@adminiumjs/adminium 0.1.0-rc.1

package/dist/llm/direct-runner.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Direct-API path runner (06-llm-assist.md §7.5, §10.2 step 3, acceptance #6).
+ *
+ * The provider-agnostic core the `llm-run` job handler drives: given the
+ * per-chunk prompts, a {@link ProviderClient}, and a `validate` closure, it runs
+ * the map phase (one provider round-trip per chunk, with the §7.5 repair loop),
+ * then reduces the per-chunk `LlmResponseV1` results into one via the browser-safe
+ * `@adminium/llm` merge. It is DELIBERATELY free of `@adminium/meta` / persistence
+ * / the jobs runtime so it stays a pure, unit-testable function — the handler
+ * (`jobs/llm-run.ts`) owns run-state persistence and progress fan-out.
+ *
+ * §7.5 repair loop (per chunk):
+ *  - A clean reply (no FATAL error) ends the chunk. Per-item (referential) errors
+ *    are review-time information and NEVER trigger a repair.
+ *  - A FATAL stage-1–4 failure sends a repair turn — the model's bad output as an
+ *    `assistant` message, then the exact §7.5 `user` message carrying the error
+ *    list — up to {@link DEFAULT_MAX_REPAIRS} (2) times.
+ *  - `LLM_TRUNCATED` first raises `maxTokens` to the provider ceiling and retries
+ *    the SAME messages, WITHOUT consuming a repair attempt (§7.5). Only once the
+ *    budget is already at the ceiling does a further truncation cost a repair.
+ *  - Initial attempt + 2 exhausted repairs = 3 consecutive failures → the run
+ *    fails with the last error list preserved.
+ *
+ * Temperature is pinned to 0 on every call (determinism mandate, §3.1). The API
+ * key lives only inside the injected client; nothing here logs or returns it.
+ */
+import { type LlmResponseV1, type LlmValidationError, type ProviderClient, type ValidationResult } from '@adminium/llm';
+/** Max repair turns per chunk before the run fails (§7.5). */
+export declare const DEFAULT_MAX_REPAIRS = 2;
+/** Longest error list embedded in a repair message (§7.5 "max 20"). */
+export declare const MAX_REPAIR_ERRORS = 20;
+/** One map-phase prompt: the direct-path `system` + initial `user` messages. */
+export interface RunnerChunk {
+    /** 1-based position for display; `1`/`total: 1` for an unchunked run. */
+    index: number;
+    total: number;
+    system: string;
+    user: string;
+}
+/**
+ * A provider transport/config failure recorded on a failed run. Distinct from a
+ * {@link LlmValidationError} — it carries the {@link ProviderError} code, never a
+ * schema path, and is scrubbed of the API key by `ProviderError` itself. Stored
+ * opaquely in `adminium_llm_runs.validation_errors` alongside validation errors.
+ */
+export interface ProviderRunError {
+    kind: 'provider';
+    provider: string;
+    /** {@link ProviderError.code} — `network` / `timeout` / `auth` / … */
+    code: string;
+    message: string;
+}
+/** A failed-run error entry: a validation failure OR a provider transport error. */
+export type RunFailureError = LlmValidationError | ProviderRunError;
+export declare function isProviderRunError(error: RunFailureError): error is ProviderRunError;
+/** Progress phases (§10.2 step 3), mapped to hub events by the handler. */
+export type RunnerPhase = {
+    phase: 'building';
+} | {
+    phase: 'sending';
+    chunk: number;
+    total: number;
+    provider: string;
+    model: string;
+} | {
+    phase: 'validating';
+    chunk: number;
+    total: number;
+} | {
+    phase: 'truncation-retry';
+    chunk: number;
+    total: number;
+    maxTokens: number;
+} | {
+    phase: 'repairing';
+    chunk: number;
+    total: number;
+    attempt: number;
+    maxAttempts: number;
+} | {
+    phase: 'chunk-done';
+    chunk: number;
+    total: number;
+    received: number;
+} | {
+    phase: 'done';
+    suggestions: number;
+};
+export interface DirectRunInput {
+    /** Per-chunk prompts (one entry for an unchunked run). */
+    chunks: readonly RunnerChunk[];
+    client: ProviderClient;
+    /** Selected model id passed to `complete()`. */
+    model: string;
+    /** Display id for the `sending` progress event (`anthropic`, `openai`, …). */
+    provider: string;
+    /** Initial response budget (`maxTokens`); default provider budget when unset. */
+    maxTokens: number;
+    /** Ceiling `maxTokens` is raised to on `LLM_TRUNCATED` before a repair (§7.5). */
