@mafdet/cli 0.4.11 → 0.4.13

package/CHANGELOG.md

@@ -6,6 +6,26 @@ The version is the contract for the JSON output shapes and the exit codes.
 Being 0.x, semver still permits a break in a minor bump; the intent is not to
 use that latitude, and the promise becomes binding at 1.0.0.
 
+## 0.4.13 - 2026-08-17
+
+- Documentation only; no code change. Both READMEs now open by saying what
+  Mafdet AI is — an OpenAI-compatible gateway, its base URL, its endpoints and
+  its providers — because the npm page was addressed to readers who already
+  knew, and most do not. The model count is dated and points at
+  `models.json` rather than standing alone, so it cannot quietly go stale.
+
+## 0.4.12 - 2026-08-12
+
+- Validate usage-event pages, model identities, non-stream Chat responses and
+  Agent tool calls at the HTTP boundary. Malformed remote data now produces a
+  typed unavailable error instead of an empty success or a runtime exception.
+- Require account and settled ledger amounts to be non-negative integer
+  micro-USD strings. An invalid settlement remains pending; it is never
+  rewritten as a fabricated zero-dollar settlement.
+- Correct the reconciliation documentation: refresh queries the current key's
+  paged usage-event window and matches request IDs locally, while retaining
+  local estimates alongside settled figures.
+
 ## 0.4.11 - 2026-08-12
 
 A seventh audit round, fixed at the root rather than sink by sink - which is
@@ -343,9 +363,10 @@ each platform, and that deleting one is an ordinary file delete rather than a
 secure erase.
 
 `mafdet sessions usage <id> --refresh` asks the billing ledger what the
-requests actually cost and replaces the local estimate with the settled
-figure. It sends the request IDs already in the transcript and nothing else -
-no messages, no title, no workspace, no session ID. Requests paid for by a
+requests actually cost and records the settled figure alongside the local
+estimate. **Correction:** it queries the current key's paged usage-event
+window; request IDs stay local for matching rather than being sent. No
+messages, title, workspace or session ID leave the machine. Requests paid for by a
 different API key are left alone and reported rather than guessed at, and a
 request the ledger has not settled stays `pending` rather than being shown as
 zero.

package/README.md

@@ -3,12 +3,25 @@
 The official Mafdet AI command line: model calls, account queries, and a
 permissioned local agent.
 
-> **0.4.11.** 中文版见 [README.zh-CN.md](./README.zh-CN.md). The CLI never
+> **0.4.13.** 中文版见 [README.zh-CN.md](./README.zh-CN.md). The CLI never
 > advertises a command it cannot serve, so `mafdet help` always lists exactly
 > what works.
 >
 > macOS and Windows are not yet verified. On Windows the command timeout uses `taskkill /T`, which is written but has never been run on a real Windows machine - so whether every grandchild process is reached there is unverified rather than fixed.
 
+## What Mafdet AI is
+
+Mafdet AI is an OpenAI-compatible AI gateway: one API key and one base URL reach
+models from several providers, billed by usage. Any tool or SDK that speaks the
+OpenAI API works by pointing its base URL and key at Mafdet AI.
+
+- Base URL: `https://api.mafdet.ai/v1`
+- Endpoints: `/chat/completions`, `/embeddings`, `/audio/speech`
+- Providers: Google (Gemini), Kimi (Moonshot), Qwen, DeepSeek
+- 30 models as of August 2026. The catalogue changes, so the authoritative list
+  with current prices is [`models.json`](https://docs.mafdet.ai/models.json)
+- Docs: <https://docs.mafdet.ai>
+
 ## Requirements
 
 Node.js 20 or newer, and a Mafdet API key.
@@ -23,8 +36,8 @@ Or build it from this repository:
 
 ```bash
 pnpm --filter @mafdet/cli build
-cd packages/cli && npm pack          # -> mafdet-cli-0.4.11.tgz
-npm install -g ./mafdet-cli-0.4.11.tgz
+cd packages/cli && npm pack          # -> mafdet-cli-0.4.13.tgz
+npm install -g ./mafdet-cli-0.4.13.tgz
 ```
 
