@prenta/core 0.118.0

package/dist/ai/config-store.d.ts

@@ -0,0 +1,55 @@
+/**
+ * DB-backed AI configuration store.
+ *
+ * Storage: a single Document row with `collection = '__ai_config__'` holding
+ * `{ providers, settings, catalog }`, mirroring the SEO config-store pattern
+ * (`packages/cms-core/src/seo/config-store.ts`). This keeps Phases 1-2 free of a
+ * Prisma migration. The per-run usage table arrives in Phase 4.
+ *
+ * Security invariants:
+ *   - Provider API keys are encrypted at rest via `encryptSecret`.
+ *   - The encrypted key is NEVER returned to the client; handlers serialize
+ *     providers through {@link toPublicProvider}.
+ *   - When a provider's env var is set, that key wins and the UI shows it as
+ *     env-managed/read-only.
+ */
+import type { AIBudgetSettings, AIConfigDocument, AIKeySource, AIProviderConnection, AIProviderConnectionPublic, AIProviderKey, AISettings } from './types.js';
+export declare const AI_CONFIG_COLLECTION = "__ai_config__";
+export declare const DEFAULT_AI_BUDGET: AIBudgetSettings;
+export declare function defaultAISettings(): AISettings;
+/** Read the env-managed key for a provider, if present and non-empty. */
+export declare function getEnvApiKey(provider: AIProviderKey): string | null;
+/** Last 4 chars of a key for masked display (never the full value). */
+export declare function last4(key: string | undefined | null): string | undefined;
+/**
+ * Resolve the effective API key for a connection at call time: an env var (if
+ * configured for this provider) always wins, otherwise the decrypted stored key.
+ * Returns null when neither exists.
+ */
+export declare function resolveProviderKey(conn: Pick<AIProviderConnection, 'provider' | 'apiKeyEncrypted'>): Promise<string | null>;
+/** Determine where a connection's key comes from for UI display. */
+export declare function resolveKeySource(conn: AIProviderConnection): AIKeySource;
+/** Strip key material and add UI-facing source metadata. */
+export declare function toPublicProvider(conn: AIProviderConnection): AIProviderConnectionPublic;
+/** Encrypt a plaintext key for storage and compute its masked suffix. */
+export declare function encryptProviderKey(plaintext: string): Promise<{
+    apiKeyEncrypted: string;
+    apiKeyLast4: string;
+}>;
+/**
+ * Read the AI config document. Returns a fully-populated object (defaults +
+ * merged feature flags) even when no row exists yet, so callers never special-
+ * case the empty state.
+ */
+export declare function getAIConfig(db: unknown): Promise<AIConfigDocument>;
+/**
+ * Upsert the AI config document. Caller is responsible for auth/role checks.
+ * Stamps `updatedAt`/`updatedBy`.
+ */
+export declare function putAIConfig(db: unknown, next: AIConfigDocument, userId: string): Promise<AIConfigDocument>;
+/** Serialize a full config doc for the client (providers masked). */
+export declare function toPublicConfig(doc: AIConfigDocument): {
+    providers: AIProviderConnectionPublic[];
+    settings: AISettings;
+};
+//# sourceMappingURL=config-store.d.ts.map

package/dist/ai/config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/ai/config-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EACpB,0BAA0B,EAC1B,aAAa,EACb,UAAU,EACX,MAAM,YAAY,CAAA;AAEnB,eAAO,MAAM,oBAAoB,kBAAkB,CAAA;AAUnD,eAAO,MAAM,iBAAiB,EAAE,gBAG/B,CAAA;AAED,wBAAgB,iBAAiB,IAAI,UAAU,CAM9C;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAKnE;AAED,uEAAuE;AACvE,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAIxE;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,CAAC,oBAAoB,EAAE,UAAU,GAAG,iBAAiB,CAAC,GAC/D,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAWxB;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,WAAW,CAIxE;AAED,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,0BAA0B,CAcvF;AAED,yEAAyE;AACzE,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAG3D;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4BxE;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,EAAE,EAAE,OAAO,EACX,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,gBAAgB,CAAC,CA2B3B;AAED,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG;IACrD,SAAS,EAAE,0BAA0B,EAAE,CAAA;IACvC,QAAQ,EAAE,UAAU,CAAA;CACrB,CAKA"}

