satgate 1.5.1

package/dist/src/cli.js

@@ -0,0 +1,275 @@
+import { readFileSync, existsSync } from 'node:fs';
+import yaml from 'js-yaml';
+import { serve } from '@hono/node-server';
+import { loadConfig } from './config.js';
+import { createTokenTollServer } from './server.js';
+import { createLightningBackend } from './lightning.js';
+import { startTunnel, stopTunnel } from './tunnel.js';
+import { createLogger } from './logger.js';
+function parseArgs(argv) {
+    const args = {};
+    for (let i = 2; i < argv.length; i++) {
+        switch (argv[i]) {
+            case '--upstream':
+                args.upstream = argv[++i];
+                break;
+            case '--port':
+                args.port = parseInt(argv[++i], 10);
+                break;
+            case '--config':
+                args.config = argv[++i];
+                break;
+            case '--price':
+                args.price = parseInt(argv[++i], 10);
+                break;
+            case '--max-concurrent':
+                args.maxConcurrent = parseInt(argv[++i], 10);
+                break;
+            case '--storage':
+                args.storage = argv[++i];
+                break;
+            case '--db-path':
+                args.dbPath = argv[++i];
+                break;
+            case '--free-tier':
+                args.freeTier = parseInt(argv[++i], 10);
+                break;
+            case '--trust-proxy':
+                args.trustProxy = true;
+                break;
+            case '--lightning':
+                args.lightning = argv[++i];
+                break;
+            case '--lightning-url':
+                args.lightningUrl = argv[++i];
+                break;
+            case '--lightning-key':
+                args.lightningKey = argv[++i];
+                break;
+            case '--auth':
+                args.authMode = argv[++i];
+                break;
+            case '--allowlist':
+                args.allowlist = argv[++i].split(',');
+                break;
+            case '--allowlist-file':
+                args.allowlistFile = argv[++i];
+                break;
+            case '--no-tunnel':
+                args.noTunnel = true;
+                break;
+            case '--root-key':
+                args.rootKey = argv[++i];
+                break;
+            case '--verbose':
+                args.verbose = true;
+                break;
+            case '--log-format':
+                args.logFormat = argv[++i];
+                break;
+            case '--token-price':
+                args.tokenPrice = parseInt(argv[++i], 10);
+                break;
+            case '--model-price':
+                args.modelPrice = [...(args.modelPrice ?? []), argv[++i]];
+                break;
+            case '-h':
+            case '--help':
+                printHelp();
+                process.exit(0);
+            case '-v':
+            case '--version':
+                printVersion();
+                process.exit(0);
+            default:
+                console.error(`Unknown option: ${argv[i]}`);
+                process.exit(1);
+        }
+    }
+    return args;
+}
+function loadFileConfig(path) {
+    const configPath = path
+        ?? (existsSync('satgate.json') ? 'satgate.json' : undefined)
+        ?? (existsSync('satgate.yaml') ? 'satgate.yaml' : undefined);
+    if (!configPath)
+        return {};
+    try {
+        const content = readFileSync(configPath, 'utf-8');
+        if (configPath.endsWith('.yaml') || configPath.endsWith('.yml')) {
+            return yaml.load(content, { schema: yaml.JSON_SCHEMA });
+        }
+        return JSON.parse(content);
+    }
+    catch {
+        console.warn(`[satgate] Could not read config file: ${configPath}`);
+        return {};
+    }
+}
+function printHelp() {
+    console.log(`
+  satgate - Lightning-paid AI inference
+
+  Usage: satgate [options]
+
+  Upstream:
+    --upstream <url>           Upstream API URL (default: auto-detect Ollama on :11434)
+
+  Lightning:
+    --lightning <backend>      phoenixd | lnbits | lnd | cln
+    --lightning-url <url>      Backend URL (defaults per backend)
+    --lightning-key <secret>   Password / API key / macaroon / rune
+
+  Auth:
+    --auth <mode>              open | lightning | allowlist (inferred from context)
+    --allowlist <keys>         Comma-separated npubs or shared secrets
+    --allowlist-file <path>    File with one key per line
+
+  Pricing:
+    --price <sats>             Sats per request (flat pricing)
