@antseed/cli 0.1.167 → 0.1.169

package/dist/cli/commands/gateway/shared.js

@@ -0,0 +1,90 @@
+import chalk from 'chalk';
+import { LIMIT_PERIODS } from '../../../gateway/limits.js';
+import { formatUsdc, parseUsdToUsdc } from '../../../gateway/money.js';
+import { GatewayStore } from '../../../gateway/store.js';
+import { getGlobalOptions } from '../types.js';
+export const DEFAULT_GATEWAY_PORT = 8379;
+export const LIMIT_OPTION_FLAGS = {
+    daily: '--daily-limit <usd>',
+    monthly: '--monthly-limit <usd>',
+    total: '--total-limit <usd>',
+};
+const LIMIT_OPTION_KEYS = {
+    daily: 'dailyLimit',
+    monthly: 'monthlyLimit',
+    total: 'totalLimit',
+};
+export function addLimitOptions(cmd, clearable) {
+    const suffix = clearable ? ' ("none" removes it)' : '';
+    return cmd
+        .option(LIMIT_OPTION_FLAGS.daily, `spend cap per UTC day in USD${suffix}`)
+        .option(LIMIT_OPTION_FLAGS.monthly, `spend cap per UTC calendar month in USD${suffix}`)
+        .option(LIMIT_OPTION_FLAGS.total, `lifetime spend cap in USD${suffix}`);
+}
+/** Only the periods the user passed; "none" maps to null (no cap). */
+export function parseLimitOptions(options) {
+    const limits = {};
+    for (const period of LIMIT_PERIODS) {
+        const raw = options[LIMIT_OPTION_KEYS[period]];
+        if (typeof raw !== 'string')
+            continue;
+        limits[period] = raw.trim().toLowerCase() === 'none' ? null : parseUsdToUsdc(raw);
+    }
+    return limits;
+}
+export function openGatewayStore(cmd) {
+    const { dataDir } = getGlobalOptions(cmd);
+    return { store: new GatewayStore(dataDir), dataDir };
+}
+export function describeLimits(key) {
+    const parts = LIMIT_PERIODS.flatMap((period) => {
+        const limit = key.limits[period];
+        return limit === null ? [] : [`${formatUsdc(limit)} ${period === 'total' ? 'lifetime' : period}`];
+    });
+    return parts.length > 0 ? parts.join(', ') : 'none';
+}
+export function keyStatusLabel(key, now = Date.now()) {
+    if (key.status === 'revoked')
+        return chalk.red('revoked');
+    if (key.expiresAt !== null && key.expiresAt <= now)
+        return chalk.yellow('expired');
+    return chalk.green('active');
+}
+const FACILITATOR_PRESETS = {
+    cdp: 'https://api.cdp.coinbase.com/platform/v2/x402',
+    payai: 'https://facilitator.payai.network',
+};
+const CDP_HOST = 'api.cdp.coinbase.com';
+/**
+ * x402 top-ups are on when a facilitator is configured, by flag or
+ * ANTSEED_X402_FACILITATOR_URL: a URL, or `cdp` / `payai`. Credentials only
+ * come from the environment: CDP_API_KEY_ID + CDP_API_KEY_SECRET for
+ * Coinbase CDP, or ANTSEED_X402_FACILITATOR_AUTHORIZATION for a facilitator
+ * with a static token.
+ */
+export function topupConfig(options = {}) {
+    const requested = (options.x402Facilitator ?? process.env['ANTSEED_X402_FACILITATOR_URL'] ?? '').trim();
+    if (!requested)
+        return undefined;
+    const facilitatorUrl = FACILITATOR_PRESETS[requested.toLowerCase()] ?? requested;
+    const facilitatorAuthorization = process.env['ANTSEED_X402_FACILITATOR_AUTHORIZATION']?.trim();
+    let cdp;
+    if (new URL(facilitatorUrl).host === CDP_HOST) {
+        const keyId = process.env['CDP_API_KEY_ID']?.trim();
+        const keySecret = process.env['CDP_API_KEY_SECRET']?.trim();
+        if (!keyId || !keySecret)
+            throw new Error('The Coinbase CDP facilitator needs CDP_API_KEY_ID and CDP_API_KEY_SECRET.');
+        cdp = { keyId, keySecret };
+    }
+    return {
+        facilitatorUrl,
+        ...(cdp ? { cdp } : {}),
+        ...(facilitatorAuthorization ? { facilitatorAuthorization } : {}),
+        ...(options.topupMinUsd ? { minUsd: options.topupMinUsd } : {}),
+        ...(options.topupMaxUsd ? { maxUsd: options.topupMaxUsd } : {}),
+    };
+}
+export function slugifyIdentityName(label) {
+    return label.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 32) || 'identity';
+}
+//# sourceMappingURL=shared.js.map

