@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.5

package/dist/ai/config/ai-admin.controller.js

@@ -0,0 +1,352 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AiAdminController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../../identity/index");
+const ai_constants_1 = require("../ai.constants");
+const index_2 = require("../../core/index");
+const index_3 = require("../../core/index");
+const ai_config_admin_service_1 = require("./ai-config-admin.service");
+const ai_models_admin_service_1 = require("./ai-models-admin.service");
+const ai_provider_test_service_1 = require("./ai-provider-test.service");
+const ai_capabilities_dto_1 = require("./dto/ai-capabilities.dto");
+const ai_config_response_dto_1 = require("./dto/ai-config-response.dto");
+const ai_model_dto_1 = require("./dto/ai-model.dto");
+const ai_provider_key_dto_1 = require("./dto/ai-provider-key.dto");
+const ai_provider_test_dto_1 = require("./dto/ai-provider-test.dto");
+const update_ai_config_dto_1 = require("./dto/update-ai-config.dto");
+// =============================================================================
+// AiAdminController (issue #428, epic #419)
+// =============================================================================
+//
+// The HTTP surface behind the admin AI settings page (#429). Every route is
+// gated on `ai_config:read` / `ai_config:write` — a permission pair of its own,
+// for the blast-radius reason docs/specs/ai-platform.md §3 gives — and NONE is
+// behind `AiEnabledGuard`: an administrator must always be able to turn the
+// platform back on (§2.19).
+//
+//   GET    /api/admin/ai/config                      ai_config:read
+//   PUT    /api/admin/ai/config                      ai_config:write
+//   PUT    /api/admin/ai/providers/:provider/key     ai_config:write
+//   DELETE /api/admin/ai/providers/:provider/key     ai_config:write
+//   POST   /api/admin/ai/providers/:provider/test    ai_config:write (always 200)
+//   GET    /api/admin/ai/models                      ai_config:read
+//   PATCH  /api/admin/ai/models/:id                  ai_config:write
+//   POST   /api/admin/ai/models/refresh              ai_config:write
+//   GET    /api/admin/ai/capabilities                ai_config:read (PP-14.17)
+//
+// ⚠ THE ADMIN KEY IS WRITE-ONLY. No route here, or anywhere, returns it; the
+// responses carry `keyStatus` — a masked hint built without decrypting.
+// =============================================================================
+const PROVIDER_PARAM = {
+    name: 'provider',
+    description: 'Provider id, e.g. `openai`.',
+    example: 'openai',
+};
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+let AiAdminController = class AiAdminController {
+    admin;
+    providerTest;
+    models;
+    constructor(admin, providerTest, models) {
+        this.admin = admin;
+        this.providerTest = providerTest;
+        this.models = models;
+    }
+    async getConfig() {
+        return this.admin.describeForAdmin();
+    }
+    async replaceConfig(dto, userId, ifMatch) {
+        // An unparseable `If-Match` is treated as absent, exactly as
+        // `StorageConfigController` does — `NaN !== version` would otherwise turn
+        // every save into a 409 no reload can fix.
+        const parsed = ifMatch !== undefined ? Number.parseInt(ifMatch, 10) : NaN;
+        const expectedVersion = Number.isInteger(parsed) ? parsed : undefined;
+        return this.admin.replace(dto, userId, expectedVersion);
+    }
+    async setKey(provider, dto, userId) {
+        return this.admin.setKey(provider, dto.apiKey, userId);
+    }
+    async deleteKey(provider, _dto, userId) {
+        return this.admin.deleteKey(provider, userId);
+    }
+    async testProvider(provider, dto, userId) {
+        return this.providerTest.test(provider, dto, userId);
+    }
+    async listModels(query) {
+        return this.models.list(query);
+    }
+    // Literal `models/refresh` is declared before the parameterised route below
+    // for readability; the methods differ (POST vs PATCH) so they cannot collide.
