whale-code 6.5.5 → 6.5.7

package/dist/server/server-persist.js

@@ -0,0 +1,249 @@
+// server/server-persist.ts — Agent turn persistence (messages, telemetry, memory, cost)
+// Extracted from server-agent.ts to keep each module under 300 lines.
+
+import { createLogger } from "./lib/logger.js";
+import { queueSpan, auditRowToSpan, classifyErrorType } from "./lib/clickhouse-buffer.js";
+import { getAnthropicClient } from "./server-helpers.js";
+import { extractAndStoreMemories, updateCostBudgets } from "./server-agent.js";
+import { invalidateCostCache } from "./server-cost-guard.js";
+const log = createLogger("server-persist");
+
+// ============================================================================
+// PERSIST AGENT TURN — messages, audit, memory, cost
+// ============================================================================
+
+/** Persist everything after an agent turn — messages, audit, memory, cost.
+ *  Called by both SSE chat and channel paths so nothing is ever missed. */
+export async function persistAgentTurn(supabase, agent, opts) {
+  const {
+    conversationId,
+    storeId,
+    agentId,
+    agentModel,
+    traceId,
+    message,
+    result,
+    source,
+    chatStartTime,
+    chatEndTime,
+    userId,
+    userEmail,
+    senderContext
+  } = opts;
+
+  // Persist user + assistant messages
+  try {
+    await supabase.from("ai_messages").insert([{
+      conversation_id: conversationId,
+      role: "user",
+      content: [{
+        type: "text",
+        text: message
+      }],
+      token_count: Math.ceil(message.length / 4)
+    }, {
+      conversation_id: conversationId,
+      role: "assistant",
+      content: [{
+        type: "text",
+        text: result.finalText || ""
+      }],
+      is_tool_use: result.toolCallCount > 0,
+      tool_names: result.toolsUsed?.length ? result.toolsUsed : null,
+      token_count: result.tokens.input + result.tokens.output
+    }]);
+  } catch (err) {
+    log.error({
+      err: err.message
+    }, "message persist failed");
+  }
+
+  // Update conversation metadata
+  try {
+    await supabase.from("ai_conversations").update({
+      metadata: {
+        agentName: agent.name,
+        source,
+        model: agentModel,
+        lastTurnTokens: result.tokens.input + result.tokens.output,
+        lastToolCalls: result.toolCallCount,
+        lastDurationMs: chatEndTime - chatStartTime,
+        ...(senderContext ? {
+          channel_type: senderContext.channelType || null,
+          channel_id: senderContext.channelId || null,
+          channel_name: senderContext.channelName || null,
+          sender_id: senderContext.senderId || null,
+          customer_id: senderContext.customerId || null,
+          customer_name: senderContext.customerName || null
+        } : {})
+      }
+    }).eq("id", conversationId);
+  } catch (err) {
+    log.error({
+      err: err.message
+    }, "conversation update failed");
+  }
+
+  // Telemetry: user message
+  try {
+    queueSpan(auditRowToSpan({
+      action: "chat.user_message",
+      severity: "info",
+      store_id: storeId || null,
+      resource_type: "chat_message",
+      resource_id: agentId,
+      request_id: traceId,
+      conversation_id: conversationId,
+      user_id: userId || null,
+      user_email: userEmail || null,
+      source,
+      service_name: "agent-server",
+      span_kind: "INTERNAL",
+      status_code: "OK",
+      start_time: new Date().toISOString(),
+      end_time: new Date().toISOString(),
+      duration_ms: 0,
+      input_bytes: typeof message === "string" ? message.length : 0,
+      details: {
+        message_preview: message.substring(0, 200),
+        agent_id: agentId,
+        model: agentModel,
+        conversation_id: conversationId,
+        ...(senderContext ? {
+          channel_type: senderContext.channelType || null,
+          sender_id: senderContext.senderId || null,
+          customer_id: senderContext.customerId || null
+        } : {})
+      }
+    }));
+  } catch (err) {
+    log.error({
+      err: err.message
+    }, "audit user_message failed");
+  }
+
+  // Telemetry: assistant response
+  try {
+    queueSpan(auditRowToSpan({
+      action: "chat.assistant_response",
+      severity: "info",
+      store_id: storeId || null,
+      resource_type: "chat_message",
+      resource_id: agentId,
+      request_id: traceId,
+      conversation_id: conversationId,
+      duration_ms: chatEndTime - chatStartTime,
+      user_id: userId || null,
+      user_email: userEmail || null,
+      source,
+      input_tokens: result.tokens.input,
+      output_tokens: result.tokens.output,
+      total_cost: result.costUsd,
+      model: agentModel,
+      trace_id: traceId,
+      span_kind: "INTERNAL",
+      service_name: "agent-server",
+      status_code: "OK",
+      start_time: new Date(chatStartTime).toISOString(),
+      end_time: new Date(chatEndTime).toISOString(),
+      stop_reason: result.stopReason || undefined,
+      turn_number: result.turnCount || 1,
+      details: {
+        response_preview: (result.finalText || "").substring(0, 500),
+        agent_id: agentId,
+        model: agentModel,
+        "gen_ai.request.model": agentModel,
+        "gen_ai.usage.input_tokens": result.tokens.input,
+        "gen_ai.usage.output_tokens": result.tokens.output,
+        "gen_ai.usage.cache_creation_tokens": result.tokens.cacheCreation || 0,
+        "gen_ai.usage.cache_read_tokens": result.tokens.cacheRead || 0,
+        "gen_ai.usage.cost": result.costUsd,
