@omnicross/core 0.1.3 → 0.1.4

package/dist/pipeline/executeProviderCall.js

@@ -1,6 +1,6 @@
 import {
   executeProviderCall
-} from "../chunk-JO5NLTLY.js";
+} from "../chunk-IK3KE3AU.js";
 export {
   executeProviderCall
 };

package/dist/pipeline/upstreamFetch.cjs

@@ -0,0 +1,14 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+var _chunkOCEUVQHWcjs = require('../chunk-OCEUVQHW.cjs');
+
+
+
+
+
+
+exports.__resetUpstreamProxyForTests = _chunkOCEUVQHWcjs.__resetUpstreamProxyForTests; exports.bumpUpstreamProxyGeneration = _chunkOCEUVQHWcjs.bumpUpstreamProxyGeneration; exports.fetchUpstream = _chunkOCEUVQHWcjs.fetchUpstream; exports.resolveUpstreamDispatcher = _chunkOCEUVQHWcjs.resolveUpstreamDispatcher; exports.setUpstreamProxyResolver = _chunkOCEUVQHWcjs.setUpstreamProxyResolver;

package/dist/pipeline/upstreamFetch.d.cts

@@ -0,0 +1,83 @@
+import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
+import { Dispatcher } from 'undici';
+
+/**
+ * upstreamFetch — the single proxy-aware egress seam for `@omnicross/core`
+ * (upstream-proxy).
+ *
+ * Every outbound UPSTREAM call (relay ingress `fetchFn` closures, the OAuth
+ * token-refresh `FetchLike`, the Gemini Code Assist handshake) routes through
+ * {@link fetchUpstream}. When a proxy resolves for the call it attaches an
+ * undici {@link Dispatcher} (`ProxyAgent` for http/https, an `Agent` with a
+ * socks5 connector for socks5); ABSENT any proxy it is a BARE `fetch` — the
+ * dispatcher option is never set, so behavior is byte-identical to the
+ * pre-change code (the zero-regression guarantee).
+ *
+ * Core stays config/account-agnostic: it only knows opaque `providerId` /
+ * `accountId` strings + a {@link ProxyConfig} descriptor. The daemon injects the
+ * layered lookup via {@link setUpstreamProxyResolver} — the same module-slot
+ * pattern as `setSubscriptionRegistryForOutbound`. Core never imports config or
+ * account material.
+ *
+ * Dispatchers are CACHED by resolved-proxy identity (one instance reused, not
+ * per-request, so keep-alive holds and sockets don't leak). A config change bumps
+ * a generation via {@link bumpUpstreamProxyGeneration} (also called by
+ * `setUpstreamProxyResolver`) which disposes the old dispatchers and rebuilds on
+ * next use.
+ *
+ * FROZEN SEAM: `#7` (client fingerprint) attaches per-account TLS/agent behavior
+ * at this SAME dispatcher point — do not fork a second egress path.
+ *
+ * @module @omnicross/core/pipeline/upstreamFetch
+ */
+
+/** The opaque call context the resolver maps to a proxy (precedence input). */
+interface UpstreamProxyContext {
+    /** The subscription provider id (`claude`/`codex`/`gemini`/`opencodego`) or `'byo'`. */
+    providerId?: string;
+    /** The selected pooled account id (per-account override input). */
+    accountId?: string;
+    /**
+     * The target upstream URL. Injected by {@link fetchUpstream} so the resolver can
+     * apply host-based bypass (loopback / `NO_PROXY`). Callers of the ingress helpers
+     * do NOT set this — it is filled from the fetch `url`.
+     */
+    url?: string;
+}
+/**
+ * The layered proxy lookup the daemon injects. Applies precedence
+ * account > provider > global > env and returns the WINNING `ProxyConfig`, or
+ * `undefined` for a direct (non-proxied) call.
+ */
+type UpstreamProxyResolver = (ctx: UpstreamProxyContext) => ProxyConfig | undefined;
+/**
+ * Inject (or clear, with `null`) the layered proxy resolver. Idempotent — last
+ * write wins. Bumps the dispatcher generation so a resolver swap (or a config
+ * edit that re-registers) rebuilds dispatchers from the new lookup and disposes
+ * the old ones.
+ */
+declare function setUpstreamProxyResolver(fn: UpstreamProxyResolver | null): void;
+/**
+ * Invalidate every cached dispatcher (config change / admin edit). Old
+ * dispatchers are `close()`d best-effort so in-flight sockets drain; new calls
+ * rebuild from the current resolver output.
+ */
+declare function bumpUpstreamProxyGeneration(): void;
+/**
+ * Resolve the dispatcher for one call. Returns `undefined` (⇒ bare fetch) when
+ * no resolver is registered, the resolver returns undefined, or the descriptor
+ * is malformed. A resolver throw is swallowed → direct call (egress never breaks
+ * on a proxy-lookup error).
+ */
+declare function resolveUpstreamDispatcher(ctx: UpstreamProxyContext): Dispatcher | undefined;
+/**
+ * Proxy-aware `fetch`. Attaches the resolved undici dispatcher ONLY when a proxy
+ * applies; otherwise it is a BARE `fetch(url, init)` — byte-identical to the
+ * pre-change egress (zero-regression). The `dispatcher` option is undici-specific
+ * (Node's global fetch IS undici); the cast threads it without a DOM-lib type.
+ */
+declare function fetchUpstream(url: string, init: RequestInit, ctx?: UpstreamProxyContext): Promise<Response>;
+/** TEST SEAM — clear the resolver + cache so a suite starts from the direct-fetch baseline. */
+declare function __resetUpstreamProxyForTests(): void;
+
+export { type UpstreamProxyContext, type UpstreamProxyResolver, __resetUpstreamProxyForTests, bumpUpstreamProxyGeneration, fetchUpstream, resolveUpstreamDispatcher, setUpstreamProxyResolver };

