@omnicross/core 0.1.7 → 0.1.9

package/dist/provider-proxy.cjs

@@ -5,18 +5,46 @@
 
 
 
-var _chunk4BB343BIcjs = require('./chunk-4BB343BI.cjs');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _chunkXELFM7KLcjs = require('./chunk-XELFM7KL.cjs');
 require('./chunk-HQP3K7PU.cjs');
-require('./chunk-FZ46M34D.cjs');
-require('./chunk-2Z4XM3H5.cjs');
-require('./chunk-OXHNSZ53.cjs');
-require('./chunk-V4TXMEJS.cjs');
-require('./chunk-OVQBNVSV.cjs');
+require('./chunk-QVOB2DNX.cjs');
+require('./chunk-P7EM6BND.cjs');
+require('./chunk-ZQQUD66M.cjs');
+require('./chunk-5LNYGCIW.cjs');
+require('./chunk-CMVXX7ON.cjs');
 require('./chunk-5RSZYQJH.cjs');
-require('./chunk-OF3BECU2.cjs');
+require('./chunk-56QD3YW6.cjs');
 require('./chunk-EYZYXJTJ.cjs');
 require('./chunk-2E42SAW3.cjs');
-require('./chunk-OJGQKHN5.cjs');
+require('./chunk-EPN67EGP.cjs');
 require('./chunk-IIRPUVPH.cjs');
 require('./chunk-GBHYAGX3.cjs');
 require('./chunk-3OPYJG76.cjs');
@@ -48,8 +76,10 @@ require('./chunk-FCR77GYM.cjs');
 require('./chunk-AEOZIDEB.cjs');
 require('./chunk-XSVNC2UD.cjs');
 require('./chunk-GDIXXKF2.cjs');
-require('./chunk-OKMJLEXX.cjs');
-require('./chunk-KBM2W6UY.cjs');
+require('./chunk-OC6DOOFX.cjs');
+require('./chunk-RICPANBY.cjs');
+require('./chunk-77USGNRW.cjs');
+require('./chunk-AOFWNWLT.cjs');
 require('./chunk-RJUONLUQ.cjs');
 require('./chunk-235MXAGX.cjs');
 require('./chunk-HVBBDBS3.cjs');
@@ -65,4 +95,32 @@ require('./chunk-UNEFIWXI.cjs');
 
 
 
-exports.DEFAULT_ROUTE_IDLE_MS = _chunk4BB343BIcjs.DEFAULT_ROUTE_IDLE_MS; exports.ProviderProxy = _chunk4BB343BIcjs.ProviderProxy; exports.ProviderProxyRouteMap = _chunk4BB343BIcjs.ProviderProxyRouteMap; exports.__resetProviderProxyForTests = _chunk4BB343BIcjs.__resetProviderProxyForTests; exports.extractRouteToken = _chunk4BB343BIcjs.extractRouteToken; exports.getProviderProxy = _chunk4BB343BIcjs.getProviderProxy;
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.DEFAULT_ROUTE_IDLE_MS = _chunkXELFM7KLcjs.DEFAULT_ROUTE_IDLE_MS; exports.ProviderProxy = _chunkXELFM7KLcjs.ProviderProxy; exports.ProviderProxyRouteMap = _chunkXELFM7KLcjs.ProviderProxyRouteMap; exports.ROUTE_LEASE_API_VERSION = _chunkXELFM7KLcjs.ROUTE_LEASE_API_VERSION; exports.ROUTE_LEASE_CAPABILITIES = _chunkXELFM7KLcjs.ROUTE_LEASE_CAPABILITIES; exports.ROUTE_LEASE_CAPABILITIES_SCHEMA = _chunkXELFM7KLcjs.ROUTE_LEASE_CAPABILITIES_SCHEMA; exports.ROUTE_LEASE_CODEX_TOKEN_ENV = _chunkXELFM7KLcjs.ROUTE_LEASE_CODEX_TOKEN_ENV; exports.ROUTE_LEASE_DEFAULT_TTL_SECONDS = _chunkXELFM7KLcjs.ROUTE_LEASE_DEFAULT_TTL_SECONDS; exports.ROUTE_LEASE_MAX_CONSUMER_BYTES = _chunkXELFM7KLcjs.ROUTE_LEASE_MAX_CONSUMER_BYTES; exports.ROUTE_LEASE_MAX_EXECUTION_ID_BYTES = _chunkXELFM7KLcjs.ROUTE_LEASE_MAX_EXECUTION_ID_BYTES; exports.ROUTE_LEASE_MAX_IDEMPOTENCY_BYTES = _chunkXELFM7KLcjs.ROUTE_LEASE_MAX_IDEMPOTENCY_BYTES; exports.ROUTE_LEASE_MAX_MODEL_BYTES = _chunkXELFM7KLcjs.ROUTE_LEASE_MAX_MODEL_BYTES; exports.ROUTE_LEASE_MAX_SESSION_ID_BYTES = _chunkXELFM7KLcjs.ROUTE_LEASE_MAX_SESSION_ID_BYTES; exports.ROUTE_LEASE_MAX_TTL_SECONDS = _chunkXELFM7KLcjs.ROUTE_LEASE_MAX_TTL_SECONDS; exports.ROUTE_LEASE_REQUEST_SCHEMA = _chunkXELFM7KLcjs.ROUTE_LEASE_REQUEST_SCHEMA; exports.ROUTE_LEASE_RESULT_SCHEMA = _chunkXELFM7KLcjs.ROUTE_LEASE_RESULT_SCHEMA; exports.ROUTE_LEASE_RUNTIMES = _chunkXELFM7KLcjs.ROUTE_LEASE_RUNTIMES; exports.ROUTE_LEASE_RUNTIME_TABLE = _chunkXELFM7KLcjs.ROUTE_LEASE_RUNTIME_TABLE; exports.ROUTE_LEASE_SESSION_HASH_DOMAIN = _chunkXELFM7KLcjs.ROUTE_LEASE_SESSION_HASH_DOMAIN; exports.RouteLeaseError = _chunkXELFM7KLcjs.RouteLeaseError; exports.RouteLeaseManager = _chunkXELFM7KLcjs.RouteLeaseManager; exports.RouteLeaseTargetResolver = _chunkXELFM7KLcjs.RouteLeaseTargetResolver; exports.SYSTEM_ROUTE_LEASE_CLOCK = _chunkXELFM7KLcjs.SYSTEM_ROUTE_LEASE_CLOCK; exports.__resetProviderProxyForTests = _chunkXELFM7KLcjs.__resetProviderProxyForTests; exports.canonicalizeRouteLeasePayload = _chunkXELFM7KLcjs.canonicalizeRouteLeasePayload; exports.extractRouteToken = _chunkXELFM7KLcjs.extractRouteToken; exports.getProviderProxy = _chunkXELFM7KLcjs.getProviderProxy; exports.hashRouteLeasePayload = _chunkXELFM7KLcjs.hashRouteLeasePayload; exports.hashRouteLeaseSessionId = _chunkXELFM7KLcjs.hashRouteLeaseSessionId; exports.isLoopbackAddress = _chunkXELFM7KLcjs.isLoopbackAddress; exports.normalizeRouteLeaseIdempotencyKey = _chunkXELFM7KLcjs.normalizeRouteLeaseIdempotencyKey; exports.normalizeRouteLeaseTtl = _chunkXELFM7KLcjs.normalizeRouteLeaseTtl; exports.parseRouteLeaseCreate = _chunkXELFM7KLcjs.parseRouteLeaseCreate; exports.routeLeaseRuntime = _chunkXELFM7KLcjs.routeLeaseRuntime;

