@omnicross/core 0.1.1 → 0.1.3

package/dist/pipeline/AuthSource.cjs

@@ -1,18 +1 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/pipeline/AuthSource.ts
-var AuthSource_exports = {};
-module.exports = __toCommonJS(AuthSource_exports);
+"use strict";

package/dist/pipeline/AuthSource.d.cts

@@ -34,6 +34,24 @@ interface AuthApplyHints {
     upstreamUrl: string;
     /** Resolved model id for the request. */
     model: string;
+    /**
+     * OPTIONAL stable per-conversation session key (subscription-account-scheduling,
+     * D5) — mapped through to the subscription strategy's sticky account affinity.
+     * BYO auth sources ignore it.
+     */
+    sessionKey?: string;
+    /**
+     * OPTIONAL per-request selection callback (subscription-account-health, D5;
+     * subscription-account-model-map, D3). A subscription strategy invokes it with
+     * the EFFECTIVE account id it resolved (the selected non-active id, or the active
+     * id on the null/≤1 path) so the relay can mark that account's health against the
+     * upstream outcome. The OPTIONAL 3rd `remappedModel` carries the selected
+     * account's ACTUAL upstream model when its `supportedModels` object remaps the
+     * request model — the relay rewrites the outbound `body.model` to it on the
+     * pass-through / same-format path (absent ⇒ forward verbatim). Fresh per request
+     * (no cross-request race). BYO auth sources ignore it.
+     */
+    reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
 }
 /**
  * Result of {@link AuthSource.onResult}.
@@ -74,8 +92,12 @@ interface AuthSource {
      * Called when the upstream returns 401. Return `true` to ask the caller to
      * retry once with freshly-applied headers; `false` to surface the 401.
      * Optional — sources without a refresh notion omit it.
+     *
+     * The OPTIONAL `sessionKey` (subscription-account-scheduling, D7) lets a
+     * subscription source refresh the account the request was actually served by;
+     * BYO sources ignore it.
      */
-    onUnauthorized?(): Promise<boolean>;
+    onUnauthorized?(sessionKey?: string): Promise<boolean>;
     /**
      * Resolve the upstream URL the request should target, when the credential
      * dictates it (e.g. a subscription profile's per-model endpoint). Returns

package/dist/pipeline/AuthSource.d.ts

@@ -34,6 +34,24 @@ interface AuthApplyHints {
     upstreamUrl: string;
     /** Resolved model id for the request. */
     model: string;
+    /**
+     * OPTIONAL stable per-conversation session key (subscription-account-scheduling,
+     * D5) — mapped through to the subscription strategy's sticky account affinity.
+     * BYO auth sources ignore it.
+     */
+    sessionKey?: string;
+    /**
+     * OPTIONAL per-request selection callback (subscription-account-health, D5;
+     * subscription-account-model-map, D3). A subscription strategy invokes it with
+     * the EFFECTIVE account id it resolved (the selected non-active id, or the active
+     * id on the null/≤1 path) so the relay can mark that account's health against the
+     * upstream outcome. The OPTIONAL 3rd `remappedModel` carries the selected
+     * account's ACTUAL upstream model when its `supportedModels` object remaps the
+     * request model — the relay rewrites the outbound `body.model` to it on the
+     * pass-through / same-format path (absent ⇒ forward verbatim). Fresh per request
+     * (no cross-request race). BYO auth sources ignore it.
+     */
+    reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
 }
 /**
  * Result of {@link AuthSource.onResult}.
@@ -74,8 +92,12 @@ interface AuthSource {
      * Called when the upstream returns 401. Return `true` to ask the caller to
      * retry once with freshly-applied headers; `false` to surface the 401.
      * Optional — sources without a refresh notion omit it.
+     *
+     * The OPTIONAL `sessionKey` (subscription-account-scheduling, D7) lets a
+     * subscription source refresh the account the request was actually served by;
+     * BYO sources ignore it.
      */
-    onUnauthorized?(): Promise<boolean>;
+    onUnauthorized?(sessionKey?: string): Promise<boolean>;
     /**
      * Resolve the upstream URL the request should target, when the credential
      * dictates it (e.g. a subscription profile's per-model endpoint). Returns

package/dist/pipeline/LlmConfigProviderAuth.cjs

@@ -1,169 +1,8 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-// src/pipeline/LlmConfigProviderAuth.ts
-var LlmConfigProviderAuth_exports = {};
-__export(LlmConfigProviderAuth_exports, {
-  LlmConfigProviderAuth: () => LlmConfigProviderAuth
-});
-module.exports = __toCommonJS(LlmConfigProviderAuth_exports);
+var _chunkQ27JY5RGcjs = require('../chunk-Q27JY5RG.cjs');
+require('../chunk-A2YMUCBT.cjs');
+require('../chunk-UNEFIWXI.cjs');
 
