@openclaw/lobster 2026.9.5 → 2026.9.7

package/node_modules/@clawdbot/lobster/dist/src/command_tokens.js

@@ -0,0 +1,81 @@
+export function tokenizeCommand(input, dialect = "pipeline") {
+    const tokens = [];
+    let current = "";
+    let quote = null;
+    let tokenStarted = false;
+    const push = () => {
+        if (tokenStarted)
+            tokens.push(current);
+        current = "";
+        tokenStarted = false;
+    };
+    for (let i = 0; i < input.length; i++) {
+        const ch = input[i];
+        if (quote) {
+            // The public SDK command string has historically unescaped any quoted character.
+            if (dialect === "sdk") {
+                if (ch === "\\" && input[i + 1]) {
+                    current += input[++i];
+                    continue;
+                }
+                if (ch === quote) {
+                    quote = null;
+                    continue;
+                }
+                current += ch;
+                continue;
+            }
+            if (quote === "'") {
+                if (ch === "\\" && input[i + 1] === quote) {
+                    current += quote;
+                    i++;
+                    continue;
+                }
+                if (ch === quote) {
+                    quote = null;
+                    continue;
+                }
+                current += ch;
+                continue;
+            }
+            // Double-quoted mode: preserve unknown escapes (\n, \t, etc) while
+            // unescaping only shell-like quote/backslash escapes.
+            if (ch === "\\") {
+                const next = input[i + 1];
+                if (next === '"' || next === "\\" || next === "$" || next === "`") {
+                    current += next;
+                    i++;
+                    continue;
+                }
+                if (next === "\n") {
+                    i++;
+                    continue;
+                }
+                current += ch;
+                continue;
+            }
+            if (ch === quote) {
+                quote = null;
+                continue;
+            }
+            current += ch;
+            continue;
+        }
+        if (ch === '"' || ch === "'") {
+            quote = ch;
+            tokenStarted = true;
+            continue;
+        }
+        if (ch === " " || ch === "\t" || (dialect === "pipeline" && (ch === "\n" || ch === "\r"))) {
+            push();
+            continue;
+        }
+        tokenStarted = true;
+        current += ch;
+    }
+    if (quote && dialect === "pipeline")
+        throw new Error("Unclosed quote");
+    push();
+    return tokens;
+}
+//# sourceMappingURL=command_tokens.js.map

package/node_modules/@clawdbot/lobster/dist/src/command_tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_tokens.js","sourceRoot":"","sources":["../../src/command_tokens.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,OAAO,GAAuB,UAAU;IACtF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,MAAM,IAAI,GAAG,GAAG,EAAE;QACjB,IAAI,YAAY;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,GAAG,KAAK,CAAC;IACtB,CAAC,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEpB,IAAI,KAAK,EAAE,CAAC;YACX,iFAAiF;YACjF,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACvB,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBACjC,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;oBACtB,SAAS;gBACV,CAAC;gBACD,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;oBAClB,KAAK,GAAG,IAAI,CAAC;oBACb,SAAS;gBACV,CAAC;gBACD,OAAO,IAAI,EAAE,CAAC;gBACd,SAAS;YACV,CAAC;YAED,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBACnB,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC3C,OAAO,IAAI,KAAK,CAAC;oBACjB,CAAC,EAAE,CAAC;oBACJ,SAAS;gBACV,CAAC;gBACD,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;oBAClB,KAAK,GAAG,IAAI,CAAC;oBACb,SAAS;gBACV,CAAC;gBACD,OAAO,IAAI,EAAE,CAAC;gBACd,SAAS;YACV,CAAC;YAED,mEAAmE;YACnE,sDAAsD;YACtD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACnE,OAAO,IAAI,IAAI,CAAC;oBAChB,CAAC,EAAE,CAAC;oBACJ,SAAS;gBACV,CAAC;gBACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACnB,CAAC,EAAE,CAAC;oBACJ,SAAS;gBACV,CAAC;gBACD,OAAO,IAAI,EAAE,CAAC;gBACd,SAAS;YACV,CAAC;YAED,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBAClB,KAAK,GAAG,IAAI,CAAC;gBACb,SAAS;YACV,CAAC;YAED,OAAO,IAAI,EAAE,CAAC;YACd,SAAS;QACV,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC9B,KAAK,GAAG,EAAE,CAAC;YACX,YAAY,GAAG,IAAI,CAAC;YACpB,SAAS;QACV,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3F,IAAI,EAAE,CAAC;YACP,SAAS;QACV,CAAC;QAED,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO,IAAI,EAAE,CAAC;IACf,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACvE,IAAI,EAAE,CAAC;IACP,OAAO,MAAM,CAAC;AACf,CAAC"}