+    --token-price <sats>       Sats per 1k tokens (per-token pricing)
+    --model-price <model:sats> Per-model token price (repeatable)
+
+  Server:
+    --port <number>            Listen port (default: 3000)
+    --no-tunnel                Skip Cloudflare Tunnel
+
+  Storage:
+    --storage <type>           memory | sqlite (default: memory)
+    --db-path <path>           SQLite path (default: ./satgate.db)
+
+  Other:
+    --config <path>            Config file (JSON or YAML)
+    --max-concurrent <n>       Max concurrent inference requests
+    --free-tier <n>            Free credits (sats) per IP per day (default: 0)
+    --trust-proxy              Trust X-Forwarded-For headers
+    --root-key <key>           Root key for macaroon minting
+    --verbose                  Show extra fields in log output
+    --log-format <format>      pretty | json (default: pretty)
+    -h, --help                 Show help
+    -v, --version              Show version
+`);
+}
+function printVersion() {
+    try {
+        const pkg = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf-8'));
+        console.log(`satgate v${pkg.version}`);
+    }
+    catch {
+        console.log('satgate (unknown version)');
+    }
+}
+export async function main(argv = process.argv) {
+    const args = parseArgs(argv);
+    const fileConfig = loadFileConfig(args.config);
+    // Auto-detect Ollama if no upstream specified
+    let ollamaAutoDetected = false;
+    if (!args.upstream && !process.env.UPSTREAM_URL && !fileConfig?.upstream) {
+        try {
+            const res = await fetch('http://localhost:11434/v1/models', {
+                signal: AbortSignal.timeout(2000),
+            });
+            if (res.ok) {
+                args.upstream = 'http://localhost:11434';
+                ollamaAutoDetected = true;
+                console.log('[satgate] Ollama detected on :11434');
+            }
+        }
+        catch {
+            // Ollama not found
+        }
+        if (!args.upstream && !process.env.UPSTREAM_URL && !fileConfig?.upstream) {
+            console.error('[satgate] No upstream detected. Ollama not found on :11434.');
+            console.error('[satgate] Either start Ollama or pass --upstream <url>');
+            process.exit(1);
+        }
+    }
+    // Load allowlist file before config validation so --allowlist-file works standalone
+    if (args.allowlistFile) {
+        const content = readFileSync(args.allowlistFile, 'utf-8');
+        const entries = content.split('\n').map(l => l.trim()).filter(Boolean);
+        args.allowlist = [...(args.allowlist ?? []), ...entries];
+    }
+    const config = loadConfig(args, process.env, fileConfig);
+    const logger = createLogger({ format: config.logFormat, verbose: config.verbose });
+    // Auto-detect models from upstream (retry to handle startup races with Ollama)
+    let models = [];
+    for (let attempt = 1; attempt <= 3; attempt++) {
+        try {
+            const res = await fetch(`${config.upstream}/v1/models`, {
+                signal: AbortSignal.timeout(5000),
+            });
+            const body = await res.json();
+            models = body.data?.map(m => m.id) ?? [];
+            if (models.length > 0)
+                break;
+        }
+        catch {
+            // Fall through to retry
+        }
+        if (attempt < 3) {
+            console.warn(`[satgate] Upstream not ready, retrying model detection (${attempt}/3)...`);
+            await new Promise(r => setTimeout(r, 2000));
+        }
+    }
+    if (models.length === 0) {
+        console.warn('[satgate] Could not auto-detect models from upstream');
+    }
+    const backend = createLightningBackend(config);
+    const { app } = createTokenTollServer({ ...config, models, backend, logger });
+    let version = '0.1.0';
+    try {
+        const pkg = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf-8'));
+        version = pkg.version;
+    }
+    catch { /* ignore */ }
+    let tunnelResult;
+    const server = serve({ fetch: app.fetch, port: config.port }, async () => {
+        const lightningLabel = config.lightning
+            ? `${config.lightning} (${config.lightningUrl})`
+            : 'none (free mode)';
+        const authLabel = config.authMode === 'lightning'
+            ? 'lightning (pay-per-request)'
+            : config.authMode === 'allowlist'
+                ? `allowlist (${config.allowlist.length} identities)`
+                : 'open';
+        const priceLabel = config.flatPricing
+            ? `${config.price} sat/request`
