@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.11

package/dist/ai/testing/in-memory-ai-storage.js

@@ -0,0 +1,196 @@
+"use strict";
+// =============================================================================
+// In-memory object storage for AI tests (issue #437). TEST-ONLY.
+// =============================================================================
+//
+// Just enough of two collaborators for the REAL `AiStorageInputResolver`
+// and `AiOutputWriter` to run against:
+//
+//   - `prisma`: `storageObject.findUnique/findMany/create/delete` over an
+//     array of rows. Ownership (`uploadedById === userId`) is the only access
+//     check the resolver makes (#516 removed the unseeded `storage:read_any`
+//     bypass), so there is no permission table to fake here any more;
+//   - `store` (also `provider`): an `AiObjectStore` (the `AI_OBJECT_STORE`
+//     port) whose `upload`/`download`/`delete` move bytes in and out of a
+//     `Map`, whose `getSignedDownloadUrl` (#441) mints a fake presigned URL
+//     carrying `IN_MEMORY_PRESIGNED_SIGNATURE` (a sentinel the secret-egress
+//     suite hunts for), and whose `assertWritable` is switchable to the
+//     unconfigured state with `setConfigured(false)` — which also makes every
+//     call throw `InMemoryStorageNotConfiguredError`, the shape of the
+//     reference app's `StorageNotConfiguredError`.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IN_MEMORY_PRESIGNED_ORIGIN = exports.IN_MEMORY_PRESIGNED_SIGNATURE = exports.InMemoryStorageNotConfiguredError = void 0;
+exports.createInMemoryAiStorage = createInMemoryAiStorage;
+const node_crypto_1 = require("node:crypto");
+const node_stream_1 = require("node:stream");
+const common_1 = require("@nestjs/common");
+/**
+ * The in-memory store's "storage not configured" error: the shape the
+ * reference app's `StorageNotConfiguredError` has (a 503 whose body carries
+ * `details.reason` and `details.remedy`).
+ *
+ * @stability experimental
+ */
+class InMemoryStorageNotConfiguredError extends common_1.ServiceUnavailableException {
+    /** A 503 naming `storage_not_configured`. */
+    constructor() {
+        super({
+            message: 'Object storage is not configured',
+            details: { reason: 'storage_not_configured', remedy: 'Configure storage at /admin/settings/storage', missing: ['bucket', 'secretAccessKey'] },
+        });
+    }
+}
+exports.InMemoryStorageNotConfiguredError = InMemoryStorageNotConfiguredError;
+const BUCKET = 'in-memory-bucket';
+/**
+ * Every presigned URL this storage mints carries this signature — a sentinel
+ * that must never appear in a response, log line or persisted row (#441).
+ *
+ * @stability experimental
+ */
+exports.IN_MEMORY_PRESIGNED_SIGNATURE = 'presigned-sentinel-5f3a9c';
+/**
+ * The origin of every presigned URL this storage mints.
+ *
+ * @stability experimental
+ */
+exports.IN_MEMORY_PRESIGNED_ORIGIN = 'https://in-memory-storage.test';
+function pick(row, select) {
+    const source = row;
+    if (!select)
+        return { ...source };
+    return Object.fromEntries(Object.keys(select).filter((k) => select[k]).map((k) => [k, source[k]]));
+}
+/**
+ * In-memory object storage for AI tests: the rows (`prisma`) and the store
+ * (`store`) the real `AiStorageInputResolver` and `AiOutputWriter` run
+ * against.
+ *
+ * @returns the store, its rows and its switches.
+ *
+ * @stability experimental
+ */
+function createInMemoryAiStorage() {
+    const objects = [];
+    const blobs = new Map();
+    let configured = true;
+    const assertConfigured = () => {
+        if (!configured)
+            throw new InMemoryStorageNotConfiguredError();
+    };
+    const provider = {
+        upload: jest.fn(async (key, stream) => {
+            assertConfigured();
+            const chunks = [];
+            for await (const chunk of stream)
+                chunks.push(Buffer.from(chunk));
+            blobs.set(key, Buffer.concat(chunks));
+            return { key, bucket: BUCKET, location: `memory://${BUCKET}/${key}` };
+        }),
+        download: jest.fn(async (key) => {
+            assertConfigured();
+            const bytes = blobs.get(key);
+            if (!bytes)
+                throw new Error(`in-memory storage: no object at ${key}`);
+            return node_stream_1.Readable.from([bytes]);
+        }),
+        delete: jest.fn(async (key) => {
+            assertConfigured();
+            blobs.delete(key);
+        }),
+        getSignedDownloadUrl: jest.fn(async (key, options) => {
+            assertConfigured();
+            if (!blobs.has(key))
+                throw new Error(`in-memory storage: no object at ${key}`);
+            return (`${exports.IN_MEMORY_PRESIGNED_ORIGIN}/${BUCKET}/${key}?X-Amz-Expires=${options?.expiresIn ?? 3600}` +
+                `&X-Amz-Signature=${exports.IN_MEMORY_PRESIGNED_SIGNATURE}-${(0, node_crypto_1.randomUUID)()}`);
+        }),
+        assertWritable: jest.fn(async () => {
+            assertConfigured();
+        }),
+        activeProvider: jest.fn(async () => 's3'),
+        notConfiguredReason: (err) => err instanceof InMemoryStorageNotConfiguredError ? 'storage_not_configured' : null,
+        settingsPath: '/admin/settings/storage',
+    };
+    const prisma = {
+        // Organization scope (#725): no row-level security in memory, so a scoped client is the client.
+        forOrg: jest.fn(() => prisma),
+        organization: { findFirst: jest.fn(async () => ({ id: '33333333-3333-4333-8333-333333333333' })) },
+        storageObject: {
+            findUnique: jest.fn(async (args) => {
+                const row = objects.find((o) => o.id === args.where.id);
+                return row ? pick(row, args.select) : null;
+            }),
+            findMany: jest.fn(async (args) => objects.filter((o) => args.where.id.in.includes(o.id)).map((o) => pick(o, args.select))),
+            create: jest.fn(async (args) => {
+                const now = new Date();
+                const row = {
+                    id: (0, node_crypto_1.randomUUID)(),
+                    name: '',
+                    size: 0n,
+                    mimeType: 'application/octet-stream',
+                    storageKey: '',
+                    storageProvider: 's3',
+                    bucket: null,
+                    status: 'pending',
+                    metadata: null,
+                    uploadedById: null,
+                    createdAt: now,
+                    updatedAt: now,
+                    ...args.data,
+                };
+                objects.push(row);
+                return pick(row, args.select);
+            }),
+            delete: jest.fn(async (args) => {
+                const index = objects.findIndex((o) => o.id === args.where.id);
+                if (index === -1)
+                    throw new Error('storageObject.delete: not found');
+                return objects.splice(index, 1)[0];
+            }),
+        },
+    };
+    return {
+        objects,
+        blobs,
+        /** The `AI_OBJECT_STORE` binding. */
+        store: provider,
+        /** The same object, with its jest mocks typed (`provider.upload.mock.calls`). */
+        provider,
+        prisma,
+        /** Adds a `ready` object (with bytes) owned by `uploadedById`; returns its row. */
+        addObject(input) {
+            const bytes = input.bytes ?? Buffer.from('fake-image-bytes');
+            const now = new Date();
+            const row = {
+                id: (0, node_crypto_1.randomUUID)(),
+                name: input.name ?? 'upload.png',
+                size: BigInt(input.size ?? bytes.length),
+                mimeType: input.mimeType ?? 'image/png',
+                storageKey: `uploads/${now.getTime()}/${(0, node_crypto_1.randomUUID)()}.png`,
+                storageProvider: 's3',
+                bucket: BUCKET,
+                status: input.status ?? 'ready',
+                metadata: null,
+                uploadedById: input.uploadedById,
+                createdAt: now,
+                updatedAt: now,
+            };
+            objects.push(row);
+            blobs.set(row.storageKey, bytes);
+            return row;
+        },
+        /** Switch the deployment between configured and unconfigured storage. */
+        setConfigured(value) {
+            configured = value;
+        },
+        /** Forget every object and blob; configured again. */
+        reset() {
+            objects.length = 0;
+            blobs.clear();
+            configured = true;
+        },
+    };
+}
+//# sourceMappingURL=in-memory-ai-storage.js.map