package/node_modules/@clawdbot/lobster/dist/src/commands/stdlib/dedupe.js

@@ -1,15 +1,4 @@
-function getByPath(obj, path) {
-    if (!path)
-        return obj;
-    const parts = path.split(".").filter(Boolean);
-    let cur = obj;
-    for (const p of parts) {
-        if (cur == null)
-            return undefined;
-        cur = cur[p];
-    }
-    return cur;
-}
+import { getByPath } from "../../core/value_path.js";
 export const dedupeCommand = {
     name: "dedupe",
     meta: {

package/node_modules/@clawdbot/lobster/dist/src/commands/stdlib/dedupe.js.map

@@ -1 +1 @@
-{"version":3,"file":"dedupe.js","sourceRoot":"","sources":["../../../../src/commands/stdlib/dedupe.ts"],"names":[],"mappings":"AAAA,SAAS,SAAS,CAAC,GAAQ,EAAE,IAAY;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC;IACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,GAAG,GAAQ,GAAG,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QAClC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC5B,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE;QACL,WAAW,EAAE,2DAA2D;QACxE,UAAU,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,GAAG,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,yDAAyD;iBACtE;gBACD,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;aAC/C;YACD,QAAQ,EAAE,EAAE;SACZ;QACD,WAAW,EAAE,EAAE;KACf;IACD,IAAI;QACH,OAAO,CACN,8CAA8C;YAC9C,UAAU;YACV,kBAAkB;YAClB,6BAA6B;YAC7B,UAAU;YACV,mCAAmC,CACnC,CAAC;IACH,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAO;QAC7B,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,OAAO;YACN,MAAM,EAAE,CAAC,KAAK,SAAS,CAAC;gBACvB,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBAChC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;oBAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;wBAAE,SAAS;oBAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACZ,MAAM,IAAI,CAAC;gBACZ,CAAC;YACF,CAAC,CAAC,EAAE;SACJ,CAAC;IACH,CAAC;CACD,CAAC"}
+{"version":3,"file":"dedupe.js","sourceRoot":"","sources":["../../../../src/commands/stdlib/dedupe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC5B,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE;QACL,WAAW,EAAE,2DAA2D;QACxE,UAAU,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,GAAG,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,yDAAyD;iBACtE;gBACD,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;aAC/C;YACD,QAAQ,EAAE,EAAE;SACZ;QACD,WAAW,EAAE,EAAE;KACf;IACD,IAAI;QACH,OAAO,CACN,8CAA8C;YAC9C,UAAU;YACV,kBAAkB;YAClB,6BAA6B;YAC7B,UAAU;YACV,mCAAmC,CACnC,CAAC;IACH,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAO;QAC7B,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,OAAO;YACN,MAAM,EAAE,CAAC,KAAK,SAAS,CAAC;gBACvB,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBAChC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;oBAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;wBAAE,SAAS;oBAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACZ,MAAM,IAAI,CAAC;gBACZ,CAAC;YACF,CAAC,CAAC,EAAE;SACJ,CAAC;IACH,CAAC;CACD,CAAC"}

