@actuate-media/cms-core 0.42.0 → 0.44.0

package/dist/ai/providers/index.js

@@ -0,0 +1,25 @@
+/**
+ * Provider adapter dispatcher. Selects the right adapter by provider key and
+ * exposes a uniform `testConnection` / `listModels` surface to the catalog and
+ * route layers.
+ */
+import * as anthropic from './anthropic.js';
+import * as custom from './custom.js';
+import * as openai from './openai.js';
+import * as xai from './xai.js';
+const ADAPTERS = {
+    openai,
+    anthropic,
+    xai,
+    custom,
+};
+export function getAdapter(provider) {
+    return ADAPTERS[provider] ?? custom;
+}
+export function testConnection(provider, ctx) {
+    return getAdapter(provider).testConnection(ctx);
+}
+export function listModels(provider, ctx) {
+    return getAdapter(provider).listModels(ctx);
+}
+//# sourceMappingURL=index.js.map

package/dist/ai/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ai/providers/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAS/B,MAAM,QAAQ,GAA2C;IACvD,MAAM;IACN,SAAS;IACT,GAAG;IACH,MAAM;CACP,CAAA;AAED,MAAM,UAAU,UAAU,CAAC,QAAuB;IAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAA;AACrC,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAuB,EACvB,GAAmB;IAEnB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAuB,EAAE,GAAmB;IACrE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;AAC7C,CAAC"}

package/dist/ai/providers/openai.d.ts

@@ -0,0 +1,10 @@
+/**
+ * OpenAI (and OpenAI-compatible) adapter. Uses the `/v1/models` listing
+ * endpoint with Bearer auth. Hostname is fixed (api.openai.com) so no SSRF
+ * validation is needed here.
+ */
+import type { AIConnectionTestResult } from '../types.js';
+import { type AdapterContext } from './http.js';
+export declare function testConnection(ctx: AdapterContext): Promise<AIConnectionTestResult>;
+export declare function listModels(ctx: AdapterContext): Promise<string[]>;
+//# sourceMappingURL=openai.d.ts.map

package/dist/ai/providers/openai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/openai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EACL,KAAK,cAAc,EAKpB,MAAM,WAAW,CAAA;AAWlB,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBzF;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQvE"}

package/dist/ai/providers/openai.js

@@ -0,0 +1,41 @@
+/**
+ * OpenAI (and OpenAI-compatible) adapter. Uses the `/v1/models` listing
+ * endpoint with Bearer auth. Hostname is fixed (api.openai.com) so no SSRF
+ * validation is needed here.
+ */
+import { extractModelIds, messageFromStatus, statusFromHttp, timedFetch, } from './http.js';
+const OPENAI_BASE = 'https://api.openai.com/v1';
+function headers(ctx) {
+    const h = { authorization: `Bearer ${ctx.apiKey}` };
+    if (ctx.organizationId)
+        h['openai-organization'] = ctx.organizationId;
+    if (ctx.projectId)
+        h['openai-project'] = ctx.projectId;
+    return h;
+}
+export async function testConnection(ctx) {
+    const testedAt = new Date().toISOString();
+    if (!ctx.apiKey) {
+        return { ok: false, status: 'needs_setup', message: messageFromStatus('needs_setup'), testedAt };
+    }
+    try {
+        const res = await timedFetch(`${OPENAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+        const status = statusFromHttp(res.status);
+        return { ok: status === 'connected', status, message: messageFromStatus(status), testedAt };
+    }
+    catch {
+        return {
+            ok: false,
+            status: 'provider_down',
+            message: messageFromStatus('provider_down'),
+            testedAt,
+        };
+    }
+}
+export async function listModels(ctx) {
+    const res = await timedFetch(`${OPENAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+    if (!res.ok)
+        throw new Error(`OpenAI model listing failed (${res.status})`);
+    return extractModelIds(await res.json());
+}
+//# sourceMappingURL=openai.js.map

