@sylphx/contract 0.5.1 → 0.7.0

package/dist/schemas/admin-secrets.js

@@ -2,8 +2,8 @@
  * Admin Secrets — operator-driven secret rotation primitives.
  *
  * G-5: closes the production-ready audit gap on secret rotation. The
- * Platform holds a small set of HMAC / encryption secrets in K8s Secret
- * env-var slots (BREAK_GLASS_SECRET, PLATFORM_ENCRYPTION_KEY, …). Pre-G-5
+ * Platform holds a small set of HMAC / encryption secrets in operator-managed
+ * secret slots (BREAK_GLASS_SECRET, PLATFORM_ENCRYPTION_KEY, …). Pre-G-5
  * rotation was a manual two-person rule documented in
  * `docs/runbooks/break-glass.md` §4 — not auditable, not metered, no
  * automated reminder when a secret aged past 90 days.
@@ -12,13 +12,13 @@
  *   - List rotatable secrets + their last-rotation age (`--dry-run`)
  *   - Initiate a rotation event for compliance (audit row + metric tick)
  *
- * The actual K8s secret value rotation is delegated to the runbook's
- * existing two-person procedure; this endpoint is the AUDIT trail and
+ * The actual secret value rotation is delegated to the runbook's existing
+ * two-person procedure; this endpoint is the AUDIT trail and
  * the OBSERVABILITY anchor for `sylphx_secret_age_days`. We deliberately
  * do NOT mint the new value server-side — minting would require holding
- * the cluster KMS key in process memory, which is the very threat the
- * rotation is hedging against. Operators paste the new value into the
- * cluster Secret store; the endpoint records that it happened.
+ * the secret-store root key in process memory, which is the very threat the
+ * rotation is hedging against. Operators update the configured secret
+ * target; the endpoint records that it happened.
  *
  * Scope (`platform:secrets:rotate`) is service-token only; super-admin
  * sessions are explicitly NOT accepted — a rotation MUST be a programmatic
@@ -59,7 +59,7 @@ export const AdminRotateSecretInput = Schema.Struct({
  * Per-secret rotation status — one row per known secret type.
  *
  * `lastRotatedAt` is null for a secret that has never been rotated since
- * ledger ingest (greenfield clusters, freshly seeded `secret_rotation_events`).
+ * ledger ingest (fresh installations, freshly seeded `secret_rotation_events`).
  * `ageDays` is `now() - lastRotatedAt` in days, or null when never-rotated;
  * the alert rule fires when `ageDays > 90`.
  */
@@ -71,8 +71,8 @@ export const AdminSecretStatus = Schema.Struct({
     cadenceDays: Schema.Number,
     /** True iff `ageDays > cadenceDays` (or never-rotated). */
     overdue: Schema.Boolean,
-    /** Name of the K8s Secret + key the operator must update. */
-    clusterSecretRef: Schema.String,
+    /** Operator-facing target the runbook updates. */
+    rotationTarget: Schema.String,
 });
 export const AdminRotateSecretResult = Schema.Struct({
     /** True iff a real rotation event was recorded; false on dry-run. */

package/dist/schemas/admin-services.d.ts

@@ -5,12 +5,8 @@
  *
  * The drift watchdog (`infra/addons/dogfood-smoke/manifests/image-drift-cronjob.yaml`)
  * polls this endpoint every 10 minutes. For each Platform service it
- * compares:
- *
- *   - DB SSOT — `project_services.latest_image_ref` (the digest the
- *               build pipeline says is current).
- *   - K8s live — `deployment.spec.template.spec.containers[0].image`
- *                (the digest actually rolling on cluster).
+ * compares the control-plane artifact reference with the live runtime
+ * artifact reference.
  *
  * When the two diverge for >30 minutes the probe pages on-call. Inside the
  * 30-minute grace window drift is tolerated (legit during a rolling deploy
@@ -25,27 +21,27 @@ import { Schema } from 'effect';
  *
  *   - `name`         — service name within the platform project
  *                       (e.g. `api`, `controller`, `runtime`).
