@omnicross/core 0.1.9 → 0.2.0

package/dist/pipeline/AccountAllowanceScheduling.d.ts

@@ -1,30 +1,33 @@
 import { SubscriptionProviderId } from '@omnicross/contracts/subscription-types';
-import { a as AllowanceSchedulingConfig } from '../types-BB8pxk_3.js';
+import { a as AllowanceSchedulingConfig } from '../types-5T223WYQ.js';
 import { AccountAllowanceStore } from './AccountAllowanceStore.js';
-import '@omnicross/contracts/account-tokens-types';
-import '@omnicross/contracts/audit-types';
-import '@omnicross/contracts/billing-types';
-import '@omnicross/contracts/health-logging-types';
-import '@omnicross/contracts/voucher-types';
-import '@omnicross/contracts/webhook-types';
-import '../logger-4GvQNzhE.js';
-import '../ports/provider-config-source.js';
-import '@omnicross/contracts/llm-config';
-import '../transformer/types.js';
-import '@omnicross/contracts/completion-types';
-import '../transformer/TransformerService.js';
-import '../ProviderProxy--ROec6VI.js';
-import '../provider-proxy/types.js';
+import '../types-Bd72H4SB.js';
+import '@omnicross/contracts/image-generation-types';
+import '../types-CVRge76p.js';
 import 'node:http';
+import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
 import '@omnicross/contracts/usage-types';
 import '../completion/ApiKeyPoolService.js';
+import '@omnicross/contracts/llm-config';
+import '../logger-4GvQNzhE.js';
 import './AuthSource.js';
 import './BoundAccountSelectionError.js';
 import './SubscriptionAuthSource.js';
 import './SubscriptionAuthStrategy.js';
+import '../ports/provider-config-source.js';
+import '../transformer/types.js';
+import '../transformer/TransformerService.js';
 import '../ports/web-search-backend.js';
 import '@omnicross/contracts/websearch-types';
+import 'node:fs/promises';
+import '@omnicross/contracts/account-tokens-types';
+import '@omnicross/contracts/audit-types';
+import '@omnicross/contracts/billing-types';
+import '@omnicross/contracts/health-logging-types';
+import '@omnicross/contracts/voucher-types';
+import '@omnicross/contracts/webhook-types';
+import '../ProviderProxy-DYoY5XoT.js';
 import '../keyPolicy-zdWTu3CQ.js';
 import '@omnicross/contracts/account-allowance-types';
 

package/dist/pipeline/LlmConfigProviderAuth.cjs

@@ -1,8 +1,8 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkQ27JY5RGcjs = require('../chunk-Q27JY5RG.cjs');
-require('../chunk-A2YMUCBT.cjs');
+var _chunkOIKREZVQcjs = require('../chunk-OIKREZVQ.cjs');
 require('../chunk-UNEFIWXI.cjs');
+require('../chunk-A2YMUCBT.cjs');
 
 
-exports.LlmConfigProviderAuth = _chunkQ27JY5RGcjs.LlmConfigProviderAuth;
+exports.LlmConfigProviderAuth = _chunkOIKREZVQcjs.LlmConfigProviderAuth;

package/dist/pipeline/LlmConfigProviderAuth.js

@@ -1,8 +1,8 @@
 import {
   LlmConfigProviderAuth
-} from "../chunk-ZY6KU6P3.js";
-import "../chunk-H5JUT3KV.js";
+} from "../chunk-HOMUGKHR.js";
 import "../chunk-HUZZZ3JL.js";
+import "../chunk-H5JUT3KV.js";
 export {
   LlmConfigProviderAuth
 };

package/dist/pipeline/SubscriptionAccountHealth.cjs

@@ -10,7 +10,7 @@
 
 
 
-var _chunkYWL7YZWScjs = require('../chunk-YWL7YZWS.cjs');
+var _chunk7LRTPNFLcjs = require('../chunk-7LRTPNFL.cjs');
 
 
 
@@ -23,4 +23,4 @@ var _chunkYWL7YZWScjs = require('../chunk-YWL7YZWS.cjs');
 
 
 
