@jinn-network/client 0.1.7-canary.d4e4e183 → 0.1.7-canary.e68c8f43

package/dist/spend/ai-units-config.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Daemon-side AI-units gate config — issue #815.
+ *
+ * Resolves, per-manifest:
+ *   - the credential that manifest's harness bills against
+ *   - the projected AI-unit cost of one task on that harness/model
+ *
+ * Plus the active per-block / per-week caps from
+ * `resolveReferenceCeiling(env)`.
+ *
+ * Returns undefined only when no joined SolverNet resolves to a
+ * credential the gate could meaningfully meter — at that point the
+ * gate stays off entirely so the daemon does not spend a query per
+ * task on rows that will never sum.
+ */
+import type { JinnConfig } from '../config.js';
+import { type CredentialId } from './credential.js';
+export interface AiUnitsDaemonConfig {
+    capPerBlock: number;
+    capPerWeek: number;
+    /** manifestCid -> credentialId (set only when the harness has one). */
+    manifestCredentials: Record<string, CredentialId>;
+    /**
+     * manifestCid -> projected AI units per task. `null` means the model
+     * is unknown to the cost table and the gate must fail-open with a
+     * one-time warn rather than silently halting claims.
+     */
+    manifestProjectedAiUnits: Record<string, number | null>;
+    /**
+     * manifestCid -> the model id from the joined SolverNet config. Threaded
+     * onto the per-request activity row at claim time so the row carries
+     * provenance of the projection. May be undefined when the operator
+     * joined without selecting a model.
+     */
+    manifestModels: Record<string, string | undefined>;
+}
+export declare function buildAiUnitsConfig(config: Pick<JinnConfig, 'joinedSolverNets'>, env: NodeJS.ProcessEnv): AiUnitsDaemonConfig | undefined;

package/dist/spend/ai-units-config.js

@@ -0,0 +1,26 @@
+import { resolveCredentialId } from './credential.js';
+import { projectAiUnits, resolveReferenceCeiling } from './ai-units.js';
+export function buildAiUnitsConfig(config, env) {
+    const { units_per_block, units_per_week } = resolveReferenceCeiling(env);
+    const manifestCredentials = {};
+    const manifestProjectedAiUnits = {};
+    const manifestModels = {};
+    for (const [manifestCid, entry] of Object.entries(config.joinedSolverNets ?? {})) {
+        const credentialId = resolveCredentialId(entry.harness, env);
+        if (!credentialId)
+            continue;
+        manifestCredentials[manifestCid] = credentialId;
+        manifestProjectedAiUnits[manifestCid] = projectAiUnits(entry.harness, entry.model, credentialId);
+        manifestModels[manifestCid] = entry.model;
+    }
+    if (Object.keys(manifestCredentials).length === 0)
+        return undefined;
+    return {
+        capPerBlock: units_per_block,
+        capPerWeek: units_per_week,
+        manifestCredentials,
+        manifestProjectedAiUnits,
+        manifestModels,
+    };
+}
+//# sourceMappingURL=ai-units-config.js.map

package/dist/spend/ai-units-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-units-config.js","sourceRoot":"","sources":["../../src/spend/ai-units-config.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,mBAAmB,EAAqB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAsBxE,MAAM,UAAU,kBAAkB,CAChC,MAA4C,EAC5C,GAAsB;IAEtB,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAEzE,MAAM,mBAAmB,GAAiC,EAAE,CAAC;IAC7D,MAAM,wBAAwB,GAAkC,EAAE,CAAC;IACnE,MAAM,cAAc,GAAuC,EAAE,CAAC;IAE9D,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;QACjF,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY;YAAE,SAAS;QAC5B,mBAAmB,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;QAChD,wBAAwB,CAAC,WAAW,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACjG,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;IAC5C,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEpE,OAAO;QACL,WAAW,EAAE,eAAe;QAC5B,UAAU,EAAE,cAAc;QAC1B,mBAAmB;QACnB,wBAAwB;QACxB,cAAc;KACf,CAAC;AACJ,CAAC"}

