chainlesschain 0.166.101 → 0.166.103

package/src/lib/agent-ipc-bus.js

@@ -13,6 +13,7 @@ import { EventEmitter } from "node:events";
 import crypto from "node:crypto";
 import { EventRuntimeProducer } from "./event-runtime-producer.js";
 import { EventRuntimeStore } from "./event-runtime-store.js";
+import { requireUnscopedDescendantControl } from "./formal-budget-provider-scope.js";
 import executionBroker from "./process-execution-broker/index.js";
 import {
   AGENT_IPC_DEFAULT_LIMITS,
@@ -284,6 +285,7 @@ class AgentIPCBus extends EventEmitter {
    * @returns {Promise<{process: ChildProcess, agentId: string}>}
    */
   async spawnAgentProcess(command, args = [], options = {}) {
+    requireUnscopedDescendantControl();
     const agentId = options.agentId || crypto.randomUUID();
     if (
       this._childTransports.has(agentId) ||

package/src/lib/background-agent-keeper-client.js

@@ -1,6 +1,7 @@
 import net from "node:net";
 import { randomBytes } from "node:crypto";
 import { createNdjsonReader } from "./background-session-transport.js";
+import { requireUnscopedDescendantControl } from "./formal-budget-provider-scope.js";
 import {
   BACKGROUND_AGENT_KEEPER_ARM,
   BACKGROUND_AGENT_KEEPER_ARMED,
@@ -67,6 +68,7 @@ async function connectWithDeadline(pipePath, timeoutMs) {
 }
 
 export async function connectBackgroundAgentKeeper(options = {}) {
+  requireUnscopedDescendantControl();
   const hello = normalizeBackgroundAgentKeeperHello(options);
   const connectTimeoutMs = Math.max(
     1,
@@ -234,6 +236,7 @@ export async function connectBackgroundAgentKeeper(options = {}) {
 
   return Object.freeze({
     async arm(turn) {
+      requireUnscopedDescendantControl();
       const normalized = normalizeBackgroundAgentKeeperTurn(turn);
       if (activeTurn) {
         throw keeperError(

package/src/lib/browser-automation.js

@@ -3,10 +3,13 @@
  * Uses built-in fetch for basic operations, optional playwright for screenshots.
  */
 
+import { requireUnscopedExternalToolAccess } from "./formal-budget-provider-scope.js";
+
 /**
  * Fetch a URL and return the raw HTML.
  */
 export async function fetchPage(url, options = {}) {
+  requireUnscopedExternalToolAccess();
   const timeout = options.timeout || 30000;
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeout);
@@ -179,6 +182,7 @@ export function extractLinks(html, baseUrl) {
  * Returns null if playwright is not installed.
  */
 export async function takeScreenshot(url, outputPath, options = {}) {
+  requireUnscopedExternalToolAccess();
   try {
     const { chromium } = await import("playwright");
     const browser = await chromium.launch({ headless: true });

package/src/lib/cc-android-bridge.js

@@ -32,6 +32,7 @@
 
 import { readFileSync, existsSync } from "node:fs";
 import { join, dirname } from "node:path";
+import { requireUnscopedExternalToolAccess } from "./formal-budget-provider-scope.js";
 
 const ANDROID_PREFIX = "/data/data/com.chainlesschain.android/";
 
@@ -72,6 +73,7 @@ function resolveBridgeConfigDir() {
  * (server not started yet, or running off-device without override).
  */
 export function loadBridgeConfig() {
+  requireUnscopedExternalToolAccess();
   const dir = resolveBridgeConfigDir();
   if (!dir) return null;
   try {
@@ -109,6 +111,7 @@ export class AndroidBridgeUnavailableError extends Error {
  *  - Method name unknown (server returns {"error": "UNKNOWN_METHOD"})
  */
 export async function invoke(method, params = {}) {
+  requireUnscopedExternalToolAccess();
   if (typeof method !== "string" || method.length === 0) {
     throw new TypeError(
       "cc-android-bridge.invoke: method must be non-empty string",
@@ -170,6 +173,7 @@ export async function invoke(method, params = {}) {
  * Returns `{ available: boolean, reason?: string, port?: number }`.
  */
 export function caps() {
+  requireUnscopedExternalToolAccess();
   if (process.env.CC_ANDROID_BRIDGE_OVERRIDE === "1") {
     return { available: true, reason: "test-override" };
   }

