@sagentlab/navarch-runtime 0.1.143 → 0.1.145

package/dist/adapters/pi.cjs

@@ -87,7 +87,7 @@ function buildPiProviderConfig() {
             name: "DeepSeek V4 Flash",
             reasoning: true,
             input: ["text"],
-            cost: { input: 0.22, output: 0.66, cacheRead: 0.007, cacheWrite: 0.22 },
+            cost: { input: 0.15, output: 0.6, cacheRead: 0.003, cacheWrite: 0.15 },
             contextWindow: 128_000,
             maxTokens: 16_384,
         },

package/dist/codex-price-snapshot.json

@@ -0,0 +1,264 @@
+{
+    "source": "https://models.dev/api.json",
+    "fetched_at": "2026-11-09",
+    "models": {
+        "gpt-4": {
+            "input": 30,
+            "cachedInput": 30,
+            "cacheWrite": 30,
+            "output": 60
+        },
+        "gpt-4-turbo": {
+            "input": 10,
+            "cachedInput": 10,
+            "cacheWrite": 10,
+            "output": 30
+        },
+        "gpt-4.1": {
+            "input": 2,
+            "cachedInput": 0.5,
+            "cacheWrite": 2,
+            "output": 8
+        },
+        "gpt-4.1-mini": {
+            "input": 0.4,
+            "cachedInput": 0.1,
+            "cacheWrite": 0.4,
+            "output": 1.6
+        },
+        "gpt-4.1-nano": {
+            "input": 0.1,
+            "cachedInput": 0.025,
+            "cacheWrite": 0.1,
+            "output": 0.4
+        },
+        "gpt-4o": {
+            "input": 2.5,
+            "cachedInput": 1.25,
+            "cacheWrite": 2.5,
+            "output": 10
+        },
+        "gpt-4o-2024-05-13": {
+            "input": 5,
+            "cachedInput": 5,
+            "cacheWrite": 5,
+            "output": 15
+        },
+        "gpt-4o-2024-08-06": {
+            "input": 2.5,
+            "cachedInput": 1.25,
+            "cacheWrite": 2.5,
+            "output": 10
+        },
+        "gpt-4o-2024-11-20": {
+            "input": 2.5,
+            "cachedInput": 1.25,
+            "cacheWrite": 2.5,
+            "output": 10
+        },
+        "gpt-4o-mini": {
+            "input": 0.15,
+            "cachedInput": 0.075,
+            "cacheWrite": 0.15,
+            "output": 0.6
+        },
+        "gpt-5": {
+            "input": 1.25,
+            "cachedInput": 0.125,
+            "cacheWrite": 1.25,
+            "output": 10
+        },
+        "gpt-5-mini": {
+            "input": 0.25,
+            "cachedInput": 0.025,
+            "cacheWrite": 0.25,
+            "output": 2
+        },
+        "gpt-5-nano": {
+            "input": 0.05,
+            "cachedInput": 0.005,
+            "cacheWrite": 0.05,
+            "output": 0.4
+        },
+        "gpt-5-pro": {
+            "input": 15,
+            "cachedInput": 15,
+            "cacheWrite": 15,
+            "output": 120
+        },
+        "gpt-5.1": {
+            "input": 1.25,
+            "cachedInput": 0.125,
+            "cacheWrite": 1.25,
+            "output": 10
+        },
+        "gpt-5.2": {
+            "input": 1.75,
+            "cachedInput": 0.175,
+            "cacheWrite": 1.75,
+            "output": 14
+        },
+        "gpt-5.2-pro": {
+            "input": 21,
+            "cachedInput": 21,
+            "cacheWrite": 21,
+            "output": 168
+        },
+        "gpt-5.3-codex": {
+            "input": 1.75,
+            "cachedInput": 0.175,
+            "cacheWrite": 1.75,
+            "output": 14
+        },
+        "gpt-5.3-codex-spark": {
+            "input": 1.75,
+            "cachedInput": 0.175,
+            "cacheWrite": 1.75,
+            "output": 14
+        },
+        "gpt-5.4": {
+            "input": 2.5,
