@opengeni/subscriptions 2.0.1 → 2.0.2-canary.38789554071001

package/dist/quota.d.ts

@@ -1,4 +1,4 @@
-import type { ModelId, SubscriptionConnection, SubscriptionQuota } from "./types.js";
+import type { ModelId, QuotaBlockClaim, SubscriptionConnection, SubscriptionQuota } from "./types.js";
 /**
  * What the shared quota model says about a connection's capacity now
  * (design 2.2). `unknown` is never treated as available or exhausted
@@ -30,6 +30,23 @@ export type QuotaCapacity = {
 export declare function quotaCapacity(quota: SubscriptionQuota | null, now: number, staleAfterMs?: number): QuotaCapacity;
 /** End of a model-specific cooldown that is still running, else null. */
 export declare function modelCooldownUntil(quota: SubscriptionQuota | null, modelId: ModelId, now: number): number | null;
+/** One stored block a usage reading may end: a model cooldown, or (model null) the exhaustion deadline. */
+export type SubscriptionQuotaBlock = {
+    modelId: ModelId | null;
+    until: number;
+    /** Its claim, only while it still explains this exact deadline. */
+    claim: QuotaBlockClaim | null;
+};
+/**
+ * The claim of a stored block (a model's cooldown, or with `modelId` null
+ * the exhaustion deadline), only while it is tied to the block's current
+ * deadline; null otherwise (fail closed).
+ */
+export declare function quotaBlockClaim(quota: Pick<SubscriptionQuota, "modelCooldowns" | "modelCooldownClaims" | "exhaustedUntil" | "exhaustedClaim">, modelId: ModelId | null): QuotaBlockClaim | null;
+/** The quota document a store writes: claims only while they explain a block. */
+export type StoredQuotaDocument = Pick<SubscriptionQuota, "windows" | "modelCooldowns" | "modelCooldownClaims" | "exhaustedUntil" | "exhaustedKind" | "exhaustedClaim" | "source">;
+/** The stored document of one quota (a claim that no longer explains its block is dropped). */
+export declare function storedQuotaDocument(quota: SubscriptionQuota): StoredQuotaDocument;
 /**
  * A quota observation applies only to the credential generation it was made
  * with, so a refusal seen before a refresh cannot quarantine the renewed

package/dist/reference-model.d.ts

@@ -147,7 +147,7 @@ export type World = {
     cacheTtlMs: Record<ProviderId, number>;
 };
 export type SwitchKind = "initial" | "sticky" | "pinned" | "reselected_cold" | "failover_same_provider" | "failover_cross_provider" | "return_to_preferred";
-export type WaitReason = "pinned_account_unavailable"
+export type WaitReason = "pinned_account_unavailable" | "pinned_account_disabled"
 /** The explicit choice can never serve this work until a person changes something (D-24). */
  | "pinned_account_ineligible" | "no_eligible_capacity" | "model_not_allowed"
 /** Decided before placement (an unusable accepted authority); never produced here. */

package/dist/reference.js

@@ -221,6 +221,14 @@ function pinnedNeverServes(world, session, pinned) {
   }
   return !isAuthorized(world, session, { ...pinned, healthy: true, allocatorEnabled: true });
 }
+function pinnedAllocationDisabled(world, session, pinned) {
+  if (!pinned.allocatorEnabled) return true;
+  if (pinned.assignmentPolicies === void 0) return false;
+  const source = effectiveSettings(world.settings, session.workspaceId).values.inferenceSource?.[pinned.provider] ?? "automatic";
+  return !pinned.assignmentPolicies.some(
+    (policy) => policy.workspaceId === session.workspaceId && (source === "automatic" || policy.inferencePool === source) && policy.allocatorEnabled
+  );
+}
 function futureResetTimes(world, now) {
   const times = /* @__PURE__ */ new Set();
   for (const connection of world.connections) {
@@ -270,6 +278,9 @@ function decide(world, sessionId, now) {
     if (pinnedNeverServes(world, session, pinned)) {
       return { kind: "wait", reason: "pinned_account_ineligible", earliestResetAt: null };
     }
+    if (pinned && pinnedAllocationDisabled(world, session, pinned)) {
+      return { kind: "wait", reason: "pinned_account_disabled", earliestResetAt: null };
+    }
     return {
       kind: "wait",
       reason: "pinned_account_unavailable",
@@ -422,7 +433,7 @@ function checkDecision(world, sessionId, now, decision) {
     }
     const allowedModels = models.filter((modelId) => modelAllowed(world, session, modelId));
     const never = !!session.pinnedConnectionId && pinnedNeverServes(world, session, pinned);
-    const expectedReason = allowedModels.length === 0 ? "model_not_allowed" : session.pinnedConnectionId ? never ? "pinned_account_ineligible" : "pinned_account_unavailable" : "no_eligible_capacity";
+    const expectedReason = allowedModels.length === 0 ? "model_not_allowed" : session.pinnedConnectionId ? never ? "pinned_account_ineligible" : pinned && pinnedAllocationDisabled(world, session, pinned) ? "pinned_account_disabled" : "pinned_account_unavailable" : "no_eligible_capacity";
     if (decision.reason !== expectedReason) {
       fail(
         never && decision.reason === "pinned_account_unavailable" ? "SUB-ACCESS-06" : "SUB-WAIT-02",

