@claudexor/schema 3.19.0 → 3.22.0

package/dist/quota.d.ts

@@ -1,10 +1,13 @@
 import { z } from "zod/v3";
-export declare const QuotaSource: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit"]>;
+export declare const QuotaSource: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit", "claude_rate_limit_event", "codex_app_server_event"]>;
 export type QuotaSource = z.infer<typeof QuotaSource>;
 /** Orthogonal capabilities of every quota evidence source. Keep this
  * exhaustive registry beside the QuotaSource vocabulary so consumers cannot
  * silently invent their own source classifications. */
 export interface QuotaSourceTraits {
+    /** A full source replaces its inventory; an incremental source reports
+     * independently aged singleton windows. */
+    readonly snapshotMode: "full" | "window";
     /** The source is a vendor response authenticated with this subject's own
      * credential, and therefore evidence of credential liveness. */
     readonly vendorAuthenticated: boolean;
@@ -17,36 +20,55 @@ export interface QuotaSourceTraits {
 }
 export declare const QUOTA_SOURCE_TRAITS: {
     readonly codex_app_server: {
+        readonly snapshotMode: "full";
         readonly vendorAuthenticated: true;
         readonly refreshDemandHarness: "codex";
         readonly producedByRefresher: true;
     };
     readonly codex_rollout: {
+        readonly snapshotMode: "full";
         readonly vendorAuthenticated: false;
         readonly refreshDemandHarness: null;
         readonly producedByRefresher: false;
     };
     readonly claude_statusline: {
+        readonly snapshotMode: "full";
         readonly vendorAuthenticated: false;
         readonly refreshDemandHarness: null;
         readonly producedByRefresher: true;
     };
     readonly claude_api_retry: {
+        readonly snapshotMode: "full";
         readonly vendorAuthenticated: false;
         readonly refreshDemandHarness: null;
         readonly producedByRefresher: false;
     };
     readonly claude_oauth_usage: {
+        readonly snapshotMode: "full";
         readonly vendorAuthenticated: true;
         readonly refreshDemandHarness: "claude";
         readonly producedByRefresher: true;
     };
     readonly agy_command_usage: {
+        readonly snapshotMode: "full";
         readonly vendorAuthenticated: true;
         readonly refreshDemandHarness: "agy";
         readonly producedByRefresher: true;
     };
     readonly cursor_rate_limit: {
+        readonly snapshotMode: "full";
+        readonly vendorAuthenticated: false;
+        readonly refreshDemandHarness: null;
+        readonly producedByRefresher: false;
+    };
+    readonly claude_rate_limit_event: {
+        readonly snapshotMode: "window";
+        readonly vendorAuthenticated: false;
+        readonly refreshDemandHarness: null;
+        readonly producedByRefresher: false;
+    };
+    readonly codex_app_server_event: {
+        readonly snapshotMode: "window";
         readonly vendorAuthenticated: false;
         readonly refreshDemandHarness: null;
         readonly producedByRefresher: false;
@@ -103,6 +125,10 @@ export declare const QuotaConstraint: z.ZodObject<{
      * list is the producer's canonical model-id/alias scope, so a
      * model-specific cap never cools a different model on the same subject. */
     applies_to_models: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+    /** Vendor-declared model families, matched as literal id prefixes. These
+     * augment exact ids without guessing that every unknown model belongs to
+     * a known group. An absent/empty list adds no family scope. */
+    applies_to_model_prefixes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     /**
      * Whether this MODEL-SCOPED window also governs a run that names no model.
      * Default (absent) is the conservative answer: a scoped window cannot
@@ -121,6 +147,7 @@ export declare const QuotaConstraint: z.ZodObject<{
     id: string;
     label: string;
     applies_to_models?: string[] | null | undefined;
+    applies_to_model_prefixes?: string[] | undefined;
     applies_to_unspecified_model?: boolean | undefined;
     used_ratio: number | null;
     window_seconds: number | null;
@@ -130,6 +157,7 @@ export declare const QuotaConstraint: z.ZodObject<{
     id: string;
     label: string;
     applies_to_models?: string[] | null | undefined;
+    applies_to_model_prefixes?: string[] | undefined;
     applies_to_unspecified_model?: boolean | undefined;
     used_ratio: number | null;
     window_seconds: number | null;
@@ -167,6 +195,10 @@ export declare const QuotaSnapshot: z.ZodObject<{
          * list is the producer's canonical model-id/alias scope, so a
          * model-specific cap never cools a different model on the same subject. */
         applies_to_models: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+        /** Vendor-declared model families, matched as literal id prefixes. These
+         * augment exact ids without guessing that every unknown model belongs to
+         * a known group. An absent/empty list adds no family scope. */
+        applies_to_model_prefixes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         /**
          * Whether this MODEL-SCOPED window also governs a run that names no model.
