@antseed/cli 0.1.168 → 0.1.170

package/dist/proxy/buyer-proxy.d.ts

@@ -1,4 +1,5 @@
 import { type AntseedNode, type PeerInfo, type ModelRoutingPreferences, type SerializedHttpResponse, type SweepReceiptPayload } from '@antseed/node';
+import { BuyerIdentityLoader } from '../buyer-identities/loader.js';
 import type { DepositWatcher } from './deposit-watcher.js';
 import { type VerifierPolicy, type SellerReach } from '../plugins/verifier.js';
 export { selectCandidatePeersForRouting, type CandidatePeerRouteSelection } from './routing.js';
@@ -41,6 +42,8 @@ export interface BuyerProxyConfig {
     now?: () => number;
     /** Verifier-SDK policy: which verifier the buyer commits to + whether it is required. */
     verifier?: VerifierPolicy;
+    /** Loads stored buyer identities on demand; defaults to one reading `dataDir`. */
+    buyerIdentities?: BuyerIdentityLoader;
 }
 /**
  * Detect a "model not served" rejection: the seller's own pre-payment 400
@@ -111,12 +114,14 @@ export declare class BuyerProxy {
      */
     private _lastModelActivityAt;
     private readonly _verifier?;
+    private readonly _buyerIdentities;
     private readonly _teeVerification;
     private readonly _teeControl;
     private _stateWatchDebounce;
     private _configWatchDebounce;
     private _routingPreferences;
     private _stateWriteChain;
+    private readonly _resourceRoutes;
     private _cachedPeers;
     private _cacheLastUpdatedAtMs;
     private _cacheMutationEpoch;
@@ -157,9 +162,18 @@ export declare class BuyerProxy {
      * deltas (buyer- and seller-initiated auth both advance the cumulative).
      */
     private readonly _requestConversations;
+    /** Signed spend for requests a local gateway tagged, polled over the control plane. */
+    private readonly _spendAttribution;
     constructor(config: BuyerProxyConfig);
     /** Roll a signed spend delta into the conversation that triggered it. */
     private _attributeSpend;
+    /**
+     * Identity named by a request: null for the default, the name when it is
+     * (or can be) loaded, undefined when no stored identity has that name.
+     */
+    private _resolveBuyerIdentity;
+    /** `?identity=` on control-plane reads; undefined when it names no stored identity. */
+    private _controlPlaneIdentity;
     /**
      * Remember which chat a request belongs to for the life of the request plus
      * a grace window — the seller-initiated auth path can land just after the
@@ -184,6 +198,7 @@ export declare class BuyerProxy {
     private _markModelActivity;
     /** Serialised read-modify-write to buyer.state.json. Returns the queued write promise. */
     private _mergeStateFile;
+    private _persistResourceRoutes;
     private _writeStateFile;
     private _startIncrementalDiscoverySweep;
     private _startBackgroundRefresh;

package/dist/proxy/buyer-proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buyer-proxy.d.ts","sourceRoot":"","sources":["../../src/proxy/buyer-proxy.ts"],"names":[],"mappings":"AAKA,OAAO,EAeL,KAAK,WAAW,EAGhB,KAAK,QAAQ,EAEb,KAAK,uBAAuB,EAI5B,KAAK,sBAAsB,EAE3B,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAA;AA2DtB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAc1D,OAAO,EAA2C,KAAK,cAAc,EAAE,KAAK,WAAW,EAAsB,MAAM,wBAAwB,CAAA;AAQ3I,OAAO,EAAE,8BAA8B,EAAE,KAAK,2BAA2B,EAAE,MAAM,cAAc,CAAA;AAC/F,OAAO,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAE3I;;;;;GAKG;AACH,MAAM,MAAM,2BAA2B,GAAG,iBAAiB,GAAG,mBAAmB,GAAG,kBAAkB,CAAA;AAQtG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,WAAW,CAAA;IACjB,4FAA4F;IAC5F,OAAO,EAAE,MAAM,CAAA;IACf,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,uBAAuB,CAAA;IAC5C,kGAAkG;IAClG,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,yFAAyF;IACzF,QAAQ,CAAC,EAAE,cAAc,CAAA;CAC1B;AA2ED