nixamp 0.60.2 → 0.60.4

package/dist/known-servers.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The servers nixamp.com has seen listed lately, and who owns each, kept in
+ * Postgres.
+ *
+ * The directory lives in memory and fills again only as servers heartbeat, so
+ * for a minute after every deploy nixamp.com/music had no catalogue and a
+ * label server's Veo or release call was refused as "not listed". This keeps
+ * the last day's servers so both work straight away; a server still listed
+ * always wins over what is remembered.
+ */
+import type { Queryable } from "./veo-studio.ts";
+export interface KnownServer {
+    base: string;
+    ownerId: string;
+    seenAt: number;
+}
+export declare class KnownServers {
+    private readonly db;
+    private readonly now;
+    private known;
+    private ready;
+    constructor(db: Queryable, now?: () => number);
+    private ensure;
+    /** What the last process saw in the last day. */
+    load(): Promise<void>;
+    /** The servers listed now: remembered here and in the database. */
+    sync(listed: Array<{
+        base: string;
+        ownerId: string;
+    }>): Promise<void>;
+    /** Servers seen in the last day. */
+    list(): KnownServer[];
+}

package/dist/known-servers.js

@@ -0,0 +1,40 @@
+const DAY_MS = 24 * 60 * 60 * 1000;
+export class KnownServers {
+    db;
+    now;
+    known = new Map();
+    ready = null;
+    constructor(db, now = Date.now) {
+        this.db = db;
+        this.now = now;
+    }
+    ensure() {
+        return (this.ready ??= this.db.query("CREATE TABLE IF NOT EXISTS music_servers (base TEXT PRIMARY KEY, owner_id TEXT NOT NULL, seen_at TIMESTAMPTZ NOT NULL DEFAULT now())").catch((error) => { this.ready = null; throw error; }));
+    }
+    /** What the last process saw in the last day. */
+    async load() {
+        await this.ensure();
+        const { rows } = await this.db.query("SELECT base, owner_id, seen_at FROM music_servers WHERE seen_at > $1", [new Date(this.now() - DAY_MS)]);
+        for (const row of rows) {
+            const base = String(row["base"]);
+            if (!this.known.has(base))
+                this.known.set(base, { base, ownerId: String(row["owner_id"]), seenAt: new Date(String(row["seen_at"])).getTime() });
+        }
+    }
+    /** The servers listed now: remembered here and in the database. */
+    async sync(listed) {
+        await this.ensure();
+        const at = this.now();
+        for (const one of listed) {
+            if (!one.base || !one.ownerId)
+                continue;
+            this.known.set(one.base, { base: one.base, ownerId: one.ownerId, seenAt: at });
+            await this.db.query("INSERT INTO music_servers (base, owner_id, seen_at) VALUES ($1, $2, now()) ON CONFLICT (base) DO UPDATE SET owner_id = EXCLUDED.owner_id, seen_at = now()", [one.base, one.ownerId]);
+        }
+    }
+    /** Servers seen in the last day. */
+    list() {
+        const since = this.now() - DAY_MS;
+        return [...this.known.values()].filter((one) => one.seenAt > since);
+    }
+}

package/dist/radio-pages.js

@@ -407,7 +407,12 @@ export function stationHead(station, slug, base, path = `/radio/${slug}`, image
 /** A station's picture for link previews: the cover of an album it plays, from the catalogue. */
 export function stationImage(catalogue, slug, base) {
     const album = [...catalogue.albums.values()].find((one) => one.stations.includes(slug) && (one.coverFile || one.label?.cover));
-    return album ? `${base}/radio/album/${album.slug}/cover.jpg` : "";
+    if (!album)
+        return "";
+    // The label's albums keep their cover beside the songs, not in them: the label serves it.
+    if (album.label?.cover)
+        return `${base}/api/v1/label/${album.label.artist}/${album.label.album}/cover.jpg`;
+    return `${base}/radio/album/${album.slug}/cover.jpg`;
 }
 /** The built station page (or the inline one) as /radio/<name> serves it: its head, the header, indexable. */
 export function asRadioPage(html, station, slug, base, nav, path, image = "") {

