@prenta/core 0.118.0

package/dist/ai/providers/openai.d.ts

@@ -0,0 +1,11 @@
+/**
+ * OpenAI (and OpenAI-compatible) adapter. Uses the `/v1/models` listing
+ * endpoint with Bearer auth. Hostname is fixed (api.openai.com) so no SSRF
+ * validation is needed here.
+ */
+import type { AIConnectionTestResult } from '../types.js';
+import { type AdapterContext, type GenerateTextOptions, type GenerateTextResult } from './http.js';
+export declare function testConnection(ctx: AdapterContext): Promise<AIConnectionTestResult>;
+export declare function listModels(ctx: AdapterContext): Promise<string[]>;
+export declare function generateText(ctx: AdapterContext, opts: GenerateTextOptions): Promise<GenerateTextResult>;
+//# sourceMappingURL=openai.d.ts.map

package/dist/ai/providers/openai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/openai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EAMxB,MAAM,WAAW,CAAA;AAWlB,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBzF;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQvE;AAED,wBAAgB,YAAY,CAC1B,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAE7B"}

package/dist/ai/providers/openai.js

@@ -0,0 +1,44 @@
+/**
+ * OpenAI (and OpenAI-compatible) adapter. Uses the `/v1/models` listing
+ * endpoint with Bearer auth. Hostname is fixed (api.openai.com) so no SSRF
+ * validation is needed here.
+ */
+import { extractModelIds, messageFromStatus, openAiChat, statusFromHttp, timedFetch, } from './http.js';
+const OPENAI_BASE = 'https://api.openai.com/v1';
+function headers(ctx) {
+    const h = { authorization: `Bearer ${ctx.apiKey}` };
+    if (ctx.organizationId)
+        h['openai-organization'] = ctx.organizationId;
+    if (ctx.projectId)
+        h['openai-project'] = ctx.projectId;
+    return h;
+}
+export async function testConnection(ctx) {
+    const testedAt = new Date().toISOString();
+    if (!ctx.apiKey) {
+        return { ok: false, status: 'needs_setup', message: messageFromStatus('needs_setup'), testedAt };
+    }
+    try {
+        const res = await timedFetch(`${OPENAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+        const status = statusFromHttp(res.status);
+        return { ok: status === 'connected', status, message: messageFromStatus(status), testedAt };
+    }
+    catch {
+        return {
+            ok: false,
+            status: 'provider_down',
+            message: messageFromStatus('provider_down'),
+            testedAt,
+        };
+    }
+}
+export async function listModels(ctx) {
+    const res = await timedFetch(`${OPENAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+    if (!res.ok)
+        throw new Error(`OpenAI model listing failed (${res.status})`);
+    return extractModelIds(await res.json());
+}
+export function generateText(ctx, opts) {
+    return openAiChat(OPENAI_BASE, headers(ctx), ctx, opts);
+}
+//# sourceMappingURL=openai.js.map

package/dist/ai/providers/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../../src/ai/providers/openai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAIL,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,UAAU,GACX,MAAM,WAAW,CAAA;AAElB,MAAM,WAAW,GAAG,2BAA2B,CAAA;AAE/C,SAAS,OAAO,CAAC,GAAmB;IAClC,MAAM,CAAC,GAA2B,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAA;IAC3E,IAAI,GAAG,CAAC,cAAc;QAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC,cAAc,CAAA;IACrE,IAAI,GAAG,CAAC,SAAS;QAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,SAAS,CAAA;IACtD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB;IACtD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAA;IAClG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,WAAW,SAAS,EACvB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC3C,QAAQ;SACT,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,WAAW,SAAS,EACvB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3E,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAAmB,EACnB,IAAyB;IAEzB,OAAO,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;AACzD,CAAC"}

package/dist/ai/providers/xai.d.ts

@@ -0,0 +1,10 @@
+/**
+ * xAI (Grok) adapter. xAI's API is OpenAI-compatible: `/v1/models` with Bearer
+ * auth. Hostname is fixed (api.x.ai).
+ */
+import type { AIConnectionTestResult } from '../types.js';
+import { type AdapterContext, type GenerateTextOptions, type GenerateTextResult } from './http.js';
+export declare function testConnection(ctx: AdapterContext): Promise<AIConnectionTestResult>;
+export declare function listModels(ctx: AdapterContext): Promise<string[]>;
+export declare function generateText(ctx: AdapterContext, opts: GenerateTextOptions): Promise<GenerateTextResult>;
+//# sourceMappingURL=xai.d.ts.map

package/dist/ai/providers/xai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xai.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/xai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EAMxB,MAAM,WAAW,CAAA;AAQlB,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBzF;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAIvE;AAED,wBAAgB,YAAY,CAC1B,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAE7B"}