package/dist/provider-proxy.d.cts

@@ -1,7 +1,9 @@
-import { P as ProviderProxy } from './ProviderProxy-CnMQYN59.cjs';
-export { D as DEFAULT_ROUTE_IDLE_MS, a as ProviderProxyRouteMap } from './ProviderProxy-CnMQYN59.cjs';
-import { ProviderProxyDeps } from './provider-proxy/types.cjs';
-export { AnthropicIngressHandler, AnthropicIngressHandlerFactory, AnthropicRouteHandlerParams, AnthropicSdkHints, ExtendedContextHint, IngressFormat, ProxyAttribution, RetryCallback, RouteAuthMode, RouteContext, StreamEventCallback, SubscriptionDispatchProfile, SubscriptionRequestSummary, TargetProviderFormat } from './provider-proxy/types.cjs';
+import { b as RouteRegistrationOptions, P as ProviderProxy } from './ProviderProxy-QdwNV6l1.cjs';
+export { D as DEFAULT_ROUTE_IDLE_MS, a as ProviderProxyRouteMap, R as RouteEvictionReason, i as isLoopbackAddress } from './ProviderProxy-QdwNV6l1.cjs';
+import { IngressFormat, RouteContext, ProviderProxyDeps } from './provider-proxy/types.cjs';
+export { AnthropicIngressHandler, AnthropicIngressHandlerFactory, AnthropicRouteHandlerParams, AnthropicSdkHints, ExtendedContextHint, ProxyAttribution, RetryCallback, RouteAuthMode, RouteLeaseUsageAttribution, StreamEventCallback, SubscriptionDispatchProfile, SubscriptionRequestSummary, TargetProviderFormat } from './provider-proxy/types.cjs';
+import { g as GatewayBindingTarget } from './types-C2MwkLah.cjs';
+import { ProviderConfigSource } from './ports/provider-config-source.cjs';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
@@ -14,11 +16,255 @@ import './pipeline/AuthSource.cjs';
 import './pipeline/BoundAccountSelectionError.cjs';
 import './pipeline/SubscriptionAuthSource.cjs';
 import './pipeline/SubscriptionAuthStrategy.cjs';
-import './ports/provider-config-source.cjs';
-import './transformer/types.cjs';
-import './transformer/TransformerService.cjs';
 import './ports/web-search-backend.cjs';
 import '@omnicross/contracts/websearch-types';
+import './transformer/types.cjs';
+import './transformer/TransformerService.cjs';
+import '@omnicross/contracts/account-tokens-types';
+import '@omnicross/contracts/audit-types';
+import '@omnicross/contracts/billing-types';
+import '@omnicross/contracts/health-logging-types';
+import '@omnicross/contracts/voucher-types';
+import '@omnicross/contracts/webhook-types';
+import './keyPolicy-zdWTu3CQ.cjs';
+
+declare const ROUTE_LEASE_REQUEST_SCHEMA: "omnicross.route-lease.request/1";
+declare const ROUTE_LEASE_RESULT_SCHEMA: "omnicross.route-lease/1";
+declare const ROUTE_LEASE_CAPABILITIES_SCHEMA: "omnicross.route-lease.capabilities/1";
+declare const ROUTE_LEASE_API_VERSION: 1;
+declare const ROUTE_LEASE_DEFAULT_TTL_SECONDS = 600;
+declare const ROUTE_LEASE_MAX_TTL_SECONDS = 3600;
+declare const ROUTE_LEASE_MAX_IDEMPOTENCY_BYTES = 256;
+declare const ROUTE_LEASE_MAX_CONSUMER_BYTES = 64;
+declare const ROUTE_LEASE_MAX_EXECUTION_ID_BYTES = 128;
+declare const ROUTE_LEASE_MAX_SESSION_ID_BYTES = 512;
+declare const ROUTE_LEASE_MAX_MODEL_BYTES = 256;
+declare const ROUTE_LEASE_SESSION_HASH_DOMAIN = "omnicross.route-lease.session/v1";
+declare const ROUTE_LEASE_CODEX_TOKEN_ENV = "OMNICROSS_CODEX_ROUTE_TOKEN";
+declare const ROUTE_LEASE_RUNTIMES: readonly ["claude", "codex"];
+type RouteLeaseRuntime = (typeof ROUTE_LEASE_RUNTIMES)[number];
+type RouteLeaseUpstream = GatewayBindingTarget;
+type RouteLeaseStatus = 'active' | 'released' | 'expired';
+interface RuntimeLaunchDescriptor {
+    readonly env: Record<string, string>;
+    readonly extraArgs: string[];
+}
+interface RouteLeaseExecutionRequest {
+    readonly runId?: string;
+    readonly stageId?: string;