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAQjF;AA4JD,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,sBAAsB,GAAG,sBAAsB,CAoCrG;AAmED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,OAAO,EACf,KAAK,GAAE,MAAmB,EAC1B,QAAQ,GAAE,MAA6B,GACtC,QAAQ,EAAE,CAgJZ;AAED;;;;;;GAMG;AAEH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EACtC,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,GAClB,WAAW,CAeb;AAMD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAY7E;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB/G;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB3H;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;IAC3C,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,mBAAmB,CAAQ;IACnC,OAAO,CAAC,WAAW,CAAe;IAClC;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,cAAc,CAAoB;IAC1C;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB,CAAI;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAgB;IAC3C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAY;IACxC,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,mBAAmB,CAAgC;IAE3D,OAAO,CAAC,gBAAgB,CAAmC;IAE3D,OAAO,CAAC,YAAY,CAAiB;IACrC,OAAO,CAAC,qBAAqB,CAAI;IACjC,OAAO,CAAC,mBAAmB,CAAI;IAC/B,OAAO,CAAC,mBAAmB,CAAmC;IAC9D,OAAO,CAAC,sBAAsB,CAAI;IAClC,OAAO,CAAC,YAAY,CAAI;IACxB;wFACoF;IACpF,OAAO,CAAC,4BAA4B,CAAI;IACxC,OAAO,CAAC,6BAA6B,CAAI;IACzC,OAAO,CAAC,gBAAgB,CAA8C;IACtE;;;;OAIG;IACH,OAAO,CAAC,WAAW,CAA0C;IAC7D,4DAA4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;IAC5D,OAAO,CAAC,gBAAgB,CAA8C;IACtE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;IACnC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;IACxE;;;;OAIG;IACH,OAAO,CAAC,eAAe,CAA8B;IACrD,oEAAoE;IACpE,OAAO,CAAC,sBAAsB,CAA2C;IAEzE;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA0D;gBAEpF,MAAM,EAAE,gBAAgB;IAiEpC,yEAAyE;IACzE,OAAO,CAAC,eAAe;IAiBvB;;;;OAIG;IACH,OAAO,CAAC,yBAAyB;IASjC;;;OAGG;IACH,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,EAAE,aAAa,GAAE,2BAA2B,GAAG,IAAW,GAAG,IAAI;IAKjH,wEAAwE;IACxE,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAIxD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YA0Cd,0BAA0B;IA6BlC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkC3B,OAAO,CAAC,eAAe;YAqBT,uBAAuB;IAkBrC,OAAO,CAAC,gBAAgB;YAiBV,yBAAyB;IAmBvC,+EAA+E;IAC/E,OAAO,CAAC,kBAAkB;IAI1B,0FAA0F;IAC1F,OAAO,CAAC,eAAe;YAcT,eAAe;IAe7B,OAAO,CAAC,+BAA+B;IAIvC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,aAAa;IA6CrB,OAAO,CAAC,oBAAoB;IA4E5B;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAsC1B;;;;;;OAMG;IACH,OAAO,CAAC,yBAAyB;IAkCjC;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAoB3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;OAQG;IACH,OAAO,CAAC,uBAAuB;IAkB/B;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAc9B,oFAAoF;YACtE,yBAAyB;YASzB,yBAAyB;YASzB,gBAAgB;YAiChB,SAAS;IA2BvB,OAAO,CAAC,+BAA+B;YAsBzB,mBAAmB;IAqgBjC;;;;;OAKG;YACW,oBAAoB;YAsDpB,cAAc;YA+rBd,WAAW;IAkBzB,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,uBAAuB;IAoB/B,OAAO,CAAC,6BAA6B;IA4BrC,OAAO,CAAC,YAAY;IASpB;;;;OAIG;YACW,eAAe;CA+Z9B"}
+{"version":3,"file":"buyer-proxy.d.ts","sourceRoot":"","sources":["../../src/proxy/buyer-proxy.ts"],"names":[],"mappings":"AASA,OAAO,EAgBL,KAAK,WAAW,EAGhB,KAAK,QAAQ,EAEb,KAAK,uBAAuB,EAI5B,KAAK,sBAAsB,EAE3B,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAA;AA2BtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AAmCnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAc1D,OAAO,EAA2C,KAAK,cAAc,EAAE,KAAK,WAAW,EAAsB,MAAM,wBAAwB,CAAA;AAQ3I,OAAO,EAAE,8BAA8B,EAAE,KAAK,2BAA2B,EAAE,MAAM,cAAc,CAAA;AAC/F,OAAO,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAE3I;;;;;GAKG;AACH,MAAM,MAAM,2BAA2B,GAAG,iBAAiB,GAAG,mBAAmB,GAAG,kBAAkB,CAAA;AAQtG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,WAAW,CAAA;IACjB,4FAA4F;IAC5F,OAAO,EAAE,MAAM,CAAA;IACf,