@omnicross/core 0.2.0 → 0.2.1

package/dist/outbound-api/subscriptionRegistryPort.d.cts

@@ -1,4 +1,4 @@
-import { aG as SubscriptionDispatchProfile } from '../types-DsHBBk3h.cjs';
+import { aG as SubscriptionDispatchProfile } from '../types-BSIJdsyl.cjs';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
@@ -16,6 +16,9 @@ import '../transformer/types.cjs';
 import '../transformer/TransformerService.cjs';
 import '../ports/web-search-backend.cjs';
 import '@omnicross/contracts/websearch-types';
+import '../frontends-Doz0RaWu.cjs';
+import '@omnicross/contracts/search-types';
+import '../runtime-t8AZacFF.cjs';
 import '@omnicross/contracts/image-generation-types';
 
 /**

package/dist/outbound-api/subscriptionRegistryPort.d.ts

@@ -1,4 +1,4 @@
-import { aG as SubscriptionDispatchProfile } from '../types-CVRge76p.js';
+import { aG as SubscriptionDispatchProfile } from '../types-By9Tg6-I.js';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
@@ -16,6 +16,9 @@ import '../transformer/types.js';
 import '../transformer/TransformerService.js';
 import '../ports/web-search-backend.js';
 import '@omnicross/contracts/websearch-types';
+import '../frontends-Doz0RaWu.js';
+import '@omnicross/contracts/search-types';
+import '../runtime-t8AZacFF.js';
 import '@omnicross/contracts/image-generation-types';
 
 /**

package/dist/outbound-api/types.d.cts

@@ -1,4 +1,4 @@
-import '../types-CbglB73l.cjs';
+import '../types-Be-yt_6T.cjs';
 import '@omnicross/contracts/account-tokens-types';
 import '@omnicross/contracts/audit-types';
 import '@omnicross/contracts/billing-types';
@@ -7,10 +7,13 @@ import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import '../logger-4GvQNzhE.cjs';
 import '../ports/provider-config-source.cjs';
-import '../ProviderProxy-CgIcCVwk.cjs';
-import '../types-DsHBBk3h.cjs';
-export { X as AccountHealthConfig, A as AccountProbeConfig, a as AllowanceSchedulingConfig, W as AnthropicConfigSegment, Y as AnthropicCountTokensMode, Z as AnthropicModelsShape, C as ChatDispatchMode, b as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, c as EndpointRoutingConfig, F as FingerprintConfig, G as GatewayBinding, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, _ as ImageModelCatalogReader, I as ImagesServerConfig, k as KindMappedEndpoint, M as MessagesModelKind, l as ModelKind, m as ModelPrefixTargets, T as ModelRef, n as OutboundApiDeps, o as OutboundApiKeyCreated, p as OutboundApiKeyInfo, q as OutboundApiServerConfig, r as OutboundApiServerStatus, s as OutboundEndpoint, t as OutboundFormatUrls, u as OutboundKeyActivationMode, O as OutboundKeyDb, v as OutboundKeyDbRow, $ as OutboundKeyModelRestrictionMode, w as OutboundKeyPolicy, x as OutboundPermission, y as OutboundProxyConfig, R as RequestRole, z as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-jjU24eYG.cjs';
+import '../ProviderProxy-Bz_nkOwq.cjs';
+import '../types-BSIJdsyl.cjs';
+export { Y as AccountHealthConfig, A as AccountProbeConfig, a as AllowanceSchedulingConfig, X as AnthropicConfigSegment, Z as AnthropicCountTokensMode, _ as AnthropicModelsShape, C as ChatDispatchMode, b as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, c as EndpointRoutingConfig, F as FingerprintConfig, G as GatewayBinding, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, $ as ImageModelCatalogReader, I as ImagesServerConfig, k as KindMappedEndpoint, M as MessagesModelKind, l as ModelKind, m as ModelPrefixTargets, W as ModelRef, n as OutboundApiDeps, o as OutboundApiKeyCreated, p as OutboundApiKeyInfo, q as OutboundApiServerConfig, r as OutboundApiServerStatus, s as OutboundEndpoint, t as OutboundFormatUrls, u as OutboundKeyActivationMode, O as OutboundKeyDb, v as OutboundKeyDbRow, a0 as OutboundKeyModelRestrictionMode, w as OutboundKeyPolicy, x as OutboundPermission, y as OutboundProxyConfig, R as RequestRole, z as ResponsesModelKind, S as SearchServerConfig, U as UserMessageQueueConfig } from '../types-D-oHYusb.cjs';
 import '../pipeline/BoundAccountSelectionError.cjs';
+import '../types-CbCZqLGg.cjs';
+import '../frontends-Doz0RaWu.cjs';
+import '../runtime-t8AZacFF.cjs';
 import '@omnicross/contracts/image-generation-types';
 import 'node:fs/promises';
 import '@omnicross/contracts/llm-config';
@@ -28,3 +31,4 @@ import '../pipeline/SubscriptionAuthStrategy.cjs';
 import '../ports/web-search-backend.cjs';
 import '@omnicross/contracts/websearch-types';
 import '../keyPolicy-zdWTu3CQ.cjs';
+import '@omnicross/contracts/search-types';

package/dist/outbound-api/types.d.ts

@@ -1,4 +1,4 @@
-import '../types-Bd72H4SB.js';
+import '../types-Dm4_36V4.js';
 import '@omnicross/contracts/account-tokens-types';
 import '@omnicross/contracts/audit-types';
 import '@omnicross/contracts/billing-types';
@@ -7,10 +7,13 @@ import '@omnicross/contracts/voucher-types';
 import '@omnicross/contracts/webhook-types';
 import '../logger-4GvQNzhE.js';
 import '../ports/provider-config-source.js';
-import '../ProviderProxy-DYoY5XoT.js';
-import '../types-CVRge76p.js';
-export { X as AccountHealthConfig, A as AccountProbeConfig, a as AllowanceSchedulingConfig, W as AnthropicConfigSegment, Y as AnthropicCountTokensMode, Z as AnthropicModelsShape, C as ChatDispatchMode, b as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, c as EndpointRoutingConfig, F as FingerprintConfig, G as GatewayBinding, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, _ as ImageModelCatalogReader, I as ImagesServerConfig, k as KindMappedEndpoint, M as MessagesModelKind, l as ModelKind, m as ModelPrefixTargets, T as ModelRef, n as OutboundApiDeps, o as OutboundApiKeyCreated, p as OutboundApiKeyInfo, q as OutboundApiServerConfig, r as OutboundApiServerStatus, s as OutboundEndpoint, t as OutboundFormatUrls, u as OutboundKeyActivationMode, O as OutboundKeyDb, v as OutboundKeyDbRow, $ as OutboundKeyModelRestrictionMode, w as OutboundKeyPolicy, x as OutboundPermission, y as OutboundProxyConfig, R as RequestRole, z as ResponsesModelKind, U as UserMessageQueueConfig } from '../types-5T223WYQ.js';
+import '../ProviderProxy-Ckr6oTrE.js';
+import '../types-By9Tg6-I.js';
+export { Y as AccountHealthConfig, A as AccountProbeConfig, a as AllowanceSchedulingConfig, X as AnthropicConfigSegment, Z as AnthropicCountTokensMode, _ as AnthropicModelsShape, C as ChatDispatchMode, b as ConcurrencyQueueConfig, E as ENDPOINT_MODEL_KINDS, c as EndpointRoutingConfig, F as FingerprintConfig, G as GatewayBinding, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, $ as ImageModelCatalogReader, I as ImagesServerConfig, k as KindMappedEndpoint, M as MessagesModelKind, l as ModelKind, m as ModelPrefixTargets, W as ModelRef, n as OutboundApiDeps, o as OutboundApiKeyCreated, p as OutboundApiKeyInfo, q as OutboundApiServerConfig, r as OutboundApiServerStatus, s as OutboundEndpoint, t as OutboundFormatUrls, u as OutboundKeyActivationMode, O as OutboundKeyDb, v as OutboundKeyDbRow, a0 as OutboundKeyModelRestrictionMode, w as OutboundKeyPolicy, x as OutboundPermission, y as OutboundProxyConfig, R as RequestRole, z as ResponsesModelKind, S as SearchServerConfig, U as UserMessageQueueConfig } from '../types-Dvlpjn0d.js';
 import '../pipeline/BoundAccountSelectionError.js';
+import '../types-CbCZqLGg.js';
+import '../frontends-Doz0RaWu.js';
+import '../runtime-t8AZacFF.js';
 import '@omnicross/contracts/image-generation-types';
 import 'node:fs/promises';
 import '@omnicross/contracts/llm-config';
@@ -28,3 +31,4 @@ import '../pipeline/SubscriptionAuthStrategy.js';
 import '../ports/web-search-backend.js';
 import '@omnicross/contracts/websearch-types';
 import '../keyPolicy-zdWTu3CQ.js';
+import '@omnicross/contracts/search-types';

package/dist/outbound-api.cjs

@@ -70,22 +70,30 @@
 
 
 
