@calliopelabs/cli 3.1.0 → 3.2.0

package/dist/execution/authority.js

@@ -0,0 +1,134 @@
+import { isAbsolute, relative, resolve } from 'node:path';
+import { canonicalJson, canonicalPath, digest, projectIdentity } from '../approvals/index.js';
+import { BRAIN_TOOL_NAMES } from '../brain/tools.js';
+import { ExecutionLimitError } from './types.js';
+export const MAX_EXECUTION_ACCOUNTS = 256;
+export const uuid = (v) => typeof v === 'string' && /^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/.test(v);
+export const hex = (v) => typeof v === 'string' && /^[a-f0-9]{64}$/.test(v);
+export function invalid() { throw new ExecutionLimitError('invalid', 'Invalid execution authority or budget record.'); }
+export function shape(v, required, optional = []) {
+    if (!v || typeof v !== 'object' || Array.isArray(v) || Object.getPrototypeOf(v) !== Object.prototype ||
+        required.some(key => !Object.hasOwn(v, key)) || Object.keys(v).some(key => !required.includes(key) && !optional.includes(key) || v[key] === undefined))
+        invalid();
+}
+export function integer(v, min = 0, max = Number.MAX_SAFE_INTEGER) {
+    if (!Number.isSafeInteger(v) || Number(v) < min || Number(v) > max)
+        invalid();
+}
+export function identifier(v) { if (typeof v !== 'string' || !/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(v))
+    invalid(); }
+export function pathName(v) {
+    if (typeof v !== 'string' || !v || v.length > 1024 || isAbsolute(v) || /[\\\x00-\x1f\x7f:*?\[\]{}]/.test(v) || v !== '.' && v.split('/').some(p => !p || p === '.' || p === '..'))
+        invalid();
+}
+export const covers = (parent, child) => parent === '.' || parent === child || child.startsWith(parent + '/');
+export const permits = (grants, path, access) => grants.some(g => covers(g.path, path) && (access === 'read' || g.access === 'write'));
+export function validateExecutionManifest(value) {
+    shape(value, ['version', 'runId', 'planHash', 'project', 'createdAt', 'deadline', 'tokenBudget', 'costBudgetNanos', 'accounts']);
+    if (value.version !== 1 || !uuid(value.runId) || !hex(value.planHash))
+        invalid();
+    shape(value.project, ['root', 'key']);
+    if (typeof value.project.root !== 'string' || value.project.root.length > 4096 || !isAbsolute(value.project.root) || !hex(value.project.key))
+        invalid();
+    integer(value.createdAt, 1, 8640000000000000);
+    integer(value.deadline, value.createdAt + 1, Math.min(8640000000000000, value.createdAt + 86400000));
+    integer(value.tokenBudget, 1, 100000000);
+    integer(value.costBudgetNanos, 0, 1e13);
+    if (!Array.isArray(value.accounts) || !value.accounts.length || value.accounts.length > MAX_EXECUTION_ACCOUNTS)
+        invalid();
+    const ids = new Set();
+    for (const account of value.accounts) {
+        shape(account, ['id', 'parentId', 'tokenBudget', 'costBudgetNanos', 'deadline', 'allowedTools', 'allowedPaths']);
+        identifier(account.id);
+        if (account.parentId !== null)
+            identifier(account.parentId);
+        if (ids.has(account.id))
+            invalid();
+        ids.add(account.id);
+        integer(account.tokenBudget, 1, value.tokenBudget);
+        integer(account.costBudgetNanos, 0, value.costBudgetNanos);
+        integer(account.deadline, value.createdAt + 1, value.deadline);
+        if (!Array.isArray(account.allowedTools) || account.allowedTools.length > 256 || new Set(account.allowedTools).size !== account.allowedTools.length || account.allowedTools.some(t => typeof t !== 'string' || !/^[a-zA-Z0-9_.:-]{1,128}$/.test(t)))
+            invalid();
+        if (!Array.isArray(account.allowedPaths) || account.allowedPaths.length > 256)
+            invalid();
+        const paths = new Set();
+        for (const grant of account.allowedPaths) {
+            shape(grant, ['path', 'access']);
+            pathName(grant.path);
+            if (!['read', 'write'].includes(String(grant.access)) || paths.has(grant.path))
+                invalid();
+            paths.add(grant.path);
+        }
+    }
+    const manifest = value;
+    if (manifest.accounts.filter(a => a.parentId === null).length !== 1)
+        invalid();
+    for (const account of manifest.accounts) {
+        const lineage = accountLineage(manifest, account.id);
+        if (lineage.length > 9)
+            invalid();
+        const parent = lineage[1];
+        if (parent && (account.tokenBudget > parent.tokenBudget || account.costBudgetNanos > parent.costBudgetNanos || account.deadline > parent.deadline ||
+            account.allowedTools.some(t => !parent.allowedTools.includes(t)) || account.allowedPaths.some(g => !permits(parent.allowedPaths, g.path, g.access))))
+            invalid();
+        const children = manifest.accounts.filter(a => a.parentId === account.id);
+        if (children.reduce((n, a) => n + a.tokenBudget, 0) > account.tokenBudget || children.reduce((n, a) => n + a.costBudgetNanos, 0) > account.costBudgetNanos)
+            invalid();
+    }
+    return JSON.parse(canonicalJson(manifest));
+}
+export const manifestHash = (value) => digest(canonicalJson(value));
+export function accountLineage(manifest, agentId) {
+    const lineage = [], seen = new Set();
+    let id = agentId;
+    while (id !== null) {
+        if (seen.has(id) || seen.size >= MAX_EXECUTION_ACCOUNTS)
+            invalid();
+        seen.add(id);
+        const account = manifest.accounts.find(a => a.id === id);
+        if (!account)
+            invalid();
+        lineage.push(account);
+        id = account.parentId;
+    }
+    return lineage;
+}
+export function checkExecutionIdentity(manifest, cwd) {
+    const current = projectIdentity(cwd);
+    if (current.project !== manifest.project.root || current.projectKey !== manifest.project.key)
+        throw new ExecutionLimitError('authority', 'Execution belongs to a different or replaced project.');
+}
+export function assertExecutionStoreOutsideProject(project, path) {
+    const canonical = canonicalPath(path), rel = relative(project, canonical);
+    if (!(rel === '..' || rel.startsWith('../') || isAbsolute(rel)) || canonical !== path)
+        throw new ExecutionLimitError('authority', 'Execution authority must stay outside worker project scope without aliases.');
+}
+/** Shell, network and extensible tools need an enclosing sandbox with these exact grants. */
+export function executionToolDenial(manifest, agentId, call, cwd, now = Date.now()) {
+    checkExecutionIdentity(manifest, cwd);
+    const account = accountLineage(manifest, agentId)[0];
+    if (now >= Math.min(manifest.deadline, account.deadline))
+        return 'Agent deadline expired.';
+    if (!account.allowedTools.includes(call.name))
+        return 'Tool is outside the declared agent authority.';
+    if (['think', 'ask_question', 'create_plan', ...BRAIN_TOOL_NAMES].includes(call.name))
+        return undefined;
+    if (!['read_file', 'write_file', 'edit_file', 'list_files'].includes(call.name))
+        return 'This tool requires containment that enforces the agent path and network grants; execution is unavailable.';
+    const arg = call.arguments.path ?? (call.name === 'list_files' ? '.' : undefined);
+    if (typeof arg !== 'string' || !arg || arg.length > 4096)
+        return 'Tool requires a bounded path inside the agent scope.';
+    const access = call.name === 'write_file' || call.name === 'edit_file' ? 'write' : 'read';
+    return executionPathDenial(manifest, account, arg, access);
+}
+/** Shared source-path boundary, independent of which read-only tool consumes the file. */
+export function executionPathDenial(manifest, account, arg, access) {
+    const absolute = resolve(manifest.project.root, arg), canonical = canonicalPath(absolute), rel = relative(manifest.project.root, canonical) || '.';
+    if (canonical !== absolute || rel === '..' || rel.startsWith('../') || isAbsolute(rel))
+        return 'Tool path resolves outside the project or through a symlink alias.';
+    if (!permits(account.allowedPaths, rel, access))
+        return `Tool path is outside the agent ${access} scope.`;
+    return undefined;
+}
+//# sourceMappingURL=authority.js.map

