@substrat-run/vertical-host 0.92.1 → 0.95.0

package/README.md

@@ -63,3 +63,10 @@ neither `adapter-cloudflare` nor any concrete host.
 
 A vertical that never calls `mountPlatformSurface` has no `/internal/provision` and fails
 to provision on first deploy and in its scenario test — louder than any lint.
+
+## `createModelHost` — `@substrat-run/vertical-host/model`
+
+Governance around a language-model call, provider-neutral: resolve `provider:model` against
+platform-held credentials, consult the host's `guard`, run, and hand one `ModelUsageLine`
+(reported tokens, rate-card list price, five fixed attribution keys) to the host's `record`.
+Lives around operations, never inside a scope's transaction. See the reference page.

package/dist/model.d.ts

@@ -0,0 +1,124 @@
+/**
+ * The platform's model host — governance around a model call, provider-neutral.
+ *
+ * D-18 splits the AI capability in two: the model is an adapter (any row of
+ * `@substrat-run/model-providers`), the governance is the kernel's. This is the
+ * governance, at the host layer, wrapped around one call:
+ *
+ *   1. resolve `provider:model` against PLATFORM-held credentials (the worker's own
+ *      bindings — never a per-install token, that is what made ticket0's assistant
+ *      bring-your-own-account, #1054);
+ *   2. ask the host's `guard` whether this call may run at all (a tenant budget, a
+ *      plan that does not include this model) — policy, enforced before the bytes go out;
+ *   3. run it;
+ *   4. turn the AI SDK's usage into one `ModelUsageLine`, priced from the rate card on
+ *      OUR side, attributed with the five fixed keys, and hand it to `record`.
+ *
+ * It lives HERE, around operations, and not on `OperationContext`: a model call is a
+ * multi-second network round-trip, and holding a scope's transaction open across it
+ * would be exactly the "no network in module code" rule broken from the inside. A
+ * vertical calls this from its harness — the way ticket0's assistant already runs —
+ * and records the result through its own operations.
+ *
+ * Nothing in this file names a provider. Cloudflare's gateway extras (per-request
+ * metadata, spend limits) are layered on that row by the provider package when the
+ * host asks for them; the line this produces is the same for every row.
+ */
+import { type LanguageModelUsage } from 'ai';
+import { ProviderError, type CredentialEnv, type DirectFactories, type HostingInfo, type StepTokens } from '@substrat-run/model-providers';
+import { type ModelAttribution, type ModelUsageLine } from '@substrat-run/contracts';
+export type { HostingInfo, ModelAttribution, ModelUsageLine };
+export { ProviderError };
+/** What the guard sees before anything is sent: which model, on whose behalf. */
+export interface ModelIntent {
+    readonly spec: string;
+    readonly attribution: ModelAttribution;
+}
+export interface ModelRequest extends ModelIntent {
+    readonly system?: string;
+    readonly prompt: string;
+    readonly maxOutputTokens?: number;
+    readonly temperature?: number;
+}
+export interface ModelRun {
+    readonly text: string;
+    readonly finishReason: string;
+    /** `provider/modelId` — what a turn record shows. */
+    readonly label: string;
+    /** The one governance fact this call produced; already handed to `record`. */
+    readonly line: ModelUsageLine;
+}
+/** What a settings screen shows for a spec before anyone runs it. */
+export interface ModelStatus {
+    readonly spec: string;
+    readonly label: string;
+    readonly provider: string;
+    readonly modelId: string;
+    /** The platform holds what this row needs. */
+    readonly configured: boolean;
+    /** The env vars it is missing, when not. */
+    readonly missing: readonly string[];
+    /** Where inference runs and what is sent there — the disclosure a settings screen shows. */
+    readonly hosting: HostingInfo;
+}
+export interface ModelHostOptions {
+    /** Platform-held credentials — the worker's own bindings. Only the row's own variables are read. */
+    readonly env: CredentialEnv;
+    /**
+     * Provider factories this bundle statically carries (`{ anthropic: createAnthropic }`),
+     * and — for a row that declares a binding transport — the binding itself, already
+     * wrapped. `aiBinding` below is the sanctioned way to supply the Workers AI one.
+     */
+    readonly factories?: DirectFactories;
+    /**
+     * The Workers AI binding (`env.AI`), when the runtime has one.
+     *
+     * This is the transport we WANT for Cloudflare models: the runtime grants a capability,
+     * the account that owns the script is billed, and no credential exists on the script to
+     * be read, leaked or rotated. Supplying it makes the `cloudflare` row runnable with no
+     * `CLOUDFLARE_AI_*` set at all.
+     *
+     * Typed `unknown` on purpose — `@substrat-run/vertical-host` must not depend on
+     * `@cloudflare/workers-types` to describe an optional binding, and `workers-ai-provider`
+     * validates what it is handed.
+     */
+    readonly aiBinding?: unknown;
+    /**
+     * The host's clock — stamped on every line.
+     *
+     * NOT `ctx.now()`, and it cannot be: a model call runs OUTSIDE any operation (D-59 —
+     * no scope transaction may span a multi-second round-trip), so there is no `ctx` in
+     * scope when this fires. The line's `at` is when the provider answered; the meter
+     * entry the vertical writes afterwards carries `ctx.now()`, and the two are different
+     * facts about different moments rather than one fact from two clocks. Injectable so a
+     * scenario can freeze it — which is what R6 is really protecting.
+     */
+    readonly now?: () => Date;
+    /** What this host sends to a model, for the disclosure: 'Customer messages and the excerpts they match'. */
+    readonly sent?: string;
+    /**
+     * Policy, before the call. Throw to refuse: the model never runs, nothing is
+     * recorded, and the caller sees the throw. A budget lives here.
+     */
+    readonly guard?: (intent: ModelIntent) => void | Promise<void>;
+    /**
+     * The ledger writes, after every successful call. A throw here fails the run —
+     * a call that cannot be recorded must not look like one that was.
+     */
+    readonly record?: (line: ModelUsageLine) => void | Promise<void>;
+}
+export interface ModelHost {
+    status(spec: string): ModelStatus;
+    run(request: ModelRequest): Promise<ModelRun>;
+}
+/** The AI SDK's usage shape → the rate card's, with "reported" kept honest. */
+export interface ReportedTokens extends StepTokens {
+    readonly reported: boolean;
+    readonly inputTokens: number;
+    readonly outputTokens: number;
+    readonly cachedInputTokens: number;
+    readonly cacheWriteTokens: number;
+}
+export declare function stepTokensOf(usage: LanguageModelUsage | undefined): ReportedTokens;
+export declare function createModelHost(options: ModelHostOptions): ModelHost;
+//# sourceMappingURL=model.d.ts.map

