@wopr-network/platform-core 1.13.2 → 1.14.0

package/dist/gateway/credit-gate.js

@@ -71,7 +71,11 @@ export async function debitCredits(deps, tenantId, costUsd, margin, capability,
         return;
     }
     try {
-        await deps.creditLedger.debit(tenantId, chargeCredit, "adapter_usage", `Gateway ${capability} via ${provider}`, undefined, true, attributedUserId);
+        await deps.creditLedger.debit(tenantId, chargeCredit, "adapter_usage", {
+            description: `Gateway ${capability} via ${provider}`,
+            allowNegative: true,
+            attributedUserId,
+        });
         // Only fire on first zero-crossing (balance was positive before, now ≤ 0)
         if (deps.onBalanceExhausted) {
             const newBalance = await deps.creditLedger.balance(tenantId);

package/dist/gateway/credit-gate.test.js

@@ -1,7 +1,7 @@
 /**
  * Tests for gateway credit gate — grace buffer and credits_exhausted behavior (WOP-821).
  */
-import { Credit, CreditLedger } from "@wopr-network/platform-core/credits";
+import { Credit, DrizzleLedger } from "@wopr-network/platform-core/credits";
 import { Hono } from "hono";
 import { afterAll, beforeAll, beforeEach, describe, expect, it, vi } from "vitest";
 import { createTestDb, truncateAllTables } from "../test/db.js";
@@ -39,35 +39,36 @@ afterAll(async () => {
 describe("creditBalanceCheck grace buffer", () => {
     beforeEach(async () => {
         await truncateAllTables(pool);
+        await new DrizzleLedger(db).seedSystemAccounts();
     });
     it("returns null when balance is above estimated cost (passes)", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(500), "purchase", "setup");
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(500), "purchase", { description: "setup" });
         const c = await buildHonoContext("t1");
         const deps = { creditLedger: ledger, topUpUrl: "/billing" };
         expect(await creditBalanceCheck(c, deps, 1)).toBeNull();
     });
     it("returns null when balance is zero but within default grace buffer (passes)", async () => {
         // Balance at exactly 0 — within the -50 grace buffer
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(10), "purchase", "setup");
-        await ledger.debit("t1", Credit.fromCents(10), "adapter_usage", "drain");
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(10), "purchase", { description: "setup" });
+        await ledger.debit("t1", Credit.fromCents(10), "adapter_usage", { description: "drain" });
         const c = await buildHonoContext("t1");
         const deps = { creditLedger: ledger, topUpUrl: "/billing" };
         expect(await creditBalanceCheck(c, deps, 0)).toBeNull();
     });
     it("returns null when balance is -49 (within 50-cent grace buffer)", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(1), "purchase", "setup");
-        await ledger.debit("t1", Credit.fromCents(50), "adapter_usage", "drain", undefined, true); // balance = -49
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(1), "purchase", { description: "setup" });
+        await ledger.debit("t1", Credit.fromCents(50), "adapter_usage", { description: "drain", allowNegative: true }); // balance = -49
         const c = await buildHonoContext("t1");
         const deps = { creditLedger: ledger, topUpUrl: "/billing" };
         expect(await creditBalanceCheck(c, deps, 0)).toBeNull();
     });
     it("returns credits_exhausted when balance is at -50 (at grace buffer limit)", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(1), "purchase", "setup");
-        await ledger.debit("t1", Credit.fromCents(51), "adapter_usage", "drain", undefined, true); // balance = -50
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(1), "purchase", { description: "setup" });
+        await ledger.debit("t1", Credit.fromCents(51), "adapter_usage", { description: "drain", allowNegative: true }); // balance = -50
         const c = await buildHonoContext("t1");
         const deps = { creditLedger: ledger, topUpUrl: "/billing" };
         const result = await creditBalanceCheck(c, deps, 0);
@@ -75,9 +76,9 @@ describe("creditBalanceCheck grace buffer", () => {
         expect(result?.code).toBe("credits_exhausted");
     });
     it("returns credits_exhausted when balance is at -51 (beyond grace buffer)", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(1), "purchase", "setup");
-        await ledger.debit("t1", Credit.fromCents(52), "adapter_usage", "drain", undefined, true); // balance = -51
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(1), "purchase", { description: "setup" });
+        await ledger.debit("t1", Credit.fromCents(52), "adapter_usage", { description: "drain", allowNegative: true }); // balance = -51
         const c = await buildHonoContext("t1");
         const deps = { creditLedger: ledger, topUpUrl: "/billing" };
         const result = await creditBalanceCheck(c, deps, 0);
@@ -85,9 +86,9 @@ describe("creditBalanceCheck grace buffer", () => {
         expect(result?.code).toBe("credits_exhausted");
     });
     it("returns credits_exhausted when custom graceBufferCents=0 and balance is 0", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(10), "purchase", "setup");
-        await ledger.debit("t1", Credit.fromCents(10), "adapter_usage", "drain"); // balance = 0
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(10), "purchase", { description: "setup" });
+        await ledger.debit("t1", Credit.fromCents(10), "adapter_usage", { description: "drain" }); // balance = 0