+    async refreshModels(dto, userId) {
+        return this.models.refresh(dto.provider, userId);
+    }
+    async updateModel(id, dto, userId) {
+        return this.models.update(id, dto, userId);
+    }
+    getCapabilities() {
+        return (0, ai_capabilities_dto_1.describeAiVocabulary)();
+    }
+};
+exports.AiAdminController = AiAdminController;
+__decorate([
+    (0, common_1.Get)('config'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.AI_CONFIG_READ] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Get the AI platform configuration (Admin only)',
+        description: 'The `ai` settings namespace — the kill switch, the key policy, prompt logging, ' +
+            'defaults — plus one entry per provider (every registered adapter and every provider ' +
+            'with a settings slot) carrying its `enabled` switch, `baseUrl` override, the ' +
+            'capabilities its adapter supports, and `keyStatus`: a masked description of the ' +
+            'stored admin key. **The admin key itself is never returned by this or any other ' +
+            'endpoint.**\n\n' +
+            'Reachable while AI is disabled — this is how an administrator turns it back on.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The AI configuration', type: ai_config_response_dto_1.AiConfigResponseDto }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], AiAdminController.prototype, "getConfig", null);
+__decorate([
+    (0, common_1.Put)('config'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.AI_CONFIG_WRITE] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Replace the AI platform configuration (Admin only)',
+        description: 'Full replace of the `ai` namespace. `providers` is keyed by provider id; a provider ' +
+            'left out keeps its stored settings. An empty or null `baseUrl` / `maxOutputTokensCap` ' +
+            'clears a stored one. Takes effect immediately on this instance and within five ' +
+            'seconds on every other one — no restart.\n\n' +
+            'Refused with **400** (reason in `details.reason`) when it enables a provider with no ' +
+            'registered adapter (`AI_PROVIDER_NOT_REGISTERED`), names a provider this deployment ' +
+            'has no settings slot for (`AI_UNKNOWN_PROVIDER`), ' +
+            'or selects `byok_with_org_fallback` while AI is on and an enabled provider has no ' +
+            'admin key (`AI_KEY_REQUIRED`). Nothing is written when any of these apply.\n\n' +
+            'There is no key field: the admin key has its own routes, so it is verified before it ' +
+            'is stored and never travels with a settings save.',
+    }),
+    (0, swagger_1.ApiHeader)({
+        name: 'If-Match',
+        description: 'Expected `version` for optimistic concurrency (`0` asserts nothing is stored yet). ' +
+            'Omit to overwrite unconditionally. This is the version of the whole system-settings ' +
+            'row, so a concurrent save of an unrelated setting can cause a conflict — reload and ' +
+            're-apply.',
+        required: false,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The updated AI configuration', type: ai_config_response_dto_1.AiConfigResponseDto }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error, or a rejected combination (see above)', type: index_3.ErrorDto }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'Version conflict', type: index_3.ErrorDto }),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, index_1.CurrentUser)('id')),
+    __param(2, (0, common_1.Headers)('if-match')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [update_ai_config_dto_1.UpdateAiConfigDto, String, String]),
+    __metadata("design:returntype", Promise)
+], AiAdminController.prototype, "replaceConfig", null);
+__decorate([
+    (0, common_1.Put)('providers/:provider/key'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.AI_CONFIG_WRITE] }),
+    (0, swagger_1.ApiOperation)({
+        summary: "Set or rotate a provider's admin key (Admin only)",
+        description: 'Stores the admin (org) key for one provider in the encrypted credential store. The ' +
+            'key is **verified against the provider first**: a rejected key answers **400** with ' +
+            '`details.reason: "AI_KEY_INVALID"` and **nothing is stored**, so a typo can never ' +
+            'replace a working key. An unreachable provider answers with its own error (e.g. 503 ' +
+            '`AI_PROVIDER_UNAVAILABLE`), also storing nothing.\n\n' +
+            'The admin key drives catalog discovery and the connection test, and serves users ' +
+            'only under the `byok_with_org_fallback` key policy. It is **write-only**: the response ' +
+            'is the admin view, carrying a masked `keyStatus.hint`, never the key.',
+    }),
+    (0, swagger_1.ApiParam)(PROVIDER_PARAM),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The updated AI configuration', type: ai_config_response_dto_1.AiConfigResponseDto }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error, or `AI_KEY_INVALID`', type: index_3.ErrorDto }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'No adapter is registered for this provider', type: index_3.ErrorDto }),
