filter((profile) => profile.harness_id === harnessId && profile.enabled && profile.credential_kind !== "api_key");
+}
+/** Worst-window FRESH model-applicable headroom for one subject, or null when
+ * no fresh applicable evidence exists (unknown/stale — D3: display-only). */
+function freshModelHeadroom(snapshots, harnessId, profileId, model) {
+    let worst = null;
+    for (const snapshot of snapshots) {
+        if (snapshot.freshness !== "fresh")
+            continue;
+        if (snapshot.subject.harness !== harnessId)
+            continue;
+        if ((snapshot.subject.subject_id ?? null) !== profileId)
+            continue;
+        for (const constraint of snapshot.constraints) {
+            if (!quotaConstraintAppliesToModel(constraint, model))
+                continue;
+            if (constraint.used_ratio === null)
+                continue;
+            const headroom = 1 - constraint.used_ratio;
+            if (worst === null || headroom < worst)
+                worst = headroom;
+        }
+    }
+    return worst;
+}
+/**
+ * Rank one harness's READY pool rows per the unified-model comparator. Rows
+ * outside `readyProfileIds` are excluded entirely (not ready ≠ exhausted).
+ */
+export function rankAccountPool(args) {
+    const candidates = [];
+    for (const profile of accountPoolRows(args.registry, args.harnessId)) {
+        if (!args.readyProfileIds.has(profile.profile_id))
+            continue;
+        const breach = profileHeadroomBreach(args.snapshots, args.harnessId, profile.profile_id, args.headroomThreshold, args.model);
+        if (breach) {
+            candidates.push({
+                profile,
+                verdict: { kind: "exhausted", resets_at: breach.resets_at },
+            });
+            continue;
+        }
+        // A4 cooldown reader: a row under an OBSERVED live block (reactive
+        // vendor-limit cooldown or spent window, stale-but-live included) ranks
+        // exhausted with its earliest known release instant — selecting it would
+        // burn an attempt to rediscover the limit the registry already holds. The
+        // block is read route-scoped (the row's own credential kind), so an
+        // api-key sibling's window can never cool a subscription row.
+        const block = profileQuotaBlock(args.snapshots, args.harnessId, profile.profile_id, limitSubjectRoute(profile), args.model);
+        if (block) {
+            candidates.push({
+                profile,
+                verdict: { kind: "exhausted", resets_at: block.resets_at },
+            });
+            continue;
+        }
+        const headroom = freshModelHeadroom(args.snapshots, args.harnessId, profile.profile_id, args.model);
+        candidates.push({
+            profile,
+            verdict: headroom === null ? { kind: "unknown" } : { kind: "fresh_headroom", headroom },
+        });
+    }
+    const rankOf = (verdict) => verdict.kind === "fresh_headroom" ? 0 : verdict.kind === "unknown" ? 1 : 2;
+    return candidates.sort((a, b) => {
+        const byRank = rankOf(a.verdict) - rankOf(b.verdict);
+        if (byRank !== 0)
+            return byRank;
+        if (a.verdict.kind === "fresh_headroom" && b.verdict.kind === "fresh_headroom") {
+            const byHeadroom = b.verdict.headroom - a.verdict.headroom;
+            if (byHeadroom !== 0)
+                return byHeadroom;
+        }
+        return a.profile.profile_id < b.profile.profile_id
+            ? -1
+            : a.profile.profile_id > b.profile.profile_id
+                ? 1
+                : 0;
+    });
+}
+/** Select the unpinned-run account from the pool (or report why not). */
+export function selectFromAccountPool(args) {
+    const ranked = rankAccountPool(args);
+    const selectable = ranked.find((candidate) => candidate.verdict.kind !== "exhausted");
+    if (selectable)
+        return { outcome: "selected", candidate: selectable };
+    if (ranked.length === 0)
+        return { outcome: "empty", resets_at: null };
+    let resetsAt = null;
+    for (const candidate of ranked) {
+        if (candidate.verdict.kind !== "exhausted" || candidate.verdict.resets_at === null)
+            continue;
+        if (resetsAt === null || candidate.verdict.resets_at < resetsAt) {
+            resetsAt = candidate.verdict.resets_at;
+        }
+    }
+    return { outcome: "exhausted", resets_at: resetsAt };
+}
+//# sourceMappingURL=account-pool.js.map

package/dist/account-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-pool.js","sourceRoot":"","sources":["../src/account-pool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAiC5F,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAC7B,QAAsC,EACtC,SAAiB;IAEjB,OAAO,QAAQ,CAAC,MAAM,CACpB,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,CAC/F,CAAC;AACJ,CAAC;AAED;6EAC6E;AAC7E,SAAS,kBAAkB,CACzB,SAAmC,EACnC,SAAiB,EACjB,SAAiB,EACjB,KAAgC;IAEhC,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO;YAAE,SAAS;QAC7C,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,SAAS;QACrD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAClE,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,CAAC,6BAA6B,CAAC,UAAU,EAAE,KAAK,CAAC;gBAAE,SAAS;YAChE,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI;gBAAE,SAAS;YAC7C,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC;YAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,GAAG,KAAK;gBAAE,KAAK,GAAG,QAAQ,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAO/B;IACC,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,SAAS;QAC5D,MAAM,MAAM,GAAG,qBAAqB,CAClC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,SAAS,EACd,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,KAAK,CACX,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,UAAU,CAAC,IAAI,CAAC;gBACd,OAAO;gBACP,