@nodetool-ai/websocket 0.7.0-rc.22 → 0.8.1

package/dist/routes/documents.js

@@ -0,0 +1,155 @@
+/**
+ * Document text extraction — `POST /api/documents/extract-text`.
+ *
+ * Script and screenplay imports send the file here instead of reading it in
+ * the browser: pdfium and mammoth are Node-only and would add megabytes to the
+ * web bundle for an action a user takes once (PRD § 7.6, D16). FDX is XML and
+ * is parsed in the browser, so this route does not accept it.
+ *
+ * The route stores nothing. It reads the upload, returns the text, and drops
+ * the bytes — including on every error path.
+ */
+import { z } from "zod";
+import { createLogger } from "@nodetool-ai/config";
+import { extractPdfText } from "@nodetool-ai/document-nodes/lib/pdf-text";
+import { extractRawText } from "@nodetool-ai/agents/host-modules/mammoth";
+import { ApiErrorCode, apiError } from "../error-codes.js";
+const log = createLogger("nodetool.websocket.documents");
+/**
+ * The whole file is buffered and parsed in memory, so this caps what one
+ * request may hold rather than what a disk could take. A feature-length
+ * screenplay exported to PDF or DOCX is a few hundred kilobytes; 25 MB clears
+ * even a page-scan PDF while keeping the parse bounded.
+ */
+export const EXTRACT_TEXT_MAX_BYTES = 25 * 1024 * 1024;
+const PDF_CONTENT_TYPE = "application/pdf";
+const DOCX_CONTENT_TYPE = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+/** Wording fixed by PRD § 7.6 — the client renders it verbatim. */
+const NO_TEXT_IN_PDF = "No text found in this PDF. Paste the script, or upload a DOCX or FDX.";
+const ACCEPTED_TYPES = "Upload a PDF or a DOCX.";
+/** One file under the `file` field. Nothing else in the form is read. */
+const uploadSchema = z.object({
+    file: z.instanceof(File)
+});
+/**
+ * Browsers send `application/octet-stream` for a type they do not recognise
+ * (DOCX out of some file pickers, PDF dragged out of an archive), so the
+ * filename extension decides when the content type says nothing.
+ */
+function documentKind(contentType, filename) {
+    const type = contentType.split(";")[0]?.trim().toLowerCase() ?? "";
+    if (type === PDF_CONTENT_TYPE)
+        return "pdf";
+    if (type === DOCX_CONTENT_TYPE)
+        return "docx";
+    if (type !== "" && type !== "application/octet-stream")
+        return null;
+    const name = filename.toLowerCase();
+    if (name.endsWith(".pdf"))
+        return "pdf";
+    if (name.endsWith(".docx"))
+        return "docx";
+    return null;
+}
+function failure(status, detail) {
+    return { status, body: apiError(ApiErrorCode.INVALID_INPUT, detail) };
+}
+/** Run the extractor for `kind` and map its outcome onto § 7.6's contract. */
+async function extract(kind, bytes) {
+    if (kind === "pdf") {
+        let result;
+        try {
+            result = await extractPdfText(bytes);
+        }
+        catch (err) {
+            log.warn("PDF extraction failed", {
+                error: err instanceof Error ? err.message : String(err)
+            });
+            return failure(422, `This PDF could not be read. ${ACCEPTED_TYPES}`);
+        }
+        // Zero pages is a file the parser could not open at all. Pages that hold
+        // no text is a scan, which § 7.6 answers with its own message.
+        if (result.pages === 0) {
+            return failure(422, `This PDF could not be read. ${ACCEPTED_TYPES}`);
+        }
+        if (result.text === "") {
+            return failure(422, NO_TEXT_IN_PDF);
+        }
+        return { status: 200, body: { text: result.text, pages: result.pages } };
+    }
+    let text;
+    try {
+        text = (await extractRawText(bytes)).trim();
+    }
+    catch (err) {
+        log.warn("DOCX extraction failed", {
+            error: err instanceof Error ? err.message : String(err)
+        });
+        return failure(422, `This DOCX could not be read. ${ACCEPTED_TYPES}`);
+    }
+    if (text === "") {
+        return failure(422, `No text found in this DOCX. ${ACCEPTED_TYPES}`);
+    }
+    return { status: 200, body: { text } };
+}
+const documentsRoutes = async (app) => {
+    // Fastify refuses an oversize body while it is still arriving, so nothing
+    // past the cap is ever buffered. Its own 413 says only "Request body is too
+    // large"; this restates it with the cap the client has to respect.
+    app.setErrorHandler((err, _req, reply) => {
+        if (err.code === "FST_ERR_CTP_BODY_TOO_LARGE") {
+            reply
+                .status(413)
+                .send(apiError(ApiErrorCode.INVALID_INPUT, `File is too large. The limit is ${EXTRACT_TEXT_MAX_BYTES} bytes.`));
+            return;
+        }
+        log.error("extract-text failed", { error: err.message });
+        reply
+            .status(err.statusCode ?? 500)
+            .send(apiError(ApiErrorCode.INTERNAL_ERROR, "Text extraction failed"));
+    });
+    app.post("/api/documents/extract-text", { bodyLimit: EXTRACT_TEXT_MAX_BYTES }, async (req, reply) => {
+        reply.header("cache-control", "no-store");
+        const contentType = req.headers["content-type"] ?? "";
+        if (!contentType.toLowerCase().includes("multipart/form-data")) {
+            return reply
+                .status(400)
+                .send(apiError(ApiErrorCode.INVALID_INPUT, "Expected multipart/form-data with one file field."));
+        }
+        // The app-level content-type parser hands every body over as a Buffer.
+        // Re-wrapping it in a Request is how the other upload routes reach the
+        // platform's multipart parser.
+        const body = Buffer.isBuffer(req.body) ? req.body : Buffer.alloc(0);
+        let form;
+        try {
+            form = await new Request("http://localhost/api/documents/extract-text", {
+                method: "POST",
+                headers: { "content-type": contentType },
+                body: new Uint8Array(body)
+            }).formData();
+        }
+        catch {
+            // An unparseable multipart body is client error, not ours.
+            return reply
+                .status(400)
+                .send(apiError(ApiErrorCode.INVALID_INPUT, "Invalid multipart form data."));
+        }
+        const parsed = uploadSchema.safeParse({ file: form.get("file") });
+        if (!parsed.success) {
+            return reply
+                .status(400)
+                .send(apiError(ApiErrorCode.MISSING_REQUIRED_FIELD, "No file provided under the 'file' field."));
+        }
+        const { file } = parsed.data;
+        const kind = documentKind(file.type, file.name);
+        if (kind === null) {
+            return reply
+                .status(415)
+                .send(apiError(ApiErrorCode.INVALID_INPUT, `Unsupported file type. ${ACCEPTED_TYPES}`));
+        }
+        const outcome = await extract(kind, Buffer.from(await file.arrayBuffer()));
+        return reply.status(outcome.status).send(outcome.body);
+    });
+};
+export default documentsRoutes;
+//# sourceMappingURL=documents.js.map