package/dist/ai/testing/in-memory-ai-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-ai-storage.js","sourceRoot":"","sources":["../../../src/ai/testing/in-memory-ai-storage.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,iEAAiE;AACjE,gFAAgF;AAChF,EAAE;AACF,yEAAyE;AACzE,uCAAuC;AACvC,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,uEAAuE;AACvE,mDAAmD;AACnD,gFAAgF;;;AA8JhF,0DAgJC;AA5SD,6CAAyC;AACzC,6CAAuC;AAEvC,2CAA6D;AAI7D;;;;;;GAMG;AACH,MAAa,iCAAkC,SAAQ,oCAA2B;IAChF,6CAA6C;IAC7C;QACE,KAAK,CAAC;YACJ,OAAO,EAAE,kCAAkC;YAC3C,OAAO,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,8CAA8C,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE;SAC9I,CAAC,CAAC;IACL,CAAC;CACF;AARD,8EAQC;AAoGD,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAElC;;;;;GAKG;AACU,QAAA,6BAA6B,GAAG,2BAA2B,CAAC;AAEzE;;;;GAIG;AACU,QAAA,0BAA0B,GAAG,gCAAgC,CAAC;AAE3E,SAAS,IAAI,CAAC,GAAW,EAAE,MAAgC;IACzD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAE9C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;IAElC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,uBAAuB;IACrC,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,UAAU,GAAG,IAAI,CAAC;IAEtB,MAAM,gBAAgB,GAAG,GAAG,EAAE;QAC5B,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,iCAAiC,EAAE,CAAC;IACjE,CAAC,CAAC;IAEF,MAAM,QAAQ,GAA0B;QACtC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,MAAgB,EAAE,EAAE;YACtD,gBAAgB,EAAE,CAAC;YAEnB,MAAM,MAAM,GAAa,EAAE,CAAC;YAE5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM;gBAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,CAAC;YAEhF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAEtC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC;QACxE,CAAC,CAAC;QACF,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YACtC,gBAAgB,EAAE,CAAC;YAEnB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAE7B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;YAEtE,OAAO,sBAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YACpC,gBAAgB,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC;QACF,oBAAoB,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,OAAgC,EAAE,EAAE;YACpF,gBAAgB,EAAE,CAAC;YAEnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;YAE/E,OAAO,CACL,GAAG,kCAA0B,IAAI,MAAM,IAAI,GAAG,kBAAkB,OAAO,EAAE,SAAS,IAAI,IAAI,EAAE;gBAC5F,oBAAoB,qCAA6B,IAAI,IAAA,wBAAU,GAAE,EAAE,CACpE,CAAC;QACJ,CAAC,CAAC;QACF,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;YACjC,gBAAgB,EAAE,CAAC;QACrB,CAAC,CAAC;QACF,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;QACzC,mBAAmB,EAAE,CAAC,GAAY,EAAiB,EAAE,CACnD,GAAG,YAAY,iCAAiC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI;QACpF,YAAY,EAAE,yBAAyB;KACxC,CAAC;IAEF,MAAM,MAAM,GAAQ;QAClB,gGAAgG;QAChG,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;QAC7B,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,sCAAsC,EAAE,CAAC,CAAC,EAAE;QAClG,aAAa,EAAE;YACb,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,IAAiE,EAAE,EAAE;gBAC9F,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACxD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7C,CAAC,CAAC;YACF,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,IAA2E,EAAE,EAAE,CACtG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CACxF;YACD,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,IAAgF,EAAE,EAAE;gBACzG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,GAAG,GAA0B;oBACjC,EAAE,EAAE,IAAA,wBAAU,GAAE;oBAChB,IAAI,EAAE,EAAE;oBACR,IAAI,EAAE,EAAE;oBACR,QAAQ,EAAE,0BAA0B;oBACpC,UAAU,EAAE,EAAE;oBACd,eAAe,EAAE,IAAI;oBACrB,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,IAAI;oBAClB,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,GAAG;oBACd,GAAG,IAAI,CAAC,IAAI;iBACb,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC,CAAC;YACF,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,IAA+B,EAAE,EAAE;gBACxD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC/D,IAAI,KAAK,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACrE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC,CAAC;SACH;KACF,CAAC;IAEF,OAAO;QACL,OAAO;QACP,KAAK;QACL,qCAAqC;QACrC,KAAK,EAAE,QAAyB;QAChC,iFAAiF;QACjF,QAAQ;QACR,MAAM;QACN,mFAAmF;QACnF,SAAS,CAAC,KAQT;YACC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAA0B;gBACjC,EAAE,EAAE,IAAA,wBAAU,GAAE;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,YAAY;gBAChC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,WAAW;gBACvC,UAAU,EAAE,WAAW,GAAG,CAAC,OAAO,EAAE,IAAI,IAAA,wBAAU,GAAE,MAAM;gBAC1D,eAAe,EAAE,IAAI;gBACrB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO;gBAC/B,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAEjC,OAAO,GAAG,CAAC;QACb,CAAC;QACD,yEAAyE;QACzE,aAAa,CAAC,KAAc;YAC1B,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;QACD,sDAAsD;QACtD,KAAK;YACH,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACnB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ai/testing/index.d.ts

