@jinn-network/client 0.1.7 → 0.1.8-canary.09a3b2f6

package/dist/spend/ai-units.js

@@ -0,0 +1,229 @@
+/**
+ * AI-units calibration — the universal cost language for the M1
+ * cost-protection throttle (issue #815).
+ *
+ * One "AI unit" is the marginal USD cost of one task on the
+ * GPT-5.4-mini Codex-Plus baseline, scaled so that **100 units = 10% of a
+ * 6-hour-block-equivalent USD spend on that baseline**. Every other
+ * harness/model converts its USD cost-per-task through the same peg
+ * (`USD / GPT_5_4_MINI_USD_PER_BLOCK * 100`).
+ *
+ * Why a unit-of-account rather than raw USD: the ceiling is the same
+ * **100 units per 6h block** for every harness/model, so an operator on
+ * Haiku 4.5 (~1 unit/task) gets ~100 tasks per block, while an operator
+ * on Opus 4.7 (~50 units/task) gets ~2 tasks per block. The peg keeps the
+ * ceiling readable and ties it to the milestone framing of "~10% of a
+ * baseline AI subscription's weekly cap" (#605).
+ *
+ * The cap is layered with the existing per-credential USD `spendCaps`
+ * spend-cap gate from PR #345/#346 — both gates run; the more
+ * conservative one wins. This module owns the AI-units side only.
+ *
+ * Issue #1004: the gate's comparison now runs in **USD** (actual harvested
+ * spend vs a USD ceiling), not projected AI units. The peg below survives
+ * as the calibration constant deriving that USD ceiling and as the
+ * presentation-layer conversion for the legacy unit fields the SPA still
+ * reads. For subscription credentials the USD ceiling is a *proxy* budget —
+ * it bounds Jinn-attributable model cost, not the provider's plan quota.
+ */
+import { estimateModelCost } from '../harnesses/cost-estimates.js';
+import { CLAUDE_CODE_HARNESS, CODEX_HARNESS, HERMES_AGENT_HARNESS, canonicalHarnessName, } from '../harnesses/names.js';
+/**
+ * Calibration peg: the USD cost of one GPT-5.4-mini Codex-Plus 6h block.
+ * Derived from a typical Codex Plus 6h block on GPT-5.4-mini: ~10 tasks at
+ * ~$0.0525/task (50k input × $0.00025/1k + 20k output × $0.002/1k) → ~$0.5.
+ *
+ * Conservative — biases toward over-warning rather than under-warning so
+ * the ceiling pauses early rather than late.
+ *
+ * Issue #1004: demoted to a calibration constant — it derives
+ * {@link REFERENCE_CEILING_USD_MICROS} and converts the legacy unit fields
+ * for presentation, but no longer appears in the gate's comparison. Kept
+ * exported because the SPA's `HarnessFootprintPanel.tsx` imports it (#1006).
+ */
+export const GPT_5_4_MINI_USD_PER_BLOCK = 0.5;
+/**
+ * The default reference ceiling — 100 AI units per 6h UTC-aligned block,
+ * with a weekly safety net at 28 × that (one block × 28 blocks/week).
+ *
+ * Override at runtime with `JINN_AI_UNITS_CEILING_OVERRIDE` (see
+ * `resolveReferenceCeiling`). Set as `<units>` for a per-block override
+ * (weekly auto-scales to 28×) or `<block>:<week>` for both explicitly.
+ */
+export const REFERENCE_CEILING = {
+    units_per_block: 100,
+    units_per_week: 100 * 28,
+};
+/**
+ * USD-micros ceiling (issue #1004). The gate now compares **actual USD
+ * spend** against this ceiling rather than projected AI units. Derived
+ * directly from {@link REFERENCE_CEILING} through the GPT-5.4-mini peg:
+ *   usd_micros = units / 100 * GPT_5_4_MINI_USD_PER_BLOCK * 1_000_000.
+ * Default 100 units/block => $0.50/block (500_000 micros); 2800 units/week
+ * => $14/week (14_000_000 micros). Calibration is preserved; only the
+ * comparison unit changed. For subscription credentials this USD budget is
+ * a *proxy* — it bounds Jinn-attributable model cost, not the provider's
+ * plan quota directly.
+ */
+export const REFERENCE_CEILING_USD_MICROS = {
+    usd_micros_per_block: unitsToUsdMicros(REFERENCE_CEILING.units_per_block),
+    usd_micros_per_week: unitsToUsdMicros(REFERENCE_CEILING.units_per_week),
+};
+/** Convert an AI-unit count to USD micros through the GPT-5.4-mini peg. */
+function unitsToUsdMicros(units) {
+    return Math.round((units / 100) * GPT_5_4_MINI_USD_PER_BLOCK * 1_000_000);
+}
+/** 6h block in milliseconds — UTC blocks start at 00:00 / 06:00 / 12:00 / 18:00. */
+const SIX_HOUR_BLOCK_MS = 6 * 60 * 60 * 1_000;
+/** 7 days in milliseconds — UTC-aligned. */
+const SEVEN_DAY_MS = 7 * 24 * 60 * 60 * 1_000;
+/**
+ * Project the AI-unit cost of one task for a harness/model combination.
+ *
+ * The AI-units cap meters every paid-LLM harness by model cost,
+ * regardless of whether the operator routes through a subscription
+ * (`*:subscription`) or a raw API key (`*:api-key`). Subscription
+ * quota is finite — the cap exists exactly to bound how much of it a
+ * node will burn on Jinn (the spec's "operators commit to a 48h
+ * burn-in knowing exactly what their node will consume" — issue #901
+ * corrected the #815 implementer's "subscription = 0 units" shortcut).
+ *
+ * - Returns `0` for harnesses that make no marginal LLM call
+ *   (prediction harnesses, evaluators, unknown harnesses).
+ * - Returns `null` when the harness IS a paid-LLM harness but the
+ *   model is unknown to the cost table — the caller treats that as
+ *   "no projection available" and the gate fails *open* with a warn.
+ * - Otherwise returns `cost.usd / GPT_5_4_MINI_USD_PER_BLOCK * 100`.
+ *
+ * `credentialId` is the env-resolved auth path. It does NOT change
+ * the projection (the model costs the same regardless of auth path);
+ * it only labels the accounting bucket. The parameter remains for
+ * call-site clarity and future-proofing.
+ */
+export function projectAiUnits(harness, model, _credentialId) {