package/dist/pipeline/upstreamFetch.d.ts

@@ -0,0 +1,83 @@
+import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
+import { Dispatcher } from 'undici';
+
+/**
+ * upstreamFetch — the single proxy-aware egress seam for `@omnicross/core`
+ * (upstream-proxy).
+ *
+ * Every outbound UPSTREAM call (relay ingress `fetchFn` closures, the OAuth
+ * token-refresh `FetchLike`, the Gemini Code Assist handshake) routes through
+ * {@link fetchUpstream}. When a proxy resolves for the call it attaches an
+ * undici {@link Dispatcher} (`ProxyAgent` for http/https, an `Agent` with a
+ * socks5 connector for socks5); ABSENT any proxy it is a BARE `fetch` — the
+ * dispatcher option is never set, so behavior is byte-identical to the
+ * pre-change code (the zero-regression guarantee).
+ *
+ * Core stays config/account-agnostic: it only knows opaque `providerId` /
+ * `accountId` strings + a {@link ProxyConfig} descriptor. The daemon injects the
+ * layered lookup via {@link setUpstreamProxyResolver} — the same module-slot
+ * pattern as `setSubscriptionRegistryForOutbound`. Core never imports config or
+ * account material.
+ *
+ * Dispatchers are CACHED by resolved-proxy identity (one instance reused, not
+ * per-request, so keep-alive holds and sockets don't leak). A config change bumps
+ * a generation via {@link bumpUpstreamProxyGeneration} (also called by
+ * `setUpstreamProxyResolver`) which disposes the old dispatchers and rebuilds on
+ * next use.
+ *
+ * FROZEN SEAM: `#7` (client fingerprint) attaches per-account TLS/agent behavior
+ * at this SAME dispatcher point — do not fork a second egress path.
+ *
+ * @module @omnicross/core/pipeline/upstreamFetch
+ */
+
+/** The opaque call context the resolver maps to a proxy (precedence input). */
+interface UpstreamProxyContext {
+    /** The subscription provider id (`claude`/`codex`/`gemini`/`opencodego`) or `'byo'`. */
+    providerId?: string;
+    /** The selected pooled account id (per-account override input). */
+    accountId?: string;
+    /**
+     * The target upstream URL. Injected by {@link fetchUpstream} so the resolver can
+     * apply host-based bypass (loopback / `NO_PROXY`). Callers of the ingress helpers
+     * do NOT set this — it is filled from the fetch `url`.
+     */
+    url?: string;
+}
+/**
+ * The layered proxy lookup the daemon injects. Applies precedence
+ * account > provider > global > env and returns the WINNING `ProxyConfig`, or
+ * `undefined` for a direct (non-proxied) call.
+ */
+type UpstreamProxyResolver = (ctx: UpstreamProxyContext) => ProxyConfig | undefined;
+/**
+ * Inject (or clear, with `null`) the layered proxy resolver. Idempotent — last
+ * write wins. Bumps the dispatcher generation so a resolver swap (or a config
+ * edit that re-registers) rebuilds dispatchers from the new lookup and disposes
+ * the old ones.
+ */
+declare function setUpstreamProxyResolver(fn: UpstreamProxyResolver | null): void;
+/**
+ * Invalidate every cached dispatcher (config change / admin edit). Old
+ * dispatchers are `close()`d best-effort so in-flight sockets drain; new calls
+ * rebuild from the current resolver output.
+ */
+declare function bumpUpstreamProxyGeneration(): void;
+/**
+ * Resolve the dispatcher for one call. Returns `undefined` (⇒ bare fetch) when
+ * no resolver is registered, the resolver returns undefined, or the descriptor
+ * is malformed. A resolver throw is swallowed → direct call (egress never breaks
+ * on a proxy-lookup error).
+ */
+declare function resolveUpstreamDispatcher(ctx: UpstreamProxyContext): Dispatcher | undefined;
+/**
+ * Proxy-aware `fetch`. Attaches the resolved undici dispatcher ONLY when a proxy
+ * applies; otherwise it is a BARE `fetch(url, init)` — byte-identical to the
+ * pre-change egress (zero-regression). The `dispatcher` option is undici-specific
+ * (Node's global fetch IS undici); the cast threads it without a DOM-lib type.
+ */
+declare function fetchUpstream(url: string, init: RequestInit, ctx?: UpstreamProxyContext): Promise<Response>;
+/** TEST SEAM — clear the resolver + cache so a suite starts from the direct-fetch baseline. */
+declare function __resetUpstreamProxyForTests(): void;
+
+export { type UpstreamProxyContext, type UpstreamProxyResolver, __resetUpstreamProxyForTests, bumpUpstreamProxyGeneration, fetchUpstream, resolveUpstreamDispatcher, setUpstreamProxyResolver };