-exports.ACCOUNT_HEALTH_DIAGNOSTIC_LIMIT = _chunkYWL7YZWScjs.ACCOUNT_HEALTH_DIAGNOSTIC_LIMIT; exports.AUTH_ERROR_TTL_MS = _chunkYWL7YZWScjs.AUTH_ERROR_TTL_MS; exports.MAX_QUOTA_COOLDOWN_MS = _chunkYWL7YZWScjs.MAX_QUOTA_COOLDOWN_MS; exports.OVERLOAD_ENABLED_DEFAULT = _chunkYWL7YZWScjs.OVERLOAD_ENABLED_DEFAULT; exports.OVERLOAD_TTL_MS = _chunkYWL7YZWScjs.OVERLOAD_TTL_MS; exports.SERVER_ERROR_TTL_MS = _chunkYWL7YZWScjs.SERVER_ERROR_TTL_MS; exports.SubscriptionAccountHealth = _chunkYWL7YZWScjs.SubscriptionAccountHealth; exports.__resetSharedAccountHealthForTests = _chunkYWL7YZWScjs.__resetSharedAccountHealthForTests; exports.getSharedAccountHealth = _chunkYWL7YZWScjs.getSharedAccountHealth; exports.resolveResetSeconds = _chunkYWL7YZWScjs.resolveResetSeconds; exports.setSharedAccountHealth = _chunkYWL7YZWScjs.setSharedAccountHealth;
+exports.ACCOUNT_HEALTH_DIAGNOSTIC_LIMIT = _chunk7LRTPNFLcjs.ACCOUNT_HEALTH_DIAGNOSTIC_LIMIT; exports.AUTH_ERROR_TTL_MS = _chunk7LRTPNFLcjs.AUTH_ERROR_TTL_MS; exports.MAX_QUOTA_COOLDOWN_MS = _chunk7LRTPNFLcjs.MAX_QUOTA_COOLDOWN_MS; exports.OVERLOAD_ENABLED_DEFAULT = _chunk7LRTPNFLcjs.OVERLOAD_ENABLED_DEFAULT; exports.OVERLOAD_TTL_MS = _chunk7LRTPNFLcjs.OVERLOAD_TTL_MS; exports.SERVER_ERROR_TTL_MS = _chunk7LRTPNFLcjs.SERVER_ERROR_TTL_MS; exports.SubscriptionAccountHealth = _chunk7LRTPNFLcjs.SubscriptionAccountHealth; exports.__resetSharedAccountHealthForTests = _chunk7LRTPNFLcjs.__resetSharedAccountHealthForTests; exports.getSharedAccountHealth = _chunk7LRTPNFLcjs.getSharedAccountHealth; exports.resolveResetSeconds = _chunk7LRTPNFLcjs.resolveResetSeconds; exports.setSharedAccountHealth = _chunk7LRTPNFLcjs.setSharedAccountHealth;

package/dist/pipeline/SubscriptionAccountHealth.d.cts

@@ -138,6 +138,13 @@ interface RecordUpstreamOutcomeInput {
     retryAfterSeconds?: number | null;
     /** Bounded response body text for the 403-ban sniff (only read on a 403). */
     bodyText?: string;
+    /**
+     * DIAGNOSTIC-ONLY (claude-api-transform-fidelity, R11): the upstream error
+     * body's `error.type` on failure statuses (429/529/≥500). Logged, never
+     * consulted by any decision branch — a table-driven test pins that outcomes
+     * are identical with and without it.
+     */
+    upstreamErrorType?: string;
     /** Injectable clock (default the tracker's `now`). */
     now?: number;
 }

package/dist/pipeline/SubscriptionAccountHealth.d.ts

@@ -138,6 +138,13 @@ interface RecordUpstreamOutcomeInput {
     retryAfterSeconds?: number | null;
     /** Bounded response body text for the 403-ban sniff (only read on a 403). */
     bodyText?: string;
+    /**
+     * DIAGNOSTIC-ONLY (claude-api-transform-fidelity, R11): the upstream error
+     * body's `error.type` on failure statuses (429/529/≥500). Logged, never
+     * consulted by any decision branch — a table-driven test pins that outcomes
+     * are identical with and without it.
+     */
+    upstreamErrorType?: string;
     /** Injectable clock (default the tracker's `now`). */
     now?: number;
 }

package/dist/pipeline/SubscriptionAccountHealth.js

@@ -10,7 +10,7 @@ import {
   getSharedAccountHealth,
   resolveResetSeconds,
   setSharedAccountHealth
-} from "../chunk-N7OOJI5V.js";
+} from "../chunk-V2UKUTJ3.js";
 export {
   ACCOUNT_HEALTH_DIAGNOSTIC_LIMIT,
   AUTH_ERROR_TTL_MS,

package/dist/pipeline/executeProviderCall.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkMUHWHQVMcjs = require('../chunk-MUHWHQVM.cjs');
+var _chunkKQBLZMP6cjs = require('../chunk-KQBLZMP6.cjs');
 
