@tokenbuddy/tokenbuddy 1.0.36 → 1.0.37

package/src/buyer-store.ts

@@ -1,1090 +0,0 @@
-// @ts-ignore node:sqlite types are not present in the current @types/node release.
-import { DatabaseSync } from "node:sqlite";
-import * as crypto from "crypto";
-import * as fs from "fs";
-import * as os from "os";
-import * as path from "path";
-import { createModuleLogger } from "@tokenbuddy/logging";
-
-const logger = createModuleLogger("tb-proxyd");
-
-/**
- * buyer 端缓存的 seller access token + 余额快照。
- * v1.2 PR-fix：每次取出都校验 `expiresAt`，避免把过期 token 发给 seller 导致 401。
- */
-export interface CachedToken {
-  token: string;
-  balanceMicros: number;
-  reservedMicros: number;
-  spentMicros: number;
-  balanceSource?: string;
-  /**
-   * ISO-8601 expiry timestamp sourced from the seller's
-   * `/purchase/complete` response. v1.2 PR-fix: the buyer now
-   * checks this on every cached-token lookup so we never serve a
-   * stale access token to the upstream.
-   */
-  expiresAt?: string;
-}
-
-/**
- * 持久化的支付方式配置。
- * `isDefault` 用于 `tb init` / 路由层在没有显式 method 时选默认。
- */
-export interface PaymentConfig {
-  method: string;
-  enabled: boolean;
-  isDefault: boolean;
-  config?: Record<string, unknown>;
-  updatedAt: string;
-}
-
-/**
- * 待结算的 purchase 快照（buyer 端在 `/purchase/create` 之后、`/purchase/complete` 之前的临时状态）。
- */
-export interface PendingPurchaseInput {
-  purchaseId: string;
-  sellerKey: string;
-  modelId: string;
-  paymentMethod: string;
-  amountUsdMicros: number;
-  status: string;
-  paymentReference?: string;
-  expiresAt?: string;
-}
-
-/**
- * 完成态 purchase 的账本输入。`paymentReference` 会被 hash 之后落库（不存明文）。
- */
-export interface PurchaseLedgerInput {
-  purchaseId: string;
-  sellerKey: string;
-  modelId: string;
-  paymentMethod: string;
-  status: string;
-  creditMicros: number;
-  currency: string;
-  paymentAmount?: string;
-  paymentAmountMinor?: number;
-  paymentCurrency?: string;
-  paymentReference?: string;
-  completedAt?: string;
-}
-
-/**
- * `tb doctor` 与审计日志消费的"安全版" purchase 账本条目。
- * 关键差异：`paymentReference` 已 hash 化为 `paymentReferenceHash`，永不暴露明文。
- */
-export interface SafePurchaseLedgerEntry {
-  purchaseId: string;
-  sellerKey: string;
-  modelId: string;
-  paymentMethod: string;
-  status: string;
-  creditMicros: number;
-  currency: string;
-  paymentAmount?: string;
-  paymentAmountMinor?: number;
-  paymentCurrency?: string;
-  paymentReferenceHash?: string;
-  createdAt: string;
-  completedAt?: string;
-}
-
-/**
- * buyer 端单次推理请求的账本输入。
- * `prompt` / `response` 在落库前会 hash，原始内容永不落盘。
- *
- * v1.2 tb-ui v1 (Iter 4):补 7 字段 — 排查 / 性能 / 路由决策溯源必备。
- * - `ttftMs`:首字延迟(从请求发起到首 byte),`forwardProxyRequest` 计算
- * - `fallbackCount`:本请求实际走过的 seller 数(> 1 即发生 failover)
- * - `routeReason`:`planSellerRouteSet().reason`(如 `fullAuto:balanced:routes_3`)
- * - `falloverChain`:failover 路径上 seller id 数组(空 = 主路径成功)
- * - `upstreamStatus`:seller 透传的上游健康状态(`healthy|degraded|unhealthy|unknown`)
- * - `durationMs`:总耗时(req start → response end 或失败)
- * - `paymentMethod`:本请求使用的支付方式(`mock|clawtip`)
- */
-export interface InferenceLedgerInput {
-  requestId: string;
-  sellerKey: string;
-  modelId: string;
-  endpoint: string;
-  status: string;
-  promptTokens: number;
-  completionTokens: number;
-  cacheReadTokens?: number;
-  billedMicros: number;
-  estimatedMicros?: number;
-  settledMicros?: number;
-  settledUsdMicros?: number;
-  priceVersion?: string;
-  inputPriceMicrosPer1m?: number;
-  outputPriceMicrosPer1m?: number;
-  cacheReadPriceMicrosPer1m?: number;
-  inputCostMicros?: number;
-  outputCostMicros?: number;
-  cacheReadCostMicros?: number;
-  originalUsdMicros?: number;
-  billingMultiplier?: number;
-  serviceTier?: string;
-  billingUnit?: "tokens" | "images";
-  imageCount?: number;
-  imageSize?: string;
-  imageQuality?: string;
-  imageOutputFormat?: string;
-  imageOutputTokens?: number;
-  imageOutputCostMicros?: number;
-  imageCostMicrosPerImage?: number;
-  balanceSnapshotMicros?: number;
-  balanceSource?: string;
-  prompt?: string;
-  response?: string;
-  ttftMs?: number;
-  fallbackCount?: number;
-  routeReason?: string;
-  falloverChain?: string[];
