@event4u/agent-config 16.3.0 → 16.4.0

package/dist/cli-delegate/{chunk-EEHDXSYD.js → chunk-WQWXGIWB.js}

@@ -5,7 +5,7 @@ import {
 import {
   resolve_with_fallback,
   write_target
-} from "./chunk-NDJLNC6Q.js";
+} from "./chunk-T6BP34WI.js";
 import {
   __export,
   __toESM
@@ -875,7 +875,7 @@ function _build_debate(d) {
   if (!_isDict(d)) {
     throw new CouncilConfigError("`debate` must be a mapping.");
   }
-  const cap = _pyFloat(_get(d, "max_cost_usd", 5));
+  const cap = _pyFloat(_get(d, "max_cost_usd", 0));
   if (cap < 0) {
     throw new CouncilConfigError(
       `debate.max_cost_usd must be >= 0 (got ${_pyRepr(_f(cap))}; use 0 to disable the cap).`
@@ -1400,10 +1400,14 @@ function _build_cost_budget(d) {
     throw new CouncilConfigError("`cost_budget` must be a mapping.");
   }
   const cb = {
-    max_input_tokens: _pyInt(_get(d, "max_input_tokens", 5e5)),
-    max_output_tokens: _pyInt(_get(d, "max_output_tokens", 2e5)),
+    max_input_tokens: _pyInt(_get(d, "max_input_tokens", 0)),
+    // 0 = unbounded (ADR-279)
+    max_output_tokens: _pyInt(_get(d, "max_output_tokens", 0)),
+    // 0 = unbounded (ADR-279)
     max_calls: _pyInt(_get(d, "max_calls", 50)),
-    max_total_usd: _pyFloat(_get(d, "max_total_usd", 20)),
+    // fan-out, not money — kept
+    max_total_usd: _pyFloat(_get(d, "max_total_usd", 0)),
+    // 0 = unbounded (ADR-279)
     daily_limit_usd: _pyFloat(_get(d, "daily_limit_usd", 0))
   };
   const fields = [
@@ -1749,275 +1753,7 @@ function _pyTruthy(value) {
   return Object.keys(value).length > 0;
 }
 
