@hachej/boring-governance 0.1.83 → 0.1.85

package/dist/front/index.d.ts

@@ -1,7 +1,8 @@
 import { LoadCompanyAdminStatus, RenderCompanyAdminContent, CompanyAdminLabels } from '@hachej/boring-core/front';
-import * as react from 'react';
-import { G as GovernanceUsageSummary } from '../usageContract-BNyGSg5T.js';
-export { a as GovernanceUsageEntry } from '../usageContract-BNyGSg5T.js';
+import * as React from 'react';
+import { ReactNode } from 'react';
+import { G as GovernanceUsageSummary } from '../usageContract-DiJBjBko.js';
+export { a as GovernanceCompanyContextAccess, b as GovernanceUsageEntry, c as GovernanceUsageRole } from '../usageContract-DiJBjBko.js';
 
 interface GovernancePolicyStatus {
     state: 'disabled' | 'active' | 'invalid';
@@ -43,7 +44,7 @@ interface GovernanceMeResponse {
 }
 declare function GovernanceAdminView({ status }: {
     status: GovernanceMeResponse;
-}): react.JSX.Element;
+}): React.JSX.Element;
 
 interface GovernanceUsageMetersProps {
     /** Route to fetch the usage summary from. Defaults to the governance plugin route. */
@@ -64,7 +65,35 @@ interface GovernanceUsageMetersProps {
  * usage-summary route by default; renders nothing when governance is disabled so
  * a settings host can hide the section entirely.
  */
-declare function GovernanceUsageMeters({ endpoint, fetchImpl, fetchUsageSummary, title, description, className, }: GovernanceUsageMetersProps): react.JSX.Element | null;
+declare function GovernanceUsageMeters({ endpoint, fetchImpl, fetchUsageSummary, title, description, className, }: GovernanceUsageMetersProps): React.JSX.Element | null;
+
+interface GovernanceUsagePanelProps {
+    /**
+     * Label for the company-context box heading, its "(read/write)" line, and the
+     * "… context paths" heading. Tenants pass their own name (e.g. "Constellation
+     * context"). Defaults to "Company context".
+     */
+    contextLabel?: string;
+    /** Intro copy under the panel heading. Defaults to the credits-free budget line. */
+    description?: ReactNode;
+    /** Route to fetch the usage summary from. Defaults to the governance plugin route. */
+    endpoint?: string;
+    /** Override the fetch implementation (tests / non-browser hosts). */
+    fetchImpl?: typeof fetch;
+    /** Fully override data loading; takes precedence over `endpoint`/`fetchImpl`. */
+    fetchUsageSummary?: () => Promise<GovernanceUsageSummary>;
+    /** Section heading. */
+    title?: string;
+    className?: string;
+}
+/**
+ * Complete governed-usage settings panel: role, aggregate monthly cap,
+ * company-context access, the per-model usage meters (reusing
+ * `GovernanceUsageMeters`), and the company-context allow-rule chips. Self-fetches
+ * the summary once and hands the resolved data to the embedded meters so there is
+ * a single network round-trip. Renders nothing when governance is disabled.
+ */
+declare function GovernanceUsagePanel({ contextLabel, description, endpoint, fetchImpl, fetchUsageSummary, title, className, }: GovernanceUsagePanelProps): React.JSX.Element | null;
 
 interface CreateGovernanceCompanyAdminOptions {
     fetchImpl?: typeof fetch;
@@ -81,4 +110,4 @@ type GovernanceFrontPlugin = ((api: unknown) => void) & {
 };
 declare const governanceFrontPlugin: GovernanceFrontPlugin;
 
-export { type CreateGovernanceCompanyAdminOptions, GovernanceAdminView, type GovernanceCompanyAdminProvider, type GovernanceMeResponse, type GovernancePolicyStatus, GovernanceUsageMeters, type GovernanceUsageMetersProps, GovernanceUsageSummary, createGovernanceCompanyAdmin, governanceFrontPlugin as default };
+export { type CreateGovernanceCompanyAdminOptions, GovernanceAdminView, type GovernanceCompanyAdminProvider, type GovernanceMeResponse, type GovernancePolicyStatus, GovernanceUsageMeters, type GovernanceUsageMetersProps, GovernanceUsagePanel, type GovernanceUsagePanelProps, GovernanceUsageSummary, createGovernanceCompanyAdmin, governanceFrontPlugin as default };

package/dist/front/index.js

@@ -203,8 +203,109 @@ async function fetchSummary(endpoint, fetchImpl, signal) {
   return await response.json();
 }
 