package/dist/ai/providers/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../../src/ai/providers/openai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAEL,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,UAAU,GACX,MAAM,WAAW,CAAA;AAElB,MAAM,WAAW,GAAG,2BAA2B,CAAA;AAE/C,SAAS,OAAO,CAAC,GAAmB;IAClC,MAAM,CAAC,GAA2B,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAA;IAC3E,IAAI,GAAG,CAAC,cAAc;QAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC,cAAc,CAAA;IACrE,IAAI,GAAG,CAAC,SAAS;QAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,SAAS,CAAA;IACtD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB;IACtD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAA;IAClG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,WAAW,SAAS,EACvB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC3C,QAAQ;SACT,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,WAAW,SAAS,EACvB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3E,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC"}

package/dist/ai/providers/xai.d.ts

@@ -0,0 +1,9 @@
+/**
+ * xAI (Grok) adapter. xAI's API is OpenAI-compatible: `/v1/models` with Bearer
+ * auth. Hostname is fixed (api.x.ai).
+ */
+import type { AIConnectionTestResult } from '../types.js';
+import { type AdapterContext } from './http.js';
+export declare function testConnection(ctx: AdapterContext): Promise<AIConnectionTestResult>;
+export declare function listModels(ctx: AdapterContext): Promise<string[]>;
+//# sourceMappingURL=xai.d.ts.map

package/dist/ai/providers/xai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xai.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/xai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EACL,KAAK,cAAc,EAKpB,MAAM,WAAW,CAAA;AAQlB,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBzF;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAIvE"}

package/dist/ai/providers/xai.js

@@ -0,0 +1,35 @@
+/**
+ * xAI (Grok) adapter. xAI's API is OpenAI-compatible: `/v1/models` with Bearer
+ * auth. Hostname is fixed (api.x.ai).
+ */
+import { extractModelIds, messageFromStatus, statusFromHttp, timedFetch, } from './http.js';
+const XAI_BASE = 'https://api.x.ai/v1';
+function headers(ctx) {
+    return { authorization: `Bearer ${ctx.apiKey}` };
+}
+export async function testConnection(ctx) {
+    const testedAt = new Date().toISOString();
+    if (!ctx.apiKey) {
+        return { ok: false, status: 'needs_setup', message: messageFromStatus('needs_setup'), testedAt };
+    }
+    try {
+        const res = await timedFetch(`${XAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+        const status = statusFromHttp(res.status);
+        return { ok: status === 'connected', status, message: messageFromStatus(status), testedAt };
+    }
+    catch {
+        return {
+            ok: false,
+            status: 'provider_down',
+            message: messageFromStatus('provider_down'),
+            testedAt,
+        };
+    }
+}
+export async function listModels(ctx) {
+    const res = await timedFetch(`${XAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+    if (!res.ok)
+        throw new Error(`xAI model listing failed (${res.status})`);
+    return extractModelIds(await res.json());
+}
+//# sourceMappingURL=xai.js.map

package/dist/ai/providers/xai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xai.js","sourceRoot":"","sources":["../../../src/ai/providers/xai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAEL,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,UAAU,GACX,MAAM,WAAW,CAAA;AAElB,MAAM,QAAQ,GAAG,qBAAqB,CAAA;AAEtC,SAAS,OAAO,CAAC,GAAmB;IAClC,OAAO,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAA;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB;IACtD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAA;IAClG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,QAAQ,SAAS,EACpB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC3C,QAAQ;SACT,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,QAAQ,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IACjG,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IACxE,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC"}

