usertrust 1.4.0 → 2.0.0

package/README.md

@@ -112,7 +112,8 @@ All commands support `--json` for machine-readable output.
 usertrust init          # Create .usertrust/ vault
 usertrust inspect       # Vault bank statement
 usertrust health        # Entropy diagnostics (6 signals, 0-100 score)
-usertrust verify        # Verify audit chain integrity
+usertrust verify        # Verify audit chain integrity (+ external anchors)
+usertrust anchor        # External anchoring: init|now|status|doctor|export|export-bundle|rotate|resume
 usertrust snapshot      # Checkpoint/restore vault state
 usertrust tb            # TigerBeetle process management
 usertrust completions   # Shell completions (bash, zsh, fish)
@@ -189,6 +190,8 @@ const config = defineConfig({
 
 **Merkle proofs (RFC 6962)** — Inclusion and consistency proofs for public verifiability. Any third party can verify a specific event existed in the chain.
 
+**External anchoring** — Ed25519-signed chain-head checkpoints pushed to an append-only store the vault operator cannot rewrite (S3 Object Lock, protected git branch, SIEM). Even a fully re-hashed, internally-consistent rewrite fails verification against the externally-held root. Ships a native SigV4 S3 sink (no AWS SDK), an experimental [Rekor](https://docs.sigstore.dev/logging/overview/) transparency-log witness that publishes digests only, `anchor doctor` to probe whether the writer identity can actually delete or overwrite in the store, and `anchor export-bundle` to hand an auditor the records and receipts in one file. See the [anchoring guide](https://github.com/usertools-ai/usertrust/blob/master/docs/anchoring.md).
+
 **Policy engine** — 12 field operators (`eq`, `gt`, `in`, `regex`, etc.) with soft/hard enforcement. Block specific models, cap costs, require approvals.
 
 **PII detection** — Luhn-validated credit card numbers, SSN patterns, email addresses, phone numbers, IPv4 addresses. Block or warn before data leaves your network.
@@ -255,6 +258,19 @@ All hashes: valid (847/847)
 
 The verify package has zero runtime dependencies. It reads JSONL, recomputes SHA-256 hashes, and checks the chain. Anyone can verify a vault without trusting the usertrust SDK.
 
+With [external anchoring](https://github.com/usertools-ai/usertrust/blob/master/docs/anchoring.md) enabled, verification goes further: the auditor fetches signed checkpoints from an append-only store the operator cannot rewrite and pins the public key out-of-band — so even a fully re-hashed rewrite of the vault fails:
+
+```bash
+usertrust anchor init                                     # once: mint identity, pin the key
+usertrust anchor now --sink-file /mnt/worm/anchors.jsonl  # from cron/CI, or in-process
+
+# or publish straight to S3, after checking the store really refuses deletes
+usertrust anchor doctor --sink-s3 bucket=audit-anchors,region=us-east-1
+usertrust anchor now    --sink-s3 bucket=audit-anchors,region=us-east-1
+
+npx usertrust-verify .usertrust --anchors anchors.jsonl --pubkey root.pem --require-external-anchor
+```
+
 ## License
 
 Apache 2.0

package/dist/anomaly/detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../src/anomaly/detector.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAEX,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EAGZ,cAAc,EACd,qBAAqB,EACrB,MAAM,YAAY,CAAC;AAIpB,qDAAqD;AACrD,wBAAgB,oBAAoB,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,qBAAqB,CAQ/E;AAWD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC/C,0CAA0C;IAC1C,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,wFAAwF;IACxF,KAAK,IAAI,cAAc,CAAC;IACxB,oDAAoD;IACpD,KAAK,IAAI,IAAI,CAAC;IACd,2EAA2E;IAC3E,SAAS,IAAI,OAAO,CAAC;CACrB;AAED,wBAAgB,qBAAqB,CACpC,GAAG,CAAC,EAAE,aAAa,EACnB,OAAO,CAAC,EAAE,sBAAsB,GAC9B,eAAe,CAuKjB"}
+{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../src/anomaly/detector.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAEX,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EAGZ,cAAc,EACd,qBAAqB,EACrB,MAAM,YAAY,CAAC;AAIpB,qDAAqD;AACrD,wBAAgB,oBAAoB,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,qBAAqB,CAQ/E;AA+CD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC/C,0CAA0C;IAC1C,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,wFAAwF;IACxF,KAAK,IAAI,cAAc,CAAC;IACxB,oDAAoD;IACpD,KAAK,IAAI,IAAI,CAAC;IACd,2EAA2E;IAC3E,SAAS,IAAI,OAAO,CAAC;CACrB;AAED,wBAAgB,qBAAqB,CACpC,GAAG,CAAC,EAAE,aAAa,EACnB,OAAO,CAAC,EAAE,sBAAsB,GAC9B,eAAe,CAoKjB"}

