whale-code 6.5.5 → 6.5.7

package/dist/server/server-agent.js

@@ -0,0 +1,162 @@
+// server/server-agent.ts — Shared agent helpers (system prompt, memory, cost, persistence)
+// Used by both SSE chat and channel agent paths so logic is never duplicated.
+// Extracted from index.ts for modularity.
+
+import { createLogger } from "./lib/logger.js";
+import { sanitizeAndLog } from "./lib/prompt-sanitizer.js";
+const log = createLogger("server-agent");
+
+// ============================================================================
+// BUILD AGENT SYSTEM PROMPT
+// ============================================================================
+
+/** Build the full system prompt for an agent. Both SSE chat and channel paths
+ *  call this so the prompt logic is never duplicated. */
+export async function buildAgentSystemPrompt(supabase, agent, storeId, message, tools, opts) {
+  // --- STATIC portion (cache-friendly, same across conversations) ---
+  const rawAgentPrompt = agent.system_prompt || "You are a helpful assistant.";
+  let systemPrompt = sanitizeAndLog(rawAgentPrompt, "buildAgentSystemPrompt", {
+    agentId: agent.id
+  });
+  if (storeId) systemPrompt += `\n\nYou are operating for store_id: ${storeId}. Always include this in tool calls that require it.`;
+  if (!agent.can_modify) systemPrompt += "\n\nIMPORTANT: You have read-only access. Do not attempt to modify any data.";
+  if (agent.tone && agent.tone !== "professional") systemPrompt += `\n\nTone: Respond in a ${agent.tone} tone.`;
+  if (agent.verbosity === "concise") systemPrompt += "\n\nBe concise — short answers, minimal explanation.";else if (agent.verbosity === "verbose") systemPrompt += "\n\nBe thorough — provide detailed answers with full context.";
+  if (agent.context_config) {
+    const ctx = agent.context_config;
+    if (ctx.includeLocations && ctx.locationIds?.length) systemPrompt += `\n\nFocus on these locations: ${ctx.locationIds.join(", ")}`;
+    if (ctx.includeCustomers && ctx.customerSegments?.length) systemPrompt += `\n\nFocus on these customer segments: ${ctx.customerSegments.join(", ")}`;
+  }
+  const toolNames = tools.map(t => t.name);
+  systemPrompt += `\n\n## Available Tools\nYou have ${toolNames.length} core tools available in this session:\n${toolNames.join(", ")}\n\nFor local machine operations, use the \`local_agent\` tool (exec, tools, discover actions). For cloud security tools, use \`kali\`. Do NOT reference CLI-local tools like read_file, write_file, edit_file, glob, grep, run_command — those are not available in this environment.`;
+  const extendedTools = opts?.extendedTools || [];
+  if (extendedTools.length > 0) {
+    systemPrompt += `\n\n## Extended Tools (call discover_tools to activate)\nThese tools are available but not loaded yet. Call \`discover_tools\` with the tool name(s) before using them:\n`;
+    for (const t of extendedTools) {
+      const shortDesc = t.description.split(".")[0];
+      systemPrompt += `- **${t.name}**: ${shortDesc}\n`;
+    }
+  }
+
+  // --- DYNAMIC portion (changes per conversation) ---
+  const dynamicParts = [];
+  if (opts?.clientContext && typeof opts.clientContext === "object") {
+    const context = opts.clientContext;
+    const ctxParts = [];
+    if (context.storeName) ctxParts.push(`Store: ${context.storeName}`);
+    if (context.locationName) {
+      let loc = `Location: ${context.locationName}`;
+      if (context.locationAddress) loc += ` (${context.locationAddress})`;
+      if (context.locationType) loc += ` [${context.locationType}]`;
+      ctxParts.push(loc);
+    }
+    if (context.userName) {
+      ctxParts.push(`User: ${context.userName}${opts.userEmail ? ` (${opts.userEmail})` : ""}`);
+    } else if (opts.userEmail) {
+      ctxParts.push(`User: ${opts.userEmail}`);
+    }
+    if (context.conversationType) {
+      ctxParts.push(`Channel: ${context.conversationTitle || context.conversationType} (${context.conversationType})`);
+    }
+    if (ctxParts.length) {
+      dynamicParts.push(`## Current Session Context\n${ctxParts.join("\n")}`);
+    }
+  }
+
+  // Parallel DB lookups: customer fetch + memory recall
+  const customerPromise = opts?.senderContext?.customerId && storeId ? Promise.resolve(supabase.from("v_store_customers").select("first_name, last_name, email, phone, loyalty_tier, total_orders, total_spent, lifetime_value").eq("id", opts.senderContext.customerId).eq("store_id", storeId).single()).then(({
+    data
+  }) => data).catch(() => null) : Promise.resolve(null);
+  const memoryPromise = storeId ? Promise.resolve(supabase.rpc("recall_memory", {
+    p_agent_id: agent.id,
+    p_query: message.substring(0, 200),
+    p_type: null,
+    p_limit: 5
+  })).then(({
+    data
+  }) => data).catch(err => {
+    log.warn({
+      err: err.message
+    }, "memory recall failed");
+    return null;
+  }) : Promise.resolve(null);
+  const [cust, memories] = await Promise.all([customerPromise, memoryPromise]);
+  if (cust && opts?.senderContext?.customerId) {
+    dynamicParts.push(`## Current Customer\nName: ${cust.first_name} ${cust.last_name}\nEmail: ${cust.email || "N/A"}\nPhone: ${cust.phone || "N/A"}\nLoyalty: ${cust.loyalty_tier || "None"}\nOrders: ${cust.total_orders || 0}\nSpent: $${(cust.total_spent || 0).toFixed(2)}\nCustomer ID: ${opts.senderContext.customerId}`);
+  } else if (opts?.senderContext) {
+    const sc = opts.senderContext;
+    dynamicParts.push(`## Sender\nID: ${sc.senderId}\nName: ${sc.senderName || "Unknown"}\nChannel: ${sc.channelType || "unknown"}${sc.channelName ? ` (${sc.channelName})` : ""}\n(No customer record matched — use CRM tools to look them up if needed)`);
+  }
+  if (memories?.length) {
+    const memBlock = memories.map(m => `- [${m.memory_type}] ${m.key}: ${JSON.stringify(m.value).substring(0, 100)}`).join("\n");
+    dynamicParts.push(`## Agent Memory\nRelevant memories from previous conversations:\n${memBlock}`);
+  }
+  const dynamicContext = dynamicParts.join("\n\n");
+  return {
+    systemPrompt,
+    dynamicContext
+  };
+}
+
+// ============================================================================
+// MEMORY EXTRACTION
+// ============================================================================
+
+export async function extractAndStoreMemories(supabase, anthropic, agentId, storeId, userMessage, assistantResponse) {
+  const extraction = await anthropic.messages.create({
+    model: "claude-haiku-4-5-20251001",
+    max_tokens: 500,
+    system: `Extract key facts worth remembering from this conversation turn.
+Return JSON array: [{"key": "short_key", "value": {"detail": "..."}, "type": "short_term|long_term|entity"}]
+Rules:
+- Only extract genuinely useful facts (preferences, decisions, corrections, entities)
+- "entity" for people/businesses/products mentioned
+- "long_term" for preferences, patterns, decisions
+- "short_term" for context that may expire
+- Return [] if nothing worth remembering
+- Max 3 items per turn`,
+    messages: [{
+      role: "user",
+      content: `User: ${userMessage.substring(0, 500)}\n\nAssistant: ${assistantResponse.substring(0, 1000)}`
+    }]
+  });
+  const text = extraction.content.find(b => b.type === "text")?.text || "[]";
+  const match = text.match(/\[[\s\S]*\]/);
+  if (!match) return;
+  let items;
+  try {
+    items = JSON.parse(match[0]);
+  } catch {
+    return;
+  }
+  for (const item of items.slice(0, 3)) {
+    if (!item.key) continue;
+    await supabase.rpc("store_memory", {
+      p_agent_id: agentId,
+      p_store_id: storeId,
+      p_type: item.type || "short_term",
+      p_key: item.key,
+      p_value: item.value || {}
+    });
+  }
+}
+
+// ============================================================================
+// COST BUDGET TRACKING
+// ============================================================================
+
+export async function updateCostBudgets(supabase, storeId, agentId, costUsd) {
+  const {
+    error
+  } = await supabase.rpc("increment_cost_budget", {
+    p_store_id: storeId,
+    p_agent_id: agentId,
+    p_cost_usd: costUsd
+  });
+  if (error) {
+    console.error("[cost-budget] increment_cost_budget RPC failed:", error.message);
+  }
+}
+
+// persistAgentTurn is in server-persist.ts to keep this file under 300 lines
+//# sourceMappingURL=server-agent.js.map

