PR Vision v0.3.0: per-call cost accountability + LLM call audit trail
P0 security: - PRV_Gateway_Client: remove response body from RuntimeException (HTTP status only) - PRV_Capture_Writer: allowlist-only write (prompt/response text, never headers/auth) - Mandatory capture order: can_afford → probe → persist_result → update_row_cost → write_meta → capture_io - capture_io last and wrapped in swallowing try/catch New tables (SCHEMA_VERSION 3): - prv_call_meta: cost/metadata per call, kept indefinitely - prv_call_io: rendered prompt + raw response, pruned on retention window (default 90d) New classes: - PRV_Call_Meta_Table, PRV_Call_Io_Table: table schema + dbDelta - PRV_Capture_Writer: metadata + I/O write; security allowlist enforced - PRV_Prune_Cron: daily prv_daily_prune cron deletes aged prv_call_io rows only - PRV_Cost_Rollup_Query: MTD summary, model breakdown, drill-down, projection - PRV_Call_Log_Query: paginated + filtered call-log query + per-call I/O fetch - PRV_Costs_Page + PRV_Costs_Renderer: Costs admin sub-page (cap progress, bento, model table, drill-down) - PRV_Call_Log_Page + PRV_Call_Log_Table_Renderer: Call Log admin sub-page (filter bar, paginated table, WCAG AA pagination) - PRV_Call_Drawer_Renderer: non-modal complementary drawer (5 states: Normal/Pruned/Legacy/Failed/Loading) - PRV_Call_Drawer_Script: inline JS for drawer (300-line split from renderer) - PRV_Call_Detail_Ajax: wp_ajax_prv_call_detail AJAX handler - PRV_Admin_Page_Css: CSS provider (300-line split from PRV_Admin_Page) - PRV_Probe_Run_Executor: inner probe loop (300-line split from PRV_Probe_Runner) Updated: - PRV_Probe_Result: tokens_in/tokens_out params + getters - Both providers: report tokens_in/tokens_out from usage.prompt_tokens/completion_tokens - PRV_Probe_Runner: slimmed to lock+UUID+delegation; injects PRV_Capture_Writer - PRV_Config: get_io_retention_days(); PRV_IO_RETENTION_DEFAULT_DAYS constant - PRV_Upgrader/Activator/Deactivator/Plugin: register new tables, cron, pages, AJAX - Settings: retention days field + save in controller - uninstall.php: DROP both new tables, clear prv_daily_prune cron - Subnav 4-tab strip (Dashboard | Costs | Call Log | Settings) on all pages - ARCHITECTURE.md, CHANGELOG.md, CONTEXT.md, CONVENTIONS.md updated Tests: - test-capture-writer.php: write_meta, write_io, P0 security (401 record has no key/Bearer/sk-or-) - test-cost-audit.php: MTD reconciliation, projection, prune, forced capture_io exception, table drops Agent-Session: peptiderepo-geomonitor-v0.3.0-cost-audit
This commit is contained in:
peptiderepo
146
includes/core/class-prv-capture-writer.php
Normal file
146
includes/core/class-prv-capture-writer.php
Normal file
@@ -0,0 +1,146 @@
|
||||
<?php
|
||||
/**
|
||||
* Best-effort per-call capture writer (v0.3.0).
|
||||
*
|
||||
* @package PrVision
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/**
|
||||
* Writes per-call cost/metadata and I/O records after a probe completes.
|
||||
*
|
||||
* Security contract (P0):
|
||||
* - Accepts only the rendered request BODY (messages + model + params).
|
||||
* - NEVER receives $headers, $parsed_args, Authorization, or api keys.
|
||||
* - Allowlist: prompt_text, response_text, model, peptide_slug, intent_label,
|
||||
* tokens_in, tokens_out, cost_usd, latency_ms, cited, http_status,
|
||||
* config_version, visibility_row, run_id, captured_at.
|
||||
*
|
||||
* Capture is BEST-EFFORT: capture_io() is wrapped in a swallowing try/catch
|
||||
* by the caller (PRV_Probe_Runner). A write failure must never reach the probe
|
||||
* path or corrupt cap accounting.
|
||||
*
|
||||
* Who triggers: PRV_Probe_Runner — capture_io() is called LAST, after
|
||||
* persist_result() and update_row_cost() complete.
|
||||
* Dependencies: $wpdb, PRV_Call_Meta_Table, PRV_Call_Io_Table.
|
||||
*
|
||||
* @see class-prv-call-meta-table.php — Metadata table (kept indefinitely).
|
||||
* @see class-prv-call-io-table.php — I/O table (pruned on retention window).
|
||||
* @see class-prv-probe-runner.php — Caller; wraps capture_io() in try/catch.
|
||||
* @see ARCHITECTURE.md — §Capture flow v0.3.0.
|
||||
* @package PrVision
|
||||
*/
|
||||
class PRV_Capture_Writer {
|
||||
|
||||
/**
|
||||
* Write one metadata row to prv_call_meta.
|
||||
*
|
||||
* Called inside the probe loop BEFORE capture_io() so the metadata row
|
||||
* exists even when the I/O write fails. Returns the inserted row ID.
