@agent-native/core 0.7.83 → 0.8.0

package/dist/server/csrf.d.ts

@@ -1,8 +1,9 @@
 /**
  * Defense-in-depth CSRF check for framework state-changing routes.
  *
- * Threat model: action endpoints (`/_agent-native/actions/*`), tool endpoints
- * (`/_agent-native/tools/*`), and a handful of other state-changing
+ * Threat model: action endpoints (`/_agent-native/actions/*`), extension
+ * endpoints (`/_agent-native/extensions/*` and the legacy
+ * `/_agent-native/tools/*` alias), and a handful of other state-changing
  * `/_agent-native/*` routes use the better-auth session cookie, which is
  * configured with `SameSite=None; Secure; Partitioned` so the iframe editor
  * (and other cross-site embeds) can authenticate. `SameSite=None` means the

package/dist/server/csrf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAsGH;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,eAAe,GAAE,MAAyB;;GAqB3C"}
+{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAsGH;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,eAAe,GAAE,MAAyB;;GAqB3C"}

package/dist/server/csrf.js

@@ -1,8 +1,9 @@
 /**
  * Defense-in-depth CSRF check for framework state-changing routes.
  *
- * Threat model: action endpoints (`/_agent-native/actions/*`), tool endpoints
- * (`/_agent-native/tools/*`), and a handful of other state-changing
+ * Threat model: action endpoints (`/_agent-native/actions/*`), extension
+ * endpoints (`/_agent-native/extensions/*` and the legacy
+ * `/_agent-native/tools/*` alias), and a handful of other state-changing
  * `/_agent-native/*` routes use the better-auth session cookie, which is
  * configured with `SameSite=None; Secure; Partitioned` so the iframe editor
  * (and other cross-site embeds) can authenticate. `SameSite=None` means the

