@calliopelabs/cli 3.1.0 → 3.2.0

package/dist/execution/files.js

@@ -0,0 +1,159 @@
+import * as fs from 'node:fs';
+import { dirname, join, relative } from 'node:path';
+import { randomUUID, createHash } from 'node:crypto';
+import { canonicalPath } from '../approvals/index.js';
+import { throwIfCancelled } from '../cancellation.js';
+import { accountLineage, permits } from './authority.js';
+import { ExecutionLimitError } from './types.js';
+const MAX_FILE_BYTES = 1024 * 1024;
+/** One delegate per tool call: edits bind to the bytes read during that call. */
+export function agentFiles(guard, agentId, call, signal) {
+    const snapshots = new Map();
+    const check = (file) => {
+        throwIfCancelled(signal);
+        const reason = guard.check({ id: 'agent-file', name: call.name, arguments: { path: file } });
+        if (reason)
+            throw new ExecutionLimitError('authority', reason);
+    };
+    const read = (file) => {
+        file = guard.filePath(file);
+        let fd;
+        try {
+            fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return null;
+            throw error;
+        }
+        try {
+            const stat = fs.fstatSync(fd);
+            if (!stat.isFile() || stat.size > MAX_FILE_BYTES)
+                throw new ExecutionLimitError('authority', 'Agent file must be a regular file no larger than 1 MiB.');
+            const buffer = Buffer.alloc(stat.size + 1);
+            let size = 0, n;
+            while (size < buffer.length && (n = fs.readSync(fd, buffer, size, buffer.length - size, null)) > 0)
+                size += n;
+            if (size !== stat.size)
+                throw new ExecutionLimitError('conflict', 'File changed during the read.');
+            return { content: buffer.subarray(0, size).toString('utf8'), hash: createHash('sha256').update(buffer.subarray(0, size)).digest('hex'), mode: stat.mode & 0o777 };
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    };
+    return {
+        readTextFile: async (file) => { guard.assertActive(signal); check(file); const value = read(file); snapshots.set(file, value ? { hash: value.hash, mode: value.mode } : null); if (!value)
+            throw new Error('File not found.'); check(file); return value.content; },
+        writeTextFile: async (file, content) => {
+            guard.assertActive(signal);
+            check(file);
+            if (Buffer.byteLength(content) > MAX_FILE_BYTES)
+                throw new ExecutionLimitError('limit', 'Agent file output exceeds 1 MiB.');
+            const expected = snapshots.get(file);
+            const physical = guard.filePath(file);
+            // Creation tasks intentionally omit read_file from the admitted tool set.
+            // Permit an un-snapshotted write only when the target is still absent;
+            // existing files retain the read-before-write requirement.
+            if (expected === undefined) {
+                let present = false;
+                try {
+                    present = fs.lstatSync(physical).isFile();
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT')
+                        throw error;
+                }
+                if (present)
+                    throw new ExecutionLimitError('conflict', 'Agent writes require a preceding file snapshot.');
+                snapshots.set(file, null);
+            }
+            const parent = dirname(physical), missing = [];
+            let dir = parent;
+            while (!fs.existsSync(dir)) {
+                missing.push(dir);
+                const next = dirname(dir);
+                if (next === dir || missing.length > 64)
+                    throw new ExecutionLimitError('authority', 'Parent directory is outside the bounded write scope.');
+                dir = next;
+            }
+            const account = accountLineage(guard.manifest, agentId)[0];
+            for (const path of missing.reverse()) {
+                if (!permits(account.allowedPaths, relative(guard.filesRoot, path), 'write') || canonicalPath(path) !== path)
+                    throw new ExecutionLimitError('authority', 'Creating a parent directory exceeds the agent write grant.');
+                check(file);
+                fs.mkdirSync(path, { mode: 0o700 });
+            }
+            const before = fs.statSync(parent), temp = join(parent, `.calliope-${randomUUID()}.tmp`);
+            try {
+                const current = read(file);
+                if ((current?.hash ?? null) !== (expected?.hash ?? null))
+                    throw new ExecutionLimitError('conflict', 'File changed after the agent read it; refresh before editing.');
+                const fd = fs.openSync(temp, 'wx', expected?.mode ?? 0o600);
+                try {
+                    fs.writeFileSync(fd, content);
+                    fs.fsyncSync(fd);
+                }
+                finally {
+                    fs.closeSync(fd);
+                }
+                guard.assertActive(signal);
+                check(file);
+                const after = fs.statSync(parent);
+                if (before.ino !== after.ino || before.dev !== after.dev)
+                    throw new ExecutionLimitError('conflict', 'Parent directory changed before file commit.');
+                const latest = read(file);
+                if ((latest?.hash ?? null) !== (expected?.hash ?? null))
+                    throw new ExecutionLimitError('conflict', 'File changed before commit.');
+                fs.renameSync(temp, physical);
+                const directory = fs.openSync(parent, 'r');
+                try {
+                    fs.fsyncSync(directory);
+                }
+                finally {
+                    fs.closeSync(directory);
+                }
+            }
+            finally {
+                try {
+                    const after = fs.statSync(parent);
+                    if (canonicalPath(parent) === parent && after.ino === before.ino && after.dev === before.dev)
+                        fs.unlinkSync(temp);
+                }
+                catch { /* Committed or replaced. */ }
+            }
+        },
+        listFiles: async (file, recursive) => {
+            guard.assertActive(signal);
+            const output = [];
+            let count = 0;
+            const walk = (dir, depth) => {
+                check(dir);
+                if (depth > 5 || count >= 1000)
+                    return;
+                const handle = fs.opendirSync(guard.filePath(dir));
+                try {
+                    let entry;
+                    while (count < 1000 && (entry = handle.readSync())) {
+                        throwIfCancelled(signal);
+                        if (Date.now() >= guard.deadline)
+                            throw new ExecutionLimitError('deadline', 'Agent deadline expired.');
+                        count++;
+                        const path = join(dir, entry.name);
+                        output.push(`${entry.isDirectory() ? '📁 ' : '📄 '}${relative(file, path)}`);
+                        if (recursive && entry.isDirectory() && !entry.isSymbolicLink() && !entry.name.startsWith('.'))
+                            walk(path, depth + 1);
+                    }
+                }
+                finally {
+                    handle.closeSync();
+                }
+            };
+            walk(file, 0);
+            if (count >= 1000)
+                output.push('[Listing limited to 1,000 entries.]');
+            return output.join('\n') || '(empty directory)';
+        },
+    };
+}
+//# sourceMappingURL=files.js.map