+    maxTokensCeiling: number;
+    /** Validate one raw reply against the run's snapshot + registries. */
+    validate(rawText: string): ValidationResult;
+    /** Progress sink (§10.2). */
+    onProgress?: (event: RunnerPhase) => void;
+    /** Called after each chunk validates cleanly — persists `chunks_received`. */
+    onChunkComplete?: (received: number) => void | Promise<void>;
+    /** Cooperative cancellation; checked at every turn boundary (§10.2). */
+    signal?: AbortSignal;
+    /** Max repair turns per chunk (§7.5 = 2). */
+    maxRepairs?: number;
+}
+export type DirectRunOutcome = {
+    status: 'validated';
+    /** Merged (map-reduce) response across all chunks. */
+    response: LlmResponseV1;
+    tokensIn: number;
+    tokensOut: number;
+    chunksReceived: number;
+    /** Accumulated per-item validation errors (review-time info). */
+    errors: LlmValidationError[];
+    warnings: LlmValidationError[];
+} | {
+    status: 'failed';
+    /** The last fatal error list, or a single provider-transport error. */
+    errors: RunFailureError[];
+    tokensIn: number;
+    tokensOut: number;
+    chunksReceived: number;
+} | {
+    status: 'cancelled';
+    chunksReceived: number;
+};
+/**
+ * Build the §7.5 repair `user` message VERBATIM. The error list renders each
+ * failure as `code, JSON path, message`, capped at {@link MAX_REPAIR_ERRORS}.
+ */
+export declare function buildRepairMessage(errors: readonly LlmValidationError[]): string;
+/** Count the atomic suggestions in a response (the "done: N suggestions" total). */
+export declare function countSuggestions(response: LlmResponseV1): number;
+/**
+ * Run the direct-API path over every chunk and reduce to one response. Never
+ * throws for provider or validation failures — those resolve to a `failed`
+ * outcome so the caller records the run rather than retrying the whole job.
+ */
+export declare function runDirectPath(input: DirectRunInput): Promise<DirectRunOutcome>;
+//# sourceMappingURL=direct-runner.d.ts.map

package/dist/llm/direct-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-runner.d.ts","sourceRoot":"","sources":["../../src/llm/direct-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AAEvB,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oFAAoF;AACpF,MAAM,MAAM,eAAe,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;AAEpE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,KAAK,IAAI,gBAAgB,CAEpF;AAED,2EAA2E;AAC3E,MAAM,MAAM,WAAW,GACnB;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,GACrB;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1F;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,cAAc,CAAC;IACvB,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,gBAAgB,EAAE,MAAM,CAAC;IACzB,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAC5C,6BAA6B;IAC7B,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;IAC1C,8EAA8E;IAC9E,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,wEAAwE;IACxE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,gBAAgB,GACxB;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,sDAAsD;IACtD,QAAQ,EAAE,aAAa,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC,GACD;IACE,MAAM,EAAE,QAAQ,CAAC;IACjB,uEAAuE;IACvE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,GACD;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,GAAG,MAAM,CAWhF;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAYhE;AAoBD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsDpF"}

package/dist/llm/direct-runner.js

@@ -0,0 +1,204 @@
+/**
+ * Direct-API path runner (06-llm-assist.md §7.5, §10.2 step 3, acceptance #6).
+ *
+ * The provider-agnostic core the `llm-run` job handler drives: given the
+ * per-chunk prompts, a {@link ProviderClient}, and a `validate` closure, it runs
+ * the map phase (one provider round-trip per chunk, with the §7.5 repair loop),
+ * then reduces the per-chunk `LlmResponseV1` results into one via the browser-safe
+ * `@adminium/llm` merge. It is DELIBERATELY free of `@adminium/meta` / persistence
+ * / the jobs runtime so it stays a pure, unit-testable function — the handler
+ * (`jobs/llm-run.ts`) owns run-state persistence and progress fan-out.
+ *
+ * §7.5 repair loop (per chunk):
+ *  - A clean reply (no FATAL error) ends the chunk. Per-item (referential) errors
+ *    are review-time information and NEVER trigger a repair.