package/dist/server/server-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-agent.js","names":["createLogger","sanitizeAndLog","log","buildAgentSystemPrompt","supabase","agent","storeId","message","tools","opts","rawAgentPrompt","system_prompt","systemPrompt","agentId","id","can_modify","tone","verbosity","context_config","ctx","includeLocations","locationIds","length","join","includeCustomers","customerSegments","toolNames","map","t","name","extendedTools","shortDesc","description","split","dynamicParts","clientContext","context","ctxParts","storeName","push","locationName","loc","locationAddress","locationType","userName","userEmail","conversationType","conversationTitle","customerPromise","senderContext","customerId","Promise","resolve","from","select","eq","single","then","data","catch","memoryPromise","rpc","p_agent_id","p_query","substring","p_type","p_limit","err","warn","cust","memories","all","first_name","last_name","email","phone","loyalty_tier","total_orders","total_spent","toFixed","sc","senderId","senderName","channelType","channelName","memBlock","m","memory_type","key","JSON","stringify","value","dynamicContext","extractAndStoreMemories","anthropic","userMessage","assistantResponse","extraction","messages","create","model","max_tokens","system","role","content","text","find","b","type","match","items","parse","item","slice","p_store_id","p_key","p_value","updateCostBudgets","costUsd","error","p_cost_usd","console"],"sources":["../../src/server/server-agent.ts"],"sourcesContent":["// server/server-agent.ts — Shared agent helpers (system prompt, memory, cost, persistence)\n// Used by both SSE chat and channel agent paths so logic is never duplicated.\n// Extracted from index.ts for modularity.\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport Anthropic from \"@anthropic-ai/sdk\";\nimport { createLogger } from \"./lib/logger.js\";\nimport { sanitizeAndLog } from \"./lib/prompt-sanitizer.js\";\nimport { queueSpan, auditRowToSpan, classifyErrorType } from \"./lib/clickhouse-buffer.js\";\nimport type { ToolDef, AgentConfig } from \"./tool-router.js\";\nimport type { SenderContext } from \"./handlers/nodes.js\";\nimport { getAnthropicClient } from \"./server-helpers.js\";\n\nconst log = createLogger(\"server-agent\");\n\n// ============================================================================\n// BUILD AGENT SYSTEM PROMPT\n// ============================================================================\n\n/** Build the full system prompt for an agent. Both SSE chat and channel paths\n *  call this so the prompt logic is never duplicated. */\nexport async function buildAgentSystemPrompt(\n  supabase: SupabaseClient,\n  agent: AgentConfig,\n  storeId: string | undefined,\n  message: string,\n  tools: ToolDef[],\n  opts?: {\n    senderContext?: SenderContext;\n    clientContext?: Record<string, any>;\n    userId?: string;\n    userEmail?: string | null;\n    extendedTools?: Array<{ name: string; description: string }>;\n  },\n): Promise<{ systemPrompt: string; dynamicContext: string }> {\n  // --- STATIC portion (cache-friendly, same across conversations) ---\n  const rawAgentPrompt = agent.system_prompt || \"You are a helpful assistant.\";\n  let systemPrompt = sanitizeAndLog(rawAgentPrompt, \"buildAgentSystemPrompt\", { agentId: agent.id });\n  if (storeId) systemPrompt += `\\n\\nYou are operating for store_id: ${storeId}. Always include this in tool calls that require it.`;\n  if (!agent.can_modify) systemPrompt += \"\\n\\nIMPORTANT: You have read-only access. Do not attempt to modify any data.\";\n  if (agent.tone && agent.tone !== \"professional\") systemPrompt += `\\n\\nTone: Respond in a ${agent.tone} tone.`;\n  if (agent.verbosity === \"concise\") systemPrompt += \"\\n\\nBe concise — short answers, minimal explanation.\";\n  else if (agent.verbosity === \"verbose\") systemPrompt += \"\\n\\nBe thorough — provide detailed answers with full context.\";\n\n  if (agent.context_config) {\n    const ctx = agent.context_config;\n    if (ctx.includeLocations && ctx.locationIds?.length) systemPrompt += `\\n\\nFocus on these locations: ${ctx.locationIds.join(\", \")}`;\n    if (ctx.includeCustomers && ctx.customerSegments?.length) systemPrompt += `\\n\\nFocus on these customer segments: ${ctx.customerSegments.join(\", \")}`;\n  }\n\n  const toolNames = tools.map(t => t.name);\n  systemPrompt += `\\n\\n## Available Tools\\nYou have ${toolNames.length} core tools available in this session:\\n${toolNames.join(\", \")}\\n\\nFor local machine operations, use the \\`local_agent\\` tool (exec, tools, discover actions). For cloud security tools, use \\`kali\\`. Do NOT reference CLI-local tools like read_file, write_file, edit_file, glob, grep, run_command — those are not available in this environment.`;\n\n  const extendedTools = opts?.extendedTools || [];\n  if (extendedTools.length > 0) {\n    systemPrompt += `\\n\\n## Extended Tools (call discover_tools to activate)\\nThese tools are available but not loaded yet. Call \\`discover_tools\\` with the tool name(s) before using them:\\n`;\n    for (const t of extendedTools) {\n      const shortDesc = t.description.split(\".\")[0];\n      systemPrompt += `- **${t.name}**: ${shortDesc}\\n`;\n    }\n  }\n\n  // --- DYNAMIC portion (changes per conversation) ---\n  const dynamicParts: string[] = [];\n\n  if (opts?.clientContext && typeof opts.clientContext === \"object\") {\n    const context = opts.clientContext;\n    const ctxParts: string[] = [];\n    if (context.storeName) ctxParts.push(`Store: ${context.storeName}`);\n    if (context.locationName) {\n      let loc = `Location: ${context.locationName}`;\n      if (context.locationAddress) loc += ` (${context.locationAddress})`;\n      if (context.locationType) loc += ` [${context.locationType}]`;\n      ctxParts.push(loc);\n    }\n    if (context.userName) {\n      ctxParts.push(`User: ${context.userName}${opts.userEmail ? ` (${opts.userEmail})` : \"\"}`);\n    } else if (opts.userEmail) {\n      ctxParts.push(`User: ${opts.userEmail}`);\n    }\n    if (context.conversationType) {\n      ctxParts.push(`Channel: ${context.conversationTitle || context.conversationType} (${context.conversationType})`);\n    }\n    if (ctxParts.length) {\n      dynamicParts.push(`## Current Session Context\\n${ctxParts.join(\"\\n\")}`);\n    }\n  }\n\n  // Parallel DB lookups: customer fetch + memory recall\n  const customerPromise = (opts?.senderContext?.customerId && storeId)\n    ? Promise.resolve(\n        supabase.from(\"v_store_customers\")\n          .select(\"first_name, last_name, email, phone, loyalty_tier, total_orders, total_spent, lifetime_value\")\n          .eq(\"id\", opts.senderContext.customerId).eq(\"store_id\", storeId).single()\n      ).then(({ data }) => data).catch(() => null)\n    : Promise.resolve(null);\n\n  const memoryPromise = storeId\n    ? Promise.resolve(\n        supabase.rpc(\"recall_memory\", {\n          p_agent_id: agent.id,\n          p_query: message.substring(0, 200),\n          p_type: null,\n          p_limit: 5,\n        })\n      ).then(({ data }) => data).catch((err: Error) => { log.warn({ err: err.message }, \"memory recall failed\"); return null; })\n    : Promise.resolve(null);\n\n  const [cust, memories] = await Promise.all([customerPromise, memoryPromise]);\n\n  if (cust && opts?.senderContext?.customerId) {\n    dynamicParts.push(`## Current Customer\\nName: ${cust.first_name} ${cust.last_name}\\nEmail: ${cust.email || \"N/A\"}\\nPhone: ${cust.phone || \"N/A\"}\\nLoyalty: ${cust.loyalty_tier || \"None\"}\\nOrders: ${cust.total_orders || 0}\\nSpent: $${(cust.total_spent || 0).toFixed(2)}\\nCustomer ID: ${opts.senderContext.customerId}`);\n  } else if (opts?.senderContext) {\n    const sc = opts.senderContext;\n    dynamicParts.push(`## Sender\\nID: ${sc.senderId}\\nName: ${sc.senderName || \"Unknown\"}\\nChannel: ${sc.channelType || \"unknown\"}${sc.channelName ? ` (${sc.channelName})` : \"\"}\\n(No customer record matched — use CRM tools to look them up if needed)`);\n  }\n\n  if (memories?.length) {\n    const memBlock = memories.map((m: any) =>\n      `- [${m.memory_type}] ${m.key}: ${JSON.stringify(m.value).substring(0, 100)}`\n    ).join(\"\\n\");\n    dynamicParts.push(`## Agent Memory\\nRelevant memories from previous conversations:\\n${memBlock}`);\n  }\n\n  const dynamicContext = dynamicParts.join(\"\\n\\n\");\n  return { systemPrompt, dynamicContext };\n}\n\n// ============================================================================\n// MEMORY EXTRACTION\n// ============================================================================\n\nexport async function extractAndStoreMemories(\n  supabase: SupabaseClient, anthropic: Anthropic,\n  agentId: string, storeId: string,\n  userMessage: string, assistantResponse: string\n): Promise<void> {\n  const extraction = await anthropic.messages.create({\n    model: \"claude-haiku-4-5-20251001\",\n    max_tokens: 500,\n    system: `Extract key facts worth remembering from this conversation turn.