@agentlensai/server 0.10.0 → 0.11.0

package/dist/cloud/storage/sqlite-adapter.js

@@ -0,0 +1,176 @@
+/**
+ * SQLite Storage Adapter (S-4.1, S-4.3, S-4.4)
+ *
+ * Wraps the existing SqliteEventStore to implement the StorageAdapter interface.
+ * orgId is mapped to tenantId for multi-tenant SQLite (self-hosted).
+ *
+ * S-4.3: Analytics use SQLite strftime for time bucketing.
+ * S-4.4: Full-text search uses LIKE (SQLite lacks tsvector; FTS5 optional).
+ */
+export class SqliteStorageAdapter {
+    store;
+    constructor(store) {
+        this.store = store;
+    }
+    async queryEvents(orgId, query) {
+        return this.store.queryEvents({ ...query, tenantId: orgId });
+    }
+    async getEventsBySession(orgId, sessionId) {
+        return this.store.getSessionTimeline(sessionId, orgId);
+    }
+    async getSessions(orgId, query) {
+        const result = await this.store.querySessions({ ...query, tenantId: orgId });
+        const limit = Math.min(query.limit ?? 50, 500);
+        const offset = query.offset ?? 0;
+        return {
+            items: result.sessions,
+            total: result.total,
+            hasMore: offset + result.sessions.length < result.total,
+        };
+    }
+    async getSession(orgId, sessionId) {
+        return this.store.getSession(sessionId, orgId);
+    }
+    async getAgents(orgId) {
+        return this.store.listAgents(orgId);
+    }
+    async getStats(orgId) {
+        return this.store.getStats(orgId);
+    }
+    // ═══════════════════════════════════════════════════════════
+    // S-4.3: Analytics Queries (SQLite)
+    // ═══════════════════════════════════════════════════════════
+    async getCostAnalytics(orgId, query) {
+        const analyticsResult = await this.store.getAnalytics({
+            from: query.from,
+            to: query.to,
+            agentId: query.agentId,
+            granularity: query.granularity,
+            tenantId: orgId,
+        });
+        const buckets = analyticsResult.buckets.map((b) => ({
+            timestamp: b.timestamp,
+            totalCostUsd: b.totalCostUsd,
+            eventCount: b.eventCount,
+        }));
+        return {
+            buckets,
+            totalCostUsd: analyticsResult.totals.totalCostUsd,
+            totalEvents: analyticsResult.totals.eventCount,
+        };
+    }
+    async getHealthAnalytics(_orgId, _query) {
+        // SQLite self-hosted: health_snapshots not yet implemented in the base store.
+        // Return empty results — feature parity is maintained by running the same
+        // test interface; the Postgres adapter provides the full implementation.
+        return { snapshots: [] };
+    }
+    async getTokenUsage(orgId, query) {
+        // Delegate to getAnalytics and extract token-relevant data
+        // The SQLite store tracks tokens via llm_response events in payload
+        const result = await this.store.getAnalytics({
+            from: query.from,
+            to: query.to,
+            agentId: query.agentId,
+            granularity: query.granularity,
+            tenantId: orgId,
+        });
+        // The standard analytics doesn't break out tokens, so we return
+        // what we can from the event counts. For full token data, the
+        // store would need a dedicated query.
+        const buckets = result.buckets.map((b) => ({
+            timestamp: b.timestamp,
+            inputTokens: 0,
+            outputTokens: 0,
+            totalTokens: 0,
+            llmCallCount: 0,
+        }));
+        return {
+            buckets,
+            totals: { inputTokens: 0, outputTokens: 0, totalTokens: 0, llmCallCount: 0 },
+        };
+    }
+    async getAnalytics(orgId, query) {
+        return this.store.getAnalytics({
+            from: query.from,
+            to: query.to,
+            agentId: query.agentId,
+            granularity: query.granularity,
+            tenantId: orgId,
+        });
+    }
+    // ═══════════════════════════════════════════════════════════
+    // S-4.4: Full-Text Search (SQLite — LIKE fallback)
+    // ═══════════════════════════════════════════════════════════
+    async search(orgId, query) {
+        const limit = Math.min(query.limit ?? 20, 100);
+        const offset = query.offset ?? 0;
+        const scope = query.scope ?? 'all';
+        const searchTerm = query.query.trim();
+        if (!searchTerm) {
+            return { items: [], total: 0, hasMore: false };
+        }
+        const items = [];
+        let total = 0;
+        // Search events via existing queryEvents with search parameter
+        if (scope === 'events' || scope === 'all') {
+            const eventResult = await this.store.queryEvents({
+                tenantId: orgId,
+                search: searchTerm,
+                from: query.from,
+                to: query.to,
+                limit,
+                offset,
+            });
+            for (const event of eventResult.events) {
+                const payloadStr = typeof event.payload === 'string'
+                    ? event.payload
+                    : JSON.stringify(event.payload);
+                // Create a simple headline: first 60 chars of payload containing match
+                const idx = payloadStr.toLowerCase().indexOf(searchTerm.toLowerCase());
+                const start = Math.max(0, idx - 20);
+                const headline = payloadStr.substring(start, start + 80);
+                items.push({
+                    type: 'event',
+                    id: event.id,
+                    score: 1.0, // SQLite LIKE doesn't give relevance scores
+                    headline,
+                    timestamp: event.timestamp,
+                    sessionId: event.sessionId,
+                });
+            }
+            total += eventResult.total;
+        }
+        // Search sessions via querySessions (by tags/agent name match)
+        if (scope === 'sessions' || scope === 'all') {
+            const sessionResult = await this.store.querySessions({
+                tenantId: orgId,
+                from: query.from,
+                to: query.to,
+                limit,
+                offset,
+            });
+            // Filter sessions that match the search term in agent name or tags
+            const matching = sessionResult.sessions.filter((s) => {
+                const text = `${s.agentName ?? ''} ${(s.tags ?? []).join(' ')}`.toLowerCase();
+                return text.includes(searchTerm.toLowerCase());
+            });
+            for (const session of matching) {
+                items.push({
+                    type: 'session',
+                    id: session.id,
+                    score: 1.0,
+                    headline: `${session.agentName ?? 'Unknown'} — ${(session.tags ?? []).join(', ')}`,
+                    timestamp: session.startedAt,
+                });
+            }
+            total += matching.length;
+        }
+        return {
+            items: items.slice(0, limit),
+            total,
+            hasMore: offset + Math.min(items.length, limit) < total,
+        };
+    }
+}
+//# sourceMappingURL=sqlite-adapter.js.map