package/dist/execution/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/execution/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGjD,MAAM,cAAc,GAAC,IAAI,GAAC,IAAI,CAAC;AAC/B,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,KAAoB,EAAC,OAAc,EAAC,IAAa,EAAC,MAAmB;IAC9F,MAAM,SAAS,GAAC,IAAI,GAAG,EAAyC,CAAC;IACjE,MAAM,KAAK,GAAC,CAAC,IAAW,EAAC,EAAE;QACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,MAAM,GAAC,KAAK,CAAC,KAAK,CAAC,EAAC,EAAE,EAAC,YAAY,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,EAAC,SAAS,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,EAAC,CAAC,CAAC;QACjF,IAAG,MAAM;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,MAAM,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,IAAI,GAAC,CAAC,IAAW,EAA+C,EAAE;QACtE,IAAI,GAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,EAAS,CAAC;QAAA,IAAG,CAAC;YAAA,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,OAAO,IAAI,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;QACxM,IAAG,CAAC;YAAA,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,cAAc;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,yDAAyD,CAAC,CAAC;YAC/K,MAAM,MAAM,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAC,CAAC,CAAC,CAAC;YAAA,IAAI,IAAI,GAAC,CAAC,EAAC,CAAQ,CAAC;YAAA,OAAM,IAAI,GAAC,MAAM,CAAC,MAAM,IAAE,CAAC,CAAC,GAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,CAAC,MAAM,GAAC,IAAI,EAAC,IAAI,CAAC,CAAC,GAAC,CAAC;gBAAC,IAAI,IAAE,CAAC,CAAC;YACvJ,IAAG,IAAI,KAAG,IAAI,CAAC,IAAI;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,+BAA+B,CAAC,CAAC;YAAA,OAAO,EAAC,OAAO,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,GAAC,KAAK,EAAC,CAAC;QACvP,CAAC;gBAAO,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAA,CAAC;IAC7B,CAAC,CAAC;IACF,OAAO;QACL,YAAY,EAAC,KAAK,EAAC,IAAI,EAAA,EAAE,GAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,MAAM,KAAK,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,SAAS,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAA,CAAC,CAAA,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,IAAG,CAAC,KAAK;YAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,OAAO,KAAK,CAAC,OAAO,CAAC,CAAA,CAAC;QACxO,aAAa,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,EAAE;YACjC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,CAAC;YAAA,IAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAC,cAAc;gBAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAC,kCAAkC,CAAC,CAAC;YAC9J,MAAM,QAAQ,GAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,0EAA0E;YAC1E,uEAAuE;YACvE,2DAA2D;YAC3D,IAAG,QAAQ,KAAG,SAAS,EAAC,CAAC;gBACvB,IAAI,OAAO,GAAC,KAAK,CAAC;gBAAA,IAAG,CAAC;oBAAA,OAAO,GAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;gBAAA,CAAC;gBAAA,OAAM,KAAK,EAAC,CAAC;oBAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;wBAAC,MAAM,KAAK,CAAC;gBAAA,CAAC;gBAC7I,IAAG,OAAO;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,iDAAiD,CAAC,CAAC;gBACvG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,OAAO,GAAU,EAAE,CAAC;YAAA,IAAI,GAAG,GAAC,MAAM,CAAC;YAClE,OAAM,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAC,CAAC;gBAAA,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAA,MAAM,IAAI,GAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,IAAI,KAAG,GAAG,IAAE,OAAO,CAAC,MAAM,GAAC,EAAE;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,sDAAsD,CAAC,CAAC;gBAAA,GAAG,GAAC,IAAI,CAAC;YAAA,CAAC;YAClN,MAAM,OAAO,GAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;YACzD,KAAI,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,EAAC,CAAC;gBACnC,IAAG,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC,EAAC,OAAO,CAAC,IAAE,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,4DAA4D,CAAC,CAAC;gBAC7M,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAA,EAAE,CAAC,SAAS,CAAC,IAAI,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,MAAM,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,MAAM,EAAC,aAAa,UAAU,EAAE,MAAM,CAAC,CAAC;YACnF,IAAG,CAAC;gBACF,MAAM,OAAO,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,IAAG,CAAC,OAAO,EAAE,IAAI,IAAE,IAAI,CAAC,KAAG,CAAC,QAAQ,EAAE,IAAI,IAAE,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,+DAA+D,CAAC,CAAC;gBACrL,MAAM,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,QAAQ,EAAE,IAAI,IAAE,KAAK,CAAC,CAAC;gBAAA,IAAG,CAAC;oBAAA,EAAE,CAAC,aAAa,CAAC,EAAE,EAAC,OAAO,CAAC,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAA,CAAC;gBACnI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAAA,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAA,MAAM,KAAK,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAA,IAAG,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG,IAAE,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,8CAA8C,CAAC,CAAC;gBAClN,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,IAAG,CAAC,MAAM,EAAE,IAAI,IAAE,IAAI,CAAC,KAAG,CAAC,QAAQ,EAAE,IAAI,IAAE,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;gBACjJ,EAAE,CAAC,UAAU,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC;gBAAA,MAAM,SAAS,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAA,CAAC;YACrI,CAAC;oBAAO,CAAC;gBAAA,IAAG,CAAC;oBAAA,MAAM,KAAK,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAAA,IAAG,aAAa,CAAC,MAAM,CAAC,KAAG,MAAM,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG;wBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,4BAA4B,CAAA,CAAC;YAAA,CAAC;QAC1L,CAAC;QACD,SAAS,EAAC,KAAK,EAAC,IAAI,EAAC,SAAS,EAAC,EAAE;YAC/B,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAU,EAAE,CAAC;YAAA,IAAI,KAAK,GAAC,CAAC,CAAC;YACrC,MAAM,IAAI,GAAC,CAAC,GAAU,EAAC,KAAY,EAAC,EAAE;gBACpC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,KAAK,GAAC,CAAC,IAAE,KAAK,IAAE,IAAI;oBAAC,OAAO;gBAAA,MAAM,MAAM,GAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3F,IAAG,CAAC;oBAAA,IAAI,KAAoB,CAAC;oBAAA,OAAM,KAAK,GAAC,IAAI,IAAE,CAAC,KAAK,GAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAC,CAAC;wBAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC;wBAAA,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,KAAK,CAAC,QAAQ;4BAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,yBAAyB,CAAC,CAAC;wBAAA,KAAK,EAAE,CAAC;wBAC3M,MAAM,IAAI,GAAC,IAAI,CAAC,GAAG,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAAA,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACxG,IAAG,SAAS,IAAE,KAAK,CAAC,WAAW,EAAE,IAAE,CAAC,KAAK,CAAC,cAAc,EAAE,IAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;4BAAC,IAAI,CAAC,IAAI,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;oBAC7G,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAA,CAAC;YAChC,CAAC,CAAC;YACF,IAAI,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC;YAAA,IAAG,KAAK,IAAE,IAAI;gBAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAAA,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,mBAAmB,CAAC;QAC/H,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/execution/guard.d.ts

