@wildo-ai/saas-models 1.1.5 → 1.1.6

package/dist/esm/flows-actors/model-cost-period-aggregates.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-cost-period-aggregates.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/model-cost-period-aggregates.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,0BAA0B,CAAC;AAElC,6FAA6F;AAC7F,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAElD,MAAM,CAAN,IAAY,oCAGX;AAHD,WAAY,oCAAoC;IAC9C,qGAAqG;IACrG,qEAA6B,CAAA;AAC/B,CAAC,EAHW,oCAAoC,KAApC,oCAAoC,QAG/C;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yEAAyE,CAAC;IAC1H,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2EAA2E,CAAC;CACvI,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACvC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,iBAAiB,EAAE;IAC7F,qGAAqG;IACrG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAChE,4DAA4D;IAC5D,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACpD,wDAAwD;IACxD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,2FAA2F;IAC3F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE;IACzD,6FAA6F;IAC7F,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,0GAA0G;IAC1G,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,sFAAsF;IACtF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,yIAAyI;IACzI,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE;IACnD,iEAAiE;IACjE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3E,gEAAgE;IAChE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,oHAAoH;IACpH,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACpE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,kIAAkI,CAAC;CAClM,CAAC,CAAC;AAGH,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,OAAa;IAC7C,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,kBAAkB,CAAC,cAAsB,EAAE,WAAiB,EAAE,QAAgB;IAC5F,MAAM,KAAK,GAAG,GAAG,WAAW,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC1G,OAAO,GAAG,cAAc,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;AAClD,CAAC","sourcesContent":["/**\n * # Model-cost period aggregates: one tenant's model cost for one calendar month, in one currency (#1598)\n *\n * The durable, invoice-backing record of model spend. Detail rows (`modelCallAttributions`) are operational\n * logs, kept for `OPERATIONAL_LOGS` and deleted with the tenant; an aggregate is a BUSINESS record: it is what\n * an invoice cites, so it is kept for the statutory bookkeeping period (`BUSINESS_RECORDS`, counted from the\n * end of the calendar year: booking vouchers 8 years in Germany, HGB §257(4) and AO §147(3); accounting\n * documents 10 years in France, Code de commerce L123-22).\n *\n * ## Key and write moments\n *\n * One row per (`organizationId`, `periodStart`, `currency`), unique, written idempotently: a closed period is\n * final, so a second close of the same key leaves the row as it is. It is written\n *\n * - by the period-close batch, once the month (UTC) has ended plus the declared grace for late rows; and\n * - for the OPEN period at tenant deletion, before the detail rows are deleted with the tenant.\n *\n * Calls no registered authority priced are totalled under the ISO 4217 code `XXX` (\"no currency\"), so an\n * unpriced month is recorded rather than silently absent, and `unpricedCallCount` says how many calls it holds.\n *\n * ## The invoice link, and what tenant deletion keeps\n *\n * `organizationInvoiceRefId` is set by `linkInvoice`, which the application's billing flow calls when that\n * invoice bills the cost. Relinking to a different invoice is refused. Presence of the link is the flag.\n * On tenant deletion an aggregate WITH a link is kept (its legal basis is the statutory retention, GDPR Art.\n * 17(3)(b)); one without is deleted, because nothing justifies keeping it. Automatic linkage by period overlap\n * was rejected: every subscribed organization has an invoice every period, so every aggregate would be kept\n * whether or not the cost was billed.\n *\n * Holds no personal data: an organization id, instants, counts and money totals.\n */\nimport { z } from 'zod';\nimport '@wildo-ai/zod-decorators';\n\n/** ISO 4217 \"no currency\": the currency slot of the calls no registered authority priced. */\nexport const MODEL_COST_UNPRICED_CURRENCY = 'XXX';\n\nexport enum ModelCostPeriodAggregates_Operations {\n  /** Record that an invoice bills this aggregate's cost, which keeps it past its tenant's deletion. */\n  LINK_INVOICE = 'link_invoice',\n}\n\n/** One pricing authority a period's calls were priced by. */\nexport const ModelCostPricingAuthorityUseSchema = z.strictObject({\n  pricingAuthorityRef: z.string().min(1).describe('The pricing authority some of the period\\'s model calls were priced by.'),\n  pricingAuthorityVersion: z.number().int().min(1).describe('The version of that pricing authority that was in effect for those calls.'),\n});\nexport type ModelCostPricingAuthorityUse = z.infer<typeof ModelCostPricingAuthorityUseSchema>;\n\nexport const ModelCostPeriodAggregateSchema = z.object({\n  _id: z.string().isPrimaryKey().isSummaryField(),\n  applicationId: z.string().isDBIndexed(),\n  /**\n   * `<organizationId>:<YYYY-MM>:<currency>` — the aggregate's natural key, unique, so a second close of the\n   * same period and currency can never write a second row ({@link modelCostPeriodKey} is the only producer).\n   */\n  periodKey: z.string().min(1).isUnique({ scope: 'global', sparse: false }).excludeFromUpdate(),\n  /** The tenant. Required: an aggregate is per organization; unattributed calls are not aggregated. */\n  organizationId: z.string().min(1).isDBIndexed().isSummaryField(),\n  /** First instant of the calendar month (UTC), inclusive. */\n  periodStart: z.date().isDBIndexed().isSummaryField(),\n  /** First instant of the next month (UTC), exclusive. */\n  periodEnd: z.date(),\n  /** ISO 4217 code of every total on the row, or `XXX` for the calls no authority priced. */\n  currency: z.string().regex(/^[A-Z]{3}$/).isSummaryField(),\n  /** Distinct provider calls attributed to the tenant in the period, in this currency slot. */\n  attributedCallCount: z.number().int().min(0),\n  /** Of those, the calls no registered authority priced (all of them in the `XXX` slot, none elsewhere). */\n  unpricedCallCount: z.number().int().min(0),\n  /** Token sums per dimension, each row's share applied exactly and rounded up once. */\n  promptTokens: z.number().int().min(0),\n  completionTokens: z.number().int().min(0),\n  totalTokens: z.number().int().min(0),\n  cacheReadTokens: z.number().int().min(0),\n  cacheWriteTokens: z.number().int().min(0),\n  reasoningTokens: z.number().int().min(0),\n  /** The exact sum of the period's call costs in minor units, rounded up ONCE (`CEILING_AGGREGATE_TO_MINOR_UNIT`). 0 in the `XXX` slot. */\n  costMinor: z.number().int().min(0).isSummaryField(),\n  /** The pricing authorities the period's calls were priced by. */\n  pricingAuthorities: z.array(ModelCostPricingAuthorityUseSchema).default([]),\n  /** When the aggregate was written. A closed period is final. */\n  closedAt: z.date(),\n  /** The invoice that bills this cost. Set once by `linkInvoice`; its presence keeps the row past tenant deletion. */\n  organizationInvoiceRefId: z.string().min(1).isDBIndexed().optional(),\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n});\nexport type ModelCostPeriodAggregate = z.infer<typeof ModelCostPeriodAggregateSchema>;\n\nexport const ModelCostLinkInvoiceRequestSchema = z.object({\n  organizationInvoiceRefId: z.string().min(1).max(200).describe('Id of the organization invoice reference that bills this period\\'s model cost. The invoice must belong to the same organization.'),\n});\nexport type ModelCostLinkInvoiceRequest = z.infer<typeof ModelCostLinkInvoiceRequestSchema>;\n\n/** The calendar month (UTC) an instant falls in: `[start, end)`. */\nexport function modelCostPeriodOf(instant: Date): { periodStart: Date; periodEnd: Date } {\n  const periodStart = new Date(Date.UTC(instant.getUTCFullYear(), instant.getUTCMonth(), 1));\n  const periodEnd = new Date(Date.UTC(instant.getUTCFullYear(), instant.getUTCMonth() + 1, 1));\n  return { periodStart, periodEnd };\n}\n\n/** The aggregate's unique natural key: one row per organization, calendar month (UTC) and currency. */\nexport function modelCostPeriodKey(organizationId: string, periodStart: Date, currency: string): string {\n  const month = `${periodStart.getUTCFullYear()}-${String(periodStart.getUTCMonth() + 1).padStart(2, '0')}`;\n  return `${organizationId}:${month}:${currency}`;\n}\n"]}

