@omnicross/core 0.1.3 → 0.1.5

package/dist/outbound-api/types.d.ts

@@ -8,7 +8,7 @@ import '../logger-4GvQNzhE.js';
 import '../ports/provider-config-source.js';
 import '../ProviderProxy-C-xqrkKi.js';
 import '../provider-proxy/types.js';
-export { T as AccountHealthConfig, A as AccountProbeConfig, C as ChatDispatchMode, a as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, b as EndpointRoutingConfig, F as FingerprintConfig, i as KindMappedEndpoint, M as MessagesModelKind, j as ModelKind, k as ModelPrefixTargets, P as ModelRef, l as OutboundApiDeps, m as OutboundApiKeyCreated, n as OutboundApiKeyInfo, o as OutboundApiServerConfig, p as OutboundApiServerStatus, q as OutboundEndpoint, r as OutboundFormatUrls, s as OutboundKeyActivationMode, O as OutboundKeyDb, t as OutboundKeyDbRow, W as OutboundKeyModelRestrictionMode, u as OutboundKeyPolicy, v as OutboundProxyConfig, R as RequestRole, w as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-6OUY_xfA.js';
+export { H as AccountHealthConfig, A as AccountProbeConfig, C as ChatDispatchMode, a as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, b as EndpointRoutingConfig, F as FingerprintConfig, e as KindMappedEndpoint, M as MessagesModelKind, f as ModelKind, g as ModelPrefixTargets, G as ModelRef, h as OutboundApiDeps, i as OutboundApiKeyCreated, j as OutboundApiKeyInfo, k as OutboundApiServerConfig, l as OutboundApiServerStatus, m as OutboundEndpoint, n as OutboundFormatUrls, o as OutboundKeyActivationMode, O as OutboundKeyDb, p as OutboundKeyDbRow, I as OutboundKeyModelRestrictionMode, q as OutboundKeyPolicy, r as OutboundProxyConfig, R as RequestRole, s as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-lgPYQuZS.js';
 import '@omnicross/contracts/llm-config';
 import '../transformer/types.js';
 import '../transformer/TransformerService.js';
@@ -22,3 +22,4 @@ import '../pipeline/SubscriptionAuthSource.js';
 import '../pipeline/SubscriptionAuthStrategy.js';
 import '../ports/web-search-backend.js';
 import '@omnicross/contracts/websearch-types';
+import '../keyPolicy-Cp0FntZl.js';

package/dist/outbound-api.cjs

@@ -55,39 +55,38 @@
 
 
 
-
-
-
-
-var _chunk2FMI2B6Vcjs = require('./chunk-2FMI2B6V.cjs');
+var _chunkCGKLE6IWcjs = require('./chunk-CGKLE6IW.cjs');
 require('./chunk-HQP3K7PU.cjs');
 require('./chunk-FZ46M34D.cjs');
 require('./chunk-46ZIFWYG.cjs');
 require('./chunk-3OPYJG76.cjs');
-require('./chunk-FFALUUZZ.cjs');
-require('./chunk-C72S6TTV.cjs');
+require('./chunk-ZCIQ3L3R.cjs');
+require('./chunk-7FEBOPJO.cjs');
 require('./chunk-DWKQZ2SK.cjs');
-require('./chunk-4VAVYUZS.cjs');
-require('./chunk-7YN22L2H.cjs');
-require('./chunk-2DCNB7DF.cjs');
+require('./chunk-4XMYPW46.cjs');
+require('./chunk-K52THW2C.cjs');
+require('./chunk-3Q6Z6JTO.cjs');
 require('./chunk-EYZYXJTJ.cjs');
 require('./chunk-YMFAJFQT.cjs');
-require('./chunk-3QOSDDNI.cjs');
+require('./chunk-SNYBEXLB.cjs');
 require('./chunk-GBHYAGX3.cjs');
 require('./chunk-RPII3E6Z.cjs');
 require('./chunk-6RPZADX3.cjs');
 require('./chunk-QWBWGODS.cjs');
+require('./chunk-UIBD2YY5.cjs');
+require('./chunk-R3HK6R4B.cjs');
+require('./chunk-HYN75H6G.cjs');
+require('./chunk-Q27JY5RG.cjs');
+require('./chunk-QXD4MV2X.cjs');
 require('./chunk-NYUNU75A.cjs');
 require('./chunk-VQY5W4YW.cjs');
-require('./chunk-Y6OM7EV7.cjs');
+require('./chunk-KFI44N2R.cjs');
 require('./chunk-SVNDB62D.cjs');
-require('./chunk-R3HK6R4B.cjs');
-require('./chunk-AEOZIDEB.cjs');
+
+
+var _chunkAPYG5QD7cjs = require('./chunk-APYG5QD7.cjs');
 require('./chunk-L74VDN4A.cjs');
-require('./chunk-KUU2RNG6.cjs');
-require('./chunk-Q27JY5RG.cjs');
-require('./chunk-QXD4MV2X.cjs');
-require('./chunk-A2YMUCBT.cjs');
+require('./chunk-4YINUUKQ.cjs');
 
 
 
@@ -104,15 +103,26 @@ require('./chunk-A2YMUCBT.cjs');
 
 
 
-var _chunkSVXC36MUcjs = require('./chunk-SVXC36MU.cjs');
+var _chunkVACWOIREcjs = require('./chunk-VACWOIRE.cjs');
 require('./chunk-QBZJ7P2T.cjs');
 
 
 var _chunk4IH4EL7Mcjs = require('./chunk-4IH4EL7M.cjs');
+require('./chunk-A2YMUCBT.cjs');
+
+
+var _chunkUNWKG6EIcjs = require('./chunk-UNWKG6EI.cjs');
+
+
+
+var _chunkFCR77GYMcjs = require('./chunk-FCR77GYM.cjs');
+require('./chunk-AEOZIDEB.cjs');
+require('./chunk-XSVNC2UD.cjs');
 require('./chunk-SUEGJ75D.cjs');
-require('./chunk-S6JGLF3G.cjs');
-require('./chunk-RSJ3TWJQ.cjs');
-require('./chunk-YGXJGRFI.cjs');
+require('./chunk-DDMRUL76.cjs');
+require('./chunk-JWVTXXPX.cjs');
+require('./chunk-PG7PS2NN.cjs');
+require('./chunk-3Z5BQZFM.cjs');
 require('./chunk-NZYN7C3P.cjs');
 require('./chunk-JMJBSACD.cjs');
 require('./chunk-GMMT7RVN.cjs');
@@ -194,4 +204,4 @@ require('./chunk-UNEFIWXI.cjs');
 
 
 
