@antseed/cli 0.1.179 → 0.1.181

package/dist/gateway/console-api/handlers/network-test-helpers.js

@@ -0,0 +1,121 @@
+/** Test doubles shared by the wallet and network handler tests: a fake buyer daemon and a request runner. */
+import * as http from 'node:http';
+import { encodePolicyHeader, GATEWAY_CONTROL_HEADER, ROUTING_POLICY_HEADER } from '../../../routing-policy/policy.js';
+import { ConsoleError } from '../router.js';
+export const TEST_SECRET = 'test-control-secret';
+/** A node:http server on an ephemeral port answering `/_antseed/*` from `routes` (keyed by "METHOD /path"). */
+export async function startFakeBuyer(routes) {
+    const requests = [];
+    const server = http.createServer((req, res) => {
+        const chunks = [];
+        req.on('data', (chunk) => chunks.push(chunk));
+        req.on('end', () => {
+            const text = Buffer.concat(chunks).toString('utf8');
+            const recorded = { method: req.method ?? 'GET', url: req.url ?? '/', headers: req.headers, body: text ? JSON.parse(text) : undefined };
+            requests.push(recorded);
+            const path = recorded.url.split('?')[0];
+            const reply = routes[`${recorded.method} ${path}`]?.(recorded) ?? { status: 404, body: { ok: false, error: 'not found' } };
+            res.writeHead(reply.status ?? 200, { 'content-type': 'application/json' });
+            res.end(JSON.stringify(reply.body));
+        });
+    });
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    const port = server.address().port;
+    const client = (path, init = {}) => fetch(`http://127.0.0.1:${port}${path}`, {
+        method: init.method ?? 'GET',
+        headers: {
+            [GATEWAY_CONTROL_HEADER]: TEST_SECRET,
+            ...(init.body !== undefined ? { 'content-type': 'application/json' } : {}),
+            ...(init.policy ? { [ROUTING_POLICY_HEADER]: encodePolicyHeader(init.policy) } : {}),
+        },
+        ...(init.body !== undefined ? { body: JSON.stringify(init.body) } : {}),
+    });
+    return {
+        port,
+        requests,
+        client,
+        close: () => new Promise((resolve) => server.close(() => resolve())),
+    };
+}
+export function fakeDeps(store, now = () => 1_700_000_000_000) {
+    return {
+        store: store,
+        dataDir: '/nonexistent/antseed-test',
+        configPath: '/nonexistent/antseed-test/config.json',
+        buyerPort: 1,
+        controlSecret: TEST_SECRET,
+        publicUrl: null,
+        version: 'test',
+        now,
+        log: () => { },
+    };
+}
+export function memberPrincipal(memberId, roles, orgRole = 'member') {
+    return { kind: 'member', memberId, orgRole, workspaceRoles: new Map(Object.entries(roles)), sessionId: `session-${memberId}` };
+}
+/** Spec semantics of `requireWorkspaceAccess`, for handler tests. */
+export function fakeRequireWorkspaceAccess(_store, principal, workspaceId, minRole = 'member') {
+    if (!principal)
+        throw new ConsoleError(401, 'unauthenticated', 'Sign in.');
+    if (principal.kind === 'token' && principal.scope === 'admin')
+        return;
+    if (principal.kind === 'member' && principal.orgRole !== 'member')
+        return;
+    const role = principal.kind === 'member' ? principal.workspaceRoles.get(workspaceId) : undefined;
+    if (!role || (minRole === 'admin' && role !== 'admin'))
+        throw new ConsoleError(403, 'forbidden', 'No access.');
+}
+export function fakeCanSeeWorkspace(_store, principal, workspaceId) {
+    try {
+        fakeRequireWorkspaceAccess(_store, principal, workspaceId);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function fakeRequireOrgAdmin(principal) {
+    if (!principal)
+        throw new ConsoleError(401, 'unauthenticated', 'Sign in.');
+    if (principal.kind === 'token' && principal.scope === 'admin')
+        return;
+    if (principal.kind === 'member' && principal.orgRole !== 'member')
+        return;
+    throw new ConsoleError(403, 'forbidden', 'Organization admins only.');
+}
+/** Runs a registered route the way the console server would, minus auth. */
+export async function call(router, method, pathWithQuery, principal, body) {
+    const [path, query = ''] = pathWithQuery.split('?');
+    const matched = router.match(method, path);
+    if (!matched)
+        throw new Error(`no route for ${method} ${path}`);
+    return matched.route.handler({
+        method,
+        path: path,
+        params: matched.params,
+        query: new URLSearchParams(query),
+        body,
+        headers: {},
+        principal,
+        raw: {},
+        res: {},
+    });
+}
+export async function rejectsWith(promise, status, code) {
+    try {
+        await promise;
+    }
+    catch (err) {
+        if (!(err instanceof ConsoleError))
+            throw err;
+        if (err.status !== status || (code !== undefined && err.code !== code)) {
+            throw new Error(`expected ${status}${code ? ` ${code}` : ''}, got ${err.status} ${err.code}: ${err.message}`);
