audit-tools 0.34.42 → 0.35.1

package/dist/shared/providers/auditorSources.d.ts

@@ -1,12 +1,9 @@
 import { type DispatchableSource } from "../types/sessionConfig.js";
-import { type PopulateProxyCatalogResult } from "./proxyCatalog.js";
 /**
  * The machine-level declaration file: the backends the OPERATOR owns, hand-authored
- * like `session-config.json`. Deliberately NOT id-keyed and deliberately NOT named
- * like the POPULATE cache (`catalog-cache.json`, `proxyCatalog.ts` — the
- * `catalog-<auditor-id>.json` name this comment once reserved landed WITHOUT the
- * auditor-id key; see the rationale there) — squatting the cache name would turn
- * this read into a direct cache read, violating never-inherit by filename collision.
+ * like `session-config.json`. Deliberately NOT id-keyed: each invocation intersects
+ * the declaration with its own ambient reach instead of inheriting another
+ * auditor's resolved capability.
  *
  * A declaration is not a cache: it is operator INTENT, not a prior auditor's resolved
  * state. Reading it and intersecting it with live ambient reach does not inherit
@@ -46,8 +43,6 @@ export interface AmbientSourceDeps {
      * then `GET <endpoint>/v1/models` fallback) through a hidden node child. Tests inject.
      */
     probeHttpReachable?: (url: string) => boolean;
-    /** Raw populate-cache reader (tests inject); defaults to reading the cache file. */
-    readCatalogFile?: (path: string) => string | null;
 }
 /**
  * Escalating-budget reachability: try `probeOnce` at each budget in order, returning
@@ -62,6 +57,11 @@ export interface AmbientSourceDeps {
  * acceptable.
  */
 export declare function probeReachableWithEscalation(probeOnce: (budgetMs: number) => boolean, budgets?: readonly number[]): boolean;
+/**
+ * Build liveness URLs for both ordinary OpenAI-compatible bases and proxies
+ * whose API base is `/v1` but whose health endpoint is served at the origin.
+ */
+export declare function buildLivenessProbeUrls(url: string): string[];
 /** Resolve the declaration file path for this machine (state dir via `io/stateDir.ts`). */
 export declare function resolveSourceDeclarationPath(homeDir?: string): string;
 /**
@@ -74,29 +74,6 @@ export declare function resolveSourceDeclarationPath(homeDir?: string): string;
  * the declaration is held to exactly the same bar as a `--auditor sources[]`.
  */
 export declare function readSourceDeclaration(deps?: AmbientSourceDeps): DispatchableSource[];
-/**
- * The declared proxy lane (`proxy` top-level key in the same declaration file):
- * the operator asserting "a generic OpenAI-compatible proxy listens here — discover
- * and expand its models into `claude-worker` sources". Optional knobs: `top_k`
- * (models per backend provider), `cost_per_mtok` (the free-to-operator cost axis;
- * wins over the advert price), and `api_key_env` (env var holding the proxy's master
- * key for authenticated endpoints).
- */
-export interface ProxyDeclaration {
-    endpoint: string;
-    top_k?: number;
-    cost_per_mtok?: number;
-    api_key_env?: string;
-    /**
-     * The proxy's BACKEND burst-limits per model (see
-     * `DispatchableSource.burst_limited`). Stamped onto every expanded lane at RESOLVE
-     * time — declaration-authoritative, so flipping it never requires a re-populate —
-     * where the worker-kind compatibility rule then refuses agentic expansion
-     * ({@link laneWorkerKindConflict}) with a per-lane reason.
-     */
-    burst_limited?: boolean;
-}
-/** `readProxyDeclaration`'s outcome: the lane, or why it is absent. */
 /**
  * `api_key_env` names an environment VARIABLE; it never carries the value. A
  * declaration that pastes `NAME=value` (or the secret itself) used to be
@@ -104,64 +81,13 @@ export interface ProxyDeclaration {
  * "NAME=value"` — which reads as a missing env var and sends the operator to
  * their shell instead of to the typo.
  *
- * The check belongs to the FIELD, not to one of its readers: it previously
- * guarded only the `openai-compatible` source branch while `readProxyDeclaration`
- * and the `claude-worker` reach branch accepted any non-empty string, so both
- * inherited the misleading symptom the validated branch exists to prevent.
+ * The check belongs to the FIELD, not to one of its readers: both endpoint-backed
+ * source transports must reject the typo with the same precise explanation.
  * Returns a precise reason, or `null` when the name is well formed. Reach
  * branches call {@link apiKeyEnvReachReason}, which pairs this with the
  * env-is-set half. [[validator-guards-every-field-caller-reads]]
  */
 export declare function invalidEnvVarNameReason(field: string, value: string): string | null;
-export interface ProxyDeclarationResult {
-    declaration: ProxyDeclaration | null;
-    /** Present only when a `proxy` key EXISTS but is malformed (never thrown). */
-    reason?: string;
-}
-/**
- * Read the optional `proxy` block from the machine declaration. Tolerant like
- * {@link readSourceDeclaration}: an absent / unparseable file or a missing key is
- * simply `{declaration: null}`; a PRESENT-but-malformed block degrades to lane-absent
- * WITH a reason (surfaced via `resolveAmbientSources`' `dropped[]`), never a throw.
- * Malformed optional TUNING knobs (`top_k` / `cost_per_mtok`) are dropped
- * individually — a bad tuning value must not cost the operator the whole lane.
