@agentguard-run/spend 0.2.2 → 0.3.0

package/src/cli/tips.ts

@@ -0,0 +1,161 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import { AGENTGUARD_SPEND_VERSION } from '../index';
+import { agentguardHome, banner, dim, green, statusBar } from './colors';
+
+export interface AgentGuardTip {
+  id: string;
+  surface: string;
+  severity: 'info' | 'warning';
+  text: string;
+  learn_more_url: string;
+  dismissible: boolean;
+}
+
+interface TipsState {
+  seen?: string[];
+}
+
+export const TIPS: AgentGuardTip[] = [
+  {
+    id: 'cheap-read-only',
+    surface: 'models',
+    severity: 'info',
+    text: "Use 'openai/gpt-4o-mini' for read-only tasks. It is far cheaper than gpt-5 with the same audit guarantees.",
+    learn_more_url: 'https://agentguard.run/docs/models',
+    dismissible: true,
+  },
+  {
+    id: 'openrouter-cfo',
+    surface: 'auth',
+    severity: 'info',
+    text: 'One OpenRouter key gives access to hundreds of models across many providers. Your CFO sees one invoice while AgentGuard enforces who uses what.',
+    learn_more_url: 'https://agentguard.run/docs/openrouter',
+    dismissible: true,
+  },
+  {
+    id: 'public-verify',
+    surface: 'verify',
+    severity: 'info',
+    text: 'Share https://agentguard.run/verify with your auditor. Paste any receipt and get browser-based cryptographic verification with no install.',
+    learn_more_url: 'https://agentguard.run/verify',
+    dismissible: true,
+  },
+  {
+    id: 'weekly-pricing',
+    surface: 'models',
+    severity: 'info',
+    text: "Run 'agentguard models --sync-pricing' weekly to keep cost math current with OpenRouter live prices.",
+    learn_more_url: 'https://agentguard.run/docs/pricing',
+    dismissible: true,
+  },
+  {
+    id: 'payment-attestation',
+    surface: 'wizard',
+    severity: 'warning',
+    text: "Capability tier 'payment_execute' should require a verified attestation. Do not accept caller-supplied claims for real money movement.",
+    learn_more_url: 'https://agentguard.run/docs/capabilities',
+    dismissible: true,
+  },
+  {
+    id: 'shadow-rollout',
+    surface: 'policy',
+    severity: 'info',
+    text: "Use mode 'shadow' for the first day of a rollout. You get signed decisions before enforcement changes traffic.",
+    learn_more_url: 'https://agentguard.run/docs/policies',
+    dismissible: true,
+  },
+  {
+    id: 'verify-chain',
+    surface: 'verify',
+    severity: 'info',
+    text: "Run 'agentguard verify <log.jsonl> <pubkey>' before sharing an audit packet. Whole-chain verification catches missing entries.",
+    learn_more_url: 'https://agentguard.run/docs/verify',
+    dismissible: true,
+  },
+  {
+    id: 'local-overrides',
+    surface: 'models',
+    severity: 'info',
+    text: 'Negotiated rates belong in ~/.agentguard/cost-overrides.json. Keep pricing math local with the rest of the policy state.',
+    learn_more_url: 'https://agentguard.run/docs/pricing',
+    dismissible: true,
+  },
+  {
+    id: 'bedrock-routing',
+    surface: 'bindings',
+    severity: 'info',
+    text: 'Use the native Bedrock binding when AWS procurement requires direct provider calls. AgentGuard still signs every local decision.',
+    learn_more_url: 'https://agentguard.run/docs/bedrock',
+    dismissible: true,
+  },
+];
+
+export function tipsStatePath(): string {
+  return path.join(agentguardHome(), 'tips-seen.json');
+}
+
+export function readTipsState(filePath: string = tipsStatePath()): TipsState {
+  try {
+    const parsed = JSON.parse(fs.readFileSync(filePath, 'utf8')) as TipsState;
+    return Array.isArray(parsed.seen) ? parsed : { seen: [] };
+  } catch {
+    return { seen: [] };
+  }
+}
+