+            : `${config.pricing.default} sat/1k tokens`;
+        logger.info(`satgate v${version}`);
+        logger.info(`Upstream:   ${config.upstream}${ollamaAutoDetected ? ' (auto-detected)' : ''}`);
+        logger.info(`Models:     ${models.length > 0 ? models.join(', ') : '(none detected)'}`);
+        logger.info(`Lightning:  ${lightningLabel}`);
+        logger.info(`Auth:       ${authLabel}`);
+        logger.info(`Price:      ${priceLabel}`);
+        logger.info(`Storage:    ${config.storage}${config.storage === 'memory' ? ' (ephemeral)' : ''}`);
+        logger.info(`Local:      http://localhost:${config.port}`);
+        if (config.rootKeyGenerated) {
+            logger.warn('Using auto-generated root key (not persisted across restarts)');
+            logger.warn('Set ROOT_KEY env var for production use');
+        }
+        logger.info('/.well-known/l402  |  /llms.txt  |  /health');
+        // Start tunnel if enabled
+        if (config.tunnel) {
+            tunnelResult = await startTunnel(config.port);
+            if (tunnelResult.url) {
+                logger.info(`Public:     ${tunnelResult.url}`);
+            }
+            else if (tunnelResult.error) {
+                logger.warn(`Tunnel:     ${tunnelResult.error}`);
+            }
+        }
+        else {
+            logger.info('Tunnel:     disabled');
+        }
+    });
+    const shutdown = () => {
+        if (tunnelResult?.process)
+            stopTunnel(tunnelResult.process);
+        server.close();
+        process.exit(0);
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+}
+//# sourceMappingURL=cli.js.map

package/dist/src/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,IAAI,MAAM,SAAS,CAAA;AAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAgB,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAqB,MAAM,aAAa,CAAA;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAY,EAAE,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,KAAK,YAAY;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YACnD,KAAK,QAAQ;gBAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAAC,MAAK;YACzD,KAAK,UAAU;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YAC/C,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAAC,MAAK;YAC3D,KAAK,kBAAkB;gBAAE,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAAC,MAAK;YAC5E,KAAK,WAAW;gBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YACjD,KAAK,WAAW;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YAChD,KAAK,aAAa;gBAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAAC,MAAK;YAClE,KAAK,eAAe;gBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBAAC,MAAK;YACnD,KAAK,aAAa;gBAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YACrD,KAAK,iBAAiB;gBAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YAC5D,KAAK,iBAAiB;gBAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YAC5D,KAAK,QAAQ;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YAC/C,KAAK,aAAa;gBAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAC,MAAK;YAChE,KAAK,kBAAkB;gBAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YAC9D,KAAK,aAAa;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,MAAK;YAC/C,KAAK,YAAY;gBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YAClD,KAAK,WAAW;gBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,MAAK;YAC5C,KAAK,cAAc;gBAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAK;YACtD,KAAK,eAAe;gBAAE,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAAC,MAAK;YACtE,KAAK,eAAe;gBAClB,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBACzD,MAAK;YACP,KAAK,IAAI,CAAC;YAAC,KAAK,QAAQ;gBAAE,SAAS,EAAE,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvD,KAAK,IAAI,CAAC;YAAC,KAAK,WAAW;gBAAE,YAAY,EAAE,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7D;gBACE,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,cAAc,CAAC,IAAa;IACnC,MAAM,UAAU,GAAG,IAAI;WAClB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;WACzD,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAC9D,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAA;IAC1B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACjD,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAA4B,CAAA;QACpF,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAA;QACnE,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyCb,CAAC,CAAA;AACF,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAC1F,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAiB,OAAO,CAAC,IAAI;IACtD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAE9C,8CAA8C;IAC9C,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,kCAAkC