@antseed/cli 0.1.179 → 0.1.181

package/dist/proxy/route-policy.test.js

@@ -0,0 +1,120 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { buyerConfigReason, buyerHardPolicy, orderByPolicy, pinnedPeerExclusionReasons, policyExclusionReasons, preferenceExclusionReasons, rankingPreferences, secretsMatch, } from './route-policy.js';
+import { narrowPolicy, policyAllowsModel } from '../routing-policy/policy.js';
+const id = (c) => c.repeat(40);
+function facts(overrides = {}) {
+    return {
+        peerId: id('a'),
+        trustScore: 80,
+        reputation: 80,
+        inputUsdPerMillion: 1,
+        outputUsdPerMillion: 2,
+        cachedInputUsdPerMillion: null,
+        imageUsdPerImage: null,
+        unverifiedReason: null,
+        teeCapable: false,
+        ...overrides,
+    };
+}
+test('secretsMatch compares in constant time and rejects mismatches', () => {
+    assert.equal(secretsMatch('abc', 'abc'), true);
+    assert.equal(secretsMatch('abc', 'abd'), false);
+    assert.equal(secretsMatch('abc', 'abcd'), false);
+});
+test('policyExclusionReasons explains every exclusion in plain words', () => {
+    assert.deepEqual(policyExclusionReasons({}, facts()), []);
+    assert.deepEqual(policyExclusionReasons({ blockedPeerIds: [id('a')] }, facts()), ['blocked']);
+    assert.deepEqual(policyExclusionReasons({ allowedPeerIds: [id('b')] }, facts()), ['not in allow list']);
+    assert.deepEqual(policyExclusionReasons({ minTrustScore: 90 }, facts()), ['trust 80 below 90']);
+    assert.deepEqual(policyExclusionReasons({ minReputation: 85 }, facts()), ['reputation 80 below 85']);
+    assert.deepEqual(policyExclusionReasons({ maxInputUsdPerMillion: 0.5 }, facts()), ['input price $1 over cap $0.5']);
+    assert.deepEqual(policyExclusionReasons({ maxOutputUsdPerMillion: 1 }, facts()), ['output price $2 over cap $1']);
+    assert.deepEqual(policyExclusionReasons({ maxCachedInputUsdPerMillion: 0.1 }, facts()), [], 'no cached price advertised');
+    assert.deepEqual(policyExclusionReasons({ maxCachedInputUsdPerMillion: 0.1 }, facts({ cachedInputUsdPerMillion: 0.2 })), ['cached input price $0.2 over cap $0.1']);
+    assert.deepEqual(policyExclusionReasons({ maxImageUsdPerImage: 0.02, maxInputUsdPerMillion: 0 }, facts({ imageUsdPerImage: 0.04 })), ['image price $0.04 over cap $0.02']);
+    assert.deepEqual(policyExclusionReasons({ maxInputUsdPerMillion: 5 }, facts({ inputUsdPerMillion: null })), ['input price unknown, cap $5']);
+    assert.deepEqual(policyExclusionReasons({ requireVerified: true }, facts({ unverifiedReason: 'not verified (no supported verifier)' })), ['not verified (no supported verifier)']);
+});
+test('a halved trust score says why, and sub-cent prices keep their digits', () => {
+    const penalty = 'halved from 80: no cached-input price listed';
+    assert.deepEqual(policyExclusionReasons({ minTrustScore: 50 }, facts({ trustScore: 40, trustPenalty: penalty })), [`trust 40 (${penalty}) below 50`]);
+    const prefs = { preferFreePeers: false, maxInputUsdPerMillion: 25, minTrustScore: 50, allowedPeerIds: [], blockedPeerIds: [] };
+    assert.deepEqual(preferenceExclusionReasons(prefs, id('a'), 40, penalty), [`trust 40 (${penalty}) below buyer minimum 50`]);
+    assert.deepEqual(preferenceExclusionReasons(prefs, id('a'), 40), ['trust 40 below buyer minimum 50']);
+    assert.deepEqual(policyExclusionReasons({ maxInputUsdPerMillion: 0.0001 }, facts({ inputUsdPerMillion: 0.0003 })), ['input price $0.0003 over cap $0.0001']);
+    assert.deepEqual(policyExclusionReasons({ maxInputUsdPerMillion: 0.00001 }, facts({ inputUsdPerMillion: 0.00003 })), ['input price $0.00003 over cap $0.00001']);
+});
+test('buyer hard limits narrow a gateway policy; routing preferences are not part of them', () => {
+    const buyer = buyerHardPolicy({ minPeerReputation: 50, verifierRequired: true });
+    assert.deepEqual(buyer, { minReputation: 50, requireVerified: true });
+    const effective = narrowPolicy(buyer, { minTrustScore: 5, minReputation: 10, blockedPeerIds: [id('d')], requireVerified: false });
+    assert.equal(effective.minTrustScore, 5, 'the gateway decides the trust minimum');
+    assert.equal(effective.minReputation, 50);
+    assert.equal(effective.requireVerified, true);
+    assert.deepEqual(effective.blockedPeerIds, [id('d')]);
+    assert.deepEqual(buyerHardPolicy({ minPeerReputation: 0 }), {});
+});
+test('ranking preferences exclude nobody and let the policy decide preferFree', () => {
+    const prefs = { preferFreePeers: true, maxInputUsdPerMillion: 25, minTrustScore: 60, allowedPeerIds: [id('a')], blockedPeerIds: [id('b')] };
+    assert.deepEqual(rankingPreferences(prefs, {}), { preferFreePeers: true, maxInputUsdPerMillion: 25, minTrustScore: 0, allowedPeerIds: [], blockedPeerIds: [] });
+    assert.equal(rankingPreferences(prefs, { preferFreePeers: false }).preferFreePeers, false);
+});
+test('buyer-limit reasons name their level', () => {
+    assert.equal(buyerConfigReason('reputation 30 below 40'), 'buyer config: reputation 30 below 40');
+    assert.equal(buyerConfigReason('reputation 30 below buyer minimum 40'), 'buyer config: reputation 30 below 40');
+    assert.equal(buyerConfigReason('input price $9 over buyer cap $5'), 'buyer config: input price $9 over cap $5');
+    assert.equal(buyerConfigReason('outside buyer pricing/reputation limits'), 'buyer config: outside pricing/reputation limits');
+});
+const accessors = {
+    peerId: (c) => c.peerId,
+    totalPrice: (c) => c.price,
+    trustScore: (c) => c.trust,
+    latencyMs: (c) => c.latency,
+    coolingDown: (c) => c.cooling === true,
+};
+const a = { peerId: id('a'), price: 5, trust: 70, latency: 300 };
+const b = { peerId: id('b'), price: 1, trust: 90, latency: null };
+const c = { peerId: id('c'), price: 0, trust: 50, latency: 100 };
+const order = (list) => list.map((entry) => entry.peerId[0]);
+test('orderByPolicy ranks by each sort mode, keeping the incoming order as balanced', () => {
+    assert.deepEqual(order(orderByPolicy([a, b, c], {}, 'm', accessors).ordered), ['a', 'b', 'c']);
+    assert.deepEqual(order(orderByPolicy([a, b, c], { sort: 'balanced' }, 'm', accessors).ordered), ['a', 'b', 'c']);
+    assert.deepEqual(order(orderByPolicy([a, b, c], { sort: 'price' }, 'm', accessors).ordered), ['c', 'b', 'a']);
+    assert.deepEqual(order(orderByPolicy([a, b, c], { sort: 'trust' }, 'm', accessors).ordered), ['b', 'a', 'c']);
+    // Unmeasured sellers rank after measured ones.
+    assert.deepEqual(order(orderByPolicy([a, b, c], { sort: 'latency' }, 'm', accessors).ordered), ['c', 'a', 'b']);
+    assert.deepEqual(order(orderByPolicy([a, b, c], { preferFreePeers: true }, 'm', accessors).ordered), ['c', 'a', 'b']);
+    assert.deepEqual(order(orderByPolicy([{ ...c, cooling: true }, a, b], { sort: 'price' }, 'm', accessors).ordered), ['b', 'a', 'c']);
+});
+test('orderByPolicy applies model route chains, strict and non-strict', () => {
+    const loose = orderByPolicy([a, b, c], { modelRoutes: { 'Kimi-K3': { peerIds: [id('c'), id('a')] } } }, 'kimi-k3', accessors);
+    assert.deepEqual(order(loose.ordered), ['c', 'a', 'b']);
+    assert.equal(loose.excluded.size, 0);
+    assert.equal(loose.chainPosition.get(id('a')), 1);
+    const strict = orderByPolicy([a, b, c], { modelRoutes: { 'kimi-k3': { peerIds: [id('b'), id('d')], strict: true } } }, 'kimi-k3', accessors);
+    assert.deepEqual(order(strict.ordered), ['b']);
+    assert.deepEqual([...strict.excluded.keys()].sort(), [id('a'), id('c')]);
+    const other = orderByPolicy([a, b, c], { modelRoutes: { 'other-model': { peerIds: [id('c')], strict: true } } }, 'kimi-k3', accessors);
+    assert.deepEqual(order(other.ordered), ['a', 'b', 'c']);
+});
+test('pinned peers are refused by strict model routes and allowedModels uses canonical matching', () => {
+    const policy = { modelRoutes: { 'kimi-k3': { peerIds: [id('b')], strict: true } } };
+    assert.deepEqual(pinnedPeerExclusionReasons(policy, facts(), 'kimi-k3'), ['not in strict route for this model']);
+    assert.deepEqual(pinnedPeerExclusionReasons(policy, facts({ peerId: id('b') }), 'kimi-k3'), []);
+    assert.equal(policyAllowsModel({ allowedModels: ['Kimi K3'] }, 'kimi-k3'), true);
+    assert.equal(policyAllowsModel({ allowedModels: ['gpt-5'] }, 'kimi-k3'), false);
+    assert.equal(policyAllowsModel(null, 'kimi-k3'), true);
+});
+test('requireTee excludes sellers without the TEE capability, independent of verification', () => {
+    assert.deepEqual(policyExclusionReasons({ requireTee: true }, facts()), ['no TEE']);
+    assert.deepEqual(policyExclusionReasons({ requireTee: true }, facts({ teeCapable: true, unverifiedReason: 'not verified (verification disabled on this buyer)' })), []);
+    assert.deepEqual(pinnedPeerExclusionReasons({ requireTee: true }, facts(), 'gpt-5'), ['no TEE']);
+});
+test('model routes and allowedModels match like the gateway: case, variants, peer@model', () => {
+    const policy = narrowPolicy({}, { allowedModels: ['GPT-5.6-sol'], modelRoutes: { 'GPT-5.6-SOL': { peerIds: [id('b')], strict: true } } });
+    assert.equal(policyAllowsModel(policy, 'gpt-56-sol'), true);
+    assert.equal(policyAllowsModel(policy, `${id('b')}@gpt-5.6-sol`), true);
+    assert.deepEqual(pinnedPeerExclusionReasons(policy, facts(), 'gpt-56-sol'), ['not in strict route for this model']);
+});
+//# sourceMappingURL=route-policy.test.js.map