          * Default (absent) is the conservative answer: a scoped window cannot
@@ -185,6 +217,7 @@ export declare const QuotaSnapshot: z.ZodObject<{
         id: string;
         label: string;
         applies_to_models?: string[] | null | undefined;
+        applies_to_model_prefixes?: string[] | undefined;
         applies_to_unspecified_model?: boolean | undefined;
         used_ratio: number | null;
         window_seconds: number | null;
@@ -194,13 +227,14 @@ export declare const QuotaSnapshot: z.ZodObject<{
         id: string;
         label: string;
         applies_to_models?: string[] | null | undefined;
+        applies_to_model_prefixes?: string[] | undefined;
         applies_to_unspecified_model?: boolean | undefined;
         used_ratio: number | null;
         window_seconds: number | null;
         resets_at: string | null;
         cooldown_until?: string | null | undefined;
     }>, "many">;
-    source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit"]>;
+    source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit", "claude_rate_limit_event", "codex_app_server_event"]>;
     observed_at: z.ZodString;
     freshness: z.ZodEnum<["fresh", "stale", "unknown"]>;
 }, "strict", z.ZodTypeAny, {
@@ -214,13 +248,14 @@ export declare const QuotaSnapshot: z.ZodObject<{
         id: string;
         label: string;
         applies_to_models?: string[] | null | undefined;
+        applies_to_model_prefixes?: string[] | undefined;
         applies_to_unspecified_model?: boolean | undefined;
         used_ratio: number | null;
         window_seconds: number | null;
         resets_at: string | null;
         cooldown_until: string | null;
     }[];
-    source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
+    source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
     observed_at: string;
     freshness: "fresh" | "stale" | "unknown";
 }, {
@@ -234,17 +269,343 @@ export declare const QuotaSnapshot: z.ZodObject<{
         id: string;
         label: string;
         applies_to_models?: string[] | null | undefined;
+        applies_to_model_prefixes?: string[] | undefined;
         applies_to_unspecified_model?: boolean | undefined;
         used_ratio: number | null;
         window_seconds: number | null;
         resets_at: string | null;
         cooldown_until?: string | null | undefined;
     }[];
-    source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
+    source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
     observed_at: string;
     freshness: "fresh" | "stale" | "unknown";
 }>;
 export type QuotaSnapshot = z.infer<typeof QuotaSnapshot>;
+/** Stable vendor-window identity, independent of its measured value, reset,
+ * label and observation time. Unknown applicability is not representable as
+ * a global constraint: producers retain it as diagnostic evidence instead. */
+export declare function quotaConstraintIdentity(constraint: QuotaConstraint): string;
+/** One schema-owned storage identity for registry, budget and projections.
+ * Existing full sources retain their inventory slot. Incremental sources
+ * require one independently observed window in each stored snapshot. */
+export declare function quotaSnapshotIdentity(snapshot: Pick<QuotaSnapshot, "subject" | "source" | "constraints">): string;
+/** New journal type carrying a partial observation. Older readers ignore
+ * this type rather than replaying it as a fake complete/cooldown snapshot. */
+export declare const QuotaWindowObservation: z.ZodEffects<z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    snapshot: z.ZodObject<{
+        subject: z.ZodObject<{
+            harness: z.ZodString;
+            credential_route: z.ZodEnum<["vendor_native", "managed_api_key", "local"]>;
+            plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            /** The CREDENTIAL SUBJECT the windows belong to (release wave round-16
+             * #2): a Claudexor credential-profile id, or null for the harness's
+             * engine-default credential. Every producer (oauth-usage refresher,
+             * typed-event registry, adapter quota events) uses exactly this
+             * vocabulary; budget routing filters snapshots by exact subject so one
+             * account's exhaustion never cools another. */
+            subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label: string | null;
+            subject_id: string | null;
+        }, {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label?: string | null | undefined;
+            subject_id?: string | null | undefined;
+        }>;
+        constraints: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            /** omitted/null = this vendor window applies to every model. A non-null
+             * list is the producer's canonical model-id/alias scope, so a
+             * model-specific cap never cools a different model on the same subject. */
+            applies_to_models: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+            /** Vendor-declared model families, matched as literal id prefixes. These
+             * augment exact ids without guessing that every unknown model belongs to
+             * a known group. An absent/empty list adds no family scope. */
+            applies_to_model_prefixes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            /**
+             * Whether this MODEL-SCOPED window also governs a run that names no model.
