@hailer/mcp 1.2.1 → 2.0.0-beta.10

package/dist/public-chat/graduate.js

@@ -0,0 +1,593 @@
+"use strict";
+/**
+ * Public chat graduation handler.
+ *
+ * Endpoint that runs at the tail of the demo-chat → workspace flow. The
+ * frontend opens Hailer's `/authorize/user-api-key` popup with this
+ * endpoint as `redirectUri`. Hailer POSTs the user's freshly-minted
+ * apiKey back to us as form-encoded body; we use it to:
+ *
+ *   1. Resolve the user's workspace and persist admin credentials so the
+ *      bot webhook handler can authenticate later activity events.
+ *   2. Install the Agent Directory workflow if the (brand-new) workspace
+ *      doesn't have one.
+ *   3. Create a bot activity directly in the Deployed phase. The phase
+ *      webhook (configured during install) fires back to our own server,
+ *      which auto-provisions the bot's Hailer user.
+ *   4. Poll the activity until `hailerProfile` is set — i.e., the bot
+ *      account exists and BotManager can pick it up.
+ *   5. Redirect the popup to Hailer's `/authorize/complete` page so the
+ *      surrounding frontend logic knows we're done.
+ *
+ * No idempotent re-claim (each authorize creates a fresh bot). If
+ * STUDIO_URL is set, the background task additionally pre-warms a
+ * Studio session for the new user so they have a ready coding session
+ * waiting on their first visit.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PUBLIC_CHAT_AUTHORIZE_ROUTE = void 0;
+exports.createPublicChatAuthorizeHandler = createPublicChatAuthorizeHandler;
+const crypto = __importStar(require("crypto"));
+const logger_1 = require("../lib/logger");
+const config_1 = require("../config");
+const hailer_clients_1 = require("../mcp/hailer-clients");
+const hailer_rpc_1 = require("../mcp/hailer-rpc");
+const workspace_admin_store_1 = require("../mcp/workspace-admin-store");
+const workflow_installer_1 = require("../bot-config/workflow-installer");
+const webhook_handler_1 = require("../mcp/webhook-handler");
+const session_store_1 = require("./session-store");
+const studio_prewarm_1 = require("./studio-prewarm");
+const logger = (0, logger_1.createLogger)({ component: 'public-chat-graduate' });
+exports.PUBLIC_CHAT_AUTHORIZE_ROUTE = '/api/public-chat/authorize';
+const UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+/**
+ * Resolve the Hailer frontend origin to redirect the popup back to. The
+ * Hailer authorize page POSTs to us with its own Origin/Referer header
+ * (e.g. https://app.k8s.hailer.com), and the redirect must land on that
+ * same origin or the popup will hit a Hailer instance the user is not
+ * signed into — which bounces them to the default landing page (e.g.
+ * activities tab) instead of running /authorize/complete's window.close.
+ *
+ * Browsers send the literal four-character string `null` as the Origin
+ * header for tainted-origin requests — cross-origin form POSTs that
+ * cross schemes (e.g. https://localhost:9443 → http://localhost:3030)
+ * fall into this. Treat that as "no origin" and continue to referer/env,
+ * otherwise the redirect Location becomes `null/#/authorize/complete?…`
+ * which browsers resolve *relative* to the current URL.
+ *
+ * Falls back to environment.HAILER_APP_URL when no usable header is set.
+ */
+function isValidAbsoluteHttpUrl(value) {
+    try {
+        const parsed = new URL(value);
+        return parsed.protocol === 'http:' || parsed.protocol === 'https:';
+    }
+    catch {
+        return false;
+    }
+}
+function resolveHailerOrigin(req) {
+    const origin = typeof req.headers.origin === 'string' ? req.headers.origin.trim() : '';
+    if (origin && origin !== 'null' && isValidAbsoluteHttpUrl(origin)) {
+        return origin.replace(/\/+$/, '');
+    }
+    const referer = typeof req.headers.referer === 'string' ? req.headers.referer : '';
+    if (referer) {
+        try {
+            const parsed = new URL(referer);
+            if (parsed.protocol === 'http:' || parsed.protocol === 'https:') {
+                return `${parsed.protocol}//${parsed.host}`;
+            }
+        }
+        catch {
+            // Fall through to env default.
+        }
+    }
+    if (!isValidAbsoluteHttpUrl(config_1.environment.HAILER_APP_URL)) {
+        // Should be unreachable — config.ts validates HAILER_APP_URL via
+        // z.string().url() — but surface it loudly if a future config
+        // change ever ships an unvalidated value.
