@claudexor/schema 1.0.1 → 2.1.1

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,sEAAsE;AACtE,eAAO,MAAM,WAAW,gDAIrB,CAAC;AACJ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,iFAAiF;AACjF,eAAO,MAAM,eAAe,0DAIzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB,oDAAkD,CAAC;AAChF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,gBAAgB,4CAA0C,CAAC;AACxE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,cAAc,+GAS2C,CAAC;AACvE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;8DAK8D;AAC9D,eAAO,MAAM,eAAe,yHAUzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;2EAC2E;AAC3E,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,EAC9C,SAAS,EAAE,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,GACxD,eAAe,CASjB;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAQuC,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,EAC9C,OAAO,EAAE,SAAS,mBAAmB,EAAE,GACtC,eAAe,GAAG,SAAS,GAAG,IAAI,CAkBpC;AAED;;;;;GAKG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;EAQ5C,CAAC;AACJ,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAEpG;;;;GAIG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBwC,CAAC;AACzF,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CACvD,OAAO,mCAAmC,CAC3C,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB,8EAI1B,CAAC;AACJ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,aAAa,8CAEgD,CAAC;AAC3E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,6BAA6B,yTAgBxC,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE1F,qFAAqF;AACrF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgC7B,CAAC;AACJ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW9B,CAAC;AACZ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAExF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwH+C,CAAC;AAClF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAS1E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAgD,CAAC;AACnF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyDjC,CAAC;AACJ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/auth.js

@@ -0,0 +1,371 @@
+import { z } from "zod";
+import { Id } from "./primitives.js";
+const AuthTimestamp = z.string().datetime({ offset: true });
+const Sha256Hex = z.string().regex(/^[a-f0-9]{64}$/);
+/** What credential behavior the caller asked Claudexor to enforce. */
+export const AuthRequest = z
+    .enum(["subscription", "api_key", "auto"])
+    .describe("Requested credential behavior: exact subscription, exact managed API key, or policy-governed auto selection.");
+/** The concrete credential transport selected for one real harness execution. */
+export const CredentialRoute = z
+    .enum(["vendor_native", "managed_api_key", "local"])
+    .describe("Effective credential route: vendor-owned native session, Claudexor-managed API key, or credential-free local execution.");
+export const AuthAvailability = z.enum(["available", "unavailable", "unknown"]);
+export const AuthVerification = z.enum(["passed", "failed", "not_run"]);
+export const AuthSourceKind = z
+    .enum([
+    "native_session",
+    "oauth_token_env",
+    "api_key_env",
+    "api_key_flag",
+    "provider_auth_file",
+    "none",
+])
+    .describe("Concrete credential source used or probed by a harness.");
+/** Why a run's effective auth route is what it is — a DETERMINISTIC projection
+ * of (requested preference x disclosed effective route), never scraped from
+ * prose. `native_first` documents INV-061 (auto prefers the native session);
+ * `no_native_session_fallback` is the honest auto→api_key downgrade;
+ * `requested_route_unavailable` surfaces a route that contradicts an explicit
+ * preference (should not happen — surfacing beats hiding). */
+export const AuthRouteReason = z
+    .enum([
+    "as_requested",
+    "native_first",
+    "no_native_session_fallback",
+    "requested_route_unavailable",
+    "undisclosed",
+])
+    .describe("Deterministic reason for the effective auth route: as_requested, native_first (auto, INV-061), no_native_session_fallback (auto downgraded to api_key), requested_route_unavailable (explicit preference contradicted), or undisclosed.");
+/** One owner for the requested x effective → reason mapping (used by the
+ * engine telemetry writer; surfaces project the stored value verbatim). */
+export function deriveAuthRouteReason(requested, effective) {
+    if (effective === null || effective === "unknown")
+        return "undisclosed";
+    if (requested === "subscription") {
+        return effective === "local_session" ? "as_requested" : "requested_route_unavailable";
+    }
+    if (requested === "api_key") {
+        return effective === "api_key" ? "as_requested" : "requested_route_unavailable";
+    }
+    return effective === "local_session" ? "native_first" : "no_native_session_fallback";
+}
+export const AuthSourceReadiness = z
+    .object({
+    source: AuthSourceKind,
+    availability: AuthAvailability,
+    verification: AuthVerification,
+    detail: z.string().optional().describe("Redacted human-readable source evidence."),
+})
+    .strict()
+    .describe("Doctor-backed readiness for one exact credential source.");
+/**
+ * Pre-spawn ESTIMATE of the credential route a run will take, projected
+ * deterministically from the requested preference and the doctor's source
+ * readiness — the same native/OAuth-first doctrine the adapters follow
+ * (INV-061), never a guess from manifests. Null when no usable source is
+ * known (or the preferred route has none): consumers must stay fail-closed
+ * on null, never assume a route. The per-attempt disclosure remains the
+ * post-spawn truth; this estimate exists for PRE-spawn gates (model x route).
