@tangle-network/agent-eval 0.216.0 → 0.216.1

package/dist/{external-optimizer-subprocess-DcerlZSG.js → external-optimizer-subprocess-BqW0hHcI.js}

@@ -1,8 +1,11 @@
-import { t as canonicalJson } from "./verdict-cache-BQEsVy9n.js";
-import { c as costForTokenPricing, i as CostLedger } from "./cost-ledger-D2FnJPBF.js";
-import { n as appendSearchLedgerLine, r as tryWithSearchLedgerFileLock } from "./search-ledger-file-BqOo-bVo.js";
+import { l as errorMessage } from "./errors-DVZiqS7K.js";
+import { t as canonicalJson } from "./verdict-cache-Bm8EKL2s.js";
+import { c as costForTokenPricing, t as CostLedger } from "./cost-ledger-BP8V4kUQ.js";
+import { t as deepFreezeCanonicalJson } from "./deep-freeze-CurcOQg3.js";
+import { n as appendSearchLedgerLine, r as tryWithSearchLedgerFileLock } from "./search-ledger-file-DDQUgvCg.js";
 import { n as ANALYST_SEVERITIES, r as FINDING_SCOPE_FIELDS } from "./types-IXD2HJzu.js";
-import { f as ModelSubstitutionError, g as assertServedModelPolicy, h as assertServedModel } from "./llm-client-DQveoxSM.js";
+import { c as ModelSubstitutionError, d as assertServedModel, f as assertServedModelPolicy } from "./llm-client-CyBAoYiX.js";
+import { t as isNonnegativeFiniteNumber } from "./nonnegative-number-DvdMxg_f.js";
 import { createRequire } from "node:module";
 import { randomBytes } from "node:crypto";
 import { z } from "zod";
@@ -485,6 +488,67 @@ function isCredentialKey(key) {
 function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function freezeJsonSnapshot(value, label) {
+	assertJsonValue(value, label);
+	return deepFreezeCanonicalJson(JSON.parse(canonicalJson(value)));
+}
+//#endregion
+//#region src/campaign/external-optimizer-http.ts
+function listenLocal(server) {
+	return new Promise((resolvePromise, reject) => {
+		server.once("error", reject);
+		server.listen(0, "127.0.0.1", () => {
+			server.off("error", reject);
+			const address = server.address();
+			if (!address || typeof address === "string") {
+				reject(/* @__PURE__ */ new Error("external optimizer callback did not bind a TCP port"));
+				return;
+			}
+			resolvePromise(address.port);
+		});
+	});
+}
+function closeServer(server) {
+	return new Promise((resolvePromise, reject) => {
+		server.close((error) => error ? reject(error) : resolvePromise());
+	});
+}
+function sendJson(response, status, body) {
+	response.writeHead(status, { "content-type": "application/json; charset=utf-8" });
+	response.end(JSON.stringify(body));
+}
+/**
+* Send a JSON body only while the response can still take one.
+*
+* A handler that lost its client — the request was aborted, or the response
+* already ended — must not write again; Node throws `ERR_STREAM_WRITE_AFTER_END`
+* and the throw escapes into the server's error path rather than the caller's.
+*/
+function sendJsonIfOpen(response, status, body) {
+	if (response.destroyed || response.writableEnded) return;
+	sendJson(response, status, body);
+}
+/**
+* Wait until every in-flight handler has settled.
+*
+* Re-reads the set on each pass: a handler that is still running can register
+* another, so awaiting one snapshot would return while work is outstanding and
+* the caller would close the server under it.
+*/
+async function waitForActiveHandlers(activeHandlers) {
+	while (activeHandlers.size > 0) await Promise.allSettled([...activeHandlers]);
+}
+//#endregion
+//#region src/campaign/external-optimizer-model-contract.ts
+var RequestBodyTooLargeError = class extends Error {};
+var ProviderResponseTooLargeError = class extends Error {
+	constructor() {
+		super("optimizer model response exceeds maxResponseBytes");
+	}
+};
+var MissingModelExecutionError = class extends Error {};
+var ModelExecutionPersistenceError = class extends Error {};
+var OwnerModelContractError = class extends Error {};
 //#endregion
 //#region src/campaign/external-optimizer-anthropic.ts
 /**
@@ -953,349 +1017,126 @@ function refuse(message) {
 	return new AnthropicRequestRefusal(400, "invalid_request_error", message);
 }
 //#endregion
-//#region src/campaign/external-optimizer-http.ts
-function listenLocal(server) {
-	return new Promise((resolvePromise, reject) => {
-		server.once("error", reject);
-		server.listen(0, "127.0.0.1", () => {
-			server.off("error", reject);
-			const address = server.address();
-			if (!address || typeof address === "string") {
-				reject(/* @__PURE__ */ new Error("external optimizer callback did not bind a TCP port"));
-				return;
-			}
-			resolvePromise(address.port);
-		});
-	});
-}
-function closeServer(server) {
-	return new Promise((resolvePromise, reject) => {
-		server.close((error) => error ? reject(error) : resolvePromise());
-	});
+//#region src/campaign/external-optimizer-model-response.ts
+function encodeAnthropicResponseBody(args) {
+	const message = encodeAnthropicMessage(args.response, args.callId);
+	const body = new TextEncoder().encode(args.stream ? renderAnthropicSseStream(message) : JSON.stringify(message));
+	if (body.byteLength > args.maxBytes) throw new ProviderResponseTooLargeError();
+	return {
+		contentType: args.stream ? "text/event-stream; charset=utf-8" : "application/json",
+		body
+	};
 }
-function sendJson(response, status, body) {
-	response.writeHead(status, { "content-type": "application/json; charset=utf-8" });
-	response.end(JSON.stringify(body));
+function encodeCanonicalModelResponse(args) {
+	const usage = encodeProtocolUsage(args.path, args.response, args.receipt);
+	const finishReason = args.response.finishReason === void 0 ? "stop" : args.response.finishReason;
+	const body = args.path === "/v1/chat/completions" ? {
+		id: `chatcmpl-${args.callId}`,
+		object: "chat.completion",
+		created: 0,
+		model: args.response.model,
+		choices: [{
+			index: 0,
+			message: {
+				role: "assistant",
+				content: args.response.content
+			},
+			finish_reason: finishReason
+		}],
+		...usage ? { usage } : {}
+	} : {
+		id: `resp-${args.callId}`,
+		object: "response",
+		created_at: 0,
+		model: args.response.model,
+		status: finishReason === "length" ? "incomplete" : "completed",
+		error: null,
+		incomplete_details: finishReason === "length" ? { reason: "max_output_tokens" } : null,
+		output: [{
+			id: `msg-${args.callId}`,
+			type: "message",
+			status: finishReason === "length" ? "incomplete" : "completed",
+			role: "assistant",
+			content: [{
+				type: "output_text",
+				text: args.response.content,
+				annotations: []
+			}]
+		}],
+		output_text: args.response.content,
+		...usage ? { usage } : {}
+	};
+	const encoded = new TextEncoder().encode(JSON.stringify(body));
+	if (encoded.byteLength > args.maxBytes) throw new ProviderResponseTooLargeError();
+	return encoded;
 }
-/**
-* Send a JSON body only while the response can still take one.
-*
-* A handler that lost its client — the request was aborted, or the response
-* already ended — must not write again; Node throws `ERR_STREAM_WRITE_AFTER_END`
-* and the throw escapes into the server's error path rather than the caller's.
