@antseed/cli 0.1.178 → 0.1.180

package/dist/gateway/buyer-policy-probe.test.js

@@ -0,0 +1,128 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, rmSync } from 'node:fs';
+import * as http from 'node:http';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { test } from 'node:test';
+import { GATEWAY_CONTROL_HEADER, ROUTING_POLICY_HEADER } from '../routing-policy/policy.js';
+import { GatewayAccounting } from './accounting.js';
+import { BuyerPolicyProbe, probeBuyerPolicySupport } from './buyer-policy-probe.js';
+import { GatewayServer } from './server.js';
+import { GatewayStore } from './store.js';
+const NO_LIMITS = { daily: null, weekly: null, monthly: null, total: null };
+async function listen(handler) {
+    const server = http.createServer(handler);
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    return {
+        port: server.address().port,
+        close: () => new Promise((resolve) => server.close(() => resolve())),
+    };
+}
+test('the probe sends an authenticated route preview and classifies the answer', async () => {
+    const seen = [];
+    let status = 200;
+    const buyer = await listen((req, res) => {
+        seen.push(req.headers);
+        assert.equal(req.url, '/_antseed/route-preview?model=__probe__');
+        if (status !== 200)
+            return void res.writeHead(status).end('{}');
+        res.writeHead(200, { 'content-type': 'application/json' }).end(JSON.stringify({ model: '__probe__', candidates: [] }));
+    });
+    try {
+        const options = { buyerPort: buyer.port, secret: 's3cret' };
+        assert.equal(await probeBuyerPolicySupport(options), 'supported');
+        assert.equal(seen[0][GATEWAY_CONTROL_HEADER], 's3cret');
+        assert.ok(seen[0][ROUTING_POLICY_HEADER], 'a policy is sent so decoding is exercised too');
+        status = 401; // wrong secret
+        assert.equal(await probeBuyerPolicySupport(options), 'unsupported');
+        status = 404; // older buyer without the endpoint
+        assert.equal(await probeBuyerPolicySupport(options), 'unsupported');
+    }
+    finally {
+        await buyer.close();
+    }
+    assert.equal(await probeBuyerPolicySupport({ buyerPort: buyer.port, secret: 'x' }), 'unknown');
+});
+test('the probe logs loudly while policies are unsupported and notices recovery', async () => {
+    const logs = [];
+    let answer = 404;
+    const probe = new BuyerPolicyProbe({
+        buyerPort: 1,
+        secret: 'x',
+        onLog: (message) => logs.push(message),
+        fetchPreview: async () => answer === 200
+            ? new Response(JSON.stringify({ candidates: [] }), { status: 200 })
+            : new Response('{}', { status: answer }),
+    });
+    try {
+        assert.equal(await probe.start(), 'unsupported');
+        assert.equal(probe.policyUnsupported(), true);
+        assert.match(logs[0], /^WARNING: .*buyer_policy_unsupported/);
+        answer = 200;
+        await probe.check();
+        assert.equal(probe.policyUnsupported(), false);
+        assert.equal(logs.at(-1), 'The buyer now applies routing policies.');
+    }
+    finally {
+        probe.stop();
+    }
+    const unreachable = new BuyerPolicyProbe({ buyerPort: 1, secret: 'x', onLog: (message) => logs.push(message), fetchPreview: async () => { throw new Error('ECONNREFUSED'); } });
+    try {
+        assert.equal(await unreachable.start(), 'unknown');
+        assert.equal(unreachable.policyUnsupported(), true, 'unconfirmed counts as unsupported');
+        assert.match(logs.at(-1), /^WARNING: cannot reach the buyer/);
+    }
+    finally {
+        unreachable.stop();
+    }
+});
+test('the server refuses paid requests from seller-restricting keys while the buyer cannot apply policies', async () => {
+    const dir = mkdtempSync(join(tmpdir(), 'antseed-gw-probe-'));
+    const store = new GatewayStore(dir);
+    let forwarded = 0;
+    const buyer = await listen((req, res) => {
+        req.resume();
+        req.on('end', () => {
+            forwarded += 1;
+            res.writeHead(200, { 'content-type': 'application/json' }).end('{}');
+        });
+    });
+    const accounting = new GatewayAccounting(store, { holdUsdc: 100_000, settleGraceMs: 20 });
+    let unsupported = true;
+    const server = new GatewayServer({
+        store,
+        accounting,
+        buyerPort: buyer.port,
+        identityAddress: async () => null,
+        spendFeedState: () => 'ok',
+        refreshSpendFeed: async () => { },
+        controlSecret: 'control-secret',
+        buyerPolicyUnsupported: () => unsupported,
+    });
+    const port = await server.start();
+    const send = (secret) => fetch(`http://127.0.0.1:${port}/v1/chat/completions`, {
+        method: 'POST',
+        headers: { authorization: `Bearer ${secret}`, 'content-type': 'application/json' },
+        body: JSON.stringify({ model: 'm' }),
+    });
+    try {
+        const restricted = store.createKey({ label: 'r', limits: NO_LIMITS, expiresAt: null, routingPolicy: { requireTee: true } });
+        const modelsOnly = store.createKey({ label: 'm', limits: NO_LIMITS, expiresAt: null, routingPolicy: { allowedModels: ['m'] } });
+        const refused = await send(restricted.secret);
+        assert.equal(refused.status, 503);
+        assert.equal((await refused.json()).error.code, 'buyer_policy_unsupported');
+        assert.equal(forwarded, 0);
+        // allowedModels is enforced by the gateway itself, so it does not need the buyer.
+        assert.equal((await send(modelsOnly.secret)).status, 200);
+        unsupported = false;
+        assert.equal((await send(restricted.secret)).status, 200);
+    }
+    finally {
+        await server.stop();
+        accounting.dispose();
+        await buyer.close();
+        store.close();
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=buyer-policy-probe.test.js.map