+ */
+export function estimateEffectiveAuthRoute(requested, sources) {
+    const usable = (s) => s.availability === "available" && s.verification !== "failed";
+    const hasNative = sources.some((s) => usable(s) && (s.source === "native_session" || s.source === "oauth_token_env"));
+    const hasApiKey = sources.some((s) => usable(s) &&
+        (s.source === "api_key_env" ||
+            s.source === "api_key_flag" ||
+            s.source === "provider_auth_file"));
+    if (requested === "subscription")
+        return hasNative ? "local_session" : null;
+    if (requested === "api_key")
+        return hasApiKey ? "api_key" : null;
+    if (hasNative)
+        return "local_session";
+    if (hasApiKey)
+        return "api_key";
+    return null;
+}
+/**
+ * Exact point-in-time readiness request for one harness credential source.
+ * The harness id is carried by the route/service input, so the body cannot
+ * disagree with the selected adapter. A refresh always bypasses readiness
+ * caches; there is intentionally no staged `fresh` knob.
+ */
+export const ControlAuthReadinessRefreshRequest = z
+    .object({
+    authRequest: AuthRequest,
+    source: AuthSourceKind,
+})
+    .strict()
+    .describe("Request to refresh one exact harness authentication source without probing unrelated routes.");
+/**
+ * Source-scoped readiness must remain separate from the aggregate harness
+ * catalog: it proves only the requested source and must not overwrite other
+ * sources, intents, model truth, or aggregate health.
+ */
+export const ControlAuthReadinessRefreshResponse = z
+    .object({
+    harnessId: Id,
+    authRequest: AuthRequest,
+    requestedSource: AuthSourceKind,
+    observedAt: AuthTimestamp,
+    readiness: AuthSourceReadiness,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.readiness.source !== value.requestedSource) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["readiness", "source"],
+            message: "auth readiness response source must match the exact requested source",
+        });
+    }
+})
+    .describe("Point-in-time readiness evidence for one exact harness credential source.");
+/** Billing truth is deliberately independent from credential transport. */
+export const BillingKnowledge = z
+    .enum(["proven_zero", "subscription_entitlement", "metered", "unknown"])
+    .describe("What is actually known about incremental billing; a native credential route alone never proves entitlement or zero cost.");
+export const CostKnowledge = z
+    .enum(["exact", "estimated", "unknown"])
+    .describe("Quality of incremental-cash cost evidence for an operation.");
+export const AuthCapabilitySelectionReason = z.enum([
+    "exact_requested_route",
+    "adapter_unavailable",
+    "request_mismatch",
+    "route_missing",
+    "route_mismatch",
+    "source_missing",
+    "source_mismatch",
+    "harness_error",
+    "adapter_error",
+    "missing_completion",
+    "response_mismatch",
+    "scratch_mutated",
+    "protocol_violation",
+    "adapter_identity_mismatch",
+    "cancelled",
+]);
+/** Persisted and shown before a setup flow is allowed to spend a real model turn. */
+export const AuthSmokeDisclosure = z
+    .object({
+    schemaVersion: z.literal(1),
+    protocolVersion: z.literal(1),
+    harness: Id,
+    requested: AuthRequest,
+    requiredRoute: CredentialRoute,
+    requiredSource: AuthSourceKind,
+    networkScope: z.literal("selected_harness_only"),
+    billingKnowledge: BillingKnowledge,
+    incrementalCostKnowledge: CostKnowledge,
+    mayConsumeQuota: z.boolean(),
+    generatedAt: AuthTimestamp,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.requiredRoute === "vendor_native") {
+        if (value.billingKnowledge !== "unknown" ||
+            value.incrementalCostKnowledge !== "unknown" ||
+            !value.mayConsumeQuota) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: "a vendor-native smoke must disclose unknown billing/cost and possible quota consumption",
+            });
+        }
+    }
+})
+    .describe("Pre-execution disclosure for the exact same-harness capability smoke required by auth setup.");
+/**
+ * Immutable, redacted proof that the selected adapter completed a real
+ * same-harness round trip on the exact requested credential route. Model text
+ * is never stored: responseDigest binds the receipt to the nonce response.