package/dist/reference.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/reference-model.ts","../src/reference-bridge.ts"],"sourcesContent":["/**\n * Independent executable reference model of the subscription account contract\n * (docs/subscription-accounts.md). It is written from the contract, not from\n * the production selection code, so conformance tests can compare production\n * decisions against it. Everything here is pure and deterministic: no clock,\n * database or randomness.\n *\n * It ships in `@opengeni/subscriptions` only so the worker's shadow comparison\n * can run `checkDecision` in production; it is published through the separate\n * `@opengeni/subscriptions/reference` entry point, and the placement modules of\n * this package never import it (a test enforces both directions).\n *\n * The model answers one question: given the world and a session that wants to\n * run a turn now, which account and model must it run on, or why must it wait?\n */\n\nexport type ProviderId = string;\nexport type ModelId = string;\n\nexport type Rotation =\n  | { mode: \"primary_first\"; primaryConnectionId: string | null }\n  | { mode: \"spread\" };\n\nexport type SubscriptionSettings = {\n  /** Per provider; a provider without an entry spreads work. */\n  rotation: Record<ProviderId, Rotation>;\n  /** `automatic` admits both classified shared pools; missing entries retain legacy behavior. */\n  inferenceSource?: Record<ProviderId, \"automatic\" | \"workspace\" | \"organization\">;\n  crossProviderFailover: boolean;\n  /** Ordered fallback models for a preferred model, possibly on other providers. */\n  fallbackOrder: Record<ModelId, ModelId[]>;\n  personalConnectionsAllowed: boolean;\n  personalFallbackAllowed: boolean;\n};\nexport type SettingKey = keyof SubscriptionSettings;\n\nexport type SettingsPolicy = {\n  organization: SubscriptionSettings;\n  locked: readonly SettingKey[];\n  workspaceOverrides: Record<string, Partial<SubscriptionSettings>>;\n};\n\nexport type ConnectionScope =\n  | { kind: \"organization\" }\n  | { kind: \"workspaces\"; workspaceIds: readonly string[]; personalWorkspaces: boolean }\n  | { kind: \"people\"; personIds: readonly string[] };\n\nexport type Quota =\n  | { kind: \"available\" }\n  | { kind: \"unknown\" }\n  | { kind: \"exhausted\"; resetsAt: number | null };\n\nexport type Connection = {\n  id: string;\n  provider: ProviderId;\n  ownership: { kind: \"shared\"; scope: ConnectionScope } | { kind: \"personal\"; ownerId: string };\n  healthy: boolean;\n  allocatorEnabled: boolean;\n  entitledModels: readonly ModelId[];\n  /** Administrator access policy on the connection; null or absent allows every entitled model. */\n  allowedModelIds?: readonly ModelId[] | null;\n  assignmentPolicies?: readonly {\n    workspaceId: string;\n    inferencePool: \"workspace\" | \"organization\";\n    allowedModelIds: readonly ModelId[] | null;\n    excludedModelIds?: readonly ModelId[];\n    allocatorEnabled: boolean;\n    managedByWorkspaceId?: string | null;\n  }[];\n  /** Per-model cooldowns (some providers report model-specific limits). */\n  modelCooldowns?: Readonly<Record<ModelId, number>>;\n  quota: Quota;\n  /** Explicit consent to spend credits after the included allowance (extra-credits providers only). */\n  extraCreditsEnabled?: boolean;\n  /** A provider refusal blocks even paid credits until this deadline. */\n  refusalUntil?: number | null;\n};\n\nexport type Workspace = {\n  id: string;\n  kind: \"shared\" | \"personal\";\n  /** Owner of a Personal workspace. */\n  ownerId: string | null;\n  /** Workspace model restriction; null allows every model. */\n  allowedModels: readonly ModelId[] | null;\n};\n\nexport type Person = { id: string; active: boolean; personalFallbackOptIn: boolean };\n\n/** The contract's closed set of model tiers (D-35). Tiers compare by equality only. */\nexport type Tier = \"frontier\" | \"standard\" | \"fast\";\nconst TIERS: readonly string[] = [\"frontier\", \"standard\", \"fast\"];\n\nexport type Model = {\n  id: ModelId;\n  provider: ProviderId;\n  reasoningLevels: readonly string[];\n  /** The tier its provider declares; absent or null when it declares none. */\n  tier?: Tier | null;\n};\n\nexport type SessionBinding = { connectionId: string; modelId: ModelId; lastUsedAt: number };\n\nexport type Session = {\n  id: string;\n  workspaceId: string;\n  visibility: \"private\" | \"shared\";\n  /** Null only for a deliberately ownerless service session; it can use shared pools only. */\n  ownerId: string | null;\n  /** Exact accepted shared-chat consent; not a new account pool. */\n  sharedPersonalChoices?: readonly { connectionId: string; ownerId: string }[];\n  /** The model the session asked for. */\n  preferredModelId: ModelId;\n  reasoningLevel: string;\n  binding: SessionBinding | null;\n  /** An explicit account choice is a pin: the session waits for it rather than moving. */\n  pinnedConnectionId: string | null;\n  /** \"Only this model\": no cross-provider failover. Same-model account failover still applies. */\n  onlyThisModel: boolean;\n  /** A compaction completed or the model changed since the last placement (SUB-STICK-05). */\n  reselectionPoint?: boolean;\n};\n\nexport type World = {\n  settings: SettingsPolicy;\n  workspaces: readonly Workspace[];\n  people: readonly Person[];\n  models: readonly Model[];\n  connections: readonly Connection[];\n  sessions: readonly Session[];\n  /** Prompt-cache lifetime after the last use, per provider. */\n  cacheTtlMs: Record<ProviderId, number>;\n};\n\nexport type SwitchKind =\n  | \"initial\"\n  | \"sticky\"\n  | \"pinned\"\n  | \"reselected_cold\"\n  | \"failover_same_provider\"\n  | \"failover_cross_provider\"\n  | \"return_to_preferred\";\n\nexport type WaitReason =\n  | \"pinned_account_unavailable\"\n  /** The explicit choice can never serve this work until a person changes something (D-24). */\n  | \"pinned_account_ineligible\"\n  | \"no_eligible_capacity\"\n  | \"model_not_allowed\"\n  /** Decided before placement (an unusable accepted authority); never produced here. */\n  | \"accepted_authority_unavailable\";\n\nexport type Decision =\n  | {\n      kind: \"run\";\n      connectionId: string;\n      modelId: ModelId;\n      reasoningLevel: string;\n      switch: SwitchKind;\n    }\n  | { kind: \"wait\"; reason: WaitReason; earliestResetAt: number | null };\n\n// Effective settings\n\nexport type EffectiveSettings = {\n  values: SubscriptionSettings;\n  sources: Record<SettingKey, \"organization\" | \"workspace\">;\n};\n\nconst SETTING_KEYS: readonly SettingKey[] = [\n  \"rotation\",\n  \"inferenceSource\",\n  \"crossProviderFailover\",\n  \"fallbackOrder\",\n  \"personalConnectionsAllowed\",\n  \"personalFallbackAllowed\",\n];\n\n/**\n * SUB-SET-01..03: organization default, unless a workspace overrides an\n * unlocked setting. Per-provider and per-model maps are overridden entry by\n * entry, so a workspace that sets one provider's rotation keeps the others\n * (D-25); the source is \"workspace\" when the workspace overrides any entry.\n */\nexport function effectiveSettings(policy: SettingsPolicy, workspaceId: string): EffectiveSettings {\n  const override = policy.workspaceOverrides[workspaceId] ?? {};\n  const values = { ...policy.organization } as SubscriptionSettings;\n  const sources = {} as Record<SettingKey, \"organization\" | \"workspace\">;\n  for (const key of SETTING_KEYS) {\n    const overridden = override[key] !== undefined && !policy.locked.includes(key);\n    if (overridden) {\n      (values as Record<SettingKey, unknown>)[key] =\n        key === \"rotation\" || key === \"inferenceSource\" || key === \"fallbackOrder\"\n          ? { ...policy.organization[key], ...(override[key] as object) }\n          : override[key];\n    }\n    sources[key] = overridden ? \"workspace\" : \"organization\";\n  }\n  return { values, sources };\n}\n\n// Eligibility\n\nfunction byId<T extends { id: string }>(items: readonly T[], id: string): T | undefined {\n  return items.find((item) => item.id === id);\n}\n\nexport function isCacheWarm(world: World, binding: SessionBinding, now: number): boolean {\n  const connection = byId(world.connections, binding.connectionId);\n  if (!connection) return false;\n  const ttl = world.cacheTtlMs[connection.provider] ?? 0;\n  return now - binding.lastUsedAt <= ttl;\n}\n\nfunction hasCapacity(connection: Connection, now: number): boolean {\n  // Unknown quota stays unknown: it is neither availability nor exhaustion (SUB-ELIG-06).\n  return (\n    connection.quota.kind !== \"exhausted\" ||\n    (connection.quota.resetsAt !== null && connection.quota.resetsAt <= now) ||\n    spendsCredits(connection, now)\n  );\n}\n\nfunction spendsCredits(connection: Connection, now: number): boolean {\n  return (\n    connection.extraCreditsEnabled === true &&\n    (connection.refusalUntil == null || connection.refusalUntil <= now) &&\n    connection.quota.kind === \"exhausted\" &&\n    (connection.quota.resetsAt === null || connection.quota.resetsAt > now)\n  );\n}\n\nfunction modelAllowed(world: World, session: Session, modelId: ModelId): boolean {\n  const workspace = byId(world.workspaces, session.workspaceId);\n  return (\n    !!workspace && (workspace.allowedModels === null || workspace.allowedModels.includes(modelId))\n  );\n}\n\n/**\n * Why this connection may not serve this session's work at all, ignoring the\n * model, capacity and the explicit-choice rule for personal accounts, labelled\n * with the requirement that forbids it; null when it may.\n */\nexport function authorizationFailure(\n  world: World,\n  session: Session,\n  connection: Connection,\n): InvariantViolation | null {\n  const failure = (requirement: string, message: string) => ({ requirement, message });\n  const workspace = byId(world.workspaces, session.workspaceId);\n  if (!workspace) return failure(\"SUB-ELIG-01\", \"the session's workspace is unknown\");\n  if (!connection.healthy || !connection.allocatorEnabled) {\n    return failure(\"SUB-ELIG-04\", \"the account is unhealthy or excluded from allocation\");\n  }\n  if (connection.ownership.kind === \"personal\") {\n    const settings = effectiveSettings(world.settings, workspace.id).values;\n    const owner = byId(world.people, connection.ownership.ownerId);\n    const ownersOwnWork =\n      (session.ownerId !== null &&\n        session.sharedPersonalChoices?.some(\n          (choice) => choice.connectionId === connection.id && choice.ownerId === owner?.id,\n        )) ||\n      (session.ownerId === connection.ownership.ownerId &&\n        (session.visibility === \"private\" ||\n          (workspace.kind === \"personal\" && workspace.ownerId === connection.ownership.ownerId)));\n    if (!settings.personalConnectionsAllowed) {\n      return failure(\"SUB-OWN-05\", \"personal connections are disabled here\");\n    }\n    if (!owner?.active) return failure(\"SUB-ACCESS-06\", \"the personal account's owner left\");\n    if (!ownersOwnWork) {\n      return failure(\"SUB-ELIG-05\", \"a personal account served work other than its owner's own\");\n    }\n    return null;\n  }\n  if (connection.assignmentPolicies !== undefined) {\n    const source =\n      effectiveSettings(world.settings, workspace.id).values.inferenceSource?.[\n        connection.provider\n      ] ?? \"automatic\";\n    const matching = connection.assignmentPolicies.filter(\n      (policy) =>\n        policy.workspaceId === workspace.id &&\n        (source === \"automatic\" || policy.inferencePool === source),\n    );\n    if (matching.length === 0) {\n      return failure(\"SUB-SET-06\", \"the effective inference source excludes this assignment\");\n    }\n  }\n  const scope = connection.ownership.scope;\n  const inScope =\n    scope.kind === \"organization\" ||\n    (scope.kind === \"workspaces\"\n      ? scope.workspaceIds.includes(workspace.id) ||\n        (workspace.kind === \"personal\" && scope.personalWorkspaces)\n      : session.ownerId !== null && scope.personIds.includes(session.ownerId));\n  return inScope ? null : failure(\"SUB-ELIG-01\", \"the account's scope excludes this work\");\n}\n\n/** May this connection serve this session's work at all? SUB-ELIG-01, 04, 05. */\nexport function isAuthorized(world: World, session: Session, connection: Connection): boolean {\n  return authorizationFailure(world, session, connection) === null;\n}\n\n/**\n * Why this connection cannot serve this session on this model now, labelled\n * with the requirement that forbids it; null when it can.\n */\nexport function servingFailure(\n  world: World,\n  session: Session,\n  connection: Connection,\n  modelId: ModelId,\n  now: number,\n): InvariantViolation | null {\n  const model = byId(world.models, modelId);\n  if (\n    !model ||\n    model.provider !== connection.provider ||\n    !connection.entitledModels.includes(modelId)\n  ) {\n    return { requirement: \"SUB-ELIG-03\", message: \"the account's plan does not include the model\" };\n  }\n  if (connection.allowedModelIds != null && !connection.allowedModelIds.includes(modelId)) {\n    return {\n      requirement: \"SUB-ELIG-03\",\n      message: \"the account's access policy excludes the model\",\n    };\n  }\n  if (connection.assignmentPolicies !== undefined) {\n    const workspace = byId(world.workspaces, session.workspaceId)!;\n    const source =\n      effectiveSettings(world.settings, workspace.id).values.inferenceSource?.[\n        connection.provider\n      ] ?? \"automatic\";\n    const matching = connection.assignmentPolicies.filter(\n      (policy) =>\n        policy.workspaceId === workspace.id &&\n        (source === \"automatic\" || policy.inferencePool === source),\n    );\n    const hasAllocatableAssignment = matching.some((policy) => policy.allocatorEnabled);\n    if (!hasAllocatableAssignment) {\n      return {\n        requirement: \"SUB-ELIG-04\",\n        message: \"the source assignment is excluded from allocation\",\n      };\n    }\n    if (\n      !matching.some(\n        (policy) =>\n          policy.allocatorEnabled &&\n          (policy.allowedModelIds === null || policy.allowedModelIds.includes(modelId)) &&\n          !policy.excludedModelIds?.includes(modelId),\n      )\n    ) {\n      const hasModelAssignment = matching.some(\n        (policy) =>\n          (policy.allowedModelIds === null || policy.allowedModelIds.includes(modelId)) &&\n          !policy.excludedModelIds?.includes(modelId),\n      );\n      return {\n        requirement: hasModelAssignment ? \"SUB-ELIG-04\" : \"SUB-ELIG-03\",\n        message: hasModelAssignment\n          ? \"model access exists only on a source assignment excluded from allocation\"\n          : \"no source assignment allows the model\",\n      };\n    }\n  }\n  if ((connection.modelCooldowns?.[modelId] ?? -Infinity) > now) {\n    return { requirement: \"SUB-ELIG-03\", message: \"the account is cooling down for the model\" };\n  }\n  if (!modelAllowed(world, session, modelId)) {\n    return { requirement: \"SUB-ELIG-02\", message: \"the workspace does not allow the model\" };\n  }\n  const authorization = authorizationFailure(world, session, connection);\n  if (authorization) return authorization;\n  if (!hasCapacity(connection, now)) {\n    return { requirement: \"SUB-FAIL-02\", message: \"the account has no capacity now\" };\n  }\n  return null;\n}\n\nexport function canServe(\n  world: World,\n  session: Session,\n  connection: Connection,\n  modelId: ModelId,\n  now: number,\n): boolean {\n  return servingFailure(world, session, connection, modelId, now) === null;\n}\n\n// Selection\n\n/**\n * Deterministic hash used to spread sessions across accounts (D-21): FNV-1a\n * over the UTF-16 code units, finished with the murmur3 finalizer, because raw\n * FNV-1a orders similar keys unevenly and so spreads unfairly (SUB-SEL-03, D-23).\n */\nexport function spreadHash(sessionId: string, connectionId: string): number {\n  let hash = 0x811c9dc5;\n  const key = sessionId + \"|\" + connectionId;\n  for (let index = 0; index < key.length; index += 1) {\n    hash ^= key.charCodeAt(index);\n    hash = Math.imul(hash, 0x01000193) >>> 0;\n  }\n  // murmur3 fmix32\n  hash = Math.imul(hash ^ (hash >>> 16), 0x85ebca6b) >>> 0;\n  hash = Math.imul(hash ^ (hash >>> 13), 0xc2b2ae35) >>> 0;\n  return (hash ^ (hash >>> 16)) >>> 0;\n}\n\n/**\n * Rank servable connections for one model. In Primary first the primary takes\n * new work whenever it can serve it, and unknown quota counts as able to serve\n * (D-13, D-14, D-15). Every other choice ranks known capacity before unknown\n * quota (D-14), then a deterministic per-session hash spreads sessions (D-21),\n * then the connection id breaks ties.\n */\nfunction pick(world: World, session: Session, candidates: Connection[]): Connection | null {\n  if (candidates.length === 0) return null;\n  const provider = candidates[0]!.provider;\n  const rotation =\n    effectiveSettings(world.settings, session.workspaceId).values.rotation[provider] ??\n    ({ mode: \"spread\" } as Rotation);\n  if (rotation.mode === \"primary_first\") {\n    const primary = candidates.find((candidate) => candidate.id === rotation.primaryConnectionId);\n    if (primary) return primary;\n  }\n  const ranked = [...candidates].sort((left, right) => {\n    const spread = spreadHash(session.id, left.id) - spreadHash(session.id, right.id);\n    if (spread !== 0) return spread;\n    return left.id < right.id ? -1 : left.id > right.id ? 1 : 0;\n  });\n  return ranked[0]!;\n}\n\n/**\n * SUB-FAIL-03 and D-16: the reasoning level to run `model` at when the session\n * asked for `requested` on its preferred model `from`.\n *\n * 1. The same level name when the model supports it.\n * 2. Otherwise the model's level whose relative position on its own ladder\n *    (lowest 0, highest 1) is closest to the requested level's relative\n *    position on the preferred model's ladder. A tie goes to the lower level.\n * 3. A level the preferred model does not list has no position and maps to\n *    the middle of the ladder (the lower middle when there are two).\n */\nexport function nearestReasoningLevel(\n  model: Model,\n  requested: string,\n  from: Model | undefined,\n): string {\n  const levels = model.reasoningLevels;\n  if (levels.includes(requested)) return requested;\n  if (levels.length <= 1) return levels[0] ?? \"\";\n  const source = from?.reasoningLevels ?? [];\n  const sourceIndex = source.indexOf(requested);\n  // The requested position as an exact fraction, so ties are exact.\n  const [numerator, denominator] =\n    sourceIndex < 0 || source.length <= 1 ? [1, 2] : [sourceIndex, source.length - 1];\n  // |index / (levels - 1) - numerator / denominator|, scaled by both denominators.\n  const distance = (index: number) =>\n    Math.abs(index * denominator - numerator * (levels.length - 1));\n  let best = 0;\n  for (let index = 1; index < levels.length; index += 1) {\n    if (distance(index) < distance(best)) best = index;\n  }\n  return levels[best]!;\n}\n\n/**\n * D-35: the fallback order of a preferred model the settings name no entry\n * for. Only with cross-provider failover on, and only when the preferred\n * model declares a tier: every model of another provider declaring exactly\n * that tier (Q-04: never a lower or higher one), provider by provider in\n * sorted id order, each provider's models in the world's order, at most 8.\n * The preferred model's own provider contributes nothing (same-provider\n * model fallback is explicit only).\n */\nexport function derivedFallbacks(\n  world: World,\n  settings: SubscriptionSettings,\n  preferredModelId: ModelId,\n): ModelId[] {\n  const preferred = byId(world.models, preferredModelId);\n  if (!settings.crossProviderFailover || !preferred) return [];\n  const tier = preferred.tier;\n  if (typeof tier !== \"string\" || !TIERS.includes(tier)) return [];\n  const otherProviders = [...new Set(world.models.map((model) => model.provider))]\n    .filter((provider) => provider !== preferred.provider)\n    .sort();\n  const derived: ModelId[] = [];\n  for (const provider of otherProviders) {\n    for (const model of world.models) {\n      if (model.provider !== provider || model.tier !== tier) continue;\n      if (model.id === preferredModelId || derived.includes(model.id)) continue;\n      derived.push(model.id);\n    }\n  }\n  return derived.slice(0, 8);\n}\n\n/**\n * Candidate models in failover order: the preferred model, then (if allowed)\n * its fallbacks. An explicit entry for the preferred model, even an empty\n * list, is the order; only a missing entry derives one (D-35).\n */\nexport function candidateModels(world: World, session: Session): ModelId[] {\n  const settings = effectiveSettings(world.settings, session.workspaceId).values;\n  const preferred = session.preferredModelId;\n  if (session.onlyThisModel || session.pinnedConnectionId) return [preferred];\n  const preferredProvider = byId(world.models, preferred)?.provider;\n  const explicit = Object.prototype.hasOwnProperty.call(settings.fallbackOrder, preferred);\n  const order = explicit\n    ? (settings.fallbackOrder[preferred] ?? [])\n    : derivedFallbacks(world, settings, preferred);\n  // Same-provider fallback models are always allowed; other providers only\n  // when cross-provider failover is on (SUB-FAIL-02, SUB-FAIL-03).\n  const fallbacks = order.filter(\n    (modelId, index, all) =>\n      modelId !== preferred &&\n      all.indexOf(modelId) === index &&\n      (byId(world.models, modelId)?.provider === preferredProvider ||\n        settings.crossProviderFailover),\n  );\n  return [preferred, ...fallbacks];\n}\n\n/**\n * D-24: an explicit choice that can never serve this session's model: gone,\n * no longer authorized for this work, another provider's account, or not\n * entitled or allowed for the model. Health, allocation, capacity and\n * cooldowns recover, so they never make an explicit choice permanently unusable.\n */\nexport function pinnedNeverServes(\n  world: World,\n  session: Session,\n  pinned: Connection | undefined,\n): boolean {\n  if (!pinned) return true;\n  const model = byId(world.models, session.preferredModelId);\n  if (!model || model.provider !== pinned.provider) return true;\n  if (!pinned.entitledModels.includes(model.id)) return true;\n  if (pinned.allowedModelIds != null && !pinned.allowedModelIds.includes(model.id)) return true;\n  if (pinned.assignmentPolicies !== undefined) {\n    const source =\n      effectiveSettings(world.settings, session.workspaceId).values.inferenceSource?.[\n        pinned.provider\n      ] ?? \"automatic\";\n    const assignments = pinned.assignmentPolicies.filter(\n      (policy) =>\n        policy.workspaceId === session.workspaceId &&\n        (source === \"automatic\" || policy.inferencePool === source),\n    );\n    if (\n      !assignments.some(\n        (policy) =>\n          (policy.allowedModelIds === null || policy.allowedModelIds.includes(model.id)) &&\n          !policy.excludedModelIds?.includes(model.id),\n      )\n    ) {\n      return true;\n    }\n  }\n  return !isAuthorized(world, session, { ...pinned, healthy: true, allocatorEnabled: true });\n}\n\n/** Future times at which some quota or model cooldown in the world resets, ascending. */\nfunction futureResetTimes(world: World, now: number): number[] {\n  const times = new Set<number>();\n  for (const connection of world.connections) {\n    if (\n      connection.quota.kind === \"exhausted\" &&\n      connection.quota.resetsAt !== null &&\n      connection.quota.resetsAt > now\n    ) {\n      times.add(connection.quota.resetsAt);\n    }\n    if (connection.refusalUntil != null && connection.refusalUntil > now)\n      times.add(connection.refusalUntil);\n    for (const until of Object.values(connection.modelCooldowns ?? {})) {\n      if (until > now) times.add(until);\n    }\n  }\n  return [...times].sort((left, right) => left - right);\n}\n\n/**\n * SUB-WAIT-02, D-22: the earliest future time at which the session could run,\n * assuming nothing else changes; null when no known reset makes it runnable.