@slaw-ai/server 2026.611.0

package/dist/services/botfather/instance-limit-enforcement.test.js

@@ -0,0 +1,66 @@
+import { describe, it, expect } from "vitest";
+import { evaluateInstanceLimit } from "./instance-limit-enforcement.js";
+function limit(over = {}) {
+    return {
+        costLimitCents: null,
+        tokenLimit: null,
+        warnPercent: 80,
+        mode: "soft",
+        version: 1,
+        ...over,
+    };
+}
+const usage = (meteredCostCents, subscriptionTokens) => ({
+    meteredCostCents,
+    subscriptionTokens,
+});
+describe("evaluateInstanceLimit (metric-aware)", () => {
+    it("off mode never warns or blocks", () => {
+        const ev = evaluateInstanceLimit(limit({ mode: "off", costLimitCents: 100 }), usage(9999, 9999));
+        expect(ev.exceeded).toBe(false);
+        expect(ev.warned).toBe(false);
+        expect(ev.metric).toBeNull();
+    });
+    it("enforces COST for metered runs", () => {
+        const l = limit({ costLimitCents: 10_000, mode: "hard" });
+        expect(evaluateInstanceLimit(l, usage(5_000, 0)).exceeded).toBe(false); // 50%
+        expect(evaluateInstanceLimit(l, usage(8_500, 0)).warned).toBe(true); // 85% ≥ 80
+        expect(evaluateInstanceLimit(l, usage(8_500, 0)).exceeded).toBe(false);
+        const hit = evaluateInstanceLimit(l, usage(10_000, 0));
+        expect(hit.exceeded).toBe(true);
+        expect(hit.metric).toBe("cost");
+    });
+    it("enforces TOKENS for subscription runs", () => {
+        const l = limit({ tokenLimit: 1_000_000, mode: "hard" });
+        expect(evaluateInstanceLimit(l, usage(0, 500_000)).exceeded).toBe(false);
+        const hit = evaluateInstanceLimit(l, usage(0, 1_200_000));
+        expect(hit.exceeded).toBe(true);
+        expect(hit.metric).toBe("tokens");
+    });
+    it("governs a mixed instance on both axes — the higher-utilisation metric drives", () => {
+        const l = limit({ costLimitCents: 10_000, tokenLimit: 1_000_000, mode: "hard" });
+        // cost at 40%, tokens at 95% → tokens drives, warns
+        const ev = evaluateInstanceLimit(l, usage(4_000, 950_000));
+        expect(ev.metric).toBe("tokens");
+        expect(ev.warned).toBe(true);
+        expect(ev.exceeded).toBe(false);
+        // tokens over ceiling → blocks on tokens even though cost is fine
+        const over = evaluateInstanceLimit(l, usage(4_000, 1_000_000));
+        expect(over.exceeded).toBe(true);
+        expect(over.metric).toBe("tokens");
+    });
+    it("a null ceiling means no cap on that metric", () => {
+        // only a token cap; huge metered cost must NOT block
+        const l = limit({ costLimitCents: null, tokenLimit: 1_000_000, mode: "hard" });
+        const ev = evaluateInstanceLimit(l, usage(9_999_999, 10));
+        expect(ev.exceeded).toBe(false);
+        expect(ev.metric).toBe("tokens");
+    });
+    it("soft mode reports warned/exceeded but is the caller's choice to block", () => {
+        const l = limit({ costLimitCents: 100, mode: "soft" });
+        const ev = evaluateInstanceLimit(l, usage(100, 0));
+        expect(ev.exceeded).toBe(true); // observed ≥ ceiling
+        expect(ev.mode).toBe("soft"); // caller (getInstanceLimitBlock) only blocks on hard
+    });
+});
+//# sourceMappingURL=instance-limit-enforcement.test.js.map

