@claudexor/orchestrator 3.5.0 → 3.8.0

package/dist/credential-profile-rotation.js

@@ -1,5 +1,31 @@
-import { HarnessRunSpec as HarnessRunSpecSchema } from "@claudexor/schema";
+import { HarnessRunSpec as HarnessRunSpecSchema, RouteCredentialUnusablePayload, } from "@claudexor/schema";
 import { quotaConstraintAppliesToModel } from "@claudexor/budget";
+import { credentialPoolExhausted, liveUnusableFor, poolMemberEvidence, profileQuotaBlock, } from "./credential-cooldown.js";
+import { reactiveRotationEvidence, rotationRetryEligible, } from "./rotation-predicate.js";
+export { rotationRetryEligible } from "./rotation-predicate.js";
+/** The route of a limit decision's subject: a pinned profile decides by its
+ * own credential kind; the default subject decides by the caller's route
+ * estimate. ONE owner, so every consumer classifies the subject alike. */
+export function limitSubjectRoute(profile, defaultRoute = null) {
+    if (!profile)
+        return defaultRoute;
+    return profile.credential_kind === "api_key" ? "api_key" : "local_session";
+}
+/**
+ * THE effective-policy resolver (A6, owner decision 1=A): the stored default
+ * `auto` resolves BY CREDENTIAL KIND — `rotate` for subscription
+ * (`local_session`) subjects, `fail` for metered API-key or unknown routes —
+ * while explicitly persisted `fail`/`ask`/`rotate` pass through untouched
+ * (3=A: a stored value is never reinterpreted, only ABSENT changed meaning).
+ * Every `limit_action` comparison in the engine and every projection
+ * (`next_up`, Accounts) resolves through this one function, so admission and
+ * display can never disagree about what `auto` does (INV-135).
+ */
+export function effectiveLimitAction(policy, route) {
+    if (policy.limit_action !== "auto")
+        return policy.limit_action;
+    return route === "local_session" ? "rotate" : "fail";
+}
 /**
  * Static rotation candidates, before any credential-backed readiness probe.
  * One owner applies policy order, enabled/harness scope, current identity,
@@ -83,24 +109,35 @@ export function nextEligibleProfile(registry, harnessId, policy, current, snapsh
             continue;
         if (profileHeadroomBreach(snapshots, harnessId, candidate.profile_id, policy.headroom_threshold, model))
             continue;
+        // Rotating INTO a subject whose own observed windows are still cooling or
+        // spent (A4) is not a failover — it burns an attempt to rediscover the
+        // limit the registry already holds, stale-but-live evidence included.
+        if (profileQuotaBlock(snapshots, harnessId, candidate.profile_id, limitSubjectRoute(candidate), model))
+            continue;
         return candidate;
     }
     return null;
 }
-/**
- * `rotation_retry_eligible` (sol #30): a failover retry is allowed ONLY when
- * the attempt saw a TYPED vendor limit AND produced no deliverable and no
- * workspace mutation — a partially-acted attempt never silently reruns.
- */
-export function rotationRetryEligible(input) {
-    return input.sawTypedLimit && input.deliverableEmpty;
-}
-function emitRotationExhausted(args) {
+/** The per-candidate rejection evidence of one exhausted rotation decision:
+ * why each registered identity of the harness could not take over, with its
+ * own quota evidence (headroom breach / observed block) when it has any. ONE
+ * builder feeds both the `route.profile.rotation_exhausted` event and the
+ * typed pool-exhausted terminal, so they can never disagree. */
+function rotationExhaustionCandidates(args) {
     const excluded = args.excluded ?? new Set();
-    const candidates = args.registry
+    return args.registry
         .filter((profile) => profile.harness_id === args.harnessId && profile.enabled)
         .map((profile) => {
         const breach = profileHeadroomBreach(args.snapshots, args.harnessId, profile.profile_id, args.policy.headroom_threshold, args.model);
+        // Observed-limit evidence (A4): a candidate skipped because its own
+        // windows are cooling/spent says so machine-readably, with the earliest
+        // known release instant, instead of hiding behind "not_selected".
+        const block = profileQuotaBlock(args.snapshots, args.harnessId, profile.profile_id, limitSubjectRoute(profile), args.model);
+        // A7: a candidate refused because ITS CREDENTIAL was observed dead says
+        // so typed, instead of hiding behind "not_ready" — a dead credential is
+        // not a readiness hiccup, and its quota evidence never carries a
+        // reopen promise.
+        const dead = liveUnusableFor(args.unusable ?? [], args.harnessId, profile.profile_id, args.model);
         const rejected = profile.profile_id === args.current?.profile_id
             ? "current"
             : args.policy.rotation_eligible.length > 0 &&
@@ -112,18 +149,28 @@ function emitRotationExhausted(args) {
                         ? "credential_kind_mismatch"
                         : args.current === null && profile.credential_kind === "api_key"
                             ? "credential_kind_mismatch"
-                            : !args.readyProfileIds.has(profile.profile_id)
-                                ? "not_ready"
-                                : breach
-                                    ? "headroom_exceeded"
-                                    : "not_selected";
+                            : dead
+                                ? "credential_unusable"
+                                : !args.readyProfileIds.has(profile.profile_id)
+                                    ? "not_ready"
+                                    : breach
+                                        ? "headroom_exceeded"
+                                        : block
+                                            ? "cooldown"
+                                            : "not_selected";
         return {
             profile_id: profile.profile_id,
             credential_kind: profile.credential_kind,
             rejected,
             headroom: breach,
+            cooldown: block,
+            unusable: dead ? { code: dead.code, source: dead.source } : null,
+            resets_at: breach?.resets_at ?? block?.resets_at ?? null,
         };
     });
+}
+export function emitRotationExhausted(args) {
+    const candidates = rotationExhaustionCandidates(args);
     args.emit("route.profile.rotation_exhausted", {
         harness_id: args.harnessId,
         attempt_id: args.attemptId,
@@ -132,154 +179,35 @@ function emitRotationExhausted(args) {
         threshold: args.policy.headroom_threshold,
         candidates,
     });
+    // The same rows feed the typed pool-exhausted terminal (A5): the event and
+    // the failure must never disagree about why each candidate was rejected.