package/dist/routes/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["../../src/routes/documents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EACL,YAAY,EACZ,QAAQ,EAET,MAAM,mBAAmB,CAAC;AAE3B,MAAM,GAAG,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAC3C,MAAM,iBAAiB,GACrB,yEAAyE,CAAC;AAE5E,mEAAmE;AACnE,MAAM,cAAc,GAClB,uEAAuE,CAAC;AAC1E,MAAM,cAAc,GAAG,yBAAyB,CAAC;AAajD,yEAAyE;AACzE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;CACzB,CAAC,CAAC;AAIH;;;;GAIG;AACH,SAAS,YAAY,CACnB,WAAmB,EACnB,QAAgB;IAEhB,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,0BAA0B;QAAE,OAAO,IAAI,CAAC;IAEpE,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,MAAc;IAC7C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,OAAO,CAAC,IAAkB,EAAE,KAAa;IACtD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,IAAI,MAAkD,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBAChC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,GAAG,EAAE,+BAA+B,cAAc,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,yEAAyE;QACzE,+DAA+D;QAC/D,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC,GAAG,EAAE,+BAA+B,cAAc,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACjC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,GAAG,EAAE,gCAAgC,cAAc,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,GAAG,EAAE,+BAA+B,cAAc,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,eAAe,GAAuB,KAAK,EAAE,GAAG,EAAE,EAAE;IACxD,0EAA0E;IAC1E,4EAA4E;IAC5E,mEAAmE;IACnE,GAAG,CAAC,eAAe,CAAC,CAAC,GAAiB,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACrD,IAAI,GAAG,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YAC9C,KAAK;iBACF,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CACH,QAAQ,CACN,YAAY,CAAC,aAAa,EAC1B,mCAAmC,sBAAsB,SAAS,CACnE,CACF,CAAC;YACJ,OAAO;QACT,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,KAAK;aACF,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC;aAC7B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CACN,6BAA6B,EAC7B,EAAE,SAAS,EAAE,sBAAsB,EAAE,EACrC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAE1C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC/D,OAAO,KAAK;iBACT,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CACH,QAAQ,CACN,YAAY,CAAC,aAAa,EAC1B,mDAAmD,CACpD,CACF,CAAC;QACN,CAAC;QAED,uEAAuE;QACvE,uEAAuE;QACvE,+BAA+B;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,OAAO,CACtB,6CAA6C,EAC7C;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;gBACxC,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC;aAC3B,CACF,CAAC,QAAQ,EAAE,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;YAC3D,OAAO,KAAK;iBACT,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CACH,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,8BAA8B,CAAC,CACrE,CAAC;QACN,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,KAAK;iBACT,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CACH,QAAQ,CACN,YAAY,CAAC,sBAAsB,EACnC,0CAA0C,CAC3C,CACF,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,KAAK;iBACT,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CACH,QAAQ,CACN,YAAY,CAAC,aAAa,EAC1B,0BAA0B,cAAc,EAAE,CAC3C,CACF,CAAC;QACN,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CACtC,CAAC;QACF,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/routes/fal-credits.d.ts