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,uBAAuB,CAAA;IAC5C,kGAAkG;IAClG,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,yFAAyF;IACzF,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,kFAAkF;IAClF,eAAe,CAAC,EAAE,mBAAmB,CAAA;CACtC;AA2ED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAQjF;AA4JD,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,sBAAsB,GAAG,sBAAsB,CAoCrG;AA4ED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,OAAO,EACf,KAAK,GAAE,MAAmB,EAC1B,QAAQ,GAAE,MAA6B,GACtC,QAAQ,EAAE,CAgJZ;AAED;;;;;;GAMG;AAEH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EACtC,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,GAClB,WAAW,CAeb;AAMD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAY7E;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB/G;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB3H;AAOD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;IAC3C,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,mBAAmB,CAAQ;IACnC,OAAO,CAAC,WAAW,CAAe;IAClC;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,cAAc,CAAoB;IAC1C;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB,CAAI;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAgB;IAC3C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAY;IACxC,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,mBAAmB,CAAgC;IAE3D,OAAO,CAAC,gBAAgB,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuB;IAEvD,OAAO,CAAC,YAAY,CAAiB;IACrC,OAAO,CAAC,qBAAqB,CAAI;IACjC,OAAO,CAAC,mBAAmB,CAAI;IAC/B,OAAO,CAAC,mBAAmB,CAAmC;IAC9D,OAAO,CAAC,sBAAsB,CAAI;IAClC,OAAO,CAAC,YAAY,CAAI;IACxB;wFACoF;IACpF,OAAO,CAAC,4BAA4B,CAAI;IACxC,OAAO,CAAC,6BAA6B,CAAI;IACzC,OAAO,CAAC,gBAAgB,CAA8C;IACtE;;;;OAIG;IACH,OAAO,CAAC,WAAW,CAA0C;IAC7D,4DAA4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;IAC5D,OAAO,CAAC,gBAAgB,CAA8C;IACtE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;IACnC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;IACxE;;;;OAIG;IACH,OAAO,CAAC,eAAe,CAA8B;IACrD,oEAAoE;IACpE,OAAO,CAAC,sBAAsB,CAA2C;IAEzE;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA0D;IAChG,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;gBAEnD,MAAM,EAAE,gBAAgB;IAmEpC,yEAAyE;IACzE,OAAO,CAAC,eAAe;IAiBvB;;;OAGG;YACW,qBAAqB;IAUnC,uFAAuF;YACzE,qBAAqB;IAKnC;;;;OAIG;IACH,OAAO,CAAC,yBAAyB;IASjC;;;OAGG;IACH,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,EAAE,aAAa,GAAE,2BAA2B,GAAG,IAAW,GAAG,IAAI;IAKjH,wEAAwE;IACxE,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAIxD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YA8Cd,0BAA0B;IA6BlC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAqC3B,OAAO,CAAC,eAAe;YAqBT,uBAAuB;IAkBrC,OAAO,CAAC,gBAAgB;YAiBV,yBAAyB;IAmBvC,+EAA+E;IAC/E,OAAO,CAAC,kBAAkB;IAI1B,0FAA0F;IAC1F,OAAO,CAAC,eAAe;YAcT,sBAAsB;YAMtB,eAAe;IAe7B,OAAO,CAAC,+BAA+B;IAIvC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,aAAa;IA6CrB,OAAO,CAAC,oBAAoB;IA4E5B;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAsC1B;;;;;;OAMG;IACH,OAAO,CAAC,yBAAyB;IAkCjC;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAoB3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;OAQG;IACH,OAAO,CAAC,uBAAuB;IAkB/B;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAc9B,oFAAoF;YACtE,yBAAyB;YASzB,yBAAyB;YASzB,gBAAgB;YAiChB,SAAS;IA2BvB,OAAO,CAAC,+BAA+B;YAsBzB,mBAAmB;IA+hBjC;;;;;OAKG;YACW,oBAAoB;YAsDpB,cAAc;YAwuBd,WAAW;IAkBzB,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,uBAAuB;IAoB/B,OAAO,CAAC,6BAA6B;IA4BrC,OAAO,CAAC,YAAY;IASpB;;;;OAIG;YACW,eAAe;CAkb9B"}

package/dist/proxy/buyer-proxy.js

@@ -1,17 +1,23 @@
+import { nativeVideoRoute } from '@antseed/api-adapter';
+import { ResourceRoutes } from './resource-routes.js';
+import { prepareVideoRequest, recordVideoAcceptance } from './native-video-proxy.js';
+import { downloadVideo } from './video-download.js';