+ */
+export const AuthCapabilityStreamEvidence = z
+    .object({
+    startedEvents: z.number().int().nonnegative(),
+    completedEvents: z.number().int().nonnegative(),
+    errorEvents: z.number().int().nonnegative(),
+    unexpectedToolEvents: z.number().int().nonnegative(),
+    interactionEvents: z.number().int().nonnegative(),
+    sessionMismatchEvents: z.number().int().nonnegative(),
+    eventsAfterCompleted: z.number().int().nonnegative(),
+    aborted: z.boolean(),
+})
+    .strict();
+export const AuthCapabilityReceipt = z
+    .object({
+    receiptId: Id,
+    attemptId: Id,
+    harness: Id,
+    requested: AuthRequest,
+    requiredRoute: CredentialRoute,
+    requiredSource: AuthSourceKind,
+    effective: CredentialRoute.nullable(),
+    effectiveSource: AuthSourceKind.nullable(),
+    selectionReason: AuthCapabilitySelectionReason,
+    availability: AuthAvailability,
+    verification: AuthVerification,
+    billingKnowledge: BillingKnowledge,
+    costKnowledge: CostKnowledge,
+    costUsd: z.number().nonnegative().optional(),
+    startedAt: AuthTimestamp,
+    completedAt: AuthTimestamp,
+    challengeDigest: Sha256Hex,
+    requestDigest: Sha256Hex,
+    responseDigest: Sha256Hex,
+    streamDigest: Sha256Hex,
+    scratchBeforeDigest: Sha256Hex,
+    scratchAfterDigest: Sha256Hex,
+    stream: AuthCapabilityStreamEvidence,
+    evidenceRefs: z.array(z.string().min(1)),
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.verification === "passed") {
+        if (value.availability !== "available") {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["availability"],
+                message: "passed verification requires available credentials",
+            });
+        }
+        if (value.effective !== value.requiredRoute) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["effective"],
+                message: "passed verification requires the exact requested credential route",
+            });
+        }
+        if (value.effectiveSource !== value.requiredSource) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["effectiveSource"],
+                message: "passed verification requires the exact requested credential source",
+            });
+        }
+        if (value.selectionReason !== "exact_requested_route") {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["selectionReason"],
+                message: "passed verification requires exact_requested_route evidence",
+            });
+        }
+        if (value.responseDigest !== value.challengeDigest) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["responseDigest"],
+                message: "passed verification response must match the persisted challenge digest",
+            });
+        }
+        if (value.stream.startedEvents !== 1 ||
+            value.stream.completedEvents !== 1 ||
+            value.stream.errorEvents !== 0 ||
+            value.stream.unexpectedToolEvents !== 0 ||
+            value.stream.sessionMismatchEvents !== 0 ||
+            value.stream.interactionEvents !== 0 ||
+            value.stream.eventsAfterCompleted !== 0 ||
+            value.stream.aborted) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["stream"],
+                message: "passed verification requires one clean started/completed stream",
+            });
+        }
+        if (value.scratchBeforeDigest !== value.scratchAfterDigest) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["scratchAfterDigest"],
+                message: "passed verification requires an unchanged external scratch tree",
+            });
+        }
+    }
+    if (Date.parse(value.completedAt) < Date.parse(value.startedAt)) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["completedAt"],
+            message: "receipt completion cannot precede its start",
+        });
+    }
+    if (value.requiredRoute === "vendor_native" &&
+        (value.billingKnowledge !== "unknown" || value.costKnowledge !== "unknown")) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "vendor-native route evidence alone cannot prove billing or incremental cash cost",
+        });
+    }
+    if (value.costKnowledge === "unknown" && value.costUsd !== undefined) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["costUsd"],
