agl 40.4.0 → 40.5.1

package/ts_interfaces/requests.accounts.ts

@@ -97,6 +97,8 @@ export type TControllerAccountNativeAssignment = plugins.authswitchAuthority.IAu
 export type TControllerAccountOperation = plugins.authswitchAuthority.IAuthSwitchOperation;
 export type TControllerAccountPreuse = plugins.authswitchAuthority.IAuthSwitchPreuseOperation;
 export type TControllerAccountUsage = plugins.authswitchAuthority.IAuthSwitchUsageSnapshot;
+/** An API key's month, the reading of an API key account's usage (`kind: 'spend'`). */
+export type TControllerAccountSpendReading = plugins.authswitchAuthority.IAuthSwitchSpendReading;
 /** A re-check of a Claude login: the usage held once its read finished, and how that read went. */
 export type TControllerAccountUsageRecheck = plugins.authswitchAuthority.IAuthSwitchUsageRecheck;
 export type TControllerAccountsDoctorPage = plugins.authswitchAuthority.IAuthSwitchDoctorPage;
@@ -187,6 +189,52 @@ export interface IReq_ControllerAccountsMaxUsage extends plugins.typedrequestInt
   response: { answer: TControllerAccountsAnswer<TControllerAccount> };
 }
 
+/** The providers whose API keys the Accounts screen adds as accounts. */
+export type TControllerApiKeyProvider = plugins.authswitchAuthority.TAuthSwitchApiKeyProvider;
+
+/**
+ * The spend limit rule, as the accounts service publishes and applies it: a whole number of cents from
+ * `controllerSpendLimitRange.min` to `.max`, in micro-dollars. A view checks a value with it before it offers the
+ * change, and the service refuses any other value with `invalid_input`.
+ */
+export const isControllerSpendLimitMicroUsd = plugins.authswitchSpend.isAuthSwitchSpendLimitMicroUsd;
+/** The range of a spend limit, in micro-dollars. */
+export const controllerSpendLimitRange = plugins.authswitchSpend.authSwitchSpendLimitRange;
+
+/** The longest API key the accounts service holds, in characters; a longer value is refused before it is sent. */
+export const controllerApiKeyMaxLength = 512;
+
+/**
+ * Adds an Anthropic or OpenAI API key as an account, with an optional label and monthly spend limit
+ * (`isControllerSpendLimitMicroUsd`). The accounts service asks the provider whether it accepts the key before it holds
+ * it, and answers why when it does not (`api_key_unverified`, `invalid_input`). The key is never answered, logged or
+ * audited; the account names it only by how it ends (`keyHint`). The answer arrives only once the controller's own
+ * projection shows the account; it can take up to 35 seconds, the provider's answer included.
+ */
+export interface IReq_ControllerAccountsApiKeyAdd extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IReq_ControllerAccountsApiKeyAdd
+> {
+  method: 'controller.accounts.apikey.add';
+  request: { providerId: TControllerApiKeyProvider; apiKey: string; label?: string; spendLimitMicroUsd?: number };
+  response: { answer: TControllerAccountsAnswer<{ account: TControllerAccount; loginId: string }> };
+}
+
+/**
+ * Sets an API key account's monthly spend limit, or clears it with `null`: at the limit AGL's inference proxy places
+ * nothing more on the key until the month ends (UTC). `expectedRevision` is the revision the view showed, so a change of
+ * an account that changed meanwhile is refused as `account_changed`, and a value that breaks the rule, or an account on
+ * a sign-in, as `invalid_input`, both by the service. The answer arrives only once the projection shows the result.
+ */
+export interface IReq_ControllerAccountsSpendLimit extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IReq_ControllerAccountsSpendLimit
+> {
+  method: 'controller.accounts.spendlimit';
+  request: { accountId: string; expectedRevision: number; spendLimitMicroUsd: number | null };
+  response: { answer: TControllerAccountsAnswer<TControllerAccount> };
+}
+
 /** Duration validation shared with the authority; no implicit duration is supplied. */
 export const isControllerReserveLiftHours = plugins.authswitchAuthority.isAuthSwitchReserveLiftHours;
 

package/ts_interfaces/requests.ts

@@ -29,6 +29,8 @@ import type {
   IReq_ControllerAccountsRename,
   IReq_ControllerAccountsMaxUsage,
   IReq_ControllerAccountsReserveLift,
+  IReq_ControllerAccountsApiKeyAdd,
+  IReq_ControllerAccountsSpendLimit,
   IReq_ControllerAccountsSnapshot,
   IReq_ControllerAccountsUsageGet,
   IReq_ControllerAccountsUsageRecheck,
@@ -399,6 +401,8 @@ export type TControllerRequest =
   | IReq_ControllerAccountsRename
   | IReq_ControllerAccountsMaxUsage
   | IReq_ControllerAccountsReserveLift
+  | IReq_ControllerAccountsApiKeyAdd
+  | IReq_ControllerAccountsSpendLimit
   | IReq_ControllerAccountsRemove
   | IReq_ControllerAccountsAdd
   | IReq_ControllerAccountsReauth

