ambral 0.5.0 → 0.6.0

package/dist/ambral.js

@@ -18582,6 +18582,56 @@ __export(exports_SchemaTransformation, {
 });
 
 // ../../node_modules/.bun/effect@4.0.3/node_modules/effect/dist/BigDecimal.js
+var exports_BigDecimal = {};
+__export(exports_BigDecimal, {
+  truncate: () => truncate,
+  toNumberUnsafe: () => toNumberUnsafe,
+  toExponential: () => toExponential,
+  sumAll: () => sumAll,
+  sum: () => sum3,
+  subtract: () => subtract4,
+  sign: () => sign,
+  scale: () => scale,
+  roundTerminal: () => roundTerminal,
+  round: () => round2,
+  remainderUnsafe: () => remainderUnsafe,
+  remainder: () => remainder2,
+  normalize: () => normalize2,
+  negate: () => negate2,
+  multiplyAll: () => multiplyAll,
+  multiply: () => multiply,
+  min: () => min9,
+  max: () => max9,
+  makeNormalizedUnsafe: () => makeNormalizedUnsafe,
+  make: () => make25,
+  isZero: () => isZero2,
+  isPositive: () => isPositive2,
+  isNegative: () => isNegative2,
+  isLessThanOrEqualTo: () => isLessThanOrEqualTo6,
+  isLessThan: () => isLessThan6,
+  isInteger: () => isInteger,
+  isGreaterThanOrEqualTo: () => isGreaterThanOrEqualTo6,
+  isGreaterThan: () => isGreaterThan6,
+  isBigDecimal: () => isBigDecimal,
+  fromStringUnsafe: () => fromStringUnsafe2,
+  fromString: () => fromString2,
+  fromNumberUnsafe: () => fromNumberUnsafe,
+  fromNumber: () => fromNumber2,
+  fromBigInt: () => fromBigInt,
+  format: () => format6,
+  floor: () => floor,
+  equals: () => equals4,
+  divideUnsafe: () => divideUnsafe2,
+  divide: () => divide2,
+  digitAt: () => digitAt,
+  clamp: () => clamp6,
+  ceil: () => ceil,
+  between: () => between5,
+  abs: () => abs2,
+  Order: () => Order6,
+  Equivalence: () => Equivalence6
+});
+var DEFAULT_PRECISION = 100;
 var FINITE_INT_REGEXP = /^[+-]?\d+$/;
 var TypeId30 = "~effect/BigDecimal";
 var BigDecimalProto = {
@@ -18625,10 +18675,21 @@ var makeNormalized = (value, scale) => {
   o.normalized = o;
   return o;
 };
+var makeNormalizedUnsafe = (value, scale) => {
+  if (value !== bigint05 && value % bigint102 === bigint05) {
+    throw new RangeError("Value must be normalized");
+  }
+  return makeNormalized(value, scale);
+};
 var bigint05 = /* @__PURE__ */ BigInt(0);
 var bigint13 = /* @__PURE__ */ BigInt(1);
+var bigint_1 = /* @__PURE__ */ BigInt(-1);
+var bigint22 = /* @__PURE__ */ BigInt(2);
+var bigint5 = /* @__PURE__ */ BigInt(5);
+var bigint_5 = /* @__PURE__ */ BigInt(-5);
 var bigint102 = /* @__PURE__ */ BigInt(10);
 var zero3 = /* @__PURE__ */ makeNormalized(bigint05, 0);
+var one = /* @__PURE__ */ makeNormalizedUnsafe(bigint13, 0);
 var normalize2 = (self) => {
   if (self.normalized === undefined) {
     if (self.value === bigint05) {
@@ -18643,6 +18704,128 @@ var normalize2 = (self) => {
   }
   return self.normalized;
 };
+var scale = /* @__PURE__ */ dual(2, (self, scale2) => {
+  if (scale2 > self.scale) {
+    return make25(self.value * bigint102 ** BigInt(scale2 - self.scale), scale2);
+  }
+  if (scale2 < self.scale) {
+    return make25(self.value / bigint102 ** BigInt(self.scale - scale2), scale2);
+  }
+  return self;
+});
+var sum3 = /* @__PURE__ */ dual(2, (self, that) => {
+  if (that.value === bigint05) {
+    return self;
+  }
+  if (self.value === bigint05) {
+    return that;
+  }
+  if (self.scale > that.scale) {
+    return make25(scale(that, self.scale).value + self.value, self.scale);
+  }
+  if (self.scale < that.scale) {
+    return make25(scale(self, that.scale).value + that.value, that.scale);
+  }
+  return make25(self.value + that.value, self.scale);
+});
+var sumAll = (collection) => {
+  let out = zero3;
+  for (const n of collection) {
+    out = sum3(out, n);
+  }
+  return out;
+};
+var multiply = /* @__PURE__ */ dual(2, (self, that) => {
+  if (that.value === bigint05 || self.value === bigint05) {
+    return zero3;
+  }
+  return make25(self.value * that.value, self.scale + that.scale);
+});
+var multiplyAll = (collection) => {
+  let out = one;
+  for (const n of collection) {
+    if (n.value === bigint05) {
+      return zero3;
+    }
+    out = multiply(out, n);
+  }
+  return out;
+};
+var subtract4 = /* @__PURE__ */ dual(2, (self, that) => {
+  if (that.value === bigint05) {
+    return self;
+  }
+  if (self.value === bigint05) {
+    return make25(-that.value, that.scale);
+  }
+  if (self.scale > that.scale) {
+    return make25(self.value - scale(that, self.scale).value, self.scale);
+  }
+  if (self.scale < that.scale) {
+    return make25(scale(self, that.scale).value - that.value, that.scale);
+  }
+  return make25(self.value - that.value, self.scale);
+});
+var divideWithPrecision = (num, den, scale2, precision) => {
+  const numNegative = num < bigint05;
+  const denNegative = den < bigint05;
+  const negateResult = numNegative !== denNegative;
+  num = numNegative ? -num : num;
+  den = denNegative ? -den : den;
+  while (num < den) {
+    num *= bigint102;
+    scale2++;
+  }
+  let quotient = num / den;
+  let remainder2 = num % den;
+  if (remainder2 === bigint05) {
+    return make25(negateResult ? -quotient : quotient, scale2);
+  }
+  let count = `${quotient}`.length;
+  remainder2 *= bigint102;
+  while (remainder2 !== bigint05 && count < precision) {
+    const q = remainder2 / den;
+    const r = remainder2 % den;
+    quotient = quotient * bigint102 + q;
+    remainder2 = r * bigint102;
+    count++;
+    scale2++;
+  }
+  if (remainder2 !== bigint05) {
+    quotient += roundTerminal(remainder2 / den);
+  }
+  return make25(negateResult ? -quotient : quotient, scale2);
+};
+var roundTerminal = (n) => {
+  const pos = n >= bigint05 ? 0 : 1;
+  return Number(`${n}`[pos]) < 5 ? bigint05 : bigint13;
+};
+var divide2 = /* @__PURE__ */ dual(2, (self, that) => {
+  if (that.value === bigint05) {
+    return none2();
+  }
+  if (self.value === bigint05) {
+    return some3(zero3);
+  }
+  const scale2 = self.scale - that.scale;
+  if (self.value === that.value) {
+    return some3(make25(bigint13, scale2));
+  }
+  return some3(divideWithPrecision(self.value, that.value, scale2, DEFAULT_PRECISION));
+});
+var divideUnsafe2 = /* @__PURE__ */ dual(2, (self, that) => {
+  if (that.value === bigint05) {
+    throw new RangeError("Division by zero");
+  }
+  if (self.value === bigint05) {
+    return zero3;
+  }
+  const scale2 = self.scale - that.scale;
+  if (self.value === that.value) {
+    return make25(bigint13, scale2);
+  }
+  return divideWithPrecision(self.value, that.value, scale2, DEFAULT_PRECISION);
+});
 var MAX_COMPARISON_SCALE_ALIGNMENT = 100;
 var comparisonPowersOfTen = [bigint13];
 var compareBigInt = (self, that) => self === that ? 0 : self < that ? -1 : 1;
@@ -18673,7 +18856,48 @@ var compare = (self, that) => {
   return scaleDifference > 0 ? compareBigInt(self.value, that.value * powerOfTen) : compareBigInt(self.value * powerOfTen, that.value);
 };
 var Order6 = /* @__PURE__ */ make4(compare);
+var isLessThan6 = /* @__PURE__ */ isLessThan(Order6);
+var isLessThanOrEqualTo6 = /* @__PURE__ */ isLessThanOrEqualTo(Order6);
+var isGreaterThan6 = /* @__PURE__ */ isGreaterThan(Order6);
+var isGreaterThanOrEqualTo6 = /* @__PURE__ */ isGreaterThanOrEqualTo(Order6);
+var between5 = /* @__PURE__ */ isBetween(Order6);
+var clamp6 = /* @__PURE__ */ clamp(Order6);
+var min9 = /* @__PURE__ */ min2(Order6);
+var max9 = /* @__PURE__ */ max2(Order6);
 var sign = (n) => n.value === bigint05 ? 0 : n.value < bigint05 ? -1 : 1;
+var abs2 = (n) => n.value < bigint05 ? make25(-n.value, n.scale) : n;
+var negate2 = (n) => make25(-n.value, n.scale);
+var remainder2 = /* @__PURE__ */ dual(2, (self, divisor) => {
+  if (divisor.value === bigint05) {
+    return none2();
+  }
+  const max10 = Math.max(self.scale, divisor.scale);
+  return some3(make25(scale(self, max10).value % scale(divisor, max10).value, max10));
+});
+var remainderUnsafe = /* @__PURE__ */ dual(2, (self, divisor) => {
+  if (divisor.value === bigint05) {
+    throw new RangeError("Division by zero");
+  }
+  const max10 = Math.max(self.scale, divisor.scale);
+  return make25(scale(self, max10).value % scale(divisor, max10).value, max10);
+});
+var Equivalence6 = /* @__PURE__ */ make3((self, that) => compare(self, that) === 0);
+var equals4 = /* @__PURE__ */ dual(2, (self, that) => Equivalence6(self, that));
+var fromBigInt = (n) => make25(n, 0);
+var fromNumberUnsafe = (n) => {
+  return getOrThrowWith(fromNumber2(n), () => new RangeError(`Number must be finite, got ${n}`));
+};
+var fromNumber2 = (n) => {
+  if (!Number.isFinite(n)) {
+    return none2();
+  }
+  const string2 = `${n}`;
+  if (string2.includes("e")) {
+    return fromString2(string2);
+  }
+  const [lead, trail = ""] = string2.split(".");
+  return some3(make25(BigInt(`${lead}${trail}`), trail.length));
+};
 var fromString2 = (s) => {
   if (s === "") {
     return some3(zero3);
@@ -18707,11 +18931,14 @@ var fromString2 = (s) => {
   if (!FINITE_INT_REGEXP.test(digits)) {
     return none2();
   }
-  const scale = offset - exp;
-  if (!Number.isSafeInteger(scale)) {
+  const scale2 = offset - exp;
+  if (!Number.isSafeInteger(scale2)) {
     return none2();
   }
-  return some3(make25(BigInt(digits), scale));
+  return some3(make25(BigInt(digits), scale2));
+};
+var fromStringUnsafe2 = (s) => {
+  return getOrThrowWith(fromString2(s), () => new Error(`Invalid numerical string: ${s}`));
 };
 var format6 = (n) => {
   const normalized = normalize2(n);
@@ -18737,7 +18964,70 @@ var toExponential = (n) => {
   const exp = tail2.length - normalized.scale;
   return `${head4}${tail2 === "" ? "" : `.${tail2}`}e${exp >= 0 ? "+" : ""}${exp}`;
 };
+var toNumberUnsafe = (n) => Number(format6(n));
+var isInteger = (n) => normalize2(n).scale <= 0;
 var isZero2 = (n) => n.value === bigint05;
+var isNegative2 = (n) => n.value < bigint05;
+var isPositive2 = (n) => n.value > bigint05;
+var isBigDecimalArgs = (args2) => isBigDecimal(args2[0]);
+var round2 = /* @__PURE__ */ dual(isBigDecimalArgs, (self, options) => {
+  const mode = options?.mode ?? "half-from-zero";
+  const scale2 = options?.scale ?? 0;
+  switch (mode) {
+    case "ceil":
+      return ceil(self, scale2);
+    case "floor":
+      return floor(self, scale2);
+    case "to-zero":
+      return truncate(self, scale2);
+    case "from-zero":
+      return isPositive2(self) ? ceil(self, scale2) : floor(self, scale2);
+    case "half-ceil":
+      return floor(sum3(self, make25(bigint5, scale2 + 1)), scale2);
+    case "half-floor":
+      return ceil(sum3(self, make25(bigint_5, scale2 + 1)), scale2);
+    case "half-to-zero":
+      return isNegative2(self) ? floor(sum3(self, make25(bigint5, scale2 + 1)), scale2) : ceil(sum3(self, make25(bigint_5, scale2 + 1)), scale2);
+    case "half-from-zero":
+      return isNegative2(self) ? ceil(sum3(self, make25(bigint_5, scale2 + 1)), scale2) : floor(sum3(self, make25(bigint5, scale2 + 1)), scale2);
+  }
+  const halfCeil = floor(sum3(self, make25(bigint5, scale2 + 1)), scale2);
+  const halfFloor = ceil(sum3(self, make25(bigint_5, scale2 + 1)), scale2);
+  const digit = digitAt(halfCeil, scale2);
+  switch (mode) {
+    case "half-even":
+      return equals4(halfCeil, halfFloor) ? halfCeil : digit % bigint22 === bigint05 ? halfCeil : halfFloor;
+    case "half-odd":
+      return equals4(halfCeil, halfFloor) ? halfCeil : digit % bigint22 === bigint05 ? halfFloor : halfCeil;
+  }
+});
+var truncate = /* @__PURE__ */ dual(isBigDecimalArgs, (self, scale2 = 0) => {
+  if (self.scale <= scale2) {
+    return self;
+  }
+  return make25(self.value / bigint102 ** BigInt(self.scale - scale2), scale2);
+});
+var ceil = /* @__PURE__ */ dual(isBigDecimalArgs, (self, scale2 = 0) => {
+  const truncated = truncate(self, scale2);
+  if (isPositive2(self) && isLessThan6(truncated, self)) {
+    return sum3(truncated, make25(bigint13, scale2));
+  }
+  return truncated;
+});
+var digitAt = /* @__PURE__ */ dual(2, (self, scale2) => {
+  if (self.scale < scale2) {
+    return bigint05;
+  }
+  const scaled = self.value / bigint102 ** BigInt(self.scale - scale2);
+  return scaled % bigint102;
+});
+var floor = /* @__PURE__ */ dual(isBigDecimalArgs, (self, scale2 = 0) => {
+  const truncated = truncate(self, scale2);
+  if (isNegative2(self) && isGreaterThan6(truncated, self)) {
+    return sum3(truncated, make25(bigint_1, scale2));
+  }
+  return truncated;
+});
 
 // ../../node_modules/.bun/effect@4.0.3/node_modules/effect/dist/SchemaTransformation.js
 var Middleware = class extends Class {
@@ -21731,9 +22021,9 @@ var make29 = /* @__PURE__ */ gen4(function* () {
     if (additionalFds.length === 0) {
       return stdio;
     }
-    const maxFd = additionalFds.reduce((max9, {
+    const maxFd = additionalFds.reduce((max10, {
       fd
-    }) => Math.max(max9, fd), 2);
+    }) => Math.max(max10, fd), 2);
     for (let i = 3;i <= maxFd; i++) {
       stdio[i] = "ignore";
     }
@@ -22227,12 +22517,12 @@ var make30 = (impl) => {
     random: sync3(() => nextDoubleUnsafe()),
     randomBoolean: sync3(() => nextDoubleUnsafe() > 0.5),
     randomInt: sync3(() => nextIntUnsafe()),
-    randomBetween: (min9, max9) => sync3(() => nextBetween(min9, max9, nextDoubleUnsafe())),
-    randomIntBetween(min9, max9, options) {
+    randomBetween: (min10, max10) => sync3(() => nextBetween(min10, max10, nextDoubleUnsafe())),
+    randomIntBetween(min10, max10, options) {
       const extra = options?.halfOpen === true ? 0 : 1;
       return sync3(() => {
-        const minInt = Math.ceil(min9);
-        const maxInt = Math.floor(max9);
+        const minInt = Math.ceil(min10);
+        const maxInt = Math.floor(max10);
         return Math.floor(nextDoubleUnsafe() * (maxInt - minInt + extra)) + minInt;
       });
     },
@@ -22671,7 +22961,7 @@ var symlink2 = /* @__PURE__ */ (() => {
   const nodeSymlink = /* @__PURE__ */ effectify(NFS.symlink, /* @__PURE__ */ handleErrnoException("FileSystem", "symlink"), /* @__PURE__ */ handleBadArgument("symlink"));
   return (target, path) => nodeSymlink(target, path);
 })();
-var truncate2 = /* @__PURE__ */ (() => {
+var truncate3 = /* @__PURE__ */ (() => {
   const nodeTruncate = /* @__PURE__ */ effectify(NFS.truncate, /* @__PURE__ */ handleErrnoException("FileSystem", "truncate"), /* @__PURE__ */ handleBadArgument("truncate"));
   return (path, length2) => nodeTruncate(path, length2);
 })();
@@ -22763,7 +23053,7 @@ var makeFileSystem = /* @__PURE__ */ map9(/* @__PURE__ */ serviceOption2(WatchBa
   rename: rename2,
   stat: stat2,
   symlink: symlink2,
-  truncate: truncate2,
+  truncate: truncate3,
   utimes: utimes2,
   watch(path, options) {
     return watch2(backend, path, options);
@@ -22973,22 +23263,22 @@ __export(exports_Schema, {
   isLessThanOrEqualToDate: () => isLessThanOrEqualToDate,
   isLessThanOrEqualToBigInt: () => isLessThanOrEqualToBigInt,
   isLessThanOrEqualToBigDecimal: () => isLessThanOrEqualToBigDecimal,
-  isLessThanOrEqualTo: () => isLessThanOrEqualTo6,
+  isLessThanOrEqualTo: () => isLessThanOrEqualTo7,
   isLessThanDate: () => isLessThanDate,
   isLessThanBigInt: () => isLessThanBigInt,
   isLessThanBigDecimal: () => isLessThanBigDecimal,
-  isLessThan: () => isLessThan6,
+  isLessThan: () => isLessThan7,
   isInt32: () => isInt32,
   isInt: () => isInt,
   isIncluding: () => isIncluding,
   isGreaterThanOrEqualToDate: () => isGreaterThanOrEqualToDate,
   isGreaterThanOrEqualToBigInt: () => isGreaterThanOrEqualToBigInt,
   isGreaterThanOrEqualToBigDecimal: () => isGreaterThanOrEqualToBigDecimal,
-  isGreaterThanOrEqualTo: () => isGreaterThanOrEqualTo6,
+  isGreaterThanOrEqualTo: () => isGreaterThanOrEqualTo7,
   isGreaterThanDate: () => isGreaterThanDate,
   isGreaterThanBigInt: () => isGreaterThanBigInt,
   isGreaterThanBigDecimal: () => isGreaterThanBigDecimal,
-  isGreaterThan: () => isGreaterThan6,
+  isGreaterThan: () => isGreaterThan7,
   isGUID: () => isGUID,
   isFinite: () => isFinite3,
   isEndingWith: () => isEndingWith,
@@ -24407,7 +24697,7 @@ __export(exports_Headers, {
   fromInput: () => fromInput3,
   empty: () => empty13,
   TypeId: () => TypeId38,
-  Equivalence: () => Equivalence6,
+  Equivalence: () => Equivalence7,
   CurrentRedactedNames: () => CurrentRedactedNames
 });
 
@@ -24474,7 +24764,7 @@ var Proto7 = /* @__PURE__ */ Object.defineProperties(/* @__PURE__ */ Object.crea
   },
   [symbol2]: {
     value(that) {
-      return Equivalence6(this, that);
+      return Equivalence7(this, that);
     }
   },
   [symbol]: {
@@ -24490,7 +24780,7 @@ var Proto7 = /* @__PURE__ */ Object.defineProperties(/* @__PURE__ */ Object.crea
   }
 });
 var make36 = (input) => Object.assign(Object.create(Proto7), input);
-var Equivalence6 = /* @__PURE__ */ makeEquivalence4(/* @__PURE__ */ strictEqual());
+var Equivalence7 = /* @__PURE__ */ makeEquivalence4(/* @__PURE__ */ strictEqual());
 var empty13 = /* @__PURE__ */ Object.create(Proto7);
 var fromInput3 = (input) => {
   if (input === undefined) {
@@ -24601,7 +24891,7 @@ var Proto8 = {
     };
   },
   [symbol2](that) {
-    return Equivalence7(this, that);
+    return Equivalence8(this, that);
   },
   [symbol]() {
     return array(this.params.flat());
@@ -24649,7 +24939,7 @@ var fromInputNested = (input) => {
   }
   return out;
 };
-var Equivalence7 = /* @__PURE__ */ make3((a, b) => arrayEquivalence(a.params, b.params));
+var Equivalence8 = /* @__PURE__ */ make3((a, b) => arrayEquivalence(a.params, b.params));
 var arrayEquivalence = /* @__PURE__ */ makeEquivalence5(/* @__PURE__ */ makeEquivalence3([/* @__PURE__ */ strictEqual(), /* @__PURE__ */ strictEqual()]));
 var empty14 = /* @__PURE__ */ make37([]);
 var getFirst = /* @__PURE__ */ dual(2, (self, key) => findFirst3(self.params, ([k]) => k === key).pipe(map(([, value3]) => value3)));
@@ -28533,10 +28823,10 @@ var addressError = (input, message) => fail2(new NetAddressError({
   input,
   message
 }));
-var allIntegersInRange = (values3, max9) => {
+var allIntegersInRange = (values3, max10) => {
   for (let i = 0;i < values3.length; i++) {
     const n = values3[i];
-    if (!Number.isInteger(n) || n < 0 || n > max9)
+    if (!Number.isInteger(n) || n < 0 || n > max10)
       return false;
   }
   return true;
@@ -29223,9 +29513,9 @@ var interfaceError = (input, message) => fail2(new NetAddressError({
   message
 }));
 var make42 = (address, prefixLength) => {
-  const max9 = width(address);
-  if (!Number.isInteger(prefixLength) || prefixLength < 0 || prefixLength > max9) {
-    return interfaceError(address, `prefix length must be an integer from 0 through ${max9}`);
+  const max10 = width(address);
+  if (!Number.isInteger(prefixLength) || prefixLength < 0 || prefixLength > max10) {
+    return interfaceError(address, `prefix length must be an integer from 0 through ${max10}`);
   }
   const self = Object.assign(Object.create(IpInterfaceProto), {
     address,
@@ -29721,11 +30011,11 @@ var NonEmptyArray = /* @__PURE__ */ lambda((schema) => make44(new Arrays(false,
 function ArrayEnsure(schema) {
   const many = ArraySchema(schema);
   const to = ArraySchema(toType2(schema));
-  const one = decodeTo2(Tuple4([Unknown2]), transform2({
+  const one2 = decodeTo2(Tuple4([Unknown2]), transform2({
     decode: (value3) => [value3],
     encode: ([value3]) => value3
   }))(schema);
-  return make44(Union2([one, many]).pipe(decodeTo2(to)).ast, {
+  return make44(Union2([one2, many]).pipe(decodeTo2(to)).ast, {
     from: Union2([schema, many]),
     to
   });
@@ -30449,7 +30739,7 @@ function encodeNumberPayload(number3) {
   }
   return number3;
 }
-var isGreaterThan6 = /* @__PURE__ */ makeIsGreaterThan({
+var isGreaterThan7 = /* @__PURE__ */ makeIsGreaterThan({
   order: Number3,
   annotate: (exclusiveMinimum) => ({
     representation: {
@@ -30466,7 +30756,7 @@ var isGreaterThan6 = /* @__PURE__ */ makeIsGreaterThan({
     })
   })
 });
-var isGreaterThanOrEqualTo6 = /* @__PURE__ */ makeIsGreaterThanOrEqualTo({
+var isGreaterThanOrEqualTo7 = /* @__PURE__ */ makeIsGreaterThanOrEqualTo({
   order: Number3,
   annotate: (minimum) => ({
     representation: {
@@ -30483,7 +30773,7 @@ var isGreaterThanOrEqualTo6 = /* @__PURE__ */ makeIsGreaterThanOrEqualTo({
     })
   })
 });
-var isLessThan6 = /* @__PURE__ */ makeIsLessThan({
+var isLessThan7 = /* @__PURE__ */ makeIsLessThan({
   order: Number3,
   annotate: (exclusiveMaximum) => ({
     representation: {
@@ -30500,7 +30790,7 @@ var isLessThan6 = /* @__PURE__ */ makeIsLessThan({
     })
   })
 });
-var isLessThanOrEqualTo6 = /* @__PURE__ */ makeIsLessThanOrEqualTo({
+var isLessThanOrEqualTo7 = /* @__PURE__ */ makeIsLessThanOrEqualTo({
   order: Number3,
   annotate: (maximum) => ({
     representation: {
@@ -30591,7 +30881,7 @@ function isInt(annotations2) {
   });
 }
 var Int = /* @__PURE__ */ Number7.check(/* @__PURE__ */ isInt());
-var Natural = /* @__PURE__ */ Int.check(/* @__PURE__ */ isGreaterThanOrEqualTo6(0));
+var Natural = /* @__PURE__ */ Int.check(/* @__PURE__ */ isGreaterThanOrEqualTo7(0));
 function isInt32(annotations2) {
   return new FilterGroup([isInt(), isBetween2({
     minimum: -2147483648,
@@ -32744,7 +33034,7 @@ var Headers = /* @__PURE__ */ declare(isHeaders, {
     importDeclarations: [`import * as Headers from "effect/http/Headers"`]
   }),
   expected: "Headers",
-  toEquivalence: () => Equivalence6,
+  toEquivalence: () => Equivalence7,
   toCodec: () => link3()(Record3(String7, String7), transform2({
     decode: fromInput3,
     encode: (headers) => ({
@@ -32763,7 +33053,7 @@ var UrlParams = /* @__PURE__ */ declare(isUrlParams, {
     importDeclarations: [`import * as UrlParams from "effect/http/UrlParams"`]
   }),
   expected: "UrlParams",
-  toEquivalence: () => Equivalence7,
+  toEquivalence: () => Equivalence8,
   toCodec: () => link3()(ArraySchema(Tuple4([String7, String7])), transform2({
     decode: make37,
     encode: (self) => self.params
@@ -34157,12 +34447,12 @@ var randomWith = (f) => withFiber2((fiber3) => succeed6(f(fiber3.getRef(Random2)
 var next2 = /* @__PURE__ */ randomWith((r) => r.nextDoubleUnsafe());
 var nextBoolean = /* @__PURE__ */ randomWith((r) => r.nextDoubleUnsafe() > 0.5);
 var nextInt = /* @__PURE__ */ randomWith((r) => r.nextIntUnsafe());
-var nextBetween2 = (min9, max9) => randomWith((r) => nextBetween(min9, max9, r.nextDoubleUnsafe()));
-var nextIntBetween = (min9, max9, options) => {
+var nextBetween2 = (min10, max10) => randomWith((r) => nextBetween(min10, max10, r.nextDoubleUnsafe()));
+var nextIntBetween = (min10, max10, options) => {
   const extra = options?.halfOpen === true ? 0 : 1;
   return randomWith((r) => {
-    const minInt = Math.ceil(min9);
-    const maxInt = Math.floor(max9);
+    const minInt = Math.ceil(min10);
+    const maxInt = Math.floor(max10);
     return Math.floor(r.nextDoubleUnsafe() * (maxInt - minInt + extra)) + minInt;
   });
 };
@@ -40071,7 +40361,7 @@ __export(exports_Argument, {
   map: () => map18,
   filterMap: () => filterMap9,
   filter: () => filter13,
-  between: () => between6,
+  between: () => between7,
   atMost: () => atMost2,
   atLeast: () => atLeast2,
   String: () => String13,
@@ -43233,12 +43523,12 @@ var handleToggleProcess = (input, state) => {
   }
 };
 var entriesToDisplay = (cursor, total, maxVisible) => {
-  const max9 = maxVisible === undefined ? total : maxVisible;
-  let startIndex = Math.min(total - max9, cursor - Math.floor(max9 / 2));
+  const max10 = maxVisible === undefined ? total : maxVisible;
+  let startIndex = Math.min(total - max10, cursor - Math.floor(max10 / 2));
   if (startIndex < 0) {
     startIndex = 0;
   }
-  const endIndex = Math.min(startIndex + max9, total);
+  const endIndex = Math.min(startIndex + max10, total);
   return {
     startIndex,
     endIndex
@@ -43459,32 +43749,32 @@ var variadic = (self, options3) => {
     parse: parse7
   });
 };
-var between5 = /* @__PURE__ */ dual(3, (self, min9, max9) => {
-  if (min9 < 0) {
+var between6 = /* @__PURE__ */ dual(3, (self, min10, max10) => {
+  if (min10 < 0) {
     throw new Error("between: min must be non-negative");
   }
-  if (max9 < min9) {
+  if (max10 < min10) {
     throw new Error("between: max must be greater than or equal to min");
   }
   return variadic(self, {
-    min: min9,
-    max: max9
+    min: min10,
+    max: max10
   });
 });
-var atMost = /* @__PURE__ */ dual(2, (self, max9) => {
-  if (max9 < 0) {
+var atMost = /* @__PURE__ */ dual(2, (self, max10) => {
+  if (max10 < 0) {
     throw new Error("atMost: max must be non-negative");
   }
   return variadic(self, {
-    max: max9
+    max: max10
   });
 });
-var atLeast = /* @__PURE__ */ dual(2, (self, min9) => {
-  if (min9 < 0) {
+var atLeast = /* @__PURE__ */ dual(2, (self, min10) => {
+  if (min10 < 0) {
     throw new Error("atLeast: min must be non-negative");
   }
   return variadic(self, {
-    min: min9
+    min: min10
   });
 });
 var filterMap8 = /* @__PURE__ */ dual(3, (self, filter12, onNone) => mapEffect4(self, fnUntraced2(function* (a) {
@@ -43705,9 +43995,9 @@ var variadic2 = /* @__PURE__ */ dual((args2) => isParam(args2[0]), (self, option
 var map18 = /* @__PURE__ */ dual(2, (self, f) => map17(self, f));
 var mapEffect5 = /* @__PURE__ */ dual(2, (self, f) => mapEffect4(self, f));
 var mapTryCatch2 = /* @__PURE__ */ dual(3, (self, f, onError5) => mapTryCatch(self, f, onError5));
-var atLeast2 = /* @__PURE__ */ dual(2, (self, min9) => atLeast(self, min9));
-var atMost2 = /* @__PURE__ */ dual(2, (self, max9) => atMost(self, max9));
-var between6 = /* @__PURE__ */ dual(3, (self, min9, max9) => between5(self, min9, max9));
+var atLeast2 = /* @__PURE__ */ dual(2, (self, min10) => atLeast(self, min10));
+var atMost2 = /* @__PURE__ */ dual(2, (self, max10) => atMost(self, max10));
+var between7 = /* @__PURE__ */ dual(3, (self, min10, max10) => between6(self, min10, max10));
 var withSchema2 = /* @__PURE__ */ dual(2, (self, schema2) => withSchema(self, schema2));
 var ChoiceWithValue2 = (name, choices) => ChoiceWithValue(argumentKind, name, choices);
 var withMetavar2 = /* @__PURE__ */ dual(2, (self, metavar) => withMetavar(self, metavar));
@@ -44909,7 +45199,7 @@ __export(exports_Flag, {
   map: () => map19,
   filterMap: () => filterMap10,
   filter: () => filter14,
-  between: () => between7,
+  between: () => between8,
   atMost: () => atMost3,
   atLeast: () => atLeast3,
   String: () => String14,
@@ -44956,9 +45246,9 @@ var withFallbackPrompt3 = /* @__PURE__ */ dual(2, (self, prompt) => withFallback
 var map19 = /* @__PURE__ */ dual(2, (self, f) => map17(self, f));
 var mapEffect6 = /* @__PURE__ */ dual(2, (self, f) => mapEffect4(self, f));
 var mapTryCatch3 = /* @__PURE__ */ dual(3, (self, f, onError5) => mapTryCatch(self, f, onError5));
-var atLeast3 = /* @__PURE__ */ dual(2, (self, min9) => atLeast(self, min9));
-var atMost3 = /* @__PURE__ */ dual(2, (self, max9) => atMost(self, max9));
-var between7 = /* @__PURE__ */ dual(3, (self, min9, max9) => between5(self, min9, max9));
+var atLeast3 = /* @__PURE__ */ dual(2, (self, min10) => atLeast(self, min10));
+var atMost3 = /* @__PURE__ */ dual(2, (self, max10) => atMost(self, max10));
+var between8 = /* @__PURE__ */ dual(3, (self, min10, max10) => between6(self, min10, max10));
 var filterMap10 = /* @__PURE__ */ dual(3, (self, f, onNone) => filterMap8(self, f, onNone));
 var filter14 = /* @__PURE__ */ dual(3, (self, predicate, onFalse) => filter12(self, predicate, onFalse));
 var orElse8 = /* @__PURE__ */ dual(2, (self, that) => orElse6(self, that));
@@ -45103,7 +45393,7 @@ var makeCommand = (options3) => {
           name: single.name,
           type: single.typeName ?? getTypeName(single.primitiveType),
           description: single.description,
-          required: !metadata.isOptional && (!metadata.isVariadic || exists(metadata.variadicMin, (min9) => min9 > 0)),
+          required: !metadata.isOptional && (!metadata.isVariadic || exists(metadata.variadicMin, (min10) => min10 > 0)),
           variadic: metadata.isVariadic
         });
       }
@@ -45919,17 +46209,17 @@ var consumeFlagValueWithTokens = (cursor, token, spec, negated = false) => {
 };
 var consumeKnownFlags = (tokens, registry) => {
   const flagMap = createEmptyFlagMap(registry.params);
-  const remainder2 = [];
+  const remainder3 = [];
   const errors = [];
   const cursor = makeCursor(tokens);
   for (let t = cursor.take();t; t = cursor.take()) {
     if (!isFlagToken(t)) {
-      remainder2.push(t);
+      remainder3.push(t);
       continue;
     }
     const resolved = resolveFlag(t, registry);
     if (!resolved) {
-      remainder2.push(t);
+      remainder3.push(t);
       continue;
     }
     const consumed = consumeFlagValue(cursor, t, resolved.param, resolved.negated);
@@ -45943,7 +46233,7 @@ var consumeKnownFlags = (tokens, registry) => {
   }
   return {
     flagMap,
-    remainder: remainder2,
+    remainder: remainder3,
     errors
   };
 };
@@ -45966,10 +46256,10 @@ var resolveFromRegistries = (token, registries) => {
   }
   return;
 };
-var preserveFlag = (remainder2, cursor, token, resolved) => {
-  remainder2.push(token);
+var preserveFlag = (remainder3, cursor, token, resolved) => {
+  remainder3.push(token);
   const consumed = consumeFlagValueWithTokens(cursor, token, resolved.param, resolved.negated);
-  remainder2.push(...consumed.tokens);
+  remainder3.push(...consumed.tokens);
 };
 var localFlagWouldPrecedeSubcommand = (token, remainingTokens, resolved, subIndex, registries) => {
   const cursor = makeCursor(remainingTokens);
@@ -45996,25 +46286,25 @@ var consumeGlobalFlags = (tokens, command, registry) => {
     const inheritedRegistry = createFlagRegistry(extractContextFlagParams(command2));
     const subIndex = buildSubcommandIndex(command2.subcommands);
     const cursor = makeCursor(tokens2);
-    const remainder2 = [];
+    const remainder3 = [];
     let awaitingFirstValue = true;
     for (let token = cursor.take();token; token = cursor.take()) {
       if (isFlagToken(token)) {
         const ignored = resolveFromRegistries(token, ignoredRegistries);
         if (ignored !== undefined) {
-          preserveFlag(remainder2, cursor, token, ignored);
+          preserveFlag(remainder3, cursor, token, ignored);
           continue;
         }
         const inherited = resolveFlag(token, inheritedRegistry);
         if (inherited !== undefined) {
-          preserveFlag(remainder2, cursor, token, inherited);
+          preserveFlag(remainder3, cursor, token, inherited);
           continue;
         }
         const local = resolveFlag(token, localRegistry);
         const global = resolveFlag(token, registry);
         if (local !== undefined) {
           if (global === undefined || !awaitingFirstValue || !localFlagWouldPrecedeSubcommand(token, cursor.rest(), local, subIndex, [localRegistry, inheritedRegistry, registry])) {
-            preserveFlag(remainder2, cursor, token, local);
+            preserveFlag(remainder3, cursor, token, local);
             continue;
           }
         }
@@ -46029,21 +46319,21 @@ var consumeGlobalFlags = (tokens, command, registry) => {
           }
           continue;
         }
-        remainder2.push(token);
+        remainder3.push(token);
         continue;
       }
       if (token._tag === "Value" && awaitingFirstValue) {
         const sub = subIndex.get(token.value);
         if (sub !== undefined) {
-          remainder2.push(token);
-          remainder2.push(...consumeLevel(cursor.rest(), sub, [...ignoredRegistries, inheritedRegistry]));
-          return remainder2;
+          remainder3.push(token);
+          remainder3.push(...consumeLevel(cursor.rest(), sub, [...ignoredRegistries, inheritedRegistry]));
+          return remainder3;
         }
         awaitingFirstValue = false;
       }
-      remainder2.push(token);
+      remainder3.push(token);
     }
-    return remainder2;
+    return remainder3;
   };
   return {
     flagMap,
@@ -46685,7 +46975,7 @@ var runWith2 = (command, config) => {
     const globalRegistry = createFlagRegistry(allFlagParams.filter(isFlagParam));
     const {
       flagMap,
-      remainder: remainder2,
+      remainder: remainder3,
       errors: globalFlagErrors
     } = consumeGlobalFlags(tokens, command, globalRegistry);
     const emptyArgs = {
@@ -46693,7 +46983,7 @@ var runWith2 = (command, config) => {
       arguments: []
     };
     const parsedArgs = yield* parseArgs({
-      tokens: remainder2,
+      tokens: remainder3,
       trailingOperands
     }, command);
     const commandPath = [command.name, ...getCommandPath(parsedArgs)];
@@ -46785,7 +47075,7 @@ var runWith2 = (command, config) => {
 // package.json
 var package_default = {
   name: "ambral",
-  version: "0.5.0",
+  version: "0.6.0",
   license: "UNLICENSED",
   type: "module",
   description: "The `ambral` command: signs in through the browser, then calls the platform API as that person.",
@@ -50214,9 +50504,9 @@ var read2 = exports_Effect.fnUntraced(function* (schema2, org) {
 // ../core/src/Org/OrgAccess.ts
 var Slug = exports_Schema.NonEmptyString.pipe(exports_Schema.brand("OrgSlug")).annotate({ identifier: "OrgSlug" });
 var Name = exports_Schema.NonEmptyString.pipe(exports_Schema.brand("OrgName")).annotate({ identifier: "OrgName" });
-var State3 = exports_Schema.Literals(["pending", "active", "suspended"]).annotate({ identifier: "OrgAccessState" });
+var State3 = exports_Schema.Literals(["active", "suspended"]).annotate({ identifier: "OrgAccessState" });
 var fields = {
-  access: State3.pipe(exports_Schema.withDecodingDefaultKey(exports_Effect.succeed("pending")))
+  access: State3.pipe(exports_Schema.withDecodingDefaultKey(exports_Effect.succeed("active")))
 };
 var Fields = exports_Schema.Struct(fields);
 
