@voltro/ai 0.85.0 → 0.86.0

package/THIRD-PARTY-NOTICES.md

@@ -1,11 +1,11 @@
 # Third-Party Notices — @voltro/ai
 
-This package depends on the open-source software listed below. Each is the
+This package uses the open-source software listed below. Each is the
 property of its respective copyright holders and is used under the terms of
 its license. This file is provided for attribution; it grants no rights in
 @voltro/ai itself, which is proprietary (see LICENSE).
 
-Generated from the resolved runtime dependency closure (32 packages).
+Generated from the resolved runtime dependency closure (31 packages).
 
 ---
 
@@ -859,34 +859,6 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## layerr@3.0.0
-
-License: MIT
-
-```
-MIT License
-
-Copyright (c) 2020 Perry Mitchell
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-```
-
 ## ms@2.1.3
 
 License: MIT
@@ -1236,14 +1208,14 @@ Apache License
    limitations under the License.
 ```
 
-## ulidx@2.4.1
+## ulid@3.0.2
 
 License: MIT
 
 ```
-MIT License
+The MIT License (MIT)
 
-Copyright (c) 2021 Perry Mitchell
+Copyright (c) 2017 Alizain Feerasta
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/dist/agent.js

@@ -1,2 +1,64 @@
-import { a as e, i as t, n, o as r, r as i, t as a } from "./agentDescriptor-DhoiXVqO.js";
-export { a as AgentThreadAccessDenied, n as agentInputSchema, i as agentMessageSchema, t as agentRouteDescriptors, e as defineAgent, r as isAgentDescriptor };
+import { AGENT_MESSAGES_TABLE as e } from "./agentConstants.js";
+import { Schema as t } from "effect";
+import { defineAction as n, defineQuery as r } from "@voltro/protocol";
+//#region src/agentDescriptor.ts
+var i = t.Struct({ prompt: t.String }), a = "@voltro/ai/AgentDescriptor", o = class extends t.TaggedError()("AgentThreadAccessDenied", { threadId: t.String }) {
+	get message() {
+		return `agent thread '${this.threadId}' belongs to another subject`;
+	}
+}, s = (e) => {
+	if (e.guards !== void 0 && e.guards.length === 0) throw Error(`defineAgent("${e.name}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the agent were protected. Omit the field
+  and decide with \`openAccess\`, or list the scopes that may talk to it.`);
+	if (e.openAccess !== void 0 && e.guards !== void 0 && e.guards.length > 0) throw Error(`defineAgent("${e.name}"): \`openAccess\` and \`guards\` are two different access\n  decisions, so declaring both says the agent is protected AND open. Keep the
+  guards if a caller must hold a scope; drop them if anyone may talk to it.`);
+	return {
+		_brand: a,
+		name: e.name,
+		...e.input === void 0 ? {} : { input: e.input },
+		...e.guards === void 0 ? {} : { guards: e.guards },
+		...e.openAccess === void 0 ? {} : { openAccess: e.openAccess }
+	};
+}, c = (e) => typeof e == "object" && !!e && e._brand === a, l = (e) => e.input ?? i, u = t.StructWithRest(t.Struct({ type: t.String }), [t.Record(t.String, t.Unknown)]), d = t.Struct({
+	id: t.String,
+	threadId: t.String,
+	role: t.String,
+	content: t.String,
+	streaming: t.Boolean,
+	order: t.Number,
+	stepOrder: t.Number,
+	parts: t.Array(u)
+}), f = (e) => {
+	let n = l(e), r = t.Struct({
+		threadId: t.String,
+		order: t.Number
+	});
+	try {
+		return t.Struct({
+			...n.fields,
+			...r.fields
+		});
+	} catch {
+		return r;
+	}
+}, p = (i) => {
+	let a = {};
+	return i.openAccess === void 0 ? i.guards !== void 0 && (a.guards = i.guards) : a.openAccess = i.openAccess, {
+		send: n({
+			name: `${i.name}.send`,
+			input: f(i),
+			output: t.Struct({ text: t.String }),
+			error: o,
+			...a
+		}),
+		messages: r({
+			name: `${i.name}.messages`,
+			input: t.Struct({ threadId: t.String }),
+			output: t.Array(d),
+			source: e,
+			error: o,
+			...a
+		})
+	};
+};
+//#endregion
+export { o as AgentThreadAccessDenied, l as agentInputSchema, d as agentMessageSchema, p as agentRouteDescriptors, s as defineAgent, c as isAgentDescriptor };

