@calliopelabs/cli 3.0.0 → 3.2.0

package/dist/execution/billing.js

@@ -0,0 +1,166 @@
+/** Operator-reviewed evidence complements discovery; it never changes live model identity. */
+import * as fs from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { canonicalJson, digest } from '../approvals/index.js';
+import { getProviderNames } from '../config.js';
+import { assertExecutionStoreOutsideProject, hex, integer, invalid, shape } from './authority.js';
+import { ExecutionLimitError } from './types.js';
+export const billingFile = () => resolve(process.env.CALLIOPE_BILLING_FILE || join(homedir(), '.calliope-cli', 'billing.json'));
+export function validateBillingProfile(value) {
+    const full = !!value && typeof value === 'object' && 'version' in value && value.version === 2;
+    shape(value, ['provider', 'model', 'target', 'checkedAt', 'expiresAt', 'sources', 'prices', 'capabilities', 'admission', ...(full ? ['version', 'limits'] : [])]);
+    if ((full ? (!getProviderNames().includes(value.provider) || value.admission !== 'reviewed-full-context-v1') : (value.provider !== 'anthropic' || value.admission !== 'provider-count-v1')) || typeof value.model !== 'string' || !value.model || value.model.length > 512 || /[\x00-\x20\x7f]/.test(value.model) || !hex(value.target))
+        invalid();
+    integer(value.checkedAt, 1, 8640000000000000);
+    integer(value.expiresAt, value.checkedAt + 1, Math.min(8640000000000000, value.checkedAt + 7 * 86400000));
+    if (!Array.isArray(value.sources) || !value.sources.length || value.sources.length > 8)
+        invalid();
+    for (const source of value.sources) {
+        if (typeof source !== 'string' || source.length > 2048)
+            invalid();
+        let url;
+        try {
+            url = new URL(source);
+        }
+        catch {
+            invalid();
+        }
+        if (url.protocol !== 'https:' || url.username || url.password || url.search || url.hash)
+            invalid();
+    }
+    shape(value.prices, ['input', 'output']);
+    for (const price of Object.values(value.prices))
+        if (typeof price !== 'number' || !Number.isFinite(price) || price < 0 || price > 1000000)
+            invalid();
+    shape(value.capabilities, [], [...(full ? ['chat'] : []), 'tools', 'streaming']);
+    if (Object.values(value.capabilities).some(v => typeof v !== 'boolean'))
+        invalid();
+    if (full) {
+        shape(value.limits, ['contextLength', 'maxOutputTokens']);
+        integer(value.limits.contextLength, 1, 100000000);
+        integer(value.limits.maxOutputTokens, 1, 100000000);
+    }
+    return JSON.parse(canonicalJson(value));
+}
+export function validateInputCount(value) {
+    shape(value, ['version', 'method', 'requestHash', 'inputTokens', 'at']);
+    if (value.version !== 1 || value.method !== 'anthropic-count-tokens' || !hex(value.requestHash))
+        invalid();
+    integer(value.inputTokens, 1, 100000000);
+    integer(value.at, 1, 8640000000000000);
+    return value;
+}
+/** Conservative bounds are reconstructed from recorded evidence during replay. */
+export function fullContextTerms(proof) {
+    const { profile, live, requirements } = proof;
+    for (const key of ['chat', ...(requirements.tools ? ['tools'] : []), ...(requirements.streaming ? ['streaming'] : [])]) {
+        const k = key;
+        if (live.capabilities[k] === false || (live.capabilities[k] ?? profile.capabilities[k]) !== true)
+            throw new ExecutionLimitError('authority', 'Live discovery or reviewed metadata did not confirm the required model capabilities.');
+    }
+    return { inputTokens: Math.max(profile.limits.contextLength, live.contextLength ?? 0), maxOutputTokens: Math.min(profile.limits.maxOutputTokens, live.maxOutputTokens ?? 100000000), inputPrice: Math.max(profile.prices.input, live.prices.input ?? 0), outputPrice: Math.max(profile.prices.output, live.prices.output ?? 0) };
+}
+export function validateQuoteEvidence(value) {
+    shape(value, ['version', 'profileHash', 'profile'], ['count', 'multiplier', 'slackTokens', 'quotedAt', 'live', 'requirements', 'measuredInput']);
+    if (!hex(value.profileHash))
+        invalid();
+    const profile = validateBillingProfile(value.profile);
+    if (digest(canonicalJson(profile)) !== value.profileHash)
+        invalid();
+    if (value.version === 1) {
+        shape(value, ['version', 'profileHash', 'profile', 'count', 'multiplier', 'slackTokens']);
+        if (profile.admission !== 'provider-count-v1' || value.multiplier !== 2 || value.slackTokens !== 1024)
+            invalid();
+        validateInputCount(value.count);
+    }
+    else if (value.version === 2) {
+        shape(value, ['version', 'profileHash', 'profile', 'quotedAt', 'live', 'requirements'], ['measuredInput']);
+        if (profile.admission !== 'reviewed-full-context-v1')
+            invalid();
+        if (value.measuredInput !== undefined && typeof value.measuredInput !== 'boolean')
+            invalid();
+        integer(value.quotedAt, Math.max(1, profile.checkedAt - 1000), profile.expiresAt - 1);
+        shape(value.live, ['discoveredAt', 'contextLength', 'maxOutputTokens', 'capabilities', 'prices']);
+        integer(value.live.discoveredAt, Math.max(1, value.quotedAt - 300000), value.quotedAt + 1000);
+        for (const key of ['contextLength', 'maxOutputTokens'])
+            if (value.live[key] !== null)
+                integer(value.live[key], 1, 100000000);
+        shape(value.live.capabilities, [], ['chat', 'tools', 'streaming']);
+        if (Object.values(value.live.capabilities).some(v => typeof v !== 'boolean'))
+            invalid();
+        shape(value.live.prices, ['input', 'output']);
+        for (const p of Object.values(value.live.prices))
+            if (p !== null && (typeof p !== 'number' || !Number.isFinite(p) || p < 0 || p > 1000000))
+                invalid();
+        shape(value.requirements, ['tools', 'streaming']);
+        if (Object.values(value.requirements).some(v => typeof v !== 'boolean'))
+            invalid();
+        fullContextTerms(value);
+    }
+    else
+        invalid();
+    return JSON.parse(canonicalJson(value));
+}
+export function assertBillingCurrent(evidence, route, now = Date.now()) {
+    const p = validateBillingProfile(evidence.profile);
+    if (evidence.hash !== digest(canonicalJson(p)) || p.provider !== route.provider || p.model !== route.model || p.target !== route.target || p.checkedAt > now + 1000 || p.expiresAt <= now)
+        throw new ExecutionLimitError('authority', 'Billing evidence is expired or does not match the live provider/model/endpoint.');
+}
+export function readBillingEvidence(route, project, file = billingFile()) {
+    if (!route)
+        return undefined;
+    let fd;
+    try {
+        fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw new ExecutionLimitError('authority', 'Cannot safely open local billing evidence.');
+    }
+    try {
+        assertExecutionStoreOutsideProject(project, dirname(file));
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.size > 131072 || stat.nlink !== 1 || (stat.mode & 0o022))
+            throw new Error();
+        const bytes = Buffer.alloc(131073), length = fs.readSync(fd, bytes, 0, bytes.length, 0);
+        if (length > 131072)
+            throw new Error();
+        const data = JSON.parse(bytes.subarray(0, length).toString('utf8'));
+        shape(data, ['version', 'profiles']);
+        if (![1, 2].includes(data.version) || !Array.isArray(data.profiles) || data.profiles.length > 64)
+            invalid();
+        const profiles = data.profiles.map(validateBillingProfile), ids = new Set();
+        if (data.version === 1 && profiles.some(p => p.admission !== 'provider-count-v1'))
+            invalid();
+        for (const p of profiles) {
+            const id = JSON.stringify([p.provider, p.model, p.target]);
+            if (ids.has(id))
+                invalid();
+            ids.add(id);
+        }
+        const profile = profiles.find(p => p.provider === route.provider && p.model === route.model && p.target === route.target);
+        if (!profile)
+            return undefined;
+        const evidence = { profile, hash: digest(canonicalJson(profile)) };
+        assertBillingCurrent(evidence, route);
+        return evidence;
+    }
+    catch (error) {
+        if (error instanceof ExecutionLimitError && error.code === 'authority')
+            throw error;
+        throw new ExecutionLimitError('authority', 'Local billing evidence is malformed, unsafe or oversized.');
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+/** Size coordinator output before admission; the request guard rechecks all evidence. */
+export function reviewedOutputLimit(route, project) {
+    const profile = readBillingEvidence(route, project)?.profile;
+    return profile?.admission === 'reviewed-full-context-v1'
+        ? Math.min(route.maxOutputTokens ?? profile.limits.maxOutputTokens, profile.limits.maxOutputTokens)
+        : route.maxOutputTokens;
+}
+//# sourceMappingURL=billing.js.map

