audit-tools 0.32.8 → 0.32.9

package/dist/shared/dispatch/admissionLoop.js

@@ -0,0 +1,204 @@
+// Host-path admission loop — the tool-side "grant the admitted set" primitive of
+// the dispatch admission-control model (spec/audit/dispatch-admission-control.md).
+//
+// The in-process rolling engine (rollingDispatch.ts) admits ONE packet at a time
+// continuously; this is its host-subagent-path analog: at a dispatch step the tool
+// admits a BATCH — as many packets as budget (and any declared in-flight cap) allow
+// right now — reserving each against the shared ReservationLedger, and hands the
+// host EXACTLY that granted set. The host dispatches the set, reports at
+// result-ingest (merge-and-ingest), and the next `next-step` re-admits the
+// remainder. The granted set's size is the instantaneous admission width — there is
+// no computed concurrency number (spec: "concurrency is not a computed quantity").
+//
+// COST-FIRST ROUTING is a first-class property: each packet is routed to the
+// CHEAPEST pool CAPABLE of it (cost-ascending among capable pools) that still has
+// budget + in-flight-cap headroom, so lower-cost providers fill before pricier ones
+// and overflow spills to the next-cheapest-capable pool. The capability gate and
+// cost rank are inputs, so refining the complexity/risk gate is a one-predicate
+// change, never a re-architecture.
+import { z } from "zod";
+import { estimatePacketCost } from "../quota/packetCost.js";
+export const AdmissionGrantSchema = z
+    .object({
+    packet_id: z.string(),
+    pool_id: z.string(),
+    resource_key: z.string(),
+    lease_id: z.string(),
+    cost: z.number(),
+})
+    .strict();
+/** Why a packet was admitted or blocked — the per-admission explain record. */
+export const AdmissionExplainSchema = z
+    .object({
+    packet_id: z.string(),
+    /** null only when NO pool was capable of the packet at all. */
+    pool_id: z.string().nullable(),
+    resource_key: z.string().nullable(),
+    admitted: z.boolean(),
+    reason: z.enum(["admitted", "no_capable_pool", "budget_exhausted", "cap_reached"]),
+    /** Present on an admit attempt against a real pool (budget headroom before it). */
+    headroom_before: z.number().optional(),
+    outstanding_before: z.number().optional(),
+    cost: z.number(),
+})
+    .strict();
+/**
+ * The admission artifact both orchestrators embed in their dispatch-quota contract,
+ * REPLACING the removed `max_concurrent_agents` scalar. `granted_packet_ids` is the
+ * set the host dispatches this step (its size is the emergent admission width);
+ * `declared_cap` is the verbatim per-environment hard in-flight cap (null when
+ * none); `leases` are reconciled (freed) at result-ingest; `explains` reconstruct
+ * why the fan-out was the width it was.
+ */
+export const DispatchAdmissionSchema = z
+    .object({
+    granted_packet_ids: z.array(z.string()),
+    declared_cap: z.number().int().min(1).nullable(),
+    leases: z.array(AdmissionGrantSchema),
+    explains: z.array(AdmissionExplainSchema),
+})
+    .strict();
+/** Default capability gate: the pool's window must fit the packet's reservation. */
+function defaultCapable(pool, packet) {
+    if (!Number.isFinite(pool.capacityTokens) || pool.capacityTokens <= 0)
+        return true;
+    return pool.capacityTokens >= packet.cost;
+}
+/**
+ * Admit as many packets as budget + declared caps allow this pass, routing each to
+ * the cheapest capable pool with headroom. Every admission RESERVES the packet's
+ * cost against the shared ledger under its lock, so co-located dispatch loops on one
+ * account cannot collectively over-admit. Returns the granted set (the host
+ * dispatches exactly these), the explain trail, and the blocked remainder.
+ *
+ * A pool's declared in-flight cap is enforced by COUNT of its outstanding ledger
+ * leases (cross-process) plus this batch's grants — the only place an explicit
+ * agent-count exists (a verbatim environment limit), never a computed concurrency.
+ */
+export async function admitBatch(input) {
+    const capable = input.capable ?? defaultCapable;
+    const granted = [];
+    const explains = [];
+    const blocked = [];
+    // Seed per-pool in-flight COUNT from the ledger (other consumers' live leases),
+    // so a declared cap accounts for cross-process in-flight, then add this batch's.
+    const countByPool = new Map();
+    try {
+        const snapshot = await input.ledger.snapshot();
+        for (const leases of Object.values(snapshot)) {
+            for (const lease of leases) {
+                countByPool.set(lease.poolId, (countByPool.get(lease.poolId) ?? 0) + 1);
+            }
+        }
+    }
+    catch {
