@actuate-media/cms-core 0.41.0 → 0.43.0

package/dist/ai/providers/index.js

@@ -0,0 +1,25 @@
+/**
+ * Provider adapter dispatcher. Selects the right adapter by provider key and
+ * exposes a uniform `testConnection` / `listModels` surface to the catalog and
+ * route layers.
+ */
+import * as anthropic from './anthropic.js';
+import * as custom from './custom.js';
+import * as openai from './openai.js';
+import * as xai from './xai.js';
+const ADAPTERS = {
+    openai,
+    anthropic,
+    xai,
+    custom,
+};
+export function getAdapter(provider) {
+    return ADAPTERS[provider] ?? custom;
+}
+export function testConnection(provider, ctx) {
+    return getAdapter(provider).testConnection(ctx);
+}
+export function listModels(provider, ctx) {
+    return getAdapter(provider).listModels(ctx);
+}
+//# sourceMappingURL=index.js.map

package/dist/ai/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ai/providers/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAS/B,MAAM,QAAQ,GAA2C;IACvD,MAAM;IACN,SAAS;IACT,GAAG;IACH,MAAM;CACP,CAAA;AAED,MAAM,UAAU,UAAU,CAAC,QAAuB;IAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAA;AACrC,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAuB,EACvB,GAAmB;IAEnB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAuB,EAAE,GAAmB;IACrE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;AAC7C,CAAC"}

package/dist/ai/providers/openai.d.ts

@@ -0,0 +1,10 @@
+/**
+ * OpenAI (and OpenAI-compatible) adapter. Uses the `/v1/models` listing
+ * endpoint with Bearer auth. Hostname is fixed (api.openai.com) so no SSRF
+ * validation is needed here.
+ */
+import type { AIConnectionTestResult } from '../types.js';
+import { type AdapterContext } from './http.js';
+export declare function testConnection(ctx: AdapterContext): Promise<AIConnectionTestResult>;
+export declare function listModels(ctx: AdapterContext): Promise<string[]>;
+//# sourceMappingURL=openai.d.ts.map

package/dist/ai/providers/openai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/openai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EACL,KAAK,cAAc,EAKpB,MAAM,WAAW,CAAA;AAWlB,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBzF;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQvE"}

package/dist/ai/providers/openai.js

@@ -0,0 +1,41 @@
+/**
+ * OpenAI (and OpenAI-compatible) adapter. Uses the `/v1/models` listing
+ * endpoint with Bearer auth. Hostname is fixed (api.openai.com) so no SSRF
+ * validation is needed here.
+ */
+import { extractModelIds, messageFromStatus, statusFromHttp, timedFetch, } from './http.js';
+const OPENAI_BASE = 'https://api.openai.com/v1';
+function headers(ctx) {
+    const h = { authorization: `Bearer ${ctx.apiKey}` };
+    if (ctx.organizationId)
+        h['openai-organization'] = ctx.organizationId;
+    if (ctx.projectId)
+        h['openai-project'] = ctx.projectId;
+    return h;
+}
+export async function testConnection(ctx) {
+    const testedAt = new Date().toISOString();
+    if (!ctx.apiKey) {
+        return { ok: false, status: 'needs_setup', message: messageFromStatus('needs_setup'), testedAt };
+    }
+    try {
+        const res = await timedFetch(`${OPENAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+        const status = statusFromHttp(res.status);
+        return { ok: status === 'connected', status, message: messageFromStatus(status), testedAt };
+    }
+    catch {
+        return {
+            ok: false,
+            status: 'provider_down',
+            message: messageFromStatus('provider_down'),
+            testedAt,
+        };
+    }
+}
+export async function listModels(ctx) {
+    const res = await timedFetch(`${OPENAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+    if (!res.ok)
+        throw new Error(`OpenAI model listing failed (${res.status})`);
+    return extractModelIds(await res.json());
+}
+//# sourceMappingURL=openai.js.map

