@adminiumjs/adminium 0.1.0-rc.1

package/dist/routes/jobs/schema.d.ts

@@ -0,0 +1,170 @@
+/**
+ * Zod schemas for the jobs resource (08-server-api.md §1.5 naming, §2.17
+ * routes). Success envelope `{ data }`; the cursor list adds
+ * `cursor: { next }` per §1.5.
+ */
+import { z } from 'zod';
+export declare const jobStatus: z.ZodEnum<{
+    pending: "pending";
+    running: "running";
+    succeeded: "succeeded";
+    failed: "failed";
+    cancelled: "cancelled";
+}>;
+export type JobStatusValue = z.infer<typeof jobStatus>;
+/** In-process progress snapshot; `null` when this process has none. */
+export declare const jobProgress: z.ZodNullable<z.ZodObject<{
+    pct: z.ZodNumber;
+    step: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>>;
+export declare const jobView: z.ZodObject<{
+    id: z.ZodString;
+    kind: z.ZodString;
+    status: z.ZodEnum<{
+        pending: "pending";
+        running: "running";
+        succeeded: "succeeded";
+        failed: "failed";
+        cancelled: "cancelled";
+    }>;
+    priority: z.ZodNumber;
+    runAt: z.ZodNumber;
+    attempts: z.ZodNumber;
+    maxAttempts: z.ZodNumber;
+    progress: z.ZodNullable<z.ZodObject<{
+        pct: z.ZodNumber;
+        step: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    lastError: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodNumber;
+    startedAt: z.ZodNullable<z.ZodNumber>;
+    finishedAt: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+export type JobView = z.infer<typeof jobView>;
+export declare const jobsCreateBody: z.ZodObject<{
+    kind: z.ZodString;
+    payload: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    runAt: z.ZodOptional<z.ZodNumber>;
+    maxAttempts: z.ZodOptional<z.ZodNumber>;
+    dedupeKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type JobsCreateBody = z.infer<typeof jobsCreateBody>;
+/** 202 accepted envelope (§2 `jobAcceptedReply`). */
+export declare const jobsCreateReply: z.ZodObject<{
+    data: z.ZodObject<{
+        jobId: z.ZodString;
+        status: z.ZodEnum<{
+            pending: "pending";
+            running: "running";
+            succeeded: "succeeded";
+            failed: "failed";
+            cancelled: "cancelled";
+        }>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type JobsCreateReply = z.infer<typeof jobsCreateReply>;
+export declare const jobsGetParams: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export type JobsGetParams = z.infer<typeof jobsGetParams>;
+export declare const jobsGetReply: z.ZodObject<{
+    data: z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodString;
+        status: z.ZodEnum<{
+            pending: "pending";
+            running: "running";
+            succeeded: "succeeded";
+            failed: "failed";
+            cancelled: "cancelled";
+        }>;
+        priority: z.ZodNumber;
+        runAt: z.ZodNumber;
+        attempts: z.ZodNumber;
+        maxAttempts: z.ZodNumber;
+        progress: z.ZodNullable<z.ZodObject<{
+            pct: z.ZodNumber;
+            step: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>;
+        lastError: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        startedAt: z.ZodNullable<z.ZodNumber>;
+        finishedAt: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type JobsGetReply = z.infer<typeof jobsGetReply>;
+export declare const jobsListQuery: z.ZodObject<{
+    kind: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        pending: "pending";
+        running: "running";
+        succeeded: "succeeded";
+        failed: "failed";
+        cancelled: "cancelled";
+    }>>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type JobsListQuery = z.infer<typeof jobsListQuery>;
+export declare const jobsListReply: z.ZodObject<{
+    data: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodString;
+        status: z.ZodEnum<{
+            pending: "pending";
+            running: "running";
+            succeeded: "succeeded";
+            failed: "failed";
+            cancelled: "cancelled";
+        }>;
+        priority: z.ZodNumber;
+        runAt: z.ZodNumber;
+        attempts: z.ZodNumber;
+        maxAttempts: z.ZodNumber;
+        progress: z.ZodNullable<z.ZodObject<{
+            pct: z.ZodNumber;
+            step: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>;
+        lastError: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        startedAt: z.ZodNullable<z.ZodNumber>;
+        finishedAt: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+    cursor: z.ZodObject<{
+        next: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type JobsListReply = z.infer<typeof jobsListReply>;
+export declare const jobsCancelReply: z.ZodObject<{
+    data: z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodString;
+        status: z.ZodEnum<{
+            pending: "pending";
+            running: "running";
+            succeeded: "succeeded";
+            failed: "failed";
+            cancelled: "cancelled";
+        }>;
+        priority: z.ZodNumber;
+        runAt: z.ZodNumber;
+        attempts: z.ZodNumber;
+        maxAttempts: z.ZodNumber;
+        progress: z.ZodNullable<z.ZodObject<{
+            pct: z.ZodNumber;
+            step: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>;
+        lastError: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        startedAt: z.ZodNullable<z.ZodNumber>;
+        finishedAt: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type JobsCancelReply = z.infer<typeof jobsCancelReply>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/routes/jobs/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/routes/jobs/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,SAAS;;;;;;EAAqE,CAAC;AAC5F,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAEvD,uEAAuE;AACvE,eAAO,MAAM,WAAW;;;;kBAMX,CAAC;AAEd,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;iBAalB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C,eAAO,MAAM,cAAc;;;;;;;iBAQzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,qDAAqD;AACrD,eAAO,MAAM,eAAe;;;;;;;;;;;iBAE1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,aAAa;;iBAAsC,CAAC;AACjE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;iBAA8B,CAAC;AACxD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,aAAa;;;;;;;;;;;iBAMxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;iBAA8B,CAAC;AAC3D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/routes/jobs/schema.js