+            "cachedInput": 0.25,
+            "cacheWrite": 2.5,
+            "output": 15
+        },
+        "gpt-5.4-mini": {
+            "input": 0.75,
+            "cachedInput": 0.075,
+            "cacheWrite": 0.75,
+            "output": 4.5
+        },
+        "gpt-5.4-nano": {
+            "input": 0.2,
+            "cachedInput": 0.02,
+            "cacheWrite": 0.2,
+            "output": 1.25
+        },
+        "gpt-5.4-pro": {
+            "input": 30,
+            "cachedInput": 30,
+            "cacheWrite": 30,
+            "output": 180
+        },
+        "gpt-5.5": {
+            "input": 5,
+            "cachedInput": 0.5,
+            "cacheWrite": 5,
+            "output": 30
+        },
+        "gpt-5.5-pro": {
+            "input": 30,
+            "cachedInput": 30,
+            "cacheWrite": 30,
+            "output": 180
+        },
+        "gpt-5.6": {
+            "input": 4,
+            "cachedInput": 0.4,
+            "cacheWrite": 5,
+            "output": 20
+        },
+        "gpt-5.6-luna": {
+            "input": 0.2,
+            "cachedInput": 0.02,
+            "cacheWrite": 0.25,
+            "output": 1.2
+        },
+        "gpt-5.6-sol": {
+            "input": 4,
+            "cachedInput": 0.4,
+            "cacheWrite": 5,
+            "output": 20
+        },
+        "gpt-5.6-terra": {
+            "input": 2,
+            "cachedInput": 0.2,
+            "cacheWrite": 2.5,
+            "output": 12
+        },
+        "gpt-6-astra": {
+            "input": 10,
+            "cachedInput": 1,
+            "cacheWrite": 12.5,
+            "output": 50
+        },
+        "gpt-6-luna": {
+            "input": 0.1,
+            "cachedInput": 0.01,
+            "cacheWrite": 0.125,
+            "output": 0.5
+        },
+        "gpt-6-sol": {
+            "input": 2,
+            "cachedInput": 0.2,
+            "cacheWrite": 2.5,
+            "output": 10
+        },
+        "gpt-6.1-sol": {
+            "input": 2,
+            "cachedInput": 0.1,
+            "cacheWrite": 2.5,
+            "output": 10
+        },
+        "gpt-6.1-terra": {
+            "input": 1,
+            "cachedInput": 0.05,
+            "cacheWrite": 1.25,
+            "output": 5
+        },
+        "gpt-daybreak-blue-latest": {
+            "input": 4,
+            "cachedInput": 0.4,
+            "cacheWrite": 5,
+            "output": 20
+        },
+        "gpt-daybreak-red-latest": {
+            "input": 12.5,
+            "cachedInput": 1.25,
+            "cacheWrite": 15.625,
+            "output": 75
+        },
+        "gpt-realtime-2.1": {
+            "input": 4,
+            "cachedInput": 0.4,
+            "cacheWrite": 4,
+            "output": 24
+        },
+        "o1": {
+            "input": 15,
+            "cachedInput": 7.5,
+            "cacheWrite": 15,
+            "output": 60
+        },
+        "o1-pro": {
+            "input": 150,
+            "cachedInput": 150,
+            "cacheWrite": 150,
+            "output": 600
+        },
+        "o3": {
+            "input": 2,
+            "cachedInput": 0.5,
+            "cacheWrite": 2,
+            "output": 8
+        },
+        "o3-mini": {
+            "input": 1.1,
+            "cachedInput": 0.55,
+            "cacheWrite": 1.1,
+            "output": 4.4
+        },
+        "o3-pro": {
+            "input": 20,
+            "cachedInput": 20,
+            "cacheWrite": 20,
+            "output": 80
+        },
+        "o4-mini": {
+            "input": 1.1,
+            "cachedInput": 0.275,
+            "cacheWrite": 1.1,
+            "output": 4.4
+        }
+    }
+}