+             * Default (absent) is the conservative answer: a scoped window cannot
+             * refuse a route whose concrete model is unknowable before spawn. A source
+             * sets it when the vendor's unspecified-model route provably consumes THIS
+             * window — the case where every window is scoped, so the conservative
+             * default would leave an exhausted subscription unrefusable and its
+             * profile rotation unreachable.
+             */
+            applies_to_unspecified_model: z.ZodOptional<z.ZodBoolean>;
+            used_ratio: z.ZodNullable<z.ZodNumber>;
+            window_seconds: z.ZodNullable<z.ZodNumber>;
+            resets_at: z.ZodNullable<z.ZodString>;
+            cooldown_until: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            label: string;
+            applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
+            applies_to_unspecified_model?: boolean | undefined;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until: string | null;
+        }, {
+            id: string;
+            label: string;
+            applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
+            applies_to_unspecified_model?: boolean | undefined;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until?: string | null | undefined;
+        }>, "many">;
+        source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit", "claude_rate_limit_event", "codex_app_server_event"]>;
+        observed_at: z.ZodString;
+        freshness: z.ZodEnum<["fresh", "stale", "unknown"]>;
+    }, "strict", z.ZodTypeAny, {
+        subject: {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label: string | null;
+            subject_id: string | null;
+        };
+        constraints: {
+            id: string;
+            label: string;
+            applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
+            applies_to_unspecified_model?: boolean | undefined;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until: string | null;
+        }[];
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
+        observed_at: string;
+        freshness: "fresh" | "stale" | "unknown";
+    }, {
+        subject: {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label?: string | null | undefined;
+            subject_id?: string | null | undefined;
+        };
+        constraints: {
+            id: string;
+            label: string;
+            applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
+            applies_to_unspecified_model?: boolean | undefined;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until?: string | null | undefined;
+        }[];
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
+        observed_at: string;
+        freshness: "fresh" | "stale" | "unknown";
+    }>;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    snapshot: {
+        subject: {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label: string | null;
+            subject_id: string | null;
+        };
+        constraints: {
+            id: string;
+            label: string;
+            applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
+            applies_to_unspecified_model?: boolean | undefined;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until: string | null;
+        }[];
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
+        observed_at: string;
+        freshness: "fresh" | "stale" | "unknown";
+    };
+}, {
+    version: 1;
+    snapshot: {
+        subject: {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label?: string | null | undefined;
+            subject_id?: string | null | undefined;
+        };
+        constraints: {
+            id: string;
+            label: string;
+            applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
+            applies_to_unspecified_model?: boolean | undefined;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until?: string | null | undefined;
+        }[];
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
+        observed_at: string;
+        freshness: "fresh" | "stale" | "unknown";
+    };
+}>, {
+    version: 1;
+    snapshot: {
+        subject: {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label: string | null;
+            subject_id: string | null;
+        };
+        constraints: {
+            id: string;
+            label: string;
+            applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
+            applies_to_unspecified_model?: boolean | undefined;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until: string | null;
+        }[];
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
+        observed_at: string;
+        freshness: "fresh" | "stale" | "unknown";
+    };
+}, {
+    version: 1;
+    snapshot: {
+        subject: {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label?: string | null | undefined;
+            subject_id?: string | null | undefined;
+        };
+        constraints: {
+            id: string;
+            label: string;
+            applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
+            applies_to_unspecified_model?: boolean | undefined;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until?: string | null | undefined;
+        }[];
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
+        observed_at: string;
+        freshness: "fresh" | "stale" | "unknown";
+    };
+}>;
+export type QuotaWindowObservation = z.infer<typeof QuotaWindowObservation>;
+/** A newer full read superseded this exact incremental window. The cutoff
+ * survives later full-inventory replacement and rejects delayed older events;
+ * raw measurements remain ordinary journal history until compaction. */
+export declare const QuotaWindowSupersession: z.ZodObject<Pick<{
+    subject: z.ZodObject<{
+        harness: z.ZodString;
+        credential_route: z.ZodEnum<["vendor_native", "managed_api_key", "local"]>;
+        plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        /** The CREDENTIAL SUBJECT the windows belong to (release wave round-16
+         * #2): a Claudexor credential-profile id, or null for the harness's
+         * engine-default credential. Every producer (oauth-usage refresher,
+         * typed-event registry, adapter quota events) uses exactly this
+         * vocabulary; budget routing filters snapshots by exact subject so one
+         * account's exhaustion never cools another. */
+        subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        harness: string;
+        credential_route: "local" | "managed_api_key" | "vendor_native";
+        plan_label: string | null;
+        subject_id: string | null;
+    }, {
+        harness: string;
+        credential_route: "local" | "managed_api_key" | "vendor_native";
+        plan_label?: string | null | undefined;
+        subject_id?: string | null | undefined;
+    }>;
+    constraints: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        /** omitted/null = this vendor window applies to every model. A non-null
+         * list is the producer's canonical model-id/alias scope, so a
+         * model-specific cap never cools a different model on the same subject. */
+        applies_to_models: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+        /** Vendor-declared model families, matched as literal id prefixes. These
+         * augment exact ids without guessing that every unknown model belongs to
+         * a known group. An absent/empty list adds no family scope. */
+        applies_to_model_prefixes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /**
+         * Whether this MODEL-SCOPED window also governs a run that names no model.
