ugly-app 0.1.0

package/dist/server/billing/LimitEnforcer.js

@@ -0,0 +1,276 @@
+import { WINDOW_MS } from './BillingLedger.js';
+import { BillingLimitError, BillingValidationError } from './types.js';
+const HOUR_MS = WINDOW_MS.HOUR;
+const DAY_MS = WINDOW_MS.DAY;
+const WEEK_MS = WINDOW_MS.WEEK;
+/**
+ * Checks all billing limits and fires threshold callbacks.
+ *
+ * Global and provider hourly limits use a synchronous in-memory rolling
+ * accumulator — race-free within a single Node.js process.
+ *
+ * Per-user hourly/daily/weekly limits perform async DB queries via BillingLedger.
+ *
+ * Known limitations (documented):
+ * - Multi-server: each server's accumulator is independent; limits are eventually
+ *   consistent up to the reconciliation interval.
+ * - TOCTOU for per-user async checks: concurrent charges for the same userId can
+ *   both pass under very high concurrent load. Mitigable with per-userId mutex (v2).
+ */
+export class LimitEnforcer {
+    ledger;
+    userLimits;
+    config;
+    credits;
+    accumulators = new Map();
+    // Tracks which threshold ratios have already fired per window key this window
+    firedThresholds = new Map();
+    userThresholdCb = null;
+    globalThresholdCb = null;
+    constructor(ledger, userLimits, config, credits = null) {
+        this.ledger = ledger;
+        this.userLimits = userLimits;
+        this.config = config;
+        this.credits = credits;
+    }
+    setUserThresholdCallback(fn) {
+        this.userThresholdCb = fn;
+    }
+    setGlobalThresholdCallback(fn) {
+        this.globalThresholdCb = fn;
+    }
+    /**
+     * Load current-window spend from DB to warm the in-memory accumulators.
+     * Called by BillingGateway.start() before serving traffic.
+     */
+    async init() {
+        const now = Date.now();
+        const globalSpend = await this.ledger.getWindowSpend(HOUR_MS);
+        if (globalSpend > 0) {
+            this.addToAccumulator('global', globalSpend, now);
+        }
+        for (const provider of Object.keys(this.config.providers ?? {})) {
+            const spend = await this.ledger.getWindowSpend(HOUR_MS, {
+                provider,
+            });
+            if (spend > 0) {
+                this.addToAccumulator(`provider:${provider}`, spend, now);
+            }
+        }
+    }
+    /**
+     * Check all applicable limits for a charge.
+     *
+     * Check order (observable — documented):
+     *   1. global-hourly
+     *   2. provider-hourly
+     *   3. user-hourly
+     *   4. user-daily
+     *   5. user-weekly
+     *
+     * Throws BillingLimitError on first violation.
+     * Throws BillingValidationError on invalid input.
+     */
+    async check(params) {
+        const now = Date.now();
+        const { costUsd } = params;
+        // 1. Validate
+        if (!Number.isFinite(costUsd) || costUsd <= 0) {
+            throw new BillingValidationError(`costUsd must be a finite positive number, got ${String(costUsd)}`);
+        }
+        const provider = params.provider?.trim().toLowerCase();
+        if (!provider) {
+            throw new BillingValidationError('provider must be a non-empty string');
+        }
+        // 2. Global hourly check (synchronous — pruned before reading)
+        this.pruneAccumulator('global', now);
+        const globalPrev = this.sumAccumulator('global');
+        if (globalPrev + costUsd > this.config.global.hourlyUsd) {
+            throw new BillingLimitError('global-hourly', globalPrev, this.config.global.hourlyUsd);
+        }
+        // 3. Provider hourly check
+        const providerKey = `provider:${provider}`;
+        const providerLimit = this.config.providers?.[provider]?.hourlyUsd;
+        let providerPrev = 0;
+        if (providerLimit !== undefined) {
+            this.pruneAccumulator(providerKey, now);
+            providerPrev = this.sumAccumulator(providerKey);
+            if (providerPrev + costUsd > providerLimit) {
+                throw new BillingLimitError('provider-hourly', providerPrev, providerLimit);
+            }
+        }
+        // 4. Optimistically update accumulators (before async user checks)
+        this.addToAccumulator('global', costUsd, now);
+        if (providerLimit !== undefined) {
+            this.addToAccumulator(providerKey, costUsd, now);
+        }
+        // 5. Per-user async checks
+        if (params.userId) {
+            try {
+                await this.checkUserLimits(params.userId, costUsd);
+            }
+            catch (err) {
+                // Roll back optimistic accumulator entries on user limit violation
+                this.removeFromAccumulator('global', costUsd, now);
+                if (providerLimit !== undefined) {
+                    this.removeFromAccumulator(providerKey, costUsd, now);
+                }
+                throw err;
+            }
+        }
+        // 6. Fire threshold callbacks (errors swallowed — never block a charge)
+        this.maybeFireGlobalThreshold('global', globalPrev, globalPrev + costUsd, this.config.global.hourlyUsd, this.config.global.thresholdPct);
+        if (providerLimit !== undefined) {
+            this.maybeFireGlobalThreshold(providerKey, providerPrev, providerPrev + costUsd, providerLimit, this.config.providers[provider].thresholdPct, provider);
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Private — accumulator management
+    // ---------------------------------------------------------------------------
+    addToAccumulator(key, cost, ts) {
+        const entries = this.accumulators.get(key) ?? [];
+        entries.push({ cost, ts });
+        this.accumulators.set(key, entries);
+    }
+    /** Remove the most recent entry that matches cost+ts (rollback of optimistic add). */
+    removeFromAccumulator(key, cost, ts) {
+        const entries = this.accumulators.get(key);
+        if (!entries)
+            return;
