whale-code 6.5.3 → 6.5.5

package/dist/server/handlers/api-keys.js

@@ -2,6 +2,20 @@
 // Supports linking keys to creations (TV menus, displays, landing pages)
 import { createHash, randomUUID } from "node:crypto";
 const KEY_COLS = "id, name, key_prefix, key_type, scope, is_active, rate_limit_per_minute, rate_limit_per_day, last_used_at, request_count, expires_at, revoked_at, revoked_reason, creation_id, client_store_id, created_at, updated_at";
+// Canonical format: action:resource (e.g. "read:products", "write:cart")
+const SCOPE_ACTIONS = new Set(["read", "write"]);
+function normalizeScopes(scopes) {
+    return scopes.map(s => {
+        if (s === "*" || !s.includes(":"))
+            return s;
+        const [left, right] = s.split(":", 2);
+        if (SCOPE_ACTIONS.has(left))
+            return s; // already "read:products"
+        if (SCOPE_ACTIONS.has(right))
+            return `${right}:${left}`; // "products:read" → "read:products"
+        return s;
+    });
+}
 export async function handleAPIKeys(sb, args, storeId) {
     const sid = storeId;
     const action = args.action;
@@ -15,7 +29,7 @@ export async function handleAPIKeys(sb, args, storeId) {
             if (keyType !== "live" && keyType !== "test") {
                 return { success: false, error: "key_type must be 'live' or 'test'" };
             }
-            const scopes = args.scopes || ["*"];
+            const scopes = normalizeScopes(args.scopes || ["*"]);
             const rateLimitPerMinute = args.rate_limit_per_minute || 60;
             const rateLimitPerDay = args.rate_limit_per_day || 10000;
             const expiresAt = args.expires_at;
@@ -167,7 +181,7 @@ export async function handleAPIKeys(sb, args, storeId) {
             if (args.name !== undefined)
                 updates.name = args.name;
             if (args.scopes !== undefined)
-                updates.scope = args.scopes;
+                updates.scope = normalizeScopes(args.scopes);
             if (args.rate_limit_per_minute !== undefined)
                 updates.rate_limit_per_minute = args.rate_limit_per_minute;
             if (args.rate_limit_per_day !== undefined)

package/dist/server/handlers/comms.d.ts

@@ -35,7 +35,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -73,7 +72,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -103,7 +101,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -133,7 +130,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -170,7 +166,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -200,7 +195,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -236,7 +230,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -273,7 +266,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -307,7 +299,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         profiles?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -338,7 +329,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         succeeded?: undefined;
         failed?: undefined;
         results?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -367,7 +357,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         failed?: undefined;
         results?: undefined;
         errors?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -404,7 +393,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -441,45 +429,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
-        document_ids?: undefined;
-        customer_id?: undefined;
-        customer_email?: undefined;
-        email_sent?: undefined;
-    };
-    error?: undefined;
-} | {
-    success: boolean;
-    data: {
-        count: number;
-        customers: {
-            id: any;
-            name: string;
-            email: any;
-            phone: any;
-            loyalty_tier: any;
-            total_orders: any;
-            is_active: any;
-        }[];
-        id?: undefined;
-        name?: undefined;
-        type?: undefined;
-        url?: undefined;
-        file_name?: undefined;
-        size?: undefined;
-        documents?: undefined;
-        deleted?: undefined;
-        template_id?: undefined;
-        templates?: undefined;
-        template?: undefined;
-        stores?: undefined;
-        profiles?: undefined;
-        total?: undefined;
-        succeeded?: undefined;
-        failed?: undefined;
-        results?: undefined;
-        errors?: undefined;
-        warnings?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;
@@ -513,7 +462,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
     };
     error?: undefined;
 } | {
@@ -548,7 +496,6 @@ export declare function handleDocuments(sb: SupabaseClient, args: Record<string,
         results?: undefined;
         errors?: undefined;
         warnings?: undefined;
-        customers?: undefined;
         document_ids?: undefined;
         customer_id?: undefined;
         customer_email?: undefined;

