@miller-tech/uap 2.1.7 → 2.11.0

package/dist/capacity/policy.js

@@ -0,0 +1,133 @@
+/**
+ * Capacity policy as code (uplift 0.5).
+ *
+ * Generalizes the 2026-09-18 llama.cpp OOM-fix discipline: every UAP-managed
+ * service declares its resource budget, its headroom requirement, and what
+ * GREEN/RED/DARK mean for it. `uap doctor` probes each declared service and
+ * reports violations. The policy is data (config/capacity-policy.json); the
+ * judgment is deterministic code; fail-open posture is per-probe (a missing
+ * systemctl/nvidia-smi yields UNKNOWN, never a fabricated GREEN).
+ */
+export class PolicyError extends Error {
+}
+/** systemd unit names: strict charset, never a leading dash. A name like
+ * "--host=x.service" ends in .service but is parsed by systemctl as a FLAG —
+ * --host would open an SSH connection to an attacker-chosen host (CWE-88).
+ * The probe also passes `--` before the unit; validation is the first wall. */
+const UNIT_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9:_.@-]*\.service$/;
+/** Parse + validate a policy document. Malformed input throws loudly with
+ * the offending path — a capacity policy that half-loads is worse than none. */
+export function parsePolicy(text, source = 'policy') {
+    let data;
+    try {
+        data = JSON.parse(text);
+    }
+    catch (err) {
+        throw new PolicyError(`${source}: invalid JSON — ${err.message}`);
+    }
+    const policy = data;
+    if (policy?.version !== 1)
+        throw new PolicyError(`${source}: "version": 1 required`);
+    if (!Array.isArray(policy.services) || policy.services.length === 0) {
+        throw new PolicyError(`${source}: "services" must be a non-empty array`);
+    }
+    const seen = new Set();
+    for (const [i, svc] of policy.services.entries()) {
+        const where = `${source} services[${i}]`;
+        if (!svc || typeof svc !== 'object')
+            throw new PolicyError(`${where}: must be an object`);
+        if (typeof svc.name !== 'string' || !svc.name.trim()) {
+            throw new PolicyError(`${where}: "name" is required`);
+        }
+        if (seen.has(svc.name))
+            throw new PolicyError(`${where}: duplicate service "${svc.name}"`);
+        seen.add(svc.name);
+        if (typeof svc.systemd?.unit !== 'string' || !UNIT_NAME_RE.test(svc.systemd.unit)) {
+            throw new PolicyError(`${where}: systemd.unit must match ${UNIT_NAME_RE} (no flags, whitespace, or leading dashes)`);
+        }
+        if (svc.systemd.scope !== 'user' && svc.systemd.scope !== 'system') {
+            throw new PolicyError(`${where}: systemd.scope must be "user" or "system"`);
+        }
+        for (const [section, keys] of [
+            ['budget', ['vramMiB', 'rssMiB']],
+            ['headroom', ['gpuMinFreeMiB']],
+        ]) {
+            const block = svc[section];
+            for (const key of keys) {
+                const v = block?.[key];
+                if (v !== undefined && (typeof v !== 'number' || !Number.isFinite(v) || v < 0)) {
+                    throw new PolicyError(`${where}: ${section}.${key} must be a non-negative number`);
+                }
+            }
+        }
+        const rb = svc.restartBudget;
+        if (rb !== undefined) {
+            for (const key of ['knownRestarts', 'allowedNew']) {
+                const v = rb[key];
+                if (typeof v !== 'number' || !Number.isInteger(v) || v < 0) {
+                    throw new PolicyError(`${where}: restartBudget.${key} must be a non-negative integer`);
+                }
+            }
+        }
+    }
+    return policy;
+}
+/** Pure health computation over a probed state — the deterministic core,
+ * fully testable without systemd or a GPU. */
+export function computeHealth(svc, probed, probeAvailable) {
+    const reasons = [];
+    if (!probeAvailable.systemd) {
+        return { health: 'UNKNOWN', reasons: ['systemctl unavailable — cannot probe the unit'] };
+    }
+    const state = probed.activeState ?? 'unknown';
+    // DARK: not serving. The discipline from the OOM fix: a service that is
+    // down or crash-looping is not "degraded", it is absent.
+    if (state === 'failed' || state === 'inactive' || state === 'unknown') {
+        return { health: 'DARK', reasons: [`unit ${svc.systemd.unit} is ${state} — not serving`] };
+    }
+    // RED: activating (esp. subState=auto-restart) means the unit is NOT yet
+    // serving — a Restart=always crash loop sits exactly here. Down-looping is
+    // never GREEN, with or without a declared restartBudget.
+    if (state === 'activating' || probed.subState === 'auto-restart') {
+        return {
+            health: 'RED',
+            reasons: [`unit ${svc.systemd.unit} is ${state}/${probed.subState ?? '?'} — not yet serving (crash-loop candidate)`],
+        };
+    }
+    // RED: serving, but a budget is violated.
+    const rb = svc.restartBudget;
+    if (rb && probed.nRestarts !== undefined) {
+        const allowed = rb.knownRestarts + rb.allowedNew;
+        if (probed.nRestarts > allowed) {
+            reasons.push(`NRestarts=${probed.nRestarts} exceeds budget ${allowed} ` +
+                `(${rb.knownRestarts} known + ${rb.allowedNew} new) — new crashes since the baseline`);
+        }
+    }
+    if (svc.headroom?.gpuMinFreeMiB !== undefined) {
+        if (!probeAvailable.gpu || probed.gpuFreeMiB === undefined) {
+            reasons.push('gpu headroom declared but nvidia-smi unavailable — headroom unverified');
+        }
+        else if (probed.gpuFreeMiB < svc.headroom.gpuMinFreeMiB) {
+            reasons.push(`GPU free ${probed.gpuFreeMiB} MiB below required headroom ${svc.headroom.gpuMinFreeMiB} MiB — OOM territory`);
+        }
+    }
+    // RSS budget: enforced against the unit's MemoryCurrent. Doctrine: a
+    // declared budget that cannot be verified is not healthy (RED), matching
+    // the unverified-headroom rule. budget.vramMiB is NOT compared against the
+    // process's total GPU footprint — it declares the service's own configured
+    // allocator limit (e.g. --vbr-vram), which the server enforces internally;
+    // the host-side invariant the doctor owns is gpuMinFreeMiB headroom.
+    if (svc.budget?.rssMiB !== undefined) {
+        if (probed.memoryCurrentMiB === undefined) {
+            reasons.push('rssMiB budget declared but MemoryCurrent unavailable — budget unverified');
+        }
+        else if (probed.memoryCurrentMiB > svc.budget.rssMiB) {
+            reasons.push(`RSS ${probed.memoryCurrentMiB} MiB exceeds declared budget ${svc.budget.rssMiB} MiB`);
+        }
+    }
+    if (reasons.length > 0)
+        return { health: 'RED', reasons };
+    reasons.push(`active (${probed.subState ?? 'running'}), all budgets inside policy`);
+    return { health: 'GREEN', reasons };
+}
+//# sourceMappingURL=policy.js.map

