@intentic/sandbox-contract 1.300.0 → 1.301.0

package/src/state/history-state.ts

@@ -32,6 +32,9 @@ export const HISTORY_STATE_FILES: readonly StateFile[] = [
     { path: "provider-refusals.json", portability: "carry" },
     // Models refused to this sandbox's credentials; expires daily, same subscriptions apply elsewhere.
     { path: "model-refusals.json", portability: "carry" },
+    // What each account has run out of, for a plan publishing no allowance to poll — the refusal is the reading.
+    // Carried like the refusals above: an allowance belongs to the account, not to the machine that spent it.
+    { path: "observed-limits.json", portability: "carry" },
     // First-time dependency setup requests; carried so an interrupted queue survives export, entries self-remove.
     { path: "dependency-requests.json", portability: "carry" },
     // Which device cards were already offered; carry, not identity, since it holds ids, never a token.

package/src/state/runtime-state.test.ts

@@ -23,6 +23,11 @@ describe(`staleRuntimeQueryKeys`, () => {
     it(`asks for nothing when nothing matched`, () => {
         expect(staleRuntimeQueryKeys([])).toEqual([]);
     });
+
+    it(`reaches an extension's own key, since the board that renders a run is not core's`, () => {
+        // The Pipelines board reads ["ci-runs", <sandbox>]; a prefix is what invalidation matches on.
+        expect(staleRuntimeQueryKeys([`ci`])).toEqual([[`ci-runs`]]);
+    });
 });
 
 describe(`runtimeBoundQueryKeys`, () => {

package/src/state/runtime-state.ts

@@ -42,6 +42,12 @@ const RUNTIME_DOMAINS = [
 
     // Commit subject drafted after landing; arrives too late for the turn-end refresh, needs its own push.
     { domain: "landings", invalidates: [["git", "changes"]] },
+
+    // A pipeline run reached its end (webhook delivery, or the REST poll for a repo with no hook). The board's own
+    // poll is the freshness floor, not the answer: somebody watching a run finish must not wait out a poll interval.
+    // Runs only: the frame doesn't name which run moved, and re-reading every open row's job graph would cost a
+    // vendor call per row. The row re-reads its own graph off the status this invalidation lands (useRunJobs.ts).
+    { domain: "ci", invalidates: [["ci-runs"]] },
 ] as const satisfies readonly RuntimeDomainBinding[];
 
 export const RUNTIME_DOMAIN_BINDINGS: readonly RuntimeDomainBinding[] = RUNTIME_DOMAINS;