+        // Degrade-safe: an unreadable ledger just means cap counting starts at 0.
+    }
+    for (const packet of input.packets) {
+        // Cost-first-capable: cheapest capable pool first; ties break toward the more
+        // capable pool so equal-cost lanes prefer the one with more headroom.
+        const candidates = input.pools
+            .filter((pool) => capable(pool, packet))
+            .sort((a, b) => a.costRank - b.costRank || b.capabilityRank - a.capabilityRank);
+        if (candidates.length === 0) {
+            explains.push({
+                packet_id: packet.id,
+                pool_id: null,
+                resource_key: null,
+                admitted: false,
+                reason: "no_capable_pool",
+                cost: packet.cost,
+            });
+            blocked.push(packet.id);
+            continue;
+        }
+        let placed = false;
+        let lastReason = "budget_exhausted";
+        let lastPool = candidates[0];
+        for (const pool of candidates) {
+            if (pool.declaredCap != null && (countByPool.get(pool.poolId) ?? 0) >= pool.declaredCap) {
+                lastReason = "cap_reached";
+                lastPool = pool;
+                continue;
+            }
+            const decision = await input.ledger.admit({
+                resourceKey: pool.resourceKey,
+                cost: packet.cost,
+                budget: pool.budget,
+                poolId: pool.poolId,
+                ...(input.leaseTtlMs != null ? { leaseTtlMs: input.leaseTtlMs } : {}),
+            });
+            if (decision.admitted && decision.leaseId) {
+                granted.push({
+                    packet_id: packet.id,
+                    pool_id: pool.poolId,
+                    resource_key: pool.resourceKey,
+                    lease_id: decision.leaseId,
+                    cost: packet.cost,
+                });
+                countByPool.set(pool.poolId, (countByPool.get(pool.poolId) ?? 0) + 1);
+                explains.push({
+                    packet_id: packet.id,
+                    pool_id: pool.poolId,
+                    resource_key: pool.resourceKey,
+                    admitted: true,
+                    reason: "admitted",
+                    headroom_before: decision.headroomBefore,
+                    outstanding_before: decision.outstandingBefore,
+                    cost: packet.cost,
+                });
+                placed = true;
+                break;
+            }
+            lastReason = "budget_exhausted";
+            lastPool = pool;
+        }
+        if (!placed) {
+            explains.push({
+                packet_id: packet.id,
+                pool_id: lastPool.poolId,
+                resource_key: lastPool.resourceKey,
+                admitted: false,
+                reason: lastReason,
+                cost: packet.cost,
+            });
+            blocked.push(packet.id);
+        }
+    }
+    return { granted, explains, blocked };
+}
+/**
+ * Build the `DispatchAdmission` contract block both orchestrators embed in their
+ * dispatch-quota — the single-sourced host-path admission derivation (no per-tool
+ * copy that could drift). Computes each packet's envelope reservation
+ * (`estimatePacketCost` with the declared output cap), derives the surfaced declared
+ * cap (the most-constraining pool's in-flight cap), and either GRANTS via
+ * {@link admitBatch} (host-subagent path, `grantLeases: true` — leases persist for
+ * reconcile at ingest) or returns a plan-only block listing every candidate
+ * (`grantLeases: false` — the in-process rolling engine leases per-packet itself,
+ * so a host grant here would double-count).
+ */
+export async function computeDispatchAdmission(input) {
+    const candidates = input.packets.map((p) => ({
+        id: p.id,
+        cost: estimatePacketCost({ inputEstimate: p.inputTokens, declaredOutputCap: input.outputCap }).cost,
+        complexity: p.complexity,
+    }));
+    const declaredCap = input.pools.reduce((min, p) => (p.declaredCap == null ? min : min == null ? p.declaredCap : Math.min(min, p.declaredCap)), null);
+    if (!input.grantLeases) {
+        return { granted_packet_ids: candidates.map((c) => c.id), declared_cap: declaredCap, leases: [], explains: [] };
+    }
+    const admit = await admitBatch({
+        packets: candidates,
+        pools: input.pools,
+        ledger: input.ledger,
+        ...(input.capable ? { capable: input.capable } : {}),
+    });
+    return {
+        granted_packet_ids: admit.granted.map((g) => g.packet_id),
+        declared_cap: declaredCap,
+        leases: admit.granted,
+        explains: admit.explains,
+    };
+}
+//# sourceMappingURL=admissionLoop.js.map