,EAAE;gBAC1D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YACF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,IAAI,CAAC,QAAQ,GAAG,wBAAwB,CAAA;gBACxC,kBAAkB,GAAG,IAAI,CAAA;gBACzB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAA;YACpD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC;YACzE,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAA;YAC5E,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAA;YACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;QACzD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACtE,IAAI,CAAC,SAAS,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAA;IAC1D,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAA6B,EAAE,UAAU,CAAC,CAAA;IAClF,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;IAElF,+EAA+E;IAC/E,IAAI,MAAM,GAAa,EAAE,CAAA;IACzB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,YAAY,EAAE;gBACtD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAsC,CAAA;YACjE,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAA;YACxC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAK;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,2DAA2D,OAAO,QAAQ,CAAC,CAAA;YACxF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,EAAE,GAAG,EAAE,GAAG,qBAAqB,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;IAE7E,IAAI,OAAO,GAAG,OAAO,CAAA;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAC1F,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAExB,IAAI,YAAsC,CAAA;IAE1C,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS;YACrC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,YAAY,GAAG;YAChD,CAAC,CAAC,kBAAkB,CAAA;QACtB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW;YAC/C,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW;gBAC/B,CAAC,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,MAAM,cAAc;gBACrD,CAAC,CAAC,MAAM,CAAA;QACZ,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW;YACnC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,cAAc;YAC/B,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,gBAAgB,CAAA;QAE7C,MAAM,CAAC,IAAI,CAAC,YAAY,OAAO,EAAE,CAAC,CAAA;QAClC,MAAM,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,QAAQ,GAAG,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5F,MAAM,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAA;QACvF,MAAM,CAAC,IAAI,CAAC,eAAe,cAAc,EAAE,CAAC,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,eAAe,SAAS,EAAE,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAChG,MAAM,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;QAC1D,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAA;YAC5E,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAA;QAE1D,0BAA0B;QAC1B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,YAAY,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC7C,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,eAAe,YAAY,CAAC,GAAG,EAAE,CAAC,CAAA;YAChD,CAAC;iBAAM,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,eAAe,YAAY,CAAC,KAAK,EAAE,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,YAAY,EAAE,OAAO;YAAE,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QAC3D,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAA;IACD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;AACjC,CAAC"}

package/dist/src/config.d.ts

@@ -0,0 +1,133 @@
+import type { LightningBackend } from '@thecryptodonkey/toll-booth';
+import type { Logger } from './logger.js';
+export interface ModelPricing {
+    /** Sats per 1k tokens for each model. */
+    models: Record<string, number>;
+    /** Default sats per 1k tokens for unlisted models. */
+    default: number;
+}
+export interface TokenTollConfig {
+    upstream: string;
+    port: number;
+    rootKey: string;
+    rootKeyGenerated: boolean;
+    storage: 'memory' | 'sqlite';
+    dbPath: string;
+    pricing: ModelPricing;
+    freeTier: {
+        creditsPerDay: number;
+    };
+    capacity: {
+        maxConcurrent: number;
+    };
+    tiers: Array<{
+        amountSats: number;
+        creditSats: number;
+        label: string;
+    }>;
+    trustProxy: boolean;
+    /** Estimated cost in sats to hold per request (deducted upfront, reconciled after). */
+    estimatedCostSats: number;
+    /** Maximum request body size in bytes. */
+    maxBodySize: number;
+    /** Auto-detected model IDs from upstream. */
+    models?: string[];
+    lightning?: 'phoenixd' | 'lnbits' | 'lnd' | 'cln';
+    lightningUrl?: string;
+    lightningKey?: string;
+    authMode: 'open' | 'lightning' | 'allowlist';
+    allowlist: string[];
+    flatPricing: boolean;
+    /** Flat per-request price in sats (only used when flatPricing is true). */