package/dist/server/handlers/comms.js

@@ -4,9 +4,26 @@ import { applyGenerationRules, generateCannabinoidData, applyCalculations, runVa
 import { renderLayoutToPdf, renderHtmlToPdf, renderLabelToPdf } from "../lib/react-pdf-layout.js";
 import { renderCOAToPdf } from "../lib/coa-renderer.js";
 import QRCode from "qrcode";
+import { handleBrowser } from "./browser.js";
 const MAX_ATTACHMENT_BYTES = 10 * 1024 * 1024; // 10MB per attachment
 const MAX_TOTAL_ATTACHMENT_BYTES = 25 * 1024 * 1024; // 25MB total
 const MAX_ATTACHMENT_COUNT = 10;
+/** Generate a PNG thumbnail for a PDF document via Playwright screenshot and store it in Supabase. */
+async function generateThumbnail(sb, docId, pdfUrl) {
+    // Wrap in Google Docs viewer — headless Chromium downloads raw PDFs instead of rendering them
+    const viewerUrl = `https://docs.google.com/gview?url=${encodeURIComponent(pdfUrl)}&embedded=true`;
+    const result = await handleBrowser(sb, { action: "screenshot", url: viewerUrl });
+    const b64 = result.data?.screenshot_base64;
+    if (!b64)
+        return;
+    const thumbBuffer = Buffer.from(b64, 'base64');
+    const thumbPath = `thumbs/${docId}.png`;
+    await sb.storage.from('screenshots').upload(thumbPath, thumbBuffer, {
+        contentType: 'image/png', upsert: true,
+    });
+    const { data: thumbUrlData } = sb.storage.from('screenshots').getPublicUrl(thumbPath);
+    await sb.from('store_documents').update({ thumbnail_url: thumbUrlData.publicUrl }).eq('id', docId);
+}
 export async function handleEmail(sb, args, storeId) {
     if (!storeId)
         return { success: false, error: "store_id required" };
@@ -369,6 +386,8 @@ export async function handleDocuments(sb, args, storeId) {
             }).select("id, document_name, file_url, created_at").single();
             if (insertErr)
                 return { success: false, error: insertErr.message };
+            if (fileUrl.endsWith('.pdf'))
+                await generateThumbnail(sb, record.id, fileUrl).catch(() => { });
             return { success: true, data: { id: record.id, name: record.document_name, type: docType, url: record.file_url, file_name: fileName, size: sizeBytes } };
         }
         case "find": {
@@ -521,6 +540,8 @@ export async function handleDocuments(sb, args, storeId) {
             }).select("id, document_name, file_url, created_at").single();
             if (insertErr)
                 return { success: false, error: insertErr.message };
+            if (urlData.publicUrl.endsWith('.pdf'))
+                await generateThumbnail(sb, record.id, urlData.publicUrl).catch(() => { });
             return { success: true, data: { id: record.id, name: record.document_name, type: docType, template: template.name, url: record.file_url, size: sizeBytes } };
         }
         case "list_stores": {
@@ -684,6 +705,16 @@ export async function handleDocuments(sb, args, storeId) {
             if (cannabinoidCfg && !mergedData.cannabinoids) {
                 mergedData.cannabinoids = generateCannabinoidData(cannabinoidCfg, mergedConstants);
             }
+            // 6b. Flatten cannabinoid rows into top-level keys for calculation formulas
+            // e.g. { name: "D9-THC", percentWeight: 0.22 } → D9_THC: 0.22
+            if (Array.isArray(mergedData.cannabinoids)) {
+                for (const row of mergedData.cannabinoids) {
+                    const key = row.name.replace(/-/g, "_").replace(/[^a-zA-Z0-9_]/g, "");
+                    if (key && row.percentWeight !== undefined) {
+                        mergedData[key] = row.percentWeight;
+                    }
+                }
+            }
             // 7. Apply calculations
             mergedData = applyCalculations(tpl.calculations, mergedConstants, mergedData);
             // Also run per-row calculations if cannabinoids exist
