whale-code 6.5.6 → 6.5.7

package/dist/server/handlers/nodes-utils.d.ts

@@ -0,0 +1,70 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export interface NodeRegistration {
+    name: string;
+    store_id: string;
+    capabilities?: string[];
+    hardware?: Record<string, unknown>;
+    version?: string;
+    config?: Record<string, unknown>;
+}
+export interface HeartbeatPayload {
+    hardware?: Record<string, unknown>;
+    capabilities?: string[];
+    version?: string;
+    channels?: Array<{
+        type: string;
+        name: string;
+        status: string;
+    }>;
+}
+export interface ChannelRegistration {
+    store_id: string;
+    node_id: string;
+    type: string;
+    name: string;
+    config?: Record<string, unknown>;
+    agent_id?: string;
+}
+/** Context returned by resolveConversation */
+export interface ConversationContext {
+    conversationId: string;
+    customerId: string | null;
+    customerName: string | null;
+    isNewSession: boolean;
+}
+/** Sender context passed through to the agent invoker */
+export interface SenderContext {
+    senderId: string;
+    senderName?: string;
+    customerId?: string | null;
+    customerName?: string | null;
+    channelType?: string;
+    channelId?: string;
+    channelName?: string;
+}
+export type AgentInvoker = (supabase: SupabaseClient, agentId: string, message: string, storeId: string, conversationId: string, senderContext?: SenderContext) => Promise<{
+    success: boolean;
+    response?: string;
+    error?: string;
+}>;
+/** Set the agent invoker — called once from index.ts */
+export declare function setNodeAgentInvoker(invoker: AgentInvoker): void;
+export declare function getNodeAgentInvoker(): AgentInvoker | null;
+export declare function hashApiKey(key: string): string;
+export declare function generateNodeApiKey(): string;
+/** Clear the node auth cache (for tests). */
+export declare function clearNodeAuthCache(): void;
+/** Invalidate auth cache for a specific node ID */
+export declare function invalidateNodeAuth(nodeId: string): void;
+/** Authenticate a node by API key with retry and cache fallback */
+export declare function authenticateNode(supabase: SupabaseClient, apiKey: string): Promise<{
+    id: string;
+    store_id: string;
+    name: string;
+} | null>;
+/** Check if a user has access to a store */
+export declare function userHasStoreAccess(supabase: SupabaseClient, authUserId: string, storeId: string): Promise<boolean>;
+/** Log a node event to node_events + ClickHouse telemetry */
+export declare function logNodeEvent(supabase: SupabaseClient, storeId: string, nodeId: string, eventType: string, details?: Record<string, unknown>): Promise<void>;
+/** Resolve or create a conversation for a sender on a channel */
+export declare function resolveConversation(supabase: SupabaseClient, channelId: string, senderId: string, storeId: string, channelType?: string, senderName?: string): Promise<ConversationContext>;

package/dist/server/handlers/nodes-utils.js

@@ -0,0 +1,214 @@
+// handlers/nodes-utils.ts — Node & Channel utility functions, types, auth
+// Extracted from nodes.ts for modularity.
+
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { queueSpan, auditRowToSpan } from "../lib/clickhouse-buffer.js";
+
+// ============================================================================
+// TYPES
+// ============================================================================
+
+/** Context returned by resolveConversation */
+
+/** Sender context passed through to the agent invoker */
+
+// Callback type for agent invocation (injected from index.ts)
+
+let agentInvoker = null;
+
+/** Set the agent invoker — called once from index.ts */
+export function setNodeAgentInvoker(invoker) {
+  agentInvoker = invoker;
+}
+export function getNodeAgentInvoker() {
+  return agentInvoker;
+}
+
+// ============================================================================
+// HELPERS
+// ============================================================================
+
+export function hashApiKey(key) {
+  return createHash("sha256").update(key).digest("hex");
+}
+export function generateNodeApiKey() {
+  return randomBytes(32).toString("hex");
+}
+
+// 5-minute in-memory cache for node auth
+const NODE_AUTH_CACHE_TTL = 5 * 60 * 1000;
+const nodeAuthCache = new Map();
+
+/** Clear the node auth cache (for tests). */
+export function clearNodeAuthCache() {
+  nodeAuthCache.clear();
+}
+
+/** Invalidate auth cache for a specific node ID */
+export function invalidateNodeAuth(nodeId) {
+  for (const [hash, cached] of nodeAuthCache) {
+    if (cached.node.id === nodeId) {
+      nodeAuthCache.delete(hash);
+    }
+  }
+}
+
+/** Check if a Supabase error is transient */
+function isTransientError(error) {
+  const msg = error.message || "";
+  return msg.includes("525") || msg.includes("502") || msg.includes("503") || msg.includes("504") || msg.includes("520") || msg.includes("522") || msg.includes("524") || msg.includes("timeout") || msg.includes("ECONNRESET") || msg.includes("fetch failed");
