Commit Graph

3382 Commits

Author SHA1 Message Date
diegosouzapw
043f3c412b feat(api): add /api/quota/plans CRUD routes (B/F8) 2026-05-28 07:49:38 -03:00
diegosouzapw
9dfea1e7ad feat(api): add /api/quota/pools CRUD + usage routes (B/F8) 2026-05-28 07:49:30 -03:00
diegosouzapw
f211fcf509 merge: F7 enforce wiring (chatCore PRE/POST + combo soft penalty + spendRecorder) 2026-05-27 22:23:33 -03:00
diegosouzapw
c04aec0550 merge: F5 ComplianceTab actor filter + CompressionLogTab namespace fix 2026-05-27 22:23:31 -03:00
diegosouzapw
14436c6051 merge: F4 Activity page + audit-log level=high filter + delete AuditLogTab 2026-05-27 22:23:30 -03:00
diegosouzapw
d78e33858d test(quota): cover enforce 7 scenarios + spendRecorder fail-open (B/F7)
quota-enforce.test.ts — 8 assertions:
  - Scenarios 1/7: fail-open when DB unavailable (no pool, store errors).
  - Scenarios 2-6: generous/strict/soft/burst/cap-absolute via fairShare integration.
  - Extra: Promise.all with multiple inputs always resolves to valid kind shape.
quota-spend-recorder.test.ts — 5 assertions:
  - Fire-and-forget timing, silent no-op for unknown keys, rejection catch,
    no-logger path, usd cost type accepted.
2026-05-27 22:17:44 -03:00
diegosouzapw
891cd0b256 feat(open-sse): apply QUOTA_SOFT_DEPRIORITIZE_FACTOR in combo scoring (B/F7)
Adds exported constant QUOTA_SOFT_DEPRIORITIZE_FACTOR (default 0.7, env override).
Extends AutoProviderCandidate with optional quotaSoftPenalty?: boolean field.
scoreAutoTargets() multiplies score by the factor when quotaSoftPenalty === true,
deprioritizing over-fair-share keys under soft policy without fully blocking them.
2026-05-27 22:17:36 -03:00
diegosouzapw
6d81a048b6 feat(open-sse): wire quotaShare PRE/POST hooks in chatCore handler (B/F7)
PRE-hook (before executor dispatch):
  - Calls enforceQuotaShare via dynamic import (lazy load, fail-open).
  - Returns 429 JSON via buildErrorBody() when decision.kind === 'block' (B25).
  - Sets quotaSoftDeprioritize=true when decision.deprioritize=true (B17).
POST-hook (after successful response):
  - Calls scheduleRecordConsumption for both streaming and non-streaming paths.
  - Fire-and-forget via setImmediate; never blocks the client response (B29).
Both hooks use try/catch outer guards so any unexpected error fails open (B16).
2026-05-27 22:17:28 -03:00
diegosouzapw
0181348cee feat(quota): add spendRecorder fire-and-forget wrapper (B/F7)
scheduleRecordConsumption() wraps recordConsumption() in setImmediate so it
never adds latency to the client response path. Errors are caught and logged
via pino warn but NEVER propagated to the caller (B29 fail-open contract).
2026-05-27 22:17:16 -03:00
diegosouzapw
d80e1b63eb feat(quota): add enforce.ts (enforceQuotaShare + recordConsumption) (B/F7)
Implements the quota share enforcement gate and consumption recorder:
- enforceQuotaShare(): PRE-request check that returns allow/block/deprioritize
  based on fair-share algorithm, saturation signals, and pool allocations.
- recordConsumption(): POST-response tracker that increments per-key counters
  for each active plan dimension.
Both functions fail-open per B16/B29: any infra error → allow + warn log.
