@omnicross/core 0.1.5 → 0.1.7

package/dist/pipeline/SubscriptionAuthStrategy.d.cts

@@ -1,4 +1,5 @@
 import { SubscriptionProviderId, SubscriptionStatusEntry } from '@omnicross/contracts/subscription-types';
+import { BoundAccountFallbackPolicy } from './BoundAccountSelectionError.cjs';
 
 /**
  * SubscriptionAuthStrategy — the pluggable subscription-auth contract, defined
@@ -51,10 +52,14 @@ interface AuthApplyHints {
     reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
     /**
      * OPTIONAL preferred subscription account id (provider/subscription duality).
-     * When set and schedulable the account picker resolves it directly; absent or
-     * unschedulable ⇒ pool auto-schedule.
+     * When set, strict is the default; only the explicit `'pool'` policy permits
+     * pool fallback. Absent bindings keep pool auto-scheduling.
      */
     preferredAccountId?: string;
+    /** Optional account group selected by a resource-level gateway binding. */
+    preferredAccountGroup?: string;
+    /** `'pool'` is an explicit opt-in; strict is the default for bindings. */
+    boundAccountFallbackPolicy?: BoundAccountFallbackPolicy;
 }
 interface AuthStrategy {
     /** Discriminator — also surfaced through `subscription:list` to renderers. */
@@ -87,4 +92,4 @@ interface AuthStrategy {
     describeStatus(): Promise<SubscriptionStatusEntry>;
 }
 
-export type { AuthApplyHints, AuthStrategy };
+export { type AuthApplyHints, type AuthStrategy, BoundAccountFallbackPolicy };

package/dist/pipeline/SubscriptionAuthStrategy.d.ts

@@ -1,4 +1,5 @@
 import { SubscriptionProviderId, SubscriptionStatusEntry } from '@omnicross/contracts/subscription-types';
+import { BoundAccountFallbackPolicy } from './BoundAccountSelectionError.js';
 
 /**
  * SubscriptionAuthStrategy — the pluggable subscription-auth contract, defined
@@ -51,10 +52,14 @@ interface AuthApplyHints {
     reportSelection?: (accountId: string, isActive: boolean, remappedModel?: string) => void;
     /**
      * OPTIONAL preferred subscription account id (provider/subscription duality).
-     * When set and schedulable the account picker resolves it directly; absent or
-     * unschedulable ⇒ pool auto-schedule.
+     * When set, strict is the default; only the explicit `'pool'` policy permits
+     * pool fallback. Absent bindings keep pool auto-scheduling.
      */
     preferredAccountId?: string;
+    /** Optional account group selected by a resource-level gateway binding. */
+    preferredAccountGroup?: string;
+    /** `'pool'` is an explicit opt-in; strict is the default for bindings. */
+    boundAccountFallbackPolicy?: BoundAccountFallbackPolicy;
 }
 interface AuthStrategy {
     /** Discriminator — also surfaced through `subscription:list` to renderers. */
@@ -87,4 +92,4 @@ interface AuthStrategy {
     describeStatus(): Promise<SubscriptionStatusEntry>;
 }
 
-export type { AuthApplyHints, AuthStrategy };
+export { type AuthApplyHints, type AuthStrategy, BoundAccountFallbackPolicy };

package/dist/pipeline/executeProviderCall.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkHYN75H6Gcjs = require('../chunk-HYN75H6G.cjs');
+var _chunkMUHWHQVMcjs = require('../chunk-MUHWHQVM.cjs');
 
 
-exports.executeProviderCall = _chunkHYN75H6Gcjs.executeProviderCall;
+exports.executeProviderCall = _chunkMUHWHQVMcjs.executeProviderCall;