 
-exports.executeProviderCall = _chunkMUHWHQVMcjs.executeProviderCall;
+exports.executeProviderCall = _chunkKQBLZMP6cjs.executeProviderCall;

package/dist/pipeline/executeProviderCall.d.cts

@@ -31,8 +31,8 @@ import '@omnicross/contracts/completion-types';
  *      mutated `prepareBody` output. Each site passes a DIFFERENT variable
  *      there today (proxy → post-transform `requestBody`; Adapter/Handler →
  *      the pre-transform `unifiedRequest`), so the core does not hard-code
- *      it — `responseChainRequest` is supplied by the caller when
- *      `runResponseChain` is true.
+ *      it — `responseChainRequest` may be supplied by the caller, while a
+ *      wire ingress can explicitly retain the post-endpoint Unified request.
  *
  *   2. The engine adapter and Handler check `response.ok` on the RAW fetch response
  *      BEFORE running the response chain. Those sites therefore set
@@ -113,12 +113,17 @@ interface ProviderCallContext {
     runResponseChain?: boolean;
     /**
      * The first argument passed to `executeResponseChain` when
-     * `runResponseChain` is true. This is REQUIRED in that mode because the
-     * sites diverge on which variable they pass (proxy → post-transform
-     * `requestBody`; the unified ingresses → the pre-transform request). The
-     * core never assumes it equals `prepareBody`'s output.
+     * `runResponseChain` is true. Sites diverge on which variable they pass
+     * (proxy → post-transform `requestBody`; unified ingresses → the
+     * pre-transform request), so callers can supply it explicitly. The core
+     * never assumes it equals `prepareBody`'s output.
      */
     responseChainRequest?: UnifiedChatRequest;
+    /**
+     * Use the post-endpoint, pre-target Unified request for response encoding.
+     * Opt-in preserves the historical proxy fallback to final `requestBody`.
+     */
+    preserveEndpointRequestForResponseChain?: boolean;
 }
 /**
  * Result of the common exchange.

package/dist/pipeline/executeProviderCall.d.ts

@@ -31,8 +31,8 @@ import '@omnicross/contracts/completion-types';
  *      mutated `prepareBody` output. Each site passes a DIFFERENT variable
  *      there today (proxy → post-transform `requestBody`; Adapter/Handler →
  *      the pre-transform `unifiedRequest`), so the core does not hard-code
- *      it — `responseChainRequest` is supplied by the caller when
- *      `runResponseChain` is true.
+ *      it — `responseChainRequest` may be supplied by the caller, while a
+ *      wire ingress can explicitly retain the post-endpoint Unified request.
  *
  *   2. The engine adapter and Handler check `response.ok` on the RAW fetch response
  *      BEFORE running the response chain. Those sites therefore set
@@ -113,12 +113,17 @@ interface ProviderCallContext {
     runResponseChain?: boolean;
     /**
      * The first argument passed to `executeResponseChain` when
-     * `runResponseChain` is true. This is REQUIRED in that mode because the
-     * sites diverge on which variable they pass (proxy → post-transform
-     * `requestBody`; the unified ingresses → the pre-transform request). The
-     * core never assumes it equals `prepareBody`'s output.
+     * `runResponseChain` is true. Sites diverge on which variable they pass
+     * (proxy → post-transform `requestBody`; unified ingresses → the
+     * pre-transform request), so callers can supply it explicitly. The core
+     * never assumes it equals `prepareBody`'s output.
      */
     responseChainRequest?: UnifiedChatRequest;
+    /**
+     * Use the post-endpoint, pre-target Unified request for response encoding.
+     * Opt-in preserves the historical proxy fallback to final `requestBody`.
+     */
+    preserveEndpointRequestForResponseChain?: boolean;
 }
 /**
  * Result of the common exchange.

package/dist/pipeline/executeProviderCall.js

@@ -1,6 +1,6 @@
 import {
   executeProviderCall
-} from "../chunk-DE2SRBFZ.js";
+} from "../chunk-X335TJNS.js";
 export {
   executeProviderCall
 };

package/dist/pipeline/upstreamFetch.cjs

@@ -4,7 +4,7 @@
 
 
 
