@omnicross/core 0.1.5 → 0.1.6

package/dist/pipeline/SubscriptionAccountHealth.d.ts

@@ -27,9 +27,9 @@
 declare const OVERLOAD_TTL_MS: number;
 /** 529 overload cooldown enabled by default (LEAD OQ1). */
 declare const OVERLOAD_ENABLED_DEFAULT = true;
-/** Transient cooldown for a final-401 / plain-403 (CRS auth_error 1800s). */
+/** Transient cooldown for a final 401 or non-ban 403 response. */
 declare const AUTH_ERROR_TTL_MS: number;
-/** Transient cooldown for a 5xx / thrown network failure (CRS server_error 300s). */
+/** Transient cooldown for a 5xx response or network failure. */
 declare const SERVER_ERROR_TTL_MS: number;
 /** Per-account health record (all timers are epoch ms). Absent fields ⇒ healthy. */
 interface HealthRecord {
@@ -89,6 +89,30 @@ interface AccountAnomalyEvent {
 }
 /** An anomaly listener (fire-and-forget; the emitter never awaits it). */
 type AccountAnomalyListener = (event: AccountAnomalyEvent) => void;
+/**
+ * Admin-readable projection of the existing health event stream. It is kept in
+ * the tracker itself so webhooks and diagnostics consume the same edge events;
+ * this is not a second marking/event mechanism. Only opaque ids, timestamps,
+ * and coarse states are retained.
+ */
+type AccountHealthDiagnostic = {
+    kind: 'health-anomaly';
+    providerId: string;
+    accountId: string;
+    at: number;
+    state: AccountAnomalyState;
+} | {
+    kind: 'health-recovery';
+    providerId: string;
+    accountId: string;
+    at: number;
+};
+interface AccountHealthDiagnosticFilter {
+    providerId?: string;
+    accountId?: string;
+    limit?: number;
+}
+declare const ACCOUNT_HEALTH_DIAGNOSTIC_LIMIT = 200;
 /** The inputs one upstream attempt contributes to health marking (design D3). */
 interface RecordUpstreamOutcomeInput {
     /** The final HTTP status, or `null` for a thrown / network failure. */
@@ -134,6 +158,7 @@ declare class SubscriptionAccountHealth {
     private readonly records;
     private readonly listeners;
     private readonly anomalyListeners;
+    private readonly diagnostics;
     private readonly now;
     private overloadEnabled;
     private overloadTtlMs;
@@ -150,14 +175,14 @@ declare class SubscriptionAccountHealth {
     configure(opts: Pick<SubscriptionAccountHealthOptions, 'overloadEnabled' | 'overloadTtlMs' | 'authErrorTtlMs' | 'serverErrorTtlMs'>): void;
     /**
      * Whether an account may be scheduled RIGHT NOW. `blocked` → false; any timer
-     * still in the future → false. Expired timers are lazily deleted on read (CRS
-     * lazy-clear parity) so an elapsed cooldown restores the account WITHOUT a
+     * still in the future → false. Expired timers are lazily deleted on read so
+     * an elapsed cooldown restores the account WITHOUT a
      * timer — but the recovery SIGNAL is the sweeper's job (`sweepRecoveries`), so
      * this read never emits (correctness is independent of the tick).
      */
     isSchedulable(providerId: string, accountId: string, now?: number): boolean;
     /**
-     * The single marking entry point (design D3). Faithful to CRS status semantics:
+     * The single marking entry point (design D3):
      *  - 429 + authoritative reset → `rateLimitEndAt`; a non-claude 429 may use
      *    `retryAfterSeconds`; a bare 429 (no resolvable reset) is NOT marked;
      *  - 529 → `overloadUntil` (gated by `overloadEnabled`);
@@ -194,6 +219,8 @@ declare class SubscriptionAccountHealth {
     sweepRecoveries(now?: number): AccountRecoveryEvent[];
     /** Admin-facing coarse status + cooldown-until for one account (secret-free). */
     getStatus(providerId: string, accountId: string, now?: number): AccountHealthStatus;
+    /** Return newest-first, bounded, secret-free health edge diagnostics. */
+    getDiagnostics(filter?: AccountHealthDiagnosticFilter): AccountHealthDiagnostic[];
     /**
      * Register a recovery listener (the OQ3 seam #5 webhooks + #8 health-cron
      * consume). Returns an unsubscribe function. Two edges fire it:
@@ -216,6 +243,7 @@ declare class SubscriptionAccountHealth {
      */
     onAnomaly(listener: AccountAnomalyListener): () => void;
     private emitAnomaly;
+    private recordDiagnostic;
     /**
      * Delete every EXPIRED timer field on the record in place; return whether any
      * timer is STILL active (in the future). `blocked` is not a timer and is left
@@ -232,4 +260,4 @@ declare function setSharedAccountHealth(instance: SubscriptionAccountHealth): vo
 /** Reset the shared singleton (tests / teardown only). */
 declare function __resetSharedAccountHealthForTests(): void;
 
