@xopcai/xopc 0.0.371 → 0.0.373

package/dist/src/agent/embedded/xopc-stream-bridge.js

@@ -1,6 +1,8 @@
 import "../../providers/constants.js";
 import { init_providers } from "../../providers/index.js";
 import { createExtensionAwareStreamFn } from "../../providers/extension-stream-bridge.js";
+import { withCloudUsageResponse } from "../../usage/cloud-receipts.js";
+import { assertCloudCreditBudgetActive, cloudCreditBudgetHeaders, hasCloudCreditBudget, reportCloudCreditError } from "../../providers/xopc-cloud-credit-budget.js";
 import { preparePromptCacheContext, withPromptCachePayloadTransform } from "../../providers/prompt-cache-payload.js";
 import { getCurrentSystemPrompt, getCurrentTools, normalizeContext } from "@earendil-works/pi-ai";
 //#region src/agent/embedded/xopc-stream-bridge.ts
@@ -17,6 +19,8 @@ init_providers();
 function wrapStreamFnForXopcExtensions(originalStreamFn, promptCachePolicy) {
 	const extensionStreamFn = createExtensionAwareStreamFn();
 	return ((model, context, options) => {
+		assertCloudCreditBudgetActive();
+		if (model.provider === "xopc-cloud") options = withCloudUsageResponse(options);
 		const promptContext = {
 			systemPrompt: getCurrentSystemPrompt(context.messages),
 			tools: getCurrentTools(context.messages)
@@ -28,6 +32,20 @@ function wrapStreamFnForXopcExtensions(originalStreamFn, promptCachePolicy) {
 			messages: context.messages.filter((message) => message.role !== "system")
 		});
 		if (model.baseUrl === "extension://provider-plugin") return extensionStreamFn(model, providerContext, options);
+		if (model.provider === "xopc-cloud" && hasCloudCreditBudget()) return (async () => {
+			const headers = await cloudCreditBudgetHeaders();
+			const stream = await originalStreamFn(model, providerContext, withPromptCachePayloadTransform(model, promptContext, {
+				...options,
+				headers: {
+					...options?.headers,
+					...headers
+				}
+			}, promptCachePolicy));
+			stream.result().then((message) => {
+				if (message.errorMessage) reportCloudCreditError(message.errorMessage);
+			}).catch(() => {});
+			return stream;
+		})();
 		return originalStreamFn(model, providerContext, withPromptCachePayloadTransform(model, promptContext, options, promptCachePolicy));
 	});
 }

package/dist/src/agent/image/generation/openai-images-provider.d.ts

@@ -35,6 +35,7 @@ export interface OpenAiImagesEndpointResolution {
     privateNetworkPolicy?: PrivateNetworkPolicy;
 }
 export interface OpenAiImagesProviderOptions {
+    onResponse?: (response: Response) => void;
     id: string;
     label: string;
     defaultModel: string;
@@ -45,7 +46,7 @@ export interface OpenAiImagesProviderOptions {
     /** Resolve API key for one request. May return null when using OAuth/header auth. */
     resolveApiKey: (req: ImageGenerationRequest) => string | null | undefined | Promise<string | null | undefined>;
     /** Resolve endpoint info per-request (region, baseUrl override, Azure deployment, …). */
-    resolveEndpoint: (req: ImageGenerationRequest) => OpenAiImagesEndpointResolution;
+    resolveEndpoint: (req: ImageGenerationRequest) => OpenAiImagesEndpointResolution | Promise<OpenAiImagesEndpointResolution>;
     /** Default per-call timeout. Combined with provider-level config in provider-http. */
     defaultTimeoutMs?: number;
     /** Default image count. Provider may also enforce via `capabilities.generate.maxCount`. */