+         * Default (absent) is the conservative answer: a scoped window cannot
+         * refuse a route whose concrete model is unknowable before spawn. A source
+         * sets it when the vendor's unspecified-model route provably consumes THIS
+         * window — the case where every window is scoped, so the conservative
+         * default would leave an exhausted subscription unrefusable and its
+         * profile rotation unreachable.
+         */
+        applies_to_unspecified_model: z.ZodOptional<z.ZodBoolean>;
+        used_ratio: z.ZodNullable<z.ZodNumber>;
+        window_seconds: z.ZodNullable<z.ZodNumber>;
+        resets_at: z.ZodNullable<z.ZodString>;
+        cooldown_until: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        label: string;
+        applies_to_models?: string[] | null | undefined;
+        applies_to_model_prefixes?: string[] | undefined;
+        applies_to_unspecified_model?: boolean | undefined;
+        used_ratio: number | null;
+        window_seconds: number | null;
+        resets_at: string | null;
+        cooldown_until: string | null;
+    }, {
+        id: string;
+        label: string;
+        applies_to_models?: string[] | null | undefined;
+        applies_to_model_prefixes?: string[] | undefined;
+        applies_to_unspecified_model?: boolean | undefined;
+        used_ratio: number | null;
+        window_seconds: number | null;
+        resets_at: string | null;
+        cooldown_until?: string | null | undefined;
+    }>, "many">;
+    source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit", "claude_rate_limit_event", "codex_app_server_event"]>;
+    observed_at: z.ZodString;
+    freshness: z.ZodEnum<["fresh", "stale", "unknown"]>;
+}, "observed_at" | "subject"> & {
+    version: z.ZodLiteral<1>;
+    snapshot_id: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    subject: {
+        harness: string;
+        credential_route: "local" | "managed_api_key" | "vendor_native";
+        plan_label: string | null;
+        subject_id: string | null;
+    };
+    observed_at: string;
+    version: 1;
+    snapshot_id: string;
+}, {
+    subject: {
+        harness: string;
+        credential_route: "local" | "managed_api_key" | "vendor_native";
+        plan_label?: string | null | undefined;
+        subject_id?: string | null | undefined;
+    };
+    observed_at: string;
+    version: 1;
+    snapshot_id: string;
+}>;
+export type QuotaWindowSupersession = z.infer<typeof QuotaWindowSupersession>;
 export declare const QuotaAbsenceReason: z.ZodEnum<["not_logged_in", "transport_unavailable", "platform_unsupported", "refresh_failed", "no_source", "auth_revoked", "rate_limited", "probe_skipped_rate_limited", "poll_paced", "credential_profile_ambiguous"]>;
 export type QuotaAbsenceReason = z.infer<typeof QuotaAbsenceReason>;
 /** Refresh-gap reasons may coexist with a STALE snapshot: the last-known
@@ -312,14 +673,17 @@ export type QuotaAvailabilityState = z.infer<typeof QuotaAvailabilityState>;
 export declare const QuotaModelScopedExhaustion: z.ZodObject<{
     constraint_id: z.ZodString;
     applies_to_models: z.ZodArray<z.ZodString, "many">;
+    applies_to_model_prefixes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     resets_at: z.ZodNullable<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     constraint_id: string;
     applies_to_models: string[];
+    applies_to_model_prefixes?: string[] | undefined;
     resets_at: string | null;
 }, {
     constraint_id: string;
     applies_to_models: string[];
+    applies_to_model_prefixes?: string[] | undefined;
     resets_at: string | null;
 }>;
 export type QuotaModelScopedExhaustion = z.infer<typeof QuotaModelScopedExhaustion>;
@@ -330,14 +694,17 @@ export declare const QuotaAvailability: z.ZodObject<{
     model_scoped_exhaustions: z.ZodArray<z.ZodObject<{
         constraint_id: z.ZodString;
         applies_to_models: z.ZodArray<z.ZodString, "many">;
+        applies_to_model_prefixes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         resets_at: z.ZodNullable<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
         constraint_id: string;
         applies_to_models: string[];
+        applies_to_model_prefixes?: string[] | undefined;
         resets_at: string | null;
     }, {
         constraint_id: string;
         applies_to_models: string[];
+        applies_to_model_prefixes?: string[] | undefined;
         resets_at: string | null;
     }>, "many">;
 }, "strict", z.ZodTypeAny, {
@@ -347,6 +714,7 @@ export declare const QuotaAvailability: z.ZodObject<{
     model_scoped_exhaustions: {