-export { AUTH_ERROR_TTL_MS, type AccountAnomalyEvent, type AccountAnomalyListener, type AccountAnomalyState, type AccountHealthState, type AccountHealthStatus, type AccountRecoveryEvent, type AccountRecoveryListener, type HeadersLike, type HealthRecord, OVERLOAD_ENABLED_DEFAULT, OVERLOAD_TTL_MS, type RecordUpstreamOutcomeInput, SERVER_ERROR_TTL_MS, SubscriptionAccountHealth, type SubscriptionAccountHealthOptions, __resetSharedAccountHealthForTests, getSharedAccountHealth, resolveResetSeconds, setSharedAccountHealth };
+export { ACCOUNT_HEALTH_DIAGNOSTIC_LIMIT, AUTH_ERROR_TTL_MS, type AccountAnomalyEvent, type AccountAnomalyListener, type AccountAnomalyState, type AccountHealthDiagnostic, type AccountHealthDiagnosticFilter, type AccountHealthState, type AccountHealthStatus, type AccountRecoveryEvent, type AccountRecoveryListener, type HeadersLike, type HealthRecord, OVERLOAD_ENABLED_DEFAULT, OVERLOAD_TTL_MS, type RecordUpstreamOutcomeInput, SERVER_ERROR_TTL_MS, SubscriptionAccountHealth, type SubscriptionAccountHealthOptions, __resetSharedAccountHealthForTests, getSharedAccountHealth, resolveResetSeconds, setSharedAccountHealth };

package/dist/pipeline/SubscriptionAccountHealth.js

@@ -1,4 +1,5 @@
 import {
+  ACCOUNT_HEALTH_DIAGNOSTIC_LIMIT,
   AUTH_ERROR_TTL_MS,
   OVERLOAD_ENABLED_DEFAULT,
   OVERLOAD_TTL_MS,
@@ -8,8 +9,9 @@ import {
   getSharedAccountHealth,
   resolveResetSeconds,
   setSharedAccountHealth
-} from "../chunk-5ENKBSWO.js";
+} from "../chunk-YJVHCHQX.js";
 export {
+  ACCOUNT_HEALTH_DIAGNOSTIC_LIMIT,
   AUTH_ERROR_TTL_MS,
   OVERLOAD_ENABLED_DEFAULT,
   OVERLOAD_TTL_MS,

package/dist/pipeline/SubscriptionAuthSource.cjs

@@ -1,9 +1,12 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunkKFI44N2Rcjs = require('../chunk-KFI44N2R.cjs');
+var _chunkYNJNTCSQcjs = require('../chunk-YNJNTCSQ.cjs');
 require('../chunk-SVNDB62D.cjs');
+require('../chunk-6QQG7YG3.cjs');
+require('../chunk-25GXJCEZ.cjs');
+require('../chunk-HVBBDBS3.cjs');
 
 
 
