audit-tools 0.34.5 → 0.34.6

package/dist/shared/providers/identity.js

@@ -45,7 +45,7 @@
  * silently — reopening the exact PATH-appearance case the gate exists to catch, blind
  * rather than loud.
  *
- * ⚠ NOT interchangeable with {@link transportRoute}. Building an exclusion rule from
+ * ⚠ NOT interchangeable with {@link exclusionPattern}. Building an exclusion rule from
  * this identity matches nothing for a proxied lane — `ruleMatches` compares the
  * TRANSPORT. They were unified once; that was the bypass.
  *
@@ -90,17 +90,32 @@ export function quotaPoolKey(providerName, hostModel, account) {
     return hostModel ? `${head}/${hostModel}` : `${head}/*`;
 }
 /**
- * **"What must the routing filter match to drop this?"** → **transport** + model.
+ * **"What pattern rules this backend out?"** → **transport** + model.
  *
- * The pattern that rules out one backend at the finest granularity its model is
- * knowable at — keyed on the TRANSPORT provider, because that is the field
- * `ruleMatches` compares (`ExcludableBackend.transport`). A backend whose model
+ * The axis-explicit exclusion pattern that rules out one backend at the finest
+ * granularity its model is knowable at — prefixed with `transport:` because the
+ * routing filter matches on `ExcludableBackend.transport`. A backend whose model
  * arrives only at the dispatch handshake (a CLI) must be ruled out at the coarse
- * `provider` tier or the rule would never match.
+ * `transport:provider` tier or the rule would never match.
+ *
+ * Model-granular form uses `/` as the delimiter (not `:`) because model ids can
+ * contain colons (e.g. `qwen2.5:7b`).
  *
  * ⚠ NOT the same value as {@link backendIdentity} — see that function's note.
  */
-export function transportRoute(modelId, transportProvider) {
-    return modelId ? `${transportProvider}:${modelId}` : transportProvider;
+export function exclusionPattern(modelId, transportProvider) {
+    return modelId
+        ? `transport:${transportProvider}/${modelId}`
+        : `transport:${transportProvider}`;
+}
+/**
+ * **"What pattern rules this service/vendor out durably?"** → **service** + model.
+ *
+ * The axis-explicit exclusion pattern that rules out a backend at the service
+ * (vendor) axis — prefixed with `service:`. Emitted by autonomous fail-closed
+ * writes so unconfirmed backends stay excluded across transport/proxy changes.
+ */
+export function serviceExclusionPattern(modelId, serviceName) {
+    return modelId ? `service:${serviceName}/${modelId}` : `service:${serviceName}`;
 }
 //# sourceMappingURL=identity.js.map

package/dist/shared/providers/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/shared/providers/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA2B,EAC3B,WAAmB;IAEnB,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;AAC7D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,MAG7B;IACC,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,YAAY,CAC1B,YAAoB,EACpB,SAAoC,EACpC,OAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;IACnE,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA2B,EAC3B,iBAAyB;IAEzB,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,iBAAiB,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;AACzE,CAAC"}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/shared/providers/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA2B,EAC3B,WAAmB;IAEnB,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;AAC7D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,MAG7B;IACC,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,YAAY,CAC1B,YAAoB,EACpB,SAAoC,EACpC,OAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;IACnE,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA2B,EAC3B,iBAAyB;IAEzB,OAAO,OAAO;QACZ,CAAC,CAAC,aAAa,iBAAiB,IAAI,OAAO,EAAE;QAC7C,CAAC,CAAC,aAAa,iBAAiB,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAA2B,EAC3B,WAAmB;IAEnB,OAAO,OAAO,CAAC,CAAC,CAAC,WAAW,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,WAAW,EAAE,CAAC;AAClF,CAAC"}

package/dist/shared/providers/providerConfirmation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providerConfirmation.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/providerConfirmation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAY3E,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,kCAAkC,CAAC;AAM1C,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAEzE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACvC,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAqFD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,aAAa,EAC5B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,aAAa,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAuB,GAC1D,kBAAkB,EAAE,CAgDtB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,kBAAkB,EAC5B,oBAAoB,EAAE,oBAAoB,EAC1C,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,GACnD,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,oBAAoB,EAC1B,aAAa,EAAE,aAAa,GAC3B,MAAM,GAAG,SAAS,CASpB;AAED,oFAAoF;AACpF,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;OAGG;IACH,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC5C;;;;OAIG;IACH,sBAAsB,EAAE,mBAAmB,EAAE,CAAC;CAC/C;AAiED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,kBAAkB,EAAE,EAC1B,aAAa,EAAE,aAAa,EAC5B,KAAK,CAAC,EAAE,yBAAyB,EACjC,OAAO,GAAE,kBAAkB,EAAO,EAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,qBAAqB,CA0GvB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,kBAAkB,EAAE,EAC1B,aAAa,EAAE,aAAa,GAC3B,kBAAkB,EAAE,CAEtB;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,aAAa,GAC3B,sBAAsB,EAAE,CAE1B;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,kBAAkB,EAAE,GAC5B,sBAAsB,EAAE,CAmB1B"}
+{"version":3,"file":"providerConfirmation.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/providerConfirmation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAY3E,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,kCAAkC,CAAC;AAM1C,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAEzE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACvC,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAqFD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,aAAa,EAC5B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,aAAa,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAuB,GAC1D,kBAAkB,EAAE,CAgDtB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,kBAAkB,EAC5B,oBAAoB,EAAE,oBAAoB,EAC1C,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,GACnD,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,oBAAoB,EAC1B,aAAa,EAAE,aAAa,GAC3B,MAAM,GAAG,SAAS,CASpB;AAED,oFAAoF;AACpF,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;OAGG;IACH,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC5C;;;;OAIG;IACH,sBAAsB,EAAE,mBAAmB,EAAE,CAAC;CAC/C;AAiED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,kBAAkB,EAAE,EAC1B,aAAa,EAAE,aAAa,EAC5B,KAAK,CAAC,EAAE,yBAAyB,EACjC,OAAO,GAAE,kBAAkB,EAAO,EAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,qBAAqB,CA4IvB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,kBAAkB,EAAE,EAC1B,aAAa,EAAE,aAAa,GAC3B,kBAAkB,EAAE,CAEtB;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,aAAa,GAC3B,sBAAsB,EAAE,CAE1B;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,kBAAkB,EAAE,GAC5B,sBAAsB,EAAE,CAmB1B"}

package/dist/shared/providers/providerConfirmation.js

@@ -297,6 +297,20 @@ export function annotateConfirmedPool(pool, sessionConfig, input, sources = [],
         ...(source.capability_rank != null ? { capabilityRank: source.capability_rank } : {}),
     }));
     const positions = resolveFinalCostOrder([...providerCandidates, ...hostCandidates, ...sourceCandidates], input?.cost_order);
+    // Capability-evidence ordering: the operator/LLM answer to the capability gate, over
+    // the SAME candidate keyspace the cost order uses. Position ⇒ `capability_rank`
+    // (LOWER = more capable), so the list is most-capable-first. Unlike the cost order
+    // there is no tool-computed suggestion to fall back to: absent input ⇒ no confirmed
+    // ranks at all, and pools keep whatever external evidence they carry.
