@intutic/shared-types 2.3.0 → 2.4.0

package/dist/providers.js

@@ -12,6 +12,11 @@
  * new provider's *field layout* is a data change here, not new code in
  * every place that touches credentials.
  *
+ * AWS Bedrock, Google Vertex AI and Azure OpenAI are routed by the proxy's
+ * `src/cloud` module: requests name them as `bedrock/<model id>`,
+ * `vertex/<model>` and `azure/<deployment>`, and the stored blob is the
+ * region/endpoint plus credential that module signs or authenticates with.
+ *
  * Deliberately NOT exhaustive — LiteLLM supports 100+ providers. This is a
  * representative slice spanning the shapes that actually differ (single
  * key, multi-field cloud credential, self-hosted endpoint, structured
@@ -20,21 +25,26 @@
  * of these shapes is adding one entry, not new plumbing.
  *
  * `routingLive: true` means `packages/proxy` actually forwards requests to
- * this provider today (`fetch_provider_credential` in `proxy.rs` knows its
- * field name). `routingLive: false` means the credential can be
- * pre-provisioned here, but nothing in the proxy calls it yet — routing
- * support is separate, real per-provider engineering (a new `Provider`
- * enum variant, `get_model_provider`, pricing in `pricing.rs`), not a
- * config change. The dashboard wizard must say so, not imply the key is
- * live the moment it's saved.
+ * this provider today: it has an upstream for it (`provider_from_wire_id` in
+ * `proxy.rs`, which a proxy test holds this flag to). Gemini models are served
+ * on the Messages, Chat Completions and Responses routes, through the
+ * Gemini API translation; the proxy refuses the native `/v1beta/models/…`
+ * route, whose model is named in the URL. `routingLive: false` means the
+ * credential can be pre-provisioned here, but nothing in the proxy calls it
+ * yet — routing support is separate, real per-provider engineering (a new
+ * `Provider` enum variant, `get_model_provider`, pricing in `pricing.rs`),
+ * not a config change. The dashboard wizard must say so, not imply the key
+ * is live the moment it's saved.
  *
  * @module
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEEPSEEK_API_MODEL_IDS = exports.PROVIDER_REGISTRY = exports.LIVE_ROUTING_PROVIDER_IDS = void 0;
+exports.AZURE_ENDPOINT_HOST_SUFFIXES = exports.DEEPSEEK_API_MODEL_IDS = exports.PROVIDER_REGISTRY = exports.LIVE_ROUTING_PROVIDER_IDS = void 0;
 exports.getProviderDefinition = getProviderDefinition;
 exports.isKnownProviderId = isKnownProviderId;
 exports.inferProviderForModel = inferProviderForModel;
+exports.cloudProviderForModel = cloudProviderForModel;
+exports.checkCloudCredentialFields = checkCloudCredentialFields;
 /**
  * The 3 providers this system supported before this registry existed —
  * their storage format (`{provider}_api_key`, a flat string field) is
@@ -75,34 +85,45 @@ exports.PROVIDER_REGISTRY = [
         displayName: 'Google Gemini',
         docsUrl: 'https://aistudio.google.com/app/apikey',
         fields: [{ key: 'apiKey', label: 'API Key', type: 'password', required: true }],
-        // The proxy resolves gemini-* models but forwards the request without
-        // translating it to Gemini's generateContent format, so no request
-        // succeeds. The key keeps its flat-field storage
-        // (LIVE_ROUTING_PROVIDER_IDS), so a key saved now is the one the proxy
-        // reads once Gemini routing ships.
