@omnicross/core 0.1.3 → 0.1.4

package/dist/outbound-api.d.cts

@@ -1,13 +1,18 @@
 import { VoucherConfig } from '@omnicross/contracts/voucher-types';
-import { i as KindMappedEndpoint, j as ModelKind, q as OutboundEndpoint, b as EndpointRoutingConfig, o as OutboundApiServerConfig, U as UserMessageQueueConfig, a as ConcurrencyQueueConfig, l as OutboundApiDeps, p as OutboundApiServerStatus, r as OutboundFormatUrls, A as AccountProbeConfig, F as FingerprintConfig, k as ModelPrefixTargets, v as OutboundProxyConfig, P as ModelRef, K as KeyCostLimits, S as ModelRestriction, O as OutboundKeyDb, m as OutboundApiKeyCreated, R as RequestRole } from './types-aBFFXoBz.cjs';
-export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, c as KeyExpiryInput, d as KeyExpiryResult, e as KeySpend, f as KeySpendReader, g as KeySpendSeeder, h as KeySpendTracker, M as MessagesModelKind, n as OutboundApiKeyInfo, s as OutboundKeyActivationMode, t as OutboundKeyDbRow, u as OutboundKeyPolicy, Q as QuotaDecision, w as ResponsesModelKind, V as VoucherCreateInput, x as VoucherDb, y as checkKeyQuota, z as computeKeyExpiry, B as computeVoucherGrant, D as generateVoucherCode, G as hashVoucherCode, H as newVoucherId, I as startOfLocalDay, J as startOfLocalWeek, L as toVoucherInfo, N as voucherCodePrefix } from './types-aBFFXoBz.cjs';
+import { e as KindMappedEndpoint, f as ModelKind, m as OutboundEndpoint, b as EndpointRoutingConfig, k as OutboundApiServerConfig, U as UserMessageQueueConfig, a as ConcurrencyQueueConfig, h as OutboundApiDeps, l as OutboundApiServerStatus, n as OutboundFormatUrls, A as AccountProbeConfig, F as FingerprintConfig, g as ModelPrefixTargets, r as OutboundProxyConfig, G as ModelRef, O as OutboundKeyDb, i as OutboundApiKeyCreated, R as RequestRole } from './types-B8Arpxn0.cjs';
+export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, K as KeySpendReader, c as KeySpendSeeder, d as KeySpendTracker, M as MessagesModelKind, j as OutboundApiKeyInfo, o as OutboundKeyActivationMode, p as OutboundKeyDbRow, q as OutboundKeyPolicy, s as ResponsesModelKind, V as VoucherCreateInput, t as VoucherDb, u as computeVoucherGrant, v as generateVoucherCode, w as hashVoucherCode, x as newVoucherId, y as startOfLocalDay, z as startOfLocalWeek, B as toVoucherInfo, D as voucherCodePrefix } from './types-B8Arpxn0.cjs';
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingConfig } from '@omnicross/contracts/billing-types';
 import { WebhookDestination, WebhookConfig } from '@omnicross/contracts/webhook-types';
+export { AUDIT_REDACTED, redactAuditText } from './outbound-api/auditRedact.cjs';
+export { AuditCaptureContext, beginAuditCapture } from './outbound-api/auditCapture.cjs';
+export { BillingCaptureContext, beginBillingCapture } from './outbound-api/billingCapture.cjs';
+import { K as KeyCostLimits, M as ModelRestriction } from './keyPolicy-Cp0FntZl.cjs';
+export { a as KeyExpiryInput, b as KeyExpiryResult, c as KeySpend, Q as QuotaDecision, d as checkKeyQuota, e as computeKeyExpiry } from './keyPolicy-Cp0FntZl.cjs';
 import http from 'node:http';
 import { IngressFormat } from './provider-proxy/types.cjs';
-export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-CbG5uBgm.cjs';
+export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-CB3tvJKy.cjs';
 import '@omnicross/contracts/health-logging-types';
 import './logger-4GvQNzhE.cjs';
 import './ports/provider-config-source.cjs';
@@ -369,142 +374,6 @@ declare function saveServerConfig(store: ApiServerSettingsStore, config: Outboun
 /** Apply a partial patch to a config, returning the merged whole. */
 declare function mergeServerConfig(current: OutboundApiServerConfig, patch: Partial<OutboundApiServerConfig>): OutboundApiServerConfig;
 
