@warmdrift/kgauto-compiler 2.0.0-alpha.80 → 2.0.0-alpha.81

package/dist/{chunk-CIBHU67M.mjs → chunk-OZNAGO4U.mjs}

@@ -1,8 +1,19 @@
 // src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.80";
+var LIBRARY_VERSION = "2.0.0-alpha.81";
 
 // src/key-health.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };
+var KEY_FINGERPRINT_DOMAIN = "kgauto-key-fingerprint-v1:";
+var KEY_FINGERPRINT_LENGTH = 12;
+async function keyFingerprint(key) {
+  const trimmed = key?.trim();
+  if (!trimmed) return void 0;
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) return void 0;
+  const bytes = new TextEncoder().encode(KEY_FINGERPRINT_DOMAIN + trimmed);
+  const digest = await subtle.digest("SHA-256", bytes);
+  return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("").slice(0, KEY_FINGERPRINT_LENGTH);
+}
 function jsonResponse(status, body) {
   return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
 }
@@ -104,11 +115,13 @@ function createKeyHealthRoute(config) {
         detail: "key_absent"
       };
     }
+    const fingerprint = await keyFingerprint(key);
     const base = {
       provider: spec.provider,
       env: envName,
       present: true,
-      valid: null
+      valid: null,
+      ...fingerprint ? { key_fingerprint: fingerprint } : {}
     };
     const { url, headers } = spec.buildRequest(key);
     const started = Date.now();
@@ -199,5 +212,8 @@ function createKeyHealthRoute(config) {
 
 export {
   LIBRARY_VERSION,
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
+  keyFingerprint,
   createKeyHealthRoute
 };

package/dist/{chunk-PMTT4H5W.mjs → chunk-XPD4I3Q5.mjs}

@@ -412,9 +412,15 @@ var COST_RANKING_REFERENCE_SHAPE = {
   inputTokens: 4e3,
   outputTokens: 250
 };
-function estimateChainCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+function estimateModelCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+  if (!profile || typeof profile !== "object" || Array.isArray(profile) || typeof profile.costInputPer1m !== "number" || typeof profile.costOutputPer1m !== "number") {
+    throw new TypeError(
+      `estimateModelCostUsd: expected a single ModelProfile, got ${Array.isArray(profile) ? "an array (a chain? map over it)" : typeof profile}. For a chain: chain.map((id) => estimateModelCostUsd(getProfile(id))).`
+    );
+  }
   return shape.inputTokens / 1e6 * profile.costInputPer1m + shape.outputTokens / 1e6 * profile.costOutputPer1m;
 }
+var estimateChainCostUsd = estimateModelCostUsd;
 function buildCostOrderedChain(archetype) {
   return allProfiles().filter((p) => p.status === "current").filter(
     (p) => getArchetypePerfScore(p.id, archetype).score >= ARCHETYPE_FLOOR_DEFAULT
@@ -811,6 +817,7 @@ export {
   isSameModelRetryEnabledFromEnv,
   loadChainsFromBrain,
   COST_RANKING_REFERENCE_SHAPE,
+  estimateModelCostUsd,
   estimateChainCostUsd,
   chainProviderSpread,
   getDefaultFallbackChain,

package/dist/glassbox-routes/index.js

@@ -1956,9 +1956,15 @@ var COST_RANKING_REFERENCE_SHAPE = {
   inputTokens: 4e3,
   outputTokens: 250
 };
-function estimateChainCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+function estimateModelCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+  if (!profile || typeof profile !== "object" || Array.isArray(profile) || typeof profile.costInputPer1m !== "number" || typeof profile.costOutputPer1m !== "number") {
+    throw new TypeError(
+      `estimateModelCostUsd: expected a single ModelProfile, got ${Array.isArray(profile) ? "an array (a chain? map over it)" : typeof profile}. For a chain: chain.map((id) => estimateModelCostUsd(getProfile(id))).`
+    );
+  }
   return shape.inputTokens / 1e6 * profile.costInputPer1m + shape.outputTokens / 1e6 * profile.costOutputPer1m;
 }
+var estimateChainCostUsd = estimateModelCostUsd;
 function buildCostOrderedChain(archetype) {
   return allProfiles().filter((p) => p.status === "current").filter(
     (p) => getArchetypePerfScore(p.id, archetype).score >= ARCHETYPE_FLOOR_DEFAULT

