whale-code 6.5.6 → 6.5.7

package/dist/server/server-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-helpers.js","names":["timingSafeEqual","createHash","Anthropic","createLogger","log","ANTHROPIC_API_KEY","process","env","ALLOWED_ORIGINS","split","map","s","trim","safeCompare","a","b","hashA","update","digest","hashB","getCorsHeaders","origin","headers","includes","jsonResponse","res","status","data","corsHeaders","writeHead","end","JSON","stringify","sendSSE","event","destroyed","writableEnded","write","getAnthropicClient","agent","key","api_key","apiKey","timeout","stripLargeBase64Fields","raw","keepFrom","MIN_DATA_LEN","result","DATA_MARKER","parts","pos","idx","indexOf","push","slice","length","join","IMG_MARKER","adjustedKeepFrom","Math","min","readBody","req","MAX_BODY","Promise","resolve","reject","chunks","size","rejected","on","chunk","resume","Error","declaredLen","parseInt","error","receivedLen","Buffer","concat","toString","max","info","originalBytes","prunedBytes","byteLength","compactHistory","history","maxHistoryChars","totalChars","compacted","i","msg","msgChars","content","unshift","role","shift"],"sources":["../../src/server/server-helpers.ts"],"sourcesContent":["// server/server-helpers.ts — Shared HTTP utilities for the agent server\n// Extracted from index.ts for modularity.\n\nimport http from \"node:http\";\nimport { timingSafeEqual, createHash } from \"node:crypto\";\nimport Anthropic from \"@anthropic-ai/sdk\";\nimport { createLogger } from \"./lib/logger.js\";\nimport type { AgentConfig } from \"./tool-router.js\";\n\nconst log = createLogger(\"server-helpers\");\n\n// ============================================================================\n// CONSTANTS (exported for use by other modules)\n// ============================================================================\n\nconst ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY!;\nconst ALLOWED_ORIGINS = (process.env.ALLOWED_ORIGINS || \"http://localhost:3000,http://127.0.0.1:3000\").split(\",\").map(s => s.trim());\n\n// ============================================================================\n// TYPES (exported)\n// ============================================================================\n\nexport interface ServerContext {\n  supabase: import(\"@supabase/supabase-js\").SupabaseClient;\n  corsHeaders: Record<string, string>;\n  url: URL;\n  pathname: string;\n  body?: any;\n  clientIp?: string;\n}\n\nexport interface StreamEvent {\n  type: \"text\" | \"tool_start\" | \"tool_result\" | \"tool_progress\" | \"error\" | \"done\" | \"usage\" | \"subagent\";\n  text?: string;\n  name?: string;\n  input?: Record<string, unknown>;\n  result?: unknown;\n  success?: boolean;\n  error?: string;\n  progress?: unknown;\n  usage?: {\n    input_tokens: number;\n    output_tokens: number;\n    cache_creation_tokens?: number;\n    cache_read_tokens?: number;\n    cost_usd?: number;\n  };\n  conversationId?: string;\n  subagentId?: string;\n  subagentEvent?: string;\n}\n\n// ============================================================================\n// TIMING-SAFE COMPARISON\n// ============================================================================\n\n/** Timing-safe secret comparison — hash both to fixed length to avoid leaking secret length */\nexport function safeCompare(a: string, b: string): boolean {\n  if (!a || !b) return false;\n  const hashA = createHash(\"sha256\").update(a).digest();\n  