package/dist/capacity/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/capacity/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAmDH,MAAM,OAAO,WAAY,SAAQ,KAAK;CAAG;AAEzC;;;+EAG+E;AAC/E,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAE/D;gFACgF;AAChF,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAM,GAAG,QAAQ;IACzD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,oBAAqB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,IAAI,MAAM,EAAE,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,yBAAyB,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,wCAAwC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC;QACzC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;QAC1F,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,wBAAwB,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3F,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,WAAW,CACnB,GAAG,KAAK,6BAA6B,YAAY,4CAA4C,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI;YAC5B,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACjC,CAAC,UAAU,EAAE,CAAC,eAAe,CAAC,CAAC;SACvB,EAAE,CAAC;YACX,MAAM,KAAK,GAAI,GAAsE,CAAC,OAAO,CAAC,CAAC;YAC/F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;gBACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC/E,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,KAAK,OAAO,IAAI,GAAG,gCAAgC,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC;QAC7B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,YAAY,CAAU,EAAE,CAAC;gBAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;gBAClB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3D,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,mBAAmB,GAAG,iCAAiC,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAwB,CAAC;AAClC,CAAC;AAED;8CAC8C;AAC9C,MAAM,UAAU,aAAa,CAC3B,GAAkB,EAClB,MAA+B,EAC/B,cAAkD;IAElD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,+CAA+C,CAAC,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC;IAE9C,wEAAwE;IACxE,yDAAyD;IACzD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,gBAAgB,CAAC,EAAE,CAAC;IAC7F,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,yDAAyD;IACzD,IAAI,KAAK,KAAK,YAAY,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACjE,OAAO;YACL,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,GAAG,2CAA2C,CAAC;SACrH,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC;IAC7B,IAAI,EAAE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC;QACjD,IAAI,MAAM,CAAC,SAAS,GAAG,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CACV,aAAa,MAAM,CAAC,SAAS,mBAAmB,OAAO,GAAG;gBACxD,IAAI,EAAE,CAAC,aAAa,YAAY,EAAE,CAAC,UAAU,wCAAwC,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QACzF,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC1D,OAAO,CAAC,IAAI,CACV,YAAY,MAAM,CAAC,UAAU,gCAAgC,GAAG,CAAC,QAAQ,CAAC,aAAa,sBAAsB,CAC9G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;QAC3F,CAAC;aAAM,IAAI,MAAM,CAAC,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CACV,OAAO,MAAM,CAAC,gBAAgB,gCAAgC,GAAG,CAAC,MAAM,CAAC,MAAM,MAAM,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAE1D,OAAO,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,QAAQ,IAAI,SAAS,8BAA8B,CAAC,CAAC;IACpF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC"}

