sentinelayer-cli 0.27.1 → 0.28.0

package/README.md

@@ -259,6 +259,7 @@ The `review` command can now add budget-governed AI reasoning on top of determin
 
 - `sl review --ai --provider openai --model gpt-5.3-codex`
 - `sl review --ai --ai-dry-run` (no provider call; deterministic synthetic output)
+- `sl review --ai --require-usage-ledger` (fail closed if billing-grade usage cannot be recorded)
 - `sl review --ai --max-cost 1.0 --max-tokens 0 --max-runtime-ms 0 --max-tool-calls 0`
 
 AI artifacts are persisted in the same run folder:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sentinelayer-cli",
-  "version": "0.27.1",
+  "version": "0.28.0",
   "description": "Scaffold Sentinelayer spec/prompt/guide artifacts with secure browser auth and token bootstrap.",
   "type": "module",
   "scripts": {

package/src/commands/review.js

@@ -120,6 +120,7 @@ async function executeReviewRun({
       maxNoProgress: aiConfig.maxNoProgress,
       warningThresholdPercent: aiConfig.warnAtPercent,
       dryRun: Boolean(aiConfig.aiDryRun),
+      requireUsageLedger: Boolean(aiConfig.requireUsageLedger),
       env: process.env,
     });
   }
@@ -146,6 +147,7 @@ async function executeReviewRun({
     invocation: {
       aiEnabled: Boolean(aiConfig.enable),
       aiDryRun: Boolean(aiConfig.aiDryRun),
+      requireUsageLedger: Boolean(aiConfig.requireUsageLedger),
       provider: aiConfig.provider,
       model: aiConfig.model,
       sessionId: aiConfig.sessionId,
@@ -209,6 +211,7 @@ async function executeReviewRun({
           budget: aiLayer.budget,
           cost: aiLayer.cost,
           telemetry: aiLayer.telemetry,
+          billing: aiLayer.billing,
         }
       : {
           enabled: false,
@@ -283,6 +286,7 @@ export function registerReviewCommand(program) {
     .option("--staged", "Alias for --mode staged")
     .option("--ai", "Enable AI reasoning layer over deterministic findings")
     .option("--ai-dry-run", "Run AI layer in dry-run mode (no provider call)")
+    .option("--require-usage-ledger", "Fail --ai review if billing-grade session_usage cannot be recorded")
     .option("--provider <name>", "AI provider override (openai|anthropic|google)")
     .option("--model <id>", "AI model override")
     .option("--api-key <key>", "Optional explicit API key override")
@@ -314,6 +318,7 @@ export function registerReviewCommand(program) {
         aiConfig: {
           enable: Boolean(options.ai),
           aiDryRun: Boolean(options.aiDryRun),
+          requireUsageLedger: Boolean(options.requireUsageLedger),
           provider: options.provider,
           model: options.model,
           apiKey: options.apiKey,

package/src/review/ai-review.js

@@ -486,6 +486,8 @@ export async function runAiReviewLayer({
   warningThresholdPercent = 80,
   systemPrompt = "",
   dryRun = false,
+  requireUsageLedger = false,
+  usageRecorder = recordSessionUsage,
   env = process.env,
 } = {}) {
   const normalizedTargetPath = path.resolve(String(targetPath || "."));
@@ -496,6 +498,7 @@ export async function runAiReviewLayer({
     Math.floor(Number(maxFindings || DEFAULT_AI_MAX_FINDINGS))
   );
   const normalizedRunId = normalizeString(runId) || "review-ai";
+  const normalizedRequireUsageLedger = Boolean(requireUsageLedger);
 
   const config = await loadConfig({ cwd: normalizedTargetPath, env });
   let resolvedProvider = resolveProvider({
@@ -663,7 +666,7 @@ export async function runAiReviewLayer({
         dryRun: Boolean(dryRun),
       }),
     });
-    sessionUsageLedger = await recordSessionUsage(
+    sessionUsageLedger = await usageRecorder(
       normalizedSessionId,
       {
         agentId: "audit-orchestrator",
@@ -693,6 +696,11 @@ export async function runAiReviewLayer({
       ok: false,
       reason: error instanceof Error ? error.message : String(error || "session_usage_failed"),
     };
+    if (normalizedRequireUsageLedger) {
+      throw new Error(
+        `Review AI usage ledger recording failed: ${sessionUsageLedger.reason || "unknown"}.`
+      );
+    }
   }
 
   let stopTelemetry = null;
@@ -754,6 +762,7 @@ export async function runAiReviewLayer({
     provider: resolvedProvider,
     model: resolvedModel,
     dryRun: Boolean(dryRun),
+    requireUsageLedger: normalizedRequireUsageLedger,
     usage,
     pricingFound: modelCost.pricingFound,
     sessionUsageLedger,