whale-code 6.5.5 → 6.5.7

package/dist/server/server-store-circuit-breaker.d.ts

@@ -0,0 +1,32 @@
+type BreakerState = "closed" | "open" | "half_open";
+export interface StoreBreakerCheckResult {
+    allowed: boolean;
+    state: BreakerState;
+    error?: string;
+}
+/**
+ * Check if a store's circuit breaker allows a new request.
+ * - closed: always allowed
+ * - open: blocked until cooldown expires, then transitions to half_open
+ * - half_open: allows exactly one probe request
+ */
+export declare function checkStoreCircuitBreaker(storeId: string): StoreBreakerCheckResult;
+/**
+ * Record a request outcome for a store.
+ * On success: resets the breaker to closed.
+ * On failure: adds to the sliding window; trips if threshold exceeded.
+ */
+export declare function recordStoreOutcome(storeId: string, success: boolean): void;
+/**
+ * Get the current breaker state for a store (for health/debug endpoints).
+ */
+export declare function getStoreBreakerState(storeId: string): BreakerState;
+/**
+ * Get summary stats for all breakers (for /health endpoint).
+ */
+export declare function getCircuitBreakerStats(): {
+    total: number;
+    open: number;
+    halfOpen: number;
+};
+export {};

package/dist/server/server-store-circuit-breaker.js

@@ -0,0 +1,211 @@
+// server/server-store-circuit-breaker.ts — Per-store circuit breaker
+// Prevents a misconfigured or abusive store from overwhelming the system.
+// In-memory sliding window: trips after FAILURE_THRESHOLD failures within WINDOW_MS.
+// Half-open state allows a single probe request after cooldown expires.
+
+import { createLogger } from "./lib/logger.js";
+import { queueSpan, auditRowToSpan } from "./lib/clickhouse-buffer.js";
+const log = createLogger("store-circuit-breaker");
+
+// ============================================================================
+// CONFIGURATION
+// ============================================================================
+
+const FAILURE_THRESHOLD = 5; // failures to trip the breaker
+const WINDOW_MS = 5 * 60_000; // 5-minute sliding window
+const COOLDOWN_MS = 2 * 60_000; // 2-minute cooldown before half-open
+const MAX_ENTRIES = 500; // cap Map size to prevent unbounded growth
+
+// ============================================================================
+// TYPES
+// ============================================================================
+
+// ============================================================================
+// STATE
+// ============================================================================
+
+const breakers = new Map();
+
+// Periodic cleanup of stale entries
+setInterval(() => {
+  const now = Date.now();
+  for (const [storeId, breaker] of breakers) {
+    // Remove entries with no recent failures and in closed state
+    if (breaker.state === "closed" && breaker.failures.length === 0 && now - breaker.lastAccessed > WINDOW_MS * 2) {
+      breakers.delete(storeId);
+    }
+    // Remove expired open breakers that have been idle
+    if (breaker.state === "open" && now - breaker.trippedAt > COOLDOWN_MS * 3) {
+      breakers.delete(storeId);
+    }
+  }
+}, 60_000);
+function evictOldest() {
+  if (breakers.size <= MAX_ENTRIES) return;
+  const entries = [...breakers.entries()].sort((a, b) => a[1].lastAccessed - b[1].lastAccessed);
+  const excess = breakers.size - MAX_ENTRIES;
+  for (let i = 0; i < excess; i++) {
+    breakers.delete(entries[i][0]);
+  }
+}
+function getOrCreate(storeId) {
+  let breaker = breakers.get(storeId);
+  if (!breaker) {
+    breaker = {
+      state: "closed",
+      failures: [],
+      trippedAt: 0,
+      lastAccessed: Date.now()
+    };
+    breakers.set(storeId, breaker);
+    evictOldest();
+  }
+  breaker.lastAccessed = Date.now();
+  return breaker;
+}
+
+/** Prune failures outside the sliding window */
+function pruneFailures(breaker) {
+  const cutoff = Date.now() - WINDOW_MS;
+  breaker.failures = breaker.failures.filter(ts => ts > cutoff);
+}
+
+// ============================================================================
+// PUBLIC API
+// ============================================================================
+
+/**
+ * Check if a store's circuit breaker allows a new request.
+ * - closed: always allowed
+ * - open: blocked until cooldown expires, then transitions to half_open
+ * - half_open: allows exactly one probe request
+ */
+export function checkStoreCircuitBreaker(storeId) {
+  const breaker = getOrCreate(storeId);
+  if (breaker.state === "closed") {
+    return {
+      allowed: true,
+      state: "closed"
+    };
+  }
+  if (breaker.state === "open") {
+    const elapsed = Date.now() - breaker.trippedAt;
+    if (elapsed < COOLDOWN_MS) {
+      const retryInSec = Math.ceil((COOLDOWN_MS - elapsed) / 1000);
+      return {
+        allowed: false,
+        state: "open",
+        error: `Store circuit breaker open due to repeated errors. Retry in ${retryInSec}s.`
+      };
+    }
+    // Cooldown expired — transition to half_open
+    breaker.state = "half_open";
+    log.info({
+      storeId
+    }, "store circuit breaker half_open (probe allowed)");
+    return {
+      allowed: true,
+      state: "half_open"
+    };
+  }
+
+  // half_open — allow the probe request
+  return {
+    allowed: true,
+    state: "half_open"
+  };
+}
+
+/**
+ * Record a request outcome for a store.
+ * On success: resets the breaker to closed.
+ * On failure: adds to the sliding window; trips if threshold exceeded.
+ */
+export function recordStoreOutcome(storeId, success) {
+  const breaker = getOrCreate(storeId);
+  if (success) {
+    if (breaker.state === "half_open") {
+      log.info({
+        storeId
+      }, "store circuit breaker closed (probe succeeded)");
+    }
+    breaker.state = "closed";
+    breaker.failures = [];
+    return;
+  }
+
+  // Failure
+  const now = Date.now();
+  breaker.failures.push(now);
+  pruneFailures(breaker);
+  if (breaker.state === "half_open") {
+    // Probe failed — trip again immediately
+    breaker.state = "open";
+    breaker.trippedAt = now;
+    log.warn({
+      storeId
+    }, "store circuit breaker re-tripped (probe failed)");
+    emitTelemetry(storeId, breaker.failures.length);
+    return;
+  }
+  if (breaker.failures.length >= FAILURE_THRESHOLD) {
+    breaker.state = "open";
+    breaker.trippedAt = now;
+    log.warn({
+      storeId,
+      failures: breaker.failures.length
+    }, "store circuit breaker tripped");
+    emitTelemetry(storeId, breaker.failures.length);
+  }
+}
+
+/**
+ * Get the current breaker state for a store (for health/debug endpoints).
+ */
+export function getStoreBreakerState(storeId) {
+  const breaker = breakers.get(storeId);
+  return breaker?.state || "closed";
+}
+
+/**
+ * Get summary stats for all breakers (for /health endpoint).
+ */
+export function getCircuitBreakerStats() {
+  let open = 0;
+  let halfOpen = 0;
+  for (const breaker of breakers.values()) {
+    if (breaker.state === "open") open++;
+    if (breaker.state === "half_open") halfOpen++;
+  }
+  return {
+    total: breakers.size,
+    open,
+    halfOpen
+  };
+}
+
+// ============================================================================
+// TELEMETRY
+// ============================================================================
+
+function emitTelemetry(storeId, failureCount) {
+  queueSpan(auditRowToSpan({
+    action: "store.circuit_breaker.tripped",
+    severity: "warning",
+    store_id: storeId,
+    resource_type: "store",
+    resource_id: storeId,
+    source: "agent-server",
+    service_name: "agent-server",
+    span_kind: "INTERNAL",
+    status_code: "OK",
+    start_time: new Date().toISOString(),
+    end_time: new Date().toISOString(),
+    details: {
+      failures: failureCount,
+      threshold: FAILURE_THRESHOLD,
+      window_ms: WINDOW_MS
+    }
+  }));
+}
+//# sourceMappingURL=server-store-circuit-breaker.js.map