- *   - `dbRef`        — `latest_image_ref` from `project_services`.
+ *   - `controlRef`   — artifact reference selected by the control plane.
  *                       `null` if the service has never been built.
- *   - `k8sRef`       — image string from the live `Deployment`.
- *                       `null` if the deployment is missing in K8s.
+ *   - `runtimeRef`   — artifact reference observed in the live runtime.
+ *                       `null` if the runtime target is missing.
  *   - `driftMinutes` — minutes since the divergence first appeared.
- *                       `0` when DB and K8s agree (or both null).
+ *                       `0` when control and runtime agree (or both null).
  *                       `null` when one side is missing.
- *   - `inSync`       — `true` iff `dbRef === k8sRef` AND both non-null.
+ *   - `inSync`       — `true` iff `controlRef === runtimeRef` AND both non-null.
  *                       Probes alert when this is `false` past the grace
  *                       window.
- *   - `dbUpdatedAt`  — ISO timestamp the DB row was last touched
- *                       (`project_services.updated_at`). Drives the
- *                       `driftMinutes` calculation when DB is the lagger.
+ *   - `controlUpdatedAt` — ISO timestamp the control-plane artifact pointer
+ *                          was last touched. Drives `driftMinutes` when the
+ *                          control plane is the lagger.
  */
 export declare const AdminServiceImageStatusRow: Schema.Struct<{
     name: typeof Schema.String;
-    dbRef: Schema.NullOr<typeof Schema.String>;
-    k8sRef: Schema.NullOr<typeof Schema.String>;
+    controlRef: Schema.NullOr<typeof Schema.String>;
+    runtimeRef: Schema.NullOr<typeof Schema.String>;
     driftMinutes: Schema.NullOr<typeof Schema.Number>;
     inSync: typeof Schema.Boolean;
-    dbUpdatedAt: Schema.NullOr<typeof Schema.String>;
+    controlUpdatedAt: Schema.NullOr<typeof Schema.String>;
 }>;
 export type AdminServiceImageStatusRow = typeof AdminServiceImageStatusRow.Type;
 /**
@@ -53,17 +49,17 @@ export type AdminServiceImageStatusRow = typeof AdminServiceImageStatusRow.Type;
  *
  * Always returns one row per Platform service (controller, api, runtime,
  * web, exec-server, storage-gateway, storage-worker). Missing rows on
- * either side surface as `dbRef=null` or `k8sRef=null` so the probe can
- * still page on configuration drift, not just digest drift.
+ * either side surface as `controlRef=null` or `runtimeRef=null` so the probe
+ * can still page on configuration drift, not just digest drift.
  */
 export declare const AdminServiceImageStatusResult: Schema.Struct<{
     services: Schema.Array$<Schema.Struct<{
         name: typeof Schema.String;
-        dbRef: Schema.NullOr<typeof Schema.String>;
-        k8sRef: Schema.NullOr<typeof Schema.String>;
+        controlRef: Schema.NullOr<typeof Schema.String>;
+        runtimeRef: Schema.NullOr<typeof Schema.String>;
         driftMinutes: Schema.NullOr<typeof Schema.Number>;
         inSync: typeof Schema.Boolean;
-        dbUpdatedAt: Schema.NullOr<typeof Schema.String>;
+        controlUpdatedAt: Schema.NullOr<typeof Schema.String>;
     }>>;
     checkedAt: typeof Schema.String;
 }>;

package/dist/schemas/admin-services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin-services.d.ts","sourceRoot":"","sources":["../../src/schemas/admin-services.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,0BAA0B;;;;;;;EAOrC,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,0BAA0B,CAAC,IAAI,CAAA;AAE/E;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;EAGxC,CAAA;AACF,MAAM,MAAM,6BAA6B,GAAG,OAAO,6BAA6B,CAAC,IAAI,CAAA"}
+{"version":3,"file":"admin-services.d.ts","sourceRoot":"","sources":["../../src/schemas/admin-services.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,0BAA0B;;;;;;;EAOrC,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,0BAA0B,CAAC,IAAI,CAAA;AAE/E;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;EAGxC,CAAA;AACF,MAAM,MAAM,6BAA6B,GAAG,OAAO,6BAA6B,CAAC,IAAI,CAAA"}

package/dist/schemas/admin-services.js

@@ -5,12 +5,8 @@
  *
  * The drift watchdog (`infra/addons/dogfood-smoke/manifests/image-drift-cronjob.yaml`)
  * polls this endpoint every 10 minutes. For each Platform service it
- * compares:
- *
- *   - DB SSOT — `project_services.latest_image_ref` (the digest the
- *               build pipeline says is current).
