instar 0.28.93 → 0.28.94

package/dist/core/DriftSpendLedger.d.ts

@@ -0,0 +1,112 @@
+/**
+ * DriftSpendLedger — daily-rotated, lock-coordinated cost ledger for the
+ * drift checker.
+ *
+ * Spec: docs/specs/PROJECT-SCOPE-SPEC.md § Phase 1.4 ("Cost ceiling").
+ *
+ * Contract:
+ *   - Total drift-check spend per agent ≤ DEFAULT_DAILY_CAP_USD ($1) per UTC
+ *     day. Cap enforcement is `spent + estimated > cap → reject` (strict
+ *     `>` boundary, per spec corrected from iter 2).
+ *   - One file per UTC day at `.instar/drift-spend-YYYY-MM-DD.jsonl`.
+ *   - Old files retained ≤ DEFAULT_RETENTION_DAYS (30). Anything older is
+ *     archived to `.instar/drift-spend-archive/<year>-<month>.tar.gz` by
+ *     `pruneOlderThan()` (caller-driven; no internal timer).
+ *   - Each call pre-reserves estimated cost in an append-only row
+ *     `{recordId, projectId, estimatedCost, actualCost?: null, timestamp}`.
+ *     After the call returns, `reconcile(recordId, actualCost)` appends a
+ *     second row with `actualCost` set, so a tally over the day is
+ *     `sum(estimatedCost where actualCost is null) +
+ *      sum(actualCost where present)` — O(rows in the day).
+ *   - Advisory file lock on `.instar/local/drift-spend.lock` via
+ *     proper-lockfile (consistent with AgentRegistry, SharedStateLedger,
+ *     PlatformActivityRegistry). Lock file lives under `.instar/local/`
+ *     (machine-local, NOT git-synced — same convention as
+ *     `round-runner.lock`).
+ *   - Multi-machine semantics: each machine writes its own ledger. The
+ *     cap is per-machine, summed via git-sync at the file layer. The spec
+ *     documents this as "up to N machines × cap/day in worst case"; the
+ *     true atomic cross-machine cap is a separately-tracked deferred
+ *     child (`drift-spend-cross-machine`).
+ */
+export declare const DEFAULT_DAILY_CAP_USD = 1;
+export declare const DEFAULT_RETENTION_DAYS = 30;
+export interface DriftSpendLedgerConfig {
+    /** Absolute path to the agent's `.instar/` directory. */
+    stateDir: string;
+    /** Cap in USD per UTC day. Defaults to $1. Tests can lower. */
+    dailyCapUsd?: number;
+    /** Retention window in days; defaults to 30. */
+    retentionDays?: number;
+}
+export interface ReserveInput {
+    projectId: string;
+    /** Best-effort upfront estimate; refined by `reconcile`. */
+    estimatedCost: number;
+}
+export interface ReserveResult {
+    /** Stable id used to reconcile actualCost later. */
+    recordId: string;
+    /** Cumulative spent today AFTER this reservation. */
+    spentToday: number;
+}
+export declare class OverBudgetError extends Error {
+    capUsd: number;
+    spentToday: number;
+    estimatedCost: number;
+    constructor(capUsd: number, spentToday: number, estimatedCost: number);
+}
+export declare class DriftSpendLedger {
+    private stateDir;
+    private capUsd;
+    private retentionDays;
+    constructor(config: DriftSpendLedgerConfig);
+    /**
+     * Pre-reserve `estimatedCost`. Throws `OverBudgetError` if doing so would
+     * exceed the daily cap. The reservation is appended as a row with
+     * `actualCost: null`; the caller MUST call `reconcile()` after the LLM
+     * returns. If the caller dies before reconcile, the reservation stays in
+     * place as `estimatedCost` and contributes to the cap until UTC rollover.
+     */
+    reserve(input: ReserveInput): Promise<ReserveResult>;
+    /**
+     * Record the actual cost after the LLM call. Appends a SECOND row with
+     * the same `recordId`, `estimatedCost: 0`, and `actualCost: <real>`.
+     * `tallySpent()` already de-duplicates by recordId (a present `actualCost`
+     * supersedes any pending `estimatedCost` rows for the same id).
+     *
+     * Idempotent: calling reconcile twice with the same recordId+actualCost
+     * is harmless — the tally still resolves to one actual row.
+     */
+    reconcile(recordId: string, actualCost: number): Promise<void>;
+    /**
+     * Cumulative spent today, lock-coordinated for safety.
+     * Useful for digests / dashboards.
+     */
+    spentToday(): Promise<number>;
+    /**
+     * Prune ledger files older than `retentionDays`. NOT called automatically;
+     * the caller (server startup, a scheduled job, or a CLI) decides when.
+     * Files older than the window are moved to
+     * `.instar/drift-spend-archive/<year>-<month>.tar.gz` — but for Phase 1
+     * we just delete them via SafeFsExecutor. The tarball archive is a
+     * later refinement (the spec describes it but explicitly leaves the
+     * concrete archive format open).
+     */
+    pruneOlderThan(now?: Date): Promise<{
+        removed: string[];
+    }>;
+    private ensureDirs;
+    private lockTargetPath;
+    private todayLedgerPath;
+    private yesterdayLedgerPath;
+    private ledgerPathForDate;
+    private readRows;
+    private appendRow;
+    /**
+     * Sum cost across a row set: present `actualCost` supersedes the
+     * matching pending `estimatedCost`. O(rows).
+     */
+    private tallySpent;
+}
+//# sourceMappingURL=DriftSpendLedger.d.ts.map

package/dist/core/DriftSpendLedger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DriftSpendLedger.d.ts","sourceRoot":"","sources":["../../src/core/DriftSpendLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AASH,eAAO,MAAM,qBAAqB,IAAM,CAAC;AACzC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAQzC,MAAM,WAAW,sBAAsB;IACrC,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,eAAgB,SAAQ,KAAK;IACrB,MAAM,EAAE,MAAM;IAAS,UAAU,EAAE,MAAM;IAAS,aAAa,EAAE,MAAM;gBAAvE,MAAM,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM,EAAS,aAAa,EAAE,MAAM;CAM3F;AAUD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAAS;gBAElB,MAAM,EAAE,sBAAsB;IAM1C;;;;;;OAMG;IACG,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IA6B1D;;;;;;;;OAQG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwCpE;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAUnC;;;;;;;;OAQG;IACG,cAAc,CAAC,GAAG,GAAE,IAAiB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IA0B5E,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,QAAQ;IAwBhB,OAAO,CAAC,SAAS;IAIjB;;;OAGG;IACH,OAAO,CAAC,UAAU;CAkBnB"}