-  upstreamStatus?: string;
-  durationMs?: number;
-  paymentMethod?: string;
-}
-
-/**
- * `tb doctor` 与审计日志消费的"安全版"推理账本条目。
- * 关键差异：`prompt` / `response` 已 hash 化为 `promptHash` / `responseHash`。
- */
-export interface SafeInferenceLedgerEntry {
-  requestId: string;
-  sellerKey: string;
-  modelId: string;
-  endpoint: string;
-  status: string;
-  promptTokens: number;
-  completionTokens: number;
-  cacheReadTokens: number;
-  billedMicros: number;
-  estimatedMicros?: number;
-  settledMicros?: number;
-  settledUsdMicros?: number;
-  priceVersion?: string;
-  inputPriceMicrosPer1m?: number;
-  outputPriceMicrosPer1m?: number;
-  cacheReadPriceMicrosPer1m?: number;
-  inputCostMicros?: number;
-  outputCostMicros?: number;
-  cacheReadCostMicros?: number;
-  originalUsdMicros?: number;
-  billingMultiplier?: number;
-  serviceTier?: string;
-  billingUnit?: "tokens" | "images";
-  imageCount?: number;
-  imageSize?: string;
-  imageQuality?: string;
-  imageOutputFormat?: string;
-  imageOutputTokens?: number;
-  imageOutputCostMicros?: number;
-  imageCostMicrosPerImage?: number;
-  balanceSnapshotMicros?: number;
-  balanceSource?: string;
-  promptHash?: string;
-  responseHash?: string;
-  createdAt: string;
-  // v1.2 tb-ui v1 (Iter 4):新增 7 字段
-  ttftMs?: number;
-  fallbackCount?: number;
-  routeReason?: string;
-  falloverChain?: string[];
-  upstreamStatus?: string;
-  durationMs?: number;
-  paymentMethod?: string;
-}
-
-/**
- * seller token 余额快照的入参。
- * 每次推理后由 `BuyerStore.recordTokenBalance` 调用，作为路由决策的"最近一次真实余额"。
- */
-export interface TokenBalanceSnapshotInput {
-  sellerKey: string;
-  token?: string;
-  tokenClass?: string;
-  balanceMicros: number;
-  reservedMicros?: number;
-  spentMicros?: number;
-  balanceSource: string;
-  expiresAt?: string;
-}
-
-/**
- * `BuyerStore.summary()` 的返回结构，用于 `tb doctor` 展示 DB 健康度。
- */
-export interface BuyerStoreSummary {
-  journalMode: string;
-  paymentsCount: number;
-  pendingPurchasesCount: number;
-  purchaseLedgerCount: number;
-  inferenceLedgerCount: number;
-  providerRuntimeConfigCount: number;
-  daemonRuntimeConfigCount: number;
-}
-
-/**
- * `tb init` 时记录的 provider 安装快照（用于后续 `tb rollback`）。
- * `existed` 标记安装前文件是否已存在，避免回滚覆盖用户原始内容。
- */
-export interface ProviderInstallSnapshot {
-  providerId: string;
-  files: Array<{
-    path: string;
-    existed: boolean;
-    content?: string;
-  }>;
-}
-
-/**
- * provider 维度运行时配置（由 `tb init` / `tb config` 写入）。
- * 存的是各 provider（如 opencode / cline）需要的 model mapping 等。
- */
-export interface ProviderRuntimeConfigRecord<T = unknown> {
-  providerId: string;
-  config: T;
-  createdAt: string;
-  updatedAt: string;
-}
-
-/**
- * 守护进程维度运行时配置（按 `configKey` 命名空间）。
- * 比如 `seller_routing` / `prewarm` / `inference` 等 daemon 子系统的配置。
- */
-export interface DaemonRuntimeConfigRecord<T = unknown> {
-  configKey: string;
-  config: T;
-  createdAt: string;
-  updatedAt: string;
-}
-
-/**
- * `BuyerStore` 构造选项。
- * 优先用 `dbPath`（绝对路径），否则用 `root`（目录）+ 默认 `buyer-store.db`。
- */
-export interface BuyerStoreOptions {
-  root?: string;
-  dbPath?: string;
-}
-
-function nowIso(): string {
-  return new Date().toISOString();
-}
-
-function safeHash(value?: string): string | undefined {
-  if (!value) {
-    return undefined;
-  }
-  return crypto.createHash("sha256").update(value).digest("hex");
-}
-
-function boolFromSql(value: unknown): boolean {
-  return value === 1 || value === true;
-}
-
-function ensureDirForFile(filePath: string): void {
-  const dir = path.dirname(filePath);
-  if (dir !== "." && !fs.existsSync(dir)) {
-    fs.mkdirSync(dir, { recursive: true });
-  }
-}
-
-/**
- * 解析 buyer store 的 DB 路径。
- * 优先级：`dbPath` → `TOKENBUDDY_BUYER_STORE` env → `~/.tokenbuddy-store/buyer-store.db`。
- *
- * @param options 解析选项
- * @returns DB 文件绝对路径
- */
-export function resolveBuyerStorePath(options: BuyerStoreOptions = {}): string {
-  if (options.dbPath) {
-    return options.dbPath;
-  }
-  const root = options.root || process.env.TOKENBUDDY_BUYER_STORE || path.join(os.homedir(), ".tokenbuddy-store");
-  return path.join(root, "buyer-store.db");
-}
-
-/**
- * buyer 端 SQLite 持久化层。