2026-05-27 22:17:10 -03:00
diegosouzapw
9607225a16 test(ui): cover ComplianceTab actor filter + CompressionLogTab namespace (B/F5)
- compliance-tab-actor-filter.test.tsx: 4 tests verifying actor input
  presence, initial fetch has no actor param, re-fetch with actor=X
  after typing, and clearFilters does not throw.
- compression-log-namespace.test.tsx: 4 tests verifying that the logs
  namespace is used (not settings), no _MISSING_ sentinels, and all 4
  required keys are covered.
2026-05-27 22:07:30 -03:00
diegosouzapw
1b0f22fbf8 chore(i18n): pt-BR + en compliance.actor + copy compression keys to logs ns (B/F5)
- compliance.actor / compliance.actorPlaceholder added to pt-BR + en
- logs.compressionLogTitle, logs.compressionLogEmpty, logs.tokens copied
  from settings to logs namespace in both locales (original keys kept in
  settings to avoid breaking other components)
2026-05-27 22:06:52 -03:00
diegosouzapw
bec422726b fix(logs): correct CompressionLogTab i18n namespace settings->logs (B/F5)
The component was calling useTranslations("settings") which would cause
key misses once the settings namespace is reorganized. Keys used
(loading, compressionLogTitle, compressionLogEmpty, tokens) are now
sourced from the canonical "logs" namespace.
2026-05-27 22:06:45 -03:00
diegosouzapw
a4200186e2 feat(audit): add actor filter to ComplianceTab (B/F5)
Adds state, fetch param, reset and input+datalist for filtering audit
entries by actor. The actor field is inserted between eventType and
severity in the filter grid. Filter value is sent as ?actor= to the
compliance audit-log API on every change.
2026-05-27 22:06:39 -03:00
diegosouzapw
c45781f0d6 test(audit): cover timeline helpers + audit-log level filter + activity page redirect (B/F4) 2026-05-27 22:01:23 -03:00
diegosouzapw
2cf40cafcc chore(i18n): pt-BR + en activity namespace (eventVerb + filters + relative) (B/F4) 2026-05-27 22:01:16 -03:00
diegosouzapw
ec3aa40aae chore(logs): delete deprecated AuditLogTab.tsx duplicate (B/F4) 2026-05-27 22:01:10 -03:00
diegosouzapw
e75bad3cbf refactor(logs): redirect /dashboard/logs/activity to /dashboard/activity (B/F4) 2026-05-27 22:01:06 -03:00
diegosouzapw
319f52b988 feat(activity): add /dashboard/activity timeline page + ActivityFeed (B/F4) 2026-05-27 22:01:01 -03:00
diegosouzapw
6a19882646 feat(compliance): support level=high filter in audit-log API (B/F4) 2026-05-27 22:00:56 -03:00
diegosouzapw
fb54bcd994 feat(audit): add timeline helpers (groupByDay + relativeTime) (B/F4) 2026-05-27 22:00:51 -03:00
diegosouzapw
b9e5d940a4 merge: F6 QuotaStore core (sqlite + redis drivers + fairShare + planResolver + burnRate + saturation) 2026-05-27 21:14:01 -03:00
diegosouzapw
22123013be test(quota): cover fairShare 10 scenarios + burnRate + planResolver + saturationSignals + storeFactory (B/F6) 2026-05-27 20:39:09 -03:00
diegosouzapw
d5d9b5c839 test(quota): cover redisQuotaStore mock (gated by RUN_QUOTA_REDIS_INT) (B/F6) 2026-05-27 20:38:57 -03:00
diegosouzapw
c647f854e8 test(quota): cover sqlite store concurrency + sliding window rotation (B/F6) 2026-05-27 20:38:49 -03:00
diegosouzapw
4d825ad482 feat(quota): add saturationSignals reader with 30s cache and fail-open (B/F6) 2026-05-27 20:38:41 -03:00
diegosouzapw
23f5b6f8b8 feat(quota): add planResolver (DB override > known catalog > empty) (B/F6) 2026-05-27 20:38:33 -03:00
