fest-gateway 0.1.0

package/dist/server/routes/table.js

@@ -0,0 +1,247 @@
+/**
+ * The routing table: which model goes where, and on whose credential.
+ *
+ * Loaded from a JSON file (`FEST_ROUTES`), validated in full at boot, and
+ * immutable thereafter. Validation is deliberately strict and noisy — a
+ * mistyped upstream name that silently disables a route would send traffic to
+ * Anthropic on a developer's subscription when the operator believed it was
+ * going to Fireworks, and nothing would say so. Every rejection names the
+ * offending entry.
+ *
+ * The plan's eventual design is a versioned, published, ETagged table in
+ * SQLite so an admin UI can edit it. That is deferred: it only earns its
+ * complexity once something can edit it, and nothing can until the admin work
+ * lands. A file is diffable, reviewable and atomic to deploy, which covers the
+ * spike. The parsed shape is what the store would hold, so that migration is
+ * additive.
+ *
+ * Example:
+ *
+ * {
+ *   "upstreams": {
+ *     "fireworks": {
+ *       "adapter": "fireworks",
+ *       "baseUrl": "https://api.fireworks.ai/inference",
+ *       "credential": "{env:FIREWORKS_API_KEY}"
+ *     }
+ *   },
+ *   "routes": [
+ *     { "id": "oss-120b",
+ *       "match": "gpt-oss-120b",
+ *       "upstream": "fireworks",
+ *       "model": "accounts/fireworks/models/gpt-oss-120b" }
+ *   ]
+ * }
+ */
+import { explainSecretRef, parseSecretRef } from "../credentials/provider.js";
+/** Adapters that exist. Anything else is a config error, not a silent no-op. */
+export const ADAPTERS = ["anthropic", "fireworks"];
+export class RouteConfigError extends Error {
+    constructor(problems) {
+        super(`Fest routing config is invalid:\n` +
+            problems.map((p) => `  - ${p}`).join("\n") +
+            `\n\nFest will not start with a routing table it cannot honour: a route that\n` +
+            `silently does not apply sends traffic somewhere the operator did not intend.`);
+        this.name = "RouteConfigError";
+    }
+}
+function isRecord(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+/** Cheap, stable content hash. Not cryptographic — it identifies, not protects. */
+function hashOf(text) {
+    let h1 = 0x811c9dc5;
+    let h2 = 0x01000193;
+    for (let i = 0; i < text.length; i += 1) {
+        const c = text.charCodeAt(i);
+        h1 = Math.imul(h1 ^ c, 16777619) >>> 0;
+        h2 = Math.imul(h2 + c, 2654435761) >>> 0;
+    }
+    return (h1.toString(16) + h2.toString(16)).padStart(16, "0");
+}
+export function parseRouteTable(text) {
+    const problems = [];
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch (err) {
+        throw new RouteConfigError([`not valid JSON: ${err.message}`]);
+    }
+    if (!isRecord(raw))
+        throw new RouteConfigError(["top level must be an object"]);
+    // ── upstreams ───────────────────────────────────────────────────────────────
+    const upstreams = new Map();
+    /**
+     * Upstreams that were declared but failed validation.
+     *
+     * Tracked separately so one root cause produces one message. Without this, a
+     * mistyped credential on `fireworks` reports both "bad credential" AND
+     * "unknown upstream fireworks" for every route that referenced it — and an
+     * operator reading a wall of cascading errors is materially more likely to
+     * fix the wrong one.
