llm-relay 0.26.0 → 0.28.0

package/dist/target-facts.js

@@ -0,0 +1,246 @@
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { homedir, tmpdir } from "node:os";
+import { WriteBehindTimer } from "./write-behind.js";
+/** Scope names in resolution order. Exported so callers cannot invent a different precedence. */
+export const SCOPE_PRECEDENCE = ["deployment", "group", "provider", "model"];
+/**
+ * How long each kind is believed without re-checking. All expire, because all are reversible: a
+ * de-listed model returns, a plan is upgraded, an allowance refreshes, a key is rotated.
+ *
+ * `allowance-exhausted` is deliberately the SHORTEST despite monthly credit cycles — cooling a
+ * whole provider for a month on one 402 would be catastrophic if the balance were topped up an
+ * hour later, and one re-probe an hour is cheap and self-correcting. It also matches the breaker's
+ * `QUOTA_EXHAUSTED_COOLDOWN_MS`, so the two cannot disagree about when to try again.
+ * `credential-invalid` is short for the same reason from the other direction: a rotated key must
+ * recover quickly, and any success clears it outright.
+ */
+export const FACT_TTL_MS = {
+    "not-servable": 6 * 60 * 60 * 1000,
+    "subscription-required": 24 * 60 * 60 * 1000,
+    "allowance-exhausted": 60 * 60 * 1000,
+    "credential-invalid": 15 * 60 * 1000,
+    // Short, and almost always superseded by a stated reset: a rate limit window is minutes, and
+    // believing a stale one keeps working capacity idle. `RATE_LIMIT_COOLDOWN_MS` in the breaker is
+    // the same figure for the same reason — the two must not disagree about when to try again.
+    "rate-limited": 2 * 60 * 1000,
+};
+/** Facts that make a target unfit for a FREE pool — a statement about cost or existence. */
+const COST_BLOCKING = new Set(["not-servable", "subscription-required"]);
+/** Facts that make a target temporarily unusable but leave its pool membership intact. */
+const COOLING = new Set(["allowance-exhausted", "credential-invalid", "rate-limited"]);
+let _store = null;
+let _path = null;
+const writer = new WriteBehindTimer();
+function defaultPath() {
+    // ⚠ Redirected under vitest for the same reason probe-cache and context-limits are: a test's
+    // synthetic fact persisted here would evict a real deployment from the user's live pools.
+    if (process.env.VITEST !== undefined) {
+        return join(tmpdir(), `llm-relay-test-target-facts-${process.pid}.json`);
+    }
+    const xdg = process.env.XDG_CONFIG_HOME;
+    const baseDir = xdg && xdg.trim() ? join(xdg, "llm-relay") : join(homedir(), ".llm-relay");
+    return join(baseDir, "target-facts.json");
+}
+/** The storage key for a scope. Groups hash their sorted membership so two differ iff they cover
+ *  different models — a group is defined by who is in it, not by a name somebody chose. */
+function keyOf(scope) {
+    switch (scope.kind) {
+        case "deployment":
+            return `d:${scope.provider}/${scope.model}`;
+        case "group":
+            return `g:${scope.provider}/${[...scope.members].sort().join(",")}`;
+        case "provider":
+            return `p:${scope.provider}`;
+        case "model":
+            return `m:${scope.model}`;
+    }
+}
+function load(path) {
+    if (_store && _path === path)
+        return _store;
+    _path = path;
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        if (parsed && typeof parsed === "object" && parsed.facts && typeof parsed.facts === "object") {
+            _store = { version: 1, facts: parsed.facts };
+            return _store;
+        }
+    }
+    catch {
+        // Unreadable or corrupt: start clean. Everything here is re-learnable — the worst consequence
+        // is one wasted round-trip per target.