package/dist/server/csrf.js.map

@@ -1 +1 @@
-{"version":3,"file":"csrf.js","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,IAAI,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG;IAC9B,4EAA4E;IAC5E,gBAAgB;IAChB,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM;IACN,sEAAsE;IACtE,0EAA0E;IAC1E,4DAA4D;IAC5D,QAAQ;IACR,8DAA8D;IAC9D,kBAAkB;IAClB,uEAAuE;IACvE,2EAA2E;IAC3E,SAAS;IACT,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,+BAA+B;IAC/B,SAAS;IACT,0EAA0E;IAC1E,uEAAuE;IACvE,mBAAmB;CACpB,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE3E;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,KAAU;IACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5D,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAU;IACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,eAAuB;IAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,kBAA0B,gBAAgB;IAE1C,OAAO,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5D,IAAI,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC;YAAE,OAAO,SAAS,CAAC;QAE/D,qEAAqE;QACrE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEhD,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,6IAA6I;SAChJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Defense-in-depth CSRF check for framework state-changing routes.\n *\n * Threat model: action endpoints (`/_agent-native/actions/*`), tool endpoints\n * (`/_agent-native/tools/*`), and a handful of other state-changing\n * `/_agent-native/*` routes use the better-auth session cookie, which is\n * configured with `SameSite=None; Secure; Partitioned` so the iframe editor\n * (and other cross-site embeds) can authenticate. `SameSite=None` means the\n * browser ships the session cookie on top-level form POSTs from any origin —\n * which is exactly the precondition for classic cross-site request forgery.\n *\n * The browser still gates \"non-simple\" requests behind a CORS preflight, so\n * an attacker who has to send `Content-Type: application/json` is forced\n * through OPTIONS, which our CORS middleware (`create-server.ts`) rejects\n * for disallowed origins. But the simple-request bypass (`Content-Type:\n * text/plain` on a `<form enctype=\"text/plain\">` POST, or `multipart/form-data`)\n * never preflights — the browser delivers it cross-origin with cookies.\n *\n * Mitigation: this middleware rejects any state-changing\n * (`POST/PUT/PATCH/DELETE`) request to `/_agent-native/*` that\n *\n *   1. carries the auth-cookie pattern (any cookie at all is a heuristic\n *      good-enough proxy — we don't want to deny anonymous fetches), AND\n *   2. is NOT clearly same-origin / first-party. We trust:\n *      - `Sec-Fetch-Site: same-origin` (sent by every modern browser on\n *        same-origin fetch — Chrome/Firefox/Safari/Edge all support it).\n *      - `X-Agent-Native-CSRF` custom header. Custom headers force a\n *        preflight, so an attacker can't add one cross-origin.\n *      - `Content-Type: application/json` request body. Same logic — JSON\n *        Content-Type is a non-simple request that triggers preflight.\n *\n * Why the existing CORS check isn't enough: a simple-request POST never\n * preflights, so the browser sends it through and only blocks the *response*\n * from being readable cross-origin. The state change (delete-account, write\n * SQL, etc.) happens server-side regardless. We need a server-side check that\n * proves first-party intent before running the action.\n *\n * Opt-out marker: a handful of routes legitimately accept cross-origin POSTs\n * — webhook endpoints (Slack, Telegram, email), the public A2A endpoint\n * (`/_agent-native/a2a`), the integrations process-task self-fire, and so on.\n * Those are listed in `CSRF_ALLOWLIST_PREFIXES` below; if you add a new\n * cross-origin-callable route, add it there.\n */\n\nimport {\n  defineEventHandler,\n  getMethod,\n  getRequestHeader,\n  setResponseStatus,\n} from \"h3\";\n\n/**\n * Path prefixes (relative to the framework prefix `/_agent-native`) that are\n * allowed to receive cross-origin state-changing POSTs without first-party\n * markers. These are signed/authenticated through other mechanisms (HMAC,\n * JWT, internal token) so they don't need cookie-based CSRF protection.\n */\nconst CSRF_ALLOWLIST_PREFIXES = [\n  // Integration webhooks — verified by HMAC against a per-integration secret.\n  \"/integrations/\",\n  // A2A JSON-RPC endpoints — verified by signed JWT (when A2A_SECRET set) or\n  // explicitly opt-in unauthenticated (handled at the A2A layer).\n  \"/a2a\",\n  // Better Auth's own login/sign-in/social-callback routes. Better Auth\n  // ships its own CSRF protection (Origin/Sec-Fetch checks on its handlers)\n  // and cookies are needed for the OAuth callback round-trip.\n  \"/auth/\",\n  // Stripe / Paddle / billing webhooks dropped in by templates.\n  \"/billing/webhook\",\n  // Public share endpoints — read-only and never cookie-driven, but kept\n  // here so a templated POST (e.g. comment-on-public-recording) doesn't 403.\n  \"/share/\",\n  // OAuth callbacks (Builder, Google, Slack, Notion, Zoom). These get a\n  // `code` query param via top-level navigation — they DO ride the session\n  // cookie and they SHOULD validate state, but the framework can't see the\n  // state token. Each callback handler is responsible for its own CSRF\n  // check (signed state tokens).\n  \"/oauth/\",\n  // Builder's CLI-auth callback — uses the BUILDER_STATE_PARAM signed token\n  // to authenticate the round-trip; framework CSRF check would block it.\n  \"/builder/callback\",\n];\n\nconst STATE_CHANGING_METHODS = new Set([\"POST\", \"PUT\", \"PATCH\", \"DELETE\"]);\n\n/**\n * Decide whether a request is \"first-party enough\" to trust as not-CSRF.\n * Any of the following make a request non-CSRF:\n *\n *   - `Sec-Fetch-Site: same-origin` (or `none` for top-level navigations\n *     to our own pages — but state-changing methods don't ship `none`).\n *   - `X-Agent-Native-CSRF` header (any value, even \"1\"). This is a custom\n *     header so the browser forces a preflight cross-origin, which our\n *     CORS layer rejects for disallowed origins.\n *   - `Content-Type: application/json` (case-insensitive). JSON content\n *     type is a non-simple request that triggers preflight.\n *\n * We accept ANY of these — the goal is \"did the request come through a\n * channel the browser would have preflighted\", not a strict-mode token.\n */\nfunction looksFirstParty(event: any): boolean {\n  const sfs = getRequestHeader(event, \"sec-fetch-site\");\n  if (sfs === \"same-origin\" || sfs === \"same-site\" || sfs === \"none\") {\n    return true;\n  }\n  if (getRequestHeader(event, \"x-agent-native-csrf\")) {\n    return true;\n  }\n  const contentType = getRequestHeader(event, \"content-type\");\n  if (\n    contentType &&\n    typeof contentType === \"string\" &&\n    contentType.toLowerCase().includes(\"application/json\")\n  ) {\n    return true;\n  }\n  return false;\n}\n\n/**\n * Returns true when the request carries any cookie. We use \"has any cookie\"\n * as a coarse heuristic for \"the browser is going to attach the session\n * cookie\" — anonymous tools (curl, server-to-server) typically don't send\n * cookies, so they bypass this check entirely.\n */\nfunction requestHasCookies(event: any): boolean {\n  const cookie = getRequestHeader(event, \"cookie\");\n  return typeof cookie === \"string\" && cookie.trim().length > 0;\n}\n\n/**\n * Path passed in is the full request URL pathname (e.g. `/_agent-native/actions/foo`).\n * `frameworkPrefix` should be the framework route prefix without trailing slash,\n * e.g. `/_agent-native`.\n */\nfunction isOnAllowlist(pathname: string, frameworkPrefix: string): boolean {\n  if (!pathname.startsWith(frameworkPrefix)) return false;\n  const sub = pathname.slice(frameworkPrefix.length);\n  for (const allowed of CSRF_ALLOWLIST_PREFIXES) {\n    if (sub.startsWith(allowed)) return true;\n  }\n  return false;\n}\n\n/**\n * Create the framework CSRF middleware.\n *\n * Mount this BEFORE any state-changing route handler. The middleware\n *   - lets every non-state-changing method through (GET/HEAD/OPTIONS).\n *   - lets requests without cookies through (anonymous/server tools).\n *   - lets allowlisted paths through (webhooks, A2A, OAuth callbacks).\n *   - lets first-party-shaped requests through (custom header, JSON\n *     Content-Type, or `Sec-Fetch-Site: same-origin`).\n *   - rejects everything else with 403.\n */\nexport function createCsrfMiddleware(\n  frameworkPrefix: string = \"/_agent-native\",\n) {\n  return defineEventHandler((event) => {\n    const method = getMethod(event);\n    if (!STATE_CHANGING_METHODS.has(method)) return undefined;\n\n    const pathname = event.url?.pathname ?? \"\";\n    if (!pathname.startsWith(frameworkPrefix)) return undefined;\n    if (isOnAllowlist(pathname, frameworkPrefix)) return undefined;\n\n    // No cookie = no risk of confused-deputy CSRF on the session cookie.\n    if (!requestHasCookies(event)) return undefined;\n\n    if (looksFirstParty(event)) return undefined;\n\n    setResponseStatus(event, 403);\n    return {\n      error:\n        \"CSRF check failed: state-changing requests must include a same-origin marker. Set Content-Type: application/json or X-Agent-Native-CSRF: 1.\",\n    };\n  });\n}\n"]}
