@agentlensai/server 0.2.0 → 0.3.0

package/dist/routes/alerts.js

@@ -0,0 +1,133 @@
+/**
+ * Alert Endpoints (Story 12.1)
+ *
+ * POST   /api/alerts/rules       — create alert rule
+ * GET    /api/alerts/rules       — list alert rules
+ * GET    /api/alerts/rules/:id   — get single alert rule
+ * PUT    /api/alerts/rules/:id   — update alert rule
+ * DELETE /api/alerts/rules/:id   — delete alert rule
+ * GET    /api/alerts/history     — list alert history
+ */
+import { Hono } from 'hono';
+import { ulid } from 'ulid';
+import { createAlertRuleSchema, updateAlertRuleSchema } from '@agentlensai/core';
+import { NotFoundError } from '../db/errors.js';
+export function alertsRoutes(store) {
+    const app = new Hono();
+    // POST /api/alerts/rules — create alert rule
+    app.post('/rules', async (c) => {
+        const rawBody = await c.req.json().catch(() => null);
+        if (!rawBody) {
+            return c.json({ error: 'Invalid JSON body', status: 400 }, 400);
+        }
+        const parseResult = createAlertRuleSchema.safeParse(rawBody);
+        if (!parseResult.success) {
+            return c.json({
+                error: 'Validation failed',
+                status: 400,
+                details: parseResult.error.issues.map((issue) => ({
+                    path: issue.path.join('.'),
+                    message: issue.message,
+                })),
+            }, 400);
+        }
+        const input = parseResult.data;
+        const now = new Date().toISOString();
+        const rule = {
+            id: ulid(),
+            name: input.name,
+            enabled: input.enabled,
+            condition: input.condition,
+            threshold: input.threshold,
+            windowMinutes: input.windowMinutes,
+            scope: input.scope,
+            notifyChannels: input.notifyChannels,
+            createdAt: now,
+            updatedAt: now,
+        };
+        await store.createAlertRule(rule);
+        return c.json(rule, 201);
+    });
+    // GET /api/alerts/rules — list all alert rules
+    app.get('/rules', async (c) => {
+        const rules = await store.listAlertRules();
+        return c.json({ rules });
+    });
+    // GET /api/alerts/rules/:id — get single alert rule
+    app.get('/rules/:id', async (c) => {
+        const id = c.req.param('id');
+        const rule = await store.getAlertRule(id);
+        if (!rule) {
+            return c.json({ error: 'Alert rule not found', status: 404 }, 404);
+        }
+        return c.json(rule);
+    });
+    // PUT /api/alerts/rules/:id — update alert rule
+    app.put('/rules/:id', async (c) => {
+        const id = c.req.param('id');
+        const rawBody = await c.req.json().catch(() => null);
+        if (!rawBody) {
+            return c.json({ error: 'Invalid JSON body', status: 400 }, 400);
+        }
+        const parseResult = updateAlertRuleSchema.safeParse(rawBody);
+        if (!parseResult.success) {
+            return c.json({
+                error: 'Validation failed',
+                status: 400,
+                details: parseResult.error.issues.map((issue) => ({
+                    path: issue.path.join('.'),
+                    message: issue.message,
+                })),
+            }, 400);
+        }
+        const updates = parseResult.data;
+        try {
+            await store.updateAlertRule(id, {
+                ...updates,
+                updatedAt: new Date().toISOString(),
+            });
+        }
+        catch (err) {
+            if (err instanceof NotFoundError) {
+                return c.json({ error: 'Alert rule not found', status: 404 }, 404);
+            }
+            throw err;
+        }
+        const updated = await store.getAlertRule(id);
+        return c.json(updated);
+    });
+    // DELETE /api/alerts/rules/:id — delete alert rule
+    app.delete('/rules/:id', async (c) => {
+        const id = c.req.param('id');
+        try {
+            await store.deleteAlertRule(id);
+        }
+        catch (err) {
+            if (err instanceof NotFoundError) {
+                return c.json({ error: 'Alert rule not found', status: 404 }, 404);
+            }
+            throw err;
+        }
+        return c.json({ id, deleted: true });
+    });
+    // GET /api/alerts/history — list alert history
+    app.get('/history', async (c) => {
+        const ruleId = c.req.query('ruleId');
+        const limitStr = c.req.query('limit');
+        const offsetStr = c.req.query('offset');
+        const limit = limitStr ? Math.max(1, Math.min(parseInt(limitStr, 10) || 50, 500)) : 50;
+        const offset = offsetStr ? Math.max(0, parseInt(offsetStr, 10) || 0) : 0;
+        const result = await store.listAlertHistory({
+            ruleId: ruleId ?? undefined,
+            limit,
+            offset,
+        });
+        return c.json({
+            entries: result.entries,
+            total: result.total,
+            hasMore: offset + result.entries.length < result.total,
+        });
+    });
+    return app;
+}
+//# sourceMappingURL=alerts.js.map

