@k2b/cloud 0.43.0 → 0.45.0

package/src/ai/credentials.ts

@@ -1,138 +1,37 @@
 import { sql } from "bun";
-import { toPgTextArray } from "../services/postgres";
 import { decryptValue, encryptValue } from "../services/settings/crypto";
-import type { AiRequestHeaderPatch } from "./request-headers";
 
 type SqlClient = typeof sql;
 
-/**
- * Provider API keys, one per model profile.
- *
- * They used to live on the profile inside the `ai.model_profiles_json` setting.
- * Settings are encrypted at rest but a `text` setting is handed to the admin UI
- * in full, so every key travelled to the browser in the page payload — and the
- * form had to send them back to avoid dropping them while editing a label.
- * Only `kind: "secret"` settings are redacted, and the registry is static, so
- * one setting per profile was never an option.
- *
- * These rows are the answer: encrypted with the same `APP_SECRET` helper the
- * settings store uses, addressed by profile id, and never serialised into
- * anything the client receives.
- */
-
-/** The key for a profile, or null when none is stored. */
-export const getAiCredential = async (profileId: string, db: SqlClient = sql): Promise<string | null> => {
+/** Provider keys are encrypted at rest and never returned by an API. */
+export const getAiCredential = async (providerId: string, db: SqlClient = sql): Promise<string | null> => {
   const [row] = await db<{ secret: string }[]>`
-    SELECT secret FROM ai.model_credentials WHERE profile_id = ${profileId}
+    SELECT secret FROM ai.provider_credentials WHERE provider_id = ${providerId}
   `;
   if (!row) return null;
   try {
     const value = await decryptValue(row.secret);
     return typeof value === "string" && value.trim() ? value : null;
   } catch {
-    console.warn(`[ai] ignoring unreadable provider credential for profile ${JSON.stringify(profileId)}`);
+    console.warn(`[ai] ignoring unreadable provider credential for provider ${JSON.stringify(providerId)}`);
     return null;
   }
 };
 
-/** Store or replace a profile's key. */
-export const setAiCredential = async (profileId: string, secret: string, db: SqlClient = sql): Promise<void> => {
+/** Store or replace a provider's key. */
+export const setAiCredential = async (providerId: string, secret: string, db: SqlClient = sql): Promise<void> => {
   const encrypted = await encryptValue(secret);
   await db`
-    INSERT INTO ai.model_credentials (profile_id, secret)
-    VALUES (${profileId}, ${encrypted})
-    ON CONFLICT (profile_id) DO UPDATE
+    INSERT INTO ai.provider_credentials (provider_id, secret)
+    VALUES (${providerId}, ${encrypted})
+    ON CONFLICT (provider_id) DO UPDATE
       SET secret = EXCLUDED.secret,
           updated_at = now()
   `;
 };
 