@@ -0,0 +1,50 @@
+import type { Tool, ToolCall, Message } from '../types.js';
+import type { RouteCandidate } from '../routing/index.js';
+import type { ProviderAttemptBudget } from '../providers/types.js';
+import { ReservationLedger } from './ledger.js';
+import { type ExecutionManifest } from './types.js';
+import { type BrainToolContext } from '../brain/tools.js';
+import { type RequestAttribution } from './attribution.js';
+export interface AgentExecution {
+    ledger: ReservationLedger;
+    manifestHash: string;
+    agentId: string;
+    maxOutputTokens: number;
+    measuredInputReservation?: boolean;
+    attribution?: RequestAttribution;
+    /** Trusted coordinator ownership/revocation check; may only narrow authority. */
+    assertAuthority?: () => void;
+    /** Supplied by the coordinator; policy and money remain bound to the source project. */
+    workspace?: {
+        filesRoot: string;
+        assertIdentity: () => void;
+    };
+}
+export declare class ExecutionGuard {
+    private readonly cwd;
+    readonly manifest: ExecutionManifest;
+    readonly deadline: number;
+    private readonly expectedHash;
+    private readonly agentId;
+    private readonly ledger;
+    readonly maxOutputTokens: number;
+    private readonly assertAuthority?;
+    readonly filesRoot: string;
+    private readonly workspace?;
+    private readonly attribution?;
+    private readonly measuredInputReservation;
+    constructor(execution: AgentExecution, cwd: string);
+    check: (call: ToolCall, cwd?: string) => string | undefined;
+    filePath(file: string): string;
+    tools(tools: Tool[]): Tool[];
+    brainContext(): BrainToolContext;
+    assertActive(signal?: AbortSignal): void;
+    budget(route: RouteCandidate | undefined, messages: Message[], tools: Tool[], streaming: boolean, signal?: AbortSignal, onEvent?: (event: {
+        requestId: string;
+        stage: string;
+        revision: string;
+        tokens: number;
+        costNanos: number;
+    }) => void): ProviderAttemptBudget;
+}
+//# sourceMappingURL=guard.d.ts.map

