@assemblyline-agents/runtime 0.1.0

package/dist/trusted-attachments.js

@@ -0,0 +1,276 @@
+import { attachmentFetchTimeoutMs, firstDownloadableUrl, normalizeAttachmentProvider, trustedProviderForAttachment } from "./attachments.js";
+/**
+ * Provider download builders (Slack files.info, Telegram getFile, Teams token
+ * flow, Photon bridge headers) for direct `run({ trustedAttachmentProvider })`
+ * callers — embedders injecting attachments without a channel dispatch.
+ *
+ * Channel dispatches never reach this module: channels own attachment
+ * resolution through `ChannelModule.resolveAttachment`, and that resolver
+ * wins whenever the turn has one. The same trust rules apply here — an
+ * attachment only receives a provider's credentials when its own trust
+ * markers claim that provider (`trustedProviderForAttachment`), and download
+ * hosts are allowlisted per provider before any token is attached.
+ */
+export async function trustedProviderDownloadRequest(attachment, input) {
+    const telegram = telegramFileIdFromAttachment(attachment, input);
+    if (telegram)
+        return telegramAttachmentDownload(telegram, input);
+    const slack = await slackAttachmentDownload(attachment, input);
+    if (slack)
+        return slack;
+    const url = attachmentDownloadUrl(attachment);
+    if (!url)
+        return undefined;
+    const headers = await attachmentDownloadHeaders(attachment, url, input);
+    return {
+        url,
+        headers,
+        provider: stringValue(attachment.provider),
+        filename: stringValue(attachment.filename) || stringValue(attachment.name)
+    };
+}
+async function telegramAttachmentDownload(fileId, input) {
+    const token = input.env.TELEGRAM_BOT_TOKEN;
+    if (!token)
+        return undefined;
+    const infoUrl = `https://api.telegram.org/bot${encodeURIComponent(token)}/getFile?file_id=${encodeURIComponent(fileId)}`;
+    const response = await input.fetch(infoUrl, { signal: timeoutSignal(attachmentFetchTimeoutMs(input.env)) });
+    const payload = recordValue(await parseJsonResponse(response));
+    if (!response.ok || payload?.ok !== true) {
+        throw new Error(`Telegram file lookup failed: ${response.status}`);
+    }
+    const filePath = stringValue(recordValue(payload.result)?.file_path);
+    if (!filePath)
+        throw new Error("Telegram file lookup did not return file_path.");
+    return {
+        url: `https://api.telegram.org/file/bot${encodeURIComponent(token)}/${filePath}`,
+        headers: {}
+    };
+}
+async function slackAttachmentDownload(attachment, input) {
+    if (!isSlackAttachment(attachment, input))
+        return undefined;
+    const token = slackToken(input.env);
+    const headers = token ? { authorization: `Bearer ${token}` } : {};
+    const directUrl = firstDownloadableUrl([
+        attachment.url_private_download,
+        recordValue(attachment.remote)?.url_private_download,
+        recordValue(attachment.download)?.url_private_download,
+        attachment.downloadUrl,
+        recordValue(attachment.remote)?.downloadUrl,
+        recordValue(attachment.download)?.downloadUrl,
+        attachment.url_private,
+        recordValue(attachment.remote)?.url_private,
+        recordValue(attachment.download)?.url_private
+    ]);
+    const filename = stringValue(attachment.filename) || stringValue(attachment.name);
+    if (directUrl) {
+        if (!isSlackUrl(directUrl))
+            throw new Error("Slack attachment download URL host is not allowed.");
+        return { url: directUrl, headers, provider: "slack", filename };
+    }
+    const fileId = slackFileIdFromAttachment(attachment);
+    if (!fileId || !token)
+        return undefined;
+    const response = await input.fetch(`https://slack.com/api/files.info?file=${encodeURIComponent(fileId)}`, {
+        headers,
+        signal: timeoutSignal(attachmentFetchTimeoutMs(input.env))
+    });
+    const payload = recordValue(await parseJsonResponse(response));
+    if (!response.ok || payload?.ok !== true) {
+        throw new Error(`Slack file lookup failed: ${response.status}`);
+    }
+    const file = recordValue(payload.file);
+    const url = firstDownloadableUrl([
+        file?.url_private_download,
+        file?.url_private
+    ]);
+    if (!url)
+        throw new Error("Slack file lookup did not return a private download URL.");
+    if (!isSlackUrl(url))