\n */\nexport function earliestRunnableAt(\n  world: World,\n  now: number,\n  runnableAt: (at: number) => boolean,\n): number | null {\n  return futureResetTimes(world, now).find(runnableAt) ?? null;\n}\n\nfunction personalFallbackFor(world: World, session: Session): boolean {\n  if (session.ownerId === null) return false;\n  if (\n    session.visibility === \"shared\" &&\n    byId(world.workspaces, session.workspaceId)?.kind === \"shared\"\n  )\n    return false;\n  const settings = effectiveSettings(world.settings, session.workspaceId).values;\n  return (\n    (byId(world.workspaces, session.workspaceId)?.kind === \"personal\" &&\n      byId(world.workspaces, session.workspaceId)?.ownerId === session.ownerId) ||\n    (settings.personalFallbackAllowed &&\n      !!byId(world.people, session.ownerId)?.personalFallbackOptIn)\n  );\n}\n\n/**\n * The contract's decision for a session that wants to run a turn now. The\n * sender is deliberately not an input: the account belongs to the session\n * (SUB-STICK-01).\n */\nexport function decide(world: World, sessionId: string, now: number): Decision {\n  const session = byId(world.sessions, sessionId);\n  if (!session) throw new Error(\"unknown session \" + sessionId);\n  const preferredModel = byId(world.models, session.preferredModelId);\n  const level = (model: ModelId) =>\n    nearestReasoningLevel(byId(world.models, model)!, session.reasoningLevel, preferredModel);\n  const run = (connectionId: string, modelId: ModelId, kind: SwitchKind): Decision => ({\n    kind: \"run\",\n    connectionId,\n    modelId,\n    reasoningLevel: level(modelId),\n    switch: kind,\n  });\n\n  // A restricted preferred model falls through to its allowed failover\n  // candidates (SUB-ELIG-02, SUB-WAIT-01, D-17); waiting on the restriction is\n  // right only when no candidate is allowed.\n  const models = candidateModels(world, session);\n  const allowedModels = models.filter((modelId) => modelAllowed(world, session, modelId));\n  if (allowedModels.length === 0) {\n    return { kind: \"wait\", reason: \"model_not_allowed\", earliestResetAt: null };\n  }\n\n  // Explicit choice is a pin (SUB-SEL-04, SUB-FAIL-05, SUB-STICK-06).\n  if (session.pinnedConnectionId) {\n    const pinned = byId(world.connections, session.pinnedConnectionId);\n    if (pinned && canServe(world, session, pinned, session.preferredModelId, now)) {\n      return run(pinned.id, session.preferredModelId, \"pinned\");\n    }\n    // It can never serve this work: explain that instead of waiting silently (D-24).\n    if (pinnedNeverServes(world, session, pinned)) {\n      return { kind: \"wait\", reason: \"pinned_account_ineligible\", earliestResetAt: null };\n    }\n    // Otherwise the earliest future time the chosen account can serve (D-22).\n    return {\n      kind: \"wait\",\n      reason: \"pinned_account_unavailable\",\n      earliestResetAt: earliestRunnableAt(world, now, (at) =>\n        canServe(world, session, pinned!, session.preferredModelId, at),\n      ),\n    };\n  }\n\n  const binding = session.binding;\n  const bound = binding ? byId(world.connections, binding.connectionId) : undefined;\n  const personalFallback = personalFallbackFor(world, session);\n  const bindingServable =\n    !!binding &&\n    !!bound &&\n    models.includes(binding.modelId) &&\n    canServe(world, session, bound, binding.modelId, now);\n\n  // Stickiness while the cache is warm (SUB-STICK-02, SUB-STICK-03, SUB-FAIL-07).\n  const includedAlternative = (modelId: string) =>\n    world.connections.some(\n      (connection) =>\n        (connection.ownership.kind === \"shared\" || personalFallback) &&\n        !spendsCredits(connection, now) &&\n        canServe(world, session, connection, modelId, now),\n    );\n  if (\n    binding &&\n    bound &&\n    bindingServable &&\n    !session.reselectionPoint &&\n    isCacheWarm(world, binding, now) &&\n    (!spendsCredits(bound, now) || !includedAlternative(binding.modelId))\n  ) {\n    return run(binding.connectionId, binding.modelId, \"sticky\");\n  }\n\n  // Order: each candidate model on shared accounts, then (opt-in) on the\n  // owner's personal accounts, before moving to the next model (D-12).\n  for (const [index, modelId] of models.entries()) {\n    const eligible = world.connections.filter(\n      (connection) =>\n        (connection.ownership.kind === \"shared\" || personalFallback) &&\n        canServe(world, session, connection, modelId, now),\n    );\n    const included = eligible.filter((connection) => !spendsCredits(connection, now));\n    const servable = included.length ? included : eligible;\n    const shared = servable.filter((connection) => connection.ownership.kind === \"shared\");\n    const personal = servable.filter((connection) => connection.ownership.kind === \"personal\");\n    const chosen =\n      pick(world, session, shared) ?? (personalFallback ? pick(world, session, personal) : null);\n    if (!chosen) continue;\n    let kind: SwitchKind;\n    if (!binding) kind = \"initial\";\n    else if (binding.connectionId === chosen.id && binding.modelId === modelId) kind = \"sticky\";\n    else if (index === 0 && binding.modelId !== modelId) kind = \"return_to_preferred\";\n    else if (index > 0)\n      kind =\n        byId(world.models, modelId)?.provider ===\n        byId(world.models, session.preferredModelId)?.provider\n          ? \"failover_same_provider\"\n          : \"failover_cross_provider\";\n    else if (bindingServable) kind = \"reselected_cold\";\n    else kind = \"failover_same_provider\";\n    return run(chosen.id, modelId, kind);\n  }\n  return {\n    kind: \"wait\",\n    reason: \"no_eligible_capacity\",\n    earliestResetAt: earliestRunnableAt(world, now, (at) =>\n      allowedModels.some((modelId) =>\n        world.connections.some(\n          (connection) =>\n            (connection.ownership.kind === \"shared\" || personalFallback) &&\n            canServe(world, session, connection, modelId, at),\n        ),\n      ),\n    ),\n  };\n}\n\n/** Record that a decision ran: the session binds to the chosen account. */\nexport function applyDecision(\n  world: World,\n  sessionId: string,\n  decision: Decision,\n  now: number,\n): World {\n  if (decision.kind !== \"run\") return world;\n  return {\n    ...world,\n    sessions: world.sessions.map((session) =>\n      session.id === sessionId\n        ? {\n            ...session,\n            binding: {\n              connectionId: decision.connectionId,\n              modelId: decision.modelId,\n              lastUsedAt: now,\n            },\n          }\n        : session,\n    ),\n  };\n}\n\n// Invariants\n\nexport type InvariantViolation = { requirement: string; message: string };\n\n/**\n * Check any decision (from this model or from production) against the\n * contract's invariants for this world. An empty result means the decision is\n * acceptable; it does not require the decision to equal the model's own.\n */\nexport function checkDecision(\n  world: World,\n  sessionId: string,\n  now: number,\n  decision: Decision,\n): InvariantViolation[] {\n  const violations: InvariantViolation[] = [];\n  const session = byId(world.sessions, sessionId)!;\n  const settings = effectiveSettings(world.settings, session.workspaceId).values;\n  const models = candidateModels(world, session);\n  const fail = (requirement: string, message: string) => violations.push({ requirement, message });\n\n  const personalFallback = personalFallbackFor(world, session);\n  const servableShared = (modelId: ModelId, credits: boolean) =>\n    world.connections.some(\n      (connection) =>\n        connection.ownership.kind === \"shared\" &&\n        (credits || !spendsCredits(connection, now)) &&\n        canServe(world, session, connection, modelId, now),\n    );\n  const servableAutomatically = (modelId: ModelId) =>\n    world.connections.some(\n      (connection) =>\n        canServe(world, session, connection, modelId, now) &&\n        (connection.ownership.kind === \"shared\" || personalFallback),\n    );\n  const anyServable = models.some(servableAutomatically);\n  const binding = session.binding;\n  const bindingWarm = !!binding && !session.reselectionPoint && isCacheWarm(world, binding, now);\n\n  if (decision.kind === \"run\") {\n    const connection = byId(world.connections, decision.connectionId);\n    if (!connection) {\n      fail(\"SUB-ELIG-01\", \"the chosen account does not exist\");\n      return violations;\n    }\n    const ineligible = servingFailure(world, session, connection, decision.modelId, now);\n    if (ineligible) {\n      violations.push(ineligible);\n      return violations;\n    }\n    if (session.pinnedConnectionId && decision.connectionId !== session.pinnedConnectionId) {\n      fail(\"SUB-SEL-04\", \"a pinned session ran on another account\");\n    }\n    if (!models.includes(decision.modelId)) {\n      fail(\"SUB-FAIL-04\", \"ran a model outside the allowed failover candidates\");\n    }\n    const crossProvider =\n      byId(world.models, decision.modelId)?.provider !==\n      byId(world.models, session.preferredModelId)?.provider;\n    if (crossProvider && (!settings.crossProviderFailover || session.onlyThisModel)) {\n      fail(\"SUB-FAIL-03\", \"moved across providers although that is not allowed\");\n    }\n    const expectedLevel = nearestReasoningLevel(\n      byId(world.models, decision.modelId)!,\n      session.reasoningLevel,\n      byId(world.models, session.preferredModelId),\n    );\n    if (decision.reasoningLevel !== expectedLevel) {\n      fail(\"SUB-FAIL-03\", \"ran at a reasoning level other than the nearest supported level\");\n    }\n    // Staying on the current account while its cache is warm is always allowed\n    // (SUB-STICK-02); every other placement must respect the failover order.\n    const stayingWarm =\n      !!binding &&\n      bindingWarm &&\n      binding.connectionId === decision.connectionId &&\n      binding.modelId === decision.modelId;\n    if (!stayingWarm && !session.pinnedConnectionId) {\n      const index = models.indexOf(decision.modelId);\n      if (models.slice(0, Math.max(index, 0)).some(servableAutomatically)) {\n        fail(\"SUB-FAIL-02\", \"skipped an earlier failover candidate that could still run\");\n      }\n      if (\n        connection.ownership.kind === \"personal\" &&\n        (!personalFallback || servableShared(decision.modelId, spendsCredits(connection, now)))\n      ) {\n        fail(\"SUB-SEL-02\", \"used a personal account without an explicit choice or opt-in fallback\");\n      }\n    }\n    const includedAlternative = (modelId: string) =>\n      world.connections.some(\n        (candidate) =>\n          (candidate.ownership.kind === \"shared\" || personalFallback) &&\n          !spendsCredits(candidate, now) &&\n          canServe(world, session, candidate, modelId, now),\n      );\n    if (\n      !session.pinnedConnectionId &&\n      spendsCredits(connection, now) &&\n      includedAlternative(decision.modelId)\n    ) {\n      fail(\"SUB-CREDITS-01\", \"spent extra credits while an eligible account had included capacity\");\n    }\n    if (binding && bindingWarm && !session.pinnedConnectionId) {\n      const bound = byId(world.connections, binding.connectionId);\n      const stillServable =\n        !!bound &&\n        (!spendsCredits(bound, now) || !includedAlternative(binding.modelId)) &&\n        models.includes(binding.modelId) &&\n        canServe(world, session, bound, binding.modelId, now);\n      if (\n        stillServable &&\n        (decision.connectionId !== binding.connectionId || decision.modelId !== binding.modelId)\n      ) {\n        fail(\n          \"SUB-STICK-02\",\n          \"switched account or model while the cache was warm and nothing forced it\",\n        );\n      }\n    }\n  } else {\n    // Only a real workspace model restriction justifies this reason: no\n    // candidate model, the preferred one or an allowed fallback, is allowed.\n    if (\n      decision.reason === \"model_not_allowed\" &&\n      models.some((modelId) => modelAllowed(world, session, modelId))\n    ) {\n      fail(\"SUB-WAIT-01\", \"waited for a model restriction although an allowed model exists\");\n    }\n    const pinned = session.pinnedConnectionId\n      ? byId(world.connections, session.pinnedConnectionId)\n      : undefined;\n    const pinnedServable =\n      !!pinned && canServe(world, session, pinned, session.preferredModelId, now);\n    if (session.pinnedConnectionId ? pinnedServable : anyServable) {\n      fail(\"SUB-WAIT-01\", \"waited although an eligible account had capacity\");\n    }\n    // The wait explains itself (SUB-WAIT-02, D-24) and names the earliest time\n    // a known reset makes the session runnable (SUB-WAIT-02, D-22).\n    const allowedModels = models.filter((modelId) => modelAllowed(world, session, modelId));\n    const never = !!session.pinnedConnectionId && pinnedNeverServes(world, session, pinned);\n    const expectedReason: WaitReason =\n      allowedModels.length === 0\n        ? \"model_not_allowed\"\n        : session.pinnedConnectionId\n          ? never\n            ? \"pinned_account_ineligible\"\n            : \"pinned_account_unavailable\"\n          : \"no_eligible_capacity\";\n    if (decision.reason !== expectedReason) {\n      fail(\n        never && decision.reason === \"pinned_account_unavailable\" ? \"SUB-ACCESS-06\" : \"SUB-WAIT-02\",\n        \"explained the wait with \" + decision.reason + \" instead of \" + expectedReason,\n      );\n    }\n    const expectedReset =\n      expectedReason === \"pinned_account_unavailable\"\n        ? earliestRunnableAt(world, now, (at) =>\n            canServe(world, session, pinned!, session.preferredModelId, at),\n          )\n        : expectedReason === \"no_eligible_capacity\"\n          ? earliestRunnableAt(world, now, (at) =>\n              allowedModels.some((modelId) =>\n                world.connections.some(\n                  (connection) =>\n                    (connection.ownership.kind === \"shared\" || personalFallback) &&\n                    canServe(world, session, connection, modelId, at),\n                ),\n              ),\n            )\n          : null;\n    if (decision.reason === expectedReason && decision.earliestResetAt !== expectedReset) {\n      fail(\"SUB-WAIT-02\", \"did not name the earliest time a reset makes the session runnable\");\n    }\n  }\n  return violations;\n}\n","/**\n * Bridge from the production placement input to the independent reference\n * model, so the reference `checkDecision` can judge a production decision for\n * a real world (the worker's shadow comparison). It maps the production\n * concepts the reference model does not have onto ones it does, using only the\n * raw inputs, never the production eligibility or placement functions, so a\n * policy bug cannot hide from the checker:\n *\n * - A provider switched off, a compaction provider lock and the workspace\n *   model ceiling become the workspace's allowed model list.\n * - Shared connections a workspace does not manage while organization\n *   accounts are off, and personal connections without frozen personal\n *   authority for their provider, are left out (nothing may use them).\n * - Quota and cache lifetimes are decoded here, independently of the\n *   production decoders, from the raw shared quota model (design 2.2) and\n *   cache facts (design 6.1), including the input's staleness bounds. An\n *   exhaustion with no known reset stays exhausted, including when evaluating\n *   the separate permission to spend extra credits.\n * - An exact cache lifetime on the binding is that provider's lifetime.\n * - An explicit binding is the reference model's pin.\n * - Model tiers pass through as declared, and the fallback order keeps its\n *   own entries only, so the reference derives its own default order for a\n *   preferred model without an entry (D-35).\n */\nimport * as reference from \"./reference-model\";\nimport { inferenceSourceFor } from \"./settings\";\nimport type {\n  CacheFacts,\n  PlacementDecision,\n  PlacementInput,\n  SubscriptionConnection,\n  SubscriptionQuota,\n} from \"./types\";\n\n/** Design 6.1: an unmeasured idle cut-off counts as one hour. */\nconst UNMEASURED_CUTOFF_MS = 3_600_000;\n\nfunction lifetimeOf(facts: CacheFacts | undefined): number {\n  if (facts?.kind === \"exact_ttl\") return Math.max(0, facts.ttlMs);\n  return Math.max(0, facts?.cutoffMs ?? UNMEASURED_CUTOFF_MS);\n}\n\ntype DecodedQuota = reference.Quota;\n\n/**\n * Design 2.2 read from the raw fields: a running deadline or exhausted\n * window is exhaustion until its latest reset; any fresh observed window, an\n * exhausted window whose reset passed, or a passed quota deadline is known\n * capacity; nothing else is known (SUB-ELIG-06).\n */\nfunction decodeQuota(\n  quota: SubscriptionQuota | null,\n  now: number,\n  staleAfterMs: number | undefined,\n): DecodedQuota {\n  if (quota === null) return { kind: \"unknown\" };\n  const fresh =\n    staleAfterMs === undefined ||\n    (quota.observedAt !== null && now - quota.observedAt <= staleAfterMs);\n  const blockingResets: (number | null)[] = [];\n  if (quota.exhaustedUntil !== null && quota.exhaustedUntil > now) {\n    blockingResets.push(quota.exhaustedUntil);\n  }\n  for (const window of quota.windows) {\n    if (window.status === \"exhausted\" && (window.resetsAt === null || window.resetsAt > now)) {\n      blockingResets.push(window.resetsAt);\n    }\n  }\n  if (blockingResets.length > 0) {\n    return blockingResets.includes(null)\n      ? { kind: \"exhausted\", resetsAt: null }\n      : { kind: \"exhausted\", resetsAt: Math.max(...(blockingResets as number[])) };\n  }\n  const observed =\n    quota.windows.some((window) => window.status !== \"unknown\") ||\n    (quota.exhaustedUntil !== null && quota.exhaustedKind === \"quota\");\n  return observed && fresh ? { kind: \"available\" } : { kind: \"unknown\" };\n}\n\nfunction referenceConnection(\n  input: PlacementInput,\n  connection: SubscriptionConnection,\n): reference.Connection {\n  const providerModels = input.models\n    .filter((model) => model.provider === connection.provider)\n    .map((model) => model.id);\n  const entitled = (connection.entitledModelIds ?? providerModels).filter(\n    (modelId) => !connection.excludedModelIds.includes(modelId),\n  );\n  const capacity = decodeQuota(\n    connection.quota,\n    input.now,\n    input.quotaStaleAfterMs?.[connection.provider],\n  );\n  const ownership: reference.Connection[\"ownership\"] =\n    connection.ownership.kind === \"personal\"\n      ? { kind: \"personal\", ownerId: connection.ownership.ownerMembershipId }\n      : {\n          kind: \"shared\",\n          scope:\n            connection.ownership.scope.kind === \"organization\"\n              ? { kind: \"organization\" }\n              : connection.ownership.scope.kind === \"workspaces\"\n                ? {\n                    kind: \"workspaces\",\n                    workspaceIds: connection.ownership.scope.workspaceIds,\n                    personalWorkspaces: connection.ownership.scope.allowPersonalWorkspaces,\n                  }\n                : { kind: \"people\", personIds: connection.ownership.scope.membershipIds },\n        };\n  return {\n    id: connection.id,\n    provider: connection.provider,\n    ownership,\n    healthy: connection.health === \"healthy\",\n    allocatorEnabled: connection.allocatorEnabled,\n    extraCreditsEnabled: connection.extraCreditsEnabled === true,\n    refusalUntil: connection.quota?.exhaustedUntil ?? null,\n    entitledModels: entitled,\n    allowedModelIds: connection.allowedModelIds,\n    ...(connection.assignmentPolicies === undefined\n      ? {}\n      : { assignmentPolicies: connection.assignmentPolicies }),\n    modelCooldowns: { ...connection.quota?.modelCooldowns },\n    quota: capacity,\n  };\n}\n\n/** The reference world equivalent to one production placement input. */\nexport function toReferenceWorld(input: PlacementInput): {\n  world: reference.World;\n  sessionId: string;\n} {\n  const { session, settings, workspace } = input;\n  const switches = (provider: string) => settings.providers[provider];\n  const ceiling = input.models\n    .filter(\n      (model) =>\n        (workspace.allowedModelIds === null || workspace.allowedModelIds.includes(model.id)) &&\n        switches(model.provider)?.enabled !== false &&\n        (session.compactionProviderLock === null ||\n          model.provider === session.compactionProviderLock),\n    )\n    .map((model) => model.id);\n  const usable = input.connections.filter((connection) => {\n    if (connection.ownership.kind === \"personal\") {\n      const owner = connection.ownership.ownerMembershipId;\n      return session.personalAuthority.some(\n        (authority) =>\n          authority.provider === connection.provider &&\n          authority.ownerMembershipId === owner &&\n          (!authority.sharedSessionChoice ||\n            (authority.sharedSessionChoice.sessionId === session.id &&\n              authority.sharedSessionChoice.connectionId === connection.id)),\n      );\n    }\n    if (connection.assignmentPolicies !== undefined) return true;\n    const source = inferenceSourceFor(settings, connection.provider);\n    const managedHere = connection.ownership.managedByWorkspaceId === workspace.id;\n    if (source === \"workspace\") return managedHere;\n    if (source === \"organization\") return !managedHere;\n    return source === \"automatic\" || managedHere;\n  });\n  const providers = new Set([\n    ...input.models.map((model) => model.provider),\n    ...input.connections.map((connection) => connection.provider),\n  ]);\n  const binding = session.binding;\n  return {\n    sessionId: session.id,\n    world: {\n      settings: {\n        organization: {\n          rotation: settings.rotation,\n          inferenceSource: Object.fromEntries(\n            [...providers].map((provider) => [provider, inferenceSourceFor(settings, provider)]),\n          ),\n          crossProviderFailover: settings.crossProviderFailover,\n          fallbackOrder: Object.fromEntries(\n            Object.entries(settings.fallbackOrder).map(([modelId, order]) => [modelId, [...order]]),\n          ),\n          personalConnectionsAllowed: settings.personalConnectionsAllowed,\n          personalFallbackAllowed: settings.personalFallbackAllowed,\n        },\n        locked: [],\n        workspaceOverrides: {},\n      },\n      workspaces: [\n        {\n          id: workspace.id,\n          kind: workspace.kind,\n          ownerId: workspace.ownerMembershipId,\n          allowedModels: ceiling,\n        },\n      ],\n      people: input.people.map((person) => ({\n        id: person.membershipId,\n        active: person.active,\n        personalFallbackOptIn: person.personalFallbackOptIn,\n      })),\n      models: input.models.map((model) => ({\n        id: model.id,\n        provider: model.provider,\n        reasoningLevels: model.reasoningLevels,\n        tier: model.tier ?? null,\n      })),\n      connections: usable.map((connection) => referenceConnection(input, connection)),\n      sessions: [\n        {\n          id: session.id,\n          workspaceId: session.workspaceId,\n          visibility: session.visibility,\n          ownerId: session.ownerMembershipId,\n          sharedPersonalChoices: session.personalAuthority.flatMap((authority) =>\n            authority.sharedSessionChoice?.sessionId === session.id\n              ? [\n                  {\n                    connectionId: authority.sharedSessionChoice.connectionId,\n                    ownerId: authority.ownerMembershipId,\n                  },\n                ]\n              : [],\n          ),\n          preferredModelId: session.preferredModelId,\n          reasoningLevel: session.reasoningLevel,\n          binding: binding\n            ? {\n                connectionId: binding.connectionId,\n                modelId: binding.modelId,\n                lastUsedAt: binding.lastModelCallAt,\n              }\n            : null,\n          pinnedConnectionId: binding?.choice === \"explicit\" ? binding.connectionId : null,\n          onlyThisModel: session.onlyThisModel,\n          reselectionPoint: session.reselectionPoints.length > 0,\n        },\n      ],\n      cacheTtlMs: Object.fromEntries(\n        [...providers].map((provider) => [\n          provider,\n          binding?.cacheTtlMs != null &&\n          input.connections.find((connection) => connection.id === binding.connectionId)\n            ?.provider === provider\n            ? Math.max(0, binding.cacheTtlMs)\n            : lifetimeOf(input.cacheFacts[provider]),\n        ]),\n      ),\n    },\n  };\n}\n\n/**\n * The reference-shaped view of a production decision on this input. A wait\n * the production policy explains with the compaction lock is, to the\n * reference model (which sees the lock as a model restriction), a wait on the\n * restriction when no candidate model is left, else a wait for capacity.