package/dist/proxy/route-policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-policy.test.js","sourceRoot":"","sources":["../../src/proxy/route-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,EAClB,YAAY,GAEb,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE7E,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAE9C,SAAS,KAAK,CAAC,YAAsC,EAAE;IACrD,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC;QACf,UAAU,EAAE,EAAE;QACd,UAAU,EAAE,EAAE;QACd,kBAAkB,EAAE,CAAC;QACrB,mBAAmB,EAAE,CAAC;QACtB,wBAAwB,EAAE,IAAI;QAC9B,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,IAAI;QACtB,UAAU,EAAE,KAAK;QACjB,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAA;IAC9C,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAC/C,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAClD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IACzD,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IAC7F,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAA;IACvG,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAA;IAC/F,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAA;IACpG,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,qBAAqB,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAA;IACnH,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,CAAA;IACjH,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAA;IACzH,MAAM,CAAC,SAAS,CACd,sBAAsB,CAAC,EAAE,2BAA2B,EAAE,GAAG,EAAE,EAAE,KAAK,CAAC,EAAE,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC,EACtG,CAAC,uCAAuC,CAAC,CAC1C,CAAA;IACD,MAAM,CAAC,SAAS,CACd,sBAAsB,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,EAClH,CAAC,kCAAkC,CAAC,CACrC,CAAA;IACD,MAAM,CAAC,SAAS,CACd,sBAAsB,CAAC,EAAE,qBAAqB,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,EACzF,CAAC,6BAA6B,CAAC,CAChC,CAAA;IACD,MAAM,CAAC,SAAS,CACd,sBAAsB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,gBAAgB,EAAE,sCAAsC,EAAE,CAAC,CAAC,EACtH,CAAC,sCAAsC,CAAC,CACzC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,OAAO,GAAG,8CAA8C,CAAA;IAC9D,MAAM,CAAC,SAAS,CACd,sBAAsB,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,EAC/F,CAAC,aAAa,OAAO,YAAY,CAAC,CACnC,CAAA;IACD,MAAM,KAAK,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAA;IAC9H,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,aAAa,OAAO,0BAA0B,CAAC,CAAC,CAAA;IAC3H,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,CAAA;IACrG,MAAM,CAAC,SAAS,CACd,sBAAsB,CAAC,EAAE,qBAAqB,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC,EAChG,CAAC,sCAAsC,CAAC,CACzC,CAAA;IACD,MAAM,CAAC,SAAS,CACd,sBAAsB,CAAC,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,EAClG,CAAC,wCAAwC,CAAC,CAC3C,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qFAAqF,EAAE,GAAG,EAAE;IAC/F,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAA;IAChF,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAA;IACrE,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAA;IACjI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,EAAE,uCAAuC,CAAC,CAAA;IACjF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IACzC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,CAAA;IAC7C,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACrD,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;AACjE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,MAAM,KAAK,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAA;IAC3I,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAA;IAC/J,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;AAC5F,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;IAChD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,EAAE,sCAAsC,CAAC,CAAA;IACjG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,sCAAsC,CAAC,EAAE,sCAAsC,CAAC,CAAA;IAC/G,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,kCAAkC,CAAC,EAAE,0CAA0C,CAAC,CAAA;IAC/G,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,yCAAyC,CAAC,EAAE,iDAAiD,CAAC,CAAA;AAC/H,CAAC,CAAC,CAAA;AAGF,MAAM,SAAS,GAAG;IAChB,MAAM,EAAE,CAAC,CAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM;IAC1B,UAAU,EAAE,CAAC,CAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK;IAC7B,UAAU,EAAE,CAAC,CAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK;IAC7B,SAAS,EAAE,CAAC,CAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO;IAC9B,WAAW,EAAE,CAAC,CAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI;CAC1C,CAAA;AACD,MAAM,CAAC,GAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAA;AACnE,MAAM,CAAC,GAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACpE,MAAM,CAAC,GAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAA;AACnE,MAAM,KAAK,GAAG,CAAC,IAAS,EAAY,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAA;AAE5E,IAAI,CAAC,+EAA+E,EAAE,GAAG,EAAE;IACzF,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC9F,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAChH,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC7G,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC7G,+CAA+C;IAC/C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC/G,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IACrH,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;AACrI,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;IAC7H,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IACvD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACpC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAEjD,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;IAC5I,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAExE,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;IACtI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;AACzD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2FAA2F,EAAE,GAAG,EAAE;IACrG,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IACnF,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,CAAA;IAChH,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAA;IAC/F,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,aAAa,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;IAChF,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAA;IAC/E,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;AACxD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qFAAqF,EAAE,GAAG,EAAE;IAC/F,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;IACnF,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,oDAAoD,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACvK,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;AAClG,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,mFAAmF,EAAE,GAAG,EAAE;IAC7F,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;IACzI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,CAAA;IAC3D,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAA;IACvE,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,CAAA;AACrH,CAAC,CAAC,CAAA"}