@@ -0,0 +1,57 @@
+/**
+ * Zod schemas for the jobs resource (08-server-api.md §1.5 naming, §2.17
+ * routes). Success envelope `{ data }`; the cursor list adds
+ * `cursor: { next }` per §1.5.
+ */
+import { z } from 'zod';
+export const jobStatus = z.enum(['pending', 'running', 'succeeded', 'failed', 'cancelled']);
+/** In-process progress snapshot; `null` when this process has none. */
+export const jobProgress = z
+    .object({
+    pct: z.number().int().min(0).max(100),
+    step: z.string().nullish(),
+    message: z.string().nullish(),
+})
+    .nullable();
+export const jobView = z.object({
+    id: z.string(),
+    kind: z.string(),
+    status: jobStatus,
+    priority: z.number().int(),
+    runAt: z.number().int(),
+    attempts: z.number().int(),
+    maxAttempts: z.number().int(),
+    progress: jobProgress,
+    lastError: z.string().nullable(),
+    createdAt: z.number().int(),
+    startedAt: z.number().int().nullable(),
+    finishedAt: z.number().int().nullable(),
+});
+export const jobsCreateBody = z.object({
+    kind: z.string().min(1).max(60),
+    payload: z.record(z.string(), z.unknown()).default({}),
+    priority: z.number().int().min(-100).max(100).optional(),
+    /** Epoch ms; defaults to now (immediate). */
+    runAt: z.number().int().nonnegative().optional(),
+    maxAttempts: z.number().int().min(1).max(10).optional(),
+    dedupeKey: z.string().min(1).max(120).optional(),
+});
+/** 202 accepted envelope (§2 `jobAcceptedReply`). */
+export const jobsCreateReply = z.object({
+    data: z.object({ jobId: z.string(), status: jobStatus }),
+});
+export const jobsGetParams = z.object({ id: z.string().min(1) });
+export const jobsGetReply = z.object({ data: jobView });
+export const jobsListQuery = z.object({
+    kind: z.string().min(1).max(60).optional(),
+    status: jobStatus.optional(),
+    limit: z.coerce.number().int().min(1).max(100).default(25),
+    /** Keyset cursor from a previous page's `cursor.next`. */
+    cursor: z.string().max(200).optional(),
+});
+export const jobsListReply = z.object({
+    data: z.array(jobView),
+    cursor: z.object({ next: z.string().nullable() }),
+});
+export const jobsCancelReply = z.object({ data: jobView });
+//# sourceMappingURL=schema.js.map

