@promptbook/cli 0.112.0-99 → 0.112.0

package/apps/agents-server/src/app/api/chat/export/pdf/route.ts

@@ -3,13 +3,37 @@ import type { ChatMessage } from '../../../../../../../../src/book-components/Ch
 import type { ChatParticipant } from '../../../../../../../../src/book-components/Chat/types/ChatParticipant';
 import { createChatExportFilename } from '../../../../../../../../src/book-components/Chat/save/_common/createChatExportFilename';
 import { NextRequest, NextResponse } from 'next/server';
+import { spaceTrim } from 'spacetrim';
+import { getCurrentUser, type UserInfo } from '@/src/utils/getCurrentUser';
 import { renderHtmlToPdfOnServer } from '@/src/utils/chatExport/renderHtmlToPdfOnServer';
+import { sanitizeChatPdfExportHtml } from '@/src/utils/chatExport/sanitizeChatPdfExportHtml';
 
 /**
  * PDF export requires the Node.js runtime because it depends on Playwright.
  */
 export const runtime = 'nodejs';
 
+/**
+ * Maximum chat PDF exports one signed-in user can request per rate-limit window.
+ *
+ * @private internal constant for POST /api/chat/export/pdf
+ */
+const CHAT_PDF_EXPORT_MAX_REQUESTS_PER_WINDOW = 5;
+
+/**
+ * Sliding-window length for chat PDF export rate limiting.
+ *
+ * @private internal constant for POST /api/chat/export/pdf
+ */
+const CHAT_PDF_EXPORT_RATE_LIMIT_WINDOW_MS = 60_000;
+
+/**
+ * In-memory PDF export request timestamps keyed by authenticated user.
+ *
+ * @private internal constant for POST /api/chat/export/pdf
+ */
+const CHAT_PDF_EXPORT_RATE_LIMIT_BUCKETS: Map<string, Array<number>> = new Map();
+
 /**
  * Minimal request payload accepted by the chat PDF export endpoint.
  *
@@ -21,10 +45,48 @@ type ChatPdfExportRequestBody = {
     readonly participants: ReadonlyArray<ChatParticipant>;
 };
 
+/**
+ * Result of the chat PDF export rate-limit check.
+ *
+ * @private internal type for POST /api/chat/export/pdf
+ */
+type ChatPdfExportRateLimitResult = {
+    readonly isAllowed: boolean;
+    readonly retryAfterSeconds: number;
+};
+
 /**
  * Builds a server-rendered PDF from the standalone HTML chat export.
  */
 export async function POST(request: NextRequest) {
+    const currentUser = await getCurrentUser();
+    if (!currentUser) {
+        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    const rateLimitCheck = checkChatPdfExportRateLimit(currentUser);
+    if (!rateLimitCheck.isAllowed) {
+        return NextResponse.json(
+            {
+                error: spaceTrim(`
+                    Rate limit exceeded for \`PDF\` chat exports.
+
+                    **Limit:** ${CHAT_PDF_EXPORT_MAX_REQUESTS_PER_WINDOW} requests per ${Math.round(
+                    CHAT_PDF_EXPORT_RATE_LIMIT_WINDOW_MS / 1000,
+                )} seconds.
+
+                    Try again in **${rateLimitCheck.retryAfterSeconds}** seconds.
+                `),
+            },
+            {
+                status: 429,
+                headers: {
+                    'Retry-After': String(rateLimitCheck.retryAfterSeconds),
+                },
+            },
+        );
+    }
+
     let requestBody: ChatPdfExportRequestBody;
 
     try {
@@ -45,15 +107,16 @@ export async function POST(request: NextRequest) {
     }
 
     try {
-        const pdfBuffer = await renderHtmlToPdfOnServer(
+        const html = sanitizeChatPdfExportHtml(
             buildChatHtml(requestBody.title, requestBody.messages, requestBody.participants),
         );
+        const pdfBuffer = await renderHtmlToPdfOnServer(html);
         const filename = createChatExportFilename(requestBody.title, 'pdf');
 