+            message: "unknown cost must not fabricate a USD value",
+        });
+    }
+    if (value.costKnowledge !== "unknown" && value.costUsd === undefined) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["costUsd"],
+            message: "known or estimated cost requires a USD value",
+        });
+    }
+})
+    .describe("Immutable result of one exact-route same-harness capability smoke.");
+const AuthCapabilityBindingShape = {
+    attemptId: Id,
+    challengeDigest: Sha256Hex,
+    requestDigest: Sha256Hex,
+    disclosure: AuthSmokeDisclosure,
+};
+export const AuthCapabilityBinding = z.object(AuthCapabilityBindingShape).strict();
+export const AuthCapabilityLifecycle = z
+    .discriminatedUnion("state", [
+    z.object({ ...AuthCapabilityBindingShape, state: z.literal("disclosed") }).strict(),
+    z
+        .object({
+        ...AuthCapabilityBindingShape,
+        state: z.literal("running"),
+        startedAt: AuthTimestamp,
+    })
+        .strict(),
+    z
+        .object({
+        ...AuthCapabilityBindingShape,
+        state: z.literal("completed"),
+        startedAt: AuthTimestamp,
+        completedAt: AuthTimestamp,
+        receipt: AuthCapabilityReceipt,
+    })
+        .strict(),
+    z
+        .object({
+        ...AuthCapabilityBindingShape,
+        state: z.literal("interrupted_unknown"),
+        startedAt: AuthTimestamp,
+        interruptedAt: AuthTimestamp,
+    })
+        .strict(),
+])
+    .superRefine((value, context) => {
+    if ("startedAt" in value &&
+        Date.parse(value.startedAt) < Date.parse(value.disclosure.generatedAt)) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["startedAt"],
+            message: "capability smoke cannot start before its disclosure",
+        });
+    }
+    if (value.state === "completed") {
+        if (value.receipt.attemptId !== value.attemptId ||
+            value.receipt.challengeDigest !== value.challengeDigest ||
+            value.receipt.requestDigest !== value.requestDigest ||
+            value.receipt.startedAt !== value.startedAt ||
+            value.receipt.completedAt !== value.completedAt) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["receipt"],
+                message: "completed lifecycle receipt must match its durable binding and timestamps",
+            });
+        }
+    }
+})
+    .describe("Single durable auth-smoke lifecycle: disclosed, running, completed, or interrupted_unknown.");
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAErC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAErD,sEAAsE;AACtE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,IAAI,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;KACzC,QAAQ,CACP,8GAA8G,CAC/G,CAAC;AAGJ,iFAAiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,IAAI,CAAC,CAAC,eAAe,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;KACnD,QAAQ,CACP,yHAAyH,CAC1H,CAAC;AAGJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAGhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAGxE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,IAAI,CAAC;IACJ,gBAAgB;IAChB,iBAAiB;IACjB,aAAa;IACb,cAAc;IACd,oBAAoB;IACpB,MAAM;CACP,CAAC;KACD,QAAQ,CAAC,yDAAyD,CAAC,CAAC;AAGvE;;;;;8DAK8D;AAC9D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,IAAI,CAAC;IACJ,cAAc;IACd,cAAc;IACd,4BAA4B;IAC5B,6BAA6B;IAC7B,aAAa;CACd,CAAC;KACD,QAAQ,CACP,yOAAyO,CAC1O,CAAC;AAGJ;2EAC2E;AAC3E,MAAM,UAAU,qBAAqB,CACnC,SAA8C,EAC9C,SAAyD;IAEzD,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IACxE,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QACjC,OAAO,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,6BAA6B,CAAC;IACxF,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,6BAA6B,CAAC;IAClF,CAAC;IACD,OAAO,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,4BAA4B,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,cAAc;IACtB,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,gBAAgB;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CACnF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,0DAA0D,CAAC,CAAC;AAGxE;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAA8C,EAC9C,OAAuC;IAEvC,MAAM,MAAM,GAAG,CAAC,CAAsB,EAAE,EAAE,CACxC,CAAC,CAAC,YAAY,KAAK,WAAW,IAAI,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC;IAChE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