+// src/front/GovernanceUsagePanel.tsx
+import * as React2 from "react";
+import { Button as Button3, Chip, ErrorState as ErrorState2, LoadingState as LoadingState2 } from "@hachej/boring-ui-kit";
+import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+var DEFAULT_ENDPOINT2 = "/api/v1/governance/usage-summary";
+var DEFAULT_CONTEXT_LABEL = "Company context";
+var DEFAULT_DESCRIPTION = "This deployment uses admin-managed monthly model budgets, not prepaid credits.";
+var MICROS_PER_EUR2 = 1e6;
+function formatEurMicros(micros) {
+  if (micros === null) return "No aggregate cap";
+  return new Intl.NumberFormat(void 0, { style: "currency", currency: "EUR", maximumFractionDigits: 2 }).format(micros / MICROS_PER_EUR2);
+}
+function contextAccessLabel(summary, contextLabel) {
+  if (summary.companyContextRules.length === 0) return "Not enabled";
+  return summary.companyContextAccess === "readwrite" ? `${contextLabel} (read/write)` : "Read-only allowed paths";
+}
+function GovernanceUsagePanel({
+  contextLabel = DEFAULT_CONTEXT_LABEL,
+  description = DEFAULT_DESCRIPTION,
+  endpoint = DEFAULT_ENDPOINT2,
+  fetchImpl,
+  fetchUsageSummary,
+  title = "Usage limits",
+  className
+}) {
+  const [state, setState] = React2.useState({ status: "loading" });
+  const load = React2.useCallback(async (signal) => {
+    setState({ status: "loading" });
+    try {
+      const summary2 = fetchUsageSummary ? await fetchUsageSummary() : await fetchSummary2(endpoint, fetchImpl, signal);
+      if (signal?.aborted) return;
+      setState({ status: "ready", summary: summary2 });
+    } catch (error) {
+      if (signal?.aborted) return;
+      setState({ status: "error", message: error instanceof Error ? error.message : "Failed to load usage" });
+    }
+  }, [endpoint, fetchImpl, fetchUsageSummary]);
+  React2.useEffect(() => {
+    const controller = new AbortController();
+    void load(controller.signal);
+    return () => controller.abort();
+  }, [load]);
+  if (state.status === "loading") {
+    return /* @__PURE__ */ jsx3(PanelShell, { title, description, className, children: /* @__PURE__ */ jsx3(LoadingState2, { label: "Loading governed model limits\u2026" }) });
+  }
+  if (state.status === "error") {
+    return /* @__PURE__ */ jsx3(PanelShell, { title, description, className, children: /* @__PURE__ */ jsx3(
+      ErrorState2,
+      {
+        title: "Couldn\u2019t load usage limits",
+        description: state.message,
+        actions: /* @__PURE__ */ jsx3(Button3, { variant: "outline", size: "sm", onClick: () => void load(), children: "Retry" })
+      }
+    ) });
+  }
+  const { summary } = state;
+  if (!summary.enabled) return null;
+  const metersSummary = summary;
+  return /* @__PURE__ */ jsxs3(PanelShell, { title, description, className, children: [
+    /* @__PURE__ */ jsxs3("div", { className: "mt-5 grid gap-3 sm:grid-cols-3", children: [
+      /* @__PURE__ */ jsx3(StatCard, { label: "Role", value: summary.role ?? "Not governed" }),
+      /* @__PURE__ */ jsx3(StatCard, { label: "Aggregate monthly cap", value: formatEurMicros(summary.aggregateCapMicros) }),
+      /* @__PURE__ */ jsx3(StatCard, { label: contextLabel, value: contextAccessLabel(summary, contextLabel) })
+    ] }),
+    /* @__PURE__ */ jsx3("div", { className: "mt-6", children: /* @__PURE__ */ jsx3(GovernanceUsageMeters, { fetchUsageSummary: async () => metersSummary }) }),
+    summary.companyContextRules.length > 0 ? /* @__PURE__ */ jsxs3("div", { className: "mt-6", children: [
+      /* @__PURE__ */ jsxs3("h3", { className: "text-sm font-medium text-foreground", children: [
+        contextLabel,
+        " paths"
+      ] }),
+      /* @__PURE__ */ jsx3("div", { className: "mt-3 flex flex-wrap gap-2", children: summary.companyContextRules.map((rule) => /* @__PURE__ */ jsx3(Chip, { className: "font-mono text-muted-foreground", children: rule }, rule)) })
+    ] }) : null
+  ] });
+}
+function PanelShell({
+  title,
+  description,
+  className,
+  children
+}) {
+  return /* @__PURE__ */ jsxs3("section", { "data-slot": "governance-usage-panel", className, children: [
+    /* @__PURE__ */ jsxs3("header", { children: [
+      /* @__PURE__ */ jsx3("h2", { className: "text-lg font-semibold text-foreground", children: title }),
+      /* @__PURE__ */ jsx3("p", { className: "mt-1 text-sm text-muted-foreground", children: description })
+    ] }),
+    children
+  ] });
+}
+function StatCard({ label, value }) {
+  return /* @__PURE__ */ jsxs3("div", { className: "rounded-xl border border-border bg-card p-4", children: [
+    /* @__PURE__ */ jsx3("div", { className: "text-xs uppercase tracking-[0.18em] text-muted-foreground", children: label }),
+    /* @__PURE__ */ jsx3("div", { className: "mt-2 text-base font-medium text-foreground", children: value })
+  ] });
+}
+async function fetchSummary2(endpoint, fetchImpl, signal) {
+  const doFetch = fetchImpl ?? fetch;
+  const response = await doFetch(endpoint, { credentials: "include", signal });
+  if (!response.ok) throw new Error(`Usage summary failed: HTTP ${response.status}`);
+  return await response.json();
+}
+
 // src/front/index.tsx
-import { jsx as jsx3 } from "react/jsx-runtime";
+import { jsx as jsx4 } from "react/jsx-runtime";
 function createGovernanceCompanyAdmin({ fetchImpl = fetch } = {}) {
   const loadStatus = async () => {
     const response = await fetchImpl("/api/v1/governance/me", { credentials: "include" });
@@ -221,7 +322,7 @@ function createGovernanceCompanyAdmin({ fetchImpl = fetch } = {}) {
       details: body
     };
   };
-  const renderContent = (status) => /* @__PURE__ */ jsx3(GovernanceAdminView, { status: status.details });
+  const renderContent = (status) => /* @__PURE__ */ jsx4(GovernanceAdminView, { status: status.details });
   const labels = {
     menuLabel: "Company Admin",
     pageTitle: "Company Admin",
@@ -236,6 +337,7 @@ var front_default = governanceFrontPlugin;
 export {
   GovernanceAdminView,
   GovernanceUsageMeters,
+  GovernanceUsagePanel,
   createGovernanceCompanyAdmin,
   front_default as default
 };