package/dist/ai/resolve.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Feature → model routing resolution.
+ *
+ * This is the authoritative runtime resolver: given the stored AI config and the
+ * current model catalog, it decides which provider connection + model a feature
+ * should use. Resolution order for each feature:
+ *
+ *   1. The feature's explicit `modelId` override (if it exists in the catalog).
+ *   2. A capability-typed default that matches the feature's dominant required
+ *      capability (e.g. a vision feature falls back to `defaultVisionModelId`).
+ *   3. The global `defaultModelId`.
+ *   4. Any `fallbackModelIds` listed on the feature.
+ *
+ * The first candidate that is present in the catalog, available, AND satisfies
+ * every required capability wins. If none fully satisfy, we still return the
+ * best candidate we found and report the missing capabilities so callers (UI +
+ * enforcement) can warn rather than silently misroute. The admin UI mirrors a
+ * simplified version of this for live preview, but THIS function is the source
+ * of truth consumed by the AI runtime.
+ */
+import type { AIConfigDocument, AIModel } from './types.js';
+/** Where the resolved model came from in the precedence chain above. */
+export type FeatureModelSource = 'feature-override' | 'capability-default' | 'global-default' | 'fallback' | 'none';
+export interface ResolvedFeatureModel {
+    featureKey: string;
+    /** Catalog model id (`provider:modelId`), or the raw override when uncatalogued. */
+    modelId?: string;
+    /** Provider connection id that owns the resolved model. */
+    providerId?: string;
+    model?: AIModel;
+    source: FeatureModelSource;
+    /** True when a usable model was found that satisfies every required capability. */
+    satisfiesCapabilities: boolean;
+    /** Required capabilities the resolved model is missing (empty when satisfied). */
+    missingCapabilities: string[];
+}
+/** Resolve the provider + model a single feature should use. */
+export declare function resolveFeatureModel(config: AIConfigDocument, featureKey: string, catalog: AIModel[]): ResolvedFeatureModel;
+/** Resolve routing for every configured feature, keyed by feature key. */
+export declare function resolveAllFeatureModels(config: AIConfigDocument, catalog: AIModel[]): Record<string, ResolvedFeatureModel>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/ai/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/ai/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,OAAO,EAIR,MAAM,YAAY,CAAA;AAEnB,wEAAwE;AACxE,MAAM,MAAM,kBAAkB,GAC1B,kBAAkB,GAClB,oBAAoB,GACpB,gBAAgB,GAChB,UAAU,GACV,MAAM,CAAA;AAEV,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,kBAAkB,CAAA;IAC1B,mFAAmF;IACnF,qBAAqB,EAAE,OAAO,CAAA;IAC9B,kFAAkF;IAClF,mBAAmB,EAAE,MAAM,EAAE,CAAA;CAC9B;AAiFD,gEAAgE;AAChE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAAE,GACjB,oBAAoB,CA2DtB;AAED,0EAA0E;AAC1E,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,OAAO,EAAE,GACjB,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAMtC"}

