@linxiraos/pi-ai 1.0.0 → 1.0.2

package/package.json

@@ -1,138 +1,137 @@
 {
-	"type": "module",
-	"name": "@linxiraos/pi-ai",
-	"version": "1.0.0",
-	"description": "Unified LLM API with automatic model discovery and provider configuration",
-	"homepage": "https://linxira-os.github.io",
-	"author": "Can Boluk",
-	"contributors": [
-		"Mario Zechner"
-	],
-	"license": "MIT",
-	"repository": {
-		"type": "git",
-		"url": "git+https://github.com/Linxira-OS/linxira-zeta.git",
-		"directory": "packages/ai"
-	},
-	"bugs": {
-		"url": "https://github.com/can1357/oh-my-pi/issues"
-	},
-	"keywords": [
-		"ai",
-		"llm",
-		"openai",
-		"anthropic",
-		"gemini",
-		"unified",
-		"api"
-	],
-	"main": "./src/index.ts",
-	"types": "./dist/types/index.d.ts",
-	"scripts": {
-		"check": "biome check . && bun run check:types",
-		"check:types": "tsgo -p tsconfig.json --noEmit",
-		"lint": "biome lint .",
-		"test": "bun test --parallel",
-		"fix": "biome check --write --unsafe .",
-		"fmt": "biome format --write ."
-	},
-	"dependencies": {
-		"@bufbuild/protobuf": "^2.12.1",
-		"@linxiraos/pi-omptype": "1.0.0",
-		"@linxiraos/pi-catalog": "1.0.0",
-		"@linxiraos/pi-utils": "1.0.0",
-		"@linxiraos/pi-wire": "1.0.0"
-	},
-	"devDependencies": {
-		"@bufbuild/protoc-gen-es": "^2.12.1",
-		"@types/bun": "^1.3.14"
-	},
-	"engines": {
-		"bun": ">=1.3.14"
-	},
-	"files": [
-		"src",
-		"README.md",
-		"CHANGELOG.md",
-		"dist/types"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/types/index.d.ts",
-			"import": "./src/index.ts"
-		},
-		"./error": {
-			"types": "./dist/types/error/index.d.ts",
-			"import": "./src/error/index.ts"
-		},
-		"./*": {
-			"types": "./dist/types/*.d.ts",
-			"import": "./src/*.ts"
-		},
-		"./auth-broker": {
-			"types": "./dist/types/auth-broker/index.d.ts",
-			"import": "./src/auth-broker/index.ts"
-		},
-		"./auth-broker/*": {
-			"types": "./dist/types/auth-broker/*.d.ts",
-			"import": "./src/auth-broker/*.ts"
-		},
-		"./auth-gateway": {
-			"types": "./dist/types/auth-gateway/index.d.ts",
-			"import": "./src/auth-gateway/index.ts"
-		},
-		"./auth-gateway/*": {
-			"types": "./dist/types/auth-gateway/*.d.ts",
-			"import": "./src/auth-gateway/*.ts"
-		},
-		"./providers/*": {
-			"types": "./dist/types/providers/*.d.ts",
-			"import": "./src/providers/*.ts"
-		},
-		"./providers/openai-codex/*": {
-			"types": "./dist/types/providers/openai-codex/*.d.ts",
-			"import": "./src/providers/openai-codex/*.ts"
-		},
-		"./usage/*": {
-			"types": "./dist/types/usage/*.d.ts",
-			"import": "./src/usage/*.ts"
-		},
-		"./utils/harmony-leak": {
-			"types": "./dist/types/utils/harmony-leak.d.ts",
-			"import": "./src/utils/harmony-leak.ts"
-		},
-		"./dialect": {
-			"types": "./dist/types/dialect/index.d.ts",
-			"import": "./src/dialect/index.ts"
-		},
-		"./utils/*": {
-			"types": "./dist/types/utils/*.d.ts",
-			"import": "./src/utils/*.ts"
-		},
-		"./oauth": {
-			"types": "./dist/types/registry/oauth/index.d.ts",
-			"import": "./src/registry/oauth/index.ts"
-		},
-		"./oauth/*": {
-			"types": "./dist/types/registry/oauth/*.d.ts",
-			"import": "./src/registry/oauth/*.ts"
-		},
-		"./registry": {
-			"types": "./dist/types/registry/index.d.ts",
-			"import": "./src/registry/index.ts"
-		},
-		"./registry/oauth": {
-			"types": "./dist/types/registry/oauth/index.d.ts",
-			"import": "./src/registry/oauth/index.ts"
-		},
-		"./utils/schema": {
-			"types": "./dist/types/utils/schema/index.d.ts",
-			"import": "./src/utils/schema/index.ts"
-		},
-		"./utils/schema/*": {
-			"types": "./dist/types/utils/schema/*.d.ts",
-			"import": "./src/utils/schema/*.ts"
-		},
-		"./*.js": "./src/*.ts"
