@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.5

package/dist/ai/config/dto/ai-config-response.dto.js

@@ -0,0 +1,181 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AiKeyRemovalResponseDto = exports.aiKeyRemovalResponseSchema = exports.AI_KEY_REMOVAL_WARNINGS = exports.AiConfigResponseDto = exports.aiConfigResponseSchema = exports.aiAdminProviderSchema = exports.aiKeyStatusSchema = void 0;
+const nestjs_zod_1 = require("nestjs-zod");
+const zod_1 = require("zod");
+const ai_1 = require("@marinoscar/platform-contract/ai");
+const settings_1 = require("@marinoscar/platform-contract/settings");
+// =============================================================================
+// GET /api/admin/ai/config — response (issue #428, epic #419)
+// =============================================================================
+//
+// The `ai` settings namespace joined, per provider, with the MASKED status of
+// that provider's admin (org) key. The key itself is never in this shape: it is
+// held in the encrypted credential store and `keyStatus` is built from
+// `CredentialsService.describe`, which cannot decrypt anything.
+// =============================================================================
+/** Masked, non-secret facts about a stored admin key. Mirrors storage's `secretStatus`. */
+exports.aiKeyStatusSchema = zod_1.z.object({
+    /** Whether an admin key is stored for this provider. */
+    configured: zod_1.z.boolean(),
+    /** A masked hint (`••••Xk9q`) so an admin can tell two keys apart. Never the key. */
+    hint: zod_1.z.string().nullable(),
+    updatedAt: zod_1.z.iso.datetime().nullable(),
+    updatedByUserId: zod_1.z.string().nullable(),
+});
+exports.aiAdminProviderSchema = zod_1.z.object({
+    /** Stable provider id (`openai`). */
+    id: zod_1.z.string(),
+    /** The adapter's display name, or the id when no adapter is registered. */
+    displayName: zod_1.z.string(),
+    /**
+     * Whether an adapter for this provider is registered in this process. A
+     * provider can have a settings slot and no adapter (a fork removed it), in
+     * which case it cannot be enabled.
+     */
+    registered: zod_1.z.boolean(),
+    /**
+     * `false` for a registered adapter that has no provider definition (#921,
+     * PP-14.6): an app registered it straight into the adapter registry, so the
+     * `ai` namespace has no slot for its settings and it cannot be enabled.
+     * Absent means configurable; every provider registered with
+     * `registerAiProvider` is. A form shows such a provider read-only and does
+     * not send it back on save.
+     */
+    configurable: zod_1.z.boolean().optional(),
+    /** The `ai.providers.<id>.enabled` switch, as stored. */
+    enabled: zod_1.z.boolean(),
+    /**
+     * Endpoint override for OpenAI-compatible gateways, or null for the provider
+     * default. For `azure-openai` it is the resource endpoint
+     * (`https://<resource>.openai.azure.com`) and for `openai-compatible` the
+     * server's API root (`http://ollama.internal:11434/v1`); both need one
+     * before they can be enabled (#448).
+     */
+    baseUrl: zod_1.z.string().nullable(),
+    /**
+     * The settings fields this provider accepts besides `enabled` (#448) —
+     * `baseUrl` for every provider, plus `apiVersion`, `apiStyle` and
+     * `deployments` for `azure-openai`, and `apiStyle` and `requiresKey` for
+     * `openai-compatible`. A form renders exactly these.
+     */
+    settingsFields: zod_1.z.array(zod_1.z.string()),
+    /**
+     * The provider's settings, as stored, besides `enabled` (PP-14.6): the
+     * values of exactly the `settingsFields`. The built-ins' also have the
+     * typed `baseUrl`, `apiVersion`, `apiStyle`, `deployments` and `requiresKey`
+     * properties below; a provider an app registered has only these.
+     */
+    settings: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
+    /**
+     * Whether the provider cannot be enabled before `baseUrl` is set (it has no
+     * default host): `azure-openai` and `openai-compatible`.
+     */
+    requiresBaseUrl: zod_1.z.boolean(),
+    /** The provider's own help texts for its key and endpoint fields, when it declares any. */
+    help: zod_1.z.object({ key: zod_1.z.string().optional(), baseUrl: zod_1.z.string().optional() }).optional(),
+    /** Azure OpenAI `api-version`, or null for the default (`2025-04-01-preview`). */
+    apiVersion: zod_1.z.string().nullable(),
+    /**
+     * Which wire API the adapter speaks, or null for the default — `responses`
+     * for `azure-openai`, `chat_completions` for `openai-compatible`.
