open-agents-ai 0.185.74 → 0.185.75

package/dist/index.js

@@ -65550,6 +65550,9 @@ body {
   <div id="agent-events" style="font-size:0.78rem;line-height:1.5"></div>
 </div>
 <div id="jobs-panel" style="display:none;flex:1;overflow-y:auto;padding:12px 16px">
+  <div id="dashboard-health" style="display:flex;gap:12px;margin-bottom:16px;flex-wrap:wrap"></div>
+  <div id="dashboard-usage" style="margin-bottom:16px"></div>
+  <h3 style="color:#b2920a;font-size:0.7rem;margin-bottom:8px">Job History</h3>
   <div id="jobs-list" style="font-size:0.78rem"></div>
 </div>
 
@@ -65873,7 +65876,40 @@ async function abortAgentTask() {
   try { await fetch('/v1/runs/' + currentRunId, { method: 'DELETE', headers: headers() }); } catch {}
 }
 
+async function loadDashboard() {
+  // Health card
+  try {
+    const r = await fetch('/health', { headers: headers() });
+    const d = await r.json();
+    document.getElementById('dashboard-health').innerHTML =
+      '<div style="background:#1e1e22;border:1px solid #2a2a30;border-radius:3px;padding:8px 12px;flex:1;min-width:120px">' +
+      '<div style="color:#555;font-size:0.6rem">STATUS</div>' +
+      '<div style="color:#4ec94e;font-size:0.8rem">' + d.status + '</div></div>' +
+      '<div style="background:#1e1e22;border:1px solid #2a2a30;border-radius:3px;padding:8px 12px;flex:1;min-width:120px">' +
+      '<div style="color:#555;font-size:0.6rem">UPTIME</div>' +
+      '<div style="color:#b2920a;font-size:0.8rem">' + Math.floor(d.uptime_s/60) + 'm</div></div>' +
+      '<div style="background:#1e1e22;border:1px solid #2a2a30;border-radius:3px;padding:8px 12px;flex:1;min-width:120px">' +
+      '<div style="color:#555;font-size:0.6rem">VERSION</div>' +
+      '<div style="color:#b0b0b0;font-size:0.8rem">' + d.version + '</div></div>';
+  } catch {}
+  // Usage
+  try {
+    const r = await fetch('/v1/usage', { headers: headers() });
+    const d = await r.json();
+    document.getElementById('dashboard-usage').innerHTML =
+      '<div style="display:flex;gap:12px;flex-wrap:wrap">' +
+      '<div style="background:#1e1e22;border:1px solid #2a2a30;border-radius:3px;padding:8px 12px;flex:1">' +
+      '<div style="color:#555;font-size:0.6rem">TOKENS IN</div>' +
+      '<div style="color:#b2920a;font-size:0.8rem">' + (d.totalTokensIn || 0).toLocaleString() + '</div></div>' +
+      '<div style="background:#1e1e22;border:1px solid #2a2a30;border-radius:3px;padding:8px 12px;flex:1">' +
+      '<div style="color:#555;font-size:0.6rem">TOKENS OUT</div>' +
+      '<div style="color:#b2920a;font-size:0.8rem">' + (d.totalTokensOut || 0).toLocaleString() + '</div></div>' +
+      '</div>';
+  } catch {}
+}
+
 async function loadJobs() {
+  loadDashboard();
   const list = document.getElementById('jobs-list');
   try {
     const r = await fetch('/v1/runs', { headers: headers() });
@@ -66462,6 +66498,39 @@ function listJobs() {
   }
   return jobs;
 }
+function getKeyUsage(user) {
+  if (!perKeyUsage.has(user)) {
+    perKeyUsage.set(user, { requestTimestamps: [], tokensToday: 0, tokenDate: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10), activeJobs: 0 });
+  }
+  const u = perKeyUsage.get(user);
+  const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  if (u.tokenDate !== today) {
+    u.tokensToday = 0;
+    u.tokenDate = today;
+  }
+  return u;
+}
+function checkKeyRateLimit(auth) {
+  if (!auth.user || !auth.rpm)
+    return null;
+  const usage = getKeyUsage(auth.user);
+  const now = Date.now();
+  usage.requestTimestamps = usage.requestTimestamps.filter((t) => now - t < 6e4);
+  if (auth.rpm && usage.requestTimestamps.length >= auth.rpm) {
+    return `Rate limit exceeded for ${auth.user}: ${auth.rpm} RPM`;
+  }
+  if (auth.tpd && usage.tokensToday >= auth.tpd) {
+    return `Daily token limit exceeded for ${auth.user}: ${usage.tokensToday}/${auth.tpd}`;
+  }
+  return null;
+}
+function recordKeyUsage(user, tokens) {
+  if (!user)
+    return;
+  const usage = getKeyUsage(user);
+  usage.requestTimestamps.push(Date.now());
+  usage.tokensToday += tokens;
+}
 function resolveAuth(req) {
   const authHeader = req.headers["authorization"];
   const token = authHeader?.startsWith("Bearer ") ? authHeader.slice(7) : null;
@@ -66470,9 +66539,17 @@ function resolveAuth(req) {
     if (!token)
       return { authenticated: false, scope: "read" };
     for (const entry of multiKeys.split(",")) {
-      const [key, scope, user] = entry.trim().split(":");
+      const parts = entry.trim().split(":");
+      const [key, scope, user, rpmStr, tpdStr, maxJobsStr] = parts;
       if (key === token) {
-        return { authenticated: true, scope: scope || "admin", user: user || void 0 };