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;aAC5D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,mEAAmE;QACnE,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,oEAAoE;QACpE,8DAA8D;QAC9D,MAAM,KAAK,GAAG,iBAAiB,CAC7B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,SAAS,EACd,OAAO,CAAC,UAAU,EAClB,iBAAiB,CAAC,OAAO,CAAC,EAC1B,IAAI,CAAC,KAAK,CACX,CAAC;QACF,IAAI,KAAK,EAAE,CAAC;YACV,UAAU,CAAC,IAAI,CAAC;gBACd,OAAO;gBACP,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;aAC3D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CACjC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,SAAS,EACd,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,KAAK,CACX,CAAC;QACF,UAAU,CAAC,IAAI,CAAC;YACd,OAAO;YACP,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE;SACxF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,OAAyB,EAAU,EAAE,CACnD,OAAO,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAChC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC/E,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3D,IAAI,UAAU,KAAK,CAAC;gBAAE,OAAO,UAAU,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU;YAChD,CAAC,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU;gBAC3C,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC;AAaD,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CAAC,IAA2C;IAC/E,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IACtF,IAAI,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAC/B,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI;YAAE,SAAS;QAC7F,IAAI,QAAQ,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,SAAS,GAAG,QAAQ,EAAE,CAAC;YAChE,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACvD,CAAC"}

package/dist/account-resolution.d.ts

@@ -0,0 +1,88 @@
+import type { AuthPreference, CredentialProfile, CredentialProfileStatus, CredentialUnusableObservation, QuotaSnapshot } from "@claudexor/schema";
+import { type CredentialProfilePolicyState } from "@claudexor/core";
+import { type HeadroomBreach, type ProfilePolicy } from "./credential-profile-rotation.js";
+import { type VendorQuotaObservations } from "./credential-profiles.js";
+/**
+ * The ONE account-resolution owner for a run's harness (INV-135 unified
+ * account model, owner decisions D-U1/D-U6/Q1/Q3), extracted from the
+ * orchestrator god-file (INV-124):
+ *
+ * 1. An explicit pin is STRICT — a fresh exhausted window OR an observed live
+ *    quota block (A4: reactive cooldown / spent window, stale-but-live
+ *    included) is a typed `subscription_window_exhausted` refusal, never a
+ *    silent rotation.
+ * 2. Below the pin, an EXPLICIT `api_key` preference is the user's paid
+ *    election: it takes the disclosed API-key ROUTE before binding/pool
+ *    resolution — a healthy subscription pool must never spend subscription
+ *    quota over that explicit choice (ARCHITECTURE: explicit `api_key`
+ *    excludes native fallback).
+ * 3. An unpinned thread turn stays on its durable bound account while that
+ *    row is ready, else switches to the pool with a DISCLOSED lane switch. A
+ *    live typed `credential_unusable` observation (A7) condemns the bound row
+ *    at this composition point too.
+ * 4. Unbound runs take the best row of the quota-aware pool.
+ * 5. An empty/exhausted pool is the typed `credential_pool_exhausted`
+ *    TERMINAL carrying the pool's earliest known reset (owner Q3=A: PR-A's
+ *    semantics supersede Q2 — waiting for the reset is the default). The paid
+ *    API-key ROUTE serves it ONLY under the EXPLICIT `api_key` preference
+ *    (disclosed; never a row) — never silently under `auto`. Harnesses with
+ *    no registered rows keep the legacy default-subject ladder (unmigrated
+ *    stores).
+ */
+export type AccountResolutionEmit = (type: "route.profile.headroom_exceeded" | "route.profile.rotated" | "route.profile.rotation_exhausted" | "route.profile.credential_unusable" | "route.account.pool_selected" | "route.account.lane_switch" | "route.account.pool_exhausted", payload: Record<string, unknown>) => void;
+export interface AccountResolutionContext {
+    harnessId: string;
+    registry: readonly CredentialProfile[];
+    policy: ProfilePolicy;
+    /** Static platform cardinality, resolved without vendor discovery/probes. */
+    profileCardinality?: CredentialProfilePolicyState;
+    snapshots: readonly QuotaSnapshot[];
+    quota: VendorQuotaObservations;
+    /** Live typed `credential_unusable` observations (A7): a condemned row is
+     * refused at the readiness composition point, never re-discovered by
+     * spending an attempt. */
+    unusable: readonly CredentialUnusableObservation[];
+    probe: ((profile: CredentialProfile) => Promise<CredentialProfileStatus>) | undefined;
+    /** The explicit pin, already resolved/validated by the caller (null = unpinned). */
+    pinnedProfile: CredentialProfile | null;
+    /** The thread's durable per-harness binding for unpinned turns (D-U1 order 2). */
+    boundProfileId: string | null;
+    threadId: string | null;
+    model: string | null;
+    /** Default-route estimate of the legacy unprofiled ladder (no-rows harnesses). */
+    defaultRoute: "local_session" | "api_key" | null;
+    /** Whether the legacy native login is excluded (`native_credentials_enabled: false`). */
+    nativeCredentialsDisabled: boolean;
+    /** Effective auth preference (run > harness > routing config). */
+    authPreference: AuthPreference;
+    /** Record that this harness's unpinned route fell to the PAID api_key route. */
+    notePoolApiKeyRoute: () => void;
+    emit: AccountResolutionEmit;
+}
+/**
+ * A spent subscription window on an EXPLICITLY PINNED account, refused
+ * MACHINE-READABLY (D-U6: a pin is strict — never a silent rotation). Homed
+ * beside its A4 sibling `pinnedWindowBlocked` in the pinned-lane owner.
