@ai-dossier/core 1.4.2 → 1.5.1

package/README.md

@@ -205,6 +205,38 @@ const verifier = registry.get('ed25519');
 const result = await verifier.verify(content, signature);
 ```
 
+### Agent Usage & Run Log
+
+Shared with `packages/sched` so both the `ai-dossier run` headless path and the
+scheduler's detached dispatch path agree on which block of an agent's result is the
+source of record.
+
+```typescript
+import {
+  parseAgentUsage,      // claude: one --output-format json object, OR a stream-json event stream
+  parseOpenCodeUsage,   // opencode: a `run --format json` JSONL event stream
+  usageParserFor,       // pick the parser from the spawned binary's basename
+  runsLogPath,          // ~/.dossier/runs.jsonl
+  SCHED_DISPATCH_EVENT, // the sched dispatch-log preamble `type`, skipped by both parsers
+  type AgentRunUsage,
+  type RunLogEntry,
+} from '@ai-dossier/core';
+
+const usage = parseAgentUsage(stdout);
+// → { model, input_tokens, output_tokens, cache_creation_tokens,
+//     cache_read_tokens, total_cost_usd, result_text } — every field null
+//     when the agent did not report it; values are never fabricated.
+```
+
+`parseAgentUsage` treats the agent's per-model **`modelUsage` map as the source of
+record** whenever it carries at least one object-shaped entry, summed across models. The
+top-level `usage` block is used only when `modelUsage` has no such entry — the two are
+never blended field-by-field, because they have been observed to disagree enough to
+fabricate a ~43% "saving" when mixed (ai-dossier#524). Cost is read from `costUSD` (the
+key claude writes), falling back to the top-level total when `modelUsage` reports no cost
+at all. For a `stream-json` log the final `type:"result"` event wins; with no such event
+(an agent killed mid-run) per-turn `assistant` usage is summed instead.
+
 ## Types
 
 All TypeScript types are exported from the package root:

package/dist/agent-usage.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Parsers for headless-agent JSON result output — the token/cost/model data
+ * an `ai-dossier run` or `packages/sched` dispatch needs to record in
+ * `runs.jsonl` (#458, #524).
+ *
+ * Shared between `cli` (the `ai-dossier run` headless path) and `sched` (the
+ * scheduler's detached-agent dispatch path) so both consumers agree on which
+ * block of a claude/opencode result is the source of record — the divergence
+ * between them (one reading `usage`, the other `modelUsage`, and disagreeing
+ * enough to fabricate a ~43% "saving" when mixed, ai-dossier#524) is exactly
+ * the bug this module exists to close off. Lives in `core`, not `cli`,
+ * because `sched` cannot depend on `cli` (the dependency runs the other way:
+ * `cli` already depends on both `core` and `sched`).
+ */
+/**
+ * Usage data extracted from an agent CLI's JSON result output.
+ * Every field is null when the CLI did not report it — values are never
+ * fabricated or estimated.
+ */
+export interface AgentRunUsage {
+    /** Model id the agent reported; comma-joined when several models ran (token/cost fields are totals across all). */
+    model: string | null;
+    input_tokens: number | null;
+    output_tokens: number | null;
+    /** Cache-creation (write) input tokens, summed across models when several ran. */
+    cache_creation_tokens: number | null;
+    /** Cache-read input tokens, summed across models when several ran. */
+    cache_read_tokens: number | null;
+    total_cost_usd: number | null;
+    /** The final result text (claude's `result` field), for re-emitting to stdout. */
+    result_text: string | null;
+}
+/**
+ * `type` of the preamble line `packages/sched` writes to a dispatch log at
+ * spawn time (ai-dossier#524). It exists so a log is never 0 bytes for a unit
+ * that ran; every parser here skips it rather than counting it as agent
+ * output. Shared from `core` so the writer (`sched`'s `createSpawnDeps`) and
+ * the readers (below) can never drift apart on the sentinel's spelling.
+ */
+export declare const SCHED_DISPATCH_EVENT = "sched-dispatch";
+/**
+ * Parse a claude headless result into usage data — both output formats.
+ *
+ * Accepts either shape, because the two consumers spawn claude differently:
+ *
+ * - **A single JSON object** (`--output-format json`, what `ai-dossier run`
+ *   uses): parsed whole.
+ * - **A JSONL event stream** (`--output-format stream-json`, what the
+ *   scheduler dispatches with since ai-dossier#524): the LAST `type:"result"`
+ *   event wins — a per-unit log is append-mode, so a prior dispatch's result
+ *   may precede this one in the same slice. With no `result` event at all (an
+ *   agent killed mid-run), per-turn `assistant` usage is summed instead, so an
+ *   interrupted dispatch still reports the tokens it really spent.
+ *
+ * Lines that do not parse as JSON objects are skipped rather than
+ * disqualifying the stream: the sched dispatch preamble
+ * ({@link SCHED_DISPATCH_EVENT}) sits at the head of every dispatch slice, and
+ * an agent killed mid-write leaves a truncated final line.
+ *
+ * Returns null when the output parses as neither shape (and for a stream
+ * holding no usage-bearing event). A result object that simply reported no
+ * usage yields an entry whose fields are all null, not `null` itself —
+ * "the agent reported nothing" and "there was no agent output" stay distinct.
+ */
+export declare function parseAgentUsage(stdout: string | null | undefined): AgentRunUsage | null;
+/**
+ * Parse an `opencode run --format json` result stream into usage data (#459).
+ *
+ * opencode emits one JSON event per line: the assistant's text arrives in
+ * `type:"text"` parts, and per-step token/cost totals in `type:"step_finish"`
+ * parts (a multi-step run emits several — tokens and cost are summed), with
+ * cache counts nested as `tokens.cache: { write, read }`. The model id is not
+ * present in the events, so `model` is null and callers fall back to the
+ * requested --model alias — that field, and only that field, is genuinely
+ * unavailable here rather than merely absent. Returns null when the output
+ * holds no opencode event at all; individual non-JSON lines (stderr warnings
+ * interleaved by the scheduler's merged stdout/stderr fd) are skipped, not
+ * treated as disqualifying.
+ *
+ * **Cross-agent caveat.** opencode reports `tokens.reasoning` SEPARATELY from
+ * `tokens.output` (a step's `total` is input + output + reasoning +
+ * cache.read), whereas claude folds thinking tokens into `output_tokens`.
+ * Reasoning is 45-75% of generated tokens in real logs, so an opencode
+ * `output_tokens` is NOT directly comparable to a claude one — do not put the
+ * two in the same column of a cost comparison without saying so. It is left
+ * out rather than summed in because this module never derives a value the
+ * agent did not report; capturing it needs a field of its own on
+ * {@link AgentRunUsage} and `RunLogEntry`, which is a schema change beyond
+ * ai-dossier#524's scope.
+ */
+export declare function parseOpenCodeUsage(stdout: string | null | undefined): AgentRunUsage | null;
+/**
+ * Pick the usage parser for a dispatched agent, keyed off the spawned
+ * binary's basename — `opencode` (any path) routes to
+ * {@link parseOpenCodeUsage}; everything else, including an
+ * operator-configured command this build doesn't specifically recognize,
+ * falls back to {@link parseAgentUsage} (the claude shape). A command this
+ * build doesn't recognize is not guessed at further than that fallback —
+ * its output either parses as a claude-shaped JSON result or the parser
+ * returns null, never a fabricated guess.
