@agent-finops/core 0.9.3 → 0.9.5

package/dist/modelPricing.d.ts

@@ -7,7 +7,7 @@
  * matched top-down; first match wins. Unknown models return undefined so
  * callers can label the record "missing" instead of inventing a number.
  */
-export declare const PRICING_TABLE_AS_OF = "2026-08-16";
+export declare const PRICING_TABLE_AS_OF = "2026-08-25";
 export type TokenUsage = {
     /** Billable, uncached input tokens. */
     inputTokens: number;

package/dist/modelPricing.js

@@ -7,7 +7,7 @@
  * matched top-down; first match wins. Unknown models return undefined so
  * callers can label the record "missing" instead of inventing a number.
  */
-export const PRICING_TABLE_AS_OF = "2026-08-16";
+export const PRICING_TABLE_AS_OF = "2026-08-25";
 const pricingRules = [
     // Anthropic
     { match: /^claude-fable-5/i, inputPerM: 10, outputPerM: 50 },
@@ -93,14 +93,35 @@ const pricingRules = [
     // DeepSeek (official API list prices)
     { match: /^deepseek-chat|^deepseek-v3/i, inputPerM: 0.27, outputPerM: 1.1 },
     { match: /^deepseek-reasoner|^deepseek-r1/i, inputPerM: 0.55, outputPerM: 2.19 },
-    // Moonshot / Kimi (official API list prices)
-    { match: /^kimi-k2|^moonshot/i, inputPerM: 0.6, outputPerM: 2.5 },
+    // Moonshot / Kimi (official list prices, platform.kimi.ai/docs/pricing/*,
+    // fetched 2026-08-25; cache-hit input is a distinct published rate). Order
+    // matters: k2.7-code-highspeed before its k2.7-code prefix, dot families
+    // before the legacy K2 rule.
+    // ^kimi-k3 also covers the Anthropic-style "kimi-k3[1m]" context suffix.
+    { match: /^kimi-k3/i, inputPerM: 3, outputPerM: 15, cacheReadPerM: 0.3 },
+    { match: /^kimi-k2\.7-code-highspeed/i, inputPerM: 1.9, outputPerM: 8, cacheReadPerM: 0.38 },
+    { match: /^kimi-k2\.7-code/i, inputPerM: 0.95, outputPerM: 4, cacheReadPerM: 0.19 },
+    { match: /^kimi-k2\.6/i, inputPerM: 0.95, outputPerM: 4, cacheReadPerM: 0.16 },
+    // Legacy K2 (kimi-k2, kimi-k2-*) and moonshot-v1-* (sunset 2026-08-31 —
+    // still prices past transcripts). Deliberately does NOT match the dot
+    // families above: 0.9.3's `^kimi-k2` prefix silently priced kimi-k2.7-code
+    // at these old K2 rates (~$0.60/$2.50 vs the real $0.95/$4.00).
+    { match: /^kimi-k2(?:$|-)|^moonshot/i, inputPerM: 0.6, outputPerM: 2.5 },
     // xAI / Grok (official API list prices)
     { match: /^grok-4|^grok-3$/i, inputPerM: 3, outputPerM: 15 },
     { match: /^grok-3-mini/i, inputPerM: 0.3, outputPerM: 0.5 },
     // Open-weight models with NO canonical price (llama, qwen, mistral, glm):
     // hosting rates vary several-fold by provider, so we deliberately return
     // undefined -> costConfidence "missing" instead of inventing a number.
+    //
+    // Deliberate deferrals (2026-08-25 CN-provider review), same honest path:
+    // - First-party Qwen commercial models (qwen3.x-max/plus/flash): the
+    //   canonical Model Studio price list is console-gated and aggregator
+    //   numbers have been wrong for this vendor family before — no rule until
+    //   a canonical price is verified.
+    // - deepseek-v4-* (api-docs.deepseek.com/quick_start/pricing): published
+    //   rates are time-of-day (off-peak = half price, up to 2x swing), so any
+    //   flat number here would be dishonest; needs timestamp-aware pricing.
 ];
 export function findPricingRule(model) {
     return pricingRules.find((rule) => rule.match.test(model));

package/dist/planMath.js

@@ -50,7 +50,7 @@ export function computePlanChecks(records, detectedPlans = []) {
         if (detectedKnown) {
             // The label comes from local metadata or an explicit override. It is not
             // independently verified against the provider account.
-            valueMultiple = Math.round((monthly / detectedKnown.monthlyUsd) * 10) / 10;
+            valueMultiple = roundValueMultiple(monthly / detectedKnown.monthlyUsd);
             const savingsVsApi = roundMoney(monthly - detectedKnown.monthlyUsd);
             effectiveSavings = savingsVsApi > 0 ? savingsVsApi : undefined;
             headline =
@@ -81,7 +81,7 @@ export function computePlanChecks(records, detectedPlans = []) {
         }
         else {
             const covered = suggested && typeof savings === "number" && savings > 0;
-            valueMultiple = covered ? Math.round((monthly / suggested.monthlyUsd) * 10) / 10 : undefined;
+            valueMultiple = covered ? roundValueMultiple(monthly / suggested.monthlyUsd) : undefined;
             effectiveSavings = covered ? savings : undefined;
             if (!suggested) {
                 headline = `${agent}: ~${formatUsd(monthly)}/mo at API rates (${basis}).`;
@@ -115,4 +115,16 @@ function formatUsd(value) {
         return "<$0.01";
     return `$${value.toFixed(2)}`;
 }
+/**
+ * Display rounding for the plan-price multiple. One decimal at >= 1x
+ * ("~24.3x" stays as-is); TWO decimals below 1x so a small-but-real
+ * multiple never renders "~0x" (founder's live case: $9.63/mo vs a
+ * $200/mo plan printed "~0x" — now "~0.05x"), floored at 0.01 for any
+ * positive ratio so the tilde always marks a nonzero approximation.
+ */
+function roundValueMultiple(ratio) {
+    if (ratio >= 1)
+        return Math.round(ratio * 10) / 10;
+    return Math.max(0.01, Math.round(ratio * 100) / 100);
+}
 //# sourceMappingURL=planMath.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-finops/core",
-  "version": "0.9.3",
+  "version": "0.9.5",
   "funding": "https://asktilden.com",
   "type": "module",
   "main": "./dist/index.js",

package/dist/emailAddress.d.ts

@@ -1,7 +0,0 @@
-/**
- * One intentionally pragmatic normalizer for waitlist and receipt-email
- * boundaries. It prevents header/control injection without pretending to be
- * a mailbox-verification system; ownership still requires an explicit flow.
- */
-export declare function normalizeAibillEmailAddress(value: string): string | undefined;
-//# sourceMappingURL=emailAddress.d.ts.map

package/dist/emailAddress.js

@@ -1,16 +0,0 @@
-const controlCharacters = /[\u0000-\u001F\u007F]/u;
-const pragmaticEmailAddress = /^[^\s@]+@[^\s@]+\.[^\s@]+$/u;
-/**
- * One intentionally pragmatic normalizer for waitlist and receipt-email
- * boundaries. It prevents header/control injection without pretending to be
- * a mailbox-verification system; ownership still requires an explicit flow.
- */
-export function normalizeAibillEmailAddress(value) {
-    const normalized = value.trim().toLowerCase();
-    if (normalized.length < 3 || normalized.length > 254)
-        return undefined;
-    if (controlCharacters.test(normalized))
-        return undefined;
-    return pragmaticEmailAddress.test(normalized) ? normalized : undefined;
-}
-//# sourceMappingURL=emailAddress.js.map