+        logger.error('HAILER_APP_URL is not a usable absolute HTTP(S) URL', undefined, {
+            hailerAppUrl: config_1.environment.HAILER_APP_URL,
+            origin,
+            referer,
+        });
+    }
+    logger.debug('resolveHailerOrigin falling back to HAILER_APP_URL', {
+        origin: origin || '(unset)',
+        referer: referer || '(unset)',
+        fallback: config_1.environment.HAILER_APP_URL,
+    });
+    return config_1.environment.HAILER_APP_URL.replace(/\/+$/, '');
+}
+function completeUrl(hailerOrigin, status, message, extras) {
+    const params = new URLSearchParams({ status });
+    if (message) {
+        params.set('message', message);
+    }
+    if (extras) {
+        for (const [key, value] of Object.entries(extras)) {
+            if (value !== undefined && value !== '') {
+                params.set(key, value);
+            }
+        }
+    }
+    return `${hailerOrigin}/#/authorize/complete?${params.toString()}`;
+}
+/**
+ * Variant of completeUrl for the "signed up but not yet verified" branch.
+ * Echoes sessionId back so the demo page can key its localStorage flag to
+ * the same chat conversation when the user later clicks "I've verified —
+ * finish setup". Reason is enumerable so the frontend can branch on it
+ * (today: 'email-not-verified').
+ */
+function pendingUrl(hailerOrigin, sessionId, reason) {
+    const params = new URLSearchParams({
+        status: 'pending',
+        reason,
+        sessionId,
+    });
+    return `${hailerOrigin}/#/authorize/complete?${params.toString()}`;
+}
+/**
+ * Read `user.emailVerified` from v2.core.init. Hailer's admin-side RPCs
+ * (e.g. v3.user.register for the bot account) reject unverified users
+ * with `403 "Validate your email."`, so if we ran the graduation chain
+ * before verification it would leave an orphan workspace with no bot,
+ * no discussion, and no recovery path.
+ *
+ * Returns:
+ *  - { verified: true }   → continue with graduation
+ *  - { verified: false }  → redirect popup to status=pending
+ *  - { error }            → upstream RPC error; surface as status=error
+ *
+ * Treats anything other than literal `true` (missing, false, null, or
+ * a non-boolean) as unverified — better to ask the user to verify one
+ * extra time than to silently produce a half-broken workspace.
+ */
+async function isEmailVerified(client) {
+    try {
+        const init = await client.socket.request(hailer_rpc_1.HailerRpc.Core.init, [['user']]);
+        const verified = init?.user?.emailVerified === true;
+        logger.debug('isEmailVerified', {
+            verified,
+            userId: init?.user?._id,
+            rawEmailVerified: init?.user?.emailVerified,
+        });
+        return { verified };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { error: `Could not read user.emailVerified: ${message}` };
+    }
+}
+function generateBotEmail(workspaceId) {
+    const wsPrefix = workspaceId.toLowerCase().replace(/[^a-z0-9]/g, '').slice(0, 8);
+    const suffix = crypto.randomBytes(3).toString('hex');
+    return `bot-${wsPrefix || 'ws'}-${suffix}@hailer.com`;
+}
+async function resolveWorkspaceAndTeam(client) {
+    const init = await client.socket.request(hailer_rpc_1.HailerRpc.Core.init, [['network', 'teams']]);
+    const workspaceId = init?.network?._id;
+    if (!workspaceId) {
+        return { error: 'Could not resolve workspaceId from API key' };
+    }
+    const teamIds = init?.teams ? Object.keys(init.teams) : [];
+    if (teamIds.length === 0) {
+        return { error: 'Workspace has no teams — cannot place bot activity' };
+    }
+    return { workspaceId, teamId: teamIds[0] };
+}
+// Slide ids the demo deck currently knows about. Anything outside this set
+// arriving via the URL is ignored — keeps unknown ids from leaking into the
+// bot's intro prompt.
+const KNOWN_SLIDE_IDS = new Set([
+    'title', 'what', 'problem', 'core-label', 'workspaces', 'workflows',
+    'activities', 'discussions', 'build-label', 'apps-studio', 'sdk',
+    'sdk-code', 'mcp', 'insights', 'closer',
+]);
+/**
+ * Pull the public-chat demo turns for `sessionId` and serialize them into
+ * the shape `bot.ts:parseSeedTurns` expects. Two output shapes:
+ *  - bare JSON array of turns (no viewed slides) — backwards-compatible.
+ *  - JSON object `{ turns, viewedSlides }` (when the visitor opened slides).
+ *
+ * Returns `undefined` when there's nothing meaningful to forward.
+ */
+function buildSeedContext(sessionId, viewedSlides = []) {
+    const turns = session_store_1.publicChatSessionStore.get(sessionId);
+    const filteredSlides = viewedSlides.filter((id) => KNOWN_SLIDE_IDS.has(id));
+    if ((!turns || turns.length === 0) && filteredSlides.length === 0) {
+        return undefined;
+    }
+    const turnPayload = (turns || []).map((turn) => ({ role: turn.role, content: turn.content }));
+    if (filteredSlides.length === 0) {
+        // Preserve the original bare-array shape so older bots still parse it.