package/dist/execution/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../src/execution/billing.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAC,OAAO,EAAC,MAAM,SAAS,CAAC;AAChC,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAC,gBAAgB,EAAC,MAAM,cAAc,CAAC;AAG9C,OAAO,EAAC,kCAAkC,EAAC,GAAG,EAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,MAAM,gBAAgB,CAAC;AAC5F,OAAO,EAAC,mBAAmB,EAAC,MAAM,YAAY,CAAC;AA2B/C,MAAM,CAAC,MAAM,WAAW,GAAG,GAAU,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAC,eAAe,EAAC,cAAc,CAAC,CAAC,CAAC;AAErI,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,IAAI,GAAC,CAAC,CAAC,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,SAAS,IAAG,KAAK,IAAE,KAAK,CAAC,OAAO,KAAG,CAAC,CAAC;IAClF,KAAK,CAAC,KAAK,EAAC,CAAC,UAAU,EAAC,OAAO,EAAC,QAAQ,EAAC,WAAW,EAAC,WAAW,EAAC,SAAS,EAAC,QAAQ,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,CAAC,IAAI,CAAA,CAAC,CAAA,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC,CAAC,CAAC;IACnJ,IAAG,CAAC,IAAI,CAAA,CAAC,CAAA,CAAC,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAA0B,CAAC,IAAE,KAAK,CAAC,SAAS,KAAG,0BAA0B,CAAC,CAAA,CAAC,CAAA,CAAC,KAAK,CAAC,QAAQ,KAAG,WAAW,IAAE,KAAK,CAAC,SAAS,KAAG,mBAAmB,CAAC,CAAC,IAAE,OAAO,KAAK,CAAC,KAAK,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,KAAK,IAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAC,GAAG,IAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IACvU,OAAO,CAAC,KAAK,CAAC,SAAS,EAAC,CAAC,EAAC,gBAAgB,CAAC,CAAC;IAAA,OAAO,CAAC,KAAK,CAAC,SAAS,EAAC,KAAK,CAAC,SAAS,GAAC,CAAC,EAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAC,KAAK,CAAC,SAAS,GAAC,CAAC,GAAC,QAAQ,CAAC,CAAC,CAAC;IAC7I,IAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAE,KAAK,CAAC,OAAO,CAAC,MAAM,GAAC,CAAC;QAAC,OAAO,EAAE,CAAC;IAC1F,KAAI,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAC,CAAC;QACjC,IAAG,OAAO,MAAM,KAAG,QAAQ,IAAE,MAAM,CAAC,MAAM,GAAC,IAAI;YAAC,OAAO,EAAE,CAAC;QAC1D,IAAI,GAAO,CAAC;QAAA,IAAG,CAAC;YAAA,GAAG,GAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC;YAAA,OAAO,EAAE,CAAC;QAAA,CAAC;QACtD,IAAG,GAAG,CAAC,QAAQ,KAAG,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,MAAM,IAAE,GAAG,CAAC,IAAI;YAAC,OAAO,EAAE,CAAC;IACzF,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,CAAC;IACvC,KAAI,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAAC,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAE,KAAK,GAAC,CAAC,IAAE,KAAK,GAAC,OAAO;YAAC,OAAO,EAAE,CAAC;IACrI,KAAK,CAAC,KAAK,CAAC,YAAY,EAAC,EAAE,EAAC,CAAC,GAAG,CAAC,IAAI,CAAA,CAAC,CAAA,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,OAAO,EAAC,WAAW,CAAC,CAAC,CAAC;IACzE,IAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,KAAG,SAAS,CAAC;QAAC,OAAO,EAAE,CAAC;IAC7E,IAAG,IAAI,EAAC,CAAC;QAAA,KAAK,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC,eAAe,EAAC,iBAAiB,CAAC,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;IAAA,CAAC;IACpK,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAA2B,CAAC;AACpE,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,QAAQ,EAAC,aAAa,EAAC,aAAa,EAAC,IAAI,CAAC,CAAC,CAAC;IACnE,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,IAAE,KAAK,CAAC,MAAM,KAAG,wBAAwB,IAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;QAAC,OAAO,EAAE,CAAC;IACjG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;IAAA,OAAO,CAAC,KAAK,CAAC,EAAE,EAAC,CAAC,EAAC,gBAAgB,CAAC,CAAC;IAC5E,OAAO,KAA8B,CAAC;AACxC,CAAC;AACD,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAA8B;IAC7D,MAAM,EAAC,OAAO,EAAC,IAAI,EAAC,YAAY,EAAC,GAAC,KAAK,CAAC;IACxC,KAAI,MAAM,GAAG,IAAI,CAAC,MAAM,EAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAA,CAAC,CAAA,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAA,CAAC,CAAA,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAU,EAAC,CAAC;QACpH,MAAM,CAAC,GAAC,GAAsD,CAAC;QAC/D,IAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAG,KAAK,IAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAG,IAAI;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,sFAAsF,CAAC,CAAC;IAC5N,CAAC;IACD,OAAM,EAAC,WAAW,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAC,IAAI,CAAC,aAAa,IAAE,CAAC,CAAC,EAAC,eAAe,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAC,IAAI,CAAC,eAAe,IAAE,SAAS,CAAC,EAAC,UAAU,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAE,CAAC,CAAC,EAAC,WAAW,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAE,CAAC,CAAC,EAAC,CAAC;AAC7S,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,aAAa,EAAC,SAAS,CAAC,EAAC,CAAC,OAAO,EAAC,YAAY,EAAC,aAAa,EAAC,UAAU,EAAC,MAAM,EAAC,cAAc,EAAC,eAAe,CAAC,CAAC,CAAC;IACvI,IAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;QAAC,OAAO,EAAE,CAAC;IAAA,MAAM,OAAO,GAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAA,IAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,KAAG,KAAK,CAAC,WAAW;QAAC,OAAO,EAAE,CAAC;IACzJ,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,EAAC,CAAC;QACpB,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,aAAa,EAAC,SAAS,EAAC,OAAO,EAAC,YAAY,EAAC,aAAa,CAAC,CAAC,CAAC;QACpF,IAAG,OAAO,CAAC,SAAS,KAAG,mBAAmB,IAAE,KAAK,CAAC,UAAU,KAAG,CAAC,IAAE,KAAK,CAAC,WAAW,KAAG,IAAI;YAAC,OAAO,EAAE,CAAC;QAAA,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvI,CAAC;SAAK,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,EAAC,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,EAAC,MAAM,EAAC,cAAc,CAAC,EAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAAA,IAAG,OAAO,CAAC,SAAS,KAAG,0BAA0B;YAAC,OAAO,EAAE,CAAC;QAChK,IAAG,KAAK,CAAC,aAAa,KAAG,SAAS,IAAE,OAAO,KAAK,CAAC,aAAa,KAAG,SAAS;YAAC,OAAO,EAAE,CAAC;QACrF,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,OAAO,CAAC,SAAS,GAAC,IAAI,CAAC,EAAC,OAAO,CAAC,SAAS,GAAC,CAAC,CAAC,CAAC;QAC/E,KAAK,CAAC,KAAK,CAAC,IAAI,EAAC,CAAC,cAAc,EAAC,eAAe,EAAC,iBAAiB,EAAC,cAAc,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,CAAC,QAAQ,GAAC,MAAM,CAAC,EAAC,KAAK,CAAC,QAAQ,GAAC,IAAI,CAAC,CAAC;QACpL,KAAI,MAAM,GAAG,IAAI,CAAC,eAAe,EAAC,iBAAiB,CAAC;YAAC,IAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,IAAI;gBAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;QACpH,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAC,EAAE,EAAC,CAAC,MAAM,EAAC,OAAO,EAAC,WAAW,CAAC,CAAC,CAAC;QAAA,IAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,KAAG,SAAS,CAAC;YAAC,OAAO,EAAE,CAAC;QACjJ,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAC,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,KAAI,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAAC,IAAG,CAAC,KAAG,IAAI,IAAE,CAAC,OAAO,CAAC,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAE,CAAC,GAAC,CAAC,IAAE,CAAC,GAAC,OAAO,CAAC;gBAAC,OAAO,EAAE,CAAC;QAC9K,KAAK,CAAC,KAAK,CAAC,YAAY,EAAC,CAAC,OAAO,EAAC,WAAW,CAAC,CAAC,CAAC;QAAA,IAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,KAAG,SAAS,CAAC;YAAC,OAAO,EAAE,CAAC;QAC7H,gBAAgB,CAAC,KAA4C,CAAC,CAAC;IACjE,CAAC;;QAAK,OAAO,EAAE,CAAC;IAChB,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAkB,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAwB,EAAC,KAAoB,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE;IAC/F,MAAM,CAAC,GAAC,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjD,IAAG,QAAQ,CAAC,IAAI,KAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAE,CAAC,CAAC,QAAQ,KAAG,KAAK,CAAC,QAAQ,IAAE,CAAC,CAAC,KAAK,KAAG,KAAK,CAAC,KAAK,IAAE,CAAC,CAAC,MAAM,KAAG,KAAK,CAAC,MAAM,IAAE,CAAC,CAAC,SAAS,GAAC,GAAG,GAAC,IAAI,IAAE,CAAC,CAAC,SAAS,IAAE,GAAG;QAC9J,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,iFAAiF,CAAC,CAAC;AACjI,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAA8B,EAAC,OAAc,EAAC,IAAI,GAAC,WAAW,EAAE;IAClG,IAAG,CAAC,KAAK;QAAC,OAAO,SAAS,CAAC;IAC3B,IAAI,EAAS,CAAC;IACd,IAAG,CAAC;QAAA,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAAA,CAAC;IAChG,OAAM,KAAK,EAAC,CAAC;QAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;YAAC,OAAO,SAAS,CAAC;QAAA,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,4CAA4C,CAAC,CAAC;IAAA,CAAC;IAC3K,IAAG,CAAC;QACF,kCAAkC,CAAC,OAAO,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,MAAM,IAAE,IAAI,CAAC,KAAK,KAAG,CAAC,IAAE,CAAC,IAAI,CAAC,IAAI,GAAC,KAAK,CAAC;YAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QACzF,MAAM,KAAK,GAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAC,MAAM,GAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAC,KAAK,EAAC,CAAC,EAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAC/E,IAAG,MAAM,GAAC,MAAM;YAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QACnC,MAAM,IAAI,GAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,EAAC,CAAC,SAAS,EAAC,UAAU,CAAC,CAAC,CAAC;QAAA,IAAG,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAiB,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAC,EAAE;YAAC,OAAO,EAAE,CAAC;QAChJ,MAAM,QAAQ,GAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAC,GAAG,GAAC,IAAI,GAAG,EAAU,CAAC;QAC/E,IAAG,IAAI,CAAC,OAAO,KAAG,CAAC,IAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,mBAAmB,CAAC;YAAC,OAAO,EAAE,CAAC;QACnF,KAAI,MAAM,CAAC,IAAI,QAAQ,EAAC,CAAC;YAAA,MAAM,EAAE,GAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAC,CAAC,CAAC,KAAK,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAAA,IAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAA,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAA,CAAC;QACtH,MAAM,OAAO,GAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,KAAK,CAAC,QAAQ,IAAE,CAAC,CAAC,KAAK,KAAG,KAAK,CAAC,KAAK,IAAE,CAAC,CAAC,MAAM,KAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5G,IAAG,CAAC,OAAO;YAAC,OAAO,SAAS,CAAC;QAC7B,MAAM,QAAQ,GAAC,EAAC,OAAO,EAAC,IAAI,EAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAC,CAAC;QAAA,oBAAoB,CAAC,QAAQ,EAAC,KAAK,CAAC,CAAC;QAAA,OAAO,QAAQ,CAAC;IACpH,CAAC;IAAA,OAAM,KAAK,EAAC,CAAC;QAAA,IAAG,KAAK,YAAY,mBAAmB,IAAE,KAAK,CAAC,IAAI,KAAG,WAAW;YAAC,MAAM,KAAK,CAAC;QAAA,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,2DAA2D,CAAC,CAAC;IAAA,CAAC;YAC7L,CAAC;QAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAA,CAAC;AAC5B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,mBAAmB,CAAC,KAAoB,EAAC,OAAc;IACrE,MAAM,OAAO,GAAC,mBAAmB,CAAC,KAAK,EAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC1D,OAAO,OAAO,EAAE,SAAS,KAAG,0BAA0B;QACpD,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,IAAE,OAAO,CAAC,MAAM,CAAC,eAAe,EAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;QAC/F,CAAC,CAAA,KAAK,CAAC,eAAe,CAAC;AAC3B,CAAC"}