+export function writeTipsState(state: TipsState, filePath: string = tipsStatePath()): void {
+  fs.mkdirSync(path.dirname(filePath), { recursive: true });
+  fs.writeFileSync(filePath, JSON.stringify({ seen: [...new Set(state.seen ?? [])] }, null, 2) + '\n', { mode: 0o600 });
+  try { fs.chmodSync(filePath, 0o600); } catch { return; }
+}
+
+export function unseenTips(state: TipsState = readTipsState()): AgentGuardTip[] {
+  const seen = new Set(state.seen ?? []);
+  return TIPS.filter((tip) => !seen.has(tip.id));
+}
+
+export function markTipsSeen(ids: string[], filePath: string = tipsStatePath()): void {
+  const state = readTipsState(filePath);
+  writeTipsState({ seen: [...new Set([...(state.seen ?? []), ...ids])] }, filePath);
+}
+
+export function maybeShowStartupTips(force = false): void {
+  const state = readTipsState();
+  const startupIds = ['startup-wizard', 'startup-verify'];
+  const seen = new Set(state.seen ?? []);
+  if (!force && startupIds.every((id) => seen.has(id))) return;
+  console.log('');
+  console.log('  ' + green("Tip: try 'agentguard wizard' to set up in 90 seconds."));
+  console.log('  ' + green('Tip: share https://agentguard.run/verify with your auditor.'));
+  markTipsSeen(startupIds);
+}
+
+export async function runTips(argv: string[]): Promise<number> {
+  if (argv.includes('--help') || argv.includes('-h')) {
+    console.log('agentguard tips [--reset] [--json]');
+    return 0;
+  }
+  if (argv.includes('--reset')) {
+    writeTipsState({ seen: [] });
+    console.log('AgentGuard tips reset.');
+    return 0;
+  }
+  if (argv.includes('--json')) {
+    console.log(JSON.stringify(TIPS, null, 2));
+    return 0;
+  }
+  console.log('');
+  console.log('  ' + banner(AGENTGUARD_SPEND_VERSION));
+  console.log('');
+  for (const tip of TIPS) {
+    const label = tip.severity === 'warning' ? 'warning' : 'tip';
+    console.log(`  ${green(label)}  ${tip.text}`);
+    console.log(`       ${dim(tip.learn_more_url)}`);
+  }
+  console.log('');
+  console.log('  ' + statusBar());
+  console.log('');
+  markTipsSeen(TIPS.filter((tip) => tip.dismissible).map((tip) => tip.id));
+  return 0;
+}

package/src/cli/wizard.ts

@@ -0,0 +1,160 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import * as readline from 'readline';
+import { AGENTGUARD_SPEND_VERSION } from '../index';
+import { TASK_TEMPLATES, getTaskTemplate, listTaskTemplates, type TaskTemplate } from '../templates';
+import { agentguardHome, banner, cyanBold, green, statusBar } from './colors';
+
+const BUILD_TYPES = ['chatbot', 'agent', 'batch job', 'API endpoint'];
+const CAPABILITY_TIERS = [
+  ['read_only', 'Read records and produce findings'],
+  ['data_write', 'Write allowed fields after policy checks'],
+  ['payment_initiate', 'Create or recommend payment intents'],
+  ['payment_execute', 'Execute money movement only with verified attestation'],
+] as const;
+
+export interface WizardAnswers {
+  building: string;
+  template: string;
+  capability: string;
+  allowedModels: string[];
+  fallbackModel: string;
+  perCallCents: number;
+  perDayCents: number;
+  perMonthCents: number;
+  systemInstructions: string;
+}
+
+export class WizardStateMachine {
+  step = 0;
+  readonly totalSteps = 7;
+
+  next(answer: string): boolean {
+    if (!this.validate(this.step, answer)) return false;
+    this.step = Math.min(this.step + 1, this.totalSteps - 1);
+    return true;
+  }
+
+  back(): void {
+    this.step = Math.max(0, this.step - 1);
+  }
+
+  validate(step: number, answer: string): boolean {
+    if (step === 0) return BUILD_TYPES.includes(answer);
+    if (step === 1) return Boolean(TASK_TEMPLATES[answer]);
+    if (step === 2) return CAPABILITY_TIERS.some(([tier]) => tier === answer);