+{"version":3,"file":"csrf.js","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,IAAI,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG;IAC9B,4EAA4E;IAC5E,gBAAgB;IAChB,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM;IACN,sEAAsE;IACtE,0EAA0E;IAC1E,4DAA4D;IAC5D,QAAQ;IACR,8DAA8D;IAC9D,kBAAkB;IAClB,uEAAuE;IACvE,2EAA2E;IAC3E,SAAS;IACT,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,+BAA+B;IAC/B,SAAS;IACT,0EAA0E;IAC1E,uEAAuE;IACvE,mBAAmB;CACpB,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE3E;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,KAAU;IACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5D,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAU;IACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,eAAuB;IAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,kBAA0B,gBAAgB;IAE1C,OAAO,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5D,IAAI,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC;YAAE,OAAO,SAAS,CAAC;QAE/D,qEAAqE;QACrE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEhD,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,6IAA6I;SAChJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Defense-in-depth CSRF check for framework state-changing routes.\n *\n * Threat model: action endpoints (`/_agent-native/actions/*`), extension\n * endpoints (`/_agent-native/extensions/*` and the legacy\n * `/_agent-native/tools/*` alias), and a handful of other state-changing\n * `/_agent-native/*` routes use the better-auth session cookie, which is\n * configured with `SameSite=None; Secure; Partitioned` so the iframe editor\n * (and other cross-site embeds) can authenticate. `SameSite=None` means the\n * browser ships the session cookie on top-level form POSTs from any origin —\n * which is exactly the precondition for classic cross-site request forgery.\n *\n * The browser still gates \"non-simple\" requests behind a CORS preflight, so\n * an attacker who has to send `Content-Type: application/json` is forced\n * through OPTIONS, which our CORS middleware (`create-server.ts`) rejects\n * for disallowed origins. But the simple-request bypass (`Content-Type:\n * text/plain` on a `<form enctype=\"text/plain\">` POST, or `multipart/form-data`)\n * never preflights — the browser delivers it cross-origin with cookies.\n *\n * Mitigation: this middleware rejects any state-changing\n * (`POST/PUT/PATCH/DELETE`) request to `/_agent-native/*` that\n *\n *   1. carries the auth-cookie pattern (any cookie at all is a heuristic\n *      good-enough proxy — we don't want to deny anonymous fetches), AND\n *   2. is NOT clearly same-origin / first-party. We trust:\n *      - `Sec-Fetch-Site: same-origin` (sent by every modern browser on\n *        same-origin fetch — Chrome/Firefox/Safari/Edge all support it).\n *      - `X-Agent-Native-CSRF` custom header. Custom headers force a\n *        preflight, so an attacker can't add one cross-origin.\n *      - `Content-Type: application/json` request body. Same logic — JSON\n *        Content-Type is a non-simple request that triggers preflight.\n *\n * Why the existing CORS check isn't enough: a simple-request POST never\n * preflights, so the browser sends it through and only blocks the *response*\n * from being readable cross-origin. The state change (delete-account, write\n * SQL, etc.) happens server-side regardless. We need a server-side check that\n * proves first-party intent before running the action.\n *\n * Opt-out marker: a handful of routes legitimately accept cross-origin POSTs\n * — webhook endpoints (Slack, Telegram, email), the public A2A endpoint\n * (`/_agent-native/a2a`), the integrations process-task self-fire, and so on.\n * Those are listed in `CSRF_ALLOWLIST_PREFIXES` below; if you add a new\n * cross-origin-callable route, add it there.\n */\n\nimport {\n  defineEventHandler,\n  getMethod,\n  getRequestHeader,\n  setResponseStatus,\n} from \"h3\";\n\n/**\n * Path prefixes (relative to the framework prefix `/_agent-native`) that are\n * allowed to receive cross-origin state-changing POSTs without first-party\n * markers. These are signed/authenticated through other mechanisms (HMAC,\n * JWT, internal token) so they don't need cookie-based CSRF protection.\n */\nconst CSRF_ALLOWLIST_PREFIXES = [\n  // Integration webhooks — verified by HMAC against a per-integration secret.\n  \"/integrations/\",\n  // A2A JSON-RPC endpoints — verified by signed JWT (when A2A_SECRET set) or\n  // explicitly opt-in unauthenticated (handled at the A2A layer).\n  \"/a2a\",\n  // Better Auth's own login/sign-in/social-callback routes. Better Auth\n  // ships its own CSRF protection (Origin/Sec-Fetch checks on its handlers)\n  // and cookies are needed for the OAuth callback round-trip.\n  \"/auth/\",\n  // Stripe / Paddle / billing webhooks dropped in by templates.\n  \"/billing/webhook\",\n  // Public share endpoints — read-only and never cookie-driven, but kept\n  // here so a templated POST (e.g. comment-on-public-recording) doesn't 403.\n  \"/share/\",\n  // OAuth callbacks (Builder, Google, Slack, Notion, Zoom). These get a\n  // `code` query param via top-level navigation — they DO ride the session\n  // cookie and they SHOULD validate state, but the framework can't see the\n  // state token. Each callback handler is responsible for its own CSRF\n  // check (signed state tokens).\n  \"/oauth/\",\n  // Builder's CLI-auth callback — uses the BUILDER_STATE_PARAM signed token\n  // to authenticate the round-trip; framework CSRF check would block it.\n  \"/builder/callback\",\n];\n\nconst STATE_CHANGING_METHODS = new Set([\"POST\", \"PUT\", \"PATCH\", \"DELETE\"]);\n\n/**\n * Decide whether a request is \"first-party enough\" to trust as not-CSRF.\n * Any of the following make a request non-CSRF:\n *\n *   - `Sec-Fetch-Site: same-origin` (or `none` for top-level navigations\n *     to our own pages — but state-changing methods don't ship `none`).\n *   - `X-Agent-Native-CSRF` header (any value, even \"1\"). This is a custom\n *     header so the browser forces a preflight cross-origin, which our\n *     CORS layer rejects for disallowed origins.\n *   - `Content-Type: application/json` (case-insensitive). JSON content\n *     type is a non-simple request that triggers preflight.\n *\n * We accept ANY of these — the goal is \"did the request come through a\n * channel the browser would have preflighted\", not a strict-mode token.\n */\nfunction looksFirstParty(event: any): boolean {\n  const sfs = getRequestHeader(event, \"sec-fetch-site\");\n  if (sfs === \"same-origin\" || sfs === \"same-site\" || sfs === \"none\") {\n    return true;\n  }\n  if (getRequestHeader(event, \"x-agent-native-csrf\")) {\n    return true;\n  }\n  const contentType = getRequestHeader(event, \"content-type\");\n  if (\n    contentType &&\n    typeof contentType === \"string\" &&\n    contentType.toLowerCase().includes(\"application/json\")\n  ) {\n    return true;\n  }\n  return false;\n}\n\n/**\n * Returns true when the request carries any cookie. We use \"has any cookie\"\n * as a coarse heuristic for \"the browser is going to attach the session\n * cookie\" — anonymous tools (curl, server-to-server) typically don't send\n * cookies, so they bypass this check entirely.\n */\nfunction requestHasCookies(event: any): boolean {\n  const cookie = getRequestHeader(event, \"cookie\");\n  return typeof cookie === \"string\" && cookie.trim().length > 0;\n}\n\n/**\n * Path passed in is the full request URL pathname (e.g. `/_agent-native/actions/foo`).\n * `frameworkPrefix` should be the framework route prefix without trailing slash,\n * e.g. `/_agent-native`.\n */\nfunction isOnAllowlist(pathname: string, frameworkPrefix: string): boolean {\n  if (!pathname.startsWith(frameworkPrefix)) return false;\n  const sub = pathname.slice(frameworkPrefix.length);\n  for (const allowed of CSRF_ALLOWLIST_PREFIXES) {\n    if (sub.startsWith(allowed)) return true;\n  }\n  return false;\n}\n\n/**\n * Create the framework CSRF middleware.\n *\n * Mount this BEFORE any state-changing route handler. The middleware\n *   - lets every non-state-changing method through (GET/HEAD/OPTIONS).\n *   - lets requests without cookies through (anonymous/server tools).\n *   - lets allowlisted paths through (webhooks, A2A, OAuth callbacks).\n *   - lets first-party-shaped requests through (custom header, JSON\n *     Content-Type, or `Sec-Fetch-Site: same-origin`).\n *   - rejects everything else with 403.\n */\nexport function createCsrfMiddleware(\n  frameworkPrefix: string = \"/_agent-native\",\n) {\n  return defineEventHandler((event) => {\n    const method = getMethod(event);\n    if (!STATE_CHANGING_METHODS.has(method)) return undefined;\n\n    const pathname = event.url?.pathname ?? \"\";\n    if (!pathname.startsWith(frameworkPrefix)) return undefined;\n    if (isOnAllowlist(pathname, frameworkPrefix)) return undefined;\n\n    // No cookie = no risk of confused-deputy CSRF on the session cookie.\n    if (!requestHasCookies(event)) return undefined;\n\n    if (looksFirstParty(event)) return undefined;\n\n    setResponseStatus(event, 403);\n    return {\n      error:\n        \"CSRF check failed: state-changing requests must include a same-origin marker. Set Content-Type: application/json or X-Agent-Native-CSRF: 1.\",\n    };\n  });\n}\n"]}

