co-maintainer 0.5.0 → 0.5.1-beta.2

package/dist/src/store/repos.d.ts

@@ -2,10 +2,10 @@ import type { RepoRow } from "./rows.ts";
 export declare function activateRepo(fullName: string, installationId: number | undefined): void;
 export declare function deactivateRepo(fullName: string): void;
 export declare function deactivateReposForInstallation(installationId: number): void;
-export declare function updateRepoSettings(fullName: string, patch: Partial<Pick<RepoRow, "auto_review" | "review_scope" | "skip_drafts" | "skip_bots" | "use_codegraph">>): void;
+export declare function updateRepoSettings(fullName: string, patch: Partial<Pick<RepoRow, "auto_review" | "review_scope" | "skip_drafts" | "skip_bots" | "use_codegraph" | "review_policy_json">>): void;
 export declare function markKnowledgeBuilt(fullName: string, baseSha: string): void;
 export declare function setInstallationId(fullName: string, installationId: number): void;
 export declare function getRepo(fullName: string): RepoRow | undefined;
-/** Case-insensitive match on `repos.full_name` (plan §14.4). */
+/** Case-insensitive match on `repos.full_name`. */
 export declare function findRepoByFullName(fullName: string): RepoRow | undefined;
 export declare function listActiveRepos(): RepoRow[];

package/dist/src/store/repos.js

@@ -46,7 +46,7 @@ export function getRepo(fullName) {
         .prepare(`SELECT * FROM repos WHERE full_name = ?`)
         .get(fullName);
 }
-/** Case-insensitive match on `repos.full_name` (plan §14.4). */
+/** Case-insensitive match on `repos.full_name`. */
 export function findRepoByFullName(fullName) {
     return getAppDb()
         .prepare(`SELECT * FROM repos WHERE lower(full_name) = lower(?)`)

package/dist/src/store/reviews.d.ts

@@ -26,18 +26,29 @@ export declare function insertReview(row: {
 }): void;
 /** Written immediately before and after the `POST .../reviews` call, with
  * nothing else run between either write and the call. */
-export declare function setReviewStatus(id: string, status: ReviewRow["status"], patch?: Partial<Pick<ReviewRow, "posted_review_id" | "findings_count" | "tokens_in" | "tokens_out" | "cost" | "duration_ms" | "check_run_id" | "posted_fallback" | "open_count" | "closed_count" | "subject_id" | "guide_built_at">>): void;
+export declare function setReviewStatus(id: string, status: ReviewRow["status"], patch?: Partial<Pick<ReviewRow, "posted_review_id" | "findings_count" | "tokens_in" | "tokens_out" | "cost" | "cost_status" | "cost_note" | "billed_to" | "duration_ms" | "check_run_id" | "posted_fallback" | "open_count" | "closed_count" | "subject_id" | "guide_built_at">>): void;
 export declare function setReviewScope(id: string, scope: string, baseSha: string): void;
 export declare function getReview(id: string): ReviewRow | undefined;
 export declare function getReviewByJobId(jobId: string): ReviewRow | undefined;