-*/
-function sendJsonIfOpen(response, status, body) {
-	if (response.destroyed || response.writableEnded) return;
-	sendJson(response, status, body);
+function endpointFormat(path) {
+	if (path === "/v1/messages") return "anthropic-messages";
+	return path === "/v1/responses" ? "responses" : "chat-completions";
 }
-/**
-* Wait until every in-flight handler has settled.
-*
-* Re-reads the set on each pass: a handler that is still running can register
-* another, so awaiting one snapshot would return while work is outstanding and
-* the caller would close the server under it.
-*/
-async function waitForActiveHandlers(activeHandlers) {
-	while (activeHandlers.size > 0) await Promise.allSettled([...activeHandlers]);
+function encodeProtocolUsage(path, response, receipt) {
+	if (response.usage.captured === false) return void 0;
+	const inputDetails = {
+		...receipt.cachedTokens === void 0 ? {} : { cached_tokens: receipt.cachedTokens },
+		...receipt.cacheWriteTokens === void 0 ? {} : path === "/v1/chat/completions" ? { cache_creation_tokens: receipt.cacheWriteTokens } : { cache_write_tokens: receipt.cacheWriteTokens }
+	};
+	const outputDetails = { ...receipt.reasoningTokens === void 0 ? {} : { reasoning_tokens: receipt.reasoningTokens } };
+	return path === "/v1/chat/completions" ? {
+		prompt_tokens: response.usage.promptTokens,
+		completion_tokens: response.usage.completionTokens,
+		total_tokens: response.usage.totalTokens,
+		...Object.keys(inputDetails).length > 0 ? { prompt_tokens_details: inputDetails } : {},
+		...Object.keys(outputDetails).length > 0 ? { completion_tokens_details: outputDetails } : {},
+		...receipt.actualCostUsd === void 0 ? {} : { cost: receipt.actualCostUsd }
+	} : {
+		input_tokens: response.usage.promptTokens,
+		output_tokens: response.usage.completionTokens,
+		total_tokens: response.usage.totalTokens,
+		...Object.keys(inputDetails).length > 0 ? { input_tokens_details: inputDetails } : {},
+		...Object.keys(outputDetails).length > 0 ? { output_tokens_details: outputDetails } : {},
+		...receipt.actualCostUsd === void 0 ? {} : { cost: receipt.actualCostUsd }
+	};
 }
 //#endregion
-//#region src/campaign/external-optimizer-model-proxy.ts
-const MODEL_PROXY_PATHS = /* @__PURE__ */ new Set(["/v1/chat/completions", "/v1/responses"]);
-/**
-* Put an OpenAI-compatible optimizer behind the shared cost ledger.
-*
-* The child process receives only a loopback URL and an ephemeral token. The
-* package that owns execution receives a validated immutable request through
-* `call`; Eval receives no provider credential. Every request reserves its
-* conservative byte-count input bound plus the declared output cap before the
-* owner is invoked exactly once.
-*/
-async function startExternalOptimizerModelProxy(args) {
-	assertModelProxyConfig(args);
-	args.signal?.throwIfAborted();
-	const token = randomLocalToken();
-	let requestCount = 0;
-	let successfulCompletionCount = 0;
-	const wireCounts = {
-		openai: {
-			requestAttempts: 0,
-			successfulCompletions: 0
-		},
-		anthropic: {
-			requestAttempts: 0,
-			successfulCompletions: 0
-		}
-	};
-	let modelCallInvocations = 0;
-	let executionRecordCount = 0;
-	let executionSequence = 0;
-	const failures = [];
-	let totalRequestCount = args.initialUsage?.requests ?? 0;
-	let committedForBudget = args.initialUsage?.costUsd ?? 0;
-	let reservedForBudget = 0;
-	let accepting = true;
-	let closePromise;
-	const activeControllers = /* @__PURE__ */ new Set();
-	const activeHandlers = /* @__PURE__ */ new Set();
-	const server = createServer((request, response) => {
-		if (!accepting) {
-			sendJsonIfOpen(response, 503, { error: "external optimizer model proxy is closing" });
-			return;
-		}
-		const controller = new AbortController();
-		const abortRequest = () => {
-			request.destroy();
-			response.destroy();
-		};
-		activeControllers.add(controller);
-		controller.signal.addEventListener("abort", abortRequest, { once: true });
-		let handler;
-		handler = handleModelProxyRequest({
-			request,
-			response,
-			controller,
-			token,
-			args,
-			nextReservation: (maximumCostUsd, wire) => {
-				if (totalRequestCount >= args.budget.maxRequests) return {
-					accepted: false,
-					reason: "optimizer model request limit reached"
-				};
-				if (args.budget.maxCostUsd !== void 0 && maximumCostUsd !== void 0 && committedForBudget + reservedForBudget + maximumCostUsd > args.budget.maxCostUsd + Number.EPSILON) return {
-					accepted: false,
-					reason: "optimizer model cost limit reached"
-				};
-				requestCount += 1;
-				wireCounts[wire].requestAttempts += 1;
-				totalRequestCount += 1;
-				reservedForBudget += maximumCostUsd ?? 0;
-				return { accepted: true };
-			},
-			settleReservation: (maximumCostUsd, chargedCostUsd) => {
-				reservedForBudget = Math.max(0, reservedForBudget - (maximumCostUsd ?? 0));
-				committedForBudget += chargedCostUsd ?? 0;
-			},
-			recordSuccessfulCompletion: (wire) => {
-				successfulCompletionCount += 1;
-				wireCounts[wire].successfulCompletions += 1;
-			},
-			recordExecutionReceipt: (observation) => {
-				try {
-					args.recordExecution({
-						...observation,
-						sequence: executionSequence + 1
-					});
-				} catch (error) {
-					throw new ModelExecutionPersistenceError(`optimizer model execution evidence was not persisted: ${toErrorMessage(error)}`);
-				}
-				executionSequence += 1;
-				executionRecordCount += 1;
-			},
-			recordModelCallInvocation: () => {
-				modelCallInvocations += 1;
-			},
-			recordFailure: (error) => {
-				failures.push(error);
-			}
-		}).finally(() => {
-			controller.signal.removeEventListener("abort", abortRequest);
-			activeControllers.delete(controller);
-			activeHandlers.delete(handler);
-		});
-		activeHandlers.add(handler);
-		handler.catch(() => void 0);
-	});
-	const port = await listenLocal(server);
-	const close = () => {
-		closePromise ??= closeModelProxy();
-		return closePromise;
-	};
-	const onAbort = () => {
-		for (const controller of activeControllers) controller.abort(args.signal?.reason);
-		close().catch(() => void 0);
-	};
-	args.signal?.addEventListener("abort", onAbort, { once: true });
-	if (args.signal?.aborted) onAbort();
-	const assertExecutionComplete = () => {
-		if (executionRecordCount !== modelCallInvocations) throw new Error(`external optimizer model callback returned ${executionRecordCount} execution records for ${modelCallInvocations} invoked calls`);
-	};
-	return {
-		baseUrl: `http://127.0.0.1:${port}/v1`,
-		apiKey: token,
-		requestAttempts: () => requestCount,
-		successfulCompletions: () => successfulCompletionCount,
-		wireUsage: () => ({
-			openai: { ...wireCounts.openai },
-			anthropic: { ...wireCounts.anthropic }
-		}),
-		assertExecutionComplete,
-		failures: () => [...failures],
-		close
-	};
-	async function closeModelProxy() {
-		args.signal?.removeEventListener("abort", onAbort);