package/node_modules/@clawdbot/lobster/dist/src/commands/stdlib/group_by.js

@@ -1,13 +1,4 @@
-function getByPath(obj, path) {
-    const parts = path.split(".").filter(Boolean);
-    let cur = obj;
-    for (const p of parts) {
-        if (cur == null)
-            return undefined;
-        cur = cur[p];
-    }
-    return cur;
-}
+import { getByPath } from "../../core/value_path.js";
 export const groupByCommand = {
     name: "groupBy",
     meta: {
@@ -36,20 +27,17 @@ export const groupByCommand = {
         if (!keyPath)
             throw new Error("groupBy requires --key");
         const groups = new Map();
-        const order = [];
         for await (const item of input) {
             const keyVal = getByPath(item, keyPath);
             const k = JSON.stringify(keyVal);
             if (!groups.has(k)) {
                 groups.set(k, { key: keyVal, items: [] });
-                order.push(k);
             }
             groups.get(k).items.push(item);
         }
         return {
             output: (async function* () {
-                for (const k of order) {
-                    const g = groups.get(k);
+                for (const g of groups.values()) {
                     yield { key: g.key, items: g.items, count: g.items.length };
                 }
             })(),

package/node_modules/@clawdbot/lobster/dist/src/commands/stdlib/group_by.js.map

@@ -1 +1 @@
-{"version":3,"file":"group_by.js","sourceRoot":"","sources":["../../../../src/commands/stdlib/group_by.ts"],"names":[],"mappings":"AAAA,SAAS,SAAS,CAAC,GAAQ,EAAE,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,GAAG,GAAQ,GAAG,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QAClC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B,IAAI,EAAE,SAAS;IACf,IAAI,EAAE;QACL,WAAW,EAAE,2CAA2C;QACxD,UAAU,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;gBAC3E,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;aAC/C;YACD,QAAQ,EAAE,CAAC,KAAK,CAAC;SACjB;QACD,WAAW,EAAE,EAAE;KACf;IACD,IAAI;QACH,OAAO,CACN,oCAAoC;YACpC,UAAU;YACV,gCAAgC;YAChC,WAAW;YACX,+CAA+C;YAC/C,UAAU;YACV,0DAA0D,CAC1D,CAAC;IACH,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAO;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsC,CAAC;QAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC1C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAED,OAAO;YACN,MAAM,EAAE,CAAC,KAAK,SAAS,CAAC;gBACvB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;oBACzB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7D,CAAC;YACF,CAAC,CAAC,EAAE;SACJ,CAAC;IACH,CAAC;CACD,CAAC"}
+{"version":3,"file":"group_by.js","sourceRoot":"","sources":["../../../../src/commands/stdlib/group_by.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B,IAAI,EAAE,SAAS;IACf,IAAI,EAAE;QACL,WAAW,EAAE,2CAA2C;QACxD,UAAU,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;gBAC3E,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;aAC/C;YACD,QAAQ,EAAE,CAAC,KAAK,CAAC;SACjB;QACD,WAAW,EAAE,EAAE;KACf;IACD,IAAI;QACH,OAAO,CACN,oCAAoC;YACpC,UAAU;YACV,gCAAgC;YAChC,WAAW;YACX,+CAA+C;YAC/C,UAAU;YACV,0DAA0D,CAC1D,CAAC;IACH,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAO;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8C,CAAC;QAErE,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAED,OAAO;YACN,MAAM,EAAE,CAAC,KAAK,SAAS,CAAC;gBACvB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;oBACjC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7D,CAAC;YACF,CAAC,CAAC,EAAE;SACJ,CAAC;IACH,CAAC;CACD,CAAC"}

