@happyvertical/smrt-inference 0.0.0-stage → 0.60.15

package/agents/settings.md

@@ -0,0 +1,84 @@
+# Settings UI and binding storage (#4754)
+
+Consumer guide: [docs/content/inference-settings.md](../../../docs/content/inference-settings.md).
+
+- **Storage split, enforced by API shape.** Keys: the panel emits
+  `onSaveKey({ provider, key, preset?, baseUrl? })` (the endpoint shown when
+  the key was typed; the key input remounts on a provider or base URL
+  change), the host binds it with `bindInferenceKey()` and stores it once,
+  as the #4756 `inference.provider-config` secret, through the user
+  resolver's `write()` (`inferenceProviderConfigFromKey()` converts the
+  record and re-checks the bound origin), and the panel only ever gets
+  `keySet` back. User choices (mode `byo | local | hosted |
+  off`, provider, base URL, model, default tier): smrt-preferences kind
+  `inference` (`inferencePreferenceKind`, permissions `inference.customize`
+  / `inference.personalize`; the host registers both, smrt-preferences is
+  not a dependency). App/tenant bindings: `_smrt_inference_overrides`.
+- **Key rule** (`src/settings/keys.ts`, ported from the planner's BYO
+  screen): a key is bound when saved to the origin of its endpoint
+  (explicit base URL, else preset, else `inferenceProbeUrl()`'s provider
+  default, a provider id that is a preset id counting as that preset;
+  https only, plain http for loopback; gateways such as
+  `litellm`/`bifrost` need a base URL) and `inferenceKeyFor()` releases it
+  only for a URL on that origin. `testConnection()` reads no environment key
+  and never probes another origin with a stored key; details pass
+  `redactInferenceSecret()`. Binding rows, preference payloads and tested
+  candidates refuse credential-shaped members (`findKeyMember()`; `key` is
+  allowed because #4753 fusions carry one).
+- **Override table**: one row per `(binding, context)`, binding
+  `tier:<tier> | default-tier | alias:<name> | fusion:<name>`, `context`
+  `__app__` or the tenant id (the prompts pattern), `target` JSON,
+  `tenant_allow_list` JSON on app rows. Generated surfaces are closed; ships
+  through `smrt db:migrate` (`override-migration.test.ts`). A tier target is
+  exactly a model `{ provider?, model }`, an alias `{ alias }` or a fusion
+  `{ kind: 'fusion', fusion }`: no endpoint, key or inline chain (those go
+  in an alias). Layers, low to high: code default (configured client),
+  `inference` config, app row, tenant row; each target replaced whole.
+- **Tenant allow-list**: a tenant writes only `tier:*` and `default-tier`,
+  only to a reference (`model:<provider>/<model>`, `alias:<n>`,
+  `fusion:<n>`, `tier:<t>`; trailing `*` and `*` match) on the app row's
+  list (no list allows nothing), and only when the
+  `tenantTargetPolicy` hook returns `true`; this hook is where #4667 caps
+  the maximum hosted tier. Both are re-checked on every layered read, so a
+  narrowed list or policy disables existing tenant rows (`tenantBlocked`).
+  Aliases and fusions are app-scope only (a tenant definition could
+  redefine an allow-listed name).
+- **`InferenceSettingsService`** mirrors `PromptSettingsService`:
+  `listInferenceSettings()` returns one row per tier with the effective
+  target, each scope's raw value and both revert previews computed
+  separately (`appRevertTarget` = config, never the app row;
+  `inheritedTarget` = config + app row), plus `getDefaultTierSetting()`,
+  `listInferenceAliases()`, `listInferenceFusions()` (registry: the
+  `registryFusions` option, default #4753's `defineFusion()` registry;
+  config `inference.fusions`; editable app rows). Writes go through `InferenceOverrideService`
+  (authorizer first, fails closed; without `authorize` the service is
+  read-only) and refuse a value that adds a config issue to the layer it
+  lands in; removing an app alias or fusion that any row (every tenant) or
+  config still names is refused (`InferenceBindingInUseError`, tenant rows
+  only counted, checked after the authorizer allowed the write) unless
+  config or the registry keeps defining it. Every config-backed value a row method
+  returns passes `stripKeyMembers()` (config may carry literal keys);
+  `getEffectiveConfig()` is server-side only. `testConnection()`, `testCandidate()` and `doctor()` reuse
+  `./node`; `testCandidate()` reads a key variable only for a candidate
+  already in the effective config (an unsaved one is probed keyless);
+  `usage()` is `reportAiUsage()` by model (default), tier, prompt.
+- **`createInferenceOverrideResolver({ db, base })`** applies stored
+  bindings at call time and defers unbound tiers to `base` or config; an
+  app-only alias is returned as its inline candidate chain because the
+  executor reads only the process config. Rows (not layers) are cached per
+  tenant for `ttlMs` (30 s) and invalidated by any write in the process; the
+  allow-list and policy are re-applied on every call, and only the requested
+  tier's chain is validated, so one dangling reference fails one tier.
+  Compose it as the per-user resolver's `fallback` (see AGENTS.md,
+  "Resolver composition"). App-row fusions are not yet visible to the
+  executor (it reads the process config and the `defineFusion()` registry):
+  a tier bound to a fusion defined only in an app row fails loudly
+  (`fusion-unknown`) until stored fusions reach the executor (#4800).
+- **Panel** (`src/svelte`): built like `PromptSettingsPanel` (presentational,
+  `svelte` optional peer, prune script, two-project Vitest, `svelte-check`,
+  named `$props()` interfaces, types free of core). The default view is the
+  whole screen for one provider; Advanced (tier ladder, `auto` tier,
+  aliases, fusions) is not rendered until opened. The key input is its own
+  form, never in state, cleared on submit. Tenant scope disables targets
+  off the allow-list (display only) and makes aliases/fusions read-only.
+  Rows remount on `contextKey`.

package/dist/__smrt-register__.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=__smrt-register__.d.ts.map

package/dist/__smrt-register__.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"__smrt-register__.d.ts","sourceRoot":"","sources":["../src/__smrt-register__.ts"],"names":[],"mappings":""}

package/dist/chunks/InferenceOverrideCollection-wl7sI-3C.js

@@ -0,0 +1,398 @@
+import { INFERENCE_TIERS, ObjectRegistry, SmrtCollection, SmrtObject, field, inferenceTargetKind, isInferenceTier, smrt } from "@happyvertical/smrt-core";
+//#region src/__smrt-register__.ts
+ObjectRegistry.registerPackageManifest(JSON.parse(`{"version":"1.0.0","timestamp":0,"packageName":"@happyvertical/smrt-inference","packageVersion":"0.60.15","objects":{"@happyvertical/smrt-inference:InferenceOverride":{"name":"inferenceoverride","className":"InferenceOverride","qualifiedName":"@happyvertical/smrt-inference:InferenceOverride","collection":"inferenceoverrides","filePath":"/home/runner/work/smrt/smrt/packages/inference/src/models/InferenceOverride.ts","packageName":"@happyvertical/smrt-inference","fields":{"binding":{"type":"text","required":true,"default":"","_meta":{"required":true}},"tenantId":{"type":"text","required":false,"_meta":{"sqlType":"UUID","nullable":true}},"target":{"type":"text","required":false,"_meta":{"nullable":true}},"tenantAllowList":{"type":"text","required":false,"_meta":{"nullable":true}}},"methods":{"getValue":{"name":"getValue","async":false,"parameters":[],"returnType":"unknown","isStatic":false,"isPublic":true},"getTenantAllowList":{"name":"getTenantAllowList","async":false,"parameters":[],"returnType":"string[] | null","isStatic":false,"isPublic":true},"save":{"name":"save","async":true,"parameters":[{"name":"options","type":"SmrtSaveOptions","optional":true}],"returnType":"Promise<this>","isStatic":false,"isPublic":true},"delete":{"name":"delete","async":true,"parameters":[],"returnType":"Promise<void>","isStatic":false,"isPublic":true}},"decoratorConfig":{"tableName":"_smrt_inference_overrides","conflictColumns":["binding","context"],"api":false,"cli":false,"mcp":false,"indexes":[{"name":"idx_smrt_inference_overrides_tenant","columns":["tenantId","binding"]}]},"extends":"SmrtObject","exportName":"InferenceOverride","collectionExportName":"InferenceOverrideCollection","validationRules":[{"field":"binding","rule":"required","fieldType":"text"}],"schema":{"tableName":"_smrt_inference_overrides","ddl":"CREATE TABLE IF NOT EXISTS \\"_smrt_inference_overrides\\" (\\n  \\"_sync_origin_device_id\\" TEXT,\\n  \\"_sync_revision\\" INTEGER,\\n  \\"id\\" UUID PRIMARY KEY NOT NULL,\\n  \\"slug\\" TEXT NOT NULL,\\n  \\"context\\" TEXT NOT NULL DEFAULT '',\\n  \\"created_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"updated_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"binding\\" TEXT NOT NULL DEFAULT '',\\n  \\"tenant_id\\" UUID,\\n  \\"target\\" TEXT,\\n  \\"tenant_allow_list\\" TEXT\\n);","columns":{"_sync_origin_device_id":{"type":"TEXT"},"_sync_revision":{"type":"INTEGER"},"id":{"type":"UUID","primaryKey":true,"referenceKind":"id","notNull":true},"slug":{"type":"TEXT","notNull":true},"context":{"type":"TEXT","notNull":true,"default":""},"created_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"updated_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"binding":{"type":"TEXT","notNull":true,"unique":false,"default":""},"tenant_id":{"type":"UUID","notNull":false,"unique":false},"target":{"type":"TEXT","notNull":false,"unique":false},"tenant_allow_list":{"type":"TEXT","notNull":false,"unique":false}},"indexes":[{"name":"_smrt_inference_overrides_binding_context_idx","columns":["binding","context"],"unique":true},{"name":"_smrt_inference_overrides_slug_context_idx","columns":["slug","context"]},{"name":"idx_smrt_inference_overrides_tenant","columns":["tenant_id","binding"]},{"name":"_smrt_inference_overrides_created_at_idx","columns":["created_at"]}],"version":"4868b81b"},"importPath":"@happyvertical/smrt-inference/models"},"@happyvertical/smrt-inference:InferenceOverrideCollection":{"name":"inferenceoverridecollection","className":"InferenceOverrideCollection","qualifiedName":"@happyvertical/smrt-inference:InferenceOverrideCollection","collection":"inferenceoverrides","description":"Reads