@omnicross/core 0.1.5 → 0.1.7

package/dist/provider-proxy/ingress/providerProxyShared.js

@@ -7,50 +7,57 @@ import {
   readBody,
   relayResponse,
   resolvePoolBoundKey,
+  writeBoundAccountError,
   writeError
-} from "../../chunk-FH2P4OCD.js";
+} from "../../chunk-E3COOKUP.js";
 import "../../chunk-VVEHS2LI.js";
 import "../../chunk-46RLHI7D.js";
-import "../../chunk-G2UTNSGU.js";
-import "../../chunk-DK4A7DLE.js";
-import "../../chunk-OQWKZCXP.js";
-import "../../chunk-IB3FDI4O.js";
-import "../../chunk-ZJZAOKI7.js";
-import "../../chunk-C6OV7GCC.js";
-import "../../chunk-IWQAX3CS.js";
-import "../../chunk-BODMAL6G.js";
+import "../../chunk-MYYR3HZL.js";
+import "../../chunk-PEGTIPB3.js";
+import "../../chunk-LVUCAWMK.js";
+import "../../chunk-32O35CIF.js";
+import "../../chunk-FU7EAR73.js";
+import "../../chunk-LB6EBS6Y.js";
 import "../../chunk-7VU7V2E4.js";
-import "../../chunk-ZLX3KGXX.js";
-import "../../chunk-BPKCU575.js";
+import "../../chunk-FXR6N3SR.js";
+import "../../chunk-SOO562NM.js";
+import "../../chunk-WNKWAEUR.js";
 import "../../chunk-MZNPGW5Q.js";
+import "../../chunk-DK4A7DLE.js";
+import "../../chunk-XXFYLL7R.js";
 import "../../chunk-XTEI64OU.js";
 import "../../chunk-XX6NQJMA.js";
-import "../../chunk-IAXWICZU.js";
+import "../../chunk-GFIZ6LQI.js";
 import "../../chunk-OE6TDIWW.js";
 import "../../chunk-DRWHTIIZ.js";
-import "../../chunk-IK3KE3AU.js";
-import "../../chunk-ZY6KU6P3.js";
 import "../../chunk-JWC6APFQ.js";
 import "../../chunk-5ERIZW3D.js";
-import "../../chunk-5ENKBSWO.js";
-import "../../chunk-HRRYG2AX.js";
+import "../../chunk-PO3XB56Z.js";
+import "../../chunk-N7OOJI5V.js";
+import "../../chunk-23S5OPIO.js";
 import "../../chunk-AVYJ4YBN.js";
+import "../../chunk-OPRS4IQZ.js";
+import "../../chunk-2JYRIADS.js";
+import "../../chunk-DE2SRBFZ.js";
+import "../../chunk-ZY6KU6P3.js";
 import "../../chunk-WLYIIEAF.js";
 import "../../chunk-TKJMZBAH.js";
 import "../../chunk-3QFXFCHG.js";
-import "../../chunk-UHGVBFU3.js";
+import "../../chunk-EBLFCNPY.js";
 import "../../chunk-AQ5TNQB7.js";
 import "../../chunk-XEKD23J5.js";
 import "../../chunk-H5JUT3KV.js";
-import "../../chunk-IFXJ2BG7.js";
+import "../../chunk-7C7DET6S.js";
 import "../../chunk-K5NM7VAH.js";
 import "../../chunk-WNY4WMRF.js";
 import "../../chunk-OZFM4X3S.js";
-import "../../chunk-5ZQBEOMD.js";
-import "../../chunk-MFZ5437A.js";
-import "../../chunk-6QZGDLL4.js";
-import "../../chunk-D3TDKWRP.js";
-import "../../chunk-SYQF7OIR.js";
+import "../../chunk-5NJLQ6T6.js";
+import "../../chunk-N5T4M4GU.js";
+import "../../chunk-TOVPMMHM.js";
+import "../../chunk-RJ5ZGNI3.js";
+import "../../chunk-3WD4HTR2.js";
+import "../../chunk-MKF46GNZ.js";
+import "../../chunk-GL6XM527.js";
 import "../../chunk-CDHS2QDC.js";
 import "../../chunk-Y7FO65VT.js";
 import "../../chunk-FMOBD2OQ.js";
@@ -64,5 +71,6 @@ export {
   readBody,
   relayResponse,
   resolvePoolBoundKey,
+  writeBoundAccountError,
   writeError
 };

package/dist/provider-proxy/matchText.cjs

@@ -4,11 +4,13 @@
 
 
 
-var _chunkQWBWGODScjs = require('../chunk-QWBWGODS.cjs');
 
+var _chunkJ3QQ6JS5cjs = require('../chunk-J3QQ6JS5.cjs');
 
 
 
 
 
