@mafdet/cli 0.4.9 → 0.4.10

package/CHANGELOG.md

@@ -6,6 +6,36 @@ The version is the contract for the JSON output shapes and the exit codes.
 Being 0.x, semver still permits a break in a minor bump; the intent is not to
 use that latitude, and the promise becomes binding at 1.0.0.
 
+## 0.4.10 - 2026-08-12
+
+A sixth audit round, and the finding that matters most is about how the last
+one was tested.
+
+**Every human-readable error now goes through one function.** 0.4.9 said this
+and it was not true: `embed` and `speech` handled a surface mismatch
+themselves, `mafdet agent` printed the upstream's message directly, and the
+request id - which comes from a response header - was concatenated outside the
+sanitiser inside the very function meant to be the boundary. Four paths, all
+carrying remote text to a terminal.
+
+The test that was supposed to cover this called the sanitiser directly, so it
+passed while every caller bypassed it. That is the same mistake as the one in
+0.4.7, one release later. The new tests go in at `embedCommand`,
+`speechCommand` and `agentCommand` - the commands a user actually runs - and
+each was checked to fail when its fix is removed.
+
+**A cost ceiling refuses an unusable price before sending anything.** The
+pre-flight check asked only whether the price fields were present, so `abc`,
+`-1`, `1.5` and `" 2"` passed it and the run spent one request before the
+post-response check refused the result. Both checks now share one definition,
+which also fixes the opposite error: a price of `"0"` is a price, and a truthy
+test was rejecting free models.
+
+**An invalid token count no longer reaches the totals.** It had stopped
+affecting cost, but a negative or fractional figure was still added to the
+token summary and fed into the context estimate - producing negative totals
+and steering a decision about what to send next.
+
 ## 0.4.9 - 2026-08-12
 
 A fifth audit round: two billing and terminal-safety fixes, and two smaller
@@ -21,6 +51,9 @@ present and valid; anything else is reported as unpriced, stops a run that
 asked for a ceiling, and keeps the answer that was generated.
 
 **Errors and diagnostics can no longer carry terminal control sequences.**
+⚠️ Not true as written: `doctor` and the shared reporter were fixed, but
+`embed`, `speech`, the agent's summary and the request id still bypassed it.
+Fixed in 0.4.10.
 `mafdet doctor` interpolated a model's `apiSurface` straight into its table,
 and a surface-mismatch error did the same into stderr. Rather than cleaning
 those two strings, the cleaning now happens at the two boundaries every

package/README.md

@@ -3,7 +3,7 @@
 The official Mafdet AI command line: model calls, account queries, and a
 permissioned local agent.
 
-> **0.4.9.** 中文版见 [README.zh-CN.md](./README.zh-CN.md). The CLI never
+> **0.4.10.** 中文版见 [README.zh-CN.md](./README.zh-CN.md). The CLI never
 > advertises a command it cannot serve, so `mafdet help` always lists exactly
 > what works.
 >
@@ -23,8 +23,8 @@ Or build it from this repository:
 
 ```bash
 pnpm --filter @mafdet/cli build
-cd packages/cli && npm pack          # -> mafdet-cli-0.4.9.tgz
-npm install -g ./mafdet-cli-0.4.9.tgz
+cd packages/cli && npm pack          # -> mafdet-cli-0.4.10.tgz
+npm install -g ./mafdet-cli-0.4.10.tgz
 ```
 
 ## The interactive session

package/README.zh-CN.md

@@ -2,7 +2,7 @@
 
 Mafdet AI 官方命令行：模型调用、账户查询，以及一个受权限约束的本地 Agent。
 
-> **0.4.9。** 英文版见 [README.md](./README.md)。
+> **0.4.10。** 英文版见 [README.md](./README.md)。
 
 ## 环境要求
 

package/dist/agent/loop.d.ts

@@ -167,5 +167,18 @@ interface ToolCall {
 export declare function runAgent(options: AgentOptions): Promise<AgentReport>;
 /** Retry-After when the server gave one; otherwise exponential with jitter. */
 export declare function backoffMs(retryAfterSeconds: number | undefined, attempt: number, random?: () => number): number;
+/**
+ * W-1 · Can this model be priced at all, before anything is sent?
+ *
+ * Exported and shared with the pre-flight check, because the two used to
+ * disagree: the check asked only whether the fields were truthy, so `abc`,
+ * `-1`, `1.5` and `" 2"` all passed it and the run spent one request before
+ * `canPrice` refused the result. A ceiling that cannot cover the first request
+ * is not the ceiling the user asked for.
+ *
+ * Note `"0"` is a valid price and truthy checks got that wrong in the other
+ * direction - a free model would have been refused.
+ */
+export declare function hasValidPrices(model: CatalogModel | undefined): boolean;
 export {};
 //# sourceMappingURL=loop.d.ts.map