 ## The interactive session
@@ -87,7 +100,7 @@ prompt as an argument, or use `--input <file>`.
 | `mafdet speech [text\|<file>] --model <id> --output <file> --voice <name>`                           | Text to an audio file                                                      |
 | `mafdet account balance\|usage\|subscription`                                                        | Wallet, spend and plan (needs the `account:read` scope)                    |
 | `mafdet sessions list\|show\|usage\|delete`                                                          | Conversations saved on this computer (never calls a model)                 |
-| `mafdet sessions usage <id> --refresh`                                                               | Replace the local estimate with the billing ledger's figure                |
+| `mafdet sessions usage <id> --refresh`                                                               | Show settled ledger figures alongside the local estimate                   |
 | `mafdet config list`                                                                                 | The resolved settings and where each came from                             |
 
 `--json` on any query command emits one complete JSON document; `--plain`
@@ -247,9 +260,10 @@ erase — backups, snapshots and the filesystem itself may still hold copies.
 record. Those charges are estimates, computed with the gateway's own
 arithmetic but computed here.
 
-`--refresh` asks the billing ledger for the real figure. It sends the request
-IDs already in the transcript and nothing else — no messages, no title, no
-workspace, no session ID. Requests paid for by a different API key are left
+`--refresh` asks the billing ledger for settled figures. It pages through the
+current API key's usage events for the session's time window; request IDs stay
+local and are used only to match returned rows. No messages, title, workspace
+or session ID are sent. Requests paid for by a different API key are left
 alone and reported, so you know to run it again with that key.
 
 A request that the ledger has not caught up with stays `pending`, and a request

package/README.zh-CN.md

@@ -2,7 +2,20 @@
 
 Mafdet AI 官方命令行：模型调用、账户查询，以及一个受权限约束的本地 Agent。
 
-> **0.4.11。** 英文版见 [README.md](./README.md)。
+> **0.4.13。** 英文版见 [README.md](./README.md)。
+
+## Mafdet AI 是什么
+
+Mafdet AI 是一个 OpenAI 兼容的 AI 网关：一把 API Key、一个 base URL，即可调用多家
+提供方的模型，按量计费。任何支持 OpenAI API 格式的工具或 SDK，只要把 base URL 和
+Key 换成 Mafdet AI 的就能用。
+
+- Base URL：`https://api.mafdet.ai/v1`
+- 端点：`/chat/completions`、`/embeddings`、`/audio/speech`
+- 提供方：Google（Gemini）、Kimi（月之暗面）、Qwen、DeepSeek
+- 截至 2026 年 8 月共 30 个模型。目录会变动，**以带实时价格的
+  [`models.json`](https://docs.mafdet.ai/models.json) 为准**
+- 文档：<https://docs.mafdet.ai>
 
 ## 环境要求
 
@@ -73,7 +86,7 @@ mafdet doctor
 | `mafdet agent`（不带目标，需终端）                                                                   | 交互会话                                                            |
 | `mafdet account balance\|usage\|subscription`                                                        | 钱包、用量、套餐（需 `account:read` scope）                         |
 | `mafdet sessions list\|show\|usage\|delete`                                                          | 保存在这台电脑上的会话（不会调用模型）                              |
-| `mafdet sessions usage <id> --refresh`                                                               | 用账单账本的权威金额替换本地估算                                    |
+| `mafdet sessions usage <id> --refresh`                                                               | 在本地估算旁显示账单账本的已结算金额                                |
 | `mafdet config list`                                                                                 | 当前生效的配置及其来源                                              |
 
 查询类命令都支持 `--json`（输出一份完整 JSON 文档）与 `--plain`（无表头的 TSV，方便
@@ -214,9 +227,9 @@ mafdet sessions delete <id> --yes
 `mafdet sessions usage <id>` 从本地记录累加一次会话的用量。那些金额是**估算**，
 算法与网关一致，但是在本地算的。
 
