aweshare 0.2.0

package/apps/hub/dist/cli.js

@@ -0,0 +1,243 @@
+#!/usr/bin/env node
+import { readFileSync } from 'node:fs';
+import { ensureDataDir, readAdminToken, resolvePaths } from './config.js';
+import { createHubServer } from './server.js';
+import { loadOrCreateAdminToken, loadOrCreatePepper } from './tokens.js';
+const VERSION = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
+const USAGE = `aweshare hub — control plane for an aweshare hub
+
+Usage:
+  aweshare hub init                                 create data dir, pepper and admin token
+  aweshare hub serve [--host H] [--port N]          run the hub server
+  aweshare hub token issue --role producer|consumer --name NAME
+  aweshare hub token list
+  aweshare hub token revoke --role producer|consumer --id N
+  aweshare hub grant add --alias ALIAS --consumer NAME [--expires-in 7d|12h|30m|90s]
+  aweshare hub grant remove --alias ALIAS --consumer NAME
+  aweshare hub grant list
+  aweshare hub consumer limits --name NAME            show per-consumer overrides
+  aweshare hub consumer limits --name NAME [--rps N] [--burst N] [--concurrency N]
+                                 [--tpm N] [--max-total-tokens N]
+        set only the keys you pass; unset keys keep the hub-wide defaults.
+        --clear removes all overrides (back to hub-wide defaults).
+  aweshare hub usage [--alias ALIAS] [--limit N]
+
+Environment:
+  AWESHARE_HUB_DATA_DIR   data directory (default ~/.aweshare-hub)
+  AWESHARE_HUB_URL        hub base URL for admin commands (default http://127.0.0.1:8787)
+  AWESHARE_HUB_PORT       listen port for serve (default 8787)`;
+function parseArgs(argv) {
+    const positional = [];
+    const flags = new Map();
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a.startsWith('--')) {
+            const eq = a.indexOf('=');
+            if (eq >= 0) {
+                flags.set(a.slice(2, eq), a.slice(eq + 1));
+            }
+            else if (i + 1 < argv.length && !argv[i + 1].startsWith('--')) {
+                flags.set(a.slice(2), argv[++i]);
+            }
+            else {
+                flags.set(a.slice(2), 'true');
+            }
+        }
+        else {
+            positional.push(a);
+        }
+    }
+    return { positional, flags };
+}
+function fail(message) {
+    console.error(`error: ${message}`);
+    process.exit(1);
+}
+/** Node fetch reports "fetch failed" without the reason; surface the cause. */
+function errorMessage(err) {
+    if (err instanceof Error) {
+        const cause = err.cause;
+        return cause ? `${err.message} (${cause.code ?? cause.message})` : err.message;
+    }
+    return String(err);
+}
+/** Parse a human duration like 90s, 30m, 12h, 7d into milliseconds. */
+function parseDuration(raw) {
+    const m = /^(\d+)([smhd])$/.exec(raw);
+    if (!m)
+        fail(`--expires-in must look like 90s, 30m, 12h or 7d, got '${raw}'`);
+    const unit = { s: 1000, m: 60_000, h: 3_600_000, d: 86_400_000 }[m[2]];
+    return Number(m[1]) * unit;
+}
+/** Thin client for the admin REST API using the server-local admin token. */
+function adminApi() {
+    const paths = resolvePaths();
+    const token = readAdminToken(paths);
+    if (!token)
+        fail(`no admin token at ${paths.adminTokenFile} — run 'aweshare hub init' first`);
+    const base = process.env.AWESHARE_HUB_URL ?? 'http://127.0.0.1:8787';
+    return async function call(method, path, body) {
+        const res = await fetch(`${base}${path}`, {
+            method,
+            headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },
+            body: body === undefined ? undefined : JSON.stringify(body),
+        });
+        const data = (await res.json().catch(() => ({})));
+        if (!res.ok) {
+            const err = data.error;
+            fail(`${res.status} ${err?.message ?? res.statusText}`);
+        }
+        return data;
+    };
+}
+async function main() {
+    const [cmd, ...rest] = process.argv.slice(2);
+    const { positional, flags } = parseArgs(rest);
+    if (cmd === '-v' || cmd === '--version') {
+        console.log(`aweshare hub ${VERSION}`);
+        return;
+    }
+    if (!cmd || cmd === 'help' || cmd === '--help' || cmd === '-h' || flags.get('help') === 'true') {
+        console.log(USAGE);
+        return;
+    }
+    const paths = resolvePaths();
+    switch (cmd) {
+        case 'init': {
+            ensureDataDir(paths);
+            loadOrCreatePepper(paths);
+            const adminToken = loadOrCreateAdminToken(paths);
+            const hub = createHubServer({ paths }); // creates the db schema
+            await hub.close();
+            console.log(`data dir:    ${paths.dataDir}`);
+            console.log(`admin token: ${adminToken}`);
+            console.log('(store it now — this is the only time it is printed)');
+            return;
+        }
+        case 'serve': {
+            const hub = createHubServer({ paths });
+            const host = flags.get('host') ?? hub.config.host;
+            const port = Number(flags.get('port') ?? hub.config.port);
+            if (!Number.isInteger(port) || port < 1 || port > 65535) {
+                fail(`--port must be an integer between 1 and 65535, got '${flags.get('port')}'`);