package/dist/agent/loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../../src/agent/loop.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAE1B,iBAAiB;AACjB,eAAO,MAAM,cAAc;;;IAGzB,iFAAiF;;;qBAGnD,MAAM,GAAG,SAAS;CACjD,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,OAAO,cAAc,CAAC;AAEhD,MAAM,MAAM,UAAU,GAClB,WAAW,GACX,WAAW,GACX,SAAS,GACT,UAAU,GACV,WAAW,GACX,cAAc;AAChB,8EAA8E;GAC5E,eAAe;AACjB;;;;GAIG;GACD,cAAc,GACd,OAAO,CAAC;AAEZ,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,uDAAuD;IACvD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,wBAAwB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAChC;;;;;GAKG;GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC3D;;;;GAIG;GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,QAAQ;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAYD;;;;;;;;;GASG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAoO1E;AAqID,+EAA+E;AAC/E,wBAAgB,SAAS,CACvB,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAM,MAAoB,GACjC,MAAM,CAOR"}
+{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../../src/agent/loop.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAE1B,iBAAiB;AACjB,eAAO,MAAM,cAAc;;;IAGzB,iFAAiF;;;qBAGnD,MAAM,GAAG,SAAS;CACjD,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,OAAO,cAAc,CAAC;AAEhD,MAAM,MAAM,UAAU,GAClB,WAAW,GACX,WAAW,GACX,SAAS,GACT,UAAU,GACV,WAAW,GACX,cAAc;AAChB,8EAA8E;GAC5E,eAAe;AACjB;;;;GAIG;GACD,cAAc,GACd,OAAO,CAAC;AAEZ,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,uDAAuD;IACvD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,wBAAwB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAChC;;;;;GAKG;GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC3D;;;;GAIG;GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,QAAQ;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAYD;;;;;;;;;GASG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAiP1E;AAqID,+EAA+E;AAC/E,wBAAgB,SAAS,CACvB,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAM,MAAoB,GACjC,MAAM,CAOR;AAwBD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAKvE"}

