@nxuss/lemma 1.43.0 → 1.44.0

package/dist/esm/cloud/identity/identityStore.js

@@ -1,14 +1,37 @@
+/**
+ * Lemma API v2 — identity store (Lane D)
+ *
+ * Persistence behind TenantResolver. Keys are stored as SHA-256 hashes only:
+ * `key_hash` is the sole column that ever touches key material, and every write
+ * is a parameterized insert that receives the hash, never the plaintext value.
+ *
+ * `InMemoryIdentityStore` powers unit tests and local/dev defaults.
+ * `PostgresIdentityStore` is the production implementation over `pg`.
+ */
+import crypto from 'crypto';
+export const NO_BILLING = Object.freeze({
+    customerId: null,
+    subscriptionId: null,
+    status: null,
+    currentPeriodEnd: null,
+    pastDueSince: null,
+    eventAt: null,
+});
+const isLive = (r, now) => r.active && (r.expiresAt === null || r.expiresAt > now);
 /** In-memory store. Records carry the hash only — same invariant as Postgres. */
 export class InMemoryIdentityStore {
     constructor() {
         this.records = new Map();
+        this.tenants = new Map();
     }
     async findKeyByHash(hash) {
         return this.records.get(hash) ?? null;
     }
     async createKey(input) {
         const record = {
-            id: 'key_' + Math.random().toString(16).slice(2, 14),
+            // Always 12 hex chars, like the Postgres ids. Math.random().toString(16) drops trailing zeros,
+            // so slicing it yielded an 11-char id now and then: a key that /v2/admin could not address.
+            id: 'key_' + crypto.randomBytes(6).toString('hex'),
             tenantId: input.tenantId,
             name: input.name,
             plan: input.plan,
@@ -21,6 +44,56 @@ export class InMemoryIdentityStore {
         this.records.set(input.hash, record);
         return record;
     }
+    async createTenant(input) {
+        if (this.tenants.has(input.id))
+            return null;
+        const t = { id: input.id, name: input.name, plan: input.plan, createdAt: Date.now(), billing: { ...NO_BILLING } };
+        this.tenants.set(input.id, t);
+        return { ...t };
+    }
+    async getTenant(id) {
+        const t = this.tenants.get(id);
+        return t ? { ...t } : null;
+    }
+    async setTenantPlan(id, plan) {
+        const t = this.tenants.get(id);
+        if (!t)
+            return null;
+        t.plan = plan;
+        return { ...t };
+    }
+    async findTenantByStripeCustomer(customerId) {
+        for (const t of this.tenants.values())
+            if (t.billing.customerId === customerId)
+                return { ...t, billing: { ...t.billing } };
+        return null;
+    }
+    async applyBilling(id, plan, billing) {
+        const t = this.tenants.get(id);
+        if (!t)
+            return { ok: false, reason: 'no_tenant' };
+        if (t.billing.eventAt !== null && billing.eventAt !== null && billing.eventAt < t.billing.eventAt)
+            return { ok: false, reason: 'stale' };
+        t.plan = plan;
+        t.billing = { ...billing };
+        return { ok: true, tenant: { ...t, billing: { ...t.billing } } };
+    }
+    async listKeys(tenantId) {
+        return [...this.records.values()].filter((r) => r.tenantId === tenantId).sort((a, b) => b.createdAt - a.createdAt).map((r) => ({ ...r }));
+    }
+    async createKeyWithinSeats(input, seats) {
+        // Synchronous between the check and the insert, so it is atomic on a single event loop.
+        const tenant = this.tenants.get(input.tenantId);
+        if (!tenant)
+            return { ok: false, reason: 'no_tenant', seats, used: 0 };
+        const now = Date.now();
+        const live = [...this.records.values()].filter((r) => r.tenantId === input.tenantId && isLive(r, now));
+        if (live.some((r) => r.name === input.name))
+            return { ok: false, reason: 'duplicate_name', seats, used: live.length };
+        if (live.length >= seats)
+            return { ok: false, reason: 'seats_full', seats, used: live.length };
+        return { ok: true, key: await this.createKey({ ...input, plan: tenant.plan }) };
+    }
     async revokeKey(keyId) {
         let found = false;
         for (const record of this.records.values()) {
@@ -84,6 +157,82 @@ export class PostgresIdentityStore {
             revokedAt: null,
         };
     }
+    async createTenant(input) {
+        const { rows } = await this.pool.query(`INSERT INTO tenants (id, name, plan) VALUES ($1, $2, $3)
+       ON CONFLICT (id) DO NOTHING
+       RETURNING id, name, plan, created_at, stripe_customer_id, stripe_subscription_id, subscription_status, current_period_end, past_due_since, billing_event_at`, [input.id, input.name, input.plan]);
+        return rows.length ? toTenant(rows[0]) : null;
+    }
+    async getTenant(id) {
+        const { rows } = await this.pool.query(`SELECT id, name, plan, created_at, stripe_customer_id, stripe_subscription_id, subscription_status,
+              current_period_end, past_due_since, billing_event_at
+         FROM tenants WHERE id = $1`, [id]);
+        return rows.length ? toTenant(rows[0]) : null;
+    }
+    async setTenantPlan(id, plan) {
+        const { rows } = await this.pool.query(`UPDATE tenants SET plan = $2, updated_at = now() WHERE id = $1 RETURNING id, name, plan, created_at, stripe_customer_id, stripe_subscription_id, subscription_status, current_period_end, past_due_since, billing_event_at`, [id, plan]);