package/dist/execution/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../../src/execution/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAqE,MAAM,YAAY,CAAC;AAEpH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,uEAAuE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC1J,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClG,MAAM,UAAU,OAAO,KAAY,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAC,+CAA+C,CAAC,CAAC,CAAC,CAAC;AAC9H,MAAM,UAAU,KAAK,CAAC,CAAU,EAAE,QAAkB,EAAE,QAAQ,GAAa,EAAE;IAC3E,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS;QAClG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAK,CAA4B,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;AACjM,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,CAAU,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,gBAAgB;IACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC;AAChF,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,CAAU,IAAyB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC;IAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACpJ,MAAM,UAAU,QAAQ,CAAC,CAAU;IACjC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;AAC/L,CAAC;AACD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,KAAa,EAAW,EAAE,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAC,GAAG,CAAC,CAAC;AACrI,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAuB,EAAE,IAAY,EAAE,MAAwB,EAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC;AAC1L,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,OAAO,EAAC,UAAU,EAAC,SAAS,EAAC,WAAW,EAAC,UAAU,EAAC,aAAa,EAAC,iBAAiB,EAAC,UAAU,CAAC,CAAC,CAAC;IACxH,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACjF,KAAK,CAAC,KAAK,CAAC,OAAO,EAAC,CAAC,MAAM,EAAC,KAAK,CAAC,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACxJ,OAAO,CAAC,KAAK,CAAC,SAAS,EAAC,CAAC,EAAC,gBAAgB,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,SAAS,GAAC,CAAC,EAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAC,KAAK,CAAC,SAAS,GAAC,QAAQ,CAAC,CAAC,CAAC;IAC3I,OAAO,CAAC,KAAK,CAAC,WAAW,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAC,CAAC,EAAC,IAAI,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,sBAAsB;QAAE,OAAO,EAAE,CAAC;IAC1H,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,KAAK,CAAC,OAAO,EAAC,CAAC,IAAI,EAAC,UAAU,EAAC,aAAa,EAAC,iBAAiB,EAAC,UAAU,EAAC,cAAc,EAAC,cAAc,CAAC,CAAC,CAAC;QAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClI,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;YAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,OAAO,CAAC,WAAW,EAAC,CAAC,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAC,CAAC,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAC,KAAK,CAAC,SAAS,GAAC,CAAC,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAC/P,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAC1H,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAAC,KAAK,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,QAAQ,CAAC,CAAC,CAAC;YAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,CAAC,MAAM,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IACtN,CAAC;IACD,MAAM,QAAQ,GAAG,KAAqC,CAAC;IACvD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/E,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QACvF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ;YAC/I,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAC,CAAC,CAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAChK,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAC,CAAC,CAAC,WAAW,EAAC,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAC,CAAC,CAAC,eAAe,EAAC,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe;YAAE,OAAO,EAAE,CAAC;IAChK,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAsB,CAAC;AAClE,CAAC;AACD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAwB,EAAU,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/F,MAAM,UAAU,cAAc,CAAC,QAA2B,EAAE,OAAe;IACzE,MAAM,OAAO,GAAuB,EAAE,EAAE,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAAC,IAAI,EAAE,GAAkB,OAAO,CAAC;IAClG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,sBAAsB;YAAE,OAAO,EAAE,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClI,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,QAA2B,EAAE,GAAW;IAC7E,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,GAAG;QAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,uDAAuD,CAAC,CAAC;AACnM,CAAC;AACD,MAAM,UAAU,kCAAkC,CAAC,OAAc,EAAC,IAAW;IAC3E,MAAM,SAAS,GAAC,aAAa,CAAC,IAAI,CAAC,EAAC,GAAG,GAAC,QAAQ,CAAC,OAAO,EAAC,SAAS,CAAC,CAAC;IAAA,IAAG,CAAC,CAAC,GAAG,KAAG,IAAI,IAAE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAE,UAAU,CAAC,GAAG,CAAC,CAAC,IAAE,SAAS,KAAG,IAAI;QAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,6EAA6E,CAAC,CAAC;AAC1Q,CAAC;AACD,6FAA6F;AAC7F,MAAM,UAAU,mBAAmB,CAAC,QAA2B,EAAE,OAAe,EAAE,IAAc,EAAE,GAAW,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC7H,sBAAsB,CAAC,QAAQ,EAAC,GAAG,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;IAC3F,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAC1F,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,+CAA+C,CAAC;IACtG,IAAI,CAAC,OAAO,EAAC,cAAc,EAAC,aAAa,EAAC,GAAG,gBAAgB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACrG,IAAI,CAAC,CAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,2GAA2G,CAAC;IACjM,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,sDAAsD,CAAC;IACxH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1F,OAAO,mBAAmB,CAAC,QAAQ,EAAC,OAAO,EAAC,GAAG,EAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AACD,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CAAC,QAA2B,EAAE,OAAyB,EAAE,GAAW,EAAE,MAAwB;IAC/H,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,GAAG,CAAC,EAAE,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,SAAS,CAAC,IAAI,GAAG,CAAC;IACjJ,IAAI,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,oEAAoE,CAAC;IACpK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAC,GAAG,EAAC,MAAM,CAAC;QAAE,OAAO,kCAAkC,MAAM,SAAS,CAAC;IACxG,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/execution/billing.d.ts