package/dist/esm/flows-actors/model-cost-summary.shared.schemas.d.ts

@@ -0,0 +1,136 @@
+/**
+ * # The model-cost summary: cost per case, per tenant, per agent or per model, over a window (#1598)
+ *
+ * What `POST /model-cost/summary` answers, computed from the detail rows (`modelCallAttributions`): per group
+ * and per currency, the tokens and the exact cost rounded ONCE, plus how many calls could not be attributed or
+ * priced. Those two counts are the honesty of the total: a cost per case that silently dropped the calls it
+ * could not attribute would look complete and be low.
+ *
+ * APP_ADMIN only (super-administrator or billing manager): it is the firm's internal margin data, so an
+ * organization administrator never reads it (#1598 §9). It feeds nothing: in particular not `recordUsage`,
+ * which bills customers and declines silently without a metered subscription.
+ *
+ * ## Expert time (`groupBy: CASE`)
+ *
+ * A read-time join on `caseRef` over the expert-decision records (#1599): `decidedAt − presentedAt` summed,
+ * which is a PROXY for review effort, labelled as such. Nothing is stored. Until those records exist for a
+ * case the availability is `NOT_RECORDED`, never zero.
+ */
+import { z } from 'zod';
+import '@wildo-ai/zod-decorators';
+import { ExpertTimeAvailability, ModelCostGroupBy } from './work-attribution.shared.schemas';
+/** @wildo_source:part:start saas.models.model-cost-summary facet:layer:shared facet:family:flows-actors facet:audience:app-developer */
+/** The most case references one summary request may name. */
+export declare const MODEL_COST_SUMMARY_MAX_CASE_REFS = 200;
+/**
+ * The longest window one summary may cover (review F11): a summary reads every detail row in its window, so an
+ * unbounded window is an unbounded read. A year covers every business question these rows can answer (they are kept
+ * for the OPERATIONAL_LOGS period, weeks in practice); older cost lives in the monthly aggregates.
+ */
+export declare const MODEL_COST_SUMMARY_MAX_WINDOW_DAYS = 366;
+export declare const ModelCostSummaryRequestSchema: z.ZodObject<{
+    /** Window start, inclusive, as an ISO instant. Cut on the call's `calledAt`. */
+    from: z.ZodISODateTime;
+    /** Window end, exclusive, as an ISO instant. */
+    to: z.ZodISODateTime;
+    groupBy: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ModelCostGroupBy>>;
+    /** Narrow the summary to these cases. */
+    caseRefs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type ModelCostSummaryRequest = z.infer<typeof ModelCostSummaryRequestSchema>;
+/** One currency's totals inside a group. `XXX` holds the calls no registered authority priced. */
+export declare const ModelCostCurrencyTotalSchema: z.ZodObject<{
+    currency: z.ZodString;
+    costMinor: z.ZodNumber;
+    callCount: z.ZodNumber;
+    promptTokens: z.ZodNumber;
+    completionTokens: z.ZodNumber;
+    totalTokens: z.ZodNumber;
+    cacheReadTokens: z.ZodNumber;
+    cacheWriteTokens: z.ZodNumber;
+    reasoningTokens: z.ZodNumber;
+}, z.core.$strip>;
+export type ModelCostCurrencyTotal = z.infer<typeof ModelCostCurrencyTotalSchema>;
+/** Expert review time joined on the case (only on a `CASE` summary). */
+export declare const ModelCostExpertTimeSchema: z.ZodObject<{
+    availability: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ExpertTimeAvailability>>;
+    decisionCount: z.ZodOptional<z.ZodNumber>;
+    reviewDurationMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type ModelCostExpertTime = z.infer<typeof ModelCostExpertTimeSchema>;
+export declare const ModelCostSummaryGroupSchema: z.ZodObject<{
+    key: z.ZodObject<{
+        caseRef: z.ZodOptional<z.ZodObject<{
+            resourceType: z.ZodString;
+            resourceId: z.ZodString;
+        }, z.core.$strict>>;
+        organizationId: z.ZodOptional<z.ZodString>;
+        agentRef: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    callCount: z.ZodNumber;
+    unpricedCallCount: z.ZodNumber;
+    totals: z.ZodArray<z.ZodObject<{
+        currency: z.ZodString;
+        costMinor: z.ZodNumber;
+        callCount: z.ZodNumber;
+        promptTokens: z.ZodNumber;
+        completionTokens: z.ZodNumber;
+        totalTokens: z.ZodNumber;
+        cacheReadTokens: z.ZodNumber;
+        cacheWriteTokens: z.ZodNumber;
+        reasoningTokens: z.ZodNumber;
+    }, z.core.$strip>>;
+    expertTime: z.ZodOptional<z.ZodObject<{
+        availability: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ExpertTimeAvailability>>;
+        decisionCount: z.ZodOptional<z.ZodNumber>;
+        reviewDurationMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ModelCostSummaryGroup = z.infer<typeof ModelCostSummaryGroupSchema>;
+export declare const ModelCostSummarySchema: z.ZodObject<{
+    window: z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+    }, z.core.$strip>;
+    groupBy: z.ZodEnum<typeof ModelCostGroupBy>;
+    groups: z.ZodArray<z.ZodObject<{
+        key: z.ZodObject<{
+            caseRef: z.ZodOptional<z.ZodObject<{
+                resourceType: z.ZodString;
+                resourceId: z.ZodString;
+            }, z.core.$strict>>;
+            organizationId: z.ZodOptional<z.ZodString>;
+            agentRef: z.ZodOptional<z.ZodString>;
+            provider: z.ZodOptional<z.ZodString>;
+            model: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        callCount: z.ZodNumber;
+        unpricedCallCount: z.ZodNumber;
+        totals: z.ZodArray<z.ZodObject<{
+            currency: z.ZodString;
+            costMinor: z.ZodNumber;
+            callCount: z.ZodNumber;
+            promptTokens: z.ZodNumber;
+            completionTokens: z.ZodNumber;
+            totalTokens: z.ZodNumber;
+            cacheReadTokens: z.ZodNumber;
+            cacheWriteTokens: z.ZodNumber;
+            reasoningTokens: z.ZodNumber;
+        }, z.core.$strip>>;
+        expertTime: z.ZodOptional<z.ZodObject<{
+            availability: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ExpertTimeAvailability>>;
+            decisionCount: z.ZodOptional<z.ZodNumber>;
+            reviewDurationMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    unattributedCallCount: z.ZodNumber;
+    unpricedCallCount: z.ZodNumber;
+}, z.core.$strip>;
+export type ModelCostSummary = z.infer<typeof ModelCostSummarySchema>;
+/** @wildo_source:part:end saas.models.model-cost-summary */
+//# sourceMappingURL=model-cost-summary.shared.schemas.d.ts.map

