@plumbus/core 0.7.1 → 0.8.0-beta.0

package/dist/ai/errors/index.d.ts

@@ -1,7 +1,7 @@
 import type { ErrorService } from '../types/errors.js';
 import { PlumbusError } from './plumbus-error.js';
 export { PlumbusError } from './plumbus-error.js';
-export { AISecurityBlockedError, AIBudgetExceededError, DataForbiddenError, DataInternalError, DataValidationError, EncryptionConfigError, EncryptionPayloadError, } from './data-errors.js';
+export { AISecurityBlockedError, AIBudgetExceededError, GovernedAiBlockedError, type GovernedAiBlockedCode, DataForbiddenError, DataInternalError, DataValidationError, EncryptionConfigError, EncryptionPayloadError, } from './data-errors.js';
 export declare class LeaseLostError extends PlumbusError {
     constructor(message: string, metadata?: Record<string, unknown>);
 }
@@ -11,6 +11,9 @@ export declare class LeaseLostError extends PlumbusError {
  * HTTP/AI calls (the DOM `fetch` maps abort to a `DOMException('AbortError')`
  * — the reason is available via `signal.reason`).
  */
+export declare class BudgetExhaustedError extends PlumbusError {
+    constructor(executionId: string, metadata?: Record<string, unknown>);
+}
 export declare class FlowCancelledError extends PlumbusError {
     constructor(executionId: string, metadata?: Record<string, unknown>);
 }

package/dist/ai/fill-prompt-template.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Top-level `{{key}}` fill for prompt templates.
+ *
+ * Walks the original template once. Inserted values are literal: `$`, `$'`,
+ * `` $` ``, `$&`, `$1`, and `{{otherKey}}` inside a value are not treated as
+ * JavaScript replacement patterns or as further placeholders.
+ */
+export declare function fillPromptTemplate(template: string, input: Record<string, unknown>): {
+    text: string;
+    substitutedKeys: Set<string>;
+};
+//# sourceMappingURL=fill-prompt-template.d.ts.map

package/dist/ai/fill-prompt-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fill-prompt-template.d.ts","sourceRoot":"","sources":["../../src/ai/fill-prompt-template.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAE,CAUhD"}

package/dist/ai/fill-prompt-template.js

@@ -0,0 +1,19 @@
+/**
+ * Top-level `{{key}}` fill for prompt templates.
+ *
+ * Walks the original template once. Inserted values are literal: `$`, `$'`,
+ * `` $` ``, `$&`, `$1`, and `{{otherKey}}` inside a value are not treated as
+ * JavaScript replacement patterns or as further placeholders.
+ */
+export function fillPromptTemplate(template, input) {
+    const substitutedKeys = new Set();
+    const text = template.replace(/\{\{([^{}]+)\}\}/g, (full, key) => {
+        if (!Object.hasOwn(input, key)) {
+            return full;
+        }
+        substitutedKeys.add(key);
+        return String(input[key]);
+    });
+    return { text, substitutedKeys };
+}
+//# sourceMappingURL=fill-prompt-template.js.map

package/dist/ai/fill-prompt-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fill-prompt-template.js","sourceRoot":"","sources":["../../src/ai/fill-prompt-template.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,KAA8B;IAE9B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,GAAW,EAAE,EAAE;QACvE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACnC,CAAC"}