package/dist/core/DriftSpendLedger.js

@@ -0,0 +1,285 @@
+/**
+ * DriftSpendLedger — daily-rotated, lock-coordinated cost ledger for the
+ * drift checker.
+ *
+ * Spec: docs/specs/PROJECT-SCOPE-SPEC.md § Phase 1.4 ("Cost ceiling").
+ *
+ * Contract:
+ *   - Total drift-check spend per agent ≤ DEFAULT_DAILY_CAP_USD ($1) per UTC
+ *     day. Cap enforcement is `spent + estimated > cap → reject` (strict
+ *     `>` boundary, per spec corrected from iter 2).
+ *   - One file per UTC day at `.instar/drift-spend-YYYY-MM-DD.jsonl`.
+ *   - Old files retained ≤ DEFAULT_RETENTION_DAYS (30). Anything older is
+ *     archived to `.instar/drift-spend-archive/<year>-<month>.tar.gz` by
+ *     `pruneOlderThan()` (caller-driven; no internal timer).
+ *   - Each call pre-reserves estimated cost in an append-only row
+ *     `{recordId, projectId, estimatedCost, actualCost?: null, timestamp}`.
+ *     After the call returns, `reconcile(recordId, actualCost)` appends a
+ *     second row with `actualCost` set, so a tally over the day is
+ *     `sum(estimatedCost where actualCost is null) +
+ *      sum(actualCost where present)` — O(rows in the day).
+ *   - Advisory file lock on `.instar/local/drift-spend.lock` via
+ *     proper-lockfile (consistent with AgentRegistry, SharedStateLedger,
+ *     PlatformActivityRegistry). Lock file lives under `.instar/local/`
+ *     (machine-local, NOT git-synced — same convention as
+ *     `round-runner.lock`).
+ *   - Multi-machine semantics: each machine writes its own ledger. The
+ *     cap is per-machine, summed via git-sync at the file layer. The spec
+ *     documents this as "up to N machines × cap/day in worst case"; the
+ *     true atomic cross-machine cap is a separately-tracked deferred
+ *     child (`drift-spend-cross-machine`).
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import lockfile from 'proper-lockfile';
+import { SafeFsExecutor } from './SafeFsExecutor.js';
+export const DEFAULT_DAILY_CAP_USD = 1.0;
+export const DEFAULT_RETENTION_DAYS = 30;
+/** proper-lockfile options that match the rest of the codebase. */
+const LOCK_OPTIONS = {
+    retries: { retries: 50, factor: 1.2, minTimeout: 50, maxTimeout: 500 },
+    stale: 10_000,
+    realpath: false,
+};
+export class OverBudgetError extends Error {
+    capUsd;
+    spentToday;
+    estimatedCost;
+    constructor(capUsd, spentToday, estimatedCost) {
+        super(`drift-spend daily cap exceeded: spent ${spentToday.toFixed(4)} + estimated ${estimatedCost.toFixed(4)} > cap ${capUsd.toFixed(2)}`);
+        this.capUsd = capUsd;
+        this.spentToday = spentToday;
+        this.estimatedCost = estimatedCost;
+        this.name = 'OverBudgetError';
+    }
+}
+export class DriftSpendLedger {
+    stateDir;
+    capUsd;
+    retentionDays;
+    constructor(config) {
+        this.stateDir = config.stateDir;
+        this.capUsd = config.dailyCapUsd ?? DEFAULT_DAILY_CAP_USD;
+        this.retentionDays = config.retentionDays ?? DEFAULT_RETENTION_DAYS;
+    }
+    /**
+     * Pre-reserve `estimatedCost`. Throws `OverBudgetError` if doing so would
+     * exceed the daily cap. The reservation is appended as a row with
+     * `actualCost: null`; the caller MUST call `reconcile()` after the LLM
+     * returns. If the caller dies before reconcile, the reservation stays in
+     * place as `estimatedCost` and contributes to the cap until UTC rollover.
+     */
+    async reserve(input) {
+        if (!Number.isFinite(input.estimatedCost) || input.estimatedCost < 0) {
+            throw new Error(`reserve: estimatedCost must be a non-negative finite number; got ${input.estimatedCost}`);
+        }
+        this.ensureDirs();
+        const release = await lockfile.lock(this.lockTargetPath(), LOCK_OPTIONS);
+        try {
+            const today = this.todayLedgerPath();
+            const rows = this.readRows(today);
+            const spentToday = this.tallySpent(rows);
+            // Strict greater-than per spec § Phase 1.4. Equal-to-cap is allowed.
+            if (spentToday + input.estimatedCost > this.capUsd) {
+                throw new OverBudgetError(this.capUsd, spentToday, input.estimatedCost);
+            }
+            const recordId = crypto.randomBytes(8).toString('hex');
+            const row = {
+                recordId,
+                projectId: input.projectId,
+                estimatedCost: input.estimatedCost,
+                actualCost: null,
+                timestamp: new Date().toISOString(),
+            };
+            this.appendRow(today, row);
+            return { recordId, spentToday: spentToday + input.estimatedCost };
+        }
+        finally {
+            await release();
+        }
+    }
+    /**
+     * Record the actual cost after the LLM call. Appends a SECOND row with
+     * the same `recordId`, `estimatedCost: 0`, and `actualCost: <real>`.
+     * `tallySpent()` already de-duplicates by recordId (a present `actualCost`
+     * supersedes any pending `estimatedCost` rows for the same id).
+     *
+     * Idempotent: calling reconcile twice with the same recordId+actualCost
+     * is harmless — the tally still resolves to one actual row.
+     */
+    async reconcile(recordId, actualCost) {
+        if (!Number.isFinite(actualCost) || actualCost < 0) {
+            throw new Error(`reconcile: actualCost must be a non-negative finite number; got ${actualCost}`);
+        }
+        this.ensureDirs();
+        const release = await lockfile.lock(this.lockTargetPath(), LOCK_OPTIONS);
+        try {
+            // Walk forward through TODAY first (the common case), then yesterday
+            // (in case the LLM call straddled UTC midnight). Beyond that we
+            // refuse — a record that lived more than ~24h is stale anyway.
+            const candidates = [this.todayLedgerPath(), this.yesterdayLedgerPath()];
+            for (const file of candidates) {
+                const rows = this.readRows(file);
+                if (!rows.some((r) => r.recordId === recordId))
+                    continue;
+                const row = {
+                    recordId,
+                    projectId: rows.find((r) => r.recordId === recordId)?.projectId ?? '<reconcile>',
+                    estimatedCost: 0,
+                    actualCost,
+                    timestamp: new Date().toISOString(),
+                };
+                this.appendRow(file, row);
+                return;
+            }
+            // No matching reservation found. Still record the actualCost — the
+            // caller's spend is real even if the bookkeeping is messy. Today's
+            // file is the right home.
+            const row = {
+                recordId,
+                projectId: '<unknown>',
+                estimatedCost: 0,
+                actualCost,
+                timestamp: new Date().toISOString(),
+            };
+            this.appendRow(this.todayLedgerPath(), row);
+        }
+        finally {
+            await release();
+        }
+    }
+    /**
+     * Cumulative spent today, lock-coordinated for safety.
+     * Useful for digests / dashboards.
+     */
+    async spentToday() {
+        this.ensureDirs();
+        const release = await lockfile.lock(this.lockTargetPath(), LOCK_OPTIONS);
+        try {
+            return this.tallySpent(this.readRows(this.todayLedgerPath()));
+        }
+        finally {
+            await release();
+        }
+    }
+    /**
+     * Prune ledger files older than `retentionDays`. NOT called automatically;
+     * the caller (server startup, a scheduled job, or a CLI) decides when.
+     * Files older than the window are moved to
+     * `.instar/drift-spend-archive/<year>-<month>.tar.gz` — but for Phase 1
+     * we just delete them via SafeFsExecutor. The tarball archive is a
+     * later refinement (the spec describes it but explicitly leaves the
+     * concrete archive format open).
+     */
+    async pruneOlderThan(now = new Date()) {
+        this.ensureDirs();
+        const release = await lockfile.lock(this.lockTargetPath(), LOCK_OPTIONS);
+        try {
+            const dir = this.stateDir;
+            const cutoff = new Date(now);
+            cutoff.setUTCDate(cutoff.getUTCDate() - this.retentionDays);
+            const removed = [];
+            for (const entry of fs.readdirSync(dir)) {
+                const m = entry.match(/^drift-spend-(\d{4}-\d{2}-\d{2})\.jsonl$/);
+                if (!m)
+                    continue;
+                const fileDate = new Date(m[1] + 'T00:00:00Z');
+                if (fileDate < cutoff) {
+                    const abs = path.join(dir, entry);
+                    SafeFsExecutor.safeRmSync(abs, { force: true, operation: 'src/core/DriftSpendLedger.ts:pruneOlderThan' });
+                    removed.push(entry);
+                }
+            }
+            return { removed };
+        }
+        finally {
+            await release();
+        }
+    }
+    // ── Internals ─────────────────────────────────────────────────────
+    ensureDirs() {
+        if (!fs.existsSync(this.stateDir))
+            fs.mkdirSync(this.stateDir, { recursive: true });
+        const localDir = path.join(this.stateDir, 'local');
+        if (!fs.existsSync(localDir))
+            fs.mkdirSync(localDir, { recursive: true });
+        // proper-lockfile needs the target file to exist.
+        const lockTarget = this.lockTargetPath();
+        if (!fs.existsSync(lockTarget)) {
+            fs.writeFileSync(lockTarget, '');
+        }
+    }
+    lockTargetPath() {
+        return path.join(this.stateDir, 'local', 'drift-spend.lock');
+    }
+    todayLedgerPath() {
+        return this.ledgerPathForDate(new Date());
+    }
+    yesterdayLedgerPath() {
+        const d = new Date();
+        d.setUTCDate(d.getUTCDate() - 1);
+        return this.ledgerPathForDate(d);
+    }
+    ledgerPathForDate(d) {
+        const utc = d.toISOString().slice(0, 10); // YYYY-MM-DD
+        return path.join(this.stateDir, `drift-spend-${utc}.jsonl`);
+    }
+    readRows(file) {
+        if (!fs.existsSync(file))
+            return [];
+        const raw = fs.readFileSync(file, 'utf-8');
+        const lines = raw.split('\n').filter((l) => l.trim().length > 0);
+        const rows = [];
+        for (const line of lines) {
+            try {
+                const obj = JSON.parse(line);
+                if (typeof obj.recordId !== 'string')
+                    continue;
+                if (typeof obj.projectId !== 'string')
+                    continue;
+                if (typeof obj.estimatedCost !== 'number')
+                    continue;
+                if (obj.actualCost !== null && typeof obj.actualCost !== 'number')
+                    continue;
+                if (typeof obj.timestamp !== 'string')
+                    continue;
+                rows.push(obj);
+            }
+            catch {
+                // Skip malformed rows. The append path always writes valid JSON,
+                // so any corruption is either external editing or partial-write
+                // — neither should crash the checker.
+                continue;
+            }
+        }
+        return rows;
+    }
+    appendRow(file, row) {
+        fs.appendFileSync(file, JSON.stringify(row) + '\n', { mode: 0o600 });
+    }
+    /**
+     * Sum cost across a row set: present `actualCost` supersedes the
+     * matching pending `estimatedCost`. O(rows).
+     */
+    tallySpent(rows) {
+        // De-dup by recordId: actualCost present wins; otherwise sum estimatedCost.
+        const byId = new Map();
+        for (const r of rows) {
+            const existing = byId.get(r.recordId) ?? { estimated: 0, actual: null };
+            if (r.actualCost !== null) {
+                existing.actual = r.actualCost;
+            }
+            else {
+                existing.estimated = r.estimatedCost;
+            }
+            byId.set(r.recordId, existing);
+        }
+        let total = 0;
+        for (const v of byId.values()) {
+            total += v.actual ?? v.estimated;
+        }
+        return total;
+    }
+}
+//# sourceMappingURL=DriftSpendLedger.js.map