-/**
- * auditRedact — the pure secret-redaction pass for captured audit bodies
- * (request-audit-log, design D3/D7).
- *
- * Body capture is opt-in and inherently sensitive: a prompt or tool argument can
- * embed a secret. {@link redactAuditText} is run over EVERY captured body (and
- * any other free text stored in a record) BEFORE it is persisted — defense in
- * depth on top of "request headers are NEVER captured" (so an Authorization /
- * x-api-key HEADER value never enters a record in the first place).
- *
- * It masks the obvious, high-confidence secret shapes ONLY (frozen list) — never
- * a broad heuristic that would gut a legitimate prompt:
- *  - `sk-…` API keys (covers `sk-ant-…`, `sk-omnicross-…`, `sk-proj-…`, OpenAI).
- *  - `Bearer <token>` authorization values.
- *  - `x-api-key` / `api-key` / `authorization` values written inline as text.
- *  - Google `AIza…` API keys.
- *
- * Pure + allocation-light + never throws.
- *
- * @module @omnicross/core/outbound-api/auditRedact
- */
-/** The sentinel a masked secret is replaced with. */
-declare const AUDIT_REDACTED = "***REDACTED***";
-/**
- * Mask obvious secrets in `text`. Pure; returns the input unchanged when it holds
- * no recognized secret shape. Never throws (a bad input returns `''`).
- */
-declare function redactAuditText(text: string): string;
-
-/**
- * auditCapture — the outbound server's post-response audit capture hook
- * (request-audit-log, design D1/D3/D5).
- *
- * {@link beginAuditCapture} is called at the TOP of `handleOutboundRequest`. It
- * reads the active capture config from the core slot; when audit is DISABLED it
- * returns `null` immediately (one slot read — no assembly, no listener, zero
- * regression). When enabled it:
- *  - registers a one-shot `res.on('close')` listener that, at response end,
- *    assembles the {@link AuditRecord} from the http `req` (IP via the socket, or
- *    a trusted `X-Forwarded-For` only when configured — LEAD OQ1 anti-spoof; UA;
- *    method; path with the query string DROPPED), the response `statusCode`, the
- *    elapsed ms, and the fields the handler fills in (keyId / model / provider /
- *    error / bodies) — then hands it to the fire-and-forget `recordAudit`;
- *  - when `captureBodies` is ALSO on, wraps `res.write`/`res.end` to accumulate a
- *    BOUNDED response body (metadata-only for a streaming `text/event-stream`
- *    response — a full stream is unbounded), and truncates+redacts both bodies.
- *
- * Request HEADERS are NEVER read into a record (Authorization / x-api-key live
- * there). Every stored body passes through {@link redactAuditText}. The assembly
- * is wrapped so a capture failure can never surface into the relay path.
- *
- * @module @omnicross/core/outbound-api/auditCapture
- */
-
-/**
- * The mutable context the request handler enriches as it progresses. `null` is
- * returned by {@link beginAuditCapture} when audit is disabled — the handler
- * guards every write with `if (audit)`.
- */
-interface AuditCaptureContext {
-    /** Outbound key id (set after auth). NEVER the key material. */
-    keyId?: string | null;
-    /** Resolved upstream model (set after route resolution). */
-    model?: string;
-    /** Upstream provider id (set after route resolution). */
-    provider?: string;
-    /** Sanitized error message (set on a relay/dispatch failure). */
-    error?: string;
-    /** Stash the raw request body for capture (a no-op unless `captureBodies`). */
-    setRequestBody(raw: string): void;
-}
-/**
- * Begin audit capture for one request. Returns a mutable context the handler
- * enriches, or `null` when audit is disabled (zero-cost path). The record is
- * emitted on response `close` via the fire-and-forget sink.
- */
-declare function beginAuditCapture(req: http.IncomingMessage, res: http.ServerResponse, now: number): AuditCaptureContext | null;
-
-/**
- * billingCapture — the outbound server's post-response billing capture hook
- * (billing-event-stream, design D1/D4).
- *
- * {@link beginBillingCapture} is called at the TOP of `handleOutboundRequest`. It
- * reads the active billing config from the core slot; when billing is DISABLED it
- * returns `null` immediately (one slot read — no assembly, no listener, zero
- * regression). When enabled it registers a one-shot `res.close` listener that
- * assembles a {@link BillingEvent} from the handler-filled context (keyId / model
- * / provider / authMode), the response `statusCode`, and this request's METERED
- * FACTS (token counts + the ALREADY-COMPUTED cost) — then hands it to the
- * no-throw {@link publishBillingEvent}.
- *
- * COST REUSE (design D3 — no double pricing): the metered facts are read from the
- * per-request usage stash the usage tap populates ({@link readAuditUsage} — the
- * SAME stash `usage-events.jsonl` correlation uses, populated UNCONDITIONALLY by
- * the taps, independent of whether request-audit is enabled). Token counts are
- * stashed SYNCHRONOUSLY at `record()`; the cost lands on the recorder's deferred
- * pricing tick (scheduled BEFORE the response closes). So the assembly is deferred
- * one macrotask past `close` — by then the earlier-scheduled pricing tick has run
- * and stashed the computed cost we REUSE (we never re-price).
- *
- * BILLABLE-ONLY: an event is emitted ONLY when the request produced usage (an
- * upstream call was billed). Auth failures / rate-limit / model-restriction
- * rejections return before dispatch, stash no usage, and emit NO billing event.
- *
- * @module @omnicross/core/outbound-api/billingCapture
- */
-
-/**
- * The mutable context the request handler enriches as it progresses. `null` is
- * returned by {@link beginBillingCapture} when billing is disabled — the handler
- * guards every write with `if (billing)`.
- */
-interface BillingCaptureContext {
-    /** Outbound key id (set after auth). NEVER the key material. */
-    keyId?: string | null;
-    /** Resolved upstream model (set after route resolution). */
-    model?: string;
-    /** Upstream provider id (set after route resolution). */
-    provider?: string;
-    /** Re-auth mode the request billed under (set after route resolution). */
-    authMode?: 'byo' | 'subscription';
-}
-/**
- * Deferral used to schedule the event assembly one macrotask past `close`, so the
- * usage tap's earlier-scheduled pricing tick has stashed the cost we reuse.
- * Injectable ONLY for deterministic tests; production uses a zero-delay timer.
- */
-type BillingDefer = (fn: () => void) => void;
-/**
- * Begin billing capture for one request. Returns a mutable context the handler
- * enriches, or `null` when billing is disabled (zero-cost path). The event is
- * emitted on response `close` via the no-throw sink — but ONLY when the request
- * produced usage (a billable request).
- */
-declare function beginBillingCapture(_req: http.IncomingMessage, res: http.ServerResponse, now: number, defer?: BillingDefer): BillingCaptureContext | null;
-
 /**
  * modelPrefixDispatch — pure model-name PREFIX classification for the `chat`
  * endpoint's opt-in `dispatchMode: 'prefix'` (openai-chat-bridge #11, design D2).
@@ -1006,4 +875,4 @@ declare function getOutboundApiServer(deps?: OutboundApiDeps, onPortChange?: (po
 /** Reset the singleton (tests / teardown only). */
 declare function __resetOutboundApiServerForTests(): void;
 