 import { createServer } from 'node:http';
 import { randomUUID } from 'node:crypto';
 import { watchFile, unwatchFile } from 'node:fs';
 import { readFile, writeFile, rename, mkdir, readdir, stat, unlink } from 'node:fs/promises';
 import { join } from 'node:path';
-import { ANTSEED_BUYER_FAULT_ERROR_CODE, ANTSEED_FAULT_ATTRIBUTION_HEADER, ANTSEED_ATTEST_PATH, adaptPeerFaultErrorResponse, computeTrustScore, decodeSweepRequest, faultAttributionOf, faultCodeOf, isModelRouteEligible, modelRouteTotalPrice, normalizedModelReputationScore, peerSupportsCooperativeClose, rankModelRoutes, sanitizePeerDisplayName, } from '@antseed/node';
+import { ANTSEED_BUYER_FAULT_ERROR_CODE, ANTSEED_FAULT_ATTRIBUTION_HEADER, ANTSEED_ATTEST_PATH, adaptPeerFaultErrorResponse, computeTrustScore, decodeSweepRequest, faultAttributionOf, faultCodeOf, isModelRouteEligible, modelRouteTotalPrice, normalizedModelReputationScore, peerSupportsCooperativeClose, DEFAULT_BUYER_IDENTITY, rankModelRoutes, sanitizePeerDisplayName, } from '@antseed/node';
 import { canonicalModelKey } from '@antseed/node/model-identity';
 import { createStreamingAdapter, detectRequestServiceApiProtocol, transformRequest, transformResponse, } from './service-api-adapter.js';
-import { DEBUG, log, extractRequestedService, summarizeRequestShape, summarizeErrorResponse, requestWantsStreaming, parsePeerPinnedService, rewritePeerPinnedServiceInBody, substituteRoutedModelAlias, overrideRoutedModelInBody, ROUTED_MODEL_ALIAS, SYSTEM_PROXY_SOURCE_HEADER, SYSTEM_ROUTED_MODEL_HEADER, normalizePeerId, } from './request-utils.js';
+import { DEBUG, log, extractRequestedService, summarizeRequestShape, summarizeErrorResponse, requestWantsStreaming, parsePeerPinnedService, rewritePeerPinnedServiceInBody, substituteRoutedModelAlias, overrideRoutedModelInBody, ROUTED_MODEL_ALIAS, SYSTEM_PROXY_SOURCE_HEADER, SYSTEM_ROUTED_MODEL_HEADER, BUYER_IDENTITY_HEADER, normalizePeerId, } from './request-utils.js';
+import { BuyerIdentityLoader } from '../buyer-identities/loader.js';
 import { buildNetworkModels, effectiveModelReputationScore, parseModelTypeFilter, } from './network-models.js';
 import { findMissingRequiredParameters, findUnannouncedRequestParameters, findAdvertisedServiceOffer, findAdvertisedServiceProtocols, getExplicitProviderOverride, getExplicitPeerIdOverride, parseRequiredParametersHeader, REQUIRED_PARAMETERS_HEADER, resolvePeerRoutePlan, selectCandidatePeersForRouting, } from './routing.js';
 import { computeResponseTelemetry, attachAntseedTelemetryHeaders, attachStreamingAntseedHeaders, } from './telemetry.js';
 import { DEFAULT_BUYER_PEER_REFRESH_INTERVAL_MS } from '../config/defaults.js';
 import { extractConversationIdentity, extractFirstUserSnippet, isCompletionRequestPath, isTitleGenerationRequest, parseRequestBodyObject, } from './conversation-identity.js';
+import { SPEND_ATTRIBUTION_HEADER, SpendAttributionFeed, parseSpendAttributionTag } from './spend-attribution.js';
 import { ConversationStore } from './conversation-store.js';
 import { recordPeerFailureEntry, clearPeerHealthEntry, isCoolingDown, parsePersistedPeerHealth, prunePeerHealth, serializePeerHealth, reasonEscalates, } from './peer-health.js';
 import { PeerAttributionTracker, HEARTBEAT_MS } from './peer-attribution.js';
@@ -277,6 +283,14 @@ export function sanitizePeerBuyerFaultMarker(response) {
         ? { ...response, body: Buffer.from(JSON.stringify(parsed)) }
         : response;
 }
+function buyerFaultStatusCode(faultCode) {
+    switch (faultCode) {
+        case 'invalid-request': return 400;
+        case 'buyer-budget-too-low': return 422;
+        case 'buyer-reserve-topup-timeout': return 504;
+        default: return 503;
+    }
+}
 /**
  * Inject the buyer-known peerId into a 402 payment_required JSON body.