package/dist/cli/commands/gateway/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../../src/cli/commands/gateway/shared.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,aAAa,EAAsC,MAAM,4BAA4B,CAAA;AAC9F,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AACtE,OAAO,EAAE,YAAY,EAAqB,MAAM,2BAA2B,CAAA;AAE3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAA;AAExC,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC7D,KAAK,EAAE,qBAAqB;IAC5B,OAAO,EAAE,uBAAuB;IAChC,KAAK,EAAE,qBAAqB;CAC7B,CAAA;AAED,MAAM,iBAAiB,GAAgC;IACrD,KAAK,EAAE,YAAY;IACnB,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,YAAY;CACpB,CAAA;AAED,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,SAAkB;IAC9D,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAA;IACtD,OAAO,GAAG;SACP,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,+BAA+B,MAAM,EAAE,CAAC;SACzE,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,0CAA0C,MAAM,EAAE,CAAC;SACtF,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,4BAA4B,MAAM,EAAE,CAAC,CAAA;AAC3E,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,OAAgC;IAChE,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAA;QAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAQ;QACrC,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;IACnF,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,MAAM,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACzC,OAAO,EAAE,KAAK,EAAE,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAiB;IAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAChC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACnG,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;AACrD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAChE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACzD,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAClF,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,mBAAmB,GAA2B;IAClD,GAAG,EAAE,+CAA+C;IACpD,KAAK,EAAE,mCAAmC;CAC3C,CAAA;AACD,MAAM,QAAQ,GAAG,sBAAsB,CAAA;AAEvC;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,UAAoF,EAAE;IAChH,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACvG,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAA;IAChC,MAAM,cAAc,GAAG,mBAAmB,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,SAAS,CAAA;IAChF,MAAM,wBAAwB,GAAG,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,EAAE,IAAI,EAAE,CAAA;IAC9F,IAAI,GAA8B,CAAA;IAClC,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAA;QACnD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAA;QAC3D,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAA;QACtH,GAAG,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;IAC5B,CAAC;IACD,OAAO;QACL,cAAc;QACd,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAA;AAC3G,CAAC"}

package/dist/cli/commands/tunnel/start.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/start.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AA4IxC,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CA2F7D"}
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/start.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AA4IxC,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAqG7D"}

package/dist/cli/commands/tunnel/start.js

@@ -6,11 +6,11 @@ import chalk from 'chalk';
 import ora from 'ora';
 import { getGlobalOptions } from '../types.js';
 import { setupShutdownHandler } from '../../shutdown.js';
-import { TunnelGateway } from '../../../tunnel/gateway.js';
+import { startGatewayRuntime } from '../../../gateway/runtime.js';
+import { DEFAULT_GATEWAY_PORT, topupConfig } from '../gateway/shared.js';
 import { ensureCloudflared } from '../../../tunnel/cloudflared.js';
 import { tunnelDir, tunnelPidFile, tunnelStateFile } from './paths.js';
 const DEFAULT_BUYER_PORT = 8377;
-const DEFAULT_GATEWAY_PORT = 8379;
 function parseTunnelProvider(value) {
     const provider = value.trim().toLowerCase();
     if (provider === 'cloudflare' || provider === 'ngrok')
@@ -149,7 +149,8 @@ export function registerTunnelStartCommand(cmd) {
         .option('--buyer-port <number>', 'Local buyer proxy port', String(DEFAULT_BUYER_PORT))
         .option('--gateway-port <number>', 'Local authenticated gateway port', String(DEFAULT_GATEWAY_PORT))
         .action(async (options) => {
-        const dataDir = getGlobalOptions(cmd).dataDir;
+        const globalOptions = getGlobalOptions(cmd);
+        const dataDir = globalOptions.dataDir;
         const buyerPort = parseInt(options.buyerPort, 10) || DEFAULT_BUYER_PORT;
         const gatewayPort = parseInt(options.gatewayPort, 10) || DEFAULT_GATEWAY_PORT;
         const provider = parseTunnelProvider(options.provider ?? process.env['ANTSEED_TUNNEL_PROVIDER'] ?? 'cloudflare');
@@ -160,17 +161,25 @@ export function registerTunnelStartCommand(cmd) {
             throw new Error(`Set ${providerTokenEnvironmentName(provider)} before starting the tunnel.`);
         }
         let publicUrl = parsePublicUrl(configuredPublicUrl, provider);
-        if (apiKey.length < 16) {
-            throw new Error('ANTSEED_TUNNEL_API_KEY must be at least 16 characters.');
-        }
-        const gateway = new TunnelGateway({
-            buyerPort,
-            apiKey,
-            listenPort: gatewayPort,
-            onLog: (message) => process.stderr.write(`[tunnel] ${message}\n`),
-        });
+        const topup = topupConfig();
         const spinner = ora('Starting authenticated API gateway...').start();
-        await gateway.start();
+        let gateway;
+        try {
+            gateway = await startGatewayRuntime({
+                dataDir,
+                configPath: globalOptions.config,
+                listenPort: gatewayPort,
+                buyerPort,
+                environmentApiKey: apiKey || null,
+                ...(topup ? { topup } : {}),
+                onLog: (message) => process.stderr.write(`[tunnel] ${message}\n`),
+            });
+        }
+        catch (error) {
+            spinner.fail(chalk.red(`Could not start the API gateway: ${errorMessage(error)}`));
+            process.exitCode = 1;
+            return;
+        }
         let tunnelProcess = null;
         try {
             const binary = provider === 'cloudflare'
@@ -222,7 +231,9 @@ export function registerTunnelStartCommand(cmd) {
         }), 'utf8');
         spinner.succeed(chalk.green('Public HTTPS tunnel is running'));
         console.log(`${chalk.bold('Base URL:')} ${baseUrl}`);
-        console.log(chalk.dim('Use the same ANTSEED_TUNNEL_API_KEY as the client API key.'));
+        console.log(chalk.dim(apiKey
+            ? 'Use ANTSEED_TUNNEL_API_KEY or a key from `antseed gateway key create` as the client API key.'
+            : 'Use a key from `antseed gateway key create` as the client API key.'));
         setupShutdownHandler(async () => {
             tunnelProcess?.kill('SIGTERM');
             await gateway.stop();

