chainlesschain 0.166.100 → 0.166.102

package/src/commands/agent.js

@@ -308,6 +308,10 @@ export function registerAgentCommand(program, dependencies = {}) {
       "LLM provider (ollama, openai, volcengine, deepseek, ...)",
     )
     .option("--base-url <url>", "API base URL")
+    .option(
+      "--service-tier <tier>",
+      "Reviewed provider service tier (standard, fast, flex, ultrafast)",
+    )
     .option("--api-key <key>", "API key")
     .option(
       "--think [level]",
@@ -769,8 +773,9 @@ export function registerAgentCommand(program, dependencies = {}) {
       // --capabilities: print the machine-readable manifest and exit — no
       // config, no bootstrap, no network (gap-analysis 2026-07-11 快速收益 #6).
       if (options.capabilities) {
-        const { buildAgentCapabilities } =
-          await import("../lib/headless-manifest.js");
+        const { buildAgentCapabilities } = await import(
+          "../lib/headless-manifest.js"
+        );
         console.log(JSON.stringify(buildAgentCapabilities(), null, 2));
         return;
       }
@@ -789,8 +794,9 @@ export function registerAgentCommand(program, dependencies = {}) {
       let toolAdmission = null;
       if (process.env.CC_TOOL_ADMISSION) {
         try {
-          const { parseToolAdmissionConfig } =
-            await import("../lib/agent-tool-admission.js");
+          const { parseToolAdmissionConfig } = await import(
+            "../lib/agent-tool-admission.js"
+          );
           toolAdmission = parseToolAdmissionConfig(
             process.env.CC_TOOL_ADMISSION,
           );
@@ -878,8 +884,9 @@ export function registerAgentCommand(program, dependencies = {}) {
       // screen readers (mono theme + no repainting status line). Applied
       // before anything renders.
       {
-        const { screenReaderRequested, applyScreenReaderMode } =
-          await import("../lib/accessibility.js");
+        const { screenReaderRequested, applyScreenReaderMode } = await import(
+          "../lib/accessibility.js"
+        );
         if (screenReaderRequested(options)) {
           applyScreenReaderMode();
         }
@@ -912,8 +919,9 @@ export function registerAgentCommand(program, dependencies = {}) {
       };
       if (options.worktree !== undefined || backgroundRequested) {
         try {
-          const { resolveBackgroundWorktreePolicy } =
-            await import("../lib/background-worktree-policy.js");
+          const { resolveBackgroundWorktreePolicy } = await import(
+            "../lib/background-worktree-policy.js"
+          );
           worktreeDecision = resolveBackgroundWorktreePolicy({
             background: backgroundRequested,
             worktree: options.worktree,
@@ -965,8 +973,9 @@ export function registerAgentCommand(program, dependencies = {}) {
       };
       if (worktreeDecision.enabled) {
         try {
-          const { setupAgentWorktree, finishAgentWorktree } =
-            await import("../lib/agent-worktree.js");
+          const { setupAgentWorktree, finishAgentWorktree } = await import(
+            "../lib/agent-worktree.js"
+          );
           _finishAgentWorktreeFn = finishAgentWorktree;
           const detectedRepoRoot = worktreeDecision.repoRoot || invocationCwd;
           const worktreeCwd =
@@ -994,8 +1003,9 @@ export function registerAgentCommand(program, dependencies = {}) {
             const { loadHooks } = await import("../lib/settings-hooks.cjs");
             _worktreeSettingsHooks =
               loadHooks({ cwd: _worktree.repoRoot }).hooks || null;
-            const { runWorktreeCreateHooks, dispatchAsyncHooks } =
-              await import("../lib/settings-hook-events.js");
+            const { runWorktreeCreateHooks, dispatchAsyncHooks } = await import(
+              "../lib/settings-hook-events.js"
+            );
             await runWorktreeCreateHooks(_worktreeSettingsHooks, {
               worktreePath: _worktree.path,
               branch: _worktree.branch,
@@ -1003,8 +1013,9 @@ export function registerAgentCommand(program, dependencies = {}) {
               cwd: _worktree.path,
             });
             if (!_worktreeAsyncSupervisor) {
-              const { AsyncHookSupervisor } =
-                await import("../lib/async-hook-supervisor.js");
+              const { AsyncHookSupervisor } = await import(
+                "../lib/async-hook-supervisor.js"
+              );
               _worktreeAsyncSupervisor = new AsyncHookSupervisor({
                 persistStats: true,
               });
@@ -1089,8 +1100,9 @@ export function registerAgentCommand(program, dependencies = {}) {
       // Claude-Code parity: auto-checkpoint defaults ON inside a git repo
       // (shadow-commit engine, zero working-tree touch); explicit
       // --checkpoint / --no-checkpoint always wins.
-      const { resolveAutoCheckpoint } =
-        await import("../lib/auto-checkpoint-default.js");
+      const { resolveAutoCheckpoint } = await import(
+        "../lib/auto-checkpoint-default.js"
+      );
       const autoCheckpoint = resolveAutoCheckpoint({
         flagValue: options.checkpoint,
         flagSource: command?.getOptionValueSource?.("checkpoint"),
@@ -1118,8 +1130,9 @@ export function registerAgentCommand(program, dependencies = {}) {
           options.outputFormat !== "text" ||
           !process.stdin.isTTY;
         if (headlessIntent) {
-          const { getLastLogicalSessionId } =
-            await import("../lib/session-transcript-migration.js");
+          const { getLastLogicalSessionId } = await import(
+            "../lib/session-transcript-migration.js"
+          );
           const database =
             sessionBootstrapContext.db?.getDatabase?.() ||
             sessionBootstrapContext.db?.getDb?.() ||
@@ -1127,8 +1140,9 @@ export function registerAgentCommand(program, dependencies = {}) {
           options.session = getLastLogicalSessionId(database);
         } else {