-exports.AUDIT_REDACTED = _chunk2FMI2B6Vcjs.AUDIT_REDACTED; exports.ConcurrencyQueueFullError = _chunk2FMI2B6Vcjs.ConcurrencyQueueFullError; exports.ConcurrencyWaitCancelledError = _chunk2FMI2B6Vcjs.ConcurrencyWaitCancelledError; exports.ConcurrencyWaitTimeoutError = _chunk2FMI2B6Vcjs.ConcurrencyWaitTimeoutError; exports.DEFAULT_ACCOUNT_PROBE = _chunk2FMI2B6Vcjs.DEFAULT_ACCOUNT_PROBE; exports.DEFAULT_CONCURRENCY_QUEUE = _chunk2FMI2B6Vcjs.DEFAULT_CONCURRENCY_QUEUE; exports.DEFAULT_FINGERPRINT = _chunk2FMI2B6Vcjs.DEFAULT_FINGERPRINT; exports.DEFAULT_OUTBOUND_PORT = _chunk2FMI2B6Vcjs.DEFAULT_OUTBOUND_PORT; exports.DEFAULT_USER_MESSAGE_QUEUE = _chunk2FMI2B6Vcjs.DEFAULT_USER_MESSAGE_QUEUE; exports.ENDPOINT_MODEL_KINDS = _chunk4IH4EL7Mcjs.ENDPOINT_MODEL_KINDS; exports.KeySpendTracker = _chunk2FMI2B6Vcjs.KeySpendTracker; exports.KeyedMutex = _chunk2FMI2B6Vcjs.KeyedMutex; exports.OUTBOUND_API_SERVER_CONFIG_KEY = _chunk2FMI2B6Vcjs.OUTBOUND_API_SERVER_CONFIG_KEY; exports.OutboundApiConfigError = _chunk2FMI2B6Vcjs.OutboundApiConfigError; exports.OutboundApiServer = _chunk2FMI2B6Vcjs.OutboundApiServer; exports.OutboundConcurrencyGate = _chunk2FMI2B6Vcjs.OutboundConcurrencyGate; exports.OutboundRateLimiter = _chunk2FMI2B6Vcjs.OutboundRateLimiter; exports.SUBSCRIPTION_PROVIDER_IDS = _chunkSVXC36MUcjs.SUBSCRIPTION_PROVIDER_IDS; exports.SerialQueueTimeoutError = _chunk2FMI2B6Vcjs.SerialQueueTimeoutError; exports.UserMessageSerialQueue = _chunk2FMI2B6Vcjs.UserMessageSerialQueue; exports.__resetOutboundApiServerForTests = _chunk2FMI2B6Vcjs.__resetOutboundApiServerForTests; exports.beginAuditCapture = _chunk2FMI2B6Vcjs.beginAuditCapture; exports.beginBillingCapture = _chunk2FMI2B6Vcjs.beginBillingCapture; exports.checkKeyQuota = _chunk2FMI2B6Vcjs.checkKeyQuota; exports.classifyModelPrefix = _chunkSVXC36MUcjs.classifyModelPrefix; exports.computeKeyExpiry = _chunk2FMI2B6Vcjs.computeKeyExpiry; exports.computeVoucherGrant = _chunk2FMI2B6Vcjs.computeVoucherGrant; exports.createNamedKey = _chunk2FMI2B6Vcjs.createNamedKey; exports.defaultServerConfig = _chunk2FMI2B6Vcjs.defaultServerConfig; exports.detectModelKind = _chunkSVXC36MUcjs.detectModelKind; exports.detectRequestRole = _chunkSVXC36MUcjs.detectRequestRole; exports.endpointSupportsSubscription = _chunkSVXC36MUcjs.endpointSupportsSubscription; exports.endpointToIngressFormat = _chunkSVXC36MUcjs.endpointToIngressFormat; exports.formatUrls = _chunk2FMI2B6Vcjs.formatUrls; exports.generateVoucherCode = _chunk2FMI2B6Vcjs.generateVoucherCode; exports.getOutboundApiServer = _chunk2FMI2B6Vcjs.getOutboundApiServer; exports.handleVoucherRedeem = _chunk2FMI2B6Vcjs.handleVoucherRedeem; exports.hashKey = _chunk2FMI2B6Vcjs.hashKey; exports.hashVoucherCode = _chunk2FMI2B6Vcjs.hashVoucherCode; exports.isConcurrencyRejection = _chunk2FMI2B6Vcjs.isConcurrencyRejection; exports.isKindMappedEndpoint = _chunkSVXC36MUcjs.isKindMappedEndpoint; exports.isRedeemRequest = _chunk2FMI2B6Vcjs.isRedeemRequest; exports.isSerialQueueTimeout = _chunk2FMI2B6Vcjs.isSerialQueueTimeout; exports.isSubscriptionProviderId = _chunkSVXC36MUcjs.isSubscriptionProviderId; exports.isUserMessageRequest = _chunk2FMI2B6Vcjs.isUserMessageRequest; exports.loadServerConfig = _chunk2FMI2B6Vcjs.loadServerConfig; exports.mergeServerConfig = _chunk2FMI2B6Vcjs.mergeServerConfig; exports.modelKindsForEndpoint = _chunkSVXC36MUcjs.modelKindsForEndpoint; exports.newVoucherId = _chunk2FMI2B6Vcjs.newVoucherId; exports.normalizeAccountProbe = _chunk2FMI2B6Vcjs.normalizeAccountProbe; exports.normalizeAudit = _chunk2FMI2B6Vcjs.normalizeAudit; exports.normalizeBilling = _chunk2FMI2B6Vcjs.normalizeBilling; exports.normalizeFingerprint = _chunk2FMI2B6Vcjs.normalizeFingerprint; exports.normalizePrefixTargets = _chunk2FMI2B6Vcjs.normalizePrefixTargets; exports.normalizeProxyConfig = _chunk2FMI2B6Vcjs.normalizeProxyConfig; exports.normalizeProxySegment = _chunk2FMI2B6Vcjs.normalizeProxySegment; exports.normalizeQueueSegments = _chunk2FMI2B6Vcjs.normalizeQueueSegments; exports.normalizeServerConfig = _chunk2FMI2B6Vcjs.normalizeServerConfig; exports.normalizeVoucher = _chunk2FMI2B6Vcjs.normalizeVoucher; exports.normalizeWebhookDestination = _chunk2FMI2B6Vcjs.normalizeWebhookDestination; exports.normalizeWebhookSegment = _chunk2FMI2B6Vcjs.normalizeWebhookSegment; exports.parseModelRef = _chunkSVXC36MUcjs.parseModelRef; exports.pickModelRefFromList = _chunkSVXC36MUcjs.pickModelRefFromList; exports.randomBase62 = _chunk2FMI2B6Vcjs.randomBase62; exports.redactAuditText = _chunk2FMI2B6Vcjs.redactAuditText; exports.resolvePrefixTarget = _chunkSVXC36MUcjs.resolvePrefixTarget; exports.resolveRoute = _chunkSVXC36MUcjs.resolveRoute; exports.saveServerConfig = _chunk2FMI2B6Vcjs.saveServerConfig; exports.startOfLocalDay = _chunk2FMI2B6Vcjs.startOfLocalDay; exports.startOfLocalWeek = _chunk2FMI2B6Vcjs.startOfLocalWeek; exports.toVoucherInfo = _chunk2FMI2B6Vcjs.toVoucherInfo; exports.validateEndpointModelConfig = _chunkSVXC36MUcjs.validateEndpointModelConfig; exports.validateServerModelConfig = _chunkSVXC36MUcjs.validateServerModelConfig; exports.verifyKey = _chunk2FMI2B6Vcjs.verifyKey; exports.verifyPresentedKey = _chunk2FMI2B6Vcjs.verifyPresentedKey; exports.voucherCodePrefix = _chunk2FMI2B6Vcjs.voucherCodePrefix;