-`--refresh` 会去问账单账本要真实金额。它只发送存档里已有的 request ID，**别的什么都不发**——
-不发消息、不发标题、不发工作区路径、不发 session ID。由另一把 API Key 支付的请求会被跳过
-并如实告知，好让你知道该换那把 Key 再跑一次。
+`--refresh` 会按会话时间窗口和游标查询当前 API Key 的用量事件；request ID 只留在本地，
+用于匹配账本返回的记录。它不发送消息、标题、工作区路径或 session ID。由另一把 API Key
+支付的请求会被跳过并如实告知，好让你知道该换那把 Key 再跑一次。
 
 账本还没跟上的请求保持 `pending`，从未拿到 ID 的请求保持 `unknown`。
 **两者都绝不显示为 `0`**——0 读起来像「免费」。

package/dist/agent/loop.d.ts

@@ -1,3 +1,4 @@
+import { type ToolCall } from "../api/chat-response.js";
 import type { HttpClient } from "../api/http.js";
 import type { CatalogModel } from "../api/models.js";
 import type { Approver } from "./approvals.js";
@@ -146,14 +147,6 @@ export interface ChatMessage {
     tool_calls?: ToolCall[];
     tool_call_id?: string;
 }
-interface ToolCall {
-    id: string;
-    type: "function";
-    function: {
-        name: string;
-        arguments: string;
-    };
-}
 /**
  * The read-only agent loop.
  *
@@ -180,5 +173,4 @@ export declare function backoffMs(retryAfterSeconds: number | undefined, attempt
  * direction - a free model would have been refused.
  */
 export declare function hasValidPrices(model: CatalogModel | undefined): boolean;
-export {};
 //# sourceMappingURL=loop.d.ts.map

package/dist/agent/loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../../src/agent/loop.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAE1B,iBAAiB;AACjB,eAAO,MAAM,cAAc;;;IAGzB,iFAAiF;;;qBAGnD,MAAM,GAAG,SAAS;CACjD,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,OAAO,cAAc,CAAC;AAEhD,MAAM,MAAM,UAAU,GAClB,WAAW,GACX,WAAW,GACX,SAAS,GACT,UAAU,GACV,WAAW,GACX,cAAc;AAChB,8EAA8E;GAC5E,eAAe;AACjB;;;;GAIG;GACD,cAAc,GACd,OAAO,CAAC;AAEZ,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,uDAAuD;IACvD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,wBAAwB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAChC;;;;;GAKG;GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC3D;;;;GAIG;GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,QAAQ;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAYD;;;;;;;;;GASG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAiP1E;AAqID,+EAA+E;AAC/E,wBAAgB,SAAS,CACvB,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAM,MAAoB,GACjC,MAAM,CAOR;AAmBD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAKvE"}
+{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../../src/agent/loop.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,QAAQ,EACd,MAAM,yBAAyB,CAAC;AAMjC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAE1B,iBAAiB;AACjB,eAAO,MAAM,cAAc;;;IAGzB,iFAAiF;;;qBAGnD,MAAM,GAAG,SAAS;CACjD,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,OAAO,cAAc,CAAC;AAEhD,MAAM,MAAM,UAAU,GAClB,WAAW,GACX,WAAW,GACX,SAAS,GACT,UAAU,GACV,WAAW,GACX,cAAc;AAChB,8EAA8E;GAC5E,eAAe;AACjB;;;;GAIG;GACD,cAAc,GACd,OAAO,CAAC;AAEZ,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,uDAAuD;IACvD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,wBAAwB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAChC;;;;;GAKG;GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC3D;;;;GAIG;GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAOD;;;;;;;;;GASG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAgP1E;AAqID,+EAA+E;AAC/E,wBAAgB,SAAS,CACvB,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAM,MAAoB,GACjC,MAAM,CAOR;AA8BD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAKvE"}