package/dist/ai/resolve.js

@@ -0,0 +1,142 @@
+/**
+ * Feature → model routing resolution.
+ *
+ * This is the authoritative runtime resolver: given the stored AI config and the
+ * current model catalog, it decides which provider connection + model a feature
+ * should use. Resolution order for each feature:
+ *
+ *   1. The feature's explicit `modelId` override (if it exists in the catalog).
+ *   2. A capability-typed default that matches the feature's dominant required
+ *      capability (e.g. a vision feature falls back to `defaultVisionModelId`).
+ *   3. The global `defaultModelId`.
+ *   4. Any `fallbackModelIds` listed on the feature.
+ *
+ * The first candidate that is present in the catalog, available, AND satisfies
+ * every required capability wins. If none fully satisfy, we still return the
+ * best candidate we found and report the missing capabilities so callers (UI +
+ * enforcement) can warn rather than silently misroute. The admin UI mirrors a
+ * simplified version of this for live preview, but THIS function is the source
+ * of truth consumed by the AI runtime.
+ */
+/** Capability flags recognized on {@link AIModel.capabilities}. */
+const CAPABILITY_KEYS = new Set([
+    'text',
+    'vision',
+    'imageGeneration',
+    'embeddings',
+    'toolCalling',
+    'structuredOutput',
+    'streaming',
+    'reasoning',
+    'longContext',
+]);
+function findModel(catalog, id) {
+    if (!id)
+        return undefined;
+    return catalog.find((m) => m.id === id || m.providerModelId === id);
+}
+/** Required capabilities a model is missing. Unknown capability strings are ignored. */
+function missingCaps(model, required) {
+    const wanted = required.filter((c) => CAPABILITY_KEYS.has(c));
+    if (!model)
+        return wanted;
+    const caps = model.capabilities;
+    return wanted.filter((c) => !caps[c]);
+}
+/** Map a feature's dominant required capability to its typed default model id. */
+function capabilityDefault(settings, required) {
+    if (required.includes('imageGeneration'))
+        return settings.defaultImageGenerationModelId;
+    if (required.includes('embeddings'))
+        return settings.defaultEmbeddingModelId;
+    if (required.includes('vision'))
+        return settings.defaultVisionModelId;
+    if (required.includes('reasoning'))
+        return settings.defaultReasoningModelId;
+    if (required.includes('text'))
+        return settings.defaultTextModelId;
+    return undefined;
+}
+/**
+ * Resolve a provider connection id for a model's provider key. Prefers an
+ * explicit feature override, then the global default provider when it matches,
+ * then the first enabled connection, then any connection of that provider.
+ */
+function providerConnId(providers, providerKey, preferredId) {
+    if (preferredId) {
+        const pref = providers.find((p) => p.id === preferredId && p.provider === providerKey);
+        if (pref)
+            return pref.id;
+    }
+    const enabled = providers.find((p) => p.provider === providerKey && p.enabled);
+    if (enabled)
+        return enabled.id;
+    return providers.find((p) => p.provider === providerKey)?.id;
+}
+function build(featureKey, model, source, config, required, preferredProviderId) {
+    const missing = missingCaps(model, required);
+    return {
+        featureKey,
+        modelId: model.id,
+        providerId: providerConnId(config.providers, model.provider, preferredProviderId ?? config.settings.defaultProviderId),
+        model,
+        source,
+        satisfiesCapabilities: missing.length === 0 && model.status !== 'unavailable',
+        missingCapabilities: missing,
+    };
+}
+/** Resolve the provider + model a single feature should use. */
+export function resolveFeatureModel(config, featureKey, catalog) {
+    const { settings } = config;
+    const feature = settings.features.find((f) => f.key === featureKey);
+    const required = feature?.requiredCapabilities ?? [];
+    const candidates = [
+        { id: feature?.modelId, source: 'feature-override' },
+        { id: capabilityDefault(settings, required), source: 'capability-default' },
+        { id: settings.defaultModelId, source: 'global-default' },
+        ...(feature?.fallbackModelIds ?? []).map((id) => ({ id, source: 'fallback' })),
+    ];
+    // Best case: first candidate that is catalogued, available, and capable.
+    let firstFound;
+    for (const candidate of candidates) {
+        const model = findModel(catalog, candidate.id);
+        if (!model)
+            continue;
+        if (!firstFound)
+            firstFound = { model, source: candidate.source };
+        if (model.status !== 'unavailable' && missingCaps(model, required).length === 0) {
+            return build(featureKey, model, candidate.source, config, required, feature?.providerId);
+        }
+    }
+    // A model was found but it's unavailable or capability-short — return it with a warning.
+    if (firstFound) {
+        return build(featureKey, firstFound.model, firstFound.source, config, required, feature?.providerId);
+    }
+    // An explicit override that isn't in the catalog yet (provider not synced).
+    if (feature?.modelId) {
+        return {
+            featureKey,
+            modelId: feature.modelId,
+            providerId: feature.providerId ??
+                providerConnId(config.providers, feature.modelId.split(':')[0] ?? 'custom', config.settings.defaultProviderId),
+            source: 'feature-override',
+            satisfiesCapabilities: false,
+            missingCapabilities: required.filter((c) => CAPABILITY_KEYS.has(c)),
+        };
+    }
+    return {
+        featureKey,
+        source: 'none',
+        satisfiesCapabilities: required.filter((c) => CAPABILITY_KEYS.has(c)).length === 0,
+        missingCapabilities: missingCaps(undefined, required),
+    };
+}
+/** Resolve routing for every configured feature, keyed by feature key. */
+export function resolveAllFeatureModels(config, catalog) {
+    const out = {};
+    for (const feature of config.settings.features) {
+        out[feature.key] = resolveFeatureModel(config, feature.key, catalog);
+    }
+    return out;
+}
+//# sourceMappingURL=resolve.js.map