package/dist/pipeline/upstreamFetch.js

@@ -0,0 +1,14 @@
+import {
+  __resetUpstreamProxyForTests,
+  bumpUpstreamProxyGeneration,
+  fetchUpstream,
+  resolveUpstreamDispatcher,
+  setUpstreamProxyResolver
+} from "../chunk-XK5CIRMQ.js";
+export {
+  __resetUpstreamProxyForTests,
+  bumpUpstreamProxyGeneration,
+  fetchUpstream,
+  resolveUpstreamDispatcher,
+  setUpstreamProxyResolver
+};

package/dist/pipeline/webhookEmit.cjs

@@ -0,0 +1,10 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+var _chunkUIBD2YY5cjs = require('../chunk-UIBD2YY5.cjs');
+
+
+
+
+exports.__resetWebhookSinkForTests = _chunkUIBD2YY5cjs.__resetWebhookSinkForTests; exports.emitWebhookEvent = _chunkUIBD2YY5cjs.emitWebhookEvent; exports.setWebhookSink = _chunkUIBD2YY5cjs.setWebhookSink;

package/dist/pipeline/webhookEmit.d.cts

@@ -0,0 +1,36 @@
+import { WebhookEvent } from '@omnicross/contracts/webhook-types';
+
+/**
+ * webhookEmit — the module-slot emit port for `@omnicross/core`
+ * (webhook-notifications, design D2).
+ *
+ * Core SOURCES (the wire quota path in `outboundApiRouter`, the relay/dispatch
+ * error path) call {@link emitWebhookEvent}. The concrete `WebhookDispatcher`
+ * (config/secrets/HTTP/HMAC) lives in the DAEMON and registers itself as the
+ * sink at bootstrap via {@link setWebhookSink}. Core imports NOTHING from the
+ * daemon — exactly the `setSharedAccountHealth` / `setUpstreamProxyResolver`
+ * precedent.
+ *
+ * HARD CONTRACT (design D2 / risk "a webhook blocking the request path"):
+ * {@link emitWebhookEvent} NEVER throws and NEVER awaits. It hands the event to
+ * the sink (which enqueues and returns immediately) — a slow/failing/throwing
+ * sink can never affect the caller. Absent a sink it is a pure no-op, so a
+ * no-webhook-config daemon is byte-identical to before this change.
+ *
+ * @module @omnicross/core/pipeline/webhookEmit
+ */
+
+/** The sink the daemon registers; it MUST enqueue-and-return (never block). */
+type WebhookSink = (event: WebhookEvent) => void;
+/** Install (or clear, with `null`) the webhook sink. Idempotent; last write wins. */
+declare function setWebhookSink(fn: WebhookSink | null): void;
+/**
+ * Emit a webhook event to the registered sink. A no-op when no sink is set
+ * (zero regression). NEVER throws (a misbehaving sink is swallowed) and NEVER
+ * awaits (the sink enqueues + returns) — so no request path is ever delayed.
+ */
+declare function emitWebhookEvent(event: WebhookEvent): void;
+/** TEST SEAM — clear the sink so a suite starts from the no-sink baseline. */
+declare function __resetWebhookSinkForTests(): void;
+
+export { type WebhookSink, __resetWebhookSinkForTests, emitWebhookEvent, setWebhookSink };