+        return rows.length ? toTenant(rows[0]) : null;
+    }
+    async findTenantByStripeCustomer(customerId) {
+        const { rows } = await this.pool.query(`SELECT id, name, plan, created_at, stripe_customer_id, stripe_subscription_id, subscription_status,
+              current_period_end, past_due_since, billing_event_at
+         FROM tenants WHERE stripe_customer_id = $1`, [customerId]);
+        return rows.length ? toTenant(rows[0]) : null;
+    }
+    async applyBilling(id, plan, b) {
+        const at = (ms) => (ms === null ? null : new Date(ms));
+        const { rows } = await this.pool.query(`UPDATE tenants
+          SET plan = $2, stripe_customer_id = $3, stripe_subscription_id = $4, subscription_status = $5,
+              current_period_end = $6, past_due_since = $7, billing_event_at = $8, updated_at = now()
+        WHERE id = $1 AND (billing_event_at IS NULL OR $8::timestamptz IS NULL OR billing_event_at <= $8::timestamptz)
+        RETURNING id, name, plan, created_at, stripe_customer_id, stripe_subscription_id, subscription_status, current_period_end, past_due_since, billing_event_at`, [id, plan, b.customerId, b.subscriptionId, b.status, at(b.currentPeriodEnd), at(b.pastDueSince), at(b.eventAt)]);
+        if (rows.length)
+            return { ok: true, tenant: toTenant(rows[0]) };
+        // No row updated: either the tenant does not exist or a newer event already won.
+        return { ok: false, reason: (await this.getTenant(id)) ? 'stale' : 'no_tenant' };
+    }
+    async listKeys(tenantId) {
+        const { rows } = await this.pool.query(`SELECT k.id, k.tenant_id, t.plan, k.name, k.prefix, k.active, k.created_at, k.expires_at, k.revoked_at
+         FROM api_keys k JOIN tenants t ON t.id = k.tenant_id
+        WHERE k.tenant_id = $1 ORDER BY k.created_at DESC, k.id`, [tenantId]);
+        return rows.map(toKey);
+    }
+    async createKeyWithinSeats(input, seats) {
+        const client = await this.pool.connect();
+        try {
+            await client.query('BEGIN');
+            // The tenant row is the lock: concurrent issuers for one tenant queue here, so the
+            // count below cannot go stale before the insert.
+            const t = await client.query('SELECT plan FROM tenants WHERE id = $1 FOR UPDATE', [input.tenantId]);
+            if (!t.rows.length) {
+                await client.query('ROLLBACK');
+                return { ok: false, reason: 'no_tenant', seats, used: 0 };
+            }
+            const live = await client.query(`SELECT name FROM api_keys
+          WHERE tenant_id = $1 AND active = TRUE AND (expires_at IS NULL OR expires_at > now())`, [input.tenantId]);
+            if (live.rows.some((r) => r.name === input.name)) {
+                await client.query('ROLLBACK');
+                return { ok: false, reason: 'duplicate_name', seats, used: live.rows.length };
+            }
+            if (live.rows.length >= seats) {
+                await client.query('ROLLBACK');
+                return { ok: false, reason: 'seats_full', seats, used: live.rows.length };
+            }
+            const plan = t.rows[0].plan;
+            const ins = await client.query(`INSERT INTO api_keys (id, tenant_id, name, key_hash, prefix, plan, active)
+         VALUES ($1, $2, $3, $4, $5, $6, TRUE)
+         RETURNING id, tenant_id, name, prefix, active, created_at, expires_at, revoked_at`, ['key_' + input.hash.slice(0, 12), input.tenantId, input.name, input.hash, input.prefix, plan]);
+            await client.query('COMMIT');
+            return { ok: true, key: toKey({ ...ins.rows[0], plan }) };
+        }
+        catch (err) {
+            await client.query('ROLLBACK').catch(() => undefined);
+            throw err;
+        }
+        finally {
+            client.release();
+        }
+    }
     async revokeKey(keyId) {
         const { rowCount } = await this.pool.query(`UPDATE api_keys
           SET active = FALSE, revoked_at = CURRENT_TIMESTAMP
@@ -91,4 +240,34 @@ export class PostgresIdentityStore {
         return (rowCount ?? 0) > 0;
     }
 }
+function toTenant(r) {
+    const ms = (v) => (v ? new Date(v).getTime() : null);
+    return {
+        id: r.id,
+        name: r.name ?? '',
+        plan: r.plan,
+        createdAt: new Date(r.created_at).getTime(),
+        billing: {
+            customerId: r.stripe_customer_id ?? null,
+            subscriptionId: r.stripe_subscription_id ?? null,
+            status: r.subscription_status ?? null,
+            currentPeriodEnd: ms(r.current_period_end),
+            pastDueSince: ms(r.past_due_since),
+            eventAt: ms(r.billing_event_at),
+        },
+    };
+}
+function toKey(r) {
+    return {
+        id: r.id,
+        tenantId: r.tenant_id,
+        plan: r.plan,
+        name: r.name ?? '',
+        prefix: r.prefix,
+        active: r.active,
+        createdAt: new Date(r.created_at).getTime(),
+        expiresAt: r.expires_at ? new Date(r.expires_at).getTime() : null,
+        revokedAt: r.revoked_at ? new Date(r.revoked_at).getTime() : null,
+    };
+}
 //# sourceMappingURL=identityStore.js.map