+    return candidates;
 }
 /**
- * A spent subscription window, refused MACHINE-READABLY.
- *
- * The verdict a caller actually needs from this refusal is "not now, come back
- * at T" — and the only honest way to deliver T is as a field. Gluing it into
- * the sentence and shipping the terminal as `category: internal, code: null`
- * left every consumer (a surface, a scheduler, an automating host) to regex
- * the prose for a timestamp, which no contract in this repo permits. The
- * message stays human-readable; the machine reads `code` and `resetsAt`, which
- * the run terminal lifts onto `final/failure.yaml` verbatim.
- */
-function subscriptionWindowExhausted(profileId, harnessId, breach) {
-    return Object.assign(new Error(`credential profile "${profileId}" (${harnessId}) is over its headroom threshold ` +
-        `(${breach.constraint_id} at ${Math.round(breach.used_ratio * 100)}% >= ${Math.round(breach.threshold * 100)}%; ` +
-        `limit_action=fail${breach.resets_at ? `; resets ${breach.resets_at}` : ""})`), {
-        code: "subscription_window_exhausted",
-        // Not `internal`: nothing malfunctioned. The account cannot serve this
-        // run until its window reopens, which is what harness_unavailable means.
-        category: "harness_unavailable",
-        resetsAt: breach.resets_at,
-    });
-}
-/**
- * `profile_headroom_preflight` (W5.4): BEFORE spawn, the selected profile's
- * freshest quota windows are checked against the policy threshold. A breach
- * is always a typed event; `rotate` swaps to the next eligible profile with
- * provenance, `ask`/`fail` proceed on the selected profile — the runtime
- * `vendor_limit_rejected` evidence stays the terminating truth.
- */
-export function preflightCredentialProfile(args) {
-    const { profile, harnessId, policy, registry, snapshots, readyProfileIds, model, emit } = args;
-    const breach = profileHeadroomBreach(snapshots, harnessId, profile.profile_id, policy.headroom_threshold, model);
-    if (!breach)
-        return profile;
-    emit("route.profile.headroom_exceeded", {
-        harness_id: harnessId,
-        profile_id: profile.profile_id,
-        action: policy.limit_action,
-        constraint_id: breach.constraint_id,
-        used_ratio: breach.used_ratio,
-        threshold: breach.threshold,
-        resets_at: breach.resets_at,
-    });
-    if (policy.limit_action === "fail") {
-        // The documented FAIL action fails (release wave tier1 #4): a FRESH breach
-        // under fail refuses before spawn with the evidence, instead of silently
-        // proceeding into a vendor rejection.
-        throw subscriptionWindowExhausted(profile.profile_id, harnessId, breach);
-    }
-    if (policy.limit_action !== "rotate")
-        return profile;
-    const next = nextEligibleProfile(registry, harnessId, policy, profile, snapshots, readyProfileIds, new Set(), model);
-    if (!next) {
-        emitRotationExhausted({
-            current: profile,
-            harnessId,
-            policy,
-            registry,
-            snapshots,
-            readyProfileIds,
-            model,
-            reason: "profile_headroom_preflight",
-            emit,
-        });
-        return profile;
-    }
-    emit("route.profile.rotated", {
-        harness_id: harnessId,
-        from_profile_id: profile.profile_id,
-        to_profile_id: next.profile_id,
-        reason: "profile_headroom_preflight",
-        constraint_id: breach.constraint_id,
-        used_ratio: breach.used_ratio,
-        resets_at: breach.resets_at,
-    });
-    return next;
-}
-/**
- * Default-subject start selection (INV-135, owner scope "auto-balance"): when
- * NO profile is pinned, the policy is `rotate`, and the DEFAULT store's own
- * fresh quota window is at/over the headroom bound, pick the first eligible
- * SUBSCRIPTION profile instead of spawning into a near-certain vendor limit.
- * Strictly opt-in: `fail`/`ask` keep today's default-user behavior untouched
- * (the profile engine's fail action governs PINNED profiles only — throwing
- * here would brick every default user at 90% quota). Unknown or stale usage
- * never rotates.
- */
-export function preflightDefaultSubject(args) {
-    const { harnessId, policy, registry, snapshots, readyProfileIds, defaultRoute, model, emit } = args;
-    if (policy.limit_action !== "rotate" || defaultRoute !== "local_session")
-        return null;
-    const breach = profileHeadroomBreach(snapshots, harnessId, null, policy.headroom_threshold, model);
-    if (!breach)
-        return null;
-    emit("route.profile.headroom_exceeded", {
-        harness_id: harnessId,
-        profile_id: null,
-        action: policy.limit_action,
-        constraint_id: breach.constraint_id,
-        used_ratio: breach.used_ratio,
-        threshold: breach.threshold,
-        resets_at: breach.resets_at,
-    });
-    const next = nextEligibleProfile(registry, harnessId, policy, null, snapshots, readyProfileIds, new Set(), model);
-    if (!next) {
-        emitRotationExhausted({
-            current: null,
-            harnessId,
-            policy,
-            registry,
-            snapshots,
-            readyProfileIds,
-            model,
-            reason: "profile_headroom_preflight",
-            emit,
-        });
-        return null;
-    }
-    emit("route.profile.rotated", {
-        harness_id: harnessId,
-        from_profile_id: null,
-        to_profile_id: next.profile_id,
-        reason: "profile_headroom_preflight",
-        constraint_id: breach.constraint_id,
-        used_ratio: breach.used_ratio,
-        resets_at: breach.resets_at,
-    });
-    return next;
-}
-/**
- * Reactive failover plan (`vendor_limit_rejected`, W5.4): rotation fires ONLY
- * on the typed predicate under a `rotate` policy, marks the current profile
- * tried (at most once per attempt each), and returns the next target with
- * provenance already emitted — or null when the attempt must fail as-is.
+ * Reactive failover plan (`vendor_limit_rejected` / structural, W5.4 + A2):
+ * rotation fires ONLY on the typed evidence predicate under a `rotate`
+ * policy, marks the current profile tried (at most once per attempt each),
+ * and returns the next target with provenance already emitted — or null when
+ * the attempt must fail as-is.
