@algosuite/vo-mcp 0.2.0-beta.27 → 0.2.0-beta.29

package/dist/runner-cli.js

@@ -3001,6 +3001,62 @@ var init_windows_claude_launch = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/claude-credential-choice.mjs
+function isTruthyFlag(v) {
+  const s = String(v ?? "").trim().toLowerCase();
+  return s === "1" || s === "true" || s === "yes" || s === "on";
+}
+function wantsLogin(env2) {
+  return isTruthyFlag(env2[CLAUDE_PREFER_LOGIN_ENV]) || isTruthyFlag(env2[PREFER_LOGIN_ENV]);
+}
+function wantsKey(env2) {
+  return isTruthyFlag(env2[CLAUDE_PREFER_KEY_ENV]) || isTruthyFlag(env2[PREFER_KEY_ENV]);
+}
+function classifyClaudeCredential(baseEnv = {}, { getKey, probeLogin } = {}) {
+  const preferKey = wantsKey(baseEnv);
+  if (!preferKey && wantsLogin(baseEnv)) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN, key: null };
+  }
+  if (baseEnv.ANTHROPIC_API_KEY) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.ENV_KEY, key: null };
+  }
+  const key = getKey();
+  if (!key) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.NO_KEY, key: null };
+  }
+  if (preferKey) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN_PREFER_KEY, key };
+  }
+  if (probeLogin() === true) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.SUBSCRIPTION_WINS, key: null };
+  }
+  return { source: CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN, key };
+}
+var PREFER_LOGIN_ENV, CLAUDE_PREFER_LOGIN_ENV, PREFER_KEY_ENV, CLAUDE_PREFER_KEY_ENV, CLAUDE_CREDENTIAL_SOURCE;
+var init_claude_credential_choice = __esm({
+  "../../scripts/virtual-office/code-runner/claude-credential-choice.mjs"() {
+    "use strict";
+    PREFER_LOGIN_ENV = "VO_RUNNER_PREFER_LOGIN";
+    CLAUDE_PREFER_LOGIN_ENV = "VO_RUNNER_CLAUDE_PREFER_LOGIN";
+    PREFER_KEY_ENV = "VO_RUNNER_PREFER_KEY";
+    CLAUDE_PREFER_KEY_ENV = "VO_RUNNER_CLAUDE_PREFER_KEY";
+    CLAUDE_CREDENTIAL_SOURCE = Object.freeze({
+      /** PREFER_LOGIN set (and not overridden): any API key is ignored. */
+      PREFER_LOGIN: "prefer_login",
+      /** An explicit ANTHROPIC_API_KEY in the environment — the manual override. */
+      ENV_KEY: "env_key",
+      /** No key anywhere; the spawn falls through to the login session. */
+      NO_KEY: "no_key",
+      /** A stored key, used because the operator explicitly opted out of tier 1. */
+      KEYCHAIN_PREFER_KEY: "keychain_prefer_key",
+      /** A stored key exists but a proven live subscription outranks it. */
+      SUBSCRIPTION_WINS: "subscription_wins",
+      /** A stored key, used because no live subscription was proven. */
+      KEYCHAIN: "keychain"
+    });
+  }
+});
+
 // ../../scripts/virtual-office/code-runner/anthropic-key-store.mjs
 import { createRequire as createRequire2 } from "node:module";
 import { spawnSync as spawnSync2 } from "node:child_process";
@@ -3022,44 +3078,22 @@ function getAnthropicKey({ EntryCtor = defaultEntryCtor() } = {}) {
     return null;
   }
 }
-function isTruthyFlag(v) {
-  const s = String(v ?? "").trim().toLowerCase();
-  return s === "1" || s === "true" || s === "yes" || s === "on";
-}
-function wantsLogin(env2) {
-  return isTruthyFlag(env2[CLAUDE_PREFER_LOGIN_ENV]) || isTruthyFlag(env2[PREFER_LOGIN_ENV]);
-}
-function wantsKey(env2) {
-  return isTruthyFlag(env2[CLAUDE_PREFER_KEY_ENV]) || isTruthyFlag(env2[PREFER_KEY_ENV]);
-}
 function withAnthropicKey(baseEnv = {}, { getKey = getAnthropicKey, probeLogin = probeClaudeLoginState } = {}) {
-  if (wantsLogin(baseEnv)) {
-    const next = { ...baseEnv };
+  const { source, key } = classifyClaudeCredential(baseEnv, { getKey, probeLogin });
+  const next = { ...baseEnv };
+  if (source === CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN) {
     delete next.ANTHROPIC_API_KEY;
     return next;
   }
-  if (baseEnv.ANTHROPIC_API_KEY) return { ...baseEnv };
-  const key = getKey();
-  if (!key) return { ...baseEnv };
-  if (!wantsKey(baseEnv) && probeLogin() === true) return { ...baseEnv };
-  return { ...baseEnv, ANTHROPIC_API_KEY: key };
+  if (key !== null) next.ANTHROPIC_API_KEY = key;
+  return next;
 }
 function claudeCostBasis(env2 = process.env) {
   return String(env2.ANTHROPIC_API_KEY || "").trim() ? "vendor_billed" : "subscription_api_equivalent";
 }