-        routingLive: false,
+        routingLive: true,
     },
     {
         id: 'azure_openai',
         displayName: 'Azure OpenAI',
-        docsUrl: 'https://learn.microsoft.com/azure/ai-services/openai/how-to/create-resource',
+        docsUrl: 'https://learn.microsoft.com/azure/ai-foundry/openai/how-to/create-resource',
         fields: [
+            {
+                key: 'endpoint',
+                label: 'Resource Endpoint',
+                type: 'text',
+                required: true,
+                placeholder: 'https://your-resource.openai.azure.com',
+                helpText: 'An *.openai.azure.com, *.services.ai.azure.com or *.cognitiveservices.azure.com resource URL.',
+            },
             { key: 'apiKey', label: 'API Key', type: 'password', required: true },
-            { key: 'endpoint', label: 'Resource Endpoint', type: 'text', required: true, placeholder: 'https://your-resource.openai.azure.com' },
-            { key: 'deploymentName', label: 'Deployment Name', type: 'text', required: true },
         ],
-        routingLive: false,
+        usageHint: 'Name a deployment as azure/<deployment> in the model field.',
+        routingLive: true,
     },
     {
         id: 'bedrock',
         displayName: 'AWS Bedrock',
         docsUrl: 'https://docs.aws.amazon.com/bedrock/latest/userguide/getting-started.html',
         fields: [
-            { key: 'awsAccessKeyId', label: 'AWS Access Key ID', type: 'password', required: true },
-            { key: 'awsSecretAccessKey', label: 'AWS Secret Access Key', type: 'password', required: true },
             { key: 'awsRegion', label: 'AWS Region', type: 'text', required: true, placeholder: 'us-east-1' },
+            { key: 'awsAccessKeyId', label: 'AWS Access Key ID', type: 'password', required: false },
+            { key: 'awsSecretAccessKey', label: 'AWS Secret Access Key', type: 'password', required: false },
+            {
+                key: 'apiKey',
+                label: 'Bedrock API Key',
+                type: 'password',
+                required: false,
+                helpText: 'Instead of an access key pair.',
+            },
         ],
-        routingLive: false,
+        requiresOneOf: [['awsAccessKeyId', 'awsSecretAccessKey'], ['apiKey']],
+        usageHint: 'Name a model as bedrock/<model id>, e.g. bedrock/anthropic.claude-opus-4-7.',
+        routingLive: true,
     },
     {
         id: 'vertex_ai',
@@ -110,9 +131,11 @@ exports.PROVIDER_REGISTRY = [
         docsUrl: 'https://cloud.google.com/vertex-ai/docs/authentication',
         fields: [
             { key: 'projectId', label: 'GCP Project ID', type: 'text', required: true },
+            { key: 'location', label: 'Location', type: 'text', required: false, placeholder: 'global' },
             { key: 'serviceAccountJson', label: 'Service Account JSON', type: 'textarea', required: true, helpText: 'The full JSON key file contents for a service account with Vertex AI access.' },
         ],
-        routingLive: false,
+        usageHint: 'Name a model as vertex/<model>, e.g. vertex/claude-sonnet-4-5@20250929 or vertex/gemini-2.5-pro.',
+        routingLive: true,
     },
     {
         id: 'cohere',
@@ -178,13 +201,18 @@ exports.DEEPSEEK_API_MODEL_IDS = ['deepseek-chat', 'deepseek-reasoner', 'deepsee
  * against the Rust source; if the heuristic changes there, change it here in
  * the same commit.
  *
- * Order matters and matches the Rust exactly: claude → gemini → '/'
- * (OpenRouter's vendor/model namespacing — checked before the mistral
- * prefixes so "mistralai/..." routes to OpenRouter) → an exact DeepSeek API
- * id ({@link DEEPSEEK_API_MODEL_IDS}) → mistral prefixes → OpenAI as the
- * default arm.
+ * Order matters and matches the Rust exactly: a cloud prefix
+ * ({@link cloudProviderForModel}) → claude → gemini → '/' (OpenRouter's
+ * vendor/model namespacing — checked before the mistral prefixes so
+ * "mistralai/..." routes to OpenRouter) → an exact DeepSeek API id
+ * ({@link DEEPSEEK_API_MODEL_IDS}) → mistral prefixes → OpenAI as the
+ * default arm. A `config.yaml` model alias is not visible here: it lives in
+ * the proxy's own configuration.
  */
 function inferProviderForModel(model) {
+    const cloud = cloudProviderForModel(model);
+    if (cloud)
+        return cloud;
     const m = model.toLowerCase();
     if (m.includes('claude'))
         return 'anthropic';
@@ -199,4 +227,80 @@ function inferProviderForModel(model) {
     }
     return 'openai';
 }
+/**
+ * The cloud provider a `bedrock/`, `vertex/` (or `vertex_ai/`) or `azure/`
+ * model name routes to — `crate::cloud::parse_prefixed` in the proxy.
+ */
+function cloudProviderForModel(model) {
+    const slash = model.indexOf('/');
+    if (slash <= 0 || model.slice(slash + 1).trim() === '')
+        return undefined;
+    switch (model.slice(0, slash).toLowerCase()) {
+        case 'bedrock':
+            return 'bedrock';
+        case 'vertex':
+        case 'vertex_ai':
+            return 'vertex_ai';
+        case 'azure':
+            return 'azure_openai';
+        default:
+            return undefined;
+    }
+}
+/** Host suffixes a workspace's Azure endpoint may use — `AZURE_HOST_SUFFIXES` in the proxy. */
+exports.AZURE_ENDPOINT_HOST_SUFFIXES = [
+    '.openai.azure.com',
+    '.services.ai.azure.com',
+    '.cognitiveservices.azure.com',
+];
+const CLOUD_NAME = /^[a-z0-9][a-z0-9-]{0,31}$/;
+/**
+ * The same checks the proxy applies when it reads a stored cloud credential
+ * (`cloud::config::from_workspace`), so a credential the proxy would refuse
+ * is refused when it is saved instead. Returns the reason, or `null`.