-// src/openrouter.ts
-function isOpenRouterProvider(provider) {
-  const baseUrl = (provider.api_base_url || "").toLowerCase();
-  return baseUrl.includes("openrouter.ai");
-}
-var OPENROUTER_APP_HEADERS = {
-  "HTTP-Referer": "https://omnicross.dev",
-  "X-Title": "omnicross"
-};
 
-// src/completion/url-builder.ts
-var import_endpoint_resolver = require("@omnicross/contracts/endpoint-resolver");
-function resolveApiFormat(provider) {
-  if (provider.apiFormat) {
-    return provider.apiFormat;
-  }
-  if (provider.chatApiFormat) {
-    return provider.chatApiFormat;
-  }
-  if (provider.apiType === "claudecode" || provider.apiType === "anthropic") {
-    return "anthropic";
-  }
-  if (provider.apiType === "google") {
-    return "google";
-  }
-  return "openai";
-}
-
-// src/completion/header-builder.ts
-function getProviderHeaders(provider, apiKey) {
-  const format = resolveApiFormat(provider);
-  let headers;
-  switch (format) {
-    case "anthropic":
-      headers = {
-        "Content-Type": "application/json",
-        "x-api-key": apiKey,
-        "anthropic-version": "2025-01-10"
-        // Required for extended thinking feature
-      };
-      break;
-    case "google":
-      headers = {
-        "Content-Type": "application/json",
-        "x-goog-api-key": apiKey
-      };
-      break;
-    case "azure-openai":
-      headers = {
-        "Content-Type": "application/json",
-        "api-key": apiKey
-      };
-      break;
-    case "openai":
-    case "openai-response":
-    default:
-      headers = {
-        "Content-Type": "application/json",
-        "Authorization": `Bearer ${apiKey}`
-      };
-      break;
-  }
-  if (isOpenRouterProvider(provider)) {
-    return { ...headers, ...OPENROUTER_APP_HEADERS };
-  }
-  return headers;
-}
-
-// src/pipeline/LlmConfigProviderAuth.ts
-function isReportableStatus(status) {
-  return status === 429 || status === 529 || status === 401 || status === 403;
-}
-var LlmConfigProviderAuth = class {
-  provider;
-  apiKeyPool;
-  providerId;
-  sessionId;
-  /**
-   * The current resolved key. Mutable so a Phase-3 caller can read the
-   * rotated key after `onResult`; this phase it is only set at construction
-   * and updated inside `onResult` (mirroring the inline re-point in
-   * `callWithPoolReporting`).
-   */
-  apiKey;
-  constructor(opts) {
-    this.provider = opts.provider;
-    this.apiKey = opts.apiKey;
-    this.apiKeyPool = opts.apiKeyPool ?? null;
-    this.providerId = opts.providerId;
-    this.sessionId = opts.sessionId;
-  }
-  /**
-   * Merge the provider auth headers (and content-type / OpenRouter app
-   * headers) into `headers`, exactly as a direct `getProviderHeaders` call
-   * would produce them. `hints` are accepted for contract symmetry but the
-   * provider-key path does not vary headers by URL/model.
-   */
-  applyHeaders(headers, _hints) {
-    const authHeaders = getProviderHeaders(this.provider, this.apiKey);
-    for (const [k, v] of Object.entries(authHeaders)) {
-      headers[k] = v;
-    }
-  }
-  /**
-   * React to the final HTTP status — the pool-rotation seam (design D5).
-   *
-   * Reproduces `callWithPoolReporting`'s reportable + success branches:
-   *  - reportable status (429/529/401/403) on a pool-backed request →
-   *    `reportError(providerId, sessionId, status)`; when it hands back a
-   *    `newKey` the session was re-bound, so we adopt it (`this.apiKey`) and
-   *    return `{ rebound: true, newKey }`. When no key is available it returns
-   *    `{ rebound: false }` (the session is still cooled/disabled by the report).
-   *  - success / any 2xx → `reportSuccess(sessionId)`; `{ rebound: false }`.
-   *  - non-reportable, non-success, or non-pool request → no-op
-   *    `{ rebound: false }`.
-   *
-   * NOTE: no caller invokes this in Phase 2; it is unit-tested in isolation.
-   */
-  async onResult(status) {
-    const pool = this.apiKeyPool;
-    const providerId = this.providerId;
-    const sessionId = this.sessionId;
-    if (!pool || !providerId || !sessionId) {
-      return { rebound: false };
-    }
-    if (isReportableStatus(status)) {
-      const newKey = await pool.reportError(providerId, sessionId, status);
-      if (newKey) {
-        this.apiKey = newKey;
-        return { rebound: true, newKey };
-      }
-      return { rebound: false };
-    }
-    if (status !== null && status >= 200 && status < 300) {
-      pool.reportSuccess(sessionId);
-    }
-    return { rebound: false };
-  }
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  LlmConfigProviderAuth
-});
+exports.LlmConfigProviderAuth = _chunkQ27JY5RGcjs.LlmConfigProviderAuth;

