Felix FaerberandClaude Opus 5
e47e62780a
Docker / build (push) Failing after 4s
Second build failed the same way: docker login to this instance's registry returns "unauthorized" for the automatic Actions token, and declaring permissions: packages: write did not change it -- Gitea's task token is accepted by the API but not by the package registry. So the push uses REGISTRY_TOKEN, an org secret holding a personal access token scoped to write:package and nothing else. The step fails with that sentence in the log rather than another bare "unauthorized", because the difference between a missing secret and a rejected credential is not visible from the error docker prints. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CYFnHida4AdiNDek2pzgXx
Hosted T4T Gateway
Multi-tenant frontend for the Token4Token inference network. Users sign up with Google / email, get 50 free virtual xBZZ, and call OpenAI-compatible endpoints without touching a wallet, Bee node, or Gnosis RPC.
Custody model: one operator wallet handles all on-chain transactions and Swarm operations. Tenants are off-chain ledger entries denominated in xBZZ. Providers see one on-chain client address (the operator's), not per-tenant addresses.
See docs in t4t/ for the wider design context.
Stack
- Bun + Elysia (HTTP)
- viem (Gnosis Chain bindings) — shared with
t4t-container - bee-js (Swarm) — shared with
t4t-container - Prisma + Postgres (multi-tenant ledger)
- BullMQ + Redis (queues + distributed locks + operator-wallet nonce)
The gateway engine code (provider selection, chain I/O, PSS routing, ECIES envelope) is vendored from t4t/container/src/ into src/t4t/. See src/t4t/VENDORED.md for the drift policy.
Quick start
cp .env.example .env
# fill in OPERATOR_PRIVATE_KEY, REGISTRY/ESCROW/XBZZ addresses, JWT_SECRET_KEY
docker compose up -d postgres redis bee
bun install
bunx prisma migrate deploy
bun run dev:api
# in another shell:
bun run dev:worker
Layout
src/
api.ts # Elysia HTTP entry
worker.ts # BullMQ workers + claim watcher
db.ts # model.<entity> CUD wrappers (write + enqueue)
env.ts # zod-validated process.env
auth/ # JWT, Google OAuth, email signup
users/, accounts/, apiKeys/, pricing/, gateway/, chain/
queue/ # connection, registry, lock, processor base, service
t4t/ # VENDORED from t4t-container
prisma/schema.prisma
test/ # E2E specs