glirastes 0.3.2 → 0.5.0

package/dist/runtime/metrics/cost.js

@@ -0,0 +1,92 @@
+import { z } from 'zod';
+import { RUNTIME_METRIC_LABEL_PATTERN, RUNTIME_PRICING_VERSION_PATTERN, } from '../../contracts/index.js';
+const usdPerMillion = z.number().finite().nonnegative().max(10_000);
+/**
+ * Prices for models whose provider reports no cost. A provider-reported cost
+ * always wins; the table only fills gaps and every estimate names its
+ * `version`. Glirastes ships no default table: prices change, and a stale
+ * table would be wrong without anyone noticing.
+ */
+export const RuntimePriceTableSchema = z.object({
+    version: z.string().regex(RUNTIME_PRICING_VERSION_PATTERN),
+    models: z.record(z.string().regex(RUNTIME_METRIC_LABEL_PATTERN), z.object({
+        inputUsdPerMillion: usdPerMillion,
+        outputUsdPerMillion: usdPerMillion,
+    }).strict()),
+}).strict();
+export const UNKNOWN_TURN_COST = Object.freeze({
+    usd: null,
+    source: null,
+    pricingVersion: null,
+});
+function child(value, key) {
+    return value !== null && typeof value === 'object'
+        ? value[key]
+        : undefined;
+}
+function usableAmount(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value >= 0
+        ? value
+        : null;
+}
+/**
+ * The cost an OpenRouter stream chunk carries (`usage.cost` of the final
+ * chunk), as delivered by `streamText({ includeRawChunks: true })`.
+ */
+export function rawChunkCostUsd(rawValue) {
+    return usableAmount(child(child(rawValue, 'usage'), 'cost'));
+}
+/**
+ * The cost the provider reported for one model step, in USD. Three locations
+ * are read in this order, and they are not equally verified:
+ *
+ * - `providerMetadata.openrouter.usage.cost`, where OpenRouter's official
+ *   provider is documented to put it. Modelled, not measured:
+ *   `@openrouter/ai-sdk-provider` is not a dependency of this package and
+ *   no test runs against it, only hand-written metadata objects.
+ * - `usage.raw.cost`, for a provider that keeps unknown usage fields. Also
+ *   modelled. The OpenAI-compatible provider is not such a provider.
+ * - the raw stream chunk (`rawChunkCostUsd`), the path
+ *   `createOpenAI({ baseURL: 'https://openrouter.ai/api/v1' })` needs.
+ *   Measured in the source of `@ai-sdk/openai` 3.0.53, whose chunk schema
+ *   strips `cost` from `usage.raw`. Whether a live OpenRouter response sends
+ *   `usage.cost` in the final chunk is not verified here.
+ */
+export function providerReportedCostUsd(input) {
+    return usableAmount(child(child(child(input.providerMetadata, 'openrouter'), 'usage'), 'cost'))
+        ?? usableAmount(child(input.usageRaw, 'cost'))
+        ?? usableAmount(input.rawChunkCostUsd);
+}
+export function resolveStepCost(input, priceTable) {
+    const reported = providerReportedCostUsd(input);
+    if (reported !== null) {
+        return { usd: reported, source: 'provider-reported', pricingVersion: null };
+    }
+    const price = input.model && priceTable
+        && Object.hasOwn(priceTable.models, input.model)
+        ? priceTable.models[input.model]
+        : undefined;
+    if (!price || !priceTable)
+        return UNKNOWN_TURN_COST;
+    return {
+        usd: (input.inputTokens * price.inputUsdPerMillion
+            + input.outputTokens * price.outputUsdPerMillion) / 1_000_000,
+        source: 'price-table',
+        pricingVersion: priceTable.version,
+    };
+}
+/**
+ * A turn's cost is known only when every model step's cost is known. Any
+ * estimated step makes the whole turn a price-table cost.
