@alilis/k-hat 0.1.0

package/dist/tui.js

@@ -0,0 +1,286 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { Box, Text, useApp, useInput } from 'ink';
+const MAIN_DASHBOARD_INDEX = 0;
+function n(value) { return new Intl.NumberFormat('en-US').format(value); }
+function mask(value) { return value ? '*'.repeat(Math.min(value.length, 24)) : ''; }
+function providerOf(status, id) { return status?.providers.find((item) => item.id === id); }
+function Menu({ title, items, selected }) { return _jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, color: "cyan", children: title }), items.map((item, index) => _jsxs(Text, { color: index === selected ? 'yellow' : undefined, children: [index === selected ? '› ' : '  ', item] }, `${item}-${index}`))] }); }
+function FormView({ form }) { return _jsxs(Box, { flexDirection: "column", children: [_jsxs(Text, { bold: true, color: "yellow", children: [form.action === 'edit' ? 'Edit' : 'Add', " ", form.kind] }), form.fields.map((field, index) => _jsxs(Text, { color: index === form.cursor ? 'cyan' : undefined, children: [index === form.cursor ? '› ' : '  ', field, ": ", form.secret?.[index] ? mask(form.values[index]) : form.values[index]] }, field)), _jsx(Text, { dimColor: true, children: "Tab/\u2191\u2193 next field \u00B7 Enter submit \u00B7 Esc cancel" })] }); }
+function Details({ log }) { return _jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, color: "cyan", children: "Log details" }), Object.entries(log).map(([key, value]) => _jsxs(Text, { children: [key, ": ", String(value)] }, key))] }); }
+export function Tui({ client }) {
+    const { exit } = useApp();
+    const [view, setView] = useState({ kind: 'main' });
+    const [selected, setSelected] = useState(MAIN_DASHBOARD_INDEX);
+    const [snapshot, setSnapshot] = useState({ status: null, logs: [], error: null, refreshedAt: null });
+    const [loading, setLoading] = useState(false);
+    const loadingRef = useRef(false);
+    const [notice, setNotice] = useState(null);
+    const [confirm, setConfirm] = useState(null);
+    const [form, setForm] = useState(null);
+    const [filters, setFilters] = useState({ model: '', key: '', status: '' });
+    const refresh = useCallback(async () => {
+        if (loadingRef.current)
+            return;
+        loadingRef.current = true;
+        setLoading(true);
+        try {
+            const [status, logs] = await Promise.all([client.status(), client.logs(50, filters)]);
+            setSnapshot({ status, logs, error: null, refreshedAt: new Date() });
+        }
+        catch (error) {
+            setSnapshot((current) => ({ ...current, error: error?.message ?? String(error) }));
+        }
+        finally {
+            loadingRef.current = false;
+            setLoading(false);
+        }
+    }, [client, filters]);
+    useEffect(() => { void refresh(); }, [refresh]);
+    useEffect(() => { const timer = setInterval(() => void refresh(), 5_000); return () => clearInterval(timer); }, [refresh]);
+    const providers = snapshot.status?.providers ?? [];
+    const routes = snapshot.status?.routes ?? [];
+    const currentProvider = view.kind === 'provider-menu' || view.kind === 'keys' || view.kind === 'key-menu' ? providerOf(snapshot.status, view.providerId) : undefined;
+    const currentKey = view.kind === 'key-menu' ? currentProvider?.keys.find((item) => item.id === view.keyId) : undefined;
+    const mutation = async (operation, message) => { setConfirm(null); setForm(null); setNotice('Working…'); try {
+        await operation();
+        setNotice(message);
+        await refresh();
+    }
+    catch (error) {
+        setNotice(error?.message ?? String(error));
+    } };
+    const submit = async (current) => {
+        const values = current.values.map((value) => value.trim());
+        const required = current.kind === 'key' && current.action === 'edit' ? values.slice(0, 3) : values;
+        if (required.some((value) => !value)) {
