cartethyia 2.5.3 → 2.5.4

package/src/console/providers/catalog/contracts.ts

@@ -792,6 +792,12 @@ export interface ProviderCatalogStore {
     providerId: string,
     accountId: string,
   ): Promise<readonly AccountHealthEventRecord[]>;
+  /** Deletes this account's stored health & error rows; returns the count. */
+  purgeAccountHealthEvents(
+    tenantId: string,
+    providerId: string,
+    accountId: string,
+  ): Promise<number>;
   listBuddyGrowthTasks(
     tenantId: string,
     providerId: string,

package/src/console/providers/catalog/provider-operations.ts

@@ -23,6 +23,7 @@ import { getProviderClientVersion, getRouteIdentityVersions } from "../../../pro
 import type { OAuthLoginField } from "../../../providers/authentication/oauth-flow-store";
 import { providerCredentialHint, providerCredentialUrl, providerDisplayName, providerHasAdapterUserAgent, providerOperatorNotice, providerServiceKinds, type CompatibilityProfile } from "../../../providers/provider-metadata";
 import type { AccountHealthEventRecord } from "../../../providers/operations/account-health-service";
+import { healthEventBuffer } from "../../../persistence/health-event-flush";
 import { CREDENTIAL_MODES, PROVIDER_READ_SCOPES, PROVIDER_WRITE_SCOPES, type BuddyGrowthTaskLedgerEntry } from "./contracts";
 import { enqueueCheckin } from "../../../workers/daily-checkin";
 import {
@@ -569,6 +570,25 @@ export function createProviderCatalogOperations(config: ProviderCatalogConfig) {
         const a = requireTenantAnyScope(access, PROVIDER_READ_SCOPES);
         return config.store.listAccountHealthEvents(a.tenantId, providerId, accountId);
       },
+    async purgeAccountHealthEvents(
+        access: AccessDecision | undefined,
+        providerId: string,
+        accountId: string,
+      ): Promise<{ deleted: number }> {
+        const a = requireTenantAnyScope(access, PROVIDER_WRITE_SCOPES);
+        // Barrier before the delete: buffered rows for this account must not
+        // land after the purge counted them gone, or the modal refetch shows
+        // ghost history the operator just purged.
+        await healthEventBuffer()?.drain(accountId);
+        const deleted = await config.store.purgeAccountHealthEvents(a.tenantId, providerId, accountId);
+        await config.auditSink?.record({
+          access: a,
+          action: "provider_account.health_events_purged",
+          target: accountId,
+          detail: { providerId, deleted },
+        });
+        return { deleted };
+      },
     async listBuddyGrowthTasks(
       access: AccessDecision | undefined,
       providerId: string,

package/src/console/providers/catalog/routes.ts

@@ -346,6 +346,13 @@ export function createProviderCatalogRoutes(config: ProviderCatalogConfig): Elys
         params.accountId,
       );
 })
+    .delete("/:providerId/accounts/:accountId/health-events", async ({ request, params }) => {
+      return await factory.purgeAccountHealthEvents(
+        config.accessResolver(request),
+        params.providerId,
+        params.accountId,
+      );
+    })
     .get("/:providerId/accounts/:accountId/growth-tasks", async ({ request, params }) => {
       const dayKey = buddyDayKey();
       return await factory.listBuddyGrowthTasks(

package/src/console/providers/catalog/store.ts

@@ -13,7 +13,7 @@ import { buddyTaskLedger, models, providerAccounts, providerOauthStates, provide
 import { queryTelemetryEvents } from "../../../observability/event-log";
 import { isGatewayError } from "../../../observability/telemetry-status";
 import type { WireFamily } from "../../../protocol/canonical-model";
-import { listAccountHealthEvents, recoverAccount, type AccountHealthEventRecord } from "../../../providers/operations/account-health-service";
+import { listAccountHealthEvents, recoverAccount, deleteAccountHealthEvents, type AccountHealthEventRecord } from "../../../providers/operations/account-health-service";
 import { invalidateCredentialCache } from "../../../providers/operations/provider-credential-service";
 import { encryptCredential, hashSecret } from "../../../security/crypto";
 import type { TelemetryBatchBuffer } from "../../../observability/telemetry-buffer";
@@ -1467,6 +1467,27 @@ export class DrizzleProviderCatalogStore implements ProviderCatalogStore {
     if (owned.length === 0) return [];
     return listAccountHealthEvents(this.db, accountId);
   }
+
+  /** Deletes one account's stored health & error rows, for the modal's purge. */
+  async purgeAccountHealthEvents(
+    tenantId: string,
+    providerId: string,
+    accountId: string,
+  ): Promise<number> {
+    const owned = await this.db
+      .select({ id: providerAccounts.id })
+      .from(providerAccounts)
+      .where(
+        and(
+          eq(providerAccounts.id, accountId),
+          eq(providerAccounts.providerId, providerId),
+          globalOrOwnedBy(providerAccounts.tenantId, tenantId),
+        ),
+      )
+      .limit(1);
+    if (owned.length === 0) return 0;
+    return deleteAccountHealthEvents(this.db, accountId);
+  }
   async listBuddyGrowthTasks(
     tenantId: string,
     providerId: string,