- * `api_key_env` is deliberately NOT in that set: it is a credential reference,
- * and dropping it silently leaves the lane looking unauthenticated so the
- * failure surfaces far downstream with a reason that no longer names the typo.
- *
- * Rejection: if a `repair_proxy` key exists, it is not recognized and surfaces a
- * dropped reason telling the operator what key to use instead (never silent ignore).
- */
-export declare function readProxyDeclaration(deps?: AmbientSourceDeps): ProxyDeclarationResult;
-/**
- * POPULATE the declared proxy lane (plan §populate-vs-resolve): read the
- * machine declaration's `proxy` block and, when present, fetch its model
- * discovery into the machine-level populate cache ({@link populateProxyCatalog}).
- * This is the network half the resolve path must never run — call it at Gate-0
- * build time (once per run) or on explicit refresh, NEVER from `resolveAmbientSources`.
- *
- * "Present + reachable" gating is the fetch itself: the discovery GET is both the
- * liveness proof and the payload, so a separate pre-probe would only double the
- * network. Never throws: no declared lane ⇒ `null`; a failed/unreachable fetch ⇒
- * `{written:false, reason}` and any prior cache is left untouched — the lane then
- * resolves from the existing cache or unexpanded with its own `dropped[]` reason,
- * degrading Gate-0, never blocking it.
- */
-export declare function populateDeclaredProxyCatalog(deps?: AmbientSourceDeps & {
-    fetchImpl?: typeof fetch;
-}): Promise<PopulateProxyCatalogResult | null>;
-/**
- * Populate the proxy catalog ONLY when the resolve half would otherwise drop the
- * lane for it: a `proxy` is declared but the cache is absent or was fetched from a
- * different endpoint. Bounded by construction — after one success the cache exists
- * and this is a cheap read — so a draw with no Gate-0 build moment (remediate) can
- * call it on every config load without a per-load network fetch. Freshness (TTL /
- * explicit refresh) is deliberately NOT this function's job (backlog).
- * [[silent-fail-closed-on-one-draw]] — both draws must trigger populate, not just audit.
- */
-export declare function populateProxyCatalogIfMissing(deps?: AmbientSourceDeps & {
-    fetchImpl?: typeof fetch;
-}): Promise<PopulateProxyCatalogResult | null>;
 /**
  * Can THIS process prove it can reach this declared source?
  *

package/dist/shared/providers/auditorSources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auditorSources.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/auditorSources.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,2BAA2B,CAAC;AAInC,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,mBAAmB,CAAC;AAG3B;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,0BAA0B,CAAC;AAGnE,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,6FAA6F;IAC7F,EAAE,EAAE,MAAM,CAAC;IACX,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,sDAAsD;AACtD,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,sFAAsF;IACtF,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,oGAAoG;IACpG,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,8DAA8D;IAC9D,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACtD;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAC9C,oFAAoF;IACpF,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACnD;AAmCD;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,EACxC,OAAO,GAAE,SAAS,MAAM,EAAmB,GAC1C,OAAO,CAKT;AA+BD,2FAA2F;AAC3F,wBAAgB,4BAA4B,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,GAAE,iBAAsB,GAC3B,kBAAkB,EAAE,CAoBtB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,uEAAuE;AACvE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASnF;AAwBD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACrC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,GAAE,iBAAsB,GAC3B,sBAAsB,CAoExB;AASD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAChD,IAAI,GAAE,iBAAiB,GAAG;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GAC1D,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAe5C;AAED;;;;;;;;GAQG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,GAAE,iBAAiB,GAAG;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GAC1D,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAgB5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,kBAAkB,EAC1B,IAAI,GAAE,iBAAsB,GAC3B;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA0H1D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,GAAE,iBAAsB,GAC3B,iBAAiB,CAqBnB"}
+{"version":3,"file":"auditorSources.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/auditorSources.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,2BAA2B,CAAC;AAMnC;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,0BAA0B,CAAC;AAGnE,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,6FAA6F;IAC7F,EAAE,EAAE,MAAM,CAAC;IACX,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,sDAAsD;AACtD,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,sFAAsF;IACtF,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,oGAAoG;IACpG,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,8DAA8D;IAC9D,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACtD;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;CAC/C;AAgCD;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,EACxC,OAAO,GAAE,SAAS,MAAM,EAAmB,GAC1C,OAAO,CAKT;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAmB5D;AA8BD,2FAA2F;AAC3F,wBAAgB,4BAA4B,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,GAAE,iBAAsB,GAC3B,kBAAkB,EAAE,CAoBtB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASnF;AAwBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,kBAAkB,EAC1B,IAAI,GAAE,iBAAsB,GAC3B;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAqH1D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,GAAE,iBAAsB,GAC3B,iBAAiB,CAoBnB"}

package/dist/shared/providers/auditorSources.js

@@ -4,15 +4,12 @@ import { laneWorkerKindConflict, } from "../types/sessionConfig.js";
 import { resolveAuditCodeStateDir } from "../io/stateDir.js";
 import { spawnSyncHidden } from "../tooling/exec.js";
 import { validateSessionConfig } from "../validation/sessionConfig.js";
-import { populateProxyCatalog, readProxyCatalog, } from "./proxyCatalog.js";
 import { commandExists } from "./providerPathGuard.js";
 /**
  * The machine-level declaration file: the backends the OPERATOR owns, hand-authored
- * like `session-config.json`. Deliberately NOT id-keyed and deliberately NOT named
- * like the POPULATE cache (`catalog-cache.json`, `proxyCatalog.ts` — the
- * `catalog-<auditor-id>.json` name this comment once reserved landed WITHOUT the
- * auditor-id key; see the rationale there) — squatting the cache name would turn
- * this read into a direct cache read, violating never-inherit by filename collision.