package/dist/server/server-store-circuit-breaker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-store-circuit-breaker.js","names":["createLogger","queueSpan","auditRowToSpan","log","FAILURE_THRESHOLD","WINDOW_MS","COOLDOWN_MS","MAX_ENTRIES","breakers","Map","setInterval","now","Date","storeId","breaker","state","failures","length","lastAccessed","delete","trippedAt","evictOldest","size","entries","sort","a","b","excess","i","getOrCreate","get","set","pruneFailures","cutoff","filter","ts","checkStoreCircuitBreaker","allowed","elapsed","retryInSec","Math","ceil","error","info","recordStoreOutcome","success","push","warn","emitTelemetry","getStoreBreakerState","getCircuitBreakerStats","open","halfOpen","values","total","failureCount","action","severity","store_id","resource_type","resource_id","source","service_name","span_kind","status_code","start_time","toISOString","end_time","details","threshold","window_ms"],"sources":["../../src/server/server-store-circuit-breaker.ts"],"sourcesContent":["// server/server-store-circuit-breaker.ts — Per-store circuit breaker\n// Prevents a misconfigured or abusive store from overwhelming the system.\n// In-memory sliding window: trips after FAILURE_THRESHOLD failures within WINDOW_MS.\n// Half-open state allows a single probe request after cooldown expires.\n\nimport { createLogger } from \"./lib/logger.js\";\nimport { queueSpan, auditRowToSpan } from \"./lib/clickhouse-buffer.js\";\n\nconst log = createLogger(\"store-circuit-breaker\");\n\n// ============================================================================\n// CONFIGURATION\n// ============================================================================\n\nconst FAILURE_THRESHOLD = 5;       // failures to trip the breaker\nconst WINDOW_MS = 5 * 60_000;     // 5-minute sliding window\nconst COOLDOWN_MS = 2 * 60_000;   // 2-minute cooldown before half-open\nconst MAX_ENTRIES = 500;           // cap Map size to prevent unbounded growth\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\ntype BreakerState = \"closed\" | \"open\" | \"half_open\";\n\ninterface StoreBreaker {\n  state: BreakerState;\n  /** Timestamps of failures within the sliding window */\n  failures: number[];\n  /** When the breaker tripped (only set when state=open) */\n  trippedAt: number;\n  /** Last time this entry was accessed (for eviction) */\n  lastAccessed: number;\n}\n\nexport interface StoreBreakerCheckResult {\n  allowed: boolean;\n  state: BreakerState;\n  error?: string;\n}\n\n// ============================================================================\n// STATE\n// ============================================================================\n\nconst breakers = new Map<string, StoreBreaker>();\n\n// Periodic cleanup of stale entries\nsetInterval(() => {\n  const now = Date.now();\n  for (const [storeId, breaker] of breakers) {\n    // Remove entries with no recent failures and in closed state\n    if (breaker.state === \"closed\" && breaker.failures.length === 0 && now - breaker.lastAccessed > WINDOW_MS * 2) {\n      breakers.delete(storeId);\n    }\n    // Remove expired open breakers that have been idle\n    if (breaker.state === \"open\" && now - breaker.trippedAt > COOLDOWN_MS * 3) {\n      breakers.delete(storeId);\n    }\n  }\n}, 60_000);\n\nfunction evictOldest(): void {\n  if (breakers.size <= MAX_ENTRIES) return;\n  const entries = [...breakers.entries()].sort((a, b) => a[1].lastAccessed - b[1].lastAccessed);\n  const excess = breakers.size - MAX_ENTRIES;\n  for (let i = 0; i < excess; i++) {\n    breakers.delete(entries[i][0]);\n  }\n}\n\nfunction getOrCreate(storeId: string): StoreBreaker {\n  let breaker = breakers.get(storeId);\n  if (!breaker) {\n    breaker = { state: \"closed\", failures: [], trippedAt: 0, lastAccessed: Date.now() };\n    breakers.set(storeId, breaker);\n    evictOldest();\n  }\n  breaker.lastAccessed = Date.now();\n  return breaker;\n}\n\n/** Prune failures outside the sliding window */\nfunction pruneFailures(breaker: StoreBreaker): void {\n  const cutoff = Date.now() - WINDOW_MS;\n  breaker.failures = breaker.failures.filter(ts => ts > cutoff);\n}\n\n// ============================================================================\n// PUBLIC API\n// ============================================================================\n\n/**\n * Check if a store's circuit breaker allows a new request.