npm - @robbiesrobotics/alice-agents - Versions diffs - 1.5.8 → 1.5.10 - Mend

@robbiesrobotics/alice-agents 1.5.8 → 1.5.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (591) hide show

package/templates/workspaces/dylan/n8n-stripe-welcome-workflow.json ADDED Viewed

@@ -0,0 +1,123 @@
+{
+  "name": "A.L.I.C.E. — Stripe Welcome Email",
+  "nodes": [
+    {
+      "parameters": {
+        "httpMethod": "POST",
+        "path": "stripe-checkout-completed",
+        "responseMode": "onReceived",
+        "options": { "rawBody": false }
+      },
+      "id": "stripe-webhook-trigger",
+      "name": "Stripe Checkout Completed Webhook",
+      "type": "n8n-nodes-base.webhook",
+      "typeVersion": 2,
+      "position": [250, 300],
+      "webhookId": "stripe-welcome-webhook"
+    },
+    {
+      "parameters": {
+        "jsCode": "// Parse incoming webhook payload from stripe-webhook-handler.py\nconst body = $input.item.json;\n\nconst licenseKey = body.license_key;\nconst email = body.email;\nconst plan = body.plan || 'pro';\nconst ingestToken = body.ingest_token || '';\nconst workerToken = body.worker_token || '';\nconst aliceCloudToken = body.alice_cloud_token || ingestToken;\nconst purchasedAt = body.purchased_at || new Date().toISOString();\n\n// Build activation command\nconst activationCmd = ingestToken\n  ? `npx @robbiesrobotics/alice-agents --license ${licenseKey} --cloud --cloud-token ${ingestToken} --cloud-worker-token ${workerToken}`\n  : `npx @robbiesrobotics/alice-agents --license ${licenseKey}`;\n\nreturn {\n  json: {\n    licenseKey,\n    email,\n    plan,\n    ingestToken,\n    workerToken,\n    aliceCloudToken,\n    activationCmd,\n    purchasedAt,\n    hasTokens: Boolean(ingestToken),\n  }\n};"
+      },
+      "id": "parse-payload",
+      "name": "Parse Payload",
+      "type": "n8n-nodes-base.code",
+      "typeVersion": 2,
+      "position": [480, 300]
+    },
+    {
+      "parameters": {
+        "conditions": {
+          "options": { "fallbackOutputs": [] },
+          "conditions": [
+            {
+              "id": "has-email",
+              "leftValue": "={{ $json.email }}",
+              "rightValue": "",
+              "operator": { "type": "string", "operation": "isNotEmpty" }
+            }
+          ]
+        },
+        "options": {}
+      },
+      "id": "check-email",
+      "name": "Validate Email",
+      "type": "n8n-nodes-base.if",
+      "typeVersion": 2,
+      "position": [710, 300]
+    },
+    {
+      "parameters": {
+        "method": "POST",
+        "url": "=https://api.resend.com/emails",
+        "authentication": "genericCredentialType",
+        "genericAuthType": "httpHeaderAuth",
+        "sendHeaders": true,
+        "headerParameters": {
+          "parameters": [
+            { "name": "Authorization", "value": "Bearer {{ $env.RESEND_API_KEY }}" },
+            { "name": "Content-Type", "value": "application/json" }
+          ]
+        },
+        "sendBody": true,
+        "bodyParameters": {
+          "parameters": [
+            { "name": "from", "value": "A.L.I.C.E. <hello@av3.ai>" },
+            { "name": "to", "value": "={{ $json.email }}" },
+            { "name": "subject", "value": "Your A.L.I.C.E. Pro License Key" },
+            { "name": "html", "value": "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"UTF-8\"/>\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"/>\n  <title>Welcome to A.L.I.C.E. — Robbie's Robotics</title>\n  <style>\n    body { margin: 0; padding: 0; background-color: #0f0f14; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; color: #e2e8f0; }\n    .wrapper { max-width: 620px; margin: 0 auto; padding: 40px 20px; }\n    .logo { text-align: center; margin-bottom: 32px; }\n    .logo-text { font-size: 22px; font-weight: 700; color: #a78bfa; letter-spacing: 0.05em; }\n    .card { background: #1a1a2e; border: 