package/dist/pipeline/executeProviderCall.d.cts

@@ -101,8 +101,9 @@ interface ProviderCallContext {
      */
     fetchFn: (url: string, headers: Record<string, string>, body: unknown) => Promise<Response>;
     /**
-     * When `true`, the core runs `executeResponseChain` on the fetched
-     * response and returns the TRANSFORMED response. When `false` (default),
+     * When `true`, the core runs `executeResponseChain` on a SUCCESSFUL fetched
+     * response and returns the TRANSFORMED response; a failed (`!response.ok`)
+     * response is returned raw so its status and error body survive. When `false` (default),
      * the core returns the RAW fetched response and the caller runs the
      * response chain itself — this preserves call sites that gate on
      * `response.ok` BEFORE the response chain (Adapter / Handler).
@@ -127,7 +128,11 @@ interface ProviderCallContext {
  * before, and so the wire-capture / logging hooks keep their inputs.
  */
 interface ProviderCallResult {
-    /** Transformed response (runResponseChain=true) or raw response (false). */
+    /**
+     * Transformed response (runResponseChain=true AND the upstream response was
+     * `ok`), otherwise the RAW fetched response — see the `.ok` gate in the
+     * implementation for why failures are never transformed.
+     */
     response: Response;
     /** Request-chain output body (pre-`prepareBody`). */
     requestBody: unknown;

package/dist/pipeline/executeProviderCall.d.ts

@@ -101,8 +101,9 @@ interface ProviderCallContext {
      */
     fetchFn: (url: string, headers: Record<string, string>, body: unknown) => Promise<Response>;
     /**
-     * When `true`, the core runs `executeResponseChain` on the fetched
-     * response and returns the TRANSFORMED response. When `false` (default),
+     * When `true`, the core runs `executeResponseChain` on a SUCCESSFUL fetched
+     * response and returns the TRANSFORMED response; a failed (`!response.ok`)
+     * response is returned raw so its status and error body survive. When `false` (default),
      * the core returns the RAW fetched response and the caller runs the
      * response chain itself — this preserves call sites that gate on
      * `response.ok` BEFORE the response chain (Adapter / Handler).
@@ -127,7 +128,11 @@ interface ProviderCallContext {
  * before, and so the wire-capture / logging hooks keep their inputs.
  */
 interface ProviderCallResult {
-    /** Transformed response (runResponseChain=true) or raw response (false). */
+    /**
+     * Transformed response (runResponseChain=true AND the upstream response was
+     * `ok`), otherwise the RAW fetched response — see the `.ok` gate in the
+     * implementation for why failures are never transformed.
+     */
     response: Response;
     /** Request-chain output body (pre-`prepareBody`). */
     requestBody: unknown;

package/dist/pipeline/executeProviderCall.js

@@ -1,6 +1,6 @@
 import {
   executeProviderCall
-} from "../chunk-IK3KE3AU.js";
+} from "../chunk-DE2SRBFZ.js";
 export {
   executeProviderCall
 };

package/dist/pipeline/resolveProviderChain.d.cts

@@ -13,9 +13,8 @@ import '../transformer/TransformerService.cjs';
  * block verbatim. This module extracts that single shared helper so the
  * logic lives in exactly one place.
  *
- * IMPORTANT: body mutations that are proxy-specific (ReasoningTransformer
- * auto-inject, thinkingLevel body-inject) are NOT part of this helper —
- * they remain at each call site as before.
+ * IMPORTANT: body mutations that are proxy-specific (thinkingLevel body-inject)
+ * are NOT part of this helper — they remain at each call site as before.
  *
  * @module pipeline/resolveProviderChain
  */

package/dist/pipeline/resolveProviderChain.d.ts

@@ -13,9 +13,8 @@ import '../transformer/TransformerService.js';
  * block verbatim. This module extracts that single shared helper so the
  * logic lives in exactly one place.
  *
- * IMPORTANT: body mutations that are proxy-specific (ReasoningTransformer
- * auto-inject, thinkingLevel body-inject) are NOT part of this helper —
- * they remain at each call site as before.
+ * IMPORTANT: body mutations that are proxy-specific (thinkingLevel body-inject)
+ * are NOT part of this helper — they remain at each call site as before.
  *
  * @module pipeline/resolveProviderChain
  */

package/dist/pipeline/resolveSubscriptionChain.d.cts

@@ -3,6 +3,7 @@ import { Transformer, ResolvedTransformerChain } from '../transformer/types.cjs'
 import { SubscriptionAuthProfile } from './SubscriptionAuthSource.cjs';
 import '@omnicross/contracts/subscription-types';
 import './AuthSource.cjs';
+import './BoundAccountSelectionError.cjs';
 import './SubscriptionAuthStrategy.cjs';
 
 /**

package/dist/pipeline/resolveSubscriptionChain.d.ts

@@ -3,6 +3,7 @@ import { Transformer, ResolvedTransformerChain } from '../transformer/types.js';
 import { SubscriptionAuthProfile } from './SubscriptionAuthSource.js';
 import '@omnicross/contracts/subscription-types';
 import './AuthSource.js';
+import './BoundAccountSelectionError.js';
 import './SubscriptionAuthStrategy.js';
 