package/dist/shared/workspace-app-id.d.ts

@@ -1,4 +1,4 @@
-export declare const DISPATCH_WORKSPACE_ROOT_REDIRECTS: readonly [readonly ["overview", "overview"], readonly ["login", "login"], readonly ["signup", "signup"], readonly ["apps", "apps"], readonly ["apps/new-app", "new-app"], readonly ["new-app", "new-app"], readonly ["vault", "vault"], readonly ["integrations", "integrations"], readonly ["agents", "agents"], readonly ["workspace", "workspace"], readonly ["messaging", "messaging"], readonly ["tools", "tools"], readonly ["destinations", "destinations"], readonly ["identities", "identities"], readonly ["approval", "approval"], readonly ["approvals", "approvals"], readonly ["audit", "audit"], readonly ["team", "team"]];
+export declare const DISPATCH_WORKSPACE_ROOT_REDIRECTS: readonly [readonly ["overview", "overview"], readonly ["login", "login"], readonly ["signup", "signup"], readonly ["apps", "apps"], readonly ["apps/new-app", "new-app"], readonly ["new-app", "new-app"], readonly ["vault", "vault"], readonly ["integrations", "integrations"], readonly ["agents", "agents"], readonly ["workspace", "workspace"], readonly ["messaging", "messaging"], readonly ["extensions", "extensions"], readonly ["destinations", "destinations"], readonly ["identities", "identities"], readonly ["approval", "approval"], readonly ["approvals", "approvals"], readonly ["audit", "audit"], readonly ["team", "team"]];
 export declare const RESERVED_WORKSPACE_APP_IDS: Set<string>;
 export declare function isValidWorkspaceAppIdFormat(appId: string): boolean;
 export declare function getWorkspaceAppIdValidationError(appId: string): string | null;

package/dist/shared/workspace-app-id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-app-id.d.ts","sourceRoot":"","sources":["../../src/shared/workspace-app-id.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iCAAiC,4mBAmBpC,CAAC;AAEX,eAAO,MAAM,0BAA0B,aAQrC,CAAC;AAEH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ7E;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAG7D"}
+{"version":3,"file":"workspace-app-id.d.ts","sourceRoot":"","sources":["../../src/shared/workspace-app-id.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iCAAiC,snBAmBpC,CAAC;AAEX,eAAO,MAAM,0BAA0B,aAYrC,CAAC;AAEH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ7E;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAG7D"}

package/dist/shared/workspace-app-id.js

@@ -10,7 +10,7 @@ export const DISPATCH_WORKSPACE_ROOT_REDIRECTS = [
     ["agents", "agents"],
     ["workspace", "workspace"],
     ["messaging", "messaging"],
-    ["tools", "tools"],
+    ["extensions", "extensions"],
     ["destinations", "destinations"],
     ["identities", "identities"],
     ["approval", "approval"],
@@ -25,6 +25,10 @@ export const RESERVED_WORKSPACE_APP_IDS = new Set([
     "auth",
     "dispatch",
     "netlify",
+    // Legacy alias — `tools` was the previous name for `extensions`. Keep it
+    // reserved so a user can't create a workspace app whose mount path collides
+    // with the legacy `/tools` redirect (still served by core-routes-plugin).
+    "tools",
     ...DISPATCH_WORKSPACE_ROOT_REDIRECTS.map(([from]) => from),
 ]);
 export function isValidWorkspaceAppIdFormat(appId) {

package/dist/shared/workspace-app-id.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-app-id.js","sourceRoot":"","sources":["../../src/shared/workspace-app-id.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,CAAC,UAAU,EAAE,UAAU,CAAC;IACxB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,cAAc,EAAE,SAAS,CAAC;IAC3B,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,YAAY,EAAE,YAAY,CAAC;IAC5B,CAAC,UAAU,EAAE,UAAU,CAAC;IACxB,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,MAAM,EAAE,MAAM,CAAC;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IAChD,eAAe;IACf,mBAAmB;IACnB,KAAK;IACL,MAAM;IACN,UAAU;IACV,SAAS;IACT,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;CAC3D,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAa;IAC5D,IAAI,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,aAAa,KAAK,uEAAuE,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,qBAAqB,KAAK,iDAAiD,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,MAAM,KAAK,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC","sourcesContent":["export const DISPATCH_WORKSPACE_ROOT_REDIRECTS = [\n  [\"overview\", \"overview\"],\n  [\"login\", \"login\"],\n  [\"signup\", \"signup\"],\n  [\"apps\", \"apps\"],\n  [\"apps/new-app\", \"new-app\"],\n  [\"new-app\", \"new-app\"],\n  [\"vault\", \"vault\"],\n  [\"integrations\", \"integrations\"],\n  [\"agents\", \"agents\"],\n  [\"workspace\", \"workspace\"],\n  [\"messaging\", \"messaging\"],\n  [\"tools\", \"tools\"],\n  [\"destinations\", \"destinations\"],\n  [\"identities\", \"identities\"],\n  [\"approval\", \"approval\"],\n  [\"approvals\", \"approvals\"],\n  [\"audit\", \"audit\"],\n  [\"team\", \"team\"],\n] as const;\n\nexport const RESERVED_WORKSPACE_APP_IDS = new Set([\n  \"_agent-native\",\n  \"_workspace_static\",\n  \"api\",\n  \"auth\",\n  \"dispatch\",\n  \"netlify\",\n  ...DISPATCH_WORKSPACE_ROOT_REDIRECTS.map(([from]) => from),\n]);\n\nexport function isValidWorkspaceAppIdFormat(appId: string): boolean {\n  return /^[a-z][a-z0-9-]*$/.test(appId);\n}\n\nexport function getWorkspaceAppIdValidationError(appId: string): string | null {\n  if (RESERVED_WORKSPACE_APP_IDS.has(appId)) {\n    return `App name \"${appId}\" conflicts with a reserved workspace route. Choose a different name.`;\n  }\n  if (!isValidWorkspaceAppIdFormat(appId)) {\n    return `Invalid app name \"${appId}\". Use lowercase letters, numbers, and hyphens.`;\n  }\n  return null;\n}\n\nexport function assertValidWorkspaceAppId(appId: string): void {\n  const error = getWorkspaceAppIdValidationError(appId);\n  if (error) throw new Error(error);\n}\n"]}
+{"version":3,"file":"workspace-app-id.js","sourceRoot":"","sources":["../../src/shared/workspace-app-id.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,CAAC,UAAU,EAAE,UAAU,CAAC;IACxB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,cAAc,EAAE,SAAS,CAAC;IAC3B,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,YAAY,EAAE,YAAY,CAAC;IAC5B,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,YAAY,EAAE,YAAY,CAAC;IAC5B,CAAC,UAAU,EAAE,UAAU,CAAC;IACxB,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,MAAM,EAAE,MAAM,CAAC;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IAChD,eAAe;IACf,mBAAmB;IACnB,KAAK;IACL,MAAM;IACN,UAAU;IACV,SAAS;IACT,yEAAyE;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,OAAO;IACP,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;CAC3D,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAa;IAC5D,IAAI,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,aAAa,KAAK,uEAAuE,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,qBAAqB,KAAK,iDAAiD,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,MAAM,KAAK,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC","sourcesContent":["export const DISPATCH_WORKSPACE_ROOT_REDIRECTS = [\n  [\"overview\", \"overview\"],\n  [\"login\", \"login\"],\n  [\"signup\", \"signup\"],\n  [\"apps\", \"apps\"],\n  [\"apps/new-app\", \"new-app\"],\n  [\"new-app\", \"new-app\"],\n  [\"vault\", \"vault\"],\n  [\"integrations\", \"integrations\"],\n  [\"agents\", \"agents\"],\n  [\"workspace\", \"workspace\"],\n  [\"messaging\", \"messaging\"],\n  [\"extensions\", \"extensions\"],\n  [\"destinations\", \"destinations\"],\n  [\"identities\", \"identities\"],\n  [\"approval\", \"approval\"],\n  [\"approvals\", \"approvals\"],\n  [\"audit\", \"audit\"],\n  [\"team\", \"team\"],\n] as const;\n\nexport const RESERVED_WORKSPACE_APP_IDS = new Set([\n  \"_agent-native\",\n  \"_workspace_static\",\n  \"api\",\n  \"auth\",\n  \"dispatch\",\n  \"netlify\",\n  // Legacy alias — `tools` was the previous name for `extensions`. Keep it\n  // reserved so a user can't create a workspace app whose mount path collides\n  // with the legacy `/tools` redirect (still served by core-routes-plugin).\n  \"tools\",\n  ...DISPATCH_WORKSPACE_ROOT_REDIRECTS.map(([from]) => from),\n]);\n\nexport function isValidWorkspaceAppIdFormat(appId: string): boolean {\n  return /^[a-z][a-z0-9-]*$/.test(appId);\n}\n\nexport function getWorkspaceAppIdValidationError(appId: string): string | null {\n  if (RESERVED_WORKSPACE_APP_IDS.has(appId)) {\n    return `App name \"${appId}\" conflicts with a reserved workspace route. Choose a different name.`;\n  }\n  if (!isValidWorkspaceAppIdFormat(appId)) {\n    return `Invalid app name \"${appId}\". Use lowercase letters, numbers, and hyphens.`;\n  }\n  return null;\n}\n\nexport function assertValidWorkspaceAppId(appId: string): void {\n  const error = getWorkspaceAppIdValidationError(appId);\n  if (error) throw new Error(error);\n}\n"]}