+ * Regions, locations and project ids become part of a hostname or URL path;
+ * the Azure endpoint is a host the gateway sends the key to, so it must be
+ * an Azure resource over TLS.
+ */
+function checkCloudCredentialFields(providerId, values) {
+    switch (providerId) {
+        case 'bedrock':
+            return CLOUD_NAME.test(values.awsRegion ?? '') ? null : 'AWS Region must be a region name such as us-east-1';
+        case 'vertex_ai': {
+            if (!/^[a-z0-9-]{1,64}$/.test(values.projectId ?? ''))
+                return 'GCP Project ID must be a project id or number';
+            if (values.location !== undefined && !CLOUD_NAME.test(values.location)) {
+                return 'Location must be a location name such as us-east5 or global';
+            }
+            let doc;
+            try {
+                doc = JSON.parse(values.serviceAccountJson ?? '');
+            }
+            catch {
+                return 'Service Account JSON is not valid JSON';
+            }
+            const type = doc?.type;
+            return type === 'service_account' || type === 'authorized_user'
+                ? null
+                : 'Service Account JSON must be a service_account (or authorized_user) credential file';
+        }
+        case 'azure_openai': {
+            let url;
+            try {
+                url = new URL(values.endpoint ?? '');
+            }
+            catch {
+                return 'Resource Endpoint must be a URL';
+            }
+            const host = url.hostname.toLowerCase();
+            const label = exports.AZURE_ENDPOINT_HOST_SUFFIXES.map((sfx) => (host.endsWith(sfx) ? host.slice(0, -sfx.length) : null)).find((l) => l !== null);
+            const ok = url.protocol === 'https:' && url.port === '' && url.username === '' && !!label && /^[a-z0-9-]+$/.test(label);
+            return ok
+                ? null
+                : 'Resource Endpoint must be https://<resource>.openai.azure.com, .services.ai.azure.com or .cognitiveservices.azure.com';
+        }
+        default:
+            return null;
+    }
+}
 //# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;AAiJH,sDAEC;AAED,8CAEC;AA6BD,sDAYC;AAtKD;;;;;;;;;;;;;;;;;;GAkBG;AACU,QAAA,yBAAyB,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AAEtE,QAAA,iBAAiB,GAAyB;IACrD;QACE,EAAE,EAAE,WAAW;QACf,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,6CAA6C;QACtD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QAC1G,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QACtG,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,sEAAsE;QACtE,mEAAmE;QACnE,iDAAiD;QACjD,uEAAuE;QACvE,mCAAmC;QACnC,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,6EAA6E;QACtF,MAAM,EAAE;YACN,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;YACrE,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wCAAwC,EAAE;YACpI,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;SAClF;QACD,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,2EAA2E;QACpF,MAAM,EAAE;YACN,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvF,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC/F,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE;SAClG;QACD,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,WAAW;QACf,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE;YACN,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC3E,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,8EAA8E,EAAE;SACzL;QACD,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,kEAAkE;QAClE,wEAAwE;QACxE,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;QACtH,WAAW,EAAE,KAAK;KACnB;CACF,CAAA;AAED,SAAgB,qBAAqB,CAAC,EAAU;IAC9C,OAAO,yBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACnD,CAAC;AAED,SAAgB,iBAAiB,CAAC,EAAU;IAC1C,OAAO,yBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACnD,CAAC;AAED;;;;;;;GAOG;AACU,QAAA,sBAAsB,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,CAAU,CAAA;AAEvG;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,qBAAqB,CACnC,KAAa;IAEb,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAA;IAC5C,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAA;IACxC,IAAK,8BAA4C,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAA;IAChF,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACzF,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC"}
