@cleocode/core 2026.9.22 → 2026.9.24

package/dist/decide/operations.d.ts

@@ -8,8 +8,9 @@
  * @task T12491
  * @epic T12486
  */
-import type { DecisionAnswer } from '@cleocode/contracts';
+import { type DecideProfileListResult, type DecideProviderState as DecideProviderStateContract, type DecisionAnswer, type DecisionProviderCapabilities, type DecisionProviderKind, type DecisionProviderUsage } from '@cleocode/contracts';
 import { type DecideCredentialsSummary, type SealedDecideConnection } from './credentials.js';
+import { type SpendLedger, type SpendLedgerHealth, type SpendResetOptions, type SpendResetReceipt } from './spend.js';
 /** Default deadline for the `GET /v1/models` probe, ms. */
 export declare const DEFAULT_DECIDE_PROBE_TIMEOUT_MS = 3000;
 /** Default deadline for `cleo decide ask`, ms (generous: it is a debug tool). */
@@ -18,15 +19,34 @@ export declare const DEFAULT_DECIDE_ASK_TIMEOUT_MS = 10000;
  * Reachability of the configured provider.
  *
  * - `reachable`    — `GET /v1/models` answered 2xx.
- * - `unauthorized` — the provider rejected the key (401/403).
+ * - `unauthorized` — the provider rejected the key (401, or a 403 that is not a key limit).
+ * - `key_limit_reached` — the key's monthly decision limit is reached (403
+ *   `key_limit_exceeded`); decisions resume when the UTC month rolls over.
  * - `unconfigured` — no valid base URL + key stored.
  * - `unreachable`  — network failure, timeout, or any other HTTP status.
  */
-export type DecideProviderState = 'reachable' | 'unauthorized' | 'unconfigured' | 'unreachable';
+export type DecideProviderState = DecideProviderStateContract;
+/** Month-to-date spend against the CLEO cap (D11159). */
+export interface DecideSpendSummary {
+    /** UTC month, `YYYY-MM`. */
+    readonly month: string;
+    /** Micro-dollars recorded this month. */
+    readonly spentMicros: number;
+    /** Micro-dollars reserved by calls in flight. */
+    readonly reservedMicros: number;
+    /** The cap, micro-dollars (`decide.budget.monthlyMicros`). */
+    readonly capMicros: number;
+    /** Whether sites are degraded to their heuristics because the cap is reached. */
+    readonly capReached: boolean;
+    /** ISO time until which the key's monthly limit stops decisions, when set. */
+    readonly keyLimitedUntil?: string;
+}
 /** Result of {@link probeDecideProvider}. */
 export interface DecideProbeResult {
     /** Reachability verdict. */
     readonly state: DecideProviderState;
+    /** Profile id probed (`<provider>/<name>`, T12733), when known. */
+    readonly profile?: string;
     /** Configured base URL. */
     readonly baseUrl?: string;
     /** Masked key preview. */
@@ -43,6 +63,18 @@ export interface DecideProbeResult {
     readonly latencyMs?: number;
     /** Secret-free explanation or warning. */
     readonly detail?: string;
+    /** Registered decision sites (T12662). */
+    readonly sites: number;
+    /** What the provider supports beyond the Jev minimum (T12664). */
+    readonly capabilities?: DecisionProviderCapabilities;
+    /** Last usage/balance read (refreshed at most every 10 minutes). */
+    readonly usage?: DecisionProviderUsage & {
+        readonly fetchedAt: string;
+    };
+    /** Month-to-date spend against the cap. */
+    readonly spend?: DecideSpendSummary;
+    /** Spend-ledger health; `corrupt` or `unavailable` means every site falls back. */
+    readonly spendLedger?: SpendLedgerHealth;
 }
 /** Options for {@link probeDecideProvider}. */
 export interface DecideProbeOptions {
@@ -52,7 +84,24 @@ export interface DecideProbeOptions {
     readonly fetch?: typeof fetch;
     /** Deadline, ms. Default {@link DEFAULT_DECIDE_PROBE_TIMEOUT_MS}. */
     readonly timeoutMs?: number;
+    /** Spend ledger; `null` omits spend. Default: the machine-wide ledger. */
+    readonly spend?: SpendLedger | null;
+    /** Monthly cap, micro-dollars. Default: `decide.budget.monthlyMicros`, else $1. */
+    readonly capMicros?: number;
+    /** Spend-ledger path to inspect. Default: `<cleoHome>/decide/spend.json`. */
+    readonly spendStatePath?: string;
+    /** Provider-state file (capabilities + usage cache). Default: `<cleoHome>/decide/provider-state.json`. */
+    readonly providerStatePath?: string;
+    /** Wall clock, epoch ms. Default `Date.now`. */
+    readonly now?: () => number;
+    /**
+     * Re-detect capabilities even when the cached read is fresh. Set after the
+     * settings change so the provider's extensions apply immediately (T12713).
