@omnicross/contracts 0.1.2 → 0.1.3

package/dist/billing-types.d.cts

@@ -0,0 +1,98 @@
+/**
+ * Billing-event-stream contracts (billing-event-stream, design D1/D6).
+ *
+ * Two dependency-light shapes shared across the `@omnicross/*` packages:
+ *  - `BillingEvent` — the FROZEN per-request metered fact an EXTERNAL consumer
+ *    ingests (a metering service, a data warehouse, a billing platform). It is
+ *    SECRET-FREE BY CONSTRUCTION: it carries the outbound key ID (an id, NEVER
+ *    the key material/hash) and NEVER a token, Authorization header, or the
+ *    signing secret. Its `id` (the request id) doubles as the consumer's
+ *    IDEMPOTENCY KEY — delivery is at-least-once, so a consumer dedupes by `id`.
+ *    A secret-scan test asserts no key/token/secret pattern survives in a
+ *    written/POSTed event.
+ *  - `BillingConfig` — the `billing` config segment. Default OFF (zero
+ *    regression). Carries the OPTIONAL POST `endpoint` (absent ⇒ ledger-only
+ *    mode) and the OPTIONAL HMAC `secret` (the ONLY secret — encrypted at rest +
+ *    masked in admin, never in a payload/log).
+ *
+ * Distinct from `usage-events.jsonl` (internal dashboard telemetry): billing is
+ * the external-facing metered fact with its OWN schema + delivery + HMAC.
+ *
+ * @module billing-types
+ */
+/**
+ * One per-request billing event (design D1) — the metered fact for external
+ * consumption. Produced at the post-response point from the SAME computed cost
+ * the usage telemetry records (no double pricing). NO field ever holds key
+ * material, an upstream token, or the HMAC signing secret.
+ */
+interface BillingEvent {
+    /**
+     * Request id — the consumer's IDEMPOTENCY KEY. Stable for one event across
+     * delivery RETRIES (the retry sweep re-POSTs the SAME id) so an at-least-once
+     * consumer applies it exactly once. NOT any secret.
+     */
+    id: string;
+    /** Epoch ms the request was billed (the request timestamp). */
+    ts: number;
+    /** Outbound key id (attribution) — NEVER the key secret/hash. Null when unattributed. */
+    keyId?: string | null;
+    /** Resolved upstream model the request billed against. */
+    model: string;
+    /** Upstream provider id (or `'byo'`). */
+    provider?: string;
+    /** Re-auth mode the request billed under (BYO key vs subscription OAuth). */
+    authMode: 'byo' | 'subscription';
+    /** Prompt-side token count. */
+    inputTokens: number;
+    /** Completion-side token count. */
+    outputTokens: number;
+    /** Cost in USD (the SAME value the usage telemetry recorded). */
+    costUsd: number;
+    /** HTTP status of the billed request. */
+    status: number;
+}
+/**
+ * The `billing` config segment (design D6), normalized like `audit`.
+ * Absent/`enabled:false` ⇒ no sink wired ⇒ `publishBillingEvent` is a no-op ⇒
+ * no append, no POST, byte-identical zero regression. `enabled` WITHOUT an
+ * `endpoint` is a first-class LEDGER-ONLY mode (the durable jsonl IS the product;
+ * an external tailer consumes it). The `secret` is the ONLY secret field
+ * (encrypted at rest + masked in admin).
+ */
+interface BillingConfig {
+    /** Master switch; default FALSE (zero regression). */
+    enabled: boolean;
+    /**
+     * POST target for the built-in delivery. ABSENT ⇒ ledger-only mode: events are
+     * durably appended and an external consumer tails the jsonl directly (no push).
+     */
+    endpoint?: string;
+    /**
+     * HMAC-SHA256 signing key — a SECRET. When set, each POST carries
+     * `X-Omnicross-Billing-Signature: sha256=<hmac hex of body>`. Encrypted at rest
+     * + masked in admin views; the secret ONLY signs, it NEVER travels in the event
+     * payload or a log line.
+     */
+    secret?: string;
+    /**
+     * Stop RE-POSTing an undelivered event after this age (ms); default 24h,
+     * clamped. This governs RETRY only — an over-age undelivered event is RETAINED
+     * in the ledger for reconciliation, NEVER deleted (a billing ledger is a
+     * financial record).
+     */
+    maxRetryAgeMs: number;
+}
+/** Frozen defaults for the `billing` segment (SSOT). 24h retry bound. */
+declare const DEFAULT_BILLING_CONFIG: BillingConfig;
+/** Aggregate delivery status the authed admin surfaces (secret-free counts). */
+interface BillingDeliveryStatus {
+    /** Total events in the durable ledger. */
+    total: number;
+    /** Events an external endpoint has acknowledged (delivered). */
+    delivered: number;
+    /** Events not yet delivered (still retried within `maxRetryAgeMs`, then retained). */
+    pending: number;
+}
+
+export { type BillingConfig, type BillingDeliveryStatus, type BillingEvent, DEFAULT_BILLING_CONFIG };

