orionfold-relay 0.22.0 → 0.23.0

package/README.md

@@ -104,7 +104,7 @@ The governance is *in* the workflow, not bolted on. A blueprint is a fixed step
 ## Why it stays trustworthy
 
 - **Local-first** — SQLite database, no cloud dependency, `npx orionfold-relay` and go
-- **Never phones home** — no telemetry, no update checks, no license server; the complete outbound-network inventory is documented and code-linked in [docs/trust/data-flow.md](docs/trust/data-flow.md)
+- **Relay never sends your data to Orionfold** — no telemetry, no update checks, no license server; the complete outbound-network inventory is documented and code-linked in [docs/trust/data-flow.md](docs/trust/data-flow.md)
 - **Your rules, enforced** — tool permissions, inbox approvals, and audit trails for every agent action
 - **Your AI team** — 21 specialist profiles ready to deploy, each with instructions, tool policies, and runtime tuning
 - **Know what you spend** — usage metering, budgets, and per-provider/per-model spend visibility on governed runs
@@ -134,8 +134,8 @@ relay license remove <license-id>                            # forget a license
 
 - **Verification is 100% offline** — an Ed25519 signature check against keys embedded in
   this repo ([`src/lib/licensing/verify.ts`](src/lib/licensing/verify.ts)). Relay never
-  phones home: no activation server, no telemetry, no network call of any kind. Works
-  air-gapped.
+  sends your data to Orionfold: no activation server, no telemetry, no network call of
+  any kind. Works air-gapped.
 - **Your packs are yours forever. Renewal gets you the year's new and updated packs +
   priority support.** An expired or removed license never re-locks content you already
   installed — it only gates new premium installs and updates.

package/dist/cli.js

@@ -1186,7 +1186,7 @@ var CURRENT_PLUGIN_API_VERSION, CAPABILITY_VALUES, ORIGIN_VALUES, PrimitivesBund
 var init_types = __esm({
   "src/lib/plugins/sdk/types.ts"() {
     "use strict";
-    CURRENT_PLUGIN_API_VERSION = "0.22";
+    CURRENT_PLUGIN_API_VERSION = "0.23";
     CAPABILITY_VALUES = ["fs", "net", "child_process", "env"];
     ORIGIN_VALUES = ["ainative-internal", "third-party"];
     PrimitivesBundleManifestSchema = z.object({
@@ -3739,9 +3739,25 @@ var init_format = __esm({
       /**
        * Premium display copy (D6). Offline strings rendered on the locked
        * gallery card — the Website still owns actual pricing. Meaningful only
-       * alongside `entitlement`; harmless on a free pack.
+       * alongside `entitlement`; harmless on a free pack. Either a flat string
+       * ("$499/year") or a two-phase offer ({ list, intro?, note? }) so a
+       * founding/introductory price can render alongside the list price.
+       * Render sites consume `packPrice()` — never branch on the raw shape.
        */
-      price: z3.string().min(1).optional(),
+      price: z3.union([
+        z3.string().min(1),
+        z3.object({
+          list: z3.string().min(1),
+          intro: z3.string().min(1).optional(),
+          note: z3.string().min(1).optional()
+        }).strict()
+      ]).optional(),
+      /**
+       * Card identity token — a lucide icon name rendered on the gallery card
+       * (e.g. "briefcase"). Unknown tokens fall back to the default glyph;
+       * never a remote asset.
+       */
+      icon: z3.string().min(1).optional(),
       /** Get-license CTA target on the locked card. */
       purchaseUrl: z3.url().optional(),
       /**
@@ -6910,6 +6926,34 @@ var init_output_scanner = __esm({
   }
 });
 