package/dist/routes/alerts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.js","sourceRoot":"","sources":["../../src/routes/alerts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAIjF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAgC,CAAC;IAErD,6CAA6C;IAC7C,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,mBAAmB;gBAC1B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAqD,EAAE,EAAE,CAAC,CAAC;oBAChG,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB,CAAC,CAAC;aACJ,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,IAAI,GAAc;YACtB,EAAE,EAAE,IAAI,EAAE;YACV,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAElC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;QAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,mBAAmB;gBAC1B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAqD,EAAE,EAAE,CAAC,CAAC;oBAChG,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB,CAAC,CAAC;aACJ,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC;QAEjC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE;gBAC9B,GAAG,OAAO;gBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAExC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC;YAC1C,MAAM,EAAE,MAAM,IAAI,SAAS;YAC3B,KAAK;YACL,MAAM;SACP,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK;SACvD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/analytics.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Analytics Endpoints (Story 11.2)
+ *
+ * GET /api/analytics         — bucketed metrics over time
+ * GET /api/analytics/costs   — cost breakdown by agent and time period
+ * GET /api/analytics/agents  — per-agent metrics (session count, error rate, avg duration, total cost)
+ * GET /api/analytics/tools   — tool usage statistics (frequency, avg duration, error rate per tool)
+ */
+import { Hono } from 'hono';
+import type { IEventStore } from '@agentlensai/core';
+import type { AuthVariables } from '../middleware/auth.js';
+import type { SqliteDb } from '../db/index.js';
+export declare function analyticsRoutes(store: IEventStore, db: SqliteDb): Hono<{
+    Variables: AuthVariables;
+}, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=analytics.d.ts.map

package/dist/routes/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../src/routes/analytics.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG/C,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ;eAC5B,aAAa;0CAuXhD"}