package/dist/capacity/probe.d.ts

@@ -0,0 +1,23 @@
+import { type CapacityPolicy, type Health, type ServiceReport } from './policy.js';
+export type ProbeState = ServiceReport['probed'];
+/** systemctl show <unit> for the declared scope. Undefined fields when the
+ * unit or systemctl is missing. `--` terminates option parsing so even a
+ * validated unit name is never reinterpreted as a flag. */
+export declare function probeSystemd(unit: string, scope: 'user' | 'system'): ProbeState | null;
+/** Free VRAM (MiB) on GPU 0 via nvidia-smi; null when no GPU/tool. */
+export declare function probeGpuFreeMiB(): number | null;
+/** Policy resolution: explicit path, project config/, then user config. */
+export declare function loadPolicy(projectDir: string, explicitPath?: string): {
+    policy: CapacityPolicy;
+    path: string;
+};
+export interface DoctorDeps {
+    probeSystemd: typeof probeSystemd;
+    probeGpuFreeMiB: typeof probeGpuFreeMiB;
+}
+/** Probe every declared service and compute its health. Deps are injectable
+ * so the matrix is testable without a host. */
+export declare function runDoctor(policy: CapacityPolicy, deps?: DoctorDeps): ServiceReport[];
+/** Worst-health rollup for exit codes: DARK > RED > UNKNOWN > GREEN. */
+export declare function worstHealth(reports: ServiceReport[]): Health;
+//# sourceMappingURL=probe.d.ts.map

package/dist/capacity/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../src/capacity/probe.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,MAAM,EACX,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;AAIjD;;2DAE2D;AAC3D,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,IAAI,CA6BtF;AAED,sEAAsE;AACtE,wBAAgB,eAAe,IAAI,MAAM,GAAG,IAAI,CAa/C;AAED,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAgB9G;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,eAAe,EAAE,OAAO,eAAe,CAAC;CACzC;AAED;+CAC+C;AAC/C,wBAAgB,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,GAAE,UAA8C,GAAG,aAAa,EAAE,CAYvH;AAED,wEAAwE;AACxE,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,CAK5D"}

package/dist/capacity/probe.js

@@ -0,0 +1,93 @@
+/**
+ * Host probes for the capacity doctor: systemd unit state and GPU headroom.
+ * execFileSync with argument arrays only (no shell); every probe fails soft
+ * to an unavailable flag — the health computation decides what that means.
+ */
+import { execFileSync } from 'child_process';
+import { existsSync, readFileSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+import { parsePolicy, computeHealth, } from './policy.js';
+const PROBE_TIMEOUT_MS = 5000; // a wedged driver/D-Bus must fail soft, not hang
+/** systemctl show <unit> for the declared scope. Undefined fields when the
+ * unit or systemctl is missing. `--` terminates option parsing so even a
+ * validated unit name is never reinterpreted as a flag. */
+export function probeSystemd(unit, scope) {
+    // Flags BEFORE `--`, unit AFTER it: `show unit -p ...` would make `-p` a
+    // unit name (systemctl then reports the real unit as inactive — false DARK).
+    const args = scope === 'user' ? ['--user', 'show'] : ['show'];
+    try {
+        const out = execFileSync('systemctl', [...args, '-p', 'ActiveState,SubState,NRestarts,MainPID,MemoryCurrent', '--', unit], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'], timeout: PROBE_TIMEOUT_MS });
+        const props = Object.fromEntries(out.split('\n').filter(Boolean).map((l) => {
+            const eq = l.indexOf('=');
+            return [l.slice(0, eq), l.slice(eq + 1)];
+        }));
+        const restarts = Number(props.NRestarts);
+        const pid = Number(props.MainPID);
+        const mem = Number(props.MemoryCurrent); // bytes; "[not set]" → NaN
+        return {
+            activeState: props.ActiveState || 'unknown',
+            subState: props.SubState || undefined,
+            nRestarts: Number.isFinite(restarts) && props.NRestarts ? restarts : undefined,
+            mainPid: Number.isFinite(pid) && pid > 0 ? pid : undefined,
+            memoryCurrentMiB: Number.isFinite(mem) && mem > 0 ? Math.round(mem / 1048576) : undefined,
+        };
+    }
+    catch {
+        return null; // no systemctl / timeout (container, macOS) — UNKNOWN, not GREEN
+    }
+}
+/** Free VRAM (MiB) on GPU 0 via nvidia-smi; null when no GPU/tool. */
+export function probeGpuFreeMiB() {
+    try {
+        const out = execFileSync('nvidia-smi', ['--query-gpu=memory.free', '--format=csv,noheader,nounits'], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'], timeout: PROBE_TIMEOUT_MS });
+        const first = out.split('\n')[0]?.trim();
+        const n = Number(first);
+        return Number.isFinite(n) ? n : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Policy resolution: explicit path, project config/, then user config. */
+export function loadPolicy(projectDir, explicitPath) {
+    const candidates = explicitPath
+        ? [explicitPath]
+        : [
+            join(projectDir, 'config', 'capacity-policy.json'),
+            join(homedir(), '.config', 'uap', 'capacity-policy.json'),
+        ];
+    for (const path of candidates) {
+        if (existsSync(path)) {
+            return { policy: parsePolicy(readFileSync(path, 'utf-8'), path), path };
+        }
+    }
+    throw new Error(`no capacity policy found (looked: ${candidates.join(', ')}) — ` +
+        'declare one at config/capacity-policy.json; see docs/guides/CAPACITY_POLICY.md');
+}
+/** Probe every declared service and compute its health. Deps are injectable
+ * so the matrix is testable without a host. */
+export function runDoctor(policy, deps = { probeSystemd, probeGpuFreeMiB }) {
+    // One GPU probe per run, shared across services (nvidia-smi is not cheap).
+    const gpuFree = deps.probeGpuFreeMiB();
+    return policy.services.map((svc) => {
+        const sys = deps.probeSystemd(svc.systemd.unit, svc.systemd.scope);
+        const probed = { ...(sys ?? {}), gpuFreeMiB: gpuFree ?? undefined };
+        const { health, reasons } = computeHealth(svc, probed, {
+            systemd: sys !== null,
+            gpu: gpuFree !== null,
+        });
+        return { name: svc.name, health, reasons, probed };
+    });
+}
+/** Worst-health rollup for exit codes: DARK > RED > UNKNOWN > GREEN. */
+export function worstHealth(reports) {
+    if (reports.some((r) => r.health === 'DARK'))
+        return 'DARK';
+    if (reports.some((r) => r.health === 'RED'))
+        return 'RED';
+    if (reports.some((r) => r.health === 'UNKNOWN'))
+        return 'UNKNOWN';
+    return 'GREEN';
+}
+//# sourceMappingURL=probe.js.map