package/dist/agent/loop.js

@@ -1,4 +1,5 @@
 import { ApiError } from "../api/errors.js";
+import { parseChatCompletion, } from "../api/chat-response.js";
 import { compactUntilItFits, requestSize, shouldCompact, } from "./context-budget.js";
 import { isMicroUsd } from "../output/money.js";
 import { toolToJsonSchema, } from "./tools/types.js";
@@ -130,7 +131,7 @@ export async function runAgent(options) {
         // report and fed into the compaction ratio - it no longer priced anything,
         // but it still produced negative token totals and steered a decision about
         // what to send next.
-        const usage = response.usage;
+        const usage = usageObject(response.usage);
         const promptTokens = isTokenCount(usage?.prompt_tokens)
             ? usage.prompt_tokens
             : undefined;
@@ -162,9 +163,8 @@ export async function runAgent(options) {
         });
         if (!canPrice(options.pricing, usage))
             report.unpricedRequests += 1;
-        const choice = response.choices?.[0];
-        const message = choice?.message;
-        const calls = message?.tool_calls ?? [];
+        const message = response.choices[0].message;
+        const calls = message.tool_calls ?? [];
         if (typeof message?.content === "string" && message.content.length > 0) {
             report.finalText = message.content;
             options.onEvent?.({ type: "text", text: message.content });
@@ -295,7 +295,7 @@ async function requestWithRateLimitHandling(options, limits, body, report, clock
             const { data, requestId } = await options.client.postJson("/chat/completions", body, { signal: options.signal });
             // Carried on the response so the caller can tie this turn to its ledger
             // row without the loop needing to know what a session is.
-            return { ...data, requestId };
+            return { ...parseChatCompletion(data, "agent API"), requestId };
         }
         catch (error) {
             // Everything except an explicit 429 propagates. A timeout or a 5xx may
@@ -346,6 +346,11 @@ export function backoffMs(retryAfterSeconds, attempt, random = Math.random) {
 function isTokenCount(value) {
     return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
 }
+function usageObject(value) {
+    return value !== null && typeof value === "object"
+        ? value
+        : undefined;
+}
 /**
  * W-1 · Can this model be priced at all, before anything is sent?
  *
@@ -376,8 +381,10 @@ function priceTurn(model, usage) {
     // charged for and reported as unpriced - or the reverse.
     if (!canPrice(model, usage))
         return 0n;
-    const prompt = usage?.prompt_tokens ?? 0;
-    const completion = usage?.completion_tokens ?? 0;
+    const prompt = usage?.prompt_tokens;
+    const completion = usage?.completion_tokens;
+    if (!isTokenCount(prompt) || !isTokenCount(completion))
+        return 0n;
     const ceilDiv = (tokens, price) => (BigInt(tokens) * BigInt(price) + 999999n) / 1000000n;
     return (ceilDiv(prompt, model?.inputPricePer1mMicroUsd ?? "0") +
         ceilDiv(completion, model?.outputPricePer1mMicroUsd ?? "0"));

package/dist/api/account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../src/api/account.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA6C5C;;;GAGG;AAEH,MAAM,WAAW,MAAM;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE;QACX,mBAAmB,EAAE,MAAM,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC;QACvB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAyBD,wBAAsB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAKrE;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,UAAU,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,YAAY,CAAC,CAKvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,yBAAyB,EAAE,MAAM,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAOD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,UAAU,EAClB,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACjB,GACL,OAAO,CAAC,iBAAiB,CAAC,CAgC5B"}
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../src/api/account.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA8C5C;;;GAGG;AAEH,MAAM,WAAW,MAAM;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE;QACX,mBAAmB,EAAE,MAAM,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC;QACvB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAyBD,wBAAsB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAKrE;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,UAAU,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,YAAY,CAAC,CAKvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,yBAAyB,EAAE,MAAM,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAoBD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,UAAU,EAClB,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACjB,GACL,OAAO,CAAC,iBAAiB,CAAC,CAiC5B"}