+        throw new Error("Slack file lookup returned an untrusted download URL host.");
+    return {
+        url,
+        headers,
+        provider: "slack",
+        filename: stringValue(file?.name) || stringValue(file?.title) || filename
+    };
+}
+async function attachmentDownloadHeaders(attachment, url, input) {
+    const trustedProvider = trustedProviderForAttachment(attachment, input.trustedProvider);
+    if (trustedProvider === "photon") {
+        if (!isPhotonBridgeUrl(url, input.env))
+            throw new Error("Photon attachment download URL host is not allowed.");
+        const token = input.env.PHOTON_BRIDGE_TOKEN;
+        return token ? { authorization: `Bearer ${token}` } : {};
+    }
+    if (trustedProvider === "teams") {
+        if (!isTeamsAttachmentUrl(attachment, url))
+            throw new Error("Teams attachment download URL host is not allowed.");
+        const token = await teamsBotTokenForAttachment(input);
+        return token ? { authorization: `Bearer ${token}` } : {};
+    }
+    if (trustedProvider === "slack") {
+        if (!isSlackUrl(url))
+            throw new Error("Slack attachment download URL host is not allowed.");
+        const token = input.env.SLACK_BOT_TOKEN ?? input.env.SLACK_USER_TOKEN;
+        return token ? { authorization: `Bearer ${token}` } : {};
+    }
+    return {};
+}
+async function teamsBotTokenForAttachment(input) {
+    const appId = input.env.MICROSOFT_APP_ID;
+    const password = input.env.MICROSOFT_APP_PASSWORD;
+    if (!appId || !password)
+        return undefined;
+    const body = new URLSearchParams({
+        grant_type: "client_credentials",
+        client_id: appId,
+        client_secret: password,
+        scope: "https://api.botframework.com/.default"
+    });
+    const response = await input.fetch("https://login.microsoftonline.com/botframework.com/oauth2/v2.0/token", {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body,
+        signal: timeoutSignal(attachmentFetchTimeoutMs(input.env))
+    });
+    const parsed = recordValue(await parseJsonResponse(response));
+    if (!response.ok)
+        throw new Error(`Teams attachment token request failed: ${response.status}`);
+    return stringValue(parsed?.access_token);
+}
+function attachmentDownloadUrl(attachment) {
+    const remote = recordValue(attachment.remote) ?? recordValue(attachment.download);
+    const candidates = [
+        remote?.downloadUrl,
+        remote?.contentUrl,
+        attachment.downloadUrl,
+        attachment.url_private_download,
+        remote?.url_private_download,
+        attachment.url_private,
+        remote?.url_private,
+        attachment.contentUrl,
+        attachment.mediaUrl,
+        attachment.fileUrl,
+        attachment.url,
+        remote?.url,
+        attachment.href
+    ];
+    return firstDownloadableUrl(candidates);
+}
+function isSlackAttachment(attachment, input) {
+    if (trustedProviderForAttachment(attachment, input.trustedProvider) !== "slack")
+        return false;
+    const provider = normalizeAttachmentProvider(stringValue(attachment.provider) || stringValue(attachment.remoteProvider));
+    const remote = recordValue(attachment.remote) ?? recordValue(attachment.download);
+    const auth = normalizeAttachmentProvider(stringValue(remote?.auth) || stringValue(remote?.authProvider) || stringValue(attachment.authProvider));
+    return provider === "slack" ||
+        auth === "slack" ||
+        Boolean(stringValue(attachment.slackFileId) || stringValue(remote?.slackFileId)) ||
+        Boolean(firstDownloadableUrl([
+            attachment.url_private_download,
+            attachment.url_private,
+            remote?.url_private_download,
+            remote?.url_private
+        ])) ||
+        isSlackUrl(firstDownloadableUrl([attachment.url, attachment.href, remote?.url]));
+}
+function slackFileIdFromAttachment(attachment) {
+    const provider = normalizeAttachmentProvider(stringValue(attachment.provider) || stringValue(attachment.remoteProvider));
+    const remote = recordValue(attachment.remote) ?? recordValue(attachment.download);
+    const direct = stringValue(attachment.slackFileId) || stringValue(attachment.fileId);
+    if (direct)
+        return direct;
+    const remoteFileId = stringValue(remote?.fileId) || stringValue(remote?.slackFileId);
+    if (remoteFileId)
+        return remoteFileId;
+    const id = stringValue(attachment.id);