+            }
+            hub.server.listen(port, host, () => {
+                hub.log.info({ host, port }, 'aweshare hub listening');
+            });
+            return;
+        }
+        case 'token': {
+            const api = adminApi();
+            const sub = positional[0];
+            if (sub === 'issue') {
+                const role = flags.get('role');
+                const name = flags.get('name');
+                if (role !== 'producer' && role !== 'consumer')
+                    fail('--role must be producer or consumer');
+                if (!name)
+                    fail('--name is required');
+                const out = (await api('POST', '/admin/v1/tokens', { role, name }));
+                console.log(out.token);
+                return;
+            }
+            if (sub === 'list') {
+                console.log(JSON.stringify(await api('GET', '/admin/v1/tokens'), null, 2));
+                return;
+            }
+            if (sub === 'revoke') {
+                const role = flags.get('role');
+                const id = flags.get('id');
+                if (role !== 'producer' && role !== 'consumer')
+                    fail('--role must be producer or consumer');
+                if (!id)
+                    fail('--id is required');
+                console.log(JSON.stringify(await api('DELETE', `/admin/v1/tokens/${role}s/${id}`)));
+                return;
+            }
+            fail(`unknown token subcommand: ${sub ?? '(none)'}`);
+            return;
+        }
+        case 'grant': {
+            const api = adminApi();
+            const sub = positional[0];
+            if (sub === 'add') {
+                const alias = flags.get('alias');
+                const consumer = flags.get('consumer');
+                if (!alias || !consumer)
+                    fail('--alias and --consumer are required');
+                const body = { alias, consumer };
+                const expiresIn = flags.get('expires-in');
+                if (expiresIn)
+                    body.expiresAt = new Date(Date.now() + parseDuration(expiresIn)).toISOString();
+                console.log(JSON.stringify(await api('PUT', '/admin/v1/grants', body)));
+                return;
+            }
+            if (sub === 'remove') {
+                const alias = flags.get('alias');
+                const consumer = flags.get('consumer');
+                if (!alias || !consumer)
+                    fail('--alias and --consumer are required');
+                console.log(JSON.stringify(await api('DELETE', `/admin/v1/grants?alias=${encodeURIComponent(alias)}&consumer=${encodeURIComponent(consumer)}`)));
+                return;
+            }
+            if (sub === 'list') {
+                console.log(JSON.stringify(await api('GET', '/admin/v1/grants'), null, 2));
+                return;
+            }
+            fail(`unknown grant subcommand: ${sub ?? '(none)'}`);
+            return;
+        }
+        case 'consumer': {
+            const api = adminApi();
+            const sub = positional[0];
+            if (sub !== 'limits')
+                fail(`unknown consumer subcommand: ${sub ?? '(none)'}`);
+            const name = flags.get('name');
+            if (!name)
+                fail('--name is required');
+            const base = `/admin/v1/consumers/${encodeURIComponent(name)}/limits`;
+            if (flags.get('clear') === 'true') {
+                console.log(JSON.stringify(await api('DELETE', base)));
+                return;
+            }
+            const body = {};
+            for (const [flag, key] of [
+                ['rps', 'rps'],
+                ['burst', 'burst'],
+                ['concurrency', 'maxConcurrent'],
+                ['tpm', 'tpm'],
+                ['max-total-tokens', 'maxTotalTokens'],
+            ]) {
+                const value = flags.get(flag);
+                if (value !== undefined)
+                    body[key] = value;
+            }
+            if (Object.keys(body).length === 0) {
+                console.log(JSON.stringify(await api('GET', base), null, 2));
+                return;
+            }
+            for (const [key, value] of Object.entries(body)) {
+                const n = Number(value);
+                if (!Number.isFinite(n) || n <= 0)
+                    fail(`--${key} must be a positive number, got '${value}'`);
+            }
+            console.log(JSON.stringify(await api('PUT', base, body)));
+            return;
+        }
+        case 'usage': {
+            const api = adminApi();
+            const params = new URLSearchParams();
+            if (flags.get('alias'))
+                params.set('alias', flags.get('alias'));
+            if (flags.get('limit'))
+                params.set('limit', flags.get('limit'));
+            const qs = params.toString();
+            console.log(JSON.stringify(await api('GET', `/admin/v1/usage${qs ? `?${qs}` : ''}`), null, 2));
+            return;
+        }
+        default:
+            fail(`unknown command: ${cmd}\n\n${USAGE}`);
+    }
+}
+main().catch((err) => fail(errorMessage(err)));
+//# sourceMappingURL=cli.js.map