@@ -715,6 +746,16 @@ export async function handleDocuments(sb, args, storeId) {
                     residualSolvents: { status: "PASS" },
                 };
             }
+            // 7b2. Auto-set test status flags for summary section
+            if (mergedData.cannabinoids && mergedData.cannabinoids.length > 0) {
+                mergedData.testsCannabinoids = true;
+            }
+            if (mergedData.moisture !== undefined && mergedData.moisture !== null) {
+                mergedData.testsMoisture = true;
+            }
+            if (mergedData.dateTested) {
+                mergedData.testsBatch = true;
+            }
             // 7c. Generate QR code for COA templates — links to Quantix COA landing page
             if (tpl.slug?.startsWith("cannabis-coa") && !mergedData.qrCodeDataUrl) {
                 const productSlug = (mergedData.sampleName || "certificate")
@@ -843,6 +884,7 @@ export async function handleDocuments(sb, args, storeId) {
             }).select("id, document_name, file_url, created_at").single();
             if (insertErr)
                 return { success: false, error: insertErr.message };
+            await generateThumbnail(sb, record.id, urlData.publicUrl).catch(() => { });
             return {
                 success: true,
                 data: {
@@ -907,32 +949,8 @@ export async function handleDocuments(sb, args, storeId) {
             };
         }
         case "list_clients":
-        case "list_customers": {
-            let query = sb.from("v_store_customers")
-                .select("id, first_name, last_name, email, phone, loyalty_tier, total_orders, is_active, created_at")
-                .eq("store_id", sid)
-                .order("created_at", { ascending: false });
-            if (args.query) {
-                const term = `%${sanitizeFilterValue(String(args.query).trim())}%`;
-                query = query.or(`first_name.ilike.${term},last_name.ilike.${term},email.ilike.${term}`);
-            }
-            if (args.limit)
-                query = query.limit(args.limit);
-            const { data, error } = await query;
-            if (error)
-                return { success: false, error: error.message };
-            return {
-                success: true,
-                data: {
-                    count: data?.length || 0,
-                    customers: (data || []).map(c => ({
-                        id: c.id, name: [c.first_name, c.last_name].filter(Boolean).join(" "),
-                        email: c.email, phone: c.phone, loyalty_tier: c.loyalty_tier,
-                        total_orders: c.total_orders, is_active: c.is_active,
-                    })),
-                },
-            };
-        }
+        case "list_customers":
+            return { success: false, error: "Use the 'customers' tool instead. Clients are customers." };
         case "deliver_documents": {
             // Batch-assign documents to a customer and optionally send notification email
             const docIds = args.document_ids || (args.document_id ? [args.document_id] : []);
@@ -1016,6 +1034,6 @@ export async function handleDocuments(sb, args, storeId) {
             };
         }
         default:
-            return { success: false, error: `Unknown documents action: ${action}. Valid: create, find, delete, create_template, list_templates, from_template, list_stores, list_profiles, generate, bulk_generate, generate_pdf, list_pdf_templates, list_document_profiles, list_customers, deliver_documents, list_customer_documents` };
+            return { success: false, error: `Unknown documents action: ${action}. Valid: create, find, delete, create_template, list_templates, from_template, list_stores, list_profiles, generate, bulk_generate, generate_pdf, list_pdf_templates, list_document_profiles, deliver_documents, list_customer_documents` };
     }
 }