package/dist/esm/flows-actors/model-cost-summary.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-cost-summary.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/model-cost-summary.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,0BAA0B,CAAC;AAGlC,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE7F,wIAAwI;AACxI,6DAA6D;AAC7D,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,eAAO,MAAM,6BAA6B;IACxC,gFAAgF;;IAEhF,gDAAgD;;;IAGhD,yCAAyC;;;;;kBAKvC,CAAC;AACL,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,kGAAkG;AAClG,eAAO,MAAM,4BAA4B;;;;;;;;;;iBAWvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,wEAAwE;AACxE,eAAO,MAAM,yBAAyB;;;;iBAMpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBActC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,4DAA4D"}

package/dist/esm/flows-actors/model-cost-summary.shared.schemas.js

@@ -0,0 +1,90 @@
+/**
+ * # The model-cost summary: cost per case, per tenant, per agent or per model, over a window (#1598)
+ *
+ * What `POST /model-cost/summary` answers, computed from the detail rows (`modelCallAttributions`): per group
+ * and per currency, the tokens and the exact cost rounded ONCE, plus how many calls could not be attributed or
+ * priced. Those two counts are the honesty of the total: a cost per case that silently dropped the calls it
+ * could not attribute would look complete and be low.
+ *
+ * APP_ADMIN only (super-administrator or billing manager): it is the firm's internal margin data, so an
+ * organization administrator never reads it (#1598 §9). It feeds nothing: in particular not `recordUsage`,
+ * which bills customers and declines silently without a metered subscription.
+ *
+ * ## Expert time (`groupBy: CASE`)
+ *
+ * A read-time join on `caseRef` over the expert-decision records (#1599): `decidedAt − presentedAt` summed,
+ * which is a PROXY for review effort, labelled as such. Nothing is stored. Until those records exist for a
+ * case the availability is `NOT_RECORDED`, never zero.
+ */
+import { z } from 'zod';
+import '@wildo-ai/zod-decorators';
+import { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas.js';
+import { ExpertTimeAvailability, ModelCostGroupBy } from './work-attribution.shared.schemas.js';
+/** @wildo_source:part:start saas.models.model-cost-summary facet:layer:shared facet:family:flows-actors facet:audience:app-developer */
+/** The most case references one summary request may name. */
+export const MODEL_COST_SUMMARY_MAX_CASE_REFS = 200;
+/**
+ * The longest window one summary may cover (review F11): a summary reads every detail row in its window, so an
+ * unbounded window is an unbounded read. A year covers every business question these rows can answer (they are kept
+ * for the OPERATIONAL_LOGS period, weeks in practice); older cost lives in the monthly aggregates.
+ */
+export const MODEL_COST_SUMMARY_MAX_WINDOW_DAYS = 366;
+export const ModelCostSummaryRequestSchema = z.strictObject({
+    /** Window start, inclusive, as an ISO instant. Cut on the call's `calledAt`. */
+    from: z.iso.datetime({ offset: true }),
+    /** Window end, exclusive, as an ISO instant. */
+    to: z.iso.datetime({ offset: true }),
+    groupBy: z.enum(ModelCostGroupBy).systemEnum('ModelCostGroupBy'),
+    /** Narrow the summary to these cases. */
+    caseRefs: z.array(WorkUnitRefSchema).max(MODEL_COST_SUMMARY_MAX_CASE_REFS).optional(),
+}).refine((request) => Date.parse(request.from) < Date.parse(request.to), { message: 'from must precede to', path: ['to'] })
+    .refine((request) => Date.parse(request.to) - Date.parse(request.from) <= MODEL_COST_SUMMARY_MAX_WINDOW_DAYS * 24 * 60 * 60_000, {
+    message: `a summary window is at most ${MODEL_COST_SUMMARY_MAX_WINDOW_DAYS} days`, path: ['to'],
+});
+/** One currency's totals inside a group. `XXX` holds the calls no registered authority priced. */
+export const ModelCostCurrencyTotalSchema = z.object({
+    currency: z.string().regex(/^[A-Z]{3}$/),
+    /** The exact sum of the group's call costs in this currency, each row's share applied, rounded up once. */
+    costMinor: z.number().int().min(0),
+    callCount: z.number().int().min(0),
+    promptTokens: z.number().int().min(0),
+    completionTokens: z.number().int().min(0),
+    totalTokens: z.number().int().min(0),
+    cacheReadTokens: z.number().int().min(0),
+    cacheWriteTokens: z.number().int().min(0),
+    reasoningTokens: z.number().int().min(0),
+});
+/** Expert review time joined on the case (only on a `CASE` summary). */
+export const ModelCostExpertTimeSchema = z.object({
+    availability: z.enum(ExpertTimeAvailability).systemEnum('ExpertTimeAvailability'),
+    /** Decisions on agent proposals recorded for the case. Present when `JOINED`. */
+    decisionCount: z.number().int().min(0).optional(),
+    /** Sum of `decidedAt − presentedAt` over those decisions, in ms: a PROXY for review effort, not a timesheet. */
+    reviewDurationMs: z.number().int().min(0).optional(),
+});
+export const ModelCostSummaryGroupSchema = z.object({
+    /** The group's key: the one member the summary groups by is set; an unattributed group has none. */
+    key: z.object({
+        caseRef: WorkUnitRefSchema.optional(),
+        organizationId: z.string().optional(),
+        agentRef: z.string().optional(),
+        provider: z.string().optional(),
+        model: z.string().optional(),
+    }),
+    /** Distinct provider calls in the group. */
+    callCount: z.number().int().min(0),
+    unpricedCallCount: z.number().int().min(0),
+    totals: z.array(ModelCostCurrencyTotalSchema),
+    expertTime: ModelCostExpertTimeSchema.optional(),
+});
+export const ModelCostSummarySchema = z.object({
+    window: z.object({ from: z.string(), to: z.string() }),
+    groupBy: z.enum(ModelCostGroupBy),
+    groups: z.array(ModelCostSummaryGroupSchema),
+    /** Distinct provider calls in the window recorded `UNATTRIBUTED` (made outside any work frame). */
+    unattributedCallCount: z.number().int().min(0),
+    /** Distinct provider calls in the window no registered authority priced. */
+    unpricedCallCount: z.number().int().min(0),
+});
+/** @wildo_source:part:end saas.models.model-cost-summary */
+//# sourceMappingURL=model-cost-summary.shared.schemas.js.map