package/dist/codex-pricing.cjs

@@ -1,31 +1,16 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.estimateCodexCostUsd = estimateCodexCostUsd;
+const codex_price_snapshot_json_1 = __importDefault(require("./codex-price-snapshot.json"));
 /**
- * Standard-tier USD prices per 1M tokens. Codex's JSONL stream reports usage
- * but not dollars, so the runtime needs a local price snapshot to turn that
- * usage into project spend. Keep this deliberately limited to models Navarch
- * offers rather than silently applying the wrong price to custom/gateway ids.
- *
- * Source (checked 2026-09-07): https://developers.openai.com/api/docs/pricing
+ * Standard short-context API-equivalent rates. Generated alongside the Worker
+ * snapshot by scripts/navarch-refresh-api-model-prices.mjs. This is not a
+ * subscription charge or invoice; speed, region and context uplifts are excluded.
  */
-const CODEX_RATES = {
-    // Standard short-context estimate, verified 2026-09-07 against the pricing
-    // source above. As with other runtime estimates, this excludes tier uplifts.
-    "gpt-6-astra": {
-        input: 10,
-        cachedInput: 1,
-        cacheWrite: 12.5,
-        output: 50,
-    },
-    // Promotional standard rates, available at least through 2026-11-21.
-    "gpt-5.6-sol": {
-        input: 4,
-        cachedInput: 0.4,
-        cacheWrite: 5,
-        output: 20,
-    },
-};
+const CODEX_RATES = codex_price_snapshot_json_1.default.models;
 function nonnegative(value) {
     return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : 0;
 }
@@ -52,7 +37,12 @@ function priceUsage(usage, rates) {
 function estimateCodexCostUsd(events, model) {
     if (!model)
         return undefined;
-    const rates = CODEX_RATES[model];
+    // Only first-party references and dated snapshots are safe to normalize.
+    // Custom gateways may charge different prices and remain unknown.
+    const id = model.trim().replace(/^openai\//, "");
+    // Own keys only: inherited names such as `constructor` are not models.
+    const own = (key) => (Object.hasOwn(CODEX_RATES, key) ? CODEX_RATES[key] : undefined);
+    const rates = own(id) ?? own(id.replace(/-20\d{2}-?\d{2}-?\d{2}$/, ""));
     if (!rates)
         return undefined;
     let sawTurnUsage = false;

package/dist/conversation/loop.cjs

@@ -225,9 +225,11 @@ class ConversationLoop {
             ...(shutdownSignal ? { signal: shutdownSignal } : {}),
             ...this.options.turnOverrides,
             log: this.log,
-            prepareWorkspace: async ({ conversationId, repositoryUrl, workingBranch, mode, signal }) => {
+            prepareWorkspace: async ({ conversationId, repositoryUrl, workingBranch, gitCredential, mode, signal }) => {
+                if (!gitCredential)
+                    throw new Error("Control plane did not provide the conversation Git credential");
                 const workspace = await (0, workspace_cjs_1.prepareConversationWorkspace)({
-                    workspaceRoot: config.workspaceRoot, conversationId, repositoryUrl, workingBranch, env, signal, mode,
+                    workspaceRoot: config.workspaceRoot, conversationId, repositoryUrl, workingBranch, gitCredential, env, signal, mode,
                     ...(this.options.gitRunner ? { runner: this.options.gitRunner } : {}),
                     ...(this.mirrors ? { mirrors: this.mirrors } : {}),
                 });

package/dist/conversation/turn-runner.cjs

@@ -300,7 +300,7 @@ async function runConversationTurn(deps, conversationId, turnId) {
             prompt = (0, prompt_cjs_1.buildConversationPrompt)(snapshot, journal.turnId, deps.adapter.agentType === "codex");
             // Older servers omit the working branch: the checkout stays on the default branch.
             const workingBranch = (0, workspace_cjs_1.validWorkingBranch)(claim.workingBranch);
-            prepared = await deps.prepareWorkspace({ conversationId, repositoryUrl, workingBranch, mode: snapshot.mode ?? "read_only", signal: controller.signal });
+            prepared = await deps.prepareWorkspace({ conversationId, repositoryUrl, workingBranch, gitCredential: claim.gitCredential, mode: snapshot.mode ?? "read_only", signal: controller.signal });
         }
         catch (error) {
             if (!run.lost)