package/dist/ai/config-store.js

@@ -0,0 +1,177 @@
+/**
+ * DB-backed AI configuration store.
+ *
+ * Storage: a single Document row with `collection = '__ai_config__'` holding
+ * `{ providers, settings, catalog }`, mirroring the SEO config-store pattern
+ * (`packages/cms-core/src/seo/config-store.ts`). This keeps Phases 1-2 free of a
+ * Prisma migration. The per-run usage table arrives in Phase 4.
+ *
+ * Security invariants:
+ *   - Provider API keys are encrypted at rest via `encryptSecret`.
+ *   - The encrypted key is NEVER returned to the client; handlers serialize
+ *     providers through {@link toPublicProvider}.
+ *   - When a provider's env var is set, that key wins and the UI shows it as
+ *     env-managed/read-only.
+ */
+import { decryptSecret, encryptSecret } from '../security/secret-storage.js';
+import { cloneFeatureDefaults, mergeFeatures } from './feature-defaults.js';
+export const AI_CONFIG_COLLECTION = '__ai_config__';
+/** Env var that supplies each built-in provider's key (custom has none). */
+const ENV_KEY_BY_PROVIDER = {
+    openai: 'OPENAI_API_KEY',
+    anthropic: 'ANTHROPIC_API_KEY',
+    xai: 'XAI_API_KEY',
+    custom: null,
+};
+export const DEFAULT_AI_BUDGET = {
+    alertAtPercentages: [50, 80, 100],
+    disableWhenExceeded: false,
+};
+export function defaultAISettings() {
+    return {
+        features: cloneFeatureDefaults(),
+        budget: { ...DEFAULT_AI_BUDGET, alertAtPercentages: [...DEFAULT_AI_BUDGET.alertAtPercentages] },
+        logsRetentionDays: 30,
+    };
+}
+/** Read the env-managed key for a provider, if present and non-empty. */
+export function getEnvApiKey(provider) {
+    const envVar = ENV_KEY_BY_PROVIDER[provider];
+    if (!envVar)
+        return null;
+    const val = process.env[envVar];
+    return val && val.trim() ? val.trim() : null;
+}
+/** Last 4 chars of a key for masked display (never the full value). */
+export function last4(key) {
+    if (!key)
+        return undefined;
+    const trimmed = key.trim();
+    return trimmed.length >= 4 ? trimmed.slice(-4) : trimmed;
+}
+/**
+ * Resolve the effective API key for a connection at call time: an env var (if
+ * configured for this provider) always wins, otherwise the decrypted stored key.
+ * Returns null when neither exists.
+ */
+export async function resolveProviderKey(conn) {
+    const envKey = getEnvApiKey(conn.provider);
+    if (envKey)
+        return envKey;
+    if (conn.apiKeyEncrypted) {
+        try {
+            return await decryptSecret(conn.apiKeyEncrypted);
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+/** Determine where a connection's key comes from for UI display. */
+export function resolveKeySource(conn) {
+    if (getEnvApiKey(conn.provider))
+        return 'environment';
+    if (conn.apiKeyEncrypted)
+        return 'database';
+    return 'database';
+}
+/** Strip key material and add UI-facing source metadata. */
+export function toPublicProvider(conn) {
+    const envKey = getEnvApiKey(conn.provider);
+    const source = resolveKeySource(conn);
+    const keyManagedExternally = source === 'environment';
+    // Reflect the env key's suffix when env-managed, else the stored suffix.
+    const maskLast4 = envKey ? last4(envKey) : conn.apiKeyLast4;
+    const { apiKeyEncrypted: _omit, ...rest } = conn;
+    return {
+        ...rest,
+        apiKeyLast4: maskLast4,
+        apiKeySource: source,
+        keyManagedExternally,
+        hasKey: Boolean(envKey || conn.apiKeyEncrypted),
+    };
+}
+/** Encrypt a plaintext key for storage and compute its masked suffix. */
+export async function encryptProviderKey(plaintext) {
+    const apiKeyEncrypted = await encryptSecret(plaintext);
+    return { apiKeyEncrypted, apiKeyLast4: last4(plaintext) ?? '' };
+}
+/**
+ * Read the AI config document. Returns a fully-populated object (defaults +
+ * merged feature flags) even when no row exists yet, so callers never special-
+ * case the empty state.
+ */
+export async function getAIConfig(db) {
+    const d = db;
+    const empty = { providers: [], settings: defaultAISettings() };
+    if (!d?.document?.findFirst)
+        return empty;
+    try {
+        const doc = await d.document.findFirst({
+            where: { collection: AI_CONFIG_COLLECTION, deletedAt: null },
+            select: { data: true },
+        });
+        if (!doc?.data || typeof doc.data !== 'object')
+            return empty;
+        const data = doc.data;
+        const settings = (data.settings ?? {});
+        return {
+            providers: Array.isArray(data.providers) ? data.providers : [],
+            settings: {
+                ...defaultAISettings(),
+                ...settings,
+                features: mergeFeatures(settings.features),
+                budget: { ...DEFAULT_AI_BUDGET, ...(settings.budget ?? {}) },
+                logsRetentionDays: settings.logsRetentionDays ?? 30,
+            },
+            catalog: data.catalog,
+            updatedAt: data.updatedAt,
+            updatedBy: data.updatedBy,
+        };
+    }
+    catch {
+        return empty;
+    }
+}
+/**
+ * Upsert the AI config document. Caller is responsible for auth/role checks.
+ * Stamps `updatedAt`/`updatedBy`.
+ */
+export async function putAIConfig(db, next, userId) {
+    const d = db;
+    const data = {
+        ...next,
+        updatedAt: new Date().toISOString(),
+        updatedBy: userId,
+    };
+    const existing = await d.document.findFirst({
+        where: { collection: AI_CONFIG_COLLECTION, deletedAt: null },
+        select: { id: true },
+    });
+    if (existing) {
+        await d.document.update({ where: { id: existing.id }, data: { data, updatedById: userId } });
+    }
+    else {
+        await d.document.create({
+            data: {
+                collection: AI_CONFIG_COLLECTION,
+                data,
+                status: 'PUBLISHED',
+                title: 'AI settings',
+                slug: 'ai-config',
+                createdById: userId,
+                updatedById: userId,
+            },
+        });
+    }
+    return data;
+}
+/** Serialize a full config doc for the client (providers masked). */
+export function toPublicConfig(doc) {
+    return {
+        providers: doc.providers.map(toPublicProvider),
+        settings: doc.settings,
+    };
+}
+//# sourceMappingURL=config-store.js.map

