@omnicross/core 0.1.3 → 0.1.4

package/dist/outbound-api/auditCapture.d.ts

@@ -0,0 +1,52 @@
+import http from 'node:http';
+
+/**
+ * auditCapture — the outbound server's post-response audit capture hook
+ * (request-audit-log, design D1/D3/D5).
+ *
+ * {@link beginAuditCapture} is called at the TOP of `handleOutboundRequest`. It
+ * reads the active capture config from the core slot; when audit is DISABLED it
+ * returns `null` immediately (one slot read — no assembly, no listener, zero
+ * regression). When enabled it:
+ *  - registers a one-shot `res.on('close')` listener that, at response end,
+ *    assembles the {@link AuditRecord} from the http `req` (IP via the socket, or
+ *    a trusted `X-Forwarded-For` only when configured — LEAD OQ1 anti-spoof; UA;
+ *    method; path with the query string DROPPED), the response `statusCode`, the
+ *    elapsed ms, and the fields the handler fills in (keyId / model / provider /
+ *    error / bodies) — then hands it to the fire-and-forget `recordAudit`;
+ *  - when `captureBodies` is ALSO on, wraps `res.write`/`res.end` to accumulate a
+ *    BOUNDED response body (metadata-only for a streaming `text/event-stream`
+ *    response — a full stream is unbounded), and truncates+redacts both bodies.
+ *
+ * Request HEADERS are NEVER read into a record (Authorization / x-api-key live
+ * there). Every stored body passes through {@link redactAuditText}. The assembly
+ * is wrapped so a capture failure can never surface into the relay path.
+ *
+ * @module @omnicross/core/outbound-api/auditCapture
+ */
+
+/**
+ * The mutable context the request handler enriches as it progresses. `null` is
+ * returned by {@link beginAuditCapture} when audit is disabled — the handler
+ * guards every write with `if (audit)`.
+ */
+interface AuditCaptureContext {
+    /** Outbound key id (set after auth). NEVER the key material. */
+    keyId?: string | null;
+    /** Resolved upstream model (set after route resolution). */
+    model?: string;
+    /** Upstream provider id (set after route resolution). */
+    provider?: string;
+    /** Sanitized error message (set on a relay/dispatch failure). */
+    error?: string;
+    /** Stash the raw request body for capture (a no-op unless `captureBodies`). */
+    setRequestBody(raw: string): void;
+}
+/**
+ * Begin audit capture for one request. Returns a mutable context the handler
+ * enriches, or `null` when audit is disabled (zero-cost path). The record is
+ * emitted on response `close` via the fire-and-forget sink.
+ */
+declare function beginAuditCapture(req: http.IncomingMessage, res: http.ServerResponse, now: number): AuditCaptureContext | null;
+
+export { type AuditCaptureContext, beginAuditCapture };

package/dist/outbound-api/auditCapture.js

@@ -0,0 +1,9 @@
+import {
+  beginAuditCapture
+} from "../chunk-7Y47UCF2.js";
+import "../chunk-K5NM7VAH.js";
+import "../chunk-WNY4WMRF.js";
+import "../chunk-OZFM4X3S.js";
+export {
+  beginAuditCapture
+};

package/dist/outbound-api/auditRedact.cjs

@@ -0,0 +1,8 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+var _chunkFCR77GYMcjs = require('../chunk-FCR77GYM.cjs');
+
+
+
+exports.AUDIT_REDACTED = _chunkFCR77GYMcjs.AUDIT_REDACTED; exports.redactAuditText = _chunkFCR77GYMcjs.redactAuditText;

package/dist/outbound-api/auditRedact.d.cts

@@ -0,0 +1,30 @@
+/**
+ * auditRedact — the pure secret-redaction pass for captured audit bodies
+ * (request-audit-log, design D3/D7).
+ *
+ * Body capture is opt-in and inherently sensitive: a prompt or tool argument can
+ * embed a secret. {@link redactAuditText} is run over EVERY captured body (and
+ * any other free text stored in a record) BEFORE it is persisted — defense in
+ * depth on top of "request headers are NEVER captured" (so an Authorization /
+ * x-api-key HEADER value never enters a record in the first place).
+ *
+ * It masks the obvious, high-confidence secret shapes ONLY (frozen list) — never
+ * a broad heuristic that would gut a legitimate prompt:
+ *  - `sk-…` API keys (covers `sk-ant-…`, `sk-omnicross-…`, `sk-proj-…`, OpenAI).
+ *  - `Bearer <token>` authorization values.
+ *  - `x-api-key` / `api-key` / `authorization` values written inline as text.
+ *  - Google `AIza…` API keys.
+ *
+ * Pure + allocation-light + never throws.
+ *
+ * @module @omnicross/core/outbound-api/auditRedact
+ */
+/** The sentinel a masked secret is replaced with. */
+declare const AUDIT_REDACTED = "***REDACTED***";
+/**
+ * Mask obvious secrets in `text`. Pure; returns the input unchanged when it holds
+ * no recognized secret shape. Never throws (a bad input returns `''`).
+ */
+declare function redactAuditText(text: string): string;
+
+export { AUDIT_REDACTED, redactAuditText };

package/dist/outbound-api/auditRedact.d.ts

@@ -0,0 +1,30 @@
+/**
+ * auditRedact — the pure secret-redaction pass for captured audit bodies
+ * (request-audit-log, design D3/D7).
+ *
+ * Body capture is opt-in and inherently sensitive: a prompt or tool argument can
+ * embed a secret. {@link redactAuditText} is run over EVERY captured body (and
+ * any other free text stored in a record) BEFORE it is persisted — defense in
+ * depth on top of "request headers are NEVER captured" (so an Authorization /
+ * x-api-key HEADER value never enters a record in the first place).
+ *
+ * It masks the obvious, high-confidence secret shapes ONLY (frozen list) — never
+ * a broad heuristic that would gut a legitimate prompt:
+ *  - `sk-…` API keys (covers `sk-ant-…`, `sk-omnicross-…`, `sk-proj-…`, OpenAI).
+ *  - `Bearer <token>` authorization values.
+ *  - `x-api-key` / `api-key` / `authorization` values written inline as text.
+ *  - Google `AIza…` API keys.
+ *
+ * Pure + allocation-light + never throws.
+ *
+ * @module @omnicross/core/outbound-api/auditRedact
+ */
+/** The sentinel a masked secret is replaced with. */
+declare const AUDIT_REDACTED = "***REDACTED***";
+/**
+ * Mask obvious secrets in `text`. Pure; returns the input unchanged when it holds
+ * no recognized secret shape. Never throws (a bad input returns `''`).
+ */
+declare function redactAuditText(text: string): string;
+
+export { AUDIT_REDACTED, redactAuditText };

