instar 1.3.615 → 1.3.617

package/dist/core/AccountFollowMeSpendSlice.d.ts

@@ -0,0 +1,197 @@
+/**
+ * WS5.2 R7a — per-account spend-slice ORCHESTRATION (the LEASE-SLICED ceiling, owned by the
+ * fenced single-writer). This is the cohesive control-plane unit on top of the durable
+ * `AccountFollowMeGrantLedger` (AccountFollowMeGrants.ts), kept PURE + injectable so the
+ * distributed math is unit-testable without a live mesh.
+ *
+ * Spec bounds enforced here (docs/specs/ws52-account-follow-me-security.md §R7a, §S5, §I5):
+ *
+ *  (a) FENCED single-writer issuance. Slices are issued ONLY by the current `FencedLease` holder;
+ *      a non-holder issuing is refused (`not-lease-holder`). Issuance is epoch-fenced: a renew
+ *      stamped with a stale lease epoch is void (`stale-lease-epoch`). On a holder FAILOVER the new
+ *      holder constructs `SliceIssuer` over the SAME durable ledger and re-derives outstanding
+ *      slices BEFORE issuing — the ledger's sum-of-leases bound holds across the handoff with no
+ *      double-allocation (proven in AccountFollowMeGrants).
+ *
+ *  (b) `maxSpend` is denominated in provider quota-FRACTION (0..1), reusing AccountQuotaSnapshot.
+ *      The issuer takes the ceiling as a fraction; per-slice consumption is the durable grant amount.
+ *
+ *  (c) The requester-side renewal CONTROL PLANE is rate-capped + coalesced + P19-breaker-protected,
+ *      so N VMs on one hot account produce O(per-account-cap) renewal RPCs — never an O(N) herd:
+ *        - per-(account,machine) in-flight COALESCING: a VM with an outstanding renewal does not
+ *          start a second (`coalesced-in-flight`);
+ *        - per-account renewal RATE CAP with EXPONENTIAL backoff after each refusal/failure;
+ *        - a P19 sustained-FAILURE breaker: after `breakerThreshold` consecutive failures the VM
+ *          FAILS CLOSED TO ITS OWN ACCOUNT (`breaker-open`) instead of retry-storming a slow/
+ *          partitioned/unreachable holder. The breaker re-closes after `breakerCooldownMs`.
+ *
+ *  (d) FIRST-SLICE-under-partition: a VM that never received a slice is treated identically to a
+ *      VM whose slice is exhausted — it FAILS CLOSED TO ITS OWN ACCOUNT until it obtains its first
+ *      slice (the `decideAccountUse` consultation below).
+ *
+ * INVARIANT (load-bearing): fail-closed-to-OWN-account on EVERY uncertainty — no slice, exhausted,
+ * partition, breaker open, no mandate, ledger error. A borrowed account is NEVER overspent past its
+ * grant. Everything stays dark behind `multiMachine.accountFollowMe` at the wiring layer.
+ */
+import { type GrantStore } from './AccountFollowMeGrants.js';
+export interface SliceIssuerConfig {
+    /** This machine's id — must equal the lease holder for issuance to be authorized. */
+    selfMachineId: string;
+    /**
+     * The current effective lease epoch + whether THIS machine holds the lease at it. Read live so a
+     * mid-flight failover (we lost the lease) refuses issuance rather than double-allocating.
+     */
+    holdsLease: () => boolean;
+    currentLeaseEpoch: () => number;
+    now?: () => number;
+}
+/** The renewal request a requesting VM sends to the holder (the `slice-renew` verb payload, decoded). */
+export interface SliceRenewRequest {
+    grantId: string;
+    mandateId: string;
+    accountId: string;
+    /** Requesting machine's routing fingerprint (carried in the verb; bound into the grant). */
+    requestingMachineFp: string;
+    /** Slice size requested (provider quota-fraction). */
+    amount: number;
+    /** Absolute expiry of the slice (ms since epoch). */
+    expiresAt: number;
+}
+export interface SliceIssuanceContext {
+    /** The account's spend ceiling (provider quota-fraction, 0..1) — from the live grant/quota policy. */
+    ceiling: number;
+}
+export type SliceIssueOutcome = {
+    ok: true;
+    grantId: string;
+    amount: number;
+    leaseEpoch: number;
+    expiresAt: number;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * The HOLDER-side issuer. Runs ON the fenced lease holder (the `slice-renew` handler wires this).
+ * Refuses unless this machine genuinely holds the lease right now, then delegates the sum-of-leases
+ * accounting to the durable ledger (single source of truth, re-derived on every call → failover-safe).
+ */
+export declare class SliceIssuer {
+    private readonly cfg;
+    private readonly ledger;
+    private readonly now;
+    constructor(store: GrantStore, cfg: SliceIssuerConfig);
+    /** Outstanding committed slices for an account (re-derived from the durable ledger). */
+    outstandingFor(accountId: string): number;
+    /**
+     * Issue (or re-issue) a slice in response to a renew request. FENCED: refuses unless this machine
+     * holds the lease at the current epoch. The slice is stamped with the CURRENT lease epoch, so it is
+     * void at a later epoch (consume/renew checks via the ledger). The ledger enforces the sum-of-leases
+     * ceiling and single-use grant ids.
+     */
+    issueForRenew(req: SliceRenewRequest, ctx: SliceIssuanceContext): SliceIssueOutcome;
+}
+export interface SliceLeaseState {
+    /** The grant id of the slice this VM currently holds for the account, if any. */