package/dist/capacity/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/capacity/probe.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,aAAa,GAId,MAAM,aAAa,CAAC;AAIrB,MAAM,gBAAgB,GAAG,IAAI,CAAC,CAAC,iDAAiD;AAEhF;;2DAE2D;AAC3D,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,KAAwB;IACjE,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,IAAI,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CACtB,WAAW,EACX,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,sDAAsD,EAAE,IAAI,EAAE,IAAI,CAAC,EACnF,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAClF,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACxC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CACH,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,2BAA2B;QACpE,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS;YAC3C,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS;YACrC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YAC9E,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YAC1D,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC1F,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,iEAAiE;IAChF,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CACtB,YAAY,EACZ,CAAC,yBAAyB,EAAE,+BAA+B,CAAC,EAC5D,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAClF,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,UAAkB,EAAE,YAAqB;IAClE,MAAM,UAAU,GAAG,YAAY;QAC7B,CAAC,CAAC,CAAC,YAAY,CAAC;QAChB,CAAC,CAAC;YACE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,sBAAsB,CAAC;YAClD,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,sBAAsB,CAAC;SAC1D,CAAC;IACN,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,qCAAqC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;QAC9D,gFAAgF,CACnF,CAAC;AACJ,CAAC;AAOD;+CAC+C;AAC/C,MAAM,UAAU,SAAS,CAAC,MAAsB,EAAE,OAAmB,EAAE,YAAY,EAAE,eAAe,EAAE;IACpG,2EAA2E;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,MAAM,GAAe,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC;QAChF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE;YACrD,OAAO,EAAE,GAAG,KAAK,IAAI;YACrB,GAAG,EAAE,OAAO,KAAK,IAAI;SACtB,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW,CAAC,OAAwB;IAClD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/classify/baseline.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Baseline System-1 backend: deterministic, CPU-only, dependency-free.
+ *
+ * Token-density scoring against per-question seed vocabularies, squashed
+ * through a logistic curve. It is deliberately simple: its job is to be the
+ * always-available local floor (airgap-pure, <50ms p95 trivially) and the
+ * shadow-mode reference that a trained embedding head must beat before
+ * promotion. Seeded from UAP's own incident vocabulary (the 2026-09-18 OOM
+ * timeline, gate outcomes, escalation telemetry language).
+ *
+ * v1 scope: the baseline answers ONLY the built-in questions (it keys its
+ * vocabulary off the question name). A custom question gets a ClassifyError,
+ * not a silently mis-scoped answer — the trained head is the generalizer.
+ */
+import { AssessResult, ClassifierBackend, Question } from './types.js';
+export declare class BaselineBackend implements ClassifierBackend {
+    readonly name = "baseline-tfidf-v1";
+    assess(state: string, questions: Question[]): AssessResult;
+    private answer;
+    private noul;
+    private score;
+    private choice;
+}
+//# sourceMappingURL=baseline.d.ts.map