package/dist/src/agent/image/generation/openai-images-provider.js

@@ -28,7 +28,7 @@ function createOpenAiImagesProvider(options) {
 		isConfigured: options.isConfigured,
 		async generateImage(req) {
 			const apiKey = await options.resolveApiKey(req) ?? null;
-			const endpoint = options.resolveEndpoint(req);
+			const endpoint = await options.resolveEndpoint(req);
 			const httpDefaults = resolveProviderHttpRequestConfig({
 				providerId: options.id,
 				cfg: req.cfg,
@@ -75,7 +75,8 @@ function createOpenAiImagesProvider(options) {
 				count,
 				size,
 				httpDefaults,
-				ssrfGuardOptions
+				ssrfGuardOptions,
+				onResponse: options.onResponse
 			}) : await postGenerateRequest({
 				providerId: options.id,
 				req,
@@ -84,7 +85,8 @@ function createOpenAiImagesProvider(options) {
 				count,
 				size,
 				httpDefaults,
-				ssrfGuardOptions
+				ssrfGuardOptions,
+				onResponse: options.onResponse
 			}), {
 				...req,
 				count
@@ -111,14 +113,16 @@ async function postGenerateRequest(params) {
 		resolution: params.req.resolution
 	} };
 	const timeoutMs = pickTimeoutMsOrFallback(params.req.timeoutMs, params.httpDefaults.timeoutMs, DEFAULT_TIMEOUT_MS);
-	return await readJsonResponseLimited(await postJsonRequest(params.url, {
+	const res = await postJsonRequest(params.url, {
 		label: params.providerId,
 		timeoutMs,
 		signal: params.req.signal,
 		body,
 		headers: params.headers,
 		...params.ssrfGuardOptions
-	}), MAX_RESPONSE_BYTES);
+	});
+	params.onResponse?.(res);
+	return await readJsonResponseLimited(res, MAX_RESPONSE_BYTES);
 }
 async function postEditRequest(params) {
 	const inputImages = params.req.inputImages ?? [];
@@ -148,14 +152,16 @@ async function postEditRequest(params) {
 	const headers = new Headers(params.headers);
 	headers.delete("content-type");
 	const timeoutMs = pickTimeoutMsOrFallback(params.req.timeoutMs, params.httpDefaults.timeoutMs, DEFAULT_TIMEOUT_MS);
-	return await readJsonResponseLimited(await postMultipartRequest(params.url, {
+	const res = await postMultipartRequest(params.url, {
 		label: params.providerId,
 		timeoutMs,
 		signal: params.req.signal,
 		body: form,
 		headers,
 		...params.ssrfGuardOptions
-	}), MAX_RESPONSE_BYTES);
+	});
+	params.onResponse?.(res);
+	return await readJsonResponseLimited(res, MAX_RESPONSE_BYTES);
 }
 function mapOpenAiImagesResponse(raw, req) {
 	if (!raw || typeof raw !== "object") return [];

package/dist/src/agent/image/generation/providers/xopc-cloud.js

@@ -1,7 +1,10 @@
 import { getModelCatalogStore, init_model_catalog_store } from "../../../../providers/model-catalog-store.js";
 import { init_xopc_cloud_config, resolveXopcModelRouterUrl } from "../../../../providers/xopc-cloud-config.js";
 import { getProviderAuthService, init_provider_auth_service } from "../../../../providers/provider-auth-service.js";
+import { captureCloudUsageResponse } from "../../../../usage/cloud-receipts.js";
+import { cloudCreditBudgetHeaders, reportCloudCreditError } from "../../../../providers/xopc-cloud-credit-budget.js";
 import { compareCatalogModels } from "../../../../providers/model-catalog-ranking.js";
+import { trackCloudCapabilityUsage } from "../../../../usage/cloud-capability.js";
 import { createOpenAiImagesProvider } from "../openai-images-provider.js";
 //#region src/agent/image/generation/providers/xopc-cloud.ts
 init_model_catalog_store();
@@ -23,7 +26,11 @@ function buildXopcCloudImageGenerationProvider() {
 		capabilities: modelCapabilities[model.id],
 		isConfigured: () => true,
 		resolveApiKey: (request) => getProviderAuthService().resolveApiKey("xopc-cloud", request.signal),
-		resolveEndpoint: () => ({ baseUrl }),
+		resolveEndpoint: async () => ({
+			baseUrl,
+			headers: await cloudCreditBudgetHeaders()
+		}),
+		onResponse: captureCloudUsageResponse,
 		...model.imageGeneration?.geometry?.sizes?.[0] ? { defaultSize: model.imageGeneration.geometry.sizes[0] } : {}
 	})]));
 	return {
@@ -38,7 +45,12 @@ function buildXopcCloudImageGenerationProvider() {
 		async generateImage(request) {
 			const executor = executors.get(request.model);
 			if (!executor) throw new Error(`Image model is not available from XOPC Model Service: ${request.model}`);
-			return executor.generateImage(request);
+			try {
+				return await trackCloudCapabilityUsage(request.model, "images.generate", () => executor.generateImage(request));
+			} catch (error) {
+				reportCloudCreditError(error instanceof Error ? error.message : String(error));
+				throw error;
+			}
 		}
 	};
 }

