@wildo-ai/saas-models 1.1.4 → 1.1.6

package/dist/esm/flows-actors/model-cost-period-aggregates.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-cost-period-aggregates.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/model-cost-period-aggregates.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,0BAA0B,CAAC;AAElC,6FAA6F;AAC7F,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAElD,MAAM,CAAN,IAAY,oCAGX;AAHD,WAAY,oCAAoC;IAC9C,qGAAqG;IACrG,qEAA6B,CAAA;AAC/B,CAAC,EAHW,oCAAoC,KAApC,oCAAoC,QAG/C;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yEAAyE,CAAC;IAC1H,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2EAA2E,CAAC;CACvI,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACvC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,iBAAiB,EAAE;IAC7F,qGAAqG;IACrG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAChE,4DAA4D;IAC5D,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACpD,wDAAwD;IACxD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,2FAA2F;IAC3F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE;IACzD,6FAA6F;IAC7F,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,0GAA0G;IAC1G,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,sFAAsF;IACtF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,yIAAyI;IACzI,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE;IACnD,iEAAiE;IACjE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3E,gEAAgE;IAChE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,oHAAoH;IACpH,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACpE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,kIAAkI,CAAC;CAClM,CAAC,CAAC;AAGH,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,OAAa;IAC7C,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,kBAAkB,CAAC,cAAsB,EAAE,WAAiB,EAAE,QAAgB;IAC5F,MAAM,KAAK,GAAG,GAAG,WAAW,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC1G,OAAO,GAAG,cAAc,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;AAClD,CAAC","sourcesContent":["/**\n * # Model-cost period aggregates: one tenant's model cost for one calendar month, in one currency (#1598)\n *\n * The durable, invoice-backing record of model spend. Detail rows (`modelCallAttributions`) are operational\n * logs, kept for `OPERATIONAL_LOGS` and deleted with the tenant; an aggregate is a BUSINESS record: it is what\n * an invoice cites, so it is kept for the statutory bookkeeping period (`BUSINESS_RECORDS`, counted from the\n * end of the calendar year: booking vouchers 8 years in Germany, HGB §257(4) and AO §147(3); accounting\n * documents 10 years in France, Code de commerce L123-22).\n *\n * ## Key and write moments\n *\n * One row per (`organizationId`, `periodStart`, `currency`), unique, written idempotently: a closed period is\n * final, so a second close of the same key leaves the row as it is. It is written\n *\n * - by the period-close batch, once the month (UTC) has ended plus the declared grace for late rows; and\n * - for the OPEN period at tenant deletion, before the detail rows are deleted with the tenant.\n *\n * Calls no registered authority priced are totalled under the ISO 4217 code `XXX` (\"no currency\"), so an\n * unpriced month is recorded rather than silently absent, and `unpricedCallCount` says how many calls it holds.\n *\n * ## The invoice link, and what tenant deletion keeps\n *\n * `organizationInvoiceRefId` is set by `linkInvoice`, which the application's billing flow calls when that\n * invoice bills the cost. Relinking to a different invoice is refused. Presence of the link is the flag.\n * On tenant deletion an aggregate WITH a link is kept (its legal basis is the statutory retention, GDPR Art.\n * 17(3)(b)); one without is deleted, because nothing justifies keeping it. Automatic linkage by period overlap\n * was rejected: every subscribed organization has an invoice every period, so every aggregate would be kept\n * whether or not the cost was billed.\n *\n * Holds no personal data: an organization id, instants, counts and money totals.\n */\nimport { z } from 'zod';\nimport '@wildo-ai/zod-decorators';\n\n/** ISO 4217 \"no currency\": the currency slot of the calls no registered authority priced. */\nexport const MODEL_COST_UNPRICED_CURRENCY = 'XXX';\n\nexport enum ModelCostPeriodAggregates_Operations {\n  /** Record that an invoice bills this aggregate's cost, which keeps it past its tenant's deletion. */\n  LINK_INVOICE = 'link_invoice',\n}\n\n/** One pricing authority a period's calls were priced by. */\nexport const ModelCostPricingAuthorityUseSchema = z.strictObject({\n  pricingAuthorityRef: z.string().min(1).describe('The pricing authority some of the period\\'s model calls were priced by.'),\n  pricingAuthorityVersion: z.number().int().min(1).describe('The version of that pricing authority that was in effect for those calls.'),\n});\nexport type ModelCostPricingAuthorityUse = z.infer<typeof ModelCostPricingAuthorityUseSchema>;\n\nexport const ModelCostPeriodAggregateSchema = z.object({\n  _id: z.string().isPrimaryKey().isSummaryField(),\n  applicationId: z.string().isDBIndexed(),\n  /**\n   * `<organizationId>:<YYYY-MM>:<currency>` — the aggregate's natural key, unique, so a second close of the\n   * same period and currency can never write a second row ({@link modelCostPeriodKey} is the only producer).\n   */\n  periodKey: z.string().min(1).isUnique({ scope: 'global', sparse: false }).excludeFromUpdate(),\n  /** The tenant. Required: an aggregate is per organization; unattributed calls are not aggregated. */\n  organizationId: z.string().min(1).isDBIndexed().isSummaryField(),\n  /** First instant of the calendar month (UTC), inclusive. */\n  periodStart: z.date().isDBIndexed().isSummaryField(),\n  /** First instant of the next month (UTC), exclusive. */\n  periodEnd: z.date(),\n  /** ISO 4217 code of every total on the row, or `XXX` for the calls no authority priced. */\n  currency: z.string().regex(/^[A-Z]{3}$/).isSummaryField(),\n  /** Distinct provider calls attributed to the tenant in the period, in this currency slot. */\n  attributedCallCount: z.number().int().min(0),\n  /** Of those, the calls no registered authority priced (all of them in the `XXX` slot, none elsewhere). */\n  unpricedCallCount: z.number().int().min(0),\n  /** Token sums per dimension, each row's share applied exactly and rounded up once. */\n  promptTokens: z.number().int().min(0),\n  completionTokens: z.number().int().min(0),\n  totalTokens: z.number().int().min(0),\n  cacheReadTokens: z.number().int().min(0),\n  cacheWriteTokens: z.number().int().min(0),\n  reasoningTokens: z.number().int().min(0),\n  /** The exact sum of the period's call costs in minor units, rounded up ONCE (`CEILING_AGGREGATE_TO_MINOR_UNIT`). 0 in the `XXX` slot. */\n  costMinor: z.number().int().min(0).isSummaryField(),\n  /** The pricing authorities the period's calls were priced by. */\n  pricingAuthorities: z.array(ModelCostPricingAuthorityUseSchema).default([]),\n  /** When the aggregate was written. A closed period is final. */\n  closedAt: z.date(),\n  /** The invoice that bills this cost. Set once by `linkInvoice`; its presence keeps the row past tenant deletion. */\n  organizationInvoiceRefId: z.string().min(1).isDBIndexed().optional(),\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n});\nexport type ModelCostPeriodAggregate = z.infer<typeof ModelCostPeriodAggregateSchema>;\n\nexport const ModelCostLinkInvoiceRequestSchema = z.object({\n  organizationInvoiceRefId: z.string().min(1).max(200).describe('Id of the organization invoice reference that bills this period\\'s model cost. The invoice must belong to the same organization.'),\n});\nexport type ModelCostLinkInvoiceRequest = z.infer<typeof ModelCostLinkInvoiceRequestSchema>;\n\n/** The calendar month (UTC) an instant falls in: `[start, end)`. */\nexport function modelCostPeriodOf(instant: Date): { periodStart: Date; periodEnd: Date } {\n  const periodStart = new Date(Date.UTC(instant.getUTCFullYear(), instant.getUTCMonth(), 1));\n  const periodEnd = new Date(Date.UTC(instant.getUTCFullYear(), instant.getUTCMonth() + 1, 1));\n  return { periodStart, periodEnd };\n}\n\n/** The aggregate's unique natural key: one row per organization, calendar month (UTC) and currency. */\nexport function modelCostPeriodKey(organizationId: string, periodStart: Date, currency: string): string {\n  const month = `${periodStart.getUTCFullYear()}-${String(periodStart.getUTCMonth() + 1).padStart(2, '0')}`;\n  return `${organizationId}:${month}:${currency}`;\n}\n"]}