+     */
+    apiStyle: zod_1.z.enum(ai_1.AI_OPENAI_API_STYLES).nullable(),
+    /** Azure OpenAI model id → deployment name, or null when none is configured. */
+    deployments: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).nullable(),
+    /**
+     * OpenAI-compatible: whether calls need a key, or null for the default
+     * (`true`). `false` means keyless (`keySource: "none"`).
+     */
+    requiresKey: zod_1.z.boolean().nullable(),
+    keyStatus: exports.aiKeyStatusSchema,
+    /** Capabilities the provider's ADAPTER supports (derived from its ports), not any one model's. */
+    supportedCapabilities: zod_1.z.array(ai_1.aiCapabilityIdSchema),
+});
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+exports.aiConfigResponseSchema = zod_1.z.object({
+    /** The platform kill switch. */
+    enabled: zod_1.z.boolean(),
+    keyPolicy: zod_1.z.enum(ai_1.AI_KEY_POLICIES),
+    logPromptContent: zod_1.z.boolean(),
+    defaults: zod_1.z.object({
+        /** Deployment-wide output-token cap, or null for none. */
+        maxOutputTokensCap: zod_1.z.number().int().nullable(),
+        allowBackgroundRuns: zod_1.z.boolean(),
+        /** Whether users may mint realtime voice sessions (#449). */
+        allowRealtime: zod_1.z.boolean(),
+    }),
+    /** Days usage events are kept before the daily `ai.usage.purge` deletes them. */
+    usageRetentionDays: zod_1.z.number().int(),
+    /** Which provider-hosted tools are switched on, and the MCP host allowlist (#442). */
+    hostedTools: zod_1.z.object({
+        web_search: zod_1.z.boolean(),
+        file_search: zod_1.z.boolean(),
+        code_interpreter: zod_1.z.boolean(),
+        image_generation: zod_1.z.boolean(),
+        mcp: zod_1.z.boolean(),
+        mcpAllowedHosts: zod_1.z.array(zod_1.z.string()),
+    }),
+    /**
+     * Rate limits and output caps (#450), exactly as stored — every field
+     * optional, absent means unlimited; `{}` when none are configured.
+     */
+    limits: zod_1.z.object({
+        perUser: zod_1.z
+            .object({ requestsPerMinute: zod_1.z.number().int().optional(), requestsPerDay: zod_1.z.number().int().optional() })
+            .optional(),
+        orgKey: zod_1.z
+            .object({ requestsPerDayPerUser: zod_1.z.number().int().optional(), tokensPerDayPerUser: zod_1.z.number().int().optional() })
+            .optional(),
+        /** #739: the deployment default per organization. */
+        perOrg: zod_1.z
+            .object({ requestsPerDay: zod_1.z.number().int().optional(), outputTokensPerDay: zod_1.z.number().int().optional() })
+            .optional(),
+        /** Keyed `<provider>:<modelId>`. */
+        perModel: zod_1.z
+            .record(zod_1.z.string(), zod_1.z.object({ maxOutputTokens: zod_1.z.number().int().optional(), requestsPerMinutePerUser: zod_1.z.number().int().optional() }))
+            .optional(),
+    }),
+    /** #739: whether the deployment's key serves organizations that have none of their own. */
+    deploymentKeyServesOrgs: zod_1.z.boolean(),
+    /** Registered providers ∪ providers with a settings slot. */
+    providers: zod_1.z.array(exports.aiAdminProviderSchema),
+    /**
+     * One generated-form descriptor per provider registered with
+     * `registerAiProvider` (PP-14.6), in the order of `providers`: the
+     * `enabled` switch, the provider's settings fields and, when it needs a key,
+     * a write-only `apiKey` secret field that says only whether a key is stored.
+     * The built-ins' have descriptors too; their admin cards keep their bespoke
+     * form and a provider an app added is rendered from its descriptor.
+     */
+    descriptors: zod_1.z.array(settings_1.pluggableDescriptorSchema),
+    /** The system-settings row version — send it back as `If-Match` on `PUT`. `0` when nothing is stored yet. */
+    version: zod_1.z.number().int(),
+    updatedAt: zod_1.z.iso.datetime().nullable(),
+    updatedBy: zod_1.z.object({ id: zod_1.z.string(), email: zod_1.z.string() }).nullable(),
+});
+class AiConfigResponseDto extends (0, nestjs_zod_1.createZodDto)(exports.aiConfigResponseSchema) {
+}
+exports.AiConfigResponseDto = AiConfigResponseDto;
+/** Warning codes the key-removal response can carry. */
+exports.AI_KEY_REMOVAL_WARNINGS = ['ORG_FALLBACK_WITHOUT_KEY'];
+/**
+ * `DELETE /api/admin/ai/providers/:provider/key` — the admin view, plus
+ * `warnings`. `ORG_FALLBACK_WITHOUT_KEY` means the deployment's key policy is
+ * still `byok_with_org_fallback`, so users without their own key now have no
+ * key at all for this provider.