 function describeAnthropicAuthSource(baseEnv = {}, { getKey = getAnthropicKey, probeLogin = probeClaudeLoginState } = {}) {
-  if (wantsLogin(baseEnv)) {
-    return "claude auth login (VO_RUNNER_PREFER_LOGIN set \u2014 any API key ignored)";
-  }
-  if (baseEnv.ANTHROPIC_API_KEY) return "ANTHROPIC_API_KEY from environment";
-  if (!getKey()) return "claude auth login session (no API key set)";
-  if (wantsKey(baseEnv)) {
-    return "ANTHROPIC_API_KEY from OS keychain (VO_RUNNER_PREFER_KEY set \u2014 subscription ignored)";
-  }
-  if (probeLogin() === true) {
-    return "claude auth login session (subscription beats the stored keychain key)";
-  }
-  return "ANTHROPIC_API_KEY from OS keychain";
+  const { source } = classifyClaudeCredential(baseEnv, { getKey, probeLogin });
+  return AUTH_SOURCE_DESCRIPTION[source];
 }
 function augmentAuthError(summary) {
   const s = String(summary ?? "");
@@ -3068,32 +3102,38 @@ function augmentAuthError(summary) {
 \u21B3 Anthropic auth failed on the runner. The \`claude\` CLI is a SEPARATE install/login from the Claude Desktop app and the Claude Code IDE extension \u2014 signing into those does NOT authenticate it. Fix: run \`claude auth login\` (Claude subscription) on the runner machine, or clear any stale ANTHROPIC_API_KEY (env / OS keychain / .env.local) and set VO_RUNNER_PREFER_LOGIN=1 \u2014 then restart the runner. Verify with \`claude -p "say hi"\`.`;
 }
 function probeClaudeLoginState({
-  spawn: spawn6 = spawnSync2,
+  spawn: spawn5 = spawnSync2,
   buildWindowsLaunch = buildWindowsClaudeLaunch,
   platform = process.platform
 } = {}) {
   try {
     const launch = platform === "win32" ? buildWindowsLaunch({ bin: "claude", args: ["auth", "status"] }) : { bin: "claude", args: ["auth", "status"], spawnOptions: { windowsHide: true } };
-    const st = spawn6(launch.bin, launch.args, { ...launch.spawnOptions, timeout: 5e3, encoding: "utf8" });
+    const st = spawn5(launch.bin, launch.args, { ...launch.spawnOptions, timeout: 5e3, encoding: "utf8" });
     const parsed = JSON.parse(String(st.stdout || "").trim() || "{}");
     return typeof parsed.loggedIn === "boolean" ? parsed.loggedIn : null;
   } catch {
     return null;
   }
 }
-var require2, KEY_SERVICE, KEY_ACCOUNT, _entryCtor, _loadTried, PREFER_LOGIN_ENV, CLAUDE_PREFER_LOGIN_ENV, PREFER_KEY_ENV, CLAUDE_PREFER_KEY_ENV, AUTH_ERROR_RE;
+var require2, KEY_SERVICE, KEY_ACCOUNT, _entryCtor, _loadTried, AUTH_SOURCE_DESCRIPTION, AUTH_ERROR_RE;
 var init_anthropic_key_store = __esm({
   "../../scripts/virtual-office/code-runner/anthropic-key-store.mjs"() {
     "use strict";
     init_windows_claude_launch();
+    init_claude_credential_choice();
+    init_claude_credential_choice();
     require2 = createRequire2(import.meta.url);
     KEY_SERVICE = "algosuite-vo";
     KEY_ACCOUNT = "anthropic-api-key";
     _loadTried = false;
-    PREFER_LOGIN_ENV = "VO_RUNNER_PREFER_LOGIN";
-    CLAUDE_PREFER_LOGIN_ENV = "VO_RUNNER_CLAUDE_PREFER_LOGIN";
-    PREFER_KEY_ENV = "VO_RUNNER_PREFER_KEY";
-    CLAUDE_PREFER_KEY_ENV = "VO_RUNNER_CLAUDE_PREFER_KEY";
+    AUTH_SOURCE_DESCRIPTION = Object.freeze({
+      [CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN]: "claude auth login (VO_RUNNER_PREFER_LOGIN set \u2014 any API key ignored)",
+      [CLAUDE_CREDENTIAL_SOURCE.ENV_KEY]: "ANTHROPIC_API_KEY from environment",
+      [CLAUDE_CREDENTIAL_SOURCE.NO_KEY]: "claude auth login session (no API key set)",
+      [CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN_PREFER_KEY]: "ANTHROPIC_API_KEY from OS keychain (VO_RUNNER_PREFER_KEY set \u2014 subscription ignored)",
+      [CLAUDE_CREDENTIAL_SOURCE.SUBSCRIPTION_WINS]: "claude auth login session (subscription beats the stored keychain key)",
+      [CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN]: "ANTHROPIC_API_KEY from OS keychain"
+    });
     AUTH_ERROR_RE = /\b401\b|invalid[^.]{0,24}(authentication|credential)|authentication_error|unauthorized|not[ _-]?authenticated/i;
   }
 });
@@ -3327,11 +3367,11 @@ import { spawnSync as spawnSync4 } from "node:child_process";
 function terminateAgentProcessTree({
   child,
   platform = process.platform,
-  spawn: spawn6 = spawnSync4
+  spawn: spawn5 = spawnSync4
 } = {}) {
   if (!child || !Number.isInteger(child.pid) || child.pid <= 0) return false;