package/dist/templates/workspace-root/README.md

@@ -39,12 +39,13 @@ the shared package (`@{{APP_NAME}}/shared`).
 pnpm install
 cp .env.example .env   # fill in DATABASE_URL, BETTER_AUTH_SECRET, and an LLM provider key
 pnpm repair:workspace-org -- --name "Example Co" --domain example.com --owner-email owner@example.com
-pnpm dev               # starts the workspace gateway and opens Dispatch
+pnpm dev               # starts the workspace gateway; opens Dispatch when present
 ```
 
-The dev gateway serves Dispatch at `/dispatch` and every app at its own path
-such as `/starter`. It watches `apps/`, so newly-created apps are detected and
-started without restarting `pnpm dev`.
+The dev gateway serves Dispatch at `/dispatch` when you keep the recommended
+Dispatch app selected, and every app at its own path such as `/starter`. It
+watches `apps/`, so newly-created apps are detected and started without
+restarting `pnpm dev`.
 
 ## Workspace org identity
 

package/dist/usage/store.d.ts

@@ -7,7 +7,7 @@ export interface UsageRecord {
     model: string;
     /** Category for this call — e.g. "chat", "automation", "job", "custom-agent". */
     label?: string;
-    /** Optional template/app name (e.g. "mail"). Falls back to AGENT_APP env. */
+    /** Optional template/app name (e.g. "mail"). Falls back to AGENT_APP / APP_NAME env. */
     app?: string;
 }
 /**

package/dist/usage/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/usage/store.ts"],"names":[],"mappings":"AA8CA,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA2DD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,eAAe,SAAI,EACnB,gBAAgB,SAAI,GACnB,MAAM,CAUR;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACtE,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;AA+DjB,qEAAqE;AACrE,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS3E;AAID,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC5B;AAID;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAoHvB"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/usage/store.ts"],"names":[],"mappings":"AA8CA,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA2DD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,eAAe,SAAI,EACnB,gBAAgB,SAAI,GACnB,MAAM,CAUR;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACtE,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;AAgEjB,qEAAqE;AACrE,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS3E;AAID,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC5B;AAID;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAoHvB"}

package/dist/usage/store.js

@@ -110,7 +110,7 @@ export async function recordUsage(recordOrOwner, inputTokens, outputTokens, mode
     const client = getDbExec();
     const costX100 = calculateCost(inTok, outTok, modelName, cacheReadTokens, cacheWriteTokens);
     const id = Date.now() * 1000 + Math.floor(Math.random() * 1000);
-    const resolvedApp = app ?? process.env.AGENT_APP ?? "";
+    const resolvedApp = app ?? process.env.AGENT_APP ?? process.env.APP_NAME ?? "";
     const resolvedLabel = label ?? "chat";
     await client.execute({
         sql: `INSERT INTO token_usage

package/dist/usage/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/usage/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAcjE,MAAM,OAAO,GAAoD;IAC/D;QACE,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE;KACzE;IACD;QACE,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;KACrE;IACD,2BAA2B;IAC3B;QACE,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;KACtE;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,KAAa;IAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACpD,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,OAAO,CAAC;AAC9C,CAAC;AAeD,IAAI,YAAuC,CAAC;AAE5C,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,CAAC,OAAO,CAAC;;eAEZ,OAAO,EAAE;;yBAEC,OAAO,EAAE;0BACR,OAAO,EAAE;8BACL,OAAO,EAAE;+BACR,OAAO,EAAE;4BACZ,OAAO,EAAE;;;;uBAId,OAAO,EAAE;;OAEzB,CAAC,CAAC;YAEH,iEAAiE;YACjE,mEAAmE;YACnE,kEAAkE;YAClE,MAAM,SAAS,GAA4B;gBACzC,CAAC,mBAAmB,EAAE,GAAG,OAAO,EAAE,qBAAqB,CAAC;gBACxD,CAAC,oBAAoB,EAAE,GAAG,OAAO,EAAE,qBAAqB,CAAC;gBACzD,CAAC,OAAO,EAAE,8BAA8B,CAAC;gBACzC,CAAC,KAAK,EAAE,0BAA0B,CAAC;aACpC,CAAC;YACF,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,IAAI,UAAU,EAAE,EAAE,CAAC;wBACjB,MAAM,MAAM,CAAC,OAAO,CAClB,oDAAoD,GAAG,IAAI,GAAG,EAAE,CACjE,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,MAAM,CAAC,OAAO,CAClB,sCAAsC,GAAG,IAAI,GAAG,EAAE,CACnD,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;gBACnC,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAClB,mGAAmG,CACpG,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,WAAmB,EACnB,YAAoB,EACpB,KAAa,EACb,eAAe,GAAG,CAAC,EACnB,gBAAgB,GAAG,CAAC;IAEpB,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAE,EAAE,CAClD,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC;IACpD,OAAO,CACL,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC;QAC5B,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,SAAS,CAAC;QACpC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,UAAU,CAAC,CACvC,CAAC;AACJ,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,aAAmC,EACnC,WAAoB,EACpB,YAAqB,EACrB,KAAc;IAEd,MAAM,MAAM,GACV,OAAO,aAAa,KAAK,QAAQ;QAC/B,CAAC,CAAC;YACE,UAAU,EAAE,aAAa;YACzB,WAAW,EAAE,WAAW,IAAI,CAAC;YAC7B,YAAY,EAAE,YAAY,IAAI,CAAC;YAC/B,KAAK,EAAE,KAAK,IAAI,EAAE;SACnB;QACH,CAAC,CAAC,aAAa,CAAC;IAEpB,MAAM,EACJ,UAAU,EACV,WAAW,EAAE,KAAK,EAClB,YAAY,EAAE,MAAM,EACpB,eAAe,GAAG,CAAC,EACnB,gBAAgB,GAAG,CAAC,EACpB,KAAK,EAAE,SAAS,EAChB,KAAK,EACL,GAAG,GACJ,GAAG,MAAM,CAAC;IAEX,qEAAqE;IACrE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAEvE,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,aAAa,CAC5B,KAAK,EACL,MAAM,EACN,SAAS,EACT,eAAe,EACf,gBAAgB,CACjB,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;IACvD,MAAM,aAAa,GAAG,KAAK,IAAI,MAAM,CAAC;IACtC,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;+CAEsC;QAC3C,IAAI,EAAE;YACJ,EAAE;YACF,UAAU;YACV,KAAK;YACL,MAAM;YACN,eAAe;YACf,gBAAgB;YAChB,QAAQ;YACR,SAAS;YACT,aAAa;YACb,WAAW;YACX,IAAI,CAAC,GAAG,EAAE;SACX;KACF,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,0FAA0F;QAC/F,IAAI,EAAE,CAAC,UAAU,CAAC;KACnB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAE,IAAI,CAAC,CAAC,CAAwB,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;IAClE,OAAO,KAAK,GAAG,GAAG,CAAC;AACrB,CAAC;AAuDD,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA4B;IAE5B,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAE5D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;;;;iEAOwD;QAC7D,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAkC,CAAC;IAEpE,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC;QAClC,GAAG,EAAE,UAAU,GAAG;;;;;;;;;iBASL,GAAG;0BACM;QACtB,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC;KACpC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,CAAC,IAAe,EAAiB,EAAE,CACpD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,CAA2C,CAAC;QACxD,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG;YACnC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;YAC7B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YACpC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACtC,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YACxC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;SAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;KACjC,CAAC,CAAC;IAEH,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACnC,GAAG,EAAE;gDACuC;QAC5C,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4C,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAqC,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,KAAK,GAAkB,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnB,IAAI;QACJ,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,GAAG;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACtC,GAAG,EAAE;;;;;;eAMM;QACX,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,MAAM,GACV,UAAU,CAAC,IACZ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACd,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC;QAClC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QAC1C,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;QAC5C,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC;QACnD,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,CAAC;QACrD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,GAAG;KAC9C,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG;QACtC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAChC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACvC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QACzC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAC3C,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAC5C,OAAO;QACP,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAClC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAClC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,KAAK;QACL,MAAM;KACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Token usage tracking and cost monitoring.\n *\n * Every LLM call made by the framework records a row here so users can\n * see where their spend is going — chat vs automations vs background jobs\n * vs whatever else a template labels its prompts as.\n *\n * Cost is stored as \"centicents\" (1/100th of a cent) for integer precision.\n */\nimport { getDbExec, intType, isPostgres } from \"../db/client.js\";\n\n/**\n * Per-million-token pricing in cents. Cache read is typically ~10% of\n * input; cache write (5m TTL) is ~125%. Pricing is best-effort — keep\n * this table in sync with Anthropic's published prices.\n */\ninterface ModelPricing {\n  input: number;\n  output: number;\n  cacheRead: number;\n  cacheWrite: number;\n}\n\nconst PRICING: Array<{ match: RegExp; pricing: ModelPricing }> = [\n  {\n    match: /opus/i,\n    pricing: { input: 1500, output: 7500, cacheRead: 150, cacheWrite: 1875 },\n  },\n  {\n    match: /haiku/i,\n    pricing: { input: 100, output: 500, cacheRead: 10, cacheWrite: 125 },\n  },\n  // default → sonnet pricing\n  {\n    match: /.*/,\n    pricing: { input: 300, output: 1500, cacheRead: 30, cacheWrite: 375 },\n  },\n];\n\nfunction pricingFor(model: string): ModelPricing {\n  for (const entry of PRICING) {\n    if (entry.match.test(model)) return entry.pricing;\n  }\n  return PRICING[PRICING.length - 1]!.pricing;\n}\n\nexport interface UsageRecord {\n  ownerEmail: string;\n  inputTokens: number;\n  outputTokens: number;\n  cacheReadTokens?: number;\n  cacheWriteTokens?: number;\n  model: string;\n  /** Category for this call — e.g. \"chat\", \"automation\", \"job\", \"custom-agent\". */\n  label?: string;\n  /** Optional template/app name (e.g. \"mail\"). Falls back to AGENT_APP env. */\n  app?: string;\n}\n\nlet _initPromise: Promise<void> | undefined;\n\nasync function ensureUsageTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      await client.execute(`\n        CREATE TABLE IF NOT EXISTS token_usage (\n          id ${intType()} PRIMARY KEY,\n          owner_email TEXT NOT NULL,\n          input_tokens ${intType()} NOT NULL DEFAULT 0,\n          output_tokens ${intType()} NOT NULL DEFAULT 0,\n          cache_read_tokens ${intType()} NOT NULL DEFAULT 0,\n          cache_write_tokens ${intType()} NOT NULL DEFAULT 0,\n          cost_cents_x100 ${intType()} NOT NULL DEFAULT 0,\n          model TEXT NOT NULL DEFAULT '',\n          label TEXT NOT NULL DEFAULT 'chat',\n          app TEXT NOT NULL DEFAULT '',\n          created_at ${intType()} NOT NULL\n        )\n      `);\n\n      // Add columns on older deployments that pre-date the label/cache\n      // fields. Each ALTER is wrapped so a dialect without IF NOT EXISTS\n      // (SQLite) still makes progress if only some columns are missing.