+    readonly attempt?: number;
+    readonly sessionId?: string;
+}
+interface RouteLeaseExecutionMetadata {
+    readonly runId?: string;
+    readonly stageId?: string;
+    readonly attempt?: number;
+    readonly sessionIdHash?: string;
+}
+interface RouteLeaseRequest {
+    readonly schemaVersion: typeof ROUTE_LEASE_REQUEST_SCHEMA;
+    readonly consumer: string;
+    readonly runtime: RouteLeaseRuntime;
+    readonly upstream: RouteLeaseUpstream;
+    readonly model: string;
+    readonly execution?: RouteLeaseExecutionRequest;
+    readonly ttlSeconds?: number;
+}
+interface NormalizedRouteLeaseRequest {
+    readonly schemaVersion: typeof ROUTE_LEASE_REQUEST_SCHEMA;
+    readonly consumer: string;
+    readonly runtime: RouteLeaseRuntime;
+    readonly upstream: RouteLeaseUpstream;
+    readonly model: string;
+    readonly execution?: RouteLeaseExecutionMetadata;
+    readonly ttlSeconds: number;
+}
+interface NormalizedRouteLeaseCreate {
+    readonly request: NormalizedRouteLeaseRequest;
+    readonly idempotencyKey: string;
+    readonly payloadHash: string;
+}
+interface RouteLeaseMetadata {
+    readonly leaseId: string;
+    readonly consumer: string;
+    readonly runtime: RouteLeaseRuntime;
+    readonly upstream: RouteLeaseUpstream;
+    readonly model: string;
+    readonly createdAt: string;
+    readonly expiresAt: string;
+    readonly lastActivityAt?: string;
+    readonly status: RouteLeaseStatus;
+    readonly execution?: RouteLeaseExecutionMetadata;
+}
+interface RouteLeaseCreateResult extends RouteLeaseMetadata {
+    readonly schemaVersion: typeof ROUTE_LEASE_RESULT_SCHEMA;
+    readonly status: 'active';
+    readonly launch: RuntimeLaunchDescriptor;
+}
+interface RouteLeaseRenewResult {
+    readonly leaseId: string;
+    readonly expiresAt: string;
+    readonly status: 'active';
+}
+interface RouteLeaseReleaseResult {
+    readonly leaseId: string;
+    readonly released: boolean;
+}
+interface RouteLeaseCapabilities {
+    readonly schemaVersion: typeof ROUTE_LEASE_CAPABILITIES_SCHEMA;
+    readonly runtimes: readonly ['claude', 'codex'];
+    readonly upstreamKinds: readonly ['provider', 'account', 'account-group', 'account-pool'];
+    readonly leaseApiVersion: 1;
+    readonly codexAuthMode: 'env_key';
+    readonly maxTtlSeconds: 3600;
+}
+declare const ROUTE_LEASE_CAPABILITIES: RouteLeaseCapabilities;
+declare const ROUTE_LEASE_RUNTIME_TABLE: Readonly<Record<RouteLeaseRuntime, {
+    readonly endpoint: 'messages' | 'responses';
+    readonly ingressFormat: IngressFormat;
+    readonly wirePath: '/v1/messages' | '/openai/responses';
+}>>;
+type RouteLeaseErrorCode = 'invalid_request' | 'runtime_unsupported' | 'model_not_configured' | 'format_unsupported' | 'control_unauthorized' | 'upstream_not_found' | 'lease_not_found' | 'idempotency_conflict' | 'upstream_unavailable' | 'lease_expired' | 'upstream_exhausted' | 'daemon_not_ready';
+declare class RouteLeaseError extends Error {
+    readonly code: RouteLeaseErrorCode;
+    readonly type: "route_lease_error";
+    readonly status: number;
+    readonly retryable: boolean;
+    readonly retryAfterSeconds?: number;
+    constructor(code: RouteLeaseErrorCode, message: string, options?: {
+        status?: number;
+        retryable?: boolean;
+        retryAfterSeconds?: number;
+        cause?: unknown;
+    });
+    toResponse(): {
+        error: {
+            type: 'route_lease_error';
+            code: RouteLeaseErrorCode;
+            message: string;
+            retryable: boolean;
+        };
+    };
+}
+declare function normalizeRouteLeaseIdempotencyKey(value: unknown): string;
+declare function normalizeRouteLeaseTtl(value: unknown): number;
+declare function hashRouteLeaseSessionId(sessionId: string, hmacKey?: Uint8Array): string;
+/** Stable JSON form with recursive object-key sorting and JSON array ordering. */
+declare function canonicalizeRouteLeasePayload(value: unknown): string;
+declare function hashRouteLeasePayload(value: unknown): string;
+declare function parseRouteLeaseCreate(raw: unknown, idempotencyHeader: unknown, hmacKey?: Uint8Array): NormalizedRouteLeaseCreate;