package/dist/server.js

@@ -65,7 +65,8 @@ import { AiLabel, VeoUnavailable } from "./ai-label.js";
 import { buyLink, handleLabelRoutes, isPublicLabelPath } from "./label-routes.js";
 import { GrantVerifier, MusicStore, PRICES } from "./music-store.js";
 import { handleMusicRoutes, isMusicPath, MusicHub, musicPageFor, serverId } from "./music-hub.js";
-import { VeoBudgetError, VeoStudio } from "./veo-studio.js";
+import { fileLedger, pgLedger, VeoBudgetError, VeoStudio } from "./veo-studio.js";
+import { KnownServers } from "./known-servers.js";
 import { handleStoreRoutes, isStorePath } from "./store-routes.js";
 import { AiRadio } from "./ai-radio.js";
 import { ListenerShares } from "./listener-shares.js";
@@ -7490,9 +7491,16 @@ export async function serve(argv, version = "0.1.0") {
     // The AI label's songs for sale: purchases kept here, the music zipped by the server that holds it.
     const jwtSecret = process.env["NIXAMP_JWT_SECRET"] ?? "";
     // The servers whose music nixamp.com sells and plays: the directory and the guide's peers.
+    // Remembered in Postgres too, so the catalogue and owners are there the moment a deploy restarts us.
+    const knownServers = options.directory && pool ? new KnownServers(pool) : undefined;
+    const listedServers = () => directory ? directory.list().map((one) => ({ base: peerBase(one.url), ownerId: one.ownerId ?? "" })).filter((one) => one.base) : [];
+    if (knownServers) {
+        void knownServers.load().catch((error) => console.log(`  music servers not remembered: ${error instanceof Error ? error.message : String(error)}`));
+        setInterval(() => void knownServers.sync(listedServers()).catch(() => undefined), 60_000).unref();
+    }
     const musicServers = () => {
-        const listed = directory ? directory.list().map((one) => peerBase(one.url)).filter(Boolean) : [];
-        return [...new Set([...guidePeers(), ...listed])];
+        const listed = listedServers().map((one) => one.base);
+        return [...new Set([...guidePeers(), ...listed, ...(knownServers?.list().map((one) => one.base) ?? [])])];
     };
     // nixamp.com/music: every server's label in one catalogue (music-hub.ts).
     const musicHub = options.directory ? new MusicHub({ peers: musicServers }) : undefined;
@@ -7514,14 +7522,21 @@ export async function serve(argv, version = "0.1.0") {
     // Veo shots for label music videos, under a monthly dollar cap (veo-studio.ts). nixamp.com only.
     const veoStudio = options.directory && process.env["NIXAMP_VEO_API_KEY"] ? new VeoStudio({
         key: process.env["NIXAMP_VEO_API_KEY"],
-        file: VeoStudio.fileFor(stateDir(), options.port),
+        // The month's spend in Postgres: a deploy recreates the container, and a file there would forget it.
+        ledger: pool ? pgLedger(pool) : fileLedger(VeoStudio.fileFor(stateDir(), options.port)),
         monthlyUsd: Number(process.env["NIXAMP_VEO_MONTHLY_USD"] ?? 50),
         usdPerSecond: Number(process.env["NIXAMP_VEO_USD_PER_SECOND"] ?? 0.15),
     }) : undefined;
     /** The signed-in account owns a server listed in the directory at this base. */
     const ownsListed = async (request, base) => {
         const me = accounts ? await accounts.whoIs(tokenFrom(request.headers)).catch(() => null) : null;
-        return Boolean(me && base && directory?.list().some((one) => one.ownerId === me.id && peerBase(one.url) === base));
+        if (!me || !base)
+            return false;
+        const listed = listedServers();
+        // A server listed now answers for itself; one not (yet) back since a restart, by who last owned it.
+        if (listed.some((one) => one.base === base))
+            return listed.some((one) => one.base === base && one.ownerId === me.id);
+        return Boolean(knownServers?.list().some((one) => one.base === base && one.ownerId === me.id));
     };
     const musicVeo = async (request) => {
         if (!veoStudio)
@@ -7530,7 +7545,7 @@ export async function serve(argv, version = "0.1.0") {
         if (!(await ownsListed(request, base)))
             return { status: 403, body: { error: "only the owner of a listed server" } };
         if (request.method === "GET")
-            return { status: 200, body: veoStudio.status() };
+            return { status: 200, body: await veoStudio.status() };
         if (request.method !== "POST")
             return { status: 405, body: { error: "GET or POST" } };
         let input;
@@ -7549,7 +7564,7 @@ export async function serve(argv, version = "0.1.0") {
         }
         catch (error) {
             if (error instanceof VeoBudgetError)
-                return { status: 402, body: { error: error.message, code: "budget", ...veoStudio.status() } };
+                return { status: 402, body: { error: error.message, code: "budget", ...(await veoStudio.status()) } };
             return { status: 422, body: { error: error.message, code: "refused" } };
         }
     };

package/dist/veo-studio.d.ts

@@ -2,9 +2,24 @@ export declare class VeoBudgetError extends Error {
 }
 export declare class VeoRefused extends Error {
 }
+/** Where the month's spend lives. `reserve` adds `usd` only if that keeps the month at or under `cap`. */
+export interface VeoLedger {
+    spent(month: string): Promise<number>;
+    reserve(month: string, usd: number, cap: number): Promise<boolean>;
+    refund(month: string, usd: number): Promise<void>;
+}
+export interface Queryable {
+    query: (text: string, params?: unknown[]) => Promise<{
+        rows: Array<Record<string, unknown>>;
+    }>;
+}
+/** The spend in Postgres, one row a month, reserved atomically. */
+export declare function pgLedger(db: Queryable): VeoLedger;
+/** The spend in a file, for a nixamp with no database (its own state directory must survive restarts). */
+export declare function fileLedger(file: string): VeoLedger;
 export interface VeoStudioOptions {
     key: string;
-    file: string;
+    ledger: VeoLedger;
     monthlyUsd?: number;
     usdPerSecond?: number;
     model?: string;
@@ -14,21 +29,19 @@ export interface VeoStudioOptions {
 }
 export declare class VeoStudio {
     private readonly options;
-    private spent;
     constructor(options: VeoStudioOptions);
     static fileFor(stateDir: string, port: number): string;
     private month;
     private get cap();
     private get rate();
-    private save;
-    status(): {
+    status(): Promise<{
         month: string;
         spentUsd: number;
         capUsd: number;
         leftUsd: number;
         usdPerSecond: number;
         secondsLeft: number;
-    };
+    }>;
     /** One shot: 4, 6 or 8 seconds, 16:9, with up to three reference images (JPEG). */
     clip(input: {
         prompt: string;