@@ -50333,7 +50623,7 @@ class Unauthorized extends exports_Schema.TaggedError()("Unauthorized", {}, {
 }
 
 class OrgNotEnabled extends exports_Schema.TaggedError()("OrgNotEnabled", {
-  state: State3.pick(["pending", "suspended"])
+  state: State3.pick(["suspended"])
 }, { httpApiStatus: 403 }) {
 }
 
@@ -51001,7 +51291,7 @@ var isRelease = (version) => version.pre === undefined;
 var header = "ambral-cli-version";
 var minimumHeader = "ambral-cli-minimum";
 var Version4 = exports_Schema.String.check(exports_Schema.makeFilter((version) => exports_Option.isSome(parse7(version)) || "a semantic version")).pipe(exports_Schema.brand("CliVersion")).annotate({ identifier: "CliVersion" });
-var minimum = undefined;
+var minimum = Version4.make("0.6.0");
 
 class Outdated extends exports_Schema.TaggedError()("CliOutdated", {
   minimum: Version4
@@ -51033,10 +51323,10 @@ var exports_ApiKey = {};
 __export(exports_ApiKey, {
   unavailable: () => unavailable3,
   unauthorized: () => unauthorized,
+  sync: () => sync7,
   suspend: () => suspend7,
   start: () => start2,
   revoke: () => revoke,
-  retrySyncs: () => retrySyncs,
   prefix: () => prefix4,
   list: () => list6,
   issue: () => issue,
@@ -51052,20 +51342,16 @@ __export(exports_ApiKey, {
   Summary: () => Summary3,
   Start: () => Start,
   START_LENGTH: () => START_LENGTH,
-  RetryError: () => RetryError,
   Plaintext: () => Plaintext2,
   NotFound: () => NotFound7,
   Name: () => Name3,
   NAME_MAX_LENGTH: () => NAME_MAX_LENGTH,
-  LIVE_PASS: () => LIVE_PASS,
   Kind: () => Kind,
   KEY_LENGTH: () => KEY_LENGTH,
   InferenceEntry: () => InferenceEntry,
   Hash: () => Hash2,
-  GRACE: () => GRACE,
   Created: () => Created3,
-  CreateInput: () => CreateInput2,
-  BATCH: () => BATCH
+  CreateInput: () => CreateInput2
 });
 
 // ../../node_modules/.bun/@noble+hashes@2.4.0/node_modules/@noble/hashes/_u64.js
@@ -51138,9 +51424,9 @@ function aexists(instance, checkFinished = true) {
 }
 function aoutput(out, instance) {
   abytes(out, undefined, "output");
-  const min9 = instance.outputLen;
-  if (!(out.length >= min9)) {
-    throw new RangeError('"output" expected length >= ' + min9);
+  const min10 = instance.outputLen;
+  if (!(out.length >= min10)) {
+    throw new RangeError('"output" expected length >= ' + min10);
   }
 }
 function u32(arr) {
@@ -51476,373 +51762,179 @@ class _SHA256 extends SHA2_32B {
   }
 }
 var sha256 = /* @__PURE__ */ createHasher(() => new _SHA256, /* @__PURE__ */ oidNist(1));
-// ../../node_modules/.bun/effect@4.0.3/node_modules/effect/dist/persistence/KeyValueStore.js
-var exports_KeyValueStore = {};
-__export(exports_KeyValueStore, {
-  toSchemaStore: () => toSchemaStore,
-  prefix: () => prefix3,
-  makeStringOnly: () => makeStringOnly,
-  make: () => make69,
-  layerStorage: () => layerStorage,
-  layerSql: () => layerSql,
-  layerMemory: () => layerMemory,
-  layerFileSystem: () => layerFileSystem,
-  KeyValueStoreError: () => KeyValueStoreError,
-  KeyValueStore: () => KeyValueStore
-});
-var TypeId74 = "~effect/persistence/KeyValueStore";
-var ErrorTypeId = "~effect/persistence/KeyValueStore/KeyValueStoreError";
+// ../core/src/internal/uuid.ts
+var uuid = exports_Crypto.Crypto.use((crypto2) => crypto2.randomUUIDv4()).pipe(exports_Effect.orDie);
 
-class KeyValueStoreError extends (/* @__PURE__ */ TaggedError2("KeyValueStoreError")) {
-  [ErrorTypeId] = ErrorTypeId;
-}
-var KeyValueStore = /* @__PURE__ */ Service("effect/persistence/KeyValueStore");
-var make69 = (options4) => KeyValueStore.of({
-  [TypeId74]: TypeId74,
-  has: (key) => map9(options4.get(key), isNotUndefined),
-  isEmpty: map9(options4.size, (size8) => size8 === 0),
-  modify: (key, f) => flatMap6(options4.get(key), (o) => {
-    if (o === undefined) {
-      return undefined_2;
-    }
-    const newValue = f(o);
-    return as3(options4.set(key, newValue), newValue);
-  }),
-  modifyUint8Array: (key, f) => flatMap6(options4.getUint8Array(key), (o) => {
-    if (o === undefined) {
-      return undefined_2;
-    }
-    const newValue = f(o);
-    return as3(options4.set(key, newValue), newValue);
-  }),
-  ...options4
-});
-var makeStringOnly = (options4) => {
-  const encoder6 = new TextEncoder;
-  return make69({
-    ...options4,
-    getUint8Array: (key) => options4.get(key).pipe(map9(map20((value5) => match2(decode2(value5), {
-      onFailure: () => encoder6.encode(value5),
-      onSuccess: identity
-    })))),
-    set: (key, value5) => typeof value5 === "string" ? options4.set(key, value5) : suspend3(() => options4.set(key, encode2(value5)))
+// ../core/src/Billing/Pricing.ts
+var Usd = exports_Schema.BigDecimalFromString.check(exports_Schema.isGreaterThanOrEqualToBigDecimal(exports_BigDecimal.fromBigInt(0n))).pipe(exports_Schema.brand("Usd")).annotate({ identifier: "Usd" });
+var Price = exports_Schema.Struct({
+  inputPerMTok: Usd,
+  outputPerMTok: Usd,
+  cacheReadPerMTok: exports_Schema.optional(Usd),
+  cacheWritePerMTok: exports_Schema.optional(Usd)
+}).annotate({ identifier: "Price" });
+var TokenCount = exports_Schema.Int.check(exports_Schema.isGreaterThanOrEqualTo(0)).pipe(exports_Schema.brand("TokenCount")).annotate({
+  identifier: "TokenCount"
+});
+var Tokens = exports_Schema.Struct({
+  input: TokenCount,
+  output: TokenCount,
+  cacheRead: TokenCount,
+  cacheWrite: TokenCount
+}).annotate({ identifier: "Tokens" });
+var tokenCount = (count2) => TokenCount.make(Math.max(0, count2));
+var tokensOf = (usage) => {
+  const cacheRead = usage.prompt_tokens_details?.cached_tokens ?? 0;
+  const cacheWrite = usage.prompt_tokens_details?.cache_write_tokens ?? 0;
+  return {
+    input: tokenCount(usage.prompt_tokens - cacheRead - cacheWrite),
+    output: tokenCount(usage.completion_tokens),
+    cacheRead: tokenCount(cacheRead),
+    cacheWrite: tokenCount(cacheWrite)
+  };
+};
+var CHARGE_DECIMAL_PLACES = 12;
+var PER_MILLION_SCALE = 6;
+var costOf = (count2, perMTok) => exports_BigDecimal.multiply(exports_BigDecimal.fromBigInt(BigInt(count2)), perMTok);
+var charge = (tokens, price) => {
+  const perMillion = exports_BigDecimal.sum(exports_BigDecimal.sum(costOf(tokens.input, price.inputPerMTok), costOf(tokens.output, price.outputPerMTok)), exports_BigDecimal.sum(costOf(tokens.cacheRead, price.cacheReadPerMTok ?? price.inputPerMTok), costOf(tokens.cacheWrite, price.cacheWritePerMTok ?? price.inputPerMTok)));
+  const total = exports_BigDecimal.make(perMillion.value, perMillion.scale + PER_MILLION_SCALE);
+  return Usd.make(exports_BigDecimal.normalize(exports_BigDecimal.round(total, { scale: CHARGE_DECIMAL_PLACES, mode: "half-from-zero" })));
+};
+var PriceId = exports_Schema.NonEmptyString.pipe(exports_Schema.brand("PriceId")).annotate({ identifier: "PriceId" });
+var Note = exports_Schema.NonEmptyString.pipe(exports_Schema.brand("PriceNote")).annotate({ identifier: "PriceNote" });
+var Basis = exports_Schema.TaggedUnion({
+  PassThrough: {},
+  Set: { actor: Actor, note: Note }
+}).annotate({ identifier: "PriceBasis" });
+var Row = exports_Schema.Struct({
+  id: PriceId,
+  model: ModelId,
+  effectiveAt: EpochMillis,
+  price: Price,
+  listPrice: exports_Schema.optional(Price),
+  basis: Basis
+}).annotate({ identifier: "PriceRow" });
+var Decided2 = Row.mapFields(exports_Struct.pick(["price", "listPrice", "basis"]));
+var samePrice = exports_Schema.toEquivalence(Price);
+var next3 = (current, listed) => {
+  if (listed === undefined)
+    return exports_Option.none();
+  const passThrough = exports_Option.some({
+    price: listed,
+    listPrice: listed,
+    basis: Basis.cases.PassThrough.make({})
+  });
+  if (current === undefined)
+    return passThrough;
+  return exports_Match.valueTags(current.basis, {
+    PassThrough: () => current.listPrice !== undefined && samePrice(current.listPrice, listed) ? exports_Option.none() : passThrough,
+    Set: () => exports_Option.none()
   });
 };
-var prefix3 = /* @__PURE__ */ dual(2, (self, prefix4) => ({
-  ...self,
-  get: (key) => self.get(`${prefix4}${key}`),
-  getUint8Array: (key) => self.getUint8Array(`${prefix4}${key}`),
-  set: (key, value5) => self.set(`${prefix4}${key}`, value5),
-  remove: (key) => self.remove(`${prefix4}${key}`),
-  has: (key) => self.has(`${prefix4}${key}`),
-  modify: (key, f) => self.modify(`${prefix4}${key}`, f),
-  modifyUint8Array: (key, f) => self.modifyUint8Array(`${prefix4}${key}`, f)
+var ListPrice = exports_Schema.Struct({
+  model: ModelId,
+  listPrice: exports_Schema.optional(Price)
+}).annotate({ identifier: "ModelListPrice" });
+var Columns = Row.mapFields((fields2) => ({
+  ...fields2,
+  effectiveAt: Timestamp,
+  listPrice: nullAsAbsent(Price)
 }));
-var layerMemory = /* @__PURE__ */ sync2(KeyValueStore)(() => {
-  const store = new Map;
-  const encoder6 = new TextEncoder;
-  return make69({
-    get: (key) => sync3(() => {
-      const value5 = store.get(key);
-      return value5 === undefined ? undefined : typeof value5 === "string" ? value5 : encode2(value5);
-    }),
-    getUint8Array: (key) => sync3(() => {
-      const value5 = store.get(key);
-      return value5 === undefined ? undefined : typeof value5 === "string" ? encoder6.encode(value5) : value5;
-    }),
-    set: (key, value5) => sync3(() => store.set(key, value5)),
-    remove: (key) => sync3(() => store.delete(key)),
-    clear: sync3(() => store.clear()),
-    size: sync3(() => store.size)
-  });
+var encodeWritten = exports_Schema.encodeSync(Row.mapFields((fields2) => ({
+  ...fields2,
+  effectiveAt: Timestamp,
+  price: exports_Schema.fromJsonString(Price),
+  listPrice: nullAsAbsent(exports_Schema.fromJsonString(Price)),
+  basis: exports_Schema.fromJsonString(Basis)
+})));
+var selected = (sql) => sql`p.id, p.model_id AS model, p.effective_at AS "effectiveAt", p.price, p.list_price AS "listPrice", p.basis`;
+var latest = exports_Effect.fn("Pricing.latest")(function* (models) {
+  if (models.length === 0)
+    return new Map;
+  const sql = yield* exports_SqlClient.SqlClient;
+  const rows = yield* exports_SqlSchema.findAll({
+    Request: exports_Schema.Void,
+    Result: Columns,
+    execute: () => sql`
+          SELECT DISTINCT ON (p.model_id) ${selected(sql)}
+          FROM model_prices p
+          WHERE p.model_id IN ${sql.in(models)}
+          ORDER BY p.model_id, p.effective_at DESC, p.seq DESC
+        `
+  })(undefined).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die));
+  return new Map(rows.map((row) => [row.model, row]));
 });
-var layerFileSystem = (directory) => effect(KeyValueStore)(gen4(function* () {
-  const fs = yield* FileSystem;
-  const path = yield* Path;
-  const withKeyPath = (method, key, f) => key.length === 0 || key === "." || key === ".." ? fail6(new KeyValueStoreError({
-    method,
-    key,
-    message: `Invalid key ${key}`
-  })) : f(path.join(directory, encodeURIComponent(key)));
-  if (!(yield* fs.exists(directory))) {
-    yield* fs.makeDirectory(directory, {
-      recursive: true
-    });
-  }
-  return make69({
-    get: (key) => withKeyPath("get", key, (path2) => catchTag3(fs.readFileString(path2), "PlatformError", (cause) => cause.reason._tag === "NotFound" ? undefined_2 : fail6(new KeyValueStoreError({
-      method: "get",
-      key,
-      message: `Unable to get item with key ${key}`,
-      cause
-    })))),
-    getUint8Array: (key) => withKeyPath("getUint8Array", key, (path2) => catchTag3(fs.readFile(path2), "PlatformError", (cause) => cause.reason._tag === "NotFound" ? undefined_2 : fail6(new KeyValueStoreError({
-      method: "getUint8Array",
-      key,
-      message: `Unable to get item with key ${key}`,
-      cause
-    })))),
-    set: (key, value5) => withKeyPath("set", key, (path2) => mapError4(typeof value5 === "string" ? fs.writeFileString(path2, value5) : fs.writeFile(path2, value5), (cause) => new KeyValueStoreError({
-      method: "set",
-      key,
-      message: `Unable to set item with key ${key}`,
-      cause
-    }))),
-    remove: (key) => withKeyPath("remove", key, (path2) => mapError4(fs.remove(path2), (cause) => new KeyValueStoreError({
-      method: "remove",
-      key,
-      message: `Unable to remove item with key ${key}`,
-      cause
-    }))),
-    has: (key) => withKeyPath("has", key, (path2) => mapError4(fs.exists(path2), (cause) => new KeyValueStoreError({
-      method: "has",
-      key,
-      message: `Unable to check existence of item with key ${key}`,
-      cause
-    }))),
-    clear: mapError4(andThen4(fs.remove(directory, {
-      recursive: true
-    }), fs.makeDirectory(directory, {
-      recursive: true
-    })), (cause) => new KeyValueStoreError({
-      method: "clear",
-      message: `Unable to clear storage`,
-      cause
-    })),
-    size: matchEffect3(fs.readDirectory(directory), {
-      onSuccess: (files) => succeed6(files.length),
-      onFailure: (cause) => fail6(new KeyValueStoreError({
-        method: "size",
-        message: `Unable to get size`,
-        cause
-      }))
-    })
-  });
-}));
-var layerSql = (options4 = {}) => effect(KeyValueStore)(gen4(function* () {
-  const sql = (yield* SqlClient).withoutTransforms();
-  const table2 = sql(options4.table ?? "effect_key_value_store");
-  yield* sql.onDialectOrElse({
-    mysql: () => sql`
-          CREATE TABLE IF NOT EXISTS ${table2} (
-            id VARCHAR(191) PRIMARY KEY,
-            value BLOB NOT NULL,
-            value_type SMALLINT NOT NULL
-          )
-        `,
-    pg: () => sql`
-          CREATE TABLE IF NOT EXISTS ${table2} (
-            id TEXT PRIMARY KEY,
-            value BYTEA NOT NULL,
-            value_type SMALLINT NOT NULL
-          )
-        `,
-    mssql: () => sql`
-          IF NOT EXISTS (SELECT * FROM sysobjects WHERE name=${table2} AND xtype='U')
-          CREATE TABLE ${table2} (
-            id NVARCHAR(450) PRIMARY KEY,
-            value VARBINARY(MAX) NOT NULL,
-            value_type SMALLINT NOT NULL
-          )
-        `,
-    orElse: () => sql`
-          CREATE TABLE IF NOT EXISTS ${table2} (
-            id TEXT PRIMARY KEY,
-            value BLOB NOT NULL,
-            value_type INTEGER NOT NULL
-          )
+var Called = exports_Schema.Struct({ model: ModelId, at: EpochMillis });
+var encodeCalls = exports_Schema.encodeSync(exports_Schema.fromJsonString(exports_Schema.Array(Called)));
+var InEffect = Columns.mapFields((fields2) => ({ ...fields2, index: exports_Schema.Int }));
+var inEffect = exports_Effect.fn("Pricing.inEffect")(function* (calls) {
+  if (calls.length === 0)
+    return [];
+  const sql = yield* exports_SqlClient.SqlClient;
+  const found = yield* exports_SqlSchema.findAll({
+    Request: exports_Schema.Void,
+    Result: InEffect,
+    execute: () => sql`
+          SELECT (c.n - 1)::int AS index, ${selected(sql)}
+          FROM jsonb_array_elements(${encodeCalls(calls)}::jsonb) WITH ORDINALITY AS c(call, n)
+          JOIN LATERAL (
+            SELECT * FROM model_prices
+            WHERE model_id = c.call ->> 'model'
+              AND effective_at <= 'epoch'::timestamptz + (c.call ->> 'at')::bigint * interval '1 millisecond'
+            ORDER BY effective_at DESC, seq DESC
+            LIMIT 1
+          ) p ON true
         `
-  }).pipe(orDie3);
-  const upsert = sql.onDialectOrElse({
-    pg: () => (entry) => sql`
-          INSERT INTO ${table2} (id, value, value_type) VALUES (${entry.id}, ${entry.value}, ${entry.value_type})
-          ON CONFLICT (id) DO UPDATE SET value=EXCLUDED.value, value_type=EXCLUDED.value_type
-        `.unprepared,
-    mysql: () => (entry) => sql`
-          INSERT INTO ${table2} (id, value, value_type) VALUES (${entry.id}, ${entry.value}, ${entry.value_type})
-          ON DUPLICATE KEY UPDATE value=VALUES(value), value_type=VALUES(value_type)
-        `,
-    mssql: () => (entry) => sql`
-          MERGE ${table2} AS target
-          USING (SELECT ${entry.id} AS id, ${entry.value} AS value, ${entry.value_type} AS value_type) AS source
-          ON target.id = source.id
-          WHEN MATCHED THEN UPDATE SET value = source.value, value_type = source.value_type
-          WHEN NOT MATCHED THEN INSERT (id, value, value_type)
-          VALUES (source.id, source.value, source.value_type);
-        `,
-    orElse: () => (entry) => sql`
-          INSERT INTO ${table2} (id, value, value_type) VALUES (${entry.id}, ${entry.value}, ${entry.value_type})
-          ON CONFLICT(id) DO UPDATE SET value=excluded.value, value_type=excluded.value_type
-        `.unprepared
-  });
-  const encoder6 = new TextEncoder;
-  const decoder4 = new TextDecoder;
-  const ValueTypeString = 0;
-  const ValueTypeUint8Array = 1;
-  return make69({
-    get: (key) => sql`SELECT value, value_type FROM ${table2} WHERE id = ${key}`.pipe(mapError4((cause) => new KeyValueStoreError({
-      method: "get",
-      key,
-      message: `Unable to get item with key ${key}`,
-      cause
-    })), flatMap6((rows) => {
-      if (rows.length === 0) {
-        return undefined_2;
-      }
-      const row = rows[0];
-      switch (row.value_type) {
-        case ValueTypeString:
-          return succeed6(decoder4.decode(row.value));
-        case ValueTypeUint8Array:
-          return succeed6(encode2(row.value));
-        default:
-          return fail6(new KeyValueStoreError({
-            method: "get",
-            key,
-            message: `Invalid stored value type for key ${key}: ${row.value_type}`
-          }));
-      }
-    })),
-    getUint8Array: (key) => sql`SELECT value, value_type FROM ${table2} WHERE id = ${key}`.pipe(mapError4((cause) => new KeyValueStoreError({
-      method: "getUint8Array",
-      key,
-      message: `Unable to get item with key ${key}`,
-      cause
-    })), flatMap6((rows) => {
-      if (rows.length === 0) {
-        return undefined_2;
-      }
-      const row = rows[0];
-      switch (row.value_type) {
-        case ValueTypeString:
-          return succeed6(row.value);
-        case ValueTypeUint8Array:
-          return succeed6(row.value);
-        default:
-          return fail6(new KeyValueStoreError({
-            method: "getUint8Array",
-            key,
-            message: `Invalid stored value type for key ${key}: ${row.value_type}`
-          }));
-      }
-    })),
-    set: (key, value5) => upsert({
-      id: key,
-      value: typeof value5 === "string" ? encoder6.encode(value5) : value5,
-      value_type: typeof value5 === "string" ? ValueTypeString : ValueTypeUint8Array
-    }).pipe(mapError4((cause) => new KeyValueStoreError({
-      method: "set",
-      key,
-      message: `Unable to set item with key ${key}`,
-      cause
-    })), asVoid4),
-    remove: (key) => sql`DELETE FROM ${table2} WHERE id = ${key}`.pipe(mapError4((cause) => new KeyValueStoreError({
-      method: "remove",
-      key,
-      message: `Unable to remove item with key ${key}`,
-      cause
-    })), asVoid4),
-    clear: sql`DELETE FROM ${table2}`.pipe(mapError4((cause) => new KeyValueStoreError({
-      method: "clear",
-      message: `Unable to clear storage`,
-      cause
-    })), asVoid4),
-    size: sql`SELECT COUNT(*) as count FROM ${table2}`.pipe(mapError4((cause) => new KeyValueStoreError({
-      method: "size",
-      message: `Unable to get size`,
-      cause
-    })), map9((rows) => rows.length === 0 ? 0 : Number(rows[0].count)))
-  });
-}));
-var SchemaStoreTypeId = "~effect/persistence/KeyValueStore/SchemaStore";
-var toSchemaStore = (self, schema2) => {
-  const serializer = toCodecJson2(schema2);
-  const jsonSchema2 = fromJsonString2(serializer);
-  const decode7 = decodeEffect2(jsonSchema2);
-  const encode6 = encodeEffect2(jsonSchema2);
-  const get18 = (key) => flatMap6(self.get(key), match10({
-    onUndefined: () => succeedNone3,
-    onDefined: (value5) => asSome2(decode7(value5))
-  }));
-  const set9 = (key, value5) => flatMap6(encode6(value5), (json3) => self.set(key, json3));
-  const modify6 = (key, f) => flatMap6(get18(key), (o) => {
-    if (isNone2(o)) {
-      return succeedNone3;
-    }
-    const newValue = f(o.value);
-    return as3(set9(key, newValue), some3(newValue));
-  });
-  return {
-    [SchemaStoreTypeId]: SchemaStoreTypeId,
-    get: get18,
-    set: set9,
-    modify: modify6,
-    remove: self.remove,
-    clear: self.clear,
-    size: self.size,
-    has: self.has,
-    isEmpty: self.isEmpty
-  };
-};
-var layerStorage = (evaluate2) => sync2(KeyValueStore)(() => {
-  const storage = evaluate2();
-  return makeStringOnly({
-    get: (key) => try_3({
-      try: () => storage.getItem(key) ?? undefined,
-      catch: (cause) => new KeyValueStoreError({
-        key,
-        method: "get",
-        message: `Unable to get item with key ${key}`,
-        cause
-      })
-    }),
-    set: (key, value5) => try_3({
-      try: () => storage.setItem(key, value5),
-      catch: (cause) => new KeyValueStoreError({
-        key,
-        method: "set",
-        message: `Unable to set item with key ${key}`,
-        cause
-      })
-    }),
-    remove: (key) => try_3({
-      try: () => storage.removeItem(key),
-      catch: (cause) => new KeyValueStoreError({
-        key,
-        method: "remove",
-        message: `Unable to remove item with key ${key}`,
-        cause
-      })
-    }),
-    clear: try_3({
-      try: () => storage.clear(),
-      catch: (cause) => new KeyValueStoreError({
-        method: "clear",
-        message: `Unable to clear storage`,
-        cause
-      })
-    }),
-    size: try_3({
-      try: () => storage.length,
-      catch: (cause) => new KeyValueStoreError({
-        method: "size",
-        message: `Unable to get size`,
-        cause
-      })
-    })
+  })(undefined).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die));
+  const byIndex = new Map(found.map(({ index: index2, ...row }) => [index2, row]));
+  return calls.map((_, index2) => byIndex.get(index2));
+});
+var chargeAt = (tokens, row) => row === undefined || tokens === undefined ? Usd.make(exports_BigDecimal.fromBigInt(0n)) : charge(tokens, row.price);
+var chargesOf = exports_Effect.fn("Pricing.chargesOf")(function* (calls) {
+  const metered = calls.flatMap((call) => call === undefined ? [] : [call]);
+  const rows = yield* inEffect(metered.map(({ model, at }) => ({ model, at })));
+  const charges = new Map(metered.map((call, index2) => [call, chargeAt(call.tokens, rows[index2])]));
+  return calls.map((call) => call === undefined ? undefined : charges.get(call));
+});
+var withCharge = (call, charged) => charged === undefined || call.usage == null ? call : { ...call, usage: { ...call.usage, cost: exports_BigDecimal.toNumberUnsafe(charged) } };
+var listed = exports_Effect.fn("Pricing.listed")(function* (at, listings) {
+  const current = yield* latest(listings.map(({ model }) => model));
+  const decided = listings.flatMap(({ model, listPrice }) => exports_Option.toArray(exports_Option.map(next3(current.get(model), listPrice), (terms) => ({ model, terms }))));
+  const rows = yield* exports_Effect.forEach(decided, ({ model, terms }) => exports_Effect.map(uuid, (id2) => ({ id: PriceId.make(id2), model, effectiveAt: at, ...terms })));
+  yield* append4(rows);
+  return rows;
+});
+var append4 = exports_Effect.fnUntraced(function* (rows) {
+  if (rows.length === 0)
+    return;
+  const sql = yield* exports_SqlClient.SqlClient;
+  const encoded = rows.map((row) => {
+    const written = encodeWritten(row);
+    return {
+      id: written.id,
+      model_id: written.model,
+      effective_at: written.effectiveAt,
+      price: written.price,
+      list_price: written.listPrice,
+      basis: written.basis
+    };
   });
+  yield* sql`INSERT INTO model_prices ${sql.insert(encoded)}`;
 });
-// ../core/src/internal/uuid.ts
-var uuid = exports_Crypto.Crypto.use((crypto2) => crypto2.randomUUIDv4()).pipe(exports_Effect.orDie);
 