package/dist/outbound-api/auditRedact.js

@@ -0,0 +1,8 @@
+import {
+  AUDIT_REDACTED,
+  redactAuditText
+} from "../chunk-K5NM7VAH.js";
+export {
+  AUDIT_REDACTED,
+  redactAuditText
+};

package/dist/outbound-api/billingCapture.cjs

@@ -0,0 +1,8 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkAPYG5QD7cjs = require('../chunk-APYG5QD7.cjs');
+require('../chunk-L74VDN4A.cjs');
+require('../chunk-XSVNC2UD.cjs');
+
+
+exports.beginBillingCapture = _chunkAPYG5QD7cjs.beginBillingCapture;

package/dist/outbound-api/billingCapture.d.cts

@@ -0,0 +1,61 @@
+import http from 'node:http';
+
+/**
+ * billingCapture — the outbound server's post-response billing capture hook
+ * (billing-event-stream, design D1/D4).
+ *
+ * {@link beginBillingCapture} is called at the TOP of `handleOutboundRequest`. It
+ * reads the active billing config from the core slot; when billing is DISABLED it
+ * returns `null` immediately (one slot read — no assembly, no listener, zero
+ * regression). When enabled it registers a one-shot `res.close` listener that
+ * assembles a {@link BillingEvent} from the handler-filled context (keyId / model
+ * / provider / authMode), the response `statusCode`, and this request's METERED
+ * FACTS (token counts + the ALREADY-COMPUTED cost) — then hands it to the
+ * no-throw {@link publishBillingEvent}.
+ *
+ * COST REUSE (design D3 — no double pricing): the metered facts are read from the
+ * per-request usage stash the usage tap populates ({@link readAuditUsage} — the
+ * SAME stash `usage-events.jsonl` correlation uses, populated UNCONDITIONALLY by
+ * the taps, independent of whether request-audit is enabled). Token counts are
+ * stashed SYNCHRONOUSLY at `record()`; the cost lands on the recorder's deferred
+ * pricing tick (scheduled BEFORE the response closes). So the assembly is deferred
+ * one macrotask past `close` — by then the earlier-scheduled pricing tick has run
+ * and stashed the computed cost we REUSE (we never re-price).
+ *
+ * BILLABLE-ONLY: an event is emitted ONLY when the request produced usage (an
+ * upstream call was billed). Auth failures / rate-limit / model-restriction
+ * rejections return before dispatch, stash no usage, and emit NO billing event.
+ *
+ * @module @omnicross/core/outbound-api/billingCapture
+ */
+
+/**
+ * The mutable context the request handler enriches as it progresses. `null` is
+ * returned by {@link beginBillingCapture} when billing is disabled — the handler
+ * guards every write with `if (billing)`.
+ */
+interface BillingCaptureContext {
+    /** Outbound key id (set after auth). NEVER the key material. */
+    keyId?: string | null;
+    /** Resolved upstream model (set after route resolution). */
+    model?: string;
+    /** Upstream provider id (set after route resolution). */
+    provider?: string;
+    /** Re-auth mode the request billed under (set after route resolution). */
+    authMode?: 'byo' | 'subscription';
+}
+/**
+ * Deferral used to schedule the event assembly one macrotask past `close`, so the
+ * usage tap's earlier-scheduled pricing tick has stashed the cost we reuse.
+ * Injectable ONLY for deterministic tests; production uses a zero-delay timer.
+ */
+type BillingDefer = (fn: () => void) => void;
+/**
+ * Begin billing capture for one request. Returns a mutable context the handler
+ * enriches, or `null` when billing is disabled (zero-cost path). The event is
+ * emitted on response `close` via the no-throw sink — but ONLY when the request
+ * produced usage (a billable request).
+ */
+declare function beginBillingCapture(_req: http.IncomingMessage, res: http.ServerResponse, now: number, defer?: BillingDefer): BillingCaptureContext | null;
+
+export { type BillingCaptureContext, type BillingDefer, beginBillingCapture };