-/** Profile ids whose stored key can currently be decrypted and used. */
-export const listAiCredentialProfileIds = async (db: SqlClient = sql): Promise<string[]> => {
-  const rows = await db<{ profile_id: string; secret: string }[]>`SELECT profile_id, secret FROM ai.model_credentials`;
-  const usable: string[] = [];
-  for (const row of rows) {
-    try {
-      const value = await decryptValue(row.secret);
-      if (typeof value === "string" && value.trim()) usable.push(row.profile_id);
-    } catch {
-      console.warn(`[ai] ignoring unreadable provider credential for profile ${JSON.stringify(row.profile_id)}`);
-    }
-  }
-  return usable;
-};
-
-/**
- * Drop keys for profiles that no longer exist.
- *
- * Profiles live in a JSON setting rather than a table, so there is no foreign
- * key to cascade from. Pruning on save keeps a deleted profile from leaving its
- * key behind, and makes recreating an id a clean slate rather than a silent
- * inheritance.
- */
-export const pruneAiCredentials = async (keepProfileIds: readonly string[], db: SqlClient = sql): Promise<void> => {
-  if (keepProfileIds.length === 0) {
-    await db`DELETE FROM ai.model_credentials`;
-    return;
-  }
-  await db`DELETE FROM ai.model_credentials WHERE profile_id <> ALL(${toPgTextArray([...keepProfileIds])}::text[])`;
-};
-
-/**
- * Separate provider keys from the profiles blob.
- *
- * Pure on purpose: the admin route and the one-time migration both need the
- * exact same split, and getting it wrong either leaks a key into a setting or
- * drops one on save. `profilesJson` is what may be stored; `credentials` is
- * what must go into the table; `profileIds` is what survives pruning.
- *
- * Unparseable input is handed back untouched — the settings validator owns that
- * error, and rewriting it here would replace the admin's parse message.
- */
-export const splitAiProfileCredentials = (
-  rawValue: unknown,
-): {
-  profilesJson: string;
-  credentials: Array<{ profileId: string; secret: string }>;
-  profileIds: string[];
-  requestHeaders: AiRequestHeaderPatch[];
-} | null => {
-  if (typeof rawValue !== "string") return null;
-  const text = rawValue;
-  let parsed: unknown;
-  try {
-    parsed = JSON.parse(text || "[]");
-  } catch {
-    return null;
-  }
-  if (!Array.isArray(parsed)) return null;
-
-  const profiles: unknown[] = [];
-  const credentials: Array<{ profileId: string; secret: string }> = [];
-  const profileIds: string[] = [];
-  const requestHeaders: AiRequestHeaderPatch[] = [];
-
-  for (const entry of parsed) {
-    if (!entry || typeof entry !== "object") {
-      profiles.push(entry);
-      continue;
-    }
-    const {
-      apiKey,
-      requestHeaders: headerPatch,
-      requestHeaderNames: _headerNames,
-      credentialSetting: _legacy,
-      ...profile
-    } = entry as Record<string, unknown>;
-    const profileId = typeof profile.id === "string" ? profile.id.trim() : "";
-    if (profileId) {
-      profile.id = profileId;
-      profileIds.push(profileId);
-      if (headerPatch !== undefined) requestHeaders.push({ profileId, patch: headerPatch });
-      if (typeof apiKey === "string" && apiKey.trim()) credentials.push({ profileId, secret: apiKey.trim() });
-    }
-    profiles.push(profile);
-  }
-
-  return { profilesJson: JSON.stringify(profiles), credentials, profileIds, requestHeaders };
+/** Provider IDs with a stored key; decrypt only the selected provider at execution. */
+export const listAiCredentialProviderIds = async (db: SqlClient = sql): Promise<string[]> => {
+  const rows = await db<{ provider_id: string }[]>`SELECT provider_id FROM ai.provider_credentials`;
+  return rows.map((row) => row.provider_id);
 };

package/src/ai/default-tool-contracts.ts

@@ -171,6 +171,7 @@ const chartKinds = (limits = true) => {
       kind: z.literal("bar"),
       ...ChartKindCommon,
       data: list(ChartCategory, 1, CLOUD_AI_CHART_MAX_VALUES),
+      xAxis: ChartAxis.pick({ label: true }).strict().optional(),
       yAxis: ChartAxis.optional(),
       colorByBar: z.boolean().optional(),
       showValues: z.boolean().optional(),
@@ -387,14 +388,14 @@ const flatChartSchema = () => {
       .max(CLOUD_AI_CHART_MAX_SERIES)
       .optional()
       .describe("line, scatter: label/data, optional reference role; line: style. Line needs 2 points per series."),
-    xAxis: ChartAxis.optional().describe("line, scatter: x axis."),
-    yAxis: ChartAxis.optional().describe("bar, line, scatter, boxplot: y axis."),
+    xAxis: ChartAxis.optional().describe("line, scatter: x axis. bar: only label, the category axis title."),
+    yAxis: ChartAxis.optional().describe("bar, line, scatter, boxplot: y axis; label names the value, format sets units."),
     legend: z
       .boolean()
       .optional()
       .describe("bar (colorByBar), line, scatter, pie, donut: legend; defaults to several series or unlabeled slices."),
     colorByBar: z.boolean().optional().describe("bar: one palette color per bar."),
-    showValues: z.boolean().optional().describe("bar, heatmap: print values."),
+    showValues: z.boolean().optional().describe("bar: print values, by default when they stay readable. heatmap: print values."),
     area: z.boolean().optional().describe("line, sparkline: fill under the line."),
     smooth: z.boolean().optional().describe("line: smooth curves."),
     showLabels: z.boolean().optional().describe("pie, donut: name slices next to them."),

