GeezerVison

Copy link

Copy Markdown

Contributor

SasSwart added this pull request to stack #30737 October 14, 2026 06:51

SasSwart force-pushed the sdlcgraph/aigov-612-5-api branch from 2bb1898 to fca688a Compare October 14, 2026 12:42

SasSwart force-pushed the sdlcgraph/aigov-612-5-api branch from fca688a to 1c1f8ee Compare October 15, 2026 07:53

SasSwart force-pushed the sdlcgraph/aigov-612-5-api branch from 1c1f8ee to 3f3c081 Compare October 15, 2026 11:12

SasSwart force-pushed the sdlcgraph/aigov-612-5-api branch from 3f3c081 to f2a98ad Compare October 16, 2026 10:22

SasSwart force-pushed the sdlcgraph/aigov-612-5-api branch from f2a98ad to dbad92e Compare October 19, 2026 08:56

… validation (#30716)

Moves request body decoding and per-price validation out of the
site-wide `upsertAIModelPrices` handler, so the organization price
handler later in this stack can reuse them.

- The handler still reads the body and writes the HTTP errors.
`writeAIModelPricesBodyReadError` picks 413 or 400.
- `decodeAIModelPricesBody` only decodes, and returns an error.
- `aiModelPriceKeys` holds the JSON keys present in one price, so
validation can tell an explicit `null` apart from a missing price.
- `validateAIModelPriceValues` checks the four prices of one model
price. It takes them as an `aiModelTokenPrices` struct, so callers set
each price by name and cannot pass them in the wrong order.

No behavior change. The existing `TestUpsertAIModelPrices`,
`TestListAIModelPrices` and `TestValidateAIModelPrices` cover the
site-wide handler.

**Used later:** #30720 reuses the body read error, the price keys and
the value validation for its single-price upsert.

---

*This PR was generated by Coder Agents on behalf of @SasSwart.*

SasSwart force-pushed the sdlcgraph/aigov-612-5-api branch 2 times, most recently from 19145a1 to d280997 Compare October 19, 2026 12:22

SasSwart force-pushed the sdlcgraph/aigov-612-5-api branch from d280997 to 09b9751 Compare October 21, 2026 06:38

SasSwart force-pushed the sdlcgraph/aigov-612-5-api branch from 09b9751 to 753930e Compare October 21, 2026 07:20

Adds the store queries for organization AI model prices in
`ai_model_configs`, with authorization. They cover basic CRUD on one
price, keyed by `(organization_id, provider_id, model)`.

- `GetOrganizationAIProviderModelPrice` reads one price.
- `UpsertOrganizationAIProviderModelPrice` sets one price, with typed
params. It rewrites an existing row only when a price differs, so
`updated_at` records the last change.
- `DeleteOrganizationAIProviderModelPrice` soft deletes one price. Reads
and upserts only match live rows, so setting a price after a delete
inserts a new live row.

All three authorize against `ResourceAiModelPrice.InOrg(org)`. The new
`AiModelPriceInOrg` case in `TestRolePermissions` pins that only owners
and org admins pass. A TODO in dbauthz notes that this should become a
resource for AI Governance model config.

Each query has its own test. The upsert tests cover that identical
prices leave `updated_at` unchanged, that changed prices advance it, and
that an empty model is rejected.

**Used later:** #30719 seeds its lookup tests with the upsert. #30720
serves all three through the org price API.

---

*This PR was generated by Coder Agents on behalf of @SasSwart.*

Base automatically changed from sdlcgraph/aigov-612-4-lookup to main October 22, 2026 15:13

Prices token usage by the most specific match: the organization's price
for the configured provider, then a site-wide custom price, then the
price book. The requested model is still preferred over the model the
provider reports.

- `GetAIModelPriceForProvider` replaces
`GetAIModelPriceByProviderModel`, which is removed. It is one `UNION
ALL` of primary-key lookups, ordered by requested model first, then by
specificity. dbauthz checks `ResourceAiModelPrice`, scoped to the org
when one is given.
- `coderd/aibridge/prices` tests read seeded prices through
`GetAIModelPrices`.

Interceptions don't carry an organization yet, so
`resolveTokenUsageCost` passes none and only site-wide prices apply at
runtime for now (AIGOV-716). Org matching is covered by database tests
with explicit org IDs. For the same reason, the unpriced-models report
still counts only site-wide prices.

**Used later:** prices set through the API in #30720 take effect here
once interceptions carry an organization.

---

*This PR was generated by Coder Agents on behalf of @SasSwart.*