package/dist/spend/ai-units.d.ts

@@ -0,0 +1,86 @@
+/**
+ * AI-units calibration — the universal cost language for the M1
+ * cost-protection throttle (issue #815).
+ *
+ * One "AI unit" is the marginal USD cost of one task on the
+ * GPT-5.4-mini Codex-Plus baseline, scaled so that **100 units = 10% of a
+ * 6-hour-block-equivalent USD spend on that baseline**. Every other
+ * harness/model converts its USD cost-per-task through the same peg
+ * (`USD / GPT_5_4_MINI_USD_PER_BLOCK * 100`).
+ *
+ * Why a unit-of-account rather than raw USD: the ceiling is the same
+ * **100 units per 6h block** for every harness/model, so an operator on
+ * Haiku 4.5 (~1 unit/task) gets ~100 tasks per block, while an operator
+ * on Opus 4.7 (~50 units/task) gets ~2 tasks per block. The peg keeps the
+ * ceiling readable and ties it to the milestone framing of "~10% of a
+ * baseline AI subscription's weekly cap" (#605).
+ *
+ * The cap is layered with the existing per-credential USD `spendCaps`
+ * spend-cap gate from PR #345/#346 — both gates run; the more
+ * conservative one wins. This module owns the AI-units side only.
+ */
+/**
+ * Calibration peg: the USD cost of one GPT-5.4-mini Codex-Plus 6h block.
+ * Derived from a typical Codex Plus 6h block on GPT-5.4-mini: ~10 tasks at
+ * ~$0.0525/task (50k input × $0.00025/1k + 20k output × $0.002/1k) → ~$0.5.
+ *
+ * Conservative — biases toward over-warning rather than under-warning so
+ * the ceiling pauses early rather than late.
+ */
+export declare const GPT_5_4_MINI_USD_PER_BLOCK = 0.5;
+/**
+ * The default reference ceiling — 100 AI units per 6h UTC-aligned block,
+ * with a weekly safety net at 28 × that (one block × 28 blocks/week).
+ *
+ * Override at runtime with `JINN_AI_UNITS_CEILING_OVERRIDE` (see
+ * `resolveReferenceCeiling`). Set as `<units>` for a per-block override
+ * (weekly auto-scales to 28×) or `<block>:<week>` for both explicitly.
+ */
+export declare const REFERENCE_CEILING: {
+    readonly units_per_block: number;
+    readonly units_per_week: number;
+};
+/**
+ * Project the AI-unit cost of one task for a harness/model combination.
+ *
+ * - Returns `0` when the credential resolves to a subscription path
+ *   (`anthropic:subscription`, `openai:subscription`) — the provider's
+ *   own quota is the cap; the AI-units gate stays out of the way.
+ * - Returns `0` for harnesses that make no marginal LLM call
+ *   (prediction harnesses, evaluators, unknown harnesses).
+ * - Returns `null` when the harness IS on a paid-API path but the model
+ *   is unknown to the cost table — the caller treats that as "no
+ *   projection available" and surfaces "unavailable" rather than
+ *   gating on a guess.
+ * - Otherwise returns `cost.usd / GPT_5_4_MINI_USD_PER_BLOCK * 100`.
+ *
+ * `credentialId` is the env-resolved auth path
+ * (`anthropic:subscription`, `anthropic:api-key`, `openai:api-key`,
+ * `hermes:api-key`, …). When omitted, defaults to "treat the harness as
+ * subscription-only" so callers without env access (the SPA panel
+ * pre-join) get the safer reading.
+ */
+export declare function projectAiUnits(harness: string | undefined, model: string | undefined, credentialId?: string | null): number | null;
+/**
+ * Resolve the active ceiling from env. CI / tests override the baked-in
+ * 100 units via `JINN_AI_UNITS_CEILING_OVERRIDE`. Accepts:
+ *
+ *  - `"<n>"` — sets `units_per_block = n`; weekly auto-scales to `n * 28`.
+ *  - `"<block>:<week>"` — sets both explicitly.
+ *
+ * Falls back to the baked-in `REFERENCE_CEILING` on a missing or
+ * malformed value (env-typo must not silently disable the gate).
+ */
+export declare function resolveReferenceCeiling(env: NodeJS.ProcessEnv): {
+    units_per_block: number;
+    units_per_week: number;
+};
+/** Start of the next 6h UTC-aligned block after `now`. */
+export declare function blockResetsAtUtc(now: Date): Date;
+/**
+ * Stable id for a 6h block — used to dedupe `ai_units_cap_reached`
+ * activity events to one-per-(credential, block).
+ */
+export declare function blockIdUtc(now: Date): string;
+/** Reset instant for the 7-day window — `now + (boundary - elapsed)`. We use rolling 7d here. */
+export declare function weekResetsAtUtc(now: Date): Date;

