@calliopelabs/cli 3.0.0 → 3.2.0

package/dist/execution/guard.js

@@ -0,0 +1,158 @@
+import { randomUUID } from 'node:crypto';
+import { dirname, relative, resolve, isAbsolute } from 'node:path';
+import { canonicalPath } from '../approvals/index.js';
+import { throwIfCancelled } from '../cancellation.js';
+import { executionToolDenial, executionPathDenial, accountLineage, checkExecutionIdentity, integer, assertExecutionStoreOutsideProject } from './authority.js';
+import { requestCostNanos } from './ledger.js';
+import { ExecutionLimitError } from './types.js';
+import { getBudgetCaps, projectBudgetPath } from '../budget.js';
+import { ProjectSpendLedger } from './project-spend.js';
+import { providerQuote, costCapNanos } from './quote.js';
+import { effectiveExecutionManifest } from './child-grants.js';
+import { BRAIN_TOOLS, BRAIN_TOOL_NAMES } from '../brain/tools.js';
+import { readBillingEvidence } from './billing.js';
+import { validateRequestAttribution } from './attribution.js';
+export class ExecutionGuard {
+    cwd;
+    manifest;
+    deadline;
+    expectedHash;
+    agentId;
+    ledger;
+    maxOutputTokens;
+    assertAuthority;
+    filesRoot;
+    workspace;
+    attribution;
+    measuredInputReservation;
+    constructor(execution, cwd) {
+        this.cwd = cwd;
+        this.attribution = execution.attribution === undefined ? undefined : validateRequestAttribution(execution.attribution);
+        this.measuredInputReservation = execution.measuredInputReservation === true;
+        this.assertAuthority = execution.assertAuthority;
+        this.assertAuthority?.();
+        this.workspace = execution.workspace;
+        this.workspace?.assertIdentity();
+        const saved = execution.ledger.read(cwd);
+        assertExecutionStoreOutsideProject(saved.manifest.project.root, dirname(execution.ledger.root));
+        if (saved.projection.manifestHash !== execution.manifestHash)
+            throw new ExecutionLimitError('conflict', 'Execution contract does not match the budget ledger.');
+        const effective = effectiveExecutionManifest(saved.manifest, saved.projection), agent = accountLineage(effective, execution.agentId)[0];
+        integer(execution.maxOutputTokens, 1, 100000000);
+        this.manifest = effective;
+        this.expectedHash = execution.manifestHash;
+        this.agentId = agent.id;
+        this.ledger = execution.ledger;
+        this.maxOutputTokens = execution.maxOutputTokens;
+        this.deadline = Math.min(saved.manifest.deadline, agent.deadline);
+        this.filesRoot = this.workspace?.filesRoot ?? this.manifest.project.root;
+        if (this.workspace)
+            assertExecutionStoreOutsideProject(this.manifest.project.root, this.filesRoot);
+    }
+    check = (call, cwd = this.cwd) => {
+        this.assertAuthority?.();
+        this.workspace?.assertIdentity();
+        if (this.workspace && call.name === 'shell')
+            return 'Isolated workers cannot issue model-selected shell commands; use the declared coordinator verifier.';
+        const denial = executionToolDenial(this.manifest, this.agentId, call, cwd);
+        if (denial || !this.workspace)
+            return denial;
+        if (['read_file', 'write_file', 'edit_file', 'list_files'].includes(call.name))
+            try {
+                this.filePath(resolve(cwd, String(call.arguments.path ?? '.')));
+            }
+            catch {
+                return 'Isolated file path is outside its workspace or aliases Git metadata.';
+            }
+        return undefined;
+    };
+    filePath(file) {
+        if (!this.workspace)
+            return file;
+        this.workspace.assertIdentity();
+        const rel = relative(this.manifest.project.root, file);
+        if (rel === '..' || rel.startsWith('../') || isAbsolute(rel) || rel.split('/').some(p => p.toLowerCase() === '.git'))
+            throw new ExecutionLimitError('authority', 'Isolated file path exceeds its project scope.');
+        const path = resolve(this.filesRoot, rel);
+        if (canonicalPath(path) !== path)
+            throw new ExecutionLimitError('authority', 'Isolated file path became an alias.');
+        return path;
+    }
+    tools(tools) {
+        const allowed = accountLineage(this.manifest, this.agentId)[0].allowedTools;
+        return [...tools.filter(t => !BRAIN_TOOL_NAMES.includes(t.name)), ...BRAIN_TOOLS].filter(tool => allowed.includes(tool.name) && ['think', 'ask_question', 'create_plan', 'read_file', 'write_file', 'edit_file', 'list_files', ...BRAIN_TOOL_NAMES].includes(tool.name));
+    }
+    brainContext() {
+        return { assertActive: signal => this.assertActive(signal), sourceDenial: source => {
+                const locator = source.locator;
+                if (locator.path && !locator.projectKey)
+                    return 'Knowledge file locator lacks a project binding.';
+                if (locator.projectKey && locator.projectKey !== this.manifest.project.key)
+                    return 'Knowledge source belongs to another project.';
+                return executionPathDenial(this.manifest, accountLineage(this.manifest, this.agentId)[0], locator.projectKey === this.manifest.project.key ? locator.path ?? '.' : '.', 'read');
+            } };
+    }
+    assertActive(signal) {
+        throwIfCancelled(signal);
+        this.assertAuthority?.();