+exports.AUDIT_REDACTED = _chunkFCR77GYMcjs.AUDIT_REDACTED; exports.ConcurrencyQueueFullError = _chunkCGKLE6IWcjs.ConcurrencyQueueFullError; exports.ConcurrencyWaitCancelledError = _chunkCGKLE6IWcjs.ConcurrencyWaitCancelledError; exports.ConcurrencyWaitTimeoutError = _chunkCGKLE6IWcjs.ConcurrencyWaitTimeoutError; exports.DEFAULT_ACCOUNT_PROBE = _chunkCGKLE6IWcjs.DEFAULT_ACCOUNT_PROBE; exports.DEFAULT_CONCURRENCY_QUEUE = _chunkCGKLE6IWcjs.DEFAULT_CONCURRENCY_QUEUE; exports.DEFAULT_FINGERPRINT = _chunkCGKLE6IWcjs.DEFAULT_FINGERPRINT; exports.DEFAULT_OUTBOUND_PORT = _chunkCGKLE6IWcjs.DEFAULT_OUTBOUND_PORT; exports.DEFAULT_USER_MESSAGE_QUEUE = _chunkCGKLE6IWcjs.DEFAULT_USER_MESSAGE_QUEUE; exports.ENDPOINT_MODEL_KINDS = _chunk4IH4EL7Mcjs.ENDPOINT_MODEL_KINDS; exports.KeySpendTracker = _chunkCGKLE6IWcjs.KeySpendTracker; exports.KeyedMutex = _chunkCGKLE6IWcjs.KeyedMutex; exports.OUTBOUND_API_SERVER_CONFIG_KEY = _chunkCGKLE6IWcjs.OUTBOUND_API_SERVER_CONFIG_KEY; exports.OutboundApiConfigError = _chunkCGKLE6IWcjs.OutboundApiConfigError; exports.OutboundApiServer = _chunkCGKLE6IWcjs.OutboundApiServer; exports.OutboundConcurrencyGate = _chunkCGKLE6IWcjs.OutboundConcurrencyGate; exports.OutboundRateLimiter = _chunkCGKLE6IWcjs.OutboundRateLimiter; exports.SUBSCRIPTION_PROVIDER_IDS = _chunkVACWOIREcjs.SUBSCRIPTION_PROVIDER_IDS; exports.SerialQueueTimeoutError = _chunkCGKLE6IWcjs.SerialQueueTimeoutError; exports.UserMessageSerialQueue = _chunkCGKLE6IWcjs.UserMessageSerialQueue; exports.__resetOutboundApiServerForTests = _chunkCGKLE6IWcjs.__resetOutboundApiServerForTests; exports.beginAuditCapture = _chunkUNWKG6EIcjs.beginAuditCapture; exports.beginBillingCapture = _chunkAPYG5QD7cjs.beginBillingCapture; exports.checkKeyQuota = _chunkCGKLE6IWcjs.checkKeyQuota; exports.classifyModelPrefix = _chunkVACWOIREcjs.classifyModelPrefix; exports.computeKeyExpiry = _chunkCGKLE6IWcjs.computeKeyExpiry; exports.computeVoucherGrant = _chunkCGKLE6IWcjs.computeVoucherGrant; exports.createNamedKey = _chunkCGKLE6IWcjs.createNamedKey; exports.defaultServerConfig = _chunkCGKLE6IWcjs.defaultServerConfig; exports.detectModelKind = _chunkVACWOIREcjs.detectModelKind; exports.detectRequestRole = _chunkVACWOIREcjs.detectRequestRole; exports.endpointSupportsSubscription = _chunkVACWOIREcjs.endpointSupportsSubscription; exports.endpointToIngressFormat = _chunkVACWOIREcjs.endpointToIngressFormat; exports.formatUrls = _chunkCGKLE6IWcjs.formatUrls; exports.generateVoucherCode = _chunkCGKLE6IWcjs.generateVoucherCode; exports.getOutboundApiServer = _chunkCGKLE6IWcjs.getOutboundApiServer; exports.handleVoucherRedeem = _chunkCGKLE6IWcjs.handleVoucherRedeem; exports.hashKey = _chunkCGKLE6IWcjs.hashKey; exports.hashVoucherCode = _chunkCGKLE6IWcjs.hashVoucherCode; exports.isConcurrencyRejection = _chunkCGKLE6IWcjs.isConcurrencyRejection; exports.isKindMappedEndpoint = _chunkVACWOIREcjs.isKindMappedEndpoint; exports.isRedeemRequest = _chunkCGKLE6IWcjs.isRedeemRequest; exports.isSerialQueueTimeout = _chunkCGKLE6IWcjs.isSerialQueueTimeout; exports.isSubscriptionProviderId = _chunkVACWOIREcjs.isSubscriptionProviderId; exports.isUserMessageRequest = _chunkCGKLE6IWcjs.isUserMessageRequest; exports.loadServerConfig = _chunkCGKLE6IWcjs.loadServerConfig; exports.mergeServerConfig = _chunkCGKLE6IWcjs.mergeServerConfig; exports.modelKindsForEndpoint = _chunkVACWOIREcjs.modelKindsForEndpoint; exports.newVoucherId = _chunkCGKLE6IWcjs.newVoucherId; exports.normalizeAccountProbe = _chunkCGKLE6IWcjs.normalizeAccountProbe; exports.normalizeAudit = _chunkCGKLE6IWcjs.normalizeAudit; exports.normalizeBilling = _chunkCGKLE6IWcjs.normalizeBilling; exports.normalizeFingerprint = _chunkCGKLE6IWcjs.normalizeFingerprint; exports.normalizePrefixTargets = _chunkCGKLE6IWcjs.normalizePrefixTargets; exports.normalizeProxyConfig = _chunkCGKLE6IWcjs.normalizeProxyConfig; exports.normalizeProxySegment = _chunkCGKLE6IWcjs.normalizeProxySegment; exports.normalizeQueueSegments = _chunkCGKLE6IWcjs.normalizeQueueSegments; exports.normalizeServerConfig = _chunkCGKLE6IWcjs.normalizeServerConfig; exports.normalizeVoucher = _chunkCGKLE6IWcjs.normalizeVoucher; exports.normalizeWebhookDestination = _chunkCGKLE6IWcjs.normalizeWebhookDestination; exports.normalizeWebhookSegment = _chunkCGKLE6IWcjs.normalizeWebhookSegment; exports.parseModelRef = _chunkVACWOIREcjs.parseModelRef; exports.pickModelRefFromList = _chunkVACWOIREcjs.pickModelRefFromList; exports.randomBase62 = _chunkCGKLE6IWcjs.randomBase62; exports.redactAuditText = _chunkFCR77GYMcjs.redactAuditText; exports.resolvePrefixTarget = _chunkVACWOIREcjs.resolvePrefixTarget; exports.resolveRoute = _chunkVACWOIREcjs.resolveRoute; exports.saveServerConfig = _chunkCGKLE6IWcjs.saveServerConfig; exports.startOfLocalDay = _chunkCGKLE6IWcjs.startOfLocalDay; exports.startOfLocalWeek = _chunkCGKLE6IWcjs.startOfLocalWeek; exports.toVoucherInfo = _chunkCGKLE6IWcjs.toVoucherInfo; exports.validateEndpointModelConfig = _chunkVACWOIREcjs.validateEndpointModelConfig; exports.validateServerModelConfig = _chunkVACWOIREcjs.validateServerModelConfig; exports.verifyKey = _chunkCGKLE6IWcjs.verifyKey; exports.verifyPresentedKey = _chunkCGKLE6IWcjs.verifyPresentedKey; exports.voucherCodePrefix = _chunkCGKLE6IWcjs.voucherCodePrefix;