package/dist/execution/child-grants.d.ts

@@ -0,0 +1,9 @@
+import { type ChildGrant, type ExecutionManifest, type ReservationProjection, type RecordedChildGrant } from './types.js';
+export declare const MAX_CHILD_GRANT_BYTES = 32768;
+export declare function validateChildGrant(value: unknown): ChildGrant;
+/** Derived accounts never replace the original immutable budget manifest/hash. */
+export declare function effectiveExecutionManifest(base: ExecutionManifest, state: ReservationProjection): ExecutionManifest;
+/** Once children are granted, their remaining capacity cannot be borrowed by their parent. */
+export declare function assertChildCapacity(manifest: ExecutionManifest, state: ReservationProjection, agentId: string, tokens?: number, costNanos?: number): void;
+export declare function applyChildGrant(base: ExecutionManifest, current: ExecutionManifest, state: ReservationProjection, record: RecordedChildGrant): ExecutionManifest;
+//# sourceMappingURL=child-grants.d.ts.map

package/dist/execution/child-grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-grants.d.ts","sourceRoot":"","sources":["../../src/execution/child-grants.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqB,KAAK,UAAU,EAAC,KAAK,iBAAiB,EAAC,KAAK,qBAAqB,EAAC,KAAK,kBAAkB,EAAC,MAAM,YAAY,CAAC;AAEzI,eAAO,MAAM,qBAAqB,QAAM,CAAC;AACzC,wBAAgB,kBAAkB,CAAC,KAAK,EAAC,OAAO,GAAE,UAAU,CAK3D;AACD,kFAAkF;AAClF,wBAAgB,0BAA0B,CAAC,IAAI,EAAC,iBAAiB,EAAC,KAAK,EAAC,qBAAqB,GAAE,iBAAiB,CAE/G;AAKD,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAC,iBAAiB,EAAC,KAAK,EAAC,qBAAqB,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,SAAE,EAAC,SAAS,SAAE,GAAE,IAAI,CAKnI;AACD,wBAAgB,eAAe,CAAC,IAAI,EAAC,iBAAiB,EAAC,OAAO,EAAC,iBAAiB,EAAC,KAAK,EAAC,qBAAqB,EAAC,MAAM,EAAC,kBAAkB,GAAE,iBAAiB,CASxJ"}