+    if (!harness)
+        return null;
+    const canonical = canonicalHarnessName(harness);
+    const isPaidLlmHarness = canonical === CLAUDE_CODE_HARNESS ||
+        canonical === CODEX_HARNESS ||
+        canonical === HERMES_AGENT_HARNESS;
+    if (!isPaidLlmHarness)
+        return 0;
+    if (!model)
+        return null;
+    const cost = estimateModelCost(model);
+    if (!cost)
+        return null;
+    return (cost.usd / GPT_5_4_MINI_USD_PER_BLOCK) * 100;
+}
+/**
+ * Project the per-task cost of one harness/model combination in USD micros
+ * (issue #1004). This is the in-flight debit the gate books for a claim
+ * before its actual cost is harvested. Same harness classification as
+ * {@link projectAiUnits}:
+ *   - `0` for harnesses that make no marginal LLM call,
+ *   - `null` when a paid-LLM harness's model is unknown to the cost table
+ *     (gate fails open with a warn),
+ *   - otherwise `round(estimateModelCost(model).usd * 1_000_000)`.
+ *
+ * `_credentialId` does not change the projection (the model costs the same
+ * regardless of auth path); it labels the accounting bucket only.
+ */
+export function projectTaskUsdMicros(harness, model, _credentialId) {
+    if (!harness)
+        return null;
+    const canonical = canonicalHarnessName(harness);
+    const isPaidLlmHarness = canonical === CLAUDE_CODE_HARNESS ||
+        canonical === CODEX_HARNESS ||
+        canonical === HERMES_AGENT_HARNESS;
+    if (!isPaidLlmHarness)
+        return 0;
+    if (!model)
+        return null;
+    const cost = estimateModelCost(model);
+    if (!cost)
+        return null;
+    return Math.round(cost.usd * 1_000_000);
+}
+/**
+ * Resolve the active ceiling from env. CI / tests override the baked-in
+ * 100 units via `JINN_AI_UNITS_CEILING_OVERRIDE`. Accepts:
+ *
+ *  - `"<n>"` — sets `units_per_block = n`; weekly auto-scales to `n * 28`.
+ *  - `"<block>:<week>"` — sets both explicitly.
+ *
+ * Falls back to the baked-in `REFERENCE_CEILING` on a missing or
+ * malformed value (env-typo must not silently disable the gate).
+ */
+export function resolveReferenceCeiling(env) {
+    const raw = env['JINN_AI_UNITS_CEILING_OVERRIDE'];
+    if (raw == null || raw.trim() === '') {
+        return { units_per_block: REFERENCE_CEILING.units_per_block, units_per_week: REFERENCE_CEILING.units_per_week };
+    }
+    const trimmed = raw.trim();
+    if (trimmed.includes(':')) {
+        const [a, b] = trimmed.split(':', 2);
+        const block = Number(a);
+        const week = Number(b);
+        if (Number.isFinite(block) && block > 0 && Number.isFinite(week) && week > 0) {
+            return { units_per_block: block, units_per_week: week };
+        }
+        warnMalformedOverride(raw);
+        return { units_per_block: REFERENCE_CEILING.units_per_block, units_per_week: REFERENCE_CEILING.units_per_week };
+    }
+    const block = Number(trimmed);
+    if (Number.isFinite(block) && block > 0) {
+        return { units_per_block: block, units_per_week: block * 28 };
+    }
+    warnMalformedOverride(raw);
+    return { units_per_block: REFERENCE_CEILING.units_per_block, units_per_week: REFERENCE_CEILING.units_per_week };
+}
+/**
+ * Resolve the active USD-micros ceiling from env (issue #1004). Reuses
+ * {@link resolveReferenceCeiling} so the `JINN_AI_UNITS_CEILING_OVERRIDE`
+ * parsing (integer or `<block>:<week>`, malformed-warn, default fallback)
+ * lives in one place, then converts both bounds through the peg.
+ */
+export function resolveReferenceCeilingUsdMicros(env) {
+    const units = resolveReferenceCeiling(env);
+    return {
+        usd_micros_per_block: unitsToUsdMicros(units.units_per_block),
+        usd_micros_per_week: unitsToUsdMicros(units.units_per_week),
+    };
+}
+function warnMalformedOverride(raw) {
+    // One-time warn per resolve call — the function is only invoked at
+    // startup, so a module-level memo is unnecessary. Surfaces the operator's
+    // typo instead of silently falling back to the baked-in default.
+    console.warn(`[ai-units] warn: JINN_AI_UNITS_CEILING_OVERRIDE="${raw}" is malformed — ` +
+        `using default ${REFERENCE_CEILING.units_per_block}/${REFERENCE_CEILING.units_per_week} per (block, week)`);
+}
+/**
+ * Start of the 6h UTC-aligned block containing `now`. Blocks begin at
+ * 00:00, 06:00, 12:00, 18:00 UTC; `blockStartUtc(t)` returns the most
+ * recent such instant ≤ t. Used to bound the "units this block" sum.
+ */
+function blockStartUtc(now) {
+    const startOfDay = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate());
+    const sinceDayStart = now.getTime() - startOfDay;
+    // Cap at 3 — 4 blocks per day (indices 0..3); defensive against
+    // millisecond rounding pushing the floor over 4 at day boundaries.
+    const blocksIn = Math.min(Math.floor(sinceDayStart / SIX_HOUR_BLOCK_MS), 3);
+    return new Date(startOfDay + blocksIn * SIX_HOUR_BLOCK_MS);
+}
+/** Start of the next 6h UTC-aligned block after `now`. */
+export function blockResetsAtUtc(now) {
+    return new Date(blockStartUtc(now).getTime() + SIX_HOUR_BLOCK_MS);
+}
+/**
+ * Stable id for a 6h block — used to dedupe `ai_units_cap_reached`
+ * activity events to one-per-(credential, block).
+ */
+export function blockIdUtc(now) {
+    return blockStartUtc(now).toISOString();
+}
+/** Reset instant for the 7-day window — `now + (boundary - elapsed)`. We use rolling 7d here. */
+export function weekResetsAtUtc(now) {
+    return new Date(now.getTime() + SEVEN_DAY_MS);
+}
+//# sourceMappingURL=ai-units.js.map