package/dist/pipeline/webhookEmit.d.ts

@@ -0,0 +1,36 @@
+import { WebhookEvent } from '@omnicross/contracts/webhook-types';
+
+/**
+ * webhookEmit — the module-slot emit port for `@omnicross/core`
+ * (webhook-notifications, design D2).
+ *
+ * Core SOURCES (the wire quota path in `outboundApiRouter`, the relay/dispatch
+ * error path) call {@link emitWebhookEvent}. The concrete `WebhookDispatcher`
+ * (config/secrets/HTTP/HMAC) lives in the DAEMON and registers itself as the
+ * sink at bootstrap via {@link setWebhookSink}. Core imports NOTHING from the
+ * daemon — exactly the `setSharedAccountHealth` / `setUpstreamProxyResolver`
+ * precedent.
+ *
+ * HARD CONTRACT (design D2 / risk "a webhook blocking the request path"):
+ * {@link emitWebhookEvent} NEVER throws and NEVER awaits. It hands the event to
+ * the sink (which enqueues and returns immediately) — a slow/failing/throwing
+ * sink can never affect the caller. Absent a sink it is a pure no-op, so a
+ * no-webhook-config daemon is byte-identical to before this change.
+ *
+ * @module @omnicross/core/pipeline/webhookEmit
+ */
+
+/** The sink the daemon registers; it MUST enqueue-and-return (never block). */
+type WebhookSink = (event: WebhookEvent) => void;
+/** Install (or clear, with `null`) the webhook sink. Idempotent; last write wins. */
+declare function setWebhookSink(fn: WebhookSink | null): void;
+/**
+ * Emit a webhook event to the registered sink. A no-op when no sink is set
+ * (zero regression). NEVER throws (a misbehaving sink is swallowed) and NEVER
+ * awaits (the sink enqueues + returns) — so no request path is ever delayed.
+ */
+declare function emitWebhookEvent(event: WebhookEvent): void;
+/** TEST SEAM — clear the sink so a suite starts from the no-sink baseline. */
+declare function __resetWebhookSinkForTests(): void;
+
+export { type WebhookSink, __resetWebhookSinkForTests, emitWebhookEvent, setWebhookSink };

package/dist/pipeline/webhookEmit.js

@@ -0,0 +1,10 @@
+import {
+  __resetWebhookSinkForTests,
+  emitWebhookEvent,
+  setWebhookSink
+} from "../chunk-OE6TDIWW.js";
+export {
+  __resetWebhookSinkForTests,
+  emitWebhookEvent,
+  setWebhookSink
+};

package/dist/ports.d.cts

@@ -5,7 +5,7 @@ export { ProviderConfigSource } from './ports/provider-config-source.cjs';
 export { UsageEventStore } from './ports/usage-event-store.cjs';
 export { WebSearchBackend } from './ports/web-search-backend.cjs';
 export { UsageRecorderImport as UsageSink } from './provider-proxy/types.cjs';
-export { O as OutboundCredentialStore } from './types-aBFFXoBz.cjs';
+export { O as OutboundCredentialStore } from './types-B8Arpxn0.cjs';
 import '@omnicross/contracts/pricing-types';
 import '@omnicross/contracts/llm-config';
 import './transformer/types.cjs';
@@ -27,3 +27,4 @@ import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import './ProviderProxy-CnMQYN59.cjs';
+import './keyPolicy-Cp0FntZl.cjs';

package/dist/ports.d.ts

@@ -5,7 +5,7 @@ export { ProviderConfigSource } from './ports/provider-config-source.js';
 export { UsageEventStore } from './ports/usage-event-store.js';
 export { WebSearchBackend } from './ports/web-search-backend.js';
 export { UsageRecorderImport as UsageSink } from './provider-proxy/types.js';
-export { O as OutboundCredentialStore } from './types-6OUY_xfA.js';
+export { O as OutboundCredentialStore } from './types-lgPYQuZS.js';
 import '@omnicross/contracts/pricing-types';
 import '@omnicross/contracts/llm-config';
 import './transformer/types.js';
@@ -27,3 +27,4 @@ import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import './ProviderProxy-C-xqrkKi.js';
+import './keyPolicy-Cp0FntZl.js';