package/dist/core/DriftSpendLedger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DriftSpendLedger.js","sourceRoot":"","sources":["../../src/core/DriftSpendLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AACzC,mEAAmE;AACnE,MAAM,YAAY,GAAyB;IACzC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;IACtE,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,KAAK;CAChB,CAAC;AAwBF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACrB;IAAuB;IAA2B;IAArE,YAAmB,MAAc,EAAS,UAAkB,EAAS,aAAqB;QACxF,KAAK,CACH,yCAAyC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CACpI,CAAC;QAHe,WAAM,GAAN,MAAM,CAAQ;QAAS,eAAU,GAAV,UAAU,CAAQ;QAAS,kBAAa,GAAb,aAAa,CAAQ;QAIxF,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAUD,MAAM,OAAO,gBAAgB;IACnB,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,aAAa,CAAS;IAE9B,YAAY,MAA8B;QACxC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,IAAI,qBAAqB,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACtE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,KAAmB;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,oEAAoE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,YAAY,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACzC,qEAAqE;YACrE,IAAI,UAAU,GAAG,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnD,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,GAAG,GAAc;gBACrB,QAAQ;gBACR,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC3B,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QACpE,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,UAAkB;QAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,mEAAmE,UAAU,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,YAAY,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,qEAAqE;YACrE,gEAAgE;YAChE,+DAA+D;YAC/D,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;YACxE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;oBAAE,SAAS;gBACzD,MAAM,GAAG,GAAc;oBACrB,QAAQ;oBACR,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,SAAS,IAAI,aAAa;oBAChF,aAAa,EAAE,CAAC;oBAChB,UAAU;oBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC1B,OAAO;YACT,CAAC;YACD,mEAAmE;YACnE,mEAAmE;YACnE,0BAA0B;YAC1B,MAAM,GAAG,GAAc;gBACrB,QAAQ;gBACR,SAAS,EAAE,WAAW;gBACtB,aAAa,EAAE,CAAC;gBAChB,UAAU;gBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,YAAY,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,cAAc,CAAC,MAAY,IAAI,IAAI,EAAE;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,YAAY,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAClE,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACjB,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC;gBAC/C,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC;oBACtB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAClC,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,6CAA6C,EAAE,CAAC,CAAC;oBAC1G,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,qEAAqE;IAE7D,UAAU;QAChB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,kDAAkD;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC/D,CAAC;IAEO,eAAe;QACrB,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAEO,mBAAmB;QACzB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAEO,iBAAiB,CAAC,CAAO;QAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;QACvD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,GAAG,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAgB,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;oBAAE,SAAS;gBAC/C,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;oBAAE,SAAS;gBAChD,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ;oBAAE,SAAS;gBACpD,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;oBAAE,SAAS;gBAC5E,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;oBAAE,SAAS;gBAChD,IAAI,CAAC,IAAI,CAAC,GAAgB,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,gEAAgE;gBAChE,sCAAsC;gBACtC,SAAS;YACX,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,GAAc;QAC5C,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED;;;OAGG;IACK,UAAU,CAAC,IAAiB;QAClC,4EAA4E;QAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwD,CAAC;QAC7E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACxE,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC1B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,aAAa,CAAC;YACvC,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9B,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/core/ProjectDriftChecker.d.ts

@@ -58,6 +58,8 @@
  *   wires this up.
  */
 import type { DriftVerdict, IntelligenceProvider, VerifiedCitation } from './types.js';
+import type { ProjectDriftCheckerCache } from './ProjectDriftCheckerCache.js';
+import { DriftSpendLedger } from './DriftSpendLedger.js';
 /** Bumped whenever the system prompt changes; part of the future cache key. */
 export declare const DRIFT_PROMPT_TEMPLATE_VERSION = 1;
 /** Hard limits per spec § Phase 1.4. Exported so tests can dial them down. */
@@ -127,10 +129,23 @@ export interface ProjectDriftCheckerConfig {
     intelligence?: IntelligenceProvider;
     /** Defaults to spec § Phase 1.4 hard limits; tests can override. */
     limits?: Partial<typeof DRIFT_LIMITS>;
+    /** Optional verdict cache. When absent, every call recomputes from scratch. */
+    cache?: ProjectDriftCheckerCache;
+    /** Optional spend ledger. When absent, no cap enforcement. */
+    ledger?: DriftSpendLedger;
+    /**
+     * Best-effort cost estimate per call in USD; ledger pre-reserves this
+     * amount before the LLM call. Default $0.01 — conservative for the
+     * 'balanced' tier on the 50k-token-budget cap.
+     */
+    estimatedCostPerCallUsd?: number;
 }
 export declare class ProjectDriftChecker {
     private intelligence?;
     private limits;
+    private cache?;
+    private ledger?;
+    private estimatedCostPerCallUsd;
     constructor(config?: ProjectDriftCheckerConfig);
     run(input: DriftCheckInput): Promise<DriftVerdict>;
 }

package/dist/core/ProjectDriftChecker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectDriftChecker.d.ts","sourceRoot":"","sources":["../../src/core/ProjectDriftChecker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AAOH,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEvF,+EAA+E;AAC/E,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,8EAA8E;AAC9E,eAAO,MAAM,YAAY;;;;;IAKvB,kFAAkF;;;;CAI1E,CAAC;AAIX,MAAM,WAAW,eAAe;IAC9B,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,YAAY;IACpB,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,UAAU,kBAAkB;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,iBAAiB;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,oEAAoE;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC,OAAO,YAAY,CAAC,CAAC;CACvC;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,YAAY,CAAC,CAAuB;IAC5C,OAAO,CAAC,MAAM,CAAsB;gBAExB,MAAM,GAAE,yBAA8B;IAK5C,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;CAuMzD;AAYD,cAAM,YAAa,SAAQ,KAAK;gBAClB,EAAE,EAAE,MAAM;CAIvB;AAkBD,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAgDtD;AAMD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CA0CjE;AAED,KAAK,iBAAiB,GAClB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,UAAU,GAAG,aAAa,GAAG,kBAAkB,CAAC;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,kBAAkB,EAAE,CAAC;CACjC,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,CA2B5E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,EAAE,EAC7B,KAAK,EAAE,YAAY,EAAE,EACrB,UAAU,EAAE,MAAM,GACjB,gBAAgB,EAAE,CAuBpB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,qBAAqB,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,mBAAmB,EAAE,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7D;IAAE,qBAAqB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAMrG;AAGD,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"ProjectDriftChecker.d.ts","sourceRoot":"","sources":["../../src/core/ProjectDriftChecker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AAOH,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACvF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAmB,MAAM,uBAAuB,CAAC;AAE1E,+EAA+E;AAC/E,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,8EAA8E;AAC9E,eAAO,MAAM,YAAY;;;;;IAKvB,kFAAkF;;;;CAI1E,CAAC;AAIX,MAAM,WAAW,eAAe;IAC9B,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,YAAY;IACpB,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,UAAU,kBAAkB;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,iBAAiB;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,oEAAoE;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC,OAAO,YAAY,CAAC,CAAC;IACtC,+EAA+E;IAC/E,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,8DAA8D;IAC9D,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,YAAY,CAAC,CAAuB;IAC5C,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,KAAK,CAAC,CAA2B;IACzC,OAAO,CAAC,MAAM,CAAC,CAAmB;IAClC,OAAO,CAAC,uBAAuB,CAAS;gBAE5B,MAAM,GAAE,yBAA8B;IAQ5C,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;CA2RzD;AAYD,cAAM,YAAa,SAAQ,KAAK;gBAClB,EAAE,EAAE,MAAM;CAIvB;AAkBD,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAgDtD;AAMD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CA0CjE;AAED,KAAK,iBAAiB,GAClB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,UAAU,GAAG,aAAa,GAAG,kBAAkB,CAAC;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,kBAAkB,EAAE,CAAC;CACjC,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,CA2B5E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,EAAE,EAC7B,KAAK,EAAE,YAAY,EAAE,EACrB,UAAU,EAAE,MAAM,GACjB,gBAAgB,EAAE,CAuBpB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,qBAAqB,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,mBAAmB,EAAE,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7D;IAAE,qBAAqB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAMrG;AAGD,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/core/ProjectDriftChecker.js

@@ -60,6 +60,7 @@
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import { jailPath } from './StageTransitionValidator.js';
+import { OverBudgetError } from './DriftSpendLedger.js';
 /** Bumped whenever the system prompt changes; part of the future cache key. */
 export const DRIFT_PROMPT_TEMPLATE_VERSION = 1;
 /** Hard limits per spec § Phase 1.4. Exported so tests can dial them down. */
@@ -77,9 +78,15 @@ const VALID_VERDICTS = new Set(['no-drift', 'minor-drift', 'premise-violated']);
 export class ProjectDriftChecker {
     intelligence;
     limits;
+    cache;
+    ledger;
+    estimatedCostPerCallUsd;
     constructor(config = {}) {
         this.intelligence = config.intelligence;
         this.limits = { ...DRIFT_LIMITS, ...(config.limits ?? {}) };
+        this.cache = config.cache;
+        this.ledger = config.ledger;
+        this.estimatedCostPerCallUsd = config.estimatedCostPerCallUsd ?? 0.01;
     }
     async run(input) {
         // No provider → can't compute a signal; surface to user attention.
@@ -187,11 +194,58 @@ export class ProjectDriftChecker {
                 rationale: `estimated ${estimatedTokens} tokens > budget ${this.limits.totalTokenBudget}`,
             };
         }
+        // ── Cache lookup ──────────────────────────────────────────────
+        // After validation but BEFORE the LLM call. A hit returns the
+        // cached verdict directly; no ledger spend, no provider call.
+        const resolvedModelId = input.modelId ?? 'balanced';
+        let cacheKey;
+        if (this.cache) {
+            const lookup = this.cache.lookup({
+                projectId: input.projectId,
+                roundIndex: input.roundIndex,
+                promptTemplateVersion: DRIFT_PROMPT_TEMPLATE_VERSION,
+                modelId: resolvedModelId,
+                specPath: specJailed.absPath,
+                referencedFilePaths: prepared.map((p) => p.absPath),
+                referencedFileBytes: prepared.map((p) => p.bytes),
+                specBytes,
+            });
+            if (lookup.hit) {
+                return lookup.verdict;
+            }
+            cacheKey = lookup.key;
+        }
+        // ── Ledger pre-reserve ────────────────────────────────────────
+        // Strict spec § Phase 1.4: `spent + estimated > cap` → reject as
+        // manual-review-required (over-budget). The reserve appends a pending
+        // row; reconcile() at the end of the call upgrades it with the actual
+        // cost. If the call throws/crashes, the pending estimate still counts
+        // toward the cap until UTC rollover — fail-safe rather than fail-open.
+        let ledgerRecordId;
+        if (this.ledger) {
+            try {
+                const reservation = await this.ledger.reserve({
+                    projectId: input.projectId,
+                    estimatedCost: this.estimatedCostPerCallUsd,
+                });
+                ledgerRecordId = reservation.recordId;
+            }
+            catch (err) {
+                if (err instanceof OverBudgetError) {
+                    return {
+                        verdict: 'manual-review-required',
+                        reason: 'over-budget',
+                        rationale: err.message,
+                    };
+                }
+                throw err;
+            }
+        }
         // ── Build prompt ──────────────────────────────────────────────
         const prompt = buildPrompt({
             specBody: specBytes.toString('utf-8'),
             files: prepared,
-            modelId: input.modelId,
+            modelId: resolvedModelId,
             templateVersion: DRIFT_PROMPT_TEMPLATE_VERSION,
             deletedFiles: deleted,
         });
@@ -257,11 +311,42 @@ export class ProjectDriftChecker {
                 rationale: 'LLM produced citations but none resolved against actual file contents',
             };
         }
-        return {
+        const finalVerdict = {
             verdict,
             rationale,
             evidenceCitations: verified,
         };
+        // ── Cache + ledger reconciliation ─────────────────────────────
+        // Cache only "real" verdicts — no-drift / minor-drift / premise-violated.
+        // LLM-failure paths (schema-fail / timeout) are not cached so a retry
+        // can succeed. Input-validation failures (over-budget etc.) are cheap
+        // to recompute and don't benefit from caching.
+        if (this.cache && cacheKey) {
+            this.cache.put({
+                projectId: input.projectId,
+                roundIndex: input.roundIndex,
+                promptTemplateVersion: DRIFT_PROMPT_TEMPLATE_VERSION,
+                modelId: resolvedModelId,
+                specPath: specJailed.absPath,
+                referencedFilePaths: prepared.map((p) => p.absPath),
+                referencedFileBytes: prepared.map((p) => p.bytes),
+                specBytes,
+            }, cacheKey, finalVerdict);
+        }
+        if (this.ledger && ledgerRecordId) {
+            // Best-effort reconcile. We don't currently get usage stats back from
+            // the provider abstraction, so actual ≈ estimated. When a future
+            // provider returns token usage, reconcile to the real number.
+            try {
+                await this.ledger.reconcile(ledgerRecordId, this.estimatedCostPerCallUsd);
+            }
+            catch {
+                // Reconcile failure is non-fatal — the pending reservation already
+                // counts toward the cap, so the worst case is a slight overshoot
+                // of "spent" vs "actually spent" until UTC rollover.
+            }
+        }
+        return finalVerdict;
     }
 }
 // ── Helpers ───────────────────────────────────────────────────────────