+     */
+    readonly refreshCapabilities?: boolean;
 }
+/** Message naming the repair for a ledger that cannot be read. */
+export declare const SPEND_LEDGER_REPAIR_HINT = "The System One spend ledger cannot be read, so every site uses its heuristic (the cap fails closed). Run `cleo decide budget reset` to start a fresh ledger; the old file is kept as a receipt.";
 /**
  * Probe the provider with `GET {baseUrl}/v1/models` under a short deadline.
  * Never throws.
@@ -63,46 +112,104 @@ export interface DecideProbeOptions {
 export declare function probeDecideProvider(opts?: DecideProbeOptions): Promise<DecideProbeResult>;
 /** Input for {@link configureDecide}. */
 export interface DecideConfigureInput {
-    /** Provider base URL. Omitted → the stored URL is kept. */
+    /**
+     * Provider kind. Omitted → the provider of a `<provider>/<name>` profile,
+     * else inferred from an override `baseUrl` (the layahost origin →
+     * `layahost`, any other → `jev`), else the active profile's provider, else
+     * `layahost`.
+     */
+    readonly provider?: DecisionProviderKind;
+    /**
+     * `default` (the provider's preset URL, resolved at call time) or an
+     * override URL. Omitted → the profile's stored setting, else `default`.
+     */
     readonly baseUrl?: string;
-    /** API key. Omitted → the stored key is kept. */
+    /** API key. Omitted → the profile's stored key is kept. */
     readonly apiKey?: string;
     /**
-     * Default model. Omitted → the stored model is kept when the URL is
-     * unchanged; otherwise resolved from the provider's model listing.
+     * Profile to add or update (T12733): `<provider>/<name>` or a bare name;
+     * other profiles are kept. Omitted → the active profile when it has the
+     * same provider, else `<provider>/default`.
+     */
+    readonly profile?: string;
+    /**
+     * Make the profile active. Omitted → true for the first profile or one that
+     * is already active, else false (adding a second key never silently
+     * switches everyday decisions).
+     */
+    readonly activate?: boolean;
+    /**
+     * Default model. Omitted → the stored model when the URL is unchanged;
+     * otherwise the preset default (`layahost`), else the first model the
+     * provider lists (`jev`).
      */
     readonly model?: string;
-    /** `fetch` for the model lookup; tests inject a stub. */
+    /** `fetch` for the model lookup and the post-save probe; tests inject a stub. */
     readonly fetch?: typeof fetch;
-    /** Deadline for the model lookup, ms. */
+    /** Deadline for the model lookup and the probe, ms. */
     readonly timeoutMs?: number;
 }
 /** Result of {@link configureDecide}. */
 export interface DecideConfigureResult extends DecideCredentialsSummary {
+    /** Whether the configured profile is now the active one. */
+    readonly active: boolean;
     /** Where the stored model came from. */
-    readonly modelSource: 'flag' | 'stored' | 'provider-listing' | 'none';
+    readonly modelSource: 'flag' | 'stored' | 'preset' | 'provider-listing' | 'none';
+    /** Reachability verdict of the probe run after saving. */
+    readonly providerState: DecideProviderState;
+    /** Capabilities detected after saving (the provider's extensions are active from now on). */
+    readonly capabilities?: DecisionProviderCapabilities;
     /** Secret-free warning, e.g. when no model could be resolved. */
     readonly warning?: string;
 }
 /**
- * Store the provider settings, merging omitted values with the stored ones.
+ * Store a profile's settings, merging omitted values with the stored ones,
+ * then probe the provider and re-detect its capabilities so its extensions
+ * apply immediately.
  *
- * The Jev `/v1/systemone` endpoint requires a `model`, and no model literal
- * may be hard-coded in core (arch gate 13). So when no model is given (and
- * none is stored for the same URL), this asks the provider (`GET /v1/models`)
- * and stores the FIRST model it lists — the provider's own ordering; layahost
- * lists its routing default first. When that lookup fails the settings are
- * still stored, without a model, and a warning says how to set one.
