@srouterhq/server 0.0.0-stage → 0.9.0

package/dist/routes/media.js

@@ -0,0 +1,180 @@
+import { Router } from 'express';
+import { z } from 'zod';
+import { getDb } from '../db/index.js';
+import { maskKey } from '../lib/crypto.js';
+import { deleteUnusedCustomEndpointKey } from '../lib/custom-provider-cleanup.js';
+import { resolveCustomEndpointKey } from '../services/custom-endpoint.js';
+import { registerCustomMediaModel } from '../services/custom-media-register.js';
+import { listAllMediaModels } from '../services/media.js';
+export const mediaRouter = Router();
+// Generative-media models for the dashboard Image/Video/Audio tabs.
+// Mirrors the embeddings tab: a flat list with an enable toggle per row. keyCount
+// surfaces whether the row's platform has a usable key configured.
+mediaRouter.get('/', (_req, res) => {
+    const db = getDb();
+    const keyCounts = new Map(db.prepare("SELECT platform, COUNT(*) AS n FROM api_keys WHERE enabled = 1 AND status IN ('healthy', 'unknown') GROUP BY platform").all().map(r => [r.platform, r.n]));
+    const customKeyIds = new Set(db.prepare("SELECT id FROM api_keys WHERE platform = 'custom' AND enabled = 1 AND status IN ('healthy', 'unknown')").all().map(r => r.id));
+    res.json({
+        models: listAllMediaModels().map(r => ({
+            id: r.id,
+            platform: r.platform,
+            modelId: r.model_id,
+            displayName: r.display_name,
+            modality: r.modality,
+            enabled: r.enabled === 1,
+            quotaLabel: r.quota_label,
+            keyCount: r.platform === 'custom' && r.key_id != null
+                ? (customKeyIds.has(r.key_id) ? 1 : 0)
+                : keyCounts.get(r.platform) ?? 0,
+            isCustom: r.platform === 'custom',
+        })),
+    });
+});
+// Per-model usage for one modality: requests today and this calendar month,
+// from the tagged request log. Image and audio calls are billed per image or
+// per character, not per token, so `requests` is the honest unit here and no
+// token counts are reported. As with embeddings there is no budget
+// denominator — `media_models` only carries a free-text `quota_label`
+// ("Shared 10k neurons/day", "MP3 output - multilingual", which is not even a
+// quota) — so the summary shows spend and the label verbatim. Transcription
+// rows are logged the same way (request_type='transcription', see
+// logMedia), so the Audio tab's STT section can show the same per-model
+// counts instead of dead-ending on a 400.
+mediaRouter.get('/usage', (req, res) => {
+    const parsed = z.enum(['image', 'video', 'audio', 'transcription']).safeParse(req.query.modality);
+    if (!parsed.success) {
+        res.status(400).json({ error: { message: 'modality must be image, video, audio or transcription' } });
+        return;
+    }
+    const modality = parsed.data;
+    const db = getDb();
+    const rows = db.prepare(`
+    SELECT mm.id, mm.platform, mm.model_id, mm.display_name, mm.quota_label,
+           COALESCE(SUM(CASE WHEN r.created_at >= datetime('now', 'start of day') THEN 1 ELSE 0 END), 0) AS requests_today,
+           COALESCE(SUM(CASE WHEN r.created_at >= datetime('now', 'start of month') THEN 1 ELSE 0 END), 0) AS requests_month
+    FROM media_models mm
+    LEFT JOIN requests r
+      ON r.request_type = ?
+     AND r.status = 'success'
+     AND r.platform = mm.platform
+     AND r.model_id = mm.model_id
+     AND r.created_at >= datetime('now', 'start of month')
+    WHERE mm.modality = ? AND mm.enabled = 1
+    GROUP BY mm.id
+    ORDER BY mm.priority ASC
+  `).all(modality, modality);
+    const models = rows.map(r => ({
+        id: r.id,
+        platform: r.platform,
+        modelId: r.model_id,
+        displayName: r.display_name,
+        quotaLabel: r.quota_label,
+        requestsToday: r.requests_today,
+        requestsMonth: r.requests_month,
+    }));
+    res.json({
+        modality,
+        models,
+        totalRequestsToday: models.reduce((s, m) => s + m.requestsToday, 0),
+        totalRequestsMonth: models.reduce((s, m) => s + m.requestsMonth, 0),
+    });
+});
+const customMediaSchema = z.object({
+    baseUrl: z.string().url('baseUrl must be a valid URL'),
+    model: z.string().min(1),
+    displayName: z.string().optional(),
+    // 'transcription' registers a custom OpenAI-compatible STT endpoint. The
+    // media_models table, GET /api/media/usage, the /v1/audio/transcriptions
+    // handler and the media service's 'custom' adapter all accept it.