package/dist/ai/governed-artifacts.d.ts

@@ -0,0 +1,49 @@
+export type GovernedArtifactKind = 'prompt' | 'policy';
+export interface GovernedArtifact {
+    kind: GovernedArtifactKind;
+    id: string;
+    body: string;
+    metadata?: Record<string, string | number | boolean>;
+}
+export interface PublishedGovernedArtifact extends GovernedArtifact {
+    digest: string;
+    publishedAt: string;
+}
+export interface GovernedArtifactStore {
+    publish(artifact: GovernedArtifact): PublishedGovernedArtifact;
+    get(digest: string): PublishedGovernedArtifact | undefined;
+}
+export interface FilesystemGovernedArtifactStoreConfig {
+    /** Host-owned directory. Created if missing. */
+    directory: string;
+}
+/** Project-relative default used by `createServer` when no store is passed. */
+export declare const DEFAULT_GOVERNED_ARTIFACTS_DIRECTORY = ".plumbus/governed-artifacts";
+export interface ResolveGovernedArtifactStoreOptions {
+    artifacts?: GovernedArtifactStore;
+    artifactsDirectory?: string;
+    cwd?: string;
+}
+export declare class GovernedArtifactConflictError extends Error {
+    constructor(message: string);
+}
+/** SHA-256 of the canonical artifact. The address is the content. */
+export declare function digestGovernedArtifact(artifact: GovernedArtifact): string;
+/**
+ * In-memory digest-addressed store. Republishing the same bytes is idempotent.
+ * A later publish of the same kind+id with different bytes is refused.
+ */
+export declare function createMemoryGovernedArtifactStore(): GovernedArtifactStore;
+/**
+ * Digest-addressed store on a host-owned directory. Same immutability rules as
+ * the in-memory store. A new process pointed at the same directory sees prior
+ * publishes. Error messages never include artifact bodies.
+ */
+export declare function createFilesystemGovernedArtifactStore(config: FilesystemGovernedArtifactStoreConfig): GovernedArtifactStore;
+/**
+ * Prefer an explicit store. Else open `artifactsDirectory` (created if missing).
+ * Else open `{cwd}/.plumbus/governed-artifacts` when that directory already exists.
+ * Omitted and no default directory: existing hosts boot unchanged.
+ */
+export declare function resolveGovernedArtifactStore(options?: ResolveGovernedArtifactStoreOptions): GovernedArtifactStore | undefined;
+//# sourceMappingURL=governed-artifacts.d.ts.map

package/dist/ai/governed-artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-artifacts.d.ts","sourceRoot":"","sources":["../../src/ai/governed-artifacts.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,yBAA0B,SAAQ,gBAAgB;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,GAAG,yBAAyB,CAAC;IAC/D,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS,CAAC;CAC5D;AAED,MAAM,WAAW,qCAAqC;IACpD,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,eAAO,MAAM,oCAAoC,gCAAgC,CAAC;AAElF,MAAM,WAAW,mCAAmC;IAClD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAaD,qEAAqE;AACrE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAEzE;AAyGD;;;GAGG;AACH,wBAAgB,iCAAiC,IAAI,qBAAqB,CAiCzE;AAED;;;;GAIG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,qCAAqC,GAC5C,qBAAqB,CA4FvB;AAaD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,mCAAwC,GAChD,qBAAqB,GAAG,SAAS,CAenC"}