 /** Newest round first. The PR detail page reads this directly. */
 export declare function listReviewsForPr(repo: string, prNumber: number): ReviewRow[];
 export declare function latestPostedReview(repo: string, prNumber: number): ReviewRow | undefined;
-export type ReviewStats = {
+/** `cost` adds up only the costs that are known and billed to the server.
+ * A review with an unknown cost is counted in `unknownCount` instead of
+ * being added as zero. `knownCount` tells "no cost yet" apart from "every
+ * review cost exactly $0". BYOK is kept apart, never inside `cost`. */
+export type CostTotals = {
+    cost: number;
+    knownCount: number;
+    unknownCount: number;
+    byokUsd: number;
+    byokKnownCount: number;
+    byokUnknownCount: number;
+};
+export type ReviewStats = CostTotals & {
     reviews: number;
     pullRequests: number;
     findings: number;
-    cost: number;
     tokensIn: number;
     tokensOut: number;
     failed: number;
@@ -49,22 +60,21 @@ export declare function reviewStats(sinceIso: string, repo?: string, untilIso?:
 export declare function reviewStatsByRepo(sinceIso: string): (ReviewStats & {
     repo: string;
 })[];
-export declare function reviewStatsByDay(sinceIso: string): {
+export type DayStats = CostTotals & {
     day: string;
     reviews: number;
     findings: number;
-    cost: number;
-}[];
+};
+export declare function reviewStatsByDay(sinceIso: string): DayStats[];
 export declare function reviewStatsByModel(sinceIso: string): (ReviewStats & {
     model: string;
 })[];
 export declare function listRecentReviews(limit: number, offset?: number): ReviewRow[];
 export declare function countReviews(): number;
-export type PullSummary = {
+export type PullSummary = CostTotals & {
     pr_number: number;
     last_reviewed: string;
     findings: number;
-    cost: number;
     review_count: number;
 };
 export declare function listPullSummaries(repo: string, limit: number, offset: number): {
@@ -72,15 +82,13 @@ export declare function listPullSummaries(repo: string, limit: number, offset: n
     total: number;
 };
 export declare function listRemoteReviewsForRepo(repo: string, limit: number, offset?: number, sinceIso?: string): ReviewRow[];
-export declare function remoteTokenUsageSince(tokenId: string, sinceIso: string): {
+export declare function remoteTokenUsageSince(tokenId: string, sinceIso: string): CostTotals & {
     reviews: number;
-    cost: number;
 };
-export declare function reviewStatsByRemoteToken(sinceIso: string): {
+export declare function reviewStatsByRemoteToken(sinceIso: string): (CostTotals & {
     tokenId: string;
     tokenName: string;
     reviews: number;
-    cost: number;
     findings: number;
-}[];
+})[];
 export declare function listLatestReviewsForRepo(repo: string, limit: number): ReviewRow[];