+     */
+    const declared = new Set();
+    const rawUpstreams = raw["upstreams"];
+    if (rawUpstreams !== undefined) {
+        if (!isRecord(rawUpstreams)) {
+            problems.push("`upstreams` must be an object keyed by upstream id");
+        }
+        else {
+            for (const [id, value] of Object.entries(rawUpstreams)) {
+                const at = `upstream ${JSON.stringify(id)}`;
+                declared.add(id);
+                if (!isRecord(value)) {
+                    problems.push(`${at}: must be an object`);
+                    continue;
+                }
+                const adapter = value["adapter"];
+                if (typeof adapter !== "string" || !ADAPTERS.includes(adapter)) {
+                    problems.push(`${at}: adapter must be one of ${ADAPTERS.join(", ")} (got ${JSON.stringify(adapter)})`);
+                    continue;
+                }
+                const baseUrl = value["baseUrl"];
+                if (typeof baseUrl !== "string") {
+                    problems.push(`${at}: baseUrl is required`);
+                    continue;
+                }
+                try {
+                    const parsed = new URL(baseUrl);
+                    // A credential sent over plaintext HTTP is a credential disclosed.
+                    // Loopback is exempt so a local mock upstream stays testable.
+                    if (parsed.protocol !== "https:" &&
+                        !["localhost", "127.0.0.1", "::1"].includes(parsed.hostname)) {
+                        problems.push(`${at}: baseUrl must be https (a server-held credential would otherwise cross the network in plaintext)`);
+                    }
+                }
+                catch {
+                    problems.push(`${at}: baseUrl is not a valid URL: ${JSON.stringify(baseUrl)}`);
+                    continue;
+                }
+                const credential = value["credential"];
+                if (typeof credential !== "string") {
+                    problems.push(`${at}: credential is required, as a reference like {env:NAME}`);
+                    continue;
+                }
+                const why = explainSecretRef(credential);
+                if (why !== null) {
+                    problems.push(`${at}: ${why}`);
+                    continue;
+                }
+                upstreams.set(id, {
+                    id,
+                    adapter: adapter,
+                    baseUrl: baseUrl.replace(/\/+$/, ""),
+                    credential: parseSecretRef(credential),
+                });
+            }
+        }
+    }
+    // ── routes ──────────────────────────────────────────────────────────────────
+    const routes = [];
+    const rawRoutes = raw["routes"];
+    const seenIds = new Set();
+    const exposed = new Set();
+    if (rawRoutes !== undefined) {
+        if (!Array.isArray(rawRoutes)) {
+            problems.push("`routes` must be an array");
+        }
+        else {
+            rawRoutes.forEach((value, index) => {
+                const at = `route #${index}`;
+                if (!isRecord(value)) {
+                    problems.push(`${at}: must be an object`);
+                    return;
+                }
+                const id = value["id"];
+                if (typeof id !== "string" || id.trim() === "") {
+                    problems.push(`${at}: id is required (it names this decision in every usage record)`);
+                    return;
+                }
+                if (seenIds.has(id)) {
+                    problems.push(`${at}: duplicate route id ${JSON.stringify(id)}`);
+                    return;
+                }
+                seenIds.add(id);
+                const match = value["match"];
+                if (typeof match !== "string" || match.trim() === "") {
+                    problems.push(`route ${JSON.stringify(id)}: match is required`);
+                    return;
+                }
+                if (match.indexOf("*") !== -1 && !match.endsWith("*")) {
+                    problems.push(`route ${JSON.stringify(id)}: '*' is only supported as a trailing wildcard (got ${JSON.stringify(match)})`);
+                    return;
+                }
+                const upstream = value["upstream"] ?? null;
+                if (upstream !== null && typeof upstream !== "string") {
+                    problems.push(`route ${JSON.stringify(id)}: upstream must be a string or null`);
+                    return;
+                }
+                if (typeof upstream === "string" && !upstreams.has(upstream)) {
+                    if (!declared.has(upstream)) {
+                        problems.push(`route ${JSON.stringify(id)}: unknown upstream ${JSON.stringify(upstream)}. ` +
+                            `Known: ${[...declared].join(", ") || "(none)"}`);
+                    }
+                    // Declared-but-invalid: its own error is already reported above, and
+                    // repeating it per referencing route buries the root cause.