package/dist/shared/dispatch/admissionLoop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admissionLoop.js","sourceRoot":"","sources":["../../../src/shared/dispatch/admissionLoop.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,mFAAmF;AACnF,EAAE;AACF,iFAAiF;AACjF,mFAAmF;AACnF,oFAAoF;AACpF,iFAAiF;AACjF,yEAAyE;AACzE,2EAA2E;AAC3E,oFAAoF;AACpF,mFAAmF;AACnF,EAAE;AACF,6EAA6E;AAC7E,kFAAkF;AAClF,oFAAoF;AACpF,iFAAiF;AACjF,gFAAgF;AAChF,mCAAmC;AAEnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAqC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,+EAA+E;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,+DAA+D;IAC/D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;IAClF,mFAAmF;IACnF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AA0BZ,oFAAoF;AACpF,SAAS,cAAc,CAAC,IAAmB,EAAE,MAA0B;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,OAAO,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAsB;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,cAAc,CAAC;IAChD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,gFAAgF;IAChF,iFAAiF;IACjF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,8EAA8E;QAC9E,sEAAsE;QACtE,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK;aAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;aACvC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QAElF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,MAAM,CAAC,EAAE;gBACpB,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,iBAAiB;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QAED,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,UAAU,GAA+B,kBAAkB,CAAC;QAChE,IAAI,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxF,UAAU,GAAG,aAAa,CAAC;gBAC3B,QAAQ,GAAG,IAAI,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;gBACxC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtE,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC;oBACX,SAAS,EAAE,MAAM,CAAC,EAAE;oBACpB,OAAO,EAAE,IAAI,CAAC,MAAM;oBACpB,YAAY,EAAE,IAAI,CAAC,WAAW;oBAC9B,QAAQ,EAAE,QAAQ,CAAC,OAAO;oBAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB,CAAC,CAAC;gBACH,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtE,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,MAAM,CAAC,EAAE;oBACpB,OAAO,EAAE,IAAI,CAAC,MAAM;oBACpB,YAAY,EAAE,IAAI,CAAC,WAAW;oBAC9B,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,UAAU;oBAClB,eAAe,EAAE,QAAQ,CAAC,cAAc;oBACxC,kBAAkB,EAAE,QAAQ,CAAC,iBAAiB;oBAC9C,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB,CAAC,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM;YACR,CAAC;YACD,UAAU,GAAG,kBAAkB,CAAC;YAChC,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,MAAM,CAAC,EAAE;gBACpB,OAAO,EAAE,QAAQ,CAAC,MAAM;gBACxB,YAAY,EAAE,QAAQ,CAAC,WAAW;gBAClC,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,UAAU;gBAClB,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAQ9C;IACC,MAAM,UAAU,GAAyB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjE,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,kBAAkB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI;QACnG,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC,CAAC,CAAC;IACJ,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,EACtG,IAAI,CACL,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC;QAC7B,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,OAAO;QACL,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,YAAY,EAAE,WAAW;QACzB,MAAM,EAAE,KAAK,CAAC,OAAO;QACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC"}