package/dist/esm/cloud/identity/identityStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"identityStore.js","sourceRoot":"","sources":["../../../../src/cloud/identity/identityStore.ts"],"names":[],"mappings":"AA4CA,iFAAiF;AACjF,MAAM,OAAO,qBAAqB;IAAlC;QACW,YAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAiClD,CAAC;IA/BC,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAkB;QAChC,MAAM,MAAM,GAAc;YACxB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBACxB,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;gBACtB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC9B,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,OAAO,qBAAqB;IAChC,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;;;8BAIwB,EACxB,CAAC,IAAI,CAAC,CACP,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,SAAS;YACrB,IAAI,EAAE,CAAC,CAAC,IAAc;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;YAClB,MAAM,EAAE,CAAC,CAAC,MAAmB;YAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;YAC3C,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;YACjE,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;SAClE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAkB;QAChC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;8EAEwE,EACxE;YACE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAChC,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,IAAI;YACV,IAAI;SACL,CACF,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,CAAC,CAAC,MAAmB;YAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;YAC3C,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;YACjE,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACxC;;wCAEkC,EAClC,CAAC,KAAK,CAAC,CACR,CAAC;QACF,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;CACF"}
+{"version":3,"file":"identityStore.js","sourceRoot":"","sources":["../../../../src/cloud/identity/identityStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAwC5B,MAAM,CAAC,MAAM,UAAU,GAA4B,MAAM,CAAC,MAAM,CAAC;IAC/D,UAAU,EAAE,IAAI;IAChB,cAAc,EAAE,IAAI;IACpB,MAAM,EAAE,IAAI;IACZ,gBAAgB,EAAE,IAAI;IACtB,YAAY,EAAE,IAAI;IAClB,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AA+CH,MAAM,MAAM,GAAG,CAAC,CAAY,EAAE,GAAW,EAAW,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;AAE/G,iFAAiF;AACjF,MAAM,OAAO,qBAAqB;IAAlC;QACW,YAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;QAwBvC,YAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IA6DrD,CAAC;IAnFC,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAkB;QAChC,MAAM,MAAM,GAAc;YACxB,+FAA+F;YAC/F,4FAA4F;YAC5F,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAClD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IAID,KAAK,CAAC,YAAY,CAAC,KAAiD;QAClE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,CAAC,GAAiB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,CAAC;QAChI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9B,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,IAAY;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;QACd,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,UAAkB;QACjD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,KAAK,UAAU;gBAAE,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3H,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,IAAY,EAAE,OAAsB;QACjE,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAClD,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACzI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;QACd,CAAC,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5I,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,KAAkB,EAAE,KAAa;QAC1D,wFAAwF;QACxF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACtH,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBACxB,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;gBACtB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC9B,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,OAAO,qBAAqB;IAChC,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;;;8BAIwB,EACxB,CAAC,IAAI,CAAC,CACP,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,SAAS;YACrB,IAAI,EAAE,CAAC,CAAC,IAAc;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;YAClB,MAAM,EAAE,CAAC,CAAC,MAAmB;YAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;YAC3C,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;YACjE,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;SAClE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAkB;QAChC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;8EAEwE,EACxE;YACE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAChC,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,IAAI;YACV,IAAI;SACL,CACF,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,CAAC,CAAC,MAAmB;YAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;YAC3C,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;YACjE,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAiD;QAClE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;mKAE6J,EAC7J,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CACnC,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;oCAE8B,EAC9B,CAAC,EAAE,CAAC,CACL,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,IAAY;QAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC,4NAA4N,EAC5N,CAAC,EAAE,EAAE,IAAI,CAAC,CACX,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,UAAkB;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;oDAE8C,EAC9C,CAAC,UAAU,CAAC,CACb,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,IAAY,EAAE,CAAgB;QAC3D,MAAM,EAAE,GAAG,CAAC,EAAiB,EAAe,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;;;oKAI8J,EAC9J,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAChH,CAAC;QACF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,iFAAiF;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;gEAE0D,EAC1D,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,KAAkB,EAAE,KAAa;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,mFAAmF;YACnF,iDAAiD;YACjD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,mDAAmD,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5D,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAC7B;gGACwF,EACxF,CAAC,KAAK,CAAC,QAAQ,CAAC,CACjB,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChF,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC9B,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5E,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAc,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;2FAEmF,EACnF,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAC/F,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACxC;;wCAEkC,EAClC,CAAC,KAAK,CAAC,CACR,CAAC;QACF,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,CAAsB;IACtC,MAAM,EAAE,GAAG,CAAC,CAAmC,EAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtG,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,IAAI,EAAE,CAAC,CAAC,IAAc;QACtB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;QAC3C,OAAO,EAAE;YACP,UAAU,EAAE,CAAC,CAAC,kBAAkB,IAAI,IAAI;YACxC,cAAc,EAAE,CAAC,CAAC,sBAAsB,IAAI,IAAI;YAChD,MAAM,EAAE,CAAC,CAAC,mBAAmB,IAAI,IAAI;YACrC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC1C,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;YAClC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;SAChC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,CAAsB;IACnC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,IAAI,EAAE,CAAC,CAAC,IAAc;QACtB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,MAAmB;QAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;QAC3C,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;QACjE,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;KAClE,CAAC;AACJ,CAAC"}