package/src/lib/chat-core.js

@@ -1,3 +1,4 @@
+import { providerFetch } from "./formal-budget-provider-scope.js";
 /**
  * Chat Core — transport-independent streaming chat logic
  *
@@ -21,6 +22,7 @@ import {
   waitForStreamRetry,
 } from "./stream-retry.js";
 import { throwIfAborted } from "./abort-utils.js";
+import { isFormalBudgetError } from "./formal-budget-errors.js";
 
 // A streaming chat call must not hang forever if the API accepts the connection
 // but then goes silent (TCP up, no bytes). Abort the request if no data arrives
@@ -132,7 +134,7 @@ export async function streamOllama(
   guard.bump();
   let response;
   try {
-    response = await fetch(`${baseUrl}/api/chat`, {
+    response = await providerFetch(`${baseUrl}/api/chat`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
@@ -146,7 +148,7 @@ export async function streamOllama(
     });
   } catch (e) {
     guard.stop();
-    throw guard.stalled()
+    throw guard.stalled() && !isFormalBudgetError(e)
       ? new Error(
           `Ollama request stalled (no response in ${STREAM_STALL_MS / 1000}s)`,
         )
@@ -213,7 +215,7 @@ export async function streamOllama(
     }
   } catch (e) {
     throw attachStreamRetryMetadata(
-      guard.stalled()
+      guard.stalled() && !isFormalBudgetError(e)
         ? new Error(
             `Ollama stream stalled (no data in ${STREAM_STALL_MS / 1000}s)`,
           )
@@ -247,7 +249,7 @@ export async function streamOpenAI(
   guard.bump();
   let response;
   try {
-    response = await fetch(`${baseUrl}/chat/completions`, {
+    response = await providerFetch(`${baseUrl}/chat/completions`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
@@ -267,7 +269,7 @@ export async function streamOpenAI(
     });
   } catch (e) {
     guard.stop();
-    throw guard.stalled()
+    throw guard.stalled() && !isFormalBudgetError(e)
       ? new Error(
           `API request stalled (no response in ${STREAM_STALL_MS / 1000}s)`,
         )
@@ -344,7 +346,7 @@ export async function streamOpenAI(
     }
   } catch (e) {
     throw attachStreamRetryMetadata(
-      guard.stalled()
+      guard.stalled() && !isFormalBudgetError(e)
         ? new Error(
             `API stream stalled (no data in ${STREAM_STALL_MS / 1000}s)`,
           )
@@ -392,7 +394,7 @@ export async function streamAnthropic(
   guard.bump();
   let response;
   try {
-    response = await fetch(`${baseUrl}/messages`, {
+    response = await providerFetch(`${baseUrl}/messages`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
@@ -412,7 +414,7 @@ export async function streamAnthropic(
     });
   } catch (e) {
     guard.stop();
-    throw guard.stalled()
+    throw guard.stalled() && !isFormalBudgetError(e)
       ? new Error(
           `Anthropic request stalled (no response in ${STREAM_STALL_MS / 1000}s)`,
         )
@@ -486,7 +488,7 @@ export async function streamAnthropic(
     }
   } catch (e) {
     throw attachStreamRetryMetadata(
-      guard.stalled()
+      guard.stalled() && !isFormalBudgetError(e)
         ? new Error(
             `Anthropic stream stalled (no data in ${STREAM_STALL_MS / 1000}s)`,
           )

package/src/lib/cloud/cloud-client.js

@@ -28,6 +28,7 @@ import {
 import { join } from "node:path";
 import { getHomeDir } from "../paths.js";
 import { ResilientGatewayClient } from "../gateway-client-resilience.js";
+import { requireUnscopedDescendantControl } from "../formal-budget-provider-scope.js";
 
 export const _deps = { fetch: (...a) => globalThis.fetch(...a) };
 