package/dist/src/store/reviews.js

@@ -4,16 +4,20 @@ export function insertRemoteReview(row) {
     getAppDb()
         .prepare(`INSERT INTO reviews
        (id, kind, subject_id, repo, pr_number, branch, token_id, token_name,
-        job_id, head_sha, base_sha, scope, model, status, created_at, round)
-     VALUES (?, 'remote', ?, ?, NULL, ?, ?, ?, ?, NULL, NULL, ?, ?, 'queued', ?, 1)`)
+        job_id, head_sha, base_sha, scope, model, status, created_at, round,
+        cost_status, cost_note, billed_to)
+     VALUES (?, 'remote', ?, ?, NULL, ?, ?, ?, ?, NULL, NULL, ?, ?, 'queued', ?, 1,
+        'unknown', 'not_recorded', 'server')`)
         .run(row.id, row.subjectId, row.repo, row.branch, row.tokenId, row.tokenName, row.jobId, row.scope, row.model, nowIso());
 }
 export function insertReview(row) {
     getAppDb()
         .prepare(`INSERT INTO reviews
        (id, kind, subject_id, repo, pr_number, job_id, head_sha, base_sha, scope, model,
-        status, created_at, round, "trigger", guide_built_at)
-     VALUES (?, 'pr', ?, ?, ?, ?, ?, ?, ?, ?, 'drafting', ?, ?, ?, ?)`)
+        status, created_at, round, "trigger", guide_built_at,
+        cost_status, cost_note, billed_to)
+     VALUES (?, 'pr', ?, ?, ?, ?, ?, ?, ?, ?, 'drafting', ?, ?, ?, ?,
+        'unknown', 'not_recorded', 'server')`)
         .run(row.id, row.subjectId ?? null, row.repo, row.prNumber, row.jobId, row.headSha, row.baseSha, row.scope, row.model, nowIso(), row.round ?? 1, row.trigger ?? null, row.guideBuiltAt ?? null);
 }
 /** Written immediately before and after the `POST .../reviews` call, with
@@ -28,13 +32,22 @@ export function setReviewStatus(id, status, patch = {}) {
        tokens_in = COALESCE(?, tokens_in),
        tokens_out = COALESCE(?, tokens_out),
        cost = COALESCE(?, cost),
+       cost_status = COALESCE(?, cost_status),
+       cost_note = CASE WHEN ? THEN ? ELSE cost_note END,
+       billed_to = COALESCE(?, billed_to),
        duration_ms = COALESCE(?, duration_ms),
        check_run_id = COALESCE(?, check_run_id),
        posted_fallback = COALESCE(?, posted_fallback),
        subject_id = COALESCE(?, subject_id),
        guide_built_at = COALESCE(?, guide_built_at)
      WHERE id = ?`)
-        .run(status, patch.posted_review_id ?? null, patch.findings_count ?? null, patch.open_count ?? null, patch.closed_count ?? null, patch.tokens_in ?? null, patch.tokens_out ?? null, patch.cost ?? null, patch.duration_ms ?? null, patch.check_run_id ?? null, patch.posted_fallback ?? null, patch.subject_id ?? null, patch.guide_built_at ?? null, id);
+        .run(status, patch.posted_review_id ?? null, patch.findings_count ?? null, patch.open_count ?? null, patch.closed_count ?? null, patch.tokens_in ?? null, patch.tokens_out ?? null, patch.cost ?? null, patch.cost_status ?? null, 
+    // `cost_note` travels with `cost_status`: when the status changes to
+    // known, the note (e.g. a stale "not recorded yet") must clear to
+    // null, which `COALESCE(?, cost_note)` cannot do since a provided
+    // `null` and an omitted field bind the same way. The flag makes the
+    // two cases distinguishable.
+    patch.cost_status !== undefined, patch.cost_note ?? null, patch.billed_to ?? null, patch.duration_ms ?? null, patch.check_run_id ?? null, patch.posted_fallback ?? null, patch.subject_id ?? null, patch.guide_built_at ?? null, id);
 }
 export function setReviewScope(id, scope, baseSha) {
     getAppDb()
@@ -64,13 +77,33 @@ export function latestPostedReview(repo, prNumber) {
      ORDER BY round DESC, created_at DESC LIMIT 1`)
         .get(repo, prNumber);
 }
+const COST_STATUS = `COALESCE(cost_status, CASE WHEN cost IS NULL THEN 'unknown' ELSE 'known' END)`;
+const BILLED = `COALESCE(billed_to, 'server')`;
+const bucket = (status, billed, value) => `COALESCE(SUM(CASE WHEN ${COST_STATUS} = '${status}' AND ${BILLED} = '${billed}' THEN ${value} END), 0)`;
+/** The six figures of `CostTotals`, ready to sit in any SELECT list. */
+const COST_COLUMNS = `${bucket("known", "server", "cost")} AS cost,
+      ${bucket("known", "server", "1")} AS knownCount,
+      ${bucket("unknown", "server", "1")} AS unknownCount,