-exports.SubscriptionAuthSource = _chunkKFI44N2Rcjs.SubscriptionAuthSource; exports.stripAuthHeaders = _chunkKFI44N2Rcjs.stripAuthHeaders;
+exports.SubscriptionAuthSource = _chunkYNJNTCSQcjs.SubscriptionAuthSource; exports.stripAuthHeaders = _chunkYNJNTCSQcjs.stripAuthHeaders;

package/dist/pipeline/SubscriptionAuthSource.d.cts

@@ -1,6 +1,7 @@
 import { OpenCodeGoTokenConfig, OpenCodeGoScenario, OpenCodeGoModelEntry } from '@omnicross/contracts/subscription-types';
 import { AuthSource, AuthApplyHints } from './AuthSource.cjs';
 import { AuthStrategy } from './SubscriptionAuthStrategy.cjs';
+import './BoundAccountSelectionError.cjs';
 
 /**
  * SubscriptionAuthSource — `AuthSource` wrapping a subscription `AuthStrategy`.

package/dist/pipeline/SubscriptionAuthSource.d.ts

@@ -1,6 +1,7 @@
 import { OpenCodeGoTokenConfig, OpenCodeGoScenario, OpenCodeGoModelEntry } from '@omnicross/contracts/subscription-types';
 import { AuthSource, AuthApplyHints } from './AuthSource.js';
 import { AuthStrategy } from './SubscriptionAuthStrategy.js';
+import './BoundAccountSelectionError.js';
 
 /**
  * SubscriptionAuthSource — `AuthSource` wrapping a subscription `AuthStrategy`.

package/dist/pipeline/SubscriptionAuthSource.js

@@ -1,8 +1,11 @@
 import {
   SubscriptionAuthSource,
   stripAuthHeaders
-} from "../chunk-HRRYG2AX.js";
+} from "../chunk-23S5OPIO.js";
 import "../chunk-AVYJ4YBN.js";
+import "../chunk-OPRS4IQZ.js";
+import "../chunk-2JYRIADS.js";
+import "../chunk-MKF46GNZ.js";
 export {
   SubscriptionAuthSource,
   stripAuthHeaders

package/dist/pipeline/SubscriptionAuthStrategy.d.cts

@@ -1,4 +1,5 @@
 import { SubscriptionProviderId, SubscriptionStatusEntry } from '@omnicross/contracts/subscription-types';
+import { BoundAccountFallbackPolicy } from './BoundAccountSelectionError.cjs';
 
 /**
  * SubscriptionAuthStrategy — the pluggable subscription-auth contract, defined
@@ -51,10 +52,14 @@ interface AuthApplyHints {
     reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
     /**
      * OPTIONAL preferred subscription account id (provider/subscription duality).
-     * When set and schedulable the account picker resolves it directly; absent or
-     * unschedulable ⇒ pool auto-schedule.
+     * When set, strict is the default; only the explicit `'pool'` policy permits
+     * pool fallback. Absent bindings keep pool auto-scheduling.
      */
     preferredAccountId?: string;
+    /** Optional account group selected by a resource-level gateway binding. */
+    preferredAccountGroup?: string;
+    /** `'pool'` is an explicit opt-in; strict is the default for bindings. */
+    boundAccountFallbackPolicy?: BoundAccountFallbackPolicy;
 }
 interface AuthStrategy {
     /** Discriminator — also surfaced through `subscription:list` to renderers. */
@@ -87,4 +92,4 @@ interface AuthStrategy {
     describeStatus(): Promise<SubscriptionStatusEntry>;
 }
 
-export type { AuthApplyHints, AuthStrategy };
+export { type AuthApplyHints, type AuthStrategy, BoundAccountFallbackPolicy };

package/dist/pipeline/SubscriptionAuthStrategy.d.ts

@@ -1,4 +1,5 @@
 import { SubscriptionProviderId, SubscriptionStatusEntry } from '@omnicross/contracts/subscription-types';
+import { BoundAccountFallbackPolicy } from './BoundAccountSelectionError.js';
 
