@omnicross/core 0.1.10 → 0.2.0

package/dist/transformer/transformers/OpenAITransformer.cjs

@@ -1,7 +1,7 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunk56QD3YW6cjs = require('../../chunk-56QD3YW6.cjs');
-require('../../chunk-AOFWNWLT.cjs');
+var _chunkQWNUOR7Fcjs = require('../../chunk-QWNUOR7F.cjs');
+require('../../chunk-IUL4VWNU.cjs');
 
 
-exports.OpenAITransformer = _chunk56QD3YW6cjs.OpenAITransformer;
+exports.OpenAITransformer = _chunkQWNUOR7Fcjs.OpenAITransformer;

package/dist/transformer/transformers/OpenAITransformer.js

@@ -1,7 +1,7 @@
 import {
   OpenAITransformer
-} from "../../chunk-CCVRRJOX.js";
-import "../../chunk-N2EIM2XJ.js";
+} from "../../chunk-7PIUVCKK.js";
+import "../../chunk-ZLNHPUFA.js";
 export {
   OpenAITransformer
 };

package/dist/transformer/transformers.cjs

@@ -3,26 +3,27 @@
 
 
 
-var _chunkP7EM6BNDcjs = require('../chunk-P7EM6BND.cjs');
+var _chunkTVYA5JSQcjs = require('../chunk-TVYA5JSQ.cjs');
 
 
-var _chunkZQQUD66Mcjs = require('../chunk-ZQQUD66M.cjs');
+var _chunkNOITAVHAcjs = require('../chunk-NOITAVHA.cjs');
 
 
-var _chunk5LNYGCIWcjs = require('../chunk-5LNYGCIW.cjs');
+var _chunkQWNUOR7Fcjs = require('../chunk-QWNUOR7F.cjs');
 
 
-var _chunkCMVXX7ONcjs = require('../chunk-CMVXX7ON.cjs');
+var _chunkSQMAEDNEcjs = require('../chunk-SQMAEDNE.cjs');
 require('../chunk-5RSZYQJH.cjs');
+require('../chunk-6DDYNS2B.cjs');
 
 
-var _chunk56QD3YW6cjs = require('../chunk-56QD3YW6.cjs');
+var _chunkKIQ2HA2Acjs = require('../chunk-KIQ2HA2A.cjs');
 
 
-var _chunkOC6DOOFXcjs = require('../chunk-OC6DOOFX.cjs');
-require('../chunk-RICPANBY.cjs');
+var _chunkVXRTQZF2cjs = require('../chunk-VXRTQZF2.cjs');
+require('../chunk-WX2E2G7H.cjs');
 require('../chunk-77USGNRW.cjs');
-require('../chunk-AOFWNWLT.cjs');
+require('../chunk-IUL4VWNU.cjs');
 
 
 
@@ -33,4 +34,4 @@ require('../chunk-AOFWNWLT.cjs');
 
 
 
-exports.AnthropicTransformer = _chunkZQQUD66Mcjs.AnthropicTransformer; exports.BUILTIN_TRANSFORMER_NAMES = _chunkP7EM6BNDcjs.BUILTIN_TRANSFORMER_NAMES; exports.BuiltinTransformers = _chunkP7EM6BNDcjs.BuiltinTransformers; exports.GeminiCodeAssistTransformer = _chunkOC6DOOFXcjs.GeminiCodeAssistTransformer; exports.GeminiTransformer = _chunk5LNYGCIWcjs.GeminiTransformer; exports.OpenAIResponseTransformer = _chunkCMVXX7ONcjs.OpenAIResponseTransformer; exports.OpenAITransformer = _chunk56QD3YW6cjs.OpenAITransformer; exports.getBuiltinTransformers = _chunkP7EM6BNDcjs.getBuiltinTransformers; exports.registerBuiltinTransformers = _chunkP7EM6BNDcjs.registerBuiltinTransformers;
+exports.AnthropicTransformer = _chunkSQMAEDNEcjs.AnthropicTransformer; exports.BUILTIN_TRANSFORMER_NAMES = _chunkTVYA5JSQcjs.BUILTIN_TRANSFORMER_NAMES; exports.BuiltinTransformers = _chunkTVYA5JSQcjs.BuiltinTransformers; exports.GeminiCodeAssistTransformer = _chunkVXRTQZF2cjs.GeminiCodeAssistTransformer; exports.GeminiTransformer = _chunkKIQ2HA2Acjs.GeminiTransformer; exports.OpenAIResponseTransformer = _chunkNOITAVHAcjs.OpenAIResponseTransformer; exports.OpenAITransformer = _chunkQWNUOR7Fcjs.OpenAITransformer; exports.getBuiltinTransformers = _chunkTVYA5JSQcjs.getBuiltinTransformers; exports.registerBuiltinTransformers = _chunkTVYA5JSQcjs.registerBuiltinTransformers;

