audit-tools 0.32.67 → 0.33.0

package/skills/audit-code/SKILL.md

@@ -65,44 +65,47 @@ exactly one next step. This is also the **capability handshake**: report what yo
 can dispatch to *right now* on every `next-step` call so the backend sizes review
 packets to your real model instead of a conservative 32k floor.
 
+The whole handshake is a single `--auditor <json>` flag: one object with a `self`
+field describing the model you drive.
+
 ```bash
-audit-code next-step --host-can-dispatch-subagents --host-models '[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
+audit-code next-step --auditor '{"self":{"can_dispatch_subagents":true,"roster":[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]}}'
 ```
 
 Or with a single dispatch model:
 
 ```bash
-audit-code next-step --host-can-dispatch-subagents --host-context-tokens 200000 --host-output-tokens 32000
+audit-code next-step --auditor '{"self":{"can_dispatch_subagents":true,"context_tokens":200000,"output_tokens":32000}}'
 ```
 
-Key flags:
+Key `self` fields:
 
-- `--host-can-dispatch-subagents` — declare that YOU (an attended conversation host)
-  are driving this step and can fan out subagents. Send it on every `next-step`: it
+- `can_dispatch_subagents` — declare that YOU (an attended conversation host) are
+  driving this step and can fan out subagents. Send it on every `next-step`: it
   makes the backend demote any configured in-process backend (a `codex` /
   `openai-compatible` pool from a prior headless run's session config) to a *source*
   pool so the review fans out across your subagents **and** that backend concurrently,
   instead of the backend monopolizing the frontier. Sending it explicitly overrides a
   stale `host_can_dispatch_subagents:false` left in session config by a headless run.
-  Only a genuinely headless loop (no attended host) passes
-  `--no-host-can-dispatch-subagents` so the backend self-drives.
-- `--host-models` — ordered JSON array (lowest rank first) of models you can dispatch
+  Only a genuinely headless loop (no attended host) sends `"can_dispatch_subagents":false`
+  so the backend self-drives.
+- `roster` — ordered JSON array (lowest rank first) of models you can dispatch
   subagents to *right now*, one entry per relative rank
   (`"small"`, `"standard"`, `"deep"`). Ranks are relative capability labels — never
   report model names to the backend. Each entry may carry an optional opaque
   `model_id` used only to key per-model quota learning.
-- `--host-context-tokens` / `--host-output-tokens` — single-model shorthand. When
-  `--host-models` is also given, the roster wins.
+- `context_tokens` / `output_tokens` — single-model shorthand. When `roster` is also
+  given, the roster wins.
 
 Do **not** report a parallel-subagent count — the backend owns concurrency (its
 token-budget gate plus any hard host cap it can detect, e.g. Codex
 `[agents].max_threads`), and runs uncapped when it detects none. An operator with
-a genuine fixed machine limit may pass `--host-max-active-subagents N` as an
-optional override; it is never a value to guess.
+a genuine fixed machine limit may pass `self.max_active_subagents` as an optional
+override; it is never a value to guess.
 
 When a step prompt tells you to continue, repeat `audit-code next-step` with the
-same capability flags and follow only the newly returned `prompt_path`. Stop when
-the current step prompt tells you to stop.
+same `--auditor` handshake and follow only the newly returned `prompt_path`. Stop
+when the current step prompt tells you to stop.
 
 ## Embedded Prompt Payload
 

package/skills/audit-code/audit-code.prompt.md

@@ -26,41 +26,42 @@ node audit-code.mjs ensure --quiet
 
 Then ask the backend for exactly one next step. This is also the **capability
 handshake**: report what you can dispatch to *right now* on every `next-step`
-call, so the backend sizes review packets to your real model instead of a
-conservative 32k floor. Report:
+call as a single `--auditor <json>` flag, so the backend sizes review packets to
+your real model instead of a conservative 32k floor. The JSON is one object with
+a `self` field describing the model you drive; report inside `self`:
 