package/dist/ai/providers/xai.js

@@ -0,0 +1,38 @@
+/**
+ * xAI (Grok) adapter. xAI's API is OpenAI-compatible: `/v1/models` with Bearer
+ * auth. Hostname is fixed (api.x.ai).
+ */
+import { extractModelIds, messageFromStatus, openAiChat, statusFromHttp, timedFetch, } from './http.js';
+const XAI_BASE = 'https://api.x.ai/v1';
+function headers(ctx) {
+    return { authorization: `Bearer ${ctx.apiKey}` };
+}
+export async function testConnection(ctx) {
+    const testedAt = new Date().toISOString();
+    if (!ctx.apiKey) {
+        return { ok: false, status: 'needs_setup', message: messageFromStatus('needs_setup'), testedAt };
+    }
+    try {
+        const res = await timedFetch(`${XAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+        const status = statusFromHttp(res.status);
+        return { ok: status === 'connected', status, message: messageFromStatus(status), testedAt };
+    }
+    catch {
+        return {
+            ok: false,
+            status: 'provider_down',
+            message: messageFromStatus('provider_down'),
+            testedAt,
+        };
+    }
+}
+export async function listModels(ctx) {
+    const res = await timedFetch(`${XAI_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+    if (!res.ok)
+        throw new Error(`xAI model listing failed (${res.status})`);
+    return extractModelIds(await res.json());
+}
+export function generateText(ctx, opts) {
+    return openAiChat(XAI_BASE, headers(ctx), ctx, opts);
+}
+//# sourceMappingURL=xai.js.map

package/dist/ai/providers/xai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xai.js","sourceRoot":"","sources":["../../../src/ai/providers/xai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAIL,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,UAAU,GACX,MAAM,WAAW,CAAA;AAElB,MAAM,QAAQ,GAAG,qBAAqB,CAAA;AAEtC,SAAS,OAAO,CAAC,GAAmB;IAClC,OAAO,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAA;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB;IACtD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAA;IAClG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,QAAQ,SAAS,EACpB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC3C,QAAQ;SACT,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,QAAQ,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IACjG,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IACxE,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAAmB,EACnB,IAAyB;IAEzB,OAAO,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;AACtD,CAAC"}

package/dist/ai/resolve.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Feature → model routing resolution.
+ *
+ * This is the authoritative runtime resolver: given the stored AI config and the
+ * current model catalog, it decides which provider connection + model a feature
+ * should use. Resolution order for each feature:
+ *
+ *   1. The feature's explicit `modelId` override (if it exists in the catalog).
+ *   2. A capability-typed default that matches the feature's dominant required
+ *      capability (e.g. a vision feature falls back to `defaultVisionModelId`).
+ *   3. The global `defaultModelId`.
+ *   4. Any `fallbackModelIds` listed on the feature.
+ *
+ * The first candidate that is present in the catalog, available, AND satisfies
+ * every required capability wins. If none fully satisfy, we still return the
+ * best candidate we found and report the missing capabilities so callers (UI +
+ * enforcement) can warn rather than silently misroute. The admin UI mirrors a
+ * simplified version of this for live preview, but THIS function is the source
+ * of truth consumed by the AI runtime.
+ */
+import type { AIConfigDocument, AIModel } from './types.js';
+/** Where the resolved model came from in the precedence chain above. */
+export type FeatureModelSource = 'feature-override' | 'capability-default' | 'global-default' | 'fallback' | 'none';
+export interface ResolvedFeatureModel {
+    featureKey: string;
+    /** Catalog model id (`provider:modelId`), or the raw override when uncatalogued. */
+    modelId?: string;
+    /** Provider connection id that owns the resolved model. */
+    providerId?: string;
+    model?: AIModel;
+    source: FeatureModelSource;
+    /** True when a usable model was found that satisfies every required capability. */
+    satisfiesCapabilities: boolean;
+    /** Required capabilities the resolved model is missing (empty when satisfied). */
+    missingCapabilities: string[];
+}
+/** Resolve the provider + model a single feature should use. */
+export declare function resolveFeatureModel(config: AIConfigDocument, featureKey: string, catalog: AIModel[]): ResolvedFeatureModel;
+/** Resolve routing for every configured feature, keyed by feature key. */
+export declare function resolveAllFeatureModels(config: AIConfigDocument, catalog: AIModel[]): Record<string, ResolvedFeatureModel>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/ai/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/ai/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EACV,gBAAgB,EAChB,OAAO,EAIR,MAAM,YAAY,CAAA;AAEnB,wEAAwE;AACxE,MAAM,MAAM,kBAAkB,GAC1B,kBAAkB,GAClB,oBAAoB,GACpB,gBAAgB,GAChB,UAAU,GACV,MAAM,CAAA;AAEV,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,kBAAkB,CAAA;IAC1B,mFAAmF;IACnF,qBAAqB,EAAE,OAAO,CAAA;IAC9B,kFAAkF;IAClF,mBAAmB,EAAE,MAAM,EAAE,CAAA;CAC9B;AAiFD,gEAAgE;AAChE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAAE,GACjB,oBAAoB,CA2DtB;AAED,0EAA0E;AAC1E,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,OAAO,EAAE,GACjB,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAMtC"}