+ * A model is always stored when one can be known, because the Jev
+ * `/v1/systemone` endpoint rejects a request without one (422, and every
+ * site silently falls back). The model comes from, in order: the flag; the
+ * stored model (same URL); the provider preset (`layahost` →
+ * `LAYAHOST_DEFAULT_MODEL`); the first model the provider lists. Only a
+ * `jev` provider whose listing fails can end with no model, and then a
+ * warning says how to set one.
  *
- * @param input - URL, key, optional model.
- * @returns Secret-free summary plus the model's provenance.
  * A URL whose host differs from the stored one must come with a fresh key:
  * the stored key is never re-used (or sent in the model probe) for a new host.
  *
- * @throws {DecideCredentialsError} On an invalid URL, blank key, invalid model
- *   name, or a host change without a fresh key.
+ * Profiles (T12733): the settings go to one profile, `<provider>/<name>`
+ * (see {@link DecideConfigureInput.profile}); every other profile is kept,
+ * and a new profile needs its own key. The URL is stored as `default` unless
+ * overridden. The post-save probe targets that profile, active or not.
+ *
+ * @param input - Provider, URL, key, optional model, profile and activation.
+ * @returns Secret-free summary plus the model's provenance and the probe verdict.
+ * @throws {DecideCredentialsError} On an invalid URL or profile, a provider
+ *   without a preset URL and no override, a blank key, an invalid model name,
+ *   a new profile without a key, or a host change without a fresh key.
  */
 export declare function configureDecide(input: DecideConfigureInput): Promise<DecideConfigureResult>;
+/** Options for {@link listDecideProfilesReport}. */
+export interface DecideProfilesReportOptions {
+    /** Probe each profile's `GET /v1/models`. Default false (no network). */
+    readonly probe?: boolean;
+    /** `fetch` for the probes; tests inject a stub. */
+    readonly fetch?: typeof fetch;
+    /** Deadline per probe, ms. Default {@link DEFAULT_DECIDE_PROBE_TIMEOUT_MS}. */
+    readonly timeoutMs?: number;
+    /** Provider-state file for the probes. Default: `<cleoHome>/decide/provider-state.json`. */
+    readonly providerStatePath?: string;
+}
+/**
+ * `cleo decide profiles`: every stored profile with the active one marked and
+ * keys masked; with `probe`, each profile's reachability (probed in parallel).
+ * Never throws.
+ *
+ * @param opts - Whether to probe, plus the injectable `fetch` and deadline.
+ * @returns The secret-free profile list.
+ */
+export declare function listDecideProfilesReport(opts?: DecideProfilesReportOptions): Promise<DecideProfileListResult>;
 /**
  * Remove the stored settings (and rotated backups of them).
  *
@@ -121,9 +228,17 @@ export interface DecideAskInput {
     readonly timeoutMs?: number;
     /** Project root for the audit line. Default: the resolved project root. */
     readonly projectRoot?: string;
+    /** Profile to ask through (T12733), `<provider>/<name>`. Default: the active profile. */
+    readonly profile?: string;
 }
 /** Result of {@link askDecideDebug}. */
 export interface DecideAskResult {
+    /** The yes/no question that was asked (so a human render can show it). */
+    readonly question?: string;
+    /** The state that was judged (echoed for the human render). */
+    readonly state?: string;
+    /** Id of the profile asked through, when one was configured (T12733). */
+    readonly profile?: string;
     /** The typed answer. */
     readonly answer: DecisionAnswer;
     /** `provider`, `cache` or `fallback`. */
@@ -149,4 +264,17 @@ export interface DecideAskResult {
  * @returns The typed answer with source, fallback reason, latency and cost.
  */
 export declare function askDecideDebug(input: DecideAskInput): Promise<DecideAskResult>;
+/**
+ * `cleo decide budget reset`: start a fresh spend ledger for this month,
+ * moving the old file aside as a receipt. The repair for a corrupt ledger,
+ * which otherwise keeps every site on its heuristic. A readable ledger is
+ * refused unless `opts.force`, and its month-to-date spend is carried over,
+ * so a reset never lifts a reached cap.
+ *
+ * @param statePath - Ledger path. Default: `<cleoHome>/decide/spend.json`.
+ * @param opts - `force` resets a ledger that is not corrupt.
+ * @returns The receipt: previous health, carried spend and where the old file went.
+ * @throws {SpendResetRefusedError} When the ledger is not corrupt and `force` is not set.