- *   - K8s live — `deployment.spec.template.spec.containers[0].image`
- *                (the digest actually rolling on cluster).
+ * compares the control-plane artifact reference with the live runtime
+ * artifact reference.
  *
  * When the two diverge for >30 minutes the probe pages on-call. Inside the
  * 30-minute grace window drift is tolerated (legit during a rolling deploy
@@ -25,35 +21,35 @@ import { Schema } from 'effect';
  *
  *   - `name`         — service name within the platform project
  *                       (e.g. `api`, `controller`, `runtime`).
- *   - `dbRef`        — `latest_image_ref` from `project_services`.
+ *   - `controlRef`   — artifact reference selected by the control plane.
  *                       `null` if the service has never been built.
- *   - `k8sRef`       — image string from the live `Deployment`.
- *                       `null` if the deployment is missing in K8s.
+ *   - `runtimeRef`   — artifact reference observed in the live runtime.
+ *                       `null` if the runtime target is missing.
  *   - `driftMinutes` — minutes since the divergence first appeared.
- *                       `0` when DB and K8s agree (or both null).
+ *                       `0` when control and runtime agree (or both null).
  *                       `null` when one side is missing.
- *   - `inSync`       — `true` iff `dbRef === k8sRef` AND both non-null.
+ *   - `inSync`       — `true` iff `controlRef === runtimeRef` AND both non-null.
  *                       Probes alert when this is `false` past the grace
  *                       window.
- *   - `dbUpdatedAt`  — ISO timestamp the DB row was last touched
- *                       (`project_services.updated_at`). Drives the
- *                       `driftMinutes` calculation when DB is the lagger.
+ *   - `controlUpdatedAt` — ISO timestamp the control-plane artifact pointer
+ *                          was last touched. Drives `driftMinutes` when the
+ *                          control plane is the lagger.
  */
 export const AdminServiceImageStatusRow = Schema.Struct({
     name: Schema.String,
-    dbRef: Schema.NullOr(Schema.String),
-    k8sRef: Schema.NullOr(Schema.String),
+    controlRef: Schema.NullOr(Schema.String),
+    runtimeRef: Schema.NullOr(Schema.String),
     driftMinutes: Schema.NullOr(Schema.Number),
     inSync: Schema.Boolean,
-    dbUpdatedAt: Schema.NullOr(Schema.String),
+    controlUpdatedAt: Schema.NullOr(Schema.String),
 });
 /**
  * Response of `GET /admin/services/image-status`.
  *
  * Always returns one row per Platform service (controller, api, runtime,
  * web, exec-server, storage-gateway, storage-worker). Missing rows on
- * either side surface as `dbRef=null` or `k8sRef=null` so the probe can
- * still page on configuration drift, not just digest drift.
+ * either side surface as `controlRef=null` or `runtimeRef=null` so the probe
+ * can still page on configuration drift, not just digest drift.
  */
 export const AdminServiceImageStatusResult = Schema.Struct({
     services: Schema.Array(AdminServiceImageStatusRow),

package/dist/schemas/ai-admin.d.ts

@@ -2,8 +2,8 @@
  * AI Admin — schemas for Console-plane AI usage analytics + model config.
  * Mirrors `routes/ai.ts`.
  *
- * Plane: `management`. Response shapes for analytics aggregations use
- * `Schema.Unknown` — they're computed breakdowns that evolve over time.