+    }
+    _store = { version: 1, facts: {} };
+    return _store;
+}
+function persist(path) {
+    if (!_store)
+        return;
+    try {
+        mkdirSync(join(path, ".."), { recursive: true });
+        const tmp = `${path}.${process.pid}.tmp`;
+        writeFileSync(tmp, JSON.stringify(_store, null, 2) + "\n", "utf8");
+        renameSync(tmp, path);
+    }
+    catch {
+        /* storage problem, never a request failure — same contract as every other store here */
+    }
+}
+function expiryOf(fact) {
+    return fact.until ?? fact.at + (FACT_TTL_MS[fact.kind] ?? 0);
+}
+/** Does this stored fact cover this deployment? */
+function covers(fact, provider, model) {
+    switch (fact.scope.kind) {
+        case "deployment":
+            return fact.scope.provider === provider && model !== null && fact.scope.model === model;
+        case "group":
+            return fact.scope.provider === provider && model !== null && fact.scope.members.includes(model);
+        case "provider":
+            return fact.scope.provider === provider;
+        case "model":
+            return model !== null && fact.scope.model === model;
+    }
+}
+/**
+ * Record a fact at the scope its evidence supports.
+ *
+ * A fresh observation replaces an older one at the SAME scope: the target is the authority on
+ * itself, and one that changed its answer is telling us so. Facts at different scopes coexist —
+ * a deployment can be `subscription-required` while its provider is `allowance-exhausted`, and
+ * resolution decides which applies.
+ */
+export function recordFact(kind, scope, opts = {}) {
+    const path = opts.path ?? defaultPath();
+    const store = load(path);
+    const now = opts.now ?? Date.now();
+    const stated = typeof opts.retryAfterMs === "number" && opts.retryAfterMs > 0 ? opts.retryAfterMs : null;
+    store.facts[keyOf(scope)] = {
+        kind,
+        scope,
+        at: now,
+        // A vendor-stated reset beats our TTL, exactly as it does for the breaker's cooldown: the
+        // provider knows when its own allowance refreshes and we are guessing.
+        ...(stated !== null ? { until: now + stated } : {}),
+    };
+    writer.touch(() => persist(path));
+}
+/** Every live fact covering a deployment, most specific first. */
+export function factsFor(provider, model, opts = {}) {
+    const store = load(opts.path ?? defaultPath());
+    const now = opts.now ?? Date.now();
+    const m = typeof model === "string" ? model : null;
+    const hits = [];
+    for (const fact of Object.values(store.facts)) {
+        const until = expiryOf(fact);
+        if (now >= until)
+            continue;
+        if (!covers(fact, provider, m))
+            continue;
+        hits.push({ kind: fact.kind, scope: fact.scope, until });
+    }
+    hits.sort((a, b) => SCOPE_PRECEDENCE.indexOf(a.scope.kind) - SCOPE_PRECEDENCE.indexOf(b.scope.kind));
+    return hits;
+}
+/**
+ * Has this deployment been PROVEN unfit for a free pool?
+ *
+ * ⚠ True only for facts in `COST_BLOCKING`. `allowance-exhausted` is deliberately excluded and
+ * must stay excluded — see the `FactKind` note. `credential-invalid` is excluded too: a bad key is
+ * a configuration problem, not a statement that the deployment costs money, and removing members
+ * from a pool over it would empty the pool on a mistake that a rotation fixes in seconds.
+ */
+export function isCostBlocked(provider, model, opts = {}) {
+    return factsFor(provider, model, opts).some((f) => COST_BLOCKING.has(f.kind));
+}
+/**
+ * When a temporarily-unusable target is worth trying again, or null when nothing is cooling it.
+ * Only `COOLING` kinds produce this — the others are exclusions, not cooldowns, and a caller that
+ * wants those wants `isCostBlocked`.
+ */
+export function cooldownUntil(provider, model, opts = {}) {
+    let soonest = null;
+    for (const f of factsFor(provider, model, opts)) {
+        if (!COOLING.has(f.kind))
+            continue;
+        // The LATEST expiry among covering facts: a target under both an account exhaustion and its
+        // own is usable only once both have cleared.
+        soonest = soonest === null ? f.until : Math.max(soonest, f.until);
+    }
+    return soonest;
+}
+/**
+ * A success clears every fact covering this deployment — including its PROVIDER-scoped ones.
+ *
+ * A served request is first-party proof that the deployment exists, the credential authenticates,
+ * and the allowance is not spent. That is strictly better evidence than any stored refusal, and it
+ * covers the cases that matter most: credits topped up, a key rotated, a month rolled over, all
+ * well before the TTL would have expired. Same contract as the breaker clearing a credential fault
+ * on success.