  * `currentProfile: null` is the DEFAULT subject: allowed ONLY when the caller
  * proves the attempt's pre-spawn route was vendor_native (a metered default
  * hitting a limit is a budget fact, not a subscription to fail over from).
  */
 export function planReactiveRotation(args) {
-    if (!rotationRetryEligible(args))
+    if (!rotationRetryEligible(args.evidence))
         return null;
-    if (args.policy.limit_action !== "rotate")
+    const route = limitSubjectRoute(args.currentProfile, args.defaultRouteWasVendorNative === true ? "local_session" : null);
+    if (effectiveLimitAction(args.policy, route) !== "rotate")
         return null;
     if (args.currentProfile === null && args.defaultRouteWasVendorNative !== true)
         return null;
     if (args.currentProfile)
         args.triedProfiles.add(args.currentProfile.profile_id);
+    // Honest provenance: a structural rotation names its own reason — no typed
+    // vendor limit was observed, so `vendor_limit_rejected` would be fabricated.
+    const reason = args.evidence.sawTypedLimit
+        ? "vendor_limit_rejected"
+        : "structural_pre_progress_failure";
     const next = nextEligibleProfile(args.registry, args.harnessId, args.policy, args.currentProfile, args.snapshots, args.readyProfileIds, args.triedProfiles, args.model);
     if (!next) {
         emitRotationExhausted({
@@ -290,9 +218,10 @@ export function planReactiveRotation(args) {
             snapshots: args.snapshots,
             readyProfileIds: args.readyProfileIds,
             excluded: args.triedProfiles,
+            unusable: args.unusable,
             attemptId: args.attemptId,
             model: args.model,
-            reason: "vendor_limit_rejected",
+            reason,
             emit: args.emit,
         });
         return null;
@@ -302,36 +231,135 @@ export function planReactiveRotation(args) {
         attempt_id: args.attemptId,
         from_profile_id: args.currentProfile?.profile_id ?? null,
         to_profile_id: next.profile_id,
-        reason: "vendor_limit_rejected",
+        reason,
         retry_delay_ms: args.lastLimit?.retryDelayMs ?? null,
         resets_at: args.lastLimit?.resetsAt ?? null,
     });
     return next;
 }
 /**
- * Shared reactive-failover step for BOTH lanes: given the attempt's typed
- * evidence, plan a rotation and rebuild the spec on a NEW vendor session
- * under the next profile — or return null when the attempt must fail as-is.
+ * Shared reactive-failover step for BOTH lanes: fold the try's lane-local
+ * facts + output markers into the typed rotation evidence, probe candidate
+ * readiness ONLY when the predicate could actually fire (the probe spends
+ * seconds), then plan a rotation and rebuild the spec on a NEW vendor session
+ * under the next profile. `null` = the failure was never rotation's business
+ * (fail as-is: transient machinery, plain errors), or the pool ran out with
+ * NO credential evidence anywhere (the evidence gate below) so the attempt
+ * keeps its true failure. `{ poolExhausted }` = the
+ * failure WAS rotation-eligible under a `rotate` policy, the pool has
+ * nowhere left to go, and the decision carries credential evidence — the
+ * attempt must terminalize on this typed refusal
+ * BEFORE the transient gate can burn same-profile retries on the
+ * already-refused subject (A5 ordering: a typed vendor limit classifies as
+ * retryable-transient, so falling through would retry the spent credential).
+ * Callers invoke this only after the try ended in a terminal error.
  */
-export function rotateSpecOnTypedLimit(args) {
+export async function rotateSpecOnTypedLimit(args) {
+    const current = args.spec.credential_profile ?? null;
+    const evidence = reactiveRotationEvidence(args);
+    if (args.pinned) {
+        // Strict pin (D-U6): never rotate. A TYPED vendor limit on the pinned
+        // subject still terminalizes TYPED — `subscription_window_exhausted` with
+        // the limit's own reset — BEFORE the transient gate burns same-profile
+        // retries on the already-refused subject (the A5 ordering, preserved for
+        // pins). Anything else (structural/untyped deaths) fails as-is.
+        if (current && evidence.sawTypedLimit && rotationRetryEligible(evidence)) {
+            return {
+                poolExhausted: Object.assign(new Error(`credential profile "${current.profile_id}" (${args.harnessId}) hit a typed ` +
+                    `vendor limit and a pinned account never rotates` +
+                    `${args.lastLimit?.resetsAt ? `; resets ${args.lastLimit.resetsAt}` : ""}`), {
+                    code: "subscription_window_exhausted",
+                    category: "harness_unavailable",
+                    resetsAt: args.lastLimit?.resetsAt ?? null,
+                }),
+            };
+        }
+        return null;
+    }
+    const route = limitSubjectRoute(current, args.defaultRouteWasVendorNative === true ? "local_session" : null);
+    const eligible = effectiveLimitAction(args.policy, route) === "rotate" &&
+        rotationRetryEligible(evidence) &&
+        (current !== null || args.defaultRouteWasVendorNative === true);
+    if (!eligible)
+        return null;
+    const readyProfileIds = await args.probeReadyProfiles();
+    // A7: the differential probe of the CURRENT subject rides the same eligible
+    // decision as the candidate probe — quota-spent stays A4's cooldown story,
+    // while a dead credential becomes a typed, emitted, recorded observation.
+    const subjectUnusable = (await args.probeCurrentSubject?.()) ?? null;
+    if (subjectUnusable) {
+        args.emit("route.profile.credential_unusable", RouteCredentialUnusablePayload.parse({ ...subjectUnusable, attempt_id: args.attemptId }));
+    }
     const rotation = planReactiveRotation({
-        currentProfile: args.spec.credential_profile ?? null,
+        currentProfile: current,
         defaultRouteWasVendorNative: args.defaultRouteWasVendorNative,
         harnessId: args.harnessId,
         attemptId: args.attemptId,
         policy: args.policy,
         registry: args.registry,
         snapshots: args.snapshots,
-        readyProfileIds: args.readyProfileIds,
+        readyProfileIds,
         triedProfiles: args.triedProfiles,
-        sawTypedLimit: args.sawTypedLimit,
-        deliverableEmpty: args.deliverableEmpty,
+        evidence,
         lastLimit: args.lastLimit,
+        unusable: args.liveUnusable,
         model: args.spec.model_hint,
         emit: args.emit,
     });
-    if (!rotation)
-        return null;
+    if (!rotation) {
+        // planReactiveRotation already emitted `route.profile.rotation_exhausted`;
+        // rebuild the same rows (same pure inputs, no second event) for the typed
+        // terminal. The subject's own limit joins the fold from the freshest
+        // source available: its registry block (default subject has no row), else
+        // the typed limit just observed on the stream — the registry may not have
+        // ingested it yet, and its unknown reset then honestly nulls the fold.