package/dist/ai/resolve.js

@@ -0,0 +1,143 @@
+/**
+ * Feature → model routing resolution.
+ *
+ * This is the authoritative runtime resolver: given the stored AI config and the
+ * current model catalog, it decides which provider connection + model a feature
+ * should use. Resolution order for each feature:
+ *
+ *   1. The feature's explicit `modelId` override (if it exists in the catalog).
+ *   2. A capability-typed default that matches the feature's dominant required
+ *      capability (e.g. a vision feature falls back to `defaultVisionModelId`).
+ *   3. The global `defaultModelId`.
+ *   4. Any `fallbackModelIds` listed on the feature.
+ *
+ * The first candidate that is present in the catalog, available, AND satisfies
+ * every required capability wins. If none fully satisfy, we still return the
+ * best candidate we found and report the missing capabilities so callers (UI +
+ * enforcement) can warn rather than silently misroute. The admin UI mirrors a
+ * simplified version of this for live preview, but THIS function is the source
+ * of truth consumed by the AI runtime.
+ */
+import { modelsMatch } from './catalog.js';
+/** Capability flags recognized on {@link AIModel.capabilities}. */
+const CAPABILITY_KEYS = new Set([
+    'text',
+    'vision',
+    'imageGeneration',
+    'embeddings',
+    'toolCalling',
+    'structuredOutput',
+    'streaming',
+    'reasoning',
+    'longContext',
+]);
+function findModel(catalog, id) {
+    if (!id)
+        return undefined;
+    return catalog.find((m) => modelsMatch(m.id, id) || modelsMatch(m.providerModelId, id));
+}
+/** Required capabilities a model is missing. Unknown capability strings are ignored. */
+function missingCaps(model, required) {
+    const wanted = required.filter((c) => CAPABILITY_KEYS.has(c));
+    if (!model)
+        return wanted;
+    const caps = model.capabilities;
+    return wanted.filter((c) => !caps[c]);
+}
+/** Map a feature's dominant required capability to its typed default model id. */
+function capabilityDefault(settings, required) {
+    if (required.includes('imageGeneration'))
+        return settings.defaultImageGenerationModelId;
+    if (required.includes('embeddings'))
+        return settings.defaultEmbeddingModelId;
+    if (required.includes('vision'))
+        return settings.defaultVisionModelId;
+    if (required.includes('reasoning'))
+        return settings.defaultReasoningModelId;
+    if (required.includes('text'))
+        return settings.defaultTextModelId;
+    return undefined;
+}
+/**
+ * Resolve a provider connection id for a model's provider key. Prefers an
+ * explicit feature override, then the global default provider when it matches,
+ * then the first enabled connection, then any connection of that provider.
+ */
+function providerConnId(providers, providerKey, preferredId) {
+    if (preferredId) {
+        const pref = providers.find((p) => p.id === preferredId && p.provider === providerKey);
+        if (pref)
+            return pref.id;
+    }
+    const enabled = providers.find((p) => p.provider === providerKey && p.enabled);
+    if (enabled)
+        return enabled.id;
+    return providers.find((p) => p.provider === providerKey)?.id;
+}
+function build(featureKey, model, source, config, required, preferredProviderId) {
+    const missing = missingCaps(model, required);
+    return {
+        featureKey,
+        modelId: model.id,
+        providerId: providerConnId(config.providers, model.provider, preferredProviderId ?? config.settings.defaultProviderId),
+        model,
+        source,
+        satisfiesCapabilities: missing.length === 0 && model.status !== 'unavailable',
+        missingCapabilities: missing,
+    };
+}
+/** Resolve the provider + model a single feature should use. */
+export function resolveFeatureModel(config, featureKey, catalog) {
+    const { settings } = config;
+    const feature = settings.features.find((f) => f.key === featureKey);
+    const required = feature?.requiredCapabilities ?? [];
+    const candidates = [
+        { id: feature?.modelId, source: 'feature-override' },
+        { id: capabilityDefault(settings, required), source: 'capability-default' },
+        { id: settings.defaultModelId, source: 'global-default' },
+        ...(feature?.fallbackModelIds ?? []).map((id) => ({ id, source: 'fallback' })),
+    ];
+    // Best case: first candidate that is catalogued, available, and capable.
+    let firstFound;
+    for (const candidate of candidates) {
+        const model = findModel(catalog, candidate.id);
+        if (!model)
+            continue;
+        if (!firstFound)
+            firstFound = { model, source: candidate.source };
+        if (model.status !== 'unavailable' && missingCaps(model, required).length === 0) {
+            return build(featureKey, model, candidate.source, config, required, feature?.providerId);
+        }
+    }
+    // A model was found but it's unavailable or capability-short — return it with a warning.
+    if (firstFound) {
+        return build(featureKey, firstFound.model, firstFound.source, config, required, feature?.providerId);
+    }
+    // An explicit override that isn't in the catalog yet (provider not synced).
+    if (feature?.modelId) {
+        return {
+            featureKey,
+            modelId: feature.modelId,
+            providerId: feature.providerId ??
+                providerConnId(config.providers, feature.modelId.split(':')[0] ?? 'custom', config.settings.defaultProviderId),
+            source: 'feature-override',
+            satisfiesCapabilities: false,
+            missingCapabilities: required.filter((c) => CAPABILITY_KEYS.has(c)),
+        };
+    }
+    return {
+        featureKey,
+        source: 'none',
+        satisfiesCapabilities: required.filter((c) => CAPABILITY_KEYS.has(c)).length === 0,
+        missingCapabilities: missingCaps(undefined, required),
+    };
+}
+/** Resolve routing for every configured feature, keyed by feature key. */
+export function resolveAllFeatureModels(config, catalog) {
+    const out = {};
+    for (const feature of config.settings.features) {
+        out[feature.key] = resolveFeatureModel(config, feature.key, catalog);
+    }
+    return out;
+}
+//# sourceMappingURL=resolve.js.map