,CACtF,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CACJ,MAAM,CAAC,CAAC,CAAC;QACT,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa;YACzB,CAAC,CAAC,MAAM,KAAK,cAAc;YAC3B,CAAC,CAAC,MAAM,KAAK,oBAAoB,CAAC,CACvC,CAAC;IACF,IAAI,SAAS,KAAK,cAAc;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,IAAI,SAAS;QAAE,OAAO,eAAe,CAAC;IACtC,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,MAAM,CAAC;IACN,WAAW,EAAE,WAAW;IACxB,MAAM,EAAE,cAAc;CACvB,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,8FAA8F,CAC/F,CAAC;AAGJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,SAAS,EAAE,EAAE;IACb,WAAW,EAAE,WAAW;IACxB,eAAe,EAAE,cAAc;IAC/B,UAAU,EAAE,aAAa;IACzB,SAAS,EAAE,mBAAmB;CAC/B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;YAC7B,OAAO,EAAE,sEAAsE;SAChF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;KACD,QAAQ,CAAC,2EAA2E,CAAC,CAAC;AAKzF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,IAAI,CAAC,CAAC,aAAa,EAAE,0BAA0B,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;KACvE,QAAQ,CACP,0HAA0H,CAC3H,CAAC;AAGJ,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;KACvC,QAAQ,CAAC,6DAA6D,CAAC,CAAC;AAG3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,IAAI,CAAC;IAClD,uBAAuB;IACvB,qBAAqB;IACrB,kBAAkB;IAClB,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,eAAe;IACf,oBAAoB;IACpB,mBAAmB;IACnB,iBAAiB;IACjB,oBAAoB;IACpB,2BAA2B;IAC3B,WAAW;CACZ,CAAC,CAAC;AAGH,qFAAqF;AACrF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,EAAE;IACX,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,cAAc;IAC9B,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAChD,gBAAgB,EAAE,gBAAgB;IAClC,wBAAwB,EAAE,aAAa;IACvC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,aAAa;CAC3B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,KAAK,CAAC,aAAa,KAAK,eAAe,EAAE,CAAC;QAC5C,IACE,KAAK,CAAC,gBAAgB,KAAK,SAAS;YACpC,KAAK,CAAC,wBAAwB,KAAK,SAAS;YAC5C,CAAC,KAAK,CAAC,eAAe,EACtB,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EACL,yFAAyF;aAC5F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;KACD,QAAQ,CACP,8FAA8F,CAC/F,CAAC;AAGJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACjD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,EAAE;IACX,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,cAAc;IAC9B,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,eAAe,EAAE,cAAc,CAAC,QAAQ,EAAE;IAC1C,eAAe,EAAE,6BAA6B;IAC9C,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,gBAAgB;IAC9B,gBAAgB,EAAE,gBAAgB;IAClC,aAAa,EAAE,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC5C,SAAS,EAAE,aAAa;IACxB,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE,SAAS;IAC1B,aAAa,EAAE,SAAS;IACxB,cAAc,EAAE,SAAS;IACzB,YAAY,EAAE,SAAS;IACvB,mBAAmB,EAAE,SAAS;IAC9B,kBAAkB,EAAE,SAAS;IAC7B,MAAM,EAAE,4BAA4B;IACpC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CACzC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YACvC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,cAAc,CAAC;gBACtB,OAAO,EAAE,oDAAoD;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;YAC5C,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,OAAO,EAAE,mEAAmE;aAC7E,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YACnD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,iBAAiB,CAAC;gBACzB,OAAO,EAAE,oEAAoE;aAC9E,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,eAAe,KAAK,uBAAuB,EAAE,CAAC;YACtD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,iBAAiB,CAAC;gBACzB,OAAO,EAAE,6DAA6D;aACvE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;YACnD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,gBAAgB,CAAC;gBACxB,OAAO,EAAE,wEAAwE;aAClF,CAAC,CAAC;QACL,CAAC;QACD,IACE,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC;YAChC,KAAK,CAAC,MAAM,CAAC,eAAe,KAAK,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,CAAC;YAC9B,KAAK,CAAC,MAAM,CAAC,oBAAoB,KAAK,CAAC;YACvC,KAAK,CAAC,MAAM,CAAC,qBAAqB,KAAK,CAAC;YACxC,KAAK,CAAC,MAAM,CAAC,iBAAiB,KAAK,CAAC;YACpC,KAAK,CAAC,MAAM,CAAC,oBAAoB,KAAK,CAAC;YACvC,KAAK,CAAC,MAAM,CAAC,OAAO,EACpB,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,QAAQ,CAAC;gBAChB,OAAO,EAAE,iEAAiE;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC3D,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,oBAAoB,CAAC;gBAC5B,OAAO,EAAE,iEAAiE;aAC3E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IACE,KAAK,CAAC,aAAa,KAAK,eAAe