@omnicross/core 0.1.3 → 0.1.4

package/dist/provider-proxy.cjs

@@ -5,42 +5,48 @@
 
 
 
-var _chunk2FMI2B6Vcjs = require('./chunk-2FMI2B6V.cjs');
+var _chunkDKPXN34Vcjs = require('./chunk-DKPXN34V.cjs');
 require('./chunk-HQP3K7PU.cjs');
 require('./chunk-FZ46M34D.cjs');
-require('./chunk-46ZIFWYG.cjs');
 require('./chunk-3OPYJG76.cjs');
-require('./chunk-FFALUUZZ.cjs');
-require('./chunk-C72S6TTV.cjs');
+require('./chunk-RGTR7CIO.cjs');
 require('./chunk-DWKQZ2SK.cjs');
 require('./chunk-4VAVYUZS.cjs');
 require('./chunk-7YN22L2H.cjs');
-require('./chunk-2DCNB7DF.cjs');
+require('./chunk-SU2GCLAC.cjs');
+require('./chunk-C72S6TTV.cjs');
 require('./chunk-EYZYXJTJ.cjs');
 require('./chunk-YMFAJFQT.cjs');
-require('./chunk-3QOSDDNI.cjs');
+require('./chunk-SNYBEXLB.cjs');
+require('./chunk-46ZIFWYG.cjs');
 require('./chunk-GBHYAGX3.cjs');
 require('./chunk-RPII3E6Z.cjs');
 require('./chunk-6RPZADX3.cjs');
 require('./chunk-QWBWGODS.cjs');
+require('./chunk-UIBD2YY5.cjs');
+require('./chunk-R3HK6R4B.cjs');
+require('./chunk-HYN75H6G.cjs');
+require('./chunk-Q27JY5RG.cjs');
+require('./chunk-QXD4MV2X.cjs');
 require('./chunk-NYUNU75A.cjs');
 require('./chunk-VQY5W4YW.cjs');
-require('./chunk-Y6OM7EV7.cjs');
+require('./chunk-KFI44N2R.cjs');
 require('./chunk-SVNDB62D.cjs');
-require('./chunk-R3HK6R4B.cjs');
-require('./chunk-AEOZIDEB.cjs');
+require('./chunk-APYG5QD7.cjs');
 require('./chunk-L74VDN4A.cjs');
-require('./chunk-KUU2RNG6.cjs');
-require('./chunk-Q27JY5RG.cjs');
-require('./chunk-QXD4MV2X.cjs');
-require('./chunk-A2YMUCBT.cjs');
-require('./chunk-SVXC36MU.cjs');
+require('./chunk-4YINUUKQ.cjs');
+require('./chunk-VACWOIRE.cjs');
 require('./chunk-QBZJ7P2T.cjs');
 require('./chunk-4IH4EL7M.cjs');
+require('./chunk-A2YMUCBT.cjs');
+require('./chunk-E3UCVHLP.cjs');
+require('./chunk-FCR77GYM.cjs');
+require('./chunk-AEOZIDEB.cjs');
+require('./chunk-XSVNC2UD.cjs');
 require('./chunk-SUEGJ75D.cjs');
-require('./chunk-S6JGLF3G.cjs');
 require('./chunk-RSJ3TWJQ.cjs');
 require('./chunk-YGXJGRFI.cjs');
+require('./chunk-OCEUVQHW.cjs');
 require('./chunk-NZYN7C3P.cjs');
 require('./chunk-JMJBSACD.cjs');
 require('./chunk-GMMT7RVN.cjs');
@@ -52,4 +58,4 @@ require('./chunk-UNEFIWXI.cjs');
 
 
 
-exports.DEFAULT_ROUTE_IDLE_MS = _chunk2FMI2B6Vcjs.DEFAULT_ROUTE_IDLE_MS; exports.ProviderProxy = _chunk2FMI2B6Vcjs.ProviderProxy; exports.ProviderProxyRouteMap = _chunk2FMI2B6Vcjs.ProviderProxyRouteMap; exports.__resetProviderProxyForTests = _chunk2FMI2B6Vcjs.__resetProviderProxyForTests; exports.extractRouteToken = _chunk2FMI2B6Vcjs.extractRouteToken; exports.getProviderProxy = _chunk2FMI2B6Vcjs.getProviderProxy;
+exports.DEFAULT_ROUTE_IDLE_MS = _chunkDKPXN34Vcjs.DEFAULT_ROUTE_IDLE_MS; exports.ProviderProxy = _chunkDKPXN34Vcjs.ProviderProxy; exports.ProviderProxyRouteMap = _chunkDKPXN34Vcjs.ProviderProxyRouteMap; exports.__resetProviderProxyForTests = _chunkDKPXN34Vcjs.__resetProviderProxyForTests; exports.extractRouteToken = _chunkDKPXN34Vcjs.extractRouteToken; exports.getProviderProxy = _chunkDKPXN34Vcjs.getProviderProxy;

