@konneal/engine 0.2.130 → 0.2.131

package/dist/openapi-surface.gen.d.ts

@@ -3,7 +3,7 @@ export interface OpenApiRoute {
     pattern: string;
     operationId: string;
 }
-export type OpenApiOperationId = "askAnonymous" | "askKeyed" | "search" | "searchKeyed" | "verify" | "verifyKeyed" | "research" | "researchKeyed" | "mcp" | "datasets" | "keyUsage" | "health" | "listConversations" | "createConversation" | "getConversation" | "renameConversation" | "deleteConversation" | "appendMessage" | "shareConversation" | "getShared" | "uploadAttachment" | "listAttachments" | "getAttachment" | "deleteAttachment" | "listMemories" | "createMemory" | "deleteMemory" | "listProjects" | "createProject" | "deleteProject" | "listProjectFiles" | "attachProjectFile" | "detachProjectFile" | "laneQuery" | "laneKeyed" | "feedback" | "adminEnrich" | "adminEnrichAlias" | "adminSection" | "adminFamilySummary" | "adminSectionAlias" | "adminFamilySummaryAlias" | "adminVectors" | "adminCaption" | "adminJudge" | "adminJudgeAlias" | "adminRevokeKey" | "authMe" | "authLogin" | "authCallback" | "authLogout" | "authLogoutLink" | "adminStats" | "adminListKeys" | "adminCreateKey";
+export type OpenApiOperationId = "credits" | "creditsAlias" | "askAnonymous" | "askKeyed" | "search" | "searchKeyed" | "verify" | "verifyKeyed" | "research" | "researchKeyed" | "mcp" | "datasets" | "keyUsage" | "health" | "listConversations" | "createConversation" | "getConversation" | "renameConversation" | "deleteConversation" | "appendMessage" | "shareConversation" | "getShared" | "uploadAttachment" | "listAttachments" | "getAttachment" | "deleteAttachment" | "listMemories" | "createMemory" | "deleteMemory" | "listProjects" | "createProject" | "deleteProject" | "listProjectFiles" | "attachProjectFile" | "detachProjectFile" | "laneQuery" | "laneKeyed" | "feedback" | "adminEnrich" | "adminEnrichAlias" | "adminSection" | "adminFamilySummary" | "adminSectionAlias" | "adminFamilySummaryAlias" | "adminVectors" | "adminCaption" | "adminJudge" | "adminJudgeAlias" | "adminRevokeKey" | "authMe" | "authLogin" | "authCallback" | "authLogout" | "authLogoutLink" | "adminStats" | "adminListKeys" | "adminCreateKey";
 export declare const OPENAPI_SURFACE: readonly (Omit<OpenApiRoute, "operationId"> & {
     operationId: OpenApiOperationId;
 })[];

package/dist/openapi-types.d.ts

@@ -6,6 +6,46 @@
  */
 
 export interface paths {
+    "/api/credits": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The caller's daily credit balance
+         * @description Returns the credits the caller has left today — resolved by the same tiering as ask (anonymous by IP, member by session, key by its owner member's shared cap). 1 credit ≈ 1000 tokens of consumption; the UI's meter reads this.
+         */
+        get: operations["credits"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/credits": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The caller's daily credit balance (the authenticated path)
+         * @description The same balance, authenticated by session or key.
+         */
+        get: operations["creditsAlias"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/ask": {
         parameters: {
             query?: never;
@@ -998,6 +1038,42 @@ export interface components {
 }
 export type $defs = Record<string, never>;
 export interface operations {
+    credits: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The balance. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    creditsAlias: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The balance. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     askAnonymous: {
         parameters: {
             query?: never;

package/dist/worker_public/src/index.js

@@ -16,6 +16,8 @@ import {
 import {
   buildMessages,
   citations,
+  clientIp,
+  creditBudget,
   editionNote,
   fill,
   ftsMatchQuery,
@@ -1087,6 +1089,16 @@ function matchRoute(routes, method, path) {
 
 // workers/worker_public/src/openapi-surface.gen.ts
 var OPENAPI_SURFACE = [
+  {
+    "method": "GET",
+    "pattern": "/api/credits",
+    "operationId": "credits"
+  },
+  {
+    "method": "GET",
+    "pattern": "/v1/credits",
+    "operationId": "creditsAlias"
+  },
   {
     "method": "POST",
     "pattern": "/api/ask",
@@ -1496,6 +1508,15 @@ async function mcpRoute(c) {
   if (t instanceof Response) return t;
   return withCors(await handleMcp(c.env, c.ctx, c.req, t.tier, t.key), corsHeaders(c.req));
 }
+async function creditsRoute(c) {
+  const t = await tierFor(c);
+  if (t instanceof Response) return t;
+  const key = t.key;
+  const memberKey = t.tier === "key" ? key?.owner_sub ?? null : null;
+  const bucketId = memberKey ? `sub:${memberKey}` : t.tier === "key" ? `key:${key.id}` : clientIp(c.req);
+  const cb = await creditBudget(c.env, bucketId);
+  return withCors(json({ credits: cb }), corsHeaders(c.req));
+}
 async function askRoute(c) {
   const t = await tierFor(c);
   if (t instanceof Response) return t;
@@ -1785,6 +1806,8 @@ var INFRA_ROUTES = [
 ];
 var OPENAPI_HANDLERS = {
   askAnonymous: askRoute,
+  credits: creditsRoute,
+  creditsAlias: creditsRoute,
   askKeyed: askRoute,
   search: searchRoute,
   searchKeyed: searchRoute,