-var _chunkRJUONLUQcjs = require('../chunk-RJUONLUQ.cjs');
+var _chunkOST5RJOJcjs = require('../chunk-OST5RJOJ.cjs');
 require('../chunk-235MXAGX.cjs');
 require('../chunk-HVBBDBS3.cjs');
 require('../chunk-NKVZ6Z3Y.cjs');
@@ -14,4 +14,4 @@ require('../chunk-NKVZ6Z3Y.cjs');
 
 
 
-exports.__resetUpstreamProxyForTests = _chunkRJUONLUQcjs.__resetUpstreamProxyForTests; exports.bumpUpstreamProxyGeneration = _chunkRJUONLUQcjs.bumpUpstreamProxyGeneration; exports.fetchUpstream = _chunkRJUONLUQcjs.fetchUpstream; exports.resolveUpstreamDispatcher = _chunkRJUONLUQcjs.resolveUpstreamDispatcher; exports.setUpstreamProxyResolver = _chunkRJUONLUQcjs.setUpstreamProxyResolver;
+exports.__resetUpstreamProxyForTests = _chunkOST5RJOJcjs.__resetUpstreamProxyForTests; exports.bumpUpstreamProxyGeneration = _chunkOST5RJOJcjs.bumpUpstreamProxyGeneration; exports.fetchUpstream = _chunkOST5RJOJcjs.fetchUpstream; exports.resolveUpstreamDispatcher = _chunkOST5RJOJcjs.resolveUpstreamDispatcher; exports.setUpstreamProxyResolver = _chunkOST5RJOJcjs.setUpstreamProxyResolver;

package/dist/pipeline/upstreamFetch.d.cts

@@ -57,6 +57,11 @@ interface UpstreamProxyContext {
     providerId?: string;
     /** The selected pooled account id (per-account override input). */
     accountId?: string;
+    /**
+     * Irreversible account identity allowed in debug traces. The raw `accountId`
+     * remains available to proxy, allowance, and route-attribution internals only.
+     */
+    traceAccountFingerprint?: string;
     /** Metadata-only live route activity. Never contains prompts, headers, or tokens. */
     routeActivity?: AccountRouteActivityContext;
     /**

package/dist/pipeline/upstreamFetch.d.ts

@@ -57,6 +57,11 @@ interface UpstreamProxyContext {
     providerId?: string;
     /** The selected pooled account id (per-account override input). */
     accountId?: string;
+    /**
+     * Irreversible account identity allowed in debug traces. The raw `accountId`
+     * remains available to proxy, allowance, and route-attribution internals only.
+     */
+    traceAccountFingerprint?: string;
     /** Metadata-only live route activity. Never contains prompts, headers, or tokens. */
     routeActivity?: AccountRouteActivityContext;
     /**

package/dist/pipeline/upstreamFetch.js

@@ -4,7 +4,7 @@ import {
   fetchUpstream,
   resolveUpstreamDispatcher,
   setUpstreamProxyResolver
-} from "../chunk-RJ5ZGNI3.js";
+} from "../chunk-CFSGYFOZ.js";
 import "../chunk-3WD4HTR2.js";
 import "../chunk-MKF46GNZ.js";
 import "../chunk-GL6XM527.js";

package/dist/ports.d.cts

@@ -4,8 +4,8 @@ export { AutomaticPricingSource, PricingStore } from './ports/pricing-store.cjs'
 export { ProviderConfigSource } from './ports/provider-config-source.cjs';
 export { UsageEventStore } from './ports/usage-event-store.cjs';
 export { WebSearchBackend } from './ports/web-search-backend.cjs';
-export { UsageRecorderImport as UsageSink } from './provider-proxy/types.cjs';
-export { O as OutboundCredentialStore } from './types-C2MwkLah.cjs';
+export { U as UsageSink } from './types-DsHBBk3h.cjs';
+export { O as OutboundCredentialStore } from './types-jjU24eYG.cjs';
 import '@omnicross/contracts/pricing-types';
 import '@omnicross/contracts/llm-config';
 import './transformer/types.cjs';
@@ -21,11 +21,14 @@ import './pipeline/AuthSource.cjs';
 import './pipeline/BoundAccountSelectionError.cjs';
 import './pipeline/SubscriptionAuthSource.cjs';
 import './pipeline/SubscriptionAuthStrategy.cjs';
+import '@omnicross/contracts/image-generation-types';
+import './types-CbglB73l.cjs';
+import 'node:fs/promises';
 import '@omnicross/contracts/account-tokens-types';
 import '@omnicross/contracts/audit-types';
 import '@omnicross/contracts/billing-types';
 import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
-import './ProviderProxy-QdwNV6l1.cjs';
+import './ProviderProxy-CgIcCVwk.cjs';
 import './keyPolicy-zdWTu3CQ.cjs';