package/dist/billing-types.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Billing-event-stream contracts (billing-event-stream, design D1/D6).
+ *
+ * Two dependency-light shapes shared across the `@omnicross/*` packages:
+ *  - `BillingEvent` — the FROZEN per-request metered fact an EXTERNAL consumer
+ *    ingests (a metering service, a data warehouse, a billing platform). It is
+ *    SECRET-FREE BY CONSTRUCTION: it carries the outbound key ID (an id, NEVER
+ *    the key material/hash) and NEVER a token, Authorization header, or the
+ *    signing secret. Its `id` (the request id) doubles as the consumer's
+ *    IDEMPOTENCY KEY — delivery is at-least-once, so a consumer dedupes by `id`.
+ *    A secret-scan test asserts no key/token/secret pattern survives in a
+ *    written/POSTed event.
+ *  - `BillingConfig` — the `billing` config segment. Default OFF (zero
+ *    regression). Carries the OPTIONAL POST `endpoint` (absent ⇒ ledger-only
+ *    mode) and the OPTIONAL HMAC `secret` (the ONLY secret — encrypted at rest +
+ *    masked in admin, never in a payload/log).
+ *
+ * Distinct from `usage-events.jsonl` (internal dashboard telemetry): billing is
+ * the external-facing metered fact with its OWN schema + delivery + HMAC.
+ *
+ * @module billing-types
+ */
+/**
+ * One per-request billing event (design D1) — the metered fact for external
+ * consumption. Produced at the post-response point from the SAME computed cost
+ * the usage telemetry records (no double pricing). NO field ever holds key
+ * material, an upstream token, or the HMAC signing secret.
+ */
+interface BillingEvent {
+    /**
+     * Request id — the consumer's IDEMPOTENCY KEY. Stable for one event across
+     * delivery RETRIES (the retry sweep re-POSTs the SAME id) so an at-least-once
+     * consumer applies it exactly once. NOT any secret.
+     */
+    id: string;
+    /** Epoch ms the request was billed (the request timestamp). */
+    ts: number;
+    /** Outbound key id (attribution) — NEVER the key secret/hash. Null when unattributed. */
+    keyId?: string | null;
+    /** Resolved upstream model the request billed against. */
+    model: string;
+    /** Upstream provider id (or `'byo'`). */
+    provider?: string;
+    /** Re-auth mode the request billed under (BYO key vs subscription OAuth). */
+    authMode: 'byo' | 'subscription';
+    /** Prompt-side token count. */
+    inputTokens: number;
+    /** Completion-side token count. */
+    outputTokens: number;
+    /** Cost in USD (the SAME value the usage telemetry recorded). */
+    costUsd: number;
+    /** HTTP status of the billed request. */
+    status: number;
+}
+/**
+ * The `billing` config segment (design D6), normalized like `audit`.
+ * Absent/`enabled:false` ⇒ no sink wired ⇒ `publishBillingEvent` is a no-op ⇒
+ * no append, no POST, byte-identical zero regression. `enabled` WITHOUT an
+ * `endpoint` is a first-class LEDGER-ONLY mode (the durable jsonl IS the product;
+ * an external tailer consumes it). The `secret` is the ONLY secret field
+ * (encrypted at rest + masked in admin).
+ */
+interface BillingConfig {
+    /** Master switch; default FALSE (zero regression). */
+    enabled: boolean;
+    /**
+     * POST target for the built-in delivery. ABSENT ⇒ ledger-only mode: events are
+     * durably appended and an external consumer tails the jsonl directly (no push).
+     */
+    endpoint?: string;
+    /**
+     * HMAC-SHA256 signing key — a SECRET. When set, each POST carries
+     * `X-Omnicross-Billing-Signature: sha256=<hmac hex of body>`. Encrypted at rest
+     * + masked in admin views; the secret ONLY signs, it NEVER travels in the event
+     * payload or a log line.
+     */
+    secret?: string;
+    /**
+     * Stop RE-POSTing an undelivered event after this age (ms); default 24h,
+     * clamped. This governs RETRY only — an over-age undelivered event is RETAINED
+     * in the ledger for reconciliation, NEVER deleted (a billing ledger is a
+     * financial record).
+     */
+    maxRetryAgeMs: number;
+}
+/** Frozen defaults for the `billing` segment (SSOT). 24h retry bound. */
+declare const DEFAULT_BILLING_CONFIG: BillingConfig;
+/** Aggregate delivery status the authed admin surfaces (secret-free counts). */
+interface BillingDeliveryStatus {
+    /** Total events in the durable ledger. */
+    total: number;
+    /** Events an external endpoint has acknowledged (delivered). */
+    delivered: number;
+    /** Events not yet delivered (still retried within `maxRetryAgeMs`, then retained). */
+    pending: number;
+}
+
+export { type BillingConfig, type BillingDeliveryStatus, type BillingEvent, DEFAULT_BILLING_CONFIG };

package/dist/billing-types.js

@@ -0,0 +1,8 @@
+// src/billing-types.ts
+var DEFAULT_BILLING_CONFIG = {
+  enabled: false,
+  maxRetryAgeMs: 24 * 60 * 6e4
+};
+export {
+  DEFAULT_BILLING_CONFIG
+};

package/dist/canonical-models.d.cts

@@ -1,5 +1,5 @@
 import { T as ThinkLevel } from './thinking-CBWSLel8.cjs';
-import { M as ModelConfig } from './llm-config-CQjOimv2.cjs';
+import { M as ModelConfig } from './llm-config-DeWNx1ig.cjs';
 