+ *  - A FATAL stage-1–4 failure sends a repair turn — the model's bad output as an
+ *    `assistant` message, then the exact §7.5 `user` message carrying the error
+ *    list — up to {@link DEFAULT_MAX_REPAIRS} (2) times.
+ *  - `LLM_TRUNCATED` first raises `maxTokens` to the provider ceiling and retries
+ *    the SAME messages, WITHOUT consuming a repair attempt (§7.5). Only once the
+ *    budget is already at the ceiling does a further truncation cost a repair.
+ *  - Initial attempt + 2 exhausted repairs = 3 consecutive failures → the run
+ *    fails with the last error list preserved.
+ *
+ * Temperature is pinned to 0 on every call (determinism mandate, §3.1). The API
+ * key lives only inside the injected client; nothing here logs or returns it.
+ */
+import { isFatal, mergeChunkResponses, ProviderError, } from '@adminium/llm';
+/** Max repair turns per chunk before the run fails (§7.5). */
+export const DEFAULT_MAX_REPAIRS = 2;
+/** Longest error list embedded in a repair message (§7.5 "max 20"). */
+export const MAX_REPAIR_ERRORS = 20;
+export function isProviderRunError(error) {
+    return error.kind === 'provider';
+}
+/**
+ * Build the §7.5 repair `user` message VERBATIM. The error list renders each
+ * failure as `code, JSON path, message`, capped at {@link MAX_REPAIR_ERRORS}.
+ */
+export function buildRepairMessage(errors) {
+    const list = errors
+        .slice(0, MAX_REPAIR_ERRORS)
+        .map((error) => `- ${error.code}, ${error.path === '' ? '(root)' : error.path}, ${error.message}`)
+        .join('\n');
+    return [
+        'Your previous response failed machine validation:',
+        list,
+        'Return the corrected COMPLETE JSON object now. Output rules still apply:',
+        'single JSON object, no prose, no fences, schema_version first.',
+    ].join('\n');
+}
+/** Count the atomic suggestions in a response (the "done: N suggestions" total). */
+export function countSuggestions(response) {
+    let total = 0;
+    for (const table of response.tables) {
+        total += 1 + table.columns.length;
+    }
+    total += response.enums.length;
+    total += response.relations.confirmed.length + response.relations.inferred.length;
+    total += response.navGroups.length;
+    for (const dashboard of response.dashboards) {
+        total += 1 + dashboard.widgets.length;
+    }
+    return total;
+}
+/**
+ * Run the direct-API path over every chunk and reduce to one response. Never
+ * throws for provider or validation failures — those resolve to a `failed`
+ * outcome so the caller records the run rather than retrying the whole job.
+ */
+export async function runDirectPath(input) {
+    const maxRepairs = input.maxRepairs ?? DEFAULT_MAX_REPAIRS;
+    input.onProgress?.({ phase: 'building' });
+    const responses = [];
+    const errors = [];
+    const warnings = [];
+    const usage = { tokensIn: 0, tokensOut: 0 };
+    let chunksReceived = 0;
+    for (const chunk of input.chunks) {
+        if (input.signal?.aborted)
+            return { status: 'cancelled', chunksReceived };
+        const result = await runChunk(chunk, input, maxRepairs, usage);
+        if (result.kind === 'cancelled')
+            return { status: 'cancelled', chunksReceived };
+        if (result.kind === 'failed') {
+            return {
+                status: 'failed',
+                errors: result.errors,
+                tokensIn: usage.tokensIn,
+                tokensOut: usage.tokensOut,
+                chunksReceived,
+            };
+        }
+        responses.push(result.response);
+        errors.push(...result.errors);
+        warnings.push(...result.warnings);
+        chunksReceived += 1;
+        input.onProgress?.({
+            phase: 'chunk-done',
+            chunk: chunk.index,
+            total: chunk.total,
+            received: chunksReceived,
+        });
+        await input.onChunkComplete?.(chunksReceived);
+    }
+    if (input.signal?.aborted)
+        return { status: 'cancelled', chunksReceived };
+    // Reduce phase — deterministic, order-independent (§4.5, acceptance #7).