+    //
+    // First occurrence wins on a duplicated key — a positional list is the operator's
+    // ORDERING, and silently re-ranking on a later repeat would make the tail of a
+    // typo'd list authoritative over its head.
+    const capabilityPositions = new Map();
+    (input?.capability_order ?? []).forEach((key, index) => {
+        if (!capabilityPositions.has(key))
+            capabilityPositions.set(key, index);
+    });
     const provider_pool = pool.map((entry) => {
         const model = representativeModelId(entry.name, sessionConfig);
         const order = positions.get(entry.name);
@@ -305,6 +319,14 @@ export function annotateConfirmedPool(pool, sessionConfig, input, sources = [],
             ...(model ? { model_id: model } : {}),
             blended_price_usd_per_mtok: model ? resolveModelPrice(model) ?? null : null,
             ...(order !== undefined ? { cost_order: order } : {}),
+            // Keyed on the MODEL, never the provider name: `capability_rank` is read back
+            // by the model-keyed dispatch join (`readConfirmedCapabilityRanks` →
+            // `pool.hostModel`), and the delta + prompt both name models. Matching on the
+            // provider name here would silently drop the operator's answer, leaving the
+            // delta non-empty ⇒ `PRIORITY[0]` re-prompts the same question forever.
+            ...(model && capabilityPositions.has(model)
+                ? { capability_rank: capabilityPositions.get(model) }
+                : {}),
         };
     });
     // Recorded at the only point the host is known for certain, rather than re-derived
@@ -314,6 +336,12 @@ export function annotateConfirmedPool(pool, sessionConfig, input, sources = [],
         provider: hostProvider,
         blended_price_usd_per_mtok: resolveModelPrice(m.model_id) ?? null,
         cost_order: positions.get(m.model_id) ?? 0,
+        // A host model is ranked exactly like any other model. The roster carries no
+        // capability field (HostModelRosterEntrySchema is .strict()), so the confirmed
+        // order is the ONLY road a host model's rank travels to dispatch.
+        ...(capabilityPositions.has(m.model_id)
+            ? { capability_rank: capabilityPositions.get(m.model_id) }
+            : {}),
     }));
     const source_pool_cost_order = foldedSources.map((source) => {
         const key = sourceCandidateKey(source);
@@ -332,7 +360,14 @@ export function annotateConfirmedPool(pool, sessionConfig, input, sources = [],
             ...(source.model ? { model_id: source.model } : {}),
             blended_price_usd_per_mtok: price,
             price_declared: declared !== undefined,
-            ...(source.capability_rank != null ? { capability_rank: source.capability_rank } : {}),
+            // External evidence FIRST: a source's own registry/declared rank is
+            // someone-else-maintained data about the model, so the confirmed ordering only
+            // fills the gap where none exists. Same precedence the pool constructors apply.
+            ...(source.capability_rank != null
+                ? { capability_rank: source.capability_rank }
+                : source.model && capabilityPositions.has(source.model)
+                    ? { capability_rank: capabilityPositions.get(source.model) }
+                    : {}),
             cost_order: positions.get(key) ?? 0,
         };
     });

package/dist/shared/providers/providerConfirmation.js.map

@@ -1 +1 @@
-{"version":3,"file":"providerConfirmation.js","sourceRoot":"","sources":["../../../src/shared/providers/providerConfirmation.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAsB,MAAM,yBAAyB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAgC/D,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,SAAS,qBAAqB,CAAC,IAA0B;IACvD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,UAAU,CAAC;QACpB,KAAK,UAAU,CAAC;QAChB,KAAK,OAAO,CAAC;QACb,KAAK,mBAAmB,CAAC;QACzB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,aAAa,CAAC;QACnB,KAAK,aAAa,CAAC;QACnB,KAAK,KAAK,CAAC;QACX,KAAK,eAAe;YAClB,8EAA8E;YAC9E,8EAA8E;YAC9E,OAAO,SAAS,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAcD,MAAM,UAAU,GAAe;IAC7B;QACE,YAAY,EAAE,aAAa;QAC3B,cAAc,EAAE,QAAQ;QACxB,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO;KACjD;IACD;QACE,YAAY,EAAE,UAAU;QACxB,cAAc,EAAE,UAAU;QAC1B,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO;KAC9C;IACD;QACE,YAAY,EAAE,OAAO;QACrB,cAAc,EAAE,OAAO;QACvB,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO;KAC3C;IACD;QACE,YAAY,EAAE,KAAK;QACnB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO;gBAAE,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAC7C,qEAAqE;YACrE,IAAI,aAAa,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,IAAI,aAAa,CAAC,QAAQ,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC7C,OAAO,SAAS,CAAC;QACnB,CAAC;KACF;CACF,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,aAA4B,EAC5B,MAAyB,OAAO,CAAC,GAAG,EACpC,gBAA8C,aAAa;IAE3D,MAAM,UAAU,GAAyB,EAAE,CAAC;IAE5C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,OAAO,GACX,CAAC,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,cAAc,CAAC;QAC5E,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,SAAS;YAAE,SAAS;QAEzB,sEAAsE;QACtE,yEAAyE;QACzE,4EAA4E;QAC5E,kFAAkF;QAClF,4DAA4D;QAC5D,IAAI,KAAK,CAAC,YAAY,KAAK,UAAU,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/E,SAAS;QACX,CAAC;QAED,4EAA4E;QAC5E,2EAA2E;QAC3E,mEAAmE;QACnE,+CAA+C;QAC/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAE5D,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,KAAK,CAAC,YAAY;YACxB,OAAO;YACP,cAAc,EAAE,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC;YACzD,QAAQ,EAAE,IAAI;YACd,gBAAgB,EAAE,OAAO;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,6BAA6B,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,aAAa,CAAC,iBAAiB,EAAE,KAAK;YAC/C,cAAc,EAAE,qBAAqB,CAAC,mBAAmB,CAAC;YAC1D,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAA4B,EAC5B,oBAA0C,EAC1C,GAAoD;IAEpD,IAAI,OAAO,oBAAoB,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,oBAAoB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAA0B,EAC1B,aAA4B;IAE5B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,mBAAmB;YACtB,OAAO,aAAa,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACrE,KAAK,OAAO;YACV,OAAO