-exports.MATCH_TEXT_PER_MESSAGE_CAP = _chunkQWBWGODScjs.MATCH_TEXT_PER_MESSAGE_CAP; exports.MATCH_TEXT_RECENT_MESSAGES = _chunkQWBWGODScjs.MATCH_TEXT_RECENT_MESSAGES; exports.collectMatchText = _chunkQWBWGODScjs.collectMatchText; exports.deriveSubscriptionSessionKey = _chunkQWBWGODScjs.deriveSubscriptionSessionKey; exports.flattenMatchText = _chunkQWBWGODScjs.flattenMatchText;
+
+
+exports.MATCH_TEXT_PER_MESSAGE_CAP = _chunkJ3QQ6JS5cjs.MATCH_TEXT_PER_MESSAGE_CAP; exports.MATCH_TEXT_RECENT_MESSAGES = _chunkJ3QQ6JS5cjs.MATCH_TEXT_RECENT_MESSAGES; exports.collectMatchText = _chunkJ3QQ6JS5cjs.collectMatchText; exports.deriveGatewaySessionKey = _chunkJ3QQ6JS5cjs.deriveGatewaySessionKey; exports.deriveSubscriptionSessionKey = _chunkJ3QQ6JS5cjs.deriveSubscriptionSessionKey; exports.flattenMatchText = _chunkJ3QQ6JS5cjs.flattenMatchText;

package/dist/provider-proxy/matchText.d.cts

@@ -34,11 +34,10 @@ declare const MATCH_TEXT_RECENT_MESSAGES = 6;
 declare function flattenMatchText(value: unknown): string;
 /**
  * Build the BOUNDED match-text slice: the `system` prompt plus the most recent
- * `user`/`system` messages, each truncated to a per-message char cap (design.md
- * §2 — mirrors the reference `DetectScenario` role filter, bounded so matching
- * cost is independent of conversation length). Assistant turns are excluded (the
- * §3 common-denominator decision; same safe direction as the reference for the
- * background tool-blocker pre-scan). System prompt is emitted first.
+ * `user`/`system` messages, each truncated to a per-message char cap so matching
+ * cost is independent of conversation length. Assistant turns are excluded to
+ * keep routing based on instructions rather than generated text. System prompt
+ * is emitted first.
  *
  * @param anthropicBody the parsed Anthropic Messages request body.
  */
@@ -56,5 +55,39 @@ declare function collectMatchText(anthropicBody: Record<string, unknown>): strin
  * SAME key for the same body.
  */
 declare function deriveSubscriptionSessionKey(anthropicBody: Record<string, unknown>): string | undefined;
+/**
+ * Source used to derive a gateway session-affinity key. The value is kept
+ * deliberately small and non-sensitive: callers only receive the hashed key,
+ * while the source is useful to tests/diagnostics without exposing the raw
+ * session id.
+ */
+type SessionKeySource = 'session-header' | 'thread-header' | 'body-session-id' | 'body-thread-id' | 'prompt-cache-key' | 'content-fingerprint' | 'api-key-fallback';
+/** A hashed session key and the extraction path that produced it. */
+interface DerivedSessionKey {
+    readonly key: string;
+    readonly source: SessionKeySource;
+}
+/** Options for {@link deriveGatewaySessionKey}. */
+interface GatewaySessionKeyOptions {
+    /** A stable route/key seed used when the request has no conversation id. */
+    readonly fallbackKey?: string;
+    /** Namespaces the conservative fallback (normally `responses`). */
+    readonly endpoint?: string;
+}
+/** Header bag accepted by Node's IncomingHttpHeaders and browser-style tests. */
+type SessionRequestHeaders = Record<string, string | string[] | undefined>;
+/**
+ * Derive one stable account-pool affinity key for a gateway request.
+ *
+ * Codex/Responses sends the same conversation id in a few wire-compatible
+ * locations depending on the client version. Prefer those explicit ids in a
+ * deterministic order, then fall back to a bounded content fingerprint made
+ * from stable developer/system instructions and the first user input. The
+ * final fallback is route-scoped (api key/session + endpoint) so a request
+ * with no usable metadata remains conservative and does not rotate accounts
+ * on every turn. Raw ids and prompts are never returned or logged; only their
+ * truncated SHA-256 digest is exposed as `key`.
+ */
+declare function deriveGatewaySessionKey(body: Record<string, unknown>, headers?: SessionRequestHeaders, options?: GatewaySessionKeyOptions): DerivedSessionKey;
 