+ */
+export declare function usageParserFor(cmd0: string): (stdout: string | null | undefined) => AgentRunUsage | null;
+//# sourceMappingURL=agent-usage.d.ts.map

package/dist/agent-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-usage.d.ts","sourceRoot":"","sources":["../src/agent-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,mHAAmH;IACnH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kFAAkF;IAClF,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,sEAAsE;IACtE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,kFAAkF;IAClF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAsFD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AAoLrD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,IAAI,CA6BvF;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,IAAI,CA6F1F;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,GACX,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,aAAa,GAAG,IAAI,CAE7D"}

package/dist/agent-usage.js

@@ -0,0 +1,493 @@
+"use strict";
+/**
+ * Parsers for headless-agent JSON result output — the token/cost/model data
+ * an `ai-dossier run` or `packages/sched` dispatch needs to record in
+ * `runs.jsonl` (#458, #524).
+ *
+ * Shared between `cli` (the `ai-dossier run` headless path) and `sched` (the
+ * scheduler's detached-agent dispatch path) so both consumers agree on which
+ * block of a claude/opencode result is the source of record — the divergence
+ * between them (one reading `usage`, the other `modelUsage`, and disagreeing
+ * enough to fabricate a ~43% "saving" when mixed, ai-dossier#524) is exactly
+ * the bug this module exists to close off. Lives in `core`, not `cli`,
+ * because `sched` cannot depend on `cli` (the dependency runs the other way:
+ * `cli` already depends on both `core` and `sched`).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SCHED_DISPATCH_EVENT = void 0;
+exports.parseAgentUsage = parseAgentUsage;
+exports.parseOpenCodeUsage = parseOpenCodeUsage;
+exports.usageParserFor = usageParserFor;
+const path = __importStar(require("node:path"));
+/**
+ * Largest token count accepted from an agent (#524). Well above any real run
+ * (a 1M-token context ×1000 turns), and low enough that summing a cohort of
+ * them in `sched stats` cannot reach Infinity.
+ */
+const MAX_REPORTED_TOKENS = 1e15;
+/** Largest cost in USD accepted from an agent (#524) — no real dispatch approaches it. */
+const MAX_REPORTED_COST_USD = 1e6;
+/**
+ * Narrow untrusted agent output to a finite, non-negative number within a
+ * sane ceiling (#524). Used for token counts AND for costs — hence the
+ * explicit `max`, since the two have very different plausible ranges.
+ *
+ * The ceiling is not paranoia: `sched stats` sums these across a cohort, and
+ * a single `1e308` entry would carry the whole TOTAL row to Infinity, which
+ * the formatter renders as `-` — silently blanking every legitimate run
+ * alongside it. Out-of-range values are rejected (null = "not reported")
+ * rather than clamped, so a bogus number is never presented as a real one.
+ */
+function toBounded(value, max) {
+    return typeof value === 'number' && Number.isFinite(value) && value >= 0 && value <= max
+        ? value
+        : null;
+}
+/** Token-count flavour of {@link toBounded}. */
+function toCount(value) {
+    return toBounded(value, MAX_REPORTED_TOKENS);
+}
+/** Cost flavour of {@link toBounded} — a USD amount, not a count. */
+function toCost(value) {
+    return toBounded(value, MAX_REPORTED_COST_USD);
+}
+/** Longest `model` value written to `runs.jsonl` before truncation (#524). */
+const MAX_MODEL_LENGTH = 200;
+/**
+ * Most model names joined into one `model` value (#524). The map/stream those
+ * names come from is agent-controlled and unbounded, so the join is capped
+ * before {@link sanitizeModel} ever sees it — 16 distinct models in one run
+ * is already far beyond anything real.
+ */
+const MAX_MODELS_JOINED = 16;
+/** Join model names for the `model` field, bounded by {@link MAX_MODELS_JOINED}. */
+function joinModels(names) {
+    if (names.length === 0)
+        return null;
+    if (names.length === 1)
+        return names[0];
+    return names.slice(0, MAX_MODELS_JOINED).join(',');
+}
+/**
+ * `model` is copied verbatim from untrusted agent JSON into a `runs.jsonl`
+ * entry a later command (`ai-dossier history`, `sched stats`) may render.
+ * Strip control characters (the terminal-escape/log-injection risk) and cap
+ * the length, rather than trusting an agent-controlled string unbounded.
+ */
+function sanitizeModel(value) {
+    if (value === null)
+        return null;
+    let clean = '';
+    // Bound the WORK, not just the result: `value` is agent-controlled and can
+    // be arbitrarily long, so stop as soon as the cap is reached rather than
+    // materializing a sanitized copy of the whole string first.
+    for (const char of value) {
+        if (clean.length >= MAX_MODEL_LENGTH)
+            break;
+        const code = char.codePointAt(0) ?? 0;
+        // C0 (< 0x20), DEL (0x7f) and C1 (0x80-0x9f) alike: U+009B is the 8-bit
+        // CSI, which a terminal in a non-UTF-8 locale acts on exactly like ESC[.
+        if (code >= 0x20 && code !== 0x7f && !(code >= 0x80 && code <= 0x9f))
+            clean += char;
+    }
+    return clean;
+}
+/** Narrow an unknown value to a plain-object record; null for anything else. */
+function asRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : null;
+}
+/**
+ * `type` of the preamble line `packages/sched` writes to a dispatch log at
+ * spawn time (ai-dossier#524). It exists so a log is never 0 bytes for a unit
+ * that ran; every parser here skips it rather than counting it as agent
+ * output. Shared from `core` so the writer (`sched`'s `createSpawnDeps`) and
+ * the readers (below) can never drift apart on the sentinel's spelling.
+ */
+exports.SCHED_DISPATCH_EVENT = 'sched-dispatch';
+/**
+ * Event `type`s that only ever appear INSIDE a stream, never as a whole
+ * `--output-format json` payload. A single such line must be parsed as a
+ * one-line stream, not mistaken for a result object (#524 review).
+ */
+const STREAM_EVENT_TYPES = new Set([
+    'assistant',
+    'user',
+    'system',
+    exports.SCHED_DISPATCH_EVENT,
+]);
+/** Parse one string as a JSON object; null for anything else (array, scalar, malformed). */
+function parseJsonObject(text) {
+    try {
+        return asRecord(JSON.parse(text));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Extract usage from a claude `result`-shaped object — the payload of
+ * `--output-format json`, and of the final `type:"result"` event of
+ * `--output-format stream-json`. Both carry the same fields.
+ *
+ * `modelUsage` (summed across every model entry) is the source of record for
+ * token counts and cost — it is the only block that reflects a multi-model
+ * run accurately. The top-level `usage` / `total_cost_usd` (older: `cost_usd`)
+ * fields are used ONLY when `modelUsage` has no object-shaped entry at all:
+ * they are never blended field-by-field with it, because the two blocks have been
+ * observed to disagree (ai-dossier#524) — picking one field from each would
+ * silently produce a number neither block actually reported.
+ */
+function extractResultUsage(parsed) {
+    const usage = asRecord(parsed.usage) ?? {};
+    const modelUsage = asRecord(parsed.modelUsage);
+    // Keep only object-shaped entries; a scalar entry is malformed, not a model.