+ *
+ * @internal
+ */
+exports.aiKeyRemovalResponseSchema = exports.aiConfigResponseSchema.extend({
+    warnings: zod_1.z.array(zod_1.z.enum(exports.AI_KEY_REMOVAL_WARNINGS)),
+});
+class AiKeyRemovalResponseDto extends (0, nestjs_zod_1.createZodDto)(exports.aiKeyRemovalResponseSchema) {
+}
+exports.AiKeyRemovalResponseDto = AiKeyRemovalResponseDto;
+//# sourceMappingURL=ai-config-response.dto.js.map

package/dist/ai/config/dto/ai-config-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-config-response.dto.js","sourceRoot":"","sources":["../../../../src/ai/config/dto/ai-config-response.dto.ts"],"names":[],"mappings":";;;AAAA,2CAA0C;AAC1C,6BAAwB;AAExB,yDAA+G;AAC/G,qEAAmF;AAEnF,gFAAgF;AAChF,8DAA8D;AAC9D,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,uEAAuE;AACvE,gEAAgE;AAChE,gFAAgF;AAEhF,2FAA2F;AAC9E,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,wDAAwD;IACxD,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE;IACvB,qFAAqF;IACrF,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,qCAAqC;IACrC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,2EAA2E;IAC3E,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;IACvB;;;;OAIG;IACH,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE;IACvB;;;;;;;OAOG;IACH,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,yDAAyD;IACzD,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB;;;;;;OAMG;IACH,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B;;;;;OAKG;IACH,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC;IAC3C;;;OAGG;IACH,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE;IAC5B,2FAA2F;IAC3F,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzF,kFAAkF;IAClF,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC;;;OAGG;IACH,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,yBAAoB,CAAC,CAAC,QAAQ,EAAE;IACjD,gFAAgF;IAChF,WAAW,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD;;;OAGG;IACH,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,yBAAiB;IAC5B,kGAAkG;IAClG,qBAAqB,EAAE,OAAC,CAAC,KAAK,CAAC,yBAAoB,CAAC;CACrD,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,gCAAgC;IAChC,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,oBAAe,CAAC;IAClC,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE;IAC7B,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC;QACjB,0DAA0D;QAC1D,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC/C,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE;QAChC,6DAA6D;QAC7D,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE;KAC3B,CAAC;IACF,iFAAiF;IACjF,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpC,sFAAsF;IACtF,WAAW,EAAE,OAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE;QACvB,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE;QACxB,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE;QAC7B,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE;QAC7B,GAAG,EAAE,OAAC,CAAC,OAAO,EAAE;QAChB,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC;IACF;;;OAGG;IACH,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,OAAC;aACP,MAAM,CAAC,EAAE,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;aACvG,QAAQ,EAAE;QACb,MAAM,EAAE,OAAC;aACN,MAAM,CAAC,EAAE,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;aAChH,QAAQ,EAAE;QACb,qDAAqD;QACrD,MAAM,EAAE,OAAC;aACN,MAAM,CAAC,EAAE,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;aACxG,QAAQ,EAAE;QACb,oCAAoC;QACpC,QAAQ,EAAE,OAAC;aACR,MAAM,CACL,OAAC,CAAC,MAAM,EAAE,EACV,OAAC,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,wBAAwB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAClH;aACA,QAAQ,EAAE;KACd,CAAC;IACF,2FAA2F;IAC3F,uBAAuB,EAAE,OAAC,CAAC,OAAO,EAAE;IACpC,6DAA6D;IAC7D,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC;IACzC;;;;;;;OAOG;IACH,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,oCAAyB,CAAC;IAC/C,6GAA6G;IAC7G,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtE,CAAC,CAAC;AAEH,MAAa,mBAAoB,SAAQ,IAAA,yBAAY,EAAC,8BAAsB,CAAC;CAAG;AAAhF,kDAAgF;AAIhF,wDAAwD;AAC3C,QAAA,uBAAuB,GAAG,CAAC,0BAA0B,CAAU,CAAC;AAE7E;;;;;;;GAOG;AACU,QAAA,0BAA0B,GAAG,8BAAsB,CAAC,MAAM,CAAC;IACtE,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,IAAI,CAAC,+BAAuB,CAAC,CAAC;CACnD,CAAC,CAAC;AAEH,MAAa,uBAAwB,SAAQ,IAAA,yBAAY,EAAC,kCAA0B,CAAC;CAAG;AAAxF,0DAAwF"}

package/dist/ai/config/dto/ai-model.dto.d.ts

@@ -0,0 +1,161 @@
+import { z } from 'zod';
+/**
+ * Where a row's `capabilities` came from (docs/specs/ai-platform.md §2.17). An
+ * `admin_override` is never touched by a catalog refresh.