@@ -0,0 +1,32 @@
+import './conformance/register';
+export { HARNESS_USER, HARNESS_OTHER_USER, HARNESS_ORG, HARNESS_USER_KEY, HARNESS_ORG_KEY, HARNESS_TENANT_KEY, HARNESS_PROVIDER, HARNESS_MODEL, HARNESS_EMBEDDING_MODEL, HARNESS_IMAGE_MODEL, HARNESS_TRANSCRIPTION_MODEL, HARNESS_SPEECH_MODEL, HARNESS_REALTIME_MODEL, createAiRuntimeHarness, } from './ai-runtime-harness';
+export type { HarnessModel, AiRuntimeHarnessOptions, StoredAiRun, AiRuntimeHarness, } from './ai-runtime-harness';
+export { CONFORMANCE_TEXT_PROMPT, CONFORMANCE_STRUCTURED_PROMPT, CONFORMANCE_TOOL_PROMPT, CONFORMANCE_EMBEDDING_INPUTS, CONFORMANCE_IMAGE_PROMPT, CONFORMANCE_PNG, CONFORMANCE_WAV, conformanceStructuredSchema, conformanceWeatherTool, conformanceRequests, describeAiProviderConformance, } from './conformance';
+export type { AiConformanceScenario, AiConformanceFixtures, AiConformanceSubject, AiConformanceOptions, AiConformanceRequests, ConformanceWeatherReport, } from './conformance';
+export { FAKE_FILE_INPUT_STRATEGY, FAKE_TEXT_MODEL_CAPABILITIES, FAKE_EMBEDDING_MODEL_CAPABILITIES, FAKE_IMAGE_MODEL_CAPABILITIES, FAKE_TRANSCRIPTION_MODEL_CAPABILITIES, FAKE_SPEECH_MODEL_CAPABILITIES, FAKE_REALTIME_MODEL_CAPABILITIES, FAKE_REALTIME_VOICES, FAKE_REALTIME_SECRET_PREFIX, FAKE_REALTIME_BASE_URL, FAKE_SPEECH_VOICES, FAKE_IMAGE_BYTES, fakeEmbeddingVector, FakeAiProvider, } from './fake-ai-provider';
+export type { FakeAiScriptedResponse, FakeAiScript, FakeAiCallMethod, FakeAiCall, FakeAiDeliveredInput, FakeAiProviderOptions, } from './fake-ai-provider';
+export { createInMemoryAiKeysPrisma, } from './in-memory-ai-keys-prisma';
+export type { FakeUserAiKeyRow, FakeAiModelRow, InMemoryAiKeysPrisma, InMemoryAiKeysClient, InMemoryUserAiKeyDelegate, InMemoryAiModelDelegate, } from './in-memory-ai-keys-prisma';
+export { InMemoryStorageNotConfiguredError, IN_MEMORY_PRESIGNED_SIGNATURE, IN_MEMORY_PRESIGNED_ORIGIN, createInMemoryAiStorage, } from './in-memory-ai-storage';
+export type { InMemoryStorageObject, InMemoryAiStorage, InMemoryAiObjectStore, } from './in-memory-ai-storage';
+export { aiJobsServerOnlySuite, findAiJobsMissingFromServerOnly, findNodeEligibleAiJobs } from './conformance/ai-jobs-server-only.suite';
+export type { AiJobsServerOnlyOptions, JobHandlerView, JobRegistryView } from './conformance/ai-jobs-server-only.suite';
+export { aiKeyPolicySuite, keysSeenBy } from './conformance/ai-key-policy.suite';
+export type { AiKeyPolicyOptions } from './conformance/ai-key-policy.suite';
+export { collectPropertyNames, findKeyShapedProperties, findLeakedSentinels, findSecretShapedProperties, KEY_SHAPED_PROPERTY_NAMES, } from './conformance/ai-egress-checks';
+export { aiKillSwitchSuite } from './conformance/ai-kill-switch.suite';
+export { discoverAiRbacRoutes, discoverAiRoutes, findAdminRoutesBlocked, findAiPermissionDeclarationFailures, findRoleMismatches, findRoutesNotAnswering401, findRoutesNotKillSwitched, isPermissionDenied, } from './conformance/ai-route-checks';
+export type { AiRbacRoute, AiRoute, DiscoveredAiRoutes } from './conformance/ai-route-checks';
+export type { AiKillSwitchOptions } from './conformance/ai-kill-switch.suite';
+export { PROVIDER_SDK_PACKAGES, aiNoSdkLeakSuite, aiPackageProviderDirs, aiProvidersPackageSdkDirs, declaredSdks, findSdkLeaks, importSpecifiers, registeredAiSdkPackages, } from './conformance/ai-no-sdk-leak.suite';
+export type { AiNoSdkLeakOptions, SdkLeakTree, SdkOwnerManifest } from './conformance/ai-no-sdk-leak.suite';
+export { aiOrchestrationBoundarySuite } from './conformance/ai-orchestration-boundary.registered';
+export { aiRbacMatrixSuite } from './conformance/ai-rbac-matrix.suite';
+export type { AiRbacMatrixOptions } from './conformance/ai-rbac-matrix.suite';
+export { aiSecretEgressSuite } from './conformance/ai-secret-egress.suite';
+export type { AiSecretEgressOptions } from './conformance/ai-secret-egress.suite';
+export { ALL_KEYS, OTHER_USER_KEY, authHeader, concreteRoutePath, forEachDocumentOperation, parseSse, } from './conformance/ai-conformance-fixture';
+export type { AiAuthorizationHeader, AiConformanceApp, AiConformanceContext, AiConformanceFixture, AiConformanceNestApp, AiConformanceOpenApiDocument, AiConformanceUser, ParsedFrame, } from './conformance/ai-conformance-fixture';
+export { DEFAULT_BANNED_ORCHESTRATION_PACKAGES, findOrchestrationViolations, isBannedOrchestrationPackage, orchestrationImportSpecifiers, runOrchestrationBoundarySuite, } from './conformance/orchestration-boundary.suite';
+export type { OrchestrationBoundaryOptions, OrchestrationManifest, OrchestrationScannedFile, } from './conformance/orchestration-boundary.suite';
+//# sourceMappingURL=index.d.ts.map

package/dist/ai/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ai/testing/index.ts"],"names":[],"mappings":"AAUA,OAAO,wBAAwB,CAAC;AAEhC,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,uBAAuB,EACvB,mBAAmB,EACnB,2BAA2B,EAC3B,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,YAAY,EACZ,uBAAuB,EACvB,WAAW,EACX,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,uBAAuB,EACvB,4BAA4B,EAC5B,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,2BAA2B,EAC3B,sBAAsB,EACtB,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,iCAAiC,EACjC,6BAA6B,EAC7B,qCAAqC,EACrC,8BAA8B,EAC9B,gCAAgC,EAChC,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACzI,YAAY,EAAE,uBAAuB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AACxH,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACjF,YAAY,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,mCAAmC,EACnC,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAC9F,YAAY,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,EACzB,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC5G,OAAO,EAAE,4BAA4B,EAAE,MAAM,oDAAoD,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,YAAY,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EACL,QAAQ,EACR,cAAc,EACd,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,QAAQ,GACT,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,EAC5B,iBAAiB,EACjB,WAAW,GACZ,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,qCAAqC,EACrC,2BAA2B,EAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,4BAA4B,EAC5B,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,4CAA4C,CAAC"}