package/dist/ai/governed-artifacts.js

@@ -0,0 +1,277 @@
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { digestApprovalInput } from '../approvals/digest.js';
+/** Project-relative default used by `createServer` when no store is passed. */
+export const DEFAULT_GOVERNED_ARTIFACTS_DIRECTORY = '.plumbus/governed-artifacts';
+export class GovernedArtifactConflictError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'GovernedArtifactConflictError';
+    }
+}
+const DIGEST_PATTERN = /^[0-9a-f]{64}$/;
+function canonicalArtifact(artifact) {
+    return {
+        kind: artifact.kind,
+        id: artifact.id,
+        body: artifact.body,
+        metadata: artifact.metadata ?? {},
+    };
+}
+/** SHA-256 of the canonical artifact. The address is the content. */
+export function digestGovernedArtifact(artifact) {
+    return digestApprovalInput(canonicalArtifact(artifact));
+}
+function artifactKey(kind, id) {
+    return `${kind}:${id}`;
+}
+function immutableConflict(key) {
+    throw new GovernedArtifactConflictError(`Artifact "${key}" is immutable; publish a new id instead of changing the body`);
+}
+function preparePublish(artifact) {
+    const kind = artifact.kind;
+    const id = artifact.id.trim();
+    const body = artifact.body;
+    if (kind !== 'prompt' && kind !== 'policy') {
+        throw new GovernedArtifactConflictError('Artifact kind must be prompt or policy');
+    }
+    if (!id) {
+        throw new GovernedArtifactConflictError('Artifact id is required');
+    }
+    if (typeof body !== 'string' || body.trim() === '') {
+        throw new GovernedArtifactConflictError('Artifact body is required');
+    }
+    const normalized = {
+        kind,
+        id,
+        body,
+        ...(artifact.metadata ? { metadata: artifact.metadata } : {}),
+    };
+    return {
+        normalized,
+        digest: digestGovernedArtifact(normalized),
+        key: artifactKey(kind, id),
+    };
+}
+function errorCode(err) {
+    if (err && typeof err === 'object' && 'code' in err && typeof err.code === 'string') {
+        return err.code;
+    }
+    return undefined;
+}
+function keyObjectName(key) {
+    return createHash('sha256').update(key).digest('hex');
+}
+function isPublishedArtifact(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const record = value;
+    if (record.kind !== 'prompt' && record.kind !== 'policy')
+        return false;
+    if (typeof record.id !== 'string' || typeof record.body !== 'string')
+        return false;
+    if (typeof record.digest !== 'string' || typeof record.publishedAt !== 'string')
+        return false;
+    if (record.metadata !== undefined) {
+        if (!record.metadata || typeof record.metadata !== 'object' || Array.isArray(record.metadata)) {
+            return false;
+        }
+    }
+    return true;
+}
+function assertStoredDigest(published, expectedDigest) {
+    if (published.digest !== expectedDigest) {
+        throw new GovernedArtifactConflictError('Stored artifact digest does not match its address');
+    }
+    const computed = digestGovernedArtifact({
+        kind: published.kind,
+        id: published.id,
+        body: published.body,
+        ...(published.metadata ? { metadata: published.metadata } : {}),
+    });
+    if (computed !== expectedDigest) {
+        throw new GovernedArtifactConflictError('Stored artifact bytes do not match their digest');
+    }
+}
+function readJsonFile(filePath) {
+    try {
+        return JSON.parse(readFileSync(filePath, 'utf-8'));
+    }
+    catch (err) {
+        if (errorCode(err) === 'ENOENT')
+            return undefined;
+        if (err instanceof SyntaxError) {
+            throw new GovernedArtifactConflictError('Stored artifact is not valid JSON');
+        }
+        throw err;
+    }
+}
+function writeJsonExclusive(filePath, value) {
+    try {
+        writeFileSync(filePath, `${JSON.stringify(value)}\n`, { encoding: 'utf-8', flag: 'wx' });
+        return 'created';
+    }
+    catch (err) {
+        if (errorCode(err) === 'EEXIST')
+            return 'exists';
+        throw err;
+    }
+}
+/**
+ * In-memory digest-addressed store. Republishing the same bytes is idempotent.
+ * A later publish of the same kind+id with different bytes is refused.
+ */
+export function createMemoryGovernedArtifactStore() {
+    const byDigest = new Map();
+    const digestByKey = new Map();
+    return {
+        publish(artifact) {
+            const { normalized, digest, key } = preparePublish(artifact);
+            const existing = byDigest.get(digest);
+            if (existing) {
+                return existing;
+            }
+            const priorDigest = digestByKey.get(key);
+            if (priorDigest && priorDigest !== digest) {
+                immutableConflict(key);
+            }
+            const published = {
+                ...normalized,
+                digest,
+                publishedAt: new Date().toISOString(),
+            };
+            byDigest.set(digest, published);
+            digestByKey.set(key, digest);
+            return published;