+ */
+export declare const AI_CAPABILITY_SOURCES: readonly ["catalog", "admin_override", "unclassified"];
+export type AiCapabilitySource = (typeof AI_CAPABILITY_SOURCES)[number];
+export declare const aiModelListQuerySchema: z.ZodObject<{
+    page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    pageSize: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    provider: z.ZodOptional<z.ZodString>;
+    capability: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodOptional<z.ZodPipe<z.ZodEnum<{
+        true: "true";
+        false: "false";
+    }>, z.ZodTransform<boolean, "true" | "false">>>;
+    includeDeprecated: z.ZodDefault<z.ZodPipe<z.ZodEnum<{
+        true: "true";
+        false: "false";
+    }>, z.ZodTransform<boolean, "true" | "false">>>;
+    q: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const AiModelListQueryDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    pageSize: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    provider: z.ZodOptional<z.ZodString>;
+    capability: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodOptional<z.ZodPipe<z.ZodEnum<{
+        true: "true";
+        false: "false";
+    }>, z.ZodTransform<boolean, "true" | "false">>>;
+    includeDeprecated: z.ZodDefault<z.ZodPipe<z.ZodEnum<{
+        true: "true";
+        false: "false";
+    }>, z.ZodTransform<boolean, "true" | "false">>>;
+    q: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, false>;
+export declare class AiModelListQueryDto extends AiModelListQueryDto_base {
+}
+export type AiModelListQuery = z.output<typeof aiModelListQuerySchema>;
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+export declare const aiModelSchema: z.ZodObject<{
+    id: z.ZodString;
+    provider: z.ZodString;
+    modelId: z.ZodString;
+    displayName: z.ZodNullable<z.ZodString>;
+    capabilities: z.ZodNullable<z.ZodObject<{
+        capabilities: z.ZodArray<z.ZodString>;
+        inputModalities: z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiInputModalityEnum>>;
+        outputModalities: z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiOutputModalityEnum>>;
+        reasoningEfforts: z.ZodOptional<z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiReasoningEffortEnum>>>;
+        contextWindow: z.ZodOptional<z.ZodNumber>;
+        maxOutputTokens: z.ZodOptional<z.ZodNumber>;
+        voices: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    capabilitySource: z.ZodEnum<{
+        catalog: "catalog";
+        admin_override: "admin_override";
+        unclassified: "unclassified";
+    }>;
+    enabled: z.ZodBoolean;
+    contextWindow: z.ZodNullable<z.ZodNumber>;
+    maxOutputTokens: z.ZodNullable<z.ZodNumber>;
+    discoveredAt: z.ZodISODateTime;
+    lastSeenAt: z.ZodISODateTime;
+    deprecatedAt: z.ZodNullable<z.ZodISODateTime>;
+    updatedAt: z.ZodISODateTime;
+    updatedByUserId: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+declare const AiModelDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    id: z.ZodString;
+    provider: z.ZodString;
+    modelId: z.ZodString;
+    displayName: z.ZodNullable<z.ZodString>;
+    capabilities: z.ZodNullable<z.ZodObject<{
+        capabilities: z.ZodArray<z.ZodString>;
+        inputModalities: z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiInputModalityEnum>>;
+        outputModalities: z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiOutputModalityEnum>>;
+        reasoningEfforts: z.ZodOptional<z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiReasoningEffortEnum>>>;
+        contextWindow: z.ZodOptional<z.ZodNumber>;
+        maxOutputTokens: z.ZodOptional<z.ZodNumber>;
+        voices: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    capabilitySource: z.ZodEnum<{
+        catalog: "catalog";
+        admin_override: "admin_override";
+        unclassified: "unclassified";
+    }>;
+    enabled: z.ZodBoolean;
+    contextWindow: z.ZodNullable<z.ZodNumber>;
+    maxOutputTokens: z.ZodNullable<z.ZodNumber>;
+    discoveredAt: z.ZodISODateTime;
+    lastSeenAt: z.ZodISODateTime;
+    deprecatedAt: z.ZodNullable<z.ZodISODateTime>;
+    updatedAt: z.ZodISODateTime;
+    updatedByUserId: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>, false>;
+export declare class AiModelDto extends AiModelDto_base {
+}
+export type AiModelView = z.infer<typeof aiModelSchema>;
+export declare const updateAiModelSchema: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    capabilities: z.ZodOptional<z.ZodObject<{
+        capabilities: z.ZodArray<z.ZodString>;
+        inputModalities: z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiInputModalityEnum>>;
+        outputModalities: z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiOutputModalityEnum>>;