and unauthorized writes of _smrt_inference_overrides.","filePath":"/home/runner/work/smrt/smrt/packages/inference/src/models/InferenceOverrideCollection.ts","packageName":"@happyvertical/smrt-inference","fields":{},"methods":{"getScopeMap":{"name":"getScopeMap","async":true,"parameters":[{"name":"scopeType","type":"InferenceOverrideScopeType","optional":false,"resolvedType":"'app' | 'tenant'"},{"name":"scopeId","type":"string","optional":false}],"returnType":"Promise<Map<string, InferenceOverride>>","isStatic":false,"isPublic":true},"findByScope":{"name":"findByScope","async":true,"parameters":[{"name":"binding","type":"string","optional":false},{"name":"scopeType","type":"InferenceOverrideScopeType","optional":false,"resolvedType":"'app' | 'tenant'"},{"name":"scopeId","type":"string","optional":false}],"returnType":"Promise<InferenceOverride | null>","isStatic":false,"isPublic":true},"setOverride":{"name":"setOverride","async":true,"parameters":[{"name":"binding","type":"string","optional":false},{"name":"scopeType","type":"InferenceOverrideScopeType","optional":false,"resolvedType":"'app' | 'tenant'"},{"name":"scopeId","type":"string","optional":false},{"name":"change","type":"object","optional":false,"memberTypes":["unknown","string[] | null"]}],"returnType":"Promise<InferenceOverride | null>","isStatic":false,"isPublic":true},"removeOverride":{"name":"removeOverride","async":true,"parameters":[{"name":"binding","type":"string","optional":false},{"name":"scopeType","type":"InferenceOverrideScopeType","optional":false,"resolvedType":"'app' | 'tenant'"},{"name":"scopeId","type":"string","optional":false}],"returnType":"Promise<boolean>","isStatic":false,"isPublic":true}},"decoratorConfig":{"tableName":"_smrt_inference_overrides","api":false,"mcp":false,"cli":false},"extends":"SmrtCollection","extendsTypeArg":"InferenceOverride","exportName":"InferenceOverrideCollection","collectionExportName":"InferenceOverrideCollectionCollection","collectionOf":"@happyvertical/smrt-inference:InferenceOverride","inheritedExposure":["api","mcp","cli"],"schema":{"tableName":"_smrt_inference_overrides","ddl":"CREATE TABLE IF NOT EXISTS \\"_smrt_inference_overrides\\" (\\n  \\"_sync_origin_device_id\\" TEXT,\\n  \\"_sync_revision\\" INTEGER,\\n  \\"id\\" UUID PRIMARY KEY NOT NULL,\\n  \\"slug\\" TEXT NOT NULL,\\n  \\"context\\" TEXT NOT NULL DEFAULT '',\\n  \\"created_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"updated_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"binding\\" TEXT NOT NULL DEFAULT '',\\n  \\"tenant_id\\" UUID,\\n  \\"target\\" TEXT,\\n  \\"tenant_allow_list\\" TEXT\\n);","columns":{"_sync_origin_device_id":{"type":"TEXT"},"_sync_revision":{"type":"INTEGER"},"id":{"type":"UUID","primaryKey":true,"referenceKind":"id","notNull":true},"slug":{"type":"TEXT","notNull":true},"context":{"type":"TEXT","notNull":true,"default":""},"created_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"updated_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"binding":{"type":"TEXT","notNull":true,"unique":false,"default":""},"tenant_id":{"type":"UUID","notNull":false,"unique":false},"target":{"type":"TEXT","notNull":false,"unique":false},"tenant_allow_list":{"type":"TEXT","notNull":false,"unique":false}},"indexes":[{"name":"_smrt_inference_overrides_binding_context_idx","columns":["binding","context"],"unique":true},{"name":"_smrt_inference_overrides_slug_context_idx","columns":["slug","context"]},{"name":"idx_smrt_inference_overrides_tenant","columns":["tenant_id","binding"]},{"name":"_smrt_inference_overrides_created_at_idx","columns":["created_at"]}],"version":"4868b81b"},"importPath":"@happyvertical/smrt-inference/models"}},"moduleType":"smrt","smrtDependencies":["@happyvertical/smrt-core","@happyvertical/smrt-prompts","@happyvertical/smrt-secrets","@happyvertical/smrt-tenancy","@happyvertical/smrt-users"],"browser":{"status":"server-only","issues":["#3617","#3624","#3626","#3627"],"via":["@happyvertical/smrt-profiles","@happyvertical/smrt-secrets","@happyvertical/smrt-tenancy","@happyvertical/smrt-users"]},"stampsConstructors":true}`));
+//#endregion
+//#region src/settings/cache.ts
+var GENERATION_KEY = /* @__PURE__ */ Symbol.for("smrt.inference.overrideGeneration");
+function getInferenceOverrideGeneration() {
+	return globalThis[GENERATION_KEY] ?? 0;
+}
+function bumpInferenceOverrideGeneration() {
+	const holder = globalThis;
+	holder[GENERATION_KEY] = (holder[GENERATION_KEY] ?? 0) + 1;
+}
+//#endregion
+//#region src/settings/targets.ts
+var INFERENCE_MODES$1 = [
+	"byo",
+	"local",
+	"hosted",
+	"off"
+];
+var DEFAULT_TIER_BINDING = "default-tier";
+var INFERENCE_BINDING_NAME_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/i;
+var InferenceBindingValueError = class extends Error {
+	constructor(binding, reason) {
+		super(`Invalid inference binding "${binding}": ${reason}`);
+		this.binding = binding;
+		this.name = "InferenceBindingValueError";
+	}
+	binding;
+	status = 400;
+};
+function parseInferenceBinding(binding) {
+	if (typeof binding !== "string") return null;
+	if (binding === "default-tier") return { kind: "default-tier" };
+	const match = /^(tier|alias|fusion):(.+)$/.exec(binding);
+	if (!match) return null;
+	const [, kind, name] = match;
+	if (kind === "tier") return isInferenceTier(name) ? {
+		kind: "tier",
+		name
+	} : null;
+	if (!INFERENCE_BINDING_NAME_PATTERN.test(name)) return null;
+	return {
+		kind,
+		name
+	};
+}
+function tierBinding(tier) {
+	return `tier:${tier}`;
+}
+function isRecord(value) {
+	return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function text(value) {
+	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
+}
+var KEY_MEMBERS = /* @__PURE__ */ new Set([
+	"apikey",
+	"api_key",
+	"apikeys",
+	"secret",
+	"token",
+	"password",
+	"authorization",
+	"bearer"
+]);
+function stripKeyMembers(value) {
+	if (Array.isArray(value)) return value.map(stripKeyMembers);
+	if (!isRecord(value)) return value;
+	const out = {};
+	for (const [member, inner] of Object.entries(value)) {
+		if (KEY_MEMBERS.has(member.toLowerCase())) continue;
+		out[member] = stripKeyMembers(inner);
+	}
+	return out;
+}
+function findKeyMember(value, path = "") {
+	if (Array.isArray(value)) {
+		for (const [index, item] of value.entries()) {
+			const found = findKeyMember(item, `${path}[${index}]`);
+			if (found) return found;
+		}
+		return null;
+	}
+	if (!isRecord(value)) return null;
+	for (const [member, inner] of Object.entries(value)) {
+		const here = path ? `${path}.${member}` : member;
+		if (KEY_MEMBERS.has(member.toLowerCase())) return here;
+		const found = findKeyMember(inner, here);
+		if (found) return found;
+	}
+	return null;
+}
+function normalizeTierTarget(binding, value) {
+	if (value === null || value === void 0) return null;
+	if (!isRecord(value)) throw new InferenceBindingValueError(binding, "a tier target is an object");
+	const keyMember = findKeyMember(value);
+	if (keyMember) throw new InferenceBindingValueError(binding, `"${keyMember}" looks like a credential; keys are stored only through smrt-secrets`);
+	const fusion = text(value.fusion);
+	const alias = text(value.alias);
+	const model = text(value.model);
+	const provider = text(value.provider);
+	const kind = value.kind;
+	const allowed = /* @__PURE__ */ new Set([
+		"kind",
+		"fusion",
+		"alias",
+		"model",
+		"provider"
+	]);
+	const extra = Object.keys(value).filter((member) => !allowed.has(member));
+	if (extra.length > 0) throw new InferenceBindingValueError(binding, `unsupported member(s) ${extra.join(", ")} (endpoints and inline candidates belong in an alias)`);
+	if ([
+		fusion,
+		alias,
+		model
+	].filter(Boolean).length !== 1) throw new InferenceBindingValueError(binding, "a tier target is exactly one of { model, provider? }, { alias } or { kind: \"fusion\", fusion }");
+	if (fusion) {
+		if (kind !== void 0 && kind !== "fusion") throw new InferenceBindingValueError(binding, "fusion kind mismatch");
+		if (!INFERENCE_BINDING_NAME_PATTERN.test(fusion)) throw new InferenceBindingValueError(binding, "invalid fusion name");
+		return {
+			kind: "fusion",
+			fusion
+		};
+	}
+	if (alias) {
+		if (kind !== void 0 && kind !== "alias") throw new InferenceBindingValueError(binding, "alias kind mismatch");
+		if (!INFERENCE_BINDING_NAME_PATTERN.test(alias)) throw new InferenceBindingValueError(binding, "invalid alias name");
+		return { alias };
+	}
+	if (kind !== void 0 && kind !== "single") throw new InferenceBindingValueError(binding, "model kind mismatch");
+	return provider ? {
+		provider,
+		model
+	} : { model };
+}
+function normalizeAliasDefinition(binding, value) {
+	if (value === null || value === void 0) return null;
+	if (!isRecord(value) || !Array.isArray(value.candidates)) throw new InferenceBindingValueError(binding, "an alias is { candidates: [...], description? }");
+	const keyMember = findKeyMember(value);