package/dist/cli/commands/tunnel/start.js.map

@@ -1 +1 @@
-{"version":3,"file":"start.js","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,GAAG,MAAM,KAAK,CAAA;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEtE,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAC/B,MAAM,oBAAoB,GAAG,IAAI,CAAA;AAGjC,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAA;IACtE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAwB;IACnD,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAA;AAClE,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAwB;IAC5D,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,iBAAiB,CAAA;AACnF,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAwB;IAClD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,QAAwB;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;QACjF,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB,EAAE,SAAqB;IAC3D,OAAO;QACL,MAAM;QACN,oBAAoB,WAAW,EAAE;QACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,mBAAmB;QACnB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;KACjE,CAAA;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA+B,EAAE,QAAwB;IACtF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACvC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,KAAK,CAAC,CAAA;QACf,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,QAAQ,4BAA4B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC1E,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACpD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,YAAY,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAA;QACzH,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;IACzB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe,CAAC,KAA+B;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CAAC,KAAmB,EAAE,GAAS,EAAE,EAAE;YAChD,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACjC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACjC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC3B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACzB,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;;gBACnB,OAAO,CAAC,GAAI,CAAC,CAAA;QACpB,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACnC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;YAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;oBAC5C,IAAI,KAAK,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;wBAAC,OAAM;oBAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC1G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAClH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3D,IAAI,UAAU;QAAE,OAAO,UAAU,CAAA;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAA;IACvE,MAAM,UAAU,GAAG;QACjB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5G,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,yBAAyB,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAA;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;IACnE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACvB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,GAAG;SACA,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,MAAM,CAAC,uBAAuB,EAAE,sCAAsC,CAAC;SACvE,MAAM,CAAC,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;SACrF,MAAM,CAAC,yBAAyB,EAAE,kCAAkC,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;SACnG,MAAM,CAAC,KAAK,EAAE,OAAsE,EAAE,EAAE;QACvF,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;QAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAA;QACvE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAA;QAC7E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,YAAY,CAAC,CAAA;QAChH,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAClF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAClE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,OAAO,4BAA4B,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,SAAS,GAAG,cAAc,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAA;QAC7D,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;YAChC,SAAS;YACT,MAAM;YACN,UAAU,EAAE,WAAW;YACvB,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,IAAI,CAAC;SAClE,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,GAAG,CAAC,uCAAuC,CAAC,CAAC,KAAK,EAAE,CAAA;QACpE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;QACrB,IAAI,aAAa,GAAoC,IAAI,CAAA;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,KAAK,YAAY;gBACtC,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC;gBAClC,CAAC,CAAC,kBAAkB,EAAE,CAAA;YACxB,MAAM,IAAI,GAAG,QAAQ,KAAK,YAAY;gBACpC,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC;gBACtC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;YACrC,MAAM,iBAAiB,GAAG,QAAQ,KAAK,YAAY;gBACjD,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE;gBAC/B,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,EAAE,CAAA;YACpC,aAAa,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;gBAClC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,GAAG,iBAAiB;iBACrB;aACF,CAAC,CAAA;YACF,MAAM,eAAe,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACpF,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,eAAe,EAAE,CAAC;gBACpB,SAAS,GAAG,MAAM,eAAe,CAAA;YACnC,CAAC;iBAAM,CAAC;gBACN,MAAM,qBAAqB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;YACpB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,mBAAmB,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;YACnG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACpB,OAAM;QACR,CAAC;QAED,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAChF,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAA;QAChE,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACpD,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;QACpE,MAAM,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACvD,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ;YACR,SAAS;YACT,WAAW;YACX,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;YAC/B,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,EAAE,MAAM,CAAC,CAAA;QAEX,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA;QAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,OAAO,EAAE,CAAC,CAAA;QACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC,CAAA;QAEpF,oBAAoB,CAAC,KAAK,IAAI,EAAE;YAC9B,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YAC9B,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;YACpB,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC3D,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACN,CAAC"}
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,GAAG,MAAM,KAAK,CAAA;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,mBAAmB,EAAuB,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEtE,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAG/B,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAA;IACtE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAwB;IACnD,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAA;AAClE,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAwB;IAC5D,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,iBAAiB,CAAA;AACnF,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAwB;IAClD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,QAAwB;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;QACjF,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB,EAAE,SAAqB;IAC3D,OAAO;QACL,MAAM;QACN,oBAAoB,WAAW,EAAE;QACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,mBAAmB;QACnB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;KACjE,CAAA;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA+B,EAAE,QAAwB;IACtF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACvC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,KAAK,CAAC,CAAA;QACf,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,QAAQ,4BAA4B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC1E,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACpD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,YAAY,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAA;QACzH,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;IACzB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe,CAAC,KAA+B;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CAAC,KAAmB,EAAE,GAAS,EAAE,EAAE;YAChD,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACjC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACjC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC3B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACzB,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;;gBACnB,OAAO,CAAC,GAAI,CAAC,CAAA;QACpB,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACnC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;YAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;oBAC5C,IAAI,KAAK,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;wBAAC,OAAM;oBAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC1G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAClH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3D,IAAI,UAAU;QAAE,OAAO,UAAU,CAAA;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAA;IACvE,MAAM,UAAU,GAAG;QACjB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5G,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,yBAAyB,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAA;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;IACnE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACvB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,GAAG;SACA,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,MAAM,CAAC,uBAAuB,EAAE,sCAAsC,CAAC;SACvE,MAAM,CAAC,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;SACrF,MAAM,CAAC,yBAAyB,EAAE,kCAAkC,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;SACnG,MAAM,CAAC,KAAK,EAAE,OAAsE,EAAE,EAAE;QACvF,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAA;QACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAA;QACvE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAA;QAC7E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,YAAY,CAAC,CAAA;QAChH,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAClF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAClE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,OAAO,4BAA4B,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,SAAS,GAAG,cAAc,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAA;QAE7D,MAAM,KAAK,GAAG,WAAW,EAAE,CAAA;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,uCAAuC,CAAC,CAAC,KAAK,EAAE,CAAA;QACpE,IAAI,OAAuB,CAAA;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,mBAAmB,CAAC;gBAClC,OAAO;gBACP,UAAU,EAAE,aAAa,CAAC,MAAM;gBAChC,UAAU,EAAE,WAAW;gBACvB,SAAS;gBACT,iBAAiB,EAAE,MAAM,IAAI,IAAI;gBACjC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,IAAI,CAAC;aAClE,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;YAClF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACpB,OAAM;QACR,CAAC;QACD,IAAI,aAAa,GAAoC,IAAI,CAAA;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,KAAK,YAAY;gBACtC,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC;gBAClC,CAAC,CAAC,kBAAkB,EAAE,CAAA;YACxB,MAAM,IAAI,GAAG,QAAQ,KAAK,YAAY;gBACpC,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC;gBACtC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;YACrC,MAAM,iBAAiB,GAAG,QAAQ,KAAK,YAAY;gBACjD,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE;gBAC/B,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,EAAE,CAAA;YACpC,aAAa,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;gBAClC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,GAAG,iBAAiB;iBACrB;aACF,CAAC,CAAA;YACF,MAAM,eAAe,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACpF,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,eAAe,EAAE,CAAC;gBACpB,SAAS,GAAG,MAAM,eAAe,CAAA;YACnC,CAAC;iBAAM,CAAC;gBACN,MAAM,qBAAqB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;YACpB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,mBAAmB,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;YACnG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACpB,OAAM;QACR,CAAC;QAED,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAChF,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAA;QAChE,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACpD,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;QACpE,MAAM,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACvD,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ;YACR,SAAS;YACT,WAAW;YACX,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;YAC/B,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,EAAE,MAAM,CAAC,CAAA;QAEX,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA;QAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,OAAO,EAAE,CAAC,CAAA;QACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM;YAC1B,CAAC,CAAC,8FAA8F;YAChG,CAAC,CAAC,oEAAoE,CAAC,CAAC,CAAA;QAE1E,oBAAoB,CAAC,KAAK,IAAI,EAAE;YAC9B,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YAC9B,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;YACpB,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC3D,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/cli/index.js