package/dist/services/botfather/instance-limit-enforcement.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-limit-enforcement.test.js","sourceRoot":"","sources":["../../../src/services/botfather/instance-limit-enforcement.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAyB,MAAM,iCAAiC,CAAC;AAG/F,SAAS,KAAK,CAAC,OAAqC,EAAE;IACpD,OAAO;QACL,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,EAAE;QACf,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,CAAC;QACV,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AACD,MAAM,KAAK,GAAG,CAAC,gBAAwB,EAAE,kBAA0B,EAAoB,EAAE,CAAC,CAAC;IACzF,gBAAgB;IAChB,kBAAkB;CACnB,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACjG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;QAC9E,MAAM,CAAC,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW;QAChF,MAAM,CAAC,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,oDAAoD;QACpD,MAAM,EAAE,GAAG,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,kEAAkE;QAClE,MAAM,IAAI,GAAG,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,qDAAqD;QACrD,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,MAAM,EAAE,GAAG,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB;QACrD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,qDAAqD;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/botfather/limits-store.d.ts

@@ -0,0 +1,36 @@
+import type { Db } from "@slaw-ai/db";
+import type { Directive, LimitSpec } from "@slaw-ai/shared/botfather/protocol";
+export interface StoredInstanceLimit {
+    costLimitCents: number | null;
+    tokenLimit: number | null;
+    warnPercent: number;
+    mode: "off" | "soft" | "hard";
+    version: number;
+}
+/**
+ * Pure monotonic gate: a pushed limit is applied only when its version is
+ * strictly newer than what we hold. Stale/duplicate pushes are ignored. Kept
+ * pure so it's unit-testable without a database.
+ */
+export declare function shouldApplyLimit(current: {
+    version: number;
+}, pushed: {
+    version: number;
+}): boolean;
+/** Read the currently-applied tower limit for this instance (singleton). */
+export declare function readInstanceLimit(db: Db): Promise<StoredInstanceLimit>;
+/** The limit version currently applied (for the heartbeat de-dupe echo). */
+export declare function appliedLimitVersion(db: Db): Promise<number>;
+/**
+ * Apply a tower-pushed limit. Idempotent + monotonic: only writes when the
+ * pushed version is newer than what we hold, so duplicate/stale pushes are
+ * ignored. Returns true if it applied a change.
+ */
+export declare function applyLimitSpec(db: Db, spec: LimitSpec): Promise<boolean>;
+/**
+ * Apply any directives carried on a heartbeat/sync response. Currently handles
+ * `set_limits`; other directive kinds are accepted and ignored (logged by the
+ * caller) so the back-channel stays forward-compatible.
+ */
+export declare function applyDirectives(db: Db, directives: Directive[] | undefined): Promise<number>;
+//# sourceMappingURL=limits-store.d.ts.map

package/dist/services/botfather/limits-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits-store.d.ts","sourceRoot":"","sources":["../../../src/services/botfather/limits-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAI/E,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAUD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAEnG;AAED,4EAA4E;AAC5E,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAwB5E;AAED,4EAA4E;AAC5E,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjE;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAmB9E;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CASlG"}