package/dist/provider-proxy.js

@@ -5,42 +5,48 @@ import {
   __resetProviderProxyForTests,
   extractRouteToken,
   getProviderProxy
-} from "./chunk-4DECIFU7.js";
+} from "./chunk-QYTT6GE3.js";
 import "./chunk-VVEHS2LI.js";
 import "./chunk-46RLHI7D.js";
-import "./chunk-G2UTNSGU.js";
 import "./chunk-DK4A7DLE.js";
-import "./chunk-MQNDWYPN.js";
-import "./chunk-Z7LUNECE.js";
+import "./chunk-VPBAUQ2M.js";
 import "./chunk-ZJZAOKI7.js";
 import "./chunk-FTQ7IQUC.js";
 import "./chunk-C7PSERMH.js";
-import "./chunk-5HTVET6E.js";
+import "./chunk-TIER4SUC.js";
+import "./chunk-Z7LUNECE.js";
 import "./chunk-7VU7V2E4.js";
 import "./chunk-ZLX3KGXX.js";
-import "./chunk-CWM2ZDU5.js";
+import "./chunk-BPKCU575.js";
+import "./chunk-G2UTNSGU.js";
 import "./chunk-MZNPGW5Q.js";
 import "./chunk-XTEI64OU.js";
 import "./chunk-XX6NQJMA.js";
 import "./chunk-IAXWICZU.js";
+import "./chunk-OE6TDIWW.js";
+import "./chunk-DRWHTIIZ.js";
+import "./chunk-IK3KE3AU.js";
+import "./chunk-ZY6KU6P3.js";
+import "./chunk-JWC6APFQ.js";
 import "./chunk-5ERIZW3D.js";
 import "./chunk-5ENKBSWO.js";
-import "./chunk-N5QFKSDO.js";
+import "./chunk-HRRYG2AX.js";
 import "./chunk-AVYJ4YBN.js";
-import "./chunk-DRWHTIIZ.js";
-import "./chunk-WNY4WMRF.js";
+import "./chunk-WLYIIEAF.js";
 import "./chunk-TKJMZBAH.js";
-import "./chunk-JO5NLTLY.js";
-import "./chunk-ZY6KU6P3.js";
-import "./chunk-JWC6APFQ.js";
-import "./chunk-H5JUT3KV.js";
-import "./chunk-CZHZGRU7.js";
+import "./chunk-3QFXFCHG.js";
+import "./chunk-UHGVBFU3.js";
 import "./chunk-AQ5TNQB7.js";
 import "./chunk-XEKD23J5.js";
+import "./chunk-H5JUT3KV.js";
+import "./chunk-7Y47UCF2.js";
+import "./chunk-K5NM7VAH.js";
+import "./chunk-WNY4WMRF.js";
+import "./chunk-OZFM4X3S.js";
 import "./chunk-5ZQBEOMD.js";
-import "./chunk-BO4RFWBR.js";
 import "./chunk-Z7Y2NPHY.js";
 import "./chunk-S4WBV25P.js";
+import "./chunk-XK5CIRMQ.js";
 import "./chunk-CDHS2QDC.js";
 import "./chunk-Y7FO65VT.js";
 import "./chunk-FMOBD2OQ.js";

package/dist/{routeResolver-B1NglTfe.d.ts → routeResolver-C4T7yClx.d.ts}

@@ -1,6 +1,6 @@
 import { ProviderConfigSource } from './ports/provider-config-source.js';
 import { IngressFormat, RouteContext } from './provider-proxy/types.js';
-import { q as OutboundEndpoint, P as ModelRef, b as EndpointRoutingConfig, R as RequestRole } from './types-6OUY_xfA.js';
+import { m as OutboundEndpoint, G as ModelRef, b as EndpointRoutingConfig, R as RequestRole } from './types-lgPYQuZS.js';
 import { SubscriptionProviderId } from '@omnicross/contracts/subscription-types';
 
 /**

package/dist/{routeResolver-CbG5uBgm.d.cts → routeResolver-CB3tvJKy.d.cts}

@@ -1,6 +1,6 @@
 import { ProviderConfigSource } from './ports/provider-config-source.cjs';
 import { IngressFormat, RouteContext } from './provider-proxy/types.cjs';
-import { q as OutboundEndpoint, P as ModelRef, b as EndpointRoutingConfig, R as RequestRole } from './types-aBFFXoBz.cjs';
+import { m as OutboundEndpoint, G as ModelRef, b as EndpointRoutingConfig, R as RequestRole } from './types-B8Arpxn0.cjs';
 import { SubscriptionProviderId } from '@omnicross/contracts/subscription-types';
 
