tines 0.0.204 → 0.0.206

package/dist/index.js

@@ -3536,22 +3536,22 @@ function runDurationLabel(run2, now = Date.now()) {
   return seconds < 60 ? `${seconds}s` : `${Math.floor(seconds / 60)}m`;
 }
 function runCostLabel(run2) {
-  const usage = run2.usage;
-  if (!usage) return null;
-  if (usage.cost_usd !== void 0) {
-    const dollars = usage.cost_usd === 0 ? "$0" : usage.cost_usd < 0.01 ? "<$0.01" : `$${usage.cost_usd.toFixed(2)}`;
-    const source = usage.cost_source === "provider" ? "Reported" : usage.cost_source === "priced" ? "Estimated" : "Recorded";
+  const usage2 = run2.usage;
+  if (!usage2) return null;
+  if (usage2.cost_usd !== void 0) {
+    const dollars = usage2.cost_usd === 0 ? "$0" : usage2.cost_usd < 0.01 ? "<$0.01" : `$${usage2.cost_usd.toFixed(2)}`;
+    const source = usage2.cost_source === "provider" ? "Reported" : usage2.cost_source === "priced" ? "Estimated" : "Recorded";
     return `${dollars} ${source}`;
   }
-  if (usage.pricing?.status === "unpriced") return "Unpriced";
-  if (usage.cost_source === "none") return "Unreported";
+  if (usage2.pricing?.status === "unpriced") return "Unpriced";
+  if (usage2.cost_source === "none") return "Unreported";
   const measured = [
-    usage.input_tokens,
-    usage.output_tokens,
-    usage.cache_read_tokens,
-    usage.cache_write_tokens
+    usage2.input_tokens,
+    usage2.output_tokens,
+    usage2.cache_read_tokens,
+    usage2.cache_write_tokens
   ].some((value) => value !== void 0);
-  const tokens = (usage.input_tokens ?? 0) + (usage.output_tokens ?? 0) + (usage.cache_read_tokens ?? 0) + (usage.cache_write_tokens ?? 0);
+  const tokens = (usage2.input_tokens ?? 0) + (usage2.output_tokens ?? 0) + (usage2.cache_read_tokens ?? 0) + (usage2.cache_write_tokens ?? 0);
   return tokens > 0 ? `${tokens.toLocaleString()} tok` : measured ? "Unpriced" : null;
 }
 function utilizationLabel(quota, activeRuns, stateName = (id2) => id2) {
@@ -3587,8 +3587,8 @@ function str(v) {
 function isoTime(v) {
   return typeof v === "number" && Number.isFinite(v) ? new Date(v).toISOString() : "an unknown time";
 }
-function joinChanged(v, sep3) {
-  return Array.isArray(v) ? v.join(sep3) : "";
+function joinChanged(v, sep4) {
+  return Array.isArray(v) ? v.join(sep4) : "";
 }
 function action(type) {
   return type.split(".")[1] ?? type;
@@ -5354,30 +5354,30 @@ function structuralDocument(value, allowMissingDigest) {
     throw new LibraryValidationError([
       { path: "", code: "invalid_document", message: "Library document must be an object" }
     ]);
-  const object3 = value;
-  if (object3.format !== "tines.library")
+  const object4 = value;
+  if (object4.format !== "tines.library")
     throw new LibraryValidationError([
       { path: "/format", code: "invalid_format", message: "Expected tines.library" }
     ]);
-  if (object3.version !== 3)
+  if (object4.version !== 3)
     throw new LibraryValidationError([
       {
         path: "/version",
         code: "unsupported_version",
-        message: `Unsupported library version ${String(object3.version)}`
+        message: `Unsupported library version ${String(object4.version)}`
       }
     ]);
-  if (object3.profile !== "workflow" && object3.profile !== "library")
+  if (object4.profile !== "workflow" && object4.profile !== "library")
     throw new LibraryValidationError([
       { path: "/profile", code: "invalid_profile", message: "Expected workflow or library profile" }
     ]);
-  const allowed = TOP_LEVEL[object3.profile];
-  const unknown = Object.keys(object3).find((key) => !allowed.includes(key));
+  const allowed = TOP_LEVEL[object4.profile];
+  const unknown = Object.keys(object4).find((key) => !allowed.includes(key));
   if (unknown)
     throw new LibraryValidationError([
       { path: `/${unknown}`, code: "unknown_field", message: `Unknown field ${unknown}` }
     ]);
-  if (!Number.isSafeInteger(object3.exported_at) || object3.exported_at < 0)
+  if (!Number.isSafeInteger(object4.exported_at) || object4.exported_at < 0)
     throw new LibraryValidationError([
       {
         path: "/exported_at",
@@ -5385,7 +5385,7 @@ function structuralDocument(value, allowMissingDigest) {
         message: "exported_at must be a non-negative safe integer"
       }
     ]);
-  if (!(allowMissingDigest && object3.digest === void 0) && (typeof object3.digest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(object3.digest)))
+  if (!(allowMissingDigest && object4.digest === void 0) && (typeof object4.digest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(object4.digest)))
     throw new LibraryValidationError([
       {
         path: "/digest",
@@ -5395,14 +5395,14 @@ function structuralDocument(value, allowMissingDigest) {
     ]);
   for (const key of allowed) {
     if (key === "digest" && allowMissingDigest) continue;
-    if (!(key in object3))
+    if (!(key in object4))
       throw new LibraryValidationError([
         { path: `/${key}`, code: "missing_field", message: `Missing required field ${key}` }
       ]);
   }
   return {
-    ...object3,
-    digest: typeof object3.digest === "string" ? object3.digest : ""
+    ...object4,
+    digest: typeof object4.digest === "string" ? object4.digest : ""
   };
 }
 async function parseLibraryV3Document(input2, options = {}) {
@@ -5751,11 +5751,11 @@ function assertNewStatesHavePrompts(states, prompts) {