package/dist/outbound-api/billingCapture.d.ts

@@ -0,0 +1,61 @@
+import http from 'node:http';
+
+/**
+ * billingCapture — the outbound server's post-response billing capture hook
+ * (billing-event-stream, design D1/D4).
+ *
+ * {@link beginBillingCapture} is called at the TOP of `handleOutboundRequest`. It
+ * reads the active billing config from the core slot; when billing is DISABLED it
+ * returns `null` immediately (one slot read — no assembly, no listener, zero
+ * regression). When enabled it registers a one-shot `res.close` listener that
+ * assembles a {@link BillingEvent} from the handler-filled context (keyId / model
+ * / provider / authMode), the response `statusCode`, and this request's METERED
+ * FACTS (token counts + the ALREADY-COMPUTED cost) — then hands it to the
+ * no-throw {@link publishBillingEvent}.
+ *
+ * COST REUSE (design D3 — no double pricing): the metered facts are read from the
+ * per-request usage stash the usage tap populates ({@link readAuditUsage} — the
+ * SAME stash `usage-events.jsonl` correlation uses, populated UNCONDITIONALLY by
+ * the taps, independent of whether request-audit is enabled). Token counts are
+ * stashed SYNCHRONOUSLY at `record()`; the cost lands on the recorder's deferred
+ * pricing tick (scheduled BEFORE the response closes). So the assembly is deferred
+ * one macrotask past `close` — by then the earlier-scheduled pricing tick has run
+ * and stashed the computed cost we REUSE (we never re-price).
+ *
+ * BILLABLE-ONLY: an event is emitted ONLY when the request produced usage (an
+ * upstream call was billed). Auth failures / rate-limit / model-restriction
+ * rejections return before dispatch, stash no usage, and emit NO billing event.
+ *
+ * @module @omnicross/core/outbound-api/billingCapture
+ */
+
+/**
+ * The mutable context the request handler enriches as it progresses. `null` is
+ * returned by {@link beginBillingCapture} when billing is disabled — the handler
+ * guards every write with `if (billing)`.
+ */
+interface BillingCaptureContext {
+    /** Outbound key id (set after auth). NEVER the key material. */
+    keyId?: string | null;
+    /** Resolved upstream model (set after route resolution). */
+    model?: string;
+    /** Upstream provider id (set after route resolution). */
+    provider?: string;
+    /** Re-auth mode the request billed under (set after route resolution). */
+    authMode?: 'byo' | 'subscription';
+}
+/**
+ * Deferral used to schedule the event assembly one macrotask past `close`, so the
+ * usage tap's earlier-scheduled pricing tick has stashed the cost we reuse.
+ * Injectable ONLY for deterministic tests; production uses a zero-delay timer.
+ */
+type BillingDefer = (fn: () => void) => void;
+/**
+ * Begin billing capture for one request. Returns a mutable context the handler
+ * enriches, or `null` when billing is disabled (zero-cost path). The event is
+ * emitted on response `close` via the no-throw sink — but ONLY when the request
+ * produced usage (a billable request).
+ */
+declare function beginBillingCapture(_req: http.IncomingMessage, res: http.ServerResponse, now: number, defer?: BillingDefer): BillingCaptureContext | null;
+
+export { type BillingCaptureContext, type BillingDefer, beginBillingCapture };

package/dist/outbound-api/billingCapture.js

@@ -0,0 +1,8 @@
+import {
+  beginBillingCapture
+} from "../chunk-WLYIIEAF.js";
+import "../chunk-TKJMZBAH.js";
+import "../chunk-OZFM4X3S.js";
+export {
+  beginBillingCapture
+};

package/dist/outbound-api/quotaWarn.cjs

@@ -0,0 +1,12 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+var _chunk4YINUUKQcjs = require('../chunk-4YINUUKQ.cjs');
+
+
+
+
+
+exports.WEBHOOK_QUOTA_WARN_RATIO = _chunk4YINUUKQcjs.WEBHOOK_QUOTA_WARN_RATIO; exports.__resetQuotaWarnGuardForTests = _chunk4YINUUKQcjs.__resetQuotaWarnGuardForTests; exports.computeQuotaWarnings = _chunk4YINUUKQcjs.computeQuotaWarnings; exports.markQuotaWarnedOnce = _chunk4YINUUKQcjs.markQuotaWarnedOnce;

package/dist/outbound-api/quotaWarn.d.cts

@@ -0,0 +1,43 @@
+import { K as KeyCostLimits, c as KeySpend } from '../keyPolicy-Cp0FntZl.cjs';
+
+/**
+ * quotaWarn — the key.quotaWarning threshold helper (webhook-notifications,
+ * design D3, Phase 2).
+ *
+ * A PURE crossing detector ({@link computeQuotaWarnings}) + a tiny module-level
+ * "already warned this window" guard ({@link markQuotaWarnedOnce}). The wire
+ * path (`outboundApiRouter`) computes warnings alongside the existing quota
+ * check and emits `key.quotaWarning` ONCE per window-crossing — so a key sitting
+ * above the warn ratio doesn't spam a webhook every request. The guard is keyed
+ * by `keyId + scope + windowStart`, so a NEW day/week window re-arms the warning
+ * naturally (its `windowStart` differs).
+ *
+ * @module @omnicross/core/outbound-api/quotaWarn
+ */
+
+/** Warn when accumulated spend reaches this fraction of a scope's limit (design OQ2). */
+declare const WEBHOOK_QUOTA_WARN_RATIO = 0.8;
+/** A per-scope warning crossing (not-yet-exceeded, at/over the warn ratio). */
+interface QuotaWarning {
+    scope: 'daily' | 'weekly' | 'total';
+    limitUsd: number;
+    spentUsd: number;
+    /** The window boundary (epoch ms; `0` for the window-less `total` scope). */
+    windowStart: number;
+}
+/**
+ * Detect which cost scopes have crossed the warn ratio but are NOT yet exceeded
+ * (an EXCEEDED scope is handled by `checkKeyQuota` → `key.quotaExceeded`, not a
+ * warning). Pure — the caller owns the emit + the dedupe guard.
+ */
+declare function computeQuotaWarnings(limits: KeyCostLimits, spend: KeySpend, ratio?: number): QuotaWarning[];
+/**
+ * Record a warning for `(keyId, scope, windowStart)` and return whether THIS is
+ * the first time (⇒ the caller should emit). Subsequent calls in the same window
+ * return `false` (deduped). A new window (different `windowStart`) re-arms.
+ */
+declare function markQuotaWarnedOnce(keyId: string, scope: string, windowStart: number): boolean;
+/** TEST SEAM — clear the dedupe guard between suites. */
+declare function __resetQuotaWarnGuardForTests(): void;
+
+export { type QuotaWarning, WEBHOOK_QUOTA_WARN_RATIO, __resetQuotaWarnGuardForTests, computeQuotaWarnings, markQuotaWarnedOnce };