package/dist/ai/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/ai/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAgCH,mEAAmE;AACnE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM;IACN,QAAQ;IACR,iBAAiB;IACjB,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,WAAW;IACX,WAAW;IACX,aAAa;CACd,CAAC,CAAA;AAEF,SAAS,SAAS,CAAC,OAAkB,EAAE,EAAsB;IAC3D,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IACzB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,eAAe,KAAK,EAAE,CAAC,CAAA;AACrE,CAAC;AAED,wFAAwF;AACxF,SAAS,WAAW,CAAC,KAA0B,EAAE,QAAkB;IACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,IAAI,GAAG,KAAK,CAAC,YAAkD,CAAA;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AACvC,CAAC;AAED,kFAAkF;AAClF,SAAS,iBAAiB,CAAC,QAAoB,EAAE,QAAkB;IACjE,IAAI,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAAE,OAAO,QAAQ,CAAC,6BAA6B,CAAA;IACvF,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC,uBAAuB,CAAA;IAC5E,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,oBAAoB,CAAA;IACrE,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,QAAQ,CAAC,uBAAuB,CAAA;IAC3E,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC,kBAAkB,CAAA;IACjE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,SAAiC,EACjC,WAA0B,EAC1B,WAAoB;IAEpB,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAA;QACtF,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,EAAE,CAAA;IAC1B,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,CAAA;IAC9E,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,EAAE,CAAA;IAC9B,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE,EAAE,CAAA;AAC9D,CAAC;AAED,SAAS,KAAK,CACZ,UAAkB,EAClB,KAAc,EACd,MAA0B,EAC1B,MAAwB,EACxB,QAAkB,EAClB,mBAA4B;IAE5B,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAC5C,OAAO;QACL,UAAU;QACV,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,UAAU,EAAE,cAAc,CACxB,MAAM,CAAC,SAAS,EAChB,KAAK,CAAC,QAAQ,EACd,mBAAmB,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CACzD;QACD,KAAK;QACL,MAAM;QACN,qBAAqB,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa;QAC7E,mBAAmB,EAAE,OAAO;KAC7B,CAAA;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,mBAAmB,CACjC,MAAwB,EACxB,UAAkB,EAClB,OAAkB;IAElB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAA;IAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC,CAAA;IACnE,MAAM,QAAQ,GAAG,OAAO,EAAE,oBAAoB,IAAI,EAAE,CAAA;IAEpD,MAAM,UAAU,GAAuD;QACrE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACpD,EAAE,EAAE,EAAE,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE;QAC3E,EAAE,EAAE,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE;QACzD,GAAG,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC,CAAC;KACxF,CAAA;IAED,yEAAyE;IACzE,IAAI,UAAsE,CAAA;IAC1E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,CAAA;QAC9C,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,IAAI,CAAC,UAAU;YAAE,UAAU,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAA;QACjE,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;QAC1F,CAAC;IACH,CAAC;IAED,yFAAyF;IACzF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,KAAK,CACV,UAAU,EACV,UAAU,CAAC,KAAK,EAChB,UAAU,CAAC,MAAM,EACjB,MAAM,EACN,QAAQ,EACR,OAAO,EAAE,UAAU,CACpB,CAAA;IACH,CAAC;IAED,4EAA4E;IAC5E,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EACR,OAAO,CAAC,UAAU;gBAClB,cAAc,CACZ,MAAM,CAAC,SAAS,EACf,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAmB,IAAI,QAAQ,EAC5D,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAClC;YACH,MAAM,EAAE,kBAAkB;YAC1B,qBAAqB,EAAE,KAAK;YAC5B,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACpE,CAAA;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,MAAM,EAAE,MAAM;QACd,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAClF,mBAAmB,EAAE,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC;KACtD,CAAA;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CACrC,MAAwB,EACxB,OAAkB;IAElB,MAAM,GAAG,GAAyC,EAAE,CAAA;IACpD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/ai/types.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Shared types for the Settings > AI governance layer.
+ *
+ * Phases 1-2 cover provider connections (encrypted keys) and a dynamic,
+ * normalized model catalog. Feature config, budget, and data-policy shapes are
+ * declared here for forward-compatibility (enforcement + metering land in later
+ * phases) but only `features[].enabled` and `budget.monthlyTokenLimit` are
+ * wired into the UI for now.
+ */
+/** Provider keys are stable code identifiers. `openai` covers OpenAI/ChatGPT. */
+export type AIProviderKey = 'openai' | 'anthropic' | 'xai' | 'custom';
+/** Where a provider's API key actually comes from at runtime. */
+export type AIKeySource = 'environment' | 'database' | 'config';
+/** Connection health surfaced in the UI (always rendered as text, not color-only). */
+export type AIConnectionStatus = 'connected' | 'invalid_key' | 'rate_limited' | 'provider_down' | 'needs_setup' | 'unknown';
+/** Availability of a catalog model relative to the connected account. */
+export type AIModelStatus = 'available' | 'unavailable' | 'deprecated' | 'unknown';
+export interface AIModelCapabilities {
+    text: boolean;
+    vision: boolean;
+    imageGeneration: boolean;
+    embeddings: boolean;
+    toolCalling: boolean;
+    structuredOutput: boolean;
+    streaming: boolean;
+    reasoning: boolean;
+    longContext: boolean;
+}
+export interface AIModelPricing {
+    inputPerMillion?: number;
+    outputPerMillion?: number;
+    image?: number;
+    search?: number;
+}
+/** Normalized model record (merged from live listing + curated metadata). */
+export interface AIModel {
+    /** Stable internal id: `${provider}:${providerModelId}`. */
+    id: string;
+    provider: AIProviderKey;
+    providerModelId: string;
+    displayName: string;
+    description?: string;
+    status: AIModelStatus;
+    capabilities: AIModelCapabilities;
+    contextWindow?: number;
+    maxOutputTokens?: number;
+    inputModalities: string[];
