@layer-ai/core 2.0.20 → 2.0.22

package/dist/index.d.ts

@@ -3,6 +3,7 @@ export { default as gatesRouter } from './routes/v1/gates.js';
 export { default as keysRouter } from './routes/v1/keys.js';
 export { default as logsRouter } from './routes/v1/logs.js';
 export { default as chatCompletionsRouter } from './routes/v1/chat-completions.js';
+export { default as spendingRouter } from './routes/v1/spending.js';
 export { default as completeRouter } from './routes/v2/complete.js';
 export { default as chatRouter } from './routes/v3/chat.js';
 export { default as imageRouter } from './routes/v3/image.js';
@@ -20,4 +21,6 @@ export declare const createSessionKey: (userId: string) => Promise<string>;
 export declare const deleteSessionKeysForUser: (userId: string) => Promise<void>;
 export * from './services/task-analysis.js';
 export { PROVIDER, PROVIDERS, type Provider, callAdapter, normalizeModelId, getProviderForModel } from './lib/provider-factory.js';
+export { spendingTracker } from './lib/spending-tracker.js';
+export { spendingJobs } from './lib/spending-jobs.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAGnF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGpE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAG3C,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,eAAO,MAAM,gBAAgB,GAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,MAAM,CAGrE,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CAG3E,CAAC;AAGF,cAAc,6BAA6B,CAAC;AAG5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGpE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGpE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAG3C,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,eAAO,MAAM,gBAAgB,GAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,MAAM,CAGrE,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CAG3E,CAAC;AAGF,cAAc,6BAA6B,CAAC;AAG5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAGnI,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -4,6 +4,7 @@ export { default as gatesRouter } from './routes/v1/gates.js';
 export { default as keysRouter } from './routes/v1/keys.js';
 export { default as logsRouter } from './routes/v1/logs.js';
 export { default as chatCompletionsRouter } from './routes/v1/chat-completions.js';
+export { default as spendingRouter } from './routes/v1/spending.js';
 // v2 routes
 export { default as completeRouter } from './routes/v2/complete.js';
 // v3 routes
@@ -33,3 +34,6 @@ export const deleteSessionKeysForUser = async (userId) => {
 export * from './services/task-analysis.js';
 // Provider Factory
 export { PROVIDER, PROVIDERS, callAdapter, normalizeModelId, getProviderForModel } from './lib/provider-factory.js';
+// Spending Management
+export { spendingTracker } from './lib/spending-tracker.js';
+export { spendingJobs } from './lib/spending-jobs.js';

package/dist/lib/db/migrations/007_add_spending_controls.sql

@@ -0,0 +1,41 @@
+-- Migration: Add spending controls to users table
+-- This enables monthly spending limits and budget tracking
+
+-- Add spending control fields to users table
+ALTER TABLE users ADD COLUMN IF NOT EXISTS status VARCHAR(20) DEFAULT 'active' NOT NULL;
+ALTER TABLE users ADD COLUMN IF NOT EXISTS monthly_spending_limit DECIMAL(10,2);  -- NULL means unlimited
+ALTER TABLE users ADD COLUMN IF NOT EXISTS current_month_spending DECIMAL(10,2) DEFAULT 0 NOT NULL;
+ALTER TABLE users ADD COLUMN IF NOT EXISTS spending_period_start TIMESTAMP DEFAULT NOW() NOT NULL;
+ALTER TABLE users ADD COLUMN IF NOT EXISTS alert_threshold_percentage INTEGER DEFAULT 80 NOT NULL;
+ALTER TABLE users ADD COLUMN IF NOT EXISTS limit_enforcement_type VARCHAR(20) DEFAULT 'alert_only' NOT NULL;
+ALTER TABLE users ADD COLUMN IF NOT EXISTS last_spending_alert_sent_at TIMESTAMP;
+
+-- Add check constraint for valid status values
+ALTER TABLE users ADD CONSTRAINT users_status_check
+  CHECK (status IN ('active', 'over_limit', 'suspended', 'banned'));
+
+-- Add check constraint for valid enforcement types
+ALTER TABLE users ADD CONSTRAINT users_enforcement_type_check
+  CHECK (limit_enforcement_type IN ('alert_only', 'block'));
+
+-- Add check constraint for valid alert threshold
+ALTER TABLE users ADD CONSTRAINT users_alert_threshold_check
+  CHECK (alert_threshold_percentage >= 0 AND alert_threshold_percentage <= 100);
+
+-- Add check constraint for non-negative spending
+ALTER TABLE users ADD CONSTRAINT users_spending_check
+  CHECK (current_month_spending >= 0);
+
+-- Create indexes for performance
+CREATE INDEX IF NOT EXISTS idx_users_status ON users(status);
+CREATE INDEX IF NOT EXISTS idx_users_spending_period ON users(spending_period_start);
+CREATE INDEX IF NOT EXISTS idx_users_over_limit ON users(status) WHERE status = 'over_limit';
+
+-- Add comment for documentation
+COMMENT ON COLUMN users.status IS 'User account status: active, over_limit, suspended, banned';
+COMMENT ON COLUMN users.monthly_spending_limit IS 'Maximum spending per 30-day period in USD. NULL = unlimited';
+COMMENT ON COLUMN users.current_month_spending IS 'Accumulated spending for current 30-day period in USD';
+COMMENT ON COLUMN users.spending_period_start IS 'Start of current 30-day billing period';
+COMMENT ON COLUMN users.alert_threshold_percentage IS 'Percentage of limit to trigger spending alerts (default 80%)';
+COMMENT ON COLUMN users.last_spending_alert_sent_at IS 'Timestamp of last spending alert sent to prevent spam';
+COMMENT ON COLUMN users.limit_enforcement_type IS 'How to enforce spending limits: alert_only (warn but allow) or block (prevent requests)';