package/dist/execution/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/execution/guard.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAGnE,OAAO,EAAE,iBAAiB,EAAoB,MAAM,aAAa,CAAC;AAClE,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAKzE,OAAO,EAA8B,KAAK,gBAAgB,EAAC,MAAM,mBAAmB,CAAC;AAErF,OAAO,EAA4B,KAAK,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,iBAAiB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAC1F,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,WAAW,CAAC,EAAC,kBAAkB,CAAC;IAChC,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B,wFAAwF;IACxF,SAAS,CAAC,EAAE;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAI,IAAI,CAAA;KAAC,CAAC;CACxD;AACD,qBAAa,cAAc;IAYY,OAAO,CAAC,QAAQ,CAAC,GAAG;IAXzD,QAAQ,CAAC,QAAQ,EAAC,iBAAiB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAC,MAAM,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,QAAQ,CAAC,eAAe,EAAC,MAAM,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAU;IAC3C,QAAQ,CAAC,SAAS,EAAC,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAS;IAClD,YAAY,SAAS,EAAC,cAAc,EAAkB,GAAG,EAAC,MAAM,EAW/D;IACD,KAAK,SAAQ,QAAQ,mBAAe,MAAM,GAAC,SAAS,CAMlD;IACF,QAAQ,CAAC,IAAI,EAAC,MAAM,GAAE,MAAM,CAK3B;IACD,KAAK,CAAC,KAAK,EAAC,IAAI,EAAE,GAAE,IAAI,EAAE,CAGzB;IACD,YAAY,IAAG,gBAAgB,CAO9B;IACD,YAAY,CAAC,MAAM,CAAC,EAAC,WAAW,GAAE,IAAI,CAQrC;IACD,MAAM,CAAC,KAAK,EAAC,cAAc,GAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,EAAC,KAAK,EAAC,IAAI,EAAE,EAAC,SAAS,EAAC,OAAO,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,EAAC,CAAC,KAAK,EAAC;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,KAAK,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,KAAG,IAAI,GAAE,qBAAqB,CAmCvO;CACF"}