- * 维护：支付配置、pending purchase、purchase 账本、inference 账本、provider / daemon runtime config、token 余额快照。
- * 内部用 SHA256 摘要替代明文敏感字段（prompt / response / paymentReference / token）。
- */
-export class BuyerStore {
-  private db: DatabaseSync;
-
-  constructor(options: BuyerStoreOptions | string = {}) {
-    const dbPath = typeof options === "string" ? options : resolveBuyerStorePath(options);
-    ensureDirForFile(dbPath);
-    this.db = new DatabaseSync(dbPath);
-    this.db.exec("PRAGMA journal_mode = WAL;");
-    this.initSchema();
-  }
-
-  public journalMode(): string {
-    const row = this.db.prepare("PRAGMA journal_mode;").get() as { journal_mode: string };
-    return row.journal_mode;
-  }
-
-  public summary(): BuyerStoreSummary {
-    return {
-      journalMode: this.journalMode(),
-      paymentsCount: this.countRows("payment_config"),
-      pendingPurchasesCount: this.countRows("pending_purchases"),
-      purchaseLedgerCount: this.countRows("purchase_ledger"),
-      inferenceLedgerCount: this.countRows("inference_ledger"),
-      providerRuntimeConfigCount: this.countRows("provider_runtime_config"),
-      daemonRuntimeConfigCount: this.countRows("daemon_runtime_config")
-    };
-  }
-
-  public saveProviderInstallSnapshot(snapshot: ProviderInstallSnapshot): void {
-    const updatedAt = nowIso();
-    this.db.prepare(
-      `INSERT OR REPLACE INTO provider_install_state (
-        provider_id, snapshot_json, created_at, updated_at
-      ) VALUES (
-        ?, ?,
-        COALESCE((SELECT created_at FROM provider_install_state WHERE provider_id = ?), ?),
-        ?
-      )`
-    ).run(
-      snapshot.providerId,
-      JSON.stringify(snapshot),
-      snapshot.providerId,
-      updatedAt,
-      updatedAt
-    );
-  }
-
-  public getProviderInstallSnapshot(providerId: string): ProviderInstallSnapshot | undefined {
-    const row = this.db.prepare(
-      "SELECT snapshot_json FROM provider_install_state WHERE provider_id = ?"
-    ).get(providerId) as { snapshot_json: string } | undefined;
-    if (!row) {
-      return undefined;
-    }
-    return JSON.parse(row.snapshot_json) as ProviderInstallSnapshot;
-  }
-
-  public removeProviderInstallSnapshot(providerId: string): boolean {
-    const result = this.db.prepare("DELETE FROM provider_install_state WHERE provider_id = ?").run(providerId) as { changes: number };
-    return result.changes > 0;
-  }
-
-  public saveProviderRuntimeConfig(providerId: string, config: unknown): void {
-    const updatedAt = nowIso();
-    this.db.prepare(
-      `INSERT OR REPLACE INTO provider_runtime_config (
-        provider_id, runtime_json, created_at, updated_at
-      ) VALUES (
-        ?, ?,
-        COALESCE((SELECT created_at FROM provider_runtime_config WHERE provider_id = ?), ?),
-        ?
-      )`
-    ).run(providerId, JSON.stringify(config), providerId, updatedAt, updatedAt);
-  }
-
-  public getProviderRuntimeConfig<T = unknown>(providerId: string): ProviderRuntimeConfigRecord<T> | undefined {
-    const row = this.db.prepare(
-      `SELECT provider_id, runtime_json, created_at, updated_at
-       FROM provider_runtime_config
-       WHERE provider_id = ?`
-    ).get(providerId) as {
-      provider_id: string;
-      runtime_json: string;
-      created_at: string;
-      updated_at: string;
-    } | undefined;
-    if (!row) {
-      return undefined;
-    }
-    return {
-      providerId: row.provider_id,
-      config: JSON.parse(row.runtime_json) as T,
-      createdAt: row.created_at,
-      updatedAt: row.updated_at
-    };
-  }
-
-  public removeProviderRuntimeConfig(providerId: string): boolean {
-    const result = this.db.prepare("DELETE FROM provider_runtime_config WHERE provider_id = ?").run(providerId) as { changes: number };
-    return result.changes > 0;
-  }
-
-  public saveDaemonRuntimeConfig(configKey: string, config: unknown): void {
-    const updatedAt = nowIso();
-    this.db.prepare(
-      `INSERT OR REPLACE INTO daemon_runtime_config (
-        config_key, config_json, created_at, updated_at
-      ) VALUES (
-        ?, ?,
-        COALESCE((SELECT created_at FROM daemon_runtime_config WHERE config_key = ?), ?),
-        ?