+    if (id && (provider === "slack" || isSlackUrl(firstDownloadableUrl([attachment.url, attachment.href, remote?.url]))))
+        return id;
+    return undefined;
+}
+function slackToken(env) {
+    return env.SLACK_BOT_TOKEN ?? env.SLACK_USER_TOKEN;
+}
+function isSlackUrl(value) {
+    if (!value)
+        return false;
+    try {
+        const hostname = new URL(value).hostname.toLowerCase();
+        return hostname === "slack.com" || hostname.endsWith(".slack.com") || hostname === "files.slack.com";
+    }
+    catch {
+        return false;
+    }
+}
+function telegramFileIdFromAttachment(attachment, input) {
+    if (trustedProviderForAttachment(attachment, input.trustedProvider) !== "telegram")
+        return undefined;
+    const direct = stringValue(attachment.telegramFileId) || stringValue(attachment.fileId);
+    if (direct && (normalizeAttachmentProvider(stringValue(attachment.provider)) === "telegram" || normalizeAttachmentProvider(stringValue(attachment.remoteProvider)) === "telegram"))
+        return direct;
+    const remote = recordValue(attachment.remote) ?? recordValue(attachment.download);
+    const remoteFileId = stringValue(remote?.fileId);
+    if (remoteFileId && (normalizeAttachmentProvider(stringValue(remote?.provider)) === "telegram" || normalizeAttachmentProvider(stringValue(remote?.auth)) === "telegram"))
+        return remoteFileId;
+    const metadata = attachment.metadata;
+    if (Array.isArray(metadata)) {
+        const record = metadata.map(recordValue).filter((value) => Boolean(value)).at(-1);
+        return stringValue(record?.file_id);
+    }
+    return stringValue(recordValue(metadata)?.file_id);
+}
+function isPhotonBridgeUrl(url, env) {
+    const base = env.PHOTON_TRANSPORT_URL;
+    if (!base)
+        return false;
+    try {
+        return new URL(url).origin === new URL(base).origin;
+    }
+    catch {
+        return false;
+    }
+}
+function isTeamsAttachmentUrl(attachment, url) {
+    const remote = recordValue(attachment.remote) ?? recordValue(attachment.download);
+    const serviceUrl = stringValue(remote?.serviceUrl) || stringValue(attachment.serviceUrl);
+    try {
+        const target = new URL(url);
+        if (target.protocol !== "https:")
+            return false;
+        if (target.hostname.endsWith(".botframework.com"))
+            return true;
+        if (target.hostname.endsWith(".skype.com"))
+            return true;
+        if (!serviceUrl)
+            return false;
+        return target.origin === new URL(serviceUrl).origin;
+    }
+    catch {
+        return false;
+    }
+}
+function timeoutSignal(timeoutMs) {
+    return AbortSignal.timeout(timeoutMs);
+}
+async function parseJsonResponse(response) {
+    const text = await response.text();
+    if (!text)
+        return {};
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return { text };
+    }
+}
+function stringValue(value) {
+    if (typeof value === "number" && Number.isFinite(value))
+        return String(value);
+    return typeof value === "string" ? value.trim() : "";
+}
+function recordValue(value) {
+    return Boolean(value && typeof value === "object" && !Array.isArray(value)) ? value : undefined;
+}
+//# sourceMappingURL=trusted-attachments.js.map

package/dist/trusted-attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-attachments.js","sourceRoot":"","sources":["../src/trusted-attachments.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,2BAA2B,EAC3B,4BAA4B,EAE7B,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,UAAsB,EACtB,KAIC;IAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,QAAQ;QAAE,OAAO,0BAA0B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEjE,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,GAAG,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACxE,OAAO;QACL,GAAG;QACH,OAAO;QACP,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC1C,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,MAAc,EACd,KAGC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,OAAO,GAAG,+BAA+B,kBAAkB,CAAC,KAAK,CAAC,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IACzH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACjF,OAAO;QACL,GAAG,EAAE,oCAAoC,kBAAkB,CAAC,KAAK,CAAC,IAAI,QAAQ,EAAE;QAChF,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,UAAsB,EACtB,KAIC;IAED,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,UAAU,CAAC,oBAAoB;QAC/B,