-	}
+  "type": "module",
+  "name": "@linxiraos/pi-ai",
+  "version": "1.0.2",
+  "description": "Unified LLM API with automatic model discovery and provider configuration",
+  "homepage": "https://linxira-os.github.io",
+  "author": "Can Boluk",
+  "contributors": [
+    "Mario Zechner"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Linxira-OS/linxira-zeta.git",
+    "directory": "packages/ai"
+  },
+  "bugs": {
+    "url": "https://github.com/can1357/oh-my-pi/issues"
+  },
+  "keywords": [
+    "ai",
+    "llm",
+    "openai",
+    "anthropic",
+    "gemini",
+    "unified",
+    "api"
+  ],
+  "main": "./src/index.ts",
+  "types": "./src/index.ts",
+  "scripts": {
+    "check": "biome check . && bun run check:types",
+    "check:types": "tsgo -p tsconfig.json --noEmit",
+    "lint": "biome lint .",
+    "test": "bun test --parallel",
+    "fix": "biome check --write --unsafe .",
+    "fmt": "biome format --write ."
+  },
+  "dependencies": {
+    "@bufbuild/protobuf": "catalog:",
+    "@linxiraos/pi-omptype": "catalog:",
+    "@linxiraos/pi-catalog": "catalog:",
+    "@linxiraos/pi-utils": "catalog:",
+    "@linxiraos/pi-wire": "catalog:"
+  },
+  "devDependencies": {
+    "@bufbuild/protoc-gen-es": "catalog:",
+    "@types/bun": "catalog:"
+  },
+  "engines": {
+    "bun": ">=1.3.14"
+  },
+  "files": [
+    "src",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "exports": {
+    ".": {
+      "types": "./src/index.ts",
+      "import": "./src/index.ts"
+    },
+    "./error": {
+      "types": "./src/error/index.ts",
+      "import": "./src/error/index.ts"
+    },
+    "./*": {
+      "types": "./src/*.ts",
+      "import": "./src/*.ts"
+    },
+    "./auth-broker": {
+      "types": "./src/auth-broker/index.ts",
+      "import": "./src/auth-broker/index.ts"
+    },
+    "./auth-broker/*": {
+      "types": "./src/auth-broker/*.ts",
+      "import": "./src/auth-broker/*.ts"
+    },
+    "./auth-gateway": {
+      "types": "./src/auth-gateway/index.ts",
+      "import": "./src/auth-gateway/index.ts"
+    },
+    "./auth-gateway/*": {
+      "types": "./src/auth-gateway/*.ts",
+      "import": "./src/auth-gateway/*.ts"
+    },
+    "./providers/*": {
+      "types": "./src/providers/*.ts",
+      "import": "./src/providers/*.ts"
+    },
+    "./providers/openai-codex/*": {
+      "types": "./src/providers/openai-codex/*.ts",
+      "import": "./src/providers/openai-codex/*.ts"
+    },
+    "./usage/*": {
+      "types": "./src/usage/*.ts",
+      "import": "./src/usage/*.ts"
+    },
+    "./utils/harmony-leak": {
+      "types": "./src/utils/harmony-leak.ts",
+      "import": "./src/utils/harmony-leak.ts"
+    },
+    "./dialect": {
+      "types": "./src/dialect/index.ts",
+      "import": "./src/dialect/index.ts"
+    },
+    "./utils/*": {
+      "types": "./src/utils/*.ts",
+      "import": "./src/utils/*.ts"
+    },
+    "./oauth": {
+      "types": "./src/registry/oauth/index.ts",
+      "import": "./src/registry/oauth/index.ts"
+    },
+    "./oauth/*": {
+      "types": "./src/registry/oauth/*.ts",
+      "import": "./src/registry/oauth/*.ts"
+    },
+    "./registry": {
+      "types": "./src/registry/index.ts",
+      "import": "./src/registry/index.ts"
+    },
+    "./registry/oauth": {
+      "types": "./src/registry/oauth/index.ts",
+      "import": "./src/registry/oauth/index.ts"
+    },
+    "./utils/schema": {
+      "types": "./src/utils/schema/index.ts",
+      "import": "./src/utils/schema/index.ts"
+    },
+    "./utils/schema/*": {
+      "types": "./src/utils/schema/*.ts",
+      "import": "./src/utils/schema/*.ts"
+    },
+    "./*.js": "./src/*.ts"
+  }
 }