package/dist/agentConstants.js

@@ -0,0 +1,4 @@
+//#region src/agentConstants.ts
+var e = "_voltro_agent_threads", t = "_voltro_agent_messages";
+//#endregion
+export { t as AGENT_MESSAGES_TABLE, e as AGENT_THREADS_TABLE };

package/dist/agentExecutor.js

@@ -0,0 +1,51 @@
+import { AgentThreadAccessDenied as e } from "./agent.js";
+import { appendMessage as t, ensureThreadOwned as n, getMessages as r, getThread as i } from "./threads.js";
+import { historyToModelMessages as a, runAssistant as o } from "./runAndPersist.js";
+import { Effect as s } from "effect";
+//#region src/agentExecutor.ts
+var c = "@voltro/ai/AgentExecutor", l = (e, t) => ({
+	_brand: c,
+	descriptor: e,
+	config: t
+}), u = (e) => typeof e == "object" && !!e && e._brand === c, d = (e, t) => {
+	let n = e.config.system;
+	if (n !== void 0) return typeof n == "function" ? n(t) : n;
+}, f = (e, t) => {
+	let n = e.config.model;
+	return typeof n == "function" ? n(t) : n;
+}, p = (e, i, c) => s.gen(function* () {
+	yield* n(i, {
+		threadId: c.threadId,
+		subjectId: c.subjectId ?? null,
+		tenantId: c.tenantId ?? null
+	});
+	let s = c.promptOf ? c.promptOf(c.input) : String(c.input?.prompt ?? ""), l = d(e, c.input), u = f(e, c.input);
+	yield* t(i, {
+		threadId: c.threadId,
+		role: "user",
+		content: s,
+		tenantId: c.tenantId ?? null,
+		order: c.order
+	});
+	let p = yield* r(i, c.threadId), m = a(p);
+	return yield* o(i, {
+		threadId: c.threadId,
+		tenantId: c.tenantId ?? null,
+		prompt: s,
+		...m.length > 0 ? { messages: m } : {},
+		...l === void 0 ? {} : { system: l },
+		...e.config.tools === void 0 ? {} : { tools: e.config.tools },
+		...u === void 0 ? {} : { provider: u },
+		...e.config.maxSteps === void 0 ? {} : { maxSteps: e.config.maxSteps },
+		...e.config.providerOptions === void 0 ? {} : { providerOptions: e.config.providerOptions },
+		...c.toolContext === void 0 ? {} : { toolContext: c.toolContext },
+		order: c.order + 1,
+		...c.throttleMs === void 0 ? {} : { throttleMs: c.throttleMs },
+		agent: e.descriptor.name
+	});
+}), m = (t, n, a = null) => s.gen(function* () {
+	let o = yield* i(t, n);
+	return o !== null && o.subjectId !== null && o.subjectId !== a ? yield* s.fail(new e({ threadId: n })) : yield* r(t, n);
+});
+//#endregion
+export { l as defineAgentExecutor, u as isAgentExecutor, m as loadAgentMessages, f as resolveAgentModel, d as resolveSystem, p as runAgentTurn };