   }
 }
 function parseScheduleRef(ref) {
-  const sep3 = ref.indexOf("/");
-  if (sep3 < 1 || sep3 === ref.length - 1) {
+  const sep4 = ref.indexOf("/");
+  if (sep4 < 1 || sep4 === ref.length - 1) {
     throw new CliError(`schedule reference must look like <project>/<name>, got "${ref}"`);
   }
-  return { project: ref.slice(0, sep3), name: ref.slice(sep3 + 1) };
+  return { project: ref.slice(0, sep4), name: ref.slice(sep4 + 1) };
 }
 function parseIssueRef(ref) {
   const match = ref.match(/^(.+)\/(\d+)$/);
@@ -5763,12 +5763,12 @@ function parseIssueRef(ref) {
   return { project: match[1], number: Number.parseInt(match[2], 10) };
 }
 function parseFileSpec(spec) {
-  const sep3 = spec.indexOf("=");
-  if (sep3 < 1 || sep3 === spec.length - 1) {
+  const sep4 = spec.indexOf("=");
+  if (sep4 < 1 || sep4 === spec.length - 1) {
     throw new CliError(`--file must look like <path>=@<local-file>, got "${spec}"`);
   }
-  const path2 = spec.slice(0, sep3);
-  const source = spec.slice(sep3 + 1);
+  const path2 = spec.slice(0, sep4);
+  const source = spec.slice(sep4 + 1);
   if (!source.startsWith("@")) {
     throw new CliError(
       `skill file content always comes from a local file: --file ${path2}=@<local-file>`
@@ -5782,10 +5782,10 @@ function parseFileSpec(spec) {
   }
 }
 function parseTargetSpec(spec) {
-  const sep3 = spec.lastIndexOf(":");
-  if (sep3 === -1) return { name: spec };
-  const name2 = spec.slice(0, sep3);
-  const tier = spec.slice(sep3 + 1);
+  const sep4 = spec.lastIndexOf(":");
+  if (sep4 === -1) return { name: spec };
+  const name2 = spec.slice(0, sep4);
+  const tier = spec.slice(sep4 + 1);
   if (!name2) throw new CliError(`target must look like <runner>[:tier], got "${spec}"`);
   if (!MODEL_TIERS.includes(tier)) {
     throw new CliError(`unknown tier "${tier}" in "${spec}" (tiers: ${MODEL_TIERS.join(", ")})`);
@@ -5997,12 +5997,12 @@ async function resolveLabelFlag(api, ref) {
   return match.id;
 }
 async function resolveStateFlag(api, ref) {
-  const sep3 = ref.indexOf("/");
-  if (sep3 < 1 || sep3 === ref.length - 1) {
+  const sep4 = ref.indexOf("/");
+  if (sep4 < 1 || sep4 === ref.length - 1) {
     die(`--state must look like <workflow>/<state>, got "${ref}"`);
   }
-  const workflow2 = await resolveWorkflow(api, ref.slice(0, sep3));
-  const stateRef2 = ref.slice(sep3 + 1);
+  const workflow2 = await resolveWorkflow(api, ref.slice(0, sep4));
+  const stateRef2 = ref.slice(sep4 + 1);
   const state = workflow2.states.find((s) => s.name === stateRef2) ?? workflow2.states.find((s) => s.id === stateRef2);
   if (!state) {
     die(
@@ -8503,8 +8503,8 @@ import {
   writeFileSync as writeFileSync3
 } from "node:fs";
 import { randomUUID } from "node:crypto";
-import { dirname as dirname4, join as join5 } from "node:path";
-import { StringDecoder } from "node:string_decoder";
+import { dirname as dirname4, join as join6 } from "node:path";
+import { StringDecoder as StringDecoder2 } from "node:string_decoder";
 
 // src/version.ts
 import { readFileSync as readFileSync6 } from "node:fs";
@@ -8531,7 +8531,17 @@ function copySummary(value) {
     ...value.pricingEvidence ? {
       pricingEvidence: {
         ...value.pricingEvidence,
-        ...value.pricingEvidence.raw_usage ? { raw_usage: { ...value.pricingEvidence.raw_usage } } : {}
+        ...value.pricingEvidence.raw_usage ? { raw_usage: { ...value.pricingEvidence.raw_usage } } : {},
+        ...value.pricingEvidence.request_context ? {
+          request_context: {
+            ...value.pricingEvidence.request_context,
+            ...value.pricingEvidence.request_context.status === "complete" ? {
+              reconciled_usage: {
+                ...value.pricingEvidence.request_context.reconciled_usage
+              }
+            } : {}
+          }
+        } : {}
       }
     } : {}
   };
@@ -8659,10 +8669,10 @@ var ClaudeStreamRenderer = class {
     }
     if (validMetric(event.num_turns)) this.collected.numTurns = event.num_turns;
     if (validMetric(event.duration_ms)) this.collected.durationMs = event.duration_ms;
-    const usage = { cost_source: "provider" };
+    const usage2 = { cost_source: "provider" };
     let measured = false;
     if (validMetric(event.total_cost_usd)) {
-      usage.cost_usd = event.total_cost_usd;
+      usage2.cost_usd = event.total_cost_usd;
       measured = true;
     }
     const raw = event.usage;
@@ -8674,12 +8684,12 @@ var ClaudeStreamRenderer = class {
         ["cache_creation_input_tokens", "cache_write_tokens"]
       ]) {
         if (validMetric(raw[source])) {
-          usage[destination] = raw[source];
+          usage2[destination] = raw[source];
           measured = true;
         }
       }
     }
-    if (measured) this.collected.usage = usage;
+    if (measured) this.collected.usage = usage2;
   }
 };
 
@@ -8836,12 +8846,12 @@ var CodexStreamRenderer = class {
       this.stickyStatus = "nonmonotonic";
     }
     status = this.stickyStatus ?? status;
-    const usage = {};
-    if (complete) usage.input_tokens = input2;
-    if (rawCached !== void 0) usage.cache_read_tokens = rawCached;
-    if (rawWrite !== void 0) usage.cache_write_tokens = rawWrite;
-    if (output !== void 0) usage.output_tokens = output;
-    this.collected.usage = usage;
+    const usage2 = {};