package/dist/spend/ai-units.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-units.js","sourceRoot":"","sources":["../../src/spend/ai-units.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA0E;IACtG,eAAe,EAAE,GAAG;IACpB,cAAc,EAAE,GAAG,GAAG,EAAE;CACzB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAGrC;IACF,oBAAoB,EAAE,gBAAgB,CAAC,iBAAiB,CAAC,eAAe,CAAC;IACzE,mBAAmB,EAAE,gBAAgB,CAAC,iBAAiB,CAAC,cAAc,CAAC;CACxE,CAAC;AAEF,2EAA2E;AAC3E,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,0BAA0B,GAAG,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,oFAAoF;AACpF,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAC9C,4CAA4C;AAC5C,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA2B,EAC3B,KAAyB,EACzB,aAA6B;IAE7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,gBAAgB,GACpB,SAAS,KAAK,mBAAmB;QACjC,SAAS,KAAK,aAAa;QAC3B,SAAS,KAAK,oBAAoB,CAAC;IACrC,IAAI,CAAC,gBAAgB;QAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,0BAA0B,CAAC,GAAG,GAAG,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA2B,EAC3B,KAAyB,EACzB,aAA6B;IAE7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,gBAAgB,GACpB,SAAS,KAAK,mBAAmB;QACjC,SAAS,KAAK,aAAa;QAC3B,SAAS,KAAK,oBAAoB,CAAC;IACrC,IAAI,CAAC,gBAAgB;QAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAsB;IAEtB,MAAM,GAAG,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAClD,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrC,OAAO,EAAE,eAAe,EAAE,iBAAiB,CAAC,eAAe,EAAE,cAAc,EAAE,iBAAiB,CAAC,cAAc,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YAC7E,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAC1D,CAAC;QACD,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,EAAE,eAAe,EAAE,iBAAiB,CAAC,eAAe,EAAE,cAAc,EAAE,iBAAiB,CAAC,cAAc,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,GAAG,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,eAAe,EAAE,iBAAiB,CAAC,eAAe,EAAE,cAAc,EAAE,iBAAiB,CAAC,cAAc,EAAE,CAAC;AAClH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAC9C,GAAsB;IAEtB,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO;QACL,oBAAoB,EAAE,gBAAgB,CAAC,KAAK,CAAC,eAAe,CAAC;QAC7D,mBAAmB,EAAE,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,mEAAmE;IACnE,0EAA0E;IAC1E,iEAAiE;IACjE,OAAO,CAAC,IAAI,CACV,oDAAoD,GAAG,mBAAmB;QACxE,iBAAiB,iBAAiB,CAAC,eAAe,IAAI,iBAAiB,CAAC,cAAc,oBAAoB,CAC7G,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAS;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACvF,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC;IACjD,gEAAgE;IAChE,mEAAmE;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,OAAO,IAAI,IAAI,CAAC,UAAU,GAAG,QAAQ,GAAG,iBAAiB,CAAC,CAAC;AAC7D,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,gBAAgB,CAAC,GAAS;IACxC,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAS;IAClC,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAAC,GAAS;IACvC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,CAAC,CAAC;AAChD,CAAC"}