+    outputModalities: string[];
+    pricing?: AIModelPricing;
+    aliases?: string[];
+    lastSyncedAt: string;
+    source: 'provider' | 'manual' | 'config';
+    metadata: Record<string, unknown>;
+}
+/**
+ * Stored provider connection. The encrypted key NEVER leaves the server — API
+ * responses use {@link AIProviderConnectionPublic}.
+ */
+export interface AIProviderConnection {
+    id: string;
+    provider: AIProviderKey;
+    displayName: string;
+    enabled: boolean;
+    status: AIConnectionStatus;
+    /** Encrypted via `encryptSecret`. Absent when the key is env-managed. */
+    apiKeyEncrypted?: string;
+    apiKeyLast4?: string;
+    baseUrl?: string;
+    organizationId?: string;
+    projectId?: string;
+    lastTestedAt?: string;
+    lastSuccessfulRunAt?: string;
+    lastModelSyncAt?: string;
+    createdAt: string;
+    updatedAt: string;
+    updatedBy: string;
+}
+/** Client-safe provider view: no key material, source resolved dynamically. */
+export type AIProviderConnectionPublic = Omit<AIProviderConnection, 'apiKeyEncrypted'> & {
+    apiKeySource: AIKeySource;
+    /** True when the key is env-managed and therefore not editable in the UI. */
+    keyManagedExternally: boolean;
+    hasKey: boolean;
+};
+export type AIFeatureCategory = 'seo' | 'media' | 'content' | 'forms' | 'security' | 'developer' | 'search';
+export interface AIFeatureConfig {
+    key: string;
+    label: string;
+    description: string;
+    enabled: boolean;
+    category: AIFeatureCategory;
+    requiredCapabilities: string[];
+    providerId?: string;
+    modelId?: string;
+    fallbackModelIds?: string[];
+    approvalRequired: boolean;
+    allowBulkApply: boolean;
+    maxMonthlyTokens?: number;
+    maxRequestsPerDay?: number;
+    rolesAllowed: string[];
+    permissionsRequired: string[];
+    dataPolicyKey?: string;
+}
+export interface AIBudgetSettings {
+    monthlyTokenLimit?: number;
+    monthlyCostLimit?: number;
+    alertAtPercentages: number[];
+    disableWhenExceeded: boolean;
+    perFeatureLimits?: Record<string, number>;
+    perUserLimits?: Record<string, number>;
+}
+export interface AISettings {
+    defaultProviderId?: string;
+    defaultModelId?: string;
+    defaultTextModelId?: string;
+    defaultReasoningModelId?: string;
+    defaultVisionModelId?: string;
+    defaultEmbeddingModelId?: string;
+    defaultImageGenerationModelId?: string;
+    features: AIFeatureConfig[];
+    budget: AIBudgetSettings;
+    logsRetentionDays: number;
+}
+/**
+ * Cached, normalized model catalog keyed by provider connection id. Persisted in
+ * the `__ai_config__` document so the model selector renders without a live call.
+ */
+export interface AICatalogEntry {
+    models: AIModel[];
+    lastSyncedAt: string;
+    /** True when the entry came from the curated fallback (no live listing). */
+    fromFallback: boolean;
+}
+/** Shape of the `data` blob on the `__ai_config__` Document. */
+export interface AIConfigDocument {
+    providers: AIProviderConnection[];
+    settings: AISettings;
+    catalog?: Record<string, AICatalogEntry>;
+    updatedAt?: string;
+    updatedBy?: string;
+}
+/** Monthly usage summary for the budget meter (real counts; 0 until Phase 4). */
+export interface AIUsageSummary {
+    totalTokens: number;
+    promptTokens: number;
+    completionTokens: number;
+    estimatedCost?: number;
+    monthlyTokenLimit?: number;
+    periodStart: string;
+    periodEnd: string;
+    runCount: number;
+}
+/** Result of an adapter connection test. */
+export interface AIConnectionTestResult {
+    ok: boolean;
+    status: AIConnectionStatus;
+    /** Human-readable detail (safe to show; never contains the key). */
+    message: string;
+    testedAt: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/ai/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/ai/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,iFAAiF;AACjF,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,KAAK,GAAG,QAAQ,CAAA;AAErE,iEAAiE;AACjE,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,UAAU,GAAG,QAAQ,CAAA;AAE/D,sFAAsF;AACtF,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,aAAa,GACb,cAAc,GACd,eAAe,GACf,aAAa,GACb,SAAS,CAAA;AAEb,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,aAAa,GAAG,YAAY,GAAG,SAAS,CAAA;AAElF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;IACf,eAAe,EAAE,OAAO,CAAA;IACxB,UAAU,EAAE,OAAO,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,6EAA6E;AAC7E,MAAM,WAAW,OAAO;IACtB,4DAA4D;IAC5D,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,aAAa,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,aAAa,CAAA;IACrB,YAAY,EAAE,mBAAmB,CAAA;IACjC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACxC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,aAAa,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,kBAAkB,CAAA;IAC1B,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,+EAA+E;AAC/E,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,GAAG;IACvF,YAAY,EAAE,WAAW,CAAA;IACzB,6EAA6E;IAC7E,oBAAoB,EAAE,OAAO,CAAA;IAC7B,MAAM,EAAE,OAAO,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB,KAAK,GACL,OAAO,GACP,SAAS,GACT,OAAO,GACP,UAAU,GACV,WAAW,GACX,QAAQ,CAAA;AAEZ,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,OAAO,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACvC;AAED,MAAM,WAAW,UAAU;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,MAAM,EAAE,gBAAgB,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,EAAE,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,4EAA4E;IAC5E,YAAY,EAAE,OAAO,CAAA;CACtB;AAED,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,oBAAoB,EAAE,CAAA;IACjC,QAAQ,EAAE,UAAU,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACxC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,4CAA4C;AAC5C,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,kBAAkB,CAAA;IAC1B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;CACjB"}

