mirror of
https://github.com/tiennm99/llmapikey.git
synced 2026-07-14 03:04:19 +00:00
tiennm99
02fa52ccf9
- Next.js 15 App Router (JS+JSDoc): landing, auth-gated dashboard, docs - GitHub OAuth via Supabase; identity anchored on numeric provider_id - key provisioning: reserve-then-mint-persist-compensate, one key per account - api_keys in unexposed llmapikey schema via direct Postgres; RLS deny-all - live minting gated behind PROVISIONING_ENABLED; Vercel auto-deploy disabled - unit tests (mask, request-body), RLS deny-all test, reconcile script
51 lines
2.2 KiB
JavaScript
51 lines
2.2 KiB
JavaScript
/**
|
|
* Reconcile OpenRouter provisioned keys against the DB registry.
|
|
*
|
|
* Reports:
|
|
* - Orphaned OpenRouter keys: minted by this app (name `llmapikey:*`) but with
|
|
* no matching DB row → a billable cost leak to revoke.
|
|
* - Dangling DB rows: an active row whose key was deleted out-of-band.
|
|
* - Stale pending rows: a reservation from an interrupted mint (>10 min old)
|
|
* that still has no key — would block that user until reclaimed.
|
|
*
|
|
* Run (loads server-only secrets from .env.local):
|
|
* node --env-file=.env.local scripts/reconcile-keys.js
|
|
*/
|
|
import { getSql } from "../lib/db/postgres-client.js";
|
|
import { listKeys } from "../lib/openrouter/provisioning-client.js";
|
|
|
|
async function main() {
|
|
const sql = getSql();
|
|
const [orKeys, dbRows] = await Promise.all([
|
|
listKeys(),
|
|
sql`select github_user_id, openrouter_key_hash, status, created_at from llmapikey.api_keys`,
|
|
]);
|
|
|
|
const dbHashes = new Set(dbRows.map((r) => r.openrouter_key_hash).filter(Boolean));
|
|
const orHashes = new Set(orKeys.map((k) => k.hash));
|
|
|
|
const appKeys = orKeys.filter((k) => typeof k.name === "string" && k.name.startsWith("llmapikey:"));
|
|
const orphans = appKeys.filter((k) => !dbHashes.has(k.hash));
|
|
const dangling = dbRows.filter((r) => r.openrouter_key_hash && !orHashes.has(r.openrouter_key_hash));
|
|
|
|
const tenMinAgo = Date.now() - 10 * 60 * 1000;
|
|
const stalePending = dbRows.filter(
|
|
(r) => r.status === "pending" && new Date(r.created_at).getTime() < tenMinAgo,
|
|
);
|
|
|
|
console.log(`OpenRouter app keys: ${appKeys.length} | DB rows: ${dbRows.length}`);
|
|
console.log(`Orphaned OpenRouter keys (no DB row → cost leak): ${orphans.length}`);
|
|
for (const k of orphans) console.log(` orphan hash=${k.hash} name=${k.name}`);
|
|
console.log(`Dangling DB rows (key deleted out-of-band): ${dangling.length}`);
|
|
for (const r of dangling) console.log(` dangling github_user_id=${r.github_user_id} hash=${r.openrouter_key_hash}`);
|
|
console.log(`Stale pending rows (interrupted mint, blocks user): ${stalePending.length}`);
|
|
for (const r of stalePending) console.log(` stale-pending github_user_id=${r.github_user_id} created_at=${r.created_at}`);
|
|
|
|
await sql.end();
|
|
}
|
|
|
|
main().catch((err) => {
|
|
console.error(err);
|
|
process.exit(1);
|
|
});
|