+        this.workspace?.assertIdentity();
+        checkExecutionIdentity(this.manifest, this.cwd);
+        if (Date.now() >= this.deadline)
+            throw new ExecutionLimitError('deadline', 'Agent deadline expired.');
+        const saved = this.ledger.read(this.cwd);
+        if (saved.projection.manifestHash !== this.expectedHash)
+            throw new ExecutionLimitError('conflict', 'Execution contract changed.');
+        if (saved.projection.exceeded)
+            throw new ExecutionLimitError('budget', 'Provider usage exceeded its reservation; further execution is stopped.');
+        const project = new ProjectSpendLedger(projectBudgetPath(this.cwd)).read(), caps = getBudgetCaps();
+        if (project.blocked || caps.maxCostPerProject !== undefined && project.spentUsd > caps.maxCostPerProject || caps.maxTokensPerRun !== undefined && saved.projection.spent.tokens > caps.maxTokensPerRun || caps.maxCostPerRun !== undefined && saved.projection.spent.costNanos > costCapNanos(caps.maxCostPerRun))
+            throw new ExecutionLimitError('budget', 'Current project or run policy no longer permits execution.');
+    }
+    budget(route, messages, tools, streaming, signal, onEvent) {
+        this.assertActive(signal);
+        route = structuredClone(route);
+        const billing = readBillingEvidence(route, this.manifest.project.root);
+        const base = providerQuote(route, messages, tools, streaming, this.maxOutputTokens, billing, undefined, this.measuredInputReservation);
+        const projectLedger = new ProjectSpendLedger(projectBudgetPath(this.cwd));
+        return {
+            ...(base.provider === 'openrouter' ? { priceCeiling: Object.freeze({ input: base.inputPrice, output: base.outputPrice }) } : {}),
+            ...(billing?.profile.admission === 'provider-count-v1' ? { inputCounting: 'anthropic-count-tokens' } : {}),
+            reserve: async (actual) => {
+                this.assertActive(signal);
+                if (actual.provider !== base.provider || actual.model !== base.model || actual.target !== base.target || actual.maxOutputTokens !== base.outputTokens)
+                    throw new ExecutionLimitError('authority', 'Provider attempt does not match its discovered budget quote.');
+                if (base.provider === 'openrouter' && (actual.priceCeiling?.input !== base.inputPrice || actual.priceCeiling?.output !== base.outputPrice))
+                    throw new ExecutionLimitError('authority', 'Provider price ceiling changed after budget admission.');
+                if (billing && ((billing.profile.admission === 'provider-count-v1' && !actual.inputCount) || readBillingEvidence(route, this.manifest.project.root)?.hash !== billing.hash))
+                    throw new ExecutionLimitError('authority', 'Billing admission was revoked or omitted its count.');
+                const quote = providerQuote(route, messages, tools, streaming, this.maxOutputTokens, billing, actual.inputCount, this.measuredInputReservation);
+                const id = randomUUID(), caps = getBudgetCaps();
+                await projectLedger.reserve(id, this.manifest.runId, quote.costNanos, caps.maxCostPerProject === undefined ? Number.MAX_SAFE_INTEGER : costCapNanos(caps.maxCostPerProject), signal);
+                const limits = { ...(caps.maxTokensPerRun === undefined ? {} : { tokens: caps.maxTokensPerRun }), ...(caps.maxCostPerRun === undefined ? {} : { costNanos: costCapNanos(caps.maxCostPerRun) }) };
+                let state;
+                try {
+                    state = await this.ledger.reserve(this.cwd, this.expectedHash, { id, agentId: this.agentId, ...quote, limits, ...(this.attribution ? { attribution: this.attribution } : {}) }, signal);
+                }
+                catch (error) {
+                    await projectLedger.settle(id, 0);
+                    throw error;
+                }
+                onEvent?.({ requestId: id, stage: 'reserved', revision: state.revision, ...state.spent });
+                this.assertActive(signal);
+                if (billing && readBillingEvidence(route, this.manifest.project.root)?.hash !== billing.hash)
+                    throw new ExecutionLimitError('authority', 'Billing admission was revoked while committing its reservation.');
+                return id;
+            },
+            settle: async (id, outcome, usage) => {
+                const valid = !usage || [usage.inputTokens, usage.outputTokens].every(n => Number.isSafeInteger(n) && n >= 0 && n <= 100000000);
+                const state = await this.ledger.settle(this.cwd, this.expectedHash, { requestId: id, outcome: valid ? outcome : 'invalid-usage', ...(usage && valid ? { usage } : {}) });
+                const quote = state.requests[id].reservation;
+                await projectLedger.settle(id, outcome === 'success' && valid && usage ? requestCostNanos(usage.inputTokens, usage.outputTokens, quote.inputPrice, quote.outputPrice) : null, state.exceeded);
+                onEvent?.({ requestId: id, stage: state.requests[id].state, revision: state.revision, ...state.spent });
+                if (state.exceeded)
+                    throw new ExecutionLimitError('budget', 'Provider reported usage beyond the reserved bound; execution stopped.');
+            },
+        };
+    }
+}
+//# sourceMappingURL=guard.js.map