 /**
  * SubscriptionAuthStrategy — the pluggable subscription-auth contract, defined
@@ -51,10 +52,14 @@ interface AuthApplyHints {
     reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
     /**
      * OPTIONAL preferred subscription account id (provider/subscription duality).
-     * When set and schedulable the account picker resolves it directly; absent or
-     * unschedulable ⇒ pool auto-schedule.
+     * When set, strict is the default; only the explicit `'pool'` policy permits
+     * pool fallback. Absent bindings keep pool auto-scheduling.
      */
     preferredAccountId?: string;
+    /** Optional account group selected by a resource-level gateway binding. */
+    preferredAccountGroup?: string;
+    /** `'pool'` is an explicit opt-in; strict is the default for bindings. */
+    boundAccountFallbackPolicy?: BoundAccountFallbackPolicy;
 }
 interface AuthStrategy {
     /** Discriminator — also surfaced through `subscription:list` to renderers. */
@@ -87,4 +92,4 @@ interface AuthStrategy {
     describeStatus(): Promise<SubscriptionStatusEntry>;
 }
 
-export type { AuthApplyHints, AuthStrategy };
+export { type AuthApplyHints, type AuthStrategy, BoundAccountFallbackPolicy };

package/dist/pipeline/executeProviderCall.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkHYN75H6Gcjs = require('../chunk-HYN75H6G.cjs');
+var _chunkMUHWHQVMcjs = require('../chunk-MUHWHQVM.cjs');
 
 
-exports.executeProviderCall = _chunkHYN75H6Gcjs.executeProviderCall;
+exports.executeProviderCall = _chunkMUHWHQVMcjs.executeProviderCall;

package/dist/pipeline/executeProviderCall.d.cts

@@ -101,8 +101,9 @@ interface ProviderCallContext {
      */
     fetchFn: (url: string, headers: Record<string, string>, body: unknown) => Promise<Response>;
     /**
-     * When `true`, the core runs `executeResponseChain` on the fetched
-     * response and returns the TRANSFORMED response. When `false` (default),
+     * When `true`, the core runs `executeResponseChain` on a SUCCESSFUL fetched
+     * response and returns the TRANSFORMED response; a failed (`!response.ok`)
+     * response is returned raw so its status and error body survive. When `false` (default),
      * the core returns the RAW fetched response and the caller runs the
      * response chain itself — this preserves call sites that gate on
      * `response.ok` BEFORE the response chain (Adapter / Handler).
@@ -127,7 +128,11 @@ interface ProviderCallContext {
  * before, and so the wire-capture / logging hooks keep their inputs.
  */
 interface ProviderCallResult {
-    /** Transformed response (runResponseChain=true) or raw response (false). */
+    /**
+     * Transformed response (runResponseChain=true AND the upstream response was
+     * `ok`), otherwise the RAW fetched response — see the `.ok` gate in the
+     * implementation for why failures are never transformed.
+     */
     response: Response;
     /** Request-chain output body (pre-`prepareBody`). */
     requestBody: unknown;

package/dist/pipeline/executeProviderCall.d.ts

@@ -101,8 +101,9 @@ interface ProviderCallContext {
      */
     fetchFn: (url: string, headers: Record<string, string>, body: unknown) => Promise<Response>;
     /**
-     * When `true`, the core runs `executeResponseChain` on the fetched
-     * response and returns the TRANSFORMED response. When `false` (default),
+     * When `true`, the core runs `executeResponseChain` on a SUCCESSFUL fetched
+     * response and returns the TRANSFORMED response; a failed (`!response.ok`)
+     * response is returned raw so its status and error body survive. When `false` (default),
      * the core returns the RAW fetched response and the caller runs the
      * response chain itself — this preserves call sites that gate on
      * `response.ok` BEFORE the response chain (Adapter / Handler).
@@ -127,7 +128,11 @@ interface ProviderCallContext {
  * before, and so the wire-capture / logging hooks keep their inputs.
  */
 interface ProviderCallResult {
-    /** Transformed response (runResponseChain=true) or raw response (false). */
+    /**
+     * Transformed response (runResponseChain=true AND the upstream response was
+     * `ok`), otherwise the RAW fetched response — see the `.ok` gate in the
+     * implementation for why failures are never transformed.
+     */
     response: Response;
     /** Request-chain output body (pre-`prepareBody`). */
     requestBody: unknown;