package/dist/glassbox-routes/index.mjs

@@ -1,7 +1,7 @@
 import {
   ARCHETYPE_FLOOR_DEFAULT,
   getDefaultFallbackChain
-} from "../chunk-PMTT4H5W.mjs";
+} from "../chunk-XPD4I3Q5.mjs";
 import {
   tryGetProfile
 } from "../chunk-VVRDFE6T.mjs";

package/dist/index.d.mts

@@ -3,7 +3,7 @@ export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithG
 import { ModelProfile, ArchetypeConvention } from './profiles.mjs';
 export { ALIASES, CacheStrategy, CliffRule, LATENCY_TIER_MS, LatencyTier, LoweringSpec, RecoveryRule, StructuredOutputCapability, SystemPromptMode, allProfiles, getProfile, latencyTierOf, profilesByProvider, tryGetProfile } from './profiles.mjs';
 export { BrainForwardConfig, BrainForwardRoutes, createBrainForwardRoutes } from './brain-proxy.mjs';
-export { KeyHealthConfig, KeyHealthProvider, KeyHealthResponseBody, KeyHealthResult, KeyHealthRoute, createKeyHealthRoute } from './key-health.mjs';
+export { KEY_FINGERPRINT_DOMAIN, KEY_FINGERPRINT_LENGTH, KeyHealthConfig, KeyHealthProvider, KeyHealthResponseBody, KeyHealthResult, KeyHealthRoute, createKeyHealthRoute, keyFingerprint } from './key-health.mjs';
 import { IntentArchetypeName, OutputMode } from './dialect.mjs';
 export { ALL_ARCHETYPES, ContextBucket, DIALECT_VERSION, HistoryDepth, INTENT_ARCHETYPES, ShapeSignature, ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey } from './dialect.mjs';
 
@@ -1146,7 +1146,7 @@ declare function runStrategyEvalWithAttribution(opts: Omit<GoldenEvalOptions, 'a
  * guard in `tests/version.test.ts` fails the suite (and therefore
  * `prepublishOnly`) when they diverge — a stale constant cannot reach npm.
  */
-declare const LIBRARY_VERSION = "2.0.0-alpha.80";
+declare const LIBRARY_VERSION = "2.0.0-alpha.81";
 
 /**
  * Oracle contract — how an app tells the brain whether a response was good.
@@ -2540,10 +2540,16 @@ declare const COST_RANKING_REFERENCE_SHAPE: {
  * consumer-side code share ONE derivation of "what does this model cost
  * here" — two independent derivations of one concept will drift (s75).
  */
-declare function estimateChainCostUsd(profile: ModelProfile, shape?: {
+declare function estimateModelCostUsd(profile: ModelProfile, shape?: {
     inputTokens: number;
     outputTokens: number;
 }): number;
+/**
+ * @deprecated alpha.81 — renamed to {@link estimateModelCostUsd}; it takes a
+ * single MODEL, not a chain. Preserved because alpha.80 shipped this name and
+ * a consumer adopted it within hours. Identical behavior.
+ */
+declare const estimateChainCostUsd: typeof estimateModelCostUsd;
 /**
  * How many distinct providers a chain spans. `1` means every fallback shares
  * one provider's fate — the chain buys you retries, not outage independence.
@@ -3754,4 +3760,4 @@ declare function planDecomposition(args: PlanDecompositionArgs): DecompositionPl
  */
 declare function compile(ir: PromptIR, opts?: CompileOptions): CompileResult;
 