+            setNotice('Required fields are missing.');
+            return;
+        }
+        if (current.kind === 'provider') {
+            if (!['openai', 'anthropic'].includes(values[2])) {
+                setNotice('Protocol must be openai or anthropic.');
+                return;
+            }
+            const input = { name: values[1], protocol: values[2], baseUrl: values[3].replace(/\/+$/, '') };
+            await mutation(() => current.action === 'edit' && current.target?.providerId ? client.updateProvider(current.target.providerId, input) : client.createProvider({ id: values[0], ...input }), `${current.action === 'edit' ? 'Updated' : 'Added'} provider ${values[0]}`);
+        }
+        else if (current.kind === 'key') {
+            const weight = Number(values[2]);
+            if (!Number.isInteger(weight) || weight < 1) {
+                setNotice('Weight must be a positive integer.');
+                return;
+            }
+            const providerId = current.target?.providerId;
+            const keyId = current.target?.keyId;
+            if (current.action === 'edit' && providerId && keyId)
+                await mutation(() => client.updateKey(providerId, keyId, { weight, ...(values[3] ? { value: values[3] } : {}) }), `Updated key ${values[1]}`);
+            else
+                await mutation(() => client.createKey(values[0], { id: values[1], value: values[3], weight }), `Added key ${values[0]}/${values[1]}`);
+        }
+        else if (current.kind === 'route')
+            await mutation(() => current.action === 'edit' && current.target?.model ? client.updateRoute(current.target.model, values[1]) : client.createRoute(values[0], values[1]), `${current.action === 'edit' ? 'Updated' : 'Added'} route ${values[0]}`);
+        else {
+            setFilters({ model: values[0], key: values[1], status: values[2] });
+            setForm(null);
+            setNotice('Log filters updated');
+        }
+    };
+    const items = view.kind === 'main' ? ['Dashboard', 'Providers', 'Routes', 'Logs', 'Diagnostics', 'Quit']
+        : view.kind === 'providers' ? ['Add provider', ...providers.map((item) => `${item.id} (${item.protocol})`), 'Back']
+            : view.kind === 'provider-menu' ? ['View details', 'Keys', 'Edit provider', 'Delete provider', 'Back']
+                : view.kind === 'keys' ? ['Add key', ...(currentProvider?.keys ?? []).map((item) => `${item.id} (${item.status})`), 'Back']
+                    : view.kind === 'key-menu' ? ['View details', 'Edit key', 'Enable key', 'Probe key', 'Delete key', 'Back']
+                        : view.kind === 'routes' ? ['Add route', ...routes.map((item) => `${item.model} → ${item.provider}`), 'Back']
+                            : view.kind === 'route-menu' ? ['Edit route', 'Delete route', 'Back']
+                                : view.kind === 'logs' ? ['Browse recent logs', 'Set filters', 'Clear filters', 'Back']
+                                    : view.kind === 'diagnostics' ? ['Health', 'Unavailable keys', 'Rotate access token', 'Back'] : [];
+    useInput((input, key) => {
+        if (form) {
+            if (key.escape)
+                setForm(null);
+            else if (key.return)
+                void submit(form);
+            else if (key.tab || key.downArrow || key.rightArrow)
+                setForm((current) => current && ({ ...current, cursor: (current.cursor + 1) % current.fields.length }));
+            else if (key.upArrow || key.leftArrow)
+                setForm((current) => current && ({ ...current, cursor: (current.cursor + current.fields.length - 1) % current.fields.length }));
+            else if (key.backspace || key.delete)
+                setForm((current) => current && ({ ...current, values: current.values.map((value, index) => index === current.cursor ? value.slice(0, -1) : value) }));
+            else if (input && !key.ctrl && !key.meta)