package/dist/execution/guard.js

@@ -0,0 +1,158 @@
+import { randomUUID } from 'node:crypto';
+import { dirname, relative, resolve, isAbsolute } from 'node:path';
+import { canonicalPath } from '../approvals/index.js';
+import { throwIfCancelled } from '../cancellation.js';
+import { executionToolDenial, executionPathDenial, accountLineage, checkExecutionIdentity, integer, assertExecutionStoreOutsideProject } from './authority.js';
+import { requestCostNanos } from './ledger.js';
+import { ExecutionLimitError } from './types.js';
+import { getBudgetCaps, projectBudgetPath } from '../budget.js';
+import { ProjectSpendLedger } from './project-spend.js';
+import { providerQuote, costCapNanos } from './quote.js';
+import { effectiveExecutionManifest } from './child-grants.js';
+import { BRAIN_TOOLS, BRAIN_TOOL_NAMES } from '../brain/tools.js';
+import { readBillingEvidence } from './billing.js';
+import { validateRequestAttribution } from './attribution.js';
+export class ExecutionGuard {
+    cwd;
+    manifest;
+    deadline;
+    expectedHash;
+    agentId;
+    ledger;
+    maxOutputTokens;
+    assertAuthority;
+    filesRoot;
+    workspace;
+    attribution;
+    measuredInputReservation;
+    constructor(execution, cwd) {
+        this.cwd = cwd;
+        this.attribution = execution.attribution === undefined ? undefined : validateRequestAttribution(execution.attribution);
+        this.measuredInputReservation = execution.measuredInputReservation === true;
+        this.assertAuthority = execution.assertAuthority;
+        this.assertAuthority?.();
+        this.workspace = execution.workspace;
+        this.workspace?.assertIdentity();
+        const saved = execution.ledger.read(cwd);
+        assertExecutionStoreOutsideProject(saved.manifest.project.root, dirname(execution.ledger.root));
+        if (saved.projection.manifestHash !== execution.manifestHash)
+            throw new ExecutionLimitError('conflict', 'Execution contract does not match the budget ledger.');
+        const effective = effectiveExecutionManifest(saved.manifest, saved.projection), agent = accountLineage(effective, execution.agentId)[0];
+        integer(execution.maxOutputTokens, 1, 100000000);
+        this.manifest = effective;
+        this.expectedHash = execution.manifestHash;
+        this.agentId = agent.id;
+        this.ledger = execution.ledger;
+        this.maxOutputTokens = execution.maxOutputTokens;
+        this.deadline = Math.min(saved.manifest.deadline, agent.deadline);
+        this.filesRoot = this.workspace?.filesRoot ?? this.manifest.project.root;
+        if (this.workspace)
+            assertExecutionStoreOutsideProject(this.manifest.project.root, this.filesRoot);
+    }
+    check = (call, cwd = this.cwd) => {
+        this.assertAuthority?.();
+        this.workspace?.assertIdentity();
+        if (this.workspace && call.name === 'shell')
+            return 'Isolated workers cannot issue model-selected shell commands; use the declared coordinator verifier.';
+        const denial = executionToolDenial(this.manifest, this.agentId, call, cwd);
+        if (denial || !this.workspace)
+            return denial;
+        if (['read_file', 'write_file', 'edit_file', 'list_files'].includes(call.name))
+            try {
+                this.filePath(resolve(cwd, String(call.arguments.path ?? '.')));
+            }
+            catch {
+                return 'Isolated file path is outside its workspace or aliases Git metadata.';
+            }
+        return undefined;
+    };
+    filePath(file) {
+        if (!this.workspace)
+            return file;
+        this.workspace.assertIdentity();
+        const rel = relative(this.manifest.project.root, file);
+        if (rel === '..' || rel.startsWith('../') || isAbsolute(rel) || rel.split('/').some(p => p.toLowerCase() === '.git'))
+            throw new ExecutionLimitError('authority', 'Isolated file path exceeds its project scope.');
+        const path = resolve(this.filesRoot, rel);
+        if (canonicalPath(path) !== path)
+            throw new ExecutionLimitError('authority', 'Isolated file path became an alias.');
+        return path;
+    }
+    tools(tools) {
+        const allowed = accountLineage(this.manifest, this.agentId)[0].allowedTools;
+        return [...tools.filter(t => !BRAIN_TOOL_NAMES.includes(t.name)), ...BRAIN_TOOLS].filter(tool => allowed.includes(tool.name) && ['think', 'ask_question', 'create_plan', 'read_file', 'write_file', 'edit_file', 'list_files', ...BRAIN_TOOL_NAMES].includes(tool.name));
+    }
+    brainContext() {
+        return { assertActive: signal => this.assertActive(signal), sourceDenial: source => {
+                const locator = source.locator;
+                if (locator.path && !locator.projectKey)
+                    return 'Knowledge file locator lacks a project binding.';
+                if (locator.projectKey && locator.projectKey !== this.manifest.project.key)
+                    return 'Knowledge source belongs to another project.';
+                return executionPathDenial(this.manifest, accountLineage(this.manifest, this.agentId)[0], locator.projectKey === this.manifest.project.key ? locator.path ?? '.' : '.', 'read');
+            } };
+    }
+    assertActive(signal) {
+        throwIfCancelled(signal);
+        this.assertAuthority?.();