package/dist/outbound-api.d.cts

@@ -1,13 +1,18 @@
 import { VoucherConfig } from '@omnicross/contracts/voucher-types';
-import { i as KindMappedEndpoint, j as ModelKind, q as OutboundEndpoint, b as EndpointRoutingConfig, o as OutboundApiServerConfig, U as UserMessageQueueConfig, a as ConcurrencyQueueConfig, l as OutboundApiDeps, p as OutboundApiServerStatus, r as OutboundFormatUrls, A as AccountProbeConfig, F as FingerprintConfig, k as ModelPrefixTargets, v as OutboundProxyConfig, P as ModelRef, K as KeyCostLimits, S as ModelRestriction, O as OutboundKeyDb, m as OutboundApiKeyCreated, R as RequestRole } from './types-aBFFXoBz.cjs';
-export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, c as KeyExpiryInput, d as KeyExpiryResult, e as KeySpend, f as KeySpendReader, g as KeySpendSeeder, h as KeySpendTracker, M as MessagesModelKind, n as OutboundApiKeyInfo, s as OutboundKeyActivationMode, t as OutboundKeyDbRow, u as OutboundKeyPolicy, Q as QuotaDecision, w as ResponsesModelKind, V as VoucherCreateInput, x as VoucherDb, y as checkKeyQuota, z as computeKeyExpiry, B as computeVoucherGrant, D as generateVoucherCode, G as hashVoucherCode, H as newVoucherId, I as startOfLocalDay, J as startOfLocalWeek, L as toVoucherInfo, N as voucherCodePrefix } from './types-aBFFXoBz.cjs';
+import { e as KindMappedEndpoint, f as ModelKind, m as OutboundEndpoint, b as EndpointRoutingConfig, k as OutboundApiServerConfig, U as UserMessageQueueConfig, a as ConcurrencyQueueConfig, h as OutboundApiDeps, l as OutboundApiServerStatus, n as OutboundFormatUrls, A as AccountProbeConfig, F as FingerprintConfig, g as ModelPrefixTargets, r as OutboundProxyConfig, G as ModelRef, O as OutboundKeyDb, i as OutboundApiKeyCreated, R as RequestRole } from './types-B8Arpxn0.cjs';
+export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, K as KeySpendReader, c as KeySpendSeeder, d as KeySpendTracker, M as MessagesModelKind, j as OutboundApiKeyInfo, o as OutboundKeyActivationMode, p as OutboundKeyDbRow, q as OutboundKeyPolicy, s as ResponsesModelKind, V as VoucherCreateInput, t as VoucherDb, u as computeVoucherGrant, v as generateVoucherCode, w as hashVoucherCode, x as newVoucherId, y as startOfLocalDay, z as startOfLocalWeek, B as toVoucherInfo, D as voucherCodePrefix } from './types-B8Arpxn0.cjs';
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingConfig } from '@omnicross/contracts/billing-types';
 import { WebhookDestination, WebhookConfig } from '@omnicross/contracts/webhook-types';
+export { AUDIT_REDACTED, redactAuditText } from './outbound-api/auditRedact.cjs';
+export { AuditCaptureContext, beginAuditCapture } from './outbound-api/auditCapture.cjs';
+export { BillingCaptureContext, beginBillingCapture } from './outbound-api/billingCapture.cjs';
+import { K as KeyCostLimits, M as ModelRestriction } from './keyPolicy-Cp0FntZl.cjs';
+export { a as KeyExpiryInput, b as KeyExpiryResult, c as KeySpend, Q as QuotaDecision, d as checkKeyQuota, e as computeKeyExpiry } from './keyPolicy-Cp0FntZl.cjs';
 import http from 'node:http';
 import { IngressFormat } from './provider-proxy/types.cjs';
-export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-CbG5uBgm.cjs';
+export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-CB3tvJKy.cjs';
 import '@omnicross/contracts/health-logging-types';
 import './logger-4GvQNzhE.cjs';
 import './ports/provider-config-source.cjs';
@@ -369,142 +374,6 @@ declare function saveServerConfig(store: ApiServerSettingsStore, config: Outboun
 /** Apply a partial patch to a config, returning the merged whole. */
 declare function mergeServerConfig(current: OutboundApiServerConfig, patch: Partial<OutboundApiServerConfig>): OutboundApiServerConfig;
 
