mirror of
https://github.com/OpenSquawk/OpenSquawk
synced 2026-08-01 06:06:05 +08:00
f8fdd8bc79
Usage tracking: - new UsageEvent collection records every STT/TTS/LLM call per user with provider, model, volume (audio seconds, characters, tokens) and an estimated USD cost; self-hosted providers (Speaches/Piper) and cache hits record at $0 - pricing table for whisper-1, tts-1, gpt-5-nano & co. in server/utils/usage.ts - weekly KPI mail gains an "AI-Nutzung & Kosten" section: weekly and rolling 30-day cost, per-kind breakdown, top 5 users by cost - quota alert mail when rolling 30-day cost exceeds USAGE_ALERT_USD (default $5), at most once per calendar month (UsageAlertDelivery) Hardening: - /api/atc/say now requires an authenticated session (middleware exemption removed); useFlightLabAudio sends the bearer token - /api/service/tools/latency requires auth (was a public LLM endpoint) - per-user rate limits: PTT 20/min, say 60/min, latency 5/min - cron endpoints (waitlist-drip, weekly-kpi-report) require a shared secret via ?secret= or x-cron-secret (CRON_SECRET, falls back to KPI_CRON_SECRET); allowed with a warning while unset so existing deployments keep working - PTT records the actual transcribed audio duration for billing accuracy Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
24 lines
585 B
TypeScript
24 lines
585 B
TypeScript
import {defineEventHandler, getRequestURL} from 'h3'
|
|
import {requireUserSession} from '../utils/auth'
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const url = getRequestURL(event)
|
|
if (!url.pathname.startsWith('/api/')) {
|
|
return
|
|
}
|
|
if (url.pathname.startsWith('/api/service/')) {
|
|
return
|
|
}
|
|
if (url.pathname.startsWith('/api/bridge/')) {
|
|
return
|
|
}
|
|
if (url.pathname.startsWith('/api/copilot/')) {
|
|
return
|
|
}
|
|
if (event.node.req.method === 'OPTIONS') {
|
|
return
|
|
}
|
|
await requireUserSession(event)
|
|
})
|
|
|