-export { MATCH_TEXT_PER_MESSAGE_CAP, MATCH_TEXT_RECENT_MESSAGES, collectMatchText, deriveSubscriptionSessionKey, flattenMatchText };
+export { type DerivedSessionKey, type GatewaySessionKeyOptions, MATCH_TEXT_PER_MESSAGE_CAP, MATCH_TEXT_RECENT_MESSAGES, type SessionKeySource, type SessionRequestHeaders, collectMatchText, deriveGatewaySessionKey, deriveSubscriptionSessionKey, flattenMatchText };

package/dist/provider-proxy/matchText.d.ts

@@ -34,11 +34,10 @@ declare const MATCH_TEXT_RECENT_MESSAGES = 6;
 declare function flattenMatchText(value: unknown): string;
 /**
  * Build the BOUNDED match-text slice: the `system` prompt plus the most recent
- * `user`/`system` messages, each truncated to a per-message char cap (design.md
- * §2 — mirrors the reference `DetectScenario` role filter, bounded so matching
- * cost is independent of conversation length). Assistant turns are excluded (the
- * §3 common-denominator decision; same safe direction as the reference for the
- * background tool-blocker pre-scan). System prompt is emitted first.
+ * `user`/`system` messages, each truncated to a per-message char cap so matching
+ * cost is independent of conversation length. Assistant turns are excluded to
+ * keep routing based on instructions rather than generated text. System prompt
+ * is emitted first.
  *
  * @param anthropicBody the parsed Anthropic Messages request body.
  */
@@ -56,5 +55,39 @@ declare function collectMatchText(anthropicBody: Record<string, unknown>): strin
  * SAME key for the same body.
  */
 declare function deriveSubscriptionSessionKey(anthropicBody: Record<string, unknown>): string | undefined;
+/**
+ * Source used to derive a gateway session-affinity key. The value is kept
+ * deliberately small and non-sensitive: callers only receive the hashed key,
+ * while the source is useful to tests/diagnostics without exposing the raw
+ * session id.
+ */
+type SessionKeySource = 'session-header' | 'thread-header' | 'body-session-id' | 'body-thread-id' | 'prompt-cache-key' | 'content-fingerprint' | 'api-key-fallback';
+/** A hashed session key and the extraction path that produced it. */
+interface DerivedSessionKey {
+    readonly key: string;
+    readonly source: SessionKeySource;
+}
+/** Options for {@link deriveGatewaySessionKey}. */
+interface GatewaySessionKeyOptions {
+    /** A stable route/key seed used when the request has no conversation id. */
+    readonly fallbackKey?: string;
+    /** Namespaces the conservative fallback (normally `responses`). */
+    readonly endpoint?: string;
+}
+/** Header bag accepted by Node's IncomingHttpHeaders and browser-style tests. */
+type SessionRequestHeaders = Record<string, string | string[] | undefined>;
+/**
+ * Derive one stable account-pool affinity key for a gateway request.
+ *
+ * Codex/Responses sends the same conversation id in a few wire-compatible
+ * locations depending on the client version. Prefer those explicit ids in a
+ * deterministic order, then fall back to a bounded content fingerprint made
+ * from stable developer/system instructions and the first user input. The
+ * final fallback is route-scoped (api key/session + endpoint) so a request
+ * with no usable metadata remains conservative and does not rotate accounts
+ * on every turn. Raw ids and prompts are never returned or logged; only their
+ * truncated SHA-256 digest is exposed as `key`.
+ */
+declare function deriveGatewaySessionKey(body: Record<string, unknown>, headers?: SessionRequestHeaders, options?: GatewaySessionKeyOptions): DerivedSessionKey;
 
-export { MATCH_TEXT_PER_MESSAGE_CAP, MATCH_TEXT_RECENT_MESSAGES, collectMatchText, deriveSubscriptionSessionKey, flattenMatchText };
+export { type DerivedSessionKey, type GatewaySessionKeyOptions, MATCH_TEXT_PER_MESSAGE_CAP, MATCH_TEXT_RECENT_MESSAGES, type SessionKeySource, type SessionRequestHeaders, collectMatchText, deriveGatewaySessionKey, deriveSubscriptionSessionKey, flattenMatchText };

package/dist/provider-proxy/matchText.js

@@ -2,13 +2,15 @@ import {
   MATCH_TEXT_PER_MESSAGE_CAP,
   MATCH_TEXT_RECENT_MESSAGES,
   collectMatchText,
+  deriveGatewaySessionKey,
   deriveSubscriptionSessionKey,
   flattenMatchText
-} from "../chunk-IAXWICZU.js";
+} from "../chunk-GFIZ6LQI.js";
 export {
   MATCH_TEXT_PER_MESSAGE_CAP,
   MATCH_TEXT_RECENT_MESSAGES,
   collectMatchText,
+  deriveGatewaySessionKey,
   deriveSubscriptionSessionKey,
   flattenMatchText
 };