@@ -0,0 +1,100 @@
+import type { HealthProvider } from '../health/types.js';
+import type { RouteCandidate } from '../routing/index.js';
+export interface BillingProfile {
+    provider: 'anthropic';
+    model: string;
+    target: string;
+    checkedAt: number;
+    expiresAt: number;
+    sources: string[];
+    prices: {
+        input: number;
+        output: number;
+    };
+    capabilities: {
+        tools?: boolean;
+        streaming?: boolean;
+    };
+    admission: 'provider-count-v1';
+}
+export interface FullContextBillingProfile {
+    version: 2;
+    provider: HealthProvider;
+    model: string;
+    target: string;
+    checkedAt: number;
+    expiresAt: number;
+    sources: string[];
+    prices: {
+        input: number;
+        output: number;
+    };
+    capabilities: {
+        chat?: boolean;
+        tools?: boolean;
+        streaming?: boolean;
+    };
+    limits: {
+        contextLength: number;
+        maxOutputTokens: number;
+    };
+    admission: 'reviewed-full-context-v1';
+}
+export type ReviewedBillingProfile = BillingProfile | FullContextBillingProfile;
+export interface BillingEvidence {
+    profile: ReviewedBillingProfile;
+    hash: string;
+}
+export interface InputCount {
+    version: 1;
+    method: 'anthropic-count-tokens';
+    requestHash: string;
+    inputTokens: number;
+    at: number;
+}
+export interface CountedQuoteEvidence {
+    version: 1;
+    profileHash: string;
+    profile: BillingProfile;
+    count: InputCount;
+    multiplier: 2;
+    slackTokens: 1024;
+}
+export interface FullContextQuoteEvidence {
+    version: 2;
+    profileHash: string;
+    profile: FullContextBillingProfile;
+    quotedAt: number;
+    live: {
+        discoveredAt: number;
+        contextLength: number | null;
+        maxOutputTokens: number | null;
+        capabilities: FullContextBillingProfile['capabilities'];
+        prices: {
+            input: number | null;
+            output: number | null;
+        };
+    };
+    requirements: {
+        tools: boolean;
+        streaming: boolean;
+    };
+    measuredInput?: boolean;
+}
+export type QuoteEvidence = CountedQuoteEvidence | FullContextQuoteEvidence;
+export declare const billingFile: () => string;
+export declare function validateBillingProfile(value: unknown): ReviewedBillingProfile;
+export declare function validateInputCount(value: unknown): InputCount;
+/** Conservative bounds are reconstructed from recorded evidence during replay. */
+export declare function fullContextTerms(proof: FullContextQuoteEvidence): {
+    inputTokens: number;
+    maxOutputTokens: number;
+    inputPrice: number;
+    outputPrice: number;
+};
+export declare function validateQuoteEvidence(value: unknown): QuoteEvidence;
+export declare function assertBillingCurrent(evidence: BillingEvidence, route: RouteCandidate, now?: number): void;
+export declare function readBillingEvidence(route: RouteCandidate | undefined, project: string, file?: string): BillingEvidence | undefined;
+/** Size coordinator output before admission; the request guard rechecks all evidence. */
+export declare function reviewedOutputLimit(route: RouteCandidate, project: string): number | null;
+//# sourceMappingURL=billing.d.ts.map

package/dist/execution/billing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.d.ts","sourceRoot":"","sources":["../../src/execution/billing.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AAIxD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAC,WAAW,CAAC;IAAC,KAAK,EAAC,MAAM,CAAC;IAAC,MAAM,EAAC,MAAM,CAAC;IAClD,SAAS,EAAC,MAAM,CAAC;IAAC,SAAS,EAAC,MAAM,CAAC;IAAC,OAAO,EAAC,MAAM,EAAE,CAAC;IACrD,MAAM,EAAC;QAAC,KAAK,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAA;KAAC,CAAC;IACpC,YAAY,EAAC;QAAC,KAAK,CAAC,EAAC,OAAO,CAAC;QAAA,SAAS,CAAC,EAAC,OAAO,CAAA;KAAC,CAAC;IACjD,SAAS,EAAC,mBAAmB,CAAC;CAC/B;AACD,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAC,CAAC,CAAC;IAAC,QAAQ,EAAC,cAAc,CAAC;IAAC,KAAK,EAAC,MAAM,CAAC;IAAC,MAAM,EAAC,MAAM,CAAC;IAChE,SAAS,EAAC,MAAM,CAAC;IAAC,SAAS,EAAC,MAAM,CAAC;IAAC,OAAO,EAAC,MAAM,EAAE,CAAC;IACrD,MAAM,EAAC;QAAC,KAAK,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAA;KAAC,CAAC;IACpC,YAAY,EAAC;QAAC,IAAI,CAAC,EAAC,OAAO,CAAC;QAAA,KAAK,CAAC,EAAC,OAAO,CAAC;QAAA,SAAS,CAAC,EAAC,OAAO,CAAA;KAAC,CAAC;IAC/D,MAAM,EAAC;QAAC,aAAa,EAAC,MAAM,CAAC;QAAA,eAAe,EAAC,MAAM,CAAA;KAAC,CAAC;IACrD,SAAS,EAAC,0BAA0B,CAAC;CACtC;AACD,MAAM,MAAM,sBAAsB,GAAC,cAAc,GAAC,yBAAyB,CAAC;AAC5E,MAAM,WAAW,eAAe;IAAE,OAAO,EAAC,sBAAsB,CAAC;IAAA,IAAI,EAAC,MAAM,CAAA;CAAC;AAC7E,MAAM,WAAW,UAAU;IAAE,OAAO,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,wBAAwB,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,EAAE,EAAC,MAAM,CAAA;CAAC;AACvH,MAAM,WAAW,oBAAoB;IAAE,OAAO,EAAC,CAAC,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,cAAc,CAAC;IAAA,KAAK,EAAC,UAAU,CAAC;IAAA,UAAU,EAAC,CAAC,CAAC;IAAA,WAAW,EAAC,IAAI,CAAA;CAAC;AAC1I,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAC,CAAC,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,yBAAyB,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAC/E,IAAI,EAAC;QAAC,YAAY,EAAC,MAAM,CAAC;QAAA,aAAa,EAAC,MAAM,GAAC,IAAI,CAAC;QAAA,eAAe,EAAC,MAAM,GAAC,IAAI,CAAC;QAAA,YAAY,EAAC,yBAAyB,CAAC,cAAc,CAAC,CAAC;QAAA,MAAM,EAAC;YAAC,KAAK,EAAC,MAAM,GAAC,IAAI,CAAC;YAAA,MAAM,EAAC,MAAM,GAAC,IAAI,CAAA;SAAC,CAAA;KAAC,CAAC;IACtL,YAAY,EAAC;QAAC,KAAK,EAAC,OAAO,CAAC;QAAA,SAAS,EAAC,OAAO,CAAA;KAAC,CAAC;IAAA,aAAa,CAAC,EAAC,OAAO,CAAC;CACvE;AACD,MAAM,MAAM,aAAa,GAAC,oBAAoB,GAAC,wBAAwB,CAAC;AACxE,eAAO,MAAM,WAAW,QAAM,MAAsG,CAAC;AAErI,wBAAgB,sBAAsB,CAAC,KAAK,EAAC,OAAO,GAAE,sBAAsB,CAiB3E;AACD,wBAAgB,kBAAkB,CAAC,KAAK,EAAC,OAAO,GAAE,UAAU,CAK3D;AACD,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAC,wBAAwB;IAMtD,WAAW;IAA8D,eAAe;IAA0E,UAAU;IAAqD,WAAW;EACpP;AACD,wBAAgB,qBAAqB,CAAC,KAAK,EAAC,OAAO,GAAE,aAAa,CAkBjE;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAC,eAAe,EAAC,KAAK,EAAC,cAAc,EAAC,GAAG,SAAW,GAAE,IAAI,CAItG;AACD,wBAAgB,mBAAmB,CAAC,KAAK,EAAC,cAAc,GAAC,SAAS,EAAC,OAAO,EAAC,MAAM,EAAC,IAAI,SAAc,GAAE,eAAe,GAAC,SAAS,CAqB9H;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,CAAC,KAAK,EAAC,cAAc,EAAC,OAAO,EAAC,MAAM,GAAE,MAAM,GAAC,IAAI,CAKnF"}