package/dist/lib/db/postgres.d.ts

@@ -7,6 +7,25 @@ export declare const db: {
     getUserById(id: string): Promise<User | null>;
     createUser(email: string, passwordHash: string): Promise<User>;
     getUserStatus(userId: string): Promise<string | null>;
+    getUserSpending(userId: string): Promise<{
+        currentSpending: number;
+        limit: number | null;
+        periodStart: Date;
+        status: string;
+        limitEnforcementType: string;
+    } | null>;
+    updateUserSpending(userId: string, newSpending: number): Promise<void>;
+    incrementUserSpending(userId: string, cost: number): Promise<{
+        newSpending: number;
+        limit: number | null;
+        exceeded: boolean;
+    }>;
+    setUserStatus(userId: string, status: string): Promise<void>;
+    setUserSpendingLimit(userId: string, limit: number | null): Promise<void>;
+    setUserEnforcementType(userId: string, enforcementType: string): Promise<void>;
+    resetUserSpending(userId: string): Promise<void>;
+    getUsersToResetSpending(): Promise<string[]>;
+    recordSpendingAlert(userId: string): Promise<void>;
     getApiKeyByHash(keyHash: string): Promise<ApiKey | null>;
     createApiKey(userId: string, keyHash: string, keyPrefix: string, name: string): Promise<ApiKey>;
     updateApiKeyLastUsed(keyHash: string): Promise<void>;

package/dist/lib/db/postgres.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../../src/lib/db/postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAyB,WAAW,EAAE,MAAM,eAAe,CAAC;AAO5F,iBAAS,OAAO,IAAI,EAAE,CAAC,IAAI,CAqB1B;AA0BD,eAAO,MAAM,EAAE;gBAEK,MAAM,WAAW,GAAG,EAAE;0BASZ,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBAQnC,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;sBAQ3B,MAAM,gBAAgB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;0BAQxC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;6BAS5B,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;yBAQnC,MAAM,WAAW,MAAM,aAAa,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;kCAQjE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;8BAO1B,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;qBAQnC,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;iCAS7B,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;+BAQjD,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;4BAQhD,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;uBAQ7B,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;oBAiCpC,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;mBAQ9B,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;mBAwDxC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;qBAUvB,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;2BAkBhC,MAAM,YACJ;QACR,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,SAAS,CAAC,EAAE,IAAI,CAAC;QACjB,OAAO,CAAC,EAAE,IAAI,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC,GAAG,EAAE,CAAC;iCAuCkB,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;6BAQhE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;qCAehB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;2BAQhC,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;4BAQrD,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;8BASnD,MAAM,YACJ,MAAM,gBACF;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,aACrD,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC;8BAWb,MAAM,YACJ,MAAM,gBACF;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,aACrD,MAAM,GAChB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;8BAWE,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;oCAQrC,MAAM,YAAY,MAAM,YAAY,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;kCAW3E,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;qCAQzC,MAAM,GAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;8BAahE,MAAM,QACR,OAAO,CAAC,IAAI,CAAC,aACR,MAAM,GAAG,MAAM,kBACV,MAAM,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC;2BA8Ca,MAAM,UAAS,MAAM,GAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;2BAW3C,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;+BAQxB,MAAM,UAAS,MAAM,GAAS,OAAO,CAAC,GAAG,EAAE,CAAC;8BAcnE,MAAM,UACN,MAAM,GAAG,IAAI,UACb,eAAe,GAAG,aAAa,GAAG,YAAY,GAAG,UAAU,WAC1D,GAAG,GACX,OAAO,CAAC,IAAI,CAAC;2BAQa,MAAM,UAAS,MAAM,GAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;gCAWtC,MAAM,UAAS,MAAM,GAAS,OAAO,CAAC,GAAG,EAAE,CAAC;4BAchD,MAAM,UAAS,MAAM,GAAS,OAAO,CAAC,GAAG,EAAE,CAAC;yBAa/C,MAAM,aAAa,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;CA+E5F,CAAC;AAEF,eAAe,OAAO,CAAC"}
+{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../../src/lib/db/postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAyB,WAAW,EAAE,MAAM,eAAe,CAAC;AAO5F,iBAAS,OAAO,IAAI,EAAE,CAAC,IAAI,CAqB1B;AA0BD,eAAO,MAAM,EAAE;gBAEK,MAAM,WAAW,GAAG,EAAE;0BASZ,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBAQnC,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;sBAQ3B,MAAM,gBAAgB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;0BAQxC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;4BAU7B,MAAM,GAAG,OAAO,CAAC;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;+BAexI,MAAM,eAAe,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;kCAOxC,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;0BAexG,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;iCAO/B,MAAM,SAAS,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;mCAO1C,MAAM,mBAAmB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;8BAOpD,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;+BAYrB,OAAO,CAAC,MAAM,EAAE,CAAC;gCAShB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;6BAQzB,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;yBAQnC,MAAM,WAAW,MAAM,aAAa,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;kCAQjE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;8BAO1B,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;qBAQnC,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;iCAS7B,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;+BAQjD,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;4BAQhD,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;uBAQ7B,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;oBAiCpC,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;mBAQ9B,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;mBAwDxC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;qBAUvB,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;2BAkBhC,MAAM,YACJ;QACR,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,SAAS,CAAC,EAAE,IAAI,CAAC;QACjB,OAAO,CAAC,EAAE,IAAI,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC,GAAG,EAAE,CAAC;iCAuCkB,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;6BAQhE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;qCAehB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;2BAQhC,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;4BAQrD,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;8BASnD,MAAM,YACJ,MAAM,gBACF;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,aACrD,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC;8BAWb,MAAM,YACJ,MAAM,gBACF;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,aACrD,MAAM,GAChB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;8BAWE,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;oCAQrC,MAAM,YAAY,MAAM,YAAY,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;kCAW3E,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;qCAQzC,MAAM,GAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;8BAahE,MAAM,QACR,OAAO,CAAC,IAAI,CAAC,aACR,MAAM,GAAG,MAAM,kBACV,MAAM,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC;2BA8Ca,MAAM,UAAS,MAAM,GAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;2BAW3C,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;+BAQxB,MAAM,UAAS,MAAM,GAAS,OAAO,CAAC,GAAG,EAAE,CAAC;8BAcnE,MAAM,UACN,MAAM,GAAG,IAAI,UACb,eAAe,GAAG,aAAa,GAAG,YAAY,GAAG,UAAU,WAC1D,GAAG,GACX,OAAO,CAAC,IAAI,CAAC;2BAQa,MAAM,UAAS,MAAM,GAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;gCAWtC,MAAM,UAAS,MAAM,GAAS,OAAO,CAAC,GAAG,EAAE,CAAC;4BAchD,MAAM,UAAS,MAAM,GAAS,OAAO,CAAC,GAAG,EAAE,CAAC;yBAa/C,MAAM,aAAa,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;CA+E5F,CAAC;AAEF,eAAe,OAAO,CAAC"}