+    if (complete) usage2.input_tokens = input2;
+    if (rawCached !== void 0) usage2.cache_read_tokens = rawCached;
+    if (rawWrite !== void 0) usage2.cache_write_tokens = rawWrite;
+    if (output !== void 0) usage2.output_tokens = output;
+    this.collected.usage = usage2;
     this.updateEvidence(status, void 0, rawUsage);
   }
   updateEvidence(status, rerouted, rawUsage) {
@@ -8862,6 +8872,261 @@ var CodexStreamRenderer = class {
   }
 };
 
+// src/daemon/codex-rollout.ts
+import { open, opendir, realpath, stat } from "node:fs/promises";
+import { isAbsolute, join as join3, relative, resolve, sep } from "node:path";
+import { homedir as homedir2 } from "node:os";
+import { StringDecoder } from "node:string_decoder";
+var CODEX_ROLLOUT_MAX_BYTES = 128 * 1024 * 1024;
+var CODEX_ROLLOUT_MAX_LINE_BYTES = 8 * 1024 * 1024;
+var CODEX_ROLLOUT_MAX_LINES = 25e4;
+var CODEX_ROLLOUT_MAX_REQUESTS = 1e4;
+var CODEX_ROLLOUT_TIMEOUT_MS = 5e3;
+var SUPPORTED_VERSION = "0.153.4";
+var FIELDS = [
+  "input_tokens",
+  "cached_input_tokens",
+  "cache_write_input_tokens",
+  "output_tokens"
+];
+var unavailable = (reason) => ({
+  version: 1,
+  normalization: "codex-rollout-delta-v1",
+  status: "unavailable",
+  reason
+});
+var invalid2 = (reason, harness_version) => ({
+  version: 1,
+  normalization: "codex-rollout-delta-v1",
+  ...harness_version ? { harness_version: harness_version.slice(0, 100) } : {},
+  status: "invalid",
+  reason
+});
+function object3(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function usage(value, validateClasses = true) {
+  const raw = object3(value);
+  if (!raw) return;
+  const out = {};
+  for (const field of FIELDS) {
+    const metric = raw[field];
+    if (!Number.isSafeInteger(metric) || metric < 0) return;
+    out[field] = metric;
+  }
+  if (validateClasses && out.cached_input_tokens + out.cache_write_input_tokens > out.input_tokens)
+    return;
+  return out;
+}
+function equal(a, b) {
+  return FIELDS.every((field) => a[field] === b[field]);
+}
+function reconcileCodexRollout(records, input2) {
+  let metadata = false;
+  let harnessVersion;
+  let observedModel;
+  let previous = {
+    input_tokens: 0,
+    cached_input_tokens: 0,
+    cache_write_input_tokens: 0,
+    output_tokens: 0
+  };
+  let observed = false;
+  let requestCount = 0;
+  let maxRequestInput = 0;
+  let previousLast = { ...previous };
+  for (const value of records) {
+    const record = object3(value);
+    const payload = object3(record?.payload);
+    if (record?.type === "session_meta") {
+      if (metadata) return invalid2("metadata_mismatch", harnessVersion);
+      harnessVersion = typeof payload?.cli_version === "string" ? payload.cli_version : void 0;
+      if (payload?.id !== input2.threadId || payload?.source !== "exec" || payload?.originator !== "codex_exec")
+        return invalid2("metadata_mismatch", harnessVersion);
+      metadata = true;
+      continue;
+    }
+    if (record?.type === "turn_context" && typeof payload?.model === "string") {
+      observedModel ??= payload.model;
+      if (observedModel !== payload.model || input2.model && payload.model !== input2.model)
+        return invalid2("model_mismatch", harnessVersion);
+      continue;
+    }
+    if (record?.type !== "event_msg" || payload?.type !== "token_count") continue;
+    const info = object3(payload.info);
+    if (!info) continue;
+    const total = usage(info.total_token_usage);
+    const last = usage(info.last_token_usage, false);
+    if (!total || !last) return invalid2("missing_dimension", harnessVersion);
+    observed = true;
+    if (equal(total, previous)) {
+      if (!equal(last, previousLast)) return invalid2("delta_mismatch", harnessVersion);
+      continue;
+    }
+    if (FIELDS.some((field) => total[field] < previous[field]))
+      return invalid2("nonmonotonic", harnessVersion);
+    const delta = {};
+    for (const field of FIELDS) delta[field] = total[field] - previous[field];
+    if (delta.cached_input_tokens + delta.cache_write_input_tokens > delta.input_tokens)
+      return invalid2("nonmonotonic", harnessVersion);
+    if (!equal(delta, last)) return invalid2("delta_mismatch", harnessVersion);
+    requestCount++;
+    if (requestCount > CODEX_ROLLOUT_MAX_REQUESTS) return invalid2("limit_exceeded", harnessVersion);
+    maxRequestInput = Math.max(maxRequestInput, delta.input_tokens);
+    previous = total;
+    previousLast = delta;
+  }
+  if (!metadata) return invalid2("metadata_mismatch", harnessVersion);
+  if (harnessVersion !== SUPPORTED_VERSION) {
+    return {
+      version: 1,
+      normalization: "codex-rollout-delta-v1",
+      ...harnessVersion ? { harness_version: harnessVersion.slice(0, 100) } : {},
+      status: "unsupported",
+      reason: "unsupported_version"
+    };
+  }
+  const terminalZero = FIELDS.every((field) => input2.terminalUsage[field] === 0);
+  if (!observed && !terminalZero) return invalid2("missing_dimension", harnessVersion);
+  if (!equal(previous, input2.terminalUsage)) return invalid2("terminal_mismatch", harnessVersion);
+  return {
+    version: 1,
+    normalization: "codex-rollout-delta-v1",
+    harness_version: SUPPORTED_VERSION,
+    status: "complete",
+    request_count: requestCount,
+    max_request_input_tokens: maxRequestInput,
+    reconciled_usage: { ...previous }