+      ${bucket("known", "byok", "cost")} AS byokUsd,
+      ${bucket("known", "byok", "1")} AS byokKnownCount,
+      ${bucket("unknown", "byok", "1")} AS byokUnknownCount`;
+function asCostTotals(row) {
+    return {
+        cost: Number(row?.cost ?? 0),
+        knownCount: Number(row?.knownCount ?? 0),
+        unknownCount: Number(row?.unknownCount ?? 0),
+        byokUsd: Number(row?.byokUsd ?? 0),
+        byokKnownCount: Number(row?.byokKnownCount ?? 0),
+        byokUnknownCount: Number(row?.byokUnknownCount ?? 0),
+    };
+}
 /** Every aggregate the dashboard reads comes from this one column list, so a
  * new figure lands on the totals, the per repo table and the trend window at
  * the same time. */
 const STATS_COLUMNS = `COUNT(*) AS reviews,
       COUNT(DISTINCT pr_number) AS pullRequests,
       COALESCE(SUM(findings_count), 0) AS findings,
-      COALESCE(SUM(cost), 0) AS cost,
+      ${COST_COLUMNS},
       COALESCE(SUM(tokens_in), 0) AS tokensIn,
       COALESCE(SUM(tokens_out), 0) AS tokensOut,
       COALESCE(SUM(status = 'failed'), 0) AS failed,
@@ -80,7 +113,7 @@ function asStats(row) {
         reviews: Number(row?.reviews ?? 0),
         pullRequests: Number(row?.pullRequests ?? 0),
         findings: Number(row?.findings ?? 0),
-        cost: Number(row?.cost ?? 0),
+        ...asCostTotals(row),
         tokensIn: Number(row?.tokensIn ?? 0),
         tokensOut: Number(row?.tokensOut ?? 0),
         failed: Number(row?.failed ?? 0),
@@ -118,11 +151,20 @@ export function reviewStatsByDay(sinceIso) {
         .prepare(`SELECT substr(created_at, 1, 10) AS day,
         COUNT(*) AS reviews,
         COALESCE(SUM(findings_count), 0) AS findings,
-        COALESCE(SUM(cost), 0) AS cost
+        ${COST_COLUMNS}
      FROM reviews WHERE created_at >= ?
      GROUP BY day
      ORDER BY day`)
-        .all(sinceIso);
+        .all(sinceIso)
+        .map((row) => {
+        const value = row;
+        return {
+            day: value.day,
+            reviews: Number(value.reviews),
+            findings: Number(value.findings),
+            ...asCostTotals(value),
+        };
+    });
 }
 export function reviewStatsByModel(sinceIso) {
     return getAppDb()
@@ -150,14 +192,17 @@ export function listPullSummaries(repo, limit, offset) {
         .prepare(`SELECT pr_number,
         MAX(created_at) AS last_reviewed,
         COALESCE(SUM(findings_count), 0) AS findings,
-        COALESCE(SUM(cost), 0) AS cost,
+        ${COST_COLUMNS},
         COUNT(*) AS review_count
      FROM reviews WHERE repo = ?
      GROUP BY pr_number
      ORDER BY last_reviewed DESC
      LIMIT ? OFFSET ?`)
         .all(repo, limit, offset);
-    return { items, total };
+    return {
+        items: items.map((item) => ({ ...item, ...asCostTotals(item) })),
+        total,
+    };
 }
 export function listRemoteReviewsForRepo(repo, limit, offset = 0, sinceIso) {
     if (sinceIso) {
@@ -177,20 +222,20 @@ export function listRemoteReviewsForRepo(repo, limit, offset = 0, sinceIso) {
 }
 export function remoteTokenUsageSince(tokenId, sinceIso) {
     const row = getAppDb()
-        .prepare(`SELECT COUNT(*) AS reviews, COALESCE(SUM(cost), 0) AS cost
+        .prepare(`SELECT COUNT(*) AS reviews, ${COST_COLUMNS}
      FROM reviews
      WHERE token_id = ? AND kind = 'remote' AND created_at >= ?`)
         .get(tokenId, sinceIso);
     return {
         reviews: Number(row?.reviews ?? 0),
-        cost: Number(row?.cost ?? 0),
+        ...asCostTotals(row),
     };
 }
 export function reviewStatsByRemoteToken(sinceIso) {
     return getAppDb()
         .prepare(`SELECT token_id, token_name,
             COUNT(*) AS reviews,
-            COALESCE(SUM(cost), 0) AS cost,
+            ${COST_COLUMNS},
             COALESCE(SUM(findings_count), 0) AS findings
      FROM reviews
      WHERE kind = 'remote' AND created_at >= ? AND token_id IS NOT NULL
@@ -201,7 +246,7 @@ export function reviewStatsByRemoteToken(sinceIso) {
         tokenId: row.token_id,
         tokenName: row.token_name,
         reviews: Number(row.reviews),
-        cost: Number(row.cost),
+        ...asCostTotals(row),
         findings: Number(row.findings),
     }));
 }