package/dist/esm/flows-actors/model-cost-summary.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-cost-summary.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/model-cost-summary.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,0BAA0B,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE7F,wIAAwI;AACxI,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AACpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AAEtD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,gFAAgF;IAChF,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtC,gDAAgD;IAChD,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC;IAChE,yCAAyC;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE;CACtF,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;KACzH,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,kCAAkC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE;IAC/H,OAAO,EAAE,+BAA+B,kCAAkC,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC;CAChG,CAAC,CAAC;AAGL,kGAAkG;AAClG,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,2GAA2G;IAC3G,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzC,CAAC,CAAC;AAGH,wEAAwE;AACxE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,UAAU,CAAC,wBAAwB,CAAC;IACjF,iFAAiF;IACjF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,gHAAgH;IAChH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,oGAAoG;IACpG,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,4CAA4C;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IAC7C,UAAU,EAAE,yBAAyB,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;IAC5C,mGAAmG;IACnG,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3C,CAAC,CAAC;AAEH,4DAA4D","sourcesContent":["/**\n * # The model-cost summary: cost per case, per tenant, per agent or per model, over a window (#1598)\n *\n * What `POST /model-cost/summary` answers, computed from the detail rows (`modelCallAttributions`): per group\n * and per currency, the tokens and the exact cost rounded ONCE, plus how many calls could not be attributed or\n * priced. Those two counts are the honesty of the total: a cost per case that silently dropped the calls it\n * could not attribute would look complete and be low.\n *\n * APP_ADMIN only (super-administrator or billing manager): it is the firm's internal margin data, so an\n * organization administrator never reads it (#1598 §9). It feeds nothing: in particular not `recordUsage`,\n * which bills customers and declines silently without a metered subscription.\n *\n * ## Expert time (`groupBy: CASE`)\n *\n * A read-time join on `caseRef` over the expert-decision records (#1599): `decidedAt − presentedAt` summed,\n * which is a PROXY for review effort, labelled as such. Nothing is stored. Until those records exist for a\n * case the availability is `NOT_RECORDED`, never zero.\n */\nimport { z } from 'zod';\nimport '@wildo-ai/zod-decorators';\n\nimport { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas';\nimport { ExpertTimeAvailability, ModelCostGroupBy } from './work-attribution.shared.schemas';\n\n/** @wildo_source:part:start saas.models.model-cost-summary facet:layer:shared facet:family:flows-actors facet:audience:app-developer */\n/** The most case references one summary request may name. */\nexport const MODEL_COST_SUMMARY_MAX_CASE_REFS = 200;\n/**\n * The longest window one summary may cover (review F11): a summary reads every detail row in its window, so an\n * unbounded window is an unbounded read. A year covers every business question these rows can answer (they are kept\n * for the OPERATIONAL_LOGS period, weeks in practice); older cost lives in the monthly aggregates.\n */\nexport const MODEL_COST_SUMMARY_MAX_WINDOW_DAYS = 366;\n\nexport const ModelCostSummaryRequestSchema = z.strictObject({\n  /** Window start, inclusive, as an ISO instant. Cut on the call's `calledAt`. */\n  from: z.iso.datetime({ offset: true }),\n  /** Window end, exclusive, as an ISO instant. */\n  to: z.iso.datetime({ offset: true }),\n  groupBy: z.enum(ModelCostGroupBy).systemEnum('ModelCostGroupBy'),\n  /** Narrow the summary to these cases. */\n  caseRefs: z.array(WorkUnitRefSchema).max(MODEL_COST_SUMMARY_MAX_CASE_REFS).optional(),\n}).refine((request) => Date.parse(request.from) < Date.parse(request.to), { message: 'from must precede to', path: ['to'] })\n  .refine((request) => Date.parse(request.to) - Date.parse(request.from) <= MODEL_COST_SUMMARY_MAX_WINDOW_DAYS * 24 * 60 * 60_000, {\n    message: `a summary window is at most ${MODEL_COST_SUMMARY_MAX_WINDOW_DAYS} days`, path: ['to'],\n  });\nexport type ModelCostSummaryRequest = z.infer<typeof ModelCostSummaryRequestSchema>;\n\n/** One currency's totals inside a group. `XXX` holds the calls no registered authority priced. */\nexport const ModelCostCurrencyTotalSchema = z.object({\n  currency: z.string().regex(/^[A-Z]{3}$/),\n  /** The exact sum of the group's call costs in this currency, each row's share applied, rounded up once. */\n  costMinor: z.number().int().min(0),\n  callCount: z.number().int().min(0),\n  promptTokens: z.number().int().min(0),\n  completionTokens: z.number().int().min(0),\n  totalTokens: z.number().int().min(0),\n  cacheReadTokens: z.number().int().min(0),\n  cacheWriteTokens: z.number().int().min(0),\n  reasoningTokens: z.number().int().min(0),\n});\nexport type ModelCostCurrencyTotal = z.infer<typeof ModelCostCurrencyTotalSchema>;\n\n/** Expert review time joined on the case (only on a `CASE` summary). */\nexport const ModelCostExpertTimeSchema = z.object({\n  availability: z.enum(ExpertTimeAvailability).systemEnum('ExpertTimeAvailability'),\n  /** Decisions on agent proposals recorded for the case. Present when `JOINED`. */\n  decisionCount: z.number().int().min(0).optional(),\n  /** Sum of `decidedAt − presentedAt` over those decisions, in ms: a PROXY for review effort, not a timesheet. */\n  reviewDurationMs: z.number().int().min(0).optional(),\n});\nexport type ModelCostExpertTime = z.infer<typeof ModelCostExpertTimeSchema>;\n\nexport const ModelCostSummaryGroupSchema = z.object({\n  /** The group's key: the one member the summary groups by is set; an unattributed group has none. */\n  key: z.object({\n    caseRef: WorkUnitRefSchema.optional(),\n    organizationId: z.string().optional(),\n    agentRef: z.string().optional(),\n    provider: z.string().optional(),\n    model: z.string().optional(),\n  }),\n  /** Distinct provider calls in the group. */\n  callCount: z.number().int().min(0),\n  unpricedCallCount: z.number().int().min(0),\n  totals: z.array(ModelCostCurrencyTotalSchema),\n  expertTime: ModelCostExpertTimeSchema.optional(),\n});\nexport type ModelCostSummaryGroup = z.infer<typeof ModelCostSummaryGroupSchema>;\n\nexport const ModelCostSummarySchema = z.object({\n  window: z.object({ from: z.string(), to: z.string() }),\n  groupBy: z.enum(ModelCostGroupBy),\n  groups: z.array(ModelCostSummaryGroupSchema),\n  /** Distinct provider calls in the window recorded `UNATTRIBUTED` (made outside any work frame). */\n  unattributedCallCount: z.number().int().min(0),\n  /** Distinct provider calls in the window no registered authority priced. */\n  unpricedCallCount: z.number().int().min(0),\n});\nexport type ModelCostSummary = z.infer<typeof ModelCostSummarySchema>;\n/** @wildo_source:part:end saas.models.model-cost-summary */\n"]}

package/dist/esm/flows-actors/provider-call-records.shared.resources-config.schemas.d.ts

@@ -16,9 +16,13 @@ export declare const providerCallRecordsResourceConfiguration_InitializationFact
     completionTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
     totalTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
     usageComplete: import("zod").ZodOptional<import("zod").ZodBoolean>;
+    noCacheTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    cacheReadTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    cacheWriteTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    textTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    reasoningTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
     errorName: import("zod").ZodOptional<import("zod").ZodString>;
     errorCode: import("zod").ZodOptional<import("zod").ZodString>;
-    expiresAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDate>;
     createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodDate>>>>;
 }, import("zod/v4/core").$strip>>;
 //# sourceMappingURL=provider-call-records.shared.resources-config.schemas.d.ts.map

package/dist/esm/flows-actors/provider-call-records.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-call-records.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAIvI,eAAO,MAAM,8DAA8D,GACzE,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;iCA8D9C,CAAC"}
+{"version":3,"file":"provider-call-records.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAIvI,eAAO,MAAM,8DAA8D,GACzE,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;iCA4E9C,CAAC"}

package/dist/esm/flows-actors/provider-call-records.shared.resources-config.schemas.js