package/dist/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAgB,KAAK,kBAAkB,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAQL,aAAa,EAEb,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,UAAU,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAoC,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEvH,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;CACxC;AAED,MAAM,WAAW,YAAa,SAAQ,WAAW;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B;AAED,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,4CAA4C;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,oGAAoG;IACpG,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;;OASG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,4GAA4G;IAC5G,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAClC,GAAG,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC/C;AAID,+EAA+E;AAC/E,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,SAAS,GAAG,cAAc,CAUlF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CA2FpE"}

package/dist/model.js

@@ -0,0 +1,129 @@
+/**
+ * The platform's model host — governance around a model call, provider-neutral.
+ *
+ * D-18 splits the AI capability in two: the model is an adapter (any row of
+ * `@substrat-run/model-providers`), the governance is the kernel's. This is the
+ * governance, at the host layer, wrapped around one call:
+ *
+ *   1. resolve `provider:model` against PLATFORM-held credentials (the worker's own
+ *      bindings — never a per-install token, that is what made ticket0's assistant
+ *      bring-your-own-account, #1054);
+ *   2. ask the host's `guard` whether this call may run at all (a tenant budget, a
+ *      plan that does not include this model) — policy, enforced before the bytes go out;
+ *   3. run it;
+ *   4. turn the AI SDK's usage into one `ModelUsageLine`, priced from the rate card on
+ *      OUR side, attributed with the five fixed keys, and hand it to `record`.
+ *
+ * It lives HERE, around operations, and not on `OperationContext`: a model call is a
+ * multi-second network round-trip, and holding a scope's transaction open across it
+ * would be exactly the "no network in module code" rule broken from the inside. A
+ * vertical calls this from its harness — the way ticket0's assistant already runs —
+ * and records the result through its own operations.
+ *
+ * Nothing in this file names a provider. Cloudflare's gateway extras (per-request
+ * metadata, spend limits) are layered on that row by the provider package when the
+ * host asks for them; the line this produces is the same for every row.
+ */
+import { generateText } from 'ai';
+import { createModel, credentialsFrom, hostingInfo, providerRow, listCostOfSteps, normalizeModelSpec, parseModelSpec, ProviderError, requestHeadersFor, } from '@substrat-run/model-providers';
+import { createWorkersAI } from 'workers-ai-provider';
+import { modelAttribution, modelUsageLine } from '@substrat-run/contracts';
+export { ProviderError };
+const DESCRIBE_MISSING = (envVar) => `${envVar} is not set on the platform`;
+export function stepTokensOf(usage) {
+    const input = usage?.inputTokens;
+    const output = usage?.outputTokens;
+    return {
+        reported: typeof input === 'number' || typeof output === 'number',
+        inputTokens: input ?? 0,
+        outputTokens: output ?? 0,
+        cachedInputTokens: usage?.inputTokenDetails?.cacheReadTokens ?? 0,
+        cacheWriteTokens: usage?.inputTokenDetails?.cacheWriteTokens ?? 0,
+    };
+}
+export function createModelHost(options) {
+    const now = options.now ?? (() => new Date());
+    // One place decides which providers this host can build. The binding, when present,
+    // joins the same `factories` map the direct rows use — so `createModel` reaches it
+    // through the seam it already had rather than a Cloudflare-shaped special case.
+    const factories = {
+        ...(options.factories ?? {}),
+        ...(options.aiBinding
+            ? { cloudflare: () => (modelId) => createWorkersAI({ binding: options.aiBinding })(modelId) }
+            : {}),
+    };
+    const status = (spec) => {
+        const { provider, modelId } = parseModelSpec(spec);