+ */
+export declare function resetDecideBudget(statePath?: string, opts?: SpendResetOptions): Promise<SpendResetReceipt>;
 //# sourceMappingURL=operations.d.ts.map

package/dist/decide/operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/decide/operations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAQ1D,OAAO,EAGL,KAAK,wBAAwB,EAG7B,KAAK,sBAAsB,EAG5B,MAAM,kBAAkB,CAAC;AAI1B,2DAA2D;AAC3D,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAErD,iFAAiF;AACjF,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,cAAc,GAAG,cAAc,GAAG,aAAa,CAAC;AAEhG,6CAA6C;AAC7C,MAAM,WAAW,iBAAiB;IAChC,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,2BAA2B;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,0BAA0B;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;IACrD,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,uDAAuD;IACvD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACpD,mDAAmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAiBD;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;AAED,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iDAAiD;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,yCAAyC;AACzC,MAAM,WAAW,qBAAsB,SAAQ,wBAAwB;IACrE,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,QAAQ,GAAG,kBAAkB,GAAG,MAAM,CAAC;IACtE,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAuCjG;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAChD,wBAAwB,GAAG;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAChD,CAGA;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,wCAAwC;AACxC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;IACnD,+CAA+C;IAC/C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,8BAA8B;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,mCAAmC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAgCD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAyBpF"}
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/decide/operations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAGL,KAAK,uBAAuB,EAG5B,KAAK,mBAAmB,IAAI,2BAA2B,EACvD,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAE3B,MAAM,qBAAqB,CAAC;AAQ7B,OAAO,EAGL,KAAK,wBAAwB,EAU7B,KAAK,sBAAsB,EAG5B,MAAM,kBAAkB,CAAC;AAU1B,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACvB,MAAM,YAAY,CAAC;AAEpB,2DAA2D;AAC3D,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAErD,iFAAiF;AACjF,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAE9D,yDAAyD;AACzD,MAAM,WAAW,kBAAkB;IACjC,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yCAAyC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iDAAiD;IACjD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,6CAA6C;AAC7C,MAAM,WAAW,iBAAiB;IAChC,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,mEAAmE;IACnE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,0BAA0B;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;IACrD,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,uDAAuD;IACvD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,4BAA4B,CAAC;IACrD,oEAAoE;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,GAAG;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IACpC,mFAAmF;IACnF,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;CAC1C;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACpD,mDAAmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACpC,mFAAmF;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,0GAA0G;IAC1G,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,gDAAgD;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC;AAKD,kEAAkE;AAClE,eAAO,MAAM,wBAAwB,oMAC8J,CAAC;AAwDpM;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAiF5B;AAED,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,yCAAyC;AACzC,MAAM,WAAW,qBAAsB,SAAQ,wBAAwB;IACrE,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,kBAAkB,GAAG,MAAM,CAAC;IACjF,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,6FAA6F;IAC7F,QAAQ,CAAC,YAAY,CAAC,EAAE,4BAA4B,CAAC;IACrD,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAqCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmFjG;AAED,oDAAoD;AACpD,MAAM,WAAW,2BAA2B;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,mDAAmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,4FAA4F;IAC5F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,GAAE,2BAAgC,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAwBlC;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAChD,wBAAwB,GAAG;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAChD,CAGA;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wCAAwC;AACxC,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,wBAAwB;IACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;IACnD,+CAA+C;IAC/C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,8BAA8B;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,mCAAmC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAgCD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CA+BpF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAE5B"}

package/dist/decide/operations.js

@@ -8,21 +8,69 @@
  * @task T12491
  * @epic T12486
  */
+import { DECIDE_DEFAULT_PROFILE_NAME, DECIDE_PROFILE_DEFAULT_URL, JEV_MINIMUM_CAPABILITIES, } from '@cleocode/contracts';
 import { getProjectRoot } from '../paths.js';
 import { createJsonlDecisionAudit, } from './audit.js';
 import { decide } from './client.js';