const hashB = createHash(\"sha256\").update(b).digest();\n  return timingSafeEqual(hashA, hashB);\n}\n\n// ============================================================================\n// CORS\n// ============================================================================\n\nexport function getCorsHeaders(origin?: string): Record<string, string> {\n  const headers: Record<string, string> = {\n    \"X-Content-Type-Options\": \"nosniff\",\n    \"X-Frame-Options\": \"DENY\",\n    \"X-XSS-Protection\": \"0\",\n    \"Referrer-Policy\": \"strict-origin-when-cross-origin\",\n  };\n\n  if (ALLOWED_ORIGINS.includes(\"*\")) {\n    headers[\"Access-Control-Allow-Origin\"] = \"*\";\n  } else if (origin && ALLOWED_ORIGINS.includes(origin)) {\n    headers[\"Access-Control-Allow-Origin\"] = origin;\n    headers[\"Vary\"] = \"Origin\";\n  }\n\n  headers[\"Access-Control-Allow-Methods\"] = \"GET, POST, OPTIONS\";\n  headers[\"Access-Control-Allow-Headers\"] = \"Content-Type, Authorization, X-Store-Id\";\n  return headers;\n}\n\n// ============================================================================\n// JSON & SSE RESPONSE HELPERS\n// ============================================================================\n\nexport function jsonResponse(res: http.ServerResponse, status: number, data: unknown, corsHeaders: Record<string, string>): void {\n  res.writeHead(status, { \"Content-Type\": \"application/json\", ...corsHeaders });\n  res.end(JSON.stringify(data));\n}\n\nexport function sendSSE(res: http.ServerResponse, event: StreamEvent): void {\n  try {\n    if (res.destroyed || res.writableEnded) return;\n    res.write(`data: ${JSON.stringify(event)}\\n\\n`);\n  } catch { /* client disconnected — benign */ }\n}\n\nexport function getAnthropicClient(agent: AgentConfig): Anthropic {\n  const key = agent.api_key || ANTHROPIC_API_KEY;\n  return new Anthropic({ apiKey: key, timeout: 15 * 60 * 1000 }); // 15 min for tool-heavy requests\n}\n\n// ============================================================================\n// REQUEST BODY READING\n// ============================================================================\n\n/**\n * Strip large base64 data fields from a JSON string up to `keepFrom` offset.\n * Uses a linear indexOf scan — safe on strings of any size (no regex stack overflow).\n */\nexport function stripLargeBase64Fields(raw: string, keepFrom: number): string {\n  const MIN_DATA_LEN = 8_000;\n\n  // Pass 1: Strip \"data\":\"<large base64>\" fields (Anthropic image source blocks)\n  let result = raw;\n  {\n    const DATA_MARKER = '\"data\":\"';\n    const parts: string[] = [];\n    let pos = 0;\n\n    while (pos < keepFrom) {\n      const idx = result.indexOf(DATA_MARKER, pos);\n      if (idx === -1 || idx >= keepFrom) {\n        parts.push(result.slice(pos, keepFrom));\n        pos = keepFrom;\n        break;\n      }\n\n      parts.push(result.slice(pos, idx + DATA_MARKER.length));\n      pos = idx + DATA_MARKER.length;\n\n      let end = pos;\n      while (end < result.length && result[end] !