\n * - closed: always allowed\n * - open: blocked until cooldown expires, then transitions to half_open\n * - half_open: allows exactly one probe request\n */\nexport function checkStoreCircuitBreaker(storeId: string): StoreBreakerCheckResult {\n  const breaker = getOrCreate(storeId);\n\n  if (breaker.state === \"closed\") {\n    return { allowed: true, state: \"closed\" };\n  }\n\n  if (breaker.state === \"open\") {\n    const elapsed = Date.now() - breaker.trippedAt;\n    if (elapsed < COOLDOWN_MS) {\n      const retryInSec = Math.ceil((COOLDOWN_MS - elapsed) / 1000);\n      return {\n        allowed: false,\n        state: \"open\",\n        error: `Store circuit breaker open due to repeated errors. Retry in ${retryInSec}s.`,\n      };\n    }\n    // Cooldown expired — transition to half_open\n    breaker.state = \"half_open\";\n    log.info({ storeId }, \"store circuit breaker half_open (probe allowed)\");\n    return { allowed: true, state: \"half_open\" };\n  }\n\n  // half_open — allow the probe request\n  return { allowed: true, state: \"half_open\" };\n}\n\n/**\n * Record a request outcome for a store.\n * On success: resets the breaker to closed.\n * On failure: adds to the sliding window; trips if threshold exceeded.\n */\nexport function recordStoreOutcome(storeId: string, success: boolean): void {\n  const breaker = getOrCreate(storeId);\n\n  if (success) {\n    if (breaker.state === \"half_open\") {\n      log.info({ storeId }, \"store circuit breaker closed (probe succeeded)\");\n    }\n    breaker.state = \"closed\";\n    breaker.failures = [];\n    return;\n  }\n\n  // Failure\n  const now = Date.now();\n  breaker.failures.push(now);\n  pruneFailures(breaker);\n\n  if (breaker.state === \"half_open\") {\n    // Probe failed — trip again immediately\n    breaker.state = \"open\";\n    breaker.trippedAt = now;\n    log.warn({ storeId }, \"store circuit breaker re-tripped (probe failed)\");\n    emitTelemetry(storeId, breaker.failures.length);\n    return;\n  }\n\n  if (breaker.failures.length >= FAILURE_THRESHOLD) {\n    breaker.state = \"open\";\n    breaker.trippedAt = now;\n    log.warn({ storeId, failures: breaker.failures.length }, \"store circuit breaker tripped\");\n    emitTelemetry(storeId, breaker.failures.length);\n  }\n}\n\n/**\n * Get the current breaker state for a store (for health/debug endpoints).\n */\nexport function getStoreBreakerState(storeId: string): BreakerState {\n  const breaker = breakers.get(storeId);\n  return breaker?.state || \"closed\";\n}\n\n/**\n * Get summary stats for all breakers (for /health endpoint).\n */\nexport function getCircuitBreakerStats(): { total: number; open: number; halfOpen: number } {\n  let open = 0;\n  let halfOpen = 0;\n  for (const breaker of breakers.values()) {\n    if (breaker.state === \"open\") open++;\n    if (breaker.state === \"half_open\") halfOpen++;\n  }\n  return { total: breakers.size, open, halfOpen };\n}\n\n// ============================================================================\n// TELEMETRY\n// ============================================================================\n\nfunction emitTelemetry(storeId: string, failureCount: number): void {\n  queueSpan(auditRowToSpan({\n    action: \"store.circuit_breaker.tripped\",\n    severity: \"warning\",\n    store_id: storeId,\n    resource_type: \"store\",\n    resource_id: storeId,\n    source: \"agent-server\",\n    service_name: \"agent-server\",\n    span_kind: \"INTERNAL\",\n    status_code: \"OK\",\n    start_time: new Date().toISOString(),\n    end_time: new Date().toISOString(),\n    details: { failures: failureCount, threshold: FAILURE_THRESHOLD, window_ms: WINDOW_MS },\n  }));\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,SAAS,EAAEC,cAAc,QAAQ,4BAA4B;AAEtE,MAAMC,GAAG,GAAGH,YAAY,CAAC,uBAAuB,CAAC;;AAEjD;AACA;AACA;;AAEA,MAAMI,iBAAiB,GAAG,CAAC,CAAC,CAAO;AACnC,MAAMC,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,CAAK;AAClC,MAAMC,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC,CAAG;AAClC,MAAMC,WAAW,GAAG,GAAG,CAAC,CAAW;;AAEnC;AACA;AACA;;AAoBA;AACA;AACA;;AAEA,MAAMC,QAAQ,GAAG,IAAIC,GAAG,CAAuB,CAAC;;AAEhD;AACAC,WAAW,CAAC,MAAM;EAChB,MAAMC,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;EACtB,KAAK,MAAM,CAACE,OAAO,EAAEC,OAAO,CAAC,IAAIN,QAAQ,EAAE;IACzC;IACA,IAAIM,OAAO,CAACC,KAAK,KAAK,QAAQ,IAAID,OAAO,CAACE,QAAQ,CAACC,MAAM,