;QACvC,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,EAC3E,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,kFAAkF;SAC5F,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;KACD,QAAQ,CAAC,oEAAoE,CAAC,CAAC;AAGlF,MAAM,0BAA0B,GAAG;IACjC,SAAS,EAAE,EAAE;IACb,eAAe,EAAE,SAAS;IAC1B,aAAa,EAAE,SAAS;IACxB,UAAU,EAAE,mBAAmB;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,kBAAkB,CAAC,OAAO,EAAE;IAC3B,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,0BAA0B,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACnF,CAAC;SACE,MAAM,CAAC;QACN,GAAG,0BAA0B;QAC7B,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC3B,SAAS,EAAE,aAAa;KACzB,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,GAAG,0BAA0B;QAC7B,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC7B,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,qBAAqB;KAC/B,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,GAAG,0BAA0B;QAC7B,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QACvC,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,aAAa;KAC7B,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IACE,WAAW,IAAI,KAAK;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,EACtE,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAChC,IACE,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAC3C,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;YACvD,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;YACnD,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAC3C,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAC/C,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,2EAA2E;aACrF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;KACD,QAAQ,CACP,6FAA6F,CAC9F,CAAC"}

package/dist/budget.d.ts

@@ -1,8 +1,89 @@
 import { z } from "zod";
+export declare const PaidBudget: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"unlimited">;
+}, "strict", z.ZodTypeAny, {
+    kind: "unlimited";
+}, {
+    kind: "unlimited";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"finite">;
+    maxUsd: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    kind: "finite";
+    maxUsd: number;
+}, {
+    kind: "finite";
+    maxUsd: number;
+}>]>;
+export type PaidBudget = z.infer<typeof PaidBudget>;
+export declare const CostEvidence: z.ZodObject<{
+    knowledge: z.ZodEnum<["exact", "estimated", "unknown"]>;
+    billing: z.ZodEnum<["proven_zero", "subscription_entitlement", "metered", "unknown"]>;
+    source: z.ZodString;
+    provenance: z.ZodArray<z.ZodString, "many">;
+    estimatedUsd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+}, "strict", z.ZodTypeAny, {
+    source: string;
+    knowledge: "exact" | "unknown" | "estimated";
+    billing: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+    provenance: string[];
+    estimatedUsd: number | null;
+}, {
+    source: string;
+    knowledge: "exact" | "unknown" | "estimated";
+    billing: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+    provenance: string[];
+    estimatedUsd?: number | null | undefined;
+}>;
+export type CostEvidence = z.infer<typeof CostEvidence>;
 export declare const AuthMode: z.ZodEnum<["local_session", "api_key", "unknown"]>;
 export type AuthMode = z.infer<typeof AuthMode>;
-export declare const Portfolio: z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>;
-export type Portfolio = z.infer<typeof Portfolio>;
+export declare const RoutingGoal: z.ZodEnum<["auto", "quality", "economy"]>;
+export type RoutingGoal = z.infer<typeof RoutingGoal>;
+export declare const PaidFallback: z.ZodEnum<["never", "when_unavailable", "allowed_within_cap"]>;
+export type PaidFallback = z.infer<typeof PaidFallback>;
+export declare const QualityTierRoute: z.ZodObject<{
+    harness: z.ZodString;
+    model: z.ZodString;
+    effort: z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>;
+}, "strict", z.ZodTypeAny, {
+    harness: string;
+    model: string;
+    effort: "low" | "medium" | "high" | "xhigh" | "max";
+}, {
+    harness: string;
+    model: string;
+    effort: "low" | "medium" | "high" | "xhigh" | "max";
+}>;
+export type QualityTierRoute = z.infer<typeof QualityTierRoute>;
+export declare const QualityTier: z.ZodArray<z.ZodObject<{
+    harness: z.ZodString;
+    model: z.ZodString;
+    effort: z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>;