package/dist/provider-proxy/ProviderProxy.cjs

@@ -1,42 +1,48 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunk2FMI2B6Vcjs = require('../chunk-2FMI2B6V.cjs');
+var _chunkDKPXN34Vcjs = require('../chunk-DKPXN34V.cjs');
 require('../chunk-HQP3K7PU.cjs');
 require('../chunk-FZ46M34D.cjs');
-require('../chunk-46ZIFWYG.cjs');
 require('../chunk-3OPYJG76.cjs');
-require('../chunk-FFALUUZZ.cjs');
-require('../chunk-C72S6TTV.cjs');
+require('../chunk-RGTR7CIO.cjs');
 require('../chunk-DWKQZ2SK.cjs');
 require('../chunk-4VAVYUZS.cjs');
 require('../chunk-7YN22L2H.cjs');
-require('../chunk-2DCNB7DF.cjs');
+require('../chunk-SU2GCLAC.cjs');
+require('../chunk-C72S6TTV.cjs');
 require('../chunk-EYZYXJTJ.cjs');
 require('../chunk-YMFAJFQT.cjs');
-require('../chunk-3QOSDDNI.cjs');
+require('../chunk-SNYBEXLB.cjs');
+require('../chunk-46ZIFWYG.cjs');
 require('../chunk-GBHYAGX3.cjs');
 require('../chunk-RPII3E6Z.cjs');
 require('../chunk-6RPZADX3.cjs');
 require('../chunk-QWBWGODS.cjs');
+require('../chunk-UIBD2YY5.cjs');
+require('../chunk-R3HK6R4B.cjs');
+require('../chunk-HYN75H6G.cjs');
+require('../chunk-Q27JY5RG.cjs');
+require('../chunk-QXD4MV2X.cjs');
 require('../chunk-NYUNU75A.cjs');
 require('../chunk-VQY5W4YW.cjs');
-require('../chunk-Y6OM7EV7.cjs');
+require('../chunk-KFI44N2R.cjs');
 require('../chunk-SVNDB62D.cjs');
-require('../chunk-R3HK6R4B.cjs');
-require('../chunk-AEOZIDEB.cjs');
+require('../chunk-APYG5QD7.cjs');
 require('../chunk-L74VDN4A.cjs');
-require('../chunk-KUU2RNG6.cjs');
-require('../chunk-Q27JY5RG.cjs');
-require('../chunk-QXD4MV2X.cjs');
-require('../chunk-A2YMUCBT.cjs');
-require('../chunk-SVXC36MU.cjs');
+require('../chunk-4YINUUKQ.cjs');
+require('../chunk-VACWOIRE.cjs');
 require('../chunk-QBZJ7P2T.cjs');
 require('../chunk-4IH4EL7M.cjs');
+require('../chunk-A2YMUCBT.cjs');
+require('../chunk-E3UCVHLP.cjs');
+require('../chunk-FCR77GYM.cjs');
+require('../chunk-AEOZIDEB.cjs');
+require('../chunk-XSVNC2UD.cjs');
 require('../chunk-SUEGJ75D.cjs');
-require('../chunk-S6JGLF3G.cjs');
 require('../chunk-RSJ3TWJQ.cjs');
 require('../chunk-YGXJGRFI.cjs');
+require('../chunk-OCEUVQHW.cjs');
 require('../chunk-NZYN7C3P.cjs');
 require('../chunk-JMJBSACD.cjs');
 require('../chunk-GMMT7RVN.cjs');
@@ -44,4 +50,4 @@ require('../chunk-UNEFIWXI.cjs');
 
 
 