+declare function routeLeaseRuntime(runtime: RouteLeaseRuntime): (typeof ROUTE_LEASE_RUNTIME_TABLE)[RouteLeaseRuntime];
+interface RouteLeaseTargetResolverPort {
+    resolve(request: NormalizedRouteLeaseRequest): Promise<RouteContext>;
+}
+interface RouteLeaseDescriptorPort {
+    has(runtime: RouteLeaseRuntime): boolean;
+    build(runtime: RouteLeaseRuntime, input: {
+        readonly proxyBaseUrl: string;
+        readonly model: string;
+        readonly routeToken: string;
+    }): RuntimeLaunchDescriptor;
+}
+
+interface RouteLeaseClock {
+    now(): number;
+    setTimeout(callback: () => void, delayMs: number): unknown;
+    clearTimeout(handle: unknown): void;
+}
+declare const SYSTEM_ROUTE_LEASE_CLOCK: RouteLeaseClock;
+interface RouteLeaseRoutePort {
+    isReady(): boolean;
+    getBaseUrl(): string;
+    addRoute(context: RouteContext, options?: number | RouteRegistrationOptions): string;
+    renewRoute(token: string, idleMs?: number): boolean;
+    removeRoute(token: string): boolean;
+}
+interface RouteLeaseLogger {
+    warn(message: string, meta?: Record<string, unknown>): void;
+}
+interface RouteLeaseManagerOptions {
+    readonly clock?: RouteLeaseClock;
+    readonly hmacKey?: Uint8Array;
+    readonly tombstoneMaxCount?: number;
+    readonly tombstoneMaxAgeMs?: number;
+    readonly logger?: RouteLeaseLogger;
+    /** Test-only fault seam after records are published but before create returns. */
+    readonly afterPublish?: () => void;
+}
+interface RouteLeaseCreateOutcome {
+    readonly created: boolean;
+    readonly result: RouteLeaseCreateResult;
+}
+declare class RouteLeaseManager {
+    private readonly routePort;
+    private readonly targetResolver;
+    private readonly descriptors;
+    private readonly active;
+    private readonly idempotency;
+    private readonly pendingCreates;
+    private readonly tombstones;
+    private readonly clock;
+    private readonly hmacKey;
+    private readonly tombstoneMaxCount;
+    private readonly tombstoneMaxAgeMs;
+    private readonly logger?;
+    private readonly afterPublish?;
+    private closed;
+    constructor(routePort: RouteLeaseRoutePort, targetResolver: RouteLeaseTargetResolverPort, descriptors: RouteLeaseDescriptorPort, options?: RouteLeaseManagerOptions);
+    parse(raw: unknown, idempotencyKey: unknown): NormalizedRouteLeaseCreate;
+    createFromRequest(raw: unknown, idempotencyKey: unknown): Promise<RouteLeaseCreateOutcome>;
+    create(input: NormalizedRouteLeaseCreate): Promise<RouteLeaseCreateOutcome>;
+    private createNew;
+    list(): RouteLeaseMetadata[];
+    get(leaseId: string): RouteLeaseMetadata;
+    renew(leaseId: string, ttlSeconds: number): RouteLeaseRenewResult;
+    release(leaseId: string): RouteLeaseReleaseResult;
+    shutdown(): void;
+    activeCount(): number;
+    private assertOpen;
+    private noteActivity;
+    private onRouteEvicted;
+    private expire;
+    private finalize;
+    private safeRemoveRoute;
+    private pruneTombstones;
+}
+
+interface RouteLeaseProviderKeyPreflight {
+    hasUsableKey(providerId: string, keyId: string): Promise<boolean>;
+    hasUsableKeys(providerId: string): Promise<boolean>;
+    getKeyAvailability?(providerId: string, keyId: string): Promise<'usable' | 'unavailable' | 'not-found'>;
+    getPoolAvailability?(providerId: string): Promise<{
+        readonly outcome: 'usable';
+    } | {
+        readonly outcome: 'empty' | 'unavailable';
+    } | {
+        readonly outcome: 'exhausted';
+        readonly retryAfterSeconds: number;
+    }>;
+}
+interface RouteLeaseSubscriptionPreflight {
+    assertAvailable(upstream: Exclude<RouteLeaseUpstream, {
+        kind: 'provider';
+    }>, model: string): Promise<void>;
+}
+interface RouteLeaseTargetResolverOptions {
+    readonly providerKeys?: RouteLeaseProviderKeyPreflight;
+    readonly subscriptions?: RouteLeaseSubscriptionPreflight;
+}
+/**
+ * Reuses the outbound GatewayBinding projection and route resolver with a
+ * non-persistent, strict binding. Host-only credential/account checks arrive
+ * through narrow secret-free preflight ports.
