whale-code 6.5.5 → 6.5.7

package/dist/server/handlers/nodes-routes-register.js

@@ -0,0 +1,239 @@
+// handlers/nodes-routes-register.ts — Node registration, heartbeat, and list endpoints
+
+import { authenticateNode, userHasStoreAccess, generateNodeApiKey, hashApiKey, logNodeEvent } from "./nodes-types.js";
+export async function handleNodeRegisterRoutes(pathname, method, body, supabase, auth, queryParams) {
+  // ── POST /nodes/register ──────────────────────────────────────
+  // User auth required. Creates a node and returns API key (shown once).
+  if (pathname === "/nodes/register" && method === "POST") {
+    if (!auth.userId && !auth.isServiceRole) {
+      return {
+        status: 401,
+        body: {
+          error: "User authentication required"
+        }
+      };
+    }
+    if (!body) return {
+      status: 400,
+      body: {
+        error: "Request body required"
+      }
+    };
+    const reg = body;
+    if (!reg.name || !reg.store_id) {
+      return {
+        status: 400,
+        body: {
+          error: "name and store_id required"
+        }
+      };
+    }
+
+    // Verify user has access to this store
+    if (auth.userId) {
+      const hasAccess = await userHasStoreAccess(supabase, auth.userId, reg.store_id);
+      if (!hasAccess) {
+        return {
+          status: 403,
+          body: {
+            error: "No access to this store"
+          }
+        };
+      }
+    }
+
+    // Check node limit against store plan
+    const {
+      data: planRow
+    } = await supabase.from("store_plans").select("plan, limits").eq("store_id", reg.store_id).single();
+    const planLimits = planRow?.limits;
+    const nodesMax = planLimits?.nodes_max ?? 1; // free plan default
+
+    const {
+      count
+    } = await supabase.from("nodes").select("id", {
+      count: "exact",
+      head: true
+    }).eq("store_id", reg.store_id);
+    if ((count || 0) >= nodesMax) {
+      return {
+        status: 429,
+        body: {
+          error: `Node limit reached (${count}/${nodesMax} on ${planRow?.plan || "free"} plan)`
+        }
+      };
+    }
+    const apiKey = generateNodeApiKey();
+    const apiKeyHash = hashApiKey(apiKey);
+    const {
+      data: node,
+      error
+    } = await supabase.from("nodes").insert({
+      store_id: reg.store_id,
+      name: reg.name,
+      api_key_hash: apiKeyHash,
+      capabilities: reg.capabilities || [],
+      hardware: reg.hardware || {},
+      version: reg.version || "1.0.0",
+      config: reg.config || {},
+      status: "offline"
+    }).select("id, name, store_id, status, created_at").single();
+    if (error) {
+      return {
+        status: 500,
+        body: {
+          error: error.message
+        }
+      };
+    }
+    await logNodeEvent(supabase, reg.store_id, node.id, "registered", {
+      name: reg.name,
+      registered_by: auth.userId
+    });
+    return {
+      status: 201,
+      body: {
+        success: true,
+        node,
+        api_key: apiKey,
+        // Shown ONCE — user must save this
+        message: "Save your API key — it cannot be retrieved later."
+      }
+    };
+  }
+
+  // ── POST /nodes/heartbeat ─────────────────────────────────────
+  // Node API key auth. Updates status + hardware info.
+  if (pathname === "/nodes/heartbeat" && method === "POST") {
+    const node = await authenticateNode(supabase, auth.rawToken);
+    if (!node) {
+      return {
+        status: 401,
+        body: {
+          error: "Invalid node API key"
+        }
+      };
+    }
+    const hb = body;
+    const updates = {
+      status: "online",
+      last_heartbeat: new Date().toISOString(),
+      updated_at: new Date().toISOString()
+    };
+    if (hb.hardware) updates.hardware = hb.hardware;
+    if (hb.capabilities) updates.capabilities = hb.capabilities;
+    if (hb.version) updates.version = hb.version;
+    await supabase.from("nodes").update(updates).eq("id", node.id);
+
+    // Sync channel statuses if reported
+    if (hb.channels?.length) {
+      for (const ch of hb.channels) {
+        await supabase.from("channels").update({
+          status: ch.status,
+          updated_at: new Date().toISOString()
+        }).eq("node_id", node.id).eq("type", ch.type);
+      }
+    }
+
+    // Fetch pending commands for this node
+    let pendingCommands = [];
+    try {
+      const {
+        data: cmds
+      } = await supabase.from("node_commands").select("id, command, payload").eq("node_id", node.id).eq("status", "pending").order("created_at", {
+        ascending: true
+      }).limit(10);
+      if (cmds?.length) {
+        pendingCommands = cmds;
+        // Mark them as acknowledged
+        const cmdIds = cmds.map(c => c.id);
+        await supabase.from("node_commands").update({
+          status: "acknowledged",
+          acknowledged_at: new Date().toISOString()
+        }).in("id", cmdIds);
+      }
+    } catch {
+      // Command delivery is best-effort
+    }
+    return {
+      status: 200,
+      body: {
+        success: true,
+        node_id: node.id,
+        commands: pendingCommands
+      }
+    };
+  }
+
+  // ── GET|POST /nodes ────────────────────────────────────────────
+  // User auth. Lists nodes for a store.
+  if (pathname === "/nodes" && (method === "GET" || method === "POST")) {
+    // store_id from body or query params
+    const storeId = body?.store_id || queryParams?.get("store_id");
+    if (!storeId) {
+      return {
+        status: 400,
+        body: {
+          error: "store_id required"
+        }
+      };
+    }
+
+    // Verify user has access to the requested store
+    if (auth.userId) {
+      const hasAccess = await userHasStoreAccess(supabase, auth.userId, storeId);
+      if (!hasAccess) {
+        return {
+          status: 403,
+          body: {
+            error: "Not authorized to access this store's nodes"
+          }
+        };
+      }
+    } else if (!auth.isServiceRole) {
+      return {
+        status: 401,
+        body: {