,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACzD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAmBD,yFAAyF;AACzF,SAAS,iBAAiB,CAAC,MAA0B;IACnD,OAAO,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,2BAA2B,GAAG,UAAU,CAAC;AAE/C,SAAS,kBAAkB,CAAC,MAA0B;IACpD,OAAO,GAAG,2BAA2B,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,UAA2B,EAC3B,aAAwB;IAExB,MAAM,SAAS,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,6EAA6E;IAC7E,+DAA+D;IAC/D,8EAA8E;IAC9E,iFAAiF;IACjF,6EAA6E;IAC7E,iFAAiF;IACjF,gEAAgE;IAChE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,2BAA2B,CAAC;YAAE,SAAS;QAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9C,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAA0B,EAC1B,aAA4B,EAC5B,KAAiC,EACjC,UAAgC,EAAE,EAClC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,UAAU,GAAG,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC;IAC5C,8EAA8E;IAC9E,kFAAkF;IAClF,+EAA+E;IAC/E,MAAM,YAAY,GAAG,+BAA+B,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7E,MAAM,kBAAkB,GAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/D,GAAG,EAAE,KAAK,CAAC,IAAI;QACf,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC;KACxD,CAAC,CAAC,CAAC;IACJ,gFAAgF;IAChF,kFAAkF;IAClF,mFAAmF;IACnF,MAAM,cAAc,GAAoB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,GAAG,EAAE,CAAC,CAAC,QAAQ;QACf,KAAK,EAAE,CAAC,CAAC,QAAQ;KAClB,CAAC,CAAC,CAAC;IACJ,kFAAkF;IAClF,uFAAuF;IACvF,sFAAsF;IACtF,iFAAiF;IACjF,uFAAuF;IACvF,yFAAyF;IACzF,+EAA+E;IAC/E,gFAAgF;IAChF,iFAAiF;IACjF,iFAAiF;IACjF,kFAAkF;IAClF,oFAAoF;IACpF,gFAAgF;IAChF,oEAAoE;IACpE,mFAAmF;IACnF,wEAAwE;IACxE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC;YAAE,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAClC,CAAC,MAAM,EAAE,EAAE,CACT,CAAC,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAC/E,CAAC;IACF,qFAAqF;IACrF,kFAAkF;IAClF,yFAAyF;IACzF,uFAAuF;IACvF,8EAA8E;IAC9E,MAAM,gBAAgB,GAAoB,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;QAC3B,+EAA+E;QAC/E,kFAAkF;QAClF,mFAAmF;QACnF,qDAAqD;QACrD,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC,CAAC,CAAC;IACJ,MAAM,SAAS,GAAG,qBAAqB,CACrC,CAAC,GAAG,kBAAkB,EAAE,GAAG,cAAc,EAAE,GAAG,gBAAgB,CAAC,EAC/D,KAAK,EAAE,UAAU,CAClB,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO;YACL,GAAG,KAAK;YACR,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,0BAA0B,EAAE,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;YAC3E,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,mFAAmF;IACnF,6DAA6D;IAC7D,MAAM,qBAAqB,GAAyB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,YAAY;QACtB,0BAA0B,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI;QACjE,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC3C,CAAC,CAAC,CAAC;IACJ,MAAM,sBAAsB,GAA0B,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACjF,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC;YAC5G,CAAC,CAAC,MAAM,CAAC,aAAa;YACtB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,KAAK;QACT,6DAA6D;QAC7D,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrG,OAAO;YACL,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC;YACpC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,+EAA+E;YAC/E,iEAAiE;YACjE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,0BAA0B,EAAE,KAAK;YACjC,cAAc,EAAE,QAAQ,KAAK,SAAS;YACtC,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;SACpC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA0B,EAC1B,aAA4B;IAE5B,OAAO,qBAAqB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,aAAa,CAAC;AAClE,CAAC;AAwCD;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,aAA4B;IAE5B,OAAO,kCAAkC,CAAC,aAAa,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,OAA6B;IAE7B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5B,MAAM,EAAE,GACN,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;QACrF,MAAM,KAAK,GAA2B;YACpC,EAAE;YACF,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE,sBAAsB,EAAE,MAAM,CAAC,aAAa,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,0BAA0B,GAAG,MAAM,CAAC,KAAK;gBAC7C,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;gBAC3C,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"providerConfirmation.js","sourceRoot":"","sources":["../../../src/shared/providers/providerConfirmation.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAsB,MAAM,yBAAyB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAgC/D,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,SAAS,qBAAqB,CAAC,IAA0B;IACvD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,UAAU,CAAC;QACpB,KAAK,UAAU,CAAC;QAChB,KAAK,OAAO,CAAC;QACb,KAAK,mBAAmB,CAAC;QACzB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,aAAa,CAAC;QACnB,KAAK,aAAa,CAAC;QACnB,KAAK,KAAK,CAAC;QACX,KAAK,eAAe;YAClB,8EAA8E;YAC9E,8EAA8E;YAC9E,OAAO,SAAS,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAcD,MAAM,UAAU,GAAe;IAC7B;QACE,YAAY,EAAE,aAAa;QAC3B,cAAc,EAAE,QAAQ;QACxB,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO;KACjD;IACD;QACE,YAAY,EAAE,UAAU;QACxB,cAAc,EAAE,UAAU;QAC1B,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO;KAC9C;IACD;QACE,YAAY,EAAE,OAAO;QACrB,cAAc,EAAE,OAAO;QACvB,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO;KAC3C;IACD;QACE,YAAY,EAAE,KAAK;QACnB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO;gBAAE,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAC7C,qEAAqE;YACrE,IAAI,aAAa,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,IAAI,aAAa,CAAC,QAAQ,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC7C,OAAO,SAAS,CAAC;QACnB,CAAC;KACF;CACF,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,aAA4B,EAC5B,MAAyB,OAAO,CAAC,GAAG,EACpC,gBAA8C,aAAa;IAE3D,MAAM,UAAU,GAAyB,EAAE,CAAC;IAE5C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,OAAO,GACX,CAAC,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,cAAc,CAAC;QAC5E,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,SAAS;YAAE,SAAS;QAEzB,sEAAsE;QACtE,yEAAyE;QACzE,4EAA4E;QAC5E,kFAAkF;QAClF,4DAA4D;QAC5D,IAAI,KAAK,CAAC,YAAY,KAAK,UAAU,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/E,SAAS;QACX,CAAC;QAED,4EAA4E;QAC5E,2EAA2E;QAC3E,mEAAmE;QACnE,+CAA+C;QAC/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAE5D,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,KAAK,CAAC,YAAY;YACxB,OAAO;YACP,cAAc,EAAE,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC;YACzD,QAAQ,EAAE,IAAI;YACd,gBAAgB,EAAE,OAAO;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