package/src/ai/dictation-runtime.ts

@@ -1,5 +1,6 @@
 import { sql } from "bun";
 import { lazySync } from "../_internal/process-sync";
+import { get as getUser } from "../services/accounts/users";
 import { logger, trace } from "../services/logging";
 import { superviseRuntimeTask } from "../services/runtime-lifecycle";
 import { aiModelAccess } from "./model-access";
@@ -43,7 +44,7 @@ export const isRetryableDictationError = (error: unknown): boolean => {
 export const processAiDictation = async (
   id: string,
   signal: AbortSignal,
-  run: (input: RunAiTranscriptionInput) => Promise<{ text: string; modelProfileId: string }> = runAiTranscription,
+  run: (input: RunAiTranscriptionInput) => Promise<{ text: string; modelId: string }> = runAiTranscription,
 ): Promise<void> => {
   const token = crypto.randomUUID();
   const [task] = await sql<ClaimedDictation[]>`
@@ -57,7 +58,7 @@ export const processAiDictation = async (
     name: "ai.dictation",
     source: "ai:dictations",
     category: "ai",
-    attributes: { dictationId: id, conversationId: task.conversation_id, modelProfileId: task.model_profile_id, attempt: task.attempts },
+    attributes: { dictationId: id, conversationId: task.conversation_id, modelId: task.model_profile_id, attempt: task.attempts },
   });
   let failure: AiTranscriptionError | undefined;
   const canceled = new AbortController();
@@ -85,14 +86,17 @@ export const processAiDictation = async (
     if (!conversation) throw new Error("Conversation unavailable.");
     const subject = { type: "user" as const, userId: task.user_id };
     await aiModelAccess.assertAllowed(task.model_profile_id, subject);
-    if (conversation.project_id && !(await aiProjects.snapshot(conversation.project_id, subject)))
-      throw new Error("Project access unavailable.");
+    if (conversation.project_id) {
+      const user = await getUser({ id: task.user_id });
+      if (!user || !(await aiProjects.snapshot(conversation.project_id, { actor: { kind: "user", user }, accessSubject: subject })))
+        throw new Error("Project access unavailable.");
+    }
     const result = await run({
       task: "dictation",
       traceParent: span,
       file: new Blob([new Uint8Array(task.source_bytes)]),
       filename: task.source_path,
-      requestedModelId: task.model_profile_id,
+      model: { id: task.model_profile_id },
       language: task.language ?? undefined,
       signal: combined,
       attribution: { userId: task.user_id, conversationId: task.conversation_id },
@@ -109,7 +113,7 @@ export const processAiDictation = async (
     log[combined.aborted ? "info" : retry ? "warn" : "error"](failure.message, {
       dictationId: id,
       traceId: span.traceId,
-      modelProfileId: task.model_profile_id,
+      modelId: task.model_profile_id,
       attempt: task.attempts,
       retry,
       errorCode: failure.code,

package/src/ai/enrich.ts

@@ -151,7 +151,7 @@ export const enrichDirtyAiConversations = async (input: {
   // Resolve the background model once per run; AI disabled / no model = quiet no-op.
   let resolved: AiResolvedModel;
   try {
-    resolved = await (input.deps?.resolveModel ?? resolveAiBackgroundModel)();
+    resolved = await (input.deps?.resolveModel ?? resolveAiBackgroundModel)({ class: "fast" });
   } catch (error) {
     log.info("Enrichment skipped: no background model available", {
       error: error instanceof Error ? error.message : String(error),
@@ -224,7 +224,7 @@ export const enrichDirtyAiConversations = async (input: {
       conversationId: conversation.id,
       status: "ok",
       trigger,
-      modelProfileId: result.modelProfileId,
+      modelId: result.model.id,
       mode: result.structuredMeta.mode,
       durationMs: Date.now() - startedAt,
       titleUpdated: applyTitle,