package/dist/api.js

@@ -0,0 +1,199 @@
+import { providerFromEnv as e, resolveModel as t } from "./provider.js";
+import { buildSdkTools as n } from "./tools.js";
+import { aiCallAttributes as r, withAiCallSpan as i } from "./observe.js";
+import { validatedOutputSchema as a } from "./jsonOutputValidation.js";
+import { AiCallEvidenceSchema as o, normalizeAiCallEvidence as s } from "./callEvidence.js";
+import { captureStructuredEvidence as c } from "./structuredEvidence.js";
+import { NoObjectGeneratedError as l, Output as u, generateObject as d, generateText as f, jsonSchema as p, stepCountIs as m } from "ai";
+import { Context as h, Effect as g, Schema as _ } from "effect";
+import { jsonSchemaOf as v } from "@voltro/protocol";
+//#region src/api.ts
+var y = class extends _.TaggedError()("AiError", {
+	reason: _.Literals(["generation", "decode"]),
+	message: _.String,
+	evidence: _.optional(o)
+}) {}, b = (e, t = {}) => {
+	let n = String(e?.message ?? e), r = x(e), i = new y({
+		reason: "generation",
+		message: `${t.prefix === void 0 ? "" : `${t.prefix}: `}${n}${r.length > 0 ? ` (${r.join(" <- ")})` : ""}`,
+		...t.evidence === void 0 ? {} : { evidence: t.evidence }
+	});
+	return Object.defineProperty(i, "cause", {
+		value: e,
+		enumerable: !1,
+		configurable: !0,
+		writable: !0
+	}), i;
+}, x = (e) => {
+	let t = [], n = e;
+	for (let e = 0; e < 8 && typeof n == "object" && n; e++) {
+		let e = n;
+		typeof e.code == "string" && e.code.length > 0 && !t.includes(e.code) && t.push(e.code), n = typeof e.lastError == "object" && e.lastError !== null ? e.lastError : e.cause;
+	}
+	return t;
+}, S = (e, t, n) => {
+	let r = [e, ...t ?? []], i = (e) => n(r[e]).pipe(g.catchTag("AiError", (t) => t.reason === "generation" && e + 1 < r.length ? i(e + 1) : g.fail(t)));
+	return i(0);
+}, C = (a) => g.gen(function* () {
+	let o = a.messages === void 0 ? a.prompt === void 0 ? void 0 : { prompt: a.prompt } : { messages: [...a.messages] };
+	if (o === void 0 || a.prompt !== void 0 && a.messages !== void 0) return yield* g.fail(new y({
+		reason: "generation",
+		message: "generateText: supply exactly one of prompt or messages"
+	}));
+	let s = a.tools === void 0 ? void 0 : yield* g.context(), c = a.tools === void 0 || s === void 0 ? void 0 : n(a.tools, {
+		store: void 0,
+		...a.toolContext,
+		...a.abortSignal === void 0 ? {} : { abortSignal: a.abortSignal },
+		runtime: s
+	});
+	return yield* S(a.provider ?? e(), a.fallbacks, (e) => i(r(e, "generateText"), (e) => e.usage, g.tryPromise({
+		try: async () => {
+			let n = t(e), r = await f({
+				model: n,
+				...o,
+				...a.abortSignal === void 0 ? {} : { abortSignal: a.abortSignal },
+				...c === void 0 ? {} : {
+					tools: c,