package/node_modules/@clawdbot/lobster/dist/src/commands/stdlib/llm_invoke.js

@@ -1,8 +1,8 @@
+import { markLlmItem } from "../../core/llm_accounting.js";
 import path from "node:path";
 import { promises as fsp } from "node:fs";
 import { createHash } from "node:crypto";
 import { Ajv } from "ajv";
-import { billableTokens } from "../../core/cost_tracker.js";
 import { diffAndStore, ensureDirectory, atomicWriteWasPublished, isJsonSyntaxError, readStateJsonWithLock, stableStringify, withFileLock, writeFileAtomic, } from "../../state/store.js";
 import { createCompileCached } from "../../validation.js";
 import { httpResponseLimitFromEnv, readResponseTextCapped } from "../../read_response_text.js";
@@ -93,325 +93,6 @@ const DEFAULT_MAX_VALIDATION_RETRIES = 1;
 const STATE_VERSION = 1;
 // Identity version of the response cache key. See computeCacheKey.
 const CACHE_KEY_VERSION = 2;
-// Provenance for an item this module emitted: which stored answer it belongs to, and whether
-// it came from a provider call or from run state / the response cache.
-// A symbol key cannot come out of `JSON.parse`, so the JSON a workflow step reads from a
-// command's stdout can never carry it: only objects built here, in this process, take part in
-// the replay exemption in workflow cost accounting.
-const LLM_PROVENANCE = Symbol("lobster.llm.provenance");
-/**
- * Stamps provenance on a value this module is emitting. The property is enumerable so a
- * downstream `{ ...value }` keeps it, and `JSON.stringify` ignores symbol keys, so serialized
- * output — including what is written to the cache — is unchanged.
- */
-function markProvenance(value, provenance) {
-    return Object.defineProperty(value, LLM_PROVENANCE, {
-        value: provenance,
-        enumerable: true,
-        configurable: true,
-    });
-}
-/**
- * Marks an item this module is emitting, and its usage record with it. A projection such as
- * `pick model,usage` builds a new object out of named fields, so the item's own mark does not
- * reach the consumer — but the usage record crosses by reference, and the usage record is what
- * gets billed. Marking both means provenance survives an in-process projection without the
- * consumer having to recognize every command that can build one.
- */
-function markLlmItem(item, provenance) {
-    if (item.usage && typeof item.usage === "object") {
-        markProvenance(item.usage, provenance);
-    }
-    return markProvenance(item, provenance);
-}
-/**
- * The provenance of an item — or of a usage record — this module produced in the current
- * process, and null for anything else. The public `replayed` field is deliberately not
- * consulted: any command can print it beside a real `usage` object, and honoring that would
- * drop real spend from `_meta.cost` and `cost_limit`.
- */
-export function llmProvenanceOf(value) {
-    if (!value || typeof value !== "object")
-        return null;
-    const provenance = value[LLM_PROVENANCE];
-    if (!provenance || typeof provenance !== "object")
-        return null;
-    const { cacheKey, replayed } = provenance;
-    if (typeof cacheKey !== "string" || typeof replayed !== "boolean")
-        return null;
-    return { cacheKey, replayed };
-}
-/**
- * Marks `target` — a structurally identical value rebuilt from `source`'s own JSON — as standing
- * in for whatever calls `source` was marked with.
- *
- * The marks are deliberately not in that JSON, and re-deriving them from it would mean trusting a
- * payload, which the accounting must never do. Carrying them is a different act: the caller holds
- * both values in this process and knows one was built from the other, which nothing on disk can
- * claim for itself.
- *
- * What is carried is always a replay, whatever the source was. A value read back out of storage
- * re-emits an answer that already exists; the call behind it was made once, and this is not that
- * call happening again.
- */
-export function carryLlmProvenance(source, target) {
-    if (!source || typeof source !== "object" || !target || typeof target !== "object")
-        return;
-    const provenance = llmProvenanceOf(source);
-    if (provenance)
-        markProvenance(target, { cacheKey: provenance.cacheKey, replayed: true });
-    if (Array.isArray(source) || Array.isArray(target)) {
-        if (!Array.isArray(source) || !Array.isArray(target))
-            return;
-        for (let index = 0; index < Math.min(source.length, target.length); index++) {
