aweshare 0.2.0

package/apps/hub/dist/db.js

@@ -0,0 +1,236 @@
+import { mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+import Database from 'better-sqlite3';
+const SCHEMA_V2 = `
+CREATE TABLE IF NOT EXISTS producers (
+  id INTEGER PRIMARY KEY,
+  name TEXT UNIQUE NOT NULL,
+  token_hash TEXT UNIQUE NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ','now')),
+  revoked_at TEXT
+);
+CREATE TABLE IF NOT EXISTS consumers (
+  id INTEGER PRIMARY KEY,
+  name TEXT UNIQUE NOT NULL,
+  token_hash TEXT UNIQUE NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ','now')),
+  revoked_at TEXT,
+  config TEXT
+);
+CREATE TABLE IF NOT EXISTS grants (
+  producer_id INTEGER NOT NULL REFERENCES producers(id),
+  consumer_id INTEGER NOT NULL REFERENCES consumers(id),
+  alias TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ','now')),
+  expires_at TEXT,
+  PRIMARY KEY (producer_id, consumer_id, alias)
+);
+CREATE TABLE IF NOT EXISTS offerings (
+  alias TEXT PRIMARY KEY,
+  producer_id INTEGER NOT NULL REFERENCES producers(id),
+  protocol TEXT NOT NULL,
+  upstream_model TEXT NOT NULL,
+  backend_id TEXT NOT NULL,
+  max_concurrency INTEGER NOT NULL DEFAULT 1,
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ','now'))
+);
+CREATE TABLE IF NOT EXISTS usage_events (
+  id INTEGER PRIMARY KEY,
+  at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ','now')),
+  consumer_id INTEGER NOT NULL,
+  producer_id INTEGER NOT NULL,
+  alias TEXT NOT NULL,
+  upstream_model TEXT NOT NULL,
+  protocol TEXT NOT NULL,
+  streaming INTEGER NOT NULL,
+  status INTEGER,
+  error_code TEXT,
+  duration_ms INTEGER NOT NULL,
+  bytes_in INTEGER NOT NULL,
+  bytes_out INTEGER NOT NULL,
+  prompt_tokens INTEGER,
+  completion_tokens INTEGER
+);
+CREATE INDEX IF NOT EXISTS idx_usage_at ON usage_events(at);
+CREATE INDEX IF NOT EXISTS idx_usage_consumer ON usage_events(consumer_id, at);
+CREATE INDEX IF NOT EXISTS idx_usage_producer ON usage_events(producer_id, at);
+`;
+export function openDb(dbFile) {
+    mkdirSync(dirname(dbFile), { recursive: true });
+    const db = new Database(dbFile);
+    db.pragma('journal_mode = WAL');
+    db.pragma('foreign_keys = ON');
+    const version = db.pragma('user_version', { simple: true });
+    if (version < 1) {
+        db.exec(SCHEMA_V2);
+        db.pragma('user_version = 2');
+    }
+    else if (version < 2) {
+        // v1 -> v2: grant expiry + per-consumer limit overrides
+        db.exec('ALTER TABLE grants ADD COLUMN expires_at TEXT');
+        db.exec('ALTER TABLE consumers ADD COLUMN config TEXT');
+        db.pragma('user_version = 2');
+    }
+    return db;
+}
+// ---- tokens / identities ----
+export function insertProducer(db, name, tokenHash) {
+    const info = db
+        .prepare('INSERT INTO producers (name, token_hash) VALUES (?, ?)')
+        .run(name, tokenHash);
+    return getProducerById(db, Number(info.lastInsertRowid));
+}
+export function insertConsumer(db, name, tokenHash) {
+    const info = db
+        .prepare('INSERT INTO consumers (name, token_hash) VALUES (?, ?)')
+        .run(name, tokenHash);
+    return getConsumerById(db, Number(info.lastInsertRowid));
+}
+export function getProducerById(db, id) {
+    return db.prepare('SELECT * FROM producers WHERE id = ?').get(id);
+}
+export function getConsumerById(db, id) {
+    return db.prepare('SELECT * FROM consumers WHERE id = ?').get(id);
+}
+export function getProducerByName(db, name) {
+    return db.prepare('SELECT * FROM producers WHERE name = ?').get(name);
+}
+export function getConsumerByName(db, name) {
+    return db.prepare('SELECT * FROM consumers WHERE name = ?').get(name);
+}
+export function findProducerByHash(db, hash) {
+    return db.prepare('SELECT * FROM producers WHERE token_hash = ?').get(hash);
+}
+export function findConsumerByHash(db, hash) {
+    return db.prepare('SELECT * FROM consumers WHERE token_hash = ?').get(hash);
+}
+export function listTokens(db) {
+    const producers = db
+        .prepare('SELECT id, name, created_at, revoked_at FROM producers ORDER BY id')
+        .all();
+    const consumers = db
+        .prepare('SELECT id, name, created_at, revoked_at FROM consumers ORDER BY id')
+        .all();
+    return { producers, consumers };
+}
+export function revokeToken(db, role, id) {
+    const table = role === 'producer' ? 'producers' : 'consumers';
+    db.prepare(`UPDATE ${table} SET revoked_at = strftime('%Y-%m-%dT%H:%M:%fZ','now') WHERE id = ?`).run(id);
+}
+// ---- grants ----
+export function addGrant(db, producerId, consumerId, alias, expiresAt) {
+    // re-granting refreshes the expiry (INSERT OR IGNORE would keep a stale one)
+    db.prepare(`
+    INSERT INTO grants (producer_id, consumer_id, alias, expires_at) VALUES (?, ?, ?, ?)
+    ON CONFLICT(producer_id, consumer_id, alias) DO UPDATE SET expires_at = excluded.expires_at`).run(producerId, consumerId, alias, expiresAt ?? null);
+}