package/dist/src/agent/image/tool-model-config.js

@@ -1,7 +1,7 @@
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
 import { getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "../../config/schema.js";
-import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
 import { getDefaultModelSync, getModelsByProvider, init_providers, isProviderConfiguredSync, resolveModel } from "../../providers/index.js";
+import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
 import { resolveAgentModelFallbackValues, resolveAgentModelPrimaryValue } from "../../config/model-input.js";
 import { buildCapabilityPlansForConfig } from "../../capabilities/readiness/from-config.js";
 import "../../capabilities/readiness/index.js";

package/dist/src/agent/service.js

@@ -3,12 +3,12 @@ import { init_logger } from "../utils/logger.js";
 import { init_attachment_ref, parseNoteAttachmentTarget } from "../notes/attachment-ref.js";
 import { init_agent_scope, resolveAgentHomeDir, resolveDefaultAgentId } from "./agent-scope.js";
 import { extractTextContent } from "./context/workspace.js";
-import { configureTracing, flushTracing } from "../observability/runtime.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
-import { applyConfigOverrides } from "../config/runtime-overrides.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
-import { extractProfileAgentId, resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { init_providers, resolveModel } from "../providers/index.js";
+import { configureTracing, flushTracing } from "../observability/runtime.js";
+import { applyConfigOverrides } from "../config/runtime-overrides.js";
+import { extractProfileAgentId, resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { getProjectForSession } from "../projects/workspace.js";
 import { getUserTimezone } from "../user-model/repository.js";

package/dist/src/agent/session/session-inspector.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_workspace_defaults, resolveDefaultAgentWorkspaceDir } from "../../config/workspace-defaults.js";
-import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { init_providers, resolveModel } from "../../providers/index.js";
+import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { getExecutionEnvironmentForSession } from "../../execution-environments/subject.js";
 import { effectiveWorkspacePathForSession, projectWorkspacePath } from "../../session/session-workspace.js";
 import { getProjectForSession } from "../../projects/workspace.js";

package/dist/src/agent/tasks/task-judge-service.js

@@ -2,13 +2,13 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { TaskRepository, init_task_repository } from "../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
+import { extractAssistantText, getAssistantMessageErrorReason, stripCodeFences } from "../../providers/model-response.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
-import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { getApiKey, init_providers, resolveModel } from "../../providers/index.js";
+import { completeWithResolvedCredentials } from "../../providers/model-call.js";
+import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
 import { readWorkspaceRevision } from "../coding/workspace-revision.js";
-import { completeWithResolvedCredentials } from "../../providers/model-call.js";
-import { extractAssistantText, getAssistantMessageErrorReason, stripCodeFences } from "../../providers/model-response.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
 //#region src/agent/tasks/task-judge-service.ts
 init_schema();