@@ -78,6 +79,7 @@ export class CloudClient {
    * @param {object} opts { baseUrl, token, deps? }
    */
   constructor(opts = {}) {
+    requireUnscopedDescendantControl();
     this.baseUrl = String(opts.baseUrl || "").replace(/\/+$/, "");
     if (!this.baseUrl) {
       throw new Error(
@@ -109,6 +111,7 @@ export class CloudClient {
   }
 
   async _json(method, path, body) {
+    requireUnscopedDescendantControl();
     const res = await this.deps.fetch(`${this.baseUrl}${path}`, {
       method,
       headers: this._headers(),
@@ -121,7 +124,9 @@ export class CloudClient {
   }
 
   /** Submit a job. `bundle` is a base64 git bundle of the branch. */
-  async submit({ task, bundle, branch, baseSha }) {
+  async submit(payload) {
+    requireUnscopedDescendantControl();
+    const { task, bundle, branch, baseSha } = payload;
     const data = await this._json("POST", "/v1/jobs", {
       task,
       bundle,
@@ -133,10 +138,12 @@ export class CloudClient {
   }
 
   async status(jobId) {
+    requireUnscopedDescendantControl();
     return this._json("GET", `/v1/jobs/${encodeURIComponent(jobId)}`);
   }
 
   async result(jobId) {
+    requireUnscopedDescendantControl();
     return this._json("GET", `/v1/jobs/${encodeURIComponent(jobId)}/result`);
   }
 
@@ -146,6 +153,7 @@ export class CloudClient {
    * runners remain compatible with status()/result().
    */
   async events(jobId, options = {}) {
+    requireUnscopedDescendantControl();
     if (!/^[\w.-]+$/.test(String(jobId || ""))) {
       throw new Error(`invalid job id: ${jobId}`);
     }
@@ -175,6 +183,7 @@ export const TERMINAL_CLOUD_STATUS = new Set(["done", "failed"]);
  * `sleep`/`now` injected for tests.
  */
 export async function pollUntilDone(client, jobId, opts = {}) {
+  requireUnscopedDescendantControl();
   const intervalMs = opts.intervalMs ?? 3000;
   const timeoutMs = opts.timeoutMs ?? 30 * 60_000;
   const sleep = opts.sleep || ((ms) => new Promise((r) => setTimeout(r, ms)));

package/src/lib/config-schema.js

@@ -69,6 +69,19 @@ const DESCRIPTORS = [
     default: DEFAULT_CONFIG.llm.model,
     description: "Default model id",
   }),
+  descriptor("llm.serviceTier", "string", {
+    enum: [
+      "standard",
+      "default",
+      "auto",
+      "fast",
+      "priority",
+      "flex",
+      "ultrafast",
+    ],
+    description:
+      "Requested live service tier; model and endpoint support are checked before dispatch",
+  }),
   descriptor("llm.visionModel", ["string", "null"], {
     description: "Model used for image turns",
   }),
@@ -502,11 +515,11 @@ function valueIssue(key, code, message) {
 function isPersistedSecretRef(value) {
   return Boolean(
     value &&
-    typeof value === "object" &&
-    !Array.isArray(value) &&
-    Object.keys(value).length === 1 &&
-    typeof value.__cc_secret_ref === "string" &&
-    value.__cc_secret_ref.length > 0,
+      typeof value === "object" &&
+      !Array.isArray(value) &&
+      Object.keys(value).length === 1 &&
+      typeof value.__cc_secret_ref === "string" &&
+      value.__cc_secret_ref.length > 0,
   );
 }
 