+export function removeGrant(db, producerId, consumerId, alias) {
+    const info = db
+        .prepare('DELETE FROM grants WHERE producer_id = ? AND consumer_id = ? AND alias = ?')
+        .run(producerId, consumerId, alias);
+    return info.changes > 0;
+}
+/** Returns the grant row regardless of expiry; callers decide missing vs expired. */
+export function getGrant(db, producerId, consumerId, alias) {
+    return db
+        .prepare('SELECT * FROM grants WHERE producer_id = ? AND consumer_id = ? AND alias = ?')
+        .get(producerId, consumerId, alias);
+}
+export function listGrants(db, producerId) {
+    const sql = `
+    SELECT g.alias, g.created_at, g.expires_at, p.name AS producer, c.name AS consumer
+    FROM grants g
+    JOIN producers p ON p.id = g.producer_id
+    JOIN consumers c ON c.id = g.consumer_id
+    ${producerId !== undefined ? 'WHERE g.producer_id = ?' : ''}
+    ORDER BY g.alias, c.name`;
+    const stmt = db.prepare(sql);
+    return (producerId !== undefined ? stmt.all(producerId) : stmt.all());
+}
+// ---- offerings (cache of what the agent registers; source of truth is agent config) ----
+export function upsertOfferings(db, producerId, offerings) {
+    const upsert = db.prepare(`
+    INSERT INTO offerings (alias, producer_id, protocol, upstream_model, backend_id, max_concurrency, updated_at)
+    VALUES (@alias, @producerId, @protocol, @upstreamModel, @backendId, @maxConcurrency, strftime('%Y-%m-%dT%H:%M:%fZ','now'))
+    ON CONFLICT(alias) DO UPDATE SET
+      producer_id = excluded.producer_id,
+      protocol = excluded.protocol,
+      upstream_model = excluded.upstream_model,
+      backend_id = excluded.backend_id,
+      max_concurrency = excluded.max_concurrency,
+      updated_at = excluded.updated_at`);
+    const prune = db.prepare('DELETE FROM offerings WHERE producer_id = ? AND alias NOT IN (SELECT value FROM json_each(?))');
+    const tx = db.transaction((items) => {
+        for (const o of items) {
+            upsert.run({
+                alias: o.alias,
+                producerId,
+                protocol: o.protocol,
+                upstreamModel: o.upstreamModel,
+                backendId: o.backendId,
+                maxConcurrency: o.maxConcurrency,
+            });
+        }
+        prune.run(producerId, JSON.stringify(items.map((o) => o.alias)));
+    });
+    tx(offerings);
+}
+export function getOffering(db, alias) {
+    return db.prepare('SELECT * FROM offerings WHERE alias = ?').get(alias);
+}
+export function listOfferingsForConsumer(db, consumerId) {
+    return db
+        .prepare(`SELECT o.* FROM offerings o
+       JOIN grants g ON g.producer_id = o.producer_id AND g.alias = o.alias
+       WHERE g.consumer_id = ?
+       ORDER BY o.alias`)
+        .all(consumerId);
+}
+// ---- usage ----
+export function insertUsageEvent(db, event) {
+    db.prepare(`
+    INSERT INTO usage_events
+      (consumer_id, producer_id, alias, upstream_model, protocol, streaming, status, error_code,
+       duration_ms, bytes_in, bytes_out, prompt_tokens, completion_tokens)
+    VALUES
+      (@consumer_id, @producer_id, @alias, @upstream_model, @protocol, @streaming, @status, @error_code,
+       @duration_ms, @bytes_in, @bytes_out, @prompt_tokens, @completion_tokens)`).run(event);
+}
+export function queryUsage(db, filter) {
+    const where = [];
+    // clamp both ways: a negative LIMIT in SQLite means "no limit"
+    const params = {
+        limit: Math.min(Math.max(Math.trunc(filter.limit) || 100, 1), 1000),
+    };
+    if (filter.consumerId !== undefined) {
+        where.push('consumer_id = @consumerId');
+        params.consumerId = filter.consumerId;
+    }
+    if (filter.producerId !== undefined) {
+        where.push('producer_id = @producerId');
+        params.producerId = filter.producerId;
+    }
+    if (filter.alias !== undefined) {
+        where.push('alias = @alias');
+        params.alias = filter.alias;
+    }
+    const sql = `SELECT * FROM usage_events ${where.length ? `WHERE ${where.join(' AND ')}` : ''} ORDER BY id DESC LIMIT @limit`;
+    return db.prepare(sql).all(params);
+}
+// ---- per-consumer limit overrides (sparse JSON in consumers.config) ----
+export function getConsumerConfig(db, consumerId) {
+    const row = db.prepare('SELECT config FROM consumers WHERE id = ?').get(consumerId);
+    return row?.config ?? null;
+}
+export function setConsumerConfig(db, consumerId, config) {
+    db.prepare('UPDATE consumers SET config = ? WHERE id = ?').run(config, consumerId);
+}
+/** Lifetime tokens consumed by a consumer; NULL counts (e.g. Ollama streams) read as 0. */
+export function sumTokensUsed(db, consumerId) {
+    const row = db
+        .prepare(`SELECT SUM(COALESCE(prompt_tokens, 0) + COALESCE(completion_tokens, 0)) AS total
+       FROM usage_events WHERE consumer_id = ?`)
+        .get(consumerId);
+    return row.total ?? 0;
+}
+//# sourceMappingURL=db.js.map