+// src/lib/agents/runtime/model-preference.ts
+var model_preference_exports = {};
+__export(model_preference_exports, {
+  resolvePreferredModel: () => resolvePreferredModel
+});
+async function resolvePreferredModel(runtimeId, options) {
+  if (options?.pinnedModelId) {
+    return { modelId: options.pinnedModelId, source: "pin" };
+  }
+  const models = getRuntimeCatalogEntry(runtimeId).models;
+  const preference = await getModelPreference();
+  const tierModel = preference === "balanced" ? models.tiers?.balanced : preference === "cost" ? models.tiers?.fast : preference === "quality" ? models.tiers?.quality : void 0;
+  if (tierModel) {
+    return { modelId: tierModel, source: "preference" };
+  }
+  return {
+    modelId: models.tiers?.quality ?? models.default,
+    source: "default"
+  };
+}
+var init_model_preference = __esm({
+  "src/lib/agents/runtime/model-preference.ts"() {
+    "use strict";
+    init_catalog2();
+    init_helpers();
+  }
+});
+
 // src/lib/agents/runtime/claude-sdk.ts
 function buildClaudeSdkEnv(authEnv) {
   const { CLAUDECODE, ANTHROPIC_API_KEY, ...cleanEnv } = process.env;
@@ -7679,6 +7723,9 @@ async function deriveUsageCostMicros(input) {
   if (!input.modelId) {
     return { costMicros: null, pricingVersion: null };
   }
+  if (input.providerId === "ollama") {
+    return { costMicros: 0, pricingVersion: "local-free" };
+  }
   if (input.providerId !== "anthropic" && input.providerId !== "openai") {
     return { costMicros: null, pricingVersion: null };
   }
@@ -12898,7 +12945,7 @@ var init_registry6 = __esm({
     init_registry5();
     init_installer();
     init_schedule_spec();
-    SUPPORTED_API_VERSIONS = /* @__PURE__ */ new Set([CURRENT_PLUGIN_API_VERSION, "0.21"]);
+    SUPPORTED_API_VERSIONS = /* @__PURE__ */ new Set([CURRENT_PLUGIN_API_VERSION, "0.22"]);
     pluginCache = null;
     lastLoadedPluginIds = /* @__PURE__ */ new Set();
     PluginTableSchema = z16.object({
@@ -18074,13 +18121,17 @@ ${learnedCtx}
 You are operating inside a git worktree (branch: ${ws.gitBranch ?? "unknown"}). All file operations MUST use paths relative to the working directory: ${cwd}. Do NOT navigate to or create files in the main repository directory.` : "";
   const systemInstructions = [worktreeNote, profileInstructions, learnedCtxBlock, docContext, tableContext, outputInstructions].filter(Boolean).join("\n\n");
   const maxTurns = profile?.maxTurns ?? DEFAULT_MAX_TURNS;
+  const { modelId } = await resolvePreferredModel("claude-code", {
+    pinnedModelId: profile?.capabilityOverrides?.["claude-code"]?.modelId
+  });
   return {
     userPrompt: basePrompt,
     systemInstructions,
     cwd,
     payload,
     maxTurns,
-    canUseToolPolicy: payload?.canUseToolPolicy
+    canUseToolPolicy: payload?.canUseToolPolicy,
+    modelId
   };
 }
 async function executeClaudeTask(taskId) {
@@ -18126,6 +18177,10 @@ async function executeClaudeTask(taskId) {
       prompt: ctx.userPrompt,
       options: {
         abortController,
+        // Explicit model: profile pin > onboarding preference > quality
+        // default. Omitting this let the SDK pick ITS default (Opus) and
+        // silently bill the wrong tier.
+        model: ctx.modelId,
         includePartialMessages: true,
         cwd: ctx.cwd,
         env: buildClaudeSdkEnv(authEnv),
@@ -18248,6 +18303,9 @@ async function resumeClaudeTask(taskId) {
       options: {
         resume: task.sessionId,
         abortController,
+        // Same model resolution as the original run — a resume must not
+        // silently hop tiers (profile pin > preference > quality default).
+        model: ctx.modelId,
         includePartialMessages: true,
         cwd: ctx.cwd,
         env: buildClaudeSdkEnv(authEnv),
@@ -18366,6 +18424,7 @@ var init_claude_agent = __esm({
     init_context_builder2();
     init_output_scanner();
     init_registry2();