+					stopWhen: m(a.maxSteps ?? 8)
+				},
+				...a.system === void 0 ? {} : { system: a.system },
+				...a.maxTokens === void 0 ? {} : { maxOutputTokens: a.maxTokens },
+				...a.temperature === void 0 ? {} : { temperature: a.temperature },
+				...a.providerOptions === void 0 ? {} : { providerOptions: a.providerOptions }
+			}), i = c !== void 0 && r.totalUsage !== void 0 ? r.totalUsage : r.usage;
+			return {
+				text: r.text,
+				sources: r.sources,
+				usage: {
+					inputTokens: i.inputTokens,
+					outputTokens: i.outputTokens,
+					totalTokens: i.totalTokens
+				},
+				providerMetadata: r.providerMetadata
+			};
+		},
+		catch: (e) => b(e)
+	})));
+}), w = (e, t) => g.gen(function* () {
+	let n = v(e);
+	if (n?.type !== "object") {
+		let e = n?.anyOf === void 0 ? `type:${JSON.stringify(n?.type ?? null)}` : "anyOf (e.g. Schema.Struct({}) or a union)";
+		return yield* g.fail(new y({
+			reason: "generation",
+			message: `${t}: the output schema must render as a top-level JSON object (type:"object"), but got ${e}. Use a Schema.Struct({ ... }) as the output schema — wrap arrays/scalars in a field (e.g. Schema.Struct({ items: Schema.Array(...) })).`
+		}));
+	}
+	return n;
+}), T = (e, t) => w(e, t), E = (n) => S(n.provider ?? e(), n.fallbacks, (e) => i(r(e, "generateObject"), (e) => e.usage, g.gen(function* () {
+	let r = yield* g.try({
+		try: () => a(n.jsonSchema),
+		catch: () => new y({
+			reason: "decode",
+			message: "generateObjectJson: invalid or unsupported output JSON Schema; no provider call was made"
+		})
+	}), i = c(e.name, t(e)), o = i.model, u = yield* g.tryPromise({
+		try: () => d({
+			model: o,
+			schema: r,
+			prompt: n.prompt,
+			...n.system === void 0 ? {} : { system: n.system },
+			...n.maxTokens === void 0 ? {} : { maxOutputTokens: n.maxTokens },
+			...n.temperature === void 0 ? {} : { temperature: n.temperature },
+			...n.providerOptions === void 0 ? {} : { providerOptions: n.providerOptions }
+		}),
+		catch: (t) => l.isInstance(t) ? new y({
+			reason: "decode",
+			message: "model output failed JSON Schema validation",
+			evidence: i.evidence(t.usage)
+		}) : b(t, {
+			prefix: "structured provider call failed",
+			evidence: s(e.name, o.modelId, void 0)
+		})
+	});
+	return {
+		object: u.object,
+		evidence: s(e.name, o.modelId, u.usage, u.providerMetadata),
+		usage: {
+			inputTokens: u.usage.inputTokens,
+			outputTokens: u.usage.outputTokens,
+			totalTokens: u.usage.totalTokens
+		},
+		providerMetadata: u.providerMetadata
+	};
+}))), D = (e) => g.gen(function* () {
+	let t = yield* E({
+		jsonSchema: yield* w(e.schema, "generateObject"),
+		prompt: e.prompt,
+		...e.system === void 0 ? {} : { system: e.system },
+		...e.provider === void 0 ? {} : { provider: e.provider },