+    modality: z.enum(['image', 'audio', 'transcription']),
+    apiKey: z.string().optional(),
+    label: z.string().optional(),
+    quotaLabel: z.string().optional(),
+});
+mediaRouter.post('/custom', (req, res) => {
+    const parsed = customMediaSchema.safeParse(req.body);
+    if (!parsed.success) {
+        res.status(400).json({ error: { message: parsed.error.errors.map(e => e.message).join(', ') } });
+        return;
+    }
+    const db = getDb();
+    const baseUrl = parsed.data.baseUrl.trim().replace(/\/+$/, '');
+    const modelId = parsed.data.model.trim();
+    if (!modelId) {
+        res.status(400).json({ error: { message: 'model is required' } });
+        return;
+    }
+    // Optional: NULL means "no opinion". A new model takes its id, and a model
+    // already on record keeps the name it has instead of being reset by a submit
+    // that simply left the field blank (#704).
+    const submittedName = parsed.data.displayName?.trim() || null;
+    const label = parsed.data.label?.trim() || undefined;
+    const providedKey = parsed.data.apiKey?.trim() || undefined;
+    const quotaLabel = parsed.data.quotaLabel?.trim() || 'custom endpoint';
+    const upsert = db.transaction(() => {
+        // A new secret for a known endpoint is an ADDITIONAL credential, never a
+        // replacement for the stored one (#619). The upsert itself is shared with
+        // the classified branch of POST /api/keys/custom (#1051).
+        const { keyId, storedKey: storedKeyForMask } = resolveCustomEndpointKey(db, baseUrl, providedKey, label);
+        const { modelDbId } = registerCustomMediaModel(db, keyId, {
+            modelId,
+            displayName: submittedName,
+            modality: parsed.data.modality,
+            quotaLabel,
+        });
+        return { modelDbId, keyId, storedKeyForMask };
+    });
+    const result = upsert();
+    const storedName = db.prepare('SELECT display_name FROM media_models WHERE id = ?')
+        .get(result.modelDbId).display_name;
+    res.status(201).json({
+        success: true,
+        keyId: result.keyId,
+        modelDbId: result.modelDbId,
+        platform: 'custom',
+        baseUrl,
+        model: modelId,
+        displayName: storedName,
+        modality: parsed.data.modality,
+        maskedKey: maskKey(result.storedKeyForMask),
+    });
+});
+const updateSchema = z.object({ enabled: z.boolean() });
+mediaRouter.put('/:id', (req, res) => {
+    const id = Number(req.params.id);
+    if (!Number.isInteger(id)) {
+        res.status(400).json({ error: { message: 'Invalid id' } });
+        return;
+    }
+    const parsed = updateSchema.safeParse(req.body);
+    if (!parsed.success) {
+        res.status(400).json({ error: { message: 'Invalid request body' } });
+        return;
+    }
+    const info = getDb().prepare('UPDATE media_models SET enabled = ? WHERE id = ?').run(parsed.data.enabled ? 1 : 0, id);
+    if (info.changes === 0) {
+        res.status(404).json({ error: { message: `Unknown media model ${id}` } });
+        return;
+    }
+    res.json({ success: true });
+});
+mediaRouter.delete('/custom/:id', (req, res) => {
+    const id = Number(req.params.id);
+    if (!Number.isInteger(id)) {
+        res.status(400).json({ error: { message: 'Invalid id' } });
+        return;
+    }
+    const db = getDb();
+    const row = db.prepare("SELECT key_id FROM media_models WHERE id = ? AND platform = 'custom'").get(id);
+    if (!row) {
+        res.status(404).json({ error: { message: `Unknown custom media model ${id}` } });
+        return;
+    }
+    const remove = db.transaction(() => {
+        db.prepare("DELETE FROM media_models WHERE id = ? AND platform = 'custom'").run(id);
+        deleteUnusedCustomEndpointKey(db, row.key_id);
+    });
+    remove();
+    res.json({ success: true });
+});
+//# sourceMappingURL=media.js.map

package/dist/routes/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../src/routes/media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC;AAEpC,oEAAoE;AACpE,kFAAkF;AAClF,mEAAmE;AACnE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IACpD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,IAAI,GAAG,CACtB,EAAE,CAAC,OAAO,CACT,uHAAuH,CACxH,CAAC,GAAG,EAAwC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAC1E,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CACzB,EAAE,CAAC,OAAO,CACT,wGAAwG,CACzG,CAAC,GAAG,EAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5C,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC;QACP,MAAM,EAAE,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,QAAQ;YACnB,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI;gBACnD,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ;SAClC,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,mEAAmE;AACnE,sEAAsE;AACtE,8EAA8E;AAC9E,4EAA4E;AAC5E,kEAAkE;AAClE,wEAAwE;AACxE,0CAA0C;AAC1C,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACxD,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,uDAAuD,EAAE,EAAE,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IAEnB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;GAcvB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAGtB,CAAC;IAEJ,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,OAAO,EAAE,CAAC,CAAC,QAAQ;QACnB,WAAW,EAAE,CAAC,CAAC,YAAY;QAC3B,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,aAAa,EAAE,CAAC,CAAC,cAAc;QAC/B,aAAa,EAAE,CAAC,CAAC,cAAc;KAChC,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,IAAI,CAAC;QACP,QAAQ;QACR,MAAM;QACN,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACnE,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;KACpE,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACtD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,yEAAyE;IACzE,yEAAyE;IACzE,kEAAkE;IAClE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,2CAA2C;IAC3C,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACrD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,iBAAiB,CAAC;IAEvE,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACjC,yEAAyE;QACzE,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,wBAAwB,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACzG,MAAM,EAAE,SAAS,EAAE,GAAG,wBAAwB,CAAC,EAAE,EAAE,KAAK,EAAE;YACxD,OAAO;YACP,WAAW,EAAE,aAAa;YAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;YAC9B,UAAU;SACX,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,UAAU,GAAI,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC;SACjF,GAAG,CAAC,MAAM,CAAC,SAAS,CAA8B,CAAC,YAAY,CAAC;IACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,QAAQ;QAClB,OAAO;QACP,KAAK,EAAE,OAAO;QACd,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QAC9B,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAExD,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtH,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,WAAW,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IAChE,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,CAAC,EAAE,CAA0C,CAAC;IAChJ,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACjC,EAAE,CAAC,OAAO,CAAC,+DAA+D,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,6BAA6B,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,MAAM,EAAE,CAAC;IACT,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC"}

package/dist/routes/models.d.ts

@@ -0,0 +1,2 @@
+export declare const modelsRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=models.d.ts.map

package/dist/routes/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/routes/models.ts"],"names":[],"mappings":"AA0BA,eAAO,MAAM,YAAY,4CAAW,CAAC"}

package/dist/routes/models.js

@@ -0,0 +1,439 @@
+import { Router } from 'express';
+import { z } from 'zod';
+import { getDb } from '../db/index.js';
+import { hasProvider } from '../providers/index.js';
+import { deleteUnusedCustomEndpointKey } from '../lib/custom-provider-cleanup.js';
+import { isCatalogManagedModel, overriddenFieldNames, recordCatalogModelTombstone, clearCatalogModelTombstone, upsertModelOverrides, } from '../services/model-state.js';
+import { pruneUnavailableSavedFusionConfig } from '../services/fusion.js';
+import { getActiveProfileId, ensureModelInProfiles } from '../services/profile-models.js';
+import { endpointScopeForBaseUrl, endpointScopeOfKey, qualifiedModelMemberId } from '../lib/endpoint-scope.js';
+import { clearCustomModelTombstone, recordCustomModelTombstone } from '../services/custom-model-tombstone.js';
+import { customModelSeed } from '../services/custom-model-seed.js';
+import { routePinnedModel } from '../services/router.js';
+import { logRequest } from '../lib/request-log.js';
+import { withKeyProxy } from '../lib/proxy.js';
+import { sanitizeProviderErrorMessage } from '../lib/error-redaction.js';
+import { recordRequest, recordTokens } from '../services/ratelimit.js';
+export const modelsRouter = Router();
+// Throttle map for model test endpoint: modelDbId -> lastTestTimestamp
+const modelTestCooldowns = new Map();
+const MODEL_TEST_THROTTLE_MS = 5000;
+const modelUpdateSchema = z.object({
+    displayName: z.string().min(1).max(200).optional(),
+    intelligenceRank: z.number().int().min(1).max(1000).optional(),
+    speedRank: z.number().int().min(1).max(1000).optional(),
+    // '' is a legal value: size_label is TEXT NOT NULL DEFAULT '' and the empty
+    // string is the canonical "unscored" tier (scores 0 on the intelligence
+    // axis), so the dashboard's "None" option must be able to send it.