@@ -12,10 +12,12 @@
  * the volume and say nothing the row does not.
  *
  * APPEND-ONLY: there is no UPDATE. A call happened; a later call is a new row. `DELETE_MANY` exists
- * only for the bounded retention sweep that enforces `expiresAt` on PostgreSQL.
+ * only for the retention-class sweep, which deletes rows past the application's declared
+ * `OPERATIONAL_LOGS` period (#1613).
  */
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
 import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
+import { DataRetentionClass, RetentionStartPoint } from '../compliance/privacy/retention-schedule.shared.schemas.js';
 import { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions.js';
 import { ResourceOperationRiskLevel, ResourceOperationVariantType } from '../resources/resources.shared.schemas.js';
 import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas.js';
@@ -34,6 +36,18 @@ export const providerCallRecordsResourceConfiguration_InitializationFactory = (r
      * and must be revisited in the same change.
      */
     systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },
+    /*
+     * Kept for the application's declared OPERATIONAL_LOGS period, counted from the call (#1613). This
+     * replaced a hard-coded 400-day `.ttl()`: a resource carrying its own number can drift from the period
+     * the privacy notice states, which is the defect the retention schedule exists to remove. These are the
+     * per-call DETAIL rows; the durable per-period cost aggregates are a separate business record (#1598).
+     * An application that has not declared OPERATIONAL_LOGS keeps these rows until it does, and is told so
+     * at every sweep.
+     */
+    retentionBinding: {
+        retentionClass: DataRetentionClass.OPERATIONAL_LOGS,
+        startPoint: RetentionStartPoint.CREATED,
+    },
     coreOperations: [
         CoreResourceOperation.CREATE,
         CoreResourceOperation.READ,
@@ -65,11 +79,12 @@ export const providerCallRecordsResourceConfiguration_InitializationFactory = (r
                     riskLevel: ResourceOperationRiskLevel.LOW,
                 }],
         },
-        // The bounded retention sweep resolves this before deleting expired rows. Repository-only, so
-        // enforcing retention never creates a public deletion route.
+        // The retention-class sweep deletes expired pages through the SERVICE layer, which resolves only
+        // INTERNAL_CALL (not REPOSITORY_ONLY) — and INTERNAL_CALL is route-less too, so enforcing retention
+        // still creates no public deletion route.
         [CoreResourceOperation.DELETE_MANY]: {
             variants: [{
-                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    variantType: ResourceOperationVariantType.INTERNAL_CALL,
                     isDefault: true,
                     roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     riskLevel: ResourceOperationRiskLevel.HIGH,

package/dist/esm/flows-actors/provider-call-records.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-call-records.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAElF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAC5E,sBAA8C,EAC9C,EAAE,CAAC,0CAA0C,CAG7C;IACA,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,qBAAqB;IAC1D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,qBAAqB,CAAC;IACnG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB;;;;;;OAMG;IACH,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,SAAS,EAAE;IAEzE,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,WAAW;KAClC;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,8FAA8F;QAC9F,6DAA6D;QAC7D,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;YACnC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C,CAAC;SACH;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Provider-call records: resource configuration (engine-internal, no HTTP surface).\n *\n * Every variant is `REPOSITORY_ONLY`, the `JOB_EXECUTIONS` shape: the ONE writer is the engine's\n * provider-call recorder, and the ONE reader is the provider-call evidence door, which aggregates the\n * rows for a window rather than handing any of them over. No route is generated, so nothing here is\n * reachable except through those two.\n *\n * The writer uses the repository directly rather than the trusted-system-write primitive on purpose:\n * `createAsSystem` emits a `SYSTEM_CONTEXT_WRITE` audit row per call, which here would put one audit\n * row beside every provider call. This row is itself the record; auditing its creation would double\n * the volume and say nothing the row does not.\n *\n * APPEND-ONLY: there is no UPDATE. A call happened; a later call is a new row. `DELETE_MANY` exists\n * only for the bounded retention sweep that enforces `expiresAt` on PostgreSQL.\n */\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ProviderCallRecordSchema } from './provider-call-records.shared.schemas';\n\nexport const providerCallRecordsResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[],\n) => createResourceConfiguration_Initialization<undefined,\n  CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.LIST | CoreResourceOperation.DELETE_MANY,\n  typeof ProviderCallRecordSchema\n>({\n  mainSchema: ProviderCallRecordSchema,\n  resourceIdentifier: CoreResourceType.PROVIDER_CALL_RECORDS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.PROVIDER_CALL_RECORDS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  /*\n   * Subject-export: FORBIDDEN, and deliberately NO `retentionPolicy`. A provider-call record holds no\n   * content and names no person (see the schema header), so it is not data about a subject and no\n   * erasure visits it. FORBIDDEN rather than undeclared so the decision is visible, the\n   * `JOB_EXECUTIONS` precedent. If a field ever attributes a call to a person, this exemption is wrong\n   * and must be revisited in the same change.