+        },
+        get(digest) {
+            const trimmed = digest.trim();
+            if (!trimmed)
+                return undefined;
+            return byDigest.get(trimmed);
+        },
+    };
+}
+/**
+ * Digest-addressed store on a host-owned directory. Same immutability rules as
+ * the in-memory store. A new process pointed at the same directory sees prior
+ * publishes. Error messages never include artifact bodies.
+ */
+export function createFilesystemGovernedArtifactStore(config) {
+    const directory = config.directory.trim();
+    if (!directory) {
+        throw new Error('Filesystem governed artifact store requires a directory');
+    }
+    const root = resolve(directory);
+    const artifactsDir = join(root, 'artifacts');
+    const keysDir = join(root, 'keys');
+    mkdirSync(artifactsDir, { recursive: true });
+    mkdirSync(keysDir, { recursive: true });
+    function artifactPath(digest) {
+        return join(artifactsDir, `${digest}.json`);
+    }
+    function keyPath(key) {
+        return join(keysDir, `${keyObjectName(key)}.json`);
+    }
+    function readPublished(digest) {
+        if (!DIGEST_PATTERN.test(digest))
+            return undefined;
+        const parsed = readJsonFile(artifactPath(digest));
+        if (parsed === undefined)
+            return undefined;
+        if (!isPublishedArtifact(parsed)) {
+            throw new GovernedArtifactConflictError('Stored artifact is missing required fields');
+        }
+        assertStoredDigest(parsed, digest);
+        return parsed;
+    }
+    function readKeyDigest(key) {
+        const parsed = readJsonFile(keyPath(key));
+        if (parsed === undefined)
+            return undefined;
+        if (!parsed || typeof parsed !== 'object') {
+            throw new GovernedArtifactConflictError('Stored artifact key is invalid');
+        }
+        const record = parsed;
+        if (record.key !== key || typeof record.digest !== 'string') {
+            throw new GovernedArtifactConflictError('Stored artifact key does not match its address');
+        }
+        if (!DIGEST_PATTERN.test(record.digest)) {
+            throw new GovernedArtifactConflictError('Stored artifact key digest is invalid');
+        }
+        return record.digest;
+    }
+    return {
+        publish(artifact) {
+            const { normalized, digest, key } = preparePublish(artifact);
+            const existing = readPublished(digest);
+            if (existing) {
+                return existing;
+            }
+            const priorDigest = readKeyDigest(key);
+            if (priorDigest && priorDigest !== digest) {
+                immutableConflict(key);
+            }
+            const published = {
+                ...normalized,
+                digest,
+                publishedAt: new Date().toISOString(),
+            };
+            const digestWrite = writeJsonExclusive(artifactPath(digest), published);
+            if (digestWrite === 'exists') {
+                const raced = readPublished(digest);
+                if (raced)
+                    return raced;
+                throw new GovernedArtifactConflictError('Stored artifact digest does not match its address');
+            }
+            const keyWrite = writeJsonExclusive(keyPath(key), { key, digest });
+            if (keyWrite === 'exists') {
+                const racedDigest = readKeyDigest(key);
+                if (racedDigest && racedDigest !== digest) {
+                    immutableConflict(key);
+                }
+            }
+            return published;
+        },
+        get(digest) {
+            const trimmed = digest.trim();
+            if (!trimmed)
+                return undefined;
+            return readPublished(trimmed);
+        },
+    };
+}
+function directoryExists(path) {
+    try {
+        return existsSync(path) && statSync(path).isDirectory();
+    }
+    catch (err) {
+        const code = err && typeof err === 'object' && 'code' in err ? err.code : undefined;
+        if (code === 'ENOENT')
+            return false;
+        throw err;
+    }
+}
+/**
+ * Prefer an explicit store. Else open `artifactsDirectory` (created if missing).
+ * Else open `{cwd}/.plumbus/governed-artifacts` when that directory already exists.
+ * Omitted and no default directory: existing hosts boot unchanged.
+ */
+export function resolveGovernedArtifactStore(options = {}) {
+    if (options.artifacts)
+        return options.artifacts;
+    if (options.artifactsDirectory !== undefined) {
+        const directory = options.artifactsDirectory.trim();
+        if (!directory) {
+            throw new Error('Governed artifact directory is required');
+        }
+        return createFilesystemGovernedArtifactStore({ directory });
+    }
+    const cwd = options.cwd ?? process.cwd();
+    const directory = join(cwd, DEFAULT_GOVERNED_ARTIFACTS_DIRECTORY);
+    if (!directoryExists(directory))
+        return undefined;
+    return createFilesystemGovernedArtifactStore({ directory });
+}
+//# sourceMappingURL=governed-artifacts.js.map