package/dist/gateway/buyer-policy-probe.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer-policy-probe.test.js","sourceRoot":"","sources":["../../src/gateway/buyer-policy-probe.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAC7C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAEzC,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AAE3E,KAAK,UAAU,MAAM,CAAC,OAA6B;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;IAC5E,OAAO;QACL,IAAI,EAAG,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI;QACjD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;KAC3E,CAAA;AACH,CAAC;AAED,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,IAAI,GAA+B,EAAE,CAAA;IAC3C,IAAI,MAAM,GAAG,GAAG,CAAA;IAChB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACtB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAA;QAChE,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC/D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IACxH,CAAC,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;QAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;QACjE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,sBAAsB,CAAC,EAAE,QAAQ,CAAC,CAAA;QACxD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,qBAAqB,CAAC,EAAE,+CAA+C,CAAC,CAAA;QAC3F,MAAM,GAAG,GAAG,CAAA,CAAC,eAAe;QAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,CAAA;QACnE,MAAM,GAAG,GAAG,CAAA,CAAC,mCAAmC;QAChD,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,CAAA;IACrE,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;IACrB,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAA;AAChG,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;IAC3F,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,IAAI,MAAM,GAAG,GAAG,CAAA;IAChB,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC;QACjC,SAAS,EAAE,CAAC;QACZ,MAAM,EAAE,GAAG;QACX,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QACtC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG;YACtC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACnE,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KAC3C,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,aAAa,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QAC7C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,sCAAsC,CAAC,CAAA;QAC9D,MAAM,GAAG,GAAG,CAAA;QACZ,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;QACnB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,CAAC,CAAA;QAC9C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,yCAAyC,CAAC,CAAA;IACtE,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,EAAE,CAAA;IACd,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,gBAAgB,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA,CAAC,CAAC,EAAE,CAAC,CAAA;IAC9K,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QAClD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,mCAAmC,CAAC,CAAA;QACxF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,kCAAkC,CAAC,CAAA;IAChE,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,IAAI,EAAE,CAAA;IACpB,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qGAAqG,EAAE,KAAK,IAAI,EAAE;IACrH,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,GAAG,CAAC,MAAM,EAAE,CAAA;QACZ,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,SAAS,IAAI,CAAC,CAAA;YACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAA;IACzF,IAAI,WAAW,GAAG,IAAI,CAAA;IACtB,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,KAAK;QACL,UAAU;QACV,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QACjC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAa;QACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QAChC,aAAa,EAAE,gBAAgB;QAC/B,sBAAsB,EAAE,GAAG,EAAE,CAAC,WAAW;KAC1C,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,IAAI,sBAAsB,EAAE;QACrF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAClF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;KACrC,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QAC3H,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAE/H,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAE,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAS,CAAC,KAAK,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAA;QACpF,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;QAC1B,kFAAkF;QAClF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAEzD,WAAW,GAAG,KAAK,CAAA;QACnB,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3D,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QACnB,UAAU,CAAC,OAAO,EAAE,CAAA;QACpB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;QACnB,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/gateway/buyer-process.d.ts