package/dist/anomaly/detector.js

@@ -14,9 +14,12 @@
  *   - After cooldownMs the detector auto-resets; reset() can be called manually.
  *
  * Defaults are tuned conservatively (500 tok/s sustained, $1/min, 3 injections in 60s).
- * Detection is opt-in (anomaly.enabled=true) — when off, observe/check are no-ops.
+ * Local-scope events (event.endpointClass === "local", stamped by govern.ts) use
+ * local-calibrated thresholds: 5000 tok/s (perModel glob overrides first) and
+ * 10_000 nominal usertokens/min. Detection is opt-in (anomaly.enabled=true) —
+ * when off, observe/check are no-ops.
  */
-import { estimateCost } from "../ledger/pricing.js";
+import { costFromRates, estimateCost } from "../ledger/pricing.js";
 import { createInjectionCascadeSignal, resolveInjectionCascadeConfig, } from "./signals/injection-cascade.js";
 import { createSpendVelocitySignal, resolveSpendVelocityConfig, } from "./signals/spend-velocity.js";
 import { createTokenRateSignal, resolveTokenRateConfig, } from "./signals/token-rate.js";
@@ -33,11 +36,31 @@ export function resolveAnomalyConfig(cfg) {
 }
 /** USD value of one usertoken. 1 usertoken = $0.0001 (one basis point of a cent). */
 const USERTOKENS_PER_DOLLAR = 10_000;
-function defaultCostCalculator(model, inputTokens, outputTokens) {
-    // estimateCost returns usertokens; convert to dollars.
+function defaultCostCalculator(model, inputTokens, outputTokens, event) {
+    if (event?.endpointClass === "local") {
+        // Local scope without an injected calculator: price in nominal usertokens at
+        // the shipped default local rate {0,0}. costFromRates floors at 1, so the
+        // cumulative cost is a constant and spend-velocity stays flat — token_rate is
+        // the primary local signal. govern.ts injects a config-aware calculator that
+        // prices via resolveRates (operator-set local rates enable velocity showback).
+        return costFromRates({ inputPer1k: 0, outputPer1k: 0 }, inputTokens, outputTokens);
+    }
+    // estimateCost returns usertokens; convert to dollars (cloud usd-proxy scope).
     const usertokens = estimateCost(model, inputTokens, outputTokens);
     return usertokens / USERTOKENS_PER_DOLLAR;
 }
+/** Verdict text for a token-rate result; names non-legacy thresholds (local/perModel). */
+function tokenRateMessage(r) {
+    const base = `tokens/s ${r.metric.toFixed(1)} >= ${r.threshold}`;
+    return r.thresholdLabel === "thresholdTokPerSec" ? base : `${base} (${r.thresholdLabel})`;
+}
+/** Verdict text for a spend-velocity result; never fakes dollars for nominal spend. */
+function spendVelocityMessage(r) {
+    if (r.unit === "usertokens") {
+        return `usertokens/min ${r.metric.toFixed(1)} >= ${r.threshold} (${r.thresholdLabel})`;
+    }
+    return `$/min ${r.metric.toFixed(4)} >= ${r.threshold}`;
+}
 export function createAnomalyDetector(cfg, options) {
     const config = resolveAnomalyConfig(cfg);
     const now = options?.now ?? (() => Date.now());
@@ -60,9 +83,11 @@ export function createAnomalyDetector(cfg, options) {
     }
     function observeChunk(ev) {
         const t = ev.at ?? now();
-        tokenRate.observe(ev.deltaTokens, t);
-        const dollars = costCalculator(model, ev.cumulativeInputTokens, ev.cumulativeOutputTokens);
-        spendVelocity.observe(dollars, t);
+        // Per-event scope: the event's model/endpointClass (stamped by govern.ts)
+        // override options.model / the default cloud scope when present (M2).
+        tokenRate.observe(ev.deltaTokens, t, ev);
+        const cost = costCalculator(ev.model ?? model, ev.cumulativeInputTokens, ev.cumulativeOutputTokens, ev);
+        spendVelocity.observe(cost, t, ev.endpointClass ?? "cloud");
     }
     function observeInjection(ev) {
         injectionCascade.observe(ev.at ?? now());
@@ -91,11 +116,11 @@ export function createAnomalyDetector(cfg, options) {
         // Check signals in priority order: token-rate first (cheapest), spend-velocity, then injection.
         const tr = tokenRate.check(t);
         if (tr.tripped) {
-            return markTripped("token_rate", `tokens/s ${tr.metric.toFixed(1)} >= ${tr.threshold}`, tr.metric, tr.threshold);
+            return markTripped("token_rate", tokenRateMessage(tr), tr.metric, tr.threshold);
         }
         const sv = spendVelocity.check(t);
         if (sv.tripped) {
-            return markTripped("spend_velocity", `$/min ${sv.metric.toFixed(4)} >= ${sv.threshold}`, sv.metric, sv.threshold);
+            return markTripped("spend_velocity", spendVelocityMessage(sv), sv.metric, sv.threshold);
         }
         const ic = injectionCascade.check(t);
         if (ic.tripped) {
@@ -112,7 +137,7 @@ export function createAnomalyDetector(cfg, options) {
                 return {
                     tripped: true,
                     kind,
-                    message: `tokens/s ${r.metric.toFixed(1)} >= ${r.threshold}`,
+                    message: tokenRateMessage(r),
                     metric: r.metric,
                     threshold: r.threshold,
                 };
@@ -122,7 +147,7 @@ export function createAnomalyDetector(cfg, options) {
                 return {
                     tripped: true,
                     kind,
-                    message: `$/min ${r.metric.toFixed(4)} >= ${r.threshold}`,
+                    message: spendVelocityMessage(r),
                     metric: r.metric,
                     threshold: r.threshold,
                 };