+        return JSON.stringify(turnPayload);
+    }
+    return JSON.stringify({ turns: turnPayload, viewedSlides: filteredSlides });
+}
+/** Best-effort turn count for log output — tolerates both seedContext shapes. */
+function countSeedTurnsForLog(seedContext) {
+    if (!seedContext)
+        return 0;
+    try {
+        const parsed = JSON.parse(seedContext);
+        if (Array.isArray(parsed))
+            return parsed.length;
+        if (parsed && typeof parsed === 'object' && Array.isArray(parsed.turns)) {
+            return (parsed.turns).length;
+        }
+    }
+    catch {
+        // ignored — log 0
+    }
+    return 0;
+}
+async function createBotActivity(client, workspaceId, teamId, workflowId, deployedPhaseId, seedContext) {
+    const email = generateBotEmail(workspaceId);
+    const schemaConfig = JSON.stringify({
+        workflowId,
+        deployedPhaseId,
+        responseMode: 'always',
+        // Provision the bot's Hailer account as a workspace admin. The
+        // graduation flow drops a brand-new visitor into a workspace
+        // where this bot is effectively their starter assistant — it
+        // needs admin to install workflows, invite collaborators, and
+        // configure the workspace on their behalf.
+        memberRole: 'admin',
+        // Run as the Hailer Helper persona: UI guidance (highlights,
+        // navigation links), plain-language concept explanations, and the
+        // opt-in onboarding tour. The graduation seedContext keeps it
+        // anchored on what the visitor came to build — buildSystemPrompt
+        // sees both helperMode and the seed and steers the Helper persona
+        // to continue that intent rather than run the from-zero tour.
+        helperMode: true,
+    });
+    const fields = {
+        firstName: 'Hailer',
+        lastName: 'Helper',
+        agentEmailInHailer: email,
+        password: `pending-${crypto.randomBytes(8).toString('hex')}`,
+        botType: 'specialist',
+        schemaConfig,
+        accessLevel: 'all',
+        ...(seedContext ? { seedContext } : {}),
+    };
+    const activity = {
+        name: 'Hailer Helper',
+        teamId,
+        phaseId: deployedPhaseId,
+        fields,
+    };
+    try {
+        const result = await client.socket.request('v3.activity.createMany', [
+            workflowId,
+            [activity],
+            { returnDocument: true },
+        ]);
+        const activityId = Array.isArray(result) && result[0]?._id ? result[0]._id : undefined;
+        if (!activityId) {
+            return { error: 'Activity create returned no _id' };
+        }
+        return { activityId, activityName: activity.name, fields };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : JSON.stringify(err);
+        return { error: `Failed to create bot activity: ${msg}` };
+    }
+}
+/**
+ * Locally invoke the bot-config webhook handler with a payload synthesized
+ * from the just-created activity. Hailer's phase webhook *should* fire on
+ * `webhookAdded:true`, but in local dev clusters (and possibly older
+ * Hailer versions in general) `v3.activity.createMany` doesn't trigger
+ * delivery — so the bot never provisions and the user lands in a silent
+ * workspace.
+ *
+ * The handler is just a function with no implicit HTTP dependency, and
+ * its first action is to probe the activity by ID to detect already-
+ * provisioned bots — so calling it inline is safe even if Hailer later
+ * delivers the real webhook (second call is a no-op).
+ *
+ * Field IDs are synthetic — `getFieldValue` matches by `.key`, not by
+ * `.id`, so the placeholders never get dereferenced. We pass the same
+ * `key` value as `id` so any future logging that surfaces `id` is
+ * still informative.