package/dist/execution/child-grants.js

@@ -0,0 +1,55 @@
+import { canonicalJson } from '../approvals/index.js';
+import { shape, uuid, hex, identifier, invalid, validateExecutionManifest, accountLineage } from './authority.js';
+import { ExecutionLimitError } from './types.js';
+export const MAX_CHILD_GRANT_BYTES = 32768;
+export function validateChildGrant(value) {
+    shape(value, ['version', 'id', 'proposalHash', 'previousGraphHash', 'planHash', 'runManifestHash', 'approvalRevision', 'parentId', 'accounts']);
+    if (value.version !== 1 || !uuid(value.id) || !uuid(value.approvalRevision) || ![value.proposalHash, value.previousGraphHash, value.planHash, value.runManifestHash].every(hex) || !Array.isArray(value.accounts) || !value.accounts.length || value.accounts.length > 16)
+        invalid();
+    identifier(value.parentId);
+    for (const account of value.accounts)
+        shape(account, ['id', 'parentId', 'tokenBudget', 'costBudgetNanos', 'deadline', 'allowedTools', 'allowedPaths']);
+    if (Buffer.byteLength(canonicalJson(value)) > MAX_CHILD_GRANT_BYTES)
+        throw new ExecutionLimitError('limit', 'Child grant exceeds its 32 KiB limit.');
+    return value;
+}
+/** Derived accounts never replace the original immutable budget manifest/hash. */
+export function effectiveExecutionManifest(base, state) {
+    return state.childGrants?.length ? validateExecutionManifest({ ...base, accounts: [...base.accounts, ...state.childGrants.flatMap(record => record.grant.accounts)] }) : base;
+}
+function ownSpend(manifest, state, agentId) {
+    const spent = state.accounts[agentId] ?? { tokens: 0, costNanos: 0 }, children = manifest.accounts.filter(a => a.parentId === agentId);
+    return { tokens: spent.tokens - children.reduce((n, a) => n + (state.accounts[a.id]?.tokens ?? 0), 0), costNanos: spent.costNanos - children.reduce((n, a) => n + (state.accounts[a.id]?.costNanos ?? 0), 0) };
+}
+/** Once children are granted, their remaining capacity cannot be borrowed by their parent. */
+export function assertChildCapacity(manifest, state, agentId, tokens = 0, costNanos = 0) {
+    const account = accountLineage(manifest, agentId)[0], spent = ownSpend(manifest, state, agentId), children = manifest.accounts.filter(a => a.parentId === agentId);
+    if (spent.tokens < 0 || spent.costNanos < 0)
+        invalid();
+    if (spent.tokens + tokens + children.reduce((n, a) => n + a.tokenBudget, 0) > account.tokenBudget || spent.costNanos + costNanos + children.reduce((n, a) => n + a.costBudgetNanos, 0) > account.costBudgetNanos)
+        throw new ExecutionLimitError('budget', 'Child grants and charged parent work exceed remaining capacity.');
+}
+export function applyChildGrant(base, current, state, record) {
+    const grant = validateChildGrant(record.grant), previous = state.childGrants?.at(-1)?.grant.planHash ?? base.planHash;
+    if (state.exceeded || state.childGrants?.some(r => r.grant.id === grant.id || r.grant.proposalHash === grant.proposalHash) || grant.previousGraphHash !== previous || grant.planHash === previous)
+        throw new ExecutionLimitError('conflict', 'Child grant is stale, duplicated or follows a budget violation.');
+    if (!current.accounts.some(a => a.id === grant.parentId) || grant.accounts.some(a => a.parentId === null || current.accounts.some(old => old.id === a.id)))
+        invalid();
+    const next = validateExecutionManifest({ ...current, accounts: [...current.accounts, ...grant.accounts] });
+    for (const account of grant.accounts) {
+        const lineage = accountLineage(next, account.id);
+        if (!lineage.slice(1).some(a => a.id === grant.parentId))
+            invalid();
+        if (record.at >= Math.min(...lineage.map(a => a.deadline)))
+            throw new ExecutionLimitError('deadline', 'Original parent or child deadline expired before allocation.');
+    }
+    for (const account of next.accounts)
+        assertChildCapacity(next, state, account.id);
+    for (const account of grant.accounts)
+        Object.defineProperty(state.accounts, account.id, { value: { tokens: 0, costNanos: 0 }, enumerable: true });
+    (state.childGrants ??= []).push(structuredClone(record));
+    if (state.version < 2)
+        state.version = 2;
+    return next;
+}
+//# sourceMappingURL=child-grants.js.map

package/dist/execution/child-grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-grants.js","sourceRoot":"","sources":["../../src/execution/child-grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,GAAG,EAAC,UAAU,EAAC,OAAO,EAAC,yBAAyB,EAAC,cAAc,EAAC,MAAM,gBAAgB,CAAC;AAC1G,OAAO,EAAC,mBAAmB,EAA2F,MAAM,YAAY,CAAC;AAEzI,MAAM,CAAC,MAAM,qBAAqB,GAAC,KAAK,CAAC;AACzC,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,IAAI,EAAC,cAAc,EAAC,mBAAmB,EAAC,UAAU,EAAC,iBAAiB,EAAC,kBAAkB,EAAC,UAAU,EAAC,UAAU,CAAC,CAAC,CAAC;IACvI,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,IAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,iBAAiB,EAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAC,EAAE;QAAC,OAAO,EAAE,CAAC;IAAA,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3R,KAAI,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ;QAAC,KAAK,CAAC,OAAO,EAAC,CAAC,IAAI,EAAC,UAAU,EAAC,aAAa,EAAC,iBAAiB,EAAC,UAAU,EAAC,cAAc,EAAC,cAAc,CAAC,CAAC,CAAC;IAC9I,IAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,GAAC,qBAAqB;QAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAC,uCAAuC,CAAC,CAAC;IAAA,OAAO,KAA8B,CAAC;AACxL,CAAC;AACD,kFAAkF;AAClF,MAAM,UAAU,0BAA0B,CAAC,IAAsB,EAAC,KAA2B;IAC3F,OAAO,KAAK,CAAC,WAAW,EAAE,MAAM,CAAA,CAAC,CAAA,yBAAyB,CAAC,EAAC,GAAG,IAAI,EAAC,QAAQ,EAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;AACrK,CAAC;AACD,SAAS,QAAQ,CAAC,QAA0B,EAAC,KAA2B,EAAC,OAAc;IACrF,MAAM,KAAK,GAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAE,EAAC,MAAM,EAAC,CAAC,EAAC,SAAS,EAAC,CAAC,EAAC,EAAC,QAAQ,GAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,OAAO,CAAC,CAAC;IACvH,OAAM,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,GAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,GAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,IAAE,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,SAAS,EAAC,KAAK,CAAC,SAAS,GAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,GAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,IAAE,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,CAAC;AACvL,CAAC;AACD,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,QAA0B,EAAC,KAA2B,EAAC,OAAc,EAAC,MAAM,GAAC,CAAC,EAAC,SAAS,GAAC,CAAC;IAC5H,MAAM,OAAO,GAAC,cAAc,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,CAAC,CAAE,EAAC,KAAK,GAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,EAAC,OAAO,CAAC,EAAC,QAAQ,GAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,OAAO,CAAC,CAAC;IACrJ,IAAG,KAAK,CAAC,MAAM,GAAC,CAAC,IAAE,KAAK,CAAC,SAAS,GAAC,CAAC;QAAC,OAAO,EAAE,CAAC;IAC/C,IAAG,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,GAAC,CAAC,CAAC,WAAW,EAAC,CAAC,CAAC,GAAC,OAAO,CAAC,WAAW,IAAE,KAAK,CAAC,SAAS,GAAC,SAAS,GAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,GAAC,CAAC,CAAC,eAAe,EAAC,CAAC,CAAC,GAAC,OAAO,CAAC,eAAe;QACnL,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,iEAAiE,CAAC,CAAC;AAC9G,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,IAAsB,EAAC,OAAyB,EAAC,KAA2B,EAAC,MAAyB;IACpI,MAAM,KAAK,GAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,QAAQ,GAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAE,IAAI,CAAC,QAAQ,CAAC;IAC/G,IAAG,KAAK,CAAC,QAAQ,IAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,CAAC,EAAE,KAAG,KAAK,CAAC,EAAE,IAAE,CAAC,CAAC,KAAK,CAAC,YAAY,KAAG,KAAK,CAAC,YAAY,CAAC,IAAE,KAAK,CAAC,iBAAiB,KAAG,QAAQ,IAAE,KAAK,CAAC,QAAQ,KAAG,QAAQ;QAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,iEAAiE,CAAC,CAAC;IAC3R,IAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,KAAK,CAAC,QAAQ,CAAC,IAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,IAAI,IAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,GAAG,CAAC,EAAE,KAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,EAAE,CAAC;IACpJ,MAAM,IAAI,GAAC,yBAAyB,CAAC,EAAC,GAAG,OAAO,EAAC,QAAQ,EAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;IACpG,KAAI,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAC,CAAC;QAAA,MAAM,OAAO,GAAC,cAAc,CAAC,IAAI,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAA,IAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,KAAK,CAAC,QAAQ,CAAC;YAAC,OAAO,EAAE,CAAC;QAAA,IAAG,MAAM,CAAC,EAAE,IAAE,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,CAAC,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,8DAA8D,CAAC,CAAC;IAAA,CAAC;IACjT,KAAI,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;QAAC,mBAAmB,CAAC,IAAI,EAAC,KAAK,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,KAAI,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ;QAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,CAAC,EAAE,EAAC,EAAC,KAAK,EAAC,EAAC,MAAM,EAAC,CAAC,EAAC,SAAS,EAAC,CAAC,EAAC,EAAC,UAAU,EAAC,IAAI,EAAC,CAAC,CAAC;IACpI,CAAC,KAAK,CAAC,WAAW,KAAG,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAAA,IAAG,KAAK,CAAC,OAAO,GAAC,CAAC;QAAC,KAAK,CAAC,OAAO,GAAC,CAAC,CAAC;IAAA,OAAO,IAAI,CAAC;AACxG,CAAC"}