package/dist/ai/config-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.js","sourceRoot":"","sources":["../../src/ai/config-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC5E,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAW3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAA;AAEnD,4EAA4E;AAC5E,MAAM,mBAAmB,GAAyC;IAChE,MAAM,EAAE,gBAAgB;IACxB,SAAS,EAAE,mBAAmB;IAC9B,GAAG,EAAE,aAAa;IAClB,MAAM,EAAE,IAAI;CACb,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAqB;IACjD,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC;IACjC,mBAAmB,EAAE,KAAK;CAC3B,CAAA;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,QAAQ,EAAE,oBAAoB,EAAE;QAChC,MAAM,EAAE,EAAE,GAAG,iBAAiB,EAAE,kBAAkB,EAAE,CAAC,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,EAAE;QAC/F,iBAAiB,EAAE,EAAE;KACtB,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,QAAuB;IAClD,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAC9C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,KAAK,CAAC,GAA8B;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,OAAO,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAgE;IAEhE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,IAA0B;IACzD,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,aAAa,CAAA;IACrD,IAAI,IAAI,CAAC,eAAe;QAAE,OAAO,UAAU,CAAA;IAC3C,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,IAA0B;IACzD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,oBAAoB,GAAG,MAAM,KAAK,aAAa,CAAA;IACrD,yEAAyE;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAA;IAC3D,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IAChD,OAAO;QACL,GAAG,IAAI;QACP,WAAW,EAAE,SAAS;QACtB,YAAY,EAAE,MAAM;QACpB,oBAAoB;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,eAAe,CAAC;KAChD,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB;IAEjB,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAA;IACtD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAA;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAW;IAC3C,MAAM,CAAC,GAAG,EAAS,CAAA;IACnB,MAAM,KAAK,GAAqB,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,CAAA;IAChF,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS;QAAE,OAAO,KAAK,CAAA;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;YACrC,KAAK,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE;YAC5D,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SACvB,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAiC,CAAA;QAClD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAwB,CAAA;QAC7D,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,SAAoC,CAAC,CAAC,CAAC,EAAE;YAC1F,QAAQ,EAAE;gBACR,GAAG,iBAAiB,EAAE;gBACtB,GAAG,QAAQ;gBACX,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1C,MAAM,EAAE,EAAE,GAAG,iBAAiB,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;gBAC5D,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,IAAI,EAAE;aACpD;YACD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAW,EACX,IAAsB,EACtB,MAAc;IAEd,MAAM,CAAC,GAAG,EAAS,CAAA;IACnB,MAAM,IAAI,GAAqB;QAC7B,GAAG,IAAI;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,MAAM;KAClB,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC1C,KAAK,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE;QAC5D,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;KACrB,CAAC,CAAA;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9F,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE;gBACJ,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,aAAa;gBACpB,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,MAAM;gBACnB,WAAW,EAAE,MAAM;aACpB;SACF,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,GAAqB;IAIlD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC9C,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAA;AACH,CAAC"}

package/dist/ai/content-writing-generate.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Content-writing generation with legacy plugin-ai fallback.
+ *
+ * Brand voice analyze/fix and co-author share the governed Settings > AI path
+ * first. When that path is not fully configured (no default model, missing key,
+ * etc.) we fall back to @prenta/plugin-ai so existing installs keep
+ * working.
+ */
+import { type GenerateForFeatureInput } from './runtime.js';
+export type ContentWritingGenerateResult = {
+    ok: true;
+    text: string;
+} | {
+    ok: false;
+    httpStatus: number;
+    message: string;
+};
+export declare function generateContentWritingWithFallback(db: unknown, input: GenerateForFeatureInput): Promise<ContentWritingGenerateResult>;
+//# sourceMappingURL=content-writing-generate.d.ts.map

package/dist/ai/content-writing-generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-writing-generate.d.ts","sourceRoot":"","sources":["../../src/ai/content-writing-generate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAEL,KAAK,uBAAuB,EAE7B,MAAM,cAAc,CAAA;AAErB,MAAM,MAAM,4BAA4B,GACpC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAkCtD,wBAAsB,kCAAkC,CACtD,EAAE,EAAE,OAAO,EACX,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,4BAA4B,CAAC,CAoCvC"}