@@ -14,6 +14,7 @@ import { registerMetricsCommand } from './commands/metrics.js';
 import { registerWrappedToolCommands } from './commands/wrapped-tools.js';
 import { registerSystemProxyCommands } from './commands/system-proxy/index.js';
 import { registerTunnelCommands } from './commands/tunnel/index.js';
+import { registerGatewayCommands } from './commands/gateway/index.js';
 import { registerAntsCommands } from './commands/ants/index.js';
 loadEnvFromFiles();
 import pkg from '../../package.json' with { type: 'json' };
@@ -39,6 +40,7 @@ registerMetricsCommand(program);
 registerWrappedToolCommands(program);
 registerSystemProxyCommands(program);
 registerTunnelCommands(program);
+registerGatewayCommands(program);
 registerAntsCommands(program);
 program.parse(process.argv);
 //# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,gBAAgB,EAAE,CAAC;AAEnB,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;AAE5B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,6BAA6B,CAAC;KAC1C,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,qBAAqB,EAAE,4EAA4E,CAAC;KAC3G,MAAM,CAAC,mBAAmB,EAAE,oFAAoF,CAAC;KACjH,MAAM,CAAC,eAAe,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC;AAE5D,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,2BAA2B,CAAC,OAAO,CAAC,CAAC;AACrC,2BAA2B,CAAC,OAAO,CAAC,CAAC;AACrC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAE9B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,gBAAgB,EAAE,CAAC;AAEnB,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;AAE5B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,6BAA6B,CAAC;KAC1C,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,qBAAqB,EAAE,4EAA4E,CAAC;KAC3G,MAAM,CAAC,mBAAmB,EAAE,oFAAoF,CAAC;KACjH,MAAM,CAAC,eAAe,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC;AAE5D,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,2BAA2B,CAAC,OAAO,CAAC,CAAC;AACrC,2BAA2B,CAAC,OAAO,CAAC,CAAC;AACrC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAE9B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/gateway/accounting.d.ts