,6BAA6B,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,aAAa,CAAC,iBAAiB,EAAE,KAAK;YAC/C,cAAc,EAAE,qBAAqB,CAAC,mBAAmB,CAAC;YAC1D,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAA4B,EAC5B,oBAA0C,EAC1C,GAAoD;IAEpD,IAAI,OAAO,oBAAoB,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,oBAAoB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAA0B,EAC1B,aAA4B;IAE5B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,mBAAmB;YACtB,OAAO,aAAa,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACrE,KAAK,OAAO;YACV,OAAO,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACzD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAmBD,yFAAyF;AACzF,SAAS,iBAAiB,CAAC,MAA0B;IACnD,OAAO,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,2BAA2B,GAAG,UAAU,CAAC;AAE/C,SAAS,kBAAkB,CAAC,MAA0B;IACpD,OAAO,GAAG,2BAA2B,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,UAA2B,EAC3B,aAAwB;IAExB,MAAM,SAAS,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,6EAA6E;IAC7E,+DAA+D;IAC/D,8EAA8E;IAC9E,iFAAiF;IACjF,6EAA6E;IAC7E,iFAAiF;IACjF,gEAAgE;IAChE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,2BAA2B,CAAC;YAAE,SAAS;QAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9C,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAA0B,EAC1B,aAA4B,EAC5B,KAAiC,EACjC,UAAgC,EAAE,EAClC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,UAAU,GAAG,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC;IAC5C,8EAA8E;IAC9E,kFAAkF;IAClF,+EAA+E;IAC/E,MAAM,YAAY,GAAG,+BAA+B,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7E,MAAM,kBAAkB,GAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/D,GAAG,EAAE,KAAK,CAAC,IAAI;QACf,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC;KACxD,CAAC,CAAC,CAAC;IACJ,gFAAgF;IAChF,kFAAkF;IAClF,mFAAmF;IACnF,MAAM,cAAc,GAAoB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,GAAG,EAAE,CAAC,CAAC,QAAQ;QACf,KAAK,EAAE,CAAC,CAAC,QAAQ;KAClB,CAAC,CAAC,CAAC;IACJ,kFAAkF;IAClF,uFAAuF;IACvF,sFAAsF;IACtF,iFAAiF;IACjF,uFAAuF;IACvF,yFAAyF;IACzF,+EAA+E;IAC/E,gFAAgF;IAChF,iFAAiF;IACjF,iFAAiF;IACjF,kFAAkF;IAClF,oFAAoF;IACpF,gFAAgF;IAChF,oEAAoE;IACpE,mFAAmF;IACnF,wEAAwE;IACxE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC;YAAE,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAClC,CAAC,MAAM,EAAE,EAAE,CACT,CAAC,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAC/E,CAAC;IACF,qFAAqF;IACrF,kFAAkF;IAClF,yFAAyF;IACzF,uFAAuF;IACvF,8EAA8E;IAC9E,MAAM,gBAAgB,GAAoB,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;QAC3B,+EAA+E;QAC/E,kFAAkF;QAClF,mFAAmF;QACnF,qDAAqD;QACrD,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC,CAAC,CAAC;IACJ,MAAM,SAAS,GAAG,qBAAqB,CACrC,CAAC,GAAG,kBAAkB,EAAE,GAAG,cAAc,EAAE,GAAG,gBAAgB,CAAC,EAC/D,KAAK,EAAE,UAAU,CAClB,CAAC;IACF,qFAAqF;IACrF,gFAAgF;IAChF,mFAAmF;IACnF,oFAAoF;IACpF,sEAAsE;IACtE,EAAE;IACF,kFAAkF;IAClF,+EAA+E;IAC/E,2CAA2C;IAC3C,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtD,CAAC,KAAK,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACrD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO;YACL,GAAG,KAAK;YACR,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,0BAA0B,EAAE,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;YAC3E,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,8EAA8E;YAC9E,qEAAqE;YACrE,8EAA8E;YAC9E,4EAA4E;YAC5E,wEAAwE;YACxE,GAAG,CAAC,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;gBACzC,CAAC,CAAC,EAAE,eAAe,EAAE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;gBACrD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,mFAAmF;IACnF,6DAA6D;IAC7D,MAAM,qBAAqB,GAAyB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,YAAY;QACtB,0BAA0B,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI;QACjE,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1C,6EAA6E;QAC7E,+EAA+E;QAC/E,kEAAkE;QAClE,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrC,CAAC,CAAC,EAAE,eAAe,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE;YAC1D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC,CAAC;IACJ,MAAM,sBAAsB,GAA0B,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACjF,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC;YAC5G,CAAC,CAAC,MAAM,CAAC,aAAa;YACtB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,KAAK;QACT,6DAA6D;QAC7D,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrG,OAAO;YACL,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC;YACpC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,+EAA+E;YAC/E,iEAAiE;YACjE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,0BAA0B,EAAE,KAAK;YACjC,cAAc,EAAE,QAAQ,KAAK,SAAS;YACtC,oEAAoE;YACpE,+EAA+E;YAC/E,gFAAgF;YAChF,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,IAAI;gBAChC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE;gBAC7C,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;oBACrD,CAAC,CAAC,EAAE,eAAe,EAAE,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;oBAC5D,CAAC,CAAC,EAAE,CAAC;YACT,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;SACpC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA0B,EAC1B,aAA4B;IAE5B,OAAO,qBAAqB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,aAAa,CAAC;AAClE,CAAC;AAwCD;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,aAA4B;IAE5B,OAAO,kCAAkC,CAAC,aAAa,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,OAA6B;IAE7B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5B,MAAM,EAAE,GACN,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;QACrF,MAAM,KAAK,GAA2B;YACpC,EAAE;YACF,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE,sBAAsB,EAAE,MAAM,CAAC,aAAa,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,0BAA0B,GAAG,MAAM,CAAC,KAAK;gBAC7C,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;gBAC3C,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/shared/providers/sharedProviderConfirmation.d.ts

@@ -79,28 +79,79 @@ export declare function sharedProviderConfirmationPath(root: string): string;
  */
 export interface ConfirmedDispatchPolicy {
     /**
-     * {@link DispatchExclusionPattern}s the operator ruled out of the dispatchable
+     * {@link DispatchExclusionPattern}s **the OPERATOR** ruled out of the dispatchable
      * pool. Model-granular by default (`provider:model`) — the operator confirms
      * *model* choices, so excluding one model of a multi-model backend must not drop
      * the backend's other models.