         constraint_id: string;
         applies_to_models: string[];
+        applies_to_model_prefixes?: string[] | undefined;
         resets_at: string | null;
     }[];
 }, {
@@ -356,6 +724,7 @@ export declare const QuotaAvailability: z.ZodObject<{
     model_scoped_exhaustions: {
         constraint_id: string;
         applies_to_models: string[];
+        applies_to_model_prefixes?: string[] | undefined;
         resets_at: string | null;
     }[];
 }>;
@@ -390,6 +759,10 @@ export declare const ControlQuotaSnapshot: z.ZodObject<{
          * list is the producer's canonical model-id/alias scope, so a
          * model-specific cap never cools a different model on the same subject. */
         applies_to_models: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+        /** Vendor-declared model families, matched as literal id prefixes. These
+         * augment exact ids without guessing that every unknown model belongs to
+         * a known group. An absent/empty list adds no family scope. */
+        applies_to_model_prefixes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         /**
          * Whether this MODEL-SCOPED window also governs a run that names no model.
          * Default (absent) is the conservative answer: a scoped window cannot
@@ -408,6 +781,7 @@ export declare const ControlQuotaSnapshot: z.ZodObject<{
         id: string;
         label: string;
         applies_to_models?: string[] | null | undefined;
+        applies_to_model_prefixes?: string[] | undefined;
         applies_to_unspecified_model?: boolean | undefined;
         used_ratio: number | null;
         window_seconds: number | null;
@@ -417,16 +791,18 @@ export declare const ControlQuotaSnapshot: z.ZodObject<{
         id: string;
         label: string;
         applies_to_models?: string[] | null | undefined;
+        applies_to_model_prefixes?: string[] | undefined;
         applies_to_unspecified_model?: boolean | undefined;
         used_ratio: number | null;
         window_seconds: number | null;
         resets_at: string | null;
         cooldown_until?: string | null | undefined;
     }>, "many">;
-    source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit"]>;
+    source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit", "claude_rate_limit_event", "codex_app_server_event"]>;
     observed_at: z.ZodString;
     freshness: z.ZodEnum<["fresh", "stale", "unknown"]>;
 } & {
+    snapshot_id: z.ZodOptional<z.ZodString>;
     availability: z.ZodOptional<z.ZodObject<{
         state: z.ZodEnum<["available", "exhausted", "cooldown"]>;
         blocking_constraints: z.ZodArray<z.ZodString, "many">;
@@ -434,14 +810,17 @@ export declare const ControlQuotaSnapshot: z.ZodObject<{
         model_scoped_exhaustions: z.ZodArray<z.ZodObject<{
             constraint_id: z.ZodString;
             applies_to_models: z.ZodArray<z.ZodString, "many">;
+            applies_to_model_prefixes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
             resets_at: z.ZodNullable<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
             constraint_id: string;
             applies_to_models: string[];
+            applies_to_model_prefixes?: string[] | undefined;
             resets_at: string | null;
         }, {
             constraint_id: string;
             applies_to_models: string[];
+            applies_to_model_prefixes?: string[] | undefined;
             resets_at: string | null;
         }>, "many">;
     }, "strict", z.ZodTypeAny, {
@@ -451,6 +830,7 @@ export declare const ControlQuotaSnapshot: z.ZodObject<{
         model_scoped_exhaustions: {
             constraint_id: string;
             applies_to_models: string[];
+            applies_to_model_prefixes?: string[] | undefined;
             resets_at: string | null;
         }[];
     }, {
@@ -460,6 +840,7 @@ export declare const ControlQuotaSnapshot: z.ZodObject<{
         model_scoped_exhaustions: {
             constraint_id: string;
             applies_to_models: string[];
+            applies_to_model_prefixes?: string[] | undefined;
             resets_at: string | null;
         }[];
     }>>;
@@ -474,15 +855,17 @@ export declare const ControlQuotaSnapshot: z.ZodObject<{
         id: string;
         label: string;
         applies_to_models?: string[] | null | undefined;
+        applies_to_model_prefixes?: string[] | undefined;
         applies_to_unspecified_model?: boolean | undefined;
         used_ratio: number | null;
         window_seconds: number | null;
         resets_at: string | null;
         cooldown_until: string | null;
     }[];
-    source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