package/apps/hub/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAExE,MAAM,OAAO,GACX,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAG7E,CAAC,OAAO,CAAA;AAET,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;+DAqBiD,CAAA;AAO/D,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAW,CAAA;QAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACzB,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACZ,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;YAC5C,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5E,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAW,CAAC,CAAA;YAC5C,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;AAC9B,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAA;IAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAI,GAA+D,CAAC,KAAK,CAAA;QACpF,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAA;IAChF,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;AACpB,CAAC;AAED,uEAAuE;AACvE,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACrC,IAAI,CAAC,CAAC;QAAE,IAAI,CAAC,yDAAyD,GAAG,GAAG,CAAC,CAAA;IAC7E,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAA0B,CAAC,CAAA;IAC/F,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;AAC5B,CAAC;AAED,6EAA6E;AAC7E,SAAS,QAAQ;IACf,MAAM,KAAK,GAAG,YAAY,EAAE,CAAA;IAC5B,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,qBAAqB,KAAK,CAAC,cAAc,kCAAkC,CAAC,CAAA;IAC7F,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB,CAAA;IACpE,OAAO,KAAK,UAAU,IAAI,CAAC,MAAc,EAAE,IAAY,EAAE,IAAc;QACrE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;YACxC,MAAM;YACN,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjF,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5D,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAA;QAC5E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAyC,CAAA;YAC1D,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC5C,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC7C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAA;QACtC,OAAM;IACR,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAClB,OAAM;IACR,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,EAAE,CAAA;IAE5B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,aAAa,CAAC,KAAK,CAAC,CAAA;YACpB,kBAAkB,CAAC,KAAK,CAAC,CAAA;YACzB,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;YAChD,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA,CAAC,wBAAwB;YAC/D,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;YACjB,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,UAAU,EAAE,CAAC,CAAA;YACzC,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAA;YACnE,OAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAA;YACjD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACxD,IAAI,CAAC,uDAAuD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACnF,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBACjC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAA;YACxD,CAAC,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAA;YACtB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;YACzB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC9B,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,UAAU;oBAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;gBAC3F,IAAI,CAAC,IAAI;oBAAE,IAAI,CAAC,oBAAoB,CAAC,CAAA;gBACrC,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAEjE,CAAA;gBACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBACtB,OAAM;YACR,CAAC;YACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1E,OAAM;YACR,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC9B,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAC1B,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,UAAU;oBAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;gBAC3F,IAAI,CAAC,EAAE;oBAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;gBACjC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,oBAAoB,IAAI,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;gBACnF,OAAM;YACR,CAAC;YACD,IAAI,CAAC,6BAA6B,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAA;YACpD,OAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAA;YACtB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;YACzB,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;gBACtC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;gBACpE,MAAM,IAAI,GAA2B,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;gBACxD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;gBACzC,IAAI,SAAS;oBACX,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;gBAChF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;gBACvE,OAAM;YACR,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;gBACtC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;gBACpE,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,MAAM,GAAG,CACP,QAAQ,EACR,0BAA0B,kBAAkB,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAC/F,CACF,CACF,CAAA;gBACD,OAAM;YACR,CAAC;YACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1E,OAAM;YACR,CAAC;YACD,IAAI,CAAC,6BAA6B,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAA;YACpD,OAAM;QACR,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAA;YACtB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;YACzB,IAAI,GAAG,KAAK,QAAQ;gBAAE,IAAI,CAAC,gCAAgC,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAA;YAC7E,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC9B,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,oBAAoB,CAAC,CAAA;YACrC,MAAM,IAAI,GAAG,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAA;YACrE,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;gBACtD,OAAM;YACR,CAAC;YACD,MAAM,IAAI,GAA2B,EAAE,CAAA;YACvC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACxB,CAAC,KAAK,EAAE,KAAK,CAAC;gBACd,CAAC,OAAO,EAAE,OAAO,CAAC;gBAClB,CAAC,aAAa,EAAE,eAAe,CAAC;gBAChC,CAAC,KAAK,EAAE,KAAK,CAAC;gBACd,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;aAC9B,EAAE,CAAC;gBACX,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAC7B,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAC5C,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC5D,OAAM;YACR,CAAC;YACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;gBACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC/B,IAAI,CAAC,KAAK,GAAG,oCAAoC,KAAK,GAAG,CAAC,CAAA;YAC9D,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;YACzD,OAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAA;YACtB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;YACpC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAW,CAAC,CAAA;YACzE,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAW,CAAC,CAAA;YACzE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;YAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YAC9F,OAAM;QACR,CAAC;QACD;YACE,IAAI,CAAC,oBAAoB,GAAG,OAAO,KAAK,EAAE,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA"}