package/dist/routes/analytics.js

@@ -0,0 +1,293 @@
+/**
+ * Analytics Endpoints (Story 11.2)
+ *
+ * GET /api/analytics         — bucketed metrics over time
+ * GET /api/analytics/costs   — cost breakdown by agent and time period
+ * GET /api/analytics/agents  — per-agent metrics (session count, error rate, avg duration, total cost)
+ * GET /api/analytics/tools   — tool usage statistics (frequency, avg duration, error rate per tool)
+ */
+import { Hono } from 'hono';
+import { sql, gte, lte, eq, and } from 'drizzle-orm';
+import { events, sessions } from '../db/schema.sqlite.js';
+export function analyticsRoutes(store, db) {
+    const app = new Hono();
+    // GET /api/analytics — bucketed metrics over time
+    app.get('/', async (c) => {
+        const from = c.req.query('from') ?? new Date(Date.now() - 86400_000).toISOString();
+        const to = c.req.query('to') ?? new Date().toISOString();
+        const granularity = (c.req.query('granularity') ?? 'hour');
+        const agentId = c.req.query('agentId');
+        if (!['hour', 'day', 'week'].includes(granularity)) {
+            return c.json({ error: 'Invalid granularity. Use: hour, day, week', status: 400 }, 400);
+        }
+        const result = await store.getAnalytics({ from, to, agentId, granularity });
+        return c.json(result);
+    });
+    // GET /api/analytics/costs — cost breakdown by agent and time
+    app.get('/costs', async (c) => {
+        const from = c.req.query('from') ?? new Date(Date.now() - 86400_000).toISOString();
+        const to = c.req.query('to') ?? new Date().toISOString();
+        const granularity = (c.req.query('granularity') ?? 'day');
+        const formatStr = granularity === 'hour'
+            ? '%Y-%m-%dT%H:00:00Z'
+            : granularity === 'day'
+                ? '%Y-%m-%dT00:00:00Z'
+                : '%Y-%W';
+        // Cost by agent
+        const byAgent = db
+            .all(sql `
+          SELECT
+            agent_id as agentId,
+            COALESCE(SUM(json_extract(payload, '$.costUsd')), 0) as totalCostUsd,
+            COALESCE(SUM(json_extract(payload, '$.inputTokens')), 0) as totalInputTokens,
+            COALESCE(SUM(json_extract(payload, '$.outputTokens')), 0) as totalOutputTokens,
+            COALESCE(SUM(json_extract(payload, '$.totalTokens')), 0) as totalTokens,
+            COUNT(*) as eventCount
+          FROM events
+          WHERE event_type = 'cost_tracked'
+            AND timestamp >= ${from}
+            AND timestamp <= ${to}
+          GROUP BY agent_id
+          ORDER BY totalCostUsd DESC
+        `);
+        // Cost over time — broken down by agent for stacked chart
+        const overTimeByAgent = db
+            .all(sql `
+          SELECT
+            strftime(${formatStr}, timestamp) as bucket,
+            agent_id as agentId,
+            COALESCE(SUM(json_extract(payload, '$.costUsd')), 0) as totalCostUsd,
+            COUNT(*) as eventCount
+          FROM events
+          WHERE event_type = 'cost_tracked'
+            AND timestamp >= ${from}
+            AND timestamp <= ${to}
+          GROUP BY bucket, agent_id
+          ORDER BY bucket ASC
+        `);
+        // Pivot: group by bucket, with per-agent cost fields
+        const bucketMap = new Map();
+        for (const row of overTimeByAgent) {
+            const existing = bucketMap.get(row.bucket) ?? {
+                bucket: row.bucket,
+                totalCostUsd: 0,
+                eventCount: 0,
+                byAgent: {},
+            };
+            existing.totalCostUsd += Number(row.totalCostUsd);
+            existing.eventCount += Number(row.eventCount);
+            existing.byAgent[row.agentId] = Number(row.totalCostUsd);
+            bucketMap.set(row.bucket, existing);
+        }
+        const overTime = Array.from(bucketMap.values());
+        // Total cost
+        const total = db.get(sql `
+        SELECT
+          COALESCE(SUM(json_extract(payload, '$.costUsd')), 0) as totalCostUsd,
+          COALESCE(SUM(json_extract(payload, '$.inputTokens')), 0) as totalInputTokens,
+          COALESCE(SUM(json_extract(payload, '$.outputTokens')), 0) as totalOutputTokens,
+          COALESCE(SUM(json_extract(payload, '$.totalTokens')), 0) as totalTokens
+        FROM events
+        WHERE event_type = 'cost_tracked'
+          AND timestamp >= ${from}
+          AND timestamp <= ${to}
+      `);
+        return c.json({
+            byAgent: byAgent.map((r) => ({
+                agentId: r.agentId,
+                totalCostUsd: Number(r.totalCostUsd),
+                totalInputTokens: Number(r.totalInputTokens),
+                totalOutputTokens: Number(r.totalOutputTokens),
+                totalTokens: Number(r.totalTokens),
+                eventCount: Number(r.eventCount),
+            })),
+            overTime: overTime.map((r) => ({
+                bucket: r.bucket,
+                totalCostUsd: Number(r.totalCostUsd),
+                eventCount: Number(r.eventCount),
+                byAgent: r.byAgent,
+            })),
+            totals: {
+                totalCostUsd: Number(total?.totalCostUsd ?? 0),
+                totalInputTokens: Number(total?.totalInputTokens ?? 0),
+                totalOutputTokens: Number(total?.totalOutputTokens ?? 0),
+                totalTokens: Number(total?.totalTokens ?? 0),
+            },
+        });
+    });
+    // GET /api/analytics/agents — per-agent metrics
+    app.get('/agents', async (c) => {
+        const from = c.req.query('from') ?? new Date(Date.now() - 86400_000).toISOString();
+        const to = c.req.query('to') ?? new Date().toISOString();
+        const rows = db.all(sql `
+        SELECT
+          s.agent_id as agentId,
+          COUNT(DISTINCT s.id) as sessionCount,
+          COALESCE(SUM(s.event_count), 0) as totalEvents,
+          COALESCE(SUM(s.error_count), 0) as totalErrors,
+          COALESCE(SUM(s.total_cost_usd), 0) as totalCostUsd,
+          COALESCE(AVG(
+            CASE
+              WHEN s.ended_at IS NOT NULL
+              THEN (julianday(s.ended_at) - julianday(s.started_at)) * 86400000
+              ELSE NULL
+            END
+          ), 0) as avgDurationMs
+        FROM sessions s
+        WHERE s.started_at >= ${from}
+          AND s.started_at <= ${to}
+        GROUP BY s.agent_id
+        ORDER BY sessionCount DESC
+      `);
+        return c.json({
+            agents: rows.map((r) => ({
+                agentId: r.agentId,
+                sessionCount: Number(r.sessionCount),
+                totalEvents: Number(r.totalEvents),
+                totalErrors: Number(r.totalErrors),
+                errorRate: Number(r.totalEvents) > 0