+ */
+async function provisionBotInline(params) {
+    const payload = {
+        _id: params.activityId,
+        name: params.activityName,
+        process: params.workflowId,
+        cid: params.workspaceId,
+        currentPhase: params.deployedPhaseId,
+        uid: params.userId ?? '',
+        created: Date.now(),
+        updated: Date.now(),
+        fields: Object.entries(params.fields).map(([key, value]) => ({
+            id: key,
+            key,
+            type: 'text',
+            value,
+        })),
+    };
+    try {
+        const result = await (0, webhook_handler_1.handleBotConfigWebhook)(payload);
+        if (result.success) {
+            logger.info('Graduation (bg): bot provisioned via inline webhook handler', {
+                activityId: params.activityId,
+                workspaceId: params.workspaceId,
+                action: result.action,
+                botType: result.botType,
+                botUserId: result.userId,
+            });
+            return { botUserId: result.userId || undefined };
+        }
+        logger.warn('Graduation (bg): inline webhook handler returned non-success', {
+            activityId: params.activityId,
+            workspaceId: params.workspaceId,
+            action: result.action,
+            error: result.error,
+        });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        logger.error('Graduation (bg): inline webhook handler threw', err, {
+            activityId: params.activityId,
+            workspaceId: params.workspaceId,
+            errorMessage: message,
+        });
+    }
+    return {};
+}
+async function runGraduationBackground(params) {
+    const { sessionId, workspaceId, workflowId, deployedPhaseId, activityId, activityName, fields, apiKey, userId, viewedSlides, } = params;
+    try {
+        // Provision the bot first so we know its Hailer user id before
+        // building the Studio brief — the brief tells the Studio builder to
+        // message the Helper bot (by that id) once it's done, asking it to
+        // offer the visitor a tour. We drive provisioning ourselves instead
+        // of waiting for Hailer's phase webhook: local Hailer clusters don't
+        // reliably fire webhookAdded on v3.activity.createMany, which leaves
+        // the user in a silent workspace. handleBotConfigWebhook is idempotent
+        // (probes for an already-provisioned bot before registering), so if
+        // Hailer does later deliver the real webhook it's a no-op.
+        //
+        // This runs a couple of seconds before the Studio session kicks off
+        // (vs. the other way around previously) — acceptable, since the
+        // Studio one-shot build then runs server-side for minutes.
+        const { botUserId } = await provisionBotInline({
+            workspaceId, workflowId, deployedPhaseId,
+            activityId, activityName, fields, userId,
+        });
+        // Build the brief from the demo conversation; pair the autonomous-
+        // builder persona with it only when we actually have something to
+        // build. When the bot provisioned successfully, hand its user id and
+        // activity id to the brief so the builder can locate the bot's
+        // discussion and post the post-build tour handoff.
+        const turns = session_store_1.publicChatSessionStore.get(sessionId) ?? [];
+        const initialPrompt = (0, studio_prewarm_1.buildStudioInitialPrompt)(turns.map(turn => ({ role: turn.role, content: turn.content })), viewedSlides, { helperBotUserId: botUserId, helperBotActivityId: activityId });
+        await (0, studio_prewarm_1.createStudioSession)({
+            apiKey,
+            workspaceId,
+            systemMessage: initialPrompt ? studio_prewarm_1.STUDIO_BUILDER_SYSTEM_MESSAGE : undefined,
+            initialPrompt,
+        });
+    }
+    catch (err) {
+        logger.error('Graduation (bg): unexpected failure', { sessionId, workspaceId, err });
+    }
+}
+/**
+ * Validate the freshly-minted user API key against Hailer's REST API.
+ * Hailer's `v3.user.apikey.create` returns synchronously but the key can
+ * take a few hundred ms to become usable on the API node we hit — retry
+ * a couple of times before giving up. On final failure, log the full
+ * downstream error and a sanitized version goes back to the popup so
+ * the user (and the dev tailing logs) can see *why*.
+ */
+const VALIDATE_RETRY_BACKOFFS_MS = [0, 250, 600];
+async function validateApiKeyWithRetry(apiKey) {
+    const apiKeyPrefix = apiKey.slice(0, 16);
+    const matchesUserApiKeyPrefix = apiKey.startsWith('userapikey_');
+    let lastErr;
+    for (let attempt = 0; attempt < VALIDATE_RETRY_BACKOFFS_MS.length; attempt++) {
+        const delayMs = VALIDATE_RETRY_BACKOFFS_MS[attempt];
+        if (delayMs > 0) {
+            await new Promise((resolve) => setTimeout(resolve, delayMs));
+        }
+        try {
+            const client = await (0, hailer_clients_1.createHailerClientByApiKey)(apiKey);
+            if (attempt > 0) {
+                logger.info('Graduation: API key accepted after retry', {
+                    attempt: attempt + 1,
+                    apiKeyPrefix,
+                });
+            }
+            return client;
+        }
+        catch (err) {
+            lastErr = err;
+            const message = err instanceof Error ? err.message : String(err);
+            logger.warn('Graduation: API key validation attempt failed', {
+                attempt: attempt + 1,
+                totalAttempts: VALIDATE_RETRY_BACKOFFS_MS.length,
+                apiKeyPrefix,
+                matchesUserApiKeyPrefix,
+                botApiBaseUrl: config_1.environment.BOT_API_BASE_URL,
+                errorMessage: message,
+            });
+        }
+    }
+    // All retries exhausted. Log once at error with stack, return a
+    // user-facing string that includes the downstream error message so
+    // the popup is actionable instead of just "API key validation failed".