+    grantId?: string;
+    /** Remaining unspent budget on the held slice (provider quota-fraction). */
+    remaining: number;
+    /** Lease epoch the held slice was issued under — void if the holder advanced past it. */
+    leaseEpoch: number;
+    /** Absolute expiry of the held slice (ms since epoch). */
+    expiresAt: number;
+}
+export interface RenewControlConfig {
+    /**
+     * Minimum interval between renewal RPCs for ONE account on this machine (ms). The per-account
+     * rate cap — combined with coalescing + the holder's own ceiling, the worst-case fleet renewal
+     * rate is O(per-account-cap), independent of N. Default 5000.
+     */
+    minRenewIntervalMs?: number;
+    /** Exponential-backoff multiplier applied to the interval after each refusal/failure. Default 2. */
+    backoffMultiplier?: number;
+    /** Backoff ceiling (ms) so the interval cannot grow unbounded. Default 300000 (5m). */
+    maxRenewIntervalMs?: number;
+    /** Consecutive failures before the P19 breaker opens (fail closed to own account). Default 3. */
+    breakerThreshold?: number;
+    /** How long the breaker stays open before a probe is allowed again (ms). Default 60000. */
+    breakerCooldownMs?: number;
+    now?: () => number;
+}
+export type RenewAttemptDecision = {
+    proceed: true;
+} | {
+    proceed: false;
+    reason: 'coalesced-in-flight' | 'rate-capped' | 'breaker-open';
+};
+export type RenewOutcomeKind = 'issued' | 'refused' | 'failed';
+/**
+ * The per-machine requester-side renewal control plane for ONE account. Pure state-machine: a caller
+ * asks `shouldAttempt()` before sending a `slice-renew` RPC, marks `beginAttempt()` when it sends,
+ * and reports `recordOutcome()` with the result. It enforces coalescing, the rate cap with
+ * exponential backoff, and the P19 breaker — so the transport above it can be a thin RPC.
+ */
+export declare class SliceRenewalControl {
+    private readonly minInterval;
+    private readonly backoffMul;
+    private readonly maxInterval;
+    private readonly breakerThreshold;
+    private readonly breakerCooldownMs;
+    private readonly now;
+    private inFlight;
+    private lastAttemptAt;
+    /** Current backoff interval (grows on refusal/failure, resets on success). */
+    private currentInterval;
+    private consecutiveFailures;
+    private breakerOpenedAt;
+    constructor(cfg?: RenewControlConfig);
+    /** Is the P19 breaker currently open (a probe not yet allowed)? */
+    breakerOpen(): boolean;
+    /**
+     * May this VM send a renewal RPC for the account right now? Refuses (fail-closed at the call site)
+     * when a renewal is already in flight (coalescing), the rate cap has not elapsed, or the breaker is
+     * open. The caller treats any `proceed:false` as "use my OWN account this turn."
+     */
+    shouldAttempt(): RenewAttemptDecision;
+    /** Mark a renewal RPC as started (coalescing latch). Must be paired with recordOutcome(). */
+    beginAttempt(): void;
+    /**
+     * Report the RPC result, advancing the control state:
+     *  - issued  → reset backoff + breaker (the channel is healthy again);
+     *  - refused → grant-level refusal (e.g. would-exceed-ceiling); back off, but NOT a transport
+     *              failure, so it does not advance the breaker (the holder answered);
+     *  - failed  → transport failure (timeout/partition/unreachable); back off AND advance the breaker.
+     */
+    recordOutcome(kind: RenewOutcomeKind): void;
+}
+export type AccountUseDecision = {
+    use: 'borrowed';
+    remaining: number;
+    reason: 'live-slice';
+} | {
+    use: 'own';
+    reason: 'follow-me-disabled' | 'not-a-borrowed-account' | 'no-slice' | 'slice-exhausted' | 'slice-expired' | 'stale-lease-epoch';
+};
+export interface AccountUseQuery {
+    /** Master dark gate (`multiMachine.accountFollowMe`). When false → ALWAYS own account. */
+    followMeEnabled: boolean;
+    /** Is the candidate account a BORROWED (follow-me / metadata-only-credentialed) account? */
+    isBorrowedAccount: boolean;
+    /** The slice this VM currently holds for the candidate account (undefined ⇒ never received one). */
+    slice: SliceLeaseState | undefined;
+    /** The current effective lease epoch (a slice from an older epoch is void). */
+    currentLeaseEpoch: number;
+    now: number;
+}
+/**
+ * The SELECTION-TIME consultation (R7a(b)/(d), S5, §6.2). Returns whether a candidate BORROWED
+ * account may be used this turn, or whether the call must FALL BACK to this machine's OWN account.
+ *
+ * Fail-closed-to-own-account on EVERY uncertainty: flag off, not a borrowed account, no slice ever
+ * received (first-slice-under-partition), exhausted slice, expired slice, or a stale-epoch slice all
+ * resolve to `own`. ONLY a live, unexpired, current-epoch slice with remaining budget yields
+ * `borrowed`. This is pure — the router/pool wiring calls it and routes accordingly; when off it can
+ * never be reached so default behavior is byte-identical.
+ */
+export declare function decideAccountUse(q: AccountUseQuery): AccountUseDecision;
+//# sourceMappingURL=AccountFollowMeSpendSlice.d.ts.map