package/dist/esm/flows-actors/model-cost-summary.shared.schemas.d.ts

@@ -0,0 +1,136 @@
+/**
+ * # The model-cost summary: cost per case, per tenant, per agent or per model, over a window (#1598)
+ *
+ * What `POST /model-cost/summary` answers, computed from the detail rows (`modelCallAttributions`): per group
+ * and per currency, the tokens and the exact cost rounded ONCE, plus how many calls could not be attributed or
+ * priced. Those two counts are the honesty of the total: a cost per case that silently dropped the calls it
+ * could not attribute would look complete and be low.
+ *
+ * APP_ADMIN only (super-administrator or billing manager): it is the firm's internal margin data, so an
+ * organization administrator never reads it (#1598 §9). It feeds nothing: in particular not `recordUsage`,
+ * which bills customers and declines silently without a metered subscription.
+ *
+ * ## Expert time (`groupBy: CASE`)
+ *
+ * A read-time join on `caseRef` over the expert-decision records (#1599): `decidedAt − presentedAt` summed,
+ * which is a PROXY for review effort, labelled as such. Nothing is stored. Until those records exist for a
+ * case the availability is `NOT_RECORDED`, never zero.
+ */
+import { z } from 'zod';
+import '@wildo-ai/zod-decorators';
+import { ExpertTimeAvailability, ModelCostGroupBy } from './work-attribution.shared.schemas';
+/** @wildo_source:part:start saas.models.model-cost-summary facet:layer:shared facet:family:flows-actors facet:audience:app-developer */
+/** The most case references one summary request may name. */
+export declare const MODEL_COST_SUMMARY_MAX_CASE_REFS = 200;
+/**
+ * The longest window one summary may cover (review F11): a summary reads every detail row in its window, so an
+ * unbounded window is an unbounded read. A year covers every business question these rows can answer (they are kept
+ * for the OPERATIONAL_LOGS period, weeks in practice); older cost lives in the monthly aggregates.
+ */
+export declare const MODEL_COST_SUMMARY_MAX_WINDOW_DAYS = 366;
+export declare const ModelCostSummaryRequestSchema: z.ZodObject<{
+    /** Window start, inclusive, as an ISO instant. Cut on the call's `calledAt`. */
+    from: z.ZodISODateTime;
+    /** Window end, exclusive, as an ISO instant. */
+    to: z.ZodISODateTime;
+    groupBy: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ModelCostGroupBy>>;
+    /** Narrow the summary to these cases. */
+    caseRefs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type ModelCostSummaryRequest = z.infer<typeof ModelCostSummaryRequestSchema>;
+/** One currency's totals inside a group. `XXX` holds the calls no registered authority priced. */
+export declare const ModelCostCurrencyTotalSchema: z.ZodObject<{
+    currency: z.ZodString;
+    costMinor: z.ZodNumber;
+    callCount: z.ZodNumber;
+    promptTokens: z.ZodNumber;
+    completionTokens: z.ZodNumber;
+    totalTokens: z.ZodNumber;
+    cacheReadTokens: z.ZodNumber;
+    cacheWriteTokens: z.ZodNumber;
+    reasoningTokens: z.ZodNumber;
+}, z.core.$strip>;
+export type ModelCostCurrencyTotal = z.infer<typeof ModelCostCurrencyTotalSchema>;
+/** Expert review time joined on the case (only on a `CASE` summary). */
+export declare const ModelCostExpertTimeSchema: z.ZodObject<{
+    availability: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ExpertTimeAvailability>>;
+    decisionCount: z.ZodOptional<z.ZodNumber>;
+    reviewDurationMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type ModelCostExpertTime = z.infer<typeof ModelCostExpertTimeSchema>;
+export declare const ModelCostSummaryGroupSchema: z.ZodObject<{
+    key: z.ZodObject<{
+        caseRef: z.ZodOptional<z.ZodObject<{
+            resourceType: z.ZodString;
+            resourceId: z.ZodString;
+        }, z.core.$strict>>;
+        organizationId: z.ZodOptional<z.ZodString>;
+        agentRef: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    callCount: z.ZodNumber;
+    unpricedCallCount: z.ZodNumber;
+    totals: z.ZodArray<z.ZodObject<{
+        currency: z.ZodString;
+        costMinor: z.ZodNumber;
+        callCount: z.ZodNumber;
+        promptTokens: z.ZodNumber;
+        completionTokens: z.ZodNumber;
+        totalTokens: z.ZodNumber;
+        cacheReadTokens: z.ZodNumber;
+        cacheWriteTokens: z.ZodNumber;
+        reasoningTokens: z.ZodNumber;
+    }, z.core.$strip>>;
+    expertTime: z.ZodOptional<z.ZodObject<{
+        availability: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ExpertTimeAvailability>>;
+        decisionCount: z.ZodOptional<z.ZodNumber>;
+        reviewDurationMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ModelCostSummaryGroup = z.infer<typeof ModelCostSummaryGroupSchema>;
+export declare const ModelCostSummarySchema: z.ZodObject<{
+    window: z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+    }, z.core.$strip>;
+    groupBy: z.ZodEnum<typeof ModelCostGroupBy>;
+    groups: z.ZodArray<z.ZodObject<{
+        key: z.ZodObject<{
+            caseRef: z.ZodOptional<z.ZodObject<{
+                resourceType: z.ZodString;
+                resourceId: z.ZodString;
+            }, z.core.$strict>>;
+            organizationId: z.ZodOptional<z.ZodString>;
+            agentRef: z.ZodOptional<z.ZodString>;
+            provider: z.ZodOptional<z.ZodString>;
+            model: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        callCount: z.ZodNumber;
+        unpricedCallCount: z.ZodNumber;
+        totals: z.ZodArray<z.ZodObject<{
+            currency: z.ZodString;
+            costMinor: z.ZodNumber;
+            callCount: z.ZodNumber;
+            promptTokens: z.ZodNumber;
+            completionTokens: z.ZodNumber;
+            totalTokens: z.ZodNumber;
+            cacheReadTokens: z.ZodNumber;
+            cacheWriteTokens: z.ZodNumber;
+            reasoningTokens: z.ZodNumber;
+        }, z.core.$strip>>;
+        expertTime: z.ZodOptional<z.ZodObject<{
+            availability: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ExpertTimeAvailability>>;
+            decisionCount: z.ZodOptional<z.ZodNumber>;
+            reviewDurationMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    unattributedCallCount: z.ZodNumber;
+    unpricedCallCount: z.ZodNumber;
+}, z.core.$strip>;
+export type ModelCostSummary = z.infer<typeof ModelCostSummarySchema>;
+/** @wildo_source:part:end saas.models.model-cost-summary */
+//# sourceMappingURL=model-cost-summary.shared.schemas.d.ts.map