-		accepting = false;
-		const closingServer = closeServer(server);
-		server.closeIdleConnections?.();
-		const [serverResult] = await Promise.allSettled([closingServer, waitForActiveHandlers(activeHandlers)]);
-		if (activeControllers.size !== 0 || activeHandlers.size !== 0) throw new Error("external optimizer model proxy closed with active request work");
-		let executionError;
-		try {
-			assertExecutionComplete();
-		} catch (error) {
-			executionError = error;
-		}
-		if (serverResult?.status === "rejected" && executionError !== void 0) throw new AggregateError([serverResult.reason, executionError], "external optimizer model proxy close and execution evidence both failed");
-		if (serverResult?.status === "rejected") throw serverResult.reason;
-		if (executionError !== void 0) throw executionError;
-	}
-}
-async function handleModelProxyRequest(args) {
-	const { controller, request, response } = args;
-	let wire = "openai";
-	const respondError = (status, message, errorType) => {
-		if (wire === "anthropic") {
-			const mapped = status === 429 ? 402 : status;
-			sendJsonIfOpen(response, mapped, anthropicErrorEnvelope(errorType ?? anthropicErrorTypeForStatus(mapped), message));
-			return;
-		}
-		sendJsonIfOpen(response, status, { error: message });
-	};
-	try {
-		const path = request.url ? new URL(request.url, "http://127.0.0.1").pathname : "";
-		const anthropicPath = path === "/v1/messages" && args.args.anthropicEndpoint === true;
-		if (request.method !== "POST" || !(MODEL_PROXY_PATHS.has(path) || anthropicPath)) {
-			sendJsonIfOpen(response, 404, { error: "not found" });
-			return;
-		}
-		if (anthropicPath) wire = "anthropic";
-		const modelPath = path;
-		if (!(request.headers.authorization === `Bearer ${args.token}` || wire === "anthropic" && request.headers["x-api-key"] === args.token)) {
-			respondError(401, "unauthorized");
-			return;
-		}
-		const body = await readBody(request, args.args.budget.maxRequestBytes);
-		const parsed = parseModelProxyRequest(body, modelPath, args.args.model, args.args.budget);
-		const maximumUsage = conservativeMaximumUsage(body.byteLength, parsed.maxOutputTokens + (args.args.budget.maxReasoningTokensPerRequest ?? 0), args.args.budget.pricing);
-		const maximumCostUsd = args.args.budget.pricing ? costForTokenPricing(args.args.budget.pricing, maximumUsage) : void 0;
-		const reservation = args.nextReservation(maximumCostUsd, wire);
-		if (!reservation.accepted) {
-			respondError(429, reservation.reason);
-			return;
-		}
-		const timeout = setTimeout(() => controller.abort(), args.args.budget.requestTimeoutMs ?? 3e5);
-		let chargedForBudget = maximumCostUsd;
-		try {
-			const requestTags = wire === "anthropic" ? {
-				...args.args.tags ?? {},
-				wire: "anthropic",
-				...parsed.strippedFields === void 0 ? {} : { strippedFields: parsed.strippedFields.join(",") }
-			} : args.args.tags;
-			const paid = await args.args.costLedger.runPaidCall({
-				...args.args.callId ? { callId: args.args.callId } : {},
-				channel: args.args.channel ?? "optimizer",
-				phase: args.args.phase,
-				actor: args.args.actor,
-				...requestTags ? { tags: requestTags } : {},
-				model: args.args.model,
-				...args.args.budget.pricing ? { maximumCharge: {
-					customTokenPricing: args.args.budget.pricing,
-					...maximumUsage
-				} } : {},
-				signal: controller.signal,
-				execute: async (paidCallSignal, paidCallId) => forwardModelProxyRequest({
-					call: args.args.call,
-					callId: paidCallId,
-					callRef: args.args.callRef,
-					recordExecutionReceipt: args.recordExecutionReceipt,
-					recordModelCallInvocation: args.recordModelCallInvocation,
-					path: modelPath,
-					request: parsed.request,
-					...parsed.stream === void 0 ? {} : { anthropicStream: parsed.stream },
-					model: args.args.model,
-					allowWithinFamily: args.args.servedModelPolicy === "allow-within-family",
-					maxOutputTokens: parsed.maxOutputTokens,
-					...args.args.budget.maxReasoningTokensPerRequest === void 0 ? {} : { maxReasoningTokens: args.args.budget.maxReasoningTokensPerRequest },
-					maxResponseBytes: args.args.budget.maxResponseBytes,
-					signal: paidCallSignal
-				}),
-				receipt: (result) => result.receipt,
-				receiptFromError: () => ({
-					model: args.args.model,
-					inputTokens: 0,
-					outputTokens: 0,
-					costUnknown: true,
-					usageUnknown: true
-				})
-			});
-			if (!paid.succeeded) {
-				args.recordFailure(paid.error);
-				chargedForBudget = paid.receipt ? paid.receipt.usageUnknown || paid.receipt.costUnknown ? maximumCostUsd : paid.receipt.costUsd : void 0;
-				respondError(isAbortError(paid.error) ? 504 : paid.error instanceof AnthropicRequestRefusal ? paid.error.status : paid.error instanceof ProviderResponseTooLargeError || paid.error instanceof MissingModelExecutionError || paid.error instanceof ModelExecutionPersistenceError || paid.error instanceof OwnerModelContractError || paid.error instanceof ModelSubstitutionError ? 502 : 429, paid.error.message, paid.error instanceof AnthropicRequestRefusal ? paid.error.errorType : void 0);
-				return;
-			}
-			if (paid.value.modelCallFailed) {
-				respondError(502, paid.value.modelCallFailed);
-				return;
-			}
-			chargedForBudget = paid.value.usageComplete ? paid.receipt.costUsd : maximumCostUsd;
-			if (paid.value.usageRejected) {
-				respondError(502, paid.value.usageRejected);
-				return;
-			}
-			if (paid.value.status >= 200 && paid.value.status < 300) args.recordSuccessfulCompletion(wire);
-			if (response.destroyed || response.writableEnded) return;
-			response.writeHead(paid.value.status, {
-				"content-type": paid.value.contentType,
-				"content-length": String(paid.value.body.byteLength)
-			});
-			response.end(paid.value.body);
-		} finally {
-			clearTimeout(timeout);
-			args.settleReservation(maximumCostUsd, chargedForBudget);
-		}
-	} catch (error) {
-		respondError(error instanceof AnthropicRequestRefusal ? error.status : error instanceof RequestBodyTooLargeError ? 413 : error instanceof Error && isAbortError(error) ? 503 : 400, toErrorMessage(error), error instanceof AnthropicRequestRefusal ? error.errorType : void 0);
-	}
-}
-async function forwardModelProxyRequest(args) {
-	args.recordModelCallInvocation();
-	let called;
-	try {
-		called = await args.call({
-			callId: args.callId,
-			request: freezeJsonSnapshot(args.request, "optimizer model canonical request"),
-			endpointFormat: endpointFormat(args.path),
-			signal: args.signal
-		});
-	} catch (error) {
-		throw new MissingModelExecutionError(`optimizer model callback rejected without execution evidence: ${toErrorMessage(error)}`);
-	}
-	if (!called || typeof called !== "object" || typeof called.succeeded !== "boolean") throw new MissingModelExecutionError("optimizer model callback returned no typed success/failure outcome");
-	let execution;
-	try {