+ * like `session-config.json`. Deliberately NOT id-keyed: each invocation intersects
+ * the declaration with its own ambient reach instead of inheriting another
+ * auditor's resolved capability.
  *
  * A declaration is not a cache: it is operator INTENT, not a prior auditor's resolved
  * state. Reading it and intersecting it with live ambient reach does not inherit
@@ -31,8 +28,6 @@ const CLI_DEFAULT_COMMAND = {
     opencode: "opencode",
     agy: "agy",
 };
-/** Gated for the 2026-07-18 agy sunset: `agy` falls back to a legacy `gemini` binary. */
-const AGY_LEGACY_COMMAND = "gemini";
 function defaultFileReadable(path) {
     try {
         accessSync(path, constants.R_OK);
@@ -69,26 +64,49 @@ export function probeReachableWithEscalation(probeOnce, budgets = [1_000, 4_000]
     }
     return false;
 }
+/**
+ * Build liveness URLs for both ordinary OpenAI-compatible bases and proxies
+ * whose API base is `/v1` but whose health endpoint is served at the origin.
+ */
+export function buildLivenessProbeUrls(url) {
+    const base = url.replace(/\/+$/u, "");
+    try {
+        const parsed = new URL(base);
+        const path = parsed.pathname.replace(/\/+$/u, "");
+        const origin = parsed.origin;
+        const root = path.toLowerCase().endsWith("/v1")
+            ? `${origin}${path.slice(0, -3)}`.replace(/\/+$/u, "")
+            : origin;
+        return [
+            `${base}/health/liveliness`,
+            `${base}/models`,
+            `${root}/health/liveliness`,
+            `${root}/health`,
+            `${root}/v1/models`,
+        ].filter((candidate, index, all) => all.indexOf(candidate) === index);
+    }
+    catch {
+        return [`${base}/health/liveliness`, `${base}/models`];
+    }
+}
 function defaultProbeHttpReachable(url) {
-    // Neutral proxy contract liveness: try /health/liveliness first (unauthenticated),
-    // then fallback to /v1/models. On /v1/models, ANY HTTP status counts alive
-    // (a 401 from a keyed proxy still proves it's listening).
-    const probeOnce = (budgetMs, path) => {
+    // Neutral proxy contract liveness: any HTTP response proves the listener is
+    // alive, including a 401 from a keyed proxy. Try the API base first, then
+    // origin-level health/model routes for proxies that mount health outside /v1.
+    const probeOnce = (budgetMs, targetUrl) => {
         const script = "const [url, ms] = process.argv.slice(1);" +
             "fetch(url, { signal: AbortSignal.timeout(Number(ms)) })" +
             ".then((r) => process.exit(0), () => process.exit(1));";
-        const result = spawnSyncHidden(process.execPath, ["-e", script, `${url}${path}`, String(budgetMs)], {
+        const result = spawnSyncHidden(process.execPath, ["-e", script, targetUrl, String(budgetMs)], {
             timeout: budgetMs + 1_500,
         });
         return result.status === 0;
     };
     for (const budgetMs of [1_000, 4_000]) {
-        // Try /health/liveliness first (unauthenticated, guaranteed safe)
-        if (probeOnce(budgetMs, "/health/liveliness"))
-            return true;
-        // Fallback to /v1/models (if /health/liveliness is absent)
-        if (probeOnce(budgetMs, "/v1/models"))
-            return true;
+        for (const candidate of buildLivenessProbeUrls(url)) {
+            if (probeOnce(budgetMs, candidate))
+                return true;
+        }
     }
     return false;
 }
@@ -134,7 +152,6 @@ export function readSourceDeclaration(deps = {}) {
         return [];
     return sources;
 }
-/** `readProxyDeclaration`'s outcome: the lane, or why it is absent. */
 /**
  * `api_key_env` names an environment VARIABLE; it never carries the value. A
  * declaration that pastes `NAME=value` (or the secret itself) used to be
@@ -142,10 +159,8 @@ export function readSourceDeclaration(deps = {}) {
  * "NAME=value"` — which reads as a missing env var and sends the operator to
  * their shell instead of to the typo.
  *
- * The check belongs to the FIELD, not to one of its readers: it previously
- * guarded only the `openai-compatible` source branch while `readProxyDeclaration`
- * and the `claude-worker` reach branch accepted any non-empty string, so both
- * inherited the misleading symptom the validated branch exists to prevent.
+ * The check belongs to the FIELD, not to one of its readers: both endpoint-backed
+ * source transports must reject the typo with the same precise explanation.
  * Returns a precise reason, or `null` when the name is well formed. Reach
  * branches call {@link apiKeyEnvReachReason}, which pairs this with the
  * env-is-set half. [[validator-guards-every-field-caller-reads]]
@@ -178,149 +193,6 @@ function apiKeyEnvReachReason(apiKeyEnv, env) {
     }
     return null;
 }
-/**
- * Read the optional `proxy` block from the machine declaration. Tolerant like
- * {@link readSourceDeclaration}: an absent / unparseable file or a missing key is
- * simply `{declaration: null}`; a PRESENT-but-malformed block degrades to lane-absent
- * WITH a reason (surfaced via `resolveAmbientSources`' `dropped[]`), never a throw.