+ * Plane: `management`. Response shapes are explicit because Console, SDK,
+ * OpenAPI, and route handlers all depend on the same analytics contract.
  */
 import { Schema } from 'effect';
 export declare const AiAdminProjectIdParams: Schema.Struct<{
@@ -24,16 +24,145 @@ export declare const AiProjectUsageQuery: Schema.Struct<{
     period: Schema.optional<Schema.Literal<["day", "week", "month"]>>;
 }>;
 export type AiProjectUsageQuery = typeof AiProjectUsageQuery.Type;
-export declare const AiOverviewResult: typeof Schema.Unknown;
+export declare const AiOverviewResult: Schema.Struct<{
+    period: Schema.Literal<["day", "week", "month"]>;
+    totals: Schema.Struct<{
+        requests: typeof Schema.Number;
+        tokens: typeof Schema.Number;
+        cost: Schema.Struct<{
+            microdollars: typeof Schema.Number;
+            formatted: typeof Schema.String;
+        }>;
+        avgLatencyMs: typeof Schema.Number;
+        successRate: typeof Schema.Number;
+    }>;
+    byProject: Schema.Array$<Schema.Struct<{
+        projectId: typeof Schema.String;
+        projectName: typeof Schema.String;
+        requests: typeof Schema.Number;
+        inputTokens: typeof Schema.Number;
+        outputTokens: typeof Schema.Number;
+        cost: Schema.Struct<{
+            microdollars: typeof Schema.Number;
+            formatted: typeof Schema.String;
+        }>;
+        successRate: typeof Schema.Number;
+    }>>;
+    byModel: Schema.Array$<Schema.Struct<{
+        model: typeof Schema.String;
+        requests: typeof Schema.Number;
+        tokens: typeof Schema.Number;
+        cost: Schema.Struct<{
+            microdollars: typeof Schema.Number;
+            formatted: typeof Schema.String;
+        }>;
+    }>>;
+    byProvider: Schema.Array$<Schema.Struct<{
+        provider: typeof Schema.String;
+        requests: typeof Schema.Number;
+        tokens: typeof Schema.Number;
+        cost: Schema.Struct<{
+            microdollars: typeof Schema.Number;
+            formatted: typeof Schema.String;
+        }>;
+    }>>;
+}>;
 export type AiOverviewResult = typeof AiOverviewResult.Type;
-export declare const AiProjectUsageResult: typeof Schema.Unknown;
+export declare const AiProjectUsageResult: Schema.Struct<{
+    app: Schema.Struct<{
+        id: typeof Schema.String;
+        name: typeof Schema.String;
+        slug: typeof Schema.String;
+    }>;
+    period: Schema.Literal<["day", "week", "month"]>;
+    stats: Schema.Struct<{
+        requests: typeof Schema.Number;
+        inputTokens: typeof Schema.Number;
+        outputTokens: typeof Schema.Number;
+        cost: Schema.Struct<{
+            microdollars: typeof Schema.Number;
+            formatted: typeof Schema.String;
+        }>;
+        latency: Schema.Struct<{
+            avgMs: typeof Schema.Number;
+            p95Ms: typeof Schema.Number;
+        }>;
+        successRate: typeof Schema.Number;
+    }>;
+    byModel: Schema.Array$<Schema.Struct<{
+        model: typeof Schema.String;
+        requests: typeof Schema.Number;
+        tokens: typeof Schema.Number;
+        cost: Schema.Struct<{
+            microdollars: typeof Schema.Number;
+            formatted: typeof Schema.String;
+        }>;
+    }>>;
+    byType: Schema.Array$<Schema.Struct<{
+        type: typeof Schema.String;
+        requests: typeof Schema.Number;
+        tokens: typeof Schema.Number;
+    }>>;
+    recentErrors: Schema.Array$<Schema.Struct<{
+        id: typeof Schema.String;
+        model: typeof Schema.String;
+        type: typeof Schema.String;