+ */
+export function combineTurnCost(steps) {
+    if (steps.length === 0 || steps.some((step) => step.usd === null)) {
+        return UNKNOWN_TURN_COST;
+    }
+    const usd = steps.reduce((sum, step) => sum + (step.usd ?? 0), 0);
+    const estimated = steps.find((step) => step.source === 'price-table');
+    return estimated
+        ? { usd, source: 'price-table', pricingVersion: estimated.pricingVersion }
+        : { usd, source: 'provider-reported', pricingVersion: null };
+}
+//# sourceMappingURL=cost.js.map

package/dist/runtime/metrics/cost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.js","sourceRoot":"","sources":["../../../src/runtime/metrics/cost.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,GAEhC,MAAM,0BAA0B,CAAC;AAElC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,EAC9C,CAAC,CAAC,MAAM,CAAC;QACP,kBAAkB,EAAE,aAAa;QACjC,mBAAmB,EAAE,aAAa;KACnC,CAAC,CAAC,MAAM,EAAE,CACZ;CACF,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,iBAAiB,GAAoB,MAAM,CAAC,MAAM,CAAC;IAC9D,GAAG,EAAE,IAAI;IACT,MAAM,EAAE,IAAI;IACZ,cAAc,EAAE,IAAI;CACrB,CAAC,CAAC;AAkBH,SAAS,KAAK,CAAC,KAAc,EAAE,GAAW;IACxC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAChD,CAAC,CAAE,KAAiC,CAAC,GAAG,CAAC;QACzC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QACtE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAIvC;IACC,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;WAC1F,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;WAC3C,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAoB,EACpB,UAA8B;IAE9B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,UAAU;WAClC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC;QAChD,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAChC,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU;QAAE,OAAO,iBAAiB,CAAC;IACpD,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,kBAAkB;cAC9C,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,mBAAmB,CAAC,GAAG,SAAS;QAC/D,MAAM,EAAE,aAAa;QACrB,cAAc,EAAE,UAAU,CAAC,OAAO;KACnC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAqC;IAErC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;IACtE,OAAO,SAAS;QACd,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE;QAC1E,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,mBAAmB,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACjE,CAAC"}

package/dist/runtime/metrics/sink.d.ts

@@ -0,0 +1,56 @@
+import type { RuntimeMetricsSink } from './turn-recorder.js';
+export type RuntimeMetricsDropReason = 'invalid' | 'queue-full' | 'send-failed' | 'closed';
+export interface RuntimeMetricsSinkOptions {
+    /** Control-plane base URL (HTTPS, or loopback HTTP for local tests). */
+    controlPlaneUrl: string;
+    /** The app-bound runtime key; sent only in the Authorization header. */
+    apiKey: string;
+    appId: string;
+    environmentId: string;
+    /** Build identifier of the deployed code, e.g. a commit; null if unknown. */
+    buildId?: string | null;
+    /** This process; defaults to a random id per sink. */
+    instanceId?: string;
+    fetch?: typeof globalThis.fetch;
+    /** Events per request, 1–50 (default 50). */
+    maxBatchSize?: number;
+    /** Events waiting for delivery before new ones are dropped (default 1,000). */
+    maxQueueSize?: number;
+    /** Delivery interval (default 5 s). */
+    flushIntervalMs?: number;
+    /** Per-request timeout; a slower Platform loses the batch (default 5 s). */
+    requestTimeoutMs?: number;
+    /** Content-free notice about dropped events, e.g. for local logging. */
+    onDrop?: (drop: {
+        reason: RuntimeMetricsDropReason;
+        count: number;
+    }) => void;
+}
+export interface BatchingRuntimeMetricsSink extends RuntimeMetricsSink {
+    /** Events waiting for delivery. */
+    readonly pending: number;
+}
+/**
+ * Batches turn events and delivers them to the Platform off the turn path.
+ * `record` validates and queues synchronously and never throws; delivery
+ * runs on an unref'd interval or when a batch is full. A failed, rejected or
+ * timed-out request drops its batch: metrics never retry, never block a turn
+ * and never hold the process open.
+ */
+export declare function createRuntimeMetricsSink(options: RuntimeMetricsSinkOptions): BatchingRuntimeMetricsSink;
+/**
+ * The sink of a connected app, or undefined. The key (and the optional
+ * self-hosting URL) come from the environment; the app and environment come
+ * from the connection the runtime looked up (`lookupRuntimeConnection`), so
+ * the sink exists only once that lookup resolved. Standalone apps (no
+ * `GLIRASTES_API_KEY`) get no sink and stay network-silent; an invalid
+ * connection also yields none, because metrics must never stop a chat from
+ * starting. `GLIRASTES_BUILD_ID` (optional) names the deployed build.