package/apps/hub/dist/config.d.ts

@@ -0,0 +1,25 @@
+/** Hub runtime directory layout (all state in one place, easy to volume-mount). */
+export interface HubPaths {
+    dataDir: string;
+    dbFile: string;
+    pepperFile: string;
+    adminTokenFile: string;
+}
+export declare function resolvePaths(env?: NodeJS.ProcessEnv): HubPaths;
+export declare function ensureDataDir(paths: HubPaths): void;
+/** Read the admin token created by `hub init`; null if not initialized. */
+export declare function readAdminToken(paths: HubPaths): string | null;
+export declare function hubConfigFromEnv(env?: NodeJS.ProcessEnv): {
+    host: string;
+    port: number;
+    /** Per-consumer token bucket, refilled per second. */
+    consumerRps: number;
+    consumerBurst: number;
+    consumerMaxConcurrent: number;
+    /** No response head within this window -> 504 TICKET_EXPIRED. */
+    headTimeoutMs: number;
+    /** No response bytes within this window after head -> 504 STREAM_IDLE_TIMEOUT. */
+    idleTimeoutMs: number;
+    maxBodyBytes: number;
+};
+export type HubConfig = ReturnType<typeof hubConfigFromEnv>;

package/apps/hub/dist/config.js

@@ -0,0 +1,53 @@
+import { existsSync, mkdirSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+export function resolvePaths(env = process.env) {
+    const dataDir = env.AWESHARE_HUB_DATA_DIR ?? join(homedir(), '.aweshare-hub');
+    return {
+        dataDir,
+        dbFile: join(dataDir, 'hub.db'),
+        pepperFile: join(dataDir, 'pepper'),
+        adminTokenFile: join(dataDir, 'admin-token'),
+    };
+}
+export function ensureDataDir(paths) {
+    if (!existsSync(paths.dataDir)) {
+        mkdirSync(paths.dataDir, { recursive: true, mode: 0o700 });
+    }
+}
+/** Read the admin token created by `hub init`; null if not initialized. */
+export function readAdminToken(paths) {
+    try {
+        return readFileSync(paths.adminTokenFile, 'utf8').trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Parse a positive number env var; garbage values fail fast with the key named. */
+function positiveNumber(env, key, fallback) {
+    const raw = env[key];
+    if (raw === undefined || raw === '')
+        return fallback;
+    const value = Number(raw);
+    if (!Number.isFinite(value) || value <= 0) {
+        throw new Error(`${key} must be a positive number, got '${raw}'`);
+    }
+    return value;
+}
+export function hubConfigFromEnv(env = process.env) {
+    return {
+        host: env.AWESHARE_HUB_HOST ?? '0.0.0.0',
+        port: positiveNumber(env, 'AWESHARE_HUB_PORT', 8787),
+        /** Per-consumer token bucket, refilled per second. */
+        consumerRps: positiveNumber(env, 'AWESHARE_CONSUMER_RPS', 10),
+        consumerBurst: positiveNumber(env, 'AWESHARE_CONSUMER_BURST', 20),
+        consumerMaxConcurrent: positiveNumber(env, 'AWESHARE_CONSUMER_CONCURRENCY', 8),
+        /** No response head within this window -> 504 TICKET_EXPIRED. */
+        headTimeoutMs: positiveNumber(env, 'AWESHARE_HEAD_TIMEOUT_MS', 120_000),
+        /** No response bytes within this window after head -> 504 STREAM_IDLE_TIMEOUT. */
+        idleTimeoutMs: positiveNumber(env, 'AWESHARE_IDLE_TIMEOUT_MS', 300_000),
+        maxBodyBytes: positiveNumber(env, 'AWESHARE_MAX_BODY_BYTES', 32 * 1024 * 1024),
+    };
+}
+//# sourceMappingURL=config.js.map