@@ -0,0 +1,45 @@
+import type { AttributedSpendEvent } from '../proxy/spend-attribution.js';
+import { type LimitBreach } from './limits.js';
+import type { ApiKeyRecord, GatewayStore } from './store.js';
+export interface GatewayAccountingOptions {
+    /**
+     * Worst-case cost of one request, reserved against the key's caps while it
+     * is in flight. The buyer's maxPerRequestUsdc is the natural bound.
+     */
+    holdUsdc: number;
+    settleGraceMs?: number;
+    now?: () => number;
+}
+export declare function newRequestTag(): string;
+export type Admission = {
+    ok: true;
+    tag: string;
+} | {
+    ok: false;
+    breach: LimitBreach;
+};
+/**
+ * Hold → settle accounting per key. Admission reserves a hold so concurrent
+ * requests cannot all slip under a cap; signed spend reported by the buyer
+ * settles into the ledger, and the hold is released once the request is done.
+ * Prepaid balances and payments per key reuse the same ledger.
+ */
+export declare class GatewayAccounting {
+    private readonly _store;
+    private readonly _options;
+    private readonly _holds;
+    private readonly _settleGraceMs;
+    private readonly _now;
+    constructor(_store: GatewayStore, _options: GatewayAccountingOptions);
+    heldUsdc(keyId: string): number;
+    admit(key: ApiKeyRecord): Admission;
+    /** The response is over; keep the hold briefly for spend that is signed late. */
+    finish(tag: string): void;
+    /**
+     * Settle spend events reported by the buyer. Unknown tags belong to other
+     * clients; an event signed by a different identity than the key's is ignored.
+     */
+    ingest(bootId: string, events: readonly AttributedSpendEvent[]): number;
+    dispose(): void;
+}
+//# sourceMappingURL=accounting.d.ts.map

package/dist/gateway/accounting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounting.d.ts","sourceRoot":"","sources":["../../src/gateway/accounting.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACzE,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAA;AAE/D,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAK5D,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAID,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,MAAM,MAAM,SAAS,GACjB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAA;AAEtC;;;;;GAKG;AACH,qBAAa,iBAAiB;IAKhB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAgB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJ5E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;gBAEN,MAAM,EAAE,YAAY,EAAmB,QAAQ,EAAE,wBAAwB;IAKtG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAM/B,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,SAAS;IASnC,iFAAiF;IACjF,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAQzB;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,oBAAoB,EAAE,GAAG,MAAM;IA6BvE,OAAO,IAAI,IAAI;CAIhB"}

package/dist/gateway/accounting.js

@@ -0,0 +1,94 @@
+import { randomUUID } from 'node:crypto';
+import { findLimitBreach } from './limits.js';
+import { parseBaseUnits } from './money.js';
+/** Spend can be signed after the response ends (seller-initiated auth). */
+const DEFAULT_SETTLE_GRACE_MS = 60_000;
+export function newRequestTag() {
+    return `gw_${randomUUID()}`;
+}
+/**
+ * Hold → settle accounting per key. Admission reserves a hold so concurrent
+ * requests cannot all slip under a cap; signed spend reported by the buyer
+ * settles into the ledger, and the hold is released once the request is done.
+ * Prepaid balances and payments per key reuse the same ledger.
+ */
+export class GatewayAccounting {
+    _store;
+    _options;
+    _holds = new Map();
+    _settleGraceMs;
+    _now;
+    constructor(_store, _options) {
+        this._store = _store;
+        this._options = _options;
+        this._settleGraceMs = _options.settleGraceMs ?? DEFAULT_SETTLE_GRACE_MS;
+        this._now = _options.now ?? (() => Date.now());
+    }
+    heldUsdc(keyId) {
+        let held = 0;
+        for (const hold of this._holds.values())
+            if (hold.keyId === keyId)
+                held += hold.amountUsdc;
+        return held;
+    }
+    admit(key) {
+        const now = this._now();
+        const breach = findLimitBreach(key.limits, this._store.periodSpend(key.id, now), this.heldUsdc(key.id), now);
+        if (breach)
+            return { ok: false, breach };
+        const tag = newRequestTag();
+        this._holds.set(tag, { keyId: key.id, amountUsdc: this._options.holdUsdc, finished: false, timer: null });
+        return { ok: true, tag };
+    }
+    /** The response is over; keep the hold briefly for spend that is signed late. */
+    finish(tag) {
+        const hold = this._holds.get(tag);
+        if (!hold || hold.finished)
+            return;
+        hold.finished = true;
+        hold.timer = setTimeout(() => this._holds.delete(tag), this._settleGraceMs);
+        hold.timer.unref?.();
+    }
+    /**
+     * Settle spend events reported by the buyer. Unknown tags belong to other
+     * clients; an event signed by a different identity than the key's is ignored.
+     */
+    ingest(bootId, events) {
+        let recorded = 0;
+        for (const event of events) {
+            const request = this._store.findRequest(event.tag);
+            if (!request || request.buyerIdentity !== event.buyerIdentity)
+                continue;
+            const inserted = this._store.recordLedgerEntry({
+                kind: 'spend',
+                keyId: request.keyId,
+                buyerIdentity: request.buyerIdentity,
+                amountUsdc: parseBaseUnits(event.amountUsdc),
+                externalRef: `spend:${bootId}:${event.seq}`,
+                requestTag: event.tag,
+                sellerPeerId: event.sellerPeerId,
+                inputTokens: parseBaseUnits(event.inputTokens),
+                cachedInputTokens: parseBaseUnits(event.cachedInputTokens),
+                outputTokens: parseBaseUnits(event.outputTokens),
+                createdAt: event.at,
+            });
+            if (!inserted)
+                continue;
+            recorded += 1;
+            // Settled spend replaces that much of the request's worst-case hold.
+            // The rest stays until the grace period ends: one request can sign
+            // several deltas, and later ones still need to be covered.
+            const hold = this._holds.get(event.tag);
+            if (hold)
+                hold.amountUsdc = Math.max(0, hold.amountUsdc - parseBaseUnits(event.amountUsdc));
+        }
+        return recorded;
+    }
+    dispose() {
+        for (const hold of this._holds.values())
+            if (hold.timer)
+                clearTimeout(hold.timer);
+        this._holds.clear();
+    }
+}
+//# sourceMappingURL=accounting.js.map

