@calliopelabs/cli 3.1.0 → 3.2.1

package/dist/execution/project-spend.js

@@ -0,0 +1,274 @@
+/** Shared project accounting at the existing budget path; all writers retain history. */
+import * as fs from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { canonicalJson, canonicalPath, digest } from '../approvals/index.js';
+import { cancellableDelay, throwIfCancelled } from '../cancellation.js';
+import { ExecutionLimitError } from './types.js';
+import { hex, integer, shape, uuid } from './authority.js';
+const MAX_EVENTS = 10000, MAX_BYTES = 8 * 1024 * 1024;
+const damaged = () => new ExecutionLimitError('unavailable', 'Project budget history is damaged or unavailable; no further request is authorized. Preserve it for recovery.');
+export function dollarsToNanos(value) { if (!Number.isFinite(value) || value < 0)
+    throw damaged(); const n = Math.ceil(value * 1e9); integer(n); return n; }
+function replay(events) {
+    if (events.length > MAX_EVENTS)
+        throw damaged();
+    const state = { spentNanos: 0, blocked: false, requests: new Map(), events };
+    let previous = null, lastAt = '';
+    const ids = new Set();
+    for (const event of events) {
+        shape(event, ['version', 'id', 'at', 'previous', 'change', 'hash']);
+        if (event.version !== 1 || !uuid(event.id) || ids.has(event.id) || typeof event.at !== 'string' || !Number.isFinite(Date.parse(event.at)) || event.at < lastAt || event.previous !== previous || !hex(event.hash))
+            throw damaged();
+        const { hash, ...body } = event;
+        if (digest(canonicalJson(body)) !== hash)
+            throw damaged();
+        ids.add(event.id);
+        previous = hash;
+        lastAt = event.at;
+        const change = event.change;
+        shape(change, ['type'], ['costNanos', 'requestId', 'runId', 'capNanos', 'invalid']);
+        if (change.type === 'import' || change.type === 'charge') {
+            shape(change, ['type', 'costNanos']);
+            integer(change.costNanos);
+            if (change.type === 'import' && state.events[0] !== event)
+                throw damaged();
+            state.spentNanos += change.costNanos;
+        }
+        else if (change.type === 'reserve') {
+            shape(change, ['type', 'requestId', 'runId', 'costNanos', 'capNanos']);
+            if (!uuid(change.requestId) || !uuid(change.runId) || state.requests.has(change.requestId))
+                throw damaged();
+            integer(change.costNanos);
+            integer(change.capNanos);
+            if (state.blocked || state.spentNanos + change.costNanos > change.capNanos)
+                throw new ExecutionLimitError('budget', 'Request reservation exceeds the shared project cost budget.');
+            state.spentNanos += change.costNanos;
+            state.requests.set(change.requestId, { costNanos: change.costNanos, settled: false });
+        }
+        else if (change.type === 'settle') {
+            shape(change, ['type', 'requestId', 'costNanos'], ['invalid']);
+            if (change.invalid !== undefined && change.invalid !== true)
+                throw damaged();
+            if (!uuid(change.requestId))
+                throw damaged();
+            if (change.costNanos !== null)
+                integer(change.costNanos);
+            const request = state.requests.get(change.requestId);
+            if (!request || request.settled)
+                throw new ExecutionLimitError('conflict', 'Project reservation is unknown or already settled.');
+            request.settled = true;
+            if (change.invalid)
+                state.blocked = true;
+            if (change.costNanos !== null) {
+                state.spentNanos += (change.invalid ? Math.max(change.costNanos, request.costNanos) : change.costNanos) - request.costNanos;
+                if (change.costNanos > request.costNanos)
+                    state.blocked = true;
+            }
+        }
+        else if (change.type === 'reset') {
+            shape(change, ['type']);
+            if ([...state.requests.values()].some(r => !r.settled))
+                throw new ExecutionLimitError('conflict', 'Pending project reservations cannot be reset.');
+            state.spentNanos = 0;
+            state.blocked = false;
+        }
+        else
+            throw damaged();
+        integer(state.spentNanos);
+    }
+    return state;
+}
+function readRaw(file) {
+    let fd;
+    try {
+        fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw damaged();
+    }
+    try {
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.mode & 0o022 || stat.size > MAX_BYTES)
+            throw damaged();
+        const buf = Buffer.alloc(stat.size + 1);
+        let size = 0, n;
+        while (size < buf.length && (n = fs.readSync(fd, buf, size, buf.length - size, null)) > 0)
+            size += n;
+        if (size !== stat.size)
+            throw damaged();
+        return buf.subarray(0, size).toString('utf8');
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+function parse(raw) {
+    if (raw === null)
+        return { state: replay([]), legacy: false };
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        throw damaged();
+    }
+    if (!value || typeof value !== 'object')
+        throw damaged();
+    if (!('version' in value)) {
+        shape(value, ['spentUsd', 'updatedAt']);
+        if (typeof value.spentUsd !== 'number' || typeof value.updatedAt !== 'string' || !Number.isFinite(Date.parse(value.updatedAt)))
+            throw damaged();
+        const costNanos = dollarsToNanos(value.spentUsd);
+        return { state: { spentNanos: costNanos, blocked: false, requests: new Map(), events: [], legacyUpdatedAt: value.updatedAt }, legacy: true };
+    }
+    const record = value;
+    shape(record, ['version', 'events', 'spentUsd', 'updatedAt']);
+    if (record.version !== 2 || !Array.isArray(record.events))
+        throw damaged();
+    const state = replay(record.events);
+    if (record.spentUsd !== state.spentNanos / 1e9 || record.updatedAt !== (state.events.at(-1)?.at ?? new Date(0).toISOString()))
+        throw damaged();
+    return { state, legacy: false };
+}
+function encode(state) {
+    const raw = JSON.stringify({ version: 2, events: state.events, spentUsd: state.spentNanos / 1e9, updatedAt: state.events.at(-1)?.at ?? new Date(0).toISOString() });
+    if (Buffer.byteLength(raw) > MAX_BYTES)
+        throw new ExecutionLimitError('limit', 'Project budget history reached its byte limit; preserve the history.');
+    return raw;
+}
+function event(events, change) { const body = { version: 1, id: randomUUID(), at: [new Date().toISOString(), events.at(-1)?.at ?? ''].sort().at(-1), previous: events.at(-1)?.hash ?? null, change }; return { ...body, hash: digest(canonicalJson(body)) }; }
+function directory(dir, create = false) {
+    if (canonicalPath(dir) !== dir)
+        throw damaged();
+    if (create)
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const stat = fs.lstatSync(dir);
+    if (!stat.isDirectory() || stat.isSymbolicLink() || stat.mode & 0o022)
+        throw damaged();
+    return stat;
+}
+function writeNew(file, raw) { const fd = fs.openSync(file, 'wx', 0o600); try {
+    fs.writeFileSync(fd, raw);
+    fs.fsyncSync(fd);
+}
+finally {
+    fs.closeSync(fd);
+} }
+function initialized(file) {
+    try {
+        const stat = fs.lstatSync(file);
+        if (!stat.isFile() || stat.isSymbolicLink() || stat.size !== 9)
+            throw damaged();
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw damaged();
+    }
+    if (readRaw(file) !== 'version=2')
+        throw damaged();
+    return true;
+}
+export class ProjectSpendLedger {
+    file;
+    constructor(file) { this.file = resolve(file); }
+    read() {
+        const dir = dirname(this.file);
+        if (canonicalPath(dir) !== dir)
+            throw damaged();
+        if (fs.existsSync(dir))
+            directory(dir);
+        const raw = readRaw(this.file), marked = initialized(this.file + '.initialized');
+        if (raw === null && marked)
+            throw damaged();
+        const { state } = parse(raw);
+        return { spentUsd: state.spentNanos / 1e9, updatedAt: state.events.at(-1)?.at ?? state.legacyUpdatedAt ?? new Date(0).toISOString(), blocked: state.blocked, events: state.events };
+    }
+    async reserve(requestId, runId, costNanos, capNanos, signal) { await this.updateAsync({ type: 'reserve', requestId, runId, costNanos, capNanos }, signal); }
+    async settle(requestId, costNanos, invalid = false) { await this.updateAsync({ type: 'settle', requestId, costNanos, ...(invalid ? { invalid: true } : {}) }); }
+    charge(cost) { return this.updateSync({ type: 'charge', costNanos: dollarsToNanos(cost) }).spentNanos / 1e9; }
+    reset() { this.updateSync({ type: 'reset' }); }
+    async updateAsync(change, signal) { for (let n = 0;; n++) {
+        throwIfCancelled(signal);
+        try {
+            this.update(change, signal);
+            return;
+        }
+        catch (error) {
+            if (!(error instanceof ExecutionLimitError) || error.code !== 'locked' || n >= 50)
+                throw error;
+            await cancellableDelay(10, signal);
+        }
+    } }
+    updateSync(change) { for (let n = 0;; n++) {
+        try {
+            return this.update(change);
+        }
+        catch (error) {
+            if (!(error instanceof ExecutionLimitError) || error.code !== 'locked' || n >= 50)
+                throw error;
+            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 10);
+        }
+    } }
+    update(change, signal) {
+        throwIfCancelled(signal);
+        const dir = dirname(this.file), before = directory(dir, true), lock = this.file + '.lock', marker = this.file + '.initialized';
+        let fd;
+        try {
+            fd = fs.openSync(lock, 'wx', 0o600);
+        }
+        catch (error) {
+            if (error.code === 'EEXIST')
+                throw new ExecutionLimitError('locked', 'Project budget has another writer.');
+            throw damaged();
+        }
+        const identity = fs.fstatSync(fd), temp = join(dir, `${randomUUID()}.tmp`);
+        try {
+            fs.writeFileSync(fd, String(process.pid));
+            const raw = readRaw(this.file), marked = initialized(marker);
+            if (raw === null && marked)
+                throw damaged();
+            const prior = parse(raw);
+            let events = prior.state.events;
+            if (prior.legacy)
+                events = [event([], { type: 'import', costNanos: prior.state.spentNanos })];
+            const pending = [...prior.state.requests.values()].filter(r => !r.settled).length;
+            if (events.length + (change.type === 'reserve' ? pending + 2 : 1) > MAX_EVENTS)
+                throw new ExecutionLimitError('limit', 'Project budget history reached its event limit; pending reservations remain charged.');
+            const next = replay([...events, event(events, change)]), output = encode(next);
+            writeNew(temp, output);
+            throwIfCancelled(signal);
+            const after = directory(dir);
+            if (before.dev !== after.dev || before.ino !== after.ino || readRaw(this.file) !== raw)
+                throw new ExecutionLimitError('conflict', 'Project budget changed before commit.');
+            if (!marked)
+                writeNew(marker, 'version=2');
+            fs.renameSync(temp, this.file);
+            const directoryFd = fs.openSync(dir, 'r');
+            try {
+                fs.fsyncSync(directoryFd);
+            }
+            finally {
+                fs.closeSync(directoryFd);
+            }
+            return next;
+        }
+        finally {
+            fs.closeSync(fd);
+            try {
+                const after = directory(dir);
+                if (before.dev === after.dev && before.ino === after.ino) {
+                    fs.rmSync(temp, { force: true });
+                    const lockStat = fs.lstatSync(lock);
+                    if (lockStat.dev === identity.dev && lockStat.ino === identity.ino)
+                        fs.unlinkSync(lock);
+                }
+            }
+            catch { /* Preserve foreign or damaged directories. */ }
+        }
+    }
+}
+//# sourceMappingURL=project-spend.js.map