package/dist/ports.d.ts

@@ -4,8 +4,8 @@ export { AutomaticPricingSource, PricingStore } from './ports/pricing-store.js';
 export { ProviderConfigSource } from './ports/provider-config-source.js';
 export { UsageEventStore } from './ports/usage-event-store.js';
 export { WebSearchBackend } from './ports/web-search-backend.js';
-export { UsageRecorderImport as UsageSink } from './provider-proxy/types.js';
-export { O as OutboundCredentialStore } from './types-BB8pxk_3.js';
+export { U as UsageSink } from './types-CVRge76p.js';
+export { O as OutboundCredentialStore } from './types-5T223WYQ.js';
 import '@omnicross/contracts/pricing-types';
 import '@omnicross/contracts/llm-config';
 import './transformer/types.js';
@@ -21,11 +21,14 @@ import './pipeline/AuthSource.js';
 import './pipeline/BoundAccountSelectionError.js';
 import './pipeline/SubscriptionAuthSource.js';
 import './pipeline/SubscriptionAuthStrategy.js';
+import '@omnicross/contracts/image-generation-types';
+import './types-Bd72H4SB.js';
+import 'node:fs/promises';
 import '@omnicross/contracts/account-tokens-types';
 import '@omnicross/contracts/audit-types';
 import '@omnicross/contracts/billing-types';
 import '@omnicross/contracts/health-logging-types';
 import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
-import './ProviderProxy--ROec6VI.js';
+import './ProviderProxy-DYoY5XoT.js';
 import './keyPolicy-zdWTu3CQ.js';