+                    return;
+                }
+                const model = value["model"] ?? null;
+                if (model !== null && typeof model !== "string") {
+                    problems.push(`route ${JSON.stringify(id)}: model must be a string or null`);
+                    return;
+                }
+                const expose = value["expose"] ?? null;
+                if (expose !== null && typeof expose !== "string") {
+                    problems.push(`route ${JSON.stringify(id)}: expose must be a string or null`);
+                    return;
+                }
+                if (typeof expose === "string") {
+                    if (expose.includes("*")) {
+                        problems.push(`route ${JSON.stringify(id)}: expose must be a concrete id, not a pattern — it is what a developer selects`);
+                        return;
+                    }
+                    // Publishing an id the client filters out is worse than not
+                    // publishing: the entry vanishes rather than erroring, and the
+                    // operator has no way to tell the difference.
+                    if (!/(claude|anthropic)/i.test(expose)) {
+                        problems.push(`route ${JSON.stringify(id)}: expose ${JSON.stringify(expose)} does not match /(claude|anthropic)/i, ` +
+                            `so Claude Code would silently drop it from the model menu`);
+                        return;
+                    }
+                    if (exposed.has(expose)) {
+                        problems.push(`route ${JSON.stringify(id)}: expose ${JSON.stringify(expose)} is already used by another route`);
+                        return;
+                    }
+                    exposed.add(expose);
+                }
+                routes.push({ id, match, upstream, model, expose });
+            });
+        }
+    }
+    // An upstream nothing routes to is dead config. It is a warning-shaped
+    // problem, but it is raised as an error for the same reason as the rest: the
+    // operator believes traffic is going there, and it is not.
+    for (const [id, upstream] of upstreams) {
+        // An `anthropic` upstream is reachable with no route pointing at it: it is
+        // the default destination for Anthropic models in the key posture, where
+        // there is no caller credential to pass through. See
+        // `resolveWithoutCallerCredential`. Demanding a route per model id here
+        // would be config whose only purpose is to satisfy this check.
+        if (upstream.adapter === "anthropic")
+            continue;
+        if (!routes.some((r) => r.upstream === id)) {
+            problems.push(`upstream ${JSON.stringify(id)} is defined but no route targets it, so nothing will ever reach it`);
+        }
+    }
+    if (problems.length > 0)
+        throw new RouteConfigError(problems);
+    return { upstreams, routes, version: hashOf(text) };
+}
+/** The table used when no routing config is present: everything passes through. */
+export const EMPTY_ROUTE_TABLE = {
+    upstreams: new Map(),
+    routes: [],
+    version: "empty",
+};
+//# sourceMappingURL=table.js.map

package/dist/server/routes/table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"table.js","sourceRoot":"","sources":["../../../server/routes/table.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAG9E,gFAAgF;AAChF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,CAAU,CAAC;AAoD5D,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,QAA2B;QACrC,KAAK,CACH,mCAAmC;YACjC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1C,+EAA+E;YAC/E,8EAA8E,CACjF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,mFAAmF;AACnF,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CAAC,CAAC,mBAAoB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAEhF,+EAA+E;IAC/E,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC9C;;;;;;;;OAQG;IACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvD,MAAM,EAAE,GAAG,YAAY,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrB,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;oBAC1C,SAAS;gBACX,CAAC;gBAED,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;gBACjC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAE,QAA8B,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtF,QAAQ,CAAC,IAAI,CACX,GAAG,EAAE,4BAA4B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CACxF,CAAC;oBACF,SAAS;gBACX,CAAC;gBAED,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;gBACjC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAChC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;oBAC5C,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;oBAChC,mEAAmE;oBACnE,8DAA8D;oBAC9D,IACE,MAAM,CAAC,QAAQ,KAAK,QAAQ;wBAC5B,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC5D,CAAC;wBACD,QAAQ,CAAC,IAAI,CACX,GAAG,EAAE,mGAAmG,CACzG,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,iCAAiC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC/E,SAAS;gBACX,CAAC;gBAED,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;gBACvC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,0DAA0D,CAAC,CAAC;oBAC/E,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBACzC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;oBAC/B,SAAS;gBACX,CAAC;gBAED,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE;oBAChB,EAAE;oBACF,OAAO,EAAE,OAAoB;oBAC7B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;oBACpC,UAAU,EAAE,cAAc,CAAC,UAAU,CAAc;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACjC,MAAM,EAAE,GAAG,UAAU,KAAK,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrB,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBAED,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBAC/C,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,iEAAiE,CAAC,CAAC;oBACtF,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBACjE,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAEhB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACrD,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtD,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAC3G,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;gBAC3C,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACtD,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,qCAAqC,CAAC,CAAC;oBAChF,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC5B,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI;4BAC3E,UAAU,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CACnD,CAAC;oBACJ,CAAC;oBACD,qEAAqE;oBACrE,4DAA4D;oBAC5D,OAAO;gBACT,CAAC;gBAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;gBACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAChD,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;gBACvC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAClD,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC;oBAC9E,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzB,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,gFAAgF,CAC5G,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,4DAA4D;oBAC5D,+DAA+D;oBAC/D,8CAA8C;oBAC9C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;wBACxC,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,yCAAyC;4BACpG,2DAA2D,CAC9D,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;wBACxB,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;wBAChH,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACtB,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,6EAA6E;IAC7E,2DAA2D;IAC3D,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;QACvC,2EAA2E;QAC3E,yEAAyE;QACzE,qDAAqD;QACrD,wEAAwE;QACxE,+DAA+D;QAC/D,IAAI,QAAQ,CAAC,OAAO,KAAK,WAAW;YAAE,SAAS;QAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CACX,YAAY,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,oEAAoE,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE9D,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,SAAS,EAAE,IAAI,GAAG,EAAE;IACpB,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,OAAO;CACjB,CAAC"}

package/dist/server/routes/watch.js

@@ -0,0 +1,101 @@
+/**
+ * Hot-reload the routing table when its file changes.
+ *
+ * Routing config is the thing an operator iterates on — add a route, try it,
+ * adjust the model id — and a restart per edit is both slow and, under
+ * `node --watch`, invisible: the watcher only tracks imported `.ts` files, so
+ * editing `routes.json` appeared to do nothing at all. That is a worse failure
+ * than a slow one, because it looks like the config is wrong.
+ *
+ * The rule that makes this safe: **a table that fails to validate is REJECTED,
+ * and the previous one stays in force.** Never degrade to "no routing" on a bad
+ * edit — that would silently send substituted traffic back onto developers'
+ * subscriptions, which is the exact failure the whole project is designed
+ * against. A typo should change nothing, loudly.
+ */
+import { watch } from "node:fs";
+import { readFile, stat } from "node:fs/promises";
+import { parseRouteTable } from "./table.js";
+import { log } from "../log.js";
+/** Editors write-then-rename, so one save can emit several events. */
+const SETTLE_MS = 150;
+/**
+ * Backstop poll interval.
+ *
+ * `fs.watch` is not reliable everywhere: it drops events fired immediately
+ * after the watcher attaches, and on several container and network mounts it
+ * never fires at all. Since the whole point is that an edit takes effect
+ * without a restart, "usually notices" is not good enough — a cheap `stat`
+ * every few seconds turns a missed event into a few seconds of delay rather
+ * than silence.
+ */
+const POLL_MS = 2_000;
+export function watchRoutes(path, initial) {
+    let table = initial;
+    let timer = null;
+    let watcher = null;
+    let lastMtimeMs = null;
+    const reload = async () => {
+        try {
+            const next = parseRouteTable(await readFile(path, "utf8"));
+            if (next.version === table.version)
+                return;
+            table = next;
+            log.info("routing table reloaded", {
+                path,
+                version: next.version,
+                routes: next.routes.length,
+                upstreams: [...next.upstreams.keys()],
+            });
+        }
+        catch (err) {
+            // Loudly, and without changing anything.