-		execution = freezeJsonSnapshot(called.execution, "optimizer model callback execution evidence");
-	} catch (error) {
-		throw new MissingModelExecutionError(`optimizer model callback returned invalid execution evidence: ${toErrorMessage(error)}`);
-	}
-	if (called.succeeded) {
-		let authoritativeReceipt;
-		let canonicalResponse;
-		try {
-			authoritativeReceipt = snapshotModelReceipt(called.receipt, args.model, args.allowWithinFamily);
-			canonicalResponse = snapshotChatResponse(called.response, args.model, args.allowWithinFamily);
-			assertResponseUsageMatchesReceipt(canonicalResponse, authoritativeReceipt);
-		} catch (error) {
-			args.recordExecutionReceipt({
-				callId: args.callId,
-				callRef: args.callRef,
-				path: args.path,
-				model: args.model,
-				succeeded: false,
-				error: toErrorMessage(error),
-				execution
-			});
-			throw error;
+//#region src/campaign/external-optimizer-model-execution.ts
+async function forwardModelProxyRequest(args) {
+	args.recordModelCallInvocation();
+	let called;
+	try {
+		called = await args.call({
+			callId: args.callId,
+			request: freezeJsonSnapshot(args.request, "optimizer model canonical request"),
+			endpointFormat: endpointFormat(args.path),
+			signal: args.signal
+		});
+	} catch (error) {
+		throw new MissingModelExecutionError(`optimizer model callback rejected without execution evidence: ${errorMessage(error)}`);
+	}
+	if (!called || typeof called !== "object" || typeof called.succeeded !== "boolean") throw new MissingModelExecutionError("optimizer model callback returned no typed success/failure outcome");
+	let execution;
+	try {
+		execution = freezeJsonSnapshot(called.execution, "optimizer model callback execution evidence");
+	} catch (error) {
+		throw new MissingModelExecutionError(`optimizer model callback returned invalid execution evidence: ${errorMessage(error)}`);
+	}
+	if (called.succeeded) {
+		let authoritativeReceipt;
+		let canonicalResponse;
+		try {
+			authoritativeReceipt = snapshotModelReceipt(called.receipt, args.model, args.allowWithinFamily);
+			canonicalResponse = snapshotChatResponse(called.response, args.model, args.allowWithinFamily);
+			assertResponseUsageMatchesReceipt(canonicalResponse, authoritativeReceipt);
+		} catch (error) {
+			args.recordExecutionReceipt({
+				callId: args.callId,
+				callRef: args.callRef,
+				path: args.path,
+				model: args.model,
+				succeeded: false,
+				error: errorMessage(error),
+				execution
+			});
+			throw error;
 		}
 		args.recordExecutionReceipt({
 			callId: args.callId,
@@ -1361,7 +1202,7 @@ function snapshotModelReceipt(value, expectedModel, allowWithinFamily) {
 		assertJsonValue(value, "optimizer model callback receipt");
 		snapshot = JSON.parse(canonicalJson(value));
 	} catch (error) {
-		throw new OwnerModelContractError(`optimizer model callback returned an invalid receipt: ${toErrorMessage(error)}`);
+		throw new OwnerModelContractError(`optimizer model callback returned an invalid receipt: ${errorMessage(error)}`);
 	}
 	assertServedModel(expectedModel, snapshot.model, {
 		context: "optimizer model callback receipt",
@@ -1369,17 +1210,6 @@ function snapshotModelReceipt(value, expectedModel, allowWithinFamily) {
 	});
 	return snapshot;
 }
-function freezeJsonSnapshot(value, label) {
-	assertJsonValue(value, label);
-	return deepFreezeJson(JSON.parse(canonicalJson(value)));
-}
-function deepFreezeJson(value) {
-	if (value !== null && typeof value === "object") {
-		for (const child of Object.values(value)) deepFreezeJson(child);
-		Object.freeze(value);
-	}
-	return value;
-}
 function assertResponseUsageMatchesReceipt(response, receipt) {
 	if (response.model !== receipt.model) throw new OwnerModelContractError("optimizer model response and execution receipt disagree about the served model");
 	if (response.usage.captured === false || receipt.usageUnknown === true) {
@@ -1394,10 +1224,80 @@ function assertResponseUsageMatchesReceipt(response, receipt) {
 	const receiptCostUsd = receipt.actualCostUsd ?? receipt.estimatedCostUsd ?? (receipt.customTokenPricing && receipt.usageUnknown !== true ? costForTokenPricing(receipt.customTokenPricing, receipt) : null);
 	if (response.costUsd !== receiptCostUsd) throw new OwnerModelContractError("optimizer model response billed cost disagrees with the execution receipt");
 }
-function parseModelProxyRequest(body, path, expectedModel, budget) {
-	if (path === "/v1/messages") {
-		const translated = translateAnthropicMessagesRequest(body, expectedModel, budget.maxOutputTokensPerRequest);
-		return {
+function snapshotChatResponse(value, expectedModel, allowWithinFamily) {
+	if (!isRecord(value)) throw new OwnerModelContractError("optimizer model callback response must be an object");
+	if (typeof value.content !== "string") throw new OwnerModelContractError("optimizer model callback response content must be a string");
+	assertServedModel(expectedModel, typeof value.model === "string" ? value.model : null, {
+		context: "optimizer model callback response",
+		allowWithinFamily
+	});
+	if (!isNonnegativeFiniteNumber(value.durationMs)) throw new OwnerModelContractError("optimizer model callback response durationMs must be finite and non-negative");
+	if (value.costUsd !== null && !isNonnegativeFiniteNumber(value.costUsd)) throw new OwnerModelContractError("optimizer model callback response costUsd must be null or finite and non-negative");
+	if (value.finishReason !== void 0 && value.finishReason !== null && typeof value.finishReason !== "string") throw new OwnerModelContractError("optimizer model callback response finishReason must be a string or null");
+	const toolCalls = snapshotResponseToolCalls(value.toolCalls);
+	if (value.contentEmpty !== void 0 && (typeof value.contentEmpty !== "boolean" || value.contentEmpty !== (value.content.trim().length === 0))) throw new OwnerModelContractError("optimizer model callback response contentEmpty must match content");
+	if (!isRecord(value.raw)) throw new OwnerModelContractError("optimizer model callback response raw must be an object");
+	if (!isRecord(value.usage)) throw new OwnerModelContractError("optimizer model callback response usage must be an object");
+	const usage = value.usage;
+	for (const field of [
+		"promptTokens",
+		"completionTokens",
+		"totalTokens"
+	]) if (!isNonnegativeSafeInteger(usage[field])) throw new OwnerModelContractError(`optimizer model callback response usage.${field} must be a non-negative safe integer`);
+	const promptTokens = usage.promptTokens;
+	const completionTokens = usage.completionTokens;
+	const totalTokens = usage.totalTokens;
+	if (totalTokens !== promptTokens + completionTokens) throw new OwnerModelContractError("optimizer model callback response totalTokens must equal promptTokens plus completionTokens");
+	if (usage.captured !== void 0 && typeof usage.captured !== "boolean") throw new OwnerModelContractError("optimizer model callback response usage.captured must be a boolean");