+  };
+}
+function resolveCodexHome(env, workspace) {
+  const configured = env.CODEX_HOME;
+  return configured ? resolve(workspace, configured) : join3(homedir2(), ".codex");
+}
+function dateDirectories(startedAt, endedAt) {
+  const first = new Date(startedAt);
+  first.setUTCDate(first.getUTCDate() - 1);
+  first.setUTCHours(0, 0, 0, 0);
+  const last = new Date(endedAt);
+  last.setUTCDate(last.getUTCDate() + 1);
+  last.setUTCHours(0, 0, 0, 0);
+  const result = [];
+  for (let date = first; date <= last; date = new Date(date.getTime() + 864e5)) {
+    result.push(
+      join3(
+        String(date.getUTCFullYear()),
+        String(date.getUTCMonth() + 1).padStart(2, "0"),
+        String(date.getUTCDate()).padStart(2, "0")
+      )
+    );
+    if (result.length > 10) return null;
+  }
+  return result;
+}
+async function readCodexRolloutRecords(stream, timeoutMs) {
+  let timedOut = false;
+  const timer = setTimeout(
+    () => {
+      timedOut = true;
+      stream.destroy(new Error("Codex rollout read deadline exceeded"));
+    },
+    Math.max(0, timeoutMs)
+  );
+  const decoder = new StringDecoder("utf8");
+  let pending = "";
+  let bytes2 = 0;
+  let lines2 = 0;
+  const records = [];
+  const consume = (line) => {
+    if (++lines2 > CODEX_ROLLOUT_MAX_LINES || Buffer.byteLength(line) > CODEX_ROLLOUT_MAX_LINE_BYTES)
+      return { reason: "limit_exceeded" };
+    if (!line.trim()) return;
+    try {
+      records.push(JSON.parse(line));
+    } catch {
+      return { reason: "malformed" };
+    }
+  };
+  try {
+    for await (const value of stream) {
+      const chunk = Buffer.isBuffer(value) ? value : Buffer.from(value);
+      bytes2 += chunk.length;
+      if (bytes2 > CODEX_ROLLOUT_MAX_BYTES) return { reason: "limit_exceeded" };
+      pending += decoder.write(chunk);
+      let newline;
+      while ((newline = pending.indexOf("\n")) >= 0) {
+        const failure = consume(pending.slice(0, newline));
+        if (failure) return failure;
+        pending = pending.slice(newline + 1);
+      }
+      if (Buffer.byteLength(pending) > CODEX_ROLLOUT_MAX_LINE_BYTES)
+        return { reason: "limit_exceeded" };
+    }
+    pending += decoder.end();
+    if (pending.length) {
+      const failure = consume(pending);
+      if (failure) return failure;
+    }
+    return { records };
+  } catch {
+    return { reason: timedOut ? "limit_exceeded" : "read_failed" };
+  } finally {
+    clearTimeout(timer);
+    stream.destroy();
+  }
+}
+async function collectCodexRequestContext(input2) {
+  if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(input2.threadId))
+    return unavailable("thread_id_missing");
+  const dates = dateDirectories(input2.startedAt, input2.endedAt);
+  if (!dates) return unavailable("limit_exceeded");
+  const sessions = join3(input2.codexHome, "sessions");
+  let root;
+  try {
+    root = await realpath(sessions);
+  } catch {
+    return unavailable("rollout_missing");
+  }
+  const candidates = [];
+  let entries = 0;
+  const deadline = Date.now() + CODEX_ROLLOUT_TIMEOUT_MS;
+  try {
+    for (const date of dates) {
+      const directory = join3(root, date);
+      let stream;
+      try {
+        stream = await opendir(directory);
+      } catch {
+        continue;
+      }
+      for await (const entry of stream) {
+        if (++entries > 2e4 || Date.now() > deadline) return unavailable("limit_exceeded");
+        if ((entry.isFile() || entry.isSymbolicLink()) && entry.name.startsWith("rollout-") && entry.name.endsWith(`-${input2.threadId}.jsonl`))
+          candidates.push(join3(directory, entry.name));
+      }
+    }
+    if (candidates.length === 0) return unavailable("rollout_missing");
+    if (candidates.length !== 1) return unavailable("rollout_ambiguous");
+    const candidate = await realpath(candidates[0]);
+    const inside = relative(root, candidate);
+    if (inside.startsWith(`..${sep}`) || inside === ".." || isAbsolute(inside))
+      return unavailable("unsafe_path");
+    const before = await stat(candidate);
+    if (!before.isFile() || before.size > CODEX_ROLLOUT_MAX_BYTES)
+      return unavailable("limit_exceeded");
+    const handle = await open(candidate, "r");
+    const read = await readCodexRolloutRecords(handle.createReadStream(), deadline - Date.now());
+    if ("reason" in read)
+      return read.reason === "malformed" ? invalid2("malformed") : unavailable(read.reason);
+    const after = await stat(candidate);
+    if (before.dev !== after.dev || before.ino !== after.ino || before.size !== after.size || before.mtimeMs !== after.mtimeMs)
+      return invalid2("read_failed");
+    return reconcileCodexRollout(read.records, input2);
+  } catch {
+    return unavailable("read_failed");
+  }
+}
+
 // src/daemon/rate-limit.ts
 var USAGE_LIMIT_PREFIXES = [
   "You've hit your",
@@ -8965,11 +9230,11 @@ var DURATION = /(\d+)\s*([dhms])/g;
 function parseResetTime(text4, now) {
   const raw = text4.trim();
   if (!raw) return null;
-  const relative = raw.match(/^in\s+(.+)$/i);
-  if (relative) {
+  const relative2 = raw.match(/^in\s+(.+)$/i);
+  if (relative2) {
     let ms = 0;
     let matched = false;
-    for (const [, amount, unit] of relative[1].matchAll(DURATION)) {
+    for (const [, amount, unit] of relative2[1].matchAll(DURATION)) {
       const n = Number(amount);