package/dist/execution/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/execution/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAC,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,UAAU,EAAC,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAIpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,sBAAsB,EAAE,OAAO,EAAC,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AAC9J,OAAO,EAAqB,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAA0B,MAAM,YAAY,CAAC;AACzE,OAAO,EAAC,aAAa,EAAC,iBAAiB,EAAC,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,aAAa,EAAC,YAAY,EAAC,MAAM,YAAY,CAAC;AACtD,OAAO,EAAC,0BAA0B,EAAC,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAC,WAAW,EAAC,gBAAgB,EAAuB,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAC,mBAAmB,EAAC,MAAM,cAAc,CAAC;AACjD,OAAO,EAAC,0BAA0B,EAAyB,MAAM,kBAAkB,CAAC;AAWpF,MAAM,OAAO,cAAc;IAY6B,GAAG;IAXhD,QAAQ,CAAmB;IAC3B,QAAQ,CAAQ;IACR,YAAY,CAAQ;IACpB,OAAO,CAAQ;IACf,MAAM,CAAmB;IACjC,eAAe,CAAQ;IACf,eAAe,CAAW;IAClC,SAAS,CAAQ;IACT,SAAS,CAA8B;IACvC,WAAW,CAAqB;IAChC,wBAAwB,CAAS;IAClD,YAAY,SAAwB,EAAkB,GAAU;mBAAV,GAAG;QACvD,IAAI,CAAC,WAAW,GAAC,SAAS,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,0BAA0B,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,wBAAwB,GAAC,SAAS,CAAC,wBAAwB,KAAG,IAAI,CAAC;QACxL,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,GAAC,SAAS,CAAC,SAAS,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5I,MAAM,KAAK,GAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,kCAAkC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/F,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,SAAS,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,sDAAsD,CAAC,CAAC;QAC3J,MAAM,SAAS,GAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,EAAC,KAAK,GAAC,cAAc,CAAC,SAAS,EAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;QAClI,OAAO,CAAC,SAAS,CAAC,eAAe,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;QAAA,IAAI,CAAC,QAAQ,GAAC,SAAS,CAAC;QAAA,IAAI,CAAC,YAAY,GAAC,SAAS,CAAC,YAAY,CAAC;QAAA,IAAI,CAAC,OAAO,GAAC,KAAK,CAAC,EAAE,CAAC;QAAA,IAAI,CAAC,MAAM,GAAC,SAAS,CAAC,MAAM,CAAC;QAAA,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAClN,IAAI,CAAC,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAC,IAAI,CAAC,SAAS,EAAE,SAAS,IAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACrE,IAAG,IAAI,CAAC,SAAS;YAAC,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,GAAE,CAAC,IAAa,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAmB,EAAE;QACrD,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC1D,IAAG,IAAI,CAAC,SAAS,IAAE,IAAI,CAAC,IAAI,KAAG,OAAO;YAAC,OAAO,qGAAqG,CAAC;QACpJ,MAAM,MAAM,GAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,EAAC,IAAI,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,MAAM,IAAE,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,MAAM,CAAC;QAC/G,IAAG,CAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAC,IAAG,CAAC;gBAAA,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,OAAO,sEAAsE,CAAC;YAAA,CAAC;QAClO,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,QAAQ,CAAC,IAAW;QAClB,IAAG,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,IAAI,CAAC;QAAA,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QACpD,IAAG,GAAG,KAAG,IAAI,IAAE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAE,UAAU,CAAC,GAAG,CAAC,IAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,WAAW,EAAE,KAAG,MAAM,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,+CAA+C,CAAC,CAAC;QACnM,MAAM,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qCAAqC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IACpK,CAAC;IACD,KAAK,CAAC,KAAY;QAChB,MAAM,OAAO,GAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC;QAC1E,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAuC,CAAC,CAAC,EAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAC,cAAc,EAAC,aAAa,EAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,EAAC,GAAG,gBAAgB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAClS,CAAC;IACD,YAAY;QACV,OAAO,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE,CAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE;gBAC1E,MAAM,OAAO,GAAC,MAAM,CAAC,OAAO,CAAC;gBAC7B,IAAG,OAAO,CAAC,IAAI,IAAE,CAAC,OAAO,CAAC,UAAU;oBAAC,OAAO,iDAAiD,CAAC;gBAC9F,IAAG,OAAO,CAAC,UAAU,IAAE,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG;oBAAC,OAAO,8CAA8C,CAAC;gBAC5H,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,EAAC,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAA,CAAC,CAAA,OAAO,CAAC,IAAI,IAAE,GAAG,CAAA,CAAC,CAAA,GAAG,EAAC,MAAM,CAAC,CAAC;YACvK,CAAC,EAAC,CAAC;IACL,CAAC;IACD,YAAY,CAAC,MAAmB;QAC9B,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAAA,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClI,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,IAAI,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,yBAAyB,CAAC,CAAC;QACjG,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAA,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;QACpK,IAAG,KAAK,CAAC,UAAU,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,wEAAwE,CAAC,CAAC;QAC9I,MAAM,OAAO,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;QAC9F,IAAG,OAAO,CAAC,OAAO,IAAE,IAAI,CAAC,iBAAiB,KAAG,SAAS,IAAE,OAAO,CAAC,QAAQ,GAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,eAAe,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,aAAa,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,GAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC;YAC1R,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,4DAA4D,