+ */
+declare class RouteLeaseTargetResolver implements RouteLeaseTargetResolverPort {
+    private readonly llmConfig;
+    private readonly options;
+    constructor(llmConfig: ProviderConfigSource, options?: RouteLeaseTargetResolverOptions);
+    resolve(request: NormalizedRouteLeaseRequest): Promise<RouteContext>;
+    private preflightTarget;
+    private preflightSubscription;
+}
 
 /**
  * providerProxyRouter — method+path dispatch + route-token auth for the resident
@@ -72,4 +318,4 @@ declare function getProviderProxy(deps?: ProviderProxyDeps): ProviderProxy;
 /** Reset the singleton (tests / teardown only). */
 declare function __resetProviderProxyForTests(): void;
 
-export { ProviderProxy, ProviderProxyDeps, __resetProviderProxyForTests, extractRouteToken, getProviderProxy };
+export { IngressFormat, type NormalizedRouteLeaseCreate, type NormalizedRouteLeaseRequest, ProviderProxy, ProviderProxyDeps, ROUTE_LEASE_API_VERSION, ROUTE_LEASE_CAPABILITIES, ROUTE_LEASE_CAPABILITIES_SCHEMA, ROUTE_LEASE_CODEX_TOKEN_ENV, ROUTE_LEASE_DEFAULT_TTL_SECONDS, ROUTE_LEASE_MAX_CONSUMER_BYTES, ROUTE_LEASE_MAX_EXECUTION_ID_BYTES, ROUTE_LEASE_MAX_IDEMPOTENCY_BYTES, ROUTE_LEASE_MAX_MODEL_BYTES, ROUTE_LEASE_MAX_SESSION_ID_BYTES, ROUTE_LEASE_MAX_TTL_SECONDS, ROUTE_LEASE_REQUEST_SCHEMA, ROUTE_LEASE_RESULT_SCHEMA, ROUTE_LEASE_RUNTIMES, ROUTE_LEASE_RUNTIME_TABLE, ROUTE_LEASE_SESSION_HASH_DOMAIN, RouteContext, type RouteLeaseCapabilities, type RouteLeaseClock, type RouteLeaseCreateOutcome, type RouteLeaseCreateResult, type RouteLeaseDescriptorPort, RouteLeaseError, type RouteLeaseErrorCode, type RouteLeaseExecutionMetadata, type RouteLeaseExecutionRequest, type RouteLeaseLogger, RouteLeaseManager, type RouteLeaseManagerOptions, type RouteLeaseMetadata, type RouteLeaseProviderKeyPreflight, type RouteLeaseReleaseResult, type RouteLeaseRenewResult, type RouteLeaseRequest, type RouteLeaseRoutePort, type RouteLeaseRuntime, type RouteLeaseStatus, type RouteLeaseSubscriptionPreflight, RouteLeaseTargetResolver, type RouteLeaseTargetResolverOptions, type RouteLeaseTargetResolverPort, type RouteLeaseUpstream, RouteRegistrationOptions, type RuntimeLaunchDescriptor, SYSTEM_ROUTE_LEASE_CLOCK, __resetProviderProxyForTests, canonicalizeRouteLeasePayload, extractRouteToken, getProviderProxy, hashRouteLeasePayload, hashRouteLeaseSessionId, normalizeRouteLeaseIdempotencyKey, normalizeRouteLeaseTtl, parseRouteLeaseCreate, routeLeaseRuntime };

package/dist/provider-proxy.d.ts

@@ -1,7 +1,9 @@
-import { P as ProviderProxy } from './ProviderProxy-C-xqrkKi.js';
-export { D as DEFAULT_ROUTE_IDLE_MS, a as ProviderProxyRouteMap } from './ProviderProxy-C-xqrkKi.js';
-import { ProviderProxyDeps } from './provider-proxy/types.js';
-export { AnthropicIngressHandler, AnthropicIngressHandlerFactory, AnthropicRouteHandlerParams, AnthropicSdkHints, ExtendedContextHint, IngressFormat, ProxyAttribution, RetryCallback, RouteAuthMode, RouteContext, StreamEventCallback, SubscriptionDispatchProfile, SubscriptionRequestSummary, TargetProviderFormat } from './provider-proxy/types.js';
+import { b as RouteRegistrationOptions, P as ProviderProxy } from './ProviderProxy--ROec6VI.js';
+export { D as DEFAULT_ROUTE_IDLE_MS, a as ProviderProxyRouteMap, R as RouteEvictionReason, i as isLoopbackAddress } from './ProviderProxy--ROec6VI.js';
+import { IngressFormat, RouteContext, ProviderProxyDeps } from './provider-proxy/types.js';
+export { AnthropicIngressHandler, AnthropicIngressHandlerFactory, AnthropicRouteHandlerParams, AnthropicSdkHints, ExtendedContextHint, ProxyAttribution, RetryCallback, RouteAuthMode, RouteLeaseUsageAttribution, StreamEventCallback, SubscriptionDispatchProfile, SubscriptionRequestSummary, TargetProviderFormat } from './provider-proxy/types.js';
+import { g as GatewayBindingTarget } from './types-BB8pxk_3.js';
+import { ProviderConfigSource } from './ports/provider-config-source.js';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
@@ -14,11 +16,255 @@ import './pipeline/AuthSource.js';
 import './pipeline/BoundAccountSelectionError.js';
 import './pipeline/SubscriptionAuthSource.js';
 import './pipeline/SubscriptionAuthStrategy.js';
-import './ports/provider-config-source.js';
