feat(runtime): cap the registries, flights, and retained diagnostics

Every operational registry now answers admission before work begins: turns
at the fetch boundary, WebSockets before the upgrade, storage workers and
mutation homes before spawning, credential-refresh and pool-quota flights
before their requests, catalog gathers before providers are contacted.
Diagnostic rings and fixed slots account their bytes and truncate on a
UTF-8 boundary, discovery and usage reads are byte-bounded with truncation
made visible through the management API down to the GUI, and the Cursor
MCP manager stages its catalog transactionally under typed limits. The
shared gate lives in src/lib/admission.ts; the 035 plan doc carries the
four audit rounds that moved each cap onto its real owner.

Author: lidge-jun

devlog/_plan/260801_zero_leak_state_stores/035_registry_admission_caps.md

@@ -26,6 +26,7 @@ export interface ApiKeysWorkspaceProps {
   /** Dataset-level. Absent means nothing is attributable yet — a different
    *  statement from a key whose counters read zero. */
   attributionSince?: string;
+  historyTruncated?: boolean;
   authMatrix: ApiAuthMatrixRow[];
   keysLoading: boolean;
   keysLoadFailed: boolean;
@@ -62,6 +63,7 @@ export interface ApiKeysWorkspaceProps {
 export default function ApiKeysWorkspace({
   keys,
   attributionSince,
+  historyTruncated,
   authMatrix,
   keysLoading,
   keysLoadFailed,
@@ -371,7 +373,7 @@ export default function ApiKeysWorkspace({
                         <dd>{selected.usage.requests7d.toLocaleString(localeTag)}</dd>
                       </div>
                       <div className="awi-kv-row">
-                        <dt>{t("api.attribution.totalRequests")}</dt>
+                        <dt>{historyTruncated ? t("api.attribution.totalRequestsAvailable") : t("api.attribution.totalRequests")}</dt>
                         <dd>{selected.usage.totalRequests.toLocaleString(localeTag)}</dd>
                       </div>
                       <div className="awi-kv-row">
@@ -381,7 +383,7 @@ export default function ApiKeysWorkspace({
                           : t("api.attribution.neverUsed")}</dd>
                       </div>
                       <div className="awi-kv-row">
-                        <dt>{t("api.attribution.since")}</dt>
+                        <dt>{historyTruncated ? t("api.attribution.sinceAvailable") : t("api.attribution.since")}</dt>
                         <dd>{formatCreatedDate(attributionSince, localeTag)}</dd>
                       </div>
                     </dl>

gui/src/components/apikeys-workspace/ApiKeysWorkspace.tsx

@@ -609,6 +609,8 @@ export const de: Record<TKey, string> = {
   "usage.empty": "Noch keine Nutzung erfasst. Sende eine Anfrage über den Proxy, um Aktivität hier zu sehen.",
   "usage.loadError": "Nutzungsdaten konnten nicht geladen werden.",
   "usage.range.all": "Alle",
+  "usage.range.available": "Verfügbarer Verlauf",
+  "usage.historyTruncated": "Die Summen beziehen sich nur auf den verfügbaren Verlauf, da ältere Nutzungsdaten nicht geladen wurden.",
   "usage.range.30d": "30d",
   "usage.range.7d": "7d",
   "usage.card.requests": "Anfragen",
@@ -904,6 +906,8 @@ export const de: Record<TKey, string> = {
   "api.attribution.title": "Zugeordnete Nutzung",
   "api.attribution.requests7d": "Anfragen, letzte 7 Tage",
   "api.attribution.totalRequests": "Zugeordnete Anfragen gesamt",
+  "api.attribution.totalRequestsAvailable": "Anfragen im verfügbaren Verlauf",
+  "api.attribution.sinceAvailable": "Verfügbare Zuordnung seit",
   "api.attribution.lastUsed": "Zuletzt verwendet",
   "api.attribution.since": "Zuordnung verfügbar seit",
   "api.attribution.neverUsed": "Seit Beginn der Zuordnung nicht verwendet",