package/dist/anomaly/detector.js.map

@@ -1 +1 @@
-{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../src/anomaly/detector.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAEN,4BAA4B,EAC5B,6BAA6B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEN,yBAAyB,EACzB,0BAA0B,GAC1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEN,qBAAqB,EACrB,sBAAsB,GACtB,MAAM,yBAAyB,CAAC;AAajC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,qDAAqD;AACrD,MAAM,UAAU,oBAAoB,CAAC,GAAmB;IACvD,OAAO;QACN,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,KAAK;QAC9B,SAAS,EAAE,sBAAsB,CAAC,GAAG,EAAE,SAAS,CAAC;QACjD,aAAa,EAAE,0BAA0B,CAAC,GAAG,EAAE,aAAa,CAAC;QAC7D,gBAAgB,EAAE,6BAA6B,CAAC,GAAG,EAAE,gBAAgB,CAAC;QACtE,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,mBAAmB;KAClD,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC,SAAS,qBAAqB,CAAC,KAAa,EAAE,WAAmB,EAAE,YAAoB;IACtF,uDAAuD;IACvD,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAClE,OAAO,UAAU,GAAG,qBAAqB,CAAC;AAC3C,CAAC;AAeD,MAAM,UAAU,qBAAqB,CACpC,GAAmB,EACnB,OAAgC;IAEhC,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,SAAS,CAAC;IAC1C,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,qBAAqB,CAAC;IAExE,MAAM,SAAS,GAAoB,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAwB,yBAAyB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3F,MAAM,gBAAgB,GAA2B,4BAA4B,CAC5E,MAAM,CAAC,gBAAgB,CACvB,CAAC;IAEF,MAAM,KAAK,GAAyB;QACnC,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;KACjB,CAAC;IAEF,SAAS,gBAAgB;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO;QACtD,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAClD,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAED,SAAS,YAAY,CAAC,EAAqB;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC;QAC3F,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,SAAS,gBAAgB,CAAC,EAAyB;QAClD,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,SAAS,OAAO,CAAC,KAAmB;QACnC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,gBAAgB,EAAE,CAAC;QACnB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACP,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED,SAAS,KAAK;QACb,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/C,gBAAgB,EAAE,CAAC;QACnB,0EAA0E;QAC1E,4DAA4D;QAC5D,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YAChD,OAAO,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAEhB,gGAAgG;QAChG,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,WAAW,CACjB,YAAY,EACZ,YAAY,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,EACrD,EAAE,CAAC,MAAM,EACT,EAAE,CAAC,SAAS,CACZ,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,WAAW,CACjB,gBAAgB,EAChB,SAAS,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,EAClD,EAAE,CAAC,MAAM,EACT,EAAE,CAAC,SAAS,CACZ,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,WAAW,CACjB,mBAAmB,EACnB,oBAAoB,EAAE,CAAC,MAAM,OAAO,EAAE,CAAC,SAAS,gBAAgB,EAChE,EAAE,CAAC,MAAM,EACT,EAAE,CAAC,SAAS,CACZ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,cAAc,CAAC,IAAiB;QACxC,wEAAwE;QACxE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,YAAY,CAAC,CAAC,CAAC;gBACnB,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,OAAO,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE;oBAC5D,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACtB,CAAC;YACH,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACvB,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACjC,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,OAAO,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE;oBACzD,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACtB,CAAC;YACH,CAAC;YACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBAC1B,MAAM,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpC,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,OAAO,EAAE,oBAAoB,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,SAAS,gBAAgB;oBACvE,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACtB,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,SAAS,WAAW,CACnB,IAAiB,EACjB,OAAe,EACf,MAAc,EACd,SAAiB;QAEjB,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC5D,CAAC;IAED,SAAS,OAAO;QACf,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,aAAa,CAAC,KAAK,EAAE,CAAC;QACtB,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,SAAS,SAAS;QACjB,wEAAwE;QACxE,+DAA+D;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,EAAE,CAAC;QACT,CAAC;QACD,gBAAgB,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,OAAO;QACN,MAAM;QACN,KAAK;QACL,OAAO;QACP,KAAK;QACL,KAAK,EAAE,OAAO;QACd,SAAS;KACT,CAAC;AACH,CAAC"}
+{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../src/anomaly/detector.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACN,4BAA4B,EAE5B,6BAA6B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACN,yBAAyB,EACzB,0BAA0B,GAE1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,qBAAqB,EACrB,sBAAsB,GAEtB,MAAM,yBAAyB,CAAC;AAajC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,qDAAqD;AACrD,MAAM,UAAU,oBAAoB,CAAC,GAAmB;IACvD,OAAO;QACN,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,KAAK;QAC9B,SAAS,EAAE,sBAAsB,CAAC,GAAG,EAAE,SAAS,CAAC;QACjD,aAAa,EAAE,0BAA0B,CAAC,GAAG,EAAE,aAAa,CAAC;QAC7D,gBAAgB,EAAE,6BAA6B,CAAC,GAAG,EAAE,gBAAgB,CAAC;QACtE,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,mBAAmB;KAClD,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC,SAAS,qBAAqB,CAC7B,KAAa,EACb,WAAmB,EACnB,YAAoB,EACpB,KAAyB;IAEzB,IAAI,KAAK,EAAE,aAAa,KAAK,OAAO,EAAE,CAAC;QACtC,6EAA6E;QAC7E,0EAA0E;QAC1E,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,OAAO,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACpF,CAAC;IACD,+EAA+E;IAC/E,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAClE,OAAO,UAAU,GAAG,qBAAqB,CAAC;AAC3C,CAAC;AAED,0FAA0F;AAC1F,SAAS,gBAAgB,CAAC,CAIzB;IACA,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;IACjE,OAAO,CAAC,CAAC,cAAc,KAAK,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,cAAc,GAAG,CAAC;AAC3F,CAAC;AAED,uFAAuF;AACvF,SAAS,oBAAoB,CAAC,CAK7B;IACA,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,cAAc,GAAG,CAAC;IACxF,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;AACzD,CAAC;AAeD,MAAM,UAAU,qBAAqB,CACpC,GAAmB,EACnB,OAAgC;IAEhC,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,SAAS,CAAC;IAC1C,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,qBAAqB,CAAC;IAExE,MAAM,SAAS,GAAoB,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAwB,yBAAyB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3F,MAAM,gBAAgB,GAA2B,4BAA4B,CAC5E,MAAM,CAAC,gBAAgB,CACvB,CAAC;IAEF,MAAM,KAAK,GAAyB;QACnC,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;KACjB,CAAC;IAEF,SAAS,gBAAgB;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO;QACtD,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAClD,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAED,SAAS,YAAY,CAAC,EAAqB;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;QACzB,0EAA0E;QAC1E,sEAAsE;QACtE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,cAAc,CAC1B,EAAE,CAAC,KAAK,IAAI,KAAK,EACjB,EAAE,CAAC,qBAAqB,EACxB,EAAE,CAAC,sBAAsB,EACzB,EAAE,CACF,CAAC;QACF,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,SAAS,gBAAgB,CAAC,EAAyB;QAClD,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,SAAS,OAAO,CAAC,KAAmB;QACnC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,gBAAgB,EAAE,CAAC;QACnB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACP,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED,SAAS,KAAK;QACb,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/C,gBAAgB,EAAE,CAAC;QACnB,0EAA0E;QAC1E,4DAA4D;QAC5D,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YAChD,OAAO,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAEhB,gGAAgG;QAChG,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC,YAAY,EAAE,gBAAgB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,WAAW,CACjB,mBAAmB,EACnB,oBAAoB,EAAE,CAAC,MAAM,OAAO,EAAE,CAAC,SAAS,gBAAgB,EAChE,EAAE,CAAC,MAAM,EACT,EAAE,CAAC,SAAS,CACZ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,cAAc,CAAC,IAAiB;QACxC,wEAAwE;QACxE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,YAAY,CAAC,CAAC,CAAC;gBACnB,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;oBAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACtB,CAAC;YACH,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACvB,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACjC,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC;oBAChC,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACtB,CAAC;YACH,CAAC;YACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBAC1B,MAAM,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpC,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,OAAO,EAAE,oBAAoB,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,SAAS,gBAAgB;oBACvE,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACtB,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,SAAS,WAAW,CACnB,IAAiB,EACjB,OAAe,EACf,MAAc,EACd,SAAiB;QAEjB,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC5D,CAAC;IAED,SAAS,OAAO;QACf,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,aAAa,CAAC,KAAK,EAAE,CAAC;QACtB,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,SAAS,SAAS;QACjB,wEAAwE;QACxE,+DAA+D;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,EAAE,CAAC;QACT,CAAC;QACD,gBAAgB,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,OAAO;QACN,MAAM;QACN,KAAK;QACL,OAAO;QACP,KAAK;QACL,KAAK,EAAE,OAAO;QACd,SAAS;KACT,CAAC;AACH,CAAC"}

