sync: 172 file da Baida98/AI@f715ae37 (bypass deploy-all)

api/policy.py

@@ -35,6 +35,10 @@ from .state import sb
 
 _logger = logging.getLogger("api.policy")
 
+# Safety cap per provider sconosciuto: evita che una riga budget assente
+# venga interpretata come accesso illimitato o blocco permanente.
+_DEFAULT_PROVIDER_LIMIT_USD = 1.0
+
 # ── Router ─────────────────────────────────────────────────────────────────────
 router = APIRouter(
     prefix="/api/policy",
@@ -225,7 +229,11 @@ async def _sync_budget_from_supabase() -> None:
                 p = row.get("provider", "")
                 if p in _BUDGET:
                     _BUDGET[p]["used"]     = float(row.get("used",  0))
-                    _BUDGET[p]["limit"]    = float(row.get("limit", 0))
+                    # Supabase può contenere vecchie righe con limit=0: non
+                    # deve disattivare accidentalmente i limiti paid hardcoded.
+                    stored_limit = float(row.get("limit", 0))
+                    if stored_limit > 0 or _BUDGET[p]["limit"] <= 0:
+                        _BUDGET[p]["limit"] = stored_limit
                     _BUDGET[p]["currency"] = str(row.get("currency", "USD"))
     except Exception as exc:
         _logger.debug("[policy] Sync budget Supabase fallito (non bloccante): %s", exc)
@@ -275,7 +283,7 @@ async def record_budget_usage(req: BudgetRecordRequest) -> Dict[str, Any]:
     """
     provider = req.provider.lower()
     if provider not in _BUDGET:
-        _BUDGET[provider] = {"limit": 0.0, "used": 0.0, "currency": "USD"}
+        _BUDGET[provider] = {"limit": _DEFAULT_PROVIDER_LIMIT_USD, "used": 0.0, "currency": "USD"}
 
     _BUDGET[provider]["used"] = round(_BUDGET[provider]["used"] + req.cost_usd, 6)
     new_used = _BUDGET[provider]["used"]