+	if (keyMember) throw new InferenceBindingValueError(binding, `"${keyMember}" looks like a credential; keys are stored only through smrt-secrets`);
+	if (value.candidates.length === 0) throw new InferenceBindingValueError(binding, "an alias needs candidates");
+	const allowed = /* @__PURE__ */ new Set([
+		"provider",
+		"model",
+		"baseUrl",
+		"apiKeyEnv",
+		"preset",
+		"alias",
+		"params"
+	]);
+	const candidates = value.candidates.map((candidate, index) => {
+		if (!isRecord(candidate)) throw new InferenceBindingValueError(binding, `candidates[${index}] must be an object`);
+		const extra = Object.keys(candidate).filter((member) => !allowed.has(member));
+		if (extra.length > 0) throw new InferenceBindingValueError(binding, `candidates[${index}] has unsupported member(s) ${extra.join(", ")}`);
+		const out = {};
+		for (const member of allowed) {
+			if (member === "params") continue;
+			const inner = text(candidate[member]);
+			if (inner) out[member] = inner;
+		}
+		if (candidate.params !== void 0) {
+			if (!isRecord(candidate.params)) throw new InferenceBindingValueError(binding, `candidates[${index}].params must be an object`);
+			out.params = { ...candidate.params };
+		}
+		return out;
+	});
+	const description = text(value.description);
+	return description ? {
+		candidates,
+		description
+	} : { candidates };
+}
+function normalizeFusionDefinition(binding, value) {
+	if (value === null || value === void 0) return null;
+	if (!isRecord(value)) throw new InferenceBindingValueError(binding, "a fusion is a JSON object");
+	const keyMember = findKeyMember(value);
+	if (keyMember) throw new InferenceBindingValueError(binding, `"${keyMember}" looks like a credential; keys are stored only through smrt-secrets`);
+	return JSON.parse(JSON.stringify(value));
+}
+function normalizeDefaultTier(binding, value) {
+	if (value === null || value === void 0) return null;
+	const tier = isRecord(value) ? value.tier : value;
+	if (!isInferenceTier(tier)) throw new InferenceBindingValueError(binding, `the default tier must be one of ${INFERENCE_TIERS.join(", ")}`);
+	return tier;
+}
+function inferenceTargetRef(target) {
+	const kind = inferenceTargetKind(target);
+	const record = target;
+	if (kind === "fusion") return `fusion:${record.fusion ?? ""}`;
+	if (kind === "alias") return `alias:${target.alias ?? ""}`;
+	if (kind === "candidates") return "candidates";
+	return `model:${target.provider ?? "default"}/${target.model ?? "default"}`;
+}
+function matchesAllowPattern(ref, pattern) {
+	if (pattern === "*") return true;
+	if (pattern.endsWith("*")) return ref.startsWith(pattern.slice(0, -1));
+	return ref === pattern;
+}
+function isAllowedByList(ref, allowList) {
+	return (allowList ?? []).some((pattern) => matchesAllowPattern(ref, pattern));
+}
+function normalizeAllowList(binding, value) {
+	if (value === null || value === void 0) return null;
+	if (!Array.isArray(value)) throw new InferenceBindingValueError(binding, "an allow-list is an array of references");
+	const out = [];
+	for (const entry of value) {
+		if (typeof entry !== "string" || !/^(\*|(model|alias|fusion|tier):[A-Za-z0-9._/:*-]{1,160})$/.test(entry)) throw new InferenceBindingValueError(binding, `invalid allow-list entry ${JSON.stringify(entry)}`);
+		if (!out.includes(entry)) out.push(entry);
+	}
+	return out;
+}
+function describeInferenceTarget(target) {
+	if (!target || Object.keys(target).length === 0) return "Same as default (configured client)";
+	const kind = inferenceTargetKind(target);
+	const record = target;
+	if (kind === "fusion") return `Fusion ${record.fusion ?? "?"}`;
+	if (kind === "alias") return `Alias ${target.alias ?? "?"}`;
+	if (kind === "candidates") return `${target.candidates?.length ?? 0} inline candidate(s)`;
+	return `${target.provider ?? "default"}/${target.model ?? "default model"}`;
+}
+//#endregion
+//#region src/models/InferenceOverride.ts
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, {
+	enumerable: true,
+	configurable: true,
+	writable: true,
+	value
+}) : obj[key] = value;
+var __decorateClass = (decorators, target, key, kind) => {
+	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
+	for (var i = decorators.length - 1, decorator; i >= 0; i--) if (decorator = decorators[i]) result = (kind ? decorator(target, key, result) : decorator(result)) || result;
+	if (kind && result) __defProp(target, key, result);
+	return result;
+};
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+var APP_INFERENCE_SCOPE_ID = "__app__";
+function parseJson(binding, raw, what) {
+	if (raw === null) return null;
+	try {
+		return JSON.parse(raw);
+	} catch {
+		throw new InferenceBindingValueError(binding, `${what} is not valid JSON`);
+	}
+}
+var InferenceOverride = class extends SmrtObject {
+	binding = "";
+	tenantId = null;
+	target = null;
+	tenantAllowList = null;
+	constructor(options = {}) {
+		super(options);
+		if (options.binding !== void 0) this.binding = options.binding;
+		if (options.tenantId !== void 0) this.tenantId = options.tenantId;
+		if (options.target !== void 0) this.target = options.target;
+		if (options.tenantAllowList !== void 0) this.tenantAllowList = options.tenantAllowList;
+	}
+	/** The parsed, validated stored value (`null` inherits). */
+	getValue() {
+		return this.normalizedValue();
+	}
+	/** The parsed allow-list (`null` when the row carries none). */
+	getTenantAllowList() {
+		return normalizeAllowList(this.binding, parseJson(this.binding, this.tenantAllowList, "tenantAllowList"));
+	}
+	async save(options) {
+		this.validateOverride();
+		this.context = this.tenantId ?? "__app__";
+		const result = await super.save(options);
+		bumpInferenceOverrideGeneration();
+		return result;
+	}
+	async delete() {
+		await super.delete();
+		bumpInferenceOverrideGeneration();
+	}
+	normalizedValue() {
+		const parsed = parseInferenceBinding(this.binding);
+		if (!parsed) throw new InferenceBindingValueError(String(this.binding), "unknown binding id");
+		const raw = parseJson(this.binding, this.target, "target");
+		switch (parsed.kind) {
+			case "tier": return normalizeTierTarget(this.binding, raw);
+			case "default-tier": return normalizeDefaultTier(this.binding, raw);
+			case "alias": return normalizeAliasDefinition(this.binding, raw);
+			case "fusion": return normalizeFusionDefinition(this.binding, raw);
+		}
+	}
+	validateOverride() {
+		const parsed = parseInferenceBinding(this.binding);
+		if (!parsed) throw new InferenceBindingValueError(String(this.binding), "unknown binding id");
+		if (this.tenantId !== null) {
+			if (typeof this.tenantId !== "string" || !this.tenantId.trim() || this.tenantId !== this.tenantId.trim() || this.tenantId === "__app__") throw new InferenceBindingValueError(this.binding, "invalid tenant id");
+			if (parsed.kind === "alias" || parsed.kind === "fusion") throw new InferenceBindingValueError(this.binding, "aliases and fusions are defined at the app scope only");
+			if (this.tenantAllowList !== null) throw new InferenceBindingValueError(this.binding, "the tenant allow-list lives on the app row");
+		}
+		if (this.tenantAllowList !== null && parsed.kind !== "tier" && parsed.kind !== "default-tier") throw new InferenceBindingValueError(this.binding, "only tier and default-tier bindings carry a tenant allow-list");
+		const value = this.normalizedValue();
+		this.target = value === null ? null : JSON.stringify(value);
+		const allowList = this.getTenantAllowList();
+		this.tenantAllowList = allowList === null ? null : JSON.stringify(allowList);
+	}
+};
+__publicField(InferenceOverride, "__smrtPackage__", "@happyvertical/smrt-inference");
+__decorateClass([field({ required: true })], InferenceOverride.prototype, "binding", 2);
+__decorateClass([field({
+	sqlType: "UUID",
+	nullable: true
+})], InferenceOverride.prototype, "tenantId", 2);
+__decorateClass([field({
+	type: "text",
+	nullable: true
+})], InferenceOverride.prototype, "target", 2);
+__decorateClass([field({
+	type: "text",
+	nullable: true
+})], InferenceOverride.prototype, "tenantAllowList", 2);
+InferenceOverride = __decorateClass([smrt({
+	tableName: "_smrt_inference_overrides",
+	conflictColumns: ["binding", "context"],
+	api: false,
+	cli: false,
+	mcp: false,
+	indexes: [{
+		name: "idx_smrt_inference_overrides_tenant",
+		columns: ["tenantId", "binding"]
+	}]
+})], InferenceOverride);
+//#endregion
+//#region src/models/InferenceOverrideCollection.ts
+var InferenceOverrideCollection = class extends SmrtCollection {
+	static _itemClass = InferenceOverride;
+	/**
+	* Every row of one scope, keyed by binding id: one bounded read. An
+	* enumeration read: build the collection without list bounds (the
+	* settings service does) so a host-wide `maxListLimit` cannot drop a row.
+	*/
+	async getScopeMap(scopeType, scopeId) {
+		const tenantId = scopeType === "app" ? null : scopeId;
+		const rows = await this.list({ where: { tenantId } });
+		const result = /* @__PURE__ */ new Map();
+		for (const row of rows) result.set(row.binding, row);
+		return result;
+	}
+	/** The row for one binding at one scope. */
+	async findByScope(binding, scopeType, scopeId) {
+		const tenantId = scopeType === "app" ? null : scopeId;
+		return (await this.list({
+			where: {
+				binding,
+				tenantId
+			},
+			limit: 1
+		}))[0] ?? null;
+	}
+	/**
+	* Set the stored value (and, for app rows, optionally the tenant
+	* allow-list) of one binding at one scope, creating the row when needed.
+	* `undefined` leaves a column untouched; `null` clears it. A row left with
+	* neither a value nor an allow-list is deleted.
+	*/
+	async setOverride(binding, scopeType, scopeId, change) {