package/dist/ai/content-writing-generate.js

@@ -0,0 +1,64 @@
+/**
+ * Content-writing generation with legacy plugin-ai fallback.
+ *
+ * Brand voice analyze/fix and co-author share the governed Settings > AI path
+ * first. When that path is not fully configured (no default model, missing key,
+ * etc.) we fall back to @prenta/plugin-ai so existing installs keep
+ * working.
+ */
+import { generateTextForFeature, } from './runtime.js';
+async function importAIPlugin() {
+    const mod = '@prenta/' + 'plugin-ai';
+    return import(/* webpackIgnore: true */ mod);
+}
+function setupHint(code) {
+    switch (code) {
+        case 'no_model':
+            return ('No default AI model is selected. In Settings > AI, choose a default model ' +
+                'in the AI Assistant card and click Save changes.');
+        case 'no_key':
+            return ('No API key is available for the connected provider. Add a key under ' +
+                'Provider connections or set the provider API key env var on your host.');
+        case 'no_provider':
+            return ('No AI provider can serve the selected model. Check Provider connections, ' +
+                'refresh models, and save your default model.');
+        default:
+            return ('AI is not fully configured for content writing. Open Settings > AI, connect ' +
+                'a provider, choose a default model, and click Save changes.');
+    }
+}
+export async function generateContentWritingWithFallback(db, input) {
+    const FEATURE = 'ai.features.contentWriting';
+    const result = await generateTextForFeature(db, FEATURE, input);
+    if (result.ok) {
+        return { ok: true, text: result.text };
+    }
+    if (result.code === 'feature_disabled') {
+        return { ok: false, httpStatus: 403, message: result.message };
+    }
+    if (result.code === 'budget_exceeded') {
+        return { ok: false, httpStatus: 429, message: result.message };
+    }
+    if (result.code === 'provider_error') {
+        return { ok: false, httpStatus: 502, message: `AI provider error: ${result.message}` };
+    }
+    if (result.code === 'no_provider' || result.code === 'no_model' || result.code === 'no_key') {
+        try {
+            const aiModule = await importAIPlugin();
+            if (typeof aiModule.generate !== 'function') {
+                return { ok: false, httpStatus: 501, message: setupHint(result.code) };
+            }
+            const parts = [input.system?.trim(), input.prompt.trim()].filter(Boolean);
+            const text = await aiModule.generate(parts.join('\n\n'));
+            if (!text?.trim()) {
+                return { ok: false, httpStatus: 502, message: 'AI returned an empty response.' };
+            }
+            return { ok: true, text: text.trim() };
+        }
+        catch {
+            return { ok: false, httpStatus: 503, message: setupHint(result.code) };
+        }
+    }
+    return { ok: false, httpStatus: 502, message: result.message };
+}
+//# sourceMappingURL=content-writing-generate.js.map

package/dist/ai/content-writing-generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-writing-generate.js","sourceRoot":"","sources":["../../src/ai/content-writing-generate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,sBAAsB,GAGvB,MAAM,cAAc,CAAA;AAMrB,KAAK,UAAU,cAAc;IAG3B,MAAM,GAAG,GAAG,UAAU,GAAG,WAAW,CAAA;IACpC,OAAO,MAAM,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,SAAS,CAAC,IAAsB;IACvC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,CACL,4EAA4E;gBAC5E,kDAAkD,CACnD,CAAA;QACH,KAAK,QAAQ;YACX,OAAO,CACL,sEAAsE;gBACtE,wEAAwE,CACzE,CAAA;QACH,KAAK,aAAa;YAChB,OAAO,CACL,2EAA2E;gBAC3E,8CAA8C,CAC/C,CAAA;QACH;YACE,OAAO,CACL,8EAA8E;gBAC9E,6DAA6D,CAC9D,CAAA;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,EAAW,EACX,KAA8B;IAE9B,MAAM,OAAO,GAAG,4BAA4B,CAAA;IAC5C,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;IAE/D,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IACxC,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAsB,MAAM,CAAC,OAAO,EAAE,EAAE,CAAA;IACxF,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5F,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAA;YACvC,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAA;YACxE,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACzE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;YACxD,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;gBAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAA;YAClF,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAA;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAA;QACxE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;AAChE,CAAC"}