package/dist/{remediate → shared}/dispatch/ownershipScheduler.d.ts

@@ -22,6 +22,17 @@
  * region-disjoint upstream). If either lacks the flag they serialize into
  * successive sub-waves exactly as before — the conservative default is unchanged.
  *
+ * Three disjointness cases, not two (the read-only distinction): (1) a node that is
+ * provably READ-ONLY (`read_only === true`, no writes at all) conflicts with nothing
+ * and admits into any sub-wave — all read-only nodes collapse into the first maximal
+ * sub-wave (this is how an auditor, which writes nothing, runs fully parallel as a
+ * degenerate case of the same scheduler); (2) a node with a DECLARED write-scope
+ * batches file-disjointly (the `cofile_parallel_safe` relaxation above); (3) a node
+ * with an EMPTY/undeclared scope is conservatively non-disjoint and admits solo among
+ * writers. Case (1) is distinct from case (3): an empty `write_paths` means "scope
+ * unresolved, might touch anything" (serialize), whereas `read_only` means "provably
+ * touches nothing" (always parallel).
+ *
  * Pure and deterministic — no I/O, no Set/Map iteration-order leak — so the
  * admission order is reproducible and unit-testable against a precomputed level.
  */
@@ -36,6 +47,15 @@ export interface OwnershipSchedulerNode {
      * Absent/false ⇒ the node serializes vs. any same-file peer exactly as before.
      */
     cofile_parallel_safe?: boolean;
+    /**
+     * The node is provably READ-ONLY — it performs no writes to the target tree, so it
+     * can never conflict with any peer at merge and admits into any sub-wave in full
+     * parallel. This is DISTINCT from an empty/undeclared `write_paths`: empty means the
+     * write-scope is *unresolved* (conservatively serial); `read_only` means the node is
+     * *known* to write nothing (an auditor). Absent/false ⇒ the node is treated as a
+     * writer and goes through the normal file-disjointness gating.
+     */
+    read_only?: boolean;
 }
 /**
  * Canonicalize a node's declared write-scope to physical-file identity keys.
@@ -52,8 +72,9 @@ export declare function canonicalScopeKeys(node: OwnershipSchedulerNode, root?:
  *
  * A node with an EMPTY canonical scope (unresolved/undeclared) is treated as
  * conservatively NON-disjoint: it only enters a sub-wave by itself (it blocks and
- * is blocked-by every peer), so it never batches with another writer
- * (INV-SOO-01 / CE-008).
+ * is blocked-by every peer writer), so it never batches with another writer
+ * (INV-SOO-01 / CE-008). A `read_only` node is the opposite — it writes nothing, so
+ * it admits into any sub-wave in full parallel (see the three-case note above).
  */
 export declare function ownershipSubWaves(level: OwnershipSchedulerNode[], root?: string): OwnershipSchedulerNode[][];
 //# sourceMappingURL=ownershipScheduler.d.ts.map

package/dist/shared/dispatch/ownershipScheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownershipScheduler.d.ts","sourceRoot":"","sources":["../../../src/shared/dispatch/ownershipScheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAIH,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,sBAAsB,EAC5B,IAAI,CAAC,EAAE,MAAM,GACZ,GAAG,CAAC,MAAM,CAAC,CAIb;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,sBAAsB,EAAE,EAC/B,IAAI,CAAC,EAAE,MAAM,GACZ,sBAAsB,EAAE,EAAE,CAoF5B"}