 /**

package/dist/transformer/transformers/OpenAIResponseTransformer.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunk2DCNB7DFcjs = require('../../chunk-2DCNB7DF.cjs');
+var _chunkSU2GCLACcjs = require('../../chunk-SU2GCLAC.cjs');
 
 
-exports.OpenAIResponseTransformer = _chunk2DCNB7DFcjs.OpenAIResponseTransformer;
+exports.OpenAIResponseTransformer = _chunkSU2GCLACcjs.OpenAIResponseTransformer;

package/dist/transformer/transformers/OpenAIResponseTransformer.js

@@ -1,6 +1,6 @@
 import {
   OpenAIResponseTransformer
-} from "../../chunk-5HTVET6E.js";
+} from "../../chunk-TIER4SUC.js";
 export {
   OpenAIResponseTransformer
 };

package/dist/transformer/transformers.cjs

@@ -4,10 +4,7 @@
 
 
 
-var _chunkFFALUUZZcjs = require('../chunk-FFALUUZZ.cjs');
-
-
-var _chunkC72S6TTVcjs = require('../chunk-C72S6TTV.cjs');
+var _chunkRGTR7CIOcjs = require('../chunk-RGTR7CIO.cjs');
 
 
 var _chunkDWKQZ2SKcjs = require('../chunk-DWKQZ2SK.cjs');
@@ -19,7 +16,10 @@ var _chunk4VAVYUZScjs = require('../chunk-4VAVYUZS.cjs');
 var _chunk7YN22L2Hcjs = require('../chunk-7YN22L2H.cjs');
 
 
-var _chunk2DCNB7DFcjs = require('../chunk-2DCNB7DF.cjs');
+var _chunkSU2GCLACcjs = require('../chunk-SU2GCLAC.cjs');
+
+
+var _chunkC72S6TTVcjs = require('../chunk-C72S6TTV.cjs');
 
 
 var _chunkRSJ3TWJQcjs = require('../chunk-RSJ3TWJQ.cjs');
@@ -36,4 +36,4 @@ require('../chunk-YGXJGRFI.cjs');
 
 
 
-exports.AnthropicTransformer = _chunk4VAVYUZScjs.AnthropicTransformer; exports.BUILTIN_TRANSFORMER_NAMES = _chunkFFALUUZZcjs.BUILTIN_TRANSFORMER_NAMES; exports.BuiltinTransformers = _chunkFFALUUZZcjs.BuiltinTransformers; exports.DeepseekTransformer = _chunkFFALUUZZcjs.DeepseekTransformer; exports.GeminiCodeAssistTransformer = _chunkRSJ3TWJQcjs.GeminiCodeAssistTransformer; exports.GeminiTransformer = _chunk7YN22L2Hcjs.GeminiTransformer; exports.OpenAIResponseTransformer = _chunk2DCNB7DFcjs.OpenAIResponseTransformer; exports.OpenCodeGoTransformer = _chunkC72S6TTVcjs.OpenCodeGoTransformer; exports.ReasoningTransformer = _chunkDWKQZ2SKcjs.ReasoningTransformer; exports.getBuiltinTransformers = _chunkFFALUUZZcjs.getBuiltinTransformers; exports.registerBuiltinTransformers = _chunkFFALUUZZcjs.registerBuiltinTransformers;
+exports.AnthropicTransformer = _chunk4VAVYUZScjs.AnthropicTransformer; exports.BUILTIN_TRANSFORMER_NAMES = _chunkRGTR7CIOcjs.BUILTIN_TRANSFORMER_NAMES; exports.BuiltinTransformers = _chunkRGTR7CIOcjs.BuiltinTransformers; exports.DeepseekTransformer = _chunkRGTR7CIOcjs.DeepseekTransformer; exports.GeminiCodeAssistTransformer = _chunkRSJ3TWJQcjs.GeminiCodeAssistTransformer; exports.GeminiTransformer = _chunk7YN22L2Hcjs.GeminiTransformer; exports.OpenAIResponseTransformer = _chunkSU2GCLACcjs.OpenAIResponseTransformer; exports.OpenCodeGoTransformer = _chunkC72S6TTVcjs.OpenCodeGoTransformer; exports.ReasoningTransformer = _chunkDWKQZ2SKcjs.ReasoningTransformer; exports.getBuiltinTransformers = _chunkRGTR7CIOcjs.getBuiltinTransformers; exports.registerBuiltinTransformers = _chunkRGTR7CIOcjs.registerBuiltinTransformers;