-import { clearDecideCredentials, DecideCredentialsError, describeDecideCredentials, loadDecideConnection, sameDecideHost, saveDecideCredentials, } from './credentials.js';
+import { clearDecideCredentials, DecideCredentialsError, decideProfileId, describeDecideCredentials, describeDecideProfile, isValidDecideProfileName, listDecideProfiles, loadDecideConnection, loadDecideProfile, parseDecideProfileRef, sameDecideHost, saveDecideCredentials, } from './credentials.js';
 import { listJevModels } from './jev-wire.js';
 import { DecisionProviderError } from './provider.js';
+import { refreshProviderState } from './provider-state.js';
+import { DECISION_PROVIDER_PRESETS, inferDecisionProviderKind, presetBaseUrl, } from './providers.js';
+import { DECIDE_ASK_DECISION_SITE, DECISION_SITES } from './sites/registry.js';
+import { createFileSpendLedger, DEFAULT_MONTHLY_SPEND_CAP_MICROS, inspectSpendLedger, MONTHLY_SPEND_CAP_KEY, resetSpendLedger, } from './spend.js';
 /** Default deadline for the `GET /v1/models` probe, ms. */
 export const DEFAULT_DECIDE_PROBE_TIMEOUT_MS = 3_000;
 /** Default deadline for `cleo decide ask`, ms (generous: it is a debug tool). */
 export const DEFAULT_DECIDE_ASK_TIMEOUT_MS = 10_000;
+const KEY_LIMIT_DETAIL = "The key's monthly decision limit is reached (403 key_limit_exceeded). The key itself is fine: decisions resume when the UTC month rolls over, or raise the limit in the provider console.";
+/** Message naming the repair for a ledger that cannot be read. */
+export const SPEND_LEDGER_REPAIR_HINT = 'The System One spend ledger cannot be read, so every site uses its heuristic (the cap fails closed). Run `cleo decide budget reset` to start a fresh ledger; the old file is kept as a receipt.';
+/** `{ detail }` when there is one, else nothing. */
+function optionalDetail(detail) {
+    return detail ? { detail } : {};
+}
+/** Month-to-date spend, or undefined when the ledger is disabled or unreadable. */
+async function spendSummary(opts) {
+    const ledger = opts.spend === undefined ? createFileSpendLedger() : opts.spend;
+    if (!ledger)
+        return undefined;
+    const status = await ledger.status();
+    if (!status)
+        return undefined;
+    let capMicros = opts.capMicros;
+    if (capMicros === undefined) {
+        try {
+            const { getConfigValue } = await import('../config/registry.js');
+            const value = await getConfigValue(MONTHLY_SPEND_CAP_KEY, {
+                projectRoot: getProjectRoot(),
+            });
+            capMicros =
+                typeof value === 'number' && value >= 0 ? value : DEFAULT_MONTHLY_SPEND_CAP_MICROS;
+        }
+        catch {
+            capMicros = DEFAULT_MONTHLY_SPEND_CAP_MICROS;
+        }
+    }
+    return {
+        month: status.month,
+        spentMicros: status.spentMicros,
+        reservedMicros: status.reservedMicros,
+        capMicros,
+        capReached: status.spentMicros >= capMicros,
+        ...(status.keyLimitedUntil !== undefined
+            ? { keyLimitedUntil: new Date(status.keyLimitedUntil).toISOString() }
+            : {}),
+    };
+}
 const NO_MODEL_WARNING = 'No default model is configured. The Jev /v1/systemone endpoint requires a model; set one with `cleo decide config --model <name>` (see `models`).';
 function stateForError(err) {
     if (err instanceof DecisionProviderError) {
         if (err.kind === 'unauthorized')
             return { state: 'unauthorized', httpStatus: err.status };
+        if (err.kind === 'key_limit_exceeded') {
+            return { state: 'key_limit_reached', httpStatus: err.status };
+        }
         if (err.kind === 'invalid_response')
             return { state: 'reachable', httpStatus: err.status };
         return {
@@ -40,98 +88,239 @@ function stateForError(err) {
  * @returns The reachability verdict and, when listed, the available models.
  */
 export async function probeDecideProvider(opts = {}) {
+    const sites = DECISION_SITES.length;
     const sealed = opts.connection === undefined ? loadDecideConnection() : opts.connection;
+    const spend = await spendSummary(opts);
+    const spendLedger = opts.spend === null ? undefined : inspectSpendLedger(opts.spendStatePath);
+    const ledgerBroken = spendLedger === 'corrupt' || spendLedger === 'unavailable';
+    const withHint = (detail) => ledgerBroken ? [detail, SPEND_LEDGER_REPAIR_HINT].filter(Boolean).join(' ') : detail;
     if (!sealed) {
         return {
             state: 'unconfigured',
             modelsEndpoint: 'skipped',
-            detail: 'Run `cleo decide config`.',
+            detail: withHint('Run `cleo decide config`.'),
+            sites,
+            ...(spend ? { spend } : {}),
+            ...(spendLedger ? { spendLedger } : {}),
         };
     }
     const base = {
+        ...(sealed.profile ? { profile: sealed.profile } : {}),
         baseUrl: sealed.baseUrl,
         keyPreview: sealed.keyPreview,
         ...(sealed.model ? { model: sealed.model } : {}),
+        sites,
+        ...(spend ? { spend } : {}),
+        ...(spendLedger ? { spendLedger } : {}),
     };
+    const now = opts.now ?? Date.now;
     const started = performance.now();
     const signal = AbortSignal.timeout(opts.timeoutMs ?? DEFAULT_DECIDE_PROBE_TIMEOUT_MS);
+    // Capabilities + usage: reuse the cached read unless it is older than 10 minutes.
