audit-tools 0.28.0

package/dist/shared/quota/fileLock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileLock.js","sourceRoot":"","sources":["../../../src/shared/quota/fileLock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAGrE,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AACpC,gFAAgF;AAChF,8EAA8E;AAC9E,kFAAkF;AAClF,MAAM,yBAAyB,GAAG,EAAE,CAAC;AACrC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAEtC,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,QAAgB;QAC1B,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,SAAS,kBAAkB;IACzB,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,8EAA8E;AAC9E,iFAAiF;AACjF,yEAAyE;AACzE,sCAAsC;AACtC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,aAAa;YAAE,OAAO,IAAI,CAAC;QAC5D,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,iFAAiF;AACjF,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAEpC,2EAA2E;AAC3E,+EAA+E;AAC/E,kDAAkD;AAClD,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,EAAE;AACF,iFAAiF;AACjF,8EAA8E;AAC9E,gFAAgF;AAChF,kFAAkF;AAClF,+EAA+E;AAC/E,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AACnF,+EAA+E;AAC/E,mFAAmF;AACnF,mFAAmF;AACnF,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,oBAAoB;AACpB,EAAE;AACF,iFAAiF;AACjF,6EAA6E;AAC7E,+EAA+E;AAC/E,wEAAwE;AACxE,+BAA+B;AAC/B,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,UAAkB;IAChE,MAAM,SAAS,GAAG,GAAG,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,2EAA2E;YAC3E,qEAAqE;YACrE,4EAA4E;YAC5E,wCAAwC;YACxC,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,GAAG,aAAa,EAAE,CAAC;oBACnD,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,+BAA+B;QAClF,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,iFAAiF;IACjF,8EAA8E;IAC9E,8EAA8E;IAC9E,kCAAkC;IAClC,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;YAAS,CAAC;QACT,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,YAAoB,kBAAkB,EACtC,MAAkB;IAElB,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,aAAa,GAAG,yBAAyB,CAAC;IAE9C,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,uEAAuE;YACvE,qEAAqE;YACrE,0EAA0E;YAC1E,4DAA4D;YAC5D,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QAC5E,CAAC;QAED,8EAA8E;QAC9E,qEAAqE;QACrE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAW,CAAC,CAAC;YAC5G,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,gBAAgB,IAAI,uBAAuB,EAAE,CAAC;YACtD,gBAAgB,GAAG,GAAG,CAAC;YACvB,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,qEAAqE;gBACrE,0EAA0E;gBAC1E,yEAAyE;gBACzE,2EAA2E;gBAC3E,8DAA8D;gBAC9D,MAAM,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC3C,MAAM,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,QAAQ,EAAW,CAAC,CAAC;gBAC1F,uEAAuE;gBACvE,sBAAsB;gBACtB,aAAa,GAAG,yBAAyB,CAAC;gBAC1C,SAAS;YACX,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,iEAAiE;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,UAAkB;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,+DAA+D;YAC/D,OAAO;QACT,CAAC;QACD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;QAChE,+CAA+C;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,EAAoB,EACpB,SAAkB,EAClB,MAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,GAAG,IAAI,CAAC;QAClB,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,yEAAyE;YACzE,2EAA2E;YAC3E,2EAA2E;YAC3E,IAAI,CAAC,UAAU;gBAAE,MAAM,UAAU,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/shared/quota/hostLimits.d.ts

@@ -0,0 +1,16 @@
+import type { SessionConfig } from "../types/sessionConfig.js";
+import type { HostConcurrencyLimit } from "./types.js";
+/**
+ * Codex Desktop does not report its concurrency via env, so we apply this known
+ * fixed active-subagent ceiling when the Codex Desktop originator override is
+ * present. Exported so tests assert against the constant rather than a literal.
+ */
+export declare const CODEX_DESKTOP_ACTIVE_SUBAGENT_LIMIT = 6;
+export declare function detectHostActiveSubagentLimit(envPrefix: string, env?: NodeJS.ProcessEnv): HostConcurrencyLimit | null;
+export declare function resolveHostActiveSubagentLimit(options: {
+    envPrefix: string;
+    explicitLimit?: number | null;
+    sessionConfig: SessionConfig;
+    env?: NodeJS.ProcessEnv;
+}): HostConcurrencyLimit | null;
+//# sourceMappingURL=hostLimits.d.ts.map

package/dist/shared/quota/hostLimits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostLimits.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/hostLimits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,IAAI,CAAC;AAarD,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,oBAAoB,GAAG,IAAI,CAsB7B;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,oBAAoB,GAAG,IAAI,CAsB9B"}

