@north-light/api 0.3.566 → 0.3.567

package/dist/api/contract.d.ts

@@ -1,5 +1,5 @@
 /** The contract level this build serves and requires. Written by `scripts/contract.mjs release`; never edit by hand. */
-export declare const CONTRACT_LEVEL = "1.35";
+export declare const CONTRACT_LEVEL = "1.36";
 /** Request header naming the one contract level the caller needs, e.g. `1.3`. Optional: absent means no check. */
 export declare const REQUIRED_CONTRACT_HEADER = "Crouter-Required-Contract";
 /** Response header listing the contract levels the server serves, comma-separated, one per major, e.g. `1.3`. */

package/dist/api/contract.js

@@ -12,7 +12,7 @@
 //
 // PURITY (spec §3.1): Node built-ins + `src/api/*` only.
 /** The contract level this build serves and requires. Written by `scripts/contract.mjs release`; never edit by hand. */
-export const CONTRACT_LEVEL = '1.35';
+export const CONTRACT_LEVEL = '1.36';
 /** Request header naming the one contract level the caller needs, e.g. `1.3`. Optional: absent means no check. */
 export const REQUIRED_CONTRACT_HEADER = 'Crouter-Required-Contract';
 /** Response header listing the contract levels the server serves, comma-separated, one per major, e.g. `1.3`. */