\nReturn JSON array: [{\"key\": \"short_key\", \"value\": {\"detail\": \"...\"}, \"type\": \"short_term|long_term|entity\"}]\nRules:\n- Only extract genuinely useful facts (preferences, decisions, corrections, entities)\n- \"entity\" for people/businesses/products mentioned\n- \"long_term\" for preferences, patterns, decisions\n- \"short_term\" for context that may expire\n- Return [] if nothing worth remembering\n- Max 3 items per turn`,\n    messages: [{\n      role: \"user\",\n      content: `User: ${userMessage.substring(0, 500)}\\n\\nAssistant: ${assistantResponse.substring(0, 1000)}`\n    }],\n  });\n\n  const text = extraction.content.find(b => b.type === \"text\")?.text || \"[]\";\n  const match = text.match(/\\[[\\s\\S]*\\]/);\n  if (!match) return;\n\n  let items: any[];\n  try { items = JSON.parse(match[0]); } catch { return; }\n\n  for (const item of items.slice(0, 3)) {\n    if (!item.key) continue;\n    await supabase.rpc(\"store_memory\", {\n      p_agent_id: agentId,\n      p_store_id: storeId,\n      p_type: item.type || \"short_term\",\n      p_key: item.key,\n      p_value: item.value || {},\n    });\n  }\n}\n\n// ============================================================================\n// COST BUDGET TRACKING\n// ============================================================================\n\nexport async function updateCostBudgets(\n  supabase: SupabaseClient, storeId: string, agentId: string, costUsd: number\n): Promise<void> {\n  const { error } = await supabase.rpc(\"increment_cost_budget\", {\n    p_store_id: storeId,\n    p_agent_id: agentId,\n    p_cost_usd: costUsd,\n  });\n  if (error) {\n    console.error(\"[cost-budget] increment_cost_budget RPC failed:\", error.message);\n  }\n}\n\n// persistAgentTurn is in server-persist.ts to keep this file under 300 lines\n"],"mappings":"AAAA;AACA;AACA;;AAIA,SAASA,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,cAAc,QAAQ,2BAA2B;AAM1D,MAAMC,GAAG,GAAGF,YAAY,CAAC,cAAc,CAAC;;AAExC;AACA;AACA;;AAEA;AACA;AACA,OAAO,eAAeG,sBAAsBA,CAC1CC,QAAwB,EACxBC,KAAkB,EAClBC,OAA2B,EAC3BC,OAAe,EACfC,KAAgB,EAChBC,IAMC,EAC0D;EAC3D;EACA,MAAMC,cAAc,GAAGL,KAAK,CAACM,aAAa,IAAI,8BAA8B;EAC5E,IAAIC,YAAY,GAAGX,cAAc,CAACS,cAAc,EAAE,wBAAwB,EAAE;IAAEG,OAAO,EAAER,KAAK,CAACS;EAAG,CAAC,CAAC;EAClG,IAAIR,OAAO,EAAEM,YAAY,IAAI,uCAAuCN,OAAO,sDAAsD;EACjI,IAAI,CAACD,KAAK,CAACU,UAAU,EAAEH,YAAY,IAAI,8EAA8E;EACrH,IAAIP,KAAK,CAACW,IAAI,IAAIX,KAAK,CAACW,IAAI,KAAK,cAAc,EAAEJ,YAAY,IAAI,0BAA0BP,KAAK,CAACW,IAAI,QAAQ;EAC7G,IAAIX,KAAK,CAACY,SAAS,KAAK,SAAS,EAAEL,YAAY,IAAI,sDAAsD,CAAC,KACrG,IAAIP,KAAK,CAACY,SAAS,KAAK,SAAS,EAAEL,YAAY,IAAI,+DAA+D;EAEvH,IAAIP,KAAK,CAACa,cAAc,EAAE;IACxB,MAAMC,GAAG,GAAGd,KAAK,CAACa,cAAc;IAChC,IAAIC,GAAG,CAACC,gBAAgB,IAAID,GAAG,CAACE,WAAW,EAAEC,MAAM,EAAEV,YAAY,IAAI,iCAAiCO,GAAG,CAACE,WAAW,CAACE,IAAI,CAAC,IAAI,CAAC,EAAE;IAClI,IAAIJ,GAAG,CAACK,gBAAgB,IAAIL,GAAG,CAACM,gBAAgB,EAAEH,MAAM,EAAEV,YAAY,IAAI,yCAAyCO,GAAG,CAACM,gBAAgB,CAACF,IAAI,CAAC,IAAI,CAAC,EAAE;EACtJ;EAEA,MAAMG,SAAS,GAAGlB,KAAK,CAACmB,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACC,IAAI,CAAC;EACxCjB,YAAY,IAAI,oCAAoCc,SAAS,CAACJ,MAAM,2CAA2CI,SAAS,CAACH,IAAI,CAAC,IAAI,CAAC,wRAAwR;EAE3Z,MAAMO,aAAa,GAAGrB,IAAI,EAAEqB,aAAa,IAAI,EAAE;EAC/C,IAAIA,aAAa,CAACR,MAAM,GAAG,CAAC,EAAE;IAC5BV,YAAY,IAAI,2KAA2K;IAC3L,KAAK,MAAMgB,CAAC,IAAIE,aAAa,EAAE;MAC7B,MAAMC,SAAS,GAAGH,CAAC,CAACI,WAAW,CAACC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;MAC7CrB,YAAY,IAAI,OAAOgB,CAAC,CAACC,IAAI,OAAOE,SAAS,IAAI;IACnD;EACF;;EAEA;EACA,MAAMG,YAAsB,GAAG,EAAE;EAEjC,IAAIzB,IAAI,EAAE0B,aAAa,IAAI,OAAO1B,IAAI,CAAC0B,aAAa,KAAK,QAAQ,EAAE;IACjE,MAAMC,OAAO,GAAG3B,IAAI,CAAC0B,aAAa;IAClC,MAAME,QAAkB,GAAG,EAAE;IAC7B,IAAID,OAAO,CAACE,SAAS,EAAED,QAAQ,CAACE,IAAI,CAAC,UAAUH,OAAO,CAACE,SAAS,EAAE,CAAC;IACnE,IAAIF,OAAO,CAACI,YAAY,EAAE;MACxB,IAAIC,GAAG,GAAG,aAAaL,OAAO,CAACI,YAAY,EAAE;MAC7C,IAAIJ,OAAO,CAACM,eAAe,EAAED,GAAG,IAAI,KAAKL,OAAO,CAACM,eAAe,GAAG;MACnE,IAAIN,OAAO,CAACO,YAAY,EAAEF,GAAG,IAAI,KAAKL,OAAO,CAACO,YAAY,GAAG;MAC7DN,QAAQ,CAACE,IAAI,CAACE,GAAG,CAAC;IACpB;IACA,IAAIL,OAAO,CAACQ,QAAQ,EAAE;MACpBP,QAAQ,CAACE,IAAI,CAAC,SAASH,OAAO,CAACQ,QAAQ,GAAGnC,IAAI,CAACoC,SAAS,GAAG,KAAKpC,IAAI,CAACoC,SAAS,GAAG,GAAG,EAAE,EAAE,CAAC;IAC3F,CAAC,MAAM,IAAIpC,IAAI,CAACoC,SAAS,EAAE;MACzBR,QAAQ,CAACE,IAAI,CAAC,SAAS9B,IAAI,CAACoC,SAAS,EAAE,CAAC;IAC1C;IACA,IAAIT,OAAO,CAACU,gBAAgB,EAAE;MAC5BT,QAAQ,CAACE,IAAI,CAAC,YAAYH,OAAO,CAACW,iBAAiB,IAAIX,OAAO,CAACU,gBAAgB,KAAKV,OAAO,CAACU,gBAAgB,GAAG,CAAC;IAClH;IACA,IAAIT,QAAQ,CAACf,MAAM,EAAE;MACnBY,YAAY,CAACK,IAAI,CAAC,+BAA+BF,QAAQ,CAACd,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACzE;EACF;;EAEA;EACA,MAAMyB,eAAe,GAAIvC,IAAI,EAAEwC,aAAa,EAAEC,UAAU,IAAI5C,OAAO,GAC/D6C,OAAO,CAACC,OAAO,CACbhD,QAAQ,CAACiD,IAAI,CAAC,mBAAmB,CAAC,CAC/BC,MAAM,CAAC,8FAA8F,CAAC,CACtGC,EAAE,CAAC,IAAI,EAAE9C,IAAI,CAACwC,aAAa,CAACC,UAAU,CAAC,CAACK,EAAE,CAAC,UAAU,EAAEjD,OAAO,CAAC,CAACkD,MAAM,CAAC,CAC5E,CAAC,CAACC,IAAI,CAAC,CAAC;IAAEC;EAAK,CAAC,KAAKA,IAAI,CAAC,CAACC,KAAK,CAAC,MAAM,IAAI,CAAC,GAC5CR,OAAO,CAACC,OAAO,CAAC,IAAI,CAAC;EAEzB,MAAMQ,aAAa,GAAGtD,OAAO,GACzB6C,OAAO,CAACC,OAAO,CACbhD,QAAQ,CAACyD,GAAG,CAAC,eAAe,EAAE;IAC5BC,UAAU,EAAEzD,KAAK,CAACS,EAAE;IACpBiD,OAAO,EAAExD,OAAO,CAACyD,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;IAClCC,MAAM,EAAE,IAAI;IACZC,OAAO,EAAE;EACX,CAAC,CACH,CAAC,CAACT,IAAI,CAAC,CAAC;IAAEC;EAAK,CAAC,KAAKA,IAAI,CAAC,CAACC,KAAK,CAAEQ,GAAU,IAAK;IAAEjE,GAAG,CAACkE,IAAI,CAAC;MAAED,GAAG,EAAEA,GAAG,CAAC5D;IAAQ,CAAC,EAAE,sBAAsB,CAAC;IAAE,OAAO,IAAI;EAAE,CAAC,CAAC,GAC1H4C,OAAO,CAACC,OAAO,CAAC,IAAI,CAAC;EAEzB,MAAM,CAACiB,IAAI,EAAEC,QAAQ,CAAC,GAAG,MAAMnB,OAAO,CAACoB,GAAG,CAAC,CAACvB,eAAe,EAAEY,aAAa,CAAC,CAAC;EAE5E,IAAIS,IAAI,IAAI5D,IAAI,EAAEwC,aAAa,EAAEC,UAAU,EAAE;IAC3ChB,YAAY,CAACK,IAAI,CAAC,8BAA8B8B,IAAI,CAACG,UAAU,IAAIH,IAAI,CAACI,SAAS,YAAYJ,IAAI,CAACK,KAAK,IAAI,KAAK,YAAYL,IAAI,CAACM,KAAK,IAAI,KAAK,cAAcN,IAAI,CAACO,YAAY,IAAI,MAAM,aAAaP,IAAI,CAACQ,YAAY,IAAI,CAAC,aAAa,CAACR,IAAI,CAACS,WAAW,IAAI,CAAC,EAAEC,OAAO,CAAC,CAAC,CAAC,kBAAkBtE,IAAI,CAACwC,aAAa,CAACC,UAAU,EAAE,CAAC;EAC9T,CAAC,MAAM,IAAIzC,IAAI,EAAEwC,aAAa,EAAE;IAC9B,MAAM+B,EAAE,GAAGvE,IAAI,CAACwC,aAAa;IAC7Bf,YAAY,CAACK,IAAI,CAAC,kBAAkByC,EAAE,CAACC,QAAQ,WAAWD,EAAE,CAACE,UAAU,IAAI,SAAS,cAAcF,EAAE,CAACG,WAAW,IAAI,SAAS,GAAGH,EAAE,CAACI,WAAW,GAAG,KAAKJ,EAAE,CAACI,WAAW,GAAG,GAAG,EAAE,0EAA0E,CAAC;EACzP;EAEA,IAAId,QAAQ,EAAEhD,MAAM,EAAE;IACpB,MAAM+D,QAAQ,GAAGf,QAAQ,CAAC3C,GAAG,CAAE2D,CAAM,IACnC,MAAMA,CAAC,CAACC,WAAW,KAAKD,CAAC,CAACE,GAAG,KAAKC,IAAI,CAACC,SAAS,CAACJ,CAAC,CAACK,KAAK,CAAC,CAAC3B,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAC7E,CAAC,CAACzC,IAAI,CAAC,IAAI,CAAC;IACZW,YAAY,CAACK,IAAI,CAAC,oEAAoE8C,QAAQ,EAAE,CAAC;EACnG;EAEA,MAAMO,cAAc,GAAG1D,YAAY,CAACX,IAAI,CAAC,MAAM,CAAC;EAChD,OAAO;IAAEX,YAAY;IAAEgF;EAAe,CAAC;AACzC;;AAEA;AACA;AACA;;AAEA,OAAO,eAAeC,uBAAuBA,CAC3CzF,QAAwB,EAAE0F,SAAoB,EAC9CjF,OAAe,EAAEP,OAAe,EAChCyF,WAAmB,EAAEC,iBAAyB,EAC/B;EACf,MAAMC,UAAU,GAAG,MAAMH,SAAS,CAACI,QAAQ,CAACC,MAAM,CAAC;IACjDC,KAAK,EAAE,2BAA2B;IAClCC,UAAU,EAAE,GAAG;IACfC,MAAM,EAAE;AACZ;AACA;AACA;AACA;AACA;AACA;AACA;AACA,uBAAuB;IACnBJ,QAAQ,EAAE,CAAC;MACTK,IAAI,EAAE,MAAM;MACZC,OAAO,EAAE,SAAST,WAAW,CAAC/B,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,kBAAkBgC,iBAAiB,CAAChC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC;IACvG,CAAC;EACH,CAAC,CAAC;EAEF,MAAMyC,IAAI,GAAGR,UAAU,CAACO,OAAO,CAACE,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACC,IAAI,KAAK,MAAM,CAAC,EAAEH,IAAI,IAAI,IAAI;EAC1E,MAAMI,KAAK,GAAGJ,IAAI,CAACI,KAAK,CAAC,aAAa,CAAC;EACvC,IAAI,CAACA,KAAK,EAAE;EAEZ,IAAIC,KAAY;EAChB,IAAI;IAAEA,KAAK,GAAGrB,IAAI,CAACsB,KAAK,CAACF,KAAK,CAAC,CAAC,CAAC,CAAC;EAAE,CAAC,CAAC,MAAM;IAAE;EAAQ;EAEtD,KAAK,MAAMG,IAAI,IAAIF,KAAK,CAACG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;IACpC,IAAI,CAACD,IAAI,CAACxB,GAAG,EAAE;IACf,MAAMpF,QAAQ,CAACyD,GAAG,CAAC,cAAc,EAAE;MACjCC,UAAU,EAAEjD,OAAO;MACnBqG,UAAU,EAAE5G,OAAO;MACnB2D,MAAM,EAAE+C,IAAI,CAACJ,IAAI,IAAI,YAAY;MACjCO,KAAK,EAAEH,IAAI,CAACxB,GAAG;MACf4B,OAAO,EAAEJ,IAAI,CAACrB,KAAK,IAAI,CAAC;IAC1B,CAAC,CAAC;EACJ;AACF;;AAEA;AACA;AACA;;AAEA,OAAO,eAAe0B,iBAAiBA,CACrCjH,QAAwB,EAAEE,OAAe,EAAEO,OAAe,EAAEyG,OAAe,EAC5D;EACf,MAAM;IAAEC;EAAM,CAAC,GAAG,MAAMnH,QAAQ,CAACyD,GAAG,CAAC,uBAAuB,EAAE;IAC5DqD,UAAU,EAAE5G,OAAO;IACnBwD,UAAU,EAAEjD,OAAO;IACnB2G,UAAU,EAAEF;EACd,CAAC,CAAC;EACF,IAAIC,KAAK,EAAE;IACTE,OAAO,CAACF,KAAK,CAAC,iDAAiD,EAAEA,KAAK,CAAChH,OAAO,CAAC;EACjF;AACF;;AAEA","ignoreList":[]}