package/dist/cloud/storage/sqlite-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-adapter.js","sourceRoot":"","sources":["../../../src/cloud/storage/sqlite-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAwBH,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,KAAuB;QAAvB,UAAK,GAAL,KAAK,CAAkB;IAAG,CAAC;IAExD,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,KAAiB;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,SAAiB;QACvD,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,KAAmB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACjC,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,QAAQ;YACtB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK;SACxD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,SAAiB;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,8DAA8D;IAC9D,oCAAoC;IACpC,8DAA8D;IAE9D,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,KAAqB;QACzD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YACpD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,OAAO;YACP,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY;YACjD,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,UAAU;SAC/C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,MAAsB;QAC7D,8EAA8E;QAC9E,0EAA0E;QAC1E,yEAAyE;QACzE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,KAAqB;QACtD,2DAA2D;QAC3D,oEAAoE;QACpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,gEAAgE;QAChE,8DAA8D;QAC9D,sCAAsC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,OAAO;YACP,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;SAC7E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,KAAqB;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,mDAAmD;IACnD,8DAA8D;IAE9D,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,KAAkB;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;QACnC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAEtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,KAAK,GAA0B,EAAE,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,+DAA+D;QAC/D,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YAC1C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC/C,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,UAAU;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK;gBACL,MAAM;aACP,CAAC,CAAC;YAEH,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;gBACvC,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;oBAClD,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAClC,uEAAuE;gBACvE,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;gBACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;gBACpC,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;gBAEzD,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,OAAO;oBACb,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,KAAK,EAAE,GAAG,EAAE,4CAA4C;oBACxD,QAAQ;oBACR,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CAAC;YACL,CAAC;YACD,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC;QAC7B,CAAC;QAED,+DAA+D;QAC/D,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YAC5C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;gBACnD,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK;gBACL,MAAM;aACP,CAAC,CAAC;YAEH,mEAAmE;YACnE,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACnD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC9E,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YAEH,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,SAAS;oBACf,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE,GAAG;oBACV,QAAQ,EAAE,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAClF,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC3B,CAAC;QAED,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;YAC5B,KAAK;YACL,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK;SACxD,CAAC;IACJ,CAAC;CACF"}