-var _chunk7B56AJBBcjs = require('./chunk-7B56AJBB.cjs');
+
+
+
+
+
+
+
+var _chunkVSYQ6XYNcjs = require('./chunk-VSYQ6XYN.cjs');
+require('./chunk-E4QHVXV5.cjs');
 require('./chunk-HQP3K7PU.cjs');
 require('./chunk-QVOB2DNX.cjs');
 require('./chunk-7ZHBN75N.cjs');
+require('./chunk-GBHYAGX3.cjs');
 require('./chunk-3OPYJG76.cjs');
-require('./chunk-TVYA5JSQ.cjs');
+require('./chunk-ZAPN7XA6.cjs');
+require('./chunk-KIQ2HA2A.cjs');
 require('./chunk-NOITAVHA.cjs');
 require('./chunk-QWNUOR7F.cjs');
-require('./chunk-SQMAEDNE.cjs');
-require('./chunk-5RSZYQJH.cjs');
+require('./chunk-POUTD5AM.cjs');
 require('./chunk-6DDYNS2B.cjs');
-require('./chunk-KIQ2HA2A.cjs');
+require('./chunk-5RSZYQJH.cjs');
 require('./chunk-32SRZFFP.cjs');
 require('./chunk-2E42SAW3.cjs');
 require('./chunk-5UK3KLE2.cjs');
-require('./chunk-GBHYAGX3.cjs');
 require('./chunk-MXI2PWIC.cjs');
 require('./chunk-RPII3E6Z.cjs');
 require('./chunk-6RPZADX3.cjs');
@@ -149,13 +157,20 @@ require('./chunk-VXRTQZF2.cjs');
 require('./chunk-WX2E2G7H.cjs');
 require('./chunk-77USGNRW.cjs');
 require('./chunk-IUL4VWNU.cjs');
-require('./chunk-OST5RJOJ.cjs');
+require('./chunk-4Z3ZLLC2.cjs');
 require('./chunk-235MXAGX.cjs');
 require('./chunk-HVBBDBS3.cjs');
 require('./chunk-NKVZ6Z3Y.cjs');
-require('./chunk-CTKM773J.cjs');
+require('./chunk-UPQIWJIE.cjs');
 require('./chunk-G4CZIUIB.cjs');
-require('./chunk-NZYN7C3P.cjs');
+require('./chunk-MPXOKQJP.cjs');
+
+
+
+
+
+
+
 
 
 
@@ -250,4 +265,4 @@ require('./chunk-NZYN7C3P.cjs');
 
 
 