package/dist/core/ProjectDriftChecker.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectDriftChecker.js","sourceRoot":"","sources":["../../src/core/ProjectDriftChecker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAGzD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,kBAAkB,EAAE,CAAC;IACrB,YAAY,EAAE,EAAE,GAAG,IAAI;IACvB,YAAY,EAAE,IAAI;IAClB,gBAAgB,EAAE,MAAM;IACxB,kFAAkF;IAClF,aAAa,EAAE,CAAC;IAChB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB,EAAE,GAAG;CACd,CAAC;AAEX,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAgEhF,MAAM,OAAO,mBAAmB;IACtB,YAAY,CAAwB;IACpC,MAAM,CAAsB;IAEpC,YAAY,SAAoC,EAAE;QAChD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAsB;QAC9B,mEAAmE;QACnE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,gEAAgE;aAC5E,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,gBAAgB;gBACxB,SAAS,EAAE,sBAAsB,UAAU,CAAC,MAAM,EAAE;aACrD,CAAC;QACJ,CAAC;QAED,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE;aAC5D,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,mBAAmB;aAC/B,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAClE,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,0BAA0B,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG;aACtG,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,gEAAgE;gBAChE,mEAAmE;gBACnE,OAAO;oBACL,OAAO,EAAE,wBAAwB;oBACjC,MAAM,EAAE,gBAAgB;oBACxB,SAAS,EAAE,mBAAmB,GAAG,eAAe,MAAM,CAAC,MAAM,EAAE;iBAChE,CAAC;YACJ,CAAC;YACD,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,4DAA4D;YAC5D,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC5C,OAAO;oBACL,OAAO,EAAE,wBAAwB;oBACjC,MAAM,EAAE,aAAa;oBACrB,SAAS,EAAE,SAAS,GAAG,QAAQ,KAAK,CAAC,MAAM,eAAe,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG;iBACtF,CAAC;YACJ,CAAC;YACD,yDAAyD;YACzD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzC,OAAO;oBACL,OAAO,EAAE,wBAAwB;oBACjC,MAAM,EAAE,aAAa;oBACrB,SAAS,EAAE,SAAS,GAAG,QAAQ,SAAS,eAAe,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG;iBACnF,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK;gBACL,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aAC3E,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,eAAe;gBACvB,SAAS,EAAE,OAAO,KAAK,CAAC,eAAe,CAAC,MAAM,0CAA0C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC7G,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,UAAU,GACd,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1E,IAAI,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,aAAa,eAAe,oBAAoB,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;aAC1F,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,MAAM,GAAG,WAAW,CAAC;YACzB,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,eAAe,EAAE,6BAA6B;YAC9C,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;QAEH,iEAAiE;QACjE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QACnC,IAAI,GAAuB,CAAC;QAC5B,IAAI,SAA4B,CAAC;QACjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,WAAW,CACrB,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE;oBACxB,KAAK,EAAE,UAAU;oBACjB,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,CAAC;oBACd,SAAS;iBACV,CAAC,EACF,SAAS,CACV,CAAC;gBACF,MAAM;YACR,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAY,CAAC;gBACzB,8DAA8D;gBAC9D,IAAI,CAAC,CAAC,GAAG,YAAY,YAAY,CAAC,EAAE,CAAC;oBACnC,OAAO;wBACL,OAAO,EAAE,wBAAwB;wBACjC,MAAM,EAAE,aAAa;wBACrB,SAAS,EAAE,+BAA+B,SAAS,CAAC,OAAO,EAAE;qBAC9D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,4BAA4B,SAAS,wBAAwB;aACzE,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,iDAAiD;aAC7D,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,aAAa,CAAC,MAAM;aAChC,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;QAExD,iEAAiE;QACjE,MAAM,QAAQ,GAAG,eAAe,CAC9B,SAAS,EACT,QAAQ,EACR,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC9B,CAAC;QACF,iEAAiE;QACjE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,8BAA8B;gBACtC,SAAS,EACP,uEAAuE;aAC1E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO;YACP,SAAS;YACT,iBAAiB,EAAE,QAAQ;SAC5B,CAAC;IACJ,CAAC;CACF;AAED,yEAAyE;AAEzE,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,YAAa,SAAQ,KAAK;IAC9B,YAAY,EAAU;QACpB,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,WAAW,CAAI,CAAa,EAAE,EAAU;IAC/C,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK;SAC3B,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,iCAAiC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,6BAA6B,CACzI;SACA,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhB,MAAM,WAAW,GACf,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,uGAAuG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAEpK,OAAO;QACL,SAAS;QACT,sKAAsK;QACtK,EAAE;QACF,2BAA2B;QAC3B,yQAAyQ;QACzQ,EAAE;QACF,2BAA2B,KAAK,CAAC,eAAe,GAAG;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE;QAC3D,EAAE;QACF,gFAAgF;QAChF,GAAG;QACH,+DAA+D;QAC/D,iEAAiE;QACjE,0BAA0B;QAC1B,kEAAkE;QAClE,KAAK;QACL,GAAG;QACH,EAAE;QACF,cAAc;QACd,uFAAuF;QACvF,kGAAkG;QAClG,mHAAmH;QACnH,EAAE;QACF,0HAA0H,WAAW,EAAE;QACvI,EAAE;QACF,OAAO;QACP,uBAAuB;QACvB,KAAK,CAAC,QAAQ;QACd,wBAAwB;QACxB,EAAE;QACF,UAAU;KACX;SACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,gCAAgC;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ;YAAE,SAAS;QACvB,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,GAAG,GAAG,CAAC,CAAC;gBACR,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAyB;IACvD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY,MAAM,CAAC,OAAO,uDAAuD;SAC1F,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,iBAA8B,EAAE,CAAC;QACtD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,SAAS,CAAC,IAAI,CAAC,CAAuB,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM,CAAC,OAA0D;QAC1E,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA6B,EAC7B,KAAqB,EACrB,UAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChD,qEAAqE;IACrE,uEAAuE;IACvE,mBAAmB;IACnB,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACtE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACnE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;YAAE,SAAS;QACjE,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,GAAG;YAAE,SAAS;QAChE,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAChC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,GAAG,CAAC;QAC/C,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,qBAA6B,EAC7B,OAAe,EACf,SAAiB,EACjB,mBAA8D;IAE9D,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG,mBAAmB;SACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;SACvF,IAAI,EAAE,CAAC;IACV,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;AAC3E,CAAC;AAED,8DAA8D;AAC9D,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"ProjectDriftChecker.js","sourceRoot":"","sources":["../../src/core/ProjectDriftChecker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAGzD,OAAO,EAAoB,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE1E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,kBAAkB,EAAE,CAAC;IACrB,YAAY,EAAE,EAAE,GAAG,IAAI;IACvB,YAAY,EAAE,IAAI;IAClB,gBAAgB,EAAE,MAAM;IACxB,kFAAkF;IAClF,aAAa,EAAE,CAAC;IAChB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB,EAAE,GAAG;CACd,CAAC;AAEX,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC;AA0EhF,MAAM,OAAO,mBAAmB;IACtB,YAAY,CAAwB;IACpC,MAAM,CAAsB;IAC5B,KAAK,CAA4B;IACjC,MAAM,CAAoB;IAC1B,uBAAuB,CAAS;IAExC,YAAY,SAAoC,EAAE;QAChD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,uBAAuB,GAAG,MAAM,CAAC,uBAAuB,IAAI,IAAI,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAsB;QAC9B,mEAAmE;QACnE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,gEAAgE;aAC5E,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,gBAAgB;gBACxB,SAAS,EAAE,sBAAsB,UAAU,CAAC,MAAM,EAAE;aACrD,CAAC;QACJ,CAAC;QAED,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE;aAC5D,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,mBAAmB;aAC/B,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAClE,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,0BAA0B,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG;aACtG,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,gEAAgE;gBAChE,mEAAmE;gBACnE,OAAO;oBACL,OAAO,EAAE,wBAAwB;oBACjC,MAAM,EAAE,gBAAgB;oBACxB,SAAS,EAAE,mBAAmB,GAAG,eAAe,MAAM,CAAC,MAAM,EAAE;iBAChE,CAAC;YACJ,CAAC;YACD,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,4DAA4D;YAC5D,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC5C,OAAO;oBACL,OAAO,EAAE,wBAAwB;oBACjC,MAAM,EAAE,aAAa;oBACrB,SAAS,EAAE,SAAS,GAAG,QAAQ,KAAK,CAAC,MAAM,eAAe,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG;iBACtF,CAAC;YACJ,CAAC;YACD,yDAAyD;YACzD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzC,OAAO;oBACL,OAAO,EAAE,wBAAwB;oBACjC,MAAM,EAAE,aAAa;oBACrB,SAAS,EAAE,SAAS,GAAG,QAAQ,SAAS,eAAe,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG;iBACnF,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK;gBACL,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aAC3E,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,eAAe;gBACvB,SAAS,EAAE,OAAO,KAAK,CAAC,eAAe,CAAC,MAAM,0CAA0C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC7G,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,UAAU,GACd,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1E,IAAI,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,aAAa,eAAe,oBAAoB,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;aAC1F,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,8DAA8D;QAC9D,8DAA8D;QAC9D,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC;QACpD,IAAI,QAA4B,CAAC;QACjC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,qBAAqB,EAAE,6BAA6B;gBACpD,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE,UAAU,CAAC,OAAO;gBAC5B,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;gBACnD,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;gBACjD,SAAS;aACV,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,OAAO,MAAM,CAAC,OAAO,CAAC;YACxB,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC;QACxB,CAAC;QAED,iEAAiE;QACjE,iEAAiE;QACjE,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,IAAI,cAAkC,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;oBAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,aAAa,EAAE,IAAI,CAAC,uBAAuB;iBAC5C,CAAC,CAAC;gBACH,cAAc,GAAG,WAAW,CAAC,QAAQ,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;oBACnC,OAAO;wBACL,OAAO,EAAE,wBAAwB;wBACjC,MAAM,EAAE,aAAa;wBACrB,SAAS,EAAE,GAAG,CAAC,OAAO;qBACvB,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,MAAM,MAAM,GAAG,WAAW,CAAC;YACzB,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,eAAe;YACxB,eAAe,EAAE,6BAA6B;YAC9C,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;QAEH,iEAAiE;QACjE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QACnC,IAAI,GAAuB,CAAC;QAC5B,IAAI,SAA4B,CAAC;QACjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,WAAW,CACrB,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE;oBACxB,KAAK,EAAE,UAAU;oBACjB,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,CAAC;oBACd,SAAS;iBACV,CAAC,EACF,SAAS,CACV,CAAC;gBACF,MAAM;YACR,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAY,CAAC;gBACzB,8DAA8D;gBAC9D,IAAI,CAAC,CAAC,GAAG,YAAY,YAAY,CAAC,EAAE,CAAC;oBACnC,OAAO;wBACL,OAAO,EAAE,wBAAwB;wBACjC,MAAM,EAAE,aAAa;wBACrB,SAAS,EAAE,+BAA+B,SAAS,CAAC,OAAO,EAAE;qBAC9D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,4BAA4B,SAAS,wBAAwB;aACzE,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,iDAAiD;aAC7D,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,aAAa,CAAC,MAAM;aAChC,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;QAExD,iEAAiE;QACjE,MAAM,QAAQ,GAAG,eAAe,CAC9B,SAAS,EACT,QAAQ,EACR,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC9B,CAAC;QACF,iEAAiE;QACjE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,8BAA8B;gBACtC,SAAS,EACP,uEAAuE;aAC1E,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAiB;YACjC,OAAO;YACP,SAAS;YACT,iBAAiB,EAAE,QAAQ;SAC5B,CAAC;QAEF,iEAAiE;QACjE,0EAA0E;QAC1E,sEAAsE;QACtE,sEAAsE;QACtE,+CAA+C;QAC/C,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ;gBACE,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,qBAAqB,EAAE,6BAA6B;gBACpD,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE,UAAU,CAAC,OAAO;gBAC5B,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;gBACnD,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;gBACjD,SAAS;aACV,EACD,QAAQ,EACR,YAAY,CACb,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;YAClC,sEAAsE;YACtE,iEAAiE;YACjE,8DAA8D;YAC9D,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,iEAAiE;gBACjE,qDAAqD;YACvD,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AAED,yEAAyE;AAEzE,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,YAAa,SAAQ,KAAK;IAC9B,YAAY,EAAU;QACpB,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,WAAW,CAAI,CAAa,EAAE,EAAU;IAC/C,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK;SAC3B,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,iCAAiC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,6BAA6B,CACzI;SACA,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhB,MAAM,WAAW,GACf,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,uGAAuG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAEpK,OAAO;QACL,SAAS;QACT,sKAAsK;QACtK,EAAE;QACF,2BAA2B;QAC3B,yQAAyQ;QACzQ,EAAE;QACF,2BAA2B,KAAK,CAAC,eAAe,GAAG;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE;QAC3D,EAAE;QACF,gFAAgF;QAChF,GAAG;QACH,+DAA+D;QAC/D,iEAAiE;QACjE,0BAA0B;QAC1B,kEAAkE;QAClE,KAAK;QACL,GAAG;QACH,EAAE;QACF,cAAc;QACd,uFAAuF;QACvF,kGAAkG;QAClG,mHAAmH;QACnH,EAAE;QACF,0HAA0H,WAAW,EAAE;QACvI,EAAE;QACF,OAAO;QACP,uBAAuB;QACvB,KAAK,CAAC,QAAQ;QACd,wBAAwB;QACxB,EAAE;QACF,UAAU;KACX;SACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,gCAAgC;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ;YAAE,SAAS;QACvB,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,GAAG,GAAG,CAAC,CAAC;gBACR,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAyB;IACvD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY,MAAM,CAAC,OAAO,uDAAuD;SAC1F,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,iBAA8B,EAAE,CAAC;QACtD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,SAAS,CAAC,IAAI,CAAC,CAAuB,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM,CAAC,OAA0D;QAC1E,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA6B,EAC7B,KAAqB,EACrB,UAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChD,qEAAqE;IACrE,uEAAuE;IACvE,mBAAmB;IACnB,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACtE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACnE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;YAAE,SAAS;QACjE,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,GAAG;YAAE,SAAS;QAChE,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAChC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,GAAG,CAAC;QAC/C,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,qBAA6B,EAC7B,OAAe,EACf,SAAiB,EACjB,mBAA8D;IAE9D,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG,mBAAmB;SACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;SACvF,IAAI,EAAE,CAAC;IACV,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;AAC3E,CAAC;AAED,8DAA8D;AAC9D,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/core/ProjectDriftCheckerCache.d.ts