  * The seller doesn't include its own peerId (and shouldn't — self-reported
@@ -595,6 +609,10 @@ export async function mergeJsonStateFile(stateDir, stateFile, patch) {
         throw err;
     }
 }
+function sendUnknownBuyerIdentity(res) {
+    res.writeHead(404, { 'content-type': 'application/json' });
+    res.end(JSON.stringify({ ok: false, error: 'Unknown buyer identity' }));
+}
 export class BuyerProxy {
     _server;
     _node;
@@ -623,12 +641,14 @@ export class BuyerProxy {
      */
     _lastModelActivityAt = 0;
     _verifier;
+    _buyerIdentities;
     _teeVerification;
     _teeControl;
     _stateWatchDebounce = null;
     _configWatchDebounce = null;
     _routingPreferences;
     _stateWriteChain = Promise.resolve();
+    _resourceRoutes = new ResourceRoutes();
     _cachedPeers = [];
     _cacheLastUpdatedAtMs = 0;
     _cacheMutationEpoch = 0;
@@ -669,9 +689,12 @@ export class BuyerProxy {
      * deltas (buyer- and seller-initiated auth both advance the cumulative).
      */
     _requestConversations = new Map();
+    /** Signed spend for requests a local gateway tagged, polled over the control plane. */
+    _spendAttribution = new SpendAttributionFeed();
     constructor(config) {
         this._node = config.node;
         this._verifier = config.verifier;
+        this._buyerIdentities = config.buyerIdentities ?? new BuyerIdentityLoader(config.node, config.dataDir);
         this._teeVerification = new TeeVerification(config.verifier);
         this._teeControl = new TeeControl(this._teeVerification.sessionId);
         this._port = config.port;
@@ -714,6 +737,7 @@ export class BuyerProxy {
         if (typeof spendEventNode.on === 'function') {
             spendEventNode.on('payment:spend', (event) => {
                 this._attributeSpend(event);
+                this._spendAttribution.record(event);
             });
         }
         const eventNode = this._node;
@@ -741,6 +765,25 @@ export class BuyerProxy {
         }, !entry.counted);
         entry.counted = true;
     }
+    /**
+     * Identity named by a request: null for the default, the name when it is
+     * (or can be) loaded, undefined when no stored identity has that name.
+     */
+    async _resolveBuyerIdentity(header) {
+        const name = header?.trim().toLowerCase() ?? '';
+        if (!name || name === DEFAULT_BUYER_IDENTITY)
+            return null;
+        const loaded = await this._buyerIdentities.ensure(name).catch((err) => {
+            log(`Buyer identity "${name}" failed to load: ${err instanceof Error ? err.message : String(err)}`);
+            return false;
+        });
+        return loaded ? name : undefined;
+    }
+    /** `?identity=` on control-plane reads; undefined when it names no stored identity. */
+    async _controlPlaneIdentity(path) {
+        const param = new URL(path, 'http://localhost').searchParams.get('identity');
+        return this._resolveBuyerIdentity(param ?? undefined);
+    }
     /**
      * Remember which chat a request belongs to for the life of the request plus
      * a grace window — the seller-initiated auth path can land just after the
@@ -778,6 +821,11 @@ export class BuyerProxy {
         // startup route from the warm cache without blocking on DHT discovery.
         // The background refresh still runs to pick up fresh peers and IP changes.