package/dist/pipeline/executeProviderCall.js

@@ -1,6 +1,6 @@
 import {
   executeProviderCall
-} from "../chunk-IK3KE3AU.js";
+} from "../chunk-DE2SRBFZ.js";
 export {
   executeProviderCall
 };

package/dist/pipeline/resolveProviderChain.d.cts

@@ -13,9 +13,8 @@ import '../transformer/TransformerService.cjs';
  * block verbatim. This module extracts that single shared helper so the
  * logic lives in exactly one place.
  *
- * IMPORTANT: body mutations that are proxy-specific (ReasoningTransformer
- * auto-inject, thinkingLevel body-inject) are NOT part of this helper —
- * they remain at each call site as before.
+ * IMPORTANT: body mutations that are proxy-specific (thinkingLevel body-inject)
+ * are NOT part of this helper — they remain at each call site as before.
  *
  * @module pipeline/resolveProviderChain
  */

package/dist/pipeline/resolveProviderChain.d.ts

@@ -13,9 +13,8 @@ import '../transformer/TransformerService.js';
  * block verbatim. This module extracts that single shared helper so the
  * logic lives in exactly one place.
  *
- * IMPORTANT: body mutations that are proxy-specific (ReasoningTransformer
- * auto-inject, thinkingLevel body-inject) are NOT part of this helper —
- * they remain at each call site as before.
+ * IMPORTANT: body mutations that are proxy-specific (thinkingLevel body-inject)
+ * are NOT part of this helper — they remain at each call site as before.
  *
  * @module pipeline/resolveProviderChain
  */

package/dist/pipeline/resolveSubscriptionChain.d.cts

@@ -3,6 +3,7 @@ import { Transformer, ResolvedTransformerChain } from '../transformer/types.cjs'
 import { SubscriptionAuthProfile } from './SubscriptionAuthSource.cjs';
 import '@omnicross/contracts/subscription-types';
 import './AuthSource.cjs';
+import './BoundAccountSelectionError.cjs';
 import './SubscriptionAuthStrategy.cjs';
 
 /**

package/dist/pipeline/resolveSubscriptionChain.d.ts

@@ -3,6 +3,7 @@ import { Transformer, ResolvedTransformerChain } from '../transformer/types.js';
 import { SubscriptionAuthProfile } from './SubscriptionAuthSource.js';
 import '@omnicross/contracts/subscription-types';
 import './AuthSource.js';
+import './BoundAccountSelectionError.js';
 import './SubscriptionAuthStrategy.js';
 
 /**

package/dist/pipeline/upstreamFetch.cjs

@@ -4,12 +4,13 @@
 
 
 
-var _chunkPG7PS2NNcjs = require('../chunk-PG7PS2NN.cjs');
+var _chunkKCVJWJSTcjs = require('../chunk-KCVJWJST.cjs');
 require('../chunk-3Z5BQZFM.cjs');
+require('../chunk-HVBBDBS3.cjs');
 
 
 
 
 
 
-exports.__resetUpstreamProxyForTests = _chunkPG7PS2NNcjs.__resetUpstreamProxyForTests; exports.bumpUpstreamProxyGeneration = _chunkPG7PS2NNcjs.bumpUpstreamProxyGeneration; exports.fetchUpstream = _chunkPG7PS2NNcjs.fetchUpstream; exports.resolveUpstreamDispatcher = _chunkPG7PS2NNcjs.resolveUpstreamDispatcher; exports.setUpstreamProxyResolver = _chunkPG7PS2NNcjs.setUpstreamProxyResolver;
+exports.__resetUpstreamProxyForTests = _chunkKCVJWJSTcjs.__resetUpstreamProxyForTests; exports.bumpUpstreamProxyGeneration = _chunkKCVJWJSTcjs.bumpUpstreamProxyGeneration; exports.fetchUpstream = _chunkKCVJWJSTcjs.fetchUpstream; exports.resolveUpstreamDispatcher = _chunkKCVJWJSTcjs.resolveUpstreamDispatcher; exports.setUpstreamProxyResolver = _chunkKCVJWJSTcjs.setUpstreamProxyResolver;