package/dist/{remediate → shared}/dispatch/ownershipScheduler.js

@@ -22,10 +22,21 @@
  * region-disjoint upstream). If either lacks the flag they serialize into
  * successive sub-waves exactly as before — the conservative default is unchanged.
  *
+ * Three disjointness cases, not two (the read-only distinction): (1) a node that is
+ * provably READ-ONLY (`read_only === true`, no writes at all) conflicts with nothing
+ * and admits into any sub-wave — all read-only nodes collapse into the first maximal
+ * sub-wave (this is how an auditor, which writes nothing, runs fully parallel as a
+ * degenerate case of the same scheduler); (2) a node with a DECLARED write-scope
+ * batches file-disjointly (the `cofile_parallel_safe` relaxation above); (3) a node
+ * with an EMPTY/undeclared scope is conservatively non-disjoint and admits solo among
+ * writers. Case (1) is distinct from case (3): an empty `write_paths` means "scope
+ * unresolved, might touch anything" (serialize), whereas `read_only` means "provably
+ * touches nothing" (always parallel).
+ *
  * Pure and deterministic — no I/O, no Set/Map iteration-order leak — so the
  * admission order is reproducible and unit-testable against a precomputed level.
  */
-import { canonicalizeFilePath } from "./ownershipRegistry.js";
+import { canonicalizeFilePath } from "./pathIdentity.js";
 /**
  * Canonicalize a node's declared write-scope to physical-file identity keys.
  * Empty input ⇒ empty set (handled conservatively by the disjointness gate).
@@ -46,8 +57,9 @@ export function canonicalScopeKeys(node, root) {
  *
  * A node with an EMPTY canonical scope (unresolved/undeclared) is treated as
  * conservatively NON-disjoint: it only enters a sub-wave by itself (it blocks and
- * is blocked-by every peer), so it never batches with another writer
- * (INV-SOO-01 / CE-008).
+ * is blocked-by every peer writer), so it never batches with another writer
+ * (INV-SOO-01 / CE-008). A `read_only` node is the opposite — it writes nothing, so
+ * it admits into any sub-wave in full parallel (see the three-case note above).
  */
 export function ownershipSubWaves(level, root) {
     const ordered = [...level].sort((a, b) => a.block_id.localeCompare(b.block_id));
@@ -63,13 +75,28 @@ export function ownershipSubWaves(level, root) {
         // co-batch on a shared key IFF both are `cofile_parallel_safe`.
         const claimant = new Map();
         let waveHasEmptyScopeNode = false;
+        // A writer or empty-scope node has been admitted to this sub-wave. Gates the
+        // empty-scope node's solo admission: it may enter only when no writer and no
+        // prior empty-scope node is present. A `read_only` co-resident is NOT a writer,
+        // so it never trips this — read-only nodes stay fully inert to the conflict logic.
+        let waveHasWriter = false;
         const leftover = [];
         for (const node of remaining) {
             const scope = scopeOf.get(node.block_id);
+            // Case 1: provably READ-ONLY (writes nothing) ⇒ conflicts with nothing. Admit to
+            // the current sub-wave unconditionally; never claim a path, never set or consult
+            // the writer/empty-scope flags. All read-only nodes therefore collapse into the
+            // first (maximal) sub-wave — an auditor's full-parallel degenerate case.
+            if (node.read_only === true) {
+                wave.push(node);
+                continue;
+            }
             const isEmpty = scope.size === 0;
-            // Empty-scope node admits only into an otherwise-empty sub-wave (solo).
+            // Case 3: empty/undeclared scope ⇒ conservatively non-disjoint. Admits only into
+            // a sub-wave with no other writer and no prior empty-scope node (solo among
+            // writers; read-only co-residents don't count).
             if (isEmpty) {
-                if (wave.length === 0) {
+                if (!waveHasWriter && !waveHasEmptyScopeNode) {
                     wave.push(node);
                     waveHasEmptyScopeNode = true;
                 }
@@ -78,7 +105,7 @@ export function ownershipSubWaves(level, root) {
                 }
                 continue;
             }
-            // A real-scope node cannot share a wave with an empty-scope node, nor with
+            // Case 2: a real-scope node cannot share a wave with an empty-scope node, nor with
             // any node it shares a canonical path with — UNLESS both this node and every
             // same-file incumbent it collides with are `cofile_parallel_safe`.
             if (waveHasEmptyScopeNode) {
@@ -104,6 +131,7 @@ export function ownershipSubWaves(level, root) {
             for (const key of scope)
                 claimant.set(key, node);
             wave.push(node);
+            waveHasWriter = true;
         }
         subWaves.push(wave);
         remaining.length = 0;