package/dist/transformer/transformers.js

@@ -3,26 +3,27 @@ import {
   BuiltinTransformers,
   getBuiltinTransformers,
   registerBuiltinTransformers
-} from "../chunk-NGYOO5TO.js";
+} from "../chunk-FJNKXOWE.js";
 import {
-  AnthropicTransformer
-} from "../chunk-HKB656B4.js";
+  OpenAIResponseTransformer
+} from "../chunk-V53ZEFXC.js";
 import {
-  GeminiTransformer
-} from "../chunk-55FMGZ3L.js";
+  OpenAITransformer
+} from "../chunk-7PIUVCKK.js";
 import {
-  OpenAIResponseTransformer
-} from "../chunk-45FHEOKW.js";
+  AnthropicTransformer
+} from "../chunk-6OC3ORW6.js";
 import "../chunk-FU7EAR73.js";
+import "../chunk-LFEH7CEO.js";
 import {
-  OpenAITransformer
-} from "../chunk-CCVRRJOX.js";
+  GeminiTransformer
+} from "../chunk-HN74IGEO.js";
 import {
   GeminiCodeAssistTransformer
-} from "../chunk-2UTGX6FM.js";
-import "../chunk-S3DYFEBE.js";
+} from "../chunk-4VVCXVB7.js";
+import "../chunk-R4VCO2CB.js";
 import "../chunk-WYVGULTQ.js";
-import "../chunk-N2EIM2XJ.js";
+import "../chunk-ZLNHPUFA.js";
 export {
   AnthropicTransformer,
   BUILTIN_TRANSFORMER_NAMES,

package/dist/transformer/types.d.cts

@@ -3,14 +3,34 @@ import { ThinkLevel } from '@omnicross/contracts/completion-types';
 export { ThinkLevel } from '@omnicross/contracts/completion-types';
 
 /**
- * TransformerService Types
+ * transformWarnings — the `_transformWarnings` audit side-channel
+ * (`claude-api-transform-fidelity`, R7 / design D2).
  *
- * Type definitions for the Transformer system, providing unified
- * request/response formats and transformer chain configuration.
+ * When a decoded ingress field (top_k, metadata_user_id, stop on Responses,
+ * redacted_thinking, …) has NO representation on the target wire, the encoder
+ * records it here instead of silently dropping it: the entry carries the FIELD
+ * NAME and target only — NEVER the value (values may carry user content), so
+ * the channel is safe to log.
  *
- * @module transformer/types
+ * The channel rides the Unified request (the `_serverSideTools` precedent) and
+ * is stripped at every encoder boundary — the OpenAI-chat blacklist lists it
+ * and the Responses/Gemini/Anthropic builders construct their bodies
+ * field-by-field — so it can never serialize into an upstream request.
+ *
+ * §9's `dropped_field{field}` metric is a module-level counter (no metrics
+ * registry in this repo — the same minimal-observability precedent as B's
+ * stop_reason counter) plus a once-per-field console.warn so a hot loop of
+ * dropping requests doesn't spam the log.
+ *
+ * @module transformer/transformWarnings
  */
 
+/** One dropped-field audit entry. `field`/`target` names only — never values. */
+interface DroppedFieldEntry {
+    field: string;
+    target: string;
+}
+
 /**
  * Thinking content with optional signature for extended context
  */
@@ -121,6 +141,19 @@ interface UnifiedChatRequest {
     reasoning?: ReasoningConfig;
     /** Native OpenAI Chat field retained by the identity-shaped ingress. */
     reasoning_effort?: string;
+    /** Anthropic `stop_sequences` → the OpenAI chat `stop` / Gemini `stopSequences`. */
+    stop?: string[];
+    top_p?: number;
+    /** Anthropic-only sampling knob; Gemini `topK`, OpenAI wires have none. */
+    top_k?: number;
+    /** Anthropic `metadata.user_id` → OpenAI chat `user`. */
+    metadata_user_id?: string;
+    /**
+     * Internal-only transform audit side channel (R7): field names dropped for a
+     * target wire, never values. Stripped at every encoder boundary — must never
+     * serialize into an upstream body. See `transformer/transformWarnings`.
+     */
+    _transformWarnings?: DroppedFieldEntry[];
     /**
      * Internal-only routing metadata. Populated by callers (CompletionService /
      * the host's engine adapters and proxy servers) so the usage-capture hook can attribute
@@ -398,6 +431,8 @@ interface ResolvedTransformerChain {
 interface TransformRequestResult {
     /** Transformed request body */
     requestBody: unknown;
+    /** Post-endpoint, pre-target Unified request, when an endpoint decoder ran. */
+    endpointRequest?: UnifiedChatRequest;
     /** Additional request configuration */
     config: RequestConfig;
     /** Whether to bypass further transformations */

package/dist/transformer/types.d.ts

@@ -3,14 +3,34 @@ import { ThinkLevel } from '@omnicross/contracts/completion-types';
 export { ThinkLevel } from '@omnicross/contracts/completion-types';
 