\n */\nexport function toReferenceDecision(\n  decision: PlacementDecision,\n  input: PlacementInput,\n): reference.Decision {\n  if (decision.kind === \"run\") {\n    return {\n      kind: \"run\",\n      connectionId: decision.connectionId,\n      modelId: decision.modelId,\n      reasoningLevel: decision.reasoningLevel,\n      switch: decision.switch,\n    };\n  }\n  if (decision.reason !== \"compaction_provider_locked\") {\n    return { kind: \"wait\", reason: decision.reason, earliestResetAt: decision.earliestResetAt };\n  }\n  const { world, sessionId } = toReferenceWorld(input);\n  const session = world.sessions.find((candidate) => candidate.id === sessionId)!;\n  const allowed = world.workspaces[0]!.allowedModels;\n  const anyAllowed = reference\n    .candidateModels(world, session)\n    .some((modelId) => allowed === null || allowed.includes(modelId));\n  return {\n    kind: \"wait\",\n    reason: anyAllowed ? \"no_eligible_capacity\" : \"model_not_allowed\",\n    earliestResetAt: decision.earliestResetAt,\n  };\n}\n\n/** The reference model's invariant violations for a production decision on this input. */\nexport function checkPlacementDecision(\n  input: PlacementInput,\n  decision: PlacementDecision,\n): reference.InvariantViolation[] {\n  const { world, sessionId } = toReferenceWorld(input);\n  return reference.checkDecision(world, sessionId, input.now, toReferenceDecision(decision, input));\n}\n"],"mappings":";;;;;AA2FA,IAAM,QAA2B,CAAC,YAAY,YAAY,MAAM;AA8EhE,IAAM,eAAsC;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAQO,SAAS,kBAAkB,QAAwB,aAAwC;AAChG,QAAM,WAAW,OAAO,mBAAmB,WAAW,KAAK,CAAC;AAC5D,QAAM,SAAS,EAAE,GAAG,OAAO,aAAa;AACxC,QAAM,UAAU,CAAC;AACjB,aAAW,OAAO,cAAc;AAC9B,UAAM,aAAa,SAAS,GAAG,MAAM,UAAa,CAAC,OAAO,OAAO,SAAS,GAAG;AAC7E,QAAI,YAAY;AACd,MAAC,OAAuC,GAAG,IACzC,QAAQ,cAAc,QAAQ,qBAAqB,QAAQ,kBACvD,EAAE,GAAG,OAAO,aAAa,GAAG,GAAG,GAAI,SAAS,GAAG,EAAa,IAC5D,SAAS,GAAG;AAAA,IACpB;AACA,YAAQ,GAAG,IAAI,aAAa,cAAc;AAAA,EAC5C;AACA,SAAO,EAAE,QAAQ,QAAQ;AAC3B;AAIA,SAAS,KAA+B,OAAqB,IAA2B;AACtF,SAAO,MAAM,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE;AAC5C;AAEO,SAAS,YAAY,OAAc,SAAyB,KAAsB;AACvF,QAAM,aAAa,KAAK,MAAM,aAAa,QAAQ,YAAY;AAC/D,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,MAAM,MAAM,WAAW,WAAW,QAAQ,KAAK;AACrD,SAAO,MAAM,QAAQ,cAAc;AACrC;AAEA,SAAS,YAAY,YAAwB,KAAsB;AAEjE,SACE,WAAW,MAAM,SAAS,eACzB,WAAW,MAAM,aAAa,QAAQ,WAAW,MAAM,YAAY,OACpE,cAAc,YAAY,GAAG;AAEjC;AAEA,SAAS,cAAc,YAAwB,KAAsB;AACnE,SACE,WAAW,wBAAwB,SAClC,WAAW,gBAAgB,QAAQ,WAAW,gBAAgB,QAC/D,WAAW,MAAM,SAAS,gBACzB,WAAW,MAAM,aAAa,QAAQ,WAAW,MAAM,WAAW;AAEvE;AAEA,SAAS,aAAa,OAAc,SAAkB,SAA2B;AAC/E,QAAM,YAAY,KAAK,MAAM,YAAY,QAAQ,WAAW;AAC5D,SACE,CAAC,CAAC,cAAc,UAAU,kBAAkB,QAAQ,UAAU,cAAc,SAAS,OAAO;AAEhG;AAOO,SAAS,qBACd,OACA,SACA,YAC2B;AAC3B,QAAM,UAAU,CAAC,aAAqB,aAAqB,EAAE,aAAa,QAAQ;AAClF,QAAM,YAAY,KAAK,MAAM,YAAY,QAAQ,WAAW;AAC5D,MAAI,CAAC,UAAW,QAAO,QAAQ,eAAe,oCAAoC;AAClF,MAAI,CAAC,WAAW,WAAW,CAAC,WAAW,kBAAkB;AACvD,WAAO,QAAQ,eAAe,sDAAsD;AAAA,EACtF;AACA,MAAI,WAAW,UAAU,SAAS,YAAY;AAC5C,UAAM,WAAW,kBAAkB,MAAM,UAAU,UAAU,EAAE,EAAE;AACjE,UAAM,QAAQ,KAAK,MAAM,QAAQ,WAAW,UAAU,OAAO;AAC7D,UAAM,gBACH,QAAQ,YAAY,QACnB,QAAQ,uBAAuB;AAAA,MAC7B,CAAC,WAAW,OAAO,iBAAiB,WAAW,MAAM,OAAO,YAAY,OAAO;AAAA,IACjF,KACD,QAAQ,YAAY,WAAW,UAAU,YACvC,QAAQ,eAAe,aACrB,UAAU,SAAS,cAAc,UAAU,YAAY,WAAW,UAAU;AACnF,QAAI,CAAC,SAAS,4BAA4B;AACxC,aAAO,QAAQ,cAAc,wCAAwC;AAAA,IACvE;AACA,QAAI,CAAC,OAAO,OAAQ,QAAO,QAAQ,iBAAiB,mCAAmC;AACvF,QAAI,CAAC,eAAe;AAClB,aAAO,QAAQ,eAAe,2DAA2D;AAAA,IAC3F;AACA,WAAO;AAAA,EACT;AACA,MAAI,WAAW,uBAAuB,QAAW;AAC/C,UAAM,SACJ,kBAAkB,MAAM,UAAU,UAAU,EAAE,EAAE,OAAO,kBACrD,WAAW,QACb,KAAK;AACP,UAAM,WAAW,WAAW,mBAAmB;AAAA,MAC7C,CAAC,WACC,OAAO,gBAAgB,UAAU,OAChC,WAAW,eAAe,OAAO,kBAAkB;AAAA,IACxD;AACA,QAAI,SAAS,WAAW,GAAG;AACzB,aAAO,QAAQ,cAAc,yDAAyD;AAAA,IACxF;AAAA,EACF;AACA,QAAM,QAAQ,WAAW,UAAU;AACnC,QAAM,UACJ,MAAM,SAAS,mBACd,MAAM,SAAS,eACZ,MAAM,aAAa,SAAS,UAAU,EAAE,KACvC,UAAU,SAAS,cAAc,MAAM,qBACxC,QAAQ,YAAY,QAAQ,MAAM,UAAU,SAAS,QAAQ,OAAO;AAC1E,SAAO,UAAU,OAAO,QAAQ,eAAe,wCAAwC;AACzF;AAGO,SAAS,aAAa,OAAc,SAAkB,YAAiC;AAC5F,SAAO,qBAAqB,OAAO,SAAS,UAAU,MAAM;AAC9D;AAMO,SAAS,eACd,OACA,SACA,YACA,SACA,KAC2B;AAC3B,QAAM,QAAQ,KAAK,MAAM,QAAQ,OAAO;AACxC,MACE,CAAC,SACD,MAAM,aAAa,WAAW,YAC9B,CAAC,WAAW,eAAe,SAAS,OAAO,GAC3C;AACA,WAAO,EAAE,aAAa,eAAe,SAAS,gDAAgD;AAAA,EAChG;AACA,MAAI,WAAW,mBAAmB,QAAQ,CAAC,WAAW,gBAAgB,SAAS,OAAO,GAAG;AACvF,WAAO;AAAA,MACL,aAAa;AAAA,MACb,SAAS;AAAA,IACX;AAAA,EACF;AACA,MAAI,WAAW,uBAAuB,QAAW;AAC/C,UAAM,YAAY,KAAK,MAAM,YAAY,QAAQ,WAAW;AAC5D,UAAM,SACJ,kBAAkB,MAAM,UAAU,UAAU,EAAE,EAAE,OAAO,kBACrD,WAAW,QACb,KAAK;AACP,UAAM,WAAW,WAAW,mBAAmB;AAAA,MAC7C,CAAC,WACC,OAAO,gBAAgB,UAAU,OAChC,WAAW,eAAe,OAAO,kBAAkB;AAAA,IACxD;AACA,UAAM,2BAA2B,SAAS,KAAK,CAAC,WAAW,OAAO,gBAAgB;AAClF,QAAI,CAAC,0BAA0B;AAC7B,aAAO;AAAA,QACL,aAAa;AAAA,QACb,SAAS;AAAA,MACX;AAAA,IACF;AACA,QACE,CAAC,SAAS;AAAA,MACR,CAAC,WACC,OAAO,qBACN,OAAO,oBAAoB,QAAQ,OAAO,gBAAgB,SAAS,OAAO,MAC3E,CAAC,OAAO,kBAAkB,SAAS,OAAO;AAAA,IAC9C,GACA;AACA,YAAM,qBAAqB,SAAS;AAAA,QAClC,CAAC,YACE,OAAO,oBAAoB,QAAQ,OAAO,gBAAgB,SAAS,OAAO,MAC3E,CAAC,OAAO,kBAAkB,SAAS,OAAO;AAAA,MAC9C;AACA,aAAO;AAAA,QACL,aAAa,qBAAqB,gBAAgB;AAAA,QAClD,SAAS,qBACL,6EACA;AAAA,MACN;AAAA,IACF;AAAA,EACF;AACA,OAAK,WAAW,iBAAiB,OAAO,KAAK,aAAa,KAAK;AAC7D,WAAO,EAAE,aAAa,eAAe,SAAS,4CAA4C;AAAA,EAC5F;AACA,MAAI,CAAC,aAAa,OAAO,SAAS,OAAO,GAAG;AAC1C,WAAO,EAAE,aAAa,eAAe,SAAS,yCAAyC;AAAA,EACzF;AACA,QAAM,gBAAgB,qBAAqB,OAAO,SAAS,UAAU;AACrE,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,YAAY,YAAY,GAAG,GAAG;AACjC,WAAO,EAAE,aAAa,eAAe,SAAS,kCAAkC;AAAA,EAClF;AACA,SAAO;AACT;AAEO,SAAS,SACd,OACA,SACA,YACA,SACA,KACS;AACT,SAAO,eAAe,OAAO,SAAS,YAAY,SAAS,GAAG,MAAM;AACtE;AASO,SAAS,WAAW,WAAmB,cAA8B;AAC1E,MAAI,OAAO;AACX,QAAM,MAAM,YAAY,MAAM;AAC9B,WAAS,QAAQ,GAAG,QAAQ,IAAI,QAAQ,SAAS,GAAG;AAClD,YAAQ,IAAI,WAAW,KAAK;AAC5B,WAAO,KAAK,KAAK,MAAM,QAAU,MAAM;AAAA,EACzC;AAEA,SAAO,KAAK,KAAK,OAAQ,SAAS,IAAK,UAAU,MAAM;AACvD,SAAO,KAAK,KAAK,OAAQ,SAAS,IAAK,UAAU,MAAM;AACvD,UAAQ,OAAQ,SAAS,QAAS;AACpC;AASA,SAAS,KAAK,OAAc,SAAkB,YAA6C;AACzF,MAAI,WAAW,WAAW,EAAG,QAAO;AACpC,QAAM,WAAW,WAAW,CAAC,EAAG;AAChC,QAAM,WACJ,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE,OAAO,SAAS,QAAQ,KAC9E,EAAE,MAAM,SAAS;AACpB,MAAI,SAAS,SAAS,iBAAiB;AACrC,UAAM,UAAU,WAAW,KAAK,CAAC,cAAc,UAAU,OAAO,SAAS,mBAAmB;AAC5F,QAAI,QAAS,QAAO;AAAA,EACtB;AACA,QAAM,SAAS,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,MAAM,UAAU;AACnD,UAAM,SAAS,WAAW,QAAQ,IAAI,KAAK,EAAE,IAAI,WAAW,QAAQ,IAAI,MAAM,EAAE;AAChF,QAAI,WAAW,EAAG,QAAO;AACzB,WAAO,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,KAAK,MAAM,KAAK,IAAI;AAAA,EAC5D,CAAC;AACD,SAAO,OAAO,CAAC;AACjB;AAaO,SAAS,sBACd,OACA,WACA,MACQ;AACR,QAAM,SAAS,MAAM;AACrB,MAAI,OAAO,SAAS,SAAS,EAAG,QAAO;AACvC,MAAI,OAAO,UAAU,EAAG,QAAO,OAAO,CAAC,KAAK;AAC5C,QAAM,SAAS,MAAM,mBAAmB,CAAC;AACzC,QAAM,cAAc,OAAO,QAAQ,SAAS;AAE5C,QAAM,CAAC,WAAW,WAAW,IAC3B,cAAc,KAAK,OAAO,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,OAAO,SAAS,CAAC;AAElF,QAAM,WAAW,CAAC,UAChB,KAAK,IAAI,QAAQ,cAAc,aAAa,OAAO,SAAS,EAAE;AAChE,MAAI,OAAO;AACX,WAAS,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACrD,QAAI,SAAS,KAAK,IAAI,SAAS,IAAI,EAAG,QAAO;AAAA,EAC/C;AACA,SAAO,OAAO,IAAI;AACpB;AAWO,SAAS,iBACd,OACA,UACA,kBACW;AACX,QAAM,YAAY,KAAK,MAAM,QAAQ,gBAAgB;AACrD,MAAI,CAAC,SAAS,yBAAyB,CAAC,UAAW,QAAO,CAAC;AAC3D,QAAM,OAAO,UAAU;AACvB,MAAI,OAAO,SAAS,YAAY,CAAC,MAAM,SAAS,IAAI,EAAG,QAAO,CAAC;AAC/D,QAAM,iBAAiB,CAAC,GAAG,IAAI,IAAI,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,QAAQ,CAAC,CAAC,EAC5E,OAAO,CAAC,aAAa,aAAa,UAAU,QAAQ,EACpD,KAAK;AACR,QAAM,UAAqB,CAAC;AAC5B,aAAW,YAAY,gBAAgB;AACrC,eAAW,SAAS,MAAM,QAAQ;AAChC,UAAI,MAAM,aAAa,YAAY,MAAM,SAAS,KAAM;AACxD,UAAI,MAAM,OAAO,oBAAoB,QAAQ,SAAS,MAAM,EAAE,EAAG;AACjE,cAAQ,KAAK,MAAM,EAAE;AAAA,IACvB;AAAA,EACF;AACA,SAAO,QAAQ,MAAM,GAAG,CAAC;AAC3B;AAOO,SAAS,gBAAgB,OAAc,SAA6B;AACzE,QAAM,WAAW,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE;AACxE,QAAM,YAAY,QAAQ;AAC1B,MAAI,QAAQ,iBAAiB,QAAQ,mBAAoB,QAAO,CAAC,SAAS;AAC1E,QAAM,oBAAoB,KAAK,MAAM,QAAQ,SAAS,GAAG;AACzD,QAAM,WAAW,OAAO,UAAU,eAAe,KAAK,SAAS,eAAe,SAAS;AACvF,QAAM,QAAQ,WACT,SAAS,cAAc,SAAS,KAAK,CAAC,IACvC,iBAAiB,OAAO,UAAU,SAAS;AAG/C,QAAM,YAAY,MAAM;AAAA,IACtB,CAAC,SAAS,OAAO,QACf,YAAY,aACZ,IAAI,QAAQ,OAAO,MAAM,UACxB,KAAK,MAAM,QAAQ,OAAO,GAAG,aAAa,qBACzC,SAAS;AAAA,EACf;AACA,SAAO,CAAC,WAAW,GAAG,SAAS;AACjC;AAQO,SAAS,kBACd,OACA,SACA,QACS;AACT,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,QAAQ,KAAK,MAAM,QAAQ,QAAQ,gBAAgB;AACzD,MAAI,CAAC,SAAS,MAAM,aAAa,OAAO,SAAU,QAAO;AACzD,MAAI,CAAC,OAAO,eAAe,SAAS,MAAM,EAAE,EAAG,QAAO;AACtD,MAAI,OAAO,mBAAmB,QAAQ,CAAC,OAAO,gBAAgB,SAAS,MAAM,EAAE,EAAG,QAAO;AACzF,MAAI,OAAO,uBAAuB,QAAW;AAC3C,UAAM,SACJ,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE,OAAO,kBAC5D,OAAO,QACT,KAAK;AACP,UAAM,cAAc,OAAO,mBAAmB;AAAA,MAC5C,CAAC,WACC,OAAO,gBAAgB,QAAQ,gBAC9B,WAAW,eAAe,OAAO,kBAAkB;AAAA,IACxD;AACA,QACE,CAAC,YAAY;AAAA,MACX,CAAC,YACE,OAAO,oBAAoB,QAAQ,OAAO,gBAAgB,SAAS,MAAM,EAAE,MAC5E,CAAC,OAAO,kBAAkB,SAAS,MAAM,EAAE;AAAA,IAC/C,GACA;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,CAAC,aAAa,OAAO,SAAS,EAAE,GAAG,QAAQ,SAAS,MAAM,kBAAkB,KAAK,CAAC;AAC3F;AAGA,SAAS,iBAAiB,OAAc,KAAuB;AAC7D,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,cAAc,MAAM,aAAa;AAC1C,QACE,WAAW,MAAM,SAAS,eAC1B,WAAW,MAAM,aAAa,QAC9B,WAAW,MAAM,WAAW,KAC5B;AACA,YAAM,IAAI,WAAW,MAAM,QAAQ;AAAA,IACrC;AACA,QAAI,WAAW,gBAAgB,QAAQ,WAAW,eAAe;AAC/D,YAAM,IAAI,WAAW,YAAY;AACnC,eAAW,SAAS,OAAO,OAAO,WAAW,kBAAkB,CAAC,CAAC,GAAG;AAClE,UAAI,QAAQ,IAAK,OAAM,IAAI,KAAK;AAAA,IAClC;AAAA,EACF;AACA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU,OAAO,KAAK;AACtD;AAMO,SAAS,mBACd,OACA,KACA,YACe;AACf,SAAO,iBAAiB,OAAO,GAAG,EAAE,KAAK,UAAU,KAAK;AAC1D;AAEA,SAAS,oBAAoB,OAAc,SAA2B;AACpE,MAAI,QAAQ,YAAY,KAAM,QAAO;AACrC,MACE,QAAQ,eAAe,YACvB,KAAK,MAAM,YAAY,QAAQ,WAAW,GAAG,SAAS;AAEtD,WAAO;AACT,QAAM,WAAW,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE;AACxE,SACG,KAAK,MAAM,YAAY,QAAQ,WAAW,GAAG,SAAS,cACrD,KAAK,MAAM,YAAY,QAAQ,WAAW,GAAG,YAAY,QAAQ,WAClE,SAAS,2BACR,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,OAAO,GAAG;AAE7C;AAOO,SAAS,OAAO,OAAc,WAAmB,KAAuB;AAC7E,QAAM,UAAU,KAAK,MAAM,UAAU,SAAS;AAC9C,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,qBAAqB,SAAS;AAC5D,QAAM,iBAAiB,KAAK,MAAM,QAAQ,QAAQ,gBAAgB;AAClE,QAAM,QAAQ,CAAC,UACb,sBAAsB,KAAK,MAAM,QAAQ,KAAK,GAAI,QAAQ,gBAAgB,cAAc;AAC1F,QAAM,MAAM,CAAC,cAAsB,SAAkB,UAAgC;AAAA,IACnF,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,gBAAgB,MAAM,OAAO;AAAA,IAC7B,QAAQ;AAAA,EACV;AAKA,QAAM,SAAS,gBAAgB,OAAO,OAAO;AAC7C,QAAM,gBAAgB,OAAO,OAAO,CAAC,YAAY,aAAa,OAAO,SAAS,OAAO,CAAC;AACtF,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO,EAAE,MAAM,QAAQ,QAAQ,qBAAqB,iBAAiB,KAAK;AAAA,EAC5E;AAGA,MAAI,QAAQ,oBAAoB;AAC9B,UAAM,SAAS,KAAK,MAAM,aAAa,QAAQ,kBAAkB;AACjE,QAAI,UAAU,SAAS,OAAO,SAAS,QAAQ,QAAQ,kBAAkB,GAAG,GAAG;AAC7E,aAAO,IAAI,OAAO,IAAI,QAAQ,kBAAkB,QAAQ;AAAA,IAC1D;AAEA,QAAI,kBAAkB,OAAO,SAAS,MAAM,GAAG;AAC7C,aAAO,EAAE,MAAM,QAAQ,QAAQ,6BAA6B,iBAAiB,KAAK;AAAA,IACpF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,iBAAiB;AAAA,QAAmB;AAAA,QAAO;AAAA,QAAK,CAAC,OAC/C,SAAS,OAAO,SAAS,QAAS,QAAQ,kBAAkB,EAAE;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,QAAQ;AACxB,QAAM,QAAQ,UAAU,KAAK,MAAM,aAAa,QAAQ,YAAY,IAAI;AACxE,QAAM,mBAAmB,oBAAoB,OAAO,OAAO;AAC3D,QAAM,kBACJ,CAAC,CAAC,WACF,CAAC,CAAC,SACF,OAAO,SAAS,QAAQ,OAAO,KAC/B,SAAS,OAAO,SAAS,OAAO,QAAQ,SAAS,GAAG;AAGtD,QAAM,sBAAsB,CAAC,YAC3B,MAAM,YAAY;AAAA,IAChB,CAAC,gBACE,WAAW,UAAU,SAAS,YAAY,qBAC3C,CAAC,cAAc,YAAY,GAAG,KAC9B,SAAS,OAAO,SAAS,YAAY,SAAS,GAAG;AAAA,EACrD;AACF,MACE,WACA,SACA,mBACA,CAAC,QAAQ,oBACT,YAAY,OAAO,SAAS,GAAG,MAC9B,CAAC,cAAc,OAAO,GAAG,KAAK,CAAC,oBAAoB,QAAQ,OAAO,IACnE;AACA,WAAO,IAAI,QAAQ,cAAc,QAAQ,SAAS,QAAQ;AAAA,EAC5D;AAIA,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,QAAQ,GAAG;AAC/C,UAAM,WAAW,MAAM,YAAY;AAAA,MACjC,CAAC,gBACE,WAAW,UAAU,SAAS,YAAY,qBAC3C,SAAS,OAAO,SAAS,YAAY,SAAS,GAAG;AAAA,IACrD;AACA,UAAM,WAAW,SAAS,OAAO,CAAC,eAAe,CAAC,cAAc,YAAY,GAAG,CAAC;AAChF,UAAM,WAAW,SAAS,SAAS,WAAW;AAC9C,UAAM,SAAS,SAAS,OAAO,CAAC,eAAe,WAAW,UAAU,SAAS,QAAQ;AACrF,UAAM,WAAW,SAAS,OAAO,CAAC,eAAe,WAAW,UAAU,SAAS,UAAU;AACzF,UAAM,SACJ,KAAK,OAAO,SAAS,MAAM,MAAM,mBAAmB,KAAK,OAAO,SAAS,QAAQ,IAAI;AACvF,QAAI,CAAC,OAAQ;AACb,QAAI;AACJ,QAAI,CAAC,QAAS,QAAO;AAAA,aACZ,QAAQ,iBAAiB,OAAO,MAAM,QAAQ,YAAY,QAAS,QAAO;AAAA,aAC1E,UAAU,KAAK,QAAQ,YAAY,QAAS,QAAO;AAAA,aACnD,QAAQ;AACf,aACE,KAAK,MAAM,QAAQ,OAAO,GAAG,aAC7B,KAAK,MAAM,QAAQ,QAAQ,gBAAgB,GAAG,WAC1C,2BACA;AAAA,aACC,gBAAiB,QAAO;AAAA,QAC5B,QAAO;AACZ,WAAO,IAAI,OAAO,IAAI,SAAS,IAAI;AAAA,EACrC;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,iBAAiB;AAAA,MAAmB;AAAA,MAAO;AAAA,MAAK,CAAC,OAC/C,cAAc;AAAA,QAAK,CAAC,YAClB,MAAM,YAAY;AAAA,UAChB,CAAC,gBACE,WAAW,UAAU,SAAS,YAAY,qBAC3C,SAAS,OAAO,SAAS,YAAY,SAAS,EAAE;AAAA,QACpD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAGO,SAAS,cACd,OACA,WACA,UACA,KACO;AACP,MAAI,SAAS,SAAS,MAAO,QAAO;AACpC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,UAAU,MAAM,SAAS;AAAA,MAAI,CAAC,YAC5B,QAAQ,OAAO,YACX;AAAA,QACE,GAAG;AAAA,QACH,SAAS;AAAA,UACP,cAAc,SAAS;AAAA,UACvB,SAAS,SAAS;AAAA,UAClB,YAAY;AAAA,QACd;AAAA,MACF,IACA;AAAA,IACN;AAAA,EACF;AACF;AAWO,SAAS,cACd,OACA,WACA,KACA,UACsB;AACtB,QAAM,aAAmC,CAAC;AAC1C,QAAM,UAAU,KAAK,MAAM,UAAU,SAAS;AAC9C,QAAM,WAAW,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE;AACxE,QAAM,SAAS,gBAAgB,OAAO,OAAO;AAC7C,QAAM,OAAO,CAAC,aAAqB,YAAoB,WAAW,KAAK,EAAE,aAAa,QAAQ,CAAC;AAE/F,QAAM,mBAAmB,oBAAoB,OAAO,OAAO;AAC3D,QAAM,iBAAiB,CAAC,SAAkB,YACxC,MAAM,YAAY;AAAA,IAChB,CAAC,eACC,WAAW,UAAU,SAAS,aAC7B,WAAW,CAAC,cAAc,YAAY,GAAG,MAC1C,SAAS,OAAO,SAAS,YAAY,SAAS,GAAG;AAAA,EACrD;AACF,QAAM,wBAAwB,CAAC,YAC7B,MAAM,YAAY;AAAA,IAChB,CAAC,eACC,SAAS,OAAO,SAAS,YAAY,SAAS,GAAG,MAChD,WAAW,UAAU,SAAS,YAAY;AAAA,EAC/C;AACF,QAAM,cAAc,OAAO,KAAK,qBAAqB;AACrD,QAAM,UAAU,QAAQ;AACxB,QAAM,cAAc,CAAC,CAAC,WAAW,CAAC,QAAQ,oBAAoB,YAAY,OAAO,SAAS,GAAG;AAE7F,MAAI,SAAS,SAAS,OAAO;AAC3B,UAAM,aAAa,KAAK,MAAM,aAAa,SAAS,YAAY;AAChE,QAAI,CAAC,YAAY;AACf,WAAK,eAAe,mCAAmC;AACvD,aAAO;AAAA,IACT;AACA,UAAM,aAAa,eAAe,OAAO,SAAS,YAAY,SAAS,SAAS,GAAG;AACnF,QAAI,YAAY;AACd,iBAAW,KAAK,UAAU;AAC1B,aAAO;AAAA,IACT;AACA,QAAI,QAAQ,sBAAsB,SAAS,iBAAiB,QAAQ,oBAAoB;AACtF,WAAK,cAAc,yCAAyC;AAAA,IAC9D;AACA,QAAI,CAAC,OAAO,SAAS,SAAS,OAAO,GAAG;AACtC,WAAK,eAAe,qDAAqD;AAAA,IAC3E;AACA,UAAM,gBACJ,KAAK,MAAM,QAAQ,SAAS,OAAO,GAAG,aACtC,KAAK,MAAM,QAAQ,QAAQ,gBAAgB,GAAG;AAChD,QAAI,kBAAkB,CAAC,SAAS,yBAAyB,QAAQ,gBAAgB;AAC/E,WAAK,eAAe,qDAAqD;AAAA,IAC3E;AACA,UAAM,gBAAgB;AAAA,MACpB,KAAK,MAAM,QAAQ,SAAS,OAAO;AAAA,MACnC,QAAQ;AAAA,MACR,KAAK,MAAM,QAAQ,QAAQ,gBAAgB;AAAA,IAC7C;AACA,QAAI,SAAS,mBAAmB,eAAe;AAC7C,WAAK,eAAe,iEAAiE;AAAA,IACvF;AAGA,UAAM,cACJ,CAAC,CAAC,WACF,eACA,QAAQ,iBAAiB,SAAS,gBAClC,QAAQ,YAAY,SAAS;AAC/B,QAAI,CAAC,eAAe,CAAC,QAAQ,oBAAoB;AAC/C,YAAM,QAAQ,OAAO,QAAQ,SAAS,OAAO;AAC7C,UAAI,OAAO,MAAM,GAAG,KAAK,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,qBAAqB,GAAG;AACnE,aAAK,eAAe,4DAA4D;AAAA,MAClF;AACA,UACE,WAAW,UAAU,SAAS,eAC7B,CAAC,oBAAoB,eAAe,SAAS,SAAS,cAAc,YAAY,GAAG,CAAC,IACrF;AACA,aAAK,cAAc,uEAAuE;AAAA,MAC5F;AAAA,IACF;AACA,UAAM,sBAAsB,CAAC,YAC3B,MAAM,YAAY;AAAA,MAChB,CAAC,eACE,UAAU,UAAU,SAAS,YAAY,qBAC1C,CAAC,cAAc,WAAW,GAAG,KAC7B,SAAS,OAAO,SAAS,WAAW,SAAS,GAAG;AAAA,IACpD;AACF,QACE,CAAC,QAAQ,sBACT,cAAc,YAAY,GAAG,KAC7B,oBAAoB,SAAS,OAAO,GACpC;AACA,WAAK,kBAAkB,qEAAqE;AAAA,IAC9F;AACA,QAAI,WAAW,eAAe,CAAC,QAAQ,oBAAoB;AACzD,YAAM,QAAQ,KAAK,MAAM,aAAa,QAAQ,YAAY;AAC1D,YAAM,gBACJ,CAAC,CAAC,UACD,CAAC,cAAc,OAAO,GAAG,KAAK,CAAC,oBAAoB,QAAQ,OAAO,MACnE,OAAO,SAAS,QAAQ,OAAO,KAC/B,SAAS,OAAO,SAAS,OAAO,QAAQ,SAAS,GAAG;AACtD,UACE,kBACC,SAAS,iBAAiB,QAAQ,gBAAgB,SAAS,YAAY,QAAQ,UAChF;AACA;AAAA,UACE;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,OAAO;AAGL,QACE,SAAS,WAAW,uBACpB,OAAO,KAAK,CAAC,YAAY,aAAa,OAAO,SAAS,OAAO,CAAC,GAC9D;AACA,WAAK,eAAe,iEAAiE;AAAA,IACvF;AACA,UAAM,SAAS,QAAQ,qBACnB,KAAK,MAAM,aAAa,QAAQ,kBAAkB,IAClD;AACJ,UAAM,iBACJ,CAAC,CAAC,UAAU,SAAS,OAAO,SAAS,QAAQ,QAAQ,kBAAkB,GAAG;AAC5E,QAAI,QAAQ,qBAAqB,iBAAiB,aAAa;AAC7D,WAAK,eAAe,kDAAkD;AAAA,IACxE;AAGA,UAAM,gBAAgB,OAAO,OAAO,CAAC,YAAY,aAAa,OAAO,SAAS,OAAO,CAAC;AACtF,UAAM,QAAQ,CAAC,CAAC,QAAQ,sBAAsB,kBAAkB,OAAO,SAAS,MAAM;AACtF,UAAM,iBACJ,cAAc,WAAW,IACrB,sBACA,QAAQ,qBACN,QACE,8BACA,+BACF;AACR,QAAI,SAAS,WAAW,gBAAgB;AACtC;AAAA,QACE,SAAS,SAAS,WAAW,+BAA+B,kBAAkB;AAAA,QAC9E,6BAA6B,SAAS,SAAS,iBAAiB;AAAA,MAClE;AAAA,IACF;AACA,UAAM,gBACJ,mBAAmB,+BACf;AAAA,MAAmB;AAAA,MAAO;AAAA,MAAK,CAAC,OAC9B,SAAS,OAAO,SAAS,QAAS,QAAQ,kBAAkB,EAAE;AAAA,IAChE,IACA,mBAAmB,yBACjB;AAAA,MAAmB;AAAA,MAAO;AAAA,MAAK,CAAC,OAC9B,cAAc;AAAA,QAAK,CAAC,YAClB,MAAM,YAAY;AAAA,UAChB,CAAC,gBACE,WAAW,UAAU,SAAS,YAAY,qBAC3C,SAAS,OAAO,SAAS,YAAY,SAAS,EAAE;AAAA,QACpD;AAAA,MACF;AAAA,IACF,IACA;AACR,QAAI,SAAS,WAAW,kBAAkB,SAAS,oBAAoB,eAAe;AACpF,WAAK,eAAe,mEAAmE;AAAA,IACzF;AAAA,EACF;AACA,SAAO;AACT;;;ACt4BA,IAAM,uBAAuB;AAE7B,SAAS,WAAW,OAAuC;AACzD,MAAI,OAAO,SAAS,YAAa,QAAO,KAAK,IAAI,GAAG,MAAM,KAAK;AAC/D,SAAO,KAAK,IAAI,GAAG,OAAO,YAAY,oBAAoB;AAC5D;AAUA,SAAS,YACP,OACA,KACA,cACc;AACd,MAAI,UAAU,KAAM,QAAO,EAAE,MAAM,UAAU;AAC7C,QAAM,QACJ,iBAAiB,UAChB,MAAM,eAAe,QAAQ,MAAM,MAAM,cAAc;AAC1D,QAAM,iBAAoC,CAAC;AAC3C,MAAI,MAAM,mBAAmB,QAAQ,MAAM,iBAAiB,KAAK;AAC/D,mBAAe,KAAK,MAAM,cAAc;AAAA,EAC1C;AACA,aAAW,UAAU,MAAM,SAAS;AAClC,QAAI,OAAO,WAAW,gBAAgB,OAAO,aAAa,QAAQ,OAAO,WAAW,MAAM;AACxF,qBAAe,KAAK,OAAO,QAAQ;AAAA,IACrC;AAAA,EACF;AACA,MAAI,eAAe,SAAS,GAAG;AAC7B,WAAO,eAAe,SAAS,IAAI,IAC/B,EAAE,MAAM,aAAa,UAAU,KAAK,IACpC,EAAE,MAAM,aAAa,UAAU,KAAK,IAAI,GAAI,cAA2B,EAAE;AAAA,EAC/E;AACA,QAAM,WACJ,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,WAAW,SAAS,KACzD,MAAM,mBAAmB,QAAQ,MAAM,kBAAkB;AAC5D,SAAO,YAAY,QAAQ,EAAE,MAAM,YAAY,IAAI,EAAE,MAAM,UAAU;AACvE;AAEA,SAAS,oBACP,OACA,YACsB;AACtB,QAAM,iBAAiB,MAAM,OAC1B,OAAO,CAAC,UAAU,MAAM,aAAa,WAAW,QAAQ,EACxD,IAAI,CAAC,UAAU,MAAM,EAAE;AAC1B,QAAM,YAAY,WAAW,oBAAoB,gBAAgB;AAAA,IAC/D,CAAC,YAAY,CAAC,WAAW,iBAAiB,SAAS,OAAO;AAAA,EAC5D;AACA,QAAM,WAAW;AAAA,IACf,WAAW;AAAA,IACX,MAAM;AAAA,IACN,MAAM,oBAAoB,WAAW,QAAQ;AAAA,EAC/C;AACA,QAAM,YACJ,WAAW,UAAU,SAAS,aAC1B,EAAE,MAAM,YAAY,SAAS,WAAW,UAAU,kBAAkB,IACpE;AAAA,IACE,MAAM;AAAA,IACN,OACE,WAAW,UAAU,MAAM,SAAS,iBAChC,EAAE,MAAM,eAAe,IACvB,WAAW,UAAU,MAAM,SAAS,eAClC;AAAA,MACE,MAAM;AAAA,MACN,cAAc,WAAW,UAAU,MAAM;AAAA,MACzC,oBAAoB,WAAW,UAAU,MAAM;AAAA,IACjD,IACA,EAAE,MAAM,UAAU,WAAW,WAAW,UAAU,MAAM,cAAc;AAAA,EAChF;AACN,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,UAAU,WAAW;AAAA,IACrB;AAAA,IACA,SAAS,WAAW,WAAW;AAAA,IAC/B,kBAAkB,WAAW;AAAA,IAC7B,qBAAqB,WAAW,wBAAwB;AAAA,IACxD,cAAc,WAAW,OAAO,kBAAkB;AAAA,IAClD,gBAAgB;AAAA,IAChB,iBAAiB,WAAW;AAAA,IAC5B,GAAI,WAAW,uBAAuB,SAClC,CAAC,IACD,EAAE,oBAAoB,WAAW,mBAAmB;AAAA,IACxD,gBAAgB,EAAE,GAAG,WAAW,OAAO,eAAe;AAAA,IACtD,OAAO;AAAA,EACT;AACF;AAGO,SAAS,iBAAiB,OAG/B;AACA,QAAM,EAAE,SAAS,UAAU,UAAU,IAAI;AACzC,QAAM,WAAW,CAAC,aAAqB,SAAS,UAAU,QAAQ;AAClE,QAAM,UAAU,MAAM,OACnB;AAAA,IACC,CAAC,WACE,UAAU,oBAAoB,QAAQ,UAAU,gBAAgB,SAAS,MAAM,EAAE,MAClF,SAAS,MAAM,QAAQ,GAAG,YAAY,UACrC,QAAQ,2BAA2B,QAClC,MAAM,aAAa,QAAQ;AAAA,EACjC,EACC,IAAI,CAAC,UAAU,MAAM,EAAE;AAC1B,QAAM,SAAS,MAAM,YAAY,OAAO,CAAC,eAAe;AACtD,QAAI,WAAW,UAAU,SAAS,YAAY;AAC5C,YAAM,QAAQ,WAAW,UAAU;AACnC,aAAO,QAAQ,kBAAkB;AAAA,QAC/B,CAAC,cACC,UAAU,aAAa,WAAW,YAClC,UAAU,sBAAsB,UAC/B,CAAC,UAAU,uBACT,UAAU,oBAAoB,cAAc,QAAQ,MACnD,UAAU,oBAAoB,iBAAiB,WAAW;AAAA,MAClE;AAAA,IACF;AACA,QAAI,WAAW,uBAAuB,OAAW,QAAO;AACxD,UAAM,SAAS,mBAAmB,UAAU,WAAW,QAAQ;AAC/D,UAAM,cAAc,WAAW,UAAU,yBAAyB,UAAU;AAC5E,QAAI,WAAW,YAAa,QAAO;AACnC,QAAI,WAAW,eAAgB,QAAO,CAAC;AACvC,WAAO,WAAW,eAAe;AAAA,EACnC,CAAC;AACD,QAAM,YAAY,oBAAI,IAAI;AAAA,IACxB,GAAG,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,QAAQ;AAAA,IAC7C,GAAG,MAAM,YAAY,IAAI,CAAC,eAAe,WAAW,QAAQ;AAAA,EAC9D,CAAC;AACD,QAAM,UAAU,QAAQ;AACxB,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,OAAO;AAAA,MACL,UAAU;AAAA,QACR,cAAc;AAAA,UACZ,UAAU,SAAS;AAAA,UACnB,iBAAiB,OAAO;AAAA,YACtB,CAAC,GAAG,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,mBAAmB,UAAU,QAAQ,CAAC,CAAC;AAAA,UACrF;AAAA,UACA,uBAAuB,SAAS;AAAA,UAChC,eAAe,OAAO;AAAA,YACpB,OAAO,QAAQ,SAAS,aAAa,EAAE,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC;AAAA,UACxF;AAAA,UACA,4BAA4B,SAAS;AAAA,UACrC,yBAAyB,SAAS;AAAA,QACpC;AAAA,QACA,QAAQ,CAAC;AAAA,QACT,oBAAoB,CAAC;AAAA,MACvB;AAAA,MACA,YAAY;AAAA,QACV;AAAA,UACE,IAAI,UAAU;AAAA,UACd,MAAM,UAAU;AAAA,UAChB,SAAS,UAAU;AAAA,UACnB,eAAe;AAAA,QACjB;AAAA,MACF;AAAA,MACA,QAAQ,MAAM,OAAO,IAAI,CAAC,YAAY;AAAA,QACpC,IAAI,OAAO;AAAA,QACX,QAAQ,OAAO;AAAA,QACf,uBAAuB,OAAO;AAAA,MAChC,EAAE;AAAA,MACF,QAAQ,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,QACnC,IAAI,MAAM;AAAA,QACV,UAAU,MAAM;AAAA,QAChB,iBAAiB,MAAM;AAAA,QACvB,MAAM,MAAM,QAAQ;AAAA,MACtB,EAAE;AAAA,MACF,aAAa,OAAO,IAAI,CAAC,eAAe,oBAAoB,OAAO,UAAU,CAAC;AAAA,MAC9E,UAAU;AAAA,QACR;AAAA,UACE,IAAI,QAAQ;AAAA,UACZ,aAAa,QAAQ;AAAA,UACrB,YAAY,QAAQ;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB,uBAAuB,QAAQ,kBAAkB;AAAA,YAAQ,CAAC,cACxD,UAAU,qBAAqB,cAAc,QAAQ,KACjD;AAAA,cACE;AAAA,gBACE,cAAc,UAAU,oBAAoB;AAAA,gBAC5C,SAAS,UAAU;AAAA,cACrB;AAAA,YACF,IACA,CAAC;AAAA,UACP;AAAA,UACA,kBAAkB,QAAQ;AAAA,UAC1B,gBAAgB,QAAQ;AAAA,UACxB,SAAS,UACL;AAAA,YACE,cAAc,QAAQ;AAAA,YACtB,SAAS,QAAQ;AAAA,YACjB,YAAY,QAAQ;AAAA,UACtB,IACA;AAAA,UACJ,oBAAoB,SAAS,WAAW,aAAa,QAAQ,eAAe;AAAA,UAC5E,eAAe,QAAQ;AAAA,UACvB,kBAAkB,QAAQ,kBAAkB,SAAS;AAAA,QACvD;AAAA,MACF;AAAA,MACA,YAAY,OAAO;AAAA,QACjB,CAAC,GAAG,SAAS,EAAE,IAAI,CAAC,aAAa;AAAA,UAC/B;AAAA,UACA,SAAS,cAAc,QACvB,MAAM,YAAY,KAAK,CAAC,eAAe,WAAW,OAAO,QAAQ,YAAY,GACzE,aAAa,WACb,KAAK,IAAI,GAAG,QAAQ,UAAU,IAC9B,WAAW,MAAM,WAAW,QAAQ,CAAC;AAAA,QAC3C,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;AAQO,SAAS,oBACd,UACA,OACoB;AACpB,MAAI,SAAS,SAAS,OAAO;AAC3B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,cAAc,SAAS;AAAA,MACvB,SAAS,SAAS;AAAA,MAClB,gBAAgB,SAAS;AAAA,MACzB,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AACA,MAAI,SAAS,WAAW,8BAA8B;AACpD,WAAO,EAAE,MAAM,QAAQ,QAAQ,SAAS,QAAQ,iBAAiB,SAAS,gBAAgB;AAAA,EAC5F;AACA,QAAM,EAAE,OAAO,UAAU,IAAI,iBAAiB,KAAK;AACnD,QAAM,UAAU,MAAM,SAAS,KAAK,CAAC,cAAc,UAAU,OAAO,SAAS;AAC7E,QAAM,UAAU,MAAM,WAAW,CAAC,EAAG;AACrC,QAAM,aACH,gBAAgB,OAAO,OAAO,EAC9B,KAAK,CAAC,YAAY,YAAY,QAAQ,QAAQ,SAAS,OAAO,CAAC;AAClE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,aAAa,yBAAyB;AAAA,IAC9C,iBAAiB,SAAS;AAAA,EAC5B;AACF;AAGO,SAAS,uBACd,OACA,UACgC;AAChC,QAAM,EAAE,OAAO,UAAU,IAAI,iBAAiB,KAAK;AACnD,SAAiB,cAAc,OAAO,WAAW,MAAM,KAAK,oBAAoB,UAAU,KAAK,CAAC;AAClG;","names":[]}