package/dist/ai/feature-defaults.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Default AI feature catalog. These are the global feature flags surfaced in
+ * Settings > AI and (from Phase 3) enforced across CMS modules via
+ * `isAiFeatureEnabled(key)`. Seeded into the `__ai_config__` document on first
+ * write; admins toggle `enabled` per feature.
+ *
+ * Keys follow the `ai.features.*` convention so a single shared service governs
+ * every module instead of per-module flags.
+ */
+import type { AIFeatureConfig } from './types.js';
+export declare const AI_FEATURE_DEFAULTS: AIFeatureConfig[];
+/** Deep clone so callers can't mutate the shared default array. */
+export declare function cloneFeatureDefaults(): AIFeatureConfig[];
+/**
+ * Merge stored feature toggles over the current defaults so newly-added features
+ * appear automatically and removed/renamed ones drop off, while preserving the
+ * admin's `enabled`/routing choices for features that still exist.
+ */
+export declare function mergeFeatures(stored: AIFeatureConfig[] | undefined): AIFeatureConfig[];
+//# sourceMappingURL=feature-defaults.d.ts.map

package/dist/ai/feature-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-defaults.d.ts","sourceRoot":"","sources":["../../src/ai/feature-defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,eAAO,MAAM,mBAAmB,EAAE,eAAe,EA6DhD,CAAA;AAED,mEAAmE;AACnE,wBAAgB,oBAAoB,IAAI,eAAe,EAAE,CAQxD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,SAAS,GAAG,eAAe,EAAE,CAetF"}

package/dist/ai/feature-defaults.js

@@ -0,0 +1,104 @@
+/**
+ * Default AI feature catalog. These are the global feature flags surfaced in
+ * Settings > AI and (from Phase 3) enforced across CMS modules via
+ * `isAiFeatureEnabled(key)`. Seeded into the `__ai_config__` document on first
+ * write; admins toggle `enabled` per feature.
+ *
+ * Keys follow the `ai.features.*` convention so a single shared service governs
+ * every module instead of per-module flags.
+ */
+export const AI_FEATURE_DEFAULTS = [
+    {
+        key: 'ai.features.seo404Recovery',
+        label: '404 Recovery suggestions',
+        description: 'Recommend redirect targets for broken URLs that still receive traffic.',
+        enabled: true,
+        category: 'seo',
+        requiredCapabilities: ['text', 'reasoning'],
+        approvalRequired: true,
+        allowBulkApply: false,
+        rolesAllowed: ['ADMIN', 'EDITOR'],
+        permissionsRequired: ['ai.use'],
+    },
+    {
+        key: 'ai.features.contentWriting',
+        label: 'Content writing suggestions',
+        description: 'Draft, rewrite, summarize, and improve content in the editor.',
+        enabled: true,
+        category: 'content',
+        requiredCapabilities: ['text'],
+        approvalRequired: true,
+        allowBulkApply: false,
+        rolesAllowed: ['ADMIN', 'EDITOR'],
+        permissionsRequired: ['ai.use'],
+    },
+    {
+        key: 'ai.features.mediaAltText',
+        label: 'Auto alt-text for media',
+        description: 'Generate descriptive alt text for images on upload or in the SEO drawer.',
+        enabled: true,
+        category: 'media',
+        requiredCapabilities: ['vision'],
+        approvalRequired: true,
+        allowBulkApply: false,
+        rolesAllowed: ['ADMIN', 'EDITOR'],
+        permissionsRequired: ['ai.use'],
+    },
+    {
+        key: 'ai.features.seoMetaGeneration',
+        label: 'SEO meta generation',
+        description: 'Generate SEO titles, meta descriptions, and focus keywords from content.',
+        enabled: true,
+        category: 'seo',
+        requiredCapabilities: ['text'],
+        approvalRequired: true,
+        allowBulkApply: false,
+        rolesAllowed: ['ADMIN', 'EDITOR'],
+        permissionsRequired: ['ai.use'],
+    },
+    {
+        key: 'ai.features.redirectChainFlattening',
+        label: 'Redirect chain flattening',
+        description: 'Suggest direct single-hop redirects to collapse redirect chains.',
+        enabled: false,
+        category: 'seo',
+        requiredCapabilities: ['text', 'reasoning'],
+        approvalRequired: true,
+        allowBulkApply: false,
+        rolesAllowed: ['ADMIN'],
+        permissionsRequired: ['ai.use'],
+    },
+];
+/** Deep clone so callers can't mutate the shared default array. */
+export function cloneFeatureDefaults() {
+    return AI_FEATURE_DEFAULTS.map((f) => ({
+        ...f,
+        requiredCapabilities: [...f.requiredCapabilities],
+        rolesAllowed: [...f.rolesAllowed],
+        permissionsRequired: [...f.permissionsRequired],
+        fallbackModelIds: f.fallbackModelIds ? [...f.fallbackModelIds] : undefined,
+    }));
+}
+/**
+ * Merge stored feature toggles over the current defaults so newly-added features
+ * appear automatically and removed/renamed ones drop off, while preserving the
+ * admin's `enabled`/routing choices for features that still exist.
+ */
+export function mergeFeatures(stored) {
+    const byKey = new Map((stored ?? []).map((f) => [f.key, f]));
+    return cloneFeatureDefaults().map((def) => {
+        const prev = byKey.get(def.key);
+        if (!prev)
+            return def;
+        return {
+            ...def,
+            enabled: typeof prev.enabled === 'boolean' ? prev.enabled : def.enabled,
+            providerId: prev.providerId ?? def.providerId,
+            modelId: prev.modelId ?? def.modelId,
+            fallbackModelIds: prev.fallbackModelIds ?? def.fallbackModelIds,
+            maxMonthlyTokens: prev.maxMonthlyTokens ?? def.maxMonthlyTokens,
+            maxRequestsPerDay: prev.maxRequestsPerDay ?? def.maxRequestsPerDay,
+        };
+    });
+}
+//# sourceMappingURL=feature-defaults.js.map