package/dist/provider-proxy/types.d.cts

@@ -1,9 +1,11 @@
 import http from 'node:http';
 import { ThinkLevel } from '@omnicross/contracts/completion-types';
+import { UsageCacheKeySource } from '@omnicross/contracts/usage-stats-types';
 import { SubscriptionProviderId, OpenCodeGoTokenConfig, OpenCodeGoScenario, OpenCodeGoModelEntry } from '@omnicross/contracts/subscription-types';
 import { UsageEngineOrigin, UsageTokens } from '@omnicross/contracts/usage-types';
 import { ApiKeyPoolService } from '../completion/ApiKeyPoolService.cjs';
 import { AuthSource } from '../pipeline/AuthSource.cjs';
+import { BoundAccountFallbackPolicy } from '../pipeline/BoundAccountSelectionError.cjs';
 import { SubscriptionAuthProfile } from '../pipeline/SubscriptionAuthSource.cjs';
 import { AuthStrategy } from '../pipeline/SubscriptionAuthStrategy.cjs';
 import { ProviderConfigSource } from '../ports/provider-config-source.cjs';
@@ -161,6 +163,15 @@ interface AnthropicRouteHandlerParams {
     /** Lazy per-request resolver for the pass-through Bearer (takes precedence over the static one). */
     readonly resolvePassThroughAuthToken?: (() => Promise<string | null>) | null;
     readonly subscriptionProfile?: SubscriptionDispatchProfile | null;
+    /** Bound subscription account forwarded to the host's Anthropic handler. */
+    readonly preferredAccountId?: string;
+    readonly preferredAccountGroup?: string;
+    /** Strict by default; pool fallback is an explicit endpoint opt-in. */
+    readonly boundAccountFallbackPolicy?: BoundAccountFallbackPolicy;
+    /** Preferred provider-pool key selected by a resource-level binding. */
+    readonly preferredKeyId?: string;
+    /** Strict by default; pool fallback is an explicit binding opt-in. */
+    readonly boundKeyFallbackPolicy?: BoundAccountFallbackPolicy;
     readonly maxConcurrency?: number;
     /** Instance-level web-search backend; falls back to the proxy-global one. */
     readonly webSearchService?: WebSearchBackend | null;
@@ -249,6 +260,15 @@ interface AnthropicSdkHints {
     readonly extendedContext?: ExtendedContextHint | null;
     /** Subscription dispatch profile (Codex/Gemini/OpenCodeGo over the SDK wire). */
     readonly subscriptionProfile?: SubscriptionDispatchProfile | null;
+    /** Bound subscription account for the delegated Anthropic path. */
+    readonly preferredAccountId?: string;
+    readonly preferredAccountGroup?: string;
+    /** Strict by default; pool fallback is an explicit endpoint opt-in. */
+    readonly boundAccountFallbackPolicy?: BoundAccountFallbackPolicy;
+    /** Preferred provider-pool key for a delegated BYO Anthropic route. */
+    readonly preferredKeyId?: string;
+    /** Strict by default; pool fallback is an explicit binding opt-in. */
+    readonly boundKeyFallbackPolicy?: BoundAccountFallbackPolicy;
     /** Per-request max-concurrency cap for the error-handler semaphore. */
     readonly maxConcurrency?: number;
     /** Instance-level web-search backend (falls back to the proxy-global one). */
@@ -338,10 +358,19 @@ interface RouteContext {
     /**
      * Per-request preferred subscription account id (provider/subscription
      * duality). Stamped by the outbound `resolveRoute` from
-     * `EndpointRoutingConfig.boundAccountId`; the account picker prefers it when
-     * schedulable (else falls back to the pool). Undefined ⇒ pool auto-schedule.
+     * `EndpointRoutingConfig.boundAccountId`; strict bindings fail when this
+     * account cannot serve. The pool is used only when the route carries the
+     * explicit `'pool'` fallback policy. Undefined ⇒ pool auto-schedule.
      */
     readonly preferredAccountId?: string;
+    /** Account-group binding projected by the outbound gateway. */
+    readonly preferredAccountGroup?: string;
+    /** Bound-account behavior; `'pool'` is the explicit fallback opt-in. */
+    readonly boundAccountFallbackPolicy?: BoundAccountFallbackPolicy;
+    /** Optional provider key selected by a resource-level gateway binding. */
+    readonly preferredKeyId?: string;
+    /** Strict by default; `'pool'` permits normal provider key selection. */
+    readonly boundKeyFallbackPolicy?: BoundAccountFallbackPolicy;
     /**
      * OPAQUE per-account subscription config (opencodego-only). Populated by the
      * route resolver from the subscription registry's `getOpenCodeGoConfig()`
@@ -430,6 +459,10 @@ interface UsageRecordImportInput {
     rawUsage?: unknown;
     runId?: string | null;
     eventId?: string | null;
+    /** Safe prompt-cache-key provenance; raw key material is never recorded. */
+    cacheKeySource?: UsageCacheKeySource;
+    /** Whether the gateway, rather than the client, attached the cache key. */
+    cacheKeyInjected?: boolean;
     /**
      * OPTIONAL per-request audit correlation key (request-audit-log) — the outbound
      * relay taps set this to the request's `http.ServerResponse` so the recorder can