diegosouzapw
c3c0817c3b feat(quota): add burnRate EMA estimator and time-to-exhaustion (B/F6) 2026-05-27 20:38:25 -03:00
diegosouzapw
9905d92244 feat(quota): add fairShare work-conserving algorithm (multi-dimension, generous/strict modes, cap-absolute) (B/F6) 2026-05-27 20:38:18 -03:00
diegosouzapw
67548034be feat(quota): add storeFactory with setting/env-driven driver selection (B/F6) 2026-05-27 20:38:11 -03:00
diegosouzapw
4bb44b10d3 feat(quota): add redisQuotaStore (optional driver, gated by ioredis availability) (B/F6) 2026-05-27 20:38:02 -03:00
diegosouzapw
ca85652bab feat(quota): add sqliteQuotaStore with sliding window counter and per-key mutex (B/F6) 2026-05-27 20:37:51 -03:00
diegosouzapw
8a10b3ecd8 feat(quota): add QuotaStore facade and types re-export (B/F6) 2026-05-27 20:37:44 -03:00
diegosouzapw
c06d1e16b5 merge: F3 sidebar Monitoring 3-groups + Costs section + i18n PT-BR/EN 2026-05-27 20:28:07 -03:00
diegosouzapw
88899971d1 test(sidebar): cover Monitoring reorg, Costs section, back-compat (B/F3)
Three new test files:
- sidebar-monitoring-reorg.test.ts: asserts monitoring has 4 children (activity item + logs/audit/system groups), no costs-parameters group, no logs-activity in items
- sidebar-costs-section.test.ts: asserts costs section exists with 4 items in correct order, costs removed from analytics, costs positioned between analytics and monitoring
- sidebar-back-compat.test.ts: asserts activity added + logs-activity preserved in HIDEABLE_SIDEBAR_ITEM_IDS, admin preset shows activity and hides logs-activity (B30)
2026-05-27 19:51:49 -03:00
diegosouzapw
c0db545811 chore(i18n): pt-BR + en keys for activity, costsSection, logsGroup, systemGroup, costsOverview (B/F3)
Add new sidebar i18n keys without removing existing ones (back-compat B11/B12):
- sidebar.activity / sidebar.activitySubtitle
- sidebar.logsGroup
- sidebar.systemGroup
- sidebar.costsOverview / sidebar.costsOverviewSubtitle
Existing sidebar.costs, sidebar.costsSection, sidebar.costsSubtitle preserved.
2026-05-27 19:51:40 -03:00
diegosouzapw
e98ba91928 refactor(sidebar): split Monitoring into Logs/Audit/System groups + Activity at top (B/F3)
- MONITORING_ITEMS reduced to single `activity` item at `/dashboard/activity`
- New LOGS_GROUP (logs/logs-proxy/logs-console) extracted from flat monitoring items
- New SYSTEM_GROUP (health/runtime) extracted from flat monitoring items
- AUDIT_GROUP preserved unchanged
- Monitoring section children: [...MONITORING_ITEMS, LOGS_GROUP, AUDIT_GROUP, SYSTEM_GROUP]
- COSTS_PARAMS_GROUP removed from monitoring section (items migrate to COSTS_ITEMS)
- `activity` added to HIDEABLE_SIDEBAR_ITEM_IDS; `logs-activity` preserved for back-compat (B11)
- Updated existing sidebar-visibility.test.ts to match new monitoring item structure
2026-05-27 19:51:30 -03:00
diegosouzapw
3c50ebce8f merge: F2 DB migrations + modules (pools, consumption, plans) 2026-05-27 19:25:12 -03:00
diegosouzapw
282bffcea7 merge: F1 shared foundation (types, schemas, audit allowlist, plan registry) 2026-05-27 19:25:12 -03:00
diegosouzapw
75b02f6419 test(db): cover pools, consumption, plans, and migrations idempotency (B/F2)
Adds 44 tests across 4 files:
- db-quota-pools.test.ts (16 tests): CRUD lifecycle, upsertAllocations
  replace strategy, FK CASCADE, listAllocationsForApiKey cross-pool.