+}
+
+/** Authenticate a node by API key with retry and cache fallback */
+export async function authenticateNode(supabase, apiKey) {
+  const hash = hashApiKey(apiKey);
+  for (let attempt = 0; attempt < 2; attempt++) {
+    try {
+      const {
+        data,
+        error
+      } = await supabase.from("nodes").select("id, store_id, name").eq("api_key_hash", hash).single();
+      if (data) {
+        nodeAuthCache.set(hash, {
+          node: data,
+          cachedAt: Date.now()
+        });
+        return data;
+      }
+      if (error && !isTransientError(error)) return null;
+      if (attempt === 0 && error) {
+        console.warn(`[node-auth] Transient error (attempt 1): ${error.message}. Retrying...`);
+        continue;
+      }
+      return null;
+    } catch (err) {
+      if (attempt === 0) {
+        console.warn(`[node-auth] Network error (attempt 1): ${err.message}. Retrying...`);
+        continue;
+      }
+    }
+  }
+  const cached = nodeAuthCache.get(hash);
+  if (cached && Date.now() - cached.cachedAt < NODE_AUTH_CACHE_TTL) {
+    console.warn(`[node-auth] Using cached auth for node ${cached.node.id} (DB unavailable)`);
+    return cached.node;
+  }
+  return null;
+}
+
+/** Check if a user has access to a store */
+export async function userHasStoreAccess(supabase, authUserId, storeId) {
+  const {
+    data: membership
+  } = await supabase.from("store_members").select("id").eq("auth_user_id", authUserId).eq("store_id", storeId).limit(1);
+  if (membership?.length) return true;
+  const {
+    data: platformUser
+  } = await supabase.from("platform_users").select("id").eq("auth_id", authUserId).limit(1).single();
+  if (platformUser) {
+    const {
+      data: ownedStore
+    } = await supabase.from("stores").select("id").eq("owner_user_id", platformUser.id).eq("id", storeId).limit(1);
+    if (ownedStore?.length) return true;
+  }
+  return false;
+}
+
+/** Log a node event to node_events + ClickHouse telemetry */
+export async function logNodeEvent(supabase, storeId, nodeId, eventType, details = {}) {
+  await supabase.from("node_events").insert({
+    store_id: storeId,
+    node_id: nodeId,
+    event_type: eventType,
+    details
+  });
+  try {
+    const now = new Date();
+    queueSpan(auditRowToSpan({
+      action: `node.${eventType}`,
+      severity: "info",
+      store_id: storeId,
+      resource_type: "whale_node",
+      resource_id: nodeId,
+      source: "whale-node",
+      user_id: details.registered_by || details.deleted_by || null,
+      trace_id: randomUUID(),
+      span_kind: "INTERNAL",
+      service_name: "whale-node",
+      status_code: "OK",
+      start_time: now.toISOString(),
+      end_time: now.toISOString(),
+      details: {
+        ...details,
+        node_id: nodeId,
+        event_type: eventType
+      }
+    }));
+  } catch {/* Telemetry must never break node operations */}
+}
+
+/** Resolve or create a conversation for a sender on a channel */
+export async function resolveConversation(supabase, channelId, senderId, storeId, channelType, senderName) {
+  let customerId = null;
+  let customerName = null;
+  if (channelType) {
+    try {
+      const {
+        data
+      } = await supabase.rpc("resolve_sender_to_customer", {
+        p_store_id: storeId,
+        p_channel_type: channelType,
+        p_sender_id: senderId,
+        p_sender_name: senderName || null
+      });
+      if (data?.length) {
+        customerId = data[0].customer_id;
+        customerName = data[0].customer_name;
+      }
+    } catch {/* customer resolution non-critical */}
+  }
+  const thirtyMinAgo = new Date(Date.now() - 30 * 60 * 1000).toISOString();
+  const {
+    data: recent
+  } = await supabase.from("channel_messages").select("conversation_id").eq("channel_id", channelId).eq("sender_id", senderId).gt("created_at", thirtyMinAgo).not("conversation_id", "is", null).order("created_at", {
+    ascending: false
+  }).limit(1);
+  if (recent?.length && recent[0].conversation_id) {
+    if (customerId) {
+      Promise.resolve(supabase.from("ai_conversations").update({
+        customer_id: customerId
+      }).eq("id", recent[0].conversation_id).is("customer_id", null)).catch(() => {});
+    }
+    return {
+      conversationId: recent[0].conversation_id,
+      customerId,
+      customerName,
+      isNewSession: false
+    };
+  }
+  const newId = randomUUID();
+  const title = senderName ? `${senderName} via ${channelType || "channel"}` : `${senderId} via ${channelType || "channel"}`;
+  try {
+    await supabase.from("ai_conversations").insert({
+      id: newId,
+      store_id: storeId,
+      agent_id: null,
+      channel_id: channelId,
+      sender_id: senderId,
+      channel_type: channelType || null,
+      customer_id: customerId,
+      title,
+      metadata: {
+        source: "channel",
+        channel_type: channelType || "unknown"
+      }
+    });
+  } catch {/* ai_conversations insert non-critical */}