           // Interactive: picker across both stores (agent REPL rebuilds either).
-          const { pickRecentSession } =
-            await import("../lib/session-picker.js");
+          const { pickRecentSession } = await import(
+            "../lib/session-picker.js"
+          );
           const picked = await pickRecentSession(sessionBootstrapContext, {
             message: "Resume which agent session?",
           });
@@ -1154,8 +1168,9 @@ export function registerAgentCommand(program, dependencies = {}) {
         // diagnostics belong on stderr; stdout may already be reserved for a
         // JSON/NDJSON protocol selected by this command.
         await withQuietStdout(async () => {
-          const { sessionHasPersistedEvidence } =
-            await import("../harness/jsonl-session-store.js");
+          const { sessionHasPersistedEvidence } = await import(
+            "../harness/jsonl-session-store.js"
+          );
           if (!sessionHasPersistedEvidence(options.session)) {
             const [{ bootstrap }, { ensureCanonicalSessionFromDatabase }] =
               await Promise.all([
@@ -1185,8 +1200,9 @@ export function registerAgentCommand(program, dependencies = {}) {
       // a no-op (silent) for a fresh run.
       if (options.forkSession && options.session) {
         const store = await import("../harness/jsonl-session-store.js");
-        const { applyForkSession } =
-          await import("../runtime/headless-runner.js");
+        const { applyForkSession } = await import(
+          "../runtime/headless-runner.js"
+        );
         const fork = applyForkSession(
           {
             forkSession: true,
@@ -1259,8 +1275,9 @@ export function registerAgentCommand(program, dependencies = {}) {
       let settingsSandbox = null;
       let managedSettingsSandbox = null;
       try {
-        const { loadSettingsConfig } =
-          await import("../lib/settings-loader.cjs");
+        const { loadSettingsConfig } = await import(
+          "../lib/settings-loader.cjs"
+        );
         const sc = loadSettingsConfig({
           cwd: process.cwd(),
           settingsFile: options.settings || null,
@@ -1451,8 +1468,9 @@ export function registerAgentCommand(program, dependencies = {}) {
       // never pollutes spawned-bin test stderr.
       if (!process.env.VITEST && !process.env.VITEST_WORKER_ID) {
         try {
-          const { maybeWarnDeprecatedModel } =
-            await import("../lib/model-deprecation.js");
+          const { maybeWarnDeprecatedModel } = await import(
+            "../lib/model-deprecation.js"
+          );
           maybeWarnDeprecatedModel({ model: options.model });
         } catch {
           /* fail-open: a deprecation notice must never affect the run */
@@ -1536,8 +1554,9 @@ export function registerAgentCommand(program, dependencies = {}) {
         ) {
           decisionConfig = Object.freeze({ mode: "off" });
         } else {
-          const { resolveHeadlessSkillDecisionOptions } =
-            await import("../runtime/headless-runner.js");
+          const { resolveHeadlessSkillDecisionOptions } = await import(
+            "../runtime/headless-runner.js"
+          );
           decisionConfig = resolveHeadlessSkillDecisionOptions(options);
         }
       } catch (error) {
@@ -1599,8 +1618,9 @@ export function registerAgentCommand(program, dependencies = {}) {
           process.exit(1);
           return;
         }
-        const { runAgentHeadlessStream } =
-          await import("../runtime/headless-stream.js");
+        const { runAgentHeadlessStream } = await import(
+          "../runtime/headless-stream.js"
+        );
         const { parseToolList, validateHeadlessInvocationOptions } =
           await import("../runtime/headless-runner.js");
         const cwd = process.cwd();
@@ -1859,8 +1879,9 @@ export function registerAgentCommand(program, dependencies = {}) {
         // presenting a fresh conversation as a successful resume.
         if (resumeRequested && options.session) {
           const hasPersistedEvidence = await withQuietStdout(async () => {
-            const { sessionHasPersistedEvidence } =
-              await import("../harness/jsonl-session-store.js");
+            const { sessionHasPersistedEvidence } = await import(
+              "../harness/jsonl-session-store.js"
+            );
             return sessionHasPersistedEvidence(options.session);
           });
           if (!hasPersistedEvidence) {
@@ -1870,14 +1891,16 @@ export function registerAgentCommand(program, dependencies = {}) {
             );
           }
         }
-        const { runAgentHeadless, parseToolList } =
-          await import("../runtime/headless-runner.js");
+        const { runAgentHeadless, parseToolList } = await import(
+          "../runtime/headless-runner.js"
+        );
         // --goal-condition: validate the spec up front so a bad prefix fails
         // fast (before any model call) with a clear message.
         if (options.goalCondition) {
           try {
-            const { parseGoalCondition } =
-              await import("../lib/goal-condition-engine.js");
+            const { parseGoalCondition } = await import(
+              "../lib/goal-condition-engine.js"
+            );
             parseGoalCondition(options.goalCondition);
           } catch (e) {
             process.stderr.write(`--goal-condition: ${e.message}\n`);
@@ -1896,8 +1919,9 @@ export function registerAgentCommand(program, dependencies = {}) {
           : null;
         let evolutionComposition;
         try {
-          const { validateHeadlessInvocationOptions } =
-            await import("../runtime/headless-runner.js");
+          const { validateHeadlessInvocationOptions } = await import(
+            "../runtime/headless-runner.js"
+          );
           validateHeadlessInvocationOptions({
             outputFormat: options.outputFormat,
             permissionMode: options.permissionMode,