package/dist/routes/jobs/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/routes/jobs/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAG5F,uEAAuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CAC9B,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC7B,QAAQ,EAAE,WAAW;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxD,6CAA6C;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH,qDAAqD;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;CACzD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAGjE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAGxD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,0DAA0D;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;CAClD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC"}

package/dist/routes/llm/config-service.d.ts

@@ -0,0 +1,48 @@
+/**
+ * LLM provider-config helpers for the routes (06-llm-assist.md §3.2).
+ *
+ * Owns the three things `GET/PUT /config`, `POST /config/test` and `GET /models`
+ * share: reading the `llm.*` settings into the safe reply shape (key redacted to
+ * `apiKeySet` + last-4, acceptance #10), encrypting a new key on write (AES-256-GCM
+ * via the injected {@link LlmKeyCrypto}), and resolving the active settings into a
+ * live {@link ProviderClient} with the DECRYPTED key. The key never leaves this
+ * module except inside the provider request header; nothing here logs it.
+ */
+import { type LlmKeyCrypto, type ProviderClient, type ProviderConfig, type ProviderId } from '@adminium/llm';
+import type { SettingsRepo } from '@adminium/meta';
+import type { LlmConfigPutBody, LlmConfigReply } from './schema.js';
+/** Test seam — construct a client from a resolved config (default: real client). */
+export type CreateClient = (config: ProviderConfig) => ProviderClient;
+export interface ResolvedProviderClient {
+    client: ProviderClient;
+    provider: ProviderId;
+    model: string;
+    baseUrl: string | null;
+}
+/** No provider is configured yet — `POST /config/test` / `GET /models` can't run. */
+export declare class ProviderNotConfiguredError extends Error {
+    readonly name = "ProviderNotConfiguredError";
+    constructor(message?: string);
+}
+/** The safe `GET /config` view: provider/model/baseUrl + key presence, never the key. */
+export declare function readLlmConfig(settings: SettingsRepo, keyCrypto: LlmKeyCrypto): Promise<LlmConfigReply>;
+export interface WriteLlmConfigContext {
+    updatedBy: string | null;
+    at: number;
+}
+/**
+ * Persist a config write. `provider` is always set; `model`/`baseUrl`/
+ * `maxOutputTokens` are set only when present in the body (absent ⇒ untouched).
+ * The API key is AES-256-GCM-encrypted before storage; an empty-string `apiKey`
+ * clears it; an absent `apiKey` leaves the stored key untouched (§3.2 — there is
+ * no read-back, so the UI omits the field to keep the existing key).
+ */
+export declare function writeLlmConfig(settings: SettingsRepo, keyCrypto: LlmKeyCrypto, body: LlmConfigPutBody, ctx: WriteLlmConfigContext): Promise<void>;
+/**
+ * Resolve the active `llm.*` settings into a live provider client with the
+ * decrypted key. Throws {@link ProviderNotConfiguredError} when no provider is
+ * set. The client construction may throw a `ProviderError` (e.g. missing key /
+ * unsupported provider) — the caller maps it to a `{ ok:false, error }` reply.
+ */
+export declare function resolveProviderClient(settings: SettingsRepo, keyCrypto: LlmKeyCrypto, createClient?: CreateClient): Promise<ResolvedProviderClient>;
+//# sourceMappingURL=config-service.d.ts.map

package/dist/routes/llm/config-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-service.d.ts","sourceRoot":"","sources":["../../../src/routes/llm/config-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,UAAU,EAChB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAKpE,oFAAoF;AACpF,MAAM,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,cAAc,KAAK,cAAc,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,qFAAqF;AACrF,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,SAAkB,IAAI,gCAAgC;gBAC1C,OAAO,SAAmC;CAGvD;AAYD,yFAAyF;AACzF,wBAAsB,aAAa,CACjC,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,YAAY,EACvB,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,qBAAqB,GACzB,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,YAAY,EACvB,YAAY,GAAE,YAAmC,GAChD,OAAO,CAAC,sBAAsB,CAAC,CAoBjC"}