package/dist/server/server-chat.d.ts

@@ -0,0 +1,6 @@
+import http from "node:http";
+import type { SupabaseClient } from "@supabase/supabase-js";
+export declare function handleAgentChat(req: http.IncomingMessage, res: http.ServerResponse, supabase: SupabaseClient, body: any, user: {
+    id: string;
+    email?: string;
+} | null, isServiceRole: boolean, token: string, corsHeaders: Record<string, string>): Promise<void>;

package/dist/server/server-chat.js

@@ -0,0 +1,210 @@
+// server/server-chat.ts — handleAgentChat SSE handler
+// Delegates to SessionManager for unified session lifecycle.
+// Keeps the exact same function signature for backward compatibility.
+
+import { createLogger } from "./lib/logger.js";
+import { sanitizeError } from "../shared/agent-core.js";
+import { jsonResponse, sendSSE } from "./server-helpers.js";
+import { resolveAndValidateStoreId } from "./server-store.js";
+import { checkAgentChatRateLimit, incrementConcurrent, decrementConcurrent } from "./server-rate-limit.js";
+import { checkCostBudget } from "./server-cost-guard.js";
+import { checkStoreCircuitBreaker, recordStoreOutcome } from "./server-store-circuit-breaker.js";
+import { extractOrCreateTrace } from "./server-trace.js";
+import { SessionManager } from "./session-manager.js";
+const log = createLogger("server-chat");
+
+// ============================================================================
+// AGENT CHAT HANDLER (SSE) — delegates to SessionManager
+// ============================================================================
+
+export async function handleAgentChat(req, res, supabase, body, user, isServiceRole, token, corsHeaders) {
+  const {
+    agentId,
+    message,
+    conversationHistory,
+    source,
+    conversationId,
+    context,
+    attachments
+  } = body;
+  let storeId = body.storeId;
+  if (!agentId || !message) {
+    jsonResponse(res, 400, {
+      error: "agentId and message required"
+    }, corsHeaders);
+    return;
+  }
+  if (typeof message === "string" && message.length > 100_000) {
+    jsonResponse(res, 400, {
+      error: "Message too long (max 100K characters)"
+    }, corsHeaders);
+    return;
+  }
+  const resolvedStoreId = await resolveAndValidateStoreId(supabase, storeId, user, isServiceRole, token, body.userId);
+  if (!resolvedStoreId && isServiceRole && body.userId) {
+    const {
+      data: srStores
+    } = await supabase.from("users").select("store_id").eq("auth_user_id", body.userId).not("store_id", "is", null).limit(1);
+    if (srStores?.length) storeId = srStores[0].store_id;
+  } else {
+    storeId = resolvedStoreId || undefined;
+  }
+  if (!storeId && !isServiceRole) {
+    jsonResponse(res, 400, {
+      error: "storeId required for agent chat"
+    }, corsHeaders);
+    return;
+  }
+
+  // Extract or create W3C trace context from incoming request
+  const trace = extractOrCreateTrace(req);
+  log.info({
+    storeId: storeId || "NONE",
+    source: body.source || "unknown",
+    isServiceRole,
+    userId: user?.id || body.userId || "NONE",
+    traceId: trace.traceId
+  }, "agent-chat request");
+
+  // Per-store circuit breaker — reject if store's error rate is too high
+  if (storeId) {
+    const breakerCheck = checkStoreCircuitBreaker(storeId);
+    if (!breakerCheck.allowed) {
+      jsonResponse(res, 503, {
+        error: breakerCheck.error
+      }, corsHeaders);
+      return;
+    }
+  }
+
+  // DB-backed cost budget check — reject if store/agent budget is exceeded (hard_stop)
+  if (storeId) {
+    const costCheck = await checkCostBudget(supabase, storeId, agentId);
+    if (!costCheck.allowed) {
+      jsonResponse(res, 402, {
+        error: costCheck.error
+      }, corsHeaders);
+      return;
+    }
+    if (costCheck.warning) {
+      log.warn({
+        storeId,
+        agentId,
+        warning: costCheck.warning
+      }, "cost budget warning");
+    }
+  }
+  const rateLimitStoreId = storeId || agentId;
+  const rateCheck = checkAgentChatRateLimit(rateLimitStoreId);
+  if (!rateCheck.allowed) {
+    res.writeHead(429, {
+      "Content-Type": "application/json",
+      ...corsHeaders
+    });
+    res.end(JSON.stringify({
+      error: rateCheck.error
+    }));
+    return;
+  }
+  incrementConcurrent();
+  let requestSuccess = true;
+  try {
+    const userId = user?.id || body.userId || "";
+    const userEmail = user?.email || body.userEmail || null;
+
+    // Delegate to SessionManager
+    const manager = new SessionManager(supabase);
+    const session = conversationId ? await manager.resumeSession(conversationId, "whale_chat") : await manager.createSession({
+      storeId: storeId,
+      agentId,
+      surface: "whale_chat",
+      userId,
+      userEmail,
+      message
+    });
+
+    // SSE headers — include traceparent for distributed tracing
+    res.writeHead(200, {
+      "Content-Type": "text/event-stream",
+      "Cache-Control": "no-cache",
+      Connection: "keep-alive",
+      traceparent: trace.traceparent,
+      ...corsHeaders
+    });
+    let clientDisconnected = false;
+    req.on("close", () => {
+      clientDisconnected = true;
+    });
+    try {
+      const result = await manager.executeTurn(session, {
+        message,
+        attachments,
+        conversationHistory,
+        context: context || undefined,
+        streaming: true,
+        onText: text => sendSSE(res, {
+          type: "text",
+          text
+        }),
+        onToolStart: (name, input) => {
+          if (input !== undefined) sendSSE(res, {
+            type: "tool_start",
+            name,
+            input: input
+          });
+        },
+        onToolResult: (name, success, r) => sendSSE(res, {
+          type: "tool_result",
+          name,
+          success,
+          result: r
+        }),
+        onToolProgress: (name, progress) => sendSSE(res, {
+          type: "tool_progress",
+          name,
+          progress: progress
+        }),
+        onSubagentProgress: evt => sendSSE(res, {
+          type: "subagent",
+          subagentId: evt.subagentId,
+          subagentEvent: evt.event,
+          name: evt.toolName
+        }),
+        clientDisconnected: {
+          get value() {
+            return clientDisconnected;
+          }
+        },
+        source: source || "whale_chat"
+      });
+      sendSSE(res, {
+        type: "usage",
+        usage: {
+          input_tokens: result.tokens.input,
+          output_tokens: result.tokens.output,
+          cache_creation_tokens: result.tokens.cacheCreation,
+          cache_read_tokens: result.tokens.cacheRead,
+          cost_usd: result.costUsd
+        }
+      });
+      sendSSE(res, {
+        type: "done",
+        conversationId: session.id
+      });
+    } catch (err) {
+      requestSuccess = false;
+      sendSSE(res, {
+        type: "error",
+        error: sanitizeError(err)
+      });
+    }
+    res.end();
+  } finally {
+    decrementConcurrent();
+    // Record outcome for per-store circuit breaker
+    if (storeId) {
+      recordStoreOutcome(storeId, requestSuccess);
+    }
+  }
+}
+//# sourceMappingURL=server-chat.js.map

