@bongos/core 1.19.176 → 1.19.177

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.176",
-  "core_contract": "1.19.176",
-  "source_commit": "9b6c711a358a67610bdb81e8776bc689a0b9cdd8",
+  "core_version": "1.19.177",
+  "core_contract": "1.19.177",
+  "source_commit": "ec902233a41d6187d97c1b0761ca59b57ae3b180",
   "source_ref": "HEAD",
-  "built_at": "2026-08-16T20:39:00.850Z",
+  "built_at": "2026-08-16T20:47:16.225Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 306,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1600,
-  "tree_sha256": "fe346cc282c27c1ec0f17e6dc13d3a82795f14343fa9e42f120b3df9a3138546",
+  "tree_sha256": "07b51c6ba546cfe6dc3f252283ffdbf5fa06230b8a86baeb82b82311d5e11dee",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4227,12 +4227,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "07c720a5ef0a0e1e93727688e9c6c87e00ab43f289efa7cbb8eebea6f3cdbba9"
+      "sha256": "bd31fbe4175062649acbd10eba6caca643e13941a4d8a366bd5ba2625e7ac92d"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "d014a9180d2a66087029d00f9f10da48fbc8ee3be7a88db11280bc35da7fd611"
+      "sha256": "f5fe7936f9d6739c7268697daab41d5520a0da60bc2b63099d8bd7145e977091"
     },
     {
       "path": "public-docs/index.html",
@@ -5642,7 +5642,7 @@
     {
       "path": "src/bongos/llm-pricing.js",
       "mode": "0000644",
-      "sha256": "c421166d7d5099f96b2b46cf9fb46b2c0b3594fb59d318c1a512751bd00a9969"
+      "sha256": "f7688e75a873f9c287f6559311877081830798cb1b5f1e548ceff3fcbed9e31d"
     },
     {
       "path": "src/bongos/metrics.js",
@@ -5837,7 +5837,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "9459525829ea38080db6cc5e757ef7be130c3da00c6563324e892bf605313d8d"
+      "sha256": "5904881edeeaeedb873a2968c36a01b3c2faf6e79112bd56653f28692aa5267b"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6367,7 +6367,7 @@
     {
       "path": "tests/cost_reconcile.mjs",
       "mode": "0000644",
-      "sha256": "a94de0a9ebd15b8aeb80fa2fc976d847334e733bd0c2a65a869bac5c4b6b4dd8"
+      "sha256": "8356250d8fc753afb2960d867f81586531053afd15f4e66da1a1b7b62b6b5db7"
     },
     {
       "path": "tests/cost_summary_shape.mjs",
@@ -7102,7 +7102,7 @@
     {
       "path": "tests/llm-pricing.mjs",
       "mode": "0000644",
-      "sha256": "dec4e9ab447bfac75c6298c6f47d0f0f85e643c7519e192ca704d9a93a834499"
+      "sha256": "de3fabaeafb3eb3ad500becf565f3b6d7118a763f1e80d085f94b6ba990d5c58"
     },
     {
       "path": "tests/local_preview.mjs",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.176",
+  "version": "1.19.177",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.176",
+      "version": "1.19.177",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.176",
+  "version": "1.19.177",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/bongos/llm-pricing.js

