@wopr-network/platform-core 1.39.7 → 1.40.0

package/dist/db/schema/tenants.js

@@ -4,7 +4,7 @@ export const tenants = pgTable("tenants", {
     id: text("id").primaryKey(), // nanoid or crypto.randomUUID()
     name: text("name").notNull(),
     slug: text("slug").unique(),
-    type: text("type").notNull(), // "personal" | "org"
+    type: text("type").notNull(), // "personal" | "org" | "platform_service"
     ownerId: text("owner_id").notNull(), // user who created it
     billingEmail: text("billing_email"),
     createdAt: bigint("created_at", { mode: "number" })
@@ -14,5 +14,5 @@ export const tenants = pgTable("tenants", {
     index("idx_tenants_slug").on(table.slug),
     index("idx_tenants_owner").on(table.ownerId),
     index("idx_tenants_type").on(table.type),
-    check("chk_tenants_type", sql `${table.type} IN ('personal', 'org')`),
+    check("chk_tenants_type", sql `${table.type} IN ('personal', 'org', 'platform_service')`),
 ]);

package/dist/db/seed-platform-service-tenant.d.ts

@@ -0,0 +1,6 @@
+import type { DrizzleDb } from "./index.js";
+export interface PlatformServiceSeedResult {
+    tenantId: string;
+    serviceKey: string | null;
+}
+export declare function seedPlatformServiceTenant(db: DrizzleDb): Promise<PlatformServiceSeedResult>;

package/dist/db/seed-platform-service-tenant.js

@@ -0,0 +1,42 @@
+/**
+ * Idempotent seed: creates the holyship-platform internal billing tenant
+ * with a stable service key for platform-to-gateway LLM billing.
+ *
+ * Safe to call on every boot — skips if the tenant already exists.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { eq } from "drizzle-orm";
+import { gatewayServiceKeys } from "./schema/gateway-service-keys.js";
+import { tenants } from "./schema/tenants.js";
+const PLATFORM_TENANT_ID = "holyship-platform";
+const PLATFORM_TENANT_SLUG = "holyship-platform";
+const PLATFORM_INSTANCE_ID = "holyship-platform-internal";
+export async function seedPlatformServiceTenant(db) {
+    // Check if tenant already exists
+    const existing = await db.select({ id: tenants.id }).from(tenants).where(eq(tenants.id, PLATFORM_TENANT_ID)).limit(1);
+    if (existing.length > 0) {
+        return { tenantId: PLATFORM_TENANT_ID, serviceKey: null };
+    }
+    // Create the platform_service tenant
+    await db.insert(tenants).values({
+        id: PLATFORM_TENANT_ID,
+        name: "Holy Ship Platform",
+        slug: PLATFORM_TENANT_SLUG,
+        type: "platform_service",
+        ownerId: "system",
+        billingEmail: null,
+        createdAt: Date.now(),
+    });
+    // Generate a service key and store its hash
+    const rawKey = `sk-hs-${randomBytes(24).toString("hex")}`;
+    const keyHash = createHash("sha256").update(rawKey).digest("hex");
+    await db.insert(gatewayServiceKeys).values({
+        id: crypto.randomUUID(),
+        keyHash,
+        tenantId: PLATFORM_TENANT_ID,
+        instanceId: PLATFORM_INSTANCE_ID,
+        createdAt: Date.now(),
+        revokedAt: null,
+    });
+    return { tenantId: PLATFORM_TENANT_ID, serviceKey: rawKey };
+}

package/drizzle/migrations/0013_platform_service_tenant_type.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "tenants" DROP CONSTRAINT "chk_tenants_type";
+--> statement-breakpoint
+ALTER TABLE "tenants" ADD CONSTRAINT "chk_tenants_type" CHECK ("tenants"."type" IN ('personal', 'org', 'platform_service'));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wopr-network/platform-core",
-  "version": "1.39.7",
+  "version": "1.40.0",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/db/schema/tenants.ts

@@ -7,7 +7,7 @@ export const tenants = pgTable(
     id: text("id").primaryKey(), // nanoid or crypto.randomUUID()
     name: text("name").notNull(),
     slug: text("slug").unique(),
-    type: text("type").notNull(), // "personal" | "org"
+    type: text("type").notNull(), // "personal" | "org" | "platform_service"
     ownerId: text("owner_id").notNull(), // user who created it
     billingEmail: text("billing_email"),
     createdAt: bigint("created_at", { mode: "number" })
@@ -18,6 +18,6 @@ export const tenants = pgTable(
     index("idx_tenants_slug").on(table.slug),
     index("idx_tenants_owner").on(table.ownerId),
     index("idx_tenants_type").on(table.type),
-    check("chk_tenants_type", sql`${table.type} IN ('personal', 'org')`),
+    check("chk_tenants_type", sql`${table.type} IN ('personal', 'org', 'platform_service')`),
   ],
 );

package/src/db/seed-platform-service-tenant.ts

@@ -0,0 +1,55 @@
+/**
+ * Idempotent seed: creates the holyship-platform internal billing tenant
+ * with a stable service key for platform-to-gateway LLM billing.
+ *
+ * Safe to call on every boot — skips if the tenant already exists.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { eq } from "drizzle-orm";
+import type { DrizzleDb } from "./index.js";
+import { gatewayServiceKeys } from "./schema/gateway-service-keys.js";
+import { tenants } from "./schema/tenants.js";
+
+const PLATFORM_TENANT_ID = "holyship-platform";
+const PLATFORM_TENANT_SLUG = "holyship-platform";
+const PLATFORM_INSTANCE_ID = "holyship-platform-internal";
+
+export interface PlatformServiceSeedResult {
+  tenantId: string;
+  serviceKey: string | null; // null if tenant + key already existed
+}
+
+export async function seedPlatformServiceTenant(db: DrizzleDb): Promise<PlatformServiceSeedResult> {
+  // Check if tenant already exists
+  const existing = await db.select({ id: tenants.id }).from(tenants).where(eq(tenants.id, PLATFORM_TENANT_ID)).limit(1);
+
+  if (existing.length > 0) {
+    return { tenantId: PLATFORM_TENANT_ID, serviceKey: null };
+  }
+
+  // Create the platform_service tenant
+  await db.insert(tenants).values({
+    id: PLATFORM_TENANT_ID,
+    name: "Holy Ship Platform",
+    slug: PLATFORM_TENANT_SLUG,
+    type: "platform_service",
+    ownerId: "system",
+    billingEmail: null,
+    createdAt: Date.now(),
+  });
+
+  // Generate a service key and store its hash
+  const rawKey = `sk-hs-${randomBytes(24).toString("hex")}`;
+  const keyHash = createHash("sha256").update(rawKey).digest("hex");
+
+  await db.insert(gatewayServiceKeys).values({
+    id: crypto.randomUUID(),
+    keyHash,
+    tenantId: PLATFORM_TENANT_ID,
+    instanceId: PLATFORM_INSTANCE_ID,
+    createdAt: Date.now(),
+    revokedAt: null,
+  });
+
+  return { tenantId: PLATFORM_TENANT_ID, serviceKey: rawKey };
+}