@lenne.tech/nest-server 11.25.6 → 11.26.0

package/dist/core/modules/ai/services/core-ai-tool-grant.service.js

@@ -0,0 +1,97 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var CoreAiToolGrantService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CoreAiToolGrantService = exports.AI_TOOL_GRANT_CLASS = exports.AI_TOOL_GRANT_MODEL = void 0;
+const common_1 = require("@nestjs/common");
+const mongoose_1 = require("@nestjs/mongoose");
+const mongoose_2 = require("mongoose");
+const crud_service_1 = require("../../../common/services/crud.service");
+exports.AI_TOOL_GRANT_MODEL = 'AiToolGrant';
+exports.AI_TOOL_GRANT_CLASS = 'AI_TOOL_GRANT_CLASS';
+let CoreAiToolGrantService = CoreAiToolGrantService_1 = class CoreAiToolGrantService extends crud_service_1.CrudService {
+    mainDbModel;
+    mainModelConstructor;
+    logger = new common_1.Logger(CoreAiToolGrantService_1.name);
+    constructor(mainDbModel, mainModelConstructor) {
+        super();
+        this.mainDbModel = mainDbModel;
+        this.mainModelConstructor = mainModelConstructor;
+    }
+    async findActiveGrant(tool, scopes) {
+        if (!tool) {
+            return undefined;
+        }
+        const candidates = [];
+        if (scopes.conversationId)
+            candidates.push({ refId: scopes.conversationId, scope: 'conversation' });
+        if (scopes.userId)
+            candidates.push({ refId: scopes.userId, scope: 'user' });
+        if (scopes.tenantId)
+            candidates.push({ refId: scopes.tenantId, scope: 'tenant' });
+        if (!candidates.length) {
+            return undefined;
+        }
+        const now = new Date();
+        for (const c of candidates) {
+            try {
+                const grant = await this.mainDbModel
+                    .findOne({
+                    $or: [{ expiresAt: { $exists: false } }, { expiresAt: null }, { expiresAt: { $gt: now } }],
+                    decision: { $ne: 'deny' },
+                    enabled: { $ne: false },
+                    refId: c.refId,
+                    scope: c.scope,
+                    tool,
+                })
+                    .lean()
+                    .exec();
+                if (grant) {
+                    return c.scope;
+                }
+            }
+            catch {
+            }
+        }
+        return undefined;
+    }
+    async grant(tool, scope, refId, options) {
+        if (!tool || !refId) {
+            return;
+        }
+        try {
+            await this.mainDbModel
+                .updateOne({ refId, scope, tool }, {
+                $set: {
+                    decision: 'allow',
+                    enabled: true,
+                    expiresAt: options?.expiresAt ?? null,
+                },
+                $setOnInsert: { refId, scope, tool },
+            }, { upsert: true })
+                .exec();
+        }
+        catch (err) {
+            this.logger.warn(`Could not persist tool grant (${scope}:${refId}:${tool}): ${err.message}`);
+        }
+    }
+};
+exports.CoreAiToolGrantService = CoreAiToolGrantService;
+exports.CoreAiToolGrantService = CoreAiToolGrantService = CoreAiToolGrantService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, mongoose_1.InjectModel)(exports.AI_TOOL_GRANT_MODEL)),
+    __param(1, (0, common_1.Inject)(exports.AI_TOOL_GRANT_CLASS)),
+    __metadata("design:paramtypes", [mongoose_2.Model, Object])
+], CoreAiToolGrantService);
+//# sourceMappingURL=core-ai-tool-grant.service.js.map