+		...e.fallbacks === void 0 ? {} : { fallbacks: e.fallbacks },
+		...e.maxTokens === void 0 ? {} : { maxTokens: e.maxTokens },
+		...e.temperature === void 0 ? {} : { temperature: e.temperature },
+		...e.providerOptions === void 0 ? {} : { providerOptions: e.providerOptions }
+	}), n = yield* _.decodeUnknownEffect(e.schema)(t.object).pipe(g.mapError(() => new y({
+		reason: "decode",
+		message: "model output failed schema decode",
+		evidence: t.evidence
+	})));
+	return {
+		...t,
+		object: n
+	};
+}), O = (a) => g.gen(function* () {
+	let o = yield* g.context(), d = yield* w(a.schema, "generateObjectWithTools"), h = {
+		store: void 0,
+		...a.toolContext,
+		...a.abortSignal === void 0 ? {} : { abortSignal: a.abortSignal },
+		runtime: o
+	}, v = n(a.tools, h);
+	return yield* S(a.provider ?? e(), a.fallbacks, (e) => i(r(e, "generateObjectWithTools"), (e) => e.usage, g.gen(function* () {
+		let n = c(e.name, t(e)), r = n.model, i = yield* g.tryPromise({
+			try: () => f({
+				model: r,
+				prompt: a.prompt,
+				tools: v,
+				...a.abortSignal === void 0 ? {} : { abortSignal: a.abortSignal },
+				stopWhen: m(a.maxSteps ?? 8),
+				output: u.object({ schema: p(d) }),
+				...a.system === void 0 ? {} : { system: a.system },
+				...a.maxTokens === void 0 ? {} : { maxOutputTokens: a.maxTokens },
+				...a.temperature === void 0 ? {} : { temperature: a.temperature },
+				...a.providerOptions === void 0 ? {} : { providerOptions: a.providerOptions }
+			}),
+			catch: (t) => l.isInstance(t) ? new y({
+				reason: "decode",
+				message: "model output failed structured decode",
+				evidence: n.evidence(t.usage)
+			}) : b(t, {
+				prefix: "structured provider call failed",
+				evidence: s(e.name, r.modelId, void 0)
+			})
+		}), o = i.totalUsage, h = n.evidence(o), x = yield* g.try({
+			try: () => i.output,
+			catch: () => new y({
+				reason: "decode",
+				message: "model output failed structured decode",
+				evidence: h
+			})
+		});
+		return {
+			object: yield* _.decodeUnknownEffect(a.schema)(x).pipe(g.mapError(() => new y({
+				reason: "decode",
+				message: "model output failed schema decode",
+				evidence: h
+			}))),
+			evidence: h,
+			usage: {
+				inputTokens: o.inputTokens,
+				outputTokens: o.outputTokens,
+				totalTokens: o.totalTokens
+			},
+			providerMetadata: i.providerMetadata
+		};
+	})));
+}), k = class extends h.Service()("@voltro/AiService") {}, A = {
+	generateText: (e) => C(e),
+	generateObject: (e) => D(e)
+};
+//#endregion
+export { y as AiError, k as AiService, b as aiGenerationError, A as defaultAiService, D as generateObject, E as generateObjectJson, O as generateObjectWithTools, C as generateText, T as outputJsonSchema };

