@omnicross/subscriptions 0.1.10 → 0.2.0

package/dist/index.d.cts

@@ -10,6 +10,8 @@ import { TransformerService } from '@omnicross/core/transformer/TransformerServi
 import { Transformer } from '@omnicross/core/transformer/types';
 export { FetchLike } from '@omnicross/core/auth/GeminiCodeAssistProjectResolver';
 export { claudeOAuth, codexOAuth, geminiOAuth } from './oauth.cjs';
+import { ImageProvider } from '@omnicross/core/image-generation';
+import { ImageCapabilityEvidenceLayer, ImageQuality, ImageBackground, ImageOutputFormat, ImageModeration } from '@omnicross/contracts/image-generation-types';
 
 /**
  * SubscriptionCredentialStore — the credential port the subscription block
@@ -349,4 +351,98 @@ declare class SubscriptionDispatcher {
     private buildRequestSummary;
 }
 
-export { DEFAULT_ACCOUNT_PRIORITY, type DispatchRequest, type DispatcherHooks, LAST_USED_PERSIST_THROTTLE_MS, SESSION_AFFINITY_TTL_MS, type SchedulableAccount, type SelectInput, type SelectResult, SubscriptionAccountSelector, SubscriptionAccountService, type SubscriptionCredentialStore, SubscriptionDispatcher, SubscriptionProviderRegistry, getSubscriptionAccountService, getSubscriptionProviderRegistry, setSubscriptionAccountService, setSubscriptionProviderRegistry };
+/** Safe evidence request; accountId is trusted-process input and must not be logged. */
+interface CodexImageCapabilityEvidenceRequest {
+    readonly accountId: string;
+    readonly signal: AbortSignal;
+}
+interface CodexImageCapabilityEvidence {
+    readonly account: ImageCapabilityEvidenceLayer;
+    readonly upstream: ImageCapabilityEvidenceLayer;
+    /** Enable only when these response fields have separate verified provenance. */
+    readonly verifiedResponseFields?: {
+        readonly usage?: boolean;
+        readonly revisedPrompt?: boolean;
+    };
+}
+interface CodexImageCapabilityEvidenceSource {
+    resolve(request: CodexImageCapabilityEvidenceRequest): Promise<CodexImageCapabilityEvidence>;
+}
+
+declare const imageExecutionAccountKeyBrand: unique symbol;
+/** A daemon-keyed, non-public scheduling identity for one selected account. */
+type ImageExecutionAccountKey = string & {
+    readonly [imageExecutionAccountKeyBrand]: 'image-execution-account-key';
+};
+/** Credential- and content-blind admission input for selected-account work. */
+interface ImageExecutionSchedulerRequest {
+    readonly tenantId: string;
+    readonly accountKey: ImageExecutionAccountKey;
+    readonly signal: AbortSignal;
+}
+interface ImageExecutionSchedulerGrant {
+    /** Optional scheduler-owned cancellation used for retirement/shutdown. */
+    readonly signal?: AbortSignal;
+    /** Release is required to be idempotent and safe on every terminal path. */
+    release(): Promise<void> | void;
+}
+interface ImageExecutionScheduler {
+    /**
+     * Immediately derive a local opaque key. The raw identity is transient and
+     * must never enter scheduler state, status, logs, or metrics.
+     */
+    deriveAccountKey(selectedAccountId: string): ImageExecutionAccountKey;
+    /** The scheduler instance and its limits are bound to one runtime snapshot. */