package/dist/lib/db/postgres.js

@@ -68,6 +68,59 @@ export const db = {
         const result = await getPool().query('SELECT status FROM users WHERE id = $1', [userId]);
         return result.rows[0]?.status || null;
     },
+    // ===== SPENDING MANAGEMENT =====
+    async getUserSpending(userId) {
+        const result = await getPool().query('SELECT current_month_spending, monthly_spending_limit, spending_period_start, status, limit_enforcement_type FROM users WHERE id = $1', [userId]);
+        if (!result.rows[0])
+            return null;
+        return {
+            currentSpending: parseFloat(result.rows[0].current_month_spending) || 0,
+            limit: result.rows[0].monthly_spending_limit ? parseFloat(result.rows[0].monthly_spending_limit) : null,
+            periodStart: result.rows[0].spending_period_start,
+            status: result.rows[0].status,
+            limitEnforcementType: result.rows[0].limit_enforcement_type,
+        };
+    },
+    async updateUserSpending(userId, newSpending) {
+        await getPool().query('UPDATE users SET current_month_spending = $1, updated_at = NOW() WHERE id = $2', [newSpending, userId]);
+    },
+    async incrementUserSpending(userId, cost) {
+        const result = await getPool().query(`UPDATE users
+       SET current_month_spending = current_month_spending + $1, updated_at = NOW()
+       WHERE id = $2
+       RETURNING current_month_spending, monthly_spending_limit`, [cost, userId]);
+        const row = result.rows[0];
+        const newSpending = parseFloat(row.current_month_spending);
+        const limit = row.monthly_spending_limit ? parseFloat(row.monthly_spending_limit) : null;
+        const exceeded = limit !== null && newSpending > limit;
+        return { newSpending, limit, exceeded };
+    },
+    async setUserStatus(userId, status) {
+        await getPool().query('UPDATE users SET status = $1, updated_at = NOW() WHERE id = $2', [status, userId]);
+    },
+    async setUserSpendingLimit(userId, limit) {
+        await getPool().query('UPDATE users SET monthly_spending_limit = $1, updated_at = NOW() WHERE id = $2', [limit, userId]);
+    },
+    async setUserEnforcementType(userId, enforcementType) {
+        await getPool().query('UPDATE users SET limit_enforcement_type = $1, updated_at = NOW() WHERE id = $2', [enforcementType, userId]);
+    },
+    async resetUserSpending(userId) {
+        await getPool().query(`UPDATE users
+       SET current_month_spending = 0,
+           spending_period_start = NOW(),
+           status = CASE WHEN status = 'over_limit' THEN 'active' ELSE status END,
+           updated_at = NOW()
+       WHERE id = $1`, [userId]);
+    },
+    async getUsersToResetSpending() {
+        const result = await getPool().query(`SELECT id FROM users
+       WHERE spending_period_start < NOW() - INTERVAL '30 days'
+       AND status IN ('active', 'over_limit')`);
+        return result.rows.map(row => row.id);
+    },
+    async recordSpendingAlert(userId) {
+        await getPool().query('UPDATE users SET last_spending_alert_sent_at = NOW(), updated_at = NOW() WHERE id = $1', [userId]);
+    },
     // API Keys
     async getApiKeyByHash(keyHash) {
         const result = await getPool().query('SELECT * FROM api_keys WHERE key_hash = $1 AND is_active = true', [keyHash]);