+ */
+export declare function createRuntimeMetricsSinkFromEnv(env?: Record<string, string | undefined>, options?: Omit<RuntimeMetricsSinkOptions, 'controlPlaneUrl' | 'apiKey' | 'appId' | 'environmentId' | 'buildId'> & {
+    /** The resolved connection; without it the sink stays absent. */
+    connection?: {
+        appId: string;
+        environmentId: string;
+    };
+}): BatchingRuntimeMetricsSink | undefined;

package/dist/runtime/metrics/sink.js

@@ -0,0 +1,214 @@
+import { trimTrailingSlashes } from '../../contracts/url.js';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { PlatformConnectionDescriptorSchema, RUNTIME_METRIC_EVENT_SCHEMA_VERSION, RUNTIME_METRIC_LABEL_PATTERN, RUNTIME_METRIC_MAX_BATCH, RuntimeMetricEventSchema, } from '../../contracts/index.js';
+import { resolveRuntimeConnectionConfig } from '../runtime-mode.js';
+const label = z.string().regex(RUNTIME_METRIC_LABEL_PATTERN);
+const SinkConfigSchema = z.object({
+    controlPlaneUrl: PlatformConnectionDescriptorSchema.shape.baseUrl,
+    apiKey: z.string().regex(/^\S{8,512}$/),
+    appId: z.uuid(),
+    environmentId: z.uuid(),
+    buildId: label.nullable(),
+    instanceId: label,
+    maxBatchSize: z.number().int().min(1).max(RUNTIME_METRIC_MAX_BATCH),
+    maxQueueSize: z.number().int().min(1).max(100_000),
+    flushIntervalMs: z.number().int().min(100).max(3_600_000),
+    requestTimeoutMs: z.number().int().min(10).max(60_000),
+});
+/**
+ * Batches turn events and delivers them to the Platform off the turn path.
+ * `record` validates and queues synchronously and never throws; delivery
+ * runs on an unref'd interval or when a batch is full. A failed, rejected or
+ * timed-out request drops its batch: metrics never retry, never block a turn
+ * and never hold the process open.
+ */
+export function createRuntimeMetricsSink(options) {
+    const parsed = SinkConfigSchema.safeParse({
+        controlPlaneUrl: options.controlPlaneUrl,
+        apiKey: options.apiKey,
+        appId: options.appId,
+        environmentId: options.environmentId,
+        buildId: options.buildId ?? null,
+        instanceId: options.instanceId ?? randomUUID(),
+        maxBatchSize: options.maxBatchSize ?? RUNTIME_METRIC_MAX_BATCH,
+        maxQueueSize: options.maxQueueSize ?? 1_000,
+        flushIntervalMs: options.flushIntervalMs ?? 5_000,
+        requestTimeoutMs: options.requestTimeoutMs ?? 5_000,
+    });
+    if (!parsed.success) {
+        const paths = parsed.error.issues.map((issue) => issue.path.join('.'));
+        throw new RangeError(`Invalid runtime metrics sink options: ${[...new Set(paths)].join(', ')}`);
+    }
+    const config = parsed.data;
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    const endpoint = `${trimTrailingSlashes(config.controlPlaneUrl)}/v1/runtime/apps/`
+        + `${config.appId}/environments/${config.environmentId}/metrics/events`;
+    const identity = Object.freeze({
+        appId: config.appId,
+        environmentId: config.environmentId,
+        buildId: config.buildId,
+        instanceId: config.instanceId,
+    });
+    // One queue per event type: a batch never mixes types, so a Platform that
+    // does not know `tool_contract_rejected` yet refuses only those batches.
+    // Turns are listed first, so they are sent first whatever arrives first.
+    const queues = new Map([['turn.finished', []]]);
+    const queued = () => [...queues.values()].reduce((sum, events) => sum + events.length, 0);
+    let timer;
+    let inFlight;
+    let flushScheduled = false;
+    let closed = false;
+    const drop = (reason, count) => {
+        try {
+            options.onDrop?.({ reason, count });
+        }
+        catch {
+            // Diagnostics must not reach the turn either.
+        }
+    };
+    const send = async (events) => {
+        try {
+            const body = {
+                schemaVersion: RUNTIME_METRIC_EVENT_SCHEMA_VERSION,
+                events,
+            };
+            const response = await fetchImpl(endpoint, {
+                method: 'POST',
+                headers: {
+                    authorization: `Bearer ${config.apiKey}`,
+                    'content-type': 'application/json',
+                },
+                body: JSON.stringify(body),
+                signal: AbortSignal.timeout(config.requestTimeoutMs),
+            });
+            try {
+                await response.body?.cancel();
+            }
+            catch {
+                // The answer carries nothing the runtime needs.