+{"version":3,"sources":["../src/reference-model.ts","../src/reference-bridge.ts"],"sourcesContent":["/**\n * Independent executable reference model of the subscription account contract\n * (docs/subscription-accounts.md). It is written from the contract, not from\n * the production selection code, so conformance tests can compare production\n * decisions against it. Everything here is pure and deterministic: no clock,\n * database or randomness.\n *\n * It ships in `@opengeni/subscriptions` only so the worker's shadow comparison\n * can run `checkDecision` in production; it is published through the separate\n * `@opengeni/subscriptions/reference` entry point, and the placement modules of\n * this package never import it (a test enforces both directions).\n *\n * The model answers one question: given the world and a session that wants to\n * run a turn now, which account and model must it run on, or why must it wait?\n */\n\nexport type ProviderId = string;\nexport type ModelId = string;\n\nexport type Rotation =\n  | { mode: \"primary_first\"; primaryConnectionId: string | null }\n  | { mode: \"spread\" };\n\nexport type SubscriptionSettings = {\n  /** Per provider; a provider without an entry spreads work. */\n  rotation: Record<ProviderId, Rotation>;\n  /** `automatic` admits both classified shared pools; missing entries retain legacy behavior. */\n  inferenceSource?: Record<ProviderId, \"automatic\" | \"workspace\" | \"organization\">;\n  crossProviderFailover: boolean;\n  /** Ordered fallback models for a preferred model, possibly on other providers. */\n  fallbackOrder: Record<ModelId, ModelId[]>;\n  personalConnectionsAllowed: boolean;\n  personalFallbackAllowed: boolean;\n};\nexport type SettingKey = keyof SubscriptionSettings;\n\nexport type SettingsPolicy = {\n  organization: SubscriptionSettings;\n  locked: readonly SettingKey[];\n  workspaceOverrides: Record<string, Partial<SubscriptionSettings>>;\n};\n\nexport type ConnectionScope =\n  | { kind: \"organization\" }\n  | { kind: \"workspaces\"; workspaceIds: readonly string[]; personalWorkspaces: boolean }\n  | { kind: \"people\"; personIds: readonly string[] };\n\nexport type Quota =\n  | { kind: \"available\" }\n  | { kind: \"unknown\" }\n  | { kind: \"exhausted\"; resetsAt: number | null };\n\nexport type Connection = {\n  id: string;\n  provider: ProviderId;\n  ownership: { kind: \"shared\"; scope: ConnectionScope } | { kind: \"personal\"; ownerId: string };\n  healthy: boolean;\n  allocatorEnabled: boolean;\n  entitledModels: readonly ModelId[];\n  /** Administrator access policy on the connection; null or absent allows every entitled model. */\n  allowedModelIds?: readonly ModelId[] | null;\n  assignmentPolicies?: readonly {\n    workspaceId: string;\n    inferencePool: \"workspace\" | \"organization\";\n    allowedModelIds: readonly ModelId[] | null;\n    excludedModelIds?: readonly ModelId[];\n    allocatorEnabled: boolean;\n    managedByWorkspaceId?: string | null;\n  }[];\n  /** Per-model cooldowns (some providers report model-specific limits). */\n  modelCooldowns?: Readonly<Record<ModelId, number>>;\n  quota: Quota;\n  /** Explicit consent to spend credits after the included allowance (extra-credits providers only). */\n  extraCreditsEnabled?: boolean;\n  /** A provider refusal blocks even paid credits until this deadline. */\n  refusalUntil?: number | null;\n};\n\nexport type Workspace = {\n  id: string;\n  kind: \"shared\" | \"personal\";\n  /** Owner of a Personal workspace. */\n  ownerId: string | null;\n  /** Workspace model restriction; null allows every model. */\n  allowedModels: readonly ModelId[] | null;\n};\n\nexport type Person = { id: string; active: boolean; personalFallbackOptIn: boolean };\n\n/** The contract's closed set of model tiers (D-35). Tiers compare by equality only. */\nexport type Tier = \"frontier\" | \"standard\" | \"fast\";\nconst TIERS: readonly string[] = [\"frontier\", \"standard\", \"fast\"];\n\nexport type Model = {\n  id: ModelId;\n  provider: ProviderId;\n  reasoningLevels: readonly string[];\n  /** The tier its provider declares; absent or null when it declares none. */\n  tier?: Tier | null;\n};\n\nexport type SessionBinding = { connectionId: string; modelId: ModelId; lastUsedAt: number };\n\nexport type Session = {\n  id: string;\n  workspaceId: string;\n  visibility: \"private\" | \"shared\";\n  /** Null only for a deliberately ownerless service session; it can use shared pools only. */\n  ownerId: string | null;\n  /** Exact accepted shared-chat consent; not a new account pool. */\n  sharedPersonalChoices?: readonly { connectionId: string; ownerId: string }[];\n  /** The model the session asked for. */\n  preferredModelId: ModelId;\n  reasoningLevel: string;\n  binding: SessionBinding | null;\n  /** An explicit account choice is a pin: the session waits for it rather than moving. */\n  pinnedConnectionId: string | null;\n  /** \"Only this model\": no cross-provider failover. Same-model account failover still applies. */\n  onlyThisModel: boolean;\n  /** A compaction completed or the model changed since the last placement (SUB-STICK-05). */\n  reselectionPoint?: boolean;\n};\n\nexport type World = {\n  settings: SettingsPolicy;\n  workspaces: readonly Workspace[];\n  people: readonly Person[];\n  models: readonly Model[];\n  connections: readonly Connection[];\n  sessions: readonly Session[];\n  /** Prompt-cache lifetime after the last use, per provider. */\n  cacheTtlMs: Record<ProviderId, number>;\n};\n\nexport type SwitchKind =\n  | \"initial\"\n  | \"sticky\"\n  | \"pinned\"\n  | \"reselected_cold\"\n  | \"failover_same_provider\"\n  | \"failover_cross_provider\"\n  | \"return_to_preferred\";\n\nexport type WaitReason =\n  | \"pinned_account_unavailable\"\n  | \"pinned_account_disabled\"\n  /** The explicit choice can never serve this work until a person changes something (D-24). */\n  | \"pinned_account_ineligible\"\n  | \"no_eligible_capacity\"\n  | \"model_not_allowed\"\n  /** Decided before placement (an unusable accepted authority); never produced here. */\n  | \"accepted_authority_unavailable\";\n\nexport type Decision =\n  | {\n      kind: \"run\";\n      connectionId: string;\n      modelId: ModelId;\n      reasoningLevel: string;\n      switch: SwitchKind;\n    }\n  | { kind: \"wait\"; reason: WaitReason; earliestResetAt: number | null };\n\n// Effective settings\n\nexport type EffectiveSettings = {\n  values: SubscriptionSettings;\n  sources: Record<SettingKey, \"organization\" | \"workspace\">;\n};\n\nconst SETTING_KEYS: readonly SettingKey[] = [\n  \"rotation\",\n  \"inferenceSource\",\n  \"crossProviderFailover\",\n  \"fallbackOrder\",\n  \"personalConnectionsAllowed\",\n  \"personalFallbackAllowed\",\n];\n\n/**\n * SUB-SET-01..03: organization default, unless a workspace overrides an\n * unlocked setting. Per-provider and per-model maps are overridden entry by\n * entry, so a workspace that sets one provider's rotation keeps the others\n * (D-25); the source is \"workspace\" when the workspace overrides any entry.\n */\nexport function effectiveSettings(policy: SettingsPolicy, workspaceId: string): EffectiveSettings {\n  const override = policy.workspaceOverrides[workspaceId] ?? {};\n  const values = { ...policy.organization } as SubscriptionSettings;\n  const sources = {} as Record<SettingKey, \"organization\" | \"workspace\">;\n  for (const key of SETTING_KEYS) {\n    const overridden = override[key] !== undefined && !policy.locked.includes(key);\n    if (overridden) {\n      (values as Record<SettingKey, unknown>)[key] =\n        key === \"rotation\" || key === \"inferenceSource\" || key === \"fallbackOrder\"\n          ? { ...policy.organization[key], ...(override[key] as object) }\n          : override[key];\n    }\n    sources[key] = overridden ? \"workspace\" : \"organization\";\n  }\n  return { values, sources };\n}\n\n// Eligibility\n\nfunction byId<T extends { id: string }>(items: readonly T[], id: string): T | undefined {\n  return items.find((item) => item.id === id);\n}\n\nexport function isCacheWarm(world: World, binding: SessionBinding, now: number): boolean {\n  const connection = byId(world.connections, binding.connectionId);\n  if (!connection) return false;\n  const ttl = world.cacheTtlMs[connection.provider] ?? 0;\n  return now - binding.lastUsedAt <= ttl;\n}\n\nfunction hasCapacity(connection: Connection, now: number): boolean {\n  // Unknown quota stays unknown: it is neither availability nor exhaustion (SUB-ELIG-06).\n  return (\n    connection.quota.kind !== \"exhausted\" ||\n    (connection.quota.resetsAt !== null && connection.quota.resetsAt <= now) ||\n    spendsCredits(connection, now)\n  );\n}\n\nfunction spendsCredits(connection: Connection, now: number): boolean {\n  return (\n    connection.extraCreditsEnabled === true &&\n    (connection.refusalUntil == null || connection.refusalUntil <= now) &&\n    connection.quota.kind === \"exhausted\" &&\n    (connection.quota.resetsAt === null || connection.quota.resetsAt > now)\n  );\n}\n\nfunction modelAllowed(world: World, session: Session, modelId: ModelId): boolean {\n  const workspace = byId(world.workspaces, session.workspaceId);\n  return (\n    !!workspace && (workspace.allowedModels === null || workspace.allowedModels.includes(modelId))\n  );\n}\n\n/**\n * Why this connection may not serve this session's work at all, ignoring the\n * model, capacity and the explicit-choice rule for personal accounts, labelled\n * with the requirement that forbids it; null when it may.\n */\nexport function authorizationFailure(\n  world: World,\n  session: Session,\n  connection: Connection,\n): InvariantViolation | null {\n  const failure = (requirement: string, message: string) => ({ requirement, message });\n  const workspace = byId(world.workspaces, session.workspaceId);\n  if (!workspace) return failure(\"SUB-ELIG-01\", \"the session's workspace is unknown\");\n  if (!connection.healthy || !connection.allocatorEnabled) {\n    return failure(\"SUB-ELIG-04\", \"the account is unhealthy or excluded from allocation\");\n  }\n  if (connection.ownership.kind === \"personal\") {\n    const settings = effectiveSettings(world.settings, workspace.id).values;\n    const owner = byId(world.people, connection.ownership.ownerId);\n    const ownersOwnWork =\n      (session.ownerId !== null &&\n        session.sharedPersonalChoices?.some(\n          (choice) => choice.connectionId === connection.id && choice.ownerId === owner?.id,\n        )) ||\n      (session.ownerId === connection.ownership.ownerId &&\n        (session.visibility === \"private\" ||\n          (workspace.kind === \"personal\" && workspace.ownerId === connection.ownership.ownerId)));\n    if (!settings.personalConnectionsAllowed) {\n      return failure(\"SUB-OWN-05\", \"personal connections are disabled here\");\n    }\n    if (!owner?.active) return failure(\"SUB-ACCESS-06\", \"the personal account's owner left\");\n    if (!ownersOwnWork) {\n      return failure(\"SUB-ELIG-05\", \"a personal account served work other than its owner's own\");\n    }\n    return null;\n  }\n  if (connection.assignmentPolicies !== undefined) {\n    const source =\n      effectiveSettings(world.settings, workspace.id).values.inferenceSource?.[\n        connection.provider\n      ] ?? \"automatic\";\n    const matching = connection.assignmentPolicies.filter(\n      (policy) =>\n        policy.workspaceId === workspace.id &&\n        (source === \"automatic\" || policy.inferencePool === source),\n    );\n    if (matching.length === 0) {\n      return failure(\"SUB-SET-06\", \"the effective inference source excludes this assignment\");\n    }\n  }\n  const scope = connection.ownership.scope;\n  const inScope =\n    scope.kind === \"organization\" ||\n    (scope.kind === \"workspaces\"\n      ? scope.workspaceIds.includes(workspace.id) ||\n        (workspace.kind === \"personal\" && scope.personalWorkspaces)\n      : session.ownerId !== null && scope.personIds.includes(session.ownerId));\n  return inScope ? null : failure(\"SUB-ELIG-01\", \"the account's scope excludes this work\");\n}\n\n/** May this connection serve this session's work at all? SUB-ELIG-01, 04, 05. */\nexport function isAuthorized(world: World, session: Session, connection: Connection): boolean {\n  return authorizationFailure(world, session, connection) === null;\n}\n\n/**\n * Why this connection cannot serve this session on this model now, labelled\n * with the requirement that forbids it; null when it can.\n */\nexport function servingFailure(\n  world: World,\n  session: Session,\n  connection: Connection,\n  modelId: ModelId,\n  now: number,\n): InvariantViolation | null {\n  const model = byId(world.models, modelId);\n  if (\n    !model ||\n    model.provider !== connection.provider ||\n    !connection.entitledModels.includes(modelId)\n  ) {\n    return { requirement: \"SUB-ELIG-03\", message: \"the account's plan does not include the model\" };\n  }\n  if (connection.allowedModelIds != null && !connection.allowedModelIds.includes(modelId)) {\n    return {\n      requirement: \"SUB-ELIG-03\",\n      message: \"the account's access policy excludes the model\",\n    };\n  }\n  if (connection.assignmentPolicies !== undefined) {\n    const workspace = byId(world.workspaces, session.workspaceId)!;\n    const source =\n      effectiveSettings(world.settings, workspace.id).values.inferenceSource?.[\n        connection.provider\n      ] ?? \"automatic\";\n    const matching = connection.assignmentPolicies.filter(\n      (policy) =>\n        policy.workspaceId === workspace.id &&\n        (source === \"automatic\" || policy.inferencePool === source),\n    );\n    const hasAllocatableAssignment = matching.some((policy) => policy.allocatorEnabled);\n    if (!hasAllocatableAssignment) {\n      return {\n        requirement: \"SUB-ELIG-04\",\n        message: \"the source assignment is excluded from allocation\",\n      };\n    }\n    if (\n      !matching.some(\n        (policy) =>\n          policy.allocatorEnabled &&\n          (policy.allowedModelIds === null || policy.allowedModelIds.includes(modelId)) &&\n          !policy.excludedModelIds?.includes(modelId),\n      )\n    ) {\n      const hasModelAssignment = matching.some(\n        (policy) =>\n          (policy.allowedModelIds === null || policy.allowedModelIds.includes(modelId)) &&\n          !policy.excludedModelIds?.includes(modelId),\n      );\n      return {\n        requirement: hasModelAssignment ? \"SUB-ELIG-04\" : \"SUB-ELIG-03\",\n        message: hasModelAssignment\n          ? \"model access exists only on a source assignment excluded from allocation\"\n          : \"no source assignment allows the model\",\n      };\n    }\n  }\n  if ((connection.modelCooldowns?.[modelId] ?? -Infinity) > now) {\n    return { requirement: \"SUB-ELIG-03\", message: \"the account is cooling down for the model\" };\n  }\n  if (!modelAllowed(world, session, modelId)) {\n    return { requirement: \"SUB-ELIG-02\", message: \"the workspace does not allow the model\" };\n  }\n  const authorization = authorizationFailure(world, session, connection);\n  if (authorization) return authorization;\n  if (!hasCapacity(connection, now)) {\n    return { requirement: \"SUB-FAIL-02\", message: \"the account has no capacity now\" };\n  }\n  return null;\n}\n\nexport function canServe(\n  world: World,\n  session: Session,\n  connection: Connection,\n  modelId: ModelId,\n  now: number,\n): boolean {\n  return servingFailure(world, session, connection, modelId, now) === null;\n}\n\n// Selection\n\n/**\n * Deterministic hash used to spread sessions across accounts (D-21): FNV-1a\n * over the UTF-16 code units, finished with the murmur3 finalizer, because raw\n * FNV-1a orders similar keys unevenly and so spreads unfairly (SUB-SEL-03, D-23).\n */\nexport function spreadHash(sessionId: string, connectionId: string): number {\n  let hash = 0x811c9dc5;\n  const key = sessionId + \"|\" + connectionId;\n  for (let index = 0; index < key.length; index += 1) {\n    hash ^= key.charCodeAt(index);\n    hash = Math.imul(hash, 0x01000193) >>> 0;\n  }\n  // murmur3 fmix32\n  hash = Math.imul(hash ^ (hash >>> 16), 0x85ebca6b) >>> 0;\n  hash = Math.imul(hash ^ (hash >>> 13), 0xc2b2ae35) >>> 0;\n  return (hash ^ (hash >>> 16)) >>> 0;\n}\n\n/**\n * Rank servable connections for one model. In Primary first the primary takes\n * new work whenever it can serve it, and unknown quota counts as able to serve\n * (D-13, D-14, D-15). Every other choice ranks known capacity before unknown\n * quota (D-14), then a deterministic per-session hash spreads sessions (D-21),\n * then the connection id breaks ties.\n */\nfunction pick(world: World, session: Session, candidates: Connection[]): Connection | null {\n  if (candidates.length === 0) return null;\n  const provider = candidates[0]!.provider;\n  const rotation =\n    effectiveSettings(world.settings, session.workspaceId).values.rotation[provider] ??\n    ({ mode: \"spread\" } as Rotation);\n  if (rotation.mode === \"primary_first\") {\n    const primary = candidates.find((candidate) => candidate.id === rotation.primaryConnectionId);\n    if (primary) return primary;\n  }\n  const ranked = [...candidates].sort((left, right) => {\n    const spread = spreadHash(session.id, left.id) - spreadHash(session.id, right.id);\n    if (spread !== 0) return spread;\n    return left.id < right.id ? -1 : left.id > right.id ? 1 : 0;\n  });\n  return ranked[0]!;\n}\n\n/**\n * SUB-FAIL-03 and D-16: the reasoning level to run `model` at when the session\n * asked for `requested` on its preferred model `from`.\n *\n * 1. The same level name when the model supports it.\n * 2. Otherwise the model's level whose relative position on its own ladder\n *    (lowest 0, highest 1) is closest to the requested level's relative\n *    position on the preferred model's ladder. A tie goes to the lower level.\n * 3. A level the preferred model does not list has no position and maps to\n *    the middle of the ladder (the lower middle when there are two).\n */\nexport function nearestReasoningLevel(\n  model: Model,\n  requested: string,\n  from: Model | undefined,\n): string {\n  const levels = model.reasoningLevels;\n  if (levels.includes(requested)) return requested;\n  if (levels.length <= 1) return levels[0] ?? \"\";\n  const source = from?.reasoningLevels ?? [];\n  const sourceIndex = source.indexOf(requested);\n  // The requested position as an exact fraction, so ties are exact.\n  const [numerator, denominator] =\n    sourceIndex < 0 || source.length <= 1 ? [1, 2] : [sourceIndex, source.length - 1];\n  // |index / (levels - 1) - numerator / denominator|, scaled by both denominators.\n  const distance = (index: number) =>\n    Math.abs(index * denominator - numerator * (levels.length - 1));\n  let best = 0;\n  for (let index = 1; index < levels.length; index += 1) {\n    if (distance(index) < distance(best)) best = index;\n  }\n  return levels[best]!;\n}\n\n/**\n * D-35: the fallback order of a preferred model the settings name no entry\n * for. Only with cross-provider failover on, and only when the preferred\n * model declares a tier: every model of another provider declaring exactly\n * that tier (Q-04: never a lower or higher one), provider by provider in\n * sorted id order, each provider's models in the world's order, at most 8.\n * The preferred model's own provider contributes nothing (same-provider\n * model fallback is explicit only).\n */\nexport function derivedFallbacks(\n  world: World,\n  settings: SubscriptionSettings,\n  preferredModelId: ModelId,\n): ModelId[] {\n  const preferred = byId(world.models, preferredModelId);\n  if (!settings.crossProviderFailover || !preferred) return [];\n  const tier = preferred.tier;\n  if (typeof tier !== \"string\" || !TIERS.includes(tier)) return [];\n  const otherProviders = [...new Set(world.models.map((model) => model.provider))]\n    .filter((provider) => provider !== preferred.provider)\n    .sort();\n  const derived: ModelId[] = [];\n  for (const provider of otherProviders) {\n    for (const model of world.models) {\n      if (model.provider !== provider || model.tier !== tier) continue;\n      if (model.id === preferredModelId || derived.includes(model.id)) continue;\n      derived.push(model.id);\n    }\n  }\n  return derived.slice(0, 8);\n}\n\n/**\n * Candidate models in failover order: the preferred model, then (if allowed)\n * its fallbacks. An explicit entry for the preferred model, even an empty\n * list, is the order; only a missing entry derives one (D-35).\n */\nexport function candidateModels(world: World, session: Session): ModelId[] {\n  const settings = effectiveSettings(world.settings, session.workspaceId).values;\n  const preferred = session.preferredModelId;\n  if (session.onlyThisModel || session.pinnedConnectionId) return [preferred];\n  const preferredProvider = byId(world.models, preferred)?.provider;\n  const explicit = Object.prototype.hasOwnProperty.call(settings.fallbackOrder, preferred);\n  const order = explicit\n    ? (settings.fallbackOrder[preferred] ?? [])\n    : derivedFallbacks(world, settings, preferred);\n  // Same-provider fallback models are always allowed; other providers only\n  // when cross-provider failover is on (SUB-FAIL-02, SUB-FAIL-03).\n  const fallbacks = order.filter(\n    (modelId, index, all) =>\n      modelId !== preferred &&\n      all.indexOf(modelId) === index &&\n      (byId(world.models, modelId)?.provider === preferredProvider ||\n        settings.crossProviderFailover),\n  );\n  return [preferred, ...fallbacks];\n}\n\n/**\n * D-24: an explicit choice that can never serve this session's model: gone,\n * no longer authorized for this work, another provider's account, or not\n * entitled or allowed for the model. Health, allocation, capacity and\n * cooldowns recover, so they never make an explicit choice permanently unusable.\n */\nexport function pinnedNeverServes(\n  world: World,\n  session: Session,\n  pinned: Connection | undefined,\n): boolean {\n  if (!pinned) return true;\n  const model = byId(world.models, session.preferredModelId);\n  if (!model || model.provider !== pinned.provider) return true;\n  if (!pinned.entitledModels.includes(model.id)) return true;\n  if (pinned.allowedModelIds != null && !pinned.allowedModelIds.includes(model.id)) return true;\n  if (pinned.assignmentPolicies !== undefined) {\n    const source =\n      effectiveSettings(world.settings, session.workspaceId).values.inferenceSource?.[\n        pinned.provider\n      ] ?? \"automatic\";\n    const assignments = pinned.assignmentPolicies.filter(\n      (policy) =>\n        policy.workspaceId === session.workspaceId &&\n        (source === \"automatic\" || policy.inferencePool === source),\n    );\n    if (\n      !assignments.some(\n        (policy) =>\n          (policy.allowedModelIds === null || policy.allowedModelIds.includes(model.id)) &&\n          !policy.excludedModelIds?.includes(model.id),\n      )\n    ) {\n      return true;\n    }\n  }\n  return !isAuthorized(world, session, { ...pinned, healthy: true, allocatorEnabled: true });\n}\n\nfunction pinnedAllocationDisabled(world: World, session: Session, pinned: Connection): boolean {\n  if (!pinned.allocatorEnabled) return true;\n  if (pinned.assignmentPolicies === undefined) return false;\n  const source =\n    effectiveSettings(world.settings, session.workspaceId).values.inferenceSource?.[\n      pinned.provider\n    ] ?? \"automatic\";\n  return !pinned.assignmentPolicies.some(\n    (policy) =>\n      policy.workspaceId === session.workspaceId &&\n      (source === \"automatic\" || policy.inferencePool === source) &&\n      policy.allocatorEnabled,\n  );\n}\n\n/** Future times at which some quota or model cooldown in the world resets, ascending. */\nfunction futureResetTimes(world: World, now: number): number[] {\n  const times = new Set<number>();\n  for (const connection of world.connections) {\n    if (\n      connection.quota.kind === \"exhausted\" &&\n      connection.quota.resetsAt !== null &&\n      connection.quota.resetsAt > now\n    ) {\n      times.add(connection.quota.resetsAt);\n    }\n    if (connection.refusalUntil != null && connection.refusalUntil > now)\n      times.add(connection.refusalUntil);\n    for (const until of Object.values(connection.modelCooldowns ?? {})) {\n      if (until > now) times.add(until);\n    }\n  }\n  return [...times].sort((left, right) => left - right);\n}\n\n/**\n * SUB-WAIT-02, D-22: the earliest future time at which the session could run,\n * assuming nothing else changes; null when no known reset makes it runnable.