@omnicross/core 0.1.10 → 0.2.0

package/dist/openai-operation.js

@@ -0,0 +1,18 @@
+import {
+  OpenAIOperationError,
+  OpenAIOperationRegistrationError,
+  OpenAIOperationRegistry,
+  classifyOpenAIOperation,
+  getOpenAIOperation,
+  unsupportedOpenAIOperation,
+  writeOpenAIOperationError
+} from "./chunk-4JOU54M5.js";
+export {
+  OpenAIOperationError,
+  OpenAIOperationRegistrationError,
+  OpenAIOperationRegistry,
+  classifyOpenAIOperation,
+  getOpenAIOperation,
+  unsupportedOpenAIOperation,
+  writeOpenAIOperationError
+};

package/dist/outbound-api/auditCapture.cjs

@@ -1,9 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkUWDW6PN3cjs = require('../chunk-UWDW6PN3.cjs');
-require('../chunk-FCR77GYM.cjs');
+var _chunkFX325I5Qcjs = require('../chunk-FX325I5Q.cjs');
 require('../chunk-AEOZIDEB.cjs');
+require('../chunk-HCOQQAZE.cjs');
 require('../chunk-XSVNC2UD.cjs');
 
 
-exports.beginAuditCapture = _chunkUWDW6PN3cjs.beginAuditCapture;
+exports.beginAuditCapture = _chunkFX325I5Qcjs.beginAuditCapture;

package/dist/outbound-api/auditCapture.d.cts

@@ -48,12 +48,23 @@ interface AuditCaptureContext {
     sessionKey?: string;
     /** Stash the raw request body for capture (a no-op unless `captureBodies`). */
     setRequestBody(raw: string): void;
+    /**
+     * Permanently discard and disable request/response body capture for this
+     * request while retaining metadata and usage attribution. Idempotent and
+     * intentionally one-way: a later caller cannot re-enable body persistence.
+     */
+    suppressBodies(): void;
+}
+/** Per-request capture policy selected before any response wrapper is installed. */
+interface AuditCaptureOptions {
+    /** Preserve metadata while structurally preventing request/response body capture. */
+    suppressBodies?: boolean;
 }
 /**
  * Begin audit capture for one request. Returns a mutable context the handler
  * enriches, or `null` when audit is disabled (zero-cost path). The record is
  * emitted on response `close` via the fire-and-forget sink.
  */
-declare function beginAuditCapture(req: http.IncomingMessage, res: http.ServerResponse, now: number): AuditCaptureContext | null;
+declare function beginAuditCapture(req: http.IncomingMessage, res: http.ServerResponse, now: number, options?: AuditCaptureOptions): AuditCaptureContext | null;
 
-export { type AuditCaptureContext, beginAuditCapture };
+export { type AuditCaptureContext, type AuditCaptureOptions, beginAuditCapture };

package/dist/outbound-api/auditCapture.d.ts

@@ -48,12 +48,23 @@ interface AuditCaptureContext {
     sessionKey?: string;
     /** Stash the raw request body for capture (a no-op unless `captureBodies`). */
     setRequestBody(raw: string): void;
+    /**
+     * Permanently discard and disable request/response body capture for this
+     * request while retaining metadata and usage attribution. Idempotent and
+     * intentionally one-way: a later caller cannot re-enable body persistence.
+     */
+    suppressBodies(): void;
+}
+/** Per-request capture policy selected before any response wrapper is installed. */
+interface AuditCaptureOptions {
+    /** Preserve metadata while structurally preventing request/response body capture. */
+    suppressBodies?: boolean;
 }
 /**
  * Begin audit capture for one request. Returns a mutable context the handler
  * enriches, or `null` when audit is disabled (zero-cost path). The record is
  * emitted on response `close` via the fire-and-forget sink.
  */
-declare function beginAuditCapture(req: http.IncomingMessage, res: http.ServerResponse, now: number): AuditCaptureContext | null;
+declare function beginAuditCapture(req: http.IncomingMessage, res: http.ServerResponse, now: number, options?: AuditCaptureOptions): AuditCaptureContext | null;
 
-export { type AuditCaptureContext, beginAuditCapture };
+export { type AuditCaptureContext, type AuditCaptureOptions, beginAuditCapture };

package/dist/outbound-api/auditCapture.js

@@ -1,8 +1,8 @@
 import {
   beginAuditCapture
-} from "../chunk-GXEZ2R3E.js";
-import "../chunk-K5NM7VAH.js";
+} from "../chunk-6OKXH2TW.js";
 import "../chunk-WNY4WMRF.js";
+import "../chunk-N76KU6F5.js";
 import "../chunk-OZFM4X3S.js";
 export {
   beginAuditCapture

package/dist/outbound-api/auditRedact.cjs

@@ -1,8 +1,8 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunkFCR77GYMcjs = require('../chunk-FCR77GYM.cjs');
+var _chunkHCOQQAZEcjs = require('../chunk-HCOQQAZE.cjs');
 
 
 
-exports.AUDIT_REDACTED = _chunkFCR77GYMcjs.AUDIT_REDACTED; exports.redactAuditText = _chunkFCR77GYMcjs.redactAuditText;
+exports.AUDIT_REDACTED = _chunkHCOQQAZEcjs.AUDIT_REDACTED; exports.redactAuditText = _chunkHCOQQAZEcjs.redactAuditText;

package/dist/outbound-api/auditRedact.js

@@ -1,7 +1,7 @@
 import {
   AUDIT_REDACTED,
   redactAuditText
-} from "../chunk-K5NM7VAH.js";
+} from "../chunk-N76KU6F5.js";
 export {
   AUDIT_REDACTED,
   redactAuditText

package/dist/outbound-api/routeResolver.cjs

@@ -3,7 +3,7 @@
 
 
 
-var _chunk4VZX5F4Tcjs = require('../chunk-4VZX5F4T.cjs');
+var _chunkT6NWPIYZcjs = require('../chunk-T6NWPIYZ.cjs');
 require('../chunk-QBZJ7P2T.cjs');
 require('../chunk-4IH4EL7M.cjs');
 
@@ -11,4 +11,4 @@ require('../chunk-4IH4EL7M.cjs');
 
 
 