@@ -34,20 +34,42 @@
 // Family-based pricing assumes the CURRENT model in each family (what this
 // instance runs). A historical id like claude-opus-4-1 ($15/$75) would be
 // mis-priced low here — acceptable: the platform only runs 4.x-current models.
+//
+// VERIFIED 2026-08-16 against the live Anthropic pricing page (task 1002883):
+// added the `fable` family. familyFor() previously matched only opus/sonnet/
+// haiku, so claude-fable-5 — the owner's top-model default and this instance's
+// `assumed_builder_model` (modules/grading/grader-rubric.json) — fell through to
+// null and was priced at the opus fallback with unknown_model=true. Fable is
+// 2× opus, so every cost-plus reward computed from a Fable session was priced at
+// HALF its true cost (not conservative: cost-plus UNDER-pays the builder). The
+// grading side already carried the family token (grader.js MODEL_FAMILY_TOKENS);
+// this table is the surface that never caught up.
+//   - fable  = Claude Fable 5 / Mythos 5 ($10 in / $50 out) — identical rates,
+//              which is why one family token covers both.
+//   - opus   = Claude Opus 5 / 4.8 / 4.7  ($5 in / $25 out)  [re-verified]
+//   - sonnet = Claude Sonnet 4.6          ($3 in / $15 out)  [re-verified]
+//   - haiku  = Claude Haiku 4.5           ($1 in / $5 out)   [re-verified]
+// NOTE (deliberately NOT changed here — its own task, per the rule above):
+// Claude Sonnet 5 is now $2/$10, not the $3/$15 this `sonnet` row carries. The
+// grader's default worker model is claude-sonnet-5, so grade costs are currently
+// OVER-priced ~1.5×. That is a separate price-table decision; see task 1003001.
 const PRICES = {
   // family : { input, output, cache_write_5m, cache_write_1h, cache_read }  (USD / 1e6 tokens)
+  fable:  { input: 10, output: 50, cache_write_5m: 12.5, cache_write_1h: 20, cache_read: 1   },
   opus:   { input: 5,  output: 25, cache_write_5m: 6.25, cache_write_1h: 10, cache_read: 0.5 },
   sonnet: { input: 3,  output: 15, cache_write_5m: 3.75, cache_write_1h: 6,  cache_read: 0.3 },
   haiku:  { input: 1,  output: 5,  cache_write_5m: 1.25, cache_write_1h: 2,  cache_read: 0.1 },
 };
 
-// Resolve a model id (e.g. 'claude-opus-4-8', 'claude-sonnet-4-6',
-// 'claude-haiku-4-5') to a price family by substring — mirrors grader.js's
-// family-token convention (all live Claude ids contain one of these three).
-// Unknown → null (caller decides: we conservatively price at the opus rate AND
-// flag it, so an unpriced model is loud, never silently $0).
+// Resolve a model id (e.g. 'claude-fable-5', 'claude-opus-4-8',
+// 'claude-sonnet-4-6', 'claude-haiku-4-5') to a price family by substring —
+// mirrors grader.js's MODEL_FAMILY_TOKENS convention, including the fable/mythos
+// pair it checks first (all live Claude ids contain one of these tokens).
+// Unknown → null (caller decides: we price at the opus rate AND flag it, so an
+// unpriced model is loud, never silently $0 — see priceUsage on why opus).
 function familyFor(model) {
   const m = String(model || '').toLowerCase();
+  if (m.includes('fable') || m.includes('mythos')) return 'fable';
   if (m.includes('opus')) return 'opus';
   if (m.includes('sonnet')) return 'sonnet';
   if (m.includes('haiku')) return 'haiku';
@@ -70,7 +92,14 @@ function priceUsage(model, usage) {
   const u = usage || {};
   const fam = familyFor(model);
   const unknownModel = fam === null;
-  const priceFamily = fam || 'opus'; // conservative default for an unrecognized model
+  // Unrecognized → price at the opus rate. Since `fable` landed (task 1002883)
+  // opus is no longer the ceiling, so this is a MID-range fallback, not a
+  // conservative one: an unknown Fable-class model prices at half its true rate.
+  // That is why unknown_model=true rides along — the loudness is the safeguard,
+  // not the rate. (Deliberately left at opus: every model this platform actually
+  // runs is now matched, so raising the fallback would only over-price genuinely
+  // foreign ids like gpt-4o.)
+  const priceFamily = fam || 'opus';
   const p = PRICES[priceFamily];
 
   const input = Number(u.input_tokens) || 0;          // uncached input
@@ -179,7 +208,7 @@ function priceModelUsage(modelUsage) {
  * Like priceModelUsage, model_usage has NO 5m/1h cache-creation breakdown — the
  * `cache_creation` lump is priced at the 5m rate, exactly as session-cost.js
  * priceTranscript does in its `else` branch (no breakdown → 5m). Unknown model
- * ids are conservatively priced as opus AND collected, so an unpriced model is
+ * ids are priced as opus AND collected, so an unpriced model is
  * loud, never silently $0. Pure: no I/O, no Date.now().
  *
  * @param {Object<string, {input?:number,output?:number,cache_read?:number,cache_creation?:number}>} modelUsage
@@ -199,7 +228,7 @@ function componentsFromModelUsage(modelUsage) {
     const usage = u || {};
     const fam = familyFor(rawId);
     if (fam === null) unknown.push(canonicalizeModelId(rawId));
-    const p = PRICES[fam || 'opus']; // conservative default for an unrecognized model
+    const p = PRICES[fam || 'opus']; // mid-range fallback; unknown ids ride the `unknown` list
     fresh_input_usd += ((Number(usage.input) || 0) * p.input) / 1e6;
     output_usd += ((Number(usage.output) || 0) * p.output) / 1e6;
     cache_read_usd += ((Number(usage.cache_read) || 0) * p.cache_read) / 1e6;

