nerdit 0.8.2__tar.gz → 0.8.4__tar.gz

{nerdit-0.8.2 → nerdit-0.8.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: nerdit
-Version: 0.8.2
+Version: 0.8.4
 Summary: The local AI PaaS — deploy and operate apps on your own hardware, with first-class local AI
 Project-URL: Homepage, https://github.com/nerdit-ai/nerdit
 Project-URL: Repository, https://github.com/nerdit-ai/nerdit
@@ -272,10 +272,10 @@ Questions or feedback: [feedback@nerdit.ai](mailto:feedback@nerdit.ai).
 
 ## License
 
-Apache-2.0, see [LICENSE](https://github.com/nerdit-ai/nerdit/blob/v0.8.2/LICENSE). "Nerdit" and the logo are trademarks and
-are not covered by the code license, see [NOTICE](https://github.com/nerdit-ai/nerdit/blob/v0.8.2/NOTICE).
+Apache-2.0, see [LICENSE](https://github.com/nerdit-ai/nerdit/blob/v0.8.4/LICENSE). "Nerdit" and the logo are trademarks and
+are not covered by the code license, see [NOTICE](https://github.com/nerdit-ai/nerdit/blob/v0.8.4/NOTICE).
 
 ## Contributing
 
-Issues and pull requests are welcome. [CONTRIBUTING.md](https://github.com/nerdit-ai/nerdit/blob/v0.8.2/CONTRIBUTING.md)
+Issues and pull requests are welcome. [CONTRIBUTING.md](https://github.com/nerdit-ai/nerdit/blob/v0.8.4/CONTRIBUTING.md)
 explains how contributions land in releases.

{nerdit-0.8.2 → nerdit-0.8.4}/README.md

@@ -213,10 +213,10 @@ Questions or feedback: [feedback@nerdit.ai](mailto:feedback@nerdit.ai).
 
 ## License
 
-Apache-2.0, see [LICENSE](https://github.com/nerdit-ai/nerdit/blob/v0.8.2/LICENSE). "Nerdit" and the logo are trademarks and
-are not covered by the code license, see [NOTICE](https://github.com/nerdit-ai/nerdit/blob/v0.8.2/NOTICE).
+Apache-2.0, see [LICENSE](https://github.com/nerdit-ai/nerdit/blob/v0.8.4/LICENSE). "Nerdit" and the logo are trademarks and
+are not covered by the code license, see [NOTICE](https://github.com/nerdit-ai/nerdit/blob/v0.8.4/NOTICE).
 
 ## Contributing
 
-Issues and pull requests are welcome. [CONTRIBUTING.md](https://github.com/nerdit-ai/nerdit/blob/v0.8.2/CONTRIBUTING.md)
+Issues and pull requests are welcome. [CONTRIBUTING.md](https://github.com/nerdit-ai/nerdit/blob/v0.8.4/CONTRIBUTING.md)
 explains how contributions land in releases.

{nerdit-0.8.2 → nerdit-0.8.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "nerdit"
-version = "0.8.2"
+version = "0.8.4"
 description = "The local AI PaaS — deploy and operate apps on your own hardware, with first-class local AI"
 readme = "README.md"
 license = "Apache-2.0"

{nerdit-0.8.2 → nerdit-0.8.4}/src/nerdit/__init__.py

@@ -1,3 +1,3 @@
 """Nerdit — Le moteur de l'IA locale."""
 
-__version__ = "0.8.2"
+__version__ = "0.8.4"

{nerdit-0.8.2 → nerdit-0.8.4}/src/nerdit/cli/commands/ai.py

@@ -2,7 +2,8 @@
 
 An alias names a provider model and a `${secrets.shared.KEY}` reference to its
 key; the key itself is set with `nerdit secrets set --shared` and never passes
-through these commands. Writes are admin-only and mint an idempotency key.
+through these commands. Writes take a submitter or admin token and mint an
+idempotency key; a submitter revokes the keys of its own apps only.
 """
 
 from __future__ import annotations
@@ -74,7 +75,7 @@ def routes_set(
         "never the key itself.",
     ),
 ) -> None:
-    """Create or replace an alias (admin).
+    """Create or replace an alias (submitter or admin).
 