package/dist/routes/llm/config-service.js

@@ -0,0 +1,102 @@
+/**
+ * LLM provider-config helpers for the routes (06-llm-assist.md §3.2).
+ *
+ * Owns the three things `GET/PUT /config`, `POST /config/test` and `GET /models`
+ * share: reading the `llm.*` settings into the safe reply shape (key redacted to
+ * `apiKeySet` + last-4, acceptance #10), encrypting a new key on write (AES-256-GCM
+ * via the injected {@link LlmKeyCrypto}), and resolving the active settings into a
+ * live {@link ProviderClient} with the DECRYPTED key. The key never leaves this
+ * module except inside the provider request header; nothing here logs it.
+ */
+import { createProviderClient, DEFAULT_MAX_OUTPUT_TOKENS, } from '@adminium/llm';
+/** How many trailing characters of the key the safe reply exposes (§3.2). */
+const KEY_LAST_N = 4;
+/** No provider is configured yet — `POST /config/test` / `GET /models` can't run. */
+export class ProviderNotConfiguredError extends Error {
+    name = 'ProviderNotConfiguredError';
+    constructor(message = 'No LLM provider is configured.') {
+        super(message);
+    }
+}
+/**
+ * Decrypt a stored key. Tolerates a plaintext value (only decrypts recognizably
+ * `enc:`-prefixed tokens) so a partially-migrated setting never throws — mirrors
+ * `llm/provider-resolver.ts`.
+ */
+function decryptStoredKey(stored, keyCrypto) {
+    if (stored === null || stored.length === 0)
+        return null;
+    return stored.startsWith('enc:') ? keyCrypto.decrypt(stored) : stored;
+}
+/** The safe `GET /config` view: provider/model/baseUrl + key presence, never the key. */
+export async function readLlmConfig(settings, keyCrypto) {
+    const [provider, model, baseUrl, storedKey, maxOutputTokens] = await Promise.all([
+        settings.get('llm.provider'),
+        settings.get('llm.model'),
+        settings.get('llm.baseUrl'),
+        settings.get('llm.apiKey'),
+        settings.get('llm.maxOutputTokens'),
+    ]);
+    const plaintext = decryptStoredKey(storedKey, keyCrypto);
+    const apiKeySet = plaintext !== null && plaintext.length > 0;
+    return {
+        provider,
+        model,
+        baseUrl,
+        maxOutputTokens,
+        apiKeySet,
+        apiKeyLast4: apiKeySet ? plaintext.slice(-KEY_LAST_N) : null,
+    };
+}
+/**
+ * Persist a config write. `provider` is always set; `model`/`baseUrl`/
+ * `maxOutputTokens` are set only when present in the body (absent ⇒ untouched).
+ * The API key is AES-256-GCM-encrypted before storage; an empty-string `apiKey`
+ * clears it; an absent `apiKey` leaves the stored key untouched (§3.2 — there is
+ * no read-back, so the UI omits the field to keep the existing key).
+ */
+export async function writeLlmConfig(settings, keyCrypto, body, ctx) {
+    const opts = { updatedBy: ctx.updatedBy, at: ctx.at };
+    await settings.set('llm.provider', body.provider, opts);
+    if (body.model !== undefined)
+        await settings.set('llm.model', body.model, opts);
+    if (body.baseUrl !== undefined)
+        await settings.set('llm.baseUrl', body.baseUrl, opts);
+    if (body.maxOutputTokens !== undefined) {
+        await settings.set('llm.maxOutputTokens', body.maxOutputTokens, opts);
+    }
+    if (body.apiKey !== undefined) {
+        // Empty string clears the key; otherwise store the AES-256-GCM token — never plaintext.
+        const value = body.apiKey.length === 0 ? null : keyCrypto.encrypt(body.apiKey);
+        await settings.set('llm.apiKey', value, opts);
+    }
+}
+/**
+ * Resolve the active `llm.*` settings into a live provider client with the
+ * decrypted key. Throws {@link ProviderNotConfiguredError} when no provider is
+ * set. The client construction may throw a `ProviderError` (e.g. missing key /
+ * unsupported provider) — the caller maps it to a `{ ok:false, error }` reply.
+ */
+export async function resolveProviderClient(settings, keyCrypto, createClient = createProviderClient) {
+    const [provider, model, baseUrl, storedKey, maxOut] = await Promise.all([
+        settings.get('llm.provider'),
+        settings.get('llm.model'),
+        settings.get('llm.baseUrl'),
+        settings.get('llm.apiKey'),
+        settings.get('llm.maxOutputTokens'),
+    ]);
+    if (provider === null)
+        throw new ProviderNotConfiguredError();
+    const apiKey = decryptStoredKey(storedKey, keyCrypto);
+    const config = {
+        provider,
+        model: model ?? '',
+        maxOutputTokens: maxOut ?? DEFAULT_MAX_OUTPUT_TOKENS,
+    };
+    if (apiKey !== null)
+        config.apiKey = apiKey;
+    if (baseUrl !== null)
+        config.baseUrl = baseUrl;
+    return { client: createClient(config), provider, model: model ?? '', baseUrl };
+}
+//# sourceMappingURL=config-service.js.map