package/dist/classify/baseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.d.ts","sourceRoot":"","sources":["../../src/classify/baseline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAEL,YAAY,EACZ,iBAAiB,EAGjB,QAAQ,EACT,MAAM,YAAY,CAAC;AA+CpB,qBAAa,eAAgB,YAAW,iBAAiB;IACvD,QAAQ,CAAC,IAAI,uBAAuB;IAEpC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,YAAY;IAS1D,OAAO,CAAC,MAAM;IAmBd,OAAO,CAAC,IAAI;IAcZ,OAAO,CAAC,KAAK;IAUb,OAAO,CAAC,MAAM;CAmCf"}

package/dist/classify/baseline.js

@@ -0,0 +1,140 @@
+/**
+ * Baseline System-1 backend: deterministic, CPU-only, dependency-free.
+ *
+ * Token-density scoring against per-question seed vocabularies, squashed
+ * through a logistic curve. It is deliberately simple: its job is to be the
+ * always-available local floor (airgap-pure, <50ms p95 trivially) and the
+ * shadow-mode reference that a trained embedding head must beat before
+ * promotion. Seeded from UAP's own incident vocabulary (the 2026-09-18 OOM
+ * timeline, gate outcomes, escalation telemetry language).
+ *
+ * v1 scope: the baseline answers ONLY the built-in questions (it keys its
+ * vocabulary off the question name). A custom question gets a ClassifyError,
+ * not a silently mis-scoped answer — the trained head is the generalizer.
+ */
+import { ClassifyError, BUILTIN_QUESTIONS, } from './types.js';
+/** Tokens that mark elevated escalation risk in a state description. */
+const ESCALATION_TOKENS = [
+    'error', 'failed', 'failure', 'crash', 'oom', 'sigabrt', 'killed', 'stuck',
+    'loop', 'looping', 'restarting', 'timeout', 'timed', 'denied', 'refused',
+    'corrupt', 'unrecoverable', 'exception', 'fatal', 'panic', 'deadlock',
+    'blocked', 'cannot', 'unable', 'unknown', 'missing', 'broken', 'regression',
+    'conflict', 'diverged', 'mismatch', 'unexpected', 'anomaly', 'leak',
+];
+/** Tokens that mark destructive/irreversible operations (task-risk score). */
+const DESTRUCTIVE_TOKENS = [
+    'delete', 'remove', 'rm', 'drop', 'truncate', 'destroy', 'wipe', 'purge',
+    'overwrite', 'reset', 'force', 'push', 'deploy', 'migrate', 'production',
+    'secrets', 'credentials', 'rotate', 'revoke', 'sudo', 'chmod', 'chown',
+];
+const STOP = new Set([
+    'the', 'a', 'an', 'and', 'or', 'of', 'to', 'in', 'on', 'for', 'with',
+    'is', 'are', 'was', 'were', 'be', 'been', 'it', 'this', 'that', 'at',
+    'by', 'as', 'from', 'not', 'no', 'we', 'i', 'you', 'they',
+]);
+function tokenize(text) {
+    return text
+        .toLowerCase()
+        .split(/[^a-z0-9]+/)
+        .filter((t) => t.length > 1 && !STOP.has(t));
+}
+/** Sigmoid around a calibrated midpoint. */
+function sigmoid(x) {
+    return 1 / (1 + Math.exp(-x));
+}
+/** hits / sqrt(length): sub-linear length normalization — long clean prose
+ * dilutes a few keyword hits, but a wall of repeated keywords still
+ * saturates (numerator grows linearly). Saturation resistance, if wanted,
+ * must come from the calibrated head, not from this ratio. */
+function hitRatio(tokens, vocab) {
+    if (tokens.length === 0)
+        return 0;
+    const set = new Set(vocab);
+    const hits = tokens.filter((t) => set.has(t)).length;
+    return hits / Math.sqrt(tokens.length);
+}
+export class BaselineBackend {
+    name = 'baseline-tfidf-v1';
+    assess(state, questions) {
+        const tokens = tokenize(state);
+        const out = {};
+        for (const q of questions) {
+            out[q.name] = this.answer(q, tokens);
+        }
+        return out;
+    }
+    answer(q, tokens) {
+        // Question-blind scoring would silently answer a custom noul question
+        // with the escalation vocabulary — refuse instead (the trained head is
+        // the generalizer; see module header).
+        if (!BUILTIN_QUESTIONS.some((b) => b.name === q.name)) {
+            throw new ClassifyError(`baseline backend answers only the built-in questions; got "${q.name}"`);
+        }
+        switch (q.kind) {
+            case 'noul':
+                return this.noul(tokens);
+            case 'score':
+                return this.score(tokens);
+            case 'choice':
+                return this.choice(q, tokens);
+        }
+    }
+    noul(tokens) {
+        const r = hitRatio(tokens, ESCALATION_TOKENS);
+        // Midpoint ~0.35 ratio → p 0.5; steep enough to separate clean states.
+        const probability = sigmoid((r - 0.35) * 8);
+        // Confidence scales with evidence mass; empty states are low-confidence.
+        const confidence = Math.min(1, tokens.length / 40) * (0.5 + Math.abs(probability - 0.5));
+        return {
+            value: probability >= 0.5,
+            probability,
+            confidence,
+            backend: this.name,
+        };
+    }
+    score(tokens) {
+        const r = hitRatio(tokens, DESTRUCTIVE_TOKENS);
+        // Map 0..~0.8 ratio onto 1..5 with a soft curve.
+        const raw = 1 + 4 * Math.min(1, r / 0.8);
+        const value = Math.round(raw);
+        const probability = 1 - Math.min(1, Math.abs(raw - value) * 2);
+        const confidence = Math.min(1, tokens.length / 40);
+        return { value, probability, confidence, backend: this.name };
+    }
+    choice(q, tokens) {
+        const options = q.options ?? [];
+        if (options.length === 0) {
+            return { value: '', probability: 0, confidence: 0, backend: this.name };
+        }
+        // Deterministic scoring: 'escalate'/'stop' track escalation + destructive
+        // density, 'verify-first' tracks moderate signals, 'proceed' is the rest.
+        const esc = hitRatio(tokens, ESCALATION_TOKENS);
+        const dst = hitRatio(tokens, DESTRUCTIVE_TOKENS);
+        const scores = {
+            escalate: 2 * esc + dst,
+            // stop must beat escalate on pure-destructive-no-incident states, so
+            // it gets an escalation-independent margin (escalate >= dst always).
+            stop: dst > 0.6 && esc < 0.2 ? 2 * dst + 0.1 : 0,
+            'verify-first': esc > 0.1 && esc < 0.5 ? 0.4 : 0.1,
+            proceed: Math.max(0.05, 0.5 - esc - dst),
+        };
+        let best = options[0];
+        let bestScore = -Infinity;
+        let total = 0;
+        for (const opt of options) {
+            const s = scores[opt] ?? 0.05;
+            total += s;
+            if (s > bestScore) {
+                bestScore = s;
+                best = opt;
+            }
+        }
+        return {
+            value: best,
+            probability: total > 0 ? bestScore / total : 1 / options.length,
+            confidence: Math.min(1, tokens.length / 40),
+            backend: this.name,
+        };
+    }
+}
+//# sourceMappingURL=baseline.js.map