== '\"') end++;\n\n      if (end - pos >= MIN_DATA_LEN && end <= keepFrom) {\n        parts.push('\"');\n        pos = end + 1;\n      }\n    }\n\n    parts.push(result.slice(keepFrom));\n    result = parts.join(\"\");\n  }\n\n  // Pass 2: Strip __IMAGE__<mime>__<large base64> text markers\n  {\n    const IMG_MARKER = \"__IMAGE__\";\n    const adjustedKeepFrom = Math.min(keepFrom, result.length);\n    const parts: string[] = [];\n    let pos = 0;\n\n    while (pos < adjustedKeepFrom) {\n      const idx = result.indexOf(IMG_MARKER, pos);\n      if (idx === -1 || idx >= adjustedKeepFrom) {\n        parts.push(result.slice(pos, adjustedKeepFrom));\n        pos = adjustedKeepFrom;\n        break;\n      }\n\n      parts.push(result.slice(pos, idx));\n\n      let end = idx;\n      while (end < result.length && result[end] !== '\"') end++;\n\n      if (end - idx >= MIN_DATA_LEN && end <= adjustedKeepFrom) {\n        parts.push(\"[image pruned]\");\n        pos = end;\n      } else {\n        parts.push(result.slice(idx, idx + IMG_MARKER.length));\n        pos = idx + IMG_MARKER.length;\n      }\n    }\n\n    parts.push(result.slice(adjustedKeepFrom));\n    result = parts.join(\"\");\n  }\n\n  return result;\n}\n\nexport async function readBody(req: http.IncomingMessage): Promise<string> {\n  const MAX_BODY = 524_288_000; // 500MB\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let size = 0;\n    let rejected = false;\n    req.on(\"data\", (chunk: Buffer) => {\n      size += chunk.length;\n      if (size > MAX_BODY && !rejected) {\n        rejected = true;\n        req.resume();\n        reject(new Error(\"Request body too large (max 500MB)\"));\n        return;\n      }\n      if (!rejected) chunks.push(chunk);\n    });\n    req.on(\"end\", () => {\n      if (rejected) return;\n\n      const declaredLen = parseInt(req.headers[\"content-length\"] || \"0\", 10);\n      if (declaredLen > 0 && size < declaredLen) {\n        log.error({ declaredLen, receivedLen: size }, \"Request body truncated during transmission\");\n        reject(new Error(`Body truncated: expected ${declaredLen} bytes, got ${size}`));\n        return;\n      }\n\n      let raw = Buffer.concat(chunks).toString(\"utf8\");\n\n      if (raw.length > 1_000_000) {\n        const keepFrom = Math.max(0, raw.length - 1_048_576);\n        raw = stripLargeBase64Fields(raw, keepFrom);\n        log.info({ originalBytes: size, prunedBytes: Buffer.byteLength(raw) }, \"Pruned old base64 data from request body\");\n      }\n\n      resolve(raw);\n    });\n    req.on(\"error\", reject);\n  });\n}\n\n// ============================================================================\n// HISTORY COMPACTION\n// ============================================================================\n\n/**\n * Compact conversation history to fit within a total character budget.\n * Only enforces a total budget by walking newest-to-oldest and\n * dropping the oldest messages that don't fit.\n */\nexport function compactHistory(\n  history: Anthropic.MessageParam[],\n  maxHistoryChars: number,\n): Anthropic.MessageParam[] {\n  if (!history?.length) return [];\n  let totalChars = 0;\n  const compacted: Anthropic.MessageParam[] = [];\n  for (let i = history.length - 1; i >= 0; i--) {\n    const msg = history[i];\n    const msgChars = JSON.stringify(msg.content).length;\n    if (totalChars + msgChars > maxHistoryChars) break;\n    totalChars += msgChars;\n    compacted.unshift(msg);\n  }\n  while (compacted.length > 0 && compacted[0].role !