+    (0, swagger_1.ApiResponse)({ status: 503, description: 'The provider could not be reached to verify the key', type: index_3.ErrorDto }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, index_1.CurrentUser)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, ai_provider_key_dto_1.SetAiProviderKeyDto, String]),
+    __metadata("design:returntype", Promise)
+], AiAdminController.prototype, "setKey", null);
+__decorate([
+    (0, common_1.Delete)('providers/:provider/key'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.AI_CONFIG_WRITE] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: "Remove a provider's admin key (Admin only)",
+        description: 'Deletes the stored admin key. Requires the typed confirmation ' +
+            '`{ "confirmation": "REMOVE" }`. Idempotent. Catalog refresh and the connection test ' +
+            'stop working for this provider until a new key is saved.\n\n' +
+            'When the key policy is `byok_with_org_fallback`, the response carries ' +
+            '`warnings: ["ORG_FALLBACK_WITHOUT_KEY"]` — users without their own key now have no ' +
+            'key for this provider.',
+    }),
+    (0, swagger_1.ApiParam)(PROVIDER_PARAM),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'The resulting configuration, plus `warnings`',
+        type: ai_config_response_dto_1.AiKeyRemovalResponseDto,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Missing or incorrect confirmation', type: index_3.ErrorDto }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Unknown provider', type: index_3.ErrorDto }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, index_1.CurrentUser)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, ai_provider_key_dto_1.RemoveAiProviderKeyDto, String]),
+    __metadata("design:returntype", Promise)
+], AiAdminController.prototype, "deleteKey", null);
+__decorate([
+    (0, common_1.Post)('providers/:provider/test'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.AI_CONFIG_WRITE] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Test a provider key (Admin only)',
+        description: 'Runs up to three checks against the provider: `credentials` (the key is accepted), ' +
+            '`list_models` (how many models it can see) and `responses_smoke` (one tiny test ' +
+            'response — only when an admin-enabled, non-deprecated text model is visible to the ' +
+            'key; otherwise skipped with `no_eligible_model`). A blank `apiKey` tests the stored ' +
+            'admin key; a blank `baseUrl` uses the stored override. **Nothing is saved.**\n\n' +
+            '**This returns HTTP 200 even when the key is broken** — a refused key is a successful ' +
+            'diagnosis. Read `success`, and each check\'s `code` (`ok`, `not_configured`, ' +
+            '`not_attempted`, `no_eligible_model`, `not_supported`, or an AI error code such as ' +
+            '`AI_KEY_INVALID` / `AI_RATE_LIMITED` / `AI_PROVIDER_UNAVAILABLE`). Gated on ' +
+            '`ai_config:write` because it spends a request on the provider account.',
+    }),
+    (0, swagger_1.ApiParam)(PROVIDER_PARAM),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'The outcome of the checks. Check `success`.',
+        type: ai_provider_test_dto_1.AiProviderTestResultDto,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'No adapter is registered for this provider', type: index_3.ErrorDto }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, index_1.CurrentUser)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, ai_provider_test_dto_1.TestAiProviderDto, String]),
+    __metadata("design:returntype", Promise)
+], AiAdminController.prototype, "testProvider", null);
+__decorate([
+    (0, common_1.Get)('models'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.AI_CONFIG_READ] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List the AI model catalog (Admin only)',
+        description: 'Every model catalog discovery has found, paginated and filterable, ordered by provider ' +
+            'then model id. Deprecated models (no longer listed by their provider) are excluded ' +
+            'unless `includeDeprecated=true`. `capabilities` is null for a row whose stored ' +
+            'capability record is not valid — typically an `unclassified` model.',
+    }),
+    (0, swagger_1.ApiQuery)({ name: 'page', required: false, type: Number }),
+    (0, swagger_1.ApiQuery)({ name: 'pageSize', required: false, type: Number, description: 'Max 100.' }),
+    (0, swagger_1.ApiQuery)({ name: 'provider', required: false, type: String }),
+    (0, swagger_1.ApiQuery)({ name: 'capability', required: false, type: String, description: 'A capability id (`GET /api/admin/ai/capabilities`).' }),
+    (0, swagger_1.ApiQuery)({ name: 'enabled', required: false, enum: ['true', 'false'] }),
+    (0, swagger_1.ApiQuery)({
+        name: 'includeDeprecated',
+        required: false,
+        enum: ['true', 'false'],
+        description: 'Default false.',
+    }),
+    (0, swagger_1.ApiQuery)({