package/dist/pipeline/upstreamFetch.js

@@ -4,8 +4,9 @@ import {
   fetchUpstream,
   resolveUpstreamDispatcher,
   setUpstreamProxyResolver
-} from "../chunk-D3TDKWRP.js";
+} from "../chunk-SIZQQD6T.js";
 import "../chunk-SYQF7OIR.js";
+import "../chunk-MKF46GNZ.js";
 export {
   __resetUpstreamProxyForTests,
   bumpUpstreamProxyGeneration,

package/dist/ports/pricing-store.d.cts

@@ -1,4 +1,4 @@
-import { PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/contracts/pricing-types';
+import { PricingSource, PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/contracts/pricing-types';
 
 /**
  * `PricingStore` — core-owned port for pricing-row persistence.
@@ -11,6 +11,7 @@ import { PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/c
  * @module ports/pricing-store
  */
 
+type AutomaticPricingSource = Extract<PricingSource, 'litellm' | 'openrouter'>;
 interface PricingStore {
     /** Return every pricing row. The engine caches the full table in memory. */
     getAll(): Promise<PricingEntry[]>;
@@ -29,7 +30,7 @@ interface PricingStore {
      * left untouched and returned in `conflicts` as `{ current, incoming }`
      * pairs for per-row resolution by the user.
      */
-    bulkApplyFromSource(entries: PricingEntryInput[]): Promise<{
+    bulkApplyFromSource(entries: PricingEntryInput[], source?: AutomaticPricingSource): Promise<{
         applied: PricingEntry[];
         conflicts: Array<{
             current: PricingEntry;
@@ -47,4 +48,4 @@ interface PricingStore {
     }>): Promise<PricingResolution>;
 }
 
-export type { PricingStore };
+export type { AutomaticPricingSource, PricingStore };

package/dist/ports/pricing-store.d.ts

@@ -1,4 +1,4 @@
-import { PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/contracts/pricing-types';
+import { PricingSource, PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/contracts/pricing-types';
 
 /**
  * `PricingStore` — core-owned port for pricing-row persistence.
@@ -11,6 +11,7 @@ import { PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/c
  * @module ports/pricing-store
  */
 
+type AutomaticPricingSource = Extract<PricingSource, 'litellm' | 'openrouter'>;
 interface PricingStore {
     /** Return every pricing row. The engine caches the full table in memory. */
     getAll(): Promise<PricingEntry[]>;
@@ -29,7 +30,7 @@ interface PricingStore {
      * left untouched and returned in `conflicts` as `{ current, incoming }`
      * pairs for per-row resolution by the user.
      */
-    bulkApplyFromSource(entries: PricingEntryInput[]): Promise<{
+    bulkApplyFromSource(entries: PricingEntryInput[], source?: AutomaticPricingSource): Promise<{
         applied: PricingEntry[];
         conflicts: Array<{
             current: PricingEntry;
@@ -47,4 +48,4 @@ interface PricingStore {
     }>): Promise<PricingResolution>;
 }
 
-export type { PricingStore };
+export type { AutomaticPricingSource, PricingStore };

package/dist/ports.d.cts

@@ -1,11 +1,11 @@
 export { C as CorePaths, a as CoreUsageEvent, b as CoreUsageTokenCounts, U as UsageEventSink } from './usage-event-sink-BX7FE1NL.cjs';
 export { L as Logger } from './logger-4GvQNzhE.cjs';
-export { PricingStore } from './ports/pricing-store.cjs';
+export { AutomaticPricingSource, PricingStore } from './ports/pricing-store.cjs';
 export { ProviderConfigSource } from './ports/provider-config-source.cjs';
 export { UsageEventStore } from './ports/usage-event-store.cjs';
 export { WebSearchBackend } from './ports/web-search-backend.cjs';
 export { UsageRecorderImport as UsageSink } from './provider-proxy/types.cjs';
-export { O as OutboundCredentialStore } from './types-B8Arpxn0.cjs';
+export { O as OutboundCredentialStore } from './types-H3wGZSOo.cjs';
 import '@omnicross/contracts/pricing-types';
 import '@omnicross/contracts/llm-config';
 import './transformer/types.cjs';
@@ -18,6 +18,7 @@ import '@omnicross/contracts/subscription-types';
 import '@omnicross/contracts/usage-types';
 import './completion/ApiKeyPoolService.cjs';
 import './pipeline/AuthSource.cjs';
+import './pipeline/BoundAccountSelectionError.cjs';
 import './pipeline/SubscriptionAuthSource.cjs';
 import './pipeline/SubscriptionAuthStrategy.cjs';
 import '@omnicross/contracts/account-tokens-types';
@@ -27,4 +28,4 @@ import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import './ProviderProxy-CnMQYN59.cjs';
-import './keyPolicy-Cp0FntZl.cjs';
+import './keyPolicy-zdWTu3CQ.cjs';