package/dist/transformer/transformers.js

@@ -4,10 +4,7 @@ import {
   DeepseekTransformer,
   getBuiltinTransformers,
   registerBuiltinTransformers
-} from "../chunk-MQNDWYPN.js";
-import {
-  OpenCodeGoTransformer
-} from "../chunk-Z7LUNECE.js";
+} from "../chunk-VPBAUQ2M.js";
 import {
   ReasoningTransformer
 } from "../chunk-ZJZAOKI7.js";
@@ -19,7 +16,10 @@ import {
 } from "../chunk-C7PSERMH.js";
 import {
   OpenAIResponseTransformer
-} from "../chunk-5HTVET6E.js";
+} from "../chunk-TIER4SUC.js";
+import {
+  OpenCodeGoTransformer
+} from "../chunk-Z7LUNECE.js";
 import {
   GeminiCodeAssistTransformer
 } from "../chunk-Z7Y2NPHY.js";

package/dist/transformer.cjs

@@ -1,18 +1,18 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});require('./chunk-FZ46M34D.cjs');
 
 
-var _chunk46ZIFWYGcjs = require('./chunk-46ZIFWYG.cjs');
-
-
 var _chunk3OPYJG76cjs = require('./chunk-3OPYJG76.cjs');
 
 
-var _chunkFFALUUZZcjs = require('./chunk-FFALUUZZ.cjs');
-require('./chunk-C72S6TTV.cjs');
+var _chunkRGTR7CIOcjs = require('./chunk-RGTR7CIO.cjs');
 require('./chunk-DWKQZ2SK.cjs');
 require('./chunk-4VAVYUZS.cjs');
 require('./chunk-7YN22L2H.cjs');
-require('./chunk-2DCNB7DF.cjs');
+require('./chunk-SU2GCLAC.cjs');
+require('./chunk-C72S6TTV.cjs');
+
+
+var _chunk46ZIFWYGcjs = require('./chunk-46ZIFWYG.cjs');
 require('./chunk-GBHYAGX3.cjs');
 require('./chunk-RSJ3TWJQ.cjs');
 require('./chunk-YGXJGRFI.cjs');
@@ -20,4 +20,4 @@ require('./chunk-YGXJGRFI.cjs');
 
 
 
-exports.TransformerChainExecutor = _chunk46ZIFWYGcjs.TransformerChainExecutor; exports.TransformerService = _chunk3OPYJG76cjs.TransformerService; exports.registerBuiltinTransformers = _chunkFFALUUZZcjs.registerBuiltinTransformers;
+exports.TransformerChainExecutor = _chunk46ZIFWYGcjs.TransformerChainExecutor; exports.TransformerService = _chunk3OPYJG76cjs.TransformerService; exports.registerBuiltinTransformers = _chunkRGTR7CIOcjs.registerBuiltinTransformers;

package/dist/transformer.js

@@ -1,18 +1,18 @@
 import "./chunk-46RLHI7D.js";
-import {
-  TransformerChainExecutor
-} from "./chunk-G2UTNSGU.js";
 import {
   TransformerService
 } from "./chunk-DK4A7DLE.js";
 import {
   registerBuiltinTransformers
-} from "./chunk-MQNDWYPN.js";
-import "./chunk-Z7LUNECE.js";
+} from "./chunk-VPBAUQ2M.js";
 import "./chunk-ZJZAOKI7.js";
 import "./chunk-FTQ7IQUC.js";
 import "./chunk-C7PSERMH.js";
-import "./chunk-5HTVET6E.js";
+import "./chunk-TIER4SUC.js";
+import "./chunk-Z7LUNECE.js";
+import {
+  TransformerChainExecutor
+} from "./chunk-G2UTNSGU.js";
 import "./chunk-MZNPGW5Q.js";
 import "./chunk-Z7Y2NPHY.js";
 import "./chunk-S4WBV25P.js";