package/dist/ai/testing/index.js

@@ -0,0 +1,117 @@
+"use strict";
+// `@marinoscar/platform-api/ai/testing`: the AI slice's test kit (issue #739).
+// The scripted fake provider (`FakeAiProvider`), the runtime harness that
+// builds a real `AiService` over in-memory keys, storage and usage, the
+// adapter conformance kit (`describeAiProviderConformance`) and the
+// conformance suites (kill switch, RBAC matrix, secret egress, key policy,
+// jobs server-only, no SDK leak, orchestration boundary; issue #742). Jest-only:
+// it calls `jest.fn` and `describe`.
+// Documented in ../README.md.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectPropertyNames = exports.keysSeenBy = exports.aiKeyPolicySuite = exports.findNodeEligibleAiJobs = exports.findAiJobsMissingFromServerOnly = exports.aiJobsServerOnlySuite = exports.createInMemoryAiStorage = exports.IN_MEMORY_PRESIGNED_ORIGIN = exports.IN_MEMORY_PRESIGNED_SIGNATURE = exports.InMemoryStorageNotConfiguredError = exports.createInMemoryAiKeysPrisma = exports.FakeAiProvider = exports.fakeEmbeddingVector = exports.FAKE_IMAGE_BYTES = exports.FAKE_SPEECH_VOICES = exports.FAKE_REALTIME_BASE_URL = exports.FAKE_REALTIME_SECRET_PREFIX = exports.FAKE_REALTIME_VOICES = exports.FAKE_REALTIME_MODEL_CAPABILITIES = exports.FAKE_SPEECH_MODEL_CAPABILITIES = exports.FAKE_TRANSCRIPTION_MODEL_CAPABILITIES = exports.FAKE_IMAGE_MODEL_CAPABILITIES = exports.FAKE_EMBEDDING_MODEL_CAPABILITIES = exports.FAKE_TEXT_MODEL_CAPABILITIES = exports.FAKE_FILE_INPUT_STRATEGY = exports.describeAiProviderConformance = exports.conformanceRequests = exports.conformanceWeatherTool = exports.conformanceStructuredSchema = exports.CONFORMANCE_WAV = exports.CONFORMANCE_PNG = exports.CONFORMANCE_IMAGE_PROMPT = exports.CONFORMANCE_EMBEDDING_INPUTS = exports.CONFORMANCE_TOOL_PROMPT = exports.CONFORMANCE_STRUCTURED_PROMPT = exports.CONFORMANCE_TEXT_PROMPT = exports.createAiRuntimeHarness = exports.HARNESS_REALTIME_MODEL = exports.HARNESS_SPEECH_MODEL = exports.HARNESS_TRANSCRIPTION_MODEL = exports.HARNESS_IMAGE_MODEL = exports.HARNESS_EMBEDDING_MODEL = exports.HARNESS_MODEL = exports.HARNESS_PROVIDER = exports.HARNESS_TENANT_KEY = exports.HARNESS_ORG_KEY = exports.HARNESS_USER_KEY = exports.HARNESS_ORG = exports.HARNESS_OTHER_USER = exports.HARNESS_USER = void 0;
+exports.runOrchestrationBoundarySuite = exports.orchestrationImportSpecifiers = exports.isBannedOrchestrationPackage = exports.findOrchestrationViolations = exports.DEFAULT_BANNED_ORCHESTRATION_PACKAGES = exports.parseSse = exports.forEachDocumentOperation = exports.concreteRoutePath = exports.authHeader = exports.OTHER_USER_KEY = exports.ALL_KEYS = exports.aiSecretEgressSuite = exports.aiRbacMatrixSuite = exports.aiOrchestrationBoundarySuite = exports.registeredAiSdkPackages = exports.importSpecifiers = exports.findSdkLeaks = exports.declaredSdks = exports.aiProvidersPackageSdkDirs = exports.aiPackageProviderDirs = exports.aiNoSdkLeakSuite = exports.PROVIDER_SDK_PACKAGES = exports.isPermissionDenied = exports.findRoutesNotKillSwitched = exports.findRoutesNotAnswering401 = exports.findRoleMismatches = exports.findAiPermissionDeclarationFailures = exports.findAdminRoutesBlocked = exports.discoverAiRoutes = exports.discoverAiRbacRoutes = exports.aiKillSwitchSuite = exports.KEY_SHAPED_PROPERTY_NAMES = exports.findSecretShapedProperties = exports.findLeakedSentinels = exports.findKeyShapedProperties = void 0;
+// Importing this entry registers the conformance suites with `runPlatformConformance`.
+require("./conformance/register");
+var ai_runtime_harness_1 = require("./ai-runtime-harness");
+Object.defineProperty(exports, "HARNESS_USER", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_USER; } });
+Object.defineProperty(exports, "HARNESS_OTHER_USER", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_OTHER_USER; } });
+Object.defineProperty(exports, "HARNESS_ORG", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_ORG; } });
+Object.defineProperty(exports, "HARNESS_USER_KEY", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_USER_KEY; } });
+Object.defineProperty(exports, "HARNESS_ORG_KEY", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_ORG_KEY; } });
+Object.defineProperty(exports, "HARNESS_TENANT_KEY", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_TENANT_KEY; } });
+Object.defineProperty(exports, "HARNESS_PROVIDER", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_PROVIDER; } });
+Object.defineProperty(exports, "HARNESS_MODEL", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_MODEL; } });
+Object.defineProperty(exports, "HARNESS_EMBEDDING_MODEL", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_EMBEDDING_MODEL; } });
+Object.defineProperty(exports, "HARNESS_IMAGE_MODEL", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_IMAGE_MODEL; } });
+Object.defineProperty(exports, "HARNESS_TRANSCRIPTION_MODEL", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_TRANSCRIPTION_MODEL; } });
+Object.defineProperty(exports, "HARNESS_SPEECH_MODEL", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_SPEECH_MODEL; } });
+Object.defineProperty(exports, "HARNESS_REALTIME_MODEL", { enumerable: true, get: function () { return ai_runtime_harness_1.HARNESS_REALTIME_MODEL; } });
+Object.defineProperty(exports, "createAiRuntimeHarness", { enumerable: true, get: function () { return ai_runtime_harness_1.createAiRuntimeHarness; } });
+var conformance_1 = require("./conformance");
+Object.defineProperty(exports, "CONFORMANCE_TEXT_PROMPT", { enumerable: true, get: function () { return conformance_1.CONFORMANCE_TEXT_PROMPT; } });
+Object.defineProperty(exports, "CONFORMANCE_STRUCTURED_PROMPT", { enumerable: true, get: function () { return conformance_1.CONFORMANCE_STRUCTURED_PROMPT; } });
+Object.defineProperty(exports, "CONFORMANCE_TOOL_PROMPT", { enumerable: true, get: function () { return conformance_1.CONFORMANCE_TOOL_PROMPT; } });
+Object.defineProperty(exports, "CONFORMANCE_EMBEDDING_INPUTS", { enumerable: true, get: function () { return conformance_1.CONFORMANCE_EMBEDDING_INPUTS; } });
+Object.defineProperty(exports, "CONFORMANCE_IMAGE_PROMPT", { enumerable: true, get: function () { return conformance_1.CONFORMANCE_IMAGE_PROMPT; } });
+Object.defineProperty(exports, "CONFORMANCE_PNG", { enumerable: true, get: function () { return conformance_1.CONFORMANCE_PNG; } });
+Object.defineProperty(exports, "CONFORMANCE_WAV", { enumerable: true, get: function () { return conformance_1.CONFORMANCE_WAV; } });
+Object.defineProperty(exports, "conformanceStructuredSchema", { enumerable: true, get: function () { return conformance_1.conformanceStructuredSchema; } });
+Object.defineProperty(exports, "conformanceWeatherTool", { enumerable: true, get: function () { return conformance_1.conformanceWeatherTool; } });
+Object.defineProperty(exports, "conformanceRequests", { enumerable: true, get: function () { return conformance_1.conformanceRequests; } });
+Object.defineProperty(exports, "describeAiProviderConformance", { enumerable: true, get: function () { return conformance_1.describeAiProviderConformance; } });
+var fake_ai_provider_1 = require("./fake-ai-provider");
+Object.defineProperty(exports, "FAKE_FILE_INPUT_STRATEGY", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_FILE_INPUT_STRATEGY; } });
+Object.defineProperty(exports, "FAKE_TEXT_MODEL_CAPABILITIES", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_TEXT_MODEL_CAPABILITIES; } });
+Object.defineProperty(exports, "FAKE_EMBEDDING_MODEL_CAPABILITIES", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_EMBEDDING_MODEL_CAPABILITIES; } });
+Object.defineProperty(exports, "FAKE_IMAGE_MODEL_CAPABILITIES", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_IMAGE_MODEL_CAPABILITIES; } });
+Object.defineProperty(exports, "FAKE_TRANSCRIPTION_MODEL_CAPABILITIES", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_TRANSCRIPTION_MODEL_CAPABILITIES; } });
+Object.defineProperty(exports, "FAKE_SPEECH_MODEL_CAPABILITIES", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_SPEECH_MODEL_CAPABILITIES; } });
+Object.defineProperty(exports, "FAKE_REALTIME_MODEL_CAPABILITIES", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_REALTIME_MODEL_CAPABILITIES; } });
+Object.defineProperty(exports, "FAKE_REALTIME_VOICES", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_REALTIME_VOICES; } });
+Object.defineProperty(exports, "FAKE_REALTIME_SECRET_PREFIX", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_REALTIME_SECRET_PREFIX; } });
+Object.defineProperty(exports, "FAKE_REALTIME_BASE_URL", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_REALTIME_BASE_URL; } });
+Object.defineProperty(exports, "FAKE_SPEECH_VOICES", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_SPEECH_VOICES; } });