@@ -0,0 +1,118 @@
+/**
+ * ProjectDriftCheckerCache — verdict cache with mtime fast-path.
+ *
+ * Spec: docs/specs/PROJECT-SCOPE-SPEC.md § Phase 1.4 ("Cache key" + mtime
+ * fast-path).
+ *
+ * Cache key:  sha256(promptTemplateVersion + modelId + specBodySha + sortedFileHashes)
+ * TTL:        24h (cache entries older than this are treated as misses)
+ *
+ * Mtime fast-path:
+ *   Before computing the cache key, the cache compares (specPath mtime,
+ *   referencedFile mtimes) to the values it last saw associated with the
+ *   stored entry. If every mtime matches, the cache key is REUSED without
+ *   re-hashing — file contents haven't changed. If any mtime moved, full
+ *   hashing falls back. This is the spec's stated optimization: hashing
+ *   only happens when an mtime moved.
+ *
+ * Storage:
+ *   In-memory Map keyed by `${projectId}:${roundIndex}` (the natural id
+ *   for a drift check). Disk-backed snapshot at
+ *   `.instar/drift-verdict-cache.json` so the cache survives restarts
+ *   without a cold first-call penalty after a sleep/wake.
+ *
+ * Concurrency:
+ *   This cache is consulted INSIDE the per-project mutex held by
+ *   `POST /projects/:id/drift-check` (Phase 1.5 round runner has its own
+ *   round-runner lock). Within a single process there's no race; across
+ *   processes the JSON snapshot is read on construction and written on
+ *   every put, atomically (tmp + rename).
+ */
+import type { DriftVerdict } from './types.js';
+export declare const DEFAULT_TTL_MS: number;
+export declare const SNAPSHOT_FILENAME = "drift-verdict-cache.json";
+export interface ProjectDriftCheckerCacheConfig {
+    /** Absolute path to the agent's `.instar/` directory. */
+    stateDir: string;
+    /** Override the 24h TTL (tests dial this down). */
+    ttlMs?: number;
+    /** When false, the cache does not read/write disk (in-memory only). */
+    persist?: boolean;
+}
+export interface CacheLookupInput {
+    projectId: string;
+    roundIndex: number;
+    /** Bumped on every prompt-template edit; part of the cache key. */
+    promptTemplateVersion: number;
+    /** Resolved model id from the provider; part of the cache key. */
+    modelId: string;
+    /** Absolute path to the spec file (used for mtime fast-path). */
+    specPath: string;
+    /** Absolute paths to referenced files. Order matters for fast-path but
+     *  not for the cache key (sortedFileHashes is order-stable). */
+    referencedFilePaths: string[];
+    /** Buffers, in the same order as `referencedFilePaths`. Used to compute
+     *  sha256 inputs when mtime fast-path misses. */
+    referencedFileBytes: Buffer[];
+    /** Spec body bytes — sha256 input. */
+    specBytes: Buffer;
+}
+export interface CacheHit {
+    hit: true;
+    verdict: DriftVerdict;
+    computedAt: string;
+    /** Cache key that matched. */
+    key: string;
+    /** True if served by the mtime fast-path (no re-hash performed). */
+    mtimeFastPath: boolean;
+}
+export interface CacheMiss {
+    hit: false;
+    /** Cache key the caller should associate with the verdict on put(). */
+    key: string;
+}
+export type CacheLookupResult = CacheHit | CacheMiss;
+export declare class ProjectDriftCheckerCache {
+    private stateDir;
+    private ttlMs;
+    private persist;
+    private entries;
+    constructor(config: ProjectDriftCheckerCacheConfig);
+    /**
+     * Look up an entry for `(projectId, roundIndex)`. Returns a hit ONLY if:
+     *   (a) an entry exists, AND
+     *   (b) the entry is within the TTL, AND
+     *   (c) either the mtime fast-path matches (no re-hash needed) OR the
+     *       full sha256 cache key matches.
+     *
+     * On miss, the returned `key` is the freshly-computed sha256, which the
+     * caller should pass back to `put()` after running drift.
+     */
+    lookup(input: CacheLookupInput): CacheLookupResult;
+    /**
+     * Store `verdict` under `(projectId, roundIndex)` keyed by `key`. Captures
+     * file mtimes for the next mtime fast-path lookup.
+     *
+     * `manual-review-required` verdicts ARE cached too — re-running drift
+     * immediately won't change a deterministic over-budget or
+     * empty-spec answer. The TTL still expires them after 24h.
+     */
+    put(input: CacheLookupInput, key: string, verdict: DriftVerdict): void;
+    /** Remove an entry for `(projectId, roundIndex)`. */
+    invalidate(projectId: string, roundIndex: number): void;
+    /** For tests / digest. */
+    size(): number;
+    private snapshotPath;
+    private loadSnapshot;
+    private saveSnapshot;
+}
+/**
+ * Compute the deterministic cache key. Exported for tests and for the
+ * `cacheKeyInputs` helper in ProjectDriftChecker.ts (which produces the
+ * same inputs — this function hashes them into a stable string).
+ */
+export declare function computeCacheKey(promptTemplateVersion: number, modelId: string, specBytes: Buffer, referencedFileBytes: Array<{
+    relPath: string;
+    bytes: Buffer;
+}>): string;
+//# sourceMappingURL=ProjectDriftCheckerCache.d.ts.map

