@openrig/cli 0.4.7 → 0.5.0

package/daemon/dist/domain/provider/provider-service-impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-service-impl.js","sourceRoot":"","sources":["../../../src/domain/provider/provider-service-impl.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,oGAAoG;AAGpG,OAAO,EACL,2BAA2B,GAE5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAA0B,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAqB,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAqBhE,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;IAAG,CAAC;IAE9D,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,IAAmC,CAAC;QACxC,IAAI,KAAiC,CAAC;QACtC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACnD,OAAO,yBAAyB,CAAC;YAC/B,aAAa,EAAE,QAAQ;YACvB,SAAS;YACT,cAAc,EAAE,GAAG,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC7C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB;oBAC9B,CAAC,CAAC,2BAA2B,CAAC;wBAC5B,KAAK,EAAE,SAAS,EAAE;wBAClB,IAAI,EAAE,QAAQ,EAAE;wBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB;wBACtC,GAAG,EAAE,IAAI;wBACT,WAAW,EAAE,2BAA2B;qBACzC,CAAC;oBACF,CAAC,CAAC,EAAE,CAAC;aACR;YACD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAEO,SAAS;QACf,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACvC,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,KAAK,CAAC,oBAAoB;oBAAE,SAAS;gBAC1C,KAAK,CAAC,IAAI,CAAC;oBACT,WAAW,EAAE,KAAK,CAAC,oBAAoB;oBACvC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;oBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS;oBACnC,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA4B;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3E,8FAA8F;QAC9F,8FAA8F;QAC9F,8FAA8F;QAC9F,uFAAuF;QACvF,OAAO,cAAc,CAAC;YACpB,cAAc,EAAE,MAAM,EAAE,QAAQ,IAAI,OAAO;YAC3C,eAAe,EAAE,MAAM,EAAE,SAAS,IAAI,SAAS;YAC/C,uBAAuB,EAAE,IAAI;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA0B;QAC5C,+EAA+E;QAC/E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACtF,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAgC,EAAE,CAAC;QACjF,CAAC;QACD,4FAA4F;QAC5F,uFAAuF;QACvF,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,gCAAgC,CAAC,EAAE,CAAC;IACnF,CAAC;CACF"}

package/daemon/dist/domain/provider/provider-service.d.ts

@@ -0,0 +1,33 @@
+import type { FourBlockReadModel, PrecheckResult } from "./provider-types.js";
+export interface ProviderPrecheckInput {
+    seat: string;
+    toAccount: string;
+}
+export interface ProviderSwitchInput {
+    seat: string;
+    toAccount: string;
+    forceUnsafe: boolean;
+}
+/**
+ * A discriminated union that TYPE-ENFORCES BR-1 fail-visibility: `succeeded`/`rebind_in_progress`
+ * carry NO reasons; `failed_safely` REQUIRES a non-empty reason tuple — a failed switch with no
+ * explanation cannot compile. Reasons are string[] so seam D can surface OPERATIONAL failures
+ * (auth-switch failure, action-record failure), not only PrecheckReason refusals.
+ */
+export type ProviderSwitchResult = {
+    outcome: "succeeded";
+} | {
+    outcome: "rebind_in_progress";
+} | {
+    outcome: "failed_safely";
+    reasons: [string, ...string[]];
+};
+export interface ProviderService {
+    /** The ONE four-block read model; the filtered block routes are projections of this. */
+    getReadModel(): Promise<FourBlockReadModel>;
+    /** Resolve the target/seat state at call time (validate-at-use) and return the safety verdict. */
+    precheck(input: ProviderPrecheckInput): Promise<PrecheckResult>;
+    /** Precheck-gated switch; returns an explicit business outcome (never a transport error). */
+    switchAccount(input: ProviderSwitchInput): Promise<ProviderSwitchResult>;
+}
+//# sourceMappingURL=provider-service.d.ts.map

package/daemon/dist/domain/provider/provider-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-service.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/provider-service.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE9E,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,GACxB;IAAE,OAAO,EAAE,oBAAoB,CAAA;CAAE,GACjC;IAAE,OAAO,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;CAAE,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,wFAAwF;IACxF,YAAY,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC5C,kGAAkG;IAClG,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChE,6FAA6F;IAC7F,aAAa,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC1E"}

package/daemon/dist/domain/provider/provider-service.js

@@ -0,0 +1,6 @@
+// Slice-04 (OPR.0.5.0.4) — the ProviderService seam. The routes (seam B) are thin over this
+// interface; the real implementation (collection from rig auth + seat registry + the three lanes,
+// switch composition + action recording) is seams C/D. Keeping this an interface lets the routes
+// register and honestly 503 until the production service is wired.
+export {};
+//# sourceMappingURL=provider-service.js.map

package/daemon/dist/domain/provider/provider-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-service.js","sourceRoot":"","sources":["../../../src/domain/provider/provider-service.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,kGAAkG;AAClG,iGAAiG;AACjG,mEAAmE"}