+    sizeLabel: z.string().max(40).optional(),
+    rpmLimit: z.number().int().positive().nullable().optional(),
+    rpdLimit: z.number().int().positive().nullable().optional(),
+    tpmLimit: z.number().int().positive().nullable().optional(),
+    tpdLimit: z.number().int().positive().nullable().optional(),
+    monthlyTokenBudget: z.string().max(80).optional(),
+    contextWindow: z.number().int().positive().nullable().optional(),
+    enabled: z.boolean().optional(),
+    supportsVision: z.boolean().optional(),
+    supportsTools: z.boolean().optional(),
+    fallbackEnabled: z.boolean().optional(),
+}).strict();
+const MODEL_FIELD_COLUMNS = {
+    displayName: 'display_name',
+    intelligenceRank: 'intelligence_rank',
+    speedRank: 'speed_rank',
+    sizeLabel: 'size_label',
+    rpmLimit: 'rpm_limit',
+    rpdLimit: 'rpd_limit',
+    tpmLimit: 'tpm_limit',
+    tpdLimit: 'tpd_limit',
+    monthlyTokenBudget: 'monthly_token_budget',
+    contextWindow: 'context_window',
+    supportsVision: 'supports_vision',
+    supportsTools: 'supports_tools',
+    enabled: 'enabled',
+};
+function dbValue(key, value) {
+    if (key === 'enabled' || key === 'supportsVision' || key === 'supportsTools')
+        return value ? 1 : 0;
+    return value;
+}
+function fetchModelRow(id) {
+    return getDb()
+        .prepare('SELECT id, platform, model_id, key_id, source FROM models WHERE id = ?')
+        .get(id);
+}
+const createModelSchema = z.object({
+    platform: z.string().min(1).max(50),
+    modelId: z.string().min(1).max(200),
+    displayName: z.string().min(1).max(200).optional(),
+    contextWindow: z.number().int().positive().nullable().optional(),
+    rpmLimit: z.number().int().positive().nullable().optional(),
+    rpdLimit: z.number().int().positive().nullable().optional(),
+    tpmLimit: z.number().int().positive().nullable().optional(),
+    tpdLimit: z.number().int().positive().nullable().optional(),
+    supportsVision: z.boolean().optional(),
+    supportsTools: z.boolean().optional(),
+    keyId: z.number().int().positive().nullable().optional(),
+    endpointScope: z.string().nullable().optional(),
+}).strict();
+modelsRouter.post('/', (req, res) => {
+    const parsed = createModelSchema.safeParse(req.body);
+    if (!parsed.success) {
+        res.status(400).json({ error: { message: parsed.error.errors.map(e => e.message).join(', ') } });
+        return;
+    }
+    const data = parsed.data;
+    if (!hasProvider(data.platform) && data.platform !== 'custom') {
+        res.status(400).json({ error: { message: `Invalid platform "${data.platform}"` } });
+        return;
+    }
+    const db = getDb();
+    let endpointScope = '';
+    const boundKeyId = data.keyId ?? null;
+    if (data.platform === 'custom') {
+        endpointScope = endpointScopeOfKey(db, boundKeyId);
+        if (!endpointScope) {
+            res.status(400).json({ error: { message: 'Select an existing custom endpoint key for this model' } });
+            return;
+        }
+        if (data.endpointScope && endpointScopeForBaseUrl(data.endpointScope) !== endpointScope) {
+            res.status(400).json({ error: { message: 'The endpoint does not match the selected key' } });
+            return;
+        }
+    }
+    else if (boundKeyId != null || data.endpointScope) {
+        res.status(400).json({ error: { message: 'Endpoint keys can only be bound to custom models' } });
+        return;
+    }
+    const existing = db.prepare('SELECT id FROM models WHERE platform = ? AND model_id = ? AND endpoint_scope = ?').get(data.platform, data.modelId, endpointScope);
+    if (existing) {
+        res.status(409).json({ error: { message: `Model "${data.modelId}" already exists for platform "${data.platform}"` } });
+        return;