package/src/lib/context-memory-kernel/memory-query-index.js

@@ -2,6 +2,9 @@ import { createHash } from "node:crypto";
 
 export const MEMORY_QUERY_INDEX_SCHEMA = "chainlesschain.memory-query-index/v1";
 const CURSOR_SCHEMA = "chainlesschain.memory-list-cursor/v1";
+// Preserve the existing English collation while avoiding constructing locale
+// options for every comparison during shard sorts, cursor search and merging.
+const memoryRowCollator = new Intl.Collator("en");
 
 export function queryDigest(bytes) {
   return `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
@@ -10,8 +13,8 @@ export function queryDigest(bytes) {
 export function compareMemoryRows(left, right) {
   return (
     right.importance - left.importance ||
-    right.updatedAt.localeCompare(left.updatedAt, "en") ||
-    left.memoryId.localeCompare(right.memoryId, "en")
+    memoryRowCollator.compare(right.updatedAt, left.updatedAt) ||
+    memoryRowCollator.compare(left.memoryId, right.memoryId)
   );
 }
 

package/src/lib/context-memory-kernel/runtime.js

@@ -22,6 +22,10 @@ export function createCliContextMemoryRuntime(options = {}) {
   const memoryPort =
     options.memoryPort ||
     new SegmentedMemoryPort({
+      queryIndexCacheMode:
+        options.memoryQueryIndexCacheMode ||
+        (options.env || process.env).CC_CONTEXT_MEMORY_QUERY_CACHE ||
+        "validate-disk",
       readOnly: !decision.canonical,
       ...(options.memoryFilePath ? { filePath: options.memoryFilePath } : {}),
     });

package/src/lib/context-memory-kernel/segmented-memory-port.js

@@ -170,6 +170,7 @@ export class SegmentedMemoryPort extends DurableJsonMemoryPort {
     maxTotalBytes = DEFAULT_MAX_TOTAL_BYTES,
     maxEvents = DEFAULT_SEGMENTED_MAX_EVENTS,
     readOnly = false,
+    queryIndexCacheMode = "validate-disk",
     ...options
   } = {}) {
     super({ ...options, maxEvents });
@@ -177,6 +178,9 @@ export class SegmentedMemoryPort extends DurableJsonMemoryPort {
       throw new TypeError("maxTotalBytes must be a positive safe integer");
     this.maxTotalBytes = maxTotalBytes;
     this.readOnly = Boolean(readOnly);
+    if (!["validate-disk", "verified-memory"].includes(queryIndexCacheMode))
+      throw new TypeError("Unknown query index cache mode");
+    this.queryIndexCacheMode = queryIndexCacheMode;
     this.filePath = resolve(this.filePath);
     this.shardDirectory = `${this.filePath}.shards`;
     this._queryIndexes = new Map();
@@ -656,6 +660,27 @@ export class SegmentedMemoryPort extends DurableJsonMemoryPort {
 
   _readQueryIndex(manifest, bucket) {
     const descriptor = manifest.shards[bucket];
+    const binding = JSON.stringify([
+      manifest.digest,
+      manifest.storeRevision,
+      descriptor.digest,
+      descriptor.queryDigest,
+      descriptor.queryBytes,
+      descriptor.recordCount,
+    ]);
+    const cached = this._queryIndexes.get(bucket);
+    // This is an already verified, host-owned decoded snapshot, never a trust
+    // decision based on filesystem timestamps. Re-read and verify the current
+    // manifest on every operation; any generation/authority change invalidates
+    // this binding. Selected authority shards are still read and verified.
+    // Disk repair remains eager in validate-disk mode; verified-memory repairs
+    // a derived index on the next cache miss, rather than every warm query.
+    if (
+      this.queryIndexCacheMode === "verified-memory" &&
+      descriptor.queryDigest &&
+      cached?.binding === binding
+    )
+      return cached.index;
     let bytes;
     if (descriptor.queryDigest) {
       const file = this._queryIndexPath(bucket, descriptor);
@@ -705,8 +730,8 @@ export class SegmentedMemoryPort extends DurableJsonMemoryPort {
       bytes = encodeQueryIndex(this._readShard(manifest, bucket));
     }
     const digest = descriptor.queryDigest || queryDigest(bytes);
-    const cached = this._queryIndexes.get(bucket);
-    if (cached?.digest === digest) return cached.index;
+    if (cached?.digest === digest && cached.binding === binding)
+      return cached.index;
     let index;
     try {
       index = compileQueryIndex(bytes, descriptor);
@@ -717,7 +742,7 @@ export class SegmentedMemoryPort extends DurableJsonMemoryPort {
         cause,
       );
     }
-    this._queryIndexes.set(bucket, { digest, index });
+    this._queryIndexes.set(bucket, { digest, binding, index });
     return index;
   }
 

