@cohortapp/agent-sdk 2.11.4 → 2.11.5

package/lib/budget-guard.mjs

@@ -663,7 +663,21 @@ export function dailyAllowance(deps) {
  * @param {object} [deps] { now?, ledgerDir?, agentRoot?, capUSD?, iterationCap?,
  *                          seatEnvelope?, mandateCachePath?, log? }
  */
+/**
+ * Is this seat authenticated by a flat-fee Max SUBSCRIPTION (not the metered
+ * API)? A subscription seat has no dollar meter: the CLI's `total_cost_usd` is
+ * API-EQUIVALENT, not spend, and every session reports "unmeasured" by design —
+ * that is normal, not a telemetry outage. Banding such a seat on dollars
+ * suspends a seat that costs a flat fee, stops its autonomous work, and floods
+ * the log every tick. `deps.subscriptionAuth` overrides for tests.
+ */
+export function isSubscriptionAuth(deps) {
+  if (deps && typeof deps.subscriptionAuth === "boolean") return deps.subscriptionAuth;
+  return process.env.MAESTRO_PREFER_SUBSCRIPTION_AUTH === "1" && !process.env.ANTHROPIC_API_KEY;
+}
+
 export function dailyStatus(deps) {
+  const subscriptionAuth = isSubscriptionAuth(deps);
   const iterationCap = cfgIterationCap(deps);
   const today = sumToday(deps);
   const { spentUSD, sessions } = today;
@@ -708,15 +722,23 @@ export function dailyStatus(deps) {
   // The binding constraint is whichever is closest to (or furthest past) the cap.
   // A null day-reading contributes nothing; the exhausted-envelope case is
   // already ≥100 % on the month, so nothing is lost by skipping it.
-  const pct = Math.max(spendPct ?? 0, monthPct, iterPct);
+  // A subscription-auth seat has no dollar meter (see isSubscriptionAuth): its
+  // dollar "spend" is API-equivalent fiction, so banding on it wrongly suspends a
+  // flat-fee seat and halts its autonomous work. Band it on SESSION VOLUME only
+  // (a real limit); concurrency (resource-governor) + the 429 rate-breaker are
+  // its other guards.
+  const pct = subscriptionAuth
+    ? iterPct
+    : Math.max(spendPct ?? 0, monthPct, iterPct);
   let band = bandForPct(pct);
 
   // ── BLIND ⇒ DEGRADE ────────────────────────────────────────────────────────
   // `blind` (sessions ran, none measured) was computed and reported and enforced
   // by nothing. It is now load-bearing: we do not invent a price, we lower the
   // rung. Only when the day is TRULY unpriceable — if a month mean was available
-  // the spend was imputed from it and the ordinary band applies.
-  if (today.blind && today.unpriceable && band < BLIND_MIN_BAND) {
+  // the spend was imputed from it and the ordinary band applies. Does NOT apply
+  // to subscription auth, where "unmeasured" is the normal, expected state.
+  if (!subscriptionAuth && today.blind && today.unpriceable && band < BLIND_MIN_BAND) {
     extraDegradations.push(
       `band raised ${band}% → ${BLIND_MIN_BAND}%: ${today.unmeasuredSessions} session(s) ran today and NONE could be ` +
       "measured or priced. An unmeasurable seat is degraded, not trusted."
@@ -725,7 +747,16 @@ export function dailyStatus(deps) {
   }
   const posture = postureForBand(band);
 
-  const degradations = [...today.degradations, ...allowance.degradations, ...extraDegradations];
+  let degradations = [...today.degradations, ...allowance.degradations, ...extraDegradations];
+  // On a subscription seat the dollar-meter degradations (imputed / unmeasured /
+  // unfunded-envelope / telemetry) are irrelevant — there is no dollar meter —
+  // and were logged EVERY tick, burying real signal (a DM not answered) under a
+  // flood. Drop them; keep any non-dollar note (e.g. a malformed ledger line).
+  if (subscriptionAuth) {
+    degradations = degradations.filter(
+      (d) => !/imputed|unmeasured|unpriceable|UNFUNDED SEAT|envelope|per-session|telemetry|blind/i.test(String(d)),
+    );
+  }
   // Degradations ride on the returned status AND go to the log: the daemon is
   // usually the only thing awake when telemetry breaks, and a governor that
   // quietly under-counts is the failure mode this module now exists to prevent.

package/lib/budget-guard.test.mjs

@@ -338,3 +338,28 @@ test("a ledger of only zero-token rows sums to $0 (proves the bug is the input,
     assert.equal(s.sessions, 2);
   } finally { await rm(dir); }
 });
+
+test("dailyStatus: a subscription-auth seat is banded on session VOLUME, not dollars", async () => {
+  const dir = await makeLedgerDir();
+  try {
+    seedLedger(dir, [{ usd: 40 }]); // $40 of $10 = 400%
+    // A metered (API) seat: dollars bind → band 150 (refused).
+    assert.equal(dailyStatus({ ledgerDir: dir, now: clk, capUSD: 10, iterationCap: 100 }).band, 150);
+    // A flat-fee subscription seat has no dollar meter — the same API-equivalent
+    // "spend" is fiction. It lands at band 0 / normal so autonomous work keeps
+    // running; only session VOLUME can band it.
+    const sub = dailyStatus({ ledgerDir: dir, now: clk, capUSD: 10, iterationCap: 100, subscriptionAuth: true });
+    assert.equal(sub.band, 0);
+    assert.equal(sub.mode, "normal");
+  } finally { await rm(dir); }
+});
+
+test("dailyStatus: a subscription-auth seat STILL bands on session volume (a real limit)", async () => {
+  const dir = await makeLedgerDir();
+  try {
+    seedLedger(dir, Array.from({ length: 12 }, () => ({ usd: 0.01 }))); // 12 sessions
+    const sub = dailyStatus({ ledgerDir: dir, now: clk, capUSD: 1000, iterationCap: 10, subscriptionAuth: true });
+    assert.equal(sub.band, 100, "12 sessions / cap 10 = 120% → degrade even on subscription");
+    assert.equal(sub.mode, "degraded");
+  } finally { await rm(dir); }
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cohortapp/agent-sdk",
-  "version": "2.11.4",
+  "version": "2.11.5",
   "description": "Cohort Agent SDK — autonomous AI colleague runtime. Deploy senior AI colleagues on dedicated Mac minis, wired to the Cohort operating surface.",
   "type": "module",
   "bin": {