package/dist/{types-aBFFXoBz.d.cts → types-B8Arpxn0.d.cts}

@@ -8,95 +8,7 @@ import { L as Logger } from './logger-4GvQNzhE.cjs';
 import { ProviderConfigSource } from './ports/provider-config-source.cjs';
 import { P as ProviderProxy } from './ProviderProxy-CnMQYN59.cjs';
 import { ProviderProxyDeps } from './provider-proxy/types.cjs';
-
-/**
- * keyPolicy — PURE decision helpers for the outbound key-policy envelope
- * (`outbound-key-policy`, design D2/D4). Expiry/activation resolution +
- * cost-quota decision. No I/O, no clock ownership (the caller passes `now`), so
- * these are trivially unit-testable and reused by both the auth path
- * (`verifyKey`) and the wire path (`outboundApiRouter`).
- *
- * The #6 (`restrictedModels`) and #9 (voucher) children EXTEND the key-policy
- * schema; they must not change the shapes frozen here.
- *
- * @module outbound-api/keyPolicy
- */
-/** The expiry/activation subset of a key row `computeKeyExpiry` reads. */
-interface KeyExpiryInput {
-    /** Fixed-mode absolute expiry (epoch ms). */
-    expiresAt?: number | null;
-    /** Expiry mode; absent ⇒ `'fixed'`. */
-    activationMode?: 'fixed' | 'activation';
-    /** Activation-mode lifetime in days (absent/null ⇒ never expires). */
-    activationDays?: number | null;
-    /** First-use activation stamp (epoch ms); null ⇒ not yet activated. */
-    activatedAt?: number | null;
-}
-/** Result of {@link computeKeyExpiry}. */
-interface KeyExpiryResult {
-    expired: boolean;
-    /** The resolved absolute expiry (epoch ms), when the key has one. */
-    effectiveExpiresAt?: number;
-    /**
-     * True when this is an activation-mode key that has NOT been activated yet, so
-     * the caller SHOULD stamp the activation (best-effort) on a successful verify.
-     */
-    needsActivation?: boolean;
-}
-/**
- * Resolve whether a key is past its effective expiry (design D2).
- *  - `fixed`: expired when `expiresAt != null && now >= expiresAt`.
- *  - `activation`: while `activatedAt == null` the key is NOT expired (it
- *    activates on THIS use → `needsActivation`); once activated, expired when
- *    `now >= activatedAt + activationDays*DAY`. A null `activationDays` never
- *    expires.
- * A key with no expiry configured never expires.
- */
-declare function computeKeyExpiry(row: KeyExpiryInput, now: number): KeyExpiryResult;
-/** Per-key USD cost limits carried on the verified key (absent scope ⇒ no cap). */
-interface KeyCostLimits {
-    dailyUsd?: number;
-    totalUsd?: number;
-    weeklyUsd?: number;
-}
-/** In-memory per-key accumulated spend snapshot (see `keySpendTracker`). */
-interface KeySpend {
-    dailyUsd: number;
-    /** Local-midnight boundary the `dailyUsd` window opened at (epoch ms). */
-    dailyWindowStart: number;
-    weeklyUsd: number;
-    /** Local week-start boundary the `weeklyUsd` window opened at (epoch ms). */
-    weeklyWindowStart: number;
-    totalUsd: number;
-}
-/** Decision returned by {@link checkKeyQuota}. */
-type QuotaDecision = {
-    allowed: true;
-} | {
-    allowed: false;
-    scope: 'daily' | 'weekly' | 'total';
-    limitUsd: number;
-    spentUsd: number;
-};
-/**
- * Decide whether the key's accumulated spend already meets/exceeds any
- * configured cost limit (design D4). `allowed:false` when a scope's PRIOR spend
- * is `>= limit` (the triggering request's own cost is unknown pre-flight →
- * bounded one-request overage, CRS-equivalent). An unconfigured scope is never
- * gated; a `limits`-less key always passes.
- */
-declare function checkKeyQuota(limits: KeyCostLimits | undefined, spend: KeySpend): QuotaDecision;
-/**
- * Per-key model restriction carried on the verified key (outbound-key-policy #6).
- * Present ONLY when the key has `enableModelRestriction === true` — so the wire
- * layer's presence check (`if (key.modelRestriction) …`) is the zero-regression
- * gate.
- */
-interface ModelRestriction {
-    mode: 'blacklist' | 'allowlist';
-    /** Bare modelIds the mode acts on. Empty allowlist denies every model. */
-    models: string[];
-}
+import { c as KeySpend } from './keyPolicy-Cp0FntZl.cjs';
 
 /**
  * keySpendTracker — a cheap in-memory per-key accumulated-spend cache
@@ -398,6 +310,18 @@ interface EndpointRoutingConfig {
     backgroundModel?: ModelRef;
     /** Gates subscription-vs-BYO provider selection. Default FALSE. */
     useSubscription: boolean;
+    /**
+     * OPTIONAL subscription-mode binding to ONE specific subscription account id
+     * (provider/subscription duality). Absent/blank ⇒ the provider's account pool
+     * auto-schedules (priority/LRU/health). When set and the account is
+     * schedulable it is used directly; otherwise the pool is the fallback.
+     */
+    boundAccountId?: string;
+    /**
+     * OPTIONAL provider-mode binding to ONE specific BYO key id (from the
+     * provider's key pool). Absent/blank ⇒ the provider's default key / key pool.
+     */
+    boundKeyId?: string;
     /**
      * OPTIONAL "background model id" override list (role-based `gemini` only).
      * When set, an incoming requested model id appearing in this list is
@@ -827,4 +751,4 @@ interface OutboundApiDeps {
     readonly logger?: Logger;
 }
 