KAAK,CAAC,IAAIN,GAAG,GAAGG,OAAO,CAACI,YAAY,GAAGb,SAAS,GAAG,CAAC,EAAE;MAC7GG,QAAQ,CAACW,MAAM,CAACN,OAAO,CAAC;IAC1B;IACA;IACA,IAAIC,OAAO,CAACC,KAAK,KAAK,MAAM,IAAIJ,GAAG,GAAGG,OAAO,CAACM,SAAS,GAAGd,WAAW,GAAG,CAAC,EAAE;MACzEE,QAAQ,CAACW,MAAM,CAACN,OAAO,CAAC;IAC1B;EACF;AACF,CAAC,EAAE,MAAM,CAAC;AAEV,SAASQ,WAAWA,CAAA,EAAS;EAC3B,IAAIb,QAAQ,CAACc,IAAI,IAAIf,WAAW,EAAE;EAClC,MAAMgB,OAAO,GAAG,CAAC,GAAGf,QAAQ,CAACe,OAAO,CAAC,CAAC,CAAC,CAACC,IAAI,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAKD,CAAC,CAAC,CAAC,CAAC,CAACP,YAAY,GAAGQ,CAAC,CAAC,CAAC,CAAC,CAACR,YAAY,CAAC;EAC7F,MAAMS,MAAM,GAAGnB,QAAQ,CAACc,IAAI,GAAGf,WAAW;EAC1C,KAAK,IAAIqB,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGD,MAAM,EAAEC,CAAC,EAAE,EAAE;IAC/BpB,QAAQ,CAACW,MAAM,CAACI,OAAO,CAACK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;EAChC;AACF;AAEA,SAASC,WAAWA,CAAChB,OAAe,EAAgB;EAClD,IAAIC,OAAO,GAAGN,QAAQ,CAACsB,GAAG,CAACjB,OAAO,CAAC;EACnC,IAAI,CAACC,OAAO,EAAE;IACZA,OAAO,GAAG;MAAEC,KAAK,EAAE,QAAQ;MAAEC,QAAQ,EAAE,EAAE;MAAEI,SAAS,EAAE,CAAC;MAAEF,YAAY,EAAEN,IAAI,CAACD,GAAG,CAAC;IAAE,CAAC;IACnFH,QAAQ,CAACuB,GAAG,CAAClB,OAAO,EAAEC,OAAO,CAAC;IAC9BO,WAAW,CAAC,CAAC;EACf;EACAP,OAAO,CAACI,YAAY,GAAGN,IAAI,CAACD,GAAG,CAAC,CAAC;EACjC,OAAOG,OAAO;AAChB;;AAEA;AACA,SAASkB,aAAaA,CAAClB,OAAqB,EAAQ;EAClD,MAAMmB,MAAM,GAAGrB,IAAI,CAACD,GAAG,CAAC,CAAC,GAAGN,SAAS;EACrCS,OAAO,CAACE,QAAQ,GAAGF,OAAO,CAACE,QAAQ,CAACkB,MAAM,CAACC,EAAE,IAAIA,EAAE,GAAGF,MAAM,CAAC;AAC/D;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASG,wBAAwBA,CAACvB,OAAe,EAA2B;EACjF,MAAMC,OAAO,GAAGe,WAAW,CAAChB,OAAO,CAAC;EAEpC,IAAIC,OAAO,CAACC,KAAK,KAAK,QAAQ,EAAE;IAC9B,OAAO;MAAEsB,OAAO,EAAE,IAAI;MAAEtB,KAAK,EAAE;IAAS,CAAC;EAC3C;EAEA,IAAID,OAAO,CAACC,KAAK,KAAK,MAAM,EAAE;IAC5B,MAAMuB,OAAO,GAAG1B,IAAI,CAACD,GAAG,CAAC,CAAC,GAAGG,OAAO,CAACM,SAAS;IAC9C,IAAIkB,OAAO,GAAGhC,WAAW,EAAE;MACzB,MAAMiC,UAAU,GAAGC,IAAI,CAACC,IAAI,CAAC,CAACnC,WAAW,GAAGgC,OAAO,IAAI,IAAI,CAAC;MAC5D,OAAO;QACLD,OAAO,EAAE,KAAK;QACdtB,KAAK,EAAE,MAAM;QACb2B,KAAK,EAAE,+DAA+DH,UAAU;MAClF,CAAC;IACH;IACA;IACAzB,OAAO,CAACC,KAAK,GAAG,WAAW;IAC3BZ,GAAG,CAACwC,IAAI,CAAC;MAAE9B;IAAQ,CAAC,EAAE,iDAAiD,CAAC;IACxE,OAAO;MAAEwB,OAAO,EAAE,IAAI;MAAEtB,KAAK,EAAE;IAAY,CAAC;EAC9C;;EAEA;EACA,OAAO;IAAEsB,OAAO,EAAE,IAAI;IAAEtB,KAAK,EAAE;EAAY,CAAC;AAC9C;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS6B,kBAAkBA,CAAC/B,OAAe,EAAEgC,OAAgB,EAAQ;EAC1E,MAAM/B,OAAO,GAAGe,WAAW,CAAChB,OAAO,CAAC;EAEpC,IAAIgC,OAAO,EAAE;IACX,IAAI/B,OAAO,CAACC,KAAK,KAAK,WAAW,EAAE;MACjCZ,GAAG,CAACwC,IAAI,CAAC;QAAE9B;MAAQ,CAAC,EAAE,gDAAgD,CAAC;IACzE;IACAC,OAAO,CAACC,KAAK,GAAG,QAAQ;IACxBD,OAAO,CAACE,QAAQ,GAAG,EAAE;IACrB;EACF;;EAEA;EACA,MAAML,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;EACtBG,OAAO,CAACE,QAAQ,CAAC8B,IAAI,CAACnC,GAAG,CAAC;EAC1BqB,aAAa,CAAClB,OAAO,CAAC;EAEtB,IAAIA,OAAO,CAACC,KAAK,KAAK,WAAW,EAAE;IACjC;IACAD,OAAO,CAACC,KAAK,GAAG,MAAM;IACtBD,OAAO,CAACM,SAAS,GAAGT,GAAG;IACvBR,GAAG,CAAC4C,IAAI,CAAC;MAAElC;IAAQ,CAAC,EAAE,iDAAiD,CAAC;IACxEmC,aAAa,CAACnC,OAAO,EAAEC,OAAO,CAACE,QAAQ,CAACC,MAAM,CAAC;IAC/C;EACF;EAEA,IAAIH,OAAO,CAACE,QAAQ,CAACC,MAAM,IAAIb,iBAAiB,EAAE;IAChDU,OAAO,CAACC,KAAK,GAAG,MAAM;IACtBD,OAAO,CAACM,SAAS,GAAGT,GAAG;IACvBR,GAAG,CAAC4C,IAAI,CAAC;MAAElC,OAAO;MAAEG,QAAQ,EAAEF,OAAO,CAACE,QAAQ,CAACC;IAAO,CAAC,EAAE,+BAA+B,CAAC;IACzF+B,aAAa,CAACnC,OAAO,EAAEC,OAAO,CAACE,QAAQ,CAACC,MAAM,CAAC;EACjD;AACF;;AAEA;AACA;AACA;AACA,OAAO,SAASgC,oBAAoBA,CAACpC,OAAe,EAAgB;EAClE,MAAMC,OAAO,GAAGN,QAAQ,CAACsB,GAAG,CAACjB,OAAO,CAAC;EACrC,OAAOC,OAAO,EAAEC,KAAK,IAAI,QAAQ;AACnC;;AAEA;AACA;AACA;AACA,OAAO,SAASmC,sBAAsBA,CAAA,EAAsD;EAC1F,IAAIC,IAAI,GAAG,CAAC;EACZ,IAAIC,QAAQ,GAAG,CAAC;EAChB,KAAK,MAAMtC,OAAO,IAAIN,QAAQ,CAAC6C,MAAM,CAAC,CAAC,EAAE;IACvC,IAAIvC,OAAO,CAACC,KAAK,KAAK,MAAM,EAAEoC,IAAI,EAAE;IACpC,IAAIrC,OAAO,CAACC,KAAK,KAAK,WAAW,EAAEqC,QAAQ,EAAE;EAC/C;EACA,OAAO;IAAEE,KAAK,EAAE9C,QAAQ,CAACc,IAAI;IAAE6B,IAAI;IAAEC;EAAS,CAAC;AACjD;;AAEA;AACA;AACA;;AAEA,SAASJ,aAAaA,CAACnC,OAAe,EAAE0C,YAAoB,EAAQ;EAClEtD,SAAS,CAACC,cAAc,CAAC;IACvBsD,MAAM,EAAE,+BAA+B;IACvCC,QAAQ,EAAE,SAAS;IACnBC,QAAQ,EAAE7C,OAAO;IACjB8C,aAAa,EAAE,OAAO;IACtBC,WAAW,EAAE/C,OAAO;IACpBgD,MAAM,EAAE,cAAc;IACtBC,YAAY,EAAE,cAAc;IAC5BC,SAAS,EAAE,UAAU;IACrBC,WAAW,EAAE,IAAI;IACjBC,UAAU,EAAE,IAAIrD,IAAI,CAAC,CAAC,CAACsD,WAAW,CAAC,CAAC;IACpCC,QAAQ,EAAE,IAAIvD,IAAI,CAAC,CAAC,CAACsD,WAAW,CAAC,CAAC;IAClCE,OAAO,EAAE;MAAEpD,QAAQ,EAAEuC,YAAY;MAAEc,SAAS,EAAEjE,iBAAiB;MAAEkE,SAAS,EAAEjE;IAAU;EACxF,CAAC,CAAC,CAAC;AACL","ignoreList":[]}