+                setForm((current) => current && ({ ...current, values: current.values.map((value, index) => index === current.cursor ? value + input : value) }));
+            return;
+        }
+        if (confirm) {
+            if (input === 'y' || key.return)
+                void mutation(confirm.run, `${confirm.label} completed`);
+            else if (input === 'n' || key.escape)
+                setConfirm(null);
+            return;
+        }
+        if (input === 'q' || (key.ctrl && input === 'c'))
+            return exit();
+        if (key.escape) {
+            setView((current) => current.kind === 'main' ? current : { kind: 'main' });
+            setSelected(MAIN_DASHBOARD_INDEX);
+            return;
+        }
+        if (key.upArrow) {
+            setSelected((value) => Math.max(0, value - 1));
+            return;
+        }
+        if (key.downArrow) {
+            setSelected((value) => Math.min(Math.max(0, items.length - 1), value + 1));
+            return;
+        }
+        if (input === 'r') {
+            void refresh();
+            return;
+        }
+        if (input === 'd') {
+            setView({ kind: 'dashboard' });
+            setSelected(0);
+            return;
+        }
+        if (input === 'p') {
+            setView({ kind: 'providers' });
+            setSelected(0);
+            return;
+        }
+        if (input === 'g') {
+            setView({ kind: 'routes' });
+            setSelected(0);
+            return;
+        }
+        if (input === 'l') {
+            setView({ kind: 'logs' });
+            setSelected(0);
+            return;
+        }
+        if (input === 'i') {
+            setView({ kind: 'diagnostics' });
+            setSelected(0);
+            return;
+        }
+        if (input !== '\r' && input !== '\n' && key.return)
+            return;
+        if (!key.return)
+            return;
+        if (view.kind === 'main') {
+            const target = items[selected];
+            setView({ kind: target === 'Dashboard' ? 'dashboard' : target === 'Providers' ? 'providers' : target === 'Routes' ? 'routes' : target === 'Logs' ? 'logs' : target === 'Diagnostics' ? 'diagnostics' : 'main' });
+            setSelected(0);
+            if (target === 'Quit')
+                exit();
+        }
+        else if (view.kind === 'providers') {
+            if (selected === 0)
+                setForm({ kind: 'provider', action: 'create', fields: ['id', 'name', 'protocol', 'base URL'], values: ['', '', 'openai', ''], cursor: 0 });
+            else if (selected <= providers.length)
+                setView({ kind: 'provider-menu', providerId: providers[selected - 1].id });
+            else
+                setView({ kind: 'main' });
+            setSelected(0);
+        }
+        else if (view.kind === 'provider-menu' && currentProvider) {
+            if (selected === 0)
+                setNotice(`${currentProvider.id}: ${currentProvider.baseUrl}`);
+            else if (selected === 1)
+                setView({ kind: 'keys', providerId: currentProvider.id });
+            else if (selected === 2)
+                setForm({ kind: 'provider', action: 'edit', target: { providerId: currentProvider.id }, fields: ['id', 'name', 'protocol', 'base URL'], values: [currentProvider.id, currentProvider.name, currentProvider.protocol, currentProvider.baseUrl], cursor: 1 });
+            else if (selected === 3)
+                setConfirm({ label: `delete provider ${currentProvider.id} and its keys/routes`, run: () => client.deleteProvider(currentProvider.id) });
+            else
+                setView({ kind: 'providers' });
+            setSelected(0);
+        }
+        else if (view.kind === 'keys' && currentProvider) {
+            if (selected === 0)
+                setForm({ kind: 'key', action: 'create', fields: ['provider', 'id', 'weight', 'secret'], values: [currentProvider.id, '', '1', ''], cursor: 1, secret: [false, false, false, true] });