package/apps/hub/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAUhC,MAAM,UAAU,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,qBAAqB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAA;IAC7E,OAAO;QACL,OAAO;QACP,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC/B,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;QACnC,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC;KAC7C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAe;IAC3C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,KAAe;IAC5C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,cAAc,CAAC,GAAsB,EAAE,GAAW,EAAE,QAAgB;IAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;IACpB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAA;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,oCAAoC,GAAG,GAAG,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACxC,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,CAAC;QACpD,sDAAsD;QACtD,WAAW,EAAE,cAAc,CAAC,GAAG,EAAE,uBAAuB,EAAE,EAAE,CAAC;QAC7D,aAAa,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,EAAE,EAAE,CAAC;QACjE,qBAAqB,EAAE,cAAc,CAAC,GAAG,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC9E,iEAAiE;QACjE,aAAa,EAAE,cAAc,CAAC,GAAG,EAAE,0BAA0B,EAAE,OAAO,CAAC;QACvE,kFAAkF;QAClF,aAAa,EAAE,cAAc,CAAC,GAAG,EAAE,0BAA0B,EAAE,OAAO,CAAC;QACvE,YAAY,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;KAC/E,CAAA;AACH,CAAC"}

package/apps/hub/dist/consumer.d.ts

@@ -0,0 +1,18 @@
+import type Database from 'better-sqlite3';
+import type { Logger } from 'pino';
+import type { AuthContext } from './auth.js';
+import type { HubConfig } from './config.js';
+import { type Router } from './http.js';
+import type { AliasSlots, ConsumerLimiter, TokenWindow } from './limiter.js';
+import type { Tunnel } from './tunnel.js';
+export interface ConsumerDeps {
+    db: Database.Database;
+    auth: AuthContext;
+    config: HubConfig;
+    tunnel: Tunnel;
+    limiter: ConsumerLimiter;
+    tpm: TokenWindow;
+    slots: AliasSlots;
+    log: Logger;
+}
+export declare function registerConsumerRoutes(router: Router, deps: ConsumerDeps): void;