package/dist/pipeline/LlmConfigProviderAuth.d.cts

@@ -1,6 +1,7 @@
 import { LLMProvider } from '@omnicross/contracts/llm-config';
-import { A as ApiKeyPoolService } from '../ApiKeyPoolService-BmMkau07.cjs';
+import { ApiKeyPoolService } from '../completion/ApiKeyPoolService.cjs';
 import { AuthSource, AuthApplyHints, AuthResultOutcome } from './AuthSource.cjs';
+import '../logger-4GvQNzhE.cjs';
 
 /**
  * LlmConfigProviderAuth — `AuthSource` for LLM-config provider rows.

package/dist/pipeline/LlmConfigProviderAuth.d.ts

@@ -1,6 +1,7 @@
 import { LLMProvider } from '@omnicross/contracts/llm-config';
-import { A as ApiKeyPoolService } from '../ApiKeyPoolService-BmMkau07.js';
+import { ApiKeyPoolService } from '../completion/ApiKeyPoolService.js';
 import { AuthSource, AuthApplyHints, AuthResultOutcome } from './AuthSource.js';
+import '../logger-4GvQNzhE.js';
 
 /**
  * LlmConfigProviderAuth — `AuthSource` for LLM-config provider rows.

package/dist/pipeline/LlmConfigProviderAuth.js

@@ -1,142 +1,8 @@
-// src/openrouter.ts
-function isOpenRouterProvider(provider) {
-  const baseUrl = (provider.api_base_url || "").toLowerCase();
-  return baseUrl.includes("openrouter.ai");
-}
-var OPENROUTER_APP_HEADERS = {
-  "HTTP-Referer": "https://omnicross.dev",
-  "X-Title": "omnicross"
-};
-
-// src/completion/url-builder.ts
-import { resolveProviderEndpoint as resolveProviderEndpointShared } from "@omnicross/contracts/endpoint-resolver";
-function resolveApiFormat(provider) {
-  if (provider.apiFormat) {
-    return provider.apiFormat;
-  }
-  if (provider.chatApiFormat) {
-    return provider.chatApiFormat;
-  }
-  if (provider.apiType === "claudecode" || provider.apiType === "anthropic") {
-    return "anthropic";
-  }
-  if (provider.apiType === "google") {
-    return "google";
-  }
-  return "openai";
-}
-
-// src/completion/header-builder.ts
-function getProviderHeaders(provider, apiKey) {
-  const format = resolveApiFormat(provider);
-  let headers;
-  switch (format) {
-    case "anthropic":
-      headers = {
-        "Content-Type": "application/json",
-        "x-api-key": apiKey,
-        "anthropic-version": "2025-01-10"
-        // Required for extended thinking feature
-      };
-      break;
-    case "google":
-      headers = {
-        "Content-Type": "application/json",
-        "x-goog-api-key": apiKey
-      };
-      break;
-    case "azure-openai":
-      headers = {
-        "Content-Type": "application/json",
-        "api-key": apiKey
-      };
-      break;
-    case "openai":
-    case "openai-response":
-    default:
-      headers = {
-        "Content-Type": "application/json",
-        "Authorization": `Bearer ${apiKey}`
-      };
-      break;
-  }
-  if (isOpenRouterProvider(provider)) {
-    return { ...headers, ...OPENROUTER_APP_HEADERS };
-  }
-  return headers;
-}
-
-// src/pipeline/LlmConfigProviderAuth.ts
-function isReportableStatus(status) {
-  return status === 429 || status === 529 || status === 401 || status === 403;
-}
-var LlmConfigProviderAuth = class {
-  provider;
-  apiKeyPool;
-  providerId;
-  sessionId;
-  /**
-   * The current resolved key. Mutable so a Phase-3 caller can read the
-   * rotated key after `onResult`; this phase it is only set at construction
-   * and updated inside `onResult` (mirroring the inline re-point in