1px solid #2d2d4e; border-radius: 12px; padding: 36px 40px; margin-bottom: 24px; }\n    h1 { font-size: 28px; font-weight: 700; color: #f1f5f9; margin: 0 0 8px 0; }\n    .subtitle { color: #94a3b8; font-size: 16px; margin-bottom: 28px; }\n    .divider { border: none; border-top: 1px solid #2d2d4e; margin: 28px 0; }\n    h2 { font-size: 16px; font-weight: 600; color: #a78bfa; text-transform: uppercase; letter-spacing: 0.08em; margin: 0 0 16px 0; }\n    .credential-box { background: #0f0f1a; border: 1px solid #3730a3; border-radius: 8px; padding: 16px 20px; margin-bottom: 12px; }\n    .credential-label { font-size: 11px; text-transform: uppercase; letter-spacing: 0.1em; color: #64748b; margin-bottom: 4px; }\n    .credential-value { font-family: 'Courier New', Courier, monospace; font-size: 15px; color: #e2e8f0; word-break: break-all; }\n    .step-list { list-style: none; padding: 0; margin: 0; }\n    .step-list li { display: flex; align-items: flex-start; gap: 14px; padding: 12px 0; border-bottom: 1px solid #1e1e38; }\n    .step-list li:last-child { border-bottom: none; }\n    .step-num { background: #4f46e5; color: #fff; border-radius: 50%; width: 26px; height: 26px; min-width: 26px; font-size: 13px; font-weight: 700; text-align: center; line-height: 26px; }\n    .step-title { font-weight: 600; font-size: 15px; color: #f1f5f9; margin-bottom: 4px; }\n    .step-desc { font-size: 13px; color: #94a3b8; line-height: 1.5; }\n    code { background: #0f0f1a; border: 1px solid #2d2d4e; border-radius: 4px; padding: 1px 6px; font-family: monospace; font-size: 12px; color: #a78bfa; }\n    .btn { display: inline-block; background: #4f46e5; color: #fff; text-decoration: none; padding: 14px 28px; border-radius: 8px; font-weight: 600; font-size: 15px; }\n    .btn-outline { display: inline-block; border: 1px solid #4f46e5; color: #a78bfa; text-decoration: none; padding: 12px 24px; border-radius: 8px; font-weight: 600; font-size: 14px; }\n    .cta-row { display: flex; gap: 12px; flex-wrap: wrap; margin-top: 20px; }\n    .support-card { background: #0f0f1a; border: 1px solid #2d2d4e; border-radius: 8px; padding: 20px 24px; margin-bottom: 24px; }\n    .support-card p { margin: 0; font-size: 14px; color: #94a3b8; line-height: 1.8; }\n    .support-card a { color: #a78bfa; text-decoration: none; }\n    .footer { text-align: center; font-size: 12px; color: #475569; padding-top: 8px; }\n    .footer a { color: #64748b; text-decoration: none; }\n    .badge { display: inline-block; background: #14532d; color: #4ade80; font-size: 11px; font-weight: 600; padding: 3px 10px; border-radius: 20px; text-transform: uppercase; letter-spacing: 0.06em; margin-left: 8px; vertical-align: middle; }\n  </style>\n</head>\n<body>\n  <div class=\"wrapper\">\n    <div class=\"logo\"><div class=\"logo-text\">🤖 A.L.I.C.E.</div></div>\n    <div class=\"card\">\n      <h1>You're in. Welcome aboard. <span class=\"badge\">Active</span></h1>\n      <p class=\"subtitle\">Your A.L.I.C.E. subscription is live. Below is everything you need to get started.</p>\n      <hr class=\"divider\"/>\n      <h2>Your License Key</h2>\n      <div class=\"credential-box\">\n        <div class=\"credential-label\">License Key</div>\n        <div class=\"credential-value\">{{ $json.licenseKey }}</div>\n      </div>\n      <hr class=\"divider\"/>\n      <h2>Cloud Tokens</h2>\n      <div class=\"credential-box\">\n        <div class=\"credential-label\">A.L.I.C.E. Cloud Token</div>\n        <div class=\"credential-value\">{{ $json.aliceCloudToken }}</div>\n      </div>\n      <hr class=\"divider\"/>\n      <h2>Quickstart — 3 Steps</h2>\n      <ul class=\"step-list\">\n        <li><div class=\"step-num\">1</div><div><div class=\"step-title\">Install OpenClaw</div><div class=\"step-desc\"><code>npm install -g openclaw</code> then <code>openclaw setup</code></div></div></li>\n        <li><div class=\"step-num\">2</div><div><div class=\"step-title\">Activate A.L.I.C.E.