+ *
+ * The verdict a caller actually needs from this refusal is "not now, come back
+ * at T" — and the only honest way to deliver T is as a field. Gluing it into
+ * the sentence and shipping the terminal as `category: internal, code: null`
+ * left every consumer (a surface, a scheduler, an automating host) to regex
+ * the prose for a timestamp, which no contract in this repo permits. The
+ * message stays human-readable; the machine reads `code` and `resetsAt`, which
+ * the run terminal lifts onto `final/failure.yaml` verbatim.
+ */
+export declare function subscriptionWindowExhausted(profileId: string, harnessId: string, breach: HeadroomBreach): Error;
+/** Per-run record of harnesses whose unpinned route took the PAID API-key
+ * route under the EXPLICIT `api_key` preference (Q3=A) — the user's paid
+ * election over a healthy pool, or the only permitted service of an
+ * empty/exhausted one: the spec then carries auth_preference=api_key so the
+ * adapter can never spawn back into an exhausted or excluded native login.
+ * Keyed by the run-input object. */
+export declare class PoolRouteFlags {
+    private readonly flags;
+    note(runKey: object, harnessId: string): void;
+    has(runKey: object, harnessId: string): boolean;
+}
+export declare function resolveAccountForRun(ctx: AccountResolutionContext): Promise<CredentialProfile | null>;
+//# sourceMappingURL=account-resolution.d.ts.map

package/dist/account-resolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-resolution.d.ts","sourceRoot":"","sources":["../src/account-resolution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,6BAA6B,EAC7B,aAAa,EACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAkC,KAAK,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAUpG,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAClC,IAAI,EACA,iCAAiC,GACjC,uBAAuB,GACvB,kCAAkC,GAClC,mCAAmC,GACnC,6BAA6B,GAC7B,2BAA2B,GAC3B,8BAA8B,EAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,IAAI,CAAC;AAEV,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,MAAM,EAAE,aAAa,CAAC;IACtB,6EAA6E;IAC7E,kBAAkB,CAAC,EAAE,4BAA4B,CAAC;IAClD,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,KAAK,EAAE,uBAAuB,CAAC;IAC/B;;8BAE0B;IAC1B,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC,GAAG,SAAS,CAAC;IACtF,oFAAoF;IACpF,aAAa,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACxC,kFAAkF;IAClF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kFAAkF;IAClF,YAAY,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAAC;IACjD,yFAAyF;IACzF,yBAAyB,EAAE,OAAO,CAAC;IACnC,kEAAkE;IAClE,cAAc,EAAE,cAAc,CAAC;IAC/B,gFAAgF;IAChF,mBAAmB,EAAE,MAAM,IAAI,CAAC;IAChC,IAAI,EAAE,qBAAqB,CAAC;CAC7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,cAAc,GACrB,KAAK,CAeP;AAwED;;;;;oCAKoC;AACpC,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsC;IAC5D,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAI5C;IACD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE9C;CACF;AAED,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,wBAAwB,GAC5B,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CA+PnC"}

package/dist/account-resolution.js

@@ -0,0 +1,327 @@
+import { accountPoolRows, selectFromAccountPool } from "./account-pool.js";
+import { credentialProfilePolicyProblem } from "@claudexor/core";
+import { credentialPoolExhausted, liveUnusableFor, profileQuotaBlock, } from "./credential-cooldown.js";
+import { readyProfilesForRotation } from "./credential-differential.js";
+import { preflightDefaultSubject } from "./credential-preflight.js";
+import { effectiveLimitAction, limitSubjectRoute, profileHeadroomBreach, } from "./credential-profile-rotation.js";
+import { selectedProfileAvailability, } from "./credential-profiles.js";
+/**
+ * A spent subscription window on an EXPLICITLY PINNED account, refused
+ * MACHINE-READABLY (D-U6: a pin is strict — never a silent rotation). Homed
+ * beside its A4 sibling `pinnedWindowBlocked` in the pinned-lane owner.
