@claudexor/cli 3.4.2 → 3.6.0

package/dist/accounts-projection.d.ts

@@ -1,14 +1,14 @@
 /**
- * Per-harness ACCOUNTS AUTHORITY projection (INV-135): the native "CLI login"
- * pseudo-row state and the informational `next_up` identity (who an UNPINNED
- * run would route to next), built ONCE on the server so no surface (CLI, macOS)
- * re-derives the accounts symmetry. Native-login detection reads the cached
- * doctor status (a `native_session` source reported available); a probe failure
- * is an honest "not detected", never a thrown listing. `next_up` is computed by
- * the routing owner (`nextUpIdentity`) from enabled profiles + native readiness
- * + quota, so it can never disagree with run-time admission.
+ * Per-harness POOL AUTHORITY projection of the unified account model
+ * (INV-135): every account is a named registry row; `accountPools` carries
+ * the routing facts (who an UNPINNED run routes to next), computed ONCE on
+ * the server by the same pool owner run admission uses so no surface
+ * re-derives it. The legacy `harnessAccounts` carrier stays on the wire as
+ * `[]` for strict old clients; its native "CLI login" pseudo-row is gone —
+ * detected default-store logins are auto-registered as ordinary rows at
+ * daemon start.
  */
-import type { AccountIdentity, ControlHarnessAccounts, CredentialProfile, CredentialProfileStatus, QuotaSnapshot } from "@claudexor/schema";
+import type { AccountIdentity, ControlHarnessAccountPool, CredentialProfile, CredentialProfileStatus, QuotaSnapshot } from "@claudexor/schema";
 import type { HarnessStatus } from "@claudexor/gateway";
 /**
  * Non-secret {email, plan} of a config_dir_login PROFILE, read daemon-side from
@@ -34,12 +34,18 @@ export declare function profileAccountProjection(profile: CredentialProfile): Pr
     status: CredentialProfileStatus;
     identity: AccountIdentity | null;
 }>;
-export declare function harnessAccountsProjection(repoRoot: string, quotaSnapshots?: readonly QuotaSnapshot[], snapshot?: {
+/**
+ * The per-harness pool routing verdict (`GET /v2/account-pools` and the
+ * additive `accountPools` key of the credential-profiles response). Routing
+ * facts ONLY — account facts live on the profile rows. The API-key ROUTE
+ * appears exclusively here (`api_key_route`) so legacy strict `next_up`
+ * decoders never see an unknown kind.
+ */
+export declare function accountPoolsProjection(repoRoot: string, quotaSnapshots?: readonly QuotaSnapshot[], snapshot?: {
     statuses?: readonly HarnessStatus[];
     profiles?: readonly {
         profile: CredentialProfile;
         status: CredentialProfileStatus;
     }[];
-    accountIdentities?: ReadonlyMap<string, AccountIdentity | null>;
-}): Promise<ControlHarnessAccounts[]>;
+}): Promise<ControlHarnessAccountPool[]>;
 //# sourceMappingURL=accounts-projection.d.ts.map

package/dist/accounts-projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accounts-projection.d.ts","sourceRoot":"","sources":["../src/accounts-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACd,MAAM,mBAAmB,CAAC;AAU3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAiBxD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,eAAe,GAAG,IAAI,CAKzF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,uBAAuB,CAAC,CAGlC;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC;IAClF,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,EAAE,uBAAuB,CAAC;IAChC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;CAClC,CAAC,CAyBD;AAED,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,MAAM,EAChB,cAAc,GAAE,SAAS,aAAa,EAAO,EAC7C,QAAQ,CAAC,EAAE;IACT,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,uBAAuB,CAAA;KAAE,EAAE,CAAC;IACtF,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC,CAAC;CACjE,GACA,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAoEnC"}
+{"version":3,"file":"accounts-projection.d.ts","sourceRoot":"","sources":["../src/accounts-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EACV,eAAe,EACf,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACd,MAAM,mBAAmB,CAAC;AAY3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKxD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,eAAe,GAAG,IAAI,CAKzF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,uBAAuB,CAAC,CAGlC;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC;IAClF,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,EAAE,uBAAuB,CAAC;IAChC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;CAClC,CAAC,CAyBD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,EAChB,cAAc,GAAE,SAAS,aAAa,EAAO,EAC7C,QAAQ,CAAC,EAAE;IACT,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,uBAAuB,CAAA;KAAE,EAAE,CAAC;CACvF,GACA,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAgFtC"}

package/dist/accounts-projection.js

@@ -1,22 +1,9 @@
-import { AccountIdentity as AccountIdentitySchema } from "@claudexor/schema";
+import { AccountIdentity as AccountIdentitySchema, estimateEffectiveAuthRoute, } from "@claudexor/schema";
 import { loadConfig } from "@claudexor/config";
-import { defaultCredentialRoute, effectiveAuthPreference, nextUpIdentity, probeCredentialProfileStatus, profileStatusAdmits, } from "@claudexor/orchestrator";
-import { codexAccountIdentity, defaultNativeCodexHome } from "@claudexor/harness-codex";
-import { claudeAccountIdentity, defaultNativeClaudeConfigDir } from "@claudexor/harness-claude";
+import { effectiveAuthPreference, probeCredentialProfileStatus, profileStatusAdmits, selectFromAccountPool, } from "@claudexor/orchestrator";
+import { codexAccountIdentity } from "@claudexor/harness-codex";
+import { claudeAccountIdentity } from "@claudexor/harness-claude";
 import { buildGateway, buildRegistry } from "./registry.js";
-/**
- * Non-secret {email, plan} of a harness's NATIVE/CLI login, read daemon-side
- * from the Claudexor-owned native store (never the ordinary vendor home).