+                    ? Number(r.totalErrors) / Number(r.totalEvents)
+                    : 0,
+                totalCostUsd: Number(r.totalCostUsd),
+                avgDurationMs: Number(r.avgDurationMs),
+            })),
+        });
+    });
+    // GET /api/analytics/llm — LLM call analytics
+    app.get('/llm', async (c) => {
+        const from = c.req.query('from') ?? new Date(Date.now() - 86400_000).toISOString();
+        const to = c.req.query('to') ?? new Date().toISOString();
+        const granularity = (c.req.query('granularity') ?? 'hour');
+        const agentId = c.req.query('agentId');
+        const model = c.req.query('model');
+        const provider = c.req.query('provider');
+        if (!['hour', 'day', 'week'].includes(granularity)) {
+            return c.json({ error: 'Invalid granularity. Use: hour, day, week', status: 400 }, 400);
+        }
+        const formatStr = granularity === 'hour'
+            ? '%Y-%m-%dT%H:00:00Z'
+            : granularity === 'day'
+                ? '%Y-%m-%dT00:00:00Z'
+                : '%Y-%W';
+        // Summary totals
+        const summary = db.get(sql `
+        SELECT
+          COUNT(*) as totalCalls,
+          COALESCE(SUM(json_extract(payload, '$.costUsd')), 0) as totalCostUsd,
+          COALESCE(SUM(json_extract(payload, '$.usage.inputTokens')), 0) as totalInputTokens,
+          COALESCE(SUM(json_extract(payload, '$.usage.outputTokens')), 0) as totalOutputTokens,
+          COALESCE(AVG(json_extract(payload, '$.latencyMs')), 0) as avgLatencyMs
+        FROM events
+        WHERE event_type = 'llm_response'
+          AND timestamp >= ${from}
+          AND timestamp <= ${to}
+          ${agentId ? sql `AND agent_id = ${agentId}` : sql ``}
+          ${model ? sql `AND json_extract(payload, '$.model') = ${model}` : sql ``}
+          ${provider ? sql `AND json_extract(payload, '$.provider') = ${provider}` : sql ``}
+      `);
+        const totalCalls = Number(summary?.totalCalls ?? 0);
+        const totalCostUsd = Number(summary?.totalCostUsd ?? 0);
+        // By model breakdown
+        const byModel = db.all(sql `
+        SELECT
+          json_extract(payload, '$.provider') as provider,
+          json_extract(payload, '$.model') as model,
+          COUNT(*) as calls,
+          COALESCE(SUM(json_extract(payload, '$.costUsd')), 0) as costUsd,
+          COALESCE(SUM(json_extract(payload, '$.usage.inputTokens')), 0) as inputTokens,
+          COALESCE(SUM(json_extract(payload, '$.usage.outputTokens')), 0) as outputTokens,
+          COALESCE(AVG(json_extract(payload, '$.latencyMs')), 0) as avgLatencyMs
+        FROM events
+        WHERE event_type = 'llm_response'
+          AND timestamp >= ${from}
+          AND timestamp <= ${to}
+          ${agentId ? sql `AND agent_id = ${agentId}` : sql ``}
+          ${model ? sql `AND json_extract(payload, '$.model') = ${model}` : sql ``}
+          ${provider ? sql `AND json_extract(payload, '$.provider') = ${provider}` : sql ``}
+        GROUP BY provider, model
+        ORDER BY costUsd DESC
+      `);
+        // By time bucket
+        const byTime = db.all(sql `
+        SELECT
+          strftime(${formatStr}, timestamp) as bucket,
+          COUNT(*) as calls,
+          COALESCE(SUM(json_extract(payload, '$.costUsd')), 0) as costUsd,
+          COALESCE(SUM(json_extract(payload, '$.usage.inputTokens')), 0) as inputTokens,
+          COALESCE(SUM(json_extract(payload, '$.usage.outputTokens')), 0) as outputTokens,
+          COALESCE(AVG(json_extract(payload, '$.latencyMs')), 0) as avgLatencyMs
+        FROM events
+        WHERE event_type = 'llm_response'
+          AND timestamp >= ${from}
+          AND timestamp <= ${to}
+          ${agentId ? sql `AND agent_id = ${agentId}` : sql ``}
+          ${model ? sql `AND json_extract(payload, '$.model') = ${model}` : sql ``}
+          ${provider ? sql `AND json_extract(payload, '$.provider') = ${provider}` : sql ``}
+        GROUP BY bucket
+        ORDER BY bucket ASC
+      `);
+        return c.json({
+            summary: {
+                totalCalls,
+                totalCostUsd,
+                totalInputTokens: Number(summary?.totalInputTokens ?? 0),
+                totalOutputTokens: Number(summary?.totalOutputTokens ?? 0),
+                avgLatencyMs: Number(summary?.avgLatencyMs ?? 0),
+                avgCostPerCall: totalCalls > 0 ? totalCostUsd / totalCalls : 0,
+            },
+            byModel: byModel.map((r) => ({
+                provider: r.provider,
+                model: r.model,
+                calls: Number(r.calls),
+                costUsd: Number(r.costUsd),
+                inputTokens: Number(r.inputTokens),
+                outputTokens: Number(r.outputTokens),
+                avgLatencyMs: Number(r.avgLatencyMs),
+            })),
+            byTime: byTime.map((r) => ({
+                bucket: r.bucket,
+                calls: Number(r.calls),
+                costUsd: Number(r.costUsd),
+                inputTokens: Number(r.inputTokens),
+                outputTokens: Number(r.outputTokens),
+                avgLatencyMs: Number(r.avgLatencyMs),
+            })),
+        });
+    });
+    // GET /api/analytics/tools — tool usage statistics
+    app.get('/tools', async (c) => {
+        const from = c.req.query('from') ?? new Date(Date.now() - 86400_000).toISOString();
+        const to = c.req.query('to') ?? new Date().toISOString();
+        const rows = db.all(sql `
+        SELECT
+          json_extract(payload, '$.toolName') as toolName,
+          COUNT(*) as callCount,
+          SUM(CASE WHEN event_type = 'tool_error' THEN 1 ELSE 0 END) as errorCount,
+          COALESCE(AVG(
+            CASE WHEN event_type IN ('tool_response', 'tool_error')
+            THEN json_extract(payload, '$.durationMs')
+            ELSE NULL END
+          ), 0) as avgDurationMs
+        FROM events
+        WHERE event_type IN ('tool_call', 'tool_response', 'tool_error')
+          AND timestamp >= ${from}
+          AND timestamp <= ${to}
+          AND json_extract(payload, '$.toolName') IS NOT NULL
+        GROUP BY toolName
+        ORDER BY callCount DESC
+      `);
+        return c.json({
+            tools: rows.map((r) => ({
+                toolName: r.toolName,
+                callCount: Number(r.callCount),
+                errorCount: Number(r.errorCount),
+                errorRate: Number(r.callCount) > 0
+                    ? Number(r.errorCount) / Number(r.callCount)
+                    : 0,
+                avgDurationMs: Number(r.avgDurationMs),
+            })),
+        });
+    });
+    return app;
+}
+//# sourceMappingURL=analytics.js.map