         await this._hydratePeersFromStateFile();
+        try {
+            const state = JSON.parse(await readFile(this._stateFile, 'utf8'));
+            this._resourceRoutes.hydrate(state.resourceRoutes);
+        }
+        catch { }
         // Adopt persisted session overrides (peer pin, default routed model) so
         // they survive daemon restart. A --peer CLI flag beats the persisted pin
         // at startup; runtime `connection set` writes still take over via the
@@ -868,7 +916,10 @@ export class BuyerProxy {
         await this._writeStateFile('stopped');
         await this._conversations.flush();
         return new Promise((resolve) => {
-            this._server.close(() => resolve());
+            this._server.close(() => {
+                this._spendAttribution.close();
+                resolve();
+            });
         });
     }
     _watchStateFile() {
@@ -969,6 +1020,11 @@ export class BuyerProxy {
         }).catch(() => { });
         return this._stateWriteChain;
     }
+    async _persistResourceRoutes() {
+        const write = this._stateWriteChain.then(() => mergeJsonStateFile(this._stateDir, this._stateFile, { resourceRoutes: this._resourceRoutes.snapshot() }));
+        this._stateWriteChain = write.catch(() => { });
+        return write;
+    }
     async _writeStateFile(state) {
         // When stopping, preserve whatever session overrides are already
         // in the file — the debounce may have been cancelled before
@@ -1682,11 +1738,20 @@ export class BuyerProxy {
             }
             return;
         }
+        if (path.startsWith('/_antseed/buyer-identities') && method === 'GET') {
+            await this._buyerIdentities.loadAll();
+            res.writeHead(200, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ ok: true, identities: this._node.buyerIdentities() }));
+            return;
+        }
         if (path.startsWith('/_antseed/channels') && method === 'GET') {
             const all = /[?&]all=1/.test(path);
+            const identity = await this._controlPlaneIdentity(path);
+            if (identity === undefined)
+                return sendUnknownBuyerIdentity(res);
             const channels = all
-                ? this._node.getAllBuyerChannels()
-                : this._node.getActiveBuyerChannels();
+                ? this._node.getAllBuyerChannels(identity ?? undefined)
+                : this._node.getActiveBuyerChannels(identity ?? undefined);
             const peers = await this._getPeers();
             const peersById = new Map(peers.map((peer) => [peer.peerId, peer]));
             const channelsWithCapabilities = channels.map((channel) => {
@@ -1701,16 +1766,30 @@ export class BuyerProxy {
             res.end(JSON.stringify({ ok: true, channels: channelsWithCapabilities }));
             return;
         }
+        // Unauthenticated like every /_antseed route: it relies on the buyer
+        // listening on 127.0.0.1 only, since it exposes per-seller spend and tags.
+        if (path.startsWith('/_antseed/attributed-spend') && method === 'GET') {
+            const after = Number(new URL(path, 'http://localhost').searchParams.get('after') ?? '0');
+            res.writeHead(200, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ ok: true, ...this._spendAttribution.page(Number.isFinite(after) ? after : 0) }));
+            return;
+        }
         if (path.startsWith('/_antseed/buyer-usage') && method === 'GET') {
-            const totals = this._node.getBuyerUsageTotals();
+            const identity = await this._controlPlaneIdentity(path);
+            if (identity === undefined)
+                return sendUnknownBuyerIdentity(res);
+            const totals = this._node.getBuyerUsageTotals(identity ?? undefined);
             res.writeHead(200, { 'content-type': 'application/json' });
             res.end(JSON.stringify({ ok: true, totals, lastActivityAt: this._lastModelActivityAt || null }));
             return;
         }
-        const meteringMatch = path.match(/^\/_antseed\/metering\/(.+)$/);
+        const meteringMatch = path.match(/^\/_antseed\/metering\/([^?]+)/);
         if (meteringMatch && method === 'GET') {
             const sellerPeerId = decodeURIComponent(meteringMatch[1]);
-            const stats = this._node.getMeteringStatsByPeer(sellerPeerId);
+            const identity = await this._controlPlaneIdentity(path);
+            if (identity === undefined)
+                return sendUnknownBuyerIdentity(res);
+            const stats = this._node.getMeteringStatsByPeer(sellerPeerId, identity ?? undefined);
             res.writeHead(200, { 'content-type': 'application/json' });
             res.end(JSON.stringify(stats));
             return;
@@ -1764,11 +1843,14 @@ export class BuyerProxy {
             }
             let peerId;
             let includeAuth = true;
+            let identityParam;
             try {
                 const body = JSON.parse(Buffer.concat(chunks).toString());
                 peerId = String(body.peerId ?? '');
                 if (body.includeAuth === false)
                     includeAuth = false;
+                if (typeof body.identity === 'string')
+                    identityParam = body.identity;
             }
             catch {