 /**
  * Canonical Model Registry

package/dist/canonical-models.d.ts

@@ -1,5 +1,5 @@
 import { T as ThinkLevel } from './thinking-CBWSLel8.js';
-import { M as ModelConfig } from './llm-config-D1jKQLVp.js';
+import { M as ModelConfig } from './llm-config-CKOaFFdy.js';
 
 /**
  * Canonical Model Registry

package/dist/endpoint-resolver.d.cts

@@ -1,4 +1,4 @@
-import { L as LLMProvider } from './llm-config-CQjOimv2.cjs';
+import { L as LLMProvider } from './llm-config-DeWNx1ig.cjs';
 import './thinking-CBWSLel8.cjs';
 
 /**

package/dist/endpoint-resolver.d.ts

@@ -1,4 +1,4 @@
-import { L as LLMProvider } from './llm-config-D1jKQLVp.js';
+import { L as LLMProvider } from './llm-config-CKOaFFdy.js';
 import './thinking-CBWSLel8.js';
 
 /**

package/dist/health-logging-types.cjs

@@ -0,0 +1,32 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/health-logging-types.ts
+var health_logging_types_exports = {};
+__export(health_logging_types_exports, {
+  healthHttpStatus: () => healthHttpStatus
+});
+module.exports = __toCommonJS(health_logging_types_exports);
+function healthHttpStatus(status) {
+  return status === "ok" ? 200 : 503;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  healthHttpStatus
+});

package/dist/health-logging-types.d.cts

@@ -0,0 +1,68 @@
+/**
+ * Health-probe + logging contracts (daemon-health-endpoint / configurable-logging).
+ *
+ * Two small, dependency-light shapes shared across the `@omnicross/*` packages:
+ *  - `HealthReport` — the coarse, SECRET-FREE body served by the unauthenticated
+ *    `/health` probe (mounted on the admin server before its auth gate, and
+ *    optionally on the outbound `/v1/*` server before key-auth). Frozen so a
+ *    liveness/readiness probe + sibling changes (#8 health-cron surfacing into
+ *    `checks`) agree on one shape.
+ *  - `LogLevel` / `LoggingConfig` — the configurable-logger's level enum + config
+ *    segment. Frozen so sibling changes (#5 webhooks / #13 audit-log) reuse the
+ *    SAME level vocabulary + config shape rather than reinventing it.
+ *
+ * NON-SECRET by construction: nothing here carries a token, email, config value,
+ * or record-of-count. `HealthReport.checks` are COARSE booleans only.
+ *
+ * @module health-logging-types
+ */
+/** The coarse health status. Anything other than `ok` maps to HTTP 503. */
+type HealthStatus = 'ok' | 'degraded' | 'error';
+/**
+ * The `/health` probe body (design D2). COARSE + SECRET-FREE:
+ *  - `status`        — `ok` (200) | `degraded` | `error` (both 503).
+ *  - `version`       — the daemon package version (already exposed pre-auth via
+ *                      the `x-omnicross-daemon` response header; non-sensitive).
+ *  - `uptimeSeconds` — `Math.floor(process.uptime())`.
+ *  - `timestamp`     — ISO time the report was built.
+ *  - `memory`        — coarse process stats (rss / heapUsed, MB).
+ *  - `checks`        — COARSE dependency booleans ONLY (never tokens/emails/
+ *                      config-values/record-counts).
+ */
+interface HealthReport {
+    status: HealthStatus;
+    version: string;
+    uptimeSeconds: number;
+    timestamp: string;
+    memory: {
+        rssMb: number;
+        heapUsedMb: number;
+    };
+    checks: Record<string, boolean>;
+}
+/** Map a {@link HealthStatus} to its probe HTTP code: `ok` → 200, else → 503. */
+declare function healthHttpStatus(status: HealthStatus): number;
+/**
+ * The logger's level threshold (configurable-logging, design D3). Numeric
+ * severity order `error(0) < warn(1) < info(2) < debug(3)`; a message at a level
+ * BELOW the configured threshold's severity (i.e. a higher ordinal) is dropped.
+ */
+type LogLevel = 'error' | 'warn' | 'info' | 'debug';
+/** Output shape of the logger sinks. */
+type LogFormat = 'text' | 'json';
+/**
+ * The daemon's `logging` config segment (design D3/D4). ALL fields optional; an
+ * absent/empty segment reads as the zero-regression default (console + all
+ * levels + text — byte-identical to the legacy `ConsoleLogger`).
+ *  - `level`  — threshold (default `debug` = print everything).
+ *  - `format` — `text` (human-readable, legacy shape) | `json` (structured lines).
+ *  - `file`   — OPTIONAL append-only file sink path. A PLAIN config value (NOT a
+ *               secret — never walked by the at-rest secret encryption).
+ */
+interface LoggingConfig {
+    level?: LogLevel;
+    format?: LogFormat;
+    file?: string;
+}
+
+export { type HealthReport, type HealthStatus, type LogFormat, type LogLevel, type LoggingConfig, healthHttpStatus };