-export { type AccountProbeConfig as A, computeVoucherGrant as B, type ChatDispatchMode as C, generateVoucherCode as D, ENDPOINT_MODEL_KINDS as E, type FingerprintConfig as F, hashVoucherCode as G, newVoucherId as H, startOfLocalDay as I, startOfLocalWeek as J, type KeyCostLimits as K, toVoucherInfo as L, type MessagesModelKind as M, voucherCodePrefix as N, type OutboundKeyDb as O, type ModelRef as P, type QuotaDecision as Q, type RequestRole as R, type ModelRestriction as S, type AccountHealthConfig as T, type UserMessageQueueConfig as U, type VoucherCreateInput as V, type OutboundKeyModelRestrictionMode as W, type ConcurrencyQueueConfig as a, type EndpointRoutingConfig as b, type KeyExpiryInput as c, type KeyExpiryResult as d, type KeySpend as e, type KeySpendReader as f, type KeySpendSeeder as g, KeySpendTracker as h, type KindMappedEndpoint as i, type ModelKind as j, type ModelPrefixTargets as k, type OutboundApiDeps as l, type OutboundApiKeyCreated as m, type OutboundApiKeyInfo as n, type OutboundApiServerConfig as o, type OutboundApiServerStatus as p, type OutboundEndpoint as q, type OutboundFormatUrls as r, type OutboundKeyActivationMode as s, type OutboundKeyDbRow as t, type OutboundKeyPolicy as u, type OutboundProxyConfig as v, type ResponsesModelKind as w, type VoucherDb as x, checkKeyQuota as y, computeKeyExpiry as z };
+export { type AccountProbeConfig as A, toVoucherInfo as B, type ChatDispatchMode as C, voucherCodePrefix as D, ENDPOINT_MODEL_KINDS as E, type FingerprintConfig as F, type ModelRef as G, type AccountHealthConfig as H, type OutboundKeyModelRestrictionMode as I, type KeySpendReader as K, type MessagesModelKind as M, type OutboundKeyDb as O, type RequestRole as R, type UserMessageQueueConfig as U, type VoucherCreateInput as V, type ConcurrencyQueueConfig as a, type EndpointRoutingConfig as b, type KeySpendSeeder as c, KeySpendTracker as d, type KindMappedEndpoint as e, type ModelKind as f, type ModelPrefixTargets as g, type OutboundApiDeps as h, type OutboundApiKeyCreated as i, type OutboundApiKeyInfo as j, type OutboundApiServerConfig as k, type OutboundApiServerStatus as l, type OutboundEndpoint as m, type OutboundFormatUrls as n, type OutboundKeyActivationMode as o, type OutboundKeyDbRow as p, type OutboundKeyPolicy as q, type OutboundProxyConfig as r, type ResponsesModelKind as s, type VoucherDb as t, computeVoucherGrant as u, generateVoucherCode as v, hashVoucherCode as w, newVoucherId as x, startOfLocalDay as y, startOfLocalWeek as z };