+  return {
+    conversationId: newId,
+    customerId,
+    customerName,
+    isNewSession: true
+  };
+}
+//# sourceMappingURL=nodes-utils.js.map

package/dist/server/handlers/nodes-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodes-utils.js","names":["createHash","randomBytes","randomUUID","queueSpan","auditRowToSpan","agentInvoker","setNodeAgentInvoker","invoker","getNodeAgentInvoker","hashApiKey","key","update","digest","generateNodeApiKey","toString","NODE_AUTH_CACHE_TTL","nodeAuthCache","Map","clearNodeAuthCache","clear","invalidateNodeAuth","nodeId","hash","cached","node","id","delete","isTransientError","error","msg","message","includes","authenticateNode","supabase","apiKey","attempt","data","from","select","eq","single","set","cachedAt","Date","now","console","warn","err","get","userHasStoreAccess","authUserId","storeId","membership","limit","length","platformUser","ownedStore","logNodeEvent","eventType","details","insert","store_id","node_id","event_type","action","severity","resource_type","resource_id","source","user_id","registered_by","deleted_by","trace_id","span_kind","service_name","status_code","start_time","toISOString","end_time","resolveConversation","channelId","senderId","channelType","senderName","customerId","customerName","rpc","p_store_id","p_channel_type","p_sender_id","p_sender_name","customer_id","customer_name","thirtyMinAgo","recent","gt","not","order","ascending","conversation_id","Promise","resolve","is","catch","conversationId","isNewSession","newId","title","agent_id","channel_id","sender_id","channel_type","metadata"],"sources":["../../../src/server/handlers/nodes-utils.ts"],"sourcesContent":["// handlers/nodes-utils.ts — Node & Channel utility functions, types, auth\n// Extracted from nodes.ts for modularity.\n\nimport { createHash, randomBytes, randomUUID } from \"node:crypto\";\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { queueSpan, auditRowToSpan } from \"../lib/clickhouse-buffer.js\";\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface NodeRegistration {\n  name: string;\n  store_id: string;\n  capabilities?: string[];\n  hardware?: Record<string, unknown>;\n  version?: string;\n  config?: Record<string, unknown>;\n}\n\nexport interface HeartbeatPayload {\n  hardware?: Record<string, unknown>;\n  capabilities?: string[];\n  version?: string;\n  channels?: Array<{ type: string; name: string; status: string }>;\n}\n\nexport interface ChannelRegistration {\n  store_id: string;\n  node_id: string;\n  type: string;\n  name: string;\n  config?: Record<string, unknown>;\n  agent_id?: string;\n}\n\n/** Context returned by resolveConversation */\nexport interface ConversationContext {\n  conversationId: string;\n  customerId: string | null;\n  customerName: string | null;\n  isNewSession: boolean;\n}\n\n/** Sender context passed through to the agent invoker */\nexport interface SenderContext {\n  senderId: string;\n  senderName?: string;\n  customerId?: string | null;\n  customerName?: string | null;\n  channelType?: string;\n  channelId?: string;\n  channelName?: string;\n}\n\n// Callback type for agent invocation (injected from index.ts)\nexport type AgentInvoker = (\n  supabase: SupabaseClient,\n  agentId: string,\n  message: string,\n  storeId: string,\n  conversationId: string,\n  senderContext?: SenderContext,\n) => Promise<{ success: boolean; response?: string; error?: string }>;\n\nlet agentInvoker: AgentInvoker | null = null;\n\n/** Set the agent invoker — called once from index.ts */\nexport function setNodeAgentInvoker(invoker: AgentInvoker): void {\n  agentInvoker = invoker;\n}\n\nexport function getNodeAgentInvoker(): AgentInvoker | null {\n  return agentInvoker;\n}\n\n// ============================================================================\n// HELPERS\n// ============================================================================\n\nexport function hashApiKey(key: string): string {\n  return createHash(\"sha256\").update(key).digest(\"hex\");\n}\n\nexport function generateNodeApiKey(): string {\n  return randomBytes(32).toString(\"hex\");\n}\n\n// 5-minute in-memory cache for node auth\nconst NODE_AUTH_CACHE_TTL = 5 * 60 * 1000;\nconst nodeAuthCache = new Map<string, { node: { id: string; store_id: string; name: string }; cachedAt: number }>();\n\n/** Clear the node auth cache (for tests). */\nexport function clearNodeAuthCache(): void {\n  nodeAuthCache.clear();\n}\n\n/** Invalidate auth cache for a specific node ID */\nexport function invalidateNodeAuth(nodeId: string): void {\n  for (const [hash, cached] of nodeAuthCache) {\n    if (cached.node.id === nodeId) {\n      nodeAuthCache.delete(hash);\n    }\n  }\n}\n\n/** Check if a Supabase error is transient */\nfunction isTransientError(error: { message?: string; code?: string }): boolean {\n  const msg = error.message || \"\";\n  return msg.includes(\"525\") || msg.includes(\"502\") || msg.includes(\"503\")\n    || msg.includes(\"504\") || msg.includes(\"520\") || msg.includes(\"522\")\n    || msg.includes(\"524\") || msg.includes(\"timeout\") || msg.includes(\"ECONNRESET\")\n    || msg.includes(\"fetch failed\");\n}\n\n/** Authenticate a node by API key with retry and cache fallback */\nexport async function authenticateNode(\n  supabase: SupabaseClient,\n  apiKey: string,\n): Promise<{ id: string; store_id: string; name: string } | null> {\n  const hash = hashApiKey(apiKey);\n\n  for (let attempt = 0; attempt < 2; attempt++) {\n    try {\n      const { data, error } = await supabase\n        .from(\"nodes\").select(\"id, store_id, name\").eq(\"api_key_hash\", hash).single();\n      if (data) {\n        nodeAuthCache.set(hash, { node: data, cachedAt: Date.now() });\n        return data;\n      }\n      if (error && !isTransientError(error)) return null;\n      if (attempt === 0 && error) {\n        console.warn(`[node-auth] Transient error (attempt 1): ${error.message}. Retrying...`);\n        continue;\n      }\n      return null;\n    } catch (err) {\n      if (attempt === 0) {\n        console.warn(`[node-auth] Network error (attempt 1): ${(err as Error).message}. Retrying...`);\n        continue;\n      }\n    }\n  }\n\n  const cached = nodeAuthCache.get(hash);\n  if (cached && Date.now() - cached.cachedAt < NODE_AUTH_CACHE_TTL) {\n    console.warn(`[node-auth] Using cached auth for node ${cached.node.id} (DB unavailable)`);\n    return cached.node;\n  }\n  return null;\n}\n\n/** Check if a user has access to a store */\nexport async function userHasStoreAccess(\n  supabase: SupabaseClient, authUserId: string, storeId: string,\n): Promise<boolean> {\n  const { data: membership } = await supabase\n    .from(\"store_members\").select(\"id\")\n    .eq(\"auth_user_id\", authUserId).eq(\"store_id\", storeId).limit(1);\n  if (membership?.length) return true;\n\n  const { data: platformUser } = await supabase\n    .from(\"platform_users\").select(\"id\").eq(\"auth_id\", authUserId).limit(1).single();\n  if (platformUser) {\n    const { data: ownedStore } = await supabase\n      .from(\"stores\").select(\"id\")\n      .eq(\"owner_user_id\", platformUser.id).eq(\"id\", storeId).limit(1);\n    if (ownedStore?.length) return true;\n  }\n  return false;\n}\n\n/** Log a node event to node_events + ClickHouse telemetry */\nexport async function logNodeEvent(\n  supabase: SupabaseClient, storeId: string, nodeId: string,\n  eventType: string, details: Record<string, unknown> = {},\n) {\n  await supabase.from(\"node_events\").insert({\n    store_id: storeId, node_id: nodeId, event_type: eventType, details,\n  });\n\n  try {\n    const now = new Date();\n    queueSpan(auditRowToSpan({\n      action: `node.${eventType}`, severity: \"info\",\n      store_id: storeId, resource_type: \"whale_node\", resource_id: nodeId,\n      source: \"whale-node\",\n      user_id: (details.registered_by || details.deleted_by || null) as string | null,\n      trace_id: randomUUID(), span_kind: \"INTERNAL\", service_name: \"whale-node\",\n      status_code: \"OK\", start_time: now.toISOString(), end_time: now.toISOString(),\n      details: { ...details, node_id: nodeId, event_type: eventType },\n    }));\n  } catch { /* Telemetry must never break node operations */ }\n}\n\n/** Resolve or create a conversation for a sender on a channel */\nexport async function resolveConversation(\n  supabase: SupabaseClient, channelId: string, senderId: string,\n  storeId: string, channelType?: string, senderName?: string,\n): Promise<ConversationContext> {\n  let customerId: string | null = null;\n  let customerName: string | null = null;\n  if (channelType) {\n    try {\n      const { data } = await supabase.rpc(\"resolve_sender_to_customer\", {\n        p_store_id: storeId, p_channel_type: channelType,\n        p_sender_id: senderId, p_sender_name: senderName || null,\n      });\n      if (data?.length) {\n        customerId = data[0].customer_id;\n        customerName = data[0].customer_name;\n      }\n    } catch { /* customer resolution non-critical */ }\n  }\n\n  const thirtyMinAgo = new Date(Date.now() - 30 * 60 * 1000).toISOString();\n  const { data: recent } = await supabase\n    .from(\"channel_messages\").select(\"conversation_id\")\n    .eq(\"channel_id\", channelId).eq(\"sender_id\", senderId)\n    .gt(\"created_at\", thirtyMinAgo).not(\"conversation_id\", \"is\", null)\n    .order(\"created_at\", { ascending: false }).limit(1);\n\n  if (recent?.length && recent[0].conversation_id) {\n    if (customerId) {\n      Promise.resolve(\n        supabase.from(\"ai_conversations\")\n          .update({ customer_id: customerId })\n          .eq(\"id\", recent[0].conversation_id)\n          .is(\"customer_id\", null)\n      ).catch(() => {});\n    }\n    return { conversationId: recent[0].conversation_id, customerId, customerName, isNewSession: false };\n  }\n\n  const newId = randomUUID();\n  const title = senderName\n    ? `${senderName} via ${channelType || \"channel\"}`\n    : `${senderId} via ${channelType || \"channel\"}`;\n  try {\n    await