package/dist/lib/db/redis.d.ts

@@ -8,6 +8,11 @@ export declare const cache: {
     invalidateGate(userId: string, gateName: string): Promise<void>;
     invalidateUserGates(userId: string): Promise<void>;
     ping(): Promise<boolean>;
+    getUserSpending(userId: string): Promise<number | null>;
+    incrementUserSpending(userId: string, cost: number): Promise<number>;
+    setUserSpending(userId: string, spending: number): Promise<void>;
+    invalidateUserSpending(userId: string): Promise<void>;
+    getAllCachedSpendingUsers(): Promise<string[]>;
 };
 export default redis;
 //# sourceMappingURL=redis.d.ts.map

package/dist/lib/db/redis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redis.d.ts","sourceRoot":"","sources":["../../../src/lib/db/redis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,SAAS,CAAC;AAC5B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAG1C,QAAA,MAAM,KAAK,OAcT,CAAC;AAuBH,eAAO,MAAM,KAAK;oBAEM,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;wBAqB3C,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBAqBjD,MAAM,YAAY,MAAM,QAAQ,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;2BAe7C,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;gCAUnC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAc1C,OAAO,CAAC,OAAO,CAAC;CAQ/B,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"redis.d.ts","sourceRoot":"","sources":["../../../src/lib/db/redis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,SAAS,CAAC;AAC5B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAG1C,QAAA,MAAM,KAAK,OAcT,CAAC;AAuBH,eAAO,MAAM,KAAK;oBAEM,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;wBAqB3C,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBAqBjD,MAAM,YAAY,MAAM,QAAQ,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;2BAe7C,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;gCAUnC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAa1C,OAAO,CAAC,OAAO,CAAC;4BAWA,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;kCAWzB,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;4BAY5C,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;mCAUjC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;iCASxB,OAAO,CAAC,MAAM,EAAE,CAAC;CAUrD,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/lib/db/redis.js

@@ -105,7 +105,6 @@ export const cache = {
             console.error('Redis bulk delete error:', error);
         }
     },
-    // health check 
     async ping() {
         try {
             const result = await redis.ping();
@@ -115,5 +114,59 @@ export const cache = {
             return false;
         }
     },
+    // ===== SPENDING CACHE =====
+    async getUserSpending(userId) {
+        try {
+            const key = `spending:${userId}`;
+            const spending = await redis.get(key);
+            return spending ? parseFloat(spending) : null;
+        }
+        catch (error) {
+            console.error('Redis getUserSpending error:', error);
+            return null;
+        }
+    },
+    async incrementUserSpending(userId, cost) {
+        try {
+            const key = `spending:${userId}`;
+            const newSpending = await redis.incrbyfloat(key, cost);
+            await redis.expire(key, 3600);
+            return parseFloat(newSpending);
+        }
+        catch (error) {
+            console.error('Redis incrementUserSpending error:', error);
+            throw error;
+        }
+    },
+    async setUserSpending(userId, spending) {
+        try {
+            const key = `spending:${userId}`;
+            await redis.set(key, spending.toString());
+            await redis.expire(key, 3600);
+        }
+        catch (error) {
+            console.error('Redis setUserSpending error:', error);
+        }
+    },
+    async invalidateUserSpending(userId) {
+        try {
+            const key = `spending:${userId}`;
+            await redis.del(key);
+        }
+        catch (error) {
+            console.error('Redis invalidateUserSpending error:', error);
+        }
+    },
+    async getAllCachedSpendingUsers() {
+        try {
+            const pattern = 'spending:*';
+            const keys = await redis.keys(pattern);
+            return keys.map(key => key.replace('spending:', ''));
+        }
+        catch (error) {
+            console.error('Redis getAllCachedSpendingUsers error:', error);
+            return [];
+        }
+    },
 };
 export default redis;

package/dist/lib/spending-jobs.d.ts

@@ -0,0 +1,6 @@
+export declare const spendingJobs: {
+    syncSpendingJob(): Promise<void>;
+    resetSpendingPeriodsJob(): Promise<void>;
+    startScheduledJobs(): void;
+};
+//# sourceMappingURL=spending-jobs.d.ts.map

package/dist/lib/spending-jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spending-jobs.d.ts","sourceRoot":"","sources":["../../src/lib/spending-jobs.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,YAAY;uBACE,OAAO,CAAC,IAAI,CAAC;+BASL,OAAO,CAAC,IAAI,CAAC;0BAwBxB,IAAI;CAyB3B,CAAC"}