package/dist/outbound-api/quotaWarn.d.ts

@@ -0,0 +1,43 @@
+import { K as KeyCostLimits, c as KeySpend } from '../keyPolicy-Cp0FntZl.js';
+
+/**
+ * quotaWarn — the key.quotaWarning threshold helper (webhook-notifications,
+ * design D3, Phase 2).
+ *
+ * A PURE crossing detector ({@link computeQuotaWarnings}) + a tiny module-level
+ * "already warned this window" guard ({@link markQuotaWarnedOnce}). The wire
+ * path (`outboundApiRouter`) computes warnings alongside the existing quota
+ * check and emits `key.quotaWarning` ONCE per window-crossing — so a key sitting
+ * above the warn ratio doesn't spam a webhook every request. The guard is keyed
+ * by `keyId + scope + windowStart`, so a NEW day/week window re-arms the warning
+ * naturally (its `windowStart` differs).
+ *
+ * @module @omnicross/core/outbound-api/quotaWarn
+ */
+
+/** Warn when accumulated spend reaches this fraction of a scope's limit (design OQ2). */
+declare const WEBHOOK_QUOTA_WARN_RATIO = 0.8;
+/** A per-scope warning crossing (not-yet-exceeded, at/over the warn ratio). */
+interface QuotaWarning {
+    scope: 'daily' | 'weekly' | 'total';
+    limitUsd: number;
+    spentUsd: number;
+    /** The window boundary (epoch ms; `0` for the window-less `total` scope). */
+    windowStart: number;
+}
+/**
+ * Detect which cost scopes have crossed the warn ratio but are NOT yet exceeded
+ * (an EXCEEDED scope is handled by `checkKeyQuota` → `key.quotaExceeded`, not a
+ * warning). Pure — the caller owns the emit + the dedupe guard.
+ */
+declare function computeQuotaWarnings(limits: KeyCostLimits, spend: KeySpend, ratio?: number): QuotaWarning[];
+/**
+ * Record a warning for `(keyId, scope, windowStart)` and return whether THIS is
+ * the first time (⇒ the caller should emit). Subsequent calls in the same window
+ * return `false` (deduped). A new window (different `windowStart`) re-arms.
+ */
+declare function markQuotaWarnedOnce(keyId: string, scope: string, windowStart: number): boolean;
+/** TEST SEAM — clear the dedupe guard between suites. */
+declare function __resetQuotaWarnGuardForTests(): void;
+
+export { type QuotaWarning, WEBHOOK_QUOTA_WARN_RATIO, __resetQuotaWarnGuardForTests, computeQuotaWarnings, markQuotaWarnedOnce };

package/dist/outbound-api/quotaWarn.js

@@ -0,0 +1,12 @@
+import {
+  WEBHOOK_QUOTA_WARN_RATIO,
+  __resetQuotaWarnGuardForTests,
+  computeQuotaWarnings,
+  markQuotaWarnedOnce
+} from "../chunk-3QFXFCHG.js";
+export {
+  WEBHOOK_QUOTA_WARN_RATIO,
+  __resetQuotaWarnGuardForTests,
+  computeQuotaWarnings,
+  markQuotaWarnedOnce
+};

package/dist/outbound-api/routeResolver.cjs

@@ -3,7 +3,7 @@
 
 
 
-var _chunkSVXC36MUcjs = require('../chunk-SVXC36MU.cjs');
+var _chunkVACWOIREcjs = require('../chunk-VACWOIRE.cjs');
 require('../chunk-QBZJ7P2T.cjs');
 require('../chunk-4IH4EL7M.cjs');
 
@@ -11,4 +11,4 @@ require('../chunk-4IH4EL7M.cjs');
 
 
 
-exports.isSubscriptionProviderId = _chunkSVXC36MUcjs.isSubscriptionProviderId; exports.parseModelRef = _chunkSVXC36MUcjs.parseModelRef; exports.pickModelRefFromList = _chunkSVXC36MUcjs.pickModelRefFromList; exports.resolveRoute = _chunkSVXC36MUcjs.resolveRoute;
+exports.isSubscriptionProviderId = _chunkVACWOIREcjs.isSubscriptionProviderId; exports.parseModelRef = _chunkVACWOIREcjs.parseModelRef; exports.pickModelRefFromList = _chunkVACWOIREcjs.pickModelRefFromList; exports.resolveRoute = _chunkVACWOIREcjs.resolveRoute;

package/dist/outbound-api/routeResolver.d.cts

@@ -1,7 +1,7 @@
 import '../ports/provider-config-source.cjs';
 import '../provider-proxy/types.cjs';
-import '../types-aBFFXoBz.cjs';
-export { R as RouteResolveError, b as RouteResolveResult, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from '../routeResolver-CbG5uBgm.cjs';
+import '../types-B8Arpxn0.cjs';
+export { R as RouteResolveError, b as RouteResolveResult, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from '../routeResolver-CB3tvJKy.cjs';
 import '@omnicross/contracts/llm-config';
 import '../transformer/types.cjs';
 import '../transformer/TransformerService.cjs';
@@ -23,3 +23,4 @@ import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import '../ProviderProxy-CnMQYN59.cjs';
+import '../keyPolicy-Cp0FntZl.cjs';

package/dist/outbound-api/routeResolver.d.ts

@@ -1,7 +1,7 @@
 import '../ports/provider-config-source.js';
 import '../provider-proxy/types.js';
-import '../types-6OUY_xfA.js';
-export { R as RouteResolveError, b as RouteResolveResult, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from '../routeResolver-B1NglTfe.js';
+import '../types-lgPYQuZS.js';
+export { R as RouteResolveError, b as RouteResolveResult, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from '../routeResolver-C4T7yClx.js';
 import '@omnicross/contracts/llm-config';
 import '../transformer/types.js';
 import '../transformer/TransformerService.js';
@@ -23,3 +23,4 @@ import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import '../ProviderProxy-C-xqrkKi.js';
+import '../keyPolicy-Cp0FntZl.js';

package/dist/outbound-api/routeResolver.js

@@ -3,7 +3,7 @@ import {
   parseModelRef,
   pickModelRefFromList,
   resolveRoute
-} from "../chunk-CZHZGRU7.js";
+} from "../chunk-UHGVBFU3.js";
 import "../chunk-AQ5TNQB7.js";
 import "../chunk-XEKD23J5.js";
 export {