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,CAAC,KAA8B,EAAC,QAAkB,EAAC,KAAY,EAAC,SAAiB,EAAC,MAAmB,EAAC,OAAqG;QAC/M,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,OAAO,GAAC,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjG,MAAM,IAAI,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,SAAS,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC9H,MAAM,aAAa,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAG,YAAY,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,MAAM,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAClH,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,KAAG,mBAAmB,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,wBAAiC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAC1G,OAAO,EAAC,KAAK,EAAC,MAAM,EAAA,EAAE;gBACpB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAE,MAAM,CAAC,KAAK,KAAG,IAAI,CAAC,KAAK,IAAE,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,MAAM,CAAC,eAAe,KAAG,IAAI,CAAC,YAAY;oBACpI,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,8DAA8D,CAAC,CAAC;gBAC5G,IAAG,IAAI,CAAC,QAAQ,KAAG,YAAY,IAAE,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,KAAG,IAAI,CAAC,UAAU,IAAE,MAAM,CAAC,YAAY,EAAE,MAAM,KAAG,IAAI,CAAC,WAAW,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,wDAAwD,CAAC,CAAC;gBACpO,IAAG,OAAO,IAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,KAAG,mBAAmB,IAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qDAAqD,CAAC,CAAC;gBACjQ,MAAM,KAAK,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,MAAM,CAAC,UAAU,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACvI,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;gBAC3C,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,EAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC,iBAAiB,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,gBAAgB,CAAA,CAAC,CAAA,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAC,MAAM,CAAC,CAAC;gBAC3K,MAAM,MAAM,GAAC,EAAC,GAAG,CAAC,IAAI,CAAC,eAAe,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,IAAI,CAAC,eAAe,EAAC,CAAC,EAAC,GAAG,CAAC,IAAI,CAAC,aAAa,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,EAAC,CAAC,EAAC,CAAC;gBAC1K,IAAI,KAAK,CAAC;gBACV,IAAG,CAAC;oBAAA,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,EAAC,GAAG,KAAK,EAAC,MAAM,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,EAAC,MAAM,CAAC,CAAC;gBAAA,CAAC;gBAC1K,OAAM,KAAK,EAAC,CAAC;oBAAA,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC;oBAAA,MAAM,KAAK,CAAC;gBAAA,CAAC;gBAC3D,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,UAAU,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBAClF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,OAAO,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,iEAAiE,CAAC,CAAC;gBACpM,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,EAAC,KAAK,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,EAAE;gBAC9B,MAAM,KAAK,GAAC,CAAC,KAAK,IAAE,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,SAAS,CAAC,CAAC;gBACjH,MAAM,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,SAAS,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,eAAe,EAAC,GAAG,CAAC,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,CAAA,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;gBACpJ,MAAM,KAAK,GAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,WAAW,CAAC;gBAC5C,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,OAAO,KAAG,SAAS,IAAE,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,UAAU,EAAC,KAAK,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC/K,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBACjG,IAAG,KAAK,CAAC,QAAQ;oBAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,uEAAuE,CAAC,CAAC;YACpI,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/execution/index.d.ts

@@ -0,0 +1,12 @@
+export * from './types.js';
+export * from './authority.js';
+export * from './ledger.js';
+export * from './guard.js';
+export * from './files.js';
+export * from './project-spend.js';
+export * from './quote.js';
+export * from './billing.js';
+export * from './child-grants.js';
+export * from './writer-recovery.js';
+export * from './attribution.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/execution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}

package/dist/execution/index.js

@@ -0,0 +1,12 @@
+export * from './types.js';
+export * from './authority.js';
+export * from './ledger.js';
+export * from './guard.js';
+export * from './files.js';
+export * from './project-spend.js';
+export * from './quote.js';
+export * from './billing.js';
+export * from './child-grants.js';
+export * from './writer-recovery.js';
+export * from './attribution.js';
+//# sourceMappingURL=index.js.map

package/dist/execution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}

package/dist/execution/ledger.d.ts

@@ -0,0 +1,23 @@
+import { type ExecutionManifest, type RequestReservation, type RequestSettlement, type ReservationEvent, type ReservationProjection, type ChildGrant } from './types.js';
+export declare const MAX_RESERVATION_EVENTS = 10000, MAX_RESERVATION_BYTES: number;
+export declare function requestCostNanos(input: number, output: number, inputPrice: number, outputPrice: number): number;
+/** Pure replay includes unresolved reservations in every ancestor's spend. */
+export declare function replayReservations(input: ExecutionManifest, events: ReservationEvent[]): ReservationProjection;
+export declare class ReservationLedger {