package/dist/veo-studio.js

@@ -11,6 +11,10 @@
  *
  * The key is NIXAMP_VEO_API_KEY, its own name, so nothing else on nixamp.com
  * starts spending Gemini credit because a Gemini key appeared.
+ *
+ * The month's spend is kept in Postgres on nixamp.com (a deploy recreates its
+ * container and would lose a file, and with it the cap), reserved in one
+ * statement that refuses to go over; a file only where there is no database.
  */
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
@@ -18,18 +22,62 @@ export class VeoBudgetError extends Error {
 }
 export class VeoRefused extends Error {
 }
+/** The spend in Postgres, one row a month, reserved atomically. */
+export function pgLedger(db) {
+    let ready = null;
+    const ensure = () => (ready ??= db.query("CREATE TABLE IF NOT EXISTS veo_spend (month TEXT PRIMARY KEY, usd NUMERIC NOT NULL DEFAULT 0)").catch((error) => { ready = null; throw error; }));
+    return {
+        async spent(month) {
+            await ensure();
+            return Number((await db.query("SELECT usd FROM veo_spend WHERE month = $1", [month])).rows[0]?.["usd"] ?? 0);
+        },
+        async reserve(month, usd, cap) {
+            await ensure();
+            await db.query("INSERT INTO veo_spend (month, usd) VALUES ($1, 0) ON CONFLICT (month) DO NOTHING", [month]);
+            const done = await db.query("UPDATE veo_spend SET usd = usd + $2 WHERE month = $1 AND usd + $2 <= $3 RETURNING usd", [month, usd, cap + 1e-9]);
+            return done.rows.length > 0;
+        },
+        async refund(month, usd) {
+            await ensure();
+            await db.query("UPDATE veo_spend SET usd = GREATEST(0, usd - $2) WHERE month = $1", [month, usd]);
+        },
+    };
+}
+/** The spend in a file, for a nixamp with no database (its own state directory must survive restarts). */
+export function fileLedger(file) {
+    let spent = {};
+    try {
+        spent = JSON.parse(readFileSync(file, "utf8")).spent ?? {};
+    }
+    catch {
+        spent = {};
+    }
+    const save = () => {
+        mkdirSync(dirname(file), { recursive: true });
+        const temporary = `${file}.${process.pid}.tmp`;
+        writeFileSync(temporary, `${JSON.stringify({ version: 1, spent }, null, 2)}\n`, { mode: 0o600 });
+        renameSync(temporary, file);
+    };
+    return {
+        spent: async (month) => spent[month] ?? 0,
+        async reserve(month, usd, cap) {
+            if ((spent[month] ?? 0) + usd > cap + 1e-9)
+                return false;
+            spent[month] = (spent[month] ?? 0) + usd;
+            save();
+            return true;
+        },
+        async refund(month, usd) {
+            spent[month] = Math.max(0, (spent[month] ?? 0) - usd);
+            save();
+        },
+    };
+}
 const BASE = "https://generativelanguage.googleapis.com/v1beta";
 export class VeoStudio {
     options;
-    spent = {};
     constructor(options) {
         this.options = options;
-        try {
-            this.spent = JSON.parse(readFileSync(options.file, "utf8")).spent ?? {};
-        }
-        catch {
-            this.spent = {};
-        }
     }
     static fileFor(stateDir, port) {
         return join(stateDir, `veo-${port}.json`);
@@ -39,14 +87,8 @@ export class VeoStudio {
     }
     get cap() { return this.options.monthlyUsd ?? 50; }
     get rate() { return this.options.usdPerSecond ?? 0.15; }
-    save() {
-        mkdirSync(dirname(this.options.file), { recursive: true });
-        const temporary = `${this.options.file}.${process.pid}.tmp`;
-        writeFileSync(temporary, `${JSON.stringify({ version: 1, spent: this.spent }, null, 2)}\n`, { mode: 0o600 });
-        renameSync(temporary, this.options.file);
-    }
-    status() {
-        const spent = this.spent[this.month()] ?? 0;
+    async status() {
+        const spent = await this.options.ledger.spent(this.month());
         const left = Math.max(0, this.cap - spent);
         return { month: this.month(), spentUsd: Math.round(spent * 100) / 100, capUsd: this.cap, leftUsd: Math.round(left * 100) / 100, usdPerSecond: this.rate, secondsLeft: Math.floor(left / this.rate) };
     }
@@ -55,17 +97,14 @@ export class VeoStudio {
         const seconds = [4, 6, 8].includes(input.seconds) ? input.seconds : 8;
         const cost = seconds * this.rate;
         const month = this.month();
-        if ((this.spent[month] ?? 0) + cost > this.cap + 1e-9)
+        // Reserved first, in one step that will not go over: two at once cannot both squeeze under the cap.
+        if (!(await this.options.ledger.reserve(month, cost, this.cap)))
             throw new VeoBudgetError(`this month's $${this.cap} of Veo is spent`);
-        // Reserved first, so two at once cannot both squeeze under the cap.
-        this.spent[month] = (this.spent[month] ?? 0) + cost;
-        this.save();
         try {
             return await this.make(input.prompt, seconds, input.references.slice(0, 3));
         }
         catch (error) {
-            this.spent[month] = Math.max(0, (this.spent[month] ?? 0) - cost);
-            this.save();
+            await this.options.ledger.refund(month, cost).catch(() => undefined);
             throw error;
         }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nixamp",
-  "version": "0.60.2",
+  "version": "0.60.4",
   "description": "It really whips the terminal's ass. A Winamp-shaped audio player for your terminal.",
   "license": "MIT",
   "type": "module",

package/src/known-servers.ts

@@ -0,0 +1,53 @@
+/**
+ * The servers nixamp.com has seen listed lately, and who owns each, kept in
+ * Postgres.
+ *
+ * The directory lives in memory and fills again only as servers heartbeat, so
+ * for a minute after every deploy nixamp.com/music had no catalogue and a
+ * label server's Veo or release call was refused as "not listed". This keeps
+ * the last day's servers so both work straight away; a server still listed
+ * always wins over what is remembered.
+ */
+import type { Queryable } from "./veo-studio.ts";
+
+export interface KnownServer { base: string; ownerId: string; seenAt: number }
+
+const DAY_MS = 24 * 60 * 60 * 1000;
+
+export class KnownServers {
+  private known = new Map<string, KnownServer>();
+  private ready: Promise<unknown> | null = null;
+
+  constructor(private readonly db: Queryable, private readonly now: () => number = Date.now) {}
+
+  private ensure(): Promise<unknown> {
+    return (this.ready ??= this.db.query("CREATE TABLE IF NOT EXISTS music_servers (base TEXT PRIMARY KEY, owner_id TEXT NOT NULL, seen_at TIMESTAMPTZ NOT NULL DEFAULT now())").catch((error: unknown) => { this.ready = null; throw error; }));
+  }
+
+  /** What the last process saw in the last day. */
+  async load(): Promise<void> {
+    await this.ensure();
+    const { rows } = await this.db.query("SELECT base, owner_id, seen_at FROM music_servers WHERE seen_at > $1", [new Date(this.now() - DAY_MS)]);
+    for (const row of rows) {
+      const base = String(row["base"]);
+      if (!this.known.has(base)) this.known.set(base, { base, ownerId: String(row["owner_id"]), seenAt: new Date(String(row["seen_at"])).getTime() });
+    }
+  }
+
+  /** The servers listed now: remembered here and in the database. */
+  async sync(listed: Array<{ base: string; ownerId: string }>): Promise<void> {
+    await this.ensure();
+    const at = this.now();
+    for (const one of listed) {
+      if (!one.base || !one.ownerId) continue;
+      this.known.set(one.base, { base: one.base, ownerId: one.ownerId, seenAt: at });
+      await this.db.query("INSERT INTO music_servers (base, owner_id, seen_at) VALUES ($1, $2, now()) ON CONFLICT (base) DO UPDATE SET owner_id = EXCLUDED.owner_id, seen_at = now()", [one.base, one.ownerId]);
+    }
+  }
+
+  /** Servers seen in the last day. */
+  list(): KnownServer[] {
+    const since = this.now() - DAY_MS;
+    return [...this.known.values()].filter((one) => one.seenAt > since);
+  }
+}