+     *
+     * ⚠ Operator-authored ONLY. Tool-generated fail-closed patterns live in
+     * {@link auto_exclude} and must never be merged into this list: the two have
+     * different lifetimes, and once merged they are indistinguishable, so a
+     * carry-forward would launder a tool guess into permanent operator policy.
      */
     exclude?: DispatchExclusionPattern[];
+    /**
+     * Patterns **the GATE** authored on the operator's behalf — the fail-closed
+     * reconciliation excluding a newly-reachable backend that no operator decision
+     * covers (autonomous/headless path only).
+     *
+     * Kept separate from {@link exclude} because provenance decides lifetime. An
+     * operator exclusion is a durable rule and is carried forward across promotions; an
+     * auto-exclusion is a *placeholder for an answer that was never given*, so the next
+     * operator submission SUPERSEDES it. Merged into one list, the carry-forward cannot
+     * tell them apart and makes the tool's guess permanent — with no signal, because the
+     * backend is a confirmed key by then and the reconciliation delta never re-surfaces
+     * it. Honored at dispatch exactly like {@link exclude} (see
+     * {@link resolveDispatchExclusion}), so separating them weakens nothing.
+     */
+    auto_exclude?: DispatchExclusionPattern[];
     /** Self-spawn-blocked provider names the operator explicitly opted back IN. */
     include?: ResolvedProviderName[];
+    /**
+     * The operator's RAW capability answer — the `capability_order` key list exactly as
+     * submitted, most-capable-first.
+     *
+     * Stored verbatim rather than reconstructed from the resulting `capability_rank`s,
+     * which is the same reason `exclude` stores raw patterns. Reconstruction cannot
+     * distinguish a rank the operator authored from one that came from EXTERNAL evidence
+     * (a source's own registry rank), so it laundered external numbers into the
+     * operator's answer: a no-op promotion silently re-ranked confirmed models, and the
+     * laundered id then read as "evidenced" permanently — even after the external
+     * evidence disappeared, which is precisely the fail-open this obligation exists to
+     * close. Persisting the answer makes the distinction unrepresentable instead of
+     * merely documented.
+     */
+    capability_order?: string[];
+    /**
+     * R3-3: the model ids whose CURRENT position in {@link capability_order} was
+     * LLM-authored rather than operator-authored — always a subset of
+     * `capability_order`, never a superset. Tool-derived provenance, never itself
+     * submitted: an autonomous run has no operator to ask, so the CLI asks the host
+     * LLM instead (same submission machinery an operator would use), and the
+     * executor tags the result here rather than trusting either side to self-report
+     * authorship. An operator's later submission naming one of these ids repositions
+     * it freely (it is NOT an anchor on that submission) and removes it from this set
+     * — it is operator-authored from then on. See `advanceCapabilityOrderLlmRanked`
+     * and `capabilityOrderNonAnchors`.
+     */
+    capability_order_llm_ranked?: string[];
 }
 /**
- * One rule in the operator's exclusion grammar — **reach-independent by
- * construction**, so a rule authored on one auditor means the same thing to an
- * auditor with a different reachable set (spec/unified-dispatch-worker-model.md).
+ * The string form of an exclusion pattern. Axis-explicit: the rule names its
+ * axis as a prefix, so the grammar is unambiguous against open namespaces and
+ * an unknown axis is a PARSE ERROR, not an inert rule.
  *
- * Three forms, disambiguated by the head token against the CLOSED set of provider
- * names ({@link RESOLVED_PROVIDER_NAMES}) — so no form can shadow another:
- *
- * | Pattern | Head is a provider name? | Matches |
+ * | Pattern | Axis | Matches |
  * |---|---|---|
- * | `openai-compatible:gpt-oss-120b` | yes | that provider AND that exact model — the **default** granularity |
- * | `codex` | yes (no `:`) | every backend of that provider — the coarse provider tier |
- * | `integrate.api.nvidia.com` / `localhost:8000` | no | every source whose `endpoint` host (and port, when the pattern names one) matches — the coarse endpoint tier |
+ * | `transport:codex` | transport | every model on that adapter |
+ * | `transport:openai-compatible/glm-5.2` | transport | one model on that adapter (model after `/`) |
+ * | `service:nim` | service | every model from that vendor, however reached |
+ * | `service:nim/z-ai/glm-5.2` | service | one model from that vendor |
+ * | `host:localhost:8000` | host | by endpoint address (port-specific) |
+ * | `host:integrate.api.nvidia.com` | host | by endpoint address (port-agnostic) |
+ *
+ * There is deliberately **no `model:` axis** — a cross-service model rule
+ * recombines the identities the gate exists to keep apart.
  *
  * ⚠ This is a THIRD keyspace, deliberately distinct from the quota-ledger pool
  * identity (`provider[#account]/model`, `quotaPoolKey`): an account is
@@ -110,6 +161,7 @@ export type DispatchExclusionPattern = string;
 /** A backend an exclusion rule can be evaluated against — structurally a `DispatchableSource`. */
 export interface ExcludableBackend {
     transport: string;
+    service?: string;
     model?: string;
     endpoint?: string;
 }
@@ -229,7 +281,22 @@ export declare function buildSharedProviderConfirmation(...args: Parameters<type
  *   passed via the dedicated params above (the executor forwards them from the
  *   same input), so this arg governs ordering + host roster only.
  */
-export declare function buildProviderConfirmationRender(sessionConfig?: SessionConfig, env?: NodeJS.ProcessEnv, exclude?: DispatchExclusionPattern[], include?: ResolvedProviderName[], detectCommand?: (command: string) => boolean, input?: ProviderConfirmationInput, sources?: DispatchableSource[]): RenderedProviderConfirmation;
+export declare function buildProviderConfirmationRender(sessionConfig?: SessionConfig, env?: NodeJS.ProcessEnv, exclude?: DispatchExclusionPattern[], include?: ResolvedProviderName[], detectCommand?: (command: string) => boolean, input?: ProviderConfirmationInput, sources?: DispatchableSource[], 
+/**
+ * Gate-authored fail-closed patterns, kept SEPARATE from the operator's `exclude`
+ * so provenance survives to disk (see {@link ConfirmedDispatchPolicy.auto_exclude}).