   if (platform === "win32") {
-    const result = spawn6("taskkill", ["/PID", String(child.pid), "/T", "/F"], {
+    const result = spawn5("taskkill", ["/PID", String(child.pid), "/T", "/F"], {
       windowsHide: true,
       stdio: "ignore",
       timeout: 15e3
@@ -3507,11 +3547,11 @@ function windowsSystemRoot(env2 = process.env) {
 function windowsPowershellExe(env2 = process.env) {
   return path11.join(windowsSystemRoot(env2), "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
 }
-function listProcessCreationTimes({ platform = process.platform, spawn: spawn6 = spawnSync5, env: env2 = process.env, warn = console.warn } = {}) {
+function listProcessCreationTimes({ platform = process.platform, spawn: spawn5 = spawnSync5, env: env2 = process.env, warn = console.warn } = {}) {
   const map = /* @__PURE__ */ new Map();
   if (platform === "win32") {
     const ps = "Get-CimInstance Win32_Process | ForEach-Object { '{0} {1}' -f $_.ProcessId, (([DateTimeOffset]$_.CreationDate.ToUniversalTime()).ToUnixTimeMilliseconds()) }";
-    const result2 = spawn6(windowsPowershellExe(env2), ["-NoProfile", "-NonInteractive", "-Command", ps], {
+    const result2 = spawn5(windowsPowershellExe(env2), ["-NoProfile", "-NonInteractive", "-Command", ps], {
       windowsHide: true,
       encoding: "utf8",
       timeout: 2e4,
@@ -3527,7 +3567,7 @@ function listProcessCreationTimes({ platform = process.platform, spawn: spawn6 =
     }
     return map;
   }
-  const result = spawn6("ps", ["-eo", "pid=,lstart="], { encoding: "utf8", timeout: 2e4, maxBuffer: 32 * 1024 * 1024 });
+  const result = spawn5("ps", ["-eo", "pid=,lstart="], { encoding: "utf8", timeout: 2e4, maxBuffer: 32 * 1024 * 1024 });
   if (result.error || result.status !== 0 || typeof result.stdout !== "string") {
     warn(`[orphan-reaper] process enumeration failed (${result.error ? result.error.message : `ps exit ${result.status}`}); reaping nothing this cycle`);
     return map;
@@ -3547,11 +3587,11 @@ function parsePosixPsLine(line) {
   if (!Number.isInteger(pid) || pid <= 0 || !Number.isFinite(when)) return null;
   return { pid, creationMs: when };
 }
-function killProcessTree(pid, { platform = process.platform, spawn: spawn6 = spawnSync5, env: env2 = process.env } = {}) {
+function killProcessTree(pid, { platform = process.platform, spawn: spawn5 = spawnSync5, env: env2 = process.env } = {}) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
   if (platform === "win32") {
     const taskkill = path11.join(windowsSystemRoot(env2), "System32", "taskkill.exe");
-    const r = spawn6(taskkill, ["/PID", String(pid), "/T", "/F"], { windowsHide: true, stdio: "ignore", timeout: 15e3 });
+    const r = spawn5(taskkill, ["/PID", String(pid), "/T", "/F"], { windowsHide: true, stdio: "ignore", timeout: 15e3 });
     return !r.error && r.status === 0;
   }
   try {
@@ -4451,8 +4491,8 @@ var init_codex_runner = __esm({
     CODEX_PREFER_LOGIN_ENV = "VO_RUNNER_CODEX_PREFER_LOGIN";
     LEGACY_PREFER_LOGIN_ENV = "VO_RUNNER_PREFER_LOGIN";
     CodexRunner = class {
-      constructor({ spawn: spawn6 = spawnSync6, resolveBinary = resolveCodexBinary, env: env2 = process.env } = {}) {
-        this.spawn = spawn6;
+      constructor({ spawn: spawn5 = spawnSync6, resolveBinary = resolveCodexBinary, env: env2 = process.env } = {}) {
+        this.spawn = spawn5;
         this.resolveBinary = resolveBinary;
         this.env = env2;
       }
@@ -4821,12 +4861,12 @@ var init_local_model_runner = __esm({
     LOCAL_MODEL_RE = new RegExp("^[A-Za-z0-9][A-Za-z0-9._/:-]{0,127}$");
     LocalModelRunner = class {
       constructor({
-        spawn: spawn6 = null,
+        spawn: spawn5 = null,
         resolveBinary = resolveCodexBinary,
         env: env2 = process.env,
         fetchImpl = globalThis.fetch
       } = {}) {
-        this.spawn = spawn6;
+        this.spawn = spawn5;
         this.resolveBinary = resolveBinary;
         this.env = env2;
         this.fetchImpl = fetchImpl;
@@ -5012,7 +5052,7 @@ var init_openai_compatible_runner = __esm({
       buildArgs(opts = {}) {
         void opts;
         throw new Error(
-          "OpenAI-compatible full-repository coding is disabled. Use an explicit sanitized task capsule through the AlgoSuite Model Firewall."