</div><div class=\"step-desc\"><code>{{ $json.activationCmd }}</code></div></div></li>\n        <li><div class=\"step-num\">3</div><div><div class=\"step-title\">First task</div><div class=\"step-desc\">Message Alice: <code>review my open PRs and summarize blockers</code></div></div></li>\n      </ul>\n      <div class=\"cta-row\">\n        <a class=\"btn\" href=\"https://getalice.av3.ai/quickstart\">Quickstart Guide →</a>\n        <a class=\"btn-outline\" href=\"https://getalice.av3.ai/dashboard\">Dashboard</a>\n      </div>\n    </div>\n    <div class=\"support-card\">\n      <h2>Need Help?</h2>\n      <p>📧 <a href=\"mailto:rob@robbiesrobotics.com\">rob@robbiesrobotics.com</a><br/>📅 <a href=\"https://cal.com/robbiesrobotics\">Book onboarding call</a><br/>📖 <a href=\"https://getalice.av3.ai/docs\">Docs</a></p>\n    </div>\n    <div class=\"footer\"><p>Robbie's Robotics · <a href=\"https://getalice.av3.ai\">getalice.av3.ai</a></p></div>\n  </div>\n</body>\n</html>" }
+          ]
+        },
+        "options": {
+          "retryOnFail": true,
+          "maxTries": 3,
+          "waitBetweenTries": 2000
+        }
+      },
+      "id": "send-welcome-email",
+      "name": "Send Welcome Email",
+      "type": "n8n-nodes-base.httpRequest",
+      "typeVersion": 4.2,
+      "position": [940, 300]
+    },
+    {
+      "parameters": {
+        "jsCode": "// Log success for observability\nconst item = $input.item.json;\nconsole.log('Welcome email sent to:', item.email, '| License:', item.licenseKey);\nreturn [{ json: { sent: true, email: item.email, licenseKey: item.licenseKey } }];"
+      },
+      "id": "log-success",
+      "name": "Log Success",
+      "type": "n8n-nodes-base.code",
+      "typeVersion": 2,
+      "position": [1160, 300]
+    }
+  ],
+  "connections": {
+    "Stripe Checkout Completed Webhook": {
+      "main": [
+        [{ "node": "Parse Payload", "type": "main", "index": 0 }]
+      ]
+    },
+    "Parse Payload": {
+      "main": [
+        [{ "node": "Validate Email", "type": "main", "index": 0 }]
+      ]
+    },
+    "Validate Email": {
+      "main": [
+        [{ "node": "Send Welcome Email", "type": "main", "index": 0 }],
+        []
+      ]
+    },
+    "Send Welcome Email": {
+      "main": [
+        [{ "node": "Log Success", "type": "main", "index": 0 }]
+      ]
+    }
+  },
+  "settings": {
+    "executionOrder": "v1",
+    "saveManualExecutions": true,
+    "callerPolicy": "workflowsFromSameOwner",
+    "errorWorkflow": ""
+  }
+}

package/templates/workspaces/dylan/skills/claude-code/SKILL.md ADDED Viewed

@@ -0,0 +1,38 @@
+# Claude Code
+Delegate coding tasks to the Claude Code CLI for autonomous code generation, editing, debugging, refactoring, and analysis. Claude Code runs with its own built-in tools (file editing, terminal, web search) and returns results directly.
+## When to Use
+- Writing new code or features
+- Debugging failing tests or errors
+- Refactoring existing code
+- Code review and analysis
+- Complex multi-file changes
+- Any task where you need to read, write, or execute code
+## Usage
+```
+claude_code "Write a Python function that sorts a list of dictionaries by a given key"
+claude_code "Debug the failing test in tests/unit/test_auth.py" "/path/to/project"
+claude_code "Refactor the database module to use async" "/path/to/project" "max"
+```
+## Parameters
+1. **task** (required) — Clear description of the coding task. Be specific about what files, languages, and outcomes you expect.
+2. **workdir** (optional) — Working directory for Claude Code. Defaults to the agent's workspace. Set this to the project root when working on a specific codebase.
+3. **effort** (optional) — Effort level: `low`, `medium`, `high`, `max`. Defaults to `high`. Use `max` for complex multi-file tasks.