\n      const additions: Array<[string, string]> = [\n        [\"cache_read_tokens\", `${intType()} NOT NULL DEFAULT 0`],\n        [\"cache_write_tokens\", `${intType()} NOT NULL DEFAULT 0`],\n        [\"label\", `TEXT NOT NULL DEFAULT 'chat'`],\n        [\"app\", `TEXT NOT NULL DEFAULT ''`],\n      ];\n      for (const [col, def] of additions) {\n        try {\n          if (isPostgres()) {\n            await client.execute(\n              `ALTER TABLE token_usage ADD COLUMN IF NOT EXISTS ${col} ${def}`,\n            );\n          } else {\n            await client.execute(\n              `ALTER TABLE token_usage ADD COLUMN ${col} ${def}`,\n            );\n          }\n        } catch {\n          // Column already exists — ignore\n        }\n      }\n\n      try {\n        await client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_token_usage_owner_created ON token_usage (owner_email, created_at)`,\n        );\n      } catch {}\n    })();\n  }\n  return _initPromise;\n}\n\n/**\n * Calculate cost in centicents (1/100th of a cent).\n * Accepts cache tokens so callers that use prompt caching are priced\n * correctly. Non-cache-aware callers can pass 0 for the cache fields.\n */\nexport function calculateCost(\n  inputTokens: number,\n  outputTokens: number,\n  model: string,\n  cacheReadTokens = 0,\n  cacheWriteTokens = 0,\n): number {\n  const p = pricingFor(model);\n  const toX100 = (tokens: number, costPerM: number) =>\n    Math.round((tokens / 1_000_000) * costPerM * 100);\n  return (\n    toX100(inputTokens, p.input) +\n    toX100(outputTokens, p.output) +\n    toX100(cacheReadTokens, p.cacheRead) +\n    toX100(cacheWriteTokens, p.cacheWrite)\n  );\n}\n\n/**\n * Record token usage from an LLM call.\n *\n * Accepts an object with the full set of fields. A positional overload\n * remains for backward compatibility with the older 4-arg signature.\n */\nexport async function recordUsage(record: UsageRecord): Promise<void>;\nexport async function recordUsage(\n  ownerEmail: string,\n  inputTokens: number,\n  outputTokens: number,\n  model: string,\n): Promise<void>;\nexport async function recordUsage(\n  recordOrOwner: UsageRecord | string,\n  inputTokens?: number,\n  outputTokens?: number,\n  model?: string,\n): Promise<void> {\n  const record: UsageRecord =\n    typeof recordOrOwner === \"string\"\n      ? {\n          ownerEmail: recordOrOwner,\n          inputTokens: inputTokens ?? 0,\n          outputTokens: outputTokens ?? 0,\n          model: model ?? \"\",\n        }\n      : recordOrOwner;\n\n  const {\n    ownerEmail,\n    inputTokens: inTok,\n    outputTokens: outTok,\n    cacheReadTokens = 0,\n    cacheWriteTokens = 0,\n    model: modelName,\n    label,\n    app,\n  } = record;\n\n  // Skip no-op writes (e.g. a stream aborted before any tokens flowed)\n  if (!inTok && !outTok && !cacheReadTokens && !cacheWriteTokens) return;\n\n  await ensureUsageTable();\n  const client = getDbExec();\n  const costX100 = calculateCost(\n    inTok,\n    outTok,\n    modelName,\n    cacheReadTokens,\n    cacheWriteTokens,\n  );\n  const id = Date.now() * 1000 + Math.floor(Math.random() * 1000);\n  const resolvedApp = app ?? process.env.AGENT_APP ?? \"\";\n  const resolvedLabel = label ?? \"chat\";\n  await client.execute({\n    sql: `INSERT INTO token_usage\n      (id, owner_email, input_tokens, output_tokens, cache_read_tokens, cache_write_tokens, cost_cents_x100, model, label, app, created_at)\n      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      ownerEmail,\n      inTok,\n      outTok,\n      cacheReadTokens,\n      cacheWriteTokens,\n      costX100,\n      modelName,\n      resolvedLabel,\n      resolvedApp,\n      Date.now(),\n    ],\n  });\n}\n\n/** Total cost (in cents) charged against a user, across all time. */\nexport async function getUserUsageCents(ownerEmail: string): Promise<number> {\n  await ensureUsageTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT COALESCE(SUM(cost_cents_x100), 0) as total FROM token_usage WHERE owner_email = ?`,\n    args: [ownerEmail],\n  });\n  const total = Number((rows[0] as { total?: number })?.total ?? 0);\n  return total / 100;\n}\n\n// ─── Admin / UI queries ─────────────────────────────────────────────────\n\nexport interface UsageSummaryOptions {\n  ownerEmail: string;\n  /** Inclusive lower bound (ms since epoch). Defaults to 30 days ago. */\n  sinceMs?: number;\n}\n\nexport interface UsageBucket {\n  key: string;\n  inputTokens: number;\n  outputTokens: number;\n  cacheReadTokens: number;\n  cacheWriteTokens: number;\n  cents: number;\n  calls: number;\n}\n\nexport interface DailyBucket {\n  /** YYYY-MM-DD (UTC) */\n  date: string;\n  cents: number;\n  calls: number;\n}\n\nexport interface UsageRecentEntry {\n  id: number;\n  createdAt: number;\n  label: string;\n  app: string;\n  model: string;\n  inputTokens: number;\n  outputTokens: number;\n  cacheReadTokens: number;\n  cacheWriteTokens: number;\n  cents: number;\n}\n\nexport interface UsageSummary {\n  totalCents: number;\n  totalCalls: number;\n  totalInputTokens: number;\n  totalOutputTokens: number;\n  totalCacheReadTokens: number;\n  totalCacheWriteTokens: number;\n  sinceMs: number;\n  byLabel: UsageBucket[];\n  byModel: UsageBucket[];\n  byApp: UsageBucket[];\n  byDay: DailyBucket[];\n  recent: UsageRecentEntry[];\n}\n\nconst DAY_MS = 86_400_000;\n\n/**\n * Produce an aggregated spend view for the Usage admin panel.\n * Scoped to the passed owner email; the UI always passes the session user.\n */\nexport async function getUsageSummary(\n  options: UsageSummaryOptions,\n): Promise<UsageSummary> {\n  await ensureUsageTable();\n  const client = getDbExec();\n  const sinceMs = options.sinceMs ?? Date.now() - 30 * DAY_MS;\n\n  const totalRow = await client.execute({\n    sql: `SELECT\n      COALESCE(SUM(cost_cents_x100), 0) AS cents,\n      COUNT(*) AS calls,\n      COALESCE(SUM(input_tokens), 0) AS in_tok,\n      COALESCE(SUM(output_tokens), 0) AS out_tok,\n      COALESCE(SUM(cache_read_tokens), 0) AS cr_tok,\n      COALESCE(SUM(cache_write_tokens), 0) AS cw_tok\n      FROM token_usage WHERE owner_email = ? AND created_at >= ?`,\n    args: [options.ownerEmail, sinceMs],\n  });\n  const t = (totalRow.rows[0] ?? {}) as Record<string, number | null>;\n\n  const bucketSql = (col: string) => ({\n    sql: `SELECT ${col} AS k,\n        COALESCE(SUM(cost_cents_x100), 0) AS cents,\n        COUNT(*) AS calls,\n        COALESCE(SUM(input_tokens), 0) AS in_tok,\n        COALESCE(SUM(output_tokens), 0) AS out_tok,\n        COALESCE(SUM(cache_read_tokens), 0) AS cr_tok,\n        COALESCE(SUM(cache_write_tokens), 0) AS cw_tok\n      FROM token_usage\n      WHERE owner_email = ? AND created_at >= ?\n      GROUP BY ${col}\n      ORDER BY cents DESC`,\n    args: [options.ownerEmail, sinceMs],\n  });\n\n  const mapBuckets = (rows: unknown[]): UsageBucket[] =>\n    rows.map((r) => {\n      const row = r as Record<string, number | string | null>;\n      return {\n        key: String(row.k ?? \"\"),\n        cents: Number(row.cents ?? 0) / 100,\n        calls: Number(row.calls ?? 0),\n        inputTokens: Number(row.in_tok ?? 0),\n        outputTokens: Number(row.out_tok ?? 0),\n        cacheReadTokens: Number(row.cr_tok ?? 0),\n        cacheWriteTokens: Number(row.cw_tok ?? 0),\n      };\n    });\n\n  const [byLabelR, byModelR, byAppR] = await Promise.all([\n    client.execute(bucketSql(\"label\")),\n    client.execute(bucketSql(\"model\")),\n    client.execute(bucketSql(\"app\")),\n  ]);\n\n  // By-day aggregation — done in JS so we don't depend on dialect-specific\n  // date functions (SQLite `strftime`, Postgres `to_char`). Cheap enough\n  // for a 30-day window; if this grows, swap for a dialect-aware query.\n  const dayRows = await client.execute({\n    sql: `SELECT created_at, cost_cents_x100 FROM token_usage\n      WHERE owner_email = ? AND created_at >= ?`,\n    args: [options.ownerEmail, sinceMs],\n  });\n  const dayMap = new Map<string, { cents: number; calls: number }>();\n  for (const row of dayRows.rows as Array<Record<string, number>>) {\n    const date = new Date(Number(row.created_at)).toISOString().slice(0, 10);\n    const prev = dayMap.get(date) ?? { cents: 0, calls: 0 };\n    prev.cents += Number(row.cost_cents_x100 ?? 0);\n    prev.calls += 1;\n    dayMap.set(date, prev);\n  }\n  const byDay: DailyBucket[] = [...dayMap.entries()]\n    .map(([date, v]) => ({\n      date,\n      cents: v.cents / 100,\n      calls: v.calls,\n    }))\n    .sort((a, b) => a.date.localeCompare(b.date));\n\n  const recentRows = await client.execute({\n    sql: `SELECT id, created_at, label, app, model,\n        input_tokens, output_tokens, cache_read_tokens, cache_write_tokens,\n        cost_cents_x100\n      FROM token_usage\n      WHERE owner_email = ?\n      ORDER BY created_at DESC\n      LIMIT 50`,\n    args: [options.ownerEmail],\n  });\n  const recent: UsageRecentEntry[] = (\n    recentRows.rows as Array<Record<string, number | string | null>>\n  ).map((row) => ({\n    id: Number(row.id),\n    createdAt: Number(row.created_at),\n    label: String(row.label ?? \"chat\"),\n    app: String(row.app ?? \"\"),\n    model: String(row.model ?? \"\"),\n    inputTokens: Number(row.input_tokens ?? 0),\n    outputTokens: Number(row.output_tokens ?? 0),\n    cacheReadTokens: Number(row.cache_read_tokens ?? 0),\n    cacheWriteTokens: Number(row.cache_write_tokens ?? 0),\n    cents: Number(row.cost_cents_x100 ?? 0) / 100,\n  }));\n\n  return {\n    totalCents: Number(t.cents ?? 0) / 100,\n    totalCalls: Number(t.calls ?? 0),\n    totalInputTokens: Number(t.in_tok ?? 0),\n    totalOutputTokens: Number(t.out_tok ?? 0),\n    totalCacheReadTokens: Number(t.cr_tok ?? 0),\n    totalCacheWriteTokens: Number(t.cw_tok ?? 