package/apps/hub/dist/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAErC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqDjB,CAAA;AAiDD,MAAM,UAAU,MAAM,CAAC,MAAc;IACnC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC/B,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;IAC/B,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;IAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAW,CAAA;IACrE,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAClB,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAC/B,CAAC;SAAM,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QACvB,wDAAwD;QACxD,EAAE,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAA;QACxD,EAAE,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAA;QACvD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,gCAAgC;AAEhC,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,IAAY,EACZ,SAAiB;IAEjB,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,wDAAwD,CAAC;SACjE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACvB,OAAO,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,IAAY,EACZ,SAAiB;IAEjB,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,wDAAwD,CAAC;SACjE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACvB,OAAO,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAqB,EAAE,EAAU;IAC/D,OAAO,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAgB,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAqB,EAAE,EAAU;IAC/D,OAAO,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAgB,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAqB,EAAE,IAAY;IACnE,OAAO,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,IAAI,CAA4B,CAAA;AAClG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAqB,EAAE,IAAY;IACnE,OAAO,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,IAAI,CAA4B,CAAA;AAClG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAqB,EAAE,IAAY;IACpE,OAAO,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,IAAI,CAE7D,CAAA;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAqB,EAAE,IAAY;IACpE,OAAO,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,IAAI,CAE7D,CAAA;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAqB;IAC9C,MAAM,SAAS,GAAG,EAAE;SACjB,OAAO,CAAC,oEAAoE,CAAC;SAC7E,GAAG,EAAuC,CAAA;IAC7C,MAAM,SAAS,GAAG,EAAE;SACjB,OAAO,CAAC,oEAAoE,CAAC;SAC7E,GAAG,EAAuC,CAAA;IAC7C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAqB,EAAE,IAA6B,EAAE,EAAU;IAC1F,MAAM,KAAK,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAA;IAC7D,EAAE,CAAC,OAAO,CACR,UAAU,KAAK,qEAAqE,CACrF,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACX,CAAC;AAED,mBAAmB;AAEnB,MAAM,UAAU,QAAQ,CACtB,EAAqB,EACrB,UAAkB,EAClB,UAAkB,EAClB,KAAa,EACb,SAAyB;IAEzB,6EAA6E;IAC7E,EAAE,CAAC,OAAO,CAAC;;gGAEmF,CAAC,CAAC,GAAG,CACjG,UAAU,EACV,UAAU,EACV,KAAK,EACL,SAAS,IAAI,IAAI,CAClB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,EAAqB,EACrB,UAAkB,EAClB,UAAkB,EAClB,KAAa;IAEb,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,4EAA4E,CAAC;SACrF,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IACrC,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;AACzB,CAAC;AAUD,qFAAqF;AACrF,MAAM,UAAU,QAAQ,CACtB,EAAqB,EACrB,UAAkB,EAClB,UAAkB,EAClB,KAAa;IAEb,OAAO,EAAE;SACN,OAAO,CAAC,8EAA8E,CAAC;SACvF,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAyB,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAqB,EAAE,UAAmB;IACnE,MAAM,GAAG,GAAG;;;;;MAKR,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE;6BAClC,CAAA;IAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC5B,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAMjE,CAAA;AACL,CAAC;AAED,2FAA2F;AAE3F,MAAM,UAAU,eAAe,CAC7B,EAAqB,EACrB,UAAkB,EAClB,SAAqB;IAErB,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;;uCASW,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CACtB,+FAA+F,CAChG,CAAA;IACD,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,KAAiB,EAAE,EAAE;QAC9C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC;gBACT,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,UAAU;gBACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,cAAc,EAAE,CAAC,CAAC,cAAc;aACjC,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,SAAS,CAAC,CAAA;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAqB,EAAE,KAAa;IAC9D,OAAO,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,KAAK,CAA4B,CAAA;AACpG,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EAAqB,EAAE,UAAkB;IAChF,OAAO,EAAE;SACN,OAAO,CACN;;;wBAGkB,CACnB;SACA,GAAG,CAAC,UAAU,CAAkB,CAAA;AACrC,CAAC;AAED,kBAAkB;AAElB,MAAM,UAAU,gBAAgB,CAAC,EAAqB,EAAE,KAAoB;IAC1E,EAAE,CAAC,OAAO,CAAC;;;;;;gFAMmE,CAAC,CAAC,GAAG,CACjF,KAAc,CACf,CAAA;AACH,CAAC;AASD,MAAM,UAAU,UAAU,CAAC,EAAqB,EAAE,MAAmB;IACnE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,+DAA+D;IAC/D,MAAM,MAAM,GAA4B;QACtC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;KACpE,CAAA;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QACvC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QACvC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;IAC7B,CAAC;IACD,MAAM,GAAG,GAAG,8BAA8B,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gCAAgC,CAAA;IAC5H,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAoB,CAAA;AACvD,CAAC;AAED,2EAA2E;AAE3E,MAAM,UAAU,iBAAiB,CAAC,EAAqB,EAAE,UAAkB;IACzE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,UAAU,CAErE,CAAA;IACb,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAqB,EACrB,UAAkB,EAClB,MAAqB;IAErB,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;AACpF,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,aAAa,CAAC,EAAqB,EAAE,UAAkB;IACrE,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN;+CACyC,CAC1C;SACA,GAAG,CAAC,UAAU,CAA6B,CAAA;IAC9C,OAAO,GAAG,CAAC,KAAK,IAAI,CAAC,CAAA;AACvB,CAAC"}

