@claudexor/daemon 3.12.2 → 3.12.5

package/dist/index.d.ts

@@ -26,6 +26,7 @@ export * from "./quota-projection.js";
 export * from "./quota-poll-lanes.js";
 export { quotaPacerFileStore } from "./quota-poll-pacer.js";
 export * from "./credential-unusable-ledger.js";
+export * from "./model-substitution-ledger.js";
 export * from "./project-partitions.js";
 export * from "./model-operations.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC"}

package/dist/index.js

@@ -26,6 +26,7 @@ export * from "./quota-projection.js";
 export * from "./quota-poll-lanes.js";
 export { quotaPacerFileStore } from "./quota-poll-pacer.js";
 export * from "./credential-unusable-ledger.js";
+export * from "./model-substitution-ledger.js";
 export * from "./project-partitions.js";
 export * from "./model-operations.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC"}

package/dist/model-substitution-ledger.d.ts

@@ -0,0 +1,47 @@
+import type { ModelSubstitutionObservation } from "@claudexor/schema";
+/**
+ * The daemon's bounded, self-expiring memory of typed model-substitution
+ * observations: "this account answered a model operation's request for model M
+ * with another model".
+ *
+ * The vendor state behind it is per account, lasts tens of minutes and is
+ * invisible in the quota meter, while the pool's choice is deterministic by
+ * headroom — without this memory the caller's next operation lands on the same
+ * account. A live observation only ORDERS the pool for that requested model
+ * (INV-135); it never excludes a row, never touches a pin or a preferred
+ * account, and the engine still performs one generation per operation
+ * (INV-014).
+ *
+ * Deliberately IN-MEMORY, like the `CredentialUnusableLedger` beside it: a
+ * restart forgets every mark, so each account rediscovers its own episode at
+ * the cost of one operation. A result that arrives after its subject was
+ * cleared records a fresh mark, because an observation carries no credential
+ * generation; the cost is ordering, never exclusion.
+ *
+ * Clearing contract:
+ * 1. self-expiry — every row is stamped here with the one retention above;
+ * 2. NO success-clear: inside an episode the same account still serves the
+ *    requested model now and then, which would erase the mark within seconds;
+ * 3. a credential-generation change voids the verdicts about the changed
+ *    generation, at the unusable ledger's call sites: a login/logout clears the
+ *    WHOLE ledger (`noteCredentialChange`), a control-API profile mutation
+ *    clears PER SUBJECT (`clearSubject`). A secret mutation names no subject
+ *    here — model operations admit managed-login rows only.
+ */
+export declare class ModelSubstitutionLedger {
+    private readonly now;
+    private rows;
+    constructor(now?: () => Date);
+    /** Validate and stamp, newest-wins per (subject, requested model). */
+    record(value: Omit<ModelSubstitutionObservation, "observed_at" | "expires_at">): void;
+    /** Every un-expired observation (the read side of account resolution). */
+    live(): readonly ModelSubstitutionObservation[];
+    /** Credential generation changed wholesale (login/logout): every verdict
+     * about the old generation is void. */
+    noteCredentialChange(): void;
+    /** ONE account's credential changed (a control-API profile mutation): only
+     * ITS verdicts are void, across every requested model. */
+    clearSubject(harnessId: string, profileId: string): void;
+    private prune;
+}
+//# sourceMappingURL=model-substitution-ledger.d.ts.map

package/dist/model-substitution-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-substitution-ledger.d.ts","sourceRoot":"","sources":["../src/model-substitution-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAWtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,uBAAuB;IAGtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAFhC,OAAO,CAAC,IAAI,CAAmD;IAE/D,YAA6B,GAAG,GAAE,MAAM,IAAuB,EAAI;IAEnE,sEAAsE;IACtE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,4BAA4B,EAAE,aAAa,GAAG,YAAY,CAAC,GAAG,IAAI,CAgBpF;IAED,0EAA0E;IAC1E,IAAI,IAAI,SAAS,4BAA4B,EAAE,CAG9C;IAED;2CACuC;IACvC,oBAAoB,IAAI,IAAI,CAE3B;IAED;8DAC0D;IAC1D,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAIvD;IAED,OAAO,CAAC,KAAK;CAMd"}