package/dist/server/index.d.ts

@@ -2,8 +2,8 @@ import * as _hachej_boring_agent_server from '@hachej/boring-agent/server';
 import { AgentMeteringSink, RegisterAgentRoutesOptions } from '@hachej/boring-agent/server';
 import { CoreConfig } from '@hachej/boring-core/shared';
 import { CoreWorkspaceAgentServerPlugin } from '@hachej/boring-core/app/server';
-import { G as GovernanceUsageSummary } from '../usageContract-BNyGSg5T.js';
-export { a as GovernanceUsageEntry } from '../usageContract-BNyGSg5T.js';
+import { G as GovernanceUsageSummary } from '../usageContract-DiJBjBko.js';
+export { b as GovernanceUsageEntry } from '../usageContract-DiJBjBko.js';
 import { PostgresBudgetReservationStore } from '@hachej/boring-core/server';
 import { FastifyRequest } from 'fastify';
 
@@ -153,6 +153,19 @@ declare class GovernanceService {
      * period boundary (never hardcoded).
      */
     getUsageSummary(user: GovernanceUserLike | null | undefined, reader: GovernanceUsageSpendReader): Promise<GovernanceUsageSummary>;
+    /**
+     * Non per-model summary fields (role, aggregate cap, company-context access +
+     * rules) shared by every getUsageSummary return path and by the plugin route's
+     * empty fallback. Reuses the existing policy accessors so the panel and the
+     * admission path can never disagree.
+     */
+    usageSummaryMeta(user: GovernanceUserLike | null | undefined): {
+        enabled: boolean;
+        role: TenantRole | null;
+        aggregateCapMicros: number | null;
+        companyContextAccess: CompanyContextAccess;
+        companyContextRules: string[];
+    };
     me(user: GovernanceUserLike | null | undefined): GovernanceMeResponse;
 }
 