package/daemon/dist/domain/provider/provider-signals.d.ts

@@ -0,0 +1,76 @@
+import type { ProviderKind, ProviderSignal } from "./provider-types.js";
+/** One provider-native usage window from the Codex app-server `account/rateLimits/read`. */
+export interface CodexWindowReading {
+    usedPercent: number;
+    windowDurationMins: number;
+    resetsAt: string;
+}
+/** Subset of the Codex app-server `account/rateLimits/read` response we consume. */
+export interface CodexRateLimitReading {
+    primary?: CodexWindowReading;
+    secondary?: CodexWindowReading;
+}
+export interface CodexSignalInput {
+    accountRef: string;
+    /** Result of feature-probing the app-server generated schema for the rate-limit methods. */
+    probe: {
+        supported: boolean;
+    };
+    /** Present only when the probe was supported and a read actually returned. */
+    reading?: CodexRateLimitReading;
+    asOf: string;
+    staleAfter?: string;
+}
+export declare const CODEX_UNKNOWN_REASON: {
+    readonly probe_unsupported: "codex_app_server_unavailable";
+    readonly empty_reading: "codex_read_returned_no_windows";
+};
+/**
+ * Normalize a Codex app-server rate-limit read into `signals[]` rows.
+ * - probe unsupported → one explicit `unknown` row.
+ * - supported but no windows → one explicit `unknown` row (never fabricated zeros).
+ * - supported with windows → one `provider_structured_read` row per provider-native window,
+ *   preserving the native primary/secondary distinction.
+ */
+export declare function codexRateLimitSignals(input: CodexSignalInput): ProviderSignal[];
+/** One Claude subscription window from the statusline `rate_limits` object. */
+export interface ClaudeStatuslineWindow {
+    usedPercent: number;
+    resetsAt: string;
+}
+export interface ClaudeStatuslineReading {
+    five_hour?: ClaudeStatuslineWindow;
+    seven_day?: ClaudeStatuslineWindow;
+}
+export interface ClaudeSignalInput {
+    /** Claude statusline carries session identity but no honest account identity (Option A). */
+    seatSession: string;
+    /** false = the statusline cache has not been written yet (before the first API response). */
+    cachePresent: boolean;
+    /** Present only when the cache exists and carried a rate_limits object. */
+    reading?: ClaudeStatuslineReading;
+    asOf: string;
+    staleAfter?: string;
+}
+export declare const CLAUDE_UNKNOWN_REASON: {
+    readonly no_statusline_cache_yet: "claude_no_statusline_cache_yet";
+    readonly empty_reading: "claude_statusline_cache_had_no_windows";
+};
+/**
+ * Normalize a Claude statusline `rate_limits` reading into `signals[]` rows.
+ * - seat before first response (no cache) → explicit unknown row.
+ * - seat with subscription windows → one `provider_statusline` row per window (five_hour, and
+ *   seven_day normalized to "weekly"); a genuine 0 survives as 0.
+ * - subscription with cache but no windows → explicit unknown row (never fabricated zeros).
+ */
+export declare function claudeStatuslineSignals(input: ClaudeSignalInput): ProviderSignal[];
+export type ReactiveEventKind = "at_limit" | "stream_failure" | "stop_error";
+export interface ReactiveEventInput {
+    provider: ProviderKind;
+    accountRef: string;
+    kind: ReactiveEventKind;
+    asOf: string;
+    staleAfter: string;
+}
+export declare function reactiveEventSignal(input: ReactiveEventInput): ProviderSignal;
+//# sourceMappingURL=provider-signals.d.ts.map

package/daemon/dist/domain/provider/provider-signals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-signals.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/provider-signals.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAExE,4FAA4F;AAC5F,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,oFAAoF;AACpF,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,KAAK,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9B,8EAA8E;IAC9E,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,oBAAoB;;;CAGvB,CAAC;AA2BX;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,GAAG,cAAc,EAAE,CAsC/E;AASD,+EAA+E;AAC/E,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,4FAA4F;IAC5F,WAAW,EAAE,MAAM,CAAC;IACpB,6FAA6F;IAC7F,YAAY,EAAE,OAAO,CAAC;IACtB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,qBAAqB;;;CAGxB,CAAC;AAsBX;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,GAAG,cAAc,EAAE,CAkClF;AAQD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,gBAAgB,GAAG,YAAY,CAAC;AAE7E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,YAAY,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IAGb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,cAAc,CAe7E"}