-exports.AUDIT_REDACTED = _chunkHCOQQAZEcjs.AUDIT_REDACTED; exports.BoundAccountSelectionError = _chunk25GXJCEZcjs.BoundAccountSelectionError; exports.ConcurrencyQueueFullError = _chunk7B56AJBBcjs.ConcurrencyQueueFullError; exports.ConcurrencyWaitCancelledError = _chunk7B56AJBBcjs.ConcurrencyWaitCancelledError; exports.ConcurrencyWaitTimeoutError = _chunk7B56AJBBcjs.ConcurrencyWaitTimeoutError; exports.DEFAULT_ACCOUNT_PROBE = _chunk7B56AJBBcjs.DEFAULT_ACCOUNT_PROBE; exports.DEFAULT_ALLOWANCE_SCHEDULING = _chunk7B56AJBBcjs.DEFAULT_ALLOWANCE_SCHEDULING; exports.DEFAULT_CONCURRENCY_QUEUE = _chunk7B56AJBBcjs.DEFAULT_CONCURRENCY_QUEUE; exports.DEFAULT_FINGERPRINT = _chunk7B56AJBBcjs.DEFAULT_FINGERPRINT; exports.DEFAULT_IMAGES_SERVER_CONFIG = _chunk7B56AJBBcjs.DEFAULT_IMAGES_SERVER_CONFIG; exports.DEFAULT_OUTBOUND_PORT = _chunk7B56AJBBcjs.DEFAULT_OUTBOUND_PORT; exports.DEFAULT_USER_MESSAGE_QUEUE = _chunk7B56AJBBcjs.DEFAULT_USER_MESSAGE_QUEUE; exports.ENDPOINT_MODEL_KINDS = _chunk4IH4EL7Mcjs.ENDPOINT_MODEL_KINDS; exports.IMAGE_SERVER_HARD_CEILINGS = _chunk7B56AJBBcjs.IMAGE_SERVER_HARD_CEILINGS; exports.KeySpendTracker = _chunk7B56AJBBcjs.KeySpendTracker; exports.KeyedMutex = _chunk7B56AJBBcjs.KeyedMutex; exports.LEGACY_OUTBOUND_PERMISSIONS = _chunk7B56AJBBcjs.LEGACY_OUTBOUND_PERMISSIONS; exports.OUTBOUND_API_SERVER_CONFIG_KEY = _chunk7B56AJBBcjs.OUTBOUND_API_SERVER_CONFIG_KEY; exports.OutboundApiServer = _chunk7B56AJBBcjs.OutboundApiServer; exports.OutboundConcurrencyGate = _chunk7B56AJBBcjs.OutboundConcurrencyGate; exports.OutboundRateLimiter = _chunk7B56AJBBcjs.OutboundRateLimiter; exports.SUBSCRIPTION_PROVIDER_IDS = _chunkT6NWPIYZcjs.SUBSCRIPTION_PROVIDER_IDS; exports.SerialQueueTimeoutError = _chunk7B56AJBBcjs.SerialQueueTimeoutError; exports.UserMessageSerialQueue = _chunk7B56AJBBcjs.UserMessageSerialQueue; exports.__resetOutboundApiServerForTests = _chunk7B56AJBBcjs.__resetOutboundApiServerForTests; exports.beginAuditCapture = _chunkFX325I5Qcjs.beginAuditCapture; exports.beginBillingCapture = _chunkAPYG5QD7cjs.beginBillingCapture; exports.boundAccountSelectionMessage = _chunk25GXJCEZcjs.boundAccountSelectionMessage; exports.candidateBackgroundModelIds = _chunk7B56AJBBcjs.candidateBackgroundModelIds; exports.candidateGatewayBindings = _chunk7B56AJBBcjs.candidateGatewayBindings; exports.checkKeyQuota = _chunk7B56AJBBcjs.checkKeyQuota; exports.classifyModelPrefix = _chunkT6NWPIYZcjs.classifyModelPrefix; exports.computeKeyExpiry = _chunk7B56AJBBcjs.computeKeyExpiry; exports.computeVoucherGrant = _chunk7B56AJBBcjs.computeVoucherGrant; exports.createIntegrationKey = _chunk7B56AJBBcjs.createIntegrationKey; exports.createNamedKey = _chunk7B56AJBBcjs.createNamedKey; exports.defaultServerConfig = _chunk7B56AJBBcjs.defaultServerConfig; exports.detectModelKind = _chunkT6NWPIYZcjs.detectModelKind; exports.detectRequestRole = _chunkT6NWPIYZcjs.detectRequestRole; exports.effectiveOutboundPermissions = _chunk7B56AJBBcjs.effectiveOutboundPermissions; exports.endpointSupportsSubscription = _chunkT6NWPIYZcjs.endpointSupportsSubscription; exports.endpointToIngressFormat = _chunkT6NWPIYZcjs.endpointToIngressFormat; exports.formatUrls = _chunk7B56AJBBcjs.formatUrls; exports.gatewayBindingToEndpointConfig = _chunk7B56AJBBcjs.gatewayBindingToEndpointConfig; exports.generateVoucherCode = _chunk7B56AJBBcjs.generateVoucherCode; exports.getOutboundApiServer = _chunk7B56AJBBcjs.getOutboundApiServer; exports.handleVoucherRedeem = _chunk7B56AJBBcjs.handleVoucherRedeem; exports.hashKey = _chunk7B56AJBBcjs.hashKey; exports.hashVoucherCode = _chunk7B56AJBBcjs.hashVoucherCode; exports.isBoundAccountSelectionError = _chunk25GXJCEZcjs.isBoundAccountSelectionError; exports.isConcurrencyRejection = _chunk7B56AJBBcjs.isConcurrencyRejection; exports.isKindMappedEndpoint = _chunkT6NWPIYZcjs.isKindMappedEndpoint; exports.isRedeemRequest = _chunk7B56AJBBcjs.isRedeemRequest; exports.isSerialQueueTimeout = _chunk7B56AJBBcjs.isSerialQueueTimeout; exports.isSubscriptionProviderId = _chunkT6NWPIYZcjs.isSubscriptionProviderId; exports.isUserMessageRequest = _chunk7B56AJBBcjs.isUserMessageRequest; exports.legacyEndpointsToBindings = _chunk7B56AJBBcjs.legacyEndpointsToBindings; exports.loadServerConfig = _chunk7B56AJBBcjs.loadServerConfig; exports.mergeServerConfig = _chunk7B56AJBBcjs.mergeServerConfig; exports.modelKindsForEndpoint = _chunkT6NWPIYZcjs.modelKindsForEndpoint; exports.newVoucherId = _chunk7B56AJBBcjs.newVoucherId; exports.normalizeAccountProbe = _chunk7B56AJBBcjs.normalizeAccountProbe; exports.normalizeAllowanceScheduling = _chunk7B56AJBBcjs.normalizeAllowanceScheduling; exports.normalizeAudit = _chunk7B56AJBBcjs.normalizeAudit; exports.normalizeBilling = _chunk7B56AJBBcjs.normalizeBilling; exports.normalizeFingerprint = _chunk7B56AJBBcjs.normalizeFingerprint; exports.normalizeGatewayBindings = _chunk7B56AJBBcjs.normalizeGatewayBindings; exports.normalizeImagesServerConfig = _chunk7B56AJBBcjs.normalizeImagesServerConfig; exports.normalizePrefixTargets = _chunk7B56AJBBcjs.normalizePrefixTargets; exports.normalizeProxyConfig = _chunk7B56AJBBcjs.normalizeProxyConfig; exports.normalizeProxySegment = _chunk7B56AJBBcjs.normalizeProxySegment; exports.normalizeQueueSegments = _chunk7B56AJBBcjs.normalizeQueueSegments; exports.normalizeServerConfig = _chunk7B56AJBBcjs.normalizeServerConfig; exports.normalizeVoucher = _chunk7B56AJBBcjs.normalizeVoucher; exports.normalizeWebhookDestination = _chunk7B56AJBBcjs.normalizeWebhookDestination; exports.normalizeWebhookSegment = _chunk7B56AJBBcjs.normalizeWebhookSegment; exports.parseModelRef = _chunkT6NWPIYZcjs.parseModelRef; exports.pickModelRefFromList = _chunkT6NWPIYZcjs.pickModelRefFromList; exports.randomBase62 = _chunk7B56AJBBcjs.randomBase62; exports.redactAuditText = _chunkHCOQQAZEcjs.redactAuditText; exports.resolveGatewayBinding = _chunk7B56AJBBcjs.resolveGatewayBinding; exports.resolvePrefixTarget = _chunkT6NWPIYZcjs.resolvePrefixTarget; exports.resolveRoute = _chunkT6NWPIYZcjs.resolveRoute; exports.saveServerConfig = _chunk7B56AJBBcjs.saveServerConfig; exports.startOfLocalDay = _chunk7B56AJBBcjs.startOfLocalDay; exports.startOfLocalWeek = _chunk7B56AJBBcjs.startOfLocalWeek; exports.toVoucherInfo = _chunk7B56AJBBcjs.toVoucherInfo; exports.validateEndpointModelConfig = _chunkT6NWPIYZcjs.validateEndpointModelConfig; exports.validateImagesServerConfig = _chunk7B56AJBBcjs.validateImagesServerConfig; exports.validateOutboundPermissions = _chunk7B56AJBBcjs.validateOutboundPermissions; exports.verifyKey = _chunk7B56AJBBcjs.verifyKey; exports.verifyPresentedKey = _chunk7B56AJBBcjs.verifyPresentedKey; exports.voucherCodePrefix = _chunk7B56AJBBcjs.voucherCodePrefix;
