@agentguard-run/spend 0.15.1 → 0.15.3

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG7D,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,eAAe,EACf,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,EACf,KAAK,SAAS,GACf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAGvK,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,cAAc,GACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,yBAAyB,EACzB,8BAA8B,EAC9B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,GACjC,MAAM,wBAAwB,CAAC;AAKhC,YAAY,EACV,UAAU,EACV,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAChK,OAAO,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG/J,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EACT,uBAAuB,EACvB,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGxG,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,wBAAwB,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGvG,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,KAAK,eAAe,EACpB,aAAa,EACb,CAAC,EACD,kBAAkB,EAClB,KAAK,gBAAgB,GACtB,MAAM,QAAQ,CAAC;AAEhB,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAGjD,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,aAAa,QAG8B,CAAC;AACzD,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,OAAO,CAAC;AAEtB,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG7D,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,eAAe,EACf,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,EACf,KAAK,SAAS,GACf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAGvK,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,cAAc,GACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,yBAAyB,EACzB,8BAA8B,EAC9B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,GACjC,MAAM,wBAAwB,CAAC;AAKhC,YAAY,EACV,UAAU,EACV,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAChK,OAAO,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG/J,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EACT,uBAAuB,EACvB,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGxG,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,wBAAwB,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGvG,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,KAAK,eAAe,EACpB,aAAa,EACb,CAAC,EACD,kBAAkB,EAClB,KAAK,gBAAgB,GACtB,MAAM,QAAQ,CAAC;AAEhB,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAGjD,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,aAAa,QAG8B,CAAC;AACzD,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,OAAO,CAAC;AAEtB,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EACL,eAAe,EACf,cAAc,EACd,aAAa,EACb,UAAU,EACV,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,QAAQ,EACb,KAAK,SAAS,GACf,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -23,7 +23,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.computeDagEntryHash = exports.compressReceiptDag = exports.receiptSchemaVersion = exports.isReceiptV3 = exports.assertReceiptV3 = exports.isOpenRouterHost = exports.clearManagedOpenRouterKeyCache = exports.fetchManagedOpenRouterKey = exports.modelCostFromOpenRouter = exports.persistOverrides = exports.syncPricingIntoCostTable = exports.getCachedCatalog = exports.fetchCatalog = exports.recordTelemetryEvent = exports.resetTelemetryInstallId = exports.disableTelemetry = exports.enableTelemetry = exports.telemetryStatus = exports.licenseKeyFingerprint = exports.clearConfiguredLicenseKey = exports.writeConfiguredLicenseKey = exports.readConfiguredLicenseKey = exports.validateAndRegisterLicense = exports.validateLicenseKey = exports.AgentGuardLicenseRequiredError = exports.InMemorySpendStore = exports.InMemoryDecisionLogStore = exports.GENESIS_PREVIOUS_HASH = exports.verifyChain = exports.verifyEntry = exports.signDecision = exports.computeSignerFingerprint = exports.computeEntryHash = exports.sha256Hex = exports.canonicalJson = exports.BUILT_IN_KEYWORD_WATCHLISTS = exports.findCustomKeywordWatchlists = exports.enforcePolicyLicenseGates = exports.adjustPolicyWindowSpend = exports.buildScopeKey = exports.evaluatePolicy = exports.knownModelCosts = exports.persistCostOverrides = exports.loadPersistedCostOverrides = exports.listCostOverrides = exports.inferProvider = exports.computeCallCents = exports.clearCostOverrides = exports.setCostOverride = exports.getModelCost = void 0;