package/dist/classify/baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.js","sourceRoot":"","sources":["../../src/classify/baseline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAIL,aAAa,EACb,iBAAiB,GAElB,MAAM,YAAY,CAAC;AAEpB,wEAAwE;AACxE,MAAM,iBAAiB,GAAG;IACxB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO;IAC1E,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS;IACxE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU;IACrE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY;IAC3E,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM;CACpE,CAAC;AAEF,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG;IACzB,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO;IACxE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY;IACxE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;CACvE,CAAC;AAEF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC;IACnB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM;IACpE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI;IACpE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM;CAC1D,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI;SACR,WAAW,EAAE;SACb,KAAK,CAAC,YAAY,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,4CAA4C;AAC5C,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED;;;8DAG8D;AAC9D,SAAS,QAAQ,CAAC,MAAgB,EAAE,KAAe;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,mBAAmB,CAAC;IAEpC,MAAM,CAAC,KAAa,EAAE,SAAqB;QACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAiB,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,MAAM,CAAC,CAAW,EAAE,MAAgB;QAC1C,sEAAsE;QACtE,uEAAuE;QACvE,uCAAuC;QACvC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,aAAa,CACrB,8DAA8D,CAAC,CAAC,IAAI,GAAG,CACxE,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,MAAgB;QAC3B,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC9C,uEAAuE;QACvE,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,yEAAyE;QACzE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC;QACzF,OAAO;YACL,KAAK,EAAE,WAAW,IAAI,GAAG;YACzB,WAAW;YACX,UAAU;YACV,OAAO,EAAE,IAAI,CAAC,IAAI;SACnB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAgB;QAC5B,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC/C,iDAAiD;QACjD,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAChE,CAAC;IAEO,MAAM,CAAC,CAAW,EAAE,MAAgB;QAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1E,CAAC;QACD,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACjD,MAAM,MAAM,GAA2B;YACrC,QAAQ,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG;YACvB,qEAAqE;YACrE,qEAAqE;YACrE,IAAI,EAAE,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YAChD,cAAc,EAAE,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAClD,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;SACzC,CAAC;QACF,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,SAAS,GAAG,CAAC,QAAQ,CAAC;QAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;YAC9B,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;gBAClB,SAAS,GAAG,CAAC,CAAC;gBACd,IAAI,GAAG,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM;YAC/D,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,CAAC,IAAI;SACnB,CAAC;IACJ,CAAC;CACF"}