+		const existing = await this.findByScope(binding, scopeType, scopeId);
+		const target = change.target === void 0 ? existing?.target ?? null : change.target === null ? null : JSON.stringify(change.target);
+		const tenantAllowList = change.tenantAllowList === void 0 ? existing?.tenantAllowList ?? null : change.tenantAllowList === null ? null : JSON.stringify(change.tenantAllowList);
+		if (target === null && tenantAllowList === null) {
+			if (existing) await existing.delete();
+			return null;
+		}
+		if (existing) {
+			existing.target = target;
+			existing.tenantAllowList = tenantAllowList;
+			await existing.save();
+			return existing;
+		}
+		const created = await this.create({
+			binding,
+			tenantId: scopeType === "app" ? null : scopeId,
+			target,
+			tenantAllowList
+		});
+		await created.save();
+		return created;
+	}
+	/** Delete the row for one binding at one scope, if any. */
+	async removeOverride(binding, scopeType, scopeId) {
+		const existing = await this.findByScope(binding, scopeType, scopeId);
+		if (!existing) return false;
+		await existing.delete();
+		return true;
+	}
+};
+//#endregion
+export { normalizeTierTarget as _, INFERENCE_BINDING_NAME_PATTERN as a, tierBinding as b, describeInferenceTarget as c, isAllowedByList as d, matchesAllowPattern as f, normalizeFusionDefinition as g, normalizeDefaultTier as h, DEFAULT_TIER_BINDING as i, findKeyMember as l, normalizeAllowList as m, APP_INFERENCE_SCOPE_ID as n, INFERENCE_MODES$1 as o, normalizeAliasDefinition as p, InferenceOverride as r, InferenceBindingValueError as s, InferenceOverrideCollection as t, inferenceTargetRef as u, parseInferenceBinding as v, getInferenceOverrideGeneration as x, stripKeyMembers as y };
+
+//# sourceMappingURL=InferenceOverrideCollection-wl7sI-3C.js.map

package/dist/chunks/InferenceOverrideCollection-wl7sI-3C.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InferenceOverrideCollection-wl7sI-3C.js","names":[],"sources":["../../src/__smrt-register__.ts","../../src/settings/cache.ts","../../src/settings/targets.ts","../../src/models/InferenceOverride.ts","../../src/models/InferenceOverrideCollection.ts"],"sourcesContent":["// Generated by @happyvertical/smrt-core smrtPlugin at library build time.\n// The package manifest is inlined so self-registration cannot miss when a\n// downstream bundler relocates this module away from dist/manifest.json\n// (https://github.com/happyvertical/smrt/issues/1506,\n//  https://github.com/happyvertical/smrt/issues/1507).\nimport { ObjectRegistry } from '@happyvertical/smrt-core';\n\nObjectRegistry.registerPackageManifest(JSON.parse(\"{\\\"version\\\":\\\"1.0.0\\\",\\\"timestamp\\\":0,\\\"packageName\\\":\\\"@happyvertical/smrt-inference\\\",\\\"packageVersion\\\":\\\"0.60.15\\\",\\\"objects\\\":{\\\"@happyvertical/smrt-inference:InferenceOverride\\\":{\\\"name\\\":\\\"inferenceoverride\\\",\\\"className\\\":\\\"InferenceOverride\\\",\\\"qualifiedName\\\":\\\"@happyvertical/smrt-inference:InferenceOverride\\\",\\\"collection\\\":\\\"inferenceoverrides\\\",\\\"filePath\\\":\\\"/home/runner/work/smrt/smrt/packages/inference/src/models/InferenceOverride.ts\\\",\\\"packageName\\\":\\\"@happyvertical/smrt-inference\\\",\\\"fields\\\":{\\\"binding\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"default\\\":\\\"\\\",\\\"_meta\\\":{\\\"required\\\":true}},\\\"tenantId\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":false,\\\"_meta\\\":{\\\"sqlType\\\":\\\"UUID\\\",\\\"nullable\\\":true}},\\\"target\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":false,\\\"_meta\\\":{\\\"nullable\\\":true}},\\\"tenantAllowList\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":false,\\\"_meta\\\":{\\\"nullable\\\":true}}},\\\"methods\\\":{\\\"getValue\\\":{\\\"name\\\":\\\"getValue\\\",\\\"async\\\":false,\\\"parameters\\\":[],\\\"returnType\\\":\\\"unknown\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true},\\\"getTenantAllowList\\\":{\\\"name\\\":\\\"getTenantAllowList\\\",\\\"async\\\":false,\\\"parameters\\\":[],\\\"returnType\\\":\\\"string[] | null\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true},\\\"save\\\":{\\\"name\\\":\\\"save\\\",\\\"async\\\":true,\\\"parameters\\\":[{\\\"name\\\":\\\"options\\\",\\\"type\\\":\\\"SmrtSaveOptions\\\",\\\"optional\\\":true}],\\\"returnType\\\":\\\"Promise<this>\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true},\\\"delete\\\":{\\\"name\\\":\\\"delete\\\",\\\"async\\\":true,\\\"parameters\\\":[],\\\"returnType\\\":\\\"Promise<void>\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true}},\\\"decoratorConfig\\\":{\\\"tableName\\\":\\\"_smrt_inference_overrides\\\",\\\"conflictColumns\\\":[\\\"binding\\\",\\\"context\\\"],\\\"api\\\":false,\\\"cli\\\":false,\\\"mcp\\\":false,\\\"indexes\\\":[{\\\"name\\\":\\\"idx_smrt_inference_overrides_tenant\\\",\\\"columns\\\":[\\\"tenantId\\\",\\\"binding\\\"]}]},\\\"extends\\\":\\\"SmrtObject\\\",\\\"exportName\\\":\\\"InferenceOverride\\\",\\\"collectionExportName\\\":\\\"InferenceOverrideCollection\\\",\\\"validationRules\\\":[{\\\"field\\\":\\\"binding\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"text\\\"}],\\\"schema\\\":{\\\"tableName\\\":\\\"_smrt_inference_overrides\\\",\\\"ddl\\\":\\\"CREATE TABLE IF NOT EXISTS \\\\\\\"_smrt_inference_overrides\\\\\\\" (\\\\n  \\\\\\\"_sync_origin_device_id\\\\\\\" TEXT,\\\\n  \\\\\\\"_sync_revision\\\\\\\" INTEGER,\\\\n  \\\\\\\"id\\\\\\\" UUID PRIMARY KEY NOT NULL,\\\\n  \\\\\\\"slug\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"context\\\\\\\" TEXT NOT NULL DEFAULT '',\\\\n  \\\\\\\"created_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"updated_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"binding\\\\\\\" TEXT NOT NULL DEFAULT '',\\\\n  \\\\\\\"tenant_id\\\\\\\" UUID,\\\\n  \\\\\\\"target\\\\\\\" TEXT,\\\\n  \\\\\\\"tenant_allow_list\\\\\\\" TEXT\\\\n);\\\",\\\"columns\\\":{\\\"_sync_origin_device_id\\\":{\\\"type\\\":\\\"TEXT\\\"},\\\"_sync_revision\\\":{\\\"type\\\":\\\"INTEGER\\\"},\\\"id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"primaryKey\\\":true,\\\"referenceKind\\\":\\\"id\\\",\\\"notNull\\\":true},\\\"slug\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true},\\\"context\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"\\\"},\\\"created_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"updated_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"binding\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false,\\\"default\\\":\\\"\\\"},\\\"tenant_id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"notNull\\\":false,\\\"unique\\\":false},\\\"target\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false},\\\"tenant_allow_list\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false}},\\\"indexes\\\":[{\\\"name\\\":\\\"_smrt_inference_overrides_binding_context_idx\\\",\\\"columns\\\":[\\\"binding\\\",\\\"context\\\"],\\\"unique\\\":true},{\\\"name\\\":\\\"_smrt_inference_overrides_slug_context_idx\\\",\\\"columns\\\":[\\\"slug\\\",\\\"context\\\"]},{\\\"name\\\":\\\"idx_smrt_inference_overrides_tenant\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"binding\\\"]},{\\\"name\\\":\\\"_smrt_inference_overrides_created_at_idx\\\",\\\"columns\\\":[\\\"created_at\\\"]}],\\\"version\\\":\\\"4868b81b\\\"},\\\"importPath\\\":\\\"@happyvertical/smrt-inference/models\\\"},\\\"@happyvertical/smrt-inference:InferenceOverrideCollection\\\":{\\\"name\\\":\\\"inferenceoverridecollection\\\",\\\"className\\\":\\\"InferenceOverrideCollection\\\",\\\"qualifiedName\\\":\\\"@happyvertical/smrt-inference:InferenceOverrideCollection\\\",\\\"collection\\\":\\\"inferenceoverrides\\\",\\\"description\\\":\\\"Reads and unauthorized writes of _smrt_inference_overrides.\\\",\\\"filePath\\\":\\\"/home/runner/work/smrt/smrt/packages/inference/src/models/InferenceOverrideCollection.ts\\\",\\\"packageName\\\":\\\"@happyvertical/smrt-inference\\\",\\\"fields\\\":{},\\\"methods\\\":{\\\"getScopeMap\\\":{\\\"name\\\":\\\"getScopeMap\\\",\\\"async\\\":true,\\\"parameters\\\":[{\\\"name\\\":\\\"scopeType\\\",\\\"type\\\":\\\"InferenceOverrideScopeType\\\",\\\"optional\\\":false,\\\"resolvedType\\\":\\\"'app' | 'tenant'\\\"},{\\\"name\\\":\\\"scopeId\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false}],\\\"returnType\\\":\\\"Promise<Map<string, InferenceOverride>>\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true},\\\"findByScope\\\":{\\\"name\\\":\\\"findByScope\\\",\\\"async\\\":true,\\\"parameters\\\":[{\\\"name\\\":\\\"binding\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false},{\\\"name\\\":\\\"scopeType\\\",\\\"type\\\":\\\"InferenceOverrideScopeType\\\",\\\"optional\\\":false,\\\"resolvedType\\\":\\\"'app' | 'tenant'\\\"},{\\\"name\\\":\\\"scopeId\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false}],\\\"returnType\\\":\\\"Promise<InferenceOverride | null>\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true},\\\"setOverride\\\":{\\\"name\\\":\\\"setOverride\\\",\\\"async\\\":true,\\\"parameters\\\":[{\\\"name\\\":\\\"binding\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false},{\\\"name\\\":\\\"scopeType\\\",\\\"type\\\":\\\"InferenceOverrideScopeType\\\",\\\"optional\\\":false,\\\"resolvedType\\\":\\\"'app' | 'tenant'\\\"},{\\\"name\\\":\\\"scopeId\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false},{\\\"name\\\":\\\"change\\\",\\\"type\\\":\\\"object\\\",\\\"optional\\\":false,\\\"memberTypes\\\":[\\\"unknown\\\",\\\"string[] | null\\\"]}],\\\"returnType\\\":\\\"Promise<InferenceOverride | null>\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true},\\\"removeOverride\\\":{\\\"name\\\":\\\"removeOverride\\\",\\\"async\\\":true,\\\"parameters\\\":[{\\\"name\\\":\\\"binding\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false},{\\\"name\\\":\\\"scopeType\\\",\\\"type\\\":\\\"InferenceOverrideScopeType\\\",\\\"optional\\\":false,\\\"resolvedType\\\":\\\"'app' | 'tenant'\\\"},{\\\"name\\\":\\\"scopeId\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false}],\\\"returnType\\\":\\\"Promise<boolean>\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true}},\\\"decoratorConfig\\\":{\\\"tableName\\\":\\\"_smrt_inference_overrides\\\",\\\"api\\\":false,\\\"mcp\\\":false,\\\"cli\\\":false},\\\"extends\\\":\\\"SmrtCollection\\\",\\\"extendsTypeArg\\\":\\\"InferenceOverride\\\",\\\"exportName\\\":\\\"InferenceOverrideCollection\\\",\\\"collectionExportName\\\":\\\"InferenceOverrideCollectionCollection\\\",\\\"collectionOf\\\":\\\"@happyvertical/smrt-inference:InferenceOverride\\\",\\\"inheritedExposure\\\":[\\\"api\\\",\\\"mcp\\\",\\\"cli\\\"],\\\"schema\\\":{\\\"tableName\\\":\\\"_smrt_inference_overrides\\\",\\\"ddl\\\":\\\"CREATE TABLE IF NOT EXISTS \\\\\\\"_smrt_inference_overrides\\\\\\\" (\\\\n  \\\\\\\"_sync_origin_device_id\\\\\\\" TEXT,\\\\n  \\\\\\\"_sync_revision\\\\\\\" INTEGER,\\\\n  \\\\\\\"id\\\\\\\" UUID PRIMARY KEY NOT NULL,\\\\n  \\\\\\\"slug\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"context\\\\\\\" TEXT NOT NULL DEFAULT '',\\\\n  \\\\\\\"created_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"updated_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"binding\\\\\\\" TEXT NOT NULL DEFAULT '',\\\\n  \\\\\\\"tenant_id\\\\\\\" UUID,\\\\n  \\\\\\\"target\\\\\\\" TEXT,\\\\n  \\\\\\\"tenant_allow_list\\\\\\\" TEXT\\\\n);\\\",\\\"columns\\\":{\\\"_sync_origin_device_id\\\":{\\\"type\\\":\\\"TEXT\\\"},\\\"_sync_revision\\\":{\\\"type\\\":\\\"INTEGER\\\"},\\\"id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"primaryKey\\\":true,\\\"referenceKind\\\":\\\"id\\\",\\\"notNull\\\":true},\\\"slug\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true},\\\"context\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"\\\"},\\\"created_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"updated_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"binding\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false,\\\"default\\\":\\\"\\\"},\\\"tenant_id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"notNull\\\":false,\\\"unique\\\":false},\\\"target\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false},\\\"tenant_allow_list\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false}},\\\"indexes\\\":[{\\\"name\\\":\\\"_smrt_inference_overrides_binding_context_idx\\\",\\\"columns\\\":[\\\"binding\\\",\\\"context\\\"],\\\"unique\\\":true},{\\\"name\\\":\\\"_smrt_inference_overrides_slug_context_idx\\\",\\\"columns\\\":[\\\"slug\\\",\\\"context\\\"]},{\\\"name\\\":\\\"idx_smrt_inference_overrides_tenant\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"binding\\\"]},{\\\"name\\\":\\\"_smrt_inference_overrides_created_at_idx\\\",\\\"columns\\\":[\\\"created_at\\\"]}],\\\"version\\\":\\\"4868b81b\\\"},\\\"importPath\\\":\\\"@happyvertical/smrt-inference/models\\\"}},\\\"moduleType\\\":\\\"smrt\\\",\\\"smrtDependencies\\\":[\\\"@happyvertical/smrt-core\\\",\\\"@happyvertical/smrt-prompts\\\",\\\"@happyvertical/smrt-secrets\\\",\\\"@happyvertical/smrt-tenancy\\\",\\\"@happyvertical/smrt-users\\\"],\\\"browser\\\":{\\\"status\\\":\\\"server-only\\\",\\\"issues\\\":[\\\"#3617\\\",\\\"#3624\\\",\\\"#3626\\\",\\\"#3627\\\"],\\\"via\\\":[\\\"@happyvertical/smrt-profiles\\\",\\\"@happyvertical/smrt-secrets\\\",\\\"@happyvertical/smrt-tenancy\\\",\\\"@happyvertical/smrt-users\\\"]},\\\"stampsConstructors\\\":true}\"));\n","/**\n * Process-wide write generation for `_smrt_inference_overrides` (#4754).\n * Every save or delete of an override row bumps it, so the override\n * resolver's short-lived layer cache never serves a value read before a\n * write in the same process. Kept on `globalThis` so duplicate module copies\n * (HMR, two bundles) share it, like core's resolver registration.\n */\nconst GENERATION_KEY = Symbol.for('smrt.inference.overrideGeneration');\n\ntype GenerationHolder = { [GENERATION_KEY]?: number };\n\n/** The current write generation. */\nexport function getInferenceOverrideGeneration(): number {\n  return (globalThis as GenerationHolder)[GENERATION_KEY] ?? 0;\n}\n\n/** Record a write: cached layers read before it are stale. */\nexport function bumpInferenceOverrideGeneration(): void {\n  const holder = globalThis as GenerationHolder;\n  holder[GENERATION_KEY] = (holder[GENERATION_KEY] ?? 0) + 1;\n}\n","/**\n * The vocabulary of stored inference bindings (#4754): binding ids, the\n * target shapes a settings write may store, the allow-list references a\n * tenant write is checked against, and key-free labels.\n *\n * Pure and browser-safe: no `node:`, no SDK, no smrt-config.\n */\nimport {\n  INFERENCE_TIERS,\n  type InferenceAlias,\n  type InferenceCandidate,\n  type InferenceTarget,\n  type InferenceTier,\n  inferenceTargetKind,\n  isInferenceTier,\n} from '@happyvertical/smrt-core';\n\n/** How a user or app gets inference. Stored as a user choice, never a binding. */\nexport const INFERENCE_MODES = ['byo', 'local', 'hosted', 'off'] as const;\nexport type InferenceMode = (typeof INFERENCE_MODES)[number];\n\n/** Binding id of `auto`'s default tier. */\nexport const DEFAULT_TIER_BINDING = 'default-tier';\n\n/** A binding id stored in `_smrt_inference_overrides.binding`. */\nexport type InferenceBindingId =\n  | `tier:${InferenceTier}`\n  | typeof DEFAULT_TIER_BINDING\n  | `alias:${string}`\n  | `fusion:${string}`;\n\n/** `inference.aliases` / fusion names: what a binding id may carry after its prefix. */\nexport const INFERENCE_BINDING_NAME_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/i;\n\nexport type InferenceBindingKind = 'tier' | 'default-tier' | 'alias' | 'fusion';\n\n/** A parsed binding id. */\nexport interface ParsedInferenceBinding {\n  kind: InferenceBindingKind;\n  /** The tier, alias or fusion name (absent for `default-tier`). */\n  name?: string;\n}\n\n/** Thrown for a malformed binding id or an invalid stored value. Nothing is written. */\nexport class InferenceBindingValueError extends Error {\n  readonly status = 400;\n  constructor(\n    readonly binding: string,\n    reason: string,\n  ) {\n    super(`Invalid inference binding \"${binding}\": ${reason}`);\n    this.name = 'InferenceBindingValueError';\n  }\n}\n\n/** Parse a binding id, or `null` when it is not one this package stores. */\nexport function parseInferenceBinding(\n  binding: unknown,\n): ParsedInferenceBinding | null {\n  if (typeof binding !== 'string') return null;\n  if (binding === DEFAULT_TIER_BINDING) return { kind: 'default-tier' };\n  const match = /^(tier|alias|fusion):(.+)$/.exec(binding);\n  if (!match) return null;\n  const [, kind, name] = match as unknown as [string, string, string];\n  if (kind === 'tier') {\n    return isInferenceTier(name) ? { kind: 'tier', name } : null;\n  }\n  if (!INFERENCE_BINDING_NAME_PATTERN.test(name)) return null;\n  return { kind: kind as 'alias' | 'fusion', name };\n}\n\n/** The binding id of one tier. */\nexport function tierBinding(tier: InferenceTier): `tier:${InferenceTier}` {\n  return `tier:${tier}`;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction text(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim() !== ''\n    ? value.trim()\n    : undefined;\n}\n\n/**\n * Key-shaped members are never stored in a binding row: keys live only in\n * smrt-secrets, written by the host (#4754 storage split). `apiKeyEnv` (the\n * name of a variable) is allowed, and so is `key`: #4753 fusion\n * definitions carry one as their identifier.\n */\nconst KEY_MEMBERS = new Set([\n  'apikey',\n  'api_key',\n  'apikeys',\n  'secret',\n  'token',\n  'password',\n  'authorization',\n  'bearer',\n]);\n\n/**\n * A deep copy of `value` with every credential-shaped member removed. Used\n * on every config-backed value a settings screen receives: config tiers and\n * alias candidates may legitimately carry a literal `apiKey` (resolvers and\n * endpoint-bound config), and none of it may reach a browser.\n */\nexport function stripKeyMembers<T>(value: T): T {\n  if (Array.isArray(value)) return value.map(stripKeyMembers) as T;\n  if (!isRecord(value)) return value;\n  const out: Record<string, unknown> = {};\n  for (const [member, inner] of Object.entries(value)) {\n    if (KEY_MEMBERS.has(member.toLowerCase())) continue;\n    out[member] = stripKeyMembers(inner);\n  }\n  return out as T;\n}\n\n/** Dotted path of the first key-shaped member anywhere in `value`, or `null`. */\nexport function findKeyMember(value: unknown, path = ''): string | null {\n  if (Array.isArray(value)) {\n    for (const [index, item] of value.entries()) {\n      const found = findKeyMember(item, `${path}[${index}]`);\n      if (found) return found;\n    }\n    return null;\n  }\n  if (!isRecord(value)) return null;\n  for (const [member, inner] of Object.entries(value)) {\n    const here = path ? `${path}.${member}` : member;\n    if (KEY_MEMBERS.has(member.toLowerCase())) return here;\n    const found = findKeyMember(inner, here);\n    if (found) return found;\n  }\n  return null;\n}\n\n/**\n * The tier target a settings write may store. A tier binds exactly one of:\n *\n * - a model: `{ provider?, model }` (no `baseUrl`: an endpoint needs its own\n *   key, and keys are never stored here; bind an alias whose candidate names\n *   `baseUrl` + `apiKeyEnv` or a preset instead);\n * - an alias: `{ alias }`;\n * - a fusion (#4753): `{ kind: 'fusion', fusion }`.