@@ -0,0 +1,30 @@
+import { type ChildProcess } from 'node:child_process';
+export interface GatewayBuyerOptions {
+    buyerPort: number;
+    dataDir: string;
+    configPath: string;
+    verbose: boolean;
+    onLog: (message: string) => void;
+    /** Starts the child process; tests replace it. */
+    spawnBuyer?: (args: string[]) => ChildProcess;
+}
+/** Starts the CLI as a supervised buyer child; `cli` is how to run the CLI (tests replace it). */
+export declare function spawnCliBuyer(args: string[], cli?: string[]): ChildProcess;
+/**
+ * Runs `antseed buyer start` as a child of `antseed gateway start`, prefixes
+ * its output with `[buyer]`, and restarts it when it exits, as a supervisor
+ * would. A buyer that keeps exiting right after starting (a port taken, a
+ * broken config) is given up on after a few tries.
+ */
+export declare class GatewayBuyer {
+    private readonly _options;
+    private _child;
+    private _stopping;
+    private _quickExits;
+    private _restartTimer;
+    constructor(_options: GatewayBuyerOptions);
+    start(): void;
+    /** Stops the buyer and waits for it to exit. */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=buyer-process.d.ts.map

package/dist/gateway/buyer-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer-process.d.ts","sourceRoot":"","sources":["../../src/gateway/buyer-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAa7D,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,kDAAkD;IAClD,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,YAAY,CAAA;CAC9C;AAED,kGAAkG;AAClG,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,GAAE,MAAM,EAA4C,GAAG,YAAY,CAsBnH;AAED;;;;;GAKG;AACH,qBAAa,YAAY;IAMX,OAAO,CAAC,QAAQ,CAAC,QAAQ;IALrC,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,WAAW,CAAI;IACvB,OAAO,CAAC,aAAa,CAA8B;gBAEtB,QAAQ,EAAE,mBAAmB;IAE1D,KAAK,IAAI,IAAI;IAgCb,gDAAgD;IAC1C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAW5B"}