- * Cursor's CLI-reported identity arrives through the Accounts-only doctor
- * receipt instead; this helper remains the static-store owner for codex/claude.
- */
-function nativeAccountIdentity(harnessId) {
-    if (harnessId === "codex")
-        return codexAccountIdentity(defaultNativeCodexHome());
-    if (harnessId === "claude")
-        return claudeAccountIdentity(defaultNativeClaudeConfigDir());
-    return null;
-}
 /**
  * Non-secret {email, plan} of a config_dir_login PROFILE, read daemon-side from
  * the profile's OWN isolation-locator store (INV-067) — never the ordinary
@@ -68,34 +55,26 @@ export async function profileAccountProjection(profile) {
     });
     return { profile, status, identity };
 }
-export async function harnessAccountsProjection(repoRoot, quotaSnapshots = [], snapshot) {
+/**
+ * The per-harness pool routing verdict (`GET /v2/account-pools` and the
+ * additive `accountPools` key of the credential-profiles response). Routing
+ * facts ONLY — account facts live on the profile rows. The API-key ROUTE
+ * appears exclusively here (`api_key_route`) so legacy strict `next_up`
+ * decoders never see an unknown kind.
+ */
+export async function accountPoolsProjection(repoRoot, quotaSnapshots = [], snapshot) {
     const cfg = loadConfig(repoRoot).global;
     const harnessIds = [...buildRegistry({ includeFakes: false }).keys()].sort();
-    const nativeDetected = new Map();
     let statuses = snapshot?.statuses ?? [];
-    const accountIdentities = new Map(snapshot?.accountIdentities ?? []);
     if (!snapshot?.statuses) {
         try {
-            const receipts = await buildGateway({ includeFakes: false }).statusAllForAccounts({ cwd: repoRoot, fresh: true }, harnessIds);
-            statuses = receipts.map((receipt) => receipt.status);
-            for (const receipt of receipts) {
-                accountIdentities.set(receipt.status.id, receipt.identity);
-            }
+            statuses = await buildGateway({ includeFakes: false }).statusAll({ cwd: repoRoot }, harnessIds);
         }
         catch {
             statuses = [];
         }
     }
-    const defaultRoutes = new Map();
-    for (const s of statuses) {
-        const native = s.authSources.find((source) => source.source === "native_session");
-        const detected = native?.availability === "available";
-        nativeDetected.set(s.id, detected);
-        const harness = cfg.harnesses[s.id];
-        const route = defaultCredentialRoute(s, effectiveAuthPreference(harness?.auth_preference, cfg.routing.auth_preference));
-        if (route)
-            defaultRoutes.set(s.id, route);
-    }
+    const statusById = new Map(statuses.map((status) => [status.id, status]));
     const readyProfiles = new Map();
     for (const entry of snapshot?.profiles ?? []) {
         if (!entry.profile.enabled || !profileStatusAdmits(entry.profile, entry.status))
@@ -106,31 +85,57 @@ export async function harnessAccountsProjection(repoRoot, quotaSnapshots = [], s
     }
     return harnessIds.map((harnessId) => {
         const h = cfg.harnesses[harnessId];
-        const nativeEnabled = h?.native_credentials_enabled ?? true;
-        const defaultEnabled = (h?.enabled ?? true) && nativeEnabled;
-        const defaultRoute = defaultRoutes.get(harnessId) ?? null;
+        if (h?.enabled === false) {
+            return {
+                harness_id: harnessId,
+                next_up: {
+                    kind: "none",
+                    reason: `harness is disabled in settings (harnesses.${harnessId}.enabled=false)`,
+                },
+            };
+        }
+        // next_up must never advertise a row the runtime would not select: a
+        // NON-EMPTY rotation_eligible list restricts the runtime's candidates
+        // (staticRotationCandidates), so the projection applies the same filter.