+    const modelEntries = modelUsage
+        ? Object.entries(modelUsage).filter((entry) => !!asRecord(entry[1]))
+        : [];
+    const hasModelUsage = modelEntries.length > 0;
+    /** Sum one field across every model entry, trying each spelling in turn. */
+    const sumFromModelUsage = (keys, narrow = toCount) => {
+        let sum = 0;
+        let seen = false;
+        for (const [, entry] of modelEntries) {
+            let value = null;
+            for (const key of keys) {
+                value = narrow(entry[key]);
+                if (value !== null)
+                    break;
+            }
+            if (value !== null) {
+                sum += value;
+                seen = true;
+            }
+        }
+        return seen ? sum : null;
+    };
+    // modelUsage wins whenever it carries at least one object-shaped entry —
+    // even if that entry only answers some of the fields — so a run's numbers
+    // always come from a single, consistent block rather than a per-field blend
+    // with `usage`. (`modelUsage: {}`, or a map whose every entry is a scalar,
+    // is malformed rather than present: `usage` is used in that case.)
+    const input_tokens = hasModelUsage
+        ? sumFromModelUsage(['inputTokens', 'input_tokens'])
+        : toCount(usage.input_tokens);
+    const output_tokens = hasModelUsage
+        ? sumFromModelUsage(['outputTokens', 'output_tokens'])
+        : toCount(usage.output_tokens);
+    const cache_creation_tokens = hasModelUsage
+        ? sumFromModelUsage(['cacheCreationInputTokens', 'cache_creation_input_tokens'])
+        : toCount(usage.cache_creation_input_tokens);
+    const cache_read_tokens = hasModelUsage
+        ? sumFromModelUsage(['cacheReadInputTokens', 'cache_read_input_tokens'])
+        : toCount(usage.cache_read_input_tokens);
+    // `costUSD` FIRST: that is the key claude actually writes inside a
+    // `modelUsage` entry (verified against a live claude stats artifact, #524
+    // review). `totalCostUsd`/`total_cost_usd` are kept as tolerated spellings.
+    // When modelUsage reports no cost key at all, fall back to the top-level
+    // total rather than reporting null — the whole-run cost is not a per-field
+    // blend of two token blocks, it is the one number both shapes agree on, and
+    // dropping it silently regressed `ai-dossier run`'s existing cost recording.
+    const costFromModelUsage = hasModelUsage
+        ? sumFromModelUsage(['costUSD', 'totalCostUsd', 'total_cost_usd'], toCost)
+        : null;
+    const total_cost_usd = costFromModelUsage ?? toCost(parsed.total_cost_usd) ?? toCost(parsed.cost_usd);
+    const modelFromUsage = joinModels(modelEntries.map(([key]) => key));
+    const rawModel = typeof parsed.model === 'string' && parsed.model ? parsed.model : modelFromUsage;
+    const model = sanitizeModel(rawModel);
+    const result_text = typeof parsed.result === 'string' ? parsed.result : null;
+    return {
+        model,
+        input_tokens,
+        output_tokens,
+        cache_creation_tokens,
+        cache_read_tokens,
+        total_cost_usd,
+        result_text,
+    };
+}
+/**
+ * Sum per-turn usage from `type:"assistant"` stream events — the fallback for
+ * a run that produced NO final `result` event (ai-dossier#524).
+ *
+ * The scheduler kills an agent that is still alive when ground truth says its
+ * unit is already done (`reconcileRunning`'s external-advance branch), and a
+ * killed agent never emits its `result` event. Before stream-json that meant
+ * zero recoverable tokens for those dispatches — six of the eleven pilot units.
+ * Each `assistant` event carries the usage of the request that produced it, so
+ * summing them recovers what the run actually spent up to the kill.
+ *
+ * `total_cost_usd` stays null: per-turn events do not report cost, and this
+ * path must not fabricate one from token counts.
+ */
+function sumAssistantUsage(events) {
+    let input = 0;
+    let output = 0;
+    let cacheCreation = 0;
+    let cacheRead = 0;
+    let sawInput = false;
+    let sawOutput = false;
+    let sawCacheCreation = false;
+    let sawCacheRead = false;
+    const models = new Set();
+    for (const event of events) {
+        const message = asRecord(event.message);
+        if (!message)
+            continue;
+        if (typeof message.model === 'string' && message.model)
+            models.add(message.model);
+        const usage = asRecord(message.usage);
+        if (!usage)
+            continue;
+        const inputTokens = toCount(usage.input_tokens);
+        if (inputTokens !== null) {
+            input += inputTokens;
+            sawInput = true;
+        }
+        const outputTokens = toCount(usage.output_tokens);
+        if (outputTokens !== null) {
+            output += outputTokens;
+            sawOutput = true;
+        }
+        const cacheCreationTokens = toCount(usage.cache_creation_input_tokens);
+        if (cacheCreationTokens !== null) {
+            cacheCreation += cacheCreationTokens;
+            sawCacheCreation = true;
+        }
+        const cacheReadTokens = toCount(usage.cache_read_input_tokens);
+        if (cacheReadTokens !== null) {
+            cacheRead += cacheReadTokens;
+            sawCacheRead = true;
+        }
+    }
+    return {
+        model: sanitizeModel(joinModels([...models])),
+        input_tokens: sawInput ? input : null,
+        output_tokens: sawOutput ? output : null,
+        cache_creation_tokens: sawCacheCreation ? cacheCreation : null,
+        cache_read_tokens: sawCacheRead ? cacheRead : null,
+        total_cost_usd: null,
+        result_text: null,
+    };
+}
+/**
+ * Parse a claude headless result into usage data — both output formats.
+ *
+ * Accepts either shape, because the two consumers spawn claude differently:
+ *
+ * - **A single JSON object** (`--output-format json`, what `ai-dossier run`
+ *   uses): parsed whole.
+ * - **A JSONL event stream** (`--output-format stream-json`, what the
+ *   scheduler dispatches with since ai-dossier#524): the LAST `type:"result"`
+ *   event wins — a per-unit log is append-mode, so a prior dispatch's result
+ *   may precede this one in the same slice. With no `result` event at all (an
+ *   agent killed mid-run), per-turn `assistant` usage is summed instead, so an
+ *   interrupted dispatch still reports the tokens it really spent.
+ *
+ * Lines that do not parse as JSON objects are skipped rather than
+ * disqualifying the stream: the sched dispatch preamble
+ * ({@link SCHED_DISPATCH_EVENT}) sits at the head of every dispatch slice, and
+ * an agent killed mid-write leaves a truncated final line.
+ *
+ * Returns null when the output parses as neither shape (and for a stream
+ * holding no usage-bearing event). A result object that simply reported no
+ * usage yields an entry whose fields are all null, not `null` itself —
+ * "the agent reported nothing" and "there was no agent output" stay distinct.
+ */
+function parseAgentUsage(stdout) {
+    if (typeof stdout !== 'string' || stdout.trim() === '')
+        return null;
+    // `--output-format json`: the whole payload is one object. Checked first so
+    // a pretty-printed (multi-line) result is not mistaken for an event stream.
+    // Stream event types are excluded, or a stream that happens to hold exactly
+    // ONE line (an agent killed after a single turn, or whose preamble write
+    // failed) would take this path and report all-null instead of falling
+    // through to the per-turn sum below.