package/src/lib/context-source-ledger.js

@@ -40,7 +40,28 @@ class ContextSourceLedger {
    * @returns {string} entryId
    */
   record(entry) {
+    if (
+      entry.tokenCount != null &&
+      (!Number.isSafeInteger(entry.tokenCount) || entry.tokenCount < 0)
+    ) {
+      throw new TypeError(
+        "Context tokenCount must be a non-negative safe integer",
+      );
+    }
     const entryId = entry.entryId || crypto.randomUUID();
+    const previous = this._entries.get(entryId);
+    if (previous) {
+      for (const [index, key] of [
+        [this._byTurn, previous.turnId],
+        [this._bySession, previous.sessionId],
+      ]) {
+        const remaining = (index.get(key) || []).filter(
+          (item) => item.entryId !== entryId,
+        );
+        if (remaining.length) index.set(key, remaining);
+        else index.delete(key);
+      }
+    }
     const full = {
       entryId,
       traceId: entry.traceId || null,
@@ -53,6 +74,7 @@ class ContextSourceLedger {
       summary: entry.summary,
       metadata: entry.metadata,
       tokenCount: entry.tokenCount || 0,
+      tokenBasis: entry.tokenBasis === "observed" ? "observed" : "estimated",
       insertedAt: new Date(),
       tags: entry.tags || [],
     };
@@ -64,7 +86,8 @@ class ContextSourceLedger {
     this._byTurn.get(full.turnId).push(full);
 
     // Index by session
-    if (!this._bySession.has(full.sessionId)) this._bySession.set(full.sessionId, []);
+    if (!this._bySession.has(full.sessionId))
+      this._bySession.set(full.sessionId, []);
     this._bySession.get(full.sessionId).push(full);
 
     return entryId;
@@ -82,6 +105,7 @@ class ContextSourceLedger {
       summary: entry.summary || entry.content,
       metadata: entry.metadata,
       tokenCount: entry.tokenCount ?? entry.tokens ?? 0,
+      tokenBasis: entry.tokenBasis,
       traceId: entry.traceId,
     });
   }
@@ -95,14 +119,31 @@ class ContextSourceLedger {
   }
 
   /** Aggregate token usage by source type. */
-  getTokenBreakdown() {
-    const bySource = {};
+  getTokenBreakdown(options = {}) {
+    const sources = new Map();
     let total = 0;
-    for (const entry of this._entries.values()) {
+    for (const entry of this.getProvenance(options)) {
       total += entry.tokenCount;
-      bySource[entry.sourceType] = (bySource[entry.sourceType] || 0) + entry.tokenCount;
+      sources.set(
+        entry.sourceType,
+        (sources.get(entry.sourceType) || 0) + entry.tokenCount,
+      );
     }
-    return { total, bySource };
+    return { total, bySource: Object.fromEntries(sources) };
+  }
+
+  /** Source attribution is separate from provider request usage and billing. */
+  getTokenReport(options = {}) {
+    const entries = this.getProvenance(options);
+    const byBasis = { estimated: 0, observed: 0 };
+    for (const entry of entries) byBasis[entry.tokenBasis] += entry.tokenCount;
+    return {
+      ...this.getTokenBreakdown(options),
+      byBasis,
+      entries: entries.length,
+      currentRequestVerified: false,
+      billingVerified: false,
+    };
   }
 