package/dist/ai/types.js

@@ -0,0 +1,11 @@
+/**
+ * Shared types for the Settings > AI governance layer.
+ *
+ * Phases 1-2 cover provider connections (encrypted keys) and a dynamic,
+ * normalized model catalog. Feature config, budget, and data-policy shapes are
+ * declared here for forward-compatibility (enforcement + metering land in later
+ * phases) but only `features[].enabled` and `budget.monthlyTokenLimit` are
+ * wired into the UI for now.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/ai/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/ai/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/ai/usage.d.ts

@@ -0,0 +1,18 @@
+/**
+ * AI usage aggregation.
+ *
+ * Until the dedicated per-run metering table lands (Phase 4), usage is derived
+ * from token totals already recorded in `actuate_audit_logs` (`details
+ * .totalTokensUsed` / `details.tokensUsed`). This returns REAL counts — it is 0
+ * when nothing has run, never a fabricated number.
+ */
+import type { AIUsageSummary } from './types.js';
+/**
+ * Sum token usage from audit-log entries within the period. Recognizes the
+ * fields current AI handlers write today and is tolerant of missing data.
+ */
+export declare function getUsageSummary(db: unknown, period?: {
+    start?: Date;
+    end?: Date;
+}): Promise<AIUsageSummary>;
+//# sourceMappingURL=usage.d.ts.map

package/dist/ai/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../src/ai/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAgBhD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,OAAO,EACX,MAAM,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,GACpC,OAAO,CAAC,cAAc,CAAC,CAiDzB"}