 /**
- * TransformerService Types
+ * transformWarnings — the `_transformWarnings` audit side-channel
+ * (`claude-api-transform-fidelity`, R7 / design D2).
  *
- * Type definitions for the Transformer system, providing unified
- * request/response formats and transformer chain configuration.
+ * When a decoded ingress field (top_k, metadata_user_id, stop on Responses,
+ * redacted_thinking, …) has NO representation on the target wire, the encoder
+ * records it here instead of silently dropping it: the entry carries the FIELD
+ * NAME and target only — NEVER the value (values may carry user content), so
+ * the channel is safe to log.
  *
- * @module transformer/types
+ * The channel rides the Unified request (the `_serverSideTools` precedent) and
+ * is stripped at every encoder boundary — the OpenAI-chat blacklist lists it
+ * and the Responses/Gemini/Anthropic builders construct their bodies
+ * field-by-field — so it can never serialize into an upstream request.
+ *
+ * §9's `dropped_field{field}` metric is a module-level counter (no metrics
+ * registry in this repo — the same minimal-observability precedent as B's
+ * stop_reason counter) plus a once-per-field console.warn so a hot loop of
+ * dropping requests doesn't spam the log.
+ *
+ * @module transformer/transformWarnings
  */
 
+/** One dropped-field audit entry. `field`/`target` names only — never values. */
+interface DroppedFieldEntry {
+    field: string;
+    target: string;
+}
+
 /**
  * Thinking content with optional signature for extended context
  */
@@ -121,6 +141,19 @@ interface UnifiedChatRequest {
     reasoning?: ReasoningConfig;
     /** Native OpenAI Chat field retained by the identity-shaped ingress. */
     reasoning_effort?: string;
+    /** Anthropic `stop_sequences` → the OpenAI chat `stop` / Gemini `stopSequences`. */
+    stop?: string[];
+    top_p?: number;
+    /** Anthropic-only sampling knob; Gemini `topK`, OpenAI wires have none. */
+    top_k?: number;
+    /** Anthropic `metadata.user_id` → OpenAI chat `user`. */
+    metadata_user_id?: string;
+    /**
+     * Internal-only transform audit side channel (R7): field names dropped for a
+     * target wire, never values. Stripped at every encoder boundary — must never
+     * serialize into an upstream body. See `transformer/transformWarnings`.
+     */
+    _transformWarnings?: DroppedFieldEntry[];
     /**
      * Internal-only routing metadata. Populated by callers (CompletionService /
      * the host's engine adapters and proxy servers) so the usage-capture hook can attribute
@@ -398,6 +431,8 @@ interface ResolvedTransformerChain {
 interface TransformRequestResult {
     /** Transformed request body */
     requestBody: unknown;
+    /** Post-endpoint, pre-target Unified request, when an endpoint decoder ran. */
+    endpointRequest?: UnifiedChatRequest;
     /** Additional request configuration */
     config: RequestConfig;
     /** Whether to bypass further transformations */

package/dist/transformer.cjs

@@ -1,21 +1,22 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});require('./chunk-QVOB2DNX.cjs');
 
 
-var _chunkP7EM6BNDcjs = require('./chunk-P7EM6BND.cjs');
-require('./chunk-ZQQUD66M.cjs');
-require('./chunk-5LNYGCIW.cjs');
-require('./chunk-CMVXX7ON.cjs');
-require('./chunk-5RSZYQJH.cjs');
-require('./chunk-56QD3YW6.cjs');
+var _chunk7ZHBN75Ncjs = require('./chunk-7ZHBN75N.cjs');
 
 
-var _chunkIIRPUVPHcjs = require('./chunk-IIRPUVPH.cjs');
-require('./chunk-GBHYAGX3.cjs');
+var _chunk3OPYJG76cjs = require('./chunk-3OPYJG76.cjs');
 