package/dist/services/botfather/limits-store.js

@@ -0,0 +1,94 @@
+import { sql } from "drizzle-orm";
+const SINGLETON = "default";
+const OFF = {
+    costLimitCents: null,
+    tokenLimit: null,
+    warnPercent: 80,
+    mode: "off",
+    version: 0,
+};
+/**
+ * Pure monotonic gate: a pushed limit is applied only when its version is
+ * strictly newer than what we hold. Stale/duplicate pushes are ignored. Kept
+ * pure so it's unit-testable without a database.
+ */
+export function shouldApplyLimit(current, pushed) {
+    return pushed.version > current.version;
+}
+/** Read the currently-applied tower limit for this instance (singleton). */
+export async function readInstanceLimit(db) {
+    // Defensive: if the table doesn't exist yet (pre-migration) or the db handle
+    // can't run raw SQL, treat as "no limit" rather than throwing — limit
+    // enforcement must never break run-gating or cost ingestion.
+    if (typeof db.execute !== "function")
+        return OFF;
+    let res;
+    try {
+        res = await db.execute(sql `
+      SELECT cost_limit_cents, token_limit, warn_percent, mode, version
+      FROM instance_limits WHERE singleton_key = ${SINGLETON} LIMIT 1
+    `);
+    }
+    catch {
+        return OFF;
+    }
+    const rows = res.rows ?? res;
+    const r = Array.isArray(rows) ? rows[0] : undefined;
+    if (!r)
+        return OFF;
+    return {
+        costLimitCents: r.cost_limit_cents == null ? null : Number(r.cost_limit_cents),
+        tokenLimit: r.token_limit == null ? null : Number(r.token_limit),
+        warnPercent: Number(r.warn_percent ?? 80),
+        mode: r.mode ?? "off",
+        version: Number(r.version ?? 0),
+    };
+}
+/** The limit version currently applied (for the heartbeat de-dupe echo). */
+export async function appliedLimitVersion(db) {
+    return (await readInstanceLimit(db)).version;
+}
+/**
+ * Apply a tower-pushed limit. Idempotent + monotonic: only writes when the
+ * pushed version is newer than what we hold, so duplicate/stale pushes are
+ * ignored. Returns true if it applied a change.
+ */
+export async function applyLimitSpec(db, spec) {
+    const current = await readInstanceLimit(db);
+    if (!shouldApplyLimit(current, spec))
+        return false;
+    await db.execute(sql `
+    INSERT INTO instance_limits
+      (singleton_key, source, cost_limit_cents, token_limit, warn_percent, mode, version, applied_at)
+    VALUES
+      (${SINGLETON}, 'tower', ${spec.costLimitCents}, ${spec.tokenLimit},
+       ${spec.warnPercent}, ${spec.mode}, ${spec.version}, now())
+    ON CONFLICT (singleton_key) DO UPDATE SET
+      source = 'tower',
+      cost_limit_cents = EXCLUDED.cost_limit_cents,
+      token_limit = EXCLUDED.token_limit,
+      warn_percent = EXCLUDED.warn_percent,
+      mode = EXCLUDED.mode,
+      version = EXCLUDED.version,
+      applied_at = now()
+  `);
+    return true;
+}
+/**
+ * Apply any directives carried on a heartbeat/sync response. Currently handles
+ * `set_limits`; other directive kinds are accepted and ignored (logged by the
+ * caller) so the back-channel stays forward-compatible.
+ */
+export async function applyDirectives(db, directives) {
+    if (!directives?.length)
+        return 0;
+    let applied = 0;
+    for (const d of directives) {
+        if (d.kind === "set_limits") {
+            if (await applyLimitSpec(db, d.limit))
+                applied += 1;
+        }
+    }
+    return applied;
+}
+//# sourceMappingURL=limits-store.js.map

package/dist/services/botfather/limits-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits-store.js","sourceRoot":"","sources":["../../../src/services/botfather/limits-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAKlC,MAAM,SAAS,GAAG,SAAS,CAAC;AAU5B,MAAM,GAAG,GAAwB;IAC/B,cAAc,EAAE,IAAI;IACpB,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,EAAE;IACf,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC;CACX,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA4B,EAAE,MAA2B;IACxF,OAAO,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;AAC1C,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAM;IAC5C,6EAA6E;IAC7E,sEAAsE;IACtE,6DAA6D;IAC7D,IAAI,OAAQ,EAA4B,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO,GAAG,CAAC;IAC5E,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;mDAEqB,SAAS;KACvD,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,GAAI,GAA4C,CAAC,IAAI,IAAK,GAAiC,CAAC;IACtG,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACnB,OAAO;QACL,cAAc,EAAE,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC9E,UAAU,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;QAChE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC;QACzC,IAAI,EAAG,CAAC,CAAC,IAAoC,IAAI,KAAK;QACtD,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAM;IAC9C,OAAO,CAAC,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAM,EAAE,IAAe;IAC1D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;;;SAIb,SAAS,cAAc,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,UAAU;SAC9D,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO;;;;;;;;;GASrD,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAM,EAAE,UAAmC;IAC/E,IAAI,CAAC,UAAU,EAAE,MAAM;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC5B,IAAI,MAAM,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/services/botfather/limits-store.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=limits-store.test.d.ts.map