package/dist/api/account.js

@@ -1,14 +1,15 @@
 import { ApiError } from "./errors.js";
 import { z } from "zod";
+import { isMicroUsd } from "../output/money.js";
 import { parseApiData } from "./validate.js";
-const integralMoney = z.string().regex(/^-?\d+$/);
+const nonnegativeMoney = z.string().refine(isMicroUsd);
 const count = z.number().safe().int().nonnegative();
 const walletSchema = z
     .object({
-    balance_micro_usd: integralMoney,
-    bonus_micro_usd: integralMoney,
-    frozen_micro_usd: integralMoney,
-    available_micro_usd: integralMoney,
+    balance_micro_usd: nonnegativeMoney,
+    bonus_micro_usd: nonnegativeMoney,
+    frozen_micro_usd: nonnegativeMoney,
+    available_micro_usd: nonnegativeMoney,
     currency_anchor: z.string(),
 })
     .passthrough();
@@ -21,7 +22,7 @@ const usageSummarySchema = z
     input_tokens: count,
     output_tokens: count,
     total_tokens: count,
-    charge_micro_usd: integralMoney,
+    charge_micro_usd: nonnegativeMoney,
 })
     .passthrough();
 const subscriptionSchema = z
@@ -32,9 +33,9 @@ const subscriptionSchema = z
     current_period_end: z.string().optional(),
     playground: z
         .object({
-        allowance_micro_usd: integralMoney,
-        used_micro_usd: integralMoney,
-        remaining_micro_usd: integralMoney,
+        allowance_micro_usd: nonnegativeMoney,
+        used_micro_usd: nonnegativeMoney,
+        remaining_micro_usd: nonnegativeMoney,
         usage_percent: z.number().finite(),
         state: z.string(),
     })
@@ -80,6 +81,23 @@ export async function fetchSubscription(client) {
         .catch(explainScope);
     return parseApiData(subscriptionSchema, data, "subscription API");
 }
+const usageEventSchema = z
+    .object({
+    request_id: z.string().min(1),
+    model_id: z.string().min(1),
+    input_tokens: count,
+    output_tokens: count,
+    platform_charge_micro_usd: nonnegativeMoney,
+    status: z.string().min(1),
+    created_at: z.string().min(1),
+})
+    .passthrough();
+const usageEventsPageSchema = z
+    .object({
+    data: z.array(usageEventSchema),
+    next_cursor: z.string().nullable().optional(),
+})
+    .passthrough();
 /** Hard stop on paging, so a busy key cannot turn one command into hundreds. */
 export const MAX_USAGE_EVENT_PAGES = 20;
 /**
@@ -106,15 +124,16 @@ export async function fetchUsageEvents(client, options = {}) {
             signal: options.signal,
         })
             .catch(explainScope);
+        const page = parseApiData(usageEventsPageSchema, data, "usage events API");
         pages += 1;
-        for (const event of data.data ?? []) {
+        for (const event of page.data) {
             events.push(event);
             remaining?.delete(event.request_id);
         }
         if (remaining !== undefined && remaining.size === 0) {
             return { events, pages, exhausted: true };
         }
-        cursor = data.next_cursor ?? null;
+        cursor = page.next_cursor ?? null;
         if (cursor === null)
             return { events, pages, exhausted: true };
     }