+            log.error("routing table reload REJECTED; keeping the previous table", {
+                path,
+                version: table.version,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    };
+    // Backstop: notice a change even when no watch event arrives.
+    const poll = setInterval(() => {
+        void stat(path)
+            .then((st) => {
+            if (lastMtimeMs !== null && st.mtimeMs === lastMtimeMs)
+                return;
+            lastMtimeMs = st.mtimeMs;
+            return reload();
+        })
+            .catch(() => {
+            // The file may be mid-rename by an editor; the next tick will catch it.
+        });
+    }, POLL_MS);
+    poll.unref();
+    try {
+        watcher = watch(path, () => {
+            if (timer !== null)
+                clearTimeout(timer);
+            timer = setTimeout(() => void reload(), SETTLE_MS);
+        });
+        // Never hold the process open just to watch config.
+        watcher.unref();
+    }
+    catch (err) {
+        // Not fatal: the gateway runs fine, it just will not notice edits. Some
+        // filesystems (and some container mounts) do not support watching.
+        log.warn("could not watch routing table; edits need a restart", {
+            path,
+            error: String(err).slice(0, 120),
+        });
+    }
+    return {
+        current: () => table,
+        stop: () => {
+            if (timer !== null)
+                clearTimeout(timer);
+            clearInterval(poll);
+            watcher?.close();
+        },
+    };
+}
+//# sourceMappingURL=watch.js.map

package/dist/server/routes/watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../../server/routes/watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAEhC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhC,sEAAsE;AACtE,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB;;;;;;;;;GASG;AACH,MAAM,OAAO,GAAG,KAAK,CAAC;AAOtB,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAmB;IAC3D,IAAI,KAAK,GAAG,OAAO,CAAC;IACpB,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,IAAI,OAAO,GAAqB,IAAI,CAAC;IACrC,IAAI,WAAW,GAAkB,IAAI,CAAC;IAEtC,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;gBAAE,OAAO;YAC3C,KAAK,GAAG,IAAI,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACjC,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAC1B,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yCAAyC;YACzC,GAAG,CAAC,KAAK,CAAC,2DAA2D,EAAE;gBACrE,IAAI;gBACJ,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,8DAA8D;IAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5B,KAAK,IAAI,CAAC,IAAI,CAAC;aACZ,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;YACX,IAAI,WAAW,KAAK,IAAI,IAAI,EAAE,CAAC,OAAO,KAAK,WAAW;gBAAE,OAAO;YAC/D,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC;YACzB,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,wEAAwE;QAC1E,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,IAAI,CAAC,KAAK,EAAE,CAAC;IAEb,IAAI,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE;YACzB,IAAI,KAAK,KAAK,IAAI;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,oDAAoD;QACpD,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,mEAAmE;QACnE,GAAG,CAAC,IAAI,CAAC,qDAAqD,EAAE;YAC9D,IAAI;YACJ,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK;QACpB,IAAI,EAAE,GAAG,EAAE;YACT,IAAI,KAAK,KAAK,IAAI;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,aAAa,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/secret/fingerprint.js

@@ -0,0 +1,107 @@
+/**
+ * Credential classification and fingerprinting.
+ *
+ * Fest never persists a provider credential. On the subscription path it has no
+ * store to put one in: a bearer arrives on a request, is forwarded to Anthropic,
+ * and is forgotten. What we keep instead is a *fingerprint* — enough to
+ * correlate requests and detect one identity token being shared by two people,
+ * and not enough to reconstruct the secret.
+ *
+ * Used by the request path, the log redactor, and the Phase 0 capture server, so
+ * there is exactly one definition of "what is a secret".
+ */
+import { createHash } from "node:crypto";
+/** Headers whose values are credentials. Never log or persist these raw. */
+export const SECRET_HEADERS = new Set([
+    "authorization",
+    "x-api-key",
+    "proxy-authorization",
+    "x-anthropic-api-key",
+    "x-fireworks-api-key",
+    "cookie",
+    "set-cookie",
+    // Fest's own identity token is a revocable bearer too.