+    const single = parseJsonObject(stdout);
+    if (single && !STREAM_EVENT_TYPES.has(single.type))
+        return extractResultUsage(single);
+    let lastResult = null;
+    const assistants = [];
+    for (const line of stdout.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        const event = parseJsonObject(trimmed);
+        if (!event || event.type === exports.SCHED_DISPATCH_EVENT)
+            continue;
+        if (event.type === 'result')
+            lastResult = event;
+        else if (event.type === 'assistant')
+            assistants.push(event);
+    }
+    if (lastResult)
+        return extractResultUsage(lastResult);
+    if (assistants.length > 0)
+        return sumAssistantUsage(assistants);
+    return null;
+}
+/**
+ * Parse an `opencode run --format json` result stream into usage data (#459).
+ *
+ * opencode emits one JSON event per line: the assistant's text arrives in
+ * `type:"text"` parts, and per-step token/cost totals in `type:"step_finish"`
+ * parts (a multi-step run emits several — tokens and cost are summed), with
+ * cache counts nested as `tokens.cache: { write, read }`. The model id is not
+ * present in the events, so `model` is null and callers fall back to the
+ * requested --model alias — that field, and only that field, is genuinely
+ * unavailable here rather than merely absent. Returns null when the output
+ * holds no opencode event at all; individual non-JSON lines (stderr warnings
+ * interleaved by the scheduler's merged stdout/stderr fd) are skipped, not
+ * treated as disqualifying.
+ *
+ * **Cross-agent caveat.** opencode reports `tokens.reasoning` SEPARATELY from
+ * `tokens.output` (a step's `total` is input + output + reasoning +
+ * cache.read), whereas claude folds thinking tokens into `output_tokens`.
+ * Reasoning is 45-75% of generated tokens in real logs, so an opencode
+ * `output_tokens` is NOT directly comparable to a claude one — do not put the
+ * two in the same column of a cost comparison without saying so. It is left
+ * out rather than summed in because this module never derives a value the
+ * agent did not report; capturing it needs a field of its own on
+ * {@link AgentRunUsage} and `RunLogEntry`, which is a schema change beyond
+ * ai-dossier#524's scope.
+ */
+function parseOpenCodeUsage(stdout) {
+    if (typeof stdout !== 'string' || stdout.trim() === '')
+        return null;
+    let sawEvent = false;
+    const texts = [];
+    let inputTokens = 0;
+    let outputTokens = 0;
+    let cacheCreationTokens = 0;
+    let cacheReadTokens = 0;
+    let costUsd = 0;
+    let sawUsage = false;
+    let sawCacheCreation = false;
+    let sawCacheRead = false;
+    for (const line of stdout.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        const event = parseJsonObject(trimmed);
+        // Skip an unparseable line rather than discarding the whole stream
+        // (#524 review). `createSpawnDeps` merges stderr into the SAME fd as
+        // stdout, and opencode writes ANSI-coloured warnings there ("permission
+        // requested: ... auto-rejecting"), so ONE such line in a 1,600-line log
+        // used to null out the entire run — ~$28 and ~97M cache-read tokens
+        // across two real logs on a six-run cohort, recorded as indistinguishable
+        // nulls. Format-mismatch detection is preserved by `sawEvent` below: a
+        // stream with no valid opencode event at all still returns null.
+        if (!event)
+            continue;
+        // The sched dispatch preamble (#524) is written by the scheduler, not by
+        // opencode: skip it WITHOUT setting `sawEvent`, so a log holding only a
+        // preamble still reads as "the agent wrote nothing" (null) rather than an
+        // all-null usage object implying opencode reported no tokens.
+        if (event.type === exports.SCHED_DISPATCH_EVENT)
+            continue;
+        sawEvent = true;
+        const part = asRecord(event.part);
+        if (event.type === 'text' && part && typeof part.text === 'string') {
+            texts.push(part.text);
+        }
+        if (event.type === 'step_finish' && part) {
+            const tokens = asRecord(part.tokens);
+            if (tokens) {
+                const input = toCount(tokens.input);
+                if (input !== null) {
+                    inputTokens += input;
+                    sawUsage = true;
+                }
+                const output = toCount(tokens.output);
+                if (output !== null) {
+                    outputTokens += output;
+                    sawUsage = true;
+                }
+                // opencode nests cache counts one level down, as
+                // `tokens.cache: { write, read }` — verified against a real 310-event
+                // dispatch log (#524 review). They were previously hardcoded null on
+                // the mistaken belief opencode did not report them, silently dropping
+                // tens of millions of cache-read tokens per run.
+                const cache = asRecord(tokens.cache);
+                if (cache) {
+                    const write = toCount(cache.write);
+                    if (write !== null) {
+                        cacheCreationTokens += write;
+                        sawCacheCreation = true;
+                        sawUsage = true;
+                    }
+                    const read = toCount(cache.read);
+                    if (read !== null) {
+                        cacheReadTokens += read;
+                        sawCacheRead = true;
+                        sawUsage = true;
+                    }
+                }
+            }
+            const cost = toCost(part.cost);
+            if (cost !== null) {
+                costUsd += cost;
+                sawUsage = true;
+            }
+        }
+    }
+    if (!sawEvent)
+        return null;
+    return {
+        model: null,
+        input_tokens: sawUsage ? inputTokens : null,
+        output_tokens: sawUsage ? outputTokens : null,
+        cache_creation_tokens: sawCacheCreation ? cacheCreationTokens : null,
+        cache_read_tokens: sawCacheRead ? cacheReadTokens : null,
+        total_cost_usd: sawUsage ? costUsd : null,
+        result_text: texts.length > 0 ? texts.join('') : null,
+    };
+}
+/**
+ * Pick the usage parser for a dispatched agent, keyed off the spawned
+ * binary's basename — `opencode` (any path) routes to
+ * {@link parseOpenCodeUsage}; everything else, including an
+ * operator-configured command this build doesn't specifically recognize,
+ * falls back to {@link parseAgentUsage} (the claude shape). A command this
+ * build doesn't recognize is not guessed at further than that fallback —
+ * its output either parses as a claude-shaped JSON result or the parser
+ * returns null, never a fabricated guess.