package/dist/outbound-api/types.d.cts

@@ -8,7 +8,7 @@ import '../logger-4GvQNzhE.cjs';
 import '../ports/provider-config-source.cjs';
 import '../ProviderProxy-CnMQYN59.cjs';
 import '../provider-proxy/types.cjs';
-export { T as AccountHealthConfig, A as AccountProbeConfig, C as ChatDispatchMode, a as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, b as EndpointRoutingConfig, F as FingerprintConfig, i as KindMappedEndpoint, M as MessagesModelKind, j as ModelKind, k as ModelPrefixTargets, P as ModelRef, l as OutboundApiDeps, m as OutboundApiKeyCreated, n as OutboundApiKeyInfo, o as OutboundApiServerConfig, p as OutboundApiServerStatus, q as OutboundEndpoint, r as OutboundFormatUrls, s as OutboundKeyActivationMode, O as OutboundKeyDb, t as OutboundKeyDbRow, W as OutboundKeyModelRestrictionMode, u as OutboundKeyPolicy, v as OutboundProxyConfig, R as RequestRole, w as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-aBFFXoBz.cjs';
+export { H as AccountHealthConfig, A as AccountProbeConfig, C as ChatDispatchMode, a as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, b as EndpointRoutingConfig, F as FingerprintConfig, e as KindMappedEndpoint, M as MessagesModelKind, f as ModelKind, g as ModelPrefixTargets, G as ModelRef, h as OutboundApiDeps, i as OutboundApiKeyCreated, j as OutboundApiKeyInfo, k as OutboundApiServerConfig, l as OutboundApiServerStatus, m as OutboundEndpoint, n as OutboundFormatUrls, o as OutboundKeyActivationMode, O as OutboundKeyDb, p as OutboundKeyDbRow, I as OutboundKeyModelRestrictionMode, q as OutboundKeyPolicy, r as OutboundProxyConfig, R as RequestRole, s as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-B8Arpxn0.cjs';
 import '@omnicross/contracts/llm-config';
 import '../transformer/types.cjs';
 import '../transformer/TransformerService.cjs';
@@ -22,3 +22,4 @@ import '../pipeline/SubscriptionAuthSource.cjs';
 import '../pipeline/SubscriptionAuthStrategy.cjs';
 import '../ports/web-search-backend.cjs';
 import '@omnicross/contracts/websearch-types';
+import '../keyPolicy-Cp0FntZl.cjs';

package/dist/outbound-api/types.d.ts

@@ -8,7 +8,7 @@ import '../logger-4GvQNzhE.js';
 import '../ports/provider-config-source.js';
 import '../ProviderProxy-C-xqrkKi.js';
 import '../provider-proxy/types.js';
-export { T as AccountHealthConfig, A as AccountProbeConfig, C as ChatDispatchMode, a as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, b as EndpointRoutingConfig, F as FingerprintConfig, i as KindMappedEndpoint, M as MessagesModelKind, j as ModelKind, k as ModelPrefixTargets, P as ModelRef, l as OutboundApiDeps, m as OutboundApiKeyCreated, n as OutboundApiKeyInfo, o as OutboundApiServerConfig, p as OutboundApiServerStatus, q as OutboundEndpoint, r as OutboundFormatUrls, s as OutboundKeyActivationMode, O as OutboundKeyDb, t as OutboundKeyDbRow, W as OutboundKeyModelRestrictionMode, u as OutboundKeyPolicy, v as OutboundProxyConfig, R as RequestRole, w as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-6OUY_xfA.js';
+export { H as AccountHealthConfig, A as AccountProbeConfig, C as ChatDispatchMode, a as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, b as EndpointRoutingConfig, F as FingerprintConfig, e as KindMappedEndpoint, M as MessagesModelKind, f as ModelKind, g as ModelPrefixTargets, G as ModelRef, h as OutboundApiDeps, i as OutboundApiKeyCreated, j as OutboundApiKeyInfo, k as OutboundApiServerConfig, l as OutboundApiServerStatus, m as OutboundEndpoint, n as OutboundFormatUrls, o as OutboundKeyActivationMode, O as OutboundKeyDb, p as OutboundKeyDbRow, I as OutboundKeyModelRestrictionMode, q as OutboundKeyPolicy, r as OutboundProxyConfig, R as RequestRole, s as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-lgPYQuZS.js';
 import '@omnicross/contracts/llm-config';
 import '../transformer/types.js';
 import '../transformer/TransformerService.js';
@@ -22,3 +22,4 @@ import '../pipeline/SubscriptionAuthSource.js';
 import '../pipeline/SubscriptionAuthStrategy.js';
 import '../ports/web-search-backend.js';
 import '@omnicross/contracts/websearch-types';
+import '../keyPolicy-Cp0FntZl.js';

package/dist/outbound-api.cjs

@@ -55,39 +55,38 @@
 
 
 
-
-
-
-
-var _chunk2FMI2B6Vcjs = require('./chunk-2FMI2B6V.cjs');
+var _chunkDKPXN34Vcjs = require('./chunk-DKPXN34V.cjs');
 require('./chunk-HQP3K7PU.cjs');
 require('./chunk-FZ46M34D.cjs');
-require('./chunk-46ZIFWYG.cjs');
 require('./chunk-3OPYJG76.cjs');
-require('./chunk-FFALUUZZ.cjs');
-require('./chunk-C72S6TTV.cjs');
+require('./chunk-RGTR7CIO.cjs');
 require('./chunk-DWKQZ2SK.cjs');
 require('./chunk-4VAVYUZS.cjs');
 require('./chunk-7YN22L2H.cjs');
-require('./chunk-2DCNB7DF.cjs');
+require('./chunk-SU2GCLAC.cjs');
+require('./chunk-C72S6TTV.cjs');
 require('./chunk-EYZYXJTJ.cjs');
 require('./chunk-YMFAJFQT.cjs');
-require('./chunk-3QOSDDNI.cjs');
+require('./chunk-SNYBEXLB.cjs');
+require('./chunk-46ZIFWYG.cjs');
 require('./chunk-GBHYAGX3.cjs');
 require('./chunk-RPII3E6Z.cjs');
 require('./chunk-6RPZADX3.cjs');
 require('./chunk-QWBWGODS.cjs');
+require('./chunk-UIBD2YY5.cjs');
+require('./chunk-R3HK6R4B.cjs');
+require('./chunk-HYN75H6G.cjs');
+require('./chunk-Q27JY5RG.cjs');
+require('./chunk-QXD4MV2X.cjs');
 require('./chunk-NYUNU75A.cjs');
 require('./chunk-VQY5W4YW.cjs');
-require('./chunk-Y6OM7EV7.cjs');
+require('./chunk-KFI44N2R.cjs');
 require('./chunk-SVNDB62D.cjs');
-require('./chunk-R3HK6R4B.cjs');
-require('./chunk-AEOZIDEB.cjs');
+
+
+var _chunkAPYG5QD7cjs = require('./chunk-APYG5QD7.cjs');
 require('./chunk-L74VDN4A.cjs');
-require('./chunk-KUU2RNG6.cjs');
-require('./chunk-Q27JY5RG.cjs');
-require('./chunk-QXD4MV2X.cjs');
-require('./chunk-A2YMUCBT.cjs');
+require('./chunk-4YINUUKQ.cjs');
 