package/dist/src/agent-config/schema.d.ts

@@ -163,6 +163,7 @@ export declare const RuntimePolicySchema: z.ZodObject<{
             "read-write": "read-write";
         }>>;
     }, z.core.$strict>], "mode">>;
+    cloudCreditLimitPerRunMicro: z.ZodOptional<z.ZodString>;
     maxTurns: z.ZodOptional<z.ZodNumber>;
     timeoutMs: z.ZodOptional<z.ZodNumber>;
     maxToolFailuresPerTurn: z.ZodOptional<z.ZodNumber>;
@@ -258,6 +259,7 @@ export declare const AgentDefaultsSchema: z.ZodObject<{
                 "read-write": "read-write";
             }>>;
         }, z.core.$strict>], "mode">>;
+        cloudCreditLimitPerRunMicro: z.ZodOptional<z.ZodString>;
         maxTurns: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
         maxToolFailuresPerTurn: z.ZodOptional<z.ZodNumber>;
@@ -476,6 +478,7 @@ export declare const AgentEntrySchema: z.ZodObject<{
                 "read-write": "read-write";
             }>>;
         }, z.core.$strict>], "mode">>;
+        cloudCreditLimitPerRunMicro: z.ZodOptional<z.ZodString>;
         maxTurns: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
         maxToolFailuresPerTurn: z.ZodOptional<z.ZodNumber>;
@@ -620,6 +623,7 @@ export declare const EffectiveAgentConfigSchema: z.ZodObject<{
                 "read-write": "read-write";
             }>>;
         }, z.core.$strict>], "mode">>;
+        cloudCreditLimitPerRunMicro: z.ZodOptional<z.ZodString>;
         maxTurns: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
         maxToolFailuresPerTurn: z.ZodOptional<z.ZodNumber>;

package/dist/src/agent-config/schema.js

@@ -114,6 +114,7 @@ var init_schema = __esmMin((() => {
 			network: z.boolean().default(false),
 			workspaceAccess: z.enum(["read-only", "read-write"]).default("read-only")
 		}).strict()]).optional(),
+		cloudCreditLimitPerRunMicro: z.string().regex(/^[1-9]\d{0,14}$/).optional(),
 		maxTurns: z.number().int().positive().optional(),
 		timeoutMs: z.number().int().positive().optional(),
 		maxToolFailuresPerTurn: z.number().int().positive().optional(),

package/dist/src/ai-assist/text-assist.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../providers/index.js";
 import { createExtensionAwareStreamFn } from "../providers/extension-stream-bridge.js";
 import { trackAiUsageStream } from "../usage/recorder.js";
 import { isLocalModelBaseUrl, resolveModelCallApiKey, resolveModelCallOptions } from "../providers/model-call.js";
-import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { normalizeContext } from "@earendil-works/pi-ai";
 //#region src/ai-assist/text-assist.ts
 init_providers();

package/dist/src/auth/credentials.js

@@ -2,11 +2,11 @@ import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
-import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
+import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
+import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
-import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { dirname, join } from "path";
 import { mkdir, readFile, readdir, rm } from "fs/promises";
 //#region src/auth/credentials.ts

package/dist/src/auth/model-credential-store.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { assertCurrentModelProvider, init_provider_policy, isRetiredModelProvider } from "../providers/provider-policy.js";
+import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { CredentialResolver, init_credentials } from "./credentials.js";
 //#region src/auth/model-credential-store.ts
 function normalizeProviderId(providerId) {

package/dist/src/auth/sync-provider-auth.js

@@ -1,7 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
-import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
 import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
+import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts

package/dist/src/chat-commands/builtins/config.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_paths, resolveConfigPath } from "../../config/paths.js";
 import { ConfigSchema, init_schema } from "../../config/schema.js";
+import { init_paths, resolveConfigPath } from "../../config/paths.js";
 import { commandRegistry } from "../registry.js";
 import { parseConfigValue } from "../config-value.js";
 import { getConfigValueAtPath, parseConfigPath, setConfigValueAtPath, unsetConfigValueAtPath } from "../config-paths.js";

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v241).`,
+		message: `SQLite schema v${status.dbVersion} (current release v242).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/doctor/checks/image-providers.js

@@ -1,6 +1,6 @@
 import { resolveModelsJsonPath } from "../../../../config/paths.js";
-import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { init_models_json, loadModelsJson } from "../../../../config/models-json.js";
+import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { classifyHost } from "../../../../media-shared/http/private-network.js";
 import "../../../../media-shared/http/index.js";
 import { existsSync } from "node:fs";