+    const merged = mergeChunkResponses(responses);
+    input.onProgress?.({ phase: 'done', suggestions: countSuggestions(merged) });
+    return {
+        status: 'validated',
+        response: merged,
+        tokensIn: usage.tokensIn,
+        tokensOut: usage.tokensOut,
+        chunksReceived,
+        errors,
+        warnings,
+    };
+}
+/** One chunk's map phase: send → validate → repair loop (§7.5). */
+async function runChunk(chunk, input, maxRepairs, usage) {
+    const messages = [{ role: 'user', content: chunk.user }];
+    let maxTokens = input.maxTokens;
+    let repairs = 0;
+    for (;;) {
+        if (input.signal?.aborted)
+            return { kind: 'cancelled' };
+        input.onProgress?.({
+            phase: 'sending',
+            chunk: chunk.index,
+            total: chunk.total,
+            provider: input.provider,
+            model: input.model,
+        });
+        let reply;
+        try {
+            // Temperature pinned 0 — determinism mandate (§3.1).
+            reply = await input.client.complete({
+                system: chunk.system,
+                messages: messages.map((message) => ({ ...message })),
+                model: input.model,
+                maxTokens,
+                temperature: 0,
+            });
+        }
+        catch (error) {
+            // Transport/config failure: not repairable by re-prompting → the run fails.
+            return { kind: 'failed', errors: [toProviderRunError(error, input.provider)] };
+        }
+        usage.tokensIn += reply.usage?.inputTokens ?? 0;
+        usage.tokensOut += reply.usage?.outputTokens ?? 0;
+        input.onProgress?.({ phase: 'validating', chunk: chunk.index, total: chunk.total });
+        const validation = input.validate(reply.text);
+        if (validation.response !== undefined) {
+            // Clean parse (no fatal). Per-item errors are review-time info, not repairs.
+            return {
+                kind: 'ok',
+                response: validation.response,
+                errors: validation.errors,
+                warnings: validation.warnings,
+            };
+        }
+        const fatals = validation.errors.filter(isFatal);
+        const truncated = fatals.some((error) => error.code === 'LLM_TRUNCATED');
+        // Truncation escalates the budget once, for free, before any repair (§7.5).
+        if (truncated && maxTokens < input.maxTokensCeiling) {
+            maxTokens = input.maxTokensCeiling;
+            input.onProgress?.({
+                phase: 'truncation-retry',
+                chunk: chunk.index,
+                total: chunk.total,
+                maxTokens,
+            });
+            continue;
+        }
+        if (repairs >= maxRepairs) {
+            // Initial attempt + `maxRepairs` failed = 3 consecutive failures (§7.5).
+            return { kind: 'failed', errors: [...validation.errors] };
+        }
+        repairs += 1;
+        input.onProgress?.({
+            phase: 'repairing',
+            chunk: chunk.index,
+            total: chunk.total,
+            attempt: repairs,
+            maxAttempts: maxRepairs,
+        });
+        messages.push({ role: 'assistant', content: reply.text });
+        messages.push({ role: 'user', content: buildRepairMessage(fatals) });
+    }
+}
+/** Map an unknown thrown value to a key-scrubbed {@link ProviderRunError}. */
+function toProviderRunError(error, provider) {
+    if (error instanceof ProviderError) {
+        return { kind: 'provider', provider: error.provider, code: error.code, message: error.message };
+    }
+    return {
+        kind: 'provider',
+        provider,
+        code: 'unknown',
+        message: error instanceof Error ? error.message : String(error),
+    };
+}
+//# sourceMappingURL=direct-runner.js.map

package/dist/llm/direct-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-runner.js","sourceRoot":"","sources":["../../src/llm/direct-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EACL,OAAO,EACP,mBAAmB,EACnB,aAAa,GAKd,MAAM,eAAe,CAAC;AAEvB,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,uEAAuE;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AA4BpC,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACvD,OAAQ,KAA0B,CAAC,IAAI,KAAK,UAAU,CAAC;AACzD,CAAC;AA0DD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAqC;IACtE,MAAM,IAAI,GAAG,MAAM;SAChB,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC;SAC3B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;SACjG,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;QACL,mDAAmD;QACnD,IAAI;QACJ,0EAA0E;QAC1E,gEAAgE;KACjE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,QAAuB;IACtD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IACpC,CAAC;IACD,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC/B,KAAK,IAAI,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;IAClF,KAAK,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5C,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAoBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAqB;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC3D,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IAE1C,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC5C,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAE/D,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QAChF,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,cAAc;aACf,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,cAAc,IAAI,CAAC,CAAC;QACpB,KAAK,CAAC,UAAU,EAAE,CAAC;YACjB,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC,cAAc,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IAE1E,yEAAyE;IACzE,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC9C,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE7E,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc;QACd,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,QAAQ,CACrB,KAAkB,EAClB,KAAqB,EACrB,UAAkB,EAClB,KAA8C;IAE9C,MAAM,QAAQ,GAAkB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAChC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,SAAS,CAAC;QACR,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAExD,KAAK,CAAC,UAAU,EAAE,CAAC;YACjB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QAEH,IAAI,KAA8E,CAAC;QACnF,IAAI,CAAC;YACH,qDAAqD;YACrD,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAClC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;gBACrD,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS;gBACT,WAAW,EAAE,CAAC;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4EAA4E;YAC5E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC;QAChD,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC;QAElD,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACpF,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE9C,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACtC,6EAA6E;YAC7E,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;QAEzE,4EAA4E;QAC5E,IAAI,SAAS,IAAI,SAAS,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACpD,SAAS,GAAG,KAAK,CAAC,gBAAgB,CAAC;YACnC,KAAK,CAAC,UAAU,EAAE,CAAC;gBACjB,KAAK,EAAE,kBAAkB;gBACzB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS;aACV,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;YAC1B,yEAAyE;YACzE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5D,CAAC;QAED,OAAO,IAAI,CAAC,CAAC;QACb,KAAK,CAAC,UAAU,EAAE,CAAC;YACjB,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,kBAAkB,CAAC,KAAc,EAAE,QAAgB;IAC1D,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAClG,CAAC;IACD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ;QACR,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAChE,CAAC;AACJ,CAAC"}

package/dist/llm/prompt-service.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Prompt/run creation service (06-llm-assist.md §10.4 + §10.5).
+ *
+ * THE LIFT (M10-T01): everything here used to live inline inside the
+ * `POST /api/v1/llm/runs` handler. The CLI's `adminium generate-prompt` needs
+ * the exact same sequence — resolve the connection's latest snapshot, read the
+ * configured provider for a direct run, collect §4.2 stats, `createRun`, and
+ * park a BYO run in `awaiting_response`. Rather than let the CLI reimplement it
+ * (the M10 risk register's named failure mode: "CLI/Docker parity with Studio
+ * wizard drifts"), the orchestration moved here and BOTH front doors call it:
+ * the route is now a thin HTTP adapter over `createRunForConnection`.
+ *
+ * What stays out: HTTP concerns (status codes, DTO mapping, RBAC, audit) belong
+ * to the route; process/exit concerns belong to the CLI. This service throws
+ * typed errors and returns domain objects — no Fastify, no `process`.
+ */
+import { type DatabaseModel, type StatsResult } from '@adminium/engine';
+import type { AllowedVocabularies, LocaleCode, RequestedSection, Sampling } from '@adminium/llm';
+import { type LlmRun, type MetaDb } from '@adminium/meta';
+import type { CreateRunResult, RunService } from './run-service.js';
+/** The connection has never been introspected — nothing to build a prompt from. */
+export declare class SnapshotRequiredError extends Error {
+    readonly connectionId: string;
+    readonly name = "SnapshotRequiredError";
+    constructor(connectionId: string);
+}
+/** A `provider` (direct) run was requested but Settings → AI has no provider. */
+export declare class ProviderNotSelectedError extends Error {
+    readonly name = "ProviderNotSelectedError";
+    constructor();
+}
+export interface CollectRunStatsInput {
+    connectionId: string;
+    snapshotId: string;
+    /** The classified schema IR from the run's snapshot (privacy flags + types). */
+    model: DatabaseModel;
+    /** Sampling opt-in (§4.2) — sample-free when `null`. */
+    sampling: Sampling;
+}
+/**
+ * Collects §4.2 aggregate statistics for a run's snapshot. Injected so callers
+ * stay testable WITHOUT a live source database; the app-wiring layer supplies a
+ * `ConnectionManager`-backed implementation.