\n   */\n  systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },\n\n  coreOperations: [\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.DELETE_MANY,\n  ],\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    [CoreResourceOperation.READ]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    [CoreResourceOperation.LIST]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    // The bounded retention sweep resolves this before deleting expired rows. Repository-only, so\n    // enforcing retention never creates a public deletion route.\n    [CoreResourceOperation.DELETE_MANY]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.HIGH,\n      }],\n    },\n  },\n});\n"]}
+{"version":3,"file":"provider-call-records.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAClH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAElF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAC5E,sBAA8C,EAC9C,EAAE,CAAC,0CAA0C,CAG7C;IACA,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,qBAAqB;IAC1D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,qBAAqB,CAAC;IACnG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB;;;;;;OAMG;IACH,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,SAAS,EAAE;IAEzE;;;;;;;OAOG;IACH,gBAAgB,EAAE;QAChB,cAAc,EAAE,kBAAkB,CAAC,gBAAgB;QACnD,UAAU,EAAE,mBAAmB,CAAC,OAAO;KACxC;IAED,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,WAAW;KAClC;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,iGAAiG;QACjG,oGAAoG;QACpG,0CAA0C;QAC1C,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;YACnC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C,CAAC;SACH;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Provider-call records: resource configuration (engine-internal, no HTTP surface).\n *\n * Every variant is `REPOSITORY_ONLY`, the `JOB_EXECUTIONS` shape: the ONE writer is the engine's\n * provider-call recorder, and the ONE reader is the provider-call evidence door, which aggregates the\n * rows for a window rather than handing any of them over. No route is generated, so nothing here is\n * reachable except through those two.\n *\n * The writer uses the repository directly rather than the trusted-system-write primitive on purpose:\n * `createAsSystem` emits a `SYSTEM_CONTEXT_WRITE` audit row per call, which here would put one audit\n * row beside every provider call. This row is itself the record; auditing its creation would double\n * the volume and say nothing the row does not.\n *\n * APPEND-ONLY: there is no UPDATE. A call happened; a later call is a new row. `DELETE_MANY` exists\n * only for the retention-class sweep, which deletes rows past the application's declared\n * `OPERATIONAL_LOGS` period (#1613).\n */\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { DataRetentionClass, RetentionStartPoint } from '../compliance/privacy/retention-schedule.shared.schemas';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ProviderCallRecordSchema } from './provider-call-records.shared.schemas';\n\nexport const providerCallRecordsResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[],\n) => createResourceConfiguration_Initialization<undefined,\n  CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.LIST | CoreResourceOperation.DELETE_MANY,\n  typeof ProviderCallRecordSchema\n>({\n  mainSchema: ProviderCallRecordSchema,\n  resourceIdentifier: CoreResourceType.PROVIDER_CALL_RECORDS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.PROVIDER_CALL_RECORDS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  /*\n   * Subject-export: FORBIDDEN, and deliberately NO `retentionPolicy`. A provider-call record holds no\n   * content and names no person (see the schema header), so it is not data about a subject and no\n   * erasure visits it. FORBIDDEN rather than undeclared so the decision is visible, the\n   * `JOB_EXECUTIONS` precedent. If a field ever attributes a call to a person, this exemption is wrong\n   * and must be revisited in the same change.\n   */\n  systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },\n\n  /*\n   * Kept for the application's declared OPERATIONAL_LOGS period, counted from the call (#1613). This\n   * replaced a hard-coded 400-day `.ttl()`: a resource carrying its own number can drift from the period\n   * the privacy notice states, which is the defect the retention schedule exists to remove. These are the\n   * per-call DETAIL rows; the durable per-period cost aggregates are a separate business record (#1598).\n   * An application that has not declared OPERATIONAL_LOGS keeps these rows until it does, and is told so\n   * at every sweep.\n   */\n  retentionBinding: {\n    retentionClass: DataRetentionClass.OPERATIONAL_LOGS,\n    startPoint: RetentionStartPoint.CREATED,\n  },\n\n  coreOperations: [\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.DELETE_MANY,\n  ],\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    [CoreResourceOperation.READ]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    [CoreResourceOperation.LIST]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    // The retention-class sweep deletes expired pages through the SERVICE layer, which resolves only\n    // INTERNAL_CALL (not REPOSITORY_ONLY) — and INTERNAL_CALL is route-less too, so enforcing retention\n    // still creates no public deletion route.\n    [CoreResourceOperation.DELETE_MANY]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.INTERNAL_CALL,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.HIGH,\n      }],\n    },\n  },\n});\n"]}