package/dist/esm/flows-actors/model-cost-summary.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-cost-summary.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/model-cost-summary.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,0BAA0B,CAAC;AAGlC,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE7F,wIAAwI;AACxI,6DAA6D;AAC7D,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,eAAO,MAAM,6BAA6B;IACxC,gFAAgF;;IAEhF,gDAAgD;;;IAGhD,yCAAyC;;;;;kBAKvC,CAAC;AACL,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,kGAAkG;AAClG,eAAO,MAAM,4BAA4B;;;;;;;;;;iBAWvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,wEAAwE;AACxE,eAAO,MAAM,yBAAyB;;;;iBAMpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBActC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,4DAA4D"}

package/dist/esm/flows-actors/model-cost-summary.shared.schemas.js

@@ -0,0 +1,90 @@
+/**
+ * # The model-cost summary: cost per case, per tenant, per agent or per model, over a window (#1598)
+ *
+ * What `POST /model-cost/summary` answers, computed from the detail rows (`modelCallAttributions`): per group
+ * and per currency, the tokens and the exact cost rounded ONCE, plus how many calls could not be attributed or
+ * priced. Those two counts are the honesty of the total: a cost per case that silently dropped the calls it
+ * could not attribute would look complete and be low.
+ *
+ * APP_ADMIN only (super-administrator or billing manager): it is the firm's internal margin data, so an
+ * organization administrator never reads it (#1598 §9). It feeds nothing: in particular not `recordUsage`,
+ * which bills customers and declines silently without a metered subscription.
+ *
+ * ## Expert time (`groupBy: CASE`)
+ *
+ * A read-time join on `caseRef` over the expert-decision records (#1599): `decidedAt − presentedAt` summed,
+ * which is a PROXY for review effort, labelled as such. Nothing is stored. Until those records exist for a
+ * case the availability is `NOT_RECORDED`, never zero.
+ */
+import { z } from 'zod';
+import '@wildo-ai/zod-decorators';
+import { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas.js';
+import { ExpertTimeAvailability, ModelCostGroupBy } from './work-attribution.shared.schemas.js';
+/** @wildo_source:part:start saas.models.model-cost-summary facet:layer:shared facet:family:flows-actors facet:audience:app-developer */
+/** The most case references one summary request may name. */
+export const MODEL_COST_SUMMARY_MAX_CASE_REFS = 200;
+/**
+ * The longest window one summary may cover (review F11): a summary reads every detail row in its window, so an
+ * unbounded window is an unbounded read. A year covers every business question these rows can answer (they are kept
+ * for the OPERATIONAL_LOGS period, weeks in practice); older cost lives in the monthly aggregates.
+ */
+export const MODEL_COST_SUMMARY_MAX_WINDOW_DAYS = 366;
+export const ModelCostSummaryRequestSchema = z.strictObject({
+    /** Window start, inclusive, as an ISO instant. Cut on the call's `calledAt`. */
+    from: z.iso.datetime({ offset: true }),
+    /** Window end, exclusive, as an ISO instant. */
+    to: z.iso.datetime({ offset: true }),
+    groupBy: z.enum(ModelCostGroupBy).systemEnum('ModelCostGroupBy'),
+    /** Narrow the summary to these cases. */
+    caseRefs: z.array(WorkUnitRefSchema).max(MODEL_COST_SUMMARY_MAX_CASE_REFS).optional(),
+}).refine((request) => Date.parse(request.from) < Date.parse(request.to), { message: 'from must precede to', path: ['to'] })
+    .refine((request) => Date.parse(request.to) - Date.parse(request.from) <= MODEL_COST_SUMMARY_MAX_WINDOW_DAYS * 24 * 60 * 60_000, {
+    message: `a summary window is at most ${MODEL_COST_SUMMARY_MAX_WINDOW_DAYS} days`, path: ['to'],
+});
+/** One currency's totals inside a group. `XXX` holds the calls no registered authority priced. */
+export const ModelCostCurrencyTotalSchema = z.object({
+    currency: z.string().regex(/^[A-Z]{3}$/),
+    /** The exact sum of the group's call costs in this currency, each row's share applied, rounded up once. */
+    costMinor: z.number().int().min(0),
+    callCount: z.number().int().min(0),
+    promptTokens: z.number().int().min(0),
+    completionTokens: z.number().int().min(0),
+    totalTokens: z.number().int().min(0),
+    cacheReadTokens: z.number().int().min(0),
+    cacheWriteTokens: z.number().int().min(0),
+    reasoningTokens: z.number().int().min(0),
+});
+/** Expert review time joined on the case (only on a `CASE` summary). */
+export const ModelCostExpertTimeSchema = z.object({
+    availability: z.enum(ExpertTimeAvailability).systemEnum('ExpertTimeAvailability'),
+    /** Decisions on agent proposals recorded for the case. Present when `JOINED`. */
+    decisionCount: z.number().int().min(0).optional(),
+    /** Sum of `decidedAt − presentedAt` over those decisions, in ms: a PROXY for review effort, not a timesheet. */
+    reviewDurationMs: z.number().int().min(0).optional(),
+});
+export const ModelCostSummaryGroupSchema = z.object({
+    /** The group's key: the one member the summary groups by is set; an unattributed group has none. */
+    key: z.object({
+        caseRef: WorkUnitRefSchema.optional(),
+        organizationId: z.string().optional(),
+        agentRef: z.string().optional(),
+        provider: z.string().optional(),
+        model: z.string().optional(),
+    }),
+    /** Distinct provider calls in the group. */
+    callCount: z.number().int().min(0),
+    unpricedCallCount: z.number().int().min(0),
+    totals: z.array(ModelCostCurrencyTotalSchema),
+    expertTime: ModelCostExpertTimeSchema.optional(),
+});
+export const ModelCostSummarySchema = z.object({
+    window: z.object({ from: z.string(), to: z.string() }),
+    groupBy: z.enum(ModelCostGroupBy),
+    groups: z.array(ModelCostSummaryGroupSchema),
+    /** Distinct provider calls in the window recorded `UNATTRIBUTED` (made outside any work frame). */
+    unattributedCallCount: z.number().int().min(0),
+    /** Distinct provider calls in the window no registered authority priced. */
+    unpricedCallCount: z.number().int().min(0),
+});
+/** @wildo_source:part:end saas.models.model-cost-summary */
+//# sourceMappingURL=model-cost-summary.shared.schemas.js.map