+    price: number;
+    tunnel: boolean;
+    /** Lightning backend instance (created externally, threaded to server). */
+    backend?: LightningBackend;
+    x402?: {
+        receiverAddress: string;
+        network: string;
+        facilitatorUrl?: string;
+        facilitatorKey?: string;
+        asset?: string;
+        creditMode?: boolean;
+    };
+    defaultPriceUsd?: number;
+    verbose: boolean;
+    logFormat: 'pretty' | 'json';
+    logger?: Logger;
+    /** Human-readable service name for Lightning invoice descriptions. Defaults to 'toll-booth'. */
+    serviceName?: string;
+}
+export interface CliArgs {
+    upstream?: string;
+    port?: number;
+    config?: string;
+    price?: number;
+    maxConcurrent?: number;
+    storage?: string;
+    dbPath?: string;
+    freeTier?: number;
+    trustProxy?: boolean;
+    rootKey?: string;
+    lightning?: string;
+    lightningUrl?: string;
+    lightningKey?: string;
+    authMode?: string;
+    allowlist?: string[];
+    allowlistFile?: string;
+    noTunnel?: boolean;
+    verbose?: boolean;
+    logFormat?: string;
+    tokenPrice?: number;
+    modelPrice?: string[];
+}
+export interface FileConfig {
+    upstream?: string;
+    port?: number;
+    rootKey?: string;
+    storage?: string;
+    dbPath?: string;
+    pricing?: {
+        default?: number;
+        models?: Record<string, number>;
+    };
+    freeTier?: {
+        creditsPerDay?: number;
+        requestsPerDay?: number;
+    };
+    capacity?: {
+        maxConcurrent?: number;
+    };
+    tiers?: Array<{
+        amountSats: number;
+        creditSats: number;
+        label: string;
+    }>;
+    trustProxy?: boolean;
+    estimatedCostSats?: number;
+    maxBodySize?: number;
+    lightning?: string;
+    lightningUrl?: string;
+    lightningKey?: string;
+    auth?: string;
+    allowlist?: string[];
+    price?: number;
+    tunnel?: boolean;
+    x402?: {
+        receiverAddress?: string;
+        network?: string;
+        facilitatorUrl?: string;
+        facilitatorKey?: string;
+        asset?: string;
+        creditMode?: boolean;
+    };
+    defaultPriceUsd?: number;
+    verbose?: boolean;
+    logFormat?: string;
+}
+/**
+ * Loads and validates configuration.
+ * Precedence: CLI args > env vars > config file > defaults.
+ */
+export declare function loadConfig(args: CliArgs, env?: Record<string, string | undefined>, file?: FileConfig): TokenTollConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/src/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,EAAE,OAAO,CAAA;IACzB,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,YAAY,CAAA;IACrB,QAAQ,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAA;IACnC,QAAQ,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAA;IACnC,KAAK,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvE,UAAU,EAAE,OAAO,CAAA;IACnB,uFAAuF;IACvF,iBAAiB,EAAE,MAAM,CAAA;IACzB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAA;IACnB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IAEjB,SAAS,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAA;IACjD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,WAAW,CAAA;IAC5C,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;IACf,2EAA2E;IAC3E,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,IAAI,CAAC,EAAE;QACL,eAAe,EAAE,MAAM,CAAA;QACvB,OAAO,EAAE,MAAM,CAAA;QACf,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,UAAU,CAAC,EAAE,OAAO,CAAA;KACrB,CAAA;IACD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gGAAgG;IAChG,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAA;IAC/D,QAAQ,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9D,QAAQ,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACrC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxE,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,IAAI,CAAC,EAAE;QACL,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,UAAU,CAAC,EAAE,OAAO,CAAA;KACrB,CAAA;IACD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AASD;;;GAGG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,OAAO,EACb,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAM,EAC5C,IAAI,GAAE,UAAe,GACpB,eAAe,CAsPjB"}

package/dist/src/config.js

@@ -0,0 +1,237 @@
+import { randomBytes } from 'node:crypto';
+import { resolve, relative } from 'node:path';
+const LIGHTNING_URL_DEFAULTS = {
+    phoenixd: 'http://localhost:9740',
+    lnbits: 'https://legend.lnbits.com',
+    lnd: 'https://localhost:8080',
+    cln: 'http://localhost:3010',
+};
+/**
+ * Loads and validates configuration.