     Example: nerdit ai routes set fast --model openai/gpt-4o-mini
     --base-url https://openrouter.ai/api/v1 --key-ref '${secrets.shared.OPENROUTER_API_KEY}'
@@ -101,7 +102,7 @@ def routes_rm(
     alias: str = typer.Argument(..., help="Alias to remove."),
     force: bool = typer.Option(False, "--force", help="Remove even if a running app uses it."),
 ) -> None:
-    """Remove an alias (admin). Refused while a running app uses it, unless --force."""
+    """Remove an alias (submitter or admin). Refused while a running app uses it, unless --force."""
     asyncio.run(
         call_or_exit(_client().remove_ai_route(alias, force=force, idempotency_key=uuid4().hex))
     )
@@ -128,7 +129,7 @@ def keys_list(
 
 @keys_app.command("revoke")
 def keys_revoke(service: str = typer.Argument(..., help="App whose keys to revoke.")) -> None:
-    """Revoke an app's virtual keys (admin); it gets a new one when it restarts."""
+    """Revoke an app's virtual keys (its owner or admin); it gets a new one when it restarts."""
     result = asyncio.run(
         call_or_exit(_client().revoke_ai_gateway_keys(service, idempotency_key=uuid4().hex))
     )

{nerdit-0.8.2 → nerdit-0.8.4}/src/nerdit/config/settings.py

@@ -684,14 +684,15 @@ class ModelsSettings(BaseModel):
 class AiGatewaySettings(BaseModel):
     """The machine's AI gateway: one OpenAI-compatible listener for app containers.
 
-    Off by default; when on, the daemon serves it on the models bridge (never
-    ``0.0.0.0``: the host comes from ``[models].bridge_host``, not from here) at
-    ``port``. Apps reach it through ``[ai.*] provider = "gateway"`` with a
-    per-service virtual key; provider keys stay on the machine. Every field is
-    captured at startup and requires a restart.
+    On by default since 0.8.3 (a hosted box has no admin principal to turn it
+    on; ``enabled = false`` is the opt-out). The daemon serves it on the models
+    bridge (never ``0.0.0.0``: the host comes from ``[models].bridge_host``, not
+    from here) at ``port`` and answers 401 without a virtual key. Apps reach it
+    through ``[ai.*] provider = "gateway"``; provider keys stay on the machine.
+    Every field is captured at startup and requires a restart.
     """
 
-    enabled: bool = False
+    enabled: bool = True
     port: int = Field(default=9330, ge=1024, le=65535)
     upstream_timeout_s: int = Field(default=120, ge=1)
     stream_timeout_s: int = Field(default=600, ge=1)

{nerdit-0.8.2 → nerdit-0.8.4}/src/nerdit/daemon/routes/ai_gateway.py

@@ -7,8 +7,10 @@ only read and write its SQLite rows, so they answer while the gateway is off
 * Reads (any authenticated principal): the state view, the aliases, the key
   metadata and the usage aggregates. No view carries a secret value, a
   virtual key or its hash: an alias shows its `api_key_ref` (a name).
-* Writes are admin-only: an alias is machine-wide and spends the machine's
-  provider keys. `PUT` needs an `Idempotency-Key`. Audit params carry the
+* Writes take submitter or admin (0.8.3, D-P31-5): an alias only references a
+  shared secret a submitter's own deploy already receives, and a hosted box's
+  tunnel principal is submitter-capped. Daemon config stays admin. `PUT` needs
+  an `Idempotency-Key`. Audit params carry the
   alias, provider, model, the base_url HOST and the ref name, never a value.
 * `base_url` is the anti-SSRF gate: https to a host that resolves to public
   addresses only, or plain http to loopback / the models bridge (a local
@@ -29,7 +31,7 @@ from pydantic import BaseModel, Field
 from nerdit.config.project import AI_GATEWAY_ALIAS_HINT, AI_GATEWAY_ALIAS_RE, SECRET_REF_RE
 from nerdit.core.jobconfig import parse_job_config
 from nerdit.daemon.audit import audit_params
-from nerdit.daemon.auth import require_role
+from nerdit.daemon.auth import require_owner_or_admin, require_role
 from nerdit.daemon.errors import NerditError
 from nerdit.daemon.schemas._base import StrictRequestModel
 from nerdit.db.enums import JobKind
@@ -271,12 +273,12 @@ async def list_ai_routes(request: Request) -> AiRouteList:
 async def set_ai_route(
     request: Request, alias: str, body: AiRouteSetRequest
 ) -> AiRouteWriteResponse:
-    """Create or replace an alias (admin; `Idempotency-Key` required).
+    """Create or replace an alias (submitter or admin; `Idempotency-Key` required).
 