package/dist/appTools.js

@@ -0,0 +1,80 @@
+import { defineTool as e } from "./tools.js";
+//#region src/appTools.ts
+var t = /* @__PURE__ */ new Map(), n = (e) => {
+	let n = t.get(e);
+	if (n !== void 0) return n;
+	let r = RegExp("^" + e.split("*").map((e) => e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join(".*") + "$");
+	return t.size >= 256 && t.delete(t.keys().next().value), t.set(e, r), r;
+}, r = (e, t) => {
+	let n = t.lastIndex;
+	try {
+		return t.lastIndex = 0, t.test(e);
+	} finally {
+		t.lastIndex = n;
+	}
+}, i = (e, t) => t instanceof RegExp ? r(e, t) : t.some((t) => n(t).test(e)), a = (e, t) => !(t.deny !== void 0 && i(e, t.deny) || t.allow !== void 0 && !i(e, t.allow)), o = (e) => e === "mutation" || e === "action", s = (e) => ({
+	id: e,
+	via: "agent"
+}), c = (e, t) => {
+	let n = e.exposeAsTool;
+	if (n === void 0 || n === !1 || n === !0) return null;
+	let r = o(e.kind), i = n.confirm ?? (r && (t.requireConfirmForWrites ?? !0));
+	return {
+		description: n.description,
+		confirm: i,
+		...n.maxPerRun === void 0 ? {} : { maxPerRun: n.maxPerRun }
+	};
+}, l = (e, t) => {
+	if (!a(e.name, t)) return {
+		admitted: !1,
+		reason: "blocked by the allow/deny policy"
+	};
+	let n = c(e, t);
+	if (n === null) return {
+		admitted: !1,
+		reason: "not exposed as a tool (no `exposeAsTool: { description }` on the descriptor)"
+	};
+	let r = o(e.kind);
+	if (r && t.includeWrites !== !0) return {
+		admitted: !1,
+		reason: "a write tool, and includeWrites is not enabled"
+	};
+	let i = e.requiresApproval !== void 0 && e.requiresApproval !== null;
+	return n.confirm && !i ? {
+		admitted: !1,
+		reason: "the tool requires human confirmation (`confirm`) and nothing enforces it — add `requiresApproval: { approvers: [...] }` to the descriptor so the call parks as a durable approval, or set `exposeAsTool: { confirm: false }` if an agent may run it unattended"
+	} : {
+		admitted: !0,
+		spec: {
+			name: e.name,
+			kind: e.kind,
+			description: n.description,
+			write: r,
+			confirm: n.confirm,
+			approvalBacked: i,
+			...n.maxPerRun === void 0 ? {} : { maxPerRun: n.maxPerRun }
+		}
+	};
+}, u = (e, t = {}) => e.filter((e) => a(e.descriptor.name, t)).map((e) => ({
+	entry: e,
+	exposure: c(e.descriptor, t)
+})).filter((e) => e.exposure !== null).map(({ entry: e, exposure: t }) => ({
+	name: e.descriptor.name,
+	kind: e.descriptor.kind,
+	description: t.description,
+	write: o(e.descriptor.kind),
+	confirm: t.confirm,
+	approvalBacked: e.descriptor.requiresApproval !== void 0 && e.descriptor.requiresApproval !== null,
+	...t.maxPerRun === void 0 ? {} : { maxPerRun: t.maxPerRun }
+})).sort((e, t) => e.name.localeCompare(t.name)), d = (t, n = {}) => t.map((e) => ({
+	entry: e,
+	decision: l(e.descriptor, n)
+})).filter((e) => e.decision.admitted).map(({ entry: t, decision: n }) => e({
+	name: t.descriptor.name,
+	description: n.spec.description,
+	input: t.descriptor.input,
+	...t.descriptor.output === void 0 ? {} : { output: t.descriptor.output },
+	handler: (e) => Promise.resolve(t.invoke(e))
+}));
+//#endregion
+export { s as agentActor, l as appToolDecision, d as appTools, a as passesPolicy, u as synthesizeToolSpecs };