package/dist/server/handlers/voice.js

@@ -1084,6 +1084,28 @@ export async function handleVoice(sb, args, storeId) {
                     headers: { "xi-api-key": apiKey },
                 });
                 if (!resp.ok) {
+                    // If key lacks user_read scope, fall back to a partial status check
+                    if (resp.status === 401 || resp.status === 403) {
+                        const voicesResp = await fetchWithRetry(`${ELEVENLABS_BASE}/voices`, {
+                            headers: { "xi-api-key": apiKey },
+                        });
+                        const keyWorks = voicesResp.ok;
+                        const voiceCount = keyWorks ? ((await voicesResp.json()).voices?.length ?? 0) : 0;
+                        return {
+                            success: true,
+                            data: {
+                                tier: "unknown (API key missing user_read scope)",
+                                character_count: null,
+                                character_limit: null,
+                                characters_remaining: null,
+                                usage_percent: null,
+                                next_reset: null,
+                                key_valid: keyWorks,
+                                voice_count: voiceCount,
+                                note: "ElevenLabs API key is missing the 'user_read' permission. Regenerate the key at elevenlabs.io with full permissions to see usage stats. All generation features (speak, music, SFX) still work.",
+                            },
+                        };
+                    }
                     const errText = await resp.text();
                     return { success: false, error: `Usage error ${resp.status}: ${errText}` };
                 }