+        const creds = credentialsFrom(provider, options.env);
+        // Exactly `createModel`'s rule, not a looser one. Only a row that DECLARES a binding
+        // transport is credential-free; a `direct` row's factory (`createAnthropic`) is just
+        // the package, and it still needs its key. Reported any looser, a settings screen
+        // would call an Anthropic row 'configured' with no key set and the call would then
+        // fail — the status lying about the thing it exists to answer.
+        const row = providerRow(provider);
+        const bound = Boolean(row?.kind === 'compatible' && row.binding && factories[provider]);
+        return {
+            spec: normalizeModelSpec(spec),
+            label: `${provider}/${modelId}`,
+            provider,
+            modelId,
+            configured: bound || creds.missing.length === 0,
+            missing: bound ? [] : creds.missing,
+            hosting: hostingInfo(provider, options.env, options.sent ? { sent: options.sent } : {}),
+        };
+    };
+    const run = async (request) => {
+        // Parse the attribution FIRST — before the guard, and long before anything
+        // billable. It used to be validated only when the line was built, which is after
+        // `generateText` has returned: a sixth key therefore bought a model call and then
+        // threw, spending money that no ledger line accounted for. Parse, don't trust
+        // (and the five-key limit is the whole reason this schema is `.strict()`).
+        const attribution = modelAttribution.parse(request.attribution);
+        // Then resolve: an unknown provider or an unconfigured row is refused before the
+        // guard is consulted, so a budget is never charged for a call that could not have
+        // happened.
+        const resolved = createModel(request.spec, options.env, {
+            factories,
+            hosted: true,
+            describeMissing: DESCRIBE_MISSING,
+        });
+        // The guard sees the CANONICAL spec, never the caller's shorthand. `claude-opus-5`
+        // and `anthropic:claude-opus-5` resolve to one model, so a policy written against
+        // the canonical form would otherwise be bypassed by typing the short one.
+        const model = normalizeModelSpec(request.spec);
+        await options.guard?.({ spec: model, attribution });
+        // The row's per-request extras — for Cloudflare's gateway, the attribution as
+        // metadata and payload retention off; for every other row, nothing. The host does
+        // not know which.
+        const headers = requestHeadersFor(resolved.provider, { attribution: request.attribution, env: options.env });
+        const started = now();
+        const result = await generateText({
+            model: resolved.model,
+            ...(Object.keys(headers).length ? { headers } : {}),
+            ...(request.system ? { system: request.system } : {}),
+            prompt: request.prompt,
+            ...(request.maxOutputTokens !== undefined ? { maxOutputTokens: request.maxOutputTokens } : {}),
+            ...(request.temperature !== undefined ? { temperature: request.temperature } : {}),
+        });
+        const finished = now();
+        const tokens = stepTokensOf(result.totalUsage);
+        const line = modelUsageLine.parse({
+            attribution,
+            model,
+            provider: resolved.provider,
+            modelId: resolved.modelId,
+            reported: tokens.reported,
+            inputTokens: tokens.inputTokens,
+            outputTokens: tokens.outputTokens,
+            cachedInputTokens: tokens.cachedInputTokens,
+            cacheWriteTokens: tokens.cacheWriteTokens,
+            listUsd: tokens.reported ? listCostOfSteps(model, [tokens]) : null,
+            at: finished.toISOString(),
+            elapsedMs: Math.max(0, finished.getTime() - started.getTime()),
+        });
+        await options.record?.(line);
+        return { text: result.text, finishReason: result.finishReason, label: resolved.label, line };
+    };
+    return { status, run };
+}
+//# sourceMappingURL=model.js.map