package/dist/ai/providers/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../../src/ai/providers/openai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAEL,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,UAAU,GACX,MAAM,WAAW,CAAA;AAElB,MAAM,WAAW,GAAG,2BAA2B,CAAA;AAE/C,SAAS,OAAO,CAAC,GAAmB;IAClC,MAAM,CAAC,GAA2B,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAA;IAC3E,IAAI,GAAG,CAAC,cAAc;QAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC,cAAc,CAAA;IACrE,IAAI,GAAG,CAAC,SAAS;QAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,SAAS,CAAA;IACtD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB;IACtD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAA;IAClG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,WAAW,SAAS,EACvB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC3C,QAAQ;SACT,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,WAAW,SAAS,EACvB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3E,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC"}

package/dist/ai/providers/xai.d.ts

@@ -0,0 +1,9 @@
+/**
+ * xAI (Grok) adapter. xAI's API is OpenAI-compatible: `/v1/models` with Bearer
+ * auth. Hostname is fixed (api.x.ai).
+ */
+import type { AIConnectionTestResult } from '../types.js';
+import { type AdapterContext } from './http.js';
+export declare function testConnection(ctx: AdapterContext): Promise<AIConnectionTestResult>;
+export declare function listModels(ctx: AdapterContext): Promise<string[]>;
+//# sourceMappingURL=xai.d.ts.map

package/dist/ai/providers/xai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xai.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/xai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EACL,KAAK,cAAc,EAKpB,MAAM,WAAW,CAAA;AAQlB,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBzF;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAIvE"}

package/dist/ai/providers/xai.js

@@ -0,0 +1,35 @@
+/**
+ * xAI (Grok) adapter. xAI's API is OpenAI-compatible: `/v1/models` with Bearer
+ * auth. Hostname is fixed (api.x.ai).
+ */
+import { extractModelIds, messageFromStatus, statusFromHttp, timedFetch, } from './http.js';
+const XAI_BASE = 'https://api.x.ai/v1';
+function headers(ctx) {
+    return { authorization: `Bearer ${ctx.apiKey}` };
+}
+export async function testConnection(ctx) {
+    const testedAt = new Date().toISOString();
+    if (!ctx.apiKey) {
+        return { ok: false, status: 'needs_setup', message: messageFromStatus('needs_setup'), testedAt };
+    }
+    try {
+        const res = await timedFetch(`${XAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+        const status = statusFromHttp(res.status);
+        return { ok: status === 'connected', status, message: messageFromStatus(status), testedAt };
+    }
+    catch {
+        return {
+            ok: false,
+            status: 'provider_down',
+            message: messageFromStatus('provider_down'),
+            testedAt,
+        };
+    }
+}
+export async function listModels(ctx) {
+    const res = await timedFetch(`${XAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+    if (!res.ok)
+        throw new Error(`xAI model listing failed (${res.status})`);
+    return extractModelIds(await res.json());
+}
+//# sourceMappingURL=xai.js.map

package/dist/ai/providers/xai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xai.js","sourceRoot":"","sources":["../../../src/ai/providers/xai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAEL,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,UAAU,GACX,MAAM,WAAW,CAAA;AAElB,MAAM,QAAQ,GAAG,qBAAqB,CAAA;AAEtC,SAAS,OAAO,CAAC,GAAmB;IAClC,OAAO,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAA;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB;IACtD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAA;IAClG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,QAAQ,SAAS,EACpB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC3C,QAAQ;SACT,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,QAAQ,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IACjG,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IACxE,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC"}