+ *
+ * ⚠ A group fact is cleared only if this model is IN the group — one member serving says nothing
+ * about the others, and dropping the whole verdict would re-admit models that are genuinely gated.
+ */
+export function clearFacts(provider, model, opts = {}) {
+    const path = opts.path ?? defaultPath();
+    const store = load(path);
+    const m = typeof model === "string" ? model : null;
+    const cleared = [];
+    let changed = false;
+    for (const [key, fact] of Object.entries(store.facts)) {
+        if (!covers(fact, provider, m))
+            continue;
+        changed = true;
+        // Reported back so the caller can clear the SYMPTOMS of a fact that has just been disproved.
+        // A stated bad credential leaves a per-deployment 401 on the breaker for every model that
+        // tried during the outage; when the key starts working, those are stale evidence about a
+        // problem that no longer exists, and expiring them one by one keeps the pool narrow.
+        if (fact.scope.kind === "provider")
+            cleared.push(fact.kind);
+        delete store.facts[key];
+    }
+    if (changed)
+        writer.touch(() => persist(path));
+    return cleared;
+}
+/** Every live fact, for `llm-relay eligibility`. Expired entries are omitted, not reported. */
+export function allFacts(opts = {}) {
+    const store = load(opts.path ?? defaultPath());
+    const now = opts.now ?? Date.now();
+    const out = [];
+    for (const fact of Object.values(store.facts)) {
+        const until = expiryOf(fact);
+        if (now >= until)
+            continue;
+        out.push({ kind: fact.kind, scope: fact.scope, at: fact.at, until });
+    }
+    return out.sort((a, b) => b.at - a.at);
+}
+/** A human-readable label for a scope — used by the CLI and by nothing that makes decisions. */
+export function describeScope(scope) {
+    switch (scope.kind) {
+        case "deployment":
+            return `${scope.provider}/${scope.model}`;
+        case "group":
+            return `${scope.provider}/{${scope.members.length} models}`;
+        case "provider":
+            return `${scope.provider}/* (whole account)`;
+        case "model":
+            return `*/${scope.model}`;
+    }
+}
+/** Flush pending writes. Called on shutdown, like the other write-behind stores. */
+export function flushFacts(opts = {}) {
+    if (!writer.dirty)
+        return;
+    writer.clear();
+    persist(opts.path ?? defaultPath());
+}
+/** Test seam: drop the in-memory store so a suite can point at a fresh path. */
+export function resetFacts() {
+    _store = null;
+    _path = null;
+    writer.clear();
+}
+//# sourceMappingURL=target-facts.js.map

package/dist/target-facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target-facts.js","sourceRoot":"","sources":["../src/target-facts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AA4ErD,iGAAiG;AACjG,MAAM,CAAC,MAAM,gBAAgB,GAA6B,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAgBvG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAA6B;IACnD,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IAClC,uBAAuB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IAC5C,qBAAqB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACrC,oBAAoB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACpC,6FAA6F;IAC7F,gGAAgG;IAChG,2FAA2F;IAC3F,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;CAC9B,CAAC;AAEF,4FAA4F;AAC5F,MAAM,aAAa,GAA0B,IAAI,GAAG,CAAW,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAC1G,0FAA0F;AAC1F,MAAM,OAAO,GAA0B,IAAI,GAAG,CAAW,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,cAAc,CAAC,CAAC,CAAC;AAExH,IAAI,MAAM,GAAqB,IAAI,CAAC;AACpC,IAAI,KAAK,GAAkB,IAAI,CAAC;AAChC,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;AAEtC,SAAS,WAAW;IAClB,6FAA6F;IAC7F,0FAA0F;IAC1F,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,+BAA+B,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,MAAM,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;AAC5C,CAAC;AAED;2FAC2F;AAC3F,SAAS,KAAK,CAAC,KAAgB;IAC7B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9C,KAAK,OAAO;YACV,OAAO,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,KAAK,UAAU;YACb,OAAO,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,KAAK,OAAO;YACV,OAAO,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,IAAI,MAAM,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC5C,KAAK,GAAG,IAAI,CAAC;IACb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAuB,CAAC;QAC5E,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC7F,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAmC,EAAE,CAAC;YAC3E,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8FAA8F;QAC9F,uCAAuC;IACzC,CAAC;IACD,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACnE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,wFAAwF;IAC1F,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAgB;IAChC,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,mDAAmD;AACnD,SAAS,MAAM,CAAC,IAAgB,EAAE,QAAgB,EAAE,KAAoB;IACtE,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,YAAY;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;QAC1F,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClG,KAAK,UAAU;YACb,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC1C,KAAK,OAAO;YACV,OAAO,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,IAAc,EACd,KAAgB,EAChB,OAAsE,EAAE;IAExE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IACzG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG;QAC1B,IAAI;QACJ,KAAK;QACL,EAAE,EAAE,GAAG;QACP,0FAA0F;QAC1F,uEAAuE;QACvE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,QAAQ,CACtB,QAAgB,EAChB,KAAgC,EAChC,OAAwC,EAAE;IAE1C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,MAAM,IAAI,GAA+D,EAAE,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,IAAI,KAAK;YAAE,SAAS;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAAE,SAAS;QACzC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,KAAgC,EAChC,OAAwC,EAAE;IAE1C,OAAO,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,KAAgC,EAChC,OAAwC,EAAE;IAE1C,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,4FAA4F;QAC5F,6CAA6C;QAC7C,OAAO,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,KAAgC,EAChC,OAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAAE,SAAS;QACzC,OAAO,GAAG,IAAI,CAAC;QACf,6FAA6F;QAC7F,0FAA0F;QAC1F,yFAAyF;QACzF,qFAAqF;QACrF,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,QAAQ,CACtB,OAAwC,EAAE;IAE1C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,GAAG,GAA2E,EAAE,CAAC;IACvF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,IAAI,KAAK;YAAE,SAAS;QAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAAC,KAAgB;IAC5C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5C,KAAK,OAAO;YACV,OAAO,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC;QAC9D,KAAK,UAAU;YACb,OAAO,GAAG,KAAK,CAAC,QAAQ,oBAAoB,CAAC;QAC/C,KAAK,OAAO;YACV,OAAO,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,OAA0B,EAAE;IACrD,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO;IAC1B,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,IAAI,CAAC;IACd,KAAK,GAAG,IAAI,CAAC;IACb,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-relay",
-  "version": "0.26.0",
+  "version": "0.28.0",
   "description": "Loopback bidirectional Anthropic/OpenAI API proxy with tool-call validation and multi-provider routing.",
   "type": "module",
   "engines": {

package/skills/llm-relay/SKILL.md

@@ -495,13 +495,24 @@ constrained to the three classes and two scopes, a signature is keyed per (provi
 provider's message can never produce a verdict about another, and the user accepts. Do not weaken
 any of them to "save a step".
 
-Choosing between the three classes:
+Choosing the class, and the scope it applies to:
 
 | The message states | Class | Scope |
 |---|---|---|
-| the model does not exist / is not found for the account | `not-servable` | deployment |
-| a plan or subscription is needed for **this model** | `subscription-required` | deployment |
-| the **account's** credits or allowance are spent | `allowance-exhausted` | account |
+| the model does not exist / is not found for the account | `not-servable` | `deployment` |
+| a plan or subscription is needed for **this model** | `subscription-required` | `deployment` |
+| a plan is needed for a **named family** of models | `subscription-required` | `group` + `--members` |
+| the **account's** credits or allowance are spent | `allowance-exhausted` | `provider` |
+| the **key itself** is invalid / revoked | `credential-invalid` | `provider` |
+
+Scope is the half most worth getting right: `provider` means one observation covers every model
+behind that credential, which is exactly what stops a pool spending one round-trip per member to
+rediscover one balance. But it is also what takes out a whole provider if you are wrong, so
+**scope by what the message states, never by what you infer from a pattern of failures.** Several
+models failing identically is equally several gated models under a working key.
+
+⚠ **A `group` verdict must name its members** (`--members id1,id2`) — there is no family registry
+and no prefix matching, deliberately. If you cannot enumerate the family, use `deployment`.
 
 ⚠ The third is not a cost verdict. A free lane that has spent this period's allowance is still
 free, and marking it otherwise would evict it from every free pool long after the credits refresh.

package/dist/deployment-eligibility.d.ts

@@ -1,134 +0,0 @@
-/**
- * Deployment eligibility LEARNED from what a backend said when it refused to serve.