+ *
+ * The verdict a caller actually needs from this refusal is "not now, come back
+ * at T" — and the only honest way to deliver T is as a field. Gluing it into
+ * the sentence and shipping the terminal as `category: internal, code: null`
+ * left every consumer (a surface, a scheduler, an automating host) to regex
+ * the prose for a timestamp, which no contract in this repo permits. The
+ * message stays human-readable; the machine reads `code` and `resetsAt`, which
+ * the run terminal lifts onto `final/failure.yaml` verbatim.
+ */
+export function subscriptionWindowExhausted(profileId, harnessId, breach) {
+    return Object.assign(new Error(`credential profile "${profileId}" (${harnessId}) is over its headroom threshold ` +
+        `(${breach.constraint_id} at ${Math.round(breach.used_ratio * 100)}% >= ${Math.round(breach.threshold * 100)}%; ` +
+        `a pinned account never rotates${breach.resets_at ? `; resets ${breach.resets_at}` : ""})`), {
+        code: "subscription_window_exhausted",
+        // Not `internal`: nothing malfunctioned. The account cannot serve this
+        // run until its window reopens, which is what harness_unavailable means.
+        category: "harness_unavailable",
+        resetsAt: breach.resets_at,
+    });
+}
+/** The strict pin's refusal for an OBSERVED live block (A4): same typed code
+ * and category as the headroom form — a consumer asks "when can I come back",
+ * not which detector fired — with the block's own evidence in the prose. */
+function pinnedWindowBlocked(profileId, harnessId, block) {
+    return Object.assign(new Error(`credential profile "${profileId}" (${harnessId}) is ${block.kind === "exhausted"
+        ? "over an observed vendor window"
+        : "in a vendor rate-limit cooldown"} (${block.constraint_id ?? "cooldown"}; a pinned account never rotates${block.resets_at ? `; resets ${block.resets_at}` : ""})`), {
+        code: "subscription_window_exhausted",
+        category: "harness_unavailable",
+        resetsAt: block.resets_at,
+    });
+}
+/**
+ * Per-candidate rejection evidence of one exhausted POOL decision, in the
+ * shape the typed `credential_pool_exhausted` terminal consumes: every
+ * subscription-kind row of the harness with its own quota evidence (fresh
+ * breach / observed live block / live dead-credential verdict), so the
+ * terminal's earliest-reset fold and its message never disagree with the
+ * ranking that refused the pool.
+ */
+function poolExhaustionCandidates(ctx, ready) {
+    const { harnessId, registry, policy, snapshots, model } = ctx;
+    return registry
+        .filter((row) => row.harness_id === harnessId && row.credential_kind !== "api_key")
+        .map((row) => {
+        const breach = profileHeadroomBreach(snapshots, harnessId, row.profile_id, policy.headroom_threshold, model);
+        const block = breach
+            ? null
+            : profileQuotaBlock(snapshots, harnessId, row.profile_id, limitSubjectRoute(row), model);
+        const dead = liveUnusableFor(ctx.unusable, harnessId, row.profile_id, model);
+        // Label precedence mirrors PR-A's rotationExhaustionCandidates: a
+        // not-ready row is not a POOL MEMBER, so its windows never join the
+        // earliest-reset fold (an unready row's reset promises no reopen).
+        const rejected = !row.enabled
+            ? "disabled"
+            : dead
+                ? "credential_unusable"
+                : !ready.has(row.profile_id)
+                    ? "not_ready"
+                    : breach
+                        ? "headroom_exceeded"
+                        : block
+                            ? "cooldown"
+                            : "not_selected";
+        return {
+            profile_id: row.profile_id,
+            rejected,
+            headroom: breach,
+            cooldown: block,
+            unusable: dead ? { code: dead.code } : null,
+        };
+    });
+}
+/** Per-run record of harnesses whose unpinned route took the PAID API-key
+ * route under the EXPLICIT `api_key` preference (Q3=A) — the user's paid
+ * election over a healthy pool, or the only permitted service of an
+ * empty/exhausted one: the spec then carries auth_preference=api_key so the
+ * adapter can never spawn back into an exhausted or excluded native login.
+ * Keyed by the run-input object. */
+export class PoolRouteFlags {
+    flags = new WeakMap();
+    note(runKey, harnessId) {
+        const set = this.flags.get(runKey) ?? new Set();
+        set.add(harnessId);
+        this.flags.set(runKey, set);
+    }
+    has(runKey, harnessId) {
+        return this.flags.get(runKey)?.has(harnessId) ?? false;
+    }
+}
+export async function resolveAccountForRun(ctx) {
+    const { harnessId, registry, policy, snapshots, quota, model, emit } = ctx;
+    // D13: persisted over-limit rows are not candidates to rank or probe. Fail
+    // before the explicit pin, durable binding, paid preference, or pool can
+    // choose one identity and make an OS-user-scoped credential look isolated.
+    if (ctx.profileCardinality?.ambiguous) {
+        throw credentialProfilePolicyProblem(ctx.profileCardinality, "credential_profile_ambiguous");
+    }
+    // A7-aware readiness (ONE composition point, `readyProfilesForRotation`):
+    // probe wrapper + vendor overlay + admission predicate + the live
+    // `credential_unusable` refusal.