+          "OpenAI-compatible full-repository coding is disabled. The `oai` runner lane is RETIRED (PR #8742) and executes nothing. Set VO_CODE_RUNNER_AGENT to claude, codex, cursor, local, or meta. Use an explicit sanitized task capsule through the AlgoSuite Model Firewall."
         );
       }
       /** Codex JSONL events map identically → reuse the proven parser. */
@@ -5035,14 +5075,14 @@ var init_openai_compatible_runner = __esm({
       describeAuth(env2 = process.env) {
         const hasKey = Boolean(String(env2[OAI_API_KEY_ENV] || "").trim());
         const baseUrl = resolveOaiBaseUrl(env2);
-        return `oai-compat endpoint=${baseUrl || "<unset>"} key=${hasKey ? "set" : "MISSING"}`;
+        return `oai-compat RETIRED endpoint=${baseUrl || "<unset>"} key=${hasKey ? "set" : "MISSING"}`;
       }
-      /** Best-effort: base URL chosen AND the codex transport is installed. */
+      /** Always unavailable: the lane is retired, so nothing can authenticate it. */
       async checkAuth() {
         return {
           installed: false,
           authenticated: false,
-          message: "OpenAI-compatible coding is disabled; sanitized Model Firewall task capsules only"
+          message: "the `oai` lane is RETIRED (PR #8742); OpenAI-compatible coding is disabled \u2014 sanitized Model Firewall task capsules only"
         };
       }
     };
@@ -7441,6 +7481,13 @@ function makeUsageRow({
   }
   return row;
 }
+function readingAgeMs(row, nowMs = Date.now()) {
+  const at = row && typeof row.captured_at === "string" ? row.captured_at : null;
+  if (!at) return null;
+  const ms = new Date(at).getTime();
+  if (!Number.isFinite(ms)) return null;
+  return Math.max(0, nowMs - ms);
+}
 var clampPct, readJson, ACCOUNT_KEY_SALT;
 var init_shared = __esm({
   "../../scripts/virtual-office/code-runner/account-usage/shared.mjs"() {
@@ -7461,8 +7508,17 @@ var init_shared = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/account-usage/claude.mjs
+import fs7 from "node:fs";
 import os3 from "node:os";
 import path14 from "node:path";
+function fileCaptureTime(filePath, explicit, statFn) {
+  if (typeof explicit === "string" && explicit) return explicit;
+  try {
+    return statFn(filePath).mtime.toISOString();
+  } catch {
+    return null;
+  }
+}
 function usageBaseUrl(env2 = process.env) {
   const raw = env2.ANTHROPIC_BASE_URL || "https://api.anthropic.com";
   return String(raw).replace(/\/+$/, "");
@@ -7568,7 +7624,12 @@ async function readClaudeOAuthUsage({
     clearTimeout(timer);
   }
 }
-function readClaudeFileUsage({ homeDir = os3.homedir(), read: rawRead = readJson } = {}) {
+function readClaudeFileUsage({
+  homeDir = os3.homedir(),
+  read: rawRead = readJson,
+  statFn = fs7.statSync,
+  now = () => Date.now()
+} = {}) {
   const read = (p) => {
     try {
       return rawRead(p);
@@ -7577,31 +7638,39 @@ function readClaudeFileUsage({ homeDir = os3.homedir(), read: rawRead = readJson
     }
   };
   const accountId = readAccountId({ homeDir, read });
-  const status = read(path14.join(homeDir, ".claude", "claude-usage.json"));
+  const fresh = (row) => {
+    if (!row) return null;
+    const age = readingAgeMs(row, now());
+    if (age === null || age > MAX_FILE_AGE_MS) return null;
+    return row;
+  };
+  const statusPath = path14.join(homeDir, ".claude", "claude-usage.json");
+  const status = read(statusPath);
   if (status && (status.seven_day || status.five_hour)) {
-    const row = makeUsageRow({
+    const row = fresh(makeUsageRow({
       agent: "claude",
       source: "statusline",
-      capturedAt: typeof status.capturedAt === "string" ? status.capturedAt : null,
+      capturedAt: fileCaptureTime(statusPath, status.capturedAt, statFn),
       accountId,
       sevenDay: status.seven_day?.used_percentage,
       fiveHour: status.five_hour?.used_percentage,
       sevenDayResetsAt: status.seven_day?.resets_at ?? null,
       fiveHourResetsAt: status.five_hour?.resets_at ?? null
-    });
+    }));
     if (row) return row;
   }
-  const weekly = read(path14.join(homeDir, ".claude", "claude-weekly-usage.json"));
+  const weeklyPath = path14.join(homeDir, ".claude", "claude-weekly-usage.json");
+  const weekly = read(weeklyPath);
   if (weekly) {
-    const row = makeUsageRow({
+    const row = fresh(makeUsageRow({
       agent: "claude",
       source: "file",
-      capturedAt: typeof weekly.capturedAt === "string" ? weekly.capturedAt : null,
+      capturedAt: fileCaptureTime(weeklyPath, weekly.capturedAt, statFn),
       accountId,
       sevenDay: weekly.sevenDayPct,
