@voltro/ai 0.85.0 → 0.87.0

package/dist/agent.js

@@ -1,2 +1,64 @@
-import { a as e, i as t, n, o as r, r as i, t as a } from "./agentDescriptor-DhoiXVqO.js";
-export { a as AgentThreadAccessDenied, n as agentInputSchema, i as agentMessageSchema, t as agentRouteDescriptors, e as defineAgent, r as isAgentDescriptor };
+import { AGENT_MESSAGES_TABLE as e } from "./agentConstants.js";
+import { Schema as t } from "effect";
+import { defineAction as n, defineQuery as r } from "@voltro/protocol";
+//#region src/agentDescriptor.ts
+var i = t.Struct({ prompt: t.String }), a = "@voltro/ai/AgentDescriptor", o = class extends t.TaggedError()("AgentThreadAccessDenied", { threadId: t.String }) {
+	get message() {
+		return `agent thread '${this.threadId}' belongs to another subject`;
+	}
+}, s = (e) => {
+	if (e.guards !== void 0 && e.guards.length === 0) throw Error(`defineAgent("${e.name}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the agent were protected. Omit the field
+  and decide with \`openAccess\`, or list the scopes that may talk to it.`);
+	if (e.openAccess !== void 0 && e.guards !== void 0 && e.guards.length > 0) throw Error(`defineAgent("${e.name}"): \`openAccess\` and \`guards\` are two different access\n  decisions, so declaring both says the agent is protected AND open. Keep the
+  guards if a caller must hold a scope; drop them if anyone may talk to it.`);
+	return {
+		_brand: a,
+		name: e.name,
+		...e.input === void 0 ? {} : { input: e.input },
+		...e.guards === void 0 ? {} : { guards: e.guards },
+		...e.openAccess === void 0 ? {} : { openAccess: e.openAccess }
+	};
+}, c = (e) => typeof e == "object" && !!e && e._brand === a, l = (e) => e.input ?? i, u = t.StructWithRest(t.Struct({ type: t.String }), [t.Record(t.String, t.Unknown)]), d = t.Struct({
+	id: t.String,
+	threadId: t.String,
+	role: t.String,
+	content: t.String,
+	streaming: t.Boolean,
+	order: t.Number,
+	stepOrder: t.Number,
+	parts: t.Array(u)
+}), f = (e) => {
+	let n = l(e), r = t.Struct({
+		threadId: t.String,
+		order: t.Number
+	});
+	try {
+		return t.Struct({
+			...n.fields,
+			...r.fields
+		});
+	} catch {
+		return r;
+	}
+}, p = (i) => {
+	let a = {};
+	return i.openAccess === void 0 ? i.guards !== void 0 && (a.guards = i.guards) : a.openAccess = i.openAccess, {
+		send: n({
+			name: `${i.name}.send`,
+			input: f(i),
+			output: t.Struct({ text: t.String }),
+			error: o,
+			...a
+		}),
+		messages: r({
+			name: `${i.name}.messages`,
+			input: t.Struct({ threadId: t.String }),
+			output: t.Array(d),
+			source: e,
+			error: o,
+			...a
+		})
+	};
+};
+//#endregion
+export { o as AgentThreadAccessDenied, l as agentInputSchema, d as agentMessageSchema, p as agentRouteDescriptors, s as defineAgent, c as isAgentDescriptor };

package/dist/agentConstants.js

@@ -0,0 +1,4 @@
+//#region src/agentConstants.ts
+var e = "_voltro_agent_threads", t = "_voltro_agent_messages";
+//#endregion
+export { t as AGENT_MESSAGES_TABLE, e as AGENT_THREADS_TABLE };