+            }
+            return response.ok;
+        }
+        catch {
+            return false;
+        }
+    };
+    const flush = () => {
+        if (inFlight)
+            return inFlight;
+        if (queued() === 0)
+            return Promise.resolve();
+        inFlight = (async () => {
+            try {
+                // An event recorded while another type is on the wire may land in a
+                // queue that was already drained: go round again until all are empty.
+                while (queued() > 0) {
+                    for (const queue of queues.values()) {
+                        while (queue.length > 0) {
+                            const batch = queue.splice(0, config.maxBatchSize);
+                            if (!await send(batch))
+                                drop('send-failed', batch.length);
+                        }
+                    }
+                }
+            }
+            finally {
+                inFlight = undefined;
+            }
+        })();
+        return inFlight;
+    };
+    const ensureTimer = () => {
+        if (timer || closed)
+            return;
+        timer = setInterval(() => {
+            void flush();
+        }, config.flushIntervalMs);
+        timer.unref?.();
+    };
+    const scheduleFlush = () => {
+        if (flushScheduled)
+            return;
+        flushScheduled = true;
+        queueMicrotask(() => {
+            flushScheduled = false;
+            void flush();
+        });
+    };
+    return {
+        identity,
+        get pending() {
+            return queued();
+        },
+        record(event) {
+            try {
+                if (closed) {
+                    drop('closed', 1);
+                    return;
+                }
+                const checked = RuntimeMetricEventSchema.safeParse(event);
+                if (!checked.success
+                    || checked.data.appId !== identity.appId
+                    || checked.data.environmentId !== identity.environmentId) {
+                    drop('invalid', 1);
+                    return;
+                }
+                if (queued() >= config.maxQueueSize) {
+                    drop('queue-full', 1);
+                    return;
+                }
+                const queue = queues.get(checked.data.eventType) ?? [];
+                queues.set(checked.data.eventType, queue);
+                queue.push(checked.data);
+                ensureTimer();
+                if (queue.length >= config.maxBatchSize)
+                    scheduleFlush();
+            }
+            catch {
+                // Recording is best effort and must never fail a turn.
+            }
+        },
+        flush,
+        async close() {
+            closed = true;
+            if (timer) {
+                clearInterval(timer);
+                timer = undefined;
+            }
+            await flush();
+        },
+    };
+}
+/**
+ * The sink of a connected app, or undefined. The key (and the optional
+ * self-hosting URL) come from the environment; the app and environment come
+ * from the connection the runtime looked up (`lookupRuntimeConnection`), so
+ * the sink exists only once that lookup resolved. Standalone apps (no
+ * `GLIRASTES_API_KEY`) get no sink and stay network-silent; an invalid
+ * connection also yields none, because metrics must never stop a chat from
+ * starting. `GLIRASTES_BUILD_ID` (optional) names the deployed build.