package/dist/lib/spending-jobs.js

@@ -0,0 +1,56 @@
+import { db } from './db/postgres.js';
+import { cache } from './db/redis.js';
+import { spendingTracker } from './spending-tracker.js';
+export const spendingJobs = {
+    async syncSpendingJob() {
+        console.log('[Spending Job] Starting periodic sync...');
+        try {
+            await spendingTracker.syncAllSpending();
+        }
+        catch (error) {
+            console.error('[Spending Job] Sync failed:', error);
+        }
+    },
+    async resetSpendingPeriodsJob() {
+        console.log('[Spending Job] Checking for billing periods to reset...');
+        try {
+            const usersToReset = await db.getUsersToResetSpending();
+            if (usersToReset.length === 0) {
+                console.log('[Spending Job] No users need reset');
+                return;
+            }
+            console.log(`[Spending Job] Resetting ${usersToReset.length} users`);
+            for (const userId of usersToReset) {
+                await db.resetUserSpending(userId);
+                await cache.invalidateUserSpending(userId);
+                console.log(`[Spending Job] Reset user ${userId}`);
+            }
+            console.log('[Spending Job] Reset complete');
+        }
+        catch (error) {
+            console.error('[Spending Job] Reset failed:', error);
+        }
+    },
+    startScheduledJobs() {
+        // Sync Redis to DB every 5 minutes
+        setInterval(() => {
+            this.syncSpendingJob().catch(err => {
+                console.error('[Spending Job] Sync interval error:', err);
+            });
+        }, 5 * 60 * 1000);
+        // Check for billing period resets every hour
+        setInterval(() => {
+            this.resetSpendingPeriodsJob().catch(err => {
+                console.error('[Spending Job] Reset interval error:', err);
+            });
+        }, 60 * 60 * 1000);
+        // Run once on startup
+        this.syncSpendingJob().catch(err => {
+            console.error('[Spending Job] Initial sync error:', err);
+        });
+        this.resetSpendingPeriodsJob().catch(err => {
+            console.error('[Spending Job] Initial reset error:', err);
+        });
+        console.log('[Spending Job] Scheduled jobs started');
+    },
+};

package/dist/lib/spending-tracker.d.ts

@@ -0,0 +1,17 @@
+interface SpendingUpdate {
+    userId: string;
+    cost: number;
+    exceeded?: boolean;
+    newSpending?: number;
+}
+export declare const spendingTracker: {
+    trackSpending(userId: string, cost: number): Promise<SpendingUpdate>;
+    trackSpendingDB(userId: string, cost: number): Promise<SpendingUpdate>;
+    checkAlertThresholds(userId: string, currentSpending: number, limit: number | null): Promise<void>;
+    sendAlertIfNeeded(userId: string, threshold: number, currentSpending: number, limit: number): Promise<void>;
+    syncSpendingToDB(userId: string): Promise<void>;
+    syncAllSpending(): Promise<void>;
+    warmCache(userId: string): Promise<void>;
+};
+export {};
+//# sourceMappingURL=spending-tracker.d.ts.map

package/dist/lib/spending-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spending-tracker.d.ts","sourceRoot":"","sources":["../../src/lib/spending-tracker.ts"],"names":[],"mappings":"AAGA,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,eAAe;0BACE,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;4BA0B5C,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;iCAkBzC,MAAM,mBAAmB,MAAM,SAAS,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;8BAcxE,MAAM,aAAa,MAAM,mBAAmB,MAAM,SAAS,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;6BAKlF,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;uBAY5B,OAAO,CAAC,IAAI,CAAC;sBAad,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAU/C,CAAC"}

package/dist/lib/spending-tracker.js

@@ -0,0 +1,89 @@
+import { db } from './db/postgres.js';
+import { cache } from './db/redis.js';
+export const spendingTracker = {
+    async trackSpending(userId, cost) {
+        try {
+            const newSpending = await cache.incrementUserSpending(userId, cost);
+            const spendingInfo = await db.getUserSpending(userId);
+            if (!spendingInfo) {
+                return { userId, cost, newSpending };
+            }
+            const { limit, status } = spendingInfo;
+            const exceeded = limit !== null && newSpending > limit;
+            if (exceeded && status === 'active') {
+                await db.setUserStatus(userId, 'over_limit');
+                console.log(`[Spending] User ${userId} exceeded limit: ${newSpending} > ${limit}`);
+            }
+            await this.checkAlertThresholds(userId, newSpending, limit);
+            return { userId, cost, exceeded, newSpending };
+        }
+        catch (error) {
+            console.error('[Spending] Redis error, falling back to DB:', error);
+            return await this.trackSpendingDB(userId, cost);
+        }
+    },
+    async trackSpendingDB(userId, cost) {
+        const result = await db.incrementUserSpending(userId, cost);
+        if (result.exceeded) {
+            await db.setUserStatus(userId, 'over_limit');
+            console.log(`[Spending] User ${userId} exceeded limit: ${result.newSpending} > ${result.limit}`);
+        }
+        await this.checkAlertThresholds(userId, result.newSpending, result.limit);
+        return {
+            userId,
+            cost,
+            exceeded: result.exceeded,
+            newSpending: result.newSpending,
+        };
+    },
+    async checkAlertThresholds(userId, currentSpending, limit) {
+        if (!limit || limit === 0)
+            return;
+        const percentage = (currentSpending / limit) * 100;
+        const thresholds = [50, 80, 95, 100];
+        for (const threshold of thresholds) {
+            if (percentage >= threshold) {
+                await this.sendAlertIfNeeded(userId, threshold, currentSpending, limit);
+                break;
+            }
+        }
+    },
+    async sendAlertIfNeeded(userId, threshold, currentSpending, limit) {
+        console.log(`[Spending] Alert: User ${userId} at ${threshold}% of limit ($${currentSpending}/$${limit})`);
+        await db.recordSpendingAlert(userId);
+    },
+    async syncSpendingToDB(userId) {
+        try {
+            const cachedSpending = await cache.getUserSpending(userId);
+            if (cachedSpending !== null) {
+                await db.updateUserSpending(userId, cachedSpending);
+                console.log(`[Spending] Synced user ${userId}: $${cachedSpending}`);
+            }
+        }
+        catch (error) {
+            console.error(`[Spending] Sync error for user ${userId}:`, error);
+        }
+    },
+    async syncAllSpending() {
+        try {
+            const userIds = await cache.getAllCachedSpendingUsers();
+            console.log(`[Spending] Syncing ${userIds.length} users to DB`);
+            await Promise.all(userIds.map(userId => this.syncSpendingToDB(userId)));
+            console.log('[Spending] Sync complete');
+        }
+        catch (error) {
+            console.error('[Spending] Bulk sync error:', error);
+        }
+    },
+    async warmCache(userId) {
+        try {
+            const spendingInfo = await db.getUserSpending(userId);
+            if (spendingInfo) {
+                await cache.setUserSpending(userId, spendingInfo.currentSpending);
+            }
+        }
+        catch (error) {
+            console.error(`[Spending] Cache warm error for user ${userId}:`, error);
+        }
+    },
+};