+        }
+        return;
+    }
+    throw new Error(`expected ConsoleError ${status}, but it resolved`);
+}
+export function lastRequest(buyer, match) {
+    return [...buyer.requests].reverse().find((request) => match(request.url));
+}
+//# sourceMappingURL=network-test-helpers.js.map

package/dist/gateway/console-api/handlers/network-test-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-test-helpers.js","sourceRoot":"","sources":["../../../../src/gateway/console-api/handlers/network-test-helpers.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AAErH,OAAO,EAAE,YAAY,EAAsC,MAAM,cAAc,CAAA;AAmB/E,MAAM,CAAC,MAAM,WAAW,GAAG,qBAAqB,CAAA;AAEhD,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAsC;IACzE,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACnD,MAAM,QAAQ,GAAyB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;YAC5J,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAA;YAC1H,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC1E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;IAC5E,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAA;IACnD,MAAM,MAAM,GAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,EAAE;QACxF,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,OAAO,EAAE;YACP,CAAC,sBAAsB,CAAC,EAAE,WAAW;YACrC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC,CAAA;IACF,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,MAAM;QACN,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;KAC3E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,MAAoB,GAAG,EAAE,CAAC,iBAAiB;IACjF,OAAO;QACL,KAAK,EAAE,KAA6B;QACpC,OAAO,EAAE,2BAA2B;QACpC,UAAU,EAAE,uCAAuC;QACnD,SAAS,EAAE,CAAC;QACZ,aAAa,EAAE,WAAW;QAC1B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,MAAM;QACf,GAAG;QACH,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;KACd,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAyC,EAAE,UAAwC,QAAQ;IAC3I,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,QAAQ,EAAE,EAAE,CAAA;AAChI,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,0BAA0B,CAAC,MAAe,EAAE,SAA2B,EAAE,WAAmB,EAAE,UAA8B,QAAQ;IAClJ,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAA;IAC1E,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO;QAAE,OAAM;IACrE,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAM;IACzE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAChG,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;AAChH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAe,EAAE,SAA2B,EAAE,WAAmB;IACnG,IAAI,CAAC;QACH,0BAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAA2B;IAC7D,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAA;IAC1E,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO;QAAE,OAAM;IACrE,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAM;IACzE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,2BAA2B,CAAC,CAAA;AACvE,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,MAAqB,EAAE,MAAc,EAAE,aAAqB,EAAE,SAA2B,EAAE,IAAc;IAClI,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAK,CAAC,CAAA;IAC3C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,IAAI,IAAI,EAAE,CAAC,CAAA;IAC/D,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC3B,MAAM;QACN,IAAI,EAAE,IAAK;QACX,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC;QACjC,IAAI;QACJ,OAAO,EAAE,EAAE;QACX,SAAS;QACT,GAAG,EAAE,EAA0B;QAC/B,GAAG,EAAE,EAAyB;KAC/B,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAyB,EAAE,MAAc,EAAE,IAAa;IACxF,IAAI,CAAC;QACH,MAAM,OAAO,CAAA;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,YAAY,CAAC;YAAE,MAAM,GAAG,CAAA;QAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/G,CAAC;QACD,OAAM;IACR,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,mBAAmB,CAAC,CAAA;AACrE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAgB,EAAE,KAA+B;IAC3E,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;AAC5E,CAAC"}

package/dist/gateway/console-api/handlers/network.d.ts

@@ -0,0 +1,15 @@
+/** Sellers the buyer knows about, and which of them a request would route to. */
+import { resolvePolicy } from '../../policy-resolver.js';
+import { canSeeWorkspace, requireOrgAdmin } from '../access.js';
+import type { ConsoleDeps } from '../deps.js';
+import { type ConsoleRouter } from '../router.js';
+import { type BuyerClient } from './network-buyer.js';
+/** Seams for tests; production uses the defaults. */
+export interface NetworkRouteOverrides {
+    buyer?: BuyerClient;
+    canSeeWorkspace?: typeof canSeeWorkspace;
+    requireOrgAdmin?: typeof requireOrgAdmin;
+    resolvePolicy?: typeof resolvePolicy;
+}
+export declare function registerNetworkRoutes(router: ConsoleRouter, deps: ConsoleDeps, overrides?: NetworkRouteOverrides): void;
+//# sourceMappingURL=network.d.ts.map