package/dist/ai/governed-artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-artifacts.js","sourceRoot":"","sources":["../../src/ai/governed-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AA0B7D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,oCAAoC,GAAG,6BAA6B,CAAC;AAQlF,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,SAAS,iBAAiB,CAAC,QAA0B;IACnD,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;KAClC,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,sBAAsB,CAAC,QAA0B;IAC/D,OAAO,mBAAmB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,IAA0B,EAAE,EAAU;IACzD,OAAO,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,IAAI,6BAA6B,CACrC,aAAa,GAAG,+DAA+D,CAChF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAA0B;IAKhD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,6BAA6B,CAAC,wCAAwC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,6BAA6B,CAAC,2BAA2B,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,UAAU,GAAqB;QACnC,IAAI;QACJ,EAAE;QACF,IAAI;QACJ,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;IACF,OAAO;QACL,UAAU;QACV,MAAM,EAAE,sBAAsB,CAAC,UAAU,CAAC;QAC1C,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpF,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9F,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9F,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAoC,EAAE,cAAsB;IACtF,IAAI,SAAS,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,6BAA6B,CAAC,mDAAmD,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACtC,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,MAAM,IAAI,6BAA6B,CAAC,iDAAiD,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAClD,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,6BAA6B,CAAC,mCAAmC,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,KAAc;IAC1D,IAAI,CAAC;QACH,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACjD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE9C,OAAO;QACL,OAAO,CAAC,QAAQ;YACd,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,WAAW,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;gBAC1C,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAED,MAAM,SAAS,GAA8B;gBAC3C,GAAG,UAAU;gBACb,MAAM;gBACN,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC;YACF,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAChC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,GAAG,CAAC,MAAM;YACR,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC/B,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CACnD,MAA6C;IAE7C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,SAAS,YAAY,CAAC,MAAc;QAClC,OAAO,IAAI,CAAC,YAAY,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,SAAS,OAAO,CAAC,GAAW;QAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED,SAAS,aAAa,CAAC,MAAc;QACnC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,6BAA6B,CAAC,4CAA4C,CAAC,CAAC;QACxF,CAAC;QACD,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,aAAa,CAAC,GAAW;QAChC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,6BAA6B,CAAC,gCAAgC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,MAAM,GAAG,MAA6C,CAAC;QAC7D,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,IAAI,6BAA6B,CAAC,gDAAgD,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,6BAA6B,CAAC,uCAAuC,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,OAAO;QACL,OAAO,CAAC,QAAQ;YACd,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,WAAW,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;gBAC1C,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAED,MAAM,SAAS,GAA8B;gBAC3C,GAAG,UAAU;gBACb,MAAM;gBACN,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC;YAEF,MAAM,WAAW,GAAG,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;YACxE,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,KAAK;oBAAE,OAAO,KAAK,CAAC;gBACxB,MAAM,IAAI,6BAA6B,CACrC,mDAAmD,CACpD,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACnE,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,WAAW,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;oBAC1C,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,GAAG,CAAC,MAAM;YACR,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC/B,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GACR,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC,CAAE,GAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAA+C,EAAE;IAEjD,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC;IAEhD,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,qCAAqC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IAClE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,qCAAqC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;AAC9D,CAAC"}