+ * Precedence: CLI args > env vars > config file > defaults.
+ */
+export function loadConfig(args, env = {}, file = {}) {
+    const upstream = args.upstream ?? env.UPSTREAM_URL ?? file.upstream;
+    if (!upstream) {
+        throw new Error('upstream URL is required (--upstream or UPSTREAM_URL)');
+    }
+    try {
+        const parsed = new URL(upstream);
+        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+            throw new Error('upstream URL must use http or https');
+        }
+    }
+    catch (e) {
+        if (e instanceof Error && e.message.includes('http or https'))
+            throw e;
+        throw new Error(`upstream URL is not a valid URL: ${upstream}`);
+    }
+    const portRaw = args.port ?? (env.PORT ? parseInt(env.PORT, 10) : undefined) ?? file.port ?? 3000;
+    if (!Number.isFinite(portRaw) || portRaw < 0 || portRaw > 65535) {
+        throw new Error(`Invalid port: ${portRaw} (must be 0–65535)`);
+    }
+    const port = portRaw;
+    const rootKeyRaw = args.rootKey ?? env.ROOT_KEY ?? file.rootKey;
+    const rootKeyGenerated = !rootKeyRaw;
+    const rootKey = rootKeyRaw ?? randomBytes(32).toString('hex');
+    const storageRaw = args.storage ?? env.STORAGE ?? file.storage ?? 'memory';
+    if (storageRaw !== 'memory' && storageRaw !== 'sqlite') {
+        throw new Error(`Invalid storage type: ${storageRaw} (must be 'memory' or 'sqlite')`);
+    }
+    const storage = storageRaw;
+    const dbPathRaw = args.dbPath ?? env.SATGATE_DB_PATH ?? file.dbPath ?? './satgate.db';
+    const resolvedDbPath = resolve(dbPathRaw);
+    const relFromCwd = relative(process.cwd(), resolvedDbPath);
+    if (relFromCwd.startsWith('..')) {
+        throw new Error(`dbPath must be within the working directory (got: ${dbPathRaw})`);
+    }
+    const dbPath = dbPathRaw;
+    // Pricing: three sources
+    // 1. File: pricing.default / pricing.models (per-token via config file)
+    // 2. CLI flat: --price / file.price (flat per-request)
+    // 3. CLI per-token: --token-price / --model-price (per-token via CLI)
+    const pricingDefault = (env.DEFAULT_PRICE ? parseInt(env.DEFAULT_PRICE, 10) : undefined)
+        ?? file.pricing?.default
+        ?? 1;
+    const pricing = {
+        default: pricingDefault,
+        models: { ...(file.pricing?.models ?? {}) },
+    };
+    // Flat pricing
+    const flatPrice = args.price ?? file.price;
+    if (flatPrice !== undefined && (!Number.isFinite(flatPrice) || flatPrice < 0)) {
+        throw new Error(`Invalid price: ${flatPrice} (must be a non-negative number)`);
+    }
+    // Per-token CLI pricing
+    const tokenPrice = args.tokenPrice
+        ?? (env.SATGATE_TOKEN_PRICE ? parseInt(env.SATGATE_TOKEN_PRICE, 10) : undefined);
+    if (tokenPrice !== undefined && (!Number.isFinite(tokenPrice) || tokenPrice <= 0)) {
+        throw new Error(`Invalid --token-price: ${tokenPrice} (must be a positive integer)`);
+    }
+    // Model-price entries from CLI and env (CLI last = CLI wins on conflict)
+    const cliModelEntries = args.modelPrice ?? [];
+    const envModelEntries = env.SATGATE_MODEL_PRICE?.split(',').filter(Boolean) ?? [];
+    const allModelEntries = [...envModelEntries, ...cliModelEntries];
+    // Parse model-price entries (split on last colon to allow model IDs with colons)
+    const parsedModelPrices = {};
+    for (const raw of allModelEntries) {
+        const lastColonIdx = raw.lastIndexOf(':');
+        if (lastColonIdx === -1) {