-- `--host-models` — an ordered JSON array (lowest rank first) of the models you
-  can dispatch subagents to *right now*, one entry per relative rank:
+- `roster` — an ordered JSON array (lowest rank first) of the models you can
+  dispatch subagents to *right now*, one entry per relative rank:
   `{"rank": "small"|"standard"|"deep", "context_tokens": N, "output_tokens": N}`.
   Ranks are relative capability labels that line up with each packet's
   `model_hint.tier` — never report model names to the backend. Report only ranks
   you can actually dispatch to; the backend partitions and budgets each packet
   against the window of the rank its risk routes it to. Discover the real
   windows, do not guess smaller-than-real values. Each entry may carry an
-  optional opaque `model_id` (and `--host-model-id` is the single-model
+  optional opaque `model_id` (and a top-level `self.model_id` is the single-model
   equivalent) used only to key per-model quota learning — it is never
   interpreted.
-- `--host-context-tokens` / `--host-output-tokens` — single-model shorthand when
-  every subagent runs on one model: the context window and output cap of that
-  model. When `--host-models` is also given, the roster wins. Omit both and
-  dispatch falls back to the conservative 32k default (many tiny packets).
+- `context_tokens` / `output_tokens` — single-model shorthand when every subagent
+  runs on one model: the context window and output cap of that model. When
+  `roster` is also given, the roster wins. Omit both and dispatch falls back to
+  the conservative 32k default (many tiny packets).
 
 Do **not** report a parallel-subagent count. The backend owns concurrency: it
 sizes how many subagents run at once from its own token-budget gate and from any
 hard host cap it can detect (e.g. Codex's `~/.codex/config.toml`
 `[agents].max_threads`). When it detects no hard cap it runs without one — you
 never supply or guess a number. (An operator with a genuine fixed parallel limit
-for this machine may pass `--host-max-active-subagents N` as an optional
-override; it is not part of the handshake and is never something to invent.)
+for this machine may pass `self.max_active_subagents` as an optional override; it
+is not part of the handshake and is never something to invent.)
 
 ```bash
-audit-code next-step --host-models '[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
+audit-code next-step --auditor '{"self":{"roster":[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]}}'
 ```
 
 Or with a single dispatch model:
 
 ```bash
-audit-code next-step --host-context-tokens 200000 --host-output-tokens 32000
+audit-code next-step --auditor '{"self":{"context_tokens":200000,"output_tokens":32000}}'
 ```
 
 The token values should match the window of the model(s) dispatching the packets
@@ -69,7 +70,7 @@ The token values should match the window of the model(s) dispatching the packets
 When developing `audit-tools` itself, from the repo root use:
 
 ```bash
-node audit-code.mjs next-step --host-context-tokens 200000 --host-output-tokens 32000
+node audit-code.mjs next-step --auditor '{"self":{"context_tokens":200000,"output_tokens":32000}}'
 ```
 
 Read the returned JSON only far enough to find `prompt_path`, then read and
@@ -102,7 +103,7 @@ directory. It contains `repo_root`, `auditable_file_count`, `git_available`, and
   automatically without interrupting the workflow.
 
 When a step prompt tells you to continue, run `audit-code next-step` again with
-the same capability flags (`--host-models`, `--host-context-tokens`,
-`--host-output-tokens`) and follow only the newly returned `prompt_path`.
+the same `--auditor '{"self":{…}}'` handshake and follow only the newly returned
+`prompt_path`.
 
 Stop when the current step prompt tells you to stop.

package/wrapper/audit-code-wrapper-install-hosts.mjs

@@ -1,4 +1,4 @@
-import { mkdir, mkdtemp, readFile, rm, stat, unlink, writeFile } from 'node:fs/promises';
+import { mkdir, mkdtemp, readFile, rm, stat, unlink } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { dirname, join, relative, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -289,8 +289,8 @@ export const INSTALL_HOST_DEFINITIONS = {
       });
       await collect(checks, 'antigravity_guide', async () => {
         const content = await readFile(assetPaths.antigravityPlanningGuidePath, 'utf8');
-        if (!content.includes('--host-models') || !content.includes('next-step')) {
-          throw new Error('Antigravity guide must embed the canonical loader body (next-step capability handshake including --host-models).');
+        if (!content.includes('--auditor') || !content.includes('next-step')) {
+          throw new Error('Antigravity guide must embed the canonical loader body (next-step capability handshake including the --auditor descriptor).');
         }
         return {
           summary: 'Antigravity planning guide embeds the canonical loader body with the capability handshake.',
@@ -668,13 +668,9 @@ export async function installBootstrap(argv, options = {}) {
   );
   results.push(await writeGeneratedJson(installManifestPath, installManifest));
 