package/dist/ai/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/ai/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AA+B1C,mEAAmE;AACnE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM;IACN,QAAQ;IACR,iBAAiB;IACjB,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,WAAW;IACX,WAAW;IACX,aAAa;CACd,CAAC,CAAA;AAEF,SAAS,SAAS,CAAC,OAAkB,EAAE,EAAsB;IAC3D,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IACzB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAA;AACzF,CAAC;AAED,wFAAwF;AACxF,SAAS,WAAW,CAAC,KAA0B,EAAE,QAAkB;IACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,IAAI,GAAG,KAAK,CAAC,YAAkD,CAAA;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AACvC,CAAC;AAED,kFAAkF;AAClF,SAAS,iBAAiB,CAAC,QAAoB,EAAE,QAAkB;IACjE,IAAI,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAAE,OAAO,QAAQ,CAAC,6BAA6B,CAAA;IACvF,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC,uBAAuB,CAAA;IAC5E,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,oBAAoB,CAAA;IACrE,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,QAAQ,CAAC,uBAAuB,CAAA;IAC3E,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC,kBAAkB,CAAA;IACjE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,SAAiC,EACjC,WAA0B,EAC1B,WAAoB;IAEpB,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAA;QACtF,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,EAAE,CAAA;IAC1B,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,CAAA;IAC9E,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,EAAE,CAAA;IAC9B,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE,EAAE,CAAA;AAC9D,CAAC;AAED,SAAS,KAAK,CACZ,UAAkB,EAClB,KAAc,EACd,MAA0B,EAC1B,MAAwB,EACxB,QAAkB,EAClB,mBAA4B;IAE5B,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAC5C,OAAO;QACL,UAAU;QACV,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,UAAU,EAAE,cAAc,CACxB,MAAM,CAAC,SAAS,EAChB,KAAK,CAAC,QAAQ,EACd,mBAAmB,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CACzD;QACD,KAAK;QACL,MAAM;QACN,qBAAqB,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa;QAC7E,mBAAmB,EAAE,OAAO;KAC7B,CAAA;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,mBAAmB,CACjC,MAAwB,EACxB,UAAkB,EAClB,OAAkB;IAElB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAA;IAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC,CAAA;IACnE,MAAM,QAAQ,GAAG,OAAO,EAAE,oBAAoB,IAAI,EAAE,CAAA;IAEpD,MAAM,UAAU,GAAuD;QACrE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACpD,EAAE,EAAE,EAAE,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE;QAC3E,EAAE,EAAE,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE;QACzD,GAAG,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC,CAAC;KACxF,CAAA;IAED,yEAAyE;IACzE,IAAI,UAAsE,CAAA;IAC1E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,CAAA;QAC9C,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,IAAI,CAAC,UAAU;YAAE,UAAU,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAA;QACjE,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;QAC1F,CAAC;IACH,CAAC;IAED,yFAAyF;IACzF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,KAAK,CACV,UAAU,EACV,UAAU,CAAC,KAAK,EAChB,UAAU,CAAC,MAAM,EACjB,MAAM,EACN,QAAQ,EACR,OAAO,EAAE,UAAU,CACpB,CAAA;IACH,CAAC;IAED,4EAA4E;IAC5E,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EACR,OAAO,CAAC,UAAU;gBAClB,cAAc,CACZ,MAAM,CAAC,SAAS,EACf,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAmB,IAAI,QAAQ,EAC5D,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAClC;YACH,MAAM,EAAE,kBAAkB;YAC1B,qBAAqB,EAAE,KAAK;YAC5B,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACpE,CAAA;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,MAAM,EAAE,MAAM;QACd,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAClF,mBAAmB,EAAE,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC;KACtD,CAAA;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CACrC,MAAwB,EACxB,OAAkB;IAElB,MAAM,GAAG,GAAyC,EAAE,CAAA;IACpD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/ai/runtime.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Governed AI runtime — the single execution path that turns the Settings > AI
+ * configuration into actual model calls.
+ *
+ * Everything that wants to run an LLM inside Prenta should go through here so
+ * that one DB-backed config drives behavior end-to-end:
+ *  - feature toggles are ENFORCED (a disabled feature can't run),
+ *  - per-feature model routing is RESOLVED ({@link resolveFeatureModel}),
+ *  - the API key is resolved from env or the encrypted store,
+ *  - the monthly token budget is checked (when `disableWhenExceeded`),
+ *  - real token usage is RECORDED so the usage meter reflects reality.