package/dist/ai/types.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Shared types for the Settings > AI governance layer.
+ *
+ * Phases 1-2 cover provider connections (encrypted keys) and a dynamic,
+ * normalized model catalog. Feature config, budget, and data-policy shapes are
+ * declared here for forward-compatibility (enforcement + metering land in later
+ * phases) but only `features[].enabled` and `budget.monthlyTokenLimit` are
+ * wired into the UI for now.
+ */
+/** Provider keys are stable code identifiers. `openai` covers OpenAI/ChatGPT. */
+export type AIProviderKey = 'openai' | 'anthropic' | 'xai' | 'custom';
+/** Where a provider's API key actually comes from at runtime. */
+export type AIKeySource = 'environment' | 'database' | 'config';
+/** Connection health surfaced in the UI (always rendered as text, not color-only). */
+export type AIConnectionStatus = 'connected' | 'invalid_key' | 'rate_limited' | 'provider_down' | 'needs_setup' | 'unknown';
+/** Availability of a catalog model relative to the connected account. */
+export type AIModelStatus = 'available' | 'unavailable' | 'deprecated' | 'unknown';
+export interface AIModelCapabilities {
+    text: boolean;
+    vision: boolean;
+    imageGeneration: boolean;
+    embeddings: boolean;
+    toolCalling: boolean;
+    structuredOutput: boolean;
+    streaming: boolean;
+    reasoning: boolean;
+    longContext: boolean;
+}
+export interface AIModelPricing {
+    inputPerMillion?: number;
+    outputPerMillion?: number;
+    image?: number;
+    search?: number;
+}
+/** Normalized model record (merged from live listing + curated metadata). */
+export interface AIModel {
+    /** Stable internal id: `${provider}:${providerModelId}`. */
+    id: string;
+    provider: AIProviderKey;
+    providerModelId: string;
+    displayName: string;
+    description?: string;
+    status: AIModelStatus;
+    capabilities: AIModelCapabilities;
+    contextWindow?: number;
+    maxOutputTokens?: number;
+    inputModalities: string[];
+    outputModalities: string[];
+    pricing?: AIModelPricing;
+    aliases?: string[];
+    lastSyncedAt: string;
+    source: 'provider' | 'manual' | 'config';
+    metadata: Record<string, unknown>;
+}
+/**
+ * Stored provider connection. The encrypted key NEVER leaves the server — API
+ * responses use {@link AIProviderConnectionPublic}.
+ */
+export interface AIProviderConnection {
+    id: string;
+    provider: AIProviderKey;
+    displayName: string;
+    enabled: boolean;
+    status: AIConnectionStatus;
+    /** Encrypted via `encryptSecret`. Absent when the key is env-managed. */
+    apiKeyEncrypted?: string;
+    apiKeyLast4?: string;
+    baseUrl?: string;
+    organizationId?: string;
+    projectId?: string;
+    lastTestedAt?: string;
+    lastSuccessfulRunAt?: string;
+    lastModelSyncAt?: string;
+    createdAt: string;
+    updatedAt: string;
+    updatedBy: string;
+}
+/** Client-safe provider view: no key material, source resolved dynamically. */
+export type AIProviderConnectionPublic = Omit<AIProviderConnection, 'apiKeyEncrypted'> & {
+    apiKeySource: AIKeySource;
+    /** True when the key is env-managed and therefore not editable in the UI. */
+    keyManagedExternally: boolean;
+    hasKey: boolean;
+};
+export type AIFeatureCategory = 'seo' | 'media' | 'content' | 'forms' | 'security' | 'developer' | 'search';
+export interface AIFeatureConfig {
+    key: string;
+    label: string;
+    description: string;
+    enabled: boolean;
+    category: AIFeatureCategory;
+    requiredCapabilities: string[];
+    providerId?: string;
+    modelId?: string;
+    fallbackModelIds?: string[];
+    approvalRequired: boolean;
+    allowBulkApply: boolean;
+    maxMonthlyTokens?: number;
+    maxRequestsPerDay?: number;
+    rolesAllowed: string[];
+    permissionsRequired: string[];
+    dataPolicyKey?: string;
+}
+export interface AIBudgetSettings {
+    monthlyTokenLimit?: number;
+    monthlyCostLimit?: number;
+    alertAtPercentages: number[];
+    disableWhenExceeded: boolean;
+    perFeatureLimits?: Record<string, number>;
+    perUserLimits?: Record<string, number>;
+}
+export interface AISettings {
+    defaultProviderId?: string;
+    defaultModelId?: string;
+    defaultTextModelId?: string;
+    defaultReasoningModelId?: string;
+    defaultVisionModelId?: string;
+    defaultEmbeddingModelId?: string;
+    defaultImageGenerationModelId?: string;
+    features: AIFeatureConfig[];
+    budget: AIBudgetSettings;
+    logsRetentionDays: number;
+}
+/**
+ * Cached, normalized model catalog keyed by provider connection id. Persisted in
+ * the `__ai_config__` document so the model selector renders without a live call.
+ */
+export interface AICatalogEntry {
+    models: AIModel[];
+    lastSyncedAt: string;
+    /** True when the entry came from the curated fallback (no live listing). */
+    fromFallback: boolean;
+}
+/** Shape of the `data` blob on the `__ai_config__` Document. */
+export interface AIConfigDocument {
+    providers: AIProviderConnection[];
+    settings: AISettings;
+    catalog?: Record<string, AICatalogEntry>;
+    updatedAt?: string;
+    updatedBy?: string;
+}
+/** Monthly usage summary for the budget meter (real counts; 0 until Phase 4). */
+export interface AIUsageSummary {
+    totalTokens: number;
+    promptTokens: number;
+    completionTokens: number;
+    estimatedCost?: number;
+    monthlyTokenLimit?: number;
+    periodStart: string;
+    periodEnd: string;
+    runCount: number;
+}
+/** Result of an adapter connection test. */
+export interface AIConnectionTestResult {
+    ok: boolean;
+    status: AIConnectionStatus;
+    /** Human-readable detail (safe to show; never contains the key). */
+    message: string;
+    testedAt: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/ai/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/ai/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,iFAAiF;AACjF,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,KAAK,GAAG,QAAQ,CAAA;AAErE,iEAAiE;AACjE,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,UAAU,GAAG,QAAQ,CAAA;AAE/D,sFAAsF;AACtF,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,aAAa,GACb,cAAc,GACd,eAAe,GACf,aAAa,GACb,SAAS,CAAA;AAEb,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,aAAa,GAAG,YAAY,GAAG,SAAS,CAAA;AAElF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;IACf,eAAe,EAAE,OAAO,CAAA;IACxB,UAAU,EAAE,OAAO,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,6EAA6E;AAC7E,MAAM,WAAW,OAAO;IACtB,4DAA4D;IAC5D,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,aAAa,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,aAAa,CAAA;IACrB,YAAY,EAAE,mBAAmB,CAAA;IACjC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACxC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,aAAa,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,kBAAkB,CAAA;IAC1B,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,+EAA+E;AAC/E,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,GAAG;IACvF,YAAY,EAAE,WAAW,CAAA;IACzB,6EAA6E;IAC7E,oBAAoB,EAAE,OAAO,CAAA;IAC7B,MAAM,EAAE,OAAO,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB,KAAK,GACL,OAAO,GACP,SAAS,GACT,OAAO,GACP,UAAU,GACV,WAAW,GACX,QAAQ,CAAA;AAEZ,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,OAAO,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACvC;AAED,MAAM,WAAW,UAAU;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,MAAM,EAAE,gBAAgB,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,EAAE,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,4EAA4E;IAC5E,YAAY,EAAE,OAAO,CAAA;CACtB;AAED,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,oBAAoB,EAAE,CAAA;IACjC,QAAQ,EAAE,UAAU,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACxC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,4CAA4C;AAC5C,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,kBAAkB,CAAA;IAC1B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;CACjB"}