package/dist/server/index.js

@@ -387,10 +387,10 @@ var GovernanceService = class {
    * period boundary (never hardcoded).
    */
   async getUsageSummary(user, reader) {
-    if (!this.loaded.enabled) return { enabled: false, currency: "EUR", models: [], aggregate: null };
+    if (!this.loaded.enabled) return { ...this.usageSummaryMeta(user), currency: "EUR", models: [], aggregate: null };
     const userPolicy = this.userPolicy(user);
     const userId = user?.id;
-    if (!userPolicy || !userId) return { enabled: true, currency: "EUR", models: [], aggregate: null };
+    if (!userPolicy || !userId) return { ...this.usageSummaryMeta(user), currency: "EUR", models: [], aggregate: null };
     const models = [];
     for (const grant of userPolicy.models) {
       const snapshot = await reader.getSpendSnapshot({ scope: "model", userId, provider: grant.provider, model: grant.id });
@@ -414,7 +414,22 @@ var GovernanceService = class {
         snapshot
       });
     }
-    return { enabled: true, currency: "EUR", models, aggregate };
+    return { ...this.usageSummaryMeta(user), currency: "EUR", models, aggregate };
+  }
+  /**
+   * Non per-model summary fields (role, aggregate cap, company-context access +
+   * rules) shared by every getUsageSummary return path and by the plugin route's
+   * empty fallback. Reuses the existing policy accessors so the panel and the
+   * admission path can never disagree.
+   */
+  usageSummaryMeta(user) {
+    return {
+      enabled: this.loaded.enabled,
+      role: this.roleForUser(user),
+      aggregateCapMicros: user ? this.userMonthlyBudgetMicros(user) : null,
+      companyContextAccess: this.companyContextAccessForUser(user),
+      companyContextRules: user ? this.companyContextRules(user) : []
+    };
   }
   me(user) {
     const role = this.roleForUser(user);
@@ -484,7 +499,7 @@ function governanceRoutes(service, options = {}) {
       const user = request.user ?? null;
       const reader = options.getUsageReader?.();
       if (!user || !reader) {
-        return { enabled: service.isEnabled(), currency: "EUR", models: [], aggregate: null };
+        return { ...service.usageSummaryMeta(user), currency: "EUR", models: [], aggregate: null };
       }
       return service.getUsageSummary({ id: user.id, email: user.email, emailVerified: user.emailVerified }, reader);
     });

package/dist/{usageContract-BNyGSg5T.d.ts → usageContract-DiJBjBko.d.ts}

@@ -18,6 +18,10 @@ interface GovernanceUsageEntry {
     /** ISO timestamp of the budget-period reset boundary. */
     resetsAt: string;
 }
+/** Caller's governance role, or null when the caller is not governed. */
+type GovernanceUsageRole = 'admin' | 'user' | null;
+/** Caller's access to the company-context workspace. */
+type GovernanceCompanyContextAccess = 'none' | 'readonly' | 'readwrite';
 interface GovernanceUsageSummary {
     /** Whether governance is enabled for this host. */
     enabled: boolean;
@@ -27,6 +31,14 @@ interface GovernanceUsageSummary {
     models: GovernanceUsageEntry[];
     /** Aggregate ("All models") row when an aggregate cap is configured, else null. */
     aggregate: GovernanceUsageEntry | null;
+    /** Caller's governance role, or null when not governed. */
+    role: GovernanceUsageRole;
+    /** Aggregate monthly cap in micros, or null when no aggregate cap is configured. */
+    aggregateCapMicros: number | null;
+    /** Caller's access to the company-context workspace. */
+    companyContextAccess: GovernanceCompanyContextAccess;
+    /** Company-context allow-rule patterns granted to the caller. */
+    companyContextRules: string[];
 }
 
-export type { GovernanceUsageSummary as G, GovernanceUsageEntry as a };
+export type { GovernanceUsageSummary as G, GovernanceCompanyContextAccess as a, GovernanceUsageEntry as b, GovernanceUsageRole as c };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-governance",
-  "version": "0.1.83",
+  "version": "0.1.85",
   "type": "module",
   "private": false,
   "license": "MIT",
@@ -42,10 +42,10 @@
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
-    "@hachej/boring-agent": "0.1.83",
-    "@hachej/boring-bash": "0.1.83",
-    "@hachej/boring-core": "0.1.83",
-    "@hachej/boring-ui-kit": "0.1.83"
+    "@hachej/boring-agent": "0.1.85",
+    "@hachej/boring-bash": "0.1.85",
+    "@hachej/boring-core": "0.1.85",
+    "@hachej/boring-ui-kit": "0.1.85"
   },
   "dependencies": {
     "proper-lockfile": "^4.1.2",
@@ -67,10 +67,10 @@
     "tsx": "^4.20.6",
     "typescript": "~6.0.3",
     "vitest": "^4.1.9",
-    "@hachej/boring-agent": "0.1.83",
-    "@hachej/boring-bash": "0.1.83",
-    "@hachej/boring-core": "0.1.83",
-    "@hachej/boring-ui-kit": "0.1.83"
+    "@hachej/boring-agent": "0.1.85",
+    "@hachej/boring-bash": "0.1.85",
+    "@hachej/boring-ui-kit": "0.1.85",
+    "@hachej/boring-core": "0.1.85"
   },
   "scripts": {
     "build": "tsup",