 /**

package/dist/pipeline/upstreamFetch.cjs

@@ -4,12 +4,14 @@
 
 
 
-var _chunkPG7PS2NNcjs = require('../chunk-PG7PS2NN.cjs');
-require('../chunk-3Z5BQZFM.cjs');
+var _chunkRJUONLUQcjs = require('../chunk-RJUONLUQ.cjs');
+require('../chunk-235MXAGX.cjs');
+require('../chunk-HVBBDBS3.cjs');
+require('../chunk-NKVZ6Z3Y.cjs');
 
 
 
 
 
 
-exports.__resetUpstreamProxyForTests = _chunkPG7PS2NNcjs.__resetUpstreamProxyForTests; exports.bumpUpstreamProxyGeneration = _chunkPG7PS2NNcjs.bumpUpstreamProxyGeneration; exports.fetchUpstream = _chunkPG7PS2NNcjs.fetchUpstream; exports.resolveUpstreamDispatcher = _chunkPG7PS2NNcjs.resolveUpstreamDispatcher; exports.setUpstreamProxyResolver = _chunkPG7PS2NNcjs.setUpstreamProxyResolver;
+exports.__resetUpstreamProxyForTests = _chunkRJUONLUQcjs.__resetUpstreamProxyForTests; exports.bumpUpstreamProxyGeneration = _chunkRJUONLUQcjs.bumpUpstreamProxyGeneration; exports.fetchUpstream = _chunkRJUONLUQcjs.fetchUpstream; exports.resolveUpstreamDispatcher = _chunkRJUONLUQcjs.resolveUpstreamDispatcher; exports.setUpstreamProxyResolver = _chunkRJUONLUQcjs.setUpstreamProxyResolver;

package/dist/pipeline/upstreamFetch.d.cts

@@ -1,5 +1,6 @@
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { Dispatcher } from 'undici';
+import { AccountRouteEndpoint, AccountRouteSessionSource, AccountRouteActivityRecord } from './AccountRouteActivity.cjs';
 
 /**
  * upstreamFetch — the single proxy-aware egress seam for `@omnicross/core`
@@ -28,27 +29,55 @@ import { Dispatcher } from 'undici';
  * FROZEN SEAM: `#7` (client fingerprint) attaches per-account TLS/agent behavior
  * at this SAME dispatcher point — do not fork a second egress path.
  *
- * DEBUG TRACE: when the daemon installs an upstream-trace path (gated on the
- * audit `captureBodies` opt-in), relay calls (`ctx.providerId` set) clone the
- * response and append the FULL exchange (request + verbatim response incl. SSE)
- * to the trace file. Absent a path (the default) it is a pure no-op — zero
- * regression. See `upstreamTrace.ts`.
+ * DEBUG TRACE: when a diagnostic caller explicitly installs an upstream-trace
+ * path, relay calls (`ctx.providerId` set) clone the response and append the
+ * FULL exchange (request + verbatim response incl. SSE) to the trace file. The
+ * daemon audit runtime never installs this path, preventing duplicate body
+ * storage. Absent a path (the default) it is a pure no-op — zero regression.
  *
  * @module @omnicross/core/pipeline/upstreamFetch
  */
 