package/dist/server/server-store.d.ts

@@ -0,0 +1,5 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export declare function resolveAndValidateStoreId(supabase: SupabaseClient, clientStoreId: string | undefined, user: {
+    id: string;
+    email?: string;
+} | null, isServiceRole: boolean, _token?: string, requestUserId?: string | null): Promise<string | null>;

package/dist/server/server-store.js

@@ -0,0 +1,71 @@
+// server/server-store.ts — Store context resolution for the agent server
+// Extracted from index.ts for modularity.
+
+import { createLogger } from "./lib/logger.js";
+const log = createLogger("server-store");
+
+// ============================================================================
+// STORE CONTEXT — Server-derived store resolution (Apple-style)
+// The server NEVER blindly trusts a client-supplied storeId. Instead it:
+//   1. Resolves the user's stores from the `users` table via auth.uid()
+//   2. Validates the client hint against the resolved set
+//   3. Falls back to the user's first store if no hint provided
+//   4. Returns null if no store can be resolved (caller must fail closed)
+// ============================================================================
+
+export async function resolveAndValidateStoreId(supabase, clientStoreId, user, isServiceRole, _token, requestUserId) {
+  // Service-role callers: trusted ONLY for internal server-to-server calls
+  if (isServiceRole) {
+    const srUserId = user?.id || requestUserId;
+    if (!srUserId) return clientStoreId || null;
+    if (!clientStoreId) return null;
+    const {
+      data: membership
+    } = await supabase.from("store_members").select("id").eq("store_id", clientStoreId).eq("user_id", srUserId).limit(1).maybeSingle();
+    if (membership) return clientStoreId;
+
+    // Fallback: check users table (legacy single-store pattern)
+    const {
+      data: userRow
+    } = await supabase.from("users").select("store_id").eq("auth_user_id", srUserId).eq("store_id", clientStoreId).maybeSingle();
+    if (userRow) return clientStoreId;
+    log.warn({
+      userId: srUserId,
+      clientStoreId
+    }, "resolveStoreId: service-role caller userId not authorized for store");
+    return null;
+  }
+  if (!user?.id) return null;
+  const {
+    data: userStores,
+    error
+  } = await supabase.from("users").select("store_id").eq("auth_user_id", user.id).not("store_id", "is", null);
+  if (error || !userStores?.length) {
+    log.warn({
+      userId: user.id,
+      error
+    }, "resolveStoreId: user has no stores");
+    return null;
+  }
+  const storeIds = userStores.map(r => r.store_id);
+  if (clientStoreId) {
+    if (storeIds.includes(clientStoreId)) {
+      return clientStoreId;
+    }
+    log.warn({
+      userId: user.id,
+      clientStoreId,
+      userStores: storeIds
+    }, "resolveStoreId: client storeId not in user's stores");
+    return null;
+  }
+  if (storeIds.length === 1) {
+    return storeIds[0];
+  }
+  log.warn({
+    userId: user.id,
+    storeCount: storeIds.length
+  }, "resolveStoreId: multi-store user must specify storeId");
+  return null;
+}
+//# sourceMappingURL=server-store.js.map

package/dist/server/server-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-store.js","names":["createLogger","log","resolveAndValidateStoreId","supabase","clientStoreId","user","isServiceRole","_token","requestUserId","srUserId","id","data","membership","from","select","eq","limit","maybeSingle","userRow","warn","userId","userStores","error","not","length","storeIds","map","r","store_id","includes","storeCount"],"sources":["../../src/server/server-store.ts"],"sourcesContent":["// server/server-store.ts — Store context resolution for the agent server\n// Extracted from index.ts for modularity.\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createLogger } from \"./lib/logger.js\";\n\nconst log = createLogger(\"server-store\");\n\n// ============================================================================\n// STORE CONTEXT — Server-derived store resolution (Apple-style)\n// The server NEVER blindly trusts a client-supplied storeId. Instead it:\n//   1. Resolves the user's stores from the `users` table via auth.uid()\n//   2. Validates the client hint against the resolved set\n//   3. Falls back to the user's first store if no hint provided\n//   4. Returns null if no store can be resolved (caller must fail closed)\n// ============================================================================\n\nexport async function resolveAndValidateStoreId(\n  supabase: SupabaseClient,\n  clientStoreId: string | undefined,\n  user: { id: string; email?: string } | null,\n  isServiceRole: boolean,\n  _token?: string,\n  requestUserId?: string | null,\n): Promise<string | null> {\n  // Service-role callers: trusted ONLY for internal server-to-server calls\n  if (isServiceRole) {\n    const srUserId = user?.id || requestUserId;\n    if (!srUserId) return clientStoreId || null;\n    if (!clientStoreId) return null;\n\n    const { data: membership } = await supabase\n      .from(\"store_members\")\n      .select(\"id\")\n      .eq(\"store_id\", clientStoreId)\n      .eq(\"user_id\", srUserId)\n      .limit(1)\n      .maybeSingle();\n\n    if (membership) return clientStoreId;\n\n    // Fallback: check users table (legacy single-store pattern)\n    const { data: userRow } = await supabase\n      .from(\"users\")\n      .select(\"store_id\")\n      .eq(\"auth_user_id\", srUserId)\n      .eq(\"store_id\", clientStoreId)\n      .maybeSingle();\n\n    if (userRow) return clientStoreId;\n\n    log.warn({ userId: srUserId, clientStoreId }, \"resolveStoreId: service-role caller userId not authorized for store\");\n    return null;\n  }\n\n  if (!user?.id) return null;\n\n  const { data: userStores, error } = await supabase\n    .from(\"users\")\n    .select(\"store_id\")\n    .eq(\"auth_user_id\", user.id)\n    .not(\"store_id\", \"is\", null);\n\n  if (error || !userStores?.length) {\n    log.warn({ userId: user.id, error }, \"resolveStoreId: user has no stores\");\n    return null;\n  }\n\n  const storeIds = userStores.map((r: { store_id: string }) => r.store_id);\n\n  if (clientStoreId) {\n    if (storeIds.includes(clientStoreId)) {\n      return clientStoreId;\n    }\n    log.warn({ userId: user.id, clientStoreId, userStores: storeIds }, \"resolveStoreId: client storeId not in user's stores\");\n    return null;\n  }\n\n  if (storeIds.length === 1) {\n    return storeIds[0];\n  }\n\n  log.warn({ userId: user.id, storeCount: storeIds.length }, \"resolveStoreId: multi-store user must specify storeId\");\n  return null;\n}\n"],"mappings":"AAAA;AACA;;AAGA,SAASA,YAAY,QAAQ,iBAAiB;AAE9C,MAAMC,GAAG,GAAGD,YAAY,CAAC,cAAc,CAAC;;AAExC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAO,eAAeE,yBAAyBA,CAC7CC,QAAwB,EACxBC,aAAiC,EACjCC,IAA2C,EAC3CC,aAAsB,EACtBC,MAAe,EACfC,aAA6B,EACL;EACxB;EACA,IAAIF,aAAa,EAAE;IACjB,MAAMG,QAAQ,GAAGJ,IAAI,EAAEK,EAAE,IAAIF,aAAa;IAC1C,IAAI,CAACC,QAAQ,EAAE,OAAOL,aAAa,IAAI,IAAI;IAC3C,IAAI,CAACA,aAAa,EAAE,OAAO,IAAI;IAE/B,MAAM;MAAEO,IAAI,EAAEC;IAAW,CAAC,GAAG,MAAMT,QAAQ,CACxCU,IAAI,CAAC,eAAe,CAAC,CACrBC,MAAM,CAAC,IAAI,CAAC,CACZC,EAAE,CAAC,UAAU,EAAEX,aAAa,CAAC,CAC7BW,EAAE,CAAC,SAAS,EAAEN,QAAQ,CAAC,CACvBO,KAAK,CAAC,CAAC,CAAC,CACRC,WAAW,CAAC,CAAC;IAEhB,IAAIL,UAAU,EAAE,OAAOR,aAAa;;IAEpC;IACA,MAAM;MAAEO,IAAI,EAAEO;IAAQ,CAAC,GAAG,MAAMf,QAAQ,CACrCU,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,UAAU,CAAC,CAClBC,EAAE,CAAC,cAAc,EAAEN,QAAQ,CAAC,CAC5BM,EAAE,CAAC,UAAU,EAAEX,aAAa,CAAC,CAC7Ba,WAAW,CAAC,CAAC;IAEhB,IAAIC,OAAO,EAAE,OAAOd,aAAa;IAEjCH,GAAG,CAACkB,IAAI,CAAC;MAAEC,MAAM,EAAEX,QAAQ;MAAEL;IAAc,CAAC,EAAE,qEAAqE,CAAC;IACpH,OAAO,IAAI;EACb;EAEA,IAAI,CAACC,IAAI,EAAEK,EAAE,EAAE,OAAO,IAAI;EAE1B,MAAM;IAAEC,IAAI,EAAEU,UAAU;IAAEC;EAAM,CAAC,GAAG,MAAMnB,QAAQ,CAC/CU,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,UAAU,CAAC,CAClBC,EAAE,CAAC,cAAc,EAAEV,IAAI,CAACK,EAAE,CAAC,CAC3Ba,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC;EAE9B,IAAID,KAAK,IAAI,CAACD,UAAU,EAAEG,MAAM,EAAE;IAChCvB,GAAG,CAACkB,IAAI,CAAC;MAAEC,MAAM,EAAEf,IAAI,CAACK,EAAE;MAAEY;IAAM,CAAC,EAAE,oCAAoC,CAAC;IAC1E,OAAO,IAAI;EACb;EAEA,MAAMG,QAAQ,GAAGJ,UAAU,CAACK,GAAG,CAAEC,CAAuB,IAAKA,CAAC,CAACC,QAAQ,CAAC;EAExE,IAAIxB,aAAa,EAAE;IACjB,IAAIqB,QAAQ,CAACI,QAAQ,CAACzB,aAAa,CAAC,EAAE;MACpC,OAAOA,aAAa;IACtB;IACAH,GAAG,CAACkB,IAAI,CAAC;MAAEC,MAAM,EAAEf,IAAI,CAACK,EAAE;MAAEN,aAAa;MAAEiB,UAAU,EAAEI;IAAS,CAAC,EAAE,qDAAqD,CAAC;IACzH,OAAO,IAAI;EACb;EAEA,IAAIA,QAAQ,CAACD,MAAM,KAAK,CAAC,EAAE;IACzB,OAAOC,QAAQ,CAAC,CAAC,CAAC;EACpB;EAEAxB,GAAG,CAACkB,IAAI,CAAC;IAAEC,MAAM,EAAEf,IAAI,CAACK,EAAE;IAAEoB,UAAU,EAAEL,QAAQ,CAACD;EAAO,CAAC,EAAE,uDAAuD,CAAC;EACnH,OAAO,IAAI;AACb","ignoreList":[]}