package/dist/provider-proxy/ProviderProxy.cjs

@@ -1,62 +1,65 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunkXELFM7KLcjs = require('../chunk-XELFM7KL.cjs');
+var _chunk7B56AJBBcjs = require('../chunk-7B56AJBB.cjs');
 require('../chunk-HQP3K7PU.cjs');
 require('../chunk-QVOB2DNX.cjs');
-require('../chunk-P7EM6BND.cjs');
-require('../chunk-ZQQUD66M.cjs');
-require('../chunk-5LNYGCIW.cjs');
-require('../chunk-CMVXX7ON.cjs');
+require('../chunk-7ZHBN75N.cjs');
+require('../chunk-3OPYJG76.cjs');
+require('../chunk-TVYA5JSQ.cjs');
+require('../chunk-NOITAVHA.cjs');
+require('../chunk-QWNUOR7F.cjs');
+require('../chunk-SQMAEDNE.cjs');
 require('../chunk-5RSZYQJH.cjs');
-require('../chunk-56QD3YW6.cjs');
-require('../chunk-EYZYXJTJ.cjs');
+require('../chunk-6DDYNS2B.cjs');
+require('../chunk-KIQ2HA2A.cjs');
+require('../chunk-32SRZFFP.cjs');
 require('../chunk-2E42SAW3.cjs');
-require('../chunk-EPN67EGP.cjs');
-require('../chunk-IIRPUVPH.cjs');
+require('../chunk-5UK3KLE2.cjs');
 require('../chunk-GBHYAGX3.cjs');
-require('../chunk-3OPYJG76.cjs');
-require('../chunk-3SCOLIPT.cjs');
+require('../chunk-MXI2PWIC.cjs');
 require('../chunk-RPII3E6Z.cjs');
 require('../chunk-6RPZADX3.cjs');
 require('../chunk-J3QQ6JS5.cjs');
 require('../chunk-UIBD2YY5.cjs');
 require('../chunk-R3HK6R4B.cjs');
+require('../chunk-KQBLZMP6.cjs');
+require('../chunk-OIKREZVQ.cjs');
 require('../chunk-QXD4MV2X.cjs');
 require('../chunk-NYUNU75A.cjs');
 require('../chunk-OTZC4TNH.cjs');
-require('../chunk-YWL7YZWS.cjs');
+require('../chunk-7LRTPNFL.cjs');
 require('../chunk-YNJNTCSQ.cjs');
 require('../chunk-SVNDB62D.cjs');
 require('../chunk-6QQG7YG3.cjs');
 require('../chunk-25GXJCEZ.cjs');
-require('../chunk-MUHWHQVM.cjs');
-require('../chunk-Q27JY5RG.cjs');
+require('../chunk-FX325I5Q.cjs');
+require('../chunk-AEOZIDEB.cjs');
+require('../chunk-HCOQQAZE.cjs');
 require('../chunk-APYG5QD7.cjs');
 require('../chunk-L74VDN4A.cjs');
+require('../chunk-XSVNC2UD.cjs');
 require('../chunk-4YINUUKQ.cjs');
-require('../chunk-4VZX5F4T.cjs');
+require('../chunk-T6NWPIYZ.cjs');
 require('../chunk-QBZJ7P2T.cjs');
 require('../chunk-4IH4EL7M.cjs');
+require('../chunk-JMJBSACD.cjs');
+require('../chunk-GMMT7RVN.cjs');
+require('../chunk-UNEFIWXI.cjs');
 require('../chunk-A2YMUCBT.cjs');
-require('../chunk-XPIOJQS2.cjs');
-require('../chunk-FCR77GYM.cjs');
-require('../chunk-AEOZIDEB.cjs');
-require('../chunk-XSVNC2UD.cjs');
 require('../chunk-GDIXXKF2.cjs');
-require('../chunk-OC6DOOFX.cjs');
-require('../chunk-RICPANBY.cjs');
+require('../chunk-VXRTQZF2.cjs');
+require('../chunk-WX2E2G7H.cjs');
 require('../chunk-77USGNRW.cjs');
-require('../chunk-AOFWNWLT.cjs');
-require('../chunk-RJUONLUQ.cjs');
+require('../chunk-IUL4VWNU.cjs');
+require('../chunk-OST5RJOJ.cjs');
 require('../chunk-235MXAGX.cjs');
 require('../chunk-HVBBDBS3.cjs');
 require('../chunk-NKVZ6Z3Y.cjs');
+require('../chunk-CTKM773J.cjs');
+require('../chunk-G4CZIUIB.cjs');
 require('../chunk-NZYN7C3P.cjs');
-require('../chunk-JMJBSACD.cjs');
-require('../chunk-GMMT7RVN.cjs');
-require('../chunk-UNEFIWXI.cjs');
 
 
 
-exports.ProviderProxy = _chunkXELFM7KLcjs.ProviderProxy; exports.isLoopbackAddress = _chunkXELFM7KLcjs.isLoopbackAddress;
+exports.ProviderProxy = _chunk7B56AJBBcjs.ProviderProxy; exports.isLoopbackAddress = _chunk7B56AJBBcjs.isLoopbackAddress;

package/dist/provider-proxy/ProviderProxy.d.cts

@@ -1,5 +1,5 @@
-export { P as ProviderProxy, i as isLoopbackAddress } from '../ProviderProxy-QdwNV6l1.cjs';
-import './types.cjs';
+export { P as ProviderProxy, i as isLoopbackAddress } from '../ProviderProxy-CgIcCVwk.cjs';
+import '../types-DsHBBk3h.cjs';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
@@ -17,3 +17,4 @@ import '../transformer/types.cjs';
 import '../transformer/TransformerService.cjs';
 import '../ports/web-search-backend.cjs';
 import '@omnicross/contracts/websearch-types';
+import '@omnicross/contracts/image-generation-types';

package/dist/provider-proxy/ProviderProxy.d.ts

@@ -1,5 +1,5 @@
-export { P as ProviderProxy, i as isLoopbackAddress } from '../ProviderProxy--ROec6VI.js';
-import './types.js';
+export { P as ProviderProxy, i as isLoopbackAddress } from '../ProviderProxy-DYoY5XoT.js';
+import '../types-CVRge76p.js';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
@@ -17,3 +17,4 @@ import '../transformer/types.js';
 import '../transformer/TransformerService.js';
 import '../ports/web-search-backend.js';
 import '@omnicross/contracts/websearch-types';
+import '@omnicross/contracts/image-generation-types';