         return new NextResponse(pdfBuffer, {
             headers: {
                 'Content-Type': 'application/pdf',
-                'Content-Disposition': `attachment; filename="${filename}"`,
+                'Content-Disposition': createChatPdfExportContentDisposition(filename),
             },
         });
     } catch (error) {
@@ -61,3 +124,105 @@ export async function POST(request: NextRequest) {
         return NextResponse.json({ error: 'Failed to export chat as PDF.' }, { status: 500 });
     }
 }
+
+/**
+ * Applies a per-user sliding-window rate limit to Playwright-backed PDF exports.
+ *
+ * @param currentUser - Authenticated caller resolved from the request.
+ * @returns Decision and retry timing for the current attempt.
+ *
+ * @private internal helper for POST /api/chat/export/pdf
+ */
+function checkChatPdfExportRateLimit(currentUser: UserInfo): ChatPdfExportRateLimitResult {
+    const bucketKey = resolveChatPdfExportRateLimitUserKey(currentUser);
+    const nowMs = Date.now();
+    const windowStartMs = nowMs - CHAT_PDF_EXPORT_RATE_LIMIT_WINDOW_MS;
+    const previousAttempts = CHAT_PDF_EXPORT_RATE_LIMIT_BUCKETS.get(bucketKey) || [];
+    const recentAttempts = previousAttempts.filter((attemptTimeMs) => attemptTimeMs > windowStartMs);
+
+    if (recentAttempts.length >= CHAT_PDF_EXPORT_MAX_REQUESTS_PER_WINDOW) {
+        const oldestRelevantAttemptMs = recentAttempts[0]!;
+        const retryAfterMs = Math.max(
+            1_000,
+            oldestRelevantAttemptMs + CHAT_PDF_EXPORT_RATE_LIMIT_WINDOW_MS - nowMs,
+        );
+
+        CHAT_PDF_EXPORT_RATE_LIMIT_BUCKETS.set(bucketKey, recentAttempts);
+
+        return {
+            isAllowed: false,
+            retryAfterSeconds: Math.ceil(retryAfterMs / 1_000),
+        };
+    }
+
+    recentAttempts.push(nowMs);
+    CHAT_PDF_EXPORT_RATE_LIMIT_BUCKETS.set(bucketKey, recentAttempts);
+
+    return {
+        isAllowed: true,
+        retryAfterSeconds: 0,
+    };
+}
+
+/**
+ * Resolves a stable rate-limit bucket key for one authenticated user.
+ *
+ * @param currentUser - Authenticated caller resolved from the request.
+ * @returns Per-user bucket key.
+ *
+ * @private internal helper for POST /api/chat/export/pdf
+ */
+function resolveChatPdfExportRateLimitUserKey(currentUser: UserInfo): string {
+    if (typeof currentUser.id === 'number' && Number.isFinite(currentUser.id)) {
+        return `user:${currentUser.id}`;
+    }
+
+    return `username:${currentUser.username.trim().toLowerCase()}`;
+}
+
+/**
+ * Builds a standards-compatible attachment header with both quoted ASCII
+ * fallback and RFC 5987 UTF-8 filename.
+ *
+ * @param filename - Sanitized chat export filename.
+ * @returns Value for the `Content-Disposition` header.
+ *
+ * @private internal helper for POST /api/chat/export/pdf
+ */
+function createChatPdfExportContentDisposition(filename: string): string {
+    const fallbackFilename = createChatPdfExportFallbackFilename(filename);
+    const encodedFilename = encodeRFC5987Value(filename);
+
+    return `attachment; filename="${fallbackFilename}"; filename*=UTF-8''${encodedFilename}`;
+}
+
+/**
+ * Creates a quoted-string-safe ASCII fallback filename.
+ *
+ * @param filename - Preferred filename.
+ * @returns Filename safe for a quoted `Content-Disposition` parameter.
+ *
+ * @private internal helper for POST /api/chat/export/pdf
+ */
+function createChatPdfExportFallbackFilename(filename: string): string {
+    const fallbackFilename = filename
+        .replace(/[^\x20-\x7e]/g, '_')
+        .replace(/[\r\n"\\/;]/g, '_')
+        .trim();
+
+    return fallbackFilename || 'chat-export.pdf';
+}
+
+/**
+ * Encodes a `Content-Disposition` filename according to RFC 5987.
+ *
+ * @param value - Raw filename value.
+ * @returns Percent-encoded filename.
+ *
+ * @private internal helper for POST /api/chat/export/pdf
+ */
+function encodeRFC5987Value(value: string): string {
+    return encodeURIComponent(value).replace(/['()*]/g, (character) =>
+        `%${character.charCodeAt(0).toString(16).toUpperCase()}`,
+    );
+}