+    if (step === 3) return answer.split(',').map((item) => item.trim()).filter(Boolean).length > 0;
+    if (step === 4) return answer.trim().length > 0;
+    if (step === 5) return answer.split(',').every((item) => Number.isSafeInteger(Number(item.trim())) && Number(item.trim()) >= 0);
+    return true;
+  }
+}
+
+export async function runWizard(argv: string[]): Promise<number> {
+  if (argv.includes('--help') || argv.includes('-h')) {
+    console.log('agentguard wizard [--defaults] [--template <name>]');
+    return 0;
+  }
+  const templateSlug = valueAfter(argv, '--template') ?? 'risk-review';
+  const useDefaults = argv.includes('--defaults') || !process.stdin.isTTY;
+  const answers = useDefaults ? defaultAnswers(templateSlug) : await promptAnswers(templateSlug);
+  const outputs = writeWizardOutputs(answers);
+  console.log('');
+  console.log('  ' + banner(AGENTGUARD_SPEND_VERSION));
+  console.log('');
+  console.log(`  ${green('created')} ${outputs.policyPath}`);
+  console.log(`  ${green('created')} ${outputs.quickstartTsPath}`);
+  console.log(`  ${green('created')} ${outputs.quickstartPyPath}`);
+  console.log('');
+  console.log(cyanBold('Quickstart snippet'));
+  console.log('');
+  console.log(outputs.snippet);
+  console.log('');
+  console.log('  ' + statusBar());
+  console.log('');
+  return 0;
+}
+
+export function defaultAnswers(templateSlug = 'risk-review'): WizardAnswers {
+  const template = getTaskTemplate(templateSlug) ?? getTaskTemplate('risk-review') as TaskTemplate;
+  const perCall = template.caps.find((cap) => cap.window === 'per_call')?.amountCents ?? 100;
+  const perDay = template.caps.find((cap) => cap.window === 'per_day')?.amountCents ?? 2500;
+  return {
+    building: 'agent',
+    template: template.slug,
+    capability: template.requiredCapability,
+    allowedModels: [...template.allowedModels],
+    fallbackModel: template.fallbackModel,
+    perCallCents: perCall,
+    perDayCents: perDay,
+    perMonthCents: perDay * 20,
+    systemInstructions: template.systemInstructions,
+  };
+}
+
+export function writeWizardOutputs(answers: WizardAnswers, home = agentguardHome()): { policyPath: string; quickstartTsPath: string; quickstartPyPath: string; snippet: string } {
+  fs.mkdirSync(home, { recursive: true });
+  const policyPath = path.join(home, 'policy.yaml');
+  const quickstartTsPath = path.join(home, 'quickstart.ts');
+  const quickstartPyPath = path.join(home, 'quickstart.py');
+  const policy = policyYaml(answers);
+  const ts = quickstartTs(answers);
+  const py = quickstartPy(answers);
+  fs.writeFileSync(policyPath, policy);
+  fs.writeFileSync(quickstartTsPath, ts);
+  fs.writeFileSync(quickstartPyPath, py);
+  return { policyPath, quickstartTsPath, quickstartPyPath, snippet: tsSnippet(answers) };
+}
+
+async function promptAnswers(templateSlug: string): Promise<WizardAnswers> {
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  const ask = (question: string, fallback: string) => new Promise<string>((resolve) => {
+    rl.question(`${question} (${fallback}): `, (answer) => resolve(answer.trim() || fallback));
+  });
+  try {
+    const seed = defaultAnswers(templateSlug);
+    console.log('');
+    console.log('  ' + banner(AGENTGUARD_SPEND_VERSION));
+    console.log('');
+    const building = await ask(`What are you building? ${BUILD_TYPES.join(', ')}`, seed.building);
+    const template = await ask(`Pick a task template: ${listTaskTemplates().map((item) => item.slug).join(', ')}`, seed.template);
+    const capability = await ask(`Capability tier: ${CAPABILITY_TIERS.map(([tier, label]) => tier + ' (' + label + ')').join(', ')}`, seed.capability);