package/dist/esm/flows-actors/model-cost-summary.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-cost-summary.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/model-cost-summary.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,0BAA0B,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE7F,wIAAwI;AACxI,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AACpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AAEtD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,gFAAgF;IAChF,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtC,gDAAgD;IAChD,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC;IAChE,yCAAyC;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE;CACtF,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;KACzH,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,kCAAkC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE;IAC/H,OAAO,EAAE,+BAA+B,kCAAkC,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC;CAChG,CAAC,CAAC;AAGL,kGAAkG;AAClG,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,2GAA2G;IAC3G,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzC,CAAC,CAAC;AAGH,wEAAwE;AACxE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,UAAU,CAAC,wBAAwB,CAAC;IACjF,iFAAiF;IACjF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,gHAAgH;IAChH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,oGAAoG;IACpG,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,4CAA4C;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IAC7C,UAAU,EAAE,yBAAyB,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;IAC5C,mGAAmG;IACnG,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3C,CAAC,CAAC;AAEH,4DAA4D","sourcesContent":["/**\n * # The model-cost summary: cost per case, per tenant, per agent or per model, over a window (#1598)\n *\n * What `POST /model-cost/summary` answers, computed from the detail rows (`modelCallAttributions`): per group\n * and per currency, the tokens and the exact cost rounded ONCE, plus how many calls could not be attributed or\n * priced. Those two counts are the honesty of the total: a cost per case that silently dropped the calls it\n * could not attribute would look complete and be low.\n *\n * APP_ADMIN only (super-administrator or billing manager): it is the firm's internal margin data, so an\n * organization administrator never reads it (#1598 §9). It feeds nothing: in particular not `recordUsage`,\n * which bills customers and declines silently without a metered subscription.\n *\n * ## Expert time (`groupBy: CASE`)\n *\n * A read-time join on `caseRef` over the expert-decision records (#1599): `decidedAt − presentedAt` summed,\n * which is a PROXY for review effort, labelled as such. Nothing is stored. Until those records exist for a\n * case the availability is `NOT_RECORDED`, never zero.\n */\nimport { z } from 'zod';\nimport '@wildo-ai/zod-decorators';\n\nimport { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas';\nimport { ExpertTimeAvailability, ModelCostGroupBy } from './work-attribution.shared.schemas';\n\n/** @wildo_source:part:start saas.models.model-cost-summary facet:layer:shared facet:family:flows-actors facet:audience:app-developer */\n/** The most case references one summary request may name. */\nexport const MODEL_COST_SUMMARY_MAX_CASE_REFS = 200;\n/**\n * The longest window one summary may cover (review F11): a summary reads every detail row in its window, so an\n * unbounded window is an unbounded read. A year covers every business question these rows can answer (they are kept\n * for the OPERATIONAL_LOGS period, weeks in practice); older cost lives in the monthly aggregates.\n */\nexport const MODEL_COST_SUMMARY_MAX_WINDOW_DAYS = 366;\n\nexport const ModelCostSummaryRequestSchema = z.strictObject({\n  /** Window start, inclusive, as an ISO instant. Cut on the call's `calledAt`. */\n  from: z.iso.datetime({ offset: true }),\n  /** Window end, exclusive, as an ISO instant. */\n  to: z.iso.datetime({ offset: true }),\n  groupBy: z.enum(ModelCostGroupBy).systemEnum('ModelCostGroupBy'),\n  /** Narrow the summary to these cases. */\n  caseRefs: z.array(WorkUnitRefSchema).max(MODEL_COST_SUMMARY_MAX_CASE_REFS).optional(),\n}).refine((request) => Date.parse(request.from) < Date.parse(request.to), { message: 'from must precede to', path: ['to'] })\n  .refine((request) => Date.parse(request.to) - Date.parse(request.from) <= MODEL_COST_SUMMARY_MAX_WINDOW_DAYS * 24 * 