grok-cli-to-openai-compatible 1.2.0

package/prisma/schema.prisma

@@ -0,0 +1,122 @@
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "sqlite"
+  url      = env("DATABASE_URL")
+}
+
+model ApiKey {
+  id         String    @id @default(uuid())
+  name       String
+  keyPrefix  String
+  keyHash    String    @unique
+  role       String    @default("client")
+  /// safe | agent
+  mode       String    @default("safe")
+  isActive   Boolean   @default(true)
+  rateLimit  Int       @default(60)
+  maxTurns   Int?
+  timeoutMs  Int?
+  createdAt  DateTime  @default(now())
+  lastUsedAt DateTime?
+
+  chatRequests ChatRequest[]
+  documents    Document[]
+  auditLogs    AuditLog[]
+
+  @@index([keyPrefix])
+  @@index([isActive])
+  @@index([mode])
+  @@map("api_keys")
+}
+
+model ChatRequest {
+  id                 String   @id @default(uuid())
+  requestId          String   @unique
+  apiKeyId           String
+  model              String
+  stream             Boolean  @default(false)
+  status             String
+  durationMs         Int?
+  grokSessionId      String?
+  promptCiphertext   Bytes
+  promptIv           Bytes
+  promptTag          Bytes
+  responseCiphertext Bytes?
+  responseIv         Bytes?
+  responseTag        Bytes?
+  errorMessage       String?
+  ip                 String?
+  userAgent          String?
+  /// resolved policy mode used for this request
+  policyMode         String?
+  createdAt          DateTime @default(now())
+
+  apiKey    ApiKey                @relation(fields: [apiKeyId], references: [id], onDelete: Cascade)
+  documents ChatRequestDocument[]
+
+  @@index([apiKeyId, createdAt])
+  @@index([status])
+  @@map("chat_requests")
+}
+
+model Document {
+  id                String    @id @default(uuid())
+  apiKeyId          String
+  originalName      String
+  mimeType          String
+  sizeBytes         Int
+  storageType       String
+  contentCiphertext Bytes?
+  contentIv         Bytes?
+  contentTag        Bytes?
+  storagePath       String?
+  checksumSha256    String
+  createdAt         DateTime  @default(now())
+  deletedAt         DateTime?
+
+  apiKey       ApiKey                @relation(fields: [apiKeyId], references: [id], onDelete: Cascade)
+  chatRequests ChatRequestDocument[]
+
+  @@index([apiKeyId, createdAt])
+  @@index([deletedAt])
+  @@map("documents")
+}
+
+model ChatRequestDocument {
+  chatRequestId String
+  documentId    String
+
+  chatRequest ChatRequest @relation(fields: [chatRequestId], references: [id], onDelete: Cascade)
+  document    Document    @relation(fields: [documentId], references: [id], onDelete: Cascade)
+
+  @@id([chatRequestId, documentId])
+  @@map("chat_request_documents")
+}
+
+model AuditLog {
+  id         String   @id @default(uuid())
+  apiKeyId   String?
+  action     String
+  resource   String?
+  resourceId String?
+  metaJson   String?
+  ip         String?
+  createdAt  DateTime @default(now())
+
+  apiKey ApiKey? @relation(fields: [apiKeyId], references: [id], onDelete: SetNull)
+
+  @@index([apiKeyId, createdAt])
+  @@index([action, createdAt])
+  @@map("audit_logs")
+}
+
+model Setting {
+  key       String   @id
+  value     String
+  updatedAt DateTime @updatedAt
+
+  @@map("settings")
+}

package/prisma/seed.ts

@@ -0,0 +1,79 @@
+import { config as loadDotenv } from 'dotenv';
+import { createHash } from 'node:crypto';
+import { PrismaClient } from '@prisma/client';
+import { randomBytes, randomUUID } from 'node:crypto';
+
+loadDotenv();
+
+const prisma = new PrismaClient();
+
+function createApiKeySecret(): string {
+  return `gk_live_${randomBytes(24).toString('base64url')}`;
+}
+
+function hashApiKey(rawKey: string): string {
+  return createHash('sha256').update(rawKey, 'utf8').digest('hex');
+}
+
+function apiKeyPrefix(rawKey: string): string {
+  return rawKey.slice(0, 16);
+}
+
+async function main(): Promise<void> {
+  const existingAdmin = await prisma.apiKey.findFirst({
+    where: { role: 'admin', isActive: true },
+  });
+
+  if (existingAdmin) {
+    await prisma.apiKey.update({
+      where: { id: existingAdmin.id },
+      data: { mode: 'agent' },
+    });
+    console.log('Admin API key already exists:');
+    console.log(`  id:     ${existingAdmin.id}`);
+    console.log(`  name:   ${existingAdmin.name}`);
+    console.log(`  prefix: ${existingAdmin.keyPrefix}`);
+    console.log('  mode:   agent (ensured)');
+    const port = process.env.PORT || '3847';
+    console.log(`Admin panel: http://127.0.0.1:${port}/admin/`);
+    console.log('Plaintext key is not recoverable. Create a new admin key via API if needed.');
+    return;
+  }
+
+  const rawKey = process.env.ADMIN_BOOTSTRAP_KEY?.trim() || createApiKeySecret();
+  const keyHash = hashApiKey(rawKey);
+  const prefix = apiKeyPrefix(rawKey);
+
+  const created = await prisma.apiKey.create({
+    data: {
+      id: randomUUID(),
+      name: 'bootstrap-admin',
+      keyPrefix: prefix,
+      keyHash,
+      role: 'admin',
+      mode: 'agent',
+      rateLimit: 120,
+    },
+  });
+
+  const port = process.env.PORT || '3847';
+  console.log('Created bootstrap admin API key (store it securely — shown once):');
+  console.log(`  id:   ${created.id}`);
+  console.log(`  key:  ${rawKey}`);
+  console.log('');
+  console.log(`Admin panel: http://127.0.0.1:${port}/admin/`);
+  console.log('CLI: gctoac start | gctoac status | gctoac open');
+  console.log('API example:');
+  console.log(
+    `  curl -s http://127.0.0.1:${port}/admin/api/me -H "Authorization: Bearer ${rawKey}"`,
+  );
+}
+
+main()
+  .catch((err) => {
+    console.error(err);
+    process.exit(1);
+  })
+  .finally(async () => {
+    await prisma.$disconnect();
+  });