package/dist/gateway/console-api/handlers/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../../../src/gateway/console-api/handlers/network.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAExD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAqC,KAAK,aAAa,EAAE,MAAM,cAAc,CAAA;AAEpF,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEzE,qDAAqD;AACrD,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,eAAe,CAAC,EAAE,OAAO,eAAe,CAAA;IACxC,eAAe,CAAC,EAAE,OAAO,eAAe,CAAA;IACxC,aAAa,CAAC,EAAE,OAAO,aAAa,CAAA;CACrC;AAOD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,GAAE,qBAA0B,GAAG,IAAI,CA6C3H"}

package/dist/gateway/console-api/handlers/network.js

@@ -0,0 +1,57 @@
+/** Sellers the buyer knows about, and which of them a request would route to. */
+import { resolvePolicy } from '../../policy-resolver.js';
+import { buyerLimits, listNetworkModels, listNetworkPeers, previewRoute } from '../../services/network.js';
+import { canSeeWorkspace, requireOrgAdmin } from '../access.js';
+import { ConsoleError } from '../router.js';
+import { defaultBuyerClient } from './network-buyer.js';
+function param(request, name) {
+    const value = request.query.get(name)?.trim();
+    return value ? value : undefined;
+}
+export function registerNetworkRoutes(router, deps, overrides = {}) {
+    const buyer = overrides.buyer ?? defaultBuyerClient(deps);
+    const canSee = overrides.canSeeWorkspace ?? canSeeWorkspace;
+    const orgAdmin = overrides.requireOrgAdmin ?? requireOrgAdmin;
+    const resolve = overrides.resolvePolicy ?? resolvePolicy;
+    router.add('GET', '/peers', async () => listNetworkPeers(deps.store, buyer, deps.now()));
+    /** Every model on the network with the sellers offering it; unfiltered, like `/peers`. */
+    router.add('GET', '/models', async () => listNetworkModels(deps.store, buyer, deps.now()));
+    /** Checks the caller may see the policy of every level it names. */
+    const previewTarget = (request) => {
+        const principal = request.principal;
+        const target = {
+            keyId: param(request, 'key'),
+            workspaceId: param(request, 'workspace'),
+            memberId: param(request, 'member'),
+            presetSlug: param(request, 'preset'),
+        };
+        if (principal?.kind === 'key') {
+            if (target.keyId && target.keyId !== principal.keyId)
+                throw new ConsoleError(403, 'forbidden', 'A key session can preview only its own key.');
+            return { keyId: principal.keyId, ...(target.presetSlug ? { presetSlug: target.presetSlug } : {}) };
+        }
+        if (target.keyId) {
+            const keyWorkspace = deps.store.workspaceForKey(target.keyId)?.id;
+            if (!keyWorkspace || !canSee(deps.store, principal, keyWorkspace))
+                throw new ConsoleError(404, 'not_found', 'Key not found.');
+            if (target.workspaceId && target.workspaceId !== keyWorkspace)
+                throw new ConsoleError(400, 'bad_request', 'That key belongs to another workspace.');
+            target.workspaceId = keyWorkspace;
+        }
+        if (target.workspaceId && !canSee(deps.store, principal, target.workspaceId)) {
+            throw new ConsoleError(403, 'forbidden', 'You do not have access to this workspace.');
+        }
+        if (target.memberId && !(principal?.kind === 'member' && principal.memberId === target.memberId))
+            orgAdmin(principal);
+        return Object.fromEntries(Object.entries(target).filter(([, value]) => value !== undefined));
+    };
+    router.add('GET', '/route-preview', async (request) => {
+        const requested = param(request, 'model');
+        if (!requested)
+            throw new ConsoleError(400, 'bad_request', 'model is required.');
+        return previewRoute(deps.store, buyer, requested, previewTarget(request), resolve, deps.configPath);
+    }, { allow: ['member', 'token', 'key'] });
+    /** The buyer's hard limits, which apply to every key whatever its policy. */
+    router.add('GET', '/routing/buyer-limits', async () => buyerLimits(deps.configPath, buyer), { allow: ['member', 'token', 'key'] });
+}
+//# sourceMappingURL=network.js.map

package/dist/gateway/console-api/handlers/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../../../src/gateway/console-api/handlers/network.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAsB,MAAM,2BAA2B,CAAA;AAC9H,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE/D,OAAO,EAAE,YAAY,EAA2C,MAAM,cAAc,CAAA;AAEpF,OAAO,EAAE,kBAAkB,EAAoB,MAAM,oBAAoB,CAAA;AAUzE,SAAS,KAAK,CAAC,OAAuB,EAAE,IAAY;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;IAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAqB,EAAE,IAAiB,EAAE,YAAmC,EAAE;IACnH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,IAAI,eAAe,CAAA;IAC3D,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,IAAI,eAAe,CAAA;IAC7D,MAAM,OAAO,GAAG,SAAS,CAAC,aAAa,IAAI,aAAa,CAAA;IAExD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAqB,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACzG,0FAA0F;IAC1F,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,IAA6B,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IAEnH,oEAAoE;IACpE,MAAM,aAAa,GAAG,CAAC,OAAuB,EAAiB,EAAE;QAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QACnC,MAAM,MAAM,GAAkB;YAC5B,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;YAC5B,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC;YACxC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;YAClC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;SACrC,CAAA;QACD,IAAI,SAAS,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,6CAA6C,CAAC,CAAA;YAC7I,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QACpG,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAA;YACjE,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAA;YAC7H,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,wCAAwC,CAAC,CAAA;YACnJ,MAAM,CAAC,WAAW,GAAG,YAAY,CAAA;QACnC,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,2CAA2C,CAAC,CAAA;QACvF,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;YAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;QACrH,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAkB,CAAA;IAC/G,CAAC,CAAA;IAED,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAyB,EAAE;QAC3E,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACzC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAA;QAChF,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACrG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;IAEzC,6EAA6E;IAC7E,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,uBAAuB,EAAE,KAAK,IAA0B,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAC9G,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;AAC1C,CAAC"}

package/dist/gateway/console-api/handlers/network.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=network.test.d.ts.map

package/dist/gateway/console-api/handlers/network.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.test.d.ts","sourceRoot":"","sources":["../../../../src/gateway/console-api/handlers/network.test.ts"],"names":[],"mappings":""}

package/dist/gateway/console-api/handlers/network.test.js

@@ -0,0 +1,383 @@
+import assert from 'node:assert/strict';
+import { after, before, test } from 'node:test';
+import { decodePolicyHeader, GATEWAY_CONTROL_HEADER, ROUTING_POLICY_HEADER } from '../../../routing-policy/policy.js';
+import { ConsoleRouter } from '../router.js';
+import { registerNetworkRoutes } from './network.js';
+import { enrichCandidates, mapNetworkModels, mapPeers, peerServices, teeVerifiedPeers } from './network-mapping.js';
+import { call, fakeCanSeeWorkspace, fakeDeps, fakeRequireOrgAdmin, memberPrincipal, rejectsWith, startFakeBuyer, TEST_SECRET, lastRequest, } from './network-test-helpers.js';
+// Obvious fake peer ids.
+const PEER_A = 'aa'.repeat(20);
+const PEER_B = 'bb'.repeat(20);
+const PEER_C = 'cc'.repeat(20);
+const NOW = 1_700_000_000_000;
+const PEERS_BODY = {
+    ok: true,
+    peers: [
+        {
+            peerId: PEER_A,
+            displayName: 'Fake TEE Seller',
+            providers: ['openai'],
+            capabilities: ['verifier.antseed-verifier'],
+            providerPricing: {
+                openai: {
+                    defaults: { inputUsdPerMillion: 1, outputUsdPerMillion: 2 },
+                    services: { 'open-model-a': { inputUsdPerMillion: 0.5, outputUsdPerMillion: 1.5, cachedInputUsdPerMillion: 0.1 } },
+                },
+            },
+            providerServiceCategories: { openai: { services: { 'open-model-a': ['chat', 'coding'], 'open-model-b': ['chat'] } } },
+            reputationScore: 80,
+            onChainReputationScore: 61,
+            trust: { score: 72, washFlagged: false },
+            onChainPoolStakeAnts: 1200,
+            onChainUsageShareBps: 250,
+            onChainWashFlagged: false,
+            verificationResults: { verified: false, checkedAtMs: 1, domains: [], github: [] },
+            lastSeen: NOW - 5_000,
+        },
+        {
+            peerId: PEER_B,
+            providers: ['anthropic'],
+            capabilities: [],
+            providerPricing: { anthropic: { defaults: { inputUsdPerMillion: 3, outputUsdPerMillion: 15 } } },
+            onChainWashFlagged: true,
+            verificationResults: {
+                verified: true,
+                checkedAtMs: 1,
+                domains: [{ domain: 'Seller.Example.com', verified: true }, { domain: 'unchecked.example.com', verified: false }],
+                github: [{ username: 'fake-seller', repository: 'models', verified: true }, { username: 'bad name!', verified: true }],
+            },
+            lastSeen: NOW - 60_000,
+        },
+    ],
+};
+const HEALTH_BODY = {
+    ok: true,
+    peers: [
+        { peerId: PEER_B, failureStreak: 3, cooldownUntil: NOW + 30_000, coolingDown: true },
+        { peerId: PEER_A, failureStreak: 0, cooldownUntil: 0, coolingDown: false },
+    ],
+};
+const TEE_SNAPSHOT = {
+    sessionId: 's',
+    verificationEnabled: true,
+    evidence: [{ peerId: PEER_A, verifierId: 'antseed-verifier', fingerprint: 'f', checkedAt: NOW - 1000, expiresAt: NOW + 60_000, sellerNodeVerified: true, claims: [] }],
+};
+// The buyer's `/v1/models`, trimmed to the fields the console reads.