package/dist/shared/quota/hostLimits.js

@@ -0,0 +1,57 @@
+/**
+ * Codex Desktop does not report its concurrency via env, so we apply this known
+ * fixed active-subagent ceiling when the Codex Desktop originator override is
+ * present. Exported so tests assert against the constant rather than a literal.
+ */
+export const CODEX_DESKTOP_ACTIVE_SUBAGENT_LIMIT = 6;
+function parsePositiveInteger(value) {
+    if (typeof value === "number") {
+        return Number.isInteger(value) && value > 0 ? value : null;
+    }
+    if (typeof value !== "string")
+        return null;
+    const trimmed = value.trim();
+    if (!/^\d+$/.test(trimmed))
+        return null;
+    const parsed = Number(trimmed);
+    return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;
+}
+export function detectHostActiveSubagentLimit(envPrefix, env = process.env) {
+    const explicitEnvLimit = parsePositiveInteger(env[`${envPrefix}_HOST_MAX_ACTIVE_SUBAGENTS`] ??
+        env.CODEX_MAX_ACTIVE_SUBAGENTS);
+    if (explicitEnvLimit !== null) {
+        return {
+            active_subagents: explicitEnvLimit,
+            source: "environment",
+            description: "Host active subagent limit from environment.",
+        };
+    }
+    if (env.CODEX_INTERNAL_ORIGINATOR_OVERRIDE === "Codex Desktop") {
+        return {
+            active_subagents: CODEX_DESKTOP_ACTIVE_SUBAGENT_LIMIT,
+            source: "environment",
+            description: "Codex Desktop active subagent limit.",
+        };
+    }
+    return null;
+}
+export function resolveHostActiveSubagentLimit(options) {
+    if (options.explicitLimit !== undefined && options.explicitLimit !== null) {
+        return {
+            active_subagents: options.explicitLimit,
+            source: "cli_flags",
+            description: "Host active subagent limit reported by the conversation host.",
+        };
+    }
+    const configuredLimit = parsePositiveInteger(options.sessionConfig.quota?.host_active_subagent_limit ??
+        options.sessionConfig.parallel_workers);
+    if (configuredLimit !== null) {
+        return {
+            active_subagents: configuredLimit,
+            source: "session_config",
+            description: "Host active subagent limit from session-config.",
+        };
+    }
+    return detectHostActiveSubagentLimit(options.envPrefix, options.env);
+}
+//# sourceMappingURL=hostLimits.js.map

package/dist/shared/quota/hostLimits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostLimits.js","sourceRoot":"","sources":["../../../src/shared/quota/hostLimits.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAErD,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,gBAAgB,GAAG,oBAAoB,CAC3C,GAAG,CAAC,GAAG,SAAS,4BAA4B,CAAC;QAC3C,GAAG,CAAC,0BAA0B,CACjC,CAAC;IACF,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,gBAAgB,EAAE,gBAAgB;YAClC,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,8CAA8C;SAC5D,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,kCAAkC,KAAK,eAAe,EAAE,CAAC;QAC/D,OAAO;YACL,gBAAgB,EAAE,mCAAmC;YACrD,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,sCAAsC;SACpD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAK9C;IACC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAC1E,OAAO;YACL,gBAAgB,EAAE,OAAO,CAAC,aAAa;YACvC,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,+DAA+D;SAC7E,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,oBAAoB,CAC1C,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,0BAA0B;QACrD,OAAO,CAAC,aAAa,CAAC,gBAAgB,CACzC,CAAC;IACF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO;YACL,gBAAgB,EAAE,eAAe;YACjC,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,iDAAiD;SAC/D,CAAC;IACJ,CAAC;IAED,OAAO,6BAA6B,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACvE,CAAC"}