         const c = await buildHonoContext("t1");
         const deps = { creditLedger: ledger, topUpUrl: "/billing", graceBufferCents: 0 };
         const result = await creditBalanceCheck(c, deps, 0);
@@ -95,8 +96,8 @@ describe("creditBalanceCheck grace buffer", () => {
         expect(result?.code).toBe("credits_exhausted");
     });
     it("returns insufficient_credits when balance positive but below estimated cost", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(5), "purchase", "setup");
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(5), "purchase", { description: "setup" });
         const c = await buildHonoContext("t1");
         const deps = { creditLedger: ledger, topUpUrl: "/billing" };
         const result = await creditBalanceCheck(c, deps, 10);
@@ -110,26 +111,27 @@ describe("creditBalanceCheck grace buffer", () => {
 describe("debitCredits with allowNegative and onBalanceExhausted", () => {
     beforeEach(async () => {
         await truncateAllTables(pool);
+        await new DrizzleLedger(db).seedSystemAccounts();
     });
     it("debit with cost that would exceed balance succeeds (allowNegative=true)", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(5), "purchase", "setup"); // balance = 5 cents
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(5), "purchase", { description: "setup" }); // balance = 5 cents
         // costUsd = $0.10 = 10 cents, margin = 1.0
         // This should push balance negative without throwing
         await expect(debitCredits({ creditLedger: ledger, topUpUrl: "/billing" }, "t1", 0.1, 1.0, "chat-completions", "openrouter")).resolves.not.toThrow();
         expect((await ledger.balance("t1")).isNegative()).toBe(true);
     });
     it("fires onBalanceExhausted when debit causes balance to cross zero", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(5), "purchase", "setup"); // balance = 5 cents
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(5), "purchase", { description: "setup" }); // balance = 5 cents
         const onBalanceExhausted = vi.fn();
         // costUsd = $0.10 = 10 cents with margin 1.0 → chargeCents = 10, pushes balance to -5
         await debitCredits({ creditLedger: ledger, topUpUrl: "/billing", onBalanceExhausted }, "t1", 0.1, 1.0, "chat-completions", "openrouter");
         expect(onBalanceExhausted).toHaveBeenCalledWith("t1", -5);
     });
     it("does NOT fire onBalanceExhausted when balance stays positive after debit", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(500), "purchase", "setup"); // balance = 500 cents
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(500), "purchase", { description: "setup" }); // balance = 500 cents
         const onBalanceExhausted = vi.fn();
         // costUsd = $0.01 = 1 cent → balance stays at 499
         await debitCredits({ creditLedger: ledger, topUpUrl: "/billing", onBalanceExhausted }, "t1", 0.01, 1.0, "chat-completions", "openrouter");
@@ -137,8 +139,8 @@ describe("debitCredits with allowNegative and onBalanceExhausted", () => {
         expect((await ledger.balance("t1")).greaterThan(Credit.ZERO)).toBe(true);
     });
     it("onBalanceExhausted callback receives correct tenantId and negative balance", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(3), "purchase", "setup"); // balance = 3 cents
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(3), "purchase", { description: "setup" }); // balance = 3 cents
         const onBalanceExhausted = vi.fn();
         // costUsd = $0.05 = 5 cents with margin 1.0 → pushes balance to -2
         await debitCredits({ creditLedger: ledger, topUpUrl: "/billing", onBalanceExhausted }, "t1", 0.05, 1.0, "chat-completions", "openrouter");
@@ -146,17 +148,17 @@ describe("debitCredits with allowNegative and onBalanceExhausted", () => {
         expect(onBalanceExhausted).toHaveBeenCalledWith("t1", -2);
     });
     it("calls onSpendAlertCrossed after successful debit", async () => {
-        const ledger = new CreditLedger(db);
-        await ledger.credit("t1", Credit.fromCents(500), "purchase", "setup");
+        const ledger = new DrizzleLedger(db);
+        await ledger.credit("t1", Credit.fromCents(500), "purchase", { description: "setup" });
         const onSpendAlertCrossed = vi.fn();
         await debitCredits({ creditLedger: ledger, topUpUrl: "/billing", onSpendAlertCrossed }, "t1", 0.05, 1.0, "chat-completions", "openrouter");
         expect(onSpendAlertCrossed).toHaveBeenCalledWith("t1");
     });
     it("does NOT fire onBalanceExhausted when balance was already negative before debit", async () => {
-        const ledger = new CreditLedger(db);
+        const ledger = new DrizzleLedger(db);
         // Start with negative balance: credit 5, debit 10 → balance = -5
-        await ledger.credit("t1", Credit.fromCents(5), "purchase", "setup");
-        await ledger.debit("t1", Credit.fromCents(10), "adapter_usage", "drain", undefined, true);
+        await ledger.credit("t1", Credit.fromCents(5), "purchase", { description: "setup" });
+        await ledger.debit("t1", Credit.fromCents(10), "adapter_usage", { description: "drain", allowNegative: true });
         const onBalanceExhausted = vi.fn();
         // Another debit of 1 cent — balance goes from -5 to -6, but was already negative
         await debitCredits({ creditLedger: ledger, topUpUrl: "/billing", onBalanceExhausted }, "t1", 0.01, 1.0, "chat-completions", "openrouter");