package/dist/src/store/rows.d.ts

@@ -24,6 +24,9 @@ export type RepoRow = {
     settings: string;
     created_at: string;
     use_codegraph: number;
+    /** JSON: `"legacy"`, a template name, or a policy object. `null` takes the
+     * server default. */
+    review_policy_json: string | null;
 };
 export type JobRow = {
     id: string;
@@ -69,6 +72,10 @@ export type ReviewRow = {
     tokens_in: number;
     tokens_out: number;
     cost: number | null;
+    /** `null` on a row written by 0.5.0 after this column was added. */
+    cost_status: "known" | "unknown" | null;
+    cost_note: string | null;
+    billed_to: "server" | "byok" | null;
     duration_ms: number | null;
     posted_review_id: string | null;
     status: string;
@@ -176,4 +183,7 @@ export type RemoteReviewInputRow = {
     request_id: string;
     token_id: string;
     created_at: string;
+    /** `'byok'` when the client's own key paid for the review, `'server'`
+     * otherwise. A null (pre-0.5.1 row) is treated as `'server'`. */
+    billed_to?: string | null;
 };

package/dist/src/tools/codegraph.d.ts

@@ -33,7 +33,7 @@ export declare const CODEGRAPH_APPROX_SIZE = "~250 MB";
 /** A prompt may only be shown when there is a human on the other end of stdin
  * *and* stdout, and no CI marker. A closed stdin (`</dev/null`), a piped
  * output, or `CI=1` must all take the non-interactive path: asking then would
- * hang on a question nobody can answer (F01). `stdout` is checked because a
+ * hang on a question nobody can answer. `stdout` is checked because a
  * prompt printed into a pipe is invisible.
  *
  * `streams` is injectable so the tests can stand in for a TTY without a real
@@ -46,12 +46,12 @@ export declare function canPrompt(streams?: {
         isTTY?: boolean;
     };
 }, env?: Record<string, string | undefined>): boolean;
-/** The one line a non-interactive run prints instead of asking (F01). It names
+/** The one line a non-interactive run prints instead of asking. It names
  * the reason and both ways forward, so a CI log explains itself. */
 export declare function skippedNotice(version?: string): string;
 /** What the install prompt says: the package and version, where it comes from,
  * what it is for, the approximate size, and the exact directory. A bare
- * "Install ...? [y/N]" left the user guessing (F01). */
+ * "Install ...? [y/N]" left the user guessing. */
 export declare function installPrompt(version: string, root: string): string;
 export declare function runCommand(command: string, args: string[]): Promise<CommandResult>;
 /** One version per directory, so several can sit side by side and an upgrade
@@ -83,7 +83,7 @@ export declare function installHint(version?: string, root?: string): string;
  * to the binary, or exits: co-maintainer indexes the repository with it, so
  * declining is a decision not to run this command, not a degraded mode. */
 export declare function ensureCodegraph(options?: EnsureOptions): Promise<string>;
-/** Review paths must not call `Deno.exit` (plan §8.7, S13). */
+/** Review paths must not call `Deno.exit`. */
 export declare function ensureCodegraphForReview(options?: EnsureOptions): Promise<{
     path: string;
 } | {

package/dist/src/tools/codegraph.js

@@ -17,7 +17,7 @@ export const CODEGRAPH_APPROX_SIZE = "~250 MB";
 /** A prompt may only be shown when there is a human on the other end of stdin
  * *and* stdout, and no CI marker. A closed stdin (`</dev/null`), a piped
  * output, or `CI=1` must all take the non-interactive path: asking then would
- * hang on a question nobody can answer (F01). `stdout` is checked because a
+ * hang on a question nobody can answer. `stdout` is checked because a
  * prompt printed into a pipe is invisible.
  *
  * `streams` is injectable so the tests can stand in for a TTY without a real
@@ -28,7 +28,7 @@ export function canPrompt(streams = {
 }, env = process.env) {
     return (streams.stdin?.isTTY === true && streams.stdout?.isTTY === true && !env.CI);
 }
-/** The one line a non-interactive run prints instead of asking (F01). It names
+/** The one line a non-interactive run prints instead of asking. It names
  * the reason and both ways forward, so a CI log explains itself. */
 export function skippedNotice(version = CODEGRAPH_VERSION) {
     return (`codegraph ${version} is not installed, reviewing without it. ` +
@@ -36,7 +36,7 @@ export function skippedNotice(version = CODEGRAPH_VERSION) {
 }
 /** What the install prompt says: the package and version, where it comes from,
  * what it is for, the approximate size, and the exact directory. A bare
- * "Install ...? [y/N]" left the user guessing (F01). */
+ * "Install ...? [y/N]" left the user guessing. */
 export function installPrompt(version, root) {
     return (`co-maintainer uses codegraph ${version} (${CODEGRAPH_PACKAGE} from npm, ${CODEGRAPH_APPROX_SIZE}) ` +
         "to follow calls between files while reviewing.\n" +
@@ -165,7 +165,7 @@ export async function ensureCodegraph(options = {}) {
     log(`[codegraph] ready at ${after.path}`);
     return after.path;
 }
-/** Review paths must not call `Deno.exit` (plan §8.7, S13). */
+/** Review paths must not call `Deno.exit`. */
 export async function ensureCodegraphForReview(options = {}) {
     const root = options.root ?? toolsDir();
     const run = options.run ?? runCommand;
@@ -179,7 +179,7 @@ export async function ensureCodegraphForReview(options = {}) {
     }
     if (!options.allowInstall) {
         // Non-interactive: do not ask, review without it. The caller logs the
-        // reason, so the run continues instead of hanging or exiting (F01).
+        // reason, so the run continues instead of hanging or exiting.
         if (!interactive) {
             return { reason: skippedNotice() };
         }