package/dist/gateway/accounting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounting.js","sourceRoot":"","sources":["../../src/gateway/accounting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,eAAe,EAAoB,MAAM,aAAa,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAG3C,2EAA2E;AAC3E,MAAM,uBAAuB,GAAG,MAAM,CAAA;AActC,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,UAAU,EAAE,EAAE,CAAA;AAC7B,CAAC;AAMD;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IAKC;IAAuC;IAJnD,MAAM,GAAG,IAAI,GAAG,EAAgB,CAAA;IAChC,cAAc,CAAQ;IACtB,IAAI,CAAc;IAEnC,YAA6B,MAAoB,EAAmB,QAAkC;QAAzE,WAAM,GAAN,MAAM,CAAc;QAAmB,aAAQ,GAAR,QAAQ,CAA0B;QACpG,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,aAAa,IAAI,uBAAuB,CAAA;QACvE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAChD,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,IAAI,IAAI,IAAI,CAAC,UAAU,CAAA;QAC1F,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,GAAiB;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACvB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QAC5G,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;QACxC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAA;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACzG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;IAC1B,CAAC;IAED,iFAAiF;IACjF,MAAM,CAAC,GAAW;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAM;QAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAC3E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IACtB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,MAAc,EAAE,MAAuC;QAC5D,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAClD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;gBAAE,SAAQ;YACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC5C,WAAW,EAAE,SAAS,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE;gBAC3C,UAAU,EAAE,KAAK,CAAC,GAAG;gBACrB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC9C,iBAAiB,EAAE,cAAc,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAC1D,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC;gBAChD,SAAS,EAAE,KAAK,CAAC,EAAE;aACpB,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YACvB,QAAQ,IAAI,CAAC,CAAA;YACb,qEAAqE;YACrE,mEAAmE;YACnE,2DAA2D;YAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,IAAI;gBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;QAC7F,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,OAAO;QACL,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,IAAI,CAAC,KAAK;gBAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACjF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACrB,CAAC;CACF"}

package/dist/gateway/cdp-auth.d.ts

@@ -0,0 +1,12 @@
+export interface CdpCredentials {
+    keyId: string;
+    keySecret: string;
+}
+export declare function createCdpJwt(credentials: CdpCredentials, request: {
+    method: string;
+    host: string;
+    path: string;
+}, nowSeconds?: number): string;
+/** Authorization header for one CDP API call, e.g. POST to the facilitator's /settle. */
+export declare function cdpAuthorization(credentials: CdpCredentials, url: string, method?: string): string;
+//# sourceMappingURL=cdp-auth.d.ts.map

package/dist/gateway/cdp-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp-auth.d.ts","sourceRoot":"","sources":["../../src/gateway/cdp-auth.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;CAClB;AA2BD,wBAAgB,YAAY,CAC1B,WAAW,EAAE,cAAc,EAC3B,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACvD,UAAU,SAAgC,GACzC,MAAM,CAgBR;AAED,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,SAAS,GAAG,MAAM,CAGlG"}

package/dist/gateway/cdp-auth.js

@@ -0,0 +1,53 @@
+import { createPrivateKey, randomBytes, sign } from 'node:crypto';
+/**
+ * Coinbase Developer Platform API authentication: every request carries a
+ * short-lived JWT signed with the CDP secret API key and bound to the
+ * request's method, host and path. Mirrors `generateJwt` in
+ * `@coinbase/cdp-sdk/auth` for both key types CDP issues:
+ * Ed25519 (base64 of seed + public key) and EC P-256 (PEM).
+ */
+const TOKEN_LIFETIME_SECONDS = 120;
+function base64url(value) {
+    return Buffer.from(value).toString('base64url');
+}
+function parseSigningKey(secret) {
+    const trimmed = secret.trim();
+    if (trimmed.includes('-----BEGIN')) {
+        // CDP stores EC secrets with literal "\n" when copied from JSON.
+        return { alg: 'ES256', key: createPrivateKey(trimmed.replace(/\\n/g, '\n')) };
+    }
+    const decoded = Buffer.from(trimmed, 'base64');
+    if (decoded.length !== 64) {
+        throw new Error('CDP API key secret must be a base64 Ed25519 key or a PEM EC key');
+    }
+    return {
+        alg: 'EdDSA',
+        key: createPrivateKey({
+            key: { kty: 'OKP', crv: 'Ed25519', d: base64url(decoded.subarray(0, 32)), x: base64url(decoded.subarray(32)) },
+            format: 'jwk',
+        }),
+    };
+}
+export function createCdpJwt(credentials, request, nowSeconds = Math.floor(Date.now() / 1000)) {
+    const { alg, key } = parseSigningKey(credentials.keySecret);
+    const header = { alg, kid: credentials.keyId, typ: 'JWT', nonce: randomBytes(16).toString('hex') };
+    const claims = {
+        sub: credentials.keyId,
+        iss: 'cdp',
+        uris: [`${request.method} ${request.host}${request.path}`],
+        iat: nowSeconds,
+        nbf: nowSeconds,
+        exp: nowSeconds + TOKEN_LIFETIME_SECONDS,
+    };
+    const signingInput = `${base64url(JSON.stringify(header))}.${base64url(JSON.stringify(claims))}`;
+    const signature = alg === 'EdDSA'
+        ? sign(null, Buffer.from(signingInput), key)
+        : sign('sha256', Buffer.from(signingInput), { key, dsaEncoding: 'ieee-p1363' });
+    return `${signingInput}.${base64url(signature)}`;
+}
+/** Authorization header for one CDP API call, e.g. POST to the facilitator's /settle. */
+export function cdpAuthorization(credentials, url, method = 'POST') {
+    const { host, pathname } = new URL(url);
+    return `Bearer ${createCdpJwt(credentials, { method, host, path: pathname })}`;
+}
+//# sourceMappingURL=cdp-auth.js.map