package/dist/gateway/gateway-routes.test.js

@@ -55,7 +55,7 @@ function buildTestConfig(overrides = {}) {
     }));
     return {
         meter: meter,
-        budgetChecker: budgetChecker,
+        budgetChecker,
         creditLedger,
         providers: { openrouter: { apiKey: "or-test-key" } },
         fetchFn,

package/dist/gateway/index.d.ts

@@ -16,6 +16,8 @@ export { anthropicToOpenAI, createAnthropicRoutes, createOpenAIRoutes, estimateA
 export { buildProxyDeps, type ProxyDeps, phoneNumberList, phoneNumberProvision, phoneNumberRelease, smsDeliveryStatus, smsInbound, smsOutbound, } from "./proxy.js";
 export { createGatewayRoutes } from "./routes.js";
 export { type GatewayAuthEnv, serviceKeyAuth } from "./service-key-auth.js";
+export type { IServiceKeyRepository } from "./service-key-repository.js";
+export { DrizzleServiceKeyRepository } from "./service-key-repository.js";
 export { type SpendingCapConfig, type SpendingCaps, spendingCapCheck } from "./spending-cap.js";
 export type { ISpendingCapStore, SpendingCapRecord } from "./spending-cap-store.js";
 export { proxySSEStream } from "./streaming.js";

package/dist/gateway/index.js

@@ -16,6 +16,7 @@ export { anthropicToOpenAI, createAnthropicRoutes, createOpenAIRoutes, estimateA
 export { buildProxyDeps, phoneNumberList, phoneNumberProvision, phoneNumberRelease, smsDeliveryStatus, smsInbound, smsOutbound, } from "./proxy.js";
 export { createGatewayRoutes } from "./routes.js";
 export { serviceKeyAuth } from "./service-key-auth.js";
+export { DrizzleServiceKeyRepository } from "./service-key-repository.js";
 export { spendingCapCheck } from "./spending-cap.js";
 export { proxySSEStream } from "./streaming.js";
 export { validateTwilioSignature } from "./twilio-signature.js";

package/dist/gateway/protocol/anthropic.js

@@ -46,7 +46,7 @@ function anthropicAuth(resolveServiceKey) {
                 },
             }, 401);
         }
-        const tenant = resolveServiceKey(key);
+        const tenant = await resolveServiceKey(key);
         if (!tenant) {
             logger.warn("Invalid service key attempted (anthropic handler)");
             return c.json({