+    init_model_preference();
     init_compatibility();
     init_claude_sdk();
     init_types2();
@@ -18384,9 +18443,8 @@ var init_claude_agent = __esm({
 // src/lib/agents/runtime/claude.ts
 import { query as query2 } from "@anthropic-ai/claude-agent-sdk";
 import { eq as eq34 } from "drizzle-orm";
-function claudeCodeModelAlias() {
-  const models = getRuntimeCatalogEntry("claude-code").models;
-  return models.tiers?.quality ?? models.default;
+async function claudeCodeModelAlias() {
+  return (await resolvePreferredModel("claude-code")).modelId;
 }
 function buildTaskAssistSystemPrompt(profileIds) {
   const profileList = profileIds.length > 0 ? `Available agent profiles: ${profileIds.join(", ")}
@@ -18480,7 +18538,7 @@ Provide a brief analysis (2-3 paragraphs max). Include specific terminology rele
       prompt,
       options: {
         abortController,
-        model: claudeCodeModelAlias(),
+        model: await claudeCodeModelAlias(),
         includePartialMessages: true,
         env: buildClaudeSdkEnv(authEnv),
         allowedTools: []
@@ -18621,7 +18679,7 @@ async function runMetaCompletion(input) {
       prompt: input.prompt,
       options: {
         abortController,
-        model: claudeCodeModelAlias(),
+        model: await claudeCodeModelAlias(),
         includePartialMessages: true,
         cwd: getLaunchCwd(),
         env: buildClaudeSdkEnv(authEnv),
@@ -18801,7 +18859,7 @@ ${userMessage}`;
       prompt,
       options: {
         abortController,
-        model: claudeCodeModelAlias(),
+        model: await claudeCodeModelAlias(),
         includePartialMessages: true,
         cwd: getLaunchCwd(),
         env: buildClaudeSdkEnv(authEnv),
@@ -18876,7 +18934,7 @@ ${userMessage}`;
       prompt,
       options: {
         abortController,
-        model: claudeCodeModelAlias(),
+        model: await claudeCodeModelAlias(),
         includePartialMessages: true,
         cwd: getLaunchCwd(),
         env: buildClaudeSdkEnv(authEnv),
@@ -18941,7 +18999,7 @@ async function testClaudeConnection() {
       prompt: "Reply with exactly: OK",
       options: {
         abortController,
-        model: claudeCodeModelAlias(),
+        model: await claudeCodeModelAlias(),
         maxTurns: 1,
         includePartialMessages: false,
         cwd: getLaunchCwd(),
@@ -18988,6 +19046,7 @@ var init_claude = __esm({
     init_compatibility();
     init_claude_agent();
     init_catalog2();
+    init_model_preference();
     init_claude_sdk();
     init_workspace_context();
     init_helpers();
@@ -20703,6 +20762,24 @@ async function withAnthropicDirectMcpServers(profileServers, browserServers, ext
     relay: relayServer
   };
 }
+function mcpServersToAnthropicConnectors(mergedServers) {
+  const connectors = [];
+  for (const [name, config] of Object.entries(mergedServers)) {
+    if (name === "relay") continue;
+    const cfg = config;
+    const url = cfg.url ?? cfg.server_url;
+    if (typeof url !== "string" || url.length === 0) {
+      continue;
+    }
+    const connector = { type: "url", url, name };
+    for (const [key, value] of Object.entries(cfg)) {
+      if (["url", "server_url", "command", "args", "env"].includes(key)) continue;
+      if (typeof value === "string") connector[key] = value;
+    }
+    connectors.push(connector);
+  }
+  return connectors;
+}
 async function getAnthropicSDK() {
   if (!_sdk) {
     _sdk = await import("@anthropic-ai/sdk");
@@ -20769,7 +20846,7 @@ async function callAnthropicModel(client, systemPrompt, messages, tools, signal,
       budget_tokens: options.extendedThinking.budgetTokens ?? 1e4
     };
   }
-  if (options.mcpServers && Object.keys(options.mcpServers).length > 0) {
+  if (options.mcpServers && options.mcpServers.length > 0) {
     params.mcp_servers = options.mcpServers;
   }
   const stream = client.messages.stream(params, { signal });