@@ -0,0 +1,4 @@
+import type { FastifyPluginAsync } from "fastify";
+declare const falCreditsRoute: FastifyPluginAsync;
+export default falCreditsRoute;
+//# sourceMappingURL=fal-credits.d.ts.map

package/dist/routes/fal-credits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fal-credits.d.ts","sourceRoot":"","sources":["../../src/routes/fal-credits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AA2DlD,QAAA,MAAM,eAAe,EAAE,kBAgEtB,CAAC;eAEa,eAAe"}

package/dist/routes/fal-credits.js

@@ -0,0 +1,101 @@
+import { Secret } from "@nodetool-ai/models";
+import { isNonBlankString, isNumber, isObjectLike } from "../lib/wire-values.js";
+/** Platform API billing + credits (GET /v1/account was removed — returns 404). */
+const FAL_ACCOUNT_BILLING_URL = "https://api.fal.ai/v1/account/billing?expand=credits";
+/** Extract `error.message` from fal.ai JSON error bodies (403 admin key, etc.). */
+function parseFalApiErrorMessage(body) {
+    try {
+        const j = JSON.parse(body);
+        const msg = j.error?.message;
+        if (isNonBlankString(msg)) {
+            return msg.trim();
+        }
+    }
+    catch {
+        // not JSON
+    }
+    return undefined;
+}
+/** UI expects `credit_balance: { amount, currency }` (see web `formatCredits`). */
+function normalizeFalCreditsBody(data) {
+    if (!isObjectLike(data)) {
+        return { credit_balance: null };
+    }
+    const d = data;
+    if (d.credits != null &&
+        isNumber(d.credits.current_balance)) {
+        return {
+            credit_balance: {
+                amount: d.credits.current_balance,
+                currency: d.credits.currency ?? "USD",
+            },
+            username: d.username,
+        };
+    }
+    if (d.credit_balance != null) {
+        return { ...d };
+    }
+    return { credit_balance: null, username: d.username };
+}
+const falCreditsRoute = async (app) => {
+    app.get("/api/fal/credits", async (_req, reply) => {
+        const secret = await Secret.find("1", "FAL_API_KEY");
+        let apiKey = null;
+        if (secret) {
+            try {
+                apiKey = await secret.getDecryptedValue();
+            }
+            catch (err) {
+                console.error("[fal-credits] decryption failed:", err);
+            }
+        }
+        apiKey ??= process.env.FAL_API_KEY ?? null;
+        if (!apiKey) {
+            console.info("[fal-credits] no FAL_API_KEY (db secret or env); returning 204");
+            reply.status(204).send();
+            return;
+        }
+        try {
+            const res = await fetch(FAL_ACCOUNT_BILLING_URL, {
+                headers: { Authorization: `Key ${apiKey}` },
+            });
+            if (!res.ok) {
+                const body = await res.text().catch(() => "");
+                console.warn("[fal-credits] fal.ai HTTP", res.status, "—", body.slice(0, 200));
+                console.info("[fal-credits] forwarding unavailable payload to client (HTTP 200)");
+                const fromFal = parseFalApiErrorMessage(body);
+                const detail = fromFal ??
+                    (res.status === 403
+                        ? "Access denied. Account billing on fal.ai requires an Admin API key — create one at https://fal.ai/dashboard/keys"
+                        : undefined) ??
+                    "FAL account could not be loaded. Check FAL_API_KEY in settings.";
+                // 200 so the SPA does not treat this as a gateway error in devtools; body is explicit.
+                reply.send({
+                    unavailable: true,
+                    detail,
+                    credit_balance: null,
+                });
+                return;
+            }
+            const raw = await res.json();
+            const payload = normalizeFalCreditsBody(raw);
+            const bal = payload.credit_balance;
+            console.info("[fal-credits] fal.ai billing OK", {
+                has_credit_balance: bal != null,
+                balance_type: bal == null ? "none" : typeof bal,
+            });
+            reply.send(payload);
+        }
+        catch (err) {
+            console.error("[fal-credits] fetch failed:", err);
+            console.info("[fal-credits] forwarding unavailable payload to client (network error)");
+            reply.send({
+                unavailable: true,
+                detail: "Could not reach FAL. Try again later.",
+                credit_balance: null,
+            });
+        }
+    });
+};
+export default falCreditsRoute;
+//# sourceMappingURL=fal-credits.js.map