package/dist/agent/loop.js

@@ -54,11 +54,10 @@ export async function runAgent(options) {
     // discover it meant a run with an explicit ceiling still made one billable
     // request that could never be counted against it.
     if (limits.maxCostMicroUsd !== undefined &&
-        (!options.pricing?.inputPricePer1mMicroUsd ||
-            !options.pricing.outputPricePer1mMicroUsd)) {
-        return stop(report, "cost_unknown", `--max-cost-usd cannot be enforced: the catalogue publishes no price for ` +
-            `${options.model}, so nothing can be counted towards the ceiling. ` +
-            `Re-run without the limit to continue anyway.`);
+        !hasValidPrices(options.pricing)) {
+        return stop(report, "cost_unknown", `--max-cost-usd cannot be enforced: the catalogue publishes no usable ` +
+            `price for ${options.model}, so nothing can be counted towards the ` +
+            `ceiling. Re-run without the limit to continue anyway.`);
     }
     for (let turn = 1; turn <= limits.maxTurns; turn += 1) {
         if (options.signal?.aborted)
@@ -125,13 +124,24 @@ export async function runAgent(options) {
             }
             return stop(report, "error", error instanceof Error ? error.message : String(error));
         }
+        // W-3 · Only counts that survive validation reach the totals or the
+        // context state. A negative or fractional figure used to be added to the
+        // report and fed into the compaction ratio - it no longer priced anything,
+        // but it still produced negative token totals and steered a decision about
+        // what to send next.
         const usage = response.usage;
-        if (usage?.prompt_tokens !== undefined) {
-            lastPromptTokens = usage.prompt_tokens;
+        const promptTokens = isTokenCount(usage?.prompt_tokens)
+            ? usage.prompt_tokens
+            : undefined;
+        const completionTokens = isTokenCount(usage?.completion_tokens)
+            ? usage.completion_tokens
+            : undefined;
+        if (promptTokens !== undefined) {
+            lastPromptTokens = promptTokens;
             lastRequestSize = sentSize;
         }
-        report.promptTokens += usage?.prompt_tokens ?? 0;
-        report.completionTokens += usage?.completion_tokens ?? 0;
+        report.promptTokens += promptTokens ?? 0;
+        report.completionTokens += completionTokens ?? 0;
         // Cost comes from returned usage, never from the reservation: CLI-000B
         // showed the reserve cannot see the tool schema and under-counts badly.
         const turnCost = priceTurn(options.pricing, usage);
@@ -142,8 +152,10 @@ export async function runAgent(options) {
             ...(response.requestId === undefined
                 ? {}
                 : { requestId: response.requestId }),
-            promptTokens: usage?.prompt_tokens ?? 0,
-            completionTokens: usage?.completion_tokens ?? 0,
+            // W-3 · The validated values, so nothing downstream - the recorder, the
+            // session store, a JSON consumer - has to re-derive what was usable.
+            promptTokens: promptTokens ?? 0,
+            completionTokens: completionTokens ?? 0,
             costMicroUsd: turnCost,
             priced: canPrice(options.pricing, usage),
         });
@@ -337,6 +349,22 @@ function isTokenCount(value) {
 function isPrice(value) {
     return typeof value === "string" && /^\d+$/.test(value);
 }
+/**
+ * W-1 · Can this model be priced at all, before anything is sent?
+ *
+ * Exported and shared with the pre-flight check, because the two used to
+ * disagree: the check asked only whether the fields were truthy, so `abc`,
+ * `-1`, `1.5` and `" 2"` all passed it and the run spent one request before
+ * `canPrice` refused the result. A ceiling that cannot cover the first request
+ * is not the ceiling the user asked for.
+ *
+ * Note `"0"` is a valid price and truthy checks got that wrong in the other
+ * direction - a free model would have been refused.
+ */
+export function hasValidPrices(model) {
+    return (isPrice(model?.inputPricePer1mMicroUsd) &&
+        isPrice(model?.outputPricePer1mMicroUsd));
+}
 function canPrice(model, usage) {
     if (usage === undefined)
         return false;
@@ -344,8 +372,7 @@ function canPrice(model, usage) {
         return false;
     if (!isTokenCount(usage.completion_tokens))
         return false;
-    return (isPrice(model?.inputPricePer1mMicroUsd) &&
-        isPrice(model?.outputPricePer1mMicroUsd));
+    return hasValidPrices(model);
 }
 function priceTurn(model, usage) {
     // V-1 · One gate, shared with the caller's reporting, so a turn can never be

package/dist/commands/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":"AAQA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAiBvE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAmBtB,eAAO,MAAM,gBAAgB,0XAK+C,CAAC;AAE7E,eAAO,MAAM,YAAY,mgBAOmB,CAAC;AAE7C,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qDAAqD;IACrD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,uBAAuB,EAAE,QAAQ,CAAC;IACpD;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,QAAQ,CAAC,CAuInB;AAoLD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,OAAO,0JAI3E"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":"AAQA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAiBvE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGnD,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAmBtB,eAAO,MAAM,gBAAgB,0XAK+C,CAAC;AAE7E,eAAO,MAAM,YAAY,mgBAOmB,CAAC;AAE7C,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qDAAqD;IACrD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,uBAAuB,EAAE,QAAQ,CAAC;IACpD;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,QAAQ,CAAC,CAuInB;AAoLD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,OAAO,0JAI3E"}

package/dist/commands/agent.js

@@ -17,7 +17,7 @@ import { Workspace, WorkspaceError } from "../filesystem/workspace.js";
 import { ExitCode } from "../output/exit-codes.js";
 import { renderJson, renderRecord } from "../output/format.js";
 import { formatUsdWithUnpriced } from "../output/money.js";
-import { buildRuntime, reportError, requireApiKey, } from "./runtime.js";
+import { buildRuntime, reportError, writeHumanError, requireApiKey, } from "./runtime.js";
 const USAGE = `Usage:
   mafdet agent "<goal>" [--model <id>] [--allow-write] [--read-only]
                         [--allow-command "<prefix>"]... [--max-turns <n>]
@@ -383,8 +383,9 @@ function finish(report, json, io) {
                     `~${formatUsdWithUnpriced(report.costMicroUsd, report.unpricedRequests)}`,
                 ],
             ]));
+        // W-2 · `report.error` is the upstream's message, verbatim.
         if (report.error)
-            io.stderr(`error: ${report.error}\n`);
+            writeHumanError(io, `error: ${report.error}\n`);
     }
     switch (report.stopReason) {
         case "completed":