 
-var _chunk3OPYJG76cjs = require('./chunk-3OPYJG76.cjs');
-require('./chunk-OC6DOOFX.cjs');
-require('./chunk-RICPANBY.cjs');
+var _chunkTVYA5JSQcjs = require('./chunk-TVYA5JSQ.cjs');
+require('./chunk-NOITAVHA.cjs');
+require('./chunk-QWNUOR7F.cjs');
+require('./chunk-SQMAEDNE.cjs');
+require('./chunk-5RSZYQJH.cjs');
+require('./chunk-6DDYNS2B.cjs');
+require('./chunk-KIQ2HA2A.cjs');
+require('./chunk-GBHYAGX3.cjs');
+require('./chunk-VXRTQZF2.cjs');
+require('./chunk-WX2E2G7H.cjs');
 require('./chunk-77USGNRW.cjs');
 
 
@@ -26,7 +27,7 @@ require('./chunk-77USGNRW.cjs');
 
 
 
-var _chunkAOFWNWLTcjs = require('./chunk-AOFWNWLT.cjs');
+var _chunkIUL4VWNUcjs = require('./chunk-IUL4VWNU.cjs');
 
 
 
@@ -39,4 +40,4 @@ var _chunkAOFWNWLTcjs = require('./chunk-AOFWNWLT.cjs');
 
 
 
-exports.THINK_LEVELS = _chunkAOFWNWLTcjs.THINK_LEVELS; exports.TransformerChainExecutor = _chunkIIRPUVPHcjs.TransformerChainExecutor; exports.TransformerService = _chunk3OPYJG76cjs.TransformerService; exports.extractReasoningIntent = _chunkAOFWNWLTcjs.extractReasoningIntent; exports.normalizeThinkLevel = _chunkAOFWNWLTcjs.normalizeThinkLevel; exports.registerBuiltinTransformers = _chunkP7EM6BNDcjs.registerBuiltinTransformers; exports.resolveReasoningEffort = _chunkAOFWNWLTcjs.resolveReasoningEffort; exports.resolveReasoningPlan = _chunkAOFWNWLTcjs.resolveReasoningPlan; exports.resolveReasoningTokenLimit = _chunkAOFWNWLTcjs.resolveReasoningTokenLimit; exports.resolveRequestReasoning = _chunkAOFWNWLTcjs.resolveRequestReasoning; exports.resolveTargetModelCapabilities = _chunkAOFWNWLTcjs.resolveTargetModelCapabilities;
+exports.THINK_LEVELS = _chunkIUL4VWNUcjs.THINK_LEVELS; exports.TransformerChainExecutor = _chunk7ZHBN75Ncjs.TransformerChainExecutor; exports.TransformerService = _chunk3OPYJG76cjs.TransformerService; exports.extractReasoningIntent = _chunkIUL4VWNUcjs.extractReasoningIntent; exports.normalizeThinkLevel = _chunkIUL4VWNUcjs.normalizeThinkLevel; exports.registerBuiltinTransformers = _chunkTVYA5JSQcjs.registerBuiltinTransformers; exports.resolveReasoningEffort = _chunkIUL4VWNUcjs.resolveReasoningEffort; exports.resolveReasoningPlan = _chunkIUL4VWNUcjs.resolveReasoningPlan; exports.resolveReasoningTokenLimit = _chunkIUL4VWNUcjs.resolveReasoningTokenLimit; exports.resolveRequestReasoning = _chunkIUL4VWNUcjs.resolveRequestReasoning; exports.resolveTargetModelCapabilities = _chunkIUL4VWNUcjs.resolveTargetModelCapabilities;

package/dist/transformer.js

@@ -1,21 +1,22 @@
 import "./chunk-WTQMX2Q6.js";
-import {
-  registerBuiltinTransformers
-} from "./chunk-NGYOO5TO.js";
-import "./chunk-HKB656B4.js";
-import "./chunk-55FMGZ3L.js";
-import "./chunk-45FHEOKW.js";
-import "./chunk-FU7EAR73.js";
-import "./chunk-CCVRRJOX.js";
 import {
   TransformerChainExecutor
-} from "./chunk-WNKWAEUR.js";
-import "./chunk-MZNPGW5Q.js";
+} from "./chunk-EYGBM2VC.js";
 import {
   TransformerService
 } from "./chunk-DK4A7DLE.js";
-import "./chunk-2UTGX6FM.js";
-import "./chunk-S3DYFEBE.js";
+import {
+  registerBuiltinTransformers
+} from "./chunk-FJNKXOWE.js";
+import "./chunk-V53ZEFXC.js";
+import "./chunk-7PIUVCKK.js";
+import "./chunk-6OC3ORW6.js";
+import "./chunk-FU7EAR73.js";
+import "./chunk-LFEH7CEO.js";
+import "./chunk-HN74IGEO.js";
+import "./chunk-MZNPGW5Q.js";
+import "./chunk-4VVCXVB7.js";
+import "./chunk-R4VCO2CB.js";
 import "./chunk-WYVGULTQ.js";
 import {
   THINK_LEVELS,
@@ -26,7 +27,7 @@ import {
   resolveReasoningTokenLimit,
   resolveRequestReasoning,
   resolveTargetModelCapabilities
-} from "./chunk-N2EIM2XJ.js";
+} from "./chunk-ZLNHPUFA.js";
 export {
   THINK_LEVELS,
   TransformerChainExecutor,