-exports.isSubscriptionProviderId = _chunk4VZX5F4Tcjs.isSubscriptionProviderId; exports.parseModelRef = _chunk4VZX5F4Tcjs.parseModelRef; exports.pickModelRefFromList = _chunk4VZX5F4Tcjs.pickModelRefFromList; exports.resolveRoute = _chunk4VZX5F4Tcjs.resolveRoute;
+exports.isSubscriptionProviderId = _chunkT6NWPIYZcjs.isSubscriptionProviderId; exports.parseModelRef = _chunkT6NWPIYZcjs.parseModelRef; exports.pickModelRefFromList = _chunkT6NWPIYZcjs.pickModelRefFromList; exports.resolveRoute = _chunkT6NWPIYZcjs.resolveRoute;

package/dist/outbound-api/routeResolver.d.cts

@@ -1,7 +1,7 @@
 import '../ports/provider-config-source.cjs';
-import '../provider-proxy/types.cjs';
-import '../types-C2MwkLah.cjs';
-export { R as RouteResolveError, b as RouteResolveResult, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from '../routeResolver-CVFE8KKe.cjs';
+import '../types-DsHBBk3h.cjs';
+import '../types-jjU24eYG.cjs';
+export { R as RouteResolveError, b as RouteResolveResult, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from '../routeResolver-rpKQLyDO.cjs';
 import '@omnicross/contracts/llm-config';
 import '../transformer/types.cjs';
 import '@omnicross/contracts/completion-types';
@@ -18,11 +18,14 @@ import '../pipeline/SubscriptionAuthSource.cjs';
 import '../pipeline/SubscriptionAuthStrategy.cjs';
 import '../ports/web-search-backend.cjs';
 import '@omnicross/contracts/websearch-types';
+import '@omnicross/contracts/image-generation-types';
+import '../types-CbglB73l.cjs';
+import 'node:fs/promises';
 import '@omnicross/contracts/account-tokens-types';
 import '@omnicross/contracts/audit-types';
 import '@omnicross/contracts/billing-types';
 import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
-import '../ProviderProxy-QdwNV6l1.cjs';
+import '../ProviderProxy-CgIcCVwk.cjs';
 import '../keyPolicy-zdWTu3CQ.cjs';

package/dist/outbound-api/routeResolver.d.ts

@@ -1,7 +1,7 @@
 import '../ports/provider-config-source.js';
-import '../provider-proxy/types.js';
-import '../types-BB8pxk_3.js';
-export { R as RouteResolveError, b as RouteResolveResult, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from '../routeResolver-C0mkkZaM.js';
+import '../types-CVRge76p.js';
+import '../types-5T223WYQ.js';
+export { R as RouteResolveError, b as RouteResolveResult, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from '../routeResolver-CTCcSHWu.js';
 import '@omnicross/contracts/llm-config';
 import '../transformer/types.js';
 import '@omnicross/contracts/completion-types';
@@ -18,11 +18,14 @@ import '../pipeline/SubscriptionAuthSource.js';
 import '../pipeline/SubscriptionAuthStrategy.js';
 import '../ports/web-search-backend.js';
 import '@omnicross/contracts/websearch-types';
+import '@omnicross/contracts/image-generation-types';
+import '../types-Bd72H4SB.js';
+import 'node:fs/promises';
 import '@omnicross/contracts/account-tokens-types';
 import '@omnicross/contracts/audit-types';
 import '@omnicross/contracts/billing-types';
 import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
-import '../ProviderProxy--ROec6VI.js';
+import '../ProviderProxy-DYoY5XoT.js';
 import '../keyPolicy-zdWTu3CQ.js';

package/dist/outbound-api/routeResolver.js

@@ -3,7 +3,7 @@ import {
   parseModelRef,
   pickModelRefFromList,
   resolveRoute
-} from "../chunk-EBLFCNPY.js";
+} from "../chunk-U47LQXPB.js";
 import "../chunk-AQ5TNQB7.js";
 import "../chunk-XEKD23J5.js";
 export {

package/dist/outbound-api/subscriptionRegistryPort.d.cts

@@ -1,4 +1,4 @@
-import { SubscriptionDispatchProfile } from '../provider-proxy/types.cjs';
+import { aG as SubscriptionDispatchProfile } from '../types-DsHBBk3h.cjs';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
@@ -16,6 +16,7 @@ import '../transformer/types.cjs';
 import '../transformer/TransformerService.cjs';
 import '../ports/web-search-backend.cjs';
 import '@omnicross/contracts/websearch-types';
+import '@omnicross/contracts/image-generation-types';
 
 /**
  * subscriptionRegistryPort — the serving-core seam for subscription dispatch

package/dist/outbound-api/subscriptionRegistryPort.d.ts

@@ -1,4 +1,4 @@
-import { SubscriptionDispatchProfile } from '../provider-proxy/types.js';
+import { aG as SubscriptionDispatchProfile } from '../types-CVRge76p.js';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
@@ -16,6 +16,7 @@ import '../transformer/types.js';
 import '../transformer/TransformerService.js';
 import '../ports/web-search-backend.js';
 import '@omnicross/contracts/websearch-types';
+import '@omnicross/contracts/image-generation-types';
 
 /**
  * subscriptionRegistryPort — the serving-core seam for subscription dispatch

package/dist/outbound-api/types.d.cts

@@ -1,3 +1,4 @@
+import '../types-CbglB73l.cjs';
 import '@omnicross/contracts/account-tokens-types';
 import '@omnicross/contracts/audit-types';
 import '@omnicross/contracts/billing-types';
@@ -6,10 +7,12 @@ import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import '../logger-4GvQNzhE.cjs';
 import '../ports/provider-config-source.cjs';
-import '../ProviderProxy-QdwNV6l1.cjs';
-import '../provider-proxy/types.cjs';
-export { S as AccountHealthConfig, A as AccountProbeConfig, a as AllowanceSchedulingConfig, C as ChatDispatchMode, b as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, c as EndpointRoutingConfig, F as FingerprintConfig, G as GatewayBinding, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, k as KindMappedEndpoint, M as MessagesModelKind, l as ModelKind, m as ModelPrefixTargets, Q as ModelRef, n as OutboundApiDeps, o as OutboundApiKeyCreated, p as OutboundApiKeyInfo, q as OutboundApiServerConfig, r as OutboundApiServerStatus, s as OutboundEndpoint, t as OutboundFormatUrls, u as OutboundKeyActivationMode, O as OutboundKeyDb, v as OutboundKeyDbRow, T as OutboundKeyModelRestrictionMode, w as OutboundKeyPolicy, x as OutboundProxyConfig, R as RequestRole, y as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-C2MwkLah.cjs';
+import '../ProviderProxy-CgIcCVwk.cjs';
+import '../types-DsHBBk3h.cjs';
+export { X as AccountHealthConfig, A as AccountProbeConfig, a as AllowanceSchedulingConfig, W as AnthropicConfigSegment, Y as AnthropicCountTokensMode, Z as AnthropicModelsShape, C as ChatDispatchMode, b as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, c as EndpointRoutingConfig, F as FingerprintConfig, G as GatewayBinding, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, _ as ImageModelCatalogReader, I as ImagesServerConfig, k as KindMappedEndpoint, M as MessagesModelKind, l as ModelKind, m as ModelPrefixTargets, T as ModelRef, n as OutboundApiDeps, o as OutboundApiKeyCreated, p as OutboundApiKeyInfo, q as OutboundApiServerConfig, r as OutboundApiServerStatus, s as OutboundEndpoint, t as OutboundFormatUrls, u as OutboundKeyActivationMode, O as OutboundKeyDb, v as OutboundKeyDbRow, $ as OutboundKeyModelRestrictionMode, w as OutboundKeyPolicy, x as OutboundPermission, y as OutboundProxyConfig, R as RequestRole, z as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-jjU24eYG.cjs';
 import '../pipeline/BoundAccountSelectionError.cjs';
+import '@omnicross/contracts/image-generation-types';
+import 'node:fs/promises';
 import '@omnicross/contracts/llm-config';
 import '../transformer/types.cjs';
 import '@omnicross/contracts/completion-types';