package/dist/agentExecutor.js

@@ -0,0 +1,55 @@
+import { providerFromEnv as e } from "./provider.js";
+import { AgentThreadAccessDenied as t } from "./agent.js";
+import { appendMessage as n, ensureThreadOwned as r, getMessages as i, getThread as a } from "./threads.js";
+import { historyToModelMessages as o, runAssistant as s } from "./runAndPersist.js";
+import { Effect as c } from "effect";
+//#region src/agentExecutor.ts
+var l = "@voltro/ai/AgentExecutor", u = (e, t) => ({
+	_brand: l,
+	descriptor: e,
+	config: t
+}), d = (e) => typeof e == "object" && !!e && e._brand === l, f = (e, t) => {
+	let n = e.config.system;
+	if (n !== void 0) return typeof n == "function" ? n(t) : n;
+}, p = (e, t) => {
+	let n = e.config.model;
+	return typeof n == "function" ? n(t) : n;
+}, m = (t, a, l) => c.gen(function* () {
+	yield* r(a, {
+		threadId: l.threadId,
+		subjectId: l.subjectId ?? null,
+		tenantId: l.tenantId ?? null
+	});
+	let u = l.promptOf ? l.promptOf(l.input) : String(l.input?.prompt ?? ""), d = f(t, l.input), m = p(t, l.input) ?? (yield* c.try({
+		try: () => e(),
+		catch: (e) => e instanceof Error ? e : Error(String(e))
+	}));
+	yield* n(a, {
+		threadId: l.threadId,
+		role: "user",
+		content: u,
+		tenantId: l.tenantId ?? null,
+		order: l.order
+	});
+	let h = yield* i(a, l.threadId), g = o(h);
+	return yield* s(a, {
+		threadId: l.threadId,
+		tenantId: l.tenantId ?? null,
+		prompt: u,
+		...g.length > 0 ? { messages: g } : {},
+		...d === void 0 ? {} : { system: d },
+		...t.config.tools === void 0 ? {} : { tools: t.config.tools },
+		provider: m,
+		...t.config.maxSteps === void 0 ? {} : { maxSteps: t.config.maxSteps },
+		...t.config.providerOptions === void 0 ? {} : { providerOptions: t.config.providerOptions },
+		...l.toolContext === void 0 ? {} : { toolContext: l.toolContext },
+		order: l.order + 1,
+		...l.throttleMs === void 0 ? {} : { throttleMs: l.throttleMs },
+		agent: t.descriptor.name
+	});
+}), h = (e, n, r = null) => c.gen(function* () {
+	let o = yield* a(e, n);
+	return o !== null && o.subjectId !== null && o.subjectId !== r ? yield* c.fail(new t({ threadId: n })) : yield* i(e, n);
+});
+//#endregion
+export { u as defineAgentExecutor, d as isAgentExecutor, h as loadAgentMessages, p as resolveAgentModel, f as resolveSystem, m as runAgentTurn };

package/dist/aiSettings.js

@@ -0,0 +1,11 @@
+import { readEnvValue as e } from "@voltro/env";
+//#region src/aiSettings.ts
+var t = (t, n) => {
+	let r = e(t);
+	if (typeof r == "string" && r !== "") return r;
+	if (typeof r == "number" || typeof r == "boolean") return String(r);
+	let i = n[t];
+	return i === void 0 || i === "" ? void 0 : i;
+}, n = (e) => e.NODE_ENV === "production";
+//#endregion
+export { t as aiSetting, n as isProductionEnv };