package/dist/esm/flows-actors/provider-call-records.shared.schemas.d.ts

@@ -30,23 +30,13 @@
  *
  * ## Retention
  *
- * Every row carries its own absolute expiry, {@link PROVIDER_CALL_RECORD_RETENTION_MS} after the call,
- * enforced by the framework's `.ttl()` mechanism: a TTL index on MongoDB and the bounded
- * `resource-retention-sweep` batch on PostgreSQL. Absolute rather than a window measured from a field,
- * so a later per-application retention choice changes what is WRITTEN and never needs a schema change,
- * the shape the scheduled-evidence records already use.
+ * Kept for the application's declared `OPERATIONAL_LOGS` period, counted from the call's `createdAt`:
+ * the resource binds that class (`retentionBinding`), and the retention-class sweep deletes expired rows
+ * on both adapters (#1613). It used to carry its own 400-day `expiresAt` + `.ttl()`, a period no
+ * operator declared and that could drift from the one the privacy notice states.
  */
 import { z } from 'zod';
 import { AgentCallOutcome, AgentCallTraceKind, type AgentCallTrace } from './agent-traceability.shared.schemas';
-/**
- * How long a provider-call record is kept: 400 days.
- *
- * The period this repository already keeps retained evidence for (scheduled-run evidence), chosen so
- * that one year of calls is always citable with a margin for the review that reads it. It belongs to
- * the `AUDIT_LOGS` retention class in spirit: the record an operator needs to show what the application
- * sent to whom, kept longer than operational logs for that reason.
- */
-export declare const PROVIDER_CALL_RECORD_RETENTION_MS: number;
 export declare const ProviderCallRecordSchema: z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
@@ -63,9 +53,13 @@ export declare const ProviderCallRecordSchema: z.ZodObject<{
     completionTokens: z.ZodOptional<z.ZodNumber>;
     totalTokens: z.ZodOptional<z.ZodNumber>;
     usageComplete: z.ZodOptional<z.ZodBoolean>;
+    noCacheTokens: z.ZodOptional<z.ZodNumber>;
+    cacheReadTokens: z.ZodOptional<z.ZodNumber>;
+    cacheWriteTokens: z.ZodOptional<z.ZodNumber>;
+    textTokens: z.ZodOptional<z.ZodNumber>;
+    reasoningTokens: z.ZodOptional<z.ZodNumber>;
     errorName: z.ZodOptional<z.ZodString>;
     errorCode: z.ZodOptional<z.ZodString>;
-    expiresAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>;
     createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
 }, z.core.$strip>;
 export type ProviderCallRecord = z.infer<typeof ProviderCallRecordSchema>;
@@ -117,6 +111,10 @@ export declare const ProviderCallEvidenceSchema: z.ZodObject<{
         promptTokens: z.ZodNumber;
         completionTokens: z.ZodNumber;
         totalTokens: z.ZodNumber;
+        cacheReadTokens: z.ZodNumber;
+        cacheWriteTokens: z.ZodNumber;
+        reasoningTokens: z.ZodNumber;
+        callsReportingReasoning: z.ZodNumber;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type ProviderCallEvidence = z.infer<typeof ProviderCallEvidenceSchema>;

package/dist/esm/flows-actors/provider-call-records.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-call-records.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAEhH;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,QAA4B,CAAC;AAE3E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;iBAmDnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAO1E;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,cAAc,EACrB,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,IAAI,CAAA;CAAE,GACzE,IAAI,CAAC,kBAAkB,EAAE,KAAK,GAAG,WAAW,CAAC,CAuB/C;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;iBAiCrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
+{"version":3,"file":"provider-call-records.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAEhH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;iBAgEnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAO1E;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,cAAc,EACrB,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,IAAI,CAAA;CAAE,GACzE,IAAI,CAAC,kBAAkB,EAAE,KAAK,GAAG,WAAW,CAAC,CA2B/C;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuCrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/esm/flows-actors/provider-call-records.shared.schemas.js