-export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BRAIN_READ_ENV_NAMES, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, COST_RANKING_REFERENCE_SHAPE, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, type CreateDelegateOpts, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DELEGATE_TOOL_DEFINITION, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type DelegateHandle, type DelegateRefusalReason, type DelegateResult, type DelegateToolArgs, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, ROLLBACK_SUPPRESSION_WINDOW_DAYS, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, chainProviderSpread, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, createDelegate, deriveFamilyFromModelId, deriveOwnership, estimateChainCostUsd, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecentRollback, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isDelegateEnabledFromEnv, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, mapMeasuredFailureRows, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };
+export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BRAIN_READ_ENV_NAMES, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, COST_RANKING_REFERENCE_SHAPE, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, type CreateDelegateOpts, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DELEGATE_TOOL_DEFINITION, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type DelegateHandle, type DelegateRefusalReason, type DelegateResult, type DelegateToolArgs, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, ROLLBACK_SUPPRESSION_WINDOW_DAYS, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, chainProviderSpread, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, createDelegate, deriveFamilyFromModelId, deriveOwnership, estimateChainCostUsd, estimateModelCostUsd, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecentRollback, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isDelegateEnabledFromEnv, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, mapMeasuredFailureRows, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };

package/dist/index.d.ts

@@ -3,7 +3,7 @@ export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithG
 import { ModelProfile, ArchetypeConvention } from './profiles.js';
 export { ALIASES, CacheStrategy, CliffRule, LATENCY_TIER_MS, LatencyTier, LoweringSpec, RecoveryRule, StructuredOutputCapability, SystemPromptMode, allProfiles, getProfile, latencyTierOf, profilesByProvider, tryGetProfile } from './profiles.js';
 export { BrainForwardConfig, BrainForwardRoutes, createBrainForwardRoutes } from './brain-proxy.js';
-export { KeyHealthConfig, KeyHealthProvider, KeyHealthResponseBody, KeyHealthResult, KeyHealthRoute, createKeyHealthRoute } from './key-health.js';
+export { KEY_FINGERPRINT_DOMAIN, KEY_FINGERPRINT_LENGTH, KeyHealthConfig, KeyHealthProvider, KeyHealthResponseBody, KeyHealthResult, KeyHealthRoute, createKeyHealthRoute, keyFingerprint } from './key-health.js';
 import { IntentArchetypeName, OutputMode } from './dialect.js';
 export { ALL_ARCHETYPES, ContextBucket, DIALECT_VERSION, HistoryDepth, INTENT_ARCHETYPES, ShapeSignature, ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey } from './dialect.js';
 
@@ -1146,7 +1146,7 @@ declare function runStrategyEvalWithAttribution(opts: Omit<GoldenEvalOptions, 'a
  * guard in `tests/version.test.ts` fails the suite (and therefore
  * `prepublishOnly`) when they diverge — a stale constant cannot reach npm.
  */
-declare const LIBRARY_VERSION = "2.0.0-alpha.80";
+declare const LIBRARY_VERSION = "2.0.0-alpha.81";
 
 /**
  * Oracle contract — how an app tells the brain whether a response was good.
@@ -2540,10 +2540,16 @@ declare const COST_RANKING_REFERENCE_SHAPE: {
  * consumer-side code share ONE derivation of "what does this model cost
  * here" — two independent derivations of one concept will drift (s75).
  */
-declare function estimateChainCostUsd(profile: ModelProfile, shape?: {
+declare function estimateModelCostUsd(profile: ModelProfile, shape?: {
     inputTokens: number;
     outputTokens: number;
 }): number;
+/**
+ * @deprecated alpha.81 — renamed to {@link estimateModelCostUsd}; it takes a
+ * single MODEL, not a chain. Preserved because alpha.80 shipped this name and
+ * a consumer adopted it within hours. Identical behavior.
+ */
+declare const estimateChainCostUsd: typeof estimateModelCostUsd;
 /**
  * How many distinct providers a chain spans. `1` means every fallback shares
  * one provider's fate — the chain buys you retries, not outage independence.
@@ -3754,4 +3760,4 @@ declare function planDecomposition(args: PlanDecompositionArgs): DecompositionPl
  */
 declare function compile(ir: PromptIR, opts?: CompileOptions): CompileResult;
 