package/apps/hub/dist/http.d.ts

@@ -0,0 +1,31 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/** Error carrying an HTTP status and a stable error code. */
+export declare class HttpError extends Error {
+    status: number;
+    code: string;
+    constructor(status: number, code: string, message: string);
+}
+export interface RouteContext {
+    req: IncomingMessage;
+    res: ServerResponse;
+    params: Record<string, string>;
+    query: URLSearchParams;
+    url: URL;
+}
+export type RouteHandler = (ctx: RouteContext) => Promise<void> | void;
+export declare class Router {
+    private routes;
+    add(method: string, pattern: string, handler: RouteHandler): void;
+    /** Returns matched handler + params, or 404/405 markers. */
+    match(method: string, pathname: string): {
+        handler: RouteHandler;
+        params: Record<string, string>;
+    } | 'not-found' | 'method-not-allowed';
+}
+export declare function sendJson(res: ServerResponse, status: number, body: unknown): void;
+export declare function sendError(res: ServerResponse, err: unknown, requestId?: string): void;
+/** Read the full request body as a Buffer, enforcing a size cap. */
+export declare function readBody(req: IncomingMessage, maxBytes: number): Promise<Buffer>;
+export declare function readJson(req: IncomingMessage, maxBytes: number): Promise<unknown>;
+/** Bearer or x-api-key credential, whichever is present. */
+export declare function extractCredential(req: IncomingMessage): string | null;