+            else if (selected <= currentProvider.keys.length)
+                setView({ kind: 'key-menu', providerId: currentProvider.id, keyId: currentProvider.keys[selected - 1].id });
+            else
+                setView({ kind: 'provider-menu', providerId: currentProvider.id });
+            setSelected(0);
+        }
+        else if (view.kind === 'key-menu' && currentProvider && currentKey) {
+            if (selected === 0)
+                setNotice(`${currentKey.id}: ${currentKey.secret ?? '(missing)'}`);
+            else if (selected === 1)
+                setForm({ kind: 'key', action: 'edit', target: { providerId: currentProvider.id, keyId: currentKey.id }, fields: ['provider', 'id', 'weight', 'new secret'], values: [currentProvider.id, currentKey.id, String(currentKey.weight), ''], cursor: 2, secret: [false, false, false, true] });
+            else if (selected === 2)
+                setConfirm(currentKey.status === 'unavailable' ? { label: `enable ${currentProvider.id}/${currentKey.id}`, run: () => client.enableKey(currentProvider.id, currentKey.id) } : { label: 'Key is already available', run: async () => undefined });
+            else if (selected === 3)
+                setConfirm({ label: `probe ${currentProvider.id}/${currentKey.id}`, run: async () => { const result = await client.probeKey(currentProvider.id, currentKey.id); if (!result.ok)
+                        throw new Error(`probe returned HTTP ${result.status}`); } });
+            else if (selected === 4)
+                setConfirm({ label: `delete key ${currentProvider.id}/${currentKey.id}`, run: () => client.deleteKey(currentProvider.id, currentKey.id) });
+            else
+                setView({ kind: 'keys', providerId: currentProvider.id });
+            setSelected(0);
+        }
+        else if (view.kind === 'routes') {
+            if (selected === 0)
+                setForm({ kind: 'route', action: 'create', fields: ['model', 'provider'], values: ['', providers[0]?.id ?? ''], cursor: 0 });
+            else if (selected <= routes.length)
+                setView({ kind: 'route-menu', model: routes[selected - 1].model });
+            else
+                setView({ kind: 'main' });
+            setSelected(0);
+        }
+        else if (view.kind === 'route-menu') {
+            const route = routes.find((item) => item.model === view.model);
+            if (!route)
+                return;
+            if (selected === 0)
+                setForm({ kind: 'route', action: 'edit', target: { model: route.model }, fields: ['model', 'provider'], values: [route.model, route.provider], cursor: 1 });
+            else if (selected === 1)
+                setConfirm({ label: `delete route ${route.model}`, run: () => client.deleteRoute(route.model) });
+            else
+                setView({ kind: 'routes' });
+            setSelected(0);
+        }
+        else if (view.kind === 'logs') {
+            if (selected === 0)
+                setView({ kind: 'log-details', index: snapshot.logs.length - 1 });
+            else if (selected === 1)
+                setForm({ kind: 'logs', fields: ['model', 'key', 'status'], values: [filters.model, filters.key, filters.status], cursor: 0 });
+            else if (selected === 2) {
+                setFilters({ model: '', key: '', status: '' });
+                void refresh();
+            }
+            else
+                setView({ kind: 'main' });
+            setSelected(0);
+        }
+        else if (view.kind === 'diagnostics') {
+            if (selected === 2)
+                setConfirm({ label: 'rotate access token', run: async () => { const result = await client.rotateToken(); setNotice(`New token: ${result.token}`); } });
+            else if (selected === 3)
+                setView({ kind: 'main' });
+        }
+    });
+    let content;
+    if (form)
+        content = _jsx(FormView, { form: form });
+    else if (confirm)