0),\n    sinceMs,\n    byLabel: mapBuckets(byLabelR.rows),\n    byModel: mapBuckets(byModelR.rows),\n    byApp: mapBuckets(byAppR.rows),\n    byDay,\n    recent,\n  };\n}\n"]}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/usage/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAcjE,MAAM,OAAO,GAAoD;IAC/D;QACE,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE;KACzE;IACD;QACE,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;KACrE;IACD,2BAA2B;IAC3B;QACE,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;KACtE;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,KAAa;IAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACpD,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,OAAO,CAAC;AAC9C,CAAC;AAeD,IAAI,YAAuC,CAAC;AAE5C,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,CAAC,OAAO,CAAC;;eAEZ,OAAO,EAAE;;yBAEC,OAAO,EAAE;0BACR,OAAO,EAAE;8BACL,OAAO,EAAE;+BACR,OAAO,EAAE;4BACZ,OAAO,EAAE;;;;uBAId,OAAO,EAAE;;OAEzB,CAAC,CAAC;YAEH,iEAAiE;YACjE,mEAAmE;YACnE,kEAAkE;YAClE,MAAM,SAAS,GAA4B;gBACzC,CAAC,mBAAmB,EAAE,GAAG,OAAO,EAAE,qBAAqB,CAAC;gBACxD,CAAC,oBAAoB,EAAE,GAAG,OAAO,EAAE,qBAAqB,CAAC;gBACzD,CAAC,OAAO,EAAE,8BAA8B,CAAC;gBACzC,CAAC,KAAK,EAAE,0BAA0B,CAAC;aACpC,CAAC;YACF,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,IAAI,UAAU,EAAE,EAAE,CAAC;wBACjB,MAAM,MAAM,CAAC,OAAO,CAClB,oDAAoD,GAAG,IAAI,GAAG,EAAE,CACjE,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,MAAM,CAAC,OAAO,CAClB,sCAAsC,GAAG,IAAI,GAAG,EAAE,CACnD,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;gBACnC,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAClB,mGAAmG,CACpG,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,WAAmB,EACnB,YAAoB,EACpB,KAAa,EACb,eAAe,GAAG,CAAC,EACnB,gBAAgB,GAAG,CAAC;IAEpB,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAE,EAAE,CAClD,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC;IACpD,OAAO,CACL,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC;QAC5B,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,SAAS,CAAC;QACpC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,UAAU,CAAC,CACvC,CAAC;AACJ,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,aAAmC,EACnC,WAAoB,EACpB,YAAqB,EACrB,KAAc;IAEd,MAAM,MAAM,GACV,OAAO,aAAa,KAAK,QAAQ;QAC/B,CAAC,CAAC;YACE,UAAU,EAAE,aAAa;YACzB,WAAW,EAAE,WAAW,IAAI,CAAC;YAC7B,YAAY,EAAE,YAAY,IAAI,CAAC;YAC/B,KAAK,EAAE,KAAK,IAAI,EAAE;SACnB;QACH,CAAC,CAAC,aAAa,CAAC;IAEpB,MAAM,EACJ,UAAU,EACV,WAAW,EAAE,KAAK,EAClB,YAAY,EAAE,MAAM,EACpB,eAAe,GAAG,CAAC,EACnB,gBAAgB,GAAG,CAAC,EACpB,KAAK,EAAE,SAAS,EAChB,KAAK,EACL,GAAG,GACJ,GAAG,MAAM,CAAC;IAEX,qEAAqE;IACrE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAEvE,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,aAAa,CAC5B,KAAK,EACL,MAAM,EACN,SAAS,EACT,eAAe,EACf,gBAAgB,CACjB,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAChE,MAAM,WAAW,GACf,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC7D,MAAM,aAAa,GAAG,KAAK,IAAI,MAAM,CAAC;IACtC,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;+CAEsC;QAC3C,IAAI,EAAE;YACJ,EAAE;YACF,UAAU;YACV,KAAK;YACL,MAAM;YACN,eAAe;YACf,gBAAgB;YAChB,QAAQ;YACR,SAAS;YACT,aAAa;YACb,WAAW;YACX,IAAI,CAAC,GAAG,EAAE;SACX;KACF,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,0FAA0F;QAC/F,IAAI,EAAE,CAAC,UAAU,CAAC;KACnB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAE,IAAI,CAAC,CAAC,CAAwB,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;IAClE,OAAO,KAAK,GAAG,GAAG,CAAC;AACrB,CAAC;AAuDD,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA4B;IAE5B,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAE5D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;;;;iEAOwD;QAC7D,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAkC,CAAC;IAEpE,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC;QAClC,GAAG,EAAE,UAAU,GAAG;;;;;;;;;iBASL,GAAG;0BACM;QACtB,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC;KACpC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,CAAC,IAAe,EAAiB,EAAE,CACpD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,CAA2C,CAAC;QACxD,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG;YACnC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;YAC7B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YACpC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACtC,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YACxC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;SAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;KACjC,CAAC,CAAC;IAEH,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACnC,GAAG,EAAE;gDACuC;QAC5C,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4C,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAqC,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,KAAK,GAAkB,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnB,IAAI;QACJ,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,GAAG;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACtC,GAAG,EAAE;;;;;;eAMM;QACX,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,MAAM,GACV,UAAU,CAAC,IACZ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACd,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC;QAClC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QAC1C,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;QAC5C,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC;QACnD,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,CAAC;QACrD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,GAAG;KAC9C,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG;QACtC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAChC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACvC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QACzC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAC3C,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAC5C,OAAO;QACP,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAClC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAClC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,KAAK;QACL,MAAM;KACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Token usage tracking and cost monitoring.\n *\n * Every LLM call made by the framework records a row here so users can\n * see where their spend is going — chat vs automations vs background jobs\n * vs whatever else a template labels its prompts as.\n *\n * Cost is stored as \"centicents\" (1/100th of a cent) for integer precision.\n */\nimport { getDbExec, intType, isPostgres } from \"../db/client.js\";\n\n/**\n * Per-million-token pricing in cents. Cache read is typically ~10% of\n * input; cache write (5m TTL) is ~125%. Pricing is best-effort — keep\n * this table in sync with Anthropic's published prices.\n */\ninterface ModelPricing {\n  input: number;\n  output: number;\n  cacheRead: number;\n  cacheWrite: number;\n}\n\nconst PRICING: Array<{ match: RegExp; pricing: ModelPricing }> = [\n  {\n    match: /opus/i,\n    pricing: { input: 1500, output: 7500, cacheRead: 150, cacheWrite: 1875 },\n  },\n  {\n    match: /haiku/i,\n    pricing: { input: 100, output: 500, cacheRead: 10, cacheWrite: 125 },\n  },\n  // default → sonnet pricing\n  {\n    match: /.*/,\n    pricing: { input: 300, output: 1500, cacheRead: 30, cacheWrite: 375 },\n  },\n];\n\nfunction pricingFor(model: string): ModelPricing {\n  for (const entry of PRICING) {\n    if (entry.match.test(model)) return entry.pricing;\n  }\n  return PRICING[PRICING.length - 1]!.pricing;\n}\n\nexport interface UsageRecord {\n  ownerEmail: string;\n  inputTokens: number;\n  outputTokens: number;\n  cacheReadTokens?: number;\n  cacheWriteTokens?: number;\n  model: string;\n  /** Category for this call — e.g. \"chat\", \"automation\", \"job\", \"custom-agent\". */\n  label?: string;\n  /** Optional template/app name (e.g. \"mail\"). Falls back to AGENT_APP / APP_NAME env. */\n  app?: string;\n}\n\nlet _initPromise: Promise<void> | undefined;\n\nasync function ensureUsageTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      await client.execute(`\n        CREATE TABLE IF NOT EXISTS token_usage (\n          id ${intType()} PRIMARY KEY,\n          owner_email TEXT NOT NULL,\n          input_tokens ${intType()} NOT NULL DEFAULT 0,\n          output_tokens ${intType()} NOT NULL DEFAULT 0,\n          cache_read_tokens ${intType()} NOT NULL DEFAULT 0,\n          cache_write_tokens ${intType()} NOT NULL DEFAULT 0,\n          cost_cents_x100 ${intType()} NOT NULL DEFAULT 0,\n          model TEXT NOT NULL DEFAULT '',\n          label TEXT NOT NULL DEFAULT 'chat',\n          app TEXT NOT NULL DEFAULT '',\n          created_at ${intType()} NOT NULL\n        )\n      `);\n\n      // Add columns on older deployments that pre-date the label/cache\n      // fields. Each ALTER is wrapped so a dialect without IF NOT EXISTS\n      // (SQLite) still makes progress if only some columns are missing.\n      const additions: Array<[string, string]> = [\n        [\"cache_read_tokens\", `${intType()} NOT NULL DEFAULT 0`],\n        [\"cache_write_tokens\", `${intType()} NOT NULL DEFAULT 0`],\n        [\"label\", `TEXT NOT NULL DEFAULT 'chat'`],\n        [\"app\", `TEXT NOT NULL DEFAULT ''`],\n      ];\n      for (const [col, def] of additions) {\n        try {\n          if (isPostgres()) {\n            await client.execute(\n              `ALTER TABLE token_usage ADD COLUMN IF NOT EXISTS ${col} ${def}`,\n            );\n          } else {\n            await client.execute(\n              `ALTER TABLE token_usage ADD COLUMN ${col} ${def}`,\n            );\n          }\n        } catch {\n          // Column already exists — ignore\n        }\n      }\n\n      try {\n        await client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_token_usage_owner_created ON token_usage (owner_email, created_at)`,\n        );\n      } catch {}\n    })();\n  }\n  return _initPromise;\n}\n\n/**\n * Calculate cost in centicents (1/100th of a cent).\n * Accepts cache tokens so callers that use prompt caching are priced\n * correctly. Non-cache-aware callers can pass 0 for the cache fields.\n */\nexport function calculateCost(\n  inputTokens: number,\n  outputTokens: number,\n  model: string,\n  cacheReadTokens = 0,\n  cacheWriteTokens = 0,\n): number {\n  const p = pricingFor(model);\n  const toX100 = (tokens: number, costPerM: number) =>\n    Math.round((tokens / 1_000_000) * costPerM * 100);\n  return (\n    toX100(inputTokens, p.input) +\n    toX100(outputTokens, p.output) +\n    toX100(cacheReadTokens, p.cacheRead) +\n    toX100(cacheWriteTokens, p.cacheWrite)\n  );\n}\n\n/**\n * Record token usage from an LLM call.\n *\n * Accepts an object with the full set of fields. A positional overload\n * remains for backward compatibility with the older 4-arg signature.\n */\nexport async function recordUsage(record: UsageRecord): Promise<void>;\nexport async function recordUsage(\n  ownerEmail: string,\n  inputTokens: number,\n  outputTokens: number,\n  model: string,\n): Promise<void>;\nexport async function recordUsage(\n  recordOrOwner: UsageRecord | string,\n  inputTokens?: number,\n  outputTokens?: number,\n  model?: string,\n): Promise<void> {\n  const record: UsageRecord =\n    typeof recordOrOwner === \"string\"\n      ? {\n          ownerEmail: recordOrOwner,\n          inputTokens: inputTokens ?? 