package/dist/server/server-chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-chat.js","names":["createLogger","sanitizeError","jsonResponse","sendSSE","resolveAndValidateStoreId","checkAgentChatRateLimit","incrementConcurrent","decrementConcurrent","checkCostBudget","checkStoreCircuitBreaker","recordStoreOutcome","extractOrCreateTrace","SessionManager","log","handleAgentChat","req","res","supabase","body","user","isServiceRole","token","corsHeaders","agentId","message","conversationHistory","source","conversationId","context","attachments","storeId","error","length","resolvedStoreId","userId","data","srStores","from","select","eq","not","limit","store_id","undefined","trace","info","id","traceId","breakerCheck","allowed","costCheck","warning","warn","rateLimitStoreId","rateCheck","writeHead","end","JSON","stringify","requestSuccess","userEmail","email","manager","session","resumeSession","createSession","surface","Connection","traceparent","clientDisconnected","on","result","executeTurn","streaming","onText","text","type","onToolStart","name","input","onToolResult","success","r","onToolProgress","progress","onSubagentProgress","evt","subagentId","subagentEvent","event","toolName","value","usage","input_tokens","tokens","output_tokens","output","cache_creation_tokens","cacheCreation","cache_read_tokens","cacheRead","cost_usd","costUsd","err"],"sources":["../../src/server/server-chat.ts"],"sourcesContent":["// server/server-chat.ts — handleAgentChat SSE handler\n// Delegates to SessionManager for unified session lifecycle.\n// Keeps the exact same function signature for backward compatibility.\n\nimport http from \"node:http\";\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createLogger } from \"./lib/logger.js\";\nimport { sanitizeError } from \"../shared/agent-core.js\";\nimport { jsonResponse, sendSSE } from \"./server-helpers.js\";\nimport { resolveAndValidateStoreId } from \"./server-store.js\";\nimport { checkAgentChatRateLimit, incrementConcurrent, decrementConcurrent } from \"./server-rate-limit.js\";\nimport { checkCostBudget } from \"./server-cost-guard.js\";\nimport { checkStoreCircuitBreaker, recordStoreOutcome } from \"./server-store-circuit-breaker.js\";\nimport { extractOrCreateTrace, type TraceContext } from \"./server-trace.js\";\nimport { SessionManager } from \"./session-manager.js\";\n\nconst log = createLogger(\"server-chat\");\n\n// ============================================================================\n// AGENT CHAT HANDLER (SSE) — delegates to SessionManager\n// ============================================================================\n\nexport async function handleAgentChat(\n  req: http.IncomingMessage,\n  res: http.ServerResponse,\n  supabase: SupabaseClient,\n  body: any,\n  user: { id: string; email?: string } | null,\n  isServiceRole: boolean,\n  token: string,\n  corsHeaders: Record<string, string>\n): Promise<void> {\n  const { agentId, message, conversationHistory, source, conversationId, context, attachments } = body;\n  let storeId: string | undefined = body.storeId;\n\n  if (!agentId || !message) {\n    jsonResponse(res, 400, { error: \"agentId and message required\" }, corsHeaders);\n    return;\n  }\n\n  if (typeof message === \"string\" && message.length > 100_000) {\n    jsonResponse(res, 400, { error: \"Message too long (max 100K characters)\" }, corsHeaders);\n    return;\n  }\n\n  const resolvedStoreId = await resolveAndValidateStoreId(\n    supabase, storeId, user, isServiceRole, token, body.userId\n  );\n\n  if (!resolvedStoreId && isServiceRole && body.userId) {\n    const { data: srStores } = await supabase\n      .from(\"users\").select(\"store_id\")\n      .eq(\"auth_user_id\", body.userId).not(\"store_id\", \"is\", null).limit(1);\n    if (srStores?.length) storeId = srStores[0].store_id;\n  } else {\n    storeId = resolvedStoreId || undefined;\n  }\n\n  if (!storeId && !isServiceRole) {\n    jsonResponse(res, 400, { error: \"storeId required for agent chat\" }, corsHeaders);\n    return;\n  }\n\n  // Extract or create W3C trace context from incoming request\n  const trace: TraceContext = extractOrCreateTrace(req);\n\n  log.info({ storeId: storeId || \"NONE\", source: body.source || \"unknown\", isServiceRole, userId: user?.id || body.userId || \"NONE\", traceId: trace.traceId }, \"agent-chat request\");\n\n  // Per-store circuit breaker — reject if store's error rate is too high\n  if (storeId) {\n    const breakerCheck = checkStoreCircuitBreaker(storeId);\n    if (!breakerCheck.allowed) {\n      jsonResponse(res, 503, { error: breakerCheck.error }, corsHeaders);\n      return;\n    }\n  }\n\n  // DB-backed cost budget check — reject if store/agent budget is exceeded (hard_stop)\n  if (storeId) {\n    const costCheck = await checkCostBudget(supabase, storeId, agentId);\n    if (!costCheck.allowed) {\n      jsonResponse(res, 402, { error: costCheck.error }, corsHeaders);\n      return;\n    }\n    if (costCheck.warning) {\n      log.warn({ storeId, agentId, warning: costCheck.warning }, \"cost budget warning\");\n    }\n  }\n\n  const rateLimitStoreId = storeId || agentId;\n  const rateCheck = checkAgentChatRateLimit(rateLimitStoreId);\n  if (!rateCheck.allowed) {\n    res.writeHead(429, { \"Content-Type\": \"application/json\", ...corsHeaders });\n    res.end(JSON.stringify({ error: rateCheck.error }));\n    return;\n  }\n  incrementConcurrent();\n  let requestSuccess = true;\n  try {\n\n  const userId: string = user?.id || body.userId || \"\";\n  const userEmail: string | null = user?.email || body.userEmail || null;\n\n  // Delegate to SessionManager\n  const manager = new SessionManager(supabase);\n  const session = conversationId\n    ? await manager.resumeSession(conversationId, \"whale_chat\")\n    : await manager.createSession({\n        storeId: storeId!,\n        agentId,\n        surface: \"whale_chat\",\n        userId,\n        userEmail,\n        message,\n      });\n\n  // SSE headers — include traceparent for distributed tracing\n  res.writeHead(200, { \"Content-Type\": \"text/event-stream\", \"Cache-Control\": \"no-cache\", Connection: \"keep-alive\", traceparent: trace.traceparent, ...corsHeaders });\n\n  let clientDisconnected = false;\n  req.on(\"close\", () => { clientDisconnected = true; });\n\n  try {\n    const result = await manager.executeTurn(session, {\n      message,\n      attachments,\n      conversationHistory,\n      context: context || undefined,\n      streaming: true,\n      onText: (text) => sendSSE(res, { type: \"text\", text }),\n      onToolStart: (name, input?) => { if (input !