+        error: Schema.NullOr<typeof Schema.String>;
+        code: Schema.NullOr<typeof Schema.String>;
+        timestamp: typeof Schema.String;
+    }>>;
+}>;
 export type AiProjectUsageResult = typeof AiProjectUsageResult.Type;
-export declare const AiCostTrendsResult: typeof Schema.Unknown;
+export declare const AiCostTrendsResult: Schema.Struct<{
+    period: Schema.Literal<["day", "week", "month"]>;
+    interval: Schema.Literal<["hour", "day"]>;
+    data: Schema.Array$<Schema.Struct<{
+        timestamp: typeof Schema.String;
+        requests: typeof Schema.Number;
+        tokens: typeof Schema.Number;
+        cost: Schema.Struct<{
+            microdollars: typeof Schema.Number;
+            formatted: typeof Schema.String;
+        }>;
+        avgLatencyMs: typeof Schema.Number;
+    }>>;
+}>;
 export type AiCostTrendsResult = typeof AiCostTrendsResult.Type;
-export declare const AiProjectConfigResult: typeof Schema.Unknown;
+export declare const AiProjectConfigResult: Schema.Struct<{
+    app: Schema.Struct<{
+        id: typeof Schema.String;
+        name: typeof Schema.String;
+        slug: typeof Schema.String;
+    }>;
+    config: Schema.Struct<{
+        defaultMaxTokens: typeof Schema.Number;
+        defaultTemperature: typeof Schema.Number;
+        enableCaching: typeof Schema.Boolean;
+        allowedModels: Schema.NullOr<Schema.Array$<typeof Schema.String>>;
+        blockedModels: Schema.NullOr<Schema.Array$<typeof Schema.String>>;
+    }>;
+    rateLimits: Schema.Array$<Schema.Struct<{
+        id: typeof Schema.String;
+        modelPattern: typeof Schema.String;
+        requestsPerMinute: Schema.NullOr<typeof Schema.Number>;
+        requestsPerDay: Schema.NullOr<typeof Schema.Number>;
+        tokensPerMinute: Schema.NullOr<typeof Schema.Number>;
+        tokensPerDay: Schema.NullOr<typeof Schema.Number>;
+        costPerDayMicrodollars: Schema.NullOr<typeof Schema.Number>;
+        isActive: typeof Schema.Boolean;
+    }>>;
+}>;
 export type AiProjectConfigResult = typeof AiProjectConfigResult.Type;
-export declare const AiUpdateProjectConfigInput: Schema.Record$<typeof Schema.String, typeof Schema.Unknown>;
+export declare const AiUpdateProjectConfigInput: Schema.Struct<{
+    defaultMaxTokens: Schema.optional<typeof Schema.Number>;
+    defaultTemperature: Schema.optional<typeof Schema.Number>;
+    enableCaching: Schema.optional<typeof Schema.Boolean>;
+    allowedModels: Schema.optional<Schema.NullOr<Schema.Array$<typeof Schema.String>>>;
+    blockedModels: Schema.optional<Schema.NullOr<Schema.Array$<typeof Schema.String>>>;
+}>;
 export type AiUpdateProjectConfigInput = typeof AiUpdateProjectConfigInput.Type;
-export declare const AiUpdateProjectConfigResult: typeof Schema.Unknown;
+export declare const AiUpdateProjectConfigResult: Schema.Struct<{
+    success: typeof Schema.Boolean;
+}>;
 export type AiUpdateProjectConfigResult = typeof AiUpdateProjectConfigResult.Type;
 //# sourceMappingURL=ai-admin.d.ts.map

package/dist/schemas/ai-admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai-admin.d.ts","sourceRoot":"","sources":["../../src/schemas/ai-admin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,eAAO,MAAM,sBAAsB;;EAA8C,CAAA;AACjF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAA;AAEvE,eAAO,MAAM,eAAe;;EAE1B,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,eAAO,MAAM,iBAAiB;;;;EAI5B,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAA;AAE7D,eAAO,MAAM,mBAAmB;;EAE9B,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;AAEjE,eAAO,MAAM,gBAAgB,uBAAiB,CAAA;AAC9C,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAA;AAC3D,eAAO,MAAM,oBAAoB,uBAAiB,CAAA;AAClD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAA;AACnE,eAAO,MAAM,kBAAkB,uBAAiB,CAAA;AAChD,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAA;AAC/D,eAAO,MAAM,qBAAqB,uBAAiB,CAAA;AACnD,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAA;AAErE,eAAO,MAAM,0BAA0B,6DAGrC,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,0BAA0B,CAAC,IAAI,CAAA;AAC/E,eAAO,MAAM,2BAA2B,uBAAiB,CAAA;AACzD,MAAM,MAAM,2BAA2B,GAAG,OAAO,2BAA2B,CAAC,IAAI,CAAA"}
+{"version":3,"file":"ai-admin.d.ts","sourceRoot":"","sources":["../../src/schemas/ai-admin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,eAAO,MAAM,sBAAsB;;EAA8C,CAAA;AACjF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAA;AAoBvE,eAAO,MAAM,eAAe;;EAE1B,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,eAAO,MAAM,iBAAiB;;;;EAI5B,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAA;AAE7D,eAAO,MAAM,mBAAmB;;EAE9B,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;AAEjE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoC3B,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAA;AAE3D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuC/B,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAA;AAEnE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;EAY7B,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAA;AAE/D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;EAehC,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAA;AAErE,eAAO,MAAM,0BAA0B;;;;;;EAMrC,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,0BAA0B,CAAC,IAAI,CAAA;AAC/E,eAAO,MAAM,2BAA2B;;EAA6C,CAAA;AACrF,MAAM,MAAM,2BAA2B,GAAG,OAAO,2BAA2B,CAAC,IAAI,CAAA"}

package/dist/schemas/ai-admin.js

@@ -2,28 +2,134 @@
  * AI Admin — schemas for Console-plane AI usage analytics + model config.
  * Mirrors `routes/ai.ts`.
  *
- * Plane: `management`. Response shapes for analytics aggregations use
- * `Schema.Unknown` — they're computed breakdowns that evolve over time.
+ * Plane: `management`. Response shapes are explicit because Console, SDK,
+ * OpenAPI, and route handlers all depend on the same analytics contract.
  */
 import { Schema } from 'effect';
 export const AiAdminProjectIdParams = Schema.Struct({ projectId: Schema.String });
+const AiPeriod = Schema.Literal('day', 'week', 'month');
+const AiMoney = Schema.Struct({
+    microdollars: Schema.Number,
+    formatted: Schema.String,
+});
+const AiProjectRef = Schema.Struct({
+    id: Schema.String,
+    name: Schema.String,
+    slug: Schema.String,
+});
+const AiModelConfig = Schema.Struct({
+    defaultMaxTokens: Schema.Number,
+    defaultTemperature: Schema.Number,
+    enableCaching: Schema.Boolean,
+    allowedModels: Schema.NullOr(Schema.Array(Schema.String)),
+    blockedModels: Schema.NullOr(Schema.Array(Schema.String)),
+});
 export const AiOverviewQuery = Schema.Struct({
-    period: Schema.optional(Schema.Literal('day', 'week', 'month')),
+    period: Schema.optional(AiPeriod),
 });
 export const AiCostTrendsQuery = Schema.Struct({
-    period: Schema.optional(Schema.Literal('day', 'week', 'month')),
+    period: Schema.optional(AiPeriod),
     interval: Schema.optional(Schema.Literal('hour', 'day')),
     projectId: Schema.optional(Schema.String),
 });
 export const AiProjectUsageQuery = Schema.Struct({
-    period: Schema.optional(Schema.Literal('day', 'week', 'month')),
+    period: Schema.optional(AiPeriod),
+});
+export const AiOverviewResult = Schema.Struct({
+    period: AiPeriod,
+    totals: Schema.Struct({