package/dist/spend/cost-surface-status.d.ts

@@ -0,0 +1,12 @@
+import { type CredentialId } from './credential.js';
+export interface CostSurfaceHarnessStatus {
+    credentialId: CredentialId | null;
+    usesPaidApiKey: boolean;
+}
+export interface CostSurfaceStatus {
+    harnesses: Record<string, CostSurfaceHarnessStatus>;
+}
+export declare function credentialUsesPaidApiKey(credentialId: CredentialId | null): boolean;
+export declare function buildCostSurfaceStatus(env: NodeJS.ProcessEnv, 
+/** Optional home dir override for the disk-OAuth probe — tests only. */
+homeDirOverride?: string): CostSurfaceStatus;

package/dist/spend/cost-surface-status.js

@@ -0,0 +1,24 @@
+import { CLAUDE_CODE_HARNESS, CODEX_HARNESS, HERMES_AGENT_HARNESS, } from '../harnesses/names.js';
+import { resolveCredentialId } from './credential.js';
+const COST_SURFACE_HARNESSES = [
+    CLAUDE_CODE_HARNESS,
+    CODEX_HARNESS,
+    HERMES_AGENT_HARNESS,
+];
+export function credentialUsesPaidApiKey(credentialId) {
+    return credentialId !== null && credentialId.endsWith(':api-key');
+}
+export function buildCostSurfaceStatus(env, 
+/** Optional home dir override for the disk-OAuth probe — tests only. */
+homeDirOverride) {
+    const harnesses = {};
+    for (const harness of COST_SURFACE_HARNESSES) {
+        const credentialId = resolveCredentialId(harness, env, homeDirOverride);
+        harnesses[harness] = {
+            credentialId,
+            usesPaidApiKey: credentialUsesPaidApiKey(credentialId),
+        };
+    }
+    return { harnesses };
+}
+//# sourceMappingURL=cost-surface-status.js.map