- *
- * Sibling of `context-limits.ts`, and built on the same rule: only an EXPLICITLY STATED fact is
- * recorded. A bare 403 teaches nothing (it could be a revoked key, which is the credential axis's
- * job); a 403 that says "this model requires a subscription" is the provider stating that this
- * deployment is not included in the plan we hold.
- *
- * This module is the CONSEQUENCE half only. Deciding what a given refusal message means belongs to
- * `refusal-interpretation.ts`, which answers it by deterministic lookup and queues anything it
- * cannot answer for offline research. Nothing here interprets anything; it stores verdicts and
- * reports what they imply for admission and ordering.
- *
- * Why this exists at all: `assessCost()` admits a model from a `tierType: "free"` provider with
- * unpublished prices as free on the `provider-tier` basis. That is the right default — most free
- * providers publish no prices — but it is an assumption about a ROSTER, and a roster contains
- * subscription-gated SKUs and models that have been de-listed behind the scenes. Those are only
- * ever discovered by asking. This store is where the answer goes so the next request does not have
- * to ask again.
- *
- * ⚠ **The three classes are NOT interchangeable, and the distinction is the point.**
- *
- *   not-servable          — the deployment does not exist (404/400 "does not exist", "not found
- *                           for account"). An EXISTENCE fact. Drop it from pool admission.
- *   subscription-required — it exists, but is not covered by the plan we hold (403 "requires a
- *                           subscription"). A COST fact: it refutes the `provider-tier` free
- *                           assessment for this one deployment. Drop it from FREE pool admission.
- *   allowance-exhausted   — it exists AND it is free; the free allowance is spent until it
- *                           refreshes (402 "you have depleted your monthly included credits").
- *                           A TEMPORAL fact, and emphatically NOT a cost fact.
- *
- * **Never let `allowance-exhausted` mean "paid".** A free-tier account that has spent this
- * period's credits is the single most common state of every provider this proxy fronts — it is the
- * normal condition of a working free lane, not a discovery about its price. Reclassifying it as
- * paid would evict the deployment from every free pool on a condition that clears by itself, and
- * the eviction would outlive the exhaustion. So it is deliberately unreachable from the cost path:
- * `isCostBlocked()` does not consider it, and only `cooldownUntil()` reports it — a demotion, on
- * the same footing as a 429, that expires on its own and clears the moment anything succeeds.
- */
-/** What a refusal proved about a deployment. See the header — these are not ranks of one scale. */
-export type EligibilityClass = "not-servable" | "subscription-required" | "allowance-exhausted";
-/**
- * Whose fact it is.
- *
- * `deployment` — about this (provider, model) alone.
- * `account`    — about the credential, so every deployment on that provider shares it. Reserved
- *                for refusals that state an ACCOUNT-level condition ("you have depleted your
- *                monthly included credits" names a balance, not a model). This is what stops a
- *                pool holding six HuggingFace members from spending six round-trips to rediscover
- *                one balance — measured on this machine, `pool/xhigh`'s 15 members resolve to only
- *                four independent quota domains.
- */
-export type EligibilityScope = "deployment" | "account";
-/**
- * How long each class is believed without re-checking.
- *
- * All three expire, because all three are reversible: a de-listed model can come back, a plan can
- * be upgraded, and an allowance always refreshes. The spread reflects how fast each moves, and
- * `allowance-exhausted` is deliberately the SHORTEST — HuggingFace's included credits are monthly,
- * but cooling a whole provider for a month on one 402 would be catastrophic if the balance were
- * topped up an hour later. One re-probe an hour costs one request and is self-correcting; it also
- * matches the breaker's own `QUOTA_EXHAUSTED_COOLDOWN_MS`, so the two cannot disagree about when a
- * quota-exhausted target is worth trying again.
- */
-export declare const ELIGIBILITY_TTL_MS: Record<EligibilityClass, number>;
-/**
- * Record what a deployment stated about itself. A fresh observation always replaces an older one:
- * the deployment is the authority, and one that changed its answer is telling us so.