package/dist/ai/usage.js

@@ -0,0 +1,70 @@
+/**
+ * AI usage aggregation.
+ *
+ * Until the dedicated per-run metering table lands (Phase 4), usage is derived
+ * from token totals already recorded in `actuate_audit_logs` (`details
+ * .totalTokensUsed` / `details.tokensUsed`). This returns REAL counts — it is 0
+ * when nothing has run, never a fabricated number.
+ */
+import { getAIConfig } from './config-store.js';
+/** First instant of the current calendar month (UTC). */
+function monthStart(now = new Date()) {
+    return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1, 0, 0, 0, 0));
+}
+/** First instant of the next calendar month (UTC). */
+function nextMonthStart(now = new Date()) {
+    return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth() + 1, 1, 0, 0, 0, 0));
+}
+function num(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value > 0 ? value : 0;
+}
+/**
+ * Sum token usage from audit-log entries within the period. Recognizes the
+ * fields current AI handlers write today and is tolerant of missing data.
+ */
+export async function getUsageSummary(db, period) {
+    const start = period?.start ?? monthStart();
+    const end = period?.end ?? nextMonthStart();
+    const config = await getAIConfig(db);
+    const monthlyTokenLimit = config.settings.budget.monthlyTokenLimit;
+    const base = {
+        totalTokens: 0,
+        promptTokens: 0,
+        completionTokens: 0,
+        monthlyTokenLimit,
+        periodStart: start.toISOString(),
+        periodEnd: end.toISOString(),
+        runCount: 0,
+    };
+    const d = db;
+    if (!d?.auditLog?.findMany)
+        return base;
+    let rows = [];
+    try {
+        rows = await d.auditLog.findMany({
+            where: { timestamp: { gte: start, lt: end } },
+            select: { details: true },
+        });
+    }
+    catch {
+        return base;
+    }
+    let totalTokens = 0;
+    let promptTokens = 0;
+    let completionTokens = 0;
+    let runCount = 0;
+    for (const row of rows) {
+        const details = (row?.details ?? {});
+        const total = num(details.totalTokensUsed) + num(details.tokensUsed) + num(details.totalTokens);
+        const prompt = num(details.promptTokens);
+        const completion = num(details.completionTokens);
+        if (total > 0 || prompt > 0 || completion > 0) {
+            runCount += 1;
+            totalTokens += total > 0 ? total : prompt + completion;
+            promptTokens += prompt;
+            completionTokens += completion;
+        }
+    }
+    return { ...base, totalTokens, promptTokens, completionTokens, runCount };
+}
+//# sourceMappingURL=usage.js.map

package/dist/ai/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../src/ai/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAG/C,yDAAyD;AACzD,SAAS,UAAU,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IAClC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AACnF,CAAC;AAED,sDAAsD;AACtD,SAAS,cAAc,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IACtC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAW,EACX,MAAqC;IAErC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,UAAU,EAAE,CAAA;IAC3C,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,IAAI,cAAc,EAAE,CAAA;IAE3C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAA;IAElE,MAAM,IAAI,GAAmB;QAC3B,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,CAAC;QACnB,iBAAiB;QACjB,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;QAChC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,QAAQ,EAAE,CAAC;KACZ,CAAA;IAED,MAAM,CAAC,GAAG,EAAS,CAAA;IACnB,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ;QAAE,OAAO,IAAI,CAAA;IAEvC,IAAI,IAAI,GAAgC,EAAE,CAAA;IAC1C,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC/B,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,IAAI,gBAAgB,GAAG,CAAC,CAAA;IACxB,IAAI,QAAQ,GAAG,CAAC,CAAA;IAEhB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAA4B,CAAA;QAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC/F,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QACxC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAChD,IAAI,KAAK,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YAC9C,QAAQ,IAAI,CAAC,CAAA;YACb,WAAW,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,UAAU,CAAA;YACtD,YAAY,IAAI,MAAM,CAAA;YACtB,gBAAgB,IAAI,UAAU,CAAA;QAChC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAA;AAC3E,CAAC"}

package/dist/api/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAuhC5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAiVD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAu/WzD"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAwhC5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAiVD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAqlYzD"}