+        turn_count: result.turnCount || 1,
+        tool_calls: result.toolCallCount,
+        tool_names: result.toolsUsed,
+        conversation_id: conversationId,
+        session_cost_usd: result.costUsd,
+        cache_creation_tokens: result.tokens.cacheCreation || 0,
+        cache_read_tokens: result.tokens.cacheRead || 0,
+        cache_hit_rate: result.tokens.input > 0 ? Math.round((result.tokens.cacheRead || 0) / ((result.tokens.cacheRead || 0) + result.tokens.input) * 10000) / 100 : 0,
+        cache_cost_savings_pct: result.tokens.input > 0 && (result.tokens.cacheRead || 0) > 0 ? Math.round((result.tokens.cacheRead || 0) * 0.9 / ((result.tokens.cacheRead || 0) + result.tokens.input) * 10000) / 100 : 0,
+        loop_detector_stats: result.loopDetectorStats || null,
+        turns: result.turns || [],
+        ...(senderContext ? {
+          channel_type: senderContext.channelType || null,
+          channel_id: senderContext.channelId || null,
+          channel_name: senderContext.channelName || null,
+          sender_id: senderContext.senderId || null,
+          customer_id: senderContext.customerId || null,
+          customer_name: senderContext.customerName || null
+        } : {})
+      }
+    }));
+  } catch (err) {
+    log.error({
+      err: err.message
+    }, "audit assistant_response failed");
+  }
+
+  // Memory extraction — awaited with retry
+  if (storeId && result.finalText && result.finalText.length > 50) {
+    try {
+      await extractAndStoreMemories(supabase, getAnthropicClient(agent), agentId, storeId, message, result.finalText);
+    } catch (err1) {
+      try {
+        await new Promise(r => setTimeout(r, 2000));
+        await extractAndStoreMemories(supabase, getAnthropicClient(agent), agentId, storeId, message, result.finalText);
+      } catch (err2) {
+        log.error({
+          err: err2.message
+        }, "memory extract failed after retry");
+        queueSpan(auditRowToSpan({
+          action: "memory.extraction_failed",
+          severity: "warning",
+          store_id: storeId || null,
+          resource_type: "agent_memory",
+          resource_id: agentId,
+          conversation_id: conversationId,
+          user_id: userId || null,
+          user_email: userEmail || null,
+          error_type: classifyErrorType(err2.message) || undefined,
+          service_name: "agent-server",
+          span_kind: "INTERNAL",
+          status_code: "ERROR",
+          start_time: new Date().toISOString(),
+          end_time: new Date().toISOString(),
+          error_message: err2.message,
+          details: {
+            error: err2.message,
+            user_message_preview: message.substring(0, 100)
+          }
+        }));
+      }
+    }
+  }
+
+  // Cost budget tracking — awaited with retry
+  if (storeId && result.costUsd > 0) {
+    try {
+      await updateCostBudgets(supabase, storeId, agentId, result.costUsd);
+      invalidateCostCache(storeId, agentId);
+    } catch (err1) {
+      try {
+        await new Promise(r => setTimeout(r, 1000));
+        await updateCostBudgets(supabase, storeId, agentId, result.costUsd);
+        invalidateCostCache(storeId, agentId);
+      } catch (err2) {
+        log.error({
+          err: err2.message
+        }, "cost budget update failed after retry");
+        await supabase.from("ai_conversations").update({
+          metadata: {
+            budget_sync_failed: true,
+            failed_cost_usd: result.costUsd
+          }
+        }).eq("id", conversationId).then(() => {});
+      }
+    }
+  }
+}
+//# sourceMappingURL=server-persist.js.map

package/dist/server/server-persist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-persist.js","names":["createLogger","queueSpan","auditRowToSpan","classifyErrorType","getAnthropicClient","extractAndStoreMemories","updateCostBudgets","invalidateCostCache","log","persistAgentTurn","supabase","agent","opts","conversationId","storeId","agentId","agentModel","traceId","message","result","source","chatStartTime","chatEndTime","userId","userEmail","senderContext","from","insert","conversation_id","role","content","type","text","token_count","Math","ceil","length","finalText","is_tool_use","toolCallCount","tool_names","toolsUsed","tokens","input","output","err","error","update","metadata","agentName","name","model","lastTurnTokens","lastToolCalls","lastDurationMs","channel_type","channelType","channel_id","channelId","channel_name","channelName","sender_id","senderId","customer_id","customerId","customer_name","customerName","eq","action","severity","store_id","resource_type","resource_id","request_id","user_id","user_email","service_name","span_kind","status_code","start_time","Date","toISOString","end_time","duration_ms","input_bytes","details","message_preview","substring","agent_id","input_tokens","output_tokens","total_cost","costUsd","trace_id","stop_reason","stopReason","undefined","turn_number","turnCount","response_preview","cacheCreation","cacheRead","turn_count","tool_calls","session_cost_usd","cache_creation_tokens","cache_read_tokens","cache_hit_rate","round","cache_cost_savings_pct","loop_detector_stats","loopDetectorStats","turns","err1","Promise","r","setTimeout","err2","error_type","error_message","user_message_preview","budget_sync_failed","failed_cost_usd","then"],"sources":["../../src/server/server-persist.ts"],"sourcesContent":["// server/server-persist.ts — Agent turn persistence (messages, telemetry, memory, cost)\n// Extracted from server-agent.ts to keep each module under 300 lines.