package/dist/src/tools/codegraph_exec.d.ts

@@ -7,7 +7,7 @@ export type ExecOptions = {
     env?: Record<string, string>;
 };
 export type CodegraphRunner = (binary: string, args: string[], worktree: string) => Promise<CommandResult>;
-/** Run the codegraph CLI in a repo root (plan §13.4).
+/** Run the codegraph CLI in a repo root.
  *
  * On Windows the CLI is a `.cmd`/`.ps1` shim, and `node:child_process.spawn`
  * cannot execute those without a shell — it fails with `EINVAL`. `Deno.Command`

package/dist/src/tools/codegraph_exec.js

@@ -3,7 +3,7 @@ export const LOCAL_CODEGRAPH_DIR = ".co-maintainer-codegraph";
 export const SERVER_CODEGRAPH_DIR = ".codegraph";
 const TOOL_TIMEOUT_MS = 60_000;
 const INDEX_COMMANDS = new Set(["init", "sync", "index", "unlock"]);
-/** Run the codegraph CLI in a repo root (plan §13.4).
+/** Run the codegraph CLI in a repo root.
  *
  * On Windows the CLI is a `.cmd`/`.ps1` shim, and `node:child_process.spawn`
  * cannot execute those without a shell — it fails with `EINVAL`. `Deno.Command`

package/dist/src/types.d.ts

@@ -1,6 +1,6 @@
 /** Cross-layer contracts only. A type owned by one layer (Fact, Source,
  * PullRequest, State) lives next to the code that owns it instead, in
- * `knowledge/types.ts` — see PLAN.md Section 3. */
+ * `knowledge/types.ts`. */
 export type Json = Record<string, unknown>;
 export type Options = {
     command: "probe" | "init" | "remake" | "review";
@@ -24,7 +24,7 @@ export type Options = {
     envPath?: string;
     auth: "gh" | "pat";
     githubPat?: string;
-    ai: "none" | "openrouter" | "hetzner";
+    ai: "none" | "openrouter" | "openai" | "anthropic" | "opencode-zen" | "opencode-go";
     aiToken?: string;
     lowModel?: string;
     highModel?: string;
@@ -44,9 +44,9 @@ export type Options = {
     maxPullRequestChangeLines?: number;
     maxComments?: number;
     /** `probe --run`: after printing the plan, run the recommended init in the
-     * same process (CORE-24). */
+     * same process. */
     run?: boolean;
-    /** How a review decides a blocking finding (CORE-41). `model` keeps the
+    /** How a review decides a blocking finding. `model` keeps the
      * 0.4.13 behavior, `severity` uses a fixed P0/P1 threshold. */
     reviewBlocking?: "model" | "severity";
 };
@@ -85,7 +85,7 @@ export type AiRequest = {
     job: string;
     /** A JSON schema the response must satisfy, sent as OpenRouter's
      * `response_format`. Providers without structured output ignore it, so the
-     * model is also asked for a fenced JSON block in the prompt (CORE-40). */
+     * model is also asked for a fenced JSON block in the prompt. */
     responseFormat?: Json;
     reasoningEffort?: "max" | "xhigh" | "high" | "medium" | "low" | "none";
 };
@@ -95,8 +95,14 @@ export type AiResponse = {
     tokensIn: number;
     tokensOut: number;
     cost?: number;
+    /** Set on a response merged from several calls, so the caller can tell a
+     * partial cost from a missing one. */
+    costCalls?: {
+        known: number;
+        unknown: number;
+    };
     model: string;
-    provider: "openrouter" | "hetzner";
+    provider: "openrouter" | "openai" | "anthropic" | "opencode-zen" | "opencode-go";
 };
 export type AiProvider = {
     supportsTools?: boolean;