package/dist/provider-proxy/types.d.ts

@@ -1,9 +1,11 @@
 import http from 'node:http';
 import { ThinkLevel } from '@omnicross/contracts/completion-types';
+import { UsageCacheKeySource } from '@omnicross/contracts/usage-stats-types';
 import { SubscriptionProviderId, OpenCodeGoTokenConfig, OpenCodeGoScenario, OpenCodeGoModelEntry } from '@omnicross/contracts/subscription-types';
 import { UsageEngineOrigin, UsageTokens } from '@omnicross/contracts/usage-types';
 import { ApiKeyPoolService } from '../completion/ApiKeyPoolService.js';
 import { AuthSource } from '../pipeline/AuthSource.js';
+import { BoundAccountFallbackPolicy } from '../pipeline/BoundAccountSelectionError.js';
 import { SubscriptionAuthProfile } from '../pipeline/SubscriptionAuthSource.js';
 import { AuthStrategy } from '../pipeline/SubscriptionAuthStrategy.js';
 import { ProviderConfigSource } from '../ports/provider-config-source.js';
@@ -161,6 +163,15 @@ interface AnthropicRouteHandlerParams {
     /** Lazy per-request resolver for the pass-through Bearer (takes precedence over the static one). */
     readonly resolvePassThroughAuthToken?: (() => Promise<string | null>) | null;
     readonly subscriptionProfile?: SubscriptionDispatchProfile | null;
+    /** Bound subscription account forwarded to the host's Anthropic handler. */
+    readonly preferredAccountId?: string;
+    readonly preferredAccountGroup?: string;
+    /** Strict by default; pool fallback is an explicit endpoint opt-in. */
+    readonly boundAccountFallbackPolicy?: BoundAccountFallbackPolicy;
+    /** Preferred provider-pool key selected by a resource-level binding. */
+    readonly preferredKeyId?: string;
+    /** Strict by default; pool fallback is an explicit binding opt-in. */
+    readonly boundKeyFallbackPolicy?: BoundAccountFallbackPolicy;
     readonly maxConcurrency?: number;
     /** Instance-level web-search backend; falls back to the proxy-global one. */
     readonly webSearchService?: WebSearchBackend | null;
@@ -249,6 +260,15 @@ interface AnthropicSdkHints {
     readonly extendedContext?: ExtendedContextHint | null;
     /** Subscription dispatch profile (Codex/Gemini/OpenCodeGo over the SDK wire). */
     readonly subscriptionProfile?: SubscriptionDispatchProfile | null;
+    /** Bound subscription account for the delegated Anthropic path. */
+    readonly preferredAccountId?: string;
+    readonly preferredAccountGroup?: string;
+    /** Strict by default; pool fallback is an explicit endpoint opt-in. */
+    readonly boundAccountFallbackPolicy?: BoundAccountFallbackPolicy;
+    /** Preferred provider-pool key for a delegated BYO Anthropic route. */
+    readonly preferredKeyId?: string;
+    /** Strict by default; pool fallback is an explicit binding opt-in. */
+    readonly boundKeyFallbackPolicy?: BoundAccountFallbackPolicy;
     /** Per-request max-concurrency cap for the error-handler semaphore. */
     readonly maxConcurrency?: number;
     /** Instance-level web-search backend (falls back to the proxy-global one). */
@@ -338,10 +358,19 @@ interface RouteContext {
     /**
      * Per-request preferred subscription account id (provider/subscription
      * duality). Stamped by the outbound `resolveRoute` from
-     * `EndpointRoutingConfig.boundAccountId`; the account picker prefers it when
-     * schedulable (else falls back to the pool). Undefined ⇒ pool auto-schedule.
+     * `EndpointRoutingConfig.boundAccountId`; strict bindings fail when this
+     * account cannot serve. The pool is used only when the route carries the
+     * explicit `'pool'` fallback policy. Undefined ⇒ pool auto-schedule.
      */
     readonly preferredAccountId?: string;
+    /** Account-group binding projected by the outbound gateway. */
+    readonly preferredAccountGroup?: string;
+    /** Bound-account behavior; `'pool'` is the explicit fallback opt-in. */
+    readonly boundAccountFallbackPolicy?: BoundAccountFallbackPolicy;
+    /** Optional provider key selected by a resource-level gateway binding. */
+    readonly preferredKeyId?: string;
+    /** Strict by default; `'pool'` permits normal provider key selection. */
+    readonly boundKeyFallbackPolicy?: BoundAccountFallbackPolicy;
     /**
      * OPAQUE per-account subscription config (opencodego-only). Populated by the
      * route resolver from the subscription registry's `getOpenCodeGoConfig()`
@@ -430,6 +459,10 @@ interface UsageRecordImportInput {
     rawUsage?: unknown;
     runId?: string | null;
     eventId?: string | null;
+    /** Safe prompt-cache-key provenance; raw key material is never recorded. */
+    cacheKeySource?: UsageCacheKeySource;
+    /** Whether the gateway, rather than the client, attached the cache key. */
+    cacheKeyInjected?: boolean;
     /**
      * OPTIONAL per-request audit correlation key (request-audit-log) — the outbound
      * relay taps set this to the request's `http.ServerResponse` so the recorder can

package/dist/provider-proxy.cjs

@@ -5,49 +5,55 @@
 
 
 