package/dist/shared/quota/httpQuotaSource.d.ts

@@ -0,0 +1,87 @@
+import type { QuotaSource, QuotaUsageSnapshot } from "./quotaSource.js";
+/**
+ * Shared scaffolding for PROACTIVE per-provider quota sources (Claude, Codex,
+ * Copilot, Antigravity, OpenCode-broker). Each subclass only supplies the
+ * provider gate + a `fetchSnapshot` (read its local credential → hit its
+ * endpoint → map to a {@link QuotaUsageSnapshot}). This base owns the
+ * cross-cutting concerns identically for all of them:
+ *
+ *  - per-key snapshot cache (~45s → one live probe per dispatch burst);
+ *  - the hermeticity guard (never hit the live endpoint with the DEFAULT global
+ *    fetch under a test runner, or when explicitly disabled — an injected
+ *    `fetchImpl` is always honored so unit tests exercise the real path);
+ *  - graceful degrade: a non-matching provider key, or any failure inside
+ *    `fetchSnapshot`, yields `null` so the {@link CompositeQuotaSource} falls
+ *    through to the next source.
+ *
+ * Token refresh is intentionally NEVER performed by these sources: the host CLI
+ * owns the rotating credential chain, and rewriting it from a read-only quota
+ * probe risks breaking the user's auth — degrade on expiry/401 instead.
+ */
+export interface FetchResponseLike {
+    ok: boolean;
+    status: number;
+    json: () => Promise<unknown>;
+}
+export type FetchLike = (url: string, init?: {
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+}) => Promise<FetchResponseLike>;
+/** Endpoint+mapping context handed to the reusable `fetchXxxUsage` functions. */
+export interface UsageFetchContext {
+    fetchImpl: FetchLike;
+    now: () => number;
+    userAgent: string;
+}
+export interface HttpQuotaSourceOptions {
+    /** Injectable for tests; defaults to the global `fetch`. */
+    fetchImpl?: FetchLike;
+    /** Injectable clock for tests; defaults to `Date.now`. */
+    now?: () => number;
+    /** Snapshot cache TTL; defaults to 45s. */
+    cacheTtlMs?: number;
+    /** User-Agent sent to the endpoint. */
+    userAgent?: string;
+}
+export declare abstract class BaseHttpQuotaSource implements QuotaSource {
+    abstract readonly name: string;
+    protected readonly fetchImpl: FetchLike;
+    protected readonly usingDefaultFetch: boolean;
+    protected readonly now: () => number;
+    protected readonly cacheTtlMs: number;
+    protected readonly userAgent: string;
+    private readonly cache;
+    constructor(options: HttpQuotaSourceOptions, defaultUserAgent: string);
+    /** Providers this source answers for. A non-matching key returns null (no I/O). */
+    protected abstract handlesProvider(provider: string): boolean;
+    /**
+     * Provider-specific: read the local credential, call the endpoint, and map the
+     * response to a snapshot. Return null to degrade (missing/expired creds,
+     * non-200, parse failure). Only invoked when the network is NOT skipped.
+     */
+    protected abstract fetchSnapshot(provider: string, model: string | null, nowMs: number): Promise<QuotaUsageSnapshot | null>;
+    queryCurrentUsage(providerModelKey: string): Promise<QuotaUsageSnapshot | null>;
+    /** Context for the reusable `fetchXxxUsage` helpers. */
+    protected fetchContext(): UsageFetchContext;
+    protected shouldSkipNetwork(): boolean;
+}
+/** GET/POST a JSON endpoint; returns parsed JSON, or null on non-200/network/parse failure. */
+export declare function fetchJsonOrNull(fetchImpl: FetchLike, url: string, init: {
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+}): Promise<unknown | null>;
+/** Splits a `provider/model` quota key; `provider/*` and bare `provider` → model null. */
+export declare function parseProviderModelKey(key: string): {
+    provider: string;
+    model: string | null;
+};
+/** Clamp to a 0–1 fraction (the scheduler's `remaining_pct` scale). */
+export declare function clampFraction(n: number): number;
+/** `remaining_pct` from an integer "percent used" (0–100); exact for integers (20/100 === 0.2). */
+export declare function remainingFromUsedPercent(usedPercent: number): number;
+export declare function isTruthyEnv(v: string | undefined): boolean;
+/** True under `node --test` (NODE_TEST_CONTEXT) or vitest (VITEST). */
+export declare function isUnderTestRunner(): boolean;
+//# sourceMappingURL=httpQuotaSource.d.ts.map

package/dist/shared/quota/httpQuotaSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpQuotaSource.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/httpQuotaSource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAExE;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9B;AACD,MAAM,MAAM,SAAS,GAAG,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KACxE,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEhC,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AASD,8BAAsB,mBAAoB,YAAW,WAAW;IAC9D,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAE/B,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IACxC,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAC9C,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IACrC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;gBAE/C,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM;IAQrE,mFAAmF;IACnF,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAE7D;;;;OAIG;IACH,SAAS,CAAC,QAAQ,CAAC,aAAa,CAC9B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAE/B,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAiBrF,wDAAwD;IACxD,SAAS,CAAC,YAAY,IAAI,iBAAiB;IAI3C,SAAS,CAAC,iBAAiB,IAAI,OAAO;CAKvC;AAED,+FAA+F;AAC/F,wBAAsB,eAAe,CACnC,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACzE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAazB;AAED,0FAA0F;AAC1F,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAM7F;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED,mGAAmG;AACnG,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAI1D;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C"}