package/dist/gateway/buyer-process.js

@@ -0,0 +1,101 @@
+import { spawn } from 'node:child_process';
+import { createInterface } from 'node:readline';
+import { identityPassphraseEnv, PASSPHRASE_ENV } from '@antseed/node';
+import { PASSPHRASE_STDIN_ENV } from '../cli/wallet-passphrase.js';
+import { BUYER_RESTART_EXIT_CODE } from '../proxy/buyer-proxy.js';
+/** A buyer that exits sooner than this after starting counts as failing to start. */
+const QUICK_EXIT_MS = 30_000;
+const MAX_QUICK_EXITS = 3;
+const RESTART_DELAY_MS = 1_000;
+/** The buyer closes its payment channels on the way out; give it time before killing it. */
+const STOP_TIMEOUT_MS = 30_000;
+/** Starts the CLI as a supervised buyer child; `cli` is how to run the CLI (tests replace it). */
+export function spawnCliBuyer(args, cli = [...process.execArgv, process.argv[1]]) {
+    // The wallet passphrase (from ANTSEED_PASSPHRASE, or typed on the terminal) goes to the
+    // buyer over its stdin, not in its environment, where the OS keeps it readable for as
+    // long as the process runs. ANTSEED_PASSPHRASE_FILE is inherited and read by the buyer itself.
+    const passphrase = identityPassphraseEnv()[PASSPHRASE_ENV];
+    const env = { ...process.env, ANTSEED_SUPERVISED: '1' };
+    delete env[PASSPHRASE_ENV];
+    if (passphrase)
+        env[PASSPHRASE_STDIN_ENV] = '1';
+    const child = spawn(process.execPath, [...cli, ...args], {
+        // ANTSEED_SUPERVISED: the gateway restarts the buyer when it exits, so it may accept the console's restart requests.
+        env,
+        stdio: [passphrase ? 'pipe' : 'ignore', 'pipe', 'pipe'],
+        // Its own process group: Ctrl+C reaches the gateway, which then stops the buyer
+        // after itself, instead of the buyer exiting first and being restarted.
+        detached: process.platform !== 'win32',
+    });
+    if (passphrase && child.stdin) {
+        // A buyer that exits before reading it closes the pipe; its exit is handled below.
+        child.stdin.on('error', () => { });
+        child.stdin.end(`${passphrase}\n`);
+    }
+    return child;
+}
+/**
+ * Runs `antseed buyer start` as a child of `antseed gateway start`, prefixes
+ * its output with `[buyer]`, and restarts it when it exits, as a supervisor
+ * would. A buyer that keeps exiting right after starting (a port taken, a
+ * broken config) is given up on after a few tries.
+ */
+export class GatewayBuyer {
+    _options;
+    _child = null;
+    _stopping = false;
+    _quickExits = 0;
+    _restartTimer = null;
+    constructor(_options) {
+        this._options = _options;
+    }
+    start() {
+        const { buyerPort, dataDir, configPath, verbose } = this._options;
+        const args = [
+            '--data-dir', dataDir,
+            '--config', configPath,
+            ...(verbose ? ['--verbose'] : []),
+            'buyer', 'start', '--port', String(buyerPort),
+        ];
+        const startedAt = Date.now();
+        const child = this._options.spawnBuyer ? this._options.spawnBuyer(args) : spawnCliBuyer(args);
+        this._child = child;
+        for (const stream of [child.stdout, child.stderr]) {
+            if (stream)
+                createInterface({ input: stream }).on('line', (line) => { process.stderr.write(`[buyer] ${line}\n`); });
+        }
+        child.once('error', (error) => { this._options.onLog(`could not start the buyer: ${error.message}`); });
+        child.once('exit', (code, signal) => {
+            this._child = null;
+            if (this._stopping)
+                return;
+            const quick = code !== BUYER_RESTART_EXIT_CODE && Date.now() - startedAt < QUICK_EXIT_MS;
+            this._quickExits = quick ? this._quickExits + 1 : 0;
+            if (this._quickExits >= MAX_QUICK_EXITS) {
+                this._options.onLog(`the buyer exited ${MAX_QUICK_EXITS} times right after starting; not restarting it. Fix the cause shown above and restart the gateway.`);
+                return;
+            }
+            if (code !== BUYER_RESTART_EXIT_CODE)
+                this._options.onLog(`the buyer exited (${signal ?? `code ${code}`}); restarting it`);
+            this._restartTimer = setTimeout(() => {
+                this._restartTimer = null;
+                this.start();
+            }, RESTART_DELAY_MS);
+        });
+    }
+    /** Stops the buyer and waits for it to exit. */
+    async stop() {
+        this._stopping = true;
+        if (this._restartTimer)
+            clearTimeout(this._restartTimer);
+        const child = this._child;
+        if (!child || child.exitCode !== null || child.signalCode !== null)
+            return;
+        const exited = new Promise((resolve) => { child.once('exit', () => resolve()); });
+        child.kill('SIGTERM');
+        const timer = setTimeout(() => { child.kill('SIGKILL'); }, STOP_TIMEOUT_MS);
+        await exited;
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=buyer-process.js.map