\n *\n * `null` means \"same as default\" (inherit the lower layer).\n */\nexport function normalizeTierTarget(\n  binding: string,\n  value: unknown,\n): InferenceTarget | null {\n  if (value === null || value === undefined) return null;\n  if (!isRecord(value)) {\n    throw new InferenceBindingValueError(binding, 'a tier target is an object');\n  }\n  const keyMember = findKeyMember(value);\n  if (keyMember) {\n    throw new InferenceBindingValueError(\n      binding,\n      `\"${keyMember}\" looks like a credential; keys are stored only through smrt-secrets`,\n    );\n  }\n  const fusion = text(value.fusion);\n  const alias = text(value.alias);\n  const model = text(value.model);\n  const provider = text(value.provider);\n  const kind = value.kind;\n  const allowed = new Set(['kind', 'fusion', 'alias', 'model', 'provider']);\n  const extra = Object.keys(value).filter((member) => !allowed.has(member));\n  if (extra.length > 0) {\n    throw new InferenceBindingValueError(\n      binding,\n      `unsupported member(s) ${extra.join(', ')} (endpoints and inline candidates belong in an alias)`,\n    );\n  }\n  const shapes = [fusion, alias, model].filter(Boolean).length;\n  if (shapes !== 1) {\n    throw new InferenceBindingValueError(\n      binding,\n      'a tier target is exactly one of { model, provider? }, { alias } or { kind: \"fusion\", fusion }',\n    );\n  }\n  if (fusion) {\n    if (kind !== undefined && kind !== 'fusion') {\n      throw new InferenceBindingValueError(binding, 'fusion kind mismatch');\n    }\n    if (!INFERENCE_BINDING_NAME_PATTERN.test(fusion)) {\n      throw new InferenceBindingValueError(binding, 'invalid fusion name');\n    }\n    return { kind: 'fusion', fusion } as unknown as InferenceTarget;\n  }\n  if (alias) {\n    if (kind !== undefined && kind !== 'alias') {\n      throw new InferenceBindingValueError(binding, 'alias kind mismatch');\n    }\n    if (!INFERENCE_BINDING_NAME_PATTERN.test(alias)) {\n      throw new InferenceBindingValueError(binding, 'invalid alias name');\n    }\n    return { alias };\n  }\n  if (kind !== undefined && kind !== 'single') {\n    throw new InferenceBindingValueError(binding, 'model kind mismatch');\n  }\n  return provider ? { provider, model } : { model };\n}\n\n/**\n * An alias definition a settings write may store: `{ candidates, description? }`,\n * every candidate exactly one of provider/model, preset/model or alias, and\n * never a literal key (`apiKeyEnv` names a variable and needs `baseUrl`).\n * Structural checks only; cross-references are checked against the layered\n * config by the settings service.\n */\nexport function normalizeAliasDefinition(\n  binding: string,\n  value: unknown,\n): InferenceAlias | null {\n  if (value === null || value === undefined) return null;\n  if (!isRecord(value) || !Array.isArray(value.candidates)) {\n    throw new InferenceBindingValueError(\n      binding,\n      'an alias is { candidates: [...], description? }',\n    );\n  }\n  const keyMember = findKeyMember(value);\n  if (keyMember) {\n    throw new InferenceBindingValueError(\n      binding,\n      `\"${keyMember}\" looks like a credential; keys are stored only through smrt-secrets`,\n    );\n  }\n  if (value.candidates.length === 0) {\n    throw new InferenceBindingValueError(binding, 'an alias needs candidates');\n  }\n  const allowed = new Set([\n    'provider',\n    'model',\n    'baseUrl',\n    'apiKeyEnv',\n    'preset',\n    'alias',\n    'params',\n  ]);\n  const candidates: InferenceCandidate[] = value.candidates.map(\n    (candidate: unknown, index: number) => {\n      if (!isRecord(candidate)) {\n        throw new InferenceBindingValueError(\n          binding,\n          `candidates[${index}] must be an object`,\n        );\n      }\n      const extra = Object.keys(candidate).filter(\n        (member) => !allowed.has(member),\n      );\n      if (extra.length > 0) {\n        throw new InferenceBindingValueError(\n          binding,\n          `candidates[${index}] has unsupported member(s) ${extra.join(', ')}`,\n        );\n      }\n      const out: InferenceCandidate = {};\n      for (const member of allowed) {\n        if (member === 'params') continue;\n        const inner = text(candidate[member]);\n        if (inner) (out as Record<string, string>)[member] = inner;\n      }\n      if (candidate.params !== undefined) {\n        if (!isRecord(candidate.params)) {\n          throw new InferenceBindingValueError(\n            binding,\n            `candidates[${index}].params must be an object`,\n          );\n        }\n        out.params = { ...candidate.params };\n      }\n      return out;\n    },\n  );\n  const description = text(value.description);\n  return description ? { candidates, description } : { candidates };\n}\n\n/**\n * A fusion config entry (#4753) a settings write may store: a JSON object\n * with no credential members. Its meaning belongs to the fusion interpreter;\n * this package only stores it (app scope only).\n */\nexport function normalizeFusionDefinition(\n  binding: string,\n  value: unknown,\n): Record<string, unknown> | null {\n  if (value === null || value === undefined) return null;\n  if (!isRecord(value)) {\n    throw new InferenceBindingValueError(binding, 'a fusion is a JSON object');\n  }\n  const keyMember = findKeyMember(value);\n  if (keyMember) {\n    throw new InferenceBindingValueError(\n      binding,\n      `\"${keyMember}\" looks like a credential; keys are stored only through smrt-secrets`,\n    );\n  }\n  return JSON.parse(JSON.stringify(value)) as Record<string, unknown>;\n}\n\n/** `default-tier` stores `{ tier }`. */\nexport function normalizeDefaultTier(\n  binding: string,\n  value: unknown,\n): InferenceTier | null {\n  if (value === null || value === undefined) return null;\n  const tier = isRecord(value) ? value.tier : value;\n  if (!isInferenceTier(tier)) {\n    throw new InferenceBindingValueError(\n      binding,\n      `the default tier must be one of ${INFERENCE_TIERS.join(', ')}`,\n    );\n  }\n  return tier;\n}\n\n/**\n * The allow-list reference of a tier target: `model:<provider>/<model>`\n * (`model:default/<model>` without a provider), `alias:<name>` or\n * `fusion:<name>`; for the default tier, `tier:<name>`. Key-free.\n */\nexport function inferenceTargetRef(target: InferenceTarget): string {\n  const kind = inferenceTargetKind(target);\n  const record = target as InferenceTarget & { fusion?: string };\n  if (kind === 'fusion') return `fusion:${record.fusion ?? ''}`;\n  if (kind === 'alias') return `alias:${target.alias ?? ''}`;\n  if (kind === 'candidates') return 'candidates';\n  return `model:${target.provider ?? 'default'}/${target.model ?? 'default'}`;\n}\n\n/**\n * Whether `ref` matches one allow-list pattern. A pattern is an exact\n * reference, a prefix ending in `*` (`model:openai/*`, `alias:*`), or `*`.\n */\nexport function matchesAllowPattern(ref: string, pattern: string): boolean {\n  if (pattern === '*') return true;\n  if (pattern.endsWith('*')) return ref.startsWith(pattern.slice(0, -1));\n  return ref === pattern;\n}\n\n/**\n * The tenant allow-list check: a tenant may bind only a reference the app\n * row's list matches. No list (or an empty one) allows nothing, so a tenant\n * cannot bind a tier the operator has not opened.\n */\nexport function isAllowedByList(\n  ref: string,\n  allowList: readonly string[] | null | undefined,\n): boolean {\n  return (allowList ?? []).some((pattern) => matchesAllowPattern(ref, pattern));\n}\n\n/** Validate and normalize an allow-list (patterns are short, key-free references). */\nexport function normalizeAllowList(\n  binding: string,\n  value: unknown,\n): string[] | null {\n  if (value === null || value === undefined) return null;\n  if (!Array.isArray(value)) {\n    throw new InferenceBindingValueError(\n      binding,\n      'an allow-list is an array of references',\n    );\n  }\n  const out: string[] = [];\n  for (const entry of value) {\n    if (\n      typeof entry !== 'string' ||\n      !/^(\\*|(model|alias|fusion|tier):[A-Za-z0-9._/:*-]{1,160})$/.test(entry)\n    ) {\n      throw new InferenceBindingValueError(\n        binding,\n        `invalid allow-list entry ${JSON.stringify(entry)}`,\n      );\n    }\n    if (!out.includes(entry)) out.push(entry);\n  }\n  return out;\n}\n\n/** Key-free description of a tier target for screens and reports. */\nexport function describeInferenceTarget(\n  target: InferenceTarget | null | undefined,\n): string {\n  if (!target || Object.keys(target).length === 0) {\n    return 'Same as default (configured client)';\n  }\n  const kind = inferenceTargetKind(target);\n  const record = target as InferenceTarget & { fusion?: string };\n  if (kind === 'fusion') return `Fusion ${record.fusion ?? '?'}`;\n  if (kind === 'alias') return `Alias ${target.alias ?? '?'}`;\n  if (kind === 'candidates') {\n    return `${target.candidates?.length ?? 0} inline candidate(s)`;\n  }\n  return `${target.provider ?? 'default'}/${target.model ?? 