package/dist/shared/quota/httpQuotaSource.js

@@ -0,0 +1,90 @@
+const DEFAULT_CACHE_TTL_MS = 45_000;
+export class BaseHttpQuotaSource {
+    fetchImpl;
+    usingDefaultFetch;
+    now;
+    cacheTtlMs;
+    userAgent;
+    cache = new Map();
+    constructor(options, defaultUserAgent) {
+        this.usingDefaultFetch = options.fetchImpl === undefined;
+        this.fetchImpl = options.fetchImpl ?? fetch;
+        this.now = options.now ?? (() => Date.now());
+        this.cacheTtlMs = options.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS;
+        this.userAgent = options.userAgent ?? defaultUserAgent;
+    }
+    async queryCurrentUsage(providerModelKey) {
+        const { provider, model } = parseProviderModelKey(providerModelKey);
+        if (!this.handlesProvider(provider))
+            return null;
+        const nowMs = this.now();
+        const cached = this.cache.get(providerModelKey);
+        if (cached && nowMs - cached.fetchedAtMs < this.cacheTtlMs) {
+            return cached.snapshot;
+        }
+        const snapshot = this.shouldSkipNetwork()
+            ? null
+            : await this.fetchSnapshot(provider, model, nowMs);
+        this.cache.set(providerModelKey, { fetchedAtMs: nowMs, snapshot });
+        return snapshot;
+    }
+    /** Context for the reusable `fetchXxxUsage` helpers. */
+    fetchContext() {
+        return { fetchImpl: this.fetchImpl, now: this.now, userAgent: this.userAgent };
+    }
+    shouldSkipNetwork() {
+        if (isTruthyEnv(process.env.AUDIT_TOOLS_DISABLE_PROACTIVE_QUOTA))
+            return true;
+        if (this.usingDefaultFetch && isUnderTestRunner())
+            return true;
+        return false;
+    }
+}
+/** GET/POST a JSON endpoint; returns parsed JSON, or null on non-200/network/parse failure. */
+export async function fetchJsonOrNull(fetchImpl, url, init) {
+    let res;
+    try {
+        res = await fetchImpl(url, init);
+    }
+    catch {
+        return null; // network error → degrade
+    }
+    if (!res.ok)
+        return null; // 401/403/5xx → degrade
+    try {
+        return await res.json();
+    }
+    catch {
+        return null;
+    }
+}
+/** Splits a `provider/model` quota key; `provider/*` and bare `provider` → model null. */
+export function parseProviderModelKey(key) {
+    const idx = key.indexOf("/");
+    if (idx < 0)
+        return { provider: key, model: null };
+    const provider = key.slice(0, idx);
+    const rest = key.slice(idx + 1);
+    return { provider, model: rest === "" || rest === "*" ? null : rest };
+}
+/** Clamp to a 0–1 fraction (the scheduler's `remaining_pct` scale). */
+export function clampFraction(n) {
+    if (!Number.isFinite(n))
+        return 0;
+    return Math.max(0, Math.min(1, n));
+}
+/** `remaining_pct` from an integer "percent used" (0–100); exact for integers (20/100 === 0.2). */
+export function remainingFromUsedPercent(usedPercent) {
+    return clampFraction((100 - usedPercent) / 100);
+}
+export function isTruthyEnv(v) {
+    if (!v)
+        return false;
+    const s = v.trim().toLowerCase();
+    return s !== "" && s !== "0" && s !== "false" && s !== "no";
+}
+/** True under `node --test` (NODE_TEST_CONTEXT) or vitest (VITEST). */
+export function isUnderTestRunner() {
+    return process.env.NODE_TEST_CONTEXT != null || process.env.VITEST != null;
+}
+//# sourceMappingURL=httpQuotaSource.js.map

package/dist/shared/quota/httpQuotaSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpQuotaSource.js","sourceRoot":"","sources":["../../../src/shared/quota/httpQuotaSource.ts"],"names":[],"mappings":"AAuDA,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC,MAAM,OAAgB,mBAAmB;IAGpB,SAAS,CAAY;IACrB,iBAAiB,CAAU;IAC3B,GAAG,CAAe;IAClB,UAAU,CAAS;IACnB,SAAS,CAAS;IACpB,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE3D,YAAY,OAA+B,EAAE,gBAAwB;QACnE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAK,KAA8B,CAAC;QACtE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACzD,CAAC;IAgBD,KAAK,CAAC,iBAAiB,CAAC,gBAAwB;QAC9C,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAEjD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,MAAM,IAAI,KAAK,GAAG,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,EAAE;YACvC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wDAAwD;IAC9C,YAAY;QACpB,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACjF,CAAC;IAES,iBAAiB;QACzB,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,IAAI,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,EAAE;YAAE,OAAO,IAAI,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAoB,EACpB,GAAW,EACX,IAA0E;IAE1E,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,0BAA0B;IACzC,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACxE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,OAAO,aAAa,CAAC,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAqB;IAC/C,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC;AAC7E,CAAC"}

package/dist/shared/quota/learnedQuotaSource.d.ts

@@ -0,0 +1,8 @@
+import type { QuotaSource, QuotaUsageSnapshot } from "./quotaSource.js";
+export declare class LearnedQuotaSource implements QuotaSource {
+    readonly name = "learned";
+    private halfLifeHours;
+    constructor(halfLifeHours?: number);
+    queryCurrentUsage(providerModelKey: string): Promise<QuotaUsageSnapshot | null>;
+}
+//# sourceMappingURL=learnedQuotaSource.d.ts.map

package/dist/shared/quota/learnedQuotaSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"learnedQuotaSource.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/learnedQuotaSource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGxE,qBAAa,kBAAmB,YAAW,WAAW;IACpD,QAAQ,CAAC,IAAI,aAAa;IAE1B,OAAO,CAAC,aAAa,CAAS;gBAElB,aAAa,SAAK;IAIxB,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;CAmBtF"}