package/dist/anomaly/index.d.ts

@@ -1,8 +1,8 @@
 /**
  * anomaly/index.ts — Public exports for streaming anomaly governance.
  */
-export { createAnomalyDetector, resolveAnomalyConfig } from "./detector.js";
+export { AnomalyError } from "../shared/errors.js";
 export type { AnomalyDetector } from "./detector.js";
+export { createAnomalyDetector, resolveAnomalyConfig } from "./detector.js";
 export type { AnomalyChunkEvent, AnomalyConfig, AnomalyDetectorOptions, AnomalyDetectorState, AnomalyEvent, AnomalyInjectionEvent, AnomalyKind, AnomalyVerdict, InjectionCascadeConfig, ResolvedAnomalyConfig, SpendVelocityConfig, TokenRateConfig, } from "./types.js";
-export { AnomalyError } from "../shared/errors.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/anomaly/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/anomaly/index.ts"],"names":[],"mappings":"AAGA;;GAEG;AAEH,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC5E,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EACX,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,EACrB,WAAW,EACX,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/anomaly/index.ts"],"names":[],"mappings":"AAGA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC5E,YAAY,EACX,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,EACrB,WAAW,EACX,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,GACf,MAAM,YAAY,CAAC"}

package/dist/anomaly/index.js

@@ -3,6 +3,6 @@
 /**
  * anomaly/index.ts — Public exports for streaming anomaly governance.
  */
-export { createAnomalyDetector, resolveAnomalyConfig } from "./detector.js";
 export { AnomalyError } from "../shared/errors.js";
+export { createAnomalyDetector, resolveAnomalyConfig } from "./detector.js";
 //# sourceMappingURL=index.js.map

package/dist/anomaly/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/anomaly/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;GAEG;AAEH,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAgB5E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/anomaly/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/anomaly/signals/spend-velocity.d.ts