package/dist/ports.d.ts

@@ -1,11 +1,11 @@
 export { C as CorePaths, a as CoreUsageEvent, b as CoreUsageTokenCounts, U as UsageEventSink } from './usage-event-sink-BX7FE1NL.js';
 export { L as Logger } from './logger-4GvQNzhE.js';
-export { PricingStore } from './ports/pricing-store.js';
+export { AutomaticPricingSource, PricingStore } from './ports/pricing-store.js';
 export { ProviderConfigSource } from './ports/provider-config-source.js';
 export { UsageEventStore } from './ports/usage-event-store.js';
 export { WebSearchBackend } from './ports/web-search-backend.js';
 export { UsageRecorderImport as UsageSink } from './provider-proxy/types.js';
-export { O as OutboundCredentialStore } from './types-lgPYQuZS.js';
+export { O as OutboundCredentialStore } from './types-hsoKrVQS.js';
 import '@omnicross/contracts/pricing-types';
 import '@omnicross/contracts/llm-config';
 import './transformer/types.js';
@@ -18,6 +18,7 @@ import '@omnicross/contracts/subscription-types';
 import '@omnicross/contracts/usage-types';
 import './completion/ApiKeyPoolService.js';
 import './pipeline/AuthSource.js';
+import './pipeline/BoundAccountSelectionError.js';
 import './pipeline/SubscriptionAuthSource.js';
 import './pipeline/SubscriptionAuthStrategy.js';
 import '@omnicross/contracts/account-tokens-types';
@@ -27,4 +28,4 @@ import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import './ProviderProxy-C-xqrkKi.js';
-import './keyPolicy-Cp0FntZl.js';
+import './keyPolicy-zdWTu3CQ.js';