-// src/scripts/_lib/cc_transcript.ts
-import * as fs3 from "node:fs";
-import * as path3 from "node:path";
-import { homedir as homedir2 } from "node:os";
-var DEFAULT_PROJECTS_ROOT = path3.join(homedir2(), ".claude", "projects");
-function projectStoreSlug(cwd) {
-  return cwd.replace(/[^A-Za-z0-9-]/g, "-");
-}
-function billableInputTokens(u) {
-  return u.input_tokens + u.cache_read_input_tokens + u.cache_creation_input_tokens;
-}
-function weightedInputUnits(u) {
-  const knownSplit = u.ephemeral_5m_input_tokens + u.ephemeral_1h_input_tokens;
-  const unaccounted = Math.max(0, u.cache_creation_input_tokens - knownSplit);
-  return u.input_tokens * 1 + u.cache_read_input_tokens * 0.1 + (u.ephemeral_5m_input_tokens + unaccounted) * 1.25 + u.ephemeral_1h_input_tokens * 2;
-}
-function numOr0(value) {
-  return typeof value === "number" && Number.isFinite(value) ? value : 0;
-}
-function toTokenCounts(raw) {
-  const cc = raw?.cache_creation ?? {};
-  return {
-    input_tokens: numOr0(raw?.input_tokens),
-    cache_read_input_tokens: numOr0(raw?.cache_read_input_tokens),
-    cache_creation_input_tokens: numOr0(raw?.cache_creation_input_tokens),
-    output_tokens: numOr0(raw?.output_tokens),
-    ephemeral_5m_input_tokens: numOr0(cc.ephemeral_5m_input_tokens),
-    ephemeral_1h_input_tokens: numOr0(cc.ephemeral_1h_input_tokens)
-  };
-}
-function measureContentBytes(raw) {
-  const content = raw.message?.content;
-  if (content === void 0 || content === null) return null;
-  if (typeof content === "string") return Buffer.byteLength(content, "utf8");
-  try {
-    return Buffer.byteLength(JSON.stringify(content), "utf8");
-  } catch {
-    return null;
-  }
-}
-function classifyBucket(raw) {
-  const hasAgentId = typeof raw.agentId === "string" && raw.agentId.length > 0;
-  return hasAgentId || raw.isSidechain === true ? "subagent" : "main";
-}
-function dedupKey(raw) {
-  const id = typeof raw.message?.id === "string" ? raw.message.id : "";
-  const reqId = typeof raw.requestId === "string" ? raw.requestId : "";
-  return `${id}\0${reqId}`;
-}
-function parseLine(line) {
-  if (line.trim().length === 0) return null;
-  try {
-    return JSON.parse(line);
-  } catch {
-    return null;
-  }
-}
-function listTranscriptFiles(opts = {}) {
-  const root = opts.root ?? DEFAULT_PROJECTS_ROOT;
-  const base = opts.projectDir ? path3.isAbsolute(opts.projectDir) ? opts.projectDir : path3.join(root, opts.projectDir) : root;
-  if (!fs3.existsSync(base)) return [];
-  const cutoffMs = opts.maxAgeDays !== void 0 ? (opts.now ?? /* @__PURE__ */ new Date()).getTime() - opts.maxAgeDays * 24 * 60 * 60 * 1e3 : null;
-  const out = [];
-  const stack = [base];
-  while (stack.length > 0) {
-    const dir = stack.pop();
-    let entries;
-    try {
-      entries = fs3.readdirSync(dir, { withFileTypes: true });
-    } catch {
-      continue;
-    }
-    for (const entry of entries) {
-      const full = path3.join(dir, entry.name);
-      if (entry.isDirectory()) {
-        stack.push(full);
-        continue;
-      }
-      if (!entry.isFile() || !entry.name.endsWith(".jsonl")) continue;
-      if (cutoffMs !== null) {
-        let mtimeMs;
-        try {
-          mtimeMs = fs3.statSync(full).mtimeMs;
-        } catch {
-          continue;
-        }
-        if (mtimeMs < cutoffMs) continue;
-      }
-      out.push(full);
-    }
-  }
-  return out.sort();
-}
-function scanTranscripts(opts = {}) {
-  const files = listTranscriptFiles(opts);
-  const seen = /* @__PURE__ */ new Set();
-  const records = [];
-  let totalSeen = 0;
-  for (const file of files) {
-    let text;
-    try {
-      text = fs3.readFileSync(file, "utf-8");
-    } catch {
-      continue;
-    }
-    for (const line of text.split("\n")) {
-      const raw = parseLine(line);
-      if (!raw || raw.type !== "assistant" || !raw.message?.usage) continue;
-      totalSeen += 1;
-      const key = dedupKey(raw);
-      if (seen.has(key)) continue;
-      seen.add(key);
-      records.push({
-        bucket: classifyBucket(raw),
-        agentId: typeof raw.agentId === "string" ? raw.agentId : null,
-        model: typeof raw.message.model === "string" ? raw.message.model : "unknown",
-        timestamp: typeof raw.timestamp === "string" ? raw.timestamp : null,
-        usage: toTokenCounts(raw.message.usage),
-        content_bytes: opts.measureBytes === true ? measureContentBytes(raw) : null
-      });
-    }
-  }
-  const dedupedCount = records.length;
-  return {
-    records,
-    totalSeen,
-    dedupedCount,
-    dedup_ratio: totalSeen > 0 ? (totalSeen - dedupedCount) / totalSeen : 0
-  };
-}
-function measureBytesPerToken(records) {
-  let bytes = 0;