package/dist/core/AccountFollowMeSpendSlice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountFollowMeSpendSlice.d.ts","sourceRoot":"","sources":["../../src/core/AccountFollowMeSpendSlice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAEL,KAAK,UAAU,EAEhB,MAAM,4BAA4B,CAAC;AAIpC,MAAM,WAAW,iBAAiB;IAChC,qFAAqF;IACrF,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,UAAU,EAAE,MAAM,OAAO,CAAC;IAC1B,iBAAiB,EAAE,MAAM,MAAM,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,yGAAyG;AACzG,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,sGAAsG;IACtG,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACpF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;GAIG;AACH,qBAAa,WAAW;IAMpB,OAAO,CAAC,QAAQ,CAAC,GAAG;IALtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAGjC,KAAK,EAAE,UAAU,EACA,GAAG,EAAE,iBAAiB;IAMzC,wFAAwF;IACxF,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIzC;;;;;OAKG;IACH,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,oBAAoB,GAAG,iBAAiB;CA0BpF;AAID,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oGAAoG;IACpG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,uFAAuF;IACvF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2FAA2F;IAC3F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,qBAAqB,GAAG,aAAa,GAAG,cAAc,CAAA;CAAE,CAAC;AAEvF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/D;;;;;GAKG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,aAAa,CAAa;IAClC,8EAA8E;IAC9E,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,eAAe,CAAuB;gBAElC,GAAG,GAAE,kBAAuB;IAUxC,mEAAmE;IACnE,WAAW,IAAI,OAAO;IAKtB;;;;OAIG;IACH,aAAa,IAAI,oBAAoB;IASrC,6FAA6F;IAC7F,YAAY,IAAI,IAAI;IAKpB;;;;;;OAMG;IACH,aAAa,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI;CAiB5C;AAID,MAAM,MAAM,kBAAkB,GAC1B;IAAE,GAAG,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAC5D;IACE,GAAG,EAAE,KAAK,CAAC;IACX,MAAM,EACF,oBAAoB,GACpB,wBAAwB,GACxB,UAAU,GACV,iBAAiB,GACjB,eAAe,GACf,mBAAmB,CAAC;CACzB,CAAC;AAEN,MAAM,WAAW,eAAe;IAC9B,0FAA0F;IAC1F,eAAe,EAAE,OAAO,CAAC;IACzB,4FAA4F;IAC5F,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oGAAoG;IACpG,KAAK,EAAE,eAAe,GAAG,SAAS,CAAC;IACnC,+EAA+E;IAC/E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,kBAAkB,CAWvE"}