supabase.from(\"ai_conversations\").insert({\n      id: newId, store_id: storeId,\n      agent_id: null, channel_id: channelId,\n      sender_id: senderId, channel_type: channelType || null,\n      customer_id: customerId, title,\n      metadata: { source: \"channel\", channel_type: channelType || \"unknown\" },\n    });\n  } catch { /* ai_conversations insert non-critical */ }\n\n  return { conversationId: newId, customerId, customerName, isNewSession: true };\n}\n"],"mappings":"AAAA;AACA;;AAEA,SAASA,UAAU,EAAEC,WAAW,EAAEC,UAAU,QAAQ,aAAa;AAEjE,SAASC,SAAS,EAAEC,cAAc,QAAQ,6BAA6B;;AAEvE;AACA;AACA;;AA2BA;;AAQA;;AAWA;;AAUA,IAAIC,YAAiC,GAAG,IAAI;;AAE5C;AACA,OAAO,SAASC,mBAAmBA,CAACC,OAAqB,EAAQ;EAC/DF,YAAY,GAAGE,OAAO;AACxB;AAEA,OAAO,SAASC,mBAAmBA,CAAA,EAAwB;EACzD,OAAOH,YAAY;AACrB;;AAEA;AACA;AACA;;AAEA,OAAO,SAASI,UAAUA,CAACC,GAAW,EAAU;EAC9C,OAAOV,UAAU,CAAC,QAAQ,CAAC,CAACW,MAAM,CAACD,GAAG,CAAC,CAACE,MAAM,CAAC,KAAK,CAAC;AACvD;AAEA,OAAO,SAASC,kBAAkBA,CAAA,EAAW;EAC3C,OAAOZ,WAAW,CAAC,EAAE,CAAC,CAACa,QAAQ,CAAC,KAAK,CAAC;AACxC;;AAEA;AACA,MAAMC,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;AACzC,MAAMC,aAAa,GAAG,IAAIC,GAAG,CAAqF,CAAC;;AAEnH;AACA,OAAO,SAASC,kBAAkBA,CAAA,EAAS;EACzCF,aAAa,CAACG,KAAK,CAAC,CAAC;AACvB;;AAEA;AACA,OAAO,SAASC,kBAAkBA,CAACC,MAAc,EAAQ;EACvD,KAAK,MAAM,CAACC,IAAI,EAAEC,MAAM,CAAC,IAAIP,aAAa,EAAE;IAC1C,IAAIO,MAAM,CAACC,IAAI,CAACC,EAAE,KAAKJ,MAAM,EAAE;MAC7BL,aAAa,CAACU,MAAM,CAACJ,IAAI,CAAC;IAC5B;EACF;AACF;;AAEA;AACA,SAASK,gBAAgBA,CAACC,KAA0C,EAAW;EAC7E,MAAMC,GAAG,GAAGD,KAAK,CAACE,OAAO,IAAI,EAAE;EAC/B,OAAOD,GAAG,CAACE,QAAQ,CAAC,KAAK,CAAC,IAAIF,GAAG,CAACE,QAAQ,CAAC,KAAK,CAAC,IAAIF,GAAG,CAACE,QAAQ,CAAC,KAAK,CAAC,IACnEF,GAAG,CAACE,QAAQ,CAAC,KAAK,CAAC,IAAIF,GAAG,CAACE,QAAQ,CAAC,KAAK,CAAC,IAAIF,GAAG,CAACE,QAAQ,CAAC,KAAK,CAAC,IACjEF,GAAG,CAACE,QAAQ,CAAC,KAAK,CAAC,IAAIF,GAAG,CAACE,QAAQ,CAAC,SAAS,CAAC,IAAIF,GAAG,CAACE,QAAQ,CAAC,YAAY,CAAC,IAC5EF,GAAG,CAACE,QAAQ,CAAC,cAAc,CAAC;AACnC;;AAEA;AACA,OAAO,eAAeC,gBAAgBA,CACpCC,QAAwB,EACxBC,MAAc,EACkD;EAChE,MAAMZ,IAAI,GAAGb,UAAU,CAACyB,MAAM,CAAC;EAE/B,KAAK,IAAIC,OAAO,GAAG,CAAC,EAAEA,OAAO,GAAG,CAAC,EAAEA,OAAO,EAAE,EAAE;IAC5C,IAAI;MACF,MAAM;QAAEC,IAAI;QAAER;MAAM,CAAC,GAAG,MAAMK,QAAQ,CACnCI,IAAI,CAAC,OAAO,CAAC,CAACC,MAAM,CAAC,oBAAoB,CAAC,CAACC,EAAE,CAAC,cAAc,EAAEjB,IAAI,CAAC,CAACkB,MAAM,CAAC,CAAC;MAC/E,IAAIJ,IAAI,EAAE;QACRpB,aAAa,CAACyB,GAAG,CAACnB,IAAI,EAAE;UAAEE,IAAI,EAAEY,IAAI;UAAEM,QAAQ,EAAEC,IAAI,CAACC,GAAG,CAAC;QAAE,CAAC,CAAC;QAC7D,OAAOR,IAAI;MACb;MACA,IAAIR,KAAK,IAAI,CAACD,gBAAgB,CAACC,KAAK,CAAC,EAAE,OAAO,IAAI;MAClD,IAAIO,OAAO,KAAK,CAAC,IAAIP,KAAK,EAAE;QAC1BiB,OAAO,CAACC,IAAI,CAAC,4CAA4ClB,KAAK,CAACE,OAAO,eAAe,CAAC;QACtF;MACF;MACA,OAAO,IAAI;IACb,CAAC,CAAC,OAAOiB,GAAG,EAAE;MACZ,IAAIZ,OAAO,KAAK,CAAC,EAAE;QACjBU,OAAO,CAACC,IAAI,CAAC,0CAA2CC,GAAG,CAAWjB,OAAO,eAAe,CAAC;QAC7F;MACF;IACF;EACF;EAEA,MAAMP,MAAM,GAAGP,aAAa,CAACgC,GAAG,CAAC1B,IAAI,CAAC;EACtC,IAAIC,MAAM,IAAIoB,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGrB,MAAM,CAACmB,QAAQ,GAAG3B,mBAAmB,EAAE;IAChE8B,OAAO,CAACC,IAAI,CAAC,0CAA0CvB,MAAM,CAACC,IAAI,CAACC,EAAE,mBAAmB,CAAC;IACzF,OAAOF,MAAM,CAACC,IAAI;EACpB;EACA,OAAO,IAAI;AACb;;AAEA;AACA,OAAO,eAAeyB,kBAAkBA,CACtChB,QAAwB,EAAEiB,UAAkB,EAAEC,OAAe,EAC3C;EAClB,MAAM;IAAEf,IAAI,EAAEgB;EAAW,CAAC,GAAG,MAAMnB,QAAQ,CACxCI,IAAI,CAAC,eAAe,CAAC,CAACC,MAAM,CAAC,IAAI,CAAC,CAClCC,EAAE,CAAC,cAAc,EAAEW,UAAU,CAAC,CAACX,EAAE,CAAC,UAAU,EAAEY,OAAO,CAAC,CAACE,KAAK,CAAC,CAAC,CAAC;EAClE,IAAID,UAAU,EAAEE,MAAM,EAAE,OAAO,IAAI;EAEnC,MAAM;IAAElB,IAAI,EAAEmB;EAAa,CAAC,GAAG,MAAMtB,QAAQ,CAC1CI,IAAI,CAAC,gBAAgB,CAAC,CAACC,MAAM,CAAC,IAAI,CAAC,CAACC,EAAE,CAAC,SAAS,EAAEW,UAAU,CAAC,CAACG,KAAK,CAAC,CAAC,CAAC,CAACb,MAAM,CAAC,CAAC;EAClF,IAAIe,YAAY,EAAE;IAChB,MAAM;MAAEnB,IAAI,EAAEoB;IAAW,CAAC,GAAG,MAAMvB,QAAQ,CACxCI,IAAI,CAAC,QAAQ,CAAC,CAACC,MAAM,CAAC,IAAI,CAAC,CAC3BC,EAAE,CAAC,eAAe,EAAEgB,YAAY,CAAC9B,EAAE,CAAC,CAACc,EAAE,CAAC,IAAI,EAAEY,OAAO,CAAC,CAACE,KAAK,CAAC,CAAC,CAAC;IAClE,IAAIG,UAAU,EAAEF,MAAM,EAAE,OAAO,IAAI;EACrC;EACA,OAAO,KAAK;AACd;;AAEA;AACA,OAAO,eAAeG,YAAYA,CAChCxB,QAAwB,EAAEkB,OAAe,EAAE9B,MAAc,EACzDqC,SAAiB,EAAEC,OAAgC,GAAG,CAAC,CAAC,EACxD;EACA,MAAM1B,QAAQ,CAACI,IAAI,CAAC,aAAa,CAAC,CAACuB,MAAM,CAAC;IACxCC,QAAQ,EAAEV,OAAO;IAAEW,OAAO,EAAEzC,MAAM;IAAE0C,UAAU,EAAEL,SAAS;IAAEC;EAC7D,CAAC,CAAC;EAEF,IAAI;IACF,MAAMf,GAAG,GAAG,IAAID,IAAI,CAAC,CAAC;IACtBxC,SAAS,CAACC,cAAc,CAAC;MACvB4D,MAAM,EAAE,QAAQN,SAAS,EAAE;MAAEO,QAAQ,EAAE,MAAM;MAC7CJ,QAAQ,EAAEV,OAAO;MAAEe,aAAa,EAAE,YAAY;MAAEC,WAAW,EAAE9C,MAAM;MACnE+C,MAAM,EAAE,YAAY;MACpBC,OAAO,EAAGV,OAAO,CAACW,aAAa,IAAIX,OAAO,CAACY,UAAU,IAAI,IAAsB;MAC/EC,QAAQ,EAAEtE,UAAU,CAAC,CAAC;MAAEuE,SAAS,EAAE,UAAU;MAAEC,YAAY,EAAE,YAAY;MACzEC,WAAW,EAAE,IAAI;MAAEC,UAAU,EAAEhC,GAAG,CAACiC,WAAW,CAAC,CAAC;MAAEC,QAAQ,EAAElC,GAAG,CAACiC,WAAW,CAAC,CAAC;MAC7ElB,OAAO,EAAE;QAAE,GAAGA,OAAO;QAAEG,OAAO,EAAEzC,MAAM;QAAE0C,UAAU,EAAEL;MAAU;IAChE,CAAC,CAAC,CAAC;EACL,CAAC,CAAC,MAAM,CAAE;AACZ;;AAEA;AACA,OAAO,eAAeqB,mBAAmBA,CACvC9C,QAAwB,EAAE+C,SAAiB,EAAEC,QAAgB,EAC7D9B,OAAe,EAAE+B,WAAoB,EAAEC,UAAmB,EAC5B;EAC9B,IAAIC,UAAyB,GAAG,IAAI;EACpC,IAAIC,YAA2B,GAAG,IAAI;EACtC,IAAIH,WAAW,EAAE;IACf,IAAI;MACF,MAAM;QAAE9C;MAAK,CAAC,GAAG,