package/dist/gateway/cdp-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp-auth.js","sourceRoot":"","sources":["../../src/gateway/cdp-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,IAAI,EAAkB,MAAM,aAAa,CAAA;AAEjF;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,GAAG,CAAA;AASlC,SAAS,SAAS,CAAC,KAAsB;IACvC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,iEAAiE;QACjE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAA;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACpF,CAAC;IACD,OAAO;QACL,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,gBAAgB,CAAC;YACpB,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE;YAC9G,MAAM,EAAE,KAAK;SACd,CAAC;KACH,CAAA;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,WAA2B,EAC3B,OAAuD,EACvD,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAE1C,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;IAC3D,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;IAClG,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,WAAW,CAAC,KAAK;QACtB,GAAG,EAAE,KAAK;QACV,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC1D,GAAG,EAAE,UAAU;QACf,GAAG,EAAE,UAAU;QACf,GAAG,EAAE,UAAU,GAAG,sBAAsB;KACzC,CAAA;IACD,MAAM,YAAY,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;IAChG,MAAM,SAAS,GAAG,GAAG,KAAK,OAAO;QAC/B,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAA;IACjF,OAAO,GAAG,YAAY,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,CAAA;AAClD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,gBAAgB,CAAC,WAA2B,EAAE,GAAW,EAAE,MAAM,GAAG,MAAM;IACxF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvC,OAAO,UAAU,YAAY,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;AAChF,CAAC"}

package/dist/gateway/cdp-auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cdp-auth.test.d.ts.map

package/dist/gateway/cdp-auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp-auth.test.d.ts","sourceRoot":"","sources":["../../src/gateway/cdp-auth.test.ts"],"names":[],"mappings":""}