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,oBAAoB;QACpD,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,oBAAoB;QACtD,UAAU,CAAC,WAAW;QACtB,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,WAAW;QAC3C,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAW;QAC7C,UAAU,CAAC,WAAW;QACtB,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,WAAW;QAC3C,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAW;KAC9C,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAClF,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAClG,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,yCAAyC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE;QACxG,OAAO;QACP,MAAM,EAAE,aAAa,CAAC,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;KAC3D,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,oBAAoB,CAAC;QAC/B,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,WAAW;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACtF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACpG,OAAO;QACL,GAAG;QACH,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,UAAsB,EACtB,GAAW,EACX,KAIC;IAED,MAAM,eAAe,GAAG,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACxF,IAAI,eAAe,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC5C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,eAAe,KAAK,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAClH,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,eAAe,KAAK,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACtE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAGzC;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAClD,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,QAAQ;QACvB,KAAK,EAAE,uCAAuC;KAC/C,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,sEAAsE,EAAE;QACzG,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI;QACJ,MAAM,EAAE,aAAa,CAAC,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;KAC3D,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/F,OAAO,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAsB;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,UAAU,GAAG;QACjB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,UAAU;QAClB,UAAU,CAAC,WAAW;QACtB,UAAU,CAAC,oBAAoB;QAC/B,MAAM,EAAE,oBAAoB;QAC5B,UAAU,CAAC,WAAW;QACtB,MAAM,EAAE,WAAW;QACnB,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,OAAO;QAClB,UAAU,CAAC,GAAG;QACd,MAAM,EAAE,GAAG;QACX,UAAU,CAAC,IAAI;KAChB,CAAC;IACF,OAAO,oBAAoB,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAsB,EAAE,KAAmC;IACpF,IAAI,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,eAAe,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC9F,MAAM,QAAQ,GAAG,2BAA2B,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;IACzH,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,2BAA2B,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACjJ,OAAO,QAAQ,KAAK,OAAO;QACzB,IAAI,KAAK,OAAO;QAChB,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAChF,OAAO,CAAC,oBAAoB,CAAC;YAC3B,UAAU,CAAC,oBAAoB;YAC/B,UAAU,CAAC,WAAW;YACtB,MAAM,EAAE,oBAAoB;YAC5B,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QACH,UAAU,CAAC,oBAAoB,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,yBAAyB,CAAC,UAAsB;IACvD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;IACzH,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrF,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,EAAE,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAChI,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,GAAuC;IACzD,OAAO,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,gBAAgB,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvD,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,KAAK,iBAAiB,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAsB,EAAE,KAAmC;IAC/F,IAAI,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,eAAe,CAAC,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IACrG,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACxF,IAAI,MAAM,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,UAAU,IAAI,2BAA2B,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC;IAClM,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,YAAY,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,UAAU,IAAI,2BAA2B,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,UAAU,CAAC;QAAE,OAAO,YAAY,CAAC;IAC9L,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAuB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvG,OAAO,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,GAAuC;IAC7E,MAAM,IAAI,GAAG,GAAG,CAAC,oBAAoB,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAsB,EAAE,GAAW;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACzF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,MAAM,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IACjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;AAChH,CAAC"}