package/dist/commands/embed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"embed.d.ts","sourceRoot":"","sources":["../../src/commands/embed.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAQtB,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACnC;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,QAAQ,CAAC,CA8DnB"}
+{"version":3,"file":"embed.d.ts","sourceRoot":"","sources":["../../src/commands/embed.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAQtB,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACnC;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,QAAQ,CAAC,CA8DnB"}

package/dist/commands/embed.js

@@ -3,7 +3,7 @@ import { ApiError } from "../api/errors.js";
 import { assertSurface, fetchCatalog, SurfaceMismatchError, } from "../api/models.js";
 import { ExitCode } from "../output/exit-codes.js";
 import { writeOutputFile } from "../output/write-file.js";
-import { buildRuntime, reportError, requireApiKey, } from "./runtime.js";
+import { buildRuntime, reportError, writeHumanError, requireApiKey, } from "./runtime.js";
 const USAGE = `Usage:
   mafdet embed [text | <file>] --model <id> [--output <file>] [--force]
 
@@ -62,7 +62,7 @@ export async function embedCommand(argv, io) {
     }
     catch (error) {
         if (error instanceof SurfaceMismatchError) {
-            io.stderr(`mafdet embed: ${error.message}\n`);
+            writeHumanError(io, `mafdet embed: ${error.message}\n`);
             return ExitCode.Usage;
         }
         return reportError(error, io);

package/dist/commands/runtime.d.ts

@@ -38,7 +38,22 @@ export declare function requireApiKey(config: LoadedConfig): void;
  * prints a raw upstream message: ApiError redacted it at construction.
  */
 /**
- * V-2 · The one place errors reach a person.
+ * W-2 · The one function every human-readable stderr write goes through.
+ *
+ * `reportError` was described as that and was not: `embed` and `speech`
+ * handled SurfaceMismatchError themselves, the agent's summary printed
+ * `report.error` directly, and even inside `reportError` the request id was
+ * concatenated outside the sanitiser. Three real command paths and one field,
+ * all carrying remote text to a terminal.
+ *
+ * The test that was supposed to cover this called `reportError` directly -
+ * the callee - and so passed while every caller bypassed it. That mistake has
+ * now been made twice; the way out is a function that is easier to use than
+ * `io.stderr` is, so there is nothing to remember.
+ */
+export declare function writeHumanError(io: CommandIo, text: string): void;
+/**
+ * V-2 · The one place *thrown* errors reach a person.
  *
  * Every command funnels through here, so this is where untrusted text in an
  * error message stops being able to drive the terminal. Patching the

package/dist/commands/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/commands/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGnD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,YAAY,CAAC;IACrB,sCAAsC;IACtC,SAAS,EAAE,UAAU,CAAC;IACtB,yCAAyC;IACzC,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGjD;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAgBnD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CASxD;AAED;;;GAGG;AACH;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,GAAG,QAAQ,CAqBnE"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/commands/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGnD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,YAAY,CAAC;IACrB,sCAAsC;IACtC,SAAS,EAAE,UAAU,CAAC;IACtB,yCAAyC;IACzC,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGjD;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAgBnD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CASxD;AAED;;;GAGG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIjE;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,GAAG,QAAQ,CAqBnE"}