+        reasoningEfforts: z.ZodOptional<z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiReasoningEffortEnum>>>;
+        contextWindow: z.ZodOptional<z.ZodNumber>;
+        maxOutputTokens: z.ZodOptional<z.ZodNumber>;
+        voices: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+declare const UpdateAiModelDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    capabilities: z.ZodOptional<z.ZodObject<{
+        capabilities: z.ZodArray<z.ZodString>;
+        inputModalities: z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiInputModalityEnum>>;
+        outputModalities: z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiOutputModalityEnum>>;
+        reasoningEfforts: z.ZodOptional<z.ZodArray<z.ZodEnum<import("../../core/capabilities").AiReasoningEffortEnum>>>;
+        contextWindow: z.ZodOptional<z.ZodNumber>;
+        maxOutputTokens: z.ZodOptional<z.ZodNumber>;
+        voices: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>, false>;
+export declare class UpdateAiModelDto extends UpdateAiModelDto_base {
+}
+export type UpdateAiModelInput = z.output<typeof updateAiModelSchema>;
+export declare const refreshAiCatalogSchema: z.ZodObject<{
+    provider: z.ZodString;
+}, z.core.$strip>;
+declare const RefreshAiCatalogDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    provider: z.ZodString;
+}, z.core.$strip>, false>;
+export declare class RefreshAiCatalogDto extends RefreshAiCatalogDto_base {
+}
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+export declare const refreshAiCatalogResultSchema: z.ZodObject<{
+    jobId: z.ZodString;
+    status: z.ZodString;
+}, z.core.$strip>;
+declare const RefreshAiCatalogResultDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    jobId: z.ZodString;
+    status: z.ZodString;
+}, z.core.$strip>, false>;
+export declare class RefreshAiCatalogResultDto extends RefreshAiCatalogResultDto_base {
+}
+export type RefreshAiCatalogResult = z.infer<typeof refreshAiCatalogResultSchema>;
+export {};
+//# sourceMappingURL=ai-model.dto.d.ts.map

package/dist/ai/config/dto/ai-model.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-model.dto.d.ts","sourceRoot":"","sources":["../../../../src/ai/config/dto/ai-model.dto.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB;;;GAGG;AACH,eAAO,MAAM,qBAAqB,wDAAyD,CAAC;AAC5F,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAUxE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;iBAWjC,CAAC;;;;;;;;;;;;;;;;AAEH,qBAAa,mBAAoB,SAAQ,wBAAoC;CAAG;AAChF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEvE;;;;;GAKG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuBxB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,qBAAa,UAAW,SAAQ,eAA2B;CAAG;AAC9D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAExD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;iBAwB7B,CAAC;;;;;;;;;;;;;;AAEJ,qBAAa,gBAAiB,SAAQ,qBAAiC;CAAG;AAC1E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,sBAAsB;;iBAGjC,CAAC;;;;AAEH,qBAAa,mBAAoB,SAAQ,wBAAoC;CAAG;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;iBASvC,CAAC;;;;;AAEH,qBAAa,yBAA0B,SAAQ,8BAA0C;CAAG;AAC5F,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/ai/config/dto/ai-model.dto.js

@@ -0,0 +1,127 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RefreshAiCatalogResultDto = exports.refreshAiCatalogResultSchema = exports.RefreshAiCatalogDto = exports.refreshAiCatalogSchema = exports.UpdateAiModelDto = exports.updateAiModelSchema = exports.AiModelDto = exports.aiModelSchema = exports.AiModelListQueryDto = exports.aiModelListQuerySchema = exports.AI_CAPABILITY_SOURCES = void 0;
+const nestjs_zod_1 = require("nestjs-zod");
+const zod_1 = require("zod");
+const ai_1 = require("@marinoscar/platform-contract/ai");
+const capabilities_1 = require("../../core/capabilities");
+const capability_registry_1 = require("../../core/capability-registry");
+// =============================================================================
+// Admin model catalog routes (issue #428, epic #419)
+// =============================================================================
+//
+//   GET   /api/admin/ai/models          list (flat pagination, like /api/admin/jobs)
+//   PATCH /api/admin/ai/models/:id      enable / rename / override capabilities
+//   POST  /api/admin/ai/models/refresh  enqueue `ai.catalog.refresh`
+// =============================================================================
+/**
+ * Where a row's `capabilities` came from (docs/specs/ai-platform.md §2.17). An
+ * `admin_override` is never touched by a catalog refresh.
+ */
+exports.AI_CAPABILITY_SOURCES = ['catalog', 'admin_override', 'unclassified'];
+/**
+ * `'true'`/`'false'` → boolean. NOT `z.coerce.boolean()`, which turns the
+ * string `'false'` into `true` — see `jobs/dto/job-list-query.dto.ts`.