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,8 +1,8 @@
 import { AgentCatalogRepository, init_repository } from "../../../../agent-catalog/repository.js";
+import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
 import { PROVIDER_ENV_MAP, init_env_keys } from "../../../../providers/env-keys.js";
 import { getModelOAuthProviderIds, init_registry } from "../../../../auth/oauth/registry.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
-import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
 import { getDefaultAgentId, init_resolve_route } from "../../../../routing/resolve-route.js";
 import { loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";

package/dist/src/cli/commands/models.js

@@ -1,8 +1,11 @@
+import { creditDecimal } from "../../../packages/gateway-contract/src/cloud-credits.js";
+import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
 import { AgentCatalogService } from "../../agent-catalog/service.js";
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
+import { XopcCloudAccountService } from "../../providers/xopc-cloud-account-service.js";
 import { listImageProviderSpecs } from "../../../packages/image-providers/src/catalog.js";
 import "../../../packages/image-providers/src/index.js";
 import { loadConfig } from "../../config/loader.js";
@@ -20,6 +23,7 @@ init_credentials();
 init_schema();
 init_repository();
 init_providers();
+init_src();
 const IMAGE_GENERATION_IDS = new Set(listImageProviderSpecs().flatMap((provider) => provider.models.map((model) => model.id)));
 const VISION_IDS = new Set([
 	"gpt-6-sol",
@@ -222,6 +226,43 @@ function createModelsCommand(_ctx) {
 	cmd.command("set <model>").description("Set the default model").action(async (model) => {
 		await runModelsSet(model);
 	});
+	const cloud = cmd.command("cloud").description("Inspect XOPC Cloud Credit usage");
+	cloud.command("balance").option("--json", "Output the versioned Credit summary").action(async (options) => {
+		const summary = await new XopcCloudAccountService().getSummary();
+		if (!summary) throw new Error("XOPC Cloud is not configured");
+		if (options.json) {
+			console.log(JSON.stringify(summary, null, 2));
+			return;
+		}
+		console.log(`Available: ${creditDecimal(summary.balance.availableCreditMicro)} Credits`);
+		console.log(`Reserved: ${creditDecimal(summary.balance.usageReservedCreditMicro)} Credits`);
+		console.log(`Last 7 days: ${creditDecimal(summary.usage.chargedCreditMicro)} Credits`);
+		console.log(`Details: ${summary.links.details}`);
+	});
+	cloud.command("receipt <requestId>").option("--json", "Output the billing receipt").action(async (requestId, options) => {
+		const receipt = await new XopcCloudAccountService().getReceipt(requestId);
+		if (!receipt) throw new Error("XOPC Cloud is not configured");
+		if (options.json) {
+			console.log(JSON.stringify(receipt, null, 2));
+			return;
+		}
+		console.log(`State: ${receipt.state}`);
+		console.log(`Charged: ${receipt.chargedCreditMicro === null ? "pending" : `${creditDecimal(receipt.chargedCreditMicro)} Credits`}`);
+		console.log(`Reserved: ${creditDecimal(receipt.reservedCreditMicro)} Credits`);
+		console.log(`Released: ${creditDecimal(receipt.releasedCreditMicro)} Credits`);
+	});
+	cloud.command("budget <id>").option("--json", "Output the budget contract").action(async (id, options) => {
+		const budget = await new XopcCloudAccountService().getBudget(id);
+		if (!budget) throw new Error("XOPC Cloud is not configured");
+		if (options.json) {
+			console.log(JSON.stringify(budget, null, 2));
+			return;
+		}
+		console.log(`Limit: ${creditDecimal(budget.limitCreditMicro)} Credits`);
+		console.log(`Charged: ${creditDecimal(budget.chargedCreditMicro)} Credits`);
+		console.log(`Reserved: ${creditDecimal(budget.reservedCreditMicro)} Credits`);
+		console.log(`Remaining: ${creditDecimal(budget.remainingCreditMicro)} Credits`);
+	});
 	const auth = cmd.command("auth").description("Manage model provider auth");
 	auth.command("list").description("List model auth credentials").option("--provider <id>", "Filter by provider id").option("--json", "Output as JSON", false).action(async (options) => {
 		await runAuthList(options);