+        for (let i = entries.length - 1; i >= 0; i--) {
+            if (entries[i].cost === cost && entries[i].ts === ts) {
+                entries.splice(i, 1);
+                return;
+            }
+        }
+    }
+    pruneAccumulator(key, now) {
+        const entries = this.accumulators.get(key);
+        if (!entries || entries.length === 0)
+            return;
+        const cutoff = now - HOUR_MS;
+        const pruned = entries.filter((e) => e.ts > cutoff);
+        this.accumulators.set(key, pruned);
+        if (pruned.length === 0) {
+            // Window fully rolled over — reset threshold state so it can fire again
+            this.firedThresholds.delete(key);
+        }
+    }
+    sumAccumulator(key) {
+        const entries = this.accumulators.get(key);
+        if (!entries)
+            return 0;
+        return entries.reduce((sum, e) => sum + e.cost, 0);
+    }
+    // ---------------------------------------------------------------------------
+    // Private — per-user limit checks
+    // ---------------------------------------------------------------------------
+    async checkUserLimits(userId, costUsd) {
+        const limits = await this.userLimits.get(userId);
+        if (!limits)
+            return; // null = no limits configured for this user
+        // User hourly
+        if (limits.hourlyUsd !== undefined) {
+            const spent = await this.ledger.getWindowSpend(HOUR_MS, { userId });
+            if (spent + costUsd > limits.hourlyUsd) {
+                await this.tryCreditsOrThrow(userId, costUsd, new BillingLimitError('user-hourly', spent, limits.hourlyUsd));
+                return; // credit covered it — skip remaining limit checks
+            }
+            this.maybeFireUserThreshold(userId, 'hourly', spent, spent + costUsd, limits.hourlyUsd, limits.thresholds?.hourly);
+        }
+        // User daily
+        if (limits.dailyUsd !== undefined) {
+            const spent = await this.ledger.getWindowSpend(DAY_MS, { userId });
+            if (spent + costUsd > limits.dailyUsd) {
+                await this.tryCreditsOrThrow(userId, costUsd, new BillingLimitError('user-daily', spent, limits.dailyUsd));
+                return;
+            }
+            this.maybeFireUserThreshold(userId, 'daily', spent, spent + costUsd, limits.dailyUsd, limits.thresholds?.daily);
+        }
+        // User weekly
+        if (limits.weeklyUsd !== undefined) {
+            const spent = await this.ledger.getWindowSpend(WEEK_MS, { userId });
+            if (spent + costUsd > limits.weeklyUsd) {
+                await this.tryCreditsOrThrow(userId, costUsd, new BillingLimitError('user-weekly', spent, limits.weeklyUsd));
+                return;
+            }
+            this.maybeFireUserThreshold(userId, 'weekly', spent, spent + costUsd, limits.weeklyUsd, limits.thresholds?.weekly);
+        }
+    }
+    /**
+     * If a CreditStore is configured and the user has sufficient balance, deduct and return.
+     * Otherwise throw the original limit error.
+     */
+    async tryCreditsOrThrow(userId, costUsd, limitErr) {
+        if (this.credits) {
+            const deducted = await this.credits.tryDeduct(userId, costUsd);
+            if (deducted)
+                return; // credit covered this charge
+        }
+        throw limitErr;
+    }
+    // ---------------------------------------------------------------------------
+    // Private — threshold callbacks
+    // ---------------------------------------------------------------------------
+    /**
+     * Fire the global/provider threshold callback if the charge crosses the threshold.
+     * Fires at most once per window per threshold ratio (deduplicated by firedThresholds map).
+     * Window reset is detected when the accumulator for that key becomes empty after pruning.
+     */
+    maybeFireGlobalThreshold(key, prevSpend, newSpend, limit, thresholdPct, provider) {
+        if (!this.globalThresholdCb || thresholdPct === undefined || limit <= 0)
+            return;
+        const prevRatio = prevSpend / limit;
+        const newRatio = newSpend / limit;
+        if (prevRatio >= thresholdPct || newRatio < thresholdPct)
+            return;
+        const fired = this.firedThresholds.get(key) ?? new Set();
+        if (fired.has(thresholdPct))
+            return;
+        fired.add(thresholdPct);
+        this.firedThresholds.set(key, fired);
+        try {
+            this.globalThresholdCb({
+                limitType: provider ? 'provider-hourly' : 'global-hourly',
+                provider,
+                spent: newSpend,
+                limit,
+                thresholdPct,
+            });
+        }
+        catch {
+            // Swallow — never block a charge
+        }
+    }
+    /**
+     * Fire the user threshold callback if the charge crosses a per-user window threshold.
+     * User threshold state is tracked per (userId, limitType) key.
+     */
+    maybeFireUserThreshold(userId, limitType, prevSpend, newSpend, limit, thresholdPct) {
+        if (!this.userThresholdCb || thresholdPct === undefined || limit <= 0)
+            return;
+        const prevRatio = prevSpend / limit;
+        const newRatio = newSpend / limit;
+        if (prevRatio >= thresholdPct || newRatio < thresholdPct)
+            return;
+        const key = `user:${userId}:${limitType}`;
+        const fired = this.firedThresholds.get(key) ?? new Set();
+        if (fired.has(thresholdPct))
+            return;
+        fired.add(thresholdPct);
+        this.firedThresholds.set(key, fired);
+        try {
+            this.userThresholdCb({
+                userId,
+                limitType,
+                spent: newSpend,
+                limit,
+                thresholdPct,
+            });
+        }
+        catch {
+            // Swallow
+        }
+    }
+}
+//# sourceMappingURL=LimitEnforcer.js.map