-export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BRAIN_READ_ENV_NAMES, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, COST_RANKING_REFERENCE_SHAPE, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, type CreateDelegateOpts, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DELEGATE_TOOL_DEFINITION, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type DelegateHandle, type DelegateRefusalReason, type DelegateResult, type DelegateToolArgs, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, ROLLBACK_SUPPRESSION_WINDOW_DAYS, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, chainProviderSpread, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, createDelegate, deriveFamilyFromModelId, deriveOwnership, estimateChainCostUsd, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecentRollback, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isDelegateEnabledFromEnv, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, mapMeasuredFailureRows, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };
+export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BRAIN_READ_ENV_NAMES, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, COST_RANKING_REFERENCE_SHAPE, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, type CreateDelegateOpts, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DELEGATE_TOOL_DEFINITION, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type DelegateHandle, type DelegateRefusalReason, type DelegateResult, type DelegateToolArgs, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, ROLLBACK_SUPPRESSION_WINDOW_DAYS, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, chainProviderSpread, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, createDelegate, deriveFamilyFromModelId, deriveOwnership, estimateChainCostUsd, estimateModelCostUsd, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecentRollback, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isDelegateEnabledFromEnv, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, mapMeasuredFailureRows, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };

package/dist/index.js

@@ -40,6 +40,8 @@ __export(index_exports, {
   FamilyResolutionError: () => FamilyResolutionError,
   INTENT_ARCHETYPES: () => INTENT_ARCHETYPES,
   JUDGE_RUBRICS: () => JUDGE_RUBRICS,
+  KEY_FINGERPRINT_DOMAIN: () => KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH: () => KEY_FINGERPRINT_LENGTH,
   LATENCY_TIER_MS: () => LATENCY_TIER_MS,
   LIBRARY_VERSION: () => LIBRARY_VERSION,
   MEASURED_FAILURE_CFG: () => MEASURED_FAILURE_CFG,
@@ -88,6 +90,7 @@ __export(index_exports, {
   deriveFamilyFromModelId: () => deriveFamilyFromModelId,
   deriveOwnership: () => deriveOwnership,
   estimateChainCostUsd: () => estimateChainCostUsd,
+  estimateModelCostUsd: () => estimateModelCostUsd,
   execute: () => execute,
   findBetterFit: () => findBetterFit,
   flushBrainDeadLetter: () => flushBrainDeadLetter,
@@ -124,6 +127,7 @@ __export(index_exports, {
   isPromotionsBrainActive: () => isPromotionsBrainActive,
   isProviderReachable: () => isProviderReachable,
   judgeMeasuredFailure: () => judgeMeasuredFailure,
+  keyFingerprint: () => keyFingerprint,
   latencyTierOf: () => latencyTierOf,
   learningKey: () => learningKey,
   loadAliasesFromBrain: () => loadAliasesFromBrain,
@@ -3868,9 +3872,15 @@ var COST_RANKING_REFERENCE_SHAPE = {
   inputTokens: 4e3,
   outputTokens: 250
 };
-function estimateChainCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+function estimateModelCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+  if (!profile || typeof profile !== "object" || Array.isArray(profile) || typeof profile.costInputPer1m !== "number" || typeof profile.costOutputPer1m !== "number") {
+    throw new TypeError(
+      `estimateModelCostUsd: expected a single ModelProfile, got ${Array.isArray(profile) ? "an array (a chain? map over it)" : typeof profile}. For a chain: chain.map((id) => estimateModelCostUsd(getProfile(id))).`
+    );
+  }
   return shape.inputTokens / 1e6 * profile.costInputPer1m + shape.outputTokens / 1e6 * profile.costOutputPer1m;
 }
+var estimateChainCostUsd = estimateModelCostUsd;
 function buildCostOrderedChain(archetype) {
   return allProfiles().filter((p) => p.status === "current").filter(
     (p) => getArchetypePerfScore(p.id, archetype).score >= ARCHETYPE_FLOOR_DEFAULT
@@ -5834,6 +5844,9 @@ function validateFinalFit(ir, profile, tokens) {
   }
 }
 