package/package.json

@@ -27,7 +27,7 @@
     "playwright": "^1.62.1",
     "yaml": "^2.9.1"
   },
-  "version": "0.2.130",
+  "version": "0.2.131",
   "description": "The Konneal engine: the publisher-agnostic build pipeline and API plane for standards intelligence (retrieval, answer contract, verdicts, evaluation).",
   "license": "BSD-3-Clause",
   "type": "module",

package/workers/worker_public/openapi.yaml

@@ -58,6 +58,29 @@ tags:
       the index-maintenance battery (enrichment, section units, vectors
       and figure captions).
 paths:
+  /api/credits:
+    get:
+      tags: [Service]
+      summary: The caller's daily credit balance
+      description: >-
+        Returns the credits the caller has left today — resolved by the
+        same tiering as ask (anonymous by IP, member by session, key by
+        its owner member's shared cap). 1 credit ≈ 1000 tokens of
+        consumption; the UI's meter reads this.
+      operationId: credits
+      responses:
+        '200':
+          description: The balance.
+  /v1/credits:
+    get:
+      tags: [Service]
+      summary: The caller's daily credit balance (the authenticated path)
+      description: The same balance, authenticated by session or key.
+      operationId: creditsAlias
+      security: [{ bearerAuth: [] }]
+      responses:
+        '200':
+          description: The balance.
   /api/ask:
     post:
       tags: [Ask]

package/workers/worker_public/src/index.ts

@@ -20,6 +20,7 @@ import type { Env } from "./env";
 import { portModelRunner } from "./env.ts";
 export type { Env };
 import { json, err, corsHeaders, withCors, readJson, authenticate, type ApiKey } from "./lib/http";
+import { creditBudget, clientIp } from "./quota";
 
 import { handleSearch } from "./search";
 import { handleEnrich, handleSectionUnit, handleCaption, handleVectors, handleJudge, handleCreateKey, handleListKeys, handleRevokeKey, handleKeyUsage, handleFamilySummary } from "./admin";
@@ -215,6 +216,19 @@ async function mcpRoute(c: RouteContext): Promise<Response> {
   return withCors(await handleMcp(c.env, c.ctx, c.req, t.tier, t.key), corsHeaders(c.req));
 }
 
+/** The caller's daily credit balance (2026-10-11): the meter the UI
+ *  shows — resolved by the same tiering as ask (anon by IP, member by
+ *  session, key by its owner member's shared cap). */
+async function creditsRoute(c: RouteContext): Promise<Response> {
+  const t = await tierFor(c);
+  if (t instanceof Response) return t;
+  const key = t.key;
+  const memberKey = t.tier === "key" ? key?.owner_sub ?? null : null;
+  const bucketId = memberKey ? `sub:${memberKey}` : t.tier === "key" ? `key:${key!.id}` : clientIp(c.req);
+  const cb = await creditBudget(c.env, bucketId);
+  return withCors(json({ credits: cb }), corsHeaders(c.req));
+}
+
 async function askRoute(c: RouteContext): Promise<Response> {
   const t = await tierFor(c);
   if (t instanceof Response) return t;
@@ -571,6 +585,8 @@ const INFRA_ROUTES: Route[] = [
 
 const OPENAPI_HANDLERS: Record<OpenApiOperationId, RouteHandler> = {
   askAnonymous: askRoute,
+  credits: creditsRoute,
+  creditsAlias: creditsRoute,
   askKeyed: askRoute,
   search: searchRoute,
   searchKeyed: searchRoute,

package/workers/worker_public/src/openapi-surface.gen.ts

@@ -7,6 +7,8 @@ export interface OpenApiRoute {
 }
 
 export type OpenApiOperationId =
+  | "credits"
+  | "creditsAlias"
   | "askAnonymous"
   | "askKeyed"
   | "search"
@@ -64,6 +66,16 @@ export type OpenApiOperationId =
   | "adminCreateKey"
 
 export const OPENAPI_SURFACE: readonly (Omit<OpenApiRoute, "operationId"> & { operationId: OpenApiOperationId })[] = [
+  {
+    "method": "GET",
+    "pattern": "/api/credits",
+    "operationId": "credits"
+  },
+  {
+    "method": "GET",
+    "pattern": "/v1/credits",
+    "operationId": "creditsAlias"
+  },
   {
     "method": "POST",
     "pattern": "/api/ask",