package/dist/server/billing/LimitEnforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LimitEnforcer.js","sourceRoot":"","sources":["../../../src/server/billing/LimitEnforcer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAS/C,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGvE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC;AAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC;AAC7B,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC;AAO/B;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,aAAa;IAQL;IACA;IACA;IACA;IAVF,YAAY,GAAG,IAAI,GAAG,EAA8B,CAAC;IACtE,8EAA8E;IAC7D,eAAe,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1D,eAAe,GAAiC,IAAI,CAAC;IACrD,iBAAiB,GAAmC,IAAI,CAAC;IAEjE,YACmB,MAAqB,EACrB,UAA0B,EAC1B,MAAqB,EACrB,UAA8B,IAAI;QAHlC,WAAM,GAAN,MAAM,CAAe;QACrB,eAAU,GAAV,UAAU,CAAgB;QAC1B,WAAM,GAAN,MAAM,CAAe;QACrB,YAAO,GAAP,OAAO,CAA2B;IAClD,CAAC;IAEJ,wBAAwB,CAAC,EAAyB;QAChD,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED,0BAA0B,CAAC,EAA2B;QACpD,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE;gBACtD,QAAQ;aACO,CAAC,CAAC;YACnB,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,IAAI,CAAC,gBAAgB,CAAC,YAAY,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,KAAK,CAAC,MAAoB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAE3B,cAAc;QACd,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,sBAAsB,CAC9B,iDAAiD,MAAM,CAAC,OAAO,CAAC,EAAE,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,sBAAsB,CAAC,qCAAqC,CAAC,CAAC;QAC1E,CAAC;QAED,+DAA+D;QAC/D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,UAAU,GAAG,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,iBAAiB,CACzB,eAAe,EACf,UAAU,EACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7B,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,MAAM,WAAW,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;QACnE,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACxC,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YAChD,IAAI,YAAY,GAAG,OAAO,GAAG,aAAa,EAAE,CAAC;gBAC3C,MAAM,IAAI,iBAAiB,CACzB,iBAAiB,EACjB,YAAY,EACZ,aAAa,CACd,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mEAAmE;gBACnE,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACnD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAChC,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,IAAI,CAAC,wBAAwB,CAC3B,QAAQ,EACR,UAAU,EACV,UAAU,GAAG,OAAO,EACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAChC,CAAC;QACF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,wBAAwB,CAC3B,WAAW,EACX,YAAY,EACZ,YAAY,GAAG,OAAO,EACtB,aAAa,EACb,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC,QAAQ,CAAE,CAAC,YAAY,EAC9C,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,mCAAmC;IACnC,8EAA8E;IAEtE,gBAAgB,CAAC,GAAW,EAAE,IAAY,EAAE,EAAU;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,sFAAsF;IAC9E,qBAAqB,CAAC,GAAW,EAAE,IAAY,EAAE,EAAU;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrD,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,GAAW,EAAE,GAAW;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC7C,MAAM,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,wEAAwE;YACxE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,GAAW;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,8EAA8E;IAC9E,kCAAkC;IAClC,8EAA8E;IAEtE,KAAK,CAAC,eAAe,CAC3B,MAAc,EACd,OAAe;QAEf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,4CAA4C;QAEjE,cAAc;QACd,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACpE,IAAI,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBACvC,MAAM,IAAI,CAAC,iBAAiB,CAC1B,MAAM,EACN,OAAO,EACP,IAAI,iBAAiB,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAC9D,CAAC;gBACF,OAAO,CAAC,kDAAkD;YAC5D,CAAC;YACD,IAAI,CAAC,sBAAsB,CACzB,MAAM,EACN,QAAQ,EACR,KAAK,EACL,KAAK,GAAG,OAAO,EACf,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,EAAE,MAAM,CAC1B,CAAC;QACJ,CAAC;QAED,aAAa;QACb,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACnE,IAAI,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACtC,MAAM,IAAI,CAAC,iBAAiB,CAC1B,MAAM,EACN,OAAO,EACP,IAAI,iBAAiB,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAC5D,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,sBAAsB,CACzB,MAAM,EACN,OAAO,EACP,KAAK,EACL,KAAK,GAAG,OAAO,EACf,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,UAAU,EAAE,KAAK,CACzB,CAAC;QACJ,CAAC;QAED,cAAc;QACd,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACpE,IAAI,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBACvC,MAAM,IAAI,CAAC,iBAAiB,CAC1B,MAAM,EACN,OAAO,EACP,IAAI,iBAAiB,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAC9D,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,sBAAsB,CACzB,MAAM,EACN,QAAQ,EACR,KAAK,EACL,KAAK,GAAG,OAAO,EACf,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,EAAE,MAAM,CAC1B,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB,CAC7B,MAAc,EACd,OAAe,EACf,QAA2B;QAE3B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/D,IAAI,QAAQ;gBAAE,OAAO,CAAC,6BAA6B;QACrD,CAAC;QACD,MAAM,QAAQ,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,gCAAgC;IAChC,8EAA8E;IAE9E;;;;OAIG;IACK,wBAAwB,CAC9B,GAAW,EACX,SAAiB,EACjB,QAAgB,EAChB,KAAa,EACb,YAAqB,EACrB,QAAiB;QAEjB,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,YAAY,KAAK,SAAS,IAAI,KAAK,IAAI,CAAC;YACrE,OAAO;QAET,MAAM,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;QAClC,IAAI,SAAS,IAAI,YAAY,IAAI,QAAQ,GAAG,YAAY;YAAE,OAAO;QAEjE,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACjE,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,OAAO;QACpC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC;gBACrB,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe;gBACzD,QAAQ;gBACR,KAAK,EAAE,QAAQ;gBACf,KAAK;gBACL,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,sBAAsB,CAC5B,MAAc,EACd,SAAwC,EACxC,SAAiB,EACjB,QAAgB,EAChB,KAAa,EACb,YAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,YAAY,KAAK,SAAS,IAAI,KAAK,IAAI,CAAC;YACnE,OAAO;QAET,MAAM,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;QAClC,IAAI,SAAS,IAAI,YAAY,IAAI,QAAQ,GAAG,YAAY;YAAE,OAAO;QAEjE,MAAM,GAAG,GAAG,QAAQ,MAAM,IAAI,SAAS,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACjE,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,OAAO;QACpC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,IAAI,CAAC,eAAe,CAAC;gBACnB,MAAM;gBACN,SAAS;gBACT,KAAK,EAAE,QAAQ;gBACf,KAAK;gBACL,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/server/billing/UserLimitCache.d.ts