package/dist/gateway/protocol/deps.d.ts

@@ -4,10 +4,10 @@
  * Both the Anthropic and OpenAI handlers need the same set of services:
  * budget checking, metering, provider configs, fetch, and service key resolution.
  */
-import type { Credit, ICreditLedger } from "@wopr-network/platform-core/credits";
+import type { Credit, ILedger } from "@wopr-network/platform-core/credits";
 import type { MeterEmitter } from "@wopr-network/platform-core/metering";
 import type { IRateLimitRepository } from "../../api/rate-limit-repository.js";
-import type { BudgetChecker } from "../../monetization/budget/budget-checker.js";
+import type { IBudgetChecker } from "../../monetization/budget/budget-checker.js";
 import type { CapabilityRateLimitConfig } from "../capability-rate-limit.js";
 import type { CircuitBreakerConfig } from "../circuit-breaker.js";
 import type { ICircuitBreakerRepository } from "../circuit-breaker-repository.js";
@@ -15,14 +15,14 @@ import type { SellRateLookupFn } from "../rate-lookup.js";
 import type { FetchFn, GatewayTenant, ProviderConfig } from "../types.js";
 export interface ProtocolDeps {
     meter: MeterEmitter;
-    budgetChecker: BudgetChecker;
-    creditLedger?: ICreditLedger;
+    budgetChecker: IBudgetChecker;
+    creditLedger?: ILedger;
     topUpUrl: string;
     graceBufferCents?: number;
     providers: ProviderConfig;
     defaultMargin: number;
     fetchFn: FetchFn;
-    resolveServiceKey: (key: string) => GatewayTenant | null;
+    resolveServiceKey: (key: string) => GatewayTenant | null | Promise<GatewayTenant | null>;
     /** Apply margin to a cost. Defaults to withMargin from adapters/types. */
     withMarginFn: (cost: Credit, margin: number) => Credit;
     rateLookupFn?: SellRateLookupFn;

package/dist/gateway/protocol/openai.js

@@ -53,7 +53,7 @@ function openaiAuth(resolveServiceKey) {
                 },
             }, 401);
         }
-        const tenant = resolveServiceKey(key);
+        const tenant = await resolveServiceKey(key);
         if (!tenant) {
             logger.warn("Invalid service key attempted (openai handler)", {
                 keyPrefix: `${key.slice(0, 8)}...`,

package/dist/gateway/proxy.d.ts

@@ -9,18 +9,18 @@
  * 4. Emit meter event
  * 5. Return response to bot
  */
-import type { ICreditLedger } from "@wopr-network/platform-core/credits";
+import type { ILedger } from "@wopr-network/platform-core/credits";
 import type { MeterEmitter } from "@wopr-network/platform-core/metering";
 import type { Context } from "hono";
-import type { BudgetChecker } from "../monetization/budget/budget-checker.js";
+import type { IBudgetChecker } from "../monetization/budget/budget-checker.js";
 import type { SellRateLookupFn } from "./rate-lookup.js";
 import type { GatewayAuthEnv } from "./service-key-auth.js";
 import type { FetchFn, GatewayConfig, ProviderConfig } from "./types.js";
 /** Shared state for all proxy handlers. */
 export interface ProxyDeps {
     meter: MeterEmitter;
-    budgetChecker: BudgetChecker;
-    creditLedger?: ICreditLedger;
+    budgetChecker: IBudgetChecker;
+    creditLedger?: ILedger;
     topUpUrl: string;
     graceBufferCents?: number;
     providers: ProviderConfig;

package/dist/gateway/route-mounting.test.js

@@ -51,7 +51,7 @@ function buildTestConfig(overrides = {}) {
     }));
     return {
         meter: meter,
-        budgetChecker: budgetChecker,
+        budgetChecker,
         creditLedger,
         providers: { openrouter: { apiKey: "or-test-key" } },
         fetchFn,

package/dist/gateway/service-key-auth.d.ts

@@ -22,7 +22,7 @@ export interface GatewayAuthEnv {
  *
  * @param resolveServiceKey - Function that maps a service key to a tenant (or null)
  */
-export declare function serviceKeyAuth(resolveServiceKey: (key: string) => GatewayTenant | null): (c: Context<GatewayAuthEnv>, next: Next) => Promise<void | (Response & import("hono").TypedResponse<{
+export declare function serviceKeyAuth(resolveServiceKey: (key: string) => GatewayTenant | null | Promise<GatewayTenant | null>): (c: Context<GatewayAuthEnv>, next: Next) => Promise<void | (Response & import("hono").TypedResponse<{
     error: {
         message: string;
         type: string;

package/dist/gateway/service-key-auth.js

@@ -47,7 +47,7 @@ export function serviceKeyAuth(resolveServiceKey) {
                 },
             }, 401);
         }
-        const tenant = resolveServiceKey(serviceKey);
+        const tenant = await resolveServiceKey(serviceKey);
         if (!tenant) {
             logger.warn("Invalid service key attempted", {
                 keyPrefix: `${serviceKey.slice(0, 8)}...`,