+          error: "Authentication required"
+        }
+      };
+    }
+    const {
+      data: nodes,
+      error
+    } = await supabase.from("nodes").select("id, name, status, hardware, capabilities, version, ip_address, last_heartbeat, created_at").eq("store_id", storeId).order("created_at", {
+      ascending: false
+    });
+    if (error) {
+      return {
+        status: 500,
+        body: {
+          error: error.message
+        }
+      };
+    }
+
+    // Also fetch channels per node
+    const nodeIds = (nodes || []).map(n => n.id);
+    const {
+      data: channels
+    } = nodeIds.length ? await supabase.from("channels").select("id, node_id, type, name, status, stats").in("node_id", nodeIds) : {
+      data: []
+    };
+
+    // Attach channels to nodes
+    const result = (nodes || []).map(n => ({
+      ...n,
+      channels: (channels || []).filter(c => c.node_id === n.id)
+    }));
+    return {
+      status: 200,
+      body: {
+        success: true,
+        nodes: result
+      }
+    };
+  }
+  return null;
+}
+//# sourceMappingURL=nodes-routes-register.js.map

package/dist/server/handlers/nodes-routes-register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodes-routes-register.js","names":["authenticateNode","userHasStoreAccess","generateNodeApiKey","hashApiKey","logNodeEvent","handleNodeRegisterRoutes","pathname","method","body","supabase","auth","queryParams","userId","isServiceRole","status","error","reg","name","store_id","hasAccess","data","planRow","from","select","eq","single","planLimits","limits","nodesMax","nodes_max","count","head","plan","apiKey","apiKeyHash","node","insert","api_key_hash","capabilities","hardware","version","config","message","id","registered_by","success","api_key","rawToken","hb","updates","last_heartbeat","Date","toISOString","updated_at","update","channels","length","ch","type","pendingCommands","cmds","order","ascending","limit","cmdIds","map","c","acknowledged_at","in","node_id","commands","storeId","get","nodes","nodeIds","n","result","filter"],"sources":["../../../src/server/handlers/nodes-routes-register.ts"],"sourcesContent":["// handlers/nodes-routes-register.ts — Node registration, heartbeat, and list endpoints\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { checkPlanLimits } from \"./billing.js\";\nimport {\n  type NodeRegistration, type HeartbeatPayload,\n  authenticateNode, userHasStoreAccess, generateNodeApiKey, hashApiKey,\n  logNodeEvent,\n} from \"./nodes-types.js\";\n\nexport async function handleNodeRegisterRoutes(\n  pathname: string,\n  method: string,\n  body: Record<string, unknown> | null,\n  supabase: SupabaseClient,\n  auth: { userId?: string; isServiceRole: boolean; rawToken: string },\n  queryParams?: URLSearchParams,\n): Promise<{ status: number; body: Record<string, unknown> } | null> {\n  // ── POST /nodes/register ──────────────────────────────────────\n  // User auth required. Creates a node and returns API key (shown once).\n  if (pathname === \"/nodes/register\" && method === \"POST\") {\n    if (!auth.userId && !auth.isServiceRole) {\n      return { status: 401, body: { error: \"User authentication required\" } };\n    }\n    if (!body) return { status: 400, body: { error: \"Request body required\" } };\n    const reg = body as unknown as NodeRegistration;\n    if (!reg.name || !reg.store_id) {\n      return { status: 400, body: { error: \"name and store_id required\" } };\n    }\n\n    // Verify user has access to this store\n    if (auth.userId) {\n      const hasAccess = await userHasStoreAccess(supabase, auth.userId, reg.store_id);\n      if (!hasAccess) {\n        return { status: 403, body: { error: \"No access to this store\" } };\n      }\n    }\n\n    // Check node limit against store plan\n    const { data: planRow } = await supabase\n      .from(\"store_plans\")\n      .select(\"plan, limits\")\n      .eq(\"store_id\", reg.store_id)\n      .single();\n    const planLimits = planRow?.limits as { nodes_max?: number } | null;\n    const nodesMax = planLimits?.nodes_max ?? 1; // free plan default\n\n    const { count } = await supabase\n      .from(\"nodes\")\n      .select(\"id\", { count: \"exact\", head: true })\n      .eq(\"store_id\", reg.store_id);\n    if ((count || 0) >= nodesMax) {\n      return { status: 429, body: { error: `Node limit reached (${count}/${nodesMax} on ${planRow?.plan || \"free\"} plan)` } };\n    }\n\n    const apiKey = generateNodeApiKey();\n    const apiKeyHash = hashApiKey(apiKey);\n\n    const { data: node, error } = await supabase\n      .from(\"nodes\")\n      .insert({\n        store_id: reg.store_id,\n        name: reg.name,\n        api_key_hash: apiKeyHash,\n        capabilities: reg.capabilities || [],\n        hardware: reg.hardware || {},\n        version: reg.version || \"1.0.0\",\n        config: reg.config || {},\n        status: \"offline\",\n      })\n      .select(\"id, name, store_id, status, created_at\")\n      .single();\n\n    if (error) {\n      return { status: 500, body: { error: error.message } };\n    }\n\n    await logNodeEvent(supabase, reg.store_id, node.id, \"registered\", {\n      name: reg.name,\n      registered_by: auth.userId,\n    });\n\n    return {\n      status: 201,\n      body: {\n        success: true,\n        node,\n        api_key: apiKey, // Shown ONCE — user must save this\n        message: \"Save your API key — it cannot be retrieved later.\",\n      },\n    };\n  }\n\n  // ── POST /nodes/heartbeat ─────────────────────────────────────\n  // Node API key auth. Updates status + hardware info.