package/dist/routes/llm/config-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-service.js","sourceRoot":"","sources":["../../../src/routes/llm/config-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,oBAAoB,EACpB,yBAAyB,GAK1B,MAAM,eAAe,CAAC;AAKvB,6EAA6E;AAC7E,MAAM,UAAU,GAAG,CAAC,CAAC;AAYrB,qFAAqF;AACrF,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACjC,IAAI,GAAG,4BAA4B,CAAC;IACtD,YAAY,OAAO,GAAG,gCAAgC;QACpD,KAAK,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,MAAqB,EAAE,SAAuB;IACtE,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACxE,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAsB,EACtB,SAAuB;IAEvB,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/E,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC;QAC5B,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;QACzB,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;QAC3B,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;QAC1B,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC;KACpC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7D,OAAO;QACL,QAAQ;QACR,KAAK;QACL,OAAO;QACP,eAAe;QACf,SAAS;QACT,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;KAC7D,CAAC;AACJ,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAsB,EACtB,SAAuB,EACvB,IAAsB,EACtB,GAA0B;IAE1B,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACtD,MAAM,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtF,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,wFAAwF;QACxF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/E,MAAM,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAsB,EACtB,SAAuB,EACvB,eAA6B,oBAAoB;IAEjD,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC;QAC5B,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;QACzB,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;QAC3B,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;QAC1B,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,0BAA0B,EAAE,CAAC;IAE9D,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,MAAM,GAAmB;QAC7B,QAAQ;QACR,KAAK,EAAE,KAAK,IAAI,EAAE;QAClB,eAAe,EAAE,MAAM,IAAI,yBAAyB;KACrD,CAAC;IACF,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IAC5C,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAE/C,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC;AACjF,CAAC"}