package/dist/api/chat-response.d.ts

@@ -0,0 +1,32 @@
+import { z } from "zod";
+declare const toolCallSchema: z.ZodObject<{
+    id: z.ZodString;
+    type: z.ZodLiteral<"function">;
+    function: z.ZodObject<{
+        name: z.ZodString;
+        arguments: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$loose>;
+declare const chatCompletionSchema: z.ZodObject<{
+    choices: z.ZodArray<z.ZodObject<{
+        message: z.ZodObject<{
+            content: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            tool_calls: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                type: z.ZodLiteral<"function">;
+                function: z.ZodObject<{
+                    name: z.ZodString;
+                    arguments: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$loose>>>;
+        }, z.core.$loose>;
+        finish_reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$loose>>;
+    usage: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$loose>;
+export type ToolCall = z.infer<typeof toolCallSchema>;
+export type ChatCompletion = z.infer<typeof chatCompletionSchema>;
+export declare function parseChatCompletion(value: unknown, label?: string): ChatCompletion;
+export declare function parseChatTextCompletion(value: unknown, label?: string): ChatCompletion;
+export {};
+//# sourceMappingURL=chat-response.d.ts.map

package/dist/api/chat-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-response.d.ts","sourceRoot":"","sources":["../../src/api/chat-response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,cAAc;;;;;;;iBASJ,CAAC;AAEjB,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;iBAqBV,CAAC;AAMjB,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,EACd,KAAK,SAAa,GACjB,cAAc,CAEhB;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,KAAK,SAAa,GACjB,cAAc,CAEhB"}

package/dist/api/chat-response.js

@@ -0,0 +1,39 @@
+import { z } from "zod";
+import { parseApiData } from "./validate.js";
+const toolCallSchema = z
+    .object({
+    id: z.string().min(1),
+    type: z.literal("function"),
+    function: z.object({
+        name: z.string().min(1),
+        arguments: z.string(),
+    }),
+})
+    .passthrough();
+const chatCompletionSchema = z
+    .object({
+    choices: z
+        .array(z
+        .object({
+        message: z
+            .object({
+            content: z.string().nullable().optional(),
+            tool_calls: z.array(toolCallSchema).optional(),
+        })
+            .passthrough(),
+        finish_reason: z.string().nullable().optional(),
+    })
+        .passthrough())
+        .min(1),
+    // Usage is validated independently. A usable, already-billed answer must
+    // survive malformed accounting and be reported with unknown usage.
+    usage: z.unknown().optional(),
+})
+    .passthrough();
+const chatTextCompletionSchema = chatCompletionSchema.refine((response) => typeof response.choices[0]?.message.content === "string", { path: ["choices", 0, "message", "content"] });
+export function parseChatCompletion(value, label = "chat API") {
+    return parseApiData(chatCompletionSchema, value, label);
+}
+export function parseChatTextCompletion(value, label = "chat API") {
+    return parseApiData(chatTextCompletionSchema, value, label);
+}

package/dist/api/models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/api/models.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA6B5C,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,mDAAmD;IACnD,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,sFAAsF;IACtF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,gDAAgD;IAChD,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAUxE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,SAAS,cAAc,EAAE,EACpC,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,SAAS,CA4BX;AAED,8CAA8C;AAC9C,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,cAAc,EAAE,CAAC,CAK3B;AAED,2EAA2E;AAC3E,wBAAsB,YAAY,CAChC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,YAAY,EAAE,CAAC,CAKzB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAGnD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,YAAY,GAAG,SAAS,CAY1B;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBAFhB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM;CAO5B"}
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/api/models.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA+B5C,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,mDAAmD;IACnD,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,sFAAsF;IACtF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,gDAAgD;IAChD,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAUxE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,SAAS,cAAc,EAAE,EACpC,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,SAAS,CA4BX;AAED,8CAA8C;AAC9C,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,cAAc,EAAE,CAAC,CAG3B;AAED,2EAA2E;AAC3E,wBAAsB,YAAY,CAChC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,YAAY,EAAE,CAAC,CAGzB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAGnD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,YAAY,GAAG,SAAS,CAY1B;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBAFhB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM;CAO5B"}