+    }
+    const seed = customModelSeed(db);
+    const insertModel = db.transaction(() => {
+        // Clear any tombstone so manual re-creation brings the model back into active state
+        if (data.platform === 'custom') {
+            clearCustomModelTombstone(db, endpointScope, data.modelId);
+        }
+        else {
+            clearCatalogModelTombstone(db, 'chat', data.platform, data.modelId);
+        }
+        const info = db.prepare(`
+      INSERT INTO models (
+        platform, model_id, display_name, intelligence_rank, speed_rank, size_label,
+        rpm_limit, rpd_limit, tpm_limit, tpd_limit, monthly_token_budget, context_window,
+        enabled, supports_vision, supports_tools, key_id, source, endpoint_scope
+      ) VALUES (
+        @platform, @modelId, @displayName, @intelligenceRank, @speedRank, @sizeLabel,
+        @rpmLimit, @rpdLimit, @tpmLimit, @tpdLimit, '', @contextWindow,
+        1, @supportsVision, @supportsTools, @keyId, 'user', @endpointScope
+      )
+    `).run({
+            platform: data.platform,
+            modelId: data.modelId,
+            displayName: data.displayName || data.modelId,
+            intelligenceRank: seed.intelligenceRank,
+            speedRank: seed.speedRank,
+            sizeLabel: seed.sizeLabel,
+            rpmLimit: data.rpmLimit ?? null,
+            rpdLimit: data.rpdLimit ?? null,
+            tpmLimit: data.tpmLimit ?? null,
+            tpdLimit: data.tpdLimit ?? null,
+            contextWindow: data.contextWindow ?? null,
+            supportsVision: data.supportsVision ? 1 : 0,
+            supportsTools: data.supportsTools !== undefined ? (data.supportsTools ? 1 : 0) : 1,
+            keyId: boundKeyId,
+            endpointScope,
+        });
+        const modelDbId = Number(info.lastInsertRowid);
+        const inChain = db.prepare('SELECT 1 FROM fallback_config WHERE model_db_id = ?').get(modelDbId);
+        if (!inChain) {
+            const max = db.prepare('SELECT COALESCE(MAX(priority), 0) AS m FROM fallback_config').get();
+            db.prepare('INSERT INTO fallback_config (model_db_id, priority, enabled) VALUES (?, ?, 1)').run(modelDbId, max.m + 1);
+        }
+        ensureModelInProfiles(db, modelDbId);
+        return modelDbId;
+    });
+    const createdId = insertModel();
+    res.status(201).json({
+        success: true,
+        id: createdId,
+        model: {
+            id: createdId,
+            platform: data.platform,
+            modelId: data.modelId,
+            displayName: data.displayName || data.modelId,
+            contextWindow: data.contextWindow ?? null,
+            rpmLimit: data.rpmLimit ?? null,
+            rpdLimit: data.rpdLimit ?? null,
+            tpmLimit: data.tpmLimit ?? null,
+            tpdLimit: data.tpdLimit ?? null,
+            supportsVision: Boolean(data.supportsVision),
+            supportsTools: data.supportsTools ?? true,
+            enabled: true,
+            source: 'custom',
+            endpointScope: endpointScope || null,
+            keyId: boundKeyId,
+        },
+    });
+});
+modelsRouter.delete('/custom/:id', (req, res) => {
+    const id = Number(req.params.id);
+    if (!Number.isInteger(id)) {
+        res.status(400).json({ error: { message: 'Invalid id' } });
+        return;
+    }
+    const db = getDb();
+    const row = db.prepare("SELECT id, key_id, model_id FROM models WHERE id = ? AND platform = 'custom'").get(id);
+    if (!row) {
+        res.status(404).json({ error: { message: `Unknown custom model ${id}` } });
+        return;
+    }
+    const remove = db.transaction(() => {
+        // #926: keep this deletion across the scheduled custom-model sync, or the
+        // next daily pass re-registers a model the operator removed on purpose.