package/dist/proxy/spend-attribution.d.ts

@@ -5,6 +5,8 @@
  * spend event the request produces.
  */
 export declare const SPEND_ATTRIBUTION_HEADER = "x-antseed-attribution-tag";
+/** The feed's database file in the buyer's data dir. */
+export declare const SPEND_ATTRIBUTION_DB_FILE = "attributed-spend.db";
 export interface AttributedSpendEvent {
     seq: number;
     tag: string;
@@ -21,7 +23,11 @@ export interface AttributedSpendEvent {
     at: number;
 }
 export interface AttributedSpendPage {
-    /** Changes whenever the buyer restarts; sequence numbers restart with it. */
+    /**
+     * Identifies the event sequence. A feed backed by a file keeps it (and its
+     * sequence numbers) across buyer restarts; an in-memory feed gets a new
+     * one per boot, and its sequence numbers restart with it.
+     */
     bootId: string;
     /** Lowest sequence number still buffered. A cursor below it lost events. */
     oldestSeq: number;
@@ -29,23 +35,40 @@ export interface AttributedSpendPage {
     cursor: number;
     events: AttributedSpendEvent[];
 }
+export interface SpendAttributionFeedOptions {
+    /**
+     * SQLite file that keeps events (and request tags) across restarts until
+     * a poll acknowledges them. Without one, the feed lives in a temporary
+     * database and is lost with the process.
+     */
+    path?: string;
+    onLog?: (message: string) => void;
+}
 export declare function parseSpendAttributionTag(value: string | undefined): string | null;
 /**
- * Bounded in-memory event feed, with request tags retained for an hour in a
- * temporary SQLite database so late spend keeps its attribution.
+ * Event feed of signed spend for gateway-tagged requests. Events are stored
+ * in SQLite (a file in the buyer's data dir, so a buyer restart before the
+ * gateway polls loses nothing) until an authenticated poll acknowledges
+ * them (see `page`). Acknowledged events are pruned after
+ * an hour, unacknowledged ones after 7 days. Request tags are retained for an
+ * hour so late spend keeps its attribution.
  */
 export declare class SpendAttributionFeed {
     private readonly _now;
-    readonly bootId: `${string}-${string}-${string}-${string}-${string}`;
-    private readonly _tags;
+    readonly bootId: string;
+    private readonly _db;
     private readonly _track;
     private readonly _lookup;
-    private readonly _prune;
-    private readonly _events;
+    private readonly _pruneTags;
+    private readonly _insert;
+    private readonly _select;
+    private readonly _oldest;
+    private readonly _ack;
+    private readonly _pruneEvents;
     /** When each tag last had spend, per identity and seller, for spend signed without a request id. */
     private readonly _recentTagsBySeller;
-    private _nextSeq;
-    constructor(_now?: () => number);
+    private _lastPruneAt;
+    constructor(_now?: () => number, options?: SpendAttributionFeedOptions);
     track(requestId: string, tag: string): void;
     close(): void;
     record(event: {
@@ -58,6 +81,14 @@ export declare class SpendAttributionFeed {
         outputTokens: string;
         outputImages: string;
     }): void;
-    page(after: number): AttributedSpendPage;
+    /**
+     * Events after `after`. With `ack` (an authenticated gateway poll), `after`
+     * also acknowledges every event up to it: the gateway only advances its
+     * cursor past events it has recorded.
+     */
+    page(after: number, options?: {
+        ack?: boolean;
+    }): AttributedSpendPage;
+    private _prune;
 }
 //# sourceMappingURL=spend-attribution.d.ts.map