package/src/commands/eval.js

@@ -20,7 +20,7 @@ import {
   persistVerify01Receipts,
 } from "../lib/eval/verify01-execution.js";
 import executionBroker from "../lib/process-execution-broker/index.js";
-import { BUILT_IN_PROVIDERS } from "../lib/llm-providers.js";
+import { requireFormalBudgetRuntime } from "../lib/formal-budget-transport.js";
 import {
   TelemetryRecorder,
   formatTelemetry,
@@ -117,6 +117,9 @@ function makeHeadlessRunAgent(opts = {}) {
       throw new Error(
         "VERIFY01 provider/model binding differs from the launcher",
       );
+    // A valid task binding is not paid execution admission. Until every paid
+    // route and credential boundary is covered, refuse before spawning a child.
+    if (binding) requireFormalBudgetRuntime();
     const inherited = { ...process.env, ...(opts.env || {}) };
     const environmentValue = (name) => {
       if (process.platform !== "win32") return inherited[name];
@@ -127,11 +130,10 @@ function makeHeadlessRunAgent(opts = {}) {
         .find((candidate) => candidate.toLowerCase() === name.toLowerCase());
       return key === undefined ? undefined : inherited[key];
     };
-    const providerKey = BUILT_IN_PROVIDERS[binding?.provider]?.apiKeyEnv;
-    // Formal children retain platform plumbing and only the selected provider's
-    // credential (or the explicitly selected generic CC_API_KEY). Hooks,
-    // fallback configuration, NODE_OPTIONS and unrelated account tokens are
-    // excluded. Normal, non-formal Eval retains its existing environment.
+    // Formal children retain platform plumbing and the isolated task binding.
+    // Provider credentials belong to the trusted budget host. Hooks, fallback
+    // configuration, NODE_OPTIONS and account tokens are excluded. This alone
+    // does not enforce OS egress; paid launch remains refused above.
     const childEnvironment = binding
       ? {
           ...Object.fromEntries(
@@ -147,8 +149,6 @@ function makeHeadlessRunAgent(opts = {}) {
               "LANG",
               "LC_ALL",
               "LC_CTYPE",
-              "CC_API_KEY",
-              ...(providerKey ? [providerKey] : []),
             ]
               .map((key) => [key, environmentValue(key)])
               .filter(([, value]) => value !== undefined),
@@ -462,6 +462,9 @@ export function registerEvalCommand(program, { logger } = {}) {
           throw new Error(
             "frozen suite comparison is bound by its plan; --comparison-context cannot override it",
           );
+        // Refuse before task setup, workspace creation or raw receipt writes.
+        // Dry runs remain offline harness diagnostics, never observations.
+        if (tasks.verification && !options.dryRun) requireFormalBudgetRuntime();
         comparison =
           tasks.verification?.comparison ||
           createEvalComparison({