+interface AccountRouteActivityContext {
+    endpoint: AccountRouteEndpoint;
+    sessionKey?: string;
+    sessionSource: AccountRouteSessionSource;
+    model: string;
+    /**
+     * Invoked once with the freshly-recorded activity record. Lets a caller
+     * capture the record `id` so it can {@link AccountRouteActivityStore.amend}
+     * the SAME row later, once a post-hoc fact (e.g. an overload event buried in
+     * the 200 SSE body) becomes known during relay. Best-effort: never throws.
+     */
+    onRecorded?: (record: AccountRouteActivityRecord) => void;
+}
 /** The opaque call context the resolver maps to a proxy (precedence input). */
 interface UpstreamProxyContext {
     /** The subscription provider id (`claude`/`codex`/`gemini`/`opencodego`) or `'byo'`. */
     providerId?: string;
     /** The selected pooled account id (per-account override input). */
     accountId?: string;
+    /** Metadata-only live route activity. Never contains prompts, headers, or tokens. */
+    routeActivity?: AccountRouteActivityContext;
     /**
      * The target upstream URL. Injected by {@link fetchUpstream} so the resolver can
      * apply host-based bypass (loopback / `NO_PROXY`). Callers of the ingress helpers
      * do NOT set this — it is filled from the fetch `url`.
      */
     url?: string;
+    /**
+     * CREDENTIAL EXCHANGE — this call's request/response BODIES carry secrets (an
+     * authorization code + PKCE verifier out, an access/refresh token back), so the
+     * debug trace must record the exchange's METADATA only and replace both bodies
+     * with a placeholder.
+     *
+     * Set it on every OAuth token-endpoint call (interactive login + refresh).
+     * Those calls still need a `providerId` so the per-provider proxy layer applies
+     * and so a failure is traceable at all — but the trace captures bodies verbatim
+     * (that is its purpose for relay traffic), and a plaintext token must never
+     * reach the trace file. Purely a trace concern: the proxy resolver ignores it.
+     */
+    redactBodies?: boolean;
 }
 /**
  * The layered proxy lookup the daemon injects. Applies precedence
@@ -86,4 +115,4 @@ declare function fetchUpstream(url: string, init: RequestInit, ctx?: UpstreamPro
 /** TEST SEAM — clear the resolver + cache so a suite starts from the direct-fetch baseline. */
 declare function __resetUpstreamProxyForTests(): void;
 
-export { type UpstreamProxyContext, type UpstreamProxyResolver, __resetUpstreamProxyForTests, bumpUpstreamProxyGeneration, fetchUpstream, resolveUpstreamDispatcher, setUpstreamProxyResolver };
+export { type AccountRouteActivityContext, type UpstreamProxyContext, type UpstreamProxyResolver, __resetUpstreamProxyForTests, bumpUpstreamProxyGeneration, fetchUpstream, resolveUpstreamDispatcher, setUpstreamProxyResolver };

package/dist/pipeline/upstreamFetch.d.ts

@@ -1,5 +1,6 @@
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { Dispatcher } from 'undici';
+import { AccountRouteEndpoint, AccountRouteSessionSource, AccountRouteActivityRecord } from './AccountRouteActivity.js';
 
 /**
  * upstreamFetch — the single proxy-aware egress seam for `@omnicross/core`
@@ -28,27 +29,55 @@ import { Dispatcher } from 'undici';
  * FROZEN SEAM: `#7` (client fingerprint) attaches per-account TLS/agent behavior
  * at this SAME dispatcher point — do not fork a second egress path.
  *
- * DEBUG TRACE: when the daemon installs an upstream-trace path (gated on the
- * audit `captureBodies` opt-in), relay calls (`ctx.providerId` set) clone the
- * response and append the FULL exchange (request + verbatim response incl. SSE)
- * to the trace file. Absent a path (the default) it is a pure no-op — zero
- * regression. See `upstreamTrace.ts`.
+ * DEBUG TRACE: when a diagnostic caller explicitly installs an upstream-trace
+ * path, relay calls (`ctx.providerId` set) clone the response and append the
+ * FULL exchange (request + verbatim response incl. SSE) to the trace file. The
+ * daemon audit runtime never installs this path, preventing duplicate body
+ * storage. Absent a path (the default) it is a pure no-op — zero regression.
  *
  * @module @omnicross/core/pipeline/upstreamFetch
  */
 
