dsh-budget 0.3.0 → 0.4.0

package/lib/index.js

@@ -1,5 +1,8 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { $ as ZodRecord, $a as $ZodCIDRv4, $i as _overwrite, $n as unknown, $o as $ZodTemplateLiteral, $r as _date, $s as decodeAsync, $t as hostname, A as ZodIPv6, Aa as _uppercase, Ai as _lt, An as pipe, Ao as $ZodMap, Ar as extractDefs, As as $ZodCheckMultipleOf, At as base64url, B as ZodNever, Ba as meta, Bi as _nan, Bn as string$1, Bo as $ZodObjectJIT, Br as _boolean, Bs as _decode, Bt as date$1, C as ZodEmoji, Ca as _tuple, Cc as $ZodEncodeError, Ci as _isoTime, Cn as nonoptional, Co as $ZodISOTime, Cr as ZodISODuration, Cs as $ZodCheckLessThan, Ct as _instanceof, D as ZodFunction, Da as _undefined, Dc as config, Di as _length, Dn as object, Do as $ZodLazy, Dr as toJSONSchema, Ds as $ZodCheckMimeType, Dt as any, E as ZodFile, Ea as _ulid, Ec as NEVER, Ei as _lazy, En as number$1, Eo as $ZodKSUID, Er as allProcessors, Es as $ZodCheckMaxSize, Et as _void$1, F as ZodLiteral, Fa as _uuidv7, Fi as _maxSize, Fn as record, Fo as $ZodNull, Fr as _any, Fs as $ZodCheckSizeEquals, Ft as cidrv6, G as ZodNumberFormat, Ga as registry, Gi as _nonnegative, Gn as symbol, Go as $ZodPromise, Gr as _coercedBigint, Gs as _parseAsync, Gt as emoji, H as ZodNull, Ha as $input, Hi as _nativeEnum, Hn as stringbool, Ho as $ZodPipe, Hr as _check, Hs as _encode, Ht as discriminatedUnion, I as ZodMAC, Ia as _void, Ii as _mime, In as refine, Io as $ZodNullable, Ir as _array, Is as $ZodCheckStartsWith, It as codec, J as ZodPipe, Ja as $ZodBase64, Ji as _normalize, Jn as tuple, Jo as $ZodSet, Jr as _coercedNumber, Js as _safeEncode, Jt as float32, K as ZodObject, Ka as $ZodAny, Ki as _nonoptional, Kn as templateLiteral, Ko as $ZodReadonly, Kr as _coercedBoolean, Ks as _safeDecode, Kt as exactOptional, L as ZodMap, La as _xid, Li as _minLength, Ln as schemas_exports, Lo as $ZodNumber, Lr as _base64, Ls as $ZodCheckStringFormat, Lt as cuid, M as ZodJWT, Ma as _uuid, Mi as _mac, Mn as preprocess, Mo as $ZodNanoID, Mr as initializeContext, Ms as $ZodCheckOverwrite, Mt as boolean$1, N as ZodKSUID, Na as _uuidv4, Ni as _map, Nn as promise, No as $ZodNever, Nr as process, Ns as $ZodCheckProperty, Nt as check, O as ZodGUID, Oa as _union, Oc as globalConfig, Oi as _literal, On as optional, Oo as $ZodLiteral, Or as createStandardJSONSchemaMethod, Os as $ZodCheckMinLength, Ot as array, P as ZodLazy, Pa as _uuidv6, Pi as _maxLength, Pn as readonly, Po as $ZodNonOptional, Pr as TimePrecision, Ps as $ZodCheckRegex, Pt as cidrv4, Q as ZodReadonly, Qa as $ZodBoolean, Qi as _optional, Qn as union, Qo as $ZodSymbol, Qr as _custom, Qs as decode, Qt as hex, R as ZodNaN, Ra as _xor, Ri as _minSize, Rn as set, Ro as $ZodNumberFormat, Rr as _base64url, Rs as $ZodCheckUpperCase, Rt as cuid2, S as ZodEmail, Sa as _trim, Sc as $ZodAsyncError, Si as _isoDuration, Sn as never, So as $ZodISODuration, Sr as ZodISODateTime, Ss as $ZodCheckLengthEquals, St as _function, T as ZodExactOptional, Ta as _uint64, Tc as $constructor, Ti as _ksuid, Tn as nullish, To as $ZodJWT, Tr as iso_exports, Ts as $ZodCheckMaxLength, Tt as _undefined$1, U as ZodNullable, Ua as $output, Ui as _negative, Un as success, Uo as $ZodPrefault, Ur as _cidrv4, Us as _encodeAsync, Ut as e164, V as ZodNonOptional, Va as $ZodRegistry, Vi as _nanoid, Vn as stringFormat, Vo as $ZodOptional, Vr as _catch, Vs as _decodeAsync, Vt as describe$1, W as ZodNumber, Wa as globalRegistry, Wi as _never, Wn as superRefine, Wo as $ZodPreprocess, Wr as _cidrv6, Ws as _parse, Wt as email, X as ZodPreprocess, Xa as $ZodBigInt, Xi as _nullable, Xn as uint64, Xo as $ZodStringFormat, Xr as _cuid, Xs as _safeParse, Xt as guid, Y as ZodPrefault, Ya as $ZodBase64URL, Yi as _null, Yn as uint32, Yo as $ZodString, Yr as _coercedString, Ys as _safeEncodeAsync, Yt as float64, Z as ZodPromise, Za as $ZodBigIntFormat, Zi as _number, Zn as ulid, Zo as $ZodSuccess, Zr as _cuid2, Zs as _safeParseAsync, Zt as hash, _ as ZodCustomStringFormat, _a as _symbol, _c as clone, _i as _intersection, _n as map, _o as $ZodGUID, _r as safeParse$1, _s as $ZodCheck, _t as ZodXor, a as ZodBase64, aa as _record, ac as safeDecodeAsync, ai as _endsWith, an as invertCodec, ao as $ZodCustom, ar as xid, as as $ZodUUID, at as ZodTemplateLiteral, b as ZodDiscriminatedUnion, ba as _toUpperCase, bc as stringifyPrimitive, bi as _isoDate, bn as nanoid, bo as $ZodISODate, br as ZodRealError, bs as $ZodCheckGreaterThan, bt as _default$1, c as ZodBigIntFormat, ca as _set, cc as safeParse, ci as _float32, cn as json, co as $ZodDefault, cr as decodeAsync$1, cs as $ZodUnknown, ct as ZodType, d as ZodCIDRv6, da as _startsWith, dc as $ZodRealError, di as _gte, dn as ksuid, do as $ZodEmail, dr as parse$1, ds as $ZodXor, dt as ZodUUID, ea as _pipe, ec as encode, ei as _default, en as httpUrl, eo as $ZodCIDRv6, er as url, es as $ZodTransform, et as ZodSet, f as ZodCUID, fa as _string, fc as flattenError, fi as _guid, fn as lazy, fo as $ZodEmoji, fr as parseAsync$1, fs as isValidBase64, ft as ZodUndefined, g as ZodCustom, ga as _superRefine, gc