+ *
+ * It is intentionally provider-agnostic: the provider adapters
+ * (`./providers/*`) speak HTTP, this module decides *whether* and *with what*
+ * to call them.
+ */
+import type { AIProviderKey } from './types.js';
+/** Why a feature could not run. Distinct codes let callers map to HTTP status. */
+export type RuntimeErrorCode = 'feature_disabled' | 'no_provider' | 'no_model' | 'no_key' | 'budget_exceeded' | 'provider_error';
+export interface RuntimeError {
+    ok: false;
+    code: RuntimeErrorCode;
+    message: string;
+}
+/** A fully-resolved, ready-to-call runtime for a feature. */
+export interface ResolvedFeatureRuntime {
+    ok: true;
+    featureKey: string;
+    providerKey: AIProviderKey;
+    connectionId: string;
+    baseUrl?: string;
+    apiKey: string;
+    /** Catalog id (`provider:modelId`) selected for this feature. */
+    modelId: string;
+    /** Provider-native model id sent on the wire. */
+    providerModelId: string;
+    /** When true, omit temperature / top_p / top_k on the provider request. */
+    disallowsSampling: boolean;
+}
+/**
+ * Is a configured AI feature turned on? Unknown keys default to enabled so that
+ * callers gating on a key the config doesn't track yet don't silently break.
+ */
+export declare function isAiFeatureEnabled(db: unknown, featureKey: string): Promise<boolean>;
+/**
+ * Resolve provider + model + key + budget for a feature, enforcing the toggle.
+ * Pure resolution — performs no model call. Returns a discriminated result so
+ * callers can branch (e.g. fall back to a legacy provider on `no_provider`).
+ */
+export declare function resolveFeatureRuntime(db: unknown, featureKey: string): Promise<ResolvedFeatureRuntime | RuntimeError>;
+export interface GenerateForFeatureInput {
+    prompt: string;
+    system?: string;
+    maxTokens?: number;
+    temperature?: number;
+    /** Recorded on the usage audit entry so spend is attributable. */
+    userId?: string;
+    /**
+     * Prepend the active brand voice (if enabled) to the system prompt. Content
+     * features (co-author, SEO copy) opt in; structured/metadata features leave
+     * it off. Defaults to false so callers are explicit.
+     */
+    useBrandVoice?: boolean;
+    /** Injectable fetch for tests; forwarded to the provider adapter. */
+    fetchImpl?: typeof fetch;
+    /** Per-call timeout override (ms). */
+    timeoutMs?: number;
+}
+export interface GenerateForFeatureSuccess {
+    ok: true;
+    text: string;
+    usage: {
+        promptTokens: number;
+        completionTokens: number;
+        totalTokens: number;
+    };
+    modelId: string;
+    providerModelId: string;
+}
+/**
+ * Run a text generation for a feature through the governed path: resolve →
+ * enforce → call → record usage. Returns a discriminated result; never throws
+ * for the expected "not configured / disabled / budget" cases (those are
+ * {@link RuntimeError}). Genuine provider/transport failures surface as a
+ * `provider_error` RuntimeError too, so callers have a single shape to handle.
+ */
+export declare function generateTextForFeature(db: unknown, featureKey: string, input: GenerateForFeatureInput): Promise<GenerateForFeatureSuccess | RuntimeError>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/ai/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/ai/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAUH,OAAO,KAAK,EAAwB,aAAa,EAAE,MAAM,YAAY,CAAA;AAGrE,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,aAAa,GACb,UAAU,GACV,QAAQ,GACR,iBAAiB,GACjB,gBAAgB,CAAA;AAEpB,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,KAAK,CAAA;IACT,IAAI,EAAE,gBAAgB,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,6DAA6D;AAC7D,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,IAAI,CAAA;IACR,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,aAAa,CAAA;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAA;IACf,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAA;IACvB,2EAA2E;IAC3E,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAMD;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAI1F;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,OAAO,EACX,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,sBAAsB,GAAG,YAAY,CAAC,CAyDhD;AAQD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,IAAI,CAAA;IACR,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9E,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,OAAO,EACX,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,yBAAyB,GAAG,YAAY,CAAC,CA4DnD"}