package/dist/commands/runtime.js

@@ -39,7 +39,24 @@ export function requireApiKey(config) {
  * prints a raw upstream message: ApiError redacted it at construction.
  */
 /**
- * V-2 · The one place errors reach a person.
+ * W-2 · The one function every human-readable stderr write goes through.
+ *
+ * `reportError` was described as that and was not: `embed` and `speech`
+ * handled SurfaceMismatchError themselves, the agent's summary printed
+ * `report.error` directly, and even inside `reportError` the request id was
+ * concatenated outside the sanitiser. Three real command paths and one field,
+ * all carrying remote text to a terminal.
+ *
+ * The test that was supposed to cover this called `reportError` directly -
+ * the callee - and so passed while every caller bypassed it. That mistake has
+ * now been made twice; the way out is a function that is easier to use than
+ * `io.stderr` is, so there is nothing to remember.
+ */
+export function writeHumanError(io, text) {
+    io.stderr(safeForTerminal(text, io.isErrTty ?? process.stderr.isTTY === true));
+}
+/**
+ * V-2 · The one place *thrown* errors reach a person.
  *
  * Every command funnels through here, so this is where untrusted text in an
  * error message stops being able to drive the terminal. Patching the
@@ -49,20 +66,22 @@ export function requireApiKey(config) {
  * Redirected stderr keeps the bytes, the same rule as everywhere else.
  */
 export function reportError(error, io) {
-    const safe = (text) => safeForTerminal(text, io.isErrTty ?? process.stderr.isTTY === true);
     if (error instanceof ApiError) {
+        // W-2 · The request id comes from a response header
+        // (`x-litellm-call-id`), so it is remote text too - it used to be
+        // concatenated outside the sanitiser.
         const id = error.requestId ? ` (request ${error.requestId})` : "";
-        io.stderr(`mafdet: ${safe(error.message)}${id}\n`);
+        writeHumanError(io, `mafdet: ${error.message}${id}\n`);
         if (error.kind === "rate_limited" &&
             error.retryAfterSeconds !== undefined) {
-            io.stderr(`mafdet: retry after ${error.retryAfterSeconds}s\n`);
+            writeHumanError(io, `mafdet: retry after ${error.retryAfterSeconds}s\n`);
         }
         return error.exitCode;
     }
     if (error instanceof ConfigError) {
-        io.stderr(`mafdet: ${safe(error.message)}\n`);
+        writeHumanError(io, `mafdet: ${error.message}\n`);
         return ExitCode.Usage;
     }
-    io.stderr(`mafdet: ${safe(error.message)}\n`);
+    writeHumanError(io, `mafdet: ${error.message}\n`);
     return ExitCode.General;
 }

package/dist/commands/speech.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"speech.d.ts","sourceRoot":"","sources":["../../src/commands/speech.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAStB,MAAM,WAAW,QAAS,SAAQ,SAAS;IACzC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACnC;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,QAAQ,GACX,OAAO,CAAC,QAAQ,CAAC,CAyEnB"}
+{"version":3,"file":"speech.d.ts","sourceRoot":"","sources":["../../src/commands/speech.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAStB,MAAM,WAAW,QAAS,SAAQ,SAAS;IACzC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACnC;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,QAAQ,GACX,OAAO,CAAC,QAAQ,CAAC,CAyEnB"}

package/dist/commands/speech.js

@@ -3,7 +3,7 @@ import { ApiError } from "../api/errors.js";
 import { assertSurface, fetchCatalog, SurfaceMismatchError, } from "../api/models.js";
 import { ExitCode } from "../output/exit-codes.js";
 import { writeOutputFile } from "../output/write-file.js";
-import { buildRuntime, reportError, requireApiKey, } from "./runtime.js";
+import { buildRuntime, reportError, writeHumanError, requireApiKey, } from "./runtime.js";
 const USAGE = `Usage:
   mafdet speech [text | <file>] --model <id> --output <file> [--voice <name>] [--force]
 
@@ -69,7 +69,7 @@ export async function speechCommand(argv, io) {
     }
     catch (error) {
         if (error instanceof SurfaceMismatchError) {
-            io.stderr(`mafdet speech: ${error.message}\n`);
+            writeHumanError(io, `mafdet speech: ${error.message}\n`);
             return ExitCode.Usage;
         }
         // The gateway requires a voice for TTS and says so with a code; turn that

package/dist/sessions/usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../src/sessions/usage.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,GAAG;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAC1E,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,GAAG;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;CAC3E;AAoGD,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,cAAc,CA6D7E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAcrE"}
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../src/sessions/usage.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,GAAG;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAC1E,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,GAAG;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;CAC3E;AA6GD,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,cAAc,CA6D7E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAcrE"}

package/dist/sessions/usage.js

@@ -76,8 +76,17 @@ function settlementsIn(events) {
     }
     return found;
 }
+/**
+ * W-3 · A token count is a non-negative whole number, or it is not a count.
+ *
+ * `Number.isFinite` accepted -5 and 1.5, so a transcript written by an older
+ * build - or by a gateway having a bad day - could produce a negative or
+ * fractional total in `sessions usage`.
+ */
 function count(value) {
-    return typeof value === "number" && Number.isFinite(value) ? value : 0;
+    return typeof value === "number" && Number.isSafeInteger(value) && value >= 0
+        ? value
+        : 0;
 }
 /** Was this request priced at all? Absent is not the same as zero. */
 function isPriced(value) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mafdet/cli",
-  "version": "0.4.9",
+  "version": "0.4.10",
   "description": "Mafdet AI command line — model calls, account queries, and a permissioned local agent.",
   "type": "module",
   "license": "MIT",