as treeifyError, gi as _int64, gn as mac, go as $ZodFunction, gr as safeEncodeAsync$1, gs as Doc, gt as ZodXID, h as ZodCodec, ha as _success, hc as toDotPath, hi as _int32, hn as looseRecord, ho as $ZodFile, hr as safeEncode$1, hs as version, ht as ZodVoid, i as ZodArray, ia as _readonly, ic as safeDecode, ii as _emoji, in as intersection, io as $ZodCodec, ir as uuidv7, is as $ZodURL, it as ZodSymbol, j as ZodIntersection, ja as _url, ji as _lte, jn as prefault, jo as $ZodNaN, jr as finalize, js as $ZodCheckNumberFormat, jt as bigint$1, k as ZodIPv4, ka as _unknown, ki as _lowercase, kn as partialRecord, ko as $ZodMAC, kr as createToJSONSchemaMethod, ks as $ZodCheckMinSize, kt as base64, l as ZodBoolean, la as _size, lc as safeParseAsync, li as _float64, ln as jwt, lo as $ZodDiscriminatedUnion, lr as encode$1, ls as $ZodVoid, lt as ZodULID, m as ZodCatch, ma as _stringbool, mc as prettifyError, mi as _int, mn as looseObject, mo as $ZodExactOptional, mr as safeDecodeAsync$1, ms as isValidJWT, mt as ZodUnknown, n as BUDGET_SETTINGS_SCHEMA, na as _promise, nc as parse, ni as _e164, nn as int32, no as $ZodCUID2, nr as uuidv4, ns as $ZodType, nt as ZodStringFormat, o as ZodBase64URL, oa as _refine, oc as safeEncode, oi as _enum, on as ipv4, oo as $ZodCustomStringFormat, or as xor, os as $ZodUndefined, ot as ZodTransform, p as ZodCUID2, pa as _stringFormat, pc as formatError, pi as _includes, pn as literal, po as $ZodEnum, pr as safeDecode$1, ps as isValidBase64URL, pt as ZodUnion, q as ZodOptional, qa as $ZodArray, qi as _nonpositive, qn as transform, qo as $ZodRecord, qr as _coercedDate, qs as _safeDecodeAsync, qt as file, r as ZodAny, ra as _property, rc as parseAsync, ri as _email, rn as int64, ro as $ZodCatch, rr as uuidv6, rs as $ZodULID, rt as ZodSuccess, s as ZodBigInt, sa as _regex, sc as safeEncodeAsync, si as _file, sn as ipv6, so as $ZodDate, sr as decode$1, ss as $ZodUnion, st as ZodTuple, ta as _positive, tc as encodeAsync, ti as _discriminatedUnion, tn as int, to as $ZodCUID, tr as uuid, ts as $ZodTuple, tt as ZodString, u as ZodCIDRv4, ua as _slugify, uc as $ZodError, ui as _gt, un as keyof, uo as $ZodE164, ur as encodeAsync$1, us as $ZodXID, ut as ZodURL, v as ZodDate, va as _templateLiteral, vc as joinValues, vi as _ipv4, vn as meta$1, vo as $ZodIPv4, vr as safeParseAsync$1, vs as $ZodCheckBigIntFormat, vt as _ZodString, w as ZodEnum, wa as _uint32, wc as $brand, wi as _jwt, wn as nullable, wo as $ZodIntersection, wr as ZodISOTime, ws as $ZodCheckLowerCase, wt as _null$1, x as ZodE164, xa as _transform, xc as util_exports, xi as _isoDateTime, xn as nativeEnum, xo as $ZodISODateTime, xr as ZodISODate, xs as $ZodCheckIncludes, xt as _enum$1, y as ZodDefault, ya as _toLowerCase, yc as parsedType, yi as _ipv6, yn as nan, yo as $ZodIPv6, yr as ZodError, ys as $ZodCheckEndsWith, yt as _catch$1, z as ZodNanoID, za as describe, zi as _multipleOf, zn as strictObject, zo as $ZodObject, zr as _bigint, zs as regexes_exports, zt as custom } from "./wire-zYaXk7IG.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { $ as ZodRecord, $a as $ZodCIDRv4, $i as _overwrite, $n as unknown, $o as $ZodTemplateLiteral, $r as _date, $s as decodeAsync, $t as hostname, A as ZodIPv6, Aa as _uppercase, Ai as _lt, An as pipe, Ao as $ZodMap, Ar as extractDefs, As as $ZodCheckMultipleOf, At as base64url, B as ZodNever, Ba as meta, Bi as _nan, Bn as string$1, Bo as $ZodObjectJIT, Br as _boolean, Bs as _decode, Bt as date$1, C as ZodEmoji, Ca as _tuple, Cc as $ZodEncodeError, Ci as _isoTime, Cn as nonoptional, Co as $ZodISOTime, Cr as ZodISODuration, Cs as $ZodCheckLessThan, Ct as _instanceof, D as ZodFunction, Da as _undefined, Dc as config, Di as _length, Dn as object, Do as $ZodLazy, Dr as toJSONSchema, Ds as $ZodCheckMimeType, Dt as any, E as ZodFile, Ea as _ulid, Ec as NEVER, Ei as _lazy, En as number$1, Eo as $ZodKSUID, Er as allProcessors, Es as $ZodCheckMaxSize, Et as _void$1, F as ZodLiteral, Fa as _uuidv7, Fi as _maxSize, Fn as record, Fo as $ZodNull, Fr as _any, Fs as $ZodCheckSizeEquals, Ft as cidrv6, G as ZodNumberFormat, Ga as registry, Gi as _nonnegative, Gn as symbol, Go as $ZodPromise, Gr as _coercedBigint, Gs as _parseAsync, Gt as emoji, H as ZodNull, Ha as $input, Hi as _nativeEnum, Hn as stringbool, Ho as $ZodPipe, Hr as _check, Hs as _encode, Ht as discriminatedUnion, I as ZodMAC, Ia as _void, Ii as _mime, In as refine, Io as $ZodNullable, Ir as _array, Is as $ZodCheckStartsWith, It as codec, J as ZodPipe, Ja as $ZodBase64, Ji as _normalize, Jn as tuple, Jo as $ZodSet, Jr as _coercedNumber, Js as _safeEncode, Jt as float32, K as ZodObject, Ka as $ZodAny, Ki as _nonoptional, Kn as templateLiteral, Ko as $ZodReadonly, Kr as _coercedBoolean, Ks as _safeDecode, Kt as exactOptional, L as ZodMap, La as _xid, Li as _minLength, Ln as schemas_exports, Lo as $ZodNumber, Lr as _base64, Ls as $ZodCheckStringFormat, Lt as cuid, M as ZodJWT, Ma as _uuid, Mi as _mac, Mn as preprocess, Mo as $ZodNanoID, Mr as initializeContext, Ms as $ZodCheckOverwrite, Mt as boolean$1, N as ZodKSUID, Na as _uuidv4, Ni