 exports.formatBlockedTrace = exports.t = exports.resolveLocale = exports.TRANSLATIONS = exports.SUPPORTED_LOCALES = exports.DEFAULT_LOCALE = exports.defaultKey = exports.recommend = exports.withSpendGuardBedrock = exports.withSpendGuardAnthropic = exports.AgentGuardBlockedError = exports.withSpendGuard = exports.SpendGuard = exports.writeAdvisorOutputs = exports.createAdvisorSessionLogger = exports.resolveAdvisorApiKey = exports.createAdvisorClient = exports.projectedSavings = exports.buildPolicyFromProfile = exports.buildBusinessProfile = exports.AdvisorConversation = exports.AgentGuardWorkflowStateError = exports.AgentGuardDurationCapError = exports.AgentGuardChainCorruptError = exports.AgentGuardBudgetCapError = exports.validateReceiptChain = exports.computeChainHash = exports.WorkflowContext = exports.workflow = exports.verifyConsentReceipt = exports.enforceCompliance = exports.AgentGuardConsentRequiredError = exports.AgentGuardComplianceError = exports.isForeignOriginModel = exports.inferCompliance = exports.inferHosting = exports.inferModelIdentity = exports.inferProviderRoute = exports.PROVIDER_REGISTRY = exports.captureProvenance = exports.verifyReceiptDag = exports.verifyInclusion = exports.signDagNode = exports.msgHashForDecision = exports.merkleRoot = exports.merkleInclusionProof = exports.gateCapability = exports.deriveTrustScore = exports.deriveCapability = exports.dagEnvelopeFromEntries = void 0;
-exports.PATENT_NOTICE = exports.agentguard = exports.AGENTGUARD_SPEND_VERSION = void 0;
+exports.formatLineage = exports.workloadProvenance = exports.centsToUsd = exports.decisionCents = exports.classifyOrigin = exports.aggregateLedger = exports.PATENT_NOTICE = exports.agentguard = exports.AGENTGUARD_SPEND_VERSION = void 0;
 const context_1 = require("./workflow/context");
 // Cost table
 var cost_table_1 = require("./cost-table");
@@ -160,7 +160,7 @@ Object.defineProperty(exports, "TRANSLATIONS", { enumerable: true, get: function
 Object.defineProperty(exports, "resolveLocale", { enumerable: true, get: function () { return i18n_1.resolveLocale; } });
 Object.defineProperty(exports, "t", { enumerable: true, get: function () { return i18n_1.t; } });
 Object.defineProperty(exports, "formatBlockedTrace", { enumerable: true, get: function () { return i18n_1.formatBlockedTrace; } });
-exports.AGENTGUARD_SPEND_VERSION = '0.15.1';
+exports.AGENTGUARD_SPEND_VERSION = '0.15.2';
 exports.agentguard = {
     workflow: context_1.workflow,
 };
@@ -174,4 +174,14 @@ __exportStar(require("./governance"), exports);
 __exportStar(require("./byo"), exports);
 __exportStar(require("./frameworks"), exports);
 __exportStar(require("./operating-pack"), exports);
+// CFO cost dashboard (read side)
+var aggregate_1 = require("./dashboard/aggregate");
+Object.defineProperty(exports, "aggregateLedger", { enumerable: true, get: function () { return aggregate_1.aggregateLedger; } });
+Object.defineProperty(exports, "classifyOrigin", { enumerable: true, get: function () { return aggregate_1.classifyOrigin; } });
+Object.defineProperty(exports, "decisionCents", { enumerable: true, get: function () { return aggregate_1.decisionCents; } });
+Object.defineProperty(exports, "centsToUsd", { enumerable: true, get: function () { return aggregate_1.centsToUsd; } });
+// Model-agnostic provenance that survives hot-swap
+var portability_1 = require("./receipts/portability");
+Object.defineProperty(exports, "workloadProvenance", { enumerable: true, get: function () { return portability_1.workloadProvenance; } });
+Object.defineProperty(exports, "formatLineage", { enumerable: true, get: function () { return portability_1.formatLineage; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;AAEH,gDAA6D;AAmB7D,aAAa;AACb,2CAWsB;AAVpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,gHAAA,kBAAkB,OAAA;AAClB,8GAAA,gBAAgB,OAAA;AAChB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,wHAAA,0BAA0B,OAAA;AAC1B,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAIjB,gBAAgB;AAChB,mCAAuK;AAA9J,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,iHAAA,uBAAuB,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAEpJ,eAAe;AACf,+CAUwB;AATtB,6GAAA,aAAa,OAAA;AACb,yGAAA,SAAS,OAAA;AACT,gHAAA,gBAAgB,OAAA;AAChB,wHAAA,wBAAwB,OAAA;AACxB,4GAAA,YAAY,OAAA;AACZ,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,qHAAA,qBAAqB,OAAA;AACrB,wHAAA,wBAAwB,OAAA;AAG1B,wBAAwB;AACxB,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,mBAAmB;AACnB,qCAWmB;AAVjB,yHAAA,8BAA8B,OAAA;AAC9B,6GAAA,kBAAkB,OAAA;AAClB,qHAAA,0BAA0B,OAAA;AAC1B,mHAAA,wBAAwB,OAAA;AACxB,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AAMvB,qBAAqB;AACrB,yCAOqB;AANnB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AAItB,qBAAqB;AACrB,2DAS8B;AAR5B,kHAAA,YAAY,OAAA;AACZ,sHAAA,gBAAgB,OAAA;AAChB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,6HAAA,uBAAuB,OAAA;AAMzB,oDAMgC;AAL9B,sHAAA,yBAAyB,OAAA;AACzB,2HAAA,8BAA8B,OAAA;AAC9B,6GAAA,gBAAgB,OAAA;AAoBlB,4CAAuF;AAA9E,yGAAA,eAAe,OAAA;AAAE,qGAAA,WAAW,OAAA;AAAE,8GAAA,oBAAoB,OAAA;AAC3D,sCAuBwB;AAtBtB,yGAAA,kBAAkB,OAAA;AAClB,0GAAA,mBAAmB,OAAA;AACnB,6GAAA,sBAAsB,OAAA;AACtB,uGAAA,gBAAgB,OAAA;AAChB,uGAAA,gBAAgB,OAAA;AAChB,qGAAA,cAAc,OAAA;AACd,2GAAA,oBAAoB,OAAA;AACpB,iGAAA,UAAU,OAAA;AACV,yGAAA,kBAAkB,OAAA;AAClB,kGAAA,WAAW,OAAA;AACX,sGAAA,eAAe,OAAA;AACf,uGAAA,gBAAgB,OAAA;AAYlB,sDAAuG;AAA9F,+GAAA,iBAAiB,OAAA;AAC1B,oEAAgK;AAAvJ,sHAAA,iBAAiB