-export { AUDIT_REDACTED, AccountProbeConfig, type ApiServerSettingsStore, type ApplyConfigInput, type AuditCaptureContext, type BillingCaptureContext, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, type EndpointModelConfigError, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiConfigError, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundProxyConfig, OutboundRateLimiter, RequestRole, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, beginAuditCapture, beginBillingCapture, classifyModelPrefix, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, endpointToIngressFormat, formatUrls, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, redactAuditText, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateServerModelConfig, verifyKey, verifyPresentedKey };
+export { AccountProbeConfig, type ApiServerSettingsStore, type ApplyConfigInput, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, type EndpointModelConfigError, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiConfigError, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundProxyConfig, OutboundRateLimiter, RequestRole, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, classifyModelPrefix, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, endpointToIngressFormat, formatUrls, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateServerModelConfig, verifyKey, verifyPresentedKey };

package/dist/outbound-api.d.ts

@@ -1,13 +1,18 @@
 import { VoucherConfig } from '@omnicross/contracts/voucher-types';
-import { i as KindMappedEndpoint, j as ModelKind, q as OutboundEndpoint, b as EndpointRoutingConfig, o as OutboundApiServerConfig, U as UserMessageQueueConfig, a as ConcurrencyQueueConfig, l as OutboundApiDeps, p as OutboundApiServerStatus, r as OutboundFormatUrls, A as AccountProbeConfig, F as FingerprintConfig, k as ModelPrefixTargets, v as OutboundProxyConfig, P as ModelRef, K as KeyCostLimits, S as ModelRestriction, O as OutboundKeyDb, m as OutboundApiKeyCreated, R as RequestRole } from './types-6OUY_xfA.js';
-export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, c as KeyExpiryInput, d as KeyExpiryResult, e as KeySpend, f as KeySpendReader, g as KeySpendSeeder, h as KeySpendTracker, M as MessagesModelKind, n as OutboundApiKeyInfo, s as OutboundKeyActivationMode, t as OutboundKeyDbRow, u as OutboundKeyPolicy, Q as QuotaDecision, w as ResponsesModelKind, V as VoucherCreateInput, x as VoucherDb, y as checkKeyQuota, z as computeKeyExpiry, B as computeVoucherGrant, D as generateVoucherCode, G as hashVoucherCode, H as newVoucherId, I as startOfLocalDay, J as startOfLocalWeek, L as toVoucherInfo, N as voucherCodePrefix } from './types-6OUY_xfA.js';
+import { e as KindMappedEndpoint, f as ModelKind, m as OutboundEndpoint, b as EndpointRoutingConfig, k as OutboundApiServerConfig, U as UserMessageQueueConfig, a as ConcurrencyQueueConfig, h as OutboundApiDeps, l as OutboundApiServerStatus, n as OutboundFormatUrls, A as AccountProbeConfig, F as FingerprintConfig, g as ModelPrefixTargets, r as OutboundProxyConfig, G as ModelRef, O as OutboundKeyDb, i as OutboundApiKeyCreated, R as RequestRole } from './types-lgPYQuZS.js';
+export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, K as KeySpendReader, c as KeySpendSeeder, d as KeySpendTracker, M as MessagesModelKind, j as OutboundApiKeyInfo, o as OutboundKeyActivationMode, p as OutboundKeyDbRow, q as OutboundKeyPolicy, s as ResponsesModelKind, V as VoucherCreateInput, t as VoucherDb, u as computeVoucherGrant, v as generateVoucherCode, w as hashVoucherCode, x as newVoucherId, y as startOfLocalDay, z as startOfLocalWeek, B as toVoucherInfo, D as voucherCodePrefix } from './types-lgPYQuZS.js';
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingConfig } from '@omnicross/contracts/billing-types';
 import { WebhookDestination, WebhookConfig } from '@omnicross/contracts/webhook-types';
+export { AUDIT_REDACTED, redactAuditText } from './outbound-api/auditRedact.js';
+export { AuditCaptureContext, beginAuditCapture } from './outbound-api/auditCapture.js';
+export { BillingCaptureContext, beginBillingCapture } from './outbound-api/billingCapture.js';
+import { K as KeyCostLimits, M as ModelRestriction } from './keyPolicy-Cp0FntZl.js';
+export { a as KeyExpiryInput, b as KeyExpiryResult, c as KeySpend, Q as QuotaDecision, d as checkKeyQuota, e as computeKeyExpiry } from './keyPolicy-Cp0FntZl.js';
 import http from 'node:http';
 import { IngressFormat } from './provider-proxy/types.js';
-export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-B1NglTfe.js';
+export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-C4T7yClx.js';
 import '@omnicross/contracts/health-logging-types';
 import './logger-4GvQNzhE.js';
 import './ports/provider-config-source.js';
@@ -369,142 +374,6 @@ declare function saveServerConfig(store: ApiServerSettingsStore, config: Outboun
 /** Apply a partial patch to a config, returning the merged whole. */
 declare function mergeServerConfig(current: OutboundApiServerConfig, patch: Partial<OutboundApiServerConfig>): OutboundApiServerConfig;
 