@@ -20874,6 +20951,7 @@ ${outputInstructions}`;
       pluginServers,
       task.projectId
     );
+    const mcpConnectors = mcpServersToAnthropicConnectors(mergedMcpServers);
     let initialMessages;
     if (isResume) {
       const snapshot = await loadSessionSnapshot(taskId);
@@ -20882,7 +20960,8 @@ ${outputInstructions}`;
       initialMessages = [{ role: "user", content: ctx.userPrompt }];
     }
     const { getSetting: getSetting2 } = await Promise.resolve().then(() => (init_helpers(), helpers_exports));
-    const modelId = await getSetting2("anthropic_direct_model") ?? getRuntimeCatalogEntry("anthropic-direct").models.default;
+    const { resolvePreferredModel: resolvePreferredModel2 } = await Promise.resolve().then(() => (init_model_preference(), model_preference_exports));
+    const modelId = await getSetting2("anthropic_direct_model") ?? (await resolvePreferredModel2("anthropic-direct")).modelId;
     const maxTurns = ctx.maxTurns ?? DEFAULT_MAX_TURNS;
     await db.insert(agentLogs).values({
       id: crypto.randomUUID(),
@@ -20921,7 +21000,7 @@ ${outputInstructions}`;
             enableCaching: true,
             profileInstructions: profile?.skillMd,
             extendedThinking: capOverrides?.extendedThinking,
-            mcpServers: mergedMcpServers
+            mcpServers: mcpConnectors
           }
         );
         await saveSessionSnapshot(taskId, agentProfileId, [
@@ -21353,7 +21432,8 @@ ${outputInstructions}`;
     );
     const pluginMcpTools = mcpServersToOpenAiTools(mergedMcpServers);
     const { getSetting: getSetting2 } = await Promise.resolve().then(() => (init_helpers(), helpers_exports));
-    const modelId = await getSetting2("openai_direct_model") ?? getRuntimeCatalogEntry("openai-direct").models.default;
+    const { resolvePreferredModel: resolvePreferredModel2 } = await Promise.resolve().then(() => (init_model_preference(), model_preference_exports));
+    const modelId = await getSetting2("openai_direct_model") ?? (await resolvePreferredModel2("openai-direct")).modelId;
     const maxTurns = ctx.maxTurns ?? DEFAULT_MAX_TURNS;
     let previousResponseId = null;
     if (isResume) {
@@ -22193,6 +22273,17 @@ async function getUsageAggregates(policy, runtimeStates, now = /* @__PURE__ */ n
       runtimes[runtimeId].daily.totalTokens += row.totalTokens ?? 0;
     }
   });
+  const metered = {
+    daily: { costMicros: 0, totalTokens: 0 },
+    monthly: { costMicros: 0, totalTokens: 0 }
+  };
+  for (const runtimeId of SUPPORTED_AGENT_RUNTIMES) {
+    metered.daily.costMicros += runtimes[runtimeId].daily.costMicros;
+    metered.daily.totalTokens += runtimes[runtimeId].daily.totalTokens;
+    metered.monthly.costMicros += runtimes[runtimeId].monthly.costMicros;
+    metered.monthly.totalTokens += runtimes[runtimeId].monthly.totalTokens;
+  }
+  let planPricedMonthlyMicros = null;
   if (runtimeStates["claude-code"].billingMode === "subscription") {
     const planPriceUsd = await getClaudeOAuthPlanPrice(
       policy.runtimes["claude-code"].claudeOAuthPlan
@@ -22201,6 +22292,7 @@ async function getUsageAggregates(policy, runtimeStates, now = /* @__PURE__ */ n
     const dailyMicros = Math.round(monthlyMicros / daysInMonth(now));
     runtimes["claude-code"].monthly.costMicros = monthlyMicros;
     runtimes["claude-code"].daily.costMicros = dailyMicros;
+    planPricedMonthlyMicros = monthlyMicros;
   }
   const overall = {
     daily: { costMicros: 0, totalTokens: 0 },
@@ -22218,6 +22310,8 @@ async function getUsageAggregates(policy, runtimeStates, now = /* @__PURE__ */ n
   return {
     overall,
     runtimes,
+    metered,
+    planPricedMonthlyMicros,
     ...getBudgetWindowBounds(now)
   };
 }
@@ -25681,8 +25775,8 @@ import { execFileSync as execFileSync3 } from "child_process";
 import yaml12 from "js-yaml";
 import semver from "semver";
 function relayCoreVersion() {