package/dist/api.js

@@ -0,0 +1,199 @@
+import { providerFromEnv as e, resolveModel as t } from "./provider.js";
+import { buildSdkTools as n } from "./tools.js";
+import { aiCallAttributes as r, withAiCallSpan as i } from "./observe.js";
+import { validatedOutputSchema as a } from "./jsonOutputValidation.js";
+import { AiCallEvidenceSchema as o, normalizeAiCallEvidence as s } from "./callEvidence.js";
+import { captureStructuredEvidence as c } from "./structuredEvidence.js";
+import { NoObjectGeneratedError as l, Output as u, generateObject as d, generateText as f, jsonSchema as p, stepCountIs as m } from "ai";
+import { Context as h, Effect as g, Schema as _ } from "effect";
+import { jsonSchemaOf as v } from "@voltro/protocol";
+//#region src/api.ts
+var y = class extends _.TaggedError()("AiError", {
+	reason: _.Literals(["generation", "decode"]),
+	message: _.String,
+	evidence: _.optional(o)
+}) {}, b = (e, t = {}) => {
+	let n = String(e?.message ?? e), r = x(e), i = new y({
+		reason: "generation",
+		message: `${t.prefix === void 0 ? "" : `${t.prefix}: `}${n}${r.length > 0 ? ` (${r.join(" <- ")})` : ""}`,
+		...t.evidence === void 0 ? {} : { evidence: t.evidence }
+	});
+	return Object.defineProperty(i, "cause", {
+		value: e,
+		enumerable: !1,
+		configurable: !0,
+		writable: !0
+	}), i;
+}, x = (e) => {
+	let t = [], n = e;
+	for (let e = 0; e < 8 && typeof n == "object" && n; e++) {
+		let e = n;
+		typeof e.code == "string" && e.code.length > 0 && !t.includes(e.code) && t.push(e.code), n = typeof e.lastError == "object" && e.lastError !== null ? e.lastError : e.cause;
+	}
+	return t;
+}, S = (e, t, n) => {
+	let r = [e, ...t ?? []], i = (e) => n(r[e]).pipe(g.catchTag("AiError", (t) => t.reason === "generation" && e + 1 < r.length ? i(e + 1) : g.fail(t)));
+	return i(0);
+}, C = (a) => g.gen(function* () {
+	let o = a.messages === void 0 ? a.prompt === void 0 ? void 0 : { prompt: a.prompt } : { messages: [...a.messages] };
+	if (o === void 0 || a.prompt !== void 0 && a.messages !== void 0) return yield* g.fail(new y({
+		reason: "generation",
+		message: "generateText: supply exactly one of prompt or messages"
+	}));
+	let s = a.tools === void 0 ? void 0 : yield* g.context(), c = a.tools === void 0 || s === void 0 ? void 0 : n(a.tools, {
+		store: void 0,
+		...a.toolContext,
+		...a.abortSignal === void 0 ? {} : { abortSignal: a.abortSignal },
+		runtime: s
+	});
+	return yield* S(a.provider ?? e(), a.fallbacks, (e) => i(r(e, "generateText"), (e) => e.usage, g.tryPromise({
+		try: async () => {
+			let n = t(e), r = await f({
+				model: n,
+				...o,
+				...a.abortSignal === void 0 ? {} : { abortSignal: a.abortSignal },
+				...c === void 0 ? {} : {
+					tools: c,
+					stopWhen: m(a.maxSteps ?? 8)
+				},
+				...a.system === void 0 ? {} : { system: a.system },
+				...a.maxTokens === void 0 ? {} : { maxOutputTokens: a.maxTokens },
+				...a.temperature === void 0 ? {} : { temperature: a.temperature },
+				...a.providerOptions === void 0 ? {} : { providerOptions: a.providerOptions }
+			}), i = c !== void 0 && r.totalUsage !== void 0 ? r.totalUsage : r.usage;
+			return {
+				text: r.text,
+				sources: r.sources,
+				usage: {
+					inputTokens: i.inputTokens,
+					outputTokens: i.outputTokens,
+					totalTokens: i.totalTokens
+				},
+				providerMetadata: r.providerMetadata
+			};
+		},
+		catch: (e) => b(e)
+	})));
+}), w = (e, t) => g.gen(function* () {
+	let n = v(e);
+	if (n?.type !== "object") {
+		let e = n?.anyOf === void 0 ? `type:${JSON.stringify(n?.type ?? null)}` : "anyOf (e.g. Schema.Struct({}) or a union)";
+		return yield* g.fail(new y({
+			reason: "generation",
+			message: `${t}: the output schema must render as a top-level JSON object (type:"object"), but got ${e}. Use a Schema.Struct({ ... }) as the output schema — wrap arrays/scalars in a field (e.g. Schema.Struct({ items: Schema.Array(...) })).`
+		}));
+	}
+	return n;
+}), T = (e, t) => w(e, t), E = (n) => S(n.provider ?? e(), n.fallbacks, (e) => i(r(e, "generateObject"), (e) => e.usage, g.gen(function* () {
+	let r = yield* g.try({