+interface AccountRouteActivityContext {
+    endpoint: AccountRouteEndpoint;
+    sessionKey?: string;
+    sessionSource: AccountRouteSessionSource;
+    model: string;
+    /**
+     * Invoked once with the freshly-recorded activity record. Lets a caller
+     * capture the record `id` so it can {@link AccountRouteActivityStore.amend}
+     * the SAME row later, once a post-hoc fact (e.g. an overload event buried in
+     * the 200 SSE body) becomes known during relay. Best-effort: never throws.
+     */
+    onRecorded?: (record: AccountRouteActivityRecord) => void;
+}
 /** The opaque call context the resolver maps to a proxy (precedence input). */
 interface UpstreamProxyContext {
     /** The subscription provider id (`claude`/`codex`/`gemini`/`opencodego`) or `'byo'`. */
     providerId?: string;
     /** The selected pooled account id (per-account override input). */
     accountId?: string;
+    /** Metadata-only live route activity. Never contains prompts, headers, or tokens. */
+    routeActivity?: AccountRouteActivityContext;
     /**
      * The target upstream URL. Injected by {@link fetchUpstream} so the resolver can
      * apply host-based bypass (loopback / `NO_PROXY`). Callers of the ingress helpers
      * do NOT set this — it is filled from the fetch `url`.
      */
     url?: string;
+    /**
+     * CREDENTIAL EXCHANGE — this call's request/response BODIES carry secrets (an
+     * authorization code + PKCE verifier out, an access/refresh token back), so the
+     * debug trace must record the exchange's METADATA only and replace both bodies
+     * with a placeholder.
+     *
+     * Set it on every OAuth token-endpoint call (interactive login + refresh).
+     * Those calls still need a `providerId` so the per-provider proxy layer applies
+     * and so a failure is traceable at all — but the trace captures bodies verbatim
+     * (that is its purpose for relay traffic), and a plaintext token must never
+     * reach the trace file. Purely a trace concern: the proxy resolver ignores it.
+     */
+    redactBodies?: boolean;
 }
 /**
  * The layered proxy lookup the daemon injects. Applies precedence
@@ -86,4 +115,4 @@ declare function fetchUpstream(url: string, init: RequestInit, ctx?: UpstreamPro
 /** TEST SEAM — clear the resolver + cache so a suite starts from the direct-fetch baseline. */
 declare function __resetUpstreamProxyForTests(): void;
 
-export { type UpstreamProxyContext, type UpstreamProxyResolver, __resetUpstreamProxyForTests, bumpUpstreamProxyGeneration, fetchUpstream, resolveUpstreamDispatcher, setUpstreamProxyResolver };
+export { type AccountRouteActivityContext, type UpstreamProxyContext, type UpstreamProxyResolver, __resetUpstreamProxyForTests, bumpUpstreamProxyGeneration, fetchUpstream, resolveUpstreamDispatcher, setUpstreamProxyResolver };

package/dist/pipeline/upstreamFetch.js

@@ -4,8 +4,10 @@ import {
   fetchUpstream,
   resolveUpstreamDispatcher,
   setUpstreamProxyResolver
-} from "../chunk-D3TDKWRP.js";
-import "../chunk-SYQF7OIR.js";
+} from "../chunk-RJ5ZGNI3.js";
+import "../chunk-3WD4HTR2.js";
+import "../chunk-MKF46GNZ.js";
+import "../chunk-GL6XM527.js";
 export {
   __resetUpstreamProxyForTests,
   bumpUpstreamProxyGeneration,

package/dist/pipeline/upstreamTrace.cjs

@@ -4,11 +4,13 @@
 
 
 
-var _chunk3Z5BQZFMcjs = require('../chunk-3Z5BQZFM.cjs');
 
+var _chunk235MXAGXcjs = require('../chunk-235MXAGX.cjs');
 
 
 
 
 
-exports.__resetUpstreamTraceForTests = _chunk3Z5BQZFMcjs.__resetUpstreamTraceForTests; exports.getUpstreamTracePath = _chunk3Z5BQZFMcjs.getUpstreamTracePath; exports.redactHeaders = _chunk3Z5BQZFMcjs.redactHeaders; exports.setUpstreamTracePath = _chunk3Z5BQZFMcjs.setUpstreamTracePath; exports.writeUpstreamTrace = _chunk3Z5BQZFMcjs.writeUpstreamTrace;
+
+
+exports.REDACTED_BODY = _chunk235MXAGXcjs.REDACTED_BODY; exports.__resetUpstreamTraceForTests = _chunk235MXAGXcjs.__resetUpstreamTraceForTests; exports.getUpstreamTracePath = _chunk235MXAGXcjs.getUpstreamTracePath; exports.redactHeaders = _chunk235MXAGXcjs.redactHeaders; exports.setUpstreamTracePath = _chunk235MXAGXcjs.setUpstreamTracePath; exports.writeUpstreamTrace = _chunk235MXAGXcjs.writeUpstreamTrace;