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;;;AAuKH,sDAEC;AAED,8CAEC;AA+BD,sDAqBC;AASD,sDAcC;AAmBD,gEAuCC;AA/QD;;;;;;;;;;;;;;;;;;GAkBG;AACU,QAAA,yBAAyB,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AAEtE,QAAA,iBAAiB,GAAyB;IACrD;QACE,EAAE,EAAE,WAAW;QACf,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,6CAA6C;QACtD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QAC1G,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QACtG,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,4EAA4E;QACrF,MAAM,EAAE;YACN;gBACE,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,mBAAmB;gBAC1B,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,wCAAwC;gBACrD,QAAQ,EAAE,+FAA+F;aAC1G;YACD,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;SACtE;QACD,SAAS,EAAE,6DAA6D;QACxE,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,2EAA2E;QACpF,MAAM,EAAE;YACN,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE;YACjG,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;YACxF,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;YAChG;gBACE,GAAG,EAAE,QAAQ;gBACb,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,gCAAgC;aAC3C;SACF;QACD,aAAa,EAAE,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACrE,SAAS,EAAE,6EAA6E;QACxF,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,WAAW;QACf,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE;YACN,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC3E,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE;YAC5F,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,8EAA8E,EAAE;SACzL;QACD,SAAS,EAAE,kGAAkG;QAC7G,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,kEAAkE;QAClE,wEAAwE;QACxE,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;QACtH,WAAW,EAAE,KAAK;KACnB;CACF,CAAA;AAED,SAAgB,qBAAqB,CAAC,EAAU;IAC9C,OAAO,yBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACnD,CAAC;AAED,SAAgB,iBAAiB,CAAC,EAAU;IAC1C,OAAO,yBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACnD,CAAC;AAED;;;;;;;GAOG;AACU,QAAA,sBAAsB,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,CAAU,CAAA;AAEvG;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,qBAAqB,CACnC,KAAa;IASb,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACvB,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAA;IAC5C,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAA;IACxC,IAAK,8BAA4C,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAA;IAChF,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACzF,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAKD;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAAa;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACxE,QAAQ,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5C,KAAK,SAAS;YACZ,OAAO,SAAS,CAAA;QAClB,KAAK,QAAQ,CAAC;QACd,KAAK,WAAW;YACd,OAAO,WAAW,CAAA;QACpB,KAAK,OAAO;YACV,OAAO,cAAc,CAAA;QACvB;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC;AAED,+FAA+F;AAClF,QAAA,4BAA4B,GAAG;IAC1C,mBAAmB;IACnB,wBAAwB;IACxB,8BAA8B;CACtB,CAAA;AAEV,MAAM,UAAU,GAAG,2BAA2B,CAAA;AAE9C;;;;;;;GAOG;AACH,SAAgB,0BAA0B,CAAC,UAAkB,EAAE,MAA8B;IAC3F,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oDAAoD,CAAA;QAC9G,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;gBAAE,OAAO,+CAA+C,CAAA;YAC7G,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvE,OAAO,6DAA6D,CAAA;YACtE,CAAC;YACD,IAAI,GAAY,CAAA;YAChB,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAA;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,wCAAwC,CAAA;YACjD,CAAC;YACD,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAA;YACrD,OAAO,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,iBAAiB;gBAC7D,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,qFAAqF,CAAA;QAC3F,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,IAAI,GAAQ,CAAA;YACZ,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,iCAAiC,CAAA;YAC1C,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;YACvC,MAAM,KAAK,GAAG,oCAA4B,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACpH,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAClB,CAAA;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACvH,OAAO,EAAE;gBACP,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,uHAAuH,CAAA;QAC7H,CAAC;QACD;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC"}

package/dist/spendBudgets.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Spend budgets and key rate limits — how much LLM spend a workspace, one
+ * virtual key or one member may run up per day or per month, and how many
+ * requests and tokens a virtual key may send per minute.
+ *
+ * A budget is `hard` or `soft`. The LLM proxy refuses a request that a hard
+ * budget's remainder does not cover (`BUDGET_EXCEEDED`, 429, before the
+ * request leaves); a soft budget never refuses. Both raise the workspace's
+ * budget alerts — once at the alert threshold and once at the limit, per
+ * period — as `finops.budget.threshold` / `finops.budget.exceeded`.
+ *
+ * Periods are fixed UTC windows, like MCP call budgets (`mcpBudgets.ts`): a
+ * day starts at 00:00 UTC, a month on the 1st at 00:00 UTC. The window id is
+ * part of every per-key and per-member spend counter's Valkey key, so a new
+ * day or month starts from zero and an old counter expires on its own.
+ *
+ * Spend is what the control plane records per completed call
+ * (`finopsService.incrementSpend`), so a request's own cost lands after it
+ * finishes: the proxy checks a hard budget against the spend recorded so far
+ * plus the request's estimated cost, with the same 20% margin the workspace
+ * cap has always used.