package/dist/{types-BB8pxk_3.d.ts → types-5T223WYQ.d.ts}

@@ -1,3 +1,4 @@
+import { e as ImageApiLimits } from './types-Bd72H4SB.js';
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingConfig } from '@omnicross/contracts/billing-types';
@@ -6,11 +7,49 @@ import { VoucherRecord, VoucherGrant, VoucherInfo, VoucherConfig } from '@omnicr
 import { WebhookConfig } from '@omnicross/contracts/webhook-types';
 import { L as Logger } from './logger-4GvQNzhE.js';
 import { ProviderConfigSource } from './ports/provider-config-source.js';
-import { P as ProviderProxy } from './ProviderProxy--ROec6VI.js';
-import { ProviderProxyDeps } from './provider-proxy/types.js';
+import { P as ProviderProxy } from './ProviderProxy-DYoY5XoT.js';
+import { W as ProviderProxyDeps } from './types-CVRge76p.js';
 import { BoundAccountFallbackPolicy } from './pipeline/BoundAccountSelectionError.js';
 import { c as KeySpend } from './keyPolicy-zdWTu3CQ.js';
 
+/**
+ * anthropicCountTokens — the `POST /v1/messages/count_tokens` handler
+ * (`claude-api-routing-errors`, R2 passthrough+reject subset).
+ *
+ * Before this module, the substring `/v1/messages` match routed count_tokens
+ * into the FULL generation pipeline — every context-stats call burned a real
+ * upstream inference (BYO money, subscription 5h-window quota) and returned a
+ * Message JSON instead of `{"input_tokens":N}` (audit F-1, P0).
+ *
+ * Strategies (portfolio-locked default: `'auto'`):
+ *  - **passthrough** (Anthropic-wire upstream — `plan.sameFormat`): strip the
+ *    generation-only fields the count_tokens endpoint rejects (`stream`,
+ *    `max_tokens`), rewrite `model` to the resolved upstream model, and POST to
+ *    `<upstream>/v1/messages/count_tokens` via the SAME same-format fetches the
+ *    generation path uses (credential injection, beta merge, claude header
+ *    baseline all inherited). The response — success OR failure — relays
+ *    verbatim with its real status (an Anthropic-wire error body already IS
+ *    the official shape; wrapping it would violate the verbatim moat).
+ *  - **estimate** (Change B; explicit config, or `auto` on a translation
+ *    upstream): a PURE-LOCAL heuristic estimate (`anthropicCountEstimate.ts`)
+ *    answered as `{"input_tokens":N}` with the `x-omnicross-count-estimate:
+ *    true` marker header — zero upstream calls, never recorded as usage.
+ *  - **reject** (explicit config, or `passthrough` degraded on a translation
+ *    upstream): a clean Anthropic 404 `not_found_error` with ZERO upstream
+ *    calls — Claude Code treats it as "endpoint absent" and falls back to its
+ *    local usage estimation.
+ *
+ * A free endpoint: no usage recording, no concurrency gate (the outbound face
+ * bypasses its gate before dispatch), single attempt — no 401 refresh retry,
+ * no subscription health marking (a failed count_tokens must not cool an
+ * account that serves inference; the inference path drives those itself).
+ *
+ * @module provider-proxy/ingress/anthropicCountTokens
+ */
+
+/** The operator-facing strategy config (§10 `anthropic.countTokens.mode`). */
+type CountTokensMode = 'auto' | 'passthrough' | 'estimate' | 'reject';
+
 /**
  * keySpendTracker — a cheap in-memory per-key accumulated-spend cache
  * (`outbound-key-policy`, design D3).
@@ -201,23 +240,56 @@ interface VoucherDb {
     voucherList(): Promise<VoucherRecord[]>;
 }
 