package/apps/hub/dist/http.js

@@ -0,0 +1,118 @@
+/** Error carrying an HTTP status and a stable error code. */
+export class HttpError extends Error {
+    status;
+    code;
+    constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+    }
+}
+export class Router {
+    routes = [];
+    add(method, pattern, handler) {
+        this.routes.push({ method, parts: pattern.split('/').filter(Boolean), handler });
+    }
+    /** Returns matched handler + params, or 404/405 markers. */
+    match(method, pathname) {
+        let pathExists = false;
+        for (const route of this.routes) {
+            const params = matchParts(route.parts, pathname);
+            if (!params)
+                continue;
+            pathExists = true;
+            if (route.method === method)
+                return { handler: route.handler, params };
+        }
+        return pathExists ? 'method-not-allowed' : 'not-found';
+    }
+}
+function matchParts(parts, pathname) {
+    const segs = pathname.split('/').filter(Boolean);
+    if (segs.length !== parts.length)
+        return null;
+    const params = {};
+    for (let i = 0; i < parts.length; i++) {
+        const part = parts[i];
+        const seg = segs[i];
+        if (part === undefined || seg === undefined)
+            return null;
+        if (part.startsWith(':')) {
+            // a segment we cannot decode can never name a real resource — treat as no match
+            let decoded;
+            try {
+                decoded = decodeURIComponent(seg);
+            }
+            catch {
+                return null;
+            }
+            params[part.slice(1)] = decoded;
+        }
+        else if (part !== seg) {
+            return null;
+        }
+    }
+    return params;
+}
+export function sendJson(res, status, body) {
+    const payload = JSON.stringify(body);
+    res.writeHead(status, {
+        'content-type': 'application/json',
+        'content-length': Buffer.byteLength(payload),
+    });
+    res.end(payload);
+}
+export function sendError(res, err, requestId) {
+    if (res.headersSent) {
+        res.destroy();
+        return;
+    }
+    const httpErr = err instanceof HttpError
+        ? err
+        : new HttpError(500, 'INTERNAL', err instanceof Error ? err.message : String(err));
+    sendJson(res, httpErr.status, {
+        error: { code: httpErr.code, message: httpErr.message, ...(requestId ? { requestId } : {}) },
+    });
+}
+/** Read the full request body as a Buffer, enforcing a size cap. */
+export function readBody(req, maxBytes) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on('data', (chunk) => {
+            size += chunk.byteLength;
+            if (size > maxBytes) {
+                // pause, don't destroy: the 413 must reach the client before the
+                // connection drops (Node closes the socket after an unconsumed body)
+                req.pause();
+                reject(new HttpError(413, 'BODY_TOO_LARGE', `body exceeds ${maxBytes} bytes`));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => resolve(Buffer.concat(chunks)));
+        req.on('error', reject);
+    });
+}
+export async function readJson(req, maxBytes) {
+    const body = await readBody(req, maxBytes);
+    if (body.byteLength === 0)
+        return {};
+    try {
+        return JSON.parse(body.toString('utf8'));
+    }
+    catch {
+        throw new HttpError(400, 'INVALID_JSON', 'request body is not valid JSON');
+    }
+}
+/** Bearer or x-api-key credential, whichever is present. */
+export function extractCredential(req) {
+    const auth = req.headers.authorization;
+    if (auth?.startsWith('Bearer '))
+        return auth.slice(7).trim();
+    const apiKey = req.headers['x-api-key'];
+    if (typeof apiKey === 'string' && apiKey.length > 0)
+        return apiKey.trim();
+    return null;
+}
+//# sourceMappingURL=http.js.map