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,iHAAA,YAAY,OAAA;AAAE,oHAAA,eAAe,OAAA;AAAE,yHAAA,oBAAoB,OAAA;AACvH,6CAA+J;AAAtJ,oHAAA,yBAAyB,OAAA;AAAE,yHAAA,8BAA8B,OAAA;AAAE,4GAAA,iBAAiB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AAE3G,qBAAqB;AACrB,8CAA+D;AAAtD,mGAAA,QAAQ,OAAA;AAAE,0GAAA,eAAe,OAAA;AAClC,8DAAoF;AAA3E,mHAAA,gBAAgB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAC/C,4CAK2B;AAJzB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,oHAAA,0BAA0B,OAAA;AAC1B,sHAAA,4BAA4B,OAAA;AAY9B,sBAAsB;AACtB,uDAOgC;AAN9B,mHAAA,mBAAmB,OAAA;AACnB,oHAAA,oBAAoB,OAAA;AACpB,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAIlB,mDAA2H;AAAlH,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAClD,2CAAwG;AAA/F,oHAAA,0BAA0B,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAExD,eAAe;AACf,6CAQuB;AAPrB,yGAAA,UAAU,OAAA;AACV,6GAAA,cAAc,OAAA;AACd,qHAAA,sBAAsB,OAAA;AAOxB,kDAA6F;AAApF,oHAAA,uBAAuB,OAAA;AAChC,8CAAuF;AAA9E,gHAAA,qBAAqB,OAAA;AAC9B,mCAAuG;AAA9F,mGAAA,SAAS,OAAA;AAAE,oGAAA,UAAU,OAAA;AAE9B,sCAAsC;AACtC,+BASgB;AARd,sGAAA,cAAc,OAAA;AACd,yGAAA,iBAAiB,OAAA;AACjB,oGAAA,YAAY,OAAA;AAEZ,qGAAA,aAAa,OAAA;AACb,yFAAA,CAAC,OAAA;AACD,0GAAA,kBAAkB,OAAA;AAIP,QAAA,wBAAwB,GAAG,QAAQ,CAAC;AAGpC,QAAA,UAAU,GAAG;IACxB,QAAQ,EAAE,kBAAW;CACtB,CAAC;AAEF,2DAA2D;AAC9C,QAAA,aAAa,GACxB,8CAA8C;IAC9C,6DAA6D;IAC7D,sDAAsD,CAAC;AACzD,6CAA2B;AAC3B,8CAA4B;AAC5B,+CAA6B;AAC7B,wCAAsB;AAEtB,+CAA6B;AAC7B,mDAAiC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;AAEH,gDAA6D;AAmB7D,aAAa;AACb,2CAWsB;AAVpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,gHAAA,kBAAkB,OAAA;AAClB,8GAAA,gBAAgB,OAAA;AAChB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,wHAAA,0BAA0B,OAAA;AAC1B,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAIjB,gBAAgB;AAChB,mCAAuK;AAA9J,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,iHAAA,uBAAuB,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAEpJ,eAAe;AACf,+CAUwB;AATtB,6GAAA,aAAa,OAAA;AACb,yGAAA,SAAS,OAAA;AACT,gHAAA,gBAAgB,OAAA;AAChB,wHAAA,wBAAwB,OAAA;AACxB,4GAAA,YAAY,OAAA;AACZ,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,qHAAA,qBAAqB,OAAA;AACrB,wHAAA,wBAAwB,OAAA;AAG1B,wBAAwB;AACxB,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,mBAAmB;AACnB,qCAWmB;AAVjB,yHAAA,8BAA8B,OAAA;AAC9B,6GAAA,kBAAkB,OAAA;AAClB,qHAAA,0BAA0B,OAAA;AAC1B,mHAAA,wBAAwB,OAAA;AACxB,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AAMvB,qBAAqB;AACrB,yCAOqB;AANnB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AAItB,qBAAqB;AACrB,2DAS8B;AAR5B,kHAAA,YAAY,OAAA;AACZ,sHAAA,gBAAgB,OAAA;AAChB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,6HAAA,uBAAuB,OAAA;AAMzB,oDAMgC;AAL9B,sHAAA,yBAAyB,OAAA;AACzB,2HAAA,8BAA8B,OAAA;AAC9B,6GAAA,gBAAgB,OAAA;AAoBlB,4CAAuF;AAA9E,yGAAA,eAAe,OAAA;AAAE,qGAAA,WAAW,OAAA;AAAE,8GAAA,oBAAoB,OAAA;AAC3D,sCAuBwB;AAtBtB,yGAAA,kBAAkB,OAAA;AAClB,0GAAA,mBAAmB,OAAA;AACnB,6GAAA,sBAAsB,OAAA;AACtB,uGAAA,gBAAgB,OAAA;AAChB,uGAAA,gBAAgB,OAAA;AAChB,qGAAA,cAAc,OAAA;AACd,2GAAA,oBAAoB,OAAA;AACpB,iGAAA,UAAU,OAAA;AACV,yGAAA,kBAAkB,OAAA;AAClB,kGAAA,WAAW,OAAA;AACX,sGAAA,eAAe,OAAA;AACf,uGAAA,gBAAgB,OAAA;AAYlB,sDAAuG;AAA9F,+GAAA,iBAAiB,OAAA;AAC1B,oEAAgK;AAAvJ,sHAAA,iBAAiB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,iHAAA,YAAY,OAAA;AAAE,oHAAA,eAAe,OAAA;AAAE,yHAAA,oBAAoB,OAAA;AACvH,6CAA+J;AAAtJ,oHAAA,yBAAyB,OAAA;AAAE,yHAAA,8BAA8B,OAAA;AAAE,4GAAA,iBAAiB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AAE3G,qBAAqB;AACrB,8CAA+D;AAAtD,mGAAA,QAAQ,OAAA;AAAE,0GAAA,eAAe,OAAA;AAClC,8DAAoF;AAA3E,mHAAA,gBAAgB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAC/C,4CAK2B;AAJzB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,oHAAA,0BAA0B,OAAA;AAC1B,sHAAA,4BAA4B,OAAA;AAY9B,sBAAsB;AACtB,uDAOgC;AAN9B,mHAAA,mBAAmB,OAAA;AACnB,oHAAA,oBAAoB,OAAA;AACpB,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAIlB,mDAA2H;AAAlH,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAClD,2CAAwG;AAA/F,oHAAA,0BAA0B,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAExD,eAAe;AACf,6CAQuB;AAPrB,yGAAA,UAAU,OAAA;AACV,6GAAA,cAAc,OAAA;AACd,qHAAA,sBAAsB,OAAA;AAOxB,kDAA6F;AAApF,oHAAA,uBAAuB,OAAA;AAChC,8CAAuF;AAA9E,gHAAA,qBAAqB,OAAA;AAC9B,mCAAuG;AAA9F,mGAAA,SAAS,OAAA;AAAE,oGAAA,UAAU,OAAA;AAE9B,sCAAsC;AACtC,+BASgB;AARd,sGAAA,cAAc,OAAA;AACd,yGAAA,iBAAiB,OAAA;AACjB,oGAAA,YAAY,OAAA;AAEZ,qGAAA,aAAa,OAAA;AACb,yFAAA,CAAC,OAAA;AACD,0GAAA,kBAAkB,OAAA;AAIP,QAAA,wBAAwB,GAAG,QAAQ,CAAC;AAGpC,QAAA,UAAU,GAAG;IACxB,QAAQ,EAAE,kBAAW;CACtB,CAAC;AAEF,2DAA2D;AAC9C,QAAA,aAAa,GACxB,8CAA8C;IAC9C,6DAA6D;IAC7D,sDAAsD,CAAC;AACzD,6CAA2B;AAC3B,8CAA4B;AAC5B,+CAA6B;AAC7B,wCAAsB;AAEtB,+CAA6B;AAC7B,mDAAiC;AAEjC,iCAAiC;AACjC,mDAQ+B;AAP7B,4GAAA,eAAe,OAAA;AACf,2GAAA,cAAc,OAAA;AACd,0GAAA,aAAa,OAAA;AACb,uGAAA,UAAU,OAAA;AAMZ,mDAAmD;AACnD,sDAOgC;AAN9B,iHAAA,kBAAkB,OAAA;AAClB,4GAAA,aAAa,OAAA"}

package/dist/receipts/portability.d.ts

@@ -0,0 +1,76 @@
+/**
+ * AgentGuard® — model-agnostic provenance that survives hot-swap.