package/dist/execution/billing.js

@@ -0,0 +1,166 @@
+/** Operator-reviewed evidence complements discovery; it never changes live model identity. */
+import * as fs from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { canonicalJson, digest } from '../approvals/index.js';
+import { getProviderNames } from '../config.js';
+import { assertExecutionStoreOutsideProject, hex, integer, invalid, shape } from './authority.js';
+import { ExecutionLimitError } from './types.js';
+export const billingFile = () => resolve(process.env.CALLIOPE_BILLING_FILE || join(homedir(), '.calliope-cli', 'billing.json'));
+export function validateBillingProfile(value) {
+    const full = !!value && typeof value === 'object' && 'version' in value && value.version === 2;
+    shape(value, ['provider', 'model', 'target', 'checkedAt', 'expiresAt', 'sources', 'prices', 'capabilities', 'admission', ...(full ? ['version', 'limits'] : [])]);
+    if ((full ? (!getProviderNames().includes(value.provider) || value.admission !== 'reviewed-full-context-v1') : (value.provider !== 'anthropic' || value.admission !== 'provider-count-v1')) || typeof value.model !== 'string' || !value.model || value.model.length > 512 || /[\x00-\x20\x7f]/.test(value.model) || !hex(value.target))
+        invalid();
+    integer(value.checkedAt, 1, 8640000000000000);
+    integer(value.expiresAt, value.checkedAt + 1, Math.min(8640000000000000, value.checkedAt + 7 * 86400000));
+    if (!Array.isArray(value.sources) || !value.sources.length || value.sources.length > 8)
+        invalid();
+    for (const source of value.sources) {
+        if (typeof source !== 'string' || source.length > 2048)
+            invalid();
+        let url;
+        try {
+            url = new URL(source);
+        }
+        catch {
+            invalid();
+        }
+        if (url.protocol !== 'https:' || url.username || url.password || url.search || url.hash)
+            invalid();
+    }
+    shape(value.prices, ['input', 'output']);
+    for (const price of Object.values(value.prices))
+        if (typeof price !== 'number' || !Number.isFinite(price) || price < 0 || price > 1000000)
+            invalid();
+    shape(value.capabilities, [], [...(full ? ['chat'] : []), 'tools', 'streaming']);
+    if (Object.values(value.capabilities).some(v => typeof v !== 'boolean'))
+        invalid();
+    if (full) {
+        shape(value.limits, ['contextLength', 'maxOutputTokens']);
+        integer(value.limits.contextLength, 1, 100000000);
+        integer(value.limits.maxOutputTokens, 1, 100000000);
+    }
+    return JSON.parse(canonicalJson(value));
+}
+export function validateInputCount(value) {
+    shape(value, ['version', 'method', 'requestHash', 'inputTokens', 'at']);
+    if (value.version !== 1 || value.method !== 'anthropic-count-tokens' || !hex(value.requestHash))
+        invalid();
+    integer(value.inputTokens, 1, 100000000);
+    integer(value.at, 1, 8640000000000000);
+    return value;
+}
+/** Conservative bounds are reconstructed from recorded evidence during replay. */
+export function fullContextTerms(proof) {
+    const { profile, live, requirements } = proof;
+    for (const key of ['chat', ...(requirements.tools ? ['tools'] : []), ...(requirements.streaming ? ['streaming'] : [])]) {
+        const k = key;
+        if (live.capabilities[k] === false || (live.capabilities[k] ?? profile.capabilities[k]) !== true)
+            throw new ExecutionLimitError('authority', 'Live discovery or reviewed metadata did not confirm the required model capabilities.');
+    }
+    return { inputTokens: Math.max(profile.limits.contextLength, live.contextLength ?? 0), maxOutputTokens: Math.min(profile.limits.maxOutputTokens, live.maxOutputTokens ?? 100000000), inputPrice: Math.max(profile.prices.input, live.prices.input ?? 0), outputPrice: Math.max(profile.prices.output, live.prices.output ?? 0) };
+}
+export function validateQuoteEvidence(value) {
+    shape(value, ['version', 'profileHash', 'profile'], ['count', 'multiplier', 'slackTokens', 'quotedAt', 'live', 'requirements', 'measuredInput']);
+    if (!hex(value.profileHash))
+        invalid();
+    const profile = validateBillingProfile(value.profile);
+    if (digest(canonicalJson(profile)) !== value.profileHash)
+        invalid();
+    if (value.version === 1) {
+        shape(value, ['version', 'profileHash', 'profile', 'count', 'multiplier', 'slackTokens']);
+        if (profile.admission !== 'provider-count-v1' || value.multiplier !== 2 || value.slackTokens !== 1024)
+            invalid();
+        validateInputCount(value.count);
+    }
+    else if (value.version === 2) {
+        shape(value, ['version', 'profileHash', 'profile', 'quotedAt', 'live', 'requirements'], ['measuredInput']);
+        if (profile.admission !== 'reviewed-full-context-v1')
+            invalid();
+        if (value.measuredInput !== undefined && typeof value.measuredInput !== 'boolean')
+            invalid();
+        integer(value.quotedAt, Math.max(1, profile.checkedAt - 1000), profile.expiresAt - 1);
+        shape(value.live, ['discoveredAt', 'contextLength', 'maxOutputTokens', 'capabilities', 'prices']);
+        integer(value.live.discoveredAt, Math.max(1, value.quotedAt - 300000), value.quotedAt + 1000);
+        for (const key of ['contextLength', 'maxOutputTokens'])
+            if (value.live[key] !== null)
+                integer(value.live[key], 1, 100000000);
+        shape(value.live.capabilities, [], ['chat', 'tools', 'streaming']);
+        if (Object.values(value.live.capabilities).some(v => typeof v !== 'boolean'))
+            invalid();
+        shape(value.live.prices, ['input', 'output']);
+        for (const p of Object.values(value.live.prices))
+            if (p !== null && (typeof p !== 'number' || !Number.isFinite(p) || p < 0 || p > 1000000))
+                invalid();
+        shape(value.requirements, ['tools', 'streaming']);
+        if (Object.values(value.requirements).some(v => typeof v !== 'boolean'))
+            invalid();
+        fullContextTerms(value);
+    }
+    else
+        invalid();
+    return JSON.parse(canonicalJson(value));
+}
+export function assertBillingCurrent(evidence, route, now = Date.now()) {
+    const p = validateBillingProfile(evidence.profile);
+    if (evidence.hash !== digest(canonicalJson(p)) || p.provider !== route.provider || p.model !== route.model || p.target !== route.target || p.checkedAt > now + 1000 || p.expiresAt <= now)
+        throw new ExecutionLimitError('authority', 'Billing evidence is expired or does not match the live provider/model/endpoint.');
+}
+export function readBillingEvidence(route, project, file = billingFile()) {
+    if (!route)
+        return undefined;
+    let fd;
+    try {
+        fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw new ExecutionLimitError('authority', 'Cannot safely open local billing evidence.');
+    }
+    try {
+        assertExecutionStoreOutsideProject(project, dirname(file));
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.size > 131072 || stat.nlink !== 1 || (stat.mode & 0o022))
+            throw new Error();
+        const bytes = Buffer.alloc(131073), length = fs.readSync(fd, bytes, 0, bytes.length, 0);
+        if (length > 131072)
+            throw new Error();
+        const data = JSON.parse(bytes.subarray(0, length).toString('utf8'));
+        shape(data, ['version', 'profiles']);
+        if (![1, 2].includes(data.version) || !Array.isArray(data.profiles) || data.profiles.length > 64)
+            invalid();
+        const profiles = data.profiles.map(validateBillingProfile), ids = new Set();
+        if (data.version === 1 && profiles.some(p => p.admission !== 'provider-count-v1'))
+            invalid();
+        for (const p of profiles) {
+            const id = JSON.stringify([p.provider, p.model, p.target]);
+            if (ids.has(id))
+                invalid();
+            ids.add(id);
+        }
+        const profile = profiles.find(p => p.provider === route.provider && p.model === route.model && p.target === route.target);
+        if (!profile)
+            return undefined;
+        const evidence = { profile, hash: digest(canonicalJson(profile)) };
+        assertBillingCurrent(evidence, route);
+        return evidence;
+    }
+    catch (error) {
+        if (error instanceof ExecutionLimitError && error.code === 'authority')
+            throw error;
+        throw new ExecutionLimitError('authority', 'Local billing evidence is malformed, unsafe or oversized.');
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+/** Size coordinator output before admission; the request guard rechecks all evidence. */
+export function reviewedOutputLimit(route, project) {
+    const profile = readBillingEvidence(route, project)?.profile;
+    return profile?.admission === 'reviewed-full-context-v1'
+        ? Math.min(route.maxOutputTokens ?? profile.limits.maxOutputTokens, profile.limits.maxOutputTokens)
+        : route.maxOutputTokens;
+}
+//# sourceMappingURL=billing.js.map