-exports.ProviderProxy = _chunk2FMI2B6Vcjs.ProviderProxy; exports.isLoopbackAddress = _chunk2FMI2B6Vcjs.isLoopbackAddress;
+exports.ProviderProxy = _chunkDKPXN34Vcjs.ProviderProxy; exports.isLoopbackAddress = _chunkDKPXN34Vcjs.isLoopbackAddress;

package/dist/provider-proxy/ProviderProxy.js

@@ -1,42 +1,48 @@
 import {
   ProviderProxy,
   isLoopbackAddress
-} from "../chunk-4DECIFU7.js";
+} from "../chunk-QYTT6GE3.js";
 import "../chunk-VVEHS2LI.js";
 import "../chunk-46RLHI7D.js";
-import "../chunk-G2UTNSGU.js";
 import "../chunk-DK4A7DLE.js";
-import "../chunk-MQNDWYPN.js";
-import "../chunk-Z7LUNECE.js";
+import "../chunk-VPBAUQ2M.js";
 import "../chunk-ZJZAOKI7.js";
 import "../chunk-FTQ7IQUC.js";
 import "../chunk-C7PSERMH.js";
-import "../chunk-5HTVET6E.js";
+import "../chunk-TIER4SUC.js";
+import "../chunk-Z7LUNECE.js";
 import "../chunk-7VU7V2E4.js";
 import "../chunk-ZLX3KGXX.js";
-import "../chunk-CWM2ZDU5.js";
+import "../chunk-BPKCU575.js";
+import "../chunk-G2UTNSGU.js";
 import "../chunk-MZNPGW5Q.js";
 import "../chunk-XTEI64OU.js";
 import "../chunk-XX6NQJMA.js";
 import "../chunk-IAXWICZU.js";
+import "../chunk-OE6TDIWW.js";
+import "../chunk-DRWHTIIZ.js";
+import "../chunk-IK3KE3AU.js";
+import "../chunk-ZY6KU6P3.js";
+import "../chunk-JWC6APFQ.js";
 import "../chunk-5ERIZW3D.js";
 import "../chunk-5ENKBSWO.js";
-import "../chunk-N5QFKSDO.js";
+import "../chunk-HRRYG2AX.js";
 import "../chunk-AVYJ4YBN.js";
-import "../chunk-DRWHTIIZ.js";
-import "../chunk-WNY4WMRF.js";
+import "../chunk-WLYIIEAF.js";
 import "../chunk-TKJMZBAH.js";
-import "../chunk-JO5NLTLY.js";
-import "../chunk-ZY6KU6P3.js";
-import "../chunk-JWC6APFQ.js";
-import "../chunk-H5JUT3KV.js";
-import "../chunk-CZHZGRU7.js";
+import "../chunk-3QFXFCHG.js";
+import "../chunk-UHGVBFU3.js";
 import "../chunk-AQ5TNQB7.js";
 import "../chunk-XEKD23J5.js";
+import "../chunk-H5JUT3KV.js";
+import "../chunk-7Y47UCF2.js";
+import "../chunk-K5NM7VAH.js";
+import "../chunk-WNY4WMRF.js";
+import "../chunk-OZFM4X3S.js";
 import "../chunk-5ZQBEOMD.js";
-import "../chunk-BO4RFWBR.js";
 import "../chunk-Z7Y2NPHY.js";
 import "../chunk-S4WBV25P.js";
+import "../chunk-XK5CIRMQ.js";
 import "../chunk-CDHS2QDC.js";
 import "../chunk-Y7FO65VT.js";
 import "../chunk-FMOBD2OQ.js";

package/dist/provider-proxy/ingress/providerProxyShared.cjs

@@ -7,42 +7,48 @@
 
 
 