@@ -0,0 +1,35 @@
+import type { GetUserLimits, UserLimits } from './types.js';
+/**
+ * Caches per-user spending limits returned by an async callback hook.
+ *
+ * - TTL tracked via Date.now() (fake-timer compatible)
+ * - LRU eviction to bound memory with many users
+ * - Concurrent miss deduplication: simultaneous gets for the same userId
+ *   share one in-flight hook call
+ * - Errors from the hook are NOT cached (next call retries); returns null
+ *   (fail-open — don't lock users out on infrastructure failures)
+ */
+export declare class UserLimitCache {
+    private readonly ttlMs;
+    private readonly maxSize;
+    private hook;
+    private readonly cache;
+    private readonly inFlight;
+    constructor(ttlMs?: number, maxSize?: number);
+    /** Register or replace the async callback that retrieves limits for a userId. */
+    setHook(fn: GetUserLimits): void;
+    /**
+     * Get limits for a userId.
+     * - Returns cached entry (including null = "no limits") if not expired.
+     * - On miss or expiry: calls hook, caches result for TTL, returns it.
+     * - If hook throws: logs warning, returns null, does NOT cache.
+     * - Concurrent misses for the same userId share one in-flight promise.
+     */
+    get(userId: string): Promise<UserLimits | null>;
+    /** Remove a specific userId from the cache; next get() will call hook fresh. */
+    invalidate(userId: string): void;
+    /** Clear the entire cache. */
+    invalidateAll(): void;
+    private fetchFromHook;
+}
+//# sourceMappingURL=UserLimitCache.d.ts.map