       ms += n * { d: 864e5, h: 36e5, m: 6e4, s: 1e3 }[unit];
       matched = true;
@@ -9052,10 +9317,10 @@ var RateLimitDetector = class {
 // src/daemon/cli-refresh.ts
 import { spawn } from "node:child_process";
 import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync7 } from "node:fs";
-import { dirname as dirname3, join as join3 } from "node:path";
+import { dirname as dirname3, join as join4 } from "node:path";
 
 // src/daemon/support.ts
-import { delimiter, sep } from "node:path";
+import { delimiter, sep as sep2 } from "node:path";
 var HARNESS_KINDS = ["claude_code", "codex", "custom"];
 var KEEP_WORKSPACES_MODES = ["never", "failed", "always"];
 function keepWorkspace(mode, outcome) {
@@ -9359,7 +9624,7 @@ function pendingSelfUpdate(cli, running) {
   return isNewerVersion(cli.version, running) ? cli.version : null;
 }
 function pathWithin(path2, dir) {
-  const root = dir.endsWith(sep) ? dir : dir + sep;
+  const root = dir.endsWith(sep2) ? dir : dir + sep2;
   return path2.startsWith(root);
 }
 function buildSpawnEnv(base, opts) {
@@ -9379,14 +9644,14 @@ function buildSpawnEnv(base, opts) {
 var PACKAGE = "tines";
 var NPM_ARGS = ["--min-release-age=0", "--no-audit", "--no-fund", "--loglevel=error"];
 function agentCliPrefix(configDir) {
-  return join3(configDir, "cli");
+  return join4(configDir, "cli");
 }
 function binDirOf(prefix) {
-  return join3(prefix, "node_modules", ".bin");
+  return join4(prefix, "node_modules", ".bin");
 }
 function installedVersion(prefix) {
   try {
-    const pkg = readFileSync7(join3(prefix, "node_modules", PACKAGE, "package.json"), "utf8");
+    const pkg = readFileSync7(join4(prefix, "node_modules", PACKAGE, "package.json"), "utf8");
     const version = JSON.parse(pkg).version;
     return typeof version === "string" ? version : null;
   } catch {
@@ -9395,11 +9660,11 @@ function installedVersion(prefix) {
 }
 function lastGood(prefix) {
   const binDir = binDirOf(prefix);
-  if (!existsSync4(join3(binDir, PACKAGE))) return AMBIENT_CLI;
+  if (!existsSync4(join4(binDir, PACKAGE))) return AMBIENT_CLI;
   return { binDir, version: installedVersion(prefix), source: "stale" };
 }
 function runNpm(file, args, cwd, timeoutMs) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let output = "";
     let done = false;
     let timedOut = false;
@@ -9414,7 +9679,7 @@ function runNpm(file, args, cwd, timeoutMs) {
       if (done) return;
       done = true;
       clearTimeout(timer);
-      resolve({ ...result, timedOut, output });
+      resolve2({ ...result, timedOut, output });
     };
     child.stdout?.on("data", (data) => output += data.toString("utf8"));
     child.stderr?.on("data", (data) => output += data.toString("utf8"));
@@ -9440,7 +9705,7 @@ async function installAgentCli(opts) {
   const args = ["install", "--prefix", prefix, `${PACKAGE}@latest`, ...NPM_ARGS];
   let result = await runNpm("npm", args, prefix, timeoutMs);
   if (result.spawnError?.code === "ENOENT") {
-    const sibling = join3(dirname3(process.execPath), "npm");
+    const sibling = join4(dirname3(process.execPath), "npm");
     if (existsSync4(sibling)) result = await runNpm(sibling, args, prefix, timeoutMs);
   }
   if (result.code !== 0) {
@@ -9467,12 +9732,12 @@ import { arch, hostname, platform } from "node:os";
 
 // src/daemon/store.ts
 import { readdirSync as readdirSync2, readFileSync as readFileSync8, rmSync as rmSync2, statSync as statSync3 } from "node:fs";
-import { join as join4 } from "node:path";
+import { join as join5 } from "node:path";
 function credentialsKey(url, name2) {
   return `${url.replace(/\/+$/, "")}#${name2}`;
 }
 function credentialsPath(dir) {
-  return join4(dir, "runners.json");
+  return join5(dir, "runners.json");
 }
 function loadRunnerCredentials(dir, url, name2) {
   const all = readJsonFile(credentialsPath(dir));
@@ -9495,7 +9760,7 @@ function clearRunnerCredentials(dir, url, name2) {
   writeJsonFile(path2, all, { secret: true });
 }
 function daemonStatePath(dir, runnerId) {
-  return join4(dir, `daemon-state-${runnerId}.json`);
+  return join5(dir, `daemon-state-${runnerId}.json`);
 }
 function loadDaemonState(path2) {
   const state = readJsonFile(path2);
@@ -9509,8 +9774,8 @@ function saveDaemonState(path2, runs) {
 }
 function processStartTimeMs(pid) {
   try {
-    const stat = readFileSync8(`/proc/${pid}/stat`, "utf8");
-    const afterComm = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
+    const stat2 = readFileSync8(`/proc/${pid}/stat`, "utf8");
+    const afterComm = stat2.slice(stat2.lastIndexOf(")") + 2).split(" ");
     const startTicks = Number(afterComm[19]);
     const btimeLine = readFileSync8("/proc/stat", "utf8").split("\n").find((line) => line.startsWith("btime "));
     const btime = Number(btimeLine?.slice("btime ".length));
@@ -9521,10 +9786,10 @@ function processStartTimeMs(pid) {
   }
 }
 function workspacesDir(configDir) {
-  return join4(configDir, "workspaces");
+  return join5(configDir, "workspaces");
 }
 function keptMarkerPath(workspace) {
-  return join4(workspace, "kept.json");
+  return join5(workspace, "kept.json");
 }
 function writeKeptMarker(workspace, marker) {
   writeJsonFile(keptMarkerPath(workspace), marker);
@@ -9546,7 +9811,7 @@ function listKeptWorkspaces(configDir) {
   }
   const kept = [];
   for (const name2 of names) {