package/dist/ai/types.js

@@ -0,0 +1,11 @@
+/**
+ * Shared types for the Settings > AI governance layer.
+ *
+ * Phases 1-2 cover provider connections (encrypted keys) and a dynamic,
+ * normalized model catalog. Feature config, budget, and data-policy shapes are
+ * declared here for forward-compatibility (enforcement + metering land in later
+ * phases) but only `features[].enabled` and `budget.monthlyTokenLimit` are
+ * wired into the UI for now.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/ai/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/ai/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/ai/usage.d.ts

@@ -0,0 +1,18 @@
+/**
+ * AI usage aggregation.
+ *
+ * Until the dedicated per-run metering table lands (Phase 4), usage is derived
+ * from token totals already recorded in `actuate_audit_logs` (`details
+ * .totalTokensUsed` / `details.tokensUsed`). This returns REAL counts — it is 0
+ * when nothing has run, never a fabricated number.
+ */
+import type { AIUsageSummary } from './types.js';
+/**
+ * Sum token usage from audit-log entries within the period. Recognizes the
+ * fields current AI handlers write today and is tolerant of missing data.
+ */
+export declare function getUsageSummary(db: unknown, period?: {
+    start?: Date;
+    end?: Date;
+}): Promise<AIUsageSummary>;
+//# sourceMappingURL=usage.d.ts.map

package/dist/ai/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../src/ai/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAgBhD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,OAAO,EACX,MAAM,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,GACpC,OAAO,CAAC,cAAc,CAAC,CAiDzB"}