+        const rotationEligible = h?.profile_policy?.rotation_eligible ?? [];
+        const ready = readyProfiles.get(harnessId) ?? new Set();
+        const eligibleReady = rotationEligible.length > 0
+            ? new Set([...ready].filter((id) => rotationEligible.includes(id)))
+            : ready;
+        const selection = selectFromAccountPool({
+            registry: cfg.credential_profiles,
+            harnessId,
+            snapshots: quotaSnapshots,
+            readyProfileIds: eligibleReady,
+            headroomThreshold: h?.profile_policy?.headroom_threshold ?? 0.9,
+            model: h?.default_model ?? null,
+        });
+        if (selection.outcome === "selected") {
+            return {
+                harness_id: harnessId,
+                next_up: { kind: "profile", profileId: selection.candidate.profile.profile_id },
+            };
+        }
+        // Pool exhaustion is the typed `credential_pool_exhausted` terminal at
+        // run time (owner Q3=A): the paid API-key ROUTE serves it ONLY under the
+        // EXPLICIT api_key preference — never silently under auto — so next_up
+        // advertises the paid route exactly when the runtime would take it.
+        const preference = effectiveAuthPreference(h?.auth_preference, cfg.routing.auth_preference);
+        const status = statusById.get(harnessId);
+        const keyRouteReady = preference === "api_key" &&
+            status !== undefined &&
+            estimateEffectiveAuthRoute("api_key", status.authSources) === "api_key";
+        if (keyRouteReady) {
+            return { harness_id: harnessId, next_up: { kind: "api_key_route" } };
+        }
         return {
             harness_id: harnessId,
-            native_credentials_enabled: nativeEnabled,
-            native_login_detected: nativeDetected.get(harnessId) ?? false,
-            identity: accountIdentities.get(harnessId) ?? nativeAccountIdentity(harnessId),
-            // The routing owner computes who an unpinned run routes to next — the
-            // accounts projection never re-derives it (INV-135).
-            next_up: nextUpIdentity({
-                registry: cfg.credential_profiles,
-                harnessId,
-                policy: h?.profile_policy ?? {
-                    limit_action: "fail",
-                    rotation_eligible: [],
-                    headroom_threshold: 0.9,
-                },
-                snapshots: quotaSnapshots,
-                defaultEnabled,
-                defaultReady: defaultRoute !== null,
-                defaultRoute,
-                readyProfileIds: readyProfiles.get(harnessId) ?? new Set(),
-                model: h?.default_model ?? null,
-            }),
+            next_up: {
+                kind: "none",
+                reason: selection.outcome === "exhausted"
+                    ? `every enabled account is over its quota window${selection.resets_at ? ` (earliest reset ${selection.resets_at})` : ""}; unpinned runs wait for the reset (the paid API-key route requires the explicit api_key preference)`
+                    : "no enabled account is signed in for this harness; connect an account or pin one per-run (--profile)",
+            },
         };
     });
 }

package/dist/accounts-projection.js.map

@@ -1 +1 @@
-{"version":3,"file":"accounts-projection.js","sourceRoot":"","sources":["../src/accounts-projection.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,eAAe,IAAI,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE5D;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,oBAAoB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACjF,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO;QAAE,OAAO,oBAAoB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA0B;IAE1B,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,OAAO,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA0B;IAKvE,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;QACrC,OAAO;YACL,OAAO;YACP,MAAM,EAAE,MAAM,4BAA4B,CACxC,OAAO,EACP,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,CAC/C;YACD,QAAQ,EAAE,sBAAsB,CAAC,OAAO,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC7E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,sBAAuB,CAAC,SAAS,CAAC,CAAC;QACjE,IACE,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;YAClD,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5F,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAgB,EAChB,cAAc,GAA6B,EAAE,EAC7C,QAIC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAmB,CAAC;IAClD,IAAI,QAAQ,GAA6B,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;IAClE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAC/E,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAC9B,UAAU,CACX,CAAC;YACF,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuC,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,MAAM,EAAE,YAAY,KAAK,WAAW,CAAC;QACtD,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,sBAAsB,CAClC,CAAC,EACD,uBAAuB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAC/E,CAAC;QACF,IAAI,KAAK;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1F,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC/E,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAA0B,EAAE;QAC1D,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,aAAa,GAAG,CAAC,EAAE,0BAA0B,IAAI,IAAI,CAAC;QAC5D,MAAM,cAAc,GAAG,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,aAAa,CAAC;QAC7D,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;QAC1D,OAAO;YACL,UAAU,EAAE,SAAS;YACrB,0BAA0B,EAAE,aAAa;YACzC,qBAAqB,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK;YAC7D,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC,SAAS,CAAC;YAC9E,sEAAsE;YACtE,qDAAqD;YACrD,OAAO,EAAE,cAAc,CAAC;gBACtB,QAAQ,EAAE,GAAG,CAAC,mBAAmB;gBACjC,SAAS;gBACT,MAAM,EAAE,CAAC,EAAE,cAAc,IAAI;oBAC3B,YAAY,EAAE,MAAM;oBACpB,iBAAiB,EAAE,EAAE;oBACrB,kBAAkB,EAAE,GAAG;iBACxB;gBACD,SAAS,EAAE,cAAc;gBACzB,cAAc;gBACd,YAAY,EAAE,YAAY,KAAK,IAAI;gBACnC,YAAY;gBACZ,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAE;gBAC1D,KAAK,EAAE,CAAC,EAAE,aAAa,IAAI,IAAI;aAChC,CAAC;SACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"accounts-projection.js","sourceRoot":"","sources":["../src/accounts-projection.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,eAAe,IAAI,qBAAqB,EACxC,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO;QAAE,OAAO,oBAAoB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA0B;IAE1B,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,OAAO,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA0B;IAKvE,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;QACrC,OAAO;YACL,OAAO;YACP,MAAM,EAAE,MAAM,4BAA4B,CACxC,OAAO,EACP,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,CAC/C;YACD,QAAQ,EAAE,sBAAsB,CAAC,OAAO,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC7E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,sBAAuB,CAAC,SAAS,CAAC,CAAC;QACjE,IACE,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;YAClD,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5F,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,cAAc,GAA6B,EAAE,EAC7C,QAGC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,QAAQ,GAA6B,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAC9D,EAAE,GAAG,EAAE,QAAQ,EAAE,EACjB,UAAU,CACX,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1F,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC/E,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAA6B,EAAE;QAC7D,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO;gBACL,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,8CAA8C,SAAS,iBAAiB;iBACjF;aACF,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,sEAAsE;QACtE,yEAAyE;QACzE,MAAM,gBAAgB,GAAG,CAAC,EAAE,cAAc,EAAE,iBAAiB,IAAI,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAChE,MAAM,aAAa,GACjB,gBAAgB,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,KAAK,CAAC;QACZ,MAAM,SAAS,GAAG,qBAAqB,CAAC;YACtC,QAAQ,EAAE,GAAG,CAAC,mBAAmB;YACjC,SAAS;YACT,SAAS,EAAE,cAAc;YACzB,eAAe,EAAE,aAAa;YAC9B,iBAAiB,EAAE,CAAC,EAAE,cAAc,EAAE,kBAAkB,IAAI,GAAG;YAC/D,KAAK,EAAE,CAAC,EAAE,aAAa,IAAI,IAAI;SAChC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACrC,OAAO;gBACL,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE;aAChF,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,yEAAyE;QACzE,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,UAAU,GAAG,uBAAuB,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,aAAa,GACjB,UAAU,KAAK,SAAS;YACxB,MAAM,KAAK,SAAS;YACpB,0BAA0B,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;QAC1E,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC;QACvE,CAAC;QACD,OAAO;YACL,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE;gBACP,IAAI,EAAE,MAAM;gBACZ,MAAM,EACJ,SAAS,CAAC,OAAO,KAAK,WAAW;oBAC/B,CAAC,CAAC,iDAAiD,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,sGAAsG;oBAC9N,CAAC,CAAC,qGAAqG;aAC5G;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/accounts-services.d.ts

@@ -38,139 +38,146 @@ export declare function projectHarnessStatuses(statuses: readonly HarnessStatus[
 }[]>;
 /** One server-owned Accounts response builder. The opt-in form refreshes quota
  * first and then derives next_up from that exact returned response; no client
- * can accidentally pair a newer quota card with an older routing identity. */
-export declare function createCredentialProfilesService(quotaRegistry: () => QuotaRegistry): (input?: {
-    snapshot?: boolean;
-}) => Promise<{
-    profiles: {
-        profile: CredentialProfile;
-        status: CredentialProfileStatus;
-        identity: import("@claudexor/schema").AccountIdentity | null;
-    }[];
-    harnessAccounts: {
-        harness_id: string;
-        native_credentials_enabled: boolean;
-        native_login_detected: boolean;
-        identity: {
-            email?: string | undefined;
-            plan?: string | undefined;
-        } | null;
-        next_up: {
-            kind: "profile";
-            profileId: string;
-        } | {
-            kind: "native";
-            route?: "api_key" | "local_session" | undefined;
-        } | {
-            kind: "none";
-            reason: string;
-        };
-    }[];
-} | {
-    profiles: {
-        profile: CredentialProfile;
-        status: CredentialProfileStatus;
-        identity: import("@claudexor/schema").AccountIdentity | null;
-    }[];
-    harnessAccounts: {
-        harness_id: string;
-        native_credentials_enabled: boolean;
-        native_login_detected: boolean;
-        identity: {
-            email?: string | undefined;
-            plan?: string | undefined;
-        } | null;
-        next_up: {
-            kind: "profile";
-            profileId: string;
-        } | {