package/dist/core/modules/ai/services/core-ai-tool-grant.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-ai-tool-grant.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/ai/services/core-ai-tool-grant.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA4D;AAC5D,+CAA+C;AAC/C,uCAAiC;AAEjC,wEAAoE;AAKvD,QAAA,mBAAmB,GAAG,aAAa,CAAC;AAEpC,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;AAclD,IAAM,sBAAsB,8BAA5B,MAAM,sBAAuB,SAAQ,0BAA8D;IAIxC;IAElC;IALX,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAEpE,YACgE,WAAuC,EAEzE,oBAA2D;QAEvF,KAAK,EAAE,CAAC;QAJsD,gBAAW,GAAX,WAAW,CAA4B;QAEzE,yBAAoB,GAApB,oBAAoB,CAAuC;IAGzF,CAAC;IAOD,KAAK,CAAC,eAAe,CACnB,IAAY,EACZ,MAAuE;QAEvE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,UAAU,GAAiD,EAAE,CAAC;QACpE,IAAI,MAAM,CAAC,cAAc;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACpG,IAAI,MAAM,CAAC,MAAM;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,QAAQ;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW;qBACjC,OAAO,CAAC;oBACP,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;oBAC1F,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;oBACzB,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;oBACvB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,IAAI;iBACL,CAAC;qBACD,IAAI,EAAmB;qBACvB,IAAI,EAAE,CAAC;gBACV,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,CAAC,KAAK,CAAC;gBACjB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAMD,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,KAAuB,EAAE,KAAa,EAAE,OAA8B;QAC9F,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW;iBACnB,SAAS,CACR,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EACtB;gBACE,IAAI,EAAE;oBACJ,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI;iBACtC;gBACD,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE;aACrC,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB;iBACA,IAAI,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,KAAK,IAAI,KAAK,IAAI,IAAI,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;CACF,CAAA;AAjFY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,sBAAW,EAAC,2BAAmB,CAAC,CAAA;IAChC,WAAA,IAAA,eAAM,EAAC,2BAAmB,CAAC,CAAA;qCAD+C,gBAAK;GAJvE,sBAAsB,CAiFlC"}

package/dist/core/modules/ai/services/core-ai-tool-policy.service.d.ts

@@ -0,0 +1,23 @@
+import { Logger } from '@nestjs/common';
+import { Model } from 'mongoose';
+import { CrudService } from '../../../common/services/crud.service';
+import { CoreModelConstructor } from '../../../common/types/core-model-constructor.type';
+import { AiToolPolicyDocument, CoreAiToolPolicy } from '../models/core-ai-tool-policy.model';
+export declare const AI_TOOL_POLICY_MODEL = "AiToolPolicy";
+export declare const AI_TOOL_POLICY_CLASS = "AI_TOOL_POLICY_CLASS";
+export interface AiToolPolicyDecision {
+    decision: 'allow' | 'ask' | 'deny';
+    reason?: string;
+}
+export interface AiToolPolicyEvalContext {
+    roles: string[];
+    tenantId?: string;
+    userId?: string;
+}
+export declare class CoreAiToolPolicyService extends CrudService<CoreAiToolPolicy, CoreAiToolPolicy, CoreAiToolPolicy> {
+    protected readonly mainDbModel: Model<AiToolPolicyDocument>;
+    protected readonly mainModelConstructor: CoreModelConstructor<CoreAiToolPolicy>;
+    protected readonly logger: Logger;
+    constructor(mainDbModel: Model<AiToolPolicyDocument>, mainModelConstructor: CoreModelConstructor<CoreAiToolPolicy>);
+    evaluate(tool: string, args: Record<string, any>, ctx: AiToolPolicyEvalContext): Promise<AiToolPolicyDecision | undefined>;
+}