-   * `callWithPoolReporting`).
-   */
-  apiKey;
-  constructor(opts) {
-    this.provider = opts.provider;
-    this.apiKey = opts.apiKey;
-    this.apiKeyPool = opts.apiKeyPool ?? null;
-    this.providerId = opts.providerId;
-    this.sessionId = opts.sessionId;
-  }
-  /**
-   * Merge the provider auth headers (and content-type / OpenRouter app
-   * headers) into `headers`, exactly as a direct `getProviderHeaders` call
-   * would produce them. `hints` are accepted for contract symmetry but the
-   * provider-key path does not vary headers by URL/model.
-   */
-  applyHeaders(headers, _hints) {
-    const authHeaders = getProviderHeaders(this.provider, this.apiKey);
-    for (const [k, v] of Object.entries(authHeaders)) {
-      headers[k] = v;
-    }
-  }
-  /**
-   * React to the final HTTP status — the pool-rotation seam (design D5).
-   *
-   * Reproduces `callWithPoolReporting`'s reportable + success branches:
-   *  - reportable status (429/529/401/403) on a pool-backed request →
-   *    `reportError(providerId, sessionId, status)`; when it hands back a
-   *    `newKey` the session was re-bound, so we adopt it (`this.apiKey`) and
-   *    return `{ rebound: true, newKey }`. When no key is available it returns
-   *    `{ rebound: false }` (the session is still cooled/disabled by the report).
-   *  - success / any 2xx → `reportSuccess(sessionId)`; `{ rebound: false }`.
-   *  - non-reportable, non-success, or non-pool request → no-op
-   *    `{ rebound: false }`.
-   *
-   * NOTE: no caller invokes this in Phase 2; it is unit-tested in isolation.
-   */
-  async onResult(status) {
-    const pool = this.apiKeyPool;
-    const providerId = this.providerId;
-    const sessionId = this.sessionId;
-    if (!pool || !providerId || !sessionId) {
-      return { rebound: false };
-    }
-    if (isReportableStatus(status)) {
-      const newKey = await pool.reportError(providerId, sessionId, status);
-      if (newKey) {
-        this.apiKey = newKey;
-        return { rebound: true, newKey };
-      }
-      return { rebound: false };
-    }
-    if (status !== null && status >= 200 && status < 300) {
-      pool.reportSuccess(sessionId);
-    }
-    return { rebound: false };
-  }
-};
+import {
+  LlmConfigProviderAuth
+} from "../chunk-ZY6KU6P3.js";
+import "../chunk-H5JUT3KV.js";
+import "../chunk-HUZZZ3JL.js";
 export {
   LlmConfigProviderAuth
 };

package/dist/pipeline/SubscriptionAccountHealth.cjs

@@ -0,0 +1,22 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+var _chunkVQY5W4YWcjs = require('../chunk-VQY5W4YW.cjs');
+
+
+
+
+
+
+
+
+
+
+exports.AUTH_ERROR_TTL_MS = _chunkVQY5W4YWcjs.AUTH_ERROR_TTL_MS; exports.OVERLOAD_ENABLED_DEFAULT = _chunkVQY5W4YWcjs.OVERLOAD_ENABLED_DEFAULT; exports.OVERLOAD_TTL_MS = _chunkVQY5W4YWcjs.OVERLOAD_TTL_MS; exports.SERVER_ERROR_TTL_MS = _chunkVQY5W4YWcjs.SERVER_ERROR_TTL_MS; exports.SubscriptionAccountHealth = _chunkVQY5W4YWcjs.SubscriptionAccountHealth; exports.__resetSharedAccountHealthForTests = _chunkVQY5W4YWcjs.__resetSharedAccountHealthForTests; exports.getSharedAccountHealth = _chunkVQY5W4YWcjs.getSharedAccountHealth; exports.resolveResetSeconds = _chunkVQY5W4YWcjs.resolveResetSeconds; exports.setSharedAccountHealth = _chunkVQY5W4YWcjs.setSharedAccountHealth;