+		try: () => a(n.jsonSchema),
+		catch: () => new y({
+			reason: "decode",
+			message: "generateObjectJson: invalid or unsupported output JSON Schema; no provider call was made"
+		})
+	}), i = c(e.name, t(e)), o = i.model, u = yield* g.tryPromise({
+		try: () => d({
+			model: o,
+			schema: r,
+			prompt: n.prompt,
+			...n.system === void 0 ? {} : { system: n.system },
+			...n.maxTokens === void 0 ? {} : { maxOutputTokens: n.maxTokens },
+			...n.temperature === void 0 ? {} : { temperature: n.temperature },
+			...n.providerOptions === void 0 ? {} : { providerOptions: n.providerOptions }
+		}),
+		catch: (t) => l.isInstance(t) ? new y({
+			reason: "decode",
+			message: "model output failed JSON Schema validation",
+			evidence: i.evidence(t.usage)
+		}) : b(t, {
+			prefix: "structured provider call failed",
+			evidence: s(e.name, o.modelId, void 0)
+		})
+	});
+	return {
+		object: u.object,
+		evidence: s(e.name, o.modelId, u.usage, u.providerMetadata),
+		usage: {
+			inputTokens: u.usage.inputTokens,
+			outputTokens: u.usage.outputTokens,
+			totalTokens: u.usage.totalTokens
+		},
+		providerMetadata: u.providerMetadata
+	};
+}))), D = (e) => g.gen(function* () {
+	let t = yield* E({
+		jsonSchema: yield* w(e.schema, "generateObject"),
+		prompt: e.prompt,
+		...e.system === void 0 ? {} : { system: e.system },
+		...e.provider === void 0 ? {} : { provider: e.provider },
+		...e.fallbacks === void 0 ? {} : { fallbacks: e.fallbacks },
+		...e.maxTokens === void 0 ? {} : { maxTokens: e.maxTokens },
+		...e.temperature === void 0 ? {} : { temperature: e.temperature },
+		...e.providerOptions === void 0 ? {} : { providerOptions: e.providerOptions }
+	}), n = yield* _.decodeUnknownEffect(e.schema)(t.object).pipe(g.mapError(() => new y({
+		reason: "decode",
+		message: "model output failed schema decode",
+		evidence: t.evidence
+	})));
+	return {
+		...t,
+		object: n
+	};
+}), O = (a) => g.gen(function* () {
+	let o = yield* g.context(), d = yield* w(a.schema, "generateObjectWithTools"), h = {
+		store: void 0,
+		...a.toolContext,
+		...a.abortSignal === void 0 ? {} : { abortSignal: a.abortSignal },
+		runtime: o
+	}, v = n(a.tools, h);
+	return yield* S(a.provider ?? e(), a.fallbacks, (e) => i(r(e, "generateObjectWithTools"), (e) => e.usage, g.gen(function* () {
+		let n = c(e.name, t(e)), r = n.model, i = yield* g.tryPromise({
+			try: () => f({
+				model: r,
+				prompt: a.prompt,
+				tools: v,
+				...a.abortSignal === void 0 ? {} : { abortSignal: a.abortSignal },
+				stopWhen: m(a.maxSteps ?? 8),
+				output: u.object({ schema: p(d) }),
+				...a.system === void 0 ? {} : { system: a.system },
+				...a.maxTokens === void 0 ? {} : { maxOutputTokens: a.maxTokens },
+				...a.temperature === void 0 ? {} : { temperature: a.temperature },
+				...a.providerOptions === void 0 ? {} : { providerOptions: a.providerOptions }
+			}),
+			catch: (t) => l.isInstance(t) ? new y({
+				reason: "decode",
+				message: "model output failed structured decode",
+				evidence: n.evidence(t.usage)
+			}) : b(t, {
+				prefix: "structured provider call failed",
+				evidence: s(e.name, r.modelId, void 0)
+			})
+		}), o = i.totalUsage, h = n.evidence(o), x = yield* g.try({
+			try: () => i.output,
+			catch: () => new y({
+				reason: "decode",
+				message: "model output failed structured decode",
+				evidence: h
+			})
+		});
+		return {
+			object: yield* _.decodeUnknownEffect(a.schema)(x).pipe(g.mapError(() => new y({
+				reason: "decode",
+				message: "model output failed schema decode",
+				evidence: h
+			}))),
+			evidence: h,
+			usage: {
+				inputTokens: o.inputTokens,
+				outputTokens: o.outputTokens,
+				totalTokens: o.totalTokens
+			},
+			providerMetadata: i.providerMetadata
+		};
+	})));
+}), k = class extends h.Service()("@voltro/AiService") {}, A = {
+	generateText: (e) => C(e),
+	generateObject: (e) => D(e)
+};
+//#endregion
+export { y as AiError, k as AiService, b as aiGenerationError, A as defaultAiService, D as generateObject, E as generateObjectJson, O as generateObjectWithTools, C as generateText, T as outputJsonSchema };