+    const templateDef = getTaskTemplate(template) ?? getTaskTemplate(seed.template) as TaskTemplate;
+    const allowedModels = (await ask('Allowed models, comma separated', templateDef.allowedModels.join(','))).split(',').map((item) => item.trim()).filter(Boolean);
+    const fallbackModel = await ask('Fallback on downgrade', templateDef.fallbackModel);
+    const caps = await ask('Caps in cents: per-call, per-day, per-month', `${seed.perCallCents},${seed.perDayCents},${seed.perMonthCents}`);
+    const [perCallCents, perDayCents, perMonthCents] = caps.split(',').map((item) => Number(item.trim()));
+    const systemInstructions = await ask('System instructions', templateDef.systemInstructions);
+    return { building, template, capability, allowedModels, fallbackModel, perCallCents, perDayCents, perMonthCents, systemInstructions };
+  } finally {
+    rl.close();
+  }
+}
+
+function policyYaml(answers: WizardAnswers): string {
+  const id = `agentguard-${answers.template}-v1`;
+  const allowed = answers.allowedModels.map((model) => `  - ${model}`).join('\n');
+  return `# AgentGuard Spend policy generated by agentguard wizard\nid: ${id}\nname: ${answers.template} policy\nversion: 1\neffectiveFrom: "${new Date().toISOString()}"\nmode: enforce\nrequiredCapability: ${answers.capability}\nscope:\n  tenantId: my-tenant\nmodels:\n  allowed:\n${allowed}\n  fallback: ${answers.fallbackModel}\ncaps:\n  # WHY: Per-call cap bounds one agent action.\n  - amountCents: ${answers.perCallCents}\n    window: per_call\n    action: downgrade\n    downgradeTo: ${answers.fallbackModel}\n    reason: "Per-call budget reached, routing to fallback model"\n  # WHY: Daily cap catches runaway loops and unexpected volume.\n  - amountCents: ${answers.perDayCents}\n    window: per_day\n    action: block\n    reason: "Daily budget reached"\n  # WHY: Monthly cap keeps the finance view predictable.\n  - amountCents: ${answers.perMonthCents}\n    window: per_month\n    action: block\n    reason: "Monthly budget reached"\nsystemInstructions: |\n${indent(answers.systemInstructions, 2)}\n`;
+}
+
+function quickstartTs(answers: WizardAnswers): string {
+  return `import OpenAI from 'openai';\nimport { withSpendGuard, type SpendPolicy } from '@agentguard-run/spend';\n\nconst policy: SpendPolicy = {\n  id: 'agentguard-${answers.template}-v1',\n  name: '${answers.template} policy',\n  scope: { tenantId: 'my-tenant' },\n  caps: [\n    { amountCents: ${answers.perCallCents}, window: 'per_call', action: 'downgrade', downgradeTo: '${answers.fallbackModel}' },\n    { amountCents: ${answers.perDayCents}, window: 'per_day', action: 'block' },\n    { amountCents: ${answers.perMonthCents}, window: 'per_month', action: 'block' },\n  ],\n  mode: 'enforce',\n  requiredCapability: '${answers.capability}',\n  version: 1,\n  effectiveFrom: new Date().toISOString(),\n};\n\nconst openrouter = new OpenAI({\n  baseURL: 'https://openrouter.ai/api/v1',\n  apiKey: process.env.OPENROUTER_API_KEY,\n});\n\nexport const guardedClient = withSpendGuard(openrouter, {\n  policy,\n  scope: { tenantId: 'my-tenant', agentId: '${answers.template}' },\n  capabilityClaim: '${answers.capability}',\n});\n`;
+}
+
+function quickstartPy(answers: WizardAnswers): string {
+  return `from openai import OpenAI\nfrom agentguard_spend import with_spend_guard\nfrom agentguard_spend.types import SpendPolicy, SpendCap\n\npolicy = SpendPolicy(\n    id='agentguard-${answers.template}-v1', name='${answers.template} policy',\n    scope={'tenantId': 'my-tenant'},\n    caps=[\n        SpendCap(amountCents=${answers.perCallCents}, window='per_call', action='downgrade', downgradeTo='${answers.fallbackModel}'),\n        SpendCap(amountCents=${answers.perDayCents}, window='per_day', action='block'),\n        SpendCap(amountCents=${answers.perMonthCents}, window='per_month', action='block'),\n    ],\n    mode='enforce', requiredCapability='${answers.capability}',\n    version=1, effectiveFrom='2026-05-27T00:00:00Z',\n)\n\nopenrouter = OpenAI(base_url='https://openrouter.ai/api/v1')\nguarded_client = with_spend_guard(openrouter, policy=policy, scope={'tenantId': 'my-tenant', 'agentId': '${answers.template}'}, capability_claim='${answers.capability}')\n`;