as _map, Nn as promise, No as $ZodNever, Nr as process, Ns as $ZodCheckProperty, Nt as check, O as ZodGUID, Oa as _union, Oc as globalConfig, Oi as _literal, On as optional, Oo as $ZodLiteral, Or as createStandardJSONSchemaMethod, Os as $ZodCheckMinLength, Ot as array, P as ZodLazy, Pa as _uuidv6, Pi as _maxLength, Pn as readonly, Po as $ZodNonOptional, Pr as TimePrecision, Ps as $ZodCheckRegex, Pt as cidrv4, Q as ZodReadonly, Qa as $ZodBoolean, Qi as _optional, Qn as union, Qo as $ZodSymbol, Qr as _custom, Qs as decode, Qt as hex, R as ZodNaN, Ra as _xor, Ri as _minSize, Rn as set, Ro as $ZodNumberFormat, Rr as _base64url, Rs as $ZodCheckUpperCase, Rt as cuid2, S as ZodEmail, Sa as _trim, Sc as $ZodAsyncError, Si as _isoDuration, Sn as never, So as $ZodISODuration, Sr as ZodISODateTime, Ss as $ZodCheckLengthEquals, St as _function, T as ZodExactOptional, Ta as _uint64, Tc as $constructor, Ti as _ksuid, Tn as nullish, To as $ZodJWT, Tr as iso_exports, Ts as $ZodCheckMaxLength, Tt as _undefined$1, U as ZodNullable, Ua as $output, Ui as _negative, Un as success, Uo as $ZodPrefault, Ur as _cidrv4, Us as _encodeAsync, Ut as e164, V as ZodNonOptional, Va as $ZodRegistry, Vi as _nanoid, Vn as stringFormat, Vo as $ZodOptional, Vr as _catch, Vs as _decodeAsync, Vt as describe$1, W as ZodNumber, Wa as globalRegistry, Wi as _never, Wn as superRefine, Wo as $ZodPreprocess, Wr as _cidrv6, Ws as _parse, Wt as email, X as ZodPreprocess, Xa as $ZodBigInt, Xi as _nullable, Xn as uint64, Xo as $ZodStringFormat, Xr as _cuid, Xs as _safeParse, Xt as guid, Y as ZodPrefault, Ya as $ZodBase64URL, Yi as _null, Yn as uint32, Yo as $ZodString, Yr as _coercedString, Ys as _safeEncodeAsync, Yt as float64, Z as ZodPromise, Za as $ZodBigIntFormat, Zi as _number, Zn as ulid, Zo as $ZodSuccess, Zr as _cuid2, Zs as _safeParseAsync, Zt as hash, _ as ZodCustomStringFormat, _a as _symbol, _c as clone, _i as _intersection, _n as map, _o as $ZodGUID, _r as safeParse$1, _s as $ZodCheck, _t as ZodXor, a as ZodBase64, aa as _record, ac as safeDecodeAsync, ai as _endsWith, an as invertCodec, ao as $ZodCustom, ar as xid, as as $ZodUUID, at as ZodTemplateLiteral, b as ZodDiscriminatedUnion, ba as _toUpperCase, bc as stringifyPrimitive, bi as _isoDate, bn as nanoid, bo as $ZodISODate, br as ZodRealError, bs as $ZodCheckGreaterThan, bt as _default$1, c as ZodBigIntFormat, ca as _set, cc as safeParse, ci as _float32, cn as json, co as $ZodDefault, cr as decodeAsync$1, cs as $ZodUnknown, ct as ZodType, d as ZodCIDRv6, da as _startsWith, dc as $ZodRealError, di as _gte, dn as ksuid, do as $ZodEmail, dr as parse$1, ds as $ZodXor, dt as ZodUUID, ea as _pipe, ec as encode, ei as _default, en as httpUrl, eo as $ZodCIDRv6, er as url, es as $ZodTransform, et as ZodSet, f as ZodCUID, fa as _string, fc as flattenError, fi as _guid, fn as lazy, fo as $ZodEmoji, fr as parseAsync$1, fs as isValidBase64, ft as ZodUndefined, g as ZodCustom, ga as _superRefine, gc as treeifyError, gi as _int64, gn as mac, go as $ZodFunction, gr as safeEncodeAsync$1, gs as Doc, gt as ZodXID, h as ZodCodec, ha as _success, hc as toDotPath, hi as _int32, hn as looseRecord, ho as $ZodFile, hr as safeEncode$1, hs as version, ht as ZodVoid, i as ZodArray, ia as _readonly, ic as safeDecode, ii as _emoji, in as intersection, io as $ZodCodec, ir as uuidv7, is as $ZodURL, it as ZodSymbol, j as ZodIntersection, ja as _url, ji as _lte, jn as prefault, jo as $ZodNaN, jr as finalize, js as $ZodCheckNumberFormat, jt as bigint$1, k as ZodIPv4, ka as _unknown, ki as _lowercase, kn as partialRecord, ko as $ZodMAC, kr as createToJSONSchemaMethod, ks as $ZodCheckMinSize, kt as base64, l as ZodBoolean, la as _size, lc as safeParseAsync, li as _float64, ln as jwt, lo as $ZodDiscriminatedUnion, lr as encode$1, ls as $ZodVoid, lt as ZodULID, m as ZodCatch, ma as _stringbool, mc as prettifyError, mi as _int, mn as looseObject, mo as $ZodExactOptional, mr as safeDecodeAsync$1, ms as isValidJWT, mt as ZodUnknown, n as BUDGET_SETTINGS_SCHEMA, na as _promise, nc as parse, ni as _e164, nn as int32, no as $ZodCUID2, nr as uuidv4, ns as $ZodType, nt as ZodStringFormat, o as ZodBase64URL, oa as _refine, oc as safeEncode, oi as _enum, on as ipv4, oo as $ZodCustomStringFormat, or as xor, os as $ZodUndefined, ot as ZodTransform, p as ZodCUID2, pa as _stringFormat, pc as formatError, pi as _includes, pn as literal, po as $ZodEnum, pr as safeDecode$1, ps as isValidBase64URL, pt as ZodUnion, q as ZodOptional, qa as $ZodArray, qi as _nonpositive, qn as transform, qo as $ZodRecord, qr as _coercedDate, qs as _safeDecodeAsync, qt as file, r as ZodAny, ra as _property, rc as parseAsync, ri as _email, rn as int64, ro as $ZodCatch, rr as uuidv6, rs as $ZodULID, rt as ZodSuccess, s as ZodBigInt, sa as _regex, sc as safeEncodeAsync, si as _file, sn as ipv6, so as $ZodDate, sr as decode$1, ss as $ZodUnion, st as ZodTuple, ta as _positive, tc as encodeAsync, ti as _discriminatedUnion, tn as int, to as $ZodCUID, tr as uuid, ts as $ZodTuple, tt as ZodString, u as ZodCIDRv4, ua as _slugify, uc as $ZodError, ui