+        this.workspace?.assertIdentity();
+        checkExecutionIdentity(this.manifest, this.cwd);
+        if (Date.now() >= this.deadline)
+            throw new ExecutionLimitError('deadline', 'Agent deadline expired.');
+        const saved = this.ledger.read(this.cwd);
+        if (saved.projection.manifestHash !== this.expectedHash)
+            throw new ExecutionLimitError('conflict', 'Execution contract changed.');
+        if (saved.projection.exceeded)
+            throw new ExecutionLimitError('budget', 'Provider usage exceeded its reservation; further execution is stopped.');
+        const project = new ProjectSpendLedger(projectBudgetPath(this.cwd)).read(), caps = getBudgetCaps();
+        if (project.blocked || caps.maxCostPerProject !== undefined && project.spentUsd > caps.maxCostPerProject || caps.maxTokensPerRun !== undefined && saved.projection.spent.tokens > caps.maxTokensPerRun || caps.maxCostPerRun !== undefined && saved.projection.spent.costNanos > costCapNanos(caps.maxCostPerRun))
+            throw new ExecutionLimitError('budget', 'Current project or run policy no longer permits execution.');
+    }
+    budget(route, messages, tools, streaming, signal, onEvent) {
+        this.assertActive(signal);
+        route = structuredClone(route);
+        const billing = readBillingEvidence(route, this.manifest.project.root);
+        const base = providerQuote(route, messages, tools, streaming, this.maxOutputTokens, billing, undefined, this.measuredInputReservation);
+        const projectLedger = new ProjectSpendLedger(projectBudgetPath(this.cwd));
+        return {
+            ...(base.provider === 'openrouter' ? { priceCeiling: Object.freeze({ input: base.inputPrice, output: base.outputPrice }) } : {}),
+            ...(billing?.profile.admission === 'provider-count-v1' ? { inputCounting: 'anthropic-count-tokens' } : {}),
+            reserve: async (actual) => {
+                this.assertActive(signal);
+                if (actual.provider !== base.provider || actual.model !== base.model || actual.target !== base.target || actual.maxOutputTokens !== base.outputTokens)
+                    throw new ExecutionLimitError('authority', 'Provider attempt does not match its discovered budget quote.');
+                if (base.provider === 'openrouter' && (actual.priceCeiling?.input !== base.inputPrice || actual.priceCeiling?.output !== base.outputPrice))
+                    throw new ExecutionLimitError('authority', 'Provider price ceiling changed after budget admission.');
+                if (billing && ((billing.profile.admission === 'provider-count-v1' && !actual.inputCount) || readBillingEvidence(route, this.manifest.project.root)?.hash !== billing.hash))
+                    throw new ExecutionLimitError('authority', 'Billing admission was revoked or omitted its count.');
+                const quote = providerQuote(route, messages, tools, streaming, this.maxOutputTokens, billing, actual.inputCount, this.measuredInputReservation);
+                const id = randomUUID(), caps = getBudgetCaps();
+                await projectLedger.reserve(id, this.manifest.runId, quote.costNanos, caps.maxCostPerProject === undefined ? Number.MAX_SAFE_INTEGER : costCapNanos(caps.maxCostPerProject), signal);
+                const limits = { ...(caps.maxTokensPerRun === undefined ? {} : { tokens: caps.maxTokensPerRun }), ...(caps.maxCostPerRun === undefined ? {} : { costNanos: costCapNanos(caps.maxCostPerRun) }) };
+                let state;
+                try {
+                    state = await this.ledger.reserve(this.cwd, this.expectedHash, { id, agentId: this.agentId, ...quote, limits, ...(this.attribution ? { attribution: this.attribution } : {}) }, signal);
+                }
+                catch (error) {
+                    await projectLedger.settle(id, 0);
+                    throw error;
+                }
+                onEvent?.({ requestId: id, stage: 'reserved', revision: state.revision, ...state.spent });
+                this.assertActive(signal);
+                if (billing && readBillingEvidence(route, this.manifest.project.root)?.hash !== billing.hash)
+                    throw new ExecutionLimitError('authority', 'Billing admission was revoked while committing its reservation.');
+                return id;
+            },
+            settle: async (id, outcome, usage) => {
+                const valid = !usage || [usage.inputTokens, usage.outputTokens].every(n => Number.isSafeInteger(n) && n >= 0 && n <= 100000000);
+                const state = await this.ledger.settle(this.cwd, this.expectedHash, { requestId: id, outcome: valid ? outcome : 'invalid-usage', ...(usage && valid ? { usage } : {}) });
+                const quote = state.requests[id].reservation;
+                await projectLedger.settle(id, outcome === 'success' && valid && usage ? requestCostNanos(usage.inputTokens, usage.outputTokens, quote.inputPrice, quote.outputPrice) : null, state.exceeded);
+                onEvent?.({ requestId: id, stage: state.requests[id].state, revision: state.revision, ...state.spent });
+                if (state.exceeded)
+                    throw new ExecutionLimitError('budget', 'Provider reported usage beyond the reserved bound; execution stopped.');
+            },
+        };
+    }
+}
+//# sourceMappingURL=guard.js.map