+ *
+ * @module
+ */
+import { z } from 'zod';
+/** A budget's period: a UTC calendar day or a UTC calendar month. */
+export type SpendBudgetPeriod = 'day' | 'month';
+/** `hard` refuses requests the remainder does not cover; `soft` only alerts. */
+export type SpendBudgetEnforcement = 'hard' | 'soft';
+/**
+ * Whose spend a budget limits:
+ * - `workspace` every call in the workspace (Settings › Billing › Budget Limits);
+ * - `key`       the calls one virtual key makes;
+ * - `member`    the calls made with the virtual keys one member owns.
+ */
+export type SpendBudgetScope = 'workspace' | 'key' | 'member';
+export interface SpendBudget {
+    period: SpendBudgetPeriod;
+    limitUsd: number;
+    enforcement: SpendBudgetEnforcement;
+}
+export declare const SPEND_BUDGET_PERIODS: readonly SpendBudgetPeriod[];
+export declare const SPEND_BUDGET_SCOPES: readonly SpendBudgetScope[];
+export declare const MAX_SPEND_BUDGET_USD = 1000000;
+/**
+ * The member budget that applies to every member without one of their own,
+ * period by period. A member's own day budget replaces the default day
+ * budget; the default month budget still applies to them unless they have a
+ * month budget too.
+ */
+export declare const MEMBER_BUDGET_DEFAULT = "default";
+export declare const SpendBudgetSchema: z.ZodObject<{
+    period: z.ZodEnum<["day", "month"]>;
+    limitUsd: z.ZodNumber;
+    enforcement: z.ZodDefault<z.ZodEnum<["hard", "soft"]>>;
+}, "strict", z.ZodTypeAny, {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement: "hard" | "soft";
+}, {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement?: "hard" | "soft" | undefined;
+}>;
+/** One budget per period at most: a key or member has a day budget, a month budget, both or neither. */
+export declare const SpendBudgetListSchema: z.ZodEffects<z.ZodArray<z.ZodObject<{
+    period: z.ZodEnum<["day", "month"]>;
+    limitUsd: z.ZodNumber;
+    enforcement: z.ZodDefault<z.ZodEnum<["hard", "soft"]>>;
+}, "strict", z.ZodTypeAny, {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement: "hard" | "soft";
+}, {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement?: "hard" | "soft" | undefined;
+}>, "many">, {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement: "hard" | "soft";
+}[], {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement?: "hard" | "soft" | undefined;
+}[]>;
+/** Requests and tokens one virtual key may send per minute; `null` (or absent) means no limit. */
+export interface KeyRateLimit {
+    rpm: number | null;
+    tpm: number | null;
+}
+export declare const MAX_KEY_RPM = 100000;
+export declare const MAX_KEY_TPM = 100000000;
+export declare const KeyRateLimitSchema: z.ZodObject<{
+    rpm: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    tpm: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, "strict", z.ZodTypeAny, {
+    rpm?: number | null | undefined;
+    tpm?: number | null | undefined;
+}, {
+    rpm?: number | null | undefined;
+    tpm?: number | null | undefined;
+}>;
+/**
+ * One hard budget as the proxy reads it from a virtual key's cached auth
+ * entry (`hardBudgets`) and from `GET /api/v1/auth/key-context`. Soft budgets
+ * are not sent: the proxy never refuses on one.