package/dist/gateway/service-key-repository.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Gateway service key repository.
+ *
+ * Stores SHA-256 hashes of per-instance service keys used to authenticate
+ * tenant containers against the metered inference gateway. Raw keys are
+ * NEVER stored — only hashes.
+ */
+import type { PlatformDb } from "../db/index.js";
+import type { GatewayTenant } from "./types.js";
+export interface IServiceKeyRepository {
+    /** Generate a new service key for an instance. Returns the raw key (caller must store it). */
+    generate(tenantId: string, instanceId: string): Promise<string>;
+    /** Resolve a raw bearer token to a GatewayTenant. Returns null if not found or revoked. */
+    resolve(rawKey: string): Promise<GatewayTenant | null>;
+    /** Revoke the service key for a specific instance. */
+    revokeByInstance(instanceId: string): Promise<void>;
+    /** Revoke all service keys for a tenant (used when tenant is deleted). */
+    revokeByTenant(tenantId: string): Promise<void>;
+}
+export declare class DrizzleServiceKeyRepository implements IServiceKeyRepository {
+    private readonly db;
+    constructor(db: PlatformDb);
+    generate(tenantId: string, instanceId: string): Promise<string>;
+    resolve(rawKey: string): Promise<GatewayTenant | null>;
+    revokeByInstance(instanceId: string): Promise<void>;
+    revokeByTenant(tenantId: string): Promise<void>;
+}

package/dist/gateway/service-key-repository.js

@@ -0,0 +1,64 @@
+/**
+ * Gateway service key repository.
+ *
+ * Stores SHA-256 hashes of per-instance service keys used to authenticate
+ * tenant containers against the metered inference gateway. Raw keys are
+ * NEVER stored — only hashes.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { and, eq, isNull } from "drizzle-orm";
+import { gatewayServiceKeys } from "../db/schema/gateway-service-keys.js";
+/** Hash a raw key for storage/lookup. */
+function hashKey(raw) {
+    return createHash("sha256").update(raw).digest("hex");
+}
+export class DrizzleServiceKeyRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async generate(tenantId, instanceId) {
+        const raw = randomBytes(32).toString("hex");
+        const hash = hashKey(raw);
+        const id = randomBytes(16).toString("hex");
+        await this.db.insert(gatewayServiceKeys).values({
+            id,
+            keyHash: hash,
+            tenantId,
+            instanceId,
+            createdAt: Date.now(),
+        });
+        return raw;
+    }
+    async resolve(rawKey) {
+        const hash = hashKey(rawKey);
+        const rows = await this.db
+            .select({
+            tenantId: gatewayServiceKeys.tenantId,
+            instanceId: gatewayServiceKeys.instanceId,
+        })
+            .from(gatewayServiceKeys)
+            .where(and(eq(gatewayServiceKeys.keyHash, hash), isNull(gatewayServiceKeys.revokedAt)))
+            .limit(1);
+        const row = rows[0];
+        if (!row)
+            return null;
+        return {
+            id: row.tenantId,
+            instanceId: row.instanceId,
+            spendLimits: { maxSpendPerHour: null, maxSpendPerMonth: null },
+        };
+    }
+    async revokeByInstance(instanceId) {
+        await this.db
+            .update(gatewayServiceKeys)
+            .set({ revokedAt: Date.now() })
+            .where(and(eq(gatewayServiceKeys.instanceId, instanceId), isNull(gatewayServiceKeys.revokedAt)));
+    }
+    async revokeByTenant(tenantId) {
+        await this.db
+            .update(gatewayServiceKeys)
+            .set({ revokedAt: Date.now() })
+            .where(and(eq(gatewayServiceKeys.tenantId, tenantId), isNull(gatewayServiceKeys.revokedAt)));
+    }
+}