package/dist/outbound-api/types.d.ts

@@ -1,3 +1,4 @@
+import '../types-Bd72H4SB.js';
 import '@omnicross/contracts/account-tokens-types';
 import '@omnicross/contracts/audit-types';
 import '@omnicross/contracts/billing-types';
@@ -6,10 +7,12 @@ import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import '../logger-4GvQNzhE.js';
 import '../ports/provider-config-source.js';
-import '../ProviderProxy--ROec6VI.js';
-import '../provider-proxy/types.js';
-export { S as AccountHealthConfig, A as AccountProbeConfig, a as AllowanceSchedulingConfig, C as ChatDispatchMode, b as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, c as EndpointRoutingConfig, F as FingerprintConfig, G as GatewayBinding, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, k as KindMappedEndpoint, M as MessagesModelKind, l as ModelKind, m as ModelPrefixTargets, Q as ModelRef, n as OutboundApiDeps, o as OutboundApiKeyCreated, p as OutboundApiKeyInfo, q as OutboundApiServerConfig, r as OutboundApiServerStatus, s as OutboundEndpoint, t as OutboundFormatUrls, u as OutboundKeyActivationMode, O as OutboundKeyDb, v as OutboundKeyDbRow, T as OutboundKeyModelRestrictionMode, w as OutboundKeyPolicy, x as OutboundProxyConfig, R as RequestRole, y as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-BB8pxk_3.js';
+import '../ProviderProxy-DYoY5XoT.js';
+import '../types-CVRge76p.js';
+export { X as AccountHealthConfig, A as AccountProbeConfig, a as AllowanceSchedulingConfig, W as AnthropicConfigSegment, Y as AnthropicCountTokensMode, Z as AnthropicModelsShape, C as ChatDispatchMode, b as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, c as EndpointRoutingConfig, F as FingerprintConfig, G as GatewayBinding, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, _ as ImageModelCatalogReader, I as ImagesServerConfig, k as KindMappedEndpoint, M as MessagesModelKind, l as ModelKind, m as ModelPrefixTargets, T as ModelRef, n as OutboundApiDeps, o as OutboundApiKeyCreated, p as OutboundApiKeyInfo, q as OutboundApiServerConfig, r as OutboundApiServerStatus, s as OutboundEndpoint, t as OutboundFormatUrls, u as OutboundKeyActivationMode, O as OutboundKeyDb, v as OutboundKeyDbRow, $ as OutboundKeyModelRestrictionMode, w as OutboundKeyPolicy, x as OutboundPermission, y as OutboundProxyConfig, R as RequestRole, z as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-5T223WYQ.js';
 import '../pipeline/BoundAccountSelectionError.js';
+import '@omnicross/contracts/image-generation-types';
+import 'node:fs/promises';
 import '@omnicross/contracts/llm-config';
 import '../transformer/types.js';
 import '@omnicross/contracts/completion-types';

package/dist/outbound-api.cjs

@@ -63,31 +63,41 @@
 
 
 
-var _chunkTIT74RILcjs = require('./chunk-TIT74RIL.cjs');
+
+
+
+
+
+
+
+var _chunk7B56AJBBcjs = require('./chunk-7B56AJBB.cjs');
 require('./chunk-HQP3K7PU.cjs');
 require('./chunk-QVOB2DNX.cjs');
-require('./chunk-P7EM6BND.cjs');
-require('./chunk-ZQQUD66M.cjs');
-require('./chunk-5LNYGCIW.cjs');
-require('./chunk-CMVXX7ON.cjs');
+require('./chunk-7ZHBN75N.cjs');
+require('./chunk-3OPYJG76.cjs');
+require('./chunk-TVYA5JSQ.cjs');
+require('./chunk-NOITAVHA.cjs');
+require('./chunk-QWNUOR7F.cjs');
+require('./chunk-SQMAEDNE.cjs');
 require('./chunk-5RSZYQJH.cjs');
-require('./chunk-56QD3YW6.cjs');
-require('./chunk-QUSEZNYS.cjs');
+require('./chunk-6DDYNS2B.cjs');
+require('./chunk-KIQ2HA2A.cjs');
+require('./chunk-32SRZFFP.cjs');
 require('./chunk-2E42SAW3.cjs');
 require('./chunk-5UK3KLE2.cjs');
-require('./chunk-IIRPUVPH.cjs');
 require('./chunk-GBHYAGX3.cjs');
-require('./chunk-3OPYJG76.cjs');
-require('./chunk-3SCOLIPT.cjs');
+require('./chunk-MXI2PWIC.cjs');
 require('./chunk-RPII3E6Z.cjs');
 require('./chunk-6RPZADX3.cjs');
 require('./chunk-J3QQ6JS5.cjs');
 require('./chunk-UIBD2YY5.cjs');
 require('./chunk-R3HK6R4B.cjs');
+require('./chunk-KQBLZMP6.cjs');
+require('./chunk-OIKREZVQ.cjs');
 require('./chunk-QXD4MV2X.cjs');
 require('./chunk-NYUNU75A.cjs');
 require('./chunk-OTZC4TNH.cjs');
-require('./chunk-YWL7YZWS.cjs');
+require('./chunk-7LRTPNFL.cjs');
 require('./chunk-YNJNTCSQ.cjs');
 require('./chunk-SVNDB62D.cjs');
 require('./chunk-6QQG7YG3.cjs');
@@ -96,12 +106,19 @@ require('./chunk-6QQG7YG3.cjs');
 
 
 var _chunk25GXJCEZcjs = require('./chunk-25GXJCEZ.cjs');
-require('./chunk-MUHWHQVM.cjs');
-require('./chunk-Q27JY5RG.cjs');
+
+
+var _chunkFX325I5Qcjs = require('./chunk-FX325I5Q.cjs');
+require('./chunk-AEOZIDEB.cjs');
+
+
+
+var _chunkHCOQQAZEcjs = require('./chunk-HCOQQAZE.cjs');
 
 
 var _chunkAPYG5QD7cjs = require('./chunk-APYG5QD7.cjs');
 require('./chunk-L74VDN4A.cjs');
+require('./chunk-XSVNC2UD.cjs');
 require('./chunk-4YINUUKQ.cjs');
 
 
@@ -118,34 +135,27 @@ require('./chunk-4YINUUKQ.cjs');
 
 
 