package/dist/core/AccountFollowMeSpendSlice.js

@@ -0,0 +1,196 @@
+/**
+ * WS5.2 R7a — per-account spend-slice ORCHESTRATION (the LEASE-SLICED ceiling, owned by the
+ * fenced single-writer). This is the cohesive control-plane unit on top of the durable
+ * `AccountFollowMeGrantLedger` (AccountFollowMeGrants.ts), kept PURE + injectable so the
+ * distributed math is unit-testable without a live mesh.
+ *
+ * Spec bounds enforced here (docs/specs/ws52-account-follow-me-security.md §R7a, §S5, §I5):
+ *
+ *  (a) FENCED single-writer issuance. Slices are issued ONLY by the current `FencedLease` holder;
+ *      a non-holder issuing is refused (`not-lease-holder`). Issuance is epoch-fenced: a renew
+ *      stamped with a stale lease epoch is void (`stale-lease-epoch`). On a holder FAILOVER the new
+ *      holder constructs `SliceIssuer` over the SAME durable ledger and re-derives outstanding
+ *      slices BEFORE issuing — the ledger's sum-of-leases bound holds across the handoff with no
+ *      double-allocation (proven in AccountFollowMeGrants).
+ *
+ *  (b) `maxSpend` is denominated in provider quota-FRACTION (0..1), reusing AccountQuotaSnapshot.
+ *      The issuer takes the ceiling as a fraction; per-slice consumption is the durable grant amount.
+ *
+ *  (c) The requester-side renewal CONTROL PLANE is rate-capped + coalesced + P19-breaker-protected,
+ *      so N VMs on one hot account produce O(per-account-cap) renewal RPCs — never an O(N) herd:
+ *        - per-(account,machine) in-flight COALESCING: a VM with an outstanding renewal does not
+ *          start a second (`coalesced-in-flight`);
+ *        - per-account renewal RATE CAP with EXPONENTIAL backoff after each refusal/failure;
+ *        - a P19 sustained-FAILURE breaker: after `breakerThreshold` consecutive failures the VM
+ *          FAILS CLOSED TO ITS OWN ACCOUNT (`breaker-open`) instead of retry-storming a slow/
+ *          partitioned/unreachable holder. The breaker re-closes after `breakerCooldownMs`.
+ *
+ *  (d) FIRST-SLICE-under-partition: a VM that never received a slice is treated identically to a
+ *      VM whose slice is exhausted — it FAILS CLOSED TO ITS OWN ACCOUNT until it obtains its first
+ *      slice (the `decideAccountUse` consultation below).
+ *
+ * INVARIANT (load-bearing): fail-closed-to-OWN-account on EVERY uncertainty — no slice, exhausted,
+ * partition, breaker open, no mandate, ledger error. A borrowed account is NEVER overspent past its
+ * grant. Everything stays dark behind `multiMachine.accountFollowMe` at the wiring layer.
+ */
+import { AccountFollowMeGrantLedger, } from './AccountFollowMeGrants.js';
+/**
+ * The HOLDER-side issuer. Runs ON the fenced lease holder (the `slice-renew` handler wires this).
+ * Refuses unless this machine genuinely holds the lease right now, then delegates the sum-of-leases
+ * accounting to the durable ledger (single source of truth, re-derived on every call → failover-safe).
+ */
+export class SliceIssuer {
+    cfg;
+    ledger;
+    now;
+    constructor(store, cfg) {
+        this.cfg = cfg;
+        this.now = cfg.now ?? Date.now;
+        this.ledger = new AccountFollowMeGrantLedger(store, this.now);
+    }
+    /** Outstanding committed slices for an account (re-derived from the durable ledger). */
+    outstandingFor(accountId) {
+        return this.ledger.outstandingFor(accountId);
+    }
+    /**
+     * Issue (or re-issue) a slice in response to a renew request. FENCED: refuses unless this machine
+     * holds the lease at the current epoch. The slice is stamped with the CURRENT lease epoch, so it is
+     * void at a later epoch (consume/renew checks via the ledger). The ledger enforces the sum-of-leases
+     * ceiling and single-use grant ids.
+     */
+    issueForRenew(req, ctx) {
+        // (a) FENCED single-writer: only the live lease holder may issue. A non-holder (e.g. a stale
+        //     ex-holder mid-failover) refuses — the safe direction (no double-allocation).
+        if (!this.cfg.holdsLease()) {
+            return { ok: false, reason: 'not-lease-holder' };
+        }
+        const leaseEpoch = this.cfg.currentLeaseEpoch();
+        const result = this.ledger.issue({
+            grantId: req.grantId,
+            mandateId: req.mandateId,
+            accountId: req.accountId,
+            targetFingerprint: req.requestingMachineFp,
+            amount: req.amount,
+            ceiling: ctx.ceiling,
+            leaseEpoch,
+            expiresAt: req.expiresAt,
+        });
+        if (!result.ok)
+            return { ok: false, reason: result.reason };
+        return {
+            ok: true,
+            grantId: result.grant.grantId,
+            amount: result.grant.amount,
+            leaseEpoch: result.grant.leaseEpoch,
+            expiresAt: result.grant.expiresAt,
+        };
+    }
+}
+/**
+ * The per-machine requester-side renewal control plane for ONE account. Pure state-machine: a caller
+ * asks `shouldAttempt()` before sending a `slice-renew` RPC, marks `beginAttempt()` when it sends,
+ * and reports `recordOutcome()` with the result. It enforces coalescing, the rate cap with
+ * exponential backoff, and the P19 breaker — so the transport above it can be a thin RPC.
+ */
+export class SliceRenewalControl {
+    minInterval;
+    backoffMul;
+    maxInterval;
+    breakerThreshold;
+    breakerCooldownMs;
+    now;
+    inFlight = false;
+    lastAttemptAt = -Infinity;
+    /** Current backoff interval (grows on refusal/failure, resets on success). */
+    currentInterval;
+    consecutiveFailures = 0;
+    breakerOpenedAt = null;
+    constructor(cfg = {}) {
+        this.minInterval = cfg.minRenewIntervalMs ?? 5000;
+        this.backoffMul = cfg.backoffMultiplier ?? 2;
+        this.maxInterval = cfg.maxRenewIntervalMs ?? 300000;
+        this.breakerThreshold = cfg.breakerThreshold ?? 3;
+        this.breakerCooldownMs = cfg.breakerCooldownMs ?? 60000;
+        this.now = cfg.now ?? Date.now;
+        this.currentInterval = this.minInterval;
+    }
+    /** Is the P19 breaker currently open (a probe not yet allowed)? */
+    breakerOpen() {
+        if (this.breakerOpenedAt === null)
+            return false;
+        return this.now() - this.breakerOpenedAt < this.breakerCooldownMs;
+    }
+    /**
+     * May this VM send a renewal RPC for the account right now? Refuses (fail-closed at the call site)
+     * when a renewal is already in flight (coalescing), the rate cap has not elapsed, or the breaker is
+     * open. The caller treats any `proceed:false` as "use my OWN account this turn."
+     */
+    shouldAttempt() {
+        if (this.inFlight)
+            return { proceed: false, reason: 'coalesced-in-flight' };
+        if (this.breakerOpen())
+            return { proceed: false, reason: 'breaker-open' };
+        if (this.now() - this.lastAttemptAt < this.currentInterval) {
+            return { proceed: false, reason: 'rate-capped' };
+        }
+        return { proceed: true };
+    }
+    /** Mark a renewal RPC as started (coalescing latch). Must be paired with recordOutcome(). */
+    beginAttempt() {
+        this.inFlight = true;
+        this.lastAttemptAt = this.now();
+    }
+    /**
+     * Report the RPC result, advancing the control state:
+     *  - issued  → reset backoff + breaker (the channel is healthy again);
+     *  - refused → grant-level refusal (e.g. would-exceed-ceiling); back off, but NOT a transport
+     *              failure, so it does not advance the breaker (the holder answered);
+     *  - failed  → transport failure (timeout/partition/unreachable); back off AND advance the breaker.
+     */
+    recordOutcome(kind) {
+        this.inFlight = false;
+        if (kind === 'issued') {
+            this.currentInterval = this.minInterval;
+            this.consecutiveFailures = 0;
+            this.breakerOpenedAt = null;
+            return;
+        }
+        // Back off on any non-success.
+        this.currentInterval = Math.min(this.currentInterval * this.backoffMul, this.maxInterval);
+        if (kind === 'failed') {
+            this.consecutiveFailures += 1;
+            if (this.consecutiveFailures >= this.breakerThreshold && this.breakerOpenedAt === null) {
+                this.breakerOpenedAt = this.now();
+            }
+        }
+    }
+}
+/**
+ * The SELECTION-TIME consultation (R7a(b)/(d), S5, §6.2). Returns whether a candidate BORROWED
+ * account may be used this turn, or whether the call must FALL BACK to this machine's OWN account.
+ *
+ * Fail-closed-to-own-account on EVERY uncertainty: flag off, not a borrowed account, no slice ever
+ * received (first-slice-under-partition), exhausted slice, expired slice, or a stale-epoch slice all
+ * resolve to `own`. ONLY a live, unexpired, current-epoch slice with remaining budget yields
+ * `borrowed`. This is pure — the router/pool wiring calls it and routes accordingly; when off it can
+ * never be reached so default behavior is byte-identical.
+ */
+export function decideAccountUse(q) {
+    if (!q.followMeEnabled)
+        return { use: 'own', reason: 'follow-me-disabled' };
+    if (!q.isBorrowedAccount)
+        return { use: 'own', reason: 'not-a-borrowed-account' };
+    const s = q.slice;
+    // (d) first-slice-under-partition: never received a slice → own account.
+    if (!s || !s.grantId)
+        return { use: 'own', reason: 'no-slice' };
+    // A slice from a superseded lease epoch is void (the holder failed over).
+    if (s.leaseEpoch < q.currentLeaseEpoch)
+        return { use: 'own', reason: 'stale-lease-epoch' };
+    if (s.expiresAt <= q.now)
+        return { use: 'own', reason: 'slice-expired' };
+    if (!(s.remaining > 0))
+        return { use: 'own', reason: 'slice-exhausted' };
+    return { use: 'borrowed', remaining: s.remaining, reason: 'live-slice' };
+}
+//# sourceMappingURL=AccountFollowMeSpendSlice.js.map