package/apps/hub/dist/consumer.js

@@ -0,0 +1,157 @@
+import { parseAlias } from 'aweshare-protocol';
+import { requireConsumer } from './auth.js';
+import { getGrant, getOffering, insertUsageEvent, listOfferingsForConsumer, sumTokensUsed, } from './db.js';
+import { HttpError, readBody, sendError, sendJson } from './http.js';
+import { resolveLimits, safeParseLimits } from './limits.js';
+import { UsageExtractor } from './meter.js';
+import { sanitizeTunnelRequestHeaders, sanitizeUpstreamResponseHeaders } from './sanitize.js';
+export function registerConsumerRoutes(router, deps) {
+    router.add('POST', '/v1/chat/completions', (ctx) => handleInference(ctx, deps, 'openai', '/chat/completions'));
+    router.add('POST', '/v1/messages', (ctx) => handleInference(ctx, deps, 'anthropic', '/messages'));
+    router.add('POST', '/v1/responses', (ctx) => handleInference(ctx, deps, 'responses', '/responses'));
+    router.add('GET', '/v1/models', (ctx) => handleModels(ctx, deps));
+}
+/** The consumer endpoint (and tunnel path) each protocol speaks. */
+const ENDPOINT_FOR_PROTOCOL = {
+    openai: '/v1/chat/completions',
+    anthropic: '/v1/messages',
+    responses: '/v1/responses',
+};
+async function handleInference(ctx, deps, protocol, path) {
+    const { db, auth, config, tunnel, limiter, tpm, slots } = deps;
+    const { row: consumer } = requireConsumer(ctx.req, auth);
+    const raw = await readBody(ctx.req, config.maxBodyBytes);
+    let body;
+    try {
+        body = JSON.parse(raw.toString('utf8') || '{}');
+    }
+    catch {
+        throw new HttpError(400, 'INVALID_JSON', 'request body is not valid JSON');
+    }
+    const model = body.model;
+    const alias = typeof model === 'string' ? parseAlias(model) : null;
+    if (!alias || typeof model !== 'string') {
+        throw new HttpError(400, 'PROTOCOL_MISMATCH', `model must be an alias like namespace/name, got: ${String(model)}`);
+    }
+    const offering = getOffering(db, model);
+    if (!offering)
+        throw new HttpError(404, 'ALIAS_NOT_FOUND', `unknown model alias: ${model}`);
+    if (offering.protocol !== protocol) {
+        throw new HttpError(400, 'PROTOCOL_MISMATCH', `alias ${model} speaks ${offering.protocol}; use the ${ENDPOINT_FOR_PROTOCOL[offering.protocol]} endpoint`);
+    }
+    const grant = getGrant(db, offering.producer_id, consumer.id, model);
+    if (!grant) {
+        throw new HttpError(403, 'NOT_GRANTED', `alias ${model} is not granted to consumer ${consumer.name}`);
+    }
+    if (grant.expires_at !== null && grant.expires_at <= new Date().toISOString()) {
+        throw new HttpError(403, 'GRANT_EXPIRED', `grant for ${model} expired at ${grant.expires_at}`);
+    }
+    const session = tunnel.getSession(offering.producer_id);
+    if (!session)
+        throw new HttpError(503, 'PRODUCER_OFFLINE', `producer of ${model} is offline`);
+    if (session.backendStatus.get(offering.backend_id)?.state === 'degraded') {
+        throw new HttpError(503, 'BACKEND_DEGRADED', `backend for ${model} is degraded`);
+    }
+    const limits = resolveLimits(safeParseLimits(consumer.config), config);
+    if (limits.maxTotalTokens !== null && sumTokensUsed(db, consumer.id) >= limits.maxTotalTokens) {
+        throw new HttpError(429, 'QUOTA_EXCEEDED', `consumer ${consumer.name} reached its total token budget (${limits.maxTotalTokens})`);
+    }
+    if (limits.tpm !== null && !tpm.allow(consumer.id, limits.tpm)) {
+        throw new HttpError(429, 'RATE_LIMITED', `consumer ${consumer.name} exceeded ${limits.tpm} TPM`);
+    }
+    const limited = limiter.admit(consumer.id, limits);
+    if (limited)
+        throw new HttpError(429, limited, 'consumer rate limit exceeded');
+    if (!slots.acquire(model, offering.max_concurrency)) {
+        limiter.release(consumer.id);
+        throw new HttpError(429, 'PRODUCER_MAX_CONCURRENCY', `alias ${model} is at its max concurrency (${offering.max_concurrency})`);
+    }
+    // route on the public alias, but hand the producer the real upstream model id
+    body.model = offering.upstream_model;
+    const outBody = Buffer.from(JSON.stringify(body), 'utf8');
+    const query = {};
+    for (const [key, value] of ctx.query)
+        query[key] = value;
+    const relay = tunnel.openRequest(session, {
+        protocol,
+        backendId: offering.backend_id,
+        method: 'POST',
+        path,
+        query: Object.keys(query).length > 0 ? query : null,
+        headers: sanitizeTunnelRequestHeaders(ctx.req),
+        body: outBody,
+    });
+    /** Release admission + write the usage row; exactly once per exit path. */
+    const finalize = (result, usage) => {
+        limiter.release(consumer.id);
+        slots.release(model);
+        const counts = usage?.finish();
+        if (counts) {
+            tpm.record(consumer.id, (counts.promptTokens ?? 0) + (counts.completionTokens ?? 0));
+        }
+        insertUsageEvent(db, {
+            consumer_id: consumer.id,
+            producer_id: offering.producer_id,
+            alias: model,
+            upstream_model: offering.upstream_model,
+            protocol,
+            streaming: usage?.streaming ? 1 : 0,
+            status: result.status,
+            error_code: result.errorCode,
+            duration_ms: result.durationMs,
+            bytes_in: outBody.byteLength,
+            bytes_out: result.bytesOut,
+            prompt_tokens: counts?.promptTokens ?? null,
+            completion_tokens: counts?.completionTokens ?? null,
+        });
+    };
+    let usage = null;
+    relay.on('chunk', (bytes) => {
+        usage?.onChunk(bytes);
+        ctx.res.write(bytes);
+    });
+    relay.on('end', () => ctx.res.end());
+    relay.on('error', (failure) => {
+        if (!ctx.res.headersSent) {
+            sendError(ctx.res, new HttpError(failure.status, failure.code, failure.message), relay.requestId);
+        }
+        else {
+            ctx.res.destroy();
+        }
+    });
+    ctx.res.on('close', () => {
+        if (!ctx.res.writableEnded)
+            relay.cancel();
+    });
+    let head;
+    try {
+        await relay.dispatch();
+        head = await relay.waitHead();
+    }
+    catch (failure) {
+        const f = failure;
+        if (!ctx.res.headersSent) {
+            sendError(ctx.res, new HttpError(f.status, f.code, f.message), relay.requestId);
+        }
+        finalize(await relay.waitFinished(), usage);
+        return;
+    }
+    ctx.res.writeHead(head.status, sanitizeUpstreamResponseHeaders(head.headers));
+    usage = new UsageExtractor(protocol, head.headers['content-type']);
+    relay.startStreaming();
+    finalize(await relay.waitFinished(), usage);
+}
+function handleModels(ctx, deps) {
+    const { row: consumer } = requireConsumer(ctx.req, deps.auth);
+    const rows = listOfferingsForConsumer(deps.db, consumer.id);
+    const data = rows.map((o) => ({
+        id: o.alias,
+        object: 'model',
+        created: Math.floor(Date.parse(o.updated_at) / 1000) || 0,
+        owned_by: o.alias.split('/')[0],
+        protocol: o.protocol,
+        status: deps.tunnel.offeringStatus(o),
+    }));
+    sendJson(ctx.res, 200, { object: 'list', data });
+}
+//# sourceMappingURL=consumer.js.map