package/dist/ai/feature-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-defaults.js","sourceRoot":"","sources":["../../src/ai/feature-defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD;QACE,GAAG,EAAE,4BAA4B;QACjC,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,wEAAwE;QACrF,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,oBAAoB,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;QAC3C,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,mBAAmB,EAAE,CAAC,QAAQ,CAAC;KAChC;IACD;QACE,GAAG,EAAE,4BAA4B;QACjC,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,+DAA+D;QAC5E,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,SAAS;QACnB,oBAAoB,EAAE,CAAC,MAAM,CAAC;QAC9B,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,mBAAmB,EAAE,CAAC,QAAQ,CAAC;KAChC;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,0EAA0E;QACvF,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,OAAO;QACjB,oBAAoB,EAAE,CAAC,QAAQ,CAAC;QAChC,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,mBAAmB,EAAE,CAAC,QAAQ,CAAC;KAChC;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,0EAA0E;QACvF,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,oBAAoB,EAAE,CAAC,MAAM,CAAC;QAC9B,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,mBAAmB,EAAE,CAAC,QAAQ,CAAC;KAChC;IACD;QACE,GAAG,EAAE,qCAAqC;QAC1C,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,kEAAkE;QAC/E,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;QACf,oBAAoB,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;QAC3C,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC,OAAO,CAAC;QACvB,mBAAmB,EAAE,CAAC,QAAQ,CAAC;KAChC;CACF,CAAA;AAED,mEAAmE;AACnE,MAAM,UAAU,oBAAoB;IAClC,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,GAAG,CAAC;QACJ,oBAAoB,EAAE,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC;QACjD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC;QACjC,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC;QAC/C,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC,CAAC,CAAA;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAqC;IACjE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5D,OAAO,oBAAoB,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAA;QACrB,OAAO;YACL,GAAG,GAAG;YACN,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;YACvE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU;YAC7C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO;YACpC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,gBAAgB;YAC/D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,gBAAgB;YAC/D,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB;SACnE,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/ai/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Barrel for the Settings > AI governance layer: provider connections, dynamic
+ * model catalog, per-feature model routing, and the governed runtime that
+ * enforces toggles/budget and records real token usage.
+ */
+export * from './types.js';
+export { AI_CONFIG_COLLECTION, DEFAULT_AI_BUDGET, defaultAISettings, encryptProviderKey, getAIConfig, getEnvApiKey, last4, putAIConfig, resolveKeySource, resolveProviderKey, toPublicConfig, toPublicProvider, } from './config-store.js';
+export { AI_FEATURE_DEFAULTS, cloneFeatureDefaults, mergeFeatures } from './feature-defaults.js';
+export { applyBrandVoice, buildBrandVoiceSystemPrompt, getActiveBrandVoice, normalizeBrandVoice, BRAND_VOICE_LIMITS, } from './brand-voice.js';
+export { prepareBrandVoiceForSave, type PrepareBrandVoiceOptions } from './brand-voice-save.js';
+export { applyParsedDocumentToProfile, BRAND_VOICE_DOCUMENT_MAX, BRAND_VOICE_EXPORT_FILENAME, deriveBrandVoiceFields, ensureBrandVoiceDocument, parseBrandVoiceDocument, serializeBrandVoiceDocument, splitBrandVoiceDocument, syncFieldsFromDocument, type BrandVoiceDocumentFields, type BrandVoiceDocumentMeta, type BrandVoiceDocumentStatus, type ParsedBrandVoiceDocument, type ParseBrandVoiceDocumentError, type ParseBrandVoiceDocumentResult, } from './brand-voice-document.js';
+export { applyStructuredProfileToDocument, defaultStructuredProfile, parseStructuredProfile, scoreBrandAlignment, BRAND_VOICE_CHANNEL_PRESETS, MAX_BANNED_TERMS, MAX_PREFERRED_TERMS, MAX_AVOID_PATTERNS, MAX_WORKED_EXAMPLES, type BrandAlignmentDimension, type BrandAlignmentIssue, type BrandAlignmentScoreResult, type BrandVoiceBannedTerm, type BrandVoiceChannelRule, type BrandVoiceMechanics, type BrandVoiceStructuredProfile, type BrandVoiceToneScales, type BrandVoiceWorkedExample, } from './brand-voice-structured.js';
+export { buildBrandVoiceAnalysisPrompt, fenceBrandVoiceSample, gatherBrandVoiceSamples, parseBrandVoiceAnalysisResponse, stripJsonFences, toBrandVoiceAnalyzeResult, BRAND_VOICE_ANALYZE_DEFAULT_SAMPLES, BRAND_VOICE_ANALYZE_MAX_SAMPLES, type BrandVoiceAnalysisDraft, type BrandVoiceAnalyzeResult, type BrandVoiceSample, type GatherBrandVoiceSamplesOptions, } from './brand-voice-analyze.js';
+export { alignContentWithBrandVoice, COAUTHOR_BRAND_CHANNEL, hasBrandVoiceForScoring, seoFieldToBrandChannel, } from './brand-voice-alignment.js';
+export { applyDeterministicBrandFixes, buildBrandVoiceFixPrompt, needsAiBrandFix, runDeterministicBrandFix, type BrandVoiceFixOutcome, type DeterministicFixResult, } from './brand-voice-fix.js';
+export { BrandVoiceSourceError, fetchBrandVoiceUrlSample, uploadToBrandVoiceSample, MAX_ANALYZE_UPLOADS, MAX_ANALYZE_URLS, MAX_UPLOAD_TEXT_CHARS, } from './brand-voice-sources.js';
+export { generateContentWritingWithFallback, type ContentWritingGenerateResult, } from './content-writing-generate.js';
+export { curatedFallbackCatalog, normalizeModel } from './catalog.js';
+export { getModels, resolveModelOrUnavailable, syncModels, type SyncModelsResult, } from './models.js';
+export { getUsageSummary } from './usage.js';
+export { resolveFeatureModel, resolveAllFeatureModels, type FeatureModelSource, type ResolvedFeatureModel, } from './resolve.js';
+export { getAdapter, generateText as adapterGenerateText, listModels as adapterListModels, testConnection as adapterTestConnection, type AdapterContext, type GenerateTextOptions, type GenerateTextResult, } from './providers/index.js';
+export { generateTextForFeature, isAiFeatureEnabled, resolveFeatureRuntime, type GenerateForFeatureInput, type GenerateForFeatureSuccess, type ResolvedFeatureRuntime, type RuntimeError, type RuntimeErrorCode, } from './runtime.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ai/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,KAAK,EACL,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAChG,OAAO,EACL,eAAe,EACf,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,wBAAwB,EAAE,KAAK,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAC/F,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,GACnC,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,gCAAgC,EAChC,wBAAwB,EACxB,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,uBAAuB,EACvB,+BAA+B,EAC/B,eAAe,EACf,yBAAyB,EACzB,mCAAmC,EACnC,+BAA+B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,8BAA8B,GACpC,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,eAAe,EACf,wBAAwB,EACxB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,GAC5B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,kCAAkC,EAClC,KAAK,4BAA4B,GAClC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EACL,SAAS,EACT,yBAAyB,EACzB,UAAU,EACV,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,UAAU,EACV,YAAY,IAAI,mBAAmB,EACnC,UAAU,IAAI,iBAAiB,EAC/B,cAAc,IAAI,qBAAqB,EACvC,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAA"}