package/dist/src/cli/commands/onboard/model.js

@@ -1,11 +1,11 @@
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { AgentCatalogService } from "../../../agent-catalog/service.js";
-import { getApiKeyFromEnv } from "../../../providers/env-keys.js";
-import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getAgentDefaultModelRef, init_schema } from "../../../config/schema.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson, saveModelsJson } from "../../../config/models-json.js";
+import { getApiKeyFromEnv } from "../../../providers/env-keys.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getAllProviders, getModelsByProvider, getProviderDisplayName, init_providers, providerSupportsApiKey, providerSupportsOAuth } from "../../../providers/index.js";
 import { prepareUpdateGlobalDefaults } from "../../../gateway/global-defaults-admin.js";
 import { discoverProviderModels, isProviderApiDiscoverable } from "../../../providers/model-discovery.js";

package/dist/src/computer/runtime.js

@@ -1,9 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { COMPUTER_CONTROL_TOOL, ComputerAppSchema, ComputerObservationSchema, ComputerWindowSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { ComputerServiceLimitsSchema, computerModelProfile, init_model_policy } from "./model-policy.js";
 import { getApiKey, init_providers, resolveModel } from "../providers/index.js";
+import { rejectUnbudgetedCloudTransport } from "../providers/xopc-cloud-credit-budget.js";
+import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { enterComputerControl, leaveComputerControl } from "./control-guard.js";
 import { ComputerDiagnosticSchema, ComputerOperationError, computerDiagnostic, computerRecovery } from "./errors.js";
 import { createComputerModelAdapter, predictComputerStep, readComputerJson } from "./model-adapter.js";
@@ -130,6 +131,7 @@ var ComputerRuntime = class {
 			throw new Error("COMPUTER_DISABLED");
 		}
 		let s = this.sessions.get(owner);
+		if (s?.binding.modelRef.startsWith("xopc-cloud/")) rejectUnbudgetedCloudTransport("computer use");
 		if (input.op === "discover") {
 			const endpoint = this.resolveEndpoint(owner);
 			const id = randomUUID();
@@ -161,6 +163,7 @@ var ComputerRuntime = class {
 			let deployment;
 			let serviceLimits;
 			if (model.provider === "xopc-cloud") {
+				rejectUnbudgetedCloudTransport("computer use");
 				const response = await fetch(`${model.baseUrl.replace(/\/$/, "")}/models`, {
 					headers: { Authorization: `Bearer ${apiKey}` },
 					redirect: "error",

package/dist/src/config/index.js

@@ -2,14 +2,14 @@ import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXop
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
-import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
-import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
+import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
 import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
+import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
+import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
 import { assertConfigRewriteSafeForRunningGateway, loadConfig, saveConfig } from "./loader.js";

package/dist/src/config/loader.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
+import { ConfigSchema, init_schema } from "./schema.js";
 import { init_paths, resolveConfigPath } from "./paths.js";
 import { init_resolution, setActivePlatformDiscovery } from "../platform/resolution.js";
-import { ConfigSchema, init_schema } from "./schema.js";
 import { assertChannelPluginConfigs } from "./validate-channel-configs.js";
 import { isGatewayConfigLockedByAnotherProcessSync } from "../gateway/lock.js";
 import { dirname } from "path";

package/dist/src/config/models-json.js

@@ -1,9 +1,9 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
-import { init_paths, resolveModelsJsonPath } from "./paths.js";
-import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
+import { init_paths, resolveModelsJsonPath } from "./paths.js";
 import { init_model_policy, isComputerModel } from "../computer/model-policy.js";
+import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { existsSync, readFileSync } from "fs";
 import { z } from "zod";
 //#region src/config/models-json.ts