as _gt, un as keyof, uo as $ZodE164, ur as encodeAsync$1, us as $ZodXID, ut as ZodURL, v as ZodDate, va as _templateLiteral, vc as joinValues, vi as _ipv4, vn as meta$1, vo as $ZodIPv4, vr as safeParseAsync$1, vs as $ZodCheckBigIntFormat, vt as _ZodString, w as ZodEnum, wa as _uint32, wc as $brand, wi as _jwt, wn as nullable, wo as $ZodIntersection, wr as ZodISOTime, ws as $ZodCheckLowerCase, wt as _null$1, x as ZodE164, xa as _transform, xc as util_exports, xi as _isoDateTime, xn as nativeEnum, xo as $ZodISODateTime, xr as ZodISODate, xs as $ZodCheckIncludes, xt as _enum$1, y as ZodDefault, ya as _toLowerCase, yc as parsedType, yi as _ipv6, yn as nan, yo as $ZodIPv6, yr as ZodError, ys as $ZodCheckEndsWith, yt as _catch$1, z as ZodNanoID, za as describe, zi as _multipleOf, zn as strictObject, zo as $ZodObject, zr as _bigint, zs as regexes_exports, zt as custom } from "./wire-DE0ooHk0.js";
+import { createRequire } from "node:module";
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
 import z from "@deepseek-ai/schemastery";
 import { TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { defineDomain, domainTable } from "@deepseek-ai/dsh-storage-domain";
@@ -965,6 +968,27 @@ async function sendWebhook(url, payload, timeoutMs, logger) {
 const ALERT_EVENT = "budget/alert";
 /** The block audit event type. */
 const BLOCK_EVENT = "budget/block";
+/**
+* Decide whether `budget/alert` and `budget/block` appends are safe on this
+* host line. From 0.1.2-alpha.1 the session read path refuses logs
+* containing event types outside the harness-known vocabulary and exposes no
+* external registration surface, so appends would poison the log. Earlier
+* lines accept any event type and keep the legacy write behavior; an
+* undefined or unparseable version is treated as legacy.
+*
+* @param sessionVersion - the installed @deepseek-ai/dsh-session version
+* (the session package ships with the harness and carries its line version).
+* @returns true when audit appends are safe on the host.
+*/
+function auditAppendsAllowed(sessionVersion) {
+	if (sessionVersion === void 0) return true;
+	const match = /^(\d+)\.(\d+)\.(\d+)/.exec(sessionVersion);
+	if (match === null) return true;
+	const major = Number(match[1]);
+	const minor = Number(match[2]);
+	const patch = Number(match[3]);
+	return major * 1e6 + minor * 1e3 + patch < 1002;
+}
 //#endregion
 //#region node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ar.js
 const error$49 = () => {
@@ -7950,6 +7974,32 @@ const budgetDomainSpec = defineDomain({
 });
 //#endregion
 //#region src/index.ts
+/**
+* The installed `@deepseek-ai/dsh-session` version: the session package
+* ships with the harness, so its version names the harness line. Read from
+* the package manifest next to the resolved entry.
+*
+* @returns the harness-line version, or undefined when the peer cannot be
+* resolved or the manifest cannot be read.
+*/
+function installedSessionVersion() {
+	try {
+		const entry = createRequire(import.meta.url).resolve("@deepseek-ai/dsh-session");
+		let dir = dirname(entry);
+		for (let depth = 0; depth < 6; depth++) {
+			try {
+				const manifest = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+				if (manifest.name === "@deepseek-ai/dsh-session" && typeof manifest.version === "string") return manifest.version;
+			} catch (error) {}
+			const parent = dirname(dir);
+			if (parent === dir) return void 0;
+			dir = parent;
+		}
+		return;
+	} catch (error) {
+		return;
+	}
+}
 const name = "dsh-budget";
 /** Hard services: the session store every aggregation keys off. */
 const inject = ["sessions"];
@@ -8036,7 +8086,10 @@ async function apply(ctx, config) {
 		desktopNotifications: resolved.desktopNotifications
 	};
 	let degradation;
+	const auditWritable = auditAppendsAllowed(installedSessionVersion());
+	if (!auditWritable) logger.warn("budget audit events suppressed on this harness (>= 0.1.2-alpha.1): the fail-closed session event vocabulary rejects logs containing unregistered event types and exposes no external registration surface; the alert/block trail degrades to the budget logger and webhook only");
 	const append = (session, type, event) => {
+		if (!auditWritable) return;
 		queueMicrotask(() => {
 			try {
 				session.append(type, event);
@@ -8135,4 +8188,4 @@ async function apply(ctx, config) {
 	if (commands !== void 0) ctx.effect(() => commands.register(budgetCommand(ctx.get("budget"), resolved.outputLanguage)), "dsh-budget: /budget command");
 }
 //#endregion
-export { ALERT_EVENT, BLOCK_EVENT, BudgetAggregator, BudgetService, Config, apply, budgetCommand, budgetDomainSpec, budgetStateSchema, checkBudgets, degradationFor, effectiveCap, inject, name, parseBudgetArgs, renderBudgetModels, renderBudgetOverview, resolveConfig };
+export { ALERT_EVENT, BLOCK_EVENT, BudgetAggregator, BudgetService, Config, apply, auditAppendsAllowed, budgetCommand, budgetDomainSpec, budgetStateSchema, checkBudgets, degradationFor, effectiveCap, inject, name, parseBudgetArgs, renderBudgetModels, renderBudgetOverview, resolveConfig };

