@wrongstack/core 0.297.0 → 0.298.0

package/dist/coordination/provider-status-tracker.d.ts

@@ -129,6 +129,8 @@ export interface ProviderStatusTrackerConfig {
 export declare class ProviderModelStatusTracker {
     private readonly cfg;
     private readonly map;
+    /** Account/plan quota blocks apply to unseen sibling models too. */
+    private readonly providerQuotaBlocks;
     private readonly events;
     constructor(opts?: {
         config?: ProviderStatusTrackerConfig | undefined;

package/dist/coordination/remote-mailbox-credential-store.d.ts

@@ -1,4 +1,4 @@
-import type { CredentialValidation, IssueCredentialOptions, MailboxCredential, MailboxCredentialVerifier } from './mailbox-credential-store.js';
+import type { IssueCredentialOptions, MailboxCredential, MailboxCredentialVerifier, RedactedCredentialValidation, RedactedMailboxCredential } from './mailbox-credential-store.js';
 import type { RemoteMailbox } from './remote-mailbox.js';
 /**
  * Credential façade backed by the same project SQLite owner as mailbox data.
@@ -12,15 +12,15 @@ export declare class RemoteMailboxCredentialStore implements MailboxCredentialVe
         credential: MailboxCredential;
         secret: string;
     }>;
-    verify(credentialId: string, secret: string): Promise<CredentialValidation>;
-    verifyPersisted(credentialId: string, secret: string): Promise<CredentialValidation>;
+    verify(credentialId: string, secret: string): Promise<RedactedCredentialValidation>;
+    verifyPersisted(credentialId: string, secret: string): Promise<RedactedCredentialValidation>;
     revoke(credentialId: string, reason?: string, by?: string): Promise<boolean>;
     rotate(credentialId: string, options?: Partial<IssueCredentialOptions>): Promise<{
         credential: MailboxCredential;
         secret: string;
     } | null>;
-    get(credentialId: string): Promise<MailboxCredential | null>;
-    list(): Promise<MailboxCredential[]>;
+    get(credentialId: string): Promise<RedactedMailboxCredential | null>;
+    list(): Promise<RedactedMailboxCredential[]>;
     statusCounts(): Promise<Record<string, number>>;
 }
 //# sourceMappingURL=remote-mailbox-credential-store.d.ts.map

package/dist/coordination/remote-mailbox.d.ts

@@ -1,6 +1,6 @@
 import type { HqPublisher } from '../hq/publisher.js';
 import type { EventBus } from '../kernel/events.js';
-import type { CredentialValidation, IssueCredentialOptions, MailboxCredential } from './mailbox-credential-store.js';
+import type { IssueCredentialOptions, MailboxCredential, RedactedMailboxCredential } from './mailbox-credential-store.js';
 import type { MailboxEventEmitter } from './mailbox-events.js';
 import { type MailboxProjectServerConnectionState } from './mailbox-project-server-client.js';
 import type { AgentHeartbeatInput, AgentRegistrationInput, AutoCompactOptions, AutoCompactResult, ClientHeartbeatInput, ClientRegistrationInput, ClientStatus, Mailbox, MailboxAckBatchInput, MailboxAckInput, MailboxAgentStatus, MailboxMessage, MailboxQuery, MailboxSendInput, PurgeOptions, PurgeResult } from './mailbox-types.js';
@@ -85,14 +85,18 @@ export declare class RemoteMailbox implements Mailbox {
         credential: MailboxCredential;
         secret: string;
     }>;
-    credentialVerify(credentialId: string, secret: string): Promise<CredentialValidation>;
+    credentialVerify(credentialId: string, secret: string): Promise<{
+        valid: boolean;
+        credential?: RedactedMailboxCredential | undefined;
+        reason?: string | undefined;
+    }>;
     credentialRevoke(credentialId: string, reason?: string, by?: string): Promise<boolean>;
     credentialRotate(credentialId: string, options?: Partial<IssueCredentialOptions>): Promise<{
         credential: MailboxCredential;
         secret: string;
     } | null>;
-    credentialGet(credentialId: string): Promise<MailboxCredential | null>;
-    credentialList(): Promise<MailboxCredential[]>;
+    credentialGet(credentialId: string): Promise<RedactedMailboxCredential | null>;
+    credentialList(): Promise<RedactedMailboxCredential[]>;
     credentialStatusCounts(): Promise<Record<string, number>>;
     startAutoCompactTimer(_options?: AutoCompactOptions): () => void;
     close(): Promise<void>;

package/dist/coordination/sqlite-mailbox-credentials.d.ts

@@ -16,6 +16,17 @@ export declare function credentialIssue(db: DatabaseSync, transaction: <T>(run:
     credential: MailboxCredential;
     secret: string;
 };
+/**
+ * WS-025: this answers "does this secret match this credential id?" and used
+ * to answer it as often as it was asked — a guessing oracle reachable from
+ * every mailbox surface. Failed attempts are now counted per credential id and
+ * refused for a cooldown once the limit is hit. A success clears the counter,
+ * so a legitimate holder who mistyped is not locked out of their own
+ * credential.
+ *
+ * The throttle deliberately runs BEFORE the lookup: answering "credential not
+ * found" quickly while throttling only real ids would leak which ids exist.
+ */
 export declare function credentialVerify(db: DatabaseSync, credentialId: string, secret: string): CredentialValidation;
 export declare function credentialRevoke(db: DatabaseSync, credentialId: string, reason?: string, by?: string): boolean;
 export declare function credentialRotate(db: DatabaseSync, transaction: <T>(run: () => T) => T, credentialId: string, options?: Partial<IssueCredentialOptions>): {

package/dist/core/fallback-profile-manager.d.ts

@@ -92,6 +92,20 @@ export declare class FallbackProfileManager {
             model: string;
         } | undefined;
     }): FallbackChain;
+    /** Resolve the optional, fully-qualified emergency continuity route. */
+    resolveBridge(exclude?: {
+        providerId: string;
+        model: string;
+    }): FallbackChain;
+    /**
+     * Resolve every usable configured target as an uncapped last-resort chain.
+     * Normal smart defaults stay bounded; callers append this only after the
+     * preferred chain and only when automatic fallback is enabled.
+     */
+    resolveAllConfigured(exclude?: {
+        providerId: string;
+        model: string;
+    }): FallbackChain;
     checkProvider(providerId: string): ProviderHealth;
     /**
      * Atomically replace the active immutable snapshot while preserving this