package/dist/ai/governed-budget.d.ts

@@ -0,0 +1,17 @@
+import type { BudgetCheckResult, BudgetConfig, CostTracker } from './cost-tracker.js';
+export interface GovernedBudgetInput {
+    tracker?: CostTracker;
+    budget?: BudgetConfig;
+    tenantId?: string;
+    estimatedTokens?: number;
+    estimatedCostUsd?: number;
+}
+/**
+ * Fail-closed budget check for governed model calls.
+ *
+ * The existing cost tracker allows a call when dollar cost is unknown.
+ * Governed AI does the opposite: missing limits, missing estimates, or
+ * unavailable cost data refuse the call.
+ */
+export declare function checkGovernedBudget(input: GovernedBudgetInput): BudgetCheckResult;
+//# sourceMappingURL=governed-budget.d.ts.map

package/dist/ai/governed-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-budget.d.ts","sourceRoot":"","sources":["../../src/ai/governed-budget.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEtF,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAUD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,iBAAiB,CAiDjF"}

package/dist/ai/governed-budget.js

@@ -0,0 +1,52 @@
+function hasDeclaredLimit(budget) {
+    return (budget.maxTokensPerRequest != null ||
+        budget.dailyCostLimit != null ||
+        budget.perTenantDailyLimit != null);
+}
+/**
+ * Fail-closed budget check for governed model calls.
+ *
+ * The existing cost tracker allows a call when dollar cost is unknown.
+ * Governed AI does the opposite: missing limits, missing estimates, or
+ * unavailable cost data refuse the call.
+ */
+export function checkGovernedBudget(input) {
+    if (!input.budget || !hasDeclaredLimit(input.budget)) {
+        return { allowed: false, reason: 'Governed AI requires a declared budget limit' };
+    }
+    if (input.budget.maxTokensPerRequest != null && input.estimatedTokens == null) {
+        return { allowed: false, reason: 'Token budget cannot be checked without an estimate' };
+    }
+    if ((input.budget.dailyCostLimit != null || input.budget.perTenantDailyLimit != null) &&
+        input.estimatedCostUsd == null) {
+        return { allowed: false, reason: 'Dollar budget cannot be checked without a cost estimate' };
+    }
+    if ((input.budget.dailyCostLimit != null || input.budget.perTenantDailyLimit != null) &&
+        !input.tracker) {
+        return { allowed: false, reason: 'Dollar budget cannot be checked without a cost ledger' };
+    }
+    if (!input.tracker) {
+        if (input.budget.maxTokensPerRequest != null &&
+            input.estimatedTokens != null &&
+            input.estimatedTokens > input.budget.maxTokensPerRequest) {
+            return {
+                allowed: false,
+                reason: `Estimated tokens (${input.estimatedTokens}) exceeds per-request limit (${input.budget.maxTokensPerRequest})`,
+            };
+        }
+        return { allowed: true };
+    }
+    const result = input.tracker.checkBudget({
+        tenantId: input.tenantId,
+        estimatedTokens: input.estimatedTokens,
+        estimatedCostUsd: input.estimatedCostUsd,
+    });
+    if (!result.allowed) {
+        return result;
+    }
+    if (result.reason?.includes('Cost data unavailable')) {
+        return { allowed: false, reason: result.reason };
+    }
+    return result;
+}
+//# sourceMappingURL=governed-budget.js.map

package/dist/ai/governed-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-budget.js","sourceRoot":"","sources":["../../src/ai/governed-budget.ts"],"names":[],"mappings":"AAUA,SAAS,gBAAgB,CAAC,MAAoB;IAC5C,OAAO,CACL,MAAM,CAAC,mBAAmB,IAAI,IAAI;QAClC,MAAM,CAAC,cAAc,IAAI,IAAI;QAC7B,MAAM,CAAC,mBAAmB,IAAI,IAAI,CACnC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAA0B;IAC5D,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IACpF,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QAC9E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;IAC1F,CAAC;IAED,IACE,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC;QACjF,KAAK,CAAC,gBAAgB,IAAI,IAAI,EAC9B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC;IAC/F,CAAC;IAED,IACE,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC;QACjF,CAAC,KAAK,CAAC,OAAO,EACd,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;IAC7F,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,IACE,KAAK,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI;YACxC,KAAK,CAAC,eAAe,IAAI,IAAI;YAC7B,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,mBAAmB,EACxD,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,qBAAqB,KAAK,CAAC,eAAe,gCAAgC,KAAK,CAAC,MAAM,CAAC,mBAAmB,GAAG;aACtH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/ai/governed-host.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Host-provided model for governed AI.
+ *
+ * The host owns credentials, transport, and which models exist. The framework
+ * never falls back to an unregistered provider or model.
+ */
+export interface GovernedModelPin {
+    providerId: string;
+    modelId: string;
+    /** Digest of a published prompt artifact. */
+    promptDigest: string;
+    /** Digest of a published policy artifact. */
+    policyDigest: string;
+}
+export interface GovernedModelRequest {
+    prompt: string;
+    system?: string;
+    input?: unknown;
+}
+export interface GovernedModelUsage {
+    inputTokens?: number;
+    outputTokens?: number;
+    totalTokens?: number;
+}
+export interface GovernedModelResult {
+    text: string;
+    usage?: GovernedModelUsage;
+    costUsd?: number | null;
+}
+export interface GovernedModel {
+    readonly providerId: string;
+    readonly modelId: string;
+    complete(request: GovernedModelRequest): Promise<GovernedModelResult>;
+}
+export interface GovernedBudgetCheckInput {
+    tenantId?: string;
+    estimatedTokens?: number;
+    estimatedCostUsd?: number;
+    pin: GovernedModelPin;
+}
+export interface GovernedBudgetCheckResult {
+    allowed: boolean;
+    reason?: string;
+}
+export interface GovernedAiHost {
+    /** Look up the host model for this pin. `undefined` fails closed — no fallback. */
+    resolveModel(pin: GovernedModelPin): Promise<GovernedModel | undefined>;
+    /**
+     * Host budget authority. Omitted, unknown, or refused spend fails closed;
+     * the framework will not call the model.
+     */
+    checkBudget(input: GovernedBudgetCheckInput): Promise<GovernedBudgetCheckResult>;
+}
+//# sourceMappingURL=governed-host.d.ts.map