package/src/ai/executor.ts

@@ -7,10 +7,11 @@ import { CapabilityActionReviewDataSchema, capabilityActionPolicy } from "../con
 import type { AccessSubject, RequestActor } from "../server";
 import { approvalAssurance, approvalScopeFromToolName, approvals } from "../services/approvals";
 import { createHelpReader } from "../services/help";
-import { logger } from "../services/logging";
+import { logger, trace } from "../services/logging";
 import { getMandate } from "../services/mandates";
 import type { MandatePolicyV1 } from "../services/mandates/policy";
 import { coreSettings } from "../services/settings/api";
+import type { AiModelRequest } from "../shared/ai-models";
 import { normalizeLocale } from "../shared/locale";
 import { type AiActionCheck, type AiStoredActionReview, storedActionReview } from "./action-review";
 import {
@@ -56,6 +57,7 @@ import { answerOpenToolCalls } from "./open-tool-calls";
 import { type AiUserPrefs, aiActorUser, aiUserPrefs } from "./prefs";
 import { createCloudAiReadProjectKnowledgeTool, createCloudAiSearchProjectTool } from "./project-tool";
 import { aiProjects } from "./projects";
+import type { AiResourceContext } from "./projects-authorization";
 import {
   AI_TURN_LEASE_MS,
   type AiTurnBlock,
@@ -305,6 +307,11 @@ const accessSubjectForActor = (actor: RequestActor | undefined): AccessSubject |
   return { type: "service_account", serviceAccountId: actor.serviceAccount.id };
 };
 
+const resourceContextForActor = (actor: RequestActor | undefined): AiResourceContext | null => {
+  const accessSubject = accessSubjectForActor(actor);
+  return actor && accessSubject ? { actor, accessSubject } : null;
+};
+
 export type ExecutorConfig = {
   leaseOwner: string;
   heartbeatMs: number;
@@ -703,7 +710,7 @@ type MaterializedChatConfig = {
   tools: AiRuntimeTool[];
   toolApprovalContext?: AiToolApprovalContext;
   modelPolicy: AiChatTurnRunConfig["modelPolicy"];
-  requestedModelId?: string;
+  model?: AiModelRequest;
 };
 
 const materializeChatConfig = async (config: AiChatTurnRunConfig, signal: AbortSignal, turnId: string): Promise<MaterializedChatConfig> => {
@@ -723,7 +730,7 @@ const materializeChatConfig = async (config: AiChatTurnRunConfig, signal: AbortS
         : [],
     toolApprovalContext: config.toolApprovalContext,
     modelPolicy: config.modelPolicy,
-    requestedModelId: config.requestedModelId,
+    model: config.model,
   };
 };
 
@@ -753,7 +760,7 @@ export class AiTurnExecutor {
     const runConfig = claim.runConfig;
     if (!runConfig) {
       pipeline.seedBaseline(claim.liveBlocks ?? []);
-      await pipeline.emitTurnStarted(claim.turn.modelProfileId ?? "");
+      await pipeline.emitTurnStarted(claim.turn.modelId ?? "");
       await pipeline.emitBaseline();
       await this.finalize(
         conversationId,
@@ -768,7 +775,7 @@ export class AiTurnExecutor {
 