+ */
+function usageParserFor(cmd0) {
+    return path.basename(cmd0) === 'opencode' ? parseOpenCodeUsage : parseAgentUsage;
+}
+//# sourceMappingURL=agent-usage.js.map

package/dist/agent-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-usage.js","sourceRoot":"","sources":["../src/agent-usage.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8TH,0CA6BC;AA2BD,gDA6FC;AAYD,wCAIC;AAjeD,gDAAkC;AAqBlC;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,0FAA0F;AAC1F,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC;;;;;;;;;;GAUG;AACH,SAAS,SAAS,CAAC,KAAc,EAAE,GAAW;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG;QACtF,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,gDAAgD;AAChD,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,SAAS,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;AAC/C,CAAC;AAED,qEAAqE;AACrE,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,oFAAoF;AACpF,SAAS,UAAU,CAAC,KAAwB;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,KAAoB;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,2EAA2E;IAC3E,yEAAyE;IACzE,4DAA4D;IAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,IAAI,gBAAgB;YAAE,MAAM;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;YAAE,KAAK,IAAI,IAAI,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;GAMG;AACU,QAAA,oBAAoB,GAAG,gBAAgB,CAAC;AAErD;;;;GAIG;AACH,MAAM,kBAAkB,GAAyB,IAAI,GAAG,CAAC;IACvD,WAAW;IACX,MAAM;IACN,QAAQ;IACR,4BAAoB;CACrB,CAAC,CAAC;AAEH,4FAA4F;AAC5F,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,kBAAkB,CAAC,MAA+B;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/C,6EAA6E;IAC7E,MAAM,YAAY,GAAG,UAAU;QAC7B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAC/B,CAAC,KAAK,EAA8C,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAC5E;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAE9C,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,CACxB,IAAuB,EACvB,SAA4C,OAAO,EACpC,EAAE;QACjB,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YACrC,IAAI,KAAK,GAAkB,IAAI,CAAC;YAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3B,IAAI,KAAK,KAAK,IAAI;oBAAE,MAAM;YAC5B,CAAC;YACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,GAAG,IAAI,KAAK,CAAC;gBACb,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,YAAY,GAAG,aAAa;QAChC,CAAC,CAAC,iBAAiB,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACpD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAChC,MAAM,aAAa,GAAG,aAAa;QACjC,CAAC,CAAC,iBAAiB,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QACtD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,MAAM,qBAAqB,GAAG,aAAa;QACzC,CAAC,CAAC,iBAAiB,CAAC,CAAC,0BAA0B,EAAE,6BAA6B,CAAC,CAAC;QAChF,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GAAG,aAAa;QACrC,CAAC,CAAC,iBAAiB,CAAC,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,CAAC;QACxE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,mEAAmE;IACnE,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,kBAAkB,GAAG,aAAa;QACtC,CAAC,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1E,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,cAAc,GAClB,kBAAkB,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEjF,MAAM,cAAc,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC;IAClG,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7E,OAAO;QACL,KAAK;QACL,YAAY;QACZ,aAAa;QACb,qBAAqB;QACrB,iBAAiB;QACjB,cAAc;QACd,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,iBAAiB,CAAC,MAA0C;IACnE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAElF,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,KAAK,IAAI,WAAW,CAAC;YACrB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,IAAI,YAAY,CAAC;YACvB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,MAAM,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACvE,IAAI,mBAAmB,KAAK,IAAI,EAAE,CAAC;YACjC,aAAa,IAAI,mBAAmB,CAAC;YACrC,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/D,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,SAAS,IAAI,eAAe,CAAC;YAC7B,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;QAC7C,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACrC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACxC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;QAC9D,iBAAiB,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAClD,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,eAAe,CAAC,MAAiC;IAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAEpE,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,sEAAsE;IACtE,qCAAqC;IACrC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAEtF,IAAI,UAAU,GAAmC,IAAI,CAAC;IACtD,MAAM,UAAU,GAA8B,EAAE,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,4BAAoB;YAAE,SAAS;QAE5D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,UAAU,GAAG,KAAK,CAAC;aAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,UAAU;QAAE,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAgB,kBAAkB,CAAC,MAAiC;IAClE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAEpE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACvC,mEAAmE;QACnE,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,0EAA0E;QAC1E,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,4BAAoB;YAAE,SAAS;QAClD,QAAQ,GAAG,IAAI,CAAC;QAEhB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,WAAW,IAAI,KAAK,CAAC;oBACrB,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBACpB,YAAY,IAAI,MAAM,CAAC;oBACvB,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;gBACD,iDAAiD;gBACjD,sEAAsE;gBACtE,qEAAqE;gBACrE,sEAAsE;gBACtE,iDAAiD;gBACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACnC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACnB,mBAAmB,IAAI,KAAK,CAAC;wBAC7B,gBAAgB,GAAG,IAAI,CAAC;wBACxB,QAAQ,GAAG,IAAI,CAAC;oBAClB,CAAC;oBACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;wBAClB,eAAe,IAAI,IAAI,CAAC;wBACxB,YAAY,GAAG,IAAI,CAAC;wBACpB,QAAQ,GAAG,IAAI,CAAC;oBAClB,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,OAAO,IAAI,IAAI,CAAC;gBAChB,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,OAAO;QACL,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;QAC3C,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;QAC7C,qBAAqB,EAAE,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI;QACpE,iBAAiB,EAAE,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;QACxD,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACzC,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;KACtD,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,IAAY;IAEZ,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC;AACnF,CAAC"}

package/dist/index.d.ts

@@ -6,8 +6,12 @@
  * - Checksum verification (SHA256 integrity checks)