+ */
+export interface HardBudgetWire {
+    scope: SpendBudgetScope;
+    period: SpendBudgetPeriod;
+    limitUsd: number;
+}
+/** The UTC window a moment falls in: its id (part of the counter key), when it began and when it resets. */
+export declare function spendBudgetWindow(period: SpendBudgetPeriod, nowMs: number): {
+    id: string;
+    startMs: number;
+    resetAtMs: number;
+};
+/** A budget in words, for alerts, refusals and the dashboard. */
+export declare function describeSpendBudget(scope: SpendBudgetScope, budget: SpendBudget, subjectLabel?: string): string;
+//# sourceMappingURL=spendBudgets.d.ts.map

package/dist/spendBudgets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spendBudgets.d.ts","sourceRoot":"","sources":["../src/spendBudgets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,qEAAqE;AACrE,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,OAAO,CAAA;AAE/C,gFAAgF;AAChF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,CAAA;AAEpD;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,KAAK,GAAG,QAAQ,CAAA;AAE7D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,iBAAiB,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,sBAAsB,CAAA;CACpC;AAED,eAAO,MAAM,oBAAoB,EAAE,SAAS,iBAAiB,EAAqB,CAAA;AAClF,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAAmC,CAAA;AAC9F,eAAO,MAAM,oBAAoB,UAAY,CAAA;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,YAAY,CAAA;AAE9C,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAMnB,CAAA;AAEX,wGAAwG;AACxG,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;IAS9B,CAAA;AAEJ,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CACnB;AAED,eAAO,MAAM,WAAW,SAAU,CAAA;AAClC,eAAO,MAAM,WAAW,YAAc,CAAA;AAEtC,eAAO,MAAM,kBAAkB;;;;;;;;;EAKpB,CAAA;AAEX;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,gBAAgB,CAAA;IACvB,MAAM,EAAE,iBAAiB,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,4GAA4G;AAC5G,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,MAAM,GACZ;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAUpD;AAED,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAW/G"}

package/dist/spendBudgets.js

@@ -0,0 +1,92 @@
+"use strict";
+/**
+ * Spend budgets and key rate limits — how much LLM spend a workspace, one
+ * virtual key or one member may run up per day or per month, and how many
+ * requests and tokens a virtual key may send per minute.
+ *
+ * A budget is `hard` or `soft`. The LLM proxy refuses a request that a hard
+ * budget's remainder does not cover (`BUDGET_EXCEEDED`, 429, before the
+ * request leaves); a soft budget never refuses. Both raise the workspace's
+ * budget alerts — once at the alert threshold and once at the limit, per
+ * period — as `finops.budget.threshold` / `finops.budget.exceeded`.
+ *
+ * Periods are fixed UTC windows, like MCP call budgets (`mcpBudgets.ts`): a
+ * day starts at 00:00 UTC, a month on the 1st at 00:00 UTC. The window id is
+ * part of every per-key and per-member spend counter's Valkey key, so a new
+ * day or month starts from zero and an old counter expires on its own.
+ *
+ * Spend is what the control plane records per completed call
+ * (`finopsService.incrementSpend`), so a request's own cost lands after it
+ * finishes: the proxy checks a hard budget against the spend recorded so far
+ * plus the request's estimated cost, with the same 20% margin the workspace
+ * cap has always used.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyRateLimitSchema = exports.MAX_KEY_TPM = exports.MAX_KEY_RPM = exports.SpendBudgetListSchema = exports.SpendBudgetSchema = exports.MEMBER_BUDGET_DEFAULT = exports.MAX_SPEND_BUDGET_USD = exports.SPEND_BUDGET_SCOPES = exports.SPEND_BUDGET_PERIODS = void 0;
+exports.spendBudgetWindow = spendBudgetWindow;
+exports.describeSpendBudget = describeSpendBudget;
+const zod_1 = require("zod");
+exports.SPEND_BUDGET_PERIODS = ['day', 'month'];
+exports.SPEND_BUDGET_SCOPES = ['workspace', 'key', 'member'];
+exports.MAX_SPEND_BUDGET_USD = 1_000_000;
+/**
+ * The member budget that applies to every member without one of their own,
+ * period by period. A member's own day budget replaces the default day
+ * budget; the default month budget still applies to them unless they have a
+ * month budget too.