package/lib/{rolldown-runtime-D7D4PA-g.js → rolldown-runtime-8H4AJuhK.js}

@@ -1,3 +1,4 @@
+import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {

package/lib/typert.host.js

@@ -1,4 +1,4 @@
-import { t as BUDGET_INVOCATIONS } from "./wire-zYaXk7IG.js";
+import { t as BUDGET_INVOCATIONS } from "./wire-DE0ooHk0.js";
 //#region src/typert.host.ts
 /**
 * The hand-written Typert HOST manifest for `dsh-budget`, exported as

package/lib/types/client/index.d.ts

@@ -2,12 +2,12 @@
  * `dsh-budget`, browser half: mounts the `budget` Remote contribution, then
  * registers the budget tab into the Plugins settings section
  * (`settings.plugins.tab`, id `budget`). All data arrives through the
- * `remote.budget` namespace — the tab issues no other RPC and holds no state
+ * `remote.budget` namespace 鈥?the tab issues no other RPC and holds no state
  * of its own beyond the edit form and the last loaded snapshot.
  *
  * @module dsh-budget/client
  */
-import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
+import type { Context as ClientContext } from '@deepseek-ai/cordis';
 import { type BudgetLocaleKey } from './locales.js';
 export type { BudgetTabInjected, BudgetTabProps } from './BudgetTab.js';
 export type { BudgetLocaleKey } from './locales.js';

package/lib/types/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAA;AAM3E,OAAO,EAAU,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AAM3D,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACxE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACpF,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAE9C,OAAO,QAAQ,kCAAkC,CAAC;IAChD,UAAU,kBAAkB;QAC1B,gCAAgC;QAChC,iBAAiB,EAAE,eAAe,CAAA;KACnC;CACF;AAED,iDAAiD;AACjD,eAAO,MAAM,EAAE,oBAAoB,CAAA;AAEnC,kFAAkF;AAClF,eAAO,MAAM,IAAI,eAAe,CAAA;AAEhC,gGAAgG;AAChG,eAAO,MAAM,MAAM,UAA4C,CAAA;AAE/D;;;;;GAKG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B7D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAcnE,OAAO,EAAU,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AAM3D,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACxE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACpF,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAE9C,OAAO,QAAQ,kCAAkC,CAAC;IAChD,UAAU,kBAAkB;QAC1B,gCAAgC;QAChC,iBAAiB,EAAE,eAAe,CAAA;KACnC;CACF;AAED,iDAAiD;AACjD,eAAO,MAAM,EAAE,oBAAoB,CAAA;AAEnC,kFAAkF;AAClF,eAAO,MAAM,IAAI,eAAe,CAAA;AAEhC,gGAAgG;AAChG,eAAO,MAAM,MAAM,UAA4C,CAAA;AAE/D;;;;;GAKG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgC7D"}