package/daemon/dist/domain/provider/provider-signals.js

@@ -0,0 +1,144 @@
+// Slice-04 (OPR.0.5.0.4) — signals[] normalization (the §2 detection design, encoded).
+// Authority: locked packet 3ffa3c22 IMPLEMENTATION-PRD §2 + the 2026-07-31 RESEARCH verdict.
+// Honesty rules enforced here: feature-probe-negative and empty reads become EXPLICIT
+// `unknown` rows (never silent zeros, never missing rows); only a real structured read is
+// `allow_switch_decision` (BR-2).
+export const CODEX_UNKNOWN_REASON = {
+    probe_unsupported: "codex_app_server_unavailable",
+    empty_reading: "codex_read_returned_no_windows",
+};
+function codexUnknownSignal(accountRef, asOf, unknownReason, supportsNotification, staleAfter) {
+    return {
+        provider: "codex",
+        accountRef,
+        sourceClass: "unknown",
+        authority: "unknown",
+        asOf,
+        staleAfter,
+        unknownReason,
+        // Unknown DATA must not erase KNOWN transport capability: when the app-server is present
+        // (supported-but-empty) `account/rateLimits/updated` still exists, so the notification
+        // capability is true; only an absent app-server (probe unsupported) is false.
+        supportsNotification,
+        automationUse: "do_not_automate",
+        // usedPercent / resetsAt / window deliberately OMITTED — an unknown row never carries a
+        // fabricated zero (the BR-2 silent-zero trap). A genuine 0 only ever comes from a real read.
+    };
+}
+/**
+ * Normalize a Codex app-server rate-limit read into `signals[]` rows.
+ * - probe unsupported → one explicit `unknown` row.
+ * - supported but no windows → one explicit `unknown` row (never fabricated zeros).
+ * - supported with windows → one `provider_structured_read` row per provider-native window,
+ *   preserving the native primary/secondary distinction.
+ */
+export function codexRateLimitSignals(input) {
+    const { accountRef, probe, reading, asOf, staleAfter } = input;
+    if (!probe.supported) {
+        // App-server absent → no notification transport.
+        return [codexUnknownSignal(accountRef, asOf, CODEX_UNKNOWN_REASON.probe_unsupported, false, staleAfter)];
+    }
+    const windows = [
+        ["primary", reading?.primary],
+        ["secondary", reading?.secondary],
+    ];
+    const rows = [];
+    for (const [window, w] of windows) {
+        if (!w)
+            continue;
+        rows.push({
+            provider: "codex",
+            accountRef,
+            sourceClass: "provider_structured_read",
+            authority: "account_cross_device",
+            window,
+            usedPercent: w.usedPercent,
+            resetsAt: w.resetsAt,
+            windowDurationMins: w.windowDurationMins,
+            asOf,
+            staleAfter,
+            supportsNotification: true, // Codex app-server carries account/rateLimits/updated
+            automationUse: "allow_switch_decision",
+        });
+    }
+    if (rows.length === 0) {
+        // App-server present but returned no windows → unknown DATA, but the transport capability
+        // (account/rateLimits/updated) is still KNOWN present → supportsNotification stays true.
+        return [codexUnknownSignal(accountRef, asOf, CODEX_UNKNOWN_REASON.empty_reading, true, staleAfter)];
+    }
+    return rows;
+}
+export const CLAUDE_UNKNOWN_REASON = {
+    no_statusline_cache_yet: "claude_no_statusline_cache_yet",
+    empty_reading: "claude_statusline_cache_had_no_windows",
+};
+function claudeUnknownSignal(seatSession, asOf, unknownReason, staleAfter) {
+    return {
+        provider: "claude",
+        seatSession,
+        sourceClass: "unknown",
+        authority: "unknown",
+        asOf,
+        staleAfter,
+        unknownReason,
+        supportsNotification: false, // Claude statusline has no push transport
+        automationUse: "do_not_automate",
+        // usedPercent / resetsAt / window OMITTED — never a fabricated zero.
+    };
+}
+/**
+ * Normalize a Claude statusline `rate_limits` reading into `signals[]` rows.
+ * - seat before first response (no cache) → explicit unknown row.
+ * - seat with subscription windows → one `provider_statusline` row per window (five_hour, and
+ *   seven_day normalized to "weekly"); a genuine 0 survives as 0.
+ * - subscription with cache but no windows → explicit unknown row (never fabricated zeros).
+ */
+export function claudeStatuslineSignals(input) {
+    const { seatSession, cachePresent, reading, asOf, staleAfter } = input;
+    if (!cachePresent) {
+        return [claudeUnknownSignal(seatSession, asOf, CLAUDE_UNKNOWN_REASON.no_statusline_cache_yet, staleAfter)];
+    }
+    const windows = [
+        ["five_hour", reading?.five_hour],
+        ["weekly", reading?.seven_day],
+    ];
+    const rows = [];
+    for (const [window, w] of windows) {
+        if (!w)
+            continue;
+        rows.push({
+            provider: "claude",
+            seatSession,
+            sourceClass: "provider_statusline",
+            authority: "account_cross_device", // Claude.ai Pro/Max subscription windows are account-level
+            window,
+            usedPercent: w.usedPercent,
+            resetsAt: w.resetsAt,
+            asOf,
+            staleAfter,
+            supportsNotification: false, // no push unless OpenRig later supplies a cache-update event
+            automationUse: "allow_switch_decision",
+        });
+    }
+    if (rows.length === 0) {
+        return [claudeUnknownSignal(seatSession, asOf, CLAUDE_UNKNOWN_REASON.empty_reading, staleAfter)];
+    }
+    return rows;
+}
+export function reactiveEventSignal(input) {
+    return {
+        provider: input.provider,
+        accountRef: input.accountRef,
+        sourceClass: "provider_event",
+        authority: "reactive_error",
+        asOf: input.asOf,
+        staleAfter: input.staleAfter,
+        // supportsNotification is OMITTED: it describes a per-account transport capability (true for
+        // Codex account/rateLimits/updated, false/unknown for Claude statusline). A generic reactive
+        // event does not establish that capability — hard-coding false would fabricate it.
+        // At-limit exhaustion is an actionable switch trigger; stream/stop errors are advisory.
+        automationUse: input.kind === "at_limit" ? "allow_switch_decision" : "advisory_only",
+        // No usedPercent — a reactive event is exhaustion evidence, not a remaining meter.
+    };
+}
+//# sourceMappingURL=provider-signals.js.map