+## Environment Variables
+- `CLAUDE_CODE_MAX_BUDGET` — Max USD per invocation (default: `2.00`). Prevents runaway costs.
+- `CLAUDE_CODE_PERMISSION_MODE` — Permission mode (default: `auto`). Options: `auto`, `acceptEdits`, `bypassPermissions`.
+## Tips
+- Be specific in your task description — "Fix the bug where login fails with empty password" is better than "fix login"
+- Set workdir to the project root so Claude Code can navigate the full codebase
+- For large refactors, use effort `max`
+- Review Claude Code's output before incorporating it into your response

package/templates/workspaces/dylan/skills/claude-code/claude_code ADDED Viewed

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# claude_code — OpenClaw skill: delegate coding tasks to Claude Code CLI
+#
+# Usage:
+#   claude_code <task> [workdir] [effort]
+#
+# Arguments:
+#   task    — (required) Description of the coding task
+#   workdir — (optional) Working directory, defaults to current directory
+#   effort  — (optional) low|medium|high|max, defaults to high
+#
+# Environment:
+#   CLAUDE_CODE_MAX_BUDGET      — Max USD per invocation (default: 2.00)
+#   CLAUDE_CODE_PERMISSION_MODE — auto|acceptEdits|bypassPermissions (default: auto)
+#
+# This skill runs Claude Code in non-interactive print mode (-p) so it
+# executes autonomously and returns results without user interaction.
+set -euo pipefail
+TASK="${1:?Error: task description is required. Usage: claude_code <task> [workdir] [effort]}"
+WORKDIR="${2:-.}"
+EFFORT="${3:-high}"
+MAX_BUDGET="${CLAUDE_CODE_MAX_BUDGET:-2.00}"
+PERM_MODE="${CLAUDE_CODE_PERMISSION_MODE:-auto}"
+# Resolve workdir to absolute path
+WORKDIR="$(cd "$WORKDIR" 2>/dev/null && pwd)" || {
+  echo "Error: working directory '$2' does not exist."
+  exit 1
+}
+# Locate claude binary
+CLAUDE_BIN="${CLAUDE_CODE_BIN:-claude}"
+if ! command -v "$CLAUDE_BIN" &>/dev/null; then
+  # Check common install locations
+  for candidate in "$HOME/.local/bin/claude" "/usr/local/bin/claude"; do
+    if [ -x "$candidate" ]; then
+      CLAUDE_BIN="$candidate"
+      break
+    fi
+  done
+  if ! command -v "$CLAUDE_BIN" &>/dev/null && [ ! -x "$CLAUDE_BIN" ]; then
+    echo "Error: claude CLI not found. Install Claude Code: https://docs.anthropic.com/en/docs/claude-code"
+    exit 1
+  fi
+fi
+# Run Claude Code in non-interactive print mode
+exec "$CLAUDE_BIN" -p "$TASK" \
+  --output-format text \
+  --permission-mode "$PERM_MODE" \
+  --effort "$EFFORT" \
+  --max-budget-usd "$MAX_BUDGET" \
+  --no-session-persistence \
+  2>&1

package/templates/workspaces/dylan/stripe-webhook-handler.py ADDED Viewed

@@ -0,0 +1,433 @@
+#!/usr/bin/env python3
+"""
+A.L.I.C.E. Stripe Webhook Handler
+Runs on: Ubuntu Desktop (alpha@100.106.110.119)
+Port: 5001 (FLASK_PORT)
+Handles: checkout.session.completed
+Actions:
+  1. Validate Stripe webhook signature
+  2. Generate license key (ALICE-XXXX-XXXX-XXXX)
+  3. Write to Supabase licenses + teams + team_tokens tables
+  4. Trigger n8n welcome email workflow
+Usage:
+  python3 stripe-webhook-handler.py
+For local testing:
+  python3 stripe-webhook-handler.py --test
+"""
+import os
+import sys
+import json
+import re
+import hmac
+import hashlib
+import logging
+import argparse
+from datetime import datetime, timezone
+from typing import Optional
+import stripe
+import supabase
+import requests
+from flask import Flask, request, jsonify
+# ─── Logging ──────────────────────────────────────────────────────────────────
+logging.basicConfig(
+    level=logging.INFO,
+    format="%(asctime)s [%(levelname)s] %(name)s — %(message)s",
+    handlers=[logging.StreamHandler(sys.stdout)],
+)
+logger = logging.getLogger("stripe-webhook")
+# ─── Config ───────────────────────────────────────────────────────────────────
+def _require_env(name: str) -> str:
+    val = os.environ.get(name)
+    if not val:
+        raise RuntimeError(f"Missing required environment variable: {name}")
+    return val
+class Config:
+    # Stripe
+    STRIPE_SECRET_KEY: str = _require_env("STRIPE_SECRET_KEY")