package/dist/esm/cloud/metering/PostgresLedgerStore.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Lemma API v2 — durable usage ledger on Postgres (migration 003_usage.sql).
+ *
+ * Append-only by construction: the only write is INSERT. Reads are aggregated in SQL so
+ * /v2/usage costs one grouped query however many events a tenant has accumulated.
+ */
+import type { Pool } from 'pg';
+import type { AggregateRow, AppendOnlyStore, LedgerEvent, UsageQuery } from './UsageLedger.js';
+export declare class PostgresLedgerStore implements AppendOnlyStore {
+    private readonly pool;
+    constructor(pool: Pool);
+    append(row: LedgerEvent): Promise<void>;
+    rows(): Promise<LedgerEvent[]>;
+    aggregate(query: UsageQuery): Promise<AggregateRow[]>;
+}
+//# sourceMappingURL=PostgresLedgerStore.d.ts.map

package/dist/esm/cloud/metering/PostgresLedgerStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresLedgerStore.d.ts","sourceRoot":"","sources":["../../../../src/cloud/metering/PostgresLedgerStore.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE5F,qBAAa,mBAAoB,YAAW,eAAe;IAC7C,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,IAAI;IAEjC,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvC,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAK9B,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;CAoB5D"}

package/dist/esm/cloud/metering/PostgresLedgerStore.js

@@ -0,0 +1,40 @@
+export class PostgresLedgerStore {
+    constructor(pool) {
+        this.pool = pool;
+    }
+    async append(row) {
+        await this.pool.query('INSERT INTO usage_events (id, tenant_id, key_id, kind, tokens, at) VALUES ($1, $2, $3, $4, $5, $6)', [row.id, row.tenantId, row.keyId ?? null, row.kind, row.tokens, row.at]);
+    }
+    async rows() {
+        const { rows } = await this.pool.query('SELECT id, tenant_id, key_id, kind, tokens, at FROM usage_events ORDER BY at, id');
+        return rows.map(toEvent);
+    }
+    async aggregate(query) {
+        const { rows } = await this.pool.query(`SELECT kind, key_id,
+              count(*)::int                                   AS events,
+              COALESCE(sum(tokens), 0)::bigint                AS tokens,
+              count(*) FILTER (WHERE tokens IS NULL)::int     AS excluded
+         FROM usage_events
+        WHERE ($1::text IS NULL OR tenant_id = $1)
+          AND ($2::bigint IS NULL OR at >= $2)
+        GROUP BY kind, key_id`, [query.tenantId ?? null, query.since ?? null]);
+        return rows.map((r) => ({
+            kind: r.kind,
+            keyId: r.key_id ?? null,
+            events: Number(r.events),
+            tokens: Number(r.tokens),
+            excluded: Number(r.excluded),
+        }));
+    }
+}
+function toEvent(r) {
+    return {
+        id: r.id,
+        tenantId: r.tenant_id,
+        keyId: r.key_id ?? null,
+        kind: r.kind,
+        tokens: r.tokens === null ? null : Number(r.tokens),
+        at: Number(r.at),
+    };
+}
+//# sourceMappingURL=PostgresLedgerStore.js.map