package/dist/core/AccountFollowMeSpendSlice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountFollowMeSpendSlice.js","sourceRoot":"","sources":["../../src/core/AccountFollowMeSpendSlice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EACL,0BAA0B,GAG3B,MAAM,4BAA4B,CAAC;AAsCpC;;;;GAIG;AACH,MAAM,OAAO,WAAW;IAMH;IALF,MAAM,CAA6B;IACnC,GAAG,CAAe;IAEnC,YACE,KAAiB,EACA,GAAsB;QAAtB,QAAG,GAAH,GAAG,CAAmB;QAEvC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,IAAI,0BAA0B,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,wFAAwF;IACxF,cAAc,CAAC,SAAiB;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,GAAsB,EAAE,GAAyB;QAC7D,6FAA6F;QAC7F,mFAAmF;QACnF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACnD,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAgB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAC5C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;YAC1C,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU;YACV,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5D,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;YAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YAC3B,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;YACnC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;SAClC,CAAC;IACJ,CAAC;CACF;AAuCD;;;;;GAKG;AACH,MAAM,OAAO,mBAAmB;IACb,WAAW,CAAS;IACpB,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,gBAAgB,CAAS;IACzB,iBAAiB,CAAS;IAC1B,GAAG,CAAe;IAE3B,QAAQ,GAAG,KAAK,CAAC;IACjB,aAAa,GAAG,CAAC,QAAQ,CAAC;IAClC,8EAA8E;IACtE,eAAe,CAAS;IACxB,mBAAmB,GAAG,CAAC,CAAC;IACxB,eAAe,GAAkB,IAAI,CAAC;IAE9C,YAAY,MAA0B,EAAE;QACtC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC;QACpD,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,IAAI,KAAK,CAAC;QACxD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAC/B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC;IAC1C,CAAC;IAED,mEAAmE;IACnE,WAAW;QACT,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAChD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC5E,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAC1E,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,6FAA6F;IAC7F,YAAY;QACV,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,IAAsB;QAClC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC;YACxC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,+BAA+B;QAC/B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1F,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;gBACvF,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA6BD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IACjD,IAAI,CAAC,CAAC,CAAC,eAAe;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC5E,IAAI,CAAC,CAAC,CAAC,iBAAiB;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAClF,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAClB,yEAAyE;IACzE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChE,0EAA0E;IAC1E,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,iBAAiB;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC3F,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACzE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACzE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAC3E,CAAC"}

package/dist/core/AnthropicSubscriptionRouter.d.ts

@@ -29,6 +29,7 @@
  */
 import type { IntelligenceProvider, IntelligenceOptions } from './types.js';
 import type { AgentSdkCreditSnapshot } from '../providers/primitives/observability/usageMeterProvider.js';
+import type { AccountUseDecision } from './AccountFollowMeSpendSlice.js';
 export type SubscriptionPathMode = 'auto' | 'force';
 export interface SubscriptionRouteInfo {
     /** Which path served (or was chosen for) the call. */
@@ -58,11 +59,38 @@ export interface AnthropicSubscriptionRouterOptions {
     onRoute?: (info: SubscriptionRouteInfo) => void;
     /** Observability tap — auto-mode fallback after a primary failure. */
     onDegrade?: (info: SubscriptionDegradeInfo) => void;
+    /**
+     * WS5.2 R7a (S5, §6.2) — OPTIONAL slice consultation. When account follow-me is enabled and
+     * wired, the routing layer injects this to decide, AT SELECTION TIME, whether the subscription
+     * path may use a BORROWED (follow-me) account this call or must fall back to this machine's OWN
+     * account. It returns the same `AccountUseDecision` as `decideAccountUse` — `use:'own'` on EVERY
+     * uncertainty (no slice / exhausted / expired / stale epoch / first-slice-under-partition / flag
+     * off), `use:'borrowed'` only on a live current-epoch slice with remaining budget.
+     *
+     * ABSENT (the default, and ALWAYS when `multiMachine.accountFollowMe` is off) ⇒ this hook is
+     * never invoked, so routing is BYTE-IDENTICAL to today. The router NEVER overspends a borrowed
+     * account: it never reaches for one unless this consultation says `borrowed`, and a borrowed
+     * selection here only ever scopes the subscription-pool path the pool provider already uses
+     * (the pool's own account selection honors the decision via `onSliceConsult`).
+     */
+    consultSlice?: (options?: IntelligenceOptions) => AccountUseDecision;
+    /** Observability tap — the slice consultation result for a subscription-path call. */
+    onSliceConsult?: (info: {
+        decision: AccountUseDecision;
+        component?: string;
+    }) => void;
 }
 export declare class AnthropicSubscriptionRouter implements IntelligenceProvider {
     private readonly opts;
     private readonly safetyMarginFraction;
     constructor(options: AnthropicSubscriptionRouterOptions);
+    /**
+     * WS5.2 R7a — run the (optional) slice consultation before a subscription-pool call. NO-OP when
+     * `consultSlice` is unwired (the default / flag-off), so today's behavior is byte-identical. When
+     * wired it surfaces the decision (own vs borrowed) to observability + the pool's account selection;
+     * the router never overspends — a `use:'own'` keeps the pool on this machine's own account.
+     */
+    private consultSliceForSubscription;
     evaluate(prompt: string, options?: IntelligenceOptions): Promise<string>;
 }
 //# sourceMappingURL=AnthropicSubscriptionRouter.d.ts.map