== undefined) sendSSE(res, { type: \"tool_start\", name, input: input as Record<string, unknown> }); },\n      onToolResult: (name, success, r) => sendSSE(res, { type: \"tool_result\", name, success, result: r as any }),\n      onToolProgress: (name, progress) => sendSSE(res, { type: \"tool_progress\", name, progress: progress as any }),\n      onSubagentProgress: (evt: any) => sendSSE(res, { type: \"subagent\", subagentId: evt.subagentId, subagentEvent: evt.event, name: evt.toolName }),\n      clientDisconnected: { get value() { return clientDisconnected; } },\n      source: source || \"whale_chat\",\n    });\n\n    sendSSE(res, {\n      type: \"usage\", usage: {\n        input_tokens: result.tokens.input, output_tokens: result.tokens.output,\n        cache_creation_tokens: result.tokens.cacheCreation, cache_read_tokens: result.tokens.cacheRead,\n        cost_usd: result.costUsd,\n      },\n    });\n\n    sendSSE(res, { type: \"done\", conversationId: session.id });\n  } catch (err) {\n    requestSuccess = false;\n    sendSSE(res, { type: \"error\", error: sanitizeError(err) });\n  }\n\n  res.end();\n\n  } finally {\n    decrementConcurrent();\n    // Record outcome for per-store circuit breaker\n    if (storeId) {\n      recordStoreOutcome(storeId, requestSuccess);\n    }\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;;AAIA,SAASA,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,aAAa,QAAQ,yBAAyB;AACvD,SAASC,YAAY,EAAEC,OAAO,QAAQ,qBAAqB;AAC3D,SAASC,yBAAyB,QAAQ,mBAAmB;AAC7D,SAASC,uBAAuB,EAAEC,mBAAmB,EAAEC,mBAAmB,QAAQ,wBAAwB;AAC1G,SAASC,eAAe,QAAQ,wBAAwB;AACxD,SAASC,wBAAwB,EAAEC,kBAAkB,QAAQ,mCAAmC;AAChG,SAASC,oBAAoB,QAA2B,mBAAmB;AAC3E,SAASC,cAAc,QAAQ,sBAAsB;AAErD,MAAMC,GAAG,GAAGb,YAAY,CAAC,aAAa,CAAC;;AAEvC;AACA;AACA;;AAEA,OAAO,eAAec,eAAeA,CACnCC,GAAyB,EACzBC,GAAwB,EACxBC,QAAwB,EACxBC,IAAS,EACTC,IAA2C,EAC3CC,aAAsB,EACtBC,KAAa,EACbC,WAAmC,EACpB;EACf,MAAM;IAAEC,OAAO;IAAEC,OAAO;IAAEC,mBAAmB;IAAEC,MAAM;IAAEC,cAAc;IAAEC,OAAO;IAAEC;EAAY,CAAC,GAAGX,IAAI;EACpG,IAAIY,OAA2B,GAAGZ,IAAI,CAACY,OAAO;EAE9C,IAAI,CAACP,OAAO,IAAI,CAACC,OAAO,EAAE;IACxBtB,YAAY,CAACc,GAAG,EAAE,GAAG,EAAE;MAAEe,KAAK,EAAE;IAA+B,CAAC,EAAET,WAAW,CAAC;IAC9E;EACF;EAEA,IAAI,OAAOE,OAAO,KAAK,QAAQ,IAAIA,OAAO,CAACQ,MAAM,GAAG,OAAO,EAAE;IAC3D9B,YAAY,CAACc,GAAG,EAAE,GAAG,EAAE;MAAEe,KAAK,EAAE;IAAyC,CAAC,EAAET,WAAW,CAAC;IACxF;EACF;EAEA,MAAMW,eAAe,GAAG,MAAM7B,yBAAyB,CACrDa,QAAQ,EAAEa,OAAO,EAAEX,IAAI,EAAEC,aAAa,EAAEC,KAAK,EAAEH,IAAI,CAACgB,MACtD,CAAC;EAED,IAAI,CAACD,eAAe,IAAIb,aAAa,IAAIF,IAAI,CAACgB,MAAM,EAAE;IACpD,MAAM;MAAEC,IAAI,EAAEC;IAAS,CAAC,GAAG,MAAMnB,QAAQ,CACtCoB,IAAI,CAAC,OAAO,CAAC,CAACC,MAAM,CAAC,UAAU,CAAC,CAChCC,EAAE,CAAC,cAAc,EAAErB,IAAI,CAACgB,MAAM,CAAC,CAACM,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAACC,KAAK,CAAC,CAAC,CAAC;IACvE,IAAIL,QAAQ,EAAEJ,MAAM,EAAEF,OAAO,GAAGM,QAAQ,CAAC,CAAC,CAAC,CAACM,QAAQ;EACtD,CAAC,MAAM;IACLZ,OAAO,GAAGG,eAAe,IAAIU,SAAS;EACxC;EAEA,IAAI,CAACb,OAAO,IAAI,CAACV,aAAa,EAAE;IAC9BlB,YAAY,CAACc,GAAG,EAAE,GAAG,EAAE;MAAEe,KAAK,EAAE;IAAkC,CAAC,EAAET,WAAW,CAAC;IACjF;EACF;;EAEA;EACA,MAAMsB,KAAmB,GAAGjC,oBAAoB,CAACI,GAAG,CAAC;EAErDF,GAAG,CAACgC,IAAI,CAAC;IAAEf,OAAO,EAAEA,OAAO,IAAI,MAAM;IAAEJ,MAAM,EAAER,IAAI,CAACQ,MAAM,IAAI,SAAS;IAAEN,aAAa;IAAEc,MAAM,EAAEf,IAAI,EAAE2B,EAAE,IAAI5B,IAAI,CAACgB,MAAM,IAAI,MAAM;IAAEa,OAAO,EAAEH,KAAK,CAACG;EAAQ,CAAC,EAAE,oBAAoB,CAAC;;EAElL;EACA,IAAIjB,OAAO,EAAE;IACX,MAAMkB,YAAY,GAAGvC,wBAAwB,CAACqB,OAAO,CAAC;IACtD,IAAI,CAACkB,YAAY,CAACC,OAAO,EAAE;MACzB/C,YAAY,CAACc,GAAG,EAAE,GAAG,EAAE;QAAEe,KAAK,EAAEiB,YAAY,CAACjB;MAAM,CAAC,EAAET,WAAW,CAAC;MAClE;IACF;EACF;;EAEA;EACA,IAAIQ,OAAO,EAAE;IACX,MAAMoB,SAAS,GAAG,MAAM1C,eAAe,CAACS,QAAQ,EAAEa,OAAO,EAAEP,OAAO,CAAC;IACnE,IAAI,CAAC2B,SAAS,CAACD,OAAO,EAAE;MACtB/C,YAAY,CAACc,GAAG,EAAE,GAAG,EAAE;QAAEe,KAAK,EAAEmB,SAAS,CAACnB;MAAM,CAAC,EAAET,WAAW,CAAC;MAC/D;IACF;IACA,IAAI4B,SAAS,CAACC,OAAO,EAAE;MACrBtC,GAAG,CAACuC,IAAI,CAAC;QAAEtB,OAAO;QAAEP,OAAO;QAAE4B,OAAO,EAAED,SAAS,CAACC;MAAQ,CAAC,EAAE,qBAAqB,CAAC;IACnF;EACF;EAEA,MAAME,gBAAgB,GAAGvB,OAAO,IAAIP,OAAO;EAC3C,MAAM+B,SAAS,GAAGjD,uBAAuB,CAACgD,gBAAgB,CAAC;EAC3D,IAAI,CAACC,SAAS,CAACL,OAAO,EAAE;IACtBjC,GAAG,CAACuC,SAAS,CAAC,GAAG,EAAE;MAAE,cAAc,EAAE,kBAAkB;MAAE,GAAGjC;IAAY,CAAC,CAAC;IAC1EN,GAAG,CAACwC,GAAG,CAACC,IAAI,CAACC,SAAS,CAAC;MAAE3B,KAAK,EAAEuB,SAAS,CAACvB;IAAM,CAAC,CAAC,CAAC;IACnD;EACF;EACAzB,mBAAmB,CAAC,CAAC;EACrB,IAAIqD,cAAc,GAAG,IAAI;EACzB,IAAI;IAEJ,MAAMzB,MAAc,GAAGf,IAAI,EAAE2B,EAAE,IAAI5B,IAAI,CAACgB,MAAM,IAAI,EAAE;IACpD,MAAM0B,SAAwB,GAAGzC,IAAI,EAAE0C,KAAK,IAAI3C,IAAI,CAAC0C,SAAS,IAAI,IAAI;;IAEtE;IACA,MAAME,OAAO,GAAG,IAAIlD,cAAc,CAACK,QAAQ,CAAC;IAC5C,MAAM8C,OAAO,GAAGpC,cAAc,GAC1B,MAAMmC,OAAO,CAACE,aAAa,CAACrC,cAAc,EAAE,YAAY,CAAC,GACzD,MAAMmC,OAAO,CAACG,aAAa,CAAC;MAC1BnC,OAAO,EAAEA,OAAQ;MACjBP,OAAO;MACP2C,OAAO,EAAE,YAAY;MACrBhC,MAAM;MACN0B,SAAS;MACTpC;IACF,CAAC,CAAC;;IAEN;IACAR,GAAG,CAACuC,SAAS,CAAC,GAAG,EAAE;MAAE,cAAc,EAAE,mBAAmB;MAAE,eAAe,EAAE,UAAU;MAAEY,UAAU,EAAE,YAAY;MAAEC,WAAW,EAAExB,KAAK,CAACwB,WAAW;MAAE,GAAG9C;IAAY,CAAC,CAAC;IAElK,IAAI+C,kBAAkB,GAAG,KAAK;IAC9BtD,GAAG,CAACuD,EAAE,CAAC,OAAO,EAAE,MAAM;MAAED,kBAAkB,GAAG,IAAI;IAAE,CAAC,CAAC;IAErD,IAAI;MACF,MAAME,MAAM,GAAG,MAAMT,OAAO,CAACU,WAAW,CAACT,OAAO,EAAE;QAChDvC,OAAO;QACPK,WAAW;QACXJ,mBAAmB;QACnBG,OAAO,EAAEA,OAAO,IAAIe,SAAS;QAC7B8B,SAAS,EAAE,IAAI;QACfC,MAAM,EAAGC,IAAI,IAAKxE,OAAO,CAACa,GAAG,EAAE;UAAE4D,IAAI,EAAE,MAAM;UAAED;QAAK,CAAC,CAAC;QACtDE,WAAW,EAAEA,CAACC,IAAI,EAAEC,KAAM,KAAK;UAAE,IAAIA,KAAK,KAAKpC,SAAS,EAAExC,OAAO,CAACa,GAAG,EAAE;YAAE4D,IAAI,EAAE,YAAY;YAAEE,IAAI;YAAEC,KAAK,EAAEA;UAAiC,CAAC,CAAC;QAAE,CAAC;QAChJC,YAAY,EAAEA,CAACF,IAAI,EAAEG,OAAO,EAAEC,CAAC,KAAK/E,OAAO,CAACa,GAAG,EAAE;UAAE4D,IAAI,EAAE,aAAa;UAAEE,IAAI;UAAEG,OAAO;UAAEV,MAAM,EAAEW;QAAS,CAAC,CAAC;QAC1GC,cAAc,EAAEA,CAACL,IAAI,EAAEM,QAAQ,KAAKjF,OAAO,CAACa,GAAG,EAAE;UAAE4D,IAAI,EAAE,eAAe;UAAEE,IAAI;UAAEM,QAAQ,EAAEA;QAAgB,CAAC,CAAC;QAC5GC,kBAAkB,EAAGC,GAAQ,IAAKnF,OAAO,CAACa,GAAG,EAAE;UAAE4D,IAAI,EAAE,UAAU;UAAEW,UAAU,EAAED,GAAG,CAACC,UAAU;UAAEC,aAAa,EAAEF,GAAG,CAACG,KAAK;UAAEX,IAAI,EAAEQ,GAAG,CAACI;QAAS,CAAC,CAAC;QAC9IrB,kBAAkB,EAAE;UAAE,IAAIsB,KAAKA,CAAA,EAAG;YAAE,OAAOtB,kBAAkB;UAAE;QAAE,CAAC;QAClE3C,MAAM,EAAEA,MAAM,IAAI;MACpB,CAAC,CAAC;MAEFvB,OAAO,CAACa,GAAG,EAAE;QACX4D,IAAI,EAAE,OAAO;QAAEgB,KAAK,EAAE;UACpBC,YAAY,EAAEtB,MAAM,CAACuB,MAAM,CAACf,KAAK;UAAEgB,aAAa,EAAExB,MAAM,CAACuB,MAAM,CAACE,MAAM;UACtEC,qBAAqB,EAAE1B,MAAM,CAACuB,MAAM,CAACI,aAAa;UAAEC,iBAAiB,EAAE5B,MAAM,CAACuB,MAAM,CAACM,SAAS;UAC9FC,QAAQ,EAAE9B,MAAM,CAAC+B;QACnB;MACF,CAAC,CAAC;MAEFnG,OAAO,CAACa,GAAG,EAAE;QAAE4D,IAAI,EAAE,MAAM;QAAEjD,cAAc,EAAEoC,OAAO,CAACjB;MAAG,CAAC,CAAC;IAC5D,CAAC,CAAC,OAAOyD,GAAG,EAAE;MACZ5C,cAAc,GAAG,KAAK;MACtBxD,OAAO,CAACa,GAAG,EAAE;QAAE4D,IAAI,EAAE,OAAO;QAAE7C,KAAK,EAAE9B,aAAa,CAACsG,GAAG;MAAE,CAAC,CAAC;IAC5D;IAEAvF,GAAG,CAACwC,GAAG,CAAC,CAAC;EAET,CAAC,SAAS;IACRjD,mBAAmB,CAAC,CAAC;IACrB;IACA,IAAIuB,OAAO,EAAE;MACXpB,kBAAkB,CAACoB,OAAO,EAAE6B,cAAc,CAAC;IAC7C;EACF;AACF","ignoreList":[]}