package/apps/hub/dist/consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer.js","sourceRoot":"","sources":["../src/consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAI7D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EACL,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,wBAAwB,EACxB,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,SAAS,EAAkC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEpG,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,MAAM,eAAe,CAAA;AAc7F,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,IAAkB;IACvE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE,CAAC,GAAG,EAAE,EAAE,CACjD,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAC1D,CAAA;IACD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;IACjG,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CAC1C,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CACtD,CAAA;IACD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;AACnE,CAAC;AAED,oEAAoE;AACpE,MAAM,qBAAqB,GAA6B;IACtD,MAAM,EAAE,sBAAsB;IAC9B,SAAS,EAAE,cAAc;IACzB,SAAS,EAAE,eAAe;CAC3B,CAAA;AAED,KAAK,UAAU,eAAe,CAC5B,GAAiB,EACjB,IAAkB,EAClB,QAAkB,EAClB,IAAY;IAEZ,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IAC9D,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAExD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;IACxD,IAAI,IAA6B,CAAA;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAA4B,CAAA;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,gCAAgC,CAAC,CAAA;IAC5E,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACxB,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAClE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,mBAAmB,EACnB,oDAAoD,MAAM,CAAC,KAAK,CAAC,EAAE,CACpE,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IACvC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iBAAiB,EAAE,wBAAwB,KAAK,EAAE,CAAC,CAAA;IAC3F,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,mBAAmB,EACnB,SAAS,KAAK,WAAW,QAAQ,CAAC,QAAQ,aAAa,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAC3G,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IACpE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,aAAa,EACb,SAAS,KAAK,+BAA+B,QAAQ,CAAC,IAAI,EAAE,CAC7D,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,aAAa,KAAK,eAAe,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,kBAAkB,EAAE,eAAe,KAAK,aAAa,CAAC,CAAA;IAC7F,IAAI,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;QACzE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,kBAAkB,EAAE,eAAe,KAAK,cAAc,CAAC,CAAA;IAClF,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;IACtE,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9F,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,gBAAgB,EAChB,YAAY,QAAQ,CAAC,IAAI,oCAAoC,MAAM,CAAC,cAAc,GAAG,CACtF,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,YAAY,QAAQ,CAAC,IAAI,aAAa,MAAM,CAAC,GAAG,MAAM,CAAC,CAAA;IAClG,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IAClD,IAAI,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAA;IAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC5B,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,0BAA0B,EAC1B,SAAS,KAAK,+BAA+B,QAAQ,CAAC,eAAe,GAAG,CACzE,CAAA;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;IACzD,MAAM,KAAK,GAA2B,EAAE,CAAA;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK;QAAE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAExD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE;QACxC,QAAQ;QACR,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACnD,OAAO,EAAE,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9C,IAAI,EAAE,OAAO;KACd,CAAC,CAAA;IAEF,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,CAAC,MAAmB,EAAE,KAA4B,EAAE,EAAE;QACrE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACpB,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,EAAE,CAAA;QAC9B,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAA;QACtF,CAAC;QACD,gBAAgB,CAAC,EAAE,EAAE;YACnB,WAAW,EAAE,QAAQ,CAAC,EAAE;YACxB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,KAAK,EAAE,KAAK;YACZ,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,QAAQ;YACR,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,UAAU;YAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,aAAa,EAAE,MAAM,EAAE,YAAY,IAAI,IAAI;YAC3C,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,IAAI,IAAI;SACpD,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,IAAI,KAAK,GAA0B,IAAI,CAAA;IACvC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAiB,EAAE,EAAE;QACtC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QACrB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IACF,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAA;IACpC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,OAA0D,EAAE,EAAE;QAC/E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACzB,SAAS,CACP,GAAG,CAAC,GAAG,EACP,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,EAC5D,KAAK,CAAC,SAAS,CAChB,CAAA;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QACnB,CAAC;IACH,CAAC,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa;YAAE,KAAK,CAAC,MAAM,EAAE,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,IAAI,IAAyD,CAAA;IAC7D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAA;QACtB,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAA;IAC/B,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,OAA4D,CAAA;QACtE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACzB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;QACjF,CAAC;QACD,QAAQ,CAAC,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,CAAC,CAAA;QAC3C,OAAM;IACR,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAC7E,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAA;IAClE,KAAK,CAAC,cAAc,EAAE,CAAA;IAEtB,QAAQ,CAAC,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,GAAiB,EAAE,IAAkB;IACzD,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5B,EAAE,EAAE,CAAC,CAAC,KAAK;QACX,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACzD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/B,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;KACtC,CAAC,CAAC,CAAA;IACH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AAClD,CAAC"}