package/dist/spend/cost-surface-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-surface-status.js","sourceRoot":"","sources":["../../src/spend/cost-surface-status.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAqB,MAAM,iBAAiB,CAAC;AAEzE,MAAM,sBAAsB,GAAG;IAC7B,mBAAmB;IACnB,aAAa;IACb,oBAAoB;CACZ,CAAC;AAWX,MAAM,UAAU,wBAAwB,CAAC,YAAiC;IACxE,OAAO,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAsB;AACtB,wEAAwE;AACxE,eAAwB;IAExB,MAAM,SAAS,GAA6C,EAAE,CAAC;IAC/D,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;QACxE,SAAS,CAAC,OAAO,CAAC,GAAG;YACnB,YAAY;YACZ,cAAc,EAAE,wBAAwB,CAAC,YAAY,CAAC;SACvD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC"}

package/dist/spend/credential.d.ts

@@ -0,0 +1,39 @@
+/** A credential identity. Format: `{provider}:{authMethod}`, e.g. `anthropic:api-key`. Never empty. */
+export type CredentialId = string;
+/**
+ * Does this operator have Claude Code installed and authed via OAuth?
+ *
+ * The `claude` CLI keeps its OAuth token in the OS keyring on macOS, in
+ * platform-equivalent stores elsewhere, and writes per-user state under
+ * `~/.claude/`. The cheapest cross-platform "operator has an active
+ * Claude Code Pro subscription set up" probe is "does `~/.claude/`
+ * exist?" — it's created by `claude` on first run and persists.
+ *
+ * Injectable for tests via `homeDirOverride`.
+ */
+export declare function hasClaudeCodeOnDisk(homeDirOverride?: string): boolean;
+/**
+ * Does this operator have Codex CLI installed and authed?
+ *
+ * Codex CLI writes its OAuth to `~/.codex/auth.json`. Presence is the
+ * subscription signal.
+ */
+export declare function hasCodexOnDisk(homeDirOverride?: string): boolean;
+/**
+ * Resolve which authentication credential a harness will bill against.
+ *
+ * Precedence per provider (preserved from PR #345 / #474):
+ *   1. subscription token env var (`*:subscription`) — most explicit
+ *      subscription marker; the operator has deliberately set it
+ *   2. raw-API-key env var (`*:api-key`) — explicit api-key
+ *   3. on-disk OAuth (`*:subscription`) — the typical operator who
+ *      installed `claude` / `codex` CLI and never set an env var
+ *   4. null — no credential resolved
+ *
+ * Returns null when the harness makes no paid LLM call (e.g. prediction
+ * harnesses) or no credential is recognisable. Issue #901: disk
+ * detection added so stock subscription installs get a credential and
+ * the AI-units gate engages by default; precedence above kept stable so
+ * the cost-surface UI from #345 / #474 still reads the same.
+ */
+export declare function resolveCredentialId(harness: string | undefined, env: NodeJS.ProcessEnv, homeDirOverride?: string): CredentialId | null;