package/src/module-api.js

@@ -779,8 +779,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.174 with no explicit bump. run 31970199477. (task 1002620)
 //   1.19.176 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.175 with no explicit bump. run 31971125373. (task 1002620)
+//   1.19.177 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.176 with no explicit bump. run 31971532260. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.176'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.177'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/cost_reconcile.mjs

@@ -100,3 +100,33 @@ test('1366 missing per-tier fields default to 0 (partial model_usage)', () => {
   assert.equal(out.cache_write_usd, 0);
   assert.ok(near(out.total_usd, 5));
 });
+
+// ---------- fable / mythos family (task 1002883) ----------
+// The reconciler is the SECOND pricing path the missing fable family broke: a
+// cloud-box / overnight Fable session whose client cost hook never posted lands
+// here, and before the fix it re-priced at the opus fallback — half the true
+// cost, and flagged unknown on the platform's own default model.
+
+test('1002883 fable 1M/1M/10M/1M → $10 / $50 / $10 / $12.50, total $82.50, not flagged', () => {
+  const out = componentsFromModelUsage({
+    'claude-fable-5': { input: M, output: M, cache_read: 10 * M, cache_creation: M },
+  });
+  assert.ok(near(out.fresh_input_usd, 10), `fresh ${out.fresh_input_usd}`);
+  assert.ok(near(out.output_usd, 50), `output ${out.output_usd}`);
+  assert.ok(near(out.cache_read_usd, 10), `cache_read ${out.cache_read_usd}`); // 10M * 1/M
+  assert.ok(near(out.cache_write_usd, 12.5), `cache_write ${out.cache_write_usd}`);
+  assert.ok(near(out.total_usd, 82.5), `total ${out.total_usd}`);
+  const sum = out.fresh_input_usd + out.cache_read_usd + out.cache_write_usd + out.output_usd;
+  assert.ok(near(sum, out.total_usd), `tiers sum ${sum} must equal total ${out.total_usd}`);
+  assert.deepEqual(out.unknown_models, [], 'fable is the platform default — never "unknown"');
+});
+
+test('1002883 mythos prices as fable, and a fable session is 2× the same opus session', () => {
+  const usage = { input: M, output: M };
+  const fable = componentsFromModelUsage({ 'claude-fable-5': usage });
+  const mythos = componentsFromModelUsage({ 'claude-mythos-5': usage });
+  const opus = componentsFromModelUsage({ 'claude-opus-5': usage });
+  assert.ok(near(fable.total_usd, mythos.total_usd), 'mythos shares fable rates');
+  assert.deepEqual(mythos.unknown_models, []);
+  assert.ok(near(fable.total_usd, opus.total_usd * 2), `fable ${fable.total_usd} != 2× opus ${opus.total_usd}`);
+});

package/tests/llm-pricing.mjs

@@ -2,6 +2,9 @@
 // Prices VERIFIED 2026-06-20 against the live Anthropic models/pricing page
 // (GDS-V4 task 1343): opus (4.8/4.7) $5/$25, sonnet (4.6) $3/$15, haiku (4.5)
 // $1/$5; flat across the 1M window (no long-context premium).
+// Re-VERIFIED + extended 2026-08-16 (task 1002883): fable (Fable 5 / Mythos 5)
+// $10/$50 — the family familyFor() used to miss, so Fable sessions priced at the
+// opus fallback and cost-plus under-paid by half.
 // Run:  node tests/llm-pricing.mjs
 
 import { strict as assert } from 'node:assert';
@@ -18,6 +21,9 @@ const M = 1_000_000;
 const near = (a, b) => Math.abs(a - b) < 1e-6;
 
 test('familyFor matches by substring; unknown → null', () => {
+  assert.equal(familyFor('claude-fable-5'), 'fable');
+  assert.equal(familyFor('claude-mythos-5'), 'fable');   // same rates → same family
+  assert.equal(familyFor('claude-mythos-preview'), 'fable');
   assert.equal(familyFor('claude-opus-4-8'), 'opus');
   assert.equal(familyFor('claude-sonnet-4-6'), 'sonnet');
   assert.equal(familyFor('claude-haiku-4-5'), 'haiku');
@@ -26,6 +32,68 @@ test('familyFor matches by substring; unknown → null', () => {
   assert.equal(familyFor(undefined), null);
 });
 