package/dist/core/config.js

@@ -6,6 +6,7 @@ import { CONFIG_FILE, STATE_FILE, CONDENSED_HISTORY_MODES, MOUSE_MODE_DEFAULTS,
 import { BINDING_CATALOG, BINDING_IDS, isAttachPaneBinding } from './keybindings/catalog.js';
 import { notFound } from './errors.js';
 import { emitEvent } from './events/emit.js';
+import { LEDGER_ENV } from './ledger/rates.js';
 import { atomicWriteJson, readJsonIfExists, ensureDir } from './fs-utils.js';
 import { scopeRoot, requireScopeRoot, findProjectScopeRoots, userScopeRoot } from './scope.js';
 import { listInstalledPluginsInRoot } from './installed-plugins.js';
@@ -805,7 +806,13 @@ function mergeApi(raw, defaults) {
     const tcp = raw.tcp;
     return { tcp: typeof tcp === 'string' ? tcp : defaults.tcp };
 }
+let ledgerKeyWarned = false;
 function mergeConfig(partial) {
+    // The ledger's rates and switches moved from a stored `ledger` key to the deployment's `CRTR_LEDGER_*` variables; the stored key is no longer read.
+    if (!ledgerKeyWarned && partial['ledger'] !== undefined) {
+        ledgerKeyWarned = true;
+        emitEvent({ level: 'warn', event: 'config.ledger.ignored', fields: { variables: Object.values(LEDGER_ENV) } });
+    }
     const defaults = defaultScopeConfig();
     const schema_version = defaults.schema_version;
     const marketplaces = partial.marketplaces === undefined ? {} : partial.marketplaces;
@@ -866,17 +873,6 @@ function mergeConfig(partial) {
     if (paths?.user_files !== undefined && (typeof paths.user_files !== 'string' || !paths.user_files.startsWith('/'))) {
         throw new Error('paths.user_files must be an absolute path');
     }
-    const ledger = partial.ledger;
-    if (ledger?.take_pct !== undefined && (typeof ledger.take_pct !== 'number' || !Number.isFinite(ledger.take_pct) || ledger.take_pct < 0 || ledger.take_pct > 100)) {
-        throw new Error('ledger.take_pct must be a number from 0 to 100');
-    }
-    for (const key of ['sandbox_usd_per_gb_hour', 'sandbox_standby_s', 'storage_usd_per_gb_month', 'sandbox_disk_usd_per_gb_month', 'infra_free_usd_per_month']) {
-        const value = ledger?.[key];
-        if (value !== undefined && (typeof value !== 'number' || !Number.isFinite(value) || value < 0))
-            throw new Error(`ledger.${key} must be a number of at least 0`);
-    }
-    if (ledger?.r2_move !== undefined && typeof ledger.r2_move !== 'boolean')
-        throw new Error('ledger.r2_move must be true or false');
     const store = partial.store;
     const runtime = partial.runtime;
     if (runtime?.person_uids !== undefined && (!Array.isArray(runtime.person_uids)
@@ -886,7 +882,7 @@ function mergeConfig(partial) {
     const spawnEnv = mergeSpawnEnv(partial.spawnEnv, defaults.spawnEnv?.allow);
     const bin = normalizeBin(partial.bin);
     const humanActions = normalizeHumanActions(partial.humanActions);
-    return { bin, humanActions, schema_version, marketplaces, plugins, auto_update, max_panes_per_window, auto_open_child_viewers, brokerThresholds, lifecycle, completion_bell, working_gerunds, whip_mode, page_components, page_surface, whip_messages, whip_message_mode, mouse_mode_default, live_cycles, condensed_history, bash_tool_purpose, fold_finished_tools, summarize_tool_calls, detailed_tool_recaps, document_port, consolidate_replies, keybindings, tmux_passthrough, modelLadders, providerOptions, ...(Object.keys(modelRoutes).length > 0 ? { modelRoutes } : {}), ...(Object.keys(routes.legacy).length > 0 ? { legacyModelRoutes: routes.legacy } : {}), ...(modelRouting !== undefined ? { modelRouting } : {}), kinds, remoteCanvas, api, ...(paths ? { paths } : {}), ...(ledger ? { ledger } : {}), ...(store ? { store } : {}), ...(runtime ? { runtime } : {}), spawnEnv };
+    return { bin, humanActions, schema_version, marketplaces, plugins, auto_update, max_panes_per_window, auto_open_child_viewers, brokerThresholds, lifecycle, completion_bell, working_gerunds, whip_mode, page_components, page_surface, whip_messages, whip_message_mode, mouse_mode_default, live_cycles, condensed_history, bash_tool_purpose, fold_finished_tools, summarize_tool_calls, detailed_tool_recaps, document_port, consolidate_replies, keybindings, tmux_passthrough, modelLadders, providerOptions, ...(Object.keys(modelRoutes).length > 0 ? { modelRoutes } : {}), ...(Object.keys(routes.legacy).length > 0 ? { legacyModelRoutes: routes.legacy } : {}), ...(modelRouting !== undefined ? { modelRouting } : {}), kinds, remoteCanvas, api, ...(paths ? { paths } : {}), ...(store ? { store } : {}), ...(runtime ? { runtime } : {}), spawnEnv };
 }
 /** Raw (un-defaulted) partial config for one scope, or null if the scope has
  *  no root or no config.json. Used by `readMergedLaunchConfig` to layer

package/dist/core/ledger/rates.d.ts

@@ -0,0 +1,24 @@
+export declare const LEDGER_ENV: {
+    readonly sandboxUsdPerGbHour: "CRTR_LEDGER_SANDBOX_USD_PER_GB_HOUR";
+    readonly sandboxStandbyS: "CRTR_LEDGER_SANDBOX_STANDBY_S";
+    readonly storageUsdPerGbMonth: "CRTR_LEDGER_STORAGE_USD_PER_GB_MONTH";
+    readonly sandboxDiskUsdPerGbMonth: "CRTR_LEDGER_SANDBOX_DISK_USD_PER_GB_MONTH";
+    readonly infraFreeUsdPerMonth: "CRTR_LEDGER_INFRA_FREE_USD_PER_MONTH";
+    readonly takePct: "CRTR_LEDGER_TAKE_PCT";
+    readonly r2Move: "CRTR_LEDGER_R2_MOVE";
+};
+export declare const DEFAULT_STANDBY_S = 30;
+export declare const DEFAULT_INFRA_FREE_USD = 50;
+export declare const sandboxUsdPerGbHour: () => number | null;
+export declare const sandboxStandbyS: () => number;
+export declare const storageUsdPerGbMonth: () => number | null;
+export declare const sandboxDiskUsdPerGbMonth: () => number | null;
+export declare const infraFreeUsdPerMonth: () => number;
+/** Northlight's take on each priced model or tool charge, in percent; 0 (the default) writes no take rows. */
+export declare const takePercent: () => number;
+/** The `ledger-r2` lane moves closed months into the blob store only while this is true (off by default until 5b is accepted). */
+export declare const r2MoveEnabled: () => boolean;
+/** Throws on the first malformed ledger variable. Called once at daemon boot. */
+export declare function assertLedgerEnv(): void;
+/** Say once per process that a lane writes nothing because its rate is unset. */
+export declare function warnRateUnset(lane: string, ...names: string[]): void;