+	if (usage.cachedPromptTokens !== void 0 && (!isNonnegativeSafeInteger(usage.cachedPromptTokens) || usage.cachedPromptTokens > promptTokens)) throw new OwnerModelContractError("optimizer model callback response cachedPromptTokens must be a subset of promptTokens");
+	if (usage.reasoningTokens !== void 0 && (!isNonnegativeSafeInteger(usage.reasoningTokens) || usage.reasoningTokens > completionTokens)) throw new OwnerModelContractError("optimizer model callback response reasoningTokens must be a subset of completionTokens");
+	let raw;
+	try {
+		raw = freezeJsonSnapshot(value.raw, "optimizer model callback canonical response.raw");
+	} catch (error) {
+		throw new OwnerModelContractError(`optimizer model callback returned invalid raw response evidence: ${errorMessage(error)}`);
+	}
+	return deepFreezeCanonicalJson({
+		content: value.content,
+		...toolCalls === void 0 ? {} : { toolCalls },
+		usage: {
+			promptTokens,
+			completionTokens,
+			totalTokens,
+			...usage.captured === void 0 ? {} : { captured: usage.captured },
+			...usage.reasoningTokens === void 0 ? {} : { reasoningTokens: usage.reasoningTokens },
+			...usage.cachedPromptTokens === void 0 ? {} : { cachedPromptTokens: usage.cachedPromptTokens }
+		},
+		costUsd: value.costUsd,
+		model: value.model,
+		durationMs: value.durationMs,
+		...value.finishReason === void 0 ? {} : { finishReason: value.finishReason },
+		...value.contentEmpty === void 0 ? {} : { contentEmpty: value.contentEmpty },
+		raw
+	});
+}
+/** Snapshot the owner's canonical tool calls onto the allowlisted response. */
+function snapshotResponseToolCalls(value) {
+	if (value === void 0) return void 0;
+	if (!Array.isArray(value) || value.length === 0) throw new OwnerModelContractError("optimizer model callback response toolCalls must be a non-empty array when present");
+	return value.map((entry) => {
+		if (!isRecord(entry) || typeof entry.id !== "string" || !entry.id || typeof entry.name !== "string" || !entry.name || typeof entry.argumentsJson !== "string") throw new OwnerModelContractError("optimizer model callback response toolCalls entries require string id, name, and argumentsJson");
+		return {
+			id: entry.id,
+			name: entry.name,
+			argumentsJson: entry.argumentsJson
+		};
+	});
+}
+function isNonnegativeSafeInteger(value) {
+	return Number.isSafeInteger(value) && value >= 0;
+}
+//#endregion
+//#region src/campaign/external-optimizer-model-request.ts
+function parseModelProxyRequest(body, path, expectedModel, budget) {
+	if (path === "/v1/messages") {
+		const translated = translateAnthropicMessagesRequest(body, expectedModel, budget.maxOutputTokensPerRequest);
+		return {
 			maxOutputTokens: translated.maxOutputTokens,
 			stream: translated.stream,
 			...translated.strippedFields.length > 0 ? { strippedFields: translated.strippedFields } : {},
@@ -1653,169 +1553,309 @@ function assertAllowedKeys(value, allowed, label = "optimizer model request") {
 	const unknown = Object.keys(value).filter((key) => !allowedSet.has(key));
 	if (unknown.length > 0) throw new Error(`${label} contains unsupported fields: ${unknown.join(", ")}`);
 }
-function snapshotChatResponse(value, expectedModel, allowWithinFamily) {
-	if (!isRecord(value)) throw new OwnerModelContractError("optimizer model callback response must be an object");
-	if (typeof value.content !== "string") throw new OwnerModelContractError("optimizer model callback response content must be a string");
-	assertServedModel(expectedModel, typeof value.model === "string" ? value.model : null, {
-		context: "optimizer model callback response",
-		allowWithinFamily
-	});
-	if (!isNonnegativeFiniteNumber(value.durationMs)) throw new OwnerModelContractError("optimizer model callback response durationMs must be finite and non-negative");
-	if (value.costUsd !== null && !isNonnegativeFiniteNumber(value.costUsd)) throw new OwnerModelContractError("optimizer model callback response costUsd must be null or finite and non-negative");
-	if (value.finishReason !== void 0 && value.finishReason !== null && typeof value.finishReason !== "string") throw new OwnerModelContractError("optimizer model callback response finishReason must be a string or null");
-	const toolCalls = snapshotResponseToolCalls(value.toolCalls);
-	if (value.contentEmpty !== void 0 && (typeof value.contentEmpty !== "boolean" || value.contentEmpty !== (value.content.trim().length === 0))) throw new OwnerModelContractError("optimizer model callback response contentEmpty must match content");
-	if (!isRecord(value.raw)) throw new OwnerModelContractError("optimizer model callback response raw must be an object");
-	if (!isRecord(value.usage)) throw new OwnerModelContractError("optimizer model callback response usage must be an object");
-	const usage = value.usage;
-	for (const field of [
-		"promptTokens",
-		"completionTokens",
-		"totalTokens"
-	]) if (!isNonnegativeSafeInteger(usage[field])) throw new OwnerModelContractError(`optimizer model callback response usage.${field} must be a non-negative safe integer`);
-	const promptTokens = usage.promptTokens;
-	const completionTokens = usage.completionTokens;
-	const totalTokens = usage.totalTokens;
-	if (totalTokens !== promptTokens + completionTokens) throw new OwnerModelContractError("optimizer model callback response totalTokens must equal promptTokens plus completionTokens");
-	if (usage.captured !== void 0 && typeof usage.captured !== "boolean") throw new OwnerModelContractError("optimizer model callback response usage.captured must be a boolean");
-	if (usage.cachedPromptTokens !== void 0 && (!isNonnegativeSafeInteger(usage.cachedPromptTokens) || usage.cachedPromptTokens > promptTokens)) throw new OwnerModelContractError("optimizer model callback response cachedPromptTokens must be a subset of promptTokens");
-	if (usage.reasoningTokens !== void 0 && (!isNonnegativeSafeInteger(usage.reasoningTokens) || usage.reasoningTokens > completionTokens)) throw new OwnerModelContractError("optimizer model callback response reasoningTokens must be a subset of completionTokens");
-	let raw;
+//#endregion
+//#region src/campaign/external-optimizer-model-handler.ts
+const MODEL_PROXY_PATHS = /* @__PURE__ */ new Set(["/v1/chat/completions", "/v1/responses"]);
+async function handleModelProxyRequest(args) {
+	const { controller, request, response } = args;
+	let wire = "openai";
+	const respondError = (status, message, errorType) => {
+		if (wire === "anthropic") {
+			const mapped = status === 429 ? 402 : status;
+			sendJsonIfOpen(response, mapped, anthropicErrorEnvelope(errorType ?? anthropicErrorTypeForStatus(mapped), message));
+			return;
+		}
+		sendJsonIfOpen(response, status, { error: message });
+	};
 	try {
-		raw = freezeJsonSnapshot(value.raw, "optimizer model callback canonical response.raw");