-var _chunk4VZX5F4Tcjs = require('./chunk-4VZX5F4T.cjs');
+var _chunkT6NWPIYZcjs = require('./chunk-T6NWPIYZ.cjs');
 require('./chunk-QBZJ7P2T.cjs');
 
 
 var _chunk4IH4EL7Mcjs = require('./chunk-4IH4EL7M.cjs');
+require('./chunk-JMJBSACD.cjs');
+require('./chunk-GMMT7RVN.cjs');
+require('./chunk-UNEFIWXI.cjs');
 require('./chunk-A2YMUCBT.cjs');
-
-
-var _chunkUWDW6PN3cjs = require('./chunk-UWDW6PN3.cjs');
-
-
-
-var _chunkFCR77GYMcjs = require('./chunk-FCR77GYM.cjs');
-require('./chunk-AEOZIDEB.cjs');
-require('./chunk-XSVNC2UD.cjs');
 require('./chunk-GDIXXKF2.cjs');
-require('./chunk-OC6DOOFX.cjs');
-require('./chunk-RICPANBY.cjs');
+require('./chunk-VXRTQZF2.cjs');
+require('./chunk-WX2E2G7H.cjs');
 require('./chunk-77USGNRW.cjs');
-require('./chunk-AOFWNWLT.cjs');
-require('./chunk-RJUONLUQ.cjs');
+require('./chunk-IUL4VWNU.cjs');
+require('./chunk-OST5RJOJ.cjs');
 require('./chunk-235MXAGX.cjs');
 require('./chunk-HVBBDBS3.cjs');
 require('./chunk-NKVZ6Z3Y.cjs');
+require('./chunk-CTKM773J.cjs');
+require('./chunk-G4CZIUIB.cjs');
 require('./chunk-NZYN7C3P.cjs');
-require('./chunk-JMJBSACD.cjs');
-require('./chunk-GMMT7RVN.cjs');
-require('./chunk-UNEFIWXI.cjs');
 
 
 
@@ -233,4 +243,11 @@ require('./chunk-UNEFIWXI.cjs');
 
 
 