+        name: 'q',
+        required: false,
+        type: String,
+        description: 'Case-insensitive substring of the model id or display name.',
+    }),
+    (0, index_2.ApiDataResponse)(ai_model_dto_1.AiModelDto, { pagination: 'flat', description: 'Paginated model catalog' }),
+    __param(0, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ai_model_dto_1.AiModelListQueryDto]),
+    __metadata("design:returntype", Promise)
+], AiAdminController.prototype, "listModels", null);
+__decorate([
+    (0, common_1.Post)('models/refresh'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.AI_CONFIG_WRITE] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: "Refresh a provider's model catalog (Admin only)",
+        description: 'Enqueues an `ai.catalog.refresh` background job for one provider and returns its id; ' +
+            'follow it in the Jobs dashboard (`GET /api/admin/jobs`). A refresh already pending or ' +
+            'running for the provider is returned instead of a second one being queued.\n\n' +
+            'Answers **409** instead of queueing a job that would skip: `details.reason: ' +
+            '"AI_DISABLED"` when AI is switched off, `"AI_PROVIDER_DISABLED"` (with `details.provider`) ' +
+            'when this provider is not enabled, and, because discovery runs under the admin key, ' +
+            '`"AI_KEY_REQUIRED"` when none is stored. A refresh never enables a model and never ' +
+            'overwrites an `admin_override`.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The queued job', type: ai_model_dto_1.RefreshAiCatalogResultDto }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'No adapter is registered for this provider', type: index_3.ErrorDto }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'AI or the provider is disabled (AI_DISABLED, AI_PROVIDER_DISABLED), or no admin key is stored (AI_KEY_REQUIRED)', type: index_3.ErrorDto }),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, index_1.CurrentUser)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ai_model_dto_1.RefreshAiCatalogDto, String]),
+    __metadata("design:returntype", Promise)
+], AiAdminController.prototype, "refreshModels", null);
+__decorate([
+    (0, common_1.Patch)('models/:id'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.AI_CONFIG_WRITE] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Enable, rename or reclassify a model (Admin only)',
+        description: 'Partial update of one catalog row. Supplying `capabilities` (a full capability ' +
+            'record) marks the row `admin_override`, which a catalog refresh never overwrites.\n\n' +
+            'Enabling is refused with **409** (`AI_MODEL_DEPRECATED`) for a model its provider no ' +
+            'longer lists, and with **400** (`AI_MODEL_UNCLASSIFIED`) for an `unclassified` model ' +
+            'unless `capabilities` is supplied in the same request.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'id', description: 'Catalog row id (not the provider model id).', format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The updated model', type: ai_model_dto_1.AiModelDto }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error, or enabling an unclassified model', type: index_3.ErrorDto }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'No such model', type: index_3.ErrorDto }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'Enabling a deprecated model', type: index_3.ErrorDto }),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, index_1.CurrentUser)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, ai_model_dto_1.UpdateAiModelDto, String]),
+    __metadata("design:returntype", Promise)
+], AiAdminController.prototype, "updateModel", null);
+__decorate([
+    (0, common_1.Get)('capabilities'),
+    (0, index_1.Auth)({ permissions: [ai_constants_1.PERMISSIONS.AI_CONFIG_READ] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List the AI capabilities and operations (Admin only)',
+        description: 'Every model capability and every metered operation this deployment knows: the ' +
+            "platform's own and the ones an app or package registered (`registerAiCapability`, " +
+            '`registerAiOperation`), with their labels. The admin pages draw capability chips, the ' +
+            'model override dialog and the usage page from it. Static data: it reads no table and ' +
+            'carries no secret.\n\n' +
+            'Reachable while AI is disabled.',
+    }),
+    (0, index_2.ApiDataResponse)(ai_capabilities_dto_1.AiCapabilitiesResponseDto, { description: 'The capability and operation vocabularies' }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", ai_capabilities_dto_1.AiCapabilitiesResponseDto)
+], AiAdminController.prototype, "getCapabilities", null);
+exports.AiAdminController = AiAdminController = __decorate([
+    (0, swagger_1.ApiTags)('AI Administration'),
+    (0, common_1.Controller)('admin/ai'),
+    __metadata("design:paramtypes", [ai_config_admin_service_1.AiConfigAdminService,
+        ai_provider_test_service_1.AiProviderTestService,
+        ai_models_admin_service_1.AiModelsAdminService])