package/dist/esm/cloud/metering/PostgresLedgerStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresLedgerStore.js","sourceRoot":"","sources":["../../../../src/cloud/metering/PostgresLedgerStore.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,mBAAmB;IAC9B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C,KAAK,CAAC,MAAM,CAAC,GAAgB;QAC3B,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,oGAAoG,EACpG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CACxE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAC;QAC3H,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAiB;QAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;;;;;;8BAOwB,EACxB,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAC9C,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,IAAI,EAAE,CAAC,CAAC,IAAc;YACtB,KAAK,EAAG,CAAC,CAAC,MAAwB,IAAI,IAAI;YAC1C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACxB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AAED,SAAS,OAAO,CAAC,CAAsB;IACrC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;QACvB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACnD,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;KACjB,CAAC;AACJ,CAAC"}

package/dist/esm/cloud/metering/UsageLedger.d.ts

@@ -4,18 +4,40 @@ import type { UsageResponse } from '../../contracts/api-v2.types.js';
 export interface AppendOnlyStore {
     append(row: LedgerEvent): Promise<void> | void;
     rows(): LedgerEvent[] | Promise<LedgerEvent[]>;
+    /**
+     * Optional pushdown of the usage math. A durable store that holds millions of rows
+     * should answer from the database instead of shipping every row to the process.
+     * Must produce exactly what `aggregateRows(await rows(), query)` would.
+     */
+    aggregate?(query: UsageQuery): Promise<AggregateRow[]>;
+}
+/** One group of ledger rows: same kind, same key. */
+export interface AggregateRow {
+    kind: string;
+    keyId: string | null;
+    /** Rows in the group, measured or not. */
+    events: number;
+    /** Sum of the measured (non-null) token counts. */
+    tokens: number;
+    /** Rows whose count could not be measured. */
+    excluded: number;
 }
+/** Reference implementation of the grouping; the in-memory store and the tests use it. */
+export declare function aggregateRows(rows: LedgerEvent[], query?: UsageQuery): AggregateRow[];
 /** In-memory append-only store (the default backing). Only ever grows. */
 export declare class InMemoryLedgerStore implements AppendOnlyStore {
     private readonly ledger;
     append(row: LedgerEvent): void;
     rows(): LedgerEvent[];
+    aggregate(query: UsageQuery): Promise<AggregateRow[]>;
     /** Test seam: reset the ledger. Never used by production paths. */
     clear(): void;
 }
 export interface LedgerEvent {
     id: string;
     tenantId: string;
+    /** The API key (the dev) that made the call, when the event comes from an API request. */
+    keyId?: string | null;
     kind: string;
     /** Measured token count, or `null` when no reliable count could be produced. */
     tokens: number | null;
@@ -24,6 +46,7 @@ export interface LedgerEvent {
 }
 export interface AppendEvent {
     tenantId: string;
+    keyId?: string | null;
     kind: string;
     /** Measured tokens, or `null` when the count was unreliable. */
     tokens: number | null;
@@ -63,6 +86,20 @@ export declare class UsageLedger {
      * `excludedEvents`.
      */
     computeUsage(query?: UsageQuery): Promise<UsageResponse>;
+    /**
+     * Per-key breakdown of API activity (who made how many calls and moved how many tokens).
+     * Operator-facing: it is what billing per seat and a usage dashboard are built on.
+     */
+    computeKeyActivity(query?: UsageQuery): Promise<KeyActivity[]>;
+    private groups;
+}
+/** Ledger kinds that start with this are API requests the server itself observed. */
+export declare const API_KIND_PREFIX = "api.";
+export interface KeyActivity {
+    keyId: string;
+    requests: number;
+    tokens: number;
+    byOperation: Record<string, number>;
 }
 export default UsageLedger;
 //# sourceMappingURL=UsageLedger.d.ts.map