package/dist/ai/governed-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-host.d.ts","sourceRoot":"","sources":["../../src/ai/governed-host.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,gBAAgB,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,mFAAmF;IACnF,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IACxE;;;OAGG;IACH,WAAW,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CAClF"}

package/dist/ai/governed-host.js

@@ -0,0 +1,8 @@
+/**
+ * Host-provided model for governed AI.
+ *
+ * The host owns credentials, transport, and which models exist. The framework
+ * never falls back to an unregistered provider or model.
+ */
+export {};
+//# sourceMappingURL=governed-host.js.map

package/dist/ai/governed-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-host.js","sourceRoot":"","sources":["../../src/ai/governed-host.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/ai/governed-invoke.d.ts

@@ -0,0 +1,41 @@
+import { type ApprovalService } from '../approvals/types.js';
+import type { GovernedArtifactStore, PublishedGovernedArtifact } from './governed-artifacts.js';
+import type { GovernedAiHost, GovernedModelPin, GovernedModelResult } from './governed-host.js';
+export interface GovernedInvokeInput {
+    capabilityId: string;
+    definitionVersion: string;
+    input: unknown;
+    pin: GovernedModelPin;
+    prompt: string;
+    estimatedTokens?: number;
+    estimatedCostUsd?: number;
+}
+export interface GovernedInvokeDeps {
+    host: GovernedAiHost;
+    approvals: ApprovalService;
+    artifacts: GovernedArtifactStore;
+    now?: () => Date;
+    tenantId?: string;
+    recordSpend?: (entry: {
+        pin: GovernedModelPin;
+        result?: GovernedModelResult;
+        error?: string;
+    }) => void | Promise<void>;
+}
+export interface GovernedInvokeSuccess {
+    text: string;
+    usage?: GovernedModelResult['usage'];
+    costUsd?: number | null;
+    pin: GovernedModelPin;
+    approvalRequestId: string;
+    prompt: PublishedGovernedArtifact;
+    policy: PublishedGovernedArtifact;
+}
+/** Input digest subject so review binds the call input and the exact pin. */
+export declare function governedReviewSubject(input: unknown, pin: GovernedModelPin): unknown;
+/**
+ * Call a host-provided model only after pin, human review, and budget all pass.
+ * Any failure throws {@link GovernedAiBlockedError} and does not call the model.
+ */
+export declare function invokeGovernedAi(deps: GovernedInvokeDeps, input: GovernedInvokeInput): Promise<GovernedInvokeSuccess>;
+//# sourceMappingURL=governed-invoke.d.ts.map

package/dist/ai/governed-invoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-invoke.d.ts","sourceRoot":"","sources":["../../src/ai/governed-invoke.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEhG,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,gBAAgB,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,qBAAqB,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE;QACpB,GAAG,EAAE,gBAAgB,CAAC;QACtB,MAAM,CAAC,EAAE,mBAAmB,CAAC;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,EAAE,gBAAgB,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,yBAAyB,CAAC;IAClC,MAAM,EAAE,yBAAyB,CAAC;CACnC;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAEpF;AA+CD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,qBAAqB,CAAC,CA8FhC"}