@@ -1,37 +1,64 @@
 /**
  * spend-velocity.ts — Spend-velocity anomaly signal.
  *
- * Tracks $/min over a rolling window. Each observation records the
- * cumulative cost (in dollars). The signal trips when the rolling
- * dollars-per-minute exceeds the configured ceiling.
+ * Dual denomination (M2): cloud-scope observations accumulate usd-proxy cost
+ * (dollars) against `thresholdDollarsPerMin`; local-scope observations
+ * accumulate NOMINAL USERTOKENS against `localThresholdUsertokensPerMin`
+ * (default 10_000). The two series are independent rolling windows; check()
+ * reports which denomination (and threshold) applied via `unit`/`thresholdLabel`
+ * so verdict text never fakes dollars for nominal spend.
  *
- * Default: $1.00/min over a 10s rolling window.
+ * Explicit documented behavior: with the default local rate {0,0}, per-chunk
+ * cumulative nominal cost is a constant floor of 1 usertoken, so spend_velocity
+ * CANNOT trip on default local config — token_rate is the primary local signal.
+ * Velocity becomes meaningful when the operator sets nonzero local rates
+ * (amortized-usd showback).
+ *
+ * Default: $1.00/min (cloud) / 10_000 ut/min (local) over a 10s rolling window.
  *
  * Cost is computed via a `costCalculator` callback so the signal stays
  * decoupled from the SDK's pricing module.
  */
+import type { EndpointClass } from "../../shared/types.js";
 import type { SpendVelocityConfig } from "../types.js";
+/** Denomination of a velocity measurement. */
+export type SpendUnit = "dollars" | "usertokens";
 interface CostSample {
     tMs: number;
-    cumulativeDollars: number;
+    /** Cumulative cost in the series' denomination (dollars or nominal usertokens). */
+    cumulative: number;
 }
 export interface SpendVelocitySignalState {
+    /** Cloud-scope samples (cumulative dollars). */
     samples: CostSample[];
+    /** Local-scope samples (cumulative nominal usertokens). */
+    localSamples: CostSample[];
     lastDollarsPerMin: number;
+    lastUsertokensPerMin: number;
+}
+export interface SpendVelocityCheckResult {
+    tripped: boolean;
+    metric: number;
+    threshold: number;
+    /** Denomination of metric/threshold. */
+    unit: SpendUnit;
+    /** Which config threshold applied: "thresholdDollarsPerMin" | "localThresholdUsertokensPerMin". */
+    thresholdLabel: string;
 }
 export interface SpendVelocitySignal {
     state: Readonly<SpendVelocitySignalState>;
-    /** Record cumulative dollars at time `nowMs`. */
-    observe(cumulativeDollars: number, nowMs: number): void;
-    check(nowMs: number): {
-        tripped: boolean;
-        metric: number;
-        threshold: number;
-    };
+    /**
+     * Record cumulative cost at time `nowMs`. `scope` selects the series:
+     * "local" accumulates nominal usertokens, "cloud" (default) dollars.
+     */
+    observe(cumulativeCost: number, nowMs: number, scope?: EndpointClass): void;
+    check(nowMs: number): SpendVelocityCheckResult;
     reset(): void;
 }
 export interface ResolvedSpendVelocityConfig {
     thresholdDollarsPerMin: number;
+    /** Local-scope threshold; defaulted to 10_000 at consumption when absent. */
+    localThresholdUsertokensPerMin?: number | undefined;
     windowMs: number;
 }
 export declare const SPEND_VELOCITY_DEFAULTS: ResolvedSpendVelocityConfig;

package/dist/anomaly/signals/spend-velocity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spend-velocity.d.ts","sourceRoot":"","sources":["../../../src/anomaly/signals/spend-velocity.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,UAAU,UAAU;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACxC,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC1C,iDAAiD;IACjD,OAAO,CAAC,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACxD,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,2BAA2B;IAC3C,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,uBAAuB,EAAE,2BAGrC,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,GAAG,CAAC,EAAE,mBAAmB,GAAG,2BAA2B,CAMjG;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,2BAA2B,GAAG,mBAAmB,CAkF/F"}
+{"version":3,"file":"spend-velocity.d.ts","sourceRoot":"","sources":["../../../src/anomaly/signals/spend-velocity.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAKvD,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC;AAEjD,UAAU,UAAU;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACxC,gDAAgD;IAChD,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,2DAA2D;IAC3D,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,mGAAmG;IACnG,cAAc,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC1C;;;OAGG;IACH,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC5E,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAAC;IAC/C,KAAK,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,2BAA2B;IAC3C,sBAAsB,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,8BAA8B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,uBAAuB,EAAE,2BAGrC,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,GAAG,CAAC,EAAE,mBAAmB,GAAG,2BAA2B,CAQjG;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,2BAA2B,GAAG,mBAAmB,CAiG/F"}