-      )`
-    ).run(configKey, JSON.stringify(config), configKey, updatedAt, updatedAt);
-  }
-
-  public getDaemonRuntimeConfig<T = unknown>(configKey: string): DaemonRuntimeConfigRecord<T> | undefined {
-    const row = this.db.prepare(
-      `SELECT config_key, config_json, created_at, updated_at
-       FROM daemon_runtime_config
-       WHERE config_key = ?`
-    ).get(configKey) as {
-      config_key: string;
-      config_json: string;
-      created_at: string;
-      updated_at: string;
-    } | undefined;
-    if (!row) {
-      return undefined;
-    }
-    return {
-      configKey: row.config_key,
-      config: JSON.parse(row.config_json) as T,
-      createdAt: row.created_at,
-      updatedAt: row.updated_at
-    };
-  }
-
-  public removeDaemonRuntimeConfig(configKey: string): boolean {
-    const result = this.db.prepare("DELETE FROM daemon_runtime_config WHERE config_key = ?").run(configKey) as { changes: number };
-    return result.changes > 0;
-  }
-
-  public getToken(sellerKey: string): CachedToken | undefined {
-    const stmt = this.db.prepare(
-      "SELECT token, balance_micros, reserved_micros, spent_micros, balance_source, expires_at FROM token_cache WHERE seller_key = ?"
-    );
-    const row = stmt.get(sellerKey) as {
-      token: string;
-      balance_micros: number;
-      reserved_micros: number;
-      spent_micros: number;
-      balance_source: string | null;
-      expires_at: string | null;
-    } | undefined;
-    if (!row) {
-      return undefined;
-    }
-    return {
-      token: row.token,
-      balanceMicros: row.balance_micros,
-      reservedMicros: row.reserved_micros,
-      spentMicros: row.spent_micros,
-      balanceSource: row.balance_source || undefined,
-      expiresAt: row.expires_at || undefined
-    };
-  }
-
-  public saveToken(sellerKey: string, token: string, tokenClass: string, balanceMicros: number, expiresAt: string): void {
-    const stmt = this.db.prepare(
-      `INSERT OR REPLACE INTO token_cache (
-        seller_key, token, token_class, balance_micros, reserved_micros,
-        spent_micros, balance_source, expires_at, updated_at
-      ) VALUES (?, ?, ?, ?, 0, 0, 'purchase_complete', ?, ?)`
-    );
-    stmt.run(sellerKey, token, tokenClass, balanceMicros, expiresAt, nowIso());
-  }
-
-  public reconcileTokenBalance(input: TokenBalanceSnapshotInput): void {
-    const current = this.db.prepare(
-      "SELECT token, token_class, expires_at FROM token_cache WHERE seller_key = ?"
-    ).get(input.sellerKey) as {
-      token: string;
-      token_class: string;
-      expires_at: string;
-    } | undefined;
-    const token = input.token || current?.token;
-    const tokenClass = input.tokenClass || current?.token_class || "seller";
-    const expiresAt = input.expiresAt || current?.expires_at || new Date(Date.now() + 86400 * 1000).toISOString();
-    if (!token) {
-      return;
-    }
-    this.db.prepare(
-      `INSERT OR REPLACE INTO token_cache (
-        seller_key, token, token_class, balance_micros, reserved_micros,
-        spent_micros, balance_source, expires_at, updated_at
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(
-      input.sellerKey,
-      token,
-      tokenClass,
-      input.balanceMicros,
-      input.reservedMicros ?? 0,
-      input.spentMicros ?? 0,
-      input.balanceSource,
-      expiresAt,
-      nowIso()
-    );
-    logger.info("token.cache.reconciled", "token cache reconciled from seller balance snapshot", {
-      sellerKey: input.sellerKey,
-      balanceMicros: input.balanceMicros,
-      reservedMicros: input.reservedMicros ?? 0,
-      spentMicros: input.spentMicros ?? 0,
-      balanceSource: input.balanceSource
-    });
-  }
-
-  public markTokenStale(sellerKey: string): void {
-    this.db.prepare(
-      "UPDATE token_cache SET balance_micros = 0, balance_source = 'stale', updated_at = ? WHERE seller_key = ?"
-    ).run(nowIso(), sellerKey);
-  }
-
-  public listPayments(): PaymentConfig[] {
-    const rows = this.db.prepare(
-      `SELECT method, enabled, is_default, config_json, updated_at
-       FROM payment_config
-       ORDER BY method ASC`
-    ).all() as Array<{
-      method: string;
-      enabled: number;
-      is_default: number;
-      config_json: string | null;
-      updated_at: string;
-    }>;
-
-    return rows.map(row => ({
-      method: row.method,
-      enabled: boolFromSql(row.enabled),
-      isDefault: boolFromSql(row.is_default),
-      config: row.config_json ? JSON.parse(row.config_json) as Record<string, unknown> : undefined,
-      updatedAt: row.updated_at
-    }));
-  }
-
-  public savePayment(config: Omit<PaymentConfig, "updatedAt">): void {
-    const updatedAt = nowIso();
-    if (config.isDefault) {
-      this.db.prepare("UPDATE payment_config SET is_default = 0").run();
-    }
-    this.db.prepare(
-      `INSERT OR REPLACE INTO payment_config (
-        method, enabled, is_default, config_json, created_at, updated_at
-      ) VALUES (
-        ?, ?, ?, ?,
-        COALESCE((SELECT created_at FROM payment_config WHERE method = ?), ?),
-        ?