+// src/version.ts
+var LIBRARY_VERSION = "2.0.0-alpha.81";
+
 // src/pricing-brain.ts
 function isPricingRow(x) {
   if (!x || typeof x !== "object") return false;
@@ -6407,6 +6420,12 @@ function buildAdvisoryRow(outcomeId, a) {
     outcome_id: outcomeId,
     code: a.code,
     level: a.level,
+    // alpha.81 (tt-intel s118, migration 053) — the emitting library version.
+    // A corrected rule cannot rewrite firings that are already open, so a
+    // consumer reading a stale suggestion had no way to tell it predated the
+    // fix. tt-intel spent two hours on exactly that. NULL on pre-053 rows
+    // reads as UNKNOWN; from here every firing self-identifies.
+    rule_version: LIBRARY_VERSION,
     message: a.message,
     recommendation_type: a.recommendationType ?? null,
     suggestion: a.suggestion ?? null,
@@ -9382,11 +9401,19 @@ function createBrainForwardRoutes(config) {
   return { handle, segments: KNOWN_SEGMENTS };
 }
 
-// src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.80";
-
 // src/key-health.ts
 var JSON_HEADERS2 = { "Content-Type": "application/json" };
+var KEY_FINGERPRINT_DOMAIN = "kgauto-key-fingerprint-v1:";
+var KEY_FINGERPRINT_LENGTH = 12;
+async function keyFingerprint(key) {
+  const trimmed = key?.trim();
+  if (!trimmed) return void 0;
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) return void 0;
+  const bytes = new TextEncoder().encode(KEY_FINGERPRINT_DOMAIN + trimmed);
+  const digest = await subtle.digest("SHA-256", bytes);
+  return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("").slice(0, KEY_FINGERPRINT_LENGTH);
+}
 function jsonResponse2(status, body) {
   return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS2 });
 }
@@ -9488,11 +9515,13 @@ function createKeyHealthRoute(config) {
         detail: "key_absent"
       };
     }
+    const fingerprint = await keyFingerprint(key);
     const base = {
       provider: spec.provider,
       env: envName,
       present: true,
-      valid: null
+      valid: null,
+      ...fingerprint ? { key_fingerprint: fingerprint } : {}
     };
     const { url, headers } = spec.buildRequest(key);
     const started = Date.now();
@@ -10440,6 +10469,8 @@ function compile2(ir, opts) {
   FamilyResolutionError,
   INTENT_ARCHETYPES,
   JUDGE_RUBRICS,
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
   LATENCY_TIER_MS,
   LIBRARY_VERSION,
   MEASURED_FAILURE_CFG,
@@ -10488,6 +10519,7 @@ function compile2(ir, opts) {
   deriveFamilyFromModelId,
   deriveOwnership,
   estimateChainCostUsd,
+  estimateModelCostUsd,
   execute,
   findBetterFit,
   flushBrainDeadLetter,
@@ -10524,6 +10556,7 @@ function compile2(ir, opts) {
   isPromotionsBrainActive,
   isProviderReachable,
   judgeMeasuredFailure,
+  keyFingerprint,
   latencyTierOf,
   learningKey,
   loadAliasesFromBrain,