package/dist/routes/fal-credits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fal-credits.js","sourceRoot":"","sources":["../../src/routes/fal-credits.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,YAAY,EACb,MAAM,uBAAuB,CAAC;AAE/B,kFAAkF;AAClF,MAAM,uBAAuB,GAC3B,sDAAsD,CAAC;AAWzD,mFAAmF;AACnF,SAAS,uBAAuB,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqC,CAAC;QAC/D,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC;QAC7B,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,SAAS,uBAAuB,CAAC,IAAa;IAC5C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,CAAC,GAAG,IAAsB,CAAC;IACjC,IACE,CAAC,CAAC,OAAO,IAAI,IAAI;QACjB,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EACnC,CAAC;QACD,OAAO;YACL,cAAc,EAAE;gBACd,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe;gBACjC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK;aACtC;YACD,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,GAAG,CAAC,EAA6B,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,eAAe,GAAuB,KAAK,EAAE,GAAG,EAAE,EAAE;IACxD,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACrD,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC;QAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;YAC/E,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,uBAAuB,EAAE;gBAC/C,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,MAAM,EAAE,EAAE;aAC5C,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC/E,OAAO,CAAC,IAAI,CACV,mEAAmE,CACpE,CAAC;gBACF,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAC9C,MAAM,MAAM,GACV,OAAO;oBACP,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG;wBACjB,CAAC,CAAC,kHAAkH;wBACpH,CAAC,CAAC,SAAS,CAAC;oBACd,iEAAiE,CAAC;gBACpE,uFAAuF;gBACvF,KAAK,CAAC,IAAI,CAAC;oBACT,WAAW,EAAE,IAAI;oBACjB,MAAM;oBACN,cAAc,EAAE,IAAI;iBACrB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE;gBAC9C,kBAAkB,EAAE,GAAG,IAAI,IAAI;gBAC/B,YAAY,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG;aAChD,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;YACvF,KAAK,CAAC,IAAI,CAAC;gBACT,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,uCAAuC;gBAC/C,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/routes/fal-pricing-estimate.d.ts

@@ -0,0 +1,4 @@
+import type { FastifyPluginAsync } from "fastify";
+declare const falPricingEstimateRoute: FastifyPluginAsync;
+export default falPricingEstimateRoute;
+//# sourceMappingURL=fal-pricing-estimate.d.ts.map

package/dist/routes/fal-pricing-estimate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fal-pricing-estimate.d.ts","sourceRoot":"","sources":["../../src/routes/fal-pricing-estimate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAkGlD,QAAA,MAAM,uBAAuB,EAAE,kBAoE9B,CAAC;eAEa,uBAAuB"}