package/dist/gateway/types.d.ts

@@ -5,10 +5,10 @@
  * /v1/... endpoints using WOPR service keys. The gateway authenticates,
  * budget-checks, proxies to upstream providers, meters usage, and responds.
  */
-import type { ICreditLedger } from "@wopr-network/platform-core/credits";
+import type { ILedger } from "@wopr-network/platform-core/credits";
 import type { MeterEmitter } from "@wopr-network/platform-core/metering";
 import type { IRateLimitRepository } from "../api/rate-limit-repository.js";
-import type { BudgetChecker, SpendLimits } from "../monetization/budget/budget-checker.js";
+import type { IBudgetChecker, SpendLimits } from "../monetization/budget/budget-checker.js";
 import type { CapabilityRateLimitConfig } from "./capability-rate-limit.js";
 import type { CircuitBreakerConfig } from "./circuit-breaker.js";
 import type { ICircuitBreakerRepository } from "./circuit-breaker-repository.js";
@@ -101,9 +101,9 @@ export interface GatewayConfig {
     /** MeterEmitter instance for usage tracking */
     meter: MeterEmitter;
     /** BudgetChecker instance for pre-call budget validation */
-    budgetChecker: BudgetChecker;
+    budgetChecker: IBudgetChecker;
     /** CreditLedger instance for deducting credits after proxy calls (optional — if absent, credit deduction is skipped) */
-    creditLedger?: ICreditLedger;
+    creditLedger?: ILedger;
     /** URL to direct users to when they need to add credits (default: "/dashboard/credits") */
     topUpUrl?: string;
     /** Maximum negative credit balance (in cents) before hard-stop. Default: 50 (-$0.50). */
@@ -119,7 +119,7 @@ export interface GatewayConfig {
     /** Optional cached rate lookup for model-specific token pricing (WOP-646) */
     rateLookupFn?: import("./rate-lookup.js").SellRateLookupFn;
     /** Function to resolve a service key to a tenant */
-    resolveServiceKey: (key: string) => GatewayTenant | null;
+    resolveServiceKey: (key: string) => GatewayTenant | null | Promise<GatewayTenant | null>;
     /** Base URL for Twilio webhook signature verification (e.g., https://api.wopr.network/v1). Required for Twilio/Telnyx webhook endpoints. */
     webhookBaseUrl?: string;
     /** Resolve a tenant from an inbound webhook request (e.g., from a tenantId URL path param). Required when webhookBaseUrl is set. */