package/dist/index.mjs

@@ -14,9 +14,12 @@ import {
   resolveOutputMode
 } from "./chunk-BVEXV5KC.mjs";
 import {
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
   LIBRARY_VERSION,
-  createKeyHealthRoute
-} from "./chunk-CIBHU67M.mjs";
+  createKeyHealthRoute,
+  keyFingerprint
+} from "./chunk-OZNAGO4U.mjs";
 import {
   ABSOLUTE_FLOOR,
   ARCHETYPE_FLOOR_DEFAULT,
@@ -29,6 +32,7 @@ import {
   createBrainQueryCache,
   ensureCrossProviderTail,
   estimateChainCostUsd,
+  estimateModelCostUsd,
   getAllStarterChains,
   getAllStarterChainsWithGrounding,
   getArchetypePerfScore,
@@ -50,7 +54,7 @@ import {
   loadChainsFromBrain,
   readBrainReadEnv,
   resolveProviderKey
-} from "./chunk-PMTT4H5W.mjs";
+} from "./chunk-XPD4I3Q5.mjs";
 import {
   ALIASES,
   LATENCY_TIER_MS,
@@ -3733,6 +3737,12 @@ function buildAdvisoryRow(outcomeId, a) {
     outcome_id: outcomeId,
     code: a.code,
     level: a.level,
+    // alpha.81 (tt-intel s118, migration 053) — the emitting library version.
+    // A corrected rule cannot rewrite firings that are already open, so a
+    // consumer reading a stale suggestion had no way to tell it predated the
+    // fix. tt-intel spent two hours on exactly that. NULL on pre-053 rows
+    // reads as UNKNOWN; from here every firing self-identifies.
+    rule_version: LIBRARY_VERSION,
     message: a.message,
     recommendation_type: a.recommendationType ?? null,
     suggestion: a.suggestion ?? null,
@@ -7099,6 +7109,8 @@ export {
   FamilyResolutionError,
   INTENT_ARCHETYPES,
   JUDGE_RUBRICS,
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
   LATENCY_TIER_MS,
   LIBRARY_VERSION,
   MEASURED_FAILURE_CFG,
@@ -7147,6 +7159,7 @@ export {
   deriveFamilyFromModelId,
   deriveOwnership,
   estimateChainCostUsd,
+  estimateModelCostUsd,
   execute,
   findBetterFit,
   flushBrainDeadLetter,
@@ -7183,6 +7196,7 @@ export {
   isPromotionsBrainActive,
   isProviderReachable,
   judgeMeasuredFailure,
+  keyFingerprint,
   latencyTierOf,
   learningKey,
   loadAliasesFromBrain,