+    const downstreamMessage = lastErr instanceof Error ? lastErr.message : String(lastErr);
+    logger.error('Graduation: API key rejected after retries', lastErr, {
+        apiKeyPrefix,
+        matchesUserApiKeyPrefix,
+        botApiBaseUrl: config_1.environment.BOT_API_BASE_URL,
+        attempts: VALIDATE_RETRY_BACKOFFS_MS.length,
+    });
+    // Truncate to keep the popup URL sane; full error is in server logs.
+    const truncated = downstreamMessage.length > 240
+        ? `${downstreamMessage.slice(0, 240)}…`
+        : downstreamMessage;
+    return { error: `API key validation failed: ${truncated}` };
+}
+function createPublicChatAuthorizeHandler() {
+    return async (req, res) => {
+        const hailerOrigin = resolveHailerOrigin(req);
+        const sessionId = typeof req.query.sessionId === 'string' ? req.query.sessionId : '';
+        const apiKey = typeof req.body?.apiKey === 'string' ? req.body.apiKey : '';
+        // Optional comma-separated list of overview-slide ids the visitor
+        // opened during the demo. Whitelisted in buildSeedContext.
+        const viewedSlides = typeof req.query.viewedSlides === 'string' && req.query.viewedSlides.length > 0
+            ? req.query.viewedSlides.split(',').map((s) => s.trim()).filter(Boolean)
+            : [];
+        if (!UUID_REGEX.test(sessionId)) {
+            res.redirect(303, completeUrl(hailerOrigin, 'error', 'Missing or invalid sessionId'));
+            return;
+        }
+        if (!apiKey) {
+            res.redirect(303, completeUrl(hailerOrigin, 'error', 'Missing apiKey'));
+            return;
+        }
+        logger.info('Public-chat graduation started', { sessionId, hailerOrigin });
+        const client = await validateApiKeyWithRetry(apiKey);
+        if ('error' in client) {
+            res.redirect(303, completeUrl(hailerOrigin, 'error', client.error));
+            return;
+        }
+        // Gate everything that calls admin-style Hailer RPCs (workflow
+        // install, v3.user.register for the bot, etc.) on the visitor
+        // having verified their email — Hailer rejects those with
+        // 403 "Validate your email." otherwise. We skip the whole chain
+        // here so no orphan workflow/activity is created; the frontend
+        // shows a "check your inbox" banner and the user re-triggers
+        // this endpoint once verified.
+        const verifyCheck = await isEmailVerified(client);
+        if ('error' in verifyCheck) {
+            logger.warn('Public-chat graduation: email-verified check failed', {
+                sessionId, error: verifyCheck.error,
+            });
+            res.redirect(303, completeUrl(hailerOrigin, 'error', verifyCheck.error));
+            return;
+        }
+        if (!verifyCheck.verified) {
+            logger.info('Public-chat graduation: email-not-verified, returning pending', {
+                sessionId, hailerOrigin,
+            });
+            res.redirect(303, pendingUrl(hailerOrigin, sessionId, 'email-not-verified'));
+            return;
+        }
+        logger.info('Public-chat graduation: starting workflow install', {
+            sessionId, hailerOrigin,
+        });
+        const wsResult = await resolveWorkspaceAndTeam(client);
+        if ('error' in wsResult) {
+            res.redirect(303, completeUrl(hailerOrigin, 'error', wsResult.error));
+            return;
+        }
+        const { workspaceId, teamId } = wsResult;
+        let userId;
+        try {
+            const identity = await (0, workspace_admin_store_1.resolveAdminIdentity)(client);
+            userId = identity.uid;
+            if (identity.uid) {
+                (0, workspace_admin_store_1.persistAdminCredentials)(workspaceId, apiKey, identity);
+            }
+        }
+        catch (err) {
+            logger.warn('Graduation: persistAdminCredentials failed (continuing)', { err });
+        }
+        // Workflow install + activity create run synchronously so the
+        // success redirect can carry the bot's discussion ID forward.
+        // Combined they take ~1s on local Hailer (see install logs),
+        // which is barely perceptible on top of the popup's existing
+        // ~0.5s authorize spinner. Provisioning the bot's Hailer account
+        // and posting the self-intro is the slow part (~2s) — that stays
+        // background so the popup closes promptly.