package/dist/appTools.js

@@ -0,0 +1,80 @@
+import { defineTool as e } from "./tools.js";
+//#region src/appTools.ts
+var t = /* @__PURE__ */ new Map(), n = (e) => {
+	let n = t.get(e);
+	if (n !== void 0) return n;
+	let r = RegExp("^" + e.split("*").map((e) => e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join(".*") + "$");
+	return t.size >= 256 && t.delete(t.keys().next().value), t.set(e, r), r;
+}, r = (e, t) => {
+	let n = t.lastIndex;
+	try {
+		return t.lastIndex = 0, t.test(e);
+	} finally {
+		t.lastIndex = n;
+	}
+}, i = (e, t) => t instanceof RegExp ? r(e, t) : t.some((t) => n(t).test(e)), a = (e, t) => !(t.deny !== void 0 && i(e, t.deny) || t.allow !== void 0 && !i(e, t.allow)), o = (e) => e === "mutation" || e === "action", s = (e) => ({
+	id: e,
+	via: "agent"
+}), c = (e, t) => {
+	let n = e.exposeAsTool;
+	if (n === void 0 || n === !1 || n === !0) return null;
+	let r = o(e.kind), i = n.confirm ?? (r && (t.requireConfirmForWrites ?? !0));
+	return {
+		description: n.description,
+		confirm: i,
+		...n.maxPerRun === void 0 ? {} : { maxPerRun: n.maxPerRun }
+	};
+}, l = (e, t) => {
+	if (!a(e.name, t)) return {
+		admitted: !1,
+		reason: "blocked by the allow/deny policy"
+	};
+	let n = c(e, t);
+	if (n === null) return {
+		admitted: !1,
+		reason: "not exposed as a tool (no `exposeAsTool: { description }` on the descriptor)"
+	};
+	let r = o(e.kind);
+	if (r && t.includeWrites !== !0) return {
+		admitted: !1,
+		reason: "a write tool, and includeWrites is not enabled"
+	};
+	let i = e.requiresApproval !== void 0 && e.requiresApproval !== null;
+	return n.confirm && !i ? {
+		admitted: !1,
+		reason: "the tool requires human confirmation (`confirm`) and nothing enforces it — add `requiresApproval: { approvers: [...] }` to the descriptor so the call parks as a durable approval, or set `exposeAsTool: { confirm: false }` if an agent may run it unattended"
+	} : {
+		admitted: !0,
+		spec: {
+			name: e.name,
+			kind: e.kind,
+			description: n.description,
+			write: r,
+			confirm: n.confirm,
+			approvalBacked: i,
+			...n.maxPerRun === void 0 ? {} : { maxPerRun: n.maxPerRun }
+		}
+	};
+}, u = (e, t = {}) => e.filter((e) => a(e.descriptor.name, t)).map((e) => ({
+	entry: e,
+	exposure: c(e.descriptor, t)
+})).filter((e) => e.exposure !== null).map(({ entry: e, exposure: t }) => ({
+	name: e.descriptor.name,
+	kind: e.descriptor.kind,
+	description: t.description,
+	write: o(e.descriptor.kind),
+	confirm: t.confirm,
+	approvalBacked: e.descriptor.requiresApproval !== void 0 && e.descriptor.requiresApproval !== null,
+	...t.maxPerRun === void 0 ? {} : { maxPerRun: t.maxPerRun }
+})).sort((e, t) => e.name.localeCompare(t.name)), d = (t, n = {}) => t.map((e) => ({
+	entry: e,
+	decision: l(e.descriptor, n)
+})).filter((e) => e.decision.admitted).map(({ entry: t, decision: n }) => e({
+	name: t.descriptor.name,
+	description: n.spec.description,
+	input: t.descriptor.input,
+	...t.descriptor.output === void 0 ? {} : { output: t.descriptor.output },
+	handler: (e) => Promise.resolve(t.invoke(e))
+}));
+//#endregion
+export { s as agentActor, l as appToolDecision, d as appTools, a as passesPolicy, u as synthesizeToolSpecs };