+// ---------- fable / mythos family (task 1002883) ----------
+// The regression this locks: claude-fable-5 is the owner's top-model default and
+// the grader's assumed_builder_model, but familyFor() matched only opus/sonnet/
+// haiku — so it fell to the opus fallback (unknown_model=true) at HALF its rate,
+// and every cost-plus reward from a Fable session under-paid the builder.
+
+test('fable 5: 1M input + 1M output = $10 + $50 = $60, and is NOT flagged unknown', () => {
+  const r = priceUsage('claude-fable-5', { input_tokens: M, output_tokens: M });
+  assert.ok(near(r.usd, 60), `got ${r.usd}`);
+  assert.equal(r.unknown_model, false, 'fable must resolve, not ride the opus fallback');
+  assert.equal(r.family, 'fable');
+});
+
+test('mythos 5 prices identically to fable 5 (one family, shared rates)', () => {
+  const f = priceUsage('claude-fable-5', { input_tokens: M, output_tokens: M });
+  const m = priceUsage('claude-mythos-5', { input_tokens: M, output_tokens: M });
+  assert.ok(near(f.usd, m.usd), `fable ${f.usd} != mythos ${m.usd}`);
+  assert.equal(m.family, 'fable');
+});
+
+test('fable cache tiers: read $1, 5m write $12.50, 1h write $20 per 1M', () => {
+  assert.ok(near(priceUsage('claude-fable-5', { cache_read_input_tokens: M }).usd, 1));
+  assert.ok(near(priceUsage('claude-fable-5', {
+    cache_creation_input_tokens: M,
+    cache_creation: { ephemeral_5m_input_tokens: M, ephemeral_1h_input_tokens: 0 },
+  }).usd, 12.5));
+  assert.ok(near(priceUsage('claude-fable-5', {
+    cache_creation_input_tokens: M,
+    cache_creation: { ephemeral_5m_input_tokens: 0, ephemeral_1h_input_tokens: M },
+  }).usd, 20));
+});
+
+test('fable rides the published cache multipliers off its own base input (1.25× / 2× / 0.1×)', () => {
+  const { fable } = PRICES;
+  assert.ok(near(fable.cache_write_5m, fable.input * 1.25));
+  assert.ok(near(fable.cache_write_1h, fable.input * 2));
+  assert.ok(near(fable.cache_read, fable.input * 0.1));
+});
+
+test('fable is exactly 2× opus — the size of the pre-fix cost-plus shortfall', () => {
+  const usage = { input_tokens: M, output_tokens: M };
+  const fable = priceUsage('claude-fable-5', usage).usd;
+  const opus = priceUsage('claude-opus-5', usage).usd;
+  assert.ok(near(fable, opus * 2), `fable ${fable} != 2× opus ${opus}`);
+});
+
+test('priceModelUsage: a fable session costs $60 / 1M+1M and reports no unknown models', () => {
+  const r = priceModelUsage({ 'claude-fable-5': { input: M, output: M } });
+  assert.ok(near(r.true_cost_usd, 60), `got ${r.true_cost_usd}`);
+  assert.deepEqual(r.unknown_models, [], 'fable must not be reported as unpriced');
+});
+
+test('canonicalizeModelId collapses fable variants without changing the price', () => {
+  assert.equal(canonicalizeModelId('claude-fable-5[1m]'), 'claude-fable-5');
+  const r = priceModelUsage({
+    'claude-fable-5': { input: M },
+    'claude-fable-5[1m]': { input: M },
+  });
+  assert.equal(r.per_model.length, 2, 'raw keys kept as separate breakdown rows');
+  assert.ok(near(r.true_cost_usd, 20), `got ${r.true_cost_usd}`); // 10 + 10
+});
+
 test('opus 4.8: 1M input + 1M output = $5 + $25 = $30', () => {
   const r = priceUsage('claude-opus-4-8', { input_tokens: M, output_tokens: M });
   assert.ok(near(r.usd, 30), `got ${r.usd}`);