\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createLogger } from \"./lib/logger.js\";\nimport { queueSpan, auditRowToSpan, classifyErrorType } from \"./lib/clickhouse-buffer.js\";\nimport type { AgentConfig } from \"./tool-router.js\";\nimport type { SenderContext } from \"./handlers/nodes.js\";\nimport { getAnthropicClient } from \"./server-helpers.js\";\nimport { extractAndStoreMemories, updateCostBudgets } from \"./server-agent.js\";\nimport { invalidateCostCache } from \"./server-cost-guard.js\";\n\nconst log = createLogger(\"server-persist\");\n\n// ============================================================================\n// PERSIST AGENT TURN — messages, audit, memory, cost\n// ============================================================================\n\n/** Persist everything after an agent turn — messages, audit, memory, cost.\n *  Called by both SSE chat and channel paths so nothing is ever missed. */\nexport async function persistAgentTurn(\n  supabase: SupabaseClient,\n  agent: AgentConfig,\n  opts: {\n    conversationId: string;\n    storeId?: string;\n    agentId: string;\n    agentModel: string;\n    traceId: string;\n    message: string;\n    result: { finalText: string; toolCallCount: number; toolsUsed: string[]; tokens: { input: number; output: number; cacheCreation?: number; cacheRead?: number }; costUsd: number; turnCount?: number; loopDetectorStats?: any; turns?: Array<{ turn: number; inputTokens: number; outputTokens: number; cacheRead: number; cacheCreation: number; toolsUsed: string[]; costUsd: number }>; stopReason?: string };\n    source: string;\n    chatStartTime: number;\n    chatEndTime: number;\n    userId?: string;\n    userEmail?: string | null;\n    senderContext?: SenderContext;\n  },\n): Promise<void> {\n  const { conversationId, storeId, agentId, agentModel, traceId, message, result, source, chatStartTime, chatEndTime, userId, userEmail, senderContext } = opts;\n\n  // Persist user + assistant messages\n  try {\n    await supabase.from(\"ai_messages\").insert([\n      {\n        conversation_id: conversationId, role: \"user\",\n        content: [{ type: \"text\", text: message }],\n        token_count: Math.ceil(message.length / 4),\n      },\n      {\n        conversation_id: conversationId, role: \"assistant\",\n        content: [{ type: \"text\", text: result.finalText || \"\" }],\n        is_tool_use: result.toolCallCount > 0,\n        tool_names: result.toolsUsed?.length ? result.toolsUsed : null,\n        token_count: result.tokens.input + result.tokens.output,\n      },\n    ]);\n  } catch (err) {\n    log.error({ err: (err as Error).message }, \"message persist failed\");\n  }\n\n  // Update conversation metadata\n  try {\n    await supabase.from(\"ai_conversations\").update({\n      metadata: {\n        agentName: agent.name,\n        source,\n        model: agentModel,\n        lastTurnTokens: result.tokens.input + result.tokens.output,\n        lastToolCalls: result.toolCallCount,\n        lastDurationMs: chatEndTime - chatStartTime,\n        ...(senderContext ? {\n          channel_type: senderContext.channelType || null,\n          channel_id: senderContext.channelId || null,\n          channel_name: senderContext.channelName || null,\n          sender_id: senderContext.senderId || null,\n          customer_id: senderContext.customerId || null,\n          customer_name: senderContext.customerName || null,\n        } : {}),\n      },\n    }).eq(\"id\", conversationId);\n  } catch (err) {\n    log.error({ err: (err as Error).message }, \"conversation update failed\");\n  }\n\n  // Telemetry: user message\n  try {\n    queueSpan(auditRowToSpan({\n      action: \"chat.user_message\", severity: \"info\",\n      store_id: storeId || null, resource_type: \"chat_message\",\n      resource_id: agentId, request_id: traceId,\n      conversation_id: conversationId,\n      user_id: userId || null, user_email: userEmail || null,\n      source, service_name: \"agent-server\", span_kind: \"INTERNAL\",\n      status_code: \"OK\",\n      start_time: new Date().toISOString(), end_time: new Date().toISOString(),\n      duration_ms: 0,\n      input_bytes: typeof message === \"string\" ? message.length : 0,\n      details: {\n        message_preview: message.substring(0, 200),\n        agent_id: agentId, model: agentModel,\n        conversation_id: conversationId,\n        ...(senderContext ? {\n          channel_type: senderContext.channelType || null,\n          sender_id: senderContext.senderId || null,\n          customer_id: senderContext.customerId || null,\n        } : {}),\n      },\n    }));\n  } catch (err) {\n    log.error({ err: (err as Error).message }, \"audit user_message failed\");\n  }\n\n  // Telemetry: assistant response\n  try {\n    queueSpan(auditRowToSpan({\n      action: \"chat.assistant_response\", severity: \"info\",\n      store_id: storeId || null, resource_type: \"chat_message\",\n      resource_id: agentId, request_id: traceId,\n      conversation_id: conversationId,\n      duration_ms: chatEndTime - chatStartTime,\n      user_id: userId || null, user_email: userEmail || null,\n      source,\n      input_tokens: result.tokens.input, output_tokens: result.tokens.output,\n      total_cost: result.costUsd, model: agentModel,\n      trace_id: traceId, span_kind: \"INTERNAL\",\n      service_name: \"agent-server\", status_code: \"OK\",\n      start_time: new Date(chatStartTime).toISOString(),\n      end_time: new Date(chatEndTime).toISOString(),\n      stop_reason: result.stopReason || undefined,\n      turn_number: result.turnCount || 