-var _chunkCGKLE6IWcjs = require('./chunk-CGKLE6IW.cjs');
+var _chunk4BB343BIcjs = require('./chunk-4BB343BI.cjs');
 require('./chunk-HQP3K7PU.cjs');
 require('./chunk-FZ46M34D.cjs');
-require('./chunk-46ZIFWYG.cjs');
-require('./chunk-3OPYJG76.cjs');
-require('./chunk-ZCIQ3L3R.cjs');
-require('./chunk-7FEBOPJO.cjs');
-require('./chunk-DWKQZ2SK.cjs');
-require('./chunk-4XMYPW46.cjs');
-require('./chunk-K52THW2C.cjs');
-require('./chunk-3Q6Z6JTO.cjs');
+require('./chunk-2Z4XM3H5.cjs');
+require('./chunk-OXHNSZ53.cjs');
+require('./chunk-V4TXMEJS.cjs');
+require('./chunk-OVQBNVSV.cjs');
+require('./chunk-5RSZYQJH.cjs');
+require('./chunk-OF3BECU2.cjs');
 require('./chunk-EYZYXJTJ.cjs');
-require('./chunk-YMFAJFQT.cjs');
-require('./chunk-SNYBEXLB.cjs');
+require('./chunk-2E42SAW3.cjs');
+require('./chunk-OJGQKHN5.cjs');
+require('./chunk-IIRPUVPH.cjs');
 require('./chunk-GBHYAGX3.cjs');
+require('./chunk-3OPYJG76.cjs');
+require('./chunk-3SCOLIPT.cjs');
 require('./chunk-RPII3E6Z.cjs');
 require('./chunk-6RPZADX3.cjs');
-require('./chunk-QWBWGODS.cjs');
+require('./chunk-J3QQ6JS5.cjs');
 require('./chunk-UIBD2YY5.cjs');
 require('./chunk-R3HK6R4B.cjs');
-require('./chunk-HYN75H6G.cjs');
-require('./chunk-Q27JY5RG.cjs');
 require('./chunk-QXD4MV2X.cjs');
 require('./chunk-NYUNU75A.cjs');
-require('./chunk-VQY5W4YW.cjs');
-require('./chunk-KFI44N2R.cjs');
+require('./chunk-OTZC4TNH.cjs');
+require('./chunk-YWL7YZWS.cjs');
+require('./chunk-YNJNTCSQ.cjs');
 require('./chunk-SVNDB62D.cjs');
+require('./chunk-6QQG7YG3.cjs');
+require('./chunk-25GXJCEZ.cjs');
+require('./chunk-MUHWHQVM.cjs');
+require('./chunk-Q27JY5RG.cjs');
 require('./chunk-APYG5QD7.cjs');
 require('./chunk-L74VDN4A.cjs');
 require('./chunk-4YINUUKQ.cjs');
-require('./chunk-VACWOIRE.cjs');
+require('./chunk-4VZX5F4T.cjs');
 require('./chunk-QBZJ7P2T.cjs');
 require('./chunk-4IH4EL7M.cjs');
 require('./chunk-A2YMUCBT.cjs');
-require('./chunk-UNWKG6EI.cjs');
+require('./chunk-XPIOJQS2.cjs');
 require('./chunk-FCR77GYM.cjs');
 require('./chunk-AEOZIDEB.cjs');
 require('./chunk-XSVNC2UD.cjs');
-require('./chunk-SUEGJ75D.cjs');
-require('./chunk-DDMRUL76.cjs');
-require('./chunk-JWVTXXPX.cjs');
-require('./chunk-PG7PS2NN.cjs');
-require('./chunk-3Z5BQZFM.cjs');
+require('./chunk-GDIXXKF2.cjs');
+require('./chunk-OKMJLEXX.cjs');
+require('./chunk-KBM2W6UY.cjs');
+require('./chunk-RJUONLUQ.cjs');
+require('./chunk-235MXAGX.cjs');
+require('./chunk-HVBBDBS3.cjs');
+require('./chunk-NKVZ6Z3Y.cjs');
 require('./chunk-NZYN7C3P.cjs');
 require('./chunk-JMJBSACD.cjs');
 require('./chunk-GMMT7RVN.cjs');
@@ -59,4 +65,4 @@ require('./chunk-UNEFIWXI.cjs');
 
 
 