package/dist/proxy/spend-attribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spend-attribution.d.ts","sourceRoot":"","sources":["../../src/proxy/spend-attribution.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,8BAA8B,CAAA;AAUnE,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,EAAE,EAAE,MAAM,CAAA;CACX;AAED,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAA;IACd,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAA;IACjB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,oBAAoB,EAAE,CAAA;CAC/B;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAGjF;AAED;;;GAGG;AACH,qBAAa,oBAAoB;IAWnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAVjC,QAAQ,CAAC,MAAM,sDAAe;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,oGAAoG;IACpG,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAyC;IAC7E,OAAO,CAAC,QAAQ,CAAI;gBAES,IAAI,GAAE,MAAM,MAAyB;IAOlE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAM3C,KAAK,IAAI,IAAI;IAIb,MAAM,CAAC,KAAK,EAAE;QACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,YAAY,EAAE,MAAM,CAAA;QACpB,UAAU,EAAE,MAAM,CAAA;QAClB,WAAW,EAAE,MAAM,CAAA;QACnB,iBAAiB,EAAE,MAAM,CAAA;QACzB,YAAY,EAAE,MAAM,CAAA;QACpB,YAAY,EAAE,MAAM,CAAA;KACrB,GAAG,IAAI;IAgCR,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB;CAUzC"}
+{"version":3,"file":"spend-attribution.d.ts","sourceRoot":"","sources":["../../src/proxy/spend-attribution.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,8BAA8B,CAAA;AAEnE,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,wBAAwB,CAAA;AAgB9D,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,EAAE,EAAE,MAAM,CAAA;CACX;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAA;IACjB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,oBAAoB,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAClC;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAGjF;AAED;;;;;;;GAOG;AACH,qBAAa,oBAAoB;IAenB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAdjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,oGAAoG;IACpG,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAyC;IAC7E,OAAO,CAAC,YAAY,CAAsB;gBAEb,IAAI,GAAE,MAAM,MAAyB,EAAE,OAAO,GAAE,2BAAgC;IA8C7G,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAO3C,KAAK,IAAI,IAAI;IAIb,MAAM,CAAC,KAAK,EAAE;QACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,YAAY,EAAE,MAAM,CAAA;QACpB,UAAU,EAAE,MAAM,CAAA;QAClB,WAAW,EAAE,MAAM,CAAA;QACnB,iBAAiB,EAAE,MAAM,CAAA;QACzB,YAAY,EAAE,MAAM,CAAA;QACpB,YAAY,EAAE,MAAM,CAAA;KACrB,GAAG,IAAI;IAqBR;;;;OAIG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,mBAAmB;IAezE,OAAO,CAAC,MAAM;CAMf"}