\n */\nexport function earliestRunnableAt(\n  world: World,\n  now: number,\n  runnableAt: (at: number) => boolean,\n): number | null {\n  return futureResetTimes(world, now).find(runnableAt) ?? null;\n}\n\nfunction personalFallbackFor(world: World, session: Session): boolean {\n  if (session.ownerId === null) return false;\n  if (\n    session.visibility === \"shared\" &&\n    byId(world.workspaces, session.workspaceId)?.kind === \"shared\"\n  )\n    return false;\n  const settings = effectiveSettings(world.settings, session.workspaceId).values;\n  return (\n    (byId(world.workspaces, session.workspaceId)?.kind === \"personal\" &&\n      byId(world.workspaces, session.workspaceId)?.ownerId === session.ownerId) ||\n    (settings.personalFallbackAllowed &&\n      !!byId(world.people, session.ownerId)?.personalFallbackOptIn)\n  );\n}\n\n/**\n * The contract's decision for a session that wants to run a turn now. The\n * sender is deliberately not an input: the account belongs to the session\n * (SUB-STICK-01).\n */\nexport function decide(world: World, sessionId: string, now: number): Decision {\n  const session = byId(world.sessions, sessionId);\n  if (!session) throw new Error(\"unknown session \" + sessionId);\n  const preferredModel = byId(world.models, session.preferredModelId);\n  const level = (model: ModelId) =>\n    nearestReasoningLevel(byId(world.models, model)!, session.reasoningLevel, preferredModel);\n  const run = (connectionId: string, modelId: ModelId, kind: SwitchKind): Decision => ({\n    kind: \"run\",\n    connectionId,\n    modelId,\n    reasoningLevel: level(modelId),\n    switch: kind,\n  });\n\n  // A restricted preferred model falls through to its allowed failover\n  // candidates (SUB-ELIG-02, SUB-WAIT-01, D-17); waiting on the restriction is\n  // right only when no candidate is allowed.\n  const models = candidateModels(world, session);\n  const allowedModels = models.filter((modelId) => modelAllowed(world, session, modelId));\n  if (allowedModels.length === 0) {\n    return { kind: \"wait\", reason: \"model_not_allowed\", earliestResetAt: null };\n  }\n\n  // Explicit choice is a pin (SUB-SEL-04, SUB-FAIL-05, SUB-STICK-06).\n  if (session.pinnedConnectionId) {\n    const pinned = byId(world.connections, session.pinnedConnectionId);\n    if (pinned && canServe(world, session, pinned, session.preferredModelId, now)) {\n      return run(pinned.id, session.preferredModelId, \"pinned\");\n    }\n    // It can never serve this work: explain that instead of waiting silently (D-24).\n    if (pinnedNeverServes(world, session, pinned)) {\n      return { kind: \"wait\", reason: \"pinned_account_ineligible\", earliestResetAt: null };\n    }\n    if (pinned && pinnedAllocationDisabled(world, session, pinned)) {\n      return { kind: \"wait\", reason: \"pinned_account_disabled\", earliestResetAt: null };\n    }\n    // Otherwise the earliest future time the chosen account can serve (D-22).\n    return {\n      kind: \"wait\",\n      reason: \"pinned_account_unavailable\",\n      earliestResetAt: earliestRunnableAt(world, now, (at) =>\n        canServe(world, session, pinned!, session.preferredModelId, at),\n      ),\n    };\n  }\n\n  const binding = session.binding;\n  const bound = binding ? byId(world.connections, binding.connectionId) : undefined;\n  const personalFallback = personalFallbackFor(world, session);\n  const bindingServable =\n    !!binding &&\n    !!bound &&\n    models.includes(binding.modelId) &&\n    canServe(world, session, bound, binding.modelId, now);\n\n  // Stickiness while the cache is warm (SUB-STICK-02, SUB-STICK-03, SUB-FAIL-07).\n  const includedAlternative = (modelId: string) =>\n    world.connections.some(\n      (connection) =>\n        (connection.ownership.kind === \"shared\" || personalFallback) &&\n        !spendsCredits(connection, now) &&\n        canServe(world, session, connection, modelId, now),\n    );\n  if (\n    binding &&\n    bound &&\n    bindingServable &&\n    !session.reselectionPoint &&\n    isCacheWarm(world, binding, now) &&\n    (!spendsCredits(bound, now) || !includedAlternative(binding.modelId))\n  ) {\n    return run(binding.connectionId, binding.modelId, \"sticky\");\n  }\n\n  // Order: each candidate model on shared accounts, then (opt-in) on the\n  // owner's personal accounts, before moving to the next model (D-12).\n  for (const [index, modelId] of models.entries()) {\n    const eligible = world.connections.filter(\n      (connection) =>\n        (connection.ownership.kind === \"shared\" || personalFallback) &&\n        canServe(world, session, connection, modelId, now),\n    );\n    const included = eligible.filter((connection) => !spendsCredits(connection, now));\n    const servable = included.length ? included : eligible;\n    const shared = servable.filter((connection) => connection.ownership.kind === \"shared\");\n    const personal = servable.filter((connection) => connection.ownership.kind === \"personal\");\n    const chosen =\n      pick(world, session, shared) ?? (personalFallback ? pick(world, session, personal) : null);\n    if (!chosen) continue;\n    let kind: SwitchKind;\n    if (!binding) kind = \"initial\";\n    else if (binding.connectionId === chosen.id && binding.modelId === modelId) kind = \"sticky\";\n    else if (index === 0 && binding.modelId !== modelId) kind = \"return_to_preferred\";\n    else if (index > 0)\n      kind =\n        byId(world.models, modelId)?.provider ===\n        byId(world.models, session.preferredModelId)?.provider\n          ? \"failover_same_provider\"\n          : \"failover_cross_provider\";\n    else if (bindingServable) kind = \"reselected_cold\";\n    else kind = \"failover_same_provider\";\n    return run(chosen.id, modelId, kind);\n  }\n  return {\n    kind: \"wait\",\n    reason: \"no_eligible_capacity\",\n    earliestResetAt: earliestRunnableAt(world, now, (at) =>\n      allowedModels.some((modelId) =>\n        world.connections.some(\n          (connection) =>\n            (connection.ownership.kind === \"shared\" || personalFallback) &&\n            canServe(world, session, connection, modelId, at),\n        ),\n      ),\n    ),\n  };\n}\n\n/** Record that a decision ran: the session binds to the chosen account. */\nexport function applyDecision(\n  world: World,\n  sessionId: string,\n  decision: Decision,\n  now: number,\n): World {\n  if (decision.kind !== \"run\") return world;\n  return {\n    ...world,\n    sessions: world.sessions.map((session) =>\n      session.id === sessionId\n        ? {\n            ...session,\n            binding: {\n              connectionId: decision.connectionId,\n              modelId: decision.modelId,\n              lastUsedAt: now,\n            },\n          }\n        : session,\n    ),\n  };\n}\n\n// Invariants\n\nexport type InvariantViolation = { requirement: string; message: string };\n\n/**\n * Check any decision (from this model or from production) against the\n * contract's invariants for this world. An empty result means the decision is\n * acceptable; it does not require the decision to equal the model's own.\n */\nexport function checkDecision(\n  world: World,\n  sessionId: string,\n  now: number,\n  decision: Decision,\n): InvariantViolation[] {\n  const violations: InvariantViolation[] = [];\n  const session = byId(world.sessions, sessionId)!;\n  const settings = effectiveSettings(world.settings, session.workspaceId).values;\n  const models = candidateModels(world, session);\n  const fail = (requirement: string, message: string) => violations.push({ requirement, message });\n\n  const personalFallback = personalFallbackFor(world, session);\n  const servableShared = (modelId: ModelId, credits: boolean) =>\n    world.connections.some(\n      (connection) =>\n        connection.ownership.kind === \"shared\" &&\n        (credits || !spendsCredits(connection, now)) &&\n        canServe(world, session, connection, modelId, now),\n    );\n  const servableAutomatically = (modelId: ModelId) =>\n    world.connections.some(\n      (connection) =>\n        canServe(world, session, connection, modelId, now) &&\n        (connection.ownership.kind === \"shared\" || personalFallback),\n    );\n  const anyServable = models.some(servableAutomatically);\n  const binding = session.binding;\n  const bindingWarm = !!binding && !session.reselectionPoint && isCacheWarm(world, binding, now);\n\n  if (decision.kind === \"run\") {\n    const connection = byId(world.connections, decision.connectionId);\n    if (!connection) {\n      fail(\"SUB-ELIG-01\", \"the chosen account does not exist\");\n      return violations;\n    }\n    const ineligible = servingFailure(world, session, connection, decision.modelId, now);\n    if (ineligible) {\n      violations.push(ineligible);\n      return violations;\n    }\n    if (session.pinnedConnectionId && decision.connectionId !== session.pinnedConnectionId) {\n      fail(\"SUB-SEL-04\", \"a pinned session ran on another account\");\n    }\n    if (!models.includes(decision.modelId)) {\n      fail(\"SUB-FAIL-04\", \"ran a model outside the allowed failover candidates\");\n    }\n    const crossProvider =\n      byId(world.models, decision.modelId)?.provider !==\n      byId(world.models, session.preferredModelId)?.provider;\n    if (crossProvider && (!settings.crossProviderFailover || session.onlyThisModel)) {\n      fail(\"SUB-FAIL-03\", \"moved across providers although that is not allowed\");\n    }\n    const expectedLevel = nearestReasoningLevel(\n      byId(world.models, decision.modelId)!,\n      session.reasoningLevel,\n      byId(world.models, session.preferredModelId),\n    );\n    if (decision.reasoningLevel !== expectedLevel) {\n      fail(\"SUB-FAIL-03\", \"ran at a reasoning level other than the nearest supported level\");\n    }\n    // Staying on the current account while its cache is warm is always allowed\n    // (SUB-STICK-02); every other placement must respect the failover order.\n    const stayingWarm =\n      !!binding &&\n      bindingWarm &&\n      binding.connectionId === decision.connectionId &&\n      binding.modelId === decision.modelId;\n    if (!stayingWarm && !session.pinnedConnectionId) {\n      const index = models.indexOf(decision.modelId);\n      if (models.slice(0, Math.max(index, 0)).some(servableAutomatically)) {\n        fail(\"SUB-FAIL-02\", \"skipped an earlier failover candidate that could still run\");\n      }\n      if (\n        connection.ownership.kind === \"personal\" &&\n        (!personalFallback || servableShared(decision.modelId, spendsCredits(connection, now)))\n      ) {\n        fail(\"SUB-SEL-02\", \"used a personal account without an explicit choice or opt-in fallback\");\n      }\n    }\n    const includedAlternative = (modelId: string) =>\n      world.connections.some(\n        (candidate) =>\n          (candidate.ownership.kind === \"shared\" || personalFallback) &&\n          !spendsCredits(candidate, now) &&\n          canServe(world, session, candidate, modelId, now),\n      );\n    if (\n      !session.pinnedConnectionId &&\n      spendsCredits(connection, now) &&\n      includedAlternative(decision.modelId)\n    ) {\n      fail(\"SUB-CREDITS-01\", \"spent extra credits while an eligible account had included capacity\");\n    }\n    if (binding && bindingWarm && !session.pinnedConnectionId) {\n      const bound = byId(world.connections, binding.connectionId);\n      const stillServable =\n        !!bound &&\n        (!spendsCredits(bound, now) || !includedAlternative(binding.modelId)) &&\n        models.includes(binding.modelId) &&\n        canServe(world, session, bound, binding.modelId, now);\n      if (\n        stillServable &&\n        (decision.connectionId !== binding.connectionId || decision.modelId !== binding.modelId)\n      ) {\n        fail(\n          \"SUB-STICK-02\",\n          \"switched account or model while the cache was warm and nothing forced it\",\n        );\n      }\n    }\n  } else {\n    // Only a real workspace model restriction justifies this reason: no\n    // candidate model, the preferred one or an allowed fallback, is allowed.\n    if (\n      decision.reason === \"model_not_allowed\" &&\n      models.some((modelId) => modelAllowed(world, session, modelId))\n    ) {\n      fail(\"SUB-WAIT-01\", \"waited for a model restriction although an allowed model exists\");\n    }\n    const pinned = session.pinnedConnectionId\n      ? byId(world.connections, session.pinnedConnectionId)\n      : undefined;\n    const pinnedServable =\n      !!pinned && canServe(world, session, pinned, session.preferredModelId, now);\n    if (session.pinnedConnectionId ? pinnedServable : anyServable) {\n      fail(\"SUB-WAIT-01\", \"waited although an eligible account had capacity\");\n    }\n    // The wait explains itself (SUB-WAIT-02, D-24) and names the earliest time\n    // a known reset makes the session runnable (SUB-WAIT-02, D-22).\n    const allowedModels = models.filter((modelId) => modelAllowed(world, session, modelId));\n    const never = !!session.pinnedConnectionId && pinnedNeverServes(world, session, pinned);\n    const expectedReason: WaitReason =\n      allowedModels.length === 0\n        ? \"model_not_allowed\"\n        : session.pinnedConnectionId\n          ? never\n            ? \"pinned_account_ineligible\"\n            : pinned && pinnedAllocationDisabled(world, session, pinned)\n              ? \"pinned_account_disabled\"\n              : \"pinned_account_unavailable\"\n          : \"no_eligible_capacity\";\n    if (decision.reason !== expectedReason) {\n      fail(\n        never && decision.reason === \"pinned_account_unavailable\" ? \"SUB-ACCESS-06\" : \"SUB-WAIT-02\",\n        \"explained the wait with \" + decision.reason + \" instead of \" + expectedReason,\n      );\n    }\n    const expectedReset =\n      expectedReason === \"pinned_account_unavailable\"\n        ? earliestRunnableAt(world, now, (at) =>\n            canServe(world, session, pinned!, session.preferredModelId, at),\n          )\n        : expectedReason === \"no_eligible_capacity\"\n          ? earliestRunnableAt(world, now, (at) =>\n              allowedModels.some((modelId) =>\n                world.connections.some(\n                  (connection) =>\n                    (connection.ownership.kind === \"shared\" || personalFallback) &&\n                    canServe(world, session, connection, modelId, at),\n                ),\n              ),\n            )\n          : null;\n    if (decision.reason === expectedReason && decision.earliestResetAt !== expectedReset) {\n      fail(\"SUB-WAIT-02\", \"did not name the earliest time a reset makes the session runnable\");\n    }\n  }\n  return violations;\n}\n","/**\n * Bridge from the production placement input to the independent reference\n * model, so the reference `checkDecision` can judge a production decision for\n * a real world (the worker's shadow comparison). It maps the production\n * concepts the reference model does not have onto ones it does, using only the\n * raw inputs, never the production eligibility or placement functions, so a\n * policy bug cannot hide from the checker:\n *\n * - A provider switched off, a compaction provider lock and the workspace\n *   model ceiling become the workspace's allowed model list.\n * - Shared connections a workspace does not manage while organization\n *   accounts are off, and personal connections without frozen personal\n *   authority for their provider, are left out (nothing may use them).\n * - Quota and cache lifetimes are decoded here, independently of the\n *   production decoders, from the raw shared quota model (design 2.2) and\n *   cache facts (design 6.1), including the input's staleness bounds. An\n *   exhaustion with no known reset stays exhausted, including when evaluating\n *   the separate permission to spend extra credits.\n * - An exact cache lifetime on the binding is that provider's lifetime.\n * - An explicit binding is the reference model's pin.\n * - Model tiers pass through as declared, and the fallback order keeps its\n *   own entries only, so the reference derives its own default order for a\n *   preferred model without an entry (D-35).\n */\nimport * as reference from \"./reference-model\";\nimport { inferenceSourceFor } from \"./settings\";\nimport type {\n  CacheFacts,\n  PlacementDecision,\n  PlacementInput,\n  SubscriptionConnection,\n  SubscriptionQuota,\n} from \"./types\";\n\n/** Design 6.1: an unmeasured idle cut-off counts as one hour. */\nconst UNMEASURED_CUTOFF_MS = 3_600_000;\n\nfunction lifetimeOf(facts: CacheFacts | undefined): number {\n  if (facts?.kind === \"exact_ttl\") return Math.max(0, facts.ttlMs);\n  return Math.max(0, facts?.cutoffMs ?? UNMEASURED_CUTOFF_MS);\n}\n\ntype DecodedQuota = reference.Quota;\n\n/**\n * Design 2.2 read from the raw fields: a running deadline or exhausted\n * window is exhaustion until its latest reset; any fresh observed window, an\n * exhausted window whose reset passed, or a passed quota deadline is known\n * capacity; nothing else is known (SUB-ELIG-06).\n */\nfunction decodeQuota(\n  quota: SubscriptionQuota | null,\n  now: number,\n  staleAfterMs: number | undefined,\n): DecodedQuota {\n  if (quota === null) return { kind: \"unknown\" };\n  const fresh =\n    staleAfterMs === undefined ||\n    (quota.observedAt !== null && now - quota.observedAt <= staleAfterMs);\n  const blockingResets: (number | null)[] = [];\n  if (quota.exhaustedUntil !== null && quota.exhaustedUntil > now) {\n    blockingResets.push(quota.exhaustedUntil);\n  }\n  for (const window of quota.windows) {\n    if (window.status === \"exhausted\" && (window.resetsAt === null || window.resetsAt > now)) {\n      blockingResets.push(window.resetsAt);\n    }\n  }\n  if (blockingResets.length > 0) {\n    return blockingResets.includes(null)\n      ? { kind: \"exhausted\", resetsAt: null }\n      : { kind: \"exhausted\", resetsAt: Math.max(...(blockingResets as number[])) };\n  }\n  const observed =\n    quota.windows.some((window) => window.status !== \"unknown\") ||\n    (quota.exhaustedUntil !== null && quota.exhaustedKind === \"quota\");\n  return observed && fresh ? { kind: \"available\" } : { kind: \"unknown\" };\n}\n\nfunction referenceConnection(\n  input: PlacementInput,\n  connection: SubscriptionConnection,\n): reference.Connection {\n  const providerModels = input.models\n    .filter((model) => model.provider === connection.provider)\n    .map((model) => model.id);\n  const entitled = (connection.entitledModelIds ?? providerModels).filter(\n    (modelId) => !connection.excludedModelIds.includes(modelId),\n  );\n  const capacity = decodeQuota(\n    connection.quota,\n    input.now,\n    input.quotaStaleAfterMs?.[connection.provider],\n  );\n  const ownership: reference.Connection[\"ownership\"] =\n    connection.ownership.kind === \"personal\"\n      ? { kind: \"personal\", ownerId: connection.ownership.ownerMembershipId }\n      : {\n          kind: \"shared\",\n          scope:\n            connection.ownership.scope.kind === \"organization\"\n              ? { kind: \"organization\" }\n              : connection.ownership.scope.kind === \"workspaces\"\n                ? {\n                    kind: \"workspaces\",\n                    workspaceIds: connection.ownership.scope.workspaceIds,\n                    personalWorkspaces: connection.ownership.scope.allowPersonalWorkspaces,\n                  }\n                : { kind: \"people\", personIds: connection.ownership.scope.membershipIds },\n        };\n  return {\n    id: connection.id,\n    provider: connection.provider,\n    ownership,\n    healthy: connection.health === \"healthy\",\n    allocatorEnabled: connection.allocatorEnabled,\n    extraCreditsEnabled: connection.extraCreditsEnabled === true,\n    refusalUntil: connection.quota?.exhaustedUntil ?? null,\n    entitledModels: entitled,\n    allowedModelIds: connection.allowedModelIds,\n    ...(connection.assignmentPolicies === undefined\n      ? {}\n      : { assignmentPolicies: connection.assignmentPolicies }),\n    modelCooldowns: { ...connection.quota?.modelCooldowns },\n    quota: capacity,\n  };\n}\n\n/** The reference world equivalent to one production placement input. */\nexport function toReferenceWorld(input: PlacementInput): {\n  world: reference.World;\n  sessionId: string;\n} {\n  const { session, settings, workspace } = input;\n  const switches = (provider: string) => settings.providers[provider];\n  const ceiling = input.models\n    .filter(\n      (model) =>\n        (workspace.allowedModelIds === null || workspace.allowedModelIds.includes(model.id)) &&\n        switches(model.provider)?.enabled !== false &&\n        (session.compactionProviderLock === null ||\n          model.provider === session.compactionProviderLock),\n    )\n    .map((model) => model.id);\n  const usable = input.connections.filter((connection) => {\n    if (connection.ownership.kind === \"personal\") {\n      const owner = connection.ownership.ownerMembershipId;\n      return session.personalAuthority.some(\n        (authority) =>\n          authority.provider === connection.provider &&\n          authority.ownerMembershipId === owner &&\n          (!authority.sharedSessionChoice ||\n            (authority.sharedSessionChoice.sessionId === session.id &&\n              authority.sharedSessionChoice.connectionId === connection.id)),\n      );\n    }\n    if (connection.assignmentPolicies !== undefined) return true;\n    const source = inferenceSourceFor(settings, connection.provider);\n    const managedHere = connection.ownership.managedByWorkspaceId === workspace.id;\n    if (source === \"workspace\") return managedHere;\n    if (source === \"organization\") return !managedHere;\n    return source === \"automatic\" || managedHere;\n  });\n  const providers = new Set([\n    ...input.models.map((model) => model.provider),\n    ...input.connections.map((connection) => connection.provider),\n  ]);\n  const binding = session.binding;\n  return {\n    sessionId: session.id,\n    world: {\n      settings: {\n        organization: {\n          rotation: settings.rotation,\n          inferenceSource: Object.fromEntries(\n            [...providers].map((provider) => [provider, inferenceSourceFor(settings, provider)]),\n          ),\n          crossProviderFailover: settings.crossProviderFailover,\n          fallbackOrder: Object.fromEntries(\n            Object.entries(settings.fallbackOrder).map(([modelId, order]) => [modelId, [...order]]),\n          ),\n          personalConnectionsAllowed: settings.personalConnectionsAllowed,\n          personalFallbackAllowed: settings.personalFallbackAllowed,\n        },\n        locked: [],\n        workspaceOverrides: {},\n      },\n      workspaces: [\n        {\n          id: workspace.id,\n          kind: workspace.kind,\n          ownerId: workspace.ownerMembershipId,\n          allowedModels: ceiling,\n        },\n      ],\n      people: input.people.map((person) => ({\n        id: person.membershipId,\n        active: person.active,\n        personalFallbackOptIn: person.personalFallbackOptIn,\n      })),\n      models: input.models.map((model) => ({\n        id: model.id,\n        provider: model.provider,\n        reasoningLevels: model.reasoningLevels,\n        tier: model.tier ?? null,\n      })),\n      connections: usable.map((connection) => referenceConnection(input, connection)),\n      sessions: [\n        {\n          id: session.id,\n          workspaceId: session.workspaceId,\n          visibility: session.visibility,\n          ownerId: session.ownerMembershipId,\n          sharedPersonalChoices: session.personalAuthority.flatMap((authority) =>\n            authority.sharedSessionChoice?.sessionId === session.id\n              ? [\n                  {\n                    connectionId: authority.sharedSessionChoice.connectionId,\n                    ownerId: authority.ownerMembershipId,\n                  },\n                ]\n              : [],\n          ),\n          preferredModelId: session.preferredModelId,\n          reasoningLevel: session.reasoningLevel,\n          binding: binding\n            ? {\n                connectionId: binding.connectionId,\n                modelId: binding.modelId,\n                lastUsedAt: binding.lastModelCallAt,\n              }\n            : null,\n          pinnedConnectionId: binding?.choice === \"explicit\" ? binding.connectionId : null,\n          onlyThisModel: session.onlyThisModel,\n          reselectionPoint: session.reselectionPoints.length > 0,\n        },\n      ],\n      cacheTtlMs: Object.fromEntries(\n        [...providers].map((provider) => [\n          provider,\n          binding?.cacheTtlMs != null &&\n          input.connections.find((connection) => connection.id === binding.connectionId)\n            ?.provider === provider\n            ? Math.max(0, binding.cacheTtlMs)\n            : lifetimeOf(input.cacheFacts[provider]),\n        ]),\n      ),\n    },\n  };\n}\n\n/**\n * The reference-shaped view of a production decision on this input. A wait\n * the production policy explains with the compaction lock is, to the\n * reference model (which sees the lock as a model restriction), a wait on the\n * restriction when no candidate model is left, else a wait for capacity.