     if (runConfig.kind === "compact") {
       pipeline.seedBaseline(claim.liveBlocks ?? []);
-      await pipeline.emitTurnStarted(claim.turn.modelProfileId ?? "");
+      await pipeline.emitTurnStarted(claim.turn.modelId ?? "");
       await pipeline.emitBaseline();
       await this.runCompaction(conversationId, turnId, pipeline, runConfig, signal);
       return;
@@ -779,7 +786,7 @@ export class AiTurnExecutor {
       attemptState = await loadChatAttemptState(conversationId, turnId);
     } catch (error) {
       pipeline.seedBaseline(claim.liveBlocks ?? []);
-      await pipeline.emitTurnStarted(claim.turn.modelProfileId ?? "");
+      await pipeline.emitTurnStarted(claim.turn.modelId ?? "");
       await pipeline.emitBaseline();
       await this.finalize(
         conversationId,
@@ -793,7 +800,7 @@ export class AiTurnExecutor {
       return;
     }
     pipeline.seedBaseline(rebuildAttemptBaseline(attemptState));
-    await pipeline.emitTurnStarted(claim.turn.modelProfileId ?? "");
+    await pipeline.emitTurnStarted(claim.turn.modelId ?? "");
     await pipeline.emitBaseline();
     await this.runChat(conversationId, turnId, claim, runConfig, pipeline, signal, false, attemptState);
   }
@@ -882,16 +889,13 @@ export class AiTurnExecutor {
       if (allowed) material.tools = material.tools.filter((tool) => allowed.has(tool.def.name));
       chatId ||= conversation?.shortId ?? "";
       if (config.project) {
-        const subject = accessSubjectForActor(material.actor);
+        const subject = resourceContextForActor(material.actor);
         const project = subject ? await aiProjects.getByShortId(config.project.id, subject, "read") : null;
         if (!project) {
           throw new AiTurnFailure("not_allowed", "Project access is no longer available.");
         }
         resolvedProjectId = project.id;
       }
-      if (isAssistantChatTurn(config) && claim.turn.modelProfileId) {
-        await aiModelAccess.assertAllowed(claim.turn.modelProfileId, accessSubjectForActor(material.actor));
-      }
       validated = await (this.config.validateTurn ?? validateAiTurnRequest)({
         input: config.input,
         hasImageAttachments: config.files?.attached.some((file) => isAiImageMediaType(file.mediaType)),
@@ -899,12 +903,10 @@ export class AiTurnExecutor {
           material.tools.some((tool) => tool.def.name === "view_image") &&
           (await isAiVisionModelConfigured(material.modelPolicy?.allowedDataBoundaries)),
         modelPolicy: material.modelPolicy,
-        requestedModelId: isAssistantChatTurn(config)
-          ? (claim.turn.modelProfileId ?? material.requestedModelId)
-          : material.requestedModelId,
+        model: claim.turn.modelId ? { id: claim.turn.modelId } : material.model,
       });
       if (isAssistantChatTurn(config)) {
-        await aiModelAccess.assertAllowed(validated.resolved.profile.id, accessSubjectForActor(material.actor));
+        await aiModelAccess.assertAllowed(validated.resolved.profile.modelId, accessSubjectForActor(material.actor));
       }
     } catch (error) {
       signal.removeEventListener("abort", onSignal);
@@ -920,6 +922,11 @@ export class AiTurnExecutor {
       return;
     }
     const { settings, resolved } = validated;
+    if (config.modelResolved?.id === resolved.profile.id) resolved.model = config.modelResolved;
+    await trace.record({
+      event: "model.resolved",
+      attributes: { ...resolved.model, resolvedClass: resolved.model.class, turnId, conversationId },
+    });
 