   /** Clear the in-memory ledger (test/runtime lifecycle boundary). */
@@ -146,7 +187,8 @@ class ContextSourceLedger {
 
     for (const e of entries) {
       byType[e.sourceType] = (byType[e.sourceType] || 0) + 1;
-      byPermission[e.permissionMode] = (byPermission[e.permissionMode] || 0) + 1;
+      byPermission[e.permissionMode] =
+        (byPermission[e.permissionMode] || 0) + 1;
       bySource[e.sourceId] = (bySource[e.sourceId] || 0) + 1;
       totalTokens += e.tokenCount;
       avgConfidence += e.confidence;
@@ -162,7 +204,7 @@ class ContextSourceLedger {
       byType,
       byPermission,
       bySource,
-      entries: entries.map(e => ({
+      entries: entries.map((e) => ({
         sourceType: e.sourceType,
         sourceId: e.sourceId,
         permissionMode: e.permissionMode,
@@ -184,8 +226,9 @@ class ContextSourceLedger {
       this._entries.delete(e.entryId);
       const turnEntries = this._byTurn.get(e.turnId);
       if (turnEntries) {
-        const idx = turnEntries.findIndex(x => x.entryId === e.entryId);
+        const idx = turnEntries.findIndex((x) => x.entryId === e.entryId);
         if (idx >= 0) turnEntries.splice(idx, 1);
+        if (!turnEntries.length) this._byTurn.delete(e.turnId);
       }
     }
     this._bySession.delete(sessionId);

package/src/lib/cowork-adapter.js

@@ -7,6 +7,7 @@
  *  - Module initialization helper
  */
 
+import { providerFetch } from "./formal-budget-provider-scope.js";
 import { LLMProviderRegistry, BUILT_IN_PROVIDERS } from "./llm-providers.js";
 import { loadConfig } from "./config-manager.js";
 import { applyConfigLlmDefaults } from "./llm-config-defaults.js";
@@ -174,7 +175,7 @@ export function createChatFn(options = {}) {
         currentModel,
         async ({ signal = opts.signal || resolved.signal } = {}) => {
           const modelMessages = await prepareMessages();
-          const res = await fetch(`${baseUrl}/api/chat`, {
+          const res = await providerFetch(`${baseUrl}/api/chat`, {
             method: "POST",
             signal: requestSignal(signal),
             headers: { "Content-Type": "application/json" },
@@ -214,7 +215,7 @@ export function createChatFn(options = {}) {
               ? { system: systemMsgs.map((m) => m.content).join("\n") }
               : {}),
           };
-          const res = await fetch(`${baseUrl}/messages`, {
+          const res = await providerFetch(`${baseUrl}/messages`, {
             method: "POST",
             signal: requestSignal(signal),
             headers: {
@@ -245,7 +246,7 @@ export function createChatFn(options = {}) {
       currentModel,
       async ({ signal = opts.signal || resolved.signal } = {}) => {
         const modelMessages = await prepareMessages();
-        const res = await fetch(`${baseUrl}/chat/completions`, {
+        const res = await providerFetch(`${baseUrl}/chat/completions`, {
           method: "POST",
           signal: requestSignal(signal),
           headers: {

package/src/lib/decision-layer/providers.js

@@ -1,4 +1,5 @@
 import { openDecisionProviderAuthority } from "./provider-authority.js";
+import { providerFetch } from "../formal-budget-provider-scope.js";
 