package/apps/hub/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA,6DAA6D;AAC7D,MAAM,OAAO,SAAU,SAAQ,KAAK;IAEzB;IACA;IAFT,YACS,MAAc,EACd,IAAY,EACnB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAJP,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;IAIrB,CAAC;CACF;AAkBD,MAAM,OAAO,MAAM;IACT,MAAM,GAAY,EAAE,CAAA;IAE5B,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,OAAqB;QACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAClF,CAAC;IAED,4DAA4D;IAC5D,KAAK,CACH,MAAc,EACd,QAAgB;QAKhB,IAAI,UAAU,GAAG,KAAK,CAAA;QACtB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YAChD,IAAI,CAAC,MAAM;gBAAE,SAAQ;YACrB,UAAU,GAAG,IAAI,CAAA;YACjB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,CAAA;QACxE,CAAC;QACD,OAAO,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,WAAW,CAAA;IACxD,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAe,EAAE,QAAgB;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACxD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,gFAAgF;YAChF,IAAI,OAAe,CAAA;YACnB,IAAI,CAAC;gBACH,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAA;QACjC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACpC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;KAC7C,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAmB,EAAE,GAAY,EAAE,SAAkB;IAC7E,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,GAAG,CAAC,OAAO,EAAE,CAAA;QACb,OAAM;IACR,CAAC;IACD,MAAM,OAAO,GACX,GAAG,YAAY,SAAS;QACtB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IACtF,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE;QAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAC7F,CAAC,CAAA;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,QAAQ,CAAC,GAAoB,EAAE,QAAgB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,UAAU,CAAA;YACxB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,iEAAiE;gBACjE,qEAAqE;gBACrE,GAAG,CAAC,KAAK,EAAE,CAAA;gBACX,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,QAAQ,QAAQ,CAAC,CAAC,CAAA;gBAC9E,OAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACnD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,QAAgB;IACnE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC1C,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,gCAAgC,CAAC,CAAA;IAC5E,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,iBAAiB,CAAC,GAAoB;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAA;IACtC,IAAI,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACvC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAA;IACzE,OAAO,IAAI,CAAA;AACb,CAAC"}

package/apps/hub/dist/limiter.d.ts

@@ -0,0 +1,35 @@
+/** In-memory per-consumer token bucket + inflight cap, and per-alias concurrency slots. */
+export declare class ConsumerLimiter {
+    private buckets;
+    /**
+     * Returns error code when the consumer is over limit, or null when admitted.
+     * Limits are passed per call (per-consumer overrides merged over globals),
+     * so config changes take effect on the next request.
+     */
+    admit(consumerId: number, limits: {
+        rps: number;
+        burst: number;
+        maxInflight: number;
+    }): string | null;
+    release(consumerId: number): void;
+}
+/**
+ * Sliding-window tokens-per-minute counter, in memory (like the RPS bucket).
+ * Tokens are recorded when a request finishes; admit-time checks are best-effort:
+ * concurrent requests that all pass before any finishes can overshoot, and requests
+ * whose upstream reports no usage (NULL token counts) contribute nothing.
+ */
+export declare class TokenWindow {
+    private windows;
+    /** True when the last 60s sum is still under the cap. */
+    allow(consumerId: number, tpm: number, now?: number): boolean;
+    record(consumerId: number, tokens: number, now?: number): void;
+    private prune;
+}
+/** Counts in-flight requests per alias; the cap comes from the producer's offering. */
+export declare class AliasSlots {
+    private active;
+    /** Returns true when the slot was acquired. */
+    acquire(alias: string, maxConcurrency: number): boolean;
+    release(alias: string): void;
+}