+        recordCustomModelTombstone(db, endpointScopeOfKey(db, row.key_id), row.model_id);
+        db.prepare('DELETE FROM fallback_config WHERE model_db_id = ?').run(id);
+        db.prepare('DELETE FROM profile_models WHERE model_db_id = ?').run(id);
+        db.prepare("DELETE FROM models WHERE id = ? AND platform = 'custom'").run(id);
+        deleteUnusedCustomEndpointKey(db, row.key_id);
+        pruneUnavailableSavedFusionConfig();
+    });
+    remove();
+    res.json({ success: true });
+});
+modelsRouter.patch('/:id', (req, res) => {
+    const id = Number(req.params.id);
+    if (!Number.isInteger(id)) {
+        res.status(400).json({ error: { message: 'Invalid id' } });
+        return;
+    }
+    const parsed = modelUpdateSchema.safeParse(req.body);
+    if (!parsed.success) {
+        res.status(400).json({ error: { message: parsed.error.errors.map(e => e.message).join(', ') } });
+        return;
+    }
+    const db = getDb();
+    const row = fetchModelRow(id);
+    if (!row) {
+        res.status(404).json({ error: { message: `Unknown model ${id}` } });
+        return;
+    }
+    const modelPatch = { ...parsed.data };
+    delete modelPatch.fallbackEnabled;
+    const modelKeys = Object.keys(modelPatch);
+    if (modelKeys.length === 0 && parsed.data.fallbackEnabled === undefined) {
+        res.status(400).json({ error: { message: 'No model fields provided' } });
+        return;
+    }
+    const applyUpdate = db.transaction(() => {
+        const disablesModel = modelPatch.enabled === false;
+        if (modelKeys.length > 0) {
+            // The row as it stands BEFORE the update below. For a catalog model this
+            // is the catalog-applied value (stored overrides re-apply to rows only
+            // after each sync), i.e. the baseline an override that returns to the
+            // catalog default is recognised against (#1178).
+            const preUpdateRow = isCatalogManagedModel(row)
+                ? db.prepare('SELECT * FROM models WHERE id = ?').get(id)
+                : undefined;
+            const assignments = [];
+            const values = [];
+            for (const key of modelKeys) {
+                assignments.push(`${MODEL_FIELD_COLUMNS[key]} = ?`);
+                values.push(dbValue(key, modelPatch[key]));
+            }
+            values.push(id);
+            db.prepare(`UPDATE models SET ${assignments.join(', ')} WHERE id = ?`).run(...values);
+            if (isCatalogManagedModel(row)) {
+                const overridePatch = {};
+                for (const key of [
+                    'displayName', 'intelligenceRank', 'speedRank', 'sizeLabel',
+                    'rpmLimit', 'rpdLimit', 'tpmLimit', 'tpdLimit',
+                    'monthlyTokenBudget', 'contextWindow', 'supportsVision', 'supportsTools',
+                ]) {
+                    if (Object.prototype.hasOwnProperty.call(modelPatch, key)) {
+                        overridePatch[key] = modelPatch[key];
+                    }
+                }
+                upsertModelOverrides(db, row.platform, row.model_id, overridePatch, { baselineRow: preUpdateRow });
+            }
+            if (disablesModel) {
+                db.prepare('UPDATE profile_models SET enabled = 0 WHERE model_db_id = ?').run(id);
+                pruneUnavailableSavedFusionConfig();
+            }
+        }
+        if (disablesModel || parsed.data.fallbackEnabled !== undefined) {
+            const next = disablesModel ? 0 : parsed.data.fallbackEnabled ? 1 : 0;
+            db.prepare('UPDATE fallback_config SET enabled = ? WHERE model_db_id = ?')
+                .run(next, id);
+            const activeProfileId = getActiveProfileId(db);
+            if (activeProfileId != null) {
+                db.prepare('UPDATE profile_models SET enabled = ? WHERE profile_id = ? AND model_db_id = ?')
