pool-anything 0.1.0 → 0.1.1

package/README.md

@@ -11,7 +11,7 @@
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-blue.svg" alt="License" /></a>
   <a href="https://nodejs.org"><img src="https://img.shields.io/badge/node-%3E%3D22.5-brightgreen.svg" alt="Node" /></a>
   <a href="tsconfig.json"><img src="https://img.shields.io/badge/TypeScript-strict-blue.svg" alt="TypeScript" /></a>
-  <a href="package.json"><img src="https://img.shields.io/badge/dependencies-0-brightgreen.svg" alt="Dependencies" /></a>
+  <a href="package.json"><img src="https://img.shields.io/badge/server%20core-0%20dependencies-brightgreen.svg" alt="Server core dependencies" /></a>
 </p>
 
 <p align="center">
@@ -29,7 +29,7 @@ Most AI/API providers hand you a free tier: a rate limit, a daily quota, a handf
 - 🌐 **Drop-in HTTP proxy** — point your client at pool-anything; it forwards with the right key, header, and auth scheme
 - 🔌 **36 providers preconfigured** — Groq, OpenRouter, Gemini, OpenAI, Anthropic, and more (plus any custom provider)
 - 🖥️ **Built-in web UI** — search providers, gather keys, watch usage on the Analytics dashboard
-- 🧰 **Zero runtime dependencies** — Node built-ins + TypeScript only, `node:sqlite` for storage
+- 🧰 **Dependency-free server core** — the proxy, API, and web UI run on Node built-ins + `node:sqlite` only; the interactive shell adds Ink + React
 
 ## Quick start
 
@@ -45,6 +45,8 @@ That's it — an interactive assistant shell opens (`pool-anything >`). Type pla
 ```bash
 pool-anything serve --port 4000 --open   # web UI + API on :4000, open the browser
 pool-anything "list pools"               # run one command without the shell
+pool-anything "update"                   # upgrade to the latest version (also an Update pill in the web UI header)
+pool-anything "uninstall"                # remove the global CLI (shell only, asks to confirm)
 echo "gsk_abc" | pool-anything -e "add keys to groq"   # pipe keys in
 pool-anything --help                     # all options (serve, -e/--exec, -p/--port, -H/--host, --db, --data-dir, --open)
 ```
@@ -62,8 +64,10 @@ No subcommands to memorize — just say what you want:
 | `watch groq` | Live usage, 2s refresh (`q` exits) |
 | `next for groq` / `consume 100 on groq` | Rotate / record usage |
 | `serve` | Start the web UI + API from inside the shell |
+| `update` (or `/update`) | Check npm and upgrade to the latest version |
+| `uninstall` (or `/uninstall`, CLI only) | Remove the global CLI (asks to confirm; pools/keys in SQLite stay) |
 
-Keys always print masked (`gsk_…ab`); misunderstood input gets a "Did you mean …?" nudge.
+Keys always print masked (`gsk_…ab`); misunderstood input gets a "Did you mean …?" nudge. The shell is a rich terminal UI (colors, bordered panels, live `watch` view, `↑`/`↓` history) with a plain-text fallback when Ink can't initialize.
 
 ### Run from source
 
@@ -140,6 +144,7 @@ All responses are JSON. `:id` is a pool ID.
 | `GET` | `/api/pools/:id/next` | Rotate: return the next key (masked — never the raw key) |
 | `POST` | `/api/pools/:id/consume` | Record usage — `{ tokens: <positive int ≤ 1000000>, key_id? }` (with `key_id`, bills that key without rotating) |
 | `GET` | `/api/pools/:id/usage` | Usage rollup — `{ used, usedInWindow, quota, quotaWindow, remaining, perKey }` (`used` is lifetime; `remaining`/`usedInWindow`/`perKey` are windowed for monthly quotas) |
+| `GET` | `/api/pools/:id/calls?limit=` | Recent upstream attempts — status, tokens, response body (4000 chars text, ~2MB retained media), per key (default 50, max 200) |
 | `POST` | `/api/pools/:id/proxy` | Proxy a request through the pool (see below) |
 
 ### Keys
@@ -183,6 +188,8 @@ The response reports which key was used and the upstream status:
 | `GET` | `/health` | Liveness check → `ok` |
 | `GET` | `/api/db/ping` | SQLite reachability → `{ ok: true }` |
 | `GET` | `/api/analytics` | Totals + 7-day deltas + 14-day daily series (drives the dashboard) |
+| `GET` | `/api/version` | Current vs latest npm version + `updateAvailable` (drives the header Update pill) |
+| `POST` | `/api/update` | Self-update via `npm install -g pool-anything@latest` (needs `POOL_API_TOKEN` bearer when auth is on) |
 
 ## Web UI
 
@@ -222,6 +229,7 @@ Open the Pages URL with `?api=https://your-backend` once (or use the Backend pil
 | `LOCAL_DB_PATH` | `data/pool-anything.db` (checkout) / `~/.pool-anything/*.db` (global) | SQLite database location (exact file; `--db` flag equivalent) |
 | `POOL_DATA_DIR` | _(unset)_ | Data directory holding the SQLite file (`<dir>/pool-anything.db`; `--data-dir` flag equivalent) |
 | `PROXY_TIMEOUT_MS` | `30000` | Per-attempt upstream timeout for `/proxy` |
+| `POOL_DEBUG` | _(unset)_ | `1` logs per-request proxy traces (`[proxy] METHOD path pool=N tried=[...]`) to stderr — no bodies/keys; playground also keeps a per-session Debug log pane |
 | `ALLOW_PRIVATE_UPSTREAM` | _(unset)_ | `1` disables SSRF protections — tests/loopback only, never in prod |
 