package/dist/cloud/tenant-pool.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Tenant-Aware Connection Pool (S-1.5)
+ *
+ * Wraps a PostgreSQL pool to automatically set `app.current_org`
+ * via SET LOCAL within a transaction. SET LOCAL is scoped to the
+ * transaction and auto-resets on commit/rollback, making it safe
+ * for connection reuse and compatible with PgBouncer transaction mode.
+ */
+export interface PoolClient {
+    query(sql: string, params?: unknown[]): Promise<{
+        rows: unknown[];
+        rowCount: number;
+    }>;
+    release(): void;
+}
+export interface Pool {
+    connect(): Promise<PoolClient>;
+    query(sql: string, params?: unknown[]): Promise<{
+        rows: unknown[];
+        rowCount: number;
+    }>;
+    end(): Promise<void>;
+}
+export interface TenantQueryResult {
+    rows: unknown[];
+    rowCount: number;
+}
+/**
+ * Execute a function within a tenant-scoped transaction.
+ *
+ * 1. Acquires connection from pool
+ * 2. BEGIN transaction
+ * 3. SET LOCAL app.current_org = orgId (scoped to transaction)
+ * 4. Execute the callback
+ * 5. COMMIT (or ROLLBACK on error)
+ * 6. Return connection to pool (app.current_org is auto-cleared)
+ */
+export declare function withTenantTransaction<T>(pool: Pool, orgId: string, fn: (client: PoolClient) => Promise<T>): Promise<T>;
+/**
+ * Execute a single query within a tenant-scoped transaction.
+ * Convenience wrapper around withTenantTransaction for simple queries.
+ */
+export declare function tenantQuery(pool: Pool, orgId: string, sql: string, params?: unknown[]): Promise<TenantQueryResult>;
+/**
+ * Execute a query WITHOUT tenant context.
+ * Use only for cross-tenant operations (e.g., admin queries, migrations).
+ */
+export declare function adminQuery(pool: Pool, sql: string, params?: unknown[]): Promise<TenantQueryResult>;
+//# sourceMappingURL=tenant-pool.d.ts.map

package/dist/cloud/tenant-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-pool.d.ts","sourceRoot":"","sources":["../../src/cloud/tenant-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,IAAI;IACnB,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GACrC,OAAO,CAAC,CAAC,CAAC,CAyBZ;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,OAAO,EAAE,GACjB,OAAO,CAAC,iBAAiB,CAAC,CAI5B;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,OAAO,EAAE,GACjB,OAAO,CAAC,iBAAiB,CAAC,CAE5B"}

package/dist/cloud/tenant-pool.js

@@ -0,0 +1,61 @@
+/**
+ * Tenant-Aware Connection Pool (S-1.5)
+ *
+ * Wraps a PostgreSQL pool to automatically set `app.current_org`
+ * via SET LOCAL within a transaction. SET LOCAL is scoped to the
+ * transaction and auto-resets on commit/rollback, making it safe
+ * for connection reuse and compatible with PgBouncer transaction mode.
+ */
+/**
+ * Execute a function within a tenant-scoped transaction.
+ *
+ * 1. Acquires connection from pool
+ * 2. BEGIN transaction
+ * 3. SET LOCAL app.current_org = orgId (scoped to transaction)
+ * 4. Execute the callback
+ * 5. COMMIT (or ROLLBACK on error)
+ * 6. Return connection to pool (app.current_org is auto-cleared)
+ */
+export async function withTenantTransaction(pool, orgId, fn) {
+    if (!orgId || typeof orgId !== 'string') {
+        throw new Error('orgId is required for tenant-scoped transactions');
+    }
+    // Basic UUID format validation
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(orgId)) {
+        throw new Error('orgId must be a valid UUID');
+    }
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN');
+        // SET LOCAL is transaction-scoped: auto-clears on COMMIT/ROLLBACK
+        // Safe for PgBouncer transaction mode
+        await client.query(`SET LOCAL app.current_org = $1`, [orgId]);
+        const result = await fn(client);
+        await client.query('COMMIT');
+        return result;
+    }
+    catch (err) {
+        await client.query('ROLLBACK');
+        throw err;
+    }
+    finally {
+        client.release();
+    }
+}
+/**
+ * Execute a single query within a tenant-scoped transaction.
+ * Convenience wrapper around withTenantTransaction for simple queries.
+ */
+export async function tenantQuery(pool, orgId, sql, params) {
+    return withTenantTransaction(pool, orgId, async (client) => {
+        return client.query(sql, params);
+    });
+}
+/**
+ * Execute a query WITHOUT tenant context.
+ * Use only for cross-tenant operations (e.g., admin queries, migrations).
+ */
+export async function adminQuery(pool, sql, params) {
+    return pool.query(sql, params);
+}
+//# sourceMappingURL=tenant-pool.js.map

package/dist/cloud/tenant-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-pool.js","sourceRoot":"","sources":["../../src/cloud/tenant-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkBH;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAU,EACV,KAAa,EACb,EAAsC;IAEtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,+BAA+B;IAC/B,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,kEAAkE;QAClE,sCAAsC;QACtC,MAAM,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAU,EACV,KAAa,EACb,GAAW,EACX,MAAkB;IAElB,OAAO,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACzD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAU,EACV,GAAW,EACX,MAAkB;IAElB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlensai/server",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "AgentLens API server — event ingestion, querying, dashboard, and alerting for AI agents",
   "type": "module",
   "license": "MIT",