     const defaultToolSource = config.toolSource?.kind === "default" ? config.toolSource : null;
     const toolActor =
@@ -965,11 +972,11 @@ export class AiTurnExecutor {
     const timeZone = String((await coreSettings.get<string>("app.timezone")) || "").trim() || "UTC";
     const promptLocale = normalizeLocale(config.locale ?? (await coreSettings.get<string>("app.locale")));
     const project = config.project;
-    const projectSubject = project ? accessSubjectForActor(material.actor) : null;
+    const projectSubject = project ? resourceContextForActor(material.actor) : null;
     // Skills are an Assistant/default-tool capability. Custom and structured
     // executions must not gain an implicit database dependency or extra tools.
     const skillSubject =
-      defaultToolSource && resolved.profile.capabilities.includes("tools") ? accessSubjectForActor(material.actor) : null;
+      defaultToolSource && resolved.profile.capabilities.includes("tools") ? resourceContextForActor(material.actor) : null;
     const availableSkills = skillSubject
       ? (await aiSkills.list(skillSubject, { authority: toolAuthority })).filter((skill) => skill.enabled)
       : [];
@@ -1187,7 +1194,7 @@ export class AiTurnExecutor {
         await pipeline.emitMessage(message);
       },
       conversationId,
-      modelProfileId: resolved.profile.id,
+      modelId: resolved.profile.id,
       turnId,
       leaseOwner: this.config.leaseOwner,
       turnInput,
@@ -1591,7 +1598,9 @@ export class AiTurnExecutor {
       provider: acceptCanonicalToolNames(
         retryTransientProviderErrors(
           rememberProviderErrors(
-            answerOpenToolCalls(assistantQuotaProvider(resolved.provider, config, quotaSubject, resolved.profile, turnId, conversationId)),
+            answerOpenToolCalls(
+              assistantQuotaProvider(resolved.provider, config, quotaSubject, resolved.profile, turnId, conversationId, resolved.model),
+            ),
             remember,
           ),
           {
@@ -1659,7 +1668,7 @@ export class AiTurnExecutor {
         : createCloudCompactFn({
             conversationId,
             turnId,
-            modelProfileId: resolved.profile.id,
+            modelId: resolved.profile.id,
             additionalInstructions: settings.compactionInstructions,
             maxOutputTokens: resolved.profile.maxOutputTokens,
             signal: abortController.signal,
@@ -2220,7 +2229,7 @@ export class AiTurnExecutor {
       validated = await (this.config.validateTurn ?? validateAiTurnRequest)({
         input: "",
         modelPolicy: config.modelPolicy,
-        requestedModelId: config.requestedModelId,
+        model: config.model,
       });
     } catch (error) {
       signal.removeEventListener("abort", onSignal);
@@ -2228,10 +2237,15 @@ export class AiTurnExecutor {
       return;
     }
     const { settings, resolved } = validated;
+    if (config.modelResolved?.id === resolved.profile.id) resolved.model = config.modelResolved;
+    await trace.record({
+      event: "model.resolved",
+      attributes: { ...resolved.model, resolvedClass: resolved.model.class, turnId, conversationId },
+    });
 
     const store = aiConversations.createSessionStore({
       conversationId,
-      modelProfileId: resolved.profile.id,
+      modelId: resolved.profile.id,
       turnId,
       leaseOwner: this.config.leaseOwner,
     });
@@ -2244,6 +2258,7 @@ export class AiTurnExecutor {
         inferenceProvider(resolved.provider, resolved.profile, {
           kind: "background",
           task: "chat-compaction",
+          modelRef: resolved.model,
           conversationId,
           turnId,
           appId: "core",
@@ -2257,7 +2272,7 @@ export class AiTurnExecutor {
       compact: createCloudCompactFn({
         conversationId,
         turnId,
-        modelProfileId: resolved.profile.id,
+        modelId: resolved.profile.id,
         additionalInstructions: settings.compactionInstructions,
         maxOutputTokens: resolved.profile.maxOutputTokens,
         signal: abortController.signal,
@@ -2430,10 +2445,10 @@ class StreamPipeline {
     await this.maybeSnapshot();
   }
 
-  async emitTurnStarted(modelProfileId: string): Promise<void> {
+  async emitTurnStarted(modelId: string): Promise<void> {
     const seq = this.nextSeq();
     await this.publish(
-      this.envelope({ type: "turn_started" as const, seq, modelProfileId, providerModel: "", blocks: this.blocks }) as AiWireEvent,
+      this.envelope({ type: "turn_started" as const, seq, modelId, providerModel: "", blocks: this.blocks }) as AiWireEvent,
     );
   }
 