-/**
- * auditRedact — the pure secret-redaction pass for captured audit bodies
- * (request-audit-log, design D3/D7).
- *
- * Body capture is opt-in and inherently sensitive: a prompt or tool argument can
- * embed a secret. {@link redactAuditText} is run over EVERY captured body (and
- * any other free text stored in a record) BEFORE it is persisted — defense in
- * depth on top of "request headers are NEVER captured" (so an Authorization /
- * x-api-key HEADER value never enters a record in the first place).
- *
- * It masks the obvious, high-confidence secret shapes ONLY (frozen list) — never
- * a broad heuristic that would gut a legitimate prompt:
- *  - `sk-…` API keys (covers `sk-ant-…`, `sk-omnicross-…`, `sk-proj-…`, OpenAI).
- *  - `Bearer <token>` authorization values.
- *  - `x-api-key` / `api-key` / `authorization` values written inline as text.
- *  - Google `AIza…` API keys.
- *
- * Pure + allocation-light + never throws.
- *
- * @module @omnicross/core/outbound-api/auditRedact
- */
-/** The sentinel a masked secret is replaced with. */
-declare const AUDIT_REDACTED = "***REDACTED***";
-/**
- * Mask obvious secrets in `text`. Pure; returns the input unchanged when it holds
- * no recognized secret shape. Never throws (a bad input returns `''`).
- */
-declare function redactAuditText(text: string): string;
-
-/**
- * auditCapture — the outbound server's post-response audit capture hook
- * (request-audit-log, design D1/D3/D5).
- *
- * {@link beginAuditCapture} is called at the TOP of `handleOutboundRequest`. It
- * reads the active capture config from the core slot; when audit is DISABLED it
- * returns `null` immediately (one slot read — no assembly, no listener, zero
- * regression). When enabled it:
- *  - registers a one-shot `res.on('close')` listener that, at response end,
- *    assembles the {@link AuditRecord} from the http `req` (IP via the socket, or
- *    a trusted `X-Forwarded-For` only when configured — LEAD OQ1 anti-spoof; UA;
- *    method; path with the query string DROPPED), the response `statusCode`, the
- *    elapsed ms, and the fields the handler fills in (keyId / model / provider /
- *    error / bodies) — then hands it to the fire-and-forget `recordAudit`;
- *  - when `captureBodies` is ALSO on, wraps `res.write`/`res.end` to accumulate a
- *    BOUNDED response body (metadata-only for a streaming `text/event-stream`
- *    response — a full stream is unbounded), and truncates+redacts both bodies.
- *
- * Request HEADERS are NEVER read into a record (Authorization / x-api-key live
- * there). Every stored body passes through {@link redactAuditText}. The assembly
- * is wrapped so a capture failure can never surface into the relay path.
- *
- * @module @omnicross/core/outbound-api/auditCapture
- */
-
-/**
- * The mutable context the request handler enriches as it progresses. `null` is
- * returned by {@link beginAuditCapture} when audit is disabled — the handler
- * guards every write with `if (audit)`.
- */
-interface AuditCaptureContext {
-    /** Outbound key id (set after auth). NEVER the key material. */
-    keyId?: string | null;
-    /** Resolved upstream model (set after route resolution). */
-    model?: string;
-    /** Upstream provider id (set after route resolution). */
-    provider?: string;
-    /** Sanitized error message (set on a relay/dispatch failure). */
-    error?: string;
-    /** Stash the raw request body for capture (a no-op unless `captureBodies`). */
-    setRequestBody(raw: string): void;
-}
-/**
- * Begin audit capture for one request. Returns a mutable context the handler
- * enriches, or `null` when audit is disabled (zero-cost path). The record is
- * emitted on response `close` via the fire-and-forget sink.
- */
-declare function beginAuditCapture(req: http.IncomingMessage, res: http.ServerResponse, now: number): AuditCaptureContext | null;
-
-/**
- * billingCapture — the outbound server's post-response billing capture hook
- * (billing-event-stream, design D1/D4).
- *
- * {@link beginBillingCapture} is called at the TOP of `handleOutboundRequest`. It
- * reads the active billing config from the core slot; when billing is DISABLED it
- * returns `null` immediately (one slot read — no assembly, no listener, zero
- * regression). When enabled it registers a one-shot `res.close` listener that
- * assembles a {@link BillingEvent} from the handler-filled context (keyId / model
- * / provider / authMode), the response `statusCode`, and this request's METERED
- * FACTS (token counts + the ALREADY-COMPUTED cost) — then hands it to the
- * no-throw {@link publishBillingEvent}.
- *
- * COST REUSE (design D3 — no double pricing): the metered facts are read from the
- * per-request usage stash the usage tap populates ({@link readAuditUsage} — the
- * SAME stash `usage-events.jsonl` correlation uses, populated UNCONDITIONALLY by
- * the taps, independent of whether request-audit is enabled). Token counts are
- * stashed SYNCHRONOUSLY at `record()`; the cost lands on the recorder's deferred
- * pricing tick (scheduled BEFORE the response closes). So the assembly is deferred
- * one macrotask past `close` — by then the earlier-scheduled pricing tick has run
- * and stashed the computed cost we REUSE (we never re-price).
- *
- * BILLABLE-ONLY: an event is emitted ONLY when the request produced usage (an
- * upstream call was billed). Auth failures / rate-limit / model-restriction
- * rejections return before dispatch, stash no usage, and emit NO billing event.
- *
- * @module @omnicross/core/outbound-api/billingCapture
- */
-
-/**
- * The mutable context the request handler enriches as it progresses. `null` is
- * returned by {@link beginBillingCapture} when billing is disabled — the handler
- * guards every write with `if (billing)`.
- */
-interface BillingCaptureContext {
-    /** Outbound key id (set after auth). NEVER the key material. */
-    keyId?: string | null;
-    /** Resolved upstream model (set after route resolution). */
-    model?: string;
-    /** Upstream provider id (set after route resolution). */
-    provider?: string;
-    /** Re-auth mode the request billed under (set after route resolution). */
-    authMode?: 'byo' | 'subscription';
-}
-/**
- * Deferral used to schedule the event assembly one macrotask past `close`, so the
- * usage tap's earlier-scheduled pricing tick has stashed the cost we reuse.
- * Injectable ONLY for deterministic tests; production uses a zero-delay timer.
- */
-type BillingDefer = (fn: () => void) => void;
-/**
- * Begin billing capture for one request. Returns a mutable context the handler
- * enriches, or `null` when billing is disabled (zero-cost path). The event is
- * emitted on response `close` via the no-throw sink — but ONLY when the request
- * produced usage (a billable request).
- */
-declare function beginBillingCapture(_req: http.IncomingMessage, res: http.ServerResponse, now: number, defer?: BillingDefer): BillingCaptureContext | null;
-
 /**
  * modelPrefixDispatch — pure model-name PREFIX classification for the `chat`
  * endpoint's opt-in `dispatchMode: 'prefix'` (openai-chat-bridge #11, design D2).
@@ -1006,4 +875,4 @@ declare function getOutboundApiServer(deps?: OutboundApiDeps, onPortChange?: (po
 /** Reset the singleton (tests / teardown only). */
 declare function __resetOutboundApiServerForTests(): void;
 