+    private readonly now;
+    readonly root: string;
+    constructor(root: string, now?: () => number);
+    /** Explicit creation only. A missing journal inside an existing directory never resets spend. */
+    create(input: ExecutionManifest, signal?: AbortSignal): ReservationProjection;
+    read(cwd: string): {
+        manifest: ExecutionManifest;
+        events: ReservationEvent[];
+        projection: ReservationProjection;
+    };
+    reserve(cwd: string, expectedManifest: string, value: RequestReservation, signal?: AbortSignal): Promise<ReservationProjection>;
+    grantChildren(cwd: string, expectedManifest: string, grant: ChildGrant, signal?: AbortSignal, beforeCommit?: () => void): Promise<ReservationProjection>;
+    /** Settlement is allowed after cancellation/deadline so known spend can still be recorded. */
+    settle(cwd: string, expectedManifest: string, value: RequestSettlement): Promise<ReservationProjection>;
+    private append;
+}
+//# sourceMappingURL=ledger.d.ts.map

package/dist/execution/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/execution/ledger.ts"],"names":[],"mappings":"AAOA,OAAO,EAAuB,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7L,eAAO,MAAM,sBAAsB,QAAQ,EAAE,qBAAqB,QAAmB,CAAC;AAEtF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAK/G;AA8BD,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,CA0C9G;AA+BD,qBAAa,iBAAiB;IAEJ,OAAO,CAAC,QAAQ,CAAC,GAAG;IAD5C,QAAQ,CAAC,IAAI,EAAC,MAAM,CAAC;IACrB,YAAY,IAAI,EAAC,MAAM,EAAkB,GAAG,eAAS,EAA2B;IAChF,iGAAiG;IACjG,MAAM,CAAC,KAAK,EAAC,iBAAiB,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,qBAAqB,CAUxE;IACD,IAAI,CAAC,GAAG,EAAC,MAAM,GAAE;QAAC,QAAQ,EAAC,iBAAiB,CAAC;QAAA,MAAM,EAAC,gBAAgB,EAAE,CAAC;QAAA,UAAU,EAAC,qBAAqB,CAAA;KAAC,CAGvG;IACK,OAAO,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,kBAAkB,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAE5H;IACK,aAAa,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,UAAU,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,YAAY,CAAC,EAAC,MAAI,IAAI,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAEjJ;IACD,8FAA8F;IACxF,MAAM,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,iBAAiB,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAEtG;YACa,MAAM;CAyBrB"}

package/dist/execution/ledger.js

@@ -0,0 +1,379 @@
+/** Reservations are charged before dispatch; unknown outcomes never restore capacity. */
+import * as fs from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { canonicalJson, canonicalPath, digest } from '../approvals/index.js';
+import { cancellableDelay, throwIfCancelled } from '../cancellation.js';
+import { accountLineage, checkExecutionIdentity, hex, identifier, integer, invalid, manifestHash, shape, uuid, validateExecutionManifest } from './authority.js';
+import { ExecutionLimitError } from './types.js';
+import { validateChildGrant, applyChildGrant, assertChildCapacity, effectiveExecutionManifest } from './child-grants.js';
+import { validateQuoteEvidence, fullContextTerms } from './billing.js';
+import { recoverDeadWriterLock } from './writer-recovery.js';
+import { validateRequestAttribution } from './attribution.js';
+export const MAX_RESERVATION_EVENTS = 10000, MAX_RESERVATION_BYTES = 16 * 1024 * 1024;
+const unavailable = () => new ExecutionLimitError('unavailable', 'Execution budget history is unavailable or damaged; preserve it and restore a verified backup. No request was authorized.');
+export function requestCostNanos(input, output, inputPrice, outputPrice) {
+    integer(input, 0, 100000000);
+    integer(output, 0, 100000000);
+    for (const price of [inputPrice, outputPrice])
+        if (!Number.isFinite(price) || price < 0 || price > 1000000)
+            invalid();
+    // Round each price up to a nano-dollar per token; never round a reservation down.
+    const nanos = input * Math.ceil(inputPrice * 1000) + output * Math.ceil(outputPrice * 1000);
+    integer(nanos);
+    return nanos;
+}
+function reservation(value) {
+    shape(value, ['id', 'agentId', 'provider', 'model', 'target', 'inputTokens', 'outputTokens', 'costNanos', 'inputPrice', 'outputPrice'], ['limits', 'quoteEvidence', 'attribution']);
+    if (!uuid(value.id) || !hex(value.target))
+        invalid();
+    identifier(value.agentId);
+    if (typeof value.provider !== 'string' || !/^[a-z][a-z0-9-]{0,63}$/.test(value.provider) || typeof value.model !== 'string' || !value.model || value.model.length > 256 || /[\x00-\x1f\x7f]/.test(value.model))
+        invalid();
+    integer(value.inputTokens, 1, 100000000);
+    integer(value.outputTokens, 1, 100000000);
+    integer(value.costNanos);
+    if (value.costNanos !== requestCostNanos(value.inputTokens, value.outputTokens, value.inputPrice, value.outputPrice))
+        invalid();
+    if (value.quoteEvidence !== undefined) {
+        const proof = validateQuoteEvidence(value.quoteEvidence), p = proof.profile;
+        if (value.provider !== p.provider || value.model !== p.model || value.target !== p.target || Number(value.inputPrice) < p.prices.input || Number(value.outputPrice) < p.prices.output)
+            invalid();
+        if (proof.version === 1) {
+            if (value.inputTokens < proof.count.inputTokens || value.inputTokens > proof.count.inputTokens * 2 + 1024)
+                invalid();
+        }
+        else {
+            const terms = fullContextTerms(proof);
