Feat/billing cost analytics

[JonasJesus42]

Summary by cubic

Restricts free prepaid credit to eligible domains and defaults new prepaid keys to $0 unless the domain (and for localhost, email) qualifies. Hardens checks (incl. “[::1]”), redacts PII, fixes missing-limit recovery to respect eligibility, makes the migration idempotent, and removes a redundant key limit API call.

• New Features

  • Added llm_gateway_config columns: credit_eligible_domains, credit_eligible_email_domains, allow_localhost_credit.
  • isEligibleForCredit now drives both provisioning and recovery:
    • Localhost/127.0.0.1/[::1]: eligible only if allow_localhost_credit is true AND user email domain matches credit_eligible_email_domains (case-insensitive).
    • Non-localhost: eligible only if mesh hostname matches credit_eligible_domains (case-insensitive); no email check.
  • Eligibility is computed once and passed as initialLimit to key creation (removed the follow-up updateKeyLimit call) to avoid TOCTOU divergence.
  • Prepaid initial limit: eligible → default_prepaid_limit_usd; ineligible → $0. Postpaid unchanged.
  • tools: credits fallback returns $0 when a key isn’t provisioned; defaults cache the new settings; tools pass user email for localhost checks; logs only include hasEmail.

• Migration

  • Add columns with ADD COLUMN IF NOT EXISTS for each eligibility setting (idempotent per column).
  • Configure llm_gateway_config: set credit_eligible_domains and credit_eligible_email_domains; toggle allow_localhost_credit as needed.

^{Written for commit a66e329. Summary will update on new commits.}

[github-actions]

🚀 Preview Deployments Ready!

Your changes have been deployed to preview environments:

📦 deco-ai-gateway

🔗 View Preview

These previews will be automatically updated with new commits to this PR.

---

_{Deployed from commit: b22b6aa}

[cubic-dev-ai]

1 issue found across 3 files (changes from recent commits).

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="deco-ai-gateway/server/lib/constants.ts">

<violation number="1" location="deco-ai-gateway/server/lib/constants.ts:38">
P1: IPv6 localhost detection is incorrect: URL.hostname for loopback is `[::1]`, so this check misses localhost requests and applies the wrong credit eligibility path.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}

[cubic-dev-ai]

2 issues found across 6 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="deco-ai-gateway/server/db/schema.sql">

<violation number="1" location="deco-ai-gateway/server/db/schema.sql:390">
P2: The migration condition checks only one column before adding three, so partially migrated databases can miss required columns. Make each added column idempotent independently (or use `ADD COLUMN IF NOT EXISTS`).</violation>
</file>

<file name="deco-ai-gateway/server/lib/provisioning.ts">

<violation number="1" location="deco-ai-gateway/server/lib/provisioning.ts:242">
P2: The `isEligibleForCredit` check and limit computation duplicate the exact logic performed in `createOpenRouterKey`. Consider computing the limit once and passing it as an argument, or returning it from `createOpenRouterKey` to avoid duplicate logic.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}