-/**
- * auditRedact — the pure secret-redaction pass for captured audit bodies
- * (request-audit-log, design D3/D7).
- *
- * Body capture is opt-in and inherently sensitive: a prompt or tool argument can
- * embed a secret. {@link redactAuditText} is run over EVERY captured body (and
- * any other free text stored in a record) BEFORE it is persisted — defense in
- * depth on top of "request headers are NEVER captured" (so an Authorization /
- * x-api-key HEADER value never enters a record in the first place).
- *
- * It masks the obvious, high-confidence secret shapes ONLY (frozen list) — never
- * a broad heuristic that would gut a legitimate prompt:
- *  - `sk-…` API keys (covers `sk-ant-…`, `sk-omnicross-…`, `sk-proj-…`, OpenAI).
- *  - `Bearer <token>` authorization values.
- *  - `x-api-key` / `api-key` / `authorization` values written inline as text.
- *  - Google `AIza…` API keys.
- *
- * Pure + allocation-light + never throws.
- *
- * @module @omnicross/core/outbound-api/auditRedact
- */
-/** The sentinel a masked secret is replaced with. */
-declare const AUDIT_REDACTED = "***REDACTED***";
-/**
- * Mask obvious secrets in `text`. Pure; returns the input unchanged when it holds
- * no recognized secret shape. Never throws (a bad input returns `''`).
- */
-declare function redactAuditText(text: string): string;
-
-/**
- * auditCapture — the outbound server's post-response audit capture hook
- * (request-audit-log, design D1/D3/D5).
- *
- * {@link beginAuditCapture} is called at the TOP of `handleOutboundRequest`. It
- * reads the active capture config from the core slot; when audit is DISABLED it
- * returns `null` immediately (one slot read — no assembly, no listener, zero
- * regression). When enabled it:
- *  - registers a one-shot `res.on('close')` listener that, at response end,
- *    assembles the {@link AuditRecord} from the http `req` (IP via the socket, or
- *    a trusted `X-Forwarded-For` only when configured — LEAD OQ1 anti-spoof; UA;
- *    method; path with the query string DROPPED), the response `statusCode`, the
- *    elapsed ms, and the fields the handler fills in (keyId / model / provider /
- *    error / bodies) — then hands it to the fire-and-forget `recordAudit`;
- *  - when `captureBodies` is ALSO on, wraps `res.write`/`res.end` to accumulate a
- *    BOUNDED response body (metadata-only for a streaming `text/event-stream`
- *    response — a full stream is unbounded), and truncates+redacts both bodies.
- *
- * Request HEADERS are NEVER read into a record (Authorization / x-api-key live
- * there). Every stored body passes through {@link redactAuditText}. The assembly
- * is wrapped so a capture failure can never surface into the relay path.
- *
- * @module @omnicross/core/outbound-api/auditCapture
- */
-
-/**
- * The mutable context the request handler enriches as it progresses. `null` is
- * returned by {@link beginAuditCapture} when audit is disabled — the handler
- * guards every write with `if (audit)`.
- */
-interface AuditCaptureContext {
-    /** Outbound key id (set after auth). NEVER the key material. */
-    keyId?: string | null;
-    /** Resolved upstream model (set after route resolution). */
-    model?: string;
-    /** Upstream provider id (set after route resolution). */
-    provider?: string;
-    /** Sanitized error message (set on a relay/dispatch failure). */
-    error?: string;
-    /** Stash the raw request body for capture (a no-op unless `captureBodies`). */
-    setRequestBody(raw: string): void;
-}
-/**
- * Begin audit capture for one request. Returns a mutable context the handler
- * enriches, or `null` when audit is disabled (zero-cost path). The record is