+exports.AUDIT_REDACTED = _chunkHCOQQAZEcjs.AUDIT_REDACTED; exports.BoundAccountSelectionError = _chunk25GXJCEZcjs.BoundAccountSelectionError; exports.ConcurrencyQueueFullError = _chunkVSYQ6XYNcjs.ConcurrencyQueueFullError; exports.ConcurrencyWaitCancelledError = _chunkVSYQ6XYNcjs.ConcurrencyWaitCancelledError; exports.ConcurrencyWaitTimeoutError = _chunkVSYQ6XYNcjs.ConcurrencyWaitTimeoutError; exports.DEFAULT_ACCOUNT_PROBE = _chunkVSYQ6XYNcjs.DEFAULT_ACCOUNT_PROBE; exports.DEFAULT_ALLOWANCE_SCHEDULING = _chunkVSYQ6XYNcjs.DEFAULT_ALLOWANCE_SCHEDULING; exports.DEFAULT_CONCURRENCY_QUEUE = _chunkVSYQ6XYNcjs.DEFAULT_CONCURRENCY_QUEUE; exports.DEFAULT_FINGERPRINT = _chunkVSYQ6XYNcjs.DEFAULT_FINGERPRINT; exports.DEFAULT_IMAGES_SERVER_CONFIG = _chunkVSYQ6XYNcjs.DEFAULT_IMAGES_SERVER_CONFIG; exports.DEFAULT_OUTBOUND_PORT = _chunkVSYQ6XYNcjs.DEFAULT_OUTBOUND_PORT; exports.DEFAULT_SEARCH_SERVER_CONFIG = _chunkVSYQ6XYNcjs.DEFAULT_SEARCH_SERVER_CONFIG; exports.DEFAULT_USER_MESSAGE_QUEUE = _chunkVSYQ6XYNcjs.DEFAULT_USER_MESSAGE_QUEUE; exports.ENDPOINT_MODEL_KINDS = _chunk4IH4EL7Mcjs.ENDPOINT_MODEL_KINDS; exports.IMAGE_SERVER_HARD_CEILINGS = _chunkVSYQ6XYNcjs.IMAGE_SERVER_HARD_CEILINGS; exports.KeySpendTracker = _chunkVSYQ6XYNcjs.KeySpendTracker; exports.KeyedMutex = _chunkVSYQ6XYNcjs.KeyedMutex; exports.LEGACY_OUTBOUND_PERMISSIONS = _chunkVSYQ6XYNcjs.LEGACY_OUTBOUND_PERMISSIONS; exports.OUTBOUND_API_SERVER_CONFIG_KEY = _chunkVSYQ6XYNcjs.OUTBOUND_API_SERVER_CONFIG_KEY; exports.OutboundApiServer = _chunkVSYQ6XYNcjs.OutboundApiServer; exports.OutboundConcurrencyGate = _chunkVSYQ6XYNcjs.OutboundConcurrencyGate; exports.OutboundRateLimiter = _chunkVSYQ6XYNcjs.OutboundRateLimiter; exports.SUBSCRIPTION_PROVIDER_IDS = _chunkT6NWPIYZcjs.SUBSCRIPTION_PROVIDER_IDS; exports.SerialQueueTimeoutError = _chunkVSYQ6XYNcjs.SerialQueueTimeoutError; exports.UserMessageSerialQueue = _chunkVSYQ6XYNcjs.UserMessageSerialQueue; exports.__resetOutboundApiServerForTests = _chunkVSYQ6XYNcjs.__resetOutboundApiServerForTests; exports.beginAuditCapture = _chunkFX325I5Qcjs.beginAuditCapture; exports.beginBillingCapture = _chunkAPYG5QD7cjs.beginBillingCapture; exports.boundAccountSelectionMessage = _chunk25GXJCEZcjs.boundAccountSelectionMessage; exports.candidateBackgroundModelIds = _chunkVSYQ6XYNcjs.candidateBackgroundModelIds; exports.candidateGatewayBindings = _chunkVSYQ6XYNcjs.candidateGatewayBindings; exports.checkKeyQuota = _chunkVSYQ6XYNcjs.checkKeyQuota; exports.classifyModelPrefix = _chunkT6NWPIYZcjs.classifyModelPrefix; exports.codexSearchRoutePath = _chunkVSYQ6XYNcjs.codexSearchRoutePath; exports.computeKeyExpiry = _chunkVSYQ6XYNcjs.computeKeyExpiry; exports.computeVoucherGrant = _chunkVSYQ6XYNcjs.computeVoucherGrant; exports.createIntegrationKey = _chunkVSYQ6XYNcjs.createIntegrationKey; exports.createNamedKey = _chunkVSYQ6XYNcjs.createNamedKey; exports.defaultServerConfig = _chunkVSYQ6XYNcjs.defaultServerConfig; exports.detectModelKind = _chunkT6NWPIYZcjs.detectModelKind; exports.detectRequestRole = _chunkT6NWPIYZcjs.detectRequestRole; exports.effectiveOutboundPermissions = _chunkVSYQ6XYNcjs.effectiveOutboundPermissions; exports.endpointSupportsSubscription = _chunkT6NWPIYZcjs.endpointSupportsSubscription; exports.endpointToIngressFormat = _chunkT6NWPIYZcjs.endpointToIngressFormat; exports.formatUrls = _chunkVSYQ6XYNcjs.formatUrls; exports.gatewayBindingToEndpointConfig = _chunkVSYQ6XYNcjs.gatewayBindingToEndpointConfig; exports.generateVoucherCode = _chunkVSYQ6XYNcjs.generateVoucherCode; exports.getOutboundApiServer = _chunkVSYQ6XYNcjs.getOutboundApiServer; exports.handleCodexSearchRequest = _chunkVSYQ6XYNcjs.handleCodexSearchRequest; exports.handleVoucherRedeem = _chunkVSYQ6XYNcjs.handleVoucherRedeem; exports.hashKey = _chunkVSYQ6XYNcjs.hashKey; exports.hashVoucherCode = _chunkVSYQ6XYNcjs.hashVoucherCode; exports.isBoundAccountSelectionError = _chunk25GXJCEZcjs.isBoundAccountSelectionError; exports.isCodexSearchRequest = _chunkVSYQ6XYNcjs.isCodexSearchRequest; exports.isConcurrencyRejection = _chunkVSYQ6XYNcjs.isConcurrencyRejection; exports.isKindMappedEndpoint = _chunkT6NWPIYZcjs.isKindMappedEndpoint; exports.isRedeemRequest = _chunkVSYQ6XYNcjs.isRedeemRequest; exports.isSerialQueueTimeout = _chunkVSYQ6XYNcjs.isSerialQueueTimeout; exports.isSubscriptionProviderId = _chunkT6NWPIYZcjs.isSubscriptionProviderId; exports.isUserMessageRequest = _chunkVSYQ6XYNcjs.isUserMessageRequest; exports.legacyEndpointsToBindings = _chunkVSYQ6XYNcjs.legacyEndpointsToBindings; exports.loadServerConfig = _chunkVSYQ6XYNcjs.loadServerConfig; exports.mergeServerConfig = _chunkVSYQ6XYNcjs.mergeServerConfig; exports.modelKindsForEndpoint = _chunkT6NWPIYZcjs.modelKindsForEndpoint; exports.newVoucherId = _chunkVSYQ6XYNcjs.newVoucherId; exports.normalizeAccountProbe = _chunkVSYQ6XYNcjs.normalizeAccountProbe; exports.normalizeAllowanceScheduling = _chunkVSYQ6XYNcjs.normalizeAllowanceScheduling; exports.normalizeAudit = _chunkVSYQ6XYNcjs.normalizeAudit; exports.normalizeBilling = _chunkVSYQ6XYNcjs.normalizeBilling; exports.normalizeFingerprint = _chunkVSYQ6XYNcjs.normalizeFingerprint; exports.normalizeGatewayBindings = _chunkVSYQ6XYNcjs.normalizeGatewayBindings; exports.normalizeImagesServerConfig = _chunkVSYQ6XYNcjs.normalizeImagesServerConfig; exports.normalizePrefixTargets = _chunkVSYQ6XYNcjs.normalizePrefixTargets; exports.normalizeProxyConfig = _chunkVSYQ6XYNcjs.normalizeProxyConfig; exports.normalizeProxySegment = _chunkVSYQ6XYNcjs.normalizeProxySegment; exports.normalizeQueueSegments = _chunkVSYQ6XYNcjs.normalizeQueueSegments; exports.normalizeSearchApiProviderConfigs = _chunkVSYQ6XYNcjs.normalizeSearchApiProviderConfigs; exports.normalizeSearchServerConfig = _chunkVSYQ6XYNcjs.normalizeSearchServerConfig; exports.normalizeServerConfig = _chunkVSYQ6XYNcjs.normalizeServerConfig; exports.normalizeVoucher = _chunkVSYQ6XYNcjs.normalizeVoucher; exports.normalizeWebhookDestination = _chunkVSYQ6XYNcjs.normalizeWebhookDestination; exports.normalizeWebhookSegment = _chunkVSYQ6XYNcjs.normalizeWebhookSegment; exports.parseModelRef = _chunkT6NWPIYZcjs.parseModelRef; exports.pickModelRefFromList = _chunkT6NWPIYZcjs.pickModelRefFromList; exports.randomBase62 = _chunkVSYQ6XYNcjs.randomBase62; exports.redactAuditText = _chunkHCOQQAZEcjs.redactAuditText; exports.resolveGatewayBinding = _chunkVSYQ6XYNcjs.resolveGatewayBinding; exports.resolvePrefixTarget = _chunkT6NWPIYZcjs.resolvePrefixTarget; exports.resolveRoute = _chunkT6NWPIYZcjs.resolveRoute; exports.saveServerConfig = _chunkVSYQ6XYNcjs.saveServerConfig; exports.startOfLocalDay = _chunkVSYQ6XYNcjs.startOfLocalDay; exports.startOfLocalWeek = _chunkVSYQ6XYNcjs.startOfLocalWeek; exports.toVoucherInfo = _chunkVSYQ6XYNcjs.toVoucherInfo; exports.validateEndpointModelConfig = _chunkT6NWPIYZcjs.validateEndpointModelConfig; exports.validateImagesServerConfig = _chunkVSYQ6XYNcjs.validateImagesServerConfig; exports.validateOutboundPermissions = _chunkVSYQ6XYNcjs.validateOutboundPermissions; exports.validateSearchServerConfig = _chunkVSYQ6XYNcjs.validateSearchServerConfig; exports.verifyKey = _chunkVSYQ6XYNcjs.verifyKey; exports.verifyPresentedKey = _chunkVSYQ6XYNcjs.verifyPresentedKey; exports.voucherCodePrefix = _chunkVSYQ6XYNcjs.voucherCodePrefix;