'default model'}`;\n}\n","import {\n  field,\n  SmrtObject,\n  type SmrtObjectOptions,\n  type SmrtSaveOptions,\n  smrt,\n} from '@happyvertical/smrt-core';\nimport { bumpInferenceOverrideGeneration } from '../settings/cache.js';\nimport {\n  InferenceBindingValueError,\n  normalizeAliasDefinition,\n  normalizeAllowList,\n  normalizeDefaultTier,\n  normalizeFusionDefinition,\n  normalizeTierTarget,\n  parseInferenceBinding,\n} from '../settings/targets.js';\n\n/** `context` (and `scopeId`) of the app-wide row. */\nexport const APP_INFERENCE_SCOPE_ID = '__app__';\n\nexport interface InferenceOverrideOptions extends SmrtObjectOptions {\n  binding?: string;\n  tenantId?: string | null;\n  target?: string | null;\n  tenantAllowList?: string | null;\n}\n\nfunction parseJson(binding: string, raw: string | null, what: string): unknown {\n  if (raw === null) return null;\n  try {\n    return JSON.parse(raw);\n  } catch {\n    throw new InferenceBindingValueError(binding, `${what} is not valid JSON`);\n  }\n}\n\n// One row per (binding, scope): `tier:<tier>`, `default-tier`,\n// `alias:<name>` or `fusion:<name>`, at the app scope (`tenantId = null`) or\n// one tenant's. Rows are authorization state for every scope and `tenantId`\n// is an ordinary settable field, not request-derived tenant scoping, so the\n// generated REST, CLI and MCP surfaces are closed (mirrors\n// `_smrt_prompt_overrides`, #3013). Hosts write through\n// `InferenceOverrideService`, which asks a host authorizer before every write\n// and fails closed. Keys never live here: `save()` refuses any credential-\n// shaped member; keys go to smrt-secrets through the host.\n@smrt({\n  tableName: '_smrt_inference_overrides',\n  conflictColumns: ['binding', 'context'],\n  api: false,\n  cli: false,\n  mcp: false,\n  indexes: [\n    {\n      name: 'idx_smrt_inference_overrides_tenant',\n      columns: ['tenantId', 'binding'],\n    },\n  ],\n})\nexport class InferenceOverride extends SmrtObject { static __smrtPackage__ = \"@happyvertical/smrt-inference\";\n  @field({ required: true })\n  binding: string = '';\n\n  // Not tenant-scoped (any scope is writable through the authorized service),\n  // but the value is a tenant id: uuid on PostgreSQL, like every tenant_id.\n  @field({ sqlType: 'UUID', nullable: true })\n  tenantId: string | null = null;\n\n  /**\n   * JSON of the bound value; `null` inherits the lower layer. Tier rows hold\n   * a tier target, `default-tier` holds `{ tier }`, alias rows an alias, and\n   * fusion rows a fusion config entry.\n   */\n  @field({ type: 'text', nullable: true })\n  target: string | null = null;\n\n  /**\n   * App rows of `tier:*` and `default-tier` only: JSON array of the target\n   * references a tenant may bind (`model:openai/*`, `alias:local`,\n   * `fusion:review-pair`, `tier:good`, `*`). No list allows nothing. This is\n   * the stored half of the tenant allow-list; the service's\n   * `tenantTargetPolicy` hook is the code half (#4667 caps the maximum\n   * hosted tier there).\n   */\n  @field({ type: 'text', nullable: true })\n  tenantAllowList: string | null = null;\n\n  constructor(options: InferenceOverrideOptions = {}) {\n    super(options);\n    if (options.binding !== undefined) this.binding = options.binding;\n    if (options.tenantId !== undefined) this.tenantId = options.tenantId;\n    if (options.target !== undefined) this.target = options.target;\n    if (options.tenantAllowList !== undefined) {\n      this.tenantAllowList = options.tenantAllowList;\n    }\n  }\n\n  /** The parsed, validated stored value (`null` inherits). */\n  getValue(): unknown {\n    return this.normalizedValue();\n  }\n\n  /** The parsed allow-list (`null` when the row carries none). */\n  getTenantAllowList(): string[] | null {\n    return normalizeAllowList(\n      this.binding,\n      parseJson(this.binding, this.tenantAllowList, 'tenantAllowList'),\n    );\n  }\n\n  override async save(options?: SmrtSaveOptions): Promise<this> {\n    this.validateOverride();\n    // `context` is the uniqueness scope so the app row stays unique even\n    // though `tenantId` is nullable (as in `_smrt_prompt_overrides`).\n    this.context = this.tenantId ?? APP_INFERENCE_SCOPE_ID;\n    const result = await super.save(options);\n    bumpInferenceOverrideGeneration();\n    return result;\n  }\n\n  override async delete(): Promise<void> {\n    await super.delete();\n    bumpInferenceOverrideGeneration();\n  }\n\n  private normalizedValue(): unknown {\n    const parsed = parseInferenceBinding(this.binding);\n    if (!parsed) {\n      throw new InferenceBindingValueError(\n        String(this.binding),\n        'unknown binding id',\n      );\n    }\n    const raw = parseJson(this.binding, this.target, 'target');\n    switch (parsed.kind) {\n      case 'tier':\n        return normalizeTierTarget(this.binding, raw);\n      case 'default-tier':\n        return normalizeDefaultTier(this.binding, raw);\n      case 'alias':\n        return normalizeAliasDefinition(this.binding, raw);\n      case 'fusion':\n        return normalizeFusionDefinition(this.binding, raw);\n    }\n  }\n\n  private validateOverride(): void {\n    const parsed = parseInferenceBinding(this.binding);\n    if (!parsed) {\n      throw new InferenceBindingValueError(\n        String(this.binding),\n        'unknown binding id',\n      );\n    }\n    if (this.tenantId !== null) {\n      if (\n        typeof this.tenantId !== 'string' ||\n        !this.tenantId.trim() ||\n        this.tenantId !== this.tenantId.trim() ||\n        this.tenantId === APP_INFERENCE_SCOPE_ID\n      ) {\n        throw new InferenceBindingValueError(this.binding, 'invalid tenant id');\n      }\n      // Tenants bind tiers to allow-listed targets; they never define what a\n      // name means. A tenant alias or fusion could redefine an allow-listed\n      // name and bypass the list.\n      if (parsed.kind === 'alias' || parsed.kind === 'fusion') {\n        throw new InferenceBindingValueError(\n          this.binding,\n          'aliases and fusions are defined at the app scope only',\n        );\n      }\n      if (this.tenantAllowList !== null) {\n        throw new InferenceBindingValueError(\n          this.binding,\n          'the tenant allow-list lives on the app row',\n        );\n      }\n    }\n    if (\n      this.tenantAllowList !== null &&\n      parsed.kind !== 'tier' &&\n      parsed.kind !== 'default-tier'\n    ) {\n      throw new InferenceBindingValueError(\n        this.binding,\n        'only tier and default-tier bindings carry a tenant allow-list',\n      );\n    }\n    const value = this.normalizedValue();\n    this.target = value === null ? null : JSON.stringify(value);\n    const allowList = this.getTenantAllowList();\n    this.tenantAllowList =\n      allowList === null ? null : JSON.stringify(allowList);\n  }\n}\n","import { SmrtCollection } from '@happyvertical/smrt-core';\nimport {\n  APP_INFERENCE_SCOPE_ID,\n  InferenceOverride,\n} from './InferenceOverride.js';\n\n/** `app` (the `__app__` row) or one tenant. */\nexport type InferenceOverrideScopeType = 'app' | 'tenant';\n\n/**\n * Reads and unauthorized writes of `_smrt_inference_overrides`. Hosts write\n * through `InferenceOverrideService` (authorizer-gated, fails closed); call\n * {@link setOverride} / {@link removeOverride} directly only after your own\n * authorization decision.\n */\nexport class InferenceOverrideCollection extends SmrtCollection<InferenceOverride> {\n  static readonly _itemClass = InferenceOverride;\n\n  /**\n   * Every row of one scope, keyed by binding id: one bounded read. An\n   * enumeration read: build the collection without list bounds (the\n   * settings service does) so a host-wide `maxListLimit` cannot drop a row.\n   */\n  async getScopeMap(\n    scopeType: InferenceOverrideScopeType,\n    scopeId: string,\n  ): Promise<Map<string, InferenceOverride>> {\n    const tenantId = scopeType === 'app' ? null : scopeId;\n    const rows = await this.list({ where: { tenantId } });\n    const result = new Map<string, InferenceOverride>();\n    for (const row of rows) result.set(row.binding, row);\n    return result;\n  }\n\n  /** The row for one binding at one scope. */\n  async findByScope(\n    binding: string,\n    scopeType: InferenceOverrideScopeType,\n    scopeId: string,\n  ): Promise<InferenceOverride | null> {\n    const tenantId = scopeType === 'app' ? null : scopeId;\n    const rows = await this.list({ where: { binding, tenantId }, limit: 1 });\n    return rows[0] ?? null;\n  }\n\n  /**\n   * Set the stored value (and, for app rows, optionally the tenant\n   * allow-list) of one binding at one scope, creating the row when needed.\n   * `undefined` leaves a column untouched; `null` clears it. A row left with\n   * neither a value nor an allow-list is deleted.