 // ../core/src/Org/OrgBilling.ts
-var BillTo = exports_Schema.Literals(["org", "ambral"]).annotate({ identifier: "OrgBillTo" });
+var BillTo = exports_Schema.Literals(["byok", "credits", "ambral"]).annotate({ identifier: "OrgBillTo" });
 var fields2 = {
-  billTo: BillTo.pipe(exports_Schema.withDecodingDefaultKey(exports_Effect.succeed("org")))
+  billTo: BillTo.pipe(exports_Schema.withDecodingDefaultKey(exports_Effect.succeed("credits"))),
+  allowance: Usd.pipe(exports_Schema.withDecodingDefaultKey(exports_Effect.succeed("0")))
 };
 var Fields2 = exports_Schema.Struct(fields2);
 var billTo = exports_Effect.fn("OrgBilling.billTo")(function* (org) {
-  return (yield* read2(Fields2, org)).billTo;
+  return (yield* get18(org)).billTo;
+});
+var get18 = exports_Effect.fn("OrgBilling.get")(function* (org) {
+  return yield* read2(Fields2, org);
 });
 
 // ../core/src/Org/OrgSettings.ts
@@ -51855,7 +51947,10 @@ var SetAccess = exports_Schema.TaggedStruct("SetAccess", { state: State3 }).anno
 var SetBillTo = exports_Schema.TaggedStruct("SetBillTo", { billTo: BillTo }).annotate({
   identifier: "SetBillTo"
 });
-var Change = exports_Schema.Union([SetAccess, SetBillTo]).annotate({ identifier: "OrgChange" });
+var SetAllowance = exports_Schema.TaggedStruct("SetAllowance", { allowance: Usd }).annotate({
+  identifier: "SetAllowance"
+});
+var Change = exports_Schema.Union([SetAccess, SetBillTo, SetAllowance]).annotate({ identifier: "OrgChange" });
 var Changed = exports_Schema.Struct({
   org: OrgId,
   change: Change,
@@ -51866,13 +51961,14 @@ var Changed = exports_Schema.Struct({
 }).annotate({ identifier: "OrgChanged" });
 var apply2 = (settings, change) => exports_Match.valueTags(change, {
   SetAccess: ({ state: state2 }) => ({ ...settings, access: state2 }),
-  SetBillTo: ({ billTo: billTo2 }) => ({ ...settings, billTo: billTo2 })
+  SetBillTo: ({ billTo: billTo2 }) => ({ ...settings, billTo: billTo2 }),
+  SetAllowance: ({ allowance }) => ({ ...settings, allowance })
 });
 var encodeSettings = exports_Schema.encodeSync(Settings);
 var json3 = (value5) => JSON.stringify(value5);
 var encodeChangedRow = exports_Schema.encodeSync(Changed.mapFields((fields3) => ({ ...fields3, at: Timestamp })));
 var defaults2 = exports_Schema.decodeSync(Settings)({});
-var get18 = exports_Effect.fn("OrgSettings.get")(function* (org) {
+var get19 = exports_Effect.fn("OrgSettings.get")(function* (org) {
   return yield* read2(Settings, org);
 });
 var lock = exports_Effect.fn("OrgSettings.lock")(function* (org) {
@@ -52020,7 +52116,8 @@ var Usage = loose({
   completion_tokens: exports_Schema.Int,
   total_tokens: exports_Schema.optionalKey(exports_Schema.Int),
   prompt_tokens_details: exports_Schema.optionalKey(exports_Schema.NullOr(loose({
-    cached_tokens: exports_Schema.optionalKey(exports_Schema.NullOr(exports_Schema.Int))
+    cached_tokens: exports_Schema.optionalKey(exports_Schema.NullOr(exports_Schema.Int)),
+    cache_write_tokens: exports_Schema.optionalKey(exports_Schema.NullOr(exports_Schema.Int))
   }))),
   completion_tokens_details: exports_Schema.optionalKey(exports_Schema.NullOr(loose({
     reasoning_tokens: exports_Schema.optionalKey(exports_Schema.NullOr(exports_Schema.Int))
@@ -52097,15 +52194,15 @@ __export(exports_Model, {
   lockUpstream: () => lockUpstream,
   list: () => list2,
   getStored: () => getStored,
-  get: () => get19,
+  get: () => get20,
   Stored: () => Stored,
   ReservedId: () => ReservedId,
-  Price: () => Price,
+  Offered: () => Offered,
   NotOffered: () => NotOffered,
   NotFound: () => NotFound3,
   Model: () => Model,
   Family: () => Family,
-  Columns: () => Columns,
+  Columns: () => Columns2,
   Base: () => Base
 });
 
@@ -52113,19 +52210,11 @@ __export(exports_Model, {
 var Transformation2 = exports_Schema.Union([]).annotate({ identifier: "Transformation" });
 
 // ../core/src/Model/Model.ts
-var UsdPerMTok = exports_Schema.Finite.check(exports_Schema.isGreaterThanOrEqualTo(0));
-var Price = exports_Schema.Struct({
-  inputPerMTok: UsdPerMTok,
-  outputPerMTok: UsdPerMTok,
-  cacheReadPerMTok: exports_Schema.optional(UsdPerMTok),
-  cacheWritePerMTok: exports_Schema.optional(UsdPerMTok)
-}).annotate({ identifier: "Price" });
 var Family = exports_Schema.NonEmptyString.pipe(exports_Schema.brand("ModelFamily")).annotate({ identifier: "ModelFamily" });
 var Base = exports_Schema.Struct({
   upstream: UpstreamId,
   upstreamModelId: UpstreamModelId,
-  family: Family,
-  price: Price
+  family: Family
 }).annotate({ identifier: "ModelBase" });
 var Model = exports_Schema.Struct({
   id: ModelId,
@@ -52134,6 +52223,10 @@ var Model = exports_Schema.Struct({
   parent: exports_Schema.optional(ModelId),
   provenance: exports_Schema.optional(exports_Schema.Json)
 }).annotate({ identifier: "Model" });
+var Offered = exports_Schema.Struct({
+  model: Model,
+  price: Price
+}).annotate({ identifier: "ModelOffered" });
 var Stored = exports_Schema.Struct({
   model: Model,
   withdrawn: exports_Schema.optional(EpochMillis)
@@ -52151,12 +52244,12 @@ class NotOffered extends exports_Schema.TaggedError()("ModelNotOffered", {
 }, { httpApiStatus: 409 }) {
 }
 var ReservedId = exports_Schema.Literals(["production"]).annotate({ identifier: "ReservedModelId" });
-var Columns = Model.mapFields((fields3) => ({
+var Columns2 = Model.mapFields((fields3) => ({
   ...fields3,
   parent: nullAsAbsent(ModelId),
   provenance: nullAsAbsent(exports_Schema.Json)
 }));
-var StoredRow = exports_Schema.Struct({ model: Columns, withdrawn: nullAsAbsent(Timestamp) });
+var StoredRow = exports_Schema.Struct({ model: Columns2, withdrawn: nullAsAbsent(Timestamp) });
 var findAll2 = exports_Effect.fnUntraced(function* (where, options4 = { lock: false }) {
   const sql = yield* exports_SqlClient.SqlClient;
   const query4 = exports_SqlSchema.findAll({
@@ -52183,7 +52276,7 @@ var getStored = exports_Effect.fn("Model.getStored")(function* (id2) {
     return yield* new NotFound3({ model: id2 });
   return stored;
 });
-var get19 = exports_Effect.fn("Model.get")(function* (id2) {
+var get20 = exports_Effect.fn("Model.get")(function* (id2) {
   return (yield* getStored(id2)).model;
 });
 var list2 = exports_Effect.fn("Model.list")(function* () {
@@ -52210,7 +52303,7 @@ __export(exports_TraceRecording, {
   productionTrace: () => productionTrace,
   planTurn: () => planTurn,
   outcome: () => outcome,
-  get: () => get20,
+  get: () => get21,
   flushAt: () => flushAt,
   attempt: () => attempt,
   Turn: () => Turn,
@@ -52224,13 +52317,96 @@ __export(exports_TraceRecording, {
   Outcome: () => Outcome,
   NotFound: () => NotFound4,
   INFO_KEY: () => INFO_KEY,
-  FlushMessage: () => FlushMessage,
+  FlushMessage: () => FlushMessage2,
   ExplicitSession: () => ExplicitSession,
   Delta: () => Delta2,
-  Cursor: () => Cursor,
+  Cursor: () => Cursor2,
   AmbralInfo: () => AmbralInfo
 });
 
+// ../core/src/Billing/Meter.ts
+var CallId = exports_Schema.NonEmptyString.pipe(exports_Schema.brand("CallId")).annotate({ identifier: "CallId" });
+var ProviderCostUsd = exports_Schema.Finite.pipe(exports_Schema.brand("ProviderCostUsd")).annotate({
+  identifier: "ProviderCostUsd"
+});
+var Supply = exports_Schema.Struct({
+  upstream: UpstreamId,
+  upstreamModelId: UpstreamModelId,
+  providerCost: exports_Schema.optional(ProviderCostUsd)
+}).annotate({ identifier: "MeterSupply" });
+var Burns = exports_Schema.Boolean.pipe(exports_Schema.brand("MeterBurns")).annotate({ identifier: "MeterBurns" });
+var Line = exports_Schema.Struct({
+  callId: CallId,
+  model: ModelId,
+  at: EpochMillis,
+  burns: Burns,
+  supply: Supply,
+  tokens: exports_Schema.optional(Tokens)
+}).annotate({ identifier: "MeterLine" });
+var burnsBy = {
+  Credits: exports_Option.some(Burns.make(true)),
+  Ambral: exports_Option.some(Burns.make(false)),
+  Byok: exports_Option.none()
+};
+var isSuccess7 = (status3) => status3 >= 200 && status3 < 300;
+var lineOf = (call) => exports_Option.map(exports_Option.filter(burnsBy[call.paidBy], () => isSuccess7(call.observed.status)), (burns) => ({
+  callId: call.callId,
+  model: call.model,
+  at: call.at,
+  burns,
+  supply: {
+    ...call.supply,
+    providerCost: exports_Option.getOrUndefined(exports_Option.map(exports_Option.fromNullishOr(call.observed.response?.usage?.cost), ProviderCostUsd.make))
+  },
+  tokens: call.observed.tokens
+}));
+var Cursor = exports_Schema.Int.check(exports_Schema.isGreaterThanOrEqualTo(0)).pipe(exports_Schema.brand("MeterCursor")).annotate({
+  identifier: "MeterCursor"
+});
+var byCursor = exports_Order.Number;
+var State5 = exports_Schema.Struct({
+  recorded: Cursor,
+  acked: Cursor,
+  alarmAt: exports_Schema.optional(EpochMillis)
+}).check(exports_Schema.makeFilter((state2) => state2.acked <= state2.recorded || { path: ["acked"], issue: "a flush acknowledges only lines recorded" })).annotate({ identifier: "MeterState" });
+var FLUSH_EVERY = exports_Duration.seconds(5);
+var flushEvery = exports_Config.Duration("CREDIT_FLUSH_EVERY").pipe(exports_Config.withDefault(FLUSH_EVERY));
+var Range = exports_Schema.Struct({ after: Cursor, upTo: Cursor }).annotate({ identifier: "MeterRange" });
+var FlushMessage = exports_Schema.Struct({ org: OrgId, cursor: Cursor }).annotate({ identifier: "MeterFlushMessage" });
+var Batch = exports_Schema.Struct({
+  org: OrgId,
+  lines: exports_Schema.Array(Line),
+  cursor: Cursor
+}).annotate({ identifier: "MeterBatch" });
+
+class MeterError extends exports_Schema.TaggedError()("MeterError", {
+  reason: exports_Schema.Literals(["Unavailable"]),
+  cause: exports_Schema.Defect()
+}) {
+}
+
+class CreditMeter extends exports_Context.Service()("@ambral/core/Billing/CreditMeter") {
+}
+var CHARGE_RETRY = exports_Schedule.exponential("200 millis");
+var CHARGE_RETRIES = 3;
+var charge2 = exports_Effect.fn("Meter.charge")(function* (org, line) {
+  const meter = yield* CreditMeter;
+  yield* meter.charge(org, line).pipe(exports_Effect.retry({ schedule: CHARGE_RETRY, times: CHARGE_RETRIES }));
+});
+var chargeCall = exports_Effect.fn("Meter.chargeCall")(function* (org, call) {
+  const line = lineOf(call);
+  if (exports_Option.isNone(line))
+    return;
+  if (line.value.tokens === undefined) {
+    yield* exports_Effect.logWarning("A call on Ambral's key ended without its usage, so it is free", {
+      org,
+      model: call.model,
+      reason: call.observed.error?.code
+    });
+  }
+  yield* charge2(org, line.value).pipe(exports_Effect.catchCause((cause) => exports_Effect.logWarning("Meter.charge failed", cause)));
+});
+
 // ../../node_modules/.bun/@noble+hashes@2.4.0/node_modules/@noble/hashes/_blake.js
 var BSIGMA = /* @__PURE__ */ Uint8Array.from([
   0,
@@ -53664,13 +53840,13 @@ var addToolCall = (calls, delta) => {
   const existing = calls.get(index2);
   const slot = { natives: new Map, input: "", ...existing, id: delta.id || existing?.id || "" };
   const kind = delta.type ?? (delta["custom"] != null ? "custom" : delta.function != null ? "function" : slot.type);
-  const next3 = new Map(calls);
+  const next4 = new Map(calls);
   if (kind === undefined)
-    return next3.set(index2, slot);
+    return next4.set(index2, slot);
   const deltaNative = delta[kind];
   const streamed = isObject2(deltaNative) ? deltaNative : {};
   const piece = streamed[kind === "custom" ? "input" : "arguments"];
-  return next3.set(index2, {
+  return next4.set(index2, {
     ...slot,
     type: kind,
     natives: new Map(slot.natives).set(kind, nativeOf(slot.natives.get(kind) ?? { name: "" }, streamed)),
@@ -53695,8 +53871,8 @@ var addChoice = (parser, choice2) => {
   };
 };
 var feed = (parser, chunk) => {
-  const next3 = { ...parser, head: parser.head ?? chunk, usage: chunk.usage ?? parser.usage };
-  return chunk.choices.filter((choice2) => choice2.index === 0).reduce(addChoice, next3);
+  const next4 = { ...parser, head: parser.head ?? chunk, usage: chunk.usage ?? parser.usage };
+  return chunk.choices.filter((choice2) => choice2.index === 0).reduce(addChoice, next4);
 };
 var toolCallWire = (slot) => {
   if (slot.type === undefined || !CLIENT_TOOL_TYPES.has(slot.type))
@@ -53748,7 +53924,8 @@ var ObservedResponse = exports_Schema.Struct({
   firstByteMs: exports_Schema.optional(Millis),
   durationMs: Millis,
   error: exports_Schema.optional(Error5),
-  response: exports_Schema.optional(Response2)
+  response: exports_Schema.optional(Response2),
+  tokens: exports_Schema.optional(Tokens)
 }).annotate({ identifier: "ObservedResponse" });
 var END_ERRORS = {
   done: undefined,
@@ -53818,12 +53995,12 @@ var concat3 = (a, b) => {
   return joined;
 };
 var drain4 = (state2) => {
-  let next3 = state2;
-  for (let bounds = eventEnd(next3.pending);bounds !== undefined; bounds = eventEnd(next3.pending)) {
-    const event = next3.pending.subarray(0, bounds.end);
-    next3 = Events({ ...onEvent(next3, event), pending: next3.pending.subarray(bounds.next) });
+  let next4 = state2;
+  for (let bounds = eventEnd(next4.pending);bounds !== undefined; bounds = eventEnd(next4.pending)) {
+    const event = next4.pending.subarray(0, bounds.end);
+    next4 = Events({ ...onEvent(next4, event), pending: next4.pending.subarray(bounds.next) });
   }
-  return next3;
+  return next4;
 };
 var feed2 = (state2, chunk, at) => {
   const firstByteAt = state2.firstByteAt ?? (chunk.length > 0 ? at : undefined);
@@ -53836,10 +54013,11 @@ var bodyText2 = (chunks2) => {
   const streaming = new TextDecoder;
   return chunks2.map((chunk) => streaming.decode(chunk, { stream: true })).join("") + streaming.decode();
 };
-var isSuccess7 = (status3) => status3 >= 200 && status3 < 300;
+var isSuccess8 = (status3) => status3 >= 200 && status3 < 300;
+var tokensOf2 = (usage) => usage == null ? undefined : tokensOf(usage);
 var readBody = (state2) => {
   const text3 = bodyText2(state2.chunks);
-  if (!isSuccess7(state2.status)) {
+  if (!isSuccess8(state2.status)) {
     return {
       error: exports_Option.match(decodeProviderError(text3), {
         onNone: () => ({ code: ErrorCode.make(String(state2.status)), message: "" }),
@@ -53847,16 +54025,18 @@ var readBody = (state2) => {
       })
     };
   }
-  return exports_Option.match(exports_Option.flatMap(decodeCompletion(text3), responseFromWire), {
+  const completion = decodeCompletion(text3);
+  return exports_Option.match(exports_Option.flatMap(completion, responseFromWire), {
     onNone: () => ({ error: malformed("The body") }),
-    onSome: (response) => ({ response })
+    onSome: (response) => ({ response, tokens: tokensOf2(exports_Option.getOrUndefined(completion)?.usage) })
   });
 };
 var readEvents = (state2, end3, at) => {
   const final = end3 === "done" && state2.pending.length > 0 ? onEvent(state2, state2.pending) : state2;
   return {
     response: final.parser.head === undefined ? undefined : finish(final.parser, at),
-    error: final.error
+    error: final.error,
+    tokens: tokensOf2(final.parser.usage)
   };
 };
 var elapsed = (from, to) => Millis.make(Math.max(0, to - from));
@@ -53870,7 +54050,8 @@ var finish2 = (state2, end3, at) => {
     firstByteMs: state2.firstByteAt === undefined ? undefined : elapsed(state2.receivedAt, state2.firstByteAt),
     durationMs: elapsed(state2.receivedAt, at),
     error: read3.error ?? END_ERRORS[end3],
-    response: read3.response
+    response: read3.response,
+    tokens: read3.tokens
   };
 };
 var modelCall = (request3, upstreamModel, observed, startedAt) => compact2({
@@ -53931,47 +54112,47 @@ var NodeKey = exports_Schema.Struct({
 var lookup3 = (index2, parent, toolsHash, message) => index2.get(key(parent, parent === null ? toolsHash : null, hash3(message)));
 var prepareTurn = (index2, prompt, tools) => {
   const toolsHash = hash2(tools);
-  const prefix4 = [];
+  const prefix3 = [];
   for (const message of prompt) {
-    const existing = lookup3(index2, prefix4.at(-1) ?? null, toolsHash, message);
+    const existing = lookup3(index2, prefix3.at(-1) ?? null, toolsHash, message);
     if (existing === undefined)
       break;
-    prefix4.push(existing);
+    prefix3.push(existing);
   }
-  return { prompt, tools, toolsHash, prefix: prefix4 };
+  return { prompt, tools, toolsHash, prefix: prefix3 };
 };
 var appending = (index2, turn, nextId) => {
-  const next3 = new Map(index2);
+  const next4 = new Map(index2);
   const nodes = [];
-  const prefix4 = [...turn.prefix];
-  while (prefix4.length < turn.prompt.length) {
-    const existing = lookup3(next3, prefix4.at(-1) ?? null, turn.toolsHash, turn.prompt[prefix4.length]);
+  const prefix3 = [...turn.prefix];
+  while (prefix3.length < turn.prompt.length) {
+    const existing = lookup3(next4, prefix3.at(-1) ?? null, turn.toolsHash, turn.prompt[prefix3.length]);
     if (existing === undefined)
       break;
-    prefix4.push(existing);
+    prefix3.push(existing);
   }
-  let parent = prefix4.at(-1) ?? null;
-  const append4 = (message, sampled) => {
+  let parent = prefix3.at(-1) ?? null;
+  const append5 = (message, sampled) => {
     const id2 = NodeId.make(nextId + nodes.length);
     const messageHash = hash3(message);
     const root = parent === null ? { toolsHash: turn.toolsHash, tools: turn.tools } : null;
     const node = fromStored({ message, parent: parent ?? undefined, tools: root?.tools, sampled });
     nodes.push({ id: id2, node, messageHash, root });
-    next3.set(key(parent, root?.toolsHash ?? null, messageHash), id2);
+    next4.set(key(parent, root?.toolsHash ?? null, messageHash), id2);
     return id2;
   };
-  for (const message of turn.prompt.slice(prefix4.length))
-    parent = append4(message, false);
-  return { next: next3, nodes, parent, append: append4 };
+  for (const message of turn.prompt.slice(prefix3.length))
+    parent = append5(message, false);
+  return { next: next4, nodes, parent, append: append5 };
 };
 var commitTurn = (index2, turn, reply, nextId) => {
-  const { next: next3, nodes, parent, append: append4 } = appending(index2, turn, nextId);
-  const node = lookup3(next3, parent, turn.toolsHash, reply) ?? append4(reply, true);
-  return { nodes, node, index: next3 };
+  const { next: next4, nodes, parent, append: append5 } = appending(index2, turn, nextId);
+  const node = lookup3(next4, parent, turn.toolsHash, reply) ?? append5(reply, true);
+  return { nodes, node, index: next4 };
 };
 var commitPrompt = (index2, turn, nextId) => {
-  const { next: next3, nodes, parent } = appending(index2, turn, nextId);
-  return { nodes, node: parent ?? undefined, index: next3 };
+  const { next: next4, nodes, parent } = appending(index2, turn, nextId);
+  return { nodes, node: parent ?? undefined, index: next4 };
 };
 var toolIdentity = (tool) => JSON.stringify([tool.namespace ?? null, tool.name, tool.type ?? "function"]);
 var mergeTools = (existing, added) => [
@@ -54186,7 +54367,7 @@ class MessageStore extends exports_Context.Service()("@ambral/core/Trace/Message
 }
 var encoder7 = new TextEncoder;
 var unavailable = (cause) => new StoreError({ reason: "Unavailable", cause });
-var layerSql2 = exports_Layer.effect(MessageStore, exports_Effect.gen(function* () {
+var layerSql = exports_Layer.effect(MessageStore, exports_Effect.gen(function* () {
   const sql = yield* exports_SqlClient.SqlClient;
   const find2 = exports_SqlSchema.findAll({
     Request: exports_Schema.Array(MessageHash),
@@ -54290,6 +54471,7 @@ var Turn = exports_Schema.Struct({
   tools: exports_Schema.Array(Tool2),
   reply: exports_Schema.optional(Assistant),
   call: ModelCall,
+  charged: exports_Schema.optional(Line),
   at: EpochMillis
 }).annotate({ identifier: "TraceRecordingTurn" });
 var promptVersion = (messages, tools) => {
@@ -54338,7 +54520,8 @@ var turnOf = (input) => {
   return {
     ...input.recordable.turn,
     reply: input.observed.response?.message,
-    call: modelCall(input.request, input.recordable.upstreamModel, input.observed, input.recordable.turn.at)
+    call: modelCall(input.request, input.recordable.upstreamModel, input.observed, input.recordable.turn.at),
+    charged: input.charged
   };
 };
 var planTurn = (graph, tools, turn) => {
@@ -54357,10 +54540,10 @@ var planTurn = (graph, tools, turn) => {
     return { nodes: commit.nodes, call: { ...turn.call, node: commit.node }, tools: merged };
   });
 };
-var Cursor = exports_Schema.Int.check(exports_Schema.isGreaterThanOrEqualTo(0)).pipe(exports_Schema.brand("TraceRecordingCursor")).annotate({ identifier: "TraceRecordingCursor" });
-var FlushMessage = exports_Schema.Struct({
+var Cursor2 = exports_Schema.Int.check(exports_Schema.isGreaterThanOrEqualTo(0)).pipe(exports_Schema.brand("TraceRecordingCursor")).annotate({ identifier: "TraceRecordingCursor" });
+var FlushMessage2 = exports_Schema.Struct({
   traceId: TraceId,
-  cursor: Cursor
+  cursor: Cursor2
 }).annotate({ identifier: "FlushMessage" });
 
 class RecorderError extends exports_Schema.TaggedError()("TraceRecorderError", {
@@ -54380,8 +54563,8 @@ var Delta2 = exports_Schema.Struct({
   status: Status4,
   settledAt: exports_Schema.optional(EpochMillis),
   nodes: exports_Schema.Array(exports_Schema.Struct({ id: NodeId, node: MessageNode })),
-  calls: exports_Schema.Array(exports_Schema.Struct({ index: CallIndex, ...StoredCall.fields })),
-  cursor: Cursor
+  calls: exports_Schema.Array(exports_Schema.Struct({ index: CallIndex, ...StoredCall.fields, charged: exports_Schema.optional(Line) })),
+  cursor: Cursor2
 }).check(settledAtMatchesStatus).annotate({ identifier: "TraceRecordingDelta" });
 var PublicId = exports_Schema.String.check(exports_Schema.isPattern(/^tr_[0-9a-f]{16}$/)).pipe(exports_Schema.brand("TracePublicId")).annotate({ identifier: "TracePublicId" });
 
@@ -54419,7 +54602,7 @@ var attempt = (made) => {
     info: { [INFO_KEY]: encodeInfo(info2) }
   };
 };
-var wholeDelta = (org, trace3, at) => {
+var wholeDelta = (org, trace3, at, charged = []) => {
   const { nodes = [], calls = [], ...rest } = trace3;
   return {
     org,
@@ -54427,10 +54610,12 @@ var wholeDelta = (org, trace3, at) => {
     status: "settled",
     settledAt: at,
     nodes: nodes.map((node, id2) => ({ id: NodeId.make(id2), node })),
-    calls: calls.map((call, index2) => ({ index: CallIndex.make(index2), call })),
-    cursor: Cursor.make(1)
+    calls: calls.map((call, index2) => ({ index: CallIndex.make(index2), call, charged: charged[index2] })),
+    cursor: Cursor2.make(1)
   };
 };
+var unavailable2 = (cause) => new StoreError({ reason: "Unavailable", cause });
+var priced = (calls) => chargesOf(calls.map(({ charged }) => charged)).pipe(exports_Effect.map((charges) => calls.map((entry, position) => ({ ...entry, call: withCharge(entry.call, charges[position]) }))), exports_Effect.mapError(unavailable2));
 var StoredNode = MessageNode.mapFields((fields3) => exports_Struct.omit(fields3, ["message"]));
 var encodeTrace = exports_Schema.encodeSync(StoredTrace);
 var encodeNode = exports_Schema.encodeSync(StoredNode);
@@ -54451,7 +54636,7 @@ var write2 = exports_Effect.fn("TraceRecording.write")(function* (delta) {
     message_hash: hash3(message),
     tools_hash: node.parent == null ? hash2(node.tools ?? []) : null
   }));
-  const calls = delta.calls.map(({ index: index2, call, prompt }) => ({
+  const calls = (yield* priced(delta.calls)).map(({ index: index2, call, prompt }) => ({
     trace_id: id2,
     idx: index2,
     call: json4(encodeCall(call)),
@@ -54479,7 +54664,7 @@ var write2 = exports_Effect.fn("TraceRecording.write")(function* (delta) {
           WHERE trace_id = ${id2} AND node_id IN ${sql.in(replies)} AND NOT sampled
         `;
     }
-  })).pipe(exports_Effect.mapError((cause) => new StoreError({ reason: "Unavailable", cause })));
+  })).pipe(exports_Effect.mapError(unavailable2));
 });
 var TraceRow = exports_Schema.Struct({ trace: StoredTrace });
 var NodeRow = exports_Schema.Struct({ node_id: NodeId, message_hash: MessageHash, node: StoredNode });
@@ -54492,8 +54677,7 @@ var graphOf = (id2, rows, bodies) => {
   return nodes.length === rows.length ? exports_Effect.succeed(nodes) : exports_Effect.die(`TraceRecording: trace ${id2}'s graph is incomplete`);
 };
 var TraceRequest = exports_Schema.Struct({ org: OrgId, id: TraceId });
-var unavailable2 = (cause) => new StoreError({ reason: "Unavailable", cause });
-var get20 = exports_Effect.fn("TraceRecording.get")(function* (org, id2) {
+var get21 = exports_Effect.fn("TraceRecording.get")(function* (org, id2) {
   const sql = yield* exports_SqlClient.SqlClient;
   const store = yield* MessageStore;
   yield* exports_Effect.annotateCurrentSpan({ org, traceId: id2 });
@@ -54532,9 +54716,9 @@ var exports_Workload = {};
 __export(exports_Workload, {
   routeOf: () => routeOf,
   movesRoute: () => movesRoute,
-  make: () => make70,
+  make: () => make71,
   list: () => list5,
-  get: () => get23,
+  get: () => get24,
   create: () => create,
   changes: () => changes2,
   change: () => change2,
@@ -54560,12 +54744,15 @@ __export(exports_Inference, {
   retryAfter: () => retryAfter,
   requestOf: () => requestOf,
   produce: () => produce,
+  paidByOf: () => paidByOf,
   completionOf: () => completionOf,
   Unavailable: () => Unavailable2,
   Request: () => Request4,
   ProviderKeys: () => ProviderKeys,
   Prompt: () => Prompt2,
   ProduceError: () => ProduceError,
+  PaidBy: () => PaidBy,
+  OutOfCredit: () => OutOfCredit,
   KeyRequired: () => KeyRequired,
   Inference: () => Inference,
   Credential: () => Credential
@@ -54583,15 +54770,24 @@ class Unavailable2 extends exports_Schema.TaggedError()("InferenceUnavailable",
   cause: exports_Schema.Defect()
 }) {
 }
+var PaidBy = exports_Schema.Literals(["Credits", "Ambral", "Byok"]).annotate({ identifier: "InferencePaidBy" });
+var StageKeyPaidBy = PaidBy.pick(["Credits", "Ambral"]);
 
 class KeyRequired extends exports_Schema.TaggedError()("InferenceKeyRequired", {
   upstream: UpstreamId
 }) {
 }
 