+ *
+ * The "headless" / model-fungibility problem (raised on All-In E280): teams want
+ * to hot-swap models — frontier → open-weight → self-hosted — per task to cut
+ * cost, but "no one has figured out how to abstract memory/context/AUDIT away
+ * from the model." A provider console can't help: it only sees its own tokens,
+ * and the trail breaks the moment you route to a different provider.
+ *
+ * AgentGuard's signed decision log already records, per call, which model served
+ * it (provenance) inside one continuous hash chain. This module reads that log
+ * and produces a PORTABLE, model-agnostic provenance manifest per workload: the
+ * ordered model lineage, every swap, the frontier/dark origin mix, and a single
+ * tamper-evidence verdict that spans the whole swap sequence. The audit is keyed
+ * to the workload, not the model — so it survives the swap.
+ *
+ * Honest scope note (same as the dashboard): the signed SpendDecision does not
+ * carry a first-class workload/agent id (only `triggeredScopeKey`). Callers pass
+ * a `keyOf` selector to group; the default uses `triggeredScopeKey`. We never
+ * invent a grouping the ledger does not support.
+ *
+ * Patent notice: signed hash-chained decision log (U.S. application filed May
+ * 2026); composes with DAG Trust Attestation, Patent D §7.3 (App. No.
+ * 63/984,626). AgentGuard® is a U.S. registered trademark (Reg. No. 8281464) of
+ * Dunecrest Ventures Inc.
+ */
+import type { SignedDecisionLogEntry, SpendDecision } from '../types';
+import { type TokenOrigin } from '../dashboard/aggregate';
+export interface ModelUse {
+    model: string;
+    origin: TokenOrigin;
+    provider: string;
+    calls: number;
+    cents: number;
+}
+export interface ModelSwap {
+    atSequence: number;
+    fromModel: string;
+    toModel: string;
+    fromOrigin: TokenOrigin;
+    toOrigin: TokenOrigin;
+    /** True when the swap crossed the frontier↔dark boundary (the audit-risky kind). */
+    crossesBoundary: boolean;
+}
+export interface WorkloadProvenance {
+    key: string;
+    calls: number;
+    spentCents: number;
+    frontierCents: number;
+    darkCents: number;
+    firstAt: string | null;
+    lastAt: string | null;
+    models: ModelUse[];
+    /** Ordered model lineage, e.g. ['claude-5','gpt-5-mini','glm-5.2']. */
+    lineage: string[];
+    swaps: ModelSwap[];
+}
+export interface WorkloadProvenanceReport {
+    workloads: WorkloadProvenance[];
+    /** Chain-level tamper evidence spans ALL swaps — the point of the manifest. */
+    continuity: {
+        verified: boolean;
+        entries: number;
+        reason?: string;
+    };
+}
+/**
+ * Build the portable per-workload provenance manifest from signed ledger
+ * entries. Pass the async `verifyChain` result as `continuity` so this stays a
+ * pure, synchronous function (never null-continuity in production — a manifest
+ * without tamper evidence is not the product).
+ */
+export declare function workloadProvenance(entries: SignedDecisionLogEntry[], continuity?: WorkloadProvenanceReport['continuity'], keyOf?: (d: SpendDecision) => string): WorkloadProvenanceReport;
+/** Human-readable lineage, e.g. "claude-5 → gpt-5-mini → glm-5.2". */
+export declare const formatLineage: (w: WorkloadProvenance) => string;
+//# sourceMappingURL=portability.d.ts.map

package/dist/receipts/portability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portability.d.ts","sourceRoot":"","sources":["../../src/receipts/portability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACtE,OAAO,EAAiC,KAAK,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEzF,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,WAAW,CAAC;IACxB,QAAQ,EAAE,WAAW,CAAC;IACtB,oFAAoF;IACpF,eAAe,EAAE,OAAO,CAAC;CAC1B;AACD,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnB,uEAAuE;IACvE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;CACpB;AACD,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,+EAA+E;IAC/E,UAAU,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE;AAID;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,sBAAsB,EAAE,EACjC,UAAU,GAAE,wBAAwB,CAAC,YAAY,CAA0D,EAC3G,KAAK,GAAE,CAAC,CAAC,EAAE,aAAa,KAAK,MAAqB,GACjD,wBAAwB,CA4E1B;AAED,sEAAsE;AACtE,eAAO,MAAM,aAAa,GAAI,GAAG,kBAAkB,KAAG,MAA+B,CAAC"}

package/dist/receipts/portability.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatLineage = void 0;
+exports.workloadProvenance = workloadProvenance;
+const aggregate_1 = require("../dashboard/aggregate");
+const defaultKeyOf = (d) => d.triggeredScopeKey ?? 'default';
+/**
+ * Build the portable per-workload provenance manifest from signed ledger
+ * entries. Pass the async `verifyChain` result as `continuity` so this stays a
+ * pure, synchronous function (never null-continuity in production — a manifest
+ * without tamper evidence is not the product).