package/dist/ai/runtime.js

@@ -0,0 +1,192 @@
+/**
+ * Governed AI runtime — the single execution path that turns the Settings > AI
+ * configuration into actual model calls.
+ *
+ * Everything that wants to run an LLM inside Prenta should go through here so
+ * that one DB-backed config drives behavior end-to-end:
+ *  - feature toggles are ENFORCED (a disabled feature can't run),
+ *  - per-feature model routing is RESOLVED ({@link resolveFeatureModel}),
+ *  - the API key is resolved from env or the encrypted store,
+ *  - the monthly token budget is checked (when `disableWhenExceeded`),
+ *  - real token usage is RECORDED so the usage meter reflects reality.
+ *
+ * It is intentionally provider-agnostic: the provider adapters
+ * (`./providers/*`) speak HTTP, this module decides *whether* and *with what*
+ * to call them.
+ */
+import { applyBrandVoice } from './brand-voice.js';
+import { resolveWireModelId } from './catalog.js';
+import { getAIConfig, resolveProviderKey } from './config-store.js';
+import { getModels } from './models.js';
+import { generateText as adapterGenerateText } from './providers/index.js';
+import { AdapterHttpError } from './providers/http.js';
+import { resolveFeatureModel } from './resolve.js';
+import { modelDisallowsSampling, samplingParamProviderMessage } from './sampling.js';
+import { getUsageSummary } from './usage.js';
+function err(code, message) {
+    return { ok: false, code, message };
+}
+/**
+ * Is a configured AI feature turned on? Unknown keys default to enabled so that
+ * callers gating on a key the config doesn't track yet don't silently break.
+ */
+export async function isAiFeatureEnabled(db, featureKey) {
+    const config = await getAIConfig(db);
+    const feature = config.settings.features.find((f) => f.key === featureKey);
+    return feature ? feature.enabled : true;
+}
+/**
+ * Resolve provider + model + key + budget for a feature, enforcing the toggle.
+ * Pure resolution — performs no model call. Returns a discriminated result so
+ * callers can branch (e.g. fall back to a legacy provider on `no_provider`).
+ */
+export async function resolveFeatureRuntime(db, featureKey) {
+    const config = await getAIConfig(db);
+    const feature = config.settings.features.find((f) => f.key === featureKey);
+    if (feature && !feature.enabled) {
+        return err('feature_disabled', `The "${feature.label}" AI feature is turned off.`);
+    }
+    const catalog = await getModels(db);
+    const resolved = resolveFeatureModel(config, featureKey, catalog);
+    if (!resolved.modelId) {
+        return err('no_model', 'No AI model is configured. Choose a default model in Settings > AI.');
+    }
+    if (!resolved.providerId) {
+        return err('no_provider', 'No connected AI provider can serve the selected model.');
+    }
+    const connection = config.providers.find((p) => p.id === resolved.providerId);
+    if (!connection) {
+        return err('no_provider', 'No AI provider connection is configured for this model.');
+    }
+    if (connection.enabled === false) {
+        return err('no_provider', `The "${connection.displayName}" provider is disabled.`);
+    }
+    const apiKey = await resolveProviderKey(connection);
+    if (!apiKey) {
+        return err('no_key', `No API key is set for the "${connection.displayName}" provider.`);
+    }
+    // Budget gate: only blocks when the operator opted into hard enforcement.
+    const budget = config.settings.budget;
+    if (budget.disableWhenExceeded && typeof budget.monthlyTokenLimit === 'number') {
+        const usage = await getUsageSummary(db);
+        if (usage.totalTokens >= budget.monthlyTokenLimit) {
+            return err('budget_exceeded', 'The monthly AI token budget has been reached. Raise the limit in Settings > AI.');
+        }
+    }
+    const providerModelId = resolveWireModelId(resolved.model?.providerModelId ?? stripProviderPrefix(resolved.modelId, connection));
+    return {
+        ok: true,
+        featureKey,
+        providerKey: connection.provider,
+        connectionId: connection.id,
+        baseUrl: connection.baseUrl,
+        apiKey,
+        modelId: resolved.modelId,
+        providerModelId,
+        disallowsSampling: modelDisallowsSampling(providerModelId, resolved.model?.capabilities),
+    };
+}
+/** `openai:gpt-4o` -> `gpt-4o`; leaves bare ids untouched. */
+function stripProviderPrefix(modelId, connection) {
+    const prefix = `${connection.provider}:`;
+    return modelId.startsWith(prefix) ? modelId.slice(prefix.length) : modelId;
+}
+/**
+ * Run a text generation for a feature through the governed path: resolve →
+ * enforce → call → record usage. Returns a discriminated result; never throws
+ * for the expected "not configured / disabled / budget" cases (those are
+ * {@link RuntimeError}). Genuine provider/transport failures surface as a
+ * `provider_error` RuntimeError too, so callers have a single shape to handle.
+ */
+export async function generateTextForFeature(db, featureKey, input) {
+    const resolved = await resolveFeatureRuntime(db, featureKey);
+    if (!resolved.ok)
+        return resolved;
+    // Inject the active brand voice into the system prompt when the caller opts
+    // in (content-writing surfaces do; metadata/structured ones don't).
+    let system = input.system;
+    if (input.useBrandVoice) {
+        const config = await getAIConfig(db);
+        system = applyBrandVoice(system, config.settings.brandVoice);
+    }
+    try {
+        const temperature = typeof input.temperature === 'number' && !resolved.disallowsSampling
+            ? input.temperature
+            : undefined;
+        const result = await adapterGenerateText(resolved.providerKey, {
+            apiKey: resolved.apiKey,
+            baseUrl: resolved.baseUrl,
+            fetchImpl: input.fetchImpl,
+            timeoutMs: input.timeoutMs,
+        }, {
+            model: resolved.providerModelId,
+            prompt: input.prompt,
+            system,
+            maxTokens: input.maxTokens,
+            temperature,
+        });
+        await recordUsage(db, {
+            featureKey,
+            modelId: resolved.modelId,
+            providerKey: resolved.providerKey,
+            userId: input.userId,
+            usage: result.usage,
+        });
+        return {
+            ok: true,
+            text: result.text,
+            usage: result.usage,
+            modelId: resolved.modelId,
+            providerModelId: resolved.providerModelId,
+        };
+    }
+    catch (e) {
+        const raw = e instanceof AdapterHttpError
+            ? e.message
+            : e instanceof Error
+                ? e.message
+                : 'The AI provider request failed.';
+        const message = samplingParamProviderMessage(raw) ?? raw;
+        return err('provider_error', message);
+    }
+}
+/**
+ * Record a usage entry in the audit log. Best-effort: a logging failure must
+ * never fail the generation that already succeeded. The field names match what
+ * {@link getUsageSummary} reads (`details.totalTokensUsed` + prompt/completion).
+ */
+async function recordUsage(db, entry) {
+    const d = db;
+    if (!d?.auditLog?.create)
+        return;
+    try {
+        await d.auditLog.create({
+            data: {
+                event: 'ai_usage',
+                userId: entry.userId ?? 'system',
+                timestamp: new Date(),
+                details: {
+                    source: 'ai-runtime',
+                    feature: entry.featureKey,
+                    model: entry.modelId,
+                    provider: entry.providerKey,
+                    totalTokensUsed: entry.usage.totalTokens,
+                    promptTokens: entry.usage.promptTokens,
+                    completionTokens: entry.usage.completionTokens,
+                },
+            },
+        });
+    }
+    catch {
+        // Swallow — usage metering is observational, not transactional.
+        return;
+    }
+    const { emitAiTokenMeterEvent } = await import('../billing/stripe-meter.js');
+    emitAiTokenMeterEvent({
+        userId: entry.userId,
+        featureKey: entry.featureKey,
+        modelId: entry.modelId,
+        totalTokens: entry.usage.totalTokens,
+    });
+}
+//# sourceMappingURL=runtime.js.map