- * emitted on response `close` via the fire-and-forget sink.
- */
-declare function beginAuditCapture(req: http.IncomingMessage, res: http.ServerResponse, now: number): AuditCaptureContext | null;
-
-/**
- * billingCapture — the outbound server's post-response billing capture hook
- * (billing-event-stream, design D1/D4).
- *
- * {@link beginBillingCapture} is called at the TOP of `handleOutboundRequest`. It
- * reads the active billing config from the core slot; when billing is DISABLED it
- * returns `null` immediately (one slot read — no assembly, no listener, zero
- * regression). When enabled it registers a one-shot `res.close` listener that
- * assembles a {@link BillingEvent} from the handler-filled context (keyId / model
- * / provider / authMode), the response `statusCode`, and this request's METERED
- * FACTS (token counts + the ALREADY-COMPUTED cost) — then hands it to the
- * no-throw {@link publishBillingEvent}.
- *
- * COST REUSE (design D3 — no double pricing): the metered facts are read from the
- * per-request usage stash the usage tap populates ({@link readAuditUsage} — the
- * SAME stash `usage-events.jsonl` correlation uses, populated UNCONDITIONALLY by
- * the taps, independent of whether request-audit is enabled). Token counts are
- * stashed SYNCHRONOUSLY at `record()`; the cost lands on the recorder's deferred
- * pricing tick (scheduled BEFORE the response closes). So the assembly is deferred
- * one macrotask past `close` — by then the earlier-scheduled pricing tick has run
- * and stashed the computed cost we REUSE (we never re-price).
- *
- * BILLABLE-ONLY: an event is emitted ONLY when the request produced usage (an
- * upstream call was billed). Auth failures / rate-limit / model-restriction
- * rejections return before dispatch, stash no usage, and emit NO billing event.
- *
- * @module @omnicross/core/outbound-api/billingCapture
- */
-
-/**
- * The mutable context the request handler enriches as it progresses. `null` is
- * returned by {@link beginBillingCapture} when billing is disabled — the handler
- * guards every write with `if (billing)`.
- */
-interface BillingCaptureContext {
-    /** Outbound key id (set after auth). NEVER the key material. */
-    keyId?: string | null;
-    /** Resolved upstream model (set after route resolution). */
-    model?: string;
-    /** Upstream provider id (set after route resolution). */
-    provider?: string;
-    /** Re-auth mode the request billed under (set after route resolution). */
-    authMode?: 'byo' | 'subscription';
-}
-/**
- * Deferral used to schedule the event assembly one macrotask past `close`, so the
- * usage tap's earlier-scheduled pricing tick has stashed the cost we reuse.
- * Injectable ONLY for deterministic tests; production uses a zero-delay timer.
- */
-type BillingDefer = (fn: () => void) => void;
-/**
- * Begin billing capture for one request. Returns a mutable context the handler
- * enriches, or `null` when billing is disabled (zero-cost path). The event is
- * emitted on response `close` via the no-throw sink — but ONLY when the request
- * produced usage (a billable request).
- */
-declare function beginBillingCapture(_req: http.IncomingMessage, res: http.ServerResponse, now: number, defer?: BillingDefer): BillingCaptureContext | null;
-
 /**
  * modelPrefixDispatch — pure model-name PREFIX classification for the `chat`
  * endpoint's opt-in `dispatchMode: 'prefix'` (openai-chat-bridge #11, design D2).
@@ -1006,4 +875,4 @@ declare function getOutboundApiServer(deps?: OutboundApiDeps, onPortChange?: (po
 /** Reset the singleton (tests / teardown only). */
 declare function __resetOutboundApiServerForTests(): void;
 
