agl 40.4.0 → 40.5.0

package/dist_ts_interfaces/requests.accounts.d.ts

@@ -89,6 +89,8 @@ export type TControllerAccountNativeAssignment = plugins.authswitchAuthority.IAu
 export type TControllerAccountOperation = plugins.authswitchAuthority.IAuthSwitchOperation;
 export type TControllerAccountPreuse = plugins.authswitchAuthority.IAuthSwitchPreuseOperation;
 export type TControllerAccountUsage = plugins.authswitchAuthority.IAuthSwitchUsageSnapshot;
+/** An API key's month, the reading of an API key account's usage (`kind: 'spend'`). */
+export type TControllerAccountSpendReading = plugins.authswitchAuthority.IAuthSwitchSpendReading;
 /** A re-check of a Claude login: the usage held once its read finished, and how that read went. */
 export type TControllerAccountUsageRecheck = plugins.authswitchAuthority.IAuthSwitchUsageRecheck;
 export type TControllerAccountsDoctorPage = plugins.authswitchAuthority.IAuthSwitchDoctorPage;
@@ -185,6 +187,60 @@ export interface IReq_ControllerAccountsMaxUsage extends plugins.typedrequestInt
         answer: TControllerAccountsAnswer<TControllerAccount>;
     };
 }
+/** The providers whose API keys the Accounts screen adds as accounts. */
+export type TControllerApiKeyProvider = plugins.authswitchAuthority.TAuthSwitchApiKeyProvider;
+/**
+ * The spend limit rule, as the accounts service publishes and applies it: a whole number of cents from
+ * `controllerSpendLimitRange.min` to `.max`, in micro-dollars. A view checks a value with it before it offers the
+ * change, and the service refuses any other value with `invalid_input`.
+ */
+export declare const isControllerSpendLimitMicroUsd: typeof plugins.authswitchSpend.isAuthSwitchSpendLimitMicroUsd;
+/** The range of a spend limit, in micro-dollars. */
+export declare const controllerSpendLimitRange: Readonly<{
+    min: number;
+    max: number;
+}>;
+/** The longest API key the accounts service holds, in characters; a longer value is refused before it is sent. */
+export declare const controllerApiKeyMaxLength = 512;
+/**
+ * Adds an Anthropic or OpenAI API key as an account, with an optional label and monthly spend limit
+ * (`isControllerSpendLimitMicroUsd`). The accounts service asks the provider whether it accepts the key before it holds
+ * it, and answers why when it does not (`api_key_unverified`, `invalid_input`). The key is never answered, logged or
+ * audited; the account names it only by how it ends (`keyHint`). The answer arrives only once the controller's own
+ * projection shows the account; it can take up to 35 seconds, the provider's answer included.
+ */
+export interface IReq_ControllerAccountsApiKeyAdd extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_ControllerAccountsApiKeyAdd> {
+    method: 'controller.accounts.apikey.add';
+    request: {
+        providerId: TControllerApiKeyProvider;
+        apiKey: string;
+        label?: string;
+        spendLimitMicroUsd?: number;
+    };
+    response: {
+        answer: TControllerAccountsAnswer<{
+            account: TControllerAccount;
+            loginId: string;
+        }>;
+    };
+}
+/**
+ * Sets an API key account's monthly spend limit, or clears it with `null`: at the limit AGL's inference proxy places
+ * nothing more on the key until the month ends (UTC). `expectedRevision` is the revision the view showed, so a change of
+ * an account that changed meanwhile is refused as `account_changed`, and a value that breaks the rule, or an account on
+ * a sign-in, as `invalid_input`, both by the service. The answer arrives only once the projection shows the result.
+ */
+export interface IReq_ControllerAccountsSpendLimit extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_ControllerAccountsSpendLimit> {
+    method: 'controller.accounts.spendlimit';
+    request: {
+        accountId: string;
+        expectedRevision: number;
+        spendLimitMicroUsd: number | null;
+    };
+    response: {
+        answer: TControllerAccountsAnswer<TControllerAccount>;
+    };
+}
 /** Duration validation shared with the authority; no implicit duration is supplied. */
 export declare const isControllerReserveLiftHours: typeof plugins.authswitchAuthority.isAuthSwitchReserveLiftHours;
 /** Lift only the saved reserve. The authority sets the expiry; the projection must show the change before answering. */

package/dist_ts_interfaces/requests.accounts.js

@@ -16,6 +16,16 @@ export const controllerAccountLabelMaxLength = plugins.authswitchAuthority.authS
 export const isControllerAccountMaxUsagePercent = plugins.authswitchAuthority.isAuthSwitchMaxUsagePercent;
 /** The range of an account's usage threshold, in whole percent. */
 export const controllerAccountMaxUsageRange = plugins.authswitchAuthority.authSwitchMaxUsageRange;
+/**
+ * The spend limit rule, as the accounts service publishes and applies it: a whole number of cents from
+ * `controllerSpendLimitRange.min` to `.max`, in micro-dollars. A view checks a value with it before it offers the
+ * change, and the service refuses any other value with `invalid_input`.