package/dist/ai/usage.js

@@ -0,0 +1,70 @@
+/**
+ * AI usage aggregation.
+ *
+ * Until the dedicated per-run metering table lands (Phase 4), usage is derived
+ * from token totals already recorded in `actuate_audit_logs` (`details
+ * .totalTokensUsed` / `details.tokensUsed`). This returns REAL counts — it is 0
+ * when nothing has run, never a fabricated number.
+ */
+import { getAIConfig } from './config-store.js';
+/** First instant of the current calendar month (UTC). */
+function monthStart(now = new Date()) {
+    return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1, 0, 0, 0, 0));
+}
+/** First instant of the next calendar month (UTC). */
+function nextMonthStart(now = new Date()) {
+    return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth() + 1, 1, 0, 0, 0, 0));
+}
+function num(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value > 0 ? value : 0;
+}
+/**
+ * Sum token usage from audit-log entries within the period. Recognizes the
+ * fields current AI handlers write today and is tolerant of missing data.
+ */
+export async function getUsageSummary(db, period) {
+    const start = period?.start ?? monthStart();
+    const end = period?.end ?? nextMonthStart();
+    const config = await getAIConfig(db);
+    const monthlyTokenLimit = config.settings.budget.monthlyTokenLimit;
+    const base = {
+        totalTokens: 0,
+        promptTokens: 0,
+        completionTokens: 0,
+        monthlyTokenLimit,
+        periodStart: start.toISOString(),
+        periodEnd: end.toISOString(),
+        runCount: 0,
+    };
+    const d = db;
+    if (!d?.auditLog?.findMany)
+        return base;
+    let rows = [];
+    try {
+        rows = await d.auditLog.findMany({
+            where: { createdAt: { gte: start, lt: end } },
+            select: { details: true },
+        });
+    }
+    catch {
+        return base;
+    }
+    let totalTokens = 0;
+    let promptTokens = 0;
+    let completionTokens = 0;
+    let runCount = 0;
+    for (const row of rows) {
+        const details = (row?.details ?? {});
+        const total = num(details.totalTokensUsed) + num(details.tokensUsed) + num(details.totalTokens);
+        const prompt = num(details.promptTokens);
+        const completion = num(details.completionTokens);
+        if (total > 0 || prompt > 0 || completion > 0) {
+            runCount += 1;
+            totalTokens += total > 0 ? total : prompt + completion;
+            promptTokens += prompt;
+            completionTokens += completion;
+        }
+    }
+    return { ...base, totalTokens, promptTokens, completionTokens, runCount };
+}
+//# sourceMappingURL=usage.js.map

package/dist/ai/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../src/ai/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAG/C,yDAAyD;AACzD,SAAS,UAAU,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IAClC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AACnF,CAAC;AAED,sDAAsD;AACtD,SAAS,cAAc,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IACtC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAW,EACX,MAAqC;IAErC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,UAAU,EAAE,CAAA;IAC3C,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,IAAI,cAAc,EAAE,CAAA;IAE3C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAA;IAElE,MAAM,IAAI,GAAmB;QAC3B,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,CAAC;QACnB,iBAAiB;QACjB,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;QAChC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,QAAQ,EAAE,CAAC;KACZ,CAAA;IAED,MAAM,CAAC,GAAG,EAAS,CAAA;IACnB,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ;QAAE,OAAO,IAAI,CAAA;IAEvC,IAAI,IAAI,GAAgC,EAAE,CAAA;IAC1C,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC/B,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,IAAI,gBAAgB,GAAG,CAAC,CAAA;IACxB,IAAI,QAAQ,GAAG,CAAC,CAAA;IAEhB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAA4B,CAAA;QAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC/F,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QACxC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAChD,IAAI,KAAK,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YAC9C,QAAQ,IAAI,CAAC,CAAA;YACb,WAAW,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,UAAU,CAAA;YACtD,YAAY,IAAI,MAAM,CAAA;YACtB,gBAAgB,IAAI,UAAU,CAAA;QAChC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAA;AAC3E,CAAC"}

package/dist/api/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAuhC5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAiVD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA47WzD"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAwhC5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAiVD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAqiYzD"}