package/dist/execution/project-spend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-spend.js","sourceRoot":"","sources":["../../src/execution/project-spend.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,aAAa,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAC,gBAAgB,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAC,mBAAmB,EAAC,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAC,GAAG,EAAC,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,gBAAgB,CAAC;AAKtD,MAAM,UAAU,GAAC,KAAK,EAAC,SAAS,GAAC,CAAC,GAAC,IAAI,GAAC,IAAI,CAAC;AAC7C,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,IAAI,mBAAmB,CAAC,aAAa,EAAC,+GAA+G,CAAC,CAAC;AACzK,MAAM,UAAU,cAAc,CAAC,KAAY,IAAU,IAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAE,KAAK,GAAC,CAAC;IAAC,MAAM,OAAO,EAAE,CAAC,CAAA,MAAM,CAAC,GAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAC,GAAG,CAAC,CAAC,CAAA,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA,OAAO,CAAC,CAAC,CAAA,CAAC;AAC3J,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAG,MAAM,CAAC,MAAM,GAAC,UAAU;QAAC,MAAM,OAAO,EAAE,CAAC;IAAA,MAAM,KAAK,GAAO,EAAC,UAAU,EAAC,CAAC,EAAC,OAAO,EAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,GAAG,EAAE,EAAC,MAAM,EAAC,CAAC;IAAA,IAAI,QAAQ,GAAa,IAAI,EAAC,MAAM,GAAC,EAAE,CAAC;IAAA,MAAM,GAAG,GAAC,IAAI,GAAG,EAAU,CAAC;IACzL,KAAI,MAAM,KAAK,IAAI,MAAM,EAAC,CAAC;QACzB,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,UAAU,EAAC,QAAQ,EAAC,MAAM,CAAC,CAAC,CAAC;QAAA,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,IAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,OAAO,KAAK,CAAC,EAAE,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAE,KAAK,CAAC,EAAE,GAAC,MAAM,IAAE,KAAK,CAAC,QAAQ,KAAG,QAAQ,IAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAC,MAAM,OAAO,EAAE,CAAC;QACzQ,MAAM,EAAC,IAAI,EAAC,GAAG,IAAI,EAAC,GAAC,KAAK,CAAC;QAAA,IAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAG,IAAI;YAAC,MAAM,OAAO,EAAE,CAAC;QAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAA,QAAQ,GAAC,IAAI,CAAC;QAAA,MAAM,GAAC,KAAK,CAAC,EAAE,CAAC;QACjI,MAAM,MAAM,GAAC,KAAK,CAAC,MAAM,CAAC;QAAA,KAAK,CAAC,MAAM,EAAC,CAAC,MAAM,CAAC,EAAC,CAAC,WAAW,EAAC,WAAW,EAAC,OAAO,EAAC,UAAU,EAAC,SAAS,CAAC,CAAC,CAAC;QACxG,IAAG,MAAM,CAAC,IAAI,KAAG,QAAQ,IAAE,MAAM,CAAC,IAAI,KAAG,QAAQ,EAAC,CAAC;YACjD,KAAK,CAAC,MAAM,EAAC,CAAC,MAAM,EAAC,WAAW,CAAC,CAAC,CAAC;YAAA,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAA,IAAG,MAAM,CAAC,IAAI,KAAG,QAAQ,IAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAG,KAAK;gBAAC,MAAM,OAAO,EAAE,CAAC;YAAA,KAAK,CAAC,UAAU,IAAE,MAAM,CAAC,SAAS,CAAC;QACrK,CAAC;aAAK,IAAG,MAAM,CAAC,IAAI,KAAG,SAAS,EAAC,CAAC;YAChC,KAAK,CAAC,MAAM,EAAC,CAAC,MAAM,EAAC,WAAW,EAAC,OAAO,EAAC,WAAW,EAAC,UAAU,CAAC,CAAC,CAAC;YAAA,IAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;gBAAC,MAAM,OAAO,EAAE,CAAC;YAAA,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAA,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3N,IAAG,KAAK,CAAC,OAAO,IAAE,KAAK,CAAC,UAAU,GAAC,MAAM,CAAC,SAAS,GAAC,MAAM,CAAC,QAAQ;gBAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,6DAA6D,CAAC,CAAC;YAC1K,KAAK,CAAC,UAAU,IAAE,MAAM,CAAC,SAAS,CAAC;YAAA,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,MAAM,CAAC,SAAS,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC,CAAC;QACrH,CAAC;aAAK,IAAG,MAAM,CAAC,IAAI,KAAG,QAAQ,EAAC,CAAC;YAC/B,KAAK,CAAC,MAAM,EAAC,CAAC,MAAM,EAAC,WAAW,EAAC,WAAW,CAAC,EAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAAA,IAAG,MAAM,CAAC,OAAO,KAAG,SAAS,IAAE,MAAM,CAAC,OAAO,KAAG,IAAI;gBAAC,MAAM,OAAO,EAAE,CAAC;YAAA,IAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBAAC,MAAM,OAAO,EAAE,CAAC;YAAA,IAAG,MAAM,CAAC,SAAS,KAAG,IAAI;gBAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChO,MAAM,OAAO,GAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAA,IAAG,CAAC,OAAO,IAAE,OAAO,CAAC,OAAO;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,oDAAoD,CAAC,CAAC;YAC/K,OAAO,CAAC,OAAO,GAAC,IAAI,CAAC;YAAA,IAAG,MAAM,CAAC,OAAO;gBAAC,KAAK,CAAC,OAAO,GAAC,IAAI,CAAC;YAAA,IAAG,MAAM,CAAC,SAAS,KAAG,IAAI,EAAC,CAAC;gBAAA,KAAK,CAAC,UAAU,IAAE,CAAC,MAAM,CAAC,OAAO,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAC,OAAO,CAAC,SAAS,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,SAAS,CAAC,GAAC,OAAO,CAAC,SAAS,CAAC;gBAAA,IAAG,MAAM,CAAC,SAAS,GAAC,OAAO,CAAC,SAAS;oBAAC,KAAK,CAAC,OAAO,GAAC,IAAI,CAAC;YAAA,CAAC;QACrQ,CAAC;aAAK,IAAG,MAAM,CAAC,IAAI,KAAG,OAAO,EAAC,CAAC;YAC9B,KAAK,CAAC,MAAM,EAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAAA,IAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,+CAA+C,CAAC,CAAC;YAAA,KAAK,CAAC,UAAU,GAAC,CAAC,CAAC;YAAA,KAAK,CAAC,OAAO,GAAC,KAAK,CAAC;QAC9M,CAAC;;YAAK,MAAM,OAAO,EAAE,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,OAAO,CAAC,IAAW;IAC1B,IAAI,EAAS,CAAC;IAAA,IAAG,CAAC;QAAA,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAAA,CAAC;IAAA,OAAM,KAAK,EAAC,CAAC;QAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;YAAC,OAAO,IAAI,CAAC;QAAA,MAAM,OAAO,EAAE,CAAC;IAAA,CAAC;IAC5M,IAAG,CAAC;QAAA,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,KAAK,IAAE,IAAI,CAAC,IAAI,GAAC,SAAS;YAAC,MAAM,OAAO,EAAE,CAAC;QAAA,MAAM,GAAG,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAC,CAAC,CAAC,CAAC;QAAA,IAAI,IAAI,GAAC,CAAC,EAAC,CAAQ,CAAC;QAAA,OAAM,IAAI,GAAC,GAAG,CAAC,MAAM,IAAE,CAAC,CAAC,GAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAC,GAAG,EAAC,IAAI,EAAC,GAAG,CAAC,MAAM,GAAC,IAAI,EAAC,IAAI,CAAC,CAAC,GAAC,CAAC;YAAC,IAAI,IAAE,CAAC,CAAC;QAAA,IAAG,IAAI,KAAG,IAAI,CAAC,IAAI;YAAC,MAAM,OAAO,EAAE,CAAC;QAAA,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAA,CAAC;YAAO,CAAC;QAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAA,CAAC;AACjW,CAAC;AACD,SAAS,KAAK,CAAC,GAAe;IAC5B,IAAG,GAAG,KAAG,IAAI;QAAC,OAAM,EAAC,KAAK,EAAC,MAAM,CAAC,EAAE,CAAC,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC;IAAA,IAAI,KAAa,CAAC;IAAA,IAAG,CAAC;QAAA,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,OAAO,EAAE,CAAC;IAAA,CAAC;IACxH,IAAG,CAAC,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ;QAAC,MAAM,OAAO,EAAE,CAAC;IACnD,IAAG,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,EAAC,CAAC;QACxB,KAAK,CAAC,KAAK,EAAC,CAAC,UAAU,EAAC,WAAW,CAAC,CAAC,CAAC;QAAA,IAAG,OAAO,KAAK,CAAC,QAAQ,KAAG,QAAQ,IAAE,OAAO,KAAK,CAAC,SAAS,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,OAAO,EAAE,CAAC;QAAA,MAAM,SAAS,GAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3N,OAAM,EAAC,KAAK,EAAC,EAAC,UAAU,EAAC,SAAS,EAAC,OAAO,EAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,GAAG,EAAE,EAAC,MAAM,EAAC,EAAE,EAAC,eAAe,EAAC,KAAK,CAAC,SAAS,EAAC,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC;IAC9H,CAAC;IACD,MAAM,MAAM,GAAS,KAAK,CAAC;IAAA,KAAK,CAAC,MAAM,EAAC,CAAC,SAAS,EAAC,QAAQ,EAAC,UAAU,EAAC,WAAW,CAAC,CAAC,CAAC;IAAA,IAAG,MAAM,CAAC,OAAO,KAAG,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAAC,MAAM,OAAO,EAAE,CAAC;IAC1J,MAAM,KAAK,GAAC,MAAM,CAAC,MAAM,CAAC,MAAiB,CAAC,CAAC;IAAA,IAAG,MAAM,CAAC,QAAQ,KAAG,KAAK,CAAC,UAAU,GAAC,GAAG,IAAE,MAAM,CAAC,SAAS,KAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAAC,MAAM,OAAO,EAAE,CAAC;IAAA,OAAM,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC;AAC7M,CAAC;AACD,SAAS,MAAM,CAAC,KAAW;IACzB,MAAM,GAAG,GAAC,IAAI,CAAC,SAAS,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,GAAC,GAAG,EAAC,SAAS,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAC,CAAC,CAAC;IAAA,IAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAC,SAAS;QAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAC,sEAAsE,CAAC,CAAC;IAAA,OAAO,GAAG,CAAC;AACpT,CAAC;AACD,SAAS,KAAK,CAAC,MAAc,EAAC,MAAa,IAAS,MAAM,IAAI,GAAC,EAAC,OAAO,EAAC,CAAU,EAAC,EAAE,EAAC,UAAU,EAAE,EAAC,EAAE,EAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAC,QAAQ,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,IAAE,IAAI,EAAC,MAAM,EAAC,CAAC,CAAA,OAAM,EAAC,GAAG,IAAI,EAAC,IAAI,EAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAC,CAAC,CAAA,CAAC;AACnQ,SAAS,SAAS,CAAC,GAAU,EAAC,MAAM,GAAC,KAAK;IACxC,IAAG,aAAa,CAAC,GAAG,CAAC,KAAG,GAAG;QAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAG,MAAM;QAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IAAA,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAAA,IAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAE,IAAI,CAAC,cAAc,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,KAAK;QAAC,MAAM,OAAO,EAAE,CAAC;IAAA,OAAO,IAAI,CAAC;AAC9N,CAAC;AACD,SAAS,QAAQ,CAAC,IAAW,EAAC,GAAU,IAAQ,MAAM,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,CAAC,CAAA,IAAG,CAAC;IAAA,EAAE,CAAC,aAAa,CAAC,EAAE,EAAC,GAAG,CAAC,CAAC;IAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAAA,CAAC;QAAO,CAAC;IAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAAA,CAAC,CAAA,CAAC;AAChK,SAAS,WAAW,CAAC,IAAW;IAC9B,IAAI,CAAC;QAAC,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,cAAc,EAAE,IAAE,IAAI,CAAC,IAAI,KAAG,CAAC;YAAC,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC;IAC9G,OAAM,KAAK,EAAC,CAAC;QAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;YAAC,OAAO,KAAK,CAAC;QAAA,MAAM,OAAO,EAAE,CAAC;IAAA,CAAC;IAC/F,IAAG,OAAO,CAAC,IAAI,CAAC,KAAG,WAAW;QAAC,MAAM,OAAO,EAAE,CAAC;IAAA,OAAO,IAAI,CAAC;AAC7D,CAAC;AACD,MAAM,OAAO,kBAAkB;IACpB,IAAI,CAAQ;IACrB,YAAY,IAAW,IAAE,IAAI,CAAC,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC;IAClD,IAAI;QACF,MAAM,GAAG,GAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,aAAa,CAAC,GAAG,CAAC,KAAG,GAAG;YAAC,MAAM,OAAO,EAAE,CAAC;QAAA,IAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9G,MAAM,GAAG,GAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC,MAAM,GAAC,WAAW,CAAC,IAAI,CAAC,IAAI,GAAC,cAAc,CAAC,CAAC;QAAA,IAAG,GAAG,KAAG,IAAI,IAAE,MAAM;YAAC,MAAM,OAAO,EAAE,CAAC;QAAA,MAAM,EAAC,KAAK,EAAC,GAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzI,OAAM,EAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,GAAC,GAAG,EAAC,SAAS,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAE,KAAK,CAAC,eAAe,IAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,CAAC;IACtK,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,SAAgB,EAAC,KAAY,EAAC,SAAgB,EAAC,QAAe,EAAC,MAAmB,IAAgB,MAAM,IAAI,CAAC,WAAW,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,SAAS,EAAC,KAAK,EAAC,SAAS,EAAC,QAAQ,EAAC,EAAC,MAAM,CAAC,CAAC,CAAA,CAAC;IACpM,KAAK,CAAC,MAAM,CAAC,SAAgB,EAAC,SAAqB,EAAC,OAAO,GAAC,KAAK,IAAgB,MAAM,IAAI,CAAC,WAAW,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,SAAS,EAAC,GAAG,CAAC,OAAO,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,IAAa,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC,CAAA,CAAC;IACtL,MAAM,CAAC,IAAW,IAAU,OAAO,IAAI,CAAC,UAAU,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,cAAc,CAAC,IAAI,CAAC,EAAC,CAAC,CAAC,UAAU,GAAC,GAAG,CAAC,CAAA,CAAC;IACnH,KAAK,KAAS,IAAI,CAAC,UAAU,CAAC,EAAC,IAAI,EAAC,OAAO,EAAC,CAAC,CAAC,CAAA,CAAC;IACvC,KAAK,CAAC,WAAW,CAAC,MAAa,EAAC,MAAmB,IAAgB,KAAI,IAAI,CAAC,GAAC,CAAC,GAAE,CAAC,EAAE,EAAC,CAAC;QAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAA,IAAG,CAAC;YAAA,IAAI,CAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAG,CAAC,CAAC,KAAK,YAAY,mBAAmB,CAAC,IAAE,KAAK,CAAC,IAAI,KAAG,QAAQ,IAAE,CAAC,IAAE,EAAE;gBAAC,MAAM,KAAK,CAAC;YAAA,MAAM,gBAAgB,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;QAAA,CAAC;IAAA,CAAC,CAAA,CAAC;IAC5R,UAAU,CAAC,MAAa,IAAS,KAAI,IAAI,CAAC,GAAC,CAAC,GAAE,CAAC,EAAE,EAAC,CAAC;QAAA,IAAG,CAAC;YAAA,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAG,CAAC,CAAC,KAAK,YAAY,mBAAmB,CAAC,IAAE,KAAK,CAAC,IAAI,KAAG,QAAQ,IAAE,CAAC,IAAE,EAAE;gBAAC,MAAM,KAAK,CAAC;YAAA,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAC,CAAC;QAAA,CAAC;IAAA,CAAC,CAAA,CAAC;IACtP,MAAM,CAAC,MAAa,EAAC,MAAmB;QAC9C,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAA,MAAM,GAAG,GAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC,MAAM,GAAC,SAAS,CAAC,GAAG,EAAC,IAAI,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,IAAI,GAAC,OAAO,EAAC,MAAM,GAAC,IAAI,CAAC,IAAI,GAAC,cAAc,CAAC;QAAA,IAAI,EAAS,CAAC;QACtJ,IAAG,CAAC;YAAA,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,oCAAoC,CAAC,CAAC;YAAA,MAAM,OAAO,EAAE,CAAC;QAAA,CAAC;QACpM,MAAM,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,GAAG,EAAC,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC;QACrE,IAAG,CAAC;YACF,EAAE,CAAC,aAAa,CAAC,EAAE,EAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAA,MAAM,GAAG,GAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC,MAAM,GAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,GAAG,KAAG,IAAI,IAAE,MAAM;gBAAC,MAAM,OAAO,EAAE,CAAC;YAAA,MAAM,KAAK,GAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAA,IAAI,MAAM,GAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5L,IAAG,KAAK,CAAC,MAAM;gBAAC,MAAM,GAAC,CAAC,KAAK,CAAC,EAAE,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAC,CAAC,CAAC,CAAC;YACpF,MAAM,OAAO,GAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YAC9E,IAAG,MAAM,CAAC,MAAM,GAAC,CAAC,MAAM,CAAC,IAAI,KAAG,SAAS,CAAA,CAAC,CAAA,OAAO,GAAC,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,GAAC,UAAU;gBAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAC,sFAAsF,CAAC,CAAC;YAChM,MAAM,IAAI,GAAC,MAAM,CAAC,CAAC,GAAG,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAC,EAAC,MAAM,GAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAA,QAAQ,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC;YAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAAA,MAAM,KAAK,GAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAClJ,IAAG,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG,IAAE,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG,IAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAG,GAAG;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,uCAAuC,CAAC,CAAC;YAC9J,IAAG,CAAC,MAAM;gBAAC,QAAQ,CAAC,MAAM,EAAC,WAAW,CAAC,CAAC;YAAA,EAAE,CAAC,UAAU,CAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAA,MAAM,WAAW,GAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAC,GAAG,CAAC,CAAC;YAAA,IAAG,CAAC;gBAAA,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAAA,CAAC;oBAAO,CAAC;gBAAA,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAAA,CAAC;YAAA,OAAO,IAAI,CAAC;QAC7L,CAAC;gBAAO,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC;gBAAA,MAAM,KAAK,GAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG,IAAE,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG,EAAC,CAAC;oBAAA,EAAE,CAAC,MAAM,CAAC,IAAI,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;oBAAA,MAAM,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBAAA,IAAG,QAAQ,CAAC,GAAG,KAAG,QAAQ,CAAC,GAAG,IAAE,QAAQ,CAAC,GAAG,KAAG,QAAQ,CAAC,GAAG;wBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAA,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC,CAAA,8CAA8C,CAAA,CAAC;QAAA,CAAC;IACrT,CAAC;CACF"}