-            carryLlmProvenance(source[index], target[index]);
-        }
-        return;
-    }
-    for (const key of Object.keys(source)) {
-        carryLlmProvenance(source[key], target[key]);
-    }
-}
-/**
- * Restores private replay provenance on completed step results loaded from Lobster's own
- * workflow-resume state. Resume state is the narrow trusted boundary: ordinary command JSON
- * never reaches this helper, so copying a public cache key cannot suppress its usage record.
- */
-export function restoreLlmProvenance(target, charges) {
-    if (!target || typeof target !== "object" || !Array.isArray(charges))
-        return;
-    const settled = charges.filter((charge) => charge &&
-        typeof charge === "object" &&
-        typeof charge.cacheKey === "string" &&
-        charge.cacheKey &&
-        charge.usage &&
-        typeof charge.usage === "object");
-    if (!settled.length)
-        return;
-    const visit = (value) => {
-        if (!value || typeof value !== "object")
-            return;
-        if (Array.isArray(value)) {
-            for (const item of value)
-                visit(item);
-            return;
-        }
-        const record = value;
-        const cacheKey = typeof record.cacheKey === "string" ? record.cacheKey : null;
-        const model = typeof record.model === "string" ? record.model : null;
-        const usage = record.usage;
-        if (cacheKey && usage && typeof usage === "object") {
-            const matches = settled.some((charge) => charge.cacheKey === cacheKey &&
-                (charge.model ?? null) === model &&
-                sameBillableUsage(charge.usage, usage));
-            if (matches) {
-                const provenance = { cacheKey, replayed: true };
-                markProvenance(usage, provenance);
-                markProvenance(record, provenance);
-            }
-        }
-        for (const child of Object.values(record))
-            visit(child);
-    };
-    visit(target);
-}
-// A call nothing ever bills — a step that failed outright — leaves its key behind, so the
-// oldest are dropped to keep a long run's ledger bounded.
-const MAX_UNBILLED_LIVE_INVOCATIONS = 256;
-/**
- * Creates the ledger for a single run. The run that paid for a call is the only one that can
- * recover its charge, because no other run holds this ledger: a workflow reusing a cache entry
- * written by an earlier run, or by an SDK caller outside cost accounting, finds nothing to
- * claim and is billed nothing. A live call made without a ledger in `ctx` opens no charge.
- *
- * A run composed by another one — a `workflow:` step — passes the composing run's ledger as
- * `parent`. Both bill the same answer at their own boundary: the child bills its step, the
- * parent bills the output handed back to it. So a charge is opened in both and each settles
- * its own copy exactly once, while a replay neither of them paid for still claims nothing.
- */
-export function createLlmSpendLedger(parent) {
-    // Outstanding charges per cache key, held one entry per call rather than as a count: two
-    // identical calls that race on a cold cache are two provider charges under one key, the
-    // replays that later stand in for them have to be able to settle both, and each carries the
-    // cost of the call that opened it.
-    const unbilled = new Map();
-    // Charges this run has already accounted for. A copy of an item that lost its mark can turn
-    // up in any later step, and the only way to tell it from a call nobody has billed yet is to
-    // remember what has been billed. Bounded like the open charges, oldest key first.
-    const billed = new Map();
-    function settle(cacheKey, charge) {
-        const seen = billed.get(cacheKey) ?? [];
-        seen.push(charge ?? {});
-        billed.set(cacheKey, seen);
-        for (const oldest of billed.keys()) {
-            if (billed.size <= MAX_UNBILLED_LIVE_INVOCATIONS)
-                break;
-            billed.delete(oldest);
-        }
-    }
-    return {
-        record(cacheKey, charge) {
-            if (!cacheKey)
-                return;
-            parent?.record(cacheKey, charge);
-            const open = unbilled.get(cacheKey) ?? [];
-            open.push({ ...charge });
-            unbilled.set(cacheKey, open);
-            for (const oldest of unbilled.keys()) {
-                if (unbilled.size <= MAX_UNBILLED_LIVE_INVOCATIONS)
-                    break;
-                unbilled.delete(oldest);
-            }
-        },
-        /**