package/apps/agents-server/src/app/api/chat/route.ts

@@ -1,9 +1,38 @@
 import { createOpenAiExecutionTools } from '@promptbook-local/openai';
+import { NextResponse } from 'next/server';
+import { spaceTrim } from 'spacetrim';
+
+/**
+ * Whether this development-only OpenAI smoke test endpoint is reachable.
+ *
+ * The route exists to verify that the configured `OPENAI_API_KEY` actually
+ * talks to OpenAI, so it must never be exposed in production where it would
+ * let any anonymous client drain the server's paid OpenAI credit by repeatedly
+ * calling this unauthenticated `GET` with attacker-controlled `message`.
+ *
+ * @private internal helper of `/api/chat`
+ */
+const IS_DEVELOPMENT_CHAT_TEST_ENDPOINT_ENABLED = process.env.NODE_ENV !== 'production';
 
 /**
  * Handles get.
  */
 export async function GET(request: Request) {
+    if (!IS_DEVELOPMENT_CHAT_TEST_ENDPOINT_ENABLED) {
+        return NextResponse.json(
+            {
+                error: {
+                    message: spaceTrim(`
+                        Endpoint \`/api/chat\` is a development-only OpenAI smoke test
+                        and is disabled in production.
+                    `),
+                    type: 'not_available_in_production',
+                },
+            },
+            { status: 404 },
+        );
+    }
+
     const { searchParams } = new URL(request.url);
     const message = searchParams.get('message') || 'Hello, who are you?';
 
@@ -21,13 +50,6 @@ export async function GET(request: Request) {
         content: message,
     });
 
-    /*
-    return new Response(JSON.stringify(response, null, 4), {
-        status: 200,
-        headers: { 'Content-Type': 'application/json' },
-    });
-    */
-
     return new Response(response.content, {
         status: 200,
         headers: { 'Content-Type': 'text/markdown' },

package/apps/agents-server/src/app/api/chat-feedback/export/route.ts

@@ -2,7 +2,7 @@ import { NextRequest, NextResponse } from 'next/server';
 import { $getTableName } from '../../../../database/$getTableName';
 import { $provideSupabase } from '../../../../database/$provideSupabase';
 import { convertToCsv } from '../../../../utils/convertToCsv';
-import { getCurrentUser } from '../../../../utils/getCurrentUser';
+import { isUserAdmin } from '../../../../utils/isUserAdmin';
 
 /**
  * Export chat feedback as CSV.
@@ -11,7 +11,7 @@ import { getCurrentUser } from '../../../../utils/getCurrentUser';
  * - agentName: filter by agent name (optional)
  */
 export async function GET(request: NextRequest) {
-    if (!(await getCurrentUser())) {
+    if (!(await isUserAdmin())) {
         return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
     }
 

package/apps/agents-server/src/app/api/chat-feedback/route.ts

@@ -1,7 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { $getTableName } from '../../../database/$getTableName';
 import { $provideSupabase } from '../../../database/$provideSupabase';
-import { getCurrentUser } from '../../../utils/getCurrentUser';
+import { isUserAdmin } from '../../../utils/isUserAdmin';
 