package/dist/key-health.d.mts

@@ -86,6 +86,34 @@ interface KeyHealthConfig {
     /** Per-provider probe timeout in ms. Default 3000. */
     timeoutMs?: number;
 }
+/**
+ * alpha.81 — a NON-REVERSIBLE identity for a provider key, so the fleet can
+ * answer "are two consumers on the same key?" without any consumer, or the
+ * brain, ever holding a key value.
+ *
+ * Origin: PB's `one-shared-provider-key-across-four-consumers` (s83). All four
+ * provider keys are Vercel team-level Shared Env Vars across four projects, so
+ * one exhausted account is a four-consumer outage that each consumer diagnoses
+ * locally as its own, and provider spend is a single undifferentiated number.
+ * PB's observation that only kgauto can see this is correct: the library runs
+ * inside every consumer's process and resolves the key there; no consumer can
+ * compare its key against a peer's.
+ *
+ * **Why truncation is the safety property, not an optimization.** The digest is
+ * cut to 12 hex chars (48 bits) — enough that a collision between the handful
+ * of keys in one portfolio is negligible, far too little to verify a guessed
+ * key against. Provider keys are high-entropy random strings, so even the full
+ * digest would not be brute-forceable; the truncation means the stored value is
+ * not a verification oracle even if the key space were later reduced. The
+ * domain-separation prefix keeps these digests useless against any hash
+ * computed for another purpose.
+ *
+ * Never log, return, or persist the key itself. This function is the only
+ * sanctioned way a key becomes a value that may leave the process.
+ */
+declare const KEY_FINGERPRINT_DOMAIN = "kgauto-key-fingerprint-v1:";
+declare const KEY_FINGERPRINT_LENGTH = 12;
+declare function keyFingerprint(key: string): Promise<string | undefined>;
 interface KeyHealthResult {
     provider: KeyHealthProvider;
     /** Canonical env var name probed (the resolved one for Google). */
@@ -102,6 +130,13 @@ interface KeyHealthResult {
     balance_usd?: number;
     /** Failure class when valid is null with a probe attempted (e.g. 'timeout', 'http_500') or 'key_absent'. */
     detail?: string;
+    /**
+     * alpha.81 — truncated, domain-separated SHA-256 of the resolved key. NEVER
+     * the key. Identical values across two consumers mean they resolve the same
+     * credential; that is the only question it can answer. Absent when the key is
+     * absent or the runtime exposes no WebCrypto. See {@link keyFingerprint}.
+     */
+    key_fingerprint?: string;
 }
 interface KeyHealthResponseBody {
     app_id: string;
@@ -128,4 +163,4 @@ interface KeyHealthRoute {
  */
 declare function createKeyHealthRoute(config: KeyHealthConfig): KeyHealthRoute;
 
-export { type KeyHealthConfig, type KeyHealthProvider, type KeyHealthResponseBody, type KeyHealthResult, type KeyHealthRoute, createKeyHealthRoute };
+export { KEY_FINGERPRINT_DOMAIN, KEY_FINGERPRINT_LENGTH, type KeyHealthConfig, type KeyHealthProvider, type KeyHealthResponseBody, type KeyHealthResult, type KeyHealthRoute, createKeyHealthRoute, keyFingerprint };

package/dist/key-health.d.ts

@@ -86,6 +86,34 @@ interface KeyHealthConfig {
     /** Per-provider probe timeout in ms. Default 3000. */
     timeoutMs?: number;
 }
+/**
+ * alpha.81 — a NON-REVERSIBLE identity for a provider key, so the fleet can
+ * answer "are two consumers on the same key?" without any consumer, or the
+ * brain, ever holding a key value.
+ *
+ * Origin: PB's `one-shared-provider-key-across-four-consumers` (s83). All four
+ * provider keys are Vercel team-level Shared Env Vars across four projects, so
+ * one exhausted account is a four-consumer outage that each consumer diagnoses
+ * locally as its own, and provider spend is a single undifferentiated number.
+ * PB's observation that only kgauto can see this is correct: the library runs
+ * inside every consumer's process and resolves the key there; no consumer can
+ * compare its key against a peer's.
+ *
+ * **Why truncation is the safety property, not an optimization.** The digest is
+ * cut to 12 hex chars (48 bits) — enough that a collision between the handful
+ * of keys in one portfolio is negligible, far too little to verify a guessed
+ * key against. Provider keys are high-entropy random strings, so even the full
+ * digest would not be brute-forceable; the truncation means the stored value is
+ * not a verification oracle even if the key space were later reduced. The
+ * domain-separation prefix keeps these digests useless against any hash
+ * computed for another purpose.
+ *
+ * Never log, return, or persist the key itself. This function is the only
+ * sanctioned way a key becomes a value that may leave the process.
+ */
+declare const KEY_FINGERPRINT_DOMAIN = "kgauto-key-fingerprint-v1:";
+declare const KEY_FINGERPRINT_LENGTH = 12;
+declare function keyFingerprint(key: string): Promise<string | undefined>;
 interface KeyHealthResult {
     provider: KeyHealthProvider;
     /** Canonical env var name probed (the resolved one for Google). */
@@ -102,6 +130,13 @@ interface KeyHealthResult {
     balance_usd?: number;
     /** Failure class when valid is null with a probe attempted (e.g. 'timeout', 'http_500') or 'key_absent'. */
     detail?: string;
+    /**
+     * alpha.81 — truncated, domain-separated SHA-256 of the resolved key. NEVER
+     * the key. Identical values across two consumers mean they resolve the same
+     * credential; that is the only question it can answer. Absent when the key is
+     * absent or the runtime exposes no WebCrypto. See {@link keyFingerprint}.
+     */
+    key_fingerprint?: string;
 }
 interface KeyHealthResponseBody {
     app_id: string;
@@ -128,4 +163,4 @@ interface KeyHealthRoute {
  */
 declare function createKeyHealthRoute(config: KeyHealthConfig): KeyHealthRoute;
 