package/dist/ai/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/ai/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,YAAY,IAAI,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AAEpF,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAiC5C,SAAS,GAAG,CAAC,IAAsB,EAAE,OAAe;IAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAW,EAAE,UAAkB;IACtE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC,CAAA;IAC1E,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAW,EACX,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAA;IAEpC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC,CAAA;IAC1E,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO,GAAG,CAAC,kBAAkB,EAAE,QAAQ,OAAO,CAAC,KAAK,6BAA6B,CAAC,CAAA;IACpF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACjE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,UAAU,EAAE,qEAAqE,CAAC,CAAA;IAC/F,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,aAAa,EAAE,wDAAwD,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC7E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,GAAG,CAAC,aAAa,EAAE,yDAAyD,CAAC,CAAA;IACtF,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,aAAa,EAAE,QAAQ,UAAU,CAAC,WAAW,yBAAyB,CAAC,CAAA;IACpF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAA;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,GAAG,CAAC,QAAQ,EAAE,8BAA8B,UAAU,CAAC,WAAW,aAAa,CAAC,CAAA;IACzF,CAAC;IAED,0EAA0E;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA;IACrC,IAAI,MAAM,CAAC,mBAAmB,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAA;QACvC,IAAI,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClD,OAAO,GAAG,CACR,iBAAiB,EACjB,iFAAiF,CAClF,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CACxC,QAAQ,CAAC,KAAK,EAAE,eAAe,IAAI,mBAAmB,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CACrF,CAAA;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,UAAU;QACV,WAAW,EAAE,UAAU,CAAC,QAAQ;QAChC,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,MAAM;QACN,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,eAAe;QACf,iBAAiB,EAAE,sBAAsB,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;KACzF,CAAA;AACH,CAAC;AAED,8DAA8D;AAC9D,SAAS,mBAAmB,CAAC,OAAe,EAAE,UAAgC;IAC5E,MAAM,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAA;IACxC,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AAC5E,CAAC;AA6BD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAW,EACX,UAAkB,EAClB,KAA8B;IAE9B,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IAC5D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAA;IAEjC,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IACzB,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAA;QACpC,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GACf,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,iBAAiB;YAClE,CAAC,CAAC,KAAK,CAAC,WAAW;YACnB,CAAC,CAAC,SAAS,CAAA;QAEf,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,QAAQ,CAAC,WAAW,EACpB;YACE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,EACD;YACE,KAAK,EAAE,QAAQ,CAAC,eAAe;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW;SACZ,CACF,CAAA;QAED,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,UAAU;YACV,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAA;QAEF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,eAAe,EAAE,QAAQ,CAAC,eAAe;SAC1C,CAAA;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GACP,CAAC,YAAY,gBAAgB;YAC3B,CAAC,CAAC,CAAC,CAAC,OAAO;YACX,CAAC,CAAC,CAAC,YAAY,KAAK;gBAClB,CAAC,CAAC,CAAC,CAAC,OAAO;gBACX,CAAC,CAAC,iCAAiC,CAAA;QACzC,MAAM,OAAO,GAAG,4BAA4B,CAAC,GAAG,CAAC,IAAI,GAAG,CAAA;QACxD,OAAO,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CACxB,EAAW,EACX,KAMC;IAED,MAAM,CAAC,GAAG,EAET,CAAA;IACD,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM;QAAE,OAAM;IAChC,IAAI,CAAC;QACH,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE;gBACJ,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,QAAQ;gBAChC,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,OAAO,EAAE;oBACP,MAAM,EAAE,YAAY;oBACpB,OAAO,EAAE,KAAK,CAAC,UAAU;oBACzB,KAAK,EAAE,KAAK,CAAC,OAAO;oBACpB,QAAQ,EAAE,KAAK,CAAC,WAAW;oBAC3B,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;oBACxC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;oBACtC,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;iBAC/C;aACF;SACF,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,OAAM;IACR,CAAC;IAED,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAA;IAC5E,qBAAqB,CAAC;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;KACrC,CAAC,CAAA;AACJ,CAAC"}