package/dist/spend/ai-units.js

@@ -0,0 +1,163 @@
+/**
+ * AI-units calibration — the universal cost language for the M1
+ * cost-protection throttle (issue #815).
+ *
+ * One "AI unit" is the marginal USD cost of one task on the
+ * GPT-5.4-mini Codex-Plus baseline, scaled so that **100 units = 10% of a
+ * 6-hour-block-equivalent USD spend on that baseline**. Every other
+ * harness/model converts its USD cost-per-task through the same peg
+ * (`USD / GPT_5_4_MINI_USD_PER_BLOCK * 100`).
+ *
+ * Why a unit-of-account rather than raw USD: the ceiling is the same
+ * **100 units per 6h block** for every harness/model, so an operator on
+ * Haiku 4.5 (~1 unit/task) gets ~100 tasks per block, while an operator
+ * on Opus 4.7 (~50 units/task) gets ~2 tasks per block. The peg keeps the
+ * ceiling readable and ties it to the milestone framing of "~10% of a
+ * baseline AI subscription's weekly cap" (#605).
+ *
+ * The cap is layered with the existing per-credential USD `spendCaps`
+ * spend-cap gate from PR #345/#346 — both gates run; the more
+ * conservative one wins. This module owns the AI-units side only.
+ */
+import { estimateModelCost } from '../harnesses/cost-estimates.js';
+import { CLAUDE_CODE_HARNESS, CODEX_HARNESS, HERMES_AGENT_HARNESS, canonicalHarnessName, } from '../harnesses/names.js';
+/**
+ * Calibration peg: the USD cost of one GPT-5.4-mini Codex-Plus 6h block.
+ * Derived from a typical Codex Plus 6h block on GPT-5.4-mini: ~10 tasks at
+ * ~$0.0525/task (50k input × $0.00025/1k + 20k output × $0.002/1k) → ~$0.5.
+ *
+ * Conservative — biases toward over-warning rather than under-warning so
+ * the ceiling pauses early rather than late.
+ */
+export const GPT_5_4_MINI_USD_PER_BLOCK = 0.5;
+/**
+ * The default reference ceiling — 100 AI units per 6h UTC-aligned block,
+ * with a weekly safety net at 28 × that (one block × 28 blocks/week).
+ *
+ * Override at runtime with `JINN_AI_UNITS_CEILING_OVERRIDE` (see
+ * `resolveReferenceCeiling`). Set as `<units>` for a per-block override
+ * (weekly auto-scales to 28×) or `<block>:<week>` for both explicitly.
+ */
+export const REFERENCE_CEILING = {
+    units_per_block: 100,
+    units_per_week: 100 * 28,
+};
+/** 6h block in milliseconds — UTC blocks start at 00:00 / 06:00 / 12:00 / 18:00. */
+const SIX_HOUR_BLOCK_MS = 6 * 60 * 60 * 1_000;
+/** 7 days in milliseconds — UTC-aligned. */
+const SEVEN_DAY_MS = 7 * 24 * 60 * 60 * 1_000;
+/**
+ * Project the AI-unit cost of one task for a harness/model combination.
+ *
+ * - Returns `0` when the credential resolves to a subscription path
+ *   (`anthropic:subscription`, `openai:subscription`) — the provider's
+ *   own quota is the cap; the AI-units gate stays out of the way.
+ * - Returns `0` for harnesses that make no marginal LLM call
+ *   (prediction harnesses, evaluators, unknown harnesses).
+ * - Returns `null` when the harness IS on a paid-API path but the model
+ *   is unknown to the cost table — the caller treats that as "no
+ *   projection available" and surfaces "unavailable" rather than
+ *   gating on a guess.
+ * - Otherwise returns `cost.usd / GPT_5_4_MINI_USD_PER_BLOCK * 100`.
+ *
+ * `credentialId` is the env-resolved auth path
+ * (`anthropic:subscription`, `anthropic:api-key`, `openai:api-key`,
+ * `hermes:api-key`, …). When omitted, defaults to "treat the harness as
+ * subscription-only" so callers without env access (the SPA panel
+ * pre-join) get the safer reading.
+ */
+export function projectAiUnits(harness, model, credentialId) {
+    if (!harness)
+        return null;
+    const canonical = canonicalHarnessName(harness);
+    const isPaidLlmHarness = canonical === CLAUDE_CODE_HARNESS ||
+        canonical === CODEX_HARNESS ||
+        canonical === HERMES_AGENT_HARNESS;
+    if (!isPaidLlmHarness)
+        return 0;
+    // Subscription credentials => the provider's quota is the cap.
+    if (credentialId && credentialId.endsWith(':subscription'))