+ */
+export function createRuntimeMetricsSinkFromEnv(env = process.env, options = {}) {
+    const { connection, ...sinkOptions } = options;
+    if (!connection)
+        return undefined;
+    const buildId = env.GLIRASTES_BUILD_ID?.trim();
+    try {
+        const config = resolveRuntimeConnectionConfig(env);
+        if (!config)
+            return undefined;
+        return createRuntimeMetricsSink({
+            ...sinkOptions,
+            controlPlaneUrl: config.baseUrl,
+            apiKey: config.apiKey,
+            appId: connection.appId,
+            environmentId: connection.environmentId,
+            buildId: buildId && RUNTIME_METRIC_LABEL_PATTERN.test(buildId) ? buildId : null,
+        });
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=sink.js.map

package/dist/runtime/metrics/sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sink.js","sourceRoot":"","sources":["../../../src/runtime/metrics/sink.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,kCAAkC,EAClC,mCAAmC,EACnC,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,GAGzB,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAqCpE,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAE7D,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,eAAe,EAAE,kCAAkC,CAAC,KAAK,CAAC,OAAO;IACjE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE;IACvB,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE;IACzB,UAAU,EAAE,KAAK;IACjB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACnE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAClD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IACzD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;CACvD,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAkC;IAElC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC;QACxC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,UAAU,EAAE;QAC9C,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,wBAAwB;QAC9D,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,KAAK;QAC3C,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,KAAK;QACjD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,KAAK;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,MAAM,IAAI,UAAU,CAAC,yCAAyC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,eAAe,CAAC,mBAAmB;UAC9E,GAAG,MAAM,CAAC,KAAK,iBAAiB,MAAM,CAAC,aAAa,iBAAiB,CAAC;IAC1E,MAAM,QAAQ,GAA2B,MAAM,CAAC,MAAM,CAAC;QACrD,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IACH,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAwD,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1F,IAAI,KAAiD,CAAC;IACtD,IAAI,QAAmC,CAAC;IACxC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,IAAI,GAAG,CAAC,MAAgC,EAAE,KAAa,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,MAA4B,EAAoB,EAAE;QACpE,IAAI,CAAC;YACH,MAAM,IAAI,GAA+B;gBACvC,aAAa,EAAE,mCAAmC;gBAClD,MAAM;aACP,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;gBACzC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;oBACxC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;aACrD,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;YACD,OAAO,QAAQ,CAAC,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAkB,EAAE;QAChC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,IAAI,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7C,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,IAAI,CAAC;gBACH,oEAAoE;gBACpE,sEAAsE;gBACtE,OAAO,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;oBACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;wBACpC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACxB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;4BACnD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC;gCAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBAC5D,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,QAAQ,GAAG,SAAS,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,IAAI,KAAK,IAAI,MAAM;YAAE,OAAO;QAC5B,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YACvB,KAAK,KAAK,EAAE,CAAC;QACf,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3B,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,cAAc;YAAE,OAAO;QAC3B,cAAc,GAAG,IAAI,CAAC;QACtB,cAAc,CAAC,GAAG,EAAE;YAClB,cAAc,GAAG,KAAK,CAAC;YACvB,KAAK,KAAK,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,IAAI,OAAO;YACT,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,KAAK;YACV,IAAI,CAAC;gBACH,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;oBAClB,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC1D,IACE,CAAC,OAAO,CAAC,OAAO;uBACb,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;uBACrC,OAAO,CAAC,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,EACxD,CAAC;oBACD,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBACpC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;oBACtB,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACvD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC1C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACzB,WAAW,EAAE,CAAC;gBACd,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY;oBAAE,aAAa,EAAE,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,uDAAuD;YACzD,CAAC;QACH,CAAC;QACD,KAAK;QACL,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;YACD,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAA0C,OAAO,CAAC,GAAG,EACrD,UAMI,EAAE;IAEN,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IAC/C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,OAAO,wBAAwB,CAAC;YAC9B,GAAG,WAAW;YACd,eAAe,EAAE,MAAM,CAAC,OAAO;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,OAAO,EAAE,OAAO,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;SAChF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/runtime/metrics/turn-recorder.d.ts

@@ -0,0 +1,62 @@
+import { type RuntimeMetricEvent, type RuntimeTurnCost, type RuntimeTurnErrorCode, type RuntimeTurnStatus, type TechnicalRuntimeEventV2, type ToolContractRejectedEvent } from '../../contracts/index.js';
+import type { TurnSnapshot } from '../turn-snapshot.js';
+/** Who reports: fixed per sink, attached to every event. */
+export interface RuntimeMetricsIdentity {
+    readonly appId: string;
+    readonly environmentId: string;
+    readonly buildId: string | null;
+    readonly instanceId: string;
+}
+/**
+ * Receives finished turns and contract rejections. `record` must return
+ * immediately and never throw: delivery happens later, off the turn, and is
+ * dropped on failure.
+ */
+export interface RuntimeMetricsSink {
+    readonly identity: RuntimeMetricsIdentity;
+    record(event: RuntimeMetricEvent): void;
+    flush(): Promise<void>;
+    close(): Promise<void>;
+}
+/** One model step, already reduced to content-free numbers and tool names. */
+export interface TurnMetricsStep {
+    model: string | null;
+    inputTokens: number;
+    outputTokens: number;
+    cost: RuntimeTurnCost;
+    /** Model-facing names of every tool call in the step (one entry per call). */
+    toolNames: ReadonlyArray<string>;
+    /** Model-facing names of the calls that failed (one entry per failure). */
+    failedToolNames: ReadonlyArray<string>;
+}
+export interface TurnMetricsOutcome {
+    status: RuntimeTurnStatus;
+    errorCode: RuntimeTurnErrorCode | null;
+}
+export interface TurnMetricsRecorder {
+    /** The first streamed chunk of the turn; later calls do nothing. */
+    markFirstChunk(): void;
+    recordStep(step: TurnMetricsStep): void;
+    /**
+     * Builds the turn's event and hands it to the sink exactly once. Returns
+     * the event, or undefined when the turn was already finished. Never throws.