-            kind: "native";
-            route?: "api_key" | "local_session" | undefined;
-        } | {
-            kind: "none";
-            reason: string;
-        };
-    }[];
-    harnesses: {
-        id: string;
-        available: boolean;
-        status: "ok" | "degraded" | "unavailable";
-        manifest: import("@claudexor/schema").HarnessManifest | null;
-        enabledIntents: import("@claudexor/schema").Intent[];
-        routableIntents: import("@claudexor/schema").Intent[];
-        disabledIntents: import("@claudexor/schema").Intent[];
-        checks: import("@claudexor/schema").ConformanceCheck[];
-        reasons: string[];
-        authSources: import("@claudexor/schema").AuthSourceReadiness[];
-        configuredModel: string | null;
-        configuredModelCheck: {
-            status: "ok" | "rejected";
-            message?: string | null;
-        } | null;
-        delegation: {
-            available: boolean;
-            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
-            remediation: string | null;
-            requiresFullAccess: boolean;
-        };
-        readiness: {
-            id: string;
-            kind: "auth" | "binary" | "model" | "probe" | "smoke";
-            title: string;
-            status: "fail" | "pass" | "skip";
-            detail: string | null;
+ * can accidentally pair a newer quota card with an older routing identity.
+ * Returns the listing service plus the pool-authority read
+ * (`GET /v2/account-pools`) so both share one cached projection. */
+export declare function createCredentialProfilesService(quotaRegistry: () => QuotaRegistry): {
+    credentialProfiles: (input?: {
+        snapshot?: boolean;
+    }) => Promise<{
+        profiles: {
+            profile: CredentialProfile;
+            status: CredentialProfileStatus;
+            identity: import("@claudexor/schema").AccountIdentity | null;
         }[];
-    }[];
-    git: {
-        status: "available" | "developer_tools_stub" | "failed" | "missing";
-        version: string | null;
-        detail: string | null;
-        remediation: string | null;
-    };
-    quota: {
-        snapshots: {
-            subject: {
-                harness: string;
-                credential_route: "local" | "managed_api_key" | "vendor_native";
-                plan_label: string | null;
-                subject_id: string | null;
+        harnessAccounts: never[];
+        accountPools: {
+            harness_id: string;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "api_key_route";
+            } | {
+                kind: "none";
+                reason: string;
+            };
+        }[];
+    } | {
+        profiles: {
+            profile: CredentialProfile;
+            status: CredentialProfileStatus;
+            identity: import("@claudexor/schema").AccountIdentity | null;
+        }[];
+        harnessAccounts: never[];
+        accountPools: {
+            harness_id: string;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "api_key_route";
+            } | {
+                kind: "none";
+                reason: string;
             };
-            constraints: {
+        }[];
+        harnesses: {
+            id: string;
+            available: boolean;
+            status: "ok" | "degraded" | "unavailable";
+            manifest: import("@claudexor/schema").HarnessManifest | null;
+            enabledIntents: import("@claudexor/schema").Intent[];
+            routableIntents: import("@claudexor/schema").Intent[];
+            disabledIntents: import("@claudexor/schema").Intent[];
+            checks: import("@claudexor/schema").ConformanceCheck[];
+            reasons: string[];
+            authSources: import("@claudexor/schema").AuthSourceReadiness[];
+            configuredModel: string | null;
+            configuredModelCheck: {
+                status: "ok" | "rejected";
+                message?: string | null;
+            } | null;
+            delegation: {
+                available: boolean;
+                reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+                remediation: string | null;
+                requiresFullAccess: boolean;
+            };
+            readiness: {
                 id: string;
-                label: string;
-                applies_to_models?: string[] | null | undefined;
-                used_ratio: number | null;
-                window_seconds: number | null;
-                resets_at: string | null;
-                cooldown_until: string | null;
+                kind: "auth" | "binary" | "model" | "probe" | "smoke";
+                title: string;
+                status: "fail" | "pass" | "skip";
+                detail: string | null;
             }[];
-            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
-            observed_at: string;
-            freshness: "fresh" | "stale" | "unknown";
-            availability?: {
-                state: "available" | "cooldown" | "exhausted";
-                blocking_constraints: string[];
-                resets_at: string | null;
-                model_scoped_exhaustions: {
-                    constraint_id: string;
-                    applies_to_models: string[];
+        }[];
+        git: {
+            status: "available" | "developer_tools_stub" | "failed" | "missing";