+}
+
+function tsSnippet(answers: WizardAnswers): string {
+  return `const response = await guardedClient.chat.completions.create({\n  model: '${answers.allowedModels[0] ?? 'openai/gpt-4o-mini'}',\n  messages: [{ role: 'user', content: 'Run the governed task.' }],\n});`;
+}
+
+function indent(value: string, spaces: number): string {
+  const prefix = ' '.repeat(spaces);
+  return value.split('\n').map((line) => prefix + line).join('\n');
+}
+
+function valueAfter(argv: string[], flag: string): string | undefined {
+  const index = argv.indexOf(flag);
+  return index >= 0 ? argv[index + 1] : undefined;
+}

package/src/openrouter-catalog.ts

@@ -0,0 +1,180 @@
+/**
+ * AgentGuard(TM) Spend: OpenRouter catalog sync.
+ *
+ * OpenRouter requests go directly from the customer runtime to openrouter.ai.
+ * AgentGuard infrastructure does not receive prompts, completions, keys,
+ * policy files, or pricing overrides.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+
+import * as fs from 'fs';
+import * as https from 'https';
+import * as os from 'os';
+import * as path from 'path';
+import { DEFAULT_COST_OVERRIDES_PATH, persistCostOverrides, setCostOverride, type ModelCost } from './cost-table';
+
+export interface OpenRouterPricing {
+  prompt?: string;
+  completion?: string;
+  image?: string;
+  request?: string;
+}
+
+export interface OpenRouterModel {
+  id: string;
+  name?: string;
+  context_length?: number;
+  pricing?: OpenRouterPricing;
+  architecture?: { modality?: string; tokenizer?: string; instruct_type?: string | null };
+  top_provider?: { context_length?: number; max_completion_tokens?: number | null; is_moderated?: boolean };
+  per_request_limits?: Record<string, unknown> | null;
+  [key: string]: unknown;
+}
+
+export interface OpenRouterCatalog {
+  data: OpenRouterModel[];
+  fetchedAt?: string;
+}
+
+export interface FetchCatalogOptions {
+  ttlMs?: number;
+  force?: boolean;
+  endpoint?: string;
+  cachePath?: string;
+}
+
+export interface SyncPricingResult {
+  count: number;
+  applied: string[];
+}
+
+const DAY_MS = 24 * 60 * 60 * 1000;
+const STATE_DIR = process.env.AGENTGUARD_HOME || path.join(os.homedir(), '.agentguard');
+const DEFAULT_CACHE_PATH = path.join(STATE_DIR, 'openrouter-catalog.json');
+const DEFAULT_ENDPOINT = 'https://openrouter.ai/api/v1/models';
+
+let memoryCatalog: OpenRouterCatalog | null = null;
+
+export async function fetchCatalog(opts: FetchCatalogOptions = {}): Promise<OpenRouterCatalog> {
+  const ttlMs = opts.ttlMs ?? DAY_MS;
+  const cachePath = opts.cachePath ?? DEFAULT_CACHE_PATH;
+  if (!opts.force) {
+    const cached = readCachedCatalog(cachePath, ttlMs);
+    if (cached) return cached;
+  }
+
+  const fixturePath = process.env.AGENTGUARD_OPENROUTER_CATALOG_FIXTURE;
+  if (fixturePath) {
+    const fixture = parseCatalog(fs.readFileSync(fixturePath, 'utf8'));
+    return saveCatalog(fixture, cachePath);
+  }
+
+  try {
+    const body = await getJson(opts.endpoint ?? DEFAULT_ENDPOINT);
+    const catalog = parseCatalog(body);
+    return saveCatalog(catalog, cachePath);
+  } catch (err) {
+    const cached = readCachedCatalog(cachePath, Number.MAX_SAFE_INTEGER);
+    if (cached) return cached;
+    throw err;
+  }
+}
+