-exports.AUDIT_REDACTED = _chunkFCR77GYMcjs.AUDIT_REDACTED; exports.BoundAccountSelectionError = _chunk25GXJCEZcjs.BoundAccountSelectionError; exports.ConcurrencyQueueFullError = _chunkTIT74RILcjs.ConcurrencyQueueFullError; exports.ConcurrencyWaitCancelledError = _chunkTIT74RILcjs.ConcurrencyWaitCancelledError; exports.ConcurrencyWaitTimeoutError = _chunkTIT74RILcjs.ConcurrencyWaitTimeoutError; exports.DEFAULT_ACCOUNT_PROBE = _chunkTIT74RILcjs.DEFAULT_ACCOUNT_PROBE; exports.DEFAULT_ALLOWANCE_SCHEDULING = _chunkTIT74RILcjs.DEFAULT_ALLOWANCE_SCHEDULING; exports.DEFAULT_CONCURRENCY_QUEUE = _chunkTIT74RILcjs.DEFAULT_CONCURRENCY_QUEUE; exports.DEFAULT_FINGERPRINT = _chunkTIT74RILcjs.DEFAULT_FINGERPRINT; exports.DEFAULT_OUTBOUND_PORT = _chunkTIT74RILcjs.DEFAULT_OUTBOUND_PORT; exports.DEFAULT_USER_MESSAGE_QUEUE = _chunkTIT74RILcjs.DEFAULT_USER_MESSAGE_QUEUE; exports.ENDPOINT_MODEL_KINDS = _chunk4IH4EL7Mcjs.ENDPOINT_MODEL_KINDS; exports.KeySpendTracker = _chunkTIT74RILcjs.KeySpendTracker; exports.KeyedMutex = _chunkTIT74RILcjs.KeyedMutex; exports.OUTBOUND_API_SERVER_CONFIG_KEY = _chunkTIT74RILcjs.OUTBOUND_API_SERVER_CONFIG_KEY; exports.OutboundApiServer = _chunkTIT74RILcjs.OutboundApiServer; exports.OutboundConcurrencyGate = _chunkTIT74RILcjs.OutboundConcurrencyGate; exports.OutboundRateLimiter = _chunkTIT74RILcjs.OutboundRateLimiter; exports.SUBSCRIPTION_PROVIDER_IDS = _chunk4VZX5F4Tcjs.SUBSCRIPTION_PROVIDER_IDS; exports.SerialQueueTimeoutError = _chunkTIT74RILcjs.SerialQueueTimeoutError; exports.UserMessageSerialQueue = _chunkTIT74RILcjs.UserMessageSerialQueue; exports.__resetOutboundApiServerForTests = _chunkTIT74RILcjs.__resetOutboundApiServerForTests; exports.beginAuditCapture = _chunkUWDW6PN3cjs.beginAuditCapture; exports.beginBillingCapture = _chunkAPYG5QD7cjs.beginBillingCapture; exports.boundAccountSelectionMessage = _chunk25GXJCEZcjs.boundAccountSelectionMessage; exports.candidateBackgroundModelIds = _chunkTIT74RILcjs.candidateBackgroundModelIds; exports.candidateGatewayBindings = _chunkTIT74RILcjs.candidateGatewayBindings; exports.checkKeyQuota = _chunkTIT74RILcjs.checkKeyQuota; exports.classifyModelPrefix = _chunk4VZX5F4Tcjs.classifyModelPrefix; exports.computeKeyExpiry = _chunkTIT74RILcjs.computeKeyExpiry; exports.computeVoucherGrant = _chunkTIT74RILcjs.computeVoucherGrant; exports.createIntegrationKey = _chunkTIT74RILcjs.createIntegrationKey; exports.createNamedKey = _chunkTIT74RILcjs.createNamedKey; exports.defaultServerConfig = _chunkTIT74RILcjs.defaultServerConfig; exports.detectModelKind = _chunk4VZX5F4Tcjs.detectModelKind; exports.detectRequestRole = _chunk4VZX5F4Tcjs.detectRequestRole; exports.endpointSupportsSubscription = _chunk4VZX5F4Tcjs.endpointSupportsSubscription; exports.endpointToIngressFormat = _chunk4VZX5F4Tcjs.endpointToIngressFormat; exports.formatUrls = _chunkTIT74RILcjs.formatUrls; exports.gatewayBindingToEndpointConfig = _chunkTIT74RILcjs.gatewayBindingToEndpointConfig; exports.generateVoucherCode = _chunkTIT74RILcjs.generateVoucherCode; exports.getOutboundApiServer = _chunkTIT74RILcjs.getOutboundApiServer; exports.handleVoucherRedeem = _chunkTIT74RILcjs.handleVoucherRedeem; exports.hashKey = _chunkTIT74RILcjs.hashKey; exports.hashVoucherCode = _chunkTIT74RILcjs.hashVoucherCode; exports.isBoundAccountSelectionError = _chunk25GXJCEZcjs.isBoundAccountSelectionError; exports.isConcurrencyRejection = _chunkTIT74RILcjs.isConcurrencyRejection; exports.isKindMappedEndpoint = _chunk4VZX5F4Tcjs.isKindMappedEndpoint; exports.isRedeemRequest = _chunkTIT74RILcjs.isRedeemRequest; exports.isSerialQueueTimeout = _chunkTIT74RILcjs.isSerialQueueTimeout; exports.isSubscriptionProviderId = _chunk4VZX5F4Tcjs.isSubscriptionProviderId; exports.isUserMessageRequest = _chunkTIT74RILcjs.isUserMessageRequest; exports.legacyEndpointsToBindings = _chunkTIT74RILcjs.legacyEndpointsToBindings; exports.loadServerConfig = _chunkTIT74RILcjs.loadServerConfig; exports.mergeServerConfig = _chunkTIT74RILcjs.mergeServerConfig; exports.modelKindsForEndpoint = _chunk4VZX5F4Tcjs.modelKindsForEndpoint; exports.newVoucherId = _chunkTIT74RILcjs.newVoucherId; exports.normalizeAccountProbe = _chunkTIT74RILcjs.normalizeAccountProbe; exports.normalizeAllowanceScheduling = _chunkTIT74RILcjs.normalizeAllowanceScheduling; exports.normalizeAudit = _chunkTIT74RILcjs.normalizeAudit; exports.normalizeBilling = _chunkTIT74RILcjs.normalizeBilling; exports.normalizeFingerprint = _chunkTIT74RILcjs.normalizeFingerprint; exports.normalizeGatewayBindings = _chunkTIT74RILcjs.normalizeGatewayBindings; exports.normalizePrefixTargets = _chunkTIT74RILcjs.normalizePrefixTargets; exports.normalizeProxyConfig = _chunkTIT74RILcjs.normalizeProxyConfig; exports.normalizeProxySegment = _chunkTIT74RILcjs.normalizeProxySegment; exports.normalizeQueueSegments = _chunkTIT74RILcjs.normalizeQueueSegments; exports.normalizeServerConfig = _chunkTIT74RILcjs.normalizeServerConfig; exports.normalizeVoucher = _chunkTIT74RILcjs.normalizeVoucher; exports.normalizeWebhookDestination = _chunkTIT74RILcjs.normalizeWebhookDestination; exports.normalizeWebhookSegment = _chunkTIT74RILcjs.normalizeWebhookSegment; exports.parseModelRef = _chunk4VZX5F4Tcjs.parseModelRef; exports.pickModelRefFromList = _chunk4VZX5F4Tcjs.pickModelRefFromList; exports.randomBase62 = _chunkTIT74RILcjs.randomBase62; exports.redactAuditText = _chunkFCR77GYMcjs.redactAuditText; exports.resolveGatewayBinding = _chunkTIT74RILcjs.resolveGatewayBinding; exports.resolvePrefixTarget = _chunk4VZX5F4Tcjs.resolvePrefixTarget; exports.resolveRoute = _chunk4VZX5F4Tcjs.resolveRoute; exports.saveServerConfig = _chunkTIT74RILcjs.saveServerConfig; exports.startOfLocalDay = _chunkTIT74RILcjs.startOfLocalDay; exports.startOfLocalWeek = _chunkTIT74RILcjs.startOfLocalWeek; exports.toVoucherInfo = _chunkTIT74RILcjs.toVoucherInfo; exports.validateEndpointModelConfig = _chunk4VZX5F4Tcjs.validateEndpointModelConfig; exports.verifyKey = _chunkTIT74RILcjs.verifyKey; exports.verifyPresentedKey = _chunkTIT74RILcjs.verifyPresentedKey; exports.voucherCodePrefix = _chunkTIT74RILcjs.voucherCodePrefix;
+
+
+
+
+
+
+