package/lib/types/client/remote.d.ts

@@ -38,7 +38,17 @@ export declare const BUDGET_REMOTE: Readonly<{
         readonly invocation: Readonly<{
             kind: "direct";
         }>;
-        readonly parameters: readonly never[];
+        readonly parameters: readonly Readonly<{
+            name: string;
+            wire: string;
+            source: "json";
+            codec: Readonly<{
+                mode: "strict";
+                typeSymbol: "dsh-budget/types#SessionId";
+                schema: import("zod").ZodOptional<import("zod").ZodString>;
+            }>;
+            acceptsUndefined: true;
+        }>[];
         readonly result: Readonly<{
             mode: "strict";
             typeSymbol: "dsh-budget/types#BudgetStatus";

package/lib/types/client/remote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../../src/client/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAA4B,MAAM,kCAAkC,CAAA;AAE9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,OAAO,QAAQ,kCAAkC,CAAC;IAChD,UAAU,4BAA4B;QACpC,6DAA6D;QAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;QACnE,4DAA4D;QAC5D,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;QAC1E,sDAAsD;QACtD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;KAChE;IACD,UAAU,eAAe;QACvB,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;QAC5E,oBAAoB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;QACnF,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;KACzE;IACD,UAAU,wBAAwB;QAChC,MAAM,EAAE,4BAA4B,CAAA;KACrC;CACF;AAED,iEAAiE;AACjE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGW,CAAA"}
+{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../../src/client/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAA4B,MAAM,kCAAkC,CAAA;AAE9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,OAAO,QAAQ,kCAAkC,CAAC;IAChD,UAAU,4BAA4B;QACpC,6DAA6D;QAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;QACnE,4DAA4D;QAC5D,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;QAC1E,sDAAsD;QACtD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;KAChE;IACD,UAAU,eAAe;QACvB,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;QAC5E,oBAAoB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;QACnF,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAA;KACzE;IACD,UAAU,wBAAwB;QAChC,MAAM,EAAE,4BAA4B,CAAA;KACrC;CACF;AAED,iEAAiE;AACjE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGW,CAAA"}

package/lib/types/events.d.ts

@@ -1,8 +1,9 @@
 /**
  * Session audit events for `dsh-budget` (declaration merging into the
  * harness `SessionEventMap`). Both events are log-only: the panel/command
- * surfaces are the model-visible projections, and these events keep the
- * alert/block trail reconstructable from the session log. Amounts are plain
+ * surfaces are the model-visible projections; on legacy harnesses these
+ * events keep the alert/block trail reconstructable from the session log
+ * (see auditAppendsAllowed for the fail-closed gate). Amounts are plain
  * numbers, webhook URLs are sanitized before they ever reach a payload.
  *
  * @module dsh-budget/events
@@ -38,6 +39,19 @@ declare module '@deepseek-ai/dsh-session/types' {
 export declare const ALERT_EVENT: "budget/alert";
 /** The block audit event type. */
 export declare const BLOCK_EVENT: "budget/block";
+/**
+ * Decide whether `budget/alert` and `budget/block` appends are safe on this
+ * host line. From 0.1.2-alpha.1 the session read path refuses logs
+ * containing event types outside the harness-known vocabulary and exposes no
+ * external registration surface, so appends would poison the log. Earlier
+ * lines accept any event type and keep the legacy write behavior; an
+ * undefined or unparseable version is treated as legacy.
+ *
+ * @param sessionVersion - the installed @deepseek-ai/dsh-session version
+ * (the session package ships with the harness and carries its line version).
+ * @returns true when audit appends are safe on the host.
+ */
+export declare function auditAppendsAllowed(sessionVersion: string | undefined): boolean;
 /** Alert payload type. */
 export type BudgetAlertEvent = {
     scope: 'session' | 'daily' | 'monthly';

package/lib/types/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,QAAQ,gCAAgC,CAAC;IAC9C,UAAU,eAAe;QACvB;;;WAGG;QACH,cAAc,EAAE;YACd,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;YACtC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;YACrB,OAAO,EAAE,MAAM,CAAA;YACf,MAAM,EAAE,MAAM,CAAA;SACf,CAAA;QACD;;;;WAIG;QACH,cAAc,EAAE;YACd,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;YACtC,OAAO,EAAE,OAAO,CAAA;YAChB,WAAW,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,EAAE,EAAE,MAAM,CAAA;aAAE,CAAA;SAC3C,CAAA;KACF;CACF;AAED,kCAAkC;AAClC,eAAO,MAAM,WAAW,EAAG,cAAuB,CAAA;AAElD,kCAAkC;AAClC,eAAO,MAAM,WAAW,EAAG,cAAuB,CAAA;AAElD,0BAA0B;AAC1B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;IACtC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,0BAA0B;AAC1B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;IACtC,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3C,CAAA"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,QAAQ,gCAAgC,CAAC;IAC9C,UAAU,eAAe;QACvB;;;WAGG;QACH,cAAc,EAAE;YACd,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;YACtC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;YACrB,OAAO,EAAE,MAAM,CAAA;YACf,MAAM,EAAE,MAAM,CAAA;SACf,CAAA;QACD;;;;WAIG;QACH,cAAc,EAAE;YACd,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;YACtC,OAAO,EAAE,OAAO,CAAA;YAChB,WAAW,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,EAAE,EAAE,MAAM,CAAA;aAAE,CAAA;SAC3C,CAAA;KACF;CACF;AAED,kCAAkC;AAClC,eAAO,MAAM,WAAW,EAAG,cAAuB,CAAA;AAElD,kCAAkC;AAClC,eAAO,MAAM,WAAW,EAAG,cAAuB,CAAA;AAElD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAQ/E;AAED,0BAA0B;AAC1B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;IACtC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,0BAA0B;AAC1B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;IACtC,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3C,CAAA"}