package/dist/health-logging-types.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Health-probe + logging contracts (daemon-health-endpoint / configurable-logging).
+ *
+ * Two small, dependency-light shapes shared across the `@omnicross/*` packages:
+ *  - `HealthReport` — the coarse, SECRET-FREE body served by the unauthenticated
+ *    `/health` probe (mounted on the admin server before its auth gate, and
+ *    optionally on the outbound `/v1/*` server before key-auth). Frozen so a
+ *    liveness/readiness probe + sibling changes (#8 health-cron surfacing into
+ *    `checks`) agree on one shape.
+ *  - `LogLevel` / `LoggingConfig` — the configurable-logger's level enum + config
+ *    segment. Frozen so sibling changes (#5 webhooks / #13 audit-log) reuse the
+ *    SAME level vocabulary + config shape rather than reinventing it.
+ *
+ * NON-SECRET by construction: nothing here carries a token, email, config value,
+ * or record-of-count. `HealthReport.checks` are COARSE booleans only.
+ *
+ * @module health-logging-types
+ */
+/** The coarse health status. Anything other than `ok` maps to HTTP 503. */
+type HealthStatus = 'ok' | 'degraded' | 'error';
+/**
+ * The `/health` probe body (design D2). COARSE + SECRET-FREE:
+ *  - `status`        — `ok` (200) | `degraded` | `error` (both 503).
+ *  - `version`       — the daemon package version (already exposed pre-auth via
+ *                      the `x-omnicross-daemon` response header; non-sensitive).
+ *  - `uptimeSeconds` — `Math.floor(process.uptime())`.
+ *  - `timestamp`     — ISO time the report was built.
+ *  - `memory`        — coarse process stats (rss / heapUsed, MB).
+ *  - `checks`        — COARSE dependency booleans ONLY (never tokens/emails/
+ *                      config-values/record-counts).
+ */
+interface HealthReport {
+    status: HealthStatus;
+    version: string;
+    uptimeSeconds: number;
+    timestamp: string;
+    memory: {
+        rssMb: number;
+        heapUsedMb: number;
+    };
+    checks: Record<string, boolean>;
+}
+/** Map a {@link HealthStatus} to its probe HTTP code: `ok` → 200, else → 503. */
+declare function healthHttpStatus(status: HealthStatus): number;
+/**
+ * The logger's level threshold (configurable-logging, design D3). Numeric
+ * severity order `error(0) < warn(1) < info(2) < debug(3)`; a message at a level
+ * BELOW the configured threshold's severity (i.e. a higher ordinal) is dropped.
+ */
+type LogLevel = 'error' | 'warn' | 'info' | 'debug';
+/** Output shape of the logger sinks. */
+type LogFormat = 'text' | 'json';
+/**
+ * The daemon's `logging` config segment (design D3/D4). ALL fields optional; an
+ * absent/empty segment reads as the zero-regression default (console + all
+ * levels + text — byte-identical to the legacy `ConsoleLogger`).
+ *  - `level`  — threshold (default `debug` = print everything).
+ *  - `format` — `text` (human-readable, legacy shape) | `json` (structured lines).
+ *  - `file`   — OPTIONAL append-only file sink path. A PLAIN config value (NOT a
+ *               secret — never walked by the at-rest secret encryption).
+ */
+interface LoggingConfig {
+    level?: LogLevel;
+    format?: LogFormat;
+    file?: string;
+}
+
+export { type HealthReport, type HealthStatus, type LogFormat, type LogLevel, type LoggingConfig, healthHttpStatus };

package/dist/health-logging-types.js

@@ -0,0 +1,7 @@
+// src/health-logging-types.ts
+function healthHttpStatus(status) {
+  return status === "ok" ? 200 : 503;
+}
+export {
+  healthHttpStatus
+};