+ */
+exports.MEMBER_BUDGET_DEFAULT = 'default';
+exports.SpendBudgetSchema = zod_1.z
+    .object({
+    period: zod_1.z.enum(['day', 'month']),
+    limitUsd: zod_1.z.number().positive().max(exports.MAX_SPEND_BUDGET_USD),
+    enforcement: zod_1.z.enum(['hard', 'soft']).default('hard'),
+})
+    .strict();
+/** One budget per period at most: a key or member has a day budget, a month budget, both or neither. */
+exports.SpendBudgetListSchema = zod_1.z
+    .array(exports.SpendBudgetSchema)
+    .max(2)
+    .superRefine((list, ctx) => {
+    const seen = new Set();
+    list.forEach((b, i) => {
+        if (seen.has(b.period))
+            ctx.addIssue({ code: 'custom', path: [i, 'period'], message: `two ${b.period} budgets` });
+        seen.add(b.period);
+    });
+});
+exports.MAX_KEY_RPM = 100_000;
+exports.MAX_KEY_TPM = 100_000_000;
+exports.KeyRateLimitSchema = zod_1.z
+    .object({
+    rpm: zod_1.z.number().int().min(1).max(exports.MAX_KEY_RPM).nullable().optional(),
+    tpm: zod_1.z.number().int().min(1).max(exports.MAX_KEY_TPM).nullable().optional(),
+})
+    .strict();
+/** The UTC window a moment falls in: its id (part of the counter key), when it began and when it resets. */
+function spendBudgetWindow(period, nowMs) {
+    const d = new Date(nowMs);
+    const y = d.getUTCFullYear();
+    const m = d.getUTCMonth();
+    if (period === 'day') {
+        const startMs = Date.UTC(y, m, d.getUTCDate());
+        return { id: new Date(startMs).toISOString().slice(0, 10), startMs, resetAtMs: startMs + 86_400_000 };
+    }
+    const startMs = Date.UTC(y, m, 1);
+    return { id: new Date(startMs).toISOString().slice(0, 7), startMs, resetAtMs: Date.UTC(y, m + 1, 1) };
+}
+/** A budget in words, for alerts, refusals and the dashboard. */
+function describeSpendBudget(scope, budget, subjectLabel) {
+    const whose = scope === 'workspace'
+        ? 'Workspace'
+        : scope === 'key'
+            ? `Key ${subjectLabel ?? ''}`.trim()
+            : subjectLabel === exports.MEMBER_BUDGET_DEFAULT || subjectLabel === undefined
+                ? 'Member'
+                : `Member ${subjectLabel}`;
+    const per = budget.period === 'day' ? 'day' : 'month';
+    return `${whose} ${budget.enforcement} budget: $${budget.limitUsd.toFixed(2)} per ${per}`;
+}
+//# sourceMappingURL=spendBudgets.js.map

package/dist/spendBudgets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spendBudgets.js","sourceRoot":"","sources":["../src/spendBudgets.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAoFH,8CAaC;AAGD,kDAWC;AA7GD,6BAAuB;AAsBV,QAAA,oBAAoB,GAAiC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AACrE,QAAA,mBAAmB,GAAgC,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AACjF,QAAA,oBAAoB,GAAG,SAAS,CAAA;AAE7C;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,SAAS,CAAA;AAEjC,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,4BAAoB,CAAC;IACzD,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACtD,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,wGAAwG;AAC3F,QAAA,qBAAqB,GAAG,OAAC;KACnC,KAAK,CAAC,yBAAiB,CAAC;KACxB,GAAG,CAAC,CAAC,CAAC;KACN,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QACjH,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAQS,QAAA,WAAW,GAAG,OAAO,CAAA;AACrB,QAAA,WAAW,GAAG,WAAW,CAAA;AAEzB,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACpE,CAAC;KACD,MAAM,EAAE,CAAA;AAaX,4GAA4G;AAC5G,SAAgB,iBAAiB,CAC/B,MAAyB,EACzB,KAAa;IAEb,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,CAAA;IAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IACzB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;QAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,UAAU,EAAE,CAAA;IACvG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACjC,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AACvG,CAAC;AAED,iEAAiE;AACjE,SAAgB,mBAAmB,CAAC,KAAuB,EAAE,MAAmB,EAAE,YAAqB;IACrG,MAAM,KAAK,GACT,KAAK,KAAK,WAAW;QACnB,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,KAAK,KAAK,KAAK;YACf,CAAC,CAAC,OAAO,YAAY,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;YACpC,CAAC,CAAC,YAAY,KAAK,6BAAqB,IAAI,YAAY,KAAK,SAAS;gBACpE,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,UAAU,YAAY,EAAE,CAAA;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAA;IACrD,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,WAAW,aAAa,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAA;AAC3F,CAAC"}

package/dist/upstreamRetry.d.ts

@@ -0,0 +1,121 @@
+/**
+ * The workspace setting `upstreamRetry`: how the LLM proxy retries a provider
+ * call that failed before any response reached the client, and where it falls
+ * back when those retries run out.
+ *
+ * Every field is optional and overrides the proxy's own `config.yaml` value
+ * (`intutic_settings.routing.retry` / `.fallbacks`) field by field, so a
+ * workspace can change one knob without restating the rest. The proxy reads
+ * it from `/api/v1/auth/key-context` (`packages/proxy/src/routing/retry.rs`,
+ * `WorkspaceRetry`); `fixtures/upstream-retry-vectors.json` holds the two
+ * readings together.
+ */
+import { z } from 'zod';
+/**
+ * The ceilings both the schema and the proxy enforce, so no setting can
+ * configure a retry storm. The proxy clamps `config.yaml` to the same values
+ * (`RetryConfig::bounded`); a test holds the two equal.