package/dist/core/modules/ai/services/core-ai-tool-policy.service.js

@@ -0,0 +1,102 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var CoreAiToolPolicyService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CoreAiToolPolicyService = exports.AI_TOOL_POLICY_CLASS = exports.AI_TOOL_POLICY_MODEL = void 0;
+const common_1 = require("@nestjs/common");
+const mongoose_1 = require("@nestjs/mongoose");
+const mongoose_2 = require("mongoose");
+const crud_service_1 = require("../../../common/services/crud.service");
+exports.AI_TOOL_POLICY_MODEL = 'AiToolPolicy';
+exports.AI_TOOL_POLICY_CLASS = 'AI_TOOL_POLICY_CLASS';
+let CoreAiToolPolicyService = CoreAiToolPolicyService_1 = class CoreAiToolPolicyService extends crud_service_1.CrudService {
+    mainDbModel;
+    mainModelConstructor;
+    logger = new common_1.Logger(CoreAiToolPolicyService_1.name);
+    constructor(mainDbModel, mainModelConstructor) {
+        super();
+        this.mainDbModel = mainDbModel;
+        this.mainModelConstructor = mainModelConstructor;
+    }
+    async evaluate(tool, args, ctx) {
+        if (!tool) {
+            return undefined;
+        }
+        const refCandidates = [
+            { scope: 'tool' },
+            ...(ctx.userId ? [{ refId: ctx.userId, scope: 'user' }] : []),
+            ...(ctx.tenantId ? [{ refId: ctx.tenantId, scope: 'tenant' }] : []),
+            ...ctx.roles.map((r) => ({ refId: r, scope: 'role' })),
+        ];
+        let policies = [];
+        try {
+            policies = await this.mainDbModel
+                .find({
+                $or: refCandidates.map((c) => ({ refId: c.refId ?? null, scope: c.scope })),
+                enabled: { $ne: false },
+                tool,
+            })
+                .lean()
+                .exec();
+        }
+        catch {
+            return undefined;
+        }
+        if (!policies.length) {
+            return undefined;
+        }
+        let denyDecision;
+        let askDecision;
+        let allowDecision;
+        for (const policy of policies) {
+            for (const rule of policy.rules || []) {
+                if (!rule?.argument || !rule?.pattern || !rule?.action) {
+                    continue;
+                }
+                const value = args?.[rule.argument];
+                if (value === undefined || value === null) {
+                    continue;
+                }
+                let re;
+                try {
+                    re = new RegExp(rule.pattern, rule.flags || '');
+                }
+                catch {
+                    continue;
+                }
+                if (!re.test(String(value))) {
+                    continue;
+                }
+                if (rule.action === 'deny') {
+                    denyDecision = { decision: 'deny', reason: rule.reason };
+                }
+                else if (rule.action === 'ask') {
+                    askDecision ??= { decision: 'ask', reason: rule.reason };
+                }
+                else if (rule.action === 'allow') {
+                    allowDecision ??= { decision: 'allow', reason: rule.reason };
+                }
+            }
+        }
+        return denyDecision ?? askDecision ?? allowDecision;
+    }
+};
+exports.CoreAiToolPolicyService = CoreAiToolPolicyService;
+exports.CoreAiToolPolicyService = CoreAiToolPolicyService = CoreAiToolPolicyService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, mongoose_1.InjectModel)(exports.AI_TOOL_POLICY_MODEL)),
+    __param(1, (0, common_1.Inject)(exports.AI_TOOL_POLICY_CLASS)),
+    __metadata("design:paramtypes", [mongoose_2.Model, Object])
+], CoreAiToolPolicyService);
+//# sourceMappingURL=core-ai-tool-policy.service.js.map

package/dist/core/modules/ai/services/core-ai-tool-policy.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-ai-tool-policy.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/ai/services/core-ai-tool-policy.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA4D;AAC5D,+CAA+C;AAC/C,uCAAiC;AAEjC,wEAAoE;AAKvD,QAAA,oBAAoB,GAAG,cAAc,CAAC;AAEtC,QAAA,oBAAoB,GAAG,sBAAsB,CAAC;AA4BpD,IAAM,uBAAuB,+BAA7B,MAAM,uBAAwB,SAAQ,0BAAiE;IAI3C;IAEnC;IALX,MAAM,GAAG,IAAI,eAAM,CAAC,yBAAuB,CAAC,IAAI,CAAC,CAAC;IAErE,YACiE,WAAwC,EAE3E,oBAA4D;QAExF,KAAK,EAAE,CAAC;QAJuD,gBAAW,GAAX,WAAW,CAA6B;QAE3E,yBAAoB,GAApB,oBAAoB,CAAwC;IAG1F,CAAC;IAUD,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,IAAyB,EACzB,GAA4B;QAE5B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,aAAa,GAAwC;YACzD,EAAE,KAAK,EAAE,MAAM,EAAE;YACjB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;SACvD,CAAC;QAEF,IAAI,QAAQ,GAAuB,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW;iBAC9B,IAAI,CAAC;gBACJ,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC3E,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;gBACvB,IAAI;aACL,CAAC;iBACD,IAAI,EAAsB;iBAC1B,IAAI,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,YAA8C,CAAC;QACnD,IAAI,WAA6C,CAAC;QAClD,IAAI,aAA+C,CAAC;QAEpD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACtC,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBACvD,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC1C,SAAS;gBACX,CAAC;gBACD,IAAI,EAAU,CAAC;gBACf,IAAI,CAAC;oBACH,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAClD,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC3B,YAAY,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC3D,CAAC;qBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;oBACjC,WAAW,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC3D,CAAC;qBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBACnC,aAAa,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,YAAY,IAAI,WAAW,IAAI,aAAa,CAAC;IACtD,CAAC;CACF,CAAA;AApFY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,sBAAW,EAAC,4BAAoB,CAAC,CAAA;IACjC,WAAA,IAAA,eAAM,EAAC,4BAAoB,CAAC,CAAA;qCAD+C,gBAAK;GAJxE,uBAAuB,CAoFnC"}