+ * Both kinds mark a pool entry excluded in the render — the split governs lifetime,
+ * not enforcement — so the two are unioned for the display/routing decision below
+ * and only split again when the policy is persisted.
+ */
+autoExclude?: DispatchExclusionPattern[], 
+/**
+ * R3-3: the FINAL `capability_order_llm_ranked` set for this promotion (already
+ * advanced across rule 1/2 by the caller — {@link advanceCapabilityOrderLlmRanked}).
+ * Persisted verbatim into the policy; empty for the display-only "suggested"
+ * render nextStepCommand builds (that call never persists, so provenance is moot).
+ */
+capabilityOrderLlmRanked?: readonly string[]): RenderedProviderConfirmation;
 /**
  * The keys of the operator's persisted DECISION — the CONFIRMED half of the gate.
  *
@@ -258,16 +325,20 @@ export interface NewlyReachableBackend {
     /** The backend's provider name. Display only — the prompt names it beside `key`. */
     provider: ResolvedProviderName;
     /**
-     * The {@link DispatchExclusionPattern} that rules out **exactly this backend**,
-     * built HERE beside the key it was compared on so the rule the gate persists
-     * cannot drift from the identity the gate diffed.
-     *
-     * DELIBERATELY not the same string as {@link key} for a proxied lane: the key is
-     * backend-qualified (`nim:model`) and this is transport-qualified
-     * (`claude-worker:model`), because those are the two different questions named on
-     * {@link backendIdentity}. A rule carrying the backend name would match nothing.
+     * The backend's serving vendor / service name (`service ?? transport`).
+     */
+    service?: string;
+    /**
+     * The transport-qualified {@link DispatchExclusionPattern} that rules out
+     * **exactly this transport route**, built HERE beside the key it was compared on.
      */
     exclusion_pattern: DispatchExclusionPattern;
+    /**
+     * The service-qualified {@link DispatchExclusionPattern} (`service:vendor/model` or `service:vendor`)
+     * that rules out **every transport reaching this vendor/service**. Emitted by autonomous fail-closed
+     * writes so unconfirmed backends stay excluded across transport/proxy changes.
+     */
+    service_exclusion_pattern?: DispatchExclusionPattern;
 }
 /**
  * DELTA = **REACH-NOW \ CONFIRMED**: the backends this auditor can reach *right
@@ -385,6 +456,30 @@ export declare function readSharedProviderConfirmation(root: string): Promise<Sh
  * the live defect this fixes.
  */
 export declare function readConfirmedCostPositions(root: string | undefined): Promise<Map<string, number>>;
+export declare function readConfirmedCapabilityRanks(root: string | undefined): Promise<Map<string, number>>;
+/**
+ * The capability-evidence delta: dispatchable models with NO resolvable capability
+ * rank. Computed once per invocation (it reads the confirmation + gathers sources)
+ * and threaded by reference on the gate, exactly like the reach delta.
+ *
+ * "Evidenced" is deliberately defined as **the dispatch join resolves** — the same
+ * lookup the pool constructors take ({@link readConfirmedCapabilityRanks} keyed on the
+ * pool's model), never a parallel predicate. Two consequences, both load-bearing:
+ *   - a pool with NO model is skipped entirely. It is unjoinable, so pinning it could
+ *     never clear the delta and it would re-prompt forever.
+ *   - external evidence (`source.capability_rank`) counts, so a fully-ranked roster
+ *     never fires the gate at all.
+ *
+ * Returns [] when no confirmation exists yet — the first-time `missing` case already
+ * pauses for the operator, and reporting a delta against a pool they have never seen
+ * would fold a second question into a prompt that has not asked the first one yet.
+ *
+ * Lives HERE, beside {@link readConfirmedCapabilityRanks}, rather than in the audit CLI
+ * command it is called from: its failure mode is a LIVELOCK (wrongly admitting an
+ * unrankable pool re-prompts `provider_confirmation` forever), and a delta computation
+ * with that failure mode must be reachable by a test.
+ */
+export declare function resolveUnevidencedCapabilityPools(root: string, effectiveConfig: SessionConfig): Promise<string[]>;
 /**
  * Read the operator-confirmed cost↔speed dispatch bias (λ ∈ [0,1]) from the shared
  * Gate-0 confirmation for the dispatch build sites (spec/dispatch-cost-speed-dial.md).
@@ -407,6 +502,240 @@ export declare const PROVIDER_CONFIRMATION_INPUT_FILENAME = "provider-confirmati
  * expected shape (a malformed field is dropped, not fatal).
  */
 export declare function parseProviderConfirmationInput(value: unknown): ProviderConfirmationInput | null;
+/**
+ * Seed an incoming Gate-0 submission from the PRIOR confirmation, field by field.
+ *
+ * **The defect class this closes.** `buildProviderConfirmationRender` rebuilds the
+ * whole confirmation from the submission ALONE — every operator decision it persists
+ * (`cost_order`, `capability_rank`, the host roster, λ, and the `policy` exclusions) is
+ * reconstructed from `input` and from nothing else. So *any* field a submission omits
+ * is not "left alone", it is DESTROYED. That is one defect with six faces, and fixing
+ * it per-field is what let three of them survive a review round: the prompt's capability
+ * example is `{ "capability_order": [...] }`, so an operator answering exactly what was
+ * asked omits all five other fields and silently wipes them.
+ *
+ * Two rules, both load-bearing:
+ *
+ * 1. **`undefined` means "said nothing"; an explicit empty array means "delete".** A
+ *    submission that never mentions host models is not a decision to remove them; an
+ *    explicit `"host_models": []` is. `parseProviderConfirmationInput` therefore
+ *    PRESERVES an empty array rather than dropping it to absent — without that the two
+ *    cases are indistinguishable here and the carry-forward resurrects a roster the
+ *    operator deleted.
+ * 2. **It applies with `input === null` too.** The autonomous/headless path promotes
+ *    with no submission at all, and the capability delta is a brand-new trigger for
+ *    that path — so short-circuiting on `input &&` would let an unattended re-promotion
+ *    wipe the operator's entire persisted decision and then report convergence.
+ *
+ * Returns `null` only when there is nothing on either side. A prior confirmation with
+ * no incoming submission still yields a synthesized input carrying it forward.
+ */
+/**
+ * The gate-authored exclusions that SURVIVE this promotion.