+ */
+function workloadProvenance(entries, continuity = { verified: false, entries: 0, reason: 'NOT_CHECKED' }, keyOf = defaultKeyOf) {
+    const groups = new Map();
+    for (const entry of entries) {
+        const d = entry.decision;
+        const kind = d.entryType ?? 'decision';
+        if (kind !== 'decision')
+            continue; // settlements/outcomes don't add model steps
+        const key = keyOf(d);
+        const grp = groups.get(key) ?? {
+            calls: 0, spent: 0, frontier: 0, dark: 0, first: null, last: null,
+            models: new Map(), ordered: [],
+        };
+        const model = d.modelResolved || d.modelRequested || 'unknown';
+        const { origin } = (0, aggregate_1.classifyOrigin)(d);
+        const cents = (0, aggregate_1.decisionCents)(d);
+        grp.calls += 1;
+        grp.spent += cents;
+        if (origin === 'frontier')
+            grp.frontier += cents;
+        else if (origin === 'dark')
+            grp.dark += cents;
+        if (d.timestamp) {
+            if (!grp.first || d.timestamp < grp.first)
+                grp.first = d.timestamp;
+            if (!grp.last || d.timestamp > grp.last)
+                grp.last = d.timestamp;
+        }
+        const mu = grp.models.get(model) ?? { model, origin, provider: d.provider ?? 'unknown', calls: 0, cents: 0 };
+        mu.calls += 1;
+        mu.cents += cents;
+        grp.models.set(model, mu);
+        grp.ordered.push({ seq: entry.sequence, model, origin });
+        groups.set(key, grp);
+    }
+    const workloads = [];
+    for (const [key, grp] of groups) {
+        grp.ordered.sort((a, b) => a.seq - b.seq);
+        const swaps = [];
+        for (let i = 1; i < grp.ordered.length; i++) {
+            const prev = grp.ordered[i - 1];
+            const cur = grp.ordered[i];
+            if (cur.model !== prev.model) {
+                swaps.push({
+                    atSequence: cur.seq,
+                    fromModel: prev.model, toModel: cur.model,
+                    fromOrigin: prev.origin, toOrigin: cur.origin,
+                    crossesBoundary: prev.origin !== cur.origin
+                        && prev.origin !== 'unknown' && cur.origin !== 'unknown',
+                });
+            }
+        }
+        // lineage = models in first-appearance order (collapse consecutive repeats)
+        const lineage = [];
+        for (const step of grp.ordered)
+            if (lineage[lineage.length - 1] !== step.model)
+                lineage.push(step.model);
+        workloads.push({
+            key,
+            calls: grp.calls,
+            spentCents: grp.spent,
+            frontierCents: grp.frontier,
+            darkCents: grp.dark,
+            firstAt: grp.first,
+            lastAt: grp.last,
+            models: [...grp.models.values()].sort((a, b) => b.cents - a.cents),
+            lineage,
+            swaps,
+        });
+    }
+    workloads.sort((a, b) => b.spentCents - a.spentCents);
+    return { workloads, continuity };
+}
+/** Human-readable lineage, e.g. "claude-5 → gpt-5-mini → glm-5.2". */
+const formatLineage = (w) => w.lineage.join(' → ');
+exports.formatLineage = formatLineage;
+//# sourceMappingURL=portability.js.map

package/dist/receipts/portability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portability.js","sourceRoot":"","sources":["../../src/receipts/portability.ts"],"names":[],"mappings":";;;AAwEA,gDAgFC;AA7HD,sDAAyF;AAqCzF,MAAM,YAAY,GAAG,CAAC,CAAgB,EAAU,EAAE,CAAC,CAAC,CAAC,iBAAiB,IAAI,SAAS,CAAC;AAEpF;;;;;GAKG;AACH,SAAgB,kBAAkB,CAChC,OAAiC,EACjC,aAAqD,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAC3G,QAAsC,YAAY;IAOlD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAExC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC;QACvC,IAAI,IAAI,KAAK,UAAU;YAAE,SAAS,CAAC,6CAA6C;QAEhF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,GAAG,GAAU,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI;YACpC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YACjE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE;SAC/B,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,cAAc,IAAI,SAAS,CAAC;QAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAc,EAAC,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,IAAA,yBAAa,EAAC,CAAC,CAAC,CAAC;QAE/B,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC;QACnB,IAAI,MAAM,KAAK,UAAU;YAAE,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC;aAC5C,IAAI,MAAM,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC;QAC9C,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAChB,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK;gBAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC;YACnE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,IAAI;gBAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC;QAClE,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC7G,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC;QACd,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QAChC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC;oBACT,UAAU,EAAE,GAAG,CAAC,GAAG;oBACnB,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK;oBACzC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM;oBAC7C,eAAe,EAAE,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;2BACtC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;iBAC3D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,4EAA4E;QAC5E,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO;YAAE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzG,SAAS,CAAC,IAAI,CAAC;YACb,GAAG;YACH,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,GAAG,CAAC,KAAK;YACrB,aAAa,EAAE,GAAG,CAAC,QAAQ;YAC3B,SAAS,EAAE,GAAG,CAAC,IAAI;YACnB,OAAO,EAAE,GAAG,CAAC,KAAK;YAClB,MAAM,EAAE,GAAG,CAAC,IAAI;YAChB,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YAClE,OAAO;YACP,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IACtD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,sEAAsE;AAC/D,MAAM,aAAa,GAAG,CAAC,CAAqB,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAzE,QAAA,aAAa,iBAA4D"}

package/dist/telemetry.js

@@ -43,7 +43,7 @@ const https = __importStar(require("https"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const crypto_1 = require("crypto");
-const AGENTGUARD_SPEND_VERSION = '0.15.1';
+const AGENTGUARD_SPEND_VERSION = '0.15.2';
 const STATE_DIR = path.join(os.homedir(), '.agentguard');
 const INSTALL_PATH = path.join(STATE_DIR, 'install.json');
 const BEACON_URL = 'https://agentguard.run/api/beacon';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentguard-run/spend",
-  "version": "0.15.1",
+  "version": "0.15.3",
   "description": "All terminology and labels used in AgentGuard materials are descriptive of software functionality only, not legal definitions or guarantees of compliance. Terms like receipt, audit log, evidence, audit trail, and attestation refer solely to cryptographically-signed records produced by the software. Full functional-use disclaimer in README.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -148,14 +148,18 @@
     "src/cli/byo.ts",
     "docs/patents/CLAIM_MAPPING.md",
     "src/frameworks",
-    "src/operating-pack.ts"
+    "src/operating-pack.ts",
+    "src/dashboard"
   ],
   "scripts": {
     "build": "tsc",
     "prepublishOnly": "npm run build",
     "clean": "rm -rf dist dist-test",
-    "test": "AGENTGUARD_HOME=./dist-test/home tsc -p tsconfig.test.json && rm -rf dist-test/home && AGENTGUARD_HOME=./dist-test/home node --test dist-test/**/*.test.js",
-    "verify": "node dist/verify-test-vector.js"
+    "demo:attestation": "npx --yes tsx examples/dag-attestation-demo.ts",
+    "test": "AGENTGUARD_HOME=./dist-test/home tsc -p tsconfig.test.json && rm -rf dist-test/home && AGENTGUARD_HOME=./dist-test/home AGENTGUARD_LICENSE_ENDPOINT=http://127.0.0.1:9 node --test dist-test/**/*.test.js",
+    "verify": "node dist/verify-test-vector.js",
+    "demo:dashboard": "npx --yes tsx examples/cfo-dashboard-demo.ts",
+    "demo:hotswap": "npx --yes tsx examples/hot-swap-provenance-demo.ts"
   },
   "keywords": [
     "ai-agent-security",

package/src/dashboard/aggregate.test.ts

@@ -0,0 +1,103 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { aggregateLedger, classifyOrigin, decisionCents } from './aggregate';
+import type { SignedDecisionLogEntry, SpendDecision, Provider } from '../types';
+import type { ProvenanceProvider } from '../receipts/schema';
+
+let seq = 0;
+function entry(d: Partial<SpendDecision>): SignedDecisionLogEntry {
+  const decision: SpendDecision = {
+    decisionId: `d${seq}`,
+    timestamp: '2026-07-10T14:00:00.000Z',
+    action: 'allow',
+    triggeredCap: null,
+    triggeredScopeKey: null,
+    projectedCents: 0,
+    windowSpendBefore: 0,
+    windowSpendAfter: 0,
+    provider: 'openai',
+    modelRequested: 'gpt-5',
+    modelResolved: 'gpt-5',
+    policyId: 'p',
+    policyVersion: 1,
+    enforcementMode: 'enforce',
+    reasons: [],
+    ...d,
+  };
+  return {
+    sequence: seq++, decision, previousHash: '0'.repeat(64),
+    entryHash: 'x', signature: 'y', signerFingerprint: 'f',
+  };
+}
+function withProvenance(fam: ProvenanceProvider, route = 'api'): SpendDecision['provenance'] {
+  return {
+    model_identity: { provider: fam, model_id: 'm', model_version: '1', model_family: 'x', weights_origin_country: 'US' },
+    hosting: { provider_route: route, jurisdiction_country: 'US', jurisdiction_region: 'us' },
+    compliance: {
+      baa_in_force: false, baa_vendor: null, hipaa_eligible: false, data_retention_days: null,
+      data_residency_attested: false, foreign_origin_weight_flag: false,
+      foreign_origin_consent_receipt_id: null, inference_billing: 'customer_managed',
+    },
+    captured_at: '2026-07-10T14:00:00.000Z',
+  };
+}
+
+test('classifyOrigin: self-hosted provenance = dark, not inferred', () => {
+  const d = entry({ provenance: withProvenance('self_hosted') }).decision;
+  assert.deepEqual(classifyOrigin(d), { origin: 'dark', inferred: false });
+});
+
+test('classifyOrigin: open-weight family = dark; frontier family = frontier', () => {
+  assert.equal(classifyOrigin(entry({ provenance: withProvenance('deepseek') }).decision).origin, 'dark');