\n */\nexport function toReferenceDecision(\n  decision: PlacementDecision,\n  input: PlacementInput,\n): reference.Decision {\n  if (decision.kind === \"run\") {\n    return {\n      kind: \"run\",\n      connectionId: decision.connectionId,\n      modelId: decision.modelId,\n      reasoningLevel: decision.reasoningLevel,\n      switch: decision.switch,\n    };\n  }\n  if (decision.reason !== \"compaction_provider_locked\") {\n    return { kind: \"wait\", reason: decision.reason, earliestResetAt: decision.earliestResetAt };\n  }\n  const { world, sessionId } = toReferenceWorld(input);\n  const session = world.sessions.find((candidate) => candidate.id === sessionId)!;\n  const allowed = world.workspaces[0]!.allowedModels;\n  const anyAllowed = reference\n    .candidateModels(world, session)\n    .some((modelId) => allowed === null || allowed.includes(modelId));\n  return {\n    kind: \"wait\",\n    reason: anyAllowed ? \"no_eligible_capacity\" : \"model_not_allowed\",\n    earliestResetAt: decision.earliestResetAt,\n  };\n}\n\n/** The reference model's invariant violations for a production decision on this input. */\nexport function checkPlacementDecision(\n  input: PlacementInput,\n  decision: PlacementDecision,\n): reference.InvariantViolation[] {\n  const { world, sessionId } = toReferenceWorld(input);\n  return reference.checkDecision(world, sessionId, input.now, toReferenceDecision(decision, input));\n}\n"],"mappings":";;;;;AA2FA,IAAM,QAA2B,CAAC,YAAY,YAAY,MAAM;AA+EhE,IAAM,eAAsC;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAQO,SAAS,kBAAkB,QAAwB,aAAwC;AAChG,QAAM,WAAW,OAAO,mBAAmB,WAAW,KAAK,CAAC;AAC5D,QAAM,SAAS,EAAE,GAAG,OAAO,aAAa;AACxC,QAAM,UAAU,CAAC;AACjB,aAAW,OAAO,cAAc;AAC9B,UAAM,aAAa,SAAS,GAAG,MAAM,UAAa,CAAC,OAAO,OAAO,SAAS,GAAG;AAC7E,QAAI,YAAY;AACd,MAAC,OAAuC,GAAG,IACzC,QAAQ,cAAc,QAAQ,qBAAqB,QAAQ,kBACvD,EAAE,GAAG,OAAO,aAAa,GAAG,GAAG,GAAI,SAAS,GAAG,EAAa,IAC5D,SAAS,GAAG;AAAA,IACpB;AACA,YAAQ,GAAG,IAAI,aAAa,cAAc;AAAA,EAC5C;AACA,SAAO,EAAE,QAAQ,QAAQ;AAC3B;AAIA,SAAS,KAA+B,OAAqB,IAA2B;AACtF,SAAO,MAAM,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE;AAC5C;AAEO,SAAS,YAAY,OAAc,SAAyB,KAAsB;AACvF,QAAM,aAAa,KAAK,MAAM,aAAa,QAAQ,YAAY;AAC/D,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,MAAM,MAAM,WAAW,WAAW,QAAQ,KAAK;AACrD,SAAO,MAAM,QAAQ,cAAc;AACrC;AAEA,SAAS,YAAY,YAAwB,KAAsB;AAEjE,SACE,WAAW,MAAM,SAAS,eACzB,WAAW,MAAM,aAAa,QAAQ,WAAW,MAAM,YAAY,OACpE,cAAc,YAAY,GAAG;AAEjC;AAEA,SAAS,cAAc,YAAwB,KAAsB;AACnE,SACE,WAAW,wBAAwB,SAClC,WAAW,gBAAgB,QAAQ,WAAW,gBAAgB,QAC/D,WAAW,MAAM,SAAS,gBACzB,WAAW,MAAM,aAAa,QAAQ,WAAW,MAAM,WAAW;AAEvE;AAEA,SAAS,aAAa,OAAc,SAAkB,SAA2B;AAC/E,QAAM,YAAY,KAAK,MAAM,YAAY,QAAQ,WAAW;AAC5D,SACE,CAAC,CAAC,cAAc,UAAU,kBAAkB,QAAQ,UAAU,cAAc,SAAS,OAAO;AAEhG;AAOO,SAAS,qBACd,OACA,SACA,YAC2B;AAC3B,QAAM,UAAU,CAAC,aAAqB,aAAqB,EAAE,aAAa,QAAQ;AAClF,QAAM,YAAY,KAAK,MAAM,YAAY,QAAQ,WAAW;AAC5D,MAAI,CAAC,UAAW,QAAO,QAAQ,eAAe,oCAAoC;AAClF,MAAI,CAAC,WAAW,WAAW,CAAC,WAAW,kBAAkB;AACvD,WAAO,QAAQ,eAAe,sDAAsD;AAAA,EACtF;AACA,MAAI,WAAW,UAAU,SAAS,YAAY;AAC5C,UAAM,WAAW,kBAAkB,MAAM,UAAU,UAAU,EAAE,EAAE;AACjE,UAAM,QAAQ,KAAK,MAAM,QAAQ,WAAW,UAAU,OAAO;AAC7D,UAAM,gBACH,QAAQ,YAAY,QACnB,QAAQ,uBAAuB;AAAA,MAC7B,CAAC,WAAW,OAAO,iBAAiB,WAAW,MAAM,OAAO,YAAY,OAAO;AAAA,IACjF,KACD,QAAQ,YAAY,WAAW,UAAU,YACvC,QAAQ,eAAe,aACrB,UAAU,SAAS,cAAc,UAAU,YAAY,WAAW,UAAU;AACnF,QAAI,CAAC,SAAS,4BAA4B;AACxC,aAAO,QAAQ,cAAc,wCAAwC;AAAA,IACvE;AACA,QAAI,CAAC,OAAO,OAAQ,QAAO,QAAQ,iBAAiB,mCAAmC;AACvF,QAAI,CAAC,eAAe;AAClB,aAAO,QAAQ,eAAe,2DAA2D;AAAA,IAC3F;AACA,WAAO;AAAA,EACT;AACA,MAAI,WAAW,uBAAuB,QAAW;AAC/C,UAAM,SACJ,kBAAkB,MAAM,UAAU,UAAU,EAAE,EAAE,OAAO,kBACrD,WAAW,QACb,KAAK;AACP,UAAM,WAAW,WAAW,mBAAmB;AAAA,MAC7C,CAAC,WACC,OAAO,gBAAgB,UAAU,OAChC,WAAW,eAAe,OAAO,kBAAkB;AAAA,IACxD;AACA,QAAI,SAAS,WAAW,GAAG;AACzB,aAAO,QAAQ,cAAc,yDAAyD;AAAA,IACxF;AAAA,EACF;AACA,QAAM,QAAQ,WAAW,UAAU;AACnC,QAAM,UACJ,MAAM,SAAS,mBACd,MAAM,SAAS,eACZ,MAAM,aAAa,SAAS,UAAU,EAAE,KACvC,UAAU,SAAS,cAAc,MAAM,qBACxC,QAAQ,YAAY,QAAQ,MAAM,UAAU,SAAS,QAAQ,OAAO;AAC1E,SAAO,UAAU,OAAO,QAAQ,eAAe,wCAAwC;AACzF;AAGO,SAAS,aAAa,OAAc,SAAkB,YAAiC;AAC5F,SAAO,qBAAqB,OAAO,SAAS,UAAU,MAAM;AAC9D;AAMO,SAAS,eACd,OACA,SACA,YACA,SACA,KAC2B;AAC3B,QAAM,QAAQ,KAAK,MAAM,QAAQ,OAAO;AACxC,MACE,CAAC,SACD,MAAM,aAAa,WAAW,YAC9B,CAAC,WAAW,eAAe,SAAS,OAAO,GAC3C;AACA,WAAO,EAAE,aAAa,eAAe,SAAS,gDAAgD;AAAA,EAChG;AACA,MAAI,WAAW,mBAAmB,QAAQ,CAAC,WAAW,gBAAgB,SAAS,OAAO,GAAG;AACvF,WAAO;AAAA,MACL,aAAa;AAAA,MACb,SAAS;AAAA,IACX;AAAA,EACF;AACA,MAAI,WAAW,uBAAuB,QAAW;AAC/C,UAAM,YAAY,KAAK,MAAM,YAAY,QAAQ,WAAW;AAC5D,UAAM,SACJ,kBAAkB,MAAM,UAAU,UAAU,EAAE,EAAE,OAAO,kBACrD,WAAW,QACb,KAAK;AACP,UAAM,WAAW,WAAW,mBAAmB;AAAA,MAC7C,CAAC,WACC,OAAO,gBAAgB,UAAU,OAChC,WAAW,eAAe,OAAO,kBAAkB;AAAA,IACxD;AACA,UAAM,2BAA2B,SAAS,KAAK,CAAC,WAAW,OAAO,gBAAgB;AAClF,QAAI,CAAC,0BAA0B;AAC7B,aAAO;AAAA,QACL,aAAa;AAAA,QACb,SAAS;AAAA,MACX;AAAA,IACF;AACA,QACE,CAAC,SAAS;AAAA,MACR,CAAC,WACC,OAAO,qBACN,OAAO,oBAAoB,QAAQ,OAAO,gBAAgB,SAAS,OAAO,MAC3E,CAAC,OAAO,kBAAkB,SAAS,OAAO;AAAA,IAC9C,GACA;AACA,YAAM,qBAAqB,SAAS;AAAA,QAClC,CAAC,YACE,OAAO,oBAAoB,QAAQ,OAAO,gBAAgB,SAAS,OAAO,MAC3E,CAAC,OAAO,kBAAkB,SAAS,OAAO;AAAA,MAC9C;AACA,aAAO;AAAA,QACL,aAAa,qBAAqB,gBAAgB;AAAA,QAClD,SAAS,qBACL,6EACA;AAAA,MACN;AAAA,IACF;AAAA,EACF;AACA,OAAK,WAAW,iBAAiB,OAAO,KAAK,aAAa,KAAK;AAC7D,WAAO,EAAE,aAAa,eAAe,SAAS,4CAA4C;AAAA,EAC5F;AACA,MAAI,CAAC,aAAa,OAAO,SAAS,OAAO,GAAG;AAC1C,WAAO,EAAE,aAAa,eAAe,SAAS,yCAAyC;AAAA,EACzF;AACA,QAAM,gBAAgB,qBAAqB,OAAO,SAAS,UAAU;AACrE,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,YAAY,YAAY,GAAG,GAAG;AACjC,WAAO,EAAE,aAAa,eAAe,SAAS,kCAAkC;AAAA,EAClF;AACA,SAAO;AACT;AAEO,SAAS,SACd,OACA,SACA,YACA,SACA,KACS;AACT,SAAO,eAAe,OAAO,SAAS,YAAY,SAAS,GAAG,MAAM;AACtE;AASO,SAAS,WAAW,WAAmB,cAA8B;AAC1E,MAAI,OAAO;AACX,QAAM,MAAM,YAAY,MAAM;AAC9B,WAAS,QAAQ,GAAG,QAAQ,IAAI,QAAQ,SAAS,GAAG;AAClD,YAAQ,IAAI,WAAW,KAAK;AAC5B,WAAO,KAAK,KAAK,MAAM,QAAU,MAAM;AAAA,EACzC;AAEA,SAAO,KAAK,KAAK,OAAQ,SAAS,IAAK,UAAU,MAAM;AACvD,SAAO,KAAK,KAAK,OAAQ,SAAS,IAAK,UAAU,MAAM;AACvD,UAAQ,OAAQ,SAAS,QAAS;AACpC;AASA,SAAS,KAAK,OAAc,SAAkB,YAA6C;AACzF,MAAI,WAAW,WAAW,EAAG,QAAO;AACpC,QAAM,WAAW,WAAW,CAAC,EAAG;AAChC,QAAM,WACJ,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE,OAAO,SAAS,QAAQ,KAC9E,EAAE,MAAM,SAAS;AACpB,MAAI,SAAS,SAAS,iBAAiB;AACrC,UAAM,UAAU,WAAW,KAAK,CAAC,cAAc,UAAU,OAAO,SAAS,mBAAmB;AAC5F,QAAI,QAAS,QAAO;AAAA,EACtB;AACA,QAAM,SAAS,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,MAAM,UAAU;AACnD,UAAM,SAAS,WAAW,QAAQ,IAAI,KAAK,EAAE,IAAI,WAAW,QAAQ,IAAI,MAAM,EAAE;AAChF,QAAI,WAAW,EAAG,QAAO;AACzB,WAAO,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,KAAK,MAAM,KAAK,IAAI;AAAA,EAC5D,CAAC;AACD,SAAO,OAAO,CAAC;AACjB;AAaO,SAAS,sBACd,OACA,WACA,MACQ;AACR,QAAM,SAAS,MAAM;AACrB,MAAI,OAAO,SAAS,SAAS,EAAG,QAAO;AACvC,MAAI,OAAO,UAAU,EAAG,QAAO,OAAO,CAAC,KAAK;AAC5C,QAAM,SAAS,MAAM,mBAAmB,CAAC;AACzC,QAAM,cAAc,OAAO,QAAQ,SAAS;AAE5C,QAAM,CAAC,WAAW,WAAW,IAC3B,cAAc,KAAK,OAAO,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,OAAO,SAAS,CAAC;AAElF,QAAM,WAAW,CAAC,UAChB,KAAK,IAAI,QAAQ,cAAc,aAAa,OAAO,SAAS,EAAE;AAChE,MAAI,OAAO;AACX,WAAS,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACrD,QAAI,SAAS,KAAK,IAAI,SAAS,IAAI,EAAG,QAAO;AAAA,EAC/C;AACA,SAAO,OAAO,IAAI;AACpB;AAWO,SAAS,iBACd,OACA,UACA,kBACW;AACX,QAAM,YAAY,KAAK,MAAM,QAAQ,gBAAgB;AACrD,MAAI,CAAC,SAAS,yBAAyB,CAAC,UAAW,QAAO,CAAC;AAC3D,QAAM,OAAO,UAAU;AACvB,MAAI,OAAO,SAAS,YAAY,CAAC,MAAM,SAAS,IAAI,EAAG,QAAO,CAAC;AAC/D,QAAM,iBAAiB,CAAC,GAAG,IAAI,IAAI,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,QAAQ,CAAC,CAAC,EAC5E,OAAO,CAAC,aAAa,aAAa,UAAU,QAAQ,EACpD,KAAK;AACR,QAAM,UAAqB,CAAC;AAC5B,aAAW,YAAY,gBAAgB;AACrC,eAAW,SAAS,MAAM,QAAQ;AAChC,UAAI,MAAM,aAAa,YAAY,MAAM,SAAS,KAAM;AACxD,UAAI,MAAM,OAAO,oBAAoB,QAAQ,SAAS,MAAM,EAAE,EAAG;AACjE,cAAQ,KAAK,MAAM,EAAE;AAAA,IACvB;AAAA,EACF;AACA,SAAO,QAAQ,MAAM,GAAG,CAAC;AAC3B;AAOO,SAAS,gBAAgB,OAAc,SAA6B;AACzE,QAAM,WAAW,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE;AACxE,QAAM,YAAY,QAAQ;AAC1B,MAAI,QAAQ,iBAAiB,QAAQ,mBAAoB,QAAO,CAAC,SAAS;AAC1E,QAAM,oBAAoB,KAAK,MAAM,QAAQ,SAAS,GAAG;AACzD,QAAM,WAAW,OAAO,UAAU,eAAe,KAAK,SAAS,eAAe,SAAS;AACvF,QAAM,QAAQ,WACT,SAAS,cAAc,SAAS,KAAK,CAAC,IACvC,iBAAiB,OAAO,UAAU,SAAS;AAG/C,QAAM,YAAY,MAAM;AAAA,IACtB,CAAC,SAAS,OAAO,QACf,YAAY,aACZ,IAAI,QAAQ,OAAO,MAAM,UACxB,KAAK,MAAM,QAAQ,OAAO,GAAG,aAAa,qBACzC,SAAS;AAAA,EACf;AACA,SAAO,CAAC,WAAW,GAAG,SAAS;AACjC;AAQO,SAAS,kBACd,OACA,SACA,QACS;AACT,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,QAAQ,KAAK,MAAM,QAAQ,QAAQ,gBAAgB;AACzD,MAAI,CAAC,SAAS,MAAM,aAAa,OAAO,SAAU,QAAO;AACzD,MAAI,CAAC,OAAO,eAAe,SAAS,MAAM,EAAE,EAAG,QAAO;AACtD,MAAI,OAAO,mBAAmB,QAAQ,CAAC,OAAO,gBAAgB,SAAS,MAAM,EAAE,EAAG,QAAO;AACzF,MAAI,OAAO,uBAAuB,QAAW;AAC3C,UAAM,SACJ,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE,OAAO,kBAC5D,OAAO,QACT,KAAK;AACP,UAAM,cAAc,OAAO,mBAAmB;AAAA,MAC5C,CAAC,WACC,OAAO,gBAAgB,QAAQ,gBAC9B,WAAW,eAAe,OAAO,kBAAkB;AAAA,IACxD;AACA,QACE,CAAC,YAAY;AAAA,MACX,CAAC,YACE,OAAO,oBAAoB,QAAQ,OAAO,gBAAgB,SAAS,MAAM,EAAE,MAC5E,CAAC,OAAO,kBAAkB,SAAS,MAAM,EAAE;AAAA,IAC/C,GACA;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,CAAC,aAAa,OAAO,SAAS,EAAE,GAAG,QAAQ,SAAS,MAAM,kBAAkB,KAAK,CAAC;AAC3F;AAEA,SAAS,yBAAyB,OAAc,SAAkB,QAA6B;AAC7F,MAAI,CAAC,OAAO,iBAAkB,QAAO;AACrC,MAAI,OAAO,uBAAuB,OAAW,QAAO;AACpD,QAAM,SACJ,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE,OAAO,kBAC5D,OAAO,QACT,KAAK;AACP,SAAO,CAAC,OAAO,mBAAmB;AAAA,IAChC,CAAC,WACC,OAAO,gBAAgB,QAAQ,gBAC9B,WAAW,eAAe,OAAO,kBAAkB,WACpD,OAAO;AAAA,EACX;AACF;AAGA,SAAS,iBAAiB,OAAc,KAAuB;AAC7D,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,cAAc,MAAM,aAAa;AAC1C,QACE,WAAW,MAAM,SAAS,eAC1B,WAAW,MAAM,aAAa,QAC9B,WAAW,MAAM,WAAW,KAC5B;AACA,YAAM,IAAI,WAAW,MAAM,QAAQ;AAAA,IACrC;AACA,QAAI,WAAW,gBAAgB,QAAQ,WAAW,eAAe;AAC/D,YAAM,IAAI,WAAW,YAAY;AACnC,eAAW,SAAS,OAAO,OAAO,WAAW,kBAAkB,CAAC,CAAC,GAAG;AAClE,UAAI,QAAQ,IAAK,OAAM,IAAI,KAAK;AAAA,IAClC;AAAA,EACF;AACA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU,OAAO,KAAK;AACtD;AAMO,SAAS,mBACd,OACA,KACA,YACe;AACf,SAAO,iBAAiB,OAAO,GAAG,EAAE,KAAK,UAAU,KAAK;AAC1D;AAEA,SAAS,oBAAoB,OAAc,SAA2B;AACpE,MAAI,QAAQ,YAAY,KAAM,QAAO;AACrC,MACE,QAAQ,eAAe,YACvB,KAAK,MAAM,YAAY,QAAQ,WAAW,GAAG,SAAS;AAEtD,WAAO;AACT,QAAM,WAAW,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE;AACxE,SACG,KAAK,MAAM,YAAY,QAAQ,WAAW,GAAG,SAAS,cACrD,KAAK,MAAM,YAAY,QAAQ,WAAW,GAAG,YAAY,QAAQ,WAClE,SAAS,2BACR,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,OAAO,GAAG;AAE7C;AAOO,SAAS,OAAO,OAAc,WAAmB,KAAuB;AAC7E,QAAM,UAAU,KAAK,MAAM,UAAU,SAAS;AAC9C,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,qBAAqB,SAAS;AAC5D,QAAM,iBAAiB,KAAK,MAAM,QAAQ,QAAQ,gBAAgB;AAClE,QAAM,QAAQ,CAAC,UACb,sBAAsB,KAAK,MAAM,QAAQ,KAAK,GAAI,QAAQ,gBAAgB,cAAc;AAC1F,QAAM,MAAM,CAAC,cAAsB,SAAkB,UAAgC;AAAA,IACnF,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,gBAAgB,MAAM,OAAO;AAAA,IAC7B,QAAQ;AAAA,EACV;AAKA,QAAM,SAAS,gBAAgB,OAAO,OAAO;AAC7C,QAAM,gBAAgB,OAAO,OAAO,CAAC,YAAY,aAAa,OAAO,SAAS,OAAO,CAAC;AACtF,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO,EAAE,MAAM,QAAQ,QAAQ,qBAAqB,iBAAiB,KAAK;AAAA,EAC5E;AAGA,MAAI,QAAQ,oBAAoB;AAC9B,UAAM,SAAS,KAAK,MAAM,aAAa,QAAQ,kBAAkB;AACjE,QAAI,UAAU,SAAS,OAAO,SAAS,QAAQ,QAAQ,kBAAkB,GAAG,GAAG;AAC7E,aAAO,IAAI,OAAO,IAAI,QAAQ,kBAAkB,QAAQ;AAAA,IAC1D;AAEA,QAAI,kBAAkB,OAAO,SAAS,MAAM,GAAG;AAC7C,aAAO,EAAE,MAAM,QAAQ,QAAQ,6BAA6B,iBAAiB,KAAK;AAAA,IACpF;AACA,QAAI,UAAU,yBAAyB,OAAO,SAAS,MAAM,GAAG;AAC9D,aAAO,EAAE,MAAM,QAAQ,QAAQ,2BAA2B,iBAAiB,KAAK;AAAA,IAClF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,iBAAiB;AAAA,QAAmB;AAAA,QAAO;AAAA,QAAK,CAAC,OAC/C,SAAS,OAAO,SAAS,QAAS,QAAQ,kBAAkB,EAAE;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,QAAQ;AACxB,QAAM,QAAQ,UAAU,KAAK,MAAM,aAAa,QAAQ,YAAY,IAAI;AACxE,QAAM,mBAAmB,oBAAoB,OAAO,OAAO;AAC3D,QAAM,kBACJ,CAAC,CAAC,WACF,CAAC,CAAC,SACF,OAAO,SAAS,QAAQ,OAAO,KAC/B,SAAS,OAAO,SAAS,OAAO,QAAQ,SAAS,GAAG;AAGtD,QAAM,sBAAsB,CAAC,YAC3B,MAAM,YAAY;AAAA,IAChB,CAAC,gBACE,WAAW,UAAU,SAAS,YAAY,qBAC3C,CAAC,cAAc,YAAY,GAAG,KAC9B,SAAS,OAAO,SAAS,YAAY,SAAS,GAAG;AAAA,EACrD;AACF,MACE,WACA,SACA,mBACA,CAAC,QAAQ,oBACT,YAAY,OAAO,SAAS,GAAG,MAC9B,CAAC,cAAc,OAAO,GAAG,KAAK,CAAC,oBAAoB,QAAQ,OAAO,IACnE;AACA,WAAO,IAAI,QAAQ,cAAc,QAAQ,SAAS,QAAQ;AAAA,EAC5D;AAIA,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,QAAQ,GAAG;AAC/C,UAAM,WAAW,MAAM,YAAY;AAAA,MACjC,CAAC,gBACE,WAAW,UAAU,SAAS,YAAY,qBAC3C,SAAS,OAAO,SAAS,YAAY,SAAS,GAAG;AAAA,IACrD;AACA,UAAM,WAAW,SAAS,OAAO,CAAC,eAAe,CAAC,cAAc,YAAY,GAAG,CAAC;AAChF,UAAM,WAAW,SAAS,SAAS,WAAW;AAC9C,UAAM,SAAS,SAAS,OAAO,CAAC,eAAe,WAAW,UAAU,SAAS,QAAQ;AACrF,UAAM,WAAW,SAAS,OAAO,CAAC,eAAe,WAAW,UAAU,SAAS,UAAU;AACzF,UAAM,SACJ,KAAK,OAAO,SAAS,MAAM,MAAM,mBAAmB,KAAK,OAAO,SAAS,QAAQ,IAAI;AACvF,QAAI,CAAC,OAAQ;AACb,QAAI;AACJ,QAAI,CAAC,QAAS,QAAO;AAAA,aACZ,QAAQ,iBAAiB,OAAO,MAAM,QAAQ,YAAY,QAAS,QAAO;AAAA,aAC1E,UAAU,KAAK,QAAQ,YAAY,QAAS,QAAO;AAAA,aACnD,QAAQ;AACf,aACE,KAAK,MAAM,QAAQ,OAAO,GAAG,aAC7B,KAAK,MAAM,QAAQ,QAAQ,gBAAgB,GAAG,WAC1C,2BACA;AAAA,aACC,gBAAiB,QAAO;AAAA,QAC5B,QAAO;AACZ,WAAO,IAAI,OAAO,IAAI,SAAS,IAAI;AAAA,EACrC;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,iBAAiB;AAAA,MAAmB;AAAA,MAAO;AAAA,MAAK,CAAC,OAC/C,cAAc;AAAA,QAAK,CAAC,YAClB,MAAM,YAAY;AAAA,UAChB,CAAC,gBACE,WAAW,UAAU,SAAS,YAAY,qBAC3C,SAAS,OAAO,SAAS,YAAY,SAAS,EAAE;AAAA,QACpD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAGO,SAAS,cACd,OACA,WACA,UACA,KACO;AACP,MAAI,SAAS,SAAS,MAAO,QAAO;AACpC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,UAAU,MAAM,SAAS;AAAA,MAAI,CAAC,YAC5B,QAAQ,OAAO,YACX;AAAA,QACE,GAAG;AAAA,QACH,SAAS;AAAA,UACP,cAAc,SAAS;AAAA,UACvB,SAAS,SAAS;AAAA,UAClB,YAAY;AAAA,QACd;AAAA,MACF,IACA;AAAA,IACN;AAAA,EACF;AACF;AAWO,SAAS,cACd,OACA,WACA,KACA,UACsB;AACtB,QAAM,aAAmC,CAAC;AAC1C,QAAM,UAAU,KAAK,MAAM,UAAU,SAAS;AAC9C,QAAM,WAAW,kBAAkB,MAAM,UAAU,QAAQ,WAAW,EAAE;AACxE,QAAM,SAAS,gBAAgB,OAAO,OAAO;AAC7C,QAAM,OAAO,CAAC,aAAqB,YAAoB,WAAW,KAAK,EAAE,aAAa,QAAQ,CAAC;AAE/F,QAAM,mBAAmB,oBAAoB,OAAO,OAAO;AAC3D,QAAM,iBAAiB,CAAC,SAAkB,YACxC,MAAM,YAAY;AAAA,IAChB,CAAC,eACC,WAAW,UAAU,SAAS,aAC7B,WAAW,CAAC,cAAc,YAAY,GAAG,MAC1C,SAAS,OAAO,SAAS,YAAY,SAAS,GAAG;AAAA,EACrD;AACF,QAAM,wBAAwB,CAAC,YAC7B,MAAM,YAAY;AAAA,IAChB,CAAC,eACC,SAAS,OAAO,SAAS,YAAY,SAAS,GAAG,MAChD,WAAW,UAAU,SAAS,YAAY;AAAA,EAC/C;AACF,QAAM,cAAc,OAAO,KAAK,qBAAqB;AACrD,QAAM,UAAU,QAAQ;AACxB,QAAM,cAAc,CAAC,CAAC,WAAW,CAAC,QAAQ,oBAAoB,YAAY,OAAO,SAAS,GAAG;AAE7F,MAAI,SAAS,SAAS,OAAO;AAC3B,UAAM,aAAa,KAAK,MAAM,aAAa,SAAS,YAAY;AAChE,QAAI,CAAC,YAAY;AACf,WAAK,eAAe,mCAAmC;AACvD,aAAO;AAAA,IACT;AACA,UAAM,aAAa,eAAe,OAAO,SAAS,YAAY,SAAS,SAAS,GAAG;AACnF,QAAI,YAAY;AACd,iBAAW,KAAK,UAAU;AAC1B,aAAO;AAAA,IACT;AACA,QAAI,QAAQ,sBAAsB,SAAS,iBAAiB,QAAQ,oBAAoB;AACtF,WAAK,cAAc,yCAAyC;AAAA,IAC9D;AACA,QAAI,CAAC,OAAO,SAAS,SAAS,OAAO,GAAG;AACtC,WAAK,eAAe,qDAAqD;AAAA,IAC3E;AACA,UAAM,gBACJ,KAAK,MAAM,QAAQ,SAAS,OAAO,GAAG,aACtC,KAAK,MAAM,QAAQ,QAAQ,gBAAgB,GAAG;AAChD,QAAI,kBAAkB,CAAC,SAAS,yBAAyB,QAAQ,gBAAgB;AAC/E,WAAK,eAAe,qDAAqD;AAAA,IAC3E;AACA,UAAM,gBAAgB;AAAA,MACpB,KAAK,MAAM,QAAQ,SAAS,OAAO;AAAA,MACnC,QAAQ;AAAA,MACR,KAAK,MAAM,QAAQ,QAAQ,gBAAgB;AAAA,IAC7C;AACA,QAAI,SAAS,mBAAmB,eAAe;AAC7C,WAAK,eAAe,iEAAiE;AAAA,IACvF;AAGA,UAAM,cACJ,CAAC,CAAC,WACF,eACA,QAAQ,iBAAiB,SAAS,gBAClC,QAAQ,YAAY,SAAS;AAC/B,QAAI,CAAC,eAAe,CAAC,QAAQ,oBAAoB;AAC/C,YAAM,QAAQ,OAAO,QAAQ,SAAS,OAAO;AAC7C,UAAI,OAAO,MAAM,GAAG,KAAK,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,qBAAqB,GAAG;AACnE,aAAK,eAAe,4DAA4D;AAAA,MAClF;AACA,UACE,WAAW,UAAU,SAAS,eAC7B,CAAC,oBAAoB,eAAe,SAAS,SAAS,cAAc,YAAY,GAAG,CAAC,IACrF;AACA,aAAK,cAAc,uEAAuE;AAAA,MAC5F;AAAA,IACF;AACA,UAAM,sBAAsB,CAAC,YAC3B,MAAM,YAAY;AAAA,MAChB,CAAC,eACE,UAAU,UAAU,SAAS,YAAY,qBAC1C,CAAC,cAAc,WAAW,GAAG,KAC7B,SAAS,OAAO,SAAS,WAAW,SAAS,GAAG;AAAA,IACpD;AACF,QACE,CAAC,QAAQ,sBACT,cAAc,YAAY,GAAG,KAC7B,oBAAoB,SAAS,OAAO,GACpC;AACA,WAAK,kBAAkB,qEAAqE;AAAA,IAC9F;AACA,QAAI,WAAW,eAAe,CAAC,QAAQ,oBAAoB;AACzD,YAAM,QAAQ,KAAK,MAAM,aAAa,QAAQ,YAAY;AAC1D,YAAM,gBACJ,CAAC,CAAC,UACD,CAAC,cAAc,OAAO,GAAG,KAAK,CAAC,oBAAoB,QAAQ,OAAO,MACnE,OAAO,SAAS,QAAQ,OAAO,KAC/B,SAAS,OAAO,SAAS,OAAO,QAAQ,SAAS,GAAG;AACtD,UACE,kBACC,SAAS,iBAAiB,QAAQ,gBAAgB,SAAS,YAAY,QAAQ,UAChF;AACA;AAAA,UACE;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,OAAO;AAGL,QACE,SAAS,WAAW,uBACpB,OAAO,KAAK,CAAC,YAAY,aAAa,OAAO,SAAS,OAAO,CAAC,GAC9D;AACA,WAAK,eAAe,iEAAiE;AAAA,IACvF;AACA,UAAM,SAAS,QAAQ,qBACnB,KAAK,MAAM,aAAa,QAAQ,kBAAkB,IAClD;AACJ,UAAM,iBACJ,CAAC,CAAC,UAAU,SAAS,OAAO,SAAS,QAAQ,QAAQ,kBAAkB,GAAG;AAC5E,QAAI,QAAQ,qBAAqB,iBAAiB,aAAa;AAC7D,WAAK,eAAe,kDAAkD;AAAA,IACxE;AAGA,UAAM,gBAAgB,OAAO,OAAO,CAAC,YAAY,aAAa,OAAO,SAAS,OAAO,CAAC;AACtF,UAAM,QAAQ,CAAC,CAAC,QAAQ,sBAAsB,kBAAkB,OAAO,SAAS,MAAM;AACtF,UAAM,iBACJ,cAAc,WAAW,IACrB,sBACA,QAAQ,qBACN,QACE,8BACA,UAAU,yBAAyB,OAAO,SAAS,MAAM,IACvD,4BACA,+BACJ;AACR,QAAI,SAAS,WAAW,gBAAgB;AACtC;AAAA,QACE,SAAS,SAAS,WAAW,+BAA+B,kBAAkB;AAAA,QAC9E,6BAA6B,SAAS,SAAS,iBAAiB;AAAA,MAClE;AAAA,IACF;AACA,UAAM,gBACJ,mBAAmB,+BACf;AAAA,MAAmB;AAAA,MAAO;AAAA,MAAK,CAAC,OAC9B,SAAS,OAAO,SAAS,QAAS,QAAQ,kBAAkB,EAAE;AAAA,IAChE,IACA,mBAAmB,yBACjB;AAAA,MAAmB;AAAA,MAAO;AAAA,MAAK,CAAC,OAC9B,cAAc;AAAA,QAAK,CAAC,YAClB,MAAM,YAAY;AAAA,UAChB,CAAC,gBACE,WAAW,UAAU,SAAS,YAAY,qBAC3C,SAAS,OAAO,SAAS,YAAY,SAAS,EAAE;AAAA,QACpD;AAAA,MACF;AAAA,IACF,IACA;AACR,QAAI,SAAS,WAAW,kBAAkB,SAAS,oBAAoB,eAAe;AACpF,WAAK,eAAe,mEAAmE;AAAA,IACzF;AAAA,EACF;AACA,SAAO;AACT;;;AC35BA,IAAM,uBAAuB;AAE7B,SAAS,WAAW,OAAuC;AACzD,MAAI,OAAO,SAAS,YAAa,QAAO,KAAK,IAAI,GAAG,MAAM,KAAK;AAC/D,SAAO,KAAK,IAAI,GAAG,OAAO,YAAY,oBAAoB;AAC5D;AAUA,SAAS,YACP,OACA,KACA,cACc;AACd,MAAI,UAAU,KAAM,QAAO,EAAE,MAAM,UAAU;AAC7C,QAAM,QACJ,iBAAiB,UAChB,MAAM,eAAe,QAAQ,MAAM,MAAM,cAAc;AAC1D,QAAM,iBAAoC,CAAC;AAC3C,MAAI,MAAM,mBAAmB,QAAQ,MAAM,iBAAiB,KAAK;AAC/D,mBAAe,KAAK,MAAM,cAAc;AAAA,EAC1C;AACA,aAAW,UAAU,MAAM,SAAS;AAClC,QAAI,OAAO,WAAW,gBAAgB,OAAO,aAAa,QAAQ,OAAO,WAAW,MAAM;AACxF,qBAAe,KAAK,OAAO,QAAQ;AAAA,IACrC;AAAA,EACF;AACA,MAAI,eAAe,SAAS,GAAG;AAC7B,WAAO,eAAe,SAAS,IAAI,IAC/B,EAAE,MAAM,aAAa,UAAU,KAAK,IACpC,EAAE,MAAM,aAAa,UAAU,KAAK,IAAI,GAAI,cAA2B,EAAE;AAAA,EAC/E;AACA,QAAM,WACJ,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,WAAW,SAAS,KACzD,MAAM,mBAAmB,QAAQ,MAAM,kBAAkB;AAC5D,SAAO,YAAY,QAAQ,EAAE,MAAM,YAAY,IAAI,EAAE,MAAM,UAAU;AACvE;AAEA,SAAS,oBACP,OACA,YACsB;AACtB,QAAM,iBAAiB,MAAM,OAC1B,OAAO,CAAC,UAAU,MAAM,aAAa,WAAW,QAAQ,EACxD,IAAI,CAAC,UAAU,MAAM,EAAE;AAC1B,QAAM,YAAY,WAAW,oBAAoB,gBAAgB;AAAA,IAC/D,CAAC,YAAY,CAAC,WAAW,iBAAiB,SAAS,OAAO;AAAA,EAC5D;AACA,QAAM,WAAW;AAAA,IACf,WAAW;AAAA,IACX,MAAM;AAAA,IACN,MAAM,oBAAoB,WAAW,QAAQ;AAAA,EAC/C;AACA,QAAM,YACJ,WAAW,UAAU,SAAS,aAC1B,EAAE,MAAM,YAAY,SAAS,WAAW,UAAU,kBAAkB,IACpE;AAAA,IACE,MAAM;AAAA,IACN,OACE,WAAW,UAAU,MAAM,SAAS,iBAChC,EAAE,MAAM,eAAe,IACvB,WAAW,UAAU,MAAM,SAAS,eAClC;AAAA,MACE,MAAM;AAAA,MACN,cAAc,WAAW,UAAU,MAAM;AAAA,MACzC,oBAAoB,WAAW,UAAU,MAAM;AAAA,IACjD,IACA,EAAE,MAAM,UAAU,WAAW,WAAW,UAAU,MAAM,cAAc;AAAA,EAChF;AACN,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,UAAU,WAAW;AAAA,IACrB;AAAA,IACA,SAAS,WAAW,WAAW;AAAA,IAC/B,kBAAkB,WAAW;AAAA,IAC7B,qBAAqB,WAAW,wBAAwB;AAAA,IACxD,cAAc,WAAW,OAAO,kBAAkB;AAAA,IAClD,gBAAgB;AAAA,IAChB,iBAAiB,WAAW;AAAA,IAC5B,GAAI,WAAW,uBAAuB,SAClC,CAAC,IACD,EAAE,oBAAoB,WAAW,mBAAmB;AAAA,IACxD,gBAAgB,EAAE,GAAG,WAAW,OAAO,eAAe;AAAA,IACtD,OAAO;AAAA,EACT;AACF;AAGO,SAAS,iBAAiB,OAG/B;AACA,QAAM,EAAE,SAAS,UAAU,UAAU,IAAI;AACzC,QAAM,WAAW,CAAC,aAAqB,SAAS,UAAU,QAAQ;AAClE,QAAM,UAAU,MAAM,OACnB;AAAA,IACC,CAAC,WACE,UAAU,oBAAoB,QAAQ,UAAU,gBAAgB,SAAS,MAAM,EAAE,MAClF,SAAS,MAAM,QAAQ,GAAG,YAAY,UACrC,QAAQ,2BAA2B,QAClC,MAAM,aAAa,QAAQ;AAAA,EACjC,EACC,IAAI,CAAC,UAAU,MAAM,EAAE;AAC1B,QAAM,SAAS,MAAM,YAAY,OAAO,CAAC,eAAe;AACtD,QAAI,WAAW,UAAU,SAAS,YAAY;AAC5C,YAAM,QAAQ,WAAW,UAAU;AACnC,aAAO,QAAQ,kBAAkB;AAAA,QAC/B,CAAC,cACC,UAAU,aAAa,WAAW,YAClC,UAAU,sBAAsB,UAC/B,CAAC,UAAU,uBACT,UAAU,oBAAoB,cAAc,QAAQ,MACnD,UAAU,oBAAoB,iBAAiB,WAAW;AAAA,MAClE;AAAA,IACF;AACA,QAAI,WAAW,uBAAuB,OAAW,QAAO;AACxD,UAAM,SAAS,mBAAmB,UAAU,WAAW,QAAQ;AAC/D,UAAM,cAAc,WAAW,UAAU,yBAAyB,UAAU;AAC5E,QAAI,WAAW,YAAa,QAAO;AACnC,QAAI,WAAW,eAAgB,QAAO,CAAC;AACvC,WAAO,WAAW,eAAe;AAAA,EACnC,CAAC;AACD,QAAM,YAAY,oBAAI,IAAI;AAAA,IACxB,GAAG,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,QAAQ;AAAA,IAC7C,GAAG,MAAM,YAAY,IAAI,CAAC,eAAe,WAAW,QAAQ;AAAA,EAC9D,CAAC;AACD,QAAM,UAAU,QAAQ;AACxB,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,OAAO;AAAA,MACL,UAAU;AAAA,QACR,cAAc;AAAA,UACZ,UAAU,SAAS;AAAA,UACnB,iBAAiB,OAAO;AAAA,YACtB,CAAC,GAAG,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,mBAAmB,UAAU,QAAQ,CAAC,CAAC;AAAA,UACrF;AAAA,UACA,uBAAuB,SAAS;AAAA,UAChC,eAAe,OAAO;AAAA,YACpB,OAAO,QAAQ,SAAS,aAAa,EAAE,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC;AAAA,UACxF;AAAA,UACA,4BAA4B,SAAS;AAAA,UACrC,yBAAyB,SAAS;AAAA,QACpC;AAAA,QACA,QAAQ,CAAC;AAAA,QACT,oBAAoB,CAAC;AAAA,MACvB;AAAA,MACA,YAAY;AAAA,QACV;AAAA,UACE,IAAI,UAAU;AAAA,UACd,MAAM,UAAU;AAAA,UAChB,SAAS,UAAU;AAAA,UACnB,eAAe;AAAA,QACjB;AAAA,MACF;AAAA,MACA,QAAQ,MAAM,OAAO,IAAI,CAAC,YAAY;AAAA,QACpC,IAAI,OAAO;AAAA,QACX,QAAQ,OAAO;AAAA,QACf,uBAAuB,OAAO;AAAA,MAChC,EAAE;AAAA,MACF,QAAQ,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,QACnC,IAAI,MAAM;AAAA,QACV,UAAU,MAAM;AAAA,QAChB,iBAAiB,MAAM;AAAA,QACvB,MAAM,MAAM,QAAQ;AAAA,MACtB,EAAE;AAAA,MACF,aAAa,OAAO,IAAI,CAAC,eAAe,oBAAoB,OAAO,UAAU,CAAC;AAAA,MAC9E,UAAU;AAAA,QACR;AAAA,UACE,IAAI,QAAQ;AAAA,UACZ,aAAa,QAAQ;AAAA,UACrB,YAAY,QAAQ;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB,uBAAuB,QAAQ,kBAAkB;AAAA,YAAQ,CAAC,cACxD,UAAU,qBAAqB,cAAc,QAAQ,KACjD;AAAA,cACE;AAAA,gBACE,cAAc,UAAU,oBAAoB;AAAA,gBAC5C,SAAS,UAAU;AAAA,cACrB;AAAA,YACF,IACA,CAAC;AAAA,UACP;AAAA,UACA,kBAAkB,QAAQ;AAAA,UAC1B,gBAAgB,QAAQ;AAAA,UACxB,SAAS,UACL;AAAA,YACE,cAAc,QAAQ;AAAA,YACtB,SAAS,QAAQ;AAAA,YACjB,YAAY,QAAQ;AAAA,UACtB,IACA;AAAA,UACJ,oBAAoB,SAAS,WAAW,aAAa,QAAQ,eAAe;AAAA,UAC5E,eAAe,QAAQ;AAAA,UACvB,kBAAkB,QAAQ,kBAAkB,SAAS;AAAA,QACvD;AAAA,MACF;AAAA,MACA,YAAY,OAAO;AAAA,QACjB,CAAC,GAAG,SAAS,EAAE,IAAI,CAAC,aAAa;AAAA,UAC/B;AAAA,UACA,SAAS,cAAc,QACvB,MAAM,YAAY,KAAK,CAAC,eAAe,WAAW,OAAO,QAAQ,YAAY,GACzE,aAAa,WACb,KAAK,IAAI,GAAG,QAAQ,UAAU,IAC9B,WAAW,MAAM,WAAW,QAAQ,CAAC;AAAA,QAC3C,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;AAQO,SAAS,oBACd,UACA,OACoB;AACpB,MAAI,SAAS,SAAS,OAAO;AAC3B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,cAAc,SAAS;AAAA,MACvB,SAAS,SAAS;AAAA,MAClB,gBAAgB,SAAS;AAAA,MACzB,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AACA,MAAI,SAAS,WAAW,8BAA8B;AACpD,WAAO,EAAE,MAAM,QAAQ,QAAQ,SAAS,QAAQ,iBAAiB,SAAS,gBAAgB;AAAA,EAC5F;AACA,QAAM,EAAE,OAAO,UAAU,IAAI,iBAAiB,KAAK;AACnD,QAAM,UAAU,MAAM,SAAS,KAAK,CAAC,cAAc,UAAU,OAAO,SAAS;AAC7E,QAAM,UAAU,MAAM,WAAW,CAAC,EAAG;AACrC,QAAM,aACH,gBAAgB,OAAO,OAAO,EAC9B,KAAK,CAAC,YAAY,YAAY,QAAQ,QAAQ,SAAS,OAAO,CAAC;AAClE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,aAAa,yBAAyB;AAAA,IAC9C,iBAAiB,SAAS;AAAA,EAC5B;AACF;AAGO,SAAS,uBACd,OACA,UACgC;AAChC,QAAM,EAAE,OAAO,UAAU,IAAI,iBAAiB,KAAK;AACnD,SAAiB,cAAc,OAAO,WAAW,MAAM,KAAK,oBAAoB,UAAU,KAAK,CAAC;AAClG;","names":[]}