package/dist/routes/fal-pricing-estimate.js

@@ -0,0 +1,114 @@
+import { Secret } from "@nodetool-ai/models";
+import { isNumber, isString } from "../lib/wire-values.js";
+const FAL_PRICING_ESTIMATE_URL = "https://api.fal.ai/v1/models/pricing/estimate";
+const CACHE_TTL_MS = 60 * 60 * 1000; // 1 hour
+const estimateCache = new Map();
+function cacheKey(endpointId, estimateType) {
+    return `${estimateType}:${endpointId}`;
+}
+async function resolveFalApiKey() {
+    const secret = await Secret.find("1", "FAL_API_KEY");
+    let apiKey = null;
+    if (secret) {
+        try {
+            apiKey = await secret.getDecryptedValue();
+        }
+        catch (err) {
+            console.error("[fal-pricing-estimate] decryption failed:", err);
+        }
+    }
+    return apiKey ?? process.env.FAL_API_KEY ?? null;
+}
+async function fetchEstimateFromFal(endpointId, estimateType, quantity, apiKey) {
+    const body = estimateType === "historical_api_price"
+        ? {
+            estimate_type: "historical_api_price",
+            endpoints: { [endpointId]: { call_quantity: Math.max(1, Math.round(quantity)) } },
+        }
+        : {
+            estimate_type: "unit_price",
+            endpoints: { [endpointId]: { unit_quantity: Math.max(0.000001, quantity) } },
+        };
+    const res = await fetch(FAL_PRICING_ESTIMATE_URL, {
+        method: "POST",
+        headers: {
+            Authorization: `Key ${apiKey}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify(body),
+    });
+    if (!res.ok) {
+        const errBody = await res.text().catch(() => "");
+        console.warn("[fal-pricing-estimate] fal.ai HTTP", res.status, "—", errBody.slice(0, 200));
+        return null;
+    }
+    const json = (await res.json());
+    if (!isNumber(json.total_cost) || !isString(json.currency)) {
+        return null;
+    }
+    return {
+        total_cost: json.total_cost,
+        currency: json.currency,
+        estimate_type: json.estimate_type ?? estimateType,
+        expiresAt: Date.now() + CACHE_TTL_MS,
+    };
+}
+const falPricingEstimateRoute = async (app) => {
+    app.post("/api/fal/pricing/estimate", async (req, reply) => {
+        const body = (req.body ?? {});
+        const endpointId = isString(body.endpoint_id) ? body.endpoint_id.trim() : "";
+        const estimateType = body.estimate_type === "unit_price" ? "unit_price" : "historical_api_price";
+        if (endpointId === "") {
+            reply.status(400).send({ detail: "endpoint_id is required" });
+            return;
+        }
+        const apiKey = await resolveFalApiKey();
+        if (!apiKey) {
+            reply.status(204).send();
+            return;
+        }
+        const quantity = estimateType === "historical_api_price"
+            ? isNumber(body.call_quantity) && body.call_quantity >= 1
+                ? body.call_quantity
+                : 1
+            : isNumber(body.unit_quantity) && body.unit_quantity >= 0.000001
+                ? body.unit_quantity
+                : 1;
+        const key = cacheKey(endpointId, estimateType);
+        const now = Date.now();
+        const cached = estimateCache.get(key);
+        if (cached && now < cached.expiresAt) {
+            reply.send({
+                endpoint_id: endpointId,
+                estimate_type: cached.estimate_type,
+                total_cost: cached.total_cost,
+                currency: cached.currency,
+                fetched_at: new Date().toISOString(),
+                cached: true,
+            });
+            return;
+        }
+        try {
+            const entry = await fetchEstimateFromFal(endpointId, estimateType, quantity, apiKey);
+            if (!entry) {
+                reply.status(502).send({ detail: "Failed to fetch FAL pricing estimate" });
+                return;
+            }
+            estimateCache.set(key, entry);
+            reply.send({
+                endpoint_id: endpointId,
+                estimate_type: entry.estimate_type,
+                total_cost: entry.total_cost,
+                currency: entry.currency,
+                fetched_at: new Date().toISOString(),
+                cached: false,
+            });
+        }
+        catch (err) {
+            console.error("[fal-pricing-estimate] fetch failed:", err);
+            reply.status(502).send({ detail: "Failed to fetch FAL pricing estimate" });
+        }
+    });
+};
+export default falPricingEstimateRoute;
+//# sourceMappingURL=fal-pricing-estimate.js.map

