sentinelayer-cli 0.27.0 → 0.28.0

package/README.md

@@ -259,6 +259,7 @@ The `review` command can now add budget-governed AI reasoning on top of determin
 
 - `sl review --ai --provider openai --model gpt-5.3-codex`
 - `sl review --ai --ai-dry-run` (no provider call; deterministic synthetic output)
+- `sl review --ai --require-usage-ledger` (fail closed if billing-grade usage cannot be recorded)
 - `sl review --ai --max-cost 1.0 --max-tokens 0 --max-runtime-ms 0 --max-tool-calls 0`
 
 AI artifacts are persisted in the same run folder:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sentinelayer-cli",
-  "version": "0.27.0",
+  "version": "0.28.0",
   "description": "Scaffold Sentinelayer spec/prompt/guide artifacts with secure browser auth and token bootstrap.",
   "type": "module",
   "scripts": {

package/src/ai/client.js

@@ -413,10 +413,18 @@ export class MultiProviderApiClient {
    *   prompt?: string,
    *   stream?: boolean,
    *   apiKey?: string,
+   *   apiUrl?: string,
    *   env?: NodeJS.ProcessEnv,
-   *   onChunk?: (chunk: string) => void
+   *   onChunk?: (chunk: string) => void,
+   *   sessionId?: string,
+   *   agentId?: string,
+   *   action?: string,
+   *   usageIdempotencyKey?: string,
+   *   billingTier?: string,
+   *   customerPricingPolicy?: string,
+   *   metadata?: object
    * }} [options]
-   * @returns {Promise<{ provider: string, model: string, text: string }>}
+   * @returns {Promise<{ provider: string, model: string, text: string, usage?: object, usageLedger?: object | null }>}
    */
   async invoke({
     provider,
@@ -424,8 +432,16 @@ export class MultiProviderApiClient {
     prompt,
     stream = false,
     apiKey,
+    apiUrl = "",
     env = process.env,
     onChunk,
+    sessionId = "",
+    agentId = "",
+    action = "",
+    usageIdempotencyKey = "",
+    billingTier = "",
+    customerPricingPolicy = "",
+    metadata = null,
   } = {}) {
     const resolvedProvider = resolveProvider({ provider, env });
     const resolvedModel = resolveModel({ provider: resolvedProvider, model });
@@ -437,10 +453,21 @@ export class MultiProviderApiClient {
         systemPrompt: "",
         model: resolvedModel,
         maxTokens: 4096,
+        apiUrl,
+        token: apiKey,
+        sessionId,
+        agentId,
+        action,
+        usageIdempotencyKey,
+        billingTier,
+        customerPricingPolicy,
+        metadata,
+        fetchImpl: this.fetchImpl,
       });
       return {
         text: result.text,
         usage: result.usage,
+        usageLedger: result.usageLedger,
         provider: "sentinelayer",
         model: resolvedModel,
       };

package/src/billing/ledger-entry.js

@@ -8,7 +8,10 @@ export const PRICED_ACTIONS = Object.freeze([
   "audit_security",
   "audit_frontend",
   "chat_ask",
+  "investor_dd_devtestbot_planner",
+  "investor_dd_file_planner",
   "omargate_deep",
+  "proxy_llm",
   "scan_precheck",
   "spec_generate_ai",
 ]);

package/src/commands/review.js

@@ -120,6 +120,7 @@ async function executeReviewRun({
       maxNoProgress: aiConfig.maxNoProgress,
       warningThresholdPercent: aiConfig.warnAtPercent,
       dryRun: Boolean(aiConfig.aiDryRun),
+      requireUsageLedger: Boolean(aiConfig.requireUsageLedger),
       env: process.env,
     });
   }
@@ -146,6 +147,7 @@ async function executeReviewRun({
     invocation: {
       aiEnabled: Boolean(aiConfig.enable),
       aiDryRun: Boolean(aiConfig.aiDryRun),
+      requireUsageLedger: Boolean(aiConfig.requireUsageLedger),
       provider: aiConfig.provider,
       model: aiConfig.model,
       sessionId: aiConfig.sessionId,
@@ -209,6 +211,7 @@ async function executeReviewRun({
           budget: aiLayer.budget,
           cost: aiLayer.cost,
           telemetry: aiLayer.telemetry,
+          billing: aiLayer.billing,
         }
       : {
           enabled: false,
@@ -283,6 +286,7 @@ export function registerReviewCommand(program) {
     .option("--staged", "Alias for --mode staged")
     .option("--ai", "Enable AI reasoning layer over deterministic findings")
     .option("--ai-dry-run", "Run AI layer in dry-run mode (no provider call)")
+    .option("--require-usage-ledger", "Fail --ai review if billing-grade session_usage cannot be recorded")
     .option("--provider <name>", "AI provider override (openai|anthropic|google)")
     .option("--model <id>", "AI model override")
     .option("--api-key <key>", "Optional explicit API key override")
@@ -314,6 +318,7 @@ export function registerReviewCommand(program) {
         aiConfig: {
           enable: Boolean(options.ai),
           aiDryRun: Boolean(options.aiDryRun),
+          requireUsageLedger: Boolean(options.requireUsageLedger),
           provider: options.provider,
           model: options.model,
           apiKey: options.apiKey,

package/src/review/ai-review.js

@@ -486,6 +486,8 @@ export async function runAiReviewLayer({
   warningThresholdPercent = 80,
   systemPrompt = "",
   dryRun = false,
+  requireUsageLedger = false,
+  usageRecorder = recordSessionUsage,
   env = process.env,
 } = {}) {
   const normalizedTargetPath = path.resolve(String(targetPath || "."));
@@ -496,6 +498,7 @@ export async function runAiReviewLayer({
     Math.floor(Number(maxFindings || DEFAULT_AI_MAX_FINDINGS))
   );
   const normalizedRunId = normalizeString(runId) || "review-ai";
+  const normalizedRequireUsageLedger = Boolean(requireUsageLedger);
 
   const config = await loadConfig({ cwd: normalizedTargetPath, env });
   let resolvedProvider = resolveProvider({
@@ -663,7 +666,7 @@ export async function runAiReviewLayer({
         dryRun: Boolean(dryRun),
       }),
     });
-    sessionUsageLedger = await recordSessionUsage(
+    sessionUsageLedger = await usageRecorder(
       normalizedSessionId,
       {
         agentId: "audit-orchestrator",
@@ -693,6 +696,11 @@ export async function runAiReviewLayer({
       ok: false,
       reason: error instanceof Error ? error.message : String(error || "session_usage_failed"),
     };
+    if (normalizedRequireUsageLedger) {
+      throw new Error(
+        `Review AI usage ledger recording failed: ${sessionUsageLedger.reason || "unknown"}.`
+      );
+    }
   }
 
   let stopTelemetry = null;
@@ -754,6 +762,7 @@ export async function runAiReviewLayer({
     provider: resolvedProvider,
     model: resolvedModel,
     dryRun: Boolean(dryRun),
+    requireUsageLedger: normalizedRequireUsageLedger,
     usage,
     pricingFound: modelCost.pricingFound,
     sessionUsageLedger,