package/dist/provider-proxy/ProviderProxy.cjs

@@ -1,37 +1,38 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunkCGKLE6IWcjs = require('../chunk-CGKLE6IW.cjs');
+var _chunkSQYVORNPcjs = require('../chunk-SQYVORNP.cjs');
+require('../chunk-EJLH6NFT.cjs');
 require('../chunk-HQP3K7PU.cjs');
 require('../chunk-FZ46M34D.cjs');
-require('../chunk-46ZIFWYG.cjs');
+require('../chunk-IIRPUVPH.cjs');
+require('../chunk-GBHYAGX3.cjs');
 require('../chunk-3OPYJG76.cjs');
-require('../chunk-ZCIQ3L3R.cjs');
-require('../chunk-7FEBOPJO.cjs');
-require('../chunk-DWKQZ2SK.cjs');
-require('../chunk-4XMYPW46.cjs');
-require('../chunk-K52THW2C.cjs');
-require('../chunk-3Q6Z6JTO.cjs');
+require('../chunk-7AK7B36B.cjs');
+require('../chunk-V4TXMEJS.cjs');
+require('../chunk-6VUQPOV3.cjs');
+require('../chunk-OF3BECU2.cjs');
+require('../chunk-4VLRHHFE.cjs');
 require('../chunk-EYZYXJTJ.cjs');
-require('../chunk-YMFAJFQT.cjs');
+require('../chunk-DLXZEZWO.cjs');
 require('../chunk-SNYBEXLB.cjs');
-require('../chunk-GBHYAGX3.cjs');
+require('../chunk-R3HK6R4B.cjs');
 require('../chunk-RPII3E6Z.cjs');
 require('../chunk-6RPZADX3.cjs');
-require('../chunk-QWBWGODS.cjs');
+require('../chunk-NYUNU75A.cjs');
+require('../chunk-YK57NMIF.cjs');
+require('../chunk-YNJNTCSQ.cjs');
+require('../chunk-SVNDB62D.cjs');
 require('../chunk-UIBD2YY5.cjs');
-require('../chunk-R3HK6R4B.cjs');
-require('../chunk-HYN75H6G.cjs');
+require('../chunk-6QQG7YG3.cjs');
+require('../chunk-25GXJCEZ.cjs');
+require('../chunk-MUHWHQVM.cjs');
 require('../chunk-Q27JY5RG.cjs');
 require('../chunk-QXD4MV2X.cjs');
-require('../chunk-NYUNU75A.cjs');
-require('../chunk-VQY5W4YW.cjs');
-require('../chunk-KFI44N2R.cjs');
-require('../chunk-SVNDB62D.cjs');
 require('../chunk-APYG5QD7.cjs');
 require('../chunk-L74VDN4A.cjs');
 require('../chunk-4YINUUKQ.cjs');
-require('../chunk-VACWOIRE.cjs');
+require('../chunk-4VZX5F4T.cjs');
 require('../chunk-QBZJ7P2T.cjs');
 require('../chunk-4IH4EL7M.cjs');
 require('../chunk-A2YMUCBT.cjs');
@@ -39,11 +40,12 @@ require('../chunk-UNWKG6EI.cjs');
 require('../chunk-FCR77GYM.cjs');
 require('../chunk-AEOZIDEB.cjs');
 require('../chunk-XSVNC2UD.cjs');
-require('../chunk-SUEGJ75D.cjs');
-require('../chunk-DDMRUL76.cjs');
-require('../chunk-JWVTXXPX.cjs');
-require('../chunk-PG7PS2NN.cjs');
+require('../chunk-WYTEQ4Q5.cjs');
+require('../chunk-OKMJLEXX.cjs');
+require('../chunk-KBM2W6UY.cjs');
+require('../chunk-KCVJWJST.cjs');
 require('../chunk-3Z5BQZFM.cjs');
+require('../chunk-HVBBDBS3.cjs');
 require('../chunk-NZYN7C3P.cjs');
 require('../chunk-JMJBSACD.cjs');
 require('../chunk-GMMT7RVN.cjs');
@@ -51,4 +53,4 @@ require('../chunk-UNEFIWXI.cjs');
 
 
 
-exports.ProviderProxy = _chunkCGKLE6IWcjs.ProviderProxy; exports.isLoopbackAddress = _chunkCGKLE6IWcjs.isLoopbackAddress;
+exports.ProviderProxy = _chunkSQYVORNPcjs.ProviderProxy; exports.isLoopbackAddress = _chunkSQYVORNPcjs.isLoopbackAddress;

package/dist/provider-proxy/ProviderProxy.d.cts

@@ -8,6 +8,7 @@ import '../completion/ApiKeyPoolService.cjs';
 import '@omnicross/contracts/llm-config';
 import '../logger-4GvQNzhE.cjs';
 import '../pipeline/AuthSource.cjs';
+import '../pipeline/BoundAccountSelectionError.cjs';
 import '../pipeline/SubscriptionAuthSource.cjs';
 import '../pipeline/SubscriptionAuthStrategy.cjs';
 import '../ports/provider-config-source.cjs';

package/dist/provider-proxy/ProviderProxy.d.ts

@@ -8,6 +8,7 @@ import '../completion/ApiKeyPoolService.js';
 import '@omnicross/contracts/llm-config';
 import '../logger-4GvQNzhE.js';
 import '../pipeline/AuthSource.js';
+import '../pipeline/BoundAccountSelectionError.js';
 import '../pipeline/SubscriptionAuthSource.js';
 import '../pipeline/SubscriptionAuthStrategy.js';
 import '../ports/provider-config-source.js';