\n   */\n  async setOverride(\n    binding: string,\n    scopeType: InferenceOverrideScopeType,\n    scopeId: string,\n    change: { target?: unknown; tenantAllowList?: string[] | null },\n  ): Promise<InferenceOverride | null> {\n    const existing = await this.findByScope(binding, scopeType, scopeId);\n    const target =\n      change.target === undefined\n        ? (existing?.target ?? null)\n        : change.target === null\n          ? null\n          : JSON.stringify(change.target);\n    const tenantAllowList =\n      change.tenantAllowList === undefined\n        ? (existing?.tenantAllowList ?? null)\n        : change.tenantAllowList === null\n          ? null\n          : JSON.stringify(change.tenantAllowList);\n\n    if (target === null && tenantAllowList === null) {\n      if (existing) await existing.delete();\n      return null;\n    }\n    if (existing) {\n      existing.target = target;\n      existing.tenantAllowList = tenantAllowList;\n      await existing.save();\n      return existing;\n    }\n    const created = await this.create({\n      binding,\n      tenantId: scopeType === 'app' ? null : scopeId,\n      target,\n      tenantAllowList,\n    });\n    await created.save();\n    return created;\n  }\n\n  /** Delete the row for one binding at one scope, if any. */\n  async removeOverride(\n    binding: string,\n    scopeType: InferenceOverrideScopeType,\n    scopeId: string,\n  ): Promise<boolean> {\n    const existing = await this.findByScope(binding, scopeType, scopeId);\n    if (!existing) return false;\n    await existing.delete();\n    return true;\n  }\n}\n\nexport { APP_INFERENCE_SCOPE_ID };\n"],"mappings":";;AAOA,eAAe,wBAAwB,KAAK,MAAM,yrPAAqoR,CAAC;;;ACAxrR,IAAM,iBAAiB,uBAAO,IAAI,mCAAmC;AAK9D,SAAS,iCAAyC;CACvD,OAAQ,WAAgC,mBAAmB;AAC7D;AAGO,SAAS,kCAAwC;CACtD,MAAM,SAAS;CACf,OAAO,mBAAmB,OAAO,mBAAmB,KAAK;AAC3D;;;ACFO,IAAM,oBAAkB;CAAC;CAAO;CAAS;CAAU;AAAK;AAIxD,IAAM,uBAAuB;AAU7B,IAAM,iCAAiC;AAYvC,IAAM,6BAAN,cAAyC,MAAM;CAEpD,YACW,SACT,QACA;EACA,MAAM,8BAA8B,QAAO,KAAM,QAAQ;EAHhD,KAAA,UAAA;EAIT,KAAK,OAAO;CACd;CALW;CAFF,SAAS;AAQpB;AAGO,SAAS,sBACd,SAC+B;CAC/B,IAAI,OAAO,YAAY,UAAU,OAAO;CACxC,IAAI,YAAA,gBAAkC,OAAO,EAAE,MAAM,eAAe;CACpE,MAAM,QAAQ,6BAA6B,KAAK,OAAO;CACvD,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,GAAG,MAAM,QAAQ;CACvB,IAAI,SAAS,QACX,OAAO,gBAAgB,IAAI,IAAI;EAAE,MAAM;EAAQ;CAAK,IAAI;CAE1D,IAAI,CAAC,+BAA+B,KAAK,IAAI,GAAG,OAAO;CACvD,OAAO;EAAE;EAAkC;CAAK;AAClD;AAGO,SAAS,YAAY,MAA8C;CACxE,OAAO,QAAQ;AACjB;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,CAAC,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AACrE;AAEA,SAAS,KAAK,OAAoC;CAChD,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,KACjD,MAAM,KAAK,IACX,KAAA;AACN;AAQA,IAAM,8BAAc,IAAI,IAAI;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAQM,SAAS,gBAAmB,OAAa;CAC9C,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,MAAM,IAAI,eAAe;CAC1D,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,MAAM,MAA+B,CAAC;CACtC,KAAA,MAAW,CAAC,QAAQ,UAAU,OAAO,QAAQ,KAAK,GAAG;EACnD,IAAI,YAAY,IAAI,OAAO,YAAY,CAAC,GAAG;EAC3C,IAAI,UAAU,gBAAgB,KAAK;CACrC;CACA,OAAO;AACT;AAGO,SAAS,cAAc,OAAgB,OAAO,IAAmB;CACtE,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxB,KAAA,MAAW,CAAC,OAAO,SAAS,MAAM,QAAQ,GAAG;GAC3C,MAAM,QAAQ,cAAc,MAAM,GAAG,KAAI,GAAI,MAAK,EAAG;GACrD,IAAI,OAAO,OAAO;EACpB;EACA,OAAO;CACT;CACA,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,KAAA,MAAW,CAAC,QAAQ,UAAU,OAAO,QAAQ,KAAK,GAAG;EACnD,MAAM,OAAO,OAAO,GAAG,KAAI,GAAI,WAAW;EAC1C,IAAI,YAAY,IAAI,OAAO,YAAY,CAAC,GAAG,OAAO;EAClD,MAAM,QAAQ,cAAc,OAAO,IAAI;EACvC,IAAI,OAAO,OAAO;CACpB;CACA,OAAO;AACT;AAaO,SAAS,oBACd,SACA,OACwB;CACxB,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,IAAI,CAAC,SAAS,KAAK,GACjB,MAAM,IAAI,2BAA2B,SAAS,4BAA4B;CAE5E,MAAM,YAAY,cAAc,KAAK;CACrC,IAAI,WACF,MAAM,IAAI,2BACR,SACA,IAAI,UAAS,qEACf;CAEF,MAAM,SAAS,KAAK,MAAM,MAAM;CAChC,MAAM,QAAQ,KAAK,MAAM,KAAK;CAC9B,MAAM,QAAQ,KAAK,MAAM,KAAK;CAC9B,MAAM,WAAW,KAAK,MAAM,QAAQ;CACpC,MAAM,OAAO,MAAM;CACnB,MAAM,0BAAU,IAAI,IAAI;EAAC;EAAQ;EAAU;EAAS;EAAS;CAAU,CAAC;CACxE,MAAM,QAAQ,OAAO,KAAK,KAAK,CAAA,CAAE,QAAQ,WAAW,CAAC,QAAQ,IAAI,MAAM,CAAC;CACxE,IAAI,MAAM,SAAS,GACjB,MAAM,IAAI,2BACR,SACA,yBAAyB,MAAM,KAAK,IAAI,EAAC,sDAC3C;CAGF,IADe;EAAC;EAAQ;EAAO;CAAK,CAAA,CAAE,OAAO,OAAO,CAAA,CAAE,WACvC,GACb,MAAM,IAAI,2BACR,SACA,iGACF;CAEF,IAAI,QAAQ;EACV,IAAI,SAAS,KAAA,KAAa,SAAS,UACjC,MAAM,IAAI,2BAA2B,SAAS,sBAAsB;EAEtE,IAAI,CAAC,+BAA+B,KAAK,MAAM,GAC7C,MAAM,IAAI,2BAA2B,SAAS,qBAAqB;EAErE,OAAO;GAAE,MAAM;GAAU;EAAO;CAClC;CACA,IAAI,OAAO;EACT,IAAI,SAAS,KAAA,KAAa,SAAS,SACjC,MAAM,IAAI,2BAA2B,SAAS,qBAAqB;EAErE,IAAI,CAAC,+BAA+B,KAAK,KAAK,GAC5C,MAAM,IAAI,2BAA2B,SAAS,oBAAoB;EAEpE,OAAO,EAAE,MAAM;CACjB;CACA,IAAI,SAAS,KAAA,KAAa,SAAS,UACjC,MAAM,IAAI,2BAA2B,SAAS,qBAAqB;CAErE,OAAO,WAAW;EAAE;EAAU;CAAM,IAAI,EAAE,MAAM;AAClD;AASO,SAAS,yBACd,SACA,OACuB;CACvB,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM,QAAQ,MAAM,UAAU,GACrD,MAAM,IAAI,2BACR,SACA,iDACF;CAEF,MAAM,YAAY,cAAc,KAAK;CACrC,IAAI,WACF,MAAM,IAAI,2BACR,SACA,IAAI,UAAS,qEACf;CAEF,IAAI,MAAM,WAAW,WAAW,GAC9B,MAAM,IAAI,2BAA2B,SAAS,2BAA2B;CAE3E,MAAM,0BAAU,IAAI,IAAI;EACtB;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,MAAM,aAAmC,MAAM,WAAW,KACvD,WAAoB,UAAkB;EACrC,IAAI,CAAC,SAAS,SAAS,GACrB,MAAM,IAAI,2BACR,SACA,cAAc,MAAK,oBACrB;EAEF,MAAM,QAAQ,OAAO,KAAK,SAAS,CAAA,CAAE,QAClC,WAAW,CAAC,QAAQ,IAAI,MAAM,CACjC;EACA,IAAI,MAAM,SAAS,GACjB,MAAM,IAAI,2BACR,SACA,cAAc,MAAK,8BAA+B,MAAM,KAAK,IAAI,GACnE;EAEF,MAAM,MAA0B,CAAC;EACjC,KAAA,MAAW,UAAU,SAAS;GAC5B,IAAI,WAAW,UAAU;GACzB,MAAM,QAAQ,KAAK,UAAU,OAAO;GACpC,IAAI,OAAQ,IAA+B,UAAU;EACvD;EACA,IAAI,UAAU,WAAW,KAAA,GAAW;GAClC,IAAI,CAAC,SAAS,UAAU,MAAM,GAC5B,MAAM,IAAI,2BACR,SACA,cAAc,MAAK,2BACrB;GAEF,IAAI,SAAS,EAAE,GAAG,UAAU,OAAO;EACrC;EACA,OAAO;CACT,CACF;CACA,MAAM,cAAc,KAAK,MAAM,WAAW;CAC1C,OAAO,cAAc;EAAE;EAAY;CAAY,IAAI,EAAE,WAAW;AAClE;AAOO,SAAS,0BACd,SACA,OACgC;CAChC,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,IAAI,CAAC,SAAS,KAAK,GACjB,MAAM,IAAI,2BAA2B,SAAS,2BAA2B;CAE3E,MAAM,YAAY,cAAc,KAAK;CACrC,IAAI,WACF,MAAM,IAAI,2BACR,SACA,IAAI,UAAS,qEACf;CAEF,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;AAGO,SAAS,qBACd,SACA,OACsB;CACtB,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,OAAO;CAC5C,IAAI,CAAC,gBAAgB,IAAI,GACvB,MAAM,IAAI,2BACR,SACA,mCAAmC,gBAAgB,KAAK,IAAI,GAC9D;CAEF,OAAO;AACT;AAOO,SAAS,mBAAmB,QAAiC;CAClE,MAAM,OAAO,oBAAoB,MAAM;CACvC,MAAM,SAAS;CACf,IAAI,SAAS,UAAU,OAAO,UAAU,OAAO,UAAU;CACzD,IAAI,SAAS,SAAS,OAAO,SAAS,OAAO,SAAS;CACtD,IAAI,SAAS,cAAc,OAAO;CAClC,OAAO,SAAS,OAAO,YAAY,UAAS,GAAI,OAAO,SAAS;AAClE;AAMO,SAAS,oBAAoB,KAAa,SAA0B;CACzE,IAAI,YAAY,KAAK,OAAO;CAC5B,IAAI,QAAQ,SAAS,GAAG,GAAG,OAAO,IAAI,WAAW,QAAQ,MAAM,GAAG,EAAE,CAAC;CACrE,OAAO,QAAQ;AACjB;AAOO,SAAS,gBACd,KACA,WACS;CACT,QAAQ,aAAa,CAAC,EAAA,CAAG,MAAM,YAAY,oBAAoB,KAAK,OAAO,CAAC;AAC9E;AAGO,SAAS,mBACd,SACA,OACiB;CACjB,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,2BACR,SACA,yCACF;CAEF,MAAM,MAAgB,CAAC;CACvB,KAAA,MAAW,SAAS,OAAO;EACzB,IACE,OAAO,UAAU,YACjB,CAAC,4DAA4D,KAAK,KAAK,GAEvE,MAAM,IAAI,2BACR,SACA,4BAA4B,KAAK,UAAU,KAAK,GAClD;EAEF,IAAI,CAAC,IAAI,SAAS,KAAK,GAAG,IAAI,KAAK,KAAK;CAC1C;CACA,OAAO;AACT;AAGO,SAAS,wBACd,QACQ;CACR,IAAI,CAAC,UAAU,OAAO,KAAK,MAAM,CAAA,CAAE,WAAW,GAC5C,OAAO;CAET,MAAM,OAAO,oBAAoB,MAAM;CACvC,MAAM,SAAS;CACf,IAAI,SAAS,UAAU,OAAO,UAAU,OAAO,UAAU;CACzD,IAAI,SAAS,SAAS,OAAO,SAAS,OAAO,SAAS;CACtD,IAAI,SAAS,cACX,OAAO,GAAG,OAAO,YAAY,UAAU,EAAC;CAE1C,OAAO,GAAG,OAAO,YAAY,UAAS,GAAI,OAAO,SAAS;AAC5D;;;;;;;;;;;;;;;;;;AChYO,IAAM,yBAAyB;AAStC,SAAS,UAAU,SAAiB,KAAoB,MAAuB;CAC7E,IAAI,QAAQ,MAAM,OAAO;CACzB,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,QAAQ;EACN,MAAM,IAAI,2BAA2B,SAAS,GAAG,KAAI,mBAAoB;CAC3E;AACF;AAwBO,IAAM,oBAAN,cAAgC,WAAW;CAEhD,UAAkB;CAKlB,WAA0B;CAQ1B,SAAwB;CAWxB,kBAAiC;CAEjC,YAAY,UAAoC,CAAC,GAAG;EAClD,MAAM,OAAO;EACb,IAAI,QAAQ,YAAY,KAAA,GAAW,KAAK,UAAU,QAAQ;EAC1D,IAAI,QAAQ,aAAa,KAAA,GAAW,KAAK,WAAW,QAAQ;EAC5D,IAAI,QAAQ,WAAW,KAAA,GAAW,KAAK,SAAS,QAAQ;EACxD,IAAI,QAAQ,oBAAoB,KAAA,GAC9B,KAAK,kBAAkB,QAAQ;CAEnC;;CAGA,WAAoB;EAClB,OAAO,KAAK,gBAAgB;CAC9B;;CAGA,qBAAsC;EACpC,OAAO,mBACL,KAAK,SACL,UAAU,KAAK,SAAS,KAAK,iBAAiB,iBAAiB,CACjE;CACF;CAEA,MAAe,KAAK,SAA0C;EAC5D,KAAK,iBAAiB;EAGtB,KAAK,UAAU,KAAK,YAAA;EACpB,MAAM,SAAS,MAAM,MAAM,KAAK,OAAO;EACvC,gCAAgC;EAChC,OAAO;CACT;CAEA,MAAe,SAAwB;EACrC,MAAM,MAAM,OAAO;EACnB,gCAAgC;CAClC;CAEQ,kBAA2B;EACjC,MAAM,SAAS,sBAAsB,KAAK,OAAO;EACjD,IAAI,CAAC,QACH,MAAM,IAAI,2BACR,OAAO,KAAK,OAAO,GACnB,oBACF;EAEF,MAAM,MAAM,UAAU,KAAK,SAAS,KAAK,QAAQ,QAAQ;EACzD,QAAQ,OAAO,MAAf;GACE,KAAK,QACH,OAAO,oBAAoB,KAAK,SAAS,GAAG;GAC9C,KAAK,gBACH,OAAO,qBAAqB,KAAK,SAAS,GAAG;GAC/C,KAAK,SACH,OAAO,yBAAyB,KAAK,SAAS,GAAG;GACnD,KAAK,UACH,OAAO,0BAA0B,KAAK,SAAS,GAAG;EACtD;CACF;CAEQ,mBAAyB;EAC/B,MAAM,SAAS,sBAAsB,KAAK,OAAO;EACjD,IAAI,CAAC,QACH,MAAM,IAAI,2BACR,OAAO,KAAK,OAAO,GACnB,oBACF;EAEF,IAAI,KAAK,aAAa,MAAM;GAC1B,IACE,OAAO,KAAK,aAAa,YACzB,CAAC,KAAK,SAAS,KAAK,KACpB,KAAK,aAAa,KAAK,SAAS,KAAK,KACrC,KAAK,aAAA,WAEL,MAAM,IAAI,2BAA2B,KAAK,SAAS,mBAAmB;GAKxE,IAAI,OAAO,SAAS,WAAW,OAAO,SAAS,UAC7C,MAAM,IAAI,2BACR,KAAK,SACL,uDACF;GAEF,IAAI,KAAK,oBAAoB,MAC3B,MAAM,IAAI,2BACR,KAAK,SACL,4CACF;EAEJ;EACA,IACE,KAAK,oBAAoB,QACzB,OAAO,SAAS,UAChB,OAAO,SAAS,gBAEhB,MAAM,IAAI,2BACR,KAAK,SACL,+DACF;EAEF,MAAM,QAAQ,KAAK,gBAAgB;EACnC,KAAK,SAAS,UAAU,OAAO,OAAO,KAAK,UAAU,KAAK;EAC1D,MAAM,YAAY,KAAK,mBAAmB;EAC1C,KAAK,kBACH,cAAc,OAAO,OAAO,KAAK,UAAU,SAAS;CACxD;AACF;AAxIoD,cAAvC,mBAA8C,mBAAkB,+BAAA;AAE3E,gBAAA,CADC,MAAM,EAAE,UAAU,KAAK,CAAC,CAAA,GADd,kBAEX,WAAA,WAAA,CAAA;AAKA,gBAAA,CADC,MAAM;CAAE,SAAS;CAAQ,UAAU;AAAK,CAAC,CAAA,GAN/B,kBAOX,WAAA,YAAA,CAAA;AAQA,gBAAA,CADC,MAAM;CAAE,MAAM;CAAQ,UAAU;AAAK,CAAC,CAAA,GAd5B,kBAeX,WAAA,UAAA,CAAA;AAWA,gBAAA,CADC,MAAM;CAAE,MAAM;CAAQ,UAAU;AAAK,CAAC,CAAA,GAzB5B,kBA0BX,WAAA,mBAAA,CAAA;AA1BW,oBAAN,gBAAA,CAbN,KAAK;CACJ,WAAW;CACX,iBAAiB,CAAC,WAAW,SAAS;CACtC,KAAK;CACL,KAAK;CACL,KAAK;CACL,SAAS,CACP;EACE,MAAM;EACN,SAAS,CAAC,YAAY,SAAS;CACjC,CACF;AACF,CAAC,CAAA,GACY,iBAAA;;;AC5CN,IAAM,8BAAN,cAA0C,eAAkC;CACjF,OAAgB,aAAa;;;;;;CAO7B,MAAM,YACJ,WACA,SACyC;EACzC,MAAM,WAAW,cAAc,QAAQ,OAAO;EAC9C,MAAM,OAAO,MAAM,KAAK,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;EACpD,MAAM,yBAAS,IAAI,IAA+B;EAClD,KAAA,MAAW,OAAO,MAAM,OAAO,IAAI,IAAI,SAAS,GAAG;EACnD,OAAO;CACT;;CAGA,MAAM,YACJ,SACA,WACA,SACmC;EACnC,MAAM,WAAW,cAAc,QAAQ,OAAO;EAE9C,QAAO,MADY,KAAK,KAAK;GAAE,OAAO;IAAE;IAAS;GAAS;GAAG,OAAO;EAAE,CAAC,EAAA,CAC3D,MAAM;CACpB;;;;;;;CAQA,MAAM,YACJ,SACA,WACA,SACA,QACmC;EACnC,MAAM,WAAW,MAAM,KAAK,YAAY,SAAS,WAAW,OAAO;EACnE,MAAM,SACJ,OAAO,WAAW,KAAA,IACb,UAAU,UAAU,OACrB,OAAO,WAAW,OAChB,OACA,KAAK,UAAU,OAAO,MAAM;EACpC,MAAM,kBACJ,OAAO,oBAAoB,KAAA,IACtB,UAAU,mBAAmB,OAC9B,OAAO,oBAAoB,OACzB,OACA,KAAK,UAAU,OAAO,eAAe;EAE7C,IAAI,WAAW,QAAQ,oBAAoB,MAAM;GAC/C,IAAI,UAAU,MAAM,SAAS,OAAO;GACpC,OAAO;EACT;EACA,IAAI,UAAU;GACZ,SAAS,SAAS;GAClB,SAAS,kBAAkB;GAC3B,MAAM,SAAS,KAAK;GACpB,OAAO;EACT;EACA,MAAM,UAAU,MAAM,KAAK,OAAO;GAChC;GACA,UAAU,cAAc,QAAQ,OAAO;GACvC;GACA;EACF,CAAC;EACD,MAAM,QAAQ,KAAK;EACnB,OAAO;CACT;;CAGA,MAAM,eACJ,SACA,WACA,SACkB;EAClB,MAAM,WAAW,MAAM,KAAK,YAAY,SAAS,WAAW,OAAO;EACnE,IAAI,CAAC,UAAU,OAAO;EACtB,MAAM,SAAS,OAAO;EACtB,OAAO;CACT;AACF"}