  * - Signature verification (Minisign and AWS KMS)
  * - Output coherence validation
+ * - Headless-agent usage parsing (token/cost from claude/opencode JSON results)
+ * - runs.jsonl entry schema and path (shared by cli + sched)
  * - TypeScript type definitions
  */
+export type { AgentRunUsage } from './agent-usage';
+export { parseAgentUsage, parseOpenCodeUsage, SCHED_DISPATCH_EVENT, usageParserFor, } from './agent-usage';
 export { calculateChecksum, verifyIntegrity } from './checksum';
 export type { CoherenceContext, CoherenceDiagnostic, CoherenceResult, CoherenceSeverity, DeclaredOutputSchema, StepOutput, } from './coherence';
 export { validateCoherence, validateStepCoherence } from './coherence';
@@ -18,6 +22,8 @@ export { defaultRules, LintRuleRegistry, lintDossier, lintDossierFile, loadLintC
 export { parseDossierContent, parseDossierFile, RECOMMENDED_FIELDS, REQUIRED_FIELDS, VALID_RISK_LEVELS, VALID_STATUSES, validateFrontmatter, } from './parser';
 export type { ChecksumStatus, ContentRiskResult, SignatureStatus, VerificationRiskLevel, VerificationRiskResult, } from './risk-assessment';
 export { assessContentRisk, assessVerificationRisk } from './risk-assessment';
+export type { RunLogEntry } from './run-log-entry';
+export { runsLogPath } from './run-log-entry';
 export type { SecurityCategory, SecurityFinding, SecurityReport, SecurityRule, SecurityRuleContext, SecurityRuleSeverityOverride, SecurityScanConfig, SecuritySeverity, } from './security-scanner';
 export { buildReport, defaultSecurityRules, SecurityRuleRegistry, scanDossier, scanDossierFile, scanMarkdown, } from './security-scanner';
 export type { TrustedKeyEntry, TrustedKeyProblem } from './signature';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEhE,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACvE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACtE,YAAY,EACV,UAAU,EACV,cAAc,EACd,UAAU,EACV,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,4BAA4B,EAC5B,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,eAAe,EACf,MAAM,EACN,QAAQ,EACR,gBAAgB,EAChB,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,SAAS,GACV,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,WAAW,IAAI,gBAAgB,EAC/B,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,YAAY,EACV,gBAAgB,EAChB,SAAS,IAAI,cAAc,EAC3B,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE7E,cAAc,SAAS,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEhE,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACvE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACtE,YAAY,EACV,UAAU,EACV,cAAc,EACd,UAAU,EACV,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,4BAA4B,EAC5B,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,eAAe,EACf,MAAM,EACN,QAAQ,EACR,gBAAgB,EAChB,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,SAAS,GACV,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,WAAW,IAAI,gBAAgB,EAC/B,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,YAAY,EACV,gBAAgB,EAChB,SAAS,IAAI,cAAc,EAC3B,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE7E,cAAc,SAAS,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -7,6 +7,8 @@
  * - Checksum verification (SHA256 integrity checks)
  * - Signature verification (Minisign and AWS KMS)
  * - Output coherence validation
+ * - Headless-agent usage parsing (token/cost from claude/opencode JSON results)
+ * - runs.jsonl entry schema and path (shared by cli + sched)
  * - TypeScript type definitions
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
@@ -24,8 +26,13 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createTraceRecorder = exports.resolveTraceConfig = exports.toSpkiPem = exports.signatureCoverage = exports.publicKeysMatch = exports.normalizePublicKey = exports.isSupportedPublicKey = exports.canonicalizeFrontmatter = exports.buildSignedPayload = exports.VerifierRegistry = exports.KmsVerifier = exports.KmsSigner = exports.getVerifierRegistry = exports.Ed25519Verifier = exports.Ed25519Signer = exports.verifyWithKms = exports.verifyWithEd25519 = exports.verifySignature = exports.trustedKeysFromContent = exports.reportTrustedKeyProblems = exports.parseTrustedKeys = exports.loadTrustedKeys = exports.isKmsKeyIdentifier = exports.findTrustedIdentifier = exports.scanMarkdown = exports.scanDossierFile = exports.scanDossier = exports.SecurityRuleRegistry = exports.defaultSecurityRules = exports.buildReport = exports.assessVerificationRisk = exports.assessContentRisk = exports.validateFrontmatter = exports.VALID_STATUSES = exports.VALID_RISK_LEVELS = exports.REQUIRED_FIELDS = exports.RECOMMENDED_FIELDS = exports.parseDossierFile = exports.parseDossierContent = exports.loadLintConfig = exports.lintDossierFile = exports.lintDossier = exports.LintRuleRegistry = exports.defaultRules = exports.formatDossierFile = exports.formatDossierContent = exports.validateStepCoherence = exports.validateCoherence = exports.verifyIntegrity = exports.calculateChecksum = void 0;
-exports.createDefaultVerificationResult = exports.scanBodyForUrls = exports.isUrlCoveredByDeclared = exports.isPlaceholderUrl = exports.findUndeclaredUrls = exports.findStaleReferences = exports.collectDeclaredUrls = exports.readFileIfExists = exports.getErrorStack = exports.getErrorMessage = exports.sha256Hex = exports.sha256Hash = exports.VALID_TRACE_STATUSES = void 0;
+exports.normalizePublicKey = exports.isSupportedPublicKey = exports.canonicalizeFrontmatter = exports.buildSignedPayload = exports.VerifierRegistry = exports.KmsVerifier = exports.KmsSigner = exports.getVerifierRegistry = exports.Ed25519Verifier = exports.Ed25519Signer = exports.verifyWithKms = exports.verifyWithEd25519 = exports.verifySignature = exports.trustedKeysFromContent = exports.reportTrustedKeyProblems = exports.parseTrustedKeys = exports.loadTrustedKeys = exports.isKmsKeyIdentifier = exports.findTrustedIdentifier = exports.scanMarkdown = exports.scanDossierFile = exports.scanDossier = exports.SecurityRuleRegistry = exports.defaultSecurityRules = exports.buildReport = exports.runsLogPath = exports.assessVerificationRisk = exports.assessContentRisk = exports.validateFrontmatter = exports.VALID_STATUSES = exports.VALID_RISK_LEVELS = exports.REQUIRED_FIELDS = exports.RECOMMENDED_FIELDS = exports.parseDossierFile = exports.parseDossierContent = exports.loadLintConfig = exports.lintDossierFile = exports.lintDossier = exports.LintRuleRegistry = exports.defaultRules = exports.formatDossierFile = exports.formatDossierContent = exports.validateStepCoherence = exports.validateCoherence = exports.verifyIntegrity = exports.calculateChecksum = exports.usageParserFor = exports.SCHED_DISPATCH_EVENT = exports.parseOpenCodeUsage = exports.parseAgentUsage = void 0;