+        requests: Schema.Number,
+        tokens: Schema.Number,
+        cost: AiMoney,
+        avgLatencyMs: Schema.Number,
+        successRate: Schema.Number,
+    }),
+    byProject: Schema.Array(Schema.Struct({
+        projectId: Schema.String,
+        projectName: Schema.String,
+        requests: Schema.Number,
+        inputTokens: Schema.Number,
+        outputTokens: Schema.Number,
+        cost: AiMoney,
+        successRate: Schema.Number,
+    })),
+    byModel: Schema.Array(Schema.Struct({
+        model: Schema.String,
+        requests: Schema.Number,
+        tokens: Schema.Number,
+        cost: AiMoney,
+    })),
+    byProvider: Schema.Array(Schema.Struct({
+        provider: Schema.String,
+        requests: Schema.Number,
+        tokens: Schema.Number,
+        cost: AiMoney,
+    })),
+});
+export const AiProjectUsageResult = Schema.Struct({
+    app: AiProjectRef,
+    period: AiPeriod,
+    stats: Schema.Struct({
+        requests: Schema.Number,
+        inputTokens: Schema.Number,
+        outputTokens: Schema.Number,
+        cost: AiMoney,
+        latency: Schema.Struct({
+            avgMs: Schema.Number,
+            p95Ms: Schema.Number,
+        }),
+        successRate: Schema.Number,
+    }),
+    byModel: Schema.Array(Schema.Struct({
+        model: Schema.String,
+        requests: Schema.Number,
+        tokens: Schema.Number,
+        cost: AiMoney,
+    })),
+    byType: Schema.Array(Schema.Struct({
+        type: Schema.String,
+        requests: Schema.Number,
+        tokens: Schema.Number,
+    })),
+    recentErrors: Schema.Array(Schema.Struct({
+        id: Schema.String,
+        model: Schema.String,
+        type: Schema.String,
+        error: Schema.NullOr(Schema.String),
+        code: Schema.NullOr(Schema.String),
+        timestamp: Schema.String,
+    })),
+});
+export const AiCostTrendsResult = Schema.Struct({
+    period: AiPeriod,
+    interval: Schema.Literal('hour', 'day'),
+    data: Schema.Array(Schema.Struct({
+        timestamp: Schema.String,
+        requests: Schema.Number,
+        tokens: Schema.Number,
+        cost: AiMoney,
+        avgLatencyMs: Schema.Number,
+    })),
+});
+export const AiProjectConfigResult = Schema.Struct({
+    app: AiProjectRef,
+    config: AiModelConfig,
+    rateLimits: Schema.Array(Schema.Struct({
+        id: Schema.String,
+        modelPattern: Schema.String,
+        requestsPerMinute: Schema.NullOr(Schema.Number),
+        requestsPerDay: Schema.NullOr(Schema.Number),
+        tokensPerMinute: Schema.NullOr(Schema.Number),
+        tokensPerDay: Schema.NullOr(Schema.Number),
+        costPerDayMicrodollars: Schema.NullOr(Schema.Number),
+        isActive: Schema.Boolean,
+    })),
 });
-export const AiOverviewResult = Schema.Unknown;
-export const AiProjectUsageResult = Schema.Unknown;
-export const AiCostTrendsResult = Schema.Unknown;
-export const AiProjectConfigResult = Schema.Unknown;
-export const AiUpdateProjectConfigInput = Schema.Record({
-    key: Schema.String,
-    value: Schema.Unknown,
+export const AiUpdateProjectConfigInput = Schema.Struct({
+    defaultMaxTokens: Schema.optional(Schema.Number),
+    defaultTemperature: Schema.optional(Schema.Number),
+    enableCaching: Schema.optional(Schema.Boolean),
+    allowedModels: Schema.optional(Schema.NullOr(Schema.Array(Schema.String))),
+    blockedModels: Schema.optional(Schema.NullOr(Schema.Array(Schema.String))),
 });
-export const AiUpdateProjectConfigResult = Schema.Unknown;
+export const AiUpdateProjectConfigResult = Schema.Struct({ success: Schema.Boolean });