+ */
+export type CollectRunStats = (input: CollectRunStatsInput) => Promise<readonly StatsResult[]>;
+/** Default: sample-free with no aggregates (statistics omitted from the prompt). */
+export declare const NO_STATS: CollectRunStats;
+export interface CreateRunForConnectionInput {
+    connectionId: string;
+    /** `byo` = copy-paste round-trip (the CLI's path); `provider` = direct API. */
+    path: 'byo' | 'provider';
+    /** Requested output locales; `en_US` is always included by the prompt builder. */
+    locales?: readonly LocaleCode[] | undefined;
+    /** Requested decision groups (§4.4); empty/omitted ⇒ all sections. */
+    sections?: readonly RequestedSection[] | undefined;
+    /** Sampling opt-in (§4.2); `null` = sample-free (default). */
+    sampling?: Sampling | undefined;
+    createdBy?: string | null | undefined;
+}
+export interface CreateRunForConnectionResult extends CreateRunResult {
+    /** The run AFTER the BYO `awaiting_response` transition (§10.2 step 4). */
+    run: LlmRun;
+    /** The snapshot the prompt was built against. */
+    snapshotId: string;
+}
+export interface PromptServiceDeps {
+    meta: MetaDb;
+    runService: RunService;
+    /**
+     * `LLM_ALLOWED_TEMPLATES` / `LLM_ALLOWED_WIDGETS` from `@adminium/widgets` —
+     * INJECTED, since the server tree must not import the widgets package (01 §2.3).
+     */
+    allowed: AllowedVocabularies;
+    /** §4.2 stats collector (default {@link NO_STATS}). */
+    collectStats?: CollectRunStats | undefined;
+}
+export declare function createPromptService(deps: PromptServiceDeps): {
+    loadLatestModel: (connectionId: string) => Promise<{
+        snapshotId: string;
+        model: DatabaseModel;
+    }>;
+    /**
+     * Build the prompt for a connection's latest snapshot and persist the run.
+     * BYO runs come back already in `awaiting_response`; direct runs stay `draft`
+     * for the caller to execute (route → `llm-run` job).
+     */
+    createRunForConnection(input: CreateRunForConnectionInput): Promise<CreateRunForConnectionResult>;
+};
+export type PromptService = ReturnType<typeof createPromptService>;
+//# sourceMappingURL=prompt-service.d.ts.map

package/dist/llm/prompt-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-service.d.ts","sourceRoot":"","sources":["../../src/llm/prompt-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAsB,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,KAAK,EACV,mBAAmB,EACnB,UAAU,EAEV,gBAAgB,EAChB,QAAQ,EACT,MAAM,eAAe,CAAC;AACvB,OAAO,EAA+B,KAAK,MAAM,EAAE,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAEvF,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAIpE,mFAAmF;AACnF,qBAAa,qBAAsB,SAAQ,KAAK;IAElC,QAAQ,CAAC,YAAY,EAAE,MAAM;IADzC,SAAkB,IAAI,2BAA2B;gBAC5B,YAAY,EAAE,MAAM;CAG1C;AAED,iFAAiF;AACjF,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,SAAkB,IAAI,8BAA8B;;CAIrD;AAID,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,KAAK,EAAE,aAAa,CAAC;IACrB,wDAAwD;IACxD,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;AAE/F,oFAAoF;AACpF,eAAO,MAAM,QAAQ,EAAE,eAAgC,CAAC;AAExD,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,IAAI,EAAE,KAAK,GAAG,UAAU,CAAC;IACzB,kFAAkF;IAClF,OAAO,CAAC,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,CAAC;IAC5C,sEAAsE;IACtE,QAAQ,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG,SAAS,CAAC;IACnD,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,4BAA6B,SAAQ,eAAe;IACnE,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,UAAU,CAAC;IACvB;;;OAGG;IACH,OAAO,EAAE,mBAAmB,CAAC;IAC7B,uDAAuD;IACvD,YAAY,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CAC5C;AAID,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB;oCAQzC,MAAM,KACnB,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,aAAa,CAAA;KAAE,CAAC;IAUtD;;;;OAIG;kCAEM,2BAA2B,GACjC,OAAO,CAAC,4BAA4B,CAAC;EAsC3C;AAED,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/llm/prompt-service.js

@@ -0,0 +1,93 @@
+/**
+ * Prompt/run creation service (06-llm-assist.md §10.4 + §10.5).