 Providers are defined in [`data/providers.json`](data/providers.json). See [CONTRIBUTING.md](CONTRIBUTING.md#adding-a-provider) for the schema — adding a provider is a one-line JSON edit, no code changes.
@@ -232,7 +240,8 @@ Providers are defined in [`data/providers.json`](data/providers.json). See [CONT
 src/
   server.ts          Thin HTTP front door (delegates to router/admin/observability)
   cli.ts             Entry dispatch: assistant shell (default) vs `serve` vs one-shot
-  cli/               Interactive shell — nl.ts (natural-language parser), ui.ts (terminal rendering), repl.ts (loop, key import, watch)
+  cli/               Interactive shell — commands.ts (presentation-free core), nl.ts (parser), ui.ts (text rendering), repl.ts (plain fallback + one-shot), tui.tsx (Ink shell)
+  version.ts         Self-update (npm version check / install / uninstall) shared by the CLI and the web UI
   router/api.ts      Route matchers + abuse caps (MAX_POOLS / MAX_KEYS_PER_POOL)
   admin/branding.ts  Logo version, docs URL, sidebar icons
   admin/shell.ts     Shared shell CSS/nav/JS

package/data/providers.json

@@ -13,7 +13,7 @@
   {"id":"perplexity","name":"Perplexity","baseUrl":"https://api.perplexity.ai","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"$5 credit on signup","docsUrl":"https://docs.perplexity.ai/getting-started/quickstart","keyFields":["api_key"],"hint":"perplexity.ai/settings/api, pplx-…","logo":"public/logos/perplexity.svg"},
   {"id":"anyscale","name":"Anyscale Endpoints","baseUrl":"https://api.endpoints.anyscale.com/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"legacy, deprecated","docsUrl":"https://docs.anyscale.com/endpoints/overview","keyFields":["api_key"],"hint":"app.endpoints.anyscale.com/credentials","logo":"public/logos/anyscale.svg"},
   {"id":"elevenlabs","name":"ElevenLabs","baseUrl":"https://api.elevenlabs.io/v1","keyHeader":"xi-api-key","keyPrefix":"","extraHeaders":{},"quota":"10k credits/mo free","docsUrl":"https://elevenlabs.io/docs","keyFields":["api_key"],"hint":"elevenlabs.io API key","logo":"public/logos/elevenlabs.svg"},
-  {"id":"deepgram","name":"Deepgram","baseUrl":"https://api.deepgram.com/v1","keyHeader":"Authorization","keyPrefix":"Token ","extraHeaders":{},"quota":"$200 credit on signup","docsUrl":"https://developers.deepgram.com/docs","keyFields":["api_key"],"hint":"Authorization: Token …","logo":"public/logos/deepgram.svg"},
+  {"id":"deepgram","name":"Deepgram","baseUrl":"https://api.deepgram.com","keyHeader":"Authorization","keyPrefix":"Token ","extraHeaders":{},"quota":"$200 credit on signup","docsUrl":"https://developers.deepgram.com/docs","keyFields":["api_key"],"hint":"Authorization: Token …","logo":"public/logos/deepgram.svg"},
   {"id":"cartesia","name":"Cartesia","baseUrl":"https://api.cartesia.ai","keyHeader":"X-API-Key","keyPrefix":"","extraHeaders":{"Cartesia-Version":"2024-06-10"},"quota":"20,000 free tokens","docsUrl":"https://docs.cartesia.ai","keyFields":["api_key"],"hint":"Paste a Cartesia API key","logo":"public/logos/cartesia.svg"},
   {"id":"tavily","name":"Tavily","baseUrl":"https://api.tavily.com","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"1,000 credits/mo free","docsUrl":"https://docs.tavily.com/documentation/api-reference/endpoint/search","keyFields":["api_key"],"hint":"app.tavily.com/home, tvly-…","logo":"public/logos/tavily.svg"},
   {"id":"brave-search","name":"Brave Search","baseUrl":"https://api.search.brave.com/res/v1","keyHeader":"X-Subscription-Token","keyPrefix":"","extraHeaders":{},"quota":"2,000 queries/mo free","docsUrl":"https://brave.com/search/api/","keyFields":["api_key"],"hint":"brave.com/search/api/","logo":"public/logos/brave.svg"},

package/dist/admin/branding.js

@@ -21,6 +21,7 @@ export const ICONS = {
     keys: svgIcon('<circle cx="8" cy="16" r="4.5"/><path d="m11.2 12.8 8.3-8.3"/><path d="M17 5.5l2.5 2.5M14.5 8l2.5 2.5"/>'),
     analytics: svgIcon('<path d="M3 21h18"/><path d="M6 21v-7M11 21V5M16 21v-11M21 21v-4"/>'),
     playground: svgIcon('<circle cx="12" cy="12" r="9"/><path d="m10 8.5 5 3.5-5 3.5v-7Z"/>'),
+    history: svgIcon('<path d="M3.5 12a8.5 8.5 0 1 1 2.4 6"/><path d="M3.5 12H7"/><path d="M3.5 12V8.5"/><path d="M12 7.5V12l3 2"/>'),
     docs: svgIcon('<path d="M4 19.5A2.5 2.5 0 0 1 6.5 17H20"/><path d="M6.5 2H20v20H6.5A2.5 2.5 0 0 1 4 19.5v-15A2.5 2.5 0 0 1 6.5 2z"/>'),
     /** Attach-row media icons: same 24px stroke family as sidebar (currentColor, 1.8, round).
      *  Sized down to 14px via `.filebtn svg` in playground CSS. */