package/dist/index.cjs

@@ -24,10 +24,13 @@ __export(index_exports, {
   CANNOT_DISABLE_THINKING_PATTERNS: () => CANNOT_DISABLE_THINKING_PATTERNS,
   CATALOG_VERSION: () => CATALOG_VERSION,
   CODING_PLAN_URL_PRESETS: () => CODING_PLAN_URL_PRESETS,
+  DEFAULT_AUDIT_CONFIG: () => DEFAULT_AUDIT_CONFIG,
+  DEFAULT_BILLING_CONFIG: () => DEFAULT_BILLING_CONFIG,
   DEFAULT_LITELLM_PRICING_URL: () => DEFAULT_LITELLM_PRICING_URL,
   DEFAULT_MAX_TOKENS: () => DEFAULT_MAX_TOKENS,
   DEFAULT_MCP_SESSION_CONFIG: () => DEFAULT_MCP_SESSION_CONFIG,
   DEFAULT_SEED_PRESET_IDS: () => DEFAULT_SEED_PRESET_IDS,
+  DEFAULT_VOUCHER_CONFIG: () => DEFAULT_VOUCHER_CONFIG,
   EFFORT_RATIO: () => EFFORT_RATIO,
   EXTENDED_CONTEXT_CAPABLE_MODELS: () => EXTENDED_CONTEXT_CAPABLE_MODELS,
   KNOWN_MODELS: () => KNOWN_MODELS,
@@ -38,6 +41,8 @@ __export(index_exports, {
   PROVIDER_SEARCH_CONFIGS: () => PROVIDER_SEARCH_CONFIGS,
   REASONING_MODEL_PATTERNS: () => REASONING_MODEL_PATTERNS,
   THINKING_TOKEN_MAP: () => THINKING_TOKEN_MAP,
+  WEBHOOK_DESTINATION_TYPES: () => WEBHOOK_DESTINATION_TYPES,
+  WEBHOOK_EVENT_KINDS: () => WEBHOOK_EVENT_KINDS,
   applyAlias: () => applyAlias,
   buildAnthropicThinking: () => buildAnthropicThinking,
   buildGeminiThinkingConfig: () => buildGeminiThinkingConfig,
@@ -52,6 +57,7 @@ __export(index_exports, {
   getPresetById: () => getPresetById,
   getPresetRevision: () => getPresetRevision,
   getProviderSearchConfig: () => getProviderSearchConfig,
+  healthHttpStatus: () => healthHttpStatus,
   isApiProvider: () => isApiProvider,
   isExtendedContextCapable: () => isExtendedContextCapable,
   isLocalProvider: () => isLocalProvider,
@@ -66,6 +72,21 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 
+// src/audit-types.ts
+var DEFAULT_AUDIT_CONFIG = {
+  enabled: false,
+  captureBodies: false,
+  maxBodyBytes: 8192,
+  retentionDays: 7,
+  trustForwardedFor: false
+};
+
+// src/billing-types.ts
+var DEFAULT_BILLING_CONFIG = {
+  enabled: false,
+  maxRetryAgeMs: 24 * 60 * 6e4
+};
+
 // src/canonical-models.ts
 var OPENAI_MODELS = {
   "gpt-5.5": { category: "reasoning", contextLength: 105e4, maxTokens: 128e3, reasoning: true, vision: true, functionCall: true, thinkingLevels: ["none", "low", "medium", "high", "xhigh"], thinkingTokenLimit: { min: 0, max: 128e3 } },
@@ -328,6 +349,11 @@ function isExtendedContextCapable(model) {
   return EXTENDED_CONTEXT_CAPABLE_MODELS.has(model);
 }
 
+// src/health-logging-types.ts
+function healthHttpStatus(status) {
+  return status === "ok" ? 200 : 503;
+}
+
 // src/mcp-types.ts
 var DEFAULT_MCP_SESSION_CONFIG = {
   mode: "auto",
@@ -2674,6 +2700,22 @@ function buildQwenThinkingConfig(level, userMaxTokens) {
   };
 }
 
+// src/voucher-types.ts
+var DEFAULT_VOUCHER_CONFIG = {
+  enabled: false
+};
+
+// src/webhook-types.ts
+var WEBHOOK_EVENT_KINDS = [
+  "account.recovery",
+  "account.anomaly",
+  "key.quotaWarning",
+  "key.quotaExceeded",
+  "server.error",
+  "test"
+];
+var WEBHOOK_DESTINATION_TYPES = ["custom", "feishu"];
+
 // src/websearch-types.ts
 function isApiProvider(id) {
   return !id.startsWith("local-");
@@ -2687,10 +2729,13 @@ function isLocalProvider(id) {
   CANNOT_DISABLE_THINKING_PATTERNS,
   CATALOG_VERSION,
   CODING_PLAN_URL_PRESETS,
+  DEFAULT_AUDIT_CONFIG,
+  DEFAULT_BILLING_CONFIG,
   DEFAULT_LITELLM_PRICING_URL,
   DEFAULT_MAX_TOKENS,
   DEFAULT_MCP_SESSION_CONFIG,
   DEFAULT_SEED_PRESET_IDS,
+  DEFAULT_VOUCHER_CONFIG,
   EFFORT_RATIO,
   EXTENDED_CONTEXT_CAPABLE_MODELS,
   KNOWN_MODELS,
@@ -2701,6 +2746,8 @@ function isLocalProvider(id) {
   PROVIDER_SEARCH_CONFIGS,
   REASONING_MODEL_PATTERNS,
   THINKING_TOKEN_MAP,
+  WEBHOOK_DESTINATION_TYPES,
+  WEBHOOK_EVENT_KINDS,
   applyAlias,
   buildAnthropicThinking,
   buildGeminiThinkingConfig,
@@ -2715,6 +2762,7 @@ function isLocalProvider(id) {
   getPresetById,
   getPresetRevision,
   getProviderSearchConfig,
+  healthHttpStatus,
   isApiProvider,
   isExtendedContextCapable,
   isLocalProvider,