package/dist/proxy/spend-attribution.js

@@ -1,4 +1,6 @@
 import { randomUUID } from 'node:crypto';
+import { mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
 import Database from 'better-sqlite3';
 /**
  * Opaque tag a trusted local front end (the API-key gateway) attaches to a
@@ -7,49 +9,107 @@ import Database from 'better-sqlite3';
  * spend event the request produces.
  */
 export const SPEND_ATTRIBUTION_HEADER = 'x-antseed-attribution-tag';
+/** The feed's database file in the buyer's data dir. */
+export const SPEND_ATTRIBUTION_DB_FILE = 'attributed-spend.db';
 const TAG_PATTERN = /^[A-Za-z0-9:_-]{1,128}$/;
-const MAX_BUFFERED_EVENTS = 10_000;
+/** Most events kept, acknowledged or not; the oldest go first. */
+const MAX_STORED_EVENTS = 100_000;
 const MAX_EVENTS_PER_PAGE = 1000;
 /** How long a request's tag is kept for spend signed after the response. */
 const TAG_RETENTION_MS = 60 * 60 * 1000;
 /** Spend without a request id goes to the seller's recent tag only if no other tag used it this recently. */
 const UNTAGGED_SPEND_WINDOW_MS = 5 * 60 * 1000;
+/** Acknowledged events are kept this long (a second reader may still want them). */
+const ACKED_RETENTION_MS = 60 * 60 * 1000;
+/** Unacknowledged events are kept this long, for a gateway that is down. */
+const UNACKED_RETENTION_MS = 7 * 24 * 60 * 60 * 1000;
+const PRUNE_INTERVAL_MS = 60 * 1000;
 export function parseSpendAttributionTag(value) {
     const tag = value?.trim() ?? '';
     return TAG_PATTERN.test(tag) ? tag : null;
 }
 /**
- * Bounded in-memory event feed, with request tags retained for an hour in a
- * temporary SQLite database so late spend keeps its attribution.
+ * Event feed of signed spend for gateway-tagged requests. Events are stored
+ * in SQLite (a file in the buyer's data dir, so a buyer restart before the
+ * gateway polls loses nothing) until an authenticated poll acknowledges
+ * them (see `page`). Acknowledged events are pruned after
+ * an hour, unacknowledged ones after 7 days. Request tags are retained for an
+ * hour so late spend keeps its attribution.
  */
 export class SpendAttributionFeed {
     _now;
-    bootId = randomUUID();
-    _tags = new Database('');
+    bootId;
+    _db;
     _track;
     _lookup;
-    _prune;
-    _events = [];
+    _pruneTags;
+    _insert;
+    _select;
+    _oldest;
+    _ack;
+    _pruneEvents;
     /** When each tag last had spend, per identity and seller, for spend signed without a request id. */
     _recentTagsBySeller = new Map();
-    _nextSeq = 1;
-    constructor(_now = () => Date.now()) {
+    _lastPruneAt = null;
+    constructor(_now = () => Date.now(), options = {}) {
         this._now = _now;
-        this._tags.exec('CREATE TABLE request_tags (request_id TEXT PRIMARY KEY, tag TEXT NOT NULL, tracked_at INTEGER NOT NULL)');
-        this._track = this._tags.prepare('INSERT OR REPLACE INTO request_tags VALUES (?, ?, ?)');
-        this._prune = this._tags.prepare('DELETE FROM request_tags WHERE tracked_at < ?');
-        this._lookup = this._tags.prepare('SELECT tag FROM request_tags WHERE request_id = ?');
+        this._db = openFeedDatabase(options);
+        this._db.exec(`
+      CREATE TABLE IF NOT EXISTS request_tags (request_id TEXT PRIMARY KEY, tag TEXT NOT NULL, tracked_at INTEGER NOT NULL);
+      CREATE INDEX IF NOT EXISTS request_tags_time ON request_tags(tracked_at);
+      CREATE TABLE IF NOT EXISTS feed_meta (key TEXT PRIMARY KEY, value TEXT NOT NULL);
+      CREATE TABLE IF NOT EXISTS spend_events (
+        seq INTEGER PRIMARY KEY AUTOINCREMENT,
+        tag TEXT NOT NULL,
+        request_id TEXT,
+        buyer_identity TEXT NOT NULL,
+        seller_peer_id TEXT NOT NULL,
+        amount_usdc TEXT NOT NULL,
+        input_tokens TEXT NOT NULL,
+        cached_input_tokens TEXT NOT NULL,
+        output_tokens TEXT NOT NULL,
+        output_images TEXT NOT NULL,
+        at INTEGER NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS spend_events_time ON spend_events(at);
+    `);
+        this._db.prepare("INSERT OR IGNORE INTO feed_meta VALUES ('feed_id', ?), ('acked_seq', '0')").run(randomUUID());
+        this.bootId = this._db.prepare("SELECT value FROM feed_meta WHERE key = 'feed_id'").get().value;
+        this._track = this._db.prepare('INSERT OR REPLACE INTO request_tags VALUES (?, ?, ?)');
+        this._pruneTags = this._db.prepare('DELETE FROM request_tags WHERE tracked_at < ?');
+        this._lookup = this._db.prepare('SELECT tag FROM request_tags WHERE request_id = ? AND tracked_at >= ?');
+        this._insert = this._db.prepare(`
+      INSERT INTO spend_events (tag, request_id, buyer_identity, seller_peer_id, amount_usdc, input_tokens, cached_input_tokens, output_tokens, output_images, at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        this._select = this._db.prepare('SELECT * FROM spend_events WHERE seq > ? ORDER BY seq LIMIT ?');
+        // The next seq when the table is empty: sqlite_sequence remembers the last one handed out.
+        this._oldest = this._db.prepare(`
+      SELECT COALESCE((SELECT MIN(seq) FROM spend_events), (SELECT seq FROM sqlite_sequence WHERE name = 'spend_events') + 1, 1) AS seq
+    `);
+        this._ack = this._db.prepare(`
+      UPDATE feed_meta SET value = CAST(MAX(CAST(value AS INTEGER), ?) AS TEXT) WHERE key = 'acked_seq'
+        AND ? <= COALESCE((SELECT seq FROM sqlite_sequence WHERE name = 'spend_events'), 0)
+    `);
+        this._pruneEvents = this._db.prepare(`
+      DELETE FROM spend_events WHERE (seq <= (SELECT CAST(value AS INTEGER) FROM feed_meta WHERE key = 'acked_seq') AND at < ?)
+        OR at < ? OR seq <= COALESCE((SELECT seq FROM sqlite_sequence WHERE name = 'spend_events'), 0) - ?
+    `);
+        this._prune(this._now());
     }
     track(requestId, tag) {
+        if (!this._db.open)
+            return;
         const now = this._now();
-        this._prune.run(now - TAG_RETENTION_MS);
+        this._prune(now);
         this._track.run(requestId, tag, now);
     }
     close() {
-        this._tags.close();
+        if (this._db.open)
+            this._db.close();
     }
     record(event) {
-        if (!this._tags.open)
+        if (!this._db.open)
             return;
         const now = this._now();
         const sellerKey = `${event.buyerIdentity ?? 'default'}:${event.sellerPeerId}`;
@@ -60,38 +120,74 @@ export class SpendAttributionFeed {
         // Without a request id the spend can only be attributed when exactly one
         // tag (one gateway key's request) is using this identity on this seller.
         const tag = event.requestId
-            ? this._lookup.get(event.requestId)?.tag
+            ? this._lookup.get(event.requestId, now - TAG_RETENTION_MS)?.tag
             : recentTags.size === 1 ? [...recentTags.keys()][0] : undefined;
         if (!tag)
             return;
         recentTags.set(tag, now);
         this._recentTagsBySeller.set(sellerKey, recentTags);
-        this._events.push({
-            seq: this._nextSeq++,
-            tag,
-            requestId: event.requestId,
-            buyerIdentity: event.buyerIdentity ?? 'default',
-            sellerPeerId: event.sellerPeerId,
-            amountUsdc: event.amountUsdc,
-            inputTokens: event.inputTokens,
-            cachedInputTokens: event.cachedInputTokens,
-            outputTokens: event.outputTokens,
-            outputImages: event.outputImages,
-            at: now,
-        });
-        if (this._events.length > MAX_BUFFERED_EVENTS) {
-            this._events.splice(0, this._events.length - MAX_BUFFERED_EVENTS);
-        }
+        this._prune(now);
+        this._insert.run(tag, event.requestId, event.buyerIdentity ?? 'default', event.sellerPeerId, event.amountUsdc, event.inputTokens, event.cachedInputTokens, event.outputTokens, event.outputImages, now);
     }
-    page(after) {
-        const events = this._events.filter((event) => event.seq > after).slice(0, MAX_EVENTS_PER_PAGE);
+    /**
+     * Events after `after`. With `ack` (an authenticated gateway poll), `after`
+     * also acknowledges every event up to it: the gateway only advances its
+     * cursor past events it has recorded.
+     */
+    page(after, options = {}) {
+        const cursorIn = Number.isSafeInteger(after) ? Math.max(after, 0) : 0;
+        if (!this._db.open)
+            return { bootId: this.bootId, oldestSeq: cursorIn + 1, cursor: cursorIn, events: [] };
+        if (options.ack && cursorIn > 0)
+            this._ack.run(cursorIn, cursorIn);
+        const rows = this._select.all(cursorIn, MAX_EVENTS_PER_PAGE);
+        const events = rows.map(toEvent);
         const last = events[events.length - 1];
         return {
             bootId: this.bootId,
-            oldestSeq: this._events[0]?.seq ?? this._nextSeq,
-            cursor: last ? last.seq : Math.max(after, 0),
+            oldestSeq: this._oldest.get().seq,
+            cursor: last ? last.seq : cursorIn,
             events,
         };
     }
+    _prune(now) {
+        if (this._lastPruneAt !== null && now - this._lastPruneAt < PRUNE_INTERVAL_MS)
+            return;
+        this._lastPruneAt = now;
+        this._pruneTags.run(now - TAG_RETENTION_MS);
+        this._pruneEvents.run(now - ACKED_RETENTION_MS, now - UNACKED_RETENTION_MS, MAX_STORED_EVENTS);
+    }
+}
+function toEvent(row) {
+    return {
+        seq: row.seq,
+        tag: row.tag,
+        requestId: row.request_id,
+        buyerIdentity: row.buyer_identity,
+        sellerPeerId: row.seller_peer_id,
+        amountUsdc: row.amount_usdc,
+        inputTokens: row.input_tokens,
+        cachedInputTokens: row.cached_input_tokens,
+        outputTokens: row.output_tokens,
+        outputImages: row.output_images,
+        at: row.at,
+    };
+}
+/** The feed's database file, or a temporary one when it has none or the file cannot be opened. */
+function openFeedDatabase(options) {
+    if (options.path) {
+        try {
+            mkdirSync(dirname(options.path), { recursive: true });
+            const db = new Database(options.path);
+            db.pragma('journal_mode = WAL');
+            db.pragma('synchronous = NORMAL');
+            db.pragma('busy_timeout = 2000');
+            return db;
+        }
+        catch (error) {
+            options.onLog?.(`spend attribution: cannot open ${options.path} (${error instanceof Error ? error.message : String(error)}); spend events will not survive a restart`);
+        }
+    }
+    return new Database('');
 }
 //# sourceMappingURL=spend-attribution.js.map