package/dist/shared/quota/learnedQuotaSource.js

@@ -0,0 +1,26 @@
+import { readQuotaState, computeMaxSafeConcurrency } from "./state.js";
+export class LearnedQuotaSource {
+    name = "learned";
+    halfLifeHours;
+    constructor(halfLifeHours = 24) {
+        this.halfLifeHours = halfLifeHours;
+    }
+    async queryCurrentUsage(providerModelKey) {
+        const state = await readQuotaState();
+        const entry = state.entries[providerModelKey];
+        if (!entry)
+            return null;
+        const maxSafe = computeMaxSafeConcurrency(entry, this.halfLifeHours);
+        const isInCooldown = entry.cooldown_until != null &&
+            new Date(entry.cooldown_until).getTime() > Date.now();
+        return {
+            remaining_pct: isInCooldown ? 0 : null,
+            reset_at: isInCooldown ? entry.cooldown_until : null,
+            requests_remaining: maxSafe,
+            tokens_remaining: null,
+            captured_at: entry.updated_at,
+            source: "learned",
+        };
+    }
+}
+//# sourceMappingURL=learnedQuotaSource.js.map

package/dist/shared/quota/learnedQuotaSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"learnedQuotaSource.js","sourceRoot":"","sources":["../../../src/shared/quota/learnedQuotaSource.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEvE,MAAM,OAAO,kBAAkB;IACpB,IAAI,GAAG,SAAS,CAAC;IAElB,aAAa,CAAS;IAE9B,YAAY,aAAa,GAAG,EAAE;QAC5B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,gBAAwB;QAC9C,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACrE,MAAM,YAAY,GAChB,KAAK,CAAC,cAAc,IAAI,IAAI;YAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAExD,OAAO;YACL,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACtC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;YACpD,kBAAkB,EAAE,OAAO;YAC3B,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;CACF"}

package/dist/shared/quota/limits.d.ts

@@ -0,0 +1,35 @@
+import type { ResolvedProviderName, SessionConfig } from "../types/sessionConfig.js";
+import type { LimitConfidence, LimitSource, ResolvedLimits } from "./types.js";
+import type { DiscoveredRateLimitsInput } from "./scheduler.js";
+export type ProviderType = "hosted" | "local" | "unknown";
+export declare function classifyProvider(providerName: ResolvedProviderName): ProviderType;
+export declare const DEFAULT_AGENT_HOST_CONCURRENCY = 8;
+export declare function agentHostFallbackConcurrency(providerName: ResolvedProviderName): number;
+export interface ResolveHostModelOptions {
+    providerName: ResolvedProviderName;
+    sessionConfig: SessionConfig;
+    /** Explicit model (e.g. from a CLI flag); highest precedence. */
+    explicitModel?: string | null;
+    env?: NodeJS.ProcessEnv;
+    /** Env var consulted for a model hint (e.g. "AUDIT_CODE_HOST_MODEL"). */
+    envVar?: string;
+}
+export declare function resolveHostModel(options: ResolveHostModelOptions): string | null;
+export interface LimitResolutionResult {
+    limits: ResolvedLimits;
+    source: LimitSource;
+    confidence: LimitConfidence;
+}
+export interface ResolveLimitsOptions {
+    providerName: ResolvedProviderName;
+    sessionConfig: SessionConfig;
+    hostModel?: string | null;
+    /**
+     * Capabilities discovered at the dispatch-time handshake. When this carries a
+     * `context_tokens`, it is the dispatching model's real window and outranks the
+     * static known-model table (but not an explicit per-model config override).
+     */
+    discoveredLimits?: DiscoveredRateLimitsInput | null;
+}
+export declare function resolveLimits(options: ResolveLimitsOptions): LimitResolutionResult;
+//# sourceMappingURL=limits.d.ts.map

package/dist/shared/quota/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/limits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAEhE,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;AAE1D,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,oBAAoB,GAAG,YAAY,CAmBjF;AASD,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAKhD,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,oBAAoB,GACjC,MAAM,CAIR;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,oBAAoB,CAAC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAOD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,MAAM,GAAG,IAAI,CAehF;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,oBAAoB,CAAC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;CACrD;AAaD,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,qBAAqB,CAqDlF"}