+exports.createDefaultVerificationResult = exports.scanBodyForUrls = exports.isUrlCoveredByDeclared = exports.isPlaceholderUrl = exports.findUndeclaredUrls = exports.findStaleReferences = exports.collectDeclaredUrls = exports.readFileIfExists = exports.getErrorStack = exports.getErrorMessage = exports.sha256Hex = exports.sha256Hash = exports.VALID_TRACE_STATUSES = exports.createTraceRecorder = exports.resolveTraceConfig = exports.toSpkiPem = exports.signatureCoverage = exports.publicKeysMatch = void 0;
+var agent_usage_1 = require("./agent-usage");
+Object.defineProperty(exports, "parseAgentUsage", { enumerable: true, get: function () { return agent_usage_1.parseAgentUsage; } });
+Object.defineProperty(exports, "parseOpenCodeUsage", { enumerable: true, get: function () { return agent_usage_1.parseOpenCodeUsage; } });
+Object.defineProperty(exports, "SCHED_DISPATCH_EVENT", { enumerable: true, get: function () { return agent_usage_1.SCHED_DISPATCH_EVENT; } });
+Object.defineProperty(exports, "usageParserFor", { enumerable: true, get: function () { return agent_usage_1.usageParserFor; } });
 // Checksum exports
 var checksum_1 = require("./checksum");
 Object.defineProperty(exports, "calculateChecksum", { enumerable: true, get: function () { return checksum_1.calculateChecksum; } });
@@ -57,6 +64,8 @@ Object.defineProperty(exports, "validateFrontmatter", { enumerable: true, get: f
 var risk_assessment_1 = require("./risk-assessment");
 Object.defineProperty(exports, "assessContentRisk", { enumerable: true, get: function () { return risk_assessment_1.assessContentRisk; } });
 Object.defineProperty(exports, "assessVerificationRisk", { enumerable: true, get: function () { return risk_assessment_1.assessVerificationRisk; } });
+var run_log_entry_1 = require("./run-log-entry");
+Object.defineProperty(exports, "runsLogPath", { enumerable: true, get: function () { return run_log_entry_1.runsLogPath; } });
 var security_scanner_1 = require("./security-scanner");
 Object.defineProperty(exports, "buildReport", { enumerable: true, get: function () { return security_scanner_1.buildReport; } });
 Object.defineProperty(exports, "defaultSecurityRules", { enumerable: true, get: function () { return security_scanner_1.defaultSecurityRules; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;AAEH,mBAAmB;AACnB,uCAAgE;AAAvD,6GAAA,iBAAiB,OAAA;AAAE,2GAAA,eAAe,OAAA;AAU3C,yCAAuE;AAA9D,8GAAA,iBAAiB,OAAA;AAAE,kHAAA,qBAAqB,OAAA;AAEjD,oBAAoB;AACpB,yCAAsE;AAA7D,iHAAA,oBAAoB,OAAA;AAAE,8GAAA,iBAAiB,OAAA;AAUhD,iBAAiB;AACjB,mCAMkB;AALhB,sGAAA,YAAY,OAAA;AACZ,0GAAA,gBAAgB,OAAA;AAChB,qGAAA,WAAW,OAAA;AACX,yGAAA,eAAe,OAAA;AACf,wGAAA,cAAc,OAAA;AAEhB,iBAAiB;AACjB,mCAQkB;AAPhB,6GAAA,mBAAmB,OAAA;AACnB,0GAAA,gBAAgB,OAAA;AAChB,4GAAA,kBAAkB,OAAA;AAClB,yGAAA,eAAe,OAAA;AACf,2GAAA,iBAAiB,OAAA;AACjB,wGAAA,cAAc,OAAA;AACd,6GAAA,mBAAmB,OAAA;AASrB,0BAA0B;AAC1B,qDAA8E;AAArE,oHAAA,iBAAiB,OAAA;AAAE,yHAAA,sBAAsB,OAAA;AAYlD,uDAO4B;AAN1B,+GAAA,WAAW,OAAA;AACX,wHAAA,oBAAoB,OAAA;AACpB,wHAAA,oBAAoB,OAAA;AACpB,+GAAA,WAAW,OAAA;AACX,mHAAA,eAAe,OAAA;AACf,gHAAA,YAAY,OAAA;AAId,yCAUqB;AATnB,kHAAA,qBAAqB,OAAA;AACrB,+GAAA,kBAAkB,OAAA;AAClB,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,qHAAA,wBAAwB,OAAA;AACxB,mHAAA,sBAAsB,OAAA;AACtB,4GAAA,eAAe,OAAA;AACf,8GAAA,iBAAiB,OAAA;AACjB,0GAAA,aAAa,OAAA;AAEf,iDAAiD;AACjD,qCAWmB;AAVjB,wGAAA,aAAa,OAAA;AACb,0GAAA,eAAe,OAAA;AACf,8GAAA,mBAAmB,OAAA;AACnB,oGAAA,SAAS,OAAA;AACT,sGAAA,WAAW,OAAA;AAIX,2GAAA,gBAAgB,OAAA;AAKlB,qDAQ2B;AAPzB,qHAAA,kBAAkB,OAAA;AAClB,0HAAA,uBAAuB,OAAA;AACvB,uHAAA,oBAAoB,OAAA;AACpB,qHAAA,kBAAkB,OAAA;AAClB,kHAAA,eAAe,OAAA;AACf,oHAAA,iBAAiB,OAAA;AACjB,4GAAA,SAAS,OAAA;AASX,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAW3B,mDAA6E;AAApE,qHAAA,mBAAmB,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAClD,eAAe;AACf,0CAAwB;AACxB,mBAAmB;AACnB,yCAAuD;AAA9C,oGAAA,UAAU,OAAA;AAAE,mGAAA,SAAS,OAAA;AAC9B,kBAAkB;AAClB,yCAAgE;AAAvD,yGAAA,eAAe,OAAA;AAAE,uGAAA,aAAa,OAAA;AACvC,wBAAwB;AACxB,iCAA8C;AAArC,sGAAA,gBAAgB,OAAA;AACzB,yBAAyB;AACzB,mDAO6B;AAN3B,kHAAA,mBAAmB,OAAA;AACnB,kHAAA,mBAAmB,OAAA;AACnB,iHAAA,kBAAkB,OAAA;AAClB,+GAAA,gBAAgB,OAAA;AAChB,qHAAA,sBAAsB,OAAA;AACtB,8GAAA,eAAe,OAAA;AAEjB,yBAAyB;AACzB,qDAAuE;AAA9D,+HAAA,+BAA+B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;AAIH,6CAKuB;AAJrB,8GAAA,eAAe,OAAA;AACf,iHAAA,kBAAkB,OAAA;AAClB,mHAAA,oBAAoB,OAAA;AACpB,6GAAA,cAAc,OAAA;AAEhB,mBAAmB;AACnB,uCAAgE;AAAvD,6GAAA,iBAAiB,OAAA;AAAE,2GAAA,eAAe,OAAA;AAU3C,yCAAuE;AAA9D,8GAAA,iBAAiB,OAAA;AAAE,kHAAA,qBAAqB,OAAA;AAEjD,oBAAoB;AACpB,yCAAsE;AAA7D,iHAAA,oBAAoB,OAAA;AAAE,8GAAA,iBAAiB,OAAA;AAUhD,iBAAiB;AACjB,mCAMkB;AALhB,sGAAA,YAAY,OAAA;AACZ,0GAAA,gBAAgB,OAAA;AAChB,qGAAA,WAAW,OAAA;AACX,yGAAA,eAAe,OAAA;AACf,wGAAA,cAAc,OAAA;AAEhB,iBAAiB;AACjB,mCAQkB;AAPhB,6GAAA,mBAAmB,OAAA;AACnB,0GAAA,gBAAgB,OAAA;AAChB,4GAAA,kBAAkB,OAAA;AAClB,yGAAA,eAAe,OAAA;AACf,2GAAA,iBAAiB,OAAA;AACjB,wGAAA,cAAc,OAAA;AACd,6GAAA,mBAAmB,OAAA;AASrB,0BAA0B;AAC1B,qDAA8E;AAArE,oHAAA,iBAAiB,OAAA;AAAE,yHAAA,sBAAsB,OAAA;AAGlD,iDAA8C;AAArC,4GAAA,WAAW,OAAA;AAYpB,uDAO4B;AAN1B,+GAAA,WAAW,OAAA;AACX,wHAAA,oBAAoB,OAAA;AACpB,wHAAA,oBAAoB,OAAA;AACpB,+GAAA,WAAW,OAAA;AACX,mHAAA,eAAe,OAAA;AACf,gHAAA,YAAY,OAAA;AAId,yCAUqB;AATnB,kHAAA,qBAAqB,OAAA;AACrB,+GAAA,kBAAkB,OAAA;AAClB,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,qHAAA,wBAAwB,OAAA;AACxB,mHAAA,sBAAsB,OAAA;AACtB,4GAAA,eAAe,OAAA;AACf,8GAAA,iBAAiB,OAAA;AACjB,0GAAA,aAAa,OAAA;AAEf,iDAAiD;AACjD,qCAWmB;AAVjB,wGAAA,aAAa,OAAA;AACb,0GAAA,eAAe,OAAA;AACf,8GAAA,mBAAmB,OAAA;AACnB,oGAAA,SAAS,OAAA;AACT,sGAAA,WAAW,OAAA;AAIX,2GAAA,gBAAgB,OAAA;AAKlB,qDAQ2B;AAPzB,qHAAA,kBAAkB,OAAA;AAClB,0HAAA,uBAAuB,OAAA;AACvB,uHAAA,oBAAoB,OAAA;AACpB,qHAAA,kBAAkB,OAAA;AAClB,kHAAA,eAAe,OAAA;AACf,oHAAA,iBAAiB,OAAA;AACjB,4GAAA,SAAS,OAAA;AASX,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAW3B,mDAA6E;AAApE,qHAAA,mBAAmB,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAClD,eAAe;AACf,0CAAwB;AACxB,mBAAmB;AACnB,yCAAuD;AAA9C,oGAAA,UAAU,OAAA;AAAE,mGAAA,SAAS,OAAA;AAC9B,kBAAkB;AAClB,yCAAgE;AAAvD,yGAAA,eAAe,OAAA;AAAE,uGAAA,aAAa,OAAA;AACvC,wBAAwB;AACxB,iCAA8C;AAArC,sGAAA,gBAAgB,OAAA;AACzB,yBAAyB;AACzB,mDAO6B;AAN3B,kHAAA,mBAAmB,OAAA;AACnB,kHAAA,mBAAmB,OAAA;AACnB,iHAAA,kBAAkB,OAAA;AAClB,+GAAA,gBAAgB,OAAA;AAChB,qHAAA,sBAAsB,OAAA;AACtB,8GAAA,eAAe,OAAA;AAEjB,yBAAyB;AACzB,qDAAuE;AAA9D,+HAAA,+BAA+B,OAAA"}

package/dist/run-log-entry.d.ts

@@ -0,0 +1,97 @@
+/**
+ * The `~/.dossier/runs.jsonl` entry schema (#458, #524).