       fiveHour: weekly.fiveHourPct,
       sevenDayResetsAt: weekly.sevenDayResetsAt ?? null
-    });
+    }));
     if (row) return row;
   }
   return null;
@@ -7614,11 +7683,12 @@ async function readClaudeUsage(opts = {}) {
   }
   return readClaudeFileUsage(opts);
 }
-var USAGE_PATH, OAUTH_BETA, DEFAULT_TIMEOUT_MS;
+var MAX_FILE_AGE_MS, USAGE_PATH, OAUTH_BETA, DEFAULT_TIMEOUT_MS;
 var init_claude = __esm({
   "../../scripts/virtual-office/code-runner/account-usage/claude.mjs"() {
     "use strict";
     init_shared();
+    MAX_FILE_AGE_MS = 6 * 60 * 60 * 1e3;
     USAGE_PATH = "/api/oauth/usage";
     OAUTH_BETA = "oauth-2025-04-20";
     DEFAULT_TIMEOUT_MS = 5e3;
@@ -7731,83 +7801,6 @@ var init_codex = __esm({
   }
 });
 
-// ../../scripts/virtual-office/code-runner/account-usage/copilot.mjs
-import { spawn as spawn5 } from "node:child_process";
-function parseCopilotUsage(body, { now = () => Date.now() } = {}) {
-  if (!body || typeof body !== "object") return null;
-  const snapshots = body.quota_snapshots;
-  if (!snapshots || typeof snapshots !== "object") return null;
-  const bucket = snapshots[METERED_BUCKET];
-  if (!bucket || typeof bucket !== "object") return null;
-  if (bucket.unlimited === true || bucket.has_quota === false) return null;
-  const remaining = clampPct(bucket.percent_remaining);
-  if (remaining === null) return null;
-  const resetDate = typeof body.quota_reset_date === "string" ? body.quota_reset_date : null;
-  const resetsAt = resetDate && /^\d{4}-\d{2}-\d{2}$/.test(resetDate) ? `${resetDate}T00:00:00.000Z` : null;
-  return makeUsageRow({
-    agent: "copilot",
-    source: "cli",
-    capturedAt: new Date(now()).toISOString(),
-    // The API reports REMAINING; every row in this system stores USED.
-    monthly: 100 - remaining,
-    monthlyResetsAt: resetsAt,
-    accountId: typeof body.login === "string" ? body.login : null
-  });
-}
-function readCopilotUsage({
-  spawnImpl = spawn5,
-  timeoutMs = 8e3,
-  env: env2 = process.env,
-  now = () => Date.now()
-} = {}) {
-  return new Promise((resolve2) => {
-    let child;
-    let settled = false;
-    let stdout = "";
-    const finish = (value) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      try {
-        child?.kill();
-      } catch {
-      }
-      resolve2(value);
-    };
-    const timer = setTimeout(() => finish(null), timeoutMs);
-    try {
-      child = spawnImpl("gh", ["api", "copilot_internal/user"], {
-        env: env2,
-        windowsHide: true,
-        shell: false,
-        stdio: ["ignore", "pipe", "ignore"]
-      });
-      child.on("error", () => finish(null));
-      child.stdout?.on("data", (chunk) => {
-        stdout += chunk.toString();
-      });
-      child.on("close", (code) => {
-        if (code !== 0) return finish(null);
-        try {
-          finish(parseCopilotUsage(JSON.parse(stdout), { now }));
-        } catch {
-          finish(null);
-        }
-      });
-    } catch {
-      finish(null);
-    }
-  });
-}
-var METERED_BUCKET;
-var init_copilot = __esm({
-  "../../scripts/virtual-office/code-runner/account-usage/copilot.mjs"() {
-    "use strict";
-    init_shared();
-    METERED_BUCKET = "premium_interactions";
-  }
-});
-
 // ../../scripts/virtual-office/code-runner/account-usage/index.mjs
 function collectAccountUsage(opts = {}) {
   const claude = readClaudeFileUsage(opts);
@@ -7816,13 +7809,11 @@ function collectAccountUsage(opts = {}) {
 async function collectConnectedAccountUsage({
   readClaude = readClaudeUsage,
   readCodex = readCodexUsage,
-  readCopilot = readCopilotUsage,
   ...agentOptions
 } = {}) {
   const settled = await Promise.allSettled([
     readClaude(agentOptions),
-    readCodex(agentOptions),
-    readCopilot(agentOptions)
+    readCodex(agentOptions)
   ]);
   return settled.map((outcome) => outcome.status === "fulfilled" ? outcome.value : null).filter(Boolean);
 }
@@ -7858,12 +7849,10 @@ var init_account_usage = __esm({
     "use strict";
     init_claude();
     init_codex();
-    init_copilot();
     init_shared();
     AGENT_USAGE_CAPABILITY = Object.freeze({
       claude: Object.freeze({ five_hour: true, seven_day: true, monthly: false }),
       codex: Object.freeze({ five_hour: false, seven_day: true, monthly: false }),
-      copilot: Object.freeze({ five_hour: false, seven_day: false, monthly: true }),
       cursor: Object.freeze({ five_hour: false, seven_day: false, monthly: false }),
       gemini: Object.freeze({ five_hour: false, seven_day: false, monthly: false })
     });
@@ -9122,7 +9111,7 @@ var init_effort_mode_config = __esm({
 });
 