package/dist/shared/quota/limits.js

@@ -0,0 +1,110 @@
+export function classifyProvider(providerName) {
+    switch (providerName) {
+        case "claude-code":
+        case "codex":
+            // codex is a hosted model backend — engages hosted concurrency defaults +
+            // learned-limits, same as claude-code.
+            return "hosted";
+        case "opencode":
+        case "local-subprocess":
+            return "local";
+        case "subprocess-template":
+        case "vscode-task":
+        case "antigravity":
+        default:
+            // antigravity (like vscode-task/subprocess-template) is command-template-
+            // driven and its underlying model is operator-chosen, so it classifies per
+            // its configured model — unknown until a model is configured.
+            return "unknown";
+    }
+}
+// Default parallel wave size for agent-host providers when nothing else
+// constrains concurrency (no host-reported cap, no learned history, no RPM/TPM,
+// no explicit config). These providers delegate to a host that runs fresh
+// subagent sessions in parallel — each with its own context window — so
+// collapsing to serial dispatch (the old default of 1) is pathological for the
+// conversation-first flow. The host's own reported cap still binds at dispatch
+// time, and an explicit quota.unknown_hosted_concurrency still overrides this.
+export const DEFAULT_AGENT_HOST_CONCURRENCY = 8;
+// claude-code / vscode-task fall through the hosted/unknown fallback branch but
+// are parallel agent hosts, so they default to parallel dispatch rather than 1.
+// (opencode also fans out but is classified "local" and uses the local path.)
+export function agentHostFallbackConcurrency(providerName) {
+    return providerName === "claude-code" || providerName === "vscode-task"
+        ? DEFAULT_AGENT_HOST_CONCURRENCY
+        : 1;
+}
+// Resolve the host model so per-model quota detection can engage. Precedence:
+// explicit override → session-config (block_quota.host_model) → env hint →
+// null (genuinely unknown — no hardcoded per-provider model). A null model is
+// expected: quota learning keys on `provider/*` and the dispatch-time capability
+// handshake supplies the real window.
+export function resolveHostModel(options) {
+    const { sessionConfig, explicitModel, env = process.env, envVar, } = options;
+    const clean = (value) => typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+    return (clean(explicitModel) ??
+        clean(sessionConfig.block_quota?.host_model) ??
+        (envVar ? clean(env[envVar]) : null) ??
+        null);
+}
+function defaultLimits(sessionConfig) {
+    const quota = sessionConfig.quota ?? {};
+    return {
+        context_tokens: quota.default_context_tokens ?? 32_000,
+        output_tokens: quota.reserved_output_tokens ?? 4_096,
+        requests_per_minute: null,
+        input_tokens_per_minute: null,
+        output_tokens_per_minute: null,
+    };
+}
+export function resolveLimits(options) {
+    const { providerName, sessionConfig, hostModel } = options;
+    const quota = sessionConfig.quota ?? {};
+    const defaults = defaultLimits(sessionConfig);
+    // Resolution order:
+    // 1. Explicit per-model config overrides
+    // 2. Discovered capability from the dispatch-time handshake
+    // 3. Conservative provider-typed default
+    // 4. Generic default fallback
+    // (No static known-model table — model windows are discovered, never guessed.)
+    if (hostModel && quota.models?.[hostModel]) {
+        const override = quota.models[hostModel];
+        return {
+            limits: {
+                context_tokens: override.context_tokens ?? defaults.context_tokens,
+                output_tokens: override.output_tokens ?? defaults.output_tokens,
+                requests_per_minute: override.requests_per_minute ?? null,
+                input_tokens_per_minute: override.input_tokens_per_minute ?? null,
+                output_tokens_per_minute: override.output_tokens_per_minute ?? null,
+            },
+            source: "explicit_config",
+            confidence: "high",
+        };
+    }
+    // 1.5 Discovered capability: the host reported this model's real window at the
+    // dispatch handshake. Outranks the static table — it is how dispatch sizes to
+    // the real model (e.g. 200k) instead of the conservative default.
+    const discoveredContext = options.discoveredLimits?.context_tokens;
+    if (typeof discoveredContext === "number" && discoveredContext > 0) {
+        return {
+            limits: {
+                context_tokens: discoveredContext,
+                output_tokens: options.discoveredLimits?.output_tokens ?? defaults.output_tokens,
+                requests_per_minute: options.discoveredLimits?.requests_per_minute ?? null,
+                input_tokens_per_minute: options.discoveredLimits?.input_tokens_per_minute ?? null,
+                output_tokens_per_minute: options.discoveredLimits?.output_tokens_per_minute ?? null,
+            },
+            source: "discovered_capability",
+            confidence: "high",
+        };
+    }
+    // 3. Conservative provider defaults. Concurrency caps remain in the scheduler;
+    // this rung records that the provider was part of limit resolution.
+    const providerType = classifyProvider(providerName);
+    if (providerType !== "unknown") {
+        return { limits: defaults, source: "provider_default", confidence: "low" };
+    }
+    // 4. Conservative defaults for all unknown provider types
+    return { limits: defaults, source: "default", confidence: "low" };
+}
+//# sourceMappingURL=limits.js.map