package/dist/pipeline/upstreamTrace.d.cts

@@ -14,22 +14,36 @@
  * (a `text/event-stream` included — `clone().text()` tees the stream so the
  * relay keeps streaming the original while the clone is buffered for the
  * trace), and appends one {@link UpstreamTraceRecord} JSON line. Relay calls
- * carry an opaque `providerId`; OAuth-refresh / webhook sends do not, so they
- * are skipped (less noise). Tracing is fire-and-forget: a read/write failure
- * is swallowed so the egress path is never affected.
+ * carry an opaque `providerId`; webhook / billing sends do not, so they are
+ * skipped (less noise). OAuth token-endpoint calls (interactive login + refresh)
+ * DO carry one — a failed login must be diagnosable — but they set the ctx's
+ * `redactBodies`, so their bodies are replaced with {@link REDACTED_BODY}.
+ * Tracing is fire-and-forget: a read/write failure is swallowed so the egress
+ * path is never affected.
  *
- * The daemon installs the path via {@link setUpstreamTracePath} (gated on the
- * audit segment's `captureBodies`, hot-reloaded like the audit sink). Absent a
- * path the trace is a pure no-op — byte-identical zero regression.
+ * A diagnostic caller may explicitly install a path via
+ * {@link setUpstreamTracePath}. The daemon's audit runtime intentionally does
+ * not install one: audit bodies have a single persistence path. Absent an
+ * explicit path the trace is a pure no-op — byte-identical zero regression.
  *
  * Secret discipline: request/response AUTHORIZATION + api-key HEADER values are
  * masked (`***REDACTED***`) — they are OAuth bearer tokens, not the thing under
  * test, and a plaintext trace file must not hold them. Header KEYS stay visible
  * so presence is verifiable. The request/response BODIES are captured VERBATIM
- * (a prompt / a codex SSE stream) — that is the whole point.
+ * (a prompt / a codex SSE stream) — that is the whole point — EXCEPT on a
+ * credential exchange, where the body IS the secret (see {@link REDACTED_BODY}).
  *
  * @module @omnicross/core/pipeline/upstreamTrace
  */
+/**
+ * Placeholder written in place of a request/response body whose content is a
+ * CREDENTIAL rather than the thing under test — an OAuth token exchange or
+ * refresh (`fetchUpstream` ctx `redactBodies`). Those calls are still traced so a
+ * failed login/refresh is diagnosable (url, status, duration, byte count), but a
+ * plaintext authorization code / access token / refresh token must never land in
+ * this file.
+ */
+declare const REDACTED_BODY = "***REDACTED (credential exchange)***";
 /**
  * Install (or clear, with `null`/blank) the trace file path. Idempotent — last
  * write wins. The path is resolved by the daemon relative to the audit store.
@@ -82,4 +96,4 @@ declare function writeUpstreamTrace(record: UpstreamTraceRecord): Promise<void>;
 /** TEST SEAM — clear the trace path so a suite starts from the no-trace baseline. */
 declare function __resetUpstreamTraceForTests(): void;
 
-export { type UpstreamTraceRecord, __resetUpstreamTraceForTests, getUpstreamTracePath, redactHeaders, setUpstreamTracePath, writeUpstreamTrace };
+export { REDACTED_BODY, type UpstreamTraceRecord, __resetUpstreamTraceForTests, getUpstreamTracePath, redactHeaders, setUpstreamTracePath, writeUpstreamTrace };