+const MODELS_BODY = {
+    object: 'list',
+    data: [
+        {
+            id: 'open-model-a',
+            name: 'Open Model A',
+            aliases: ['open-model-a', 'open-model-a-latest'],
+            type: 'text',
+            context_length: 32_000,
+            peers: [
+                {
+                    peerId: PEER_A, displayName: 'Fake TEE Seller', provider: 'openai', serviceId: 'open-model-a', protocol: 'openai-chat-completions', protocols: ['openai-chat-completions', 'openai-responses'],
+                    type: 'text', advertisedVerifierIds: ['antseed-verifier'], capabilities: { contextWindow: 128_000, toolUse: true, inputs: ['text', 'image'] },
+                    reputationScore: 61, effectiveReputationScore: 64, onChainReputationScore: 61, inputUsdPerMillion: 0.5, outputUsdPerMillion: 1.5, cachedInputUsdPerMillion: 0.1,
+                },
+                {
+                    peerId: PEER_B, provider: 'anthropic', serviceId: 'Open-Model-A', protocol: null, protocols: [], type: 'text', capabilities: { contextWindow: 32_000, reasoning: false },
+                    reputationScore: null, effectiveReputationScore: null, onChainReputationScore: null, inputUsdPerMillion: 0, outputUsdPerMillion: 0,
+                },
+            ],
+        },
+        {
+            id: 'open-image-model',
+            name: 'Open Image Model',
+            aliases: [],
+            type: 'image',
+            peers: [{ peerId: PEER_C, provider: 'fal', serviceId: 'open-image-model', protocol: null, protocols: [], type: 'image', reputationScore: 30, effectiveReputationScore: 30, onChainReputationScore: null, minImageUsdPerImage: 0.04, maxImageUsdPerImage: 0.02 }],
+        },
+        { name: 'no id' },
+    ],
+};
+let buyer;
+let verificationAllowed = false;
+let modelsStatus = 200;
+let peersDown = false;
+before(async () => {
+    buyer = await startFakeBuyer({
+        'GET /_antseed/peers': () => (peersDown ? { status: 500, body: { error: 'boom' } } : { body: PEERS_BODY }),
+        'GET /_antseed/peer-health': () => ({ body: HEALTH_BODY }),
+        'GET /v1/models': () => modelsStatus === 200
+            ? { body: MODELS_BODY }
+            : { status: modelsStatus, body: { error: 'Buyer is not ready yet.' } },
+        'GET /_antseed/verification': () => verificationAllowed
+            ? { body: TEE_SNAPSHOT }
+            : { status: 403, body: { error: 'Local verification authorization required' } },
+        'GET /_antseed/route-preview': (req) => ({
+            body: {
+                model: new URL(req.url, 'http://x').searchParams.get('model'),
+                candidates: [
+                    { peerId: PEER_A, displayName: null, rank: 1, eligible: true, reasons: ['cheapest'], inputUsdPerMillion: 0.5, outputUsdPerMillion: 1.5, trustScore: null },
+                    { peerId: PEER_C, displayName: 'Named By Buyer', rank: null, eligible: false, reasons: ['blocked by workspace'], inputUsdPerMillion: null, outputUsdPerMillion: null, trustScore: 40 },
+                ],
+                buyer: { minReputation: 40, requireVerified: true },
+            },
+        }),
+    });
+});
+after(async () => {
+    await buyer.close();
+});
+const KEY_WORKSPACES = { key_team: 'ws_team', key_other: 'ws_other' };
+const store = {
+    peerStats: (since) => {
+        assert.equal(since, NOW - 24 * 60 * 60 * 1000);
+        return [{ peerId: PEER_A, requests: 17, latencyMsP50: 840 }];
+    },
+    workspaceForKey: (keyId) => (KEY_WORKSPACES[keyId] ? { id: KEY_WORKSPACES[keyId] } : null),
+};
+const member = memberPrincipal('m_member', { ws_team: 'member' });
+const orgAdmin = memberPrincipal('m_admin', {}, 'admin');
+const keySession = { kind: 'key', keyId: 'key_team', sessionId: 'ks' };
+const resolveCalls = [];
+function fakeResolvePolicy(_store, target) {