package/src/radio-pages.ts

@@ -496,7 +496,10 @@ export function stationHead(station: StationFace, slug: string, base: string, pa
 /** A station's picture for link previews: the cover of an album it plays, from the catalogue. */
 export function stationImage(catalogue: RadioCatalogue, slug: string, base: string): string {
   const album = [...catalogue.albums.values()].find((one) => one.stations.includes(slug) && (one.coverFile || one.label?.cover));
-  return album ? `${base}/radio/album/${album.slug}/cover.jpg` : "";
+  if (!album) return "";
+  // The label's albums keep their cover beside the songs, not in them: the label serves it.
+  if (album.label?.cover) return `${base}/api/v1/label/${album.label.artist}/${album.label.album}/cover.jpg`;
+  return `${base}/radio/album/${album.slug}/cover.jpg`;
 }
 
 /** The built station page (or the inline one) as /radio/<name> serves it: its head, the header, indexable. */

package/src/server.ts

@@ -84,7 +84,8 @@ import { AiLabel, VeoUnavailable } from "./ai-label.ts";
 import { buyLink, handleLabelRoutes, isPublicLabelPath } from "./label-routes.ts";
 import { GrantVerifier, MusicStore, PRICES } from "./music-store.ts";
 import { handleMusicRoutes, isMusicPath, MusicHub, musicPageFor, serverId } from "./music-hub.ts";
-import { VeoBudgetError, VeoStudio } from "./veo-studio.ts";
+import { fileLedger, pgLedger, VeoBudgetError, VeoStudio } from "./veo-studio.ts";
+import { KnownServers } from "./known-servers.ts";
 import { handleStoreRoutes, isStorePath } from "./store-routes.ts";
 import { AiRadio } from "./ai-radio.ts";
 import { ListenerShares } from "./listener-shares.ts";
@@ -7964,9 +7965,17 @@ export async function serve(argv: string[], version = "0.1.0"): Promise<void> {
   // The AI label's songs for sale: purchases kept here, the music zipped by the server that holds it.
   const jwtSecret = process.env["NIXAMP_JWT_SECRET"] ?? "";
   // The servers whose music nixamp.com sells and plays: the directory and the guide's peers.
+  // Remembered in Postgres too, so the catalogue and owners are there the moment a deploy restarts us.
+  const knownServers = options.directory && pool ? new KnownServers(pool as unknown as import("./veo-studio.ts").Queryable) : undefined;
+  const listedServers = (): Array<{ base: string; ownerId: string }> =>
+    directory ? directory.list().map((one) => ({ base: peerBase(one.url), ownerId: one.ownerId ?? "" })).filter((one) => one.base) : [];
+  if (knownServers) {
+    void knownServers.load().catch((error: unknown) => console.log(`  music servers not remembered: ${error instanceof Error ? error.message : String(error)}`));
+    setInterval(() => void knownServers.sync(listedServers()).catch(() => undefined), 60_000).unref();
+  }
   const musicServers = (): string[] => {
-    const listed = directory ? directory.list().map((one) => peerBase(one.url)).filter(Boolean) : [];
-    return [...new Set([...guidePeers(), ...listed])];
+    const listed = listedServers().map((one) => one.base);
+    return [...new Set([...guidePeers(), ...listed, ...(knownServers?.list().map((one) => one.base) ?? [])])];
   };
   // nixamp.com/music: every server's label in one catalogue (music-hub.ts).
   const musicHub = options.directory ? new MusicHub({ peers: musicServers }) : undefined;
@@ -7988,20 +7997,25 @@ export async function serve(argv: string[], version = "0.1.0"): Promise<void> {
   // Veo shots for label music videos, under a monthly dollar cap (veo-studio.ts). nixamp.com only.
   const veoStudio = options.directory && process.env["NIXAMP_VEO_API_KEY"] ? new VeoStudio({
     key: process.env["NIXAMP_VEO_API_KEY"],
-    file: VeoStudio.fileFor(stateDir(), options.port),
+    // The month's spend in Postgres: a deploy recreates the container, and a file there would forget it.
+    ledger: pool ? pgLedger(pool as unknown as import("./veo-studio.ts").Queryable) : fileLedger(VeoStudio.fileFor(stateDir(), options.port)),
     monthlyUsd: Number(process.env["NIXAMP_VEO_MONTHLY_USD"] ?? 50),
     usdPerSecond: Number(process.env["NIXAMP_VEO_USD_PER_SECOND"] ?? 0.15),
   }) : undefined;
   /** The signed-in account owns a server listed in the directory at this base. */
   const ownsListed = async (request: IncomingMessage, base: string): Promise<boolean> => {
     const me = accounts ? await accounts.whoIs(tokenFrom(request.headers)).catch(() => null) : null;
-    return Boolean(me && base && directory?.list().some((one) => one.ownerId === me.id && peerBase(one.url) === base));
+    if (!me || !base) return false;
+    const listed = listedServers();
+    // A server listed now answers for itself; one not (yet) back since a restart, by who last owned it.
+    if (listed.some((one) => one.base === base)) return listed.some((one) => one.base === base && one.ownerId === me.id);
+    return Boolean(knownServers?.list().some((one) => one.base === base && one.ownerId === me.id));
   };
   const musicVeo = async (request: IncomingMessage): Promise<{ status: number; body: unknown; video?: Buffer }> => {
     if (!veoStudio) return { status: 404, body: { error: "Veo is not set up here" } };
     const base = peerBase(String(request.headers["x-nixamp-server"] ?? ""));
     if (!(await ownsListed(request, base))) return { status: 403, body: { error: "only the owner of a listed server" } };
-    if (request.method === "GET") return { status: 200, body: veoStudio.status() };
+    if (request.method === "GET") return { status: 200, body: await veoStudio.status() };
     if (request.method !== "POST") return { status: 405, body: { error: "GET or POST" } };
     let input: { prompt?: unknown; seconds?: unknown; references?: unknown };
     try { input = JSON.parse(await readBody(request, 2 * 1024 * 1024)) as typeof input; } catch { return { status: 400, body: { error: "a JSON body under 2 MB" } }; }
@@ -8011,7 +8025,7 @@ export async function serve(argv: string[], version = "0.1.0"): Promise<void> {
     try {
       return { status: 200, body: null, video: await veoStudio.clip({ prompt, seconds: Number(input.seconds ?? 8), references }) };
     } catch (error) {
-      if (error instanceof VeoBudgetError) return { status: 402, body: { error: error.message, code: "budget", ...veoStudio.status() } };
+      if (error instanceof VeoBudgetError) return { status: 402, body: { error: error.message, code: "budget", ...(await veoStudio.status()) } };
       return { status: 422, body: { error: (error as Error).message, code: "refused" } };
     }
   };