package/dist/routes/fal-pricing-estimate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fal-pricing-estimate.js","sourceRoot":"","sources":["../../src/routes/fal-pricing-estimate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EACL,QAAQ,EACR,QAAQ,EACT,MAAM,uBAAuB,CAAC;AAE/B,MAAM,wBAAwB,GAAG,+CAA+C,CAAC;AACjF,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAS9C,MAAM,aAAa,GAAG,IAAI,GAAG,EAA8B,CAAC;AAE5D,SAAS,QAAQ,CAAC,UAAkB,EAAE,YAAoB;IACxD,OAAO,GAAG,YAAY,IAAI,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACrD,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC;AACnD,CAAC;AASD,KAAK,UAAU,oBAAoB,CACjC,UAAkB,EAClB,YAAmD,EACnD,QAAgB,EAChB,MAAc;IAEd,MAAM,IAAI,GACR,YAAY,KAAK,sBAAsB;QACrC,CAAC,CAAC;YACE,aAAa,EAAE,sBAA+B;YAC9C,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE;SAClF;QACH,CAAC,CAAC;YACE,aAAa,EAAE,YAAqB;YACpC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;SAC7E,CAAC;IAER,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,wBAAwB,EAAE;QAChD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,OAAO,MAAM,EAAE;YAC9B,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CACV,oCAAoC,EACpC,GAAG,CAAC,MAAM,EACV,GAAG,EACH,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CACtB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,YAAY;QACjD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAuB,KAAK,EAAE,GAAG,EAAE,EAAE;IAChE,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QACrD,MAAM,UAAU,GACd,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,YAAY,GAChB,IAAI,CAAC,aAAa,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAE9E,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;YACtB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GACZ,YAAY,KAAK,sBAAsB;YACrC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC;gBACvD,CAAC,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,aAAa,IAAI,QAAQ;gBAC9D,CAAC,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,CAAC,CAAC;QAEV,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC;gBACT,WAAW,EAAE,UAAU;gBACvB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACtC,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,MAAM,CACP,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC,CAAC;gBAC3E,OAAO;YACT,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC;gBACT,WAAW,EAAE,UAAU;gBACvB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;YAC3D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/routes/fal-pricing.d.ts

@@ -0,0 +1,4 @@
+import type { FastifyPluginAsync } from "fastify";
+declare const falPricingRoute: FastifyPluginAsync;
+export default falPricingRoute;
+//# sourceMappingURL=fal-pricing.d.ts.map

package/dist/routes/fal-pricing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fal-pricing.d.ts","sourceRoot":"","sources":["../../src/routes/fal-pricing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AA4ElD,QAAA,MAAM,eAAe,EAAE,kBAmCtB,CAAC;eAEa,eAAe"}

package/dist/routes/fal-pricing.js

@@ -0,0 +1,93 @@
+import { Secret } from "@nodetool-ai/models";
+const FAL_PRICING_URL = "https://api.fal.ai/v1/models/pricing";
+const CACHE_TTL_MS = 60 * 60 * 1000; // 1 hour
+// Per-endpoint cache: endpoint_id -> { entry, expiresAt }
+const endpointCache = new Map();
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+async function fetchPricingBatch(batch, apiKey) {
+    const url = new URL(FAL_PRICING_URL);
+    for (const id of batch)
+        url.searchParams.append("endpoint_id", id);
+    for (let attempt = 0; attempt < 3; attempt++) {
+        const res = await fetch(url.toString(), {
+            headers: { Authorization: `Key ${apiKey}` },
+        });
+        if (res.ok) {
+            const json = (await res.json());
+            const out = {};
+            for (const row of json.prices ?? []) {
+                out[row.endpoint_id] = { unit_price: row.unit_price, billing_unit: row.unit, currency: row.currency };
+            }
+            return out;
+        }
+        if (res.status === 429 && attempt < 2) {
+            console.warn("[fal-pricing] 429 rate limit, retrying after", 4000 * (attempt + 1), "ms");
+            await sleep(4000 * (attempt + 1));
+            continue;
+        }
+        const body = await res.text().catch(() => "");
+        console.warn("[fal-pricing] batch HTTP", res.status, "—", body.slice(0, 200));
+        break;
+    }
+    return {};
+}
+async function fetchFalPricingForIds(endpointIds, apiKey) {
+    const now = Date.now();
+    const missing = endpointIds.filter((id) => {
+        const cached = endpointCache.get(id);
+        return !cached || now >= cached.expiresAt;
+    });
+    if (missing.length > 0) {
+        const result = await fetchPricingBatch(missing, apiKey);
+        const expiresAt = now + CACHE_TTL_MS;
+        for (const [id, entry] of Object.entries(result)) {
+            endpointCache.set(id, { entry, expiresAt });
+        }
+    }
+    const byEndpointId = {};
+    for (const id of endpointIds) {
+        const cached = endpointCache.get(id);
+        if (cached)
+            byEndpointId[id] = cached.entry;
+    }
+    return byEndpointId;
+}
+const falPricingRoute = async (app) => {
+    app.get("/api/fal/pricing", async (req, reply) => {
+        const raw = req.query["endpoint_id"];
+        const endpointIds = raw
+            ? [...new Set(Array.isArray(raw) ? raw : [raw])]
+            : [];
+        if (endpointIds.length === 0) {
+            reply.status(400).send({ detail: "endpoint_id query param required" });
+            return;
+        }
+        const secret = await Secret.find("1", "FAL_API_KEY");
+        let apiKey = null;
+        if (secret) {
+            try {
+                apiKey = await secret.getDecryptedValue();
+            }
+            catch (err) {
+                console.error("[fal-pricing] decryption failed:", err);
+            }
+        }
+        apiKey ??= process.env.FAL_API_KEY ?? null;
+        if (!apiKey) {
+            reply.status(204).send();
+            return;
+        }
+        try {
+            const byEndpointId = await fetchFalPricingForIds(endpointIds, apiKey);
+            reply.send({ byEndpointId, fetched_at: new Date().toISOString() });
+        }
+        catch (err) {
+            console.error("[fal-pricing] fetch failed:", err);
+            reply.status(502).send({ detail: "Failed to fetch FAL pricing" });
+        }
+    });
+};
+export default falPricingRoute;
+//# sourceMappingURL=fal-pricing.js.map