package/dist/anomaly/signals/spend-velocity.js

@@ -1,5 +1,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // Copyright 2026 Usertools, Inc.
+/** Default local-scope threshold, applied where consumed (resolved config keeps it optional). */
+const LOCAL_THRESHOLD_USERTOKENS_PER_MIN_DEFAULT = 10_000;
 export const SPEND_VELOCITY_DEFAULTS = {
     thresholdDollarsPerMin: 1.0,
     windowMs: 10_000,
@@ -7,20 +9,25 @@ export const SPEND_VELOCITY_DEFAULTS = {
 export function resolveSpendVelocityConfig(cfg) {
     return {
         thresholdDollarsPerMin: cfg?.thresholdDollarsPerMin ?? SPEND_VELOCITY_DEFAULTS.thresholdDollarsPerMin,
+        // M2 field stays optional in resolved config — defaulted where consumed.
+        localThresholdUsertokensPerMin: cfg?.localThresholdUsertokensPerMin,
         windowMs: cfg?.windowMs ?? SPEND_VELOCITY_DEFAULTS.windowMs,
     };
 }
 export function createSpendVelocitySignal(cfg) {
     const state = {
         samples: [],
+        localSamples: [],
         lastDollarsPerMin: 0,
+        lastUsertokensPerMin: 0,
     };
-    function pruneOlderThan(cutoffMs) {
+    const localThreshold = cfg.localThresholdUsertokensPerMin ?? LOCAL_THRESHOLD_USERTOKENS_PER_MIN_DEFAULT;
+    function pruneOlderThan(series, cutoffMs) {
         // Keep at least one sample older than the cutoff so we can compute deltas.
         // Find the most recent sample at or before cutoffMs and drop everything before it.
         let lastBeforeCutoff = -1;
-        for (let i = 0; i < state.samples.length; i++) {
-            const sample = state.samples[i];
+        for (let i = 0; i < series.length; i++) {
+            const sample = series[i];
             if (sample !== undefined && sample.tMs <= cutoffMs) {
                 lastBeforeCutoff = i;
             }
@@ -29,61 +36,77 @@ export function createSpendVelocitySignal(cfg) {
             }
         }
         if (lastBeforeCutoff > 0) {
-            state.samples.splice(0, lastBeforeCutoff);
+            series.splice(0, lastBeforeCutoff);
         }
     }
-    function observe(cumulativeDollars, nowMs) {
+    function observe(cumulativeCost, nowMs, scope = "cloud") {
         // Reject NaN/negative deltas — keep the cumulative monotonic non-decreasing.
-        if (!Number.isFinite(cumulativeDollars) || cumulativeDollars < 0)
+        if (!Number.isFinite(cumulativeCost) || cumulativeCost < 0)
             return;
-        const last = state.samples[state.samples.length - 1];
-        if (last !== undefined && cumulativeDollars < last.cumulativeDollars) {
+        const series = scope === "local" ? state.localSamples : state.samples;
+        const last = series[series.length - 1];
+        if (last !== undefined && cumulativeCost < last.cumulative) {
             // Provider regressed (shouldn't happen) — clamp to last
-            state.samples.push({ tMs: nowMs, cumulativeDollars: last.cumulativeDollars });
+            series.push({ tMs: nowMs, cumulative: last.cumulative });
         }
         else {
-            state.samples.push({ tMs: nowMs, cumulativeDollars });
+            series.push({ tMs: nowMs, cumulative: cumulativeCost });
         }
-        pruneOlderThan(nowMs - cfg.windowMs);
+        pruneOlderThan(series, nowMs - cfg.windowMs);
     }
-    function check(nowMs) {
-        pruneOlderThan(nowMs - cfg.windowMs);
-        if (state.samples.length < 2) {
-            return {
-                tripped: false,
-                metric: 0,
-                threshold: cfg.thresholdDollarsPerMin,
-            };
-        }
-        const first = state.samples[0];
-        const last = state.samples[state.samples.length - 1];
-        if (first === undefined || last === undefined) {
-            return {
-                tripped: false,
-                metric: 0,
-                threshold: cfg.thresholdDollarsPerMin,
-            };
-        }
-        const dollarsDelta = last.cumulativeDollars - first.cumulativeDollars;
+    /** Rolling per-minute rate over a series, or null when not computable. */
+    function ratePerMin(series, nowMs) {
+        pruneOlderThan(series, nowMs - cfg.windowMs);
+        if (series.length < 2)
+            return null;
+        const first = series[0];
+        const last = series[series.length - 1];
+        if (first === undefined || last === undefined)
+            return null;
+        const costDelta = last.cumulative - first.cumulative;
         const minutesDelta = (last.tMs - first.tMs) / 60_000;
-        if (minutesDelta <= 0) {
-            return {
-                tripped: false,
-                metric: 0,
-                threshold: cfg.thresholdDollarsPerMin,
-            };
-        }
-        const dollarsPerMin = dollarsDelta / minutesDelta;
-        state.lastDollarsPerMin = dollarsPerMin;
-        return {
-            tripped: dollarsPerMin >= cfg.thresholdDollarsPerMin,
-            metric: dollarsPerMin,
+        if (minutesDelta <= 0)
+            return null;
+        return costDelta / minutesDelta;
+    }
+    function check(nowMs) {
+        const cloudRate = ratePerMin(state.samples, nowMs);
+        const localRate = ratePerMin(state.localSamples, nowMs);
+        if (cloudRate !== null)
+            state.lastDollarsPerMin = cloudRate;
+        if (localRate !== null)
+            state.lastUsertokensPerMin = localRate;
+        const cloudResult = (tripped) => ({
+            tripped,
+            metric: cloudRate ?? 0,
             threshold: cfg.thresholdDollarsPerMin,
-        };
+            unit: "dollars",
+            thresholdLabel: "thresholdDollarsPerMin",
+        });
+        const localResult = (tripped, rate) => ({
+            tripped,
+            metric: rate,
+            threshold: localThreshold,
+            unit: "usertokens",
+            thresholdLabel: "localThresholdUsertokensPerMin",
+        });
+        if (cloudRate !== null && cloudRate >= cfg.thresholdDollarsPerMin)
+            return cloudResult(true);
+        if (localRate !== null && localRate >= localThreshold)
+            return localResult(true, localRate);
+        // Neither tripped: report the denomination closer to its threshold
+        // (cloud on tie / when nothing is computable — legacy behavior).
+        if (localRate !== null &&
+            (cloudRate === null || localRate / localThreshold > cloudRate / cfg.thresholdDollarsPerMin)) {
+            return localResult(false, localRate);
+        }
+        return cloudResult(false);
     }
     function reset() {
         state.samples.length = 0;
+        state.localSamples.length = 0;
         state.lastDollarsPerMin = 0;
+        state.lastUsertokensPerMin = 0;
     }
     return { state, observe, check, reset };
 }