package/dist/src/util/cost.d.ts

@@ -0,0 +1,52 @@
+/** What an AI run cost, and how sure we are. A missing cost is never `$0`:
+ * `known` includes a real zero (a free model), `unknown` carries a reason.
+ * The reason texts live here so the CLI, the JSON and the dashboard say the
+ * same thing. */
+export type CostReason = "provider_did_not_report" | "partial" | "recorded_before_0_5_1" | "not_recorded";
+export type CostStatus = "known" | "unknown";
+export type BilledTo = "server" | "byok";
+export type CostOutcome = {
+    status: "known";
+    usd: number;
+} | {
+    status: "unknown";
+    reason: CostReason;
+};
+/** How many AI calls reported a cost and how many did not. */
+export type CostCalls = {
+    known: number;
+    unknown: number;
+};
+export type CostTally = {
+    cost: number;
+    knownCalls: number;
+    unknownCalls: number;
+};
+export declare function emptyTally(): CostTally;
+/** A response merged from several calls carries its own `costCalls`. A plain
+ * response is one call. */
+export declare function addResponseCost(tally: CostTally, response: {
+    cost?: number;
+    costCalls?: CostCalls;
+}): void;
+/** Every call reported: known. None did: the provider does not report. Some
+ * did: partial, and the known part is dropped so a total never looks
+ * complete. No call at all: the run ended before a cost was recorded. */
+export declare function settle(tally: CostTally): CostOutcome;
+/** `provider` names the service in the first sentence, as in "OpenAI did not
+ * report the cost for this review." */
+export declare function costReasonText(reason: CostReason, provider?: string): string;
+/** The cost part of a review JSON `usage` object. `costUsd` stays `null`
+ * when the cost is unknown, as it always did. */
+export declare function costUsage(tally: CostTally): {
+    costUsd: number | null;
+    costStatus: CostStatus;
+    costNote: CostReason | null;
+    billedTo: BilledTo;
+};
+/** The columns `setReviewStatus` writes for a finished review. */
+export declare function costColumns(outcome: CostOutcome): {
+    cost: number | undefined;
+    cost_status: CostStatus;
+    cost_note: CostReason | null;
+};

package/dist/src/util/cost.js

@@ -0,0 +1,70 @@
+/** What an AI run cost, and how sure we are. A missing cost is never `$0`:
+ * `known` includes a real zero (a free model), `unknown` carries a reason.
+ * The reason texts live here so the CLI, the JSON and the dashboard say the
+ * same thing. */
+export function emptyTally() {
+    return { cost: 0, knownCalls: 0, unknownCalls: 0 };
+}
+/** A response merged from several calls carries its own `costCalls`. A plain
+ * response is one call. */
+export function addResponseCost(tally, response) {
+    const calls = response.costCalls ??
+        (response.cost === undefined
+            ? { known: 0, unknown: 1 }
+            : { known: 1, unknown: 0 });
+    tally.knownCalls += calls.known;
+    tally.unknownCalls += calls.unknown;
+    tally.cost += response.cost ?? 0;
+}
+/** Every call reported: known. None did: the provider does not report. Some
+ * did: partial, and the known part is dropped so a total never looks
+ * complete. No call at all: the run ended before a cost was recorded. */
+export function settle(tally) {
+    if (tally.knownCalls === 0 && tally.unknownCalls === 0) {
+        return { status: "unknown", reason: "not_recorded" };
+    }
+    if (tally.unknownCalls === 0)
+        return { status: "known", usd: tally.cost };
+    return {
+        status: "unknown",
+        reason: tally.knownCalls === 0 ? "provider_did_not_report" : "partial",
+    };
+}
+const REASON_TEXT = {
+    provider_did_not_report: "The provider did not report the cost for this review.",
+    partial: "Some AI calls in this review did not report a cost.",
+    recorded_before_0_5_1: "Recorded before 0.5.1, the cost was not saved.",
+    not_recorded: "The review ended before its cost was recorded.",
+};
+/** `provider` names the service in the first sentence, as in "OpenAI did not
+ * report the cost for this review." */
+export function costReasonText(reason, provider) {
+    if (reason === "provider_did_not_report" && provider) {
+        return `${provider} did not report the cost for this review.`;
+    }
+    return REASON_TEXT[reason];
+}
+/** The cost part of a review JSON `usage` object. `costUsd` stays `null`
+ * when the cost is unknown, as it always did. */
+export function costUsage(tally) {
+    const outcome = settle(tally);
+    return outcome.status === "known"
+        ? {
+            costUsd: outcome.usd,
+            costStatus: "known",
+            costNote: null,
+            billedTo: "server",
+        }
+        : {
+            costUsd: null,
+            costStatus: "unknown",
+            costNote: outcome.reason,
+            billedTo: "server",
+        };
+}
+/** The columns `setReviewStatus` writes for a finished review. */
+export function costColumns(outcome) {
+    return outcome.status === "known"
+        ? { cost: outcome.usd, cost_status: "known", cost_note: null }
+        : { cost: undefined, cost_status: "unknown", cost_note: outcome.reason };
+}