 
 
@@ -104,15 +103,25 @@ require('./chunk-A2YMUCBT.cjs');
 
 
 
-var _chunkSVXC36MUcjs = require('./chunk-SVXC36MU.cjs');
+var _chunkVACWOIREcjs = require('./chunk-VACWOIRE.cjs');
 require('./chunk-QBZJ7P2T.cjs');
 
 
 var _chunk4IH4EL7Mcjs = require('./chunk-4IH4EL7M.cjs');
+require('./chunk-A2YMUCBT.cjs');
+
+
+var _chunkE3UCVHLPcjs = require('./chunk-E3UCVHLP.cjs');
+
+
+
+var _chunkFCR77GYMcjs = require('./chunk-FCR77GYM.cjs');
+require('./chunk-AEOZIDEB.cjs');
+require('./chunk-XSVNC2UD.cjs');
 require('./chunk-SUEGJ75D.cjs');
-require('./chunk-S6JGLF3G.cjs');
 require('./chunk-RSJ3TWJQ.cjs');
 require('./chunk-YGXJGRFI.cjs');
+require('./chunk-OCEUVQHW.cjs');
 require('./chunk-NZYN7C3P.cjs');
 require('./chunk-JMJBSACD.cjs');
 require('./chunk-GMMT7RVN.cjs');
@@ -194,4 +203,4 @@ require('./chunk-UNEFIWXI.cjs');
 
 
 