 // ../../scripts/virtual-office/model-registry.mjs
-import fs7 from "node:fs";
+import fs8 from "node:fs";
 import path15 from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 function uniqueModels(models = []) {
@@ -9235,9 +9224,9 @@ async function fetchGoogleModels(fetchImpl, env2 = process.env) {
   return (data?.models || []).map((model) => normalizeCatalogModel({ ...model, provider: "google", source: "google" })).filter(Boolean);
 }
 function readCache(cacheFile = DEFAULT_CACHE_FILE, nowMs = Date.now(), ttlMs = DEFAULT_TTL_MS3) {
-  if (!fs7.existsSync(cacheFile)) return null;
+  if (!fs8.existsSync(cacheFile)) return null;
   try {
-    const parsed = JSON.parse(fs7.readFileSync(cacheFile, "utf-8"));
+    const parsed = JSON.parse(fs8.readFileSync(cacheFile, "utf-8"));
     if (nowMs - Number(parsed.checkedAtMs || 0) > ttlMs) return null;
     if (!Array.isArray(parsed.models)) return null;
     return parsed;
@@ -9246,8 +9235,8 @@ function readCache(cacheFile = DEFAULT_CACHE_FILE, nowMs = Date.now(), ttlMs = D
   }
 }
 function writeCache(cacheFile = DEFAULT_CACHE_FILE, payload) {
-  fs7.mkdirSync(path15.dirname(cacheFile), { recursive: true });
-  fs7.writeFileSync(cacheFile, JSON.stringify(payload, null, 2));
+  fs8.mkdirSync(path15.dirname(cacheFile), { recursive: true });
+  fs8.writeFileSync(cacheFile, JSON.stringify(payload, null, 2));
 }
 async function fetchRegistryCatalog({
   fetchImpl = fetch,
@@ -10519,6 +10508,93 @@ var init_task_helpers = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/swarm-admission.mjs
+function canLaunchSuccessorAgent(agent, platform = process.platform) {
+  const name = typeof agent === "string" ? agent.trim() : "";
+  if (!Object.prototype.hasOwnProperty.call(SUCCESSOR_LAUNCH_SHAPES, name)) return false;
+  if (platform === "win32" && !SUCCESSOR_LAUNCH_SHAPES[name]) return false;
+  return true;
+}
+function isSubscriptionExhausted(usage) {
+  if (!usage || typeof usage !== "object") return false;
+  const readings = [usage.seven_day_used_pct, usage.five_hour_used_pct, usage.monthly_used_pct];
+  return readings.some((v) => typeof v === "number" && Number.isFinite(v) && v >= SUBSCRIPTION_EXHAUSTED_PCT);
+}
+function clampSubagents(requested) {
+  if (!Number.isFinite(requested) || requested < 1) return 0;
+  return Math.min(Math.floor(requested), MAX_BOUND_SUBAGENTS);
+}
+function usageFor(accountUsage, agent) {
+  if (!Array.isArray(accountUsage)) return null;
+  return accountUsage.find((row) => row && row.agent === agent) ?? null;
+}
+function exhaustedAgents(availableAgents, accountUsage) {
+  if (!Array.isArray(availableAgents)) return [];
+  return availableAgents.filter((row) => row && row.installed === true && row.authenticated === true && row.auth_tier === AUTH_TIER_SUBSCRIPTION && isSubscriptionExhausted(usageFor(accountUsage, row.agent))).map((row) => row.agent);
+}
+function resolveRunnerSwarmBinding({
+  swarmId,
+  agent,
+  availableAgents,
+  accountUsage = [],
+  requestedSubagents = MAX_BOUND_SUBAGENTS,
+  nowIso,
+  platform = process.platform
+} = {}) {
+  const id = typeof swarmId === "string" ? swarmId.trim() : "";
+  const boundAgent = typeof agent === "string" ? agent.trim() : "";
+  if (id.length === 0 || boundAgent.length === 0) return null;
+  if (!canLaunchSuccessorAgent(boundAgent, platform)) return null;
+  const budget = clampSubagents(requestedSubagents);
+  if (budget === 0) return null;
+  const rows = Array.isArray(availableAgents) ? availableAgents : [];
+  const row = rows.find((r) => r && r.agent === boundAgent) ?? null;
+  if (!row || row.installed !== true || row.authenticated !== true) return null;
+  const tier = AUTH_TIER_TO_SWARM_TIER[row.auth_tier];
+  if (!tier) return null;
+  const exhausted = exhaustedAgents(rows, accountUsage);
+  const boundExhausted = tier === "tier1_subscription" && isSubscriptionExhausted(usageFor(accountUsage, boundAgent));
+  const effectiveBudget = boundExhausted ? Math.min(budget, EXHAUSTED_SUBAGENT_BUDGET) : budget;
+  const basis = `code-task dispatch admitted on '${boundAgent}' at auth tier '${row.auth_tier}' (runner-local capability probe)`;
+  return {
+    schema_version: 1,
+    swarm_id: id,
+    tier,
+    agent: boundAgent,
+    reason: boundExhausted ? `${basis}; that subscription window is >=${SUBSCRIPTION_EXHAUSTED_PCT}% spent, so the fan-out is bound at a REDUCED ceiling of ${effectiveBudget} instead of being left unbound and uncapped` : basis,
+    exhausted_agents: exhausted,
+    subagent_budget: effectiveBudget,
+    // Never a platform-billed fan-out in this lane — see the module header.