package/dist/shared/dispatch/ownershipScheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownershipScheduler.js","sourceRoot":"","sources":["../../../src/shared/dispatch/ownershipScheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAwBzD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAA4B,EAC5B,IAAa;IAEb,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW;QAAE,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA+B,EAC/B,IAAa;IAEb,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAE9E,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAA+B,EAAE,CAAC;IAEhD,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAA6B,EAAE,CAAC;QAC1C,6EAA6E;QAC7E,4EAA4E;QAC5E,gEAAgE;QAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkC,CAAC;QAC3D,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAClC,6EAA6E;QAC7E,6EAA6E;QAC7E,gFAAgF;QAChF,mFAAmF;QACnF,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,MAAM,QAAQ,GAA6B,EAAE,CAAC;QAE9C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;YAE1C,iFAAiF;YACjF,iFAAiF;YACjF,gFAAgF;YAChF,yEAAyE;YACzE,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;YAEjC,iFAAiF;YACjF,4EAA4E;YAC5E,gDAAgD;YAChD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,aAAa,IAAI,CAAC,qBAAqB,EAAE,CAAC;oBAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChB,qBAAqB,GAAG,IAAI,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;gBACD,SAAS;YACX,CAAC;YAED,mFAAmF;YACnF,6EAA6E;YAC7E,mEAAmE;YACnE,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GACZ,IAAI,CAAC,oBAAoB,KAAK,IAAI;wBAClC,SAAS,CAAC,oBAAoB,KAAK,IAAI,CAAC;oBAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,QAAQ,GAAG,IAAI,CAAC;wBAChB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,KAAK;gBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACrB,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/shared/dispatch/pathIdentity.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The single-sourced path canonicalization for ownership identity (INV-SOO-09).
+ *
+ * Resolves a path to a stable physical-file key: absolute (against `root` when
+ * supplied, else cwd), `..`/`.`-collapsed (via `resolve`), separators normalized
+ * to `/`, and case-folded on a case-insensitive filesystem. All spellings of one
+ * file therefore collide, closing the rel/abs/case/`..` mismatch (CE-004).
+ *
+ * Symlink identity is a RECORDED RESIDUAL, not silently treated as disjoint
+ * (INV-SOO-09 / fail-3): when `resolveSymlinks` is set and the path exists, the
+ * realpath is folded in so `link.ts → x.ts` collides; when realpath is
+ * unavailable (path absent, or FS symlink resolution out of scope) the lexical
+ * canonical key is used and the unresolved case degrades to the downstream merge
+ * guard rather than being asserted disjoint here.
+ *
+ * This is the ONLY normalization scheme for ownership identity — callers must
+ * not introduce a second one (failure-mode: path-identity mismatch). It lives in
+ * `audit-tools/shared` so BOTH orchestrators' ownership scheduling resolves file
+ * identity identically (a remediate write-scope and an audit read-scope key the
+ * same file the same way).
+ */
+export declare function canonicalizeFilePath(path: string, opts?: {
+    root?: string;
+    resolveSymlinks?: boolean;
+}): string;
+//# sourceMappingURL=pathIdentity.d.ts.map

package/dist/shared/dispatch/pathIdentity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathIdentity.d.ts","sourceRoot":"","sources":["../../../src/shared/dispatch/pathIdentity.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GACtD,MAAM,CAgBR"}

package/dist/shared/dispatch/pathIdentity.js

@@ -0,0 +1,49 @@
+import { realpathSync } from "node:fs";
+import { isAbsolute, resolve, sep } from "node:path";
+/**
+ * Whether the host filesystem is case-insensitive for path identity. win32 and
+ * darwin default to case-insensitive volumes; linux is case-sensitive. Used so
+ * `src/A.ts` and `src/a.ts` collide on a Windows/macOS volume (one physical
+ * file) but stay distinct on Linux — INV-SOO-09 canonical physical-file identity.
+ */
+const CASE_INSENSITIVE_FS = process.platform === "win32" || process.platform === "darwin";
+/**
+ * The single-sourced path canonicalization for ownership identity (INV-SOO-09).
+ *
+ * Resolves a path to a stable physical-file key: absolute (against `root` when
+ * supplied, else cwd), `..`/`.`-collapsed (via `resolve`), separators normalized
+ * to `/`, and case-folded on a case-insensitive filesystem. All spellings of one
+ * file therefore collide, closing the rel/abs/case/`..` mismatch (CE-004).
+ *
+ * Symlink identity is a RECORDED RESIDUAL, not silently treated as disjoint
+ * (INV-SOO-09 / fail-3): when `resolveSymlinks` is set and the path exists, the
+ * realpath is folded in so `link.ts → x.ts` collides; when realpath is
+ * unavailable (path absent, or FS symlink resolution out of scope) the lexical
+ * canonical key is used and the unresolved case degrades to the downstream merge
+ * guard rather than being asserted disjoint here.
+ *
+ * This is the ONLY normalization scheme for ownership identity — callers must
+ * not introduce a second one (failure-mode: path-identity mismatch). It lives in
+ * `audit-tools/shared` so BOTH orchestrators' ownership scheduling resolves file
+ * identity identically (a remediate write-scope and an audit read-scope key the
+ * same file the same way).
+ */
+export function canonicalizeFilePath(path, opts = {}) {
+    const { root, resolveSymlinks = false } = opts;
+    let abs = isAbsolute(path)
+        ? resolve(path)
+        : resolve(root ?? process.cwd(), path);
+    if (resolveSymlinks) {
+        try {
+            abs = realpathSync(abs);
+        }
+        catch {
+            // Symlink/realpath unavailable (path absent or FS resolution out of scope):
+            // keep the lexical key — the unresolved symlink case is a recorded residual
+            // handled by the downstream merge guard, never asserted disjoint here.
+        }
+    }
+    const slashed = abs.split(sep).join("/");
+    return CASE_INSENSITIVE_FS ? slashed.toLowerCase() : slashed;
+}
+//# sourceMappingURL=pathIdentity.js.map