package/dist/server/server-cost-guard.d.ts

@@ -0,0 +1,16 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export interface CostCheckResult {
+    allowed: boolean;
+    error?: string;
+    /** True if the store is over the alert threshold but not hard-stopped */
+    warning?: string;
+}
+/** Invalidate cache for a store (called after spend is recorded) */
+export declare function invalidateCostCache(storeId: string, agentId?: string): void;
+/**
+ * Check if a store (and optionally a specific agent) is within its cost budget.
+ * Returns { allowed: true } if no budgets are configured or all are within limits.
+ * Returns { allowed: false, error } if a hard_stop budget is exceeded.
+ * Returns { allowed: true, warning } if spend exceeds alert threshold but not hard-stopped.
+ */
+export declare function checkCostBudget(supabase: SupabaseClient, storeId: string, agentId?: string): Promise<CostCheckResult>;

package/dist/server/server-cost-guard.js

@@ -0,0 +1,141 @@
+// server/server-cost-guard.ts — Pre-request cost budget enforcement
+// Checks ai_cost_budgets BEFORE processing a chat request.
+// The existing increment_cost_budget RPC tracks spend post-request;
+// this module gates admission so over-budget stores are rejected early.
+
+import { createLogger } from "./lib/logger.js";
+const log = createLogger("cost-guard");
+
+// ============================================================================
+// TYPES
+// ============================================================================
+
+// ============================================================================
+// BUDGET CACHE — avoids hitting Postgres on every request
+// TTL-based, per store+agent pair. Invalidated when spend is recorded.
+// ============================================================================
+
+const budgetCache = new Map();
+const CACHE_TTL_MS = 30_000; // 30s — balance between freshness and DB load
+const CACHE_MAX_ENTRIES = 200;
+function cacheKey(storeId, agentId) {
+  return agentId ? `${storeId}:${agentId}` : storeId;
+}
+
+/** Evict oldest entries when cache exceeds max size */
+function evictCache() {
+  if (budgetCache.size <= CACHE_MAX_ENTRIES) return;
+  const entries = [...budgetCache.entries()].sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);
+  const excess = budgetCache.size - CACHE_MAX_ENTRIES;
+  for (let i = 0; i < excess; i++) {
+    budgetCache.delete(entries[i][0]);
+  }
+}
+
+/** Invalidate cache for a store (called after spend is recorded) */
+export function invalidateCostCache(storeId, agentId) {
+  budgetCache.delete(cacheKey(storeId, agentId));
+  budgetCache.delete(storeId); // Also clear store-wide entry
+}
+
+// Periodic cleanup of stale cache entries
+setInterval(() => {
+  const now = Date.now();
+  for (const [key, entry] of budgetCache) {
+    if (now - entry.fetchedAt > CACHE_TTL_MS * 2) {
+      budgetCache.delete(key);
+    }
+  }
+}, 60_000);
+
+// ============================================================================
+// COST BUDGET CHECK
+// ============================================================================
+
+/**
+ * Check if a store (and optionally a specific agent) is within its cost budget.
+ * Returns { allowed: true } if no budgets are configured or all are within limits.
+ * Returns { allowed: false, error } if a hard_stop budget is exceeded.
+ * Returns { allowed: true, warning } if spend exceeds alert threshold but not hard-stopped.
+ */
+export async function checkCostBudget(supabase, storeId, agentId) {
+  const key = cacheKey(storeId, agentId);
+  const cached = budgetCache.get(key);
+  let budgets;
+  if (cached && Date.now() - cached.fetchedAt < CACHE_TTL_MS) {
+    budgets = cached.budgets;
+  } else {
+    // Fetch active budgets for this store that apply to this agent
+    // A budget applies if: agent_id matches OR agent_id is NULL (store-wide budget)
+    let query = supabase.from("ai_cost_budgets").select("id, store_id, agent_id, budget_type, limit_usd, current_spend_usd, is_active, hard_stop, alert_threshold_pct").eq("store_id", storeId).eq("is_active", true);
+    if (agentId) {
+      // Match agent-specific OR store-wide (agent_id IS NULL)
+      query = query.or(`agent_id.eq.${agentId},agent_id.is.null`);
+    } else {
+      query = query.is("agent_id", null);
+    }
+    const {
+      data,
+      error
+    } = await query;
+    if (error) {
+      // Fail open — don't block requests if budget check itself fails
+      log.warn({
+        error: error.message,
+        storeId
+      }, "cost budget query failed, allowing request");
+      return {
+        allowed: true
+      };
+    }
+    budgets = data || [];
+    budgetCache.set(key, {
+      budgets,
+      fetchedAt: Date.now()
+    });
+    evictCache();
+  }
+
+  // No budgets configured — allow
+  if (!budgets.length) return {
+    allowed: true
+  };
+
+  // Check each budget
+  for (const budget of budgets) {
+    const spend = budget.current_spend_usd || 0;
+    const limit = budget.limit_usd;
+    if (limit <= 0) continue; // Unlimited budget
+
+    if (spend >= limit) {
+      if (budget.hard_stop) {
+        const scope = budget.agent_id ? `agent ${budget.agent_id}` : "store";
+        log.warn({
+          storeId,
+          agentId: budget.agent_id,
+          spend,
+          limit,
+          budgetType: budget.budget_type
+        }, "cost budget hard stop");
+        return {
+          allowed: false,
+          error: `Cost budget exceeded for ${scope}: $${spend.toFixed(2)}/$${limit.toFixed(2)} (${budget.budget_type}). Contact your admin to increase the budget.`
+        };
+      }
+    }
+
+    // Alert threshold check (non-blocking)
+    const alertThreshold = (budget.alert_threshold_pct || 80) / 100;
+    if (spend >= limit * alertThreshold && spend < limit) {
+      const pct = Math.round(spend / limit * 100);
+      return {
+        allowed: true,
+        warning: `Cost budget ${pct}% utilized ($${spend.toFixed(2)}/$${limit.toFixed(2)}, ${budget.budget_type})`
+      };
+    }
+  }
+  return {
+    allowed: true
+  };
+}
+//# sourceMappingURL=server-cost-guard.js.map