package/dist/services/botfather/limits-store.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits-store.test.d.ts","sourceRoot":"","sources":["../../../src/services/botfather/limits-store.test.ts"],"names":[],"mappings":""}

package/dist/services/botfather/limits-store.test.js

@@ -0,0 +1,70 @@
+import { describe, it, expect, vi } from "vitest";
+import { shouldApplyLimit, applyDirectives } from "./limits-store.js";
+function spec(version, over = {}) {
+    return {
+        costLimitCents: 50_000,
+        tokenLimit: null,
+        window: "calendar_month_utc",
+        warnPercent: 80,
+        mode: "soft",
+        version,
+        ...over,
+    };
+}
+describe("shouldApplyLimit (monotonic gate)", () => {
+    it("applies only a strictly-newer version", () => {
+        expect(shouldApplyLimit({ version: 0 }, { version: 1 })).toBe(true);
+        expect(shouldApplyLimit({ version: 5 }, { version: 6 })).toBe(true);
+        expect(shouldApplyLimit({ version: 5 }, { version: 5 })).toBe(false); // duplicate
+        expect(shouldApplyLimit({ version: 5 }, { version: 4 })).toBe(false); // stale
+    });
+});
+/**
+ * Fake db that holds one in-memory `instance_limits` row. The store issues two
+ * SQL shapes: a SELECT (returns {rows:[current]}) and an INSERT…ON CONFLICT
+ * (mutates the held row). We discriminate by the query text.
+ */
+function fakeDb(initialVersion = 0) {
+    let row = initialVersion > 0
+        ? {
+            cost_limit_cents: 1,
+            token_limit: null,
+            warn_percent: 80,
+            mode: "soft",
+            version: initialVersion,
+        }
+        : undefined;
+    const db = {
+        execute: vi.fn(async (q) => {
+            const text = JSON.stringify(q);
+            if (text.includes("SELECT"))
+                return { rows: row ? [row] : [] };
+            // INSERT path: pull the bound params (drizzle sql`` carries them); since
+            // our fake can't introspect easily, mark applied by reading the directive
+            // captured on the db object.
+            row = db.__next ?? row;
+            return { rows: [] };
+        }),
+    };
+    return { db, setNext: (r) => (db.__next = r) };
+}
+describe("applyDirectives", () => {
+    it("ignores non-limit directives and an empty list", async () => {
+        const { db } = fakeDb(0);
+        expect(await applyDirectives(db, [])).toBe(0);
+        expect(await applyDirectives(db, undefined)).toBe(0);
+        const other = [{ kind: "request_reconciliation" }];
+        expect(await applyDirectives(db, other)).toBe(0);
+    });
+    it("applies a newer set_limits and skips a stale one", async () => {
+        // current version 3 in store
+        const { db, setNext } = fakeDb(3);
+        setNext({ cost_limit_cents: 20_000, token_limit: null, warn_percent: 80, mode: "hard", version: 5 });
+        const applyNew = await applyDirectives(db, [{ kind: "set_limits", limit: spec(5, { mode: "hard" }) }]);
+        expect(applyNew).toBe(1);
+        // a stale push (version 4 < current 5) is ignored
+        const applyStale = await applyDirectives(db, [{ kind: "set_limits", limit: spec(4) }]);
+        expect(applyStale).toBe(0);
+    });
+});
+//# sourceMappingURL=limits-store.test.js.map