+     */
+    finish(outcome: TurnMetricsOutcome): TechnicalRuntimeEventV2 | undefined;
+    /**
+     * An endpoint refused a call its tool schema accepted (spec 4.7). Hands a
+     * content-free `tool_contract_rejected` event to the sink right away and
+     * returns it; undefined for a tool outside the pinned snapshot. The name is
+     * the manifest name or its model-facing encoding. Never throws.
+     */
+    recordToolContractRejected(toolName: string, httpStatus: 400 | 422): ToolContractRejectedEvent | undefined;
+}
+export interface TurnMetricsRecorderOptions {
+    sink: RuntimeMetricsSink;
+    /** Pinned snapshot: names the revision and maps tool names to tool ids. */
+    snapshot?: TurnSnapshot;
+    /** Turn start (request start), in the clock of `now`. */
+    startedAtMs: number;
+    now?: () => number;
+    createEventId?: () => string;
+}
+export declare function createTurnMetricsRecorder(options: TurnMetricsRecorderOptions): TurnMetricsRecorder;

package/dist/runtime/metrics/turn-recorder.js

@@ -0,0 +1,170 @@
+import { randomUUID } from 'node:crypto';
+import { RUNTIME_METRIC_LABEL_PATTERN, RUNTIME_METRIC_MAX_COUNT, RUNTIME_METRIC_MAX_TOOLS, TechnicalRuntimeEventV2Schema, ToolContractRejectedEventSchema, } from '../../contracts/index.js';
+import { modelFacingToolName } from '../local-tool-bindings.js';
+import { combineTurnCost } from './cost.js';
+const MAX_DURATION_MS = 86_400_000;
+const MAX_CALLS = 10_000;
+function bounded(value, max) {
+    return Number.isFinite(value) ? Math.min(max, Math.max(0, Math.round(value))) : 0;
+}
+function technicalLabel(value) {
+    return value !== null && RUNTIME_METRIC_LABEL_PATTERN.test(value) ? value : null;
+}
+export function createTurnMetricsRecorder(options) {
+    const now = options.now ?? Date.now;
+    const createEventId = options.createEventId ?? randomUUID;
+    const manifestTools = options.snapshot?.manifestRevision.tools ?? [];
+    const toolIdByName = new Map(manifestTools.map((tool) => [
+        modelFacingToolName(tool.name),
+        tool.toolId,
+    ]));
+    const schemaDigestByName = new Map(manifestTools.map((tool) => [
+        modelFacingToolName(tool.name),
+        tool.inputSchemaDigest,
+    ]));
+    const costs = [];
+    const usage = new Map();
+    let firstChunkAtMs;
+    let model = null;
+    let inputTokens = 0;
+    let outputTokens = 0;
+    let toolCallCount = 0;
+    let toolErrorCount = 0;
+    let finished = false;
+    const usageOf = (toolName) => {
+        const toolId = toolIdByName.get(toolName);
+        if (!toolId)
+            return undefined;
+        let entry = usage.get(toolId);
+        if (!entry) {
+            entry = { calls: 0, errors: 0 };
+            usage.set(toolId, entry);
+        }
+        return entry;
+    };
+    const listedTools = () => [...usage.entries()]
+        .map(([toolId, entry]) => ({
+        toolId,
+        calls: Math.min(MAX_CALLS, entry.calls),
+        errors: Math.min(MAX_CALLS, entry.errors, entry.calls),
+    }))
+        .filter((tool) => tool.calls > 0)
+        .sort((left, right) => right.calls - left.calls
+        || left.toolId.localeCompare(right.toolId))
+        .slice(0, RUNTIME_METRIC_MAX_TOOLS)
+        .sort((left, right) => left.toolId.localeCompare(right.toolId));
+    const build = (outcome) => {
+        const endedAtMs = now();
+        const totalMs = bounded(endedAtMs - options.startedAtMs, MAX_DURATION_MS);
+        const firstTokenMs = firstChunkAtMs === undefined
+            ? null
+            : Math.min(totalMs, bounded(firstChunkAtMs - options.startedAtMs, MAX_DURATION_MS));
+        const calls = Math.min(MAX_CALLS, toolCallCount);
+        const parsed = TechnicalRuntimeEventV2Schema.safeParse({
+            schemaVersion: 2,
+            eventId: createEventId(),
+            eventType: 'turn.finished',
+            occurredAt: new Date(endedAtMs).toISOString(),