+            if ((proof.measuredInput !== true && value.inputTokens !== terms.inputTokens) || value.inputTokens < 1 || value.inputTokens > terms.inputTokens || value.outputTokens > terms.maxOutputTokens || value.inputPrice !== terms.inputPrice || value.outputPrice !== terms.outputPrice)
+                invalid();
+        }
+    }
+    if (value.limits !== undefined) {
+        shape(value.limits, [], ['tokens', 'costNanos']);
+        for (const cap of Object.values(value.limits))
+            integer(cap);
+    }
+    if (value.attribution !== undefined)
+        validateRequestAttribution(value.attribution);
+}
+function settlement(value) {
+    shape(value, ['requestId', 'outcome'], ['usage']);
+    if (!uuid(value.requestId) || !['success', 'error', 'cancelled', 'invalid-usage'].includes(String(value.outcome)))
+        invalid();
+    if (value.usage !== undefined) {
+        shape(value.usage, ['inputTokens', 'outputTokens']);
+        integer(value.usage.inputTokens, 0, 100000000);
+        integer(value.usage.outputTokens, 0, 100000000);
+    }
+}
+function validateEvent(value) {
+    shape(value, ['version', 'id', 'at', 'previous', 'change', 'hash']);
+    if (![1, 2, 3, 4].includes(value.version) || !uuid(value.id) || !hex(value.previous) || !hex(value.hash))
+        invalid();
+    integer(value.at, 1, 8640000000000000);
+    shape(value.change, ['type'], ['reservation', 'settlement', 'grant']);
+    if (value.change.type === 'reserve') {
+        shape(value.change, ['type', 'reservation']);
+        reservation(value.change.reservation);
+    }
+    else if (value.change.type === 'settle') {
+        shape(value.change, ['type', 'settlement']);
+        settlement(value.change.settlement);
+    }
+    else if (value.change.type === 'child_grant') {
+        shape(value.change, ['type', 'grant']);
+        validateChildGrant(value.change.grant);
+    }
+    else
+        invalid();
+    const change = value.change;
+    if (value.version !== reservationVersion(change))
+        invalid();
+    const { hash, ...body } = value;
+    if (hash !== digest(canonicalJson(body)))
+        throw unavailable();
+}
+/** Pure replay includes unresolved reservations in every ancestor's spend. */
+export function replayReservations(input, events) {
+    const base = validateExecutionManifest(input), initial = manifestHash(base);
+    let manifest = base;
+    if (!Array.isArray(events) || events.length > MAX_RESERVATION_EVENTS)
+        throw unavailable();
+    const state = { version: 1, runId: manifest.runId, manifestHash: initial, revision: initial, spent: { tokens: 0, costNanos: 0 }, accounts: {}, requests: {}, exceeded: false };
+    for (const account of manifest.accounts)
+        Object.defineProperty(state.accounts, account.id, { value: { tokens: 0, costNanos: 0 }, enumerable: true });
+    const ids = new Set();
+    let at = manifest.createdAt;
+    const apply = (agentId, tokens, costNanos) => {
+        state.spent.tokens += tokens;
+        state.spent.costNanos += costNanos;
+        for (const account of accountLineage(manifest, agentId)) {
+            state.accounts[account.id].tokens += tokens;
+            state.accounts[account.id].costNanos += costNanos;
+        }
+        integer(state.spent.tokens);
+        integer(state.spent.costNanos);
+    };
+    for (const event of events) {
+        validateEvent(event);
+        if (ids.has(event.id) || event.previous !== state.revision || event.at < at)
+            throw unavailable();
+        ids.add(event.id);
+        at = event.at;
+        if (event.change.type === 'child_grant') {
+            manifest = applyChildGrant(base, manifest, state, { grant: event.change.grant, eventId: event.id, eventHash: event.hash, at: event.at });
+        }
+        else if (event.change.type === 'reserve') {
+            const next = event.change.reservation, lineage = accountLineage(manifest, next.agentId), tokens = next.inputTokens + next.outputTokens;
+            if (state.exceeded || Object.hasOwn(state.requests, next.id) || event.at >= manifest.deadline || lineage.some(a => event.at >= a.deadline))
+                throw new ExecutionLimitError('deadline', 'Execution cannot admit this request after a deadline or budget violation.');
+            if (state.spent.tokens + tokens > manifest.tokenBudget || state.spent.costNanos + next.costNanos > manifest.costBudgetNanos ||
+                next.limits?.tokens !== undefined && state.spent.tokens + tokens > next.limits.tokens || next.limits?.costNanos !== undefined && state.spent.costNanos + next.costNanos > next.limits.costNanos ||
+                lineage.some(a => state.accounts[a.id].tokens + tokens > a.tokenBudget || state.accounts[a.id].costNanos + next.costNanos > a.costBudgetNanos))
+                throw new ExecutionLimitError('budget', 'Request reservation exceeds the available agent, ancestor or run budget.');
+            if (state.childGrants?.length)
+                assertChildCapacity(manifest, state, next.agentId, tokens, next.costNanos);
+            apply(next.agentId, tokens, next.costNanos);
+            state.requests[next.id] = { reservation: structuredClone(next), state: 'pending', ...(next.attribution ? { accounted: { tokens, costNanos: next.costNanos } } : {}) };
+            if (next.attribution)
+                state.version = 3;
+        }
+        else {