package/src/veo-studio.ts

@@ -11,6 +11,10 @@
  *
  * The key is NIXAMP_VEO_API_KEY, its own name, so nothing else on nixamp.com
  * starts spending Gemini credit because a Gemini key appeared.
+ *
+ * The month's spend is kept in Postgres on nixamp.com (a deploy recreates its
+ * container and would lose a file, and with it the cap), reserved in one
+ * statement that refuses to go over; a file only where there is no database.
  */
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
@@ -18,9 +22,65 @@ import { dirname, join } from "node:path";
 export class VeoBudgetError extends Error {}
 export class VeoRefused extends Error {}
 
+/** Where the month's spend lives. `reserve` adds `usd` only if that keeps the month at or under `cap`. */
+export interface VeoLedger {
+  spent(month: string): Promise<number>;
+  reserve(month: string, usd: number, cap: number): Promise<boolean>;
+  refund(month: string, usd: number): Promise<void>;
+}
+
+export interface Queryable { query: (text: string, params?: unknown[]) => Promise<{ rows: Array<Record<string, unknown>> }> }
+
+/** The spend in Postgres, one row a month, reserved atomically. */
+export function pgLedger(db: Queryable): VeoLedger {
+  let ready: Promise<unknown> | null = null;
+  const ensure = (): Promise<unknown> => (ready ??= db.query("CREATE TABLE IF NOT EXISTS veo_spend (month TEXT PRIMARY KEY, usd NUMERIC NOT NULL DEFAULT 0)").catch((error: unknown) => { ready = null; throw error; }));
+  return {
+    async spent(month) {
+      await ensure();
+      return Number((await db.query("SELECT usd FROM veo_spend WHERE month = $1", [month])).rows[0]?.["usd"] ?? 0);
+    },
+    async reserve(month, usd, cap) {
+      await ensure();
+      await db.query("INSERT INTO veo_spend (month, usd) VALUES ($1, 0) ON CONFLICT (month) DO NOTHING", [month]);
+      const done = await db.query("UPDATE veo_spend SET usd = usd + $2 WHERE month = $1 AND usd + $2 <= $3 RETURNING usd", [month, usd, cap + 1e-9]);
+      return done.rows.length > 0;
+    },
+    async refund(month, usd) {
+      await ensure();
+      await db.query("UPDATE veo_spend SET usd = GREATEST(0, usd - $2) WHERE month = $1", [month, usd]);
+    },
+  };
+}
+
+/** The spend in a file, for a nixamp with no database (its own state directory must survive restarts). */
+export function fileLedger(file: string): VeoLedger {
+  let spent: Record<string, number> = {};
+  try { spent = (JSON.parse(readFileSync(file, "utf8")) as { spent?: Record<string, number> }).spent ?? {}; } catch { spent = {}; }
+  const save = (): void => {
+    mkdirSync(dirname(file), { recursive: true });
+    const temporary = `${file}.${process.pid}.tmp`;
+    writeFileSync(temporary, `${JSON.stringify({ version: 1, spent }, null, 2)}\n`, { mode: 0o600 });
+    renameSync(temporary, file);
+  };
+  return {
+    spent: async (month) => spent[month] ?? 0,
+    async reserve(month, usd, cap) {
+      if ((spent[month] ?? 0) + usd > cap + 1e-9) return false;
+      spent[month] = (spent[month] ?? 0) + usd;
+      save();
+      return true;
+    },
+    async refund(month, usd) {
+      spent[month] = Math.max(0, (spent[month] ?? 0) - usd);
+      save();
+    },
+  };
+}
+
 export interface VeoStudioOptions {
   key: string;
-  file: string;
+  ledger: VeoLedger;
   monthlyUsd?: number;
   usdPerSecond?: number;
   model?: string;
@@ -32,15 +92,7 @@ export interface VeoStudioOptions {
 const BASE = "https://generativelanguage.googleapis.com/v1beta";
 
 export class VeoStudio {
-  private spent: Record<string, number> = {};
-
-  constructor(private readonly options: VeoStudioOptions) {
-    try {
-      this.spent = (JSON.parse(readFileSync(options.file, "utf8")) as { spent?: Record<string, number> }).spent ?? {};
-    } catch {
-      this.spent = {};
-    }
-  }
+  constructor(private readonly options: VeoStudioOptions) {}
 
   static fileFor(stateDir: string, port: number): string {
     return join(stateDir, `veo-${port}.json`);
@@ -53,15 +105,8 @@ export class VeoStudio {
   private get cap(): number { return this.options.monthlyUsd ?? 50; }
   private get rate(): number { return this.options.usdPerSecond ?? 0.15; }
 