package/dist/spend/credential.js

@@ -0,0 +1,71 @@
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { CLAUDE_CODE_HARNESS, CODEX_HARNESS, HERMES_AGENT_HARNESS, canonicalHarnessName, } from '../harnesses/names.js';
+/**
+ * Does this operator have Claude Code installed and authed via OAuth?
+ *
+ * The `claude` CLI keeps its OAuth token in the OS keyring on macOS, in
+ * platform-equivalent stores elsewhere, and writes per-user state under
+ * `~/.claude/`. The cheapest cross-platform "operator has an active
+ * Claude Code Pro subscription set up" probe is "does `~/.claude/`
+ * exist?" — it's created by `claude` on first run and persists.
+ *
+ * Injectable for tests via `homeDirOverride`.
+ */
+export function hasClaudeCodeOnDisk(homeDirOverride) {
+    return existsSync(join(homeDirOverride ?? homedir(), '.claude'));
+}
+/**
+ * Does this operator have Codex CLI installed and authed?
+ *
+ * Codex CLI writes its OAuth to `~/.codex/auth.json`. Presence is the
+ * subscription signal.
+ */
+export function hasCodexOnDisk(homeDirOverride) {
+    return existsSync(join(homeDirOverride ?? homedir(), '.codex', 'auth.json'));
+}
+/**
+ * Resolve which authentication credential a harness will bill against.
+ *
+ * Precedence per provider (preserved from PR #345 / #474):
+ *   1. subscription token env var (`*:subscription`) — most explicit
+ *      subscription marker; the operator has deliberately set it
+ *   2. raw-API-key env var (`*:api-key`) — explicit api-key
+ *   3. on-disk OAuth (`*:subscription`) — the typical operator who
+ *      installed `claude` / `codex` CLI and never set an env var
+ *   4. null — no credential resolved
+ *
+ * Returns null when the harness makes no paid LLM call (e.g. prediction
+ * harnesses) or no credential is recognisable. Issue #901: disk
+ * detection added so stock subscription installs get a credential and
+ * the AI-units gate engages by default; precedence above kept stable so
+ * the cost-surface UI from #345 / #474 still reads the same.
+ */
+export function resolveCredentialId(harness, env, homeDirOverride) {
+    if (!harness)
+        return null;
+    switch (canonicalHarnessName(harness)) {
+        case CLAUDE_CODE_HARNESS:
+            if (env['CLAUDE_CODE_OAUTH_TOKEN'])
+                return 'anthropic:subscription';
+            if (env['ANTHROPIC_API_KEY'])
+                return 'anthropic:api-key';
+            if (hasClaudeCodeOnDisk(homeDirOverride))
+                return 'anthropic:subscription';
+            return null;
+        case CODEX_HARNESS:
+            if (env['OPENAI_API_KEY'])
+                return 'openai:api-key';
+            if (hasCodexOnDisk(homeDirOverride))
+                return 'openai:subscription';
+            return null;
+        case HERMES_AGENT_HARNESS: {
+            const provider = (env['JINN_HERMES_PROVIDER'] ?? 'hermes').trim().toLowerCase();
+            return `${provider}:api-key`;
+        }
+        default:
+            return null;
+    }
+}
+//# sourceMappingURL=credential.js.map

package/dist/spend/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../src/spend/credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAK/B;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,eAAwB;IAC1D,OAAO,UAAU,CAAC,IAAI,CAAC,eAAe,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,eAAwB;IACrD,OAAO,UAAU,CAAC,IAAI,CAAC,eAAe,IAAI,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA2B,EAC3B,GAAsB,EACtB,eAAwB;IAExB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,QAAQ,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,KAAK,mBAAmB;YACtB,IAAI,GAAG,CAAC,yBAAyB,CAAC;gBAAE,OAAO,wBAAwB,CAAC;YACpE,IAAI,GAAG,CAAC,mBAAmB,CAAC;gBAAE,OAAO,mBAAmB,CAAC;YACzD,IAAI,mBAAmB,CAAC,eAAe,CAAC;gBAAE,OAAO,wBAAwB,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,KAAK,aAAa;YAChB,IAAI,GAAG,CAAC,gBAAgB,CAAC;gBAAE,OAAO,gBAAgB,CAAC;YACnD,IAAI,cAAc,CAAC,eAAe,CAAC;gBAAE,OAAO,qBAAqB,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChF,OAAO,GAAG,QAAQ,UAAU,CAAC;QAC/B,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/spend/daemon-config.d.ts

@@ -0,0 +1,13 @@
+import type { JinnConfig } from '../config.js';
+import { type CredentialId } from './credential.js';
+export interface SpendCapDaemonConfig {
+    /** credentialId -> USD/day cap. */
+    caps: Record<CredentialId, number>;
+    /** manifest CID -> the credential its harness bills against. */
+    manifestCredentials: Record<string, CredentialId>;
+}
+/**
+ * Assemble the daemon's spend-cap config from operator config + env. Returns
+ * undefined when no credential ends up with a cap (the gate then stays off).
+ */
+export declare function buildSpendCapConfig(config: Pick<JinnConfig, 'joinedSolverNets' | 'spendCaps'>, env: NodeJS.ProcessEnv): SpendCapDaemonConfig | undefined;