+        return 0;
+    // Paid-API credential (`*:api-key`) or no resolved credential (caller
+    // doesn't know): project the model cost. When no credential is
+    // resolved AND the harness is claude-code / codex, prefer 0 — that's
+    // the "no provider key set" state where no claims will actually run.
+    if (!credentialId && (canonical === CLAUDE_CODE_HARNESS || canonical === CODEX_HARNESS)) {
+        return 0;
+    }
+    if (!model)
+        return null;
+    const cost = estimateModelCost(model);
+    if (!cost)
+        return null;
+    return (cost.usd / GPT_5_4_MINI_USD_PER_BLOCK) * 100;
+}
+/**
+ * Resolve the active ceiling from env. CI / tests override the baked-in
+ * 100 units via `JINN_AI_UNITS_CEILING_OVERRIDE`. Accepts:
+ *
+ *  - `"<n>"` — sets `units_per_block = n`; weekly auto-scales to `n * 28`.
+ *  - `"<block>:<week>"` — sets both explicitly.
+ *
+ * Falls back to the baked-in `REFERENCE_CEILING` on a missing or
+ * malformed value (env-typo must not silently disable the gate).
+ */
+export function resolveReferenceCeiling(env) {
+    const raw = env['JINN_AI_UNITS_CEILING_OVERRIDE'];
+    if (raw == null || raw.trim() === '') {
+        return { units_per_block: REFERENCE_CEILING.units_per_block, units_per_week: REFERENCE_CEILING.units_per_week };
+    }
+    const trimmed = raw.trim();
+    if (trimmed.includes(':')) {
+        const [a, b] = trimmed.split(':', 2);
+        const block = Number(a);
+        const week = Number(b);
+        if (Number.isFinite(block) && block > 0 && Number.isFinite(week) && week > 0) {
+            return { units_per_block: block, units_per_week: week };
+        }
+        warnMalformedOverride(raw);
+        return { units_per_block: REFERENCE_CEILING.units_per_block, units_per_week: REFERENCE_CEILING.units_per_week };
+    }
+    const block = Number(trimmed);
+    if (Number.isFinite(block) && block > 0) {
+        return { units_per_block: block, units_per_week: block * 28 };
+    }
+    warnMalformedOverride(raw);
+    return { units_per_block: REFERENCE_CEILING.units_per_block, units_per_week: REFERENCE_CEILING.units_per_week };
+}
+function warnMalformedOverride(raw) {
+    // One-time warn per resolve call — the function is only invoked at
+    // startup, so a module-level memo is unnecessary. Surfaces the operator's
+    // typo instead of silently falling back to the baked-in default.
+    console.warn(`[ai-units] warn: JINN_AI_UNITS_CEILING_OVERRIDE="${raw}" is malformed — ` +
+        `using default ${REFERENCE_CEILING.units_per_block}/${REFERENCE_CEILING.units_per_week} per (block, week)`);
+}
+/**
+ * Start of the 6h UTC-aligned block containing `now`. Blocks begin at
+ * 00:00, 06:00, 12:00, 18:00 UTC; `blockStartUtc(t)` returns the most
+ * recent such instant ≤ t. Used to bound the "units this block" sum.
+ */
+function blockStartUtc(now) {
+    const startOfDay = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate());
+    const sinceDayStart = now.getTime() - startOfDay;
+    // Cap at 3 — 4 blocks per day (indices 0..3); defensive against
+    // millisecond rounding pushing the floor over 4 at day boundaries.
+    const blocksIn = Math.min(Math.floor(sinceDayStart / SIX_HOUR_BLOCK_MS), 3);
+    return new Date(startOfDay + blocksIn * SIX_HOUR_BLOCK_MS);
+}
+/** Start of the next 6h UTC-aligned block after `now`. */
+export function blockResetsAtUtc(now) {
+    return new Date(blockStartUtc(now).getTime() + SIX_HOUR_BLOCK_MS);
+}
+/**
+ * Stable id for a 6h block — used to dedupe `ai_units_cap_reached`
+ * activity events to one-per-(credential, block).
+ */
+export function blockIdUtc(now) {
+    return blockStartUtc(now).toISOString();
+}
+/** Reset instant for the 7-day window — `now + (boundary - elapsed)`. We use rolling 7d here. */
+export function weekResetsAtUtc(now) {
+    return new Date(now.getTime() + SEVEN_DAY_MS);
+}
+//# sourceMappingURL=ai-units.js.map