package/dist/ai/sampling.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Sampling-parameter policy for provider model calls.
+ *
+ * Some reasoning models (Anthropic Opus 4.7+, OpenAI o-series, catalog entries
+ * flagged `reasoning: true`) reject `temperature` / `top_p` / `top_k`. The
+ * runtime omits those fields rather than failing at the provider.
+ */
+import type { AIModelCapabilities } from './types.js';
+/** Provider-native ids that reject sampling params even without curated metadata. */
+export declare function providerModelIdDisallowsSampling(providerModelId: string): boolean;
+/** Whether a resolved model should not receive temperature / top_p / top_k. */
+export declare function modelDisallowsSampling(providerModelId: string, capabilities?: Partial<AIModelCapabilities>): boolean;
+/** Return temperature only when the model accepts sampling parameters. */
+export declare function resolveTemperatureForModel(providerModelId: string, capabilities: Partial<AIModelCapabilities> | undefined, temperature: number | undefined): number | undefined;
+/** Map provider sampling rejections to an actionable admin message. */
+export declare function samplingParamProviderMessage(providerMessage: string): string | undefined;
+//# sourceMappingURL=sampling.d.ts.map

package/dist/ai/sampling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampling.d.ts","sourceRoot":"","sources":["../../src/ai/sampling.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAErD,qFAAqF;AACrF,wBAAgB,gCAAgC,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAUjF;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CACpC,eAAe,EAAE,MAAM,EACvB,YAAY,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAC1C,OAAO,CAGT;AAED,0EAA0E;AAC1E,wBAAgB,0BAA0B,CACxC,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,SAAS,EACtD,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,MAAM,GAAG,SAAS,CAIpB;AAKD,uEAAuE;AACvE,wBAAgB,4BAA4B,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAmBxF"}