+            version: string | null;
+            detail: string | null;
+            remediation: string | null;
+        };
+        quota: {
+            snapshots: {
+                subject: {
+                    harness: string;
+                    credential_route: "local" | "managed_api_key" | "vendor_native";
+                    plan_label: string | null;
+                    subject_id: string | null;
+                };
+                constraints: {
+                    id: string;
+                    label: string;
+                    applies_to_models?: string[] | null | undefined;
+                    applies_to_unspecified_model?: boolean | undefined;
+                    used_ratio: number | null;
+                    window_seconds: number | null;
                     resets_at: string | null;
+                    cooldown_until: string | null;
                 }[];
-            } | undefined;
-        }[];
-        absences: {
-            subject: {
-                harness: string;
-                credential_route: "local" | "managed_api_key" | "vendor_native";
-                plan_label: string | null;
-                subject_id: string | null;
+                source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
+                observed_at: string;
+                freshness: "fresh" | "stale" | "unknown";
+                availability?: {
+                    state: "available" | "cooldown" | "exhausted";
+                    blocking_constraints: string[];
+                    resets_at: string | null;
+                    model_scoped_exhaustions: {
+                        constraint_id: string;
+                        applies_to_models: string[];
+                        resets_at: string | null;
+                    }[];
+                } | undefined;
+            }[];
+            absences: {
+                subject: {
+                    harness: string;
+                    credential_route: "local" | "managed_api_key" | "vendor_native";
+                    plan_label: string | null;
+                    subject_id: string | null;
+                };
+                reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+                detail: string | null;
+                observed_at: string;
+            }[];
+            refreshed_at: string | null;
+        };
+        quotaEventCursor: string;
+    }>;
+    accountPools: () => Promise<{
+        accountPools: {
+            harness_id: string;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "api_key_route";
+            } | {
+                kind: "none";
+                reason: string;
             };
-            reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
-            detail: string | null;
-            observed_at: string;
         }[];
-        refreshed_at: string | null;
-    };
-    quotaEventCursor: string;
-}>;
+    }>;
+};
 //# sourceMappingURL=accounts-services.d.ts.map

package/dist/accounts-services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accounts-services.d.ts","sourceRoot":"","sources":["../src/accounts-services.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAI5E,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EAGxB,MAAM,mBAAmB,CAAC;AAS3B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE;;;;;;;;;;;;;gBAKpD,IAAI,GAAG,UAAU;kBAAY,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;KAuBpE;AAED;;8EAE8E;AAC9E,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,MAAM,aAAa,YAyB1D;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBArDnB,IAAI,GAAG,UAAU;sBAAY,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFpE"}
+{"version":3,"file":"accounts-services.d.ts","sourceRoot":"","sources":["../src/accounts-services.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAI5E,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EAGxB,MAAM,mBAAmB,CAAC;AAS3B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE;;;;;;;;;;;;;gBAKpD,IAAI,GAAG,UAAU;kBAAY,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;KAuBpE;AAED;;;;oEAIoE;AACpE,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,MAAM,aAAa;iCA4BtC;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA1DvC,IAAI,GAAG,UAAU;0BAAY,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+FpE"}

package/dist/accounts-services.js

@@ -6,7 +6,7 @@ import { noProjectRepoRoot } from "@claudexor/util";
 import { validateModel } from "@claudexor/core";
 import { withQuotaAvailability } from "@claudexor/schema";
 import { vendorVerifiedProfileStatus } from "@claudexor/orchestrator";
-import { harnessAccountsProjection, profileAccountProjection } from "./accounts-projection.js";
+import { accountPoolsProjection, profileAccountProjection } from "./accounts-projection.js";
 import { buildGateway, harnessModels } from "./registry.js";
 import { delegationCapabilityFor } from "./delegation-capability.js";
 const NO_PROJECT_ROOT = noProjectRepoRoot();
@@ -35,7 +35,9 @@ export async function projectHarnessStatuses(statuses) {
 }
 /** One server-owned Accounts response builder. The opt-in form refreshes quota
  * first and then derives next_up from that exact returned response; no client
- * can accidentally pair a newer quota card with an older routing identity. */
+ * can accidentally pair a newer quota card with an older routing identity.