                 res.writeHead(400, { 'content-type': 'application/json' });
@@ -1781,7 +1863,10 @@ export class BuyerProxy {
                 return;
             }
             try {
-                const result = await this._node.requestChannelClose(peerId, { includeAuth });
+                const identity = await this._resolveBuyerIdentity(identityParam);
+                if (identity === undefined)
+                    throw new Error('Unknown buyer identity');
+                const result = await this._node.requestChannelClose(peerId, { includeAuth, ...(identity ? { buyerIdentity: identity } : {}) });
                 log(`Cooperative close of ${result.channelId.slice(0, 18)}... with ${peerId.slice(0, 12)}...: ` +
                     `${result.status}${result.code ? ` (${result.code})` : ''}`);
                 res.writeHead(200, { 'content-type': 'application/json' });
@@ -1911,7 +1996,7 @@ export class BuyerProxy {
             res.writeHead(400, responseHeaders);
             res.end(JSON.stringify({
                 error: {
-                    message: `Unknown model type "${url.searchParams.get('type') ?? ''}" — expected "text", "images", or "decisions".`,
+                    message: `Unknown model type "${url.searchParams.get('type') ?? ''}" — expected "text", "images", "decisions", or "videos".`,
                     type: 'invalid_request_error',
                     param: 'type',
                 },
@@ -1933,7 +2018,9 @@ export class BuyerProxy {
         }
         // Only proxy known API paths — reject everything else with 404
         const normalizedPath = path.split('?')[0]?.trim().toLowerCase() ?? '/';
-        const isKnownApiPath = normalizedPath.startsWith('/v1/messages') ||
+        const nativeVideo = nativeVideoRoute({ method, path });
+        const isKnownApiPath = nativeVideo !== null ||
+            normalizedPath.startsWith('/v1/messages') ||
             normalizedPath.startsWith('/v1/chat/completions') ||
             normalizedPath.startsWith('/v1/responses') ||
             normalizedPath.startsWith('/v1/images/generations') ||
@@ -1986,6 +2073,29 @@ export class BuyerProxy {
         // it never reaches a seller.
         const systemRoutedModel = headers[SYSTEM_ROUTED_MODEL_HEADER] === '1';
         delete headers[SYSTEM_ROUTED_MODEL_HEADER];
+        // Internal marker from the API-key gateway: report this request's signed
+        // spend under the gateway's tag. Stripped so it never reaches a seller.
+        const spendAttributionTag = parseSpendAttributionTag(headers[SPEND_ATTRIBUTION_HEADER]);
+        delete headers[SPEND_ATTRIBUTION_HEADER];
+        // The paying identity rides on the internal headers through routing, like
+        // a peer pin, and is stripped when the request is built for the seller.
+        const buyerIdentity = await this._resolveBuyerIdentity(headers[BUYER_IDENTITY_HEADER]);
+        if (buyerIdentity === undefined) {
+            res.writeHead(400, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({
+                error: {
+                    type: 'invalid_request_error',
+                    code: 'unknown_buyer_identity',
+                    message: `${BUYER_IDENTITY_HEADER} names no stored buyer identity. Create one with \`antseed buyer identity create <name>\`.`,
+                    param: BUYER_IDENTITY_HEADER,
+                },
+            }));
+            return;
+        }
+        if (buyerIdentity)
+            headers[BUYER_IDENTITY_HEADER] = buyerIdentity;
+        else
+            delete headers[BUYER_IDENTITY_HEADER];
         let serializedReq = {
             requestId: randomUUID(),
             method,
@@ -1993,6 +2103,8 @@ export class BuyerProxy {
             headers,
             body: new Uint8Array(body),
         };
+        if (spendAttributionTag)
+            this._spendAttribution.track(serializedReq.requestId, spendAttributionTag);
         const requiredParameters = parseRequiredParametersHeader(serializedReq.headers[REQUIRED_PARAMETERS_HEADER]);
         if (requiredParameters === null) {
             res.writeHead(400, { 'content-type': 'application/json' });
@@ -2006,6 +2118,16 @@ export class BuyerProxy {
             }));
             return;
         }
+        if (nativeVideo) {
+            // Re-classify with the body: some APIs (Venice) carry the job ID in it.
+            const prepared = prepareVideoRequest(nativeVideoRoute(serializedReq) ?? nativeVideo, serializedReq.headers, this._resourceRoutes);
+            if ('error' in prepared) {
+                res.writeHead(prepared.error.statusCode, { 'content-type': 'application/json' });
+                res.end(JSON.stringify(prepared.error.body));
+                return;
+            }
+            serializedReq = { ...serializedReq, headers: prepared.headers };
+        }
         // Snapshot the session overrides before any await so a concurrent
         // _reloadSessionOverrides() cannot change routing mid-request.
         const effectivePinnedPeer = this._pinnedPeer;
@@ -2325,6 +2447,13 @@ export class BuyerProxy {
                         }
                         return;
                     }
+                    // Never retry a video on another seller: a create may already have
+                    // started (and been charged), and follow-ups only exist on one seller.