package/dist/provider-proxy/ProviderProxy.js

@@ -1,61 +1,64 @@
 import {
   ProviderProxy,
   isLoopbackAddress
-} from "../chunk-CQIJCPMF.js";
+} from "../chunk-WSJE42SG.js";
 import "../chunk-VVEHS2LI.js";
 import "../chunk-WTQMX2Q6.js";
-import "../chunk-NGYOO5TO.js";
-import "../chunk-HKB656B4.js";
-import "../chunk-55FMGZ3L.js";
-import "../chunk-45FHEOKW.js";
+import "../chunk-EYGBM2VC.js";
+import "../chunk-DK4A7DLE.js";
+import "../chunk-FJNKXOWE.js";
+import "../chunk-V53ZEFXC.js";
+import "../chunk-7PIUVCKK.js";
+import "../chunk-6OC3ORW6.js";
 import "../chunk-FU7EAR73.js";
-import "../chunk-CCVRRJOX.js";
-import "../chunk-7VU7V2E4.js";
+import "../chunk-LFEH7CEO.js";
+import "../chunk-HN74IGEO.js";
+import "../chunk-QIIAMBTM.js";
 import "../chunk-FXR6N3SR.js";
-import "../chunk-UAPBLNN2.js";
-import "../chunk-WNKWAEUR.js";
+import "../chunk-AQDON6MB.js";
 import "../chunk-MZNPGW5Q.js";
-import "../chunk-DK4A7DLE.js";
-import "../chunk-XXFYLL7R.js";
+import "../chunk-ECZ3ZE2C.js";
 import "../chunk-XTEI64OU.js";
 import "../chunk-XX6NQJMA.js";
 import "../chunk-GFIZ6LQI.js";
 import "../chunk-OE6TDIWW.js";
 import "../chunk-DRWHTIIZ.js";
+import "../chunk-X335TJNS.js";
+import "../chunk-HOMUGKHR.js";
 import "../chunk-JWC6APFQ.js";
 import "../chunk-5ERIZW3D.js";
 import "../chunk-PO3XB56Z.js";
-import "../chunk-N7OOJI5V.js";
+import "../chunk-V2UKUTJ3.js";
 import "../chunk-23S5OPIO.js";
 import "../chunk-AVYJ4YBN.js";
 import "../chunk-OPRS4IQZ.js";
 import "../chunk-2JYRIADS.js";
-import "../chunk-DE2SRBFZ.js";
-import "../chunk-ZY6KU6P3.js";
+import "../chunk-6OKXH2TW.js";
+import "../chunk-WNY4WMRF.js";
+import "../chunk-N76KU6F5.js";
 import "../chunk-WLYIIEAF.js";
 import "../chunk-TKJMZBAH.js";
+import "../chunk-OZFM4X3S.js";
 import "../chunk-3QFXFCHG.js";
-import "../chunk-EBLFCNPY.js";
+import "../chunk-U47LQXPB.js";
 import "../chunk-AQ5TNQB7.js";
 import "../chunk-XEKD23J5.js";
+import "../chunk-Y7FO65VT.js";
+import "../chunk-FMOBD2OQ.js";
+import "../chunk-HUZZZ3JL.js";
 import "../chunk-H5JUT3KV.js";
-import "../chunk-7C7DET6S.js";
-import "../chunk-K5NM7VAH.js";
-import "../chunk-WNY4WMRF.js";
-import "../chunk-OZFM4X3S.js";
 import "../chunk-5NJLQ6T6.js";
-import "../chunk-2UTGX6FM.js";
-import "../chunk-S3DYFEBE.js";
+import "../chunk-4VVCXVB7.js";
+import "../chunk-R4VCO2CB.js";
 import "../chunk-WYVGULTQ.js";
-import "../chunk-N2EIM2XJ.js";
-import "../chunk-RJ5ZGNI3.js";
+import "../chunk-ZLNHPUFA.js";
+import "../chunk-CFSGYFOZ.js";
 import "../chunk-3WD4HTR2.js";
 import "../chunk-MKF46GNZ.js";
 import "../chunk-GL6XM527.js";
+import "../chunk-DEIUR2TH.js";
+import "../chunk-4JOU54M5.js";
 import "../chunk-CDHS2QDC.js";
-import "../chunk-Y7FO65VT.js";
-import "../chunk-FMOBD2OQ.js";
-import "../chunk-HUZZZ3JL.js";
 export {
   ProviderProxy,
   isLoopbackAddress

package/dist/provider-proxy/identity/codexCliHeaders.cjs

@@ -2,9 +2,11 @@
 
 
 