package/apps/hub/dist/db.d.ts

@@ -0,0 +1,91 @@
+import type { Offering, Protocol } from 'aweshare-protocol';
+import Database from 'better-sqlite3';
+export type ProducerRow = {
+    id: number;
+    name: string;
+    token_hash: string;
+    created_at: string;
+    revoked_at: string | null;
+};
+export type ConsumerRow = {
+    id: number;
+    name: string;
+    token_hash: string;
+    created_at: string;
+    revoked_at: string | null;
+    config: string | null;
+};
+export type OfferingRow = {
+    alias: string;
+    producer_id: number;
+    protocol: Protocol;
+    upstream_model: string;
+    backend_id: string;
+    max_concurrency: number;
+    updated_at: string;
+};
+export type UsageEventRow = {
+    id: number;
+    at: string;
+    consumer_id: number;
+    producer_id: number;
+    alias: string;
+    upstream_model: string;
+    protocol: string;
+    streaming: number;
+    status: number | null;
+    error_code: string | null;
+    duration_ms: number;
+    bytes_in: number;
+    bytes_out: number;
+    prompt_tokens: number | null;
+    completion_tokens: number | null;
+};
+export type NewUsageEvent = Omit<UsageEventRow, 'id' | 'at'>;
+export declare function openDb(dbFile: string): Database.Database;
+export declare function insertProducer(db: Database.Database, name: string, tokenHash: string): ProducerRow;
+export declare function insertConsumer(db: Database.Database, name: string, tokenHash: string): ConsumerRow;
+export declare function getProducerById(db: Database.Database, id: number): ProducerRow;
+export declare function getConsumerById(db: Database.Database, id: number): ConsumerRow;
+export declare function getProducerByName(db: Database.Database, name: string): ProducerRow | undefined;
+export declare function getConsumerByName(db: Database.Database, name: string): ConsumerRow | undefined;
+export declare function findProducerByHash(db: Database.Database, hash: string): ProducerRow | undefined;
+export declare function findConsumerByHash(db: Database.Database, hash: string): ConsumerRow | undefined;
+export declare function listTokens(db: Database.Database): {
+    producers: Omit<ProducerRow, "token_hash">[];
+    consumers: Omit<ConsumerRow, "token_hash">[];
+};
+export declare function revokeToken(db: Database.Database, role: 'producer' | 'consumer', id: number): void;
+export declare function addGrant(db: Database.Database, producerId: number, consumerId: number, alias: string, expiresAt?: string | null): void;
+export declare function removeGrant(db: Database.Database, producerId: number, consumerId: number, alias: string): boolean;
+export type GrantRow = {
+    producer_id: number;
+    consumer_id: number;
+    alias: string;
+    created_at: string;
+    expires_at: string | null;
+};
+/** Returns the grant row regardless of expiry; callers decide missing vs expired. */
+export declare function getGrant(db: Database.Database, producerId: number, consumerId: number, alias: string): GrantRow | undefined;
+export declare function listGrants(db: Database.Database, producerId?: number): {
+    alias: string;
+    created_at: string;
+    expires_at: string | null;
+    producer: string;
+    consumer: string;
+}[];
+export declare function upsertOfferings(db: Database.Database, producerId: number, offerings: Offering[]): void;
+export declare function getOffering(db: Database.Database, alias: string): OfferingRow | undefined;
+export declare function listOfferingsForConsumer(db: Database.Database, consumerId: number): OfferingRow[];
+export declare function insertUsageEvent(db: Database.Database, event: NewUsageEvent): void;
+export interface UsageFilter {
+    consumerId?: number;
+    producerId?: number;
+    alias?: string;
+    limit: number;
+}
+export declare function queryUsage(db: Database.Database, filter: UsageFilter): UsageEventRow[];
+export declare function getConsumerConfig(db: Database.Database, consumerId: number): string | null;
+export declare function setConsumerConfig(db: Database.Database, consumerId: number, config: string | null): void;
+/** Lifetime tokens consumed by a consumer; NULL counts (e.g. Ollama streams) read as 0. */
+export declare function sumTokensUsed(db: Database.Database, consumerId: number): number;