package/dist/shared/dispatch/pathIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathIdentity.js","sourceRoot":"","sources":["../../../src/shared/dispatch/pathIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErD;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAE1F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,OAAqD,EAAE;IAEvD,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;IAC/C,IAAI,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACf,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,4EAA4E;YAC5E,uEAAuE;QACzE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC"}

package/dist/shared/dispatch/rollingDispatch.d.ts

@@ -34,6 +34,7 @@ import type { SessionConfig } from "../types/sessionConfig.js";
 import type { CapacityPool, PartialCompletionTerminal } from "../quota/capacity.js";
 import type { QuotaStateEntry } from "../quota/types.js";
 import type { WorkerOutputChannel } from "../quota/errorParsing.js";
+import type { ReservationLedger } from "../quota/reservationLedger.js";
 /** A dispatchable unit of work. TPacket is opaque to the engine. */
 export interface RollingDispatchPacket<TPacket> {
     /** Stable, unique identifier for this packet within a run. */
@@ -98,6 +99,14 @@ export interface InFlightEntry<TPacket> {
     startedAt: number;
     estimatedTokens: number;
     promise: Promise<RollingDispatchResult<TPacket>>;
+    /**
+     * Reservation-ledger lease held for this in-flight packet (spec admission model).
+     * Set only when a `reservationLedger` was configured; reconciled (freed) in
+     * `handleResult` when the packet completes. `resourceKey` is the pool id the lease
+     * was taken against, needed to reconcile. Null/undefined when no ledger is wired.
+     */
+    leaseId?: string | null;
+    resourceKey?: string;
 }
 /** Mutable state of the rolling dispatcher. */
 export interface RollingDispatchState<TPacket> {
@@ -168,6 +177,34 @@ export interface RollingDispatchConfig<TPacket> {
      * leave the source unfed (no escalation can ever fire).
      */
     recordRateLimit?: (packet: RollingDispatchPacket<TPacket>, result: RollingDispatchResult<TPacket>) => void;
+    /**
+     * Shared token-reservation ledger (spec/audit/dispatch-admission-control.md, the
+     * proactive admission layer). When supplied, every dispatched packet LEASES its
+     * output-envelope cost against the account-keyed ledger BEFORE dispatch and
+     * reconciles the lease on completion — so two co-located dispatch loops pointed at
+     * the SAME ledger file (same `provider#account/model` meter) each see the other's
+     * outstanding reservations and cannot both optimistically assume the full budget.
+     * The resourceKey is the pool id (`pool.id` is already `provider#account/model`).
+     * Omit to leave the in-process `InFlightTokenTracker` as the sole accounting
+     * (behaviour identical to before this field existed). The reactive 429/backoff
+     * floor still catches any residual under-reservation regardless.
+     */
+    reservationLedger?: ReservationLedger;
+    /**
+     * Live remaining token budget for a pool's resourceKey (its `pool.id`). Consulted
+     * only when `reservationLedger` is set — it is the budget the ledger admits
+     * against (`budget - Σ outstanding_leases >= cost`). Return a non-finite value
+     * (the default) for an optimistic/unbounded budget, in which case the ledger only
+     * prevents co-located double-counting and never gates on an absolute token ceiling.
+     */
+    resolvePoolBudget?: (poolId: string) => number;
+    /**
+     * Output-token envelope (spec Resolved decision 1) added to a packet's INPUT
+     * `estimatedTokens` to form the reservation cost. Consulted only when
+     * `reservationLedger` is set. Default 0 → the lease reserves the input estimate
+     * alone; the reactive floor still catches output under-reservation.
+     */
+    resolveOutputReservation?: (packet: RollingDispatchPacket<TPacket>, poolId: string) => number;
 }
 /** Options for tuning the dispatcher (intentionally minimal per INV-S05). */
 export interface RollingDispatchOptions {