+                    .run(next, activeProfileId, id);
+            }
+        }
+    });
+    applyUpdate();
+    res.json({ success: true, id });
+});
+modelsRouter.delete('/:id', (req, res) => {
+    const id = Number(req.params.id);
+    if (!Number.isInteger(id)) {
+        res.status(400).json({ error: { message: 'Invalid id' } });
+        return;
+    }
+    const db = getDb();
+    const row = fetchModelRow(id);
+    if (!row) {
+        res.status(404).json({ error: { message: `Unknown model ${id}` } });
+        return;
+    }
+    const remove = db.transaction(() => {
+        if (isCatalogManagedModel(row)) {
+            recordCatalogModelTombstone(db, 'chat', row.platform, row.model_id);
+        }
+        else if (row.platform === 'custom') {
+            // #926: same "keep it deleted" contract for custom relay models — the
+            // scheduled custom-model sync must not resurrect this row.
+            recordCustomModelTombstone(db, endpointScopeOfKey(db, row.key_id), row.model_id);
+        }
+        db.prepare('DELETE FROM fallback_config WHERE model_db_id = ?').run(id);
+        db.prepare('DELETE FROM profile_models WHERE model_db_id = ?').run(id);
+        db.prepare('DELETE FROM models WHERE id = ?').run(id);
+        if (row.platform === 'custom')
+            deleteUnusedCustomEndpointKey(db, row.key_id);
+        pruneUnavailableSavedFusionConfig();
+    });
+    remove();
+    res.json({ success: true, tombstoned: isCatalogManagedModel(row) });
+});
+modelsRouter.post('/:id/test', async (req, res) => {
+    const id = Number(req.params.id);
+    if (!Number.isInteger(id)) {
+        res.status(400).json({ error: { message: 'Invalid id' } });
+        return;
+    }
+    const modelRow = fetchModelRow(id);
+    if (!modelRow) {
+        res.status(404).json({ error: { message: `Unknown model ${id}` } });
+        return;
+    }
+    const now = Date.now();
+    for (const [modelId, testedAt] of modelTestCooldowns) {
+        if (now - testedAt >= MODEL_TEST_THROTTLE_MS)
+            modelTestCooldowns.delete(modelId);
+    }
+    const lastTest = modelTestCooldowns.get(id);
+    if (lastTest != null) {
+        const waitSec = Math.ceil((MODEL_TEST_THROTTLE_MS - (now - lastTest)) / 1000);
+        res.setHeader('Retry-After', String(waitSec));
+        res.status(429).json({ error: { message: `Model test is throttled. Please wait ${waitSec}s before testing again.` } });
+        return;
+    }
+    modelTestCooldowns.set(id, now);
+    // Use the same key selection, quota gates and in-flight reservations as
+    // inference, pinned to this model so Test cannot silently try another one.
+    const inputEstimate = 16;
+    const outputLimit = 4;
+    const route = routePinnedModel(id, inputEstimate + outputLimit);
+    if (!route) {
+        res.json({ success: false, modelId: modelRow.model_id, latencyMs: 0,
+            error: 'No enabled API key is currently available for this model. Check model status, cooldowns and quotas.' });
+        return;
+    }
+    const startTime = Date.now();
+    try {
+        const response = await withKeyProxy(route.proxyUrl, () => route.provider.chatCompletion(route.apiKey, [{ role: 'user', content: 'ping' }], route.modelId, { max_tokens: outputLimit, timeoutMs: 15_000 }));
+        const latencyMs = Date.now() - startTime;
+        const outputTokens = response.usage?.completion_tokens ?? Math.ceil((response.choices?.[0]?.message?.content?.length ?? 0) / 4);
+        const inputTokens = response.usage?.prompt_tokens ?? Math.max(0, (response.usage?.total_tokens ?? inputEstimate + outputTokens) - outputTokens);
+        recordRequest(route.platform, route.modelId, route.keyId);
+        recordTokens(route.platform, route.modelId, route.keyId, response.usage?.total_tokens ?? inputTokens + outputTokens);
+        // The request-log transaction also settles the durable monthly ledger.