package/dist/execution/quote.d.ts

@@ -0,0 +1,19 @@
+import type { Message, Tool } from '../types.js';
+import type { RouteCandidate } from '../routing/index.js';
+import type { ProviderAttemptBudget } from '../providers/types.js';
+import { type BillingEvidence, type InputCount, type QuoteEvidence } from './billing.js';
+export declare function costCapNanos(value: number): number;
+export declare function providerQuote(route: RouteCandidate | undefined, messages: Message[], tools: Tool[], streaming: boolean, maxOutputTokens: number, billing?: BillingEvidence, count?: InputCount, measuredInput?: boolean): {
+    provider: import("../health/types.js").HealthProvider;
+    model: string;
+    target: string;
+    inputTokens: number;
+    outputTokens: number;
+    inputPrice: number;
+    outputPrice: number;
+    costNanos: number;
+    quoteEvidence?: QuoteEvidence | undefined;
+};
+/** Project-capped ordinary turns use the same pre-dispatch accounting as child turns. */
+export declare function projectAttemptBudget(cwd: string, runId: string, route: RouteCandidate | undefined, messages: Message[], tools: Tool[], streaming: boolean, maxOutputTokens: number, signal?: AbortSignal, onEvent?: (id: string, stage: string, evidence?: QuoteEvidence) => void, measuredInput?: boolean): ProviderAttemptBudget;
+//# sourceMappingURL=quote.d.ts.map

