chainlesschain 0.166.101 → 0.166.103

package/src/lib/usage-pricing-context.js

@@ -4,6 +4,38 @@ import {
   GPT6_PRICING_TERMS,
 } from "./model-context-catalog.js";
 
+const KNOWN_SERVICE_TIERS = new Set([
+  ...Object.keys(GPT6_PRICING_TERMS.serviceMultipliers),
+  ...Object.values(DOCUMENTED_OPENAI_MODELS).flatMap((model) =>
+    Object.keys(model.serviceMultipliers || {}),
+  ),
+]);
+
+/** Preserve response-envelope pricing labels, rejecting conflicting evidence. */
+export function projectEnvelopePricingContext(usage = {}, envelope = {}) {
+  const input = { ...usage };
+  for (const key of ["service_tier", "regional_processing", "inference_geo"]) {
+    if (!Object.hasOwn(envelope, key)) continue;
+    if (Object.hasOwn(input, key) && input[key] !== envelope[key])
+      input.pricingContextInvalid = true;
+    input[key] = envelope[key];
+  }
+  return projectUsagePricingContext(input);
+}
+
+/** Requested paid tiers require actual response evidence for settlement. */
+export function preserveRequestedServiceTierEvidence(usage, requested) {
+  if (
+    usage &&
+    requested != null &&
+    requested !== "standard" &&
+    (!usage.service_tier || usage.service_tier === "auto")
+  ) {
+    return { ...usage, pricingContextInvalid: true };
+  }
+  return usage;
+}
+
 /** Keep TTL evidence distinct from the aggregate cache-write count. */
 export function projectCacheCreationUsage(usage = {}) {
   if (usage.cacheCreationInvalid === true)
@@ -62,8 +94,7 @@ export function projectUsagePricingContext(usage = {}) {
     const value = Object.hasOwn(usage, key) ? usage[key] : usage[alias];
     if (key === "service_tier") {
       projected[key] =
-        typeof value === "string" &&
-        Object.hasOwn(GPT6_PRICING_TERMS.serviceMultipliers, value)
+        typeof value === "string" && KNOWN_SERVICE_TIERS.has(value)
           ? value
           : "unknown";
     } else {

package/src/lib/web-fetch.js

@@ -12,6 +12,7 @@ import { URL } from "node:url";
 import { createHash } from "node:crypto";
 import { StringDecoder } from "node:string_decoder";
 import { webFetchSnapshots } from "./web-fetch-snapshots.js";
+import { requireUnscopedExternalToolAccess } from "./formal-budget-provider-scope.js";
 
 const DEFAULT_MAX_BYTES = 10_000_000;
 const DEFAULT_MAX_CHARS = 20_000;
@@ -343,6 +344,7 @@ async function _doRequest(
 }
 
 export async function webFetch(url, options = {}) {
+  requireUnscopedExternalToolAccess();
   const {
     format = "markdown",
     maxBytes = DEFAULT_MAX_BYTES,

package/src/lib/web-search.js

@@ -14,6 +14,7 @@
 import http from "http";
 import https from "https";
 import { URL } from "url";
+import { requireUnscopedPaidService } from "./formal-budget-provider-scope.js";
 
 const DEFAULT_MAX_BYTES = 10_000_000;
 const DEFAULT_TIMEOUT_MS = 15_000;
@@ -510,6 +511,10 @@ export async function webSearch(query, options = {}) {
   const q = String(query || "").trim();
   if (!q) return { error: "web_search: empty query" };
 
+  // A model-token reservation does not price API search or configured proxy
+  // services. Reject before resolving keys or opening an HTTP request.
+  requireUnscopedPaidService();
+
   const config = options.config || {};
   const provider = resolveProvider(options, config);
   let maxResults = normalizeMaxResults(options.maxResults ?? config.maxResults);