-import './transformer/types.js';
-import './transformer/TransformerService.js';
 import './ports/web-search-backend.js';
 import '@omnicross/contracts/websearch-types';
+import './transformer/types.js';
+import './transformer/TransformerService.js';
+import '@omnicross/contracts/account-tokens-types';
+import '@omnicross/contracts/audit-types';
+import '@omnicross/contracts/billing-types';
+import '@omnicross/contracts/health-logging-types';
+import '@omnicross/contracts/voucher-types';
+import '@omnicross/contracts/webhook-types';
+import './keyPolicy-zdWTu3CQ.js';
+
+declare const ROUTE_LEASE_REQUEST_SCHEMA: "omnicross.route-lease.request/1";
+declare const ROUTE_LEASE_RESULT_SCHEMA: "omnicross.route-lease/1";
+declare const ROUTE_LEASE_CAPABILITIES_SCHEMA: "omnicross.route-lease.capabilities/1";
+declare const ROUTE_LEASE_API_VERSION: 1;
+declare const ROUTE_LEASE_DEFAULT_TTL_SECONDS = 600;
+declare const ROUTE_LEASE_MAX_TTL_SECONDS = 3600;
+declare const ROUTE_LEASE_MAX_IDEMPOTENCY_BYTES = 256;
+declare const ROUTE_LEASE_MAX_CONSUMER_BYTES = 64;
+declare const ROUTE_LEASE_MAX_EXECUTION_ID_BYTES = 128;
+declare const ROUTE_LEASE_MAX_SESSION_ID_BYTES = 512;
+declare const ROUTE_LEASE_MAX_MODEL_BYTES = 256;
+declare const ROUTE_LEASE_SESSION_HASH_DOMAIN = "omnicross.route-lease.session/v1";
+declare const ROUTE_LEASE_CODEX_TOKEN_ENV = "OMNICROSS_CODEX_ROUTE_TOKEN";
+declare const ROUTE_LEASE_RUNTIMES: readonly ["claude", "codex"];
+type RouteLeaseRuntime = (typeof ROUTE_LEASE_RUNTIMES)[number];
+type RouteLeaseUpstream = GatewayBindingTarget;
+type RouteLeaseStatus = 'active' | 'released' | 'expired';
+interface RuntimeLaunchDescriptor {
+    readonly env: Record<string, string>;
+    readonly extraArgs: string[];
+}
+interface RouteLeaseExecutionRequest {
+    readonly runId?: string;
+    readonly stageId?: string;
+    readonly attempt?: number;
+    readonly sessionId?: string;
+}
+interface RouteLeaseExecutionMetadata {
+    readonly runId?: string;
+    readonly stageId?: string;
+    readonly attempt?: number;
+    readonly sessionIdHash?: string;
+}
+interface RouteLeaseRequest {
+    readonly schemaVersion: typeof ROUTE_LEASE_REQUEST_SCHEMA;
+    readonly consumer: string;
+    readonly runtime: RouteLeaseRuntime;
+    readonly upstream: RouteLeaseUpstream;
+    readonly model: string;
+    readonly execution?: RouteLeaseExecutionRequest;
+    readonly ttlSeconds?: number;
+}
+interface NormalizedRouteLeaseRequest {
+    readonly schemaVersion: typeof ROUTE_LEASE_REQUEST_SCHEMA;
+    readonly consumer: string;
+    readonly runtime: RouteLeaseRuntime;
+    readonly upstream: RouteLeaseUpstream;
+    readonly model: string;
+    readonly execution?: RouteLeaseExecutionMetadata;
+    readonly ttlSeconds: number;
+}
+interface NormalizedRouteLeaseCreate {
+    readonly request: NormalizedRouteLeaseRequest;
+    readonly idempotencyKey: string;
+    readonly payloadHash: string;
+}
+interface RouteLeaseMetadata {
+    readonly leaseId: string;
+    readonly consumer: string;
+    readonly runtime: RouteLeaseRuntime;
+    readonly upstream: RouteLeaseUpstream;
+    readonly model: string;
+    readonly createdAt: string;
+    readonly expiresAt: string;
+    readonly lastActivityAt?: string;
+    readonly status: RouteLeaseStatus;
+    readonly execution?: RouteLeaseExecutionMetadata;
+}
+interface RouteLeaseCreateResult extends RouteLeaseMetadata {
+    readonly schemaVersion: typeof ROUTE_LEASE_RESULT_SCHEMA;
+    readonly status: 'active';
+    readonly launch: RuntimeLaunchDescriptor;
+}
+interface RouteLeaseRenewResult {
+    readonly leaseId: string;
+    readonly expiresAt: string;
+    readonly status: 'active';
+}
+interface RouteLeaseReleaseResult {
+    readonly leaseId: string;
+    readonly released: boolean;
+}
+interface RouteLeaseCapabilities {
+    readonly schemaVersion: typeof ROUTE_LEASE_CAPABILITIES_SCHEMA;
+    readonly runtimes: readonly ['claude', 'codex'];
+    readonly upstreamKinds: readonly ['provider', 'account', 'account-group', 'account-pool'];
+    readonly leaseApiVersion: 1;
+    readonly codexAuthMode: 'env_key';
+    readonly maxTtlSeconds: 3600;
+}