package/dist/server/billing/UserLimitCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserLimitCache.d.ts","sourceRoot":"","sources":["../../../src/server/billing/UserLimitCache.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAO5D;;;;;;;;;GASG;AACH,qBAAa,cAAc;IAOvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAP1B,OAAO,CAAC,IAAI,CAA8B;IAE1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiD;gBAGvD,KAAK,GAAE,MAAkB,EACzB,OAAO,GAAE,MAAe;IAQ3C,iFAAiF;IACjF,OAAO,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI;IAMhC;;;;;;OAMG;IACG,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAqBrD,gFAAgF;IAChF,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIhC,8BAA8B;IAC9B,aAAa,IAAI,IAAI;YAQP,aAAa;CAiB5B"}

package/dist/server/billing/UserLimitCache.js

@@ -0,0 +1,91 @@
+import { LRUCache } from 'lru-cache';
+/**
+ * Caches per-user spending limits returned by an async callback hook.
+ *
+ * - TTL tracked via Date.now() (fake-timer compatible)
+ * - LRU eviction to bound memory with many users
+ * - Concurrent miss deduplication: simultaneous gets for the same userId
+ *   share one in-flight hook call
+ * - Errors from the hook are NOT cached (next call retries); returns null
+ *   (fail-open — don't lock users out on infrastructure failures)
+ */
+export class UserLimitCache {
+    ttlMs;
+    maxSize;
+    hook = null;
+    // LRU used for eviction only — TTL is managed manually via CacheEntry.expiresAt
+    cache;
+    inFlight = new Map();
+    constructor(ttlMs = 3_600_000, maxSize = 10_000) {
+        this.ttlMs = ttlMs;
+        this.maxSize = maxSize;
+        this.cache = new LRUCache({
+            max: this.maxSize,
+            allowStale: false,
+        });
+    }
+    /** Register or replace the async callback that retrieves limits for a userId. */
+    setHook(fn) {
+        this.hook = fn;
+        this.cache.clear();
+        this.inFlight.clear();
+    }
+    /**
+     * Get limits for a userId.
+     * - Returns cached entry (including null = "no limits") if not expired.
+     * - On miss or expiry: calls hook, caches result for TTL, returns it.
+     * - If hook throws: logs warning, returns null, does NOT cache.
+     * - Concurrent misses for the same userId share one in-flight promise.
+     */
+    async get(userId) {
+        const entry = this.cache.get(userId);
+        if (entry !== undefined && Date.now() < entry.expiresAt) {
+            return entry.value; // null is a valid cached value (user has no limits)
+        }
+        // Expired or not present — evict if stale
+        if (entry !== undefined)
+            this.cache.delete(userId);
+        // Deduplicate concurrent in-flight requests for the same userId
+        const existing = this.inFlight.get(userId);
+        if (existing)
+            return existing;
+        const promise = this.fetchFromHook(userId);
+        this.inFlight.set(userId, promise);
+        try {
+            return await promise;
+        }
+        finally {
+            this.inFlight.delete(userId);
+        }
+    }
+    /** Remove a specific userId from the cache; next get() will call hook fresh. */
+    invalidate(userId) {
+        this.cache.delete(userId);
+    }
+    /** Clear the entire cache. */
+    invalidateAll() {
+        this.cache.clear();
+    }
+    // ---------------------------------------------------------------------------
+    // Private
+    // ---------------------------------------------------------------------------
+    async fetchFromHook(userId) {
+        if (!this.hook)
+            return null;
+        try {
+            const limits = await this.hook(userId);
+            // Cache result (including null = user has no limits)
+            this.cache.set(userId, {
+                value: limits,
+                expiresAt: Date.now() + this.ttlMs,
+            });
+            return limits;
+        }
+        catch (err) {
+            console.warn('[UserLimitCache] hook threw for userId', userId, err);
+            // Do NOT cache errors — next call will retry the hook
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=UserLimitCache.js.map