-  private save(): void {
-    mkdirSync(dirname(this.options.file), { recursive: true });
-    const temporary = `${this.options.file}.${process.pid}.tmp`;
-    writeFileSync(temporary, `${JSON.stringify({ version: 1, spent: this.spent }, null, 2)}\n`, { mode: 0o600 });
-    renameSync(temporary, this.options.file);
-  }
-
-  status(): { month: string; spentUsd: number; capUsd: number; leftUsd: number; usdPerSecond: number; secondsLeft: number } {
-    const spent = this.spent[this.month()] ?? 0;
+  async status(): Promise<{ month: string; spentUsd: number; capUsd: number; leftUsd: number; usdPerSecond: number; secondsLeft: number }> {
+    const spent = await this.options.ledger.spent(this.month());
     const left = Math.max(0, this.cap - spent);
     return { month: this.month(), spentUsd: Math.round(spent * 100) / 100, capUsd: this.cap, leftUsd: Math.round(left * 100) / 100, usdPerSecond: this.rate, secondsLeft: Math.floor(left / this.rate) };
   }
@@ -71,15 +116,12 @@ export class VeoStudio {
     const seconds = [4, 6, 8].includes(input.seconds) ? input.seconds : 8;
     const cost = seconds * this.rate;
     const month = this.month();
-    if ((this.spent[month] ?? 0) + cost > this.cap + 1e-9) throw new VeoBudgetError(`this month's $${this.cap} of Veo is spent`);
-    // Reserved first, so two at once cannot both squeeze under the cap.
-    this.spent[month] = (this.spent[month] ?? 0) + cost;
-    this.save();
+    // Reserved first, in one step that will not go over: two at once cannot both squeeze under the cap.
+    if (!(await this.options.ledger.reserve(month, cost, this.cap))) throw new VeoBudgetError(`this month's $${this.cap} of Veo is spent`);
     try {
       return await this.make(input.prompt, seconds, input.references.slice(0, 3));
     } catch (error) {
-      this.spent[month] = Math.max(0, (this.spent[month] ?? 0) - cost);
-      this.save();
+      await this.options.ledger.refund(month, cost).catch(() => undefined);
       throw error;
     }
   }