+    acquire(request: ImageExecutionSchedulerRequest): Promise<ImageExecutionSchedulerGrant> | ImageExecutionSchedulerGrant;
+}
+
+interface CodexSubscriptionImageProviderOptions {
+    readonly authStrategy: AuthStrategy;
+    readonly evidenceSource?: CodexImageCapabilityEvidenceSource;
+    readonly executionScheduler?: ImageExecutionScheduler;
+    readonly generationTimeoutMs?: number;
+    readonly now?: () => number;
+}
+/** Create the dormant, account-bound Codex subscription image provider. */
+declare function createCodexSubscriptionImageProvider(options: CodexSubscriptionImageProviderOptions): ImageProvider;
+
+interface CodexImageCapabilityTestedRequest {
+    readonly action: 'generate';
+    readonly n: 1;
+    readonly quality: ImageQuality;
+    readonly size: string;
+    readonly background: ImageBackground;
+    readonly outputFormat: ImageOutputFormat;
+    readonly moderation: ImageModeration;
+    readonly stream: false;
+    readonly partialImages: 0;
+    readonly outputCompression?: number;
+}
+interface CodexImageCapabilityObservedResponseFields {
+    readonly usage?: true;
+    readonly revisedPrompt?: true;
+}
+interface CodexImageCapabilityObservation {
+    /** Sensitive transient identity. Persist only after a local keyed HMAC. */
+    readonly accountId: string;
+    readonly model: 'gpt-image-2';
+    readonly request: CodexImageCapabilityTestedRequest;
+    readonly responseFields?: CodexImageCapabilityObservedResponseFields;
+}
+interface CodexImageLiveVerificationRequest {
+    readonly signal: AbortSignal;
+    readonly sessionKey?: string;
+    readonly preferredAccountId?: string;
+    readonly preferredAccountGroup?: string;
+    readonly boundAccountFallbackPolicy?: 'strict' | 'pool';
+}
+interface CodexImageLiveVerifierOptions {
+    readonly authStrategy: AuthStrategy;
+    readonly generationTimeoutMs?: number;
+}
+interface CodexImageLiveVerifier {
+    verify(request: CodexImageLiveVerificationRequest): Promise<CodexImageCapabilityObservation>;
+}
+declare function createCodexImageLiveVerifier(options: CodexImageLiveVerifierOptions): CodexImageLiveVerifier;
+
+export { type CodexImageCapabilityEvidence, type CodexImageCapabilityEvidenceRequest, type CodexImageCapabilityEvidenceSource, type CodexImageCapabilityObservation, type CodexImageCapabilityObservedResponseFields, type CodexImageCapabilityTestedRequest, type CodexImageLiveVerificationRequest, type CodexImageLiveVerifier, type CodexImageLiveVerifierOptions, type CodexSubscriptionImageProviderOptions, DEFAULT_ACCOUNT_PRIORITY, type DispatchRequest, type DispatcherHooks, type ImageExecutionAccountKey, type ImageExecutionScheduler, type ImageExecutionSchedulerGrant, type ImageExecutionSchedulerRequest, LAST_USED_PERSIST_THROTTLE_MS, SESSION_AFFINITY_TTL_MS, type SchedulableAccount, type SelectInput, type SelectResult, SubscriptionAccountSelector, SubscriptionAccountService, type SubscriptionCredentialStore, SubscriptionDispatcher, SubscriptionProviderRegistry, createCodexImageLiveVerifier, createCodexSubscriptionImageProvider, getSubscriptionAccountService, getSubscriptionProviderRegistry, setSubscriptionAccountService, setSubscriptionProviderRegistry };