+ */
+export const isControllerSpendLimitMicroUsd = plugins.authswitchSpend.isAuthSwitchSpendLimitMicroUsd;
+/** The range of a spend limit, in micro-dollars. */
+export const controllerSpendLimitRange = plugins.authswitchSpend.authSwitchSpendLimitRange;
+/** The longest API key the accounts service holds, in characters; a longer value is refused before it is sent. */
+export const controllerApiKeyMaxLength = 512;
 /** Duration validation shared with the authority; no implicit duration is supplied. */
 export const isControllerReserveLiftHours = plugins.authswitchAuthority.isAuthSwitchReserveLiftHours;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVxdWVzdHMuYWNjb3VudHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi90c19pbnRlcmZhY2VzL3JlcXVlc3RzLmFjY291bnRzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxPQUFPLE1BQU0sY0FBYyxDQUFDO0FBOEd4QyxvR0FBb0c7QUFDcEcsTUFBTSxDQUFDLE1BQU0sZ0NBQWdDLEdBQUcsQ0FBQyxTQUFrQyxFQUFXLEVBQUUsQ0FBQyxDQUMvRixTQUFTLENBQUMsS0FBSyxLQUFLLFNBQVMsSUFBSSxTQUFTLENBQUMsS0FBSyxLQUFLLFlBQVksQ0FDbEUsQ0FBQztBQThCRjs7O0dBR0c7QUFDSCxNQUFNLENBQUMsTUFBTSx3QkFBd0IsR0FBRyxPQUFPLENBQUMsbUJBQW1CLENBQUMsd0JBQXdCLENBQUM7QUFDN0YsdUVBQXVFO0FBQ3ZFLE1BQU0sQ0FBQyxNQUFNLCtCQUErQixHQUFHLE9BQU8sQ0FBQyxtQkFBbUIsQ0FBQywrQkFBK0IsQ0FBQztBQWlCM0c7Ozs7R0FJRztBQUNILE1BQU0sQ0FBQyxNQUFNLGtDQUFrQyxHQUFHLE9BQU8sQ0FBQyxtQkFBbUIsQ0FBQywyQkFBMkIsQ0FBQztBQUMxRyxtRUFBbUU7QUFDbkUsTUFBTSxDQUFDLE1BQU0sOEJBQThCLEdBQUcsT0FBTyxDQUFDLG1CQUFtQixDQUFDLHVCQUF1QixDQUFDO0FBcUJsRzs7OztHQUlHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sOEJBQThCLEdBQUcsT0FBTyxDQUFDLGVBQWUsQ0FBQyw4QkFBOEIsQ0FBQztBQUNyRyxvREFBb0Q7QUFDcEQsTUFBTSxDQUFDLE1BQU0seUJBQXlCLEdBQUcsT0FBTyxDQUFDLGVBQWUsQ0FBQyx5QkFBeUIsQ0FBQztBQUUzRixrSEFBa0g7QUFDbEgsTUFBTSxDQUFDLE1BQU0seUJBQXlCLEdBQUcsR0FBRyxDQUFDO0FBaUM3Qyx1RkFBdUY7QUFDdkYsTUFBTSxDQUFDLE1BQU0sNEJBQTRCLEdBQUcsT0FBTyxDQUFDLG1CQUFtQixDQUFDLDRCQUE0QixDQUFDIn0=

package/dist_ts_interfaces/requests.d.ts

@@ -1,5 +1,5 @@
 import type { IReq_ControllerConfigurationResourceGet, IReq_ControllerConfigurationStateGet, IReq_ControllerConfigurationSummaryGet, IReq_ControllerConfigurationMasterGet, IReq_ControllerConfigurationMasterSave, IReq_ControllerConfigurationProject, IReq_ControllerConfigurationReview, IReq_ControllerConfigurationApply, IReq_ControllerConfigurationRestoreReview, IReq_ControllerConfigurationRestore, IReq_ControllerConfigurationTargetBind, IReq_ControllerConfigurationOperationRetry, IReq_ControllerConfigurationOperationRecover, IReq_ControllerConfigurationOperationAbandon, IReq_ControllerConfigurationOwnerIssue, IReq_ControllerConfigurationOwnerRevoke } from './requests.configuration.js';
-import type { IReq_ControllerAccountsAdd, IReq_ControllerAccountsDoctorGet, IReq_ControllerAccountsOperationCancel, IReq_ControllerAccountsOperationGet, IReq_ControllerAccountsPreuseCancel, IReq_ControllerAccountsPreuseGet, IReq_ControllerAccountsPreuseStart, IReq_ControllerAccountsReauth, IReq_ControllerAccountsRemove, IReq_ControllerAccountsRename, IReq_ControllerAccountsMaxUsage, IReq_ControllerAccountsReserveLift, IReq_ControllerAccountsSnapshot, IReq_ControllerAccountsUsageGet, IReq_ControllerAccountsUsageRecheck, IReq_ControllerAccountsClaudeHostGet, IReq_ControllerAccountsClaudeRelease, IReq_ControllerAccountsClaudeReleaseGet, IReq_ControllerAccountsClaudeRepair, IReq_ControllerAccountsClaudeSignInCancel, IReq_ControllerAccountsClaudeSignInGet, IReq_ControllerAccountsClaudeSignInStart, IReq_ControllerAccountsCodexAdopt, IReq_ControllerCodexAccountUse, IReq_ControllerAccountsCodexRelease } from './requests.accounts.js';
+import type { IReq_ControllerAccountsAdd, IReq_ControllerAccountsDoctorGet, IReq_ControllerAccountsOperationCancel, IReq_ControllerAccountsOperationGet, IReq_ControllerAccountsPreuseCancel, IReq_ControllerAccountsPreuseGet, IReq_ControllerAccountsPreuseStart, IReq_ControllerAccountsReauth, IReq_ControllerAccountsRemove, IReq_ControllerAccountsRename, IReq_ControllerAccountsMaxUsage, IReq_ControllerAccountsReserveLift, IReq_ControllerAccountsApiKeyAdd, IReq_ControllerAccountsSpendLimit, IReq_ControllerAccountsSnapshot, IReq_ControllerAccountsUsageGet, IReq_ControllerAccountsUsageRecheck, IReq_ControllerAccountsClaudeHostGet, IReq_ControllerAccountsClaudeRelease, IReq_ControllerAccountsClaudeReleaseGet, IReq_ControllerAccountsClaudeRepair, IReq_ControllerAccountsClaudeSignInCancel, IReq_ControllerAccountsClaudeSignInGet, IReq_ControllerAccountsClaudeSignInStart, IReq_ControllerAccountsCodexAdopt, IReq_ControllerCodexAccountUse, IReq_ControllerAccountsCodexRelease } from './requests.accounts.js';