+  assert.equal(classifyOrigin(entry({ provenance: withProvenance('anthropic') }).decision).origin, 'frontier');
+});
+
+test('classifyOrigin: no provenance falls back to provider and is flagged inferred', () => {
+  assert.deepEqual(classifyOrigin(entry({ provider: 'anthropic' }).decision), { origin: 'frontier', inferred: true });
+  assert.deepEqual(classifyOrigin(entry({ provider: 'unknown' as Provider }).decision), { origin: 'dark', inferred: true });
+});
+
+test('decisionCents: blocked = 0, settled actual beats projection', () => {
+  assert.equal(decisionCents(entry({ action: 'block', projectedCents: 500 }).decision), 0);
+  assert.equal(decisionCents(entry({ projectedCents: 500, actualCents: 420 }).decision), 420);
+  assert.equal(decisionCents(entry({ projectedCents: 500 }).decision), 500);
+});
+
+test('aggregate: dark share, savings, true-up, and buckets', () => {
+  seq = 0;
+  const entries = [
+    entry({ action: 'allow', provider: 'anthropic', modelResolved: 'claude-5', projectedCents: 100, actualCents: 100, provenance: withProvenance('anthropic') }),
+    entry({ action: 'allow', modelResolved: 'glm-5.2', projectedCents: 4, actualCents: 4, provider: 'unknown' as Provider, provenance: withProvenance('self_hosted', 'self-hosted-gpu') }),
+    entry({ action: 'downgrade', provider: 'openai', modelResolved: 'gpt-5-mini', projectedCents: 200, actualCents: 20 }),
+    entry({ action: 'block', provider: 'openai', modelResolved: 'gpt-5', projectedCents: 300 }),
+    entry({ entryType: 'settlement', actualCents: 98, projectedCents: 0 }),
+  ];
+  const dash = aggregateLedger(entries, { verified: true, entries: entries.length });
+
+  // 4 enforcement decisions (settlement not counted as a call)
+  assert.equal(dash.totals.calls, 4);
+  // spend = 100 + 4 + 20 + 0(blocked) = 124
+  assert.equal(dash.totals.spentCents, 124);
+  assert.equal(dash.totals.darkCents, 4);
+  assert.equal(dash.totals.frontierCents, 120); // 100 anthropic + 20 downgraded openai(inferred frontier)
+  assert.equal(dash.totals.darkSharePct, Math.round((4 / 124) * 1000) / 10);
+  // savings = downgrade delta (200-20=180) + blocked projection (300) = 480
+  assert.equal(dash.enforcement.estimatedSavedCents, 480);
+  assert.equal(dash.enforcement.blocked, 1);
+  assert.equal(dash.enforcement.downgraded, 1);
+  // true-up: settled actual 98 vs reserved (100+4+200+300=604)
+  assert.equal(dash.trueUp.settledCents, 98);
+  assert.equal(dash.trueUp.reservedCents, 604);
+  assert.equal(dash.trueUp.driftCents, 98 - 604);
+  // integrity passthrough
+  assert.equal(dash.integrity.verified, true);
+  // model bucket present
+  assert.ok(dash.byModel.find(b => b.key === 'claude-5' && b.cents === 100));
+});
+
+test('aggregate: empty ledger is safe', () => {
+  const dash = aggregateLedger([]);
+  assert.equal(dash.totals.calls, 0);
+  assert.equal(dash.totals.darkSharePct, 0);
+  assert.equal(dash.integrity.verified, false);
+});

package/src/dashboard/aggregate.ts

@@ -0,0 +1,201 @@
+/**
+ * AgentGuard® — CFO cost dashboard, read side.
+ *
+ * Aggregates the signed, hash-chained decision log into a CFO-legible view:
+ * spend over time, by model, by provider, frontier-vs-"dark" (local /
+ * open-weight / self-hosted) tokens, reserved-vs-settled true-up, an
+ * enforcement/savings summary, and a tamper-evidence check. Everything is
+ * derived IN-PROCESS from the customer-held ledger — no proxy, no data plane,
+ * no provider billing API required.
+ *
+ * The "dark token" view is the differentiator: open-source / self-hosted usage
+ * never appears on any provider's bill, so a provider console structurally
+ * cannot show it. The signed ledger can, because the receipt is written where
+ * the call is made.
+ *
+ * Honest scope note: the signed SpendDecision carries time, provider, model,
+ * cents, action, builderCode, entryType and a provenance block — but NOT full
+ * tenant/agent identity (only the scope key a cap matched on). Per-agent /
+ * per-tenant breakdown therefore requires recording a metadata-only scope
+ * digest on the decision; see `scopeKeyBreakdown` (best-effort from
+ * triggeredScopeKey) and DASHBOARD.md. We do not invent attribution the ledger
+ * does not carry.
+ *
+ * Patent notice: signed hash-chained decision log (U.S. application filed May
+ * 2026); composes with DAG Trust Attestation, Patent D §7.3 (App. No.
+ * 63/984,626). AgentGuard® is a U.S. registered trademark (Reg. No. 8281464)
+ * of Dunecrest Ventures Inc.
+ */
+import type { Provider, SignedDecisionLogEntry, SpendDecision } from '../types';
+import type { ProvenanceProvider } from '../receipts/schema';
+
+/** Model families that are open-weight / self-hostable → "dark" when self-hosted. */
+const OPEN_WEIGHT_FAMILIES = new Set<ProvenanceProvider>([
+  'meta', 'mistral', 'cohere', 'fireworks', 'baseten', 'together',
+  'deepseek', 'moonshot', 'alibaba', 'self_hosted',
+]);
+const FRONTIER_PROVIDERS = new Set<Provider>(['openai', 'anthropic', 'gemini', 'bedrock']);
+
+export type TokenOrigin = 'frontier' | 'dark' | 'unknown';
+
+/** Classify a decision as frontier vs dark (local/open-weight) spend.