package/dist/usage-accounting.d.ts

@@ -0,0 +1,37 @@
+import type { AgentHarnessEvent, AgentManifest } from "@assemblyline-agents/core";
+import type { HarnessLoopSession } from "./runtime-types.js";
+import type { RunRecord, StateAdapter, UsageRecord } from "./state.js";
+type RequestStartedEvent = Extract<AgentHarnessEvent, {
+    type: "request_started";
+}>;
+type ResponseCompletedEvent = Extract<AgentHarnessEvent, {
+    type: "response_completed";
+}>;
+export declare class UsageAccountingSession {
+    private readonly input;
+    private readonly requests;
+    constructor(input: {
+        state: StateAdapter;
+        manifest: AgentManifest;
+        run: () => RunRecord;
+        session: HarnessLoopSession;
+        onError?: (message: string, error: unknown) => void;
+    });
+    requestStarted(event: RequestStartedEvent): Promise<{
+        requestId: string;
+        agentId: string;
+        parentRunId?: string;
+        subagent?: string;
+    }>;
+    responseCompleted(event: ResponseCompletedEvent): Promise<UsageRecord | undefined>;
+    requestBoundaryCommitted(iteration: number): void;
+    /**
+     * A request_started event is the last durable boundary before provider I/O.
+     * If no response arrives, record the request with unavailable measurements.
+     * This is observability only: it neither estimates usage nor changes future
+     * provider behavior.
+     */
+    finalizeOutstanding(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=usage-accounting.d.ts.map

package/dist/usage-accounting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-accounting.d.ts","sourceRoot":"","sources":["../src/usage-accounting.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EAGd,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EAEZ,MAAM,YAAY,CAAC;AAEpB,KAAK,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAAC;AACnF,KAAK,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAAC;AAUzF,qBAAa,sBAAsB;IAGrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFlC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyC;gBAErC,KAAK,EAAE;QAClC,KAAK,EAAE,YAAY,CAAC;QACpB,QAAQ,EAAE,aAAa,CAAC;QACxB,GAAG,EAAE,MAAM,SAAS,CAAC;QACrB,OAAO,EAAE,kBAAkB,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;KACrD;IAEK,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC;QACxD,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IAiBI,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAoCxF,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKjD;;;;;OAKG;IACG,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;CAgC3C"}

package/dist/usage-accounting.js

@@ -0,0 +1,181 @@
+import { randomUUID } from "node:crypto";
+export class UsageAccountingSession {
+    input;
+    requests = new Map();
+    constructor(input) {
+        this.input = input;
+    }
+    async requestStarted(event) {
+        const run = this.input.run();
+        const identity = usageAgentId(this.input.manifest, run);
+        const existing = this.requests.get(event.iteration);
+        if (existing)
+            return { requestId: existing.idempotencyKey, ...identity };
+        const requestId = `usage-request:${run.id}:${randomUUID()}`;
+        const active = {
+            idempotencyKey: requestId,
+            dispatchPossible: false,
+            responseObserved: false
+        };
+        if (event.provider)
+            active.provider = event.provider;
+        if (event.billingMode)
+            active.billingMode = event.billingMode;
+        this.requests.set(event.iteration, active);
+        return { requestId, ...identity };
+    }
+    async responseCompleted(event) {
+        const active = this.requests.get(event.iteration) ?? {
+            idempotencyKey: `usage-response:${this.input.run().id}:${randomUUID()}`,
+            dispatchPossible: true,
+            responseObserved: false
+        };
+        active.responseObserved = true;
+        this.requests.set(event.iteration, active);
+        const run = this.input.run();
+        const identity = usageAgentId(this.input.manifest, run);
