AICostManager

Most cost tools are dashboards: they tell you what you already spent. This one is built around enforcement. A single SDK call reports usage, the ingestion pipeline persists the raw event and returns immediately with a `triggered_limits` token, and hard limits come back as an encrypted JWT the client can verify locally — so a budget breach stops the next call at the caller, without a round trip to us and without trusting the network.

The provider catalogue synchronises from models.dev and normalises into reusable pricing templates, which is the unglamorous half: a cost tool whose price table is stale is a cost tool that lies. Usage rolls up asynchronously through Celery, exports run on a schedule with webhook delivery, and the whole thing is multi-tenant with per-team budgets and thresholds.