-  const sessionConfigPath = join(root, '.audit-tools', 'audit', 'session-config.json');
-  if (!(await fileExists(sessionConfigPath))) {
-    const defaultConfig = { provider: 'worker-command' };
-    await mkdir(dirname(sessionConfigPath), { recursive: true });
-    await writeFile(sessionConfigPath, JSON.stringify(defaultConfig, null, 2) + '\n', 'utf8');
-    results.push({ path: sessionConfigPath, mode: 'created' });
-  }
+  // No session-config seeding: `provider` is per-auditor dispatch inventory and
+  // cannot be persisted on session-config.json (G2); loadSessionConfig creates
+  // the empty default on demand.
 
   const payload = {
     host,

package/wrapper/remediate-code-wrapper-install-hosts.mjs

@@ -1,4 +1,4 @@
-import { mkdir, mkdtemp, readFile, rm, stat, unlink, writeFile } from 'node:fs/promises';
+import { mkdir, mkdtemp, readFile, rm, stat, unlink } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { dirname, join, relative, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -662,13 +662,9 @@ export async function installBootstrap(argv, options = {}) {
   );
   results.push(await writeGeneratedJson(installManifestPath, installManifest));
 
-  const sessionConfigPath = join(root, '.audit-tools', 'remediation', 'session-config.json');
-  if (!(await fileExists(sessionConfigPath))) {
-    const defaultConfig = { provider: 'worker-command' };
-    await mkdir(dirname(sessionConfigPath), { recursive: true });
-    await writeFile(sessionConfigPath, JSON.stringify(defaultConfig, null, 2) + '\n', 'utf8');
-    results.push({ path: sessionConfigPath, mode: 'created' });
-  }
+  // No session-config seeding: `provider` is per-auditor dispatch inventory and
+  // cannot be persisted on session-config.json (G2); the config is created
+  // empty on demand.
 