package/dist/routes/analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/routes/analytics.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAIrD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,UAAU,eAAe,CAAC,KAAkB,EAAE,EAAY;IAC9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAgC,CAAC;IAErD,kDAAkD;IAClD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,MAAM,CAA4B,CAAC;QACtF,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEvC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAE5E,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAA4B,CAAC;QAErF,MAAM,SAAS,GACb,WAAW,KAAK,MAAM;YACpB,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,WAAW,KAAK,KAAK;gBACrB,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,OAAO,CAAC;QAEhB,gBAAgB;QAChB,MAAM,OAAO,GAAG,EAAE;aACf,GAAG,CAQF,GAAG,CAAA;;;;;;;;;;+BAUoB,IAAI;+BACJ,EAAE;;;SAGxB,CACF,CAAC;QAEJ,0DAA0D;QAC1D,MAAM,eAAe,GAAG,EAAE;aACvB,GAAG,CAMF,GAAG,CAAA;;uBAEY,SAAS;;;;;;+BAMD,IAAI;+BACJ,EAAE;;;SAGxB,CACF,CAAC;QAEJ,qDAAqD;QACrD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyG,CAAC;QACnI,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI;gBAC5C,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,YAAY,EAAE,CAAC;gBACf,UAAU,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE;aACZ,CAAC;YACF,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAClD,QAAQ,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC9C,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACzD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAEhD,aAAa;QACb,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAMlB,GAAG,CAAA;;;;;;;;6BAQoB,IAAI;6BACJ,EAAE;OACxB,CACF,CAAC;QAEF,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;gBACpC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBAC5C,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC;gBAC9C,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;gBAClC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;aACjC,CAAC,CAAC;YACH,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;gBACpC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;gBAChC,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;YACH,MAAM,EAAE;gBACN,YAAY,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC;gBAC9C,gBAAgB,EAAE,MAAM,CAAC,KAAK,EAAE,gBAAgB,IAAI,CAAC,CAAC;gBACtD,iBAAiB,EAAE,MAAM,CAAC,KAAK,EAAE,iBAAiB,IAAI,CAAC,CAAC;gBACxD,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC;aAC7C;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEzD,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAQjB,GAAG,CAAA;;;;;;;;;;;;;;;gCAeuB,IAAI;gCACJ,EAAE;;;OAG3B,CACF,CAAC;QAEF,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;gBACpC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;gBAClC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;gBAClC,SAAS,EACP,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;oBACvB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;oBAC/C,CAAC,CAAC,CAAC;gBACP,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;gBACpC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;aACvC,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,8CAA8C;IAC9C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,MAAM,CAA4B,CAAC;QACtF,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,SAAS,GACb,WAAW,KAAK,MAAM;YACpB,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,WAAW,KAAK,KAAK;gBACrB,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,OAAO,CAAC;QAEhB,iBAAiB;QACjB,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,CAOpB,GAAG,CAAA;;;;;;;;;6BASoB,IAAI;6BACJ,EAAE;YACnB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA,kBAAkB,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE;YAChD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAA,0CAA0C,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE;YACpE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAA,6CAA6C,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE;OAClF,CACF,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC,CAAC,CAAC;QAExD,qBAAqB;QACrB,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,CASpB,GAAG,CAAA;;;;;;;;;;;6BAWoB,IAAI;6BACJ,EAAE;YACnB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA,kBAAkB,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE;YAChD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAA,0CAA0C,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE;YACpE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAA,6CAA6C,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE;;;OAGlF,CACF,CAAC;QAEF,iBAAiB;QACjB,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAQnB,GAAG,CAAA;;qBAEY,SAAS;;;;;;;;6BAQD,IAAI;6BACJ,EAAE;YACnB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA,kBAAkB,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE;YAChD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAA,0CAA0C,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE;YACpE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAA,6CAA6C,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE;;;OAGlF,CACF,CAAC;QAEF,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE;gBACP,UAAU;gBACV,YAAY;gBACZ,gBAAgB,EAAE,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,CAAC,CAAC;gBACxD,iBAAiB,EAAE,MAAM,CAAC,OAAO,EAAE,iBAAiB,IAAI,CAAC,CAAC;gBAC1D,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC,CAAC;gBAChD,cAAc,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;aAC/D;YACD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBACtB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC1B,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;gBAClC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;gBACpC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;aACrC,CAAC,CAAC;YACH,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBACtB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC1B,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;gBAClC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;gBACpC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;aACrC,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEzD,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAMjB,GAAG,CAAA;;;;;;;;;;;;6BAYoB,IAAI;6BACJ,EAAE;;;;OAIxB,CACF,CAAC;QAEF,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC9B,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;gBAChC,SAAS,EACP,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC;oBACrB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC5C,CAAC,CAAC,CAAC;gBACP,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;aACvC,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/config.d.ts

@@ -11,6 +11,10 @@ import { Hono } from 'hono';
 import { z } from 'zod';
 import type { AuthVariables } from '../middleware/auth.js';
 import type { SqliteDb } from '../db/index.js';
+/**
+ * Compare a plaintext secret against a stored hash using timing-safe comparison.
+ */
+export declare function verifySecretHash(plaintext: string, storedHash: string): boolean;
 /** Schema for config update request */
 declare const configUpdateSchema: z.ZodObject<{
     retentionDays: z.ZodOptional<z.ZodNumber>;
@@ -32,6 +36,7 @@ declare const configUpdateSchema: z.ZodObject<{
     formBridgeSecret?: string | undefined;
 }>;
 export type ConfigValues = z.infer<typeof configUpdateSchema>;
+export declare function getConfigValue(db: SqliteDb, key: string): string | null;
 export declare function configRoutes(db: SqliteDb): Hono<{
     Variables: AuthVariables;
 }, import("hono/types").BlankSchema, "/">;

package/dist/routes/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG/C,uCAAuC;AACvC,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAMtB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAoC9D,wBAAgB,YAAY,CAAC,EAAE,EAAE,QAAQ;eACL,aAAa;0CAuDhD"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAW/C;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAM/E;AAED,uCAAuC;AACvC,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAMtB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAS9D,wBAAgB,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKvE;AAsBD,wBAAgB,YAAY,CAAC,EAAE,EAAE,QAAQ;eACL,aAAa;0CAwDhD"}

