Module fleet_exact 

Exact named-Fleet schema — fully resolved members, no late model choice.

A named Fleet is a saved, reusable team. Two forms of fleets/<name>.toml exist and both keep working:

• Legacy ([roles] role → AgentProfile id). See crate::NamedFleet. Legacy files declare no schema key, which is what makes the legacy form explicitly detectable rather than inferred from a missing table.
• Exact (schema = "exact"). Every member owns a stable member id/role, an exact configured provider id, an exact model id, a requested reasoning policy, and a permission ceiling.

The exact form deliberately has no late-binding selectors. inherit, faster/fast siblings, model-strength classes, and model = "auto" are rejected at parse time, not silently resolved later — a Fleet the operator saved is the Fleet that runs. Users switch Fleets; models never switch themselves.

The Adaptive Reasoning Router is not a Fleet member. A Fleet says who runs; a Router is a separate, optional, reusable service that decides only how hard an already frozen route thinks. An exact Fleet points at one by name — reasoning_router = "luna-low" — and the same saved profile may be referenced by any number of Fleets. See crate::reasoning_router.

The prototype form ([[members]] with kind = "router") still parses, is labelled legacy inline, and normalizes into the same captured service. It is retained for compatibility only; it is not a second runtime concept.

Structs

ExactFleet

A parsed exact Fleet.

ExactMember

A dispatchable exact Fleet member.

FrozenRoute

The exact provider/model a member is frozen to before any reasoning resolution runs. Nothing downstream may change these two strings.

PermissionCeiling

The most a member is allowed to do. This is a ceiling, never a grant: PermissionCeiling::clamp_to can only ever narrow against the active session posture, so a saved Fleet can never raise live authority.

RouterMember

The legacy inline Router form: a [[members]] entry with kind = "router".

Enums

ExactFleetError

ReasoningTier

A concrete reasoning tier. Unlike RequestedReasoning this has no auto — it is what a request actually runs at.

RequestedReasoning

The reasoning policy a member requests. Auto is an explicit per-member opt-in, never a global mode.

ShellCeiling

Shell posture, ordered most → least restrictive so min_with is the safe side of a clamp.

Constants

EXACT_FLEET_SCHEMA_KIND

Wire value of the schema key that selects the exact form.

EXACT_FLEET_SCHEMA_REVISION

Current revision of the exact schema.

LEGACY_FLEET_SCHEMA_KIND

Wire value recorded for files in the pre-exact role→profile form.

ROLE_ALIASES

Public role names that were renamed, and what they are now called.

ROUTER_MEMBER_KIND

Member kind that selects the Fleet Router.

ROUTER_PUBLIC_ID

The Router’s public id. A Router is addressed by this literal everywhere a receipt, decision, or error names it, whatever the file called the member. No worker may claim it — see ExactFleetError::ReservedRouterIdentity.

ROUTER_PUBLIC_ROLE

The Router’s public role. Identical to ROUTER_PUBLIC_ID: a Router has exactly one identity and it is not a dispatchable role.

WORKER_MEMBER_KIND

Member kind for an ordinary dispatchable worker.

Functions

canonical_member_key

The case-folded key a member id compares under.

canonical_role_key

The canonical, case-folded key a role compares under.

declared_schema_kind

Peek at a fleet document’s schema key without committing to a form.