+        const candidates = rotationExhaustionCandidates({
+            current,
+            harnessId: args.harnessId,
+            policy: args.policy,
+            registry: args.registry,
+            snapshots: args.snapshots,
+            readyProfileIds,
+            excluded: args.triedProfiles,
+            unusable: args.liveUnusable,
+            model: args.spec.model_hint,
+        });
+        // The default subject reached here only via the vendor-native eligibility
+        // gate above, so its registry row is the SUBSCRIPTION default — never the
+        // managed-api-key default that shares subject_id=null.
+        const subjectBlock = current === null
+            ? profileQuotaBlock(args.snapshots, args.harnessId, null, "local_session", args.spec.model_hint)
+            : null;
+        const subjectLimit = subjectBlock ??
+            (evidence.sawTypedLimit ? { resets_at: args.lastLimit?.resetsAt ?? null } : null);
+        // The pool terminal REQUIRES evidence: "credential_pool_exhausted" claims
+        // the credential layer refused the run, so either the triggering subject
+        // must carry limit/unusable evidence or some POOL-MEMBER row must carry
+        // headroom/cooldown/unusable evidence (`poolMemberEvidence` — rows for
+        // identities rotation could never select, e.g. an api_key sibling under a
+        // subscription subject, never count). A structural pre-progress death
+        // over an empty (or evidence-free) pool proves nothing about credentials —
+        // fail as-is and keep the TRUE failure (a vanilla user's crashed run must
+        // never terminalize as a pool refusal). The already-emitted
+        // `route.profile.rotation_exhausted` event stays: rotation WAS consulted
+        // and had nowhere to go; only the terminal's claim is evidence-gated.
+        const subjectEvidence = subjectLimit !== null || subjectUnusable !== null;
+        const poolEvidence = candidates.some(poolMemberEvidence);
+        if (!subjectEvidence && !poolEvidence)
+            return null;
+        return {
+            poolExhausted: credentialPoolExhausted({
+                harnessId: args.harnessId,
+                profileId: current?.profile_id ?? null,
+                reason: evidence.sawTypedLimit
+                    ? "vendor_limit_rejected"
+                    : "structural_pre_progress_failure",
+                candidates,
+                subjectLimit,
+                subjectUnusable,
+            }),
+        };
+    }
     return HarnessRunSpecSchema.parse({
         ...args.spec,
         session_id: args.newSessionId(),

package/dist/credential-profile-rotation.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-profile-rotation.js","sourceRoot":"","sources":["../src/credential-profile-rotation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,IAAI,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAgBlE;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAMxC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAC/B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CACtE,CAAC;IACF,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB;aAC1B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;aAC9D,MAAM,CAAC,CAAC,OAAO,EAAgC,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC;QAC7E,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG,EAAU,CAAC;IACpD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QAClC,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,EAAE,UAAU;YAAE,OAAO,KAAK,CAAC;QACpE,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YACxF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,2EAA2E;QAC3E,8CAA8C;QAC9C,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,eAAe,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAmC,EACnC,SAAiB,EACjB,SAAwB,EACxB,SAAiB,EACjB,KAAqB;IAErB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO;YAAE,SAAS;QAC7C,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,SAAS;QACrD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAClE,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,CAAC,6BAA6B,CAAC,UAAU,EAAE,KAAK,CAAC;gBAAE,SAAS;YAChE,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;gBACzE,OAAO;oBACL,aAAa,EAAE,UAAU,CAAC,EAAE;oBAC5B,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,SAAS;oBACT,SAAS,EAAE,UAAU,CAAC,SAAS;iBAChC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAsC,EACtC,SAAiB,EACjB,MAAqB,EACrB,OAAyE,EACzE,SAAmC,EACnC,eAAoC,EACpC,QAAQ,GAAwB,IAAI,GAAG,EAAE,EACzC,KAAqB;IAErB,KAAK,MAAM,SAAS,IAAI,wBAAwB,CAAC;QAC/C,QAAQ;QACR,SAAS;QACT,MAAM;QACN,OAAO;QACP,QAAQ;KACT,CAAC,EAAE,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,SAAS;QACzD,IACE,qBAAqB,CACnB,SAAS,EACT,SAAS,EACT,SAAS,CAAC,UAAU,EACpB,MAAM,CAAC,kBAAkB,EACzB,KAAK,CACN;YAED,SAAS;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAGrC;IACC,OAAO,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,gBAAgB,CAAC;AACvD,CAAC;AAUD,SAAS,qBAAqB,CAAC,IAY9B;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG,EAAU,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ;SAC7B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;SAC7E,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,qBAAqB,CAClC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,SAAS,EACd,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAC9B,IAAI,CAAC,KAAK,CACX,CAAC;QACF,MAAM,QAAQ,GACZ,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,EAAE,UAAU;YAC7C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;gBACtC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;gBAC7D,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;oBAChC,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,OAAO,CAAC,eAAe;wBACxE,CAAC,CAAC,0BAA0B;wBAC5B,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;4BAC9D,CAAC,CAAC,0BAA0B;4BAC5B,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;gCAC7C,CAAC,CAAC,WAAW;gCACb,CAAC,CAAC,MAAM;oCACN,CAAC,CAAC,mBAAmB;oCACrB,CAAC,CAAC,cAAc,CAAC;QACjC,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,QAAQ;YACR,QAAQ,EAAE,MAAM;SACjB,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,IAAI,CAAC,IAAI,CAAC,kCAAkC,EAAE;QAC5C,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI;QACjD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;QACzC,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