package/dist/api/models.js

@@ -2,12 +2,12 @@ import { z } from "zod";
 import { parseApiData } from "./validate.js";
 const dataPlaneModelsSchema = z
     .object({
-    data: z.array(z.object({ id: z.string() }).passthrough()).optional(),
+    data: z.array(z.object({ id: z.string().refine(isUsableModelId) }).passthrough()),
 })
     .passthrough();
 const catalogModelSchema = z
     .object({
-    modelId: z.string(),
+    modelId: z.string().refine(isUsableModelId),
     displayName: z.string().optional(),
     provider: z.string().optional(),
     capabilities: z.array(z.string()).optional(),
@@ -22,7 +22,7 @@ const catalogModelSchema = z
 })
     .passthrough();
 const catalogSchema = z
-    .object({ data: z.array(catalogModelSchema).optional() })
+    .object({ data: z.array(catalogModelSchema) })
     .passthrough();
 /**
  * Agent admission. Every condition is something the catalogue states outright;
@@ -86,12 +86,12 @@ export function intersectModels(dataPlane, catalog) {
 /** GET /v1/models — the key's access list. */
 export async function fetchAccessibleModels(client) {
     const response = await client.getJson("/models");
-    return (parseApiData(dataPlaneModelsSchema, response.data, "model API").data ?? []);
+    return parseApiData(dataPlaneModelsSchema, response.data, "model API").data;
 }
 /** GET /models on the business API — public catalogue, no key required. */
 export async function fetchCatalog(client) {
     const response = await client.getJson("/models");
-    return (parseApiData(catalogSchema, response.data, "model catalogue").data ?? []);
+    return parseApiData(catalogSchema, response.data, "model catalogue").data;
 }
 /**
  * U-3 · Is this a usable model identifier?

package/dist/commands/chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/commands/chat.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAWxE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAatB,MAAM,WAAW,MAAO,SAAQ,SAAS;IACvC,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,gDAAgD;IAChD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAcD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CA8BnB;AAgTD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,GAAG,SAAS,EAC/B,KAAK,EAAE,WAAW,GACjB,MAAM,GAAG,SAAS,CAYpB"}
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/commands/chat.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEnE,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAWxE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAatB,MAAM,WAAW,MAAO,SAAQ,SAAS;IACvC,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,gDAAgD;IAChD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAcD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CA8BnB;AAiTD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,GAAG,SAAS,EAC/B,KAAK,EAAE,WAAW,GACjB,MAAM,GAAG,SAAS,CAYpB"}

package/dist/commands/chat.js

@@ -1,5 +1,6 @@
 import { readFileSync } from "node:fs";
 import { fetchCatalog } from "../api/models.js";
+import { parseChatTextCompletion } from "../api/chat-response.js";
 import { readChatStream } from "../api/sse-parser.js";
 import { ApiError } from "../api/errors.js";
 import { safeForTerminal, terminalSafeWriter, } from "../output/terminal-safe.js";
@@ -275,8 +276,11 @@ async function streamChat(runtime, body, args, io) {
     return ExitCode.Ok;
 }
 async function completeChat(runtime, body, args, io) {
-    const { data, requestId } = await runtime.dataPlane.postJson("/chat/completions", body, { signal: io.signal });
-    const rawAnswer = data.choices?.[0]?.message?.content;
+    const { data: rawData, requestId } = await runtime.dataPlane.postJson("/chat/completions", body, {
+        signal: io.signal,
+    });
+    const data = parseChatTextCompletion(rawData);
+    const rawAnswer = data.choices[0].message.content;
     const answer = typeof rawAnswer === "string" ? rawAnswer : "";
     const usage = validUsage(data.usage);
     io.stdout(`${safeForTerminal(answer, isTty(io))}\n`);

package/dist/commands/sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/commands/sessions.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AA4BnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAetB,wBAAsB,eAAe,CACnC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,SAAS,GACZ,OAAO,CAAC,QAAQ,CAAC,CAUnB;AAoRD,eAAO,MAAM,eAAe,GAAI,IAAI,MAAM,KAAG,MAUX,CAAC"}
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/commands/sessions.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AA4BnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAgBtB,wBAAsB,eAAe,CACnC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,SAAS,GACZ,OAAO,CAAC,QAAQ,CAAC,CAUnB;AAoRD,eAAO,MAAM,eAAe,GAAI,IAAI,MAAM,KAAG,MAUX,CAAC"}

package/dist/commands/sessions.js

@@ -30,7 +30,8 @@ Conversations are stored on this computer only. Browsing them never
 calls a model and is never charged.
 