- */
-export declare function recordEligibility(provider: string, model: string, observation: {
-    class: EligibilityClass;
-    scope: EligibilityScope;
-}, opts?: {
-    path?: string;
-    now?: number;
-    retryAfterMs?: number | null;
-}): void;
-/** The live observation covering a deployment (its own, else its provider's), or null. */
-export declare function observedEligibility(provider: string, model: string | null | undefined, opts?: {
-    path?: string;
-    now?: number;
-}): {
-    class: EligibilityClass;
-    scope: EligibilityScope;
-} | null;
-/**
- * Has this deployment been PROVEN unfit for a free pool?
- *
- * ⚠ True only for `not-servable` and `subscription-required`. `allowance-exhausted` is
- * deliberately absent and must stay absent — see the file header. A spent allowance says nothing
- * about what the deployment costs, and evicting it from the pool would outlive the exhaustion that
- * caused it.
- */
-export declare function isCostBlocked(provider: string, model: string | null | undefined, opts?: {
-    path?: string;
-    now?: number;
-}): boolean;
-/**
- * When a temporarily-unavailable deployment is worth trying again, or null when nothing is cooling
- * it. Only `allowance-exhausted` produces a cooldown — the other two classes are not cooling, they
- * are excluded, and a caller that wants those wants `isCostBlocked`.
- */
-export declare function cooldownUntil(provider: string, model: string | null | undefined, opts?: {
-    path?: string;
-    now?: number;
-}): number | null;
-/**
- * A success clears what the deployment previously refused — including its ACCOUNT record.
- *
- * A served request is first-party proof that the credential has allowance right now, which is a
- * strictly better signal than an hour-old 402 and covers the case that matters most: credits
- * topped up, or the month rolled over, well before the TTL would have expired. Same contract as
- * the breaker clearing a credential fault on success.
- */
-export declare function clearEligibility(provider: string, model: string | null | undefined, opts?: {
-    path?: string;
-}): void;
-/** Every live observation, for `llm-relay eligibility`. Expired entries are omitted, not reported. */
-export declare function allObservations(opts?: {
-    path?: string;
-    now?: number;
-}): Array<{
-    key: string;
-    class: EligibilityClass;
-    scope: EligibilityScope;
-    at: number;
-    until: number;
-}>;
-/** Flush pending observations. Called on shutdown, like the other write-behind stores. */
-export declare function flushEligibility(opts?: {
-    path?: string;
-}): void;
-/** Test seam: drop the in-memory store so a suite can point at a fresh path. */
-export declare function resetEligibility(): void;

package/dist/deployment-eligibility.js

@@ -1,188 +0,0 @@
-import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { homedir, tmpdir } from "node:os";
-import { WriteBehindTimer } from "./write-behind.js";
-/**
- * How long each class is believed without re-checking.
- *
- * All three expire, because all three are reversible: a de-listed model can come back, a plan can
- * be upgraded, and an allowance always refreshes. The spread reflects how fast each moves, and
- * `allowance-exhausted` is deliberately the SHORTEST — HuggingFace's included credits are monthly,
- * but cooling a whole provider for a month on one 402 would be catastrophic if the balance were
- * topped up an hour later. One re-probe an hour costs one request and is self-correcting; it also
- * matches the breaker's own `QUOTA_EXHAUSTED_COOLDOWN_MS`, so the two cannot disagree about when a
- * quota-exhausted target is worth trying again.
- */
-export const ELIGIBILITY_TTL_MS = {
-    "not-servable": 6 * 60 * 60 * 1000,
-    "subscription-required": 24 * 60 * 60 * 1000,
-    "allowance-exhausted": 60 * 60 * 1000,
-};
-let _store = null;
-let _path = null;
-const writer = new WriteBehindTimer();
-function defaultPath() {
-    // ⚠ Redirected under vitest for the same reason probe-cache and context-limits are: a test's
-    // synthetic refusal persisted here would evict a real deployment from the user's live pools.
-    if (process.env.VITEST !== undefined) {
-        return join(tmpdir(), `llm-relay-test-eligibility-${process.pid}.json`);
-    }
-    const xdg = process.env.XDG_CONFIG_HOME;
-    const baseDir = xdg && xdg.trim() ? join(xdg, "llm-relay") : join(homedir(), ".llm-relay");
-    return join(baseDir, "deployment-eligibility.json");
-}
-function deploymentKey(provider, model) {
-    return `${provider}/${model}`;
-}
-function accountKey(provider) {
-    return `${provider}/*`;
-}
-function load(path) {
-    if (_store && _path === path)
-        return _store;
-    _path = path;
-    try {
-        const parsed = JSON.parse(readFileSync(path, "utf8"));
-        if (parsed && typeof parsed === "object" && parsed.observations && typeof parsed.observations === "object") {
-            _store = { version: 1, observations: parsed.observations };
-            return _store;
-        }
-    }
-    catch {
-        // Unreadable or corrupt: start clean. Everything here is a re-learnable optimization — the
-        // worst consequence of losing the file is one wasted round-trip per deployment.