+ */
+const queryBoolean = zod_1.z
+    .enum(['true', 'false'])
+    .transform((value) => value === 'true');
+exports.aiModelListQuerySchema = zod_1.z.object({
+    page: zod_1.z.coerce.number().int().min(1).default(1),
+    pageSize: zod_1.z.coerce.number().int().min(1).max(100).default(20),
+    provider: zod_1.z.string().min(1).max(64).optional(),
+    /** Only models whose capabilities include this one. */
+    capability: ai_1.aiCapabilityIdSchema.optional(),
+    enabled: queryBoolean.optional(),
+    /** Include models the provider no longer lists. Default false. */
+    includeDeprecated: queryBoolean.default(false),
+    /** Case-insensitive substring of the model id or display name. */
+    q: zod_1.z.string().trim().min(1).max(200).optional(),
+});
+class AiModelListQueryDto extends (0, nestjs_zod_1.createZodDto)(exports.aiModelListQuerySchema) {
+}
+exports.AiModelListQueryDto = AiModelListQueryDto;
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+exports.aiModelSchema = zod_1.z.object({
+    /** Row id — the `:id` of `PATCH /api/admin/ai/models/:id`. */
+    id: zod_1.z.string(),
+    provider: zod_1.z.string(),
+    /** The provider's own model id (`gpt-4o-mini`). */
+    modelId: zod_1.z.string(),
+    displayName: zod_1.z.string().nullable(),
+    /**
+     * What the model can do, or null when the stored value is not a valid
+     * capability record (an unclassified row carries an empty placeholder).
+     */
+    capabilities: capabilities_1.aiModelCapabilitiesSchema.nullable(),
+    capabilitySource: zod_1.z.enum(exports.AI_CAPABILITY_SOURCES),
+    /** Whether this deployment offers the model to users. Only an admin turns it on. */
+    enabled: zod_1.z.boolean(),
+    contextWindow: zod_1.z.number().int().nullable(),
+    maxOutputTokens: zod_1.z.number().int().nullable(),
+    discoveredAt: zod_1.z.iso.datetime(),
+    lastSeenAt: zod_1.z.iso.datetime(),
+    /** Set when the provider stopped listing the model. A deprecated model cannot be enabled. */
+    deprecatedAt: zod_1.z.iso.datetime().nullable(),
+    updatedAt: zod_1.z.iso.datetime(),
+    updatedByUserId: zod_1.z.string().nullable(),
+});
+class AiModelDto extends (0, nestjs_zod_1.createZodDto)(exports.aiModelSchema) {
+}
+exports.AiModelDto = AiModelDto;
+exports.updateAiModelSchema = zod_1.z
+    .object({
+    enabled: zod_1.z.boolean().optional(),
+    /** A label for the admin and user UIs. `null` clears it. */
+    displayName: zod_1.z.string().trim().min(1).max(200).nullable().optional(),
+    /**
+     * A full capability record. Setting it marks the row `admin_override`,
+     * which a catalog refresh never overwrites. Every capability must be a
+     * registered one (a built-in or an app's, `GET /api/admin/ai/capabilities`):
+     * reads tolerate an id whose plugin was removed, a write does not add one.
+     */
+    capabilities: capabilities_1.aiModelCapabilitiesSchema
+        .refine((value) => value.capabilities.every((capability) => (0, capability_registry_1.isAiCapability)(capability)), {
+        message: 'Every capability must be registered (see GET /api/admin/ai/capabilities).',
+        path: ['capabilities'],
+    })
+        .optional(),
+})
+    .refine((value) => value.enabled !== undefined ||
+    value.displayName !== undefined ||
+    value.capabilities !== undefined, { message: 'Send at least one of enabled, displayName, capabilities.' });
+class UpdateAiModelDto extends (0, nestjs_zod_1.createZodDto)(exports.updateAiModelSchema) {
+}
+exports.UpdateAiModelDto = UpdateAiModelDto;
+exports.refreshAiCatalogSchema = zod_1.z.object({
+    /** Provider id whose catalog to refresh, e.g. `openai`. */
+    provider: zod_1.z.string().min(1).max(64),
+});
+class RefreshAiCatalogDto extends (0, nestjs_zod_1.createZodDto)(exports.refreshAiCatalogSchema) {
+}
+exports.RefreshAiCatalogDto = RefreshAiCatalogDto;
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+exports.refreshAiCatalogResultSchema = zod_1.z.object({
+    /**
+     * The queued `ai.catalog.refresh` job. A refresh already pending or running
+     * for this provider is reused rather than duplicated, so this may be an
+     * existing job's id — follow it in `GET /api/admin/jobs`.