package/dist/execution/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../src/execution/billing.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAC,OAAO,EAAC,MAAM,SAAS,CAAC;AAChC,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAC,gBAAgB,EAAC,MAAM,cAAc,CAAC;AAG9C,OAAO,EAAC,kCAAkC,EAAC,GAAG,EAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,MAAM,gBAAgB,CAAC;AAC5F,OAAO,EAAC,mBAAmB,EAAC,MAAM,YAAY,CAAC;AA2B/C,MAAM,CAAC,MAAM,WAAW,GAAG,GAAU,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAC,eAAe,EAAC,cAAc,CAAC,CAAC,CAAC;AAErI,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,IAAI,GAAC,CAAC,CAAC,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,SAAS,IAAG,KAAK,IAAE,KAAK,CAAC,OAAO,KAAG,CAAC,CAAC;IAClF,KAAK,CAAC,KAAK,EAAC,CAAC,UAAU,EAAC,OAAO,EAAC,QAAQ,EAAC,WAAW,EAAC,WAAW,EAAC,SAAS,EAAC,QAAQ,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,CAAC,IAAI,CAAA,CAAC,CAAA,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC,CAAC,CAAC;IACnJ,IAAG,CAAC,IAAI,CAAA,CAAC,CAAA,CAAC,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAA0B,CAAC,IAAE,KAAK,CAAC,SAAS,KAAG,0BAA0B,CAAC,CAAA,CAAC,CAAA,CAAC,KAAK,CAAC,QAAQ,KAAG,WAAW,IAAE,KAAK,CAAC,SAAS,KAAG,mBAAmB,CAAC,CAAC,IAAE,OAAO,KAAK,CAAC,KAAK,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,KAAK,IAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAC,GAAG,IAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IACvU,OAAO,CAAC,KAAK,CAAC,SAAS,EAAC,CAAC,EAAC,gBAAgB,CAAC,CAAC;IAAA,OAAO,CAAC,KAAK,CAAC,SAAS,EAAC,KAAK,CAAC,SAAS,GAAC,CAAC,EAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAC,KAAK,CAAC,SAAS,GAAC,CAAC,GAAC,QAAQ,CAAC,CAAC,CAAC;IAC7I,IAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAE,KAAK,CAAC,OAAO,CAAC,MAAM,GAAC,CAAC;QAAC,OAAO,EAAE,CAAC;IAC1F,KAAI,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAC,CAAC;QACjC,IAAG,OAAO,MAAM,KAAG,QAAQ,IAAE,MAAM,CAAC,MAAM,GAAC,IAAI;YAAC,OAAO,EAAE,CAAC;QAC1D,IAAI,GAAO,CAAC;QAAA,IAAG,CAAC;YAAA,GAAG,GAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC;YAAA,OAAO,EAAE,CAAC;QAAA,CAAC;QACtD,IAAG,GAAG,CAAC,QAAQ,KAAG,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,MAAM,IAAE,GAAG,CAAC,IAAI;YAAC,OAAO,EAAE,CAAC;IACzF,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,CAAC;IACvC,KAAI,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAAC,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAE,KAAK,GAAC,CAAC,IAAE,KAAK,GAAC,OAAO;YAAC,OAAO,EAAE,CAAC;IACrI,KAAK,CAAC,KAAK,CAAC,YAAY,EAAC,EAAE,EAAC,CAAC,GAAG,CAAC,IAAI,CAAA,CAAC,CAAA,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,OAAO,EAAC,WAAW,CAAC,CAAC,CAAC;IACzE,IAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,KAAG,SAAS,CAAC;QAAC,OAAO,EAAE,CAAC;IAC7E,IAAG,IAAI,EAAC,CAAC;QAAA,KAAK,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC,eAAe,EAAC,iBAAiB,CAAC,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;IAAA,CAAC;IACpK,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAA2B,CAAC;AACpE,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,QAAQ,EAAC,aAAa,EAAC,aAAa,EAAC,IAAI,CAAC,CAAC,CAAC;IACnE,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,IAAE,KAAK,CAAC,MAAM,KAAG,wBAAwB,IAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;QAAC,OAAO,EAAE,CAAC;IACjG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;IAAA,OAAO,CAAC,KAAK,CAAC,EAAE,EAAC,CAAC,EAAC,gBAAgB,CAAC,CAAC;IAC5E,OAAO,KAA8B,CAAC;AACxC,CAAC;AACD,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAA8B;IAC7D,MAAM,EAAC,OAAO,EAAC,IAAI,EAAC,YAAY,EAAC,GAAC,KAAK,CAAC;IACxC,KAAI,MAAM,GAAG,IAAI,CAAC,MAAM,EAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAA,CAAC,CAAA,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAA,CAAC,CAAA,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAU,EAAC,CAAC;QACpH,MAAM,CAAC,GAAC,GAAsD,CAAC;QAC/D,IAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAG,KAAK,IAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAG,IAAI;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,sFAAsF,CAAC,CAAC;IAC5N,CAAC;IACD,OAAM,EAAC,WAAW,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAC,IAAI,CAAC,aAAa,IAAE,CAAC,CAAC,EAAC,eAAe,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAC,IAAI,CAAC,eAAe,IAAE,SAAS,CAAC,EAAC,UAAU,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAE,CAAC,CAAC,EAAC,WAAW,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAE,CAAC,CAAC,EAAC,CAAC;AAC7S,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,aAAa,EAAC,SAAS,CAAC,EAAC,CAAC,OAAO,EAAC,YAAY,EAAC,aAAa,EAAC,UAAU,EAAC,MAAM,EAAC,cAAc,EAAC,eAAe,CAAC,CAAC,CAAC;IACvI,IAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;QAAC,OAAO,EAAE,CAAC;IAAA,MAAM,OAAO,GAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAA,IAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,KAAG,KAAK,CAAC,WAAW;QAAC,OAAO,EAAE,CAAC;IACzJ,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,EAAC,CAAC;QACpB,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,aAAa,EAAC,SAAS,EAAC,OAAO,EAAC,YAAY,EAAC,aAAa,CAAC,CAAC,CAAC;QACpF,IAAG,OAAO,CAAC,SAAS,KAAG,mBAAmB,IAAE,KAAK,CAAC,UAAU,KAAG,CAAC,IAAE,KAAK,CAAC,WAAW,KAAG,IAAI;YAAC,OAAO,EAAE,CAAC;QAAA,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvI,CAAC;SAAK,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,EAAC,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,EAAC,MAAM,EAAC,cAAc,CAAC,EAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAAA,IAAG,OAAO,CAAC,SAAS,KAAG,0BAA0B;YAAC,OAAO,EAAE,CAAC;QAChK,IAAG,KAAK,CAAC,aAAa,KAAG,SAAS,IAAE,OAAO,KAAK,CAAC,aAAa,KAAG,SAAS;YAAC,OAAO,EAAE,CAAC;QACrF,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,OAAO,CAAC,SAAS,GAAC,IAAI,CAAC,EAAC,OAAO,CAAC,SAAS,GAAC,CAAC,CAAC,CAAC;QAC/E,KAAK,CAAC,KAAK,CAAC,IAAI,EAAC,CAAC,cAAc,EAAC,eAAe,EAAC,iBAAiB,EAAC,cAAc,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,CAAC,QAAQ,GAAC,MAAM,CAAC,EAAC,KAAK,CAAC,QAAQ,GAAC,IAAI,CAAC,CAAC;QACpL,KAAI,MAAM,GAAG,IAAI,CAAC,eAAe,EAAC,iBAAiB,CAAC;YAAC,IAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,IAAI;gBAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;QACpH,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAC,EAAE,EAAC,CAAC,MAAM,EAAC,OAAO,EAAC,WAAW,CAAC,CAAC,CAAC;QAAA,IAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,KAAG,SAAS,CAAC;YAAC,OAAO,EAAE,CAAC;QACjJ,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAC,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,KAAI,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAAC,IAAG,CAAC,KAAG,IAAI,IAAE,CAAC,OAAO,CAAC,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAE,CAAC,GAAC,CAAC,IAAE,CAAC,GAAC,OAAO,CAAC;gBAAC,OAAO,EAAE,CAAC;QAC9K,KAAK,CAAC,KAAK,CAAC,YAAY,EAAC,CAAC,OAAO,EAAC,WAAW,CAAC,CAAC,CAAC;QAAA,IAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,KAAG,SAAS,CAAC;YAAC,OAAO,EAAE,CAAC;QAC7H,gBAAgB,CAAC,KAA4C,CAAC,CAAC;IACjE,CAAC;;QAAK,OAAO,EAAE,CAAC;IAChB,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAkB,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAwB,EAAC,KAAoB,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE;IAC/F,MAAM,CAAC,GAAC,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjD,IAAG,QAAQ,CAAC,IAAI,KAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAE,CAAC,CAAC,QAAQ,KAAG,KAAK,CAAC,QAAQ,IAAE,CAAC,CAAC,KAAK,KAAG,KAAK,CAAC,KAAK,IAAE,CAAC,CAAC,MAAM,KAAG,KAAK,CAAC,MAAM,IAAE,CAAC,CAAC,SAAS,GAAC,GAAG,GAAC,IAAI,IAAE,CAAC,CAAC,SAAS,IAAE,GAAG;QAC9J,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,iFAAiF,CAAC,CAAC;AACjI,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAA8B,EAAC,OAAc,EAAC,IAAI,GAAC,WAAW,EAAE;IAClG,IAAG,CAAC,KAAK;QAAC,OAAO,SAAS,CAAC;IAC3B,IAAI,EAAS,CAAC;IACd,IAAG,CAAC;QAAA,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAAA,CAAC;IAChG,OAAM,KAAK,EAAC,CAAC;QAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;YAAC,OAAO,SAAS,CAAC;QAAA,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,4CAA4C,CAAC,CAAC;IAAA,CAAC;IAC3K,IAAG,CAAC;QACF,kCAAkC,CAAC,OAAO,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,MAAM,IAAE,IAAI,CAAC,KAAK,KAAG,CAAC,IAAE,CAAC,IAAI,CAAC,IAAI,GAAC,KAAK,CAAC;YAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QACzF,MAAM,KAAK,GAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAC,MAAM,GAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAC,KAAK,EAAC,CAAC,EAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAC/E,IAAG,MAAM,GAAC,MAAM;YAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QACnC,MAAM,IAAI,GAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,EAAC,CAAC,SAAS,EAAC,UAAU,CAAC,CAAC,CAAC;QAAA,IAAG,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAiB,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAC,EAAE;YAAC,OAAO,EAAE,CAAC;QAChJ,MAAM,QAAQ,GAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAC,GAAG,GAAC,IAAI,GAAG,EAAU,CAAC;QAC/E,IAAG,IAAI,CAAC,OAAO,KAAG,CAAC,IAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,mBAAmB,CAAC;YAAC,OAAO,EAAE,CAAC;QACnF,KAAI,MAAM,CAAC,IAAI,QAAQ,EAAC,CAAC;YAAA,MAAM,EAAE,GAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAC,CAAC,CAAC,KAAK,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAAA,IAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAA,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAA,CAAC;QACtH,MAAM,OAAO,GAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,KAAK,CAAC,QAAQ,IAAE,CAAC,CAAC,KAAK,KAAG,KAAK,CAAC,KAAK,IAAE,CAAC,CAAC,MAAM,KAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5G,IAAG,CAAC,OAAO;YAAC,OAAO,SAAS,CAAC;QAC7B,MAAM,QAAQ,GAAC,EAAC,OAAO,EAAC,IAAI,EAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAC,CAAC;QAAA,oBAAoB,CAAC,QAAQ,EAAC,KAAK,CAAC,CAAC;QAAA,OAAO,QAAQ,CAAC;IACpH,CAAC;IAAA,OAAM,KAAK,EAAC,CAAC;QAAA,IAAG,KAAK,YAAY,mBAAmB,IAAE,KAAK,CAAC,IAAI,KAAG,WAAW;YAAC,MAAM,KAAK,CAAC;QAAA,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,2DAA2D,CAAC,CAAC;IAAA,CAAC;YAC7L,CAAC;QAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAA,CAAC;AAC5B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,mBAAmB,CAAC,KAAoB,EAAC,OAAc;IACrE,MAAM,OAAO,GAAC,mBAAmB,CAAC,KAAK,EAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC1D,OAAO,OAAO,EAAE,SAAS,KAAG,0BAA0B;QACpD,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,IAAE,OAAO,CAAC,MAAM,CAAC,eAAe,EAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;QAC/F,CAAC,CAAA,KAAK,CAAC,eAAe,CAAC;AAC3B,CAAC"}