package/dist/index.d.ts

@@ -10,6 +10,8 @@ import { TransformerService } from '@omnicross/core/transformer/TransformerServi
 import { Transformer } from '@omnicross/core/transformer/types';
 export { FetchLike } from '@omnicross/core/auth/GeminiCodeAssistProjectResolver';
 export { claudeOAuth, codexOAuth, geminiOAuth } from './oauth.js';
+import { ImageProvider } from '@omnicross/core/image-generation';
+import { ImageCapabilityEvidenceLayer, ImageQuality, ImageBackground, ImageOutputFormat, ImageModeration } from '@omnicross/contracts/image-generation-types';
 
 /**
  * SubscriptionCredentialStore — the credential port the subscription block
@@ -349,4 +351,98 @@ declare class SubscriptionDispatcher {
     private buildRequestSummary;
 }
 
-export { DEFAULT_ACCOUNT_PRIORITY, type DispatchRequest, type DispatcherHooks, LAST_USED_PERSIST_THROTTLE_MS, SESSION_AFFINITY_TTL_MS, type SchedulableAccount, type SelectInput, type SelectResult, SubscriptionAccountSelector, SubscriptionAccountService, type SubscriptionCredentialStore, SubscriptionDispatcher, SubscriptionProviderRegistry, getSubscriptionAccountService, getSubscriptionProviderRegistry, setSubscriptionAccountService, setSubscriptionProviderRegistry };
+/** Safe evidence request; accountId is trusted-process input and must not be logged. */
+interface CodexImageCapabilityEvidenceRequest {
+    readonly accountId: string;
+    readonly signal: AbortSignal;
+}
+interface CodexImageCapabilityEvidence {
+    readonly account: ImageCapabilityEvidenceLayer;
+    readonly upstream: ImageCapabilityEvidenceLayer;
+    /** Enable only when these response fields have separate verified provenance. */
+    readonly verifiedResponseFields?: {
+        readonly usage?: boolean;
+        readonly revisedPrompt?: boolean;
+    };
+}
+interface CodexImageCapabilityEvidenceSource {
+    resolve(request: CodexImageCapabilityEvidenceRequest): Promise<CodexImageCapabilityEvidence>;
+}
+
+declare const imageExecutionAccountKeyBrand: unique symbol;
+/** A daemon-keyed, non-public scheduling identity for one selected account. */
+type ImageExecutionAccountKey = string & {
+    readonly [imageExecutionAccountKeyBrand]: 'image-execution-account-key';
+};
+/** Credential- and content-blind admission input for selected-account work. */
+interface ImageExecutionSchedulerRequest {
+    readonly tenantId: string;
+    readonly accountKey: ImageExecutionAccountKey;
+    readonly signal: AbortSignal;
+}
+interface ImageExecutionSchedulerGrant {
+    /** Optional scheduler-owned cancellation used for retirement/shutdown. */
+    readonly signal?: AbortSignal;
+    /** Release is required to be idempotent and safe on every terminal path. */
+    release(): Promise<void> | void;
+}
+interface ImageExecutionScheduler {
+    /**
+     * Immediately derive a local opaque key. The raw identity is transient and
+     * must never enter scheduler state, status, logs, or metrics.
+     */
+    deriveAccountKey(selectedAccountId: string): ImageExecutionAccountKey;
+    /** The scheduler instance and its limits are bound to one runtime snapshot. */
+    acquire(request: ImageExecutionSchedulerRequest): Promise<ImageExecutionSchedulerGrant> | ImageExecutionSchedulerGrant;
+}
+
+interface CodexSubscriptionImageProviderOptions {
+    readonly authStrategy: AuthStrategy;
+    readonly evidenceSource?: CodexImageCapabilityEvidenceSource;
+    readonly executionScheduler?: ImageExecutionScheduler;
+    readonly generationTimeoutMs?: number;
+    readonly now?: () => number;
+}
+/** Create the dormant, account-bound Codex subscription image provider. */
+declare function createCodexSubscriptionImageProvider(options: CodexSubscriptionImageProviderOptions): ImageProvider;
+
+interface CodexImageCapabilityTestedRequest {
+    readonly action: 'generate';
+    readonly n: 1;
+    readonly quality: ImageQuality;
+    readonly size: string;
+    readonly background: ImageBackground;
+    readonly outputFormat: ImageOutputFormat;
+    readonly moderation: ImageModeration;
+    readonly stream: false;
+    readonly partialImages: 0;
+    readonly outputCompression?: number;
+}
+interface CodexImageCapabilityObservedResponseFields {
+    readonly usage?: true;
+    readonly revisedPrompt?: true;
+}
+interface CodexImageCapabilityObservation {
+    /** Sensitive transient identity. Persist only after a local keyed HMAC. */
+    readonly accountId: string;
+    readonly model: 'gpt-image-2';
+    readonly request: CodexImageCapabilityTestedRequest;
+    readonly responseFields?: CodexImageCapabilityObservedResponseFields;
+}
+interface CodexImageLiveVerificationRequest {
+    readonly signal: AbortSignal;
+    readonly sessionKey?: string;
+    readonly preferredAccountId?: string;
+    readonly preferredAccountGroup?: string;
+    readonly boundAccountFallbackPolicy?: 'strict' | 'pool';
+}
+interface CodexImageLiveVerifierOptions {
+    readonly authStrategy: AuthStrategy;
+    readonly generationTimeoutMs?: number;
+}
+interface CodexImageLiveVerifier {
+    verify(request: CodexImageLiveVerificationRequest): Promise<CodexImageCapabilityObservation>;
+}
+declare function createCodexImageLiveVerifier(options: CodexImageLiveVerifierOptions): CodexImageLiveVerifier;
+
+export { type CodexImageCapabilityEvidence, type CodexImageCapabilityEvidenceRequest, type CodexImageCapabilityEvidenceSource, type CodexImageCapabilityObservation, type CodexImageCapabilityObservedResponseFields, type CodexImageCapabilityTestedRequest, type CodexImageLiveVerificationRequest, type CodexImageLiveVerifier, type CodexImageLiveVerifierOptions, type CodexSubscriptionImageProviderOptions, DEFAULT_ACCOUNT_PRIORITY, type DispatchRequest, type DispatcherHooks, type ImageExecutionAccountKey, type ImageExecutionScheduler, type ImageExecutionSchedulerGrant, type ImageExecutionSchedulerRequest, LAST_USED_PERSIST_THROTTLE_MS, SESSION_AFFINITY_TTL_MS, type SchedulableAccount, type SelectInput, type SelectResult, SubscriptionAccountSelector, SubscriptionAccountService, type SubscriptionCredentialStore, SubscriptionDispatcher, SubscriptionProviderRegistry, createCodexImageLiveVerifier, createCodexSubscriptionImageProvider, getSubscriptionAccountService, getSubscriptionProviderRegistry, setSubscriptionAccountService, setSubscriptionProviderRegistry };