package/dist/server/server-trace.d.ts

@@ -0,0 +1,41 @@
+import http from "node:http";
+export interface TraceContext {
+    /** 32-char hex trace ID (128-bit) */
+    traceId: string;
+    /** 16-char hex span ID (64-bit) — the current span */
+    spanId: string;
+    /** W3C trace flags (currently just sampled bit) */
+    traceFlags: string;
+    /** The full traceparent header value */
+    traceparent: string;
+}
+/** Generate a 32-char hex trace ID (128-bit) */
+export declare function generateTraceId(): string;
+/** Generate a 16-char hex span ID (64-bit) */
+export declare function generateSpanId(): string;
+/**
+ * Build a W3C traceparent header value.
+ * Version is always "00" (current spec version).
+ * Trace flags: "01" = sampled (we always sample).
+ */
+export declare function buildTraceparent(traceId: string, spanId: string, flags?: string): string;
+/**
+ * Parse a W3C traceparent header. Returns null if invalid.
+ */
+export declare function parseTraceparent(header: string): TraceContext | null;
+/**
+ * Extract or create a trace context from an incoming HTTP request.
+ * If the request has a valid traceparent header, parse it and create a child span.
+ * Otherwise, generate a new trace context.
+ */
+export declare function extractOrCreateTrace(req: http.IncomingMessage): TraceContext;
+/**
+ * Create a child span context from a parent trace context.
+ * Used when making outgoing calls (tool executions, HTTP requests).
+ */
+export declare function createChildSpan(parent: TraceContext): TraceContext;
+/**
+ * Get headers to propagate trace context in outgoing HTTP requests.
+ * Returns an object with the traceparent header (and tracestate if needed).
+ */
+export declare function traceHeaders(parent: TraceContext): Record<string, string>;