+ *
+ * Round-3 defect (high, fail-OPEN): `auto_exclude` was rebuilt on every promotion from
+ * `gate.newlyReachable` alone. But `confirmedBackendKeys` counts an excluded entry as
+ * CONFIRMED, so once the gate fail-closed-excludes backend X and folds it into the pool,
+ * the reach delta is empty forever — and the very next promotion rebuilt `auto_exclude`
+ * from that empty delta and dropped X, making a backend the operator never confirmed
+ * dispatchable. The docstring's "a submission supersedes it" was true; the code
+ * superseded it on EVERY promotion, including the no-submission one.
+ *
+ * The rule is therefore narrower than "any submission clears it". A submission
+ * supersedes an auto-exclusion only when it actually ADDRESSES that backend:
+ *   - the operator re-stated the pattern in `exclude` — it is now operator-authored and
+ *     lives there, so retaining an `auto_exclude` copy would double-record it; or
+ *   - the operator named that provider in `include` — an explicit opt-back-IN.
+ * Anything else is SILENCE, and silence is not confirmation ("the operator confirms
+ * model choices"). A capability-only answer must not lift an exclusion the operator was
+ * never even shown — the reach section does not render once the backend is a confirmed
+ * key, so they cannot see what they would be lifting.
+ *
+ * Fail-CLOSED by construction: the uncertain case retains the exclusion.
+ */
+export declare function retainAutoExclusions(priorAuto: readonly DispatchExclusionPattern[], input: ProviderConfirmationInput | null): DispatchExclusionPattern[];
+export declare function carryForwardConfirmationInput(input: ProviderConfirmationInput | null, prior: SharedProviderConfirmation | null, 
+/**
+ * R3-3: true when THIS submission is LLM-authored (tool-derived — see
+ * `runProviderConfirmationAutoComplete`'s `authoredByLlm`). Governs which
+ * previously-ranked ids the capability merge below treats as fixed anchors:
+ * an LLM submission anchors every previously-ranked id (operator's and prior
+ * LLM's alike — rule 1); an operator submission does NOT anchor ids already in
+ * `capability_order_llm_ranked` (rule 2 — they interpolate like new models).
+ * Also gates the total-replacement escape in `mergeCapabilityOrder` (operator
+ * only — see its docstring). Defaults `false` (today's operator behavior) so
+ * every pre-existing call site is unaffected.
+ */
+authoredByLlm?: boolean): ProviderConfirmationInput | null;
+/** How many already-ranked models the capability prompt shows as fixed reference points. */
+export declare const DEFAULT_CAPABILITY_ANCHOR_COUNT = 5;
+/**
+ * Pick a BOUNDED, spread sample of an already-confirmed capability ordering to show
+ * beside the unevidenced models as fixed reference points.
+ *
+ * The roster may be HUNDREDS of models, so the prompt must be O(new + constant) — it
+ * can never render the whole ordering. First, last, and evenly-spaced interior picks
+ * give the operator a usable coordinate space (top / middle / bottom of the confirmed
+ * ranking) at constant cost, which is exactly what {@link mergeCapabilityOrder}
+ * interpolates against.
+ *
+ * @param priorOrder - The confirmed ordering, most-capable-first.
+ * @param exclude    - Models already being asked about (the unevidenced delta); an
+ *   anchor must be a model whose rank is settled, never one under question.
+ * @param max        - Ceiling on the sample size.
+ */
+export declare function selectCapabilityAnchors(priorOrder: readonly string[], exclude?: readonly string[], max?: number): string[];
+/**
+ * R3-3 — the submission's ANCHOR EXCLUSION set, single-sourced so
+ * {@link mergeCapabilityOrder} and {@link detectDiscardedCapabilityReorder} can never
+ * disagree about what counts as a fixed reference point for a given submission:
+ *
+ * - LLM-authored (`authoredByLlm`): every previously-ranked id — the operator's and
+ *   any prior LLM's alike — stays a fixed anchor (rule 1). Nothing is excluded.
+ * - Operator-authored: ids already in `capability_order_llm_ranked` are NOT anchors
+ *   (rule 2) — the operator may reposition them exactly like new models, and doing
+ *   so removes them from that set (see {@link advanceCapabilityOrderLlmRanked}).
+ */
+export declare function capabilityOrderNonAnchors(priorLlmRanked: readonly string[], authoredByLlm: boolean): Set<string>;
+/**
+ * Advance the R3-3 `capability_order_llm_ranked` authorship SET across one
+ * promotion. Always a subset of the resulting `capability_order` — see
+ * {@link ConfirmedDispatchPolicy.capability_order_llm_ranked}.
+ *
+ * - LLM-authored submission: every id this submission newly ranked — i.e. not
+ *   already in `priorOrder` — is ADDED. `mergeCapabilityOrder` never lets an
+ *   LLM-authored submission move a previously-ranked id (its total-replacement
+ *   escape is operator-only), so a prior id is never repositioned on this path and
+ *   this function does not need to special-case "total" either: it is simply
+ *   `answer \ priorOrder`.
+ * - Operator-authored submission: every id the submission NAMES is REMOVED — naming
+ *   a previously LLM-ranked id (and, via {@link capabilityOrderNonAnchors}'s
+ *   non-anchor treatment, freely repositioning it) makes it operator-authored from
+ *   here on, exactly like a first-time rank.
+ * - No submission at all (`submitted` absent/empty): the running set is unchanged.
+ */
+export declare function advanceCapabilityOrderLlmRanked(priorLlmRanked: readonly string[], priorOrder: readonly string[], submitted: readonly string[] | undefined, authoredByLlm: boolean): string[];
+/**
+ * The anchor ids whose relative order the submission changed but the merge will NOT
+ * honor — i.e. an operator reorder that is about to be silently discarded.
+ *
+ * {@link mergeCapabilityOrder} treats every submitted id already present in
+ * `priorOrder` as a FIXED reference point, so a submission that swaps two of them
+ * returns the prior order unchanged. Without this, that is invisible: the promotion
+ * succeeds, the artifact is byte-identical, and nothing anywhere says the operator's
+ * decision was dropped. `unrankedOnPromotion` cannot catch it either — a reordered id
+ * IS present in `capability_order`, so it reports nothing.
+ *
+ * An accepted-then-discarded operator decision is the same defect class as laundering a
+ * tool guess into operator policy: not corruption, but SILENCE. The standing rule is
+ * that the operator must never have to notice — so the caller reports this loudly.
+ *
+ * Returns `[]` when the reorder will actually be honored: an OPERATOR-authored TOTAL
+ * submission (every prior id restated) is applied verbatim, and a submission with
+ * fewer than two anchors cannot express a reorder at all.