package/dist/shared/dispatch/rollingDispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rollingDispatch.d.ts","sourceRoot":"","sources":["../../../src/shared/dispatch/rollingDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,mBAAmB,CAAC;AAanF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAQpE,oEAAoE;AACpE,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,8DAA8D;IAC9D,EAAE,EAAE,MAAM,CAAC;IACX,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,SAAS,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC;IAC1D,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,mBAAmB,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb;;;;;;;;;WASG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wDAAwD;AACxD,MAAM,WAAW,aAAa,CAAC,OAAO;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACvC,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;CAClD;AAED,+CAA+C;AAC/C,MAAM,WAAW,oBAAoB,CAAC,OAAO;IAC3C,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B;;;;;OAKG;IACH,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B;;;;;;;;OAQG;IACH,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC;;;;OAIG;IACH,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED,kEAAkE;AAClE,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,qDAAqD;IACrD,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B;;;OAGG;IACH,cAAc,EAAE,CACd,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,IAAI,EAAE,YAAY,KACf,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC5D;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAClD;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAChB,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,KACnC,IAAI,CAAC;CACX;AAED,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,4DAA4D;AAC5D,MAAM,WAAW,iBAAiB,CAAC,OAAO;IACxC;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IACzD;;;;OAIG;IACH,GAAG,IAAI,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjD,sDAAsD;IACtD,QAAQ,IAAI,QAAQ,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD;;;;;OAKG;IACH,WAAW,IAAI,yBAAyB,GAAG,IAAI,CAAC;CACjD;AAMD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAE1D,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKtD,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKrD,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;CAG1C;AAMD,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,OAAO,EAC3C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACrC,MAAM,CAER;AA+CD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,cAAc,CAAC,OAAO,EACpC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,cAAc,EAAE,YAAY,EAAE,EAC9B,eAAe,EAAE,oBAAoB,EACrC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EAClD,aAAa,EAAE,aAAa,EAC5B,gBAAgB,GAAE,WAAW,CAAC,MAAM,CAAa,EACjD,iBAAiB,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,EAC1D,GAAG,GAAE,MAAmB,GACvB,YAAY,GAAG,IAAI,CAqErB;AAMD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAC7C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,OAAO,GAAE,sBAA2B,GACnC,iBAAiB,CAAC,OAAO,CAAC,CAic5B"}
+{"version":3,"file":"rollingDispatch.d.ts","sourceRoot":"","sources":["../../../src/shared/dispatch/rollingDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,mBAAmB,CAAC;AAanF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAOvE,oEAAoE;AACpE,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,8DAA8D;IAC9D,EAAE,EAAE,MAAM,CAAC;IACX,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,SAAS,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC;IAC1D,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,mBAAmB,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb;;;;;;;;;WASG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wDAAwD;AACxD,MAAM,WAAW,aAAa,CAAC,OAAO;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACvC,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,+CAA+C;AAC/C,MAAM,WAAW,oBAAoB,CAAC,OAAO;IAC3C,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B;;;;;OAKG;IACH,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B;;;;;;;;OAQG;IACH,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC;;;;OAIG;IACH,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED,kEAAkE;AAClE,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,qDAAqD;IACrD,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B;;;OAGG;IACH,cAAc,EAAE,CACd,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,IAAI,EAAE,YAAY,KACf,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC5D;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAClD;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAChB,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,KACnC,IAAI,CAAC;IACV;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/C;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,CACzB,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,MAAM,EAAE,MAAM,KACX,MAAM,CAAC;CACb;AAED,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,4DAA4D;AAC5D,MAAM,WAAW,iBAAiB,CAAC,OAAO;IACxC;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IACzD;;;;OAIG;IACH,GAAG,IAAI,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjD,sDAAsD;IACtD,QAAQ,IAAI,QAAQ,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD;;;;;OAKG;IACH,WAAW,IAAI,yBAAyB,GAAG,IAAI,CAAC;CACjD;AAMD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAE1D,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKtD,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKrD,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;CAG1C;AAMD,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,OAAO,EAC3C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACrC,MAAM,CAER;AA+CD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,cAAc,CAAC,OAAO,EACpC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,cAAc,EAAE,YAAY,EAAE,EAC9B,eAAe,EAAE,oBAAoB,EACrC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EAClD,aAAa,EAAE,aAAa,EAC5B,gBAAgB,GAAE,WAAW,CAAC,MAAM,CAAa,EACjD,iBAAiB,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,EAC1D,GAAG,GAAE,MAAmB,GACvB,YAAY,GAAG,IAAI,CAqErB;AAMD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAC7C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,OAAO,GAAE,sBAA2B,GACnC,iBAAiB,CAAC,OAAO,CAAC,CA8iB5B"}