- * Malformed optional TUNING knobs (`top_k` / `cost_per_mtok`) are dropped
- * individually — a bad tuning value must not cost the operator the whole lane.
- * `api_key_env` is deliberately NOT in that set: it is a credential reference,
- * and dropping it silently leaves the lane looking unauthenticated so the
- * failure surfaces far downstream with a reason that no longer names the typo.
- *
- * Rejection: if a `repair_proxy` key exists, it is not recognized and surfaces a
- * dropped reason telling the operator what key to use instead (never silent ignore).
- */
-export function readProxyDeclaration(deps = {}) {
-    const path = resolveSourceDeclarationPath(deps.homeDir);
-    const raw = (deps.readDeclarationFile ?? defaultReadDeclarationFile)(path);
-    if (raw === null)
-        return { declaration: null };
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return { declaration: null };
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        return { declaration: null };
-    }
-    // Check for unrecognized `repair_proxy` key and surface it as a dropped reason (never silent).
-    const unresolvedBlock = parsed.repair_proxy;
-    if (unresolvedBlock !== undefined) {
-        return {
-            declaration: null,
-            reason: "repair_proxy is retired — declare a proxy block instead.",
-        };
-    }
-    const block = parsed.proxy;
-    if (block === undefined)
-        return { declaration: null };
-    if (typeof block !== "object" || block === null || Array.isArray(block)) {
-        return {
-            declaration: null,
-            reason: "proxy must be a JSON object with an endpoint — fix the declaration.",
-        };
-    }
-    const { endpoint, top_k, cost_per_mtok, api_key_env, burst_limited } = block;
-    if (typeof endpoint !== "string" || endpoint.trim().length === 0) {
-        return {
-            declaration: null,
-            reason: "proxy.endpoint must be a non-empty url string — fix the declaration.",
-        };
-    }
-    const declaration = {
-        // Trailing slashes stripped so the reach probe, the discovery cache's stored
-        // endpoint, and the expanded sources all compare on one canonical form.
-        endpoint: endpoint.trim().replace(/\/+$/u, ""),
-    };
-    if (typeof top_k === "number" && Number.isInteger(top_k) && top_k > 0) {
-        declaration.top_k = top_k;
-    }
-    if (typeof cost_per_mtok === "number" &&
-        Number.isFinite(cost_per_mtok) &&
-        cost_per_mtok >= 0) {
-        declaration.cost_per_mtok = cost_per_mtok;
-    }
-    if (typeof api_key_env === "string" && api_key_env.trim().length > 0) {
-        // NOT dropped-individually like the tuning knobs above. `api_key_env` is a
-        // CREDENTIAL REFERENCE: silently discarding a malformed one leaves the lane
-        // looking unauthenticated and fails much further downstream, where the
-        // reason no longer names the typo. Fail the lane here, with the same
-        // precise text the `openai-compatible` branch uses.
-        const bad = invalidEnvVarNameReason("proxy.api_key_env", api_key_env);
-        if (bad !== null)
-            return { declaration: null, reason: bad };
-        declaration.api_key_env = api_key_env.trim();
-    }
-    if (typeof burst_limited === "boolean") {
-        declaration.burst_limited = burst_limited;
-    }
-    return { declaration };
-}
-/**
- * The default populate fetch: time-boxed so a routable-but-dead proxy cannot hang a
- * `next-step` at the Gate-0 build (network-tolerant means bounded, not just caught).
- */
-const populateFetchWithTimeout = (input, init) => fetch(input, { ...init, signal: AbortSignal.timeout(5_000) });
-/**
- * POPULATE the declared proxy lane (plan §populate-vs-resolve): read the
- * machine declaration's `proxy` block and, when present, fetch its model
- * discovery into the machine-level populate cache ({@link populateProxyCatalog}).
- * This is the network half the resolve path must never run — call it at Gate-0
- * build time (once per run) or on explicit refresh, NEVER from `resolveAmbientSources`.
- *
- * "Present + reachable" gating is the fetch itself: the discovery GET is both the
- * liveness proof and the payload, so a separate pre-probe would only double the
- * network. Never throws: no declared lane ⇒ `null`; a failed/unreachable fetch ⇒
- * `{written:false, reason}` and any prior cache is left untouched — the lane then
- * resolves from the existing cache or unexpanded with its own `dropped[]` reason,
- * degrading Gate-0, never blocking it.
- */
-export async function populateDeclaredProxyCatalog(deps = {}) {
-    const { declaration } = readProxyDeclaration(deps);
-    if (declaration === null)
-        return null;
-    return populateProxyCatalog({
-        endpoint: declaration.endpoint,
-        ...(declaration.top_k !== undefined ? { topK: declaration.top_k } : {}),
-        ...(declaration.cost_per_mtok !== undefined
-            ? { costPerMtok: declaration.cost_per_mtok }
-            : {}),
-        ...(declaration.api_key_env !== undefined
-            ? { apiKeyEnv: declaration.api_key_env }
-            : {}),
-        fetchImpl: deps.fetchImpl ?? populateFetchWithTimeout,
-        ...(deps.homeDir !== undefined ? { homeDir: deps.homeDir } : {}),
-    });
-}
-/**
- * Populate the proxy catalog ONLY when the resolve half would otherwise drop the
- * lane for it: a `proxy` is declared but the cache is absent or was fetched from a
- * different endpoint. Bounded by construction — after one success the cache exists
- * and this is a cheap read — so a draw with no Gate-0 build moment (remediate) can
- * call it on every config load without a per-load network fetch. Freshness (TTL /
- * explicit refresh) is deliberately NOT this function's job (backlog).