- db-quota-consumption.test.ts (12 tests): getBucket, incrementBucket
  atomic (100 concurrent), getPair, gcOlderThan boundary semantics.
- db-provider-plans.test.ts (10 tests): upsertPlan idempotence,
  getPlan JSON parsing, listPlans, deletePlan.
- db-quota-migrations-idempotency.test.ts (6 tests): schema assertions
  and double-run idempotency for migrations 073-075.
2026-05-27 19:14:51 -03:00
diegosouzapw
adb7f2dbe4 chore(env): document quota store env vars in .env.example (B/F2)
Adds QUOTA_STORE_DRIVER, QUOTA_STORE_REDIS_URL,
QUOTA_SATURATION_THRESHOLD, QUOTA_SOFT_DEPRIORITIZE_FACTOR, and
QUOTA_CONSUMPTION_RETENTION_DAYS as per §3.8 of master-plan-group-B.
2026-05-27 19:14:43 -03:00
diegosouzapw
44e49f635b chore(db): re-export quota modules in localDb (B/F2)
Adds re-export blocks for quotaPools (7 functions), quotaConsumption
(4 functions with gcQuotaConsumption alias), and providerPlans (4
functions with getProviderPlan/listProviderPlans/etc. aliases).
Zero logic added to localDb.ts — Hard Rule #2 maintained.
2026-05-27 19:14:38 -03:00
diegosouzapw
1721cf7b32 feat(db): add providerPlans module with CRUD for per-connection quota plans (B/F2)
Implements getPlan, listPlans, upsertPlan (idempotent ON CONFLICT DO
UPDATE), and deletePlan. Serializes QuotaDimension[] as JSON into
dimensions_json column and parses back on read. Malformed JSON returns
empty dimensions rather than throwing.
2026-05-27 19:14:32 -03:00
diegosouzapw
83790b6c6a feat(db): add quotaConsumption sliding-window counter storage (B/F2)
Implements getBucket, incrementBucket (atomic UPSERT), getPair (curr+prev
for sliding window formula), and gcOlderThan (stale bucket cleanup).
Atomic increment uses INSERT ... ON CONFLICT DO UPDATE — no separate
read-modify-write cycle needed.
2026-05-27 19:14:27 -03:00
diegosouzapw
07d6a17643 feat(db): add quotaPools module with CRUD and allocation management (B/F2)
Implements listPools, getPool, createPool, updatePool, deletePool,
upsertAllocations (replace strategy via transaction), and
listAllocationsForApiKey. All SQL uses prepared statements. Local type
shapes aligned with src/lib/quota/dimensions.ts contract (B13).
2026-05-27 19:14:21 -03:00
diegosouzapw
4f149fb5a3 feat(db): add quota_pools and quota_consumption migrations (B/F2)
Creates migrations 073 (quota_pools + quota_allocations) and 074
(quota_consumption sliding-window counter). Both are idempotent via
CREATE TABLE IF NOT EXISTS and CREATE INDEX IF NOT EXISTS. FK ON DELETE
CASCADE from quota_allocations to quota_pools. Fixes B2 IDs.
2026-05-27 19:14:15 -03:00
diegosouzapw
1b0282ed32 test(audit): cover high-level actions and activity icons 2026-05-27 19:05:10 -03:00
diegosouzapw
258c676df4 test(quota): cover dimensions, schemas, plan registry 2026-05-27 19:05:06 -03:00
diegosouzapw
7a5166621d feat(quota): add provider plan registry with known plans 2026-05-27 19:05:02 -03:00
diegosouzapw
93091fbb0a feat(audit): add high-level actions allowlist and activity icons map 2026-05-27 19:04:59 -03:00