package/dist/core/modules/ai/services/core-ai.service.d.ts

@@ -0,0 +1,144 @@
+import { Logger } from '@nestjs/common';
+import { ServiceOptions } from '../../../common/interfaces/service-options.interface';
+import { AiToolAuthorization, AiToolContext, IAiTool } from '../interfaces/ai-tool.interface';
+import { LlmMessage, LlmResponse, LlmToolCall } from '../interfaces/llm-provider.interface';
+import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface';
+import { CoreAiAction } from '../models/core-ai-action.model';
+import { CoreAiResponse } from '../models/core-ai-response.model';
+import { CoreAiPromptInput } from '../inputs/core-ai-prompt.input';
+import { LlmProviderFactory } from '../providers/llm-provider.factory';
+import { AiHookRegistry } from '../hooks/ai-hook.registry';
+import { AiToolRegistry } from '../tools/ai-tool.registry';
+import { CoreAiBudgetService } from './core-ai-budget.service';
+import { CoreAiConnectionResolverService } from './core-ai-connection-resolver.service';
+import { CoreAiConnectionService } from './core-ai-connection.service';
+import { CoreAiConversationService } from './core-ai-conversation.service';
+import { CoreAiInteractionService } from './core-ai-interaction.service';
+import { CoreAiPlaceholderRegistry } from './core-ai-placeholder.registry';
+import { CoreAiPromptBuilderService } from './core-ai-prompt-builder.service';
+import { AiPromptFeedbackSignal, CoreAiPromptHintService } from './core-ai-prompt-hint.service';
+import { CoreAiToolGrantService } from './core-ai-tool-grant.service';
+import { CoreAiToolPolicyService } from './core-ai-tool-policy.service';
+import { CoreAiModeService } from './core-ai-mode.service';
+export interface AiInteractionRecord {
+    actions: {
+        name: string;
+        success: boolean;
+    }[];
+    connectionId: string;
+    iterations: number;
+    prompt: string;
+    responseText: string;
+    tenantId?: string;
+    usage?: {
+        completionTokens?: number;
+        promptTokens?: number;
+        totalTokens?: number;
+    };
+    userId?: string;
+}
+export type AiStreamEvent = {
+    action: CoreAiAction;
+    type: 'action';
+} | {
+    message: string;
+    type: 'error';
+} | {
+    response: CoreAiResponse;
+    type: 'final';
+} | {
+    token: string;
+    type: 'token';
+};
+export interface AiRunContext {
+    connection: import('../interfaces/resolved-ai-connection.interface').ResolvedAiConnection;
+    context: AiToolContext;
+    currentUser: ServiceOptions['currentUser'];
+    history: {
+        content: string;
+        role: string;
+    }[];
+    language?: string;
+    provider: import('../interfaces/llm-provider.interface').ILlmProvider;
+    tenantId?: string;
+    tools: IAiTool[];
+}
+export declare class CoreAiService {
+    protected readonly connectionService: CoreAiConnectionService;
+    protected readonly providerFactory: LlmProviderFactory;
+    protected readonly toolRegistry: AiToolRegistry;
+    protected readonly promptBuilder: CoreAiPromptBuilderService;
+    protected readonly interactionService?: CoreAiInteractionService;
+    protected readonly conversationService?: CoreAiConversationService;
+    protected readonly budgetService?: CoreAiBudgetService;
+    protected readonly connectionResolver?: CoreAiConnectionResolverService;
+    protected readonly hintService?: CoreAiPromptHintService;
+    protected readonly toolGrantService?: CoreAiToolGrantService;
+    protected readonly hookRegistry?: AiHookRegistry;
+    protected readonly toolPolicyService?: CoreAiToolPolicyService;
+    protected readonly modeService?: CoreAiModeService;
+    protected readonly placeholderRegistry?: CoreAiPlaceholderRegistry;
+    protected readonly logger: Logger;
+    private readonly rateBuckets;
+    constructor(connectionService: CoreAiConnectionService, providerFactory: LlmProviderFactory, toolRegistry: AiToolRegistry, promptBuilder: CoreAiPromptBuilderService, interactionService?: CoreAiInteractionService, conversationService?: CoreAiConversationService, budgetService?: CoreAiBudgetService, connectionResolver?: CoreAiConnectionResolverService, hintService?: CoreAiPromptHintService, toolGrantService?: CoreAiToolGrantService, hookRegistry?: AiHookRegistry, toolPolicyService?: CoreAiToolPolicyService, modeService?: CoreAiModeService, placeholderRegistry?: CoreAiPlaceholderRegistry);