+declare const ROUTE_LEASE_CAPABILITIES: RouteLeaseCapabilities;
+declare const ROUTE_LEASE_RUNTIME_TABLE: Readonly<Record<RouteLeaseRuntime, {
+    readonly endpoint: 'messages' | 'responses';
+    readonly ingressFormat: IngressFormat;
+    readonly wirePath: '/v1/messages' | '/openai/responses';
+}>>;
+type RouteLeaseErrorCode = 'invalid_request' | 'runtime_unsupported' | 'model_not_configured' | 'format_unsupported' | 'control_unauthorized' | 'upstream_not_found' | 'lease_not_found' | 'idempotency_conflict' | 'upstream_unavailable' | 'lease_expired' | 'upstream_exhausted' | 'daemon_not_ready';
+declare class RouteLeaseError extends Error {
+    readonly code: RouteLeaseErrorCode;
+    readonly type: "route_lease_error";
+    readonly status: number;
+    readonly retryable: boolean;
+    readonly retryAfterSeconds?: number;
+    constructor(code: RouteLeaseErrorCode, message: string, options?: {
+        status?: number;
+        retryable?: boolean;
+        retryAfterSeconds?: number;
+        cause?: unknown;
+    });
+    toResponse(): {
+        error: {
+            type: 'route_lease_error';
+            code: RouteLeaseErrorCode;
+            message: string;
+            retryable: boolean;
+        };
+    };
+}
+declare function normalizeRouteLeaseIdempotencyKey(value: unknown): string;
+declare function normalizeRouteLeaseTtl(value: unknown): number;
+declare function hashRouteLeaseSessionId(sessionId: string, hmacKey?: Uint8Array): string;
+/** Stable JSON form with recursive object-key sorting and JSON array ordering. */
+declare function canonicalizeRouteLeasePayload(value: unknown): string;
+declare function hashRouteLeasePayload(value: unknown): string;
+declare function parseRouteLeaseCreate(raw: unknown, idempotencyHeader: unknown, hmacKey?: Uint8Array): NormalizedRouteLeaseCreate;
+declare function routeLeaseRuntime(runtime: RouteLeaseRuntime): (typeof ROUTE_LEASE_RUNTIME_TABLE)[RouteLeaseRuntime];
+interface RouteLeaseTargetResolverPort {
+    resolve(request: NormalizedRouteLeaseRequest): Promise<RouteContext>;
+}
+interface RouteLeaseDescriptorPort {
+    has(runtime: RouteLeaseRuntime): boolean;
+    build(runtime: RouteLeaseRuntime, input: {
+        readonly proxyBaseUrl: string;
+        readonly model: string;
+        readonly routeToken: string;
+    }): RuntimeLaunchDescriptor;
+}
+
+interface RouteLeaseClock {
+    now(): number;
+    setTimeout(callback: () => void, delayMs: number): unknown;
+    clearTimeout(handle: unknown): void;
+}
+declare const SYSTEM_ROUTE_LEASE_CLOCK: RouteLeaseClock;
+interface RouteLeaseRoutePort {
+    isReady(): boolean;
+    getBaseUrl(): string;
+    addRoute(context: RouteContext, options?: number | RouteRegistrationOptions): string;
+    renewRoute(token: string, idleMs?: number): boolean;
+    removeRoute(token: string): boolean;
+}
+interface RouteLeaseLogger {
+    warn(message: string, meta?: Record<string, unknown>): void;
+}
+interface RouteLeaseManagerOptions {
+    readonly clock?: RouteLeaseClock;
+    readonly hmacKey?: Uint8Array;
+    readonly tombstoneMaxCount?: number;
+    readonly tombstoneMaxAgeMs?: number;
+    readonly logger?: RouteLeaseLogger;
+    /** Test-only fault seam after records are published but before create returns. */
+    readonly afterPublish?: () => void;
+}
+interface RouteLeaseCreateOutcome {
+    readonly created: boolean;
+    readonly result: RouteLeaseCreateResult;
+}
+declare class RouteLeaseManager {
+    private readonly routePort;
+    private readonly targetResolver;
+    private readonly descriptors;
+    private readonly active;
+    private readonly idempotency;
+    private readonly pendingCreates;
+    private readonly tombstones;
+    private readonly clock;
+    private readonly hmacKey;
+    private readonly tombstoneMaxCount;
+    private readonly tombstoneMaxAgeMs;
+    private readonly logger?;
+    private readonly afterPublish?;
+    private closed;
+    constructor(routePort: RouteLeaseRoutePort, targetResolver: RouteLeaseTargetResolverPort, descriptors: RouteLeaseDescriptorPort, options?: RouteLeaseManagerOptions);
+    parse(raw: unknown, idempotencyKey: unknown): NormalizedRouteLeaseCreate;