-  let tokens = 0;
-  let n = 0;
-  for (const rec of records) {
-    if (rec.content_bytes === null || rec.usage.output_tokens <= 0) continue;
-    bytes += rec.content_bytes;
-    tokens += rec.usage.output_tokens;
-    n += 1;
-  }
-  if (n === 0 || tokens <= 0) return null;
-  return {
-    basis: "measured",
-    content_bytes: bytes,
-    output_tokens: tokens,
-    bytes_per_token: bytes / tokens,
-    records: n
-  };
-}
-function derivedBytes(tokens, factor) {
-  if (factor === null) return null;
-  return {
-    basis: "derived",
-    tokens,
-    factor,
-    bytes: Math.round(tokens * factor.bytes_per_token)
-  };
-}
-function emptyAggregate(bucket) {
-  return {
-    bucket,
-    calls: 0,
-    input_tokens: 0,
-    cache_read_input_tokens: 0,
-    cache_creation_input_tokens: 0,
-    output_tokens: 0,
-    ephemeral_5m_input_tokens: 0,
-    ephemeral_1h_input_tokens: 0,
-    read_share: 0,
-    weighted_input_units: 0
-  };
-}
-function aggregateByBucket(records) {
-  const buckets = {
-    main: emptyAggregate("main"),
-    subagent: emptyAggregate("subagent")
-  };
-  for (const rec of records) {
-    const agg = buckets[rec.bucket];
-    agg.calls += 1;
-    agg.input_tokens += rec.usage.input_tokens;
-    agg.cache_read_input_tokens += rec.usage.cache_read_input_tokens;
-    agg.cache_creation_input_tokens += rec.usage.cache_creation_input_tokens;
-    agg.output_tokens += rec.usage.output_tokens;
-    agg.ephemeral_5m_input_tokens += rec.usage.ephemeral_5m_input_tokens;
-    agg.ephemeral_1h_input_tokens += rec.usage.ephemeral_1h_input_tokens;
-  }
-  for (const bucket of Object.values(buckets)) {
-    const billable = billableInputTokens(bucket);
-    bucket.read_share = billable > 0 ? bucket.cache_read_input_tokens / billable : 0;
-    bucket.weighted_input_units = weightedInputUnits(bucket);
-  }
-  return buckets;
-}
-
-// src/scripts/_lib/spawn_env.ts
-var DENY_EXACT = /* @__PURE__ */ new Set([
-  // dynamic loader
-  "LD_PRELOAD",
-  "LD_LIBRARY_PATH",
-  "LD_AUDIT",
-  "DYLD_INSERT_LIBRARIES",
-  "DYLD_LIBRARY_PATH",
-  "DYLD_FRAMEWORK_PATH",
-  "GCONV_PATH",
-  // git command-injection
-  "GIT_EXTERNAL_DIFF",
-  "GIT_SSH",
-  "GIT_SSH_COMMAND",
-  "GIT_PROXY_COMMAND",
-  "GIT_PAGER",
-  "PAGER",
-  // git config-injection: GIT_ALTERNATE_OBJECT_DIRECTORIES can point git at
-  // attacker-controlled object stores; the GIT_CONFIG* family is handled by
-  // prefix below (it is a general arbitrary-config-injection primitive).
-  "GIT_ALTERNATE_OBJECT_DIRECTORIES",
-  // git path-redirection: GIT_DIR / GIT_INDEX_FILE / GIT_NAMESPACE point a
-  // child's git at an attacker-controlled repo, index file, or ref namespace
-  // — ordinary git ops then read and write attacker state (low severity,
-  // same family as GIT_ALTERNATE_OBJECT_DIRECTORIES above).
-  "GIT_DIR",
-  "GIT_INDEX_FILE",
-  "GIT_NAMESPACE",
-  // resolver hijack: HOSTALIASES remaps hostnames via an attacker file,
-  // redirecting any network fetch the child performs (CWE-427-adjacent).
-  "HOSTALIASES",
-  // runtime auto-exec hooks
-  "NODE_OPTIONS",
-  "BASH_ENV",
-  "ENV",
-  "PYTHONPATH",
-  "PYTHONSTARTUP",
-  "PYTHONINSPECT",
-  "PERL5OPT",
-  "PERL5LIB",
-  "RUBYOPT",
-  // shell field-splitting
-  "IFS"
-]);
-function isDeniedByFamily(name) {
-  if (name.startsWith("LD_") || name.startsWith("DYLD_")) return true;
-  if (name.startsWith("GIT_") && name.endsWith("_COMMAND")) return true;
-  if (name === "GIT_CONFIG" || name.startsWith("GIT_CONFIG_")) return true;
-  return false;
-}
-function hardenedSpawnEnv(overrides = {}) {
-  const out = {};
-  for (const [key, value] of Object.entries(process.env)) {
-    if (value === void 0) continue;
-    if (DENY_EXACT.has(key)) continue;
-    if (isDeniedByFamily(key)) continue;
-    out[key] = value;
-  }
-  for (const [key, value] of Object.entries(overrides)) {
-    out[key] = value;
-  }
-  return out;
-}
-
 export {
-  DEFAULT_PROJECTS_ROOT,
-  projectStoreSlug,
-  billableInputTokens,
-  weightedInputUnits,
-  scanTranscripts,
-  measureBytesPerToken,
-  derivedBytes,
-  aggregateByBucket,
-  hardenedSpawnEnv,
   CLI_CALLS_ATTRIBUTION_SUFFIX,
   CLI_CONSUMER_COUNCIL,
   CLI_CONSUMER_TEAM,
@@ -2036,5 +1772,8 @@ export {
   admitsContent,
   policyExclusionReason,
   _RAW_KEY_PREFIXES,
+  COUNCIL_CONFIG_ENV,
+  resolve_config_path,
+  load_council_config,
   config_exports
 };

package/dist/cli-delegate/{chunk-QLDHIPWR.js → chunk-XQTPXKFA.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-F7DQWYR5.js";
 import {
   load_agent_settings
-} from "./chunk-JY2I2DXV.js";
+} from "./chunk-H76PHZBI.js";
 
 // src/scripts/chat_history.ts
 import { createHash } from "node:crypto";