package/src/ai/http.ts

@@ -3,6 +3,7 @@ import type { Context } from "hono";
 import { z } from "zod";
 import { CapabilityAppIdSchema } from "../contracts/capabilities";
 import { type AuthContext, err, fail, respond } from "../server";
+import { AiModelRequestSchema } from "../shared/ai-models";
 import { aiAttachmentMarker } from "./attachments";
 import { CODE_RUNTIME_TOOL_NAMES } from "./browser-code-contracts";
 import { AI_TURN_ATTACHMENT_MAX_ITEMS } from "./limits";
@@ -11,13 +12,7 @@ import { AiQuotaError } from "./quotas";
 import { AiResourceMarkerSchema } from "./resource-markers";
 import { AI_SHORT_ID_PATTERN } from "./short-id";
 import { AI_SKILL_NAME_MAX_CHARS, AI_SKILL_NAME_PATTERN } from "./skill-format";
-import {
-  AI_MESSAGE_FEEDBACK_REASONS,
-  type AiClientToolId,
-  type AiDraftContentPart,
-  type AiSettingsError,
-  type AiUserContentPart,
-} from "./types";
+import { AI_MESSAGE_FEEDBACK_REASONS, type AiClientToolId, type AiDraftContentPart, type AiUserContentPart } from "./types";
 import { isAiSettingsError } from "./validate";
 
 export const AiDraftContentPartSchema = z.discriminatedUnion("type", [
@@ -144,9 +139,10 @@ export const AiTurnInputSchema = z
       .min(1)
       .max(AI_TURN_ATTACHMENT_MAX_ITEMS * 2 + 1)
       .optional(),
-    modelProfileId: z.string().trim().min(1).optional(),
+    model: AiModelRequestSchema.optional(),
     clientToolIds: AiClientToolIdsSchema.optional(),
   })
+  .strict()
   .refine((input) => Boolean(input.message?.trim() || input.content?.length), {
     message: "Message or content is required.",
     path: ["message"],
@@ -166,13 +162,14 @@ export const AiSubmitConversationDraftInputSchema = z
   .object({
     queueId: z.uuid().optional(),
     draftRevision: z.number().int().min(1),
-    modelProfileId: z.string().trim().min(1).optional(),
+    model: AiModelRequestSchema.optional(),
     clientToolIds: AiClientToolIdsSchema.optional(),
     /** Set by a local client such as cld; the web never sends it. */
     client: AiLocalClientSchema.optional(),
     /** AGENTS.md files and local Skills a local client found; only valid together with client. */
     localContext: AiLocalContextSchema.optional(),
   })
+  .strict()
   .refine((input) => !input.localContext || Boolean(input.client), {
     message: "Local context requires a local client.",
     path: ["localContext"],
@@ -183,9 +180,11 @@ export const AiSteerInputSchema = z.object({
   clientRequestId: z.string().trim().min(1).max(120),
 });
 
-export const AiCompactionInputSchema = z.object({
-  modelProfileId: z.string().trim().min(1).optional(),
-});
+export const AiCompactionInputSchema = z
+  .object({
+    model: AiModelRequestSchema.optional(),
+  })
+  .strict();
 
 export type AiCompactionInput = z.infer<typeof AiCompactionInputSchema>;
 
@@ -200,11 +199,12 @@ export const AiMessageRetryInputSchema = z
       .min(1)
       .max(AI_TURN_ATTACHMENT_MAX_ITEMS * 2 + 1)
       .optional(),
-    modelProfileId: z.string().trim().min(1).optional(),
+    model: AiModelRequestSchema.optional(),
     clientToolIds: AiClientToolIdsSchema.optional(),
     client: AiLocalClientSchema.optional(),
     localContext: AiLocalContextSchema.omit({ selectedSkills: true }).optional(),
   })
+  .strict()
   .refine((input) => !input.localContext || Boolean(input.client), {
     message: "Local context requires a local client.",
     path: ["localContext"],
@@ -268,25 +268,13 @@ export const AiApiErrorSchema = z.object({
 
 const conflict = (message: string) => ({ code: "CONFLICT" as const, message, status: 409 as const });
 