+            appId: options.sink.identity.appId,
+            environmentId: options.sink.identity.environmentId,
+            buildId: options.sink.identity.buildId,
+            instanceId: options.sink.identity.instanceId,
+            revisionId: options.snapshot?.agentRevision.revisionId ?? null,
+            model,
+            status: outcome.status,
+            errorCode: outcome.errorCode,
+            inputTokens: bounded(inputTokens, RUNTIME_METRIC_MAX_COUNT),
+            outputTokens: bounded(outputTokens, RUNTIME_METRIC_MAX_COUNT),
+            cost: combineTurnCost(costs),
+            latency: { firstTokenMs, totalMs },
+            toolCallCount: calls,
+            toolErrorCount: Math.min(calls, toolErrorCount),
+            tools: listedTools(),
+        });
+        return parsed.success ? parsed.data : undefined;
+    };
+    return {
+        markFirstChunk() {
+            firstChunkAtMs ??= now();
+        },
+        recordStep(step) {
+            if (finished)
+                return;
+            model = technicalLabel(step.model) ?? model;
+            inputTokens += Number.isFinite(step.inputTokens) ? step.inputTokens : 0;
+            outputTokens += Number.isFinite(step.outputTokens) ? step.outputTokens : 0;
+            costs.push(step.cost);
+            toolCallCount += step.toolNames.length;
+            toolErrorCount += step.failedToolNames.length;
+            for (const name of step.toolNames) {
+                const entry = usageOf(name);
+                if (entry)
+                    entry.calls += 1;
+            }
+            for (const name of step.failedToolNames) {
+                const entry = usageOf(name);
+                if (entry)
+                    entry.errors += 1;
+            }
+        },
+        recordToolContractRejected(toolName, httpStatus) {
+            try {
+                // Endpoint tools may carry the dotted definitionId as `toolName`; the
+                // maps are keyed by the model-facing encoding (idempotent for names
+                // that are already encoded).
+                const modelName = modelFacingToolName(toolName);
+                const toolId = toolIdByName.get(modelName);
+                const inputSchemaDigest = schemaDigestByName.get(modelName);
+                if (!toolId || !inputSchemaDigest)
+                    return undefined;
+                const parsed = ToolContractRejectedEventSchema.safeParse({
+                    schemaVersion: 2,
+                    eventId: createEventId(),
+                    eventType: 'tool_contract_rejected',
+                    occurredAt: new Date(now()).toISOString(),
+                    appId: options.sink.identity.appId,
+                    environmentId: options.sink.identity.environmentId,
+                    buildId: options.sink.identity.buildId,
+                    instanceId: options.sink.identity.instanceId,
+                    revisionId: options.snapshot?.agentRevision.revisionId ?? null,
+                    toolId,
+                    inputSchemaDigest,
+                    httpStatus,
+                });
+                if (!parsed.success)
+                    return undefined;
+                try {
+                    options.sink.record(parsed.data);
+                }
+                catch {
+                    // A sink must never fail a tool call.
+                }
+                return parsed.data;
+            }
+            catch {
+                return undefined;
+            }
+        },
+        finish(outcome) {
+            if (finished)
+                return undefined;
+            finished = true;
+            try {
+                const event = build(outcome);
+                if (!event)
+                    return undefined;
+                try {
+                    options.sink.record(event);
+                }
+                catch {
+                    // A sink must never fail a turn.