+		const path = request.url ? new URL(request.url, "http://127.0.0.1").pathname : "";
+		const anthropicPath = path === "/v1/messages" && args.args.anthropicEndpoint === true;
+		if (request.method !== "POST" || !(MODEL_PROXY_PATHS.has(path) || anthropicPath)) {
+			sendJsonIfOpen(response, 404, { error: "not found" });
+			return;
+		}
+		if (anthropicPath) wire = "anthropic";
+		const modelPath = path;
+		if (!(request.headers.authorization === `Bearer ${args.token}` || wire === "anthropic" && request.headers["x-api-key"] === args.token)) {
+			respondError(401, "unauthorized");
+			return;
+		}
+		const body = await readBody(request, args.args.budget.maxRequestBytes);
+		const parsed = parseModelProxyRequest(body, modelPath, args.args.model, args.args.budget);
+		const maximumUsage = conservativeMaximumUsage(body.byteLength, parsed.maxOutputTokens + (args.args.budget.maxReasoningTokensPerRequest ?? 0), args.args.budget.pricing);
+		const maximumCostUsd = args.args.budget.pricing ? costForTokenPricing(args.args.budget.pricing, maximumUsage) : void 0;
+		const reservation = args.nextReservation(maximumCostUsd, wire);
+		if (!reservation.accepted) {
+			respondError(429, reservation.reason);
+			return;
+		}
+		const timeout = setTimeout(() => controller.abort(), args.args.budget.requestTimeoutMs ?? 3e5);
+		let chargedForBudget = maximumCostUsd;
+		try {
+			const requestTags = wire === "anthropic" ? {
+				...args.args.tags ?? {},
+				wire: "anthropic",
+				...parsed.strippedFields === void 0 ? {} : { strippedFields: parsed.strippedFields.join(",") }
+			} : args.args.tags;
+			const paid = await args.args.costLedger.runPaidCall({
+				...args.args.callId ? { callId: args.args.callId } : {},
+				channel: args.args.channel ?? "optimizer",
+				phase: args.args.phase,
+				actor: args.args.actor,
+				...requestTags ? { tags: requestTags } : {},
+				model: args.args.model,
+				...args.args.budget.pricing ? { maximumCharge: {
+					customTokenPricing: args.args.budget.pricing,
+					...maximumUsage
+				} } : {},
+				signal: controller.signal,
+				execute: async (paidCallSignal, paidCallId) => forwardModelProxyRequest({
+					call: args.args.call,
+					callId: paidCallId,
+					callRef: args.args.callRef,
+					recordExecutionReceipt: args.recordExecutionReceipt,
+					recordModelCallInvocation: args.recordModelCallInvocation,
+					path: modelPath,
+					request: parsed.request,
+					...parsed.stream === void 0 ? {} : { anthropicStream: parsed.stream },
+					model: args.args.model,
+					allowWithinFamily: args.args.servedModelPolicy === "allow-within-family",
+					maxOutputTokens: parsed.maxOutputTokens,
+					...args.args.budget.maxReasoningTokensPerRequest === void 0 ? {} : { maxReasoningTokens: args.args.budget.maxReasoningTokensPerRequest },
+					maxResponseBytes: args.args.budget.maxResponseBytes,
+					signal: paidCallSignal
+				}),
+				receipt: (result) => result.receipt,
+				receiptFromError: () => ({
+					model: args.args.model,
+					inputTokens: 0,
+					outputTokens: 0,
+					costUnknown: true,
+					usageUnknown: true
+				})
+			});
+			if (!paid.succeeded) {
+				args.recordFailure(paid.error);
+				chargedForBudget = paid.receipt ? paid.receipt.usageUnknown || paid.receipt.costUnknown ? maximumCostUsd : paid.receipt.costUsd : void 0;
+				respondError(isAbortError(paid.error) ? 504 : paid.error instanceof AnthropicRequestRefusal ? paid.error.status : paid.error instanceof ProviderResponseTooLargeError || paid.error instanceof MissingModelExecutionError || paid.error instanceof ModelExecutionPersistenceError || paid.error instanceof OwnerModelContractError || paid.error instanceof ModelSubstitutionError ? 502 : 429, paid.error.message, paid.error instanceof AnthropicRequestRefusal ? paid.error.errorType : void 0);
+				return;
+			}
+			if (paid.value.modelCallFailed) {
+				respondError(502, paid.value.modelCallFailed);
+				return;
+			}
+			chargedForBudget = paid.value.usageComplete ? paid.receipt.costUsd : maximumCostUsd;
+			if (paid.value.usageRejected) {
+				respondError(502, paid.value.usageRejected);
+				return;
+			}
+			if (paid.value.status >= 200 && paid.value.status < 300) args.recordSuccessfulCompletion(wire);
+			if (response.destroyed || response.writableEnded) return;
+			response.writeHead(paid.value.status, {
+				"content-type": paid.value.contentType,
+				"content-length": String(paid.value.body.byteLength)
+			});
+			response.end(paid.value.body);
+		} finally {
+			clearTimeout(timeout);
+			args.settleReservation(maximumCostUsd, chargedForBudget);
+		}
 	} catch (error) {
-		throw new OwnerModelContractError(`optimizer model callback returned invalid raw response evidence: ${toErrorMessage(error)}`);
+		respondError(error instanceof AnthropicRequestRefusal ? error.status : error instanceof RequestBodyTooLargeError ? 413 : error instanceof Error && isAbortError(error) ? 503 : 400, errorMessage(error), error instanceof AnthropicRequestRefusal ? error.errorType : void 0);
 	}
-	return deepFreezeJson({
-		content: value.content,
-		...toolCalls === void 0 ? {} : { toolCalls },
-		usage: {
-			promptTokens,
-			completionTokens,
-			totalTokens,
-			...usage.captured === void 0 ? {} : { captured: usage.captured },
-			...usage.reasoningTokens === void 0 ? {} : { reasoningTokens: usage.reasoningTokens },
-			...usage.cachedPromptTokens === void 0 ? {} : { cachedPromptTokens: usage.cachedPromptTokens }
-		},
-		costUsd: value.costUsd,
-		model: value.model,
-		durationMs: value.durationMs,
-		...value.finishReason === void 0 ? {} : { finishReason: value.finishReason },
-		...value.contentEmpty === void 0 ? {} : { contentEmpty: value.contentEmpty },
-		raw
-	});
-}
-/** Snapshot the owner's canonical tool calls onto the allowlisted response. */
-function snapshotResponseToolCalls(value) {
-	if (value === void 0) return void 0;
-	if (!Array.isArray(value) || value.length === 0) throw new OwnerModelContractError("optimizer model callback response toolCalls must be a non-empty array when present");
-	return value.map((entry) => {
-		if (!isRecord(entry) || typeof entry.id !== "string" || !entry.id || typeof entry.name !== "string" || !entry.name || typeof entry.argumentsJson !== "string") throw new OwnerModelContractError("optimizer model callback response toolCalls entries require string id, name, and argumentsJson");
-		return {
-			id: entry.id,
-			name: entry.name,
-			argumentsJson: entry.argumentsJson
-		};
-	});
 }
-function encodeAnthropicResponseBody(args) {
-	const message = encodeAnthropicMessage(args.response, args.callId);
-	const body = new TextEncoder().encode(args.stream ? renderAnthropicSseStream(message) : JSON.stringify(message));
-	if (body.byteLength > args.maxBytes) throw new ProviderResponseTooLargeError();
+function conservativeMaximumUsage(inputTokenUpperBound, outputTokenUpperBound, pricing) {
+	if (pricing === void 0) return {