+ *
+ * THE LIFT (M10-T01): everything here used to live inline inside the
+ * `POST /api/v1/llm/runs` handler. The CLI's `adminium generate-prompt` needs
+ * the exact same sequence — resolve the connection's latest snapshot, read the
+ * configured provider for a direct run, collect §4.2 stats, `createRun`, and
+ * park a BYO run in `awaiting_response`. Rather than let the CLI reimplement it
+ * (the M10 risk register's named failure mode: "CLI/Docker parity with Studio
+ * wizard drifts"), the orchestration moved here and BOTH front doors call it:
+ * the route is now a thin HTTP adapter over `createRunForConnection`.
+ *
+ * What stays out: HTTP concerns (status codes, DTO mapping, RBAC, audit) belong
+ * to the route; process/exit concerns belong to the CLI. This service throws
+ * typed errors and returns domain objects — no Fastify, no `process`.
+ */
+import { parseDatabaseModel } from '@adminium/engine';
+import { settingsRepo, snapshotsRepo } from '@adminium/meta';
+// ─── Errors ──────────────────────────────────────────────────────────────────
+/** The connection has never been introspected — nothing to build a prompt from. */
+export class SnapshotRequiredError extends Error {
+    connectionId;
+    name = 'SnapshotRequiredError';
+    constructor(connectionId) {
+        super('Introspect the connection before running AI enrichment.');
+        this.connectionId = connectionId;
+    }
+}
+/** A `provider` (direct) run was requested but Settings → AI has no provider. */
+export class ProviderNotSelectedError extends Error {
+    name = 'ProviderNotSelectedError';
+    constructor() {
+        super('Configure an AI provider before running the direct path.');
+    }
+}
+/** Default: sample-free with no aggregates (statistics omitted from the prompt). */
+export const NO_STATS = async () => [];
+// ─── Service ─────────────────────────────────────────────────────────────────
+export function createPromptService(deps) {
+    const { meta, runService, allowed } = deps;
+    const snapshots = snapshotsRepo(meta);
+    const settings = settingsRepo(meta);
+    const collectStats = deps.collectStats ?? NO_STATS;
+    /** The connection's latest snapshot as a parsed IR, or {@link SnapshotRequiredError}. */
+    async function loadLatestModel(connectionId) {
+        const snapshot = await snapshots.latest(connectionId);
+        if (snapshot === null)
+            throw new SnapshotRequiredError(connectionId);
+        // The stored snapshot already carries its classified semantics.
+        return { snapshotId: snapshot.id, model: parseDatabaseModel(snapshot.schema) };
+    }
+    return {
+        loadLatestModel,
+        /**
+         * Build the prompt for a connection's latest snapshot and persist the run.
+         * BYO runs come back already in `awaiting_response`; direct runs stay `draft`
+         * for the caller to execute (route → `llm-run` job).
+         */
+        async createRunForConnection(input) {
+            const { snapshotId, model } = await loadLatestModel(input.connectionId);
+            const locales = (input.locales ?? ['en_US']);
+            const sections = (input.sections ?? []);
+            const sampling = input.sampling ?? null;
+            // §9: BYO runs record no provider/model — only the direct path reads them.
+            let provider = null;
+            let providerModel = null;
+            if (input.path === 'provider') {
+                provider = await settings.get('llm.provider');
+                if (provider === null)
+                    throw new ProviderNotSelectedError();
+                providerModel = await settings.get('llm.model');
+            }
+            const stats = await collectStats({ connectionId: input.connectionId, snapshotId, model, sampling });
+            const created = await runService.createRun({
+                connectionId: input.connectionId,
+                snapshotId,
+                schemaIr: model,
+                stats,
+                locales,
+                sections,
+                sampling,
+                mode: input.path,
+                provider,
+                model: providerModel,
+                allowed,
+                createdBy: input.createdBy ?? null,
+            });
+            const run = input.path === 'byo' ? await runService.markAwaitingResponse(created.run.id) : created.run;
+            return { ...created, run, snapshotId };
+        },
+    };
+}
+//# sourceMappingURL=prompt-service.js.map