+    resolveCalls.push({ ...target });
+    const policy = { allowedModels: ['open-model-a'], blockedPeerIds: [PEER_C], sort: 'price' };
+    return {
+        policy,
+        sources: [
+            { level: 'buyer', id: null, policy: null },
+            { level: 'gateway', id: null, policy: null },
+            ...(target.workspaceId ? [{ level: 'workspace', id: target.workspaceId, policy }] : []),
+        ],
+    };
+}
+function setup(extra = {}) {
+    const router = new ConsoleRouter();
+    registerNetworkRoutes(router, fakeDeps(store, () => NOW), {
+        buyer: buyer.client,
+        canSeeWorkspace: fakeCanSeeWorkspace,
+        requireOrgAdmin: fakeRequireOrgAdmin,
+        resolvePolicy: fakeResolvePolicy,
+        ...extra,
+    });
+    return router;
+}
+// ── Peers ────────────────────────────────────────────────────────────────
+test('peer services price each service from its own entry or the provider default', () => {
+    assert.deepEqual(peerServices(PEERS_BODY.peers[0]), [
+        { provider: 'openai', service: 'open-model-a', inputUsdPerMillion: 0.5, outputUsdPerMillion: 1.5, cachedInputUsdPerMillion: 0.1, categories: ['chat', 'coding'] },
+        { provider: 'openai', service: 'open-model-b', inputUsdPerMillion: 1, outputUsdPerMillion: 2, cachedInputUsdPerMillion: null, categories: ['chat'] },
+    ]);
+});
+test('TEE snapshot: only current passing attestations count', () => {
+    const verified = teeVerifiedPeers({
+        evidence: [
+            ...TEE_SNAPSHOT.evidence,
+            { peerId: PEER_B, verifierId: 'antseed-verifier', sellerNodeVerified: true, expiresAt: NOW - 1 },
+            { peerId: PEER_C, verifierId: 'antseed-verifier', sellerNodeVerified: false, expiresAt: NOW + 1 },
+        ],
+    }, NOW);
+    assert.deepEqual([...verified], [PEER_A]);
+});
+test('GET peers merges buyer peers, health and gateway stats', async () => {
+    verificationAllowed = false;
+    const peers = await call(setup(), 'GET', '/peers', member);
+    assert.equal(peers.length, 2);
+    const [a, b] = peers;
+    assert.deepEqual({ ...a, services: a.services.length }, {
+        peerId: PEER_A,
+        displayName: 'Fake TEE Seller',
+        services: 2,
+        trustScore: 72,
+        // The buyer's own score wins over the seller-reported 80.
+        reputationScore: 61,
+        // No verification snapshot and no verified claims.
+        verified: false,
+        verificationLinks: [],
+        tee: true,
+        stakeAnts: '1200',
+        usageShareBps: 250,
+        washFlagged: false,
+        lastSeen: NOW - 5_000,
+        health: { failureStreak: 0, coolingDownUntil: null },
+        latencyMsP50: 840,
+        requests24h: 17,
+    });
+    assert.equal(b.verified, true);
+    // Only claims that checked out, sanitised, as links.
+    assert.deepEqual(b.verificationLinks, [
+        { kind: 'domain', label: 'seller.example.com', href: 'https://seller.example.com' },
+        { kind: 'github', label: '@fake-seller/models', href: 'https://github.com/fake-seller/models' },
+    ]);
+    assert.equal(b.tee, false);
+    assert.equal(b.washFlagged, true);
+    assert.equal(b.trustScore, null);
+    assert.equal(b.reputationScore, null);
+    assert.deepEqual(b.health, { failureStreak: 3, coolingDownUntil: NOW + 30_000 });
+    assert.equal(b.requests24h, 0);
+    assert.equal(b.latencyMsP50, null);
+    const sent = lastRequest(buyer, (url) => url === '/_antseed/peers');
+    assert.equal(sent?.headers[GATEWAY_CONTROL_HEADER], TEST_SECRET);
+});
+test('GET peers uses the TEE snapshot when the buyer shares it', async () => {
+    verificationAllowed = true;
+    try {
+        const peers = await call(setup(), 'GET', '/peers', member);
+        // A by its TEE attestation, B by its verified ownership claims.