package/dist/execution/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/execution/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAC,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,UAAU,EAAC,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAIpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,sBAAsB,EAAE,OAAO,EAAC,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AAC9J,OAAO,EAAqB,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAA0B,MAAM,YAAY,CAAC;AACzE,OAAO,EAAC,aAAa,EAAC,iBAAiB,EAAC,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,aAAa,EAAC,YAAY,EAAC,MAAM,YAAY,CAAC;AACtD,OAAO,EAAC,0BAA0B,EAAC,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAC,WAAW,EAAC,gBAAgB,EAAuB,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAC,mBAAmB,EAAC,MAAM,cAAc,CAAC;AACjD,OAAO,EAAC,0BAA0B,EAAyB,MAAM,kBAAkB,CAAC;AAWpF,MAAM,OAAO,cAAc;IAY6B,GAAG;IAXhD,QAAQ,CAAmB;IAC3B,QAAQ,CAAQ;IACR,YAAY,CAAQ;IACpB,OAAO,CAAQ;IACf,MAAM,CAAmB;IACjC,eAAe,CAAQ;IACf,eAAe,CAAW;IAClC,SAAS,CAAQ;IACT,SAAS,CAA8B;IACvC,WAAW,CAAqB;IAChC,wBAAwB,CAAS;IAClD,YAAY,SAAwB,EAAkB,GAAU;mBAAV,GAAG;QACvD,IAAI,CAAC,WAAW,GAAC,SAAS,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,0BAA0B,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,wBAAwB,GAAC,SAAS,CAAC,wBAAwB,KAAG,IAAI,CAAC;QACxL,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,GAAC,SAAS,CAAC,SAAS,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5I,MAAM,KAAK,GAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,kCAAkC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/F,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,SAAS,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,sDAAsD,CAAC,CAAC;QAC3J,MAAM,SAAS,GAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,EAAC,KAAK,GAAC,cAAc,CAAC,SAAS,EAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;QAClI,OAAO,CAAC,SAAS,CAAC,eAAe,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;QAAA,IAAI,CAAC,QAAQ,GAAC,SAAS,CAAC;QAAA,IAAI,CAAC,YAAY,GAAC,SAAS,CAAC,YAAY,CAAC;QAAA,IAAI,CAAC,OAAO,GAAC,KAAK,CAAC,EAAE,CAAC;QAAA,IAAI,CAAC,MAAM,GAAC,SAAS,CAAC,MAAM,CAAC;QAAA,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAClN,IAAI,CAAC,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAC,IAAI,CAAC,SAAS,EAAE,SAAS,IAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACrE,IAAG,IAAI,CAAC,SAAS;YAAC,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,GAAE,CAAC,IAAa,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAmB,EAAE;QACrD,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC1D,IAAG,IAAI,CAAC,SAAS,IAAE,IAAI,CAAC,IAAI,KAAG,OAAO;YAAC,OAAO,qGAAqG,CAAC;QACpJ,MAAM,MAAM,GAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,EAAC,IAAI,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,MAAM,IAAE,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,MAAM,CAAC;QAC/G,IAAG,CAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAC,IAAG,CAAC;gBAAA,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,OAAO,sEAAsE,CAAC;YAAA,CAAC;QAClO,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,QAAQ,CAAC,IAAW;QAClB,IAAG,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,IAAI,CAAC;QAAA,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QACpD,IAAG,GAAG,KAAG,IAAI,IAAE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAE,UAAU,CAAC,GAAG,CAAC,IAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,WAAW,EAAE,KAAG,MAAM,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,+CAA+C,CAAC,CAAC;QACnM,MAAM,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qCAAqC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IACpK,CAAC;IACD,KAAK,CAAC,KAAY;QAChB,MAAM,OAAO,GAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC;QAC1E,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAuC,CAAC,CAAC,EAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAC,cAAc,EAAC,aAAa,EAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,EAAC,GAAG,gBAAgB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAClS,CAAC;IACD,YAAY;QACV,OAAO,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE,CAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE;gBAC1E,MAAM,OAAO,GAAC,MAAM,CAAC,OAAO,CAAC;gBAC7B,IAAG,OAAO,CAAC,IAAI,IAAE,CAAC,OAAO,CAAC,UAAU;oBAAC,OAAO,iDAAiD,CAAC;gBAC9F,IAAG,OAAO,CAAC,UAAU,IAAE,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG;oBAAC,OAAO,8CAA8C,CAAC;gBAC5H,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,EAAC,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAA,CAAC,CAAA,OAAO,CAAC,IAAI,IAAE,GAAG,CAAA,CAAC,CAAA,GAAG,EAAC,MAAM,CAAC,CAAC;YACvK,CAAC,EAAC,CAAC;IACL,CAAC;IACD,YAAY,CAAC,MAAmB;QAC9B,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAAA,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClI,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,IAAI,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,yBAAyB,CAAC,CAAC;QACjG,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAA,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;QACpK,IAAG,KAAK,CAAC,UAAU,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,wEAAwE,CAAC,CAAC;QAC9I,MAAM,OAAO,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;QAC9F,IAAG,OAAO,CAAC,OAAO,IAAE,IAAI,CAAC,iBAAiB,KAAG,SAAS,IAAE,OAAO,CAAC,QAAQ,GAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,eAAe,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,aAAa,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,GAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC;YAC1R,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,4DAA4D,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,CAAC,KAA8B,EAAC,QAAkB,EAAC,KAAY,EAAC,SAAiB,EAAC,MAAmB,EAAC,OAAqG;QAC/M,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,OAAO,GAAC,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjG,MAAM,IAAI,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,SAAS,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC9H,MAAM,aAAa,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAG,YAAY,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,MAAM,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAClH,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,KAAG,mBAAmB,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,wBAAiC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAC1G,OAAO,EAAC,KAAK,EAAC,MAAM,EAAA,EAAE;gBACpB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAE,MAAM,CAAC,KAAK,KAAG,IAAI,CAAC,KAAK,IAAE,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,MAAM,CAAC,eAAe,KAAG,IAAI,CAAC,YAAY;oBACpI,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,8DAA8D,CAAC,CAAC;gBAC5G,IAAG,IAAI,CAAC,QAAQ,KAAG,YAAY,IAAE,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,KAAG,IAAI,CAAC,UAAU,IAAE,MAAM,CAAC,YAAY,EAAE,MAAM,KAAG,IAAI,CAAC,WAAW,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,wDAAwD,CAAC,CAAC;gBACpO,IAAG,OAAO,IAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,KAAG,mBAAmB,IAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qDAAqD,CAAC,CAAC;gBACjQ,MAAM,KAAK,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,MAAM,CAAC,UAAU,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACvI,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;gBAC3C,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,EAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC,iBAAiB,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,gBAAgB,CAAA,CAAC,CAAA,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAC,MAAM,CAAC,CAAC;gBAC3K,MAAM,MAAM,GAAC,EAAC,GAAG,CAAC,IAAI,CAAC,eAAe,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,IAAI,CAAC,eAAe,EAAC,CAAC,EAAC,GAAG,CAAC,IAAI,CAAC,aAAa,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,EAAC,CAAC,EAAC,CAAC;gBAC1K,IAAI,KAAK,CAAC;gBACV,IAAG,CAAC;oBAAA,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,EAAC,GAAG,KAAK,EAAC,MAAM,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,EAAC,MAAM,CAAC,CAAC;gBAAA,CAAC;gBAC1K,OAAM,KAAK,EAAC,CAAC;oBAAA,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC;oBAAA,MAAM,KAAK,CAAC;gBAAA,CAAC;gBAC3D,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,UAAU,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBAClF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,OAAO,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,iEAAiE,CAAC,CAAC;gBACpM,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,EAAC,KAAK,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,EAAE;gBAC9B,MAAM,KAAK,GAAC,CAAC,KAAK,IAAE,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,SAAS,CAAC,CAAC;gBACjH,MAAM,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,SAAS,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,eAAe,EAAC,GAAG,CAAC,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,CAAA,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;gBACpJ,MAAM,KAAK,GAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,WAAW,CAAC;gBAC5C,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,OAAO,KAAG,SAAS,IAAE,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,UAAU,EAAC,KAAK,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC/K,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBACjG,IAAG,KAAK,CAAC,QAAQ;oBAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,uEAAuE,CAAC,CAAC;YACpI,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/execution/index.d.ts