+class OutOfCredit extends exports_Schema.TaggedError()("InferenceOutOfCredit", {}) {
+}
+
 class Inference extends exports_Context.Service()("@ambral/core/Inference/Inference") {
 }
 var Credential = exports_Data.taggedEnum();
+var paidByOf = (credential) => exports_Match.valueTags(credential, {
+  Ambral: ({ paidBy }) => paidBy,
+  Org: () => "Byok"
+});
 
 class ProviderKeys extends exports_Context.Service()("@ambral/core/Inference/ProviderKeys") {
 }
@@ -54603,7 +54799,7 @@ var Prompt2 = exports_Schema.Struct({
 
 class ProduceError extends exports_Schema.TaggedError()("ProduceError", {
   model: ModelId,
-  reason: exports_Schema.Literals(["Unavailable", "KeyRequired", "Rejected", "Malformed"]),
+  reason: exports_Schema.Literals(["Unavailable", "KeyRequired", "OutOfCredit", "Rejected", "Malformed"]),
   rejection: exports_Schema.optional(exports_Schema.Struct({
     status: Status3,
     error: Error5,
@@ -54656,21 +54852,817 @@ var produce = exports_Effect.fn("Inference.produce")(function* (model, prompt, o
   const body = yield* encodeRequest(request3).pipe(exports_Effect.orDie);
   const unavailable3 = (cause) => new ProduceError({ model: model.id, reason: "Unavailable", cause });
   const startedAt = yield* now3;
-  const response = yield* inference.send({
-    upstream: model.base.upstream,
-    endpoint: "/chat/completions",
-    body,
-    requireParameters: true,
-    org
-  }).pipe(exports_Effect.mapError((error2) => exports_Match.valueTags(error2, {
-    InferenceUnavailable: unavailable3,
-    InferenceKeyRequired: (cause) => new ProduceError({ model: model.id, reason: "KeyRequired", cause })
-  })));
-  const contentType = exports_Option.getOrUndefined(exports_Headers.get(response.headers, "content-type"));
-  const read3 = yield* exports_Stream.runFoldEffect(response.body, () => start(response.status, contentType, startedAt), (state2, chunk) => exports_Effect.map(now3, (at) => feed2(state2, chunk, at))).pipe(exports_Effect.mapError(unavailable3));
-  const finishedAt = yield* now3;
-  const observed = finish2(read3, "done", finishedAt);
-  return yield* exports_Effect.fromResult(completionOf(model, request3, observed, startedAt, retryAfter(response.headers, finishedAt)));
+  return yield* exports_Effect.uninterruptibleMask((restore) => exports_Effect.gen(function* () {
+    const response = yield* restore(inference.send({
+      upstream: model.base.upstream,
+      endpoint: "/chat/completions",
+      body,
+      requireParameters: true,
+      org
+    })).pipe(exports_Effect.mapError((error2) => exports_Match.valueTags(error2, {
+      InferenceUnavailable: unavailable3,
+      InferenceKeyRequired: (cause) => new ProduceError({ model: model.id, reason: "KeyRequired", cause }),
+      InferenceOutOfCredit: (cause) => new ProduceError({ model: model.id, reason: "OutOfCredit", cause })
+    })));
+    const contentType = exports_Option.getOrUndefined(exports_Headers.get(response.headers, "content-type"));
+    const read3 = yield* exports_Ref.make(start(response.status, contentType, startedAt));
+    const streamed = yield* restore(exports_Stream.runForEach(response.body, (chunk) => exports_Effect.flatMap(now3, (at) => exports_Ref.update(read3, (state2) => feed2(state2, chunk, at))))).pipe(exports_Effect.mapError(unavailable3), exports_Effect.exit);
+    const finishedAt = yield* now3;
+    const observed = finish2(yield* exports_Ref.get(read3), exports_Exit.isSuccess(streamed) ? "done" : "failed", finishedAt);
+    const call = {
+      callId: CallId.make(yield* uuid),
+      model: model.id,
+      paidBy: response.paidBy,
+      supply: { upstream: model.base.upstream, upstreamModelId: model.base.upstreamModelId },
+      observed,
+      at: startedAt
+    };
+    yield* chargeCall(org, call);
+    yield* streamed;
+    const completion = yield* exports_Effect.fromResult(completionOf(model, request3, observed, startedAt, retryAfter(response.headers, finishedAt)));
+    return { ...completion, charged: exports_Option.getOrUndefined(lineOf(call)) };
+  }));
+});
+
+// ../../node_modules/.bun/effect@4.0.3/node_modules/effect/dist/persistence/KeyValueStore.js
+var exports_KeyValueStore = {};
+__export(exports_KeyValueStore, {
+  toSchemaStore: () => toSchemaStore,
+  prefix: () => prefix3,
+  makeStringOnly: () => makeStringOnly,
+  make: () => make69,
+  layerStorage: () => layerStorage,
+  layerSql: () => layerSql2,
+  layerMemory: () => layerMemory,
+  layerFileSystem: () => layerFileSystem,
+  KeyValueStoreError: () => KeyValueStoreError,
+  KeyValueStore: () => KeyValueStore
+});
+var TypeId74 = "~effect/persistence/KeyValueStore";
+var ErrorTypeId = "~effect/persistence/KeyValueStore/KeyValueStoreError";
+
+class KeyValueStoreError extends (/* @__PURE__ */ TaggedError2("KeyValueStoreError")) {
+  [ErrorTypeId] = ErrorTypeId;
+}
+var KeyValueStore = /* @__PURE__ */ Service("effect/persistence/KeyValueStore");
+var make69 = (options4) => KeyValueStore.of({
+  [TypeId74]: TypeId74,
+  has: (key2) => map9(options4.get(key2), isNotUndefined),
+  isEmpty: map9(options4.size, (size8) => size8 === 0),
+  modify: (key2, f) => flatMap6(options4.get(key2), (o) => {
+    if (o === undefined) {
+      return undefined_2;
+    }
+    const newValue = f(o);
+    return as3(options4.set(key2, newValue), newValue);
+  }),
+  modifyUint8Array: (key2, f) => flatMap6(options4.getUint8Array(key2), (o) => {
+    if (o === undefined) {
+      return undefined_2;
+    }
+    const newValue = f(o);
+    return as3(options4.set(key2, newValue), newValue);
+  }),
+  ...options4
+});
+var makeStringOnly = (options4) => {
+  const encoder8 = new TextEncoder;
+  return make69({
+    ...options4,
+    getUint8Array: (key2) => options4.get(key2).pipe(map9(map20((value5) => match2(decode2(value5), {
+      onFailure: () => encoder8.encode(value5),
+      onSuccess: identity
+    })))),
+    set: (key2, value5) => typeof value5 === "string" ? options4.set(key2, value5) : suspend3(() => options4.set(key2, encode2(value5)))
+  });
+};
+var prefix3 = /* @__PURE__ */ dual(2, (self, prefix4) => ({
+  ...self,
+  get: (key2) => self.get(`${prefix4}${key2}`),
+  getUint8Array: (key2) => self.getUint8Array(`${prefix4}${key2}`),
+  set: (key2, value5) => self.set(`${prefix4}${key2}`, value5),
+  remove: (key2) => self.remove(`${prefix4}${key2}`),
+  has: (key2) => self.has(`${prefix4}${key2}`),
+  modify: (key2, f) => self.modify(`${prefix4}${key2}`, f),
+  modifyUint8Array: (key2, f) => self.modifyUint8Array(`${prefix4}${key2}`, f)
+}));
+var layerMemory = /* @__PURE__ */ sync2(KeyValueStore)(() => {
+  const store = new Map;
+  const encoder8 = new TextEncoder;
+  return make69({
+    get: (key2) => sync3(() => {
+      const value5 = store.get(key2);
+      return value5 === undefined ? undefined : typeof value5 === "string" ? value5 : encode2(value5);
+    }),
+    getUint8Array: (key2) => sync3(() => {
+      const value5 = store.get(key2);
+      return value5 === undefined ? undefined : typeof value5 === "string" ? encoder8.encode(value5) : value5;
+    }),
+    set: (key2, value5) => sync3(() => store.set(key2, value5)),
+    remove: (key2) => sync3(() => store.delete(key2)),
+    clear: sync3(() => store.clear()),
+    size: sync3(() => store.size)
+  });
+});
+var layerFileSystem = (directory) => effect(KeyValueStore)(gen4(function* () {
+  const fs = yield* FileSystem;
+  const path = yield* Path;
+  const withKeyPath = (method, key2, f) => key2.length === 0 || key2 === "." || key2 === ".." ? fail6(new KeyValueStoreError({
+    method,
+    key: key2,
+    message: `Invalid key ${key2}`
+  })) : f(path.join(directory, encodeURIComponent(key2)));
+  if (!(yield* fs.exists(directory))) {
+    yield* fs.makeDirectory(directory, {
+      recursive: true
+    });
+  }
+  return make69({
+    get: (key2) => withKeyPath("get", key2, (path2) => catchTag3(fs.readFileString(path2), "PlatformError", (cause) => cause.reason._tag === "NotFound" ? undefined_2 : fail6(new KeyValueStoreError({
+      method: "get",
+      key: key2,
+      message: `Unable to get item with key ${key2}`,
+      cause
+    })))),
+    getUint8Array: (key2) => withKeyPath("getUint8Array", key2, (path2) => catchTag3(fs.readFile(path2), "PlatformError", (cause) => cause.reason._tag === "NotFound" ? undefined_2 : fail6(new KeyValueStoreError({
+      method: "getUint8Array",
+      key: key2,
+      message: `Unable to get item with key ${key2}`,
+      cause
+    })))),
+    set: (key2, value5) => withKeyPath("set", key2, (path2) => mapError4(typeof value5 === "string" ? fs.writeFileString(path2, value5) : fs.writeFile(path2, value5), (cause) => new KeyValueStoreError({
+      method: "set",
+      key: key2,
+      message: `Unable to set item with key ${key2}`,
+      cause
+    }))),
+    remove: (key2) => withKeyPath("remove", key2, (path2) => mapError4(fs.remove(path2), (cause) => new KeyValueStoreError({
+      method: "remove",
+      key: key2,
+      message: `Unable to remove item with key ${key2}`,
+      cause
+    }))),
+    has: (key2) => withKeyPath("has", key2, (path2) => mapError4(fs.exists(path2), (cause) => new KeyValueStoreError({
+      method: "has",
+      key: key2,
+      message: `Unable to check existence of item with key ${key2}`,
+      cause
+    }))),
+    clear: mapError4(andThen4(fs.remove(directory, {
+      recursive: true
+    }), fs.makeDirectory(directory, {
+      recursive: true
+    })), (cause) => new KeyValueStoreError({
+      method: "clear",
+      message: `Unable to clear storage`,
+      cause
+    })),
+    size: matchEffect3(fs.readDirectory(directory), {
+      onSuccess: (files) => succeed6(files.length),
+      onFailure: (cause) => fail6(new KeyValueStoreError({
+        method: "size",
+        message: `Unable to get size`,
+        cause
+      }))
+    })
+  });
+}));
+var layerSql2 = (options4 = {}) => effect(KeyValueStore)(gen4(function* () {
+  const sql = (yield* SqlClient).withoutTransforms();
+  const table2 = sql(options4.table ?? "effect_key_value_store");
+  yield* sql.onDialectOrElse({
+    mysql: () => sql`
+          CREATE TABLE IF NOT EXISTS ${table2} (
+            id VARCHAR(191) PRIMARY KEY,
+            value BLOB NOT NULL,
+            value_type SMALLINT NOT NULL
+          )
+        `,
+    pg: () => sql`
+          CREATE TABLE IF NOT EXISTS ${table2} (
+            id TEXT PRIMARY KEY,
+            value BYTEA NOT NULL,
+            value_type SMALLINT NOT NULL
+          )
+        `,
+    mssql: () => sql`
+          IF NOT EXISTS (SELECT * FROM sysobjects WHERE name=${table2} AND xtype='U')
+          CREATE TABLE ${table2} (
+            id NVARCHAR(450) PRIMARY KEY,
+            value VARBINARY(MAX) NOT NULL,
+            value_type SMALLINT NOT NULL
+          )
+        `,
+    orElse: () => sql`
+          CREATE TABLE IF NOT EXISTS ${table2} (
+            id TEXT PRIMARY KEY,
+            value BLOB NOT NULL,
+            value_type INTEGER NOT NULL
+          )
+        `
+  }).pipe(orDie3);
+  const upsert = sql.onDialectOrElse({
+    pg: () => (entry) => sql`
+          INSERT INTO ${table2} (id, value, value_type) VALUES (${entry.id}, ${entry.value}, ${entry.value_type})
+          ON CONFLICT (id) DO UPDATE SET value=EXCLUDED.value, value_type=EXCLUDED.value_type
+        `.unprepared,
+    mysql: () => (entry) => sql`
+          INSERT INTO ${table2} (id, value, value_type) VALUES (${entry.id}, ${entry.value}, ${entry.value_type})
+          ON DUPLICATE KEY UPDATE value=VALUES(value), value_type=VALUES(value_type)
+        `,
+    mssql: () => (entry) => sql`
+          MERGE ${table2} AS target
+          USING (SELECT ${entry.id} AS id, ${entry.value} AS value, ${entry.value_type} AS value_type) AS source
+          ON target.id = source.id
+          WHEN MATCHED THEN UPDATE SET value = source.value, value_type = source.value_type
+          WHEN NOT MATCHED THEN INSERT (id, value, value_type)
+          VALUES (source.id, source.value, source.value_type);
+        `,
+    orElse: () => (entry) => sql`
+          INSERT INTO ${table2} (id, value, value_type) VALUES (${entry.id}, ${entry.value}, ${entry.value_type})
+          ON CONFLICT(id) DO UPDATE SET value=excluded.value, value_type=excluded.value_type
+        `.unprepared
+  });
+  const encoder8 = new TextEncoder;
+  const decoder5 = new TextDecoder;
+  const ValueTypeString = 0;
+  const ValueTypeUint8Array = 1;
+  return make69({
+    get: (key2) => sql`SELECT value, value_type FROM ${table2} WHERE id = ${key2}`.pipe(mapError4((cause) => new KeyValueStoreError({
+      method: "get",
+      key: key2,
+      message: `Unable to get item with key ${key2}`,
+      cause
+    })), flatMap6((rows) => {
+      if (rows.length === 0) {
+        return undefined_2;
+      }
+      const row = rows[0];
+      switch (row.value_type) {
+        case ValueTypeString:
+          return succeed6(decoder5.decode(row.value));
+        case ValueTypeUint8Array:
+          return succeed6(encode2(row.value));
+        default:
+          return fail6(new KeyValueStoreError({
+            method: "get",
+            key: key2,
+            message: `Invalid stored value type for key ${key2}: ${row.value_type}`
+          }));
+      }
+    })),
+    getUint8Array: (key2) => sql`SELECT value, value_type FROM ${table2} WHERE id = ${key2}`.pipe(mapError4((cause) => new KeyValueStoreError({
+      method: "getUint8Array",
+      key: key2,
+      message: `Unable to get item with key ${key2}`,
+      cause
+    })), flatMap6((rows) => {
+      if (rows.length === 0) {
+        return undefined_2;
+      }
+      const row = rows[0];
+      switch (row.value_type) {
+        case ValueTypeString:
+          return succeed6(row.value);
+        case ValueTypeUint8Array:
+          return succeed6(row.value);
+        default:
+          return fail6(new KeyValueStoreError({
+            method: "getUint8Array",
+            key: key2,
+            message: `Invalid stored value type for key ${key2}: ${row.value_type}`
+          }));
+      }
+    })),
+    set: (key2, value5) => upsert({
+      id: key2,
+      value: typeof value5 === "string" ? encoder8.encode(value5) : value5,
+      value_type: typeof value5 === "string" ? ValueTypeString : ValueTypeUint8Array
+    }).pipe(mapError4((cause) => new KeyValueStoreError({
+      method: "set",
+      key: key2,
+      message: `Unable to set item with key ${key2}`,
+      cause
+    })), asVoid4),
+    remove: (key2) => sql`DELETE FROM ${table2} WHERE id = ${key2}`.pipe(mapError4((cause) => new KeyValueStoreError({
+      method: "remove",
+      key: key2,
+      message: `Unable to remove item with key ${key2}`,
+      cause
+    })), asVoid4),
+    clear: sql`DELETE FROM ${table2}`.pipe(mapError4((cause) => new KeyValueStoreError({
+      method: "clear",
+      message: `Unable to clear storage`,
+      cause
+    })), asVoid4),
+    size: sql`SELECT COUNT(*) as count FROM ${table2}`.pipe(mapError4((cause) => new KeyValueStoreError({
+      method: "size",
+      message: `Unable to get size`,
+      cause
+    })), map9((rows) => rows.length === 0 ? 0 : Number(rows[0].count)))
+  });
+}));
+var SchemaStoreTypeId = "~effect/persistence/KeyValueStore/SchemaStore";
+var toSchemaStore = (self, schema2) => {
+  const serializer = toCodecJson2(schema2);
+  const jsonSchema2 = fromJsonString2(serializer);
+  const decode7 = decodeEffect2(jsonSchema2);
+  const encode6 = encodeEffect2(jsonSchema2);
+  const get22 = (key2) => flatMap6(self.get(key2), match10({
+    onUndefined: () => succeedNone3,
+    onDefined: (value5) => asSome2(decode7(value5))
+  }));
+  const set9 = (key2, value5) => flatMap6(encode6(value5), (json5) => self.set(key2, json5));
+  const modify6 = (key2, f) => flatMap6(get22(key2), (o) => {
+    if (isNone2(o)) {
+      return succeedNone3;
+    }
+    const newValue = f(o.value);
+    return as3(set9(key2, newValue), some3(newValue));
+  });
+  return {
+    [SchemaStoreTypeId]: SchemaStoreTypeId,
+    get: get22,
+    set: set9,
+    modify: modify6,
+    remove: self.remove,
+    clear: self.clear,
+    size: self.size,
+    has: self.has,
+    isEmpty: self.isEmpty
+  };
+};
+var layerStorage = (evaluate2) => sync2(KeyValueStore)(() => {
+  const storage = evaluate2();
+  return makeStringOnly({
+    get: (key2) => try_3({
+      try: () => storage.getItem(key2) ?? undefined,
+      catch: (cause) => new KeyValueStoreError({
+        key: key2,
+        method: "get",
+        message: `Unable to get item with key ${key2}`,
+        cause
+      })
+    }),
+    set: (key2, value5) => try_3({
+      try: () => storage.setItem(key2, value5),
+      catch: (cause) => new KeyValueStoreError({
+        key: key2,
+        method: "set",
+        message: `Unable to set item with key ${key2}`,
+        cause
+      })
+    }),
+    remove: (key2) => try_3({
+      try: () => storage.removeItem(key2),
+      catch: (cause) => new KeyValueStoreError({
+        key: key2,
+        method: "remove",
+        message: `Unable to remove item with key ${key2}`,
+        cause
+      })
+    }),
+    clear: try_3({
+      try: () => storage.clear(),
+      catch: (cause) => new KeyValueStoreError({
+        method: "clear",
+        message: `Unable to clear storage`,
+        cause
+      })
+    }),
+    size: try_3({
+      try: () => storage.length,
+      catch: (cause) => new KeyValueStoreError({
+        method: "size",
+        message: `Unable to get size`,
+        cause
+      })
+    })
+  });
+});
+// ../core/src/Storage/EdgeSync.ts
+var TableName = exports_Schema.NonEmptyString.pipe(exports_Schema.brand("EdgeSyncTableName")).annotate({
+  identifier: "EdgeSyncTableName"
+});
+var IdColumn = exports_Schema.NonEmptyString.pipe(exports_Schema.brand("EdgeSyncIdColumn")).annotate({
+  identifier: "EdgeSyncIdColumn"
+});
+var LIVE_PASS = Millis.make(60 * 1000);
+var GRACE = Millis.make(3 * 60 * 1000);
+var BATCH = 100;
+var KEPT_FOR_LAST = 25;
+var RUN_BUDGET = Millis.make(30 * 1000);
+var KV_WAIT = Millis.make(10 * 1000);
+
+class RetryError extends exports_Schema.TaggedError()("EdgeSyncRetryError", {
+  table: TableName,
+  reason: exports_Schema.Literals(["Unavailable"]),
+  cause: exports_Schema.Defect()
+}) {
+}
+var put4 = exports_Effect.fn("EdgeSync.put")(function* (write3, deadline) {
+  yield* exports_Effect.annotateCurrentSpan({ key: write3.key });
+  const kv = yield* exports_KeyValueStore.KeyValueStore;
+  const attempt2 = exports_Effect.gen(function* () {
+    if ((yield* now3) >= deadline) {
+      return yield* new exports_Cause.TimeoutError("A KV write wasn't sent within LIVE_PASS of its read");
+    }
+    yield* kv.set(write3.key, write3.value).pipe(exports_Effect.timeout(exports_Duration.millis(KV_WAIT)));
+  });
+  yield* attempt2.pipe(exports_Effect.retry({
+    schedule: exports_Schedule.spaced("1 second"),
+    times: 3,
+    while: () => exports_Effect.map(now3, (now4) => now4 < deadline)
+  }));
+});
+var Recorded = exports_Schema.Int.pipe(exports_Schema.brand("EdgeSyncRecorded")).annotate({ identifier: "EdgeSyncRecorded" });
+var Due = exports_Schema.Boolean.pipe(exports_Schema.brand("EdgeSyncDue")).annotate({ identifier: "EdgeSyncDue" });
+var Pending2 = exports_Schema.Struct({
+  recorded: Recorded,
+  due: Due
+}).annotate({ identifier: "EdgeSyncPending" });
+var isDue = (sql) => sql`s.changed_at + ${GRACE} * interval '1 millisecond' <= clock_timestamp()`;
+var make70 = (table2, kvWriteOf) => {
+  const ids = (statement2) => exports_SqlSchema.findAll({
+    Request: exports_Schema.Void,
+    Result: exports_Schema.Struct({ id: table2.Id }),
+    execute: () => statement2
+  })(undefined).pipe(exports_Effect.map(exports_Array.map(({ id: id2 }) => id2)), exports_Effect.catchTag("SchemaError", exports_Effect.die));
+  const record3 = exports_Effect.fn("EdgeSync.record")(function* (changed) {
+    yield* exports_Effect.annotateCurrentSpan({ table: table2.name, ids: changed.length });
+    if (changed.length === 0)
+      return;
+    const sql = yield* exports_SqlClient.SqlClient;
+    yield* sql`
+      INSERT INTO ${sql(table2.name)} AS s (${sql(table2.id)}, changed_at, attempted_at)
+      SELECT x.id, clock_timestamp(), clock_timestamp()
+      FROM (VALUES ${sql.csv(changed.map((id2) => sql`(${id2})`))}) AS x (id)
+      ON CONFLICT (${sql(table2.id)}) DO UPDATE
+      SET recorded = s.recorded + 1, changed_at = clock_timestamp(), synced_at = NULL
+    `;
+  });
+  const syncOne = exports_Effect.fn("EdgeSync.syncOne")(function* (id2) {
+    yield* exports_Effect.annotateCurrentSpan({ table: table2.name, id: id2 });
+    const sql = yield* exports_SqlClient.SqlClient;
+    const deadline = EpochMillis.make((yield* now3) + LIVE_PASS);
+    const row = yield* exports_SqlSchema.findOneOption({
+      Request: table2.Id,
+      Result: Pending2,
+      execute: (request3) => sql`
+          SELECT s.recorded, ${isDue(sql)} AS due
+          FROM ${sql(table2.name)} s
+          WHERE s.${sql(table2.id)} = ${request3}
+        `
+    })(id2).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die));
+    if (exports_Option.isNone(row))
+      return;
+    const { due, recorded } = row.value;
+    const write3 = yield* kvWriteOf(id2);
+    if (exports_Option.isSome(write3))
+      yield* put4(write3.value, deadline);
+    const where = sql`${sql(table2.id)} = ${id2} AND recorded = ${recorded}`;
+    yield* due ? sql`DELETE FROM ${sql(table2.name)} WHERE ${where}` : sql`UPDATE ${sql(table2.name)} SET synced_at = now() WHERE ${where}`;
+  });
+  const syncAll = (pending, until) => exports_Effect.map(exports_Effect.forEach(pending, (id2) => exports_Effect.flatMap(now3, (now4) => until !== undefined && now4 >= until ? exports_Effect.succeedNone : exports_Effect.asSome(exports_Effect.map(exports_Effect.exit(syncOne(id2)), (exit3) => ({ id: id2, exit: exit3 })))), { concurrency: 4 }), exports_Array.getSomes);
+  const failures = (synced) => synced.filter(({ exit: exit3 }) => exports_Exit.isFailure(exit3));
+  const syncNow = exports_Effect.fn("EdgeSync.syncNow")(function* (changed) {
+    yield* exports_Effect.annotateCurrentSpan({ table: table2.name, ids: changed.length });
+    const failed = failures(yield* syncAll(changed));
+    if (failed.length > 0) {
+      yield* exports_Effect.logWarning("KV entries weren't synced; the retry syncs them", {
+        table: table2.name,
+        failed: failed.length,
+        cause: failed[0]?.exit
+      });
+    }
+  });
+  const nextBatch = exports_Effect.fn("EdgeSync.nextBatch")(function* () {
+    const sql = yield* exports_SqlClient.SqlClient;
+    const oldest = (where) => ids(sql`
+        SELECT s.${sql(table2.id)} AS id FROM ${sql(table2.name)} s
+        WHERE ${where}
+        ORDER BY s.attempted_at, s.${sql(table2.id)}
+        LIMIT ${BATCH}
+        FOR UPDATE SKIP LOCKED
+      `);
+    return yield* exports_Effect.gen(function* () {
+      const unsynced = yield* oldest(sql`s.synced_at IS NULL`);
+      const last2 = yield* oldest(sql`s.synced_at IS NOT NULL AND ${isDue(sql)}`);
+      const first = unsynced.slice(0, BATCH - Math.min(KEPT_FOR_LAST, last2.length));
+      const batch = [...first, ...last2.slice(0, BATCH - first.length)];
+      if (batch.length > 0) {
+        yield* sql`UPDATE ${sql(table2.name)} SET attempted_at = now() WHERE ${sql(table2.id)} IN ${sql.in(batch)}`;
+      }
+      yield* exports_Effect.annotateCurrentSpan({ table: table2.name, ids: batch.length });
+      return batch;
+    }).pipe(sql.withTransaction);
+  });
+  const retry6 = exports_Effect.gen(function* () {
+    const until = EpochMillis.make((yield* now3) + RUN_BUDGET);
+    let synced = 0;
+    let kept = [];
+    while (true) {
+      const batch = yield* nextBatch();
+      const outcomes = yield* syncAll(batch, until);
+      const failed = failures(outcomes);
+      synced += outcomes.length - failed.length;
+      kept = failed;
+      if (outcomes.length < BATCH || failed.length === outcomes.length)
+        break;
+    }
+    if (synced > 0)
+      yield* exports_Effect.logDebug("Synced KV entries", { table: table2.name, synced });
+    if (kept.length > 0) {
+      yield* exports_Effect.logError("KV refuses to sync entries; they are retried", {
+        table: table2.name,
+        kept: kept.length,
+        cause: kept[0]?.exit
+      });
+    }
+  }).pipe(exports_Effect.mapError((cause) => new RetryError({ table: table2.name, reason: "Unavailable", cause })), exports_Effect.withSpan("EdgeSync.retry", { attributes: { table: table2.name } }));
+  return { record: record3, syncNow, retry: retry6 };
+};
+
+// ../core/src/Billing/Ledger.ts
+var SignedUsd = exports_Schema.BigDecimalFromString.pipe(exports_Schema.brand("SignedUsd")).annotate({
+  identifier: "SignedUsd"
+});
+var MAX_DECIMAL_PLACES = 12;
+var AMOUNT_CEILING = exports_BigDecimal.fromBigInt(10n ** 12n);
+var Amount = exports_Schema.BigDecimalFromString.check(exports_Schema.makeFilter((amount) => !exports_BigDecimal.isZero(amount) || "a non-zero amount"), exports_Schema.makeFilter((amount) => exports_BigDecimal.isLessThan(exports_BigDecimal.abs(amount), AMOUNT_CEILING) || "under 1000000000000 either way"), exports_Schema.makeFilter((amount) => exports_BigDecimal.normalize(amount).scale <= MAX_DECIMAL_PLACES || `at most ${MAX_DECIMAL_PLACES} decimal places`)).pipe(exports_Schema.brand("CreditAmount")).annotate({ identifier: "CreditAmount" });
+var Note2 = exports_Schema.Trimmed.check(exports_Schema.isNonEmpty()).pipe(exports_Schema.brand("CreditNote")).annotate({
+  identifier: "CreditNote"
+});
+var Seq = exports_Schema.Int.check(exports_Schema.isGreaterThan(0)).pipe(exports_Schema.brand("CreditSeq")).annotate({
+  identifier: "CreditSeq"
+});
+var Event2 = exports_Schema.TaggedUnion({
+  Grant: { note: Note2, actor: Actor },
+  Correction: { note: Note2, actor: Actor },
+  Usage: { line: Line, priceId: exports_Schema.optional(PriceId), charge: Usd }
+}).annotate({ identifier: "CreditEvent" });
+var Entry2 = exports_Schema.Struct({
+  org: OrgId,
+  seq: Seq,
+  at: EpochMillis,
+  event: Event2,
+  amount: SignedUsd,
+  balanceAfter: SignedUsd
+}).annotate({ identifier: "CreditEntry" });
+var Credited = Entry2.mapFields((fields3) => ({
+  ...fields3,
+  event: exports_Schema.Union([Event2.cases.Grant, Event2.cases.Correction])
+})).annotate({ identifier: "CreditedEntry" });
+var eventOf = (amount, note, actor) => exports_BigDecimal.isPositive(amount) ? Event2.cases.Grant.make({ note, actor }) : Event2.cases.Correction.make({ note, actor });
+var CreditedRow = Credited.mapFields((fields3) => ({ ...fields3, at: Timestamp }));
+var selected2 = (sql) => sql`org_id AS org, seq::float8 AS seq, at, event, amount::text AS amount, balance_after::text AS "balanceAfter"`;
+var encodeAt = exports_Schema.encodeSync(Timestamp);
+var encodeEvent = exports_Schema.encodeSync(exports_Schema.fromJsonString(Event2));
+var encodeAmount = exports_Schema.encodeSync(Amount);
+var add7 = exports_Effect.fn("Ledger.add")(function* (outbox, org, amount, note, actor) {
+  yield* exports_Effect.annotateCurrentSpan({ org, actor });
+  const sql = yield* exports_SqlClient.SqlClient;
+  const at = yield* now3;
+  const moved = encodeAmount(amount);
+  return yield* sql.withTransaction(exports_Effect.gen(function* () {
+    if (exports_Option.isNone(yield* lock(org)))
+      return yield* new NotFound({ org });
+    yield* sql`
+        INSERT INTO org_credit (org_id, balance) VALUES (${org}, ${moved}::numeric)
+        ON CONFLICT (org_id) DO UPDATE SET balance = org_credit.balance + excluded.balance
+      `;
+    const entry = yield* exports_SqlSchema.findOne({
+      Request: exports_Schema.Void,
+      Result: CreditedRow,
+      execute: () => sql`
+            INSERT INTO credit_events (org_id, seq, at, event, amount, balance_after)
+            SELECT ${org}, coalesce((SELECT max(seq) FROM credit_events WHERE org_id = ${org}), 0) + 1,
+              ${encodeAt(at)}, ${encodeEvent(eventOf(amount, note, actor))}::jsonb, ${moved}::numeric, c.balance
+            FROM org_credit c WHERE c.org_id = ${org}
+            RETURNING ${selected2(sql)}
+          `
+    })(undefined).pipe(exports_Effect.catchTags({ SchemaError: exports_Effect.die, NoSuchElementError: exports_Effect.die }));
+    yield* outbox.record([org]);
+    return entry;
+  }));
+});
+var Balance = exports_Schema.Struct({ balance: SignedUsd });
+var balance = exports_Effect.fn("Ledger.balance")(function* (org) {
+  const sql = yield* exports_SqlClient.SqlClient;
+  const found = yield* exports_SqlSchema.findOne({
+    Request: OrgId,
+    Result: Balance,
+    execute: (request3) => sql`SELECT coalesce((SELECT balance FROM org_credit WHERE org_id = ${request3}), 0)::text AS balance`
+  })(org).pipe(exports_Effect.catchTags({ SchemaError: exports_Effect.die, NoSuchElementError: exports_Effect.die }));
+  return found.balance;
+});
+var Totals = exports_Schema.Struct({
+  balance: SignedUsd,
+  added: SignedUsd,
+  spent: Usd
+}).annotate({ identifier: "CreditTotals" });
+var Sums = Totals.mapFields(exports_Struct.pick(["balance", "added"]));
+var totals = exports_Effect.fn("Ledger.totals")(function* (org) {
+  const sql = yield* exports_SqlClient.SqlClient;
+  const sums = yield* exports_SqlSchema.findOneOption({
+    Request: OrgId,
+    Result: Sums,
+    execute: (request3) => sql`
+        SELECT coalesce(c.balance, 0)::text AS balance,
+          coalesce((
+            SELECT sum(e.amount) FROM credit_events e WHERE e.org_id = o.id AND e.kind IN ('Grant', 'Correction')
+          ), 0)::text AS added
+        FROM orgs o LEFT JOIN org_credit c ON c.org_id = o.id
+        WHERE o.id = ${request3}
+      `
+  })(org).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die));
+  if (exports_Option.isNone(sums))
+    return yield* new NotFound({ org });
+  return {
+    ...sums.value,
+    spent: Usd.make(exports_BigDecimal.subtract(sums.value.added, sums.value.balance))
+  };
+});
+var PAGE = 50;
+var history = exports_Effect.fn("Ledger.history")(function* (org, before) {
+  const sql = yield* exports_SqlClient.SqlClient;
+  return yield* exports_SqlSchema.findAll({
+    Request: OrgId,
+    Result: CreditedRow,
+    execute: (request3) => sql`
+        SELECT ${selected2(sql)} FROM credit_events
+        WHERE ${sql.and([
+      sql`org_id = ${request3}`,
+      sql`kind IN ('Grant', 'Correction')`,
+      ...before === undefined ? [] : [sql`seq < ${before}`]
+    ])}
+        ORDER BY seq DESC LIMIT ${PAGE}
+      `
+  })(org).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die));
+});
+var zero4 = exports_BigDecimal.fromBigInt(0n);
+var encodeSigned = exports_Schema.encodeSync(SignedUsd);
+var encodeUsd = exports_Schema.encodeSync(Usd);
+var freshOf = (lines2, logged) => {
+  const seen = new Set(logged);
+  const fresh2 = [];
+  for (const line of lines2) {
+    if (seen.has(line.callId))
+      continue;
+    seen.add(line.callId);
+    fresh2.push(line);
+  }
+  return fresh2;
+};
+var chargedOf = (line, row) => ({
+  line,
+  row,
+  charge: chargeAt(line.tokens, row)
+});
+var usageOf = (org, seq, before, charged) => {
+  let balanceAfter = before;
+  return charged.map(({ line, row, charge: charge3 }, index2) => {
+    const amount = line.burns ? exports_BigDecimal.negate(charge3) : zero4;
+    balanceAfter = exports_BigDecimal.sum(balanceAfter, amount);
+    return {
+      org,
+      seq: Seq.make(seq + index2),
+      at: line.at,
+      event: Event2.cases.Usage.make({ line, priceId: row?.id, charge: charge3 }),
+      amount: SignedUsd.make(amount),
+      balanceAfter: SignedUsd.make(balanceAfter)
+    };
+  });
+};
+var isCalendarDay = (text3) => {
+  const at = Date.parse(text3);
+  return !Number.isNaN(at) && new Date(at).toISOString().slice(0, 10) === text3;
+};
+var Day2 = exports_Schema.String.check(exports_Schema.isPattern(/^\d{4}-\d{2}-\d{2}$/), exports_Schema.makeFilter((text3) => isCalendarDay(text3) || "a calendar day")).pipe(exports_Schema.brand("Day")).annotate({ identifier: "Day" });
+var dayOf = (at) => Day2.make(exports_DateTime.formatIsoDateUtc(toDateTime(at)));
+var SpendDay = exports_Schema.Struct({
+  day: Day2,
+  model: ModelId,
+  amount: Usd,
+  tokens: Tokens
+}).annotate({ identifier: "SpendDay" });
+var addTokens = (a, b) => ({
+  input: TokenCount.make(a.input + b.input),
+  output: TokenCount.make(a.output + b.output),
+  cacheRead: TokenCount.make(a.cacheRead + b.cacheRead),
+  cacheWrite: TokenCount.make(a.cacheWrite + b.cacheWrite)
+});
+var noTokens = {
+  input: TokenCount.make(0),
+  output: TokenCount.make(0),
+  cacheRead: TokenCount.make(0),
+  cacheWrite: TokenCount.make(0)
+};
+var spentOf = (charged) => {
+  const days2 = new Map;
+  for (const { line, charge: charge3 } of charged) {
+    if (!line.burns || line.tokens === undefined)
+      continue;
+    const day = dayOf(line.at);
+    const key2 = `${day} ${line.model}`;
+    const before = days2.get(key2) ?? { day, model: line.model, amount: Usd.make(zero4), tokens: noTokens };
+    days2.set(key2, {
+      ...before,
+      amount: Usd.make(exports_BigDecimal.sum(before.amount, charge3)),
+      tokens: addTokens(before.tokens, line.tokens)
+    });
+  }
+  return [...days2.values()];
+};
+var Logged = exports_Schema.Struct({ callId: CallId });
+var append5 = exports_Effect.fn("Ledger.append")(function* (outbox, batch) {
+  const { org, lines: lines2 } = batch;
+  yield* exports_Effect.annotateCurrentSpan({ org, lines: lines2.length });
+  const sql = yield* exports_SqlClient.SqlClient;
+  return yield* sql.withTransaction(exports_Effect.gen(function* () {
+    if (exports_Option.isNone(yield* lock(org))) {
+      yield* exports_Effect.logWarning("Ledger.append: the org is gone, so its lines are dropped", { org });
+      return [];
+    }
+    const logged = lines2.length === 0 ? [] : yield* exports_SqlSchema.findAll({
+      Request: exports_Schema.Void,
+      Result: Logged,
+      execute: () => sql`SELECT call_id AS "callId" FROM credit_events WHERE call_id IN ${sql.in(lines2.map((l) => l.callId))}`
+    })(undefined).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die));
+    const fresh2 = freshOf(lines2, new Set(logged.map(({ callId }) => callId)));
+    if (fresh2.length === 0)
+      return [];
+    const prices = yield* inEffect(fresh2.map(({ model, at }) => ({ model, at })));
+    const next4 = yield* exports_SqlSchema.findOne({
+      Request: OrgId,
+      Result: exports_Schema.Struct({ seq: exports_Schema.Int }),
+      execute: (request3) => sql`SELECT (coalesce(max(seq), 0) + 1)::int AS seq FROM credit_events WHERE org_id = ${request3}`
+    })(org).pipe(exports_Effect.catchTags({ SchemaError: exports_Effect.die, NoSuchElementError: exports_Effect.die }));
+    const charged = fresh2.map((line, index2) => chargedOf(line, prices[index2]));
+    const unpriced = charged.flatMap(({ line, row }) => row === undefined ? [line.model] : []);
+    if (unpriced.length > 0) {
+      yield* exports_Effect.logWarning("Ledger.append: calls to a model with no price are charged nothing", { org, unpriced });
+    }
+    const entries3 = usageOf(org, next4.seq, yield* balance(org), charged);
+    yield* sql`
+        INSERT INTO credit_events ${sql.insert(entries3.map((entry) => ({
+      org_id: org,
+      seq: entry.seq,
+      at: encodeAt(entry.at),
+      event: encodeEvent(entry.event),
+      amount: encodeSigned(entry.amount),
+      balance_after: encodeSigned(entry.balanceAfter)
+    })))}
+      `;
+    const spent = spentOf(charged);
+    if (spent.length > 0) {
+      yield* sql`
+          INSERT INTO usage_days ${sql.insert(spent.map(({ day, model, amount, tokens }) => ({
+        org_id: org,
+        day,
+        model_id: model,
+        amount: encodeUsd(amount),
+        input: tokens.input,
+        output: tokens.output,
+        cache_read: tokens.cacheRead,
+        cache_write: tokens.cacheWrite
+      })))}
+          ON CONFLICT (org_id, day, model_id) DO UPDATE SET
+            amount = usage_days.amount + excluded.amount,
+            input = usage_days.input + excluded.input,
+            output = usage_days.output + excluded.output,
+            cache_read = usage_days.cache_read + excluded.cache_read,
+            cache_write = usage_days.cache_write + excluded.cache_write
+        `;
+    }
+    const moved = entries3.reduce((sum4, { amount }) => exports_BigDecimal.sum(sum4, amount), zero4);
+    yield* sql`
+        INSERT INTO org_credit (org_id, balance) VALUES (${org}, ${encodeSigned(SignedUsd.make(moved))}::numeric)
+        ON CONFLICT (org_id) DO UPDATE SET balance = org_credit.balance + excluded.balance
+      `;
+    yield* outbox.record([org]);
+    return entries3;
+  }));
+});
+var SPEND_DAYS = 30;
+var spend = exports_Effect.fn("Ledger.spend")(function* (org, from, to) {
+  const sql = yield* exports_SqlClient.SqlClient;
+  const end3 = to === undefined ? toDateTime(yield* now3) : exports_DateTime.makeUnsafe(Date.parse(to));
+  const last2 = Day2.make(exports_DateTime.formatIsoDateUtc(end3));
+  const first = from ?? Day2.make(exports_DateTime.formatIsoDateUtc(exports_DateTime.subtract(end3, { days: SPEND_DAYS - 1 })));
+  return yield* exports_SqlSchema.findAll({
+    Request: OrgId,
+    Result: SpendDay,
+    execute: (request3) => sql`
+        SELECT day::text AS day, model_id AS model, amount::text AS amount,
+          jsonb_build_object(
+            'input', input, 'output', output, 'cacheRead', cache_read, 'cacheWrite', cache_write
+          ) AS tokens
+        FROM usage_days
+        WHERE org_id = ${request3} AND day BETWEEN ${first}::date AND ${last2}::date
+        ORDER BY day DESC, model_id
+      `
+  })(org).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die));
 });
 