package/dist/ai/index.js

@@ -0,0 +1,24 @@
+/**
+ * Barrel for the Settings > AI governance layer: provider connections, dynamic
+ * model catalog, per-feature model routing, and the governed runtime that
+ * enforces toggles/budget and records real token usage.
+ */
+export * from './types.js';
+export { AI_CONFIG_COLLECTION, DEFAULT_AI_BUDGET, defaultAISettings, encryptProviderKey, getAIConfig, getEnvApiKey, last4, putAIConfig, resolveKeySource, resolveProviderKey, toPublicConfig, toPublicProvider, } from './config-store.js';
+export { AI_FEATURE_DEFAULTS, cloneFeatureDefaults, mergeFeatures } from './feature-defaults.js';
+export { applyBrandVoice, buildBrandVoiceSystemPrompt, getActiveBrandVoice, normalizeBrandVoice, BRAND_VOICE_LIMITS, } from './brand-voice.js';
+export { prepareBrandVoiceForSave } from './brand-voice-save.js';
+export { applyParsedDocumentToProfile, BRAND_VOICE_DOCUMENT_MAX, BRAND_VOICE_EXPORT_FILENAME, deriveBrandVoiceFields, ensureBrandVoiceDocument, parseBrandVoiceDocument, serializeBrandVoiceDocument, splitBrandVoiceDocument, syncFieldsFromDocument, } from './brand-voice-document.js';
+export { applyStructuredProfileToDocument, defaultStructuredProfile, parseStructuredProfile, scoreBrandAlignment, BRAND_VOICE_CHANNEL_PRESETS, MAX_BANNED_TERMS, MAX_PREFERRED_TERMS, MAX_AVOID_PATTERNS, MAX_WORKED_EXAMPLES, } from './brand-voice-structured.js';
+export { buildBrandVoiceAnalysisPrompt, fenceBrandVoiceSample, gatherBrandVoiceSamples, parseBrandVoiceAnalysisResponse, stripJsonFences, toBrandVoiceAnalyzeResult, BRAND_VOICE_ANALYZE_DEFAULT_SAMPLES, BRAND_VOICE_ANALYZE_MAX_SAMPLES, } from './brand-voice-analyze.js';
+export { alignContentWithBrandVoice, COAUTHOR_BRAND_CHANNEL, hasBrandVoiceForScoring, seoFieldToBrandChannel, } from './brand-voice-alignment.js';
+export { applyDeterministicBrandFixes, buildBrandVoiceFixPrompt, needsAiBrandFix, runDeterministicBrandFix, } from './brand-voice-fix.js';
+export { BrandVoiceSourceError, fetchBrandVoiceUrlSample, uploadToBrandVoiceSample, MAX_ANALYZE_UPLOADS, MAX_ANALYZE_URLS, MAX_UPLOAD_TEXT_CHARS, } from './brand-voice-sources.js';
+export { generateContentWritingWithFallback, } from './content-writing-generate.js';
+export { curatedFallbackCatalog, normalizeModel } from './catalog.js';
+export { getModels, resolveModelOrUnavailable, syncModels, } from './models.js';
+export { getUsageSummary } from './usage.js';
+export { resolveFeatureModel, resolveAllFeatureModels, } from './resolve.js';
+export { getAdapter, generateText as adapterGenerateText, listModels as adapterListModels, testConnection as adapterTestConnection, } from './providers/index.js';
+export { generateTextForFeature, isAiFeatureEnabled, resolveFeatureRuntime, } from './runtime.js';
+//# sourceMappingURL=index.js.map