package/dist/server/index.js

@@ -8,7 +8,7 @@ import { randomUUID, timingSafeEqual, createHash } from "node:crypto";
 import Anthropic from "@anthropic-ai/sdk";
 import { createLogger } from "./lib/logger.js";
 const log = createLogger("server");
-import { getMaxOutputTokens, sanitizeError, } from "../shared/agent-core.js";
+import { sanitizeError, resolveAgentLoopConfig, } from "../shared/agent-core.js";
 import { MODELS } from "../shared/constants.js";
 import { handleProxy } from "./proxy-handlers.js";
 import { handleNodeRoutes, setNodeAgentInvoker } from "./handlers/nodes.js";
@@ -939,8 +939,12 @@ async function handleAgentChat(req, res, supabase, body, user, isServiceRole, to
             clientContext: context, userId, userEmail, extendedTools: getExtendedToolsIndex(),
         });
         const anthropic = getAnthropicClient(agent);
-        const ctxCfg = agent.context_config;
-        const MAX_HISTORY_CHARS = ctxCfg?.max_history_chars || 400_000;
+        // Resolve all behavioral config from DB — single source of truth
+        const resolved = resolveAgentLoopConfig(agent, "sse");
+        if (resolved.defaultsUsed.length > 0) {
+            log.info({ agentId, defaults: resolved.defaultsUsed }, "agent config defaults applied");
+        }
+        const MAX_HISTORY_CHARS = resolved.maxHistoryChars;
         // Build user message — multi-modal if image attachments present
         let userContent;
         if (attachments?.length) {
@@ -978,7 +982,6 @@ async function handleAgentChat(req, res, supabase, body, user, isServiceRole, to
         // Client disconnect detection
         let clientDisconnected = false;
         req.on("close", () => { clientDisconnected = true; });
-        const maxDurationMs = 15 * 60 * 1000;
         const startedAt = Date.now();
         const chatStartTime = Date.now();
         try {
@@ -990,9 +993,17 @@ async function handleAgentChat(req, res, supabase, body, user, isServiceRole, to
                 messages,
                 tools,
                 extendedTools,
-                maxTurns: agent.max_tool_calls || 10,
-                temperature: agent.temperature ?? 0.7,
-                maxTokens: getMaxOutputTokens(agentModel, agent.max_tokens),
+                // All behavioral knobs from resolved config — DB is single source of truth
+                maxTurns: resolved.maxTurns,
+                temperature: resolved.temperature,
+                maxTokens: resolved.maxTokens,
+                maxConcurrentTools: resolved.maxConcurrentTools,
+                enableDelegation: resolved.enableDelegation,
+                enableModelRouting: resolved.enableModelRouting,
+                contextOverrides: resolved.contextOverrides,
+                subagentMaxTokens: resolved.subagentMaxTokens,
+                subagentMaxTurns: resolved.subagentMaxTurns,
+                subagentTemperature: resolved.subagentTemperature,
                 storeId,
                 traceId,
                 userId,
@@ -1022,7 +1033,7 @@ async function handleAgentChat(req, res, supabase, body, user, isServiceRole, to
                 },
                 clientDisconnected: { get value() { return clientDisconnected; } },
                 startedAt,
-                maxDurationMs,
+                maxDurationMs: resolved.maxDurationMs,
             });
             // Send usage SSE
             sendSSE(res, {
@@ -2344,16 +2355,14 @@ setAgentExecutor(async (supabase, agentId, prompt, storeId, maxTurns = 5, onToke
     const { rows: userToolRows, defs: userToolDefs } = await loadUserTools(supabase, storeId);
     const tools = getToolsForAgent(agent, allTools, userToolDefs);
     const agentModel = agent.model || MODELS.SONNET;
-    // Sanitize the DB-stored agent system prompt to prevent injection attacks
-    const rawWorkflowPrompt = agent.system_prompt || "You are a helpful assistant.";
-    let systemPrompt = sanitizeAndLog(rawWorkflowPrompt, "workflowAgentExecutor", { agentId });
-    systemPrompt += `\n\nYou are operating for store_id: ${storeId}. Always include this in tool calls that require it.`;
-    if (!agent.can_modify)
-        systemPrompt += "\n\nIMPORTANT: You have read-only access.";
-    if (agent.tone && agent.tone !== "professional")
-        systemPrompt += `\n\nTone: ${agent.tone}`;
-    if (agent.verbosity === "concise")
-        systemPrompt += "\n\nBe concise.";
+    // Resolve all behavioral config from DB — workflow maxTurns caps agent config
+    const resolved = resolveAgentLoopConfig(agent, "workflow", maxTurns);
+    if (resolved.defaultsUsed.length > 0) {
+        log.info({ agentId, callPath: "workflow", defaults: resolved.defaultsUsed }, "workflow agent config defaults applied");
+    }
+    // Build full system prompt — shared helper ensures workflow gets same context as SSE/channel