package/dist/server/billing/UserLimitCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserLimitCache.js","sourceRoot":"","sources":["../../../src/server/billing/UserLimitCache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAQrC;;;;;;;;;GASG;AACH,MAAM,OAAO,cAAc;IAON;IACA;IAPX,IAAI,GAAyB,IAAI,CAAC;IAC1C,gFAAgF;IAC/D,KAAK,CAA+B;IACpC,QAAQ,GAAG,IAAI,GAAG,EAAsC,CAAC;IAE1E,YACmB,QAAgB,SAAS,EACzB,UAAkB,MAAM;QADxB,UAAK,GAAL,KAAK,CAAoB;QACzB,YAAO,GAAP,OAAO,CAAiB;QAEzC,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAqB;YAC5C,GAAG,EAAE,IAAI,CAAC,OAAO;YACjB,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAED,iFAAiF;IACjF,OAAO,CAAC,EAAiB;QACvB,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,GAAG,CAAC,MAAc;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,oDAAoD;QAC1E,CAAC;QACD,0CAA0C;QAC1C,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEnD,gEAAgE;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,8BAA8B;IAC9B,aAAa;QACX,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,8EAA8E;IAC9E,UAAU;IACV,8EAA8E;IAEtE,KAAK,CAAC,aAAa,CAAC,MAAc;QACxC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAE5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,qDAAqD;YACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;gBACrB,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK;aACnC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACpE,sDAAsD;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/server/billing/index.d.ts

@@ -0,0 +1,6 @@
+export { BillingGateway, getBillingGateway, initBillingGateway, } from './BillingGateway.js';
+export { CreditStore, MongoCreditDB } from './CreditStore.js';
+export type { CreditDB } from './CreditStore.js';
+export { BillingLimitError, BillingValidationError } from './types.js';
+export type { BillingConfig, BillingRecord, BillingType, ChargeParams, GetUserLimits, GlobalThresholdCallback, HistoryFilters, SpendFilters, UserCredit, UserLimits, UserThresholdCallback, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/billing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/billing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC9D,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACvE,YAAY,EACV,aAAa,EACb,aAAa,EACb,WAAW,EACX,YAAY,EACZ,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,UAAU,EACV,qBAAqB,GACtB,MAAM,YAAY,CAAC"}

package/dist/server/billing/index.js

@@ -0,0 +1,4 @@
+export { BillingGateway, getBillingGateway, initBillingGateway, } from './BillingGateway.js';
+export { CreditStore, MongoCreditDB } from './CreditStore.js';
+export { BillingLimitError, BillingValidationError } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/server/billing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/billing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC"}