package/dist/src/endpoint-tools/policy.js

@@ -1,7 +1,8 @@
+import { DEVICE_EMPTY_INPUT_SCHEMA, ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA } from "../../packages/endpoint-tools-protocol/src/shared-schemas.js";
 import { BRIDGE_LIST_OUTPUT_SCHEMA, BRIDGE_READ_INPUT_SCHEMA, BRIDGE_READ_OUTPUT_SCHEMA } from "../../packages/endpoint-tools-protocol/src/bridge.js";
 import { LOCATION_INPUT_SCHEMA, LOCATION_OUTPUT_SCHEMA } from "../../packages/endpoint-tools-protocol/src/location.js";
 import { PERSONAL_TOOL_NAMES, personalDescriptor } from "../../packages/endpoint-tools-protocol/src/personal.js";
-import { DEVICE_EMPTY_INPUT_SCHEMA, DEVICE_POWER_OUTPUT_SCHEMA, DEVICE_STATE_OUTPUT_SCHEMA, ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson, init_src } from "../../packages/endpoint-tools-protocol/src/index.js";
+import { DEVICE_POWER_OUTPUT_SCHEMA, DEVICE_STATE_OUTPUT_SCHEMA, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson, init_src } from "../../packages/endpoint-tools-protocol/src/index.js";
 import { COMPUTER_INPUT_SCHEMA, COMPUTER_OUTPUT_SCHEMA, init_src as init_src$1 } from "../../packages/computer-control-contract/src/index.js";
 import { BROWSER_CONTROL_ENDPOINT_DESCRIPTOR, BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA, BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, BROWSER_RECORDING_ENDPOINT_DESCRIPTOR, BROWSER_RECORDING_ENDPOINT_INPUT_SCHEMA } from "../../packages/browser-control-contract/src/index.js";
 import Ajv2020 from "ajv/dist/2020.js";

package/dist/src/extensions/activation-context.js

@@ -1,5 +1,5 @@
-import { PROVIDER_ENV_MAP, init_env_keys } from "../providers/env-keys.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
+import { PROVIDER_ENV_MAP, init_env_keys } from "../providers/env-keys.js";
 import { init_providers, isProviderConfiguredSync } from "../providers/index.js";
 import { collectSttProviderConfigEntries } from "../voice/stt/config-slice.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -124,6 +124,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     network: boolean;
                     workspaceAccess: "read-only" | "read-write";
                 };
+                cloudCreditLimitPerRunMicro?: string;
                 maxTurns?: number;
                 timeoutMs?: number;
                 maxToolFailuresPerTurn?: number;

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,10 +1,10 @@
 import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
-import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { resolveShareConfig } from "../../../share/share-config.js";

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,9 +1,9 @@
 import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
 import { AgentCatalogService } from "../../../../agent-catalog/service.js";
-import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { ComputerConfigSchema, init_config } from "../../../../computer/config.js";
 import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
 import { BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
+import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
 import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";

package/dist/src/gateway/hono/routes/models.js

@@ -1,14 +1,15 @@
-import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
-import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { computerModelProfile, init_model_policy, isDedicatedComputerModel } from "../../../computer/model-policy.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../../../providers/model-catalog-store.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import "../../../providers/constants.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured, isProviderConfiguredSync } from "../../../providers/index.js";
+import { XopcCloudAccountError, XopcCloudAccountService } from "../../../providers/xopc-cloud-account-service.js";
+import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { buildCapabilityPlansForConfig } from "../../../capabilities/readiness/from-config.js";
 import "../../../capabilities/readiness/index.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
@@ -23,7 +24,6 @@ import { dismissXopcCloudOnboarding, getXopcCloudOnboardingStatus } from "../../
 import { getDomesticProviderPreset, getDomesticProviderPresetIds } from "../../../providers/domestic-presets.js";
 import { auditModelReferences } from "../../../providers/model-reference-auditor.js";
 import { getOnboardingFeaturedProviders, getProviderHint, getRecommendedModelsForProvider, isRecommendedModel, sortModelsForPicker, sortProvidersForPicker } from "../../../providers/presentation.js";
-import { XopcCloudAccountError, XopcCloudAccountService } from "../../../providers/xopc-cloud-account-service.js";
 //#region src/gateway/hono/routes/models.ts
 init_model_policy();
 init_models_json();

package/dist/src/gateway/hono/routes/observability.js

@@ -1,5 +1,5 @@
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { TracingConfigSchema, init_config } from "../../../observability/config.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { configureTracing, localStore, testLangfuse, tracingConfig, tracingStatus } from "../../../observability/runtime.js";
 import { z } from "zod";
 import { Hono } from "hono";