+    STRIPE_WEBHOOK_SECRET: str = _require_env("STRIPE_WEBHOOK_SECRET")
+    # Supabase
+    SUPABASE_URL: str = _require_env("SUPABASE_URL")
+    SUPABASE_SERVICE_ROLE_KEY: str = _require_env("SUPABASE_SERVICE_ROLE_KEY")
+    # n8n welcome email trigger
+    N8N_WEBHOOK_URL: str = _require_env(
+        "N8N_WEBHOOK_URL"
+    )  # e.g. http://100.106.110.119:5678/webhook/stripe-checkout-completed
+    # Flask
+    FLASK_PORT: int = int(os.environ.get("FLASK_PORT", "5001"))
+    FLASK_HOST: str = os.environ.get("FLASK_HOST", "0.0.0.0")
+# ─── App ──────────────────────────────────────────────────────────────────────
+app = Flask(__name__)
+# ─── License Key Generation ───────────────────────────────────────────────────
+def generate_license_key() -> str:
+    """Generate an A.L.I.C.E. license key: ALICE-XXXX-XXXX-XXXX"""
+    import secrets
+    chunks = [secrets.token_hex(2).upper() for _ in range(3)]
+    return "ALICE-" + "-".join(chunks)
+# ─── Supabase Helpers ─────────────────────────────────────────────────────────
+def get_supabase_client():
+    return supabase.create_client(
+        Config.SUPABASE_URL,
+        Config.SUPABASE_SERVICE_ROLE_KEY,
+    )
+def find_existing_license(sb, stripe_session_id: str) -> Optional[dict]:
+    """Check if license already exists for this Stripe session (deduplication)."""
+    resp = (
+        sb.table("licenses")
+        .select("key, email, plan, stripe_session_id")
+        .eq("stripe_session_id", stripe_session_id)
+        .maybe_single()
+    )
+    return resp.data
+def insert_license(sb, email: str, plan: str, stripe_session_id: str, stripe_customer_id: Optional[str]):
+    """Insert a new license record and return it."""
+    import secrets
+    license_key = generate_license_key()
+    resp = (
+        sb.table("licenses")
+        .insert({
+            "email": email,
+            "plan": plan,
+            "stripe_session_id": stripe_session_id,
+            "stripe_customer_id": stripe_customer_id,
+            "metadata": {"source": "stripe-webhook-handler.py"},
+        })
+        .execute()
+    )
+    if not resp.data:
+        raise RuntimeError("License insert returned no data")
+    # Override the auto-generated key with our deterministic one
+    created = resp.data[0]
+    upd = sb.table("licenses").update({"key": license_key}).eq("id", created["id"]).execute()
+    created["key"] = license_key
+    return created
+def provision_team_and_tokens(sb, license_key: str, email: str):
+    """
+    Provision a team + ingest/worker tokens for Mission Control.
+    Returns (team_id, ingest_token, worker_token) on success, (None, '', '') on failure.
+    """
+    import secrets
+    # Slug from email: normalize and append timestamp
+    slug_base = re.sub(r"[^a-z0-9]", "-", email.lower())[:50]
+    slug = f"{slug_base}-{int(datetime.now(timezone.utc).timestamp())}"
+    team_resp = sb.table("teams").insert({
+        "name": f"{email}'s Team",
+        "slug": slug,
+        "plan": "pro",
+        "owner_email": email,
+    }).execute()
+    if not team_resp.data:
+        logger.warning("Team insert failed — continuing without team tokens")
+        return None, "", ""
+    team_id = team_resp.data[0]["id"]
+    ingest_token = "mc_ingest_" + secrets.token_hex(32)
+    worker_token = "mc_worker_" + secrets.token_hex(32)
+    token_resp = sb.table("team_tokens").insert({
+        "team_id": team_id,
+        "license_key": license_key,
+        "ingest_token": ingest_token,
+        "worker_token": worker_token,
+    }).execute()
+    if not token_resp.data:
+        logger.warning("Token insert failed — continuing without tokens")
+        return team_id, "", ""
+    return team_id, ingest_token, worker_token
+# ─── n8n Welcome Email Trigger ───────────────────────────────────────────────
+def trigger_n8n_welcome_email(
+    license_key: str,
+    email: str,
+    plan: str,
+    ingest_token: str,
+    worker_token: str,
+    alice_cloud_token: str,
+):
+    """
+    POST to the n8n webhook URL to trigger the welcome email workflow.