 /**
  * Size of default page.
@@ -58,7 +58,7 @@ function parseSortOrder(value: string | null): SortOrder {
  * - sortOrder: asc | desc (default: desc)
  */
 export async function GET(request: NextRequest) {
-    if (!(await getCurrentUser())) {
+    if (!(await isUserAdmin())) {
         return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
     }
 
@@ -145,7 +145,7 @@ export async function GET(request: NextRequest) {
  * - agentName: name of the agent whose feedback should be removed
  */
 export async function DELETE(request: NextRequest) {
-    if (!(await getCurrentUser())) {
+    if (!(await isUserAdmin())) {
         return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
     }
 

package/apps/agents-server/src/app/api/chat-history/[id]/route.ts

@@ -1,13 +1,13 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { $getTableName } from '../../../../database/$getTableName';
 import { $provideSupabase } from '../../../../database/$provideSupabase';
-import { getCurrentUser } from '../../../../utils/getCurrentUser';
+import { isUserAdmin } from '../../../../utils/isUserAdmin';
 
 /**
  * Delete a single chat history entry by ID.
  */
 export async function DELETE(request: NextRequest, context: { params: Promise<{ id: string }> }) {
-    if (!(await getCurrentUser())) {
+    if (!(await isUserAdmin())) {
         return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
     }
 

package/apps/agents-server/src/app/api/chat-history/export/route.ts

@@ -2,7 +2,7 @@ import { NextRequest, NextResponse } from 'next/server';
 import { $getTableName } from '../../../../database/$getTableName';
 import { $provideSupabase } from '../../../../database/$provideSupabase';
 import { convertToCsv } from '../../../../utils/convertToCsv';
-import { getCurrentUser } from '../../../../utils/getCurrentUser';
+import { isUserAdmin } from '../../../../utils/isUserAdmin';
 
 /**
  * Export chat history as CSV.
@@ -11,7 +11,7 @@ import { getCurrentUser } from '../../../../utils/getCurrentUser';
  * - agentName: filter by agent name (optional)
  */
 export async function GET(request: NextRequest) {
-    if (!(await getCurrentUser())) {
+    if (!(await isUserAdmin())) {
         return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
     }
 

package/apps/agents-server/src/app/api/chat-history/route.ts

@@ -1,7 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { $getTableName } from '../../../database/$getTableName';
 import { $provideSupabase } from '../../../database/$provideSupabase';
-import { getCurrentUser } from '../../../utils/getCurrentUser';
+import { isUserAdmin } from '../../../utils/isUserAdmin';
 
 /**
  * Size of default page.
@@ -58,7 +58,7 @@ function parseSortOrder(value: string | null): SortOrder {
  * - sortOrder: asc | desc (default: desc)
  */
 export async function GET(request: NextRequest) {
-    if (!(await getCurrentUser())) {
+    if (!(await isUserAdmin())) {
         return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
     }
 
@@ -135,7 +135,7 @@ export async function GET(request: NextRequest) {
  * - agentName: name of the agent whose history should be removed
  */
 export async function DELETE(request: NextRequest) {
-    if (!(await getCurrentUser())) {
+    if (!(await isUserAdmin())) {
         return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
     }
 

package/apps/agents-server/src/app/api/chat-streaming/route.ts

@@ -1,10 +1,39 @@
+import { NextResponse } from 'next/server';
 import { OpenAI } from 'openai';
+import { spaceTrim } from 'spacetrim';
 import { forTime } from 'waitasecond';
 