package/dist/anomaly/signals/spend-velocity.js.map

@@ -1 +1 @@
-{"version":3,"file":"spend-velocity.js","sourceRoot":"","sources":["../../../src/anomaly/signals/spend-velocity.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AA4CjC,MAAM,CAAC,MAAM,uBAAuB,GAAgC;IACnE,sBAAsB,EAAE,GAAG;IAC3B,QAAQ,EAAE,MAAM;CAChB,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,GAAyB;IACnE,OAAO;QACN,sBAAsB,EACrB,GAAG,EAAE,sBAAsB,IAAI,uBAAuB,CAAC,sBAAsB;QAC9E,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,uBAAuB,CAAC,QAAQ;KAC3D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAgC;IACzE,MAAM,KAAK,GAA6B;QACvC,OAAO,EAAE,EAAE;QACX,iBAAiB,EAAE,CAAC;KACpB,CAAC;IAEF,SAAS,cAAc,CAAC,QAAgB;QACvC,2EAA2E;QAC3E,mFAAmF;QACnF,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,IAAI,QAAQ,EAAE,CAAC;gBACpD,gBAAgB,GAAG,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACP,MAAM;YACP,CAAC;QACF,CAAC;QACD,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC3C,CAAC;IACF,CAAC;IAED,SAAS,OAAO,CAAC,iBAAyB,EAAE,KAAa;QACxD,6EAA6E;QAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,GAAG,CAAC;YAAE,OAAO;QACzE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,SAAS,IAAI,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtE,wDAAwD;YACxD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACP,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,cAAc,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,SAAS,KAAK,CAAC,KAAa;QAK3B,cAAc,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,GAAG,CAAC,sBAAsB;aACrC,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,GAAG,CAAC,sBAAsB;aACrC,CAAC;QACH,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACtE,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QACrD,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,GAAG,CAAC,sBAAsB;aACrC,CAAC;QACH,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,GAAG,YAAY,CAAC;QAClD,KAAK,CAAC,iBAAiB,GAAG,aAAa,CAAC;QACxC,OAAO;YACN,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,sBAAsB;YACpD,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,GAAG,CAAC,sBAAsB;SACrC,CAAC;IACH,CAAC;IAED,SAAS,KAAK;QACb,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC"}
+{"version":3,"file":"spend-velocity.js","sourceRoot":"","sources":["../../../src/anomaly/signals/spend-velocity.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AA2BjC,iGAAiG;AACjG,MAAM,0CAA0C,GAAG,MAAM,CAAC;AAgD1D,MAAM,CAAC,MAAM,uBAAuB,GAAgC;IACnE,sBAAsB,EAAE,GAAG;IAC3B,QAAQ,EAAE,MAAM;CAChB,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,GAAyB;IACnE,OAAO;QACN,sBAAsB,EACrB,GAAG,EAAE,sBAAsB,IAAI,uBAAuB,CAAC,sBAAsB;QAC9E,yEAAyE;QACzE,8BAA8B,EAAE,GAAG,EAAE,8BAA8B;QACnE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,uBAAuB,CAAC,QAAQ;KAC3D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAgC;IACzE,MAAM,KAAK,GAA6B;QACvC,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,EAAE;QAChB,iBAAiB,EAAE,CAAC;QACpB,oBAAoB,EAAE,CAAC;KACvB,CAAC;IACF,MAAM,cAAc,GACnB,GAAG,CAAC,8BAA8B,IAAI,0CAA0C,CAAC;IAElF,SAAS,cAAc,CAAC,MAAoB,EAAE,QAAgB;QAC7D,2EAA2E;QAC3E,mFAAmF;QACnF,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,IAAI,QAAQ,EAAE,CAAC;gBACpD,gBAAgB,GAAG,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACP,MAAM;YACP,CAAC;QACF,CAAC;QACD,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACpC,CAAC;IACF,CAAC;IAED,SAAS,OAAO,CAAC,cAAsB,EAAE,KAAa,EAAE,QAAuB,OAAO;QACrF,6EAA6E;QAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC;YAAE,OAAO;QACnE,MAAM,MAAM,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS,IAAI,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5D,wDAAwD;YACxD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,cAAc,CAAC,MAAM,EAAE,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,0EAA0E;IAC1E,SAAS,UAAU,CAAC,MAAoB,EAAE,KAAa;QACtD,cAAc,CAAC,MAAM,EAAE,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACrD,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QACrD,IAAI,YAAY,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,SAAS,GAAG,YAAY,CAAC;IACjC,CAAC;IAED,SAAS,KAAK,CAAC,KAAa;QAC3B,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,SAAS,KAAK,IAAI;YAAE,KAAK,CAAC,iBAAiB,GAAG,SAAS,CAAC;QAC5D,IAAI,SAAS,KAAK,IAAI;YAAE,KAAK,CAAC,oBAAoB,GAAG,SAAS,CAAC;QAE/D,MAAM,WAAW,GAAG,CAAC,OAAgB,EAA4B,EAAE,CAAC,CAAC;YACpE,OAAO;YACP,MAAM,EAAE,SAAS,IAAI,CAAC;YACtB,SAAS,EAAE,GAAG,CAAC,sBAAsB;YACrC,IAAI,EAAE,SAAS;YACf,cAAc,EAAE,wBAAwB;SACxC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAE,IAAY,EAA4B,EAAE,CAAC,CAAC;YAClF,OAAO;YACP,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,cAAc;YACzB,IAAI,EAAE,YAAY;YAClB,cAAc,EAAE,gCAAgC;SAChD,CAAC,CAAC;QAEH,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,GAAG,CAAC,sBAAsB;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5F,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,cAAc;YAAE,OAAO,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAE3F,mEAAmE;QACnE,iEAAiE;QACjE,IACC,SAAS,KAAK,IAAI;YAClB,CAAC,SAAS,KAAK,IAAI,IAAI,SAAS,GAAG,cAAc,GAAG,SAAS,GAAG,GAAG,CAAC,sBAAsB,CAAC,EAC1F,CAAC;YACF,OAAO,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,SAAS,KAAK;QACb,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9B,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC5B,KAAK,CAAC,oBAAoB,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC"}