package/lib/types/index.d.ts

@@ -5,7 +5,8 @@
  * alert/block/degrade over-limit policies; per-model latency statistics; the
  * `budget` Typert Remote (`budget/status`, `budget/setSettings`,
  * `budget/unblock`) that the browser half's Settings tab consumes; the
- * `/budget` command; and `budget/alert` + `budget/block` session audit events.
+ * `/budget` command; and `budget/alert` + `budget/block` session audit events
+ * (suppressed on hosts whose fail-closed event vocabulary rejects them).
  *
  * Function plugin 鈥?no default export (the Loader unwraps
  * `exports.default ?? exports`).
@@ -38,7 +39,7 @@ export type { PersistedBudgetState, PersistedBucket, PersistedModelUsage } from
 export { checkBudgets, degradationFor } from './governance.js';
 export { BudgetService, effectiveCap } from './service.js';
 export { budgetCommand, parseBudgetArgs, renderBudgetModels, renderBudgetOverview } from './command.js';
-export { ALERT_EVENT, BLOCK_EVENT } from './events.js';
+export { ALERT_EVENT, auditAppendsAllowed, BLOCK_EVENT } from './events.js';
 export { budgetDomainSpec, budgetStateSchema } from './store.js';
 /**
  * Mount the plugin: resolve config, build the aggregator, restore any durable

package/lib/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAKlD,OAAO,EAAE,MAAM,EAAiB,MAAM,aAAa,CAAA;AASnD,eAAO,MAAM,IAAI,eAAe,CAAA;AAEhC,mEAAmE;AACnE,eAAO,MAAM,MAAM,UAAe,CAAA;AAElC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACnD,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AACtG,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACvG,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAqBhE;;;;;;;;;GASG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmKvE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAQlD,OAAO,EAAE,MAAM,EAAiB,MAAM,aAAa,CAAA;AAwCnD,eAAO,MAAM,IAAI,eAAe,CAAA;AAEhC,mEAAmE;AACnE,eAAO,MAAM,MAAM,UAAe,CAAA;AAElC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACnD,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AACtG,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACvG,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC3E,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAqBhE;;;;;;;;;GASG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgLvE"}

package/lib/types/typert.host.d.ts

@@ -21,7 +21,17 @@ export declare const TYPERT: Readonly<{
         readonly invocation: Readonly<{
             kind: "direct";
         }>;
-        readonly parameters: readonly never[];
+        readonly parameters: readonly Readonly<{
+            name: string;
+            wire: string;
+            source: "json";
+            codec: Readonly<{
+                mode: "strict";
+                typeSymbol: "dsh-budget/types#SessionId";
+                schema: import("zod").ZodOptional<import("zod").ZodString>;
+            }>;
+            acceptsUndefined: true;
+        }>[];
         readonly result: Readonly<{
             mode: "strict";
             typeSymbol: "dsh-budget/types#BudgetStatus";

package/lib/types/typert.host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typert.host.d.ts","sourceRoot":"","sources":["../../src/typert.host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,4EAA4E;AAC5E,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUjB,CAAA"}
+{"version":3,"file":"typert.host.d.ts","sourceRoot":"","sources":["../../src/typert.host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,4EAA4E;AAC5E,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUjB,CAAA"}

package/lib/types/wire.d.ts

@@ -140,11 +140,16 @@ export declare const BUDGET_STATUS_SCHEMA: z.ZodObject<{
     warnRatio: z.ZodNumber;
     refreshIntervalMs: z.ZodNumber;
 }, z.core.$strip>;
+/** Strict wire schema for the optional status session id. */
+export declare const BUDGET_SESSION_ID_SCHEMA: z.ZodOptional<z.ZodString>;
 /**
  * The `budget/status` invocation descriptor, shared verbatim by the host
  * `TYPERT` manifest and the client `TypertRemoteContribution`. Hand-written
  * in the exact shape the Typert generator emits; validated by the typert
- * loader and the client registry at mount time.
+ * loader and the client registry at mount time. The optional `sessionId`
+ * parameter matches `BudgetService.status(sessionId?)` and the client
+ * `remote.budget.status(sessionId?)` — it attributes the snapshot to one
+ * session and may be omitted (missing wire fields decode to `undefined`).
  */
 export declare const BUDGET_STATUS_DESCRIPTOR: Readonly<{
     readonly id: "dsh-budget#budget/status";
@@ -154,7 +159,17 @@ export declare const BUDGET_STATUS_DESCRIPTOR: Readonly<{
     readonly invocation: Readonly<{
         kind: "direct";
     }>;
-    readonly parameters: readonly never[];
+    readonly parameters: readonly Readonly<{
+        name: string;
+        wire: string;
+        source: "json";
+        codec: Readonly<{
+            mode: "strict";
+            typeSymbol: "dsh-budget/types#SessionId";
+            schema: z.ZodOptional<z.ZodString>;
+        }>;
+        acceptsUndefined: true;
+    }>[];
     readonly result: Readonly<{
         mode: "strict";
         typeSymbol: "dsh-budget/types#BudgetStatus";
@@ -444,7 +459,17 @@ export declare const BUDGET_INVOCATIONS: readonly (Readonly<{
     readonly invocation: Readonly<{
         kind: "direct";
     }>;
-    readonly parameters: readonly never[];
+    readonly parameters: readonly Readonly<{
+        name: string;
+        wire: string;
+        source: "json";
+        codec: Readonly<{
+            mode: "strict";
+            typeSymbol: "dsh-budget/types#SessionId";
+            schema: z.ZodOptional<z.ZodString>;
+        }>;
+        acceptsUndefined: true;
+    }>[];
     readonly result: Readonly<{
         mode: "strict";
         typeSymbol: "dsh-budget/types#BudgetStatus";