package/web/dist/assets/{ar-9DPCOmaG.js → ar-D_8XCYVi.js}

@@ -1 +1 @@
-import{t as e}from"./main-CUpgrT90.js";var t={...e,"No parties live right now.":`لا توجد جلسات مباشرة الآن.`,"Could not refresh parties.":`تعذر تحديث الجلسات.`,"Pick a server in the directory, or paste its link here.":`اختر خادمًا من الدليل أو الصق رابطه هنا.`,"Interface language":`لغة الواجهة`,Language:`اللغة`,"Translation language":`لغة الترجمة`,"Original (auto-detect)":`الأصل (اكتشاف تلقائي)`,Play:`تشغيل`,Pause:`إيقاف مؤقت`,Stop:`إيقاف`,Next:`التالي`,Previous:`السابق`,Select:`اختيار`,"Next/Prev":`التالي/السابق`,Quit:`خروج`,"Now Playing":`قيد التشغيل`,"Spectrum Analyser":`محلل الطيف`,Playlist:`قائمة التشغيل`,Files:`الملفات`,"Open files":`فتح ملفات`,"Open folder":`فتح مجلد`,"Add to library":`إضافة إلى المكتبة`,"Replace playlist":`استبدال قائمة التشغيل`,Filter:`تصفية`,Search:`بحث`,"Nothing loaded.":`لم يُحمّل أي محتوى.`,"Empty.":`فارغ.`,"Loading…":`جارٍ التحميل…`,"Connecting…":`جارٍ الاتصال…`,Connected:`متصل`,"Not connected":`غير متصل`,"No source":`لا يوجد مصدر`,Playing:`يعمل`,Stopped:`متوقف`,Volume:`مستوى الصوت`,Seek:`موضع التشغيل`,"Full screen":`ملء الشاشة`,Download:`تنزيل`,Share:`مشاركة`,Copy:`نسخ`,"Copy link":`نسخ الرابط`,Copied:`تم النسخ`,Save:`حفظ`,Cancel:`إلغاء`,Close:`إغلاق`,Remove:`إزالة`,Delete:`حذف`,Edit:`تعديل`,Add:`إضافة`,Send:`إرسال`,Retry:`إعادة المحاولة`,Back:`رجوع`,"Next page":`الصفحة التالية`,"Previous page":`الصفحة السابقة`,"Show more":`عرض المزيد`,Panels:`اللوحات`,"Reset layout":`إعادة ضبط التخطيط`,Show:`إظهار`,Hide:`إخفاء`,Collapse:`طي`,Expand:`توسيع`,"Move up":`نقل لأعلى`,"Move down":`نقل لأسفل`,Install:`تثبيت`,"TV mode":`وضع التلفاز`,On:`مفعّل`,Off:`معطّل`,Account:`الحساب`,"Sign in":`تسجيل الدخول`,"Sign out":`تسجيل الخروج`,"Create account":`إنشاء حساب`,Email:`البريد الإلكتروني`,Password:`كلمة المرور`,"Forgot password?":`نسيت كلمة المرور؟`,"Welcome back":`مرحبًا بعودتك`,Profile:`الملف الشخصي`,Handle:`اسم المستخدم`,"Your servers":`خوادمك`,Server:`الخادم`,Connect:`اتصال`,Disconnect:`قطع الاتصال`,Directory:`الدليل`,Favourites:`المفضلة`,Follow:`متابعة`,Unfollow:`إلغاء المتابعة`,Notifications:`الإشعارات`,"Phone number":`رقم الهاتف`,"Save number":`حفظ الرقم`,Transcript:`النص المفرغ`,Captions:`الترجمة النصية`,"Translate audio":`ترجمة الصوت`,"Audio language":`لغة الصوت`,"Audio options":`خيارات الصوت`,"Keep background sound":`الاحتفاظ بأصوات الخلفية`,"Background level":`مستوى صوت الخلفية`,"Speaker voices":`أصوات المتحدثين`,"Any voice":`أي صوت`,"Male voice":`صوت رجالي`,"Female voice":`صوت نسائي`,"Original audio.":`الصوت الأصلي.`,"Buy translated audio":`شراء الصوت المترجم`,"Audio credit":`رصيد الصوت`,"Buy pass":`شراء تصريح`,Pass:`تصريح`,"Pay with":`الدفع باستخدام`,"Check payment":`التحقق من الدفع`,"Open checkout":`الانتقال للدفع`,"Free sessions":`جلسات مجانية`,"Usage rates and expiry":`الأسعار ومدة الصلاحية`,Catalogs:`الكتالوجات`,"Add catalog":`إضافة كتالوج`,"Catalog name":`اسم الكتالوج`,Link:`الرابط`,"Play link":`تشغيل الرابط`,"Go live":`بدء بث مباشر`,Publish:`نشر`,Listen:`استماع`,"Live now":`مباشر الآن`,Upcoming:`قريبًا`,Parties:`حفلات المشاهدة`,"Join party":`الانضمام للحفلة`,"Invite code":`رمز الدعوة`,Invite:`دعوة`,Chat:`الدردشة`,"Chat message":`رسالة دردشة`,People:`الأشخاص`,Speaker:`متحدث`,Speakers:`المتحدثون`,Listener:`مستمع`,Moderator:`مشرف`,"Raise hand":`رفع اليد`,"Hand raises":`الأيدي المرفوعة`,Questions:`الأسئلة`,Resources:`الموارد`,Replay:`إعادة العرض`,Schedule:`الجدول`,Event:`الفعالية`,Host:`المضيف`,About:`حول`,Stage:`المنصة`,Title:`العنوان`,Description:`الوصف`,Topic:`الموضوع`,Public:`عام`,"Anyone with the link":`أي شخص لديه الرابط`,"Invited people":`الأشخاص المدعوون`,"Who can join":`من يمكنه الانضمام`,"Date and time":`التاريخ والوقت`,"Expected length":`المدة المتوقعة`,Repeat:`تكرار`,"Does not repeat":`لا يتكرر`,"Every day":`كل يوم`,"Every week":`كل أسبوع`,Homepage:`الموقع الإلكتروني`,"Host name":`اسم المضيف`,"Profile photo URL":`رابط صورة الملف الشخصي`,"Broadcast link":`رابط البث`,"Edit event":`تعديل الفعالية`,"Save changes":`حفظ التغييرات`,"Create live":`إنشاء بث مباشر`,"Schedule class":`جدولة درس`,"Start class":`بدء الدرس`,"End event":`إنهاء الفعالية`,"End session":`إنهاء الجلسة`,"Session ended":`انتهت الجلسة`,"Event ended":`انتهت الفعالية`,Cancelled:`ملغاة`,"Replay available":`إعادة العرض متاحة`,Join:`انضمام`,"Create invite":`إنشاء دعوة`,"Invite as":`الدعوة بصفة`,"Watch now":`شاهد الآن`,"Start a room":`إنشاء غرفة`,"Recent replays":`إعادات العرض الأخيرة`,"Your account":`حسابك`,"Write with AI":`الكتابة بالذكاء الاصطناعي`,"Suggested title":`العنوان المقترح`,"Suggested description":`الوصف المقترح`,"Suggested topic":`الموضوع المقترح`,"Use these details":`استخدام هذه التفاصيل`,"Learn something live.":`تعلّم شيئًا مباشرة.`,"Screen share":`مشاركة الشاشة`,"Upload and broadcast":`رفع وبث`,Help:`مساعدة`,"Reload Player":`إعادة تحميل المشغل`,"Copy Bundled CLI Path":`نسخ مسار أداة سطر الأوامر المضمنة`,"Developer tools":`أدوات المطور`,Undo:`تراجع`,Redo:`إعادة`,Cut:`قص`,Paste:`لصق`,"Select all":`تحديد الكل`,Status:`الحالة`,"Activity log":`سجل النشاط`,Admin:`الإدارة`,"Playback controls":`عناصر التحكم بالتشغيل`,"Tracks and folders":`المقاطع والمجلدات`,"Original-language captions.":`ترجمة نصية باللغة الأصلية.`,"Skip to playback controls":`الانتقال إلى عناصر التحكم بالتشغيل`,"Skip to playlist":`الانتقال إلى قائمة التشغيل`,"Skip to transcript and translated audio":`الانتقال إلى النص المفرغ والصوت المترجم`};export{t as default};