-export { AUDIT_REDACTED, AccountProbeConfig, type ApiServerSettingsStore, type ApplyConfigInput, type AuditCaptureContext, type BillingCaptureContext, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, type EndpointModelConfigError, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiConfigError, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundProxyConfig, OutboundRateLimiter, RequestRole, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, beginAuditCapture, beginBillingCapture, classifyModelPrefix, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, endpointToIngressFormat, formatUrls, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, redactAuditText, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateServerModelConfig, verifyKey, verifyPresentedKey };
+export { AccountProbeConfig, type ApiServerSettingsStore, type ApplyConfigInput, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, type EndpointModelConfigError, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiConfigError, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundProxyConfig, OutboundRateLimiter, RequestRole, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, classifyModelPrefix, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, endpointToIngressFormat, formatUrls, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateServerModelConfig, verifyKey, verifyPresentedKey };

package/dist/outbound-api.d.ts

@@ -1,13 +1,18 @@
 import { VoucherConfig } from '@omnicross/contracts/voucher-types';
-import { i as KindMappedEndpoint, j as ModelKind, q as OutboundEndpoint, b as EndpointRoutingConfig, o as OutboundApiServerConfig, U as UserMessageQueueConfig, a as ConcurrencyQueueConfig, l as OutboundApiDeps, p as OutboundApiServerStatus, r as OutboundFormatUrls, A as AccountProbeConfig, F as FingerprintConfig, k as ModelPrefixTargets, v as OutboundProxyConfig, P as ModelRef, K as KeyCostLimits, S as ModelRestriction, O as OutboundKeyDb, m as OutboundApiKeyCreated, R as RequestRole } from './types-6OUY_xfA.js';
-export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, c as KeyExpiryInput, d as KeyExpiryResult, e as KeySpend, f as KeySpendReader, g as KeySpendSeeder, h as KeySpendTracker, M as MessagesModelKind, n as OutboundApiKeyInfo, s as OutboundKeyActivationMode, t as OutboundKeyDbRow, u as OutboundKeyPolicy, Q as QuotaDecision, w as ResponsesModelKind, V as VoucherCreateInput, x as VoucherDb, y as checkKeyQuota, z as computeKeyExpiry, B as computeVoucherGrant, D as generateVoucherCode, G as hashVoucherCode, H as newVoucherId, I as startOfLocalDay, J as startOfLocalWeek, L as toVoucherInfo, N as voucherCodePrefix } from './types-6OUY_xfA.js';
+import { e as KindMappedEndpoint, f as ModelKind, m as OutboundEndpoint, b as EndpointRoutingConfig, k as OutboundApiServerConfig, U as UserMessageQueueConfig, a as ConcurrencyQueueConfig, h as OutboundApiDeps, l as OutboundApiServerStatus, n as OutboundFormatUrls, A as AccountProbeConfig, F as FingerprintConfig, g as ModelPrefixTargets, r as OutboundProxyConfig, G as ModelRef, O as OutboundKeyDb, i as OutboundApiKeyCreated, R as RequestRole } from './types-lgPYQuZS.js';
+export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, K as KeySpendReader, c as KeySpendSeeder, d as KeySpendTracker, M as MessagesModelKind, j as OutboundApiKeyInfo, o as OutboundKeyActivationMode, p as OutboundKeyDbRow, q as OutboundKeyPolicy, s as ResponsesModelKind, V as VoucherCreateInput, t as VoucherDb, u as computeVoucherGrant, v as generateVoucherCode, w as hashVoucherCode, x as newVoucherId, y as startOfLocalDay, z as startOfLocalWeek, B as toVoucherInfo, D as voucherCodePrefix } from './types-lgPYQuZS.js';
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingConfig } from '@omnicross/contracts/billing-types';
 import { WebhookDestination, WebhookConfig } from '@omnicross/contracts/webhook-types';
+export { AUDIT_REDACTED, redactAuditText } from './outbound-api/auditRedact.js';
+export { AuditCaptureContext, beginAuditCapture } from './outbound-api/auditCapture.js';
+export { BillingCaptureContext, beginBillingCapture } from './outbound-api/billingCapture.js';
+import { K as KeyCostLimits, M as ModelRestriction } from './keyPolicy-Cp0FntZl.js';
+export { a as KeyExpiryInput, b as KeyExpiryResult, c as KeySpend, Q as QuotaDecision, d as checkKeyQuota, e as computeKeyExpiry } from './keyPolicy-Cp0FntZl.js';
 import http from 'node:http';
 import { IngressFormat } from './provider-proxy/types.js';
-export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-B1NglTfe.js';
+export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-C4T7yClx.js';
 import '@omnicross/contracts/health-logging-types';
 import './logger-4GvQNzhE.js';
 import './ports/provider-config-source.js';
@@ -369,142 +374,6 @@ declare function saveServerConfig(store: ApiServerSettingsStore, config: Outboun
 /** Apply a partial patch to a config, returning the merged whole. */
 declare function mergeServerConfig(current: OutboundApiServerConfig, patch: Partial<OutboundApiServerConfig>): OutboundApiServerConfig;
 