package/daemon/dist/domain/provider/provider-signals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-signals.js","sourceRoot":"","sources":["../../../src/domain/provider/provider-signals.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,6FAA6F;AAC7F,sFAAsF;AACtF,0FAA0F;AAC1F,kCAAkC;AA2BlC,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,iBAAiB,EAAE,8BAA8B;IACjD,aAAa,EAAE,gCAAgC;CACvC,CAAC;AAEX,SAAS,kBAAkB,CACzB,UAAkB,EAClB,IAAY,EACZ,aAAqB,EACrB,oBAA6B,EAC7B,UAAmB;IAEnB,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,UAAU;QACV,WAAW,EAAE,SAAS;QACtB,SAAS,EAAE,SAAS;QACpB,IAAI;QACJ,UAAU;QACV,aAAa;QACb,yFAAyF;QACzF,uFAAuF;QACvF,8EAA8E;QAC9E,oBAAoB;QACpB,aAAa,EAAE,iBAAiB;QAChC,wFAAwF;QACxF,6FAA6F;KAC9F,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAuB;IAC3D,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAE/D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,iDAAiD;QACjD,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,oBAAoB,CAAC,iBAAiB,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;IAC3G,CAAC;IAED,MAAM,OAAO,GAAwG;QACnH,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC;QAC7B,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC;KAClC,CAAC;IAEF,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,CAAC,IAAI,CAAC;YACR,QAAQ,EAAE,OAAO;YACjB,UAAU;YACV,WAAW,EAAE,0BAA0B;YACvC,SAAS,EAAE,sBAAsB;YACjC,MAAM;YACN,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;YACxC,IAAI;YACJ,UAAU;YACV,oBAAoB,EAAE,IAAI,EAAE,sDAAsD;YAClF,aAAa,EAAE,uBAAuB;SACvC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,0FAA0F;QAC1F,yFAAyF;QACzF,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,oBAAoB,CAAC,aAAa,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA+BD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,uBAAuB,EAAE,gCAAgC;IACzD,aAAa,EAAE,wCAAwC;CAC/C,CAAC;AAEX,SAAS,mBAAmB,CAC1B,WAAmB,EACnB,IAAY,EACZ,aAAqB,EACrB,UAAmB;IAEnB,OAAO;QACL,QAAQ,EAAE,QAAQ;QAClB,WAAW;QACX,WAAW,EAAE,SAAS;QACtB,SAAS,EAAE,SAAS;QACpB,IAAI;QACJ,UAAU;QACV,aAAa;QACb,oBAAoB,EAAE,KAAK,EAAE,0CAA0C;QACvE,aAAa,EAAE,iBAAiB;QAChC,qEAAqE;KACtE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAwB;IAC9D,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAEvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,qBAAqB,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7G,CAAC;IAED,MAAM,OAAO,GAAwE;QACnF,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC;QACjC,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;KAC/B,CAAC;IAEF,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,CAAC,IAAI,CAAC;YACR,QAAQ,EAAE,QAAQ;YAClB,WAAW;YACX,WAAW,EAAE,qBAAqB;YAClC,SAAS,EAAE,sBAAsB,EAAE,2DAA2D;YAC9F,MAAM;YACN,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI;YACJ,UAAU;YACV,oBAAoB,EAAE,KAAK,EAAE,6DAA6D;YAC1F,aAAa,EAAE,uBAAuB;SACvC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,qBAAqB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAoBD,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC3D,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,gBAAgB;QAC7B,SAAS,EAAE,gBAAgB;QAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,6FAA6F;QAC7F,6FAA6F;QAC7F,mFAAmF;QACnF,wFAAwF;QACxF,aAAa,EAAE,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,eAAe;QACpF,mFAAmF;KACpF,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/provider/provider-types.d.ts