+import{t as e}from"./main-sbQMI_Ki.js";var t={...e,"No parties live right now.":`لا توجد جلسات مباشرة الآن.`,"Could not refresh parties.":`تعذر تحديث الجلسات.`,"Pick a server in the directory, or paste its link here.":`اختر خادمًا من الدليل أو الصق رابطه هنا.`,"Interface language":`لغة الواجهة`,Language:`اللغة`,"Translation language":`لغة الترجمة`,"Original (auto-detect)":`الأصل (اكتشاف تلقائي)`,Play:`تشغيل`,Pause:`إيقاف مؤقت`,Stop:`إيقاف`,Next:`التالي`,Previous:`السابق`,Select:`اختيار`,"Next/Prev":`التالي/السابق`,Quit:`خروج`,"Now Playing":`قيد التشغيل`,"Spectrum Analyser":`محلل الطيف`,Playlist:`قائمة التشغيل`,Files:`الملفات`,"Open files":`فتح ملفات`,"Open folder":`فتح مجلد`,"Add to library":`إضافة إلى المكتبة`,"Replace playlist":`استبدال قائمة التشغيل`,Filter:`تصفية`,Search:`بحث`,"Nothing loaded.":`لم يُحمّل أي محتوى.`,"Empty.":`فارغ.`,"Loading…":`جارٍ التحميل…`,"Connecting…":`جارٍ الاتصال…`,Connected:`متصل`,"Not connected":`غير متصل`,"No source":`لا يوجد مصدر`,Playing:`يعمل`,Stopped:`متوقف`,Volume:`مستوى الصوت`,Seek:`موضع التشغيل`,"Full screen":`ملء الشاشة`,Download:`تنزيل`,Share:`مشاركة`,Copy:`نسخ`,"Copy link":`نسخ الرابط`,Copied:`تم النسخ`,Save:`حفظ`,Cancel:`إلغاء`,Close:`إغلاق`,Remove:`إزالة`,Delete:`حذف`,Edit:`تعديل`,Add:`إضافة`,Send:`إرسال`,Retry:`إعادة المحاولة`,Back:`رجوع`,"Next page":`الصفحة التالية`,"Previous page":`الصفحة السابقة`,"Show more":`عرض المزيد`,Panels:`اللوحات`,"Reset layout":`إعادة ضبط التخطيط`,Show:`إظهار`,Hide:`إخفاء`,Collapse:`طي`,Expand:`توسيع`,"Move up":`نقل لأعلى`,"Move down":`نقل لأسفل`,Install:`تثبيت`,"TV mode":`وضع التلفاز`,On:`مفعّل`,Off:`معطّل`,Account:`الحساب`,"Sign in":`تسجيل الدخول`,"Sign out":`تسجيل الخروج`,"Create account":`إنشاء حساب`,Email:`البريد الإلكتروني`,Password:`كلمة المرور`,"Forgot password?":`نسيت كلمة المرور؟`,"Welcome back":`مرحبًا بعودتك`,Profile:`الملف الشخصي`,Handle:`اسم المستخدم`,"Your servers":`خوادمك`,Server:`الخادم`,Connect:`اتصال`,Disconnect:`قطع الاتصال`,Directory:`الدليل`,Favourites:`المفضلة`,Follow:`متابعة`,Unfollow:`إلغاء المتابعة`,Notifications:`الإشعارات`,"Phone number":`رقم الهاتف`,"Save number":`حفظ الرقم`,Transcript:`النص المفرغ`,Captions:`الترجمة النصية`,"Translate audio":`ترجمة الصوت`,"Audio language":`لغة الصوت`,"Audio options":`خيارات الصوت`,"Keep background sound":`الاحتفاظ بأصوات الخلفية`,"Background level":`مستوى صوت الخلفية`,"Speaker voices":`أصوات المتحدثين`,"Any voice":`أي صوت`,"Male voice":`صوت رجالي`,"Female voice":`صوت نسائي`,"Original audio.":`الصوت الأصلي.`,"Buy translated audio":`شراء الصوت المترجم`,"Audio credit":`رصيد الصوت`,"Buy pass":`شراء تصريح`,Pass:`تصريح`,"Pay with":`الدفع باستخدام`,"Check payment":`التحقق من الدفع`,"Open checkout":`الانتقال للدفع`,"Free sessions":`جلسات مجانية`,"Usage rates and expiry":`الأسعار ومدة الصلاحية`,Catalogs:`الكتالوجات`,"Add catalog":`إضافة كتالوج`,"Catalog name":`اسم الكتالوج`,Link:`الرابط`,"Play link":`تشغيل الرابط`,"Go live":`بدء بث مباشر`,Publish:`نشر`,Listen:`استماع`,"Live now":`مباشر الآن`,Upcoming:`قريبًا`,Parties:`حفلات المشاهدة`,"Join party":`الانضمام للحفلة`,"Invite code":`رمز الدعوة`,Invite:`دعوة`,Chat:`الدردشة`,"Chat message":`رسالة دردشة`,People:`الأشخاص`,Speaker:`متحدث`,Speakers:`المتحدثون`,Listener:`مستمع`,Moderator:`مشرف`,"Raise hand":`رفع اليد`,"Hand raises":`الأيدي المرفوعة`,Questions:`الأسئلة`,Resources:`الموارد`,Replay:`إعادة العرض`,Schedule:`الجدول`,Event:`الفعالية`,Host:`المضيف`,About:`حول`,Stage:`المنصة`,Title:`العنوان`,Description:`الوصف`,Topic:`الموضوع`,Public:`عام`,"Anyone with the link":`أي شخص لديه الرابط`,"Invited people":`الأشخاص المدعوون`,"Who can join":`من يمكنه الانضمام`,"Date and time":`التاريخ والوقت`,"Expected length":`المدة المتوقعة`,Repeat:`تكرار`,"Does not repeat":`لا يتكرر`,"Every day":`كل يوم`,"Every week":`كل أسبوع`,Homepage:`الموقع الإلكتروني`,"Host name":`اسم المضيف`,"Profile photo URL":`رابط صورة الملف الشخصي`,"Broadcast link":`رابط البث`,"Edit event":`تعديل الفعالية`,"Save changes":`حفظ التغييرات`,"Create live":`إنشاء بث مباشر`,"Schedule class":`جدولة درس`,"Start class":`بدء الدرس`,"End event":`إنهاء الفعالية`,"End session":`إنهاء الجلسة`,"Session ended":`انتهت الجلسة`,"Event ended":`انتهت الفعالية`,Cancelled:`ملغاة`,"Replay available":`إعادة العرض متاحة`,Join:`انضمام`,"Create invite":`إنشاء دعوة`,"Invite as":`الدعوة بصفة`,"Watch now":`شاهد الآن`,"Start a room":`إنشاء غرفة`,"Recent replays":`إعادات العرض الأخيرة`,"Your account":`حسابك`,"Write with AI":`الكتابة بالذكاء الاصطناعي`,"Suggested title":`العنوان المقترح`,"Suggested description":`الوصف المقترح`,"Suggested topic":`الموضوع المقترح`,"Use these details":`استخدام هذه التفاصيل`,"Learn something live.":`تعلّم شيئًا مباشرة.`,"Screen share":`مشاركة الشاشة`,"Upload and broadcast":`رفع وبث`,Help:`مساعدة`,"Reload Player":`إعادة تحميل المشغل`,"Copy Bundled CLI Path":`نسخ مسار أداة سطر الأوامر المضمنة`,"Developer tools":`أدوات المطور`,Undo:`تراجع`,Redo:`إعادة`,Cut:`قص`,Paste:`لصق`,"Select all":`تحديد الكل`,Status:`الحالة`,"Activity log":`سجل النشاط`,Admin:`الإدارة`,"Playback controls":`عناصر التحكم بالتشغيل`,"Tracks and folders":`المقاطع والمجلدات`,"Original-language captions.":`ترجمة نصية باللغة الأصلية.`,"Skip to playback controls":`الانتقال إلى عناصر التحكم بالتشغيل`,"Skip to playlist":`الانتقال إلى قائمة التشغيل`,"Skip to transcript and translated audio":`الانتقال إلى النص المفرغ والصوت المترجم`};export{t as default};