-exports.AUDIT_REDACTED = _chunk2FMI2B6Vcjs.AUDIT_REDACTED; exports.ConcurrencyQueueFullError = _chunk2FMI2B6Vcjs.ConcurrencyQueueFullError; exports.ConcurrencyWaitCancelledError = _chunk2FMI2B6Vcjs.ConcurrencyWaitCancelledError; exports.ConcurrencyWaitTimeoutError = _chunk2FMI2B6Vcjs.ConcurrencyWaitTimeoutError; exports.DEFAULT_ACCOUNT_PROBE = _chunk2FMI2B6Vcjs.DEFAULT_ACCOUNT_PROBE; exports.DEFAULT_CONCURRENCY_QUEUE = _chunk2FMI2B6Vcjs.DEFAULT_CONCURRENCY_QUEUE; exports.DEFAULT_FINGERPRINT = _chunk2FMI2B6Vcjs.DEFAULT_FINGERPRINT; exports.DEFAULT_OUTBOUND_PORT = _chunk2FMI2B6Vcjs.DEFAULT_OUTBOUND_PORT; exports.DEFAULT_USER_MESSAGE_QUEUE = _chunk2FMI2B6Vcjs.DEFAULT_USER_MESSAGE_QUEUE; exports.ENDPOINT_MODEL_KINDS = _chunk4IH4EL7Mcjs.ENDPOINT_MODEL_KINDS; exports.KeySpendTracker = _chunk2FMI2B6Vcjs.KeySpendTracker; exports.KeyedMutex = _chunk2FMI2B6Vcjs.KeyedMutex; exports.OUTBOUND_API_SERVER_CONFIG_KEY = _chunk2FMI2B6Vcjs.OUTBOUND_API_SERVER_CONFIG_KEY; exports.OutboundApiConfigError = _chunk2FMI2B6Vcjs.OutboundApiConfigError; exports.OutboundApiServer = _chunk2FMI2B6Vcjs.OutboundApiServer; exports.OutboundConcurrencyGate = _chunk2FMI2B6Vcjs.OutboundConcurrencyGate; exports.OutboundRateLimiter = _chunk2FMI2B6Vcjs.OutboundRateLimiter; exports.SUBSCRIPTION_PROVIDER_IDS = _chunkSVXC36MUcjs.SUBSCRIPTION_PROVIDER_IDS; exports.SerialQueueTimeoutError = _chunk2FMI2B6Vcjs.SerialQueueTimeoutError; exports.UserMessageSerialQueue = _chunk2FMI2B6Vcjs.UserMessageSerialQueue; exports.__resetOutboundApiServerForTests = _chunk2FMI2B6Vcjs.__resetOutboundApiServerForTests; exports.beginAuditCapture = _chunk2FMI2B6Vcjs.beginAuditCapture; exports.beginBillingCapture = _chunk2FMI2B6Vcjs.beginBillingCapture; exports.checkKeyQuota = _chunk2FMI2B6Vcjs.checkKeyQuota; exports.classifyModelPrefix = _chunkSVXC36MUcjs.classifyModelPrefix; exports.computeKeyExpiry = _chunk2FMI2B6Vcjs.computeKeyExpiry; exports.computeVoucherGrant = _chunk2FMI2B6Vcjs.computeVoucherGrant; exports.createNamedKey = _chunk2FMI2B6Vcjs.createNamedKey; exports.defaultServerConfig = _chunk2FMI2B6Vcjs.defaultServerConfig; exports.detectModelKind = _chunkSVXC36MUcjs.detectModelKind; exports.detectRequestRole = _chunkSVXC36MUcjs.detectRequestRole; exports.endpointSupportsSubscription = _chunkSVXC36MUcjs.endpointSupportsSubscription; exports.endpointToIngressFormat = _chunkSVXC36MUcjs.endpointToIngressFormat; exports.formatUrls = _chunk2FMI2B6Vcjs.formatUrls; exports.generateVoucherCode = _chunk2FMI2B6Vcjs.generateVoucherCode; exports.getOutboundApiServer = _chunk2FMI2B6Vcjs.getOutboundApiServer; exports.handleVoucherRedeem = _chunk2FMI2B6Vcjs.handleVoucherRedeem; exports.hashKey = _chunk2FMI2B6Vcjs.hashKey; exports.hashVoucherCode = _chunk2FMI2B6Vcjs.hashVoucherCode; exports.isConcurrencyRejection = _chunk2FMI2B6Vcjs.isConcurrencyRejection; exports.isKindMappedEndpoint = _chunkSVXC36MUcjs.isKindMappedEndpoint; exports.isRedeemRequest = _chunk2FMI2B6Vcjs.isRedeemRequest; exports.isSerialQueueTimeout = _chunk2FMI2B6Vcjs.isSerialQueueTimeout; exports.isSubscriptionProviderId = _chunkSVXC36MUcjs.isSubscriptionProviderId; exports.isUserMessageRequest = _chunk2FMI2B6Vcjs.isUserMessageRequest; exports.loadServerConfig = _chunk2FMI2B6Vcjs.loadServerConfig; exports.mergeServerConfig = _chunk2FMI2B6Vcjs.mergeServerConfig; exports.modelKindsForEndpoint = _chunkSVXC36MUcjs.modelKindsForEndpoint; exports.newVoucherId = _chunk2FMI2B6Vcjs.newVoucherId; exports.normalizeAccountProbe = _chunk2FMI2B6Vcjs.normalizeAccountProbe; exports.normalizeAudit = _chunk2FMI2B6Vcjs.normalizeAudit; exports.normalizeBilling = _chunk2FMI2B6Vcjs.normalizeBilling; exports.normalizeFingerprint = _chunk2FMI2B6Vcjs.normalizeFingerprint; exports.normalizePrefixTargets = _chunk2FMI2B6Vcjs.normalizePrefixTargets; exports.normalizeProxyConfig = _chunk2FMI2B6Vcjs.normalizeProxyConfig; exports.normalizeProxySegment = _chunk2FMI2B6Vcjs.normalizeProxySegment; exports.normalizeQueueSegments = _chunk2FMI2B6Vcjs.normalizeQueueSegments; exports.normalizeServerConfig = _chunk2FMI2B6Vcjs.normalizeServerConfig; exports.normalizeVoucher = _chunk2FMI2B6Vcjs.normalizeVoucher; exports.normalizeWebhookDestination = _chunk2FMI2B6Vcjs.normalizeWebhookDestination; exports.normalizeWebhookSegment = _chunk2FMI2B6Vcjs.normalizeWebhookSegment; exports.parseModelRef = _chunkSVXC36MUcjs.parseModelRef; exports.pickModelRefFromList = _chunkSVXC36MUcjs.pickModelRefFromList; exports.randomBase62 = _chunk2FMI2B6Vcjs.randomBase62; exports.redactAuditText = _chunk2FMI2B6Vcjs.redactAuditText; exports.resolvePrefixTarget = _chunkSVXC36MUcjs.resolvePrefixTarget; exports.resolveRoute = _chunkSVXC36MUcjs.resolveRoute; exports.saveServerConfig = _chunk2FMI2B6Vcjs.saveServerConfig; exports.startOfLocalDay = _chunk2FMI2B6Vcjs.startOfLocalDay; exports.startOfLocalWeek = _chunk2FMI2B6Vcjs.startOfLocalWeek; exports.toVoucherInfo = _chunk2FMI2B6Vcjs.toVoucherInfo; exports.validateEndpointModelConfig = _chunkSVXC36MUcjs.validateEndpointModelConfig; exports.validateServerModelConfig = _chunkSVXC36MUcjs.validateServerModelConfig; exports.verifyKey = _chunk2FMI2B6Vcjs.verifyKey; exports.verifyPresentedKey = _chunk2FMI2B6Vcjs.verifyPresentedKey; exports.voucherCodePrefix = _chunk2FMI2B6Vcjs.voucherCodePrefix;