 // ../core/src/Billing/ProviderKey.ts
@@ -54754,88 +55746,121 @@ var remove10 = exports_Effect.fn("ProviderKey.remove")(function* (org, upstream)
 });
 
 // ../core/src/Billing/Billing.ts
-var Entry2 = exports_Schema.TaggedUnion({
+var Keys = exports_Schema.Record(UpstreamId, Sealed).pipe(exports_Schema.withDecodingDefaultKey(exports_Effect.succeed({})));
+var Blocked = exports_Schema.Boolean.pipe(exports_Schema.brand("BillingBlocked")).annotate({ identifier: "BillingBlocked" });
+var Entry3 = exports_Schema.TaggedUnion({
   Ambral: {},
-  Org: {
-    keys: exports_Schema.Record(UpstreamId, Sealed).pipe(exports_Schema.withDecodingDefaultKey(exports_Effect.succeed({})))
-  }
+  Byok: { keys: Keys },
+  Credits: { blocked: Blocked }
 }).annotate({ identifier: "BillingEntry" });
 var Payer = exports_Data.taggedEnum();
+var missing2 = Entry3.cases.Credits.make({ blocked: Blocked.make(true) });
 var entries3 = {
-  org: (keys5) => Entry2.cases.Org.make({ keys: keys5 }),
-  ambral: () => Entry2.cases.Ambral.make({})
+  byok: (keys5) => Entry3.cases.Byok.make({ keys: keys5 }),
+  credits: (_, blocked) => Entry3.cases.Credits.make({ blocked }),
+  ambral: () => Entry3.cases.Ambral.make({})
 };
-var entryOf = (billTo2, keys5) => entries3[billTo2](keys5);
+var entryOf = (billTo2, keys5, blocked) => entries3[billTo2](keys5, blocked);
 var payerOf = (entry, upstream) => exports_Match.valueTags(entry, {
   Ambral: () => exports_Result.succeed(Payer.Ambral()),
-  Org: ({ keys: keys5 }) => exports_Option.match(exports_Record.get(keys5, upstream), {
+  Byok: ({ keys: keys5 }) => exports_Option.match(exports_Record.get(keys5, upstream), {
     onNone: () => exports_Result.fail(new KeyRequired({ upstream })),
-    onSome: (sealed) => exports_Result.succeed(Payer.Org({ sealed }))
-  })
+    onSome: (sealed) => exports_Result.succeed(Payer.Byok({ sealed }))
+  }),
+  Credits: ({ blocked }) => blocked ? exports_Result.fail(new OutOfCredit) : exports_Result.succeed(Payer.Credits())
 });
+var isBlocked = (balance2, allowance) => Blocked.make(exports_BigDecimal.isLessThanOrEqualTo(balance2, exports_BigDecimal.negate(allowance)));
 var KV_PROPAGATION = exports_Duration.seconds(60);
 var KEPT_PAYING = exports_Duration.seconds(30);
 var KEPT_NOT_PAYING = exports_Duration.seconds(5);
 var lag = exports_Duration.sum(KV_PROPAGATION, exports_Duration.max(KEPT_PAYING, KEPT_NOT_PAYING));
-var Stored3 = exports_Schema.fromJsonString(Entry2);
+var Org2 = exports_Schema.TaggedStruct("Org", { keys: Keys });
+var LegacyByok = Org2.pipe(exports_Schema.decodeTo(exports_Schema.toType(Entry3.cases.Byok), exports_SchemaTransformation.transform({
+  decode: ({ keys: keys5 }) => Entry3.cases.Byok.make({ keys: keys5 }),
+  encode: ({ keys: keys5 }) => Org2.make({ keys: keys5 })
+})));
+var Stored3 = exports_Schema.fromJsonString(exports_Schema.Union([Entry3, LegacyByok]));
 var encode6 = exports_Schema.encodeEffect(Stored3);
 var decode7 = exports_Schema.decodeEffect(Stored3);
-var get21 = exports_Effect.fn("Billing.get")(function* (org) {
+var get22 = exports_Effect.fn("Billing.get")(function* (org) {
   const keys5 = yield* list3(org);
-  return entryOf(yield* billTo(org), Object.fromEntries(keys5.map(({ sealed, upstream }) => [upstream, sealed])));
+  const { billTo: billTo2, allowance } = yield* get18(org);
+  return entryOf(billTo2, Object.fromEntries(keys5.map(({ sealed, upstream }) => [upstream, sealed])), isBlocked(yield* balance(org), allowance));
 });
-var project = exports_Effect.fn("Billing.project")(function* (org) {
-  yield* exports_Effect.annotateCurrentSpan({ org });
+var sync6 = make70({ name: TableName.make("billing_syncs"), id: IdColumn.make("org_id"), Id: OrgId }, exports_Effect.fnUntraced(function* (org) {
+  const value5 = yield* encode6(yield* get22(org)).pipe(exports_Effect.orDie);
+  return exports_Option.some({ key: kvKey.billing(org), value: KvValue.make(value5) });
+}));
+var setBillTo = exports_Effect.fn("Billing.setBillTo")(function* (org, billTo2, actor) {
   const sql = yield* exports_SqlClient.SqlClient;
-  const store = yield* exports_KeyValueStore.KeyValueStore;
-  yield* sql.withTransaction(exports_Effect.gen(function* () {
-    yield* sql`SELECT org_id FROM org_settings WHERE org_id = ${org} FOR UPDATE`;
-    const text3 = yield* encode6(yield* get21(org)).pipe(exports_Effect.orDie);
-    yield* store.set(kvKey.billing(org), text3);
-  }));
+  const changed = yield* change(org, SetBillTo.make({ billTo: billTo2 }), actor).pipe(exports_Effect.tap(sync6.record([org])), sql.withTransaction);
+  yield* sync6.syncNow([org]);
+  return changed;
 });
-var setBillTo = exports_Effect.fn("Billing.setBillTo")(function* (org, billTo2, actor) {
-  const changed = yield* change(org, SetBillTo.make({ billTo: billTo2 }), actor);
-  yield* project(org);
+var addCredit = exports_Effect.fn("Billing.addCredit")(function* (org, amount, note, actor) {
+  const entry = yield* add7(sync6, org, amount, note, actor);
+  yield* sync6.syncNow([org]);
+  return entry;
+});
+var setAllowance = exports_Effect.fn("Billing.setAllowance")(function* (org, allowance, actor) {
+  const sql = yield* exports_SqlClient.SqlClient;
+  const changed = yield* change(org, SetAllowance.make({ allowance }), actor).pipe(exports_Effect.tap(sync6.record([org])), sql.withTransaction);
+  yield* sync6.syncNow([org]);
   return changed;
 });
 var saveKey = exports_Effect.fn("Billing.saveKey")(function* (org, upstream, key2, actor) {
   yield* exports_Effect.annotateCurrentSpan({ org, upstream, actor });
+  const sql = yield* exports_SqlClient.SqlClient;
   const label = yield* Providers.use((providers) => providers.check(upstream, key2));
   const sealed = yield* Seal.use((seal) => seal.seal(org, upstream, key2));
-  const stored = yield* save(org, upstream, sealed, label, actor);
-  yield* project(org);
+  const stored = yield* save(org, upstream, sealed, label, actor).pipe(exports_Effect.tap(sync6.record([org])), sql.withTransaction);
+  yield* sync6.syncNow([org]);
   return exports_Struct.omit(stored, ["org", "sealed"]);
 });
 var removeKey = exports_Effect.fn("Billing.removeKey")(function* (org, upstream) {
   yield* exports_Effect.annotateCurrentSpan({ org, upstream });
+  const sql = yield* exports_SqlClient.SqlClient;
   const { all: all6 } = yield* Providers;
   if (!all6.some((provider) => provider.upstream === upstream))
     return yield* new NotFound5({ upstream });
-  yield* remove10(org, upstream);
-  yield* project(org);
+  yield* remove10(org, upstream).pipe(exports_Effect.andThen(sync6.record([org])), sql.withTransaction);
+  yield* sync6.syncNow([org]);
 });
 var Configured = exports_Schema.Struct({
   provider: Provider,
   key: exports_Schema.optional(Saved)
 }).annotate({ identifier: "BillingProvider" });
-var Summary2 = exports_Schema.Struct({
-  billTo: BillTo,
-  providers: exports_Schema.Array(Configured)
+var Credit = exports_Schema.Struct({
+  totals: Totals,
+  allowance: Usd
+}).annotate({ identifier: "BillingCredit" });
+var creditOf = exports_Effect.fn("Billing.creditOf")(function* (org) {
+  const { allowance } = yield* get18(org);
+  return { totals: yield* totals(org), allowance };
+});
+var Summary2 = exports_Schema.TaggedUnion({
+  Credits: { balance: SignedUsd },
+  ProviderKeys: { providers: exports_Schema.Array(Configured) },
+  Ambral: {}
 }).annotate({ identifier: "BillingSummary" });
-var summaryOf = (billTo2, providers, stored) => ({
-  billTo: billTo2,
-  providers: providers.map((provider) => {
-    const key2 = stored.find(({ upstream }) => upstream === provider.upstream);
-    return compact2({
-      provider,
-      key: key2 === undefined ? undefined : exports_Struct.omit(key2, ["org", "sealed"])
-    });
-  })
+var providersOf = (providers, stored) => providers.map((provider) => {
+  const key2 = stored.find(({ upstream }) => upstream === provider.upstream);
+  return compact2({
+    provider,
+    key: key2 === undefined ? undefined : exports_Struct.omit(key2, ["org", "sealed"])
+  });
 });
+var summaries = {
+  credits: (org) => exports_Effect.map(balance(org), (balance2) => Summary2.cases.Credits.make({ balance: balance2 })),
+  byok: exports_Effect.fnUntraced(function* (org) {
+    const { all: all6 } = yield* Providers;
+    return Summary2.cases.ProviderKeys.make({ providers: providersOf(all6, yield* list3(org)) });
+  }),
+  ambral: () => exports_Effect.succeed(Summary2.cases.Ambral.make({}))
+};
 var summary = exports_Effect.fn("Billing.summary")(function* (org) {
-  const { all: all6 } = yield* Providers;
-  return summaryOf(yield* billTo(org), all6, yield* list3(org));
+  const { billTo: billTo2 } = yield* get18(org);
+  return yield* summaries[billTo2](org);
 });
 
 // ../core/src/Model/Offer.ts
@@ -54844,20 +55869,28 @@ var check2 = (entry, stored) => {
   const refused = (reason) => new NotOffered({ model: model.id, upstream: model.base.upstream, reason });
   if (stored.withdrawn !== undefined)
     return exports_Result.fail(refused("Withdrawn"));
-  return exports_Result.mapBoth(payerOf(entry, model.base.upstream), {
-    onFailure: () => refused("KeyRequired"),
-    onSuccess: () => model
+  return exports_Result.match(payerOf(entry, model.base.upstream), {
+    onFailure: (refusal) => exports_Match.valueTags(refusal, {
+      InferenceKeyRequired: () => exports_Result.fail(refused("KeyRequired")),
+      InferenceOutOfCredit: () => exports_Result.succeed(model)
+    }),
+    onSuccess: () => exports_Result.succeed(model)
   });
 };
 var list4 = exports_Effect.fn("Offer.list")(function* (org) {
   yield* exports_Effect.annotateCurrentSpan({ org });
-  const entry = yield* get21(org);
-  return (yield* list2()).filter((model) => exports_Result.isSuccess(check2(entry, { model })));
+  const entry = yield* get22(org);
+  const offered = (yield* list2()).filter((model) => exports_Result.isSuccess(check2(entry, { model })));
+  const prices = yield* latest(offered.map(({ id: id2 }) => id2));
+  return offered.flatMap((model) => {
+    const row = prices.get(model.id);
+    return row === undefined ? [] : [{ model, price: row.price }];
+  });
 });
-var get22 = exports_Effect.fn("Offer.get")(function* (org, id2) {
+var get23 = exports_Effect.fn("Offer.get")(function* (org, id2) {
   yield* exports_Effect.annotateCurrentSpan({ org, model: id2 });
   const stored = yield* getStored(id2);
-  return yield* exports_Effect.fromResult(check2(yield* get21(org), stored));
+  return yield* exports_Effect.fromResult(check2(yield* get22(org), stored));
 });
 
 // ../core/src/Route/RoutePublisher.ts
@@ -54950,7 +55983,7 @@ var applyChange = (pool, change2) => exports_Match.valueTags(change2, {
   }
 });
 var movesRoute = (before, after) => before.primary !== after.primary || before.baseline !== after.baseline;
-var make70 = (org, input, id2) => ({
+var make71 = (org, input, id2) => ({
   id: id2,
   org,
   name: input.name,
@@ -55010,7 +56043,7 @@ var routeOf = (workload, catalog, version) => {
 };
 var currentRoute = exports_Effect.fnUntraced(function* (workload) {
   const pointers = new Set([workload.pool.primary, workload.pool.baseline]);
-  const catalog = yield* exports_Effect.forEach(pointers, (model) => get19(model));
+  const catalog = yield* exports_Effect.forEach(pointers, (model) => get20(model));
   return yield* exports_Effect.fromResult(routeOf(workload, catalog, yield* historyLength(workload.id)));
 });
 var republish = exports_Effect.fnUntraced(function* (org, name) {
@@ -55024,13 +56057,13 @@ var republish = exports_Effect.fnUntraced(function* (org, name) {
 var create = exports_Effect.fn("Workload.create")(function* (org, input, actor) {
   const sql = yield* exports_SqlClient.SqlClient;
   const routes = yield* RoutePublisher;
-  const workload = make70(org, input, WorkloadId.make(yield* uuid));
+  const workload = make71(org, input, WorkloadId.make(yield* uuid));
   const changeId = ChangeId.make(yield* uuid);
   yield* exports_Effect.annotateCurrentSpan({ org, workload: input.name, workloadId: workload.id });
   const at = yield* now3;
   let publishing = false;
   yield* sql.withTransaction(exports_Effect.gen(function* () {
-    const model = yield* get22(org, input.model);
+    const model = yield* get23(org, input.model);
     const inserted = yield* sql`
         INSERT INTO workloads (id, org_id, name, primary_model_id, baseline_model_id)
         VALUES (${workload.id}, ${workload.org}, ${workload.name}, ${workload.pool.primary}, ${workload.pool.baseline})
@@ -55065,7 +56098,7 @@ var change2 = exports_Effect.fn("Workload.change")(function* (org, name, request
     const { id: id2, pool: before } = yield* lock2(org, name);
     const after = yield* exports_Effect.fromResult(applyChange(before, requested));
     yield* exports_Match.valueTags(requested, {
-      AddToPool: ({ model }) => get22(org, model).pipe(exports_Effect.andThen(sql`INSERT INTO workload_pool (workload_id, model_id) VALUES (${id2}, ${model})`)),
+      AddToPool: ({ model }) => get23(org, model).pipe(exports_Effect.andThen(sql`INSERT INTO workload_pool (workload_id, model_id) VALUES (${id2}, ${model})`)),
       RemoveFromPool: ({ model }) => sql`DELETE FROM workload_pool WHERE workload_id = ${id2} AND model_id = ${model}`,
       SetPrimary: ({ model }) => sql`UPDATE workloads SET primary_model_id = ${model}, baseline_model_id = ${model} WHERE id = ${id2}`
     });
@@ -55087,7 +56120,7 @@ var select = (sql, filter15) => sql`
       ${filter15.id === undefined ? sql`` : sql`AND w.id = ${filter15.id}`}
     ORDER BY w.name
   `;
-var get23 = exports_Effect.fn("Workload.get")(function* (org, name) {
+var get24 = exports_Effect.fn("Workload.get")(function* (org, name) {
   yield* exports_Effect.annotateCurrentSpan({ org, workload: name });
   const sql = yield* exports_SqlClient.SqlClient;
   const found = yield* exports_SqlSchema.findOneOption({
@@ -55151,6 +56184,7 @@ var RouteRequest = exports_Schema.Struct({
 }).annotate({ identifier: "RouteRequest" });
 var decodeHeaders = exports_Schema.decodeUnknownResult(RequestHeaders);
 var KvKey = exports_Schema.NonEmptyString.pipe(exports_Schema.brand("KvKey")).annotate({ identifier: "KvKey" });
+var KvValue = exports_Schema.String.pipe(exports_Schema.brand("KvValue")).annotate({ identifier: "KvValue" });
 var kvKey = {
   inferenceKey: (hash4) => KvKey.make(`k:${hash4}`),
   route: (org, workload) => KvKey.make(`r:${org}:${workload}`),
@@ -55315,76 +56349,41 @@ var disable = exports_Effect.fnUntraced(function* (org, id2) {
     WHERE org_id = ${org} AND id = ${id2}
   `;
 });
-var LIVE_PASS = Millis.make(60 * 1000);
-var GRACE = Millis.make(3 * 60 * 1000);
-var KV_WAIT = Millis.make(10 * 1000);
-var putEntry = exports_Effect.fnUntraced(function* (keyHash, entry, deadline) {
-  const kv = yield* exports_KeyValueStore.KeyValueStore;
-  const text3 = yield* encodeInferenceEntry(entry).pipe(exports_Effect.orDie);
-  const attempt2 = exports_Effect.gen(function* () {
-    if ((yield* now3) >= deadline) {
-      return yield* new exports_Cause.TimeoutError("A key's entry wasn't sent within LIVE_PASS of its read");
-    }
-    yield* kv.set(kvKey.inferenceKey(keyHash), text3).pipe(exports_Effect.timeout(exports_Duration.millis(KV_WAIT)));
-  });
-  yield* attempt2.pipe(exports_Effect.retry({
-    schedule: exports_Schedule.spaced("1 second"),
-    times: 3,
-    while: () => exports_Effect.map(now3, (now4) => now4 < deadline)
-  }));
-});
 var withEntries = Kind.literals.filter((kind) => hasInferenceEntry[kind]);
-var record3 = (sql, keys5) => exports_SqlSchema.findAll({
-  Request: exports_Schema.Void,
-  Result: exports_Schema.Struct({ id: ApiKeyId }),
-  execute: () => sql`
-        INSERT INTO key_entry_syncs AS s (key_id, changed_at, attempted_at)
-        SELECT id, clock_timestamp(), clock_timestamp() FROM api_keys
-        WHERE ${keys5} AND kind IN ${sql.in(withEntries)}
-        ON CONFLICT (key_id) DO UPDATE SET recorded = s.recorded + 1, changed_at = clock_timestamp(), synced_at = NULL
-        RETURNING s.key_id AS id
-      `
-})(undefined).pipe(exports_Effect.map(exports_Array.map(({ id: id2 }) => id2)), exports_Effect.catchTag("SchemaError", exports_Effect.die));
-var Pending2 = exports_Schema.Struct({
+var KeyRow = exports_Schema.Struct({
   keyId: ApiKeyId,
   org: OrgId,
   hash: Hash2,
-  disabledAt: nullAsAbsent(Timestamp),
-  recorded: exports_Schema.Int,
-  due: exports_Schema.Boolean
-}).annotate({ identifier: "ApiKeyPending" });
-var isDue = (sql) => sql`s.changed_at + ${GRACE} * interval '1 millisecond' <= clock_timestamp()`;
-var syncEntry = exports_Effect.fnUntraced(function* (id2) {
+  disabledAt: nullAsAbsent(Timestamp)
+}).annotate({ identifier: "ApiKeyRow" });
+var kvEntryOf = exports_Effect.fnUntraced(function* (id2) {
   const sql = yield* exports_SqlClient.SqlClient;
-  const deadline = EpochMillis.make((yield* now3) + LIVE_PASS);
   const row = yield* exports_SqlSchema.findOneOption({
     Request: ApiKeyId,
-    Result: Pending2,
+    Result: KeyRow,
     execute: (request3) => sql`
         SELECT k.id AS "keyId", k.org_id AS org, k.hash,
-          CASE WHEN k.enabled THEN NULL ELSE coalesce(k.disabled_at, s.changed_at) END AS "disabledAt",
-          s.recorded, ${isDue(sql)} AS due
-        FROM key_entry_syncs s JOIN api_keys k ON k.id = s.key_id
-        WHERE s.key_id = ${request3}
+          CASE WHEN k.enabled THEN NULL ELSE coalesce(k.disabled_at, s.changed_at, now()) END AS "disabledAt"
+        FROM api_keys k LEFT JOIN key_entry_syncs s ON s.key_id = k.id
+        WHERE k.id = ${request3}
       `
   })(id2).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die));
   if (exports_Option.isNone(row))
-    return;
+    return exports_Option.none();
   const key2 = row.value;
   const access4 = yield* exports_Effect.fromOption(exports_Array.head(yield* access3([key2.org]))).pipe(exports_Effect.orDie);
-  yield* putEntry(key2.hash, entryFor(key2, access4), deadline);
-  yield* key2.due ? sql`DELETE FROM key_entry_syncs WHERE key_id = ${key2.keyId} AND recorded = ${key2.recorded}` : sql`UPDATE key_entry_syncs SET synced_at = now() WHERE key_id = ${key2.keyId} AND recorded = ${key2.recorded}`;
+  const value5 = yield* encodeInferenceEntry(entryFor(key2, access4)).pipe(exports_Effect.orDie);
+  return exports_Option.some({ key: kvKey.inferenceKey(key2.hash), value: KvValue.make(value5) });
 });
-var syncAll = (keys5, until) => exports_Effect.map(exports_Effect.forEach(keys5, (key2) => exports_Effect.flatMap(now3, (now4) => until !== undefined && now4 >= until ? exports_Effect.succeedNone : exports_Effect.asSome(exports_Effect.map(exports_Effect.exit(syncEntry(key2)), (exit3) => ({ key: key2, exit: exit3 })))), { concurrency: 4 }), exports_Array.getSomes);
-var failures = (synced) => synced.filter(({ exit: exit3 }) => exports_Exit.isFailure(exit3));
-var syncNow = exports_Effect.fnUntraced(function* (keys5) {
-  const failed = failures(yield* syncAll(keys5));
-  if (failed.length > 0) {
-    yield* exports_Effect.logWarning("Keys' entries weren't synced; the retry syncs them", {
-      failed: failed.length,
-      cause: failed[0]?.exit
-    });
-  }
+var sync7 = make70({ name: TableName.make("key_entry_syncs"), id: IdColumn.make("key_id"), Id: ApiKeyId }, kvEntryOf);
+var record3 = exports_Effect.fnUntraced(function* (sql, keys5) {
+  const ids = yield* exports_SqlSchema.findAll({
+    Request: exports_Schema.Void,
+    Result: exports_Schema.Struct({ id: ApiKeyId }),
+    execute: () => sql`SELECT id FROM api_keys WHERE ${keys5} AND kind IN ${sql.in(withEntries)}`
+  })(undefined).pipe(exports_Effect.map(exports_Array.map(({ id: id2 }) => id2)), exports_Effect.catchTag("SchemaError", exports_Effect.die));
+  yield* sync7.record(ids);
+  return ids;
 });
 var issue = exports_Effect.fn("ApiKey.issue")(function* (org, user2, input, deployed) {
   yield* exports_Effect.annotateCurrentSpan({ org, kind: input.kind });
@@ -55393,8 +56392,8 @@ var issue = exports_Effect.fn("ApiKey.issue")(function* (org, user2, input, depl
   const id2 = ApiKeyId.make(yield* uuid);
   const created = { id: id2, ...input, start: start2(key2), key: key2 };
   const recorded = yield* exports_Effect.gen(function* () {
-    const settings = yield* lock(org);
-    const state2 = exports_Option.isNone(settings) ? "pending" : settings.value.settings.access;
+    const settings = yield* exports_Effect.fromOption(yield* lock(org)).pipe(exports_Effect.orDie);
+    const state2 = settings.settings.access;
     if (state2 !== "active")
       return yield* new OrgNotEnabled({ state: state2 });
     yield* insert(org, {
@@ -55408,7 +56407,7 @@ var issue = exports_Effect.fn("ApiKey.issue")(function* (org, user2, input, depl
     });
     return yield* record3(sql, sql`id = ${id2}`);
   }).pipe(sql.withTransaction);
-  yield* syncNow(recorded);
+  yield* sync7.syncNow(recorded);
   return created;
 });
 var list6 = exports_Effect.fn("ApiKey.list")(function* (org) {
@@ -55420,7 +56419,7 @@ var revoke = exports_Effect.fn("ApiKey.revoke")(function* (org, id2) {
   if (exports_Option.isNone(yield* find2(org, id2)))
     return yield* new NotFound7({ apiKey: id2 });
   const recorded = yield* disable(org, id2).pipe(exports_Effect.andThen(record3(sql, sql`id = ${id2}`)), sql.withTransaction);
-  yield* syncNow(recorded);
+  yield* sync7.syncNow(recorded);
 });
 var changeAccess = exports_Effect.fnUntraced(function* (org, state2, actor) {
   const sql = yield* exports_SqlClient.SqlClient;
@@ -55428,7 +56427,7 @@ var changeAccess = exports_Effect.fnUntraced(function* (org, state2, actor) {
     change(org, SetAccess.make({ state: state2 }), actor),
     record3(sql, sql`org_id = ${org} AND enabled`)
   ]).pipe(sql.withTransaction);
-  yield* syncNow(recorded);
+  yield* sync7.syncNow(recorded);
   return changed;
 });
 var suspend7 = exports_Effect.fn("ApiKey.suspend")(function* (org, actor) {
@@ -55437,60 +56436,6 @@ var suspend7 = exports_Effect.fn("ApiKey.suspend")(function* (org, actor) {
 var enable = exports_Effect.fn("ApiKey.enable")(function* (org, actor) {
   return yield* changeAccess(org, "active", actor);
 });
-var BATCH = 100;
-var KEPT_FOR_LAST = 25;
-var RUN_BUDGET = Millis.make(30 * 1000);
-
-class RetryError extends exports_Schema.TaggedError()("ApiKeyRetryError", {
-  reason: exports_Schema.Literals(["Unavailable"]),
-  cause: exports_Schema.Defect()
-}) {
-}
-var nextBatch = exports_Effect.fnUntraced(function* () {
-  const sql = yield* exports_SqlClient.SqlClient;
-  const oldest = (where) => exports_SqlSchema.findAll({
-    Request: exports_Schema.Void,
-    Result: exports_Schema.Struct({ id: ApiKeyId }),
-    execute: () => sql`
-          SELECT s.key_id AS id FROM key_entry_syncs s
-          WHERE ${where}
-          ORDER BY s.attempted_at, s.key_id
-          LIMIT ${BATCH}
-          FOR UPDATE SKIP LOCKED
-        `
-  })(undefined).pipe(exports_Effect.map(exports_Array.map(({ id: id2 }) => id2)), exports_Effect.catchTag("SchemaError", exports_Effect.die));
-  return yield* exports_Effect.gen(function* () {
-    const unsynced = yield* oldest(sql`s.synced_at IS NULL`);
-    const last2 = yield* oldest(sql`s.synced_at IS NOT NULL AND ${isDue(sql)}`);
-    const first = unsynced.slice(0, BATCH - Math.min(KEPT_FOR_LAST, last2.length));
-    const batch = [...first, ...last2.slice(0, BATCH - first.length)];
-    if (batch.length > 0)
-      yield* sql`UPDATE key_entry_syncs SET attempted_at = now() WHERE key_id IN ${sql.in(batch)}`;
-    return batch;
-  }).pipe(sql.withTransaction);
-});
-var retrySyncs = exports_Effect.fn("ApiKey.retrySyncs")(function* () {
-  const until = EpochMillis.make((yield* now3) + RUN_BUDGET);
-  let synced = 0;
-  let kept = [];
-  while (true) {
-    const batch = yield* nextBatch();
-    const outcomes = yield* syncAll(batch, until);
-    const failed = failures(outcomes);
-    synced += outcomes.length - failed.length;
-    kept = failed;
-    if (outcomes.length < BATCH || failed.length === outcomes.length)
-      break;
-  }
-  if (synced > 0)
-    yield* exports_Effect.logDebug("Synced keys' entries", { synced });
-  if (kept.length > 0) {
-    yield* exports_Effect.logError("KV refuses to sync keys' entries; they are retried", {
-      kept: kept.length,
-      cause: kept[0]?.exit
-    });
-  }
-}, exports_Effect.mapError((cause) => new RetryError({ reason: "Unavailable", cause })));
 // ../core/src/Api/PlatformApi.ts
 var exports_PlatformApi = {};
 __export(exports_PlatformApi, {
@@ -55568,7 +56513,7 @@ var values4 = (meanings) => {
 `);
 };
 var literals = (meanings) => exports_Record.toEntries(meanings).map(([value5, meaning]) => [exports_Formatter.format(value5), meaning]);
-var listed = (set9, conjunction) => {
+var listed2 = (set9, conjunction) => {
   const each = set9.map((literal2) => exports_Formatter.format(literal2));
   return each.length < 2 ? each.join("") : `${each.slice(0, -1).join(", ")} ${conjunction} ${each.at(-1)}`;
 };
@@ -55595,7 +56540,7 @@ var JudgeCall = exports_Schema.Struct({
   request: JudgeRequest,
   response: JudgeResponse
 }).annotate({ identifier: "JudgeCall" });
-var make71 = (name, model, messages, completion, parsed) => {
+var make72 = (name, model, messages, completion, parsed) => {
   const usage = completion.call.usage;
   return {
     name,
@@ -55731,7 +56676,7 @@ var Data = TaskData.schema.mapFields(exports_Struct.assign({
   workload: WorkloadId,
   source_prompt_version: exports_Schema.optionalKey(PromptVersion)
 })).annotate({ identifier: "ReplayTaskData" });
-var Recorded = exports_Schema.Struct({
+var Recorded2 = exports_Schema.Struct({
   model: ModelId,
   calls: exports_Schema.Array(exports_Schema.NullOr(ModelCall))
 }).annotate({ identifier: "ReplayTaskRecorded" });
@@ -55838,11 +56783,11 @@ var failsRequired = ({ metrics, rewards }, required2) => required2.some((name) =
   return score != null && score < 1;
 });
 var normalize4 = ({ metrics, rewards }, required2) => {
-  const total = exports_Record.values(rewards).reduce((sum3, reward2) => sum3 + (reward2 === null ? 0 : reward2.weight ?? 1), 0);
+  const total = exports_Record.values(rewards).reduce((sum4, reward2) => sum4 + (reward2 === null ? 0 : reward2.weight ?? 1), 0);
   const zeroed = failsRequired({ metrics, rewards }, required2) || total === 0;
   return exports_Record.map(rewards, (reward2) => reward2 === null ? null : { score: reward2.score, weight: zeroed ? 0 : (reward2.weight ?? 1) / total });
 };
-var mean = (scores) => Score.make(scores.reduce((sum3, score) => sum3 + score, 0) / scores.length);
+var mean = (scores) => Score.make(scores.reduce((sum4, score) => sum4 + score, 0) / scores.length);
 var modes = {
   mean: { gives: "their mean", combine: mean },
   min: { gives: "the lowest of them", combine: (scores) => Score.make(Math.min(...scores)) },
@@ -56542,13 +57487,15 @@ var usageSum = (sql, usage2) => sql`
 