 import type { IReq_ControllerOpenCodeRestart, IReq_ControllerProxyStatusGet, IReq_ControllerRestart, IReq_ControllerStatus } from './requests.status.js';
 import type { IReq_ControllerUpgradeLaunch, IReq_ControllerUpgradePrepare, IReq_ControllerUpgradePrepareBegin, IReq_ControllerUpgradeFinalize } from './requests.upgrade.js';
 import type { IReq_ControllerDriverGet, IReq_ControllerDriverEnsure, IReq_ControllerDriverSeen } from './requests.driver.js';
@@ -41,4 +41,4 @@ export * from './requests.browser.js';
 export * from './requests.terminal.js';
 export * from './requests.workspace.js';
 export * from './requests.events.js';
-export type TControllerRequest = IReq_ControllerConfigurationResourceGet | IReq_ControllerConfigurationStateGet | IReq_ControllerConfigurationSummaryGet | IReq_ControllerConfigurationMasterGet | IReq_ControllerConfigurationMasterSave | IReq_ControllerConfigurationProject | IReq_ControllerConfigurationReview | IReq_ControllerConfigurationApply | IReq_ControllerConfigurationRestoreReview | IReq_ControllerConfigurationRestore | IReq_ControllerConfigurationTargetBind | IReq_ControllerConfigurationOperationRetry | IReq_ControllerConfigurationOperationRecover | IReq_ControllerConfigurationOperationAbandon | IReq_ControllerConfigurationOwnerIssue | IReq_ControllerConfigurationOwnerRevoke | IReq_ControllerStatus | IReq_ControllerProxyStatusGet | IReq_ControllerOpenCodeRestart | IReq_ControllerRestart | IReq_ControllerUpgradeLaunch | IReq_ControllerUpgradePrepare | IReq_ControllerUpgradePrepareBegin | IReq_ControllerUpgradeFinalize | IReq_ControllerDriverGet | IReq_ControllerDriverEnsure | IReq_ControllerDriverSeen | IReq_ControllerFleetWorkerList | IReq_ControllerFleetWorkerRead | IReq_ControllerFleetWorkerSteer | IReq_ControllerDirectReportList | IReq_ControllerDirectReportMessage | IReq_ControllerDirectReportRead | IReq_ControllerSessionFeedList | IReq_ControllerSessionFeedAcknowledge | IReq_ControllerNativeSessionRead | IReq_ControllerNativeSessionAuxiliaryGet | IReq_ControllerNativeSessionSend | IReq_ControllerNativeSessionScratchpadSave | IReq_ControllerNativeSessionIntelligenceAsk | IReq_ControllerNativeSessionPermissionReply | IReq_ControllerNativeSessionQuestionReply | IReq_ControllerUsageWatch | IReq_ControllerUsageUnwatch | IReq_ControllerSystemMetrics | IReq_ControllerSystemMetricsHistory | IReq_ControllerFailureDetailGet | IReq_ControllerAuthState | IReq_ControllerSetupBegin | IReq_ControllerSetupFinish | IReq_ControllerAuthenticationBegin | IReq_ControllerAuthenticationFinish | IReq_ControllerTempPasswordLogin | IReq_ControllerAuthResume | IReq_ControllerAuthHandoff | IReq_ControllerAuthSignout | IReq_ControllerProjectList | IReq_ControllerProjectCreate | IReq_ControllerProjectRemove | IReq_ControllerProjectRemovalRetry | IReq_ControllerProjectAgentMessagesUpdate | IReq_ControllerProjectSuggest | IReq_ControllerProviderConnectionList | IReq_ControllerProviderModelRefreshBegin | IReq_ControllerProviderModelRefreshGet | IReq_ControllerSlashList | IReq_ControllerSlashExecute | IReq_ControllerModelList | IReq_ControllerSettingsGet | IReq_ControllerSettingsUpdate | IReq_ControllerConversationList | IReq_ControllerConversationSearch | IReq_ControllerConversationOpen | IReq_ControllerConversationArchive | IReq_ControllerConversationReopen | IReq_ControllerSessionGet | IReq_ControllerSessionChildGet | IReq_ControllerSessionChildStatusGet | IReq_ControllerFlexChildGet | IReq_ControllerCodexChildGet | IReq_ControllerSessionChildMessagesPage | IReq_ControllerSessionChildMessageGet | IReq_ControllerSessionChildPermissionReply | IReq_ControllerSessionChildQuestionReply | IReq_ControllerSessionAuxiliaryGet | IReq_ControllerSessionModelUpdate | IReq_ControllerSessionScratchpadSave | IReq_ControllerSessionIntelligenceAsk | IReq_ControllerSessionMessagesPage | IReq_ControllerSessionMessageGet | IReq_ControllerSessionCreate | IReq_ControllerSessionDelete | IReq_ControllerSessionDiscardEmpty | IReq_ControllerSessionDraftGet | IReq_ControllerSessionDraftUpdate | IReq_ControllerSessionSend | import('./codex.js').IReq_ControllerCodexRestart | import('./codex.js').IReq_ControllerCodexWriterUpdate | import('./codex.js').IReq_ControllerCodexModeUpdate | import('./codex.js').IReq_ControllerCodexProfilesList | import('./codex.js').IReq_ControllerCodexAccountProfile | import('./codex.js').IReq_ControllerCodexProfileCreate | import('./codex.js').IReq_ControllerCodexProfileUpdate | import('./codex.js').IReq_ControllerCodexProfileTest | import('./codex.js').IReq_ControllerCodexMappingUpdate | import('./codex.js').IReq_ControllerCodexThreadsList | import('./codex.js').IReq_ControllerCodexThreadEnroll | IReq_ControllerSessionAbort | IReq_ControllerSessionHarnessRestart | IReq_ControllerSessionCompactionUpdate | IReq_ControllerSessionLimitResumeUpdate | IReq_ControllerSessionPromptQueueRelease | IReq_ControllerSessionHeldPromptRelease | IReq_ControllerSessionPendingPromptAction | IReq_ControllerPermissionReply | IReq_ControllerQuestionReply | IReq_ControllerSessionRename | IReq_ControllerSessionArchive | IReq_ControllerSessionGroupsGet | IReq_ControllerSessionGroupsUpdate | IReq_ControllerSessionYolo | IReq_ControllerResourceList | IReq_ControllerResourceCreate | IReq_ControllerResourceRename | IReq_ControllerResourceAttach | IReq_ControllerResourceDetach | IReq_ControllerResourceRetire | IReq_ControllerResourceStart | IReq_ControllerResourceStop | IReq_ControllerBrowserViewOpen | IReq_ControllerBrowserViewActivate | IReq_ControllerBrowserViewRecover | IReq_ControllerBrowserViewClose | IReq_ControllerBrowserDevToolsOpen | IReq_ControllerBrowserDevToolsClose | IReq_ControllerBrowserPaintOpen | IReq_ControllerBrowserPaintClose | IReq_ControllerBrowserAudioOpen | IReq_ControllerBrowserAudioClose | IReq_ControllerBrowserPaintRearm | IReq_ControllerBrowserAssetsGet | IReq_ControllerBrowserPaintVideoRouteOpen | IReq_ControllerTerminalList | IReq_ControllerTerminalCreate | IReq_ControllerTerminalRename | IReq_ControllerTerminalRemove | IReq_ControllerTerminalAttach | IReq_ControllerTerminalDetach | IReq_ControllerTerminalInput | IReq_ControllerTerminalResize | IReq_ControllerWorkspaceList | IReq_ControllerWorkspaceStat | IReq_ControllerWorkspaceRead | IReq_ControllerWorkspaceWrite | IReq_ControllerWorkspaceMkdir | IReq_ControllerWorkspaceRemove | IReq_ControllerWorkspaceRename | IReq_ControllerWorkspaceCopy | IReq_ControllerWorkspaceWatch | IReq_ControllerWorkspaceUnwatch | IReq_ControllerWorkspaceBaseSet | IReq_ControllerTerminalOutput | IReq_ControllerTerminalDetached | IReq_ControllerWorkspaceChanged | IReq_ControllerAccountsSnapshot | IReq_ControllerAccountsRename | IReq_ControllerAccountsMaxUsage | IReq_ControllerAccountsReserveLift | IReq_ControllerAccountsRemove | IReq_ControllerAccountsAdd | IReq_ControllerAccountsReauth | IReq_ControllerAccountsOperationGet | IReq_ControllerAccountsOperationCancel | IReq_ControllerAccountsUsageGet | IReq_ControllerAccountsUsageRecheck | IReq_ControllerAccountsPreuseStart | IReq_ControllerAccountsPreuseGet | IReq_ControllerAccountsPreuseCancel | IReq_ControllerAccountsDoctorGet | IReq_ControllerAccountsClaudeSignInStart | IReq_ControllerAccountsClaudeSignInGet | IReq_ControllerAccountsClaudeSignInCancel | IReq_ControllerAccountsClaudeHostGet | IReq_ControllerAccountsClaudeRelease | IReq_ControllerAccountsClaudeReleaseGet | IReq_ControllerAccountsClaudeRepair | IReq_ControllerCodexAccountUse | IReq_ControllerAccountsCodexRelease | IReq_ControllerAccountsCodexAdopt | import('./requests.tickets.js').TControllerTicketTypedRequest | IReq_ControllerEvent | IReq_ControllerSessionChildEvent;
+export type TControllerRequest = IReq_ControllerConfigurationResourceGet | IReq_ControllerConfigurationStateGet | IReq_ControllerConfigurationSummaryGet | IReq_ControllerConfigurationMasterGet | IReq_ControllerConfigurationMasterSave | IReq_ControllerConfigurationProject | IReq_ControllerConfigurationReview | IReq_ControllerConfigurationApply | IReq_ControllerConfigurationRestoreReview | IReq_ControllerConfigurationRestore | IReq_ControllerConfigurationTargetBind | IReq_ControllerConfigurationOperationRetry | IReq_ControllerConfigurationOperationRecover | IReq_ControllerConfigurationOperationAbandon | IReq_ControllerConfigurationOwnerIssue | IReq_ControllerConfigurationOwnerRevoke | IReq_ControllerStatus | IReq_ControllerProxyStatusGet | IReq_ControllerOpenCodeRestart | IReq_ControllerRestart | IReq_ControllerUpgradeLaunch | IReq_ControllerUpgradePrepare | IReq_ControllerUpgradePrepareBegin | IReq_ControllerUpgradeFinalize | IReq_ControllerDriverGet | IReq_ControllerDriverEnsure | IReq_ControllerDriverSeen | IReq_ControllerFleetWorkerList | IReq_ControllerFleetWorkerRead | IReq_ControllerFleetWorkerSteer | IReq_ControllerDirectReportList | IReq_ControllerDirectReportMessage | IReq_ControllerDirectReportRead | IReq_ControllerSessionFeedList | IReq_ControllerSessionFeedAcknowledge | IReq_ControllerNativeSessionRead | IReq_ControllerNativeSessionAuxiliaryGet | IReq_ControllerNativeSessionSend | IReq_ControllerNativeSessionScratchpadSave | IReq_ControllerNativeSessionIntelligenceAsk | IReq_ControllerNativeSessionPermissionReply | IReq_ControllerNativeSessionQuestionReply | IReq_ControllerUsageWatch | IReq_ControllerUsageUnwatch | IReq_ControllerSystemMetrics | IReq_ControllerSystemMetricsHistory | IReq_ControllerFailureDetailGet | IReq_ControllerAuthState | IReq_ControllerSetupBegin | IReq_ControllerSetupFinish | IReq_ControllerAuthenticationBegin | IReq_ControllerAuthenticationFinish | IReq_ControllerTempPasswordLogin | IReq_ControllerAuthResume | IReq_ControllerAuthHandoff | IReq_ControllerAuthSignout | IReq_ControllerProjectList | IReq_ControllerProjectCreate | IReq_ControllerProjectRemove | IReq_ControllerProjectRemovalRetry | IReq_ControllerProjectAgentMessagesUpdate | IReq_ControllerProjectSuggest | IReq_ControllerProviderConnectionList | IReq_ControllerProviderModelRefreshBegin | IReq_ControllerProviderModelRefreshGet | IReq_ControllerSlashList | IReq_ControllerSlashExecute | IReq_ControllerModelList | IReq_ControllerSettingsGet | IReq_ControllerSettingsUpdate | IReq_ControllerConversationList | IReq_ControllerConversationSearch | IReq_ControllerConversationOpen | IReq_ControllerConversationArchive | IReq_ControllerConversationReopen | IReq_ControllerSessionGet | IReq_ControllerSessionChildGet | IReq_ControllerSessionChildStatusGet | IReq_ControllerFlexChildGet | IReq_ControllerCodexChildGet | IReq_ControllerSessionChildMessagesPage | IReq_ControllerSessionChildMessageGet | IReq_ControllerSessionChildPermissionReply | IReq_ControllerSessionChildQuestionReply | IReq_ControllerSessionAuxiliaryGet | IReq_ControllerSessionModelUpdate | IReq_ControllerSessionScratchpadSave | IReq_ControllerSessionIntelligenceAsk | IReq_ControllerSessionMessagesPage | IReq_ControllerSessionMessageGet | IReq_ControllerSessionCreate | IReq_ControllerSessionDelete | IReq_ControllerSessionDiscardEmpty | IReq_ControllerSessionDraftGet | IReq_ControllerSessionDraftUpdate | IReq_ControllerSessionSend | import('./codex.js').IReq_ControllerCodexRestart | import('./codex.js').IReq_ControllerCodexWriterUpdate | import('./codex.js').IReq_ControllerCodexModeUpdate | import('./codex.js').IReq_ControllerCodexProfilesList | import('./codex.js').IReq_ControllerCodexAccountProfile | import('./codex.js').IReq_ControllerCodexProfileCreate | import('./codex.js').IReq_ControllerCodexProfileUpdate | import('./codex.js').IReq_ControllerCodexProfileTest | import('./codex.js').IReq_ControllerCodexMappingUpdate | import('./codex.js').IReq_ControllerCodexThreadsList | import('./codex.js').IReq_ControllerCodexThreadEnroll | IReq_ControllerSessionAbort | IReq_ControllerSessionHarnessRestart | IReq_ControllerSessionCompactionUpdate | IReq_ControllerSessionLimitResumeUpdate | IReq_ControllerSessionPromptQueueRelease | IReq_ControllerSessionHeldPromptRelease | IReq_ControllerSessionPendingPromptAction | IReq_ControllerPermissionReply | IReq_ControllerQuestionReply | IReq_ControllerSessionRename | IReq_ControllerSessionArchive | IReq_ControllerSessionGroupsGet | IReq_ControllerSessionGroupsUpdate | IReq_ControllerSessionYolo | IReq_ControllerResourceList | IReq_ControllerResourceCreate | IReq_ControllerResourceRename | IReq_ControllerResourceAttach | IReq_ControllerResourceDetach | IReq_ControllerResourceRetire | IReq_ControllerResourceStart | IReq_ControllerResourceStop | IReq_ControllerBrowserViewOpen | IReq_ControllerBrowserViewActivate | IReq_ControllerBrowserViewRecover | IReq_ControllerBrowserViewClose | IReq_ControllerBrowserDevToolsOpen | IReq_ControllerBrowserDevToolsClose | IReq_ControllerBrowserPaintOpen | IReq_ControllerBrowserPaintClose | IReq_ControllerBrowserAudioOpen | IReq_ControllerBrowserAudioClose | IReq_ControllerBrowserPaintRearm | IReq_ControllerBrowserAssetsGet | IReq_ControllerBrowserPaintVideoRouteOpen | IReq_ControllerTerminalList | IReq_ControllerTerminalCreate | IReq_ControllerTerminalRename | IReq_ControllerTerminalRemove | IReq_ControllerTerminalAttach | IReq_ControllerTerminalDetach | IReq_ControllerTerminalInput | IReq_ControllerTerminalResize | IReq_ControllerWorkspaceList | IReq_ControllerWorkspaceStat | IReq_ControllerWorkspaceRead | IReq_ControllerWorkspaceWrite | IReq_ControllerWorkspaceMkdir | IReq_ControllerWorkspaceRemove | IReq_ControllerWorkspaceRename | IReq_ControllerWorkspaceCopy | IReq_ControllerWorkspaceWatch | IReq_ControllerWorkspaceUnwatch | IReq_ControllerWorkspaceBaseSet | IReq_ControllerTerminalOutput | IReq_ControllerTerminalDetached | IReq_ControllerWorkspaceChanged | IReq_ControllerAccountsSnapshot | IReq_ControllerAccountsRename | IReq_ControllerAccountsMaxUsage | IReq_ControllerAccountsReserveLift | IReq_ControllerAccountsApiKeyAdd | IReq_ControllerAccountsSpendLimit | IReq_ControllerAccountsRemove | IReq_ControllerAccountsAdd | IReq_ControllerAccountsReauth | IReq_ControllerAccountsOperationGet | IReq_ControllerAccountsOperationCancel | IReq_ControllerAccountsUsageGet | IReq_ControllerAccountsUsageRecheck | IReq_ControllerAccountsPreuseStart | IReq_ControllerAccountsPreuseGet | IReq_ControllerAccountsPreuseCancel | IReq_ControllerAccountsDoctorGet | IReq_ControllerAccountsClaudeSignInStart | IReq_ControllerAccountsClaudeSignInGet | IReq_ControllerAccountsClaudeSignInCancel | IReq_ControllerAccountsClaudeHostGet | IReq_ControllerAccountsClaudeRelease | IReq_ControllerAccountsClaudeReleaseGet | IReq_ControllerAccountsClaudeRepair | IReq_ControllerCodexAccountUse | IReq_ControllerAccountsCodexRelease | IReq_ControllerAccountsCodexAdopt | import('./requests.tickets.js').TControllerTicketTypedRequest | IReq_ControllerEvent | IReq_ControllerSessionChildEvent;

package/dist_ts_interfaces/requests.js

@@ -18,4 +18,4 @@ export * from './requests.browser.js';
 export * from './requests.terminal.js';
 export * from './requests.workspace.js';
 export * from './requests.events.js';
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/docs/authswitch.md

@@ -314,6 +314,8 @@ authswitch limits [--json]
 authswitch account list [--json]
 authswitch account add openai [--json]
 authswitch account add claude [--json]
+authswitch account add anthropic-api-key [--label <label>] [--spend-limit <dollars>] [--json]
+authswitch account add openai-api-key [--label <label>] [--spend-limit <dollars>] [--json]
 authswitch account use codex <account-id> [--json]
 authswitch account release claude <account-id> [--end-native-sessions] [--json]
 authswitch account repair claude [--json]
@@ -324,6 +326,8 @@ authswitch account set <account-id> --max-usage <percent> [--json]
 authswitch account set <account-id> --clear [--json]
 authswitch account set <account-id> --lapses-at <date-time> [--json]
 authswitch account set <account-id> --clear-lapse [--json]
+authswitch account set <account-id> --spend-limit <dollars> [--json]
+authswitch account set <account-id> --clear-spend-limit [--json]
 authswitch account operation get <operation-id> [--json]
 authswitch account operation cancel <operation-id> [--json]
 authswitch account operation resume <operation-id> [--json]
@@ -388,8 +392,8 @@ response is lost, the fixed diagnostic reports the caller-generated operation ID
 command; the CLI does not replay the start request.
 
 `account add claude` signs a Claude account in (see "Adding a Claude account" below): it starts a Claude sign-in,
-runs `claude auth login` on this terminal with `CLAUDE_CONFIG_DIR` set to the home the authority made for it, and
-follows the sign-in until the authority has imported the login. With `--json` it writes each changed sign-in as one
+runs `claude auth login` on this terminal with `CLAUDE_CONFIG_DIR` and `CLAUDE_SECURESTORAGE_CONFIG_DIR` set to the
+home the authority made for it, and follows the sign-in until the authority has imported the login. With `--json` it writes each changed sign-in as one
 JSON Line and sends Claude Code's own output to stderr. A Claude Code that cannot be started, or that exits without
 signing in, ends the sign-in, and the command exits nonzero. Claude Code on this host is not switched between
 accounts: once it runs through AGL's inference proxy, its own login is handed to the service with `account release
@@ -450,14 +454,67 @@ carries them per account as `subscription [{ label, value }]`. The daemon logs e
 reads it after its start, up to 32, then one line that says further values are not logged, so the map can be filled
 from what was seen; it keeps no record of them.
 
+`account add anthropic-api-key|openai-api-key` adds an API key as an account of its own
+(`authswitch.authority.apikey.add { providerId, apiKey, label?, spendLimitMicroUsd? }`, `AuthSwitchClient.addApiKey`).