+    "x-fest-token",
+]);
+/** Hop-by-hop headers, never relayed to an upstream. */
+export const HOP_BY_HOP = new Set([
+    "host",
+    "connection",
+    "keep-alive",
+    "transfer-encoding",
+    "upgrade",
+    "proxy-connection",
+    "te",
+    "trailer",
+]);
+const PREFIX_CHARS = 11;
+const FINGERPRINT_CHARS = 12;
+/** Stable, non-reversible short fingerprint. Safe to log and store. */
+export function fingerprint(value) {
+    return createHash("sha256").update(value).digest("hex").slice(0, FINGERPRINT_CHARS);
+}
+/**
+ * Identify a credential family from its prefix without revealing the secret.
+ *
+ * The distinction that matters most: `sk-ant-oat…` is a subscription OAuth
+ * token (the developer's own, forwarded and forgotten) while `sk-ant-api…` is an
+ * API key (metered, possibly server-held). They are billed differently and must
+ * never be conflated in reporting.
+ */
+export function classifyCredential(header, rawValue) {
+    const value = rawValue.trim();
+    const bearer = /^Bearer\s+(.*)$/i.exec(value);
+    const token = bearer ? (bearer[1] ?? "") : value;
+    let kind = "UNKNOWN";
+    if (token.length === 0)
+        kind = "EMPTY";
+    else if (token.startsWith("sk-ant-oat"))
+        kind = "ANTHROPIC_OAUTH_SUBSCRIPTION";
+    else if (token.startsWith("sk-ant-api"))
+        kind = "ANTHROPIC_API_KEY";
+    else if (token.startsWith("sk-ant-"))
+        kind = "ANTHROPIC_OTHER";
+    else if (token.startsWith("fw_"))
+        kind = "FIREWORKS_KEY";
+    else if (token.startsWith("fpk_"))
+        kind = "FIREPASS_KEY";
+    else if (token.startsWith("fest_"))
+        kind = "FEST_IDENTITY_TOKEN";
+    return {
+        header,
+        scheme: bearer ? "Bearer" : "raw",
+        kind,
+        prefix: token.slice(0, Math.min(PREFIX_CHARS, token.length)),
+        length: token.length,
+        fingerprint: fingerprint(token),
+    };
+}
+/** True when this credential is a developer's own subscription (pass-through path). */
+export function isSubscriptionCredential(info) {
+    return info.kind === "ANTHROPIC_OAUTH_SUBSCRIPTION";
+}
+/**
+ * Last-resort log scrubber. Redaction that relies on programmer discipline
+ * fails, so every log line passes through this regardless of where it came from.
+ */
+const SECRET_PATTERN = /\b(?:sk-ant|sk|pk|ghp|gho|ghs|ghu|github_pat|xox[bpoars]|fw|fpk|fest)[-_][\w-]{8,}\b/gi;
+export function redactSecrets(text) {
+    return text.replace(SECRET_PATTERN, "<redacted>");
+}
+/**
+ * Split request headers into credentials (fingerprinted) and the rest (kept).