+Object.defineProperty(exports, "FAKE_IMAGE_BYTES", { enumerable: true, get: function () { return fake_ai_provider_1.FAKE_IMAGE_BYTES; } });
+Object.defineProperty(exports, "fakeEmbeddingVector", { enumerable: true, get: function () { return fake_ai_provider_1.fakeEmbeddingVector; } });
+Object.defineProperty(exports, "FakeAiProvider", { enumerable: true, get: function () { return fake_ai_provider_1.FakeAiProvider; } });
+var in_memory_ai_keys_prisma_1 = require("./in-memory-ai-keys-prisma");
+Object.defineProperty(exports, "createInMemoryAiKeysPrisma", { enumerable: true, get: function () { return in_memory_ai_keys_prisma_1.createInMemoryAiKeysPrisma; } });
+var in_memory_ai_storage_1 = require("./in-memory-ai-storage");
+Object.defineProperty(exports, "InMemoryStorageNotConfiguredError", { enumerable: true, get: function () { return in_memory_ai_storage_1.InMemoryStorageNotConfiguredError; } });
+Object.defineProperty(exports, "IN_MEMORY_PRESIGNED_SIGNATURE", { enumerable: true, get: function () { return in_memory_ai_storage_1.IN_MEMORY_PRESIGNED_SIGNATURE; } });
+Object.defineProperty(exports, "IN_MEMORY_PRESIGNED_ORIGIN", { enumerable: true, get: function () { return in_memory_ai_storage_1.IN_MEMORY_PRESIGNED_ORIGIN; } });
+Object.defineProperty(exports, "createInMemoryAiStorage", { enumerable: true, get: function () { return in_memory_ai_storage_1.createInMemoryAiStorage; } });
+// The conformance suites.
+var ai_jobs_server_only_suite_1 = require("./conformance/ai-jobs-server-only.suite");
+Object.defineProperty(exports, "aiJobsServerOnlySuite", { enumerable: true, get: function () { return ai_jobs_server_only_suite_1.aiJobsServerOnlySuite; } });
+Object.defineProperty(exports, "findAiJobsMissingFromServerOnly", { enumerable: true, get: function () { return ai_jobs_server_only_suite_1.findAiJobsMissingFromServerOnly; } });
+Object.defineProperty(exports, "findNodeEligibleAiJobs", { enumerable: true, get: function () { return ai_jobs_server_only_suite_1.findNodeEligibleAiJobs; } });
+var ai_key_policy_suite_1 = require("./conformance/ai-key-policy.suite");
+Object.defineProperty(exports, "aiKeyPolicySuite", { enumerable: true, get: function () { return ai_key_policy_suite_1.aiKeyPolicySuite; } });
+Object.defineProperty(exports, "keysSeenBy", { enumerable: true, get: function () { return ai_key_policy_suite_1.keysSeenBy; } });
+var ai_egress_checks_1 = require("./conformance/ai-egress-checks");
+Object.defineProperty(exports, "collectPropertyNames", { enumerable: true, get: function () { return ai_egress_checks_1.collectPropertyNames; } });
+Object.defineProperty(exports, "findKeyShapedProperties", { enumerable: true, get: function () { return ai_egress_checks_1.findKeyShapedProperties; } });
+Object.defineProperty(exports, "findLeakedSentinels", { enumerable: true, get: function () { return ai_egress_checks_1.findLeakedSentinels; } });
+Object.defineProperty(exports, "findSecretShapedProperties", { enumerable: true, get: function () { return ai_egress_checks_1.findSecretShapedProperties; } });
+Object.defineProperty(exports, "KEY_SHAPED_PROPERTY_NAMES", { enumerable: true, get: function () { return ai_egress_checks_1.KEY_SHAPED_PROPERTY_NAMES; } });
+var ai_kill_switch_suite_1 = require("./conformance/ai-kill-switch.suite");
+Object.defineProperty(exports, "aiKillSwitchSuite", { enumerable: true, get: function () { return ai_kill_switch_suite_1.aiKillSwitchSuite; } });
+var ai_route_checks_1 = require("./conformance/ai-route-checks");
+Object.defineProperty(exports, "discoverAiRbacRoutes", { enumerable: true, get: function () { return ai_route_checks_1.discoverAiRbacRoutes; } });
+Object.defineProperty(exports, "discoverAiRoutes", { enumerable: true, get: function () { return ai_route_checks_1.discoverAiRoutes; } });
+Object.defineProperty(exports, "findAdminRoutesBlocked", { enumerable: true, get: function () { return ai_route_checks_1.findAdminRoutesBlocked; } });
+Object.defineProperty(exports, "findAiPermissionDeclarationFailures", { enumerable: true, get: function () { return ai_route_checks_1.findAiPermissionDeclarationFailures; } });
+Object.defineProperty(exports, "findRoleMismatches", { enumerable: true, get: function () { return ai_route_checks_1.findRoleMismatches; } });
+Object.defineProperty(exports, "findRoutesNotAnswering401", { enumerable: true, get: function () { return ai_route_checks_1.findRoutesNotAnswering401; } });
+Object.defineProperty(exports, "findRoutesNotKillSwitched", { enumerable: true, get: function () { return ai_route_checks_1.findRoutesNotKillSwitched; } });
+Object.defineProperty(exports, "isPermissionDenied", { enumerable: true, get: function () { return ai_route_checks_1.isPermissionDenied; } });
+var ai_no_sdk_leak_suite_1 = require("./conformance/ai-no-sdk-leak.suite");
+Object.defineProperty(exports, "PROVIDER_SDK_PACKAGES", { enumerable: true, get: function () { return ai_no_sdk_leak_suite_1.PROVIDER_SDK_PACKAGES; } });
+Object.defineProperty(exports, "aiNoSdkLeakSuite", { enumerable: true, get: function () { return ai_no_sdk_leak_suite_1.aiNoSdkLeakSuite; } });
+Object.defineProperty(exports, "aiPackageProviderDirs", { enumerable: true, get: function () { return ai_no_sdk_leak_suite_1.aiPackageProviderDirs; } });
+Object.defineProperty(exports, "aiProvidersPackageSdkDirs", { enumerable: true, get: function () { return ai_no_sdk_leak_suite_1.aiProvidersPackageSdkDirs; } });
+Object.defineProperty(exports, "declaredSdks", { enumerable: true, get: function () { return ai_no_sdk_leak_suite_1.declaredSdks; } });
+Object.defineProperty(exports, "findSdkLeaks", { enumerable: true, get: function () { return ai_no_sdk_leak_suite_1.findSdkLeaks; } });
+Object.defineProperty(exports, "importSpecifiers", { enumerable: true, get: function () { return ai_no_sdk_leak_suite_1.importSpecifiers; } });
+Object.defineProperty(exports, "registeredAiSdkPackages", { enumerable: true, get: function () { return ai_no_sdk_leak_suite_1.registeredAiSdkPackages; } });
+var ai_orchestration_boundary_registered_1 = require("./conformance/ai-orchestration-boundary.registered");
+Object.defineProperty(exports, "aiOrchestrationBoundarySuite", { enumerable: true, get: function () { return ai_orchestration_boundary_registered_1.aiOrchestrationBoundarySuite; } });
+var ai_rbac_matrix_suite_1 = require("./conformance/ai-rbac-matrix.suite");
+Object.defineProperty(exports, "aiRbacMatrixSuite", { enumerable: true, get: function () { return ai_rbac_matrix_suite_1.aiRbacMatrixSuite; } });
+var ai_secret_egress_suite_1 = require("./conformance/ai-secret-egress.suite");
+Object.defineProperty(exports, "aiSecretEgressSuite", { enumerable: true, get: function () { return ai_secret_egress_suite_1.aiSecretEgressSuite; } });
+var ai_conformance_fixture_1 = require("./conformance/ai-conformance-fixture");
+Object.defineProperty(exports, "ALL_KEYS", { enumerable: true, get: function () { return ai_conformance_fixture_1.ALL_KEYS; } });
+Object.defineProperty(exports, "OTHER_USER_KEY", { enumerable: true, get: function () { return ai_conformance_fixture_1.OTHER_USER_KEY; } });
+Object.defineProperty(exports, "authHeader", { enumerable: true, get: function () { return ai_conformance_fixture_1.authHeader; } });
+Object.defineProperty(exports, "concreteRoutePath", { enumerable: true, get: function () { return ai_conformance_fixture_1.concreteRoutePath; } });
+Object.defineProperty(exports, "forEachDocumentOperation", { enumerable: true, get: function () { return ai_conformance_fixture_1.forEachDocumentOperation; } });
+Object.defineProperty(exports, "parseSse", { enumerable: true, get: function () { return ai_conformance_fixture_1.parseSse; } });
+var orchestration_boundary_suite_1 = require("./conformance/orchestration-boundary.suite");
+Object.defineProperty(exports, "DEFAULT_BANNED_ORCHESTRATION_PACKAGES", { enumerable: true, get: function () { return orchestration_boundary_suite_1.DEFAULT_BANNED_ORCHESTRATION_PACKAGES; } });
+Object.defineProperty(exports, "findOrchestrationViolations", { enumerable: true, get: function () { return orchestration_boundary_suite_1.findOrchestrationViolations; } });
+Object.defineProperty(exports, "isBannedOrchestrationPackage", { enumerable: true, get: function () { return orchestration_boundary_suite_1.isBannedOrchestrationPackage; } });
+Object.defineProperty(exports, "orchestrationImportSpecifiers", { enumerable: true, get: function () { return orchestration_boundary_suite_1.orchestrationImportSpecifiers; } });
+Object.defineProperty(exports, "runOrchestrationBoundarySuite", { enumerable: true, get: function () { return orchestration_boundary_suite_1.runOrchestrationBoundarySuite; } });
+//# sourceMappingURL=index.js.map