package/dist/src/util/log.d.ts

@@ -2,7 +2,7 @@
  * with `withLogSink`), it also reaches `job_logs` and any live SSE
  * subscriber, without threading a logger through every function signature. */
 type Sink = (phase: string, message: string) => void;
-/** Plan §8.4 — progress and logs on stderr during CLI review. */
+/** Progress and logs go to stderr during a CLI review. */
 export declare function withCliLogsToStderr<T>(fn: () => Promise<T>): Promise<T>;
 export declare function withLogSink<T>(sink: Sink, fn: () => Promise<T>): Promise<T>;
 export declare function log(phase: string, message: string): void;

package/dist/src/util/log.js

@@ -1,7 +1,7 @@
 import { AsyncLocalStorage } from "node:async_hooks";
 const sinkStorage = new AsyncLocalStorage();
 let cliLogsToStderr = false;
-/** Plan §8.4 — progress and logs on stderr during CLI review. */
+/** Progress and logs go to stderr during a CLI review. */
 export function withCliLogsToStderr(fn) {
     const prev = cliLogsToStderr;
     cliLogsToStderr = true;
@@ -32,7 +32,7 @@ export function startHeartbeat(phase) {
     const timer = setInterval(() => {
         log("progress", `still running ${label()} · ${Math.round((Date.now() - started) / 1000)}s elapsed`);
     }, 15_000);
-    // Never keep the process alive on its own (CORE-11). A long operation holds
+    // Never keep the process alive on its own. A long operation holds
     // the loop open through its own pending async work (a fetch, a child), so the
     // heartbeat still fires; but once that work is gone the timer must not be the
     // reason the process cannot drain and apply its exit code. Every call site

package/dist/src/util/redact.js

@@ -4,6 +4,8 @@ const PATTERNS = [
     /gh[pousr]_[A-Za-z0-9]{20,}/g, // ghp_, gho_, ghu_, ghs_, ghr_ (classic GitHub PATs and tokens)
     /github_pat_[A-Za-z0-9_]{20,}/g, // fine-grained GitHub PATs
     /sk-or-[A-Za-z0-9-]{10,}/g, // OpenRouter keys
+    /sk-ant-[A-Za-z0-9_-]{10,}/g, // Anthropic keys
+    /sk-[A-Za-z0-9_-]{20,}/g, // OpenAI keys, old `sk-` and new `sk-proj-` alike
     /cmr_[A-Za-z0-9_-]{20,}/g, // remote review bearer tokens
     /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
 ];

package/dist/src/util/run_summary.d.ts

@@ -1,6 +1,6 @@
-/** The one-line cost and time summary every AI command ends with (CORE-26).
+/** The one-line cost and time summary every AI command ends with.
  *
- * F18: the JSON already carried `usage.costUsd` and a duration, but the human
+ * The JSON already carried `usage.costUsd` and a duration, but the human
  * output had neither and `init` printed no total at all, so the only place to
  * see what a run cost was the OpenRouter dashboard. This renders the same
  * numbers as a single stderr line:
@@ -12,6 +12,7 @@
  * report a cost the dollar field is `cost unknown` rather than `$0.0000`.
  */
 import type { AiMetrics } from "../services/setup.ts";
+import { type CostTally } from "./cost.ts";
 export type RunSummary = {
     /** Wall-clock milliseconds, or null when only the AI time is known. */
     durationMs: number | null;
@@ -19,6 +20,8 @@ export type RunSummary = {
     tokensOut: number;
     /** `null` when any call left the cost unknown, matching `usage.costUsd`. */
     costUsd: number | null;
+    /** Why the cost is unknown, as a sentence. */
+    costNote?: string;
 };
 /** `21.0s`, `1.3s`, `2m 03s`; one decimal below a minute, whole seconds above. */
 export declare function formatDuration(ms: number): string;
@@ -31,3 +34,5 @@ export declare function formatRunSummary(summary: RunSummary): string;
 export declare function printRunSummary(summary: RunSummary): void;
 /** The metrics half of a summary, so call sites do not repeat the spread. */
 export declare function summaryFromMetrics(metrics: AiMetrics, durationMs: number | null): RunSummary;
+/** `0.0016` for a known cost, `unknown` otherwise. For the timing log line. */
+export declare function costLabel(metrics: CostTally): string;