package/dist/core/ProjectDriftCheckerCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectDriftCheckerCache.d.ts","sourceRoot":"","sources":["../../src/core/ProjectDriftCheckerCache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,eAAO,MAAM,cAAc,QAAsB,CAAC;AAClD,eAAO,MAAM,iBAAiB,6BAA6B,CAAC;AAE5D,MAAM,WAAW,8BAA8B;IAC7C,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB;oEACgE;IAChE,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B;qDACiD;IACjD,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,IAAI,CAAC;IACV,OAAO,EAAE,YAAY,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,aAAa,EAAE,OAAO,CAAC;CACxB;AACD,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,KAAK,CAAC;IACX,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAerD,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,OAAO,CAAiC;gBAEpC,MAAM,EAAE,8BAA8B;IAOlD;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB;IAqElD;;;;;;;OAOG;IACH,GAAG,CACD,KAAK,EAAE,gBAAgB,EACvB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,GACpB,IAAI;IA6BP,qDAAqD;IACrD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAKvD,0BAA0B;IAC1B,IAAI,IAAI,MAAM;IAMd,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,YAAY;IAkBpB,OAAO,CAAC,YAAY;CAOrB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,qBAAqB,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,mBAAmB,EAAE,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7D,MAAM,CAUR"}

package/dist/core/ProjectDriftCheckerCache.js

@@ -0,0 +1,221 @@
+/**
+ * ProjectDriftCheckerCache — verdict cache with mtime fast-path.
+ *
+ * Spec: docs/specs/PROJECT-SCOPE-SPEC.md § Phase 1.4 ("Cache key" + mtime
+ * fast-path).
+ *
+ * Cache key:  sha256(promptTemplateVersion + modelId + specBodySha + sortedFileHashes)
+ * TTL:        24h (cache entries older than this are treated as misses)
+ *
+ * Mtime fast-path:
+ *   Before computing the cache key, the cache compares (specPath mtime,
+ *   referencedFile mtimes) to the values it last saw associated with the
+ *   stored entry. If every mtime matches, the cache key is REUSED without
+ *   re-hashing — file contents haven't changed. If any mtime moved, full
+ *   hashing falls back. This is the spec's stated optimization: hashing
+ *   only happens when an mtime moved.
+ *
+ * Storage:
+ *   In-memory Map keyed by `${projectId}:${roundIndex}` (the natural id
+ *   for a drift check). Disk-backed snapshot at
+ *   `.instar/drift-verdict-cache.json` so the cache survives restarts
+ *   without a cold first-call penalty after a sleep/wake.
+ *
+ * Concurrency:
+ *   This cache is consulted INSIDE the per-project mutex held by
+ *   `POST /projects/:id/drift-check` (Phase 1.5 round runner has its own
+ *   round-runner lock). Within a single process there's no race; across
+ *   processes the JSON snapshot is read on construction and written on
+ *   every put, atomically (tmp + rename).
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+export const DEFAULT_TTL_MS = 24 * 60 * 60 * 1000; // 24h
+export const SNAPSHOT_FILENAME = 'drift-verdict-cache.json';
+export class ProjectDriftCheckerCache {
+    stateDir;
+    ttlMs;
+    persist;
+    entries = new Map();
+    constructor(config) {
+        this.stateDir = config.stateDir;
+        this.ttlMs = config.ttlMs ?? DEFAULT_TTL_MS;
+        this.persist = config.persist ?? true;
+        if (this.persist)
+            this.loadSnapshot();
+    }
+    /**
+     * Look up an entry for `(projectId, roundIndex)`. Returns a hit ONLY if:
+     *   (a) an entry exists, AND
+     *   (b) the entry is within the TTL, AND
+     *   (c) either the mtime fast-path matches (no re-hash needed) OR the
+     *       full sha256 cache key matches.
+     *
+     * On miss, the returned `key` is the freshly-computed sha256, which the
+     * caller should pass back to `put()` after running drift.
+     */
+    lookup(input) {
+        const entryId = `${input.projectId}:${input.roundIndex}`;
+        const existing = this.entries.get(entryId);
+        const now = Date.now();
+        // ── Mtime fast-path ──────────────────────────────────────────
+        // Cheap: verify the non-content cache-key inputs (templateVersion,
+        // modelId) match, then stat() each file and compare mtimes to the
+        // recorded mtimes. If everything matches, the cached entry is still
+        // valid and the cache key the entry holds is the one that matches
+        // the current bytes — we don't need to re-hash.
+        if (existing &&
+            now - Date.parse(existing.computedAt) < this.ttlMs &&
+            existing.promptTemplateVersion === input.promptTemplateVersion &&
+            existing.modelId === input.modelId) {
+            try {
+                const specMtime = fs.statSync(input.specPath).mtimeMs;
+                if (specMtime === existing.specMtimeMs) {
+                    const allMatch = input.referencedFilePaths.every((p) => {
+                        const recorded = existing.referencedFileMtimesMs[p];
+                        if (recorded === undefined)
+                            return false;
+                        try {
+                            return fs.statSync(p).mtimeMs === recorded;
+                        }
+                        catch {
+                            return false;
+                        }
+                    });
+                    // Also require referenced set hasn't shrunk OR grown
+                    const sameSet = Object.keys(existing.referencedFileMtimesMs).length === input.referencedFilePaths.length;
+                    if (allMatch && sameSet) {
+                        return {
+                            hit: true,
+                            verdict: existing.verdict,
+                            computedAt: existing.computedAt,
+                            key: existing.key,
+                            mtimeFastPath: true,
+                        };
+                    }
+                }
+            }
+            catch {
+                // statSync failure on the spec or a referenced file = treat as miss.
+            }
+        }
+        // ── Full hash path ───────────────────────────────────────────
+        const key = computeCacheKey(input.promptTemplateVersion, input.modelId, input.specBytes, input.referencedFilePaths.map((p, i) => ({
+            relPath: p,
+            bytes: input.referencedFileBytes[i] ?? Buffer.alloc(0),
+        })));
+        if (existing && existing.key === key && now - Date.parse(existing.computedAt) < this.ttlMs) {
+            return {
+                hit: true,
+                verdict: existing.verdict,
+                computedAt: existing.computedAt,
+                key,
+                mtimeFastPath: false,
+            };
+        }
+        return { hit: false, key };
+    }
+    /**
+     * Store `verdict` under `(projectId, roundIndex)` keyed by `key`. Captures
+     * file mtimes for the next mtime fast-path lookup.
+     *
+     * `manual-review-required` verdicts ARE cached too — re-running drift
+     * immediately won't change a deterministic over-budget or
+     * empty-spec answer. The TTL still expires them after 24h.
+     */
+    put(input, key, verdict) {
+        const entryId = `${input.projectId}:${input.roundIndex}`;
+        const referencedFileMtimesMs = {};
+        let specMtimeMs = 0;
+        try {
+            specMtimeMs = fs.statSync(input.specPath).mtimeMs;
+        }
+        catch {
+            // Spec gone — caller will probably get an `empty-spec` verdict
+            // anyway; record a zero so the next fast-path correctly invalidates.
+        }
+        for (const p of input.referencedFilePaths) {
+            try {
+                referencedFileMtimesMs[p] = fs.statSync(p).mtimeMs;
+            }
+            catch {
+                referencedFileMtimesMs[p] = -1; // Forces a future miss.
+            }
+        }
+        this.entries.set(entryId, {
+            key,
+            verdict,
+            computedAt: new Date().toISOString(),
+            promptTemplateVersion: input.promptTemplateVersion,
+            modelId: input.modelId,
+            specMtimeMs,
+            referencedFileMtimesMs,
+        });
+        if (this.persist)
+            this.saveSnapshot();
+    }
+    /** Remove an entry for `(projectId, roundIndex)`. */
+    invalidate(projectId, roundIndex) {
+        this.entries.delete(`${projectId}:${roundIndex}`);
+        if (this.persist)
+            this.saveSnapshot();
+    }
+    /** For tests / digest. */
+    size() {
+        return this.entries.size;
+    }
+    // ── Snapshot persistence (atomic write) ───────────────────────────
+    snapshotPath() {
+        return path.join(this.stateDir, SNAPSHOT_FILENAME);
+    }
+    loadSnapshot() {
+        const p = this.snapshotPath();
+        if (!fs.existsSync(p))
+            return;
+        try {
+            const raw = fs.readFileSync(p, 'utf-8');
+            const obj = JSON.parse(raw);
+            if (!obj || !Array.isArray(obj.entries))
+                return;
+            for (const [id, entry] of obj.entries) {
+                if (typeof id !== 'string')
+                    continue;
+                if (!entry || typeof entry !== 'object')
+                    continue;
+                if (typeof entry.key !== 'string')
+                    continue;
+                this.entries.set(id, entry);
+            }
+        }
+        catch {
+            // Corrupt snapshot → start fresh, will be overwritten on next put.
+        }
+    }
+    saveSnapshot() {
+        if (!fs.existsSync(this.stateDir))
+            fs.mkdirSync(this.stateDir, { recursive: true });
+        const tmp = this.snapshotPath() + '.tmp';
+        const body = JSON.stringify({ entries: Array.from(this.entries.entries()) });
+        fs.writeFileSync(tmp, body, { mode: 0o600 });
+        fs.renameSync(tmp, this.snapshotPath());
+    }
+}
+/**
+ * Compute the deterministic cache key. Exported for tests and for the
+ * `cacheKeyInputs` helper in ProjectDriftChecker.ts (which produces the
+ * same inputs — this function hashes them into a stable string).
+ */
+export function computeCacheKey(promptTemplateVersion, modelId, specBytes, referencedFileBytes) {
+    const sortedFileEntries = referencedFileBytes
+        .map((f) => `${f.relPath}:${crypto.createHash('sha256').update(f.bytes).digest('hex')}`)
+        .sort();
+    const h = crypto.createHash('sha256');
+    h.update(`v=${promptTemplateVersion}\n`);
+    h.update(`m=${modelId}\n`);
+    h.update(`s=${crypto.createHash('sha256').update(specBytes).digest('hex')}\n`);
+    for (const entry of sortedFileEntries)
+        h.update(`f=${entry}\n`);
+    return h.digest('hex');
+}
+//# sourceMappingURL=ProjectDriftCheckerCache.js.map