-var _chunk3SCOLIPTcjs = require('../../chunk-3SCOLIPT.cjs');
 
+var _chunkMXI2PWICcjs = require('../../chunk-MXI2PWIC.cjs');
 
 
 
-exports.DEFAULT_CODEX_CLI_HEADERS = _chunk3SCOLIPTcjs.DEFAULT_CODEX_CLI_HEADERS; exports.codexAcceptHeader = _chunk3SCOLIPTcjs.codexAcceptHeader; exports.extractCodexClientHeaders = _chunk3SCOLIPTcjs.extractCodexClientHeaders;
+
+
+exports.DEFAULT_CODEX_CLI_HEADERS = _chunkMXI2PWICcjs.DEFAULT_CODEX_CLI_HEADERS; exports.codexAcceptHeader = _chunkMXI2PWICcjs.codexAcceptHeader; exports.extractCodexClientHeaders = _chunkMXI2PWICcjs.extractCodexClientHeaders; exports.fillMissingHeaders = _chunkMXI2PWICcjs.fillMissingHeaders;

package/dist/provider-proxy/identity/codexCliHeaders.d.cts

@@ -1,3 +1,21 @@
+/**
+ * headerMerge — the shared outbound-header merge primitive used by the
+ * per-client header builders (`claudeCodeHeaders`, `codexCliHeaders`).
+ *
+ * Split out so neither builder has to import the other just to reuse the merge.
+ *
+ * @module provider-proxy/identity/headerMerge
+ */
+/**
+ * Copy every entry of `source` into `headers` that `headers` does not already
+ * carry (case-insensitive on the existing keys, so an `Authorization` set by the
+ * auth strategy is never shadowed by an `authorization` from a caller bag).
+ * Existing values ALWAYS win — this only fills empty slots, which is what makes
+ * the precedence chain (auth > frozen fingerprint > caller > defaults) work by
+ * simply calling it in order.
+ */
+declare function fillMissingHeaders(headers: Record<string, string>, source: Readonly<Record<string, string>>): void;
+
 /**
  * codexCliHeaders — the Codex CLI client headers the CODEX SUBSCRIPTION relay
  * puts on every `chatgpt.com/backend-api/codex/responses` request.
@@ -14,24 +32,26 @@
  * shares this relay and must stay byte-identical — sending it `originator:
  * codex_cli_rs` would be wrong and could trip its own checks.
  *
- * Modeled on claude-relay-service (`routes/openaiRoutes.js`, the codex branch).
+ * Modeled on observed Codex CLI-compatible relay behavior.
  *
  * NOT DONE HERE (deliberate, see the relay call site):
- *  - `chatgpt-account-id`: CRS sends the ChatGPT account id parsed out of the
- *    OAuth `id_token`. Guessing it wrong risks a 403 on a path that currently
- *    works, so it is left to a follow-up that can verify the value.
+ *  - `chatgpt-account-id`: compatible implementations send the ChatGPT account
+ *    id parsed out of the OAuth `id_token`. Guessing it wrong risks a 403 on a
+ *    path that currently works, so it is left to a follow-up that can verify it.
  *  - forcing `store: false` on the body: a body mutation with its own regression
  *    surface, tracked separately.
  *
  * @module provider-proxy/identity/codexCliHeaders
  */
+
 /**
  * Client markers a real `codex` CLI invocation carries. Used ONLY to fill a slot
  * the caller left empty — a forwarded real value always wins, so a genuine Codex
  * CLI keeps its own identity and only a caller that sent nothing gets these.
  *
  * `originator` is the load-bearing one: it is how the backend tells the Codex
- * CLI apart from a generic Responses client, and CRS sends it unconditionally.
+ * CLI apart from a generic Responses client, so compatible relays send it
+ * unconditionally.
  */
 declare const DEFAULT_CODEX_CLI_HEADERS: Readonly<Record<string, string>>;
 /**
@@ -42,4 +62,4 @@ declare function extractCodexClientHeaders(reqHeaders: Record<string, string | s
 /** The `accept` a Codex CLI sends, which differs by streaming mode. */
 declare function codexAcceptHeader(isStream: boolean): string;
 
-export { DEFAULT_CODEX_CLI_HEADERS, codexAcceptHeader, extractCodexClientHeaders };
+export { DEFAULT_CODEX_CLI_HEADERS, codexAcceptHeader, extractCodexClientHeaders, fillMissingHeaders };