package/dist/execution/files.d.ts

@@ -0,0 +1,6 @@
+import type { FsDelegate } from '../tools.js';
+import type { ExecutionGuard } from './guard.js';
+import type { ToolCall } from '../types.js';
+/** One delegate per tool call: edits bind to the bytes read during that call. */
+export declare function agentFiles(guard: ExecutionGuard, agentId: string, call: ToolCall, signal?: AbortSignal): FsDelegate;
+//# sourceMappingURL=files.d.ts.map

package/dist/execution/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/execution/files.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG5C,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,KAAK,EAAC,cAAc,EAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,UAAU,CA0D3G"}

package/dist/execution/files.js

@@ -0,0 +1,159 @@
+import * as fs from 'node:fs';
+import { dirname, join, relative } from 'node:path';
+import { randomUUID, createHash } from 'node:crypto';
+import { canonicalPath } from '../approvals/index.js';
+import { throwIfCancelled } from '../cancellation.js';
+import { accountLineage, permits } from './authority.js';
+import { ExecutionLimitError } from './types.js';
+const MAX_FILE_BYTES = 1024 * 1024;
+/** One delegate per tool call: edits bind to the bytes read during that call. */
+export function agentFiles(guard, agentId, call, signal) {
+    const snapshots = new Map();
+    const check = (file) => {
+        throwIfCancelled(signal);
+        const reason = guard.check({ id: 'agent-file', name: call.name, arguments: { path: file } });
+        if (reason)
+            throw new ExecutionLimitError('authority', reason);
+    };
+    const read = (file) => {
+        file = guard.filePath(file);
+        let fd;
+        try {
+            fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return null;
+            throw error;
+        }
+        try {
+            const stat = fs.fstatSync(fd);
+            if (!stat.isFile() || stat.size > MAX_FILE_BYTES)
+                throw new ExecutionLimitError('authority', 'Agent file must be a regular file no larger than 1 MiB.');
+            const buffer = Buffer.alloc(stat.size + 1);
+            let size = 0, n;
+            while (size < buffer.length && (n = fs.readSync(fd, buffer, size, buffer.length - size, null)) > 0)
+                size += n;
+            if (size !== stat.size)
+                throw new ExecutionLimitError('conflict', 'File changed during the read.');
+            return { content: buffer.subarray(0, size).toString('utf8'), hash: createHash('sha256').update(buffer.subarray(0, size)).digest('hex'), mode: stat.mode & 0o777 };
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    };
+    return {
+        readTextFile: async (file) => { guard.assertActive(signal); check(file); const value = read(file); snapshots.set(file, value ? { hash: value.hash, mode: value.mode } : null); if (!value)
+            throw new Error('File not found.'); check(file); return value.content; },
+        writeTextFile: async (file, content) => {
+            guard.assertActive(signal);
+            check(file);
+            if (Buffer.byteLength(content) > MAX_FILE_BYTES)
+                throw new ExecutionLimitError('limit', 'Agent file output exceeds 1 MiB.');
+            const expected = snapshots.get(file);
+            const physical = guard.filePath(file);
+            // Creation tasks intentionally omit read_file from the admitted tool set.
+            // Permit an un-snapshotted write only when the target is still absent;
+            // existing files retain the read-before-write requirement.
+            if (expected === undefined) {
+                let present = false;
+                try {
+                    present = fs.lstatSync(physical).isFile();
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT')
+                        throw error;
+                }
+                if (present)
+                    throw new ExecutionLimitError('conflict', 'Agent writes require a preceding file snapshot.');
+                snapshots.set(file, null);
+            }
+            const parent = dirname(physical), missing = [];
+            let dir = parent;
+            while (!fs.existsSync(dir)) {
+                missing.push(dir);
+                const next = dirname(dir);
+                if (next === dir || missing.length > 64)
+                    throw new ExecutionLimitError('authority', 'Parent directory is outside the bounded write scope.');
+                dir = next;
+            }
+            const account = accountLineage(guard.manifest, agentId)[0];
+            for (const path of missing.reverse()) {
+                if (!permits(account.allowedPaths, relative(guard.filesRoot, path), 'write') || canonicalPath(path) !== path)
+                    throw new ExecutionLimitError('authority', 'Creating a parent directory exceeds the agent write grant.');
+                check(file);
+                fs.mkdirSync(path, { mode: 0o700 });
+            }
+            const before = fs.statSync(parent), temp = join(parent, `.calliope-${randomUUID()}.tmp`);
+            try {
+                const current = read(file);
+                if ((current?.hash ?? null) !== (expected?.hash ?? null))
+                    throw new ExecutionLimitError('conflict', 'File changed after the agent read it; refresh before editing.');
+                const fd = fs.openSync(temp, 'wx', expected?.mode ?? 0o600);
+                try {
+                    fs.writeFileSync(fd, content);
+                    fs.fsyncSync(fd);
+                }
+                finally {
+                    fs.closeSync(fd);
+                }
+                guard.assertActive(signal);
+                check(file);
+                const after = fs.statSync(parent);
+                if (before.ino !== after.ino || before.dev !== after.dev)
+                    throw new ExecutionLimitError('conflict', 'Parent directory changed before file commit.');
+                const latest = read(file);
+                if ((latest?.hash ?? null) !== (expected?.hash ?? null))
+                    throw new ExecutionLimitError('conflict', 'File changed before commit.');
+                fs.renameSync(temp, physical);
+                const directory = fs.openSync(parent, 'r');
+                try {
+                    fs.fsyncSync(directory);
+                }
+                finally {
+                    fs.closeSync(directory);
+                }
+            }
+            finally {
+                try {
+                    const after = fs.statSync(parent);
+                    if (canonicalPath(parent) === parent && after.ino === before.ino && after.dev === before.dev)
+                        fs.unlinkSync(temp);
+                }
+                catch { /* Committed or replaced. */ }
+            }
+        },
+        listFiles: async (file, recursive) => {
+            guard.assertActive(signal);
+            const output = [];
+            let count = 0;
+            const walk = (dir, depth) => {
+                check(dir);
+                if (depth > 5 || count >= 1000)
+                    return;
+                const handle = fs.opendirSync(guard.filePath(dir));
+                try {
+                    let entry;
+                    while (count < 1000 && (entry = handle.readSync())) {
+                        throwIfCancelled(signal);
+                        if (Date.now() >= guard.deadline)
+                            throw new ExecutionLimitError('deadline', 'Agent deadline expired.');
+                        count++;
+                        const path = join(dir, entry.name);
+                        output.push(`${entry.isDirectory() ? '📁 ' : '📄 '}${relative(file, path)}`);
+                        if (recursive && entry.isDirectory() && !entry.isSymbolicLink() && !entry.name.startsWith('.'))
+                            walk(path, depth + 1);
+                    }
+                }
+                finally {
+                    handle.closeSync();
+                }
+            };
+            walk(file, 0);
+            if (count >= 1000)
+                output.push('[Listing limited to 1,000 entries.]');
+            return output.join('\n') || '(empty directory)';
+        },
+    };
+}
+//# sourceMappingURL=files.js.map