package/dist/ai/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ai/testing/index.ts"],"names":[],"mappings":";AAAA,+EAA+E;AAC/E,0EAA0E;AAC1E,wEAAwE;AACxE,oEAAoE;AACpE,2EAA2E;AAC3E,iFAAiF;AACjF,qCAAqC;AACrC,8BAA8B;;;;AAE9B,uFAAuF;AACvF,kCAAgC;AAEhC,2DAe8B;AAd5B,kHAAA,YAAY,OAAA;AACZ,wHAAA,kBAAkB,OAAA;AAClB,iHAAA,WAAW,OAAA;AACX,sHAAA,gBAAgB,OAAA;AAChB,qHAAA,eAAe,OAAA;AACf,wHAAA,kBAAkB,OAAA;AAClB,sHAAA,gBAAgB,OAAA;AAChB,mHAAA,aAAa,OAAA;AACb,6HAAA,uBAAuB,OAAA;AACvB,yHAAA,mBAAmB,OAAA;AACnB,iIAAA,2BAA2B,OAAA;AAC3B,0HAAA,oBAAoB,OAAA;AACpB,4HAAA,sBAAsB,OAAA;AACtB,4HAAA,sBAAsB,OAAA;AAQxB,6CAYuB;AAXrB,sHAAA,uBAAuB,OAAA;AACvB,4HAAA,6BAA6B,OAAA;AAC7B,sHAAA,uBAAuB,OAAA;AACvB,2HAAA,4BAA4B,OAAA;AAC5B,uHAAA,wBAAwB,OAAA;AACxB,8GAAA,eAAe,OAAA;AACf,8GAAA,eAAe,OAAA;AACf,0HAAA,2BAA2B,OAAA;AAC3B,qHAAA,sBAAsB,OAAA;AACtB,kHAAA,mBAAmB,OAAA;AACnB,4HAAA,6BAA6B,OAAA;AAU/B,uDAe4B;AAd1B,4HAAA,wBAAwB,OAAA;AACxB,gIAAA,4BAA4B,OAAA;AAC5B,qIAAA,iCAAiC,OAAA;AACjC,iIAAA,6BAA6B,OAAA;AAC7B,yIAAA,qCAAqC,OAAA;AACrC,kIAAA,8BAA8B,OAAA;AAC9B,oIAAA,gCAAgC,OAAA;AAChC,wHAAA,oBAAoB,OAAA;AACpB,+HAAA,2BAA2B,OAAA;AAC3B,0HAAA,sBAAsB,OAAA;AACtB,sHAAA,kBAAkB,OAAA;AAClB,oHAAA,gBAAgB,OAAA;AAChB,uHAAA,mBAAmB,OAAA;AACnB,kHAAA,cAAc,OAAA;AAUhB,uEAEoC;AADlC,sIAAA,0BAA0B,OAAA;AAU5B,+DAKgC;AAJ9B,yIAAA,iCAAiC,OAAA;AACjC,qIAAA,6BAA6B,OAAA;AAC7B,kIAAA,0BAA0B,OAAA;AAC1B,+HAAA,uBAAuB,OAAA;AAOzB,0BAA0B;AAC1B,qFAAyI;AAAhI,kIAAA,qBAAqB,OAAA;AAAE,4IAAA,+BAA+B,OAAA;AAAE,mIAAA,sBAAsB,OAAA;AAEvF,yEAAiF;AAAxE,uHAAA,gBAAgB,OAAA;AAAE,iHAAA,UAAU,OAAA;AAErC,mEAMwC;AALtC,wHAAA,oBAAoB,OAAA;AACpB,2HAAA,uBAAuB,OAAA;AACvB,uHAAA,mBAAmB,OAAA;AACnB,8HAAA,0BAA0B,OAAA;AAC1B,6HAAA,yBAAyB,OAAA;AAE3B,2EAAuE;AAA9D,yHAAA,iBAAiB,OAAA;AAC1B,iEASuC;AARrC,uHAAA,oBAAoB,OAAA;AACpB,mHAAA,gBAAgB,OAAA;AAChB,yHAAA,sBAAsB,OAAA;AACtB,sIAAA,mCAAmC,OAAA;AACnC,qHAAA,kBAAkB,OAAA;AAClB,4HAAA,yBAAyB,OAAA;AACzB,4HAAA,yBAAyB,OAAA;AACzB,qHAAA,kBAAkB,OAAA;AAIpB,2EAS4C;AAR1C,6HAAA,qBAAqB,OAAA;AACrB,wHAAA,gBAAgB,OAAA;AAChB,6HAAA,qBAAqB,OAAA;AACrB,iIAAA,yBAAyB,OAAA;AACzB,oHAAA,YAAY,OAAA;AACZ,oHAAA,YAAY,OAAA;AACZ,wHAAA,gBAAgB,OAAA;AAChB,+HAAA,uBAAuB,OAAA;AAGzB,2GAAkG;AAAzF,oJAAA,4BAA4B,OAAA;AACrC,2EAAuE;AAA9D,yHAAA,iBAAiB,OAAA;AAE1B,+EAA2E;AAAlE,6HAAA,mBAAmB,OAAA;AAE5B,+EAO8C;AAN5C,kHAAA,QAAQ,OAAA;AACR,wHAAA,cAAc,OAAA;AACd,oHAAA,UAAU,OAAA;AACV,2HAAA,iBAAiB,OAAA;AACjB,kIAAA,wBAAwB,OAAA;AACxB,kHAAA,QAAQ,OAAA;AAYV,2FAMoD;AALlD,qJAAA,qCAAqC,OAAA;AACrC,2IAAA,2BAA2B,OAAA;AAC3B,4IAAA,4BAA4B,OAAA;AAC5B,6IAAA,6BAA6B,OAAA;AAC7B,6IAAA,6BAA6B,OAAA"}