+    source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
     observed_at: string;
     freshness: "fresh" | "stale" | "unknown";
+    snapshot_id?: string | undefined;
     availability?: {
         state: "available" | "cooldown" | "exhausted";
         blocking_constraints: string[];
@@ -490,6 +873,7 @@ export declare const ControlQuotaSnapshot: z.ZodObject<{
         model_scoped_exhaustions: {
             constraint_id: string;
             applies_to_models: string[];
+            applies_to_model_prefixes?: string[] | undefined;
             resets_at: string | null;
         }[];
     } | undefined;
@@ -504,15 +888,17 @@ export declare const ControlQuotaSnapshot: z.ZodObject<{
         id: string;
         label: string;
         applies_to_models?: string[] | null | undefined;
+        applies_to_model_prefixes?: string[] | undefined;
         applies_to_unspecified_model?: boolean | undefined;
         used_ratio: number | null;
         window_seconds: number | null;
         resets_at: string | null;
         cooldown_until?: string | null | undefined;
     }[];
-    source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
+    source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
     observed_at: string;
     freshness: "fresh" | "stale" | "unknown";
+    snapshot_id?: string | undefined;
     availability?: {
         state: "available" | "cooldown" | "exhausted";
         blocking_constraints: string[];
@@ -520,6 +906,7 @@ export declare const ControlQuotaSnapshot: z.ZodObject<{
         model_scoped_exhaustions: {
             constraint_id: string;
             applies_to_models: string[];
+            applies_to_model_prefixes?: string[] | undefined;
             resets_at: string | null;
         }[];
     } | undefined;
@@ -535,12 +922,46 @@ export declare const ControlQuotaRefreshRequest: z.ZodObject<{
 export type ControlQuotaRefreshRequest = z.infer<typeof ControlQuotaRefreshRequest>;
 export declare const QuotaRefreshSkipped: z.ZodObject<{
     vendor: z.ZodString;
+    subject: z.ZodOptional<z.ZodObject<{
+        harness: z.ZodString;
+        credential_route: z.ZodEnum<["vendor_native", "managed_api_key", "local"]>;
+        plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        /** The CREDENTIAL SUBJECT the windows belong to (release wave round-16
+         * #2): a Claudexor credential-profile id, or null for the harness's
+         * engine-default credential. Every producer (oauth-usage refresher,
+         * typed-event registry, adapter quota events) uses exactly this
+         * vocabulary; budget routing filters snapshots by exact subject so one
+         * account's exhaustion never cools another. */
+        subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        harness: string;
+        credential_route: "local" | "managed_api_key" | "vendor_native";
+        plan_label: string | null;
+        subject_id: string | null;
+    }, {
+        harness: string;
+        credential_route: "local" | "managed_api_key" | "vendor_native";
+        plan_label?: string | null | undefined;
+        subject_id?: string | null | undefined;
+    }>>;
     not_before: z.ZodString;
 }, "strict", z.ZodTypeAny, {
     vendor: string;
+    subject?: {
+        harness: string;
+        credential_route: "local" | "managed_api_key" | "vendor_native";
+        plan_label: string | null;
+        subject_id: string | null;
+    } | undefined;
     not_before: string;
 }, {
     vendor: string;
+    subject?: {
+        harness: string;
+        credential_route: "local" | "managed_api_key" | "vendor_native";
+        plan_label?: string | null | undefined;
+        subject_id?: string | null | undefined;
+    } | undefined;
     not_before: string;
 }>;
 export type QuotaRefreshSkipped = z.infer<typeof QuotaRefreshSkipped>;
@@ -575,6 +996,10 @@ export declare const ControlQuotaResponse: z.ZodObject<{
              * list is the producer's canonical model-id/alias scope, so a
              * model-specific cap never cools a different model on the same subject. */
             applies_to_models: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+            /** Vendor-declared model families, matched as literal id prefixes. These
+             * augment exact ids without guessing that every unknown model belongs to
+             * a known group. An absent/empty list adds no family scope. */
+            applies_to_model_prefixes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
             /**
              * Whether this MODEL-SCOPED window also governs a run that names no model.