+ * Returns the listing service plus the pool-authority read
+ * (`GET /v2/account-pools`) so both share one cached projection. */
 export function createCredentialProfilesService(quotaRegistry) {
     const projectProfiles = () => {
         const profiles = loadConfig(NO_PROJECT_ROOT).global.credential_profiles;
@@ -53,7 +55,10 @@ export function createCredentialProfilesService(quotaRegistry) {
         const out = withVendorVerification(await projectProfiles(), quota);
         return {
             profiles: out,
-            harnessAccounts: await harnessAccountsProjection(NO_PROJECT_ROOT, quota.snapshots, {
+            // Unified account model: the legacy carrier stays PRESENT and empty for
+            // strict old clients; routing facts ride accountPools.
+            harnessAccounts: [],
+            accountPools: await accountPoolsProjection(NO_PROJECT_ROOT, quota.snapshots, {
                 profiles: out,
             }),
         };
@@ -61,7 +66,7 @@ export function createCredentialProfilesService(quotaRegistry) {
     const pollCache = new StatusProjectionCache({
         versionOf: globalConfigVersion,
     });
-    return async (input) => {
+    const credentialProfiles = async (input) => {
         if (input?.snapshot === true) {
             const [probed, accountStatuses, git, fencedQuota] = await Promise.all([
                 projectProfiles(),
@@ -73,7 +78,6 @@ export function createCredentialProfilesService(quotaRegistry) {
                 quotaRegistry().refreshWithCursor(),
             ]);
             const statuses = accountStatuses.map((receipt) => receipt.status);
-            const accountIdentities = new Map(accountStatuses.map((receipt) => [receipt.status.id, receipt.identity]));
             const rawQuota = fencedQuota.response;
             const out = withVendorVerification(probed, rawQuota);
             // The explicit refresh proved the live state — drop the stale poll
@@ -82,10 +86,10 @@ export function createCredentialProfilesService(quotaRegistry) {
             pollCache.invalidate();
             return {
                 profiles: out,
-                harnessAccounts: await harnessAccountsProjection(NO_PROJECT_ROOT, rawQuota.snapshots, {
+                harnessAccounts: [],
+                accountPools: await accountPoolsProjection(NO_PROJECT_ROOT, rawQuota.snapshots, {
                     profiles: out,
                     statuses,
-                    accountIdentities,
                 }),
                 harnesses: await projectHarnessStatuses(statuses),
                 git,
@@ -95,6 +99,10 @@ export function createCredentialProfilesService(quotaRegistry) {
         }
         return pollCache.read(buildPollResponse);
     };
+    const accountPools = async () => ({
+        accountPools: (await pollCache.read(buildPollResponse)).accountPools,
+    });
+    return { credentialProfiles, accountPools };
 }
 /**
  * Replace each profile's LOCAL verification verdict with the vendor's, wherever

package/dist/accounts-services.js.map

@@ -1 +1 @@
-{"version":3,"file":"accounts-services.js","sourceRoot":"","sources":["../src/accounts-services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAsB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAOhD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;AAQ5C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAAkC;IAC7E,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,GAAG,CAChB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;QAC1E,IAAI,KAAK,GAAkE,IAAI,CAAC;QAChF,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;YACpE,KAAK,GAAG,aAAa,CACnB,UAAU,EACV,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EACrC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAC5C,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,MAAM;YACT,eAAe,EAAE,UAAU;YAC3B,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC;YACpD,SAAS,EAAE,kBAAkB,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,eAAe,EAAE,UAAU;gBAC3B,oBAAoB,EAAE,KAAK;aAC5B,CAAC;SACH,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;8EAE8E;AAC9E,MAAM,UAAU,+BAA+B,CAAC,aAAkC;IAChF,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACxE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC;IACF,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,MAAM,iBAAiB,GAAG,KAAK,IAAI,EAAE;QACnC,