0,\n          outputTokens: outputTokens ?? 0,\n          model: model ?? \"\",\n        }\n      : recordOrOwner;\n\n  const {\n    ownerEmail,\n    inputTokens: inTok,\n    outputTokens: outTok,\n    cacheReadTokens = 0,\n    cacheWriteTokens = 0,\n    model: modelName,\n    label,\n    app,\n  } = record;\n\n  // Skip no-op writes (e.g. a stream aborted before any tokens flowed)\n  if (!inTok && !outTok && !cacheReadTokens && !cacheWriteTokens) return;\n\n  await ensureUsageTable();\n  const client = getDbExec();\n  const costX100 = calculateCost(\n    inTok,\n    outTok,\n    modelName,\n    cacheReadTokens,\n    cacheWriteTokens,\n  );\n  const id = Date.now() * 1000 + Math.floor(Math.random() * 1000);\n  const resolvedApp =\n    app ?? process.env.AGENT_APP ?? process.env.APP_NAME ?? \"\";\n  const resolvedLabel = label ?? \"chat\";\n  await client.execute({\n    sql: `INSERT INTO token_usage\n      (id, owner_email, input_tokens, output_tokens, cache_read_tokens, cache_write_tokens, cost_cents_x100, model, label, app, created_at)\n      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      ownerEmail,\n      inTok,\n      outTok,\n      cacheReadTokens,\n      cacheWriteTokens,\n      costX100,\n      modelName,\n      resolvedLabel,\n      resolvedApp,\n      Date.now(),\n    ],\n  });\n}\n\n/** Total cost (in cents) charged against a user, across all time. */\nexport async function getUserUsageCents(ownerEmail: string): Promise<number> {\n  await ensureUsageTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT COALESCE(SUM(cost_cents_x100), 0) as total FROM token_usage WHERE owner_email = ?`,\n    args: [ownerEmail],\n  });\n  const total = Number((rows[0] as { total?: number })?.total ?? 0);\n  return total / 100;\n}\n\n// ─── Admin / UI queries ─────────────────────────────────────────────────\n\nexport interface UsageSummaryOptions {\n  ownerEmail: string;\n  /** Inclusive lower bound (ms since epoch). Defaults to 30 days ago. */\n  sinceMs?: number;\n}\n\nexport interface UsageBucket {\n  key: string;\n  inputTokens: number;\n  outputTokens: number;\n  cacheReadTokens: number;\n  cacheWriteTokens: number;\n  cents: number;\n  calls: number;\n}\n\nexport interface DailyBucket {\n  /** YYYY-MM-DD (UTC) */\n  date: string;\n  cents: number;\n  calls: number;\n}\n\nexport interface UsageRecentEntry {\n  id: number;\n  createdAt: number;\n  label: string;\n  app: string;\n  model: string;\n  inputTokens: number;\n  outputTokens: number;\n  cacheReadTokens: number;\n  cacheWriteTokens: number;\n  cents: number;\n}\n\nexport interface UsageSummary {\n  totalCents: number;\n  totalCalls: number;\n  totalInputTokens: number;\n  totalOutputTokens: number;\n  totalCacheReadTokens: number;\n  totalCacheWriteTokens: number;\n  sinceMs: number;\n  byLabel: UsageBucket[];\n  byModel: UsageBucket[];\n  byApp: UsageBucket[];\n  byDay: DailyBucket[];\n  recent: UsageRecentEntry[];\n}\n\nconst DAY_MS = 86_400_000;\n\n/**\n * Produce an aggregated spend view for the Usage admin panel.\n * Scoped to the passed owner email; the UI always passes the session user.\n */\nexport async function getUsageSummary(\n  options: UsageSummaryOptions,\n): Promise<UsageSummary> {\n  await ensureUsageTable();\n  const client = getDbExec();\n  const sinceMs = options.sinceMs ?? Date.now() - 30 * DAY_MS;\n\n  const totalRow = await client.execute({\n    sql: `SELECT\n      COALESCE(SUM(cost_cents_x100), 0) AS cents,\n      COUNT(*) AS calls,\n      COALESCE(SUM(input_tokens), 0) AS in_tok,\n      COALESCE(SUM(output_tokens), 0) AS out_tok,\n      COALESCE(SUM(cache_read_tokens), 0) AS cr_tok,\n      COALESCE(SUM(cache_write_tokens), 0) AS cw_tok\n      FROM token_usage WHERE owner_email = ? AND created_at >= ?`,\n    args: [options.ownerEmail, sinceMs],\n  });\n  const t = (totalRow.rows[0] ?? {}) as Record<string, number | null>;\n\n  const bucketSql = (col: string) => ({\n    sql: `SELECT ${col} AS k,\n        COALESCE(SUM(cost_cents_x100), 0) AS cents,\n        COUNT(*) AS calls,\n        COALESCE(SUM(input_tokens), 0) AS in_tok,\n        COALESCE(SUM(output_tokens), 0) AS out_tok,\n        COALESCE(SUM(cache_read_tokens), 0) AS cr_tok,\n        COALESCE(SUM(cache_write_tokens), 0) AS cw_tok\n      FROM token_usage\n      WHERE owner_email = ? AND created_at >= ?\n      GROUP BY ${col}\n      ORDER BY cents DESC`,\n    args: [options.ownerEmail, sinceMs],\n  });\n\n  const mapBuckets = (rows: unknown[]): UsageBucket[] =>\n    rows.map((r) => {\n      const row = r as Record<string, number | string | null>;\n      return {\n        key: String(row.k ?? \"\"),\n        cents: Number(row.cents ?? 0) / 100,\n        calls: Number(row.calls ?? 0),\n        inputTokens: Number(row.in_tok ?? 0),\n        outputTokens: Number(row.out_tok ?? 0),\n        cacheReadTokens: Number(row.cr_tok ?? 0),\n        cacheWriteTokens: Number(row.cw_tok ?? 0),\n      };\n    });\n\n  const [byLabelR, byModelR, byAppR] = await Promise.all([\n    client.execute(bucketSql(\"label\")),\n    client.execute(bucketSql(\"model\")),\n    client.execute(bucketSql(\"app\")),\n  ]);\n\n  // By-day aggregation — done in JS so we don't depend on dialect-specific\n  // date functions (SQLite `strftime`, Postgres `to_char`). Cheap enough\n  // for a 30-day window; if this grows, swap for a dialect-aware query.\n  const dayRows = await client.execute({\n    sql: `SELECT created_at, cost_cents_x100 FROM token_usage\n      WHERE owner_email = ? AND created_at >= ?`,\n    args: [options.ownerEmail, sinceMs],\n  });\n  const dayMap = new Map<string, { cents: number; calls: number }>();\n  for (const row of dayRows.rows as Array<Record<string, number>>) {\n    const date = new Date(Number(row.created_at)).toISOString().slice(0, 10);\n    const prev = dayMap.get(date) ?? { cents: 0, calls: 0 };\n    prev.cents += Number(row.cost_cents_x100 ?? 0);\n    prev.calls += 1;\n    dayMap.set(date, prev);\n  }\n  const byDay: DailyBucket[] = [...dayMap.entries()]\n    .map(([date, v]) => ({\n      date,\n      cents: v.cents / 100,\n      calls: v.calls,\n    }))\n    .sort((a, b) => a.date.localeCompare(b.date));\n\n  const recentRows = await client.execute({\n    sql: `SELECT id, created_at, label, app, model,\n        input_tokens, output_tokens, cache_read_tokens, cache_write_tokens,\n        cost_cents_x100\n      FROM token_usage\n      WHERE owner_email = ?\n      ORDER BY created_at DESC\n      LIMIT 50`,\n    args: [options.ownerEmail],\n  });\n  const recent: UsageRecentEntry[] = (\n    recentRows.rows as Array<Record<string, number | string | null>>\n  ).map((row) => ({\n    id: Number(row.id),\n    createdAt: Number(row.created_at),\n    label: String(row.label ?? \"chat\"),\n    app: String(row.app ?? \"\"),\n    model: String(row.model ?? \"\"),\n    inputTokens: Number(row.input_tokens ?? 0),\n    outputTokens: Number(row.output_tokens ?? 0),\n    cacheReadTokens: Number(row.cache_read_tokens ?? 0),\n    cacheWriteTokens: Number(row.cache_write_tokens ?? 0),\n    cents: Number(row.cost_cents_x100 ?? 0) / 100,\n  }));\n\n  return {\n    totalCents: Number(t.cents ?? 0) / 100,\n    totalCalls: Number(t.calls ?? 0),\n    totalInputTokens: Number(t.in_tok ?? 0),\n    totalOutputTokens: Number(t.out_tok ?? 0),\n    totalCacheReadTokens: Number(t.cr_tok ?? 0),\n    totalCacheWriteTokens: Number(t.cw_tok ?? 0),\n    sinceMs,\n    byLabel: mapBuckets(byLabelR.rows),\n    byModel: mapBuckets(byModelR.rows),\n    byApp: mapBuckets(byAppR.rows),\n    byDay,\n    recent,\n  };\n}\n"]}

package/dist/vite/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/vite/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,MAAM,CAAC;AAgV/C,MAAM,WAAW,YAAY;IAC3B,sGAAsG;IACtG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,iDAAiD;IACjD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,iDAAiD;IACjD,YAAY,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC1D;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjD;AAmRD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,GAAG,SAAS,CAMpB;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,OAAO,CAWT;AAuID;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,UAAU,CAuO1E"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/vite/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,MAAM,CAAC;AA4V/C,MAAM,WAAW,YAAY;IAC3B,sGAAsG;IACtG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,iDAAiD;IACjD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,iDAAiD;IACjD,YAAY,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC1D;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjD;AAmRD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,GAAG,SAAS,CAMpB;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,OAAO,CAWT;AAuID;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,UAAU,CAuO1E"}

package/dist/vite/client.js

@@ -169,6 +169,12 @@ function getDefaultOptimizeDeps(cwd) {
             packageName: "@agent-native/core",
         },
         {
+            specifier: "@agent-native/core/client/extensions",
+            packageName: "@agent-native/core",
+        },
+        {
+            // Legacy alias — prior name for @agent-native/core/client/extensions.
+            // Keep so deployed templates that haven't been updated still resolve.
             specifier: "@agent-native/core/client/tools",
             packageName: "@agent-native/core",
         },
@@ -247,7 +253,9 @@ function getCoreSourceAliases(cwd) {
         "@agent-native/core": path.join(coreSrc, "index.browser.ts"),
         "@agent-native/core/server": path.join(coreSrc, "server/index.ts"),
         "@agent-native/core/client": path.join(coreSrc, "client/index.ts"),
-        "@agent-native/core/client/tools": path.join(coreSrc, "client/tools/index.ts"),
+        "@agent-native/core/client/extensions": path.join(coreSrc, "client/extensions/index.ts"),
+        // Legacy alias — see exports map note above.
+        "@agent-native/core/client/tools": path.join(coreSrc, "client/extensions/index.ts"),
         "@agent-native/core/client/org": path.join(coreSrc, "client/org/index.ts"),
         "@agent-native/core/client/observability": path.join(coreSrc, "client/observability/index.ts"),
         "@agent-native/core/client/onboarding": path.join(coreSrc, "client/onboarding/index.ts"),
@@ -268,6 +276,7 @@ function getCoreSourceAliases(cwd) {
         "@agent-native/core/terminal": path.join(coreSrc, "client/terminal/index.ts"),
         "@agent-native/core/terminal/server": path.join(coreSrc, "terminal/index.ts"),
         "@agent-native/core/adapters/cli": path.join(coreSrc, "adapters/cli/index.ts"),
+        "@agent-native/core/usage": path.join(coreSrc, "usage/store.ts"),
     };
     // Escape special regex chars in the key and anchor with $
     return Object.entries(entries).map(([find, replacement]) => ({