package/dist/index.d.cts

@@ -1,16 +1,21 @@
-export { AccountTokensConfig, AuthMethod, ClaudeAuthMethod, ClaudeTokenConfig, CodexTokenConfig, GeminiTokenConfig, OAuthParams, SubscriptionAccountEntry, SubscriptionAccountSanitized, SubscriptionLevel, SyncWarningCode, TokenExchangeRequest, TokenStatus } from './account-tokens-types.cjs';
+export { AccountClientIdentity, AccountTokensConfig, AuthMethod, ClaudeAuthMethod, ClaudeTokenConfig, CodexTokenConfig, GeminiTokenConfig, OAuthParams, ProxyConfig, SanitizedProxyConfig, SubscriptionAccountEntry, SubscriptionAccountSanitized, SubscriptionLevel, SyncWarningCode, TokenExchangeRequest, TokenStatus } from './account-tokens-types.cjs';
+export { AuditConfig, AuditQueryResult, AuditRecord, DEFAULT_AUDIT_CONFIG } from './audit-types.cjs';
+export { BillingConfig, BillingDeliveryStatus, BillingEvent, DEFAULT_BILLING_CONFIG } from './billing-types.cjs';
 export { KNOWN_MODELS, KnownModelCapabilities, MODEL_ALIASES, ResolvedModelCapabilities, applyAlias, lookupCanonicalCapabilities, normalizeModelId, resolveModelCapabilities } from './canonical-models.cjs';
 export { AnthropicAudioContent, AnthropicChatRequest, AnthropicChatResponse, AnthropicContentPart, AnthropicImageContent, AnthropicMessage, AnthropicSystemContent, AnthropicTextContent, AnthropicThinkingContent, AnthropicTool, AnthropicToolResultContent, AnthropicToolUseContent, AnthropicVideoContent, ConversionConfig, OpenAIChatRequest, OpenAIChatResponse, OpenAIContentPart, OpenAIMessage, OpenAIStreamChunk, OpenAITool, OpenAIToolCall, SimpleChatAudio, SimpleChatImage, SimpleChatMessage, SimpleChatSession, SimpleChatVideo } from './completion-types.cjs';
 export { R as ReasoningConfig, T as ThinkLevel, a as ThinkingContent } from './thinking-CBWSLel8.cjs';
 export { ResolvedEndpoint, resolveProviderEndpoint } from './endpoint-resolver.cjs';
 export { EXTENDED_CONTEXT_CAPABLE_MODELS, isExtendedContextCapable } from './extended-context.cjs';
-export { A as API_MODE_IDS, a as AgentDefaultModels, b as ApiFormat, c as ApiKeyEntry, d as ApiMode, e as ApiModeId, C as ChatApiFormat, f as CodingPlanConfig, g as CompletionSettings, G as GlobalModelParameters, L as LLMProvider, M as ModelConfig, h as ModelGroup, i as ModelParameter, j as ModelRef, O as OpenRouterDataCollection, k as OpenRouterMaxPrice, l as OpenRouterProviderRouting, m as OpenRouterProviderSort, n as OpenRouterQuantization, P as PresetProviderTemplate, o as ProviderApiType, p as ProviderModelMapping, q as ProviderSearchConfig, r as ProviderTemplate, S as SearchCapability, T as TransformerConfig, s as TransformerEntry } from './llm-config-CQjOimv2.cjs';
+export { HealthReport, HealthStatus, LogFormat, LogLevel, LoggingConfig, healthHttpStatus } from './health-logging-types.cjs';
+export { A as API_MODE_IDS, a as AgentDefaultModels, b as ApiFormat, c as ApiKeyEntry, d as ApiMode, e as ApiModeId, C as ChatApiFormat, f as CodingPlanConfig, g as CompletionSettings, G as GlobalModelParameters, L as LLMProvider, M as ModelConfig, h as ModelGroup, i as ModelParameter, j as ModelRef, O as OpenRouterDataCollection, k as OpenRouterMaxPrice, l as OpenRouterProviderRouting, m as OpenRouterProviderSort, n as OpenRouterQuantization, P as PresetProviderTemplate, o as ProviderApiType, p as ProviderModelMapping, q as ProviderSearchConfig, r as ProviderTemplate, S as SearchCapability, T as TransformerConfig, s as TransformerEntry } from './llm-config-DeWNx1ig.cjs';