\n  if (pathname === \"/nodes/heartbeat\" && method === \"POST\") {\n    const node = await authenticateNode(supabase, auth.rawToken);\n    if (!node) {\n      return { status: 401, body: { error: \"Invalid node API key\" } };\n    }\n\n    const hb = body as unknown as HeartbeatPayload;\n    const updates: Record<string, unknown> = {\n      status: \"online\",\n      last_heartbeat: new Date().toISOString(),\n      updated_at: new Date().toISOString(),\n    };\n    if (hb.hardware) updates.hardware = hb.hardware;\n    if (hb.capabilities) updates.capabilities = hb.capabilities;\n    if (hb.version) updates.version = hb.version;\n\n    await supabase.from(\"nodes\").update(updates).eq(\"id\", node.id);\n\n    // Sync channel statuses if reported\n    if (hb.channels?.length) {\n      for (const ch of hb.channels) {\n        await supabase\n          .from(\"channels\")\n          .update({ status: ch.status, updated_at: new Date().toISOString() })\n          .eq(\"node_id\", node.id)\n          .eq(\"type\", ch.type);\n      }\n    }\n\n    // Fetch pending commands for this node\n    let pendingCommands: Array<{ id: string; command: string; payload: unknown }> = [];\n    try {\n      const { data: cmds } = await supabase\n        .from(\"node_commands\")\n        .select(\"id, command, payload\")\n        .eq(\"node_id\", node.id)\n        .eq(\"status\", \"pending\")\n        .order(\"created_at\", { ascending: true })\n        .limit(10);\n\n      if (cmds?.length) {\n        pendingCommands = cmds;\n        // Mark them as acknowledged\n        const cmdIds = cmds.map((c: { id: string }) => c.id);\n        await supabase\n          .from(\"node_commands\")\n          .update({ status: \"acknowledged\", acknowledged_at: new Date().toISOString() })\n          .in(\"id\", cmdIds);\n      }\n    } catch {\n      // Command delivery is best-effort\n    }\n\n    return {\n      status: 200,\n      body: { success: true, node_id: node.id, commands: pendingCommands },\n    };\n  }\n\n  // ── GET|POST /nodes ────────────────────────────────────────────\n  // User auth. Lists nodes for a store.\n  if (pathname === \"/nodes\" && (method === \"GET\" || method === \"POST\")) {\n    // store_id from body or query params\n    const storeId = (body as any)?.store_id || queryParams?.get(\"store_id\");\n    if (!storeId) {\n      return { status: 400, body: { error: \"store_id required\" } };\n    }\n\n    // Verify user has access to the requested store\n    if (auth.userId) {\n      const hasAccess = await userHasStoreAccess(supabase, auth.userId, storeId);\n      if (!hasAccess) {\n        return { status: 403, body: { error: \"Not authorized to access this store's nodes\" } };\n      }\n    } else if (!auth.isServiceRole) {\n      return { status: 401, body: { error: \"Authentication required\" } };\n    }\n\n    const { data: nodes, error } = await supabase\n      .from(\"nodes\")\n      .select(\"id, name, status, hardware, capabilities, version, ip_address, last_heartbeat, created_at\")\n      .eq(\"store_id\", storeId)\n      .order(\"created_at\", { ascending: false });\n\n    if (error) {\n      return { status: 500, body: { error: error.message } };\n    }\n\n    // Also fetch channels per node\n    const nodeIds = (nodes || []).map((n: any) => n.id);\n    const { data: channels } = nodeIds.length\n      ? await supabase\n          .from(\"channels\")\n          .select(\"id, node_id, type, name, status, stats\")\n          .in(\"node_id\", nodeIds)\n      : { data: [] };\n\n    // Attach channels to nodes\n    const result = (nodes || []).map((n: any) => ({\n      ...n,\n      channels: (channels || []).filter((c: any) => c.node_id === n.id),\n    }));\n\n    return { status: 200, body: { success: true, nodes: result } };\n  }\n  return null;\n}\n"],"mappings":"AAAA;;AAGA,SAEEA,gBAAgB,EAAEC,kBAAkB,EAAEC,kBAAkB,EAAEC,UAAU,EACpEC,YAAY,QACP,kBAAkB;AAEzB,OAAO,eAAeC,wBAAwBA,CAC5CC,QAAgB,EAChBC,MAAc,EACdC,IAAoC,EACpCC,QAAwB,EACxBC,IAAmE,EACnEC,WAA6B,EACsC;EACnE;EACA;EACA,IAAIL,QAAQ,KAAK,iBAAiB,IAAIC,MAAM,KAAK,MAAM,EAAE;IACvD,IAAI,CAACG,IAAI,CAACE,MAAM,IAAI,CAACF,IAAI,CAACG,aAAa,EAAE;MACvC,OAAO;QAAEC,MAAM,EAAE,GAAG;QAAEN,IAAI,EAAE;UAAEO,KAAK,EAAE;QAA+B;MAAE,CAAC;IACzE;IACA,IAAI,CAACP,IAAI,EAAE,OAAO;MAAEM,MAAM,EAAE,GAAG;MAAEN,IAAI,EAAE;QAAEO,KAAK,EAAE;MAAwB;IAAE,CAAC;IAC3E,MAAMC,GAAG,GAAGR,IAAmC;IAC/C,IAAI,CAACQ,GAAG,CAACC,IAAI,IAAI,CAACD,GAAG,CAACE,QAAQ,EAAE;MAC9B,OAAO;QAAEJ,MAAM,EAAE,GAAG;QAAEN,IAAI,EAAE;UAAEO,KAAK,EAAE;QAA6B;MAAE,CAAC;IACvE;;IAEA;IACA,IAAIL,IAAI,CAACE,MAAM,EAAE;MACf,MAAMO,SAAS,GAAG,MAAMlB,kBAAkB,CAACQ,QAAQ,EAAEC,IAAI,CAACE,MAAM,EAAEI,GAAG,CAACE,QAAQ,CAAC;MAC/E,IAAI,CAACC,SAAS,EAAE;QACd,OAAO;UAAEL,MAAM,EAAE,GAAG;UAAEN,IAAI,EAAE;YAAEO,KAAK,EAAE;UAA0B;QAAE,CAAC;MACpE;IACF;;IAEA;IACA,MAAM;MAAEK,IAAI,EAAEC;IAAQ,CAAC,GAAG,MAAMZ,QAAQ,CACrCa,IAAI,CAAC,aAAa,CAAC,CACnBC,MAAM,CAAC,cAAc,CAAC,CACtBC,EAAE,CAAC,UAAU,EAAER,GAAG,CAACE,QAAQ,CAAC,CAC5BO,MAAM,CAAC,CAAC;IACX,MAAMC,UAAU,GAAGL,OAAO,EAAEM,MAAuC;IACnE,MAAMC,QAAQ,GAAGF,UAAU,EAAEG,SAAS,IAAI,CAAC,CAAC,CAAC;;IAE7C,MAAM;MAAEC;IAAM,CAAC,GAAG,MAAMrB,QAAQ,CAC7Ba,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,IAAI,EAAE;MAAEO,KAAK,EAAE,OAAO;MAAEC,IAAI,EAAE;IAAK,CAAC,CAAC,CAC5CP,EAAE,CAAC,UAAU,EAAER,GAAG,CAACE,QAAQ,CAAC;IAC/B,IAAI,CAACY,KAAK,IAAI,CAAC,KAAKF,QAAQ,EAAE;MAC5B,OAAO;QAAEd,MAAM,EAAE,GAAG;QAAEN,IAAI,EAAE;UAAEO,KAAK,EAAE,uBAAuBe,KAAK,IAAIF,QAAQ,OAAOP,OAAO,EAAEW,IAAI,IAAI,MAAM;QAAS;MAAE,CAAC;IACzH;IAEA,MAAMC,MAAM,GAAG/B,kBAAkB,CAAC,CAAC;IACnC,MAAMgC,UAAU,GAAG/B,UAAU,CAAC8B,MAAM,CAAC;IAErC,MAAM;MAAEb,IAAI,EAAEe,IAAI;MAAEpB;IAAM,CAAC,GAAG,MAAMN,QAAQ,CACzCa,IAAI,CAAC,OAAO,CAAC,CACbc,MAAM,CAAC;MACNlB,QAAQ,EAAEF,GAAG,CAACE,QAAQ;MACtBD,IAAI,EAAED,GAAG,CAACC,IAAI;MACdoB,YAAY,EAAEH,UAAU;MACxBI,YAAY,EAAEtB,GAAG,CAACsB,YAAY,IAAI,EAAE;MACpCC,QAAQ,EAAEvB,GAAG,CAACuB,QAAQ,IAAI,CAAC,CAAC;MAC5BC,OAAO,EAAExB,GAAG,CAACwB,OAAO,IAAI,OAAO;MAC/BC,MAAM,EAAEzB,GAAG,CAACyB,MAAM,IAAI,CAAC,CAAC;MACxB3B,MAAM,EAAE;IACV,CAAC,CAAC,CACDS,MAAM,CAAC,wCAAwC,CAAC,CAChDE,MAAM,CAAC,CAAC;IAEX,IAAIV,KAAK,EAAE;MACT,OAAO;QAAED,MAAM,EAAE,GAAG;QAAEN,IAAI,EAAE;UAAEO,KAAK,EAAEA,KAAK,CAAC2B;QAAQ;MAAE,CAAC;IACxD;IAEA,MAAMtC,YAAY,CAACK,QAAQ,EAAEO,GAAG,CAACE,QAAQ,EAAEiB,IAAI,CAACQ,EAAE,EAAE,YAAY,EAAE;MAChE1B,IAAI,EAAED,GAAG,CAACC,IAAI;MACd2B,aAAa,EAAElC,IAAI,CAACE;IACtB,CAAC,CAAC;IAEF,OAAO;MACLE,MAAM,EAAE,GAAG;MACXN,IAAI,EAAE;QACJqC,OAAO,EAAE,IAAI;QACbV,IAAI;QACJW,OAAO,EAAEb,MAAM;QAAE;QACjBS,OAAO,EAAE;MACX;IACF,CAAC;EACH;;EAEA;EACA;EACA,IAAIpC,QAAQ,KAAK,kBAAkB,IAAIC,MAAM,KAAK,MAAM,EAAE;IACxD,MAAM4B,IAAI,GAAG,MAAMnC,gBAAgB,CAACS,QAAQ,EAAEC,IAAI,CAACqC,QAAQ,CAAC;IAC5D,IAAI,CAACZ,IAAI,EAAE;MACT,OAAO;QAAErB,MAAM,EAAE,GAAG;QAAEN,IAAI,EAAE;UAAEO,KAAK,EAAE;QAAuB;MAAE,CAAC;IACjE;IAEA,MAAMiC,EAAE,GAAGxC,IAAmC;IAC9C,MAAMyC,OAAgC,GAAG;MACvCnC,MAAM,EAAE,QAAQ;MAChBoC,cAAc,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;MACxCC,UAAU,EAAE,IAAIF,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;IACrC,CAAC;IACD,IAAIJ,EAAE,CAACT,QAAQ,EAAEU,OAAO,CAACV,QAAQ,GAAGS,EAAE,CAACT,QAAQ;IAC/C,IAAIS,EAAE,CAACV,YAAY,EAAEW,OAAO,CAACX,YAAY,GAAGU,EAAE,CAACV,YAAY;IAC3D,IAAIU,EAAE,CAACR,OAAO,EAAES,OAAO,CAACT,OAAO,GAAGQ,EAAE,CAACR,OAAO;IAE5C,MAAM/B,QAAQ,CAACa,IAAI,CAAC,OAAO,CAAC,CAACgC,MAAM,CAACL,OAAO,CAAC,CAACzB,EAAE,CAAC,IAAI,EAAEW,IAAI,CAACQ,EAAE,CAAC;;IAE9D;IACA,IAAIK,EAAE,CAACO,QAAQ,EAAEC,MAAM,EAAE;MACvB,KAAK,MAAMC,EAAE,IAAIT,EAAE,CAACO,QAAQ,EAAE;QAC5B,MAAM9C,QAAQ,CACXa,IAAI,CAAC,UAAU,CAAC,CAChBgC,MAAM,CAAC;UAAExC,MAAM,EAAE2C,EAAE,CAAC3C,MAAM;UAAEuC,UAAU,EAAE,IAAIF,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;QAAE,CAAC,CAAC,CACnE5B,EAAE,CAAC,SAAS,EAAEW,IAAI,CAACQ,EAAE,CAAC,CACtBnB,EAAE,CAAC,MAAM,EAAEiC,EAAE,CAACC,IAAI,CAAC;MACxB;IACF;;IAEA;IACA,IAAIC,eAAyE,GAAG,EAAE;IAClF,IAAI;MACF,MAAM;QAAEvC,IAAI,EAAEwC;MAAK,CAAC,GAAG,MAAMnD,QAAQ,CAClCa,IAAI,CAAC,eAAe,CAAC,CACrBC,MAAM,CAAC,sBAAsB,CAAC,CAC9BC,EAAE,CAAC,SAAS,EAAEW,IAAI,CAACQ,EAAE,CAAC,CACtBnB,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CACvBqC,KAAK,CAAC,YAAY,EAAE;QAAEC,SAAS,EAAE;MAAK,CAAC,CAAC,CACxCC,KAAK,CAAC,EAAE,CAAC;MAEZ,IAAIH,IAAI,EAAEJ,MAAM,EAAE;QAChBG,eAAe,GAAGC,IAAI;QACtB;QACA,MAAMI,MAAM,GAAGJ,IAAI,CAACK,GAAG,CAAEC,CAAiB,IAAKA,CAAC,CAACvB,EAAE,CAAC;QACpD,MAAMlC,QAAQ,CACXa,IAAI,CAAC,eAAe,CAAC,CACrBgC,MAAM,CAAC;UAAExC,MAAM,EAAE,cAAc;UAAEqD,eAAe,EAAE,IAAIhB,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;QAAE,CAAC,CAAC,CAC7EgB,EAAE,CAAC,IAAI,EAAEJ,MAAM,CAAC;MACrB;IACF,CAAC,CAAC,MAAM;MACN;IAAA;IAGF,OAAO;MACLlD,MAAM,EAAE,GAAG;MACXN,IAAI,EAAE;QAAEqC,OAAO,EAAE,IAAI;QAAEwB,OAAO,EAAElC,IAAI,CAACQ,EAAE;QAAE2B,QAAQ,EAAEX;MAAgB;IACrE,CAAC;EACH;;EAEA;EACA;EACA,IAAIrD,QAAQ,KAAK,QAAQ,KAAKC,MAAM,KAAK,KAAK,IAAIA,MAAM,KAAK,MAAM,CAAC,EAAE;IACpE;IACA,MAAMgE,OAAO,GAAI/D,IAAI,EAAUU,QAAQ,IAAIP,WAAW,EAAE6D,GAAG,CAAC,UAAU,CAAC;IACvE,IAAI,CAACD,OAAO,EAAE;MACZ,OAAO;QAAEzD,MAAM,EAAE,GAAG;QAAEN,IAAI,EAAE;UAAEO,KAAK,EAAE;QAAoB;MAAE,CAAC;IAC9D;;IAEA;IACA,IAAIL,IAAI,CAACE,MAAM,EAAE;MACf,MAAMO,SAAS,GAAG,MAAMlB,kBAAkB,CAACQ,QAAQ,EAAEC,IAAI,CAACE,MAAM,EAAE2D,OAAO,CAAC;MAC1E,IAAI,CAACpD,SAAS,EAAE;QACd,OAAO;UAAEL,MAAM,EAAE,GAAG;UAAEN,IAAI,EAAE;YAAEO,KAAK,EAAE;UAA8C;QAAE,CAAC;MACxF;IACF,CAAC,MAAM,IAAI,CAACL,IAAI,CAACG,aAAa,EAAE;MAC9B,OAAO;QAAEC,MAAM,EAAE,GAAG;QAAEN,IAAI,EAAE;UAAEO,KAAK,EAAE;QAA0B;MAAE,CAAC;IACpE;IAEA,MAAM;MAAEK,IAAI,EAAEqD,KAAK;MAAE1D;IAAM,CAAC,GAAG,MAAMN,QAAQ,CAC1Ca,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,2FAA2F,CAAC,CACnGC,EAAE,CAAC,UAAU,EAAE+C,OAAO,CAAC,CACvBV,KAAK,CAAC,YAAY,EAAE;MAAEC,SAAS,EAAE;IAAM,CAAC,CAAC;IAE5C,IAAI/C,KAAK,EAAE;MACT,OAAO;QAAED,MAAM,EAAE,GAAG;QAAEN,IAAI,EAAE;UAAEO,KAAK,EAAEA,KAAK,CAAC2B;QAAQ;MAAE,CAAC;IACxD;;IAEA;IACA,MAAMgC,OAAO,GAAG,CAACD,KAAK,IAAI,EAAE,EAAER,GAAG,CAAEU,CAAM,IAAKA,CAAC,CAAChC,EAAE,CAAC;IACnD,MAAM;MAAEvB,IAAI,EAAEmC;IAAS,CAAC,GAAGmB,OAAO,CAAClB,MAAM,GACrC,MAAM/C,QAAQ,CACXa,IAAI,CAAC,UAAU,CAAC,CAChBC,MAAM,CAAC,wCAAwC,CAAC,CAChD6C,EAAE,CAAC,SAAS,EAAEM,OAAO,CAAC,GACzB;MAAEtD,IAAI,EAAE;IAAG,CAAC;;IAEhB;IACA,MAAMwD,MAAM,GAAG,CAACH,KAAK,IAAI,EAAE,EAAER,GAAG,CAAEU,CAAM,KAAM;MAC5C,GAAGA,CAAC;MACJpB,QAAQ,EAAE,CAACA,QAAQ,IAAI,EAAE,EAAEsB,MAAM,CAAEX,CAAM,IAAKA,CAAC,CAACG,OAAO,KAAKM,CAAC,CAAChC,EAAE;IAClE,CAAC,CAAC,CAAC;IAEH,OAAO;MAAE7B,MAAM,EAAE,GAAG;MAAEN,IAAI,EAAE;QAAEqC,OAAO,EAAE,IAAI;QAAE4B,KAAK,EAAEG;MAAO;IAAE,CAAC;EAChE;EACA,OAAO,IAAI;AACb","ignoreList":[]}

package/dist/server/handlers/nodes-types.d.ts

@@ -0,0 +1,82 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export interface NodeRegistration {
+    name: string;
+    store_id: string;
+    capabilities?: string[];
+    hardware?: Record<string, unknown>;
+    version?: string;
+    config?: Record<string, unknown>;
+}
+export interface HeartbeatPayload {
+    hardware?: Record<string, unknown>;
+    capabilities?: string[];
+    version?: string;
+    channels?: Array<{
+        type: string;
+        name: string;
+        status: string;
+    }>;
+}
+export interface ChannelRegistration {
+    store_id: string;
+    node_id: string;
+    type: string;
+    name: string;
+    config?: Record<string, unknown>;
+    agent_id?: string;
+}
+/** Context returned by resolveConversation — carries customer identity + session state */
+export interface ConversationContext {
+    conversationId: string;
+    customerId: string | null;
+    customerName: string | null;
+    isNewSession: boolean;
+}
+/** Sender context passed through to the agent invoker for customer-aware prompts */
+export interface SenderContext {
+    senderId: string;
+    senderName?: string;
+    customerId?: string | null;
+    customerName?: string | null;
+    channelType?: string;
+    channelId?: string;
+    channelName?: string;
+}
+export type AgentInvoker = (supabase: SupabaseClient, agentId: string, message: string, storeId: string, conversationId: string, senderContext?: SenderContext) => Promise<{
+    success: boolean;
+    response?: string;
+    error?: string;
+}>;
+/** Set the agent invoker — called once from index.ts to break circular dependency */
+export declare function setNodeAgentInvoker(invoker: AgentInvoker): void;
+export declare function getNodeAgentInvoker(): AgentInvoker | null;
+export declare function hashApiKey(key: string): string;
+export declare function generateNodeApiKey(): string;
+export declare const nodeAuthCache: Map<string, {
+    node: {
+        id: string;
+        store_id: string;
+        name: string;
+    };
+    cachedAt: number;
+}>;
+/** Clear the node auth cache (for tests). */
+export declare function clearNodeAuthCache(): void;
+/** Authenticate a node by API key, returns node row or null.