package/dist/routes/config.js

@@ -10,7 +10,26 @@
 import { Hono } from 'hono';
 import { sql } from 'drizzle-orm';
 import { z } from 'zod';
+import { createHash, timingSafeEqual } from 'node:crypto';
 import { getConfig } from '../config.js';
+/**
+ * Hash a secret with SHA-256 for storage.
+ * Used for webhook secrets so plaintext is never persisted.
+ */
+function hashSecret(secret) {
+    return createHash('sha256').update(secret).digest('hex');
+}
+/**
+ * Compare a plaintext secret against a stored hash using timing-safe comparison.
+ */
+export function verifySecretHash(plaintext, storedHash) {
+    const computedHash = hashSecret(plaintext);
+    const a = Buffer.from(computedHash, 'utf8');
+    const b = Buffer.from(storedHash, 'utf8');
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
 /** Schema for config update request */
 const configUpdateSchema = z.object({
     retentionDays: z.number().int().min(0).max(3650).optional(),
@@ -25,7 +44,7 @@ const configUpdateSchema = z.object({
 function ensureConfigTable(db) {
     db.run(sql `CREATE TABLE IF NOT EXISTS config_kv (key TEXT PRIMARY KEY, value TEXT NOT NULL)`);
 }
-function getConfigValue(db, key) {
+export function getConfigValue(db, key) {
     const row = db.get(sql `SELECT value FROM config_kv WHERE key = ${key}`);
     return row?.value ?? null;
 }
@@ -48,16 +67,15 @@ function getAllConfig(db) {
 export function configRoutes(db) {
     const app = new Hono();
     ensureConfigTable(db);
-    // GET /api/config — current config
+    // GET /api/config — current config (secrets are never returned)
     app.get('/', (c) => {
         const config = getAllConfig(db);
-        // Mask secrets in response
         return c.json({
             retentionDays: config.retentionDays,
             agentGateUrl: config.agentGateUrl,
-            agentGateSecret: config.agentGateSecret ? '••••••••' : '',
+            agentGateSecretSet: !!config.agentGateSecret,
             formBridgeUrl: config.formBridgeUrl,
-            formBridgeSecret: config.formBridgeSecret ? '••••••••' : '',
+            formBridgeSecretSet: !!config.formBridgeSecret,
         });
     });
     // PUT /api/config — update config values
@@ -82,13 +100,15 @@ export function configRoutes(db) {
             setConfigValue(db, 'agentGateUrl', updates.agentGateUrl);
         }
         if (updates.agentGateSecret !== undefined) {
-            setConfigValue(db, 'agentGateSecret', updates.agentGateSecret);
+            // Store hash of secret, never plaintext
+            setConfigValue(db, 'agentGateSecret', hashSecret(updates.agentGateSecret));
         }
         if (updates.formBridgeUrl !== undefined) {
             setConfigValue(db, 'formBridgeUrl', updates.formBridgeUrl);
         }
         if (updates.formBridgeSecret !== undefined) {
-            setConfigValue(db, 'formBridgeSecret', updates.formBridgeSecret);
+            // Store hash of secret, never plaintext
+            setConfigValue(db, 'formBridgeSecret', hashSecret(updates.formBridgeSecret));
         }
         return c.json({ ok: true });
     });

package/dist/routes/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,uCAAuC;AACvC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC3D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC7C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC9C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAIH;;GAEG;AACH,SAAS,iBAAiB,CAAC,EAAY;IACrC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAA,kFAAkF,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,cAAc,CAAC,EAAY,EAAE,GAAW;IAC/C,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAChB,GAAG,CAAA,2CAA2C,GAAG,EAAE,CACpD,CAAC;IACF,OAAO,GAAG,EAAE,KAAK,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,cAAc,CAAC,EAAY,EAAE,GAAW,EAAE,KAAa;IAC9D,EAAE,CAAC,GAAG,CACJ,GAAG,CAAA,8CAA8C,GAAG,KAAK,KAAK,4CAA4C,KAAK,EAAE,CAClH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EAAY;IAChC,MAAM,YAAY,GAAG,SAAS,EAAE,CAAC;IACjC,OAAO;QACL,aAAa,EAAE,CAAC,GAAG,EAAE;YACnB,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;YAC9C,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC;QACnE,CAAC,CAAC,EAAE;QACJ,YAAY,EAAE,cAAc,CAAC,EAAE,EAAE,cAAc,CAAC,IAAI,EAAE;QACtD,eAAe,EAAE,cAAc,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,EAAE;QAC5D,aAAa,EAAE,cAAc,CAAC,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE;QACxD,gBAAgB,EAAE,cAAc,CAAC,EAAE,EAAE,kBAAkB,CAAC,IAAI,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAY;IACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAgC,CAAC;IAErD,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAEtB,mCAAmC;IACnC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QAChC,2BAA2B;QAC3B,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YACzD,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;SAC5D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,mBAAmB;gBAC1B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM;aAClC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC;QAEjC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACxC,cAAc,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACvC,cAAc,CAAC,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC1C,cAAc,CAAC,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACxC,cAAc,CAAC,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC3C,cAAc,CAAC,EAAE,EAAE,kBAAkB,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG1D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC;;;GAGG;AACH,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,UAAkB;IACpE,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,uCAAuC;AACvC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC3D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC7C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC9C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAIH;;GAEG;AACH,SAAS,iBAAiB,CAAC,EAAY;IACrC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAA,kFAAkF,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAY,EAAE,GAAW;IACtD,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAChB,GAAG,CAAA,2CAA2C,GAAG,EAAE,CACpD,CAAC;IACF,OAAO,GAAG,EAAE,KAAK,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,cAAc,CAAC,EAAY,EAAE,GAAW,EAAE,KAAa;IAC9D,EAAE,CAAC,GAAG,CACJ,GAAG,CAAA,8CAA8C,GAAG,KAAK,KAAK,4CAA4C,KAAK,EAAE,CAClH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EAAY;IAChC,MAAM,YAAY,GAAG,SAAS,EAAE,CAAC;IACjC,OAAO;QACL,aAAa,EAAE,CAAC,GAAG,EAAE;YACnB,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;YAC9C,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC;QACnE,CAAC,CAAC,EAAE;QACJ,YAAY,EAAE,cAAc,CAAC,EAAE,EAAE,cAAc,CAAC,IAAI,EAAE;QACtD,eAAe,EAAE,cAAc,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,EAAE;QAC5D,aAAa,EAAE,cAAc,CAAC,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE;QACxD,gBAAgB,EAAE,cAAc,CAAC,EAAE,EAAE,kBAAkB,CAAC,IAAI,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAY;IACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAgC,CAAC;IAErD,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAEtB,gEAAgE;IAChE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe;YAC5C,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB;SAC/C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,mBAAmB;gBAC1B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM;aAClC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC;QAEjC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACxC,cAAc,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACvC,cAAc,CAAC,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC1C,wCAAwC;YACxC,cAAc,CAAC,EAAE,EAAE,iBAAiB,EAAE,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACxC,cAAc,CAAC,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC3C,wCAAwC;YACxC,cAAc,CAAC,EAAE,EAAE,kBAAkB,EAAE,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/events.d.ts