+], AiAdminController);
+//# sourceMappingURL=ai-admin.controller.js.map

package/dist/ai/config/ai-admin.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-admin.controller.js","sourceRoot":"","sources":["../../../src/ai/config/ai-admin.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAcwB;AACxB,6CAAoG;AAEpG,gDAAyD;AACzD,kDAA8C;AAC9C,4CAAmD;AACnD,4CAA4C;AAC5C,uEAAiE;AACjE,uEAAiE;AACjE,yEAAmE;AACnE,mEAA4F;AAC5F,yEAA4F;AAC5F,qDAM4B;AAC5B,mEAAwF;AACxF,qEAAwF;AACxF,qEAA+D;AAE/D,gFAAgF;AAChF,4CAA4C;AAC5C,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,4BAA4B;AAC5B,EAAE;AACF,oEAAoE;AACpE,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,kFAAkF;AAClF,oEAAoE;AACpE,qEAAqE;AACrE,qEAAqE;AACrE,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,gFAAgF;AAEhF,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,6BAA6B;IAC1C,OAAO,EAAE,QAAQ;CACT,CAAC;AAEX;;;;;GAKG;AAGI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAET;IACA;IACA;IAHnB,YACmB,KAA2B,EAC3B,YAAmC,EACnC,MAA4B;QAF5B,UAAK,GAAL,KAAK,CAAsB;QAC3B,iBAAY,GAAZ,YAAY,CAAuB;QACnC,WAAM,GAAN,MAAM,CAAsB;IAC5C,CAAC;IAgBE,AAAN,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACvC,CAAC;IA+BK,AAAN,KAAK,CAAC,aAAa,CACT,GAAsB,EACX,MAAc,EACZ,OAAgB;QAErC,6DAA6D;QAC7D,0EAA0E;QAC1E,2CAA2C;QAC3C,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1E,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAC1D,CAAC;IAqBK,AAAN,KAAK,CAAC,MAAM,CACS,QAAgB,EAC3B,GAAwB,EACb,MAAc;QAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAuBK,AAAN,KAAK,CAAC,SAAS,CACM,QAAgB,EAC3B,IAA4B,EACjB,MAAc;QAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IA0BK,AAAN,KAAK,CAAC,YAAY,CACG,QAAgB,EAC3B,GAAsB,EACX,MAAc;QAEjC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IA8BK,AAAN,KAAK,CAAC,UAAU,CAAU,KAA0B;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,4EAA4E;IAC5E,8EAA8E;IAmBxE,AAAN,KAAK,CAAC,aAAa,CAAS,GAAwB,EAAqB,MAAc;QACrF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAkBK,AAAN,KAAK,CAAC,WAAW,CACa,EAAU,EAC9B,GAAqB,EACV,MAAc;QAEjC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAeD,eAAe;QACb,OAAO,IAAA,0CAAoB,GAAE,CAAC;IAChC,CAAC;CACF,CAAA;AA5PY,8CAAiB;AAqBtB;IAdL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,cAAc,CAAC,EAAE,CAAC;IACnD,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EACT,iFAAiF;YACjF,sFAAsF;YACtF,+EAA+E;YAC/E,kFAAkF;YAClF,kFAAkF;YAClF,iBAAiB;YACjB,iFAAiF;KACpF,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,sBAAsB,EAAE,IAAI,EAAE,4CAAmB,EAAE,CAAC;;;;kDAG5F;AA+BK;IA7BL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,eAAe,CAAC,EAAE,CAAC;IACpD,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,oDAAoD;QAC7D,WAAW,EACT,sFAAsF;YACtF,wFAAwF;YACxF,iFAAiF;YACjF,8CAA8C;YAC9C,uFAAuF;YACvF,sFAAsF;YACtF,oDAAoD;YACpD,oFAAoF;YACpF,gFAAgF;YAChF,uFAAuF;YACvF,mDAAmD;KACtD,CAAC;IACD,IAAA,mBAAS,EAAC;QACT,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,qFAAqF;YACrF,sFAAsF;YACtF,sFAAsF;YACtF,WAAW;QACb,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,8BAA8B,EAAE,IAAI,EAAE,4CAAmB,EAAE,CAAC;IACpG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,yDAAyD,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IACpH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IAE3E,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,IAAA,gBAAO,EAAC,UAAU,CAAC,CAAA;;qCAFP,wCAAiB;;sDAW/B;AAqBK;IAnBL,IAAA,YAAG,EAAC,yBAAyB,CAAC;IAC9B,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,eAAe,CAAC,EAAE,CAAC;IACpD,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mDAAmD;QAC5D,WAAW,EACT,qFAAqF;YACrF,sFAAsF;YACtF,oFAAoF;YACpF,sFAAsF;YACtF,uDAAuD;YACvD,mFAAmF;YACnF,yFAAyF;YACzF,uEAAuE;KAC1E,CAAC;IACD,IAAA,kBAAQ,EAAC,cAAc,CAAC;IACxB,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,8BAA8B,EAAE,IAAI,EAAE,4CAAmB,EAAE,CAAC;IACpG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,uCAAuC,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IAClG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4CAA4C,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IACvG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qDAAqD,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IAE9G,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;6CADL,yCAAmB;;+CAIjC;AAuBK;IArBL,IAAA,eAAM,EAAC,yBAAyB,CAAC;IACjC,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,eAAe,CAAC,EAAE,CAAC;IACpD,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,4CAA4C;QACrD,WAAW,EACT,gEAAgE;YAChE,sFAAsF;YACtF,8DAA8D;YAC9D,wEAAwE;YACxE,qFAAqF;YACrF,wBAAwB;KAC3B,CAAC;IACD,IAAA,kBAAQ,EAAC,cAAc,CAAC;IACxB,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,8CAA8C;QAC3D,IAAI,EAAE,gDAAuB;KAC9B,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,mCAAmC,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IAC9F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IAE3E,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;6CADJ,4CAAsB;;kDAIrC;AA0BK;IAxBL,IAAA,aAAI,EAAC,0BAA0B,CAAC;IAChC,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,eAAe,CAAC,EAAE,CAAC;IACpD,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EACT,qFAAqF;YACrF,kFAAkF;YAClF,qFAAqF;YACrF,sFAAsF;YACtF,kFAAkF;YAClF,wFAAwF;YACxF,+EAA