- * [[silent-fail-closed-on-one-draw]] — both draws must trigger populate, not just audit.
- */
-export async function populateProxyCatalogIfMissing(deps = {}) {
-    const { declaration } = readProxyDeclaration(deps);
-    if (declaration === null)
-        return null;
-    const cache = readProxyCatalog(deps);
-    if (cache !== null &&
-        cache.endpoint.replace(/\/+$/u, "") === declaration.endpoint) {
-        return {
-            sources: cache.sources,
-            written: false,
-            reason: "populate cache already present",
-            dropped: [],
-        };
-    }
-    return populateDeclaredProxyCatalog(deps);
-}
 /**
  * Can THIS process prove it can reach this declared source?
  *
@@ -421,10 +293,6 @@ export function verifySourceReach(source, deps = {}) {
             const fallback = CLI_DEFAULT_COMMAND[source.transport];
             if (exists(fallback))
                 return { verified: true };
-            // Gated for the 2026-07-18 sunset, mirroring agyProvider's own fallback.
-            if (source.transport === "agy" && exists(AGY_LEGACY_COMMAND)) {
-                return { verified: true };
-            }
             return { verified: false, reason: `launcher "${fallback}" is not on PATH.` };
         }
         case "subprocess-template": {
@@ -450,9 +318,8 @@ export function verifySourceReach(source, deps = {}) {
         }
         case "claude-worker": {
             // The proxied isolated Claude-harness worker: its reach IS the proxy's
-            // liveness (endpoint = the proxy url). Normally these sources come pre-verified
-            // from the populate cache via the `proxy` lane; a hand-declared one is held to
-            // the same bar. `api_key_env` is optional here (keyless proxy default).
+            // liveness (endpoint = the proxy url). Explicit declarations are held to the
+            // same bar as every other endpoint source. `api_key_env` is optional here.
             if (!source.endpoint?.trim()) {
                 return {
                     verified: false,
@@ -507,9 +374,8 @@ export function resolveAmbientSources(deps = {}) {
         else
             dropped.push({ id: sourceId(source), reason: reach.reason });
     }
-    resolveProxyLane(deps, sources, dropped);
     // Worker-kind × pool-class compatibility, applied ONCE over the assembled set so
-    // declared and proxy-expanded lanes are held to the same rule. Per-lane, so one
+    // all declared lanes are held to the same rule. Per-lane, so one
     // incompatible lane never costs the operator the rest of the pool (unlike a
     // validator error, which degrades the whole declaration).
     const compatible = [];
@@ -522,95 +388,4 @@ export function resolveAmbientSources(deps = {}) {
     }
     return { sources: compatible, dropped };
 }
-/**
- * The proxy lane of the resolve half (plan §populate-vs-resolve): a declared
- * `proxy` whose liveness probe passes expands from the POPULATE CACHE — never
- * a mid-resolve fetch. Fail-open, mirroring the declared-source contract: every
- * outcome short of expansion lands in `dropped[]` with an operator-facing reason
- * (malformed declaration / probe failure / cache absent-stale-empty), so the lane is
- * never silently discarded.
- */
-function resolveProxyLane(deps, sources, dropped) {
-    const { declaration, reason } = readProxyDeclaration(deps);
-    if (reason !== undefined) {
-        dropped.push({ id: "proxy", reason });
-        return;
-    }
-    if (declaration === null)
-        return;
-    const { endpoint } = declaration;
-    const laneId = `proxy:${endpoint}`;
-    // Reach-verify the declared master key BEFORE the liveness probe. A proxy's
-    // health endpoint is typically unauthenticated (LiteLLM's /health/liveliness
-    // is), so the probe passes with no key and the lane then fails downstream at
-    // populate — surfacing "cache absent, run the populate" when the operator DID
-    // run it and the real cause is the unset var. Mirrors the same check the
-    // expanded per-model claude-worker sources get in `verifySourceReach`.
-    const env = deps.env ?? process.env;
-    if (declaration.api_key_env !== undefined) {
-        if (!(env[declaration.api_key_env] ?? "").trim()) {
-            dropped.push({
-                id: laneId,
-                reason: `env var "${declaration.api_key_env}" is unset or empty in this process.`,
-            });
-            return;
-        }
-    }
-    const probe = deps.probeHttpReachable ?? defaultProbeHttpReachable;
-    if (!probe(endpoint)) {
-        dropped.push({
-            id: laneId,
-            reason: `proxy at "${endpoint}" failed the liveness probe — lane dropped for this invocation.`,
-        });
-        return;
-    }
-    const catalog = readProxyCatalog(deps);
-    if (catalog === null) {
-        dropped.push({
-            id: laneId,
-            reason: "proxy is reachable but the populate cache is absent/invalid — run the populate (populateProxyCatalog) to expand this lane.",
-        });
-        return;
-    }
-    if (catalog.endpoint.replace(/\/+$/u, "") !== endpoint) {
-        dropped.push({
-            id: laneId,
-            reason: `populate cache was fetched from "${catalog.endpoint}", not the declared "${endpoint}" — re-run the populate.`,
-        });
-        return;
-    }
-    if (catalog.sources.length === 0) {
-        dropped.push({
-            id: laneId,
-            reason: "proxy expansion is empty (no reachable backend models at populate time) — lane present but unexpanded.",
-        });
-        return;
-    }
-    // Declared-wins dedup: an expanded lane whose (service, model)
-    // identity a DECLARED source already covers is skipped, so one pool identity
-    // never maps to two sources (the launch bridge's pool→source map is 1:1 by
-    // assumption — a duplicate would arbitrate the transport by silent map-order
-    // clobber). The operator's explicit lane always beats auto-expansion; routing
-    // through the proxy for that model is still available by declaring the
-    // claude-worker source explicitly.