+        content = _jsxs(Box, { flexDirection: "column", children: [_jsxs(Text, { color: "yellow", bold: true, children: ["Confirm: ", confirm.label, "?"] }), _jsx(Text, { children: "Press y/Enter to confirm, n/Esc to cancel." })] });
+    else if (view.kind === 'dashboard') {
+        const keys = providers.flatMap((item) => item.keys);
+        const requests = keys.reduce((sum, item) => sum + item.counters.requests, 0);
+        const failed = keys.reduce((sum, item) => sum + item.counters.failed, 0);
+        content = _jsxs(Box, { flexDirection: "column", gap: 1, children: [_jsx(Text, { bold: true, color: "cyan", children: "Dashboard" }), _jsxs(Text, { children: ["daemon: ", snapshot.error ? 'offline' : 'online', " \u00B7 ", snapshot.status?.listen ?? '—'] }), _jsxs(Text, { children: ["providers: ", providers.length, " \u00B7 keys: ", keys.length, " \u00B7 unavailable: ", keys.filter((item) => item.status === 'unavailable').length] }), _jsxs(Text, { children: ["requests: ", n(requests), " \u00B7 failed: ", n(failed), " \u00B7 success: ", requests ? `${(((requests - failed) / requests) * 100).toFixed(1)}%` : '—'] }), _jsxs(Text, { children: ["tokens: ", n(keys.reduce((sum, item) => sum + item.counters.tokensIn, 0)), " in / ", n(keys.reduce((sum, item) => sum + item.counters.tokensOut, 0)), " out"] })] });
+    }
+    else if (view.kind === 'log-details')
+        content = snapshot.logs[view.index] ? _jsx(Details, { log: snapshot.logs[view.index] }) : _jsx(Text, { children: "No log selected." });
+    else if (view.kind === 'diagnostics')
+        content = _jsxs(Box, { flexDirection: "column", children: [_jsx(Menu, { title: "Diagnostics", items: items, selected: selected }), _jsxs(Text, { dimColor: true, children: ["health: ", snapshot.error ? 'unreachable' : 'ok', " \u00B7 refreshed: ", snapshot.refreshedAt?.toLocaleTimeString() ?? '—'] })] });
+    else if (view.kind === 'logs')
+        content = _jsxs(Box, { flexDirection: "column", children: [_jsx(Menu, { title: "Logs", items: items, selected: selected }), _jsxs(Text, { dimColor: true, children: ["filters: ", filters.model || '*', " / ", filters.key || '*', " / ", filters.status || '*'] }), snapshot.logs.length > 0 && _jsxs(Text, { children: [snapshot.logs.length, " log(s) loaded"] })] });
+    else if (view.kind === 'main' || view.kind === 'providers' || view.kind === 'provider-menu' || view.kind === 'keys' || view.kind === 'key-menu' || view.kind === 'routes' || view.kind === 'route-menu')
+        content = _jsx(Menu, { title: view.kind === 'main' ? 'khat manager' : view.kind, items: items, selected: selected });
+    else
+        content = _jsx(Text, { children: "Loading\u2026" });
+    return _jsxs(Box, { flexDirection: "column", minHeight: 14, children: [_jsxs(Box, { borderStyle: "round", borderColor: "cyan", paddingX: 1, justifyContent: "space-between", children: [_jsx(Text, { bold: true, children: "khat manager" }), _jsx(Text, { children: loading ? 'refreshing' : snapshot.error ? 'offline' : 'online' })] }), _jsxs(Box, { flexDirection: "column", paddingX: 1, flexGrow: 1, children: [content, snapshot.error && !form && !confirm && _jsx(Text, { color: "red", children: snapshot.error }), notice && _jsx(Text, { color: "green", children: notice })] }), _jsx(Box, { borderStyle: "single", borderColor: "gray", paddingX: 1, children: _jsx(Text, { dimColor: true, children: "\u2191\u2193 select \u00B7 Enter open \u00B7 Esc back \u00B7 r refresh \u00B7 q quit" }) })] });
+}

package/dist/types.js

@@ -0,0 +1 @@
+export {};

package/dist/vault.js

@@ -0,0 +1,96 @@
+import { randomBytes, createCipheriv, createDecipheriv } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { saveJsonAtomic } from './config.js';
+const VAULT_VERSION = 1;
+const AAD = 'khat-vault-v1';
+// Releases before the kay->khat rename wrote their payload under this AAD; files saved that way stay readable and are rewritten under the current AAD on their next save().