-      )`
-    ).run(
-      config.method,
-      config.enabled ? 1 : 0,
-      config.isDefault ? 1 : 0,
-      config.config ? JSON.stringify(config.config) : null,
-      config.method,
-      updatedAt,
-      updatedAt
-    );
-  }
-
-  public getPayment(method: string): PaymentConfig | undefined {
-    return this.listPayments().find((payment) => payment.method === method);
-  }
-
-  public removePayment(method: string): boolean {
-    const result = this.db.prepare("DELETE FROM payment_config WHERE method = ?").run(method) as { changes: number };
-    return result.changes > 0;
-  }
-
-  public upsertPendingPurchase(input: PendingPurchaseInput): void {
-    const updatedAt = nowIso();
-    this.db.prepare(
-      `INSERT OR REPLACE INTO pending_purchases (
-        purchase_id, seller_key, model_id, payment_method, amount_usd_micros,
-        status, payment_reference_hash, created_at, updated_at, expires_at
-      ) VALUES (
-        ?, ?, ?, ?, ?, ?, ?,
-        COALESCE((SELECT created_at FROM pending_purchases WHERE purchase_id = ?), ?),
-        ?, ?
-      )`
-    ).run(
-      input.purchaseId,
-      input.sellerKey,
-      input.modelId,
-      input.paymentMethod,
-      input.amountUsdMicros,
-      input.status,
-      safeHash(input.paymentReference) || null,
-      input.purchaseId,
-      updatedAt,
-      updatedAt,
-      input.expiresAt || null
-    );
-  }
-
-  public listPendingPurchases(): Array<PendingPurchaseInput & { paymentReferenceHash?: string; updatedAt: string }> {
-    const rows = this.db.prepare(
-      `SELECT purchase_id, seller_key, model_id, payment_method, amount_usd_micros,
-              status, payment_reference_hash, updated_at, expires_at
-       FROM pending_purchases
-       ORDER BY updated_at DESC, purchase_id ASC`
-    ).all() as Array<{
-      purchase_id: string;
-      seller_key: string;
-      model_id: string;
-      payment_method: string;
-      amount_usd_micros: number;
-      status: string;
-      payment_reference_hash: string | null;
-      updated_at: string;
-      expires_at: string | null;
-    }>;
-
-    return rows.map(row => ({
-      purchaseId: row.purchase_id,
-      sellerKey: row.seller_key,
-      modelId: row.model_id,
-      paymentMethod: row.payment_method,
-      amountUsdMicros: row.amount_usd_micros,
-      status: row.status,
-      paymentReferenceHash: row.payment_reference_hash || undefined,
-      updatedAt: row.updated_at,
-      expiresAt: row.expires_at || undefined
-    }));
-  }
-
-  public recordPurchaseLedger(input: PurchaseLedgerInput): void {
-    const createdAt = nowIso();
-    this.db.prepare(
-      `INSERT INTO purchase_ledger (
-        purchase_id, seller_key, model_id, payment_method, status, credit_micros,
-        currency, payment_amount, payment_amount_minor, payment_currency,
-        payment_reference_hash, created_at, completed_at
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(
-      input.purchaseId,
-      input.sellerKey,
-      input.modelId,
-      input.paymentMethod,
-      input.status,
-      input.creditMicros,
-      input.currency,
-      input.paymentAmount ?? null,
-      input.paymentAmountMinor ?? null,
-      input.paymentCurrency ?? null,
-      safeHash(input.paymentReference) || null,
-      createdAt,
-      input.completedAt || null
-    );
-  }
-
-  public listPurchaseLedger(): SafePurchaseLedgerEntry[] {
-    const rows = this.db.prepare(
-      `SELECT purchase_id, seller_key, model_id, payment_method, status, credit_micros,
-              currency, payment_amount, payment_amount_minor, payment_currency,
-              payment_reference_hash, created_at, completed_at
-       FROM purchase_ledger
-       ORDER BY id ASC`
-    ).all() as Array<{
-      purchase_id: string;
-      seller_key: string;
-      model_id: string;
-      payment_method: string;
-      status: string;
-      credit_micros: number;
-      currency: string;
-      payment_amount: string | null;
-      payment_amount_minor: number | null;
-      payment_currency: string | null;
-      payment_reference_hash: string | null;
-      created_at: string;
-      completed_at: string | null;
-    }>;
-
-    return rows.map(row => ({
-      purchaseId: row.purchase_id,
-      sellerKey: row.seller_key,
-      modelId: row.model_id,
-      paymentMethod: row.payment_method,
-      status: row.status,
-      creditMicros: row.credit_micros,
-      currency: row.currency,
-      paymentAmount: row.payment_amount || undefined,
-      paymentAmountMinor: row.payment_amount_minor ?? undefined,
-      paymentCurrency: row.payment_currency || undefined,
-      paymentReferenceHash: row.payment_reference_hash || undefined,
-      createdAt: row.created_at,
-      completedAt: row.completed_at || undefined
-    }));
-  }
-
-  public recordInferenceLedger(input: InferenceLedgerInput): void {
-    this.db.prepare(
-      `INSERT INTO inference_ledger (