,2BAA2B,CAClC,SAAiB,EACjB,SAAiB,EACjB,MAAsB;IAEtB,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CACP,uBAAuB,SAAS,MAAM,SAAS,mCAAmC;QAChF,IAAI,MAAM,CAAC,aAAa,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK;QACjH,oBAAoB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAChF,EACD;QACE,IAAI,EAAE,+BAA+B;QACrC,uEAAuE;QACvE,yEAAyE;QACzE,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,MAAM,CAAC,SAAS;KAC3B,CACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAS1C;IACC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC/F,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,EACT,SAAS,EACT,OAAO,CAAC,UAAU,EAClB,MAAM,CAAC,kBAAkB,EACzB,KAAK,CACN,CAAC;IACF,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC,iCAAiC,EAAE;QACtC,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,MAAM,CAAC,YAAY;QAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACnC,2EAA2E;QAC3E,yEAAyE;QACzE,sCAAsC;QACtC,MAAM,2BAA2B,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IACrD,MAAM,IAAI,GAAG,mBAAmB,CAC9B,QAAQ,EACR,SAAS,EACT,MAAM,EACN,OAAO,EACP,SAAS,EACT,eAAe,EACf,IAAI,GAAG,EAAE,EACT,KAAK,CACN,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,qBAAqB,CAAC;YACpB,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,MAAM;YACN,QAAQ;YACR,SAAS;YACT,eAAe;YACf,KAAK;YACL,MAAM,EAAE,4BAA4B;YACpC,IAAI;SACL,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,uBAAuB,EAAE;QAC5B,UAAU,EAAE,SAAS;QACrB,eAAe,EAAE,OAAO,CAAC,UAAU;QACnC,aAAa,EAAE,IAAI,CAAC,UAAU;QAC9B,MAAM,EAAE,4BAA4B;QACpC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,IASvC;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAC1F,IAAI,CAAC;IACP,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACtF,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,EACT,SAAS,EACT,IAAI,EACJ,MAAM,CAAC,kBAAkB,EACzB,KAAK,CACN,CAAC;IACF,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC,iCAAiC,EAAE;QACtC,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,MAAM,CAAC,YAAY;QAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,mBAAmB,CAC9B,QAAQ,EACR,SAAS,EACT,MAAM,EACN,IAAI,EACJ,SAAS,EACT,eAAe,EACf,IAAI,GAAG,EAAE,EACT,KAAK,CACN,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,qBAAqB,CAAC;YACpB,OAAO,EAAE,IAAI;YACb,SAAS;YACT,MAAM;YACN,QAAQ;YACR,SAAS;YACT,eAAe;YACf,KAAK;YACL,MAAM,EAAE,4BAA4B;YACpC,IAAI;SACL,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,uBAAuB,EAAE;QAC5B,UAAU,EAAE,SAAS;QACrB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,IAAI,CAAC,UAAU;QAC9B,MAAM,EAAE,4BAA4B;QACpC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAepC;IACC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,IAAI,CAAC,2BAA2B,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,IAAI,CAAC,cAAc;QAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,mBAAmB,CAC9B,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,KAAK,CACX,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,qBAAqB,CAAC;YACpB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,QAAQ,EAAE,IAAI,CAAC,aAAa;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE;QACjC,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,eAAe,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,IAAI,IAAI;QACxD,aAAa,EAAE,IAAI,CAAC,UAAU;QAC9B,MAAM,EAAE,uBAAuB;QAC/B,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,IAAI,IAAI;QACpD,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,IAAI,IAAI;KAC5C,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAiBtC;IACC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI;QACpD,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,oBAAoB,CAAC,KAAK,CAAC;QAChC,GAAG,IAAI,CAAC,IAAI;QACZ,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;QAC/B,kBAAkB,EAAE,QAAQ;QAC5B,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"credential-profile-rotation.js","sourceRoot":"","sources":["../src/credential-profile-rotation.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,cAAc,IAAI,oBAAoB,EACtC,8BAA8B,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,GAGlB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,wBAAwB,EACxB,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAyB,MAAM,yBAAyB,CAAC;AAavF;;0EAE0E;AAC1E,MAAM,UAAU,iBAAiB,CAC/B,OAA0D,EAC1D,YAAY,GAAiB,IAAI;IAEjC,IAAI,CAAC,OAAO;QAAE,OAAO,YAAY,CAAC;IAClC,OAAO,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;AAC7E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA2C,EAC3C,KAAmB;IAEnB,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IAC/D,OAAO,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AAUD;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAMxC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAC/B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CACtE,CAAC;IACF,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB;aAC1B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;aAC9D,MAAM,CAAC,CAAC,OAAO,EAAgC,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC;QAC7E,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG,EAAU,CAAC;IACpD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QAClC,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,EAAE,UAAU;YAAE,OAAO,KAAK,CAAC;QACpE,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YACxF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,2EAA2E;QAC3E,8CAA8C;QAC9C,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,eAAe,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAmC,EACnC,SAAiB,EACjB,SAAwB,EACxB,SAAiB,EACjB,KAAqB;IAErB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO;YAAE,SAAS;QAC7C,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,SAAS;QACrD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAClE,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,CAAC,6BAA6B,CAAC,UAAU,EAAE,KAAK,CAAC;gBAAE,SAAS;YAChE,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;gBACzE,OAAO;oBACL,aAAa,EAAE,UAAU,CAAC,EAAE;oBAC5B,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,SAAS;oBACT,SAAS,EAAE,UAAU,CAAC,SAAS;iBAChC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAsC,EACtC,SAAiB,EACjB,MAAqB,EACrB,OAAyE,EACzE,SAAmC,EACnC,eAAoC,EACpC,QAAQ,GAAwB,IAAI,GAAG,EAAE,EACzC,KAAqB;IAErB,KAAK,MAAM,SAAS,IAAI,wBAAwB,CAAC;QAC/C,QAAQ;QACR,SAAS;QACT,MAAM;QACN,OAAO;QACP,QAAQ;KACT,CAAC,EAAE,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,SAAS;QACzD,IACE,qBAAqB,CACnB,SAAS,EACT,SAAS,EACT,SAAS,CAAC,