+    const readyIds = () => readyProfilesForRotation({
+        registry,
+        harnessId,
+        policy,
+        current: null,
+        probe: ctx.probe,
+        quota,
+        unusable: ctx.unusable,
+        model,
+    });
+    if (ctx.pinnedProfile) {
+        // D-U6: strict pin. A fresh exhausted window refuses with its reset time;
+        // unknown/stale quota never refuses (D3 freshness) — but an OBSERVED live
+        // block (A4: reactive cooldown / spent window, stale-but-live included)
+        // refuses too, since a cooldown instant is absolute clock truth.
+        const pinned = ctx.pinnedProfile;
+        const breach = profileHeadroomBreach(snapshots, harnessId, pinned.profile_id, policy.headroom_threshold, model);
+        const block = breach
+            ? null
+            : profileQuotaBlock(snapshots, harnessId, pinned.profile_id, limitSubjectRoute(pinned), model);
+        if (!breach && !block)
+            return pinned;
+        emit("route.profile.headroom_exceeded", {
+            harness_id: harnessId,
+            profile_id: pinned.profile_id,
+            action: "refuse",
+            constraint_id: breach?.constraint_id ?? block?.constraint_id ?? null,
+            used_ratio: breach?.used_ratio ?? null,
+            threshold: policy.headroom_threshold,
+            resets_at: breach?.resets_at ?? block?.resets_at ?? null,
+        });
+        throw breach
+            ? subscriptionWindowExhausted(pinned.profile_id, harnessId, breach)
+            : pinnedWindowBlocked(pinned.profile_id, harnessId, block);
+    }
+    const pool = accountPoolRows(registry, harnessId);
+    // The legacy ladder serves ONLY harnesses with no REGISTERED subscription
+    // rows (unmigrated stores). A harness whose rows are all DISABLED must fall
+    // through to the pool path below and refuse typed (or take the disclosed
+    // paid route) — the ladder would silently spawn back into the same
+    // account's default store the owner just toggled off.
+    const hasRegisteredRows = registry.some((p) => p.harness_id === harnessId && p.credential_kind !== "api_key");
+    if (pool.length === 0 && !hasRegisteredRows) {
+        if (ctx.nativeCredentialsDisabled) {
+            // No rows AND the native login is excluded: nothing subscription-shaped
+            // can serve — never a silent spawn back INTO the disabled login. The
+            // paid route serves ONLY the EXPLICIT `api_key` preference (Q3=A);
+            // `auto`/`subscription` refuse typed (the admission gate already
+            // dropped non-api_key requests for auto pools).
+            if (ctx.authPreference !== "api_key") {
+                emit("route.account.pool_exhausted", {
+                    harness_id: harnessId,
+                    reason: "the CLI login is disabled and no account is registered",
+                    resets_at: null,
+                    fallback: null,
+                });
+                throw Object.assign(new Error(`no routable ${harnessId} account: the CLI login is disabled ` +
+                    `(harnesses.${harnessId}.native_credentials_enabled=false), no account is ` +
+                    `registered, and the paid API-key route requires the explicit api_key ` +
+                    `preference — connect an account or pin one (--profile)`), {
+                    code: "credential_pool_exhausted",
+                    category: "harness_unavailable",
+                    resetsAt: null,
+                });
+            }
+            ctx.notePoolApiKeyRoute();
+            emit("route.account.pool_exhausted", {
+                harness_id: harnessId,
+                reason: "the CLI login is disabled and no account is registered",
+                resets_at: null,
+                fallback: "api_key_route",
+            });
+            return null;
+        }
+        // Legacy default-subject ladder (unmigrated stores): under an EFFECTIVE
+        // `rotate` (explicit, or the A6 kind-aware `auto` on a subscription
+        // route), a fresh default-subject headroom breach — or its observed live
+        // block (A4) — starts on the next eligible subscription profile instead;
+        // effective `fail`/`ask` change nothing.
+        const breach = profileHeadroomBreach(snapshots, harnessId, null, policy.headroom_threshold, model);
+        const readyProfileIds = effectiveLimitAction(policy, ctx.defaultRoute) === "rotate" &&
+            ctx.defaultRoute === "local_session" &&
+            (breach !== null ||
+                profileQuotaBlock(snapshots, harnessId, null, ctx.defaultRoute, model) !== null)
+            ? await readyIds()
+            : new Set();
+        return preflightDefaultSubject({
+            harnessId,
+            policy,
+            registry,
+            snapshots,
+            readyProfileIds,
+            defaultRoute: ctx.defaultRoute,
+            unusable: ctx.unusable,
+            model,
+            emit,
+        });
+    }
+    // The EXPLICIT `api_key` preference is the user's paid election (Q3=A): it
+    // takes the disclosed PAID route BEFORE binding/pool resolution — a healthy
+    // subscription pool must never spend subscription quota over that explicit
+    // choice (ARCHITECTURE: explicit `api_key` excludes native fallback). Only
+    // an explicit pin outranks it (strict pin doctrine, handled above). Mirrors
+    // the exhausted-pool paid branch below: noted, disclosed, never a row.