package/dist/pipeline/upstreamTrace.d.ts

@@ -14,22 +14,36 @@
  * (a `text/event-stream` included — `clone().text()` tees the stream so the
  * relay keeps streaming the original while the clone is buffered for the
  * trace), and appends one {@link UpstreamTraceRecord} JSON line. Relay calls
- * carry an opaque `providerId`; OAuth-refresh / webhook sends do not, so they
- * are skipped (less noise). Tracing is fire-and-forget: a read/write failure
- * is swallowed so the egress path is never affected.
+ * carry an opaque `providerId`; webhook / billing sends do not, so they are
+ * skipped (less noise). OAuth token-endpoint calls (interactive login + refresh)
+ * DO carry one — a failed login must be diagnosable — but they set the ctx's
+ * `redactBodies`, so their bodies are replaced with {@link REDACTED_BODY}.
+ * Tracing is fire-and-forget: a read/write failure is swallowed so the egress
+ * path is never affected.
  *
- * The daemon installs the path via {@link setUpstreamTracePath} (gated on the
- * audit segment's `captureBodies`, hot-reloaded like the audit sink). Absent a
- * path the trace is a pure no-op — byte-identical zero regression.
+ * A diagnostic caller may explicitly install a path via
+ * {@link setUpstreamTracePath}. The daemon's audit runtime intentionally does
+ * not install one: audit bodies have a single persistence path. Absent an
+ * explicit path the trace is a pure no-op — byte-identical zero regression.
  *
  * Secret discipline: request/response AUTHORIZATION + api-key HEADER values are
  * masked (`***REDACTED***`) — they are OAuth bearer tokens, not the thing under
  * test, and a plaintext trace file must not hold them. Header KEYS stay visible
  * so presence is verifiable. The request/response BODIES are captured VERBATIM
- * (a prompt / a codex SSE stream) — that is the whole point.
+ * (a prompt / a codex SSE stream) — that is the whole point — EXCEPT on a
+ * credential exchange, where the body IS the secret (see {@link REDACTED_BODY}).
  *
  * @module @omnicross/core/pipeline/upstreamTrace
  */
+/**
+ * Placeholder written in place of a request/response body whose content is a
+ * CREDENTIAL rather than the thing under test — an OAuth token exchange or
+ * refresh (`fetchUpstream` ctx `redactBodies`). Those calls are still traced so a
+ * failed login/refresh is diagnosable (url, status, duration, byte count), but a
+ * plaintext authorization code / access token / refresh token must never land in
+ * this file.
+ */
+declare const REDACTED_BODY = "***REDACTED (credential exchange)***";
 /**
  * Install (or clear, with `null`/blank) the trace file path. Idempotent — last
  * write wins. The path is resolved by the daemon relative to the audit store.
@@ -82,4 +96,4 @@ declare function writeUpstreamTrace(record: UpstreamTraceRecord): Promise<void>;
 /** TEST SEAM — clear the trace path so a suite starts from the no-trace baseline. */
 declare function __resetUpstreamTraceForTests(): void;
 
-export { type UpstreamTraceRecord, __resetUpstreamTraceForTests, getUpstreamTracePath, redactHeaders, setUpstreamTracePath, writeUpstreamTrace };
+export { REDACTED_BODY, type UpstreamTraceRecord, __resetUpstreamTraceForTests, getUpstreamTracePath, redactHeaders, setUpstreamTracePath, writeUpstreamTrace };

package/dist/pipeline/upstreamTrace.js

@@ -1,11 +1,13 @@
 import {
+  REDACTED_BODY,
   __resetUpstreamTraceForTests,
   getUpstreamTracePath,
   redactHeaders,
   setUpstreamTracePath,
   writeUpstreamTrace
-} from "../chunk-SYQF7OIR.js";
+} from "../chunk-3WD4HTR2.js";
 export {
+  REDACTED_BODY,
   __resetUpstreamTraceForTests,
   getUpstreamTracePath,
   redactHeaders,

package/dist/ports/pricing-store.d.cts

@@ -1,4 +1,4 @@
-import { PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/contracts/pricing-types';
+import { PricingSource, PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/contracts/pricing-types';
 
 /**
  * `PricingStore` — core-owned port for pricing-row persistence.
@@ -11,6 +11,7 @@ import { PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/c
  * @module ports/pricing-store
  */
 
+type AutomaticPricingSource = Extract<PricingSource, 'litellm' | 'openrouter'>;
 interface PricingStore {
     /** Return every pricing row. The engine caches the full table in memory. */
     getAll(): Promise<PricingEntry[]>;
@@ -29,7 +30,7 @@ interface PricingStore {
      * left untouched and returned in `conflicts` as `{ current, incoming }`
      * pairs for per-row resolution by the user.
      */
-    bulkApplyFromSource(entries: PricingEntryInput[]): Promise<{
+    bulkApplyFromSource(entries: PricingEntryInput[], source?: AutomaticPricingSource): Promise<{
         applied: PricingEntry[];
         conflicts: Array<{
             current: PricingEntry;
@@ -47,4 +48,4 @@ interface PricingStore {
     }>): Promise<PricingResolution>;
 }
 
-export type { PricingStore };
+export type { AutomaticPricingSource, PricingStore };

package/dist/ports/pricing-store.d.ts

@@ -1,4 +1,4 @@
-import { PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/contracts/pricing-types';
+import { PricingSource, PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/contracts/pricing-types';
 
 /**
  * `PricingStore` — core-owned port for pricing-row persistence.
@@ -11,6 +11,7 @@ import { PricingEntry, PricingEntryInput, PricingResolution } from '@omnicross/c
  * @module ports/pricing-store
  */
 