+}, "strict", z.ZodTypeAny, {
+    harness: string;
+    model: string;
+    effort: "low" | "medium" | "high" | "xhigh" | "max";
+}, {
+    harness: string;
+    model: string;
+    effort: "low" | "medium" | "high" | "xhigh" | "max";
+}>, "many">;
+export type QualityTier = z.infer<typeof QualityTier>;
+export declare const QualityTierSet: z.ZodDefault<z.ZodRecord<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, z.ZodArray<z.ZodArray<z.ZodObject<{
+    harness: z.ZodString;
+    model: z.ZodString;
+    effort: z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>;
+}, "strict", z.ZodTypeAny, {
+    harness: string;
+    model: string;
+    effort: "low" | "medium" | "high" | "xhigh" | "max";
+}, {
+    harness: string;
+    model: string;
+    effort: "low" | "medium" | "high" | "xhigh" | "max";
+}>, "many">, "many">>>;
+export type QualityTierSet = z.infer<typeof QualityTierSet>;
 /** A pre-call reservation. Created before work; settled after. Never post-hoc only. */
 export declare const BudgetLease: z.ZodObject<{
     lease_id: z.ZodString;
@@ -11,65 +92,113 @@ export declare const BudgetLease: z.ZodObject<{
     intent: z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>;
     harness_id: z.ZodString;
     model_hint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    max_usd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    cost: z.ZodObject<{
+        knowledge: z.ZodEnum<["exact", "estimated", "unknown"]>;
+        billing: z.ZodEnum<["proven_zero", "subscription_entitlement", "metered", "unknown"]>;
+        source: z.ZodString;
+        provenance: z.ZodArray<z.ZodString, "many">;
+        estimatedUsd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    }, "strict", z.ZodTypeAny, {
+        source: string;
+        knowledge: "exact" | "unknown" | "estimated";
+        billing: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+        provenance: string[];
+        estimatedUsd: number | null;
+    }, {
+        source: string;
+        knowledge: "exact" | "unknown" | "estimated";
+        billing: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+        provenance: string[];
+        estimatedUsd?: number | null | undefined;
+    }>;
     reason: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     created_at: z.ZodString;
     state: z.ZodDefault<z.ZodEnum<["reserved", "settled", "cancelled"]>>;
 }, "strip", z.ZodTypeAny, {
+    state: "cancelled" | "reserved" | "settled";
     harness_id: string;
-    intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
-    model_hint: string | null;
-    max_usd: number | null;
     created_at: string;
-    state: "cancelled" | "reserved" | "settled";
     reason: string[];
+    intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
+    model_hint: string | null;
     lease_id: string;
     task_id: string;
+    cost: {
+        source: string;
+        knowledge: "exact" | "unknown" | "estimated";
+        billing: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+        provenance: string[];
+        estimatedUsd: number | null;
+    };
     attempt_id?: string | undefined;
 }, {
     harness_id: string;
-    intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
     created_at: string;
+    intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
     lease_id: string;
     task_id: string;
-    model_hint?: string | null | undefined;
-    max_usd?: number | null | undefined;
+    cost: {
+        source: string;
+        knowledge: "exact" | "unknown" | "estimated";
+        billing: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+        provenance: string[];
+        estimatedUsd?: number | null | undefined;
+    };
     state?: "cancelled" | "reserved" | "settled" | undefined;
     reason?: string[] | undefined;
+    model_hint?: string | null | undefined;
     attempt_id?: string | undefined;
 }>;
 export type BudgetLease = z.infer<typeof BudgetLease>;
 /** An observed quota/usage signal (rate-limit error, used-percent, reset hint). */
 export declare const BudgetObservation: z.ZodObject<{
     harness_id: z.ZodString;
+    /** Credential route the signal was observed on (round-17 #2); absent on
+     * legacy/synthetic observations. */