+		inputTokens: inputTokenUpperBound,
+		outputTokens: outputTokenUpperBound
+	};
+	const inputRates = [pricing.inputUsdPerMillion, pricing.cachedInputUsdPerMillion ?? pricing.inputUsdPerMillion];
+	const mostExpensiveInputClass = inputRates.indexOf(Math.max(...inputRates));
 	return {
-		contentType: args.stream ? "text/event-stream; charset=utf-8" : "application/json",
-		body
+		inputTokens: mostExpensiveInputClass === 0 ? inputTokenUpperBound : 0,
+		...mostExpensiveInputClass === 1 ? { cachedTokens: inputTokenUpperBound } : {},
+		cacheWriteTokens: inputTokenUpperBound,
+		outputTokens: outputTokenUpperBound
 	};
 }
-function encodeCanonicalModelResponse(args) {
-	const usage = encodeProtocolUsage(args.path, args.response, args.receipt);
-	const finishReason = args.response.finishReason === void 0 ? "stop" : args.response.finishReason;
-	const body = args.path === "/v1/chat/completions" ? {
-		id: `chatcmpl-${args.callId}`,
-		object: "chat.completion",
-		created: 0,
-		model: args.response.model,
-		choices: [{
-			index: 0,
-			message: {
-				role: "assistant",
-				content: args.response.content
-			},
-			finish_reason: finishReason
-		}],
-		...usage ? { usage } : {}
-	} : {
-		id: `resp-${args.callId}`,
-		object: "response",
-		created_at: 0,
-		model: args.response.model,
-		status: finishReason === "length" ? "incomplete" : "completed",
-		error: null,
-		incomplete_details: finishReason === "length" ? { reason: "max_output_tokens" } : null,
-		output: [{
-			id: `msg-${args.callId}`,
-			type: "message",
-			status: finishReason === "length" ? "incomplete" : "completed",
-			role: "assistant",
-			content: [{
-				type: "output_text",
-				text: args.response.content,
-				annotations: []
-			}]
-		}],
-		output_text: args.response.content,
-		...usage ? { usage } : {}
-	};
-	const encoded = new TextEncoder().encode(JSON.stringify(body));
-	if (encoded.byteLength > args.maxBytes) throw new ProviderResponseTooLargeError();
-	return encoded;
+function readBody(request, maximumBytes) {
+	return new Promise((resolvePromise, reject) => {
+		let size = 0;
+		let tooLarge = false;
+		const chunks = [];
+		request.on("data", (chunk) => {
+			if (tooLarge) return;
+			size += chunk.byteLength;
+			if (size > maximumBytes) {
+				tooLarge = true;
+				chunks.length = 0;
+				return;
+			}
+			chunks.push(chunk);
+		});
+		request.on("error", reject);
+		request.on("end", () => {
+			if (tooLarge) {
+				reject(new RequestBodyTooLargeError("optimizer model request body too large"));
+				return;
+			}
+			resolvePromise(new Uint8Array(Buffer.concat(chunks)));
+		});
+	});
 }
-function endpointFormat(path) {
-	if (path === "/v1/messages") return "anthropic-messages";
-	return path === "/v1/responses" ? "responses" : "chat-completions";
+function isAbortError(error) {
+	return error.name === "AbortError" || error.message.toLowerCase().includes("abort");
 }
-function encodeProtocolUsage(path, response, receipt) {
-	if (response.usage.captured === false) return void 0;
-	const inputDetails = {
-		...receipt.cachedTokens === void 0 ? {} : { cached_tokens: receipt.cachedTokens },
-		...receipt.cacheWriteTokens === void 0 ? {} : path === "/v1/chat/completions" ? { cache_creation_tokens: receipt.cacheWriteTokens } : { cache_write_tokens: receipt.cacheWriteTokens }
+//#endregion
+//#region src/campaign/external-optimizer-model-proxy.ts
+/**
+* Put an OpenAI-compatible optimizer behind the shared cost ledger.
+*
+* The child process receives only a loopback URL and an ephemeral token. The
+* package that owns execution receives a validated immutable request through
+* `call`; Eval receives no provider credential. Every request reserves its
+* conservative byte-count input bound plus the declared output cap before the
+* owner is invoked exactly once.
+*/
+async function startExternalOptimizerModelProxy(args) {
+	assertModelProxyConfig(args);
+	args.signal?.throwIfAborted();
+	const token = randomLocalToken();
+	let requestCount = 0;
+	let successfulCompletionCount = 0;
+	const wireCounts = {
+		openai: {
+			requestAttempts: 0,
+			successfulCompletions: 0
+		},
+		anthropic: {
+			requestAttempts: 0,
+			successfulCompletions: 0
+		}
 	};
-	const outputDetails = { ...receipt.reasoningTokens === void 0 ? {} : { reasoning_tokens: receipt.reasoningTokens } };
-	return path === "/v1/chat/completions" ? {
-		prompt_tokens: response.usage.promptTokens,
-		completion_tokens: response.usage.completionTokens,
-		total_tokens: response.usage.totalTokens,
-		...Object.keys(inputDetails).length > 0 ? { prompt_tokens_details: inputDetails } : {},
-		...Object.keys(outputDetails).length > 0 ? { completion_tokens_details: outputDetails } : {},
-		...receipt.actualCostUsd === void 0 ? {} : { cost: receipt.actualCostUsd }
-	} : {
-		input_tokens: response.usage.promptTokens,
-		output_tokens: response.usage.completionTokens,
-		total_tokens: response.usage.totalTokens,
-		...Object.keys(inputDetails).length > 0 ? { input_tokens_details: inputDetails } : {},
-		...Object.keys(outputDetails).length > 0 ? { output_tokens_details: outputDetails } : {},
-		...receipt.actualCostUsd === void 0 ? {} : { cost: receipt.actualCostUsd }
+	let modelCallInvocations = 0;
+	let executionRecordCount = 0;
+	let executionSequence = 0;
+	const failures = [];
+	let totalRequestCount = args.initialUsage?.requests ?? 0;
+	let committedForBudget = args.initialUsage?.costUsd ?? 0;
+	let reservedForBudget = 0;
+	let accepting = true;
+	let closePromise;
+	const activeControllers = /* @__PURE__ */ new Set();
+	const activeHandlers = /* @__PURE__ */ new Set();
+	const server = createServer((request, response) => {
+		if (!accepting) {
+			sendJsonIfOpen(response, 503, { error: "external optimizer model proxy is closing" });
+			return;
+		}
+		const controller = new AbortController();
+		const abortRequest = () => {
+			request.destroy();
+			response.destroy();
+		};
+		activeControllers.add(controller);
+		controller.signal.addEventListener("abort", abortRequest, { once: true });
+		let handler;
+		handler = handleModelProxyRequest({
+			request,
+			response,
+			controller,
+			token,
+			args,
+			nextReservation: (maximumCostUsd, wire) => {
+				if (totalRequestCount >= args.budget.maxRequests) return {
+					accepted: false,
+					reason: "optimizer model request limit reached"
+				};
+				if (args.budget.maxCostUsd !== void 0 && maximumCostUsd !== void 0 && committedForBudget + reservedForBudget + maximumCostUsd > args.budget.maxCostUsd + Number.EPSILON) return {
+					accepted: false,
+					reason: "optimizer model cost limit reached"
+				};
+				requestCount += 1;
+				wireCounts[wire].requestAttempts += 1;
+				totalRequestCount += 1;
+				reservedForBudget += maximumCostUsd ?? 0;
+				return { accepted: true };
+			},
+			settleReservation: (maximumCostUsd, chargedCostUsd) => {
+				reservedForBudget = Math.max(0, reservedForBudget - (maximumCostUsd ?? 0));