+exports.AUDIT_REDACTED = _chunkHCOQQAZEcjs.AUDIT_REDACTED; exports.BoundAccountSelectionError = _chunk25GXJCEZcjs.BoundAccountSelectionError; exports.ConcurrencyQueueFullError = _chunk7B56AJBBcjs.ConcurrencyQueueFullError; exports.ConcurrencyWaitCancelledError = _chunk7B56AJBBcjs.ConcurrencyWaitCancelledError; exports.ConcurrencyWaitTimeoutError = _chunk7B56AJBBcjs.ConcurrencyWaitTimeoutError; exports.DEFAULT_ACCOUNT_PROBE = _chunk7B56AJBBcjs.DEFAULT_ACCOUNT_PROBE; exports.DEFAULT_ALLOWANCE_SCHEDULING = _chunk7B56AJBBcjs.DEFAULT_ALLOWANCE_SCHEDULING; exports.DEFAULT_CONCURRENCY_QUEUE = _chunk7B56AJBBcjs.DEFAULT_CONCURRENCY_QUEUE; exports.DEFAULT_FINGERPRINT = _chunk7B56AJBBcjs.DEFAULT_FINGERPRINT; exports.DEFAULT_IMAGES_SERVER_CONFIG = _chunk7B56AJBBcjs.DEFAULT_IMAGES_SERVER_CONFIG; exports.DEFAULT_OUTBOUND_PORT = _chunk7B56AJBBcjs.DEFAULT_OUTBOUND_PORT; exports.DEFAULT_USER_MESSAGE_QUEUE = _chunk7B56AJBBcjs.DEFAULT_USER_MESSAGE_QUEUE; exports.ENDPOINT_MODEL_KINDS = _chunk4IH4EL7Mcjs.ENDPOINT_MODEL_KINDS; exports.IMAGE_SERVER_HARD_CEILINGS = _chunk7B56AJBBcjs.IMAGE_SERVER_HARD_CEILINGS; exports.KeySpendTracker = _chunk7B56AJBBcjs.KeySpendTracker; exports.KeyedMutex = _chunk7B56AJBBcjs.KeyedMutex; exports.LEGACY_OUTBOUND_PERMISSIONS = _chunk7B56AJBBcjs.LEGACY_OUTBOUND_PERMISSIONS; exports.OUTBOUND_API_SERVER_CONFIG_KEY = _chunk7B56AJBBcjs.OUTBOUND_API_SERVER_CONFIG_KEY; exports.OutboundApiServer = _chunk7B56AJBBcjs.OutboundApiServer; exports.OutboundConcurrencyGate = _chunk7B56AJBBcjs.OutboundConcurrencyGate; exports.OutboundRateLimiter = _chunk7B56AJBBcjs.OutboundRateLimiter; exports.SUBSCRIPTION_PROVIDER_IDS = _chunkT6NWPIYZcjs.SUBSCRIPTION_PROVIDER_IDS; exports.SerialQueueTimeoutError = _chunk7B56AJBBcjs.SerialQueueTimeoutError; exports.UserMessageSerialQueue = _chunk7B56AJBBcjs.UserMessageSerialQueue; exports.__resetOutboundApiServerForTests = _chunk7B56AJBBcjs.__resetOutboundApiServerForTests; exports.beginAuditCapture = _chunkFX325I5Qcjs.beginAuditCapture; exports.beginBillingCapture = _chunkAPYG5QD7cjs.beginBillingCapture; exports.boundAccountSelectionMessage = _chunk25GXJCEZcjs.boundAccountSelectionMessage; exports.candidateBackgroundModelIds = _chunk7B56AJBBcjs.candidateBackgroundModelIds; exports.candidateGatewayBindings = _chunk7B56AJBBcjs.candidateGatewayBindings; exports.checkKeyQuota = _chunk7B56AJBBcjs.checkKeyQuota; exports.classifyModelPrefix = _chunkT6NWPIYZcjs.classifyModelPrefix; exports.computeKeyExpiry = _chunk7B56AJBBcjs.computeKeyExpiry; exports.computeVoucherGrant = _chunk7B56AJBBcjs.computeVoucherGrant; exports.createIntegrationKey = _chunk7B56AJBBcjs.createIntegrationKey; exports.createNamedKey = _chunk7B56AJBBcjs.createNamedKey; exports.defaultServerConfig = _chunk7B56AJBBcjs.defaultServerConfig; exports.detectModelKind = _chunkT6NWPIYZcjs.detectModelKind; exports.detectRequestRole = _chunkT6NWPIYZcjs.detectRequestRole; exports.effectiveOutboundPermissions = _chunk7B56AJBBcjs.effectiveOutboundPermissions; exports.endpointSupportsSubscription = _chunkT6NWPIYZcjs.endpointSupportsSubscription; exports.endpointToIngressFormat = _chunkT6NWPIYZcjs.endpointToIngressFormat; exports.formatUrls = _chunk7B56AJBBcjs.formatUrls; exports.gatewayBindingToEndpointConfig = _chunk7B56AJBBcjs.gatewayBindingToEndpointConfig; exports.generateVoucherCode = _chunk7B56AJBBcjs.generateVoucherCode; exports.getOutboundApiServer = _chunk7B56AJBBcjs.getOutboundApiServer; exports.handleVoucherRedeem = _chunk7B56AJBBcjs.handleVoucherRedeem; exports.hashKey = _chunk7B56AJBBcjs.hashKey; exports.hashVoucherCode = _chunk7B56AJBBcjs.hashVoucherCode; exports.isBoundAccountSelectionError = _chunk25GXJCEZcjs.isBoundAccountSelectionError; exports.isConcurrencyRejection = _chunk7B56AJBBcjs.isConcurrencyRejection; exports.isKindMappedEndpoint = _chunkT6NWPIYZcjs.isKindMappedEndpoint; exports.isRedeemRequest = _chunk7B56AJBBcjs.isRedeemRequest; exports.isSerialQueueTimeout = _chunk7B56AJBBcjs.isSerialQueueTimeout; exports.isSubscriptionProviderId = _chunkT6NWPIYZcjs.isSubscriptionProviderId; exports.isUserMessageRequest = _chunk7B56AJBBcjs.isUserMessageRequest; exports.legacyEndpointsToBindings = _chunk7B56AJBBcjs.legacyEndpointsToBindings; exports.loadServerConfig = _chunk7B56AJBBcjs.loadServerConfig; exports.mergeServerConfig = _chunk7B56AJBBcjs.mergeServerConfig; exports.modelKindsForEndpoint = _chunkT6NWPIYZcjs.modelKindsForEndpoint; exports.newVoucherId = _chunk7B56AJBBcjs.newVoucherId; exports.normalizeAccountProbe = _chunk7B56AJBBcjs.normalizeAccountProbe; exports.normalizeAllowanceScheduling = _chunk7B56AJBBcjs.normalizeAllowanceScheduling; exports.normalizeAudit = _chunk7B56AJBBcjs.normalizeAudit; exports.normalizeBilling = _chunk7B56AJBBcjs.normalizeBilling; exports.normalizeFingerprint = _chunk7B56AJBBcjs.normalizeFingerprint; exports.normalizeGatewayBindings = _chunk7B56AJBBcjs.normalizeGatewayBindings; exports.normalizeImagesServerConfig = _chunk7B56AJBBcjs.normalizeImagesServerConfig; exports.normalizePrefixTargets = _chunk7B56AJBBcjs.normalizePrefixTargets; exports.normalizeProxyConfig = _chunk7B56AJBBcjs.normalizeProxyConfig; exports.normalizeProxySegment = _chunk7B56AJBBcjs.normalizeProxySegment; exports.normalizeQueueSegments = _chunk7B56AJBBcjs.normalizeQueueSegments; exports.normalizeServerConfig = _chunk7B56AJBBcjs.normalizeServerConfig; exports.normalizeVoucher = _chunk7B56AJBBcjs.normalizeVoucher; exports.normalizeWebhookDestination = _chunk7B56AJBBcjs.normalizeWebhookDestination; exports.normalizeWebhookSegment = _chunk7B56AJBBcjs.normalizeWebhookSegment; exports.parseModelRef = _chunkT6NWPIYZcjs.parseModelRef; exports.pickModelRefFromList = _chunkT6NWPIYZcjs.pickModelRefFromList; exports.randomBase62 = _chunk7B56AJBBcjs.randomBase62; exports.redactAuditText = _chunkHCOQQAZEcjs.redactAuditText; exports.resolveGatewayBinding = _chunk7B56AJBBcjs.resolveGatewayBinding; exports.resolvePrefixTarget = _chunkT6NWPIYZcjs.resolvePrefixTarget; exports.resolveRoute = _chunkT6NWPIYZcjs.resolveRoute; exports.saveServerConfig = _chunk7B56AJBBcjs.saveServerConfig; exports.startOfLocalDay = _chunk7B56AJBBcjs.startOfLocalDay; exports.startOfLocalWeek = _chunk7B56AJBBcjs.startOfLocalWeek; exports.toVoucherInfo = _chunk7B56AJBBcjs.toVoucherInfo; exports.validateEndpointModelConfig = _chunkT6NWPIYZcjs.validateEndpointModelConfig; exports.validateImagesServerConfig = _chunk7B56AJBBcjs.validateImagesServerConfig; exports.validateOutboundPermissions = _chunk7B56AJBBcjs.validateOutboundPermissions; exports.verifyKey = _chunk7B56AJBBcjs.verifyKey; exports.verifyPresentedKey = _chunk7B56AJBBcjs.verifyPresentedKey; exports.voucherCodePrefix = _chunk7B56AJBBcjs.voucherCodePrefix;