+    // (previously hand-built, missing location/customer context)
+    const { systemPrompt } = await buildAgentSystemPrompt(supabase, agent, storeId, prompt, tools);
     try {
         const result = await runServerAgentLoop({
             anthropic: getAnthropicClient(agent),
@@ -2362,8 +2371,17 @@ setAgentExecutor(async (supabase, agentId, prompt, storeId, maxTurns = 5, onToke
             systemPrompt,
             messages: [{ role: "user", content: prompt }],
             tools,
-            maxTurns,
-            temperature: agent.temperature ?? 0.7,
+            // All behavioral knobs from resolved config — DB is single source of truth
+            maxTurns: resolved.maxTurns,
+            temperature: resolved.temperature,
+            maxTokens: resolved.maxTokens,
+            maxConcurrentTools: resolved.maxConcurrentTools,
+            enableDelegation: resolved.enableDelegation,
+            enableModelRouting: resolved.enableModelRouting,
+            contextOverrides: resolved.contextOverrides,
+            subagentMaxTokens: resolved.subagentMaxTokens,
+            subagentMaxTurns: resolved.subagentMaxTurns,
+            subagentTemperature: resolved.subagentTemperature,
             storeId,
             source: "workflow_agent",
             agentId,
@@ -2376,7 +2394,7 @@ setAgentExecutor(async (supabase, agentId, prompt, storeId, maxTurns = 5, onToke
             },
             enableStreaming: !!onToken,
             onText: onToken || undefined,
-            maxDurationMs: 2 * 60 * 1000,
+            maxDurationMs: resolved.maxDurationMs,
         });
         return { success: true, response: result.finalText || "(no response)" };
     }
@@ -2403,6 +2421,11 @@ async function invokeAgentForChannel(supabase, agentId, message, storeId, conver
     const { rows: userToolRows, defs: userToolDefs } = await loadUserTools(supabase, storeId);
     const tools = getToolsForAgent(agent, coreTools, userToolDefs);
     const agentModel = agent.model || MODELS.SONNET;
+    // Resolve all behavioral config from DB — channel has 15-turn safety cap built in
+    const resolved = resolveAgentLoopConfig(agent, "channel");
+    if (resolved.defaultsUsed.length > 0) {
+        log.info({ agentId, callPath: "channel", defaults: resolved.defaultsUsed }, "channel agent config defaults applied");
+    }
     // Build system prompt — shared helper, identical to SSE chat
     const { systemPrompt, dynamicContext } = await buildAgentSystemPrompt(supabase, agent, storeId, message, tools, { senderContext, extendedTools: getExtendedToolsIndex() });
     // Update ai_conversations with agent_id (fire-and-forget)
@@ -2410,8 +2433,7 @@ async function invokeAgentForChannel(supabase, agentId, message, storeId, conver
         Promise.resolve(supabase.from("ai_conversations").update({ agent_id: agentId }).eq("id", conversationId).is("agent_id", null)).catch(() => { });
     }
     // Load conversation history with size-based compaction (same as SSE chat)
-    const ctxCfg = agent.context_config;
-    const MAX_HISTORY_CHARS = ctxCfg?.max_history_chars || 400_000;
+    const MAX_HISTORY_CHARS = resolved.maxHistoryChars;
     let loadedHistory = [];
     if (conversationId) {
         try {
@@ -2448,8 +2470,17 @@ async function invokeAgentForChannel(supabase, agentId, message, storeId, conver
             messages,
             tools,
             extendedTools,
-            maxTurns: Math.min(agent.max_tool_calls || 10, 15),
-            temperature: agent.temperature ?? 0.7,
+            // All behavioral knobs from resolved config — DB is single source of truth
+            maxTurns: resolved.maxTurns,
+            temperature: resolved.temperature,
+            maxTokens: resolved.maxTokens,
+            maxConcurrentTools: resolved.maxConcurrentTools,
+            enableDelegation: resolved.enableDelegation,
+            enableModelRouting: resolved.enableModelRouting,
+            contextOverrides: resolved.contextOverrides,
+            subagentMaxTokens: resolved.subagentMaxTokens,
+            subagentMaxTurns: resolved.subagentMaxTurns,
+            subagentTemperature: resolved.subagentTemperature,
             storeId,
             source: "channel_agent",
             agentId,
@@ -2466,7 +2497,7 @@ async function invokeAgentForChannel(supabase, agentId, message, storeId, conver
                 return executeTool(supabase, toolName, toolArgs, storeId, traceId, senderUserId, senderUserLabel, "channel_agent", conversationId, userToolRows, agentId, undefined, true);
             },
             enableStreaming: false,
-            maxDurationMs: 2 * 60 * 1000,
+            maxDurationMs: resolved.maxDurationMs,
         });
         // Persist everything — shared helper, identical to SSE chat
         await persistAgentTurn(supabase, agent, {