-         * Settles one outstanding charge and hands back what that call cost, or null for the
-         * caller that must not bill anything. A live item and every replay of it draw on the same
-         * charges, so a provider call is billed exactly once however many steps re-emit its
-         * answer — and N calls under one key can be billed N times, never fewer.
-         *
-         * The cost comes back because a replay is not a reliable witness of it: identical calls
-         * that raced on a cold cache each paid their own way, and every replay of them carries
-         * whichever single answer was stored.
-         */
-        claim(cacheKey, cost) {
-            const open = unbilled.get(cacheKey);
-            if (!open?.length)
-                return null;
-            // A caller that knows what its own call cost settles that call's charge. A step
-            // retried after an attempt that failed *after* paying has more than one charge under
-            // the key, and they did not cost the same: settling the wrong one leaves the other to
-            // be billed at this call's price instead of its own.
-            const own = cost
-                ? open.findIndex((charge) => (charge.model ?? null) === (cost.model ?? null) &&
-                    sameBillableUsage(charge.usage, cost.usage))
-                : -1;
-            // Otherwise: a charge that records no cost settles nothing anyone can bill, so it
-            // must not be the one handed to a caller with a real call to account for. Charges
-            // restored from resume state written before they carried a cost are the ones this
-            // can be.
-            const index = own >= 0
-                ? own
-                : Math.max(open.findIndex((charge) => charge.usage !== undefined), 0);
-            const [charge] = open.splice(index, 1);
-            if (!open.length)
-                unbilled.delete(cacheKey);
-            settle(cacheKey, charge);
-            return charge ?? {};
-        },
-        /**
-         * Whether an item carrying a call's numbers but not its in-process mark should be billed.
-         * A matching open charge is settled so the same provider call is not recorded again by
-         * end-of-step cleanup. Once no charge is open, however, public fields can never suppress
-         * usage: only the private provenance symbol can prove an item is a replay.
-         */
-        billCopy(cacheKey, model, usage) {
-            const isSameCall = (charge) => (charge.model ?? null) === model && sameBillableUsage(charge.usage, usage);
-            // A copy that still names a cache key is read against that key alone: the key is
-            // evidence of which call it came from, and honoring it keeps one call's copy from
-            // settling another call's charge. A transform can emit `{ model, usage }` and drop
-            // the key with the symbols, leaving the cost as the only evidence there is.
-            for (const key of cacheKey === null ? [...unbilled.keys()] : [cacheKey]) {
-                const open = unbilled.get(key);
-                const index = open?.findIndex(isSameCall) ?? -1;
-                if (!open || index < 0)
-                    continue;
-                settle(key, open.splice(index, 1)[0]);
-                if (!open.length)
-                    unbilled.delete(key);
-                return true;
-            }
-            return true;
-        },
-        outstanding() {
-            const charges = [];
-            for (const [cacheKey, open] of unbilled) {
-                for (const charge of open)
-                    charges.push({ cacheKey, count: 1, ...charge });
-            }
-            return charges;
-        },
-        /**
-         * Reopens charges a paused run had not billed. A pipeline can suspend mid-step — at an
-         * `ask` gate — after its LLM call has been paid for but before the step succeeded, so
-         * without this the charge would exist in no run: the paused one never billed it, and the
-         * resumed one would exempt the replay that stands in for it.
-         */
-        restore(charges) {
-            if (!Array.isArray(charges))
-                return;
-            for (const charge of charges) {
-                if (!charge || typeof charge !== "object")
-                    continue;
-                if (typeof charge.cacheKey !== "string" || !charge.cacheKey)
-                    continue;
-                const count = Math.floor(Number(charge.count ?? 0));