+ *  Retries once on transient error, falls back to cache if both fail. */
+export declare function authenticateNode(supabase: SupabaseClient, apiKey: string): Promise<{
+    id: string;
+    store_id: string;
+    name: string;
+} | null>;
+/** Check if a user (by auth UUID) has access to a store. */
+export declare function userHasStoreAccess(supabase: SupabaseClient, authUserId: string, storeId: string): Promise<boolean>;
+/** Check if a Supabase error is transient (network, 5xx, Cloudflare) */
+export declare function isTransientError(error: {
+    message?: string;
+    code?: string;
+}): boolean;
+/** Log a node event to node_events */
+export declare function logNodeEvent(supabase: SupabaseClient, storeId: string, nodeId: string, eventType: string, details?: Record<string, unknown>): Promise<void>;
+/** Resolve or create a conversation for a sender on a channel. */
+export declare function resolveConversation(supabase: SupabaseClient, channelId: string, senderId: string, storeId: string, channelType?: string, senderName?: string): Promise<ConversationContext>;

package/dist/server/handlers/nodes-types.js

@@ -0,0 +1,220 @@
+// handlers/nodes-types.ts — Node & Channel types and helper functions
+// Auth: User JWT for management, Node API key for node operations
+
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { queueSpan, auditRowToSpan } from "../lib/clickhouse-buffer.js";
+
+// ============================================================================
+// TYPES
+// ============================================================================
+
+/** Context returned by resolveConversation — carries customer identity + session state */
+
+/** Sender context passed through to the agent invoker for customer-aware prompts */
+
+// Callback type for agent invocation (injected from index.ts to avoid circular deps)
+
+let agentInvoker = null;
+
+/** Set the agent invoker — called once from index.ts to break circular dependency */
+export function setNodeAgentInvoker(invoker) {
+  agentInvoker = invoker;
+}
+export function getNodeAgentInvoker() {
+  return agentInvoker;
+}
+
+// ============================================================================
+// HELPERS
+// ============================================================================
+
+export function hashApiKey(key) {
+  return createHash("sha256").update(key).digest("hex");
+}
+export function generateNodeApiKey() {
+  return randomBytes(32).toString("hex");
+}
+
+// 5-minute in-memory cache for node auth (survives transient Supabase 525s)
+const NODE_AUTH_CACHE_TTL = 5 * 60 * 1000;
+export const nodeAuthCache = new Map();
+
+/** Clear the node auth cache (for tests). */
+export function clearNodeAuthCache() {
+  nodeAuthCache.clear();
+}
+
+/** Authenticate a node by API key, returns node row or null.
+ *  Retries once on transient error, falls back to cache if both fail. */
+export async function authenticateNode(supabase, apiKey) {
+  const hash = hashApiKey(apiKey);
+
+  // Attempt DB query with one retry on transient errors
+  for (let attempt = 0; attempt < 2; attempt++) {
+    try {
+      const {
+        data,
+        error
+      } = await supabase.from("nodes").select("id, store_id, name").eq("api_key_hash", hash).single();
+      if (data) {
+        // Success — update cache and return
+        nodeAuthCache.set(hash, {
+          node: data,
+          cachedAt: Date.now()
+        });
+        return data;
+      }
+
+      // Non-transient error (e.g. row not found) — no retry
+      if (error && !isTransientError(error)) {
+        return null;
+      }
+
+      // Transient error on first attempt — retry
+      if (attempt === 0 && error) {
+        console.warn(`[node-auth] Transient error (attempt 1): ${error.message}. Retrying...`);
+        continue;
+      }
+      return null;
+    } catch (err) {
+      // Network-level error (fetch failure, timeout)
+      if (attempt === 0) {
+        console.warn(`[node-auth] Network error (attempt 1): ${err.message}. Retrying...`);
+        continue;
+      }
+    }
+  }
+
+  // Both attempts failed — fall back to cache
+  const cached = nodeAuthCache.get(hash);
+  if (cached && Date.now() - cached.cachedAt < NODE_AUTH_CACHE_TTL) {
+    console.warn(`[node-auth] Using cached auth for node ${cached.node.id} (DB unavailable)`);
+    return cached.node;
+  }
+  return null;
+}
+
+/** Check if a user (by auth UUID) has access to a store. */
+export async function userHasStoreAccess(supabase, authUserId, storeId) {
+  const {
+    data: membership
+  } = await supabase.from("store_members").select("id").eq("auth_user_id", authUserId).eq("store_id", storeId).limit(1);
+  if (membership?.length) return true;
+  const {
+    data: platformUser
+  } = await supabase.from("platform_users").select("id").eq("auth_id", authUserId).limit(1).single();
+  if (platformUser) {
+    const {
+      data: ownedStore
+    } = await supabase.from("stores").select("id").eq("owner_user_id", platformUser.id).eq("id", storeId).limit(1);
+    if (ownedStore?.length) return true;
+  }
+  return false;
+}
+
+/** Check if a Supabase error is transient (network, 5xx, Cloudflare) */
+export function isTransientError(error) {
+  const msg = error.message || "";
+  return msg.includes("525") || msg.includes("502") || msg.includes("503") || msg.includes("504") || msg.includes("520") || msg.includes("522") || msg.includes("524") || msg.includes("timeout") || msg.includes("ECONNRESET") || msg.includes("fetch failed");
+}
+
+/** Log a node event to node_events */
+export async function logNodeEvent(supabase, storeId, nodeId, eventType, details = {}) {
+  await supabase.from("node_events").insert({
+    store_id: storeId,
+    node_id: nodeId,
+    event_type: eventType,
+    details
+  });
+  try {
+    const now = new Date();
+    queueSpan(auditRowToSpan({
+      action: `node.${eventType}`,
+      severity: "info",
+      store_id: storeId,
+      resource_type: "whale_node",
+      resource_id: nodeId,
+      source: "whale-node",
+      user_id: details.registered_by || details.deleted_by || null,
+      trace_id: randomUUID(),
+      span_kind: "INTERNAL",
+      service_name: "whale-node",
+      status_code: "OK",
+      start_time: now.toISOString(),
+      end_time: now.toISOString(),
+      details: {
+        ...details,
+        node_id: nodeId,
+        event_type: eventType
+      }
+    }));
+  } catch {
+    // Telemetry must never break node operations
+  }
+}
+