-const aiSettingsServiceError = (error: AiSettingsError) => {
-  switch (error.code) {
-    case "model_access_denied":
-      return err.forbidden(error.message);
-    case "invalid_model_profiles":
-    case "model_policy_mismatch":
-      return err.badInput(error.message);
-    case "ai_disabled":
-    case "missing_default_model":
-    case "default_model_disabled":
-    case "missing_provider_credential":
-      return conflict(error.message);
-  }
-};
-
 export const toAiErrorResponse = (c: Context<AuthContext>, error: unknown) => {
   if (error instanceof AiQuotaError) return c.json({ ok: false, error: error.message, message: error.message, code: error.code }, 429);
   if (isAiSettingsError(error)) {
-    return respond(c, fail(aiSettingsServiceError(error.aiError)));
+    return c.json(
+      { ok: false, code: error.aiError.code, message: error.aiError.message, error: error.aiError.message },
+      error.aiError.code === "model_policy_mismatch" ? 400 : 409,
+    );
   }
   const message = error instanceof Error ? error.message : "AI request failed";
   if (message.includes("idx_ai_turns_one_active")) return respond(c, fail(err.conflict("Running turn")));

package/src/ai/index.ts

@@ -1,4 +1,13 @@
+export * from "../shared/ai-models";
 export { type AiAppSkillIssue, aiAppSkills, appSkillsRegistryState, reconcileAppSkills } from "./app-skill-store";
+export {
+  type ApplicationAiTaskInput,
+  type ApplicationAiTaskKey,
+  deleteApplicationAiTasks,
+  listUnreleasedApplicationAiTaskSources,
+  releaseApplicationAiTask,
+  runApplicationAiTask,
+} from "./application-tasks";
 export { type AiApprovalPreferenceRoutes, type AiApprovalPreferenceView, createAiApprovalPreferenceRoutes } from "./approval-routes";
 export {
   AI_WEBSITE_APPROVAL_TOOL,
@@ -19,7 +28,7 @@ export {
   rememberAiToolApproval,
   revokeAiToolApprovalPreference,
 } from "./approvals";
-export { assistantAiSettingsState, listAssistantAiModels, selectAssistantAiModelId } from "./assistant-models";
+export { assistantAiSettingsState, listAssistantAiModels, peopleAiModels, selectAssistantAiModel } from "./assistant-models";
 export { type AiAttachmentRef, aiAttachmentMarker, formatAiFileSize, parseAiAttachmentMarkers } from "./attachments";
 export { CloudAiTranscribeAudioInputSchema, CloudAiTranscribeAudioOutputSchema, createCloudAiTranscribeAudioTool } from "./audio-tool";
 export { AiBackgroundApprovalRequiredError, authorizeBackgroundAction } from "./background-review";
@@ -65,7 +74,7 @@ export { parseAiSse } from "./client/transport";
 export { CODE_CAPABILITY_TOKEN_HEADER, createCodeCapabilityTransport } from "./code-capability-transport";
 export { authorizeCodeExecution } from "./code-execution";
 export { CODE_SOURCE_TOOLS, type CodeSourceToolName } from "./code-source-contracts";
-export { listAiCredentialProfileIds } from "./credentials";
+export { listAiCredentialProviderIds } from "./credentials";
 export {
   CLOUD_AI_CHART_MAX_SERIES,
   CLOUD_AI_CHART_MAX_VALUES,
@@ -281,6 +290,7 @@ export {
   type AiProjectReference,
   aiProjects,
 } from "./projects";
+export { type AiResourceContext, AiResourceCredentialError } from "./projects-authorization";
 export {
   type AiProjectsRoutes,
   aiProjectsRoutes,
@@ -306,7 +316,6 @@ export {
   listAiModels,
   readAiSettingsState,
   resolveAiModel,
-  resolveAiSettingsStateFromRaw,
   resolveAiVisionModel,
   selectAiModelProfile,
   toPublicAiSettingsState,
@@ -365,7 +374,6 @@ export {
   streamAiConversationEvents,
 } from "./stream";
 export {
-  AI_BACKGROUND_MODEL_SETTING_KEY,
   type RunAiStructuredInput,
   type RunAiStructuredResult,
   resolveAiBackgroundModel,
@@ -420,7 +428,6 @@ export type {
   AiPendingTurnAction,
   AiProjectPromptSnapshot,
   AiProviderId,
-  AiPublicModelProfile,
   AiRecentResource,
   AiResolvedModel,
   AiRuntimeTool,