-        request_id, seller_key, model_id, endpoint, status, prompt_tokens,
-        completion_tokens, cache_read_tokens, billed_micros, estimated_micros, settled_micros,
-        settled_usd_micros, price_version,
-        input_price_micros_per_1m, output_price_micros_per_1m, cache_read_price_micros_per_1m,
-        input_cost_micros, output_cost_micros, cache_read_cost_micros,
-        original_usd_micros, billing_multiplier, service_tier,
-        billing_unit, image_count, image_size, image_quality, image_output_format,
-        image_output_tokens, image_output_cost_micros, image_cost_micros_per_image,
-        balance_snapshot_micros, balance_source,
-        prompt_hash, response_hash, created_at,
-        ttft_ms, fallback_count, route_reason, fallover_chain_json, upstream_status,
-        duration_ms, payment_method
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(
-      input.requestId,
-      input.sellerKey,
-      input.modelId,
-      input.endpoint,
-      input.status,
-      input.promptTokens,
-      input.completionTokens,
-      input.cacheReadTokens ?? 0,
-      input.billedMicros,
-      input.estimatedMicros ?? input.billedMicros,
-      input.settledMicros ?? null,
-      input.settledUsdMicros ?? null,
-      input.priceVersion || null,
-      input.inputPriceMicrosPer1m ?? null,
-      input.outputPriceMicrosPer1m ?? null,
-      input.cacheReadPriceMicrosPer1m ?? null,
-      input.inputCostMicros ?? null,
-      input.outputCostMicros ?? null,
-      input.cacheReadCostMicros ?? null,
-      input.originalUsdMicros ?? null,
-      input.billingMultiplier ?? null,
-      input.serviceTier ?? null,
-      input.billingUnit ?? (input.endpoint === "/v1/images/generations" ? "images" : "tokens"),
-      input.imageCount ?? null,
-      input.imageSize ?? null,
-      input.imageQuality ?? null,
-      input.imageOutputFormat ?? null,
-      input.imageOutputTokens ?? null,
-      input.imageOutputCostMicros ?? null,
-      input.imageCostMicrosPerImage ?? null,
-      input.balanceSnapshotMicros ?? null,
-      input.balanceSource || "unknown",
-      safeHash(input.prompt) || null,
-      safeHash(input.response) || null,
-      nowIso(),
-      input.ttftMs ?? null,
-      input.fallbackCount ?? null,
-      input.routeReason ?? null,
-      input.falloverChain ? JSON.stringify(input.falloverChain) : null,
-      input.upstreamStatus ?? null,
-      input.durationMs ?? null,
-      input.paymentMethod ?? null
-    );
-  }
-
-  public listInferenceLedger(): SafeInferenceLedgerEntry[] {
-    const rows = this.db.prepare(
-      `SELECT request_id, seller_key, model_id, endpoint, status, prompt_tokens,
-              completion_tokens, cache_read_tokens, billed_micros, estimated_micros, settled_micros,
-              settled_usd_micros, price_version,
-              input_price_micros_per_1m, output_price_micros_per_1m, cache_read_price_micros_per_1m,
-              input_cost_micros, output_cost_micros, cache_read_cost_micros,
-              original_usd_micros, billing_multiplier, service_tier,
-              billing_unit, image_count, image_size, image_quality, image_output_format,
-              image_output_tokens, image_output_cost_micros, image_cost_micros_per_image,
-              balance_snapshot_micros, balance_source,
-              prompt_hash, response_hash, created_at,
-              ttft_ms, fallback_count, route_reason, fallover_chain_json, upstream_status,
-              duration_ms, payment_method
-       FROM inference_ledger
-       ORDER BY id ASC`
-    ).all() as Array<{
-      request_id: string;
-      seller_key: string;
-      model_id: string;
-      endpoint: string;
-      status: string;
-      prompt_tokens: number;
-      completion_tokens: number;
-      cache_read_tokens: number;
-      billed_micros: number;
-      estimated_micros: number | null;
-      settled_micros: number | null;
-      settled_usd_micros: number | null;
-      price_version: string | null;
-      input_price_micros_per_1m: number | null;
-      output_price_micros_per_1m: number | null;
-      cache_read_price_micros_per_1m: number | null;
-      input_cost_micros: number | null;
-      output_cost_micros: number | null;
-      cache_read_cost_micros: number | null;
-      original_usd_micros: number | null;
-      billing_multiplier: number | null;
-      service_tier: string | null;
-      billing_unit: string | null;
-      image_count: number | null;
-      image_size: string | null;
-      image_quality: string | null;
-      image_output_format: string | null;
-      image_output_tokens: number | null;
-      image_output_cost_micros: number | null;
-      image_cost_micros_per_image: number | null;
-      balance_snapshot_micros: number | null;
-      balance_source: string | null;
-      prompt_hash: string | null;
-      response_hash: string | null;
-      created_at: string;
-      ttft_ms: number | null;
-      fallback_count: number | null;