+ *
+ * NOTE this reports the LIMITATION, it does not lift it. Making a repositioning
+ * expressible without restating the whole roster needs the anchor-provenance split
+ * tracked in `docs/backlog.md`; this only ensures the drop is never silent.
+ */
+export declare function detectDiscardedCapabilityReorder(priorOrder: readonly string[], submitted: readonly string[], 
+/**
+ * R3-3: ids to exclude from anchor treatment — must be the SAME set passed to
+ * {@link mergeCapabilityOrder} for this submission ({@link capabilityOrderNonAnchors}),
+ * or the two disagree about what an "anchor" is and this reports a discard the
+ * merge actually honored (or misses one it silently dropped).
+ */
+nonAnchorIds?: ReadonlySet<string>, 
+/**
+ * R3-3: mirrors the authorship-gated condition in {@link mergeCapabilityOrder} — the
+ * total-submission escape is OPERATOR-only, so an LLM-authored submission that
+ * happens to restate every prior id (a small roster's anchor sample can cover the
+ * whole ordering) still has its anchor reorder detected and reported, never
+ * silently honored via the escape.
+ */
+authoredByLlm?: boolean): string[];
+/**
+ * Merge an operator's capability answer into the previously confirmed ordering by
+ * **ANCHORED INSERTION**.
+ *
+ * **The livelock this closes.** The capability prompt is DELTA-SCOPED — it renders only
+ * the models with no evidence — while `annotateConfirmedPool` built its positions from
+ * the submission ALONE, i.e. total replacement. So each answer erased the last: rank A,
+ * the delta asks C, rank C, A loses its rank, the delta asks A, forever. `PRIORITY[0]`
+ * never converges. Reproduced across three promotions.
+ *
+ * The fix cannot be "render the whole ordering" (the roster may be hundreds of models —
+ * the prompt must stay O(new + constant)) and it cannot be an absolute score or tier
+ * (only a RELATIVE ordering is representable, by standing decision). Anchored insertion
+ * is what remains: show a bounded, spread sample of the confirmed ordering
+ * ({@link selectCapabilityAnchors}) as fixed reference points, and interpolate the new
+ * models into the coordinate space those points define.
+ *
+ * Semantics, exactly:
+ *
+ * - **Anchors** = submitted entries that already appear in `priorOrder`. They are
+ *   REFERENCE POINTS: their prior positions define the coordinate space, and **a
+ *   reordering of anchors relative to each other is deliberately NOT honored** on a
+ *   partial submission. The operator saw at most a handful of them out of a possibly
+ *   enormous ordering, so a swap between two anchors carries no information about the
+ *   models BETWEEN them — honoring it would silently reshuffle models the operator
+ *   never saw.
+ * - **Exception — an OPERATOR-authored TOTAL submission is a total replacement.**
+ *   When the submission mentions every model in `priorOrder` there are no unmentioned
+ *   models, so the coordinate space is fully respecified and the answer is honored
+ *   verbatim. This is the only case where "reorder what you already confirmed" is a
+ *   well-defined request, and it is the pre-existing behavior for a complete
+ *   re-ranking. **R3-3: this escape is OPERATOR-only** (`authoredByLlm: false`,
+ *   the default) — on a SMALL roster the bounded anchor sample
+ *   ({@link selectCapabilityAnchors}) can cover the entire prior ordering, so an
+ *   LLM's answer over "new models + all the anchors it was shown" becomes total BY
+ *   ACCIDENT, not by the LLM's intent to reorder. Honoring it verbatim would let an
+ *   LLM silently reorder ranks an operator (or a prior LLM) set; an LLM-authored
+ *   submission therefore NEVER takes this exception — every previously-ranked id
+ *   stays a fixed anchor regardless of coverage, and an attempted reorder is
+ *   discarded and reported exactly like a partial submission's would be (see
+ *   {@link detectDiscardedCapabilityReorder}).
+ * - **New models** (not in `priorOrder`) interpolate to a fractional position between
+ *   the prior positions of the nearest preceding and following anchors IN THE SUBMITTED
+ *   LIST. Before the first anchor ⇒ just below it (more capable); after the last ⇒ just
+ *   above it. Consecutive new models keep their submitted relative order.
+ * - **Every model in `priorOrder` the submission does not mention keeps its prior
+ *   position.** THIS IS THE LIVELOCK FIX.
+ * - **No anchors at all** (a partial submission naming only unknown models): there is no
+ *   coordinate to interpolate against, so the new models are appended AFTER the whole
+ *   prior ordering — the conservative direction, since a higher rank is less capable and
+ *   therefore trusted with less.
+ * - **Duplicates**: first occurrence wins, matching `annotateConfirmedPool`'s rule that a
+ *   positional list is the operator's ordering and a later repeat must not re-rank it.
+ * - **Result** is every model sorted by resolved position, ties broken by model id.
+ *   Deterministic by construction: an incidentally-ordered array here would churn the
+ *   confirmation's content hash on every promotion and cascade phantom staleness.
+ *
+ * Degenerate cases: an empty `priorOrder` (the first-ever answer) returns the submission;
+ * an empty submission returns the prior ordering unchanged (an omitted answer is
+ * "said nothing" — there is no way to express "delete the whole ranking", and the
+ * un-delete direction is the one that cannot livelock).
+ *
+ * Pure — no I/O, no clock, no config. Exported so the merge that decides whether the
+ * gate converges is directly testable.
+ */
+export declare function mergeCapabilityOrder(priorOrder: readonly string[], submitted: readonly string[], 
+/**
+ * R3-3: ids to treat as NOT anchored even though they already appear in
+ * `priorOrder` — the operator-authored path passes the current
+ * `capability_order_llm_ranked` set here ({@link capabilityOrderNonAnchors}) so an
+ * operator may freely reposition a previously LLM-ranked id, exactly like a new
+ * model. Empty by default (today's behavior: every previously-ranked id anchors).
+ */
+nonAnchorIds?: ReadonlySet<string>, 
+/**
+ * R3-3: true when THIS submission is LLM-authored. Gates the total-replacement
+ * escape below (OPERATOR-only — see the docstring's exception): an LLM-authored
+ * submission never takes it, so a previously-ranked id is NEVER repositioned on
+ * this path, regardless of how much of `priorOrder` the submission happens to
+ * cover.
+ */
+authoredByLlm?: boolean): string[];
 /**
  * Read the operator's Gate-0 input from `<artifactsDir>/provider-confirmation.input.json`.
  * Returns `null` when the file is absent, unreadable, or malformed — the "operator