+    spend_cap_usd: null,
+    resolved_at: typeof nowIso === "string" && nowIso ? nowIso : (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function mintSwarmTierBindingEnv(input) {
+  const binding = resolveRunnerSwarmBinding(input);
+  if (!binding) return {};
+  return { [SWARM_TIER_BINDING_ENV]: JSON.stringify(binding) };
+}
+var SWARM_TIER_BINDING_ENV, MAX_BOUND_SUBAGENTS, SUBSCRIPTION_EXHAUSTED_PCT, EXHAUSTED_SUBAGENT_BUDGET, SUCCESSOR_LAUNCH_SHAPES, AUTH_TIER_TO_SWARM_TIER;
+var init_swarm_admission = __esm({
+  "../../scripts/virtual-office/code-runner/swarm-admission.mjs"() {
+    "use strict";
+    init_agent_auth_tier();
+    SWARM_TIER_BINDING_ENV = "VO_SWARM_TIER_BINDING";
+    MAX_BOUND_SUBAGENTS = 20;
+    SUBSCRIPTION_EXHAUSTED_PCT = 95;
+    EXHAUSTED_SUBAGENT_BUDGET = 1;
+    SUCCESSOR_LAUNCH_SHAPES = Object.freeze({
+      claude: true,
+      codex: false
+    });
+    AUTH_TIER_TO_SWARM_TIER = Object.freeze({
+      [AUTH_TIER_SUBSCRIPTION]: "tier1_subscription",
+      [AUTH_TIER_LOCAL]: "tier1_local",
+      [AUTH_TIER_API_KEY]: "tier2_user_key"
+    });
+  }
+});
+
 // ../../scripts/virtual-office/code-runner/agent-process-env.mjs
 function safeIdentityPart(value, fallback) {
   const normalized = String(value || "").trim().replace(/[^a-zA-Z0-9_-]+/g, "-").replace(/^-+|-+$/g, "");
@@ -10531,8 +10607,14 @@ function safeBaseEnv(env2 = {}) {
   }
   return result;
 }
-function buildAgentProcessEnv(env2, { agent = "agent", runnerId = "vo-runner", taskId = "task", githubReadToken = null } = {}) {
+function buildAgentProcessEnv(env2, { agent = "agent", runnerId = "vo-runner", taskId = "task", githubReadToken = null, swarmAdmission = null } = {}) {
   const base = safeBaseEnv(env2);
+  if (swarmAdmission) {
+    for (const key of Object.keys(base)) {
+      if (key.toUpperCase() === SWARM_TIER_BINDING_ENV) delete base[key];
+    }
+    Object.assign(base, mintSwarmTierBindingEnv({ ...swarmAdmission, agent, swarmId: taskId }));
+  }
   if (typeof githubReadToken === "string" && githubReadToken) {
     base.GH_TOKEN = githubReadToken;
     base.GITHUB_TOKEN = githubReadToken;
@@ -10550,6 +10632,7 @@ var SAFE_ENV_NAMES;
 var init_agent_process_env = __esm({
   "../../scripts/virtual-office/code-runner/agent-process-env.mjs"() {
     "use strict";
+    init_swarm_admission();
     SAFE_ENV_NAMES = /* @__PURE__ */ new Set([
       "AGENT_ID",
       "APPDATA",
@@ -10590,7 +10673,31 @@ var init_agent_process_env = __esm({
       // it. #9242 added VO_RUNNER_PREFER_KEY without this line, which left the
       // escape hatch inert — an operator who set it still got the subscription.
       "VO_RUNNER_PREFER_KEY",
-      "VO_RUNNER_CLAUDE_PREFER_KEY"
+      "VO_RUNNER_CLAUDE_PREFER_KEY",
+      // The swarm tier binding (SWARM_TIER_BINDING_ENV in
+      // packages/vo-mcp/src/swarm/tier-binding.ts). A fan-out resolves its billing
+      // tier ONCE at admission and exports the binding so every subagent inherits
+      // the same answer instead of re-resolving its own. This line is what lets it
+      // cross the process boundary at all: the daemon builds each child env with
+      // buildAgentProcessEnv(process.env) at
+      // scripts/virtual-office/code-runner-daemon.mjs:117 (sibling dir, not this
+      // one), so a name absent from this set is stripped and the binding binds
+      // NOTHING —
+      // exactly how #9242's VO_RUNNER_PREFER_KEY shipped inert until #9247.