package/dist/core/AnthropicSubscriptionRouter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AnthropicSubscriptionRouter.d.ts","sourceRoot":"","sources":["../../src/core/AnthropicSubscriptionRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6DAA6D,CAAC;AAE1G,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEpD,MAAM,WAAW,qBAAqB;IACpC,sDAAsD;IACtD,IAAI,EAAE,YAAY,GAAG,mBAAmB,CAAC;IACzC,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,YAAY,GAAG,mBAAmB,CAAC;IACzC,EAAE,EAAE,YAAY,GAAG,mBAAmB,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kCAAkC;IACjD,4EAA4E;IAC5E,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,qCAAqC;IACrC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,+EAA+E;IAC/E,aAAa,EAAE,MAAM,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC5D,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAChD,sEAAsE;IACtE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,uBAAuB,KAAK,IAAI,CAAC;CACrD;AAID,qBAAa,2BAA4B,YAAW,oBAAoB;IACtE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqC;IAC1D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;gBAElC,OAAO,EAAE,kCAAkC;IAWjD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CAwC/E"}
+{"version":3,"file":"AnthropicSubscriptionRouter.d.ts","sourceRoot":"","sources":["../../src/core/AnthropicSubscriptionRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6DAA6D,CAAC;AAC1G,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEpD,MAAM,WAAW,qBAAqB;IACpC,sDAAsD;IACtD,IAAI,EAAE,YAAY,GAAG,mBAAmB,CAAC;IACzC,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,YAAY,GAAG,mBAAmB,CAAC;IACzC,EAAE,EAAE,YAAY,GAAG,mBAAmB,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kCAAkC;IACjD,4EAA4E;IAC5E,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,qCAAqC;IACrC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,+EAA+E;IAC/E,aAAa,EAAE,MAAM,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC5D,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAChD,sEAAsE;IACtE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACpD;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,mBAAmB,KAAK,kBAAkB,CAAC;IACrE,sFAAsF;IACtF,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,kBAAkB,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACvF;AAID,qBAAa,2BAA4B,YAAW,oBAAoB;IACtE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqC;IAC1D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;gBAElC,OAAO,EAAE,kCAAkC;IAWvD;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IAM7B,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CA2C/E"}

package/dist/core/AnthropicSubscriptionRouter.js

@@ -40,10 +40,23 @@ export class AnthropicSubscriptionRouter {
             throw new Error(`AnthropicSubscriptionRouter: safetyMarginFraction must be in [0,1], got ${this.safetyMarginFraction}`);
         }
     }
+    /**
+     * WS5.2 R7a — run the (optional) slice consultation before a subscription-pool call. NO-OP when
+     * `consultSlice` is unwired (the default / flag-off), so today's behavior is byte-identical. When
+     * wired it surfaces the decision (own vs borrowed) to observability + the pool's account selection;
+     * the router never overspends — a `use:'own'` keeps the pool on this machine's own account.
+     */
+    consultSliceForSubscription(options, component) {
+        if (!this.opts.consultSlice)
+            return;
+        const decision = this.opts.consultSlice(options);
+        this.opts.onSliceConsult?.({ decision, component });
+    }
     async evaluate(prompt, options) {
         const component = options?.attribution?.component;
         if (this.opts.mode === 'force') {
             this.opts.onRoute?.({ path: 'subscription-pool', reason: 'forced-subscription-mode', component });
+            this.consultSliceForSubscription(options, component);
             // No fallback by design — force mode guarantees zero `claude -p`
             // traffic; a pool failure must surface, not silently re-route.
             return this.opts.pool.evaluate(prompt, options);
@@ -61,6 +74,8 @@ export class AnthropicSubscriptionRouter {
             ? 'subscription-pool'
             : 'sdk-credit';
         this.opts.onRoute?.({ path: primaryLabel, reason: decision.reason, component });
+        if (primaryLabel === 'subscription-pool')
+            this.consultSliceForSubscription(options, component);
         try {
             return await primary.evaluate(prompt, options);
         }
@@ -75,6 +90,8 @@ export class AnthropicSubscriptionRouter {
                 reason: `fallback-after-primary-failure: ${reason.slice(0, 200)}`,
                 component,
             });
+            if (fallbackLabel === 'subscription-pool')
+                this.consultSliceForSubscription(options, component);
             return fallback.evaluate(prompt, options);
         }
     }