1,\n      details: {\n        response_preview: (result.finalText || \"\").substring(0, 500),\n        agent_id: agentId, model: agentModel,\n        \"gen_ai.request.model\": agentModel,\n        \"gen_ai.usage.input_tokens\": result.tokens.input,\n        \"gen_ai.usage.output_tokens\": result.tokens.output,\n        \"gen_ai.usage.cache_creation_tokens\": result.tokens.cacheCreation || 0,\n        \"gen_ai.usage.cache_read_tokens\": result.tokens.cacheRead || 0,\n        \"gen_ai.usage.cost\": result.costUsd,\n        turn_count: result.turnCount || 1,\n        tool_calls: result.toolCallCount,\n        tool_names: result.toolsUsed,\n        conversation_id: conversationId,\n        session_cost_usd: result.costUsd,\n        cache_creation_tokens: result.tokens.cacheCreation || 0,\n        cache_read_tokens: result.tokens.cacheRead || 0,\n        cache_hit_rate: result.tokens.input > 0\n          ? Math.round((result.tokens.cacheRead || 0) / ((result.tokens.cacheRead || 0) + result.tokens.input) * 10000) / 100\n          : 0,\n        cache_cost_savings_pct: result.tokens.input > 0 && (result.tokens.cacheRead || 0) > 0\n          ? Math.round((result.tokens.cacheRead || 0) * 0.9 / ((result.tokens.cacheRead || 0) + result.tokens.input) * 10000) / 100\n          : 0,\n        loop_detector_stats: result.loopDetectorStats || null,\n        turns: result.turns || [],\n        ...(senderContext ? {\n          channel_type: senderContext.channelType || null,\n          channel_id: senderContext.channelId || null,\n          channel_name: senderContext.channelName || null,\n          sender_id: senderContext.senderId || null,\n          customer_id: senderContext.customerId || null,\n          customer_name: senderContext.customerName || null,\n        } : {}),\n      },\n    }));\n  } catch (err) {\n    log.error({ err: (err as Error).message }, \"audit assistant_response failed\");\n  }\n\n  // Memory extraction — awaited with retry\n  if (storeId && result.finalText && result.finalText.length > 50) {\n    try {\n      await extractAndStoreMemories(supabase, getAnthropicClient(agent), agentId, storeId, message, result.finalText);\n    } catch (err1: any) {\n      try {\n        await new Promise(r => setTimeout(r, 2000));\n        await extractAndStoreMemories(supabase, getAnthropicClient(agent), agentId, storeId, message, result.finalText);\n      } catch (err2: any) {\n        log.error({ err: err2.message }, \"memory extract failed after retry\");\n        queueSpan(auditRowToSpan({\n          action: \"memory.extraction_failed\", severity: \"warning\",\n          store_id: storeId || null, resource_type: \"agent_memory\",\n          resource_id: agentId, conversation_id: conversationId,\n          user_id: userId || null, user_email: userEmail || null,\n          error_type: classifyErrorType(err2.message) || undefined,\n          service_name: \"agent-server\", span_kind: \"INTERNAL\", status_code: \"ERROR\",\n          start_time: new Date().toISOString(), end_time: new Date().toISOString(),\n          error_message: err2.message,\n          details: { error: err2.message, user_message_preview: message.substring(0, 100) },\n        }));\n      }\n    }\n  }\n\n  // Cost budget tracking — awaited with retry\n  if (storeId && result.costUsd > 0) {\n    try {\n      await updateCostBudgets(supabase, storeId, agentId, result.costUsd);\n      invalidateCostCache(storeId, agentId);\n    } catch (err1: any) {\n      try {\n        await new Promise(r => setTimeout(r, 1000));\n        await updateCostBudgets(supabase, storeId, agentId, result.costUsd);\n        invalidateCostCache(storeId, agentId);\n      } catch (err2: any) {\n        log.error({ err: err2.message }, \"cost budget update failed after retry\");\n        await supabase.from(\"ai_conversations\").update({\n          metadata: { budget_sync_failed: true, failed_cost_usd: result.costUsd },\n        }).eq(\"id\", conversationId).then(() => {});\n      }\n    }\n  }\n}\n"],"mappings":"AAAA;AACA;;AAGA,SAASA,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,SAAS,EAAEC,cAAc,EAAEC,iBAAiB,QAAQ,4BAA4B;AAGzF,SAASC,kBAAkB,QAAQ,qBAAqB;AACxD,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,mBAAmB;AAC9E,SAASC,mBAAmB,QAAQ,wBAAwB;AAE5D,MAAMC,GAAG,GAAGR,YAAY,CAAC,gBAAgB,CAAC;;AAE1C;AACA;AACA;;AAEA;AACA;AACA,OAAO,eAAeS,gBAAgBA,CACpCC,QAAwB,EACxBC,KAAkB,EAClBC,IAcC,EACc;EACf,MAAM;IAAEC,cAAc;IAAEC,OAAO;IAAEC,OAAO;IAAEC,UAAU;IAAEC,OAAO;IAAEC,OAAO;IAAEC,MAAM;IAAEC,MAAM;IAAEC,aAAa;IAAEC,WAAW;IAAEC,MAAM;IAAEC,SAAS;IAAEC;EAAc,CAAC,GAAGb,IAAI;;EAE7J;EACA,IAAI;IACF,MAAMF,QAAQ,CAACgB,IAAI,CAAC,aAAa,CAAC,CAACC,MAAM,CAAC,CACxC;MACEC,eAAe,EAAEf,cAAc;MAAEgB,IAAI,EAAE,MAAM;MAC7CC,OAAO,EAAE,CAAC;QAAEC,IAAI,EAAE,MAAM;QAAEC,IAAI,EAAEd;MAAQ,CAAC,CAAC;MAC1Ce,WAAW,EAAEC,IAAI,CAACC,IAAI,CAACjB,OAAO,CAACkB,MAAM,GAAG,CAAC;IAC3C,CAAC,EACD;MACER,eAAe,EAAEf,cAAc;MAAEgB,IAAI,EAAE,WAAW;MAClDC,OAAO,EAAE,CAAC;QAAEC,IAAI,EAAE,MAAM;QAAEC,IAAI,EAAEb,MAAM,CAACkB,SAAS,IAAI;MAAG,CAAC,CAAC;MACzDC,WAAW,EAAEnB,MAAM,CAACoB,aAAa,GAAG,CAAC;MACrCC,UAAU,EAAErB,MAAM,CAACsB,SAAS,EAAEL,MAAM,GAAGjB,MAAM,CAACsB,SAAS,GAAG,IAAI;MAC9DR,WAAW,EAAEd,MAAM,CAACuB,MAAM,CAACC,KAAK,GAAGxB,MAAM,CAACuB,MAAM,CAACE;IACnD,CAAC,CACF,CAAC;EACJ,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZrC,GAAG,CAACsC,KAAK,CAAC;MAAED,GAAG,EAAGA,GAAG,CAAW3B;IAAQ,CAAC,EAAE,wBAAwB,CAAC;EACtE;;EAEA;EACA,IAAI;IACF,MAAMR,QAAQ,CAACgB,IAAI,CAAC,kBAAkB,CAAC,CAACqB,MAAM,CAAC;MAC7CC,QAAQ,EAAE;QACRC,SAAS,EAAEtC,KAAK,CAACuC,IAAI;QACrB9B,MAAM;QACN+B,KAAK,EAAEnC,UAAU;QACjBoC,cAAc,EAAEjC,MAAM,CAACuB,MAAM,CAACC,KAAK,GAAGxB,MAAM,CAACuB,MAAM,CAACE,MAAM;QAC1DS,aAAa,EAAElC,MAAM,CAACoB,aAAa;QACnCe,cAAc,EAAEhC,WAAW,GAAGD,aAAa;QAC3C,IAAII,aAAa,GAAG;UAClB8B,YAAY,EAAE9B,aAAa,CAAC+B,WAAW,IAAI,IAAI;UAC/CC,UAAU,EAAEhC,aAAa,CAACiC,SAAS,IAAI,IAAI;UAC3CC,YAAY,EAAElC,aAAa,CAACmC,WAAW,IAAI,IAAI;UAC/CC,SAAS,EAAEpC,aAAa,CAACqC,QAAQ,IAAI,IAAI;UACzCC,WAAW,EAAEtC,aAAa,CAACuC,UAAU,IAAI,IAAI;UAC7CC,aAAa,EAAExC,aAAa,CAACyC,YAAY,IAAI;QAC/C,CAAC,GAAG,CAAC,CAAC;MACR;IACF,CAAC,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEtD,cAAc,CAAC;EAC7B,CAAC,CAAC,OAAOgC,GAAG,EAAE;IACZrC,GAAG,CAACsC,KAAK,CAAC;MAAED,GAAG,EAAGA,GAAG,CAAW3B;IAAQ,CAAC,EAAE,4BAA4B,CAAC;EAC1E;;EAEA;EACA,IAAI;IACFjB,SAAS,CAACC,cAAc,CAAC;MACvBkE,MAAM,EAAE,mBAAmB;MAAEC,QAAQ,EAAE,MAAM;MAC7CC,QAAQ,EAAExD,OAAO,IAAI,IAAI;MAAEyD,aAAa,EAAE,cAAc;MACxDC,WAAW,EAAEzD,OAAO;MAAE0D,UAAU,EAAExD,OAAO;MACzCW,eAAe,EAAEf,cAAc;MAC/B6D,OAAO,EAAEnD,MAAM,IAAI,IAAI;MAAEoD,UAAU,EAAEnD,SAAS,IAAI,IAAI;MACtDJ,MAAM;MAAEwD,YAAY,EAAE,cAAc;MAAEC,SAAS,EAAE,UAAU;MAC3DC,WAAW,EAAE,IAAI;MACjBC,UAAU,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;MAAEC,QAAQ,EAAE,IAAIF,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;MACxEE,WAAW,EAAE,CAAC;MACdC,WAAW,EAAE,OAAOlE,OAAO,KAAK,QAAQ,GAAGA,OAAO,CAACkB,MAAM,GAAG,CAAC;MAC7DiD,OAAO,EAAE;QACPC,eAAe,EAAEpE,OAAO,CAACqE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;QAC1CC,QAAQ,EAAEzE,OAAO;QAAEoC,KAAK,EAAEnC,UAAU;QACpCY,eAAe,EAAEf,cAAc;QAC/B,IAAIY,aAAa,GAAG;UAClB8B,YAAY,EAAE9B,aAAa,CAAC+B,WAAW,IAAI,IAAI;UAC/CK,SAAS,EAAEpC,aAAa,CAACqC,QAAQ,IAAI,IAAI;UACzCC,WAAW,EAAEtC,aAAa,CAACuC,UAAU,IAAI;QAC3C,CAAC,GAAG,CAAC,CAAC;MACR;IACF,CAAC,CAAC,CAAC;EACL,CAAC,CAAC,OAAOnB,GAAG,EAAE;IACZrC,GAAG,CAACsC,KAAK,CAAC;MAAED,GAAG,EAAGA,GAAG,CAAW3B;IAAQ,CAAC,EAAE,2BAA2B,CAAC;EACzE;;EAEA;EACA,IAAI;IACFjB,SAAS,CAACC,cAAc,CAAC;MACvBkE,MAAM,EAAE,yBAAyB;MAAEC,QAAQ,EAAE,MAAM;MACnDC,QAAQ,EAAExD,OAAO,IAAI,IAAI;MAAEyD,aAAa,EAAE,cAAc;MACxDC,WAAW,EAAEzD,OAAO;MAAE0D,UAAU,EAAExD,OAAO;MACzCW,eAAe,EAAEf,cAAc;MAC/BsE,WAAW,EAAE7D,WAAW,GAAGD,aAAa;MACxCqD,OAAO,EAAEnD,MAAM,IAAI,IAAI;MAAEoD,UAAU,EAAEnD,SAAS,IAAI,IAAI;MACtDJ,MAAM;MACNqE,YAAY,EAAEtE,MAAM,CAACuB,MAAM,CAACC,KAAK;MAAE+C,aAAa,EAAEvE,MAAM,CAACuB,MAAM,CAACE,MAAM;MACtE+C,UAAU,EAAExE,MAAM,CAACyE,OAAO;MAAEzC,KAAK,EAAEnC,UAAU;MAC7C6E,QAAQ,EAAE5E,OAAO;MAAE4D,SAAS,EAAE,UAAU;MACxCD,YAAY,EAAE,cAAc;MAAEE,WAAW,EAAE,IAAI;MAC/CC,UAAU,EAAE,IAAIC,IAAI,CAAC3D,aAAa,CAAC,CAAC4D,WAAW,CAAC,CAAC;MACjDC,QAAQ,EAAE,IAAIF,IAAI,CAAC1D,WAAW,CAAC,CAAC2D,WAAW,CAAC,CAAC;MAC7Ca,WAAW,EAAE3E,MAAM,CAAC4E,UAAU,IAAIC,SAAS;MAC3CC,WAAW,EAAE9E,MAAM,CAAC+E,SAAS,IAAI,CAAC;MAClCb,OAAO,EAAE;QACPc,gBAAgB,EAAE,CAAChF,MAAM,CAACkB,SAAS,IAAI,EAAE,EAAEkD,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;QAC5DC,QAAQ,EAAEzE,OAAO;QAAEoC,KAAK,EAAEnC,UAAU;QACpC,sBAAsB,EAAEA,UAAU;QAClC,2BAA2B,EAAEG,MAAM,CAACuB,MAAM,CAACC,KAAK;QAChD,4BAA4B,EAAExB,MAAM,CAACuB,MAAM,CAACE,MAAM;QAClD,oCAAoC,EAAEzB,MAAM,CAACuB,MAAM,CAAC0D,aAAa,IAAI,CAAC;QACtE,gCAAgC,EAAEjF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC;QAC9D,mBAAmB,EAAElF,MAAM,CAACyE,OAAO;QACnCU,UAAU,EAAEnF,MAAM,CAAC+E,SAAS,IAAI,CAAC;QACjCK,UAAU,EAAEpF,MAAM,CAACoB,aAAa;QAChCC,UAAU,EAAErB,MAAM,CAACsB,SAAS;QAC5Bb,eAAe,EAAEf,cAAc;QAC/B2F,gBAAgB,EAAErF,MAAM,CAACyE,OAAO;QAChCa,qBAAqB,EAAEtF,MAAM,CAACuB,MAAM,CAAC0D,aAAa,IAAI,CAAC;QACvDM,iBAAiB,EAAEvF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC;QAC/CM,cAAc,EAAExF,MAAM,CAACuB,MAAM,CAACC,KAAK,GAAG,CAAC,GACnCT,IAAI,CAAC0E,KAAK,CAAC,CAACzF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC,KAAK,CAAClF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC,IAAIlF,MAAM,CAACuB,MAAM,CAACC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG,GACjH,CAAC;QACLkE,sBAAsB,EAAE1F,MAAM,CAACuB,MAAM,CAACC,KAAK,GAAG,CAAC,IAAI,CAACxB,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC,IAAI,CAAC,GACjFnE,IAAI,CAAC0E,KAAK,CAAC,CAACzF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC,IAAI,GAAG,IAAI,CAAClF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC,IAAIlF,MAAM,CAACuB,MAAM,CAACC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG,GACvH,CAAC;QACLmE,mBAAmB,EAAE3F,MAAM,CAAC4F,iBAAiB,IAAI,IAAI;QACrDC,KAAK,EAAE7F,MAAM,CAAC6F,KAAK,IAAI,EAAE;QACzB,IAAIvF,aAAa,GAAG;UAClB8B,YAAY,EAAE9B,aAAa,CAAC+B,WAAW,IAAI,IAAI;UAC/CC,UAAU,EAAEhC,aAAa,CAACiC,SAAS,IAAI,IAAI;UAC3CC,YAAY,EAAElC,aAAa,CAACmC,WAAW,IAAI,IAAI;UAC/CC,SAAS,EAAEpC,aAAa,CAACqC,QAAQ,IAAI,IAAI;UACzCC,WAAW,EAAEtC,aAAa,CAACuC,UAAU,IAAI,IAAI;UAC7CC,aAAa,EAAExC,aAAa,CAACyC,YAAY,IAAI;QAC/C,CAAC,GAAG,CAAC,CAAC;MACR;IACF,CAAC,CAAC,CAAC;EACL,CAAC,CAAC,OAAOrB,GAAG,EAAE;IACZrC,GAAG,CAACsC,KAAK,CAAC;MAAED,GAAG,EAAGA,GAAG,CAAW3B;IAAQ,CAAC,EAAE,iCAAiC,CAAC;EAC/E;;EAEA;EACA,IAAIJ,OAAO,IAAIK,MAAM,CAACkB,SAAS,IAAIlB,MAAM,CAACkB,SAAS,CAACD,MAAM,GAAG,EAAE,EAAE;IAC/D,IAAI;MACF,MAAM/B,uBAAuB,CAACK,QAAQ,EAAEN,kBAAkB,CAACO,KAAK,CAAC,EAAEI,OAAO,EAAED,OAAO,EAAEI,OAAO,EAAEC,MAAM,CAACkB,SAAS,CAAC;IACjH,CAAC,CAAC,OAAO4E,IAAS,EAAE;MAClB,IAAI;QACF,MAAM,IAAIC,OAAO,CAACC,CAAC,IAAIC,UAAU,CAACD,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM9G,uBAAuB,CAACK,QAAQ,EAAEN,kBAAkB,CAACO,KAAK,CAAC,EAAEI,OAAO,EAAED,OAAO,EAAEI,OAAO,EAAEC,MAAM,CAACkB,SAAS,CAAC;MACjH,CAAC,CAAC,OAAOgF,IAAS,EAAE;QAClB7G,GAAG,CAACsC,KAAK,CAAC;UAAED,GAAG,EAAEwE,IAAI,CAACnG;QAAQ,CAAC,EAAE,mCAAmC,CAAC;QACrEjB,SAAS,CAACC,cAAc,CAAC;UACvBkE,MAAM,EAAE,0BAA0B;UAAEC,QAAQ,EAAE,SAAS;UACvDC,QAAQ,EAAExD,OAAO,IAAI,IAAI;UAAEyD,aAAa,EAAE,cAAc;UACxDC,WAAW,EAAEzD,OAAO;UAAEa,eAAe,EAAEf,cAAc;UACrD6D,OAAO,EAAEnD,MAAM,IAAI,IAAI;UAAEoD,UAAU,EAAEnD,SAAS,IAAI,IAAI;UACtD8F,UAAU,EAAEnH,iBAAiB,CAACkH,IAAI,CAACnG,OAAO,CAAC,IAAI8E,SAAS;UACxDpB,YAAY,EAAE,cAAc;UAAEC,SAAS,EAAE,UAAU;UAAEC,WAAW,EAAE,OAAO;UACzEC,UAAU,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;UAAEC,QAAQ,EAAE,IAAIF,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;UACxEsC,aAAa,EAAEF,IAAI,CAACnG,OAAO;UAC3BmE,OAAO,EAAE;YAAEvC,KAAK,EAAEuE,IAAI,CAACnG,OAAO;YAAEsG,oBAAoB,EAAEtG,OAAO,CAACqE,SAAS,CAAC,CAAC,EAAE,GAAG;UAAE;QAClF,CAAC,CAAC,CAAC;MACL;IACF;EACF;;EAEA;EACA,IAAIzE,OAAO,IAAIK,MAAM,CAACyE,OAAO,GAAG,CAAC,EAAE;IACjC,IAAI;MACF,MAAMtF,iBAAiB,CAACI,QAAQ,EAAEI,OAAO,EAAEC,OAAO,EAAEI,MAAM,CAACyE,OAAO,CAAC;MACnErF,mBAAmB,CAACO,OAAO,EAAEC,OAAO,CAAC;IACvC,CAAC,CAAC,OAAOkG,IAAS,EAAE;MAClB,IAAI;QACF,MAAM,IAAIC,OAAO,CAACC,CAAC,IAAIC,UAAU,CAACD,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM7G,iBAAiB,CAACI,QAAQ,EAAEI,OAAO,EAAEC,OAAO,EAAEI,MAAM,CAACyE,OAAO,CAAC;QACnErF,mBAAmB,CAACO,OAAO,EAAEC,OAAO,CAAC;MACvC,CAAC,CAAC,OAAOsG,IAAS,EAAE;QAClB7G,GAAG,CAACsC,KAAK,CAAC;UAAED,GAAG,EAAEwE,IAAI,CAACnG;QAAQ,CAAC,EAAE,uCAAuC,CAAC;QACzE,MAAMR,QAAQ,CAACgB,IAAI,CAAC,kBAAkB,CAAC,CAACqB,MAAM,CAAC;UAC7CC,QAAQ,EAAE;YAAEyE,kBAAkB,EAAE,IAAI;YAAEC,eAAe,EAAEvG,MAAM,CAACyE;UAAQ;QACxE,CAAC,CAAC,CAACzB,EAAE,CAAC,IAAI,EAAEtD,cAAc,CAAC,CAAC8G,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;MAC5C;IACF;EACF;AACF","ignoreList":[]}

package/dist/server/server-rate-limit.d.ts

@@ -0,0 +1,9 @@
+import http from "node:http";
+/** Check IP rate limit and send 429 with proper headers if exceeded */
+export declare function sendIpRateLimit(res: http.ServerResponse, ip: string, headers: Record<string, string>): boolean;
+export declare function checkAgentChatRateLimit(storeId: string): {
+    allowed: boolean;
+    error?: string;
+};
+export declare function incrementConcurrent(): void;
+export declare function decrementConcurrent(): void;

package/dist/server/server-rate-limit.js

@@ -0,0 +1,77 @@
+// server/server-rate-limit.ts — Rate limiting helpers for the agent server
+// Extracted from index.ts for modularity.
+
+import { rateLimiter } from "./lib/rate-limiter.js";
+
+// ============================================================================
+// IP RATE LIMITING
+// ============================================================================
+
+/** Check IP rate limit and send 429 with proper headers if exceeded */
+export function sendIpRateLimit(res, ip, headers) {
+  const result = rateLimiter.checkRequest(`ip:${ip}`, "unauthenticated");
+  if (result.allowed) return false;
+  res.writeHead(429, {
+    "Retry-After": String(Math.ceil(result.retryAfterMs / 1000) || 1),
+    "X-RateLimit-Remaining": "0",
+    "Content-Type": "application/json",
+    ...headers
+  });
+  res.end(JSON.stringify({
+    error: "Too many requests"
+  }));
+  return true;
+}
+
+// ============================================================================
+// AGENT CHAT RATE LIMITING — per-store + global concurrent cap
+// ============================================================================
+
+const agentChatLimiter = new Map();
+const AGENT_CHAT_MAX_PER_MIN = 60;
+const AGENT_CHAT_MAX_CONCURRENT = 10;
+let agentChatConcurrent = 0;
+
+// Periodically clean up stale entries to prevent unbounded Map growth
+setInterval(() => {
+  const now = Date.now();
+  for (const [key, entry] of agentChatLimiter) {
+    if (now - entry.windowStart > 120_000) {
+      agentChatLimiter.delete(key);
+    }
+  }
+}, 60_000);
+export function checkAgentChatRateLimit(storeId) {
+  if (agentChatConcurrent >= AGENT_CHAT_MAX_CONCURRENT) {
+    return {
+      allowed: false,
+      error: "Too many concurrent agent sessions. Please wait."
+    };
+  }
+  const now = Date.now();
+  let entry = agentChatLimiter.get(storeId);
+  if (!entry || now - entry.windowStart > 60_000) {
+    entry = {
+      count: 0,
+      windowStart: now
+    };
+    agentChatLimiter.set(storeId, entry);
+  }
+  entry.count++;
+  if (entry.count > AGENT_CHAT_MAX_PER_MIN) {
+    return {
+      allowed: false,
+      error: `Rate limit exceeded: ${AGENT_CHAT_MAX_PER_MIN}/min for agent chat`
+    };
+  }
+  return {
+    allowed: true
+  };
+}
+export function incrementConcurrent() {
+  agentChatConcurrent++;
+}
+export function decrementConcurrent() {
+  agentChatConcurrent--;
+}
+//# sourceMappingURL=server-rate-limit.js.map

package/dist/server/server-rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-rate-limit.js","names":["rateLimiter","sendIpRateLimit","res","ip","headers","result","checkRequest","allowed","writeHead","String","Math","ceil","retryAfterMs","end","JSON","stringify","error","agentChatLimiter","Map","AGENT_CHAT_MAX_PER_MIN","AGENT_CHAT_MAX_CONCURRENT","agentChatConcurrent","setInterval","now","Date","key","entry","windowStart","delete","checkAgentChatRateLimit","storeId","get","count","set","incrementConcurrent","decrementConcurrent"],"sources":["../../src/server/server-rate-limit.ts"],"sourcesContent":["// server/server-rate-limit.ts — Rate limiting helpers for the agent server\n// Extracted from index.ts for modularity.