package/dist/spend/ai-units.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-units.js","sourceRoot":"","sources":["../../src/spend/ai-units.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA0E;IACtG,eAAe,EAAE,GAAG;IACpB,cAAc,EAAE,GAAG,GAAG,EAAE;CACzB,CAAC;AAEF,oFAAoF;AACpF,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAC9C,4CAA4C;AAC5C,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA2B,EAC3B,KAAyB,EACzB,YAA4B;IAE5B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,gBAAgB,GACpB,SAAS,KAAK,mBAAmB;QACjC,SAAS,KAAK,aAAa;QAC3B,SAAS,KAAK,oBAAoB,CAAC;IACrC,IAAI,CAAC,gBAAgB;QAAE,OAAO,CAAC,CAAC;IAChC,+DAA+D;IAC/D,IAAI,YAAY,IAAI,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,CAAC,CAAC;IACrE,sEAAsE;IACtE,+DAA+D;IAC/D,qEAAqE;IACrE,qEAAqE;IACrE,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,KAAK,mBAAmB,IAAI,SAAS,KAAK,aAAa,CAAC,EAAE,CAAC;QACxF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,0BAA0B,CAAC,GAAG,GAAG,CAAC;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAsB;IAEtB,MAAM,GAAG,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAClD,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrC,OAAO,EAAE,eAAe,EAAE,iBAAiB,CAAC,eAAe,EAAE,cAAc,EAAE,iBAAiB,CAAC,cAAc,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YAC7E,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAC1D,CAAC;QACD,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,EAAE,eAAe,EAAE,iBAAiB,CAAC,eAAe,EAAE,cAAc,EAAE,iBAAiB,CAAC,cAAc,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,GAAG,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,eAAe,EAAE,iBAAiB,CAAC,eAAe,EAAE,cAAc,EAAE,iBAAiB,CAAC,cAAc,EAAE,CAAC;AAClH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,mEAAmE;IACnE,0EAA0E;IAC1E,iEAAiE;IACjE,OAAO,CAAC,IAAI,CACV,oDAAoD,GAAG,mBAAmB;QACxE,iBAAiB,iBAAiB,CAAC,eAAe,IAAI,iBAAiB,CAAC,cAAc,oBAAoB,CAC7G,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAS;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACvF,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC;IACjD,gEAAgE;IAChE,mEAAmE;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,OAAO,IAAI,IAAI,CAAC,UAAU,GAAG,QAAQ,GAAG,iBAAiB,CAAC,CAAC;AAC7D,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,gBAAgB,CAAC,GAAS;IACxC,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAS;IAClC,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAAC,GAAS;IACvC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,CAAC,CAAC;AAChD,CAAC"}

package/dist/spend/cost-surface-status.d.ts

@@ -0,0 +1,10 @@
+import { type CredentialId } from './credential.js';
+export interface CostSurfaceHarnessStatus {
+    credentialId: CredentialId | null;
+    usesPaidApiKey: boolean;
+}
+export interface CostSurfaceStatus {
+    harnesses: Record<string, CostSurfaceHarnessStatus>;
+}
+export declare function credentialUsesPaidApiKey(credentialId: CredentialId | null): boolean;
+export declare function buildCostSurfaceStatus(env: NodeJS.ProcessEnv): CostSurfaceStatus;