+     */
+    jobId: zod_1.z.string(),
+    /** The job's status at the time of the response (`pending` or `running`). */
+    status: zod_1.z.string(),
+});
+class RefreshAiCatalogResultDto extends (0, nestjs_zod_1.createZodDto)(exports.refreshAiCatalogResultSchema) {
+}
+exports.RefreshAiCatalogResultDto = RefreshAiCatalogResultDto;
+//# sourceMappingURL=ai-model.dto.js.map

package/dist/ai/config/dto/ai-model.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-model.dto.js","sourceRoot":"","sources":["../../../../src/ai/config/dto/ai-model.dto.ts"],"names":[],"mappings":";;;AAAA,2CAA0C;AAC1C,6BAAwB;AAExB,yDAAwE;AACxE,0DAAoE;AACpE,wEAAgE;AAEhE,gFAAgF;AAChF,qDAAqD;AACrD,gFAAgF;AAChF,EAAE;AACF,qFAAqF;AACrF,gFAAgF;AAChF,qEAAqE;AACrE,gFAAgF;AAEhF;;;GAGG;AACU,QAAA,qBAAqB,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,cAAc,CAAU,CAAC;AAG5F;;;GAGG;AACH,MAAM,YAAY,GAAG,OAAC;KACnB,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACvB,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;AAE7B,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7D,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,uDAAuD;IACvD,UAAU,EAAE,yBAAoB,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE;IAChC,kEAAkE;IAClE,iBAAiB,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,kEAAkE;IAClE,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAEH,MAAa,mBAAoB,SAAQ,IAAA,yBAAY,EAAC,8BAAsB,CAAC;CAAG;AAAhF,kDAAgF;AAGhF;;;;;GAKG;AACU,QAAA,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IACpC,8DAA8D;IAC9D,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,mDAAmD;IACnD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC;;;OAGG;IACH,YAAY,EAAE,wCAAyB,CAAC,QAAQ,EAAE;IAClD,gBAAgB,EAAE,OAAC,CAAC,IAAI,CAAC,6BAAqB,CAAC;IAC/C,oFAAoF;IACpF,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,YAAY,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC5B,6FAA6F;IAC7F,YAAY,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAa,UAAW,SAAQ,IAAA,yBAAY,EAAC,qBAAa,CAAC;CAAG;AAA9D,gCAA8D;AAGjD,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,4DAA4D;IAC5D,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpE;;;;;OAKG;IACH,YAAY,EAAE,wCAAyB;SACpC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,oCAAc,EAAC,UAAU,CAAC,CAAC,EAAE;QACvF,OAAO,EAAE,2EAA2E;QACpF,IAAI,EAAE,CAAC,cAAc,CAAC;KACvB,CAAC;SACD,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,KAAK,SAAS;IAC3B,KAAK,CAAC,WAAW,KAAK,SAAS;IAC/B,KAAK,CAAC,YAAY,KAAK,SAAS,EAClC,EAAE,OAAO,EAAE,0DAA0D,EAAE,CACxE,CAAC;AAEJ,MAAa,gBAAiB,SAAQ,IAAA,yBAAY,EAAC,2BAAmB,CAAC;CAAG;AAA1E,4CAA0E;AAG7D,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,2DAA2D;IAC3D,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACpC,CAAC,CAAC;AAEH,MAAa,mBAAoB,SAAQ,IAAA,yBAAY,EAAC,8BAAsB,CAAC;CAAG;AAAhF,kDAAgF;AAEhF;;;;;GAKG;AACU,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD;;;;OAIG;IACH,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,6EAA6E;IAC7E,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,MAAa,yBAA0B,SAAQ,IAAA,yBAAY,EAAC,oCAA4B,CAAC;CAAG;AAA5F,8DAA4F"}

package/dist/ai/config/dto/ai-provider-key.dto.d.ts

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+/** Accepted key length bounds. Real provider keys are well inside these. */
+export declare const AI_API_KEY_MIN = 8;
+export declare const AI_API_KEY_MAX = 512;
+/** `PUT /api/admin/ai/providers/:provider/key`. Write-only: the key is never returned. */
+export declare const setAiProviderKeySchema: z.ZodObject<{
+    apiKey: z.ZodString;
+}, z.core.$strip>;
+declare const SetAiProviderKeyDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    apiKey: z.ZodString;
+}, z.core.$strip>, false>;
+export declare class SetAiProviderKeyDto extends SetAiProviderKeyDto_base {
+}
+export type SetAiProviderKeyInput = z.output<typeof setAiProviderKeySchema>;