package/dist/execution/quote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote.d.ts","sourceRoot":"","sources":["../../src/execution/quote.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,OAAO,EAAC,IAAI,EAAC,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,uBAAuB,CAAC;AAOjE,OAAO,EAAoG,KAAK,eAAe,EAAC,KAAK,UAAU,EAAC,KAAK,aAAa,EAAC,MAAM,cAAc,CAAC;AAGxL,wBAAgB,YAAY,CAAC,KAAK,EAAC,MAAM,GAAE,MAAM,CAGhD;AACD,wBAAgB,aAAa,CAAC,KAAK,EAAC,cAAc,GAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,EAAC,KAAK,EAAC,IAAI,EAAE,EAAC,SAAS,EAAC,OAAO,EAAC,eAAe,EAAC,MAAM,EAAC,OAAO,CAAC,EAAC,eAAe,EAAC,KAAK,CAAC,EAAC,UAAU,EAAC,aAAa,UAAM;;;;;;;;;;EAoDnM;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,GAAG,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,cAAc,GAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,EAAC,KAAK,EAAC,IAAI,EAAE,EAAC,SAAS,EAAC,OAAO,EAAC,eAAe,EAAC,MAAM,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,EAAC,CAAC,EAAE,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,QAAQ,CAAC,EAAC,aAAa,KAAG,IAAI,EAAC,aAAa,UAAM,GAAE,qBAAqB,CA4BlS"}

package/dist/execution/quote.js

@@ -0,0 +1,116 @@
+import { randomUUID } from 'node:crypto';
+import { projectIdentity } from '../approvals/index.js';
+import { getBudgetCaps, projectBudgetPath } from '../budget.js';
+import { throwIfCancelled } from '../cancellation.js';
+import { ExecutionLimitError } from './types.js';
+import { integer } from './authority.js';
+import { requestCostNanos } from './ledger.js';
+import { ProjectSpendLedger } from './project-spend.js';
+import { readBillingEvidence, assertBillingCurrent, validateInputCount, validateQuoteEvidence, fullContextTerms } from './billing.js';
+import { estimateTotalTokens } from '../summarization.js';
+export function costCapNanos(value) {
+    if (!Number.isFinite(value) || value < 0)
+        throw new ExecutionLimitError('budget', 'Configured cost cap is invalid.');
+    const cap = Math.floor(value * 1e9);
+    integer(cap);
+    return cap;
+}
+export function providerQuote(route, messages, tools, streaming, maxOutputTokens, billing, count, measuredInput = false) {
+    integer(maxOutputTokens, 1, 100000000);
+    if (!route || route.evidence !== 'live' || !route.discoveredAt || !Number.isFinite(Date.parse(route.discoveredAt)) || Date.now() - Date.parse(route.discoveredAt) > 300000 || Date.parse(route.discoveredAt) > Date.now() + 1000)
+        throw new ExecutionLimitError('authority', 'Bounded execution requires recent live model discovery.');
+    if (billing)
+        assertBillingCurrent(billing, route);
+    if (messages.some(m => typeof m.content !== 'string' && m.content.some(p => p.type !== 'text')))
+        throw new ExecutionLimitError('budget', 'Multimodal requests require a separate verified billing bound.');
+    if (billing?.profile.admission === 'reviewed-full-context-v1') {
+        if (count)
+            throw new ExecutionLimitError('authority', 'Full-context admission does not accept an unverified input count.');
+        const quoteEvidence = validateQuoteEvidence({ version: 2, profileHash: billing.hash, profile: billing.profile, quotedAt: Date.now(), live: { discoveredAt: Date.parse(route.discoveredAt), contextLength: route.contextLength, maxOutputTokens: route.maxOutputTokens, capabilities: Object.fromEntries(['chat', 'tools', 'streaming'].filter(k => route.capabilities[k] !== undefined).map(k => [k, route.capabilities[k]])), prices: { input: route.price?.input ?? null, output: route.price?.output ?? null } }, requirements: { tools: tools.length > 0, streaming }, ...(measuredInput ? { measuredInput: true } : {}) });
+        if (quoteEvidence.version !== 2)
+            throw new ExecutionLimitError('authority', 'Wrong reviewed admission evidence.');
+        // Provider wrappers and protocol metadata can exceed the local estimator;
+        // keep a bounded cushion while settlement remains authoritative.
+        const terms = fullContextTerms(quoteEvidence), measured = estimateTotalTokens(messages) + Math.ceil(JSON.stringify(tools).length / 4), inputTokens = measuredInput ? Math.min(terms.inputTokens, Math.max(1, measured)) : terms.inputTokens;
+        const { maxOutputTokens: outputLimit, inputPrice, outputPrice } = terms;
+        if (maxOutputTokens > outputLimit)
+            throw new ExecutionLimitError('budget', 'Requested output exceeds live or reviewed model limits.');
+        // Keep the signed live quote alongside measured input reservations. The
+        // measured size changes accounting, while the quote remains the
+        // replayable admission evidence for provider limits and pricing.
+        return { provider: route.provider, model: route.model, target: route.target, inputTokens, outputTokens: maxOutputTokens, inputPrice, outputPrice, costNanos: requestCostNanos(inputTokens, maxOutputTokens, inputPrice, outputPrice), quoteEvidence };
+    }
+    const capabilities = { ...billing?.profile.capabilities, ...Object.fromEntries(Object.entries(route.capabilities).filter(([, v]) => v !== undefined)) };
+    if (capabilities.chat !== true || tools.length && capabilities.tools !== true || streaming && capabilities.streaming !== true)
+        throw new ExecutionLimitError('authority', 'Live discovery did not confirm the required model capabilities.');
+    // The full discovered input capacity is a conservative bound, not a tokenizer estimate.
+    const local = route.provider === 'ollama' || route.provider === 'litellm' || route.provider === 'openai-compat';
+    // Local servers expose a context window but no billable input reservation;
+    // reserve the measured request size so token budgets remain meaningful.
+    const contextLimit = route.contextLength ?? 0;
+    const measured = Math.max(1, estimateTotalTokens(messages) + Math.ceil(JSON.stringify(tools).length / 4));
+    // When measured reservations are enabled, reserve the serialized request
+    // rather than the model's entire context window. Keep the live context as
+    // the hard ceiling so oversized prompts still fail closed.
+    const useMeasured = measuredInput && contextLimit > 100000;
+    let inputTokens = useMeasured ? Math.min(contextLimit, measured) : local ? Math.min(contextLimit, measured) : contextLimit;
+    const outputTokens = maxOutputTokens;
+    if (!Number.isSafeInteger(inputTokens) || inputTokens < 1 || inputTokens > 100000000 || !Number.isSafeInteger(route.maxOutputTokens) || route.maxOutputTokens < outputTokens)
+        throw new ExecutionLimitError('budget', 'Bounded execution requires discovered input/output limits that cover the requested output.');
+    let quoteEvidence;
+    if (count) {
+        validateInputCount(count);
+        if (!billing || billing.profile.admission !== 'provider-count-v1' || route.provider !== 'anthropic' || count.at > Date.now() + 1000 || Date.now() - count.at > 60000)
+            throw new ExecutionLimitError('authority', 'Provider input count requires current matching billing evidence.');
+        if (count.inputTokens > inputTokens)
+            throw new ExecutionLimitError('budget', 'Counted request exceeds the discovered input capacity.');
+        inputTokens = Math.min(inputTokens, count.inputTokens * 2 + 1024);
+        quoteEvidence = { version: 1, profileHash: billing.hash, profile: structuredClone(billing.profile), count: structuredClone(count), multiplier: 2, slackTokens: 1024 };
+    }
+    const inputPrice = billing ? Math.max(billing.profile.prices.input, route.price?.input ?? 0) : route.price?.input ?? (local ? 0 : undefined);
+    const outputPrice = billing ? Math.max(billing.profile.prices.output, route.price?.output ?? 0) : route.price?.output ?? (local ? 0 : undefined);
+    if (inputPrice === undefined || outputPrice === undefined || !Number.isFinite(inputPrice) || !Number.isFinite(outputPrice) || inputPrice < 0 || outputPrice < 0)
+        throw new ExecutionLimitError('budget', 'Live discovery did not provide bounded input/output prices; configure verified provider metadata before execution.');
+    return { provider: route.provider, model: route.model, target: route.target, inputTokens: inputTokens, outputTokens, inputPrice, outputPrice, costNanos: requestCostNanos(inputTokens, outputTokens, inputPrice, outputPrice), ...(quoteEvidence ? { quoteEvidence } : {}) };
+}
+/** Project-capped ordinary turns use the same pre-dispatch accounting as child turns. */
+export function projectAttemptBudget(cwd, runId, route, messages, tools, streaming, maxOutputTokens, signal, onEvent, measuredInput = false) {
+    route = structuredClone(route);
+    const project = projectIdentity(cwd).project, billing = readBillingEvidence(route, project);
+    const base = providerQuote(route, messages, tools, streaming, maxOutputTokens, billing, undefined, measuredInput), ledger = new ProjectSpendLedger(projectBudgetPath(cwd));
+    const quotes = new Map();
+    return {
+        ...(base.provider === 'openrouter' ? { priceCeiling: Object.freeze({ input: base.inputPrice, output: base.outputPrice }) } : {}),
+        ...(billing?.profile.admission === 'provider-count-v1' ? { inputCounting: 'anthropic-count-tokens' } : {}),
+        reserve: async (actual) => {
+            throwIfCancelled(signal);
+            if (actual.provider !== base.provider || actual.model !== base.model || actual.target !== base.target || actual.maxOutputTokens !== base.outputTokens)
+                throw new ExecutionLimitError('authority', 'Provider attempt changed after project budget admission.');
+            if (base.provider === 'openrouter' && (actual.priceCeiling?.input !== base.inputPrice || actual.priceCeiling?.output !== base.outputPrice))
+                throw new ExecutionLimitError('authority', 'Provider price ceiling changed after project budget admission.');
+            if (billing && ((billing.profile.admission === 'provider-count-v1' && !actual.inputCount) || readBillingEvidence(route, project)?.hash !== billing.hash))
+                throw new ExecutionLimitError('authority', 'Billing admission was revoked or omitted its count.');
+            const quote = providerQuote(route, messages, tools, streaming, maxOutputTokens, billing, actual.inputCount, measuredInput);
+            const id = randomUUID(), cap = getBudgetCaps().maxCostPerProject;
+            await ledger.reserve(id, runId, quote.costNanos, cap === undefined ? Number.MAX_SAFE_INTEGER : costCapNanos(cap), signal);
+            quotes.set(id, quote);
+            onEvent?.(id, 'reserved', quote.quoteEvidence);
+            throwIfCancelled(signal);
+            if (billing && readBillingEvidence(route, project)?.hash !== billing.hash)
+                throw new ExecutionLimitError('authority', 'Billing admission was revoked while committing its reservation.');
+            return id;
+        },
+        settle: async (id, outcome, usage) => {
+            const quote = quotes.get(id);
+            if (!quote)
+                throw new ExecutionLimitError('authority', 'Unknown project request reservation.');
+            const valid = !usage || [usage.inputTokens, usage.outputTokens].every(n => Number.isSafeInteger(n) && n >= 0 && n <= 100000000);
+            const exceeded = !valid || !!usage && (usage.inputTokens > quote.inputTokens || usage.outputTokens > quote.outputTokens);
+            await ledger.settle(id, outcome === 'success' && valid && usage ? requestCostNanos(usage.inputTokens, usage.outputTokens, quote.inputPrice, quote.outputPrice) : null, exceeded);
+            onEvent?.(id, exceeded ? 'exceeded' : outcome === 'success' && usage ? 'settled' : 'unknown');
+            if (exceeded)
+                throw new ExecutionLimitError('budget', 'Provider usage exceeded the project reservation; further requests are stopped.');
+        },
+    };
+}
+//# sourceMappingURL=quote.js.map