-export { AUDIT_REDACTED, AccountProbeConfig, type ApiServerSettingsStore, type ApplyConfigInput, type AuditCaptureContext, type BillingCaptureContext, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, type EndpointModelConfigError, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiConfigError, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundProxyConfig, OutboundRateLimiter, RequestRole, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, beginAuditCapture, beginBillingCapture, classifyModelPrefix, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, endpointToIngressFormat, formatUrls, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, redactAuditText, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateServerModelConfig, verifyKey, verifyPresentedKey };
+export { AccountProbeConfig, type ApiServerSettingsStore, type ApplyConfigInput, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, type EndpointModelConfigError, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiConfigError, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundProxyConfig, OutboundRateLimiter, RequestRole, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, classifyModelPrefix, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, endpointToIngressFormat, formatUrls, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateServerModelConfig, verifyKey, verifyPresentedKey };

package/dist/outbound-api.js

@@ -1,5 +1,4 @@
 import {
-  AUDIT_REDACTED,
   ConcurrencyQueueFullError,
   ConcurrencyWaitCancelledError,
   ConcurrencyWaitTimeoutError,
@@ -18,8 +17,6 @@ import {
   SerialQueueTimeoutError,
   UserMessageSerialQueue,
   __resetOutboundApiServerForTests,
-  beginAuditCapture,
-  beginBillingCapture,
   checkKeyQuota,
   computeKeyExpiry,
   computeVoucherGrant,
@@ -51,7 +48,6 @@ import {
   normalizeWebhookDestination,
   normalizeWebhookSegment,
   randomBase62,
-  redactAuditText,
   saveServerConfig,
   startOfLocalDay,
   startOfLocalWeek,
@@ -59,35 +55,38 @@ import {
   verifyKey,
   verifyPresentedKey,
   voucherCodePrefix
-} from "./chunk-4DECIFU7.js";
+} from "./chunk-QYTT6GE3.js";
 import "./chunk-VVEHS2LI.js";
 import "./chunk-46RLHI7D.js";
-import "./chunk-G2UTNSGU.js";
 import "./chunk-DK4A7DLE.js";
-import "./chunk-MQNDWYPN.js";
-import "./chunk-Z7LUNECE.js";
+import "./chunk-VPBAUQ2M.js";
 import "./chunk-ZJZAOKI7.js";
 import "./chunk-FTQ7IQUC.js";
 import "./chunk-C7PSERMH.js";
-import "./chunk-5HTVET6E.js";
+import "./chunk-TIER4SUC.js";
+import "./chunk-Z7LUNECE.js";
 import "./chunk-7VU7V2E4.js";
 import "./chunk-ZLX3KGXX.js";
-import "./chunk-CWM2ZDU5.js";
+import "./chunk-BPKCU575.js";
+import "./chunk-G2UTNSGU.js";
 import "./chunk-MZNPGW5Q.js";
 import "./chunk-XTEI64OU.js";
 import "./chunk-XX6NQJMA.js";
 import "./chunk-IAXWICZU.js";
+import "./chunk-OE6TDIWW.js";
+import "./chunk-DRWHTIIZ.js";
+import "./chunk-IK3KE3AU.js";
+import "./chunk-ZY6KU6P3.js";
+import "./chunk-JWC6APFQ.js";
 import "./chunk-5ERIZW3D.js";
 import "./chunk-5ENKBSWO.js";
-import "./chunk-N5QFKSDO.js";
+import "./chunk-HRRYG2AX.js";
 import "./chunk-AVYJ4YBN.js";
-import "./chunk-DRWHTIIZ.js";
-import "./chunk-WNY4WMRF.js";
+import {
+  beginBillingCapture
+} from "./chunk-WLYIIEAF.js";
 import "./chunk-TKJMZBAH.js";
-import "./chunk-JO5NLTLY.js";
-import "./chunk-ZY6KU6P3.js";
-import "./chunk-JWC6APFQ.js";
-import "./chunk-H5JUT3KV.js";
+import "./chunk-3QFXFCHG.js";
 import {
   SUBSCRIPTION_PROVIDER_IDS,
   classifyModelPrefix,
@@ -104,15 +103,25 @@ import {
   resolveRoute,
   validateEndpointModelConfig,
   validateServerModelConfig
-} from "./chunk-CZHZGRU7.js";
+} from "./chunk-UHGVBFU3.js";
 import "./chunk-AQ5TNQB7.js";
 import {
   ENDPOINT_MODEL_KINDS
 } from "./chunk-XEKD23J5.js";
+import "./chunk-H5JUT3KV.js";
+import {
+  beginAuditCapture
+} from "./chunk-7Y47UCF2.js";
+import {
+  AUDIT_REDACTED,
+  redactAuditText
+} from "./chunk-K5NM7VAH.js";
+import "./chunk-WNY4WMRF.js";
+import "./chunk-OZFM4X3S.js";
 import "./chunk-5ZQBEOMD.js";
-import "./chunk-BO4RFWBR.js";
 import "./chunk-Z7Y2NPHY.js";
 import "./chunk-S4WBV25P.js";
+import "./chunk-XK5CIRMQ.js";
 import "./chunk-CDHS2QDC.js";
 import "./chunk-Y7FO65VT.js";
 import "./chunk-FMOBD2OQ.js";