UAAU,EACpB,MAAM,CAAC,kBAAkB,EACzB,KAAK,CACN;YAED,SAAS;QACX,0EAA0E;QAC1E,uEAAuE;QACvE,sEAAsE;QACtE,IACE,iBAAiB,CACf,SAAS,EACT,SAAS,EACT,SAAS,CAAC,UAAU,EACpB,iBAAiB,CAAC,SAAS,CAAC,EAC5B,KAAK,CACN;YAED,SAAS;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD;;;;gEAIgE;AAChE,SAAS,4BAA4B,CAAC,IAUrC;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG,EAAU,CAAC;IACpD,OAAO,IAAI,CAAC,QAAQ;SACjB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;SAC7E,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,qBAAqB,CAClC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,SAAS,EACd,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAC9B,IAAI,CAAC,KAAK,CACX,CAAC;QACF,oEAAoE;QACpE,wEAAwE;QACxE,kEAAkE;QAClE,MAAM,KAAK,GAAsB,iBAAiB,CAChD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,SAAS,EACd,OAAO,CAAC,UAAU,EAClB,iBAAiB,CAAC,OAAO,CAAC,EAC1B,IAAI,CAAC,KAAK,CACX,CAAC;QACF,wEAAwE;QACxE,wEAAwE;QACxE,iEAAiE;QACjE,kBAAkB;QAClB,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,CAAC,QAAQ,IAAI,EAAE,EACnB,IAAI,CAAC,SAAS,EACd,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,KAAK,CACX,CAAC;QACF,MAAM,QAAQ,GACZ,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,EAAE,UAAU;YAC7C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;gBACtC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;gBAC7D,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;oBAChC,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,OAAO,CAAC,eAAe;wBACxE,CAAC,CAAC,0BAA0B;wBAC5B,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;4BAC9D,CAAC,CAAC,0BAA0B;4BAC5B,CAAC,CAAC,IAAI;gCACJ,CAAC,CAAC,qBAAqB;gCACvB,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;oCAC7C,CAAC,CAAC,WAAW;oCACb,CAAC,CAAC,MAAM;wCACN,CAAC,CAAC,mBAAmB;wCACrB,CAAC,CAAC,KAAK;4CACL,CAAC,CAAC,UAAU;4CACZ,CAAC,CAAC,cAAc,CAAC;QACrC,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,QAAQ;YACR,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;YAChE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,SAAS,IAAI,IAAI;SACzD,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAcrC;IACC,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,kCAAkC,EAAE;QAC5C,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI;QACjD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;QACzC,UAAU;KACX,CAAC,CAAC;IACH,2EAA2E;IAC3E,yEAAyE;IACzE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAepC;IACC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,iBAAiB,CAC7B,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,2BAA2B,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CACnE,CAAC;IACF,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,IAAI,CAAC,2BAA2B,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,IAAI,CAAC,cAAc;QAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAChF,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa;QACxC,CAAC,CAAE,uBAAiC;QACpC,CAAC,CAAE,iCAA2C,CAAC;IACjD,MAAM,IAAI,GAAG,mBAAmB,CAC9B,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,KAAK,CACX,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,qBAAqB,CAAC;YACpB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,QAAQ,EAAE,IAAI,CAAC,aAAa;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM;YACN,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE;QACjC,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,eAAe,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,IAAI,IAAI;QACxD,aAAa,EAAE,IAAI,CAAC,UAAU;QAC9B,MAAM;QACN,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,IAAI,IAAI;QACpD,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,IAAI,IAAI;KAC5C,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAsC5C;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC;IACrD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,sEAAsE;QACtE,0EAA0E;QAC1E,uEAAuE;QACvE,yEAAyE;QACzE,gEAAgE;QAChE,IAAI,OAAO,IAAI,QAAQ,CAAC,aAAa,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,OAAO;gBACL,aAAa,EAAE,MAAM,CAAC,MAAM,CAC1B,IAAI,KAAK,CACP,uBAAuB,OAAO,CAAC,UAAU,MAAM,IAAI,CAAC,SAAS,gBAAgB;oBAC3E,iDAAiD;oBACjD,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7E,EACD;oBACE,IAAI,EAAE,+BAA+B;oBACrC,QAAQ,EAAE,qBAAqB;oBAC/B,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,IAAI,IAAI;iBAC3C,CACF;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAC7B,OAAO,EACP,IAAI,CAAC,2BAA2B,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CACnE,CAAC;IACF,MAAM,QAAQ,GACZ,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,QAAQ;QACrD,qBAAqB,CAAC,QAAQ,CAAC;QAC/B,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,2BAA2B,KAAK,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACxD,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;IACrE,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CACP,mCAAmC,EACnC,8BAA8B,CAAC,KAAK,CAAC,EAAE,GAAG,eAAe,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,cAAc,EAAE,OAAO;QACvB,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe;QACf,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,YAAY;QAC3B,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,2EAA2E;QAC3E,0EAA0E;QAC1E,qEAAqE;QACrE,0EAA0E;QAC1E,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,UAAU,GAAG,4BAA4B,CAAC;YAC9C,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe;YACf,QAAQ,EAAE,IAAI,CAAC,aAAa;YAC5B,QAAQ,EAAE,IAAI,CAAC,YAAY;YAC3B,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,0EAA0E;QAC1E,0EAA0E;QAC1E,uDAAuD;QACvD,MAAM,YAAY,GAChB,OAAO,KAAK,IAAI;YACd,CAAC,CAAC,iBAAiB,CACf,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,SAAS,EACd,IAAI,EACJ,eAAe,EACf,IAAI,CAAC,IAAI,CAAC,UAAU,CACrB;YACH,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,YAAY,GAChB,YAAY;YACZ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpF,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,sEAAsE;QACtE,2EAA2E;QAC3E,0EAA0E;QAC1E,4DAA4D;QAC5D,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,eAAe,GAAG,YAAY,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI,CAAC;QAC1E,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,CAAC,eAAe,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QACnD,OAAO;YACL,aAAa,EAAE,uBAAuB,CAAC;gBACrC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;gBACtC,MAAM,EAAE,QAAQ,CAAC,aAAa;oBAC5B,CAAC,CAAC,uBAAuB;oBACzB,CAAC,CAAC,iCAAiC;gBACrC,UAAU;gBACV,YAAY;gBACZ,eAAe;aAChB,CAAC;SACH,CAAC;IACJ,CAAC;IACD,OAAO,oBAAoB,CAAC,KAAK,CAAC;QAChC,GAAG,IAAI,CAAC,IAAI;QACZ,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;QAC/B,kBAAkB,EAAE,QAAQ;QAC5B,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC"}