package/dist/esm/cloud/metering/UsageLedger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UsageLedger.d.ts","sourceRoot":"","sources":["../../../../src/cloud/metering/UsageLedger.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE;mEACmE;AACnE,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/C,IAAI,IAAI,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;CAChD;AAED,0EAA0E;AAC1E,qBAAa,mBAAoB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAE5C,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAI9B,IAAI,IAAI,WAAW,EAAE;IAIrB,mEAAmE;IACnE,KAAK,IAAI,IAAI;CAGd;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gCAAgC;IAChC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,UAAU;IACzB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAID,qBAAa,WAAW;IACtB,QAAQ,CAAC,IAAI,OAAO;IAEpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;gBAEzB,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,kBAAkB;IAS3D;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAYtD;;;;;;;;OAQG;IACG,YAAY,CAAC,KAAK,GAAE,UAAe,GAAG,OAAO,CAAC,aAAa,CAAC;CAkCnE;AAED,eAAe,WAAW,CAAC"}
+{"version":3,"file":"UsageLedger.d.ts","sourceRoot":"","sources":["../../../../src/cloud/metering/UsageLedger.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE;mEACmE;AACnE,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/C,IAAI,IAAI,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C;;;;OAIG;IACH,SAAS,CAAC,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;CACxD;AAED,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,KAAK,GAAE,UAAe,GAAG,YAAY,EAAE,CAiBzF;AAED,0EAA0E;AAC1E,qBAAa,mBAAoB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAE5C,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAI9B,IAAI,IAAI,WAAW,EAAE;IAIf,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAI3D,mEAAmE;IACnE,KAAK,IAAI,IAAI;CAGd;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gCAAgC;IAChC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,UAAU;IACzB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAID,qBAAa,WAAW;IACtB,QAAQ,CAAC,IAAI,OAAO;IAEpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;gBAEzB,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,kBAAkB;IAS3D;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAatD;;;;;;;;OAQG;IACG,YAAY,CAAC,KAAK,GAAE,UAAe,GAAG,OAAO,CAAC,aAAa,CAAC;IA+ClE;;;OAGG;IACG,kBAAkB,CAAC,KAAK,GAAE,UAAe,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAe1D,MAAM;CAGrB;AAED,qFAAqF;AACrF,eAAO,MAAM,eAAe,SAAS,CAAC;AAEtC,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,eAAe,WAAW,CAAC"}

package/dist/esm/cloud/metering/UsageLedger.js

@@ -13,6 +13,29 @@
  * Ownership: Lane E.
  */
 import crypto from 'crypto';
+/** Reference implementation of the grouping; the in-memory store and the tests use it. */
+export function aggregateRows(rows, query = {}) {
+    const groups = new Map();
+    for (const row of rows) {
+        if (query.tenantId !== undefined && row.tenantId !== query.tenantId)
+            continue;
+        if (query.since !== undefined && row.at < query.since)
+            continue;
+        const keyId = row.keyId ?? null;
+        const gk = `${row.kind}\u0000${keyId ?? ''}`;
+        let g = groups.get(gk);
+        if (!g) {
+            g = { kind: row.kind, keyId, events: 0, tokens: 0, excluded: 0 };
+            groups.set(gk, g);
+        }
+        g.events += 1;
+        if (row.tokens === null)
+            g.excluded += 1;
+        else
+            g.tokens += row.tokens;
+    }
+    return [...groups.values()];
+}
 /** In-memory append-only store (the default backing). Only ever grows. */
 export class InMemoryLedgerStore {
     constructor() {
@@ -24,6 +47,9 @@ export class InMemoryLedgerStore {
     rows() {
         return this.ledger;
     }
+    async aggregate(query) {
+        return aggregateRows(this.ledger, query);
+    }
     /** Test seam: reset the ledger. Never used by production paths. */
     clear() {
         this.ledger.length = 0;
@@ -48,6 +74,7 @@ export class UsageLedger {
         const row = {
             id: event.id ?? this.getId(),
             tenantId: event.tenantId,
+            keyId: event.keyId ?? null,
             kind: event.kind,
             tokens: typeof event.tokens === 'number' ? event.tokens : null,
             at: event.at ?? this.now(),
@@ -65,34 +92,69 @@ export class UsageLedger {
      * `excludedEvents`.
      */
     async computeUsage(query = {}) {
-        const rows = await this.backend.rows();
-        const byKind = new Map();
-        let totalTokens = 0;
+        const groups = await this.groups(query);
+        // `api.*` rows are what the SERVER observed (requests made, content moved); anything else is a
+        // savings event a client reported. They are summed separately: the server can count a request
+        // but cannot know what it saved, so request activity must never feed `tokensSaved`.
+        const savedByKind = new Map();
+        const activity = new Map();
+        let totalSaved = 0;
         let excludedEvents = 0;
-        for (const row of rows) {
-            if (query.tenantId !== undefined && row.tenantId !== query.tenantId)
-                continue;
-            if (query.since !== undefined && row.at < query.since)
-                continue;
-            if (row.tokens === null) {
-                excludedEvents += 1;
-                continue;
+        for (const g of groups) {
+            excludedEvents += g.excluded;
+            if (g.kind.startsWith(API_KIND_PREFIX)) {
+                const op = g.kind.slice(API_KIND_PREFIX.length);
+                const a = activity.get(op) ?? { events: 0, tokens: 0 };
+                a.events += g.events;
+                a.tokens += g.tokens;
+                activity.set(op, a);
+            }
+            else {
+                totalSaved += g.tokens;
+                savedByKind.set(g.kind, (savedByKind.get(g.kind) ?? 0) + g.tokens);
             }
-            totalTokens += row.tokens;
-            byKind.set(row.kind, (byKind.get(row.kind) ?? 0) + row.tokens);
         }
         const metrics = {};
-        // Total measured tokens across all billable events in scope.
-        metrics.tokensSaved = { measurement: 'counted', value: totalTokens };
+        // Total measured tokens across all billable savings events in scope.
+        metrics.tokensSaved = { measurement: 'counted', value: totalSaved };
         // Per-kind measured token totals — each equally reproducible by summing rows.
-        for (const [kind, value] of byKind) {
+        for (const [kind, value] of savedByKind) {
             metrics[`tokensSaved.${kind}`] = { measurement: 'counted', value };
         }
+        // What the API served: how many calls of each kind and how many tokens of memory content moved.
+        for (const [op, a] of [...activity].sort(([x], [y]) => x.localeCompare(y))) {
+            metrics[`requests.${op}`] = { measurement: 'counted', value: a.events };
+            metrics[`tokens.${op}`] = { measurement: 'counted', value: a.tokens };
+        }
         return {
             metrics,
             excludedEvents,
         };
     }
+    /**
+     * Per-key breakdown of API activity (who made how many calls and moved how many tokens).
+     * Operator-facing: it is what billing per seat and a usage dashboard are built on.
+     */
+    async computeKeyActivity(query = {}) {
+        const byKey = new Map();
+        for (const g of await this.groups(query)) {
+            if (!g.kind.startsWith(API_KIND_PREFIX))
+                continue;
+            const id = g.keyId ?? 'unknown';
+            const entry = byKey.get(id) ?? { keyId: id, requests: 0, tokens: 0, byOperation: {} };
+            const op = g.kind.slice(API_KIND_PREFIX.length);
+            entry.requests += g.events;
+            entry.tokens += g.tokens;
+            entry.byOperation[op] = (entry.byOperation[op] ?? 0) + g.events;
+            byKey.set(id, entry);
+        }
+        return [...byKey.values()].sort((a, b) => b.requests - a.requests || a.keyId.localeCompare(b.keyId));
+    }
+    async groups(query) {
+        return this.backend.aggregate ? this.backend.aggregate(query) : aggregateRows(await this.backend.rows(), query);
+    }
 }
+/** Ledger kinds that start with this are API requests the server itself observed. */
+export const API_KIND_PREFIX = 'api.';
 export default UsageLedger;
 //# sourceMappingURL=UsageLedger.js.map