+exports.AUDIT_REDACTED = _chunkFCR77GYMcjs.AUDIT_REDACTED; exports.ConcurrencyQueueFullError = _chunkDKPXN34Vcjs.ConcurrencyQueueFullError; exports.ConcurrencyWaitCancelledError = _chunkDKPXN34Vcjs.ConcurrencyWaitCancelledError; exports.ConcurrencyWaitTimeoutError = _chunkDKPXN34Vcjs.ConcurrencyWaitTimeoutError; exports.DEFAULT_ACCOUNT_PROBE = _chunkDKPXN34Vcjs.DEFAULT_ACCOUNT_PROBE; exports.DEFAULT_CONCURRENCY_QUEUE = _chunkDKPXN34Vcjs.DEFAULT_CONCURRENCY_QUEUE; exports.DEFAULT_FINGERPRINT = _chunkDKPXN34Vcjs.DEFAULT_FINGERPRINT; exports.DEFAULT_OUTBOUND_PORT = _chunkDKPXN34Vcjs.DEFAULT_OUTBOUND_PORT; exports.DEFAULT_USER_MESSAGE_QUEUE = _chunkDKPXN34Vcjs.DEFAULT_USER_MESSAGE_QUEUE; exports.ENDPOINT_MODEL_KINDS = _chunk4IH4EL7Mcjs.ENDPOINT_MODEL_KINDS; exports.KeySpendTracker = _chunkDKPXN34Vcjs.KeySpendTracker; exports.KeyedMutex = _chunkDKPXN34Vcjs.KeyedMutex; exports.OUTBOUND_API_SERVER_CONFIG_KEY = _chunkDKPXN34Vcjs.OUTBOUND_API_SERVER_CONFIG_KEY; exports.OutboundApiConfigError = _chunkDKPXN34Vcjs.OutboundApiConfigError; exports.OutboundApiServer = _chunkDKPXN34Vcjs.OutboundApiServer; exports.OutboundConcurrencyGate = _chunkDKPXN34Vcjs.OutboundConcurrencyGate; exports.OutboundRateLimiter = _chunkDKPXN34Vcjs.OutboundRateLimiter; exports.SUBSCRIPTION_PROVIDER_IDS = _chunkVACWOIREcjs.SUBSCRIPTION_PROVIDER_IDS; exports.SerialQueueTimeoutError = _chunkDKPXN34Vcjs.SerialQueueTimeoutError; exports.UserMessageSerialQueue = _chunkDKPXN34Vcjs.UserMessageSerialQueue; exports.__resetOutboundApiServerForTests = _chunkDKPXN34Vcjs.__resetOutboundApiServerForTests; exports.beginAuditCapture = _chunkE3UCVHLPcjs.beginAuditCapture; exports.beginBillingCapture = _chunkAPYG5QD7cjs.beginBillingCapture; exports.checkKeyQuota = _chunkDKPXN34Vcjs.checkKeyQuota; exports.classifyModelPrefix = _chunkVACWOIREcjs.classifyModelPrefix; exports.computeKeyExpiry = _chunkDKPXN34Vcjs.computeKeyExpiry; exports.computeVoucherGrant = _chunkDKPXN34Vcjs.computeVoucherGrant; exports.createNamedKey = _chunkDKPXN34Vcjs.createNamedKey; exports.defaultServerConfig = _chunkDKPXN34Vcjs.defaultServerConfig; exports.detectModelKind = _chunkVACWOIREcjs.detectModelKind; exports.detectRequestRole = _chunkVACWOIREcjs.detectRequestRole; exports.endpointSupportsSubscription = _chunkVACWOIREcjs.endpointSupportsSubscription; exports.endpointToIngressFormat = _chunkVACWOIREcjs.endpointToIngressFormat; exports.formatUrls = _chunkDKPXN34Vcjs.formatUrls; exports.generateVoucherCode = _chunkDKPXN34Vcjs.generateVoucherCode; exports.getOutboundApiServer = _chunkDKPXN34Vcjs.getOutboundApiServer; exports.handleVoucherRedeem = _chunkDKPXN34Vcjs.handleVoucherRedeem; exports.hashKey = _chunkDKPXN34Vcjs.hashKey; exports.hashVoucherCode = _chunkDKPXN34Vcjs.hashVoucherCode; exports.isConcurrencyRejection = _chunkDKPXN34Vcjs.isConcurrencyRejection; exports.isKindMappedEndpoint = _chunkVACWOIREcjs.isKindMappedEndpoint; exports.isRedeemRequest = _chunkDKPXN34Vcjs.isRedeemRequest; exports.isSerialQueueTimeout = _chunkDKPXN34Vcjs.isSerialQueueTimeout; exports.isSubscriptionProviderId = _chunkVACWOIREcjs.isSubscriptionProviderId; exports.isUserMessageRequest = _chunkDKPXN34Vcjs.isUserMessageRequest; exports.loadServerConfig = _chunkDKPXN34Vcjs.loadServerConfig; exports.mergeServerConfig = _chunkDKPXN34Vcjs.mergeServerConfig; exports.modelKindsForEndpoint = _chunkVACWOIREcjs.modelKindsForEndpoint; exports.newVoucherId = _chunkDKPXN34Vcjs.newVoucherId; exports.normalizeAccountProbe = _chunkDKPXN34Vcjs.normalizeAccountProbe; exports.normalizeAudit = _chunkDKPXN34Vcjs.normalizeAudit; exports.normalizeBilling = _chunkDKPXN34Vcjs.normalizeBilling; exports.normalizeFingerprint = _chunkDKPXN34Vcjs.normalizeFingerprint; exports.normalizePrefixTargets = _chunkDKPXN34Vcjs.normalizePrefixTargets; exports.normalizeProxyConfig = _chunkDKPXN34Vcjs.normalizeProxyConfig; exports.normalizeProxySegment = _chunkDKPXN34Vcjs.normalizeProxySegment; exports.normalizeQueueSegments = _chunkDKPXN34Vcjs.normalizeQueueSegments; exports.normalizeServerConfig = _chunkDKPXN34Vcjs.normalizeServerConfig; exports.normalizeVoucher = _chunkDKPXN34Vcjs.normalizeVoucher; exports.normalizeWebhookDestination = _chunkDKPXN34Vcjs.normalizeWebhookDestination; exports.normalizeWebhookSegment = _chunkDKPXN34Vcjs.normalizeWebhookSegment; exports.parseModelRef = _chunkVACWOIREcjs.parseModelRef; exports.pickModelRefFromList = _chunkVACWOIREcjs.pickModelRefFromList; exports.randomBase62 = _chunkDKPXN34Vcjs.randomBase62; exports.redactAuditText = _chunkFCR77GYMcjs.redactAuditText; exports.resolvePrefixTarget = _chunkVACWOIREcjs.resolvePrefixTarget; exports.resolveRoute = _chunkVACWOIREcjs.resolveRoute; exports.saveServerConfig = _chunkDKPXN34Vcjs.saveServerConfig; exports.startOfLocalDay = _chunkDKPXN34Vcjs.startOfLocalDay; exports.startOfLocalWeek = _chunkDKPXN34Vcjs.startOfLocalWeek; exports.toVoucherInfo = _chunkDKPXN34Vcjs.toVoucherInfo; exports.validateEndpointModelConfig = _chunkVACWOIREcjs.validateEndpointModelConfig; exports.validateServerModelConfig = _chunkVACWOIREcjs.validateServerModelConfig; exports.verifyKey = _chunkDKPXN34Vcjs.verifyKey; exports.verifyPresentedKey = _chunkDKPXN34Vcjs.verifyPresentedKey; exports.voucherCodePrefix = _chunkDKPXN34Vcjs.voucherCodePrefix;