-    }
-    _store = { version: 1, observations: {} };
-    return _store;
-}
-function persist(path) {
-    if (!_store)
-        return;
-    try {
-        mkdirSync(join(path, ".."), { recursive: true });
-        const tmp = `${path}.${process.pid}.tmp`;
-        writeFileSync(tmp, JSON.stringify(_store, null, 2) + "\n", "utf8");
-        renameSync(tmp, path);
-    }
-    catch {
-        // Same contract as every other store here: a full disk is a storage problem, never a request
-        // failure. The observation stays in memory for this process's lifetime.
-    }
-}
-/**
- * Record what a deployment stated about itself. A fresh observation always replaces an older one:
- * the deployment is the authority, and one that changed its answer is telling us so.
- */
-export function recordEligibility(provider, model, observation, opts = {}) {
-    const path = opts.path ?? defaultPath();
-    const store = load(path);
-    const now = opts.now ?? Date.now();
-    const key = observation.scope === "account" ? accountKey(provider) : deploymentKey(provider, model);
-    const stated = typeof opts.retryAfterMs === "number" && opts.retryAfterMs > 0 ? opts.retryAfterMs : null;
-    store.observations[key] = {
-        class: observation.class,
-        scope: observation.scope,
-        at: now,
-        // A vendor-stated reset beats our TTL, exactly as it does for the breaker's cooldown: the
-        // provider knows when its own allowance refreshes and we are guessing.
-        ...(stated !== null ? { until: now + stated } : {}),
-    };
-    writer.touch(() => persist(path));
-}
-/** The live observation covering a deployment (its own, else its provider's), or null. */
-export function observedEligibility(provider, model, opts = {}) {
-    const path = opts.path ?? defaultPath();
-    const store = load(path);
-    const now = opts.now ?? Date.now();
-    const keys = typeof model === "string" ? [deploymentKey(provider, model), accountKey(provider)] : [accountKey(provider)];
-    for (const key of keys) {
-        const hit = store.observations[key];
-        if (!hit)
-            continue;
-        const expiry = hit.until ?? hit.at + (ELIGIBILITY_TTL_MS[hit.class] ?? 0);
-        if (now >= expiry)
-            continue;
-        return { class: hit.class, scope: hit.scope };
-    }
-    return null;
-}
-/**
- * Has this deployment been PROVEN unfit for a free pool?
- *
- * ⚠ True only for `not-servable` and `subscription-required`. `allowance-exhausted` is
- * deliberately absent and must stay absent — see the file header. A spent allowance says nothing
- * about what the deployment costs, and evicting it from the pool would outlive the exhaustion that
- * caused it.
- */
-export function isCostBlocked(provider, model, opts = {}) {
-    const hit = observedEligibility(provider, model, opts);
-    return hit !== null && hit.class !== "allowance-exhausted";
-}
-/**
- * When a temporarily-unavailable deployment is worth trying again, or null when nothing is cooling
- * it. Only `allowance-exhausted` produces a cooldown — the other two classes are not cooling, they
- * are excluded, and a caller that wants those wants `isCostBlocked`.
- */
-export function cooldownUntil(provider, model, opts = {}) {
-    const path = opts.path ?? defaultPath();
-    const store = load(path);
-    const now = opts.now ?? Date.now();
-    const keys = typeof model === "string" ? [deploymentKey(provider, model), accountKey(provider)] : [accountKey(provider)];
-    for (const key of keys) {
-        const hit = store.observations[key];
-        if (!hit || hit.class !== "allowance-exhausted")
-            continue;
-        const expiry = hit.until ?? hit.at + ELIGIBILITY_TTL_MS[hit.class];
-        if (now < expiry)
-            return expiry;
-    }
-    return null;
-}
-/**
- * A success clears what the deployment previously refused — including its ACCOUNT record.