 export { DEFAULT_MCP_SESSION_CONFIG, MCPCallToolResponse, MCPTool, MCPToolResponseContent, McpActionResult, McpDiscoverResult, McpMode, McpServerConfig, McpServerInput, McpServerJsonInput, McpServerList, McpServerRecord, McpServerRemoveInput, McpServerScope, McpServerTransport, McpSessionConfig, McpTestResult, McpToolInfo } from './mcp-types.cjs';
 export { MessageBlock, MessageBlockBase, MessageBlockType, TextBlock, ThinkingBlock, ToolResultBlock, ToolUseBlock } from './message-blocks.cjs';
 export { DEFAULT_LITELLM_PRICING_URL, PricingConflict, PricingConflictDecision, PricingEntry, PricingEntryInput, PricingFetchResult, PricingResolution, PricingSource } from './pricing-types.cjs';
 export { CATALOG_VERSION, CODING_PLAN_URL_PRESETS, DEFAULT_SEED_PRESET_IDS, LLM_PROVIDER_PRESETS, MAX_CONCURRENCY_DEFAULTS, PROVIDER_MODEL_MAPPINGS, PROVIDER_SEARCH_CONFIGS, getAllProviderPresets, getCodingPlanBaseUrl, getPresetById, getPresetRevision, getProviderSearchConfig, resolveFollowProviderModel } from './provider-presets/index.cjs';
 export { OpenCodeGoModelEntry, OpenCodeGoScenario, OpenCodeGoTokenConfig, OpenCodeGoTokenSanitized, ProviderChannel, SubscriptionListEntry, SubscriptionProviderId, SubscriptionStatusEntry, legacyCliBackendToSubscriptionProvider, subscriptionTargetForSession } from './subscription-types.cjs';
 export { CANNOT_DISABLE_THINKING_PATTERNS, DEFAULT_MAX_TOKENS, EFFORT_RATIO, REASONING_MODEL_PATTERNS, THINKING_TOKEN_MAP, buildAnthropicThinking, buildGeminiThinkingConfig, buildQwenThinkingConfig, calculateThinkingBudget, canDisableThinking, findTokenLimit, getClaudeMaxTokens, getOpenAIReasoningEffort, isReasoningModel } from './thinking-config.cjs';
-export { ApiKeyUsageRow, MessageUsageRow, ModelUsageRow, SessionCacheStats, UsageDateRange, UsageEventInput, UsageEventRecord, UsageQueryParams, UsageTotals } from './usage-stats-types.cjs';
+export { ApiKeyUsageRow, MessageUsageRow, ModelUsageRow, SessionCacheStats, UsageDateRange, UsageEventInput, UsageEventRecord, UsageQueryParams, UsageTimeBucket, UsageTimeSeriesBucket, UsageTotals } from './usage-stats-types.cjs';
 export { UsageEngineOrigin, UsageTokens } from './usage-types.cjs';
+export { DEFAULT_VOUCHER_CONFIG, VoucherConfig, VoucherCreated, VoucherGrant, VoucherInfo, VoucherRecord, VoucherRedeemResult, VoucherStatus, VoucherType } from './voucher-types.cjs';
+export { SanitizedWebhookConfig, SanitizedWebhookDestination, WEBHOOK_DESTINATION_TYPES, WEBHOOK_EVENT_KINDS, WebhookAnomalyState, WebhookConfig, WebhookDestination, WebhookDestinationType, WebhookEvent, WebhookEventKind, WebhookQuotaScope } from './webhook-types.cjs';
 export { JinaReaderResponse, WebSearchOptions, WebSearchProviderConfig, WebSearchProviderId, WebSearchProviderType, WebSearchResponse, WebSearchResult, isApiProvider, isLocalProvider } from './websearch-types.cjs';