package/dist/gateway/buyer-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer-process.js","sourceRoot":"","sources":["../../src/gateway/buyer-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAEjE,qFAAqF;AACrF,MAAM,aAAa,GAAG,MAAM,CAAA;AAC5B,MAAM,eAAe,GAAG,CAAC,CAAA;AACzB,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAC9B,4FAA4F;AAC5F,MAAM,eAAe,GAAG,MAAM,CAAA;AAY9B,kGAAkG;AAClG,MAAM,UAAU,aAAa,CAAC,IAAc,EAAE,MAAgB,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;IACnG,wFAAwF;IACxF,sFAAsF;IACtF,+FAA+F;IAC/F,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC,cAAc,CAAC,CAAA;IAC1D,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAA;IAC1E,OAAO,GAAG,CAAC,cAAc,CAAC,CAAA;IAC1B,IAAI,UAAU;QAAE,GAAG,CAAC,oBAAoB,CAAC,GAAG,GAAG,CAAA;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE;QACvD,qHAAqH;QACrH,GAAG;QACH,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACvD,gFAAgF;QAChF,wEAAwE;QACxE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;KACvC,CAAC,CAAA;IACF,IAAI,UAAU,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,mFAAmF;QACnF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACjC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,IAAI,CAAC,CAAA;IACpC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IAMM;IALrB,MAAM,GAAwB,IAAI,CAAA;IAClC,SAAS,GAAG,KAAK,CAAA;IACjB,WAAW,GAAG,CAAC,CAAA;IACf,aAAa,GAA0B,IAAI,CAAA;IAEnD,YAA6B,QAA6B;QAA7B,aAAQ,GAAR,QAAQ,CAAqB;IAAG,CAAC;IAE9D,KAAK;QACH,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAA;QACjE,MAAM,IAAI,GAAG;YACX,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,UAAU;YACtB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;SAC9C,CAAA;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAC7F,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;QACnB,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,MAAM;gBAAE,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QACpH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,8BAA8B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QACtG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;YAClB,IAAI,IAAI,CAAC,SAAS;gBAAE,OAAM;YAC1B,MAAM,KAAK,GAAG,IAAI,KAAK,uBAAuB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,aAAa,CAAA;YACxF,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACnD,IAAI,IAAI,CAAC,WAAW,IAAI,eAAe,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,eAAe,oGAAoG,CAAC,CAAA;gBAC5J,OAAM;YACR,CAAC;YACD,IAAI,IAAI,KAAK,uBAAuB;gBAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,qBAAqB,MAAM,IAAI,QAAQ,IAAI,EAAE,kBAAkB,CAAC,CAAA;YAC1H,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBACnC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAA;gBACzB,IAAI,CAAC,KAAK,EAAE,CAAA;YACd,CAAC,EAAE,gBAAgB,CAAC,CAAA;QACtB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,IAAI,CAAC,aAAa;YAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,OAAM;QAC1E,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QACtF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;QAC1E,MAAM,MAAM,CAAA;QACZ,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;CACF"}

package/dist/gateway/buyer-process.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=buyer-process.test.d.ts.map

package/dist/gateway/buyer-process.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer-process.test.d.ts","sourceRoot":"","sources":["../../src/gateway/buyer-process.test.ts"],"names":[],"mappings":""}

package/dist/gateway/buyer-process.test.js

@@ -0,0 +1,112 @@
+import assert from 'node:assert/strict';
+import { EventEmitter } from 'node:events';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { PassThrough } from 'node:stream';
+import { test } from 'node:test';
+import { FileIdentityStore } from '@antseed/node';
+import { BUYER_RESTART_EXIT_CODE } from '../proxy/buyer-proxy.js';
+import { GatewayBuyer, spawnCliBuyer } from './buyer-process.js';
+class FakeChild extends EventEmitter {
+    stdout = new PassThrough();
+    stderr = new PassThrough();
+    exitCode = null;
+    signalCode = null;
+    killed = [];
+    kill(signal) {
+        this.killed.push(signal);
+        this.exit(null, signal);
+        return true;
+    }
+    exit(code, signal = null) {
+        this.exitCode = code;
+        this.signalCode = signal;
+        this.emit('exit', code, signal);
+    }
+}
+function harness() {
+    const children = [];
+    const argsSeen = [];
+    const logs = [];
+    const buyer = new GatewayBuyer({
+        buyerPort: 28377,
+        dataDir: '/data',
+        configPath: '/data/config.json',
+        verbose: false,
+        onLog: (message) => { logs.push(message); },
+        spawnBuyer: (args) => {
+            argsSeen.push(args);
+            const child = new FakeChild();
+            children.push(child);
+            return child;
+        },
+    });
+    return { buyer, children, argsSeen, logs };
+}
+const waitForRestart = () => new Promise((resolve) => setTimeout(resolve, 1_100));
+test('starts `buyer start` on the gateway\'s data dir, config and buyer port', () => {
+    const { buyer, argsSeen } = harness();
+    buyer.start();
+    assert.deepEqual(argsSeen[0], ['--data-dir', '/data', '--config', '/data/config.json', 'buyer', 'start', '--port', '28377']);
+});
+test('restarts the buyer after a restart request and after a crash', async () => {
+    const { buyer, children, logs } = harness();
+    buyer.start();
+    children[0].exit(BUYER_RESTART_EXIT_CODE);
+    await waitForRestart();
+    assert.equal(children.length, 2);
+    assert.equal(logs.length, 0);
+    children[1].exit(1);
+    await waitForRestart();
+    assert.equal(children.length, 3);
+    assert.match(logs[0], /exited \(code 1\); restarting/);
+    await buyer.stop();
+});
+test('gives up on a buyer that keeps exiting right after starting', async () => {
+    const { buyer, children, logs } = harness();
+    buyer.start();
+    for (let attempt = 0; attempt < 3; attempt += 1) {
+        children[attempt].exit(1);
+        if (attempt < 2)
+            await waitForRestart();
+    }
+    await waitForRestart();
+    assert.equal(children.length, 3);
+    assert.match(logs.at(-1), /not restarting it/);
+});
+test('stop terminates the buyer and does not restart it', async () => {
+    const { buyer, children } = harness();
+    buyer.start();
+    await buyer.stop();
+    assert.deepEqual(children[0].killed, ['SIGTERM']);
+    await waitForRestart();
+    assert.equal(children.length, 1);
+});
+test('hands the wallet passphrase to the buyer on stdin, not in its environment', async () => {
+    const dir = mkdtempSync(join(tmpdir(), 'antseed-buyer-process-'));
+    try {
+        const passphrase = 'correct horse battery';
+        await new FileIdentityStore(dir, { passphrase }).save('66'.repeat(32));
+        // Stands in for the CLI: what `buyer start` does with the passphrase first.
+        const script = join(dir, 'buyer.mjs');
+        writeFileSync(script, [
+            `const { walletPassphraseForStart } = await import(${JSON.stringify(new URL('../cli/wallet-passphrase.js', import.meta.url).href)})`,
+            `const inEnv = Object.entries(process.env).some(([, value]) => value?.includes(${JSON.stringify(passphrase)}))`,
+            `const unlocked = await walletPassphraseForStart(process.argv[process.argv.indexOf('--data-dir') + 1])`,
+            `console.log(JSON.stringify({ inEnv, unlocked }))`,
+        ].join('\n'));
+        process.env['ANTSEED_PASSPHRASE'] = passphrase;
+        const child = spawnCliBuyer(['--data-dir', dir], [script]);
+        let output = '';
+        child.stdout.on('data', (chunk) => { output += chunk; });
+        child.stderr.on('data', (chunk) => { output += chunk; });
+        const code = await new Promise((resolve) => child.once('exit', resolve));
+        assert.equal(code, 0, output);
+        assert.deepEqual(JSON.parse(output), { inEnv: false, unlocked: passphrase });
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=buyer-process.test.js.map