+ */
+export declare const UPSTREAM_RETRY_LIMITS: {
+    readonly maxAttempts: 5;
+    readonly maxBackoffMs: 60000;
+    readonly budgetMs: 120000;
+    readonly fallbackTargets: 5;
+    readonly fallbackModels: 50;
+};
+/** Retried by default: 429, 500, 502, 503, 504 and Anthropic's 529 overloaded. */
+export declare const DEFAULT_UPSTREAM_RETRY_STATUSES: readonly [429, 500, 502, 503, 504, 529];
+/** The defaults the proxy applies when neither config.yaml nor the workspace sets a field. */
+export declare const DEFAULT_UPSTREAM_RETRY: {
+    readonly enabled: true;
+    readonly maxAttempts: 3;
+    readonly initialBackoffMs: 500;
+    readonly maxBackoffMs: 8000;
+    readonly budgetMs: 30000;
+    readonly onStatus: readonly [429, 500, 502, 503, 504, 529];
+};
+/**
+ * Providers a fallback target may name: every id the proxy resolves
+ * (`provider_from_wire_id` in packages/proxy/src/proxy.rs), the cloud
+ * providers' aliases included, so a target copied from config.yaml is valid
+ * here too. A test holds the two lists equal.
+ */
+export declare const UPSTREAM_PROVIDERS: readonly ["anthropic", "openai", "gemini", "mistral", "openrouter", "deepseek", "bedrock", "vertex_ai", "vertex", "azure_openai", "azure"];
+export type UpstreamProvider = (typeof UPSTREAM_PROVIDERS)[number];
+/**
+ * One fallback target. `model` alone switches model on the provider that
+ * model resolves to; `provider` alone sends the same model to another
+ * provider; both pin the pair.
+ */
+export declare const UpstreamFallbackTargetSchema: z.ZodEffects<z.ZodObject<{
+    model: z.ZodOptional<z.ZodString>;
+    provider: z.ZodOptional<z.ZodEnum<["anthropic", "openai", "gemini", "mistral", "openrouter", "deepseek", "bedrock", "vertex_ai", "vertex", "azure_openai", "azure"]>>;
+}, "strict", z.ZodTypeAny, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}>, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}>;
+export type UpstreamFallbackTarget = z.infer<typeof UpstreamFallbackTargetSchema>;
+export declare const UpstreamRetrySettingsSchema: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    maxAttempts: z.ZodOptional<z.ZodNumber>;
+    initialBackoffMs: z.ZodOptional<z.ZodNumber>;
+    maxBackoffMs: z.ZodOptional<z.ZodNumber>;
+    budgetMs: z.ZodOptional<z.ZodNumber>;
+    onStatus: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    /** Ordered targets, keyed by the model whose retries ran out. */
+    fallbacks: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodEffects<z.ZodObject<{
+        model: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["anthropic", "openai", "gemini", "mistral", "openrouter", "deepseek", "bedrock", "vertex_ai", "vertex", "azure_openai", "azure"]>>;
+    }, "strict", z.ZodTypeAny, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }>, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }>, "many">>, Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]>, Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]>>>;
+}, "strict", z.ZodTypeAny, {
+    enabled?: boolean | undefined;
+    maxAttempts?: number | undefined;
+    initialBackoffMs?: number | undefined;
+    maxBackoffMs?: number | undefined;
+    budgetMs?: number | undefined;
+    onStatus?: number[] | undefined;
+    fallbacks?: Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]> | undefined;
+}, {
+    enabled?: boolean | undefined;
+    maxAttempts?: number | undefined;
+    initialBackoffMs?: number | undefined;
+    maxBackoffMs?: number | undefined;
+    budgetMs?: number | undefined;
+    onStatus?: number[] | undefined;
+    fallbacks?: Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]> | undefined;
+}>;
+export type UpstreamRetrySettings = z.infer<typeof UpstreamRetrySettingsSchema>;
+//# sourceMappingURL=upstreamRetry.d.ts.map

package/dist/upstreamRetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstreamRetry.d.ts","sourceRoot":"","sources":["../src/upstreamRetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAA;AAEV,kFAAkF;AAClF,eAAO,MAAM,+BAA+B,yCAA0C,CAAA;AAEtF,8FAA8F;AAC9F,eAAO,MAAM,sBAAsB;;;;;;;CAOzB,CAAA;AAEV;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,4IAYrB,CAAA;AACV,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAElE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;EAQrC,CAAA;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAA;AAEjF,eAAO,MAAM,2BAA2B;;;;;;;IAQpC,iEAAiE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW1D,CAAA;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAA"}