package/dist/shared/quota/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../../src/shared/quota/limits.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,gBAAgB,CAAC,YAAkC;IACjE,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,aAAa,CAAC;QACnB,KAAK,OAAO;YACV,0EAA0E;YAC1E,uCAAuC;YACvC,OAAO,QAAQ,CAAC;QAClB,KAAK,UAAU,CAAC;QAChB,KAAK,kBAAkB;YACrB,OAAO,OAAO,CAAC;QACjB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,aAAa,CAAC;QACnB,KAAK,aAAa,CAAC;QACnB;YACE,0EAA0E;YAC1E,2EAA2E;YAC3E,8DAA8D;YAC9D,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,gFAAgF;AAChF,0EAA0E;AAC1E,wEAAwE;AACxE,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAEhD,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,UAAU,4BAA4B,CAC1C,YAAkC;IAElC,OAAO,YAAY,KAAK,aAAa,IAAI,YAAY,KAAK,aAAa;QACrE,CAAC,CAAC,8BAA8B;QAChC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAYD,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,iFAAiF;AACjF,sCAAsC;AACtC,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,EACJ,aAAa,EACb,aAAa,EACb,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,MAAM,GACP,GAAG,OAAO,CAAC;IACZ,MAAM,KAAK,GAAG,CAAC,KAAgC,EAAiB,EAAE,CAChE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,OAAO,CACL,KAAK,CAAC,aAAa,CAAC;QACpB,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,UAAU,CAAC;QAC5C,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpC,IAAI,CACL,CAAC;AACJ,CAAC;AAoBD,SAAS,aAAa,CAAC,aAA4B;IACjD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;IACxC,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,sBAAsB,IAAI,MAAM;QACtD,aAAa,EAAE,KAAK,CAAC,sBAAsB,IAAI,KAAK;QACpD,mBAAmB,EAAE,IAAI;QACzB,uBAAuB,EAAE,IAAI;QAC7B,wBAAwB,EAAE,IAAI;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAA6B;IACzD,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC3D,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAE9C,oBAAoB;IACpB,yCAAyC;IACzC,4DAA4D;IAC5D,yCAAyC;IACzC,8BAA8B;IAC9B,+EAA+E;IAC/E,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO;YACL,MAAM,EAAE;gBACN,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;gBAClE,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa;gBAC/D,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,IAAI,IAAI;gBACzD,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB,IAAI,IAAI;gBACjE,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB,IAAI,IAAI;aACpE;YACD,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,MAAM;SACnB,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,EAAE,cAAc,CAAC;IACnE,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO;YACL,MAAM,EAAE;gBACN,cAAc,EAAE,iBAAiB;gBACjC,aAAa,EAAE,OAAO,CAAC,gBAAgB,EAAE,aAAa,IAAI,QAAQ,CAAC,aAAa;gBAChF,mBAAmB,EAAE,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,IAAI,IAAI;gBAC1E,uBAAuB,EAAE,OAAO,CAAC,gBAAgB,EAAE,uBAAuB,IAAI,IAAI;gBAClF,wBAAwB,EAAE,OAAO,CAAC,gBAAgB,EAAE,wBAAwB,IAAI,IAAI;aACrF;YACD,MAAM,EAAE,uBAAuB;YAC/B,UAAU,EAAE,MAAM;SACnB,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,oEAAoE;IACpE,MAAM,YAAY,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC7E,CAAC;IAED,0DAA0D;IAC1D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC"}

package/dist/shared/quota/openCodeQuotaSource.d.ts

@@ -0,0 +1,18 @@
+import type { QuotaUsageSnapshot } from "./quotaSource.js";
+import { BaseHttpQuotaSource, type HttpQuotaSourceOptions } from "./httpQuotaSource.js";
+export interface OpenCodeQuotaSourceOptions extends HttpQuotaSourceOptions {
+    /** Defaults to `~/.local/share/opencode/auth.json`. */
+    authPath?: string;
+    /** Override the provider-name gate (mainly for tests). */
+    openCodeProviderNames?: Iterable<string>;
+}
+export declare class OpenCodeQuotaSource extends BaseHttpQuotaSource {
+    readonly name = "opencode";
+    private readonly authPath;
+    private readonly providerNames;
+    constructor(options?: OpenCodeQuotaSourceOptions);
+    protected handlesProvider(provider: string): boolean;
+    protected fetchSnapshot(_provider: string, model: string | null, nowMs: number): Promise<QuotaUsageSnapshot | null>;
+    private readAuth;
+}
+//# sourceMappingURL=openCodeQuotaSource.d.ts.map

package/dist/shared/quota/openCodeQuotaSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openCodeQuotaSource.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/openCodeQuotaSource.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EACnB,KAAK,sBAAsB,EAE5B,MAAM,sBAAsB,CAAC;AAuC9B,MAAM,WAAW,0BAA2B,SAAQ,sBAAsB;IACxE,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,qBAAqB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC1C;AAED,qBAAa,mBAAoB,SAAQ,mBAAmB;IAC1D,QAAQ,CAAC,IAAI,cAAc;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAc;gBAEhC,OAAO,GAAE,0BAA+B;IAQpD,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;cAIpC,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAgCrC,OAAO,CAAC,QAAQ;CAOjB"}