+/** Resolve or create a conversation for a sender on a channel. */
+export async function resolveConversation(supabase, channelId, senderId, storeId, channelType, senderName) {
+  let customerId = null;
+  let customerName = null;
+  if (channelType) {
+    try {
+      const {
+        data
+      } = await supabase.rpc("resolve_sender_to_customer", {
+        p_store_id: storeId,
+        p_channel_type: channelType,
+        p_sender_id: senderId,
+        p_sender_name: senderName || null
+      });
+      if (data?.length) {
+        customerId = data[0].customer_id;
+        customerName = data[0].customer_name;
+      }
+    } catch {/* customer resolution non-critical */}
+  }
+  const thirtyMinAgo = new Date(Date.now() - 30 * 60 * 1000).toISOString();
+  const {
+    data: recent
+  } = await supabase.from("channel_messages").select("conversation_id").eq("channel_id", channelId).eq("sender_id", senderId).gt("created_at", thirtyMinAgo).not("conversation_id", "is", null).order("created_at", {
+    ascending: false
+  }).limit(1);
+  if (recent?.length && recent[0].conversation_id) {
+    if (customerId) {
+      Promise.resolve(supabase.from("ai_conversations").update({
+        customer_id: customerId
+      }).eq("id", recent[0].conversation_id).is("customer_id", null)).catch(() => {});
+    }
+    return {
+      conversationId: recent[0].conversation_id,
+      customerId,
+      customerName,
+      isNewSession: false
+    };
+  }
+  const newId = randomUUID();
+  const title = senderName ? `${senderName} via ${channelType || "channel"}` : `${senderId} via ${channelType || "channel"}`;
+  try {
+    await supabase.from("ai_conversations").insert({
+      id: newId,
+      store_id: storeId,
+      agent_id: null,
+      channel_id: channelId,
+      sender_id: senderId,
+      channel_type: channelType || null,
+      customer_id: customerId,
+      title,
+      metadata: {
+        source: "channel",
+        channel_type: channelType || "unknown"
+      }
+    });
+  } catch {/* ai_conversations insert non-critical */}
+  return {
+    conversationId: newId,
+    customerId,
+    customerName,
+    isNewSession: true
+  };
+}
+//# sourceMappingURL=nodes-types.js.map

package/dist/server/handlers/nodes-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodes-types.js","names":["createHash","randomBytes","randomUUID","queueSpan","auditRowToSpan","agentInvoker","setNodeAgentInvoker","invoker","getNodeAgentInvoker","hashApiKey","key","update","digest","generateNodeApiKey","toString","NODE_AUTH_CACHE_TTL","nodeAuthCache","Map","clearNodeAuthCache","clear","authenticateNode","supabase","apiKey","hash","attempt","data","error","from","select","eq","single","set","node","cachedAt","Date","now","isTransientError","console","warn","message","err","cached","get","id","userHasStoreAccess","authUserId","storeId","membership","limit","length","platformUser","ownedStore","msg","includes","logNodeEvent","nodeId","eventType","details","insert","store_id","node_id","event_type","action","severity","resource_type","resource_id","source","user_id","registered_by","deleted_by","trace_id","span_kind","service_name","status_code","start_time","toISOString","end_time","resolveConversation","channelId","senderId","channelType","senderName","customerId","customerName","rpc","p_store_id","p_channel_type","p_sender_id","p_sender_name","customer_id","customer_name","thirtyMinAgo","recent","gt","not","order","ascending","conversation_id","Promise","resolve","is","catch","conversationId","isNewSession","newId","title","agent_id","channel_id","sender_id","channel_type","metadata"],"sources":["../../../src/server/handlers/nodes-types.ts"],"sourcesContent":["// handlers/nodes-types.ts — Node & Channel types and helper functions\n// Auth: User JWT for management, Node API key for node operations\n\nimport { createHash, randomBytes, randomUUID } from \"node:crypto\";\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { queueSpan, auditRowToSpan } from \"../lib/clickhouse-buffer.js\";\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface NodeRegistration {\n  name: string;\n  store_id: string;\n  capabilities?: string[];\n  hardware?: Record<string, unknown>;\n  version?: string;\n  config?: Record<string, unknown>;\n}\n\nexport interface HeartbeatPayload {\n  hardware?: Record<string, unknown>;\n  capabilities?: string[];\n  version?: string;\n  channels?: Array<{ type: string; name: string; status: string }>;\n}\n\nexport interface ChannelRegistration {\n  store_id: string;\n  node_id: string;\n  type: string;\n  name: string;\n  config?: Record<string, unknown>;\n  agent_id?: string;\n}\n\n/** Context returned by resolveConversation — carries customer identity + session state */\nexport interface ConversationContext {\n  conversationId: string;\n  customerId: string | null;\n  customerName: string | null;\n  isNewSession: boolean;\n}\n\n/** Sender context passed through to the agent invoker for customer-aware prompts */\nexport interface SenderContext {\n  senderId: string;\n  senderName?: string;\n  customerId?: string | null;\n  customerName?: string | null;\n  channelType?: string;\n  channelId?: string;\n  channelName?: string;\n}\n\n// Callback type for agent invocation (injected from index.ts to avoid circular deps)\nexport type AgentInvoker = (\n  supabase: SupabaseClient,\n  agentId: string,\n  message: string,\n  storeId: string,\n  conversationId: string,\n  senderContext?: SenderContext,\n) => Promise<{ success: boolean; response?: string; error?: string }>;\n\nlet agentInvoker: AgentInvoker | null = null;\n\n/** Set the agent invoker — called once from index.ts to break circular dependency */\nexport function setNodeAgentInvoker(invoker: AgentInvoker): void {\n  agentInvoker = invoker;\n}\n\nexport function getNodeAgentInvoker(): AgentInvoker | null {\n  return agentInvoker;\n}\n\n// ============================================================================\n// HELPERS\n// ============================================================================\n\nexport function hashApiKey(key: string): string {\n  return createHash(\"sha256\").update(key).digest(\"hex\");\n}\n\nexport function generateNodeApiKey(): string {\n  return randomBytes(32).toString(\"hex\");\n}\n\n// 5-minute in-memory cache for node auth (survives transient Supabase 525s)\nconst NODE_AUTH_CACHE_TTL = 5 * 60 * 1000;\nexport const nodeAuthCache = new Map<string, { node: { id: string; store_id: string; name: string }; cachedAt: number }>();\n\n/** Clear the node auth cache (for tests). */\nexport function clearNodeAuthCache(): void {\n  nodeAuthCache.clear();\n}\n\n/** Authenticate a node by API key, returns node row or null.