package/dist/execution/child-grants.d.ts

@@ -0,0 +1,9 @@
+import { type ChildGrant, type ExecutionManifest, type ReservationProjection, type RecordedChildGrant } from './types.js';
+export declare const MAX_CHILD_GRANT_BYTES = 32768;
+export declare function validateChildGrant(value: unknown): ChildGrant;
+/** Derived accounts never replace the original immutable budget manifest/hash. */
+export declare function effectiveExecutionManifest(base: ExecutionManifest, state: ReservationProjection): ExecutionManifest;
+/** Once children are granted, their remaining capacity cannot be borrowed by their parent. */
+export declare function assertChildCapacity(manifest: ExecutionManifest, state: ReservationProjection, agentId: string, tokens?: number, costNanos?: number): void;
+export declare function applyChildGrant(base: ExecutionManifest, current: ExecutionManifest, state: ReservationProjection, record: RecordedChildGrant): ExecutionManifest;
+//# sourceMappingURL=child-grants.d.ts.map

package/dist/execution/child-grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-grants.d.ts","sourceRoot":"","sources":["../../src/execution/child-grants.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqB,KAAK,UAAU,EAAC,KAAK,iBAAiB,EAAC,KAAK,qBAAqB,EAAC,KAAK,kBAAkB,EAAC,MAAM,YAAY,CAAC;AAEzI,eAAO,MAAM,qBAAqB,QAAM,CAAC;AACzC,wBAAgB,kBAAkB,CAAC,KAAK,EAAC,OAAO,GAAE,UAAU,CAK3D;AACD,kFAAkF;AAClF,wBAAgB,0BAA0B,CAAC,IAAI,EAAC,iBAAiB,EAAC,KAAK,EAAC,qBAAqB,GAAE,iBAAiB,CAE/G;AAKD,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAC,iBAAiB,EAAC,KAAK,EAAC,qBAAqB,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,SAAE,EAAC,SAAS,SAAE,GAAE,IAAI,CAKnI;AACD,wBAAgB,eAAe,CAAC,IAAI,EAAC,iBAAiB,EAAC,OAAO,EAAC,iBAAiB,EAAC,KAAK,EAAC,qBAAqB,EAAC,MAAM,EAAC,kBAAkB,GAAE,iBAAiB,CASxJ"}

package/dist/execution/child-grants.js

@@ -0,0 +1,55 @@
+import { canonicalJson } from '../approvals/index.js';
+import { shape, uuid, hex, identifier, invalid, validateExecutionManifest, accountLineage } from './authority.js';
+import { ExecutionLimitError } from './types.js';
+export const MAX_CHILD_GRANT_BYTES = 32768;
+export function validateChildGrant(value) {
+    shape(value, ['version', 'id', 'proposalHash', 'previousGraphHash', 'planHash', 'runManifestHash', 'approvalRevision', 'parentId', 'accounts']);
+    if (value.version !== 1 || !uuid(value.id) || !uuid(value.approvalRevision) || ![value.proposalHash, value.previousGraphHash, value.planHash, value.runManifestHash].every(hex) || !Array.isArray(value.accounts) || !value.accounts.length || value.accounts.length > 16)
+        invalid();
+    identifier(value.parentId);
+    for (const account of value.accounts)
+        shape(account, ['id', 'parentId', 'tokenBudget', 'costBudgetNanos', 'deadline', 'allowedTools', 'allowedPaths']);
+    if (Buffer.byteLength(canonicalJson(value)) > MAX_CHILD_GRANT_BYTES)
+        throw new ExecutionLimitError('limit', 'Child grant exceeds its 32 KiB limit.');
+    return value;
+}
+/** Derived accounts never replace the original immutable budget manifest/hash. */
+export function effectiveExecutionManifest(base, state) {
+    return state.childGrants?.length ? validateExecutionManifest({ ...base, accounts: [...base.accounts, ...state.childGrants.flatMap(record => record.grant.accounts)] }) : base;
+}
+function ownSpend(manifest, state, agentId) {
+    const spent = state.accounts[agentId] ?? { tokens: 0, costNanos: 0 }, children = manifest.accounts.filter(a => a.parentId === agentId);
+    return { tokens: spent.tokens - children.reduce((n, a) => n + (state.accounts[a.id]?.tokens ?? 0), 0), costNanos: spent.costNanos - children.reduce((n, a) => n + (state.accounts[a.id]?.costNanos ?? 0), 0) };
+}
+/** Once children are granted, their remaining capacity cannot be borrowed by their parent. */
+export function assertChildCapacity(manifest, state, agentId, tokens = 0, costNanos = 0) {
+    const account = accountLineage(manifest, agentId)[0], spent = ownSpend(manifest, state, agentId), children = manifest.accounts.filter(a => a.parentId === agentId);
+    if (spent.tokens < 0 || spent.costNanos < 0)
+        invalid();
+    if (spent.tokens + tokens + children.reduce((n, a) => n + a.tokenBudget, 0) > account.tokenBudget || spent.costNanos + costNanos + children.reduce((n, a) => n + a.costBudgetNanos, 0) > account.costBudgetNanos)
+        throw new ExecutionLimitError('budget', 'Child grants and charged parent work exceed remaining capacity.');
+}
+export function applyChildGrant(base, current, state, record) {
+    const grant = validateChildGrant(record.grant), previous = state.childGrants?.at(-1)?.grant.planHash ?? base.planHash;
+    if (state.exceeded || state.childGrants?.some(r => r.grant.id === grant.id || r.grant.proposalHash === grant.proposalHash) || grant.previousGraphHash !== previous || grant.planHash === previous)
+        throw new ExecutionLimitError('conflict', 'Child grant is stale, duplicated or follows a budget violation.');
+    if (!current.accounts.some(a => a.id === grant.parentId) || grant.accounts.some(a => a.parentId === null || current.accounts.some(old => old.id === a.id)))
+        invalid();
+    const next = validateExecutionManifest({ ...current, accounts: [...current.accounts, ...grant.accounts] });
+    for (const account of grant.accounts) {
+        const lineage = accountLineage(next, account.id);
+        if (!lineage.slice(1).some(a => a.id === grant.parentId))
+            invalid();
+        if (record.at >= Math.min(...lineage.map(a => a.deadline)))
+            throw new ExecutionLimitError('deadline', 'Original parent or child deadline expired before allocation.');
+    }
+    for (const account of next.accounts)
+        assertChildCapacity(next, state, account.id);
+    for (const account of grant.accounts)
+        Object.defineProperty(state.accounts, account.id, { value: { tokens: 0, costNanos: 0 }, enumerable: true });
+    (state.childGrants ??= []).push(structuredClone(record));
+    if (state.version < 2)
+        state.version = 2;
+    return next;
+}
+//# sourceMappingURL=child-grants.js.map