package/dist/index.d.ts

@@ -1,16 +1,21 @@
-export { AccountTokensConfig, AuthMethod, ClaudeAuthMethod, ClaudeTokenConfig, CodexTokenConfig, GeminiTokenConfig, OAuthParams, SubscriptionAccountEntry, SubscriptionAccountSanitized, SubscriptionLevel, SyncWarningCode, TokenExchangeRequest, TokenStatus } from './account-tokens-types.js';
+export { AccountClientIdentity, AccountTokensConfig, AuthMethod, ClaudeAuthMethod, ClaudeTokenConfig, CodexTokenConfig, GeminiTokenConfig, OAuthParams, ProxyConfig, SanitizedProxyConfig, SubscriptionAccountEntry, SubscriptionAccountSanitized, SubscriptionLevel, SyncWarningCode, TokenExchangeRequest, TokenStatus } from './account-tokens-types.js';
+export { AuditConfig, AuditQueryResult, AuditRecord, DEFAULT_AUDIT_CONFIG } from './audit-types.js';
+export { BillingConfig, BillingDeliveryStatus, BillingEvent, DEFAULT_BILLING_CONFIG } from './billing-types.js';
 export { KNOWN_MODELS, KnownModelCapabilities, MODEL_ALIASES, ResolvedModelCapabilities, applyAlias, lookupCanonicalCapabilities, normalizeModelId, resolveModelCapabilities } from './canonical-models.js';
 export { AnthropicAudioContent, AnthropicChatRequest, AnthropicChatResponse, AnthropicContentPart, AnthropicImageContent, AnthropicMessage, AnthropicSystemContent, AnthropicTextContent, AnthropicThinkingContent, AnthropicTool, AnthropicToolResultContent, AnthropicToolUseContent, AnthropicVideoContent, ConversionConfig, OpenAIChatRequest, OpenAIChatResponse, OpenAIContentPart, OpenAIMessage, OpenAIStreamChunk, OpenAITool, OpenAIToolCall, SimpleChatAudio, SimpleChatImage, SimpleChatMessage, SimpleChatSession, SimpleChatVideo } from './completion-types.js';
 export { R as ReasoningConfig, T as ThinkLevel, a as ThinkingContent } from './thinking-CBWSLel8.js';
 export { ResolvedEndpoint, resolveProviderEndpoint } from './endpoint-resolver.js';
 export { EXTENDED_CONTEXT_CAPABLE_MODELS, isExtendedContextCapable } from './extended-context.js';
-export { A as API_MODE_IDS, a as AgentDefaultModels, b as ApiFormat, c as ApiKeyEntry, d as ApiMode, e as ApiModeId, C as ChatApiFormat, f as CodingPlanConfig, g as CompletionSettings, G as GlobalModelParameters, L as LLMProvider, M as ModelConfig, h as ModelGroup, i as ModelParameter, j as ModelRef, O as OpenRouterDataCollection, k as OpenRouterMaxPrice, l as OpenRouterProviderRouting, m as OpenRouterProviderSort, n as OpenRouterQuantization, P as PresetProviderTemplate, o as ProviderApiType, p as ProviderModelMapping, q as ProviderSearchConfig, r as ProviderTemplate, S as SearchCapability, T as TransformerConfig, s as TransformerEntry } from './llm-config-D1jKQLVp.js';
+export { HealthReport, HealthStatus, LogFormat, LogLevel, LoggingConfig, healthHttpStatus } from './health-logging-types.js';
+export { A as API_MODE_IDS, a as AgentDefaultModels, b as ApiFormat, c as ApiKeyEntry, d as ApiMode, e as ApiModeId, C as ChatApiFormat, f as CodingPlanConfig, g as CompletionSettings, G as GlobalModelParameters, L as LLMProvider, M as ModelConfig, h as ModelGroup, i as ModelParameter, j as ModelRef, O as OpenRouterDataCollection, k as OpenRouterMaxPrice, l as OpenRouterProviderRouting, m as OpenRouterProviderSort, n as OpenRouterQuantization, P as PresetProviderTemplate, o as ProviderApiType, p as ProviderModelMapping, q as ProviderSearchConfig, r as ProviderTemplate, S as SearchCapability, T as TransformerConfig, s as TransformerEntry } from './llm-config-CKOaFFdy.js';
 export { DEFAULT_MCP_SESSION_CONFIG, MCPCallToolResponse, MCPTool, MCPToolResponseContent, McpActionResult, McpDiscoverResult, McpMode, McpServerConfig, McpServerInput, McpServerJsonInput, McpServerList, McpServerRecord, McpServerRemoveInput, McpServerScope, McpServerTransport, McpSessionConfig, McpTestResult, McpToolInfo } from './mcp-types.js';
 export { MessageBlock, MessageBlockBase, MessageBlockType, TextBlock, ThinkingBlock, ToolResultBlock, ToolUseBlock } from './message-blocks.js';
 export { DEFAULT_LITELLM_PRICING_URL, PricingConflict, PricingConflictDecision, PricingEntry, PricingEntryInput, PricingFetchResult, PricingResolution, PricingSource } from './pricing-types.js';
 export { CATALOG_VERSION, CODING_PLAN_URL_PRESETS, DEFAULT_SEED_PRESET_IDS, LLM_PROVIDER_PRESETS, MAX_CONCURRENCY_DEFAULTS, PROVIDER_MODEL_MAPPINGS, PROVIDER_SEARCH_CONFIGS, getAllProviderPresets, getCodingPlanBaseUrl, getPresetById, getPresetRevision, getProviderSearchConfig, resolveFollowProviderModel } from './provider-presets/index.js';
 export { OpenCodeGoModelEntry, OpenCodeGoScenario, OpenCodeGoTokenConfig, OpenCodeGoTokenSanitized, ProviderChannel, SubscriptionListEntry, SubscriptionProviderId, SubscriptionStatusEntry, legacyCliBackendToSubscriptionProvider, subscriptionTargetForSession } from './subscription-types.js';
 export { CANNOT_DISABLE_THINKING_PATTERNS, DEFAULT_MAX_TOKENS, EFFORT_RATIO, REASONING_MODEL_PATTERNS, THINKING_TOKEN_MAP, buildAnthropicThinking, buildGeminiThinkingConfig, buildQwenThinkingConfig, calculateThinkingBudget, canDisableThinking, findTokenLimit, getClaudeMaxTokens, getOpenAIReasoningEffort, isReasoningModel } from './thinking-config.js';
-export { ApiKeyUsageRow, MessageUsageRow, ModelUsageRow, SessionCacheStats, UsageDateRange, UsageEventInput, UsageEventRecord, UsageQueryParams, UsageTotals } from './usage-stats-types.js';
+export { ApiKeyUsageRow, MessageUsageRow, ModelUsageRow, SessionCacheStats, UsageDateRange, UsageEventInput, UsageEventRecord, UsageQueryParams, UsageTimeBucket, UsageTimeSeriesBucket, UsageTotals } from './usage-stats-types.js';
 export { UsageEngineOrigin, UsageTokens } from './usage-types.js';
+export { DEFAULT_VOUCHER_CONFIG, VoucherConfig, VoucherCreated, VoucherGrant, VoucherInfo, VoucherRecord, VoucherRedeemResult, VoucherStatus, VoucherType } from './voucher-types.js';
+export { SanitizedWebhookConfig, SanitizedWebhookDestination, WEBHOOK_DESTINATION_TYPES, WEBHOOK_EVENT_KINDS, WebhookAnomalyState, WebhookConfig, WebhookDestination, WebhookDestinationType, WebhookEvent, WebhookEventKind, WebhookQuotaScope } from './webhook-types.js';
 export { JinaReaderResponse, WebSearchOptions, WebSearchProviderConfig, WebSearchProviderId, WebSearchProviderType, WebSearchResponse, WebSearchResult, isApiProvider, isLocalProvider } from './websearch-types.js';