-var _chunk2FMI2B6Vcjs = require('../../chunk-2FMI2B6V.cjs');
+var _chunkDKPXN34Vcjs = require('../../chunk-DKPXN34V.cjs');
 require('../../chunk-HQP3K7PU.cjs');
 require('../../chunk-FZ46M34D.cjs');
-require('../../chunk-46ZIFWYG.cjs');
 require('../../chunk-3OPYJG76.cjs');
-require('../../chunk-FFALUUZZ.cjs');
-require('../../chunk-C72S6TTV.cjs');
+require('../../chunk-RGTR7CIO.cjs');
 require('../../chunk-DWKQZ2SK.cjs');
 require('../../chunk-4VAVYUZS.cjs');
 require('../../chunk-7YN22L2H.cjs');
-require('../../chunk-2DCNB7DF.cjs');
+require('../../chunk-SU2GCLAC.cjs');
+require('../../chunk-C72S6TTV.cjs');
 require('../../chunk-EYZYXJTJ.cjs');
 require('../../chunk-YMFAJFQT.cjs');
-require('../../chunk-3QOSDDNI.cjs');
+require('../../chunk-SNYBEXLB.cjs');
+require('../../chunk-46ZIFWYG.cjs');
 require('../../chunk-GBHYAGX3.cjs');
 require('../../chunk-RPII3E6Z.cjs');
 require('../../chunk-6RPZADX3.cjs');
 require('../../chunk-QWBWGODS.cjs');
+require('../../chunk-UIBD2YY5.cjs');
+require('../../chunk-R3HK6R4B.cjs');
+require('../../chunk-HYN75H6G.cjs');
+require('../../chunk-Q27JY5RG.cjs');
+require('../../chunk-QXD4MV2X.cjs');
 require('../../chunk-NYUNU75A.cjs');
 require('../../chunk-VQY5W4YW.cjs');
-require('../../chunk-Y6OM7EV7.cjs');
+require('../../chunk-KFI44N2R.cjs');
 require('../../chunk-SVNDB62D.cjs');
-require('../../chunk-R3HK6R4B.cjs');
-require('../../chunk-AEOZIDEB.cjs');
+require('../../chunk-APYG5QD7.cjs');
 require('../../chunk-L74VDN4A.cjs');
-require('../../chunk-KUU2RNG6.cjs');
-require('../../chunk-Q27JY5RG.cjs');
-require('../../chunk-QXD4MV2X.cjs');
-require('../../chunk-A2YMUCBT.cjs');
-require('../../chunk-SVXC36MU.cjs');
+require('../../chunk-4YINUUKQ.cjs');
+require('../../chunk-VACWOIRE.cjs');
 require('../../chunk-QBZJ7P2T.cjs');
 require('../../chunk-4IH4EL7M.cjs');
+require('../../chunk-A2YMUCBT.cjs');
+require('../../chunk-E3UCVHLP.cjs');
+require('../../chunk-FCR77GYM.cjs');
+require('../../chunk-AEOZIDEB.cjs');
+require('../../chunk-XSVNC2UD.cjs');
 require('../../chunk-SUEGJ75D.cjs');
-require('../../chunk-S6JGLF3G.cjs');
 require('../../chunk-RSJ3TWJQ.cjs');
 require('../../chunk-YGXJGRFI.cjs');
+require('../../chunk-OCEUVQHW.cjs');
 require('../../chunk-NZYN7C3P.cjs');
 require('../../chunk-JMJBSACD.cjs');
 require('../../chunk-GMMT7RVN.cjs');
@@ -56,4 +62,4 @@ require('../../chunk-UNEFIWXI.cjs');
 
 
 
-exports.getAnthropicEndpointTransformer = _chunk2FMI2B6Vcjs.getAnthropicEndpointTransformer; exports.getGeminiEndpointTransformer = _chunk2FMI2B6Vcjs.getGeminiEndpointTransformer; exports.getResponsesEndpointTransformer = _chunk2FMI2B6Vcjs.getResponsesEndpointTransformer; exports.getSharedExecutor = _chunk2FMI2B6Vcjs.getSharedExecutor; exports.readBody = _chunk2FMI2B6Vcjs.readBody; exports.relayResponse = _chunk2FMI2B6Vcjs.relayResponse; exports.resolvePoolBoundKey = _chunk2FMI2B6Vcjs.resolvePoolBoundKey; exports.writeError = _chunk2FMI2B6Vcjs.writeError;
+exports.getAnthropicEndpointTransformer = _chunkDKPXN34Vcjs.getAnthropicEndpointTransformer; exports.getGeminiEndpointTransformer = _chunkDKPXN34Vcjs.getGeminiEndpointTransformer; exports.getResponsesEndpointTransformer = _chunkDKPXN34Vcjs.getResponsesEndpointTransformer; exports.getSharedExecutor = _chunkDKPXN34Vcjs.getSharedExecutor; exports.readBody = _chunkDKPXN34Vcjs.readBody; exports.relayResponse = _chunkDKPXN34Vcjs.relayResponse; exports.resolvePoolBoundKey = _chunkDKPXN34Vcjs.resolvePoolBoundKey; exports.writeError = _chunkDKPXN34Vcjs.writeError;