 // ../core/src/Scoring/JudgeRecording.ts
 var encodeCall2 = exports_Schema.encodeSync(JudgeCall);
-var write3 = exports_Effect.fn("JudgeRecording.write")(function* (org, run6, call) {
+var write3 = exports_Effect.fn("JudgeRecording.write")(function* (org, run6, call, charged) {
   const id2 = JudgeCallId.make(yield* uuid);
   yield* exports_Effect.annotateCurrentSpan({ org, runId: run6, judgeCallId: id2, judge: call.name });
   const sql = yield* exports_SqlClient.SqlClient;
+  const [charge3] = yield* chargesOf([charged]);
+  const priced2 = { ...call, response: withCharge(call.response, charge3) };
   const stored = yield* sql`
       INSERT INTO judge_calls (id, run_id, call)
-      SELECT ${id2}, r.id, ${JSON.stringify(encodeCall2(call))}::jsonb
+      SELECT ${id2}, r.id, ${JSON.stringify(encodeCall2(priced2))}::jsonb
       FROM score_runs r JOIN workloads w ON w.id = r.workload_id
       WHERE w.org_id = ${org} AND r.id = ${run6}
       RETURNING id
@@ -56559,7 +57506,7 @@ var write3 = exports_Effect.fn("JudgeRecording.write")(function* (org, run6, cal
   return id2;
 });
 var Stored4 = exports_Schema.Struct({ id: JudgeCallId, call: JudgeCall });
-var get24 = exports_Effect.fn("JudgeRecording.get")(function* (org, ids) {
+var get25 = exports_Effect.fn("JudgeRecording.get")(function* (org, ids) {
   yield* exports_Effect.annotateCurrentSpan({ org, judgeCalls: ids.length });
   const sql = yield* exports_SqlClient.SqlClient;
   if (ids.length === 0)
@@ -56770,7 +57717,7 @@ var sessionBlock = ({ prompt, system }, { maxChars, messages }) => messages ===
 var TURNS = "Which points it judges, picked by the recorded turn at each point, not by the reply given in its place: `kinds`, " + "whether that turn called a tool or answered in text, and `final`, whether it is the trace's last. Default {}: " + "every point.";
 var TurnFilter = exports_Schema.Struct({
   kinds: exports_Schema.NonEmptyArray(TurnKind).check(exports_Schema.isUnique()).annotateKey({
-    description: "The points it judges by what the recorded turn there did: called a tool, answered in text, or " + `either; any of ${listed(TurnKind.literals, "and")}. ` + `Default ${exports_Formatter.format(TurnKind.literals)}: either.`
+    description: "The points it judges by what the recorded turn there did: called a tool, answered in text, or " + `either; any of ${listed2(TurnKind.literals, "and")}. ` + `Default ${exports_Formatter.format(TurnKind.literals)}: either.`
   }).pipe(exports_Schema.withDecodingDefaultKey(exports_Effect.succeed(TurnKind.literals))),
   final: exports_Schema.NullOr(exports_Schema.Boolean).annotateKey({
     description: "Whether it judges the point at the trace's last recorded turn: true for that point only, false for " + "every point before it, null for either. Default null."
@@ -56886,7 +57833,7 @@ var ExplainedCriterion = Criterion.mapFields(({ text: text3 }) => ({
   }).pipe(exports_Schema.withDecodingDefaultKey(exports_Effect.succeed(null)))
 })).check(exports_Schema.makeFilter(({ choices, meanings }) => exports_Record.keys(meanings).flatMap((choice2) => choices.includes(choice2) ? [] : [{
   path: ["meanings", choice2],
-  issue: `"${choice2}" is not one of the criterion's choices (${listed(choices, "or")})`
+  issue: `"${choice2}" is not one of the criterion's choices (${listed2(choices, "or")})`
 }]))).annotate({ identifier: "ExplainedCriterion" });
 var criteriaIssues = (criteria) => {
   const seen = new Set;
@@ -56977,8 +57924,8 @@ var groupScore = (criteria, scores) => {
     const score = scoreOf(scores, name);
     return score === null ? [] : [{ score, weight }];
   });
-  const total = applied.reduce((sum3, { weight }) => sum3 + weight, 0);
-  return total > 0 ? Score.make(applied.reduce((sum3, { score, weight }) => sum3 + score * weight, 0) / total) : null;
+  const total = applied.reduce((sum4, { weight }) => sum4 + weight, 0);
+  return total > 0 ? Score.make(applied.reduce((sum4, { score, weight }) => sum4 + score * weight, 0) / total) : null;
 };
 var decodeCriteria = exports_Schema.decodeUnknownEffect(CriteriaSettings);
 var decodeNames = exports_Schema.decodeUnknownSync(exports_Schema.Struct({ criteria: exports_Schema.Array(exports_Schema.Struct({ name: ScorerName })) }));
@@ -57116,7 +58063,7 @@ var turnsOf = exports_Effect.fnUntraced(function* (attempt3) {
     system: system_prompt ?? undefined
   };
 });
-var modelOf = (name, id2) => get19(id2).pipe(exports_Effect.catchTags({
+var modelOf = (name, id2) => get20(id2).pipe(exports_Effect.catchTags({
   ModelNotFound: (error2) => exports_Effect.fail(unsupported2(name, error2)),
   SqlError: (cause) => exports_Effect.fail(new VerifierError({ reason: "Unavailable", scorer: name, cause }))
 }));
@@ -57124,7 +58071,7 @@ var verdictOf = exports_Effect.fnUntraced(function* (org, run6, name, model, ver
   const failed = (reason) => (cause) => new VerifierError({ reason, scorer: name, cause });
   const completion = yield* produce(model, prompt, org);
   const read5 = verdicts.read(completion.reply.content ?? "");
-  const call = yield* write3(org, run6, make71(name, model.id, prompt.messages, completion, exports_Result.getOrUndefined(read5)?.answer ?? null)).pipe(exports_Effect.mapError(failed("Unavailable")));
+  const call = yield* write3(org, run6, make72(name, model.id, prompt.messages, completion, exports_Result.getOrUndefined(read5)?.answer ?? null), completion.charged).pipe(exports_Effect.mapError(failed("Unavailable")));
   const { recorded } = yield* exports_Effect.fromResult(read5).pipe(exports_Effect.mapError(failed("Failed")));
   return { recorded, call };
 });
@@ -57251,7 +58198,7 @@ var Weight2 = Weight.annotateKey({
   description: "How much it counts beside the others, from 0 to 1000. Default 1."
 }).pipe(exports_Schema.withDecodingDefaultKey(exports_Effect.succeed(1)));
 var scorerOf = (set9) => set9.annotateKey({
-  description: `Which scorer it is: ${listed(set9.literals, "or")}, as listed under the group.`
+  description: `Which scorer it is: ${listed2(set9.literals, "or")}, as listed under the group.`
 });
 var RewardScorer = exports_Schema.Struct({
   scorer: scorerOf(FunctionName),
@@ -57445,15 +58392,15 @@ var uncounted = (config) => {
   const scoredBy = exports_Record.keys(EpisodeScorerConfigs.fields).filter((name) => rewards[name] !== null);
   if (scoredBy.length > 0 && rewards.replies === null) {
     const by = `the trace scores only by \`episode.rewards\` (${scoredBy.map((name) => `\`${name}\``).join(", ")})`;
-    const add7 = metrics.replies === null ? "add `episode.rewards.replies` to count it" : "move `replies` from `episode.metrics` to `episode.rewards` to count it";
+    const add8 = metrics.replies === null ? "add `episode.rewards.replies` to count it" : "move `replies` from `episode.metrics` to `episode.rewards` to count it";
     return [
       ...scorers.map(({ movesToMetrics, path }) => ({
         path,
-        message: `Counts toward each reply's score, but ${by}; ${add7}` + (movesToMetrics ? ", or move it to `metrics` to record it." : ".")
+        message: `Counts toward each reply's score, but ${by}; ${add8}` + (movesToMetrics ? ", or move it to `metrics` to record it." : ".")
       })),
       ...config.required.map((_, i) => ({
         path: ["required", i],
-        message: `Zeroes the score of a reply where it fails, but ${by}; ${add7}.`
+        message: `Zeroes the score of a reply where it fails, but ${by}; ${add8}.`
       }))
     ];
   }
@@ -57585,7 +58532,7 @@ var run6 = exports_Effect.fn("ReplayEnv.run")(function* (config, task, replier,
       prompt: promptAt(task.data, point.index),
       completion
     });
-    yield* write2(wholeDelta(owner.org, trace3, yield* now3));
+    yield* write2(wholeDelta(owner.org, trace3, yield* now3, [completion.charged]));
     const scores = yield* verifiers2.score({
       config: judgesAt(scorers, point.reference),
       attempt: trace3,
@@ -57611,8 +58558,8 @@ var run6 = exports_Effect.fn("ReplayEnv.run")(function* (config, task, replier,
     candidate: () => judgeTrajectory(trajectoryJudge2, judge, task, steps, owner)
   }));
   const verdict = exports_Result.getOrUndefined(trajectory2);
-  const failures2 = exports_Result.isFailure(trajectory2) ? [...pointFailures, trajectory2.failure] : pointFailures;
-  const errors = failures2.map(toError2);
+  const failures = exports_Result.isFailure(trajectory2) ? [...pointFailures, trajectory2.failure] : pointFailures;
+  const errors = failures.map(toError2);
   const outcome2 = compact2({
     attempts,
     scores: compact2({ ...scored.scores, trajectory: verdict?.score }),
@@ -57621,7 +58568,7 @@ var run6 = exports_Effect.fn("ReplayEnv.run")(function* (config, task, replier,
     errors: exports_Array.isArrayNonEmpty(errors) ? errors : undefined,
     judgeCalls: verdict?.call === undefined ? undefined : [verdict.call]
   });
-  return { outcome: outcome2, failures: failures2 };
+  return { outcome: outcome2, failures };
 });
 var encodeCall3 = exports_Schema.encodeSync(JudgeCall);
 var stored = (got, key3, what) => {
@@ -57675,12 +58622,13 @@ __export(exports_Run, {
   readout: () => readout,
   plan: () => plan,
   list: () => list10,
-  get: () => get26,
+  get: () => get27,
   fail: () => fail12,
   episodes: () => episodes,
   encodeTrial: () => encodeTrial,
   create: () => create3,
   consume: () => consume,
+  cancel: () => cancel,
   VerdictPage: () => VerdictPage,
   VerdictNotFound: () => VerdictNotFound,
   VerdictFilter: () => VerdictFilter,
@@ -57701,6 +58649,7 @@ __export(exports_Run, {
   Readout: () => Readout,
   Page: () => Page2,
   NothingToScore: () => NothingToScore,
+  NotRunning: () => NotRunning,
   NotFound: () => NotFound11,
   Judgment: () => Judgment,
   Filter: () => Filter4,
@@ -57774,9 +58723,9 @@ var latestBranch = (nodes) => {
   const leaf = latestLeaf(nodes);
   return leaf === undefined ? [] : walk(nodes, leaf);
 };
-var previewOf = (row, nodes, latest) => {
-  const replies = latest.flatMap((message) => message.role === "assistant" ? [message] : []);
-  const firstUser = latest.find((message) => message.role === "user");
+var previewOf = (row, nodes, latest2) => {
+  const replies = latest2.flatMap((message) => message.role === "assistant" ? [message] : []);
+  const firstUser = latest2.find((message) => message.role === "user");
   const firstUserText = firstUser === undefined ? "" : textOf3(firstUser.content);
   return compact2({
     id: row.id,
@@ -57907,7 +58856,7 @@ var list8 = exports_Effect.fn("TraceReading.list")(function* (org, workload, opt
   const misplaced = [...graphs.values()].some((graph) => graph.some((node, position) => node.node_id !== position));
   if (misplaced)
     return yield* exports_Effect.die("TraceReading.list: a trace's graph is incomplete");
-  const latest = page.map((row) => {
+  const latest2 = page.map((row) => {
     const graph = graphs.get(row.trace) ?? [];
     return {
       row,
@@ -57915,8 +58864,8 @@ var list8 = exports_Effect.fn("TraceReading.list")(function* (org, workload, opt
       branch: latestBranch(graph).map(({ node }) => node.message_hash)
     };
   });
-  const bodies = yield* store.getMany([...new Set(latest.flatMap(({ branch }) => branch))]);
-  const traces = yield* exports_Effect.forEach(latest, ({ row, graph, branch }) => {
+  const bodies = yield* store.getMany([...new Set(latest2.flatMap(({ branch }) => branch))]);
+  const traces = yield* exports_Effect.forEach(latest2, ({ row, graph, branch }) => {
     const messages = branch.flatMap((hash5) => {
       const body = bodies.get(hash5);
       return body === undefined ? [] : [body.message];
@@ -57943,7 +58892,7 @@ var production = exports_Effect.fnUntraced(function* (org, id2) {
   })({ org, id: id2 }).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die), exports_Effect.mapError(unavailable4));
   if (exports_Option.isNone(row))
     return yield* new NotFound9({ trace: id2 });
-  const trace3 = yield* get20(org, row.value.trace).pipe(exports_Effect.catchTag("TraceNotFound", exports_Effect.die));
+  const trace3 = yield* get21(org, row.value.trace).pipe(exports_Effect.catchTag("TraceNotFound", exports_Effect.die));
   return { row: row.value, trace: trace3 };
 });
 var PromptRow = exports_Schema.Struct({ idx: CallIndex, prompt: NodeId });
@@ -57971,11 +58920,11 @@ var find4 = exports_Effect.fn("TraceReading.find")(function* (org, ref) {
   const { prompts, tasksets } = yield* placing(row.trace);
   const nodes = trace3.nodes ?? [];
   const calls2 = (trace3.calls ?? []).map((call, idx) => ({ call, prompt: prompts.get(CallIndex.make(idx)) }));
-  const latest = latestLeaf(nodes);
+  const latest2 = latestLeaf(nodes);
   const leaf = ref.leaf;
   if (leaf !== undefined && nodes[leaf] === undefined)
     return yield* new BranchNotFound({ trace: ref.trace, leaf });
-  const ends = leaf === undefined ? [...latest === undefined ? [] : [latest], ...leaves(nodes).toReversed().filter((end3) => end3 !== latest)] : [leaf];
+  const ends = leaf === undefined ? [...latest2 === undefined ? [] : [latest2], ...leaves(nodes).toReversed().filter((end3) => end3 !== latest2)] : [leaf];
   const info2 = compact2(yield* decodeInfo(trace3.info?.[INFO_KEY]).pipe(exports_Effect.orDie));
   return compact2({
     preview: previewOf(row, nodes, latestBranch(nodes).map(({ node }) => node.message)),
@@ -57983,7 +58932,7 @@ var find4 = exports_Effect.fn("TraceReading.find")(function* (org, ref) {
     status: row.status,
     settledAt: row.settledAt,
     turns: row.turns,
-    latest,
+    latest: latest2,
     branches: ends.map((end3) => conversationOf(nodes, calls2, end3, tasksets)),
     unplaced: calls2.flatMap(({ call, prompt }) => call.node == null && prompt === undefined ? [call] : [])
   });
@@ -58052,8 +59001,8 @@ var alternativesOf = (ast) => {
 };
 var expected = (alternatives, got) => {
   const each = exports_Array.dedupe(alternatives);
-  const listed2 = each.length < 2 ? each.join("") : `${each.slice(0, -1).join(", ")} or ${each.at(-1)}`;
-  return `Expected ${listed2}, got ${got}`;
+  const listed3 = each.length < 2 ? each.join("") : `${each.slice(0, -1).join(", ")} or ${each.at(-1)}`;
+  return `Expected ${listed3}, got ${got}`;
 };
 var mismatch = (issue2) => exports_Match.value(issue2).pipe(exports_Match.tags({
   AnyOf: ({ ast }) => alternativesOf(ast) !== undefined,
@@ -58113,11 +59062,11 @@ var decodeConfig = exports_Schema.decodeUnknownResult(EnvConfig, {
 var decode8 = (file3) => decodeConfig(file3).pipe(exports_Result.mapError((error2) => new Invalid2({ issues: issuesOf(error2) })));
 var warnings = (config) => uncounted(config).map(({ message, path }) => ({ path: pathOf(path), message }));
 var check3 = exports_Effect.fn("ScoringCheck.check")(function* (config) {
-  const missing2 = yield* exports_Effect.forEach(models(config), ({ path, model }) => get19(model).pipe(exports_Effect.as([]), exports_Effect.catchTag("ModelNotFound", () => exports_Effect.succeed([{
+  const missing3 = yield* exports_Effect.forEach(models(config), ({ path, model }) => get20(model).pipe(exports_Effect.as([]), exports_Effect.catchTag("ModelNotFound", () => exports_Effect.succeed([{
     path: pathOf(path),
     message: `The catalog has no model ${model}`
   }]))));
-  const issues = missing2.flat();
+  const issues = missing3.flat();
   if (exports_Array.isArrayNonEmpty(issues))
     return yield* new Invalid2({ issues });
   return config;
@@ -58132,7 +59081,7 @@ __export(exports_Taskset, {
   load: () => load,
   list: () => list9,
   inWorkload: () => inWorkload,
-  get: () => get25,
+  get: () => get26,
   create: () => create2,
   checkScoring: () => checkScoring,
   Unscorable: () => Unscorable,
@@ -58253,7 +59202,7 @@ var create2 = exports_Effect.fn("Taskset.create")(function* (org, workload, inpu
   const createdAt = yield* now3;
   yield* exports_Effect.annotateCurrentSpan({ org, workload, tasksetId: id2, traces: input.traces.length });
   return yield* sql.withTransaction(exports_Effect.gen(function* () {
-    const { id: workloadId } = yield* get23(org, workload);
+    const { id: workloadId } = yield* get24(org, workload);
     const found = yield* exports_SqlSchema.findAll({
       Request: exports_Schema.Array(PublicId),
       Result: exports_Schema.Struct({ id: TraceId, public: PublicId }),
@@ -58329,8 +59278,8 @@ var select2 = (sql, filter15) => sql`
     ORDER BY t.created_at DESC, t.id
   `;
 var ByAddress = exports_Schema.Struct({ org: OrgId, workload: WorkloadName, name: TasksetName });
-var missing2 = (org, address) => get23(org, address.workload).pipe(exports_Effect.andThen(exports_Effect.fail(new NotFound10({ taskset: address }))));
-var get25 = exports_Effect.fn("Taskset.get")(function* (org, address) {
+var missing3 = (org, address) => get24(org, address.workload).pipe(exports_Effect.andThen(exports_Effect.fail(new NotFound10({ taskset: address }))));
+var get26 = exports_Effect.fn("Taskset.get")(function* (org, address) {
   yield* exports_Effect.annotateCurrentSpan({ org, workload: address.workload, taskset: address.taskset });
   const sql = yield* exports_SqlClient.SqlClient;
   const found = yield* exports_SqlSchema.findOneOption({
@@ -58339,10 +59288,10 @@ var get25 = exports_Effect.fn("Taskset.get")(function* (org, address) {
     execute: (request3) => select2(sql, request3)
   })({ org, workload: address.workload, name: address.taskset }).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die));
   if (exports_Option.isNone(found))
-    return yield* missing2(org, address);
+    return yield* missing3(org, address);
   return found.value;
 });
-var listed2 = (org, workload) => exports_Effect.gen(function* () {
+var listed3 = (org, workload) => exports_Effect.gen(function* () {
   const sql = yield* exports_SqlClient.SqlClient;
   return yield* exports_SqlSchema.findAll({
     Request: exports_Schema.Struct({ org: OrgId, workload: exports_Schema.optional(WorkloadName) }),
@@ -58352,13 +59301,13 @@ var listed2 = (org, workload) => exports_Effect.gen(function* () {
 });
 var list9 = exports_Effect.fn("Taskset.list")(function* (org) {
   yield* exports_Effect.annotateCurrentSpan({ org });
-  return yield* listed2(org);
+  return yield* listed3(org);
 });
 var inWorkload = exports_Effect.fn("Taskset.inWorkload")(function* (org, workload) {
   yield* exports_Effect.annotateCurrentSpan({ org, workload });
-  const found = yield* listed2(org, workload);
+  const found = yield* listed3(org, workload);
   if (found.length === 0)
-    yield* get23(org, workload);
+    yield* get24(org, workload);
   return found;
 });
 var idOf = exports_Effect.fnUntraced(function* (org, address, options4) {
@@ -58373,7 +59322,7 @@ var idOf = exports_Effect.fnUntraced(function* (org, address, options4) {
       `
   })({ org, workload: address.workload, name: address.taskset }).pipe(exports_Effect.catchTag("SchemaError", exports_Effect.die));
   if (exports_Option.isNone(found))
-    return yield* missing2(org, address);
+    return yield* missing3(org, address);
   return found.value.id;
 });
 var checkScoring = exports_Effect.fn("Taskset.checkScoring")(function* (org, address, config) {
@@ -58436,7 +59385,7 @@ var toolsOf = (nodes, leaf) => {
 var decodeInfo2 = exports_Schema.decodeUnknownEffect(AmbralInfo);
 var load = exports_Effect.fn("Taskset.load")(function* (org, workload, member2, helpers) {
   yield* exports_Effect.annotateCurrentSpan({ org, traceId: member2.traceId, leafNodeId: member2.leafNodeId });
-  const trace3 = yield* get20(org, member2.traceId).pipe(exports_Effect.catchTag("TraceNotFound", exports_Effect.die));
+  const trace3 = yield* get21(org, member2.traceId).pipe(exports_Effect.catchTag("TraceNotFound", exports_Effect.die));
   const info2 = yield* decodeInfo2(trace3.info?.[INFO_KEY]).pipe(exports_Effect.orDie);
   const replies = new Map;
   for (const call of trace3.calls ?? [])
@@ -58468,7 +59417,7 @@ var load = exports_Effect.fn("Taskset.load")(function* (org, workload, member2,
 var RunConfig = exports_Schema.Struct({
   scoring: exports_Schema.optional(EnvConfig)
 }).annotate({ identifier: "RunConfig" });
-var Status5 = exports_Schema.Literals(["running", "completed", "failed"]).annotate({ identifier: "RunStatus" });
+var Status5 = exports_Schema.Literals(["running", "completed", "failed", "cancelled"]).annotate({ identifier: "RunStatus" });
 var Production = exports_Schema.TaggedStruct("production", {}).annotate({ identifier: "RunProduction" });
 var Candidate = exports_Schema.TaggedStruct("candidate", { model: ModelId }).annotate({ identifier: "RunCandidate" });
 var PRODUCTION = "production";
@@ -58556,6 +59505,12 @@ class NotFound11 extends exports_Schema.TaggedError()("RunNotFound", {
 }, { httpApiStatus: 404 }) {
 }
 
+class NotRunning extends exports_Schema.TaggedError()("RunNotRunning", {
+  run: RunId,
+  status: Status5
+}, { httpApiStatus: 409 }) {
+}
+
 class SubjectNotInPool extends exports_Schema.TaggedError()("RunSubjectNotInPool", {
   workload: WorkloadName,
   model: ModelId
@@ -58577,9 +59532,9 @@ var outsidePool = (workload, subjects) => subjects.flatMap((subject) => exports_
   candidate: ({ model }) => workload.pool.models.includes(model) ? [] : [model]
 }));
 var plan = (workload, taskset, input, start3) => {
-  const [missing3] = outsidePool(workload, input.subjects);
-  if (missing3 !== undefined)
-    return exports_Result.fail(new SubjectNotInPool({ workload: workload.name, model: missing3 }));
+  const [missing4] = outsidePool(workload, input.subjects);
+  if (missing4 !== undefined)
+    return exports_Result.fail(new SubjectNotInPool({ workload: workload.name, model: missing4 }));
   if (input.scoring === undefined && taskset.scoringVersion === undefined) {
     return exports_Result.fail(new ScoringMissing({ taskset: input.taskset }));
   }
@@ -58639,16 +59594,16 @@ var create3 = exports_Effect.fn("Run.create")(function* (org, input) {
     taskset: input.taskset.taskset,
     subjects: input.subjects.length
   });
-  const taskset = yield* get25(org, input.taskset);
-  const workload = yield* get23(org, taskset.workload).pipe(exports_Effect.catchTag("WorkloadNotFound", exports_Effect.die));
+  const taskset = yield* get26(org, input.taskset);
+  const workload = yield* get24(org, taskset.workload).pipe(exports_Effect.catchTag("WorkloadNotFound", exports_Effect.die));
   const planned = yield* exports_Effect.fromResult(plan(workload, taskset, input, { id: id2, at }));
   const config = yield* check3(yield* scoring2(org, planned.run, taskset));
   if (scoresNothing(input.subjects, config))
     return yield* new NothingToScore({ taskset: input.taskset });
   const judges2 = models(config).map(({ model }) => model);
   const candidates = input.subjects.flatMap((subject) => exports_Match.valueTags(subject, { production: () => [], candidate: ({ model }) => [model] }));
-  const called = yield* exports_Effect.forEach(exports_Array.dedupe([...candidates, ...judges2]), (model) => get19(model).pipe(exports_Effect.catchTag("ModelNotFound", exports_Effect.die)));
-  const entry = yield* get21(org);
+  const called = yield* exports_Effect.forEach(exports_Array.dedupe([...candidates, ...judges2]), (model) => get20(model).pipe(exports_Effect.catchTag("ModelNotFound", exports_Effect.die)));
+  const entry = yield* get22(org);
   yield* exports_Effect.forEach(called, (model) => exports_Effect.fromResult(payerOf(entry, model.base.upstream)), {
     discard: true
   });
@@ -58681,7 +59636,7 @@ var select3 = (sql, org, filter15) => sql`
     ORDER BY r.created_at DESC, r.id DESC
     ${filter15.limit === undefined ? sql`` : sql`LIMIT ${filter15.limit}`}
   `;
-var get26 = exports_Effect.fn("Run.get")(function* (org, id2) {
+var get27 = exports_Effect.fn("Run.get")(function* (org, id2) {
   yield* exports_Effect.annotateCurrentSpan({ org, runId: id2 });
   const sql = yield* exports_SqlClient.SqlClient;
   const found = yield* exports_SqlSchema.findOneOption({
@@ -58720,9 +59675,9 @@ var list10 = exports_Effect.fn("Run.list")(function* (org, filter15, cursor) {
   const runs = rows.slice(0, PAGE_SIZE2);
   if (runs.length === 0 && cursor === undefined) {
     if (filter15.taskset !== undefined)
-      yield* get25(org, filter15.taskset);
+      yield* get26(org, filter15.taskset);
     if (filter15.workload !== undefined)
-      yield* get23(org, filter15.workload);
+      yield* get24(org, filter15.workload);
   }
   return compact2({ runs, next: rows.length > PAGE_SIZE2 ? runs.at(-1)?.id : undefined });
 });
@@ -58736,7 +59691,20 @@ var fail12 = exports_Effect.fn("Run.fail")(function* (org, id2) {
       RETURNING r.id
     `;
   if (failed.length === 0)
-    yield* get26(org, id2);
+    yield* get27(org, id2);
+});
+var cancel = exports_Effect.fn("Run.cancel")(function* (org, id2) {
+  yield* exports_Effect.annotateCurrentSpan({ org, runId: id2 });
+  const sql = yield* exports_SqlClient.SqlClient;
+  yield* sql`
+      UPDATE score_runs r SET status = 'cancelled'
+      FROM workloads w
+      WHERE w.id = r.workload_id AND w.org_id = ${org} AND r.id = ${id2} AND r.status = 'running'
+    `;
+  const run7 = yield* get27(org, id2);
+  if (run7.status !== "cancelled")
+    return yield* new NotRunning({ run: id2, status: run7.status });
+  return run7;
 });
 var start3 = exports_Effect.fn("Run.start")(function* (org, input) {
   const queue = yield* ScoreQueue;
@@ -58744,8 +59712,8 @@ var start3 = exports_Effect.fn("Run.start")(function* (org, input) {
   yield* queue.send(trials).pipe(exports_Effect.tapError(() => fail12(org, run7.id).pipe(exports_Effect.catchTag("RunNotFound", exports_Effect.die))));
   return run7;
 });
-var tasksetOf = (org, run7) => get25(org, run7.taskset).pipe(exports_Effect.catchTags({ WorkloadNotFound: exports_Effect.die, TasksetNotFound: exports_Effect.die }));
-var workloadOf = (org, run7) => get23(org, run7.taskset.workload).pipe(exports_Effect.catchTag("WorkloadNotFound", exports_Effect.die));
+var tasksetOf = (org, run7) => get26(org, run7.taskset).pipe(exports_Effect.catchTags({ WorkloadNotFound: exports_Effect.die, TasksetNotFound: exports_Effect.die }));
+var workloadOf = (org, run7) => get24(org, run7.taskset.workload).pipe(exports_Effect.catchTag("WorkloadNotFound", exports_Effect.die));
 var scoring2 = (org, run7, taskset) => {
   if (run7.config.scoring !== undefined)
     return exports_Effect.succeed(run7.config.scoring);
@@ -58780,21 +59748,24 @@ var settle = exports_Effect.fn("Run.settle")(function* (org, id2) {
         AND (SELECT count(*) FROM trial_results t WHERE t.run_id = r.id)
           >= jsonb_array_length(r.subjects) * (SELECT count(*) FROM taskset_traces m WHERE m.taskset_id = r.taskset_id)
     `;
-  yield* get26(org, id2);
+  yield* get27(org, id2);
 });
 var Answer2 = exports_Data.taggedEnum();
 var KEY_LAG = Seconds2.make(Math.ceil(exports_Duration.toSeconds(lag)));
+var CREDIT_WAIT = Seconds2.make(300);
 var MAX_RETRY_AFTER = Seconds2.make(300);
 var waitOf = (failure) => {
   if (!exports_Predicate.isTagged(failure, "ProduceError"))
     return [];
   if (failure.reason === "KeyRequired")
     return [KEY_LAG];
+  if (failure.reason === "OutOfCredit")
+    return [CREDIT_WAIT];
   const asked = failure.rejection?.retryAfter;
   return asked === undefined ? [] : [Seconds2.make(Math.min(asked, MAX_RETRY_AFTER))];
 };
-var retryOf = (failures2) => {
-  const waits = failures2.flatMap(waitOf);
+var retryOf = (failures) => {
+  const waits = failures.flatMap(waitOf);
   return waits.length === 0 ? Answer2.Retry({}) : Answer2.Retry({ delay: Seconds2.make(Math.max(...waits)) });
 };
 var failed = (failure) => ({
@@ -58811,16 +59782,16 @@ var score = exports_Effect.fn("Run.score")(function* (trial, delivery) {
     attempts: delivery.attempts
   });
   const last2 = delivery.attempts > delivery.maxRetries;
-  const found = yield* exports_Effect.result(get26(trial.org, trial.runId));
+  const found = yield* exports_Effect.result(get27(trial.org, trial.runId));
   if (exports_Result.isSuccess(found) && found.success.status !== "running")
     return Answer2.Done();
-  const { outcome: outcome2, failures: failures2 } = yield* exports_Effect.fromResult(found).pipe(exports_Effect.flatMap((run7) => exports_Effect.gen(function* () {
+  const { outcome: outcome2, failures } = yield* exports_Effect.fromResult(found).pipe(exports_Effect.flatMap((run7) => exports_Effect.gen(function* () {
     const config = yield* scoring2(trial.org, run7, yield* tasksetOf(trial.org, run7));
     const workload = yield* workloadOf(trial.org, run7);
     const { task, recorded } = yield* load(trial.org, workload, trial.task, config.taskset);
     const replier = yield* exports_Match.valueTags(trial.subject, {
       production: () => exports_Effect.succeed(Replier.production({ recorded })),
-      candidate: ({ model }) => exports_Effect.map(get19(model), (read5) => Replier.candidate({ model: read5 }))
+      candidate: ({ model }) => exports_Effect.map(get20(model), (read5) => Replier.candidate({ model: read5 }))
     });
     return yield* run6(config, task, replier, { org: trial.org, run: run7.id, workload });
   })), exports_Effect.catch((failure) => exports_Effect.succeed(failed(failure))), exports_Effect.catchCauseIf(exports_Cause.hasDies, (cause) => exports_Effect.logError("A trial died", cause).pipe(exports_Effect.as({
@@ -58829,7 +59800,7 @@ var score = exports_Effect.fn("Run.score")(function* (trial, delivery) {
   }))));
   if (outcome2.errors !== undefined && !last2) {
     yield* exports_Effect.logWarning("A trial failed; it will be retried", { errors: outcome2.errors });
-    return retryOf(failures2);
+    return retryOf(failures);
   }
   return yield* writeResult(toResult(trial, outcome2)).pipe(exports_Effect.andThen(settle(trial.org, trial.runId)), exports_Effect.as(Answer2.Done()), exports_Effect.catchTags({
     RunNotFound: () => exports_Effect.succeed(Answer2.Done()),
@@ -58968,7 +59939,7 @@ var replyUsage = exports_Effect.fnUntraced(function* (org, id2) {
 });
 var readout = exports_Effect.fn("Run.readout")(function* (org, id2) {
   yield* exports_Effect.annotateCurrentSpan({ org, runId: id2 });
-  const run7 = yield* get26(org, id2);
+  const run7 = yield* get27(org, id2);
   const taskset = yield* tasksetOf(org, run7);
   const config = yield* scoring2(org, run7, taskset);
   const results2 = yield* selectResults(org, id2);
@@ -59116,7 +60087,7 @@ var callIdsOf = (results2) => results2.flatMap(({ outcome: outcome2 }) => [
 var verdicts = exports_Effect.fn("Run.verdicts")(function* (org, id2, filter15, cursor) {
   yield* exports_Effect.annotateCurrentSpan({ org, runId: id2, cursor });
   const sql = yield* exports_SqlClient.SqlClient;
-  const run7 = yield* get26(org, id2);
+  const run7 = yield* get27(org, id2);
   const taskset = yield* tasksetOf(org, run7);
   const config = yield* scoring2(org, run7, taskset);
   yield* unknownIn(run7, taskset, config, filter15);
@@ -59227,7 +60198,7 @@ var branchOf = (config, task, branch, scored, traces, calls2) => {
 var TRACE_READS = 4;
 var traceDetail = exports_Effect.fn("Run.traceDetail")(function* (org, id2, ref) {
   yield* exports_Effect.annotateCurrentSpan({ org, runId: id2, trace: ref.trace, leaf: ref.leaf });
-  const run7 = yield* get26(org, id2);
+  const run7 = yield* get27(org, id2);
   const taskset = yield* tasksetOf(org, run7);
   const config = yield* scoring2(org, run7, taskset);
   const workload = yield* workloadOf(org, run7);
@@ -59235,7 +60206,7 @@ var traceDetail = exports_Effect.fn("Run.traceDetail")(function* (org, id2, ref)
   if (!exports_Array.isArrayNonEmpty(members2))
     return yield* new TraceNotFound({ run: id2, trace: ref });
   const read5 = yield* selectResults(org, id2, { trace: ref });
-  const whole = yield* get24(org, callIdsOf(read5));
+  const whole = yield* get25(org, callIdsOf(read5));
   const calls2 = {
     answered: new Map(Array.from(whole, ([callId, call]) => [callId, { name: call.name, parsed: call.response.parsed }])),
     whole
@@ -59244,7 +60215,7 @@ var traceDetail = exports_Effect.fn("Run.traceDetail")(function* (org, id2, ref)
     const { task } = yield* load(org, workload, member2, config.taskset);
     const mine = read5.filter(({ trial }) => trial.task.leafNodeId === member2.leafNodeId);
     const ids = mine.flatMap(({ outcome: outcome2 }) => outcome2.attempts.map((attempt3) => attempt3.trace));
-    const traces = yield* exports_Effect.forEach(ids, (attempt3) => get20(org, attempt3).pipe(exports_Effect.catchTag("TraceNotFound", exports_Effect.die)), { concurrency: TRACE_READS });
+    const traces = yield* exports_Effect.forEach(ids, (attempt3) => get21(org, attempt3).pipe(exports_Effect.catchTag("TraceNotFound", exports_Effect.die)), { concurrency: TRACE_READS });
     return branchOf(config, task.data, member2.leafNodeId, mine, new Map(exports_Array.zip(ids, traces)), calls2);
   }));
   return { run: id2, trace: ref.trace, branches };
@@ -59253,8 +60224,8 @@ var EPISODES_PAGE = 25;
 var episodeOf = exports_Effect.fnUntraced(function* (org, workload, config, result6) {
   const { attempts, judgeCalls = [] } = result6.outcome;
   const { task } = yield* load(org, workload, result6.trial.task, config.taskset);
-  const traces = yield* exports_Effect.forEach(attempts, ({ trace: trace3 }) => get20(org, trace3).pipe(exports_Effect.catchTag("TraceNotFound", exports_Effect.die)));
-  const calls2 = yield* get24(org, [
+  const traces = yield* exports_Effect.forEach(attempts, ({ trace: trace3 }) => get21(org, trace3).pipe(exports_Effect.catchTag("TraceNotFound", exports_Effect.die)));
+  const calls2 = yield* get25(org, [
     ...attempts.flatMap(({ scores }) => scores.judgeCalls ?? []),
     ...judgeCalls
   ]);
@@ -59263,7 +60234,7 @@ var episodeOf = exports_Effect.fnUntraced(function* (org, workload, config, resu
 var episodes = exports_Effect.fn("Run.episodes")(function* (org, id2) {
   yield* exports_Effect.annotateCurrentSpan({ org, runId: id2 });
   const sql = yield* exports_SqlClient.SqlClient;
-  const run7 = yield* get26(org, id2);
+  const run7 = yield* get27(org, id2);
   const workload = yield* workloadOf(org, run7);
   const config = yield* scoring2(org, run7, yield* tasksetOf(org, run7));
   const page = exports_SqlSchema.findAll({
@@ -59437,7 +60408,7 @@ class Traces extends exports_HttpApiGroup.make("traces").add(exports_HttpApiEndp
 