+        const install = await (0, workflow_installer_1.ensureAgentDirectoryWorkflow)(client, workspaceId);
+        if (!install.success || !install.workflowId || !install.deployedPhaseId) {
+            logger.error('Graduation: workflow install failed', {
+                sessionId, workspaceId, error: install.error,
+            });
+            res.redirect(303, completeUrl(hailerOrigin, 'error', install.error || 'Workflow install failed'));
+            return;
+        }
+        const seedContext = buildSeedContext(sessionId, viewedSlides);
+        const created = await createBotActivity(client, workspaceId, teamId, install.workflowId, install.deployedPhaseId, seedContext);
+        if ('error' in created) {
+            logger.error('Graduation: activity create failed', {
+                sessionId, workspaceId, error: created.error,
+            });
+            res.redirect(303, completeUrl(hailerOrigin, 'error', created.error));
+            return;
+        }
+        logger.info('Graduation: activity created (sync)', {
+            sessionId, workspaceId,
+            workflowId: install.workflowId,
+            activityId: created.activityId,
+            installedNew: !install.alreadyExisted,
+            seedTurns: countSeedTurnsForLog(seedContext),
+            viewedSlides: viewedSlides.length,
+        });
+        // The frontend lands the visitor in the Studio app (created in the
+        // background task below), so we only need workspaceId for its
+        // switchNetwork hop. botActivityId is carried forward for debugging /
+        // a future deep-link; no discussion id is resolved — the bot lives in
+        // messenger but is no longer the landing destination.
+        res.redirect(303, completeUrl(hailerOrigin, 'success', undefined, {
+            workspaceId,
+            botActivityId: created.activityId,
+        }));
+        void runGraduationBackground({
+            sessionId,
+            workspaceId,
+            workflowId: install.workflowId,
+            deployedPhaseId: install.deployedPhaseId,
+            activityId: created.activityId,
+            activityName: created.activityName,
+            fields: created.fields,
+            apiKey,
+            userId,
+            viewedSlides,
+        });
+    };
+}
+//# sourceMappingURL=graduate.js.map

package/dist/public-chat/graduate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graduate.js","sourceRoot":"","sources":["../../src/public-chat/graduate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4gBH,4EA0IC;AAnpBD,+CAAiC;AACjC,0CAA6C;AAC7C,sCAAwC;AACxC,0DAAsF;AACtF,kDAA8C;AAC9C,wEAA6F;AAC7F,yEAAgF;AAChF,4DAAgE;AAChE,mDAAyD;AACzD,qDAAgH;AAEhH,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAEtD,QAAA,2BAA2B,GAAG,4BAA4B,CAAC;AAExE,MAAM,UAAU,GAAG,4EAA4E,CAAC;AAEhG;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,sBAAsB,CAAC,KAAa;IACzC,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAoB;IAC7C,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,OAAO,EAAE,CAAC;QACV,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9D,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YAChD,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,+BAA+B;QACnC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,sBAAsB,CAAC,oBAAW,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,iEAAiE;QACjE,8DAA8D;QAC9D,0CAA0C;QAC1C,MAAM,CAAC,KAAK,CAAC,qDAAqD,EAAE,SAAS,EAAE;YAC3E,YAAY,EAAE,oBAAW,CAAC,cAAc;YACxC,MAAM;YACN,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;QAC/D,MAAM,EAAE,MAAM,IAAI,SAAS;QAC3B,OAAO,EAAE,OAAO,IAAI,SAAS;QAC7B,QAAQ,EAAE,oBAAW,CAAC,cAAc;KACvC,CAAC,CAAC;IACH,OAAO,oBAAW,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAChB,YAAoB,EACpB,MAA2B,EAC3B,OAAgB,EAChB,MAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACV,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACT,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACtC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3B,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,GAAG,YAAY,yBAAyB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CACf,YAAoB,EACpB,SAAiB,EACjB,MAA4B;IAE5B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QAC/B,MAAM,EAAE,SAAS;QACjB,MAAM;QACN,SAAS;KACZ,CAAC,CAAC;IACH,OAAO,GAAG,YAAY,yBAAyB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACvE,CAAC;AASD;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,eAAe,CAC1B,MAAoB;IAEpB,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAEzD,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAI,EAAE,IAAI,EAAE,aAAa,KAAK,IAAI,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;YAC5B,QAAQ;YACR,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG;YACvB,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa;SAC9C,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