+/**
+ * Whether this development-only OpenAI streaming smoke test endpoint is reachable.
+ *
+ * The route exists to verify that streaming chat completions work end-to-end,
+ * so it must never be exposed in production where it would let any anonymous
+ * client drain the server's paid OpenAI credit by repeatedly calling this
+ * unauthenticated `GET` with attacker-controlled `message`.
+ *
+ * @private internal helper of `/api/chat-streaming`
+ */
+const IS_DEVELOPMENT_CHAT_STREAMING_TEST_ENDPOINT_ENABLED = process.env.NODE_ENV !== 'production';
+
 /**
  * Handles get.
  */
 export async function GET(request: Request) {
+    if (!IS_DEVELOPMENT_CHAT_STREAMING_TEST_ENDPOINT_ENABLED) {
+        return NextResponse.json(
+            {
+                error: {
+                    message: spaceTrim(`
+                        Endpoint \`/api/chat-streaming\` is a development-only OpenAI smoke test
+                        and is disabled in production.
+                    `),
+                    type: 'not_available_in_production',
+                },
+            },
+            { status: 404 },
+        );
+    }
+
     const { searchParams } = new URL(request.url);
     const message = searchParams.get('message') || 'Hello, who are you?';
 

package/apps/agents-server/src/app/api/elevenlabs/tts/route.ts

@@ -1,5 +1,8 @@
+import { NextRequest } from 'next/server';
+import { spaceTrim } from 'spacetrim';
 import { respondIfClientVersionIsOutdated } from '../../../../utils/clientVersionGuard';
 import { getMetadata } from '@/src/database/getMetadata';
+import { guardPaidApiRequest } from '@/src/utils/paidApiRequestGuard';
 import { textToSpeechText } from '../../../../utils/textToSpeechText';
 
 /**
@@ -37,6 +40,19 @@ const ELEVEN_LABS_API_KEY = process.env.ELEVEN_LABS_API_KEY;
  */
 const MAX_ELEVEN_LABS_TEXT_LENGTH = 4500;
 
+/**
+ * Pattern matching valid ElevenLabs voice identifiers.
+ *
+ * ElevenLabs voice IDs are 20-character alphanumeric strings (e.g.
+ * `21m00Tcm4TlvDq8ikWAM`). Validating with a strict allowlist prevents an
+ * attacker from injecting arbitrary path segments into the upstream URL
+ * (which is built by string interpolation below) and stops requests for
+ * unknown ids that would still bill our ElevenLabs account.
+ *
+ * @private
+ */
+const ELEVEN_LABS_VOICE_ID_PATTERN = /^[A-Za-z0-9]{15,40}$/u;
+
 /**
  * Handles the OPTIONS request from the chat for CORS / preflight.
  *
@@ -59,7 +75,7 @@ export function OPTIONS() {
  *
  * @private
  */
-export async function POST(request: Request) {
+export async function POST(request: NextRequest) {
     const versionMismatchResponse = respondIfClientVersionIsOutdated(request, 'json');
     if (versionMismatchResponse) {
         return versionMismatchResponse;
@@ -87,10 +103,31 @@ export async function POST(request: Request) {
         );
     }
 
+    const guard = await guardPaidApiRequest(request, 'TEXT_TO_SPEECH');
+    if (!guard.ok) {
+        return guard.response;
+    }
+
     const payload = (await request.json().catch(() => null)) as { text?: string; voiceId?: string } | null;
     const rawText = (payload?.text?.toString() ?? '').trim();
     const requestedVoiceId = payload?.voiceId?.toString().trim();
-    const voiceIdToUse = requestedVoiceId || ELEVEN_LABS_VOICE_ID;
+    const voiceIdToUse = resolveValidatedVoiceId(requestedVoiceId);
+
+    if (voiceIdToUse === null) {
+        return new Response(
+            JSON.stringify({
+                error: spaceTrim(`
+                    Invalid \`voiceId\`.
+
+                    ElevenLabs voice ids must be 15–40 alphanumeric characters.
+                `),
+            }),
+            {
+                status: 400,
+                headers: { 'Content-Type': 'application/json' },
+            },
+        );
+    }
 