package/dist/classify/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Classifier entry point: backend selection + threshold application.
+ *
+ * Backend chain (first available wins):
+ *   1. trained head at ~/.config/uap/classifier-head.json (future; §6 v2)
+ *   2. baseline-tfidf-v1 (always available, airgap-pure)
+ * Thresholds come from reviewed policy config (config/classify-thresholds.json
+ * in the project, or ~/.config/uap/), never from model output.
+ */
+import { AssessResult, ClassifierBackend, Question, QuestionThresholds } from './types.js';
+export * from './types.js';
+export { BaselineBackend } from './baseline.js';
+export { recordShadow, shadowLogPath, type ShadowRecord } from './shadow.js';
+export declare function defaultBackend(): ClassifierBackend;
+export declare function thresholdPaths(projectDir: string): string[];
+export declare function loadThresholds(projectDir: string, explicitPath?: string): Record<string, QuestionThresholds>;
+export interface DecidedAssessment {
+    name: string;
+    value: AssessResult[string]['value'];
+    probability: number;
+    confidence: number;
+    /** True when confidence < floor: the caller must defer to its heuristic. */
+    defer: boolean;
+    backend: string;
+}
+/** Assess + apply reviewed thresholds. The returned `defer` flag is the
+ * shadow-mode contract: below the confidence floor, the classifier advises
+ * but the heuristic decides. */
+export declare function assessWithThresholds(state: string, questions: Question[], thresholds: Record<string, QuestionThresholds>, backend?: ClassifierBackend): DecidedAssessment[];
+//# sourceMappingURL=index.d.ts.map

package/dist/classify/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/classify/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EACL,YAAY,EACZ,iBAAiB,EAGjB,QAAQ,EACR,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AAEpB,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAE7E,wBAAgB,cAAc,IAAI,iBAAiB,CAKlD;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAK3D;AAED,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CA4BpC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;gCAEgC;AAChC,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,QAAQ,EAAE,EACrB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC9C,OAAO,GAAE,iBAAoC,GAC5C,iBAAiB,EAAE,CAqBrB"}