package/dist/{types-6OUY_xfA.d.ts → types-lgPYQuZS.d.ts}

@@ -8,95 +8,7 @@ import { L as Logger } from './logger-4GvQNzhE.js';
 import { ProviderConfigSource } from './ports/provider-config-source.js';
 import { P as ProviderProxy } from './ProviderProxy-C-xqrkKi.js';
 import { ProviderProxyDeps } from './provider-proxy/types.js';
-
-/**
- * keyPolicy — PURE decision helpers for the outbound key-policy envelope
- * (`outbound-key-policy`, design D2/D4). Expiry/activation resolution +
- * cost-quota decision. No I/O, no clock ownership (the caller passes `now`), so
- * these are trivially unit-testable and reused by both the auth path
- * (`verifyKey`) and the wire path (`outboundApiRouter`).
- *
- * The #6 (`restrictedModels`) and #9 (voucher) children EXTEND the key-policy
- * schema; they must not change the shapes frozen here.
- *
- * @module outbound-api/keyPolicy
- */
-/** The expiry/activation subset of a key row `computeKeyExpiry` reads. */
-interface KeyExpiryInput {
-    /** Fixed-mode absolute expiry (epoch ms). */
-    expiresAt?: number | null;
-    /** Expiry mode; absent ⇒ `'fixed'`. */
-    activationMode?: 'fixed' | 'activation';
-    /** Activation-mode lifetime in days (absent/null ⇒ never expires). */
-    activationDays?: number | null;
-    /** First-use activation stamp (epoch ms); null ⇒ not yet activated. */
-    activatedAt?: number | null;
-}
-/** Result of {@link computeKeyExpiry}. */
-interface KeyExpiryResult {
-    expired: boolean;
-    /** The resolved absolute expiry (epoch ms), when the key has one. */
-    effectiveExpiresAt?: number;
-    /**
-     * True when this is an activation-mode key that has NOT been activated yet, so
-     * the caller SHOULD stamp the activation (best-effort) on a successful verify.
-     */
-    needsActivation?: boolean;
-}
-/**
- * Resolve whether a key is past its effective expiry (design D2).
- *  - `fixed`: expired when `expiresAt != null && now >= expiresAt`.
- *  - `activation`: while `activatedAt == null` the key is NOT expired (it
- *    activates on THIS use → `needsActivation`); once activated, expired when
- *    `now >= activatedAt + activationDays*DAY`. A null `activationDays` never
- *    expires.
- * A key with no expiry configured never expires.
- */
-declare function computeKeyExpiry(row: KeyExpiryInput, now: number): KeyExpiryResult;
-/** Per-key USD cost limits carried on the verified key (absent scope ⇒ no cap). */
-interface KeyCostLimits {
-    dailyUsd?: number;
-    totalUsd?: number;
-    weeklyUsd?: number;
-}
-/** In-memory per-key accumulated spend snapshot (see `keySpendTracker`). */
-interface KeySpend {
-    dailyUsd: number;
-    /** Local-midnight boundary the `dailyUsd` window opened at (epoch ms). */
-    dailyWindowStart: number;
-    weeklyUsd: number;
-    /** Local week-start boundary the `weeklyUsd` window opened at (epoch ms). */
-    weeklyWindowStart: number;
-    totalUsd: number;
-}
-/** Decision returned by {@link checkKeyQuota}. */
-type QuotaDecision = {
-    allowed: true;
-} | {
-    allowed: false;
-    scope: 'daily' | 'weekly' | 'total';
-    limitUsd: number;
-    spentUsd: number;
-};
-/**
- * Decide whether the key's accumulated spend already meets/exceeds any
- * configured cost limit (design D4). `allowed:false` when a scope's PRIOR spend
- * is `>= limit` (the triggering request's own cost is unknown pre-flight →
- * bounded one-request overage, CRS-equivalent). An unconfigured scope is never
- * gated; a `limits`-less key always passes.
- */
-declare function checkKeyQuota(limits: KeyCostLimits | undefined, spend: KeySpend): QuotaDecision;
-/**
- * Per-key model restriction carried on the verified key (outbound-key-policy #6).
- * Present ONLY when the key has `enableModelRestriction === true` — so the wire
- * layer's presence check (`if (key.modelRestriction) …`) is the zero-regression
- * gate.
- */
-interface ModelRestriction {
-    mode: 'blacklist' | 'allowlist';
-    /** Bare modelIds the mode acts on. Empty allowlist denies every model. */
-    models: string[];
-}
+import { c as KeySpend } from './keyPolicy-Cp0FntZl.js';
 
 /**
  * keySpendTracker — a cheap in-memory per-key accumulated-spend cache
@@ -398,6 +310,18 @@ interface EndpointRoutingConfig {
     backgroundModel?: ModelRef;
     /** Gates subscription-vs-BYO provider selection. Default FALSE. */
     useSubscription: boolean;
+    /**
+     * OPTIONAL subscription-mode binding to ONE specific subscription account id
+     * (provider/subscription duality). Absent/blank ⇒ the provider's account pool
+     * auto-schedules (priority/LRU/health). When set and the account is
+     * schedulable it is used directly; otherwise the pool is the fallback.
+     */
+    boundAccountId?: string;
+    /**
+     * OPTIONAL provider-mode binding to ONE specific BYO key id (from the
+     * provider's key pool). Absent/blank ⇒ the provider's default key / key pool.
+     */
+    boundKeyId?: string;
     /**
      * OPTIONAL "background model id" override list (role-based `gemini` only).
      * When set, an incoming requested model id appearing in this list is
@@ -827,4 +751,4 @@ interface OutboundApiDeps {
     readonly logger?: Logger;
 }
 