package/dist/routes/fal-pricing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fal-pricing.js","sourceRoot":"","sources":["../../src/routes/fal-pricing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAC/D,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAQ9C,0DAA0D;AAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsD,CAAC;AAEpF,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAAe,EACf,MAAc;IAEd,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACrC,KAAK,MAAM,EAAE,IAAI,KAAK;QAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAEnE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtC,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,MAAM,EAAE,EAAE;SAC5C,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA+F,CAAC;YAC9H,MAAM,GAAG,GAAiC,EAAE,CAAC;YAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACpC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;YACxG,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACzF,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9E,MAAM;IACR,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,WAAqB,EACrB,MAAc;IAEd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,GAAG,GAAG,YAAY,CAAC;QACrC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAiC,EAAE,CAAC;IACtD,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,MAAM;YAAE,YAAY,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,eAAe,GAAuB,KAAK,EAAE,GAAG,EAAE,EAAE;IACxD,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAI,GAAG,CAAC,KAA2C,CAAC,aAAa,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,GAAG;YACrB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC,CAAC,EAAE,CAAC;QAEP,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACrD,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACtE,KAAK,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAClD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/routes/fal-webhook.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Authenticated fal queue webhook ingress.
+ *
+ * The route deliberately stops at the durable inbox boundary. A generation
+ * finalizer consumes the accepted delivery later, so this handler never
+ * downloads provider media or emits completion notifications.
+ */
+import type { FastifyPluginAsync } from "fastify";
+export declare const FAL_WEBHOOK_PATH = "/api/providers/fal/webhook/:token";
+export declare const FAL_WEBHOOK_JWKS_URL = "https://rest.fal.ai/.well-known/jwks.json";
+export declare const FAL_WEBHOOK_TIMESTAMP_WINDOW_SECONDS = 300;
+export declare const FAL_WEBHOOK_JWKS_CACHE_TTL_MS: number;
+export declare const FAL_WEBHOOK_MAX_BODY_BYTES: number;
+export interface FalWebhookHeaders {
+    readonly requestId: string;
+    readonly userId: string;
+    readonly timestamp: string;
+    readonly signature: string;
+}
+export interface FalWebhookJwk {
+    readonly kty: "OKP";
+    readonly crv: "Ed25519";
+    readonly x: string;
+    readonly kid?: string;
+    readonly alg?: string;
+    readonly use?: string;
+}
+export type FalWebhookVerificationResult = {
+    readonly ok: true;
+    readonly headers: FalWebhookHeaders;
+    readonly bodySha256: string;
+} | {
+    readonly ok: false;
+    readonly retryable: boolean;
+    readonly reason: "missing_header" | "invalid_header" | "invalid_timestamp" | "stale_timestamp" | "invalid_signature" | "jwks_unavailable";
+};
+export interface FalWebhookVerifierOptions {
+    readonly fetchJwks?: () => Promise<readonly FalWebhookJwk[]>;
+    readonly now?: () => number;
+    readonly cacheTtlMs?: number;
+}
+/**
+ * fal Ed25519 verifier. Key refreshes are coalesced so a burst of callbacks
+ * cannot turn a key rotation or cold start into a request storm.
+ */
+export declare class FalWebhookVerifier {
+    private readonly fetchJwks;
+    private readonly now;
+    private readonly cacheTtlMs;
+    private cachedKeys;
+    private cacheExpiresAt;
+    private refreshPromise;
+    constructor(options?: FalWebhookVerifierOptions);
+    private refreshKeys;
+    private keys;
+    verify(headers: Record<string, string | string[] | undefined>, body: Uint8Array): Promise<FalWebhookVerificationResult>;
+}
+export interface FalWebhookAttempt {
+    readonly attemptId?: string;
+    readonly generationId: string;
+    /** fal account identity, when it was persisted at acceptance. */
+    readonly providerUserId?: string;
+    readonly providerRequestId?: string;
+    readonly providerAccountRef?: string;
+}
+export interface FalWebhookDelivery {
+    readonly token: string;
+    readonly attempt: FalWebhookAttempt;
+    readonly requestId: string;
+    readonly gatewayRequestId: string | null;
+    readonly userId: string;
+    readonly timestamp: string;
+    readonly status: "OK" | "ERROR";
+    readonly payload: unknown;
+    readonly payloadError: unknown;
+    readonly error: unknown;
+    readonly rawBody: Uint8Array;
+    readonly bodySha256: string;
+    readonly headersSignature?: string;
+}
+export interface FalWebhookInbox {
+    /** Find the preaccepted attempt identified by the callback token. */
+    findAttempt(token: string): Promise<FalWebhookAttempt | null>;
+    /** Commit the verified delivery before the HTTP handler acknowledges it. */
+    insertIfAbsent(delivery: FalWebhookDelivery): Promise<boolean>;
+}
+/** Durable adapter for the generation-attempt and webhook-delivery tables. */
+export declare class DrizzleFalWebhookInbox implements FalWebhookInbox {
+    findAttempt(token: string): Promise<FalWebhookAttempt | null>;
+    insertIfAbsent(delivery: FalWebhookDelivery): Promise<boolean>;
+}
+export interface FalWebhookRouteOptions {
+    /** The durable generation inbox. Omit only for hosts not yet cut over. */
+    readonly inbox?: FalWebhookInbox;
+    readonly verifier?: FalWebhookVerifier;
+    readonly maxBodyBytes?: number;
+}
+export declare function createFalWebhookRoute(options?: FalWebhookRouteOptions): FastifyPluginAsync;
+/** Default registration keeps the callback surface present during cutover. */
+export declare const falWebhookRoute: FastifyPluginAsync;
+export default falWebhookRoute;
+//# sourceMappingURL=fal-webhook.d.ts.map