\n\nimport http from \"node:http\";\nimport { rateLimiter } from \"./lib/rate-limiter.js\";\n\n// ============================================================================\n// IP RATE LIMITING\n// ============================================================================\n\n/** Check IP rate limit and send 429 with proper headers if exceeded */\nexport function sendIpRateLimit(res: http.ServerResponse, ip: string, headers: Record<string, string>): boolean {\n  const result = rateLimiter.checkRequest(`ip:${ip}`, \"unauthenticated\");\n  if (result.allowed) return false;\n  res.writeHead(429, {\n    \"Retry-After\": String(Math.ceil(result.retryAfterMs / 1000) || 1),\n    \"X-RateLimit-Remaining\": \"0\",\n    \"Content-Type\": \"application/json\",\n    ...headers,\n  });\n  res.end(JSON.stringify({ error: \"Too many requests\" }));\n  return true;\n}\n\n// ============================================================================\n// AGENT CHAT RATE LIMITING — per-store + global concurrent cap\n// ============================================================================\n\nconst agentChatLimiter = new Map<string, { count: number; windowStart: number }>();\nconst AGENT_CHAT_MAX_PER_MIN = 60;\nconst AGENT_CHAT_MAX_CONCURRENT = 10;\nlet agentChatConcurrent = 0;\n\n// Periodically clean up stale entries to prevent unbounded Map growth\nsetInterval(() => {\n  const now = Date.now();\n  for (const [key, entry] of agentChatLimiter) {\n    if (now - entry.windowStart > 120_000) {\n      agentChatLimiter.delete(key);\n    }\n  }\n}, 60_000);\n\nexport function checkAgentChatRateLimit(storeId: string): { allowed: boolean; error?: string } {\n  if (agentChatConcurrent >= AGENT_CHAT_MAX_CONCURRENT) {\n    return { allowed: false, error: \"Too many concurrent agent sessions. Please wait.\" };\n  }\n\n  const now = Date.now();\n  let entry = agentChatLimiter.get(storeId);\n  if (!entry || now - entry.windowStart > 60_000) {\n    entry = { count: 0, windowStart: now };\n    agentChatLimiter.set(storeId, entry);\n  }\n  entry.count++;\n  if (entry.count > AGENT_CHAT_MAX_PER_MIN) {\n    return { allowed: false, error: `Rate limit exceeded: ${AGENT_CHAT_MAX_PER_MIN}/min for agent chat` };\n  }\n  return { allowed: true };\n}\n\nexport function incrementConcurrent(): void { agentChatConcurrent++; }\nexport function decrementConcurrent(): void { agentChatConcurrent--; }\n"],"mappings":"AAAA;AACA;;AAGA,SAASA,WAAW,QAAQ,uBAAuB;;AAEnD;AACA;AACA;;AAEA;AACA,OAAO,SAASC,eAAeA,CAACC,GAAwB,EAAEC,EAAU,EAAEC,OAA+B,EAAW;EAC9G,MAAMC,MAAM,GAAGL,WAAW,CAACM,YAAY,CAAC,MAAMH,EAAE,EAAE,EAAE,iBAAiB,CAAC;EACtE,IAAIE,MAAM,CAACE,OAAO,EAAE,OAAO,KAAK;EAChCL,GAAG,CAACM,SAAS,CAAC,GAAG,EAAE;IACjB,aAAa,EAAEC,MAAM,CAACC,IAAI,CAACC,IAAI,CAACN,MAAM,CAACO,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,uBAAuB,EAAE,GAAG;IAC5B,cAAc,EAAE,kBAAkB;IAClC,GAAGR;EACL,CAAC,CAAC;EACFF,GAAG,CAACW,GAAG,CAACC,IAAI,CAACC,SAAS,CAAC;IAAEC,KAAK,EAAE;EAAoB,CAAC,CAAC,CAAC;EACvD,OAAO,IAAI;AACb;;AAEA;AACA;AACA;;AAEA,MAAMC,gBAAgB,GAAG,IAAIC,GAAG,CAAiD,CAAC;AAClF,MAAMC,sBAAsB,GAAG,EAAE;AACjC,MAAMC,yBAAyB,GAAG,EAAE;AACpC,IAAIC,mBAAmB,GAAG,CAAC;;AAE3B;AACAC,WAAW,CAAC,MAAM;EAChB,MAAMC,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;EACtB,KAAK,MAAM,CAACE,GAAG,EAAEC,KAAK,CAAC,IAAIT,gBAAgB,EAAE;IAC3C,IAAIM,GAAG,GAAGG,KAAK,CAACC,WAAW,GAAG,OAAO,EAAE;MACrCV,gBAAgB,CAACW,MAAM,CAACH,GAAG,CAAC;IAC9B;EACF;AACF,CAAC,EAAE,MAAM,CAAC;AAEV,OAAO,SAASI,uBAAuBA,CAACC,OAAe,EAAwC;EAC7F,IAAIT,mBAAmB,IAAID,yBAAyB,EAAE;IACpD,OAAO;MAAEb,OAAO,EAAE,KAAK;MAAES,KAAK,EAAE;IAAmD,CAAC;EACtF;EAEA,MAAMO,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;EACtB,IAAIG,KAAK,GAAGT,gBAAgB,CAACc,GAAG,CAACD,OAAO,CAAC;EACzC,IAAI,CAACJ,KAAK,IAAIH,GAAG,GAAGG,KAAK,CAACC,WAAW,GAAG,MAAM,EAAE;IAC9CD,KAAK,GAAG;MAAEM,KAAK,EAAE,CAAC;MAAEL,WAAW,EAAEJ;IAAI,CAAC;IACtCN,gBAAgB,CAACgB,GAAG,CAACH,OAAO,EAAEJ,KAAK,CAAC;EACtC;EACAA,KAAK,CAACM,KAAK,EAAE;EACb,IAAIN,KAAK,CAACM,KAAK,GAAGb,sBAAsB,EAAE;IACxC,OAAO;MAAEZ,OAAO,EAAE,KAAK;MAAES,KAAK,EAAE,wBAAwBG,sBAAsB;IAAsB,CAAC;EACvG;EACA,OAAO;IAAEZ,OAAO,EAAE;EAAK,CAAC;AAC1B;AAEA,OAAO,SAAS2B,mBAAmBA,CAAA,EAAS;EAAEb,mBAAmB,EAAE;AAAE;AACrE,OAAO,SAASc,mBAAmBA,CAAA,EAAS;EAAEd,mBAAmB,EAAE;AAAE","ignoreList":[]}

package/dist/server/server-routes-approvals.d.ts

@@ -0,0 +1,4 @@
+import http from "node:http";
+import { type ServerContext } from "./server-helpers.js";
+export declare function handleGuestApproval(req: http.IncomingMessage, res: http.ServerResponse, ctx: ServerContext): Promise<boolean>;
+export declare function handleApprovalRespond(req: http.IncomingMessage, res: http.ServerResponse, ctx: ServerContext): Promise<boolean>;

package/dist/server/server-routes-approvals.js

@@ -0,0 +1,238 @@
+// server/server-routes-approvals.ts — Approval route handlers
+// Guest approval GET and authenticated approval respond POST
+// Extracted from index.ts for domain-based modularity.
+
+import { createLogger } from "./lib/logger.js";
+import { getServiceClient } from "./lib/supabase-client.js";
+import { verifyGuestApprovalSignature, executeInlineChain } from "./handlers/workflows.js";
+import { jsonResponse, readBody, safeCompare } from "./server-helpers.js";
+import { sendIpRateLimit } from "./server-rate-limit.js";
+const log = createLogger("server-routes-approvals");
+const SUPABASE_SERVICE_ROLE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY;
+const SERVICE_ROLE_JWT = process.env.SERVICE_ROLE_JWT || "";
+const FLY_INTERNAL_SECRET = process.env.FLY_INTERNAL_SECRET || "";
+
+// ============================================================================
+// HELPERS
+// ============================================================================
+
+function getToken(req) {
+  const authHeader = req.headers.authorization;
+  return authHeader?.startsWith("Bearer ") ? authHeader.substring(7) : "";
+}
+function isInternalAuth(token) {
+  return safeCompare(token, FLY_INTERNAL_SECRET) || safeCompare(token, SUPABASE_SERVICE_ROLE_KEY) || safeCompare(token, SERVICE_ROLE_JWT);
+}
+
+// ============================================================================
+// GET /approvals/guest/:id — Guest approval via signed URL (no auth required)
+// GET /approvals/guest/:id?action=approve&expires=...&sig=...