package/src/auth/sqlite-credential-store.ts

@@ -25,8 +25,6 @@ import type {
 	ClientProviderUsage,
 	ClientUsageReport,
 	ClientUsageSummary,
-	UsageCostHistoryEntry,
-	UsageCostHistoryQuery,
 	UsageHistoryEntry,
 	UsageHistoryQuery,
 } from "../usage";
@@ -387,8 +385,6 @@ export class SqliteAuthCredentialStore implements AuthCredentialStore {
 	#releaseCredentialRefreshLeaseStmt: Statement;
 	#credentialBlockReconcileAfter: Map<string, number> = new Map();
 	#insertUsageHistoryStmt: Statement;
-	#insertUsageCostStmt: Statement;
-	#listUsageCostsStmt: Statement;
 	#lastUsageHistoryStmt: Statement;
 	#listUsageHistoryStmt: Statement;
 	#updateUsageHistoryStmt: Statement;
@@ -516,12 +512,6 @@ export class SqliteAuthCredentialStore implements AuthCredentialStore {
 		this.#listUsageHistoryStmt = this.#db.prepare(
 			"SELECT recorded_at, provider, account_key, email, account_id, limit_id, label, window_label, used_fraction, status, resets_at FROM usage_history WHERE recorded_at >= ? AND (? IS NULL OR provider = ?) ORDER BY recorded_at ASC",
 		);
-		this.#insertUsageCostStmt = this.#db.prepare(
-			"INSERT INTO usage_cost_history (recorded_at, provider, account_key, cost_usd) VALUES (?, ?, ?, ?)",
-		);
-		this.#listUsageCostsStmt = this.#db.prepare(
-			"SELECT recorded_at, provider, account_key, cost_usd FROM usage_cost_history WHERE recorded_at >= ? AND (? IS NULL OR provider = ?) AND (? IS NULL OR account_key = ?) ORDER BY recorded_at ASC",
-		);
 	}
 