package/dist/gateway/cdp-auth.test.js

@@ -0,0 +1,96 @@
+import assert from 'node:assert/strict';
+import { generateKeyPairSync, verify } from 'node:crypto';
+import * as http from 'node:http';
+import { test } from 'node:test';
+import { cdpAuthorization, createCdpJwt } from './cdp-auth.js';
+import { X402Facilitator } from './x402.js';
+import { topupConfig } from '../cli/commands/gateway/shared.js';
+function decodeJwt(token) {
+    const [header, claims, signature] = token.split('.');
+    return {
+        header: JSON.parse(Buffer.from(header, 'base64url').toString('utf8')),
+        claims: JSON.parse(Buffer.from(claims, 'base64url').toString('utf8')),
+        signingInput: Buffer.from(`${header}.${claims}`),
+        signature: Buffer.from(signature, 'base64url'),
+    };
+}
+test('CDP JWTs signed with an Ed25519 key verify and bind the request', () => {
+    const { privateKey, publicKey } = generateKeyPairSync('ed25519');
+    const jwk = privateKey.export({ format: 'jwk' });
+    const secret = Buffer.concat([Buffer.from(jwk.d, 'base64url'), Buffer.from(jwk.x, 'base64url')]).toString('base64');
+    const token = createCdpJwt({ keyId: 'key-1', keySecret: secret }, { method: 'POST', host: 'api.cdp.coinbase.com', path: '/platform/v2/x402/settle' }, 1_000);
+    const { header, claims, signingInput, signature } = decodeJwt(token);
+    assert.equal(header.alg, 'EdDSA');
+    assert.equal(header.kid, 'key-1');
+    assert.equal(header.typ, 'JWT');
+    assert.match(String(header.nonce), /^[0-9a-f]{32}$/);
+    assert.deepEqual(claims, {
+        sub: 'key-1', iss: 'cdp', uris: ['POST api.cdp.coinbase.com/platform/v2/x402/settle'], iat: 1_000, nbf: 1_000, exp: 1_120,
+    });
+    assert.ok(verify(null, signingInput, publicKey, signature));
+});
+test('CDP JWTs signed with a PEM EC key use ES256', () => {
+    const { privateKey, publicKey } = generateKeyPairSync('ec', { namedCurve: 'P-256' });
+    const pem = privateKey.export({ format: 'pem', type: 'sec1' }).toString();
+    const header = cdpAuthorization({ keyId: 'key-2', keySecret: pem }, 'https://api.cdp.coinbase.com/platform/v2/x402/verify');
+    assert.match(header, /^Bearer /);
+    const { header: jwtHeader, claims, signingInput, signature } = decodeJwt(header.slice('Bearer '.length));
+    assert.equal(jwtHeader.alg, 'ES256');
+    assert.deepEqual(claims.uris, ['POST api.cdp.coinbase.com/platform/v2/x402/verify']);
+    assert.ok(verify('sha256', signingInput, { key: publicKey, dsaEncoding: 'ieee-p1363' }, signature));
+    assert.throws(() => createCdpJwt({ keyId: 'k', keySecret: 'not-a-key' }, { method: 'POST', host: 'h', path: '/p' }));
+});
+test('the facilitator client signs each call for its own endpoint', async () => {
+    const seen = [];
+    const server = http.createServer((req, res) => {
+        seen.push({ url: req.url ?? '', authorization: req.headers.authorization });
+        req.resume();
+        req.on('end', () => {
+            res.writeHead(200, { 'content-type': 'application/json' });
+            res.end(JSON.stringify(req.url === '/x402/verify' ? { isValid: true } : { success: true, transaction: '0x1', network: 'eip155:8453', payer: '0x' }));
+        });
+    });
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    const port = server.address().port;
+    try {
+        const facilitator = new X402Facilitator({ url: `http://127.0.0.1:${port}/x402/`, authorize: (url) => `Bearer for ${new URL(url).pathname}` });
+        const payment = {};
+        const requirements = {};
+        await facilitator.verify(payment, requirements);
+        await facilitator.settle(payment, requirements);
+        assert.deepEqual(seen, [
+            { url: '/x402/verify', authorization: 'Bearer for /x402/verify' },
+            { url: '/x402/settle', authorization: 'Bearer for /x402/settle' },
+        ]);
+    }
+    finally {
+        await new Promise((resolve) => server.close(() => resolve()));
+    }
+});
+test('facilitator presets resolve, and CDP requires its API key', () => {
+    const saved = { id: process.env['CDP_API_KEY_ID'], secret: process.env['CDP_API_KEY_SECRET'] };
+    try {
+        assert.equal(topupConfig({ x402Facilitator: 'payai' })?.facilitatorUrl, 'https://facilitator.payai.network');
+        assert.equal(topupConfig({}), undefined);
+        delete process.env['CDP_API_KEY_ID'];
+        delete process.env['CDP_API_KEY_SECRET'];
+        assert.throws(() => topupConfig({ x402Facilitator: 'cdp' }), /CDP_API_KEY_ID/);
+        process.env['CDP_API_KEY_ID'] = 'id';
+        process.env['CDP_API_KEY_SECRET'] = 'secret';
+        const cdp = topupConfig({ x402Facilitator: 'cdp', topupMinUsd: '3' });
+        assert.equal(cdp?.facilitatorUrl, 'https://api.cdp.coinbase.com/platform/v2/x402');
+        assert.deepEqual(cdp?.cdp, { keyId: 'id', keySecret: 'secret' });
+        assert.equal(cdp?.minUsd, '3');
+    }
+    finally {
+        if (saved.id === undefined)
+            delete process.env['CDP_API_KEY_ID'];
+        else
+            process.env['CDP_API_KEY_ID'] = saved.id;
+        if (saved.secret === undefined)
+            delete process.env['CDP_API_KEY_SECRET'];
+        else
+            process.env['CDP_API_KEY_SECRET'] = saved.secret;
+    }
+});
+//# sourceMappingURL=cdp-auth.test.js.map

package/dist/gateway/cdp-auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp-auth.test.js","sourceRoot":"","sources":["../../src/gateway/cdp-auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAiD,MAAM,WAAW,CAAA;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAA;AAE/D,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAA;IAChF,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B;QAChG,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B;QAChG,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;QAChD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;KAC/C,CAAA;AACH,CAAC;AAED,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAChE,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAE,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACrH,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,KAAK,CAAC,CAAA;IAC5J,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;IACpE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAA;IACpD,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;QACvB,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,mDAAmD,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK;KAC1H,CAAC,CAAA;IACF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;AAC7D,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;IACvD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;IACpF,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;IACzE,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,sDAAsD,CAAC,CAAA;IAC3H,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAChC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IACxG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACpC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mDAAmD,CAAC,CAAC,CAAA;IACpF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC,CAAA;IACnG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;AACtH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,IAAI,GAAmD,EAAE,CAAA;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;QAC3E,GAAG,CAAC,MAAM,EAAE,CAAA;QACZ,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACtJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;IAC5E,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAA;IACxD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,EAAE,oBAAoB,IAAI,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC7I,MAAM,OAAO,GAAG,EAAoB,CAAA;QACpC,MAAM,YAAY,GAAG,EAAyB,CAAA;QAC9C,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAC/C,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAC/C,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;YACrB,EAAE,GAAG,EAAE,cAAc,EAAE,aAAa,EAAE,yBAAyB,EAAE;YACjE,EAAE,GAAG,EAAE,cAAc,EAAE,aAAa,EAAE,yBAAyB,EAAE;SAClE,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACrE,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAA;IAC9F,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,mCAAmC,CAAC,CAAA;QAC5G,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAA;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;QACpC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAA;QAC9E,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAA;QACpC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,QAAQ,CAAA;QAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;QACrE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,EAAE,+CAA+C,CAAC,CAAA;QAClF,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;;YAAM,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,EAAE,CAAA;QAC/G,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;;YAAM,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,MAAM,CAAA;IACjI,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/gateway/gateway.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.test.d.ts","sourceRoot":"","sources":["../../src/gateway/gateway.test.ts"],"names":[],"mappings":""}