60 * 60_000, {\n    message: `a summary window is at most ${MODEL_COST_SUMMARY_MAX_WINDOW_DAYS} days`, path: ['to'],\n  });\nexport type ModelCostSummaryRequest = z.infer<typeof ModelCostSummaryRequestSchema>;\n\n/** One currency's totals inside a group. `XXX` holds the calls no registered authority priced. */\nexport const ModelCostCurrencyTotalSchema = z.object({\n  currency: z.string().regex(/^[A-Z]{3}$/),\n  /** The exact sum of the group's call costs in this currency, each row's share applied, rounded up once. */\n  costMinor: z.number().int().min(0),\n  callCount: z.number().int().min(0),\n  promptTokens: z.number().int().min(0),\n  completionTokens: z.number().int().min(0),\n  totalTokens: z.number().int().min(0),\n  cacheReadTokens: z.number().int().min(0),\n  cacheWriteTokens: z.number().int().min(0),\n  reasoningTokens: z.number().int().min(0),\n});\nexport type ModelCostCurrencyTotal = z.infer<typeof ModelCostCurrencyTotalSchema>;\n\n/** Expert review time joined on the case (only on a `CASE` summary). */\nexport const ModelCostExpertTimeSchema = z.object({\n  availability: z.enum(ExpertTimeAvailability).systemEnum('ExpertTimeAvailability'),\n  /** Decisions on agent proposals recorded for the case. Present when `JOINED`. */\n  decisionCount: z.number().int().min(0).optional(),\n  /** Sum of `decidedAt − presentedAt` over those decisions, in ms: a PROXY for review effort, not a timesheet. */\n  reviewDurationMs: z.number().int().min(0).optional(),\n});\nexport type ModelCostExpertTime = z.infer<typeof ModelCostExpertTimeSchema>;\n\nexport const ModelCostSummaryGroupSchema = z.object({\n  /** The group's key: the one member the summary groups by is set; an unattributed group has none. */\n  key: z.object({\n    caseRef: WorkUnitRefSchema.optional(),\n    organizationId: z.string().optional(),\n    agentRef: z.string().optional(),\n    provider: z.string().optional(),\n    model: z.string().optional(),\n  }),\n  /** Distinct provider calls in the group. */\n  callCount: z.number().int().min(0),\n  unpricedCallCount: z.number().int().min(0),\n  totals: z.array(ModelCostCurrencyTotalSchema),\n  expertTime: ModelCostExpertTimeSchema.optional(),\n});\nexport type ModelCostSummaryGroup = z.infer<typeof ModelCostSummaryGroupSchema>;\n\nexport const ModelCostSummarySchema = z.object({\n  window: z.object({ from: z.string(), to: z.string() }),\n  groupBy: z.enum(ModelCostGroupBy),\n  groups: z.array(ModelCostSummaryGroupSchema),\n  /** Distinct provider calls in the window recorded `UNATTRIBUTED` (made outside any work frame). */\n  unattributedCallCount: z.number().int().min(0),\n  /** Distinct provider calls in the window no registered authority priced. */\n  unpricedCallCount: z.number().int().min(0),\n});\nexport type ModelCostSummary = z.infer<typeof ModelCostSummarySchema>;\n/** @wildo_source:part:end saas.models.model-cost-summary */\n"]}

package/dist/esm/flows-actors/prompt-ir.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-ir.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/flows-actors/prompt-ir.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAmBhF,OAAO,EAAE,wBAAwB,IAAI,qBAAqB,EAAE,CAAC;AAO7D;;;GAGG;AACH,oBAAY,mBAAmB;IAC7B,IAAI,SAAS,CAAQ,0CAA0C;IAC/D,MAAM,WAAW,CAAI,qDAAqD;IAC1E,GAAG,QAAQ;CACZ;AAED;;GAEG;AACH,oBAAY,0BAA0B;IACpC,GAAG,QAAQ;IACX,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,YAAY,iBAAiB;IAC7B,UAAU,eAAe;CAC1B;AAOD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;iBAqBrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAO9E;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;iBAyBxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}
+{"version":3,"file":"prompt-ir.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/prompt-ir.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAmBhF,OAAO,EAAE,wBAAwB,IAAI,qBAAqB,EAAE,CAAC;AAO7D;;;GAGG;AACH,oBAAY,mBAAmB;IAC7B,IAAI,SAAS,CAAQ,0CAA0C;IAC/D,MAAM,WAAW,CAAI,qDAAqD;IAC1E,GAAG,QAAQ;CACZ;AAED;;GAEG;AACH,oBAAY,0BAA0B;IACpC,GAAG,QAAQ;IACX,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,YAAY,iBAAiB;IAC7B,UAAU,eAAe;CAC1B;AAOD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;iBAqBrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAO9E;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;iBAyBxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}

package/dist/esm/flows-actors/provider-call-records.shared.resources-config.schemas.d.ts