package/dist/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,YAAY,EAA2B,MAAM,IAAI,CAAC;AAC3D,OAAO,EACL,WAAW,EACX,eAAe,EACf,WAAW,EACX,WAAW,EACX,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iBAAiB,GAKlB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAA8C,MAAM,yBAAyB,CAAC;AAGvH,OAAO,EAAE,aAAa,EAAE,CAAC;AA0FzB,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,6BAA6B,CAAC;AAWpF,MAAM,UAAU,YAAY,CAAC,KAAqC;IAChE,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,CAAC;IACjC,MAAM,MAAM,GAAG,KAAK,EAAE,YAAY,CAAC;IACnC,OAAO;QACL,QAAQ,EAAE,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ;QACjE,WAAW,EAAE,KAAK,IAAI,CAAC;QACvB,YAAY,EAAE,MAAM,IAAI,CAAC;QACzB,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,eAAe,IAAI,CAAC;QACjE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,IAAI,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,oFAAoF;IACpF,mFAAmF;IACnF,gFAAgF;IAChF,MAAM,SAAS,GAAoB;QACjC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAC5B,GAAG,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,SAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE;YAC9G,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAe,EAAE;QAC3C,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACrD,qFAAqF;QACrF,qFAAqF;QACrF,kFAAkF;QAClF,mFAAmF;QACnF,+DAA+D;QAC/D,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxF,OAAO;YACL,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC;YAC9B,KAAK,EAAE,GAAG,QAAQ,IAAI,OAAO,EAAE;YAC/B,QAAQ;YACR,OAAO;YACP,UAAU,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAC/C,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;YACnC,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxF,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,OAAqB,EAAqB,EAAE;QAC7D,2EAA2E;QAC3E,iFAAiF;QACjF,kFAAkF;QAClF,8EAA8E;QAC9E,2EAA2E;QAC3E,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAEhE,iFAAiF;QACjF,kFAAkF;QAClF,YAAY;QACZ,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE;YACtD,SAAS;YACT,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,gBAAgB;SAClC,CAAC,CAAC;QACH,mFAAmF;QACnF,kFAAkF;QAClF,0EAA0E;QAC1E,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAEpD,8EAA8E;QAC9E,kFAAkF;QAClF,kBAAkB;QAClB,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAChC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC;QAEvB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC;YAChC,WAAW;YACX,KAAK;YACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAClE,EAAE,EAAE,QAAQ,CAAC,WAAW,EAAE;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAE7B,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC/F,CAAC,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACzB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/vertical-host",
-  "version": "0.92.1",
+  "version": "0.95.0",
   "description": "The platform's /internal/* surface + error envelope, authored once — mount it in a vertical worker instead of re-copying the control-plane contract",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -16,15 +16,22 @@
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
+    },
+    "./model": {
+      "types": "./dist/model.d.ts",
+      "default": "./dist/model.js"
     }
   },
   "files": [
     "dist"
   ],
   "dependencies": {
+    "ai": "7.0.62",
     "hono": "^4.6.0",
-    "@substrat-run/contracts": "^0.92.1",
-    "@substrat-run/kernel": "^0.92.1"
+    "workers-ai-provider": "^4.0.0",
+    "@substrat-run/contracts": "^0.95.0",
+    "@substrat-run/model-providers": "^0.3.1",
+    "@substrat-run/kernel": "^0.95.0"
   },
   "devDependencies": {
     "typescript": "^7.0.0",
@@ -35,7 +42,7 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
     "test": "vitest run"
   }
 }