gui/src/i18n/de.ts

@@ -638,6 +638,8 @@ export const en = {
   "usage.empty": "No usage recorded yet. Send a request through the proxy to see activity here.",
   "usage.loadError": "Could not load usage data.",
   "usage.range.all": "All",
+  "usage.range.available": "Available history",
+  "usage.historyTruncated": "Totals cover available history only because older usage was not loaded.",
   "usage.range.30d": "30d",
   "usage.range.7d": "7d",
   "usage.card.requests": "Requests",
@@ -1352,6 +1354,8 @@ export const en = {
   "api.attribution.title": "Attributed usage",
   "api.attribution.requests7d": "Requests, last 7 days",
   "api.attribution.totalRequests": "Total attributed requests",
+  "api.attribution.totalRequestsAvailable": "Requests in available history",
+  "api.attribution.sinceAvailable": "Available attribution since",
   "api.attribution.lastUsed": "Last used",
   "api.attribution.since": "Attribution available since",
   "api.attribution.neverUsed": "Not used since attribution began",

gui/src/i18n/en.ts

@@ -598,6 +598,8 @@ export const ja: Record<TKey, string> = {
   "usage.empty": "まだ使用量が記録されていません。プロキシ経由でリクエストを送信するとここにアクティビティが表示されます。",
   "usage.loadError": "使用量データを読み込めませんでした。",
   "usage.range.all": "すべて",
+  "usage.range.available": "利用可能な履歴",
+  "usage.historyTruncated": "古い利用履歴が読み込まれていないため、合計は利用可能な履歴のみを対象とします。",
   "usage.range.30d": "30日",
   "usage.range.7d": "7日",
   "usage.card.requests": "リクエスト",
@@ -1300,6 +1302,8 @@ export const ja: Record<TKey, string> = {
   "api.attribution.title": "キー別の使用状況",
   "api.attribution.requests7d": "直近 7 日のリクエスト",
   "api.attribution.totalRequests": "集計済みリクエスト総数",
+  "api.attribution.totalRequestsAvailable": "利用可能な履歴のリクエスト",
+  "api.attribution.sinceAvailable": "利用可能な集計開始日",
   "api.attribution.lastUsed": "最終使用",
   "api.attribution.since": "集計開始",
   "api.attribution.neverUsed": "集計開始以降は未使用",

gui/src/i18n/ja.ts

@@ -631,6 +631,8 @@ export const ko: Record<TKey, string> = {
   "usage.empty": "아직 기록된 사용량이 없습니다. 프록시로 요청을 보내면 여기에 표시됩니다.",
   "usage.loadError": "사용량 데이터를 불러오지 못했습니다.",
   "usage.range.all": "전체",
+  "usage.range.available": "사용 가능한 기록",
+  "usage.historyTruncated": "이전 사용 기록을 불러오지 않아 합계는 사용 가능한 기록만 포함합니다.",
   "usage.range.30d": "30일",
   "usage.range.7d": "7일",
   "usage.card.requests": "요청",
@@ -931,6 +933,8 @@ export const ko: Record<TKey, string> = {
   "api.attribution.title": "키별 사용량",
   "api.attribution.requests7d": "최근 7일 요청",
   "api.attribution.totalRequests": "집계된 전체 요청",
+  "api.attribution.totalRequestsAvailable": "사용 가능한 기록의 요청",
+  "api.attribution.sinceAvailable": "사용 가능한 집계 시작일",
   "api.attribution.lastUsed": "마지막 사용",
   "api.attribution.since": "집계 시작",
   "api.attribution.neverUsed": "집계 이후 사용 없음",

gui/src/i18n/ko.ts

@@ -630,6 +630,8 @@ export const ru: Record<TKey, string> = {
   "usage.empty": "Данных об использовании пока нет. Отправьте запрос через прокси, чтобы увидеть здесь активность.",
   "usage.loadError": "Не удалось загрузить данные об использовании.",
   "usage.range.all": "Все",
+  "usage.range.available": "Доступная история",
+  "usage.historyTruncated": "Итоги охватывают только доступную историю, поскольку старые данные не загружены.",
   "usage.range.30d": "30 дн.",
   "usage.range.7d": "7 дн.",
   "usage.card.requests": "Запросы",
@@ -1342,6 +1344,8 @@ export const ru: Record<TKey, string> = {
   "api.attribution.title": "Использование по ключам",
   "api.attribution.requests7d": "Запросы за 7 дней",
   "api.attribution.totalRequests": "Всего учтённых запросов",
+  "api.attribution.totalRequestsAvailable": "Запросы в доступной истории",
+  "api.attribution.sinceAvailable": "Доступная атрибуция с",
   "api.attribution.lastUsed": "Последнее использование",
   "api.attribution.since": "Учёт ведётся с",
   "api.attribution.neverUsed": "Не использовался с начала учёта",