package/dist/core/AnthropicSubscriptionRouter.js.map

@@ -1 +1 @@
-{"version":3,"file":"AnthropicSubscriptionRouter.js","sourceRoot":"","sources":["../../src/core/AnthropicSubscriptionRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAqC3E,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,MAAM,OAAO,2BAA2B;IACrB,IAAI,CAAqC;IACzC,oBAAoB,CAAS;IAE9C,YAAY,OAA2C;QACrD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;QACpB,IAAI,CAAC,oBAAoB;YACvB,OAAO,CAAC,oBAAoB,IAAI,8BAA8B,CAAC;QACjE,IAAI,IAAI,CAAC,oBAAoB,GAAG,CAAC,IAAI,IAAI,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CACb,2EAA2E,IAAI,CAAC,oBAAoB,EAAE,CACvG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,SAAS,GAAG,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC;QAElD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,CAAC,CAAC;YAClG,iEAAiE;YACjE,+DAA+D;YAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,oEAAoE;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9E,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,KAAK,YAAY,CAAC;QACpD,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACpE,MAAM,YAAY,GAAkC,YAAY;YAC9D,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,mBAAmB,CAAC;QACxB,MAAM,aAAa,GAAkC,YAAY;YAC/D,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,YAAY,CAAC;QAEjB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,uEAAuE;YACvE,kEAAkE;YAClE,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,mCAAmC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACjE,SAAS;aACV,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"AnthropicSubscriptionRouter.js","sourceRoot":"","sources":["../../src/core/AnthropicSubscriptionRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAuD3E,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,MAAM,OAAO,2BAA2B;IACrB,IAAI,CAAqC;IACzC,oBAAoB,CAAS;IAE9C,YAAY,OAA2C;QACrD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;QACpB,IAAI,CAAC,oBAAoB;YACvB,OAAO,CAAC,oBAAoB,IAAI,8BAA8B,CAAC;QACjE,IAAI,IAAI,CAAC,oBAAoB,GAAG,CAAC,IAAI,IAAI,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CACb,2EAA2E,IAAI,CAAC,oBAAoB,EAAE,CACvG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,2BAA2B,CAAC,OAA6B,EAAE,SAAkB;QACnF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,SAAS,GAAG,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC;QAElD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,CAAC,CAAC;YAClG,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACrD,iEAAiE;YACjE,+DAA+D;YAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,oEAAoE;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9E,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,KAAK,YAAY,CAAC;QACpD,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACpE,MAAM,YAAY,GAAkC,YAAY;YAC9D,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,mBAAmB,CAAC;QACxB,MAAM,aAAa,GAAkC,YAAY;YAC/D,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,YAAY,CAAC;QAEjB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAChF,IAAI,YAAY,KAAK,mBAAmB;YAAE,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/F,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,uEAAuE;YACvE,kEAAkE;YAClE,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,mCAAmC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACjE,SAAS;aACV,CAAC,CAAC;YACH,IAAI,aAAa,KAAK,mBAAmB;gBAAE,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAChG,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;CACF"}

package/dist/core/MeshRpc.d.ts

@@ -60,6 +60,17 @@ export type MeshCommand = {
 } | {
     type: 'secret-share';
     encrypted: string;
+} | {
+    type: 'slice-renew';
+    mandateId: string;
+    accountId: string;
+    requestingMachineFp: string;
+    amount: number;
+    expiresAt: number;
+} | {
+    type: 'account-follow-me-mandate-deliver';
+    /** The R4a-signed bundle: the mandate + its asymmetric issuance signature. */
+    portable: import('../coordination/AccountFollowMeMandateBridge.js').PortableMandate;
 } | {
     type: 'pool-stream-ticket';
     session: string;
@@ -171,7 +182,7 @@ export declare function verifyEnvelope(env: MeshEnvelope, deps: VerifyEnvelopeDe
     ok: boolean;
     reason: VerifyReason;
 };
-export type RbacReason = 'ok' | 'not-router' | 'claim-unauthorized' | 'release-unauthorized' | 'drain-unauthorized';
+export type RbacReason = 'ok' | 'not-router' | 'claim-unauthorized' | 'release-unauthorized' | 'drain-unauthorized' | 'slice-renew-unauthorized' | 'mandate-deliver-unauthorized';
 export interface RbacDeps {
     /** The machine currently holding the router lease (verify-on-read, §L1), or null. */
     routerHolder: () => MachineId | null;
@@ -179,6 +190,31 @@ export interface RbacDeps {
     ownerOf: (session: string) => MachineId | null;
     /** The machine the router last assigned (via place/transfer) for a session, or null. */
     placementTargetOf: (session: string) => MachineId | null;
+    /**
+     * WS5.2 R7a — the operator-mandate gate for the `slice-renew` verb. Returns true ONLY when the
+     * authorizing mandate authorizes (sender, accountId, requesting fingerprint) for account follow-me
+     * — deny-by-default. INJECTED so the dangerous authority decision is a real check, never an
+     * inherit. ABSENT ⇒ the verb is refused (fail-closed): on a build without the seam wired, a
+     * slice-renew can never be authorized. Mirrors the deny-by-default discipline of R3a/R4a.
+     */
+    authorizeSliceRenew?: (args: {
+        sender: MachineId;
+        mandateId: string;
+        accountId: string;
+        requestingMachineFp: string;
+    }) => boolean;
+    /**
+     * WS5.2 R4a — the gate for `account-follow-me-mandate-deliver`. Returns true ONLY when account
+     * follow-me is ENABLED on this machine AND the sender is THIS machine's trusted operator machine
+     * (the verified-operator binding). Deny-by-default: ABSENT ⇒ the verb is refused (fail-closed) —
+     * on a build without the seam wired, or on a non-dev/dark agent, a delivered mandate can never be
+     * accepted at the gate. This is ONLY the coarse "should I even look at it" gate; the LOAD-BEARING
+     * authority is the R4a asymmetric signature verification in the handler, which re-binds to the
+     * authenticated sender + registered operator key. Mirrors the deny-by-default discipline of R3a.
+     */
+    authorizeMandateDeliver?: (args: {
+        sender: MachineId;
+    }) => boolean;
 }
 /**
  * Per-command authorization gate (spec §L0). A valid signature proves WHO; this