+The key is read from standard input -- a line typed at a terminal without echo, or everything piped in -- and never
+taken as an argument, which the shell history and the process list would keep. A key beginning the way the other
+provider's keys do is refused before any request (`sk-ant-` as an OpenAI key; `sk-proj-`, `sk-svcacct-` or `sk-admin-`
+as an Anthropic key; a bare `sk-` is both providers' older form and is asked about). The daemon then asks the provider
+for the key's models (`GET /v1/models`, 15 seconds) and stores nothing unless it accepts the key: a rejected key (401),
+an OpenAI key that may not read models (403) and a provider that cannot be asked are refused with
+`api_key_unverified`, and no refusal or log line repeats the provider's error, which could quote the key. The key is
+sealed under its grant like every login, `{ kind: 'anthropicApiKey' | 'openaiApiKey', apiKey }` -- one kind per provider,
+since sealed data is never migrated -- and never answered again; the account keeps only `keyHint` (`…` and the last four
+characters) for display, derived from the key it seals, never accepted from a caller and never used to find or match a
+key. The account's subject is a digest of the key and its tenancy (`organizationId`) is `api-key`, so a key is one
+account: offered again while held it is refused (`invalid_input`); offered after its removal or a provider rejection it
+brings the account back with a new authorization, its month's spend and its spend limit unless the request names one.
+The login's purpose is `anthropic_api_key` or `openai_api_key`; it backs the `gateway` runtime alone and nothing renews
+or revokes it. `--spend-limit` takes dollars to the cent (`12.50`, `$50`). The command prints the account, how its key
+ends and its limit; `--json` prints `{ account, loginId }`.
+
+`account set --spend-limit <dollars>` gives an API key account its monthly spend limit (`authswitch.authority.spendlimit
+{ accountId, expectedRevision, spendLimitMicroUsd }`, `isAuthSwitchSpendLimitMicroUsd`: a whole number of cents from
+$0.01 to $1,000,000, in micro-dollars); `--clear-spend-limit` removes it. A sign-in has none (`invalid_input`), and a key
+refuses `--max-usage` and a reserve lift. The month is the calendar month in UTC (`authSwitchSpendPeriod`). AGL's
+inference proxy prices each answer it relays on a key once and reports it (`AuthSwitchClient.recordSpend`,
+`authswitch.authority.usage.spend { accountId, loginId, answers }`, one to 64 `IAuthSwitchSpendAnswer { answerId,
+endedAt, model, serviceTier, microUsd, priceSource }`, `microUsd` and `priceSource` null together for an answer it could
+not price). The daemon records a report whole in one transaction: an entry per answer, keyed by account and answer id,
+and the month's total; an answer it holds already with the same content changes nothing, one with other content refuses
+the report (`invalid_input`, naming the answer), and a store conflict is an unmarked fault the proxy sends again. An
+answer of a month before the previous one counts nowhere; only the current and the previous month are kept, the
+earlier ones deleted a bounded number per report. A removed key's spend is recorded too, and its month stays with the
+account. A key's usage (`authswitch.authority.usage`) is its month: `state: 'current'`, a reading `{ kind: 'spend',
+spend: { period, periodStart, resetAt, spentMicroUsd, limitMicroUsd, answers, unpricedAnswers, lastAnswerAt } }`,
+`observedAt` and `readAt` the moment the daemon read the ledger, current until the month ends; a ledger that cannot be
+read answers `unavailable` with the problem `spend_unavailable`. `authSwitchUsageLimit` holds a key with a limit at it,
+or with an unpriced answer, until `resetAt`, and ignores a maximum usage and a lift. A report, the month's first spend
+and a limit change are account events only when they change whether the key is at its limit, begin the month, or change
+the limit. `list` shows a key's month in dollars.
+
+A key is held with a payment problem on its usage record, which for a key holds nothing but the problem:
+`reportPaymentProblem(accountId, loginId, observedAt, signal, { cause })` with `cause` `spend_cap` or `quota` (absent:
+`billing`) holds `{ at, subscription: null }` for billing, `{ at, subscription: null, cause: 'quota' }`, or `{ at,
+subscription: null, cause: 'spend_cap', until }` with `until` the end of the month `at` falls in; a Claude login is held
+only for billing. A spend cap past its `until` holds nothing (`authSwitchPaymentProblemHeld`). `account recheck` on a key
+lifts its hold without asking the provider, whose model list states no billing or quota (`outcome: 'cleared'`, exit 0),
+a spend cap's before the first of the month too; the provider's next refusal sets it again.
+
+The service's store gains the account members `spendLimitMicroUsd` and `keyHint` (migration
+`0011_account_api_key_fields`) and the collections `authswitch_authority_spend_entries` and
+`authswitch_authority_spend_periods` at its first start. There is no downgrade past this release except restoring the
+store from a backup taken before the upgrade: an older service refuses the new collections, the members and a key's
+usage record.
+
 `account recheck <account-id>` re-checks the payment problem of a Claude account (a 402 `billing_error` took it out of
 the AGL proxy's rotation; see `reportPaymentProblem` below): the service reads the account's usage login -- the one
 `list` reads -- at once (`authswitch.authority.usage.recheck`) and answers how that read went. A read that finds the
 profile, the sign-in accepted and the identity matched is `healthy` and clears the problem, whatever subscription it
 finds; any other clears nothing and says why: `credential_rejected`, `token_unusable`, `profile_missing`, `mismatch` or
 `read_failed`. The command prints that, and whether a payment problem is still held, and exits 0 only for `healthy`;
-`--json` prints `{ accountId, loginId, outcome, usage }`. A ChatGPT account, or one without a Claude sign-in, is refused
-before anything is read.
+`--json` prints `{ accountId, loginId, outcome, usage }`. An API key's re-check is `cleared` (above); a ChatGPT account,
+or one with neither a Claude sign-in nor a key, is refused before anything is read.