package/dist/pipeline/AuthSource.d.cts

@@ -52,6 +52,12 @@ interface AuthApplyHints {
      * (no cross-request race). BYO auth sources ignore it.
      */
     reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
+    /**
+     * OPTIONAL preferred subscription account id (provider/subscription duality).
+     * When set and schedulable the account picker resolves it directly; absent or
+     * unschedulable ⇒ pool auto-schedule. BYO auth sources ignore it.
+     */
+    preferredAccountId?: string;
 }
 /**
  * Result of {@link AuthSource.onResult}.

package/dist/pipeline/AuthSource.d.ts

@@ -52,6 +52,12 @@ interface AuthApplyHints {
      * (no cross-request race). BYO auth sources ignore it.
      */
     reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
+    /**
+     * OPTIONAL preferred subscription account id (provider/subscription duality).
+     * When set and schedulable the account picker resolves it directly; absent or
+     * unschedulable ⇒ pool auto-schedule. BYO auth sources ignore it.
+     */
+    preferredAccountId?: string;
 }
 /**
  * Result of {@link AuthSource.onResult}.

package/dist/pipeline/SubscriptionAuthSource.cjs

@@ -1,9 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunkY6OM7EV7cjs = require('../chunk-Y6OM7EV7.cjs');
+var _chunkKFI44N2Rcjs = require('../chunk-KFI44N2R.cjs');
 require('../chunk-SVNDB62D.cjs');
 
 
 
-exports.SubscriptionAuthSource = _chunkY6OM7EV7cjs.SubscriptionAuthSource; exports.stripAuthHeaders = _chunkY6OM7EV7cjs.stripAuthHeaders;
+exports.SubscriptionAuthSource = _chunkKFI44N2Rcjs.SubscriptionAuthSource; exports.stripAuthHeaders = _chunkKFI44N2Rcjs.stripAuthHeaders;

package/dist/pipeline/SubscriptionAuthSource.js

@@ -1,7 +1,7 @@
 import {
   SubscriptionAuthSource,
   stripAuthHeaders
-} from "../chunk-N5QFKSDO.js";
+} from "../chunk-HRRYG2AX.js";
 import "../chunk-AVYJ4YBN.js";
 export {
   SubscriptionAuthSource,

package/dist/pipeline/SubscriptionAuthStrategy.d.cts

@@ -49,6 +49,12 @@ interface AuthApplyHints {
      * pre-health behavior).
      */
     reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
+    /**
+     * OPTIONAL preferred subscription account id (provider/subscription duality).
+     * When set and schedulable the account picker resolves it directly; absent or
+     * unschedulable ⇒ pool auto-schedule.
+     */
+    preferredAccountId?: string;
 }
 interface AuthStrategy {
     /** Discriminator — also surfaced through `subscription:list` to renderers. */

package/dist/pipeline/SubscriptionAuthStrategy.d.ts

@@ -49,6 +49,12 @@ interface AuthApplyHints {
      * pre-health behavior).
      */
     reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
+    /**
+     * OPTIONAL preferred subscription account id (provider/subscription duality).
+     * When set and schedulable the account picker resolves it directly; absent or
+     * unschedulable ⇒ pool auto-schedule.
+     */
+    preferredAccountId?: string;
 }
 interface AuthStrategy {
     /** Discriminator — also surfaced through `subscription:list` to renderers. */

package/dist/pipeline/auditUsageStash.cjs

@@ -0,0 +1,10 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+var _chunkXSVNC2UDcjs = require('../chunk-XSVNC2UD.cjs');
+
+
+
+
+exports.__clearAuditUsageForTests = _chunkXSVNC2UDcjs.__clearAuditUsageForTests; exports.readAuditUsage = _chunkXSVNC2UDcjs.readAuditUsage; exports.stashAuditUsage = _chunkXSVNC2UDcjs.stashAuditUsage;