+            const result = event.change.settlement, entry = state.requests[result.requestId];
+            if (!entry || entry.state !== 'pending')
+                throw new ExecutionLimitError('conflict', 'Request was already settled or was never reserved.');
+            if (result.outcome === 'invalid-usage') {
+                entry.state = 'exceeded';
+                state.exceeded = true;
+            }
+            else if (result.outcome !== 'success' || !result.usage)
+                entry.state = 'unknown';
+            else {
+                const r = entry.reservation, usage = result.usage, cost = requestCostNanos(usage.inputTokens, usage.outputTokens, r.inputPrice, r.outputPrice);
+                if (usage.inputTokens > r.inputTokens || usage.outputTokens > r.outputTokens || cost > r.costNanos) {
+                    entry.state = 'exceeded';
+                    state.exceeded = true;
+                    if (entry.accounted)
+                        entry.accounted = { tokens: Math.max(usage.inputTokens + usage.outputTokens, r.inputTokens + r.outputTokens), costNanos: Math.max(cost, r.costNanos) };
+                    apply(r.agentId, Math.max(usage.inputTokens + usage.outputTokens, r.inputTokens + r.outputTokens) - (r.inputTokens + r.outputTokens), Math.max(cost, r.costNanos) - r.costNanos);
+                }
+                else {
+                    entry.state = 'settled';
+                    if (entry.accounted)
+                        entry.accounted = { tokens: usage.inputTokens + usage.outputTokens, costNanos: cost };
+                    apply(r.agentId, usage.inputTokens + usage.outputTokens - r.inputTokens - r.outputTokens, cost - r.costNanos);
+                }
+            }
+        }
+        state.revision = event.hash;
+    }
+    return state;
+}
+function reservationVersion(change) {
+    return change.type === 'reserve' && change.reservation.quoteEvidence?.version === 2 ? 4 : change.type === 'reserve' && change.reservation.attribution ? 3 : change.type === 'child_grant' ? 2 : 1;
+}
+function decode(raw) {
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        throw unavailable();
+    }
+    shape(value, ['version', 'manifest', 'events', 'hash']);
+    if (value.version !== 1 || !Array.isArray(value.events) || value.events.length > MAX_RESERVATION_EVENTS || !hex(value.hash))
+        throw unavailable();
+    const manifest = validateExecutionManifest(value.manifest), events = value.events;
+    for (const event of events)
+        validateEvent(event);
+    if (digest(canonicalJson({ manifest: manifestHash(manifest), events: events.map(event => event.hash) })) !== value.hash)
+        throw unavailable();
+    return { version: 1, manifest, events, hash: value.hash };
+}
+function encode(manifest, events) {
+    const raw = JSON.stringify({ version: 1, manifest, events, hash: digest(canonicalJson({ manifest: manifestHash(manifest), events: events.map(event => event.hash) })) });
+    if (Buffer.byteLength(raw) > MAX_RESERVATION_BYTES)
+        throw new ExecutionLimitError('limit', 'Budget history reached its byte limit; existing reservations remain charged.');
+    return raw;
+}
+function directory(path) {
+    const stat = fs.lstatSync(path);
+    if (!stat.isDirectory() || stat.isSymbolicLink() || stat.mode & 0o077 || fs.realpathSync(path) !== path)
+        throw unavailable();
+    return stat;
+}
+function sameDirectory(path, before) { const current = directory(path); if (current.dev !== before.dev || current.ino !== before.ino)
+    throw new ExecutionLimitError('conflict', 'Budget directory changed during the operation.'); }
+function read(file) {
+    let fd;
+    try {
+        fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+    }
+    catch {
+        throw unavailable();
+    }
+    try {
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.mode & 0o077 || stat.size > MAX_RESERVATION_BYTES)
+            throw unavailable();
+        const buffer = Buffer.alloc(stat.size + 1);
+        let size = 0, n;
+        while (size < buffer.length && (n = fs.readSync(fd, buffer, size, buffer.length - size, null)) > 0)
+            size += n;
+        if (size !== stat.size)
+            throw unavailable();
+        return buffer.subarray(0, size).toString('utf8');
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+function writeNew(file, raw) { const fd = fs.openSync(file, 'wx', 0o600); try {
+    fs.writeFileSync(fd, raw);
+    fs.fsyncSync(fd);
+}
+finally {
+    fs.closeSync(fd);
+} }
+function syncDir(path) { const fd = fs.openSync(path, 'r'); try {
+    fs.fsyncSync(fd);
+}
+finally {
+    fs.closeSync(fd);
+} }
+export class ReservationLedger {
+    now;
+    root;
+    constructor(root, now = Date.now) {
+        this.now = now;
+        this.root = resolve(root);
+    }
+    /** Explicit creation only. A missing journal inside an existing directory never resets spend. */
+    create(input, signal) {
+        throwIfCancelled(signal);
+        const manifest = validateExecutionManifest(input);
+        checkExecutionIdentity(manifest, manifest.project.root);
+        if (this.now() >= manifest.deadline)
+            throw new ExecutionLimitError('deadline', 'Run deadline expired.');
+        if (canonicalPath(this.root) !== this.root)
+            throw unavailable();
+        // The caller owns creation of the private run directory; never create arbitrary ancestors.