+E;YAC/E,qFAAqF;YACrF,8EAA8E;YAC9E,wEAAwE;KAC3E,CAAC;IACD,IAAA,kBAAQ,EAAC,cAAc,CAAC;IACxB,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,8CAAuB;KAC9B,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4CAA4C,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IAErG,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;6CADL,wCAAiB;;qDAI/B;AA8BK;IA5BL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,cAAc,CAAC,EAAE,CAAC;IACnD,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EACT,yFAAyF;YACzF,qFAAqF;YACrF,iFAAiF;YACjF,qEAAqE;KACxE,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IACtF,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;IACnI,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACvE,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QACvB,WAAW,EAAE,gBAAgB;KAC9B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,6DAA6D;KAC3E,CAAC;IACD,IAAA,uBAAe,EAAC,yBAAU,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;IAC1E,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAQ,kCAAmB;;mDAEnD;AAsBK;IAlBL,IAAA,aAAI,EAAC,gBAAgB,CAAC;IACtB,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,eAAe,CAAC,EAAE,CAAC;IACpD,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iDAAiD;QAC1D,WAAW,EACT,uFAAuF;YACvF,wFAAwF;YACxF,gFAAgF;YAChF,8EAA8E;YAC9E,6FAA6F;YAC7F,sFAAsF;YACtF,qFAAqF;YACrF,iCAAiC;KACpC,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,EAAE,wCAAyB,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4CAA4C,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IACvG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iHAAiH,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IACxJ,WAAA,IAAA,aAAI,GAAE,CAAA;IAA4B,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;qCAAvC,kCAAmB;;sDAEnD;AAkBK;IAhBL,IAAA,cAAK,EAAC,YAAY,CAAC;IACnB,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,eAAe,CAAC,EAAE,CAAC;IACpD,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mDAAmD;QAC5D,WAAW,EACT,iFAAiF;YACjF,uFAAuF;YACvF,uFAAuF;YACvF,uFAAuF;YACvF,wDAAwD;KAC3D,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,6CAA6C,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,IAAI,EAAE,yBAAU,EAAE,CAAC;IAChF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qDAAqD,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IAChH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IAC1E,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,6BAA6B,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;IAEtF,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;6CADL,+BAAgB;;oDAI9B;AAeD;IAbC,IAAA,YAAG,EAAC,cAAc,CAAC;IACnB,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,0BAAW,CAAC,cAAc,CAAC,EAAE,CAAC;IACnD,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EACT,gFAAgF;YAChF,oFAAoF;YACpF,wFAAwF;YACxF,uFAAuF;YACvF,wBAAwB;YACxB,iCAAiC;KACpC,CAAC;IACD,IAAA,uBAAe,EAAC,+CAAyB,EAAE,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;;;oCACtF,+CAAyB;wDAE3C;4BA3PU,iBAAiB;IAF7B,IAAA,iBAAO,EAAC,mBAAmB,CAAC;IAC5B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAGK,8CAAoB;QACb,gDAAqB;QAC3B,8CAAoB;GAJpC,iBAAiB,CA4P7B"}

package/dist/ai/config/ai-config-admin.service.d.ts

@@ -0,0 +1,199 @@
+import type { SystemAiValue } from '@marinoscar/platform-contract/ai';
+import { CredentialsService } from '../../credentials/index';
+import type { AiPrisma } from '../data/ai-db';
+import { SystemSettingsService } from '../../settings/index';
+import type { AiProviderAdapter } from '../core/provider-adapter.interface';
+import { AiProviderRegistry } from '../core/provider-registry';
+import '../providers/builtin-ai-providers';
+import { AiConfigService } from './ai-config.service';
+import type { AiConfigResponse, AiKeyRemovalResponse } from './dto/ai-config-response.dto';
+import type { UpdateAiConfigInput } from './dto/update-ai-config.dto';
+/** Stable reason codes for the 400s this service raises (in `details.reason`). */
+export declare const AI_CONFIG_REJECTIONS: {
+    readonly UNKNOWN_PROVIDER: "AI_UNKNOWN_PROVIDER";
+    readonly PROVIDER_NOT_REGISTERED: "AI_PROVIDER_NOT_REGISTERED";
+    readonly KEY_REQUIRED: "AI_KEY_REQUIRED";
+    /** A provider-specific field (#448) sent for a provider whose slot has no such field. */
+    readonly FIELD_UNSUPPORTED: "AI_PROVIDER_FIELD_UNSUPPORTED";
+    /** A provider's settings failed its own slot schema (#448: an http Azure endpoint, credentials in a URL, ...). */
+    readonly SETTINGS_INVALID: "AI_PROVIDER_SETTINGS_INVALID";
+    /** Enabling a provider that cannot work without an endpoint (#448) before one is set. */
+    readonly BASE_URL_REQUIRED: "AI_BASE_URL_REQUIRED";
+};
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+export declare class AiConfigAdminService {
+    private readonly prisma;
+    private readonly systemSettings;
+    private readonly credentials;
+    private readonly registry;
+    private readonly aiConfig;
+    private readonly logger;
+    constructor(prisma: AiPrisma, systemSettings: SystemSettingsService, credentials: CredentialsService, registry: AiProviderRegistry, aiConfig: AiConfigService);
+    /**
+     * Everything `GET /api/admin/ai/config` renders.
