4eee9f5f64
P0 security: - PRV_Gateway_Client: remove response body from RuntimeException (HTTP status only) - PRV_Capture_Writer: allowlist-only write (prompt/response text, never headers/auth) - Mandatory capture order: can_afford → probe → persist_result → update_row_cost → write_meta → capture_io - capture_io last and wrapped in swallowing try/catch New tables (SCHEMA_VERSION 3): - prv_call_meta: cost/metadata per call, kept indefinitely - prv_call_io: rendered prompt + raw response, pruned on retention window (default 90d) New classes: - PRV_Call_Meta_Table, PRV_Call_Io_Table: table schema + dbDelta - PRV_Capture_Writer: metadata + I/O write; security allowlist enforced - PRV_Prune_Cron: daily prv_daily_prune cron deletes aged prv_call_io rows only - PRV_Cost_Rollup_Query: MTD summary, model breakdown, drill-down, projection - PRV_Call_Log_Query: paginated + filtered call-log query + per-call I/O fetch - PRV_Costs_Page + PRV_Costs_Renderer: Costs admin sub-page (cap progress, bento, model table, drill-down) - PRV_Call_Log_Page + PRV_Call_Log_Table_Renderer: Call Log admin sub-page (filter bar, paginated table, WCAG AA pagination) - PRV_Call_Drawer_Renderer: non-modal complementary drawer (5 states: Normal/Pruned/Legacy/Failed/Loading) - PRV_Call_Drawer_Script: inline JS for drawer (300-line split from renderer) - PRV_Call_Detail_Ajax: wp_ajax_prv_call_detail AJAX handler - PRV_Admin_Page_Css: CSS provider (300-line split from PRV_Admin_Page) - PRV_Probe_Run_Executor: inner probe loop (300-line split from PRV_Probe_Runner) Updated: - PRV_Probe_Result: tokens_in/tokens_out params + getters - Both providers: report tokens_in/tokens_out from usage.prompt_tokens/completion_tokens - PRV_Probe_Runner: slimmed to lock+UUID+delegation; injects PRV_Capture_Writer - PRV_Config: get_io_retention_days(); PRV_IO_RETENTION_DEFAULT_DAYS constant - PRV_Upgrader/Activator/Deactivator/Plugin: register new tables, cron, pages, AJAX - Settings: retention days field + save in controller - uninstall.php: DROP both new tables, clear prv_daily_prune cron - Subnav 4-tab strip (Dashboard | Costs | Call Log | Settings) on all pages - ARCHITECTURE.md, CHANGELOG.md, CONTEXT.md, CONVENTIONS.md updated Tests: - test-capture-writer.php: write_meta, write_io, P0 security (401 record has no key/Bearer/sk-or-) - test-cost-audit.php: MTD reconciliation, projection, prune, forced capture_io exception, table drops Agent-Session: peptiderepo-geomonitor-v0.3.0-cost-audit
103 lines
2.7 KiB
PHP
103 lines
2.7 KiB
PHP
<?php
|
|
/**
|
|
* PR Vision Costs admin sub-page (v0.3.0).
|
|
*
|
|
* @package PrVision
|
|
*/
|
|
|
|
declare(strict_types=1);
|
|
|
|
/**
|
|
* Costs sub-page: MTD spend, cap progress, model breakdown, drill-down.
|
|
*
|
|
* Registers "PR Vision > Costs" sub-menu and renders the Costs page via
|
|
* PRV_Costs_Renderer. All data is read from PRV_Cost_Rollup_Query.
|
|
*
|
|
* Who triggers: PRV_Plugin::init() — is_admin() guard.
|
|
* Dependencies: PRV_Cost_Rollup_Query, PRV_Costs_Renderer, PRV_Config.
|
|
*
|
|
* @see class-prv-costs-renderer.php — HTML rendering.
|
|
* @see class-prv-cost-rollup-query.php — Query layer.
|
|
* @see class-prv-admin-page.php — Dashboard (parent menu slug).
|
|
* @package PrVision
|
|
*/
|
|
class PRV_Costs_Page {
|
|
|
|
/**
|
|
* Admin menu slug.
|
|
*/
|
|
const MENU_SLUG = 'pr-vision-costs';
|
|
|
|
/**
|
|
* Register WordPress admin hooks.
|
|
*
|
|
* Side effects: Adds admin_menu action.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function register_hooks(): void {
|
|
add_action( 'admin_menu', array( $this, 'add_submenu' ) );
|
|
}
|
|
|
|
/**
|
|
* Register the Costs sub-menu under PR Vision.
|
|
*
|
|
* Side effects: Adds a WP admin sub-menu entry.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function add_submenu(): void {
|
|
add_submenu_page(
|
|
PRV_Admin_Page::MENU_SLUG,
|
|
__( 'PR Vision — Costs', 'pr-vision' ),
|
|
__( 'Costs', 'pr-vision' ),
|
|
'manage_options',
|
|
self::MENU_SLUG,
|
|
array( $this, 'render_page' )
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Render the full Costs page.
|
|
*
|
|
* Side effects: Outputs HTML.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function render_page(): void {
|
|
if ( ! current_user_can( 'manage_options' ) ) {
|
|
wp_die( esc_html__( 'Insufficient permissions.', 'pr-vision' ) );
|
|
}
|
|
|
|
$query = new PRV_Cost_Rollup_Query();
|
|
$summary = $query->get_mtd_summary();
|
|
$models = $query->get_model_breakdown();
|
|
|
|
// Drill-down parameters.
|
|
// phpcs:ignore WordPress.Security.NonceVerification.Recommended
|
|
$level = isset( $_GET['prv_level'] ) ? sanitize_text_field( wp_unslash( $_GET['prv_level'] ) ) : 'run';
|
|
// phpcs:ignore WordPress.Security.NonceVerification.Recommended
|
|
$offset = isset( $_GET['prv_offset'] ) ? absint( wp_unslash( $_GET['prv_offset'] ) ) : 0;
|
|
$drill = $query->get_drill_down( $level, $offset );
|
|
|
|
$cap = PRV_Config::get_monthly_budget_usd();
|
|
$mtd_cost = $summary['total_cost'];
|
|
$projected = $query->project_month_end( $mtd_cost );
|
|
|
|
$renderer = new PRV_Costs_Renderer();
|
|
$renderer->render(
|
|
array(
|
|
'mtd_cost' => $mtd_cost,
|
|
'total_calls' => $summary['total_calls'],
|
|
'avg_cost' => $summary['avg_cost'],
|
|
'cap' => $cap,
|
|
'projected' => $projected,
|
|
'models' => $models,
|
|
'drill' => $drill,
|
|
'level' => $level,
|
|
'offset' => $offset,
|
|
)
|
|
);
|
|
}
|
|
}
|