     if (!rawText) {
         return new Response(
@@ -149,3 +186,24 @@ export async function POST(request: Request) {
         },
     });
 }
+
+/**
+ * Validates the caller-supplied voice id and falls back to the configured default.
+ *
+ * Returns `null` if the caller provided a voice id that does not match the
+ * ElevenLabs format. The default value comes from a trusted environment
+ * variable, so it is forwarded as-is without re-validation.
+ *
+ * @private internal helper of `POST /api/elevenlabs/tts`
+ */
+function resolveValidatedVoiceId(requestedVoiceId: string | undefined): string | null {
+    if (!requestedVoiceId) {
+        return ELEVEN_LABS_VOICE_ID;
+    }
+
+    if (!ELEVEN_LABS_VOICE_ID_PATTERN.test(requestedVoiceId)) {
+        return null;
+    }
+
+    return requestedVoiceId;
+}

package/apps/agents-server/src/app/api/emails/incoming/sendgrid/route.ts

@@ -1,6 +1,10 @@
 import { $getTableName } from '../../../../../database/$getTableName';
 import { $provideSupabaseForServer } from '../../../../../database/$provideSupabaseForServer';
 import { parseInboundSendgridEmail } from '../../../../../message-providers/email/sendgrid/parseInboundSendgridEmail';
+import {
+    resolveSendgridInboundParseWebhookErrorStatus,
+    verifySendgridInboundParseWebhook,
+} from '../../../../../message-providers/email/sendgrid/verifySendgridInboundParseWebhook';
 import { NextRequest, NextResponse } from 'next/server';
 
 /**
@@ -8,7 +12,10 @@ import { NextRequest, NextResponse } from 'next/server';
  */
 export async function POST(request: NextRequest) {
     try {
-        const formData = await request.formData();
+        const rawBody = Buffer.from(await request.arrayBuffer());
+        verifySendgridInboundParseWebhook(request.headers, rawBody);
+
+        const formData = await createRequestFromRawBody(request, rawBody).formData();
         const rawEmail = formData.get('email');
 
         if (typeof rawEmail !== 'string') {
@@ -45,7 +52,22 @@ export async function POST(request: NextRequest) {
         console.error('Error processing inbound email', error);
         return NextResponse.json(
             { error: error instanceof Error ? error.message : 'Unknown error' },
-            { status: 500 },
+            { status: resolveSendgridInboundParseWebhookErrorStatus(error) },
         );
     }
 }
+
+/**
+ * Recreates a request from verified raw bytes so `formData()` can parse the multipart payload.
+ *
+ * @param request - Original incoming request.
+ * @param rawBody - Verified raw request body.
+ * @returns Request with an unread body stream.
+ */
+function createRequestFromRawBody(request: NextRequest, rawBody: Buffer): Request {
+    return new Request(request.url, {
+        method: request.method,
+        headers: request.headers,
+        body: new Uint8Array(rawBody),
+    });
+}

package/apps/agents-server/src/app/api/federated-agents/route.ts

@@ -24,7 +24,7 @@ export async function GET() {
             });
         }
 
-        const federatedServers = await getFederatedServers({ excludeHiddenCoreServer: true });
+        const federatedServers = await getFederatedServers();
 
         return NextResponse.json({
             federatedServers,

package/apps/agents-server/src/app/api/health/route.ts

@@ -0,0 +1,18 @@
+import { NextResponse } from 'next/server';
+
+/**
+ * Ensures the readiness route runs in the same runtime as the standalone server.
+ */
+export const runtime = 'nodejs';
+
+/**
+ * Prevents a cached response from hiding readiness failures during deployment handoff.
+ */
+export const dynamic = 'force-dynamic';
+
+/**
+ * Lightweight readiness endpoint used by standalone VPS pm2/nginx handoffs.
+ */
+export async function GET() {
+    return NextResponse.json({ status: 'ok' });
+}