-                if (!Number.isFinite(count) || count < 1)
-                    continue;
-                // State written before this field existed carries no cost, and a hand-edited file
-                // should not be able to invent one: only a plain object of numbers is taken.
-                const { cacheKey, count: _count, ...cost } = charge;
-                const restored = sanitizeChargeCost(cost);
-                for (let i = 0; i < count; i++)
-                    this.record(cacheKey, restored);
-            }
-        },
-        /**
-         * The calls this run has already billed. A run that pauses carries this the way it carries
-         * what it spent: the total says how much, and this says which calls it was for.
-         */
-        settled() {
-            const charges = [];
-            for (const [cacheKey, seen] of billed) {
-                for (const charge of seen)
-                    charges.push({ cacheKey, count: 1, ...charge });
-            }
-            return charges;
-        },
-        /**
-         * Restores what a paused run had billed, so the two halves of its accounting agree after
-         * the pause. `cost` brings the money back; without this the run that resumes has no record
-         * of what the money was for, and a later step that re-emits a completed LLM output — `head`
-         * over `$live.json` — hands on a copy the fresh ledger has never heard of. It is billed on
-         * top of the restored total: one provider call, twice in `_meta.cost` and against
-         * `cost_limit`.
-         *
-         * A settled charge is only ever read against a cache key, so what this restores can excuse
-         * a copy of a named call and nothing else. It cannot touch a live call — those settle out
-         * of the open charges — and the spend it is reconstructing is already in the `cost` this
-         * same state carries.
-         */
-        restoreSettled(charges) {
-            if (!Array.isArray(charges))
-                return;
-            for (const charge of charges) {
-                if (!charge || typeof charge !== "object")
-                    continue;
-                if (typeof charge.cacheKey !== "string" || !charge.cacheKey)
-                    continue;
-                const count = Math.floor(Number(charge.count ?? 0));
-                if (!Number.isFinite(count) || count < 1)
-                    continue;
-                const { cacheKey, count: _count, ...cost } = charge;
-                const restored = sanitizeChargeCost(cost);
-                for (let i = 0; i < count; i++)
-                    settle(cacheKey, restored);
-            }
-        },
-    };
-}
-/**
- * Whether two usage records bill the same, asked of the accounting that bills them. Comparing
- * the records themselves would answer a different question twice over: a live item's usage
- * carries this module's provenance symbol, which a copy that went through JSON never can, and a
- * stage that rebuilds an item can drop or recompute a field nothing is charged for.
- */
-function sameBillableUsage(left, right) {
-    if (!left || typeof left !== "object" || !right || typeof right !== "object")
-        return false;
-    const billed = billableTokens(left);
-    const other = billableTokens(right);
-    return billed.inputTokens === other.inputTokens && billed.outputTokens === other.outputTokens;
-}
 /**
  * Opens a charge for a live call, and only for one that costs something. An answer that reports
  * no usage is billed nowhere however many times it is replayed, so a charge for it would sit in
@@ -431,23 +112,6 @@ function chargeCostOf(item) {
         return undefined;
     return { model: typeof item?.model === "string" ? item.model : null, usage };
 }
-function sanitizeChargeCost(cost) {
-    const usage = cost.usage;
-    if (!usage || typeof usage !== "object" || Array.isArray(usage))
-        return {};
-    const numbers = {};
-    for (const [key, value] of Object.entries(usage)) {
-        if (typeof value === "number" && Number.isFinite(value))
-            numbers[key] = value;
-    }
-    if (!Object.keys(numbers).length)
-        return {};
-    return {
-        ...(typeof cost.stepId === "string" ? { stepId: cost.stepId } : null),
-        model: typeof cost.model === "string" ? cost.model : null,
-        usage: numbers,
-    };
-}
 function ledgerFrom(ctx) {
     const ledger = ctx?.llmSpendLedger;
     if (!ledger || typeof ledger !== "object")