agl 40.4.0 → 40.5.0

package/dist_ts_authswitch/classes.authoritydatabase.d.ts

@@ -1,4 +1,6 @@
 import * as plugins from './plugins.js';
+import { type IAuthSwitchSpendAnswer } from './authority-contract.js';
+import { type IAuthSwitchSpendReading } from './authority-spend.js';
 import { type IStoredAuthorityAccount, type IStoredAuthorityBinding, type IStoredAuthorityClaudeHandoff, type IStoredAuthorityClaudeSwitch, type IStoredAuthorityClaudeRepair, type IStoredAuthorityClaudeRelease, type IStoredAuthorityClaudeHome, type IStoredAuthorityClaudeContainerHome, type IStoredAuthorityNativeIdentity, type IStoredAuthorityNativePair, type TStoredClaudeMoveOutcome, type IStoredAuthorityCodexHandoff, type IStoredAuthorityCodexHome, type IStoredAuthorityCodexHostHome, type IStoredAuthorityEnrollment, type IStoredAuthorityEvent, type IStoredAuthorityGrant, type IStoredAuthorityHandoff, type IStoredAuthorityDeviceOperation, type IStoredAuthorityMeta, type IStoredAuthorityMigrationLedger, type IStoredAuthorityOperation, type IStoredAuthorityPreuseOperation } from './classes.authoritymodels.js';
 import { type IAuthSwitchStoredUsage, type IAuthSwitchStoredUsageEstimate, type IAuthSwitchUsageContext } from './classes.authorityusage.js';
 export interface IAuthSwitchAuthorityDatabaseOptions {
@@ -125,15 +127,18 @@ export type TClaudeReleaseStep = {
 } | {
     step: 'quarantine';
 };
+/** The purposes of a login a runtime binds: a ChatGPT login, a Claude login, or an Anthropic or OpenAI API key. */
+export type TAuthSwitchBindPurpose = 'openai_managed' | 'claude_host_native' | 'anthropic_api_key' | 'openai_api_key';
+export declare const authSwitchBindPurposes: readonly TAuthSwitchBindPurpose[];
 /**
  * The purpose a runtime bind of this login is accepted under, as far as the stored records decide it, or `null`:
  * the account is not removed, and the login is its selected, ready, daemon-held login of the account's own provider
- * -- its ChatGPT login (`openai_managed`), its Claude login (`claude_host_native`) or its Anthropic API key
- * (`anthropic_api_key`). A Claude login further needs a verified import receipt (`hasVerifiedClaudeGrantReceipt`) and
- * the daemon's Claude renewer. The authority page's `bindableGrantIds` and the bind itself both decide by this, so a
- * login published as bindable is one a bind accepts.
+ * -- its ChatGPT login (`openai_managed`), its Claude login (`claude_host_native`) or its Anthropic or OpenAI API key
+ * (`anthropic_api_key`, `openai_api_key`). A Claude login further needs a verified import receipt
+ * (`hasVerifiedClaudeGrantReceipt`) and the daemon's Claude renewer. The authority page's `bindableGrantIds` and the
+ * bind itself both decide by this, so a login published as bindable is one a bind accepts.
  */
-export declare const authorityBindPurpose: (account: IStoredAuthorityAccount, grant: IStoredAuthorityGrant) => 'openai_managed' | 'claude_host_native' | 'anthropic_api_key' | null;
+export declare const authorityBindPurpose: (account: IStoredAuthorityAccount, grant: IStoredAuthorityGrant) => TAuthSwitchBindPurpose | null;
 /** Separate account, grant, binding and journal records; the only global record is a revision counter. */
 export declare class AuthSwitchAuthorityDatabase {
     private readonly options;
@@ -248,6 +253,24 @@ export declare class AuthSwitchAuthorityDatabase {
      * reader of the snapshot follows.
      */
     writeUsageEstimate(next: IAuthSwitchStoredUsageEstimate): Promise<boolean>;
+    /**
+     * An API key's spend in the month `nowArg` falls in, with its account's spend limit as it stands. Refused
+     * (`login_unavailable`) for any login but an API key of its account.
+     */
+    readSpend(accountId: string, loginId: string, nowArg: number): Promise<IAuthSwitchSpendReading>;
+    /**
+     * Records a spend report of an API key's login in one transaction: each answer's entry, the totals of the months they
+     * count in, and an account event when the report changed whether the key is at its limit or began the month's spend,
+     * so a reader of the snapshot reads the key's usage again. An entry recorded already with the same content is no
+     * change; one with other content refuses the whole report, naming the answer. An answer of a month before the previous
+     * one counts nowhere: only the current and the previous month are kept, and entries and totals of earlier months are
+     * deleted here, a bounded number per report. A removed key's spend is recorded too, so its account keeps the month's
+     * spend if the key comes back. Answers `changed` with the reading of the month `nowArg` falls in.
+     */
+    recordSpend(accountId: string, loginId: string, answers: readonly IAuthSwitchSpendAnswer[], nowArg: number): Promise<{
+        reading: IAuthSwitchSpendReading;
+        changed: boolean;
+    }>;
     /** Delete one login's usage estimate, if one is stored. */
     deleteUsageEstimate(accountId: string, loginId: string): Promise<void>;
     /** Publish one credential-free usage result only if its authority and predecessor still match. */