+export function getCachedCatalog(cachePath: string = DEFAULT_CACHE_PATH): OpenRouterCatalog | null {
+  if (memoryCatalog) return memoryCatalog;
+  return readCachedCatalog(cachePath, Number.MAX_SAFE_INTEGER);
+}
+
+export async function syncPricingIntoCostTable(opts: FetchCatalogOptions = {}): Promise<SyncPricingResult> {
+  const catalog = await fetchCatalog(opts);
+  const applied: string[] = [];
+  for (const model of catalog.data) {
+    const cost = modelCostFromOpenRouter(model);
+    if (!cost) continue;
+    setCostOverride(model.id, cost);
+    applied.push(model.id);
+  }
+  persistCostOverrides(DEFAULT_COST_OVERRIDES_PATH);
+  return { count: applied.length, applied };
+}
+
+export function persistOverrides(filePath?: string): void {
+  persistCostOverrides(filePath);
+}
+
+export function modelCostFromOpenRouter(model: OpenRouterModel): ModelCost | null {
+  const prompt = Number(model.pricing?.prompt);
+  const completion = Number(model.pricing?.completion);
+  if (!Number.isFinite(prompt) || !Number.isFinite(completion) || prompt < 0 || completion < 0) {
+    return null;
+  }
+  return {
+    inputCentsPerKtok: prompt * 100 * 1000,
+    outputCentsPerKtok: completion * 100 * 1000,
+  };
+}
+
+function readCachedCatalog(filePath: string, ttlMs: number): OpenRouterCatalog | null {
+  try {
+    const stat = fs.statSync(filePath);
+    if (Date.now() - stat.mtimeMs > ttlMs) return null;
+    const catalog = parseCatalog(fs.readFileSync(filePath, 'utf8'));
+    memoryCatalog = catalog;
+    return catalog;
+  } catch {
+    return null;
+  }
+}
+
+function saveCatalog(catalog: OpenRouterCatalog, filePath: string): OpenRouterCatalog {
+  const stamped: OpenRouterCatalog = { ...catalog, fetchedAt: catalog.fetchedAt ?? new Date().toISOString() };
+  memoryCatalog = stamped;
+  try {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    fs.writeFileSync(filePath, JSON.stringify(stamped, null, 2) + '\n', { mode: 0o600 });
+    try { fs.chmodSync(filePath, 0o600); } catch { return stamped; }
+  } catch {
+    return stamped;
+  }
+  return stamped;
+}
+
+function parseCatalog(body: string): OpenRouterCatalog {
+  const parsed = JSON.parse(body) as OpenRouterCatalog;
+  if (!parsed || !Array.isArray(parsed.data)) throw new Error('OpenRouter catalog response must include data[]');
+  const data = parsed.data.filter((item): item is OpenRouterModel => Boolean(item && typeof item.id === 'string'));
+  return { ...parsed, data };
+}
+
+function getJson(endpoint: string): Promise<string> {
+  return new Promise((resolve, reject) => {
+    const url = new URL(endpoint);
+    const req = https.request(
+      {
+        method: 'GET',
+        hostname: url.hostname,
+        path: url.pathname + url.search,
+        headers: { accept: 'application/json' },
+        timeout: 5000,
+      },
+      (res) => {
+        const chunks: Buffer[] = [];
+        res.on('data', (chunk) => chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)));
+        res.on('end', () => {
+          const body = Buffer.concat(chunks).toString('utf8');
+          if (!res.statusCode || res.statusCode < 200 || res.statusCode >= 300) {
+            reject(new Error('OpenRouter catalog fetch failed with HTTP ' + String(res.statusCode)));
+            return;
+          }
+          resolve(body);
+        });
+      },
+    );
+    req.on('error', reject);
+    req.on('timeout', () => req.destroy(new Error('OpenRouter catalog fetch timed out')));
+    req.end();
+  });
+}

package/src/templates/agent-support.yaml

@@ -0,0 +1,30 @@
+# AgentGuard Spend task template: agent-support
+# Local-only policy file. Prompts, completions, API keys, and signing keys stay in the customer runtime.