-export { type KeyHealthConfig, type KeyHealthProvider, type KeyHealthResponseBody, type KeyHealthResult, type KeyHealthRoute, createKeyHealthRoute };
+export { KEY_FINGERPRINT_DOMAIN, KEY_FINGERPRINT_LENGTH, type KeyHealthConfig, type KeyHealthProvider, type KeyHealthResponseBody, type KeyHealthResult, type KeyHealthRoute, createKeyHealthRoute, keyFingerprint };

package/dist/key-health.js

@@ -20,15 +20,29 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/key-health.ts
 var key_health_exports = {};
 __export(key_health_exports, {
-  createKeyHealthRoute: () => createKeyHealthRoute
+  KEY_FINGERPRINT_DOMAIN: () => KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH: () => KEY_FINGERPRINT_LENGTH,
+  createKeyHealthRoute: () => createKeyHealthRoute,
+  keyFingerprint: () => keyFingerprint
 });
 module.exports = __toCommonJS(key_health_exports);
 
 // src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.80";
+var LIBRARY_VERSION = "2.0.0-alpha.81";
 
 // src/key-health.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };
+var KEY_FINGERPRINT_DOMAIN = "kgauto-key-fingerprint-v1:";
+var KEY_FINGERPRINT_LENGTH = 12;
+async function keyFingerprint(key) {
+  const trimmed = key?.trim();
+  if (!trimmed) return void 0;
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) return void 0;
+  const bytes = new TextEncoder().encode(KEY_FINGERPRINT_DOMAIN + trimmed);
+  const digest = await subtle.digest("SHA-256", bytes);
+  return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("").slice(0, KEY_FINGERPRINT_LENGTH);
+}
 function jsonResponse(status, body) {
   return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
 }
@@ -130,11 +144,13 @@ function createKeyHealthRoute(config) {
         detail: "key_absent"
       };
     }
+    const fingerprint = await keyFingerprint(key);
     const base = {
       provider: spec.provider,
       env: envName,
       present: true,
-      valid: null
+      valid: null,
+      ...fingerprint ? { key_fingerprint: fingerprint } : {}
     };
     const { url, headers } = spec.buildRequest(key);
     const started = Date.now();
@@ -224,5 +240,8 @@ function createKeyHealthRoute(config) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  createKeyHealthRoute
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
+  createKeyHealthRoute,
+  keyFingerprint
 });

package/dist/key-health.mjs

@@ -1,6 +1,12 @@
 import {
-  createKeyHealthRoute
-} from "./chunk-CIBHU67M.mjs";
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
+  createKeyHealthRoute,
+  keyFingerprint
+} from "./chunk-OZNAGO4U.mjs";
 export {
-  createKeyHealthRoute
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
+  createKeyHealthRoute,
+  keyFingerprint
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmdrift/kgauto-compiler",
-  "version": "2.0.0-alpha.80",
+  "version": "2.0.0-alpha.81",
   "description": "Prompt compiler with executable provider knowledge for multi-model AI apps: normalized multi-provider transport with fallback chains, compile-time cliff guards, a curated model registry, and a telemetry flight recorder. Swap models without rewriting prompts.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",