package/dist/outbound-api.d.cts

@@ -1,19 +1,22 @@
 import { VoucherConfig } from '@omnicross/contracts/voucher-types';
-import { c as EndpointRoutingConfig, G as GatewayBinding, U as UserMessageQueueConfig, b as ConcurrencyQueueConfig, W as AnthropicConfigSegment, n as OutboundApiDeps, r as OutboundApiServerStatus, t as OutboundFormatUrls, A as AccountProbeConfig, a as AllowanceSchedulingConfig, F as FingerprintConfig, q as OutboundApiServerConfig, m as ModelPrefixTargets, y as OutboundProxyConfig, I as ImagesServerConfig, s as OutboundEndpoint, R as RequestRole, T as ModelRef, k as KindMappedEndpoint, l as ModelKind, x as OutboundPermission, O as OutboundKeyDb, o as OutboundApiKeyCreated } from './types-jjU24eYG.cjs';
-export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, K as KeySpendReader, i as KeySpendSeeder, j as KeySpendTracker, M as MessagesModelKind, p as OutboundApiKeyInfo, u as OutboundKeyActivationMode, v as OutboundKeyDbRow, w as OutboundKeyPolicy, z as ResponsesModelKind, V as VoucherCreateInput, B as VoucherDb, D as computeVoucherGrant, H as generateVoucherCode, J as hashVoucherCode, L as newVoucherId, N as startOfLocalDay, P as startOfLocalWeek, Q as toVoucherInfo, S as voucherCodePrefix } from './types-jjU24eYG.cjs';
+import { c as EndpointRoutingConfig, G as GatewayBinding, U as UserMessageQueueConfig, b as ConcurrencyQueueConfig, X as AnthropicConfigSegment, S as SearchServerConfig, n as OutboundApiDeps, r as OutboundApiServerStatus, t as OutboundFormatUrls, A as AccountProbeConfig, a as AllowanceSchedulingConfig, F as FingerprintConfig, q as OutboundApiServerConfig, m as ModelPrefixTargets, y as OutboundProxyConfig, I as ImagesServerConfig, s as OutboundEndpoint, R as RequestRole, W as ModelRef, k as KindMappedEndpoint, l as ModelKind, x as OutboundPermission, O as OutboundKeyDb, o as OutboundApiKeyCreated } from './types-D-oHYusb.cjs';
+export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, K as KeySpendReader, i as KeySpendSeeder, j as KeySpendTracker, M as MessagesModelKind, p as OutboundApiKeyInfo, u as OutboundKeyActivationMode, v as OutboundKeyDbRow, w as OutboundKeyPolicy, z as ResponsesModelKind, V as VoucherCreateInput, B as VoucherDb, D as computeVoucherGrant, H as generateVoucherCode, J as hashVoucherCode, L as newVoucherId, N as startOfLocalDay, P as startOfLocalWeek, Q as toVoucherInfo, T as voucherCodePrefix } from './types-D-oHYusb.cjs';
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingConfig } from '@omnicross/contracts/billing-types';
 import { WebhookDestination, WebhookConfig } from '@omnicross/contracts/webhook-types';
-import { e as ImageApiLimits } from './types-CbglB73l.cjs';
+import { e as ImageApiLimits } from './types-Be-yt_6T.cjs';
+import { S as SearchApiProviderConfigs } from './types-CbCZqLGg.cjs';
+import http from 'node:http';
+import { c as SearchFrontendMode } from './frontends-Doz0RaWu.cjs';
+import { S as SearchRuntime } from './runtime-t8AZacFF.cjs';
 export { AUDIT_REDACTED, redactAuditText } from './outbound-api/auditRedact.cjs';
 export { AuditCaptureContext, beginAuditCapture } from './outbound-api/auditCapture.cjs';
 export { BillingCaptureContext, beginBillingCapture } from './outbound-api/billingCapture.cjs';
 import { K as KeyCostLimits, M as ModelRestriction } from './keyPolicy-zdWTu3CQ.cjs';
 export { a as KeyExpiryInput, b as KeyExpiryResult, c as KeySpend, Q as QuotaDecision, d as checkKeyQuota, e as computeKeyExpiry } from './keyPolicy-zdWTu3CQ.cjs';
-import http from 'node:http';
-import { D as IngressFormat } from './types-DsHBBk3h.cjs';
-export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-rpKQLyDO.cjs';
+import { D as IngressFormat } from './types-BSIJdsyl.cjs';
+export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-Da0yvkL1.cjs';
 export { BoundAccountFallbackPolicy, BoundAccountSelectionError, BoundAccountSelectionFailureReason, boundAccountSelectionMessage, isBoundAccountSelectionError } from './pipeline/BoundAccountSelectionError.cjs';
 import '@omnicross/contracts/health-logging-types';
 import './logger-4GvQNzhE.cjs';
@@ -22,9 +25,10 @@ import '@omnicross/contracts/llm-config';
 import './transformer/types.cjs';
 import '@omnicross/contracts/completion-types';
 import './transformer/TransformerService.cjs';
-import './ProviderProxy-CgIcCVwk.cjs';
+import './ProviderProxy-Bz_nkOwq.cjs';
 import '@omnicross/contracts/image-generation-types';
 import 'node:fs/promises';
+import '@omnicross/contracts/search-types';
 import '@omnicross/contracts/usage-stats-types';
 import '@omnicross/contracts/subscription-types';
 import '@omnicross/contracts/usage-types';
@@ -81,6 +85,11 @@ interface ApplyConfigInput {
     /** Anthropic-protocol segment (claude-api-protocol-fidelity, §10). Read live
      *  per request; the heartbeat value is hot-applied to the stream synthesizer. */
     anthropic?: AnthropicConfigSegment;
+    /**
+     * Search assembly segment (plan 阶段5). Read live per request for the Codex
+     * frontend's mode; the runtime itself is wired once through `deps`.
+     */
+    search?: SearchServerConfig;
 }
 /** Prepared listener/config publication used by the daemon's settings transaction. */
 interface PreparedOutboundApiConfig {
@@ -101,6 +110,7 @@ declare class OutboundApiServer {
     private concurrencyQueue;
     private voucherConfig;
     private anthropicConfig;
+    private searchConfig;
     private imagesEnabled;
     /** R10 `/api/hello` switch (§10 `anthropic.apiHello`, default true). */
     private apiHelloEnabled;
@@ -399,6 +409,105 @@ declare function normalizeImagesServerConfig(value: unknown): ImagesServerConfig
 /** Strict structural/range validation. Daemon validation adds filesystem and resolver policy. */
 declare function validateImagesServerConfig(value: unknown): string[];
 