package/dist/budget.js

@@ -0,0 +1,201 @@
+import { Effect as e, Schema as t } from "effect";
+import { and as n, bigint as r, eq as i, generateId as a, id as o, isNull as s, queryFor as c, registerRetention as l, retentionTtlMsFromEnv as u, table as d, text as f, timestamp as p } from "@voltro/database";
+//#region src/budget.ts
+var m = class extends t.TaggedError()("AiBudgetExceeded", {
+	tenantId: t.NullOr(t.String),
+	limitUsd: t.Number,
+	spentUsd: t.Number,
+	attemptedUsd: t.Number
+}) {}, h = class extends t.TaggedError()("AiBudgetInvalidInput", {
+	field: t.Literals([
+		"limitUsd",
+		"addUsd",
+		"since",
+		"reservationId",
+		"tenantId"
+	]),
+	message: t.String
+}) {}, g = class extends t.TaggedError()("AiBudgetReservationConflict", {
+	reason: t.Literals(["identity-bound", "already-released"]),
+	message: t.String
+}) {}, _ = "_voltro_ai_budget", v = "_voltro_ai_budget_reservations", y = d(_, {
+	id: o({ prefix: "aib" }),
+	bucket: f().maxLength(191),
+	tenantId: f().nullable(),
+	reservedMicroUsd: r().default("0").narrowedFrom("integer"),
+	updatedAt: p().default("now")
+}).unique("byAiBudgetBucket", ["bucket"]), b = d(v, {
+	id: o({ prefix: "air" }),
+	reservationId: f().maxLength(191),
+	bucket: f().maxLength(191),
+	tenantId: f().nullable(),
+	amountMicroUsd: r(),
+	releasedAt: p().nullable(),
+	updatedAt: p().default("now")
+}).unique("byAiBudgetReservation", ["reservationId"]), x = class extends Error {}, S = (e, t, n) => {
+	if (!Number.isFinite(e) || e < 0) throw new h({
+		field: t,
+		message: `${t} must be finite and non-negative`
+	});
+	let r = e * 1e6, i = n === "up" ? Math.ceil(r) : Math.floor(r);
+	if (!Number.isSafeInteger(i)) throw new h({
+		field: t,
+		message: `${t} exceeds the safe micro-USD range`
+	});
+	return BigInt(i);
+}, C = (e) => {
+	if (typeof e == "number" && !Number.isSafeInteger(e)) throw Error("AI budget counter is not an exact integer");
+	let t = String(e);
+	if (!/^(0|[1-9][0-9]*)$/.test(t)) throw Error("AI budget counter is invalid; refusing to assume zero");
+	return BigInt(t);
+}, w = (e) => {
+	if (typeof e != "string" || e.length === 0 || e.length > 191) throw new h({
+		field: "reservationId",
+		message: "AI budget reservationId must contain 1–191 characters"
+	});
+	return e;
+}, T = () => {
+	let e = u(process.env.VOLTRO_AI_USAGE_TTL_HOURS, 8760);
+	for (let t of [_, v]) l({
+		source: "plugin",
+		table: t,
+		timeColumn: "updatedAt",
+		ttlMs: e
+	});
+}, E = async (e, t) => {
+	for (let n = 0;; n++) try {
+		return await e.transactional(t);
+	} catch (e) {
+		if (!(e instanceof x) || n >= 31) throw e;
+		await new Promise((e) => setTimeout(e, n + 1));
+	}
+}, D = (t) => t instanceof m || t instanceof h || t instanceof g ? e.fail(t) : e.die(t), O = (t) => e.tryPromise({
+	try: t,
+	catch: (e) => e
+}).pipe(e.catch(D)), k = (t, r) => e.gen(function* () {
+	let { limit: o, amount: s, tenantId: l, bucket: u, reservationId: d } = yield* e.try({
+		try: () => {
+			let e = S(r.limitUsd, "limitUsd", "down"), t = S(r.addUsd ?? 0, "addUsd", "up"), n = r.tenantId ?? null;
+			if (r.since !== void 0 && (!(r.since instanceof Date) || !Number.isFinite(r.since.getTime()))) throw new h({
+				field: "since",
+				message: "AI budget since must be a valid Date"
+			});
+			let i = `${n ?? "global"}::${r.since === void 0 ? "all" : r.since.getTime()}`;
+			if (i.length > 191) throw new h({
+				field: "tenantId",
+				message: "AI budget tenant/window key exceeds 191 characters"
+			});
+			return {
+				limit: e,
+				amount: t,
+				tenantId: n,
+				bucket: i,
+				reservationId: w(r.reservationId ?? a({
+					kind: "typeid",
+					prefix: "air"
+				}, "_voltro_ai_budget_reservations"))
+			};
+		},
+		catch: (e) => e
+	}).pipe(e.catch(D));
+	T();
+	let f = async (e) => {
+		let [t] = await e.query(c(y).where(i("bucket", u)).descriptor);