package/dist/esm/cloud/metering/UsageLedger.js.map

@@ -1 +1 @@
-{"version":3,"file":"UsageLedger.js","sourceRoot":"","sources":["../../../../src/cloud/metering/UsageLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAU5B,0EAA0E;AAC1E,MAAM,OAAO,mBAAmB;IAAhC;QACmB,WAAM,GAAkB,EAAE,CAAC;IAc9C,CAAC;IAZC,MAAM,CAAC,GAAgB;QACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,mEAAmE;IACnE,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;CACF;AAmCD,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,OAAO,WAAW;IAOtB,YAAY,OAAiB,EAAE,OAA4B;QANlD,SAAI,GAAG,GAAG,CAAC;QAOlB,MAAM,IAAI,GAAuB,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,IAAK,OAA2B;YAC/G,CAAC,CAAE,OAA8B;YACjC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACzD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,GAAG,GAAgB;YACvB,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAC9D,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAAC,QAAoB,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;gBAAE,SAAS;YAC9E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK;gBAAE,SAAS;YAEhE,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACxB,cAAc,IAAI,CAAC,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,WAAW,IAAI,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,OAAO,GAA6B,EAAE,CAAC;QAE7C,6DAA6D;QAC7D,OAAO,CAAC,WAAW,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAErE,8EAA8E;QAC9E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACnC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACrE,CAAC;QAED,OAAO;YACL,OAAO;YACP,cAAc;SACf,CAAC;IACJ,CAAC;CACF;AAED,eAAe,WAAW,CAAC"}
+{"version":3,"file":"UsageLedger.js","sourceRoot":"","sources":["../../../../src/cloud/metering/UsageLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,MAAM,MAAM,QAAQ,CAAC;AA4B5B,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,IAAmB,EAAE,QAAoB,EAAE;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAAE,SAAS;QAC9E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK;YAAE,SAAS;QAChE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC;QAChC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,IAAI,SAAS,KAAK,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACd,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;YAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;;YACpC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;IAC9B,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,0EAA0E;AAC1E,MAAM,OAAO,mBAAmB;IAAhC;QACmB,WAAM,GAAkB,EAAE,CAAC;IAkB9C,CAAC;IAhBC,MAAM,CAAC,GAAgB;QACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAiB;QAC/B,OAAO,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,mEAAmE;IACnE,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;CACF;AAsCD,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,OAAO,WAAW;IAOtB,YAAY,OAAiB,EAAE,OAA4B;QANlD,SAAI,GAAG,GAAG,CAAC;QAOlB,MAAM,IAAI,GAAuB,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,IAAK,OAA2B;YAC/G,CAAC,CAAE,OAA8B;YACjC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACzD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,GAAG,GAAgB;YACvB,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAC9D,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAAC,QAAoB,EAAE;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAExC,+FAA+F;QAC/F,8FAA8F;QAC9F,oFAAoF;QACpF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8C,CAAC;QACvE,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,cAAc,IAAI,CAAC,CAAC,QAAQ,CAAC;YAC7B,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBACvC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBAChD,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gBACvD,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;gBACrB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;gBACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC;gBACvB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAA6B,EAAE,CAAC;QAE7C,qEAAqE;QACrE,OAAO,CAAC,WAAW,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAEpE,8EAA8E;QAC9E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;YACxC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACrE,CAAC;QAED,gGAAgG;QAChG,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACxE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QACxE,CAAC;QAED,OAAO;YACL,OAAO;YACP,cAAc;SACf,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CAAC,QAAoB,EAAE;QAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;gBAAE,SAAS;YAClD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;YACtF,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAChD,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC;YAC3B,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;YACzB,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;YAChE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACvG,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,KAAiB;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAClH,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAStC,eAAe,WAAW,CAAC"}