     Answers 200 with `enabled: false` while the gateway is off: the alias is
     stored and serves once `[ai_gateway]` is enabled.
     """
-    require_role(request, TokenRole.admin)
+    require_role(request, TokenRole.submitter, TokenRole.admin)
     _check_alias(alias)
     host: str | None = None
     ref_key: str | None = None
@@ -336,8 +338,11 @@ async def remove_ai_route(
     alias: str,
     force: bool = Query(False, description="Remove even if a running app uses the alias."),
 ) -> dict:
-    """Remove an alias (admin). 409 while a running app's `[ai.*]` uses it, unless `force`."""
-    require_role(request, TokenRole.admin)
+    """Remove an alias (submitter or admin).
+
+    409 while a running app's `[ai.*]` uses it, unless `force`.
+    """
+    require_role(request, TokenRole.submitter, TokenRole.admin)
     _check_alias(alias)
     request.state.audit_params = audit_params({"alias": alias, "force": force})
     queries = request.app.state.queries
@@ -373,13 +378,20 @@ async def list_ai_gateway_keys(
     operation_id="revoke_ai_gateway_keys",
 )
 async def revoke_ai_gateway_keys(request: Request, service: str) -> AiKeyRevokeResponse:
-    """Revoke a service's virtual keys (admin); the app gets a new one when it restarts."""
-    require_role(request, TokenRole.admin)
+    """Revoke a service's virtual keys (its owner or admin).
+
+    The app gets a new one when it restarts.
+    """
+    require_role(request, TokenRole.submitter, TokenRole.admin)
     queries = request.app.state.queries
     # The path value reaches the audit row and the response only once it names a
     # real service: a pasted key or a typo must not be stored or echoed.
-    if await queries.get_service_by_name(service) is None:
+    job = await queries.get_service_by_name(service)
+    if job is None:
         raise NerditError(404, "not_found", "No such service.", hint="nerdit ai keys list")
+    # A submitter revokes its own apps' keys only (a revoked app answers 401 until
+    # it restarts); NULL-owner rows stay admin-only, like every service verb.
+    require_owner_or_admin(request, job)
     request.state.audit_params = audit_params({"service": service})
     revoked = await queries.revoke_ai_gateway_keys(service)
     return AiKeyRevokeResponse(service=service, revoked=revoked)

{nerdit-0.8.2 → nerdit-0.8.4}/src/nerdit/daemon/routes/secrets.py

@@ -2,11 +2,11 @@
 
 Reads list names only; values are injected at container launch, never returned.
 Writes require scope/role authorization, idempotency and redacted auditing.
-Shared scope maps to _shared storage: only admins write it, any authenticated
-principal may read names. A rowless name is authorized through its claim
-(`daemon/secret_scope.py`): the first write reserves it for the caller until a
-deploy consumes it. Key rotation is admin-only and audits counts only.
-Mounted under /api only.
+Shared scope maps to _shared storage: a submitter or admin sets values (0.8.4),
+only admins delete them, any authenticated principal may read names. A rowless
+name is authorized through its claim (`daemon/secret_scope.py`): the first
+write reserves it for the caller until a deploy consumes it. Key rotation is
+admin-only and audits counts only. Mounted under /api only.
 """
 
 from __future__ import annotations

{nerdit-0.8.2 → nerdit-0.8.4}/src/nerdit/daemon/secret_scope.py

@@ -221,8 +221,12 @@ async def authorize_secret_scope(
     for the caller — unless an orphan secrets file is present, which a non-admin
     may not adopt (409 `secret.orphaned_scope`) — and a read or delete is a
     404 for non-admins. `write` is the mutation gate on `shared`, which skips
-    row lookup: admins write, any authenticated caller reads names; refuse all
-    shared operations if a legacy service owns that name.
+    row lookup: a set (`mint`) takes submitter or admin (0.8.4, D-P31-5: a
+    shared value is what every deploy already receives, and a hosted box's
+    console writes its AI gateway keys here through the submitter-capped
+    tunnel), a delete removes what other apps use and stays admin, any
+    authenticated caller reads names; refuse all shared operations if a legacy
+    service owns that name.
     """
     guard_name(service)
     if service == _SHARED_PUBLIC:
@@ -234,8 +238,8 @@ async def authorize_secret_scope(
                 "shared-scope secrets are disabled.",
                 hint="Rename or delete that service, then restart the daemon.",
             )
-        if write:
-            require_role(request, TokenRole.admin)
+        if write:  # a set (`mint`) is submitter-or-admin; a delete stays admin
+            require_role(request, *((TokenRole.submitter,) if mint else ()), TokenRole.admin)
         return
     # `/secrets/{service}` passes no `project` (label-only); the variables
     # routes pass the project they already judged (D-P40-7).