package/dist/server/lib/clickhouse-client.js

@@ -34,9 +34,9 @@ class ClickHouseClient {
         return `https://${this.host}:8443`;
     }
     get authHeaders() {
+        const credentials = Buffer.from(`${this.user}:${this.password}`).toString("base64");
         return {
-            "X-ClickHouse-User": this.user,
-            "X-ClickHouse-Key": this.password,
+            Authorization: `Basic ${credentials}`,
             "X-ClickHouse-Database": this.database,
         };
     }

package/dist/server/lib/pdf-renderer.d.ts

@@ -75,7 +75,7 @@ interface Calculation {
     formula: string;
     decimals?: number;
 }
-export declare function applyCalculations(calculations: Calculation[] | undefined | null, constants: Record<string, unknown>, data: Record<string, unknown>): Record<string, unknown>;
+export declare function applyCalculations(calculations: Calculation[] | Record<string, string> | undefined | null, constants: Record<string, unknown>, data: Record<string, unknown>): Record<string, unknown>;
 interface ValidationRule {
     name: string;
     formula: string;

package/dist/server/lib/pdf-renderer.js

@@ -225,7 +225,7 @@ function tokenize(expr) {
             i++;
             continue;
         }
-        if (/[0-9.]/.test(ch)) {
+        if (/[0-9]/.test(ch) || (ch === "." && i + 1 < expr.length && /[0-9]/.test(expr[i + 1]))) {
             let num = "";
             while (i < expr.length && /[0-9.]/.test(expr[i])) {
                 num += expr[i];
@@ -391,8 +391,22 @@ function safeEval(expr, ctx) {
     const parser = new ExprParser(tokens, ctx);
     return parser.parse();
 }
+function normalizeCalculations(raw) {
+    if (!raw)
+        return [];
+    if (Array.isArray(raw))
+        return raw;
+    if (typeof raw === "object") {
+        return Object.entries(raw).map(([field, formula]) => ({
+            field,
+            formula: String(formula),
+        }));
+    }
+    return [];
+}
 export function applyCalculations(calculations, constants, data) {
-    if (!calculations || !Array.isArray(calculations))
+    const normalized = normalizeCalculations(calculations);
+    if (!normalized.length)
         return data;
     const result = { ...data };
     // Flatten constants into context
@@ -405,7 +419,7 @@ export function applyCalculations(calculations, constants, data) {
     // Multi-pass (max 3) for inter-formula dependencies
     for (let pass = 0; pass < 3; pass++) {
         let changed = false;
-        for (const calc of calculations) {
+        for (const calc of normalized) {
             try {
                 const val = safeEval(calc.formula, ctx);
                 const rounded = parseFloat(val.toFixed(calc.decimals ?? 3));
@@ -433,7 +447,7 @@ function tokenizeBool(expr) {
             i++;
             continue;
         }
-        if (/[0-9.]/.test(ch)) {
+        if (/[0-9]/.test(ch) || (ch === "." && i + 1 < expr.length && /[0-9]/.test(expr[i + 1]))) {
             let num = "";
             while (i < expr.length && /[0-9.]/.test(expr[i])) {
                 num += expr[i];

package/dist/server/lib/server-agent-loop.d.ts

@@ -10,6 +10,7 @@
  */
 import type Anthropic from "@anthropic-ai/sdk";
 import type { SupabaseClient } from "@supabase/supabase-js";
+import { type ContextManagementOverrides } from "../../shared/agent-core.js";
 import type { ToolChoice } from "../../shared/agent-core.js";
 import type { CitationBlock } from "../../shared/types.js";
 import type { ToolProgressCallback } from "../tool-router.js";
@@ -51,6 +52,7 @@ export interface ServerAgentLoopOptions {
     enableDelegation?: boolean;
     enablePromptCaching?: boolean;
     enableStreaming?: boolean;
+    enableModelRouting?: boolean;
     maxConcurrentTools?: number;
     documents?: any[];
     onText?: (text: string) => void;
@@ -58,6 +60,9 @@ export interface ServerAgentLoopOptions {
     onToolResult?: (name: string, success: boolean, result: unknown) => void;
     onCitation?: (citation: CitationBlock) => void;
     onSubagentProgress?: SubagentProgressCallback;
+    subagentMaxTokens?: number;
+    subagentMaxTurns?: number;
+    subagentTemperature?: number;
     maxCostUsd?: number;
     clientDisconnected?: {
         value: boolean;
@@ -65,6 +70,7 @@ export interface ServerAgentLoopOptions {
     startedAt?: number;
     maxDurationMs?: number;
     requiredCapabilities?: RequestCapabilityRequirements;
+    contextOverrides?: ContextManagementOverrides;
 }
 export interface TurnMetrics {
     turn: number;