package/src/console/quota/account-quota-shared.ts

@@ -1,39 +1,52 @@
-import type { ConsoleAccessResolver } from "../auth/access";
-import type { AuditRecorder } from "../auth/audit-recorder";
-import { markClineApiKeyCredential } from "../../providers/integrations/cline/cline-quota";
-import { type QuotaRefreshDeps } from "./refresh";
-import type { AccountTestEgressDeps } from "./account-test-egress";
-
-/**
- * Dependencies shared by the tenant-scoped and global-admin account/quota route
- * groups. Both groups are composed onto one Elysia instance by
- * `createAccountQuotaRoutes`.
- */
-export interface AccountQuotaRoutesDeps extends QuotaRefreshDeps {
-  readonly poolSelector?: AccountTestEgressDeps["poolSelector"];
-  readonly networkBindingFactory?: AccountTestEgressDeps["networkBindingFactory"];
-  readonly accessResolver: ConsoleAccessResolver;
-  readonly snapshotInvalidator?: { invalidate(): Promise<number> };
-  /** Records privileged account mutations (e.g. hard deletion) to `admin_audit_log`. */
-  readonly auditRecorder?: AuditRecorder | undefined;
-}
-
-export const ACCOUNT_STATUSES = ["active", "cooldown", "disabled"] as const;
-export type AccountStatus = (typeof ACCOUNT_STATUSES)[number];
-
-/**
- * Builds the refresh dependency bundle from the route deps, binding the
- * provider-specific credential normalisation (`cline` API keys) once so every
- * caller refreshes through the same wiring.
- */
-export function createQuotaRefreshDeps(deps: AccountQuotaRoutesDeps): QuotaRefreshDeps {
-  return {
-    db: deps.db,
-    redis: deps.redis,
-    providerRegistry: deps.providerRegistry,
-    resolveCredential: deps.resolveCredential,
-    ...(deps.snapshotInvalidator ? { snapshotInvalidator: deps.snapshotInvalidator } : {}),
-    markApiKeyCredential: (providerId, credential) =>
-      providerId === "cline" ? markClineApiKeyCredential(credential) : credential,
-  };
-}
+import type { ConsoleAccessResolver } from "../auth/access";
+import type { AuditRecorder } from "../auth/audit-recorder";
+import { markClineApiKeyCredential } from "../../providers/integrations/cline/cline-quota";
+import { type QuotaRefreshDeps } from "./refresh";
+import type { AccountTestEgressDeps } from "./account-test-egress";
+
+/**
+ * Dependencies shared by the tenant-scoped and global-admin account/quota route
+ * groups. Both groups are composed onto one Elysia instance by
+ * `createAccountQuotaRoutes`.
+ */
+export interface AccountQuotaRoutesDeps extends QuotaRefreshDeps {
+  readonly poolSelector?: AccountTestEgressDeps["poolSelector"];
+  readonly networkBindingFactory?: AccountTestEgressDeps["networkBindingFactory"];
+  readonly accessResolver: ConsoleAccessResolver;
+  readonly snapshotInvalidator?: { invalidate(): Promise<number> };
+  /** Records privileged account mutations (e.g. hard deletion) to `admin_audit_log`. */
+  readonly auditRecorder?: AuditRecorder | undefined;
+}
+
+export const ACCOUNT_STATUSES = ["active", "cooldown", "disabled"] as const;
+export type AccountStatus = (typeof ACCOUNT_STATUSES)[number];
+
+/**
+ * Wraps a stored api_key credential in the envelope its collector expects.
+ *
+ * Exported because every refresh path needs it, and the ones that omit it
+ * fail in a way that looks like the credential is dead: an unmarked `cline`
+ * `sk_...` key takes the OAuth branch, gets `workos:` prepended, and is
+ * refused with a message naming a version problem. The scheduled sweep once
+ * omitted it, so a working account was cooled with `quota_fetch_failed` every
+ * minute while refreshing fine from the console.
+ */
+export function markProviderApiKeyCredential(providerId: string, credential: string): string {
+  return providerId === "cline" ? markClineApiKeyCredential(credential) : credential;
+}
+
+/**
+ * Builds the refresh dependency bundle from the route deps, binding the
+ * provider-specific credential normalisation (`cline` API keys) once so every
+ * caller refreshes through the same wiring.
+ */
+export function createQuotaRefreshDeps(deps: AccountQuotaRoutesDeps): QuotaRefreshDeps {
+  return {
+    db: deps.db,
+    redis: deps.redis,
+    providerRegistry: deps.providerRegistry,
+    resolveCredential: deps.resolveCredential,
+    ...(deps.snapshotInvalidator ? { snapshotInvalidator: deps.snapshotInvalidator } : {}),
+    markApiKeyCredential: markProviderApiKeyCredential,
+  };
+}