-      route_reason: string | null;
-      fallover_chain_json: string | null;
-      upstream_status: string | null;
-      duration_ms: number | null;
-      payment_method: string | null;
-    }>;
-
-    return rows.map(row => ({
-      requestId: row.request_id,
-      sellerKey: row.seller_key,
-      modelId: row.model_id,
-      endpoint: row.endpoint,
-      status: row.status,
-      promptTokens: row.prompt_tokens,
-      completionTokens: row.completion_tokens,
-      cacheReadTokens: row.cache_read_tokens,
-      billedMicros: row.billed_micros,
-      estimatedMicros: row.estimated_micros ?? undefined,
-      settledMicros: row.settled_micros ?? undefined,
-      settledUsdMicros: row.settled_usd_micros ?? undefined,
-      priceVersion: row.price_version || undefined,
-      inputPriceMicrosPer1m: row.input_price_micros_per_1m ?? undefined,
-      outputPriceMicrosPer1m: row.output_price_micros_per_1m ?? undefined,
-      cacheReadPriceMicrosPer1m: row.cache_read_price_micros_per_1m ?? undefined,
-      inputCostMicros: row.input_cost_micros ?? undefined,
-      outputCostMicros: row.output_cost_micros ?? undefined,
-      cacheReadCostMicros: row.cache_read_cost_micros ?? undefined,
-      originalUsdMicros: row.original_usd_micros ?? undefined,
-      billingMultiplier: row.billing_multiplier ?? undefined,
-      serviceTier: row.service_tier || undefined,
-      billingUnit: row.billing_unit === "images" ? "images" : row.billing_unit === "tokens" ? "tokens" : undefined,
-      imageCount: row.image_count ?? undefined,
-      imageSize: row.image_size || undefined,
-      imageQuality: row.image_quality || undefined,
-      imageOutputFormat: row.image_output_format || undefined,
-      imageOutputTokens: row.image_output_tokens ?? undefined,
-      imageOutputCostMicros: row.image_output_cost_micros ?? undefined,
-      imageCostMicrosPerImage: row.image_cost_micros_per_image ?? undefined,
-      balanceSnapshotMicros: row.balance_snapshot_micros ?? undefined,
-      balanceSource: row.balance_source || undefined,
-      promptHash: row.prompt_hash || undefined,
-      responseHash: row.response_hash || undefined,
-      createdAt: row.created_at,
-      ttftMs: row.ttft_ms ?? undefined,
-      fallbackCount: row.fallback_count ?? undefined,
-      routeReason: row.route_reason ?? undefined,
-      falloverChain: row.fallover_chain_json ? JSON.parse(row.fallover_chain_json) as string[] : undefined,
-      upstreamStatus: row.upstream_status ?? undefined,
-      durationMs: row.duration_ms ?? undefined,
-      paymentMethod: row.payment_method ?? undefined
-    }));
-  }
-
-  public close(): void {
-    this.db.close();
-  }
-
-  private initSchema(): void {
-    this.db.exec(`
-      CREATE TABLE IF NOT EXISTS token_cache (
-        seller_key TEXT PRIMARY KEY,
-        token TEXT NOT NULL,
-        token_class TEXT NOT NULL,
-        balance_micros INTEGER NOT NULL,
-        reserved_micros INTEGER NOT NULL DEFAULT 0,
-        spent_micros INTEGER NOT NULL DEFAULT 0,
-        balance_source TEXT,
-        expires_at TEXT NOT NULL,
-        updated_at TEXT NOT NULL
-      );
-
-      CREATE TABLE IF NOT EXISTS payment_config (
-        method TEXT PRIMARY KEY,
-        enabled INTEGER NOT NULL,
-        is_default INTEGER NOT NULL DEFAULT 0,
-        config_json TEXT,
-        created_at TEXT NOT NULL,
-        updated_at TEXT NOT NULL
-      );
-
-      CREATE TABLE IF NOT EXISTS pending_purchases (
-        purchase_id TEXT PRIMARY KEY,
-        seller_key TEXT NOT NULL,
-        model_id TEXT NOT NULL,
-        payment_method TEXT NOT NULL,
-        amount_usd_micros INTEGER NOT NULL,
-        status TEXT NOT NULL,
-        payment_reference_hash TEXT,
-        created_at TEXT NOT NULL,
-        updated_at TEXT NOT NULL,
-        expires_at TEXT
-      );
-
-      CREATE TABLE IF NOT EXISTS purchase_ledger (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        purchase_id TEXT NOT NULL,
-        seller_key TEXT NOT NULL,
-        model_id TEXT NOT NULL,
-        payment_method TEXT NOT NULL,
-        status TEXT NOT NULL,
-        credit_micros INTEGER NOT NULL,
-        currency TEXT NOT NULL,
-        payment_amount TEXT,
-        payment_amount_minor INTEGER,
-        payment_currency TEXT,
-        payment_reference_hash TEXT,
-        created_at TEXT NOT NULL,
-        completed_at TEXT
-      );
-
-      CREATE TABLE IF NOT EXISTS inference_ledger (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        request_id TEXT NOT NULL,
-        seller_key TEXT NOT NULL,
-        model_id TEXT NOT NULL,
-        endpoint TEXT NOT NULL,
-        status TEXT NOT NULL,
-        prompt_tokens INTEGER NOT NULL,
-        completion_tokens INTEGER NOT NULL,
-        cache_read_tokens INTEGER NOT NULL DEFAULT 0,
-        billed_micros INTEGER NOT NULL,
-        estimated_micros INTEGER,
-        settled_micros INTEGER,
-        settled_usd_micros INTEGER,