package/dist/ai/usage/ai-usage-admin.controller.d.ts

@@ -0,0 +1,15 @@
+import { AiUsageService } from './ai-usage.service';
+import { AiUsageAdminQueryDto, AiUsageOrgQueryDto, type AiUsageReport } from './dto/ai-usage.dto';
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+export declare class AiUsageAdminController {
+    private readonly usage;
+    constructor(usage: AiUsageService);
+    report(query: AiUsageAdminQueryDto): Promise<AiUsageReport>;
+    orgReport(query: AiUsageOrgQueryDto, orgId: string): Promise<AiUsageReport>;
+}
+//# sourceMappingURL=ai-usage-admin.controller.d.ts.map

package/dist/ai/usage/ai-usage-admin.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-usage-admin.controller.d.ts","sourceRoot":"","sources":["../../../src/ai/usage/ai-usage-admin.controller.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAGL,oBAAoB,EACpB,kBAAkB,EAIlB,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAc5B;;;;;GAKG;AACH,qBAEa,sBAAsB;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,cAAc;IAkC5C,MAAM,CAAU,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC;IAwBpE,SAAS,CAAU,KAAK,EAAE,kBAAkB,EAAgB,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAGzG"}

package/dist/ai/usage/ai-usage-admin.controller.js

@@ -0,0 +1,122 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AiUsageAdminController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../../identity/index");
+const ai_constants_1 = require("../ai.constants");
+const index_2 = require("../../core/index");
+const index_3 = require("../../core/index");
+const ai_usage_service_1 = require("./ai-usage.service");
+const ai_usage_dto_1 = require("./dto/ai-usage.dto");
+// =============================================================================
+// AiUsageAdminController (issue #443, epic #420)
+// =============================================================================
+//
+//   GET /api/admin/ai/usage     ai_config:read     every user's usage, filterable
+//
+// Same `/api/admin/ai` prefix, permission pair and posture as
+// `AiAdminController`: NOT behind `AiEnabledGuard` — an administrator reading
+// what the platform cost while it is switched off is exactly the case that
+// must keep working (docs/specs/ai-platform.md §2.19).
+// =============================================================================
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+let AiUsageAdminController = class AiUsageAdminController {
+    usage;
+    constructor(usage) {
+        this.usage = usage;
+    }
+    async report(query) {
+        return this.usage.report({ ...query, withCost: true });
+    }
+    async orgReport(query, orgId) {
+        return this.usage.report({ ...query, orgId, withCost: true }, new Date(), orgId);
+    }
+};
+exports.AiUsageAdminController = AiUsageAdminController;
+__decorate([
+    (0, common_1.Get)('usage'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.AI_CONFIG_READ] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'AI usage aggregates across all users (Admin only)',
+        description: 'Sums the recorded provider round trips (`ai_usage_events`) over a window of UTC days, ' +
+            `both inclusive — default the last ${ai_usage_dto_1.DEFAULT_AI_USAGE_RANGE_DAYS} days, at most ` +
+            `${ai_usage_dto_1.MAX_AI_USAGE_RANGE_DAYS} — as \`totals\` plus one \`series\` entry per group.\n\n` +
+            '`groupBy`: `day` (chronological, zero-filled), `user` (label is the email; events ' +
+            'with no user are keyed `system`), `model` (key `<provider>:<modelId>`), `provider`, or ' +
+            '`keySource` (`user` / `org` / `none` / `admin_discovery`), or `org` (one entry per ' +
+            'organization, labelled with its name; events with none are keyed `none`). The `orgKey*` ' +
+            'fields of every bucket are the part paid for by an administrator-managed key (the ' +
+            "organization's own or the deployment's). `orgId` narrows the report to one " +
+            "organization's events, and `feature` to one registered AI feature. `groupBy` also takes " +
+            '`feature` (key: the feature id, `none` for events recorded without one) and `operation` ' +
+            '(key: the operation id). When the deployment binds a pricing port ' +
+            '(`AiModule.forRoot({ pricing })`) the report carries `priced: true` and a `cost` on every ' +
+            'bucket.\n\n' +
+            'Reachable while AI is disabled. Refused with **400** (`details.reason: ' +
+            '"AI_USAGE_RANGE_INVALID"`) for a reversed or over-long range.',
+    }),
+    (0, swagger_1.ApiQuery)({ name: 'from', required: false, type: String, description: 'First UTC day included, `YYYY-MM-DD`.' }),
+    (0, swagger_1.ApiQuery)({ name: 'to', required: false, type: String, description: 'Last UTC day included, `YYYY-MM-DD`. Default today.' }),
+    (0, swagger_1.ApiQuery)({ name: 'groupBy', required: false, enum: ai_usage_dto_1.AI_USAGE_ADMIN_GROUP_BY, description: 'Default `day`.' }),
+    (0, swagger_1.ApiQuery)({ name: 'userId', required: false, type: String, format: 'uuid', description: "Only this user's events." }),
+    (0, swagger_1.ApiQuery)({ name: 'provider', required: false, type: String, description: "Only this provider's events." }),
+    (0, swagger_1.ApiQuery)({ name: 'model', required: false, type: String, description: "Only this provider model id's events." }),
+    (0, swagger_1.ApiQuery)({ name: 'orgId', required: false, type: String, format: 'uuid', description: "Only this organization's events." }),
+    (0, swagger_1.ApiQuery)({ name: 'feature', required: false, type: String, description: 'Only events recorded for this registered AI feature.' }),
+    (0, index_2.ApiDataResponse)(ai_usage_dto_1.AiUsageReportDto, { description: 'The usage report' }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid query, or `AI_USAGE_RANGE_INVALID`', type: index_3.ErrorDto }),
+    __param(0, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ai_usage_dto_1.AiUsageAdminQueryDto]),
+    __metadata("design:returntype", Promise)
+], AiUsageAdminController.prototype, "report", null);
+__decorate([
+    (0, common_1.Get)('org-usage'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.ORG_AI_CONFIG_READ] }),
+    (0, swagger_1.ApiOperation)({
+        summary: "AI usage aggregates of your organization (organization administrators)",
+        description: "The same report as `GET /api/admin/ai/usage`, always confined to the caller's ACTIVE " +
+            'organization (never a request parameter): it reads through that organization\'s ' +
+            'row-level-security scope, so no other organization\'s rows are visible. Gated by ' +
+            '`org_ai_config:read` in that organization. Reachable while AI is disabled.',
+    }),
+    (0, swagger_1.ApiQuery)({ name: 'from', required: false, type: String, description: 'First UTC day included, `YYYY-MM-DD`.' }),
+    (0, swagger_1.ApiQuery)({ name: 'to', required: false, type: String, description: 'Last UTC day included, `YYYY-MM-DD`. Default today.' }),
+    (0, swagger_1.ApiQuery)({ name: 'groupBy', required: false, enum: ai_usage_dto_1.AI_USAGE_ORG_GROUP_BY, description: 'Default `day`.' }),
+    (0, swagger_1.ApiQuery)({ name: 'userId', required: false, type: String, format: 'uuid', description: "Only this member's events." }),
+    (0, swagger_1.ApiQuery)({ name: 'provider', required: false, type: String, description: "Only this provider's events." }),
+    (0, swagger_1.ApiQuery)({ name: 'model', required: false, type: String, description: "Only this provider model id's events." }),
+    (0, swagger_1.ApiQuery)({ name: 'feature', required: false, type: String, description: 'Only events recorded for this registered AI feature.' }),
+    (0, index_2.ApiDataResponse)(ai_usage_dto_1.AiUsageReportDto, { description: "The organization's usage report" }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid query, or `AI_USAGE_RANGE_INVALID`', type: index_3.ErrorDto }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'Missing `org_ai_config:read` in the active organization', type: index_3.ErrorDto }),
+    __param(0, (0, common_1.Query)()),
+    __param(1, (0, index_1.CurrentOrg)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ai_usage_dto_1.AiUsageOrgQueryDto, String]),
+    __metadata("design:returntype", Promise)
+], AiUsageAdminController.prototype, "orgReport", null);
+exports.AiUsageAdminController = AiUsageAdminController = __decorate([
+    (0, swagger_1.ApiTags)('AI Administration'),
+    (0, common_1.Controller)('admin/ai'),
+    __metadata("design:paramtypes", [ai_usage_service_1.AiUsageService])
+], AiUsageAdminController);
+//# sourceMappingURL=ai-usage-admin.controller.js.map