-exports.DEFAULT_ROUTE_IDLE_MS = _chunkCGKLE6IWcjs.DEFAULT_ROUTE_IDLE_MS; exports.ProviderProxy = _chunkCGKLE6IWcjs.ProviderProxy; exports.ProviderProxyRouteMap = _chunkCGKLE6IWcjs.ProviderProxyRouteMap; exports.__resetProviderProxyForTests = _chunkCGKLE6IWcjs.__resetProviderProxyForTests; exports.extractRouteToken = _chunkCGKLE6IWcjs.extractRouteToken; exports.getProviderProxy = _chunkCGKLE6IWcjs.getProviderProxy;
+exports.DEFAULT_ROUTE_IDLE_MS = _chunk4BB343BIcjs.DEFAULT_ROUTE_IDLE_MS; exports.ProviderProxy = _chunk4BB343BIcjs.ProviderProxy; exports.ProviderProxyRouteMap = _chunk4BB343BIcjs.ProviderProxyRouteMap; exports.__resetProviderProxyForTests = _chunk4BB343BIcjs.__resetProviderProxyForTests; exports.extractRouteToken = _chunk4BB343BIcjs.extractRouteToken; exports.getProviderProxy = _chunk4BB343BIcjs.getProviderProxy;

package/dist/provider-proxy.d.cts

@@ -4,12 +4,14 @@ import { ProviderProxyDeps } from './provider-proxy/types.cjs';
 export { AnthropicIngressHandler, AnthropicIngressHandlerFactory, AnthropicRouteHandlerParams, AnthropicSdkHints, ExtendedContextHint, IngressFormat, ProxyAttribution, RetryCallback, RouteAuthMode, RouteContext, StreamEventCallback, SubscriptionDispatchProfile, SubscriptionRequestSummary, TargetProviderFormat } from './provider-proxy/types.cjs';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
+import '@omnicross/contracts/usage-stats-types';
 import '@omnicross/contracts/subscription-types';
 import '@omnicross/contracts/usage-types';
 import './completion/ApiKeyPoolService.cjs';
 import '@omnicross/contracts/llm-config';
 import './logger-4GvQNzhE.cjs';
 import './pipeline/AuthSource.cjs';
+import './pipeline/BoundAccountSelectionError.cjs';
 import './pipeline/SubscriptionAuthSource.cjs';
 import './pipeline/SubscriptionAuthStrategy.cjs';
 import './ports/provider-config-source.cjs';

package/dist/provider-proxy.d.ts

@@ -4,12 +4,14 @@ import { ProviderProxyDeps } from './provider-proxy/types.js';
 export { AnthropicIngressHandler, AnthropicIngressHandlerFactory, AnthropicRouteHandlerParams, AnthropicSdkHints, ExtendedContextHint, IngressFormat, ProxyAttribution, RetryCallback, RouteAuthMode, RouteContext, StreamEventCallback, SubscriptionDispatchProfile, SubscriptionRequestSummary, TargetProviderFormat } from './provider-proxy/types.js';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
+import '@omnicross/contracts/usage-stats-types';
 import '@omnicross/contracts/subscription-types';
 import '@omnicross/contracts/usage-types';
 import './completion/ApiKeyPoolService.js';
 import '@omnicross/contracts/llm-config';
 import './logger-4GvQNzhE.js';
 import './pipeline/AuthSource.js';
+import './pipeline/BoundAccountSelectionError.js';
 import './pipeline/SubscriptionAuthSource.js';
 import './pipeline/SubscriptionAuthStrategy.js';
 import './ports/provider-config-source.js';