+    if (ctx.authPreference === "api_key") {
+        ctx.notePoolApiKeyRoute();
+        emit("route.account.pool_exhausted", {
+            harness_id: harnessId,
+            reason: "explicit api_key preference excludes the subscription pool",
+            resets_at: null,
+            fallback: "api_key_route",
+        });
+        return null;
+    }
+    const boundId = ctx.boundProfileId;
+    let boundSwitchReason = null;
+    if (boundId) {
+        // D-U1 order 2: the thread's bound account resolves BEFORE the pool —
+        // stickiness is not a pool ranking preference, so an explicit
+        // rotation_eligible list cannot evict a healthy binding.
+        const bound = pool.find((row) => row.profile_id === boundId);
+        // A7: a live typed `credential_unusable` observation condemns the BOUND
+        // row at this composition point too (this file's contract: condemned rows
+        // are refused at readiness composition, never re-discovered by spending
+        // an attempt) — the binding re-pools with the disclosed lane switch.
+        const dead = bound ? liveUnusableFor(ctx.unusable, harnessId, boundId, model) : null;
+        if (bound && dead) {
+            boundSwitchReason = `the bound account's credential is unusable (${dead.code})`;
+        }
+        else if (bound) {
+            const verdict = await selectedProfileAvailability({
+                registry,
+                profileId: boundId,
+                harnessId,
+                probe: ctx.probe,
+                quota,
+            });
+            const breach = profileHeadroomBreach(snapshots, harnessId, boundId, policy.headroom_threshold, model);
+            // A4: an observed live block on the bound row (reactive cooldown /
+            // spent window) unbinds it exactly like a fresh breach would.
+            const block = breach
+                ? null
+                : profileQuotaBlock(snapshots, harnessId, boundId, limitSubjectRoute(bound), model);
+            if (verdict === "available" && !breach && !block)
+                return bound;
+            boundSwitchReason =
+                breach || block
+                    ? `quota window exhausted${(breach?.resets_at ?? block?.resets_at)
+                        ? ` (resets ${breach?.resets_at ?? block?.resets_at})`
+                        : ""}`
+                    : (verdict ?? "not ready");
+        }
+        else {
+            boundSwitchReason = "the bound account was disabled or removed";
+        }
+    }
+    const readyProfileIds = await readyIds();
+    const selection = selectFromAccountPool({
+        registry,
+        harnessId,
+        snapshots,
+        readyProfileIds,
+        headroomThreshold: policy.headroom_threshold,
+        model,
+    });
+    if (selection.outcome === "selected") {
+        const chosen = selection.candidate.profile;
+        if (boundId && boundId !== chosen.profile_id) {
+            // Q1=A: a lane switch is DISCLOSED, never silent (the continuity layer
+            // additionally discloses the hydration on the turn).
+            emit("route.account.lane_switch", {
+                harness_id: harnessId,
+                thread_id: ctx.threadId,
+                from_profile_id: boundId,
+                to_profile_id: chosen.profile_id,
+                reason: boundSwitchReason,
+            });
+        }
+        emit("route.account.pool_selected", {
+            harness_id: harnessId,
+            profile_id: chosen.profile_id,
+            quota: selection.candidate.verdict.kind,
+            ...(selection.candidate.verdict.kind === "fresh_headroom"
+                ? { headroom: selection.candidate.verdict.headroom }
+                : {}),
+        });
+        return chosen;
+    }
+    // Pool empty/exhausted (owner Q3=A, superseding Q2=A): the PRIMARY verdict
+    // is the typed `credential_pool_exhausted` TERMINAL carrying the pool's
+    // earliest known reset — an unpinned run under `auto` (and under explicit
+    // `subscription`) WAITS for a window instead of silently taking the paid
+    // route (the same principle as PR-A's kind-aware `limit_action: auto`,
+    // which resolves a metered subject to `fail`: `auto` never silently spends
+    // money). The EXPLICIT `api_key` preference never reaches this point — its
+    // paid election already returned before binding/pool resolution above.
+    emit("route.account.pool_exhausted", {
+        harness_id: harnessId,
+        reason: selection.outcome,
+        resets_at: selection.resets_at,
+        fallback: null,
+        ...(boundId ? { from_profile_id: boundId } : {}),
+    });
+    throw credentialPoolExhausted({
+        harnessId,
+        // The triggering subject of a preflight pool refusal is the thread's
+        // bound row when one exists (its exhaustion is what forced the pool
+        // decision); a fresh unbound run has no subject of its own.