+    n8n will use the template variables to render the full welcome email.
+    """
+    payload = {
+        "license_key": license_key,
+        "email": email,
+        "plan": plan,
+        "ingest_token": ingest_token,
+        "worker_token": worker_token,
+        "alice_cloud_token": alice_cloud_token,
+        # Timestamp for audit
+        "purchased_at": datetime.now(timezone.utc).isoformat(),
+    }
+    try:
+        resp = requests.post(
+            Config.N8N_WEBHOOK_URL,
+            json=payload,
+            headers={"Content-Type": "application/json"},
+            timeout=15,
+        )
+        resp.raise_for_status()
+        logger.info(
+            f"n8n welcome email triggered for {email} — status {resp.status_code}"
+        )
+        return True
+    except requests.RequestException as exc:
+        logger.error(f"n8n webhook failed: {exc}")
+        return False
+# ─── Stripe Signature Verification ───────────────────────────────────────────
+def verify_stripe_signature(body: bytes, sig_header: str) -> stripe.Event:
+    """Verify and construct a Stripe event from the raw request body."""
+    try:
+        event = stripe.Webhook.construct_event(body, sig_header, Config.STRIPE_WEBHOOK_SECRET)
+    except stripe.error.SignatureVerificationError as exc:
+        logger.warning(f"Stripe signature verification failed: {exc}")
+        raise
+    return event
+# ─── Webhook Handler ───────────────────────────────────────────────────────────
+@app.route("/webhook/stripe", methods=["POST"])
+def handle_stripe_webhook():
+    """Main Stripe webhook endpoint. Expects Stripe-Signature header."""
+    # Get raw body for signature verification
+    body = request.get_data()
+    sig_header = request.headers.get("Stripe-Signature", "")
+    if not sig_header:
+        logger.warning("Missing Stripe-Signature header")
+        return jsonify({"error": "Missing Stripe-Signature header"}), 400
+    # Verify signature
+    try:
+        event = verify_stripe_signature(body, sig_header)
+    except Exception:
+        return jsonify({"error": "Signature verification failed"}), 400
+    logger.info(f"Received Stripe event: {event.type} (id={event.id})")
+    if event.type != "checkout.session.completed":
+        logger.info(f"Ignoring event type: {event.type}")
+        return jsonify({"received": True, "ignored": True})
+    session = event.data.object
+    # Extract email
+    email = session.get("customer_details", {}).get("email") or session.get("customer_email")
+    if not email:
+        logger.warning("No email in checkout session")
+        return jsonify({"error": "No email in session"}), 400
+    # Extract plan from metadata
+    plan = session.metadata.get("plan", "pro") if session.metadata else "pro"
+    if plan not in ("pro", "cloud"):
+        plan = "pro"
+    stripe_session_id = session.id
+    stripe_customer_id = session.customer if isinstance(session.customer, str) else None
+    logger.info(
+        f"Processing checkout.completed — email={email} plan={plan} session={stripe_session_id}"
+    )
+    sb = get_supabase_client()
+    # Deduplication check
+    existing = find_existing_license(sb, stripe_session_id)
+    if existing:
+        logger.info(f"License already exists for session {stripe_session_id} — skipping")
+        return jsonify({"received": True, "deduplicated": True})
+    # Insert license
+    try:
+        license_record = insert_license(sb, email, plan, stripe_session_id, stripe_customer_id)
+        license_key = license_record["key"]
+        logger.info(f"License created: {license_key}")
+    except Exception as exc:
+        logger.error(f"Failed to create license: {exc}")
+        return jsonify({"error": "Failed to create license"}), 500
+    # Provision team + tokens
+    team_id, ingest_token, worker_token = provision_team_and_tokens(sb, license_key, email)
+    # alice_cloud_token is the ingest token (same concept, different name)
+    alice_cloud_token = ingest_token
+    # Trigger n8n welcome email workflow
+    n8n_ok = trigger_n8n_welcome_email(
+        license_key=license_key,
+        email=email,
+        plan=plan,
+        ingest_token=ingest_token,
+        worker_token=worker_token,
+        alice_cloud_token=alice_cloud_token,
+    )
+    if not n8n_ok:
+        logger.warning("n8n trigger failed — email may not be sent")
+    return jsonify({
+        "received": True,
+        "license_key": license_key,
+        "email": email,
+        "plan": plan,
+        "team_provisioned": team_id is not None,
+        "n8n_triggered": n8n_ok,
+    })
+@app.route("/health", methods=["GET"])
+def health():
+    """Health check endpoint."""