package/dist/server/server-trace.js

@@ -0,0 +1,133 @@
+// server/server-trace.ts — W3C Trace Context propagation
+// Generates trace IDs at request ingress and propagates traceparent headers
+// through tool calls and outgoing HTTP requests.
+//
+// W3C Trace Context spec: https://www.w3.org/TR/trace-context/
+// Format: traceparent: {version}-{trace-id}-{parent-id}-{trace-flags}
+//         00-{32 hex}-{16 hex}-{2 hex}
+
+import { randomBytes } from "node:crypto";
+import { createLogger } from "./lib/logger.js";
+const log = createLogger("trace");
+
+// ============================================================================
+// TYPES
+// ============================================================================
+
+// ============================================================================
+// TRACE ID GENERATION
+// ============================================================================
+
+/** Generate a 32-char hex trace ID (128-bit) */
+export function generateTraceId() {
+  return randomBytes(16).toString("hex");
+}
+
+/** Generate a 16-char hex span ID (64-bit) */
+export function generateSpanId() {
+  return randomBytes(8).toString("hex");
+}
+
+/**
+ * Build a W3C traceparent header value.
+ * Version is always "00" (current spec version).
+ * Trace flags: "01" = sampled (we always sample).
+ */
+export function buildTraceparent(traceId, spanId, flags = "01") {
+  return `00-${traceId}-${spanId}-${flags}`;
+}
+
+// ============================================================================
+// TRACE CONTEXT EXTRACTION / CREATION
+// ============================================================================
+
+/**
+ * Parse a W3C traceparent header. Returns null if invalid.
+ */
+export function parseTraceparent(header) {
+  // Format: version-trace_id-parent_id-trace_flags
+  const parts = header.trim().split("-");
+  if (parts.length !== 4) return null;
+  const [version, traceId, spanId, traceFlags] = parts;
+
+  // Validate format
+  if (version !== "00") return null;
+  if (!/^[0-9a-f]{32}$/.test(traceId)) return null;
+  if (!/^[0-9a-f]{16}$/.test(spanId)) return null;
+  if (!/^[0-9a-f]{2}$/.test(traceFlags)) return null;
+
+  // All zeros is invalid per spec
+  if (traceId === "0".repeat(32)) return null;
+  if (spanId === "0".repeat(16)) return null;
+  return {
+    traceId,
+    spanId,
+    traceFlags,
+    traceparent: header.trim()
+  };
+}
+
+/**
+ * Extract or create a trace context from an incoming HTTP request.
+ * If the request has a valid traceparent header, parse it and create a child span.
+ * Otherwise, generate a new trace context.
+ */
+export function extractOrCreateTrace(req) {
+  const incoming = req.headers["traceparent"];
+  if (incoming) {
+    const parsed = parseTraceparent(incoming);
+    if (parsed) {
+      // Create a child span within the existing trace
+      const childSpanId = generateSpanId();
+      const traceparent = buildTraceparent(parsed.traceId, childSpanId, parsed.traceFlags);
+      return {
+        traceId: parsed.traceId,
+        spanId: childSpanId,
+        traceFlags: parsed.traceFlags,
+        traceparent
+      };
+    }
+    log.debug({
+      traceparent: incoming
+    }, "invalid traceparent header, generating new trace");
+  }
+
+  // No valid incoming trace — create a new one
+  const traceId = generateTraceId();
+  const spanId = generateSpanId();
+  const traceFlags = "01";
+  const traceparent = buildTraceparent(traceId, spanId, traceFlags);
+  return {
+    traceId,
+    spanId,
+    traceFlags,
+    traceparent
+  };
+}
+
+/**
+ * Create a child span context from a parent trace context.
+ * Used when making outgoing calls (tool executions, HTTP requests).
+ */
+export function createChildSpan(parent) {
+  const childSpanId = generateSpanId();
+  const traceparent = buildTraceparent(parent.traceId, childSpanId, parent.traceFlags);
+  return {
+    traceId: parent.traceId,
+    spanId: childSpanId,
+    traceFlags: parent.traceFlags,
+    traceparent
+  };
+}
+
+/**
+ * Get headers to propagate trace context in outgoing HTTP requests.
+ * Returns an object with the traceparent header (and tracestate if needed).
+ */
+export function traceHeaders(parent) {
+  const child = createChildSpan(parent);
+  return {
+    traceparent: child.traceparent
+  };
+}
+//# sourceMappingURL=server-trace.js.map