package/dist/ai/usage/ai-usage-admin.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-usage-admin.controller.js","sourceRoot":"","sources":["../../../src/ai/usage/ai-usage-admin.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,6CAA+E;AAE/E,gDAAwD;AACxD,kDAA8C;AAC9C,4CAAmD;AACnD,4CAA4C;AAC5C,yDAAoD;AACpD,qDAS4B;AAE5B,gFAAgF;AAChF,iDAAiD;AACjD,gFAAgF;AAChF,EAAE;AACF,kFAAkF;AAClF,EAAE;AACF,8DAA8D;AAC9D,8EAA8E;AAC9E,2EAA2E;AAC3E,uDAAuD;AACvD,gFAAgF;AAEhF;;;;;GAKG;AAGI,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IACJ;IAA7B,YAA6B,KAAqB;QAArB,UAAK,GAAL,KAAK,CAAgB;IAAG,CAAC;IAkChD,AAAN,KAAK,CAAC,MAAM,CAAU,KAA2B;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAsBK,AAAN,KAAK,CAAC,SAAS,CAAU,KAAyB,EAAgB,KAAa;QAC7E,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACnF,CAAC;CACF,CAAA;AA9DY,wDAAsB;AAmC3B;IAhCL,IAAA,YAAG,EAAC,OAAO,CAAC;IACZ,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,cAAc,CAAC,EAAE,CAAC;IACnD,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mDAAmD;QAC5D,WAAW,EACT,wFAAwF;YACxF,qCAAqC,0CAA2B,iBAAiB;YACjF,GAAG,sCAAuB,2DAA2D;YACrF,oFAAoF;YACpF,yFAAyF;YACzF,qFAAqF;YACrF,0FAA0F;YAC1F,oFAAoF;YACpF,6EAA6E;YAC7E,0FAA0F;YAC1F,0FAA0F;YAC1F,oEAAoE;YACpE,4FAA4F;YAC5F,aAAa;YACb,yEAAyE;YACzE,+DAA+D;KAClE,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;IAC/G,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;IAC3H,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,sCAAuB,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAC5G,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IACpH,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;IAC1G,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;IAChH,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAC3H,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC;IACjI,IAAA,uBAAe,EAAC,+BAAgB,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACtE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4CAA4C,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IAC1F,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAQ,mCAAoB;;oDAEhD;AAsBK;IApBL,IAAA,YAAG,EAAC,WAAW,CAAC;IAChB,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACvD,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wEAAwE;QACjF,WAAW,EACT,uFAAuF;YACvF,kFAAkF;YAClF,mFAAmF;YACnF,4EAA4E;KAC/E,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;IAC/G,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;IAC3H,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,oCAAqB,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAC1G,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;IACtH,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;IAC1G,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;IAChH,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC;IACjI,IAAA,uBAAe,EAAC,+BAAgB,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;IACrF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4CAA4C,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IACvG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,yDAAyD,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IACpG,WAAA,IAAA,cAAK,GAAE,CAAA;IAA6B,WAAA,IAAA,kBAAU,GAAE,CAAA;;qCAAjC,iCAAkB;;uDAEjD;iCA7DU,sBAAsB;IAFlC,IAAA,iBAAO,EAAC,mBAAmB,CAAC;IAC5B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEe,iCAAc;GADvC,sBAAsB,CA8DlC"}

package/dist/ai/usage/ai-usage-purge.handler.d.ts

@@ -0,0 +1,42 @@
+import { OnModuleInit } from '@nestjs/common';
+import type { Job } from '../../jobs/index';
+import { JobExecutionProfile } from '../../jobs/index';
+import { JobHandler } from '../../jobs/index';
+import { JobHandlerRegistry } from '../../jobs/index';
+import type { AiSystemPrisma } from '../data/ai-db';
+import { SystemSettingsService } from '../../settings/index';
+/**
+ * The job type. PERMANENT once rows of it exist.
+ *
+ * @stability experimental
+ */
+export declare const AI_USAGE_PURGE_TYPE = "ai.usage.purge";
+/** Rows per batch — a lock-duration bound, not a throughput knob. */
+export declare const AI_USAGE_PURGE_BATCH_SIZE = 5000;
+/**
+ * Safety stop on the batch loop (5 million rows a run). The loop's exit
+ * depends on rows disappearing; a bounded loop stops having done real work if
+ * that ever stops being true, and the next day's run continues.
+ */
+export declare const AI_USAGE_PURGE_MAX_BATCHES = 1000;
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+export declare class AiUsagePurgeHandler implements JobHandler, OnModuleInit {
+    private readonly registry;
+    private readonly prisma;
+    private readonly systemSettings;
+    private readonly logger;
+    readonly type = "ai.usage.purge";
+    readonly label = "AI usage purge";
+    /** Deletes only; thirty minutes covers millions of rows. Retried like any housekeeping job. */
+    readonly profile: JobExecutionProfile;
+    constructor(registry: JobHandlerRegistry, prisma: AiSystemPrisma, systemSettings: SystemSettingsService);
+    onModuleInit(): void;
+    /** Throws to fail (a database error), so the queue's retry applies. */
+    process(job: Job): Promise<void>;
+}
+//# sourceMappingURL=ai-usage-purge.handler.d.ts.map

package/dist/ai/usage/ai-usage-purge.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-usage-purge.handler.d.ts","sourceRoot":"","sources":["../../../src/ai/usage/ai-usage-purge.handler.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAsB,YAAY,EAAU,MAAM,gBAAgB,CAAC;AAC1E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD,qEAAqE;AACrE,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAI/C;;;;;GAKG;AACH,qBACa,mBAAoB,YAAW,UAAU,EAAE,YAAY;IAWhE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAGC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc;IAdjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAE/D,QAAQ,CAAC,IAAI,oBAAuB;IAEpC,QAAQ,CAAC,KAAK,oBAAoB;IAElC,+FAA+F;IAC/F,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAiD;gBAGnE,QAAQ,EAAE,kBAAkB,EAGF,MAAM,EAAE,cAAc,EAChD,cAAc,EAAE,qBAAqB;IAGxD,YAAY,IAAI,IAAI;IAIpB,uEAAuE;IACjE,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;CA0CvC"}