package/dist/services/botfather/limits-store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits-store.test.js","sourceRoot":"","sources":["../../../src/services/botfather/limits-store.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAItE,SAAS,IAAI,CAAC,OAAe,EAAE,OAA2B,EAAE;IAC1D,OAAO;QACL,cAAc,EAAE,MAAM;QACtB,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,oBAAoB;QAC5B,WAAW,EAAE,EAAE;QACf,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;QAClF,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,MAAM,CAAC,cAAc,GAAG,CAAC;IAChC,IAAI,GAAG,GACL,cAAc,GAAG,CAAC;QAChB,CAAC,CAAC;YACE,gBAAgB,EAAE,CAAC;YACnB,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,EAAE;YAChB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,cAAc;SACxB;QACH,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,EAAE,GAAG;QACT,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAU,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/D,yEAAyE;YACzE,0EAA0E;YAC1E,6BAA6B;YAC7B,GAAG,GAAI,EAAsD,CAAC,MAAM,IAAI,GAAG,CAAC;YAC5E,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,CAAC,CAAC;KACc,CAAC;IACnB,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAE,EAAsC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;AAC/G,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,KAAK,GAAgB,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,6BAA6B;QAC7B,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACrG,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACvG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEzB,kDAAkD;QAClD,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/botfather/reporter.d.ts

@@ -0,0 +1,41 @@
+import type { Db } from "@slaw-ai/db";
+import type { BotfatherClient } from "./client.js";
+import { BotfatherEnrollment } from "./enrollment.js";
+export interface ReporterDeps {
+    db: Db;
+    client: BotfatherClient;
+    enrollment: BotfatherEnrollment;
+    reportIssueTitles: boolean;
+}
+export interface ReportOutcome {
+    upserts: number;
+    facts: number;
+    skipped?: "not-active" | "revoked" | "error";
+}
+export declare class BotfatherReporter {
+    private readonly deps;
+    constructor(deps: ReporterDeps);
+    /** Lightweight liveness + summary. */
+    heartbeat(): Promise<void>;
+    /** Collect entity upserts + fact deltas above the cursor and sync them. */
+    sync(): Promise<ReportOutcome>;
+    /**
+     * Re-send recent cost_events regardless of cursor so the tower's token/cost
+     * totals self-heal. SLAW cost_events are insert-only, but a row can be
+     * observed by the cursor sweep before its usage is fully attached, leaving a
+     * stale 0-token fact upstream; and any history created before enrollment is
+     * never re-examined by the forward-only cursor. The tower upserts cost facts
+     * on (instanceFk, localId), so re-sending is idempotent and corrects values.
+     * Bounded to a recent window to stay cheap.
+     */
+    reconcileRecentCosts(windowHours?: number): Promise<number>;
+    /**
+     * Re-send current entity state (squads/agents/projects/issues) regardless of
+     * cursor so the tower converges even for rows created before enrollment or
+     * missed by the forward-only cursor. Idempotent — the tower upserts entities
+     * on (instanceFk, localId). Issues drive the per-instance drill-down, so this
+     * is what backfills an empty Issues panel after enrolment.
+     */
+    reconcileEntities(): Promise<number>;
+}
+//# sourceMappingURL=reporter.d.ts.map

package/dist/services/botfather/reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporter.d.ts","sourceRoot":"","sources":["../../../src/services/botfather/reporter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAgBtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAgDtD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,EAAE,CAAC;IACP,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,mBAAmB,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;CAC9C;AAED,qBAAa,iBAAiB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,YAAY;IAE/C,sCAAsC;IAChC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IA8DhC,2EAA2E;IACrE,IAAI,IAAI,OAAO,CAAC,aAAa,CAAC;IA8MpC;;;;;;;;OAQG;IACG,oBAAoB,CAAC,WAAW,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAiD7D;;;;;;OAMG;IACG,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC;CAqF3C"}