@@ -0,0 +1,101 @@
+export type ProviderKind = "codex" | "claude";
+export type AccountAuthState = "active" | "needs_reauth" | "unknown";
+/** accounts[] — one row per known provider account. */
+export interface ProviderAccount {
+    accountId: string;
+    label: string;
+    provider: ProviderKind;
+    authState: AccountAuthState;
+    profileRef: string | null;
+    asOf: string;
+}
+import type { HostUsageRow } from "./host-usage-rollup.js";
+export type BindingAnomalyKind = "same_account_on_n_seats" | "seat_with_no_account";
+/**
+ * First-class binding anomalies — server-computed, not derived client-side. A discriminated
+ * union carrying EXACTLY the locked §1 fields for each variant (nothing added).
+ */
+export type SameAccountOnNSeatsAnomaly = {
+    kind: "same_account_on_n_seats";
+    count: number;
+    seats: string[];
+    evidence: string;
+    asOf: string;
+};
+export type SeatWithNoAccountAnomaly = {
+    kind: "seat_with_no_account";
+    seat: string;
+    evidence: string;
+    asOf: string;
+};
+export type BindingAnomaly = SameAccountOnNSeatsAnomaly | SeatWithNoAccountAnomaly;
+/**
+ * A `bindings[]` row — a discriminated bound/unbound union over the SAME locked §1 field names
+ * (`accountId`, `seatSession`, `rigName`, `boundAt`, `bindingSource`, `anomalies`). A bound row
+ * has a non-null `accountId` (+ `boundAt`/`bindingSource`); an unbound seat keeps the same field
+ * names but `null` for the absent BINDING data and MUST carry a `seat_with_no_account` anomaly —
+ * never a fabricated/sentinel account. Discriminant: `accountId` (string vs null).
+ */
+export type ProviderBinding = {
+    accountId: string;
+    seatSession: string;
+    rigName: string;
+    boundAt: string;
+    bindingSource: string;
+    anomalies: BindingAnomaly[];
+} | {
+    accountId: null;
+    seatSession: string;
+    rigName: string;
+    boundAt: null;
+    bindingSource: null;
+    anomalies: [SeatWithNoAccountAnomaly, ...BindingAnomaly[]];
+};
+export type SignalSourceClass = "provider_structured_read" | "provider_statusline" | "provider_event" | "local_usage_attribution" | "community_probe" | "capture_fallback" | "unknown";
+export type SignalAuthority = "account_cross_device" | "device_local" | "api_workspace" | "reactive_error" | "unknown";
+export type SignalWindow = "five_hour" | "weekly" | "primary" | "secondary" | "monthly_credit" | (string & {});
+export type AutomationUse = "allow_switch_decision" | "advisory_only" | "do_not_automate";
+/**
+ * signals[] — the research verdict's normalization. An absent/unknown reading is an EXPLICIT
+ * row (`sourceClass`/`authority` = "unknown", `unknownReason` set), never a missing row and
+ * never a fabricated zero (`usedPercent` is OMITTED when unknown).
+ */
+export interface ProviderSignal {
+    provider: ProviderKind;
+    /** Opaque account ref (BR-6). Claude statusline rows omit it: that surface exposes no account identity. */
+    accountRef?: string;
+    /** Runtime seat identity for seat-keyed lanes such as Claude statusline provider_usage. */
+    seatSession?: string;
+    sourceClass: SignalSourceClass;
+    authority: SignalAuthority;
+    window?: SignalWindow;
+    usedPercent?: number;
+    remaining?: number;
+    resetsAt?: string;
+    windowDurationMins?: number;
+    asOf: string;
+    staleAfter?: string;
+    unknownReason?: string;
+    supportsNotification?: boolean;
+    automationUse: AutomationUse;
+}
+export type PrecheckReason = "would_strand_live_conversation" | "target_needs_reauth" | "target_auth_unknown" | "signal_unknown_or_stale" | "rebind_unsupported_for_runtime";
+export type PrecheckResult = {
+    safe: true;
+} | {
+    safe: false;
+    reasons: PrecheckReason[];
+};
+export type SwitchOutcome = "succeeded" | "rebind_in_progress" | "failed_safely";
+/** The whole four-block read model, emitted by `rig provider status --json`. */
+export interface FourBlockReadModel {
+    accounts: ProviderAccount[];
+    bindings: ProviderBinding[];
+    signals: ProviderSignal[];
+    asOf: string;
+    /** Slice-04 S-A (A2 amendment) — the host-level usage rollup, ADDITIVE: one honest state
+     *  row per (host, provider) aggregated from the seat-sourced signal rows. Optional so the
+     *  sealed assembler stays untouched; the collect layer always populates it. */
+    hostUsage?: HostUsageRow[];
+}
+//# sourceMappingURL=provider-types.d.ts.map

