Freeway: self-hosted OpenAI-compatible gateway for free-tier providers

One endpoint in front of every free LLM tier, with automatic failover and no
provider key ever leaving the box.

Providers are data, not code: adding one is a JSON file plus an env var, never
a TypeScript change. Ships 12 providers pre-written; `verify-provider --apply`
derives the live model list from your own key.

- core: registry, bucketed quota meter (rolling + UTC-calendar windows),
  key-pool store, 6-step model router with diagnostic rejection reasons
- gateway: node:http, failover that commits to a stream only after 200 headers,
  SSE passthrough with usage sniffing, virtual keys with admin/inference roles
- context engine: sqlite sessions and a 5-rung refit ladder, so a 128k thread
  keeps working when it fails over to an 8k model
- cache: exact (sha256, safe-by-default) + opt-in semantic (flat Float32Array)
- guard: inbound limits, quota forecasting, limit calibration from upstream
  headers, key health, secret/PII/injection scanning
- dashboard: one self-contained HTML file, live SSE request log, token usage
- sdk: zero-dep typed client, drop-in for the OpenAI SDK

Zero runtime dependencies. 326 tests, 27-check smoke suite against a scripted
mock upstream so routing is testable without spending quota.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

providers/huggingface.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "./_schema.json",
+  "id": "huggingface",
+  "label": "Hugging Face Router",
+  "docs": "https://huggingface.co/docs/inference-providers",
+  "console": "https://huggingface.co/settings/tokens",
+  "priority": 50,
+  "baseUrl": "https://router.huggingface.co/v1",
+  "auth": { "type": "bearer", "envKeys": ["HF_TOKEN", "HUGGINGFACE_API_KEY"] },
+  "limits": { "rpm": null },
+  "limitsSource": "unverified",
+  "verifiedOn": "2026-08-16",
+  "modelsEndpoint": "/models",
+  "modelsPath": "data[].id",
+  "notes": "Routes to whichever inference provider currently serves a model, so availability moves around. Free monthly credits are small; treat this as overflow rather than a primary. Model ids are vendor/model, handled by the first-slash pin rule.",
+  "models": []
+}