 class Models extends exports_HttpApiGroup.make("models").add(exports_HttpApiEndpoint.get("list", "/", {
   params: InOrg.fields,
-  success: exports_Schema.Array(Model)
+  success: exports_Schema.Array(Offered)
 })).middleware(Authorization).middleware(Membership2).middleware(Connection).middleware(SignedIn).prefix("/orgs/:org/models").annotateMerge(exports_OpenApi.annotations({
   title: "Models",
   description: "The models available to the org"
@@ -59517,11 +60488,12 @@ class Runs extends exports_HttpApiGroup.make("runs").add(exports_HttpApiEndpoint
     ScoringMissing,
     NothingToScore,
     Invalid2,
-    KeyRequired.pipe(exports_HttpApiSchema.status(409))
+    KeyRequired.pipe(exports_HttpApiSchema.status(409)),
+    OutOfCredit.pipe(exports_HttpApiSchema.status(409))
   ]
 }).annotateMerge(exports_OpenApi.annotations({
   summary: "Start a score run",
-  description: "Of a taskset, `<workload>/<taskset>`, for its `subjects`: `production`, the replies its traces " + "recorded, and models of the workload's pool (`RunSubjectNotInPool` when one isn't), whose replies are " + "judged. Production alone needs a config with criteria groups, which are all that score it " + "(`RunNothingToScore`). Answers with the run as started: " + "`running`, with its trials enqueued. It scores under its own `scoring` when sent, and otherwise under the " + "taskset's current config; a taskset with none needs one sent (`RunScoringMissing`). Its own config is " + "checked as saving it would be (`ScoringInvalid`). An org billed for its own calls needs a provider key for " + "every model the run calls, subjects and judges (`InferenceKeyRequired`)."
+  description: "Of a taskset, `<workload>/<taskset>`, for its `subjects`: `production`, the replies its traces " + "recorded, and models of the workload's pool (`RunSubjectNotInPool` when one isn't), whose replies are " + "judged. Production alone needs a config with criteria groups, which are all that score it " + "(`RunNothingToScore`). Answers with the run as started: " + "`running`, with its trials enqueued. It scores under its own `scoring` when sent, and otherwise under the " + "taskset's current config; a taskset with none needs one sent (`RunScoringMissing`). Its own config is " + "checked as saving it would be (`ScoringInvalid`). The org must be able to pay for every model the run " + "calls."
 })), exports_HttpApiEndpoint.get("list", "/", {
   params: InOrg.fields,
   query: { ...Filter4.fields, cursor: exports_Schema.optional(RunId) },
@@ -59537,6 +60509,13 @@ class Runs extends exports_HttpApiGroup.make("runs").add(exports_HttpApiEndpoint
 }).annotateMerge(exports_OpenApi.annotations({
   summary: "Read a score run",
   description: "As it stands: its status, how many of its trials have a result, what they found per subject " + "(its points, scores and what its replies cost), each trial that failed, and what its judge calls cost."
+})), exports_HttpApiEndpoint.post("cancel", "/:run/cancel", {
+  params: { ...InOrg.fields, run: RunId },
+  success: Run,
+  error: [NotFound11, NotRunning]
+}).annotateMerge(exports_OpenApi.annotations({
+  summary: "Cancel a score run",
+  description: "Stops a `running` run: answers it `cancelled`, and its trials not yet scoring are skipped. A trial " + "already scoring finishes, and its result is kept. A run already cancelled answers as it is; one that " + "completed or failed is `RunNotRunning`."
 })), exports_HttpApiEndpoint.get("verdicts", "/:run/verdicts", {
   params: { ...InOrg.fields, run: RunId },
   query: { ...VerdictFilter.fields, cursor: exports_Schema.optional(TrialResultId) },
@@ -59578,7 +60557,7 @@ class Export extends exports_HttpApiGroup.make("export").add(exports_HttpApiEndp
 })) {
 }
 
-class Keys extends exports_HttpApiGroup.make("keys").add(exports_HttpApiEndpoint.post("create", "/", {
+class Keys2 extends exports_HttpApiGroup.make("keys").add(exports_HttpApiEndpoint.post("create", "/", {
   params: InOrg.fields,
   payload: CreateInput2,
   success: Created3
@@ -59604,13 +60583,27 @@ class Keys extends exports_HttpApiGroup.make("keys").add(exports_HttpApiEndpoint
 })) {
 }
 
-class Providers2 extends exports_HttpApiGroup.make("providers").add(exports_HttpApiEndpoint.get("summary", "/", {
+class BillingGroup extends exports_HttpApiGroup.make("billing").add(exports_HttpApiEndpoint.get("summary", "/billing", {
   params: InOrg.fields,
   success: Summary2
 }).annotateMerge(exports_OpenApi.annotations({
-  summary: "Read who the org is billed to, and its provider keys",
-  description: "Every provider the stage supports, in the stage's order, each with the label of the key the " + "org saved for it, and who saved it when. Never the key itself. An org billed to Ambral may still have " + "keys saved: they are kept, and used again if it is billed to itself."
-})), exports_HttpApiEndpoint.put("save", "/:upstream/key", {
+  summary: "Read the org's billing",
+  description: "How the org pays for its model calls, as its members see it. A provider key is described by its " + "label and who saved it when, never by the key itself."
+})), exports_HttpApiEndpoint.get("credits", "/billing/credits", {
+  params: InOrg.fields,
+  query: { before: exports_Schema.optionalKey(exports_Schema.NumberFromString.pipe(exports_Schema.decodeTo(Seq))) },
+  success: exports_Schema.Array(Credited)
+}).annotateMerge(exports_OpenApi.annotations({
+  summary: "List the credit added to the org",
+  description: "Each time credit was added to the org or taken back, newest first, one page at a time. With " + "`before`, the page before that entry."
+})), exports_HttpApiEndpoint.get("spend", "/billing/spend", {
+  params: InOrg.fields,
+  query: { from: exports_Schema.optionalKey(Day2), to: exports_Schema.optionalKey(Day2) },
+  success: exports_Schema.Array(SpendDay)
+}).annotateMerge(exports_OpenApi.annotations({
+  summary: "List the org's spend",
+  description: "What the org spent per day and model, newest day first, from `from` to `to`. By default, the " + "last 30 days."
+})), exports_HttpApiEndpoint.put("save", "/providers/:upstream/key", {
   params: { ...InOrg.fields, upstream: UpstreamId },
   payload: SaveInput,
   success: Saved,
@@ -59618,16 +60611,17 @@ class Providers2 extends exports_HttpApiGroup.make("providers").add(exports_Http
 }).annotateMerge(exports_OpenApi.annotations({
   summary: "Save the org's key for a provider",
   description: "Replaces any key the org saved for it. The provider checks the key first: one it refuses is " + "`ProviderKeyRejected`, and nothing is stored. The key is stored sealed and never shown again; the answer " + "carries the provider's label for it. Calls to the provider start using it within about a minute."
-})), exports_HttpApiEndpoint.delete("remove", "/:upstream/key", {
+})), exports_HttpApiEndpoint.delete("remove", "/providers/:upstream/key", {
   params: { ...InOrg.fields, upstream: UpstreamId },
   success: exports_HttpApiSchema.NoContent,
   error: NotFound5
 }).annotateMerge(exports_OpenApi.annotations({
   summary: "Remove the org's key for a provider",
-  description: "While the org is billed to itself, its calls to the provider are refused again within about a " + "minute. Removing a key the org hasn't saved changes nothing."
-}))).middleware(Authorization).middleware(Membership2).middleware(Connection).middleware(SignedIn).prefix("/orgs/:org/providers").annotateMerge(exports_OpenApi.annotations({
-  title: "Providers",
-  description: "The org's own keys for the model providers the stage supports, which pay for its model calls"
+  description: "While the org pays its providers directly, its calls to the provider are refused again within " + "about a minute. Removing a key the org hasn't saved changes nothing."
+}))).middleware(Authorization).middleware(Membership2).middleware(Connection).middleware(SignedIn).prefix("/orgs/:org").annotateMerge(exports_OpenApi.annotations({
+  exclude: true,
+  title: "Billing",
+  description: "How the org pays for its model calls"
 })) {
 }
 var OfMember = { ...InOrg.fields, member: MemberId };
@@ -59733,12 +60727,12 @@ class Accepting extends exports_HttpApiGroup.make("accepting").add(exports_HttpA
 })) {
 }
 
-class Api2 extends exports_HttpApi.make("ambral-platform").add(Orgs).add(Workloads).add(Traces).add(Models).add(Tasksets).add(Runs).add(Export).add(Keys).add(Providers2).add(OrgMembers).add(OwnMembership).add(OrgInvitations).add(OpenInvitation).add(Accepting).prefix("/api").annotateMerge(exports_OpenApi.annotations({ title: "Ambral Platform API" })).annotate(exports_HttpApi.PayloadParseOptions, { onExcessProperty: "error" }) {
+class Api2 extends exports_HttpApi.make("ambral-platform").add(Orgs).add(Workloads).add(Traces).add(Models).add(Tasksets).add(Runs).add(Export).add(Keys2).add(BillingGroup).add(OrgMembers).add(OwnMembership).add(OrgInvitations).add(OpenInvitation).add(Accepting).prefix("/api").annotateMerge(exports_OpenApi.annotations({ title: "Ambral Platform API" })).annotate(exports_HttpApi.PayloadParseOptions, { onExcessProperty: "error" }) {
 }
 // ../core/src/Scoring/ScoringPresets.ts
 var exports_ScoringPresets = {};
 __export(exports_ScoringPresets, {
-  summaries: () => summaries,
+  summaries: () => summaries2,
   config: () => config,
   TakesNoJudge: () => TakesNoJudge,
   Summary: () => Summary5,
@@ -59879,7 +60873,7 @@ var Summary5 = exports_Schema.Struct({
   use: exports_Schema.String,
   judge: exports_Schema.Boolean
 }).annotate({ identifier: "ScoringPresetSummary" });
-var summaries = exports_Record.toEntries(presets).map(([name, preset]) => ({
+var summaries2 = exports_Record.toEntries(presets).map(([name, preset]) => ({
   name,
   use: preset.use,
   judge: exports_Match.valueTags(preset, { Judged: () => true, Unjudged: () => false })
@@ -59954,7 +60948,7 @@ var layer19 = exports_Layer.effect(Credentials, exports_Effect.gen(function* ()
   const directory = path.join(config2, "ambral", "sessions");
   const file3 = path.join(directory, `${encodeURIComponent(url.origin)}.json`);
   const failed2 = (reason) => (cause) => new CredentialsError({ reason, file: file3, cause });
-  const get27 = exports_Effect.gen(function* () {
+  const get28 = exports_Effect.gen(function* () {
     if (!(yield* fs.exists(file3)))
       return {};
     const text3 = yield* fs.readFileString(file3);
@@ -59967,7 +60961,7 @@ var layer19 = exports_Layer.effect(Credentials, exports_Effect.gen(function* ()
     yield* write4(file3, text3, { mode: FILE_MODE });
   }, exports_Effect.provideService(exports_FileSystem.FileSystem, fs));
   const set9 = (session) => (Object.values(session).every((value5) => value5 === undefined) ? fs.remove(file3, { force: true }) : write5(session)).pipe(exports_Effect.mapError(failed2("write")));
-  return Credentials.of({ get: get27, set: set9 });
+  return Credentials.of({ get: get28, set: set9 });
 }));
 
 // src/Ambral.ts
@@ -60007,7 +61001,6 @@ var signedOut = exports_Layer.effect(SignIn2, exports_Effect.gen(function* () {
 var Json3 = exports_GlobalFlag.Setting("json")({
   flag: exports_Flag.Boolean("json").pipe(exports_Flag.withDescription("Print the result, or the failure, as JSON"), exports_Flag.withDefault(false))
 });
-var PENDING_NOTE = "Ambral currently enables new orgs manually; reach out to founders@ambral.com for platform access.";
 var table2 = (rows) => {
   const widths = rows[0]?.map((_, column) => Math.max(...rows.map((row) => row[column]?.length ?? 0))) ?? [];
   return rows.map((row) => row.map((cell, column) => cell.padEnd(widths[column] ?? 0)).join("  ").trimEnd()).join(`
@@ -60110,7 +61103,7 @@ var layer20 = exports_Layer.effect(ProjectLink, exports_Effect.gen(function* ()
     const text3 = yield* fs.readFileString(file3);
     return yield* exports_Schema.decodeEffect(LinksFile)(text3).pipe(exports_Effect.mapError(() => new ProjectLinkError({ reason: "unreadable", file: file3 })));
   }).pipe(exports_Effect.catchTag("PlatformError", (cause) => exports_Effect.fail(new ProjectLinkError({ reason: "read", file: file3, cause }))));
-  const get27 = exports_Effect.gen(function* () {
+  const get28 = exports_Effect.gen(function* () {
     const directory = yield* nearest3;
     if (directory === undefined)
       return;
@@ -60132,20 +61125,17 @@ var layer20 = exports_Layer.effect(ProjectLink, exports_Effect.gen(function* ()
     yield* write5(directory, { ...links, [url.origin]: link4 }).pipe(exports_Effect.mapError((cause) => new ProjectLinkError({ reason: "write", file: fileIn(directory), cause })));
     return directory;
   });
-  return ProjectLink.of({ get: get27, set: set9 });
+  return ProjectLink.of({ get: get28, set: set9 });
 }));
 
 // src/Orgs/Orgs.ts
-var Org2 = exports_GlobalFlag.Setting("org")({
+var Org3 = exports_GlobalFlag.Setting("org")({
   flag: exports_Flag.String("org").pipe(exports_Flag.withSchema(exports_OrgAccess.Slug), exports_Flag.withDescription("The org to act in, by slug, in place of the one this project is linked to"), exports_Flag.optional)
 });
 var table3 = (memberships2, marked) => table2([
   ["ORG", "NAME", "ROLE", "STATUS", ""],
   ...memberships2.map(({ org, slug, name, role, state: state2 }) => [slug, name, role, state2, org === marked ? "linked" : ""])
 ]);
-var noteFor = (memberships2) => memberships2.some(({ state: state2 }) => state2 === "pending") ? `
-
-${PENDING_NOTE}` : "";
 var yours = (memberships2) => memberships2.length === 0 ? "You aren't a member of any org." : `Your orgs:
 
 ${table3(memberships2)}`;
@@ -60174,7 +61164,7 @@ var bySlug = exports_Effect.fnUntraced(function* (slug) {
   return yield* exports_Array.findFirst(all6, (membership) => membership.slug === slug).pipe(exports_Effect.fromOption, exports_Effect.mapError(() => new UnknownOrg({ slug, memberships: all6 })));
 });
 var current = exports_Effect.gen(function* () {
-  const named = yield* Org2;
+  const named = yield* Org3;
   if (exports_Option.isSome(named))
     return yield* bySlug(named.value);
   const link4 = yield* (yield* ProjectLink).get;
@@ -60186,52 +61176,52 @@ var current = exports_Effect.gen(function* () {
 var acting = exports_Effect.filterOrElse(current, exports_Predicate.isNotUndefined, () => exports_Effect.flatMap(memberships2, (all6) => exports_Effect.fail(new NotLinked({ memberships: all6 }))));
 var inProject = layer20.pipe(exports_Layer.provideMerge(signedIn));
 var Listed = exports_Schema.Struct({ membership: exports_OrgAccess.Membership, linked: exports_Schema.Boolean });
-var listed3 = {
+var listed4 = {
   schema: exports_Schema.Array(Listed),
   text: (rows) => {
     const all6 = rows.map(({ membership }) => membership);
     const linked = rows.find((row) => row.linked)?.membership.org;
-    return all6.length === 0 ? "You aren't a member of any org. Run `ambral orgs create <name>` to create one." : `${table3(all6, linked)}${noteFor(all6)}`;
+    return all6.length === 0 ? "You aren't a member of any org. Run `ambral orgs create <name>` to create one." : table3(all6, linked);
   }
 };
 var Used = exports_Schema.Struct({ membership: exports_OrgAccess.Membership, project: exports_Schema.String });
 var used = {
   schema: Used,
-  text: ({ membership, project: project2 }) => `Linked this project (${project2}) to ${membership.name}.${noteFor([membership])}`
+  text: ({ membership, project }) => `Linked this project (${project}) to ${membership.name}.`
 };
 var Created4 = exports_Schema.Struct({ membership: exports_OrgAccess.Membership, project: exports_Schema.optional(exports_Schema.String) });
 var created = {
   schema: Created4,
-  text: ({ membership, project: project2 }) => `Created ${membership.name} (${membership.slug})${project2 === undefined ? "" : ` and linked this project (${project2}) to it`}.
-Status: ${membership.state}${noteFor([membership])}`
+  text: ({ membership, project }) => `Created ${membership.name} (${membership.slug})${project === undefined ? "" : ` and linked this project (${project}) to it`}.
+Status: ${membership.state}`
 };
 var list11 = exports_Command.make("list", {}, () => exports_Effect.gen(function* () {
   const all6 = yield* memberships2;
   const link4 = yield* (yield* ProjectLink).get;
-  yield* print(listed3, all6.map((membership) => ({ membership, linked: membership.org === link4?.org })));
+  yield* print(listed4, all6.map((membership) => ({ membership, linked: membership.org === link4?.org })));
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("List your orgs, with your role and each org's status"));
 var use2 = exports_Command.make("use", {
   slug: exports_Argument.String("slug").pipe(exports_Argument.withDescription("The org's slug, as `ambral orgs list` shows it"), exports_Argument.withSchema(exports_OrgAccess.Slug))
 }, ({ slug }) => exports_Effect.gen(function* () {
   const membership = yield* bySlug(slug);
-  const project2 = yield* (yield* ProjectLink).set(exports_Struct.pick(membership, ["org", "slug"]));
-  yield* print(used, { membership, project: project2 });
+  const project = yield* (yield* ProjectLink).set(exports_Struct.pick(membership, ["org", "slug"]));
+  yield* print(used, { membership, project });
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("Link this project to an org: commands run in it act in that org"));
 var create4 = exports_Command.make("create", {
   name: exports_Argument.String("name").pipe(exports_Argument.withDescription("The org's name; its slug is derived from it"), exports_Argument.withSchema(exports_OrgAccess.Name))
 }, ({ name }) => exports_Effect.gen(function* () {
-  const project2 = yield* ProjectLink;
-  const unlinked = (yield* project2.get) === undefined;
+  const project = yield* ProjectLink;
+  const unlinked = (yield* project.get) === undefined;
   const membership = yield* (yield* Ambral).platform.orgs.create({ payload: { name } });
   yield* print(created, {
     membership,
-    project: unlinked ? yield* project2.set(exports_Struct.pick(membership, ["org", "slug"])) : undefined
+    project: unlinked ? yield* project.set(exports_Struct.pick(membership, ["org", "slug"])) : undefined
   });
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("Create an org you own; links this project to it if it isn't linked yet"));
 var orgs = exports_Command.make("orgs").pipe(exports_Command.withDescription("List your orgs, create one, and link this project to one"), exports_Command.withSubcommands([list11, use2, create4]));
 
 // src/Keys/Keys.ts
-var listed4 = {
+var listed5 = {
   schema: exports_Schema.Array(exports_ApiKey.Summary),
   text: (keys5) => keys5.length === 0 ? "This org has no keys. Create one in the web app." : table2([
     ["NAME", "KIND", "KEY", "CREATED BY", "CREATED", "STATUS"],
@@ -60248,7 +61238,7 @@ var listed4 = {
 var list12 = exports_Command.make("list", {}, () => exports_Effect.gen(function* () {
   const { platform } = yield* Ambral;
   const { org } = yield* acting;
-  yield* print(listed4, yield* platform.keys.list({ params: { org } }));
+  yield* print(listed5, yield* platform.keys.list({ params: { org } }));
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("List the org's API keys: their names and starts, never their secrets"));
 var keys5 = exports_Command.make("keys").pipe(exports_Command.withDescription("List the org's API keys"), exports_Command.withSubcommands([list12]));
 // src/Login/Login.ts
@@ -60265,7 +61255,7 @@ var Refusal = exports_Schema.Union([
 ]);
 var Step2 = exports_Data.taggedEnum();
 var SLOW_DOWN = exports_Time.Seconds.make(5);
-var next3 = (pending, answer, now4) => {
+var next4 = (pending, answer, now4) => {
   const wait = (interval, delay3 = interval) => now4 >= pending.expiresAt ? Step2.Fail({ reason: "expired" }) : Step2.Wait({ pending: { ...pending, interval }, delay: delay3 });
   return exports_Result.match(answer, {
     onSuccess: ({ access_token }) => Step2.Done({ token: access_token }),
@@ -60324,7 +61314,7 @@ var SignedOut2 = {
   text: ({ address }) => `Signed out of ${address}.`
 };
 var signingIn = exports_Layer.mergeAll(signedOut, layer19).pipe(exports_Layer.provideMerge(layer18));
-var readable = exports_Effect.flatMap(Credentials, ({ get: get27 }) => get27.pipe(exports_Effect.catchIf((error2) => error2.reason === "unreadable", () => exports_Effect.succeed({}))));
+var readable = exports_Effect.flatMap(Credentials, ({ get: get28 }) => get28.pipe(exports_Effect.catchIf((error2) => error2.reason === "unreadable", () => exports_Effect.succeed({}))));
 var start4 = exports_Effect.gen(function* () {
   const signIn = yield* SignIn2;
   const credentials = yield* Credentials;
@@ -60358,9 +61348,9 @@ var redeem = exports_Effect.fnUntraced(function* (pending) {
 });
 var poll2 = (pending, delay3 = pending.interval) => exports_Effect.gen(function* () {
   yield* exports_Effect.sleep(exports_Duration.seconds(delay3));
-  const step = next3(pending, yield* redeem(pending), yield* exports_Time.now);
+  const step = next4(pending, yield* redeem(pending), yield* exports_Time.now);
   return yield* Step2.$match(step, {
-    Wait: ({ pending: later, delay: next4 }) => exports_Effect.andThen(later.interval === pending.interval ? exports_Effect.void : exports_Effect.asVoid(settle2(pending, { pending: later })), poll2(later, next4)),
+    Wait: ({ pending: later, delay: next5 }) => exports_Effect.andThen(later.interval === pending.interval ? exports_Effect.void : exports_Effect.asVoid(settle2(pending, { pending: later })), poll2(later, next5)),
     Done: ({ token }) => exports_Effect.succeed(token),
     Fail: ({ reason }) => settle2(pending, {}).pipe(exports_Effect.andThen(exports_Effect.fail(reason === "denied" ? new SignInDenied : new SignInExpired)))
   });
@@ -60422,22 +61412,22 @@ var whoami = exports_Command.make("whoami", {}, () => exports_Effect.gen(functio
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("Show the account this CLI is signed in as, the Ambral address, and the org it acts in"));
 
 // src/Models/Models.ts
-var listed5 = {
-  schema: exports_Schema.Array(exports_Model.Model),
-  text: (models2) => models2.length === 0 ? "No models are available to this org. If it pays for its own model calls, an owner or admin can save a " + "provider key on its Providers page in the Ambral web app." : table2([
+var listed6 = {
+  schema: exports_Schema.Array(exports_Model.Offered),
+  text: (models2) => models2.length === 0 ? "No models are available to this org. Its Billing page in the Ambral web app shows how it pays for " + "them." : table2([
     ["MODEL", "FAMILY", "INPUT $/MTOK", "OUTPUT $/MTOK"],
-    ...models2.map(({ id: id2, base }) => [
-      id2,
-      base.family,
-      String(base.price.inputPerMTok),
-      String(base.price.outputPerMTok)
+    ...models2.map(({ model, price }) => [
+      model.id,
+      model.base.family,
+      exports_BigDecimal.format(price.inputPerMTok),
+      exports_BigDecimal.format(price.outputPerMTok)
     ])
   ])
 };
 var list13 = exports_Command.make("list", {}, () => exports_Effect.gen(function* () {
   const { platform: platform2 } = yield* Ambral;
   const { org } = yield* acting;
-  yield* print(listed5, yield* platform2.models.list({ params: { org } }));
+  yield* print(listed6, yield* platform2.models.list({ params: { org } }));
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("List the models available to this org, with their prices"), exports_Command.withExamples([{ command: "ambral models list --json", description: "Every available model, as JSON" }]));
 var models2 = exports_Command.make("models").pipe(exports_Command.withDescription("List the models workloads can serve"), exports_Command.withSubcommands([list13]));
 
@@ -60603,9 +61593,9 @@ var fillable = (value5, field, indent, seen) => {
 };
 var entry = (key3, value5, field, indent, spaced2, seen = new Set) => {
   const pad3 = " ".repeat(indent);
-  const one = inline(value5);
+  const one2 = inline(value5);
   const above = [...spaced2 ? [""] : [], ...comment(keyDescription(field), pad3)];
-  return one === undefined ? [...above, `${pad3}${keyOf(key3)}:`, ...block(value5, field, indent + 2, seen)] : [...above, `${pad3}${keyOf(key3)}: ${one}`, ...fillable(value5, field, indent, seen)];
+  return one2 === undefined ? [...above, `${pad3}${keyOf(key3)}:`, ...block(value5, field, indent + 2, seen)] : [...above, `${pad3}${keyOf(key3)}: ${one2}`, ...fillable(value5, field, indent, seen)];
 };
 var block = (value5, ast, indent, seen = new Set) => {
   const pad3 = " ".repeat(indent);
@@ -60614,9 +61604,9 @@ var block = (value5, ast, indent, seen = new Set) => {
     return [];
   if (isArray2(value5)) {
     return value5.flatMap((item, index2) => {
-      const one = inline(item) ?? (isArray2(item) ? JSON.stringify(item) : undefined);
-      if (one !== undefined)
-        return [`${pad3}- ${one}`];
+      const one2 = inline(item) ?? (isArray2(item) ? JSON.stringify(item) : undefined);
+      if (one2 !== undefined)
+        return [`${pad3}- ${one2}`];
       return dashed(block(item, itemOf(schema2, index2), indent + 2, seen), pad3);
     });
   }
@@ -60665,7 +61655,7 @@ var annotated = (header2, config2) => [
   emit(encodeConfig2(config2), exports_Env.EnvConfig).trimEnd()
 ].join(`
 `);
-var listed6 = {
+var listed7 = {
   schema: exports_Schema.Array(exports_ScoringPresets.Summary),
   text: (presets2) => [
     table2([
@@ -60713,7 +61703,7 @@ var presetCommand = exports_Command.make("preset", {
   if (exports_Option.isNone(name)) {
     if (exports_Option.isSome(judge))
       return yield* new JudgeWithoutPreset({ judge: judge.value });
-    return yield* print(listed6, exports_ScoringPresets.summaries);
+    return yield* print(listed7, exports_ScoringPresets.summaries);
   }
   const config2 = yield* exports_Effect.fromResult(exports_ScoringPresets.config(name.value, exports_Option.getOrUndefined(judge)));
   yield* print(preset(name.value), config2);
@@ -60724,7 +61714,7 @@ var presetCommand = exports_Command.make("preset", {
     description: "Start a scoring file from the balanced preset, its judges asking that model"
   }
 ]));
-var get27 = exports_Command.make("get", { taskset: addressArgument }, ({ taskset }) => exports_Effect.gen(function* () {
+var get28 = exports_Command.make("get", { taskset: addressArgument }, ({ taskset }) => exports_Effect.gen(function* () {
   const { platform: platform2 } = yield* Ambral;
   const { org } = yield* acting;
   yield* print(fetched(taskset), yield* platform2.tasksets.getScoring({ params: { org, workload: taskset.workload, taskset: taskset.taskset } }));
@@ -60756,15 +61746,15 @@ var set9 = exports_Command.make("set", {
     description: "Save it as the next version"
   }
 ]));
-var scoring3 = exports_Command.make("scoring").pipe(exports_Command.withDescription("Read and set how a taskset is scored"), exports_Command.withSubcommands([presetCommand, get27, set9]));
+var scoring3 = exports_Command.make("scoring").pipe(exports_Command.withDescription("Read and set how a taskset is scored"), exports_Command.withSubcommands([presetCommand, get28, set9]));
 