\n *  Retries once on transient error, falls back to cache if both fail. */\nexport async function authenticateNode(\n  supabase: SupabaseClient,\n  apiKey: string,\n): Promise<{ id: string; store_id: string; name: string } | null> {\n  const hash = hashApiKey(apiKey);\n\n  // Attempt DB query with one retry on transient errors\n  for (let attempt = 0; attempt < 2; attempt++) {\n    try {\n      const { data, error } = await supabase\n        .from(\"nodes\")\n        .select(\"id, store_id, name\")\n        .eq(\"api_key_hash\", hash)\n        .single();\n\n      if (data) {\n        // Success — update cache and return\n        nodeAuthCache.set(hash, { node: data, cachedAt: Date.now() });\n        return data;\n      }\n\n      // Non-transient error (e.g. row not found) — no retry\n      if (error && !isTransientError(error)) {\n        return null;\n      }\n\n      // Transient error on first attempt — retry\n      if (attempt === 0 && error) {\n        console.warn(`[node-auth] Transient error (attempt 1): ${error.message}. Retrying...`);\n        continue;\n      }\n\n      return null;\n    } catch (err) {\n      // Network-level error (fetch failure, timeout)\n      if (attempt === 0) {\n        console.warn(`[node-auth] Network error (attempt 1): ${(err as Error).message}. Retrying...`);\n        continue;\n      }\n    }\n  }\n\n  // Both attempts failed — fall back to cache\n  const cached = nodeAuthCache.get(hash);\n  if (cached && Date.now() - cached.cachedAt < NODE_AUTH_CACHE_TTL) {\n    console.warn(`[node-auth] Using cached auth for node ${cached.node.id} (DB unavailable)`);\n    return cached.node;\n  }\n\n  return null;\n}\n\n/** Check if a user (by auth UUID) has access to a store. */\nexport async function userHasStoreAccess(\n  supabase: SupabaseClient,\n  authUserId: string,\n  storeId: string,\n): Promise<boolean> {\n  const { data: membership } = await supabase\n    .from(\"store_members\")\n    .select(\"id\")\n    .eq(\"auth_user_id\", authUserId)\n    .eq(\"store_id\", storeId)\n    .limit(1);\n  if (membership?.length) return true;\n\n  const { data: platformUser } = await supabase\n    .from(\"platform_users\")\n    .select(\"id\")\n    .eq(\"auth_id\", authUserId)\n    .limit(1)\n    .single();\n  if (platformUser) {\n    const { data: ownedStore } = await supabase\n      .from(\"stores\")\n      .select(\"id\")\n      .eq(\"owner_user_id\", platformUser.id)\n      .eq(\"id\", storeId)\n      .limit(1);\n    if (ownedStore?.length) return true;\n  }\n\n  return false;\n}\n\n/** Check if a Supabase error is transient (network, 5xx, Cloudflare) */\nexport function isTransientError(error: { message?: string; code?: string }): boolean {\n  const msg = error.message || \"\";\n  return msg.includes(\"525\") || msg.includes(\"502\") || msg.includes(\"503\")\n    || msg.includes(\"504\") || msg.includes(\"520\") || msg.includes(\"522\")\n    || msg.includes(\"524\") || msg.includes(\"timeout\") || msg.includes(\"ECONNRESET\")\n    || msg.includes(\"fetch failed\");\n}\n\n/** Log a node event to node_events */\nexport async function logNodeEvent(\n  supabase: SupabaseClient,\n  storeId: string,\n  nodeId: string,\n  eventType: string,\n  details: Record<string, unknown> = {},\n) {\n  await supabase.from(\"node_events\").insert({\n    store_id: storeId,\n    node_id: nodeId,\n    event_type: eventType,\n    details,\n  });\n\n  try {\n    const now = new Date();\n    queueSpan(auditRowToSpan({\n      action: `node.${eventType}`,\n      severity: \"info\",\n      store_id: storeId,\n      resource_type: \"whale_node\",\n      resource_id: nodeId,\n      source: \"whale-node\",\n      user_id: (details.registered_by || details.deleted_by || null) as string | null,\n      trace_id: randomUUID(),\n      span_kind: \"INTERNAL\",\n      service_name: \"whale-node\",\n      status_code: \"OK\",\n      start_time: now.toISOString(),\n      end_time: now.toISOString(),\n      details: { ...details, node_id: nodeId, event_type: eventType },\n    }));\n  } catch {\n    // Telemetry must never break node operations\n  }\n}\n\n/** Resolve or create a conversation for a sender on a channel. */\nexport async function resolveConversation(\n  supabase: SupabaseClient,\n  channelId: string,\n  senderId: string,\n  storeId: string,\n  channelType?: string,\n  senderName?: string,\n): Promise<ConversationContext> {\n  let customerId: string | null = null;\n  let customerName: string | null = null;\n  if (channelType) {\n    try {\n      const { data } = await supabase.rpc(\"resolve_sender_to_customer\", {\n        p_store_id: storeId,\n        p_channel_type: channelType,\n        p_sender_id: senderId,\n        p_sender_name: senderName || null,\n      });\n      if (data?.length) {\n        customerId = data[0].customer_id;\n        customerName = data[0].customer_name;\n      }\n    } catch { /* customer resolution non-critical */ }\n  }\n\n  const thirtyMinAgo = new Date(Date.now() - 30 * 60 * 1000).toISOString();\n  const { data: recent } = await supabase\n    .from(\"channel_messages\")\n    .select(\"conversation_id\")\n    .eq(\"channel_id\", channelId)\n    .eq(\"sender_id\", senderId)\n    .gt(\"created_at\", thirtyMinAgo)\n    .not(\"conversation_id\", \"is\", null)\n    .order(\"created_at\", { ascending: false })\n    .limit(1);\n\n  if (recent?.length && recent[0].conversation_id) {\n    if (customerId) {\n      Promise.resolve(\n        supabase.from(\"ai_conversations\")\n          .update({ customer_id: customerId })\n          .eq(\"id\", recent[0].conversation_id)\n          .is(\"customer_id\", null)\n      ).catch(() => {});\n    }\n    return { conversationId: recent[0].conversation_id, customerId, customerName, isNewSession: false };\n  }\n\n  const newId = randomUUID();\n  const title = senderName\n    ? `${senderName} via ${channelType || \"channel\"}`\n    : `${senderId} via ${channelType || \"channel\"}`;\n  try {\n    await supabase.from(\"ai_conversations\").insert({\n      id: newId,\n      store_id: storeId,\n      agent_id: null,\n      channel_id: channelId,\n      sender_id: senderId,\n      channel_type: channelType || null,\n      customer_id: customerId,\n      title,\n      metadata: { source: \"channel\", channel_type: channelType || \"unknown\" },\n    });\n  } catch { /* ai_conversations