package/apps/hub/dist/limiter.js

@@ -0,0 +1,78 @@
+/** In-memory per-consumer token bucket + inflight cap, and per-alias concurrency slots. */
+export class ConsumerLimiter {
+    buckets = new Map();
+    /**
+     * Returns error code when the consumer is over limit, or null when admitted.
+     * Limits are passed per call (per-consumer overrides merged over globals),
+     * so config changes take effect on the next request.
+     */
+    admit(consumerId, limits) {
+        const now = Date.now();
+        let bucket = this.buckets.get(consumerId);
+        if (!bucket) {
+            bucket = { tokens: limits.burst, lastRefill: now, inflight: 0 };
+            this.buckets.set(consumerId, bucket);
+        }
+        const elapsed = (now - bucket.lastRefill) / 1000;
+        bucket.tokens = Math.min(limits.burst, bucket.tokens + elapsed * limits.rps);
+        bucket.lastRefill = now;
+        if (bucket.tokens < 1)
+            return 'RATE_LIMITED';
+        if (bucket.inflight >= limits.maxInflight)
+            return 'RATE_LIMITED';
+        bucket.tokens -= 1;
+        bucket.inflight += 1;
+        return null;
+    }
+    release(consumerId) {
+        const bucket = this.buckets.get(consumerId);
+        if (bucket && bucket.inflight > 0)
+            bucket.inflight -= 1;
+    }
+}
+/**
+ * Sliding-window tokens-per-minute counter, in memory (like the RPS bucket).
+ * Tokens are recorded when a request finishes; admit-time checks are best-effort:
+ * concurrent requests that all pass before any finishes can overshoot, and requests
+ * whose upstream reports no usage (NULL token counts) contribute nothing.
+ */
+export class TokenWindow {
+    windows = new Map();
+    /** True when the last 60s sum is still under the cap. */
+    allow(consumerId, tpm, now = Date.now()) {
+        const entries = this.prune(consumerId, now);
+        const sum = entries.reduce((acc, e) => acc + e.tokens, 0);
+        return sum < tpm;
+    }
+    record(consumerId, tokens, now = Date.now()) {
+        if (tokens <= 0)
+            return;
+        this.prune(consumerId, now).push({ at: now, tokens });
+    }
+    prune(consumerId, now) {
+        const entries = this.windows.get(consumerId) ?? [];
+        const kept = entries.filter((e) => now - e.at < 60_000);
+        this.windows.set(consumerId, kept);
+        return kept;
+    }
+}
+/** Counts in-flight requests per alias; the cap comes from the producer's offering. */
+export class AliasSlots {
+    active = new Map();
+    /** Returns true when the slot was acquired. */
+    acquire(alias, maxConcurrency) {
+        const current = this.active.get(alias) ?? 0;
+        if (current >= maxConcurrency)
+            return false;
+        this.active.set(alias, current + 1);
+        return true;
+    }
+    release(alias) {
+        const current = this.active.get(alias) ?? 0;
+        if (current <= 1)
+            this.active.delete(alias);
+        else
+            this.active.set(alias, current - 1);
+    }
+}
+//# sourceMappingURL=limiter.js.map

package/apps/hub/dist/limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limiter.js","sourceRoot":"","sources":["../src/limiter.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,MAAM,OAAO,eAAe;IAClB,OAAO,GAAG,IAAI,GAAG,EAAoE,CAAA;IAE7F;;;;OAIG;IACH,KAAK,CACH,UAAkB,EAClB,MAA2D;QAE3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;YAC/D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QACtC,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;QAChD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QAC5E,MAAM,CAAC,UAAU,GAAG,GAAG,CAAA;QACvB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,cAAc,CAAA;QAC5C,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW;YAAE,OAAO,cAAc,CAAA;QAChE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;QAClB,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAA;QACpB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,CAAC,UAAkB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC3C,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC;YAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAA;IACzD,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IACd,OAAO,GAAG,IAAI,GAAG,EAA4C,CAAA;IAErE,yDAAyD;IACzD,KAAK,CAAC,UAAkB,EAAE,GAAW,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QACzD,OAAO,GAAG,GAAG,GAAG,CAAA;IAClB,CAAC;IAED,MAAM,CAAC,UAAkB,EAAE,MAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACzD,IAAI,MAAM,IAAI,CAAC;YAAE,OAAM;QACvB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;IACvD,CAAC;IAEO,KAAK,CAAC,UAAkB,EAAE,GAAW;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,CAAA;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAClC,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,uFAAuF;AACvF,MAAM,OAAO,UAAU;IACb,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE1C,+CAA+C;IAC/C,OAAO,CAAC,KAAa,EAAE,cAAsB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,OAAO,IAAI,cAAc;YAAE,OAAO,KAAK,CAAA;QAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,CAAA;QACnC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,OAAO,IAAI,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;;YACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;CACF"}

package/apps/hub/dist/limits.d.ts

@@ -0,0 +1,30 @@
+import type { HubConfig } from './config.js';
+/**
+ * Sparse per-consumer limit overrides stored in consumers.config (JSON).
+ * Only set keys override the hub-wide defaults; everything else falls back.
+ */
+export interface ConsumerLimits {
+    /** Requests per second (may be fractional). */
+    rps?: number;
+    /** Token-bucket burst size. */
+    burst?: number;
+    /** Max in-flight requests. */
+    maxConcurrent?: number;
+    /** Max tokens (prompt + completion) in any sliding 60s window; null = unlimited. */
+    tpm?: number;
+    /** Lifetime token budget (prompt + completion); null = unlimited. */
+    maxTotalTokens?: number;
+}
+/** Limits actually enforced for one request: overrides merged over hub globals. */
+export interface ResolvedLimits {
+    rps: number;
+    burst: number;
+    maxInflight: number;
+    tpm: number | null;
+    maxTotalTokens: number | null;
+}
+/** Strict validation for the admin write path; throws with all problems listed. */
+export declare function parseLimits(input: unknown): ConsumerLimits;
+/** Parse the stored JSON tolerantly (written only via validated endpoint). */
+export declare function safeParseLimits(json: string | null): ConsumerLimits | null;
+export declare function resolveLimits(overrides: ConsumerLimits | null, global: HubConfig): ResolvedLimits;