-  if (semver.valid("0.22.0")) {
-    return "0.22.0";
+  if (semver.valid("0.23.0")) {
+    return "0.23.0";
   }
   try {
     const root = getAppRoot(import.meta.dirname, 3);
@@ -26925,6 +27019,10 @@ function hasSqliteHeader(path24) {
     return false;
   }
 }
+var MIGRATION_CHAIN = [
+  { fromDir: ".stagent", toDir: ".ainative", fromDb: "stagent.db", toDb: "ainative.db" },
+  { fromDir: ".ainative", toDir: ".relay", fromDb: "ainative.db", toDb: "relay.db" }
+];
 async function migrateLegacyData(options = {}) {
   const home = options.home ?? homedir2();
   const gitDir = options.gitDir ?? join6(process.cwd(), ".git");
@@ -26937,46 +27035,50 @@ async function migrateLegacyData(options = {}) {
     keychainMigrated: false,
     errors: []
   };
-  const oldDir = join6(home, ".stagent");
-  const newDir = join6(home, ".ainative");
-  if (existsSync4(oldDir) && !existsSync4(newDir)) {
-    try {
-      renameSync(oldDir, newDir);
-      report.dirMigrated = true;
-      log(`renamed ${oldDir} -> ${newDir}`);
-    } catch (err2) {
-      const e = err2;
-      if (e.code === "EXDEV") {
-        try {
-          cpSync(oldDir, newDir, { recursive: true });
-          rmSync2(oldDir, { recursive: true, force: true });
-          report.dirMigrated = true;
-          log(`copied ${oldDir} -> ${newDir} (cross-device fallback)`);
-        } catch (copyErr) {
-          report.errors.push(`dir copy failed: ${String(copyErr)}`);
+  const finalDir = join6(home, MIGRATION_CHAIN[MIGRATION_CHAIN.length - 1].toDir);
+  const finalDbName = MIGRATION_CHAIN[MIGRATION_CHAIN.length - 1].toDb;
+  for (const hop of MIGRATION_CHAIN) {
+    const oldDir = join6(home, hop.fromDir);
+    const newDir = join6(home, hop.toDir);
+    if (existsSync4(oldDir) && !existsSync4(newDir)) {
+      try {
+        renameSync(oldDir, newDir);
+        report.dirMigrated = true;
+        log(`renamed ${oldDir} -> ${newDir}`);
+      } catch (err2) {
+        const e = err2;
+        if (e.code === "EXDEV") {
+          try {
+            cpSync(oldDir, newDir, { recursive: true });
+            rmSync2(oldDir, { recursive: true, force: true });
+            report.dirMigrated = true;
+            log(`copied ${oldDir} -> ${newDir} (cross-device fallback)`);
+          } catch (copyErr) {
+            report.errors.push(`dir copy failed: ${String(copyErr)}`);
+            return report;
+          }
+        } else {
+          report.errors.push(`dir rename failed: ${String(err2)}`);
           return report;
         }
-      } else {
-        report.errors.push(`dir rename failed: ${String(err2)}`);
-        return report;
       }
     }
-  }
-  if (existsSync4(newDir)) {
-    for (const suffix of ["", "-shm", "-wal"]) {
-      const oldName = join6(newDir, `stagent.db${suffix}`);
-      const newName = join6(newDir, `ainative.db${suffix}`);
-      if (existsSync4(oldName) && !existsSync4(newName)) {
-        try {
-          renameSync(oldName, newName);
-          report.dbFilesRenamed++;
-        } catch (err2) {
-          report.errors.push(`db file rename failed (${suffix}): ${String(err2)}`);
+    if (existsSync4(newDir)) {
+      for (const suffix of ["", "-shm", "-wal"]) {
+        const oldName = join6(newDir, `${hop.fromDb}${suffix}`);
+        const newName = join6(newDir, `${hop.toDb}${suffix}`);
+        if (existsSync4(oldName) && !existsSync4(newName)) {
+          try {
+            renameSync(oldName, newName);
+            report.dbFilesRenamed++;
+          } catch (err2) {
+            report.errors.push(`db file rename failed (${suffix}): ${String(err2)}`);
+          }
         }
       }
     }
   }
-  const dbPath4 = join6(newDir, "ainative.db");
+  const dbPath4 = join6(finalDir, finalDbName);
   if (existsSync4(dbPath4) && !hasSqliteHeader(dbPath4)) {
     log(`skipping SQL migration \u2014 ${dbPath4} exists but lacks SQLite header`);
   }