 const PROVIDERS = Object.freeze({
   typesafe: {
@@ -195,18 +196,22 @@ export function createDecisionProvider({
       if (Buffer.byteLength(body, "utf8") > MAX_DECISION_REQUEST_BYTES) {
         throw bodyTooLarge("request", MAX_DECISION_REQUEST_BYTES);
       }
-      const response = await fetchImpl(endpoint, {
-        method: "POST",
-        headers: {
-          ...(secret === undefined
-            ? {}
-            : { authorization: `Bearer ${secret}` }),
-          "content-type": "application/json",
+      const response = await providerFetch(
+        endpoint,
+        {
+          method: "POST",
+          headers: {
+            ...(secret === undefined
+              ? {}
+              : { authorization: `Bearer ${secret}` }),
+            "content-type": "application/json",
+          },
+          body,
+          signal,
+          redirect: "error",
         },
-        body,
-        signal,
-        redirect: "error",
-      });
+        fetchImpl,
+      );
       if (!response?.ok) {
         throw providerError(response?.status ?? 0, options.provider);
       }

package/src/lib/evolution/governed-hub-llm.js

@@ -1,6 +1,10 @@
 import { createRequire } from "node:module";
 import { types } from "node:util";
 import { prepareGovernedModelTurn } from "./governed-model-turn.js";
+import {
+  providerFetch,
+  requireUnscopedModelTransport,
+} from "../formal-budget-provider-scope.js";
 
 const { createAuthenticatedEvolutionModelClient } = createRequire(
   import.meta.url,
@@ -97,21 +101,25 @@ function captureHubTransport(llm, sdk) {
           const signal = options.signal
             ? AbortSignal.any([controller.signal, options.signal])
             : controller.signal;
-          const response = await fetchImpl(`${baseUrl}/api/chat`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            redirect: "error",
-            signal,
-            body: JSON.stringify({
-              model,
-              messages,
-              stream: false,
-              options: {
-                temperature: options.temperature ?? 0.2,
-                ...(options.numCtx ? { num_ctx: options.numCtx } : {}),
-              },
-            }),
-          });
+          const response = await providerFetch(
+            `${baseUrl}/api/chat`,
+            {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              redirect: "error",
+              signal,
+              body: JSON.stringify({
+                model,
+                messages,
+                stream: false,
+                options: {
+                  temperature: options.temperature ?? 0.2,
+                  ...(options.numCtx ? { num_ctx: options.numCtx } : {}),
+                },
+              }),
+            },
+            fetchImpl,
+          );
           if (!response.ok)
             throw new Error(
               `Hub Ollama request failed: HTTP ${response.status}`,
@@ -202,6 +210,7 @@ function captureHubTransport(llm, sdk) {
           );
       },
       async chat(messages, options) {
+        requireUnscopedModelTransport();
         const result = await chat(messages, options);
         const text =
           result?.content ??
@@ -233,7 +242,13 @@ function captureHubTransport(llm, sdk) {
       },
     };
   }
-  return { assertIdentity() {}, chat: llm.chat.bind(llm) };
+  return {
+    assertIdentity() {},
+    chat(messages, options) {
+      requireUnscopedModelTransport();
+      return llm.chat(messages, options);
+    },
+  };
 }
 
 // A scoped wrapper preserves the Hub's independent local/cloud consent check.

package/src/lib/evolution/governed-hub-resolver.js

@@ -1,4 +1,5 @@
 import { prepareGovernedModelTurn } from "./governed-model-turn.js";
+import { requireUnscopedModelTransport } from "../formal-budget-provider-scope.js";
 import {
   captureGovernedHubSdkPorts,
   createGovernedHubLlm,
@@ -48,6 +49,9 @@ function captureEmbeddingTransport(stage, sdk) {
         );
     },
     async embed(profile) {
+      // Neither arbitrary embedding callbacks nor the native embeddings
+      // protocol have a verified Chat billing contract in this scope.
+      requireUnscopedModelTransport();
       if (!defaultOllama) return await embed.call(stage, profile);
       // The raw SDK ollamaEmbed remains closed. This private transport is only
       // invoked below, after the scoped Run projected the profile.