 	static async open(dbPath: string = getAgentDbPath()): Promise<SqliteAuthCredentialStore> {
@@ -634,14 +624,6 @@ export class SqliteAuthCredentialStore implements AuthCredentialStore {
 				resets_at INTEGER
 			);
 			CREATE INDEX IF NOT EXISTS idx_usage_history_series ON usage_history(provider, account_key, limit_id, recorded_at);
-			CREATE TABLE IF NOT EXISTS usage_cost_history (
-				id INTEGER PRIMARY KEY AUTOINCREMENT,
-				recorded_at INTEGER NOT NULL,
-				provider TEXT NOT NULL,
-				account_key TEXT NOT NULL,
-				cost_usd REAL NOT NULL
-			);
-			CREATE INDEX IF NOT EXISTS idx_usage_cost_history_lookup ON usage_cost_history(provider, account_key, recorded_at);
 			CREATE INDEX IF NOT EXISTS idx_usage_history_recorded ON usage_history(recorded_at);
 			CREATE TABLE IF NOT EXISTS clients (
 				install_id TEXT PRIMARY KEY,
@@ -1769,42 +1751,6 @@ export class SqliteAuthCredentialStore implements AuthCredentialStore {
 			return [];
 		}
 	}
-	recordUsageCosts(entries: UsageCostHistoryEntry[]): void {
-		try {
-			for (const entry of entries) {
-				this.#insertUsageCostStmt.run(entry.recordedAt, entry.provider, entry.accountKey, entry.costUsd);
-			}
-		} catch {
-			// Cost history is best-effort; never break request persistence.
-		}
-	}
-
-	listUsageCosts(query?: UsageCostHistoryQuery): UsageCostHistoryEntry[] {
-		try {
-			const provider = query?.provider ?? null;
-			const accountKey = query?.accountKey ?? null;
-			const rows = this.#listUsageCostsStmt.all(
-				query?.sinceMs ?? 0,
-				provider,
-				provider,
-				accountKey,
-				accountKey,
-			) as Array<{
-				recorded_at: number;
-				provider: string;
-				account_key: string;
-				cost_usd: number;
-			}>;
-			return rows.map(row => ({
-				recordedAt: row.recorded_at,
-				provider: row.provider as Provider,
-				accountKey: row.account_key,
-				costUsd: row.cost_usd,
-			}));
-		} catch {
-			return [];
-		}
-	}
 
 	recordClientUsage(report: ClientUsageReport): void {
 		const now = Date.now();
@@ -2051,8 +1997,6 @@ export class SqliteAuthCredentialStore implements AuthCredentialStore {
 		this.#lastUsageHistoryStmt.finalize();
 		this.#listUsageHistoryStmt.finalize();
 		this.#updateUsageHistoryStmt.finalize();
-		this.#insertUsageCostStmt.finalize();
-		this.#listUsageCostsStmt.finalize();
 		this.#updateIfMatchesStmt.finalize();
 		this.#updateIfMatchesWithLeaseStmt.finalize();
 		this.#deleteIfMatchesWithLeaseStmt.finalize();

package/src/auth-retry.ts

@@ -2,7 +2,7 @@ import { extractHttpStatusFromError } from "@linxiraos/pi-utils";
 import type { OAuthAccess } from "./auth-storage";
 import * as AIError from "./error";
 import { isAuthRetryableError, isInvalidatedOAuthTokenError } from "./error/auth-classify";
-import { isUsageLimit } from "./error/flags";
+import { isAccountPolicyError, isUsageLimit } from "./error/flags";
 import { isConcurrencyCapExclusion, isUsageLimitOutcome } from "./error/rate-limit";
 
 /**
@@ -19,9 +19,9 @@ import { isConcurrencyCapExclusion, isUsageLimitOutcome } from "./error/rate-lim
  *   (invalidate/usage-limit the current credential and rotate to a sibling).
  *
  * Current drivers preserve that bounded a/b/c sequence for ordinary 401/auth
- * failures. 403/usage-limit failures skip refresh and may repeat step (c)
- * until the resolver returns `undefined`, cycles, or hits
- * {@link AUTH_RETRY_MAX_ATTEMPTS}.
+ * failures. Account-scoped policy denials, 403s, and usage-limit failures skip
+ * refresh and may repeat step (c) until the resolver returns `undefined`,
+ * cycles, or hits {@link AUTH_RETRY_MAX_ATTEMPTS}.
  */
 export interface ApiKeyResolveContext {
 	/** True when the resolver should rotate to a sibling credential. */
@@ -91,6 +91,7 @@ export const AUTH_RETRY_STEPS: readonly boolean[] = [false, true];
 export const AUTH_RETRY_MAX_ATTEMPTS = 64;
 
 function isDirectCredentialRotationError(error: unknown): boolean {
+	if (isAccountPolicyError(error)) return true;
 	if (isUsageLimit(error) || isInvalidatedOAuthTokenError(error)) return true;
 	const status = AIError.status(error);
 	const message = error instanceof Error ? error.message : typeof error === "string" ? error : undefined;