package/dist/ai/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,KAAK,EACL,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAChG,OAAO,EACL,eAAe,EACf,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,wBAAwB,EAAiC,MAAM,uBAAuB,CAAA;AAC/F,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,GAOvB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,gCAAgC,EAChC,wBAAwB,EACxB,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GAUpB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,uBAAuB,EACvB,+BAA+B,EAC/B,eAAe,EACf,yBAAyB,EACzB,mCAAmC,EACnC,+BAA+B,GAKhC,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,eAAe,EACf,wBAAwB,GAGzB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,kCAAkC,GAEnC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EACL,SAAS,EACT,yBAAyB,EACzB,UAAU,GAEX,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GAGxB,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,UAAU,EACV,YAAY,IAAI,mBAAmB,EACnC,UAAU,IAAI,iBAAiB,EAC/B,cAAc,IAAI,qBAAqB,GAIxC,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,GAMtB,MAAM,cAAc,CAAA"}

package/dist/ai/models.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Model catalog orchestration: live sync (with curated normalization), curated
+ * fallback, and resolution of a configured-but-missing model to an `unavailable`
+ * entry so the UI can warn without silently dropping the admin's choice.
+ */
+import { AI_CONFIG_COLLECTION } from './config-store.js';
+import type { AIModel } from './types.js';
+export { AI_CONFIG_COLLECTION };
+export interface SyncModelsResult {
+    models: AIModel[];
+    fromFallback: boolean;
+    /** Present when the live listing failed and we fell back to curated data. */
+    warning?: string;
+}
+/**
+ * Sync the model catalog for a provider connection. Attempts a live listing;
+ * on any failure falls back to the curated catalog so the selector is never
+ * empty. Persists the result on the `__ai_config__` document under
+ * `catalog[connectionId]` and stamps `lastModelSyncAt`.
+ */
+export declare function syncModels(db: unknown, connectionId: string): Promise<SyncModelsResult>;
+/**
+ * Read the cached catalog for a connection (or all connections). Falls back to
+ * the curated catalog for connections that have never been synced so the UI
+ * always has something to show.
+ */
+export declare function getModels(db: unknown, params?: {
+    connectionId?: string;
+    provider?: string;
+}): Promise<AIModel[]>;
+/**
+ * Resolve a configured model id to a catalog entry. When the id is no longer in
+ * the catalog (provider removed/renamed it) returns a synthesized `unavailable`
+ * model so the caller can keep the setting and warn the user.
+ */
+export declare function resolveModelOrUnavailable(modelId: string | undefined, catalog: AIModel[]): AIModel | null;
+//# sourceMappingURL=models.d.ts.map

package/dist/ai/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/ai/models.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,oBAAoB,EAIrB,MAAM,mBAAmB,CAAA;AAS1B,OAAO,KAAK,EAAkB,OAAO,EAAwB,MAAM,YAAY,CAAA;AAE/E,OAAO,EAAE,oBAAoB,EAAE,CAAA;AAW/B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,EAAE,CAAA;IACjB,YAAY,EAAE,OAAO,CAAA;IACrB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2D7F;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,EAAE,EAAE,OAAO,EACX,MAAM,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAAC,OAAO,EAAE,CAAC,CAiBpB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,OAAO,EAAE,GACjB,OAAO,GAAG,IAAI,CAkBhB"}