-/**
- * Shared contract types for the outbound API server (`outbound-api-server`).
- *
- * The outbound server is a SEPARATE long-lived HTTP listener (distinct from the
- * resident loopback `ProviderProxy`) that authenticates external callers via
- * named API keys and routes their requests through the EXISTING `provider-proxy`
- * ingress parsers + transformer — there is exactly one conversion stack.
- *
- * These types are kept in their own module so the server, router, auth, rate
- * limiter, role detection, and route resolver can share shapes without circular
- * imports.
- *
- * @module outbound-api/types
- */
-
 /** The four endpoints, 1:1 with the four wire-format ingress parsers. */
 type OutboundEndpoint = 'chat' | 'responses' | 'messages' | 'gemini';
+/** Named-key authorization vocabulary. Images is deliberately not a text route. */
+type OutboundPermission = OutboundEndpoint | 'images';
+interface ImagesServerConfig {
+    enabled: boolean;
+    provider: 'codex-subscription';
+    defaultModel: string;
+    modelAliases: Record<string, string>;
+    account: {
+        id?: string;
+        group?: string;
+        fallback: 'strict' | 'pool';
+    };
+    queue: {
+        maxConcurrentJobsPerAccount: number;
+        maxQueuedJobs: number;
+        queueTimeoutMs: number;
+        generationTimeoutMs: number;
+    };
+    temporary: {
+        maxActiveScopes: number;
+        maxTotalBytes: number;
+        maxTenantBytes: number;
+        staleAfterMs: number;
+        cleanupIntervalMs: number;
+    };
+    limits: ImageApiLimits;
+    references: {
+        ttlMs: number;
+        maxArtifactBytes: number;
+        maxTotalBytes: number;
+        maxTenantBytes: number;
+        maxEntries: number;
+        maxCalls: number;
+        maxResponses: number;
+        maxTombstones: number;
+        tombstoneTtlMs: number;
+        cleanupIntervalMs: number;
+        storageRoot?: string;
+    };
+    remote: {
+        enabled: boolean;
+    };
+    evidenceTtlMs: number;
+}
+/** Non-consuming, account-bound image model discovery injected by the daemon. */
+interface ImageModelCatalogReader {
+    listAvailableModels(apiKeyId: string): Promise<readonly string[]>;
+}
 /** A `"providerId,modelId"` model reference (mirrors `RouterConfig` vocab). */
 type ModelRef = string;
 /** The detected request role; precedence background > default. */
@@ -513,6 +585,69 @@ interface FingerprintConfig {
     /** Operator UA baseline for un-captured accounts (piece 4). Absent ⇒ none. */
     ua?: string;
 }
+/**
+ * count_tokens strategy mode (§10 `anthropic.countTokens.mode`). ONE canonical
+ * union lives with the handler (`provider-proxy/ingress/anthropicCountTokens`);
+ * this alias re-exports it so the config-segment types and the runtime
+ * resolver can never drift apart (review B-M2).
+ */
+type AnthropicCountTokensMode = CountTokensMode;
+/** `GET /v1/models` response shape selector (§10 `anthropic.modelsShape`). */
+type AnthropicModelsShape = 'auto' | 'anthropic' | 'openai';
+/**
+ * Anthropic-protocol tuning segment (`claude-api-protocol-fidelity`, §10
+ * skeleton — count_tokens strategy/budget, /v1/models shape, synthetic-SSE
+ * heartbeat). Persisted + normalized like the other segments; read live per
+ * request (count_tokens/models) or hot-applied via the module setter
+ * (heartbeat). `proxyOauthUsage` / `apiHello` land in the follow-up change.
+ */
+interface AnthropicConfigSegment {
+    /**
+     * `/v1/messages/count_tokens` strategy. `mode` absent ⇒ `'auto'`
+     * (Anthropic-wire upstream → passthrough; translation upstream → local
+     * estimate). `estimateBudgetMs` bounds the local estimator walk (default
+     * 2000; a pathological input degrades to a coarser estimate, never fails).
+     */
+    countTokens?: {
+        mode?: AnthropicCountTokensMode;
+        estimateBudgetMs?: number;
+    };
+    /**
+     * `GET /v1/models` response shape. `'auto'` (default): a key authorized for
+     * the messages endpoint gets the Anthropic list shape, everyone else keeps
+     * the OpenAI shape; `'anthropic'` / `'openai'` force one shape (escape
+     * hatch for dual-protocol consumers).
+     */
+    modelsShape?: AnthropicModelsShape;
+    /**
+     * Synthetic-SSE ping heartbeat interval (ms) for the TRANSLATION path only.
+     * Default 20000; ≤0 disables. Hot-applied at `applyConfig` — in-flight
+     * streams pick the new value at their next timer arm.
+     */
+    heartbeatIntervalMs?: number;
+    /**
+     * Translate-path PDF text extraction budget (`claude-api-transform-fidelity`,
+     * R7). `budgetMs` default 2000 — bounds the synchronous zero-dependency
+     * text-layer walk; over-budget documents 400 explicitly (never silently
+     * dropped, never unbounded work).
+     */
+    pdfTextExtraction?: {
+        budgetMs?: number;
+    };
+    /**
+     * Serve `GET /api/oauth/usage` on the outbound listener as a PURE-CACHE read
+     * of the shared Claude allowance store (R9). Default FALSE — off, the path