@@ -0,0 +1,28 @@
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { ResourceRelationship } from '../resources/resources.shared.schemas';
+export declare const providerCallRecordsResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<undefined, CoreResourceOperation.READ | CoreResourceOperation.DELETE_MANY | CoreResourceOperation.CREATE | CoreResourceOperation.LIST, import("zod").ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>;
+    agentRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    kind: import("zod").ZodDefault<import("zod").ZodEnum<typeof import("./agent-traceability.shared.schemas").AgentCallTraceKind>>;
+    provider: import("zod").ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>>;
+    model: import("zod").ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>>;
+    attempt: import("zod").ZodOptional<import("zod").ZodNumber>;
+    calledAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDate>>;
+    outcome: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("./agent-traceability.shared.schemas").AgentCallOutcome>>>;
+    finishReason: import("zod").ZodOptional<import("zod").ZodString>;
+    durationMs: import("zod").ZodOptional<import("zod").ZodNumber>;
+    promptTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    completionTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    totalTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    usageComplete: import("zod").ZodOptional<import("zod").ZodBoolean>;
+    noCacheTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    cacheReadTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    cacheWriteTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    textTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    reasoningTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    errorName: import("zod").ZodOptional<import("zod").ZodString>;
+    errorCode: import("zod").ZodOptional<import("zod").ZodString>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodDate>>>>;
+}, import("zod/v4/core").$strip>>;
+//# sourceMappingURL=provider-call-records.shared.resources-config.schemas.d.ts.map

package/dist/esm/flows-actors/provider-call-records.shared.resources-config.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-call-records.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAIvI,eAAO,MAAM,8DAA8D,GACzE,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;iCA4E9C,CAAC"}

package/dist/esm/flows-actors/provider-call-records.shared.resources-config.schemas.js

@@ -0,0 +1,95 @@
+/**
+ * Provider-call records: resource configuration (engine-internal, no HTTP surface).
+ *
+ * Every variant is `REPOSITORY_ONLY`, the `JOB_EXECUTIONS` shape: the ONE writer is the engine's
+ * provider-call recorder, and the ONE reader is the provider-call evidence door, which aggregates the
+ * rows for a window rather than handing any of them over. No route is generated, so nothing here is
+ * reachable except through those two.
+ *
+ * The writer uses the repository directly rather than the trusted-system-write primitive on purpose:
+ * `createAsSystem` emits a `SYSTEM_CONTEXT_WRITE` audit row per call, which here would put one audit
+ * row beside every provider call. This row is itself the record; auditing its creation would double
+ * the volume and say nothing the row does not.
+ *
+ * APPEND-ONLY: there is no UPDATE. A call happened; a later call is a new row. `DELETE_MANY` exists
+ * only for the retention-class sweep, which deletes rows past the application's declared
+ * `OPERATIONAL_LOGS` period (#1613).
+ */
+import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
+import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
+import { DataRetentionClass, RetentionStartPoint } from '../compliance/privacy/retention-schedule.shared.schemas.js';
+import { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions.js';
+import { ResourceOperationRiskLevel, ResourceOperationVariantType } from '../resources/resources.shared.schemas.js';
+import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas.js';
+import { ProviderCallRecordSchema } from './provider-call-records.shared.schemas.js';
+export const providerCallRecordsResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
+    mainSchema: ProviderCallRecordSchema,
+    resourceIdentifier: CoreResourceType.PROVIDER_CALL_RECORDS,
+    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.PROVIDER_CALL_RECORDS],
+    resourceRelationships: resourcesRelationships,
+    isSystemResource: true,
+    /*
+     * Subject-export: FORBIDDEN, and deliberately NO `retentionPolicy`. A provider-call record holds no
+     * content and names no person (see the schema header), so it is not data about a subject and no
+     * erasure visits it. FORBIDDEN rather than undeclared so the decision is visible, the
+     * `JOB_EXECUTIONS` precedent. If a field ever attributes a call to a person, this exemption is wrong
+     * and must be revisited in the same change.
+     */
+    systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },
+    /*
+     * Kept for the application's declared OPERATIONAL_LOGS period, counted from the call (#1613). This
+     * replaced a hard-coded 400-day `.ttl()`: a resource carrying its own number can drift from the period
+     * the privacy notice states, which is the defect the retention schedule exists to remove. These are the
+     * per-call DETAIL rows; the durable per-period cost aggregates are a separate business record (#1598).
+     * An application that has not declared OPERATIONAL_LOGS keeps these rows until it does, and is told so
+     * at every sweep.
+     */
+    retentionBinding: {
+        retentionClass: DataRetentionClass.OPERATIONAL_LOGS,
+        startPoint: RetentionStartPoint.CREATED,
+    },
+    coreOperations: [
+        CoreResourceOperation.CREATE,
+        CoreResourceOperation.READ,
+        CoreResourceOperation.LIST,
+        CoreResourceOperation.DELETE_MANY,
+    ],
+    operationsConfiguration: {
+        [CoreResourceOperation.CREATE]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                }],
+        },
+        [CoreResourceOperation.READ]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                }],
+        },
+        [CoreResourceOperation.LIST]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                }],
+        },
+        // The retention-class sweep deletes expired pages through the SERVICE layer, which resolves only
+        // INTERNAL_CALL (not REPOSITORY_ONLY) — and INTERNAL_CALL is route-less too, so enforcing retention
+        // still creates no public deletion route.
+        [CoreResourceOperation.DELETE_MANY]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.INTERNAL_CALL,
+                    isDefault: true,
+                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
+                }],
+        },
+    },
+});
+//# sourceMappingURL=provider-call-records.shared.resources-config.schemas.js.map