-    const path2 = join4(root, name2);
+    const path2 = join5(root, name2);
     const marker = readKeptMarker(path2);
     if (marker) kept.push({ ...marker, path: path2 });
   }
@@ -9583,7 +9848,7 @@ function directorySizeBytes(path2) {
     return 0;
   }
   for (const entry of entries) {
-    const child = join4(path2, entry.name);
+    const child = join5(path2, entry.name);
     if (entry.isDirectory()) total += directorySizeBytes(child);
     else if (entry.isFile()) {
       try {
@@ -9636,7 +9901,7 @@ async function uploadRawLog(run2) {
   if (!path2 || !run2.rawUpload) return;
   run2.rawSpoolPath = void 0;
   try {
-    await new Promise((resolve) => run2.rawSpool?.end(resolve) ?? resolve());
+    await new Promise((resolve2) => run2.rawSpool?.end(resolve2) ?? resolve2());
     const size = statSync4(path2).size;
     if (size > 0) {
       let body = readFileSync9(path2);
@@ -9661,7 +9926,7 @@ async function uploadRawLog(run2) {
   }
 }
 var log = (message3) => console.log(`[${(/* @__PURE__ */ new Date()).toISOString().slice(11, 19)}] ${message3}`);
-var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var sleep = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
 function killTree(pid, signal) {
   try {
     process.kill(-pid, signal);
@@ -9741,7 +10006,7 @@ async function runDaemon(opts) {
   const selfUpdate = opts.selfUpdate && opts.cliRefresh && managedInstall;
   if (opts.selfUpdate && opts.cliRefresh) {
     log(
-      managedInstall ? `self-update: on \u2014 this daemon (tines ${DAEMON_VERSION}) runs from ${prefix} and will restart once idle after a newer release is installed there` : `self-update: off \u2014 this daemon (tines ${DAEMON_VERSION}) runs from ${selfPath ?? process.argv[1] ?? "?"}, not ${prefix}; launch it from ${join5(prefix, "node_modules", ".bin", "tines")} to have refreshes apply on restart \u2014 \`tines runner install --name ${opts.name} --harness ${opts.harness.replaceAll("_", "-")}\` sets that up as a service (docs/runner-daemon.md)`
+      managedInstall ? `self-update: on \u2014 this daemon (tines ${DAEMON_VERSION}) runs from ${prefix} and will restart once idle after a newer release is installed there` : `self-update: off \u2014 this daemon (tines ${DAEMON_VERSION}) runs from ${selfPath ?? process.argv[1] ?? "?"}, not ${prefix}; launch it from ${join6(prefix, "node_modules", ".bin", "tines")} to have refreshes apply on restart \u2014 \`tines runner install --name ${opts.name} --harness ${opts.harness.replaceAll("_", "-")}\` sets that up as a service (docs/runner-daemon.md)`
     );
   }
   let pendingUpdate = null;
@@ -9763,11 +10028,49 @@ async function runDaemon(opts) {
     {
       finish: async (run2, status, error, judgment) => {
         const summary = run2.renderer?.summary();
+        if (summary?.pricingEvidence && opts.harness === "codex") {
+          const raw = summary.pricingEvidence.raw_usage;
+          const completeRaw = raw && [
+            "input_tokens",
+            "cached_input_tokens",
+            "cache_write_input_tokens",
+            "output_tokens"
+          ].every((field) => raw[field] !== void 0);
+          if (status === "completed" && run2.pricingSessionMode === "cold" && summary.pricingEvidence.measurement_status === "complete" && completeRaw && summary.providerSessionId && run2.codexHome && run2.spawnedAt) {
+            summary.pricingEvidence.request_context = await collectCodexRequestContext({
+              codexHome: run2.codexHome,
+              threadId: summary.providerSessionId,
+              model: run2.pricingModel ?? null,
+              startedAt: run2.spawnedAt,
+              endedAt: Date.now(),
+              terminalUsage: raw
+            });
+            if ("reason" in summary.pricingEvidence.request_context && summary.pricingEvidence.request_context.reason === "model_mismatch")
+              summary.pricingEvidence.model_rerouted = true;
+          } else {
+            summary.pricingEvidence.request_context = {
+              version: 1,
+              normalization: "codex-rollout-delta-v1",
+              status: "unavailable",
+              reason: "not_applicable"
+            };
+          }
+        }
+        const accounting = {
+          usage: summary?.usage ?? { cost_source: "none" },
+          ...summary?.pricingEvidence ? { pricing_evidence: summary.pricingEvidence } : {},
+          ...summary?.providerSessionId ? { provider_session_id: summary.providerSessionId } : {},
+          daemon_version: DAEMON_VERSION,
+          status
+        };
+        run2.batcher.append(`[usage] ${JSON.stringify(accounting)}
+`);
+        await run2.batcher.flush();
         const ended = await client2.finishRun(run2.runId, {
           status,
           ...error ? { error } : {},
           ...judgment,
-          usage: summary?.usage ?? { cost_source: "none" },
+          usage: accounting.usage,
           ...summary?.pricingEvidence ? {
             pricing_evidence: {
               ...summary.pricingEvidence,
@@ -9868,7 +10171,7 @@ async function runDaemon(opts) {
         `run ${runId}: resume workspace ${assignment.resume.workspace_path} is gone; launching fresh`
       );
     }
-    const workspace = resume ? resume.workspace_path : join5(workspacesDir(opts.configDir), runId);
+    const workspace = resume ? resume.workspace_path : join6(workspacesDir(opts.configDir), runId);