package/dist/outbound-api.d.cts

@@ -1,18 +1,19 @@
 import { VoucherConfig } from '@omnicross/contracts/voucher-types';
-import { c as EndpointRoutingConfig, G as GatewayBinding, U as UserMessageQueueConfig, b as ConcurrencyQueueConfig, n as OutboundApiDeps, r as OutboundApiServerStatus, t as OutboundFormatUrls, A as AccountProbeConfig, a as AllowanceSchedulingConfig, F as FingerprintConfig, q as OutboundApiServerConfig, m as ModelPrefixTargets, x as OutboundProxyConfig, s as OutboundEndpoint, R as RequestRole, Q as ModelRef, k as KindMappedEndpoint, l as ModelKind, O as OutboundKeyDb, o as OutboundApiKeyCreated } from './types-C2MwkLah.cjs';
-export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, K as KeySpendReader, i as KeySpendSeeder, j as KeySpendTracker, M as MessagesModelKind, p as OutboundApiKeyInfo, u as OutboundKeyActivationMode, v as OutboundKeyDbRow, w as OutboundKeyPolicy, y as ResponsesModelKind, V as VoucherCreateInput, z as VoucherDb, B as computeVoucherGrant, D as generateVoucherCode, H as hashVoucherCode, I as newVoucherId, J as startOfLocalDay, L as startOfLocalWeek, N as toVoucherInfo, P as voucherCodePrefix } from './types-C2MwkLah.cjs';
+import { c as EndpointRoutingConfig, G as GatewayBinding, U as UserMessageQueueConfig, b as ConcurrencyQueueConfig, W as AnthropicConfigSegment, n as OutboundApiDeps, r as OutboundApiServerStatus, t as OutboundFormatUrls, A as AccountProbeConfig, a as AllowanceSchedulingConfig, F as FingerprintConfig, q as OutboundApiServerConfig, m as ModelPrefixTargets, y as OutboundProxyConfig, I as ImagesServerConfig, s as OutboundEndpoint, R as RequestRole, T as ModelRef, k as KindMappedEndpoint, l as ModelKind, x as OutboundPermission, O as OutboundKeyDb, o as OutboundApiKeyCreated } from './types-jjU24eYG.cjs';
+export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, K as KeySpendReader, i as KeySpendSeeder, j as KeySpendTracker, M as MessagesModelKind, p as OutboundApiKeyInfo, u as OutboundKeyActivationMode, v as OutboundKeyDbRow, w as OutboundKeyPolicy, z as ResponsesModelKind, V as VoucherCreateInput, B as VoucherDb, D as computeVoucherGrant, H as generateVoucherCode, J as hashVoucherCode, L as newVoucherId, N as startOfLocalDay, P as startOfLocalWeek, Q as toVoucherInfo, S as voucherCodePrefix } from './types-jjU24eYG.cjs';
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingConfig } from '@omnicross/contracts/billing-types';
 import { WebhookDestination, WebhookConfig } from '@omnicross/contracts/webhook-types';
+import { e as ImageApiLimits } from './types-CbglB73l.cjs';
 export { AUDIT_REDACTED, redactAuditText } from './outbound-api/auditRedact.cjs';
 export { AuditCaptureContext, beginAuditCapture } from './outbound-api/auditCapture.cjs';
 export { BillingCaptureContext, beginBillingCapture } from './outbound-api/billingCapture.cjs';
 import { K as KeyCostLimits, M as ModelRestriction } from './keyPolicy-zdWTu3CQ.cjs';
 export { a as KeyExpiryInput, b as KeyExpiryResult, c as KeySpend, Q as QuotaDecision, d as checkKeyQuota, e as computeKeyExpiry } from './keyPolicy-zdWTu3CQ.cjs';
 import http from 'node:http';
-import { IngressFormat } from './provider-proxy/types.cjs';
-export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-CVFE8KKe.cjs';
+import { D as IngressFormat } from './types-DsHBBk3h.cjs';
+export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-rpKQLyDO.cjs';
 export { BoundAccountFallbackPolicy, BoundAccountSelectionError, BoundAccountSelectionFailureReason, boundAccountSelectionMessage, isBoundAccountSelectionError } from './pipeline/BoundAccountSelectionError.cjs';
 import '@omnicross/contracts/health-logging-types';
 import './logger-4GvQNzhE.cjs';
@@ -21,7 +22,9 @@ import '@omnicross/contracts/llm-config';
 import './transformer/types.cjs';
 import '@omnicross/contracts/completion-types';
 import './transformer/TransformerService.cjs';
-import './ProviderProxy-QdwNV6l1.cjs';
+import './ProviderProxy-CgIcCVwk.cjs';
+import '@omnicross/contracts/image-generation-types';
+import 'node:fs/promises';
 import '@omnicross/contracts/usage-stats-types';
 import '@omnicross/contracts/subscription-types';
 import '@omnicross/contracts/usage-types';
@@ -62,6 +65,8 @@ declare const DEFAULT_OUTBOUND_PORT = 8765;
 interface ApplyConfigInput {
     enabled: boolean;
     networkBinding: boolean;
+    /** Additive Images URL publication; serving still depends on runtime capability. */
+    imagesEnabled?: boolean;
     endpoints: EndpointRoutingConfig[];
     /** Independent resource bindings; absent preserves legacy endpoint routing. */
     bindings?: GatewayBinding[];
@@ -73,6 +78,15 @@ interface ApplyConfigInput {
     /** Voucher segment (voucher-redemption #9). Read live per request; absent ⇒
      *  disabled ⇒ the `/redeem` endpoint is inert (zero regression). */
     voucher?: VoucherConfig;
+    /** Anthropic-protocol segment (claude-api-protocol-fidelity, §10). Read live
+     *  per request; the heartbeat value is hot-applied to the stream synthesizer. */
+    anthropic?: AnthropicConfigSegment;
+}
+/** Prepared listener/config publication used by the daemon's settings transaction. */
+interface PreparedOutboundApiConfig {
+    publish(): Promise<void>;
+    rollback(): Promise<void>;
+    dispose(): Promise<void>;
 }
 declare class OutboundApiServer {
     private readonly deps;
@@ -86,6 +100,10 @@ declare class OutboundApiServer {
     private userMessageQueue;
     private concurrencyQueue;
     private voucherConfig;
+    private anthropicConfig;
+    private imagesEnabled;
+    /** R10 `/api/hello` switch (§10 `anthropic.apiHello`, default true). */
+    private apiHelloEnabled;
     private readonly rateLimiter;
     /**
      * Redeem-attempt limiter (voucher-redemption #9, design D6) — a SEPARATE bucket
@@ -111,12 +129,35 @@ declare class OutboundApiServer {
      * in place (read live per request — no restart).
      */
     applyConfig(input: ApplyConfigInput): Promise<void>;
+    /**
+     * Prepare any new listener before persistence when the target can coexist with
+     * the current socket. A live fixed-port address-only change cannot be made
+     * failure-atomic on every supported platform because the replacement cannot
+     * coexist with the old socket, so reject it before persistence instead of
+     * performing a fallible close-then-bind during publication.
+     */
+    prepareConfig(input: ApplyConfigInput): Promise<PreparedOutboundApiConfig>;
     /** Start the listener on `bindAddr:port`, falling back on EADDRINUSE. */
     start(bindAddr: string, port: number): Promise<number>;
     /** Bind once; on EADDRINUSE retry with an ephemeral port (port 0). */
-    private listen;
+    private listenDetached;
+    private createHttpServer;
+    private installConfigSnapshot;
+    private captureRuntimeSnapshot;
+    private installRuntimeSnapshot;
+    private restoreRuntimeSnapshot;
+    private closeServer;
+    /** Publication already swapped the authoritative pointer; retirement cannot fail it. */
+    private closePublishedServer;
+    private announcePublishedListener;
     /** Per-request handler. Auth is enforced on EVERY request (incl. loopback). */
     private onRequest;
+    /**
+     * Serve `HEAD /api/hello` (exact path, query tolerated) with a bare 200 —
+     * returning true when it handled the request. Unauthenticated by design and
+     * gated on `anthropic.apiHello` (default true).
+     */
+    private tryServeApiHello;
     /**
      * Serve `GET|HEAD /health` (+ `/healthz`) from the injected provider, returning
      * true when it handled the request. 200 when `ok`, else 503; secret-free body.
@@ -321,6 +362,43 @@ declare function saveServerConfig(store: ApiServerSettingsStore, config: Outboun
 /** Apply a partial patch to a config, returning the merged whole. */
 declare function mergeServerConfig(current: OutboundApiServerConfig, patch: Partial<OutboundApiServerConfig>): OutboundApiServerConfig;
 