-/**
- * auditRedact — the pure secret-redaction pass for captured audit bodies
- * (request-audit-log, design D3/D7).
- *
- * Body capture is opt-in and inherently sensitive: a prompt or tool argument can
- * embed a secret. {@link redactAuditText} is run over EVERY captured body (and
- * any other free text stored in a record) BEFORE it is persisted — defense in
- * depth on top of "request headers are NEVER captured" (so an Authorization /
- * x-api-key HEADER value never enters a record in the first place).
- *
- * It masks the obvious, high-confidence secret shapes ONLY (frozen list) — never
- * a broad heuristic that would gut a legitimate prompt:
- *  - `sk-…` API keys (covers `sk-ant-…`, `sk-omnicross-…`, `sk-proj-…`, OpenAI).
- *  - `Bearer <token>` authorization values.
- *  - `x-api-key` / `api-key` / `authorization` values written inline as text.
- *  - Google `AIza…` API keys.
- *
- * Pure + allocation-light + never throws.
- *
- * @module @omnicross/core/outbound-api/auditRedact
- */
-/** The sentinel a masked secret is replaced with. */
-declare const AUDIT_REDACTED = "***REDACTED***";
-/**
- * Mask obvious secrets in `text`. Pure; returns the input unchanged when it holds
- * no recognized secret shape. Never throws (a bad input returns `''`).
- */
-declare function redactAuditText(text: string): string;
-
-/**
- * auditCapture — the outbound server's post-response audit capture hook
- * (request-audit-log, design D1/D3/D5).
- *
- * {@link beginAuditCapture} is called at the TOP of `handleOutboundRequest`. It
- * reads the active capture config from the core slot; when audit is DISABLED it
- * returns `null` immediately (one slot read — no assembly, no listener, zero
- * regression). When enabled it:
- *  - registers a one-shot `res.on('close')` listener that, at response end,
- *    assembles the {@link AuditRecord} from the http `req` (IP via the socket, or
- *    a trusted `X-Forwarded-For` only when configured — LEAD OQ1 anti-spoof; UA;
- *    method; path with the query string DROPPED), the response `statusCode`, the
- *    elapsed ms, and the fields the handler fills in (keyId / model / provider /
- *    error / bodies) — then hands it to the fire-and-forget `recordAudit`;
- *  - when `captureBodies` is ALSO on, wraps `res.write`/`res.end` to accumulate a
- *    BOUNDED response body (metadata-only for a streaming `text/event-stream`
- *    response — a full stream is unbounded), and truncates+redacts both bodies.
- *
- * Request HEADERS are NEVER read into a record (Authorization / x-api-key live
- * there). Every stored body passes through {@link redactAuditText}. The assembly
- * is wrapped so a capture failure can never surface into the relay path.
- *
- * @module @omnicross/core/outbound-api/auditCapture
- */
-
-/**
- * The mutable context the request handler enriches as it progresses. `null` is
- * returned by {@link beginAuditCapture} when audit is disabled — the handler
- * guards every write with `if (audit)`.
- */
-interface AuditCaptureContext {
-    /** Outbound key id (set after auth). NEVER the key material. */
-    keyId?: string | null;
-    /** Resolved upstream model (set after route resolution). */
-    model?: string;
-    /** Upstream provider id (set after route resolution). */
-    provider?: string;
-    /** Sanitized error message (set on a relay/dispatch failure). */
-    error?: string;
-    /** Stash the raw request body for capture (a no-op unless `captureBodies`). */
-    setRequestBody(raw: string): void;
-}
-/**
- * Begin audit capture for one request. Returns a mutable context the handler
- * enriches, or `null` when audit is disabled (zero-cost path). The record is
- * emitted on response `close` via the fire-and-forget sink.
- */
-declare function beginAuditCapture(req: http.IncomingMessage, res: http.ServerResponse, now: number): AuditCaptureContext | null;
-
-/**
- * billingCapture — the outbound server's post-response billing capture hook
- * (billing-event-stream, design D1/D4).
- *
- * {@link beginBillingCapture} is called at the TOP of `handleOutboundRequest`. It
- * reads the active billing config from the core slot; when billing is DISABLED it
- * returns `null` immediately (one slot read — no assembly, no listener, zero
- * regression). When enabled it registers a one-shot `res.close` listener that
- * assembles a {@link BillingEvent} from the handler-filled context (keyId / model
- * / provider / authMode), the response `statusCode`, and this request's METERED
- * FACTS (token counts + the ALREADY-COMPUTED cost) — then hands it to the
- * no-throw {@link publishBillingEvent}.
- *
- * COST REUSE (design D3 — no double pricing): the metered facts are read from the
- * per-request usage stash the usage tap populates ({@link readAuditUsage} — the
- * SAME stash `usage-events.jsonl` correlation uses, populated UNCONDITIONALLY by
- * the taps, independent of whether request-audit is enabled). Token counts are
- * stashed SYNCHRONOUSLY at `record()`; the cost lands on the recorder's deferred
- * pricing tick (scheduled BEFORE the response closes). So the assembly is deferred
- * one macrotask past `close` — by then the earlier-scheduled pricing tick has run
- * and stashed the computed cost we REUSE (we never re-price).
- *
- * BILLABLE-ONLY: an event is emitted ONLY when the request produced usage (an
- * upstream call was billed). Auth failures / rate-limit / model-restriction
- * rejections return before dispatch, stash no usage, and emit NO billing event.
- *
- * @module @omnicross/core/outbound-api/billingCapture
- */
-
-/**
- * The mutable context the request handler enriches as it progresses. `null` is
- * returned by {@link beginBillingCapture} when billing is disabled — the handler
- * guards every write with `if (billing)`.
- */
-interface BillingCaptureContext {
-    /** Outbound key id (set after auth). NEVER the key material. */
-    keyId?: string | null;
-    /** Resolved upstream model (set after route resolution). */
-    model?: string;
-    /** Upstream provider id (set after route resolution). */
-    provider?: string;
-    /** Re-auth mode the request billed under (set after route resolution). */
-    authMode?: 'byo' | 'subscription';
-}
-/**
- * Deferral used to schedule the event assembly one macrotask past `close`, so the
- * usage tap's earlier-scheduled pricing tick has stashed the cost we reuse.
- * Injectable ONLY for deterministic tests; production uses a zero-delay timer.
- */
-type BillingDefer = (fn: () => void) => void;
-/**
- * Begin billing capture for one request. Returns a mutable context the handler
- * enriches, or `null` when billing is disabled (zero-cost path). The event is
- * emitted on response `close` via the no-throw sink — but ONLY when the request
- * produced usage (a billable request).
- */
-declare function beginBillingCapture(_req: http.IncomingMessage, res: http.ServerResponse, now: number, defer?: BillingDefer): BillingCaptureContext | null;
-
 /**
  * modelPrefixDispatch — pure model-name PREFIX classification for the `chat`
  * endpoint's opt-in `dispatchMode: 'prefix'` (openai-chat-bridge #11, design D2).
@@ -1006,4 +875,4 @@ declare function getOutboundApiServer(deps?: OutboundApiDeps, onPortChange?: (po
 /** Reset the singleton (tests / teardown only). */
 declare function __resetOutboundApiServerForTests(): void;
 