+const LEGACY_AAD = 'kay-vault-v1';
+/** Vault namespace key holding the proxy access token (not a provider key). */
+export const ACCESS_TOKEN_REF = 'accessToken';
+function encrypt(master, plain) {
+    const nonce = randomBytes(12);
+    const cipher = createCipheriv('aes-256-gcm', master, nonce, { authTagLength: 16 });
+    cipher.setAAD(Buffer.from(AAD, 'utf8'));
+    const ciphertext = Buffer.concat([cipher.update(plain), cipher.final()]);
+    return { nonce: nonce.toString('base64'), ciphertext: ciphertext.toString('base64'), tag: cipher.getAuthTag().toString('base64') };
+}
+function decryptWithAad(master, payload, aad) {
+    const decipher = createDecipheriv('aes-256-gcm', master, Buffer.from(payload.nonce, 'base64'), { authTagLength: 16 });
+    decipher.setAAD(Buffer.from(aad, 'utf8'));
+    decipher.setAuthTag(Buffer.from(payload.tag, 'base64'));
+    return Buffer.concat([decipher.update(Buffer.from(payload.ciphertext, 'base64')), decipher.final()]);
+}
+function decrypt(master, payload) {
+    for (const aad of [AAD, LEGACY_AAD]) {
+        try {
+            return decryptWithAad(master, payload, aad);
+        }
+        catch { /* payload not sealed under this AAD; try the next one */ }
+    }
+    throw new Error('vault payload failed to decrypt');
+}
+export class Vault {
+    path;
+    master;
+    protector;
+    secrets;
+    constructor(path, master, protector, secrets) {
+        this.path = path;
+        this.master = master;
+        this.protector = protector;
+        this.secrets = secrets;
+    }
+    static async create(path, protector) {
+        const vault = new Vault(path, randomBytes(32), protector, {});
+        await vault.save();
+        return vault;
+    }
+    static async open(path, protector) {
+        let file;
+        try {
+            file = JSON.parse(await readFile(path, 'utf8'));
+        }
+        catch (error) {
+            if (error?.code === 'ENOENT')
+                throw new Error(`vault not found at ${path}; run khat init first`);
+            throw new Error(`vault file is unreadable: ${error.message}`);
+        }
+        if (file?.version !== VAULT_VERSION || !file.wrappedMaster || !file.payload?.nonce) {
+            throw new Error('vault file has an unsupported format');
+        }
+        const master = await protector.unprotect(Buffer.from(file.wrappedMaster, 'base64'));
+        if (master.length !== 32)
+            throw new Error('vault master key has an unexpected length');
+        let secrets;
+        try {
+            secrets = JSON.parse(decrypt(master, file.payload).toString('utf8'));
+        }
+        catch {
+            throw new Error('vault payload failed to decrypt (corrupted file, or copied from another machine)');
+        }
+        return new Vault(path, master, protector, secrets);
+    }
+    static async openOrCreate(path, protector) {
+        try {
+            await readFile(path, 'utf8');
+        }
+        catch (error) {
+            if (error?.code === 'ENOENT')
+                return Vault.create(path, protector);
+            throw error;
+        }
+        return Vault.open(path, protector);
+    }
+    get(ref) { return this.secrets[ref]; }
+    set(ref, value) { this.secrets[ref] = value; }
+    delete(ref) { delete this.secrets[ref]; }
+    async save() {
+        const payload = encrypt(this.master, Buffer.from(JSON.stringify(this.secrets), 'utf8'));
+        const file = { version: VAULT_VERSION, wrappedMaster: (await this.protector.protect(this.master)).toString('base64'), payload };
+        await saveJsonAtomic(this.path, file);
+    }
+}
+/** 256-bit random access token, printed once by `khat init` and stored only in the vault. */
+export function generateAccessToken() {
+    return `khat_${randomBytes(32).toString('base64url')}`;
+}