-    const declaredIdentities = new Set(sources.map((s) => `${s.service ?? s.transport}/${s.model ?? ""}`));
-    for (const expanded of catalog.sources) {
-        const identity = `${expanded.service ?? expanded.transport}/${expanded.model ?? ""}`;
-        if (declaredIdentities.has(identity)) {
-            dropped.push({
-                id: sourceId(expanded),
-                reason: `expanded lane skipped — a declared source already covers backend identity "${identity}" (declared wins over expansion).`,
-            });
-            continue;
-        }
-        // `burst_limited` is stamped from the CURRENT declaration, not the populate
-        // cache — declaration-authoritative in BOTH directions: an explicit `false`
-        // strips a cache-carried flag just as `true` adds one, so flipping the knob
-        // takes effect on the next resolve without a re-populate (a stale cache can
-        // neither launder the flag off nor pin it on).
-        sources.push(typeof declaration.burst_limited === "boolean"
-            ? { ...expanded, burst_limited: declaration.burst_limited }
-            : expanded);
-    }
-}
 //# sourceMappingURL=auditorSources.js.map

package/dist/shared/providers/auditorSources.js.map

@@ -1 +1 @@
-{"version":3,"file":"auditorSources.js","sourceRoot":"","sources":["../../../src/shared/providers/auditorSources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAEL,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AA0CnE;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAqC;IAC5D,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,yFAAyF;AACzF,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAEpC,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAwC,EACxC,UAA6B,CAAC,KAAK,EAAE,KAAK,CAAC;IAE3C,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,IAAI,SAAS,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,mFAAmF;IACnF,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAW,EAAE;QAC5D,MAAM,MAAM,GACV,0CAA0C;YAC1C,yDAAyD;YACzD,uDAAuD,CAAC;QAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE;YAClG,OAAO,EAAE,QAAQ,GAAG,KAAK;SAC1B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACtC,kEAAkE;QAClE,IAAI,SAAS,CAAC,QAAQ,EAAE,oBAAoB,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,2DAA2D;QAC3D,IAAI,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,SAAS,QAAQ,CAAC,MAA0B;IAC1C,OAAO,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC;AACtF,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,4BAA4B,CAAC,OAAgB;IAC3D,OAAO,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAI,MAAgC,CAAC,OAAO,CAAC;IAC1D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,4EAA4E;IAC5E,iFAAiF;IACjF,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAClE,OAAO,OAA+B,CAAC;AACzC,CAAC;AAyBD,uEAAuE;AACvE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,KAAa;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,CACL,GAAG,KAAK,KAAK,IAAI,uCAAuC;QACxD,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClB,CAAC,CAAC,mGAAmG;YACrG,CAAC,CAAC,yEAAyE,CAAC,CAC/E,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAC3B,SAAiB,EACjB,GAAsB;IAEtB,MAAM,GAAG,GAAG,uBAAuB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAC7B,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,OAAO,YAAY,SAAS,CAAC,IAAI,EAAE,sCAAsC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,+FAA+F;IAC/F,MAAM,eAAe,GAAI,MAAkC,CAAC,YAAY,CAAC;IACzE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,0DAA0D;SACnE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAI,MAA8B,CAAC,KAAK,CAAC;IACpD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,qEAAqE;SAC9E,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,GAClE,KAAgC,CAAC;IACnC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,sEAAsE;SAC/E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAqB;QACpC,6EAA6E;QAC7E,wEAAwE;QACxE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;KAC/C,CAAC;IACF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACtE,WAAW,CAAC,KAAK,GAAG,KAAK,CAAC;IAC5B,CAAC;IACD,IACE,OAAO,aAAa,KAAK,QAAQ;QACjC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC9B,aAAa,IAAI,CAAC,EAClB,CAAC;QACD,WAAW,CAAC,aAAa,GAAG,aAAa,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,2EAA2E;QAC3E,4EAA4E;QAC5E,uEAAuE;QACvE,qEAAqE;QACrE,oDAAoD;QACpD,MAAM,GAAG,GAAG,uBAAuB,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC5D,WAAW,CAAC,WAAW,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,WAAW,CAAC,aAAa,GAAG,aAAa,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,wBAAwB,GAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAC7D,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAEhE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAyD,EAAE;IAE3D,MAAM,EAAE,WAAW,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,oBAAoB,CAAC;QAC1B,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,WAAW,CAAC,aAAa,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,aAAa,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,WAAW,CAAC,WAAW,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,WAAW,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,wBAAwB;QACrD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAyD,EAAE;IAE3D,MAAM,EAAE,WAAW,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,IACE,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,WAAW,CAAC,QAAQ,EAC5D,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,gCAAgC;YACxC,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IACD,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA0B,EAC1B,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAE1D,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtF,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,qBAAqB,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,oBAAoB;aACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,QAAQ,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC;YAC7F,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC1B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;YAC/E,CAAC;YACD,4EAA4E;YAC5E,6EAA6E;YAC7E,0DAA0D;YAC1D,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC5B,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBACrC,OAAO;wBACL,QAAQ,EAAE,KAAK;wBACf,MAAM,EACJ,2GAA2G;qBAC9G,CAAC;gBACJ,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,IAAI,yBAAyB,CAAC;gBACzE,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACnE,OAAO,WAAW,CAAC,cAAc,CAAC;oBAChC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACpB,CAAC,CAAC;wBACE,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,qBAAqB,cAAc,8BAA8B;qBAC1E,CAAC;YACR,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