+                    if (nativeVideo) {
+                        res.writeHead(result.statusCode, result.responseHeaders);
+                        res.end(result.responseBody);
+                        return;
+                    }
                     lastRetry = result;
                     if (result.responseHeaders[ANTSEED_FAULT_ATTRIBUTION_HEADER]?.toLowerCase() === 'buyer') {
                         res.writeHead(result.statusCode, result.responseHeaders);
@@ -2593,7 +2722,7 @@ export class BuyerProxy {
                     + `did not announce for this service: ${unannounced.join(', ')} — the upstream may ignore or reject them`);
             }
         }
-        const { 'x-antseed-pin-peer': _pinPeer, 'x-antseed-prefer-peer': _preferPeer, [REQUIRED_PARAMETERS_HEADER]: _requiredParameters, 'x-vpr-session-id': _vprSession, 
+        const { 'x-antseed-pin-peer': _pinPeer, 'x-antseed-prefer-peer': _preferPeer, [BUYER_IDENTITY_HEADER]: buyerIdentity, [REQUIRED_PARAMETERS_HEADER]: _requiredParameters, 'x-vpr-session-id': _vprSession, 
         // Legacy desktop builds (pre AntStation → VPR rename) still send this.
         'x-antstation-session-id': _antstationSession, ...headersForPeer } = serializedReq.headers;
         let requestForPeer = {
@@ -2661,7 +2790,13 @@ export class BuyerProxy {
         log(`Routing to peer ${selectedPeer.peerId.slice(0, 12)}...`);
         this._markModelActivity();
         // Forward through P2P
-        const wantsStreaming = clientWantsStreaming;
+        const videoRoute = nativeVideoRoute(requestForPeer);
+        // Video responses are JSON job objects or a streamed MP4, never SSE.
+        const wantsStreaming = clientWantsStreaming && !videoRoute;
+        if (videoRoute?.action === 'retrieve') {
+            await downloadVideo(requestForPeer, res, (request, callbacks, signal) => this._node.sendRequestStream(selectedPeer, request, callbacks, { signal, pinned: true }), requestSignal);
+            return { done: true };
+        }
         const peerResponseProtocol = selectedRoutePlan.selection?.targetProtocol ?? requestProtocol;
         const adaptPeerResponse = (response) => adaptPeerFaultErrorResponse(response, peerResponseProtocol, { pinned });
         const startTime = Date.now();
@@ -2701,7 +2836,7 @@ export class BuyerProxy {
                             }
                         }
                     },
-                }, { signal: requestSignal, pinned });
+                }, { signal: requestSignal, pinned, ...(buyerIdentity ? { buyerIdentity } : {}) });
                 let responseForClient = adaptBuyerFaultErrorResponse(response, requestProtocol);
                 responseForClient = adaptPeerResponse(responseForClient);
                 if (!streamed
@@ -2768,10 +2903,17 @@ export class BuyerProxy {
                 const upstreamResponse = await this._node.sendRequest(selectedPeer, requestForPeer, {
                     signal: requestSignal,
                     pinned,
+                    ...(buyerIdentity ? { buyerIdentity } : {}),
                 });
                 if (upstreamResponse.statusCode >= 400 && !adaptResponse) {
                     log(`Upstream raw error detail: ${summarizeErrorResponse(upstreamResponse)}`);
                 }
+                // Only the seller that accepted a video job knows its ID. Remember and
+                // persist job ID -> seller so later retrieve requests (even
+                // after a proxy restart) are pinned back to that seller.
+                if (videoRoute && recordVideoAcceptance(videoRoute, upstreamResponse, { peerId: selectedPeer.peerId, provider: selectedRoutePlan.provider, service: requestedService }, this._resourceRoutes)) {
+                    await this._persistResourceRoutes().catch(error => console.error('[proxy] Accepted video route was not persisted:', error));
+                }
                 let response = adaptBuyerFaultErrorResponse(upstreamResponse, requestProtocol);
                 response = adaptPeerResponse(response);
                 if (adaptResponse
@@ -2879,7 +3021,7 @@ export class BuyerProxy {
             if (fault === 'buyer') {
                 const buyerResponse = adaptBuyerFaultErrorResponse({
                     requestId: requestForPeer.requestId,
-                    statusCode: 503,
+                    statusCode: buyerFaultStatusCode(faultCode),
                     headers: {
                         'content-type': 'application/json',
                         [ANTSEED_FAULT_ATTRIBUTION_HEADER]: 'buyer',