package/dist/spend/cost-surface-status.js

@@ -0,0 +1,22 @@
+import { CLAUDE_CODE_HARNESS, CODEX_HARNESS, HERMES_AGENT_HARNESS, } from '../harnesses/names.js';
+import { resolveCredentialId } from './credential.js';
+const COST_SURFACE_HARNESSES = [
+    CLAUDE_CODE_HARNESS,
+    CODEX_HARNESS,
+    HERMES_AGENT_HARNESS,
+];
+export function credentialUsesPaidApiKey(credentialId) {
+    return credentialId !== null && credentialId.endsWith(':api-key');
+}
+export function buildCostSurfaceStatus(env) {
+    const harnesses = {};
+    for (const harness of COST_SURFACE_HARNESSES) {
+        const credentialId = resolveCredentialId(harness, env);
+        harnesses[harness] = {
+            credentialId,
+            usesPaidApiKey: credentialUsesPaidApiKey(credentialId),
+        };
+    }
+    return { harnesses };
+}
+//# sourceMappingURL=cost-surface-status.js.map

package/dist/spend/cost-surface-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-surface-status.js","sourceRoot":"","sources":["../../src/spend/cost-surface-status.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAqB,MAAM,iBAAiB,CAAC;AAEzE,MAAM,sBAAsB,GAAG;IAC7B,mBAAmB;IACnB,aAAa;IACb,oBAAoB;CACZ,CAAC;AAWX,MAAM,UAAU,wBAAwB,CAAC,YAAiC;IACxE,OAAO,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAsB;IAC3D,MAAM,SAAS,GAA6C,EAAE,CAAC;IAC/D,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,SAAS,CAAC,OAAO,CAAC,GAAG;YACnB,YAAY;YACZ,cAAc,EAAE,wBAAwB,CAAC,YAAY,CAAC;SACvD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC"}

package/dist/spend/credential.d.ts

@@ -0,0 +1,8 @@
+/** A credential identity. Format: `{provider}:{authMethod}`, e.g. `anthropic:api-key`. Never empty. */
+export type CredentialId = string;
+/**
+ * Resolve which authentication credential a harness will bill against, from
+ * the presence of provider env vars. Returns null when the harness makes no
+ * paid LLM call (e.g. prediction harnesses) or no credential is recognisable.
+ */
+export declare function resolveCredentialId(harness: string | undefined, env: NodeJS.ProcessEnv): CredentialId | null;

package/dist/spend/credential.js

@@ -0,0 +1,30 @@
+import { CLAUDE_CODE_HARNESS, CODEX_HARNESS, HERMES_AGENT_HARNESS, canonicalHarnessName, } from '../harnesses/names.js';
+/**
+ * Resolve which authentication credential a harness will bill against, from
+ * the presence of provider env vars. Returns null when the harness makes no
+ * paid LLM call (e.g. prediction harnesses) or no credential is recognisable.
+ */
+export function resolveCredentialId(harness, env) {
+    if (!harness)
+        return null;
+    switch (canonicalHarnessName(harness)) {
+        case CLAUDE_CODE_HARNESS:
+            // empty string treated as absent
+            if (env['CLAUDE_CODE_OAUTH_TOKEN'])
+                return 'anthropic:subscription';
+            if (env['ANTHROPIC_API_KEY'])
+                return 'anthropic:api-key';
+            return null;
+        case CODEX_HARNESS:
+            if (env['OPENAI_API_KEY'])
+                return 'openai:api-key';
+            return 'openai:subscription';
+        case HERMES_AGENT_HARNESS: {
+            const provider = (env['JINN_HERMES_PROVIDER'] ?? 'hermes').trim().toLowerCase();
+            return `${provider}:api-key`;
+        }
+        default:
+            return null;
+    }
+}
+//# sourceMappingURL=credential.js.map

package/dist/spend/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../src/spend/credential.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAK/B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA2B,EAC3B,GAAsB;IAEtB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,QAAQ,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,KAAK,mBAAmB;YACtB,iCAAiC;YACjC,IAAI,GAAG,CAAC,yBAAyB,CAAC;gBAAE,OAAO,wBAAwB,CAAC;YACpE,IAAI,GAAG,CAAC,mBAAmB,CAAC;gBAAE,OAAO,mBAAmB,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,KAAK,aAAa;YAChB,IAAI,GAAG,CAAC,gBAAgB,CAAC;gBAAE,OAAO,gBAAgB,CAAC;YACnD,OAAO,qBAAqB,CAAC;QAC/B,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChF,OAAO,GAAG,QAAQ,UAAU,CAAC;QAC/B,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/spend/daemon-config.d.ts