+ *  Prefers the signed provenance block; falls back to the coarse provider
+ *  field and labels the result `inferred` so the UI never overstates. */
+export function classifyOrigin(decision: SpendDecision): { origin: TokenOrigin; inferred: boolean } {
+  const prov = decision.provenance;
+  if (prov?.model_identity) {
+    const fam = prov.model_identity.provider;
+    if (fam === 'self_hosted') return { origin: 'dark', inferred: false };
+    const selfHosted = /self|local|on[-_]?prem|in[-_]?house/i.test(prov.hosting?.provider_route ?? '');
+    if (selfHosted) return { origin: 'dark', inferred: false };
+    if (OPEN_WEIGHT_FAMILIES.has(fam)) return { origin: 'dark', inferred: false };
+    if (fam === 'anthropic' || fam === 'openai' || fam === 'google') return { origin: 'frontier', inferred: false };
+  }
+  if (FRONTIER_PROVIDERS.has(decision.provider)) return { origin: 'frontier', inferred: true };
+  if (decision.provider === 'unknown') return { origin: 'dark', inferred: true };
+  return { origin: 'unknown', inferred: true };
+}
+
+/** Cents this decision actually cost the org: settled actuals win over the
+ *  pre-dispatch projection; blocked calls cost zero. */
+export function decisionCents(decision: SpendDecision): number {
+  if (decision.action === 'block') return 0;
+  if (typeof decision.actualCents === 'number') return decision.actualCents;
+  return decision.projectedCents ?? 0;
+}
+
+export interface BucketSpend {
+  key: string;
+  cents: number;
+  calls: number;
+}
+export interface CfoDashboard {
+  generatedAt: string;
+  windowStart: string | null;
+  windowEnd: string | null;
+  totals: {
+    calls: number;
+    spentCents: number;
+    frontierCents: number;
+    darkCents: number;
+    darkSharePct: number;      // dark / total spend, 0..100
+    inferredCents: number;     // spend whose origin was inferred, not from provenance
+  };
+  enforcement: {
+    allowed: number;
+    downgraded: number;
+    blocked: number;
+    shadow: number;
+    /** Cents NOT spent because a call was blocked or downgraded — the ROI line. */
+    estimatedSavedCents: number;
+  };
+  trueUp: {
+    reservedCents: number;     // sum of projections on decision entries
+    settledCents: number;      // sum of actuals on settlement entries
+    driftCents: number;        // settled - reserved (over/under-estimate)
+  };
+  byHour: BucketSpend[];       // ISO hour → spend
+  byModel: BucketSpend[];      // modelResolved → spend, desc
+  byProvider: BucketSpend[];
+  byBuilderCode: BucketSpend[];
+  scopeKeyBreakdown: BucketSpend[];  // best-effort from triggeredScopeKey (may be sparse)
+  integrity: { verified: boolean; entries: number; reason?: string; sequence?: number };
+}
+
+function topBuckets(map: Map<string, BucketSpend>, limit = 50): BucketSpend[] {
+  return [...map.values()].sort((a, b) => b.cents - a.cents).slice(0, limit);
+}
+
+function bump(map: Map<string, BucketSpend>, key: string, cents: number) {
+  const cur = map.get(key) ?? { key, cents: 0, calls: 0 };
+  cur.cents += cents;
+  cur.calls += 1;
+  map.set(key, cur);
+}
+
+/**
+ * Build the CFO dashboard from signed ledger entries. Pure + synchronous.
+ * `integrity` is passed in (compute via verifyChain, which is async) so this
+ * stays a pure function; pass null to skip.
+ */
+export function aggregateLedger(
+  entries: SignedDecisionLogEntry[],
+  integrity: CfoDashboard['integrity'] | null = null,
+  now: string = new Date().toISOString(),
+): CfoDashboard {
+  const byHour = new Map<string, BucketSpend>();
+  const byModel = new Map<string, BucketSpend>();
+  const byProvider = new Map<string, BucketSpend>();
+  const byBuilder = new Map<string, BucketSpend>();
+  const byScopeKey = new Map<string, BucketSpend>();
+
+  let calls = 0, spent = 0, frontier = 0, dark = 0, inferred = 0;
+  let allowed = 0, downgraded = 0, blocked = 0, shadow = 0, saved = 0;
+  let reserved = 0, settled = 0;
+  let minTs: string | null = null, maxTs: string | null = null;
+
+  for (const entry of entries) {
+    const d = entry.decision;
+    const kind = d.entryType ?? 'decision';
+
+    if (kind === 'settlement') {
+      if (typeof d.actualCents === 'number') settled += d.actualCents;
+      // settlement entries adjust true-up only; not double-counted as calls
+      continue;
+    }
+    if (kind === 'outcome' || kind === 'governance') continue;
+
+    // provider enforcement decision
+    calls += 1;
+    const cents = decisionCents(d);
+    spent += cents;
+    reserved += d.projectedCents ?? 0;
+
+    const { origin, inferred: wasInferred } = classifyOrigin(d);
+    if (origin === 'frontier') frontier += cents;
+    else if (origin === 'dark') dark += cents;
+    if (wasInferred) inferred += cents;
+
+    switch (d.action) {
+      case 'allow': allowed += 1; break;
+      case 'downgrade': downgraded += 1; saved += Math.max(0, (d.projectedCents ?? 0) - cents); break;
+      case 'block': blocked += 1; saved += d.projectedCents ?? 0; break;
+      case 'shadow': shadow += 1; break;
+    }
+
+    const ts = d.timestamp;
+    if (ts) {
+      if (!minTs || ts < minTs) minTs = ts;
+      if (!maxTs || ts > maxTs) maxTs = ts;
+      bump(byHour, ts.slice(0, 13) + ':00', cents); // ISO hour bucket
+    }
+    bump(byModel, d.modelResolved || d.modelRequested || 'unknown', cents);
+    bump(byProvider, d.provider || 'unknown', cents);
+    if (d.builderCode) bump(byBuilder, d.builderCode, cents);
+    if (d.triggeredScopeKey) bump(byScopeKey, d.triggeredScopeKey, cents);
+  }
+
+  return {
+    generatedAt: now,
+    windowStart: minTs,
+    windowEnd: maxTs,
+    totals: {
+      calls,
+      spentCents: spent,
+      frontierCents: frontier,
+      darkCents: dark,
+      darkSharePct: spent > 0 ? Math.round((dark / spent) * 1000) / 10 : 0,
+      inferredCents: inferred,
+    },
+    enforcement: { allowed, downgraded, blocked, shadow, estimatedSavedCents: saved },
+    trueUp: { reservedCents: reserved, settledCents: settled, driftCents: settled - reserved },
+    byHour: [...byHour.values()].sort((a, b) => a.key.localeCompare(b.key)),
+    byModel: topBuckets(byModel),
+    byProvider: topBuckets(byProvider),
+    byBuilderCode: topBuckets(byBuilder),
+    scopeKeyBreakdown: topBuckets(byScopeKey),
+    integrity: integrity ?? { verified: false, entries: entries.length, reason: 'NOT_CHECKED' },
+  };
+}
+
+export const centsToUsd = (c: number): string => `$${(c / 100).toFixed(2)}`;