+                }
+                return event;
+            }
+            catch {
+                return undefined;
+            }
+        },
+    };
+}
+//# sourceMappingURL=turn-recorder.js.map

package/dist/runtime/metrics/turn-recorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-recorder.js","sourceRoot":"","sources":["../../../src/runtime/metrics/turn-recorder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,6BAA6B,EAC7B,+BAA+B,GAOhC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,eAAe,GAAG,UAAU,CAAC;AACnC,MAAM,SAAS,GAAG,MAAM,CAAC;AAmEzB,SAAS,OAAO,CAAC,KAAa,EAAE,GAAW;IACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC1C,OAAO,KAAK,KAAK,IAAI,IAAI,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAmC;IAEnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,UAAU,CAAC;IAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,KAAK,IAAI,EAAE,CAAC;IACrE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvD,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,MAAM;KACH,CAAC,CAAC,CAAC;IACb,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7D,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,iBAAiB;KACd,CAAC,CAAC,CAAC;IACb,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6C,CAAC;IACnE,IAAI,cAAkC,CAAC;IACvC,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SAC3C,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,MAAM;QACN,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC;QACvC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC;KACvD,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;SAChC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;WAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;SAC5C,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC;SAClC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAElE,MAAM,KAAK,GAAG,CAAC,OAA2B,EAAuC,EAAE;QACjF,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,cAAc,KAAK,SAAS;YAC/C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC;YACrD,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,aAAa,EAAE;YACxB,SAAS,EAAE,eAAe;YAC1B,UAAU,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC7C,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK;YAClC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa;YAClD,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO;YACtC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU;YAC5C,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,IAAI,IAAI;YAC9D,KAAK;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,wBAAwB,CAAC;YAC3D,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,wBAAwB,CAAC;YAC7D,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC;YAC5B,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE;YAClC,aAAa,EAAE,KAAK;YACpB,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC;YAC/C,KAAK,EAAE,WAAW,EAAE;SACrB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC,CAAC;IAEF,OAAO;QACL,cAAc;YACZ,cAAc,KAAK,GAAG,EAAE,CAAC;QAC3B,CAAC;QAED,UAAU,CAAC,IAAI;YACb,IAAI,QAAQ;gBAAE,OAAO;YACrB,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;YAC5C,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,YAAY,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,aAAa,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACvC,cAAc,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YAC9C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC5B,IAAI,KAAK;oBAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;YAC9B,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC5B,IAAI,KAAK;oBAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,0BAA0B,CAAC,QAAQ,EAAE,UAAU;YAC7C,IAAI,CAAC;gBACH,sEAAsE;gBACtE,oEAAoE;gBACpE,6BAA6B;gBAC7B,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC5D,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB;oBAAE,OAAO,SAAS,CAAC;gBACpD,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC;oBACvD,aAAa,EAAE,CAAC;oBAChB,OAAO,EAAE,aAAa,EAAE;oBACxB,SAAS,EAAE,wBAAwB;oBACnC,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;oBACzC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK;oBAClC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa;oBAClD,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO;oBACtC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU;oBAC5C,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,IAAI,IAAI;oBAC9D,MAAM;oBACN,iBAAiB;oBACjB,UAAU;iBACX,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO,SAAS,CAAC;gBACtC,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACP,sCAAsC;gBACxC,CAAC;gBACD,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,CAAC,OAAO;YACZ,IAAI,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAC/B,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC7B,IAAI,CAAC,KAAK;oBAAE,OAAO,SAAS,CAAC;gBAC7B,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;gBACnC,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/offline-execution-lease.d.ts

@@ -0,0 +1,27 @@
+import { type ExecutionBudget, type ExecutionLease, type ToolRiskClass } from '../contracts/index.js';
+import { type RuntimePublicKeyProvider } from '../sync/signature-verifier.js';
+export interface OfflineExecutionLeaseScope {
+    tenantId: string;
+    targetAppId: string;
+    environmentId: string;
+    runnerId: string;
+    deploymentId: string;
+    agentRevisionId: string;
+    triggerId: string;
+}
+export interface OfflineExecutionLeaseAuthorization {
+    leaseId: string;
+    budget: ExecutionBudget;
+}
+export declare class OfflineExecutionLeaseAuthorizer {
+    private readonly verifier;
+    constructor(keys: RuntimePublicKeyProvider);
+    authorize(input: {
+        lease: ExecutionLease;
+        scope: OfflineExecutionLeaseScope;
+        riskClass: ToolRiskClass;
+        requiresApproval: boolean;
+        at?: Date;
+    }): Promise<OfflineExecutionLeaseAuthorization>;
+    private assertScope;
+}