   const payload = {
     host,

package/dist/shared/quota/repairProxyRegistry.d.ts

@@ -1,84 +0,0 @@
-/**
- * repair-proxy `/registry` discovery → dispatchable sources.
- *
- * repair-proxy is an OpenAI-compatible multiplexer fronting many HTTP providers/models
- * behind ONE endpoint. This module reads its `GET {base_url}/registry`, selects a
- * cost-aware top-K model candidate set per reachable+keyed backend provider, and expands
- * each candidate into a {@link DispatchableSource} that dispatches through the UNCHANGED
- * `openai-compatible` transport (the proxy routes the namespaced `provider/model`).
- *
- * Fail-open by contract: the fetch degrades to `null` on ANY failure (network / non-200 /
- * malformed body) and `expandRepairProxySources` returns `[]` — a `/registry` outage must
- * NEVER throw into the source-gather path.
- *
- * Per-backend-provider quota accounting: each source's `account` = its backend provider,
- * so 429 / cooldown folds PER PROVIDER (via `foldAccountCooldownAcrossPools`), not per
- * proxy URL. The pool key stays `(provider, model, account)`.
- */
-import type { DispatchableSource, RepairProxyConfig } from "../types/sessionConfig.js";
-/** A model entry as it appears under a provider in the `/registry` body. */
-export interface RegistryModel {
-    id: string;
-    capability: {
-        bfcl_overall?: number | null;
-        bfcl_multi_turn?: number | null;
-        bfcl_irrelevance?: number | null;
-        arena_rating?: number | null;
-        arena_rank?: number | null;
-        composite_rank?: number | null;
-    } | null;
-}
-/** One backend provider block in the `/registry` body. */
-export interface RegistryProvider {
-    base?: string;
-    kind?: string;
-    has_key?: boolean;
-    reachable?: boolean;
-    models?: RegistryModel[];
-}
-/** The parsed `/registry` view we consume (only the fields this path reads). */
-export interface RegistryView {
-    providers: Record<string, RegistryProvider>;
-}
-/** A selected candidate: a concrete backend `provider/model` with optional cost/quota. */
-export interface RepairProxyCandidate {
-    provider: string;
-    model: string;
-    cost_per_mtok?: number;
-    quota?: DispatchableSource["quota"];
-    /**
-     * The model's raw `composite_rank` (LOWER = better), carried onto the source so it
-     * flows into cost-ranking as a cost-equal tiebreak. Absent when the registry model
-     * has no `composite_rank` (the null-capability, sorts-last case).
-     */
-    capability_rank?: number;
-}
-/**
- * GET `${baseUrl}/registry`, parse, and return a {@link RegistryView}. Returns `null`
- * on ANY failure — a thrown fetch, a non-2xx response, or a body that doesn't parse to
- * the expected `{providers}` shape. Never throws.
- */
-export declare function fetchRepairProxyRegistry(baseUrl: string, fetchFn?: typeof fetch): Promise<RegistryView | null>;
-/**
- * Cost-aware top-K candidate set: for each provider that is `reachable && has_key`
- * (and not disabled via `cfg.providers[name].enabled === false`), take the top-K models
- * (default {@link DEFAULT_TOP_K}, overridable by `cfg.top_k`) ranked by capability —
- * lower `composite_rank` better, null-capability models last. `cost_per_mtok` is attached
- * from the operator's `cfg.providers[name].cost_per_mtok` override when declared (else
- * left undefined → resolved by models.dev at rank time).
- */
-export declare function selectRepairProxyCandidates(registry: RegistryView, cfg: RepairProxyConfig): RepairProxyCandidate[];
-/**
- * Fetch the registry + select candidates + map each to a {@link DispatchableSource}
- * dispatched through the `openai-compatible` transport against the proxy root. Returns
- * `[]` on a null registry (fail-open) so a `/registry` outage never breaks source-gather.
- *
- * Each source:
- * - `id: "repair-proxy/<provider>/<model>"` — stable, distinct per backend model.
- * - `provider: "openai-compatible"` — the unchanged HTTP transport.
- * - `endpoint`: the proxy ROOT (`OpenAiCompatibleProvider` appends `/chat/completions`).
- * - `model: "<provider>/<model>"` — namespaced; the proxy routes it to the backend.
- * - `account: "<provider>"` — so 429 / cooldown folds PER BACKEND PROVIDER.
- */
-export declare function expandRepairProxySources(cfg: RepairProxyConfig, fetchFn?: typeof fetch): Promise<DispatchableSource[]>;
-//# sourceMappingURL=repairProxyRegistry.d.ts.map

package/dist/shared/quota/repairProxyRegistry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"repairProxyRegistry.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/repairProxyRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEvF,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE;QACV,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,GAAG,IAAI,CAAC;CACV;AAED,0DAA0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC7C;AAED,0FAA0F;AAC1F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACpC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAaD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAW9B;AAWD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,YAAY,EACtB,GAAG,EAAE,iBAAiB,GACrB,oBAAoB,EAAE,CA8CxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,iBAAiB,EACtB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAsB/B"}