package/dist/spend/daemon-config.js

@@ -0,0 +1,24 @@
+import { resolveCredentialId } from './credential.js';
+/**
+ * Assemble the daemon's spend-cap config from operator config + env. Returns
+ * undefined when no credential ends up with a cap (the gate then stays off).
+ */
+export function buildSpendCapConfig(config, env) {
+    const blanketRaw = env['JINN_SPEND_CAP_USD'];
+    const blanketNum = blanketRaw != null && blanketRaw.trim() !== '' ? Number(blanketRaw) : NaN;
+    const blanket = Number.isFinite(blanketNum) && blanketNum > 0 ? blanketNum : undefined;
+    const manifestCredentials = {};
+    for (const [manifestCid, entry] of Object.entries(config.joinedSolverNets ?? {})) {
+        const credentialId = resolveCredentialId(entry.harness, env);
+        if (credentialId)
+            manifestCredentials[manifestCid] = credentialId;
+    }
+    const caps = {};
+    for (const credentialId of new Set(Object.values(manifestCredentials))) {
+        const cap = config.spendCaps?.[credentialId] ?? blanket;
+        if (cap != null)
+            caps[credentialId] = cap;
+    }
+    return Object.keys(caps).length > 0 ? { caps, manifestCredentials } : undefined;
+}
+//# sourceMappingURL=daemon-config.js.map

package/dist/spend/daemon-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-config.js","sourceRoot":"","sources":["../../src/spend/daemon-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAqB,MAAM,iBAAiB,CAAC;AASzE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA0D,EAC1D,GAAsB;IAEtB,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,UAAU,IAAI,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvF,MAAM,mBAAmB,GAAiC,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;QACjF,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,YAAY;YAAE,mBAAmB,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,GAAiC,EAAE,CAAC;IAC9C,KAAK,MAAM,YAAY,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC;QACxD,IAAI,GAAG,IAAI,IAAI;YAAE,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC;IAC5C,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAClF,CAAC"}

package/dist/spend/pricing.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Price a token count in USD for the given model. Returns null when the model
+ * is unknown to the catalog (caller falls back to a heuristic).
+ *
+ * Uses the tokenlens bundled, offline model catalog (models.dev snapshot).
+ * The `tokenlens` re-export of `getTokenCosts` accepts an object with
+ * `{ modelId, usage }` and injects the default catalog automatically.
+ *
+ * Note: tokenlens's bundled catalog may lag current model IDs (e.g.
+ * `claude-haiku-4-5-20251001` is absent in v1.3.1 and returns null);
+ * callers must handle null gracefully.
+ */
+export declare function priceTokens(modelId: string, tokens: {
+    inputTokens: number;
+    outputTokens: number;
+}): number | null;

package/dist/spend/pricing.js

@@ -0,0 +1,26 @@
+import { getTokenCosts } from 'tokenlens';
+/**
+ * Price a token count in USD for the given model. Returns null when the model
+ * is unknown to the catalog (caller falls back to a heuristic).
+ *
+ * Uses the tokenlens bundled, offline model catalog (models.dev snapshot).
+ * The `tokenlens` re-export of `getTokenCosts` accepts an object with
+ * `{ modelId, usage }` and injects the default catalog automatically.
+ *
+ * Note: tokenlens's bundled catalog may lag current model IDs (e.g.
+ * `claude-haiku-4-5-20251001` is absent in v1.3.1 and returns null);
+ * callers must handle null gracefully.
+ */
+export function priceTokens(modelId, tokens) {
+    try {
+        const costs = getTokenCosts({
+            modelId,
+            usage: { prompt_tokens: tokens.inputTokens, completion_tokens: tokens.outputTokens },
+        });
+        return typeof costs?.totalUSD === 'number' ? costs.totalUSD : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=pricing.js.map

package/dist/spend/pricing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.js","sourceRoot":"","sources":["../../src/spend/pricing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,MAAqD;IAErD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,aAAa,CAAC;YAC1B,OAAO;YACP,KAAK,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,iBAAiB,EAAE,MAAM,CAAC,YAAY,EAAE;SACrF,CAAC,CAAC;QACH,OAAO,OAAO,KAAK,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/spend/record.d.ts