+        assert.deepEqual(peers.map((peer) => peer.verified), [true, true]);
+    }
+    finally {
+        verificationAllowed = false;
+    }
+});
+test('GET peers still answers without peer health', () => {
+    const peers = mapPeers({ peers: PEERS_BODY, health: null, verification: null, stats: [], now: NOW });
+    assert.deepEqual(peers[1].health, { failureStreak: 0, coolingDownUntil: null });
+});
+// ── Models ───────────────────────────────────────────────────────────────
+test('network models merge the buyer catalog with the peer list', () => {
+    const peers = mapPeers({ peers: PEERS_BODY, health: HEALTH_BODY, verification: null, stats: [{ peerId: PEER_A, requests: 1, latencyMsP50: 840 }], now: NOW });
+    const [text, image] = mapNetworkModels(MODELS_BODY, peers);
+    assert.equal(mapNetworkModels(MODELS_BODY, peers).length, 2, 'entries without an id are skipped');
+    assert.deepEqual({ ...text, offers: text.offers.length }, {
+        id: 'open-model-a',
+        name: 'Open Model A',
+        aliases: ['open-model-a-latest'],
+        type: 'text',
+        contextLength: 128_000,
+        capabilities: ['toolUse', 'vision'],
+        sellers: 2,
+        inputUsdPerMillion: { min: 0, max: 0.5 },
+        outputUsdPerMillion: { min: 0, max: 1.5 },
+        free: true,
+        teeSellers: 1,
+        verifiedSellers: 1,
+        offers: 2,
+    });
+    assert.deepEqual(text.offers[0], {
+        peerId: PEER_A,
+        displayName: 'Fake TEE Seller',
+        serviceId: 'open-model-a',
+        provider: 'openai',
+        protocols: ['openai-chat-completions', 'openai-responses'],
+        inputUsdPerMillion: 0.5,
+        outputUsdPerMillion: 1.5,
+        cachedInputUsdPerMillion: 0.1,
+        usdPerImage: null,
+        contextLength: 128_000,
+        free: false,
+        reputationScore: 64,
+        trustScore: 72,
+        verified: false,
+        verificationLinks: [],
+        tee: true,
+        latencyMsP50: 840,
+    });
+    // B's name and verification come from the peer list; it keeps its own service id for pinning.
+    const b = text.offers[1];
+    assert.deepEqual([b.serviceId, b.verified, b.free, b.trustScore, b.latencyMsP50], ['Open-Model-A', true, true, null, null]);
+    assert.deepEqual(b.verificationLinks.map((link) => link.label), ['seller.example.com', '@fake-seller/models']);
+    // A seller the peer list does not know yet, priced per image.
+    assert.equal(image.type, 'image');
+    assert.equal(image.contextLength, null);
+    assert.equal(image.inputUsdPerMillion, null);
+    assert.deepEqual(image.offers[0].usdPerImage, { min: 0.02, max: 0.04 });
+    assert.deepEqual([image.offers[0].displayName, image.offers[0].verified, image.offers[0].free], [null, false, false]);
+    assert.deepEqual(image.offers[0].verificationLinks, []);
+});
+test('GET models lists the unfiltered network catalog to members and tokens', async () => {
+    modelsStatus = 200;
+    const router = setup();
+    const models = await call(router, 'GET', '/models', member);
+    assert.deepEqual(models.map((model) => model.id), ['open-model-a', 'open-image-model']);
+    assert.equal(models[0].offers[0].latencyMsP50, 840);
+    const sent = lastRequest(buyer, (url) => url === '/v1/models');
+    assert.equal(sent?.headers[GATEWAY_CONTROL_HEADER], TEST_SECRET);
+    assert.equal(sent?.headers[ROUTING_POLICY_HEADER], undefined, 'no routing policy, like /peers');
+    assert.equal(router.match('GET', '/models').route.options.allow, router.match('GET', '/peers').route.options.allow);
+});
+test('GET models reports a buyer that is down or not ready', async () => {
+    modelsStatus = 503;
+    try {
+        await rejectsWith(call(setup(), 'GET', '/models', member), 503, 'buyer_unavailable');
+    }
+    finally {
+        modelsStatus = 200;
+    }
+    const unreachable = setup({ buyer: () => Promise.reject(new Error('connect ECONNREFUSED')) });
+    await rejectsWith(call(unreachable, 'GET', '/models', member), 502, 'buyer_unreachable');
+});
+test('GET models still answers when the peer list fails', async () => {
+    peersDown = true;
+    try {
+        const models = await call(setup(), 'GET', '/models', member);
+        assert.equal(models.length, 2);
+        assert.equal(models[0].offers[1].verified, false);
+        assert.equal(models[0].offers[0].tee, true, 'TEE still comes from the offer');
+    }
+    finally {
+        peersDown = false;
+    }
+});
+// ── Route preview ────────────────────────────────────────────────────────
+test('candidate enrichment fills names and trust from the peer list', () => {
+    const candidates = enrichCandidates([{ peerId: PEER_A, eligible: true, reasons: [] }, { eligible: true }], PEERS_BODY);