package/dist/types.d.ts

@@ -89,12 +89,33 @@ export type QuotaWindow = {
     status: QuotaWindowStatus;
 };
 export type QuotaSource = "usage_endpoint" | "response_headers" | "refusal";
+/**
+ * Which reported limits one stored block (a model cooldown, or the quota
+ * exhaustion deadline) came from: the provider's own window ids, as the
+ * observation that set the block named them, tied to that block's exact
+ * deadline. A block whose deadline no longer equals `until` (a later write
+ * extended it without evidence) has no claim. A block without a claim (an
+ * unrecognized or missing limit, or a refusal without usage evidence) never
+ * ends before its own deadline.
+ */
+export type QuotaBlockClaim = {
+    /** The deadline of the block this claim explains. */
+    until: number;
+    /** When the observation that set the block was made. */
+    observedAt: number;
+    /** The provider window ids whose limit set the block (never empty). */
+    windowIds: readonly string[];
+};
 export type SubscriptionQuota = {
     windows: readonly QuotaWindow[];
     /** Per-model cooldowns (model-specific limits some providers report). */
     modelCooldowns: Readonly<Record<ModelId, number>>;
+    /** Optional evidence per model cooldown (see `QuotaBlockClaim`); absent: none. */
+    modelCooldownClaims?: Readonly<Record<ModelId, QuotaBlockClaim>>;
     exhaustedUntil: number | null;
     exhaustedKind: "quota" | "rate_limit" | null;
+    /** Optional evidence for `exhaustedUntil` (see `QuotaBlockClaim`); absent: none. */
+    exhaustedClaim?: QuotaBlockClaim | null;
     revision: number;
     observedAt: number | null;
     observedRefreshGeneration: number | null;
@@ -274,6 +295,8 @@ export type PlacementSwitch = "initial" | "sticky" | "pinned" | "reselected_cold
  */
 export type AccountSwitchReason = "initial" | "reselected_cold" | "failover_same_provider" | "failover_cross_provider" | "return_to_preferred" | "explicit_choice" | "revoked";
 export type WaitReason = "pinned_account_unavailable"
+/** Allocation was explicitly switched off; a person must enable it or change the pin. */
+ | "pinned_account_disabled"
 /** The explicit choice can never serve this work until a person changes something (D-24). */
  | "pinned_account_ineligible" | "no_eligible_capacity"
 /** No candidate model may be used: workspace ceiling or provider switch (D-17, D-26). */

package/dist/wait-presentation.d.ts

@@ -0,0 +1,4 @@
+/** Current wait guidance shared by initial parking and later reclassification.
+ * These are new audit events only; never rewrite an earlier model request. */
+export declare function subscriptionCapacityWaitReasonText(reason: string, name: string): string | null;
+export declare function subscriptionCapacityWaitNeedsAction(reason: string): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/subscriptions",
-  "version": "2.0.1",
+  "version": "2.0.2-canary.38789554071001",
   "description": "Pure, provider-neutral subscription account policy for Opengeni: contract types, effective settings, eligibility, placement, failover order, cache coldness, the shared quota model and adapter interfaces. No database, provider SDK or network dependency.",
   "license": "Apache-2.0",
   "repository": {

package/src/adapter.ts

@@ -1,3 +1,4 @@
+import type { SubscriptionQuotaBlock } from "./quota";
 import type { CacheFacts, ModelId, ModelTier, ProviderId, SubscriptionQuota } from "./types";
 
 /**
@@ -284,6 +285,22 @@ export interface SubscriptionCoreAdapter<Credential = unknown> {
    * quota exhaustion. Absent: every reading below the limit does.
    */
   usageReadConfirmsAvailability?(response: unknown): boolean;
+  /**
+   * With `usageReadEndsQuotaExhaustion`: which stored blocks one `fetchUsage`
+   * response that confirms availability shows have ended, judged from each
+   * block's own claim (the limits the observation that set it named, tied
+   * to its exact deadline: `QuotaBlockClaim`). `modelId` is the cooled
+   * product model, or null for the quota exhaustion deadline. The predicate
+   * must be false for a block without a claim, for a claim observed no
+   * earlier than the response, and unless the response reports every
+   * claimed limit numerically below it (an explicit "no such limit" does
+   * not clear a limit that refused). A cooldown the reading itself reports
+   * stands, and so does every block the predicate does not end.
+   * When defined, a stored quota exhaustion deadline ends only where it
+   * returns true. Absent: a reading ends no cooldown (each runs until its
+   * own end), and `usageReadEndsQuotaExhaustion` alone decides the deadline.
+   */
+  usageReadEndsClaimedBlock?(response: unknown): (block: SubscriptionQuotaBlock) => boolean;
   /**
    * The provider's usage-endpoint readings are complete: each reports every
    * window that limits the connection, so a stored exhausted window that a

package/src/index.ts

@@ -8,3 +8,4 @@ export * from "./spread";
 export * from "./placement";
 export * from "./settlement";
 export * from "./adapter";
+export * from "./wait-presentation";

package/src/placement.ts

@@ -316,6 +316,11 @@ export function decidePlacement(input: PlacementInput): PlacementDecision {
     ) {
       return wait("pinned_account_ineligible", null);
     }
+    if (
+      connectionIneligibility(input, bound, session.preferredModelId).includes("allocator_disabled")
+    ) {
+      return wait("pinned_account_disabled", null);
+    }
     const at = servableAgainAt(input, bound, session.preferredModelId);
     return wait("pinned_account_unavailable", typeof at === "number" ? at : null);
   }