package/dist/core/ProjectDriftCheckerCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectDriftCheckerCache.js","sourceRoot":"","sources":["../../src/core/ProjectDriftCheckerCache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AAIjC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,MAAM;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AA4D5D,MAAM,OAAO,wBAAwB;IAC3B,QAAQ,CAAS;IACjB,KAAK,CAAS;IACd,OAAO,CAAU;IACjB,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEhD,YAAY,MAAsC;QAChD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;QACtC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAuB;QAC5B,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,gEAAgE;QAChE,mEAAmE;QACnE,kEAAkE;QAClE,oEAAoE;QACpE,kEAAkE;QAClE,gDAAgD;QAChD,IACE,QAAQ;YACR,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK;YAClD,QAAQ,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;YAC9D,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAClC,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;gBACtD,IAAI,SAAS,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;oBACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;wBACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;wBACpD,IAAI,QAAQ,KAAK,SAAS;4BAAE,OAAO,KAAK,CAAC;wBACzC,IAAI,CAAC;4BACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC;wBAC7C,CAAC;wBAAC,MAAM,CAAC;4BACP,OAAO,KAAK,CAAC;wBACf,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,qDAAqD;oBACrD,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC;oBAC3F,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;wBACxB,OAAO;4BACL,GAAG,EAAE,IAAI;4BACT,OAAO,EAAE,QAAQ,CAAC,OAAO;4BACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;4BAC/B,GAAG,EAAE,QAAQ,CAAC,GAAG;4BACjB,aAAa,EAAE,IAAI;yBACpB,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;YACvE,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,MAAM,GAAG,GAAG,eAAe,CACzB,KAAK,CAAC,qBAAqB,EAC3B,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;SACvD,CAAC,CAAC,CACJ,CAAC;QACF,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3F,OAAO;gBACL,GAAG,EAAE,IAAI;gBACT,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,GAAG;gBACH,aAAa,EAAE,KAAK;aACrB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,GAAG,CACD,KAAuB,EACvB,GAAW,EACX,OAAqB;QAErB,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzD,MAAM,sBAAsB,GAA2B,EAAE,CAAC;QAC1D,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,WAAW,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;YAC/D,qEAAqE;QACvE,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,sBAAsB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAwB;YAC1D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACxB,GAAG;YACH,OAAO;YACP,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;YAClD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW;YACX,sBAAsB;SACvB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAED,qDAAqD;IACrD,UAAU,CAAC,SAAiB,EAAE,UAAkB;QAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAED,0BAA0B;IAC1B,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,qEAAqE;IAE7D,YAAY;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACrD,CAAC;IAEO,YAAY;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6C,CAAC;YACxE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO;YAChD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACtC,IAAI,OAAO,EAAE,KAAK,QAAQ;oBAAE,SAAS;gBACrC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBAClD,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;oBAAE,SAAS;gBAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,qBAA6B,EAC7B,OAAe,EACf,SAAiB,EACjB,mBAA8D;IAE9D,MAAM,iBAAiB,GAAG,mBAAmB;SAC1C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;SACvF,IAAI,EAAE,CAAC;IACV,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC,CAAC,MAAM,CAAC,KAAK,qBAAqB,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,MAAM,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/E,KAAK,MAAM,KAAK,IAAI,iBAAiB;QAAE,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "0.28.93",
+  "version": "0.28.94",
   "description": "Persistent autonomy infrastructure for AI agents",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-12T03:17:21.147Z",
-  "instarVersion": "0.28.93",
+  "generatedAt": "2026-05-12T03:32:09.889Z",
+  "instarVersion": "0.28.94",
   "entryCount": 188,
   "entries": {
     "hook:session-start": {

package/upgrades/0.28.94.md

@@ -0,0 +1,60 @@
+# Upgrade Guide — vNEXT
+
+<!-- bump: minor -->
+<!-- Valid values: patch, minor, major -->
+<!-- patch = bug fixes, refactors, test additions, doc updates -->
+<!-- minor = new features, new APIs, new capabilities (backwards-compatible) -->
+<!-- major = breaking changes to existing APIs or behavior -->
+
+## What Changed
+
+### Project-scope Phase 1b PR 2 — drift cache + cost ledger
+
+Second PR of project-scope Phase 1b. Adds two persistent-state
+primitives the drift checker has been operating without since v0.28.93:
+
+- **Verdict cache** — `ProjectDriftCheckerCache`. 24-hour TTL,
+  mtime-fast-path before computing the cache key, disk-backed
+  snapshot at `.instar/drift-verdict-cache.json` so the cache
+  survives restarts. When file mtimes match the recorded entry and
+  template version + model id are unchanged, the prior verdict is
+  returned without re-hashing or calling the model. When content
+  changes, the cache key shifts and the LLM is consulted again.
+
+- **Cost ledger** — `DriftSpendLedger`. Daily-rotated append-only
+  JSONL at `.instar/drift-spend-YYYY-MM-DD.jsonl` enforcing the
+  spec's $1/day per-agent spend cap. Strict-greater-than boundary
+  (equal-to-cap is allowed; one cent over is not). Pre-reservation
+  rows are append-only and reconciled with the actual spend after
+  the call. Lock-coordinated on `.instar/local/drift-spend.lock`
+  via proper-lockfile (same convention as AgentRegistry and
+  SharedStateLedger). 30-day retention; older files are pruned
+  through `SafeFsExecutor.safeRmSync`.
+
+Both are optional fields on `ProjectDriftChecker`'s config. The
+v0.28.93 contract — neither cache nor ledger — is preserved
+exactly when neither is passed. Wiring into the round runner
+(consumer) ships in the next PR.
+
+## What to Tell Your User
+
+- **Drift checks won't burn budget**: I now have a daily spending cap
+  on the model calls that power drift checks, plus a cache so I don't
+  pay for the same check twice. You don't have to do anything; it just
+  works. If I ever hit the daily limit, I escalate to you rather than
+  silently overspending.
+
+## Summary of New Capabilities
+
+- `ProjectDriftCheckerCache` class — sha256-keyed verdict cache with
+  24-hour TTL, mtime fast-path, and disk-backed snapshot at
+  `.instar/drift-verdict-cache.json`. Avoids redundant LLM calls when
+  spec + referenced files are unchanged.
+- `DriftSpendLedger` class — daily-rotated JSONL cost ledger
+  (`.instar/drift-spend-YYYY-MM-DD.jsonl`) enforcing a $1-per-agent
+  per-UTC-day spend cap. Lock-coordinated via proper-lockfile. Exposes
+  `reserve()`, `reconcile()`, `spentToday()`, `pruneOlderThan()`,
+  and the `OverBudgetError` thrown class.
+- `ProjectDriftChecker` config now accepts optional `cache`, `ledger`,
+  and `estimatedCostPerCallUsd` fields. Backwards-compatible: passing
+  neither preserves the v0.28.93 contract.