,sCAAsC,OAAO,EAAE,EAAE,CAAC;IACtE,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAmB;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,OAAO,QAAQ,IAAI,IAAI,IAAI,MAAM,aAAa,CAAC;AAC1D,CAAC;AAYD,KAAK,UAAU,uBAAuB,CAClC,MAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAErE,CAAC;IAChB,MAAM,WAAW,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC;IACvC,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAID,2EAA2E;AAC3E,4EAA4E;AAC5E,sBAAsB;AACtB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW;IACnE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK;IAChE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ;CAC1C,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,SAAiB,EAAE,eAAyB,EAAE;IACpE,MAAM,KAAK,GAAG,sCAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9F,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,uEAAuE;QACvE,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,iFAAiF;AACjF,SAAS,oBAAoB,CAAC,WAA+B;IACzD,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,CAAC;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QAChD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAE,MAA8B,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/F,OAAO,CAAE,MAA+B,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAC3D,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,kBAAkB;IACtB,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC5B,MAAoB,EACpB,WAAmB,EACnB,MAAc,EACd,UAAkB,EAClB,eAAuB,EACvB,WAA+B;IAK/B,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,UAAU;QACV,eAAe;QACf,YAAY,EAAE,QAAQ;QACtB,+DAA+D;QAC/D,6DAA6D;QAC7D,6DAA6D;QAC7D,8DAA8D;QAC9D,2CAA2C;QAC3C,UAAU,EAAE,OAAO;QACnB,6DAA6D;QAC7D,kEAAkE;QAClE,8DAA8D;QAC9D,iEAAiE;QACjE,kEAAkE;QAClE,8DAA8D;QAC9D,UAAU,EAAE,IAAI;KACnB,CAAC,CAAC;IAEH,MAAM,MAAM,GAA2B;QACnC,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,QAAQ;QAClB,kBAAkB,EAAE,KAAK;QACzB,QAAQ,EAAE,WAAW,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC5D,OAAO,EAAE,YAAY;QACrB,YAAY;QACZ,WAAW,EAAE,KAAK;QAClB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;IAEF,MAAM,QAAQ,GAAG;QACb,IAAI,EAAE,eAAe;QACrB,MAAM;QACN,OAAO,EAAE,eAAe;QACxB,MAAM;KACT,CAAC;IAEF,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE;YACjE,UAAU;YACV,CAAC,QAAQ,CAAC;YACV,EAAE,cAAc,EAAE,IAAI,EAAE;SAC3B,CAAkC,CAAC;QACpC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,kCAAkC,GAAG,EAAE,EAAE,CAAC;IAC9D,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAQjC;IACG,MAAM,OAAO,GAAG;QACZ,GAAG,EAAE,MAAM,CAAC,UAAU;QACtB,IAAI,EAAE,MAAM,CAAC,YAAY;QACzB,OAAO,EAAE,MAAM,CAAC,UAAU;QAC1B,GAAG,EAAE,MAAM,CAAC,WAAW;QACvB,YAAY,EAAE,MAAM,CAAC,eAAe;QACpC,GAAG,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QACxB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,EAAE,EAAE,GAAG;YACP,GAAG;YACH,IAAI,EAAE,MAAM;YACZ,KAAK;SACR,CAAC,CAAC;KACN,CAAC;IAEF,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAsB,EAAC,OAAO,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,6DAA6D,EAAE;gBACvE,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,MAAM,CAAC,MAAM;aAC3B,CAAC,CAAC;YACH,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;YACxE,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;SACtB,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,GAAG,EAAE;YAC/D,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,OAAO;SACxB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAiCD,KAAK,UAAU,uBAAuB,CAAC,MAAwB;IAC3D,MAAM,EACF,SAAS,EAAE,WAAW,EACtB,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAC7D,MAAM,EAAE,MAAM,EAAE,YAAY,GAC/B,GAAG,MAAM,CAAC;IACX,IAAI,CAAC;QACD,+DAA+D;QAC/D,oEAAoE;QACpE,mEAAmE;QACnE,oEAAoE;QACpE,qEAAqE;QACrE,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,2DAA2D;QAC3D,EAAE;QACF,oEAAoE;QACpE,gEAAgE;QAChE,2DAA2D;QAC3D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,kBAAkB,CAAC;YAC3C,WAAW,EAAE,UAAU,EAAE,eAAe;YACxC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM;SAC3C,CAAC,CAAC;QAEH,mEAAmE;QACnE,kEAAkE;QAClE,qEAAqE;QACrE,+DAA+D;QAC/D,mDAAmD;QACnD,MAAM,KAAK,GAAG,sCAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,aAAa,GAAG,IAAA,yCAAwB,EAC1C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAC/D,YAAY,EACZ,EAAE,eAAe,EAAE,SAAS,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAClE,CAAC;QACF,MAAM,IAAA,oCAAmB,EAAC;YACtB,MAAM;YACN,WAAW;YACX,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,8CAA6B,CAAC,CAAC,CAAC,SAAS;YACxE,aAAa;SAChB,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;IACzF,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,0BAA0B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAU,CAAC;AAE1D,KAAK,UAAU,uBAAuB,CAClC,MAAc;IAEd,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,uBAAuB,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACjE,IAAI,OAAgB,CAAC;IAErB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAA,2CAA0B,EAAC,MAAM,CAAC,CAAC;YACxD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;oBACpD,OAAO,EAAE,OAAO,GAAG,CAAC;oBACpB,YAAY;iBACf,CAAC,CAAC;YACP,CAAC;YACD,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,GAAG,GAAG,CAAC;YACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;gBACzD,OAAO,EAAE,OAAO,GAAG,CAAC;gBACpB,aAAa,EAAE,0BAA0B,CAAC,MAAM;gBAChD,YAAY;gBACZ,uBAAuB;gBACvB,aAAa,EAAE,oBAAW,CAAC,gBAAgB;gBAC3C,YAAY,EAAE,OAAO;aACxB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,mEAAmE;IACnE,uEAAuE;IACvE,MAAM,iBAAiB,GACnB,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,OAAO,EAAE;QAChE,YAAY;QACZ,uBAAuB;QACvB,aAAa,EAAE,oBAAW,CAAC,gBAAgB;QAC3C,QAAQ,EAAE,0BAA0B,CAAC,MAAM;KAC9C,CAAC,CAAC;IACH,qEAAqE;IACrE,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,GAAG,GAAG;QAC5C,CAAC,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;QACvC,CAAC,CAAC,iBAAiB,CAAC;IACxB,OAAO,EAAE,KAAK,EAAE,8BAA8B,SAAS,EAAE,EAAE,CAAC;AAChE,CAAC;AAED,SAAgB,gCAAgC;IAC5C,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,kEAAkE;QAClE,2DAA2D;QAC3D,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAChG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACxE,CAAC,CAAC,EAAE,CAAC;QAET,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC,CAAC;YACtF,OAAO;QACX,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACxE,OAAO;QACX,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QAE3E,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACpE,OAAO;QACX,CAAC;QAED,+DAA+D;QAC/D,8DAA8D;QAC9D,0DAA0D;QAC1D,gEAAgE;QAChE,+DAA+D;QAC/D,6DAA6D;QAC7D,+BAA+B;QAC/B,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE;gBAC/D,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK;aACtC,CAAC,CAAC;YACH,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YACzE,OAAO;QACX,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,+DAA+D,EAAE;gBACzE,SAAS,EAAE,YAAY;aAC1B,CAAC,CAAC;YACH,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC;YAC7E,OAAO;QACX,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;YAC7D,SAAS,EAAE,YAAY;SAC1B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;YACtB,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,OAAO;QACX,CAAC;QACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QAEzC,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAA,4CAAoB,EAAC,MAAM,CAAC,CAAC;YACpD,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC;YACtB,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACf,IAAA,+CAAuB,EAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3D,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,8DAA8D;QAC9D,8DAA8D;QAC9D,6DAA6D;QAC7D,6DAA6D;QAC7D,iEAAiE;QACjE,iEAAiE;QACjE,2CAA2C;QAC3C,MAAM,OAAO,GAAG,MAAM,IAAA,iDAA4B,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YACtE,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBAChD,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;aAC/C,CAAC,CAAC;YACH,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,EAC/C,OAAO,CAAC,KAAK,IAAI,yBAAyB,CAAC,CAAC,CAAC;YACjD,OAAO;QACX,CAAC;QAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CACnC,MAAM,EACN,WAAW,EACX,MAAM,EACN,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,eAAe,EACvB,WAAW,CACd,CAAC;QACF,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBAC/C,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;aAC/C,CAAC,CAAC;YACH,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACrE,OAAO;QACX,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;YAC/C,SAAS,EAAE,WAAW;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE,CAAC,OAAO,CAAC,cAAc;YACrC,SAAS,EAAE,oBAAoB,CAAC,WAAW,CAAC;YAC5C,YAAY,EAAE,YAAY,CAAC,MAAM;SACpC,CAAC,CAAC;QAEH,mEAAmE;QACnE,8DAA8D;QAC9D,sEAAsE;QACtE,sEAAsE;QACtE,sDAAsD;QACtD,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE;YAC9D,WAAW;YACX,aAAa,EAAE,OAAO,CAAC,UAAU;SACpC,CAAC,CAAC,CAAC;QACJ,KAAK,uBAAuB,CAAC;YACzB,SAAS;YACT,WAAW;YACX,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM;YACN,MAAM;YACN,YAAY;SACf,CAAC,CAAC;IACP,CAAC,CAAC;AACN,CAAC"}

package/dist/public-chat/handler.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Express handler for POST /api/public-chat.
+ *
+ * Anonymous endpoint (no Hailer auth). The handler:
+ *   1. Rate-limits by client IP.
+ *   2. Validates the request payload (turns + new user message).
+ *   3. Calls Claude Haiku 4.5 with a cached system prompt.
+ *   4. Streams text deltas back to the client as Server-Sent Events.
+ */
+import express from 'express';
+export declare function createPublicChatHandler(anthropicApiKey: string): express.RequestHandler;
+//# sourceMappingURL=handler.d.ts.map

package/dist/public-chat/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/public-chat/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAuC9B,wBAAgB,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CA6IvF"}