package/dist/server/server-cost-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-cost-guard.js","names":["createLogger","log","budgetCache","Map","CACHE_TTL_MS","CACHE_MAX_ENTRIES","cacheKey","storeId","agentId","evictCache","size","entries","sort","a","b","fetchedAt","excess","i","delete","invalidateCostCache","setInterval","now","Date","key","entry","checkCostBudget","supabase","cached","get","budgets","query","from","select","eq","or","is","data","error","warn","message","allowed","set","length","budget","spend","current_spend_usd","limit","limit_usd","hard_stop","scope","agent_id","budgetType","budget_type","toFixed","alertThreshold","alert_threshold_pct","pct","Math","round","warning"],"sources":["../../src/server/server-cost-guard.ts"],"sourcesContent":["// server/server-cost-guard.ts — Pre-request cost budget enforcement\n// Checks ai_cost_budgets BEFORE processing a chat request.\n// The existing increment_cost_budget RPC tracks spend post-request;\n// this module gates admission so over-budget stores are rejected early.\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createLogger } from \"./lib/logger.js\";\n\nconst log = createLogger(\"cost-guard\");\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\ninterface CostBudgetRow {\n  id: string;\n  store_id: string;\n  agent_id: string | null;\n  budget_type: string;\n  limit_usd: number;\n  current_spend_usd: number;\n  is_active: boolean;\n  hard_stop: boolean;\n  alert_threshold_pct: number;\n}\n\nexport interface CostCheckResult {\n  allowed: boolean;\n  error?: string;\n  /** True if the store is over the alert threshold but not hard-stopped */\n  warning?: string;\n}\n\n// ============================================================================\n// BUDGET CACHE — avoids hitting Postgres on every request\n// TTL-based, per store+agent pair. Invalidated when spend is recorded.\n// ============================================================================\n\ninterface CachedBudget {\n  budgets: CostBudgetRow[];\n  fetchedAt: number;\n}\n\nconst budgetCache = new Map<string, CachedBudget>();\nconst CACHE_TTL_MS = 30_000; // 30s — balance between freshness and DB load\nconst CACHE_MAX_ENTRIES = 200;\n\nfunction cacheKey(storeId: string, agentId?: string): string {\n  return agentId ? `${storeId}:${agentId}` : storeId;\n}\n\n/** Evict oldest entries when cache exceeds max size */\nfunction evictCache(): void {\n  if (budgetCache.size <= CACHE_MAX_ENTRIES) return;\n  const entries = [...budgetCache.entries()].sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);\n  const excess = budgetCache.size - CACHE_MAX_ENTRIES;\n  for (let i = 0; i < excess; i++) {\n    budgetCache.delete(entries[i][0]);\n  }\n}\n\n/** Invalidate cache for a store (called after spend is recorded) */\nexport function invalidateCostCache(storeId: string, agentId?: string): void {\n  budgetCache.delete(cacheKey(storeId, agentId));\n  budgetCache.delete(storeId); // Also clear store-wide entry\n}\n\n// Periodic cleanup of stale cache entries\nsetInterval(() => {\n  const now = Date.now();\n  for (const [key, entry] of budgetCache) {\n    if (now - entry.fetchedAt > CACHE_TTL_MS * 2) {\n      budgetCache.delete(key);\n    }\n  }\n}, 60_000);\n\n// ============================================================================\n// COST BUDGET CHECK\n// ============================================================================\n\n/**\n * Check if a store (and optionally a specific agent) is within its cost budget.\n * Returns { allowed: true } if no budgets are configured or all are within limits.\n * Returns { allowed: false, error } if a hard_stop budget is exceeded.\n * Returns { allowed: true, warning } if spend exceeds alert threshold but not hard-stopped.\n */\nexport async function checkCostBudget(\n  supabase: SupabaseClient,\n  storeId: string,\n  agentId?: string,\n): Promise<CostCheckResult> {\n  const key = cacheKey(storeId, agentId);\n  const cached = budgetCache.get(key);\n  let budgets: CostBudgetRow[];\n\n  if (cached && Date.now() - cached.fetchedAt < CACHE_TTL_MS) {\n    budgets = cached.budgets;\n  } else {\n    // Fetch active budgets for this store that apply to this agent\n    // A budget applies if: agent_id matches OR agent_id is NULL (store-wide budget)\n    let query = supabase\n      .from(\"ai_cost_budgets\")\n      .select(\"id, store_id, agent_id, budget_type, limit_usd, current_spend_usd, is_active, hard_stop, alert_threshold_pct\")\n      .eq(\"store_id\", storeId)\n      .eq(\"is_active\", true);\n\n    if (agentId) {\n      // Match agent-specific OR store-wide (agent_id IS NULL)\n      query = query.or(`agent_id.eq.${agentId},agent_id.is.null`);\n    } else {\n      query = query.is(\"agent_id\", null);\n    }\n\n    const { data, error } = await query;\n\n    if (error) {\n      // Fail open — don't block requests if budget check itself fails\n      log.warn({ error: error.message, storeId }, \"cost budget query failed, allowing request\");\n      return { allowed: true };\n    }\n\n    budgets = (data || []) as CostBudgetRow[];\n    budgetCache.set(key, { budgets, fetchedAt: Date.now() });\n    evictCache();\n  }\n\n  // No budgets configured — allow\n  if (!budgets.length) return { allowed: true };\n\n  // Check each budget\n  for (const budget of budgets) {\n    const spend = budget.current_spend_usd || 0;\n    const limit = budget.limit_usd;\n\n    if (limit <= 0) continue; // Unlimited budget\n\n    if (spend >= limit) {\n      if (budget.hard_stop) {\n        const scope = budget.agent_id ? `agent ${budget.agent_id}` : \"store\";\n        log.warn({ storeId, agentId: budget.agent_id, spend, limit, budgetType: budget.budget_type }, \"cost budget hard stop\");\n        return {\n          allowed: false,\n          error: `Cost budget exceeded for ${scope}: $${spend.toFixed(2)}/$${limit.toFixed(2)} (${budget.budget_type}). Contact your admin to increase the budget.`,\n        };\n      }\n    }\n\n    // Alert threshold check (non-blocking)\n    const alertThreshold = (budget.alert_threshold_pct || 80) / 100;\n    if (spend >= limit * alertThreshold && spend < limit) {\n      const pct = Math.round((spend / limit) * 100);\n      return {\n        allowed: true,\n        warning: `Cost budget ${pct}% utilized ($${spend.toFixed(2)}/$${limit.toFixed(2)}, ${budget.budget_type})`,\n      };\n    }\n  }\n\n  return { allowed: true };\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;;AAGA,SAASA,YAAY,QAAQ,iBAAiB;AAE9C,MAAMC,GAAG,GAAGD,YAAY,CAAC,YAAY,CAAC;;AAEtC;AACA;AACA;;AAqBA;AACA;AACA;AACA;;AAOA,MAAME,WAAW,GAAG,IAAIC,GAAG,CAAuB,CAAC;AACnD,MAAMC,YAAY,GAAG,MAAM,CAAC,CAAC;AAC7B,MAAMC,iBAAiB,GAAG,GAAG;AAE7B,SAASC,QAAQA,CAACC,OAAe,EAAEC,OAAgB,EAAU;EAC3D,OAAOA,OAAO,GAAG,GAAGD,OAAO,IAAIC,OAAO,EAAE,GAAGD,OAAO;AACpD;;AAEA;AACA,SAASE,UAAUA,CAAA,EAAS;EAC1B,IAAIP,WAAW,CAACQ,IAAI,IAAIL,iBAAiB,EAAE;EAC3C,MAAMM,OAAO,GAAG,CAAC,GAAGT,WAAW,CAACS,OAAO,CAAC,CAAC,CAAC,CAACC,IAAI,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAKD,CAAC,CAAC,CAAC,CAAC,CAACE,SAAS,GAAGD,CAAC,CAAC,CAAC,CAAC,CAACC,SAAS,CAAC;EAC1F,MAAMC,MAAM,GAAGd,WAAW,CAACQ,IAAI,GAAGL,iBAAiB;EACnD,KAAK,IAAIY,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGD,MAAM,EAAEC,CAAC,EAAE,EAAE;IAC/Bf,WAAW,CAACgB,MAAM,CAACP,OAAO,CAACM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;EACnC;AACF;;AAEA;AACA,OAAO,SAASE,mBAAmBA,CAACZ,OAAe,EAAEC,OAAgB,EAAQ;EAC3EN,WAAW,CAACgB,MAAM,CAACZ,QAAQ,CAACC,OAAO,EAAEC,OAAO,CAAC,CAAC;EAC9CN,WAAW,CAACgB,MAAM,CAACX,OAAO,CAAC,CAAC,CAAC;AAC/B;;AAEA;AACAa,WAAW,CAAC,MAAM;EAChB,MAAMC,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;EACtB,KAAK,MAAM,CAACE,GAAG,EAAEC,KAAK,CAAC,IAAItB,WAAW,EAAE;IACtC,IAAImB,GAAG,GAAGG,KAAK,CAACT,SAAS,GAAGX,YAAY,GAAG,CAAC,EAAE;MAC5CF,WAAW,CAACgB,MAAM,CAACK,GAAG,CAAC;IACzB;EACF;AACF,CAAC,EAAE,MAAM,CAAC;;AAEV;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeE,eAAeA,CACnCC,QAAwB,EACxBnB,OAAe,EACfC,OAAgB,EACU;EAC1B,MAAMe,GAAG,GAAGjB,QAAQ,CAACC,OAAO,EAAEC,OAAO,CAAC;EACtC,MAAMmB,MAAM,GAAGzB,WAAW,CAAC0B,GAAG,CAACL,GAAG,CAAC;EACnC,IAAIM,OAAwB;EAE5B,IAAIF,MAAM,IAAIL,IAAI,CAACD,GAAG,CAAC,CAAC,GAAGM,MAAM,CAACZ,SAAS,GAAGX,YAAY,EAAE;IAC1DyB,OAAO,GAAGF,MAAM,CAACE,OAAO;EAC1B,CAAC,MAAM;IACL;IACA;IACA,IAAIC,KAAK,GAAGJ,QAAQ,CACjBK,IAAI,CAAC,iBAAiB,CAAC,CACvBC,MAAM,CAAC,8GAA8G,CAAC,CACtHC,EAAE,CAAC,UAAU,EAAE1B,OAAO,CAAC,CACvB0B,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC;IAExB,IAAIzB,OAAO,EAAE;MACX;MACAsB,KAAK,GAAGA,KAAK,CAACI,EAAE,CAAC,eAAe1B,OAAO,mBAAmB,CAAC;IAC7D,CAAC,MAAM;MACLsB,KAAK,GAAGA,KAAK,CAACK,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC;IACpC;IAEA,MAAM;MAAEC,IAAI;MAAEC;IAAM,CAAC,GAAG,MAAMP,KAAK;IAEnC,IAAIO,KAAK,EAAE;MACT;MACApC,GAAG,CAACqC,IAAI,CAAC;QAAED,KAAK,EAAEA,KAAK,CAACE,OAAO;QAAEhC;MAAQ,CAAC,EAAE,4CAA4C,CAAC;MACzF,OAAO;QAAEiC,OAAO,EAAE;MAAK,CAAC;IAC1B;IAEAX,OAAO,GAAIO,IAAI,IAAI,EAAsB;IACzClC,WAAW,CAACuC,GAAG,CAAClB,GAAG,EAAE;MAAEM,OAAO;MAAEd,SAAS,EAAEO,IAAI,CAACD,GAAG,CAAC;IAAE,CAAC,CAAC;IACxDZ,UAAU,CAAC,CAAC;EACd;;EAEA;EACA,IAAI,CAACoB,OAAO,CAACa,MAAM,EAAE,OAAO;IAAEF,OAAO,EAAE;EAAK,CAAC;;EAE7C;EACA,KAAK,MAAMG,MAAM,IAAId,OAAO,EAAE;IAC5B,MAAMe,KAAK,GAAGD,MAAM,CAACE,iBAAiB,IAAI,CAAC;IAC3C,MAAMC,KAAK,GAAGH,MAAM,CAACI,SAAS;IAE9B,IAAID,KAAK,IAAI,CAAC,EAAE,SAAS,CAAC;;IAE1B,IAAIF,KAAK,IAAIE,KAAK,EAAE;MAClB,IAAIH,MAAM,CAACK,SAAS,EAAE;QACpB,MAAMC,KAAK,GAAGN,MAAM,CAACO,QAAQ,GAAG,SAASP,MAAM,CAACO,QAAQ,EAAE,GAAG,OAAO;QACpEjD,GAAG,CAACqC,IAAI,CAAC;UAAE/B,OAAO;UAAEC,OAAO,EAAEmC,MAAM,CAACO,QAAQ;UAAEN,KAAK;UAAEE,KAAK;UAAEK,UAAU,EAAER,MAAM,CAACS;QAAY,CAAC,EAAE,uBAAuB,CAAC;QACtH,OAAO;UACLZ,OAAO,EAAE,KAAK;UACdH,KAAK,EAAE,4BAA4BY,KAAK,MAAML,KAAK,CAACS,OAAO,CAAC,CAAC,CAAC,KAAKP,KAAK,CAACO,OAAO,CAAC,CAAC,CAAC,KAAKV,MAAM,CAACS,WAAW;QAC5G,CAAC;MACH;IACF;;IAEA;IACA,MAAME,cAAc,GAAG,CAACX,MAAM,CAACY,mBAAmB,IAAI,EAAE,IAAI,GAAG;IAC/D,IAAIX,KAAK,IAAIE,KAAK,GAAGQ,cAAc,IAAIV,KAAK,GAAGE,KAAK,EAAE;MACpD,MAAMU,GAAG,GAAGC,IAAI,CAACC,KAAK,CAAEd,KAAK,GAAGE,KAAK,GAAI,GAAG,CAAC;MAC7C,OAAO;QACLN,OAAO,EAAE,IAAI;QACbmB,OAAO,EAAE,eAAeH,GAAG,gBAAgBZ,KAAK,CAACS,OAAO,CAAC,CAAC,CAAC,KAAKP,KAAK,CAACO,OAAO,CAAC,CAAC,CAAC,KAAKV,MAAM,CAACS,WAAW;MACzG,CAAC;IACH;EACF;EAEA,OAAO;IAAEZ,OAAO,EAAE;EAAK,CAAC;AAC1B","ignoreList":[]}

package/dist/server/server-executors.d.ts

@@ -0,0 +1,10 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+import type { SenderContext } from "./handlers/nodes.js";
+export declare function wireToolExecutor(): void;
+export declare function wireAgentExecutor(): void;
+export declare function wireBroadcasters(): void;
+export declare function invokeAgentForChannel(supabase: SupabaseClient, agentId: string, message: string, storeId: string, conversationId: string, senderContext?: SenderContext): Promise<{
+    success: boolean;
+    response?: string;
+    error?: string;
+}>;