package/daemon/dist/domain/provider/provider-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-types.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/provider-types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;AAC9C,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAC;AAErE,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,GAAG,sBAAsB,CAAC;AAEpF;;;GAGG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,yBAAyB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AACF,MAAM,MAAM,cAAc,GAAG,0BAA0B,GAAG,wBAAwB,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GACvB;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B,GACD;IACE,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC;IACd,aAAa,EAAE,IAAI,CAAC;IAIpB,SAAS,EAAE,CAAC,wBAAwB,EAAE,GAAG,cAAc,EAAE,CAAC,CAAC;CAC5D,CAAC;AAEN,MAAM,MAAM,iBAAiB,GACzB,0BAA0B,GAC1B,qBAAqB,GACrB,gBAAgB,GAChB,yBAAyB,GACzB,iBAAiB,GACjB,kBAAkB,GAClB,SAAS,CAAC;AAEd,MAAM,MAAM,eAAe,GACvB,sBAAsB,GACtB,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,SAAS,CAAC;AAId,MAAM,MAAM,YAAY,GACpB,WAAW,GACX,QAAQ,GACR,SAAS,GACT,WAAW,GACX,gBAAgB,GAChB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,aAAa,GAAG,uBAAuB,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAE1F;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,YAAY,CAAC;IACvB,2GAA2G;IAC3G,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,SAAS,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;CAC9B;AAGD,MAAM,MAAM,cAAc,GACtB,gCAAgC,GAChC,qBAAqB,GACrB,qBAAqB,GACrB,yBAAyB,GACzB,gCAAgC,CAAC;AAErC,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,cAAc,EAAE,CAAA;CAAE,CAAC;AAEzF,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,oBAAoB,GAAG,eAAe,CAAC;AAEjF,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb;;mFAE+E;IAC/E,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;CAC5B"}

package/daemon/dist/domain/provider/provider-types.js

@@ -0,0 +1,7 @@
+// Slice-04 (OPR.0.5.0.4) provider-interruption-automation — the §1 four-block read model.
+// Schema authority: locked packet 3ffa3c22 IMPLEMENTATION-PRD §1 + the 2026-07-31 RESEARCH
+// verdict's signals[] normalization (adopted verbatim). Field names ARE the contract —
+// additive evolution only after schema lock. BR-6: accountId/profileRef are opaque refs,
+// NEVER a token/header/auth-file content.
+export {};
+//# sourceMappingURL=provider-types.js.map

package/daemon/dist/domain/provider/provider-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-types.js","sourceRoot":"","sources":["../../../src/domain/provider/provider-types.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,2FAA2F;AAC3F,uFAAuF;AACvF,yFAAyF;AACzF,0CAA0C"}

package/daemon/dist/domain/provider/reactive-tap.d.ts

@@ -0,0 +1,29 @@
+import type { AgentActivity } from "../types.js";
+import type { CodexAuthMetadata } from "./codex-auth-reader.js";
+import type { ProviderSignal } from "./provider-types.js";
+interface ReactiveSeat {
+    seatSession: string;
+    runtime: string;
+}
+interface ReactiveActivityReader {
+    getLatestForNode(input: {
+        sessionName: string;
+        now: Date;
+    }): AgentActivity | null;
+}
+export interface ReactiveTapDeps {
+    seats: readonly ReactiveSeat[];
+    auth: CodexAuthMetadata;
+    activity: ReactiveActivityReader;
+    now: string;
+    freshnessMs: number;
+}
+/**
+ * Map the current structured activity for each honestly identified Codex seat into reactive
+ * provider rows. Generic needs-input activity is deliberately insufficient: permission prompts
+ * are blocked seats too, but are not provider interruptions. Only the exact typed vocabulary above
+ * is accepted, with raw subtype taking precedence over raw event and normalized reason.
+ */
+export declare function collectReactiveEventSignals(deps: ReactiveTapDeps): ProviderSignal[];
+export {};
+//# sourceMappingURL=reactive-tap.d.ts.map

package/daemon/dist/domain/provider/reactive-tap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reactive-tap.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/reactive-tap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,UAAU,YAAY;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,sBAAsB;IAC9B,gBAAgB,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,IAAI,CAAA;KAAE,GAAG,aAAa,GAAG,IAAI,CAAC;CACnF;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAWD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,eAAe,GAAG,cAAc,EAAE,CAkDnF"}