package/dist/proxy/spend-attribution.js.map

@@ -1 +1 @@
-{"version":3,"file":"spend-attribution.js","sourceRoot":"","sources":["../../src/proxy/spend-attribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAErC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAA;AAEnE,MAAM,WAAW,GAAG,yBAAyB,CAAA;AAC7C,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAClC,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAChC,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACvC,6GAA6G;AAC7G,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;AA4B9C,MAAM,UAAU,wBAAwB,CAAC,KAAyB;IAChE,MAAM,GAAG,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/B,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IAWF;IAVpB,MAAM,GAAG,UAAU,EAAE,CAAA;IACb,KAAK,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAA;IACxB,MAAM,CAAoB;IAC1B,OAAO,CAAoB;IAC3B,MAAM,CAAoB;IAC1B,OAAO,GAA2B,EAAE,CAAA;IACrD,oGAAoG;IACnF,mBAAmB,GAAG,IAAI,GAAG,EAA+B,CAAA;IACrE,QAAQ,GAAG,CAAC,CAAA;IAEpB,YAA6B,OAAqB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QAArC,SAAI,GAAJ,IAAI,CAAiC;QAChE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,yGAAyG,CAAC,CAAA;QAC1H,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAA;QACxF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAA;QACjF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAA;IACxF,CAAC;IAED,KAAK,CAAC,SAAiB,EAAE,GAAW;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,gBAAgB,CAAC,CAAA;QACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACtC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAED,MAAM,CAAC,KASN;QACC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,OAAM;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACvB,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI,KAAK,CAAC,YAAY,EAAE,CAAA;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAA;QACvF,KAAK,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,UAAU;YAAE,IAAI,EAAE,GAAG,GAAG,GAAG,wBAAwB;gBAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC/G,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS;YACzB,CAAC,CAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAiC,EAAE,GAAG;YACzE,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACjE,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACxB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QACnD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChB,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE;YACpB,GAAG;YACH,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,SAAS;YAC/C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,EAAE,EAAE,GAAG;SACR,CAAC,CAAA;QACF,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAA;QAC9F,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACtC,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ;YAChD,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5C,MAAM;SACP,CAAA;IACH,CAAC;CACF"}
+{"version":3,"file":"spend-attribution.js","sourceRoot":"","sources":["../../src/proxy/spend-attribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAErC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAA;AAEnE,wDAAwD;AACxD,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAAqB,CAAA;AAE9D,MAAM,WAAW,GAAG,yBAAyB,CAAA;AAC7C,kEAAkE;AAClE,MAAM,iBAAiB,GAAG,OAAO,CAAA;AACjC,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAChC,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACvC,6GAA6G;AAC7G,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;AAC9C,oFAAoF;AACpF,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACzC,4EAA4E;AAC5E,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACpD,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAA;AA0CnC,MAAM,UAAU,wBAAwB,CAAC,KAAyB;IAChE,MAAM,GAAG,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/B,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IAeF;IAdpB,MAAM,CAAQ;IACN,GAAG,CAAmB;IACtB,MAAM,CAAoB;IAC1B,OAAO,CAAoB;IAC3B,UAAU,CAAoB;IAC9B,OAAO,CAAoB;IAC3B,OAAO,CAAoB;IAC3B,OAAO,CAAoB;IAC3B,IAAI,CAAoB;IACxB,YAAY,CAAoB;IACjD,oGAAoG;IACnF,mBAAmB,GAAG,IAAI,GAAG,EAA+B,CAAA;IACrE,YAAY,GAAkB,IAAI,CAAA;IAE1C,YAA6B,OAAqB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAuC,EAAE;QAAhF,SAAI,GAAJ,IAAI,CAAiC;QAChE,IAAI,CAAC,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;KAkBb,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;QAC/G,IAAI,CAAC,MAAM,GAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAA;QACtH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAA;QACtF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAA;QACnF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAA;QACxG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;KAG/B,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,+DAA+D,CAAC,CAAA;QAChG,2FAA2F;QAC3F,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;KAE/B,CAAC,CAAA;QACF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;KAG5B,CAAC,CAAA;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;KAGpC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,SAAiB,EAAE,GAAW;QAClC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,OAAM;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACtC,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;IACrC,CAAC;IAED,MAAM,CAAC,KASN;QACC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,OAAM;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACvB,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI,KAAK,CAAC,YAAY,EAAE,CAAA;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAA;QACvF,KAAK,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,UAAU;YAAE,IAAI,EAAE,GAAG,GAAG,GAAG,wBAAwB;gBAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC/G,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS;YACzB,CAAC,CAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,GAAG,gBAAgB,CAAiC,EAAE,GAAG;YACjG,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACjE,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACxB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QACnD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CACd,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,IAAI,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAC5F,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,CACxF,CAAA;IACH,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,KAAa,EAAE,UAA6B,EAAE;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACrE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACzG,IAAI,OAAO,CAAC,GAAG,IAAI,QAAQ,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAoB,CAAA;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACtC,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAsB,CAAC,GAAG;YACtD,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ;YAClC,MAAM;SACP,CAAA;IACH,CAAC;IAEO,MAAM,CAAC,GAAW;QACxB,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,iBAAiB;YAAE,OAAM;QACrF,IAAI,CAAC,YAAY,GAAG,GAAG,CAAA;QACvB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,GAAG,gBAAgB,CAAC,CAAA;QAC3C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,GAAG,kBAAkB,EAAE,GAAG,GAAG,oBAAoB,EAAE,iBAAiB,CAAC,CAAA;IAChG,CAAC;CACF;AAgBD,SAAS,OAAO,CAAC,GAAkB;IACjC,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;QAC1C,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,EAAE,EAAE,GAAG,CAAC,EAAE;KACX,CAAA;AACH,CAAC;AAED,kGAAkG;AAClG,SAAS,gBAAgB,CAAC,OAAoC;IAC5D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACrD,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACrC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;YAC/B,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;YACjC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;YAChC,OAAO,EAAE,CAAA;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,EAAE,CAAC,kCAAkC,OAAO,CAAC,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAA;QACxK,CAAC;IACH,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAA;AACzB,CAAC"}