+    prompt(input: CoreAiPromptInput, serviceOptions: ServiceOptions): Promise<CoreAiResponse>;
+    protected resolvePromptPlaceholders(input: CoreAiPromptInput, serviceOptions: ServiceOptions): Promise<CoreAiPromptInput>;
+    protected unavailableResponse(input: CoreAiPromptInput, language?: string): CoreAiResponse;
+    protected prepareRun(input: CoreAiPromptInput, serviceOptions: ServiceOptions): Promise<AiRunContext | undefined>;
+    protected attachBudgetSummary(response: CoreAiResponse, run: AiRunContext): Promise<void>;
+    protected runAuto(input: CoreAiPromptInput, run: AiRunContext): Promise<CoreAiResponse>;
+    protected runPlan(input: CoreAiPromptInput, run: AiRunContext): Promise<CoreAiResponse>;
+    promptStream(input: CoreAiPromptInput, serviceOptions: ServiceOptions): AsyncGenerator<AiStreamEvent>;
+    protected chunkText(text: string): string[];
+    protected loadConversationHistory(conversationId: string | undefined, currentUser: ServiceOptions['currentUser']): Promise<{
+        content: string;
+        role: string;
+    }[]>;
+    protected authorizeCall(call: LlmToolCall, availableTools: IAiTool[], context: AiToolContext): Promise<AiToolAuthorization>;
+    protected confirmationRequiredFor(tool: IAiTool, input: CoreAiPromptInput): boolean;
+    protected translate(key: string, language?: string, params?: Record<string, string>): string;
+    protected appendClientContext(messages: LlmMessage[], input: CoreAiPromptInput): void;
+    protected capText(text: string, max: number): string;
+    protected accumulateUsage(usage: {
+        completionTokens: number;
+        promptTokens: number;
+        totalTokens: number;
+    }, completion: LlmResponse): void;
+    protected toAction(call: LlmToolCall): CoreAiAction;
+    protected baseResponse(connectionId: string, input: CoreAiPromptInput): CoreAiResponse;
+    protected persistTurn(input: CoreAiPromptInput, response: CoreAiResponse): Promise<void>;
+    protected auditRecord(input: CoreAiPromptInput, run: AiRunContext, response: CoreAiResponse, usage: {
+        completionTokens: number;
+        promptTokens: number;
+        totalTokens: number;
+    }): AiInteractionRecord;
+    protected audit(record: AiInteractionRecord): Promise<void>;
+    protected checkRateLimit(userId?: string): Promise<void>;
+    protected executeToolCall(call: LlmToolCall, availableTools: IAiTool[], context: AiToolContext, input?: CoreAiPromptInput): Promise<CoreAiAction>;
+    protected extractToolCalls(text: string): LlmToolCall[] | undefined;
+    protected extractJsonObject(text: string): any | null;
+    protected firstBalancedJson(text: string, from: number): null | string;
+    protected estimateTokens(text: string): number;
+    protected contextBudget(connection: ResolvedAiConnection): number;
+    protected compactMessages(messages: LlmMessage[], connection: ResolvedAiConnection): Promise<number>;
+    protected fitMessagesToContext(messages: LlmMessage[], connection: ResolvedAiConnection): void;
+    protected capToolResults(serialized: string): string;
+    protected evaluateToolPolicies(toolCalls: LlmToolCall[], tools: IAiTool[], run: AiRunContext): Promise<{
+        asked: LlmToolCall[];
+        denied: {
+            call: LlmToolCall;
+            reason?: string;
+        }[];
+    }>;
+    protected filterByGrants(blocked: LlmToolCall[], tools: IAiTool[], run: AiRunContext, input: CoreAiPromptInput): Promise<LlmToolCall[]>;
+    protected persistToolGrantIfRequested(toolName: string, tools: IAiTool[], run: AiRunContext, input: CoreAiPromptInput): Promise<void>;
+    protected extractAskUserQuestion(action: CoreAiAction): {
+        options?: {
+            label: string;
+            value: string;
+        }[];
+        question: string;
+    } | undefined;
+    protected recordSignal(signal: AiPromptFeedbackSignal): Promise<void>;
+    protected sanitizeResult(value: unknown, user: AiToolContext['currentUser']): unknown;
+}