package/dist/credential-profiles.d.ts

@@ -1,6 +1,6 @@
-import type { AuthPreference, AuthSourceReadiness, CredentialProfile, CredentialProfileStatus, HarnessEvent, QuotaAbsence, QuotaSnapshot } from "@claudexor/schema";
-import { type ProfilePolicy } from "./credential-profile-rotation.js";
-export { nextEligibleProfile, planReactiveRotation, preflightCredentialProfile, preflightDefaultSubject, profileHeadroomBreach, rotateSpecOnTypedLimit, rotationRetryEligible, staticRotationCandidates, type ProfilePolicy, } from "./credential-profile-rotation.js";
+import type { AuthPreference, CredentialProfile, CredentialProfileStatus, HarnessEvent, QuotaAbsence, QuotaSnapshot } from "@claudexor/schema";
+export { effectiveLimitAction, limitSubjectRoute, nextEligibleProfile, planReactiveRotation, profileHeadroomBreach, rotateSpecOnTypedLimit, rotationRetryEligible, staticRotationCandidates, type ProfilePolicy, } from "./credential-profile-rotation.js";
+export { preflightDefaultSubject } from "./credential-preflight.js";
 /**
  * The ONE resolve owner for credential profiles (INV-135): explicit id →
  * durable registry entry for exactly this harness. Unknown, disabled, or
@@ -84,52 +84,6 @@ export declare function probeCredentialProfileStatus(profile: CredentialProfile,
 /** Same precedence used by run admission: the first explicit route wins;
  * `auto` means fall through rather than shadow a more general setting. */
 export declare function effectiveAuthPreference(...values: Array<AuthPreference | null | undefined>): AuthPreference;
-/** Fresh effective route for the unprofiled/default subject in Accounts. The
- * gateway status proves aggregate intent readiness; the schema auth estimator
- * then chooses the exact usable source under the same configured preference as
- * run admission. Returning the route (not merely a bool) keeps next_up labels
- * truthful when a native-capable harness falls back to an API key. */
-export declare function defaultCredentialRoute(status: {
-    status: "ok" | "degraded" | "unavailable";
-    routableIntents: readonly unknown[];
-    authSources: readonly AuthSourceReadiness[];
-}, requested: AuthPreference): "local_session" | "api_key" | null;
-/** The informational identity an UNPINNED run of a harness would route to next
- * (INV-135 `next_up`) — the same routing owner that admits and rotates runs,
- * exposed for the accounts projection so no surface re-derives it. Never gates
- * routing: explicit control is a per-run `--profile` / per-thread pin.
- *
- * Semantics mirror run-time admission: an unpinned run's default subject is the
- * unprofiled/default credential when it participates in the ladder; enabled profiles route
- * only by explicit pin or, under `rotate`, as the quota-failover target when the
- * default subject is already over headroom. A disabled default leaves an
- * unpinned run with nothing routable. */
-export type NextUpIdentity = {
-    kind: "profile";
-    profileId: string;
-} | {
-    kind: "native";
-    route: "local_session" | "api_key";
-} | {
-    kind: "none";
-    reason: string;
-};
-export declare function nextUpIdentity(args: {
-    registry: readonly CredentialProfile[];
-    harnessId: string;
-    policy: ProfilePolicy;
-    snapshots: readonly QuotaSnapshot[];
-    defaultEnabled: boolean;
-    /** Fresh doctor/admission truth for the unprofiled default subject. */
-    defaultReady: boolean;
-    /** Effective source route of that default subject under configured auth preference. */
-    defaultRoute: "local_session" | "api_key" | null;
-    /** Profiles admitted by their fresh profile doctor probe in this snapshot. */
-    readyProfileIds: ReadonlySet<string>;
-    /** Known configured model, null for the native default, or omitted only when
-     * this projection has no model context and must stay conservative. */
-    model?: string | null;
-}): NextUpIdentity;
 /**
  * INV-135 at the engine boundary: a cached vendor session resumes ONLY under
  * exactly the profile it was recorded with (null-default equality included) —

package/dist/credential-profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-profiles.d.ts","sourceRoot":"","sources":["../src/credential-profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,EACZ,YAAY,EACZ,aAAa,EACd,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,aAAa,GACnB,MAAM,kCAAkC,CAAC;AAE1C;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,iBAAiB,CASnB;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACzE;;8EAE0E;IAC1E,KAAK,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;CACxC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgBzB;AAED;+EAC+E;AAC/E,MAAM,MAAM,2BAA2B,GACnC;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE;IAAE,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,EACjF,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,2BAA2B,GAAG,IAAI,CAsBpC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,uBAAuB,EAC/B,WAAW,EAAE,2BAA2B,GAAG,IAAI,GAC9C,uBAAuB,CAiBzB;AAED;sEACsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;CACnC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,uBAAuB,EAC/B,KAAK,EAAE,uBAAuB,GAAG,IAAI,GAAG,SAAS,GAChD,uBAAuB,CAMzB;AAED,+EAA+E;AAC/E,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,EACnD,MAAM,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACrD,OAAO,CAKT;AAED;+EAC+E;AAC/E,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,iBAAiB,EAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,uBAAuB,CAAC,GACvE,OAAO,CAAC,uBAAuB,CAAC,CAkClC;AAED;0EAC0E;AAC1E,wBAAgB,uBAAuB,CACrC,GAAG,MAAM,EAAE,KAAK,CAAC,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC,GAClD,cAAc,CAIhB;AAED;;;;sEAIsE;AACtE,wBAAgB,sBAAsB,CACpC,MAAM,EAAE;IACN,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,aAAa,CAAC;IAC1C,eAAe,EAAE,SAAS,OAAO,EAAE,CAAC;IACpC,WAAW,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC7C,EACD,SAAS,EAAE,cAAc,GACxB,eAAe,GAAG,SAAS,GAAG,IAAI,CAGpC;AAED;;;;;;;;;yCASyC;AACzC,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,eAAe,GAAG,SAAS,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,cAAc,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,YAAY,EAAE,OAAO,CAAC;IACtB,uFAAuF;IACvF,YAAY,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAAC;IACjD,8EAA8E;IAC9E,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC;0EACsE;IACtE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GAAG,cAAc,CAwDjB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,SAAS,EACnE,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAChC,MAAM,GAAG,IAAI,CAGf;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EACD;IACE,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,EAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,KACtB,IAAI,CAAC;CACX,GACD,SAAS,EACb,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,YAAY,GACf,IAAI,CAeN"}