package/dist/budget.js

@@ -0,0 +1,201 @@
+import { Effect as e, Schema as t } from "effect";
+import { and as n, bigint as r, eq as i, generateId as a, id as o, isNull as s, queryFor as c, registerRetention as l, retentionTtlMsFromEnv as u, table as d, text as f, timestamp as p } from "@voltro/database";
+//#region src/budget.ts
+var m = class extends t.TaggedError()("AiBudgetExceeded", {
+	tenantId: t.NullOr(t.String),
+	limitUsd: t.Number,
+	spentUsd: t.Number,
+	attemptedUsd: t.Number
+}) {}, h = class extends t.TaggedError()("AiBudgetInvalidInput", {
+	field: t.Literals([
+		"limitUsd",
+		"addUsd",
+		"since",
+		"reservationId",
+		"tenantId"
+	]),
+	message: t.String
+}) {}, g = class extends t.TaggedError()("AiBudgetReservationConflict", {
+	reason: t.Literals(["identity-bound", "already-released"]),
+	message: t.String
+}) {}, _ = "_voltro_ai_budget", v = "_voltro_ai_budget_reservations", y = d(_, {
+	id: o({ prefix: "aib" }),
+	bucket: f().maxLength(191),
+	tenantId: f().nullable(),
+	reservedMicroUsd: r().default("0").narrowedFrom("integer"),
+	updatedAt: p().default("now")
+}).unique("byAiBudgetBucket", ["bucket"]), b = d(v, {
+	id: o({ prefix: "air" }),
+	reservationId: f().maxLength(191),
+	bucket: f().maxLength(191),
+	tenantId: f().nullable(),
+	amountMicroUsd: r(),
+	releasedAt: p().nullable(),
+	updatedAt: p().default("now")
+}).unique("byAiBudgetReservation", ["reservationId"]), x = class extends Error {}, S = (e, t, n) => {
+	if (!Number.isFinite(e) || e < 0) throw new h({
+		field: t,
+		message: `${t} must be finite and non-negative`
+	});
+	let r = e * 1e6, i = n === "up" ? Math.ceil(r) : Math.floor(r);
+	if (!Number.isSafeInteger(i)) throw new h({
+		field: t,
+		message: `${t} exceeds the safe micro-USD range`
+	});
+	return BigInt(i);
+}, C = (e) => {
+	if (typeof e == "number" && !Number.isSafeInteger(e)) throw Error("AI budget counter is not an exact integer");
+	let t = String(e);
+	if (!/^(0|[1-9][0-9]*)$/.test(t)) throw Error("AI budget counter is invalid; refusing to assume zero");
+	return BigInt(t);
+}, w = (e) => {
+	if (typeof e != "string" || e.length === 0 || e.length > 191) throw new h({
+		field: "reservationId",
+		message: "AI budget reservationId must contain 1–191 characters"
+	});
+	return e;
+}, T = () => {
+	let e = u(process.env.VOLTRO_AI_USAGE_TTL_HOURS, 8760);
+	for (let t of [_, v]) l({
+		source: "plugin",
+		table: t,
+		timeColumn: "updatedAt",
+		ttlMs: e
+	});
+}, E = async (e, t) => {
+	for (let n = 0;; n++) try {
+		return await e.transactional(t);
+	} catch (e) {
+		if (!(e instanceof x) || n >= 31) throw e;
+		await new Promise((e) => setTimeout(e, n + 1));
+	}
+}, D = (t) => t instanceof m || t instanceof h || t instanceof g ? e.fail(t) : e.die(t), O = (t) => e.tryPromise({
+	try: t,
+	catch: (e) => e
+}).pipe(e.catch(D)), k = (t, r) => e.gen(function* () {
+	let { limit: o, amount: s, tenantId: l, bucket: u, reservationId: d } = yield* e.try({
+		try: () => {
+			let e = S(r.limitUsd, "limitUsd", "down"), t = S(r.addUsd ?? 0, "addUsd", "up"), n = r.tenantId ?? null;
+			if (r.since !== void 0 && (!(r.since instanceof Date) || !Number.isFinite(r.since.getTime()))) throw new h({
+				field: "since",
+				message: "AI budget since must be a valid Date"
+			});
+			let i = `${n ?? "global"}::${r.since === void 0 ? "all" : r.since.getTime()}`;
+			if (i.length > 191) throw new h({
+				field: "tenantId",
+				message: "AI budget tenant/window key exceeds 191 characters"
+			});
+			return {
+				limit: e,
+				amount: t,
+				tenantId: n,
+				bucket: i,
+				reservationId: w(r.reservationId ?? a({
+					kind: "typeid",
+					prefix: "air"
+				}, "_voltro_ai_budget_reservations"))
+			};
+		},
+		catch: (e) => e
+	}).pipe(e.catch(D));
+	T();
+	let f = async (e) => {
+		let [t] = await e.query(c(y).where(i("bucket", u)).descriptor);