package/dist/server/server-trace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-trace.js","names":["randomBytes","createLogger","log","generateTraceId","toString","generateSpanId","buildTraceparent","traceId","spanId","flags","parseTraceparent","header","parts","trim","split","length","version","traceFlags","test","repeat","traceparent","extractOrCreateTrace","req","incoming","headers","parsed","childSpanId","debug","createChildSpan","parent","traceHeaders","child"],"sources":["../../src/server/server-trace.ts"],"sourcesContent":["// server/server-trace.ts — W3C Trace Context propagation\n// Generates trace IDs at request ingress and propagates traceparent headers\n// through tool calls and outgoing HTTP requests.\n//\n// W3C Trace Context spec: https://www.w3.org/TR/trace-context/\n// Format: traceparent: {version}-{trace-id}-{parent-id}-{trace-flags}\n//         00-{32 hex}-{16 hex}-{2 hex}\n\nimport { randomBytes } from \"node:crypto\";\nimport http from \"node:http\";\nimport { createLogger } from \"./lib/logger.js\";\n\nconst log = createLogger(\"trace\");\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface TraceContext {\n  /** 32-char hex trace ID (128-bit) */\n  traceId: string;\n  /** 16-char hex span ID (64-bit) — the current span */\n  spanId: string;\n  /** W3C trace flags (currently just sampled bit) */\n  traceFlags: string;\n  /** The full traceparent header value */\n  traceparent: string;\n}\n\n// ============================================================================\n// TRACE ID GENERATION\n// ============================================================================\n\n/** Generate a 32-char hex trace ID (128-bit) */\nexport function generateTraceId(): string {\n  return randomBytes(16).toString(\"hex\");\n}\n\n/** Generate a 16-char hex span ID (64-bit) */\nexport function generateSpanId(): string {\n  return randomBytes(8).toString(\"hex\");\n}\n\n/**\n * Build a W3C traceparent header value.\n * Version is always \"00\" (current spec version).\n * Trace flags: \"01\" = sampled (we always sample).\n */\nexport function buildTraceparent(traceId: string, spanId: string, flags = \"01\"): string {\n  return `00-${traceId}-${spanId}-${flags}`;\n}\n\n// ============================================================================\n// TRACE CONTEXT EXTRACTION / CREATION\n// ============================================================================\n\n/**\n * Parse a W3C traceparent header. Returns null if invalid.\n */\nexport function parseTraceparent(header: string): TraceContext | null {\n  // Format: version-trace_id-parent_id-trace_flags\n  const parts = header.trim().split(\"-\");\n  if (parts.length !== 4) return null;\n\n  const [version, traceId, spanId, traceFlags] = parts;\n\n  // Validate format\n  if (version !== \"00\") return null;\n  if (!/^[0-9a-f]{32}$/.test(traceId)) return null;\n  if (!/^[0-9a-f]{16}$/.test(spanId)) return null;\n  if (!/^[0-9a-f]{2}$/.test(traceFlags)) return null;\n\n  // All zeros is invalid per spec\n  if (traceId === \"0\".repeat(32)) return null;\n  if (spanId === \"0\".repeat(16)) return null;\n\n  return { traceId, spanId, traceFlags, traceparent: header.trim() };\n}\n\n/**\n * Extract or create a trace context from an incoming HTTP request.\n * If the request has a valid traceparent header, parse it and create a child span.\n * Otherwise, generate a new trace context.\n */\nexport function extractOrCreateTrace(req: http.IncomingMessage): TraceContext {\n  const incoming = req.headers[\"traceparent\"] as string | undefined;\n\n  if (incoming) {\n    const parsed = parseTraceparent(incoming);\n    if (parsed) {\n      // Create a child span within the existing trace\n      const childSpanId = generateSpanId();\n      const traceparent = buildTraceparent(parsed.traceId, childSpanId, parsed.traceFlags);\n      return { traceId: parsed.traceId, spanId: childSpanId, traceFlags: parsed.traceFlags, traceparent };\n    }\n    log.debug({ traceparent: incoming }, \"invalid traceparent header, generating new trace\");\n  }\n\n  // No valid incoming trace — create a new one\n  const traceId = generateTraceId();\n  const spanId = generateSpanId();\n  const traceFlags = \"01\";\n  const traceparent = buildTraceparent(traceId, spanId, traceFlags);\n  return { traceId, spanId, traceFlags, traceparent };\n}\n\n/**\n * Create a child span context from a parent trace context.\n * Used when making outgoing calls (tool executions, HTTP requests).\n */\nexport function createChildSpan(parent: TraceContext): TraceContext {\n  const childSpanId = generateSpanId();\n  const traceparent = buildTraceparent(parent.traceId, childSpanId, parent.traceFlags);\n  return { traceId: parent.traceId, spanId: childSpanId, traceFlags: parent.traceFlags, traceparent };\n}\n\n/**\n * Get headers to propagate trace context in outgoing HTTP requests.\n * Returns an object with the traceparent header (and tracestate if needed).\n */\nexport function traceHeaders(parent: TraceContext): Record<string, string> {\n  const child = createChildSpan(parent);\n  return { traceparent: child.traceparent };\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,WAAW,QAAQ,aAAa;AAEzC,SAASC,YAAY,QAAQ,iBAAiB;AAE9C,MAAMC,GAAG,GAAGD,YAAY,CAAC,OAAO,CAAC;;AAEjC;AACA;AACA;;AAaA;AACA;AACA;;AAEA;AACA,OAAO,SAASE,eAAeA,CAAA,EAAW;EACxC,OAAOH,WAAW,CAAC,EAAE,CAAC,CAACI,QAAQ,CAAC,KAAK,CAAC;AACxC;;AAEA;AACA,OAAO,SAASC,cAAcA,CAAA,EAAW;EACvC,OAAOL,WAAW,CAAC,CAAC,CAAC,CAACI,QAAQ,CAAC,KAAK,CAAC;AACvC;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASE,gBAAgBA,CAACC,OAAe,EAAEC,MAAc,EAAEC,KAAK,GAAG,IAAI,EAAU;EACtF,OAAO,MAAMF,OAAO,IAAIC,MAAM,IAAIC,KAAK,EAAE;AAC3C;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA,OAAO,SAASC,gBAAgBA,CAACC,MAAc,EAAuB;EACpE;EACA,MAAMC,KAAK,GAAGD,MAAM,CAACE,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,GAAG,CAAC;EACtC,IAAIF,KAAK,CAACG,MAAM,KAAK,CAAC,EAAE,OAAO,IAAI;EAEnC,MAAM,CAACC,OAAO,EAAET,OAAO,EAAEC,MAAM,EAAES,UAAU,CAAC,GAAGL,KAAK;;EAEpD;EACA,IAAII,OAAO,KAAK,IAAI,EAAE,OAAO,IAAI;EACjC,IAAI,CAAC,gBAAgB,CAACE,IAAI,CAACX,OAAO,CAAC,EAAE,OAAO,IAAI;EAChD,IAAI,CAAC,gBAAgB,CAACW,IAAI,CAACV,MAAM,CAAC,EAAE,OAAO,IAAI;EAC/C,IAAI,CAAC,eAAe,CAACU,IAAI,CAACD,UAAU,CAAC,EAAE,OAAO,IAAI;;EAElD;EACA,IAAIV,OAAO,KAAK,GAAG,CAACY,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,IAAI;EAC3C,IAAIX,MAAM,KAAK,GAAG,CAACW,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,IAAI;EAE1C,OAAO;IAAEZ,OAAO;IAAEC,MAAM;IAAES,UAAU;IAAEG,WAAW,EAAET,MAAM,CAACE,IAAI,CAAC;EAAE,CAAC;AACpE;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASQ,oBAAoBA,CAACC,GAAyB,EAAgB;EAC5E,MAAMC,QAAQ,GAAGD,GAAG,CAACE,OAAO,CAAC,aAAa,CAAuB;EAEjE,IAAID,QAAQ,EAAE;IACZ,MAAME,MAAM,GAAGf,gBAAgB,CAACa,QAAQ,CAAC;IACzC,IAAIE,MAAM,EAAE;MACV;MACA,MAAMC,WAAW,GAAGrB,cAAc,CAAC,CAAC;MACpC,MAAMe,WAAW,GAAGd,gBAAgB,CAACmB,MAAM,CAAClB,OAAO,EAAEmB,WAAW,EAAED,MAAM,CAACR,UAAU,CAAC;MACpF,OAAO;QAAEV,OAAO,EAAEkB,MAAM,CAAClB,OAAO;QAAEC,MAAM,EAAEkB,WAAW;QAAET,UAAU,EAAEQ,MAAM,CAACR,UAAU;QAAEG;MAAY,CAAC;IACrG;IACAlB,GAAG,CAACyB,KAAK,CAAC;MAAEP,WAAW,EAAEG;IAAS,CAAC,EAAE,kDAAkD,CAAC;EAC1F;;EAEA;EACA,MAAMhB,OAAO,GAAGJ,eAAe,CAAC,CAAC;EACjC,MAAMK,MAAM,GAAGH,cAAc,CAAC,CAAC;EAC/B,MAAMY,UAAU,GAAG,IAAI;EACvB,MAAMG,WAAW,GAAGd,gBAAgB,CAACC,OAAO,EAAEC,MAAM,EAAES,UAAU,CAAC;EACjE,OAAO;IAAEV,OAAO;IAAEC,MAAM;IAAES,UAAU;IAAEG;EAAY,CAAC;AACrD;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASQ,eAAeA,CAACC,MAAoB,EAAgB;EAClE,MAAMH,WAAW,GAAGrB,cAAc,CAAC,CAAC;EACpC,MAAMe,WAAW,GAAGd,gBAAgB,CAACuB,MAAM,CAACtB,OAAO,EAAEmB,WAAW,EAAEG,MAAM,CAACZ,UAAU,CAAC;EACpF,OAAO;IAAEV,OAAO,EAAEsB,MAAM,CAACtB,OAAO;IAAEC,MAAM,EAAEkB,WAAW;IAAET,UAAU,EAAEY,MAAM,CAACZ,UAAU;IAAEG;EAAY,CAAC;AACrG;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASU,YAAYA,CAACD,MAAoB,EAA0B;EACzE,MAAME,KAAK,GAAGH,eAAe,CAACC,MAAM,CAAC;EACrC,OAAO;IAAET,WAAW,EAAEW,KAAK,CAACX;EAAY,CAAC;AAC3C","ignoreList":[]}

package/dist/server/server-worker.d.ts

@@ -0,0 +1,4 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export declare function enforceNodeOfflineStatus(sb: SupabaseClient): Promise<number>;
+export declare function startWorkerLoop(): void;
+export declare function stopWorkerLoop(): void;