package/lib/types/wire.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/wire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,0CAA0C;AAC1C,eAAO,MAAM,aAAa,0CAA2C,CAAA;AACrE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;AAExD,oDAAoD;AACpD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,WAAW,CAAA;IAClB,oCAAoC;IACpC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,qDAAqD;IACrD,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAC7G;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,WAAW,CAAA;IAClB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,4CAA4C;AAC5C,MAAM,WAAW,OAAO;IACtB,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,aAAa,EAAE,WAAW,EAAE,CAAA;IAC5B,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1D,aAAa,EAAE,OAAO,CAAA;IACtB,oBAAoB,EAAE,OAAO,CAAA;IAC7B,uEAAuE;IACvE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,oEAAoE;IACpE,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAA;IACjB,wEAAwE;IACxE,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AAED,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4C/B,CAAA;AAEF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAaK,CAAA;AAE1C,2DAA2D;AAC3D,eAAO,MAAM,sBAAsB;;;;;;iBAMjC,CAAA;AAEF;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBD,CAAA;AAE1C,wDAAwD;AACxD,eAAO,MAAM,2BAA2B;;;;EAAwB,CAAA;AAEhE;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBI,CAAA;AAE1C;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAI7B,CAAA"}
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/wire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,0CAA0C;AAC1C,eAAO,MAAM,aAAa,0CAA2C,CAAA;AACrE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;AAExD,oDAAoD;AACpD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,WAAW,CAAA;IAClB,oCAAoC;IACpC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,qDAAqD;IACrD,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAC7G;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,WAAW,CAAA;IAClB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,4CAA4C;AAC5C,MAAM,WAAW,OAAO;IACtB,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,aAAa,EAAE,WAAW,EAAE,CAAA;IAC5B,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1D,aAAa,EAAE,OAAO,CAAA;IACtB,oBAAoB,EAAE,OAAO,CAAA;IAC7B,uEAAuE;IACvE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,oEAAoE;IACpE,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAA;IACjB,wEAAwE;IACxE,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AAED,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4C/B,CAAA;AAEF,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,4BAAwB,CAAA;AAE7D;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBK,CAAA;AAE1C,2DAA2D;AAC3D,eAAO,MAAM,sBAAsB;;;;;;iBAMjC,CAAA;AAEF;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBD,CAAA;AAE1C,wDAAwD;AACxD,eAAO,MAAM,2BAA2B;;;;EAAwB,CAAA;AAEhE;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBI,CAAA;AAE1C;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAI7B,CAAA"}

package/lib/{wire-zYaXk7IG.js → wire-DE0ooHk0.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 //#region node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/core/core.js
 var _a$1;
 /** A special constant with type `never` */
@@ -6900,11 +6900,16 @@ const BUDGET_STATUS_SCHEMA = object({
 	warnRatio: number().min(0).max(1),
 	refreshIntervalMs: number().int().min(1e3)
 });
+/** Strict wire schema for the optional status session id. */
+const BUDGET_SESSION_ID_SCHEMA = string().optional();
 /**
 * The `budget/status` invocation descriptor, shared verbatim by the host
 * `TYPERT` manifest and the client `TypertRemoteContribution`. Hand-written
 * in the exact shape the Typert generator emits; validated by the typert
-* loader and the client registry at mount time.
+* loader and the client registry at mount time. The optional `sessionId`
+* parameter matches `BudgetService.status(sessionId?)` and the client
+* `remote.budget.status(sessionId?)` — it attributes the snapshot to one
+* session and may be omitted (missing wire fields decode to `undefined`).
 */
 const BUDGET_STATUS_DESCRIPTOR = Object.freeze({
 	id: "dsh-budget#budget/status",
@@ -6912,7 +6917,17 @@ const BUDGET_STATUS_DESCRIPTOR = Object.freeze({
 	namespace: "budget",
 	method: "status",
 	invocation: Object.freeze({ kind: "direct" }),
-	parameters: Object.freeze([]),
+	parameters: Object.freeze([Object.freeze({
+		name: "sessionId",
+		wire: "sessionId",
+		source: "json",
+		codec: Object.freeze({
+			mode: "strict",
+			typeSymbol: "dsh-budget/types#SessionId",
+			schema: BUDGET_SESSION_ID_SCHEMA
+		}),
+		acceptsUndefined: true
+	})]),
 	result: Object.freeze({
 		mode: "strict",
 		typeSymbol: "dsh-budget/types#BudgetStatus",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-budget",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Cost governance for DeepSeek Harness: aggregated token/cost metering per model, session and day, session/daily/monthly budget caps with threshold alerts (desktop notification + webhook) and alert/block/degrade over-limit policies, built-in carbon footprint estimation and per-model latency benchmarks, a Settings budget tab, and the /budget command",
   "repository": {
     "type": "git",
@@ -51,7 +51,6 @@
       "platform": "web",
       "inject": [
         "@deepseek-ai/dsh-client-connection",
-        "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-locale",
         "@deepseek-ai/dsh-client-ui-settings"
       ]
@@ -123,7 +122,21 @@
     "@deepseek-ai/dsh-token-meter": ">=0.1.0-rc.8 <0.2.0",
     "@deepseek-ai/dsh-tools": ">=0.1.0-rc.8 <0.2.0",
     "@deepseek-ai/dsh-typert-protocol": ">=0.1.0-rc.8 <0.2.0",
-    "@deepseek-ai/schemastery": "^3.18.0"
+    "@deepseek-ai/schemastery": "^3.18.0",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.1-rc.2 <0.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-client-connection": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-locale": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-settings": {
+      "optional": true
+    }
   },
   "dependencies": {
     "tsdown": "^0.22.14",
@@ -137,7 +150,6 @@
     "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
     "@deepseek-ai/dsh-client-connection": "0.1.1-rc.2",
     "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
     "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
     "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
     "@deepseek-ai/dsh-commands": "0.1.1-rc.2",
@@ -169,5 +181,9 @@
     "verify:self-contained": "node scripts/verify-self-contained.mjs",
     "verify:artifacts": "node scripts/verify-artifacts.mjs"
   },
-  "license": "Apache-2.0"
+  "license": "Apache-2.0",
+  "funding": {
+    "type": "individual",
+    "url": "https://github.com/sponsors/PerryLink"
+  }
 }