+		if (t && t.tenantId !== l) throw Error("AI budget bucket belongs to a different tenant");
+		return t;
+	}, p = (e) => {
+		if (s === 0n ? e >= o : e + s > o) throw new m({
+			tenantId: l,
+			limitUsd: r.limitUsd,
+			spentUsd: Number(e) / 1e6,
+			attemptedUsd: r.addUsd ?? 0
+		});
+	};
+	return s === 0n ? yield* O(async () => {
+		let e = await f(t);
+		return p(e ? C(e.reservedMicroUsd) : 0n), null;
+	}) : yield* O(() => E(t, async (e) => {
+		let t = a({
+			kind: "typeid",
+			prefix: "air"
+		}, v), r = /* @__PURE__ */ new Date(), o = await e.insertIgnore(v, {
+			id: t,
+			reservationId: d,
+			bucket: u,
+			tenantId: l,
+			amountMicroUsd: String(s),
+			releasedAt: null,
+			updatedAt: r
+		}, { conflictColumns: ["reservationId"] });
+		if (o.id !== t) {
+			if (o.tenantId !== l || o.bucket !== u || C(o.amountMicroUsd) !== s) throw new g({
+				reason: "identity-bound",
+				message: "AI budget reservationId is already bound to another tenant, amount or window"
+			});
+			if (o.releasedAt !== null) throw new g({
+				reason: "already-released",
+				message: "AI budget reservation was released; new spend requires a new reservationId"
+			});
+			return {
+				reservationId: d,
+				tenantId: l,
+				amountMicroUsd: String(s),
+				status: "replayed"
+			};
+		}
+		let c = await f(e), m = c ? C(c.reservedMicroUsd) : 0n;
+		if (p(m), c) {
+			if (await e.updateMany("_voltro_ai_budget", {
+				reservedMicroUsd: String(m + s),
+				updatedAt: r
+			}, { where: n(i("id", c.id), i("reservedMicroUsd", c.reservedMicroUsd)) }) !== 1) throw new x("AI budget counter changed; discard this receipt and retry");
+		} else {
+			let t = a({
+				kind: "typeid",
+				prefix: "aib"
+			}, _);
+			if ((await e.insertIgnore("_voltro_ai_budget", {
+				id: t,
+				bucket: u,
+				tenantId: l,
+				reservedMicroUsd: String(s),
+				updatedAt: r
+			}, { conflictColumns: ["bucket"] })).id !== t) throw new x("AI budget counter was created concurrently; discard this receipt and retry");
+		}
+		return {
+			reservationId: d,
+			tenantId: l,
+			amountMicroUsd: String(s),
+			status: "reserved"
+		};
+	}));
+}), A = (t, r) => e.gen(function* () {
+	return yield* e.try({
+		try: () => w(r.reservationId),
+		catch: (e) => e
+	}).pipe(e.catch((t) => t instanceof h ? e.fail(t) : e.die(t))), yield* e.promise(() => E(t, async (e) => {
+		let t = c(b).where(n(i("reservationId", r.reservationId), r.tenantId === null ? s("tenantId") : i("tenantId", r.tenantId))).descriptor, [a] = await e.query(t);
+		if (!a) return "not-found";
+		if (a.releasedAt !== null) return "already-released";
+		let o = /* @__PURE__ */ new Date();
+		if (await e.updateMany("_voltro_ai_budget_reservations", {
+			releasedAt: o,
+			updatedAt: o
+		}, { where: n(i("id", a.id), s("releasedAt")) }) !== 1) {
+			let [n] = await e.query(t);
+			if (n !== void 0 && n.releasedAt !== null) return "already-released";
+			throw new x("AI budget release raced; retry");
+		}
+		let [l] = await e.query(c(y).where(i("bucket", a.bucket)).descriptor);
+		if (!l || l.tenantId !== r.tenantId) throw Error("AI budget counter missing or mismatched; refusing unproved credit");
+		let u = C(l.reservedMicroUsd), d = C(a.amountMicroUsd);
+		if (d > u) throw Error("AI budget receipt exceeds its counter; refusing unproved credit");
+		if (await e.updateMany("_voltro_ai_budget", {
+			reservedMicroUsd: String(u - d),
+			updatedAt: o
+		}, { where: n(i("id", l.id), i("reservedMicroUsd", l.reservedMicroUsd)) }) !== 1) throw new x("AI budget counter changed; discard this release and retry");
+		return "released";
+	}));
+});
+//#endregion
+export { v as AI_BUDGET_RESERVATIONS_TABLE, _ as AI_BUDGET_TABLE, m as AiBudgetExceeded, h as AiBudgetInvalidInput, g as AiBudgetReservationConflict, b as aiBudgetReservationsTable, y as aiBudgetTable, A as releaseAiBudget, k as requireAiBudget };