package/dist/llm/prompt-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-service.js","sourceRoot":"","sources":["../../src/llm/prompt-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,kBAAkB,EAAwC,MAAM,kBAAkB,CAAC;AAQ5F,OAAO,EAAE,YAAY,EAAE,aAAa,EAA4B,MAAM,gBAAgB,CAAC;AAIvF,gFAAgF;AAEhF,mFAAmF;AACnF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAEzB;IADH,IAAI,GAAG,uBAAuB,CAAC;IACjD,YAAqB,YAAoB;QACvC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAD9C,iBAAY,GAAZ,YAAY,CAAQ;IAEzC,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC/B,IAAI,GAAG,0BAA0B,CAAC;IACpD;QACE,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACpE,CAAC;CACF;AAoBD,oFAAoF;AACpF,MAAM,CAAC,MAAM,QAAQ,GAAoB,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;AAkCxD,gFAAgF;AAEhF,MAAM,UAAU,mBAAmB,CAAC,IAAuB;IACzD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC;IAEnD,yFAAyF;IACzF,KAAK,UAAU,eAAe,CAC5B,YAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,qBAAqB,CAAC,YAAY,CAAC,CAAC;QACrE,gEAAgE;QAChE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IACjF,CAAC;IAED,OAAO;QACL,eAAe;QAEf;;;;WAIG;QACH,KAAK,CAAC,sBAAsB,CAC1B,KAAkC;YAElC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAiB,CAAC;YAC7D,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAuB,CAAC;YAC9D,MAAM,QAAQ,GAAa,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC;YAElD,2EAA2E;YAC3E,IAAI,QAAQ,GAAsB,IAAI,CAAC;YACvC,IAAI,aAAa,GAAkB,IAAI,CAAC;YACxC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9B,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAC9C,IAAI,QAAQ,KAAK,IAAI;oBAAE,MAAM,IAAI,wBAAwB,EAAE,CAAC;gBAC5D,aAAa,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEpG,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC;gBACzC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,UAAU;gBACV,QAAQ,EAAE,KAAK;gBACf,KAAK;gBACL,OAAO;gBACP,QAAQ;gBACR,QAAQ;gBACR,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ;gBACR,KAAK,EAAE,aAAa;gBACpB,OAAO;gBACP,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;aACnC,CAAC,CAAC;YAEH,MAAM,GAAG,GACP,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;YAE7F,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/llm/provider-resolver.d.ts

@@ -0,0 +1,25 @@
+import { type LlmKeyCrypto, type ProviderClient, type ProviderConfig, type ProviderId } from '@adminium/llm';
+import { type MetaDb } from '@adminium/meta';
+import type { ResolveRun } from '../jobs/llm-run.js';
+/**
+ * Per-provider `maxTokens` ceiling the `LLM_TRUNCATED` escalation raises to
+ * before counting a repair (§7.5). Conservative output caps for the chat
+ * contract each client speaks; a truncated reply retries once at this budget.
+ */
+export declare const PROVIDER_OUTPUT_CEILING: Record<ProviderId, number>;
+export interface ProviderResolverDeps {
+    meta: MetaDb;
+    /** Decrypts the stored `llm.apiKey` (`enc:v1:` token → plaintext). */
+    keyCrypto: LlmKeyCrypto;
+    /** `LLM_ALLOWED_TEMPLATES` from `@adminium/widgets`. */
+    allowedTemplates: readonly string[];
+    /** `LLM_ALLOWED_WIDGETS` from `@adminium/widgets`. */
+    allowedWidgets: readonly string[];
+    /** Bundled lucide manifest for the icon-fallback warning (optional). */
+    allowedIcons?: ReadonlySet<string> | readonly string[];
+    /** Test seam — construct a client from a config (default: `createProviderClient`). */
+    createClient?: (config: ProviderConfig) => ProviderClient;
+}
+/** Build the production run resolver. */
+export declare function createProviderResolver(deps: ProviderResolverDeps): ResolveRun;
+//# sourceMappingURL=provider-resolver.d.ts.map

package/dist/llm/provider-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-resolver.d.ts","sourceRoot":"","sources":["../../src/llm/provider-resolver.ts"],"names":[],"mappings":"AAoBA,OAAO,EAKL,KAAK,YAAY,EAEjB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,UAAU,EAEhB,MAAM,eAAe,CAAC;AACvB,OAAO,EAA4C,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAEvF,OAAO,KAAK,EAAe,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAM9D,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,SAAS,EAAE,YAAY,CAAC;IACxB,wDAAwD;IACxD,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,sDAAsD;IACtD,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,wEAAwE;IACxE,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,MAAM,EAAE,CAAC;IACvD,sFAAsF;IACtF,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,cAAc,CAAC;CAC3D;AAED,yCAAyC;AACzC,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,GAAG,UAAU,CA6D7E"}