              * Default (absent) is the conservative answer: a scoped window cannot
@@ -593,6 +1018,7 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             id: string;
             label: string;
             applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
             applies_to_unspecified_model?: boolean | undefined;
             used_ratio: number | null;
             window_seconds: number | null;
@@ -602,16 +1028,18 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             id: string;
             label: string;
             applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
             applies_to_unspecified_model?: boolean | undefined;
             used_ratio: number | null;
             window_seconds: number | null;
             resets_at: string | null;
             cooldown_until?: string | null | undefined;
         }>, "many">;
-        source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit"]>;
+        source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit", "claude_rate_limit_event", "codex_app_server_event"]>;
         observed_at: z.ZodString;
         freshness: z.ZodEnum<["fresh", "stale", "unknown"]>;
     } & {
+        snapshot_id: z.ZodOptional<z.ZodString>;
         availability: z.ZodOptional<z.ZodObject<{
             state: z.ZodEnum<["available", "exhausted", "cooldown"]>;
             blocking_constraints: z.ZodArray<z.ZodString, "many">;
@@ -619,14 +1047,17 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             model_scoped_exhaustions: z.ZodArray<z.ZodObject<{
                 constraint_id: z.ZodString;
                 applies_to_models: z.ZodArray<z.ZodString, "many">;
+                applies_to_model_prefixes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
                 resets_at: z.ZodNullable<z.ZodString>;
             }, "strict", z.ZodTypeAny, {
                 constraint_id: string;
                 applies_to_models: string[];
+                applies_to_model_prefixes?: string[] | undefined;
                 resets_at: string | null;
             }, {
                 constraint_id: string;
                 applies_to_models: string[];
+                applies_to_model_prefixes?: string[] | undefined;
                 resets_at: string | null;
             }>, "many">;
         }, "strict", z.ZodTypeAny, {
@@ -636,6 +1067,7 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             model_scoped_exhaustions: {
                 constraint_id: string;
                 applies_to_models: string[];
+                applies_to_model_prefixes?: string[] | undefined;
                 resets_at: string | null;
             }[];
         }, {
@@ -645,6 +1077,7 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             model_scoped_exhaustions: {
                 constraint_id: string;
                 applies_to_models: string[];
+                applies_to_model_prefixes?: string[] | undefined;
                 resets_at: string | null;
             }[];
         }>>;
@@ -659,15 +1092,17 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             id: string;
             label: string;
             applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
             applies_to_unspecified_model?: boolean | undefined;
             used_ratio: number | null;
             window_seconds: number | null;
             resets_at: string | null;
             cooldown_until: string | null;
         }[];
-        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
         observed_at: string;
         freshness: "fresh" | "stale" | "unknown";
+        snapshot_id?: string | undefined;
         availability?: {
             state: "available" | "cooldown" | "exhausted";
             blocking_constraints: string[];
@@ -675,6 +1110,7 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             model_scoped_exhaustions: {
                 constraint_id: string;
                 applies_to_models: string[];
+                applies_to_model_prefixes?: string[] | undefined;
                 resets_at: string | null;
             }[];
         } | undefined;
@@ -689,15 +1125,17 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             id: string;
             label: string;
             applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
             applies_to_unspecified_model?: boolean | undefined;
             used_ratio: number | null;
             window_seconds: number | null;
             resets_at: string | null;
             cooldown_until?: string | null | undefined;
         }[];
-        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
         observed_at: string;
         freshness: "fresh" | "stale" | "unknown";
+        snapshot_id?: string | undefined;
         availability?: {
             state: "available" | "cooldown" | "exhausted";
             blocking_constraints: string[];
@@ -705,6 +1143,7 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             model_scoped_exhaustions: {
                 constraint_id: string;
                 applies_to_models: string[];
+                applies_to_model_prefixes?: string[] | undefined;
                 resets_at: string | null;
             }[];
         } | undefined;
@@ -770,12 +1209,46 @@ export declare const ControlQuotaResponse: z.ZodObject<{
      * that just said 429). Absent on plain reads and unskipped refreshes. */