+/**
+ * The persisted `search` config section — tolerant read, strict report.
+ *
+ * Two functions over the same shape, exactly as the Images section does it:
+ * {@link normalizeSearchServerConfig} never throws (a malformed member falls
+ * back or is dropped, so a bad config cannot take the daemon down), and
+ * {@link validateSearchServerConfig} says what was unusable so an operator can
+ * fix it.
+ *
+ * **Nothing here ever echoes a configured VALUE.** Every validation message
+ * names a FIELD. An API key, a Basic-auth password and an internal hostname are
+ * all things a validation log must not leak, and the cheapest way to guarantee
+ * that is a rule with no exceptions rather than a per-field judgement call.
+ *
+ * @module outbound-api/searchServerConfig
+ */
+
+/** The frozen defaults, for comparison and for callers with no config at all. */
+declare const DEFAULT_SEARCH_SERVER_CONFIG: Readonly<SearchServerConfig>;
+/** Tolerant read: unusable members are DROPPED, which leaves them unconfigured. */
+declare function normalizeSearchApiProviderConfigs(value: unknown): SearchApiProviderConfigs;
+/** Tolerant read of the whole section. Never throws; an absent section is the default. */
+declare function normalizeSearchServerConfig(value: unknown): SearchServerConfig;
+/**
+ * Report what a `search` section got wrong, field by field.
+ *
+ * Returns `[]` for a valid (or absent) section. Callers surface the list the
+ * way the Images config's errors are surfaced — reported, not thrown — because
+ * a search misconfiguration must not prevent the gateway from serving text.
+ */
+declare function validateSearchServerConfig(value: unknown, path?: string): string[];
+
+/**
+ * The Codex search route — `POST /v1/alpha/search`.
+ *
+ * ## Compatibility source
+ *
+ * From `docs/design/search-baseline/wire-baseline.md` §1, over 11 real audit
+ * records produced by `codex-tui` 0.151.0 and 0.152.0:
+ *
+ * The request and response contracts are pinned from the Codex 0.152.0 typed
+ * API definitions and standalone-search integration fixtures. Codex sends text
+ * queries under `commands.search_query[].q` and requires a string `output` in
+ * the JSON response; structured `results` are optional opaque DTOs.
+ *
+ * ## What this route does about that
+ *
+ * The default mode is `off`, and `off` answers with a structured
+ * `unsupported_capability` error instead of the generic 404 (plan §15). That is
+ * strictly more informative than today's behavior and claims nothing.
+ *
+ * Enabling `managed` accepts Codex text-search commands plus the legacy flat
+ * query spellings used by early Omnicross clients. Other Codex command kinds
+ * are rejected because the shared runtime currently exposes text search only.
+ *
+ * ## The designed side effect
+ *
+ * A dispatched request reaches route resolution and is given a `sessionKey`, so
+ * the audit body store finally persists `/v1/alpha/search` exchanges. The
+ * capture that 阶段0 proved impossible becomes possible when a real client talks
+ * to an enabled route.
+ *
+ * @module outbound-api/searchRoute
+ */
+
+/** The path observed on every one of the 11 baselined records. */
+declare const codexSearchRoutePath = "/v1/alpha/search";
+/** Everything the handler needs, injected so it is testable without a daemon. */
+interface CodexSearchRouteDeps {
+    /** Resolved ONCE per request by the caller, before any wire bytes. */
+    readonly mode: SearchFrontendMode;
+    /**
+     * The single shared runtime. Absent behaves exactly like mode `off`.
+     *
+     * Selection and fallback policy live INSIDE it (阶段3): this route never
+     * builds a candidate list, and adding a per-request policy override here
+     * would be the second fallback order the extraction exists to prevent.
+     */
+    readonly runtime?: SearchRuntime | null;
+    /** Cancellation, wired to the client connection by the caller. */
+    readonly signal?: AbortSignal;
+    /**
+     * Audit hook. The route calls this with the raw body and the parsed object so
+     * the caller can stash the body and derive the session key — the mechanism
+     * that unblocks `/v1/alpha/search` body capture (see the module note).
+     */
+    readonly onRequestBody?: (raw: string, parsed: Record<string, unknown>) => void;
+}
+/** `POST` + a path ending in `/alpha/search`. Nothing else is this route. */
+declare function isCodexSearchRequest(method: string | undefined, url: string | undefined): boolean;
+/**
+ * Serve one `POST /v1/alpha/search`.
+ *
+ * Always answers: a structured JSON error or a structured JSON result, never a
+ * hang, never a bare 404. The caller has already authenticated the request and
+ * resolved `deps.mode`.
+ */
+declare function handleCodexSearchRequest(req: http.IncomingMessage, res: http.ServerResponse, deps: CodexSearchRouteDeps): Promise<void>;
+
 /**
  * Either the winning route projected to the resolver shape, or `none` — no
  * enabled route for this key/endpoint could serve the request. There is no
@@ -1006,4 +1115,4 @@ declare function getOutboundApiServer(deps?: OutboundApiDeps, onPortChange?: (po
 /** Reset the singleton (tests / teardown only). */
 declare function __resetOutboundApiServerForTests(): void;
 
-export { AccountProbeConfig, AllowanceSchedulingConfig, type ApiServerSettingsStore, type ApplyConfigInput, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_ALLOWANCE_SCHEDULING, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_IMAGES_SERVER_CONFIG, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, GatewayBinding, type GatewayBindingResolution, IMAGE_SERVER_HARD_CEILINGS, ImagesServerConfig, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, LEGACY_OUTBOUND_PERMISSIONS, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundPermission, OutboundProxyConfig, OutboundRateLimiter, type PreparedOutboundApiConfig, RequestRole, type ResolveGatewayBindingInput, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, candidateBackgroundModelIds, candidateGatewayBindings, classifyModelPrefix, createIntegrationKey, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, effectiveOutboundPermissions, endpointToIngressFormat, formatUrls, gatewayBindingToEndpointConfig, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, legacyEndpointsToBindings, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAllowanceScheduling, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizeGatewayBindings, normalizeImagesServerConfig, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, resolveGatewayBinding, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateImagesServerConfig, validateOutboundPermissions, verifyKey, verifyPresentedKey };
+export { AccountProbeConfig, AllowanceSchedulingConfig, type ApiServerSettingsStore, type ApplyConfigInput, type CodexSearchRouteDeps, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_ALLOWANCE_SCHEDULING, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_IMAGES_SERVER_CONFIG, DEFAULT_OUTBOUND_PORT, DEFAULT_SEARCH_SERVER_CONFIG, DEFAULT_USER_MESSAGE_QUEUE, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, GatewayBinding, type GatewayBindingResolution, IMAGE_SERVER_HARD_CEILINGS, ImagesServerConfig, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, LEGACY_OUTBOUND_PERMISSIONS, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundPermission, OutboundProxyConfig, OutboundRateLimiter, type PreparedOutboundApiConfig, RequestRole, type ResolveGatewayBindingInput, SearchServerConfig, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, candidateBackgroundModelIds, candidateGatewayBindings, classifyModelPrefix, codexSearchRoutePath, createIntegrationKey, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, effectiveOutboundPermissions, endpointToIngressFormat, formatUrls, gatewayBindingToEndpointConfig, getOutboundApiServer, handleCodexSearchRequest, handleVoucherRedeem, hashKey, isCodexSearchRequest, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, legacyEndpointsToBindings, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAllowanceScheduling, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizeGatewayBindings, normalizeImagesServerConfig, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeSearchApiProviderConfigs, normalizeSearchServerConfig, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, resolveGatewayBinding, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateImagesServerConfig, validateOutboundPermissions, validateSearchServerConfig, verifyKey, verifyPresentedKey };