package/dist/middleware/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAK1D,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB;KACF;CACF;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAyHf;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,IAAI,CAWN"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAK1D,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB;KACF;CACF;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAiJf;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,IAAI,CAWN"}

package/dist/middleware/auth.js

@@ -64,6 +64,17 @@ export async function authenticate(req, res, next) {
                 });
                 return;
             }
+            // Check spending limits if user has exceeded and enforcement is set to block
+            if (userStatus === 'over_limit') {
+                const spendingInfo = await db.getUserSpending(apiKeyRecord.userId);
+                if (spendingInfo?.limitEnforcementType === 'block') {
+                    res.status(403).json({
+                        error: 'spending_limit_exceeded',
+                        message: 'You have exceeded your spending limit. Requests are blocked until your next billing period or until you increase your limit.',
+                    });
+                    return;
+                }
+            }
             // Attach userId to request for downstream handlers
             req.userId = apiKeyRecord.userId;
             req.apiKeyId = apiKeyRecord.id;
@@ -94,6 +105,17 @@ export async function authenticate(req, res, next) {
                 });
                 return;
             }
+            // Check spending limits if user has exceeded and enforcement is set to block
+            if (userStatus === 'over_limit') {
+                const spendingInfo = await db.getUserSpending(sessionKey.userId);
+                if (spendingInfo?.limitEnforcementType === 'block') {
+                    res.status(403).json({
+                        error: 'spending_limit_exceeded',
+                        message: 'You have exceeded your spending limit. Requests are blocked until your next billing period or until you increase your limit.',
+                    });
+                    return;
+                }
+            }
             req.userId = sessionKey.userId;
             next();
             return;

package/dist/routes/v1/chat-completions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chat-completions.d.ts","sourceRoot":"","sources":["../../../src/routes/v1/chat-completions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AAapD,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AA6RpC,eAAe,MAAM,CAAC"}
+{"version":3,"file":"chat-completions.d.ts","sourceRoot":"","sources":["../../../src/routes/v1/chat-completions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AAcpD,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AAqSpC,eAAe,MAAM,CAAC"}

package/dist/routes/v1/chat-completions.js

@@ -2,6 +2,7 @@ import { Router } from 'express';
 import { nanoid } from 'nanoid';
 import { db } from '../../lib/db/postgres.js';
 import { authenticate } from '../../middleware/auth.js';
+import { spendingTracker } from '../../lib/spending-tracker.js';
 import { convertOpenAIRequestToLayer, convertLayerResponseToOpenAI, convertLayerChunkToOpenAI, } from '../../lib/openai-conversion.js';
 import { resolveFinalRequest } from '../v3/chat.js';
 import { callAdapter, callAdapterStream } from '../../lib/provider-factory.js';
@@ -147,6 +148,9 @@ router.post('/', authenticate, async (req, res) => {
                         cost: totalCost,
                     },
                 }).catch(err => console.error('Failed to log request:', err));
+                spendingTracker.trackSpending(userId, totalCost).catch(err => {
+                    console.error('Failed to track spending:', err);
+                });
             }
             catch (streamError) {
                 const errorMessage = streamError instanceof Error ? streamError.message : 'Unknown streaming error';
@@ -218,6 +222,9 @@ router.post('/', authenticate, async (req, res) => {
                 finishReason: result.finishReason,
             },
         }).catch(err => console.error('Failed to log request:', err));
+        spendingTracker.trackSpending(userId, result.cost || 0).catch(err => {
+            console.error('Failed to track spending:', err);
+        });
         const openaiResponse = convertLayerResponseToOpenAI(result);
         res.json(openaiResponse);
     }

package/dist/routes/v1/gates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gates.d.ts","sourceRoot":"","sources":["../../../src/routes/v1/gates.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AASpD,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AAuhBpC,eAAe,MAAM,CAAC"}
+{"version":3,"file":"gates.d.ts","sourceRoot":"","sources":["../../../src/routes/v1/gates.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AASpD,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AAwhBpC,eAAe,MAAM,CAAC"}

package/dist/routes/v1/gates.js

@@ -416,7 +416,7 @@ router.post('/suggestions', async (req, res) => {
         return;
     }
     try {
-        const { description, costWeight, latencyWeight, qualityWeight } = req.body;
+        const { description, costWeight, latencyWeight, qualityWeight, availableProviders } = req.body;
         if (!description) {
             res.status(400).json({ error: 'bad_request', message: 'Gate must have a description for AI recommendations' });
             return;
@@ -425,6 +425,7 @@ router.post('/suggestions', async (req, res) => {
             costWeight: parseFloat(costWeight ?? '0.33'),
             latencyWeight: parseFloat(latencyWeight ?? '0.33'),
             qualityWeight: parseFloat(qualityWeight ?? '0.34'),
+            availableProviders: Array.isArray(availableProviders) ? availableProviders : undefined,
         };
         const { analyzeTask } = await import('../../services/task-analysis.js');
         const suggestions = await analyzeTask(description, userPreferences);