package/dist/routes/fal-webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fal-webhook.d.ts","sourceRoot":"","sources":["../../src/routes/fal-webhook.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,KAAK,EAAE,kBAAkB,EAAkB,MAAM,SAAS,CAAC;AAMlE,eAAO,MAAM,gBAAgB,sCAAsC,CAAC;AACpE,eAAO,MAAM,oBAAoB,8CAA8C,CAAC;AAChF,eAAO,MAAM,oCAAoC,MAAM,CAAC;AACxD,eAAO,MAAM,6BAA6B,QAAsB,CAAC;AACjE,eAAO,MAAM,0BAA0B,QAAmB,CAAC;AAO3D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,4BAA4B,GACpC;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EACX,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,mBAAmB,GACnB,kBAAkB,CAAC;CACxB,CAAC;AAEN,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAC;IAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAgGD;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IACpE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,UAAU,CAAyC;IAC3D,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,cAAc,CAAkD;IAExE,YAAY,OAAO,GAAE,yBAA8B,EAOlD;YAEa,WAAW;YAcX,IAAI;IAOZ,MAAM,CACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,4BAA4B,CAAC,CAgEvC;CACF;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC9D,4EAA4E;IAC5E,cAAc,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChE;AAED,8EAA8E;AAC9E,qBAAa,sBAAuB,YAAW,eAAe;IACtD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAkBlE;IAEK,cAAc,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CA0BnE;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAoBD,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,sBAA2B,GACnC,kBAAkB,CAsIpB;AAED,8EAA8E;AAC9E,eAAO,MAAM,eAAe,oBAE1B,CAAC;eAEY,eAAe"}