;gBAChC,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EACJ,oHAAoH;iBACvH,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAChE,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACtE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QACD,KAAK,OAAO,CAAC;QACb,KAAK,UAAU,CAAC;QAChB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;YACzC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,QAAQ,CAAC;oBACrB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACpB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,QAAQ,mBAAmB,EAAE,CAAC;YAC5E,CAAC;YACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAChD,yEAAyE;YACzE,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,IAAI,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,QAAQ,mBAAmB,EAAE,CAAC;QAC/E,CAAC;QACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC;YACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrD,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,4EAA4E;iBACrF,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,QAAQ,CAAC;gBACrB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACpB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,QAAQ,mBAAmB,EAAE,CAAC;QAC5E,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,sEAAsE;YACtE,yEAAyE;YACzE,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EACJ,uGAAuG;aAC1G,CAAC;QACJ,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,uEAAuE;YACvE,gFAAgF;YAChF,+EAA+E;YAC/E,wEAAwE;YACxE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC7B,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,uDAAuD;iBAChE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC1B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;YAC3E,CAAC;YACD,0EAA0E;YAC1E,gFAAgF;YAChF,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC/B,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACrE,IAAI,cAAc,KAAK,IAAI;oBAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YAClF,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,IAAI,yBAAyB,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC,QAAQ,CAAC;gBACpB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACpB,CAAC,CAAC;oBACE,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,aAAa,QAAQ,8BAA8B;iBAC5D,CAAC;QACR,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAAE;IAE5B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACzC,iFAAiF;IACjF,gFAAgF;IAChF,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;YAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CACvB,IAAuB,EACvB,OAA6B,EAC7B,OAAwB;IAExB,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IACD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO;IACjC,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;IACjC,MAAM,MAAM,GAAG,SAAS,QAAQ,EAAE,CAAC;IACnC,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,WAAW,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,MAAM;gBACV,MAAM,EAAE,YAAY,WAAW,CAAC,WAAW,sCAAsC;aAClF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,IAAI,yBAAyB,CAAC;IACnE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,MAAM;YACV,MAAM,EAAE,aAAa,QAAQ,iEAAiE;SAC/F,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,MAAM;YACV,MAAM,EACJ,4HAA4H;SAC/H,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,MAAM;YACV,MAAM,EAAE,oCAAoC,OAAO,CAAC,QAAQ,wBAAwB,QAAQ,0BAA0B;SACvH,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,MAAM;YACV,MAAM,EACJ,wGAAwG;SAC3G,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,+DAA+D;IAC/D,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,uEAAuE;IACvE,mCAAmC;IACnC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CACnE,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACrF,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACtB,MAAM,EAAE,8EAA8E,QAAQ,mCAAmC;aAClI,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,+CAA+C;QAC/C,OAAO,CAAC,IAAI,CACV,OAAO,WAAW,CAAC,aAAa,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE;YAC3D,CAAC,CAAC,QAAQ,CACb,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"auditorSources.js","sourceRoot":"","sources":["../../../src/shared/providers/auditorSources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAEL,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AAwCnE;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAqC;IAC5D,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAwC,EACxC,UAA6B,CAAC,KAAK,EAAE,KAAK,CAAC;IAE3C,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,IAAI,SAAS,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC7C,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,CAAC,CAAC,MAAM,CAAC;QACX,OAAO;YACL,GAAG,IAAI,oBAAoB;YAC3B,GAAG,IAAI,SAAS;YAChB,GAAG,IAAI,oBAAoB;YAC3B,GAAG,IAAI,SAAS;YAChB,GAAG,IAAI,YAAY;SACpB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,IAAI,oBAAoB,EAAE,GAAG,IAAI,SAAS,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,4EAA4E;IAC5E,0EAA0E;IAC1E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAW,EAAE;QACjE,MAAM,MAAM,GACV,0CAA0C;YAC1C,yDAAyD;YACzD,uDAAuD,CAAC;QAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE;YAC5F,OAAO,EAAE,QAAQ,GAAG,KAAK;SAC1B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACtC,KAAK,MAAM,SAAS,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,IAAI,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,SAAS,QAAQ,CAAC,MAA0B;IAC1C,OAAO,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC;AACtF,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,4BAA4B,CAAC,OAAgB;IAC3D,OAAO,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAI,MAAgC,CAAC,OAAO,CAAC;IAC1D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,4EAA4E;IAC5E,iFAAiF;IACjF,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAClE,OAAO,OAA+B,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,KAAa;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,CACL,GAAG,KAAK,KAAK,IAAI,uCAAuC;QACxD,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClB,CAAC,CAAC,mGAAmG;YACrG,CAAC,CAAC,yEAAyE,CAAC,CAC/E,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAC3B,SAAiB,EACjB,GAAsB;IAEtB,MAAM,GAAG,GAAG,uBAAuB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAC7B,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,OAAO,YAAY,SAAS,CAAC,IAAI,EAAE,sCAAsC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA0B,EAC1B,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAE1D,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtF,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,qBAAqB,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,oBAAoB;aACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,QAAQ,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC;YAC7F,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC1B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;YAC/E,CAAC;YACD,4EAA4E;YAC5E,6EAA6E;YAC7E,0DAA0D;YAC1D,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC5B,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBACrC,OAAO;wBACL,QAAQ,EAAE,KAAK;wBACf,MAAM,EACJ,2GAA2G;qBAC9G,CAAC;gBACJ,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,IAAI,yBAAyB,CAAC;gBACzE,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACnE,OAAO,WAAW,CAAC,cAAc,CAAC;oBAChC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACpB,CAAC,CAAC;wBACE,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,qBAAqB,cAAc,8BAA8B;qBAC1E,CAAC;YACR,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;gBAChC,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EACJ,oHAAoH;iBACvH,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAChE,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACtE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QACD,KAAK,OAAO,CAAC;QACb,KAAK,UAAU,CAAC;QAChB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;YACzC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,QAAQ,CAAC;oBACrB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACpB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,QAAQ,mBAAmB,EAAE,CAAC;YAC5E,CAAC;YACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAChD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,QAAQ,mBAAmB,EAAE,CAAC;QAC/E,CAAC;QACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC;YACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrD,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,4EAA4E;iBACrF,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,QAAQ,CAAC;gBACrB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACpB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,QAAQ,mBAAmB,EAAE,CAAC;QAC5E,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,sEAAsE;YACtE,yEAAyE;YACzE,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EACJ,uGAAuG;aAC1G,CAAC;QACJ,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,uEAAuE;YACvE,6EAA6E;YAC7E,2EAA2E;YAC3E,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC7B,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,uDAAuD;iBAChE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC1B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;YAC3E,CAAC;YACD,0EAA0E;YAC1E,gFAAgF;YAChF,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC/B,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACrE,IAAI,cAAc,KAAK,IAAI;oBAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YAClF,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,IAAI,yBAAyB,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC,QAAQ,CAAC;gBACpB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACpB,CAAC,CAAC;oBACE,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,aAAa,QAAQ,8BAA8B;iBAC5D,CAAC;QACR,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAAE;IAE5B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,iFAAiF;IACjF,iEAAiE;IACjE,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;YAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC"}

package/dist/shared/providers/dispatchExclusion.d.ts

@@ -0,0 +1,22 @@
+import { type ResolvedProviderName } from "../types/sessionConfig.js";
+/** A mechanical source-pool exclusion emitted by the local self-spawn guard. */
+export type DispatchExclusionPattern = `transport:${ResolvedProviderName}`;
+export interface ExcludableBackend {
+    transport: string;
+    service?: string;
+    model?: string;
+    endpoint?: string;
+}
+export interface DispatchExclusion {
+    excludes(backend: ExcludableBackend): boolean;
+    excludedBy(backend: ExcludableBackend): DispatchExclusionPattern | null;
+}
+/**
+ * Reject source lanes that would recursively spawn the active host agent.
+ * Provider/model ordering and failover deliberately belong to the dispatch broker.
+ */
+export declare function buildSelfSpawnExclusion(options?: {
+    env?: NodeJS.ProcessEnv;
+    activeHostProvider?: ResolvedProviderName | null;
+}): DispatchExclusion;
+//# sourceMappingURL=dispatchExclusion.d.ts.map

package/dist/shared/providers/dispatchExclusion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchExclusion.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/dispatchExclusion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGtF,gFAAgF;AAChF,MAAM,MAAM,wBAAwB,GAAG,aAAa,oBAAoB,EAAE,CAAC;AAE3E,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC;IAC9C,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,wBAAwB,GAAG,IAAI,CAAC;CACzE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC7C,GACL,iBAAiB,CAenB"}

package/dist/shared/providers/dispatchExclusion.js

@@ -0,0 +1,23 @@
+import { PROVIDER_NAMES } from "../types/sessionConfig.js";
+import { isSelfSpawnBlocked } from "./providerPathGuard.js";
+/**
+ * Reject source lanes that would recursively spawn the active host agent.
+ * Provider/model ordering and failover deliberately belong to the dispatch broker.
+ */
+export function buildSelfSpawnExclusion(options = {}) {
+    const env = options.env ?? process.env;
+    const blocked = PROVIDER_NAMES
+        .filter((name) => name !== "auto")
+        .filter((name) => isSelfSpawnBlocked(name, env));
+    if (options.activeHostProvider)
+        blocked.push(options.activeHostProvider);
+    const blockedSet = new Set(blocked);
+    const excludedBy = (backend) => blockedSet.has(backend.transport)
+        ? `transport:${backend.transport}`
+        : null;
+    return {
+        excludes: (backend) => excludedBy(backend) !== null,
+        excludedBy,
+    };
+}
+//# sourceMappingURL=dispatchExclusion.js.map

package/dist/shared/providers/dispatchExclusion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchExclusion.js","sourceRoot":"","sources":["../../../src/shared/providers/dispatchExclusion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAA6B,MAAM,2BAA2B,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAiB5D;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAGI,EAAE;IAEN,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,OAAO,GAAG,cAAc;SAC3B,MAAM,CAAC,CAAC,IAAI,EAAgC,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC;SAC/D,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,kBAAkB;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAuB,OAAO,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,CAAC,OAA0B,EAAmC,EAAE,CACjF,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,SAAiC,CAAC;QACvD,CAAC,CAAE,aAAa,OAAO,CAAC,SAAS,EAA+B;QAChE,CAAC,CAAC,IAAI,CAAC;IACX,OAAO;QACL,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI;QACnD,UAAU;KACX,CAAC;AACJ,CAAC"}