+    return jsonify({"status": "ok", "service": "stripe-webhook-handler"})
+# ─── Test / Mock Mode ──────────────────────────────────────────────────────────
+@app.route("/test/mock-webhook", methods=["POST"])
+def handle_mock_webhook():
+    """
+    Internal test endpoint — simulates a checkout.session.completed event
+    without Stripe signature validation. DO NOT expose in production.
+    """
+    body = request.get_json() or {}
+    email = body.get("email", "test@example.com")
+    plan = body.get("plan", "pro")
+    logger.info(f"[MOCK] Processing mock checkout — email={email} plan={plan}")
+    import secrets
+    license_key = generate_license_key()
+    stripe_session_id = "cs_test_mock_" + secrets.token_hex(16)
+    stripe_customer_id = None
+    sb = get_supabase_client()
+    # Check existing
+    existing = find_existing_license(sb, stripe_session_id)
+    if existing:
+        return jsonify({"received": True, "deduplicated": True, "key": existing["key"]})
+    # Insert
+    resp = (
+        sb.table("licenses")
+        .insert({
+            "email": email,
+            "plan": plan,
+            "stripe_session_id": stripe_session_id,
+            "stripe_customer_id": stripe_customer_id,
+            "metadata": {"source": "stripe-webhook-handler.py:test"},
+        })
+        .execute()
+    )
+    created = resp.data[0]
+    # Update with deterministic key
+    sb.table("licenses").update({"key": license_key}).eq("id", created["id"]).execute()
+    created["key"] = license_key
+    # Provision team + tokens
+    team_id, ingest_token, worker_token = provision_team_and_tokens(sb, license_key, email)
+    # Trigger n8n
+    alice_cloud_token = ingest_token
+    n8n_ok = trigger_n8n_welcome_email(
+        license_key=license_key,
+        email=email,
+        plan=plan,
+        ingest_token=ingest_token,
+        worker_token=worker_token,
+        alice_cloud_token=alice_cloud_token,
+    )
+    return jsonify({
+        "received": True,
+        "license_key": license_key,
+        "email": email,
+        "plan": plan,
+        "team_provisioned": team_id is not None,
+        "ingest_token": ingest_token,
+        "worker_token": worker_token,
+        "n8n_triggered": n8n_ok,
+    })
+# ─── CLI ───────────────────────────────────────────────────────────────────────
+def main():
+    parser = argparse.ArgumentParser(description="A.L.I.C.E. Stripe Webhook Handler")
+    parser.add_argument("--test", action="store_true", help="Run in test mode (mock endpoint only)")
+    args = parser.parse_args()
+    if args.test:
+        logger.info("Starting in TEST mode (no Stripe signature required)")
+        # Override to run a simple test server without loading full config
+        # (full config still loaded so we can use it)
+    try:
+        # Verify config loads before starting server
+        _ = Config.STRIPE_SECRET_KEY
+        _ = Config.STRIPE_WEBHOOK_SECRET
+        _ = Config.SUPABASE_URL
+        _ = Config.SUPABASE_SERVICE_ROLE_KEY
+        _ = Config.N8N_WEBHOOK_URL
+        logger.info("Config validated successfully")
+    except RuntimeError as exc:
+        logger.error(f"Config error: {exc}")
+        logger.error("Copy .env.example to ~/alice-observability/.env and fill in Rob's keys")
+        sys.exit(1)
+    logger.info(
+        f"Starting Flask server on {Config.FLASK_HOST}:{Config.FLASK_PORT}"
+    )
+    app.run(
+        host=Config.FLASK_HOST,
+        port=Config.FLASK_PORT,
+        debug=False,
+        threaded=True,
+    )
+if __name__ == "__main__":
+    main()