+    credential_route: z.ZodOptional<z.ZodEnum<["vendor_native", "managed_api_key", "local"]>>;
+    /** The credential subject the signal belongs to (round-17 #2): a
+     * credential-profile id, null for the engine default. Cooldown/pace
+     * queries filter by exact subject so profile A's limit never penalizes
+     * profile B or the default. */
+    subject_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     ts: z.ZodString;
     quality: z.ZodEnum<["exact", "native", "observed", "manual", "unknown"]>;
-    kind: z.ZodEnum<["spend", "rate_limited", "used_percent", "cooldown", "manual"]>;
+    kind: z.ZodEnum<["spend", "rate_limited", "quota_constraint", "cooldown"]>;
     usd: z.ZodOptional<z.ZodNumber>;
-    used_percent: z.ZodOptional<z.ZodNumber>;
+    constraint_id: z.ZodOptional<z.ZodString>;
+    used_ratio: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    window_seconds: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     resets_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     cooldown_until: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     detail: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    kind: "rate_limited" | "manual" | "used_percent" | "spend" | "cooldown";
     harness_id: string;
+    kind: "rate_limited" | "spend" | "quota_constraint" | "cooldown";
     ts: string;
     quality: "exact" | "unknown" | "manual" | "native" | "observed";
     detail?: string | undefined;
-    used_percent?: number | undefined;
+    credential_route?: "local" | "vendor_native" | "managed_api_key" | undefined;
+    subject_id?: string | null | undefined;
+    used_ratio?: number | null | undefined;
+    window_seconds?: number | null | undefined;
     resets_at?: string | null | undefined;
-    usd?: number | undefined;
     cooldown_until?: string | null | undefined;
+    usd?: number | undefined;
+    constraint_id?: string | undefined;
 }, {
-    kind: "rate_limited" | "manual" | "used_percent" | "spend" | "cooldown";
     harness_id: string;
+    kind: "rate_limited" | "spend" | "quota_constraint" | "cooldown";
     ts: string;
     quality: "exact" | "unknown" | "manual" | "native" | "observed";
     detail?: string | undefined;
-    used_percent?: number | undefined;
+    credential_route?: "local" | "vendor_native" | "managed_api_key" | undefined;
+    subject_id?: string | null | undefined;
+    used_ratio?: number | null | undefined;
+    window_seconds?: number | null | undefined;
     resets_at?: string | null | undefined;
-    usd?: number | undefined;
     cooldown_until?: string | null | undefined;
+    usd?: number | undefined;
+    constraint_id?: string | undefined;
 }>;
 export type BudgetObservation = z.infer<typeof BudgetObservation>;
 //# sourceMappingURL=budget.d.ts.map

package/dist/budget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../src/budget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,QAAQ,oDAEuE,CAAC;AAC7F,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,SAAS,mJAcnB,CAAC;AACJ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD,uFAAuF;AACvF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgBiF,CAAC;AAC1G,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,mFAAmF;AACnF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc2F,CAAC;AAC1H,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../src/budget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;IAKuE,CAAC;AAC/F,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;EAS8D,CAAC;AACxF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,QAAQ,oDAEuE,CAAC;AAC7F,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,WAAW,2CAIrB,CAAC;AACJ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,YAAY,gEAE2C,CAAC;AACrE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAOiD,CAAC;AAC/E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,WAAW;;;;;;;;;;;;WAG6D,CAAC;AACtF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,cAAc;;;;;;;;;;;;sBAKxB,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,uFAAuF;AACvF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyBrB,CAAC;AACJ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,mFAAmF;AACnF,eAAO,MAAM,iBAAiB;;IAG1B;wCACoC;;IAKpC;;;mCAG+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+BhC,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}