+        directory(dirname(this.root));
+        try {
+            fs.mkdirSync(this.root, { mode: 0o700 });
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            const existing = this.read(manifest.project.root);
+            if (existing.projection.manifestHash !== manifestHash(manifest))
+                throw new ExecutionLimitError('conflict', 'Budget history belongs to another execution contract.');
+            return existing.projection;
+        }
+        const before = directory(this.root);
+        throwIfCancelled(signal);
+        writeNew(join(this.root, 'history.json'), encode(manifest, []));
+        sameDirectory(this.root, before);
+        syncDir(this.root);
+        syncDir(dirname(this.root));
+        return replayReservations(manifest, []);
+    }
+    read(cwd) {
+        directory(this.root);
+        const journal = decode(read(join(this.root, 'history.json')));
+        checkExecutionIdentity(journal.manifest, cwd);
+        return { ...journal, projection: replayReservations(journal.manifest, journal.events) };
+    }
+    async reserve(cwd, expectedManifest, value, signal) {
+        reservation(value);
+        return this.append(cwd, expectedManifest, { type: 'reserve', reservation: structuredClone(value) }, signal);
+    }
+    async grantChildren(cwd, expectedManifest, grant, signal, beforeCommit) {
+        validateChildGrant(grant);
+        return this.append(cwd, expectedManifest, { type: 'child_grant', grant: structuredClone(grant) }, signal, beforeCommit);
+    }
+    /** Settlement is allowed after cancellation/deadline so known spend can still be recorded. */
+    async settle(cwd, expectedManifest, value) {
+        settlement(value);
+        return this.append(cwd, expectedManifest, { type: 'settle', settlement: structuredClone(value) });
+    }
+    async append(cwd, expectedManifest, change, signal, beforeCommit) {
+        throwIfCancelled(signal);
+        const before = directory(this.root), file = join(this.root, 'history.json'), lock = join(this.root, 'writer.lock');
+        let fd;
+        for (let attempt = 0; attempt <= 50; attempt++) {
+            throwIfCancelled(signal);
+            sameDirectory(this.root, before);
+            try {
+                fd = fs.openSync(lock, 'wx', 0o600);
+                break;
+            }
+            catch (error) {
+                if (error.code !== 'EEXIST')
+                    throw unavailable();
+                recoverDeadWriterLock(lock);
+                if (attempt === 50)
+                    throw new ExecutionLimitError('locked', 'Budget writer is busy; no request was authorized.');
+                await cancellableDelay(10, signal);
+            }
+        }
+        const identity = fs.fstatSync(fd);
+        let temp;
+        try {
+            fs.writeFileSync(fd, String(process.pid));
+            await new Promise(resolve => setImmediate(resolve));
+            throwIfCancelled(signal);
+            sameDirectory(this.root, before);
+            const raw = read(file), journal = decode(raw), current = replayReservations(journal.manifest, journal.events);
+            checkExecutionIdentity(journal.manifest, cwd);
+            if (current.manifestHash !== expectedManifest)
+                throw new ExecutionLimitError('conflict', 'Execution contract changed; request denied.');
+            if (change.type === 'child_grant') {
+                const prior = current.childGrants?.find(r => r.grant.id === change.grant.id);
+                if (prior) {
+                    if (canonicalJson(prior.grant) !== canonicalJson(change.grant))
+                        throw new ExecutionLimitError('conflict', 'Child grant identity already belongs to another proposal.');
+                    beforeCommit?.();
+                    throwIfCancelled(signal);
+                    return current;
+                }
+            }
+            // Leave enough room to settle every pending reservation.
+            const pending = Object.values(current.requests).filter(r => r.state === 'pending').length;
+            if (journal.events.length + (change.type !== 'settle' ? pending + 2 : 1) > MAX_RESERVATION_EVENTS)
+                throw new ExecutionLimitError('limit', 'Budget history reached its event limit; pending reservations remain charged.');
+            const body = { version: reservationVersion(change), id: randomUUID(), at: Math.max(this.now(), journal.events.at(-1)?.at ?? journal.manifest.createdAt), previous: current.revision, change };
+            const event = { ...body, hash: digest(canonicalJson(body)) }, events = [...journal.events, event], next = replayReservations(journal.manifest, events), output = encode(journal.manifest, events);
+            temp = join(this.root, `${randomUUID()}.tmp`);
+            writeNew(temp, output);
+            throwIfCancelled(signal);
+            sameDirectory(this.root, before);
+            checkExecutionIdentity(journal.manifest, cwd);
+            const effective = effectiveExecutionManifest(journal.manifest, next);
+            if (change.type === 'reserve' && this.now() >= Math.min(effective.deadline, ...accountLineage(effective, change.reservation.agentId).map(a => a.deadline)) || change.type === 'child_grant' && change.grant.accounts.some(a => this.now() >= a.deadline))
+                throw new ExecutionLimitError('deadline', 'Agent deadline expired before reservation or grant commit.');
+            if (read(file) !== raw)
+                throw new ExecutionLimitError('conflict', 'Budget history changed before commit.');
+            beforeCommit?.();
+            throwIfCancelled(signal);
+            fs.renameSync(temp, file);
+            temp = undefined;
+            syncDir(this.root);
+            return next;
+        }
+        finally {
+            fs.closeSync(fd);
+            try {
+                sameDirectory(this.root, before);
+                if (temp)
+                    fs.unlinkSync(temp);
+                const current = fs.lstatSync(lock);
+                if (current.ino === identity.ino && current.dev === identity.dev)
+                    fs.unlinkSync(lock);
+            }
+            catch { /* Preserve foreign directories and locks. */ }
+        }
+    }
+}
+//# sourceMappingURL=ledger.js.map