+            throw new Error(`Invalid --model-price value: "${raw}" (expected <model>:<sats>)`);
+        }
+        const modelPart = raw.slice(0, lastColonIdx);
+        const ratePart = raw.slice(lastColonIdx + 1);
+        const rate = parseInt(ratePart, 10);
+        if (!Number.isFinite(rate) || rate <= 0) {
+            throw new Error(`Invalid --model-price value: "${raw}" (expected <model>:<sats>)`);
+        }
+        parsedModelPrices[modelPart] = rate;
+    }
+    const hasCliTokenPricing = tokenPrice !== undefined || allModelEntries.length > 0;
+    // Mutual exclusion: flat pricing vs per-token pricing
+    if (flatPrice !== undefined && hasCliTokenPricing) {
+        throw new Error('Cannot use --price (flat) and --token-price (per-token) together');
+    }
+    // Apply CLI per-token pricing overrides
+    if (hasCliTokenPricing) {
+        if (tokenPrice !== undefined) {
+            pricing.default = tokenPrice;
+        }
+        Object.assign(pricing.models, parsedModelPrices);
+    }
+    const hasPricingConfig = file.pricing !== undefined || hasCliTokenPricing;
+    const flatPricing = flatPrice !== undefined || !hasPricingConfig;
+    const price = flatPrice ?? 1;
+    if (env.FREE_TIER_REQUESTS && !env.FREE_TIER_CREDITS) {
+        console.warn('[satgate] WARNING: FREE_TIER_REQUESTS is deprecated, use FREE_TIER_CREDITS instead');
+    }
+    const freeTierCredits = args.freeTier
+        ?? (env.FREE_TIER_CREDITS ? parseInt(env.FREE_TIER_CREDITS, 10) : undefined)
+        ?? (env.FREE_TIER_REQUESTS ? parseInt(env.FREE_TIER_REQUESTS, 10) : undefined)
+        ?? file.freeTier?.creditsPerDay
+        ?? file.freeTier?.requestsPerDay
+        ?? 0;
+    if (!Number.isFinite(freeTierCredits) || freeTierCredits < 0) {
+        throw new Error(`Invalid free tier value: ${freeTierCredits} (must be a non-negative integer)`);
+    }
+    const maxConcurrent = args.maxConcurrent
+        ?? (env.MAX_CONCURRENT ? parseInt(env.MAX_CONCURRENT, 10) : undefined)
+        ?? file.capacity?.maxConcurrent
+        ?? 0;
+    if (!Number.isFinite(maxConcurrent) || maxConcurrent < 0) {
+        throw new Error(`Invalid max concurrent value: ${maxConcurrent} (must be a non-negative integer)`);
+    }
+    const trustProxy = args.trustProxy !== undefined
+        ? args.trustProxy
+        : env.TRUST_PROXY !== undefined
+            ? env.TRUST_PROXY === 'true'
+            : file.trustProxy ?? false;
+    const tiers = file.tiers ?? [];
+    const estimatedCostSats = env.SATGATE_ESTIMATED_COST
+        ? parseInt(env.SATGATE_ESTIMATED_COST, 10)
+        : file.estimatedCostSats ?? Math.max(pricing.default * 2, 5);
+    const maxBodySize = file.maxBodySize ?? 10 * 1024 * 1024; // 10 MiB
+    // Lightning backend config
+    const VALID_BACKENDS = ['phoenixd', 'lnbits', 'lnd', 'cln'];
+    const lightningRaw = args.lightning ?? env.LIGHTNING_BACKEND ?? file.lightning;
+    if (lightningRaw && !VALID_BACKENDS.includes(lightningRaw)) {
+        throw new Error(`Invalid lightning backend: ${lightningRaw} (must be one of: ${VALID_BACKENDS.join(', ')})`);
+    }
+    const lightning = lightningRaw;
+    const lightningUrl = args.lightningUrl ?? env.LIGHTNING_URL ?? file.lightningUrl
+        ?? (lightning ? LIGHTNING_URL_DEFAULTS[lightning] : undefined);
+    if (lightningUrl) {
+        try {
+            const parsed = new URL(lightningUrl);
+            if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+                throw new Error('lightning URL must use http or https');