package/dist/shared/quota/repairProxyRegistry.js

@@ -1,144 +0,0 @@
-/**
- * repair-proxy `/registry` discovery → dispatchable sources.
- *
- * repair-proxy is an OpenAI-compatible multiplexer fronting many HTTP providers/models
- * behind ONE endpoint. This module reads its `GET {base_url}/registry`, selects a
- * cost-aware top-K model candidate set per reachable+keyed backend provider, and expands
- * each candidate into a {@link DispatchableSource} that dispatches through the UNCHANGED
- * `openai-compatible` transport (the proxy routes the namespaced `provider/model`).
- *
- * Fail-open by contract: the fetch degrades to `null` on ANY failure (network / non-200 /
- * malformed body) and `expandRepairProxySources` returns `[]` — a `/registry` outage must
- * NEVER throw into the source-gather path.
- *
- * Per-backend-provider quota accounting: each source's `account` = its backend provider,
- * so 429 / cooldown folds PER PROVIDER (via `foldAccountCooldownAcrossPools`), not per
- * proxy URL. The pool key stays `(provider, model, account)`.
- */
-const DEFAULT_TOP_K = 5;
-/** Strip a trailing slash so `${base}/registry` never doubles it. */
-function trimTrailingSlash(url) {
-    return url.replace(/\/+$/, "");
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/**
- * GET `${baseUrl}/registry`, parse, and return a {@link RegistryView}. Returns `null`
- * on ANY failure — a thrown fetch, a non-2xx response, or a body that doesn't parse to
- * the expected `{providers}` shape. Never throws.
- */
-export async function fetchRepairProxyRegistry(baseUrl, fetchFn = fetch) {
-    const url = `${trimTrailingSlash(baseUrl)}/registry`;
-    try {
-        const res = await fetchFn(url);
-        if (!res || !res.ok)
-            return null;
-        const body = await res.json();
-        if (!isRecord(body) || !isRecord(body.providers))
-            return null;
-        return { providers: body.providers };
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * A model's capability sort key: lower `composite_rank` = better. Models with no
- * capability (or no composite_rank) sort LAST via a `+Infinity` sentinel.
- */
-function capabilityRankOf(model) {
-    const rank = model.capability?.composite_rank;
-    return typeof rank === "number" && Number.isFinite(rank) ? rank : Number.POSITIVE_INFINITY;
-}
-/**
- * Cost-aware top-K candidate set: for each provider that is `reachable && has_key`
- * (and not disabled via `cfg.providers[name].enabled === false`), take the top-K models
- * (default {@link DEFAULT_TOP_K}, overridable by `cfg.top_k`) ranked by capability —
- * lower `composite_rank` better, null-capability models last. `cost_per_mtok` is attached
- * from the operator's `cfg.providers[name].cost_per_mtok` override when declared (else
- * left undefined → resolved by models.dev at rank time).
- */
-export function selectRepairProxyCandidates(registry, cfg) {
-    const topK = typeof cfg.top_k === "number" && Number.isInteger(cfg.top_k) && cfg.top_k > 0
-        ? cfg.top_k
-        : DEFAULT_TOP_K;
-    const out = [];
-    // Stable provider iteration order (registry object order is not guaranteed stable
-    // across proxy restarts) so the candidate set is content-derived, not map-order.
-    const providerNames = Object.keys(registry.providers).sort();
-    for (const name of providerNames) {
-        const provider = registry.providers[name];
-        if (!provider || provider.reachable !== true || provider.has_key !== true)
-            continue;
-        if (cfg.providers?.[name]?.enabled === false)
-            continue;
-        // Fail-open hardening: the registry body is validated only down to `providers`
-        // being a record (fetchRepairProxyRegistry), so a 200 with malformed model entries
-        // (missing/ non-string `id`, or a non-object) reaches here. Drop those BEFORE the
-        // sort — `undefined.localeCompare` would otherwise throw out of the whole
-        // source-gather path and break Gate-0 / dispatch (the "degrades to [] on ANY
-        // malformed body" contract). Skip-the-bad-entry, not drop-the-provider.
-        const models = (Array.isArray(provider.models) ? provider.models : []).filter((m) => isRecord(m) && typeof m.id === "string");
-        // Rank by capability (lower composite_rank first), tie-break by model id for a
-        // stable, content-derived order; then take the top-K.
-        const ranked = [...models].sort((a, b) => {
-            const byRank = capabilityRankOf(a) - capabilityRankOf(b);
-            if (byRank !== 0)
-                return byRank;
-            return a.id.localeCompare(b.id);
-        });
-        const costOverride = cfg.providers?.[name]?.cost_per_mtok;
-        for (const model of ranked.slice(0, topK)) {
-            // Carry the raw composite_rank (LOWER = better) onto the candidate — the same
-            // score used for the top-K ordering above becomes the downstream cost-equal
-            // tiebreak. Omitted for null-capability models (the +Infinity sentinel).
-            const rank = model.capability?.composite_rank;
-            const capabilityRank = typeof rank === "number" && Number.isFinite(rank) ? rank : undefined;
-            out.push({
-                provider: name,
-                model: model.id,
-                ...(typeof costOverride === "number" ? { cost_per_mtok: costOverride } : {}),
-                ...(capabilityRank !== undefined ? { capability_rank: capabilityRank } : {}),
-            });
-        }
-    }
-    return out;
-}
-/**
- * Fetch the registry + select candidates + map each to a {@link DispatchableSource}
- * dispatched through the `openai-compatible` transport against the proxy root. Returns
- * `[]` on a null registry (fail-open) so a `/registry` outage never breaks source-gather.
- *
- * Each source:
- * - `id: "repair-proxy/<provider>/<model>"` — stable, distinct per backend model.
- * - `provider: "openai-compatible"` — the unchanged HTTP transport.
- * - `endpoint`: the proxy ROOT (`OpenAiCompatibleProvider` appends `/chat/completions`).
- * - `model: "<provider>/<model>"` — namespaced; the proxy routes it to the backend.
- * - `account: "<provider>"` — so 429 / cooldown folds PER BACKEND PROVIDER.
- */
-export async function expandRepairProxySources(cfg, fetchFn = fetch) {
-    const registry = await fetchRepairProxyRegistry(cfg.base_url, fetchFn);
-    if (!registry)
-        return [];
-    const baseUrl = cfg.base_url;
-    return selectRepairProxyCandidates(registry, cfg).map((candidate) => {
-        // 429/cooldown fold axis: provider-wide by DEFAULT (one 429 propagates across all the
-        // provider's models), or per-model when the operator flags this provider as having
-        // distinct per-model rate limits. Per-pool token/concurrency limits stay per-model.
-        const perModel = cfg.providers?.[candidate.provider]?.per_model_limits === true;
-        const account = perModel ? `${candidate.provider}/${candidate.model}` : candidate.provider;
-        return {
-            id: `repair-proxy/${candidate.provider}/${candidate.model}`,
-            provider: "openai-compatible",
-            endpoint: baseUrl,
-            model: `${candidate.provider}/${candidate.model}`,
-            ...(cfg.api_key_env !== undefined ? { api_key_env: cfg.api_key_env } : {}),
-            account,
-            ...(candidate.cost_per_mtok !== undefined ? { cost_per_mtok: candidate.cost_per_mtok } : {}),
-            ...(candidate.quota !== undefined ? { quota: candidate.quota } : {}),
-            ...(candidate.capability_rank != null ? { capability_rank: candidate.capability_rank } : {}),
-        };
-    });
-}
-//# sourceMappingURL=repairProxyRegistry.js.map