package/dist/execution/quote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote.js","sourceRoot":"","sources":["../../src/execution/quote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAC,eAAe,EAAC,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAC,aAAa,EAAC,iBAAiB,EAAC,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,mBAAmB,EAAC,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAC,OAAO,EAAC,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAC,gBAAgB,EAAC,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,mBAAmB,EAAC,oBAAoB,EAAC,kBAAkB,EAAC,qBAAqB,EAAC,gBAAgB,EAAyD,MAAM,cAAc,CAAC;AACxL,OAAO,EAAC,mBAAmB,EAAC,MAAM,qBAAqB,CAAC;AAExD,MAAM,UAAU,YAAY,CAAC,KAAY;IACvC,IAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAE,KAAK,GAAC,CAAC;QAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,iCAAiC,CAAC,CAAC;IAC9G,MAAM,GAAG,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAC,GAAG,CAAC,CAAC;IAAA,OAAO,CAAC,GAAG,CAAC,CAAC;IAAA,OAAO,GAAG,CAAC;AAC1D,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAA8B,EAAC,QAAkB,EAAC,KAAY,EAAC,SAAiB,EAAC,eAAsB,EAAC,OAAwB,EAAC,KAAiB,EAAC,aAAa,GAAC,KAAK;IAChM,OAAO,CAAC,eAAe,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;IACrC,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,GAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,GAAC,IAAI,CAAC,GAAG,EAAE,GAAC,IAAI;QACnN,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,yDAAyD,CAAC,CAAC;IACvG,IAAG,OAAO;QAAC,oBAAoB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;IAC/C,IAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,CAAC,OAAO,KAAG,QAAQ,IAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,KAAG,MAAM,CAAC,CAAC;QAClF,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,gEAAgE,CAAC,CAAC;IAC3G,IAAG,OAAO,EAAE,OAAO,CAAC,SAAS,KAAG,0BAA0B,EAAC,CAAC;QAC1D,IAAG,KAAK;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,mEAAmE,CAAC,CAAC;QACxH,MAAM,aAAa,GAAC,qBAAqB,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,IAAI,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,EAAC,QAAQ,EAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,EAAC,EAAC,YAAY,EAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,EAAC,aAAa,EAAC,KAAK,CAAC,aAAa,EAAC,eAAe,EAAC,KAAK,CAAC,eAAe,EAAC,YAAY,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,EAAC,OAAO,EAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,KAAK,CAAC,YAAY,CAAC,CAAoC,CAAC,KAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAC,KAAK,CAAC,YAAY,CAAC,CAAoC,CAAC,CAAC,CAAC,CAAC,EAAC,MAAM,EAAC,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAE,KAAK,IAAE,IAAI,EAAC,MAAM,EAAC,KAAK,CAAC,KAAK,EAAE,MAAM,IAAE,IAAI,EAAC,EAAC,EAAC,YAAY,EAAC,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,GAAC,CAAC,EAAC,SAAS,EAAC,EAAC,GAAG,CAAC,aAAa,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;QAC5mB,IAAG,aAAa,CAAC,OAAO,KAAG,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,oCAAoC,CAAC,CAAC;QAC7G,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,KAAK,GAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,QAAQ,GAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,GAAC,CAAC,CAAC,EAAE,WAAW,GAAC,aAAa,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,QAAQ,CAAC,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,WAAW,CAAC;QAC5N,MAAM,EAAC,eAAe,EAAC,WAAW,EAAC,UAAU,EAAC,WAAW,EAAC,GAAC,KAAK,CAAC;QACjE,IAAG,eAAe,GAAC,WAAW;YAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,yDAAyD,CAAC,CAAC;QACjI,wEAAwE;QACxE,gEAAgE;QAChE,iEAAiE;QACjE,OAAM,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,WAAW,EAAC,YAAY,EAAC,eAAe,EAAC,UAAU,EAAC,WAAW,EAAC,SAAS,EAAC,gBAAgB,CAAC,WAAW,EAAC,eAAe,EAAC,UAAU,EAAC,WAAW,CAAC,EAAC,aAAa,EAAC,CAAC;IACrO,CAAC;IACD,MAAM,YAAY,GAAgC,EAAC,GAAG,OAAO,EAAE,OAAO,CAAC,YAAY,EAAC,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,EAAE,CAAA,CAAC,KAAG,SAAS,CAAC,CAAC,EAAC,CAAC;IAC7K,IAAG,YAAY,CAAC,IAAI,KAAG,IAAI,IAAI,KAAK,CAAC,MAAM,IAAE,YAAY,CAAC,KAAK,KAAG,IAAI,IAAI,SAAS,IAAE,YAAY,CAAC,SAAS,KAAG,IAAI;QAChH,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,iEAAiE,CAAC,CAAC;IAC/G,wFAAwF;IACxF,MAAM,KAAK,GAAC,KAAK,CAAC,QAAQ,KAAG,QAAQ,IAAE,KAAK,CAAC,QAAQ,KAAG,SAAS,IAAE,KAAK,CAAC,QAAQ,KAAG,eAAe,CAAC;IACpG,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,YAAY,GAAC,KAAK,CAAC,aAAa,IAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,GAAC,CAAC,CAAC,CAAC,CAAC;IACnG,yEAAyE;IACzE,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,WAAW,GAAC,aAAa,IAAE,YAAY,GAAC,MAAM,CAAC;IACrD,IAAI,WAAW,GAAC,WAAW,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,YAAY,EAAC,QAAQ,CAAC,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,YAAY,EAAC,QAAQ,CAAC,CAAA,CAAC,CAAA,YAAY,CAAC;IAC/G,MAAM,YAAY,GAAC,eAAe,CAAC;IACnC,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAE,WAAY,GAAC,CAAC,IAAE,WAAY,GAAC,SAAS,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,IAAE,KAAK,CAAC,eAAgB,GAAC,YAAY;QAC9J,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,4FAA4F,CAAC,CAAC;IAEvI,IAAI,aAAqC,CAAC;IAC1C,IAAG,KAAK,EAAC,CAAC;QACR,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAG,CAAC,OAAO,IAAE,OAAO,CAAC,OAAO,CAAC,SAAS,KAAG,mBAAmB,IAAE,KAAK,CAAC,QAAQ,KAAG,WAAW,IAAE,KAAK,CAAC,EAAE,GAAC,IAAI,CAAC,GAAG,EAAE,GAAC,IAAI,IAAE,IAAI,CAAC,GAAG,EAAE,GAAC,KAAK,CAAC,EAAE,GAAC,KAAK;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,kEAAkE,CAAC,CAAC;QAC9P,IAAG,KAAK,CAAC,WAAW,GAAC,WAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,wDAAwD,CAAC,CAAC;QACnI,WAAW,GAAC,IAAI,CAAC,GAAG,CAAC,WAAY,EAAC,KAAK,CAAC,WAAW,GAAC,CAAC,GAAC,IAAI,CAAC,CAAC;QAC5D,aAAa,GAAC,EAAC,OAAO,EAAC,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,IAAI,EAAC,OAAO,EAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,KAAK,EAAC,eAAe,CAAC,KAAK,CAAC,EAAC,UAAU,EAAC,CAAC,EAAC,WAAW,EAAC,IAAI,EAAC,CAAC;IACzJ,CAAC;IACD,MAAM,UAAU,GAAC,OAAO,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAE,KAAK,IAAE,CAAC,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,KAAK,IAAE,CAAC,KAAK,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAC;IAC9H,MAAM,WAAW,GAAC,OAAO,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAC,KAAK,CAAC,KAAK,EAAE,MAAM,IAAE,CAAC,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,MAAM,IAAE,CAAC,KAAK,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAC;IAClI,IAAG,UAAU,KAAG,SAAS,IAAE,WAAW,KAAG,SAAS,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAE,UAAU,GAAC,CAAC,IAAE,WAAW,GAAC,CAAC;QAC1I,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,oHAAoH,CAAC,CAAC;IAC/J,OAAO,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,WAAW,EAAC,WAAY,EAAC,YAAY,EAAC,UAAU,EAAC,WAAW,EAAC,SAAS,EAAC,gBAAgB,CAAC,WAAY,EAAC,YAAY,EAAC,UAAU,EAAC,WAAW,CAAC,EAAC,GAAG,CAAC,aAAa,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC;AAC3P,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,GAAU,EAAC,KAAY,EAAC,KAA8B,EAAC,QAAkB,EAAC,KAAY,EAAC,SAAiB,EAAC,eAAsB,EAAC,MAAmB,EAAC,OAA+D,EAAC,aAAa,GAAC,KAAK;IAC1Q,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAAA,MAAM,OAAO,GAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAC,OAAO,GAAC,mBAAmB,CAAC,KAAK,EAAC,OAAO,CAAC,CAAC;IACnH,MAAM,IAAI,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,eAAe,EAAC,OAAO,EAAC,SAAS,EAAC,aAAa,CAAC,EAAC,MAAM,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/J,MAAM,MAAM,GAAC,IAAI,GAAG,EAA2C,CAAC;IAChE,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAG,YAAY,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,MAAM,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;QAClH,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,KAAG,mBAAmB,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,wBAAiC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;QAC1G,OAAO,EAAC,KAAK,EAAC,MAAM,EAAA,EAAE;YACpB,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzB,IAAG,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAE,MAAM,CAAC,KAAK,KAAG,IAAI,CAAC,KAAK,IAAE,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,MAAM,CAAC,eAAe,KAAG,IAAI,CAAC,YAAY;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,0DAA0D,CAAC,CAAC;YAC7O,IAAG,IAAI,CAAC,QAAQ,KAAG,YAAY,IAAE,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,KAAG,IAAI,CAAC,UAAU,IAAE,MAAM,CAAC,YAAY,EAAE,MAAM,KAAG,IAAI,CAAC,WAAW,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,gEAAgE,CAAC,CAAC;YAC5O,IAAG,OAAO,IAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,KAAG,mBAAmB,IAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAE,mBAAmB,CAAC,KAAK,EAAC,OAAO,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qDAAqD,CAAC,CAAC;YAC9O,MAAM,KAAK,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,eAAe,EAAC,OAAO,EAAC,MAAM,CAAC,UAAU,EAAC,aAAa,CAAC,CAAC;YAClH,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,GAAG,GAAC,aAAa,EAAE,CAAC,iBAAiB,CAAC;YAC5D,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,EAAC,KAAK,EAAC,KAAK,CAAC,SAAS,EAAC,GAAG,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,gBAAgB,CAAA,CAAC,CAAA,YAAY,CAAC,GAAG,CAAC,EAAC,MAAM,CAAC,CAAC;YAAA,MAAM,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,CAAC,CAAC;YAAA,OAAO,EAAE,CAAC,EAAE,EAAC,UAAU,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAClL,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzB,IAAG,OAAO,IAAE,mBAAmB,CAAC,KAAK,EAAC,OAAO,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,iEAAiE,CAAC,CAAC;YACjL,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,EAAC,KAAK,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,EAAE;YAC9B,MAAM,KAAK,GAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC,KAAK;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,sCAAsC,CAAC,CAAC;YACvH,MAAM,KAAK,GAAC,CAAC,KAAK,IAAE,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,SAAS,CAAC,CAAC;YACjH,MAAM,QAAQ,GAAC,CAAC,KAAK,IAAE,CAAC,CAAC,KAAK,IAAE,CAAC,KAAK,CAAC,WAAW,GAAC,KAAK,CAAC,WAAW,IAAE,KAAK,CAAC,YAAY,GAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC7G,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,EAAC,OAAO,KAAG,SAAS,IAAE,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,UAAU,EAAC,KAAK,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,QAAQ,CAAC,CAAC;YAClK,OAAO,EAAE,CAAC,EAAE,EAAC,QAAQ,CAAA,CAAC,CAAA,UAAU,CAAA,CAAC,CAAA,OAAO,KAAG,SAAS,IAAE,KAAK,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC,CAAC;YACjF,IAAG,QAAQ;gBAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,gFAAgF,CAAC,CAAC;QACvI,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/execution/types.d.ts