package/dist/server/billing/types.d.ts

@@ -0,0 +1,95 @@
+export type BillingType = 'textGen' | 'imageGen' | 'stt' | 'tts' | 'embedding' | 'service';
+export interface BillingRecord {
+    id: string;
+    userId?: string;
+    provider: string;
+    model: string;
+    type: BillingType;
+    costUsd: number;
+    inputTokens?: number;
+    outputTokens?: number;
+    imageCount?: number;
+    imageWidth?: number;
+    imageHeight?: number;
+    imageSteps?: number;
+    audioSeconds?: number;
+    timestamp: number;
+}
+export interface UserLimits {
+    hourlyUsd?: number;
+    dailyUsd?: number;
+    weeklyUsd?: number;
+    thresholds?: {
+        hourly?: number;
+        daily?: number;
+        weekly?: number;
+    };
+}
+export interface BillingConfig {
+    global: {
+        hourlyUsd: number;
+        thresholdPct?: number;
+    };
+    providers?: Record<string, {
+        hourlyUsd: number;
+        thresholdPct?: number;
+    }>;
+    /**
+     * Profit margin applied to every charge before limit checks and persistence.
+     * e.g. 0.5 = 50% markup: raw costUsd × 1.5 is recorded and checked against limits.
+     * Callers always pass the raw provider cost; the gateway applies the margin internally.
+     * Must be >= 0. Default: 0 (no markup).
+     */
+    profitMarginPct?: number;
+    reconcileIntervalMs?: number;
+    userLimitCacheSize?: number;
+}
+/**
+ * Stored per-user credit balance in the userCredits collection.
+ * Credits are used as a fallback when a user's rate limits are exceeded.
+ * Global and provider limits are never bypassed by credits.
+ */
+export interface UserCredit {
+    id: string;
+    balanceUsd: number;
+    updated: number;
+}
+/** Params passed to gateway.charge() — everything except id and timestamp */
+export type ChargeParams = Omit<BillingRecord, 'id' | 'timestamp'>;
+/** App-provided async callback to retrieve per-user spend limits. Return null = no limits. */
+export type GetUserLimits = (userId: string) => Promise<UserLimits | null>;
+export type UserThresholdCallback = (event: {
+    userId: string;
+    limitType: 'hourly' | 'daily' | 'weekly';
+    spent: number;
+    limit: number;
+    thresholdPct: number;
+}) => void;
+export type GlobalThresholdCallback = (event: {
+    limitType: 'global-hourly' | 'provider-hourly';
+    provider?: string;
+    spent: number;
+    limit: number;
+    thresholdPct: number;
+}) => void;
+export interface SpendFilters {
+    userId?: string;
+    provider?: string;
+    type?: BillingType;
+    from?: number;
+    to?: number;
+}
+export interface HistoryFilters extends SpendFilters {
+    limit?: number;
+    skip?: number;
+}
+export declare class BillingLimitError extends Error {
+    readonly limitType: 'global-hourly' | 'provider-hourly' | 'user-hourly' | 'user-daily' | 'user-weekly';
+    readonly spent: number;
+    readonly limit: number;
+    constructor(limitType: 'global-hourly' | 'provider-hourly' | 'user-hourly' | 'user-daily' | 'user-weekly', spent: number, limit: number);
+}
+export declare class BillingValidationError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/server/billing/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/server/billing/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GACnB,SAAS,GACT,UAAU,GACV,KAAK,GACL,KAAK,GACL,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAEhB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE;QACX,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,CAChB,MAAM,EACN;QACE,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CACF,CAAC;IACF;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAMD;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC;AAEnE,8FAA8F;AAC9F,MAAM,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;AAE3E,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB,KAAK,IAAI,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,eAAe,GAAG,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB,KAAK,IAAI,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAe,SAAQ,YAAY;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,iBAAkB,SAAQ,KAAK;aAExB,SAAS,EACrB,eAAe,GACf,iBAAiB,GACjB,aAAa,GACb,YAAY,GACZ,aAAa;aACD,KAAK,EAAE,MAAM;aACb,KAAK,EAAE,MAAM;gBAPb,SAAS,EACrB,eAAe,GACf,iBAAiB,GACjB,aAAa,GACb,YAAY,GACZ,aAAa,EACD,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM;CAShC;AAED,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B"}

package/dist/server/billing/types.js

@@ -0,0 +1,19 @@
+export class BillingLimitError extends Error {
+    limitType;
+    spent;
+    limit;
+    constructor(limitType, spent, limit) {
+        super(`[Billing] Limit exceeded: ${limitType} (spent=${spent.toFixed(6)}, limit=${limit.toFixed(6)})`);
+        this.limitType = limitType;
+        this.spent = spent;
+        this.limit = limit;
+        this.name = 'BillingLimitError';
+    }
+}
+export class BillingValidationError extends Error {
+    constructor(message) {
+        super(`[Billing] Validation error: ${message}`);
+        this.name = 'BillingValidationError';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/server/billing/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/server/billing/types.ts"],"names":[],"mappings":"AAgHA,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAExB;IAMA;IACA;IARlB,YACkB,SAKC,EACD,KAAa,EACb,KAAa;QAE7B,KAAK,CACH,6BAA6B,SAAS,WAAW,KAAK,CAAC,OAAO,CAC5D,CAAC,CACF,WAAW,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAChC,CAAC;QAbc,cAAS,GAAT,SAAS,CAKR;QACD,UAAK,GAAL,KAAK,CAAQ;QACb,UAAK,GAAL,KAAK,CAAQ;QAO7B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF"}