package/dist/provider-proxy/ingress/providerProxyShared.js

@@ -7,42 +7,48 @@ import {
   relayResponse,
   resolvePoolBoundKey,
   writeError
-} from "../../chunk-4DECIFU7.js";
+} from "../../chunk-QYTT6GE3.js";
 import "../../chunk-VVEHS2LI.js";
 import "../../chunk-46RLHI7D.js";
-import "../../chunk-G2UTNSGU.js";
 import "../../chunk-DK4A7DLE.js";
-import "../../chunk-MQNDWYPN.js";
-import "../../chunk-Z7LUNECE.js";
+import "../../chunk-VPBAUQ2M.js";
 import "../../chunk-ZJZAOKI7.js";
 import "../../chunk-FTQ7IQUC.js";
 import "../../chunk-C7PSERMH.js";
-import "../../chunk-5HTVET6E.js";
+import "../../chunk-TIER4SUC.js";
+import "../../chunk-Z7LUNECE.js";
 import "../../chunk-7VU7V2E4.js";
 import "../../chunk-ZLX3KGXX.js";
-import "../../chunk-CWM2ZDU5.js";
+import "../../chunk-BPKCU575.js";
+import "../../chunk-G2UTNSGU.js";
 import "../../chunk-MZNPGW5Q.js";
 import "../../chunk-XTEI64OU.js";
 import "../../chunk-XX6NQJMA.js";
 import "../../chunk-IAXWICZU.js";
+import "../../chunk-OE6TDIWW.js";
+import "../../chunk-DRWHTIIZ.js";
+import "../../chunk-IK3KE3AU.js";
+import "../../chunk-ZY6KU6P3.js";
+import "../../chunk-JWC6APFQ.js";
 import "../../chunk-5ERIZW3D.js";
 import "../../chunk-5ENKBSWO.js";
-import "../../chunk-N5QFKSDO.js";
+import "../../chunk-HRRYG2AX.js";
 import "../../chunk-AVYJ4YBN.js";
-import "../../chunk-DRWHTIIZ.js";
-import "../../chunk-WNY4WMRF.js";
+import "../../chunk-WLYIIEAF.js";
 import "../../chunk-TKJMZBAH.js";
-import "../../chunk-JO5NLTLY.js";
-import "../../chunk-ZY6KU6P3.js";
-import "../../chunk-JWC6APFQ.js";
-import "../../chunk-H5JUT3KV.js";
-import "../../chunk-CZHZGRU7.js";
+import "../../chunk-3QFXFCHG.js";
+import "../../chunk-UHGVBFU3.js";
 import "../../chunk-AQ5TNQB7.js";
 import "../../chunk-XEKD23J5.js";
+import "../../chunk-H5JUT3KV.js";
+import "../../chunk-7Y47UCF2.js";
+import "../../chunk-K5NM7VAH.js";
+import "../../chunk-WNY4WMRF.js";
+import "../../chunk-OZFM4X3S.js";
 import "../../chunk-5ZQBEOMD.js";
-import "../../chunk-BO4RFWBR.js";
 import "../../chunk-Z7Y2NPHY.js";
 import "../../chunk-S4WBV25P.js";
+import "../../chunk-XK5CIRMQ.js";
 import "../../chunk-CDHS2QDC.js";
 import "../../chunk-Y7FO65VT.js";
 import "../../chunk-FMOBD2OQ.js";

package/dist/provider-proxy/types.d.cts

@@ -335,6 +335,13 @@ interface RouteContext {
      * `anthropicSdkHints.subscriptionProfile` and ignores this field.
      */
     readonly subscriptionProfile?: SubscriptionAuthProfile | null;
+    /**
+     * Per-request preferred subscription account id (provider/subscription
+     * duality). Stamped by the outbound `resolveRoute` from
+     * `EndpointRoutingConfig.boundAccountId`; the account picker prefers it when
+     * schedulable (else falls back to the pool). Undefined ⇒ pool auto-schedule.
+     */
+    readonly preferredAccountId?: string;
     /**
      * OPAQUE per-account subscription config (opencodego-only). Populated by the
      * route resolver from the subscription registry's `getOpenCodeGoConfig()`

package/dist/provider-proxy/types.d.ts

@@ -335,6 +335,13 @@ interface RouteContext {
      * `anthropicSdkHints.subscriptionProfile` and ignores this field.
      */
     readonly subscriptionProfile?: SubscriptionAuthProfile | null;
+    /**
+     * Per-request preferred subscription account id (provider/subscription
+     * duality). Stamped by the outbound `resolveRoute` from
+     * `EndpointRoutingConfig.boundAccountId`; the account picker prefers it when
+     * schedulable (else falls back to the pool). Undefined ⇒ pool auto-schedule.
+     */
+    readonly preferredAccountId?: string;
     /**
      * OPAQUE per-account subscription config (opencodego-only). Populated by the
      * route resolver from the subscription registry's `getOpenCodeGoConfig()`