+        return {
+          authenticated: true,
+          scope: scope || "admin",
+          user: user || void 0,
+          rpm: rpmStr ? parseInt(rpmStr, 10) : void 0,
+          tpd: tpdStr ? parseInt(tpdStr, 10) : void 0,
+          maxJobs: maxJobsStr ? parseInt(maxJobsStr, 10) : void 0
+        };
       }
     }
     return { authenticated: false, scope: "read" };
@@ -66982,9 +67059,17 @@ async function handleV1Run(req, res) {
     jsonResponse(res, 202, { run_id: id, status: "running", pid: job.pid });
   }
 }
-function handleV1Runs(res) {
-  const jobs = listJobs();
-  jsonResponse(res, 200, { runs: jobs });
+function handleV1Runs(res, url) {
+  let jobs = listJobs();
+  const statusFilter = url?.searchParams.get("status");
+  if (statusFilter)
+    jobs = jobs.filter((j) => j.status === statusFilter);
+  jobs.sort((a, b) => new Date(b.startedAt ?? 0).getTime() - new Date(a.startedAt ?? 0).getTime());
+  const limit = parseInt(url?.searchParams.get("limit") ?? "50", 10);
+  const offset = parseInt(url?.searchParams.get("offset") ?? "0", 10);
+  const total = jobs.length;
+  jobs = jobs.slice(offset, offset + limit);
+  jsonResponse(res, 200, { runs: jobs, total, limit, offset });
 }
 function handleV1RunsById(res, id) {
   const job = loadJob(id);
@@ -67208,6 +67293,23 @@ async function handleRequest(req, res, ollamaUrl, verbose) {
         status = 401;
         return;
       }
+      const auth = resolveAuth(req);
+      const rateLimitMsg = checkKeyRateLimit(auth);
+      if (rateLimitMsg) {
+        status = 429;
+        jsonResponse(res, 429, { error: "Too Many Requests", message: rateLimitMsg });
+        return;
+      }
+      if (auth.user)
+        recordKeyUsage(auth.user, 0);
+    }
+    if ((method === "POST" || method === "PUT" || method === "PATCH") && req.headers["content-length"]) {
+      const bodySize = parseInt(req.headers["content-length"], 10);
+      if (bodySize > 1048576) {
+        status = 413;
+        jsonResponse(res, 413, { error: "Payload Too Large", message: "Request body exceeds 1MB limit" });
+        return;
+      }
     }
     if (pathname === "/v1/models" && method === "GET") {
       await handleV1Models(res, ollamaUrl);
@@ -67226,7 +67328,7 @@ async function handleRequest(req, res, ollamaUrl, verbose) {
       return;
     }
     if (pathname === "/v1/runs" && method === "GET") {
-      handleV1Runs(res);
+      handleV1Runs(res, urlObj);
       return;
     }
     const runsMatch = pathname.match(/^\/v1\/runs\/([a-zA-Z0-9_-]+)$/);
@@ -67425,6 +67527,30 @@ function startApiServer(options = {}) {
   const ollamaUrl = options.ollamaUrl ?? config.backendUrl;
   const cwd4 = process.cwd();
   initAuditLog(join71(cwd4, ".oa"));
+  const retentionDays = parseInt(process.env["OA_JOB_RETENTION_DAYS"] ?? "30", 10);
+  if (retentionDays > 0) {
+    try {
+      const jobsDir3 = join71(cwd4, ".oa", "jobs");
+      if (existsSync54(jobsDir3)) {
+        const cutoff = Date.now() - retentionDays * 864e5;
+        for (const f of readdirSync21(jobsDir3)) {
+          if (!f.endsWith(".json"))
+            continue;
+          try {
+            const jobPath = join71(jobsDir3, f);
+            const job = JSON.parse(readFileSync43(jobPath, "utf-8"));
+            const jobTime = new Date(job.startedAt ?? job.completedAt ?? 0).getTime();
+            if (jobTime > 0 && jobTime < cutoff && job.status !== "running") {
+              const { unlinkSync: unlinkSync13 } = __require("node:fs");
+              unlinkSync13(jobPath);
+            }
+          } catch {
+          }
+        }
+      }
+    } catch {
+    }
+  }
   const tlsCert = process.env["OA_TLS_CERT"];
   const tlsKey = process.env["OA_TLS_KEY"];
   const useTls = !!(tlsCert && tlsKey);
@@ -67573,7 +67699,7 @@ async function apiServeCommand(opts, config) {
     server.on("close", resolve36);
   });
 }
-var endpointRegistry, modelRouteMap, endpointUsage, metrics, startedAt, _corsOrigins, _corsLocalOnly, runningProcesses;
+var endpointRegistry, modelRouteMap, endpointUsage, metrics, startedAt, _corsOrigins, _corsLocalOnly, runningProcesses, perKeyUsage;
 var init_serve = __esm({
   "packages/cli/dist/api/serve.js"() {
     "use strict";
@@ -67597,6 +67723,7 @@ var init_serve = __esm({
     _corsOrigins = (process.env["OA_CORS_ORIGINS"] || "").split(",").filter(Boolean);
     _corsLocalOnly = _corsOrigins.length === 0;
     runningProcesses = /* @__PURE__ */ new Map();
+    perKeyUsage = /* @__PURE__ */ new Map();
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-agents-ai",
-  "version": "0.185.74",
+  "version": "0.185.75",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",