     const issueLabel = assignment.run.issue_ref ? `${assignment.run.issue_ref.project_name}/${assignment.run.issue_ref.number}` : void 0;
     const run2 = {
       runId,
@@ -9896,21 +10199,21 @@ async function runDaemon(opts) {
         rmSync3(workspace, { recursive: true, force: true });
         mkdirSync4(workspace, { recursive: true });
       } else {
-        rmSync3(join5(workspace, "kept.json"), { force: true });
+        rmSync3(join6(workspace, "kept.json"), { force: true });
       }
-      writeFileSync3(join5(workspace, "prompt.md"), `${assignment.prompt}
+      writeFileSync3(join6(workspace, "prompt.md"), `${assignment.prompt}
 `);
       if (!resume)
         for (const skill of assignment.bundle.skills) {
           for (const file of skill.files) {
-            const target = join5(workspace, "skills", skill.name, file.path);
+            const target = join6(workspace, "skills", skill.name, file.path);
             mkdirSync4(dirname4(target), { recursive: true });
             writeFileSync3(target, file.content);
           }
         }
       if (!resume)
         writeFileSync3(
-          join5(workspace, "repos.json"),
+          join6(workspace, "repos.json"),
           `${JSON.stringify(assignment.bundle.repos, null, 2)}
 `
         );
@@ -9944,7 +10247,7 @@ async function runDaemon(opts) {
       );
       const harnessInput = {
         workspace,
-        promptFile: join5(workspace, "prompt.md"),
+        promptFile: join6(workspace, "prompt.md"),
         prompt: assignment.prompt,
         model: assignment.run.model,
         ...resume ? { resumeSessionId: resume.provider_session_id } : {}
@@ -9965,13 +10268,15 @@ async function runDaemon(opts) {
           ...resume ? { resumedFromRunId: resume.previous_run_id } : {}
         })
       );
+      const spawnEnv = buildSpawnEnv(process.env, {
+        binDir: cli.binDir,
+        apiKey: assignment.run_key,
+        apiUrl: baseUrl
+      });
+      if (opts.harness === "codex") run2.codexHome = resolveCodexHome(spawnEnv, workspace);
       const child = spawn2(invocation.file, invocation.args, {
         cwd: workspace,
-        env: buildSpawnEnv(process.env, {
-          binDir: cli.binDir,
-          apiKey: assignment.run_key,
-          apiUrl: baseUrl
-        }),
+        env: spawnEnv,
         stdio: ["ignore", "pipe", "pipe"],
         detached: true
       });
@@ -9987,12 +10292,12 @@ async function runDaemon(opts) {
           (event) => limiter.noteStreamEvent(event)
         );
         run2.renderer = renderer;
-        const spoolPath = join5(opts.configDir, "rawlogs", `${runId}.ndjson`);
+        const spoolPath = join6(opts.configDir, "rawlogs", `${runId}.ndjson`);
         mkdirSync4(dirname4(spoolPath), { recursive: true });
         run2.rawSpoolPath = spoolPath;
         run2.rawSpool = createWriteStream(spoolPath);
         run2.rawUpload = (body) => client2.putRunLogRaw(runId, body);
-        const decoder = new StringDecoder("utf8");
+        const decoder = new StringDecoder2("utf8");
         run2.drain = () => {
           const trailing = decoder.end();
           if (trailing) renderer.write(trailing);
@@ -10004,7 +10309,7 @@ async function runDaemon(opts) {
         });
       } else if (opts.harness === "codex") {
         const renderer = new CodexStreamRenderer((line) => run2.batcher.append(line));
-        const decoder = new StringDecoder("utf8");
+        const decoder = new StringDecoder2("utf8");
         run2.renderer = renderer;
         run2.drain = () => {
           const trailing = decoder.end();
@@ -10173,12 +10478,12 @@ function realpathOrNull(path2) {
   }
 }
 function runGit(args, cwd, batcher) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     const child = spawn2("git", args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
     child.stdout?.on("data", (data) => batcher.append(data.toString("utf8")));
     child.stderr?.on("data", (data) => batcher.append(data.toString("utf8")));
-    child.on("error", () => resolve(127));
-    child.on("exit", (code) => resolve(code ?? 1));
+    child.on("error", () => resolve2(127));
+    child.on("exit", (code) => resolve2(code ?? 1));
   });
 }
 
@@ -10252,13 +10557,13 @@ function harnessFlag(harness) {
 // src/commands/runner-service.ts
 import { execFile } from "node:child_process";
 import { existsSync as existsSync7, mkdirSync as mkdirSync5, readFileSync as readFileSync10, rmSync as rmSync4, statSync as statSync6, writeFileSync as writeFileSync4 } from "node:fs";
-import { homedir as homedir2, hostname as hostname3, userInfo } from "node:os";
+import { homedir as homedir3, hostname as hostname3, userInfo } from "node:os";
 import { dirname as dirname6 } from "node:path";
 import { promisify } from "node:util";
 
 // src/daemon/service.ts
 import { existsSync as existsSync6, statSync as statSync5 } from "node:fs";
-import { delimiter as delimiter2, dirname as dirname5, join as join6, sep as sep2 } from "node:path";
+import { delimiter as delimiter2, dirname as dirname5, join as join7, sep as sep3 } from "node:path";
 function defaultServiceManager(platform2 = process.platform) {
   if (platform2 === "darwin") return "launchd";
   if (platform2 === "linux") return "systemd";
@@ -10269,13 +10574,13 @@ function serviceLabel(name2, kind) {
 }