+// ============================================================================
+
+export async function handleGuestApproval(req, res, ctx) {
+  const {
+    pathname,
+    corsHeaders
+  } = ctx;
+  const guestApprovalMatch = pathname.match(/^\/approvals\/guest\/([a-f0-9-]+)$/);
+  if (!(guestApprovalMatch && req.method === "GET")) return false;
+  const clientIp = req.headers["x-forwarded-for"]?.toString().split(",")[0]?.trim() || req.socket.remoteAddress || "unknown";
+  if (sendIpRateLimit(res, clientIp, corsHeaders)) return true;
+  const stepRunId = guestApprovalMatch[1];
+  const urlParams = new URL(req.url || "", `http://${req.headers.host}`).searchParams;
+  const action = urlParams.get("action") || "";
+  const expires = urlParams.get("expires") || "";
+  const sig = urlParams.get("sig") || "";
+  if (!action || !expires || !sig) {
+    jsonResponse(res, 400, {
+      error: "Missing action, expires, or sig parameter"
+    }, corsHeaders);
+    return true;
+  }
+  if (new Date(expires) < new Date()) {
+    jsonResponse(res, 410, {
+      error: "This approval link has expired"
+    }, corsHeaders);
+    return true;
+  }
+  if (!verifyGuestApprovalSignature(stepRunId, action, expires, sig)) {
+    jsonResponse(res, 403, {
+      error: "Invalid signature"
+    }, corsHeaders);
+    return true;
+  }
+  const guestSupabase = getServiceClient();
+  const {
+    data: approval
+  } = await guestSupabase.from("workflow_approval_requests").select("id, store_id, run_id, status").eq("step_run_id", stepRunId).limit(1);
+  if (!approval?.length) {
+    jsonResponse(res, 404, {
+      error: "Approval not found"
+    }, corsHeaders);
+    return true;
+  }
+  if (approval[0].status !== "pending") {
+    jsonResponse(res, 409, {
+      error: `Approval already ${approval[0].status}`
+    }, corsHeaders);
+    return true;
+  }
+  const isApprove = action === "approve" || action === "approved";
+  const {
+    data: guestResult,
+    error: guestErr
+  } = await guestSupabase.rpc("respond_to_approval", {
+    p_approval_id: approval[0].id,
+    p_store_id: approval[0].store_id,
+    p_response: isApprove ? "approved" : "rejected",
+    p_response_data: {
+      guest: true,
+      action
+    },
+    p_responded_by: null
+  });
+  if (guestErr) {
+    jsonResponse(res, 500, {
+      success: false,
+      error: guestErr.message
+    }, corsHeaders);
+    return true;
+  }
+  if (guestResult?.success && approval[0].run_id) {
+    try {
+      await executeInlineChain(guestSupabase, approval[0].run_id);
+    } catch (err) {
+      log.error({
+        err: err.message,
+        runId: approval[0].run_id
+      }, "inline chain failed after guest approval");
+    }
+  }
+  res.writeHead(200, {
+    "Content-Type": "text/html",
+    ...corsHeaders
+  });
+  res.end(`<!DOCTYPE html><html><body style="font-family:system-ui;text-align:center;padding:40px">
+    <h2>${isApprove ? "Approved" : "Rejected"}</h2>
+    <p>Your response has been recorded. You can close this window.</p>
+  </body></html>`);
+  return true;
+}
+
+// ============================================================================
+// POST /approvals/:id/respond — Authenticated approval response
+// ============================================================================
+
+export async function handleApprovalRespond(req, res, ctx) {
+  const {
+    pathname,
+    corsHeaders
+  } = ctx;
+  const approvalMatch = pathname.match(/^\/approvals\/([a-f0-9-]+)\/respond$/);
+  if (!approvalMatch || req.method !== "POST") return false;
+  const approvalId = approvalMatch[1];
+  const token = getToken(req);
+  const isInternal = isInternalAuth(token);
+  if (!isInternal && !token) {
+    jsonResponse(res, 401, {
+      error: "Missing authorization"
+    }, corsHeaders);
+    return true;
+  }
+  const supabase = getServiceClient();
+  let userId = null;
+  if (!isInternal) {
+    const {
+      data: {
+        user: authUser
+      },
+      error: authError
+    } = await supabase.auth.getUser(token);
+    if (authError || !authUser) {
+      jsonResponse(res, 401, {
+        error: "Invalid or expired token"
+      }, corsHeaders);
+      return true;
+    }
+    userId = authUser.id;
+  }
+  let rawBody;
+  try {
+    rawBody = await readBody(req);
+  } catch {
+    jsonResponse(res, 413, {
+      error: "Request body too large"
+    }, corsHeaders);
+    return true;
+  }
+  let body;
+  try {
+    body = JSON.parse(rawBody);
+  } catch {
+    jsonResponse(res, 400, {
+      error: "Invalid JSON"
+    }, corsHeaders);
+    return true;
+  }
+  if (!body.status) {
+    jsonResponse(res, 400, {
+      error: "status required (approved/rejected)"
+    }, corsHeaders);
+    return true;
+  }
+
+  // Get store_id from approval
+  const {
+    data: approval
+  } = await supabase.from("workflow_approval_requests").select("store_id, run_id").eq("id", approvalId).single();
+  if (!approval) {
+    jsonResponse(res, 404, {
+      error: "Approval not found"
+    }, corsHeaders);
+    return true;
+  }
+
+  // P1 FIX: Verify user has access to the approval's store
+  if (!isInternal && userId) {
+    const {
+      data: approvalMembership
+    } = await supabase.from("store_members").select("id").eq("store_id", approval.store_id).eq("user_id", userId).single();
+    if (!approvalMembership) {
+      jsonResponse(res, 403, {
+        error: "Not authorized to respond to this approval"
+      }, corsHeaders);
+      return true;
+    }
+  }
+  const {
+    data: result,
+    error
+  } = await supabase.rpc("respond_to_approval", {
+    p_approval_id: approvalId,
+    p_store_id: approval.store_id,
+    p_response: body.status,
+    p_response_data: body.response_data || {},
+    p_responded_by: userId || body.responded_by || null
+  });
+  if (error) {
+    jsonResponse(res, 500, {
+      success: false,
+      error: error.message
+    }, corsHeaders);
+    return true;
+  }
+
+  // Inline resume — execute next step immediately
+  if (result?.success && approval.run_id) {
+    try {
+      await executeInlineChain(supabase, approval.run_id);
+    } catch (err) {
+      log.error({
+        err: err.message
+      }, "inline chain failed after approval");
+    }
+  }
+  jsonResponse(res, result?.success ? 200 : 422, result, corsHeaders);
+  return true;
+}
+//# sourceMappingURL=server-routes-approvals.js.map