package/dist/gateway/buyer-process.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer-process.test.js","sourceRoot":"","sources":["../../src/gateway/buyer-process.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEhE,MAAM,SAAU,SAAQ,YAAY;IAClC,MAAM,GAAG,IAAI,WAAW,EAAE,CAAA;IAC1B,MAAM,GAAG,IAAI,WAAW,EAAE,CAAA;IAC1B,QAAQ,GAAkB,IAAI,CAAA;IAC9B,UAAU,GAA0B,IAAI,CAAA;IACxC,MAAM,GAAa,EAAE,CAAA;IACrB,IAAI,CAAC,MAAsB;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACvB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,IAAmB,EAAE,SAAgC,IAAI;QAC5D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAA;QACxB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IACjC,CAAC;CACF;AAED,SAAS,OAAO;IACd,MAAM,QAAQ,GAAgB,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAe,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC;QAC7B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,mBAAmB;QAC/B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;QAC1C,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;YACnB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAA;YAC7B,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpB,OAAO,KAAgC,CAAA;QACzC,CAAC;KACF,CAAC,CAAA;IACF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;AAC5C,CAAC;AAED,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;AAEjF,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAA;IACrC,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;AAC9H,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAA;IAC3C,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IAC1C,MAAM,cAAc,EAAE,CAAA;IACtB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IAC5B,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACpB,MAAM,cAAc,EAAE,CAAA;IACtB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,+BAA+B,CAAC,CAAA;IACvD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;AACpB,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAA;IAC3C,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,QAAQ,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC1B,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,cAAc,EAAE,CAAA;IACzC,CAAC;IACD,MAAM,cAAc,EAAE,CAAA;IACtB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,mBAAmB,CAAC,CAAA;AACjD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAA;IACrC,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IAClD,MAAM,cAAc,EAAE,CAAA;IACtB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AAClC,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;IAC3F,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAA;IACjE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,uBAAuB,CAAA;QAC1C,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QACtE,4EAA4E;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QACrC,aAAa,CAAC,MAAM,EAAE;YACpB,qDAAqD,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG;YACpI,iFAAiF,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI;YAC/G,uGAAuG;YACvG,kDAAkD;SACnD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACb,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,UAAU,CAAA;QAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1D,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAA,CAAC,CAAC,CAAC,CAAA;QACxD,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAA,CAAC,CAAC,CAAC,CAAA;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QACxE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;QAC7B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9E,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/gateway/chat/routes.d.ts