+		if (t && t.tenantId !== l) throw Error("AI budget bucket belongs to a different tenant");
+		return t;
+	}, p = (e) => {
+		if (s === 0n ? e >= o : e + s > o) throw new m({
+			tenantId: l,
+			limitUsd: r.limitUsd,
+			spentUsd: Number(e) / 1e6,
+			attemptedUsd: r.addUsd ?? 0
+		});
+	};
+	return s === 0n ? yield* O(async () => {
+		let e = await f(t);
+		return p(e ? C(e.reservedMicroUsd) : 0n), null;
+	}) : yield* O(() => E(t, async (e) => {
+		let t = a({
+			kind: "typeid",
+			prefix: "air"
+		}, v), r = /* @__PURE__ */ new Date(), o = await e.insertIgnore(v, {
+			id: t,
+			reservationId: d,
+			bucket: u,
+			tenantId: l,
+			amountMicroUsd: String(s),
+			releasedAt: null,
+			updatedAt: r
+		}, { conflictColumns: ["reservationId"] });
+		if (o.id !== t) {
+			if (o.tenantId !== l || o.bucket !== u || C(o.amountMicroUsd) !== s) throw new g({
+				reason: "identity-bound",
+				message: "AI budget reservationId is already bound to another tenant, amount or window"
+			});
+			if (o.releasedAt !== null) throw new g({
+				reason: "already-released",
+				message: "AI budget reservation was released; new spend requires a new reservationId"
+			});
+			return {
+				reservationId: d,
+				tenantId: l,
+				amountMicroUsd: String(s),
+				status: "replayed"
+			};
+		}
+		let c = await f(e), m = c ? C(c.reservedMicroUsd) : 0n;
+		if (p(m), c) {
+			if (await e.updateMany("_voltro_ai_budget", {
+				reservedMicroUsd: String(m + s),
+				updatedAt: r
+			}, { where: n(i("id", c.id), i("reservedMicroUsd", c.reservedMicroUsd)) }) !== 1) throw new x("AI budget counter changed; discard this receipt and retry");
+		} else {
+			let t = a({
+				kind: "typeid",
+				prefix: "aib"
+			}, _);
+			if ((await e.insertIgnore("_voltro_ai_budget", {
+				id: t,
+				bucket: u,
+				tenantId: l,
+				reservedMicroUsd: String(s),
+				updatedAt: r
+			}, { conflictColumns: ["bucket"] })).id !== t) throw new x("AI budget counter was created concurrently; discard this receipt and retry");
+		}
+		return {
+			reservationId: d,
+			tenantId: l,
+			amountMicroUsd: String(s),
+			status: "reserved"
+		};
+	}));
+}), A = (t, r) => e.gen(function* () {
+	return yield* e.try({
+		try: () => w(r.reservationId),
+		catch: (e) => e
+	}).pipe(e.catch((t) => t instanceof h ? e.fail(t) : e.die(t))), yield* e.promise(() => E(t, async (e) => {
+		let t = c(b).where(n(i("reservationId", r.reservationId), r.tenantId === null ? s("tenantId") : i("tenantId", r.tenantId))).descriptor, [a] = await e.query(t);
+		if (!a) return "not-found";
+		if (a.releasedAt !== null) return "already-released";
+		let o = /* @__PURE__ */ new Date();
+		if (await e.updateMany("_voltro_ai_budget_reservations", {
+			releasedAt: o,
+			updatedAt: o
+		}, { where: n(i("id", a.id), s("releasedAt")) }) !== 1) {
+			let [n] = await e.query(t);
+			if (n !== void 0 && n.releasedAt !== null) return "already-released";
+			throw new x("AI budget release raced; retry");
+		}
+		let [l] = await e.query(c(y).where(i("bucket", a.bucket)).descriptor);
+		if (!l || l.tenantId !== r.tenantId) throw Error("AI budget counter missing or mismatched; refusing unproved credit");
+		let u = C(l.reservedMicroUsd), d = C(a.amountMicroUsd);
+		if (d > u) throw Error("AI budget receipt exceeds its counter; refusing unproved credit");
+		if (await e.updateMany("_voltro_ai_budget", {
+			reservedMicroUsd: String(u - d),
+			updatedAt: o
+		}, { where: n(i("id", l.id), i("reservedMicroUsd", l.reservedMicroUsd)) }) !== 1) throw new x("AI budget counter changed; discard this release and retry");
+		return "released";
+	}));
+});
+//#endregion
+export { v as AI_BUDGET_RESERVATIONS_TABLE, _ as AI_BUDGET_TABLE, m as AiBudgetExceeded, h as AiBudgetInvalidInput, g as AiBudgetReservationConflict, b as aiBudgetReservationsTable, y as aiBudgetTable, A as releaseAiBudget, k as requireAiBudget };