MAAMH,QAAQ,CAACqD,GAAG,CAAC,4BAA4B,EAAE;QAChEC,UAAU,EAAEpC,OAAO;QAAEqC,cAAc,EAAEN,WAAW;QAChDO,WAAW,EAAER,QAAQ;QAAES,aAAa,EAAEP,UAAU,IAAI;MACtD,CAAC,CAAC;MACF,IAAI/C,IAAI,EAAEkB,MAAM,EAAE;QAChB8B,UAAU,GAAGhD,IAAI,CAAC,CAAC,CAAC,CAACuD,WAAW;QAChCN,YAAY,GAAGjD,IAAI,CAAC,CAAC,CAAC,CAACwD,aAAa;MACtC;IACF,CAAC,CAAC,MAAM,CAAE;EACZ;EAEA,MAAMC,YAAY,GAAG,IAAIlD,IAAI,CAACA,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAACiC,WAAW,CAAC,CAAC;EACxE,MAAM;IAAEzC,IAAI,EAAE0D;EAAO,CAAC,GAAG,MAAM7D,QAAQ,CACpCI,IAAI,CAAC,kBAAkB,CAAC,CAACC,MAAM,CAAC,iBAAiB,CAAC,CAClDC,EAAE,CAAC,YAAY,EAAEyC,SAAS,CAAC,CAACzC,EAAE,CAAC,WAAW,EAAE0C,QAAQ,CAAC,CACrDc,EAAE,CAAC,YAAY,EAAEF,YAAY,CAAC,CAACG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,CACjEC,KAAK,CAAC,YAAY,EAAE;IAAEC,SAAS,EAAE;EAAM,CAAC,CAAC,CAAC7C,KAAK,CAAC,CAAC,CAAC;EAErD,IAAIyC,MAAM,EAAExC,MAAM,IAAIwC,MAAM,CAAC,CAAC,CAAC,CAACK,eAAe,EAAE;IAC/C,IAAIf,UAAU,EAAE;MACdgB,OAAO,CAACC,OAAO,CACbpE,QAAQ,CAACI,IAAI,CAAC,kBAAkB,CAAC,CAC9B1B,MAAM,CAAC;QAAEgF,WAAW,EAAEP;MAAW,CAAC,CAAC,CACnC7C,EAAE,CAAC,IAAI,EAAEuD,MAAM,CAAC,CAAC,CAAC,CAACK,eAAe,CAAC,CACnCG,EAAE,CAAC,aAAa,EAAE,IAAI,CAC3B,CAAC,CAACC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnB;IACA,OAAO;MAAEC,cAAc,EAAEV,MAAM,CAAC,CAAC,CAAC,CAACK,eAAe;MAAEf,UAAU;MAAEC,YAAY;MAAEoB,YAAY,EAAE;IAAM,CAAC;EACrG;EAEA,MAAMC,KAAK,GAAGxG,UAAU,CAAC,CAAC;EAC1B,MAAMyG,KAAK,GAAGxB,UAAU,GACpB,GAAGA,UAAU,QAAQD,WAAW,IAAI,SAAS,EAAE,GAC/C,GAAGD,QAAQ,QAAQC,WAAW,IAAI,SAAS,EAAE;EACjD,IAAI;IACF,MAAMjD,QAAQ,CAACI,IAAI,CAAC,kBAAkB,CAAC,CAACuB,MAAM,CAAC;MAC7CnC,EAAE,EAAEiF,KAAK;MAAE7C,QAAQ,EAAEV,OAAO;MAC5ByD,QAAQ,EAAE,IAAI;MAAEC,UAAU,EAAE7B,SAAS;MACrC8B,SAAS,EAAE7B,QAAQ;MAAE8B,YAAY,EAAE7B,WAAW,IAAI,IAAI;MACtDS,WAAW,EAAEP,UAAU;MAAEuB,KAAK;MAC9BK,QAAQ,EAAE;QAAE5C,MAAM,EAAE,SAAS;QAAE2C,YAAY,EAAE7B,WAAW,IAAI;MAAU;IACxE,CAAC,CAAC;EACJ,CAAC,CAAC,MAAM,CAAE;EAEV,OAAO;IAAEsB,cAAc,EAAEE,KAAK;IAAEtB,UAAU;IAAEC,YAAY;IAAEoB,YAAY,EAAE;EAAK,CAAC;AAChF","ignoreList":[]}

package/dist/server/handlers/nodes.test.js

@@ -0,0 +1,353 @@
+// nodes.test.ts — Tests for handleNodeRoutes handler (registration, heartbeat, list, delete)
+
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import { HAS_TEST_DB, getTestClient, seedTracked, cleanup, TEST_STORE, RUN_PREFIX } from "./__test-utils__/test-db.js";
+// ---------------------------------------------------------------------------
+// Mock dependencies
+// ---------------------------------------------------------------------------
+
+vi.mock("./billing.js", () => ({
+  checkPlanLimits: vi.fn().mockResolvedValue({
+    allowed: true
+  }),
+  incrementUsage: vi.fn().mockResolvedValue(undefined)
+}));
+vi.mock("node:crypto", async importOriginal => {
+  const actual = await importOriginal();
+  return {
+    ...actual,
+    createHash: vi.fn().mockReturnValue({
+      update: vi.fn().mockReturnValue({
+        digest: vi.fn().mockReturnValue("mocked-hash-abc123")
+      })
+    }),
+    randomBytes: vi.fn().mockReturnValue({
+      toString: vi.fn().mockReturnValue("mocked-api-key-hex-string-64chars-long-enough-for-testing-12345678")
+    }),
+    randomUUID: vi.fn().mockReturnValue("a0a0a0a0-0001-0002-0003-000000000001")
+  };
+});
+import { handleNodeRoutes, clearNodeAuthCache } from "./nodes.js";
+const sb = getTestClient();
+const USER_ID = "562fd6cb-ef83-4eca-b999-ffeac2293ee7";
+const NODE_ID = "a0a0a0a0-0001-0002-0003-000000000001";
+const CHANNEL_ID = "b0b0b0b0-0001-0002-0003-000000000001";
+function makeNode(overrides = {}) {
+  return {
+    id: NODE_ID,
+    store_id: TEST_STORE,
+    name: `${RUN_PREFIX} Test Node`,
+    api_key_hash: "mocked-hash-abc123",
+    status: "online",
+    capabilities: ["chat", "voice"],
+    hardware: {
+      cpu: "arm64"
+    },
+    version: "1.0.0",
+    ip_address: null,
+    last_heartbeat: "2026-01-01T00:00:00Z",
+    created_at: "2026-01-01T00:00:00Z",
+    ...overrides
+  };
+}
+function makeChannel(overrides = {}) {
+  return {
+    id: CHANNEL_ID,
+    store_id: TEST_STORE,
+    node_id: NODE_ID,
+    type: "sms",
+    name: `${RUN_PREFIX} SMS Channel`,
+    status: "active",
+    config: {},
+    agent_id: null,
+    stats: {},
+    error_message: null,
+    created_at: "2026-01-01T00:00:00Z",
+    updated_at: "2026-01-01T00:00:00Z",
+    ...overrides
+  };
+}
+function makeAuth(overrides = {}) {
+  return {
+    userId: USER_ID,
+    isServiceRole: false,
+    rawToken: "user-jwt-token",
+    ...overrides
+  };
+}
+function makeNodeAuth(overrides = {}) {
+  return {
+    userId: undefined,
+    isServiceRole: false,
+    rawToken: "node-api-key-raw",
+    ...overrides
+  };
+}
+describe.skipIf(!HAS_TEST_DB)("handleNodeRoutes (nodes)", () => {
+  beforeEach(async () => {
+    vi.restoreAllMocks();
+    vi.clearAllMocks();
+    clearNodeAuthCache();
+    await sb.from("channel_messages").delete().eq("channel_id", CHANNEL_ID).then(() => {});
+    await sb.from("channels").delete().eq("store_id", TEST_STORE).then(() => {});
+    await sb.from("node_events").delete().eq("node_id", NODE_ID).then(() => {});