+    assert.deepEqual(candidates, [{ peerId: PEER_A, displayName: 'Fake TEE Seller', rank: null, eligible: true, reasons: [], inputUsdPerMillion: null, outputUsdPerMillion: null, trustScore: 72 }]);
+});
+test('GET route-preview sends the resolved policy and enriches candidates', async () => {
+    resolveCalls.length = 0;
+    const preview = await call(setup(), 'GET', '/route-preview?model=open-model-a&key=key_team', member);
+    assert.deepEqual(resolveCalls, [{ keyId: 'key_team', workspaceId: 'ws_team' }]);
+    assert.equal(preview.model, 'open-model-a');
+    assert.equal(preview.modelAllowed, true);
+    assert.deepEqual(preview.policy, { allowedModels: ['open-model-a'], blockedPeerIds: [PEER_C], sort: 'price' });
+    assert.deepEqual(preview.sources.map((source) => source.level), ['buyer', 'gateway', 'workspace']);
+    assert.deepEqual(preview.candidates, [
+        { peerId: PEER_A, displayName: 'Fake TEE Seller', rank: 1, eligible: true, reasons: ['cheapest'], inputUsdPerMillion: 0.5, outputUsdPerMillion: 1.5, trustScore: 72 },
+        { peerId: PEER_C, displayName: 'Named By Buyer', rank: null, eligible: false, reasons: ['blocked by workspace'], inputUsdPerMillion: null, outputUsdPerMillion: null, trustScore: 40 },
+    ]);
+    const sent = lastRequest(buyer, (url) => url.startsWith('/_antseed/route-preview'));
+    assert.equal(sent?.url, '/_antseed/route-preview?model=open-model-a');
+    assert.deepEqual(decodePolicyHeader(String(sent?.headers[ROUTING_POLICY_HEADER])), preview.policy);
+});
+test('GET route-preview shows the buyer hard limits as the buyer source', async () => {
+    const preview = await call(setup(), 'GET', '/route-preview?model=open-model-a&workspace=ws_team', member);
+    const source = preview.sources.find((entry) => entry.level === 'buyer');
+    assert.equal(source?.policy?.minReputation, 40);
+    assert.equal(source?.policy?.requireVerified, true);
+    // Max pricing comes from the buyer config (defaults: the test config file does not exist).
+    assert.equal(typeof source?.policy?.maxInputUsdPerMillion, 'number');
+    assert.equal(source?.policy?.minTrustScore, undefined, 'routing preferences are not buyer limits');
+    // The buyer limits are not folded into the policy the gateway sends.
+    assert.equal(preview.policy.minReputation, undefined);
+});
+test('GET routing/buyer-limits reports the running buyer\'s hard limits to any member or key', async () => {
+    const limits = await call(setup(), 'GET', '/routing/buyer-limits', keySession);
+    assert.equal(limits.minPeerReputation, 40);
+    assert.equal(limits.requireVerifier, true);
+    assert.equal(typeof limits.maxPricing?.inputUsdPerMillion, 'number');
+});
+test('GET route-preview with a disallowed model skips the buyer', async () => {
+    const before = buyer.requests.length;
+    const preview = await call(setup(), 'GET', `/route-preview?model=${PEER_A}@closed-model&workspace=ws_team`, member);
+    assert.equal(preview.model, 'closed-model');
+    assert.equal(preview.modelAllowed, false);
+    assert.deepEqual(preview.candidates, []);
+    assert.equal(buyer.requests.length, before);
+});
+test('GET route-preview checks what the caller may see', async () => {
+    const router = setup();
+    await rejectsWith(call(router, 'GET', '/route-preview', member), 400);
+    await rejectsWith(call(router, 'GET', '/route-preview?model=open-model-a&workspace=ws_other', member), 403);
+    await rejectsWith(call(router, 'GET', '/route-preview?model=open-model-a&key=key_other', member), 404);
+    await rejectsWith(call(router, 'GET', '/route-preview?model=open-model-a&key=key_missing', member), 404);
+    await rejectsWith(call(router, 'GET', '/route-preview?model=open-model-a&key=key_team&workspace=ws_other', orgAdmin), 400);
+    await rejectsWith(call(router, 'GET', '/route-preview?model=open-model-a&member=m_someone', member), 403);
+    // Own member policy, and anything for an org admin.
+    await call(router, 'GET', '/route-preview?model=open-model-a&member=m_member', member);
+    await call(router, 'GET', '/route-preview?model=open-model-a&member=m_someone&key=key_other', orgAdmin);
+    // Key sessions see their own key only.
+    await rejectsWith(call(router, 'GET', '/route-preview?model=open-model-a&key=key_other', keySession), 403);
+    resolveCalls.length = 0;
+    await call(router, 'GET', '/route-preview?model=open-model-a&workspace=ws_other', keySession);
+    assert.deepEqual(resolveCalls, [{ keyId: 'key_team' }]);
+    const route = router.match('GET', '/route-preview').route;
+    assert.deepEqual(route.options.allow, ['member', 'token', 'key']);
+});
+//# sourceMappingURL=network.test.js.map