package/dist/esm/flows-actors/provider-call-records.shared.resources-config.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-call-records.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAClH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAElF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAC5E,sBAA8C,EAC9C,EAAE,CAAC,0CAA0C,CAG7C;IACA,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,qBAAqB;IAC1D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,qBAAqB,CAAC;IACnG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB;;;;;;OAMG;IACH,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,SAAS,EAAE;IAEzE;;;;;;;OAOG;IACH,gBAAgB,EAAE;QAChB,cAAc,EAAE,kBAAkB,CAAC,gBAAgB;QACnD,UAAU,EAAE,mBAAmB,CAAC,OAAO;KACxC;IAED,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,WAAW;KAClC;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,iGAAiG;QACjG,oGAAoG;QACpG,0CAA0C;QAC1C,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;YACnC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C,CAAC;SACH;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Provider-call records: resource configuration (engine-internal, no HTTP surface).\n *\n * Every variant is `REPOSITORY_ONLY`, the `JOB_EXECUTIONS` shape: the ONE writer is the engine's\n * provider-call recorder, and the ONE reader is the provider-call evidence door, which aggregates the\n * rows for a window rather than handing any of them over. No route is generated, so nothing here is\n * reachable except through those two.\n *\n * The writer uses the repository directly rather than the trusted-system-write primitive on purpose:\n * `createAsSystem` emits a `SYSTEM_CONTEXT_WRITE` audit row per call, which here would put one audit\n * row beside every provider call. This row is itself the record; auditing its creation would double\n * the volume and say nothing the row does not.\n *\n * APPEND-ONLY: there is no UPDATE. A call happened; a later call is a new row. `DELETE_MANY` exists\n * only for the retention-class sweep, which deletes rows past the application's declared\n * `OPERATIONAL_LOGS` period (#1613).\n */\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { DataRetentionClass, RetentionStartPoint } from '../compliance/privacy/retention-schedule.shared.schemas';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ProviderCallRecordSchema } from './provider-call-records.shared.schemas';\n\nexport const providerCallRecordsResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[],\n) => createResourceConfiguration_Initialization<undefined,\n  CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.LIST | CoreResourceOperation.DELETE_MANY,\n  typeof ProviderCallRecordSchema\n>({\n  mainSchema: ProviderCallRecordSchema,\n  resourceIdentifier: CoreResourceType.PROVIDER_CALL_RECORDS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.PROVIDER_CALL_RECORDS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  /*\n   * Subject-export: FORBIDDEN, and deliberately NO `retentionPolicy`. A provider-call record holds no\n   * content and names no person (see the schema header), so it is not data about a subject and no\n   * erasure visits it. FORBIDDEN rather than undeclared so the decision is visible, the\n   * `JOB_EXECUTIONS` precedent. If a field ever attributes a call to a person, this exemption is wrong\n   * and must be revisited in the same change.\n   */\n  systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },\n\n  /*\n   * Kept for the application's declared OPERATIONAL_LOGS period, counted from the call (#1613). This\n   * replaced a hard-coded 400-day `.ttl()`: a resource carrying its own number can drift from the period\n   * the privacy notice states, which is the defect the retention schedule exists to remove. These are the\n   * per-call DETAIL rows; the durable per-period cost aggregates are a separate business record (#1598).\n   * An application that has not declared OPERATIONAL_LOGS keeps these rows until it does, and is told so\n   * at every sweep.\n   */\n  retentionBinding: {\n    retentionClass: DataRetentionClass.OPERATIONAL_LOGS,\n    startPoint: RetentionStartPoint.CREATED,\n  },\n\n  coreOperations: [\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.DELETE_MANY,\n  ],\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    [CoreResourceOperation.READ]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    [CoreResourceOperation.LIST]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    // The retention-class sweep deletes expired pages through the SERVICE layer, which resolves only\n    // INTERNAL_CALL (not REPOSITORY_ONLY) — and INTERNAL_CALL is route-less too, so enforcing retention\n    // still creates no public deletion route.\n    [CoreResourceOperation.DELETE_MANY]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.INTERNAL_CALL,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.HIGH,\n      }],\n    },\n  },\n});\n"]}