+/** Immutable upper bounds used by both tolerant reads and strict admin writes. */
+declare const IMAGE_SERVER_HARD_CEILINGS: Readonly<{
+    queue: Readonly<{
+        maxConcurrentJobsPerAccount: 8;
+        maxQueuedJobs: 1000;
+        queueTimeoutMs: number;
+        generationTimeoutMs: number;
+    }>;
+    temporary: Readonly<{
+        maxActiveScopes: 256;
+        maxTotalBytes: number;
+        maxTenantBytes: number;
+        staleAfterMs: number;
+        cleanupIntervalMs: number;
+    }>;
+    limits: Readonly<ImageApiLimits>;
+    references: Readonly<{
+        ttlMs: number;
+        maxArtifactBytes: number;
+        maxTotalBytes: number;
+        maxTenantBytes: number;
+        maxEntries: 1000000;
+        maxCalls: 2000000;
+        maxResponses: 1000000;
+        maxTombstones: 2000000;
+        tombstoneTtlMs: number;
+        cleanupIntervalMs: number;
+    }>;
+    evidenceTtlMs: number;
+}>;
+/** Migration-safe default: configured off, finite everywhere, and remote-disabled. */
+declare const DEFAULT_IMAGES_SERVER_CONFIG: Readonly<ImagesServerConfig>;
+/** Tolerant read normalization: malformed members fall back or clamp, never throw. */
+declare function normalizeImagesServerConfig(value: unknown): ImagesServerConfig;
+/** Strict structural/range validation. Daemon validation adds filesystem and resolver policy. */
+declare function validateImagesServerConfig(value: unknown): string[];
+
 /**
  * Either the winning route projected to the resolver shape, or `none` — no
  * enabled route for this key/endpoint could serve the request. There is no
@@ -690,7 +768,15 @@ declare function createNamedKey(db: OutboundKeyDb, name: string): Promise<Outbou
  * Mint the local gateway key used by native CLI configuration adapters. Unlike
  * a user-distributed key it is explicitly loopback-only and endpoint-scoped.
  */
-declare function createIntegrationKey(db: OutboundKeyDb, name: string, allowedEndpoints?: OutboundEndpoint[]): Promise<OutboundApiKeyCreated>;
+declare function createIntegrationKey(db: OutboundKeyDb, name: string, allowedEndpoints?: OutboundPermission[]): Promise<OutboundApiKeyCreated>;
+declare const LEGACY_OUTBOUND_PERMISSIONS: readonly OutboundPermission[];
+/** Strict write-edge validator. Stored-row reads use fail-closed interpretation below. */
+declare function validateOutboundPermissions(value: unknown): OutboundPermission[];
+/**
+ * Authoritative legacy interpretation. Absence preserves only the four historic
+ * families; malformed persisted data denies all instead of widening access.
+ */
+declare function effectiveOutboundPermissions(value: unknown): readonly OutboundPermission[];
 /**
  * A verified key + the enforcement inputs carried from the row so the wire layer
  * runs its policy checks WITHOUT a second DB read (mirrors `maxConcurrency`).
@@ -698,7 +784,7 @@ declare function createIntegrationKey(db: OutboundKeyDb, name: string, allowedEn
 interface VerifiedKey {
     id: string;
     kind?: 'client' | 'integration';
-    allowedEndpoints?: OutboundEndpoint[];
+    allowedEndpoints: OutboundPermission[];
     loopbackOnly?: boolean;
     /**
      * The key's per-key concurrency ceiling, carried from the row so the wire
@@ -920,4 +1006,4 @@ declare function getOutboundApiServer(deps?: OutboundApiDeps, onPortChange?: (po
 /** Reset the singleton (tests / teardown only). */
 declare function __resetOutboundApiServerForTests(): void;
 
-export { AccountProbeConfig, AllowanceSchedulingConfig, type ApiServerSettingsStore, type ApplyConfigInput, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_ALLOWANCE_SCHEDULING, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, GatewayBinding, type GatewayBindingResolution, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundProxyConfig, OutboundRateLimiter, RequestRole, type ResolveGatewayBindingInput, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, candidateBackgroundModelIds, candidateGatewayBindings, classifyModelPrefix, createIntegrationKey, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, endpointToIngressFormat, formatUrls, gatewayBindingToEndpointConfig, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, legacyEndpointsToBindings, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAllowanceScheduling, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizeGatewayBindings, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, resolveGatewayBinding, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, verifyKey, verifyPresentedKey };
+export { AccountProbeConfig, AllowanceSchedulingConfig, type ApiServerSettingsStore, type ApplyConfigInput, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_ALLOWANCE_SCHEDULING, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_IMAGES_SERVER_CONFIG, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, GatewayBinding, type GatewayBindingResolution, IMAGE_SERVER_HARD_CEILINGS, ImagesServerConfig, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, LEGACY_OUTBOUND_PERMISSIONS, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundPermission, OutboundProxyConfig, OutboundRateLimiter, type PreparedOutboundApiConfig, RequestRole, type ResolveGatewayBindingInput, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, candidateBackgroundModelIds, candidateGatewayBindings, classifyModelPrefix, createIntegrationKey, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, effectiveOutboundPermissions, endpointToIngressFormat, formatUrls, gatewayBindingToEndpointConfig, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, legacyEndpointsToBindings, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAllowanceScheduling, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizeGatewayBindings, normalizeImagesServerConfig, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, resolveGatewayBinding, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateImagesServerConfig, validateOutboundPermissions, verifyKey, verifyPresentedKey };