package/dist/server/embeddings/EmbeddingClient.d.ts

@@ -0,0 +1,8 @@
+import type { EmbeddingOptions, EmbeddingVector } from './types.js';
+export interface EmbeddingClient {
+    embed(text: string, options?: EmbeddingOptions): Promise<EmbeddingVector>;
+    embedBatch(texts: string[], options?: EmbeddingOptions): Promise<EmbeddingVector[]>;
+}
+export declare function cosineSimilarity(a: number[], b: number[]): number;
+export declare function createEmbeddingClient(providerName?: string): EmbeddingClient;
+//# sourceMappingURL=EmbeddingClient.d.ts.map

package/dist/server/embeddings/EmbeddingClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmbeddingClient.d.ts","sourceRoot":"","sources":["../../../src/server/embeddings/EmbeddingClient.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEpE,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1E,UAAU,CACR,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;CAC/B;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAWjE;AAED,wBAAgB,qBAAqB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,eAAe,CAmB5E"}

package/dist/server/embeddings/EmbeddingClient.js

@@ -0,0 +1,30 @@
+import { getAllEmbeddingProviders } from './registry.js';
+export function cosineSimilarity(a, b) {
+    let dot = 0, normA = 0, normB = 0;
+    for (let i = 0; i < a.length; i++) {
+        dot += a[i] * b[i];
+        normA += a[i] * a[i];
+        normB += b[i] * b[i];
+    }
+    if (normA === 0 || normB === 0)
+        return 0;
+    return dot / (Math.sqrt(normA) * Math.sqrt(normB));
+}
+export function createEmbeddingClient(providerName) {
+    const providers = getAllEmbeddingProviders();
+    const provider = providerName
+        ? providers.find((p) => p.name === providerName)
+        : providers.find((p) => !!process.env[p.apiKeyEnv]) ?? providers[0];
+    if (!provider)
+        throw new Error('[Embeddings] No provider available — register one with registerEmbeddingProvider()');
+    return {
+        async embed(text, options) {
+            const vecs = await provider.embed([text], options);
+            return vecs[0];
+        },
+        async embedBatch(texts, options) {
+            return provider.embed(texts, options);
+        },
+    };
+}
+//# sourceMappingURL=EmbeddingClient.js.map

package/dist/server/embeddings/EmbeddingClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmbeddingClient.js","sourceRoot":"","sources":["../../../src/server/embeddings/EmbeddingClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAWzD,MAAM,UAAU,gBAAgB,CAAC,CAAW,EAAE,CAAW;IACvD,IAAI,GAAG,GAAG,CAAC,EACT,KAAK,GAAG,CAAC,EACT,KAAK,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACrB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACzC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,YAAqB;IACzD,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,YAAY;QAC3B,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,QAAQ;QACX,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IAEJ,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO;YACvB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO;YAC7B,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/embeddings/index.d.ts

@@ -0,0 +1,5 @@
+export { cosineSimilarity, createEmbeddingClient } from './EmbeddingClient.js';
+export type { EmbeddingClient } from './EmbeddingClient.js';
+export { clearEmbeddingRegistry, getAllEmbeddingProviders, registerEmbeddingProvider, } from './registry.js';
+export type { EmbeddingOptions, EmbeddingProvider, EmbeddingVector, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/embeddings/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/embeddings/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC/E,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC"}

package/dist/server/embeddings/index.js

@@ -0,0 +1,6 @@
+import { openAIEmbeddingProvider } from './providers/OpenAI.js';
+import { registerEmbeddingProvider } from './registry.js';
+registerEmbeddingProvider(openAIEmbeddingProvider);
+export { cosineSimilarity, createEmbeddingClient } from './EmbeddingClient.js';
+export { clearEmbeddingRegistry, getAllEmbeddingProviders, registerEmbeddingProvider, } from './registry.js';
+//# sourceMappingURL=index.js.map

package/dist/server/embeddings/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/embeddings/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE1D,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,eAAe,CAAC"}