+     *
+     * Reads the policy FRESH (an admin looking at the page must never be shown a
+     * value up to five seconds stale) and does not create the settings row as a
+     * side effect — `getAiPolicy` and `readRow` are both read-only.
+     */
+    describeForAdmin(): Promise<AiConfigResponse>;
+    /**
+     * `PUT /api/admin/ai/config` — full replace of the `ai` namespace.
+     *
+     * Order, each step load-bearing (the same order
+     * `StorageConfigAdminService.replace` follows):
+     *   1. read the row; `If-Match` is refused BEFORE anything is written;
+     *   2. validate the providers and the key policy against the registry and
+     *      the credential store — every refusal here is a 400 that wrote nothing;
+     *   3. `patchSettings`, passing `expectedVersion` again so the write itself
+     *      re-checks it;
+     *   4. ⚠ `invalidateCache()` SYNCHRONOUSLY, before the audit row, so this
+     *      instance answers "is AI on?" from the new value immediately;
+     *   5. the audit row, with changed field NAMES only.
+     *
+     * FULL REPLACE OF THE OPTIONAL FIELDS TOO: an empty/absent `baseUrl` or
+     * `maxOutputTokensCap` in the body CLEARS a stored one. `patchSettings`
+     * keeps a field it is not sent, so a cleared field is sent as an explicit
+     * `null`, which its merge treats as "remove" (see `toPatch`).
+     */
+    replace(input: UpdateAiConfigInput, userId: string, expectedVersion?: number): Promise<AiConfigResponse>;
+    /**
+     * `PUT /api/admin/ai/providers/:provider/key` — verify, then store.
+     *
+     * VERIFY FIRST. A key the provider rejects is a `400 AI_KEY_INVALID` and
+     * nothing is written: storing an unverified key would let a typo silently
+     * replace a working one. A provider that cannot be reached answers with its
+     * own `AiError` (e.g. `503 AI_PROVIDER_UNAVAILABLE`) — also storing nothing.
+     */
+    setKey(provider: string, apiKey: string, userId: string): Promise<AiConfigResponse>;
+    /**
+     * Verifies `apiKey` for `provider` with the adapter's own test call, exactly
+     * as {@link setKey} does before it stores anything (#739: the organization
+     * key route reuses it). Writes nothing.
+     *
+     * @throws NotFoundException for a provider with no registered adapter.
+     * @throws AiError `AI_KEY_INVALID` (400) for a rejected key, or the
+     *   provider's own error when it cannot be reached.
+     */
+    verifyProviderKey(provider: string, apiKey: string): Promise<void>;
+    /**
+     * `DELETE /api/admin/ai/providers/:provider/key`. Idempotent — removing a
+     * key that is not there is not an error. Under `byok_with_org_fallback` the
+     * response carries `ORG_FALLBACK_WITHOUT_KEY`: the policy still promises a
+     * fallback that no longer exists for this provider.
+     */
+    deleteKey(provider: string, userId: string): Promise<AiKeyRemovalResponse>;
+    /**
+     * Whether calls to `provider` need a key (#448) — false only for an
+     * OpenAI-compatible server the administrator marked `requiresKey: false`.
+     * Read fresh: it gates an admin action.
+     */
+    providerRequiresKey(provider: string): Promise<boolean>;
+    /** The adapter for `provider`, or a 404 naming it. */
+    requireRegistered(provider: string): AiProviderAdapter;
+    /**
+     * Registered adapters first (registration order: the built-ins, then an
+     * app's own), then providers with a definition whose adapter is not loaded,
+     * then any other settings slot.
+     */
+    knownProviderIds(policy: SystemAiValue): string[];
+    private describeProvider;
+    /**
+     * The namespace to write. A provider the body leaves out keeps its stored
+     * slot; a provider id nobody registered is a 400, as is ENABLING a
+     * provider no adapter is registered for (it could never serve a call).
+     *
+     * The one tolerated slotless id (#921) is a REGISTERED adapter without a
+     * provider definition (an app registered it straight into
+     * `AiProviderRegistry`) submitted exactly as `describeForAdmin` describes
+     * it: switched off, no settings. The admin form sends every listed provider
+     * back, so refusing that would fail every save. It is ignored, never
+     * stored; anything else for it, and any id the registry does not know
+     * either, stays a 400.
+     */
+    private buildNext;
+    /**
+     * One provider's next slot from its submitted settings (#448). Every field
+     * the body leaves empty is ABSENT (the provider default) — full replace, as
+     * for `baseUrl` before it. A value for a field this provider's definition
+     * does not declare is a 400 rather than silently dropped, and the built slot
+     * must pass the provider's own `settingsSchema` (an `https`-only Azure
+     * endpoint, no credentials in a URL): the admin form is the one place such a
+     * mistake can be caught before it breaks every call.