+     * keeps its current generic 404 byte-for-byte. When on, a messages-authorized
+     * key bound to a Claude subscription receives the api.anthropic.com usage
+     * wire shape; NO upstream call or refresh is ever triggered by the query.
+     */
+    proxyOauthUsage?: boolean;
+    /**
+     * Answer `HEAD /api/hello` with a bare 200 at the listener level (R10 —
+     * clients probe "can this endpoint be safely rejected"). Default TRUE.
+     */
+    apiHello?: boolean;
+}
 /**
  * Layered upstream-proxy segment (upstream-proxy). Global + per-provider proxy
  * config for outbound EGRESS to upstreams (NOT the inbound listener). Resolved
@@ -627,6 +762,14 @@ interface OutboundApiServerConfig {
      * byte-identical zero regression, purely additive on the #4 key-policy.
      */
     voucher?: VoucherConfig;
+    /**
+     * Anthropic-protocol tuning segment (claude-api-protocol-fidelity, §10).
+     * Optional in the persisted shape; `normalizeServerConfig` always fills it
+     * with the frozen defaults (auto/auto/20000).
+     */
+    anthropic?: AnthropicConfigSegment;
+    /** Default-off Images serving policy; capability still requires fresh evidence. */
+    images?: ImagesServerConfig;
 }
 /** A live status snapshot the Settings tab renders. */
 interface OutboundApiServerStatus {
@@ -641,6 +784,15 @@ interface OutboundApiServerStatus {
     formats: OutboundFormatUrls | null;
     /** The four format endpoint URLs over the LAN (only when network binding on). */
     lanFormats: OutboundFormatUrls | null;
+    /** Additive Images endpoints; absent while Images is disabled. */
+    images?: {
+        generations: string;
+        edits: string;
+    } | null;
+    lanImages?: {
+        generations: string;
+        edits: string;
+    } | null;
 }
 /** The four format endpoint URLs for one base. */
 interface OutboundFormatUrls {
@@ -667,8 +819,10 @@ interface OutboundApiKeyInfo {
     revoked: boolean;
     /** Intended consumer. Existing rows default to a general client key. */
     kind?: 'client' | 'integration';
-    /** Optional endpoint allow-list. Absent means every outbound endpoint. */
-    allowedEndpoints?: OutboundEndpoint[];
+    /** Exact effective permission list; legacy absent rows project to text-only permissions. */
+    allowedEndpoints: OutboundPermission[];
+    /** True when the stored row omitted permissions and compatibility defaults were projected. */
+    legacyPermissions: boolean;
     /** When true the key is rejected unless the TCP peer is loopback. */
     loopbackOnly?: boolean;
     /**
@@ -746,6 +900,8 @@ interface OutboundApiKeyCreated {
     name: string;
     keyPrefix: string;
     createdAt: number;
+    /** Exact effective permission list assigned to the new key. */
+    allowedEndpoints: OutboundPermission[];
     plaintextOnce: string;
 }
 /**
@@ -773,8 +929,8 @@ interface OutboundKeyDbRow {
     revokedAt: number | null;
     /** Intended consumer. Existing rows without this field remain client keys. */
     kind?: 'client' | 'integration';
-    /** Optional endpoint allow-list for least-privilege integration keys. */
-    allowedEndpoints?: OutboundEndpoint[];
+    /** Persisted exact permission list. Absent is a legacy text-only row. */
+    allowedEndpoints?: OutboundPermission[];
     /** Restrict use to requests whose direct socket peer is loopback. */
     loopbackOnly?: boolean;
     /**
@@ -817,7 +973,7 @@ interface OutboundKeyDb {
         keyPrefix: string;
         createdAt?: number;
         kind?: 'client' | 'integration';
-        allowedEndpoints?: OutboundEndpoint[];
+        allowedEndpoints?: OutboundPermission[];
         loopbackOnly?: boolean;
         /**
          * The generated plaintext secret. When the DB holds a `SecretBox` it
@@ -831,6 +987,8 @@ interface OutboundKeyDb {
     outboundApiKeysRevoke(id: string): Promise<boolean>;
     outboundApiKeysTouchLastUsed(id: string): Promise<boolean>;
     outboundApiKeysSetEnabled(id: string, enabled: boolean): Promise<boolean>;
+    /** Atomically replace the exact key permission list. */
+    outboundApiKeysSetPermissions(id: string, permissions: OutboundPermission[]): Promise<boolean>;
     /**
      * Set (or clear) a key's per-key concurrency ceiling. `null` clears the field
      * → unlimited (gate bypassed). Mirrors `outboundApiKeysSetEnabled`; returns
@@ -890,6 +1048,8 @@ interface OutboundApiDeps {
     readonly providerProxy: ProviderProxy;
     /** The proxy's app-session deps (reused verbatim for `routeRequest`). */
     readonly proxyDeps: ProviderProxyDeps;
+    /** Optional fail-closed Images catalog; absent means no image model is advertised. */
+    readonly imageModelCatalog?: ImageModelCatalogReader;
     /**
      * OPTIONAL unauthenticated `/health` provider (daemon-health-endpoint, D1
      * secondary mount). When wired (by the daemon bootstrap — core NEVER imports
@@ -917,4 +1077,4 @@ interface OutboundApiDeps {
     readonly logger?: Logger;
 }
 