package/dist/model-substitution-ledger.js

@@ -0,0 +1,89 @@
+import { ModelSubstitutionObservation as ModelSubstitutionObservationSchema } from "@claudexor/schema";
+/** Observation retention, not a vendor reset time; a false mark costs only ordering. */
+// The requested model is what ranks; what was served instead travels on the
+// result, where the caller reads it. Keeping a second copy here would be a
+// field no reader consults.
+const TTL_MS = 30 * 60_000;
+/** Bounded memory: the ledger holds evidence, not history. */
+const MAX_ROWS = 64;
+/**
+ * The daemon's bounded, self-expiring memory of typed model-substitution
+ * observations: "this account answered a model operation's request for model M
+ * with another model".
+ *
+ * The vendor state behind it is per account, lasts tens of minutes and is
+ * invisible in the quota meter, while the pool's choice is deterministic by
+ * headroom — without this memory the caller's next operation lands on the same
+ * account. A live observation only ORDERS the pool for that requested model
+ * (INV-135); it never excludes a row, never touches a pin or a preferred
+ * account, and the engine still performs one generation per operation
+ * (INV-014).
+ *
+ * Deliberately IN-MEMORY, like the `CredentialUnusableLedger` beside it: a
+ * restart forgets every mark, so each account rediscovers its own episode at
+ * the cost of one operation. A result that arrives after its subject was
+ * cleared records a fresh mark, because an observation carries no credential
+ * generation; the cost is ordering, never exclusion.
+ *
+ * Clearing contract:
+ * 1. self-expiry — every row is stamped here with the one retention above;
+ * 2. NO success-clear: inside an episode the same account still serves the
+ *    requested model now and then, which would erase the mark within seconds;
+ * 3. a credential-generation change voids the verdicts about the changed
+ *    generation, at the unusable ledger's call sites: a login/logout clears the
+ *    WHOLE ledger (`noteCredentialChange`), a control-API profile mutation
+ *    clears PER SUBJECT (`clearSubject`). A secret mutation names no subject
+ *    here — model operations admit managed-login rows only.
+ */
+export class ModelSubstitutionLedger {
+    now;
+    rows = new Map();
+    constructor(now = () => new Date()) {
+        this.now = now;
+    }
+    /** Validate and stamp, newest-wins per (subject, requested model). */
+    record(value) {
+        const at = this.now().getTime();
+        const obs = ModelSubstitutionObservationSchema.parse({
+            ...value,
+            observed_at: new Date(at).toISOString(),
+            expires_at: new Date(at + TTL_MS).toISOString(),
+        });
+        this.prune();
+        if (this.rows.size >= MAX_ROWS && !this.rows.has(key(obs))) {
+            // Bounded: drop the earliest-expiring row rather than refusing evidence.
+            const earliest = [...this.rows.entries()].reduce((a, b) => Date.parse(a[1].expires_at) <= Date.parse(b[1].expires_at) ? a : b);
+            this.rows.delete(earliest[0]);
+        }
+        this.rows.set(key(obs), obs);
+    }
+    /** Every un-expired observation (the read side of account resolution). */
+    live() {
+        this.prune();
+        return [...this.rows.values()];
+    }
+    /** Credential generation changed wholesale (login/logout): every verdict
+     * about the old generation is void. */
+    noteCredentialChange() {
+        this.rows.clear();
+    }
+    /** ONE account's credential changed (a control-API profile mutation): only
+     * ITS verdicts are void, across every requested model. */
+    clearSubject(harnessId, profileId) {
+        for (const [k, obs] of this.rows) {
+            if (obs.harness_id === harnessId && obs.profile_id === profileId)
+                this.rows.delete(k);
+        }
+    }
+    prune() {
+        const now = this.now().getTime();
+        for (const [k, obs] of this.rows) {
+            if (Date.parse(obs.expires_at) <= now)
+                this.rows.delete(k);
+        }
+    }
+}
+function key(obs) {
+    return [obs.harness_id, obs.profile_id, obs.requested_model].join("\0");
+}
+//# sourceMappingURL=model-substitution-ledger.js.map

package/dist/model-substitution-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-substitution-ledger.js","sourceRoot":"","sources":["../src/model-substitution-ledger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,IAAI,kCAAkC,EAAE,MAAM,mBAAmB,CAAC;AAEvG,wFAAwF;AACxF,4EAA4E;AAC5E,2EAA2E;AAC3E,4BAA4B;AAC5B,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC;AAC3B,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAO,uBAAuB;IAGL,GAAG;IAFxB,IAAI,GAAG,IAAI,GAAG,EAAwC,CAAC;IAE/D,YAA6B,GAAG,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;mBAAlC,GAAG;IAAkC,CAAC;IAEnE,sEAAsE;IACtE,MAAM,CAAC,KAAuE;QAC5E,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,kCAAkC,CAAC,KAAK,CAAC;YACnD,GAAG,KAAK;YACR,WAAW,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;YACvC,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3D,yEAAyE;YACzE,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACxD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACnE,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,0EAA0E;IAC1E,IAAI;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC;IAED;2CACuC;IACvC,oBAAoB;QAClB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAED;8DAC0D;IAC1D,YAAY,CAAC,SAAiB,EAAE,SAAiB;QAC/C,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAEO,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF;AAED,SAAS,GAAG,CAAC,GAAiC;IAC5C,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudexor/daemon",
-  "version": "3.12.2",
+  "version": "3.12.5",
   "license": "MIT",
   "description": "Managed local daemon: Unix-socket JSON-RPC, token auth, task queue. Runner injected (no second scheduler).",
   "type": "module",
@@ -17,10 +17,10 @@
   ],
   "dependencies": {
     "yaml": "^2.8.2",
-    "@claudexor/core": "3.12.2",
-    "@claudexor/journal": "3.12.2",
-    "@claudexor/util": "3.12.2",
-    "@claudexor/schema": "3.12.2"
+    "@claudexor/core": "3.12.5",
+    "@claudexor/journal": "3.12.5",
+    "@claudexor/schema": "3.12.5",
+    "@claudexor/util": "3.12.5"
   },
   "repository": {
     "type": "git",