package/apps/hub/dist/limits.js

@@ -0,0 +1,52 @@
+const INTEGER_KEYS = ['burst', 'maxConcurrent', 'tpm', 'maxTotalTokens'];
+/** Strict validation for the admin write path; throws with all problems listed. */
+export function parseLimits(input) {
+    if (typeof input !== 'object' || input === null || Array.isArray(input)) {
+        throw new Error('limits must be a JSON object');
+    }
+    const raw = input;
+    const allowed = ['rps', 'burst', 'maxConcurrent', 'tpm', 'maxTotalTokens'];
+    const unknown = Object.keys(raw).filter((k) => !allowed.includes(k));
+    if (unknown.length > 0)
+        throw new Error(`unknown limit keys: ${unknown.join(', ')}`);
+    const out = {};
+    const problems = [];
+    for (const key of allowed) {
+        const value = raw[key];
+        if (value === undefined)
+            continue;
+        if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) {
+            problems.push(`${key} must be a positive number`);
+            continue;
+        }
+        if (INTEGER_KEYS.includes(key) && !Number.isInteger(value)) {
+            problems.push(`${key} must be an integer`);
+            continue;
+        }
+        out[key] = value;
+    }
+    if (problems.length > 0)
+        throw new Error(problems.join('; '));
+    return out;
+}
+/** Parse the stored JSON tolerantly (written only via validated endpoint). */
+export function safeParseLimits(json) {
+    if (!json)
+        return null;
+    try {
+        return parseLimits(JSON.parse(json));
+    }
+    catch {
+        return null;
+    }
+}
+export function resolveLimits(overrides, global) {
+    return {
+        rps: overrides?.rps ?? global.consumerRps,
+        burst: overrides?.burst ?? global.consumerBurst,
+        maxInflight: overrides?.maxConcurrent ?? global.consumerMaxConcurrent,
+        tpm: overrides?.tpm ?? null,
+        maxTotalTokens: overrides?.maxTotalTokens ?? null,
+    };
+}
+//# sourceMappingURL=limits.js.map

package/apps/hub/dist/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AA4BA,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,CAAU,CAAA;AAEjF,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAA;IAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACpE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACpF,MAAM,GAAG,GAAmB,EAAE,CAAA;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,KAAK,MAAM,GAAG,IAAI,OAAmC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;QACtB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAQ;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,4BAA4B,CAAC,CAAA;YACjD,SAAQ;QACV,CAAC;QACD,IAAK,YAAkC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAClF,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,qBAAqB,CAAC,CAAA;YAC1C,SAAQ;QACV,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAClB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAgC,EAAE,MAAiB;IAC/E,OAAO;QACL,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,CAAC,WAAW;QACzC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,MAAM,CAAC,aAAa;QAC/C,WAAW,EAAE,SAAS,EAAE,aAAa,IAAI,MAAM,CAAC,qBAAqB;QACrE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI;QAC3B,cAAc,EAAE,SAAS,EAAE,cAAc,IAAI,IAAI;KAClD,CAAA;AACH,CAAC"}

package/apps/hub/dist/meter.d.ts

@@ -0,0 +1,25 @@
+import type { Protocol } from 'aweshare-protocol';
+export interface TokenCounts {
+    promptTokens: number | null;
+    completionTokens: number | null;
+}
+/**
+ * Best-effort usage extraction from a response stream, on a side channel.
+ * Never throws, never blocks the relay; failures simply yield null counts.
+ * No content is retained beyond the bytes needed to read token counts.
+ */
+export declare class UsageExtractor {
+    private readonly protocol;
+    private text;
+    private promptTokens;
+    private completionTokens;
+    private readonly isSse;
+    private done;
+    constructor(protocol: Protocol, contentType: string | undefined);
+    get streaming(): boolean;
+    onChunk(bytes: Uint8Array): void;
+    finish(): TokenCounts | null;
+    private consumeSseEvent;
+    private consumeUsage;
+    private result;
+}