@@ -6,7 +6,7 @@
  * GET  /api/events/:id   — get single event
  */
 import { Hono } from 'hono';
-import type { IEventStore } from '@agentlens/core';
+import type { IEventStore } from '@agentlensai/core';
 import type { AuthVariables } from '../middleware/auth.js';
 export declare function eventsRoutes(store: IEventStore): Hono<{
     Variables: AuthVariables;

package/dist/routes/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/routes/events.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAO3D,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW;eACX,aAAa;0CAyKhD"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/routes/events.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAQ3D,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW;eACX,aAAa;0CAuLhD"}

package/dist/routes/events.js

@@ -8,7 +8,8 @@
 import { Hono } from 'hono';
 import { ulid } from 'ulid';
 import { z } from 'zod';
-import { ingestEventSchema, computeEventHash, truncatePayload, DEFAULT_PAGE_SIZE, MAX_PAGE_SIZE, } from '@agentlens/core';
+import { ingestEventSchema, computeEventHash, truncatePayload, DEFAULT_PAGE_SIZE, MAX_PAGE_SIZE, } from '@agentlensai/core';
+import { eventBus } from '../lib/event-bus.js';
 /** Schema for the batch ingestion request body */
 const ingestBatchSchema = z.object({
     events: z.array(ingestEventSchema).min(1).max(1000),
@@ -43,9 +44,8 @@ export function eventsRoutes(store) {
         const allProcessed = [];
         // Phase 1: Build all events (validate and compute hashes) without writing
         for (const [sessionId, sessionEvents] of bySession) {
-            // Get the last event hash for this session to chain from
-            const timeline = await store.getSessionTimeline(sessionId);
-            let prevHash = timeline.length > 0 ? timeline[timeline.length - 1].hash : null;
+            // Get the last event hash for this session to chain from (optimized)
+            let prevHash = await store.getLastEventHash(sessionId);
             for (const input of sessionEvents) {
                 const id = ulid();
                 const timestamp = input.timestamp ?? new Date().toISOString();
@@ -99,6 +99,19 @@ export function eventsRoutes(store) {
             const message = error instanceof Error ? error.message : 'Unknown error';
             return c.json({ error: `Batch insert failed: ${message}`, status: 500 }, 500);
         }
+        // Emit events to EventBus for SSE fan-out (async, non-blocking)
+        const now = new Date().toISOString();
+        for (const event of allProcessed) {
+            eventBus.emit({ type: 'event_ingested', event, timestamp: now });
+        }
+        // Emit session updates for affected sessions
+        const affectedSessionIds = new Set(allProcessed.map((e) => e.sessionId));
+        for (const sessionId of affectedSessionIds) {
+            const session = await store.getSession(sessionId);
+            if (session) {
+                eventBus.emit({ type: 'session_updated', session, timestamp: now });
+            }
+        }
         return c.json({
             ingested: allProcessed.length,
             events: allProcessed.map((e) => ({ id: e.id, hash: e.hash })),