package/dist/outbound-api.d.ts

@@ -1,19 +1,22 @@
 import { VoucherConfig } from '@omnicross/contracts/voucher-types';
-import { c as EndpointRoutingConfig, G as GatewayBinding, U as UserMessageQueueConfig, b as ConcurrencyQueueConfig, W as AnthropicConfigSegment, n as OutboundApiDeps, r as OutboundApiServerStatus, t as OutboundFormatUrls, A as AccountProbeConfig, a as AllowanceSchedulingConfig, F as FingerprintConfig, q as OutboundApiServerConfig, m as ModelPrefixTargets, y as OutboundProxyConfig, I as ImagesServerConfig, s as OutboundEndpoint, R as RequestRole, T as ModelRef, k as KindMappedEndpoint, l as ModelKind, x as OutboundPermission, O as OutboundKeyDb, o as OutboundApiKeyCreated } from './types-5T223WYQ.js';
-export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, K as KeySpendReader, i as KeySpendSeeder, j as KeySpendTracker, M as MessagesModelKind, p as OutboundApiKeyInfo, u as OutboundKeyActivationMode, v as OutboundKeyDbRow, w as OutboundKeyPolicy, z as ResponsesModelKind, V as VoucherCreateInput, B as VoucherDb, D as computeVoucherGrant, H as generateVoucherCode, J as hashVoucherCode, L as newVoucherId, N as startOfLocalDay, P as startOfLocalWeek, Q as toVoucherInfo, S as voucherCodePrefix } from './types-5T223WYQ.js';
+import { c as EndpointRoutingConfig, G as GatewayBinding, U as UserMessageQueueConfig, b as ConcurrencyQueueConfig, X as AnthropicConfigSegment, S as SearchServerConfig, n as OutboundApiDeps, r as OutboundApiServerStatus, t as OutboundFormatUrls, A as AccountProbeConfig, a as AllowanceSchedulingConfig, F as FingerprintConfig, q as OutboundApiServerConfig, m as ModelPrefixTargets, y as OutboundProxyConfig, I as ImagesServerConfig, s as OutboundEndpoint, R as RequestRole, W as ModelRef, k as KindMappedEndpoint, l as ModelKind, x as OutboundPermission, O as OutboundKeyDb, o as OutboundApiKeyCreated } from './types-Dvlpjn0d.js';
+export { C as ChatDispatchMode, E as ENDPOINT_MODEL_KINDS, d as GatewayBindingFallback, e as GatewayBindingKeyScope, f as GatewayBindingModelMode, g as GatewayBindingTarget, h as GatewayModelMapping, K as KeySpendReader, i as KeySpendSeeder, j as KeySpendTracker, M as MessagesModelKind, p as OutboundApiKeyInfo, u as OutboundKeyActivationMode, v as OutboundKeyDbRow, w as OutboundKeyPolicy, z as ResponsesModelKind, V as VoucherCreateInput, B as VoucherDb, D as computeVoucherGrant, H as generateVoucherCode, J as hashVoucherCode, L as newVoucherId, N as startOfLocalDay, P as startOfLocalWeek, Q as toVoucherInfo, T as voucherCodePrefix } from './types-Dvlpjn0d.js';
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingConfig } from '@omnicross/contracts/billing-types';
 import { WebhookDestination, WebhookConfig } from '@omnicross/contracts/webhook-types';
-import { e as ImageApiLimits } from './types-Bd72H4SB.js';
+import { e as ImageApiLimits } from './types-Dm4_36V4.js';
+import { S as SearchApiProviderConfigs } from './types-CbCZqLGg.js';
+import http from 'node:http';
+import { c as SearchFrontendMode } from './frontends-Doz0RaWu.js';
+import { S as SearchRuntime } from './runtime-t8AZacFF.js';
 export { AUDIT_REDACTED, redactAuditText } from './outbound-api/auditRedact.js';
 export { AuditCaptureContext, beginAuditCapture } from './outbound-api/auditCapture.js';
 export { BillingCaptureContext, beginBillingCapture } from './outbound-api/billingCapture.js';
 import { K as KeyCostLimits, M as ModelRestriction } from './keyPolicy-zdWTu3CQ.js';
 export { a as KeyExpiryInput, b as KeyExpiryResult, c as KeySpend, Q as QuotaDecision, d as checkKeyQuota, e as computeKeyExpiry } from './keyPolicy-zdWTu3CQ.js';
-import http from 'node:http';
-import { D as IngressFormat } from './types-CVRge76p.js';
-export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-CTCcSHWu.js';
+import { D as IngressFormat } from './types-By9Tg6-I.js';
+export { S as SUBSCRIPTION_PROVIDER_IDS, e as endpointSupportsSubscription, i as isSubscriptionProviderId, p as parseModelRef, a as pickModelRefFromList, r as resolveRoute } from './routeResolver-STwMz_G4.js';
 export { BoundAccountFallbackPolicy, BoundAccountSelectionError, BoundAccountSelectionFailureReason, boundAccountSelectionMessage, isBoundAccountSelectionError } from './pipeline/BoundAccountSelectionError.js';
 import '@omnicross/contracts/health-logging-types';
 import './logger-4GvQNzhE.js';
@@ -22,9 +25,10 @@ import '@omnicross/contracts/llm-config';
 import './transformer/types.js';
 import '@omnicross/contracts/completion-types';
 import './transformer/TransformerService.js';
-import './ProviderProxy-DYoY5XoT.js';
+import './ProviderProxy-Ckr6oTrE.js';
 import '@omnicross/contracts/image-generation-types';
 import 'node:fs/promises';
+import '@omnicross/contracts/search-types';
 import '@omnicross/contracts/usage-stats-types';
 import '@omnicross/contracts/subscription-types';
 import '@omnicross/contracts/usage-types';
@@ -81,6 +85,11 @@ interface ApplyConfigInput {
     /** Anthropic-protocol segment (claude-api-protocol-fidelity, §10). Read live
      *  per request; the heartbeat value is hot-applied to the stream synthesizer. */
     anthropic?: AnthropicConfigSegment;
+    /**
+     * Search assembly segment (plan 阶段5). Read live per request for the Codex
+     * frontend's mode; the runtime itself is wired once through `deps`.
+     */
+    search?: SearchServerConfig;
 }
 /** Prepared listener/config publication used by the daemon's settings transaction. */
 interface PreparedOutboundApiConfig {
@@ -101,6 +110,7 @@ declare class OutboundApiServer {
     private concurrencyQueue;
     private voucherConfig;
     private anthropicConfig;
+    private searchConfig;
     private imagesEnabled;
     /** R10 `/api/hello` switch (§10 `anthropic.apiHello`, default true). */
     private apiHelloEnabled;
@@ -399,6 +409,105 @@ declare function normalizeImagesServerConfig(value: unknown): ImagesServerConfig
 /** Strict structural/range validation. Daemon validation adds filesystem and resolver policy. */
 declare function validateImagesServerConfig(value: unknown): string[];
 