+id: agent-support-v1
+name: Agent support workflow
+version: 1
+effectiveFrom: "2026-05-27T00:00:00.000Z"
+mode: enforce
+requiredCapability: data_write
+scope:
+  tenantId: my-tenant
+models:
+  primary: openai/gpt-4o-mini
+  fallback: google/gemini-3-flash-preview
+  allowed:
+    - openai/gpt-4o-mini
+    - google/gemini-3-flash-preview
+caps:
+  # WHY: 25 cents per call bounds one agent action while keeping normal work flowing.
+  - amountCents: 25
+    window: per_call
+    action: downgrade
+    downgradeTo: google/gemini-3-flash-preview
+    reason: "Per-call budget reached, routing to fallback model"
+  # WHY: Daily cap catches loops and unexpected traffic before monthly budgets drift.
+  - amountCents: 10000
+    window: per_day
+    action: block
+    reason: "Daily budget reached"
+systemInstructions: |
+  Draft support replies and update allowed fields only after policy checks. Escalate billing, payment, and identity changes.

package/src/templates/chargeback-evidence.yaml

@@ -0,0 +1,30 @@
+# AgentGuard Spend task template: chargeback-evidence
+# Local-only policy file. Prompts, completions, API keys, and signing keys stay in the customer runtime.
+id: chargeback-evidence-v1
+name: Chargeback evidence agent
+version: 1
+effectiveFrom: "2026-05-27T00:00:00.000Z"
+mode: enforce
+requiredCapability: read_only
+scope:
+  tenantId: my-tenant
+models:
+  primary: openai/gpt-5-mini
+  fallback: openai/gpt-4o-mini
+  allowed:
+    - openai/gpt-5-mini
+    - openai/gpt-4o-mini
+caps:
+  # WHY: 100 cents per call bounds one agent action while keeping normal work flowing.
+  - amountCents: 100
+    window: per_call
+    action: downgrade
+    downgradeTo: openai/gpt-4o-mini
+    reason: "Per-call budget reached, routing to fallback model"
+  # WHY: Daily cap catches loops and unexpected traffic before monthly budgets drift.
+  - amountCents: 5000
+    window: per_day
+    action: block
+    reason: "Daily budget reached"
+systemInstructions: |
+  Assemble claim evidence from provided records. Cite source IDs and keep disputed facts separate from verified records.

package/src/templates/code-scan.yaml

@@ -0,0 +1,30 @@
+# AgentGuard Spend task template: code-scan
+# Local-only policy file. Prompts, completions, API keys, and signing keys stay in the customer runtime.
+id: code-scan-v1
+name: Code scan agent
+version: 1
+effectiveFrom: "2026-05-27T00:00:00.000Z"
+mode: enforce
+requiredCapability: read_only
+scope:
+  tenantId: my-tenant
+models:
+  primary: google/gemini-3-flash-preview
+  fallback: openai/gpt-4o-mini
+  allowed:
+    - google/gemini-3-flash-preview
+    - openai/gpt-4o-mini
+caps:
+  # WHY: 10 cents per call bounds one agent action while keeping normal work flowing.
+  - amountCents: 10
+    window: per_call
+    action: downgrade
+    downgradeTo: openai/gpt-4o-mini
+    reason: "Per-call budget reached, routing to fallback model"
+  # WHY: Daily cap catches loops and unexpected traffic before monthly budgets drift.
+  - amountCents: 3000
+    window: per_day
+    action: block
+    reason: "Daily budget reached"
+systemInstructions: |
+  Scan code for spend, audit, and integration risks. Return findings with file paths and minimal fix guidance.