package/dist/routes/llm/index.d.ts

@@ -0,0 +1,69 @@
+/**
+ * LLM-assist routes (06-llm-assist.md §10.5) — the HTTP surface over the T07 run
+ * service, the T08 `llm-run` job, and the T10b apply executor.
+ *
+ * The full §10.5 table, all guarded by `system:llm:run` (Admin + Super-Admin;
+ * Editor/Viewer → 403, acceptance #13):
+ *
+ *   GET  /llm/config              provider config (key WRITE-ONLY, §3.2)
+ *   PUT  /llm/config              store provider/model/baseUrl/maxOutputTokens
+ *                                 + AES-256-GCM-encrypt the api key (acceptance #10)
+ *   POST /llm/config/test         provider `test()` ping (never the key)
+ *   GET  /llm/models              active-provider model list (+ static fallback)
+ *   POST /llm/runs                create a run → run + prompt artifact
+ *   POST /llm/runs/:id/execute    direct path: enqueue the `llm-run` job (202)
+ *   POST /llm/runs/:id/response   BYO paste: chunk text → validation result
+ *   GET  /llm/runs                history (per connection)
+ *   GET  /llm/runs/:id            run detail (incl. validation errors + review)
+ *   GET  /llm/runs/:id/prompt     re-download the prompt file(s)
+ *   GET  /llm/runs/:id/diff       SuggestionDiff[] against the heuristic baseline
+ *   POST /llm/runs/:id/apply      apply the accepted suggestion ids (§8.3)
+ *
+ * The api key never appears in any reply or log: `PUT` encrypts before storage,
+ * `GET` returns `apiKeySet` + last-4 only, and every provider error is scrubbed
+ * of the key by `ProviderError` before it reaches a response.
+ *
+ * Injected deps (this tree must not import `@adminium/widgets`, so the allowed
+ * vocabularies + key crypto arrive from the app-wiring layer): see
+ * {@link LlmRoutesDeps}.
+ */
+import { type AllowedVocabularies, type LlmKeyCrypto } from '@adminium/llm';
+import { type MetaDb } from '@adminium/meta';
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+import type { ApplyService } from '../../llm/apply-service.js';
+import { LlmApplyUndoStore } from '../../llm/apply-undo-store.js';
+import { type CollectRunStats } from '../../llm/prompt-service.js';
+import { type RunService } from '../../llm/run-service.js';
+import { type CreateClient } from './config-service.js';
+/** Every `/api/v1/llm/*` route requires this grant — Admin + Super-Admin only (§10.1). */
+export declare const LLM_RUN_PERMISSION = "system:llm:run";
+/**
+ * The §4.2 stats collector contract now lives with the prompt service — the CLI
+ * injects the same shape. Re-exported here so existing importers of
+ * `routes/llm/index.js` keep resolving.
+ */
+export type { CollectRunStats, CollectRunStatsInput } from '../../llm/prompt-service.js';
+export interface LlmRoutesDeps {
+    meta: MetaDb;
+    /** T07 — run lifecycle (create/receive/status machine). */
+    runService: RunService;
+    /** T10b — transactional apply executor + diff/plan builder. */
+    applyService: ApplyService;
+    /** AES-256-GCM closures for the `llm.apiKey` setting at rest (§3.2). */
+    keyCrypto: LlmKeyCrypto;
+    /**
+     * `LLM_ALLOWED_TEMPLATES` / `LLM_ALLOWED_WIDGETS` from `@adminium/widgets` —
+     * INJECTED, since the server tree must not import the widgets package.
+     */
+    allowed: AllowedVocabularies;
+    /** Bundled lucide manifest for the icon-fallback warning (optional). */
+    allowedIcons?: ReadonlySet<string> | readonly string[];
+    /** §4.2 stats collector (default: none — sample-free, statistics omitted). */
+    collectStats?: CollectRunStats;
+    /** Test seam — construct a provider client (default: the real client). */
+    createClient?: CreateClient;
+    /** In-process apply-undo token store (default: a fresh instance per plugin). */
+    undoStore?: LlmApplyUndoStore;
+}
+export declare function llmRoutes(deps: LlmRoutesDeps): FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/llm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/llm/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,YAAY,EAIlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAA4C,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAEvF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAIvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAKL,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AA0B7B,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AAEnD;;;;GAIG;AACH,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEzF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,UAAU,EAAE,UAAU,CAAC;IACvB,+DAA+D;IAC/D,YAAY,EAAE,YAAY,CAAC;IAC3B,wEAAwE;IACxE,SAAS,EAAE,YAAY,CAAC;IACxB;;;OAGG;IACH,OAAO,EAAE,mBAAmB,CAAC;IAC7B,wEAAwE;IACxE,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,MAAM,EAAE,CAAC;IACvD,8EAA8E;IAC9E,YAAY,CAAC,EAAE,eAAe,CAAC;IAC/B,0EAA0E;IAC1E,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,gFAAgF;IAChF,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B;AAmDD,wBAAgB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,qBAAqB,CAgYpE"}