-        price_version TEXT,
-        input_price_micros_per_1m INTEGER,
-        output_price_micros_per_1m INTEGER,
-        cache_read_price_micros_per_1m INTEGER,
-        input_cost_micros INTEGER,
-        output_cost_micros INTEGER,
-        cache_read_cost_micros INTEGER,
-        original_usd_micros INTEGER,
-        billing_multiplier REAL,
-        service_tier TEXT,
-        billing_unit TEXT,
-        image_count INTEGER,
-        image_size TEXT,
-        image_quality TEXT,
-        image_output_format TEXT,
-        image_output_tokens INTEGER,
-        image_output_cost_micros INTEGER,
-        image_cost_micros_per_image INTEGER,
-        balance_snapshot_micros INTEGER,
-        balance_source TEXT,
-        prompt_hash TEXT,
-        response_hash TEXT,
-        created_at TEXT NOT NULL,
-        ttft_ms INTEGER,
-        fallback_count INTEGER,
-        route_reason TEXT,
-        fallover_chain_json TEXT,
-        upstream_status TEXT,
-        duration_ms INTEGER,
-        payment_method TEXT
-      );
-
-      CREATE TABLE IF NOT EXISTS provider_install_state (
-        provider_id TEXT PRIMARY KEY,
-        snapshot_json TEXT NOT NULL,
-        created_at TEXT NOT NULL,
-        updated_at TEXT NOT NULL
-      );
-
-      CREATE TABLE IF NOT EXISTS provider_runtime_config (
-        provider_id TEXT PRIMARY KEY,
-        runtime_json TEXT NOT NULL,
-        created_at TEXT NOT NULL,
-        updated_at TEXT NOT NULL
-      );
-
-      CREATE TABLE IF NOT EXISTS daemon_runtime_config (
-        config_key TEXT PRIMARY KEY,
-        config_json TEXT NOT NULL,
-        created_at TEXT NOT NULL,
-        updated_at TEXT NOT NULL
-      );
-    `);
-    for (const [column, definition] of [
-      ["reserved_micros", "INTEGER NOT NULL DEFAULT 0"],
-      ["spent_micros", "INTEGER NOT NULL DEFAULT 0"],
-      ["balance_source", "TEXT"]
-    ]) {
-      this.ensureColumn("token_cache", column, definition);
-    }
-    for (const [column, definition] of [
-      ["payment_amount", "TEXT"],
-      ["payment_amount_minor", "INTEGER"],
-      ["payment_currency", "TEXT"]
-    ]) {
-      this.ensureColumn("purchase_ledger", column, definition);
-    }
-    for (const [column, definition] of [
-      ["estimated_micros", "INTEGER"],
-      ["cache_read_tokens", "INTEGER NOT NULL DEFAULT 0"],
-      ["settled_micros", "INTEGER"],
-      ["settled_usd_micros", "INTEGER"],
-      ["price_version", "TEXT"],
-      ["input_price_micros_per_1m", "INTEGER"],
-      ["output_price_micros_per_1m", "INTEGER"],
-      ["cache_read_price_micros_per_1m", "INTEGER"],
-      ["input_cost_micros", "INTEGER"],
-      ["output_cost_micros", "INTEGER"],
-      ["cache_read_cost_micros", "INTEGER"],
-      ["original_usd_micros", "INTEGER"],
-      ["billing_multiplier", "REAL"],
-      ["service_tier", "TEXT"],
-      ["billing_unit", "TEXT"],
-      ["image_count", "INTEGER"],
-      ["image_size", "TEXT"],
-      ["image_quality", "TEXT"],
-      ["image_output_format", "TEXT"],
-      ["image_output_tokens", "INTEGER"],
-      ["image_output_cost_micros", "INTEGER"],
-      ["image_cost_micros_per_image", "INTEGER"],
-      ["balance_snapshot_micros", "INTEGER"],
-      ["balance_source", "TEXT"],
-      ["ttft_ms", "INTEGER"],
-      ["fallback_count", "INTEGER"],
-      ["route_reason", "TEXT"],
-      ["fallover_chain_json", "TEXT"],
-      ["upstream_status", "TEXT"],
-      ["duration_ms", "INTEGER"],
-      ["payment_method", "TEXT"]
-    ]) {
-      this.ensureColumn("inference_ledger", column, definition);
-    }
-  }
-
-  private ensureColumn(table: string, column: string, definition: string): void {
-    const rows = this.db.prepare(`PRAGMA table_info(${table})`).all() as Array<{ name: string }>;
-    if (!rows.some((row) => row.name === column)) {
-      this.db.exec(`ALTER TABLE ${table} ADD COLUMN ${column} ${definition}`);
-    }
-  }
-
-  private countRows(tableName: string): number {
-    const row = this.db.prepare(`SELECT COUNT(*) AS count FROM ${tableName}`).get() as { count: number };
-    return row.count;
-  }
-
-  /**
-   * v1.2 §18.4: aggregate inference-ledger rows from the last `days`
-   * window and return the top `limit` most-used model ids. The focus-set
-   * builder uses this when no explicit warmup configuration is provided.
-   */
-  public recentModels(days: number, limit: number): string[] {
-    if (days <= 0 || limit <= 0) {
-      return [];
-    }
-    const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000).toISOString();
-    const rows = this.db.prepare(
-      `SELECT model_id, COUNT(*) AS uses
-         FROM inference_ledger
-        WHERE created_at >= ? AND model_id IS NOT NULL AND model_id != ''
-        GROUP BY model_id
-        ORDER BY uses DESC, model_id ASC
-        LIMIT ?`
-    ).all(cutoff, limit) as Array<{ model_id: string; uses: number }>;
-    return rows.map((row) => row.model_id);
-  }
-}