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,eAAe,EAAE,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO;YACL,QAAQ,EAAE,GAAG;YACb,eAAe,EAAE,MAAM,yBAAyB,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE;gBACjF,QAAQ,EAAE,GAAG;aACd,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,qBAAqB,CAAgD;QACzF,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IACH,OAAO,KAAK,EAAE,KAA8B,EAAE,EAAE;QAC9C,IAAI,KAAK,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpE,eAAe,EAAE;gBACjB,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC;oBACzD,GAAG,EAAE,eAAe;oBACpB,KAAK,EAAE,IAAI;iBACZ,CAAC;gBACF,kBAAkB,EAAE;gBACpB,aAAa,EAAE,CAAC,iBAAiB,EAAE;aACpC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAU,CAAC,CACjF,CAAC;YACF,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;YACtC,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrD,mEAAmE;YACnE,wEAAwE;YACxE,yEAAyE;YACzE,SAAS,CAAC,UAAU,EAAE,CAAC;YACvB,OAAO;gBACL,QAAQ,EAAE,GAAG;gBACb,eAAe,EAAE,MAAM,yBAAyB,CAAC,eAAe,EAAE,QAAQ,CAAC,SAAS,EAAE;oBACpF,QAAQ,EAAE,GAAG;oBACb,QAAQ;oBACR,iBAAiB;iBAClB,CAAC;gBACF,SAAS,EAAE,MAAM,sBAAsB,CAAC,QAAQ,CAAC;gBACjD,GAAG;gBACH,KAAK,EAAE,qBAAqB,CAAC,QAAQ,CAAC;gBACtC,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;aAC/C,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAG7B,OAAY,EACZ,KAAiF;IAEjF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7B,GAAG,KAAK;QACR,MAAM,EAAE,2BAA2B,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC;KACzD,CAAC,CAAC,CAAC;AACN,CAAC"}
+{"version":3,"file":"accounts-services.js","sourceRoot":"","sources":["../src/accounts-services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAsB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAOhD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;AAQ5C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAAkC;IAC7E,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,GAAG,CAChB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;QAC1E,IAAI,KAAK,GAAkE,IAAI,CAAC;QAChF,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;YACpE,KAAK,GAAG,aAAa,CACnB,UAAU,EACV,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EACrC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAC5C,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,MAAM;YACT,eAAe,EAAE,UAAU;YAC3B,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC;YACpD,SAAS,EAAE,kBAAkB,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,eAAe,EAAE,UAAU;gBAC3B,oBAAoB,EAAE,KAAK;aAC5B,CAAC;SACH,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;oEAIoE;AACpE,MAAM,UAAU,+BAA+B,CAAC,aAAkC;IAChF,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACxE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC;IACF,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,MAAM,iBAAiB,GAAG,KAAK,IAAI,EAAE;QACnC,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,eAAe,EAAE,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO;YACL,QAAQ,EAAE,GAAG;YACb,wEAAwE;YACxE,uDAAuD;YACvD,eAAe,EAAE,EAAE;YACnB,YAAY,EAAE,MAAM,sBAAsB,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE;gBAC3E,QAAQ,EAAE,GAAG;aACd,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,qBAAqB,CAAgD;QACzF,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,KAAK,EAAE,KAA8B,EAAE,EAAE;QAClE,IAAI,KAAK,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpE,eAAe,EAAE;gBACjB,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC;oBACzD,GAAG,EAAE,eAAe;oBACpB,KAAK,EAAE,IAAI;iBACZ,CAAC;gBACF,kBAAkB,EAAE;gBACpB,aAAa,EAAE,CAAC,iBAAiB,EAAE;aACpC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;YACtC,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrD,mEAAmE;YACnE,wEAAwE;YACxE,yEAAyE;YACzE,SAAS,CAAC,UAAU,EAAE,CAAC;YACvB,OAAO;gBACL,QAAQ,EAAE,GAAG;gBACb,eAAe,EAAE,EAAE;gBACnB,YAAY,EAAE,MAAM,sBAAsB,CAAC,eAAe,EAAE,QAAQ,CAAC,SAAS,EAAE;oBAC9E,QAAQ,EAAE,GAAG;oBACb,QAAQ;iBACT,CAAC;gBACF,SAAS,EAAE,MAAM,sBAAsB,CAAC,QAAQ,CAAC;gBACjD,GAAG;gBACH,KAAK,EAAE,qBAAqB,CAAC,QAAQ,CAAC;gBACtC,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;aAC/C,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC;QAChC,YAAY,EAAE,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY;KACrE,CAAC,CAAC;IACH,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAG7B,OAAY,EACZ,KAAiF;IAEjF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7B,GAAG,KAAK;QACR,MAAM,EAAE,2BAA2B,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC;KACzD,CAAC,CAAC,CAAC;AACN,CAAC"}