+type AutomaticPricingSource = Extract<PricingSource, 'litellm' | 'openrouter'>;
 interface PricingStore {
     /** Return every pricing row. The engine caches the full table in memory. */
     getAll(): Promise<PricingEntry[]>;
@@ -29,7 +30,7 @@ interface PricingStore {
      * left untouched and returned in `conflicts` as `{ current, incoming }`
      * pairs for per-row resolution by the user.
      */
-    bulkApplyFromSource(entries: PricingEntryInput[]): Promise<{
+    bulkApplyFromSource(entries: PricingEntryInput[], source?: AutomaticPricingSource): Promise<{
         applied: PricingEntry[];
         conflicts: Array<{
             current: PricingEntry;
@@ -47,4 +48,4 @@ interface PricingStore {
     }>): Promise<PricingResolution>;
 }
 
-export type { PricingStore };
+export type { AutomaticPricingSource, PricingStore };

package/dist/ports.d.cts

@@ -1,11 +1,11 @@
 export { C as CorePaths, a as CoreUsageEvent, b as CoreUsageTokenCounts, U as UsageEventSink } from './usage-event-sink-BX7FE1NL.cjs';
 export { L as Logger } from './logger-4GvQNzhE.cjs';
-export { PricingStore } from './ports/pricing-store.cjs';
+export { AutomaticPricingSource, PricingStore } from './ports/pricing-store.cjs';
 export { ProviderConfigSource } from './ports/provider-config-source.cjs';
 export { UsageEventStore } from './ports/usage-event-store.cjs';
 export { WebSearchBackend } from './ports/web-search-backend.cjs';
 export { UsageRecorderImport as UsageSink } from './provider-proxy/types.cjs';
-export { O as OutboundCredentialStore } from './types-B8Arpxn0.cjs';
+export { O as OutboundCredentialStore } from './types-gjJ5lJ5n.cjs';
 import '@omnicross/contracts/pricing-types';
 import '@omnicross/contracts/llm-config';
 import './transformer/types.cjs';
@@ -18,6 +18,7 @@ import '@omnicross/contracts/subscription-types';
 import '@omnicross/contracts/usage-types';
 import './completion/ApiKeyPoolService.cjs';
 import './pipeline/AuthSource.cjs';
+import './pipeline/BoundAccountSelectionError.cjs';
 import './pipeline/SubscriptionAuthSource.cjs';
 import './pipeline/SubscriptionAuthStrategy.cjs';
 import '@omnicross/contracts/account-tokens-types';
@@ -27,4 +28,4 @@ import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import './ProviderProxy-CnMQYN59.cjs';
-import './keyPolicy-Cp0FntZl.cjs';
+import './keyPolicy-zdWTu3CQ.cjs';

package/dist/ports.d.ts

@@ -1,11 +1,11 @@
 export { C as CorePaths, a as CoreUsageEvent, b as CoreUsageTokenCounts, U as UsageEventSink } from './usage-event-sink-BX7FE1NL.js';
 export { L as Logger } from './logger-4GvQNzhE.js';
-export { PricingStore } from './ports/pricing-store.js';
+export { AutomaticPricingSource, PricingStore } from './ports/pricing-store.js';
 export { ProviderConfigSource } from './ports/provider-config-source.js';
 export { UsageEventStore } from './ports/usage-event-store.js';
 export { WebSearchBackend } from './ports/web-search-backend.js';
 export { UsageRecorderImport as UsageSink } from './provider-proxy/types.js';
-export { O as OutboundCredentialStore } from './types-lgPYQuZS.js';
+export { O as OutboundCredentialStore } from './types-CqZD77rS.js';
 import '@omnicross/contracts/pricing-types';
 import '@omnicross/contracts/llm-config';
 import './transformer/types.js';
@@ -18,6 +18,7 @@ import '@omnicross/contracts/subscription-types';
 import '@omnicross/contracts/usage-types';
 import './completion/ApiKeyPoolService.js';
 import './pipeline/AuthSource.js';
+import './pipeline/BoundAccountSelectionError.js';
 import './pipeline/SubscriptionAuthSource.js';
 import './pipeline/SubscriptionAuthStrategy.js';
 import '@omnicross/contracts/account-tokens-types';
@@ -27,4 +28,4 @@ import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import './ProviderProxy-C-xqrkKi.js';
-import './keyPolicy-Cp0FntZl.js';
+import './keyPolicy-zdWTu3CQ.js';