+				committedForBudget += chargedCostUsd ?? 0;
+			},
+			recordSuccessfulCompletion: (wire) => {
+				successfulCompletionCount += 1;
+				wireCounts[wire].successfulCompletions += 1;
+			},
+			recordExecutionReceipt: (observation) => {
+				try {
+					args.recordExecution({
+						...observation,
+						sequence: executionSequence + 1
+					});
+				} catch (error) {
+					throw new ModelExecutionPersistenceError(`optimizer model execution evidence was not persisted: ${errorMessage(error)}`);
+				}
+				executionSequence += 1;
+				executionRecordCount += 1;
+			},
+			recordModelCallInvocation: () => {
+				modelCallInvocations += 1;
+			},
+			recordFailure: (error) => {
+				failures.push(error);
+			}
+		}).finally(() => {
+			controller.signal.removeEventListener("abort", abortRequest);
+			activeControllers.delete(controller);
+			activeHandlers.delete(handler);
+		});
+		activeHandlers.add(handler);
+		handler.catch(() => void 0);
+	});
+	const port = await listenLocal(server);
+	const close = () => {
+		closePromise ??= closeModelProxy();
+		return closePromise;
 	};
-}
-function isNonnegativeFiniteNumber(value) {
-	return typeof value === "number" && Number.isFinite(value) && value >= 0;
-}
-function isNonnegativeSafeInteger(value) {
-	return Number.isSafeInteger(value) && value >= 0;
-}
-function conservativeMaximumUsage(inputTokenUpperBound, outputTokenUpperBound, pricing) {
-	if (pricing === void 0) return {
-		inputTokens: inputTokenUpperBound,
-		outputTokens: outputTokenUpperBound
+	const onAbort = () => {
+		for (const controller of activeControllers) controller.abort(args.signal?.reason);
+		close().catch(() => void 0);
+	};
+	args.signal?.addEventListener("abort", onAbort, { once: true });
+	if (args.signal?.aborted) onAbort();
+	const assertExecutionComplete = () => {
+		if (executionRecordCount !== modelCallInvocations) throw new Error(`external optimizer model callback returned ${executionRecordCount} execution records for ${modelCallInvocations} invoked calls`);
 	};
-	const inputRates = [pricing.inputUsdPerMillion, pricing.cachedInputUsdPerMillion ?? pricing.inputUsdPerMillion];
-	const mostExpensiveInputClass = inputRates.indexOf(Math.max(...inputRates));
 	return {
-		inputTokens: mostExpensiveInputClass === 0 ? inputTokenUpperBound : 0,
-		...mostExpensiveInputClass === 1 ? { cachedTokens: inputTokenUpperBound } : {},
-		cacheWriteTokens: inputTokenUpperBound,
-		outputTokens: outputTokenUpperBound
+		baseUrl: `http://127.0.0.1:${port}/v1`,
+		apiKey: token,
+		requestAttempts: () => requestCount,
+		successfulCompletions: () => successfulCompletionCount,
+		wireUsage: () => ({
+			openai: { ...wireCounts.openai },
+			anthropic: { ...wireCounts.anthropic }
+		}),
+		assertExecutionComplete,
+		failures: () => [...failures],
+		close
 	};
+	async function closeModelProxy() {
+		args.signal?.removeEventListener("abort", onAbort);
+		accepting = false;
+		const closingServer = closeServer(server);
+		server.closeIdleConnections?.();
+		const [serverResult] = await Promise.allSettled([closingServer, waitForActiveHandlers(activeHandlers)]);
+		if (activeControllers.size !== 0 || activeHandlers.size !== 0) throw new Error("external optimizer model proxy closed with active request work");
+		let executionError;
+		try {
+			assertExecutionComplete();
+		} catch (error) {
+			executionError = error;
+		}
+		if (serverResult?.status === "rejected" && executionError !== void 0) throw new AggregateError([serverResult.reason, executionError], "external optimizer model proxy close and execution evidence both failed");
+		if (serverResult?.status === "rejected") throw serverResult.reason;
+		if (executionError !== void 0) throw executionError;
+	}
 }
 function assertModelProxyConfig(args) {
 	assertServedModelPolicy(args.servedModelPolicy, "external optimizer model proxy: servedModelPolicy");
@@ -1840,49 +1880,9 @@ function assertModelProxyConfig(args) {
 		if (args.initialUsage.requests > args.budget.maxRequests || args.budget.maxCostUsd !== void 0 && args.initialUsage.costUsd !== void 0 && args.initialUsage.costUsd > args.budget.maxCostUsd + Number.EPSILON) throw new Error("external optimizer model proxy: initialUsage exceeds the configured budget");
 	}
 }
-var RequestBodyTooLargeError = class extends Error {};
-var ProviderResponseTooLargeError = class extends Error {
-	constructor() {
-		super("optimizer model response exceeds maxResponseBytes");
-	}
-};
-var MissingModelExecutionError = class extends Error {};
-var ModelExecutionPersistenceError = class extends Error {};
-var OwnerModelContractError = class extends Error {};
-function readBody(request, maximumBytes) {
-	return new Promise((resolvePromise, reject) => {
-		let size = 0;
-		let tooLarge = false;
-		const chunks = [];
-		request.on("data", (chunk) => {
-			if (tooLarge) return;
-			size += chunk.byteLength;
-			if (size > maximumBytes) {
-				tooLarge = true;
-				chunks.length = 0;
-				return;
-			}
-			chunks.push(chunk);
-		});
-		request.on("error", reject);
-		request.on("end", () => {
-			if (tooLarge) {
-				reject(new RequestBodyTooLargeError("optimizer model request body too large"));
-				return;
-			}
-			resolvePromise(new Uint8Array(Buffer.concat(chunks)));
-		});
-	});
-}
 function randomLocalToken() {
 	return randomBytes(32).toString("hex");
 }
-function isAbortError(error) {
-	return error.name === "AbortError" || error.message.toLowerCase().includes("abort");
-}
-function toErrorMessage(error) {
-	return error instanceof Error ? error.message : String(error);
-}
 //#endregion
 //#region src/campaign/external-optimizer-resources.ts
 async function runWithCleanup(args) {
@@ -2162,4 +2162,4 @@ function summarizeProcessOutput(capture, max = 4e3) {
 //#endregion
 export { parseAnalystFinding as A, ProposalFindingSchema as C, lineageRoots as D, independentUnitCount as E, inMemoryCampaignStorage as F, spanningWindow as M, createRunCostLedger as N, mergeEvidenceUnits as O, fsCampaignStorage as P, FINDING_LAYERS as S, findingLayerRank as T, removeCredentialEnvironment as _, closeServer as a, safePathComponent as b, waitForActiveHandlers as c, assertExternalOptimizerModelBudget as d, assertJsonValue as f, isRecord as g, isExternalTextCandidate as h, startExternalOptimizerModelProxy as i, readFindingScope as j, mostSevere as k, DEFAULT_EXTERNAL_OPTIMIZER_CALLBACK_LIMITS as l, isCandidateText as m, closeExternalOptimizerResources as n, listenLocal as o, assertNoCredentialValues as p, runWithCleanup as r, sendJsonIfOpen as s, runExternalOptimizerProcess as t, DEFAULT_EXTERNAL_OPTIMIZER_PROCESS_LIMITS as u, resolveExternalOptimizerCallbackLimits as v, UNKNOWN_LINEAGE as w, AnalystFindingSchema as x, resolveExternalOptimizerProcessLimits as y };
 
-//# sourceMappingURL=external-optimizer-subprocess-DcerlZSG.js.map
+//# sourceMappingURL=external-optimizer-subprocess-BqW0hHcI.js.map