+     */
+    private buildSlot;
+    /**
+     * `byok_with_org_fallback` promises users without a key that the org key
+     * will serve them, so every provider that would be LIVE under the new
+     * policy must actually have one.
+     *
+     * Only enforced while `next.enabled` is true: the kill switch must always be
+     * reachable, so a deployment whose key went missing can still be turned OFF
+     * (or have the offending provider disabled) without first fixing the key.
+     */
+    private assertKeysForFallback;
+    private verifyKey;
+    /** The `global` settings row's provenance, WITHOUT creating it. See `StorageConfigAdminService.readRow`. */
+    private readRow;
+    private unknownProvider;
+    /** Audit row with codes / names only. `targetId` is `'ai'` or a provider id. */
+    private audit;
+}
+/**
+ * `next` as a settings PATCH body: every optional field this namespace can
+ * hold is sent explicitly, as `null` when absent, so the PATCH merge REMOVES
+ * a stored value rather than keeping it. That is what makes the admin PUT a
+ * full replace of the optional fields as well as the required ones.
+ */
+export declare function toPatch(next: SystemAiValue): {
+    providers: Record<string, {
+        enabled: boolean;
+    } & Record<string, unknown>>;
+    defaults: {
+        allowBackgroundRuns: boolean;
+        allowRealtime: boolean;
+        maxOutputTokensCap: number | null;
+    };
+    enabled: boolean;
+    keyPolicy: "byok" | "byok_with_org_fallback";
+    logPromptContent: boolean;
+    usageRetentionDays: number;
+    hostedTools: {
+        web_search: boolean;
+        file_search: boolean;
+        code_interpreter: boolean;
+        image_generation: boolean;
+        mcp: boolean;
+        mcpAllowedHosts: string[];
+    };
+    limits: {
+        perUser?: {
+            requestsPerMinute?: number | undefined;
+            requestsPerDay?: number | undefined;
+        } | undefined;
+        orgKey?: {
+            requestsPerDayPerUser?: number | undefined;
+            tokensPerDayPerUser?: number | undefined;
+        } | undefined;
+        perOrg?: {
+            requestsPerDay?: number | undefined;
+            outputTokensPerDay?: number | undefined;
+        } | undefined;
+        perModel?: Record<string, {
+            maxOutputTokens?: number | undefined;
+            requestsPerMinutePerUser?: number | undefined;
+        }> | undefined;
+    };
+    deploymentKeyServesOrgs: boolean;
+};
+/**
+ * The dotted NAMES of the fields that differ between two policies — never the
+ * values, so an audit row cannot carry anything a future field might hold.
+ */
+export declare function diffFieldNames(before: SystemAiValue, after: SystemAiValue): string[];
+//# sourceMappingURL=ai-config-admin.service.d.ts.map

package/dist/ai/config/ai-config-admin.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-config-admin.service.d.ts","sourceRoot":"","sources":["../../../src/ai/config/ai-config-admin.service.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAuB,MAAM,yBAAyB,CAAC;AAClF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,mCAAmC,CAAC;AAc3C,OAAO,EACL,eAAe,EAMhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAEV,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAwBtE,kFAAkF;AAClF,eAAO,MAAM,oBAAoB;;;;IAI/B,yFAAyF;;IAEzF,kHAAkH;;IAElH,yFAAyF;;CAEjF,CAAC;AAQX;;;;;GAKG;AACH,qBACa,oBAAoB;IAIJ,OAAO,CAAC,QAAQ,CAAC,MAAM;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAP3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;gBAGpB,MAAM,EAAE,QAAQ,EACzC,cAAc,EAAE,qBAAqB,EACrC,WAAW,EAAE,kBAAkB,EAC/B,QAAQ,EAAE,kBAAkB,EAC5B,QAAQ,EAAE,eAAe;IAG5C;;;;;;OAMG;IACG,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAgCnD;;;;;;;;;;;;;;;;;;OAkBG;IACG,OAAO,CACX,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,gBAAgB,CAAC;IAiC5B;;;;;;;OAOG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBzF;;;;;;;;OAQG;IACG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxE;;;;;OAKG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAsBhF;;;;OAIG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI7D,sDAAsD;IACtD,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB;IAUtD;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE;IAQjD,OAAO,CAAC,gBAAgB;IAuCxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,SAAS;IAkEjB;;;;;;;;OAQG;IACH,OAAO,CAAC,SAAS;IA+CjB;;;;;;;;OAQG;YACW,qBAAqB;YAwBrB,SAAS;IAgCvB,4GAA4G;YAC9F,OAAO;IAWrB,OAAO,CAAC,eAAe;IAUvB,gFAAgF;YAClE,KAAK;CAgBpB;AAwBD;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,aAAa;eAiBlC,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOtE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,GAAG,MAAM,EAAE,CA8CpF"}