+    // Shared with decideBatch's lazy detection: at most one detection per
+    // identity per USAGE_REFRESH_MS, transient failures keep the old state.
+    const state = await refreshProviderState(sealed.connection(), signal, {
+        ...(opts.fetch ? { fetch: opts.fetch } : {}),
+        now,
+        ...(opts.providerStatePath !== undefined ? { path: opts.providerStatePath } : {}),
+        force: opts.refreshCapabilities === true,
+    });
+    const extras = {
+        capabilities: state?.capabilities ?? JEV_MINIMUM_CAPABILITIES,
+        ...(state?.usage
+            ? { usage: { ...state.usage, fetchedAt: new Date(state.detectedAt).toISOString() } }
+            : {}),
+    };
     try {
         const models = await listJevModels(sealed.connection(), signal, { fetch: opts.fetch });
+        const keyLimited = spend?.keyLimitedUntil !== undefined;
         return {
             ...base,
-            state: 'reachable',
+            ...extras,
+            state: keyLimited ? 'key_limit_reached' : 'reachable',
             modelsEndpoint: 'ok',
             models,
             httpStatus: 200,
             latencyMs: Math.round(performance.now() - started),
-            ...(sealed.model ? {} : { detail: NO_MODEL_WARNING }),
+            ...optionalDetail(withHint(keyLimited ? KEY_LIMIT_DETAIL : sealed.model ? undefined : NO_MODEL_WARNING)),
         };
     }
     catch (err) {
         const verdict = stateForError(err);
         return {
             ...base,
+            ...extras,
             ...verdict,
             modelsEndpoint: 'failed',
             latencyMs: Math.round(performance.now() - started),
-            detail: err instanceof Error ? err.message : 'probe failed',
+            ...optionalDetail(withHint(verdict.state === 'key_limit_reached'
+                ? KEY_LIMIT_DETAIL
+                : err instanceof Error
+                    ? err.message
+                    : 'probe failed')),
         };
     }
 }
+/** The profile {@link configureDecide} writes. */
+function configureTarget(input) {
+    const raw = input.profile?.trim();
+    if (raw?.includes('/')) {
+        const ref = parseDecideProfileRef(raw);
+        if (!ref) {
+            throw new DecideCredentialsError(`invalid profile '${raw}' (use <provider>/<name>, e.g. layahost/work)`);
+        }
+        if (input.provider && input.provider !== ref.provider) {
+            throw new DecideCredentialsError(`profile '${ref.id}' belongs to ${ref.provider}, not ${input.provider}`);
+        }
+        return ref;
+    }
+    const active = listDecideProfiles().active;
+    const activeRef = active ? parseDecideProfileRef(active) : null;
+    const url = input.baseUrl?.trim();
+    const provider = input.provider ??
+        (url && url !== DECIDE_PROFILE_DEFAULT_URL
+            ? inferDecisionProviderKind(url)
+            : (activeRef?.provider ?? 'layahost'));
+    const name = raw || (activeRef?.provider === provider ? activeRef.name : DECIDE_DEFAULT_PROFILE_NAME);
+    if (!isValidDecideProfileName(name)) {
+        throw new DecideCredentialsError(`invalid profile name '${name}' (use 1-32 lowercase letters, digits or -, starting and ending with a letter or digit)`);
+    }
+    return { provider, name, id: decideProfileId(provider, name) };
+}
 /**
- * Store the provider settings, merging omitted values with the stored ones.
+ * Store a profile's settings, merging omitted values with the stored ones,
+ * then probe the provider and re-detect its capabilities so its extensions
+ * apply immediately.
  *
- * The Jev `/v1/systemone` endpoint requires a `model`, and no model literal
- * may be hard-coded in core (arch gate 13). So when no model is given (and
- * none is stored for the same URL), this asks the provider (`GET /v1/models`)
- * and stores the FIRST model it lists — the provider's own ordering; layahost
- * lists its routing default first. When that lookup fails the settings are
- * still stored, without a model, and a warning says how to set one.