package/dist/execution/child-grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-grants.js","sourceRoot":"","sources":["../../src/execution/child-grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,GAAG,EAAC,UAAU,EAAC,OAAO,EAAC,yBAAyB,EAAC,cAAc,EAAC,MAAM,gBAAgB,CAAC;AAC1G,OAAO,EAAC,mBAAmB,EAA2F,MAAM,YAAY,CAAC;AAEzI,MAAM,CAAC,MAAM,qBAAqB,GAAC,KAAK,CAAC;AACzC,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,IAAI,EAAC,cAAc,EAAC,mBAAmB,EAAC,UAAU,EAAC,iBAAiB,EAAC,kBAAkB,EAAC,UAAU,EAAC,UAAU,CAAC,CAAC,CAAC;IACvI,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,IAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,iBAAiB,EAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAC,EAAE;QAAC,OAAO,EAAE,CAAC;IAAA,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3R,KAAI,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ;QAAC,KAAK,CAAC,OAAO,EAAC,CAAC,IAAI,EAAC,UAAU,EAAC,aAAa,EAAC,iBAAiB,EAAC,UAAU,EAAC,cAAc,EAAC,cAAc,CAAC,CAAC,CAAC;IAC9I,IAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,GAAC,qBAAqB;QAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAC,uCAAuC,CAAC,CAAC;IAAA,OAAO,KAA8B,CAAC;AACxL,CAAC;AACD,kFAAkF;AAClF,MAAM,UAAU,0BAA0B,CAAC,IAAsB,EAAC,KAA2B;IAC3F,OAAO,KAAK,CAAC,WAAW,EAAE,MAAM,CAAA,CAAC,CAAA,yBAAyB,CAAC,EAAC,GAAG,IAAI,EAAC,QAAQ,EAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;AACrK,CAAC;AACD,SAAS,QAAQ,CAAC,QAA0B,EAAC,KAA2B,EAAC,OAAc;IACrF,MAAM,KAAK,GAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAE,EAAC,MAAM,EAAC,CAAC,EAAC,SAAS,EAAC,CAAC,EAAC,EAAC,QAAQ,GAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,OAAO,CAAC,CAAC;IACvH,OAAM,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,GAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,GAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,IAAE,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,SAAS,EAAC,KAAK,CAAC,SAAS,GAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,GAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,IAAE,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,CAAC;AACvL,CAAC;AACD,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,QAA0B,EAAC,KAA2B,EAAC,OAAc,EAAC,MAAM,GAAC,CAAC,EAAC,SAAS,GAAC,CAAC;IAC5H,MAAM,OAAO,GAAC,cAAc,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,CAAC,CAAE,EAAC,KAAK,GAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,EAAC,OAAO,CAAC,EAAC,QAAQ,GAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,OAAO,CAAC,CAAC;IACrJ,IAAG,KAAK,CAAC,MAAM,GAAC,CAAC,IAAE,KAAK,CAAC,SAAS,GAAC,CAAC;QAAC,OAAO,EAAE,CAAC;IAC/C,IAAG,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,GAAC,CAAC,CAAC,WAAW,EAAC,CAAC,CAAC,GAAC,OAAO,CAAC,WAAW,IAAE,KAAK,CAAC,SAAS,GAAC,SAAS,GAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,GAAC,CAAC,CAAC,eAAe,EAAC,CAAC,CAAC,GAAC,OAAO,CAAC,eAAe;QACnL,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,iEAAiE,CAAC,CAAC;AAC9G,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,IAAsB,EAAC,OAAyB,EAAC,KAA2B,EAAC,MAAyB;IACpI,MAAM,KAAK,GAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,QAAQ,GAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAE,IAAI,CAAC,QAAQ,CAAC;IAC/G,IAAG,KAAK,CAAC,QAAQ,IAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,CAAC,EAAE,KAAG,KAAK,CAAC,EAAE,IAAE,CAAC,CAAC,KAAK,CAAC,YAAY,KAAG,KAAK,CAAC,YAAY,CAAC,IAAE,KAAK,CAAC,iBAAiB,KAAG,QAAQ,IAAE,KAAK,CAAC,QAAQ,KAAG,QAAQ;QAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,iEAAiE,CAAC,CAAC;IAC3R,IAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,KAAK,CAAC,QAAQ,CAAC,IAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,IAAI,IAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,GAAG,CAAC,EAAE,KAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,EAAE,CAAC;IACpJ,MAAM,IAAI,GAAC,yBAAyB,CAAC,EAAC,GAAG,OAAO,EAAC,QAAQ,EAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;IACpG,KAAI,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAC,CAAC;QAAA,MAAM,OAAO,GAAC,cAAc,CAAC,IAAI,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAA,IAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,KAAK,CAAC,QAAQ,CAAC;YAAC,OAAO,EAAE,CAAC;QAAA,IAAG,MAAM,CAAC,EAAE,IAAE,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,CAAC,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,8DAA8D,CAAC,CAAC;IAAA,CAAC;IACjT,KAAI,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;QAAC,mBAAmB,CAAC,IAAI,EAAC,KAAK,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,KAAI,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ;QAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,CAAC,EAAE,EAAC,EAAC,KAAK,EAAC,EAAC,MAAM,EAAC,CAAC,EAAC,SAAS,EAAC,CAAC,EAAC,EAAC,UAAU,EAAC,IAAI,EAAC,CAAC,CAAC;IACpI,CAAC,KAAK,CAAC,WAAW,KAAG,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAAA,IAAG,KAAK,CAAC,OAAO,GAAC,CAAC;QAAC,KAAK,CAAC,OAAO,GAAC,CAAC,CAAC;IAAA,OAAO,IAAI,CAAC;AACxG,CAAC"}

package/dist/execution/files.d.ts

@@ -0,0 +1,6 @@
+import type { FsDelegate } from '../tools.js';
+import type { ExecutionGuard } from './guard.js';
+import type { ToolCall } from '../types.js';
+/** One delegate per tool call: edits bind to the bytes read during that call. */
+export declare function agentFiles(guard: ExecutionGuard, agentId: string, call: ToolCall, signal?: AbortSignal): FsDelegate;
+//# sourceMappingURL=files.d.ts.map

package/dist/execution/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/execution/files.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG5C,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,KAAK,EAAC,cAAc,EAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,UAAU,CA0D3G"}