v2.59.0 — autopilot Tier-3 (Wave H)
Tier-3: ops. Makes the operated autopilot operable — see what it costs, catch a failing connector, recover a write that didn't land. Deterministic cost model + a fault-injection seam, so it's all testable offline.
- Cost/latency budgets —
budgets.mjs: per-vertical latency budgets + a flat (env-overridable) connector unit cost;runMetrics()flags over-budget runs. - Retry / dead-letter — a post-gate write that exhausts its 3× retries now lands in
status:'dead-letter'(not a silent completion) + audit;deadLetters()queue +requeue(id)re-runs the write to recover.POST /api/autopilot/requeue. - Billing / metering —
metering()aggregates connector calls, latency, cost (USD), retries, per-vertical breakdown;GET /api/autopilot/metering. - Connector health —
connectorHealth(): failure rate, p95 latency, last error, healthy flag;GET /api/autopilot/health+ cronconnector.health. - Test seam —
GREAT_CTO_FAULT_INJECT=1deterministically fails stub calls (chaos / dead-letter / health testing).
Implements docs/plans/PLAN-autopilot-tier3.md. 5 new lib tests (304/304), all ops endpoints admin/compliance-gated.