- *
- * A served request is first-party proof that the credential has allowance right now, which is a
- * strictly better signal than an hour-old 402 and covers the case that matters most: credits
- * topped up, or the month rolled over, well before the TTL would have expired. Same contract as
- * the breaker clearing a credential fault on success.
- */
-export function clearEligibility(provider, model, opts = {}) {
-    const path = opts.path ?? defaultPath();
-    const store = load(path);
-    let changed = false;
-    for (const key of typeof model === "string" ? [deploymentKey(provider, model), accountKey(provider)] : [accountKey(provider)]) {
-        if (store.observations[key]) {
-            delete store.observations[key];
-            changed = true;
-        }
-    }
-    if (changed)
-        writer.touch(() => persist(path));
-}
-/** Every live observation, for `llm-relay eligibility`. Expired entries are omitted, not reported. */
-export function allObservations(opts = {}) {
-    const store = load(opts.path ?? defaultPath());
-    const now = opts.now ?? Date.now();
-    const out = [];
-    for (const [key, hit] of Object.entries(store.observations)) {
-        const until = hit.until ?? hit.at + (ELIGIBILITY_TTL_MS[hit.class] ?? 0);
-        if (now >= until)
-            continue;
-        out.push({ key, class: hit.class, scope: hit.scope, at: hit.at, until });
-    }
-    return out.sort((a, b) => b.at - a.at);
-}
-/** Flush pending observations. Called on shutdown, like the other write-behind stores. */
-export function flushEligibility(opts = {}) {
-    if (!writer.dirty)
-        return;
-    writer.clear();
-    persist(opts.path ?? defaultPath());
-}
-/** Test seam: drop the in-memory store so a suite can point at a fresh path. */
-export function resetEligibility() {
-    _store = null;
-    _path = null;
-    writer.clear();
-}
-//# sourceMappingURL=deployment-eligibility.js.map

package/dist/deployment-eligibility.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"deployment-eligibility.js","sourceRoot":"","sources":["../src/deployment-eligibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAyErD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAqC;IAClE,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IAClC,uBAAuB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IAC5C,qBAAqB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;CACtC,CAAC;AAEF,IAAI,MAAM,GAA4B,IAAI,CAAC;AAC3C,IAAI,KAAK,GAAkB,IAAI,CAAC;AAChC,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;AAEtC,SAAS,WAAW;IAClB,6FAA6F;IAC7F,6FAA6F;IAC7F,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,8BAA8B,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,MAAM,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,KAAa;IACpD,OAAO,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,GAAG,QAAQ,IAAI,CAAC;AACzB,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,IAAI,MAAM,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC5C,KAAK,GAAG,IAAI,CAAC;IACb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA8B,CAAC;QACnF,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC3G,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAA2C,EAAE,CAAC;YAC1F,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2FAA2F;QAC3F,gFAAgF;IAClF,CAAC;IACD,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACnE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,6FAA6F;QAC7F,wEAAwE;IAC1E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,KAAa,EACb,WAAiE,EACjE,OAAsE,EAAE;IAExE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IACzG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG;QACxB,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,EAAE,EAAE,GAAG;QACP,0FAA0F;QAC1F,uEAAuE;QACvE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,KAAgC,EAChC,OAAwC,EAAE;IAE1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,IAAI,GAAG,IAAI,MAAM;YAAE,SAAS;QAC5B,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,KAAgC,EAChC,OAAwC,EAAE;IAE1C,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACvD,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,qBAAqB,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,KAAgC,EAChC,OAAwC,EAAE;IAE1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,qBAAqB;YAAE,SAAS;QAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,GAAG,GAAG,MAAM;YAAE,OAAO,MAAM,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,KAAgC,EAAE,OAA0B,EAAE;IAC/G,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9H,IAAI,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,eAAe,CAC7B,OAAwC,EAAE;IAE1C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,GAAG,GAAwG,EAAE,CAAC;IACpH,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,IAAI,GAAG,IAAI,KAAK;YAAE,SAAS;QAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,OAA0B,EAAE;IAC3D,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO;IAC1B,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,IAAI,CAAC;IACd,KAAK,GAAG,IAAI,CAAC;IACb,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC"}