+ *
+ * Lives in `core`, not `cli`, so `packages/sched`'s dispatch path can write
+ * entries in the same shape `cli`'s `ai-dossier run` and `ai-dossier history`
+ * already read — one schema, two writers — without `sched` depending on
+ * `cli` (the dependency runs the other way). `cli/src/run-log.ts` re-exports
+ * this type and owns the actual file I/O (respecting the `auditLog` config
+ * flag); `sched` writes its own entries independently — see
+ * `packages/sched/src/run-log.ts`.
+ */
+export interface RunLogEntry {
+    timestamp: string;
+    dossier: string;
+    resolved_version: string;
+    source: 'cache' | 'registry' | 'local' | 'url';
+    registry?: string;
+    /**
+     * How the version was resolved (only meaningful for registry sources):
+     *   - 'pinned'      — caller passed name@version explicitly
+     *   - 'registry'    — resolver called the registry and got a fresh version
+     *   - 'cache'       — resolver served from TTL'd resolution cache (no registry call)
+     *   - 'stale-cache' — registry was unreachable; fell back to highest cached semver
+     * Useful for postmortems answering "did this run hit a stale resolution that
+     * masked a registry outage?". Absent for local files and URLs.
+     */
+    resolution_source?: 'pinned' | 'registry' | 'cache' | 'stale-cache';
+    verification: 'passed' | 'failed' | 'skipped' | 'nested-skip';
+    llm: string;
+    user: string;
+    cwd: string;
+    nested: boolean;
+    /**
+     * Deprecated: written by the pre-#401 update-check machinery. Retained on the
+     * interface so `dossier history` can still display this field when reading
+     * older runs.jsonl entries. Not written by new runs.
+     */
+    update_available?: string;
+    /**
+     * Cost/observability fields (#458). All optional and nullable so old-schema
+     * entries still parse; written by new runs with explicit nulls when a value
+     * is unavailable — never fabricated.
+     */
+    /** Wall-clock duration of the run in milliseconds (action start → entry write). */
+    duration_ms?: number | null;
+    /**
+     * The exact agent command spawned (binary + args). Prompt content is excluded
+     * (headless prompts travel over stdin). Null when nothing was spawned
+     * (nested-skip, failed verification, dry-run, no LLM detected, unknown LLM).
+     */
+    spawned_command?: string | null;
+    /** Model id as reported by the agent CLI, else the requested --model alias. Null when unknown. */
+    model?: string | null;
+    /** Exit code of the spawned agent process, or of the CLI action for early exits. Null when killed by a signal or failed to spawn. */
+    exit_code?: number | null;
+    /** Why the spawned process produced no exit code: spawn error (e.g. ENOENT) or signal. Null when the process exited normally. */
+    spawn_error?: string | null;
+    /** Input tokens reported by the agent CLI. Null when unavailable. */
+    input_tokens?: number | null;
+    /** Output tokens reported by the agent CLI. Null when unavailable. */
+    output_tokens?: number | null;
+    /**
+     * Cache-creation (write) and cache-read input tokens reported by the agent
+     * CLI (#524). Sourced from `modelUsage`, the same as `input_tokens`/
+     * `output_tokens` — see `parseAgentUsage` in `./agent-usage`. Null when
+     * unavailable.
+     */
+    cache_creation_tokens?: number | null;
+    cache_read_tokens?: number | null;
+    /** Total cost in USD reported by the agent CLI. Null when unavailable. */
+    total_cost_usd?: number | null;
+    /**
+     * The scheduler unit this run belongs to (#524), e.g. `issue:524` or
+     * `batch:b1` — set by `packages/sched` dispatch entries, null/absent for
+     * an ordinary `ai-dossier run` invocation (which has no unit).
+     */
+    unit?: string | null;
+    /**
+     * The escalation-ladder model tier this dispatch ran at (#564), e.g.
+     * `mechanical` | `mid` | `strong` — set by `packages/sched` dispatch
+     * entries (the queue entry's resolved tier at spawn time); null/absent for
+     * an ordinary `ai-dossier run` invocation and for reconstructed entries
+     * (`sched stats --batch`'s raw-log recovery) where the tier that spawned a
+     * historical dispatch is no longer recorded anywhere.
+     */
+    tier?: string | null;
+}
+/**
+ * `~/.dossier/runs.jsonl` — the single location both writers (`cli`'s
+ * `ai-dossier run` and `packages/sched`'s dispatch path) append to, and both
+ * readers (`ai-dossier history`, `ai-dossier sched stats`) read from (#524).
+ * Hoisted here so the path is computed in exactly one place; before this,
+ * `cli/src/run-log.ts` and `packages/sched/src/run-log.ts` each built it
+ * independently and agreed only by coincidence. Testable via `home`.
+ */
+export declare function runsLogPath(home?: string): string;
+//# sourceMappingURL=run-log-entry.d.ts.map

package/dist/run-log-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-log-entry.d.ts","sourceRoot":"","sources":["../src/run-log-entry.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,KAAK,CAAC;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,aAAa,CAAC;IACpE,YAAY,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAC;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kGAAkG;IAClG,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qIAAqI;IACrI,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iIAAiI;IACjI,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,CAE/D"}

package/dist/run-log-entry.js

@@ -0,0 +1,50 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runsLogPath = runsLogPath;
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+/**
+ * `~/.dossier/runs.jsonl` — the single location both writers (`cli`'s
+ * `ai-dossier run` and `packages/sched`'s dispatch path) append to, and both
+ * readers (`ai-dossier history`, `ai-dossier sched stats`) read from (#524).
+ * Hoisted here so the path is computed in exactly one place; before this,
+ * `cli/src/run-log.ts` and `packages/sched/src/run-log.ts` each built it
+ * independently and agreed only by coincidence. Testable via `home`.
+ */
+function runsLogPath(home = os.homedir()) {
+    return path.join(home, '.dossier', 'runs.jsonl');
+}
+//# sourceMappingURL=run-log-entry.js.map

package/dist/run-log-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-log-entry.js","sourceRoot":"","sources":["../src/run-log-entry.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmGA,kCAEC;AArGD,4CAA8B;AAC9B,gDAAkC;AA0FlC;;;;;;;GAOG;AACH,SAAgB,WAAW,CAAC,OAAe,EAAE,CAAC,OAAO,EAAE;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AACnD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-dossier/core",
-  "version": "1.4.2",
+  "version": "1.5.1",
   "description": "Parsing, verification, and signing for dossiers — portable, signed, versioned skills for any LLM tool.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",