insert non-critical */ }\n\n  return { conversationId: newId, customerId, customerName, isNewSession: true };\n}\n"],"mappings":"AAAA;AACA;;AAEA,SAASA,UAAU,EAAEC,WAAW,EAAEC,UAAU,QAAQ,aAAa;AAEjE,SAASC,SAAS,EAAEC,cAAc,QAAQ,6BAA6B;;AAEvE;AACA;AACA;;AA2BA;;AAQA;;AAWA;;AAUA,IAAIC,YAAiC,GAAG,IAAI;;AAE5C;AACA,OAAO,SAASC,mBAAmBA,CAACC,OAAqB,EAAQ;EAC/DF,YAAY,GAAGE,OAAO;AACxB;AAEA,OAAO,SAASC,mBAAmBA,CAAA,EAAwB;EACzD,OAAOH,YAAY;AACrB;;AAEA;AACA;AACA;;AAEA,OAAO,SAASI,UAAUA,CAACC,GAAW,EAAU;EAC9C,OAAOV,UAAU,CAAC,QAAQ,CAAC,CAACW,MAAM,CAACD,GAAG,CAAC,CAACE,MAAM,CAAC,KAAK,CAAC;AACvD;AAEA,OAAO,SAASC,kBAAkBA,CAAA,EAAW;EAC3C,OAAOZ,WAAW,CAAC,EAAE,CAAC,CAACa,QAAQ,CAAC,KAAK,CAAC;AACxC;;AAEA;AACA,MAAMC,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;AACzC,OAAO,MAAMC,aAAa,GAAG,IAAIC,GAAG,CAAqF,CAAC;;AAE1H;AACA,OAAO,SAASC,kBAAkBA,CAAA,EAAS;EACzCF,aAAa,CAACG,KAAK,CAAC,CAAC;AACvB;;AAEA;AACA;AACA,OAAO,eAAeC,gBAAgBA,CACpCC,QAAwB,EACxBC,MAAc,EACkD;EAChE,MAAMC,IAAI,GAAGd,UAAU,CAACa,MAAM,CAAC;;EAE/B;EACA,KAAK,IAAIE,OAAO,GAAG,CAAC,EAAEA,OAAO,GAAG,CAAC,EAAEA,OAAO,EAAE,EAAE;IAC5C,IAAI;MACF,MAAM;QAAEC,IAAI;QAAEC;MAAM,CAAC,GAAG,MAAML,QAAQ,CACnCM,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,oBAAoB,CAAC,CAC5BC,EAAE,CAAC,cAAc,EAAEN,IAAI,CAAC,CACxBO,MAAM,CAAC,CAAC;MAEX,IAAIL,IAAI,EAAE;QACR;QACAT,aAAa,CAACe,GAAG,CAACR,IAAI,EAAE;UAAES,IAAI,EAAEP,IAAI;UAAEQ,QAAQ,EAAEC,IAAI,CAACC,GAAG,CAAC;QAAE,CAAC,CAAC;QAC7D,OAAOV,IAAI;MACb;;MAEA;MACA,IAAIC,KAAK,IAAI,CAACU,gBAAgB,CAACV,KAAK,CAAC,EAAE;QACrC,OAAO,IAAI;MACb;;MAEA;MACA,IAAIF,OAAO,KAAK,CAAC,IAAIE,KAAK,EAAE;QAC1BW,OAAO,CAACC,IAAI,CAAC,4CAA4CZ,KAAK,CAACa,OAAO,eAAe,CAAC;QACtF;MACF;MAEA,OAAO,IAAI;IACb,CAAC,CAAC,OAAOC,GAAG,EAAE;MACZ;MACA,IAAIhB,OAAO,KAAK,CAAC,EAAE;QACjBa,OAAO,CAACC,IAAI,CAAC,0CAA2CE,GAAG,CAAWD,OAAO,eAAe,CAAC;QAC7F;MACF;IACF;EACF;;EAEA;EACA,MAAME,MAAM,GAAGzB,aAAa,CAAC0B,GAAG,CAACnB,IAAI,CAAC;EACtC,IAAIkB,MAAM,IAAIP,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGM,MAAM,CAACR,QAAQ,GAAGlB,mBAAmB,EAAE;IAChEsB,OAAO,CAACC,IAAI,CAAC,0CAA0CG,MAAM,CAACT,IAAI,CAACW,EAAE,mBAAmB,CAAC;IACzF,OAAOF,MAAM,CAACT,IAAI;EACpB;EAEA,OAAO,IAAI;AACb;;AAEA;AACA,OAAO,eAAeY,kBAAkBA,CACtCvB,QAAwB,EACxBwB,UAAkB,EAClBC,OAAe,EACG;EAClB,MAAM;IAAErB,IAAI,EAAEsB;EAAW,CAAC,GAAG,MAAM1B,QAAQ,CACxCM,IAAI,CAAC,eAAe,CAAC,CACrBC,MAAM,CAAC,IAAI,CAAC,CACZC,EAAE,CAAC,cAAc,EAAEgB,UAAU,CAAC,CAC9BhB,EAAE,CAAC,UAAU,EAAEiB,OAAO,CAAC,CACvBE,KAAK,CAAC,CAAC,CAAC;EACX,IAAID,UAAU,EAAEE,MAAM,EAAE,OAAO,IAAI;EAEnC,MAAM;IAAExB,IAAI,EAAEyB;EAAa,CAAC,GAAG,MAAM7B,QAAQ,CAC1CM,IAAI,CAAC,gBAAgB,CAAC,CACtBC,MAAM,CAAC,IAAI,CAAC,CACZC,EAAE,CAAC,SAAS,EAAEgB,UAAU,CAAC,CACzBG,KAAK,CAAC,CAAC,CAAC,CACRlB,MAAM,CAAC,CAAC;EACX,IAAIoB,YAAY,EAAE;IAChB,MAAM;MAAEzB,IAAI,EAAE0B;IAAW,CAAC,GAAG,MAAM9B,QAAQ,CACxCM,IAAI,CAAC,QAAQ,CAAC,CACdC,MAAM,CAAC,IAAI,CAAC,CACZC,EAAE,CAAC,eAAe,EAAEqB,YAAY,CAACP,EAAE,CAAC,CACpCd,EAAE,CAAC,IAAI,EAAEiB,OAAO,CAAC,CACjBE,KAAK,CAAC,CAAC,CAAC;IACX,IAAIG,UAAU,EAAEF,MAAM,EAAE,OAAO,IAAI;EACrC;EAEA,OAAO,KAAK;AACd;;AAEA;AACA,OAAO,SAASb,gBAAgBA,CAACV,KAA0C,EAAW;EACpF,MAAM0B,GAAG,GAAG1B,KAAK,CAACa,OAAO,IAAI,EAAE;EAC/B,OAAOa,GAAG,CAACC,QAAQ,CAAC,KAAK,CAAC,IAAID,GAAG,CAACC,QAAQ,CAAC,KAAK,CAAC,IAAID,GAAG,CAACC,QAAQ,CAAC,KAAK,CAAC,IACnED,GAAG,CAACC,QAAQ,CAAC,KAAK,CAAC,IAAID,GAAG,CAACC,QAAQ,CAAC,KAAK,CAAC,IAAID,GAAG,CAACC,QAAQ,CAAC,KAAK,CAAC,IACjED,GAAG,CAACC,QAAQ,CAAC,KAAK,CAAC,IAAID,GAAG,CAACC,QAAQ,CAAC,SAAS,CAAC,IAAID,GAAG,CAACC,QAAQ,CAAC,YAAY,CAAC,IAC5ED,GAAG,CAACC,QAAQ,CAAC,cAAc,CAAC;AACnC;;AAEA;AACA,OAAO,eAAeC,YAAYA,CAChCjC,QAAwB,EACxByB,OAAe,EACfS,MAAc,EACdC,SAAiB,EACjBC,OAAgC,GAAG,CAAC,CAAC,EACrC;EACA,MAAMpC,QAAQ,CAACM,IAAI,CAAC,aAAa,CAAC,CAAC+B,MAAM,CAAC;IACxCC,QAAQ,EAAEb,OAAO;IACjBc,OAAO,EAAEL,MAAM;IACfM,UAAU,EAAEL,SAAS;IACrBC;EACF,CAAC,CAAC;EAEF,IAAI;IACF,MAAMtB,GAAG,GAAG,IAAID,IAAI,CAAC,CAAC;IACtB/B,SAAS,CAACC,cAAc,CAAC;MACvB0D,MAAM,EAAE,QAAQN,SAAS,EAAE;MAC3BO,QAAQ,EAAE,MAAM;MAChBJ,QAAQ,EAAEb,OAAO;MACjBkB,aAAa,EAAE,YAAY;MAC3BC,WAAW,EAAEV,MAAM;MACnBW,MAAM,EAAE,YAAY;MACpBC,OAAO,EAAGV,OAAO,CAACW,aAAa,IAAIX,OAAO,CAACY,UAAU,IAAI,IAAsB;MAC/EC,QAAQ,EAAEpE,UAAU,CAAC,CAAC;MACtBqE,SAAS,EAAE,UAAU;MACrBC,YAAY,EAAE,YAAY;MAC1BC,WAAW,EAAE,IAAI;MACjBC,UAAU,EAAEvC,GAAG,CAACwC,WAAW,CAAC,CAAC;MAC7BC,QAAQ,EAAEzC,GAAG,CAACwC,WAAW,CAAC,CAAC;MAC3BlB,OAAO,EAAE;QAAE,GAAGA,OAAO;QAAEG,OAAO,EAAEL,MAAM;QAAEM,UAAU,EAAEL;MAAU;IAChE,CAAC,CAAC,CAAC;EACL,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ;;AAEA;AACA,OAAO,eAAeqB,mBAAmBA,CACvCxD,QAAwB,EACxByD,SAAiB,EACjBC,QAAgB,EAChBjC,OAAe,EACfkC,WAAoB,EACpBC,UAAmB,EACW;EAC9B,IAAIC,UAAyB,GAAG,IAAI;EACpC,IAAIC,YAA2B,GAAG,IAAI;EACtC,IAAIH,WAAW,EAAE;IACf,IAAI;MACF,MAAM;QAAEvD;MAAK,CAAC,GAAG,MAAMJ,QAAQ,CAAC+D,GAAG,CAAC,4BAA4B,EAAE;QAChEC,UAAU,EAAEvC,OAAO;QACnBwC,cAAc,EAAEN,WAAW;QAC3BO,WAAW,EAAER,QAAQ;QACrBS,aAAa,EAAEP,UAAU,IAAI;MAC/B,CAAC,CAAC;MACF,IAAIxD,IAAI,EAAEwB,MAAM,EAAE;QAChBiC,UAAU,GAAGzD,IAAI,CAAC,CAAC,CAAC,CAACgE,WAAW;QAChCN,YAAY,GAAG1D,IAAI,CAAC,CAAC,CAAC,CAACiE,aAAa;MACtC;IACF,CAAC,CAAC,MAAM,CAAE;EACZ;EAEA,MAAMC,YAAY,GAAG,IAAIzD,IAAI,CAACA,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAACwC,WAAW,CAAC,CAAC;EACxE,MAAM;IAAElD,IAAI,EAAEmE;EAAO,CAAC,GAAG,MAAMvE,QAAQ,CACpCM,IAAI,CAAC,kBAAkB,CAAC,CACxBC,MAAM,CAAC,iBAAiB,CAAC,CACzBC,EAAE,CAAC,YAAY,EAAEiD,SAAS,CAAC,CAC3BjD,EAAE,CAAC,WAAW,EAAEkD,QAAQ,CAAC,CACzBc,EAAE,CAAC,YAAY,EAAEF,YAAY,CAAC,CAC9BG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,CAClCC,KAAK,CAAC,YAAY,EAAE;IAAEC,SAAS,EAAE;EAAM,CAAC,CAAC,CACzChD,KAAK,CAAC,CAAC,CAAC;EAEX,IAAI4C,MAAM,EAAE3C,MAAM,IAAI2C,MAAM,CAAC,CAAC,CAAC,CAACK,eAAe,EAAE;IAC/C,IAAIf,UAAU,EAAE;MACdgB,OAAO,CAACC,OAAO,CACb9E,QAAQ,CAACM,IAAI,CAAC,kBAAkB,CAAC,CAC9BhB,MAAM,CAAC;QAAE8E,WAAW,EAAEP;MAAW,CAAC,CAAC,CACnCrD,EAAE,CAAC,IAAI,EAAE+D,MAAM,CAAC,CAAC,CAAC,CAACK,eAAe,CAAC,CACnCG,EAAE,CAAC,aAAa,EAAE,IAAI,CAC3B,CAAC,CAACC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnB;IACA,OAAO;MAAEC,cAAc,EAAEV,MAAM,CAAC,CAAC,CAAC,CAACK,eAAe;MAAEf,UAAU;MAAEC,YAAY;MAAEoB,YAAY,EAAE;IAAM,CAAC;EACrG;EAEA,MAAMC,KAAK,GAAGtG,UAAU,CAAC,CAAC;EAC1B,MAAMuG,KAAK,GAAGxB,UAAU,GACpB,GAAGA,UAAU,QAAQD,WAAW,IAAI,SAAS,EAAE,GAC/C,GAAGD,QAAQ,QAAQC,WAAW,IAAI,SAAS,EAAE;EACjD,IAAI;IACF,MAAM3D,QAAQ,CAACM,IAAI,CAAC,kBAAkB,CAAC,CAAC+B,MAAM,CAAC;MAC7Cf,EAAE,EAAE6D,KAAK;MACT7C,QAAQ,EAAEb,OAAO;MACjB4D,QAAQ,EAAE,IAAI;MACdC,UAAU,EAAE7B,SAAS;MACrB8B,SAAS,EAAE7B,QAAQ;MACnB8B,YAAY,EAAE7B,WAAW,IAAI,IAAI;MACjCS,WAAW,EAAEP,UAAU;MACvBuB,KAAK;MACLK,QAAQ,EAAE;QAAE5C,MAAM,EAAE,SAAS;QAAE2C,YAAY,EAAE7B,WAAW,IAAI;MAAU;IACxE,CAAC,CAAC;EACJ,CAAC,CAAC,MAAM,CAAE;EAEV,OAAO;IAAEsB,cAAc,EAAEE,KAAK;IAAEtB,UAAU;IAAEC,YAAY;IAAEoB,YAAY,EAAE;EAAK,CAAC;AAChF","ignoreList":[]}