package/dist/anomaly/signals/token-rate.d.ts

@@ -1,15 +1,14 @@
-/**
- * token-rate.ts — Token-rate anomaly signal.
- *
- * Buckets observed chunks into fixed-width windows (default 2 s) and counts
- * tokens-per-second within each window. Trips when N consecutive windows
- * exceed the configured threshold (default 500 tok/s, 3 windows).
- *
- * Brief spikes (1-2 hot windows) are ignored — only sustained runaway
- * behavior trips the circuit.
- */
+import type { EndpointClass } from "../../shared/types.js";
 import type { TokenRateConfig } from "../types.js";
-export interface TokenRateSignalState {
+/** Threshold-source labels: "thresholdTokPerSec", "localThresholdTokPerSec", or `perModel["<pattern>"]`. */
+export type TokenRateThresholdLabel = string;
+/** Per-observation scope context (an AnomalyChunkEvent satisfies this shape). */
+export interface TokenRateObserveContext {
+    model?: string | undefined;
+    endpointClass?: EndpointClass | undefined;
+}
+/** Rolling-window state for a single endpoint scope (cloud or local). */
+export interface ScopeWindowState {
     /** Per-window tokens accumulated in the current bucket. */
     currentWindowTokens: number;
     /** Start time of the current window. */
@@ -18,11 +17,27 @@ export interface TokenRateSignalState {
     consecutiveHotWindows: number;
     /** Last computed peak rate (for the most recently closed window). */
     lastWindowRateTokPerSec: number;
+    /** Whether any observation has been routed to this scope yet. */
+    initialized: boolean;
+    /** Effective threshold for this scope's windows (resolved per observation). */
+    threshold: number;
+    /** Source label of the effective threshold. */
+    thresholdLabel: TokenRateThresholdLabel;
+}
+export interface TokenRateSignalState {
+    /** Cloud/unscoped window state (legacy `thresholdTokPerSec`). */
+    cloud: Readonly<ScopeWindowState>;
+    /** Local window state (`perModel` glob / `localThresholdTokPerSec`). */
+    local: Readonly<ScopeWindowState>;
 }
 export interface TokenRateSignal {
     state: Readonly<TokenRateSignalState>;
-    /** Observe a chunk's delta tokens at time `nowMs`. */
-    observe(deltaTokens: number, nowMs: number): void;
+    /**
+     * Observe a chunk's delta tokens at time `nowMs`. `context` (the chunk
+     * event) selects the effective threshold for subsequent window evaluation;
+     * omitted/unscoped context means the legacy cloud threshold.
+     */
+    observe(deltaTokens: number, nowMs: number, context?: TokenRateObserveContext): void;
     /**
      * Check if the threshold has been crossed.
      * Returns the metric (peak window rate) when tripped, else null.
@@ -32,11 +47,16 @@ export interface TokenRateSignal {
         metric: number;
         threshold: number;
         hotWindows: number;
+        thresholdLabel: TokenRateThresholdLabel;
     };
     reset(): void;
 }
 export interface ResolvedTokenRateConfig {
     thresholdTokPerSec: number;
+    /** Local-scope threshold; defaulted to 5000 at consumption when absent. */
+    localThresholdTokPerSec?: number | undefined;
+    /** Per-model overrides for local-scope events (trailing-* glob keys). */
+    perModel?: Record<string, number> | undefined;
     windowMs: number;
     consecutiveWindows: number;
 }

package/dist/anomaly/signals/token-rate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-rate.d.ts","sourceRoot":"","sources":["../../../src/anomaly/signals/token-rate.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,oBAAoB;IACpC,2DAA2D;IAC3D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,uBAAuB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACtC,sDAAsD;IACtD,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,KAAK,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACvC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,mBAAmB,EAAE,uBAIjC,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,GAAG,CAAC,EAAE,eAAe,GAAG,uBAAuB,CAMrF;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,uBAAuB,GAAG,eAAe,CAmFnF"}
+{"version":3,"file":"token-rate.d.ts","sourceRoot":"","sources":["../../../src/anomaly/signals/token-rate.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAKnD,4GAA4G;AAC5G,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE7C,iFAAiF;AACjF,MAAM,WAAW,uBAAuB;IACvC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CAC1C;AAED,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAChC,2DAA2D;IAC3D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,uBAAuB,EAAE,MAAM,CAAC;IAChC,iEAAiE;IACjE,WAAW,EAAE,OAAO,CAAC;IACrB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,cAAc,EAAE,uBAAuB,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACpC,iEAAiE;IACjE,KAAK,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAClC,wEAAwE;IACxE,KAAK,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACtC;;;;OAIG;IACH,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACrF;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,uBAAuB,CAAC;KACxC,CAAC;IACF,KAAK,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACvC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,2EAA2E;IAC3E,uBAAuB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,mBAAmB,EAAE,uBAIjC,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,GAAG,CAAC,EAAE,eAAe,GAAG,uBAAuB,CASrF;AAUD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,uBAAuB,GAAG,eAAe,CAsInF"}