package/dist/shared/quota/repairProxyRegistry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"repairProxyRegistry.js","sourceRoot":"","sources":["../../../src/shared/quota/repairProxyRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA6CH,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,qEAAqE;AACrE,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAe,EACf,UAAwB,KAAK;IAE7B,MAAM,GAAG,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,IAAI,GAAY,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAA6C,EAAE,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC;IAC9C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;AAC7F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAsB,EACtB,GAAsB;IAEtB,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC;QAC3E,CAAC,CAAC,GAAG,CAAC,KAAK;QACX,CAAC,CAAC,aAAa,CAAC;IACpB,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,kFAAkF;IAClF,iFAAiF;IACjF,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI;YAAE,SAAS;QACpF,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,KAAK;YAAE,SAAS;QACvD,+EAA+E;QAC/E,mFAAmF;QACnF,kFAAkF;QAClF,0EAA0E;QAC1E,6EAA6E;QAC7E,wEAAwE;QACxE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAC3E,CAAC,CAAC,EAAsB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CACnE,CAAC;QACF,+EAA+E;QAC/E,sDAAsD;QACtD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YACzD,IAAI,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC;YAChC,OAAO,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;YAC1C,8EAA8E;YAC9E,4EAA4E;YAC5E,yEAAyE;YACzE,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC;YAC9C,MAAM,cAAc,GAClB,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,GAAG,CAAC,IAAI,CAAC;gBACP,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,GAAG,CAAC,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAsB,EACtB,UAAwB,KAAK;IAE7B,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvE,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC7B,OAAO,2BAA2B,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAClE,sFAAsF;QACtF,mFAAmF;QACnF,oFAAoF;QACpF,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,gBAAgB,KAAK,IAAI,CAAC;QAChF,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;QAC3F,OAAO;YACL,EAAE,EAAE,gBAAgB,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,EAAE;YAC3D,QAAQ,EAAE,mBAA4B;YACtC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,EAAE;YACjD,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO;YACP,GAAG,CAAC,SAAS,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,SAAS,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}