package/dist/esm/cloud/metering/index.d.ts

@@ -9,4 +9,5 @@
  */
 export * from './UsageLedger.js';
 export * from './TokenCounter.js';
+export * from './PostgresLedgerStore.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/cloud/metering/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cloud/metering/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cloud/metering/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}

package/dist/esm/cloud/metering/index.js

@@ -9,4 +9,5 @@
  */
 export * from './UsageLedger.js';
 export * from './TokenCounter.js';
+export * from './PostgresLedgerStore.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/cloud/metering/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cloud/metering/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cloud/metering/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}

package/dist/esm/cloud/store/FileBrainStore.d.ts

@@ -20,6 +20,7 @@ export declare class FileBrainStore implements BrainStore {
     get(tenantId: string, id: string): Promise<unknown | null>;
     searchCandidates(tenantId: string, query: string, limit: number): Promise<Candidate[]>;
     listByIds(tenantId: string, ids: string[]): Promise<Map<string, unknown>>;
+    count(tenantId: string): Promise<number>;
     delete(tenantId: string, id: string): Promise<boolean>;
 }
 export default FileBrainStore;

package/dist/esm/cloud/store/FileBrainStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileBrainStore.d.ts","sourceRoot":"","sources":["../../../../src/cloud/store/FileBrainStore.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,UAAU,EAAC,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAW7D,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA4CD,qBAAa,cAAe,YAAW,UAAU;IAMnC,OAAO,CAAC,OAAO;IAL3B,QAAQ,CAAC,IAAI,OAAO;IAEpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,KAAK,CAAoG;gBAE7F,OAAO,GAAE,qBAA0B;IAKvD,OAAO,CAAC,IAAI;IAoBZ;;;mFAG+E;IAC/E,OAAO,CAAC,IAAI;IAcZ,OAAO,CAAC,QAAQ;IAIV,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAwCvD,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAS1D,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAmDtF,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAczE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAU7D;AAED,eAAe,cAAc,CAAC"}
+{"version":3,"file":"FileBrainStore.d.ts","sourceRoot":"","sources":["../../../../src/cloud/store/FileBrainStore.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,UAAU,EAAC,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAW7D,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA4CD,qBAAa,cAAe,YAAW,UAAU;IAMnC,OAAO,CAAC,OAAO;IAL3B,QAAQ,CAAC,IAAI,OAAO;IAEpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,KAAK,CAAoG;gBAE7F,OAAO,GAAE,qBAA0B;IAKvD,OAAO,CAAC,IAAI;IAoBZ;;;mFAG+E;IAC/E,OAAO,CAAC,IAAI;IAcZ,OAAO,CAAC,QAAQ;IAIV,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAwCvD,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAS1D,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAmDtF,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAczE,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIxC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAU7D;AAED,eAAe,cAAc,CAAC"}

package/dist/esm/cloud/store/FileBrainStore.js

@@ -201,6 +201,9 @@ export class FileBrainStore {
         }
         return out;
     }
+    async count(tenantId) {
+        return this.load().filter((r) => !('__raw__' in r) && this.inTenant(r, tenantId)).length;
+    }
     async delete(tenantId, id) {
         const records = this.load();
         const before = records.length;