package/dist/conversation/workspace.cjs

@@ -76,9 +76,8 @@ function conversationRoot(workspaceRoot, conversationId) {
  * The first turn clones; later turns of the same conversation reuse the
  * checkout so a follow-up sees the same revision as the first answer.
  *
- * The clone uses the machine's own git credentials (the same ones a local
- * `git clone` would use), never a Navarch server-side provider credential.
- * A repository this machine cannot read fails the turn instead of falling back.
+ * The control plane's project credential is used only by Git checkout subprocesses.
+ * It never enters the checkout URL, git config, journal or agent environment.
  * With `mirrors`, a new checkout is seeded from this machine's refreshed
  * mirror of the repository instead of a full network clone (see mirror.cts).
  */
@@ -127,15 +126,36 @@ async function prepareConversationWorkspace(options) {
         GIT_CONFIG_COUNT: "1",
         GIT_CONFIG_KEY_0: "core.hooksPath",
         GIT_CONFIG_VALUE_0: process.platform === "win32" ? "NUL" : "/dev/null",
+        ...(options.gitCredential ? {
+            NAVARCH_CONVERSATION_GIT_TOKEN: options.gitCredential,
+            GIT_CONFIG_COUNT: "5",
+            GIT_CONFIG_KEY_1: "credential.helper", GIT_CONFIG_VALUE_1: "",
+            GIT_CONFIG_KEY_2: `credential.${url}.helper`,
+            GIT_CONFIG_VALUE_2: `!f() { if [ "$1" = get ]; then printf '%s\\n' 'username=x-access-token' "password=$NAVARCH_CONVERSATION_GIT_TOKEN"; fi; }; f`,
+            GIT_CONFIG_KEY_3: "credential.useHttpPath", GIT_CONFIG_VALUE_3: "true",
+            GIT_CONFIG_KEY_4: "http.followRedirects", GIT_CONFIG_VALUE_4: "false",
+        } : {}),
     };
-    const seeded = await options.mirrors?.seedCheckout({ url, branch, checkout: workspace.checkout, env, signal: options.signal }) ?? false;
+    let seeded;
+    try {
+        seeded = await options.mirrors?.seedCheckout({ url, branch, checkout: workspace.checkout, env, signal: options.signal }) ?? false;
+    }
+    catch {
+        throw new Error("Conversation git mirror checkout could not run");
+    }
     if (!seeded) {
-        const result = await runner.run("git", ["clone", "--quiet", "--filter=blob:none", "--no-tags", ...(branch ? ["--branch", branch] : []), "--", url, workspace.checkout], { cwd: root, env, timeoutMs: CLONE_TIMEOUT_MS, signal: options.signal });
+        let result;
+        try {
+            result = await runner.run("git", ["clone", "--quiet", "--filter=blob:none", "--no-tags", ...(branch ? ["--branch", branch] : []), "--", url, workspace.checkout], { cwd: root, env, timeoutMs: CLONE_TIMEOUT_MS, signal: options.signal });
+        }
+        catch {
+            // A command runner or credential helper can put secrets in an exception.
+            throw new Error("Conversation git clone could not run");
+        }
         if (result.code !== 0) {
             await node_fs_1.promises.rm(workspace.checkout, { recursive: true, force: true }).catch(() => undefined);
-            throw new Error(`git clone failed with exit ${result.code}: ${result.stderr.slice(-500)}`);
+            throw new Error(`git clone failed with exit ${result.code}; check the project's GitHub connection and repository access`);
         }
-        // This machine can read the repository: build the mirror for the next conversation.
         void options.mirrors?.warm(url, env, options.signal);
     }
     await node_fs_1.promises.writeFile(marker, identity, { encoding: "utf8", mode: 0o600 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sagentlab/navarch-runtime",
-  "version": "0.1.143",
+  "version": "0.1.145",
   "description": "Navarch machine-side session manager: claims delivery tasks and runs them through local coding agents.",
   "type": "commonjs",
   "license": "MIT",