+    await sb.from("nodes").delete().eq("store_id", TEST_STORE).then(() => {});
+    await sb.from("store_plans").delete().eq("store_id", TEST_STORE).then(() => {});
+    const {
+      data: storeRow
+    } = await sb.from("stores").select("owner_user_id").eq("id", TEST_STORE).single();
+    if (storeRow?.owner_user_id) {
+      await sb.from("platform_users").update({
+        auth_id: USER_ID
+      }).eq("id", storeRow.owner_user_id);
+    }
+  });
+  afterEach(async () => {
+    vi.restoreAllMocks();
+    await cleanup();
+    await sb.from("channel_messages").delete().eq("channel_id", CHANNEL_ID).then(() => {});
+    await sb.from("channels").delete().eq("store_id", TEST_STORE).then(() => {});
+    await sb.from("node_events").delete().eq("node_id", NODE_ID).then(() => {});
+    await sb.from("nodes").delete().eq("store_id", TEST_STORE).then(() => {});
+    await sb.from("store_plans").delete().eq("store_id", TEST_STORE).then(() => {});
+    const {
+      data: storeRow
+    } = await sb.from("stores").select("owner_user_id").eq("id", TEST_STORE).single();
+    if (storeRow?.owner_user_id) {
+      await sb.from("platform_users").update({
+        auth_id: null
+      }).eq("id", storeRow.owner_user_id);
+    }
+  });
+  describe("unmatched routes", () => {
+    it("returns null for unknown routes", async () => {
+      const result = await handleNodeRoutes("/unknown", "GET", null, sb, makeAuth());
+      expect(result).toBeNull();
+    });
+    it("returns null for unmatched method", async () => {
+      const result = await handleNodeRoutes("/nodes/register", "GET", null, sb, makeAuth());
+      expect(result).toBeNull();
+    });
+  });
+  describe("POST /nodes/register", () => {
+    it("registers a new node and returns API key", async () => {
+      await seedTracked("store_plans", [{
+        store_id: TEST_STORE,
+        plan: "pro",
+        limits: {
+          nodes_max: 5
+        }
+      }]);
+      const result = await handleNodeRoutes("/nodes/register", "POST", {
+        name: `${RUN_PREFIX} My Node`,
+        store_id: TEST_STORE
+      }, sb, makeAuth());
+      expect(result).not.toBeNull();
+      expect(result.status).toBe(201);
+      expect(result.body.success).toBe(true);
+      expect(result.body.api_key).toBeDefined();
+      expect(result.body.message).toContain("Save your API key");
+    });
+    it("returns 401 without user authentication", async () => {
+      const result = await handleNodeRoutes("/nodes/register", "POST", {
+        name: "Node",
+        store_id: TEST_STORE
+      }, sb, {
+        userId: undefined,
+        isServiceRole: false,
+        rawToken: ""
+      });
+      expect(result.status).toBe(401);
+      expect(result.body.error).toContain("User authentication required");
+    });
+    it("returns 400 when body is missing", async () => {
+      const result = await handleNodeRoutes("/nodes/register", "POST", null, sb, makeAuth());
+      expect(result.status).toBe(400);
+      expect(result.body.error).toContain("Request body required");
+    });
+    it("returns 400 when name is missing", async () => {
+      const result = await handleNodeRoutes("/nodes/register", "POST", {
+        store_id: TEST_STORE
+      }, sb, makeAuth());
+      expect(result.status).toBe(400);
+      expect(result.body.error).toContain("name and store_id required");
+    });
+    it("returns 400 when store_id is missing", async () => {
+      const result = await handleNodeRoutes("/nodes/register", "POST", {
+        name: "Node"
+      }, sb, makeAuth());
+      expect(result.status).toBe(400);
+      expect(result.body.error).toContain("name and store_id required");
+    });
+    it("returns 403 when user has no access to the store", async () => {
+      const result = await handleNodeRoutes("/nodes/register", "POST", {
+        name: "Node",
+        store_id: TEST_STORE
+      }, sb, makeAuth({
+        userId: "00000000-0000-0000-0000-000000000099"
+      }));
+      expect(result.status).toBe(403);
+      expect(result.body.error).toContain("No access to this store");
+    });
+    it("returns 429 when node limit is reached", async () => {
+      await seedTracked("store_plans", [{
+        store_id: TEST_STORE,
+        plan: "free",
+        limits: {
+          nodes_max: 1
+        }
+      }]);
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes("/nodes/register", "POST", {
+        name: `${RUN_PREFIX} Another Node`,
+        store_id: TEST_STORE
+      }, sb, makeAuth());
+      expect(result.status).toBe(429);
+      expect(result.body.error).toContain("Node limit reached");
+    });
+    it("allows service role without user ID", async () => {
+      await seedTracked("store_plans", [{
+        store_id: TEST_STORE,
+        plan: "pro",
+        limits: {
+          nodes_max: 5
+        }
+      }]);
+      const result = await handleNodeRoutes("/nodes/register", "POST", {
+        name: `${RUN_PREFIX} Service Node`,
+        store_id: TEST_STORE
+      }, sb, {