package/dist/metering/reconciliation-cron.test.js

@@ -1,7 +1,7 @@
 import crypto from "node:crypto";
 import { afterAll, beforeAll, beforeEach, describe, expect, it, vi } from "vitest";
 import { Credit } from "../credits/credit.js";
-import { CreditLedger } from "../credits/credit-ledger.js";
+import { DrizzleLedger } from "../credits/ledger.js";
 import { usageSummaries } from "../db/schema/meter-events.js";
 import { createTestDb, truncateAllTables } from "../test/db.js";
 import { runReconciliation } from "./reconciliation-cron.js";
@@ -21,7 +21,7 @@ describe("runReconciliation", () => {
         const t = await createTestDb();
         pool = t.pool;
         db = t.db;
-        ledger = new CreditLedger(db);
+        ledger = new DrizzleLedger(db);
         usageSummaryRepo = new DrizzleUsageSummaryRepository(db);
         adapterUsageRepo = new DrizzleAdapterUsageRepository(db);
     });
@@ -30,6 +30,7 @@ describe("runReconciliation", () => {
     });
     beforeEach(async () => {
         await truncateAllTables(pool);
+        await ledger.seedSystemAccounts();
     });
     /** Insert a usage_summaries row directly. */
     async function insertSummary(opts) {
@@ -57,7 +58,7 @@ describe("runReconciliation", () => {
         const charge = Credit.fromCents(50);
         await insertSummary({ tenant: "t1", totalCharge: charge.toRaw() });
         await ledger.credit("t1", Credit.fromCents(500), "purchase");
-        await ledger.debit("t1", charge, "adapter_usage", "chat usage");
+        await ledger.debit("t1", charge, "adapter_usage", { description: "chat usage" });
         const result = await runReconciliation({ usageSummaryRepo, adapterUsageRepo, targetDate: TODAY });
         expect(result.tenantsChecked).toBe(1);
         expect(result.discrepancies).toEqual([]);
@@ -65,7 +66,7 @@ describe("runReconciliation", () => {
     it("detects drift when metered charge exceeds ledger debit", async () => {
         await insertSummary({ tenant: "t1", totalCharge: Credit.fromCents(100).toRaw() });
         await ledger.credit("t1", Credit.fromCents(500), "purchase");
-        await ledger.debit("t1", Credit.fromCents(80), "adapter_usage", "chat usage");
+        await ledger.debit("t1", Credit.fromCents(80), "adapter_usage", { description: "chat usage" });
         const result = await runReconciliation({ usageSummaryRepo, adapterUsageRepo, targetDate: TODAY });
         expect(result.tenantsChecked).toBe(1);
         expect(result.discrepancies).toHaveLength(1);
@@ -91,7 +92,7 @@ describe("runReconciliation", () => {
         await insertSummary({ tenant: "t1", totalCharge: Credit.fromCents(20).toRaw() });
         await ledger.credit("t1", Credit.fromCents(500), "purchase");
         // Debit as bot_runtime — should NOT count toward reconciliation
-        await ledger.debit("t1", Credit.fromCents(20), "bot_runtime", "daily runtime");
+        await ledger.debit("t1", Credit.fromCents(20), "bot_runtime", { description: "daily runtime" });
         const result = await runReconciliation({ usageSummaryRepo, adapterUsageRepo, targetDate: TODAY });
         // Metered 20c, ledger adapter_usage = 0 => drift = 20c
         expect(result.discrepancies).toHaveLength(1);
@@ -119,11 +120,11 @@ describe("runReconciliation", () => {
         // t1: balanced
         await insertSummary({ tenant: "t1", totalCharge: Credit.fromCents(50).toRaw() });
         await ledger.credit("t1", Credit.fromCents(500), "purchase");
-        await ledger.debit("t1", Credit.fromCents(50), "adapter_usage", "chat");
+        await ledger.debit("t1", Credit.fromCents(50), "adapter_usage", { description: "chat" });
         // t2: drifted
         await insertSummary({ tenant: "t2", totalCharge: Credit.fromCents(100).toRaw() });
         await ledger.credit("t2", Credit.fromCents(500), "purchase");
-        await ledger.debit("t2", Credit.fromCents(60), "adapter_usage", "chat");
+        await ledger.debit("t2", Credit.fromCents(60), "adapter_usage", { description: "chat" });
         const result = await runReconciliation({ usageSummaryRepo, adapterUsageRepo, targetDate: TODAY });
         expect(result.tenantsChecked).toBe(2);
         expect(result.discrepancies).toHaveLength(1);
@@ -154,7 +155,7 @@ describe("runReconciliation", () => {
         // Metered 50c but debited 80c (over-billed)
         await insertSummary({ tenant: "t1", totalCharge: Credit.fromCents(50).toRaw() });
         await ledger.credit("t1", Credit.fromCents(500), "purchase");
-        await ledger.debit("t1", Credit.fromCents(80), "adapter_usage", "chat usage");
+        await ledger.debit("t1", Credit.fromCents(80), "adapter_usage", { description: "chat usage" });
         const result = await runReconciliation({ usageSummaryRepo, adapterUsageRepo, targetDate: TODAY });
         expect(result.discrepancies).toHaveLength(1);
         expect(result.discrepancies[0].driftRaw).toBe(Credit.fromCents(-30).toRaw());

package/dist/metering/reconciliation-repository.js

@@ -1,5 +1,5 @@
 import { and, eq, gte, lt, ne, sql } from "drizzle-orm";
-import { creditTransactions } from "../db/schema/credits.js";
+import { journalEntries, journalLines } from "../db/schema/ledger.js";
 import { usageSummaries } from "../db/schema/meter-events.js";
 export class DrizzleUsageSummaryRepository {
     db;
@@ -25,19 +25,21 @@ export class DrizzleAdapterUsageRepository {
         this.db = db;
     }
     async getAggregatedAdapterUsageDebits(startIso, endIso) {
+        // Sum the debit-side journal line amounts for adapter_usage entries.
+        // In double-entry: DR tenant liability (2000:<tenantId>), CR revenue:adapter_usage (4010).
+        // The debit line on the tenant account represents the charge amount.
         const rows = await this.db
             .select({
-            tenantId: creditTransactions.tenantId,
-            // amount_credits stores negative values for debits; ABS gives the raw positive debit amount.
-            // Use the raw column name in sql to bypass the custom creditColumn type serializer.
-            // raw SQL: Drizzle cannot express ABS with COALESCE and SUM
-            totalDebitRaw: sql `COALESCE(SUM(ABS(amount_credits)), 0)`,
+            tenantId: journalEntries.tenantId,
+            // raw SQL: Drizzle cannot express COALESCE with SUM aggregation
+            totalDebitRaw: sql `COALESCE(SUM(${journalLines.amount}), 0)`,
         })
-            .from(creditTransactions)
-            .where(and(eq(creditTransactions.type, "adapter_usage"), 
+            .from(journalLines)
+            .innerJoin(journalEntries, eq(journalEntries.id, journalLines.journalEntryId))
+            .where(and(eq(journalEntries.entryType, "adapter_usage"), eq(journalLines.side, "debit"), 
         // raw SQL: Drizzle cannot express timestamptz cast for text column date comparison
-        sql `${creditTransactions.createdAt}::timestamptz >= ${startIso}::timestamptz`, sql `${creditTransactions.createdAt}::timestamptz < ${endIso}::timestamptz`))
-            .groupBy(creditTransactions.tenantId);
+        sql `${journalEntries.postedAt}::timestamptz >= ${startIso}::timestamptz`, sql `${journalEntries.postedAt}::timestamptz < ${endIso}::timestamptz`))
+            .groupBy(journalEntries.tenantId);
         return rows.map((r) => ({ tenantId: r.tenantId, totalDebitRaw: Number(r.totalDebitRaw) }));
     }
 }