-export { type AccountProbeConfig as A, computeVoucherGrant as B, type ChatDispatchMode as C, generateVoucherCode as D, ENDPOINT_MODEL_KINDS as E, type FingerprintConfig as F, type GatewayBinding as G, hashVoucherCode as H, newVoucherId as I, startOfLocalDay as J, type KeySpendReader as K, startOfLocalWeek as L, type MessagesModelKind as M, toVoucherInfo as N, type OutboundKeyDb as O, voucherCodePrefix as P, type ModelRef as Q, type RequestRole as R, type AccountHealthConfig as S, type OutboundKeyModelRestrictionMode as T, type UserMessageQueueConfig as U, type VoucherCreateInput as V, type AllowanceSchedulingConfig as a, type ConcurrencyQueueConfig as b, type EndpointRoutingConfig as c, type GatewayBindingFallback as d, type GatewayBindingKeyScope as e, type GatewayBindingModelMode as f, type GatewayBindingTarget as g, type GatewayModelMapping as h, type KeySpendSeeder as i, KeySpendTracker as j, type KindMappedEndpoint as k, type ModelKind as l, type ModelPrefixTargets as m, type OutboundApiDeps as n, type OutboundApiKeyCreated as o, type OutboundApiKeyInfo as p, type OutboundApiServerConfig as q, type OutboundApiServerStatus as r, type OutboundEndpoint as s, type OutboundFormatUrls as t, type OutboundKeyActivationMode as u, type OutboundKeyDbRow as v, type OutboundKeyPolicy as w, type OutboundProxyConfig as x, type ResponsesModelKind as y, type VoucherDb as z };
+export { type OutboundKeyModelRestrictionMode as $, type AccountProbeConfig as A, type VoucherDb as B, type ChatDispatchMode as C, computeVoucherGrant as D, ENDPOINT_MODEL_KINDS as E, type FingerprintConfig as F, type GatewayBinding as G, generateVoucherCode as H, type ImagesServerConfig as I, hashVoucherCode as J, type KeySpendReader as K, newVoucherId as L, type MessagesModelKind as M, startOfLocalDay as N, type OutboundKeyDb as O, startOfLocalWeek as P, toVoucherInfo as Q, type RequestRole as R, voucherCodePrefix as S, type ModelRef as T, type UserMessageQueueConfig as U, type VoucherCreateInput as V, type AnthropicConfigSegment as W, type AccountHealthConfig as X, type AnthropicCountTokensMode as Y, type AnthropicModelsShape as Z, type ImageModelCatalogReader as _, type AllowanceSchedulingConfig as a, type ConcurrencyQueueConfig as b, type EndpointRoutingConfig as c, type GatewayBindingFallback as d, type GatewayBindingKeyScope as e, type GatewayBindingModelMode as f, type GatewayBindingTarget as g, type GatewayModelMapping as h, type KeySpendSeeder as i, KeySpendTracker as j, type KindMappedEndpoint as k, type ModelKind as l, type ModelPrefixTargets as m, type OutboundApiDeps as n, type OutboundApiKeyCreated as o, type OutboundApiKeyInfo as p, type OutboundApiServerConfig as q, type OutboundApiServerStatus as r, type OutboundEndpoint as s, type OutboundFormatUrls as t, type OutboundKeyActivationMode as u, type OutboundKeyDbRow as v, type OutboundKeyPolicy as w, type OutboundPermission as x, type OutboundProxyConfig as y, type ResponsesModelKind as z };