|
||||
*
|
||||
* Side effects: Database write to prv_call_meta.
|
||||
*
|
||||
* @param array<string, mixed> $meta Allowlisted fields: visibility_row (int|null),
|
||||
* run_id (string), peptide_slug (string), model (string), intent_label (string),
|
||||
* tokens_in (int|null), tokens_out (int|null), cost_usd (float),
|
||||
* latency_ms (int|null), cited (int|null), http_status (int),
|
||||
* config_version (int|null).
|
||||
*
|
||||
* @return int Inserted row ID, or 0 on failure.
|
||||
*/
|
||||
public function write_meta( array $meta ): int {
|
||||
global $wpdb;
|
||||
|
||||
$now = current_time( 'mysql', true );
|
||||
$table = PRV_Call_Meta_Table::get_table_name();
|
||||
|
||||
// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
|
||||
$wpdb->insert(
|
||||
$table,
|
||||
array(
|
||||
'visibility_row' => isset( $meta['visibility_row'] ) ? (int) $meta['visibility_row'] : null,
|
||||
'run_id' => (string) ( $meta['run_id'] ?? '' ),
|
||||
'peptide_slug' => (string) ( $meta['peptide_slug'] ?? '' ),
|
||||
'model' => (string) ( $meta['model'] ?? '' ),
|
||||
'intent_label' => (string) ( $meta['intent_label'] ?? '' ),
|
||||
'tokens_in' => isset( $meta['tokens_in'] ) ? (int) $meta['tokens_in'] : null,
|
||||
'tokens_out' => isset( $meta['tokens_out'] ) ? (int) $meta['tokens_out'] : null,
|
||||
'cost_usd' => number_format( (float) ( $meta['cost_usd'] ?? 0.0 ), 8, '.', '' ),
|
||||
'latency_ms' => isset( $meta['latency_ms'] ) ? (int) $meta['latency_ms'] : null,
|
||||
'cited' => isset( $meta['cited'] ) ? (int) $meta['cited'] : null,
|
||||
'http_status' => (int) ( $meta['http_status'] ?? 200 ),
|
||||
'captured_at' => $now,
|
||||
'config_version' => isset( $meta['config_version'] ) ? (int) $meta['config_version'] : null,
|
||||
),
|
||||
array( '%d', '%s', '%s', '%s', '%s', '%d', '%d', '%s', '%d', '%d', '%d', '%s', '%d' )
|
||||
);
|
||||
|
||||
return (int) $wpdb->insert_id;
|
||||
}
|
||||
|
||||
/**
|
||||
* Write one I/O row to prv_call_io (best-effort; caller must catch).
|
||||
*
|
||||
* Security: only prompt_text and response_text are stored — never
|
||||
* headers, Authorization, or any raw HTTP request object.
|
||||
*
|
||||
* Side effects: Database write to prv_call_io.
|
||||
*
|
||||
* @param int $call_id FK to prv_call_meta.id.
|
||||
* @param string $prompt_text Rendered plain-text prompt (messages joined).
|
||||
* @param string $response_text Raw text content from LLM response.
|
||||
*
|
||||
* @return bool True on success.
|
||||
*/
|
||||
public function write_io( int $call_id, string $prompt_text, string $response_text ): bool {
|
||||
global $wpdb;
|
||||
|
||||
$table = PRV_Call_Io_Table::get_table_name();
|
||||
$now = current_time( 'mysql', true );
|
||||
|
||||
// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
|
||||
$result = $wpdb->insert(
|
||||
$table,
|
||||
array(
|
||||
'call_id' => $call_id,
|
||||
'prompt_text' => $prompt_text,
|
||||
'response_text' => $response_text,
|
||||
'captured_at' => $now,
|
||||
),
|
||||
array( '%d', '%s', '%s', '%s' )
|
||||
);
|
||||
|
||||
return false !== $result;
|
||||
}
|
||||
|
||||
/**
|
||||
* Update cost_usd on an existing prv_call_meta row.
|
||||
*
|
||||
* Called after the probe returns its actual cost, mirroring the pattern
|
||||
* already used by PRV_Cost_Ledger::update_row_cost() for prv_ai_visibility.
|
||||
*
|
||||
* Side effects: Database write to prv_call_meta.
|
||||
*
|
||||
* @param int $call_id PK of the prv_call_meta row.
|
||||
* @param float $cost_usd Settled cost in USD.
|
||||
*
|
||||
* @return bool True on success.
|
||||
*/
|
||||
public function update_meta_cost( int $call_id, float $cost_usd ): bool {
|
||||
global $wpdb;
|
||||
|
||||
$table = PRV_Call_Meta_Table::get_table_name();
|
||||
|
||||
// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
|
||||
$result = $wpdb->update(
|
||||
$table,
|
||||
array( 'cost_usd' => number_format( $cost_usd, 8, '.', '' ) ),
|
||||
array( 'id' => $call_id ),
|
||||
array( '%s' ),
|
||||
array( '%d' )
|
||||
);
|
||||
|
||||
return false !== $result;
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user