package/upgrades/side-effects/project-scope-phase1b-pr2.md

@@ -0,0 +1,198 @@
+# Side-Effects Review — project-scope Phase 1b PR 2 (Drift cache + cost ledger)
+
+**Version / slug:** `project-scope-phase1b-pr2`
+**Date:** `2026-05-11`
+**Author:** `echo`
+**Second-pass reviewer:** `required (new persistent-state + cost-control surface)`
+
+## Summary of the change
+
+Second PR of Phase 1b. Ships the two persistent-state primitives the drift
+checker has been operating without since PR 1:
+
+- A verdict cache with mtime fast-path that avoids redundant LLM calls
+  when the spec and its referenced files haven't changed.
+- A daily-rotated cost ledger that enforces the $1/day per-agent
+  spend ceiling the spec requires.
+
+Both classes are usable on their own; `ProjectDriftChecker` now accepts
+them as optional config and wires them in around the LLM call. When
+neither is passed (the PR 1 contract), behavior is unchanged.
+
+The `POST /projects/:id/drift-check` HTTP endpoint and the per-project
+mutex around it ship in PR 3 alongside the round runner. PR 2 is the
+data-plane piece; PR 3 is the routing.
+
+Spec source: `docs/specs/PROJECT-SCOPE-SPEC.md` § Phase 1.4 ("Cache key",
+mtime fast-path, "Cost ceiling").
+
+New files:
+- `src/core/ProjectDriftCheckerCache.ts` (~230 lines) — sha256-keyed
+  in-memory verdict cache. Mtime fast-path checks file mtimes against
+  the recorded entry before computing the cache key; full-hash path is
+  fallback. 24h TTL. Disk-backed snapshot at
+  `.instar/drift-verdict-cache.json` so the cache survives restarts
+  without a cold first-call after sleep/wake. Snapshot is corruption-
+  tolerant (corrupt file → start fresh, will be overwritten on next put).
+- `src/core/DriftSpendLedger.ts` (~240 lines) — daily-rotated append-only
+  JSONL ledger at `.instar/drift-spend-YYYY-MM-DD.jsonl`. Each `reserve()`
+  appends a `{recordId, projectId, estimatedCost, actualCost: null,
+  timestamp}` row under an advisory file lock on
+  `.instar/local/drift-spend.lock` (proper-lockfile, same options as
+  the rest of the codebase). `reconcile(recordId, actualCost)` appends
+  a superseding row. `spentToday()` returns the de-duplicated tally.
+  `pruneOlderThan()` removes files outside the 30-day retention window
+  (via `SafeFsExecutor.safeRmSync`, NOT raw `fs.rmSync`).
+- `tests/unit/ProjectDriftCheckerCache.test.ts` (13 cases) — hit/miss,
+  mtime fast-path (match, content-change miss, set-shrink invalidation),
+  cache-key invalidation on every input (templateVersion, modelId,
+  specBody, file content, file rename), TTL expiry, invalidate(),
+  disk persistence across instances, corrupt-snapshot tolerance,
+  `computeCacheKey` determinism + instability semantics.
+- `tests/unit/DriftSpendLedger.test.ts` (13 cases) — default cap matches
+  spec, reserve + tally, strict-greater-than boundary at the cap
+  (equal-to-cap allowed), reconcile supersedes (no double-count),
+  idempotent reconcile, negative/non-finite rejected, JSONL row count
+  + shape after reserve+reconcile, lock-coordinated `spentToday`,
+  concurrent reserves serialize, `pruneOlderThan` removes old files,
+  corrupt row tolerance, `OverBudgetError` exposes cap/spent/estimated.
+
+Modified files:
+- `src/core/ProjectDriftChecker.ts` (~+80 lines) — config accepts
+  optional `cache` and `ledger`. Order of operations inside `run()`:
+  (1) all input validation (unchanged from PR 1) → (2) cache lookup
+  (skip LLM on hit) → (3) ledger reserve (return over-budget on cap)
+  → (4) LLM call → (5) on success, cache.put + ledger.reconcile.
+  LLM-failure verdicts (schema-fail, timeout) are NOT cached; input-
+  validation verdicts (over-budget, deleted-files, path-jail-fail) are
+  cheap to recompute and don't benefit from caching.
+- `tests/unit/ProjectDriftChecker.test.ts` (+5 cases) — cache hit avoids
+  LLM, content change forces re-run, over-budget short-circuits before
+  the LLM, reserve+reconcile round-trip, LLM-failure not cached.
+
+## Decision-point inventory
+
+- **Cache hit short-circuit** (`ProjectDriftCheckerCache.lookup`) —
+  **add** — on hit, returns the cached verdict directly, bypassing
+  the LLM. Cache key is `sha256(promptTemplateVersion + modelId +
+  specBodySha + sortedFileHashes)`; mtime fast-path bypasses the hash
+  but checks `(templateVersion, modelId, all file mtimes)`. Cache
+  invariants — TTL, hash key on file content, mtime equality — are
+  exercised by 13 unit tests.
+- **Daily cap rejection** (`DriftSpendLedger.reserve` → throws
+  `OverBudgetError`) — **add** — if `spent + estimated > cap`, throw.
+  `ProjectDriftChecker` catches it and returns
+  `manual-review-required(over-budget)`. Strict greater-than boundary
+  matches the spec (iter-2 correction).
+- **Verdict NOT cached on LLM failure** (`run` post-call) — **add** —
+  schema-fail / timeout / failed-citation-verification all return
+  before the cache write; only `no-drift`, `minor-drift`,
+  `premise-violated` reach the put path. A second call gets a fresh
+  LLM attempt rather than the previously-cached failure verdict.
+
+All three decisions are conservative: hit-on-content-match (never
+hit on stale content), reject-at-strict-cap (never overshoot), no
+cached failure (always re-try).
+
+## Over-block vs under-block analysis
+
+### Cache
+
+Over-block risk: returning a stale verdict. The cache key includes the
+full sha256 of every relevant input, so a stale verdict can only be
+served if (a) file content is unchanged AND (b) within TTL AND (c)
+modelId + templateVersion match. The mtime fast-path only fires when
+the recorded mtimes match the current stat() results — `touch` without
+content change does NOT cause a hit; it forces a full-hash fall-back
+that then matches (correct outcome). The 24h TTL is the durable floor
+even when nothing else moves.
+
+Under-block risk: cache miss when it should have hit. Acceptable —
+correctness costs an extra LLM call. The mtime fast-path is a
+performance optimization, not a correctness invariant.
+
+### Ledger
+
+Over-block risk: rejecting a call that wouldn't actually exceed the
+cap. Pre-reserve uses the `estimatedCostPerCallUsd` constant (default
+$0.01) rather than the call's real cost; in the worst case we
+over-reserve and over-block. Acceptable because the cap is the AGENT
+ceiling, not a hard per-call limit. Reconcile lowers the recorded
+spend back to actual, so subsequent calls aren't penalized.
+
+Under-block risk: under-counting. The strict `>` boundary lets
+`spent + estimated == cap` pass; that's the documented behavior, not
+a bug. A reservation that's never reconciled (caller crashed) stays as
+the pending estimate and contributes to the cap until UTC rollover —
+fail-safe rather than fail-open.
+
+The cap is per-machine. On multi-machine setups, the spec documents
+the worst-case as `N × cap` per day; the true atomic cross-machine
+cap is a same-PR tracked deferred child (`drift-spend-cross-machine`)
+referenced in the spec. PR 2 does not change that posture.
+
+## Signal vs authority audit
+
+Neither primitive holds authority. They're persistence + cost-control
+plumbing. The drift verdict is still a signal; the cache returns a
+prior signal, the ledger throws on overshoot but the resulting verdict
+(`manual-review-required(over-budget)`) is again just a signal. The
+round-runner in PR 3 holds authority for round-start, combining drift
++ artifact checks.
+
+## Interactions with existing systems
+
+- **`ProjectDriftChecker`.** Both fields are optional — passing
+  neither preserves the PR 1 contract exactly. Passing one but not
+  the other is supported (cache-only / ledger-only).
+- **`proper-lockfile`.** Already a dep (used by AgentRegistry,
+  SharedStateLedger, PlatformActivityRegistry). Same `LOCK_OPTIONS`
+  shape, same stale-detection convention.
+- **`.instar/local/`.** Lock file lives under this machine-local
+  subdirectory by spec — same convention as `round-runner.lock` (the
+  PR 3 chokepoint). Not git-synced, so two machines don't fight over
+  a 0-byte lockfile in the sync layer.
+- **`SafeFsExecutor`.** Used for `pruneOlderThan` rather than direct
+  `fs.rmSync`, matching the lint-no-direct-destructive contract.
+- **Backup / snapshot.** The spec lists
+  `.instar/drift-spend-*.jsonl` in the snapshot-include set (so a
+  restore can see the prior day's spend); this PR creates the files
+  that the existing snapshot job already names — no snapshot code
+  change needed.
+
+## Rollback cost
+
+- **Cache.** Revert restores PR 1 behavior. The snapshot file at
+  `.instar/drift-verdict-cache.json` becomes orphaned but harmless
+  (no other code reads it).
+- **Ledger.** Revert restores PR 1 behavior. The JSONL files at
+  `.instar/drift-spend-*.jsonl` are orphaned; the existing
+  snapshot/cleanup tooling still sweeps them via retention rules.
+- **No schema migrations.** Both primitives are file-backed,
+  forward-compatible. Older agent versions that don't know about
+  these fields ignore them.
+
+## What this PR explicitly defers
+
+Per spec § Phase 1.4 and § Phase 1.5, these belong to drift but ship
+in PR 3 (round runner) alongside the consumer that needs them:
+
+- `POST /projects/:id/drift-check` HTTP endpoint with per-project
+  mutex. PR 2 ships the primitive; PR 3 ships the route + server
+  wiring (cache + ledger instantiation on `AgentServer` startup,
+  injection into the routes ctx, mutex map keyed by `projectId`).
+- Integration into `ProjectRoundRunner.preflight()` step 10 ("Drift
+  check: load cached verdict if fresh + present + all hashes match;
+  otherwise run drift").
+- Multi-machine "documented worst case is `N × cap` per day"
+  visibility — surfacing the per-machine spend in the digest or
+  dashboard.
+
+## Verification
+
+- `npm run lint` — passes (tsc + lint-no-direct-destructive).
+- `npx vitest run tests/unit/ProjectDriftChecker.test.ts
+  tests/unit/DriftSpendLedger.test.ts
+  tests/unit/ProjectDriftCheckerCache.test.ts` — 76/76 pass.
+- PR 1's 45 existing tests still green; the 5 new cache+ledger
+  integration tests assert the contract changes.