+/** The word `DELETE /api/admin/ai/providers/:provider/key` requires. Same typed-literal pattern as push-config's `REMOVE`. */
+export declare const AI_KEY_REMOVE_CONFIRMATION = "REMOVE";
+export declare const removeAiProviderKeySchema: z.ZodObject<{
+    confirmation: z.ZodLiteral<"REMOVE">;
+}, z.core.$strip>;
+declare const RemoveAiProviderKeyDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    confirmation: z.ZodLiteral<"REMOVE">;
+}, z.core.$strip>, false>;
+export declare class RemoveAiProviderKeyDto extends RemoveAiProviderKeyDto_base {
+}
+export {};
+//# sourceMappingURL=ai-provider-key.dto.d.ts.map

package/dist/ai/config/dto/ai-provider-key.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-provider-key.dto.d.ts","sourceRoot":"","sources":["../../../../src/ai/config/dto/ai-provider-key.dto.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,4EAA4E;AAC5E,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,cAAc,MAAM,CAAC;AAElC,0FAA0F;AAC1F,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;;;;AAEH,qBAAa,mBAAoB,SAAQ,wBAAoC;CAAG;AAChF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,8HAA8H;AAC9H,eAAO,MAAM,0BAA0B,WAAW,CAAC;AAEnD,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;;;;AAEH,qBAAa,sBAAuB,SAAQ,2BAAuC;CAAG"}

package/dist/ai/config/dto/ai-provider-key.dto.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemoveAiProviderKeyDto = exports.removeAiProviderKeySchema = exports.AI_KEY_REMOVE_CONFIRMATION = exports.SetAiProviderKeyDto = exports.setAiProviderKeySchema = exports.AI_API_KEY_MAX = exports.AI_API_KEY_MIN = void 0;
+const nestjs_zod_1 = require("nestjs-zod");
+const zod_1 = require("zod");
+// =============================================================================
+// Admin (org) AI key routes — bodies (issue #428, epic #419)
+// =============================================================================
+/** Accepted key length bounds. Real provider keys are well inside these. */
+exports.AI_API_KEY_MIN = 8;
+exports.AI_API_KEY_MAX = 512;
+/** `PUT /api/admin/ai/providers/:provider/key`. Write-only: the key is never returned. */
+exports.setAiProviderKeySchema = zod_1.z.object({
+    apiKey: zod_1.z.string().trim().min(exports.AI_API_KEY_MIN).max(exports.AI_API_KEY_MAX),
+});
+class SetAiProviderKeyDto extends (0, nestjs_zod_1.createZodDto)(exports.setAiProviderKeySchema) {
+}
+exports.SetAiProviderKeyDto = SetAiProviderKeyDto;
+/** The word `DELETE /api/admin/ai/providers/:provider/key` requires. Same typed-literal pattern as push-config's `REMOVE`. */
+exports.AI_KEY_REMOVE_CONFIRMATION = 'REMOVE';
+exports.removeAiProviderKeySchema = zod_1.z.object({
+    confirmation: zod_1.z.literal(exports.AI_KEY_REMOVE_CONFIRMATION),
+});
+class RemoveAiProviderKeyDto extends (0, nestjs_zod_1.createZodDto)(exports.removeAiProviderKeySchema) {
+}
+exports.RemoveAiProviderKeyDto = RemoveAiProviderKeyDto;
+//# sourceMappingURL=ai-provider-key.dto.js.map

package/dist/ai/config/dto/ai-provider-key.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-provider-key.dto.js","sourceRoot":"","sources":["../../../../src/ai/config/dto/ai-provider-key.dto.ts"],"names":[],"mappings":";;;AAAA,2CAA0C;AAC1C,6BAAwB;AAExB,gFAAgF;AAChF,6DAA6D;AAC7D,gFAAgF;AAEhF,4EAA4E;AAC/D,QAAA,cAAc,GAAG,CAAC,CAAC;AACnB,QAAA,cAAc,GAAG,GAAG,CAAC;AAElC,0FAA0F;AAC7E,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,sBAAc,CAAC,CAAC,GAAG,CAAC,sBAAc,CAAC;CAClE,CAAC,CAAC;AAEH,MAAa,mBAAoB,SAAQ,IAAA,yBAAY,EAAC,8BAAsB,CAAC;CAAG;AAAhF,kDAAgF;AAGhF,8HAA8H;AACjH,QAAA,0BAA0B,GAAG,QAAQ,CAAC;AAEtC,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,OAAC,CAAC,OAAO,CAAC,kCAA0B,CAAC;CACpD,CAAC,CAAC;AAEH,MAAa,sBAAuB,SAAQ,IAAA,yBAAY,EAAC,iCAAyB,CAAC;CAAG;AAAtF,wDAAsF"}