 
 `account preuse` sends one quota-consuming prompt through the exact managed OpenAI account and
 login IDs. The default prompt is `Write 2000 words about strawberries.`; `--prompt` replaces it
@@ -567,9 +624,9 @@ routing settings and the processes on the home, writes nothing and asks no provi
 holds no login, and reading it creates nothing. `authswitch.authority.usage` still answers for the login of an
 adopted home from the home itself, and only while Claude Code demonstrably selects that login there: once the home's
 settings route Claude Code through the proxy, that read refuses until the login is released. Every Claude Code session
-on the home must run a release whose selector was read (2.1.273, 2.1.282) or a newer one, which the read takes as
-2.1.282, a remote agent's hashed build ordered by its release; an unlisted release between them (2.1.274 to 2.1.281)
-refuses the read.
+on the home must run a release whose selector was read (2.1.273, 2.1.282, 2.1.288, the release AGL's own Claude chats
+run through the Agent SDK, and 2.1.306) or any release from 2.1.282 on, which the read takes as verified, a remote
+agent's hashed build ordered by its release; an unlisted release below 2.1.282 (2.1.274 to 2.1.281) refuses the read.
 
 ### Releasing Claude Code's own login
 
@@ -774,9 +831,11 @@ written, and a registration of it that never settled asks for a device sign-in.
 for the sign-in -- a directory named by the operation id in the sign-in directory, which the service places at
 `$XDG_DATA_HOME/authswitch/claude-signin` (default `~/.local/share/authswitch/claude-signin`), beside the store --
 and answers `IAuthSwitchClaudeSignInOperation`: `pending`, with `prompt: { flow: 'terminal', command, directory }`.
-`command` is `claude auth login` with `CLAUDE_CONFIG_DIR` set to `directory`, quoted for a POSIX shell; a caller that
-runs Claude Code itself runs `claude` with `authSwitchClaudeSignInArguments` in that environment, as the command
-line does. Once `.credentials.json` is in the home and no Claude Code process runs on it, the authority imports the
+`command` is `claude auth login` with `CLAUDE_CONFIG_DIR` and `CLAUDE_SECURESTORAGE_CONFIG_DIR` set to `directory`,
+quoted for a POSIX shell; a caller that runs Claude Code itself runs `claude` with `authSwitchClaudeSignInArguments` in
+that environment, as the command line does. The second variable keeps the credential store in the home: inherited from
+the caller's environment, it would send the new login to another store, over whatever login that store holds, and the
+sign-in would never see it. Once `.credentials.json` is in the home and no Claude Code process runs on it, the authority imports the
 login -- one rotating refresh, the import a saved Claude login gets, so the authority is its only renewer and the
 import's ledger row (source kind `claude_signin`) is its receipt -- and removes the home; the sign-in is then
 `complete` with `result: { accountId, loginId }`. An import that refuses leaves it `failed` with the import's
@@ -952,8 +1011,12 @@ try {
   starts with `fixture-`.
 - `provider` is the `AuthSwitchFakeClaudeProvider` the daemon talks to. It answers Anthropic's profile and
   token endpoints for the fixture tokens it issued, with the switches a test needs (`profileDown`,
-  `refreshTokens.set(token, 'rejected')`, `onProfile`, the `profileCalls` and `refreshCalls` counters), and
-  fails every other request, OpenAI's included, so nothing a test starts reaches a real provider. Secrets are
+  `refreshTokens.set(token, 'rejected')`, `onProfile`, the `profileCalls` and `refreshCalls` counters), and the
+  model lists the authority reads to verify an API key: Anthropic's for the keys `issueApiKey(name)` issued, and
+  OpenAI's (`GET https://api.openai.com/v1/models`) for those `issueOpenAiApiKey(name, { modelRead? })` issued,
+  `sk-proj-fixture-<name>` -- 401 for any other key, quoting it as OpenAI does, 403 for a key issued with
+  `modelRead: false`, 503 while `openAiModelsDown`, counted in `openAiModelListCalls`; delete a key from `apiKeys` or
+  `openAiApiKeys` to revoke it. It fails every other request, so nothing a test starts reaches a real provider. Secrets are
   sealed with a plain encoding, never in a keyring, and no Claude Code process is ever seen running on a home.
 - Claude sign-ins run in `claudeSignInDirectory`. `claudeSignInLogin(name, { generation?, accessExpiresAt? })`
   answers the two files `claude auth login` leaves once fixture account `name` signed in -- `files['.claude.json']`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agl",
-  "version": "40.4.0",
+  "version": "40.5.0",
   "controllerUpgradeManagementVersion": 2,
   "private": false,
   "description": "Agent Gateway Layer for OpenCode, FlexHarness, and Codex sessions",
@@ -33,10 +33,10 @@
     "@lossless.org/objectstorage": "10.7.1",
     "@modelcontextprotocol/sdk": "1.30.0",
     "@modelprofile.com/catalog": "^1.0.0",
-    "@modelprofile.com/flexharness": "16.1.0",
-    "@modelprofile.com/flexharness-agent": "16.1.0",
-    "@modelprofile.com/flexharness-models": "16.1.0",
-    "@modelprofile.com/flexharness-providers": "16.1.0",
+    "@modelprofile.com/flexharness": "16.3.0",
+    "@modelprofile.com/flexharness-agent": "16.3.0",
+    "@modelprofile.com/flexharness-models": "16.3.0",
+    "@modelprofile.com/flexharness-providers": "16.3.0",
     "@modelprofile.com/mcp-crossharness": "5.9.0",
     "@modelprofile.com/mcp-system": "3.1.0",
     "@opencode-ai/sdk": "1.18.15",