package/dist/core/ledger/rates.js

@@ -0,0 +1,64 @@
+// The ledger's platform prices and switches (design-fleet D56), read from the deployment's environment on every role (a Mac, the api
+// role, the reconcile role) the way the other deployment settings are (`CRTR_R2_BUCKET`, `BLAXEL_REGION`). They are Northlight's
+// list prices, not one person's setting. A rate that is unset is `null`: its lane writes nothing and says so once. A set but
+// malformed value throws, and `assertLedgerEnv()` runs at daemon boot so the daemon refuses to start on it.
+import { emitEvent } from '../events/emit.js';
+export const LEDGER_ENV = {
+    sandboxUsdPerGbHour: 'CRTR_LEDGER_SANDBOX_USD_PER_GB_HOUR',
+    sandboxStandbyS: 'CRTR_LEDGER_SANDBOX_STANDBY_S',
+    storageUsdPerGbMonth: 'CRTR_LEDGER_STORAGE_USD_PER_GB_MONTH',
+    sandboxDiskUsdPerGbMonth: 'CRTR_LEDGER_SANDBOX_DISK_USD_PER_GB_MONTH',
+    infraFreeUsdPerMonth: 'CRTR_LEDGER_INFRA_FREE_USD_PER_MONTH',
+    takePct: 'CRTR_LEDGER_TAKE_PCT',
+    r2Move: 'CRTR_LEDGER_R2_MOVE',
+};
+export const DEFAULT_STANDBY_S = 30;
+export const DEFAULT_INFRA_FREE_USD = 50;
+function number(name, max = Infinity) {
+    const raw = process.env[name];
+    if (raw === undefined || raw === '')
+        return null;
+    // Only a plain decimal: `Number()` would take whitespace as 0 and hex, binary, exponent or `Infinity` spellings as numbers.
+    const value = /^\d+(\.\d+)?$/.test(raw) ? Number(raw) : NaN;
+    if (!Number.isFinite(value) || value > max)
+        throw new Error(`${name} must be a number from 0${max === Infinity ? ' up' : ` to ${max}`}, got ${JSON.stringify(raw)}`);
+    return value;
+}
+function flag(name) {
+    const raw = process.env[name];
+    if (raw === undefined || raw === '')
+        return false;
+    if (raw === 'true' || raw === '1')
+        return true;
+    if (raw === 'false' || raw === '0')
+        return false;
+    throw new Error(`${name} must be true, false, 1 or 0, got ${JSON.stringify(raw)}`);
+}
+export const sandboxUsdPerGbHour = () => number(LEDGER_ENV.sandboxUsdPerGbHour);
+export const sandboxStandbyS = () => number(LEDGER_ENV.sandboxStandbyS) ?? DEFAULT_STANDBY_S;
+export const storageUsdPerGbMonth = () => number(LEDGER_ENV.storageUsdPerGbMonth);
+export const sandboxDiskUsdPerGbMonth = () => number(LEDGER_ENV.sandboxDiskUsdPerGbMonth);
+export const infraFreeUsdPerMonth = () => number(LEDGER_ENV.infraFreeUsdPerMonth) ?? DEFAULT_INFRA_FREE_USD;
+/** Northlight's take on each priced model or tool charge, in percent; 0 (the default) writes no take rows. */
+export const takePercent = () => number(LEDGER_ENV.takePct, 100) ?? 0;
+/** The `ledger-r2` lane moves closed months into the blob store only while this is true (off by default until 5b is accepted). */
+export const r2MoveEnabled = () => flag(LEDGER_ENV.r2Move);
+/** Throws on the first malformed ledger variable. Called once at daemon boot. */
+export function assertLedgerEnv() {
+    sandboxUsdPerGbHour();
+    sandboxStandbyS();
+    storageUsdPerGbMonth();
+    sandboxDiskUsdPerGbMonth();
+    infraFreeUsdPerMonth();
+    takePercent();
+    r2MoveEnabled();
+}
+const warned = new Set();
+/** Say once per process that a lane writes nothing because its rate is unset. */
+export function warnRateUnset(lane, ...names) {
+    const key = `${lane}:${names.join(',')}`;
+    if (warned.has(key))
+        return;
+    warned.add(key);
+    emitEvent({ level: 'warn', event: 'ledger.rate_unset', fields: { lane, unset: names } });
+}