package/dist/provider-proxy.js

@@ -5,49 +5,55 @@ import {
   __resetProviderProxyForTests,
   extractRouteToken,
   getProviderProxy
-} from "./chunk-FH2P4OCD.js";
+} from "./chunk-E3COOKUP.js";
 import "./chunk-VVEHS2LI.js";
 import "./chunk-46RLHI7D.js";
-import "./chunk-G2UTNSGU.js";
-import "./chunk-DK4A7DLE.js";
-import "./chunk-OQWKZCXP.js";
-import "./chunk-IB3FDI4O.js";
-import "./chunk-ZJZAOKI7.js";
-import "./chunk-C6OV7GCC.js";
-import "./chunk-IWQAX3CS.js";
-import "./chunk-BODMAL6G.js";
+import "./chunk-MYYR3HZL.js";
+import "./chunk-PEGTIPB3.js";
+import "./chunk-LVUCAWMK.js";
+import "./chunk-32O35CIF.js";
+import "./chunk-FU7EAR73.js";
+import "./chunk-LB6EBS6Y.js";
 import "./chunk-7VU7V2E4.js";
-import "./chunk-ZLX3KGXX.js";
-import "./chunk-BPKCU575.js";
+import "./chunk-FXR6N3SR.js";
+import "./chunk-SOO562NM.js";
+import "./chunk-WNKWAEUR.js";
 import "./chunk-MZNPGW5Q.js";
+import "./chunk-DK4A7DLE.js";
+import "./chunk-XXFYLL7R.js";
 import "./chunk-XTEI64OU.js";
 import "./chunk-XX6NQJMA.js";
-import "./chunk-IAXWICZU.js";
+import "./chunk-GFIZ6LQI.js";
 import "./chunk-OE6TDIWW.js";
 import "./chunk-DRWHTIIZ.js";
-import "./chunk-IK3KE3AU.js";
-import "./chunk-ZY6KU6P3.js";
 import "./chunk-JWC6APFQ.js";
 import "./chunk-5ERIZW3D.js";
-import "./chunk-5ENKBSWO.js";
-import "./chunk-HRRYG2AX.js";
+import "./chunk-PO3XB56Z.js";
+import "./chunk-N7OOJI5V.js";
+import "./chunk-23S5OPIO.js";
 import "./chunk-AVYJ4YBN.js";
+import "./chunk-OPRS4IQZ.js";
+import "./chunk-2JYRIADS.js";
+import "./chunk-DE2SRBFZ.js";
+import "./chunk-ZY6KU6P3.js";
 import "./chunk-WLYIIEAF.js";
 import "./chunk-TKJMZBAH.js";
 import "./chunk-3QFXFCHG.js";
-import "./chunk-UHGVBFU3.js";
+import "./chunk-EBLFCNPY.js";
 import "./chunk-AQ5TNQB7.js";
 import "./chunk-XEKD23J5.js";
 import "./chunk-H5JUT3KV.js";
-import "./chunk-IFXJ2BG7.js";
+import "./chunk-7C7DET6S.js";
 import "./chunk-K5NM7VAH.js";
 import "./chunk-WNY4WMRF.js";
 import "./chunk-OZFM4X3S.js";
-import "./chunk-5ZQBEOMD.js";
-import "./chunk-MFZ5437A.js";
-import "./chunk-6QZGDLL4.js";
-import "./chunk-D3TDKWRP.js";
-import "./chunk-SYQF7OIR.js";
+import "./chunk-5NJLQ6T6.js";
+import "./chunk-N5T4M4GU.js";
+import "./chunk-TOVPMMHM.js";
+import "./chunk-RJ5ZGNI3.js";
+import "./chunk-3WD4HTR2.js";
+import "./chunk-MKF46GNZ.js";
+import "./chunk-GL6XM527.js";
 import "./chunk-CDHS2QDC.js";
 import "./chunk-Y7FO65VT.js";
 import "./chunk-FMOBD2OQ.js";

package/dist/{routeResolver-C4T7yClx.d.ts → routeResolver-BxOfunbm.d.ts}

@@ -1,6 +1,6 @@
 import { ProviderConfigSource } from './ports/provider-config-source.js';
 import { IngressFormat, RouteContext } from './provider-proxy/types.js';
-import { m as OutboundEndpoint, G as ModelRef, b as EndpointRoutingConfig, R as RequestRole } from './types-lgPYQuZS.js';
+import { s as OutboundEndpoint, Q as ModelRef, c as EndpointRoutingConfig, R as RequestRole } from './types-CqZD77rS.js';
 import { SubscriptionProviderId } from '@omnicross/contracts/subscription-types';
 
 /**

package/dist/{routeResolver-CB3tvJKy.d.cts → routeResolver-D5OzD0iM.d.cts}

@@ -1,6 +1,6 @@
 import { ProviderConfigSource } from './ports/provider-config-source.cjs';
 import { IngressFormat, RouteContext } from './provider-proxy/types.cjs';
-import { m as OutboundEndpoint, G as ModelRef, b as EndpointRoutingConfig, R as RequestRole } from './types-B8Arpxn0.cjs';
+import { s as OutboundEndpoint, Q as ModelRef, c as EndpointRoutingConfig, R as RequestRole } from './types-gjJ5lJ5n.cjs';
 import { SubscriptionProviderId } from '@omnicross/contracts/subscription-types';
 
 /**

package/dist/transformer/TransformerChainExecutor.cjs

@@ -1,7 +1,7 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunk46ZIFWYGcjs = require('../chunk-46ZIFWYG.cjs');
+var _chunkIIRPUVPHcjs = require('../chunk-IIRPUVPH.cjs');
 require('../chunk-GBHYAGX3.cjs');
 
 
-exports.TransformerChainExecutor = _chunk46ZIFWYGcjs.TransformerChainExecutor;
+exports.TransformerChainExecutor = _chunkIIRPUVPHcjs.TransformerChainExecutor;

package/dist/transformer/TransformerChainExecutor.js

@@ -1,6 +1,6 @@
 import {
   TransformerChainExecutor
-} from "../chunk-G2UTNSGU.js";
+} from "../chunk-WNKWAEUR.js";
 import "../chunk-MZNPGW5Q.js";
 export {
   TransformerChainExecutor

package/dist/transformer/transformers/AnthropicTransformer.cjs

@@ -1,6 +1,7 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunk4XMYPW46cjs = require('../../chunk-4XMYPW46.cjs');
+var _chunkOXHNSZ53cjs = require('../../chunk-OXHNSZ53.cjs');
+require('../../chunk-5RSZYQJH.cjs');
 
 
-exports.AnthropicTransformer = _chunk4XMYPW46cjs.AnthropicTransformer;
+exports.AnthropicTransformer = _chunkOXHNSZ53cjs.AnthropicTransformer;