fix(harness): stop telling a token-billed operator to wait for a subscription

[dibenkobit]

The harness layer was built when every harness ran on a subscription, and it kept that vocabulary
after DeepSeek and Muse Code arrived on token billing. The names were the visible half —
SubscriptionCliHarness is the base class all five extend, and HarnessCapabilityGaps.SUBSCRIPTION
is what DeepSeek raises to say it holds no API key — but the sentences underneath had gone wrong
with them, and three of those are shown to the operator.

A DeepSeek operator whose wallet ran dry was told to wait for an allowance that never resets, to
raise a plan that does not exist, and that "usage-based API billing is forbidden" — which is what
they are running. A failed preflight asked every harness for "an active product subscription login".
Blocked dispatch asked for "a responsive Codex, Claude or GLM CLI" against a roster of five. All
three reach the capability card verbatim.

What changed

Each of these is its own commit, in this reading order:

1. The spent-allowance refusal branches on HARNESS_BILLING — a subscription is waited out, a
   wallet is topped up. The forbidden-billing clause is gone from both places it appeared.
2. A watchdog test fixture rejected its process promise a macrotask before the run awaited it, so
   pnpm test failed intermittently on a suite where every test passed. Pre-existing on main;
   fixed here because it is what pre-push runs.
3. The preflight refusal names only the CLI, which is what that gap is about. Which credential is
   missing is already each harness's own error to raise, in its own words.
4. The harness layer is renamed — CliAgentHarness, harness-preflight, harness-environment,
   HarnessCapabilityGaps.CREDENTIAL, HarnessErrorCodes.CAPABILITY_REQUIRED. The readiness state
   that gap maps to has always been NOT_SIGNED_IN, so the surrounding code already disagreed with
   the old name.
5. A wallet is reported as a balance, not as a plan tier. DeepSeek's money and Muse's "Meta
   publishes no balance" were both written into plan, then run through the helper that title-cases
   a plan name and rendered in the badge a bought subscription gets.
6. The allowance domain is renamed across four packages, /api/subscriptions becomes
   /api/allowances, and the settings panel is Allowances.
7. The landing page reads billing from @openlab/protocol instead of keeping a second
   HARNESS_BILLING table of its own.

Allowances panel, before and after

Shot from a lab actually running on this machine, OPENLAB_HOME pointed at a disposable directory.
Muse Code is the visible case: its sentence used to sit in the plan badge, title-cased into
"Metered — Meta Publishes No Balance" beside Codex's "Plus" and Claude's "Max".

Before	After

The same lab answers GET /api/allowances with the plan and the balance split apart:

codex     state=exhausted   plan=plus   balance=null
claude    state=available   plan=max    balance=null
glm       state=available   plan=pro    balance=null
deepseek  state=unreadable  plan=null   balance=null
muse      state=available   plan=null   balance=Meta publishes no balance

Breaking

• GET /api/subscriptions is now GET /api/allowances. The daemon and dashboard ship together and
  no third party pins it.
• Four @openlab/harness subpaths moved. The package is private: true and is never published;
  only this repository imports it.

Not done here

• ~40 remaining mentions of "subscription" were read one by one and left alone — spend caps (only a
  windowed subscription can carry one), AgentHarnessBilling.SUBSCRIPTION itself, and the roster
  notes about Codex, Claude and GLM. They are about actual subscriptions.
• No screenshot of the capability card. Its two corrected sentences are covered by tests, but
  reproducing them on screen needs a spent wallet, which this machine has no key for.

Verified with pnpm check (biome, typecheck, 733 tests, build) and against a running daemon.
Written by Claude Opus 5 through the Claude Code harness.

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith with what you need. Autofix is disabled.}

Note

Stop telling token-billed operators to wait for a subscription when their allowance is spent

• Renames SubscriptionCliHarness → CliAgentHarness, runSubscriptionPreflight → runHarnessPreflight, and all related types/constants throughout the harness and daemon packages, removing subscription-specific wording from user-facing messages.
• Adds a spentAllowanceError path that distinguishes subscription-billed harnesses (advise waiting for reset/raising plan) from token-billed wallet harnesses (advise adding balance), using HarnessCapabilityGaps.ALLOWANCE instead of the old SUBSCRIPTION gap.
• Adds readDeepseekAllowance and readMuseAllowance for token-billed harnesses, and a readHarnessAllowance dispatcher covering all supported harness kinds; allowance readings now carry explicit balance and spent fields.
• Renames HarnessCapabilityGaps.SUBSCRIPTION → CREDENTIAL and HarnessErrorCodes.SUBSCRIPTION_AUTH_REQUIRED → CAPABILITY_REQUIRED; the /api/subscriptions endpoint moves to /api/allowances.
• Risk: the API route change (/api/subscriptions → /api/allowances) and the renamed error codes/gap identifiers are breaking changes for any client consuming those values directly.

^{Macroscope summarized 1a36458.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
openlab-landing	Ready	Preview	Aug 7, 2026 4:04pm