+        const provider = event.provider ?? active.provider ?? providerFromModel(this.input.session.modelSpec);
+        const billingMode = event.billingMode ?? active.billingMode ?? "unknown";
+        const providerRequestId = clean(event.providerRequestId);
+        const idempotencyKey = providerRequestId
+            ? `usage:${provider}:${providerRequestId}`
+            : active.idempotencyKey;
+        const recordInput = recordUsageInput({
+            idempotencyKey,
+            run,
+            identity,
+            session: this.input.session,
+            event,
+            provider,
+            billingMode
+        });
+        try {
+            const usage = await this.input.state.recordUsage(recordInput);
+            this.requests.delete(event.iteration);
+            return usage;
+        }
+        catch (error) {
+            this.requests.delete(event.iteration);
+            this.input.onError?.("Usage ledger persistence failed", error);
+            return undefined;
+        }
+    }
+    requestBoundaryCommitted(iteration) {
+        const active = this.requests.get(iteration);
+        if (active)
+            active.dispatchPossible = true;
+    }
+    /**
+     * A request_started event is the last durable boundary before provider I/O.
+     * If no response arrives, record the request with unavailable measurements.
+     * This is observability only: it neither estimates usage nor changes future
+     * provider behavior.
+     */
+    async finalizeOutstanding() {
+        const outstanding = [...this.requests.entries()].filter(([, request]) => !request.responseObserved);
+        for (const [iteration, request] of outstanding) {
+            if (!request.dispatchPossible)
+                continue;
+            const run = this.input.run();
+            const identity = usageAgentId(this.input.manifest, run);
+            const record = {
+                idempotencyKey: request.idempotencyKey,
+                runId: run.id,
+                agentId: identity.agentId,
+                agentRevision: run.agentRevision,
+                iteration,
+                provider: request.provider ?? providerFromModel(this.input.session.modelSpec),
+                model: this.input.session.modelSpec,
+                billingMode: request.billingMode ?? "unknown",
+                recordKind: "transaction",
+                tokenSource: "unavailable",
+                costSource: "unavailable",
+                metadata: {
+                    accountingStatus: "response_unobserved"
+                }
+            };
+            if (identity.parentRunId)
+                record.parentRunId = identity.parentRunId;
+            if (identity.subagent)
+                record.subagent = identity.subagent;
+            try {
+                await this.input.state.recordUsage(record);
+            }
+            catch (error) {
+                this.input.onError?.("Unobserved provider request accounting failed", error);
+            }
+        }
+        this.requests.clear();
+    }
+}
+function recordUsageInput(input) {
+    const usage = input.event.usage ?? {};
+    const record = {
+        idempotencyKey: input.idempotencyKey,
+        runId: input.run.id,
+        agentId: input.identity.agentId,
+        agentRevision: input.run.agentRevision,
+        iteration: input.event.iteration,
+        provider: input.provider,
+        model: input.session.modelSpec,
+        billingMode: input.billingMode,
+        recordKind: "transaction",
+        metadata: {
+            finishReason: input.event.finishReason ?? "unknown",
+            toolCallCount: input.event.toolCallCount
+        }
+    };
+    if (input.identity.parentRunId)
+        record.parentRunId = input.identity.parentRunId;
+    if (input.identity.subagent)
+        record.subagent = input.identity.subagent;
+    if (input.provider === "openai-codex" && input.event.providerRequestId)
+        record.turnId = input.event.providerRequestId;
+    if (input.event.providerRequestId)
+        record.providerRequestId = input.event.providerRequestId;
+    if (input.event.responseModel)
+        record.responseModel = input.event.responseModel;
+    if (usage.inputTokens !== undefined)
+        record.inputTokens = usage.inputTokens;
+    if (usage.outputTokens !== undefined)
+        record.outputTokens = usage.outputTokens;