     refresh_skipped: z.ZodOptional<z.ZodArray<z.ZodObject<{
         vendor: z.ZodString;
+        subject: z.ZodOptional<z.ZodObject<{
+            harness: z.ZodString;
+            credential_route: z.ZodEnum<["vendor_native", "managed_api_key", "local"]>;
+            plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            /** The CREDENTIAL SUBJECT the windows belong to (release wave round-16
+             * #2): a Claudexor credential-profile id, or null for the harness's
+             * engine-default credential. Every producer (oauth-usage refresher,
+             * typed-event registry, adapter quota events) uses exactly this
+             * vocabulary; budget routing filters snapshots by exact subject so one
+             * account's exhaustion never cools another. */
+            subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label: string | null;
+            subject_id: string | null;
+        }, {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label?: string | null | undefined;
+            subject_id?: string | null | undefined;
+        }>>;
         not_before: z.ZodString;
     }, "strict", z.ZodTypeAny, {
         vendor: string;
+        subject?: {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label: string | null;
+            subject_id: string | null;
+        } | undefined;
         not_before: string;
     }, {
         vendor: string;
+        subject?: {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label?: string | null | undefined;
+            subject_id?: string | null | undefined;
+        } | undefined;
         not_before: string;
     }>, "many">>;
 }, "strict", z.ZodTypeAny, {
@@ -790,15 +1263,17 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             id: string;
             label: string;
             applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
             applies_to_unspecified_model?: boolean | undefined;
             used_ratio: number | null;
             window_seconds: number | null;
             resets_at: string | null;
             cooldown_until: string | null;
         }[];
-        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
         observed_at: string;
         freshness: "fresh" | "stale" | "unknown";
+        snapshot_id?: string | undefined;
         availability?: {
             state: "available" | "cooldown" | "exhausted";
             blocking_constraints: string[];
@@ -806,6 +1281,7 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             model_scoped_exhaustions: {
                 constraint_id: string;
                 applies_to_models: string[];
+                applies_to_model_prefixes?: string[] | undefined;
                 resets_at: string | null;
             }[];
         } | undefined;
@@ -825,6 +1301,12 @@ export declare const ControlQuotaResponse: z.ZodObject<{
     refreshed_at: string | null;
     refresh_skipped?: {
         vendor: string;
+        subject?: {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label: string | null;
+            subject_id: string | null;
+        } | undefined;
         not_before: string;
     }[] | undefined;
 }, {
@@ -839,15 +1321,17 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             id: string;
             label: string;
             applies_to_models?: string[] | null | undefined;
+            applies_to_model_prefixes?: string[] | undefined;
             applies_to_unspecified_model?: boolean | undefined;
             used_ratio: number | null;
             window_seconds: number | null;
             resets_at: string | null;
             cooldown_until?: string | null | undefined;
         }[];
-        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
         observed_at: string;
         freshness: "fresh" | "stale" | "unknown";
+        snapshot_id?: string | undefined;
         availability?: {
             state: "available" | "cooldown" | "exhausted";
             blocking_constraints: string[];
@@ -855,6 +1339,7 @@ export declare const ControlQuotaResponse: z.ZodObject<{
             model_scoped_exhaustions: {
                 constraint_id: string;
                 applies_to_models: string[];
+                applies_to_model_prefixes?: string[] | undefined;
                 resets_at: string | null;
             }[];
         } | undefined;
@@ -874,10 +1359,20 @@ export declare const ControlQuotaResponse: z.ZodObject<{
     refreshed_at: string | null;
     refresh_skipped?: {
         vendor: string;
+        subject?: {
+            harness: string;
+            credential_route: "local" | "managed_api_key" | "vendor_native";
+            plan_label?: string | null | undefined;
+            subject_id?: string | null | undefined;
+        } | undefined;
         not_before: string;
     }[] | undefined;
 }>;
 export type ControlQuotaResponse = z.infer<typeof ControlQuotaResponse>;
+/** Literal family matching belongs to the quota contract, shared by display
+ * and admission. Prefixes must be declared by the vendor-specific producer;
+ * neither a missing model nor an unknown family proves a match. */
+export declare function quotaModelPrefixMatches(prefixes: readonly string[] | undefined, model: string): boolean;
 /** Derive one snapshot's typed model-aware availability — a pure projection
  * over the snapshot's own constraints, never an aggregate across subjects.
  * Blocking semantics mirror the router's `BudgetLedger`: a window