+ */
+export function partitionHeaders(headers) {
+    const credentials = [];
+    const plain = {};
+    for (const [name, value] of Object.entries(headers)) {
+        const lower = name.toLowerCase();
+        const joined = Array.isArray(value) ? value.join(", ") : (value ?? "");
+        if (SECRET_HEADERS.has(lower))
+            credentials.push(classifyCredential(lower, joined));
+        else
+            plain[lower] = joined;
+    }
+    return { credentials, plain };
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/server/secret/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../server/secret/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IACzD,eAAe;IACf,WAAW;IACX,qBAAqB;IACrB,qBAAqB;IACrB,qBAAqB;IACrB,QAAQ;IACR,YAAY;IACZ,uDAAuD;IACvD,cAAc;CACf,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,CAAC,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC;IACrD,MAAM;IACN,YAAY;IACZ,YAAY;IACZ,mBAAmB;IACnB,SAAS;IACT,kBAAkB;IAClB,IAAI;IACJ,SAAS;CACV,CAAC,CAAC;AAsBH,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACtF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,QAAgB;IACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAEjD,IAAI,IAAI,GAAmB,SAAS,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,GAAG,OAAO,CAAC;SAClC,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,IAAI,GAAG,8BAA8B,CAAC;SAC1E,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,IAAI,GAAG,mBAAmB,CAAC;SAC/D,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,IAAI,GAAG,iBAAiB,CAAC;SAC1D,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,IAAI,GAAG,eAAe,CAAC;SACpD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,IAAI,GAAG,cAAc,CAAC;SACpD,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,IAAI,GAAG,qBAAqB,CAAC;IAEjE,OAAO;QACL,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;QACjC,IAAI;QACJ,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,wBAAwB,CAAC,IAAoB;IAC3D,OAAO,IAAI,CAAC,IAAI,KAAK,8BAA8B,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,cAAc,GAClB,wFAAwF,CAAC;AAE3F,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAgE;IAEhE,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;;YAC9E,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC"}

package/dist/server/secret/non-persistable.js

@@ -0,0 +1,69 @@
+/**
+ * A value that cannot be written down by accident.
+ *
+ * Fest holds provider credentials in memory on the substitute path. The risk is
+ * not that someone deliberately logs one — it is that a secret rides along
+ * inside a context object that someone later passes to `JSON.stringify`, a log
+ * line, a template string, or an error message. Every one of those is a
+ * reasonable thing to write, and every one of them leaks.
+ *
+ * So the value is wrapped in a type whose every stringification path returns
+ * `"[redacted]"`:
+ *
+ *   `${secret}`               -> "[redacted]"   (toString / Symbol.toPrimitive)
+ *   JSON.stringify({secret})  -> {"...":"[redacted]"}
+ *   console.log(secret)       -> NonPersistable [redacted]   (inspect.custom)
+ *   String(secret)            -> "[redacted]"
+ *
+ * Reading the real value requires calling `.expose()`, which is greppable. That
+ * is the whole design: leaking becomes something you have to type on purpose,
+ * and a reviewer can find every place it happens with one search.
+ *
+ * This is a guard rail, not a boundary. It does not defend against code that
+ * WANTS the value — nothing in-process can. It defends against the accident.
+ */
+export const REDACTED = "[redacted]";
+export class NonPersistable {
+    /**
+     * `#value` and not `_value`: a true private field is invisible to
+     * `Object.keys`, to spreads, and to `JSON.stringify` even without the
+     * `toJSON` below. Two independent mechanisms have to fail before a secret
+     * escapes.
+     */
+    #value;
+    constructor(value) {
+        this.#value = value;
+    }
+    /** The real value. Greppable on purpose — every call site should be reviewable. */
+    expose() {
+        return this.#value;
+    }
+    toString() {
+        return REDACTED;
+    }
+    toJSON() {
+        return REDACTED;
+    }
+    /** Covers `${secret}` and `secret + ""`, which do not go through toString alone. */
+    [Symbol.toPrimitive]() {
+        return REDACTED;
+    }
+    get [Symbol.toStringTag]() {
+        return "NonPersistable";
+    }
+    /**
+     * `util.inspect` — which is what `console.log` and most loggers use — ignores
+     * `toString` entirely and would happily print the private field.
+     *
+     * The symbol is looked up by name rather than imported from `node:util` so
+     * this module stays dependency-free and usable anywhere.