package/dist/execution/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/execution/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGjD,MAAM,cAAc,GAAC,IAAI,GAAC,IAAI,CAAC;AAC/B,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,KAAoB,EAAC,OAAc,EAAC,IAAa,EAAC,MAAmB;IAC9F,MAAM,SAAS,GAAC,IAAI,GAAG,EAAyC,CAAC;IACjE,MAAM,KAAK,GAAC,CAAC,IAAW,EAAC,EAAE;QACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,MAAM,GAAC,KAAK,CAAC,KAAK,CAAC,EAAC,EAAE,EAAC,YAAY,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,EAAC,SAAS,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,EAAC,CAAC,CAAC;QACjF,IAAG,MAAM;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,MAAM,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,IAAI,GAAC,CAAC,IAAW,EAA+C,EAAE;QACtE,IAAI,GAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,EAAS,CAAC;QAAA,IAAG,CAAC;YAAA,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,OAAO,IAAI,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;QACxM,IAAG,CAAC;YAAA,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,cAAc;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,yDAAyD,CAAC,CAAC;YAC/K,MAAM,MAAM,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAC,CAAC,CAAC,CAAC;YAAA,IAAI,IAAI,GAAC,CAAC,EAAC,CAAQ,CAAC;YAAA,OAAM,IAAI,GAAC,MAAM,CAAC,MAAM,IAAE,CAAC,CAAC,GAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,CAAC,MAAM,GAAC,IAAI,EAAC,IAAI,CAAC,CAAC,GAAC,CAAC;gBAAC,IAAI,IAAE,CAAC,CAAC;YACvJ,IAAG,IAAI,KAAG,IAAI,CAAC,IAAI;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,+BAA+B,CAAC,CAAC;YAAA,OAAO,EAAC,OAAO,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,GAAC,KAAK,EAAC,CAAC;QACvP,CAAC;gBAAO,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAA,CAAC;IAC7B,CAAC,CAAC;IACF,OAAO;QACL,YAAY,EAAC,KAAK,EAAC,IAAI,EAAA,EAAE,GAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,MAAM,KAAK,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,SAAS,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAA,CAAC,CAAA,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,IAAG,CAAC,KAAK;YAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,OAAO,KAAK,CAAC,OAAO,CAAC,CAAA,CAAC;QACxO,aAAa,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,EAAE;YACjC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,CAAC;YAAA,IAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAC,cAAc;gBAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAC,kCAAkC,CAAC,CAAC;YAC9J,MAAM,QAAQ,GAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,0EAA0E;YAC1E,uEAAuE;YACvE,2DAA2D;YAC3D,IAAG,QAAQ,KAAG,SAAS,EAAC,CAAC;gBACvB,IAAI,OAAO,GAAC,KAAK,CAAC;gBAAA,IAAG,CAAC;oBAAA,OAAO,GAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;gBAAA,CAAC;gBAAA,OAAM,KAAK,EAAC,CAAC;oBAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;wBAAC,MAAM,KAAK,CAAC;gBAAA,CAAC;gBAC7I,IAAG,OAAO;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,iDAAiD,CAAC,CAAC;gBACvG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,OAAO,GAAU,EAAE,CAAC;YAAA,IAAI,GAAG,GAAC,MAAM,CAAC;YAClE,OAAM,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAC,CAAC;gBAAA,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAA,MAAM,IAAI,GAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,IAAI,KAAG,GAAG,IAAE,OAAO,CAAC,MAAM,GAAC,EAAE;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,sDAAsD,CAAC,CAAC;gBAAA,GAAG,GAAC,IAAI,CAAC;YAAA,CAAC;YAClN,MAAM,OAAO,GAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;YACzD,KAAI,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,EAAC,CAAC;gBACnC,IAAG,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC,EAAC,OAAO,CAAC,IAAE,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,4DAA4D,CAAC,CAAC;gBAC7M,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAA,EAAE,CAAC,SAAS,CAAC,IAAI,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,MAAM,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,MAAM,EAAC,aAAa,UAAU,EAAE,MAAM,CAAC,CAAC;YACnF,IAAG,CAAC;gBACF,MAAM,OAAO,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,IAAG,CAAC,OAAO,EAAE,IAAI,IAAE,IAAI,CAAC,KAAG,CAAC,QAAQ,EAAE,IAAI,IAAE,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,+DAA+D,CAAC,CAAC;gBACrL,MAAM,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,QAAQ,EAAE,IAAI,IAAE,KAAK,CAAC,CAAC;gBAAA,IAAG,CAAC;oBAAA,EAAE,CAAC,aAAa,CAAC,EAAE,EAAC,OAAO,CAAC,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAA,CAAC;gBACnI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAAA,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAA,MAAM,KAAK,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAA,IAAG,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG,IAAE,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,8CAA8C,CAAC,CAAC;gBAClN,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,IAAG,CAAC,MAAM,EAAE,IAAI,IAAE,IAAI,CAAC,KAAG,CAAC,QAAQ,EAAE,IAAI,IAAE,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;gBACjJ,EAAE,CAAC,UAAU,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC;gBAAA,MAAM,SAAS,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAA,CAAC;YACrI,CAAC;oBAAO,CAAC;gBAAA,IAAG,CAAC;oBAAA,MAAM,KAAK,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAAA,IAAG,aAAa,CAAC,MAAM,CAAC,KAAG,MAAM,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG;wBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,4BAA4B,CAAA,CAAC;YAAA,CAAC;QAC1L,CAAC;QACD,SAAS,EAAC,KAAK,EAAC,IAAI,EAAC,SAAS,EAAC,EAAE;YAC/B,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAU,EAAE,CAAC;YAAA,IAAI,KAAK,GAAC,CAAC,CAAC;YACrC,MAAM,IAAI,GAAC,CAAC,GAAU,EAAC,KAAY,EAAC,EAAE;gBACpC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,KAAK,GAAC,CAAC,IAAE,KAAK,IAAE,IAAI;oBAAC,OAAO;gBAAA,MAAM,MAAM,GAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3F,IAAG,CAAC;oBAAA,IAAI,KAAoB,CAAC;oBAAA,OAAM,KAAK,GAAC,IAAI,IAAE,CAAC,KAAK,GAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAC,CAAC;wBAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC;wBAAA,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,KAAK,CAAC,QAAQ;4BAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,yBAAyB,CAAC,CAAC;wBAAA,KAAK,EAAE,CAAC;wBAC3M,MAAM,IAAI,GAAC,IAAI,CAAC,GAAG,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAAA,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACxG,IAAG,SAAS,IAAE,KAAK,CAAC,WAAW,EAAE,IAAE,CAAC,KAAK,CAAC,cAAc,EAAE,IAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;4BAAC,IAAI,CAAC,IAAI,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;oBAC7G,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAA,CAAC;YAChC,CAAC,CAAC;YACF,IAAI,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC;YAAA,IAAG,KAAK,IAAE,IAAI;gBAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAAA,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,mBAAmB,CAAC;QAC/H,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/execution/guard.d.ts