+        profileId: boundId,
+        reason: "profile_headroom_preflight",
+        candidates: poolExhaustionCandidates(ctx, readyProfileIds),
+        subjectLimit: null,
+    });
+}
+//# sourceMappingURL=account-resolution.js.map

package/dist/account-resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-resolution.js","sourceRoot":"","sources":["../src/account-resolution.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,8BAA8B,EAAqC,MAAM,iBAAiB,CAAC;AACpG,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,iBAAiB,GAGlB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GAGtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,2BAA2B,GAE5B,MAAM,0BAA0B,CAAC;AAwElC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CACzC,SAAiB,EACjB,SAAiB,EACjB,MAAsB;IAEtB,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CACP,uBAAuB,SAAS,MAAM,SAAS,mCAAmC;QAChF,IAAI,MAAM,CAAC,aAAa,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK;QACjH,iCAAiC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAC7F,EACD;QACE,IAAI,EAAE,+BAA+B;QACrC,uEAAuE;QACvE,yEAAyE;QACzE,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,MAAM,CAAC,SAAS;KAC3B,CACF,CAAC;AACJ,CAAC;AAED;;4EAE4E;AAC5E,SAAS,mBAAmB,CAAC,SAAiB,EAAE,SAAiB,EAAE,KAAiB;IAClF,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CACP,uBAAuB,SAAS,MAAM,SAAS,QAC7C,KAAK,CAAC,IAAI,KAAK,WAAW;QACxB,CAAC,CAAC,gCAAgC;QAClC,CAAC,CAAC,iCACN,KAAK,KAAK,CAAC,aAAa,IAAI,UAAU,mCACpC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EACpD,GAAG,CACJ,EACD;QACE,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,KAAK,CAAC,SAAS;KAC1B,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,GAA6B,EAAE,KAA0B;IACzF,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IAC9D,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC;SAClF,GAAG,CAAC,CAAC,GAAG,EAA2B,EAAE;QACpC,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,EACT,SAAS,EACT,GAAG,CAAC,UAAU,EACd,MAAM,CAAC,kBAAkB,EACzB,KAAK,CACN,CAAC;QACF,MAAM,KAAK,GAAG,MAAM;YAClB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC7E,kEAAkE;QAClE,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,OAAO;YAC3B,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,IAAI;gBACJ,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;oBAC1B,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,MAAM;wBACN,CAAC,CAAC,mBAAmB;wBACrB,CAAC,CAAC,KAAK;4BACL,CAAC,CAAC,UAAU;4BACZ,CAAC,CAAC,cAAc,CAAC;QAC3B,OAAO;YACL,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,QAAQ;YACR,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;SAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;oCAKoC;AACpC,MAAM,OAAO,cAAc;IACR,KAAK,GAAG,IAAI,OAAO,EAAuB,CAAC;IAC5D,IAAI,CAAC,MAAc,EAAE,SAAiB;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACxD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,GAAG,CAAC,MAAc,EAAE,SAAiB;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;IACzD,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAA6B;IAE7B,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,IAAI,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,CAAC;QACtC,MAAM,8BAA8B,CAAC,GAAG,CAAC,kBAAkB,EAAE,8BAA8B,CAAC,CAAC;IAC/F,CAAC;IACD,0EAA0E;IAC1E,kEAAkE;IAClE,iCAAiC;IACjC,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,wBAAwB,CAAC;QACvB,QAAQ;QACR,SAAS;QACT,MAAM;QACN,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK;QACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK;KACN,CAAC,CAAC;IACL,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QACtB,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC;QACjC,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,EACT,SAAS,EACT,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,kBAAkB,EACzB,KAAK,CACN,CAAC;QACF,MAAM,KAAK,GAAG,MAAM;YAClB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,iBAAiB,CACf,SAAS,EACT,SAAS,EACT,MAAM,CAAC,UAAU,EACjB,iBAAiB,CAAC,MAAM,CAAC,EACzB,KAAK,CACN,CAAC;QACN,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC;QACrC,IAAI,CAAC,iCAAiC,EAAE;YACtC,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,KAAK,EAAE,aAAa,IAAI,IAAI;YACpE,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI;YACtC,SAAS,EAAE,MAAM,CAAC,kBAAkB;YACpC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,SAAS,IAAI,IAAI;SACzD,CAAC,CAAC;QACH,MAAM,MAAM;YACV,CAAC,CAAC,2BAA2B,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;YACnE,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,KAAmB,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAClD,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,mEAAmE;IACnE,sDAAsD;IACtD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,CACrE,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5C,IAAI,GAAG,CAAC,yBAAyB,EAAE,CAAC;YAClC,wEAAwE;YACxE,qEAAqE;YACrE,mEAAmE;YACnE,iEAAiE;YACjE,gDAAgD;YAChD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBACrC,IAAI,CAAC,8BAA8B,EAAE;oBACnC,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,wDAAwD;oBAChE,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,eAAe,SAAS,sCAAsC;oBAC5D,cAAc,SAAS,oDAAoD;oBAC3E,uEAAuE;oBACvE,wDAAwD,CAC3D,EACD;oBACE,IAAI,EAAE,2BAA2B;oBACjC,QAAQ,EAAE,qBAAqB;oBAC/B,QAAQ,EAAE,IAAI;iBACf,CACF,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,mBAAmB,EAAE,CAAC;YAC1B,IAAI,CAAC,