package/ts_web/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: 'agl',
-  version: '40.4.0',
+  version: '40.5.1',
   description: 'Agent Gateway Layer for OpenCode, FlexHarness, and Codex sessions'
 }

package/ts_web/accounts.plugins.ts

@@ -11,5 +11,11 @@ import * as authswitchUsageWindows from '../ts_authswitch/authority-usagewindows
 import * as authswitchUsageLimit from '../ts_authswitch/authority-usagelimit.js';
 // A Claude account's subscription facts and payment problem, in the words the authswitch command line uses; types only behind it.
 import * as authswitchSubscription from '../ts_authswitch/authority-subscription.js';
+// An API key's month: the spend limit rule and dollar amounts, as the command line states them; it imports nothing.
+import * as authswitchSpend from '../ts_authswitch/authority-spend.js';
+// The service's contract, which the controller's interfaces load already: the processes holding a Claude sign-in, in
+// the words the command line uses.
+import * as authswitchAuthority from '../ts_authswitch/authority-contract.js';
 
-export { authswitchPreuseText, authswitchSubscription, authswitchUsageLimit, authswitchUsageWindows };
+export { authswitchAuthority, authswitchPreuseText, authswitchSpend, authswitchSubscription, authswitchUsageLimit,
+  authswitchUsageWindows };

package/ts_web/accounts.templates.ts

@@ -1,10 +1,11 @@
 import * as plugins from './plugins.js';
-import type {
-  IAccountActionSlot,
-  IAccountFact,
-  IAccountRow,
-  IAccountsSummary,
-  TAccountsTone,
+import {
+  spendAttentionPercent,
+  type IAccountActionSlot,
+  type IAccountFact,
+  type IAccountRow,
+  type IAccountsSummary,
+  type TAccountsTone,
 } from './classes.accountsreadmodel.js';
 
 /**
@@ -95,7 +96,10 @@ export const renderSlots = (
   `;
 };
 
-/** An account as one line of the list: mark, name and who uses it, its tightest window, its one status. */
+/**
+ * An account as one line of the list: mark, name and who uses it, its tightest window -- a key's month, which without a
+ * limit has its spend and no bar -- and its one status.
+ */
 export const renderListRow = (
   rowArg: IAccountRow,
   openArg: (rowArg: IAccountRow) => void,
@@ -113,8 +117,9 @@ export const renderListRow = (
         ${meter
           ? plugins.deesElement.html`
               <span class="meterText"><span>${meter.label}</span><span class="meterValue">${meter.valueText}</span></span>
-              <dees-meter .size=${'sm'} .value=${meter.percent} .threshold=${meter.threshold} .tone=${meterTone(meter.tone)}
-                .label=${meter.label} .valueText=${meter.valueText}></dees-meter>`
+              ${meter.percent === null ? '' : plugins.deesElement.html`<dees-meter .size=${'sm'} .value=${meter.percent}
+                .threshold=${meter.threshold} .tone=${meterTone(meter.tone)} .label=${meter.label}
+                .valueText=${meter.valueText}></dees-meter>`}`
           : plugins.deesElement.html`<span class="meterText"><span>No reading</span><span class="meterValue">—</span></span>`}
       </span>
       <dees-badge data-status .type=${badgeType(rowArg.pill.tone)} .text=${rowArg.pill.text}></dees-badge>
@@ -144,17 +149,21 @@ export const renderSummary = (summaryArg: IAccountsSummary): plugins.deesElement
   </div>
 `;
 
-/** An account's usage windows, each with its reset, ticked at its maximum; or why there is no reading. */
+/**
+ * An account's usage windows, each with its reset, ticked at its maximum; or why there is no reading. A key's month
+ * wants attention from `spendAttentionPercent` of its limit, with no tick: a key has no maximum usage.
+ */
 export const renderUsageMeters = (rowArg: IAccountRow, emptyArg: string): plugins.deesElement.TemplateResult => {
   const meters = rowArg.usage?.meters ?? [];
   const threshold = rowArg.maxUsagePercent !== null && rowArg.maxUsagePercent < 100 ? rowArg.maxUsagePercent : null;
+  const attentionAt = rowArg.apiKey ? spendAttentionPercent : threshold;
   return plugins.deesElement.html`
     <mp-usage-meters class=${rowArg.usage?.current === false ? 'stale' : ''} data-usage-meters
       .windows=${meters.map((meterArg) => ({
         label: meterArg.label,
         percent: meterArg.percent,
         resetText: meterArg.resetText,
-        tone: meterTone(meterArg.percent >= 100 ? 'neutral' : threshold !== null && meterArg.percent >= threshold
+        tone: meterTone(meterArg.percent >= 100 ? 'neutral' : attentionAt !== null && meterArg.percent >= attentionAt
           ? 'attention' : 'positive'),
       }))}
       .threshold=${threshold}