@@ -30,23 +30,13 @@
  *
  * ## Retention
  *
- * Every row carries its own absolute expiry, {@link PROVIDER_CALL_RECORD_RETENTION_MS} after the call,
- * enforced by the framework's `.ttl()` mechanism: a TTL index on MongoDB and the bounded
- * `resource-retention-sweep` batch on PostgreSQL. Absolute rather than a window measured from a field,
- * so a later per-application retention choice changes what is WRITTEN and never needs a schema change,
- * the shape the scheduled-evidence records already use.
+ * Kept for the application's declared `OPERATIONAL_LOGS` period, counted from the call's `createdAt`:
+ * the resource binds that class (`retentionBinding`), and the retention-class sweep deletes expired rows
+ * on both adapters (#1613). It used to carry its own 400-day `expiresAt` + `.ttl()`, a period no
+ * operator declared and that could drift from the one the privacy notice states.
  */
 import { z } from 'zod';
 import { AgentCallOutcome, AgentCallTraceKind } from './agent-traceability.shared.schemas.js';
-/**
- * How long a provider-call record is kept: 400 days.
- *
- * The period this repository already keeps retained evidence for (scheduled-run evidence), chosen so
- * that one year of calls is always citable with a margin for the review that reads it. It belongs to
- * the `AUDIT_LOGS` retention class in spirit: the record an operator needs to show what the application
- * sent to whom, kept longer than operational logs for that reason.
- */
-export const PROVIDER_CALL_RECORD_RETENTION_MS = 400 * 24 * 60 * 60 * 1000;
 export const ProviderCallRecordSchema = z.object({
     /** Document id. `.isPrimaryKey()` is what makes the PostgreSQL planner emit the PRIMARY KEY constraint. */
     _id: z.string().isPrimaryKey().isSummaryField(),
@@ -86,11 +76,24 @@ export const ProviderCallRecordSchema = z.object({
      * complete.
      */
     usageComplete: z.boolean().optional(),
+    /**
+     * The input split the provider reported (#1598): tokens read without cache, read from a prompt cache,
+     * and written into one. Each is a part of `promptTokens`. Absent when the provider reported no split,
+     * which the cost calculator then prices as uncached input.
+     */
+    noCacheTokens: z.number().int().min(0).optional(),
+    cacheReadTokens: z.number().int().min(0).optional(),
+    cacheWriteTokens: z.number().int().min(0).optional(),
+    /**
+     * The output split the provider reported (#1598): visible text and reasoning. Each is a part of
+     * `completionTokens`, never in addition to it. Absent `reasoningTokens` means the provider did not report
+     * the split (Anthropic and Mistral do not), which is not zero reasoning.
+     */
+    textTokens: z.number().int().min(0).optional(),
+    reasoningTokens: z.number().int().min(0).optional(),
     /** On a failed call: the error's class and code only. The message is NOT kept (see the file header). */
     errorName: z.string().optional(),
     errorCode: z.string().optional(),
-    /** Absolute expiry: `calledAt` plus {@link PROVIDER_CALL_RECORD_RETENTION_MS}. */
-    expiresAt: z.date().ttl({ expireAfterSeconds: 0 }),
     createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),
 });
 /** Round a token or duration count into the integer the schema stores, or drop it when it is not a count. */
@@ -124,9 +127,13 @@ export function projectProviderCallRecord(trace, { applicationId, recordedAt })
         ...(nonNegativeInteger(usage?.completionTokens) !== undefined ? { completionTokens: nonNegativeInteger(usage?.completionTokens) } : {}),
         ...(nonNegativeInteger(usage?.totalTokens) !== undefined ? { totalTokens: nonNegativeInteger(usage?.totalTokens) } : {}),
         ...(typeof usage?.tokenUsageComplete === 'boolean' ? { usageComplete: usage.tokenUsageComplete } : {}),
+        ...(nonNegativeInteger(usage?.inputTokenDetails?.noCacheTokens) !== undefined ? { noCacheTokens: nonNegativeInteger(usage?.inputTokenDetails?.noCacheTokens) } : {}),
+        ...(nonNegativeInteger(usage?.inputTokenDetails?.cacheReadTokens) !== undefined ? { cacheReadTokens: nonNegativeInteger(usage?.inputTokenDetails?.cacheReadTokens) } : {}),
+        ...(nonNegativeInteger(usage?.inputTokenDetails?.cacheWriteTokens) !== undefined ? { cacheWriteTokens: nonNegativeInteger(usage?.inputTokenDetails?.cacheWriteTokens) } : {}),
+        ...(nonNegativeInteger(usage?.outputTokenDetails?.textTokens) !== undefined ? { textTokens: nonNegativeInteger(usage?.outputTokenDetails?.textTokens) } : {}),
+        ...(nonNegativeInteger(usage?.outputTokenDetails?.reasoningTokens) !== undefined ? { reasoningTokens: nonNegativeInteger(usage?.outputTokenDetails?.reasoningTokens) } : {}),
         ...(trace.error?.name ? { errorName: trace.error.name } : {}),
         ...(trace.error?.code ? { errorCode: trace.error.code } : {}),
-        expiresAt: new Date(calledAt.getTime() + PROVIDER_CALL_RECORD_RETENTION_MS),
     };
 }
 /**
@@ -176,6 +183,12 @@ export const ProviderCallEvidenceSchema = z.object({
         promptTokens: z.number().min(0),
         completionTokens: z.number().min(0),
         totalTokens: z.number().min(0),
+        /** Sums of the reported input and output splits (#1598). A call that reported no split adds nothing. */
+        cacheReadTokens: z.number().min(0),
+        cacheWriteTokens: z.number().min(0),
+        reasoningTokens: z.number().min(0),
+        /** Calls in this group whose provider reported the reasoning split, so a zero sum is readable. */
+        callsReportingReasoning: z.number().int().min(0),
     })),
 });
 //# sourceMappingURL=provider-call-records.shared.schemas.js.map