@@ -0,0 +1,12 @@
+export * from './types.js';
+export * from './authority.js';
+export * from './ledger.js';
+export * from './guard.js';
+export * from './files.js';
+export * from './project-spend.js';
+export * from './quote.js';
+export * from './billing.js';
+export * from './child-grants.js';
+export * from './writer-recovery.js';
+export * from './attribution.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/execution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}

package/dist/execution/index.js

@@ -0,0 +1,12 @@
+export * from './types.js';
+export * from './authority.js';
+export * from './ledger.js';
+export * from './guard.js';
+export * from './files.js';
+export * from './project-spend.js';
+export * from './quote.js';
+export * from './billing.js';
+export * from './child-grants.js';
+export * from './writer-recovery.js';
+export * from './attribution.js';
+//# sourceMappingURL=index.js.map

package/dist/execution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}

package/dist/execution/ledger.d.ts

@@ -0,0 +1,23 @@
+import { type ExecutionManifest, type RequestReservation, type RequestSettlement, type ReservationEvent, type ReservationProjection, type ChildGrant } from './types.js';
+export declare const MAX_RESERVATION_EVENTS = 10000, MAX_RESERVATION_BYTES: number;
+export declare function requestCostNanos(input: number, output: number, inputPrice: number, outputPrice: number): number;
+/** Pure replay includes unresolved reservations in every ancestor's spend. */
+export declare function replayReservations(input: ExecutionManifest, events: ReservationEvent[]): ReservationProjection;
+export declare class ReservationLedger {
+    private readonly now;
+    readonly root: string;
+    constructor(root: string, now?: () => number);
+    /** Explicit creation only. A missing journal inside an existing directory never resets spend. */
+    create(input: ExecutionManifest, signal?: AbortSignal): ReservationProjection;
+    read(cwd: string): {
+        manifest: ExecutionManifest;
+        events: ReservationEvent[];
+        projection: ReservationProjection;
+    };
+    reserve(cwd: string, expectedManifest: string, value: RequestReservation, signal?: AbortSignal): Promise<ReservationProjection>;
+    grantChildren(cwd: string, expectedManifest: string, grant: ChildGrant, signal?: AbortSignal, beforeCommit?: () => void): Promise<ReservationProjection>;
+    /** Settlement is allowed after cancellation/deadline so known spend can still be recorded. */
+    settle(cwd: string, expectedManifest: string, value: RequestSettlement): Promise<ReservationProjection>;
+    private append;
+}
+//# sourceMappingURL=ledger.d.ts.map

package/dist/execution/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/execution/ledger.ts"],"names":[],"mappings":"AAOA,OAAO,EAAuB,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7L,eAAO,MAAM,sBAAsB,QAAQ,EAAE,qBAAqB,QAAmB,CAAC;AAEtF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAK/G;AA8BD,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,CA0C9G;AA+BD,qBAAa,iBAAiB;IAEJ,OAAO,CAAC,QAAQ,CAAC,GAAG;IAD5C,QAAQ,CAAC,IAAI,EAAC,MAAM,CAAC;IACrB,YAAY,IAAI,EAAC,MAAM,EAAkB,GAAG,eAAS,EAA2B;IAChF,iGAAiG;IACjG,MAAM,CAAC,KAAK,EAAC,iBAAiB,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,qBAAqB,CAUxE;IACD,IAAI,CAAC,GAAG,EAAC,MAAM,GAAE;QAAC,QAAQ,EAAC,iBAAiB,CAAC;QAAA,MAAM,EAAC,gBAAgB,EAAE,CAAC;QAAA,UAAU,EAAC,qBAAqB,CAAA;KAAC,CAGvG;IACK,OAAO,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,kBAAkB,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAE5H;IACK,aAAa,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,UAAU,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,YAAY,CAAC,EAAC,MAAI,IAAI,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAEjJ;IACD,8FAA8F;IACxF,MAAM,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,iBAAiB,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAEtG;YACa,MAAM;CAyBrB"}