package/daemon/dist/domain/provider/reactive-tap.js

@@ -0,0 +1,80 @@
+import { reactiveEventSignal } from "./provider-signals.js";
+const EVENT_KINDS = {
+    at_limit: "at_limit",
+    rate_limit: "at_limit",
+    rate_limited: "at_limit",
+    stream_failure: "stream_failure",
+    stream_fail: "stream_failure",
+    stop_error: "stop_error",
+};
+/**
+ * Map the current structured activity for each honestly identified Codex seat into reactive
+ * provider rows. Generic needs-input activity is deliberately insufficient: permission prompts
+ * are blocked seats too, but are not provider interruptions. Only the exact typed vocabulary above
+ * is accepted, with raw subtype taking precedence over raw event and normalized reason.
+ */
+export function collectReactiveEventSignals(deps) {
+    const nowMs = Date.parse(deps.now);
+    if (!Number.isFinite(nowMs) || !Number.isFinite(deps.freshnessMs) || deps.freshnessMs <= 0)
+        return [];
+    // Honest reactive eligibility, centralized. The account ref must name a KNOWN auth
+    // profile (a file in auth-profiles/), not merely a nonempty registry token: a registry
+    // row that points at an absent profile has no account identity and must produce NO
+    // actionable row (explicit-unknown honesty, never a fabricated account).
+    const knownProfiles = new Set(deps.auth.profiles);
+    const accountBySeat = new Map(deps.auth.seats
+        .filter((seat) => seat.runtime === "codex" && knownProfiles.has(seat.authProfile.trim()))
+        .map((seat) => [seat.seat, seat.authProfile]));
+    const signals = [];
+    for (const seat of deps.seats) {
+        if (seat.runtime !== "codex")
+            continue;
+        const accountRef = accountBySeat.get(seat.seatSession);
+        if (!accountRef)
+            continue;
+        const event = deps.activity.getLatestForNode({
+            sessionName: seat.seatSession,
+            now: new Date(nowMs),
+        });
+        if (!event || event.stale)
+            continue;
+        // The PERSISTED activity runtime must itself be Codex. A claude-code activity attached
+        // to a Codex inventory/registry seat is NOT Codex provider evidence and must never be
+        // relabeled as one — eligibility follows the event, not just the seat.
+        if (event.runtime !== "codex")
+            continue;
+        const kind = eventKind(event);
+        const eventAt = event.eventAt;
+        if (!kind || typeof eventAt !== "string")
+            continue;
+        const eventAtMs = Date.parse(eventAt);
+        if (!Number.isFinite(eventAtMs))
+            continue;
+        const staleAfterMs = eventAtMs + deps.freshnessMs;
+        // BR-2 expiry is inclusive: at the bound, the event is already stale.
+        if (nowMs >= staleAfterMs)
+            continue;
+        signals.push(reactiveEventSignal({
+            provider: "codex",
+            accountRef,
+            kind,
+            asOf: eventAt,
+            staleAfter: new Date(staleAfterMs).toISOString(),
+        }));
+    }
+    return signals;
+}
+// Classification binds to the structured provider-interruption PRODUCER CLASS — the
+// event class itself (`rawEvent`), matched exactly against the declared interruption
+// vocabulary. The managed hook relay maps a tool_name into `rawSubtype`, so a generic
+// lifecycle event (e.g. a `PermissionRequest` with a `rate_limit` tool-name subtype) is a
+// permission block, never exhaustion; and a normalized `reason` is a derived field, not a
+// producer. Only an event whose class is an explicit interruption producer is actionable —
+// an unproven producer yields no row (fail-visible, never fabricated).
+function eventKind(activity) {
+    const eventClass = activity.rawEvent;
+    if (typeof eventClass !== "string")
+        return null;
+    return EVENT_KINDS[eventClass] ?? null;
+}
+//# sourceMappingURL=reactive-tap.js.map

package/daemon/dist/domain/provider/reactive-tap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reactive-tap.js","sourceRoot":"","sources":["../../../src/domain/provider/reactive-tap.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAA0B,MAAM,uBAAuB,CAAC;AAoBpF,MAAM,WAAW,GAAgD;IAC/D,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,UAAU;IACtB,YAAY,EAAE,UAAU;IACxB,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,gBAAgB;IAC7B,UAAU,EAAE,YAAY;CACzB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAqB;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtG,mFAAmF;IACnF,uFAAuF;IACvF,mFAAmF;IACnF,yEAAyE;IACzE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,IAAI,CAAC,IAAI,CAAC,KAAK;SACZ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;SACxF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAU,CAAC,CACzD,CAAC;IACF,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;YAAE,SAAS;QACvC,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU;YAAE,SAAS;QAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,SAAS;QACpC,uFAAuF;QACvF,sFAAsF;QACtF,uEAAuE;QACvE,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;YAAE,SAAS;QAExC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,SAAS;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QAC1C,MAAM,YAAY,GAAG,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC;QAClD,sEAAsE;QACtE,IAAI,KAAK,IAAI,YAAY;YAAE,SAAS;QAEpC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAC/B,QAAQ,EAAE,OAAO;YACjB,UAAU;YACV,IAAI;YACJ,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;SACjD,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oFAAoF;AACpF,qFAAqF;AACrF,sFAAsF;AACtF,0FAA0F;AAC1F,0FAA0F;AAC1F,2FAA2F;AAC3F,uEAAuE;AACvE,SAAS,SAAS,CAAC,QAAuB;IACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACrC,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC"}

package/daemon/dist/domain/restore-orchestrator.d.ts

@@ -143,6 +143,20 @@ export declare class RestoreOrchestrator {
     private rollbackToZeroSession;
     private postLaunchRestore;
     private launchedSessionMatchesSnapshotResume;
+    /**
+     * OPR.0.4.8.3 Seam B — a restored seat's launch posture WITHOUT the in-memory RigSpec
+     * (dev-guard restart-provenance ruling):
+     *   1. Persisted node provenance (migration 057) is the primary source. For a CUSTOM
+     *      attachment with readable provenance (declaringDir + the node's raw ref) the policy
+     *      is REOPENED + re-derived (a custom surface:flag policy restores to full_bypass);
+     *      an unreadable file degrades to the PERSISTED posture (still restart-stable).
+     *   2. No provenance (e.g. organic claim/self-attach seats): the persisted RIG-level ref
+     *      resolves — builtin refs resolve dirlessly; a custom rig ref without provenance
+     *      degrades to the resolver's advisory floor (honest absence of a declaring dir).
+     *   3. Nothing attached (or a resolution error) → EXPLICIT "floor" — the locked
+     *      minimum-floor absence contract; never undefined/env-delegation for managed seats.
+     */
+    private resolveRestorePosture;
     private attemptResume;
     /**
      * L3 Decision 3: runtime-truth reconciliation. Given a node whose original