 function unitPath(name2, kind, home) {
   const label = serviceLabel(name2, kind);
-  return kind === "launchd" ? join6(home, "Library", "LaunchAgents", `${label}.plist`) : join6(home, ".config", "systemd", "user", `${label}.service`);
+  return kind === "launchd" ? join7(home, "Library", "LaunchAgents", `${label}.plist`) : join7(home, ".config", "systemd", "user", `${label}.service`);
 }
 function serviceLogPath(configDir, name2) {
-  return join6(configDir, "logs", `runner-${name2}.log`);
+  return join7(configDir, "logs", `runner-${name2}.log`);
 }
 function managedBinary(prefix) {
-  return join6(prefix, "node_modules", ".bin", "tines");
+  return join7(prefix, "node_modules", ".bin", "tines");
 }
 function daemonArgs(input2) {
   const args = [
@@ -10303,7 +10608,7 @@ function daemonArgs(input2) {
 function findOnPath(name2, envPath) {
   for (const dir of (envPath ?? "").split(delimiter2)) {
     if (!dir) continue;
-    const candidate = join6(dir, name2);
+    const candidate = join7(dir, name2);
     try {
       if (statSync5(candidate).isFile()) return candidate;
     } catch {
@@ -10435,7 +10740,7 @@ function matchDaemonProcesses(psOutput, query2) {
       else if (w.startsWith("--name=")) name2 = w.slice("--name=".length);
     }
     if ((name2 ?? query2.hostname) !== query2.name) continue;
-    const root = query2.prefix.endsWith(sep2) ? query2.prefix : query2.prefix + sep2;
+    const root = query2.prefix.endsWith(sep3) ? query2.prefix : query2.prefix + sep3;
     matches.push({ pid, args, managed: args.includes(root) });
   }
   return matches;
@@ -10500,12 +10805,12 @@ async function waitForStart(logPath, offset, name2) {
       const content = readFileSync10(logPath, "utf8").slice(offset);
       if (pattern.test(content)) return true;
     }
-    await new Promise((resolve) => setTimeout(resolve, 500));
+    await new Promise((resolve2) => setTimeout(resolve2, 500));
   }
   return false;
 }
 function serviceTarget(name2, kind) {
-  return { kind, name: name2, unitPath: unitPath(name2, kind, homedir2()), uid: userInfo().uid };
+  return { kind, name: name2, unitPath: unitPath(name2, kind, homedir3()), uid: userInfo().uid };
 }
 function registerServiceCommands(runnerCmd) {
   withCommon(
@@ -11138,6 +11443,16 @@ function register8(program3) {
           console.log(`  exact estimated USD: ${b.cost_usd_exact}`);
           console.log("  Standard API list-price estimate; not an invoice or subscription usage.");
         }
+        const proof = pricing?.evidence?.request_context;
+        if (proof?.status === "complete") {
+          console.log(
+            `request context: ${proof.request_count.toLocaleString()} verified \xB7 largest input ${proof.max_request_input_tokens.toLocaleString()} \xB7 Codex ${proof.harness_version} \xB7 ${proof.normalization}`
+          );
+        } else if (proof) {
+          console.log(
+            `request context: ${proof.status} (${proof.reason})${proof.harness_version ? ` \xB7 Codex ${proof.harness_version}` : ""} \xB7 ${proof.normalization}`
+          );
+        }
       }
       if (run2.provider_session_id) console.log(`provider session: ${run2.provider_session_id}`);
       if (run2.provider_url) console.log(`provider console: ${run2.provider_url}`);
@@ -11551,12 +11866,12 @@ function register10(program3) {
     const api = client(opts);
     const overrides = {};
     for (const spec of opts.state) {
-      const sep3 = spec.lastIndexOf("=");
-      if (sep3 < 1 || sep3 === spec.length - 1) {
+      const sep4 = spec.lastIndexOf("=");
+      if (sep4 < 1 || sep4 === spec.length - 1) {
         die(`--state must look like <workflow>/<state>=<n>, got "${spec}"`);
       }
-      const limit = Number.parseInt(spec.slice(sep3 + 1), 10);
-      const { state } = await resolveStateFlag(api, spec.slice(0, sep3));
+      const limit = Number.parseInt(spec.slice(sep4 + 1), 10);
+      const { state } = await resolveStateFlag(api, spec.slice(0, sep4));
       overrides[state.id] = limit;
     }
     const settings = await api.updateSupervisorSettings({
@@ -12043,9 +12358,9 @@ async function resolveStateBases(states, library) {
   }
 }
 function resolveBasePair(lib, pair, stateName) {
-  const sep3 = pair.indexOf("/");
-  const workflowRef = pair.slice(0, sep3).trim();
-  const stateRef2 = pair.slice(sep3 + 1).trim();
+  const sep4 = pair.indexOf("/");
+  const workflowRef = pair.slice(0, sep4).trim();
+  const stateRef2 = pair.slice(sep4 + 1).trim();
   const where = `state "${stateName}" inherits from "${pair}"`;
   if (!workflowRef || !stateRef2) {
     die(`${where}, which is not a <workflow>/<state> pair`);
@@ -12339,8 +12654,8 @@ function registerPackageCommands(workflows) {
       else {
         console.log(`installed workflow package (${receipt.id})`);
         console.log(`plan: ${receipt.plan_digest}`);
-        for (const object3 of receipt.objects)
-          console.log(`  ${object3.kind}: ${object3.name} \u2014 ${object3.href}`);
+        for (const object4 of receipt.objects)
+          console.log(`  ${object4.kind}: ${object4.name} \u2014 ${object4.href}`);
       }
     }
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tines",
-  "version": "0.0.204",
+  "version": "0.0.206",
   "description": "CLI for Tines, an orchestration layer for AI agents",
   "repository": {
     "type": "git",