 --refresh asks the billing ledger what this key's requests actually
-cost. It sends request IDs and nothing else - no messages, no titles.
+cost. It queries this key's usage-event window; request IDs stay local
+for matching. No messages, titles, workspace or session ID are sent.
 `;
 export async function sessionsCommand(argv, io) {
     // F-013 · Nothing here may reach the top level as a raw Error. `--json

package/dist/sessions/reconcile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reconcile.d.ts","sourceRoot":"","sources":["../../src/sessions/reconcile.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,WAAW,EAAE,EAC9B,gBAAgB,EAAE,MAAM,GACvB,aAAa,CAwCf;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,SAAS,YAAY,EAAE,CAAC;IAC9C,kDAAkD;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,SAAS,gBAAgB,EAAE,EACnC,UAAU,EAAE,MAAM,GACjB,WAAW,CAyBb;AAOD;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,MAAM,CAM7E"}
+{"version":3,"file":"reconcile.d.ts","sourceRoot":"","sources":["../../src/sessions/reconcile.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,WAAW,EAAE,EAC9B,gBAAgB,EAAE,MAAM,GACvB,aAAa,CAwCf;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,SAAS,YAAY,EAAE,CAAC;IAC9C,kDAAkD;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,SAAS,gBAAgB,EAAE,EACnC,UAAU,EAAE,MAAM,GACjB,WAAW,CAiCb;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,MAAM,CAM7E"}

package/dist/sessions/reconcile.js

@@ -12,6 +12,7 @@
 // caught up with yet, and the user is told to wait for something that will
 // never arrive. With it, we can say which key to run this under instead.
 import { isComparableKeyRef } from "../security/redact.js";
+import { isMicroUsd } from "../output/money.js";
 /**
  * Decide what to ask about, from the transcript alone.
  *
@@ -69,8 +70,13 @@ export function planReconciliation(events, currentKeyDigest) {
 export function matchSettlements(plan, ledger, observedAt) {
     const byId = new Map();
     for (const row of ledger) {
-        if (plan.wanted.has(row.request_id))
+        // Defense in depth: the API boundary rejects this already. If an invalid
+        // row is nevertheless injected, it remains pending instead of becoming a
+        // fabricated zero-dollar settlement.
+        if (plan.wanted.has(row.request_id) &&
+            isMicroUsd(row.platform_charge_micro_usd)) {
             byId.set(row.request_id, row);
+        }
     }
     const settlements = [];
     const missing = [];
@@ -85,17 +91,13 @@ export function matchSettlements(plan, ledger, observedAt) {
             request_id: id,
             // Kept as the string the server sent. Parsing it into a number here is
             // how integer micro-USD becomes a float somewhere downstream.
-            settled_charge_micro_usd: normaliseMicro(row.platform_charge_micro_usd),
+            settled_charge_micro_usd: row.platform_charge_micro_usd,
             server_status: typeof row.status === "string" ? row.status : "unknown",
             observed_at: observedAt,
         });
     }
     return { settlements, missing };
 }
-/** Anything that is not an integer count of micro-USD is not a charge. */
-function normaliseMicro(value) {
-    return typeof value === "string" && /^-?\d+$/.test(value) ? value : "0";
-}
 /**
  * How many days back the ledger has to be asked about.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mafdet/cli",
-  "version": "0.4.11",
+  "version": "0.4.13",
   "description": "Mafdet AI command line — model calls, account queries, and a permissioned local agent.",
   "type": "module",
   "license": "MIT",