+      //
+      // NOT a credential and NOT an authorization input: it names a tier, it never
+      // grants one, and it carries no key material (see the module's header rule).
+      "VO_SWARM_TIER_BINDING",
+      // Where the swarm SPAWN LEDGER lives (SWARM_LEDGER_DIR_ENV in
+      // packages/vo-mcp/src/swarm/spawn-ledger.ts). The ledger is the durable,
+      // host-shared counter that bounds the TOTAL spawns under one swarm_id; the
+      // binding above only bounds the depth of one chain. If a parent's override
+      // were stripped here, the child would ledger into a DIFFERENT directory,
+      // claim slot 0 again, and the shared ceiling would silently degrade back to a
+      // per-process quota — which is precisely the defect the ledger closes.
+      //
+      // A path, not a credential. Absent means the default ~/.vo/swarm-ledger.
+      "VO_SWARM_LEDGER_DIR"
     ]);
   }
 });
@@ -11081,7 +11188,7 @@ var init_inference_task_runner = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/isolation-audit.mjs
-import fs8 from "node:fs";
+import fs9 from "node:fs";
 import fsp11 from "node:fs/promises";
 import path16 from "node:path";
 async function defaultRun(command, args, cwd, options = {}) {
@@ -11176,7 +11283,7 @@ async function restoreExactCanonicalPaths(baseline, evidence, run) {
   for (const relative of evidence.untracked) {
     const target = path16.resolve(baseline.root, relative);
     const prefix = `${path16.resolve(baseline.root)}${path16.sep}`;
-    if (!target.startsWith(prefix) || !fs8.existsSync(target)) continue;
+    if (!target.startsWith(prefix) || !fs9.existsSync(target)) continue;
     await fsp11.rm(target, { force: true });
   }
 }
@@ -11706,7 +11813,7 @@ var init_publication_scope = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/recovery-ledger.mjs
-import fs9 from "node:fs";
+import fs10 from "node:fs";
 import fsp13 from "node:fs/promises";
 import path18 from "node:path";
 function recoveryTaskId(prompt) {
@@ -11744,7 +11851,7 @@ async function readLedger(file, readFile5) {
 async function findPreservedRecovery(task, {
   clonesRoot: clonesRoot2 = process.env.VO_CODE_RUNNER_CLONES_ROOT || "",
   readFile: readFile5 = fsp13.readFile,
-  exists = fs9.existsSync
+  exists = fs10.existsSync
 } = {}) {
   const resumedFrom = /^[0-9a-f-]{36}$/iu.test(String(task.resumed_from || "")) ? String(task.resumed_from).toLowerCase() : null;
   const originalTaskId = recoveryTaskId(task.prompt) ?? resumedFrom;
@@ -12468,7 +12575,7 @@ import { fileURLToPath as fileURLToPath6 } from "node:url";
 function log(msg) {
   console.log(`[code-runner ${(/* @__PURE__ */ new Date()).toISOString()}] ${msg}`);
 }
-async function processOneTask(client, task, cfg, runnerInstanceId) {
+async function processOneTask(client, task, cfg, runnerInstanceId, swarmAdmission = null) {
   const id = task.code_task_id;
   let worktreeName = "";
   let preserveReason = null;
@@ -12518,7 +12625,8 @@ async function processOneTask(client, task, cfg, runnerInstanceId) {
       model,
       effort: effectiveEffort,
       maxBudgetUsd: sel.agent === "claude" ? effectiveMaxBudgetUsd : void 0,
-      env: buildAgentProcessEnv(process.env, { agent: sel.agent, runnerId: cfg.runnerId, taskId: id, githubReadToken: agentGithubReadToken }),
+      env: buildAgentProcessEnv(process.env, { agent: sel.agent, runnerId: cfg.runnerId, taskId: id, githubReadToken: agentGithubReadToken, swarmAdmission }),
+      // swarmAdmission mints VO_SWARM_TIER_BINDING: ONE tier decision for this task's whole agent tree
       sandbox,
       onProgress: (text, checkpoint) => {
         const usage = checkpoint?.tokenUsage ? { token_usage: checkpoint.tokenUsage } : {};
@@ -12804,7 +12912,7 @@ async function main({ env: env2 = process.env, once: once2 = false } = {}) {
     }
     log(`claimed task ${task.code_task_id} (${task.repo})`);
     active += 1;
-    const runTask = task.kind === "inference" ? processInferenceTask(client, task, cfg, { safeProgress, runnerStagePatch, log }) : processOneTask(client, task, cfg, runnerInstanceId);
+    const runTask = task.kind === "inference" ? processInferenceTask(client, task, cfg, { safeProgress, runnerStagePatch, log }) : processOneTask(client, task, cfg, runnerInstanceId, { availableAgents: claimAgents.availableAgents, accountUsage: accountUsage.get() });
     const done = runTask.catch(async (error) => {
       log(`task ${task.code_task_id} unhandled runner error: ${error.message}`);
       if (task.kind === "inference") await deliverTerminalRun({