@@ -0,0 +1,50 @@
+import type { Tool, ToolCall, Message } from '../types.js';
+import type { RouteCandidate } from '../routing/index.js';
+import type { ProviderAttemptBudget } from '../providers/types.js';
+import { ReservationLedger } from './ledger.js';
+import { type ExecutionManifest } from './types.js';
+import { type BrainToolContext } from '../brain/tools.js';
+import { type RequestAttribution } from './attribution.js';
+export interface AgentExecution {
+    ledger: ReservationLedger;
+    manifestHash: string;
+    agentId: string;
+    maxOutputTokens: number;
+    measuredInputReservation?: boolean;
+    attribution?: RequestAttribution;
+    /** Trusted coordinator ownership/revocation check; may only narrow authority. */
+    assertAuthority?: () => void;
+    /** Supplied by the coordinator; policy and money remain bound to the source project. */
+    workspace?: {
+        filesRoot: string;
+        assertIdentity: () => void;
+    };
+}
+export declare class ExecutionGuard {
+    private readonly cwd;
+    readonly manifest: ExecutionManifest;
+    readonly deadline: number;
+    private readonly expectedHash;
+    private readonly agentId;
+    private readonly ledger;
+    readonly maxOutputTokens: number;
+    private readonly assertAuthority?;
+    readonly filesRoot: string;
+    private readonly workspace?;
+    private readonly attribution?;
+    private readonly measuredInputReservation;
+    constructor(execution: AgentExecution, cwd: string);
+    check: (call: ToolCall, cwd?: string) => string | undefined;
+    filePath(file: string): string;
+    tools(tools: Tool[]): Tool[];
+    brainContext(): BrainToolContext;
+    assertActive(signal?: AbortSignal): void;
+    budget(route: RouteCandidate | undefined, messages: Message[], tools: Tool[], streaming: boolean, signal?: AbortSignal, onEvent?: (event: {
+        requestId: string;
+        stage: string;
+        revision: string;
+        tokens: number;
+        costNanos: number;
+    }) => void): ProviderAttemptBudget;
+}
+//# sourceMappingURL=guard.d.ts.map

package/dist/execution/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/execution/guard.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAGnE,OAAO,EAAE,iBAAiB,EAAoB,MAAM,aAAa,CAAC;AAClE,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAKzE,OAAO,EAA8B,KAAK,gBAAgB,EAAC,MAAM,mBAAmB,CAAC;AAErF,OAAO,EAA4B,KAAK,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,iBAAiB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAC1F,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,WAAW,CAAC,EAAC,kBAAkB,CAAC;IAChC,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B,wFAAwF;IACxF,SAAS,CAAC,EAAE;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAI,IAAI,CAAA;KAAC,CAAC;CACxD;AACD,qBAAa,cAAc;IAYY,OAAO,CAAC,QAAQ,CAAC,GAAG;IAXzD,QAAQ,CAAC,QAAQ,EAAC,iBAAiB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAC,MAAM,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,QAAQ,CAAC,eAAe,EAAC,MAAM,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAU;IAC3C,QAAQ,CAAC,SAAS,EAAC,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAS;IAClD,YAAY,SAAS,EAAC,cAAc,EAAkB,GAAG,EAAC,MAAM,EAW/D;IACD,KAAK,SAAQ,QAAQ,mBAAe,MAAM,GAAC,SAAS,CAMlD;IACF,QAAQ,CAAC,IAAI,EAAC,MAAM,GAAE,MAAM,CAK3B;IACD,KAAK,CAAC,KAAK,EAAC,IAAI,EAAE,GAAE,IAAI,EAAE,CAGzB;IACD,YAAY,IAAG,gBAAgB,CAO9B;IACD,YAAY,CAAC,MAAM,CAAC,EAAC,WAAW,GAAE,IAAI,CAQrC;IACD,MAAM,CAAC,KAAK,EAAC,cAAc,GAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,EAAC,KAAK,EAAC,IAAI,EAAE,EAAC,SAAS,EAAC,OAAO,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,EAAC,CAAC,KAAK,EAAC;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,KAAK,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,KAAG,IAAI,GAAE,qBAAqB,CAmCvO;CACF"}