package/dist/proxy/tee-control.d.ts

@@ -9,6 +9,8 @@ export declare class TeeControl {
     constructor(sessionId: string);
     publish(directory: string, port: number): Promise<void>;
     close(): Promise<void>;
-    handle(req: IncomingMessage, res: ServerResponse, method: string, path: string, snapshot: () => TeeSnapshot, check: (peerId: string) => Promise<void>): Promise<void>;
+    handle(req: IncomingMessage, res: ServerResponse, method: string, path: string, snapshot: () => TeeSnapshot, check: (peerId: string) => Promise<void>, 
+    /** True when the caller already proved it is the local gateway (control secret). */
+    gatewayAuthenticated?: boolean): Promise<void>;
 }
 //# sourceMappingURL=tee-control.d.ts.map

package/dist/proxy/tee-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tee-control.d.ts","sourceRoot":"","sources":["../../src/proxy/tee-control.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAE/E,qBAAa,UAAU;IAMT,OAAO,CAAC,QAAQ,CAAC,SAAS;IALtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,SAAS,CAAI;gBAEQ,SAAS,EAAE,MAAM;IAExC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAStB,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAClF,QAAQ,EAAE,MAAM,WAAW,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAqDxF"}
+{"version":3,"file":"tee-control.d.ts","sourceRoot":"","sources":["../../src/proxy/tee-control.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAE/E,qBAAa,UAAU;IAMT,OAAO,CAAC,QAAQ,CAAC,SAAS;IALtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,SAAS,CAAI;gBAEQ,SAAS,EAAE,MAAM;IAExC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAStB,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAClF,QAAQ,EAAE,MAAM,WAAW,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC;IACrE,oFAAoF;IACpF,oBAAoB,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAqD/C"}

package/dist/proxy/tee-control.js

@@ -36,7 +36,9 @@ export class TeeControl {
         }
         catch { }
     }
-    async handle(req, res, method, path, snapshot, check) {
+    async handle(req, res, method, path, snapshot, check, 
+    /** True when the caller already proved it is the local gateway (control secret). */
+    gatewayAuthenticated = false) {
         const reply = (status, body) => {
             res.writeHead(status, { 'content-type': 'application/json', 'cache-control': 'no-store' });
             res.end(JSON.stringify(body));
@@ -46,8 +48,8 @@ export class TeeControl {
         const remote = req.socket.remoteAddress;
         if (!this.ready || req.headers.origin !== undefined
             || !['127.0.0.1', '::1', '::ffff:127.0.0.1'].includes(remote ?? '')
-            || Buffer.byteLength(supplied) !== Buffer.byteLength(expected)
-            || !timingSafeEqual(Buffer.from(supplied), Buffer.from(expected))) {
+            || (!gatewayAuthenticated && (Buffer.byteLength(supplied) !== Buffer.byteLength(expected)
+                || !timingSafeEqual(Buffer.from(supplied), Buffer.from(expected))))) {
             reply(403, { error: 'Local verification authorization required' });
             return;
         }

package/dist/proxy/tee-control.js.map

@@ -1 +1 @@
-{"version":3,"file":"tee-control.js","sourceRoot":"","sources":["../../src/proxy/tee-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,kBAAkB,EAAoB,MAAM,0BAA0B,CAAA;AAE/E,MAAM,OAAO,UAAU;IAMQ;IALZ,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAChD,IAAI,CAAoB;IACxB,KAAK,GAAG,KAAK,CAAA;IACb,SAAS,GAAG,CAAC,CAAA;IAErB,YAA6B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAElD,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,IAAY;QAC3C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,MAAM,CAAA;QACtD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/H,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC7B,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACnB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAM;QACtB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAA2B,CAAA;YACvF,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnE,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAoB,EAAE,GAAmB,EAAE,MAAc,EAAE,IAAY,EAClF,QAA2B,EAAE,KAAwC;QACrE,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,IAAa,EAAQ,EAAE;YACpD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAA;YAC1F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;QAC/B,CAAC,CAAA;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAA;QAChD,MAAM,QAAQ,GAAG,UAAU,IAAI,CAAC,KAAK,EAAE,CAAA;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAA;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;eAC9C,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;eAChE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;eAC3D,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACpE,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAA;YAClE,OAAM;QACR,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC1D,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;YACtB,OAAM;QACR,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,8BAA8B,EAAE,CAAC;YACjE,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAA;YACtD,OAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC;YACvC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAA;YAC5D,OAAM;QACR,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;YACZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAA;YACnD,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;oBAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAA;oBAC9C,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;oBACpB,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;wBAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;wBAAC,OAAM;oBAAC,CAAC;oBACvE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACpB,CAAC;YACH,CAAC;oBAAS,CAAC;gBAAC,YAAY,CAAC,KAAK,CAAC,CAAA;YAAC,CAAC;YACjC,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YACxE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;mBACvD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;mBACrD,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpF,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAA;gBAC1D,OAAM;YACR,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACxB,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC,CAAA;QAC5F,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"tee-control.js","sourceRoot":"","sources":["../../src/proxy/tee-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,kBAAkB,EAAoB,MAAM,0BAA0B,CAAA;AAE/E,MAAM,OAAO,UAAU;IAMQ;IALZ,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAChD,IAAI,CAAoB;IACxB,KAAK,GAAG,KAAK,CAAA;IACb,SAAS,GAAG,CAAC,CAAA;IAErB,YAA6B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAElD,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,IAAY;QAC3C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,MAAM,CAAA;QACtD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/H,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC7B,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACnB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAM;QACtB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAA2B,CAAA;YACvF,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnE,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAoB,EAAE,GAAmB,EAAE,MAAc,EAAE,IAAY,EAClF,QAA2B,EAAE,KAAwC;IACrE,oFAAoF;IACpF,oBAAoB,GAAG,KAAK;QAC5B,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,IAAa,EAAQ,EAAE;YACpD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAA;YAC1F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;QAC/B,CAAC,CAAA;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAA;QAChD,MAAM,QAAQ,GAAG,UAAU,IAAI,CAAC,KAAK,EAAE,CAAA;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAA;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;eAC9C,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;eAChE,CAAC,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;mBACpF,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAA;YAClE,OAAM;QACR,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC1D,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;YACtB,OAAM;QACR,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,8BAA8B,EAAE,CAAC;YACjE,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAA;YACtD,OAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC;YACvC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAA;YAC5D,OAAM;QACR,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;YACZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAA;YACnD,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;oBAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAA;oBAC9C,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;oBACpB,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;wBAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;wBAAC,OAAM;oBAAC,CAAC;oBACvE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACpB,CAAC;YACH,CAAC;oBAAS,CAAC;gBAAC,YAAY,CAAC,KAAK,CAAC,CAAA;YAAC,CAAC;YACjC,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YACxE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;mBACvD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;mBACrD,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpF,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAA;gBAC1D,OAAM;YACR,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACxB,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC,CAAA;QAC5F,CAAC;IACH,CAAC;CACF"}