@@ -0,0 +1,13 @@
+import type { JinnConfig } from '../config.js';
+import { type CredentialId } from './credential.js';
+export interface SpendCapDaemonConfig {
+    /** credentialId -> USD/day cap. */
+    caps: Record<CredentialId, number>;
+    /** manifest CID -> the credential its harness bills against. */
+    manifestCredentials: Record<string, CredentialId>;
+}
+/**
+ * Assemble the daemon's spend-cap config from operator config + env. Returns
+ * undefined when no credential ends up with a cap (the gate then stays off).
+ */
+export declare function buildSpendCapConfig(config: Pick<JinnConfig, 'joinedSolverNets' | 'spendCaps'>, env: NodeJS.ProcessEnv): SpendCapDaemonConfig | undefined;

package/dist/spend/daemon-config.js

@@ -0,0 +1,24 @@
+import { resolveCredentialId } from './credential.js';
+/**
+ * Assemble the daemon's spend-cap config from operator config + env. Returns
+ * undefined when no credential ends up with a cap (the gate then stays off).
+ */
+export function buildSpendCapConfig(config, env) {
+    const blanketRaw = env['JINN_SPEND_CAP_USD'];
+    const blanketNum = blanketRaw != null && blanketRaw.trim() !== '' ? Number(blanketRaw) : NaN;
+    const blanket = Number.isFinite(blanketNum) && blanketNum > 0 ? blanketNum : undefined;
+    const manifestCredentials = {};
+    for (const [manifestCid, entry] of Object.entries(config.joinedSolverNets ?? {})) {
+        const credentialId = resolveCredentialId(entry.harness, env);
+        if (credentialId)
+            manifestCredentials[manifestCid] = credentialId;
+    }
+    const caps = {};
+    for (const credentialId of new Set(Object.values(manifestCredentials))) {
+        const cap = config.spendCaps?.[credentialId] ?? blanket;
+        if (cap != null)
+            caps[credentialId] = cap;
+    }
+    return Object.keys(caps).length > 0 ? { caps, manifestCredentials } : undefined;
+}
+//# sourceMappingURL=daemon-config.js.map

package/dist/spend/daemon-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-config.js","sourceRoot":"","sources":["../../src/spend/daemon-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAqB,MAAM,iBAAiB,CAAC;AASzE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA0D,EAC1D,GAAsB;IAEtB,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,UAAU,IAAI,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvF,MAAM,mBAAmB,GAAiC,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;QACjF,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,YAAY;YAAE,mBAAmB,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,GAAiC,EAAE,CAAC;IAC9C,KAAK,MAAM,YAAY,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC;QACxD,IAAI,GAAG,IAAI,IAAI;YAAE,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC;IAC5C,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAClF,CAAC"}

package/dist/spend/pricing.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Price a token count in USD for the given model. Returns null when the model
+ * is unknown to the catalog (caller falls back to a heuristic).
+ *
+ * Uses the tokenlens bundled, offline model catalog (models.dev snapshot).
+ * The `tokenlens` re-export of `getTokenCosts` accepts an object with
+ * `{ modelId, usage }` and injects the default catalog automatically.
+ *
+ * Note: tokenlens's bundled catalog may lag current model IDs (e.g.
+ * `claude-haiku-4-5-20251001` is absent in v1.3.1 and returns null);
+ * callers must handle null gracefully.
+ */
+export declare function priceTokens(modelId: string, tokens: {
+    inputTokens: number;
+    outputTokens: number;
+}): number | null;

package/dist/spend/pricing.js

@@ -0,0 +1,26 @@
+import { getTokenCosts } from 'tokenlens';
+/**
+ * Price a token count in USD for the given model. Returns null when the model
+ * is unknown to the catalog (caller falls back to a heuristic).
+ *
+ * Uses the tokenlens bundled, offline model catalog (models.dev snapshot).
+ * The `tokenlens` re-export of `getTokenCosts` accepts an object with
+ * `{ modelId, usage }` and injects the default catalog automatically.
+ *
+ * Note: tokenlens's bundled catalog may lag current model IDs (e.g.
+ * `claude-haiku-4-5-20251001` is absent in v1.3.1 and returns null);
+ * callers must handle null gracefully.
+ */
+export function priceTokens(modelId, tokens) {
+    try {
+        const costs = getTokenCosts({
+            modelId,
+            usage: { prompt_tokens: tokens.inputTokens, completion_tokens: tokens.outputTokens },
+        });
+        return typeof costs?.totalUSD === 'number' ? costs.totalUSD : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=pricing.js.map

package/dist/spend/pricing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.js","sourceRoot":"","sources":["../../src/spend/pricing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,MAAqD;IAErD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,aAAa,CAAC;YAC1B,OAAO;YACP,KAAK,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,iBAAiB,EAAE,MAAM,CAAC,YAAY,EAAE;SACrF,CAAC,CAAC;QACH,OAAO,OAAO,KAAK,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/spend/record.d.ts