@@ -0,0 +1,13 @@
+import type { Store } from '../store/store.js';
+/**
+ * Record the cost of one finished harness run as a `task_cost` activity row.
+ * Called once per harness run (at the POST_SNAPSHOT transition). Best-effort:
+ * never throws — a parse failure must not break task execution.
+ */
+export declare function recordTaskCost(store: Store, args: {
+    requestId: string;
+    harness: string;
+    model: string | undefined;
+    workingDir: string;
+    solverType: string | null;
+}, env?: NodeJS.ProcessEnv): void;

package/dist/spend/record.js

@@ -0,0 +1,43 @@
+import { resolveCredentialId } from './credential.js';
+import { harvestHarnessUsage } from './usage.js';
+/**
+ * Record the cost of one finished harness run as a `task_cost` activity row.
+ * Called once per harness run (at the POST_SNAPSHOT transition). Best-effort:
+ * never throws — a parse failure must not break task execution.
+ */
+export function recordTaskCost(store, args, env = process.env) {
+    try {
+        const credentialId = resolveCredentialId(args.harness, env);
+        if (!credentialId)
+            return;
+        const usage = harvestHarnessUsage(args.harness, args.workingDir, args.model);
+        const actualCostUsdMicros = Math.round(usage.costUsd * 1_000_000);
+        store.recordActivityEvent({
+            ts: new Date().toISOString(),
+            kind: 'task_cost',
+            requestId: args.requestId,
+            solverType: args.solverType,
+            credentialId,
+            costUsdMicros: actualCostUsdMicros,
+            model: usage.model,
+            detail: usage.estimated ? 'estimated' : 'observed',
+        });
+        // Issue #1004: fill actual_cost_usd_micros on the per-request claimed
+        // row + set claim_status='delivered'. The gate's accumulator reads this
+        // column (COALESCE actual, estimated) so the delivered actual replaces
+        // the claim-time estimate in the running total. For subscription
+        // credentials the resulting USD figure is a *proxy* budget — it bounds
+        // Jinn-attributable model cost, not the provider's plan quota directly.
+        // `usage.estimated` is carried through (AC4) so a telemetry-less harness
+        // such as Hermes, whose actual cost is itself a heuristic, is not
+        // presented as metered by the gate. ai_units stays as captured at claim
+        // time (legacy unit surface, #1006). Idempotent: no-op when no claimed
+        // row exists for this request id.
+        store.finalizeClaimDelivered(args.requestId, actualCostUsdMicros, usage.estimated);
+    }
+    catch (err) {
+        console.warn(`[spend] failed to record task cost for ${args.requestId}: ` +
+            `${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=record.js.map

package/dist/spend/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../../src/spend/record.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAY,EACZ,IAMC,EACD,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;QAClE,KAAK,CAAC,mBAAmB,CAAC;YACxB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY;YACZ,aAAa,EAAE,mBAAmB;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;SACnD,CAAC,CAAC;QACH,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,iEAAiE;QACjE,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,kEAAkE;QAClE,wEAAwE;QACxE,uEAAuE;QACvE,kCAAkC;QAClC,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,0CAA0C,IAAI,CAAC,SAAS,IAAI;YAC1D,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/spend/usage.d.ts

@@ -0,0 +1,27 @@
+/** USD attributed to a task whose model has no known price. */
+export declare const UNKNOWN_MODEL_FALLBACK_USD = 1;
+export interface HarnessUsage {
+    model: string;
+    costUsd: number;
+    /** true = derived from an a-priori heuristic; false = from observed usage. */
+    estimated: boolean;
+    inputTokens?: number;
+    outputTokens?: number;
+}
+/** Parse Claude Code `--output-format stream-json` output for the terminal result. */
+export declare function parseClaudeCodeUsage(stdoutJsonl: string): {
+    costUsd: number;
+    inputTokens?: number;
+    outputTokens?: number;
+} | null;
+/** Parse Codex `--json` output for the last turn.completed token usage. */
+export declare function parseCodexUsage(stdoutJsonl: string): {
+    inputTokens: number;
+    outputTokens: number;
+} | null;
+/**
+ * Determine the USD cost of a finished harness run. Reads the harness's own
+ * output file for observed usage; falls back to a heuristic on any failure.
+ * Always returns a HarnessUsage — never throws.
+ */
+export declare function harvestHarnessUsage(harness: string, workingDir: string, model: string | undefined): HarnessUsage;