package/dist/metering/reconciliation-repository.test.js

@@ -1,7 +1,7 @@
 import crypto from "node:crypto";
 import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
 import { Credit } from "../credits/credit.js";
-import { CreditLedger } from "../credits/credit-ledger.js";
+import { DrizzleLedger } from "../credits/ledger.js";
 import { createTestDb, seedUsageSummary, truncateAllTables } from "../test/db.js";
 import { DrizzleAdapterUsageRepository, DrizzleUsageSummaryRepository } from "./reconciliation-repository.js";
 let pool;
@@ -108,7 +108,8 @@ describe("DrizzleAdapterUsageRepository", () => {
     beforeEach(async () => {
         await truncateAllTables(pool);
         repo = new DrizzleAdapterUsageRepository(db);
-        ledger = new CreditLedger(db);
+        ledger = new DrizzleLedger(db);
+        await ledger.seedSystemAccounts();
     });
     it("returns empty array when no adapter_usage debits exist", async () => {
         const today = new Date().toISOString().slice(0, 10);
@@ -121,9 +122,9 @@ describe("DrizzleAdapterUsageRepository", () => {
         // Fund tenants
         await ledger.credit("t1", Credit.fromCents(1000), "purchase");
         await ledger.credit("t2", Credit.fromCents(1000), "purchase");
-        await ledger.debit("t1", Credit.fromCents(30), "adapter_usage", "t1-debit-1");
-        await ledger.debit("t1", Credit.fromCents(20), "adapter_usage", "t1-debit-2");
-        await ledger.debit("t2", Credit.fromCents(50), "adapter_usage", "t2-debit-1");
+        await ledger.debit("t1", Credit.fromCents(30), "adapter_usage", { description: "t1-debit-1" });
+        await ledger.debit("t1", Credit.fromCents(20), "adapter_usage", { description: "t1-debit-2" });
+        await ledger.debit("t2", Credit.fromCents(50), "adapter_usage", { description: "t2-debit-1" });
         // Query window covering today
         const today = new Date().toISOString().slice(0, 10);
         const startIso = `${today}T00:00:00Z`;
@@ -137,8 +138,8 @@ describe("DrizzleAdapterUsageRepository", () => {
     });
     it("excludes non-adapter_usage debit types", async () => {
         await ledger.credit("t1", Credit.fromCents(1000), "purchase");
-        await ledger.debit("t1", Credit.fromCents(30), "adapter_usage", "adapter debit");
-        await ledger.debit("t1", Credit.fromCents(20), "bot_runtime", "runtime debit");
+        await ledger.debit("t1", Credit.fromCents(30), "adapter_usage", { description: "adapter debit" });
+        await ledger.debit("t1", Credit.fromCents(20), "bot_runtime", { description: "runtime debit" });
         const today = new Date().toISOString().slice(0, 10);
         const startIso = `${today}T00:00:00Z`;
         const endIso = new Date(new Date(startIso).getTime() + 86400000).toISOString();
@@ -148,7 +149,7 @@ describe("DrizzleAdapterUsageRepository", () => {
     });
     it("excludes credit transactions (positive amounts are not debits)", async () => {
         await ledger.credit("t1", Credit.fromCents(1000), "purchase");
-        await ledger.debit("t1", Credit.fromCents(10), "adapter_usage", "real debit");
+        await ledger.debit("t1", Credit.fromCents(10), "adapter_usage", { description: "real debit" });
         const today = new Date().toISOString().slice(0, 10);
         const startIso = `${today}T00:00:00Z`;
         const endIso = new Date(new Date(startIso).getTime() + 86400000).toISOString();