+    createFromRequest(raw: unknown, idempotencyKey: unknown): Promise<RouteLeaseCreateOutcome>;
+    create(input: NormalizedRouteLeaseCreate): Promise<RouteLeaseCreateOutcome>;
+    private createNew;
+    list(): RouteLeaseMetadata[];
+    get(leaseId: string): RouteLeaseMetadata;
+    renew(leaseId: string, ttlSeconds: number): RouteLeaseRenewResult;
+    release(leaseId: string): RouteLeaseReleaseResult;
+    shutdown(): void;
+    activeCount(): number;
+    private assertOpen;
+    private noteActivity;
+    private onRouteEvicted;
+    private expire;
+    private finalize;
+    private safeRemoveRoute;
+    private pruneTombstones;
+}
+
+interface RouteLeaseProviderKeyPreflight {
+    hasUsableKey(providerId: string, keyId: string): Promise<boolean>;
+    hasUsableKeys(providerId: string): Promise<boolean>;
+    getKeyAvailability?(providerId: string, keyId: string): Promise<'usable' | 'unavailable' | 'not-found'>;
+    getPoolAvailability?(providerId: string): Promise<{
+        readonly outcome: 'usable';
+    } | {
+        readonly outcome: 'empty' | 'unavailable';
+    } | {
+        readonly outcome: 'exhausted';
+        readonly retryAfterSeconds: number;
+    }>;
+}
+interface RouteLeaseSubscriptionPreflight {
+    assertAvailable(upstream: Exclude<RouteLeaseUpstream, {
+        kind: 'provider';
+    }>, model: string): Promise<void>;
+}
+interface RouteLeaseTargetResolverOptions {
+    readonly providerKeys?: RouteLeaseProviderKeyPreflight;
+    readonly subscriptions?: RouteLeaseSubscriptionPreflight;
+}
+/**
+ * Reuses the outbound GatewayBinding projection and route resolver with a
+ * non-persistent, strict binding. Host-only credential/account checks arrive
+ * through narrow secret-free preflight ports.
+ */
+declare class RouteLeaseTargetResolver implements RouteLeaseTargetResolverPort {
+    private readonly llmConfig;
+    private readonly options;
+    constructor(llmConfig: ProviderConfigSource, options?: RouteLeaseTargetResolverOptions);
+    resolve(request: NormalizedRouteLeaseRequest): Promise<RouteContext>;
+    private preflightTarget;
+    private preflightSubscription;
+}
 
 /**
  * providerProxyRouter — method+path dispatch + route-token auth for the resident
@@ -72,4 +318,4 @@ declare function getProviderProxy(deps?: ProviderProxyDeps): ProviderProxy;
 /** Reset the singleton (tests / teardown only). */
 declare function __resetProviderProxyForTests(): void;
 
-export { ProviderProxy, ProviderProxyDeps, __resetProviderProxyForTests, extractRouteToken, getProviderProxy };
+export { IngressFormat, type NormalizedRouteLeaseCreate, type NormalizedRouteLeaseRequest, ProviderProxy, ProviderProxyDeps, ROUTE_LEASE_API_VERSION, ROUTE_LEASE_CAPABILITIES, ROUTE_LEASE_CAPABILITIES_SCHEMA, ROUTE_LEASE_CODEX_TOKEN_ENV, ROUTE_LEASE_DEFAULT_TTL_SECONDS, ROUTE_LEASE_MAX_CONSUMER_BYTES, ROUTE_LEASE_MAX_EXECUTION_ID_BYTES, ROUTE_LEASE_MAX_IDEMPOTENCY_BYTES, ROUTE_LEASE_MAX_MODEL_BYTES, ROUTE_LEASE_MAX_SESSION_ID_BYTES, ROUTE_LEASE_MAX_TTL_SECONDS, ROUTE_LEASE_REQUEST_SCHEMA, ROUTE_LEASE_RESULT_SCHEMA, ROUTE_LEASE_RUNTIMES, ROUTE_LEASE_RUNTIME_TABLE, ROUTE_LEASE_SESSION_HASH_DOMAIN, RouteContext, type RouteLeaseCapabilities, type RouteLeaseClock, type RouteLeaseCreateOutcome, type RouteLeaseCreateResult, type RouteLeaseDescriptorPort, RouteLeaseError, type RouteLeaseErrorCode, type RouteLeaseExecutionMetadata, type RouteLeaseExecutionRequest, type RouteLeaseLogger, RouteLeaseManager, type RouteLeaseManagerOptions, type RouteLeaseMetadata, type RouteLeaseProviderKeyPreflight, type RouteLeaseReleaseResult, type RouteLeaseRenewResult, type RouteLeaseRequest, type RouteLeaseRoutePort, type RouteLeaseRuntime, type RouteLeaseStatus, type RouteLeaseSubscriptionPreflight, RouteLeaseTargetResolver, type RouteLeaseTargetResolverOptions, type RouteLeaseTargetResolverPort, type RouteLeaseUpstream, RouteRegistrationOptions, type RuntimeLaunchDescriptor, SYSTEM_ROUTE_LEASE_CLOCK, __resetProviderProxyForTests, canonicalizeRouteLeasePayload, extractRouteToken, getProviderProxy, hashRouteLeasePayload, hashRouteLeaseSessionId, normalizeRouteLeaseIdempotencyKey, normalizeRouteLeaseTtl, parseRouteLeaseCreate, routeLeaseRuntime };