+ * A model is always stored when one can be known, because the Jev
+ * `/v1/systemone` endpoint rejects a request without one (422, and every
+ * site silently falls back). The model comes from, in order: the flag; the
+ * stored model (same URL); the provider preset (`layahost` →
+ * `LAYAHOST_DEFAULT_MODEL`); the first model the provider lists. Only a
+ * `jev` provider whose listing fails can end with no model, and then a
+ * warning says how to set one.
  *
- * @param input - URL, key, optional model.
- * @returns Secret-free summary plus the model's provenance.
  * A URL whose host differs from the stored one must come with a fresh key:
  * the stored key is never re-used (or sent in the model probe) for a new host.
  *
- * @throws {DecideCredentialsError} On an invalid URL, blank key, invalid model
- *   name, or a host change without a fresh key.
+ * Profiles (T12733): the settings go to one profile, `<provider>/<name>`
+ * (see {@link DecideConfigureInput.profile}); every other profile is kept,
+ * and a new profile needs its own key. The URL is stored as `default` unless
+ * overridden. The post-save probe targets that profile, active or not.
+ *
+ * @param input - Provider, URL, key, optional model, profile and activation.
+ * @returns Secret-free summary plus the model's provenance and the probe verdict.
+ * @throws {DecideCredentialsError} On an invalid URL or profile, a provider
+ *   without a preset URL and no override, a blank key, an invalid model name,
+ *   a new profile without a key, or a host change without a fresh key.
  */
 export async function configureDecide(input) {
-    const stored = loadDecideConnection();
-    const baseUrl = input.baseUrl?.trim() || stored?.baseUrl || '';
+    const target = configureTarget(input);
+    const stored = loadDecideProfile(target.id);
+    const storedSetting = stored && describeDecideProfile(target.id).urlSource === 'override'
+        ? stored.baseUrl
+        : DECIDE_PROFILE_DEFAULT_URL;
+    const urlSetting = input.baseUrl?.trim() || storedSetting;
+    const baseUrl = urlSetting === DECIDE_PROFILE_DEFAULT_URL ? presetBaseUrl(target.provider) : urlSetting;
+    if (!baseUrl) {
+        throw new DecideCredentialsError(`the ${target.provider} provider has no default URL: pass --url https://your-provider.example (https, or http only for localhost)`);
+    }
     const freshKey = input.apiKey?.trim();
+    if (!freshKey && !stored) {
+        throw new DecideCredentialsError(`profile '${target.id}' has no stored key; pass --key-stdin (keys are never copied between profiles)`);
+    }
     if (!freshKey && stored && !sameDecideHost(stored.baseUrl, baseUrl)) {
         throw new DecideCredentialsError('changing the provider host requires a fresh key; pass --key-stdin (the stored key is never sent to a new host)');
     }
     const apiKey = freshKey || stored?.connection().apiKey || '';
+    const preset = DECISION_PROVIDER_PRESETS[target.provider];
     const explicit = input.model?.trim();
+    let model;
+    let modelSource = 'none';
     if (explicit) {
-        return {
-            ...(await saveDecideCredentials({ baseUrl, apiKey, model: explicit })),
-            modelSource: 'flag',
-        };
+        model = explicit;
+        modelSource = 'flag';
+    }
+    else if (stored?.model && stored.baseUrl === baseUrl) {
+        model = stored.model;
+        modelSource = 'stored';
     }
-    if (stored?.model && stored.baseUrl === baseUrl) {
-        const kept = await saveDecideCredentials({ baseUrl, apiKey, model: stored.model });
-        return { ...kept, modelSource: 'stored' };
+    else if (preset.defaultModel) {
+        model = preset.defaultModel;
+        modelSource = 'preset';
     }
-    const saved = await saveDecideCredentials({ baseUrl, apiKey });
+    const settings = {
+        provider: target.provider,
+        profile: target.id,
+        baseUrl: urlSetting,
+        apiKey,
+    };
+    const saved = await saveDecideCredentials({
+        ...settings,
+        ...(model ? { model } : {}),
+        ...(input.activate !== undefined ? { activate: input.activate } : {}),
+    });
     const probe = await probeDecideProvider({
-        connection: loadDecideConnection(),
+        connection: loadDecideProfile(target.id),
         fetch: input.fetch,
         timeoutMs: input.timeoutMs,
+        refreshCapabilities: true,
     });
+    const verdict = {
+        active: saved.activeProfile === target.id,
+        providerState: probe.state,
+        ...(probe.capabilities ? { capabilities: probe.capabilities } : {}),
+    };
+    if (model)
+        return { ...saved, modelSource, ...verdict };
     const first = probe.models?.[0];
     if (!first) {
         const why = probe.state === 'reachable' ? 'the provider listed no models' : `probe ${probe.state}`;
         return {
             ...saved,
             modelSource: 'none',
+            ...verdict,
             warning: `No model stored (${why}). ${NO_MODEL_WARNING}`,
         };
     }
-    const withModel = await saveDecideCredentials({ baseUrl, apiKey, model: first });
-    return { ...withModel, modelSource: 'provider-listing' };
+    const withModel = await saveDecideCredentials({
+        ...settings,
+        model: first,
+        activate: verdict.active,
+    });
+    return { ...withModel, modelSource: 'provider-listing', ...verdict };
+}
+/**
+ * `cleo decide profiles`: every stored profile with the active one marked and
+ * keys masked; with `probe`, each profile's reachability (probed in parallel).