package/daemon/dist/domain/restore-orchestrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"restore-orchestrator.d.ts","sourceRoot":"","sources":["../../src/domain/restore-orchestrator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAGhB,iBAAiB,EAOlB,MAAM,YAAY,CAAC;AAMpB,MAAM,MAAM,mBAAmB,GAC3B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,GAAG,oBAAoB,CAAC;IACtC,EAAE,EAAE,oBAAoB,CAAC;IACzB,QAAQ,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;QAAC,eAAe,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,QAAQ,CAAA;KAAE,CAAC;CACpH,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EACA,gBAAgB,GAChB,YAAY,GACZ,wBAAwB,GACxB,sBAAsB,GACtB,wBAAwB,GACxB,uBAAuB,GACvB,iBAAiB,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAKN,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,CAWnF;AAED;;wFAEwF;AACxF,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAI1D,CAAC;AAEH;yFACyF;AACzF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,UAAU,uBAAuB;IAC/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,kBAAkB,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,mBAAmB,CAAC;IAClC,WAAW,EAAE,kBAAkB,CAAC;IAChC;mFAC+E;IAC/E,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mBAAmB,CAAC,EAAE,OAAO,2BAA2B,EAAE,mBAAmB,CAAC;CAC/E;AAED,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,mBAAmB,CAAiE;gBAEhF,IAAI,EAAE,uBAAuB;IAsCnC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QACvC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC1C;;;;;;WAMG;QACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;KAChD,GAAG,OAAO,CAAC,cAAc,CAAC;IAqHrB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;QACjE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC;QACV,EAAE,EAAE,OAAO,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACpE,cAAc,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC9D,aAAa,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IAqHF,OAAO,CAAC,kBAAkB;IAmK1B,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,gBAAgB;IAQxB;;;;;;OAMG;YACW,uBAAuB;IA2BrC,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,gBAAgB;IA2BxB,OAAO,CAAC,kBAAkB;YAiFZ,2BAA2B;IAgKzC;;;;;iDAK6C;YAC/B,qBAAqB;YAiBrB,iBAAiB;IA4R/B,OAAO,CAAC,oCAAoC;YAa9B,aAAa;IAkE3B;;;;;;;;;;;;OAYG;IACG,yBAAyB,CAC7B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;IAkH/B,OAAO,CAAC,mBAAmB;CAyB5B"}
+{"version":3,"file":"restore-orchestrator.d.ts","sourceRoot":"","sources":["../../src/domain/restore-orchestrator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAGhB,iBAAiB,EAOlB,MAAM,YAAY,CAAC;AAMpB,MAAM,MAAM,mBAAmB,GAC3B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,GAAG,oBAAoB,CAAC;IACtC,EAAE,EAAE,oBAAoB,CAAC;IACzB,QAAQ,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;QAAC,eAAe,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,QAAQ,CAAA;KAAE,CAAC;CACpH,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EACA,gBAAgB,GAChB,YAAY,GACZ,wBAAwB,GACxB,sBAAsB,GACtB,wBAAwB,GACxB,uBAAuB,GACvB,iBAAiB,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAKN,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,CAWnF;AAED;;wFAEwF;AACxF,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAI1D,CAAC;AAEH;yFACyF;AACzF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,UAAU,uBAAuB;IAC/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,kBAAkB,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,mBAAmB,CAAC;IAClC,WAAW,EAAE,kBAAkB,CAAC;IAChC;mFAC+E;IAC/E,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mBAAmB,CAAC,EAAE,OAAO,2BAA2B,EAAE,mBAAmB,CAAC;CAC/E;AAED,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,mBAAmB,CAAiE;gBAEhF,IAAI,EAAE,uBAAuB;IAsCnC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QACvC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC1C;;;;;;WAMG;QACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;KAChD,GAAG,OAAO,CAAC,cAAc,CAAC;IAqHrB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;QACjE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC;QACV,EAAE,EAAE,OAAO,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACpE,cAAc,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC9D,aAAa,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IAqHF,OAAO,CAAC,kBAAkB;IAmK1B,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,gBAAgB;IAQxB;;;;;;OAMG;YACW,uBAAuB;IA2BrC,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,gBAAgB;IA2BxB,OAAO,CAAC,kBAAkB;YAiFZ,2BAA2B;IAgKzC;;;;;iDAK6C;YAC/B,qBAAqB;YAiBrB,iBAAiB;IA+R/B,OAAO,CAAC,oCAAoC;IAa5C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,qBAAqB;YAoDf,aAAa;IAqE3B;;;;;;;;;;;;OAYG;IACG,yBAAyB,CAC7B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;IAkH/B,OAAO,CAAC,mBAAmB;CAyB5B"}