8BAA8B,EAAE;gBACnC,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,wDAAwD;gBAChE,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,eAAe;aAC1B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,wEAAwE;QACxE,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,yCAAyC;QACzC,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,EACT,SAAS,EACT,IAAI,EACJ,MAAM,CAAC,kBAAkB,EACzB,KAAK,CACN,CAAC;QACF,MAAM,eAAe,GACnB,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ;YAC3D,GAAG,CAAC,YAAY,KAAK,eAAe;YACpC,CAAC,MAAM,KAAK,IAAI;gBACd,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;YAChF,CAAC,CAAC,MAAM,QAAQ,EAAE;YAClB,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;QACxB,OAAO,uBAAuB,CAAC;YAC7B,SAAS;YACT,MAAM;YACN,QAAQ;YACR,SAAS;YACT,eAAe;YACf,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK;YACL,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACrC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC1B,IAAI,CAAC,8BAA8B,EAAE;YACnC,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,4DAA4D;YACpE,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC;IACnC,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAC5C,IAAI,OAAO,EAAE,CAAC;QACZ,sEAAsE;QACtE,8DAA8D;QAC9D,yDAAyD;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC;QAC7D,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,iBAAiB,GAAG,+CAA+C,IAAI,CAAC,IAAI,GAAG,CAAC;QAClF,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC;gBAChD,QAAQ;gBACR,SAAS,EAAE,OAAO;gBAClB,SAAS;gBACT,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,KAAK;aACN,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,EACT,SAAS,EACT,OAAO,EACP,MAAM,CAAC,kBAAkB,EACzB,KAAK,CACN,CAAC;YACF,mEAAmE;YACnE,8DAA8D;YAC9D,MAAM,KAAK,GAAG,MAAM;gBAClB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;YACtF,IAAI,OAAO,KAAK,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC/D,iBAAiB;gBACf,MAAM,IAAI,KAAK;oBACb,CAAC,CAAC,yBACE,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,SAAS,CAAC;wBACrC,CAAC,CAAC,YAAY,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,SAAS,GAAG;wBACtD,CAAC,CAAC,EACN,EAAE;oBACJ,CAAC,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,iBAAiB,GAAG,2CAA2C,CAAC;QAClE,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,QAAQ,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,qBAAqB,CAAC;QACtC,QAAQ;QACR,SAAS;QACT,SAAS;QACT,eAAe;QACf,iBAAiB,EAAE,MAAM,CAAC,kBAAkB;QAC5C,KAAK;KACN,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC;QAC3C,IAAI,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YAC7C,uEAAuE;YACvE,qDAAqD;YACrD,IAAI,CAAC,2BAA2B,EAAE;gBAChC,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,GAAG,CAAC,QAAQ;gBACvB,eAAe,EAAE,OAAO;gBACxB,aAAa,EAAE,MAAM,CAAC,UAAU;gBAChC,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,6BAA6B,EAAE;YAClC,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI;YACvC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB;gBACvD,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,CAAC,8BAA8B,EAAE;QACnC,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,SAAS,CAAC,OAAO;QACzB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,QAAQ,EAAE,IAAI;QACd,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,uBAAuB,CAAC;QAC5B,SAAS;QACT,qEAAqE;QACrE,oEAAoE;QACpE,4DAA4D;QAC5D,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,4BAA4B;QACpC,UAAU,EAAE,wBAAwB,CAAC,GAAG,EAAE,eAAe,CAAC;QAC1D,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;AACL,CAAC"}

package/dist/attemptOutputMarkers.d.ts

@@ -0,0 +1,30 @@
+/**
+ * A2: typed per-attempt output markers for the STRUCTURAL rotation predicate.
+ *
+ * `sawAgentProgress` proves the agent demonstrably started working under the
+ * current credential — after that, a credential rotation would silently replay
+ * work (and any external side effects a tool call already performed), so the
+ * structural branch must never fire. The policy is deliberately NARROWER than
+ * the inactivity watchdog's `countsAsAgentProgress`: `message` and `error`
+ * events do NOT count, because a vendor's limit/failure prose arriving as a
+ * message must never block the structural branch (the exact incident class
+ * this predicate exists to close), and `status` events are lifecycle/failure
+ * disclosures, never model work.
+ *
+ * `fileChanges` counts typed `file_change` events WITHOUT requiring a tool ref
+ * (adapters legitimately emit tool-less file_change frames), so the mutation
+ * guard sees every disclosed write even when the workspace diff is empty or —
+ * in the read-only lane — no workspace exists at all.
+ */
+import type { HarnessEvent } from "@claudexor/schema";
+export interface AttemptOutputMarkers {
+    /** The agent demonstrably produced work under this credential (thinking /
+     * tool activity / file or patch output / a completed compaction). */
+    sawAgentProgress: boolean;
+    /** Count of typed `file_change` events observed this attempt (tool-less
+     * frames included). */
+    fileChanges: number;
+}
+export declare function newAttemptOutputMarkers(): AttemptOutputMarkers;
+export declare function observeAttemptOutputMarkers(m: AttemptOutputMarkers, ev: HarnessEvent): void;
+//# sourceMappingURL=attemptOutputMarkers.d.ts.map