package/dist/pipeline/auditUsageStash.d.cts

@@ -0,0 +1,37 @@
+/**
+ * auditUsageStash — a per-request usage correlation stash for the audit capture
+ * (request-audit-log, design D1). The audit record is assembled at the outbound
+ * router's post-response point, but token counts + cost are produced downstream
+ * by the usage tap → `UsageRecorder`. This `WeakMap<res, detail>` bridges them:
+ * the recorder stashes the usage detail keyed by the SAME `http.ServerResponse`
+ * the audit capture holds, so `beginAuditCapture` can read it at response close.
+ *
+ * The token counts + model/provider are stashed SYNCHRONOUSLY at `record()` time
+ * (before the response closes ⇒ reliably present); the cost is stashed on the
+ * deferred pricing tick (best-effort — populated when it lands before close).
+ * Keyed by the response OBJECT (a `WeakMap`, so a completed request's entry is
+ * GC'd with the response — no leak, no cleanup needed).
+ *
+ * This is OPT-IN + gated: only the outbound taps set `auditResponse`, and the
+ * audit capture only reads when audit is enabled. Any other `UsageRecorder`
+ * caller leaves `auditResponse` unset ⇒ this map is never touched ⇒ zero
+ * regression.
+ *
+ * @module @omnicross/core/pipeline/auditUsageStash
+ */
+/** The subset of usage numbers an audit record carries (all optional). */
+interface AuditUsageDetail {
+    inputTokens?: number;
+    outputTokens?: number;
+    costUsd?: number;
+    model?: string;
+    provider?: string;
+}
+/** Merge a partial usage detail into the entry keyed by `key` (the response). */
+declare function stashAuditUsage(key: object, detail: AuditUsageDetail): void;
+/** Read the accumulated usage detail for `key`, or `undefined` when none. */
+declare function readAuditUsage(key: object): AuditUsageDetail | undefined;
+/** TEST SEAM — drop a stashed entry so a suite starts clean. */
+declare function __clearAuditUsageForTests(key: object): void;
+
+export { type AuditUsageDetail, __clearAuditUsageForTests, readAuditUsage, stashAuditUsage };

package/dist/pipeline/auditUsageStash.d.ts

@@ -0,0 +1,37 @@
+/**
+ * auditUsageStash — a per-request usage correlation stash for the audit capture
+ * (request-audit-log, design D1). The audit record is assembled at the outbound
+ * router's post-response point, but token counts + cost are produced downstream
+ * by the usage tap → `UsageRecorder`. This `WeakMap<res, detail>` bridges them:
+ * the recorder stashes the usage detail keyed by the SAME `http.ServerResponse`
+ * the audit capture holds, so `beginAuditCapture` can read it at response close.
+ *
+ * The token counts + model/provider are stashed SYNCHRONOUSLY at `record()` time
+ * (before the response closes ⇒ reliably present); the cost is stashed on the
+ * deferred pricing tick (best-effort — populated when it lands before close).
+ * Keyed by the response OBJECT (a `WeakMap`, so a completed request's entry is
+ * GC'd with the response — no leak, no cleanup needed).
+ *
+ * This is OPT-IN + gated: only the outbound taps set `auditResponse`, and the
+ * audit capture only reads when audit is enabled. Any other `UsageRecorder`
+ * caller leaves `auditResponse` unset ⇒ this map is never touched ⇒ zero
+ * regression.
+ *
+ * @module @omnicross/core/pipeline/auditUsageStash
+ */
+/** The subset of usage numbers an audit record carries (all optional). */
+interface AuditUsageDetail {
+    inputTokens?: number;
+    outputTokens?: number;
+    costUsd?: number;
+    model?: string;
+    provider?: string;
+}
+/** Merge a partial usage detail into the entry keyed by `key` (the response). */
+declare function stashAuditUsage(key: object, detail: AuditUsageDetail): void;
+/** Read the accumulated usage detail for `key`, or `undefined` when none. */
+declare function readAuditUsage(key: object): AuditUsageDetail | undefined;
+/** TEST SEAM — drop a stashed entry so a suite starts clean. */
+declare function __clearAuditUsageForTests(key: object): void;
+
+export { type AuditUsageDetail, __clearAuditUsageForTests, readAuditUsage, stashAuditUsage };

package/dist/pipeline/auditUsageStash.js

@@ -0,0 +1,10 @@
+import {
+  __clearAuditUsageForTests,
+  readAuditUsage,
+  stashAuditUsage
+} from "../chunk-OZFM4X3S.js";
+export {
+  __clearAuditUsageForTests,
+  readAuditUsage,
+  stashAuditUsage
+};

package/dist/pipeline/executeProviderCall.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkKUU2RNG6cjs = require('../chunk-KUU2RNG6.cjs');
+var _chunkHYN75H6Gcjs = require('../chunk-HYN75H6G.cjs');
 
 
-exports.executeProviderCall = _chunkKUU2RNG6cjs.executeProviderCall;
+exports.executeProviderCall = _chunkHYN75H6Gcjs.executeProviderCall;