+        logRequest(route.platform, route.modelId, route.keyId, 'success', inputTokens, outputTokens, latencyMs, null, null, route.modelId, null, 'model-test');
+        res.json({ success: true, modelId: route.modelId, latencyMs });
+    }
+    catch (err) {
+        const latencyMs = Date.now() - startTime;
+        const error = sanitizeProviderErrorMessage(err instanceof Error ? err.message : String(err));
+        logRequest(route.platform, route.modelId, route.keyId, 'error', 0, 0, latencyMs, error, null, route.modelId, null, 'model-test');
+        res.json({ success: false, modelId: route.modelId, latencyMs, error });
+    }
+    finally {
+        route.release?.();
+    }
+});
+// List all models with availability info
+modelsRouter.get('/', (_req, res) => {
+    const db = getDb();
+    const activeProfileId = getActiveProfileId(db);
+    const models = activeProfileId == null ? db.prepare(`
+    SELECT m.*, fc.priority, fc.enabled as fallback_enabled,
+           mo.overrides_json IS NOT NULL AS has_overrides, mo.overrides_json,
+           ak.label AS key_label
+    FROM models m
+    LEFT JOIN fallback_config fc ON fc.model_db_id = m.id
+    LEFT JOIN model_overrides mo ON mo.platform = m.platform AND mo.model_id = m.model_id
+    LEFT JOIN api_keys ak ON ak.id = m.key_id
+    ORDER BY COALESCE(fc.priority, m.intelligence_rank) ASC
+  `).all() : db.prepare(`
+    SELECT m.*, COALESCE(pm.priority, fc.priority) AS priority,
+           COALESCE(pm.enabled, fc.enabled) AS fallback_enabled,
+           mo.overrides_json IS NOT NULL AS has_overrides, mo.overrides_json,
+           ak.label AS key_label
+    FROM models m
+    LEFT JOIN fallback_config fc ON fc.model_db_id = m.id
+    LEFT JOIN profile_models pm ON pm.profile_id = ? AND pm.model_db_id = m.id
+    LEFT JOIN model_overrides mo ON mo.platform = m.platform AND mo.model_id = m.model_id
+    LEFT JOIN api_keys ak ON ak.id = m.key_id
+    ORDER BY COALESCE(pm.priority, fc.priority, m.intelligence_rank) ASC
+  `).all(activeProfileId);
+    // Count keys per platform
+    const keyCounts = db.prepare(`
+    SELECT platform, COUNT(*) as count
+    FROM api_keys
+    WHERE enabled = 1
+    GROUP BY platform
+  `).all();
+    const keyCountMap = new Map(keyCounts.map(k => [k.platform, k.count]));
+    const result = models.map(m => ({
+        id: m.id,
+        platform: m.platform,
+        modelId: m.model_id,
+        displayName: m.display_name,
+        intelligenceRank: m.intelligence_rank,
+        speedRank: m.speed_rank,
+        sizeLabel: m.size_label,
+        rpmLimit: m.rpm_limit,
+        rpdLimit: m.rpd_limit,
+        tpmLimit: m.tpm_limit,
+        tpdLimit: m.tpd_limit,
+        monthlyTokenBudget: m.monthly_token_budget,
+        contextWindow: m.context_window,
+        enabled: m.enabled === 1,
+        supportsVision: m.supports_vision === 1,
+        supportsTools: m.supports_tools === 1,
+        priority: m.priority,
+        fallbackEnabled: m.fallback_enabled === 1,
+        // Real provenance from models.source ('catalog' | 'user'). The dashboard's
+        // existing vocabulary for user-added rows is 'custom', so map 1:1 here —
+        // this now also flags user models on native platforms (declarative
+        // config / admin adds), which the old platform/key_id heuristic missed.
+        // 'discovered' (#1348) marks rows fetched from a built-in provider's own
+        // /models because the catalog carries none for it.
+        source: m.source === 'user' ? 'custom' : m.source === 'discovered' ? 'discovered' : 'catalog',
+        keyId: m.key_id ?? null,
+        keyLabel: m.key_label ?? null,
+        // Endpoint identity for custom rows (#651); null for catalog models and for
+        // custom rows that carry no endpoint scope.
+        endpointScope: m.endpoint_scope || null,
+        qualifiedModelId: qualifiedModelMemberId(m.platform, m.model_id, m.endpoint_scope),
+        hasOverrides: Boolean(m.has_overrides),
+        overrideFields: overriddenFieldNames(m.overrides_json),
+        hasProvider: hasProvider(m.platform),
+        keyCount: keyCountMap.get(m.platform) ?? 0,
+    }));
+    res.json(result);
+});
+//# sourceMappingURL=models.js.map