@@ -0,0 +1,45 @@
+import { type UIMessage } from 'ai';
+import type { ConsoleDeps } from '../console-api/deps.js';
+import { type ConsoleRouter } from '../console-api/router.js';
+import type { ChatMessageMetadata, ChatModel, ChatModelPeer } from '../console-api/types.js';
+export declare const CHAT_KEY_LABEL = "Web chat";
+/** Names the conversation for the buyer (`x-<tool>-session-id`, see proxy/conversation-identity.ts). */
+export declare const CHAT_SESSION_HEADER = "x-antseed-chat-session-id";
+export interface ChatRouteOptions {
+    /** The gateway's listen port, known once it is listening. */
+    gatewayPort: () => number;
+    /** Optional Brave Search key (ANTSEED_BRAVE_API_KEY); DuckDuckGo otherwise. */
+    braveApiKey?: string | null;
+}
+export declare function chatRouteRegistrar(options: ChatRouteOptions): (router: ConsoleRouter, deps: ConsoleDeps) => void;
+/**
+ * Stored history never carries an open or answered approval into a new
+ * turn: a request still waiting, or answered but never run (the turn was
+ * cut off), is settled as denied, so it cannot run later.
+ */
+export declare function settleApprovals(message: UIMessage): UIMessage;
+/**
+ * The stored answer `open` with the caller's decisions from `incoming` (the
+ * same answer as the client has it). Only `approved` (and a short reason) is
+ * read from the client, for an approval request the stored answer is waiting
+ * on, matched by both its approval id and tool call id; the call's input
+ * stays the stored one. Requests the client left unanswered are denied.
+ * Null when the stored answer waits on nothing or nothing was answered.
+ */
+export declare function answerApprovals(open: UIMessage, incoming: UIMessage): {
+    message: UIMessage;
+    approvedCommandCalls: Set<string>;
+} | null;
+type StepTokens = NonNullable<ChatMessageMetadata['usage']>;
+/**
+ * A call's cost at the serving peer's advertised prices (USD per million
+ * tokens; cached input at the input price when none is advertised). Null when
+ * the peer or its prices are unknown.
+ */
+export declare function estimateCost(tokens: StepTokens, peer: Pick<ChatModelPeer, 'inputUsdPerMillion' | 'outputUsdPerMillion' | 'cachedInputUsdPerMillion'> | undefined): number | null;
+/** A conversation's title: its first message, on one line, shortened. */
+export declare function threadTitle(message: UIMessage): string;
+/** Text models from the gateway's `/v1/models`, the ones that can use tools first, each with its cheapest offer. */
+export declare function mapChatModels(body: unknown): ChatModel[];
+export {};
+//# sourceMappingURL=routes.d.ts.map

package/dist/gateway/chat/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/gateway/chat/routes.ts"],"names":[],"mappings":"AAwCA,OAAO,EAAoF,KAAK,SAAS,EAAE,MAAM,IAAI,CAAA;AAGrH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAA8C,KAAK,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAEzG,OAAO,KAAK,EAAe,mBAAmB,EAAE,SAAS,EAAE,aAAa,EAAgC,MAAM,yBAAyB,CAAA;AAOvI,eAAO,MAAM,cAAc,aAAa,CAAA;AACxC,wGAAwG;AACxG,eAAO,MAAM,mBAAmB,8BAA8B,CAAA;AAc9D,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,WAAW,EAAE,MAAM,MAAM,CAAA;IACzB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAYD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,IAClD,QAAQ,aAAa,EAAE,MAAM,WAAW,KAAG,IAAI,CA4NxD;AAaD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,CAM7D;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,GAAG;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,CAuBtI;AAED,KAAK,UAAU,GAAG,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAA;AAY3D;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,oBAAoB,GAAG,qBAAqB,GAAG,0BAA0B,CAAC,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAMhL;AAMD,yEAAyE;AACzE,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAItD;AAED,oHAAoH;AACpH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,EAAE,CA+CxD"}