+ * Never throws.
+ *
+ * @param opts - Whether to probe, plus the injectable `fetch` and deadline.
+ * @returns The secret-free profile list.
+ */
+export async function listDecideProfilesReport(opts = {}) {
+    const list = listDecideProfiles();
+    if (opts.probe !== true)
+        return list;
+    const profiles = await Promise.all(list.profiles.map(async (summary) => {
+        const result = await probeDecideProvider({
+            connection: loadDecideProfile(summary.id),
+            spend: null,
+            ...(opts.fetch ? { fetch: opts.fetch } : {}),
+            ...(opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {}),
+            ...(opts.providerStatePath !== undefined
+                ? { providerStatePath: opts.providerStatePath }
+                : {}),
+        });
+        const probe = {
+            state: result.state,
+            ...(result.httpStatus !== undefined ? { httpStatus: result.httpStatus } : {}),
+            ...(result.latencyMs !== undefined ? { latencyMs: result.latencyMs } : {}),
+            ...(result.detail ? { detail: result.detail } : {}),
+        };
+        return { ...summary, probe };
+    }));
+    return { ...list, profiles };
 }
 /**
  * Remove the stored settings (and rotated backups of them).
@@ -176,9 +365,12 @@ function teeAudit(projectRoot) {
  * @returns The typed answer with source, fallback reason, latency and cost.
  */
 export async function askDecideDebug(input) {
-    const sealed = loadDecideConnection();
+    const sealed = input.profile ? loadDecideProfile(input.profile) : loadDecideConnection();
+    const profile = input.profile
+        ? parseDecideProfileRef(input.profile)?.id
+        : (listDecideProfiles().active ?? undefined);
     const audit = teeAudit(input.projectRoot);
-    const outcome = await decide('cli.decide-ask', { state: input.state, questions: { answer: { type: 'noul', criteria: input.question } } }, () => ({ answer: NEUTRAL_NOUL }), {
+    const outcome = await decide(DECIDE_ASK_DECISION_SITE.id, { state: input.state, questions: { answer: { type: 'noul', criteria: input.question } } }, () => ({ answer: NEUTRAL_NOUL }), {
         connection: sealed?.connection() ?? null,
         cache: null,
         audit: audit.sink,
@@ -186,6 +378,9 @@ export async function askDecideDebug(input) {
     });
     const reason = audit.last()?.fallbackReason;
     return {
+        question: input.question,
+        state: input.state,
+        ...(sealed && profile ? { profile } : {}),
         answer: outcome.answers['answer'] ?? NEUTRAL_NOUL,
         source: outcome.source,
         ...(reason ? { fallbackReason: reason } : {}),
@@ -196,4 +391,19 @@ export async function askDecideDebug(input) {
         ...(sealed ? { keyPreview: sealed.keyPreview } : {}),
     };
 }
+/**
+ * `cleo decide budget reset`: start a fresh spend ledger for this month,
+ * moving the old file aside as a receipt. The repair for a corrupt ledger,
+ * which otherwise keeps every site on its heuristic. A readable ledger is
+ * refused unless `opts.force`, and its month-to-date spend is carried over,
+ * so a reset never lifts a reached cap.
+ *
+ * @param statePath - Ledger path. Default: `<cleoHome>/decide/spend.json`.
+ * @param opts - `force` resets a ledger that is not corrupt.
+ * @returns The receipt: previous health, carried spend and where the old file went.
+ * @throws {SpendResetRefusedError} When the ledger is not corrupt and `force` is not set.
+ */
+export async function resetDecideBudget(statePath, opts = {}) {
+    return resetSpendLedger(statePath, Date.now(), opts);
+}
 //# sourceMappingURL=operations.js.map