@@ -0,0 +1,13 @@
+import type { Store } from '../store/store.js';
+/**
+ * Record the cost of one finished harness run as a `task_cost` activity row.
+ * Called once per harness run (at the POST_SNAPSHOT transition). Best-effort:
+ * never throws — a parse failure must not break task execution.
+ */
+export declare function recordTaskCost(store: Store, args: {
+    requestId: string;
+    harness: string;
+    model: string | undefined;
+    workingDir: string;
+    solverType: string | null;
+}, env?: NodeJS.ProcessEnv): void;

package/dist/spend/record.js

@@ -0,0 +1,36 @@
+import { resolveCredentialId } from './credential.js';
+import { harvestHarnessUsage } from './usage.js';
+/**
+ * Record the cost of one finished harness run as a `task_cost` activity row.
+ * Called once per harness run (at the POST_SNAPSHOT transition). Best-effort:
+ * never throws — a parse failure must not break task execution.
+ */
+export function recordTaskCost(store, args, env = process.env) {
+    try {
+        const credentialId = resolveCredentialId(args.harness, env);
+        if (!credentialId)
+            return;
+        const usage = harvestHarnessUsage(args.harness, args.workingDir, args.model);
+        const actualCostUsdMicros = Math.round(usage.costUsd * 1_000_000);
+        store.recordActivityEvent({
+            ts: new Date().toISOString(),
+            kind: 'task_cost',
+            requestId: args.requestId,
+            solverType: args.solverType,
+            credentialId,
+            costUsdMicros: actualCostUsdMicros,
+            model: usage.model,
+            detail: usage.estimated ? 'estimated' : 'observed',
+        });
+        // Issue #815: fill actual_cost_usd_micros on the per-request claimed
+        // row + set claim_status='delivered'. ai_units stays as captured at
+        // claim time (estimates are the gate input, never recomputed).
+        // Idempotent: no-op when no claimed row exists for this request id.
+        store.finalizeClaimDelivered(args.requestId, actualCostUsdMicros);
+    }
+    catch (err) {
+        console.warn(`[spend] failed to record task cost for ${args.requestId}: ` +
+            `${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=record.js.map

package/dist/spend/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../../src/spend/record.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAY,EACZ,IAMC,EACD,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;QAClE,KAAK,CAAC,mBAAmB,CAAC;YACxB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY;YACZ,aAAa,EAAE,mBAAmB;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;SACnD,CAAC,CAAC;QACH,qEAAqE;QACrE,oEAAoE;QACpE,+DAA+D;QAC/D,oEAAoE;QACpE,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,0CAA0C,IAAI,CAAC,SAAS,IAAI;YAC1D,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/spend/usage.d.ts

@@ -0,0 +1,27 @@
+/** USD attributed to a task whose model has no known price. */
+export declare const UNKNOWN_MODEL_FALLBACK_USD = 1;
+export interface HarnessUsage {
+    model: string;
+    costUsd: number;
+    /** true = derived from an a-priori heuristic; false = from observed usage. */
+    estimated: boolean;
+    inputTokens?: number;
+    outputTokens?: number;
+}
+/** Parse Claude Code `--output-format stream-json` output for the terminal result. */
+export declare function parseClaudeCodeUsage(stdoutJsonl: string): {
+    costUsd: number;
+    inputTokens?: number;
+    outputTokens?: number;
+} | null;
+/** Parse Codex `--json` output for the last turn.completed token usage. */
+export declare function parseCodexUsage(stdoutJsonl: string): {
+    inputTokens: number;
+    outputTokens: number;
+} | null;
+/**
+ * Determine the USD cost of a finished harness run. Reads the harness's own
+ * output file for observed usage; falls back to a heuristic on any failure.
+ * Always returns a HarnessUsage — never throws.
+ */
+export declare function harvestHarnessUsage(harness: string, workingDir: string, model: string | undefined): HarnessUsage;