gui/src/i18n/ru.ts

@@ -624,6 +624,8 @@ export const zh: Record<TKey, string> = {
   "usage.empty": "尚无用量记录。通过代理发送请求后将在此显示。",
   "usage.loadError": "无法加载用量数据。",
   "usage.range.all": "全部",
+  "usage.range.available": "可用历史",
+  "usage.historyTruncated": "由于未加载较早的使用记录，合计仅涵盖可用历史。",
   "usage.range.30d": "30 天",
   "usage.range.7d": "7 天",
   "usage.card.requests": "请求数",
@@ -924,6 +926,8 @@ export const zh: Record<TKey, string> = {
   "api.attribution.title": "按密钥统计的用量",
   "api.attribution.requests7d": "最近 7 天请求数",
   "api.attribution.totalRequests": "已归属请求总数",
+  "api.attribution.totalRequestsAvailable": "可用历史中的请求",
+  "api.attribution.sinceAvailable": "可用归属记录起始时间",
   "api.attribution.lastUsed": "最近使用",
   "api.attribution.since": "统计起始",
   "api.attribution.neverUsed": "统计开始后未使用",

gui/src/i18n/zh.ts

@@ -32,6 +32,7 @@ interface KeysResponse {
   // could not read.
   keys?: Array<Omit<ApiKeyEntry, "usage"> & { usage?: ApiKeyEntry["usage"] }>;
   attributionSince?: string;
+  historyTruncated?: boolean;
   authMatrix?: unknown;
   endpoint?: string;
   baseUrl?: string;
@@ -53,6 +54,7 @@ type CachedKeysShape = {
   /** Dataset-level: absent means nothing is attributable yet, which is a
    *  different statement from a key whose counters are zero. */
   attributionSince?: string;
+  historyTruncated?: boolean;
   authMatrix: ApiAuthMatrixRow[];
 };
 
@@ -129,6 +131,7 @@ export default function ApiKeys({ apiBase }: { apiBase: string }) {
       },
       claudeCodeEnabled: data.claudeCodeEnabled !== false,
       ...(data.attributionSince ? { attributionSince: data.attributionSince } : {}),
+      ...(data.historyTruncated === true ? { historyTruncated: true } : {}),
       authMatrix: data.authMatrix,
     };
     // Prefixes only — never the secret key material.
@@ -180,6 +183,7 @@ export default function ApiKeys({ apiBase }: { apiBase: string }) {
   const endpoints = keysData?.endpoints ?? seedEndpointsFromApiBase(apiBase);
   const claudeCodeEnabled = keysData?.claudeCodeEnabled ?? true;
   const attributionSince = keysData?.attributionSince;
+  const historyTruncated = keysData?.historyTruncated === true;
   // `?? []` only ever fires while there is no key data at all — both the network
   // and cache paths reject a payload without a valid matrix, so an empty table
   // can never be presented as the server's answer.
@@ -412,6 +416,7 @@ export default function ApiKeys({ apiBase }: { apiBase: string }) {
           <ApiKeysWorkspace
         keys={keys}
         attributionSince={attributionSince}
+        historyTruncated={historyTruncated}
         authMatrix={authMatrix}
         keysLoading={false}
         keysLoadFailed={keysState.showError}

gui/src/pages/ApiKeys.tsx

@@ -83,6 +83,10 @@ interface UsageResponse {
   days: UsageDay[];
   models: UsageModel[];
   providers: UsageProvider[];
+  historyTruncated: boolean;
+  truncatedPrefixBytes: number;
+  entriesTruncated: boolean;
+  entriesDropped: number;
   error?: string;
 }
 
@@ -241,7 +245,7 @@ function UsageFilters({
       </div>
       <div className="usage-segmented" role="group" aria-label={t("usage.title")}>
         {(["all", "30d", "7d"] as Range[]).map(choice => {
-          const label = t(`usage.range.${choice}`);
+          const label = choice === "all" ? t("usage.range.available") : t(`usage.range.${choice}`);
           return (
             <button
               key={choice}
@@ -810,6 +814,7 @@ export default function Usage({ apiBase }: { apiBase: string }) {
       ) : (
         <>
           {state.showError && <Notice tone="err">{t("usage.loadError")}</Notice>}
+          {data?.historyTruncated && <Notice tone="ok">{t("usage.historyTruncated")}</Notice>}
           {state.refreshing && <DataSurfaceStatus live={!state.showError}>{t("usage.loading")}</DataSurfaceStatus>}
           <UsageWorkspaceBody
             data={data}