package/dist/core/MeshRpc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MeshRpc.d.ts","sourceRoot":"","sources":["../../src/core/MeshRpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAE/B,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACvE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GACxG;IAWE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,GACD;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAM3C;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/C;IAOE,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAClF,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjG,GACD;IAOE,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD,GACD;IAcE,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B,GACD;IAOE,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD,GACD;IAQE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,EAAE,EAAE,MAAM,CAAC;QACX,EAAE,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,YAAY,CAAC;QAChF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH,GACD;IAUE,IAAI,EAAE,oBAAoB,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,GACD;IAOE,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC9C,GACD;IAkBE,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEN,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAClC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,CAAC,GAC1F,MAAM,CAER;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAC1B,KAAK,EAAE;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EACzH,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAClC,YAAY,CAEd;AAED,MAAM,MAAM,YAAY,GACpB,IAAI,GACJ,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,aAAa,EAAE,SAAS,CAAC;IACzB,uFAAuF;IACvF,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC;IAC7E,2DAA2D;IAC3D,gBAAgB,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC;IACjD,+EAA+E;IAC/E,SAAS,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IACzD,+BAA+B;IAC/B,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,kBAAkB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAajH;AAED,MAAM,MAAM,UAAU,GAClB,IAAI,GACJ,YAAY,GACZ,oBAAoB,GACpB,sBAAsB,GACtB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,QAAQ;IACvB,qFAAqF;IACrF,YAAY,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC;IACrC,uDAAuD;IACvD,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,GAAG,IAAI,CAAC;IAC/C,wFAAwF;IACxF,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,GAAG,IAAI,CAAC;CAC1D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CA6E7H;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,YAAY,EACjB,UAAU,EAAE,kBAAkB,EAC9B,QAAQ,EAAE,QAAQ,GACjB;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,UAAU,CAAA;CAAE,CAIpD;AAID;;mDAEmD;AACnD,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAE5H,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,+EAA+E;IAC/E,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD,mIAAmI;IACnI,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACnE,yDAAyD;IACzD,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,UAAU,GAAG,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAwBpF;;;;;;GAMG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAwB;gBAC9B,IAAI,EAAE,qBAAqB;IAIjC,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;CAgB3D"}
+{"version":3,"file":"MeshRpc.d.ts","sourceRoot":"","sources":["../../src/core/MeshRpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAE/B,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACvE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GACxG;IAWE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,GACD;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC3C;IAaE,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IAeE,IAAI,EAAE,mCAAmC,CAAC;IAC1C,8EAA8E;IAC9E,QAAQ,EAAE,OAAO,iDAAiD,EAAE,eAAe,CAAC;CACrF,GAMD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/C;IAOE,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAClF,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjG,GACD;IAOE,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD,GACD;IAcE,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B,GACD;IAOE,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD,GACD;IAQE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,EAAE,EAAE,MAAM,CAAC;QACX,EAAE,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,YAAY,CAAC;QAChF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH,GACD;IAUE,IAAI,EAAE,oBAAoB,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,GACD;IAOE,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC9C,GACD;IAkBE,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEN,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAClC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,CAAC,GAC1F,MAAM,CAER;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAC1B,KAAK,EAAE;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EACzH,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAClC,YAAY,CAEd;AAED,MAAM,MAAM,YAAY,GACpB,IAAI,GACJ,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,aAAa,EAAE,SAAS,CAAC;IACzB,uFAAuF;IACvF,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC;IAC7E,2DAA2D;IAC3D,gBAAgB,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC;IACjD,+EAA+E;IAC/E,SAAS,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IACzD,+BAA+B;IAC/B,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,kBAAkB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAajH;AAED,MAAM,MAAM,UAAU,GAClB,IAAI,GACJ,YAAY,GACZ,oBAAoB,GACpB,sBAAsB,GACtB,oBAAoB,GACpB,0BAA0B,GAC1B,8BAA8B,CAAC;AAEnC,MAAM,WAAW,QAAQ;IACvB,qFAAqF;IACrF,YAAY,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC;IACrC,uDAAuD;IACvD,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,GAAG,IAAI,CAAC;IAC/C,wFAAwF;IACxF,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,GAAG,IAAI,CAAC;IACzD;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE;QAC3B,MAAM,EAAE,SAAS,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,KAAK,OAAO,CAAC;IACd;;;;;;;;OAQG;IACH,uBAAuB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,SAAS,CAAA;KAAE,KAAK,OAAO,CAAC;CACpE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAyG7H;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,YAAY,EACjB,UAAU,EAAE,kBAAkB,EAC9B,QAAQ,EAAE,QAAQ,GACjB;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,UAAU,CAAA;CAAE,CAIpD;AAID;;mDAEmD;AACnD,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAE5H,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,+EAA+E;IAC/E,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD,mIAAmI;IACnI,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACnE,yDAAyD;IACzD,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,UAAU,GAAG,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA0BpF;;;;;;GAMG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAwB;gBAC9B,IAAI,EAAE,qBAAqB;IAIjC,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;CAgB3D"}