package/drizzle.config.ts

@@ -2,13 +2,13 @@ import { defineConfig } from "drizzle-kit";
 import { homedir } from "os";
 import { join } from "path";
 
-const dataDir = process.env.AINATIVE_DATA_DIR || join(homedir(), ".ainative");
+const dataDir = process.env.RELAY_DATA_DIR || join(homedir(), ".relay");
 
 export default defineConfig({
   schema: "./src/lib/db/schema.ts",
   out: "./src/lib/db/migrations",
   dialect: "sqlite",
   dbCredentials: {
-    url: join(dataDir, "ainative.db"),
+    url: join(dataDir, "relay.db"),
   },
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orionfold-relay",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "description": "Orionfold Relay — a local-first, multi-agent orchestration runtime and builder scaffold for AI-native work.",
   "keywords": [
     "ai",

package/src/app/api/license/route.ts

@@ -14,7 +14,7 @@ import type { SignedLicense } from "@/lib/licensing/verify";
  * paste/upload activation path for UI-first users: the browser reads the
  * fulfilment file client-side and ships the `{ payload, signature }` envelope
  * as JSON. Verification is offline Ed25519 inside saveLicense; nothing here
- * phones home.
+ * sends user data to Orionfold.
  */
 
 const BodySchema = z.object({

package/src/app/api/telemetry/route.ts

@@ -175,9 +175,6 @@ export async function GET() {
       getFailuresByDay(7),
     ]);
 
-    const overallDaily = budget.statuses.find(
-      (s) => s.scopeId === "overall" && s.window === "daily",
-    );
     const overallMonthly = budget.statuses.find(
       (s) => s.scopeId === "overall" && s.window === "monthly",
     );
@@ -196,8 +193,12 @@ export async function GET() {
       activeProjects: activeProjects?.count ?? 0,
       activeWorkflows: activeWorkflows?.count ?? 0,
       reviewPending,
-      costTodayMicros: overallDaily?.currentValue ?? 0,
-      costToDateMicros: overallMonthly?.currentValue ?? 0,
+      // Metered ledger sums only — the guardrail statuses' plan-priced budget
+      // basis must never render as "cost" (fix-dashboard-budget-vs-cost-labeling).
+      costTodayMicros: budget.meteredSpend.dailyMicros,
+      costToDateMicros: budget.meteredSpend.monthlyMicros,
+      budgetMonthlyCapMicros: overallMonthly?.limitValue ?? null,
+      planPricedMonthlyMicros: budget.planPricedMonthlyMicros,
       runtimeLabel,
       providerId,
       runtimeSdkVersion,