@@ -0,0 +1,113 @@
+/** Runtime authority is supplied by a trusted coordinator, never by model output. */
+export interface ExecutionPath {
+    path: string;
+    access: 'read' | 'write';
+}
+export interface ExecutionAccount {
+    id: string;
+    parentId: string | null;
+    tokenBudget: number;
+    costBudgetNanos: number;
+    deadline: number;
+    allowedTools: string[];
+    allowedPaths: ExecutionPath[];
+}
+export interface ExecutionManifest {
+    version: 1;
+    runId: string;
+    planHash: string;
+    project: {
+        root: string;
+        key: string;
+    };
+    createdAt: number;
+    deadline: number;
+    tokenBudget: number;
+    costBudgetNanos: number;
+    accounts: ExecutionAccount[];
+}
+export interface RequestReservation {
+    id: string;
+    agentId: string;
+    provider: string;
+    model: string;
+    target: string;
+    inputTokens: number;
+    outputTokens: number;
+    costNanos: number;
+    inputPrice: number;
+    outputPrice: number;
+    limits?: {
+        tokens?: number;
+        costNanos?: number;
+    };
+    quoteEvidence?: import('./billing.js').QuoteEvidence;
+    attribution?: import('./attribution.js').RequestAttribution;
+}
+export interface RequestSettlement {
+    requestId: string;
+    outcome: 'success' | 'error' | 'cancelled' | 'invalid-usage';
+    usage?: {
+        inputTokens: number;
+        outputTokens: number;
+    };
+}
+/** Child capacity is a grant, not provider usage or a synthetic request. */
+export interface ChildGrant {
+    version: 1;
+    id: string;
+    proposalHash: string;
+    previousGraphHash: string;
+    planHash: string;
+    runManifestHash: string;
+    approvalRevision: string;
+    parentId: string;
+    accounts: ExecutionAccount[];
+}
+export interface RecordedChildGrant {
+    grant: ChildGrant;
+    eventId: string;
+    eventHash: string;
+    at: number;
+}
+export interface ReservationEvent {
+    version: 1 | 2 | 3 | 4;
+    id: string;
+    at: number;
+    previous: string;
+    change: {
+        type: 'reserve';
+        reservation: RequestReservation;
+    } | {
+        type: 'settle';
+        settlement: RequestSettlement;
+    } | {
+        type: 'child_grant';
+        grant: ChildGrant;
+    };
+    hash: string;
+}
+export interface AccountSpend {
+    tokens: number;
+    costNanos: number;
+}
+export interface ReservationProjection {
+    version: 1 | 2 | 3;
+    runId: string;
+    manifestHash: string;
+    revision: string;
+    spent: AccountSpend;
+    accounts: Record<string, AccountSpend>;
+    requests: Record<string, {
+        reservation: RequestReservation;
+        state: 'pending' | 'settled' | 'unknown' | 'exceeded';
+        accounted?: AccountSpend;
+    }>;
+    exceeded: boolean;
+    childGrants?: RecordedChildGrant[];
+}
+export declare class ExecutionLimitError extends Error {
+    readonly code: 'invalid' | 'authority' | 'budget' | 'deadline' | 'unavailable' | 'locked' | 'conflict' | 'limit';
+    constructor(code: 'invalid' | 'authority' | 'budget' | 'deadline' | 'unavailable' | 'locked' | 'conflict' | 'limit', message: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/execution/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/execution/types.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,WAAW,aAAa;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAC/D,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,aAAa,EAAE,CAAC;CACvD;AACD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAC5C,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAC7C,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AACD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAC7E,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAC7D,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IACxC,MAAM,CAAC,EAAE;QAAC,MAAM,CAAC,EAAC,MAAM,CAAC;QAAA,SAAS,CAAC,EAAC,MAAM,CAAA;KAAC,CAAC;IAC5C,aAAa,CAAC,EAAC,OAAO,cAAc,EAAE,aAAa,CAAC;IACpD,WAAW,CAAC,EAAC,OAAO,kBAAkB,EAAE,kBAAkB,CAAC;CAC5D;AACD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,eAAe,CAAC;IAChF,KAAK,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD;AACD,4EAA4E;AAC5E,MAAM,WAAW,UAAU;IACzB,OAAO,EAAC,CAAC,CAAC;IAAA,EAAE,EAAC,MAAM,CAAC;IAAA,YAAY,EAAC,MAAM,CAAC;IAAA,iBAAiB,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IACjF,eAAe,EAAC,MAAM,CAAC;IAAA,gBAAgB,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,gBAAgB,EAAE,CAAC;CAC5F;AACD,MAAM,WAAW,kBAAkB;IAAE,KAAK,EAAC,UAAU,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,EAAE,EAAC,MAAM,CAAA;CAAC;AAChG,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,GAAC,CAAC,GAAC,CAAC,GAAC,CAAC,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAC3D,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,WAAW,EAAE,kBAAkB,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,UAAU,EAAE,iBAAiB,CAAA;KAAE,GAAG;QAAC,IAAI,EAAC,aAAa,CAAC;QAAA,KAAK,EAAC,UAAU,CAAA;KAAC,CAAC;IACzJ,IAAI,EAAE,MAAM,CAAC;CACd;AACD,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACnE,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,GAAC,CAAC,GAAC,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IACtE,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC5D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,kBAAkB,CAAC;QAAC,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;QAAC,SAAS,CAAC,EAAC,YAAY,CAAA;KAAE,CAAC,CAAC;IAC9I,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAC,kBAAkB,EAAE,CAAC;CACnC;AACD,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO;IAA5H,YAAqB,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAE5I;CACF"}

package/dist/execution/types.js

@@ -0,0 +1,9 @@
+export class ExecutionLimitError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'ExecutionLimitError';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/execution/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/execution/types.ts"],"names":[],"mappings":"AA6CA,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACvB,IAAI;IAAzB,YAAqB,IAAuG,EAAE,OAAe;QAC3I,KAAK,CAAC,OAAO,CAAC,CAAC;oBADI,IAAI;QACP,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpD,CAAC;CACF"}

package/dist/execution/writer-recovery.d.ts

@@ -0,0 +1,3 @@
+/** A retained hard-link claim elects one reclaimer per dead writer inode. */
+export declare function recoverDeadWriterLock(file: string): boolean;
+//# sourceMappingURL=writer-recovery.d.ts.map

package/dist/execution/writer-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer-recovery.d.ts","sourceRoot":"","sources":["../../src/execution/writer-recovery.ts"],"names":[],"mappings":"AAIA,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,IAAI,EAAC,MAAM,GAAE,OAAO,CAgBzD"}