+    if (usage.cachedTokens !== undefined)
+        record.cachedTokens = usage.cachedTokens;
+    if (usage.cacheWriteTokens !== undefined)
+        record.cacheWriteTokens = usage.cacheWriteTokens;
+    if (usage.reasoningTokens !== undefined)
+        record.reasoningTokens = usage.reasoningTokens;
+    if (usage.costUsd !== undefined)
+        record.costUsd = usage.costUsd;
+    if (usage.upstreamCostUsd !== undefined)
+        record.upstreamCostUsd = usage.upstreamCostUsd;
+    if (usage.currency !== undefined)
+        record.currency = usage.currency;
+    if (usage.tokenSource !== undefined)
+        record.tokenSource = usage.tokenSource;
+    if (usage.costSource !== undefined)
+        record.costSource = usage.costSource;
+    if (input.event.providerReceipt !== undefined)
+        record.providerReceipt = input.event.providerReceipt;
+    return record;
+}
+function usageAgentId(manifest, run) {
+    const root = manifest.agent.id?.trim() ? `agent:${manifest.agent.id.trim()}` : manifest.agentRevision;
+    const subagent = typeof run.input.subagent === "string" ? run.input.subagent : undefined;
+    const identity = subagent ? `${root}/subagent:${subagent}` : root;
+    const result = { agentId: identity };
+    if (subagent)
+        result.subagent = subagent;
+    if (typeof run.input.parentRunId === "string")
+        result.parentRunId = run.input.parentRunId;
+    return result;
+}
+function providerFromModel(model) {
+    const slash = model.indexOf("/");
+    return slash > 0 ? model.slice(0, slash) : "unknown";
+}
+function clean(value) {
+    const normalized = value?.trim();
+    return normalized ? normalized : undefined;
+}
+//# sourceMappingURL=usage-accounting.js.map

package/dist/usage-accounting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-accounting.js","sourceRoot":"","sources":["../src/usage-accounting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA0BzC,MAAM,OAAO,sBAAsB;IAGJ;IAFZ,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IAElE,YAA6B,KAM5B;QAN4B,UAAK,GAAL,KAAK,CAMjC;IAAG,CAAC;IAEL,KAAK,CAAC,cAAc,CAAC,KAA0B;QAM7C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,QAAQ;YAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,cAAc,EAAE,GAAG,QAAQ,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,iBAAiB,GAAG,CAAC,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAuB;YACjC,cAAc,EAAE,SAAS;YACzB,gBAAgB,EAAE,KAAK;YACvB,gBAAgB,EAAE,KAAK;SACxB,CAAC;QACF,IAAI,KAAK,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACrD,IAAI,KAAK,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAA6B;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI;YACnD,cAAc,EAAE,kBAAkB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,UAAU,EAAE,EAAE;YACvE,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,KAAK;SACxB,CAAC;QACF,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtG,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC;QACzE,MAAM,iBAAiB,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,iBAAiB;YACtC,CAAC,CAAC,SAAS,QAAQ,IAAI,iBAAiB,EAAE;YAC1C,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;QAC1B,MAAM,WAAW,GAAG,gBAAgB,CAAC;YACnC,cAAc;YACd,GAAG;YACH,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO;YAC3B,KAAK;YACL,QAAQ;YACR,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAC9D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;YAC/D,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,wBAAwB,CAAC,SAAiB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,MAAM;YAAE,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC7C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAAmB;QACvB,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACpG,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,gBAAgB;gBAAE,SAAS;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACxD,MAAM,MAAM,GAAqB;gBAC/B,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,KAAK,EAAE,GAAG,CAAC,EAAE;gBACb,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,SAAS;gBACT,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC7E,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS;gBACnC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;gBAC7C,UAAU,EAAE,aAAa;gBACzB,WAAW,EAAE,aAAa;gBAC1B,UAAU,EAAE,aAAa;gBACzB,QAAQ,EAAE;oBACR,gBAAgB,EAAE,qBAAqB;iBACxC;aACF,CAAC;YACF,IAAI,QAAQ,CAAC,WAAW;gBAAE,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;YACpE,IAAI,QAAQ,CAAC,QAAQ;gBAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC3D,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,KAQzB;IACC,MAAM,KAAK,GAAiB,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAqB;QAC/B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE;QACnB,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;QAC/B,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,aAAa;QACtC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE;YACR,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,SAAS;YACnD,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa;SACzC;KACF,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW;QAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;IAChF,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ;QAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACvE,IAAI,KAAK,CAAC,QAAQ,KAAK,cAAc,IAAI,KAAK,CAAC,KAAK,CAAC,iBAAiB;QAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACtH,IAAI,KAAK,CAAC,KAAK,CAAC,iBAAiB;QAAE,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC5F,IAAI,KAAK,CAAC,KAAK,CAAC,aAAa;QAAE,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;IAChF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAC5E,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IAC/E,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IAC/E,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAAE,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAC3F,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;QAAE,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAChE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;QAAE,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IACxF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACnE,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAC5E,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACzE,IAAI,KAAK,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS;QAAE,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC;IACpG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CACnB,QAA2D,EAC3D,GAAc;IAEd,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;IACtG,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,aAAa,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,MAAM,GAAiE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACnG,IAAI,QAAQ;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzC,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;IAC1F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,KAAK,CAAC,KAAyB;IACtC,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC"}

package/dist/usage-budget.d.ts

@@ -0,0 +1,29 @@
+import type { AgentUsageBudget } from "@openeve/core";
+import type { RunRecord, UsageBudgetRejection, UsageReservationInput } from "./state.js";
+export declare class UsageBudgetExceededError extends Error {
+    readonly rejection: UsageBudgetRejection;
+    readonly code = "usage_budget_exceeded";
+    constructor(rejection: UsageBudgetRejection);
+}
+export declare function resolveUsageBudget(configured: AgentUsageBudget | undefined, env: Record<string, string | undefined>, stableAgentId?: string): AgentUsageBudget | undefined;
+export declare function usageAgentId(manifest: {
+    agentRevision: string;
+    agent: {
+        id?: string;
+    };
+}, run: RunRecord): {
+    agentId: string;
+    subagent?: string;
+    parentRunId?: string;
+};
+export declare function usageReservationInput(input: {
+    idempotencyKey: string;
+    run: RunRecord;
+    agentId: string;
+    provider?: string;
+    model?: string;
+    billingMode?: UsageReservationInput["billingMode"];
+    budget: AgentUsageBudget;
+    now?: Date;
+}): UsageReservationInput;
+//# sourceMappingURL=usage-budget.d.ts.map

package/dist/usage-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-budget.d.ts","sourceRoot":"","sources":["../src/usage-budget.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EACV,SAAS,EAET,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAKpB,qBAAa,wBAAyB,SAAQ,KAAK;IAGrC,QAAQ,CAAC,SAAS,EAAE,oBAAoB;IAFpD,QAAQ,CAAC,IAAI,2BAA2B;gBAEnB,SAAS,EAAE,oBAAoB;CAIrD;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,gBAAgB,GAAG,SAAS,EACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,aAAa,CAAC,EAAE,MAAM,GACrB,gBAAgB,GAAG,SAAS,CAkB9B;AAED,wBAAgB,YAAY,CAC1B,QAAQ,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EAC3D,GAAG,EAAE,SAAS,GACb;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAQ9D;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,qBAAqB,CAkBxB"}