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.102",
+      "cliVersions": ["0.166.102"],
+      "date": null,
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.102: restore session pricing validation",
+          "body": "- Accept the reviewed Priority and Ultrafast pricing terms when validating the\n  built-in model catalog, restoring session observability, budget and Eval\n  projections while continuing to reject unknown tiers and invalid multipliers.\n- Make the model-switch warning regression insensitive to source formatting.\n- Publish Personal Data Hub 0.4.65 with source snapshots in answer citations\n  before CLI 0.166.102, then pair VS Code 0.37.146 and JetBrains 0.4.164 after\n  the exact release commit passes its complete Actions gates."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.101",
+      "cliVersions": ["0.166.101"],
+      "date": null,
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.101: preserve context, usage and task outcomes during compaction",
+          "body": "- Restore VS Code composer drafts after reset, session resume and closing the\n  last tab, with retry controls for failed loads. Align LLM connection tests\n  with the chat CLI and distinguish missing dependencies from provider errors.\n- Upgrade Context Memory Kernel to 0.1.10. Abort compaction with\n  `context_over_budget` when planning would empty a nonempty context or discard\n  a newly derived summary, including when summarizer fallback is enabled.\n- Preserve the original session context and head on rejection while retaining\n  settled provider usage. Keep summary trust and selection budgets unchanged.\n- Propagate validated provider receipts before accounting. Mark rejected\n  workflow compaction as failed, uncertain commits as requiring reconciliation,\n  and interrupted ordinary tasks as incomplete.\n- Account for completed compaction usage once when canonical planning rejects\n  its summary; stop on unknown usage or failed settlement without a paid retry.\n- Pair VS Code 0.37.145 and JetBrains 0.4.163 with CLI 0.166.101 after child\n  package publication, public CLI verification and the final commit's complete\n  Actions release gates. Formal evaluation and native/durable acceptance retain\n  their separate evidence and unfinished status."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.100",

package/src/harness/provider-backed-compaction.js

@@ -151,10 +151,16 @@ export async function compactConversationWithProvider(messages, options = {}) {
     }
     chatFn = chatWithTools;
   }
-  const invokeProviderCall = async (call) => {
-    const callId = safeUsageCallId(await options.onProviderCallStart?.());
+  const invokeProviderCall = async (call, deferUntilAdmission = false) => {
+    let callId = null;
+    const start = async () => {
+      callId = safeUsageCallId(await options.onProviderCallStart?.());
+    };
+    // Only the captured canonical transport can attest that request admission
+    // completed. Custom adapters keep the conservative pre-call boundary.
+    if (!deferUntilAdmission) await start();
     try {
-      return attachProviderCallId(await call(), callId);
+      return attachProviderCallId(await call(start), callId);
     } catch (error) {
       attachProviderCallIdToError(error, callId);
       throw error;
@@ -167,7 +173,7 @@ export async function compactConversationWithProvider(messages, options = {}) {
           if (typeof chatFn !== "function") {
             throw new Error("provider adapter unavailable");
           }
-          return invokeProviderCall(async () => {
+          return invokeProviderCall(async (start) => {
             const response = await chatFn([{ role: "user", content: prompt }], {
               ...(options.chatOptions || {}),
               ...(evolutionIngress === null ? {} : { evolutionIngress }),
@@ -184,6 +190,8 @@ export async function compactConversationWithProvider(messages, options = {}) {
               onToken: undefined,
               onStall: undefined,
               onStreamRetry: undefined,
+              onProviderCallStart:
+                evolutionIngress === null ? undefined : start,
               maxOutputTokens,
             });
             return {
@@ -198,7 +206,7 @@ export async function compactConversationWithProvider(messages, options = {}) {
                 ? { usageLedgerSettled: true }
                 : {}),
             };
-          });
+          }, evolutionIngress !== null);
         };
 
   const compressor =

package/src/lib/config-schema.js

@@ -69,6 +69,19 @@ const DESCRIPTORS = [
     default: DEFAULT_CONFIG.llm.model,
     description: "Default model id",
   }),
+  descriptor("llm.serviceTier", "string", {
+    enum: [
+      "standard",
+      "default",
+      "auto",
+      "fast",
+      "priority",
+      "flex",
+      "ultrafast",
+    ],
+    description:
+      "Requested live service tier; model and endpoint support are checked before dispatch",
+  }),
   descriptor("llm.visionModel", ["string", "null"], {
     description: "Model used for image turns",
   }),
@@ -502,11 +515,11 @@ function valueIssue(key, code, message) {
 function isPersistedSecretRef(value) {
   return Boolean(
     value &&
-    typeof value === "object" &&
-    !Array.isArray(value) &&
-    Object.keys(value).length === 1 &&
-    typeof value.__cc_secret_ref === "string" &&
-    value.__cc_secret_ref.length > 0,
+      typeof value === "object" &&
+      !Array.isArray(value) &&
+      Object.keys(value).length === 1 &&
+      typeof value.__cc_secret_ref === "string" &&
+      value.__cc_secret_ref.length > 0,
   );
 }