+            }
+        }
+        catch (e) {
+            if (e instanceof Error && e.message.includes('http or https'))
+                throw e;
+            throw new Error(`lightning URL is not a valid URL: ${lightningUrl}`);
+        }
+    }
+    const lightningKey = args.lightningKey ?? env.LIGHTNING_KEY ?? file.lightningKey;
+    // Auth mode inference
+    const VALID_AUTH_MODES = ['open', 'lightning', 'allowlist'];
+    const explicitAuth = args.authMode ?? env.AUTH_MODE ?? file.auth;
+    if (explicitAuth && !VALID_AUTH_MODES.includes(explicitAuth)) {
+        throw new Error(`Invalid auth mode: ${explicitAuth} (must be one of: ${VALID_AUTH_MODES.join(', ')})`);
+    }
+    let authMode;
+    if (explicitAuth) {
+        authMode = explicitAuth;
+        if (authMode === 'lightning' && !lightning) {
+            throw new Error("auth mode 'lightning' requires --lightning <backend>");
+        }
+    }
+    else {
+        authMode = lightning ? 'lightning' : 'open';
+    }
+    // Allowlist
+    const allowlist = args.allowlist ?? file.allowlist ?? [];
+    if (authMode === 'allowlist' && allowlist.length === 0) {
+        throw new Error("auth mode 'allowlist' requires --allowlist <keys> or --allowlist-file <path>");
+    }
+    // Tunnel
+    const tunnelEnv = env.TUNNEL !== undefined ? env.TUNNEL !== 'false' : undefined;
+    const tunnel = args.noTunnel === true ? false : (tunnelEnv ?? file.tunnel ?? true);
+    // x402 stablecoin config
+    const x402Receiver = env.X402_RECEIVER ?? file.x402?.receiverAddress;
+    const x402Network = env.X402_NETWORK ?? file.x402?.network;
+    const x402 = x402Receiver && x402Network
+        ? {
+            receiverAddress: x402Receiver,
+            network: x402Network,
+            facilitatorUrl: env.X402_FACILITATOR_URL ?? file.x402?.facilitatorUrl,
+            facilitatorKey: env.X402_FACILITATOR_KEY ?? file.x402?.facilitatorKey,
+            asset: env.X402_ASSET ?? file.x402?.asset,
+            creditMode: file.x402?.creditMode,
+        }
+        : undefined;
+    const defaultPriceUsd = env.DEFAULT_PRICE_USD
+        ? parseInt(env.DEFAULT_PRICE_USD, 10)
+        : file.defaultPriceUsd;
+    // Logging
+    const verbose = args.verbose
+        ?? (env.SATGATE_VERBOSE !== undefined ? env.SATGATE_VERBOSE === 'true' : undefined)
+        ?? file.verbose
+        ?? false;
+    const logFormatRaw = args.logFormat ?? env.SATGATE_LOG_FORMAT ?? file.logFormat ?? 'pretty';
+    if (logFormatRaw !== 'pretty' && logFormatRaw !== 'json') {
+        throw new Error(`Invalid log format: ${logFormatRaw} (must be 'pretty' or 'json')`);
+    }
+    const logFormat = logFormatRaw;
+    const serviceName = env.SATGATE_SERVICE_NAME ?? 'satgate';
+    return {
+        upstream: upstream.replace(/\/+$/, ''),
+        port,
+        rootKey,
+        rootKeyGenerated,
+        storage,
+        dbPath,
+        pricing,
+        freeTier: { creditsPerDay: freeTierCredits },
+        capacity: { maxConcurrent },
+        tiers,
+        trustProxy,
+        estimatedCostSats,
+        maxBodySize,
+        lightning,
+        lightningUrl,
+        lightningKey,
+        authMode,
+        allowlist,
+        flatPricing,
+        price,
+        tunnel,
+        x402,
+        defaultPriceUsd,
+        verbose,
+        logFormat,
+        serviceName,
+    };
+}
+//# sourceMappingURL=config.js.map