package/dist/shared/quota/openCodeQuotaSource.js

@@ -0,0 +1,84 @@
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+import { BaseHttpQuotaSource, } from "./httpQuotaSource.js";
+import { fetchClaudeUsage } from "./claudeOAuthQuotaSource.js";
+import { fetchCodexUsage } from "./codexQuotaSource.js";
+import { fetchCopilotUsage } from "./copilotQuotaSource.js";
+/**
+ * OpenCode quota broker. OpenCode has no quota of its own — it is a multi-provider
+ * router. So this source resolves the UNDERLYING provider for the dispatched model
+ * and delegates to that provider's reusable `fetchXxxUsage` probe, using
+ * OpenCode's OWN stored token for it (`~/.local/share/opencode/auth.json`).
+ *
+ * Routing is data-driven, NOT model-name-based (INV-QD-04): OpenCode model ids are
+ * provider-namespaced (`anthropic/…`, `openai/…`, `github-copilot/…`, `google/…`),
+ * so the quota key `opencode/<provider>/<model>` carries the underlying provider in
+ * its first model segment. An un-namespaced or unknown-provider model → null
+ * (degrade). `google` is an API key (no proactive endpoint) → null.
+ *
+ * Each route sends the underlying provider's first-party-shaped User-Agent (the
+ * anthropic usage endpoint in particular rate-limits a generic UA aggressively).
+ */
+const OPENCODE_PROVIDER_NAMES = new Set(["opencode"]);
+// Per-route first-party-shaped User-Agents (match the standalone sources' defaults).
+const ROUTE_USER_AGENT = {
+    anthropic: "claude-cli (external, cli)",
+    openai: "codex_cli_rs (external, cli)",
+    "github-copilot": "GithubCopilot (external, cli)",
+};
+export class OpenCodeQuotaSource extends BaseHttpQuotaSource {
+    name = "opencode";
+    authPath;
+    providerNames;
+    constructor(options = {}) {
+        super(options, "opencode");
+        this.authPath =
+            options.authPath ??
+                path.join(homedir(), ".local", "share", "opencode", "auth.json");
+        this.providerNames = new Set(options.openCodeProviderNames ?? OPENCODE_PROVIDER_NAMES);
+    }
+    handlesProvider(provider) {
+        return this.providerNames.has(provider);
+    }
+    async fetchSnapshot(_provider, model, nowMs) {
+        const under = model ? model.split("/")[0] : null;
+        if (!under)
+            return null; // un-namespaced model → can't route → degrade
+        const auth = this.readAuth();
+        const entry = auth?.[under];
+        if (!entry)
+            return null;
+        // Pre-check expiry so we don't burn a doomed call (the probes also 401-degrade).
+        if (typeof entry.expires === "number" && nowMs >= entry.expires)
+            return null;
+        const ctx = {
+            fetchImpl: this.fetchImpl,
+            now: this.now,
+            userAgent: ROUTE_USER_AGENT[under] ?? this.userAgent,
+        };
+        // The model id after the provider-namespace prefix (used for per-model scoping).
+        const subModel = model && model.includes("/") ? model.slice(model.indexOf("/") + 1) : null;
+        switch (under) {
+            case "anthropic":
+                return entry.access ? fetchClaudeUsage({ accessToken: entry.access, model: subModel }, ctx) : null;
+            case "openai":
+                return entry.access && entry.accountId
+                    ? fetchCodexUsage({ accessToken: entry.access, accountId: entry.accountId }, ctx)
+                    : null;
+            case "github-copilot":
+                return entry.access ? fetchCopilotUsage({ token: entry.access }, ctx) : null;
+            default:
+                return null; // google (API key, no proactive endpoint) + unknown providers
+        }
+    }
+    readAuth() {
+        try {
+            return JSON.parse(readFileSync(this.authPath, "utf8"));
+        }
+        catch {
+            return null; // missing / unparseable → degrade
+        }
+    }
+}
+//# sourceMappingURL=openCodeQuotaSource.js.map

package/dist/shared/quota/openCodeQuotaSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openCodeQuotaSource.js","sourceRoot":"","sources":["../../../src/shared/quota/openCodeQuotaSource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,mBAAmB,GAGpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AAEH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAEtD,qFAAqF;AACrF,MAAM,gBAAgB,GAA2B;IAC/C,SAAS,EAAE,4BAA4B;IACvC,MAAM,EAAE,8BAA8B;IACtC,gBAAgB,EAAE,+BAA+B;CAClD,CAAC;AAkBF,MAAM,OAAO,mBAAoB,SAAQ,mBAAmB;IACjD,IAAI,GAAG,UAAU,CAAC;IACV,QAAQ,CAAS;IACjB,aAAa,CAAc;IAE5C,YAAY,UAAsC,EAAE;QAClD,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ;YACX,OAAO,CAAC,QAAQ;gBAChB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACnE,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI,uBAAuB,CAAC,CAAC;IACzF,CAAC;IAES,eAAe,CAAC,QAAgB;QACxC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAES,KAAK,CAAC,aAAa,CAC3B,SAAiB,EACjB,KAAoB,EACpB,KAAa;QAEb,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,CAAC,8CAA8C;QAEvE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,iFAAiF;QACjF,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE7E,MAAM,GAAG,GAAsB;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS;SACrD,CAAC;QACF,iFAAiF;QACjF,MAAM,QAAQ,GAAG,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE3F,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,WAAW;gBACd,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACrG,KAAK,QAAQ;gBACX,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS;oBACpC,CAAC,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC;oBACjF,CAAC,CAAC,IAAI,CAAC;YACX,KAAK,gBAAgB;gBACnB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/E;gBACE,OAAO,IAAI,CAAC,CAAC,8DAA8D;QAC/E,CAAC;IACH,CAAC;IAEO,QAAQ;QACd,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAiB,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,kCAAkC;QACjD,CAAC;IACH,CAAC;CACF"}