package/dist/routes/v1/spending.d.ts

@@ -0,0 +1,4 @@
+import type { Router as RouterType } from 'express';
+declare const router: RouterType;
+export default router;
+//# sourceMappingURL=spending.d.ts.map

package/dist/routes/v1/spending.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spending.d.ts","sourceRoot":"","sources":["../../../src/routes/v1/spending.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AAKpD,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AAyGpC,eAAe,MAAM,CAAC"}

package/dist/routes/v1/spending.js

@@ -0,0 +1,94 @@
+import { Router } from 'express';
+import { db } from '../../lib/db/postgres.js';
+import { cache } from '../../lib/db/redis.js';
+import { authenticate } from '../../middleware/auth.js';
+const router = Router();
+router.use(authenticate);
+// GET /spending - Get current spending information
+router.get('/', async (req, res) => {
+    if (!req.userId) {
+        res.status(401).json({ error: 'unauthorized', message: 'Missing user ID' });
+        return;
+    }
+    try {
+        const spendingInfo = await db.getUserSpending(req.userId);
+        if (!spendingInfo) {
+            res.status(404).json({ error: 'not_found', message: 'User spending data not found' });
+            return;
+        }
+        const { currentSpending, limit, periodStart, status, limitEnforcementType } = spendingInfo;
+        res.json({
+            currentSpending,
+            limit,
+            periodStart,
+            status,
+            limitEnforcementType,
+            percentUsed: limit ? Math.round((currentSpending / limit) * 100) : null,
+        });
+    }
+    catch (error) {
+        console.error('Get spending error:', error);
+        res.status(500).json({ error: 'internal_error', message: 'Failed to get spending data' });
+    }
+});
+// PUT /spending/limit - Update spending limit
+router.put('/limit', async (req, res) => {
+    if (!req.userId) {
+        res.status(401).json({ error: 'unauthorized', message: 'Missing user ID' });
+        return;
+    }
+    try {
+        const { limit } = req.body;
+        if (limit !== null && (typeof limit !== 'number' || limit < 0)) {
+            res.status(400).json({ error: 'bad_request', message: 'Limit must be a positive number or null' });
+            return;
+        }
+        await db.setUserSpendingLimit(req.userId, limit);
+        await cache.invalidateUserSpending(req.userId);
+        res.json({ success: true, limit });
+    }
+    catch (error) {
+        console.error('Update spending limit error:', error);
+        res.status(500).json({ error: 'internal_error', message: 'Failed to update spending limit' });
+    }
+});
+// PUT /spending/enforcement - Update limit enforcement type
+router.put('/enforcement', async (req, res) => {
+    if (!req.userId) {
+        res.status(401).json({ error: 'unauthorized', message: 'Missing user ID' });
+        return;
+    }
+    try {
+        const { enforcementType } = req.body;
+        if (!['alert_only', 'block'].includes(enforcementType)) {
+            res.status(400).json({
+                error: 'bad_request',
+                message: 'Enforcement type must be "alert_only" or "block"'
+            });
+            return;
+        }
+        await db.setUserEnforcementType(req.userId, enforcementType);
+        res.json({ success: true, enforcementType });
+    }
+    catch (error) {
+        console.error('Update enforcement type error:', error);
+        res.status(500).json({ error: 'internal_error', message: 'Failed to update enforcement type' });
+    }
+});
+// POST /spending/reset - Manually reset spending period
+router.post('/reset', async (req, res) => {
+    if (!req.userId) {
+        res.status(401).json({ error: 'unauthorized', message: 'Missing user ID' });
+        return;
+    }
+    try {
+        await db.resetUserSpending(req.userId);
+        await cache.invalidateUserSpending(req.userId);
+        res.json({ success: true, message: 'Spending period reset successfully' });
+    }
+    catch (error) {
+        console.error('Reset spending error:', error);
+        res.status(500).json({ error: 'internal_error', message: 'Failed to reset spending' });
+    }
+});
+export default router;

package/dist/routes/v2/complete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"complete.d.ts","sourceRoot":"","sources":["../../../src/routes/v2/complete.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AASpD,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AAkVpC,eAAe,MAAM,CAAC"}
+{"version":3,"file":"complete.d.ts","sourceRoot":"","sources":["../../../src/routes/v2/complete.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AAUpD,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AAsVpC,eAAe,MAAM,CAAC"}

package/dist/routes/v2/complete.js

@@ -3,6 +3,7 @@ import { db } from '../../lib/db/postgres.js';
 import { authenticate } from '../../middleware/auth.js';
 import { callAdapter, normalizeModelId } from '../../lib/provider-factory.js';
 import { OverrideField } from '@layer-ai/sdk';
+import { spendingTracker } from '../../lib/spending-tracker.js';
 const router = Router();
 // MARK:- Helper Functions
 function isOverrideAllowed(allowOverrides, field) {
@@ -255,6 +256,9 @@ router.post('/', authenticate, async (req, res) => {
             userAgent: req.headers['user-agent'] || null,
             ipAddress: req.ip || null,
         }).catch(err => console.error('Failed to log request:', err));
+        spendingTracker.trackSpending(userId, result.cost || 0).catch(err => {
+            console.error('Failed to track spending:', err);
+        });
         // Return LayerResponse with additional metadata
         const response = {
             ...result,