-export { AUDIT_REDACTED, AccountProbeConfig, type ApiServerSettingsStore, type ApplyConfigInput, type AuditCaptureContext, type BillingCaptureContext, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, type EndpointModelConfigError, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiConfigError, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundProxyConfig, OutboundRateLimiter, RequestRole, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, beginAuditCapture, beginBillingCapture, classifyModelPrefix, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, endpointToIngressFormat, formatUrls, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, redactAuditText, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateServerModelConfig, verifyKey, verifyPresentedKey };
+export { AccountProbeConfig, type ApiServerSettingsStore, type ApplyConfigInput, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, type EndpointModelConfigError, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiConfigError, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundProxyConfig, OutboundRateLimiter, RequestRole, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, classifyModelPrefix, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, endpointToIngressFormat, formatUrls, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateServerModelConfig, verifyKey, verifyPresentedKey };

package/dist/outbound-api.js

@@ -1,5 +1,4 @@
 import {
-  AUDIT_REDACTED,
   ConcurrencyQueueFullError,
   ConcurrencyWaitCancelledError,
   ConcurrencyWaitTimeoutError,
@@ -18,8 +17,6 @@ import {
   SerialQueueTimeoutError,
   UserMessageSerialQueue,
   __resetOutboundApiServerForTests,
-  beginAuditCapture,
-  beginBillingCapture,
   checkKeyQuota,
   computeKeyExpiry,
   computeVoucherGrant,
@@ -51,7 +48,6 @@ import {
   normalizeWebhookDestination,
   normalizeWebhookSegment,
   randomBase62,
-  redactAuditText,
   saveServerConfig,
   startOfLocalDay,
   startOfLocalWeek,
@@ -59,35 +55,38 @@ import {
   verifyKey,
   verifyPresentedKey,
   voucherCodePrefix
-} from "./chunk-4DECIFU7.js";
+} from "./chunk-FH2P4OCD.js";
 import "./chunk-VVEHS2LI.js";
 import "./chunk-46RLHI7D.js";
 import "./chunk-G2UTNSGU.js";
 import "./chunk-DK4A7DLE.js";
-import "./chunk-MQNDWYPN.js";
-import "./chunk-Z7LUNECE.js";
+import "./chunk-OQWKZCXP.js";
+import "./chunk-IB3FDI4O.js";
 import "./chunk-ZJZAOKI7.js";
-import "./chunk-FTQ7IQUC.js";
-import "./chunk-C7PSERMH.js";
-import "./chunk-5HTVET6E.js";
+import "./chunk-C6OV7GCC.js";
+import "./chunk-IWQAX3CS.js";
+import "./chunk-BODMAL6G.js";
 import "./chunk-7VU7V2E4.js";
 import "./chunk-ZLX3KGXX.js";
-import "./chunk-CWM2ZDU5.js";
+import "./chunk-BPKCU575.js";
 import "./chunk-MZNPGW5Q.js";
 import "./chunk-XTEI64OU.js";
 import "./chunk-XX6NQJMA.js";
 import "./chunk-IAXWICZU.js";
+import "./chunk-OE6TDIWW.js";
+import "./chunk-DRWHTIIZ.js";
+import "./chunk-IK3KE3AU.js";
+import "./chunk-ZY6KU6P3.js";
+import "./chunk-JWC6APFQ.js";
 import "./chunk-5ERIZW3D.js";
 import "./chunk-5ENKBSWO.js";
-import "./chunk-N5QFKSDO.js";
+import "./chunk-HRRYG2AX.js";
 import "./chunk-AVYJ4YBN.js";
-import "./chunk-DRWHTIIZ.js";
-import "./chunk-WNY4WMRF.js";
+import {
+  beginBillingCapture
+} from "./chunk-WLYIIEAF.js";
 import "./chunk-TKJMZBAH.js";
-import "./chunk-JO5NLTLY.js";
-import "./chunk-ZY6KU6P3.js";
-import "./chunk-JWC6APFQ.js";
-import "./chunk-H5JUT3KV.js";
+import "./chunk-3QFXFCHG.js";
 import {
   SUBSCRIPTION_PROVIDER_IDS,
   classifyModelPrefix,
@@ -104,15 +103,26 @@ import {
   resolveRoute,
   validateEndpointModelConfig,
   validateServerModelConfig
-} from "./chunk-CZHZGRU7.js";
+} from "./chunk-UHGVBFU3.js";
 import "./chunk-AQ5TNQB7.js";
 import {
   ENDPOINT_MODEL_KINDS
 } from "./chunk-XEKD23J5.js";
+import "./chunk-H5JUT3KV.js";
+import {
+  beginAuditCapture
+} from "./chunk-IFXJ2BG7.js";
+import {
+  AUDIT_REDACTED,
+  redactAuditText
+} from "./chunk-K5NM7VAH.js";
+import "./chunk-WNY4WMRF.js";
+import "./chunk-OZFM4X3S.js";
 import "./chunk-5ZQBEOMD.js";
-import "./chunk-BO4RFWBR.js";
-import "./chunk-Z7Y2NPHY.js";
-import "./chunk-S4WBV25P.js";
+import "./chunk-MFZ5437A.js";
+import "./chunk-6QZGDLL4.js";
+import "./chunk-D3TDKWRP.js";
+import "./chunk-SYQF7OIR.js";
 import "./chunk-CDHS2QDC.js";
 import "./chunk-Y7FO65VT.js";
 import "./chunk-FMOBD2OQ.js";

package/dist/pipeline/AuthSource.d.cts

@@ -52,6 +52,12 @@ interface AuthApplyHints {
      * (no cross-request race). BYO auth sources ignore it.
      */
     reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
+    /**
+     * OPTIONAL preferred subscription account id (provider/subscription duality).
+     * When set and schedulable the account picker resolves it directly; absent or
+     * unschedulable ⇒ pool auto-schedule. BYO auth sources ignore it.
+     */
+    preferredAccountId?: string;
 }
 /**
  * Result of {@link AuthSource.onResult}.

package/dist/pipeline/AuthSource.d.ts

@@ -52,6 +52,12 @@ interface AuthApplyHints {
      * (no cross-request race). BYO auth sources ignore it.
      */
     reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
+    /**
+     * OPTIONAL preferred subscription account id (provider/subscription duality).
+     * When set and schedulable the account picker resolves it directly; absent or
+     * unschedulable ⇒ pool auto-schedule. BYO auth sources ignore it.
+     */
+    preferredAccountId?: string;
 }
 /**
  * Result of {@link AuthSource.onResult}.

package/dist/pipeline/SubscriptionAuthSource.cjs

@@ -1,9 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunkY6OM7EV7cjs = require('../chunk-Y6OM7EV7.cjs');
+var _chunkKFI44N2Rcjs = require('../chunk-KFI44N2R.cjs');
 require('../chunk-SVNDB62D.cjs');
 
 
 
-exports.SubscriptionAuthSource = _chunkY6OM7EV7cjs.SubscriptionAuthSource; exports.stripAuthHeaders = _chunkY6OM7EV7cjs.stripAuthHeaders;
+exports.SubscriptionAuthSource = _chunkKFI44N2Rcjs.SubscriptionAuthSource; exports.stripAuthHeaders = _chunkKFI44N2Rcjs.stripAuthHeaders;