-export { type AccountProbeConfig as A, computeVoucherGrant as B, type ChatDispatchMode as C, generateVoucherCode as D, ENDPOINT_MODEL_KINDS as E, type FingerprintConfig as F, hashVoucherCode as G, newVoucherId as H, startOfLocalDay as I, startOfLocalWeek as J, type KeyCostLimits as K, toVoucherInfo as L, type MessagesModelKind as M, voucherCodePrefix as N, type OutboundKeyDb as O, type ModelRef as P, type QuotaDecision as Q, type RequestRole as R, type ModelRestriction as S, type AccountHealthConfig as T, type UserMessageQueueConfig as U, type VoucherCreateInput as V, type OutboundKeyModelRestrictionMode as W, type ConcurrencyQueueConfig as a, type EndpointRoutingConfig as b, type KeyExpiryInput as c, type KeyExpiryResult as d, type KeySpend as e, type KeySpendReader as f, type KeySpendSeeder as g, KeySpendTracker as h, type KindMappedEndpoint as i, type ModelKind as j, type ModelPrefixTargets as k, type OutboundApiDeps as l, type OutboundApiKeyCreated as m, type OutboundApiKeyInfo as n, type OutboundApiServerConfig as o, type OutboundApiServerStatus as p, type OutboundEndpoint as q, type OutboundFormatUrls as r, type OutboundKeyActivationMode as s, type OutboundKeyDbRow as t, type OutboundKeyPolicy as u, type OutboundProxyConfig as v, type ResponsesModelKind as w, type VoucherDb as x, checkKeyQuota as y, computeKeyExpiry as z };
+export { type AccountProbeConfig as A, toVoucherInfo as B, type ChatDispatchMode as C, voucherCodePrefix as D, ENDPOINT_MODEL_KINDS as E, type FingerprintConfig as F, type ModelRef as G, type AccountHealthConfig as H, type OutboundKeyModelRestrictionMode as I, type KeySpendReader as K, type MessagesModelKind as M, type OutboundKeyDb as O, type RequestRole as R, type UserMessageQueueConfig as U, type VoucherCreateInput as V, type ConcurrencyQueueConfig as a, type EndpointRoutingConfig as b, type KeySpendSeeder as c, KeySpendTracker as d, type KindMappedEndpoint as e, type ModelKind as f, type ModelPrefixTargets as g, type OutboundApiDeps as h, type OutboundApiKeyCreated as i, type OutboundApiKeyInfo as j, type OutboundApiServerConfig as k, type OutboundApiServerStatus as l, type OutboundEndpoint as m, type OutboundFormatUrls as n, type OutboundKeyActivationMode as o, type OutboundKeyDbRow as p, type OutboundKeyPolicy as q, type OutboundProxyConfig as r, type ResponsesModelKind as s, type VoucherDb as t, computeVoucherGrant as u, generateVoucherCode as v, hashVoucherCode as w, newVoucherId as x, startOfLocalDay as y, startOfLocalWeek as z };

package/dist/usage/usage-recorder.cjs

@@ -1,6 +1,7 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunk3QOSDDNIcjs = require('../chunk-3QOSDDNI.cjs');
+var _chunkSNYBEXLBcjs = require('../chunk-SNYBEXLB.cjs');
+require('../chunk-XSVNC2UD.cjs');
 
 
-exports.UsageRecorder = _chunk3QOSDDNIcjs.UsageRecorder;
+exports.UsageRecorder = _chunkSNYBEXLBcjs.UsageRecorder;

package/dist/usage/usage-recorder.js

@@ -1,6 +1,7 @@
 import {
   UsageRecorder
-} from "../chunk-CWM2ZDU5.js";
+} from "../chunk-BPKCU575.js";
+import "../chunk-OZFM4X3S.js";
 export {
   UsageRecorder
 };

package/dist/usage.cjs

@@ -4,8 +4,9 @@
 var _chunkYMFAJFQTcjs = require('./chunk-YMFAJFQT.cjs');
 
 
-var _chunk3QOSDDNIcjs = require('./chunk-3QOSDDNI.cjs');
+var _chunkSNYBEXLBcjs = require('./chunk-SNYBEXLB.cjs');
+require('./chunk-XSVNC2UD.cjs');
 
 
 
-exports.PricingEngine = _chunkYMFAJFQTcjs.PricingEngine; exports.UsageRecorder = _chunk3QOSDDNIcjs.UsageRecorder;
+exports.PricingEngine = _chunkYMFAJFQTcjs.PricingEngine; exports.UsageRecorder = _chunkSNYBEXLBcjs.UsageRecorder;

package/dist/usage.js

@@ -4,7 +4,8 @@ import {
 } from "./chunk-ZLX3KGXX.js";
 import {
   UsageRecorder
-} from "./chunk-CWM2ZDU5.js";
+} from "./chunk-BPKCU575.js";
+import "./chunk-OZFM4X3S.js";
 export {
   PricingEngine,
   UsageRecorder