+{"version":3,"file":"credential-profiles.d.ts","sourceRoot":"","sources":["../src/credential-profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,EACZ,YAAY,EACZ,aAAa,EACd,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,aAAa,GACnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,iBAAiB,CASnB;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACzE;;8EAE0E;IAC1E,KAAK,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;CACxC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgBzB;AAED;+EAC+E;AAC/E,MAAM,MAAM,2BAA2B,GACnC;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE;IAAE,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,EACjF,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,2BAA2B,GAAG,IAAI,CAsBpC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,uBAAuB,EAC/B,WAAW,EAAE,2BAA2B,GAAG,IAAI,GAC9C,uBAAuB,CAiBzB;AAED;sEACsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;CACnC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,uBAAuB,EAC/B,KAAK,EAAE,uBAAuB,GAAG,IAAI,GAAG,SAAS,GAChD,uBAAuB,CAMzB;AAED,+EAA+E;AAC/E,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,EACnD,MAAM,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACrD,OAAO,CAKT;AAED;+EAC+E;AAC/E,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,iBAAiB,EAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,uBAAuB,CAAC,GACvE,OAAO,CAAC,uBAAuB,CAAC,CAkClC;AAED;0EAC0E;AAC1E,wBAAgB,uBAAuB,CACrC,GAAG,MAAM,EAAE,KAAK,CAAC,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC,GAClD,cAAc,CAIhB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,SAAS,EACnE,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAChC,MAAM,GAAG,IAAI,CAGf;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EACD;IACE,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,EAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,KACtB,IAAI,CAAC;CACX,GACD,SAAS,EACb,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,YAAY,GACf,IAAI,CAeN"}

package/dist/credential-profiles.js

@@ -1,8 +1,7 @@
 import { CredentialProfileStatus as CredentialProfileStatusSchema, quotaSourceTraits, } from "@claudexor/schema";
 import { redactSecrets } from "@claudexor/util";
-import { estimateEffectiveAuthRoute } from "@claudexor/schema";
-import { nextEligibleProfile, profileHeadroomBreach, } from "./credential-profile-rotation.js";
-export { nextEligibleProfile, planReactiveRotation, preflightCredentialProfile, preflightDefaultSubject, profileHeadroomBreach, rotateSpecOnTypedLimit, rotationRetryEligible, staticRotationCandidates, } from "./credential-profile-rotation.js";
+export { effectiveLimitAction, limitSubjectRoute, nextEligibleProfile, planReactiveRotation, profileHeadroomBreach, rotateSpecOnTypedLimit, rotationRetryEligible, staticRotationCandidates, } from "./credential-profile-rotation.js";
+export { preflightDefaultSubject } from "./credential-preflight.js";
 /**
  * The ONE resolve owner for credential profiles (INV-135): explicit id →
  * durable registry entry for exactly this harness. Unknown, disabled, or
@@ -159,49 +158,6 @@ export async function probeCredentialProfileStatus(profile, probe) {
 export function effectiveAuthPreference(...values) {
     return (values.find((value) => value !== undefined && value !== null && value !== "auto") ?? "auto");
 }
-/** Fresh effective route for the unprofiled/default subject in Accounts. The
- * gateway status proves aggregate intent readiness; the schema auth estimator
- * then chooses the exact usable source under the same configured preference as
- * run admission. Returning the route (not merely a bool) keeps next_up labels
- * truthful when a native-capable harness falls back to an API key. */
-export function defaultCredentialRoute(status, requested) {
-    if (status.status !== "ok" || status.routableIntents.length === 0)
-        return null;
-    return estimateEffectiveAuthRoute(requested, status.authSources);
-}
-export function nextUpIdentity(args) {
-    const { registry, harnessId, policy, snapshots, defaultEnabled, defaultReady, defaultRoute, readyProfileIds, model, } = args;
-    if (!defaultEnabled) {
-        return {
-            kind: "none",
-            reason: "the default credential is disabled; enable it or pin an account per-run (--profile)",
-        };
-    }
-    if (!defaultReady) {
-        return {
-            kind: "none",
-            reason: "the default credential is not ready; refresh Accounts or run `claudexor doctor`",
-        };
-    }
-    // Under `rotate`, a native/default subject already over its headroom bound
-    // fails over to the next eligible enabled profile BEFORE spawn — that is who
-    // an unpinned run routes to next. `ask`/`fail` proceed on the native default.
-    if (policy.limit_action === "rotate" && defaultRoute === "local_session") {
-        const breach = profileHeadroomBreach(snapshots, harnessId, null, policy.headroom_threshold, model);
-        if (breach) {
-            const next = nextEligibleProfile(registry, harnessId, policy, null, snapshots, readyProfileIds, new Set(), model);
-            if (next)
-                return { kind: "profile", profileId: next.profile_id };
-        }
-    }
-    if (!defaultRoute) {
-        return {
-            kind: "none",
-            reason: "the default credential route is unknown; refresh Accounts or run `claudexor doctor`",
-        };
-    }
-    return { kind: "native", route: defaultRoute };
-}
 /**
  * INV-135 at the engine boundary: a cached vendor session resumes ONLY under
  * exactly the profile it was recorded with (null-default equality included) —