+/**
+ * The persisted `search` config section — tolerant read, strict report.
+ *
+ * Two functions over the same shape, exactly as the Images section does it:
+ * {@link normalizeSearchServerConfig} never throws (a malformed member falls
+ * back or is dropped, so a bad config cannot take the daemon down), and
+ * {@link validateSearchServerConfig} says what was unusable so an operator can
+ * fix it.
+ *
+ * **Nothing here ever echoes a configured VALUE.** Every validation message
+ * names a FIELD. An API key, a Basic-auth password and an internal hostname are
+ * all things a validation log must not leak, and the cheapest way to guarantee
+ * that is a rule with no exceptions rather than a per-field judgement call.
+ *
+ * @module outbound-api/searchServerConfig
+ */
+
+/** The frozen defaults, for comparison and for callers with no config at all. */
+declare const DEFAULT_SEARCH_SERVER_CONFIG: Readonly<SearchServerConfig>;
+/** Tolerant read: unusable members are DROPPED, which leaves them unconfigured. */
+declare function normalizeSearchApiProviderConfigs(value: unknown): SearchApiProviderConfigs;
+/** Tolerant read of the whole section. Never throws; an absent section is the default. */
+declare function normalizeSearchServerConfig(value: unknown): SearchServerConfig;
+/**
+ * Report what a `search` section got wrong, field by field.
+ *
+ * Returns `[]` for a valid (or absent) section. Callers surface the list the
+ * way the Images config's errors are surfaced — reported, not thrown — because
+ * a search misconfiguration must not prevent the gateway from serving text.
+ */
+declare function validateSearchServerConfig(value: unknown, path?: string): string[];
+
+/**
+ * The Codex search route — `POST /v1/alpha/search`.
+ *
+ * ## Compatibility source
+ *
+ * From `docs/design/search-baseline/wire-baseline.md` §1, over 11 real audit
+ * records produced by `codex-tui` 0.151.0 and 0.152.0:
+ *
+ * The request and response contracts are pinned from the Codex 0.152.0 typed
+ * API definitions and standalone-search integration fixtures. Codex sends text
+ * queries under `commands.search_query[].q` and requires a string `output` in
+ * the JSON response; structured `results` are optional opaque DTOs.
+ *
+ * ## What this route does about that
+ *
+ * The default mode is `off`, and `off` answers with a structured
+ * `unsupported_capability` error instead of the generic 404 (plan §15). That is
+ * strictly more informative than today's behavior and claims nothing.
+ *
+ * Enabling `managed` accepts Codex text-search commands plus the legacy flat
+ * query spellings used by early Omnicross clients. Other Codex command kinds
+ * are rejected because the shared runtime currently exposes text search only.
+ *
+ * ## The designed side effect
+ *
+ * A dispatched request reaches route resolution and is given a `sessionKey`, so
+ * the audit body store finally persists `/v1/alpha/search` exchanges. The
+ * capture that 阶段0 proved impossible becomes possible when a real client talks
+ * to an enabled route.
+ *
+ * @module outbound-api/searchRoute
+ */
+
+/** The path observed on every one of the 11 baselined records. */
+declare const codexSearchRoutePath = "/v1/alpha/search";
+/** Everything the handler needs, injected so it is testable without a daemon. */
+interface CodexSearchRouteDeps {
+    /** Resolved ONCE per request by the caller, before any wire bytes. */
+    readonly mode: SearchFrontendMode;
+    /**
+     * The single shared runtime. Absent behaves exactly like mode `off`.
+     *
+     * Selection and fallback policy live INSIDE it (阶段3): this route never
+     * builds a candidate list, and adding a per-request policy override here
+     * would be the second fallback order the extraction exists to prevent.
+     */
+    readonly runtime?: SearchRuntime | null;
+    /** Cancellation, wired to the client connection by the caller. */
+    readonly signal?: AbortSignal;
+    /**
+     * Audit hook. The route calls this with the raw body and the parsed object so
+     * the caller can stash the body and derive the session key — the mechanism
+     * that unblocks `/v1/alpha/search` body capture (see the module note).
+     */
+    readonly onRequestBody?: (raw: string, parsed: Record<string, unknown>) => void;
+}
+/** `POST` + a path ending in `/alpha/search`. Nothing else is this route. */
+declare function isCodexSearchRequest(method: string | undefined, url: string | undefined): boolean;
+/**
+ * Serve one `POST /v1/alpha/search`.
+ *
+ * Always answers: a structured JSON error or a structured JSON result, never a
+ * hang, never a bare 404. The caller has already authenticated the request and
+ * resolved `deps.mode`.
+ */
+declare function handleCodexSearchRequest(req: http.IncomingMessage, res: http.ServerResponse, deps: CodexSearchRouteDeps): Promise<void>;
+
 /**
  * Either the winning route projected to the resolver shape, or `none` — no
  * enabled route for this key/endpoint could serve the request. There is no
@@ -1006,4 +1115,4 @@ declare function getOutboundApiServer(deps?: OutboundApiDeps, onPortChange?: (po
 /** Reset the singleton (tests / teardown only). */
 declare function __resetOutboundApiServerForTests(): void;
 
-export { AccountProbeConfig, AllowanceSchedulingConfig, type ApiServerSettingsStore, type ApplyConfigInput, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_ALLOWANCE_SCHEDULING, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_IMAGES_SERVER_CONFIG, DEFAULT_OUTBOUND_PORT, DEFAULT_USER_MESSAGE_QUEUE, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, GatewayBinding, type GatewayBindingResolution, IMAGE_SERVER_HARD_CEILINGS, ImagesServerConfig, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, LEGACY_OUTBOUND_PERMISSIONS, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundPermission, OutboundProxyConfig, OutboundRateLimiter, type PreparedOutboundApiConfig, RequestRole, type ResolveGatewayBindingInput, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, candidateBackgroundModelIds, candidateGatewayBindings, classifyModelPrefix, createIntegrationKey, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, effectiveOutboundPermissions, endpointToIngressFormat, formatUrls, gatewayBindingToEndpointConfig, getOutboundApiServer, handleVoucherRedeem, hashKey, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, legacyEndpointsToBindings, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAllowanceScheduling, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizeGatewayBindings, normalizeImagesServerConfig, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, resolveGatewayBinding, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateImagesServerConfig, validateOutboundPermissions, verifyKey, verifyPresentedKey };
+export { AccountProbeConfig, AllowanceSchedulingConfig, type ApiServerSettingsStore, type ApplyConfigInput, type CodexSearchRouteDeps, ConcurrencyQueueConfig, ConcurrencyQueueFullError, ConcurrencyWaitCancelledError, ConcurrencyWaitTimeoutError, DEFAULT_ACCOUNT_PROBE, DEFAULT_ALLOWANCE_SCHEDULING, DEFAULT_CONCURRENCY_QUEUE, DEFAULT_FINGERPRINT, DEFAULT_IMAGES_SERVER_CONFIG, DEFAULT_OUTBOUND_PORT, DEFAULT_SEARCH_SERVER_CONFIG, DEFAULT_USER_MESSAGE_QUEUE, EndpointRoutingConfig, FingerprintConfig, type GateAcquireOptions, type GateAcquisition, type GateSlot, type GateStatusEntry, GatewayBinding, type GatewayBindingResolution, IMAGE_SERVER_HARD_CEILINGS, ImagesServerConfig, KeyCostLimits, type KeyVerification, KeyedMutex, KindMappedEndpoint, LEGACY_OUTBOUND_PERMISSIONS, ModelKind, type ModelPrefixKind, ModelPrefixTargets, OUTBOUND_API_SERVER_CONFIG_KEY, OutboundApiDeps, OutboundApiKeyCreated, OutboundApiServer, OutboundApiServerConfig, OutboundApiServerStatus, OutboundConcurrencyGate, OutboundEndpoint, OutboundFormatUrls, OutboundKeyDb, OutboundPermission, OutboundProxyConfig, OutboundRateLimiter, type PreparedOutboundApiConfig, RequestRole, type ResolveGatewayBindingInput, SearchServerConfig, type SerialAcquireOptions, type SerialQueueStatusEntry, SerialQueueTimeoutError, type SerialSlot, UserMessageQueueConfig, UserMessageSerialQueue, type VerifiedKey, __resetOutboundApiServerForTests, candidateBackgroundModelIds, candidateGatewayBindings, classifyModelPrefix, codexSearchRoutePath, createIntegrationKey, createNamedKey, defaultServerConfig, detectModelKind, detectRequestRole, effectiveOutboundPermissions, endpointToIngressFormat, formatUrls, gatewayBindingToEndpointConfig, getOutboundApiServer, handleCodexSearchRequest, handleVoucherRedeem, hashKey, isCodexSearchRequest, isConcurrencyRejection, isKindMappedEndpoint, isRedeemRequest, isSerialQueueTimeout, isUserMessageRequest, legacyEndpointsToBindings, loadServerConfig, mergeServerConfig, modelKindsForEndpoint, normalizeAccountProbe, normalizeAllowanceScheduling, normalizeAudit, normalizeBilling, normalizeFingerprint, normalizeGatewayBindings, normalizeImagesServerConfig, normalizePrefixTargets, normalizeProxyConfig, normalizeProxySegment, normalizeQueueSegments, normalizeSearchApiProviderConfigs, normalizeSearchServerConfig, normalizeServerConfig, normalizeVoucher, normalizeWebhookDestination, normalizeWebhookSegment, randomBase62, resolveGatewayBinding, resolvePrefixTarget, saveServerConfig, validateEndpointModelConfig, validateImagesServerConfig, validateOutboundPermissions, validateSearchServerConfig, verifyKey, verifyPresentedKey };