package/dist/callEvidence.js

@@ -0,0 +1,51 @@
+import { gatewayCostUsd as e } from "./cost.js";
+import { Schema as t } from "effect";
+//#region src/callEvidence.ts
+var n = t.Number.pipe(t.check(t.isInt()), t.check(t.isGreaterThanOrEqualTo(0)), t.check(t.isLessThanOrEqualTo(2 ** 53 - 1))), r = t.Struct({
+	provider: t.String,
+	model: t.String,
+	usage: t.Struct({
+		inputTokens: t.optional(n),
+		outputTokens: t.optional(n),
+		totalTokens: t.optional(n),
+		completeness: t.Literals([
+			"complete",
+			"partial",
+			"unknown"
+		])
+	}),
+	cost: t.Union([t.Struct({
+		status: t.Literal("actual"),
+		source: t.Literal("gateway"),
+		usd: t.Number.pipe(t.check(t.isFinite()), t.check(t.isGreaterThanOrEqualTo(0)))
+	}), t.Struct({
+		status: t.Literal("unknown"),
+		source: t.Literal("unreported")
+	})])
+}), i = (e) => typeof e == "number" && Number.isSafeInteger(e) && e >= 0 ? e : void 0, a = (t, n, r, a) => {
+	let o = typeof r == "object" && r ? r : {}, s = i("inputTokens" in o ? o.inputTokens : void 0), c = i("outputTokens" in o ? o.outputTokens : void 0), l = i("totalTokens" in o ? o.totalTokens : void 0), u = [
+		s,
+		c,
+		l
+	].filter((e) => e !== void 0).length, d = e(a);
+	return {
+		provider: t,
+		model: n,
+		usage: {
+			...s === void 0 ? {} : { inputTokens: s },
+			...c === void 0 ? {} : { outputTokens: c },
+			...l === void 0 ? {} : { totalTokens: l },
+			completeness: u === 3 ? "complete" : u === 0 ? "unknown" : "partial"
+		},
+		cost: d === void 0 ? {
+			status: "unknown",
+			source: "unreported"
+		} : {
+			status: "actual",
+			source: "gateway",
+			usd: d
+		}
+	};
+};
+//#endregion
+export { r as AiCallEvidenceSchema, a as normalizeAiCallEvidence };