package/dist/routes/v3/chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../../src/routes/v3/chat.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AAIpD,OAAO,KAAK,EAAE,YAAY,EAAiB,IAAI,EAA+C,MAAM,eAAe,CAAC;AAGpH,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AAiBpC,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,IAAI,EAChB,OAAO,EAAE,YAAY,GACpB,YAAY,CAiFd;AAgWD,eAAe,MAAM,CAAC"}
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../../src/routes/v3/chat.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AAIpD,OAAO,KAAK,EAAE,YAAY,EAAiB,IAAI,EAA+C,MAAM,eAAe,CAAC;AAIpH,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AAiBpC,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,IAAI,EAChB,OAAO,EAAE,YAAY,GACpB,YAAY,CAiFd;AAwWD,eAAe,MAAM,CAAC"}

package/dist/routes/v3/chat.js

@@ -3,6 +3,7 @@ import { db } from '../../lib/db/postgres.js';
 import { authenticate } from '../../middleware/auth.js';
 import { callAdapter, callAdapterStream, normalizeModelId, getProviderForModel, PROVIDER } from '../../lib/provider-factory.js';
 import { OverrideField } from '@layer-ai/sdk';
+import { spendingTracker } from '../../lib/spending-tracker.js';
 const router = Router();
 // MARK:- Helper Functions
 function isOverrideAllowed(allowOverrides, field) {
@@ -282,6 +283,9 @@ router.post('/', authenticate, async (req, res) => {
                         cost: totalCost,
                     },
                 }).catch(err => console.error('Failed to log request:', err));
+                spendingTracker.trackSpending(userId, totalCost).catch(err => {
+                    console.error('Failed to track spending:', err);
+                });
             }
             catch (streamError) {
                 const errorMessage = streamError instanceof Error ? streamError.message : 'Unknown streaming error';
@@ -346,6 +350,9 @@ router.post('/', authenticate, async (req, res) => {
                 finishReason: result.finishReason,
             },
         }).catch(err => console.error('Failed to log request:', err));
+        spendingTracker.trackSpending(userId, result.cost || 0).catch(err => {
+            console.error('Failed to track spending:', err);
+        });
         const response = {
             ...result,
             model: modelUsed,

package/dist/services/task-analysis.d.ts

@@ -3,5 +3,6 @@ export declare function analyzeTask(description: string, userPreferences?: {
     costWeight?: number;
     latencyWeight?: number;
     qualityWeight?: number;
+    availableProviders?: string[];
 }): Promise<TaskAnalysis>;
 //# sourceMappingURL=task-analysis.d.ts.map

package/dist/services/task-analysis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-analysis.d.ts","sourceRoot":"","sources":["../../src/services/task-analysis.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,YAAY,EAAmC,MAAM,eAAe,CAAC;AA2D9F,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,eAAe,CAAC,EAAE;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA,OAAO,CAAC,YAAY,CAAC,CAkHvB"}
+{"version":3,"file":"task-analysis.d.ts","sourceRoot":"","sources":["../../src/services/task-analysis.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,YAAY,EAAmC,MAAM,eAAe,CAAC;AA2D9F,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,eAAe,CAAC,EAAE;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B,GACA,OAAO,CAAC,YAAY,CAAC,CA6HvB"}

package/dist/services/task-analysis.js

@@ -57,6 +57,7 @@ export async function analyzeTask(description, userPreferences) {
     const costWeight = userPreferences?.costWeight ?? 0.33;
     const latencyWeight = userPreferences?.latencyWeight ?? 0.33;
     const qualityWeight = userPreferences?.qualityWeight ?? 0.33;
+    const availableProviders = userPreferences?.availableProviders;
     let taskType = 'chat';
     try {
         taskType = await detectTaskType(description, anthropic);
@@ -66,9 +67,17 @@ export async function analyzeTask(description, userPreferences) {
     }
     const filteredRegistry = {};
     for (const [key, model] of Object.entries(MODEL_REGISTRY)) {
-        if (model.type === taskType) {
-            filteredRegistry[key] = model;
+        // Filter by task type
+        if (model.type !== taskType) {
+            continue;
         }
+        // Filter by BYOK providers if specified
+        if (availableProviders && availableProviders.length > 0) {
+            if (!availableProviders.includes(model.provider)) {
+                continue;
+            }
+        }
+        filteredRegistry[key] = model;
     }
     const registryContext = JSON.stringify(filteredRegistry, null, 2);
     const prompt = `You are analyzing a task to recommend the best AI models from our registry.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@layer-ai/core",
-  "version": "2.0.20",
+  "version": "2.0.22",
   "description": "Core API routes and services for Layer AI",
   "type": "module",
   "main": "./dist/index.js",
@@ -36,7 +36,7 @@
     "nanoid": "^5.0.4",
     "openai": "^4.24.0",
     "pg": "^8.11.3",
-    "@layer-ai/sdk": "^2.5.7"
+    "@layer-ai/sdk": "^2.5.8"
   },
   "devDependencies": {
     "@types/bcryptjs": "^2.4.6",