package/dist/classify/index.js

@@ -0,0 +1,84 @@
+/**
+ * Classifier entry point: backend selection + threshold application.
+ *
+ * Backend chain (first available wins):
+ *   1. trained head at ~/.config/uap/classifier-head.json (future; §6 v2)
+ *   2. baseline-tfidf-v1 (always available, airgap-pure)
+ * Thresholds come from reviewed policy config (config/classify-thresholds.json
+ * in the project, or ~/.config/uap/), never from model output.
+ */
+import { existsSync, readFileSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+import { BaselineBackend } from './baseline.js';
+import { ClassifyError, DEFAULT_THRESHOLDS, } from './types.js';
+export * from './types.js';
+export { BaselineBackend } from './baseline.js';
+export { recordShadow, shadowLogPath } from './shadow.js';
+export function defaultBackend() {
+    // v1: the trained-head slot exists in the chain but no head format is
+    // committed yet — landing small, one dimension end-to-end. When a head
+    // ships it inserts here without touching consumers.
+    return new BaselineBackend();
+}
+export function thresholdPaths(projectDir) {
+    return [
+        join(projectDir, 'config', 'classify-thresholds.json'),
+        join(homedir(), '.config', 'uap', 'classify-thresholds.json'),
+    ];
+}
+export function loadThresholds(projectDir, explicitPath) {
+    const candidates = explicitPath ? [explicitPath] : thresholdPaths(projectDir);
+    for (const p of candidates) {
+        if (!existsSync(p))
+            continue;
+        let cfg;
+        try {
+            cfg = JSON.parse(readFileSync(p, 'utf-8'));
+        }
+        catch (err) {
+            throw new ClassifyError(`threshold config at ${p} is not valid JSON: ${err.message}`);
+        }
+        if (cfg.version !== 1 || typeof cfg.questions !== 'object' || cfg.questions === null) {
+            throw new ClassifyError(`threshold config at ${p}: expected {version: 1, questions: {...}}`);
+        }
+        for (const [name, t] of Object.entries(cfg.questions)) {
+            const tauOk = t.tau === undefined || (Number.isFinite(t.tau) && t.tau >= 0 && t.tau <= 1);
+            const floorOk = Number.isFinite(t.confidenceFloor) && t.confidenceFloor >= 0 && t.confidenceFloor <= 1;
+            if (!tauOk || !floorOk) {
+                throw new ClassifyError(`threshold config at ${p}: questions.${name} needs confidenceFloor (and optional tau) in [0,1]`);
+            }
+        }
+        return cfg.questions;
+    }
+    if (explicitPath) {
+        throw new ClassifyError(`threshold config not found: ${explicitPath}`);
+    }
+    return {};
+}
+/** Assess + apply reviewed thresholds. The returned `defer` flag is the
+ * shadow-mode contract: below the confidence floor, the classifier advises
+ * but the heuristic decides. */
+export function assessWithThresholds(state, questions, thresholds, backend = defaultBackend()) {
+    const result = backend.assess(state, questions);
+    return questions.map((q) => {
+        const a = result[q.name];
+        if (!a) {
+            throw new ClassifyError(`backend "${backend.name}" returned no assessment for "${q.name}"`);
+        }
+        const t = thresholds[q.name] ?? DEFAULT_THRESHOLDS;
+        let value = a.value;
+        if (q.kind === 'noul') {
+            value = a.probability >= (t.tau ?? DEFAULT_THRESHOLDS.tau);
+        }
+        return {
+            name: q.name,
+            value,
+            probability: a.probability,
+            confidence: a.confidence,
+            defer: a.confidence < t.confidenceFloor,
+            backend: a.backend,
+        };
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/classify/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/classify/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAGL,aAAa,EACb,kBAAkB,GAInB,MAAM,YAAY,CAAC;AAEpB,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAE7E,MAAM,UAAU,cAAc;IAC5B,sEAAsE;IACtE,uEAAuE;IACvE,oDAAoD;IACpD,OAAO,IAAI,eAAe,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,OAAO;QACL,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,0BAA0B,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,0BAA0B,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,UAAkB,EAClB,YAAqB;IAErB,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAoB,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAAC,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACrF,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAAC,2CAA2C,CAAC,CAAC;QAC/F,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC;YACvG,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,IAAI,aAAa,CACrB,uBAAuB,CAAC,eAAe,IAAI,oDAAoD,CAChG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,aAAa,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAYD;;gCAEgC;AAChC,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,SAAqB,EACrB,UAA8C,EAC9C,UAA6B,cAAc,EAAE;IAE7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACzB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,aAAa,CAAC,YAAY,OAAO,CAAC,IAAI,iCAAiC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC;QACnD,IAAI,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QACpB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,KAAK,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,kBAAkB,CAAC,GAAI,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK;YACL,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,KAAK,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,eAAe;YACvC,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/classify/shadow.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Shadow-mode logging (uplift §6 risk mitigation): the classifier assesses,
+ * heuristics decide, divergence is logged. Promotion to active only after
+ * measured agreement.
+ *
+ * Privacy: the raw state text is NEVER persisted — only a content hash, the
+ * word count, and the assessment (no raw-text surface; note the hash is
+ * equality-revealing for low-entropy boilerplate states — acceptable for a
+ * local-only join key). Calibration replays join outcome labels by hash;
+ * the text itself stays in the session where it was produced. The log is
+ * local-only (.uap/, git-ignored, mode 0600).
+ */
+import { AssessResult, Question } from './types.js';
+export interface ShadowRecord {
+    /** Schema version — the first calibration replay will want one. */
+    v: 1;
+    ts: string;
+    /** SHA-256 of the state text — join key for later outcome labels. */
+    stateHash: string;
+    wordCount: number;
+    questions: string[];
+    result: AssessResult;
+    /** The heuristic decision that actually fired while the classifier was in
+     * shadow — the divergence the promotion gate measures. Optional because
+     * the CLI's ad-hoc --shadow has no heuristic in the loop; Wave 1 consumers
+     * (supervisor, AutoMode) must populate it. */
+    heuristicDecision?: Record<string, unknown>;
+}
+export declare function shadowLogPath(projectDir: string): string;
+export declare function recordShadow(projectDir: string, state: string, questions: Question[], result: AssessResult, opts?: {
+    logPath?: string;
+    heuristicDecision?: Record<string, unknown>;
+}): void;
+//# sourceMappingURL=shadow.d.ts.map

package/dist/classify/shadow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow.d.ts","sourceRoot":"","sources":["../../src/classify/shadow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC3B,mEAAmE;IACnE,CAAC,EAAE,CAAC,CAAC;IACL,EAAE,EAAE,MAAM,CAAC;IACX,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB;;;kDAG8C;IAC9C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,QAAQ,EAAE,EACrB,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAO,GAC3E,IAAI,CAaN"}