package/dist/proxy/telemetry.d.ts

@@ -24,6 +24,7 @@ export type ResponseTelemetry = {
 };
 export declare function computeResponseTelemetry(request: SerializedHttpRequest, responseHeaders: Record<string, string>, responseBody: Uint8Array, selectedPeer: PeerInfo): ResponseTelemetry;
 export declare function attachAntseedTelemetryHeaders(upstreamHeaders: Record<string, string>, selectedPeer: PeerInfo, telemetry: ResponseTelemetry, requestId: string, latencyMs: number): Record<string, string>;
-export declare function attachStreamingAntseedHeaders(upstreamHeaders: Record<string, string>, selectedPeer: PeerInfo, requestId: string): Record<string, string>;
+/** Streamed responses carry the seller's advertised prices too (a gateway tells a free seller by them). */
+export declare function attachStreamingAntseedHeaders(upstreamHeaders: Record<string, string>, selectedPeer: PeerInfo, request: SerializedHttpRequest): Record<string, string>;
 export {};
 //# sourceMappingURL=telemetry.d.ts.map

package/dist/proxy/telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/proxy/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAOpE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,gBAAgB,EAAE,MAAM,CAAA;IACxB,4DAA4D;IAC5D,iBAAiB,EAAE,MAAM,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,GAAG,WAAW,CAAA;CAC9B,CAAA;AAED,KAAK,cAAc,GAAG;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAA;CACxC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,iBAAiB,CAAA;IACxB,OAAO,EAAE,cAAc,CAAA;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAChC,CAAA;AAyOD,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,EAC9B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,YAAY,EAAE,UAAU,EACxB,YAAY,EAAE,QAAQ,GACrB,iBAAiB,CA6CnB;AAED,wBAAgB,6BAA6B,CAC3C,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,YAAY,EAAE,QAAQ,EACtB,SAAS,EAAE,iBAAiB,EAC5B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwBxB;AAED,wBAAgB,6BAA6B,CAC3C,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,YAAY,EAAE,QAAQ,EACtB,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKxB"}
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/proxy/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAOpE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,gBAAgB,EAAE,MAAM,CAAA;IACxB,4DAA4D;IAC5D,iBAAiB,EAAE,MAAM,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,GAAG,WAAW,CAAA;CAC9B,CAAA;AAED,KAAK,cAAc,GAAG;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAA;CACxC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,iBAAiB,CAAA;IACxB,OAAO,EAAE,cAAc,CAAA;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAChC,CAAA;AA+OD,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,EAC9B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,YAAY,EAAE,UAAU,EACxB,YAAY,EAAE,QAAQ,GACrB,iBAAiB,CA6CnB;AAED,wBAAgB,6BAA6B,CAC3C,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,YAAY,EAAE,QAAQ,EACtB,SAAS,EAAE,iBAAiB,EAC5B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsBxB;AAED,2GAA2G;AAC3G,wBAAgB,6BAA6B,CAC3C,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,YAAY,EAAE,QAAQ,EACtB,OAAO,EAAE,qBAAqB,GAC7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMxB"}

package/dist/proxy/telemetry.js

@@ -170,6 +170,11 @@ function setPeerIdentityHeaders(headers, selectedPeer) {
         headers['x-antseed-peer-providers'] = selectedPeer.providers.join(',');
     }
 }
+function setPricingHeaders(headers, pricing) {
+    setFiniteNumberHeader(headers, 'x-antseed-input-usd-per-million', pricing.inputUsdPerMillion);
+    setFiniteNumberHeader(headers, 'x-antseed-output-usd-per-million', pricing.outputUsdPerMillion);
+    setFiniteNumberHeader(headers, 'x-antseed-cached-input-usd-per-million', pricing.cachedInputUsdPerMillion);
+}
 function resolvePeerPricing(peer, provider, service) {
     const providerPricing = peer.providerPricing?.[provider];
     if (providerPricing) {
@@ -244,9 +249,7 @@ export function attachAntseedTelemetryHeaders(upstreamHeaders, selectedPeer, tel
     if (telemetry.pricing.service) {
         headers['x-antseed-service'] = telemetry.pricing.service;
     }
-    setFiniteNumberHeader(headers, 'x-antseed-input-usd-per-million', telemetry.pricing.inputUsdPerMillion);
-    setFiniteNumberHeader(headers, 'x-antseed-output-usd-per-million', telemetry.pricing.outputUsdPerMillion);
-    setFiniteNumberHeader(headers, 'x-antseed-cached-input-usd-per-million', telemetry.pricing.cachedInputUsdPerMillion);
+    setPricingHeaders(headers, telemetry.pricing);
     headers['x-antseed-token-source'] = telemetry.usage.source;
     headers['x-antseed-input-tokens'] = String(telemetry.usage.inputTokens);
     headers['x-antseed-cached-input-tokens'] = String(telemetry.usage.cachedInputTokens);
@@ -257,10 +260,12 @@ export function attachAntseedTelemetryHeaders(upstreamHeaders, selectedPeer, tel
     }
     return headers;
 }
-export function attachStreamingAntseedHeaders(upstreamHeaders, selectedPeer, requestId) {
+/** Streamed responses carry the seller's advertised prices too (a gateway tells a free seller by them). */
+export function attachStreamingAntseedHeaders(upstreamHeaders, selectedPeer, request) {
     const headers = { ...upstreamHeaders };
-    headers['x-antseed-request-id'] = requestId;
+    headers['x-antseed-request-id'] = request.requestId;
     setPeerIdentityHeaders(headers, selectedPeer);
+    setPricingHeaders(headers, resolvePeerPricing(selectedPeer, pickProviderForPeer(selectedPeer, request), extractRequestedService(request)));
     return headers;
 }
 //# sourceMappingURL=telemetry.js.map