+        userId: undefined,
+        isServiceRole: true,
+        rawToken: "service-key"
+      });
+      expect(result.status).toBe(201);
+      expect(result.body.success).toBe(true);
+    });
+  });
+  describe("POST /nodes/heartbeat", () => {
+    it("updates node status to online", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes("/nodes/heartbeat", "POST", {
+        hardware: {
+          cpu: "x86_64",
+          memory: "16GB"
+        }
+      }, sb, makeNodeAuth());
+      expect(result.status).toBe(200);
+      expect(result.body.success).toBe(true);
+      expect(result.body.node_id).toBe(NODE_ID);
+    });
+    it("returns 401 for invalid API key", async () => {
+      const result = await handleNodeRoutes("/nodes/heartbeat", "POST", {}, sb, makeNodeAuth());
+      expect(result.status).toBe(401);
+      expect(result.body.error).toContain("Invalid node API key");
+    });
+    it("accepts capabilities update", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes("/nodes/heartbeat", "POST", {
+        capabilities: ["chat", "voice", "email"]
+      }, sb, makeNodeAuth());
+      expect(result.status).toBe(200);
+    });
+    it("accepts version update", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes("/nodes/heartbeat", "POST", {
+        version: "2.0.0"
+      }, sb, makeNodeAuth());
+      expect(result.status).toBe(200);
+    });
+    it("syncs channel statuses when reported", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      await seedTracked("channels", [makeChannel()]);
+      const result = await handleNodeRoutes("/nodes/heartbeat", "POST", {
+        channels: [{
+          type: "sms",
+          name: "SMS",
+          status: "active"
+        }]
+      }, sb, makeNodeAuth());
+      expect(result.status).toBe(200);
+    });
+  });
+  describe("GET|POST /nodes", () => {
+    it("lists nodes for a store via GET", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes("/nodes", "GET", null, sb, makeAuth(), new URLSearchParams({
+        store_id: TEST_STORE
+      }));
+      expect(result.status).toBe(200);
+      expect(result.body.success).toBe(true);
+      expect(Array.isArray(result.body.nodes)).toBe(true);
+    });
+    it("lists nodes for a store via POST body", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes("/nodes", "POST", {
+        store_id: TEST_STORE
+      }, sb, makeAuth());
+      expect(result.status).toBe(200);
+      expect(result.body.success).toBe(true);
+    });
+    it("returns 400 when store_id is missing", async () => {
+      const result = await handleNodeRoutes("/nodes", "GET", null, sb, makeAuth());
+      expect(result.status).toBe(400);
+      expect(result.body.error).toContain("store_id required");
+    });
+  });
+
+  // ========================================================================
+  // DELETE /nodes/:id
+  // ========================================================================
+
+  describe("DELETE /nodes/:id", () => {
+    it("deletes a node", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes(`/nodes/${NODE_ID}`, "DELETE", null, sb, makeAuth());
+      expect(result.status).toBe(200);
+      expect(result.body.success).toBe(true);
+      expect(result.body.deleted).toBe(NODE_ID);
+    });
+    it("returns 404 when node not found", async () => {
+      const result = await handleNodeRoutes("/nodes/00000000-0000-0000-0000-000000000000", "DELETE", null, sb, makeAuth());
+      expect(result.status).toBe(404);
+      expect(result.body.error).toContain("Node not found");
+    });
+    it("returns 403 when user has no store access", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      const result = await handleNodeRoutes(`/nodes/${NODE_ID}`, "DELETE", null, sb, makeAuth({
+        userId: "00000000-0000-0000-0000-000000000099"
+      }));
+      expect(result.status).toBe(403);
+      expect(result.body.error).toContain("No access to this node");
+    });
+  });
+
+  // ========================================================================
+  // GET /nodes/:id/events
+  // ========================================================================
+
+  describe("GET /nodes/:id/events", () => {
+    it("returns events for a node", async () => {
+      await seedTracked("nodes", [makeNode()]);
+      await seedTracked("node_events", [{
+        id: "e0e0e0e0-0001-0001-0001-000000000001",
+        store_id: TEST_STORE,
+        node_id: NODE_ID,
+        event_type: "registered",
+        details: {},
+        created_at: "2026-01-01"
+      }, {
+        id: "e0e0e0e0-0001-0001-0001-000000000002",
+        store_id: TEST_STORE,
+        node_id: NODE_ID,
+        event_type: "heartbeat",
+        details: {},
+        created_at: "2026-01-02"
+      }]);
+      const result = await handleNodeRoutes(`/nodes/${NODE_ID}/events`, "GET", null, sb, makeAuth());
+      expect(result.status).toBe(200);
+      expect(result.body.success).toBe(true);
+      expect(Array.isArray(result.body.events)).toBe(true);
+    });
+  });
+});