package/dist/esm/flows-actors/provider-call-records.shared.schemas.d.ts

@@ -0,0 +1,121 @@
+/**
+ * One row per PHYSICAL call to a model provider: which provider, which model, what kind of call, how
+ * it ended and what it consumed. The queryable record that `evidence-requirement:outbound-call-record`
+ * C2 demands ("every physical provider call is recorded — provider, model, usage and outcome").
+ *
+ * ## Why a store, when every call already emits a trace
+ *
+ * The engine emits an {@link AgentCallTrace} per call, and until this existed every destination of it
+ * was TELEMETRY: the application log, an LLM-analytics vendor, an observability forwarder, the dev
+ * companion's files. None is a store the product owns, so none can be queried for a window, and each
+ * one's lifetime was set by log rotation or a vendor rather than by an evidence-retention decision.
+ * The trace is also emitted only when an observability provider is active: at the default traceability
+ * level `NONE` nothing is emitted at all. Evidence cannot depend on an observability setting, so this
+ * record is written by its own seam, on every call, whatever the traceability level.
+ *
+ * ## Metadata only, by construction
+ *
+ * The trace carries the prompt (`input`), the completion (`output`) and the error MESSAGE, and any of
+ * them can hold a person's content: a prompt is user text, and a provider error routinely echoes the
+ * request back. None of them is copied. {@link projectProviderCallRecord} is the only producer, and it
+ * reads a closed list of fields, so a field added to the trace later cannot reach this table by
+ * accident. What stays is what the clause asks for plus what makes a row interpretable (duration,
+ * finish reason, error class).
+ *
+ * Holding no content is also what makes this row NOT personal data: it describes a call the
+ * application made, with no subject in it. That is why no field carries `dataCategories`, and why it
+ * is not attributed to a user or a tenant. Per-tenant attribution would be useful for cost and is
+ * deliberately left out until something reads it: an organization id here would make every row a
+ * statement about a customer, with the retention and erasure obligations that follow.
+ *
+ * ## Retention
+ *
+ * Kept for the application's declared `OPERATIONAL_LOGS` period, counted from the call's `createdAt`:
+ * the resource binds that class (`retentionBinding`), and the retention-class sweep deletes expired rows
+ * on both adapters (#1613). It used to carry its own 400-day `expiresAt` + `.ttl()`, a period no
+ * operator declared and that could drift from the one the privacy notice states.
+ */
+import { z } from 'zod';
+import { AgentCallOutcome, AgentCallTraceKind, type AgentCallTrace } from './agent-traceability.shared.schemas';
+export declare const ProviderCallRecordSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    agentRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    kind: z.ZodDefault<z.ZodEnum<typeof AgentCallTraceKind>>;
+    provider: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    model: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    attempt: z.ZodOptional<z.ZodNumber>;
+    calledAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    outcome: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AgentCallOutcome>>>;
+    finishReason: z.ZodOptional<z.ZodString>;
+    durationMs: z.ZodOptional<z.ZodNumber>;
+    promptTokens: z.ZodOptional<z.ZodNumber>;
+    completionTokens: z.ZodOptional<z.ZodNumber>;
+    totalTokens: z.ZodOptional<z.ZodNumber>;
+    usageComplete: z.ZodOptional<z.ZodBoolean>;
+    noCacheTokens: z.ZodOptional<z.ZodNumber>;
+    cacheReadTokens: z.ZodOptional<z.ZodNumber>;
+    cacheWriteTokens: z.ZodOptional<z.ZodNumber>;
+    textTokens: z.ZodOptional<z.ZodNumber>;
+    reasoningTokens: z.ZodOptional<z.ZodNumber>;
+    errorName: z.ZodOptional<z.ZodString>;
+    errorCode: z.ZodOptional<z.ZodString>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+}, z.core.$strip>;
+export type ProviderCallRecord = z.infer<typeof ProviderCallRecordSchema>;
+/**
+ * The ONLY way a provider-call record is built: a closed projection of an {@link AgentCallTrace}.
+ *
+ * Closed on purpose. It names every field it copies, so the prompt, the completion and the error
+ * message cannot reach the table through a field someone adds to the trace later. `calledAt` falls
+ * back to `recordedAt` only when the trace's own timestamp does not parse, so a malformed timestamp
+ * costs precision rather than the record.
+ */
+export declare function projectProviderCallRecord(trace: AgentCallTrace, { applicationId, recordedAt }: {
+    applicationId: string;
+    recordedAt: Date;
+}): Omit<ProviderCallRecord, '_id' | 'createdAt'>;
+/**
+ * # Provider calls, summarized for an evidence reader
+ *
+ * assurance-control: WILDO.INTEGRATION.OUTBOUND_ACTIVITY_AUDIT — what the application sent to which
+ * vendor is answerable for any window, without handing over a row.
+ *
+ * What `GET /assurance/provider-call-evidence` returns: COUNTS over a closed window, computed where the
+ * rows live. Counts rather than rows because the question ("was every call recorded with provider,
+ * model, usage and outcome?") is a statement about the population, and because a row names an agent
+ * and a timestamp that an evidence reader has no need to hold.
+ *
+ * The completeness counts are what make a gap visible: a call recorded with no provider, or a provider
+ * that reported no usage, is counted apart rather than folded into the total, so "every call was
+ * recorded" and "every recorded call is complete" are two separate answers.
+ */
+export declare const ProviderCallEvidenceSchema: z.ZodObject<{
+    window: z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+    }, z.core.$strip>;
+    totalCalls: z.ZodNumber;
+    failedCalls: z.ZodNumber;
+    callsWithoutProvider: z.ZodNumber;
+    callsWithoutModel: z.ZodNumber;
+    callsReportingTokens: z.ZodNumber;
+    callsWithCompleteUsage: z.ZodNumber;
+    declaredProviderRefs: z.ZodNullable<z.ZodArray<z.ZodString>>;
+    byProviderModel: z.ZodArray<z.ZodObject<{
+        provider: z.ZodNullable<z.ZodString>;
+        model: z.ZodNullable<z.ZodString>;
+        kind: z.ZodEnum<typeof AgentCallTraceKind>;
+        outcome: z.ZodEnum<typeof AgentCallOutcome>;
+        calls: z.ZodNumber;
+        promptTokens: z.ZodNumber;
+        completionTokens: z.ZodNumber;
+        totalTokens: z.ZodNumber;
+        cacheReadTokens: z.ZodNumber;
+        cacheWriteTokens: z.ZodNumber;
+        reasoningTokens: z.ZodNumber;
+        callsReportingReasoning: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ProviderCallEvidence = z.infer<typeof ProviderCallEvidenceSchema>;
+//# sourceMappingURL=provider-call-records.shared.schemas.d.ts.map

package/dist/esm/flows-actors/provider-call-records.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-call-records.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAEhH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;iBAgEnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAO1E;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,cAAc,EACrB,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,IAAI,CAAA;CAAE,GACzE,IAAI,CAAC,kBAAkB,EAAE,KAAK,GAAG,WAAW,CAAC,CA2B/C;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuCrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}