package/dist/core/user-settings.d.ts

@@ -377,10 +377,6 @@ export declare const CONFIG_SETTINGS_COVERAGE: {
         surface: "specialized";
         owner: string;
     };
-    ledger: {
-        surface: "specialized";
-        owner: string;
-    };
     store: {
         surface: "specialized";
         owner: string;

package/dist/core/user-settings.js

@@ -469,7 +469,6 @@ export const CONFIG_SETTINGS_COVERAGE = {
     remoteCanvas: { surface: 'specialized', owner: 'canvas config commands' },
     api: { surface: 'specialized', owner: 'sys connect' },
     paths: { surface: 'specialized', owner: 'runtime layout' },
-    ledger: { surface: 'specialized', owner: 'money ledger (take_pct, sandbox rates)' },
     store: { surface: 'specialized', owner: 'daemon conversation store' },
     runtime: { surface: 'specialized', owner: 'app-facing listener' },
     spawnEnv: { surface: 'specialized', owner: 'spawn environment allow-list' },

package/dist/types.d.ts

@@ -402,22 +402,6 @@ export interface ScopeConfig {
     paths?: {
         user_files?: string;
     };
-    /** The money ledger. `take_pct` (0-100, default 0) is Northlight's take on each priced model or tool charge; at 0 no take rows are written. */
-    ledger?: {
-        take_pct?: number;
-        /** USD per GB-hour of Blaxel sandbox awake time; the `ledger-sandbox` lane writes no rows while it is unset. */
-        sandbox_usd_per_gb_hour?: number;
-        /** Seconds a sandbox stays awake after its broker goes idle or exits (default 30). */
-        sandbox_standby_s?: number;
-        /** USD per GB-month of R2 storage; the `ledger-storage` lane writes no `r2` rows while it is unset. */
-        storage_usd_per_gb_month?: number;
-        /** USD per GB-month of Blaxel sandbox disk; the `ledger-storage` lane writes no `blaxel` rows while it is unset. */
-        sandbox_disk_usd_per_gb_month?: number;
-        /** USD of sandbox and storage a billing account uses free each UTC month (default 50); `billed_usd` on those rows is the part above it. */
-        infra_free_usd_per_month?: number;
-        /** The `ledger-r2` lane moves closed months into the blob store only while this is true (off until 5b is accepted). */
-        r2_move?: boolean;
-    };
     /** Conversation store configuration for the daemon. */
     store?: {
         root?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/api",
-  "version": "0.3.566",
+  "version": "0.3.567",
   "description": "Typed crtrd /v1 API contract — DTOs, route builders, the error contract, the CrtrClient, and the command-plugin manifest format. Zero runtime dependencies.",
   "type": "module",
   "main": "./dist/api/index.js",