 // src/Traces/Traces.ts
 var GENERATED = "(generated)";
 var QUOTED_CHARS = 40;
 var quoted = (text3) => JSON.stringify(text3.length > QUOTED_CHARS ? `${text3.slice(0, QUOTED_CHARS - 1)}…` : text3);
-var listed7 = (workload) => ({
+var listed8 = (workload) => ({
   schema: exports_TraceReading.Page,
-  text: ({ traces, next: next4 }) => {
+  text: ({ traces, next: next5 }) => {
     if (traces.length === 0) {
       return `No traces recorded for ${workload} yet. A session is stored once it has gone quiet for a ` + `little while; see how to connect an agent with \`ambral workloads get ${workload}\`.`;
     }
@@ -60780,7 +61770,7 @@ var listed7 = (workload) => ({
       ])
     ]);
     const generated2 = traces.some((trace3) => trace3.session === undefined) ? ["", `A ${GENERATED} session sent no x-session-id, so each of its requests is a trace of its own.`] : [];
-    const more = next4 === undefined ? [] : ["", `Older traces: \`ambral traces list ${workload} --cursor ${next4}\``];
+    const more = next5 === undefined ? [] : ["", `Older traces: \`ambral traces list ${workload} --cursor ${next5}\``];
     return [rows, ...generated2, ...more].join(`
 `);
   }
@@ -60810,7 +61800,7 @@ var dollars = new Intl.NumberFormat("en-US", {
   currency: "USD",
   maximumSignificantDigits: 4
 });
-var tokensOf = (usage3) => {
+var tokensOf3 = (usage3) => {
   if (usage3 == null)
     return [];
   const cached3 = usage3.cached_input_tokens ?? 0;
@@ -60827,7 +61817,7 @@ var callLines = (call) => {
     [
       call.model ?? "unknown model",
       call.finish_reason ?? "no finish reason",
-      ...tokensOf(call.usage),
+      ...tokensOf3(call.usage),
       ...latencyOf(call.time),
       ...call.endpoint == null ? [] : [call.endpoint]
     ].join(" · "),
@@ -60847,11 +61837,11 @@ var stepLines = ({ id: id2, node, calls: calls2 }) => [
 `))] : indented("  ", callLines(call).join(`
 `)))
 ];
-var plural2 = (count2, one, many) => `${count2} ${count2 === 1 ? one : many}`;
+var plural2 = (count2, one2, many) => `${count2} ${count2 === 1 ? one2 : many}`;
 var sessionOf2 = (session) => session === undefined ? "no session" : session.source === "unspecified" ? `session ${session.id} ${GENERATED}` : `session ${session.id} (via ${session.via})`;
 var read5 = {
   schema: exports_TraceReading.Detail,
-  text: ({ preview: preview2, info: info2, status: status3, settledAt, turns, latest, branches, unplaced }) => [
+  text: ({ preview: preview2, info: info2, status: status3, settledAt, turns, latest: latest2, branches, unplaced }) => [
     `Trace ${preview2.id} · ${sessionOf2(info2.session)} · recorded ${minuteOf(preview2.recordedAt)} UTC · ` + `${preview2.steps} steps · ${preview2.branches} ${preview2.branches === 1 ? "branch" : "branches"}`,
     `${settledAt === undefined ? status3 : `settled ${minuteOf(settledAt)} UTC`} · ${turns} turns recorded`,
     `Workload ${info2.workload} ` + (info2.workloadId === undefined ? "(no id: recorded before it existed, or as a passthrough)" : `(${info2.workloadId})`) + ` · requested ${info2.requestedModel} · served by ${info2.modelId} · prompt version ${info2.sourcePromptVersion}`,
@@ -60860,7 +61850,7 @@ var read5 = {
 `))),
     ...branches.flatMap(({ leaf, tools, continuedBy, tasksets, steps }) => [
       "",
-      `Branch ${preview2.id}:${leaf}${leaf === latest ? " (latest)" : ""}` + (continuedBy.length === 0 ? "" : ` · continued by ${continuedBy.map((end3) => `${preview2.id}:${end3}`).join(", ")}`),
+      `Branch ${preview2.id}:${leaf}${leaf === latest2 ? " (latest)" : ""}` + (continuedBy.length === 0 ? "" : ` · continued by ${continuedBy.map((end3) => `${preview2.id}:${end3}`).join(", ")}`),
       `Tools offered: ${tools.length === 0 ? "none" : tools.map((tool) => tool.name).join(", ")}`,
       ...tasksets.length === 0 ? [] : [`In tasksets: ${tasksets.map(({ id: id2, name, leaf: end3 }) => `${name} (${id2}, to [${end3}])`).join(", ")}`],
       ...steps.flatMap(stepLines)
@@ -60886,14 +61876,14 @@ var list14 = exports_Command.make("list", {
   const { org } = yield* acting;
   const page = yield* platform2.traces.list({
     params: { org, workload },
-    query: exports_Option.match(cursor, { onNone: () => ({}), onSome: (next4) => ({ cursor: next4 }) })
+    query: exports_Option.match(cursor, { onNone: () => ({}), onSome: (next5) => ({ cursor: next5 }) })
   });
-  yield* print(listed7(workload), page);
+  yield* print(listed8(workload), page);
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("List a workload's recorded traces, newest first: each one's id, session, steps, the tools it called and its " + "first user message"), exports_Command.withExamples([
   { command: "ambral traces list support-agent", description: "Check that an agent's sessions are recorded" },
   { command: "ambral traces list support-agent --json", description: "As JSON, with each page's `next`" }
 ]));
-var get28 = exports_Command.make("get", {
+var get29 = exports_Command.make("get", {
   trace: exports_Argument.String("trace").pipe(exports_Argument.withDescription("The trace's id, as `ambral traces list` shows it (tr_…), or one of its branches, as this command names " + "them (tr_…:<leaf>)"), exports_Argument.withSchema(exports_TraceReading.Ref)),
   raw: exports_Flag.Boolean("raw").pipe(exports_Flag.withDescription("Print the trace as stored, every node and call, as JSON in verifiers' trace format, which verifiers loads. " + "It is the whole trace, so name the trace (tr_…), not a branch. Its `id` is the recording key, not tr_…"), exports_Flag.withDefault(false))
 }, ({ trace: trace3, raw: raw4 }) => exports_Effect.gen(function* () {
@@ -60916,12 +61906,15 @@ var get28 = exports_Command.make("get", {
     description: "The whole trace as stored, in verifiers' trace format"
   }
 ]));
-var traces = exports_Command.make("traces").pipe(exports_Command.withDescription("List and read a workload's recorded sessions"), exports_Command.withSubcommands([list14, get28]));
+var traces = exports_Command.make("traces").pipe(exports_Command.withDescription("List and read a workload's recorded sessions"), exports_Command.withSubcommands([list14, get29]));
 
 // src/Runs/Runs.ts
 class RunFailed extends exports_Schema.TaggedError()("RunFailed", { readout: exports_Run.Readout }) {
 }
 
+class RunCancelled extends exports_Schema.TaggedError()("RunCancelled", { run: exports_Ids.RunId }) {
+}
+
 class WaitTimedOut extends exports_Schema.TaggedError()("RunWaitTimedOut", { run: exports_Ids.RunId }) {
 }
 var Subjects2 = of5(exports_Run.Subjects);
@@ -60950,7 +61943,7 @@ var columnOrder = { production: 0, candidate: 1 };
 var columnsOf = (subjects) => subjects.toSorted((a, b) => columnOrder[a.subject._tag] - columnOrder[b.subject._tag]);
 var meanOf = (summary3) => summary3 === undefined ? "–" : `${summary3.mean.toFixed(2)} (${summary3.count})`;
 var summaryRows = (scorers, subjects) => [TRACE_SCORE, ...scorerRows(scorers), ...POINT_ROWS].flatMap(({ label, of: of6 }) => subjects.some((subject) => of6(subject) !== undefined) ? [[label, ...subjects.map((subject) => meanOf(of6(subject)))]] : []);
-var usageText = (usage3) => usage3 === undefined ? "–" : tokensOf(usage3).join(" · ");
+var usageText = (usage3) => usage3 === undefined ? "–" : tokensOf3(usage3).join(" · ");
 var costLabel = { production: " (paid)", candidate: "" };
 var costRow = (subjects) => [
   "reply cost",
@@ -60996,9 +61989,9 @@ var started2 = {
   text: (run7) => `Started run ${run7.id} of ${encodeAddress2(run7.taskset)} for ${run7.subjects.map((subject) => subjectName(subject)).join(", ")}, under ${scoringOf(run7)}.
 Follow it with \`ambral runs show ${run7.id}\`.`
 };
-var listed8 = {
+var listed9 = {
   schema: exports_Run.Page,
-  text: ({ runs, next: next4 }) => runs.length === 0 ? "No runs yet. Start one with `ambral runs start <workload>/<taskset> --subjects production,<model>`." : [
+  text: ({ runs, next: next5 }) => runs.length === 0 ? "No runs yet. Start one with `ambral runs start <workload>/<taskset> --subjects production,<model>`." : [
     table2([
       ["RUN", "TASKSET", "SUBJECTS", "SCORING", "STATUS", "STARTED (UTC)"],
       ...runs.map((run7) => [
@@ -61010,7 +62003,7 @@ var listed8 = {
         minuteOf(run7.createdAt)
       ])
     ]),
-    ...next4 === undefined ? [] : ["", `Older runs: \`ambral runs list --cursor ${next4}\`, with the same filters.`]
+    ...next5 === undefined ? [] : ["", `Older runs: \`ambral runs list --cursor ${next5}\`, with the same filters.`]
   ].join(`
 `)
 };
@@ -61047,9 +62040,11 @@ var start5 = exports_Command.make("start", {
       return yield* new WaitTimedOut({ run: run7.id });
     if (last2.run.status === "failed")
       return yield* new RunFailed({ readout: last2 });
+    if (last2.run.status === "cancelled")
+      return yield* new RunCancelled({ run: run7.id });
     yield* print(shown, last2);
   }).pipe(exports_Effect.ensuring(warned));
-})).pipe(exports_Command.provide(inProject), exports_Command.withDescription("Start a score run of a taskset: each of its traces is replayed for each subject, and each reply scored. It " + "scores under the taskset's current scoring config, or --scoring's. Production's replies are the ones the " + "taskset's traces recorded, so scorers that compare a reply with those record nothing for it. A run takes " + "minutes, longer with more subjects, traces and points, and judge calls at each: three subjects over ten short " + "traces can take more than ten minutes. Without --wait it prints the run's id at once; read it with " + "`ambral runs show <run> --json` until its `run.status` is no longer `running` (it ends `completed` or " + "`failed`), and find it again with `ambral runs list --taskset <workload>/<taskset>`"), exports_Command.withExamples([
+})).pipe(exports_Command.provide(inProject), exports_Command.withDescription("Start a score run of a taskset: each of its traces is replayed for each subject, and each reply scored. It " + "scores under the taskset's current scoring config, or --scoring's. Production's replies are the ones the " + "taskset's traces recorded, so scorers that compare a reply with those record nothing for it. A run takes " + "minutes, longer with more subjects, traces and points, and judge calls at each: three subjects over ten short " + "traces can take more than ten minutes. Without --wait it prints the run's id at once; read it with " + "`ambral runs show <run> --json` until its `run.status` is no longer `running` (it ends `completed`, " + "`failed` or `cancelled`), and find it again with `ambral runs list --taskset <workload>/<taskset>`"), exports_Command.withExamples([
   {
     command: "ambral runs start support-agent/refunds --subjects production,openai/gpt-6-luna --wait",
     description: "Score one pool model on the taskset beside production's own replies, and print the summary once " + "it ends"
@@ -61079,7 +62074,7 @@ var list15 = exports_Command.make("list", {
     taskset: exports_Option.getOrUndefined(taskset),
     cursor: exports_Option.getOrUndefined(cursor)
   });
-  yield* print(listed8, yield* platform2.runs.list({ params: { org }, query: query4 }));
+  yield* print(listed9, yield* platform2.runs.list({ params: { org }, query: query4 }));
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("List the org's score runs, newest first, a page at a time, or a workload's or a taskset's"), exports_Command.withExamples([{
   command: "ambral runs list --taskset support-agent/refunds",
   description: "The runs of support-agent's refunds taskset"
@@ -61102,7 +62097,7 @@ var reasonCell = (reason) => {
 var refOf = ({ branch, trace: trace3 }) => branchName({ trace: trace3, leaf: branch });
 var verdictsListed = (run7) => ({
   schema: exports_Run.VerdictPage,
-  text: ({ next: next4, verdicts: verdicts2 }) => {
+  text: ({ next: next5, verdicts: verdicts2 }) => {
     if (verdicts2.length === 0) {
       return `No verdicts match. See every check's with \`ambral runs verdicts ${run7}\`, without filters.`;
     }
@@ -61122,7 +62117,7 @@ var verdictsListed = (run7) => ({
       "",
       `Their traces: ${exports_Array.dedupe(verdicts2.map(refOf)).join(",")}`,
       `Read one reply by reply, each judge's whole call included, with \`ambral runs trace ${run7} <tr_…>\`.`,
-      ...next4 === undefined ? [] : [`More: \`ambral runs verdicts ${run7} --cursor ${next4}\`, with the same filters.`]
+      ...next5 === undefined ? [] : [`More: \`ambral runs verdicts ${run7} --cursor ${next5}\`, with the same filters.`]
     ].join(`
 `);
   }
@@ -61229,7 +62224,19 @@ var exportCommand = exports_Command.make("export", { run: runArgument }, ({ run:
   const episodes2 = yield* platform2.export.run({ params: { org, run: run7 } });
   yield* episodes2.pipe(exports_Stream.decodeText(), exports_Stream.splitLines, exports_Stream.runForEach((line) => exports_Console.log(line)));
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("Print a run's results in verifiers' episode format, one JSON object a line, which verifiers and prime-rl " + "load from `traces.jsonl`"), exports_Command.withExamples([{ command: "ambral runs export <run> > traces.jsonl", description: "Save them to a file" }]));
-var runs = exports_Command.make("runs").pipe(exports_Command.withDescription("Start score runs of a taskset, and read what they found"), exports_Command.withSubcommands([start5, list15, show, verdictsCommand, traceCommand, exportCommand]));
+var cancelled = {
+  schema: exports_Run.Run,
+  text: (run7) => `Cancelled run ${run7.id} of ${encodeAddress2(run7.taskset)}. Its trials not yet scoring are skipped; any ` + `already scoring finish, and \`ambral runs show ${run7.id}\` reads what they scored.`
+};
+var cancel2 = exports_Command.make("cancel", { run: runArgument }, ({ run: run7 }) => exports_Effect.gen(function* () {
+  const { platform: platform2 } = yield* Ambral;
+  const { org } = yield* acting;
+  yield* print(cancelled, yield* platform2.runs.cancel({ params: { org, run: run7 } }));
+})).pipe(exports_Command.provide(inProject), exports_Command.withDescription("Cancel a run that is still running: it ends `cancelled`, and its trials not yet scoring are skipped, so they " + "call no model. A trial already scoring finishes, and its result is kept. Cancelling a cancelled run again " + "changes nothing; a run that completed or failed can't be cancelled"), exports_Command.withExamples([{
+  command: "ambral runs cancel <run>",
+  description: "Stop a run started by mistake, or one no longer needed"
+}]));
+var runs = exports_Command.make("runs").pipe(exports_Command.withDescription("Start score runs of a taskset, read what they found, and cancel those still running"), exports_Command.withSubcommands([start5, list15, show, verdictsCommand, traceCommand, exportCommand, cancel2]));
 
 // skill/references/evals.md
 var evals_default = `# Building and running an eval
@@ -61331,8 +62338,8 @@ asked for it.
 
    If your commands time out sooner than a run takes (an agent's shell often stops a command after a few minutes),
    start it without \`--wait\`: it prints the run's id at once. Then read it every minute or so with
-   \`ambral runs show <run> --json\` until its \`run.status\` is no longer \`running\`: it ends \`completed\` or \`failed\`,
-   and \`progress.completed\` of \`progress.trials\` says how far it has got. \`ambral runs list --taskset
+   \`ambral runs show <run> --json\` until its \`run.status\` is no longer \`running\`: it ends \`completed\`, \`failed\` or
+   \`cancelled\`, and \`progress.completed\` of \`progress.trials\` says how far it has got. \`ambral runs list --taskset
    <workload>/<taskset>\` finds a run's id again, newest first.
 
    While a run is in flight, wait for it: starting the same run again then only pays for the same replies twice. Once
@@ -61340,6 +62347,11 @@ asked for it.
    little differently each run. A run that ends \`failed\` exits 1 under \`--wait\`, and \`runs show\` lists each failed
    trial's error.
 
+   To stop a run in flight (one started with the wrong subjects, taskset or config, or no longer needed), ask the
+   user, then \`ambral runs cancel <run>\`. Its trials not yet scoring are skipped and call no model; one already
+   scoring finishes, and \`runs show\` reads what scored before it stopped. A run that completed or failed can't be
+   cancelled. A \`--wait\` on a cancelled run exits 1.
+
 3. **Trying a scoring change.** \`--scoring <file>\` scores this run alone under that file, without saving it to the
    taskset, so you can compare a draft with the saved version before saving it as the next one. The file is
    checked as \`tasksets scoring set --check\` checks it, before the run starts.
@@ -62063,7 +63075,7 @@ var isStale = (text3, current2) => exports_Option.match(exports_Option.all([expo
   onNone: () => false,
   onSome: ([installed, running]) => exports_Order.isLessThan(exports_Semver.precedence)(installed, running)
 });
-var failures2 = {
+var failures = {
   check: "Couldn't check for the folder",
   directory: "Couldn't make the folder",
   remove: "Couldn't remove the old folder",
@@ -62071,12 +63083,12 @@ var failures2 = {
 };
 
 class InstallError extends exports_Schema.TaggedError()("SkillInstallError", {
-  reason: exports_Schema.Literals(exports_Record.keys(failures2)),
+  reason: exports_Schema.Literals(exports_Record.keys(failures)),
   file: exports_Schema.String,
   cause: exports_Schema.Defect()
 }) {
   get message() {
-    return `${failures2[this.reason]} ${this.file}: ${String(this.cause)}`;
+    return `${failures[this.reason]} ${this.file}: ${String(this.cause)}`;
   }
 }
 var failing = (reason, file3) => exports_Effect.mapError((cause) => new InstallError({ reason, file: file3, cause }));
@@ -62100,12 +63112,12 @@ var installed = {
 var install = exports_Command.make("install", {}, () => exports_Effect.gen(function* () {
   const fs = yield* exports_FileSystem.FileSystem;
   const path = yield* exports_Path.Path;
-  const project2 = yield* root;
+  const project = yield* root;
   const main = yield* stamp(SKILL_default, package_default.version);
-  const claudeSkills = path.join(project2, ...claude.folder);
+  const claudeSkills = path.join(project, ...claude.folder);
   const createdClaudeSkills = !(yield* fs.exists(claudeSkills).pipe(failing("check", claudeSkills)));
   const copies = yield* exports_Effect.forEach(destinations, ({ folder, readers }) => {
-    const target = path.join(project2, ...folder, FOLDER2);
+    const target = path.join(project, ...folder, FOLDER2);
     const referenceFolder = path.join(target, REFERENCES);
     return exports_Effect.gen(function* () {
       yield* fs.makeDirectory(target, { recursive: true }).pipe(failing("directory", target));
@@ -62122,13 +63134,13 @@ var install = exports_Command.make("install", {}, () => exports_Effect.gen(funct
       }).pipe(exports_Effect.onError(() => exports_Effect.ignore(fs.remove(staging, { recursive: true, force: true }))));
       yield* write4(path.join(target, MAIN), main).pipe(failing("write", path.join(target, MAIN)));
       return {
-        folder: path.relative(project2, target),
+        folder: path.relative(project, target),
         readers,
         files: [MAIN, ...Object.keys(references).map((name) => path.join(REFERENCES, name))]
       };
     });
   });
-  yield* print(installed, { version: package_default.version, project: project2, copies, createdClaudeSkills });
+  yield* print(installed, { version: package_default.version, project, copies, createdClaudeSkills });
 })).pipe(exports_Command.withDescription("Install the ambral skill into this project, for Claude Code and other coding agents: how to run Ambral's " + "loop with this CLI. Run it again after updating ambral"));
 var skill = exports_Command.make("skill").pipe(exports_Command.withDescription("Install the skill that teaches a coding agent to use ambral"), exports_Command.withSubcommands([install]));
 var Stale = exports_Schema.Struct({
@@ -62146,8 +63158,8 @@ var hint = exports_Layer.effectDiscard(exports_Effect.gen(function* () {
   const json6 = yield* Json3;
   const cli = package_default.version;
   const staleVersion = exports_Effect.gen(function* () {
-    const project2 = yield* root;
-    const versions = yield* exports_Effect.forEach(destinations, ({ folder }) => fs.readFileString(path.join(project2, ...folder, FOLDER2, MAIN)).pipe(exports_Effect.map((text3) => isStale(text3, cli) ? versionOf(text3) : exports_Option.none()), exports_Effect.orElseSucceed(() => exports_Option.none())));
+    const project = yield* root;
+    const versions = yield* exports_Effect.forEach(destinations, ({ folder }) => fs.readFileString(path.join(project, ...folder, FOLDER2, MAIN)).pipe(exports_Effect.map((text3) => isStale(text3, cli) ? versionOf(text3) : exports_Option.none()), exports_Effect.orElseSucceed(() => exports_Option.none())));
     return exports_Option.firstSomeOf(versions);
   }).pipe(exports_Effect.orElseSucceed(() => exports_Option.none()));
   yield* exports_Effect.addFinalizer(() => exports_Effect.flatMap(staleVersion, (stale) => exports_Option.match(stale, {
@@ -62199,13 +63211,15 @@ var Failures = exports_Schema.Union([
   exports_Run.TraceNotFound,
   exports_Run.VerdictNotFound,
   exports_Run.VerdictCursorNotFound,
+  exports_Run.NotRunning,
   exports_Inference.KeyRequired,
+  exports_Inference.OutOfCredit,
   RunFailed,
+  RunCancelled,
   WaitTimedOut,
   InstallError
 ]);
 var notEnabled = {
-  pending: `This org is pending. ${PENDING_NOTE}`,
   suspended: "This org is suspended. Reach out to founders@ambral.com."
 };
 var rejected = {
@@ -62226,8 +63240,8 @@ var notOffered = {
     remedy: "See the models this org can use with `ambral models list`."
   },
   KeyRequired: {
-    message: (model, upstream) => `This org pays for its own model calls and has no key for ${upstream}, the provider of ${model}.`,
-    remedy: "Ask an owner or admin of the org to save one on its Providers page in the Ambral web app, then try again."
+    message: (model, upstream) => `This org pays with its own provider keys and has no key for ${upstream}, the provider of ${model}.`,
+    remedy: "Ask an owner or admin of the org to save one on its Billing page in the Ambral web app, then try again."
   }
 };
 var branchOf2 = exports_Schema.encodeSync(exports_TraceReading.Ref);
@@ -62378,13 +63392,25 @@ var advise = (failure) => exports_Match.valueTags(failure, {
     remedy: "Pass the `next` a page printed, with the same filters, or list from the first without --cursor."
   }),
   InferenceKeyRequired: ({ upstream }) => ({
-    message: `This org pays for its own model calls and has no key for ${upstream}, the provider of a model this run calls.`,
-    remedy: "Ask an owner or admin of the org to save one on its Providers page in the Ambral web app, then start the run again."
+    message: `This org pays with its own provider keys and has no key for ${upstream}, the provider of a model this run calls.`,
+    remedy: "Ask an owner or admin of the org to save one on its Billing page in the Ambral web app, then start the run again."
+  }),
+  InferenceOutOfCredit: () => ({
+    message: "This org is out of Ambral credit, so it can't start a run.",
+    remedy: "Ask an owner or admin of the org about adding credit; its balance is on its Billing page in the Ambral " + "web app. Then start the run again."
   }),
   RunFailed: ({ readout: readout2 }) => ({
     message: readoutText(readout2),
     remedy: `The run failed: each failed trial is listed above. Read it again with \`ambral runs show ${readout2.run.id}\`.`
   }),
+  RunNotRunning: ({ run: run7, status: status3 }) => ({
+    message: `Run ${run7} already ended ${status3}, so there is nothing to cancel.`,
+    remedy: `Read what it found with \`ambral runs show ${run7}\`.`
+  }),
+  RunCancelled: ({ run: run7 }) => ({
+    message: `Run ${run7} was cancelled while this waited for it.`,
+    remedy: `Read what it scored before then with \`ambral runs show ${run7}\`.`
+  }),
   RunWaitTimedOut: ({ run: run7 }) => ({
     message: `Stopped waiting for run ${run7}, which is still running.`,
     remedy: `Follow it with \`ambral runs show ${run7}\`, or wait longer next time with \`--timeout\`.`
@@ -62406,7 +63432,7 @@ var created2 = {
   ].join(`
 `)
 };
-var listed9 = {
+var listed10 = {
   schema: exports_Schema.Array(exports_Taskset.Taskset),
   text: (tasksets) => tasksets.length === 0 ? "No tasksets yet. Create one with `ambral tasksets create <workload>/<name> --traces <tr_…>,<tr_…>`." : table2([
     ["TASKSET", "TRACES", "SCORING", "CREATED (UTC)"],
@@ -62418,7 +63444,7 @@ var listed9 = {
     ])
   ])
 };
-var one = {
+var one2 = {
   schema: exports_Taskset.Taskset,
   text: (taskset) => [
     `Taskset ${addressOf(taskset)} · ${traces2(taskset.tasks.length)} · ${scoringOf2(taskset)} · ` + `created ${minuteOf(taskset.createdAt)} UTC`,
@@ -62452,20 +63478,20 @@ var list16 = exports_Command.make("list", {
     onNone: () => platform2.tasksets.listAll({ params: { org } }),
     onSome: (name) => platform2.tasksets.list({ params: { org, workload: name } })
   });
-  yield* print(listed9, found);
+  yield* print(listed10, found);
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("List the org's tasksets, or one workload's, newest first, with each one's scoring version"), exports_Command.withExamples([{ command: "ambral tasksets list support-agent", description: "support-agent's tasksets" }]));
-var get29 = exports_Command.make("get", { taskset: addressArgument }, ({ taskset }) => exports_Effect.gen(function* () {
+var get30 = exports_Command.make("get", { taskset: addressArgument }, ({ taskset }) => exports_Effect.gen(function* () {
   const { platform: platform2 } = yield* Ambral;
   const { org } = yield* acting;
-  yield* print(one, yield* platform2.tasksets.get({ params: { org, workload: taskset.workload, taskset: taskset.taskset } }));
+  yield* print(one2, yield* platform2.tasksets.get({ params: { org, workload: taskset.workload, taskset: taskset.taskset } }));
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("Show a taskset: each of its traces' branches, and its scoring version"), exports_Command.withExamples([{ command: "ambral tasksets get support-agent/refunds --json", description: "As JSON" }]));
-var tasksets = exports_Command.make("tasksets").pipe(exports_Command.withDescription("Create and read a workload's tasksets, and set how they're scored"), exports_Command.withSubcommands([create5, list16, get29, scoring3]));
+var tasksets = exports_Command.make("tasksets").pipe(exports_Command.withDescription("Create and read a workload's tasksets, and set how they're scored"), exports_Command.withSubcommands([create5, list16, get30, scoring3]));
 
 // src/Workloads/Workloads.ts
 var nameArgument = exports_Argument.String("name").pipe(exports_Argument.withDescription("The workload's name, as its requests send it in `x-workload`"), exports_Argument.withSchema(exports_Ids.WorkloadName));
 var modelArgument = exports_Argument.String("model").pipe(exports_Argument.withDescription("A catalog model's id, as `ambral models list` shows it"), exports_Argument.withSchema(exports_Ids.ModelId));
 var poolOf2 = (pool) => [pool.primary, ...pool.models.filter((member2) => member2 !== pool.primary)].join(", ");
-var one2 = {
+var one3 = {
   schema: exports_WorkloadConnection.Details,
   text: ({ workload, connection }) => [
     table2([
@@ -62491,7 +63517,7 @@ var created3 = {
   text: (workload) => `Created ${workload.name}, serving ${workload.pool.primary}.
 ` + `Add a model to its pool with \`ambral workloads pool add ${workload.name} <model>\`.`
 };
-var listed10 = {
+var listed11 = {
   schema: exports_Schema.Array(exports_Workload.Workload),
   text: (workloads) => workloads.length === 0 ? "This org has no workloads. Create one with `ambral workloads create <name> --model <model>`." : table2([
     ["WORKLOAD", "PRIMARY", "POOL"],
@@ -62525,14 +63551,14 @@ var create6 = exports_Command.make("create", {
 var list17 = exports_Command.make("list", {}, () => exports_Effect.gen(function* () {
   const { platform: platform2 } = yield* Ambral;
   const { org } = yield* acting;
-  yield* print(listed10, yield* platform2.workloads.list({ params: { org } }));
+  yield* print(listed11, yield* platform2.workloads.list({ params: { org } }));
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("List the org's workloads, by name, with each one's primary model and pool"));
-var get30 = exports_Command.make("get", { name: nameArgument }, ({ name }) => exports_Effect.gen(function* () {
+var get31 = exports_Command.make("get", { name: nameArgument }, ({ name }) => exports_Effect.gen(function* () {
   const { platform: platform2 } = yield* Ambral;
   const { org } = yield* acting;
-  yield* print(one2, yield* platform2.workloads.get({ params: { org, workload: name } }));
+  yield* print(one3, yield* platform2.workloads.get({ params: { org, workload: name } }));
 })).pipe(exports_Command.provide(inProject), exports_Command.withDescription("Show a workload: its primary model, its pool, and how an agent connects to it through the Gateway"), exports_Command.withExamples([{ command: "ambral workloads get support-agent --json", description: "As JSON" }]));
-var add7 = exports_Command.make("add", { name: nameArgument, model: modelArgument }, ({ name, model }) => exports_Effect.gen(function* () {
+var add8 = exports_Command.make("add", { name: nameArgument, model: modelArgument }, ({ name, model }) => exports_Effect.gen(function* () {
   const { platform: platform2 } = yield* Ambral;
   const { org } = yield* acting;
   yield* print(changed(name), yield* platform2.workloads.addToPool({ params: { org, workload: name, model } }));
@@ -62559,8 +63585,8 @@ var setPrimary = exports_Command.make("set-primary", { name: nameArgument, model
     description: "Roll back to the model it served before"
   }
 ]));
-var pool = exports_Command.make("pool").pipe(exports_Command.withDescription("Add models to a workload's pool, or remove them"), exports_Command.withSubcommands([add7, remove11]));
-var workloads = exports_Command.make("workloads").pipe(exports_Command.withDescription("Create, list and show the org's workloads, change their model pools, and choose the model that serves each"), exports_Command.withSubcommands([create6, list17, get30, setPrimary, pool]));
+var pool = exports_Command.make("pool").pipe(exports_Command.withDescription("Add models to a workload's pool, or remove them"), exports_Command.withSubcommands([add8, remove11]));
+var workloads = exports_Command.make("workloads").pipe(exports_Command.withDescription("Create, list and show the org's workloads, change their model pools, and choose the model that serves each"), exports_Command.withSubcommands([create6, list17, get31, setPrimary, pool]));
 
 // src/Cli.ts
 var ambral = exports_Command.make("ambral").pipe(exports_Command.withDescription("Use Ambral from a terminal"), exports_Command.withSubcommands([
@@ -62575,7 +63601,7 @@ var ambral = exports_Command.make("ambral").pipe(exports_Command.withDescription
   runs,
   keys5,
   skill
-]), exports_Command.provide(reporting(Failures, advise).pipe(exports_Layer.provide(layer18), exports_Layer.provideMerge(hint))), exports_Command.withGlobalFlags([Json3, Org2]));
+]), exports_Command.provide(reporting(Failures, advise).pipe(exports_Layer.provide(layer18), exports_Layer.provideMerge(hint))), exports_Command.withGlobalFlags([Json3, Org3]));
 var main = exports_Command.run(ambral, { version: package_default.version }).pipe(exports_Effect.catchTag("ShowHelp", (help) => help.errors.length === 0 ? exports_Effect.void : exports_Effect.fail(help)));
 
 // src/bin.ts