+     */
+    [Symbol.for("nodejs.util.inspect.custom")]() {
+        return `NonPersistable ${REDACTED}`;
+    }
+}
+/** True for a wrapped value; narrows for callers that accept either. */
+export function isNonPersistable(value) {
+    return value instanceof NonPersistable;
+}
+//# sourceMappingURL=non-persistable.js.map

package/dist/server/secret/non-persistable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-persistable.js","sourceRoot":"","sources":["../../../server/secret/non-persistable.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC,MAAM,OAAO,cAAc;IACzB;;;;;OAKG;IACM,MAAM,CAAI;IAEnB,YAAY,KAAQ;QAClB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,mFAAmF;IACnF,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,oFAAoF;IACpF,CAAC,MAAM,CAAC,WAAW,CAAC;QAClB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACtB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACH,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACxC,OAAO,kBAAkB,QAAQ,EAAE,CAAC;IACtC,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,cAAc,CAAC;AACzC,CAAC"}

package/dist/server/store/audit.js

@@ -0,0 +1,53 @@
+/**
+ * The audit log: administrative actions, as a record rather than a debug log.
+ *
+ * Separate from `log.ts` on purpose. Application logs rotate, are filtered by
+ * level, and are the first thing lost when a container is replaced — but "who
+ * minted this token, and when" is asked months later, often by someone who was
+ * not there. So it is a table, it is queried by the dashboard, and it survives
+ * exactly as long as the database does.
+ *
+ * What must never appear here: a credential, a prompt, a completion. `detail`
+ * is for identifiers and decisions. There is a test that greps the whole table
+ * for secret-shaped strings.
+ */
+export function recordAudit(store, entry) {
+    store.db
+        .prepare(`INSERT INTO audit_log
+         (org_id, at, actor_user_id, actor_label, action, target, outcome, detail_json, ip)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+        .run(entry.orgId, entry.at ?? Date.now(), entry.actorUserId ?? null, entry.actorLabel.slice(0, 200), entry.action, entry.target ?? "", entry.outcome, JSON.stringify(entry.detail ?? {}), (entry.ip ?? "").slice(0, 64));
+}
+export function listAudit(store, orgId, opts = {}) {
+    const limit = Math.min(Math.max(opts.limit ?? 100, 1), 500);
+    const rows = store.db
+        .prepare(`SELECT seq, at, actor_user_id, actor_label, action, target, outcome, detail_json, ip
+         FROM audit_log
+        WHERE org_id = ? AND (? IS NULL OR seq < ?)
+        ORDER BY seq DESC
+        LIMIT ?`)
+        .all(orgId, opts.beforeSeq ?? null, opts.beforeSeq ?? null, limit);
+    return rows.map((r) => ({
+        seq: Number(r["seq"]),
+        at: Number(r["at"]),
+        actorUserId: r["actor_user_id"] === null ? null : String(r["actor_user_id"]),
+        actorLabel: String(r["actor_label"] ?? ""),
+        action: String(r["action"]),
+        target: String(r["target"] ?? ""),
+        outcome: String(r["outcome"]),
+        detail: parseDetail(r["detail_json"]),
+        ip: String(r["ip"] ?? ""),
+    }));
+}
+function parseDetail(raw) {
+    if (typeof raw !== "string")
+        return {};
+    try {
+        const parsed = JSON.parse(raw);
+        return typeof parsed === "object" && parsed !== null ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/server/store/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../server/store/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAgCH,MAAM,UAAU,WAAW,CAAC,KAAY,EAAE,KAAiB;IACzD,KAAK,CAAC,EAAE;SACL,OAAO,CACN;;0CAEoC,CACrC;SACA,GAAG,CACF,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EACtB,KAAK,CAAC,WAAW,IAAI,IAAI,EACzB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAC9B,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,MAAM,IAAI,EAAE,EAClB,KAAK,CAAC,OAAO,EACb,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAClC,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAC9B,CAAC;AACN,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,KAAY,EACZ,KAAa,EACb,OAAuE,EAAE;IAEzE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE;SAClB,OAAO,CACN;;;;gBAIU,CACX;SACA,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,KAAK,CAAmC,CAAC;IAEvG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrB,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,WAAW,EAAE,CAAC,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC5E,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAiB;QAC7C,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACrC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}