== \"user\") compacted.shift();\n  return compacted;\n}\n"],"mappings":"AAAA;AACA;;AAGA,SAASA,eAAe,EAAEC,UAAU,QAAQ,aAAa;AACzD,OAAOC,SAAS,MAAM,mBAAmB;AACzC,SAASC,YAAY,QAAQ,iBAAiB;AAG9C,MAAMC,GAAG,GAAGD,YAAY,CAAC,gBAAgB,CAAC;;AAE1C;AACA;AACA;;AAEA,MAAME,iBAAiB,GAAGC,OAAO,CAACC,GAAG,CAACF,iBAAkB;AACxD,MAAMG,eAAe,GAAG,CAACF,OAAO,CAACC,GAAG,CAACC,eAAe,IAAI,6CAA6C,EAAEC,KAAK,CAAC,GAAG,CAAC,CAACC,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACC,IAAI,CAAC,CAAC,CAAC;;AAEpI;AACA;AACA;;AAgCA;AACA;AACA;;AAEA;AACA,OAAO,SAASC,WAAWA,CAACC,CAAS,EAAEC,CAAS,EAAW;EACzD,IAAI,CAACD,CAAC,IAAI,CAACC,CAAC,EAAE,OAAO,KAAK;EAC1B,MAAMC,KAAK,GAAGf,UAAU,CAAC,QAAQ,CAAC,CAACgB,MAAM,CAACH,CAAC,CAAC,CAACI,MAAM,CAAC,CAAC;EACrD,MAAMC,KAAK,GAAGlB,UAAU,CAAC,QAAQ,CAAC,CAACgB,MAAM,CAACF,CAAC,CAAC,CAACG,MAAM,CAAC,CAAC;EACrD,OAAOlB,eAAe,CAACgB,KAAK,EAAEG,KAAK,CAAC;AACtC;;AAEA;AACA;AACA;;AAEA,OAAO,SAASC,cAAcA,CAACC,MAAe,EAA0B;EACtE,MAAMC,OAA+B,GAAG;IACtC,wBAAwB,EAAE,SAAS;IACnC,iBAAiB,EAAE,MAAM;IACzB,kBAAkB,EAAE,GAAG;IACvB,iBAAiB,EAAE;EACrB,CAAC;EAED,IAAId,eAAe,CAACe,QAAQ,CAAC,GAAG,CAAC,EAAE;IACjCD,OAAO,CAAC,6BAA6B,CAAC,GAAG,GAAG;EAC9C,CAAC,MAAM,IAAID,MAAM,IAAIb,eAAe,CAACe,QAAQ,CAACF,MAAM,CAAC,EAAE;IACrDC,OAAO,CAAC,6BAA6B,CAAC,GAAGD,MAAM;IAC/CC,OAAO,CAAC,MAAM,CAAC,GAAG,QAAQ;EAC5B;EAEAA,OAAO,CAAC,8BAA8B,CAAC,GAAG,oBAAoB;EAC9DA,OAAO,CAAC,8BAA8B,CAAC,GAAG,yCAAyC;EACnF,OAAOA,OAAO;AAChB;;AAEA;AACA;AACA;;AAEA,OAAO,SAASE,YAAYA,CAACC,GAAwB,EAAEC,MAAc,EAAEC,IAAa,EAAEC,WAAmC,EAAQ;EAC/HH,GAAG,CAACI,SAAS,CAACH,MAAM,EAAE;IAAE,cAAc,EAAE,kBAAkB;IAAE,GAAGE;EAAY,CAAC,CAAC;EAC7EH,GAAG,CAACK,GAAG,CAACC,IAAI,CAACC,SAAS,CAACL,IAAI,CAAC,CAAC;AAC/B;AAEA,OAAO,SAASM,OAAOA,CAACR,GAAwB,EAAES,KAAkB,EAAQ;EAC1E,IAAI;IACF,IAAIT,GAAG,CAACU,SAAS,IAAIV,GAAG,CAACW,aAAa,EAAE;IACxCX,GAAG,CAACY,KAAK,CAAC,SAASN,IAAI,CAACC,SAAS,CAACE,KAAK,CAAC,MAAM,CAAC;EACjD,CAAC,CAAC,MAAM,CAAE;AACZ;AAEA,OAAO,SAASI,kBAAkBA,CAACC,KAAkB,EAAa;EAChE,MAAMC,GAAG,GAAGD,KAAK,CAACE,OAAO,IAAIpC,iBAAiB;EAC9C,OAAO,IAAIH,SAAS,CAAC;IAAEwC,MAAM,EAAEF,GAAG;IAAEG,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG;EAAK,CAAC,CAAC,CAAC,CAAC;AAClE;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASC,sBAAsBA,CAACC,GAAW,EAAEC,QAAgB,EAAU;EAC5E,MAAMC,YAAY,GAAG,KAAK;;EAE1B;EACA,IAAIC,MAAM,GAAGH,GAAG;EAChB;IACE,MAAMI,WAAW,GAAG,UAAU;IAC9B,MAAMC,KAAe,GAAG,EAAE;IAC1B,IAAIC,GAAG,GAAG,CAAC;IAEX,OAAOA,GAAG,GAAGL,QAAQ,EAAE;MACrB,MAAMM,GAAG,GAAGJ,MAAM,CAACK,OAAO,CAACJ,WAAW,EAAEE,GAAG,CAAC;MAC5C,IAAIC,GAAG,KAAK,CAAC,CAAC,IAAIA,GAAG,IAAIN,QAAQ,EAAE;QACjCI,KAAK,CAACI,IAAI,CAACN,MAAM,CAACO,KAAK,CAACJ,GAAG,EAAEL,QAAQ,CAAC,CAAC;QACvCK,GAAG,GAAGL,QAAQ;QACd;MACF;MAEAI,KAAK,CAACI,IAAI,CAACN,MAAM,CAACO,KAAK,CAACJ,GAAG,EAAEC,GAAG,GAAGH,WAAW,CAACO,MAAM,CAAC,CAAC;MACvDL,GAAG,GAAGC,GAAG,GAAGH,WAAW,CAACO,MAAM;MAE9B,IAAI1B,GAAG,GAAGqB,GAAG;MACb,OAAOrB,GAAG,GAAGkB,MAAM,CAACQ,MAAM,IAAIR,MAAM,CAAClB,GAAG,CAAC,KAAK,GAAG,EAAEA,GAAG,EAAE;MAExD,IAAIA,GAAG,GAAGqB,GAAG,IAAIJ,YAAY,IAAIjB,GAAG,IAAIgB,QAAQ,EAAE;QAChDI,KAAK,CAACI,IAAI,CAAC,GAAG,CAAC;QACfH,GAAG,GAAGrB,GAAG,GAAG,CAAC;MACf;IACF;IAEAoB,KAAK,CAACI,IAAI,CAACN,MAAM,CAACO,KAAK,CAACT,QAAQ,CAAC,CAAC;IAClCE,MAAM,GAAGE,KAAK,CAACO,IAAI,CAAC,EAAE,CAAC;EACzB;;EAEA;EACA;IACE,MAAMC,UAAU,GAAG,WAAW;IAC9B,MAAMC,gBAAgB,GAAGC,IAAI,CAACC,GAAG,CAACf,QAAQ,EAAEE,MAAM,CAACQ,MAAM,CAAC;IAC1D,MAAMN,KAAe,GAAG,EAAE;IAC1B,IAAIC,GAAG,GAAG,CAAC;IAEX,OAAOA,GAAG,GAAGQ,gBAAgB,EAAE;MAC7B,MAAMP,GAAG,GAAGJ,MAAM,CAACK,OAAO,CAACK,UAAU,EAAEP,GAAG,CAAC;MAC3C,IAAIC,GAAG,KAAK,CAAC,CAAC,IAAIA,GAAG,IAAIO,gBAAgB,EAAE;QACzCT,KAAK,CAACI,IAAI,CAACN,MAAM,CAACO,KAAK,CAACJ,GAAG,EAAEQ,gBAAgB,CAAC,CAAC;QAC/CR,GAAG,GAAGQ,gBAAgB;QACtB;MACF;MAEAT,KAAK,CAACI,IAAI,CAACN,MAAM,CAACO,KAAK,CAACJ,GAAG,EAAEC,GAAG,CAAC,CAAC;MAElC,IAAItB,GAAG,GAAGsB,GAAG;MACb,OAAOtB,GAAG,GAAGkB,MAAM,CAACQ,MAAM,IAAIR,MAAM,CAAClB,GAAG,CAAC,KAAK,GAAG,EAAEA,GAAG,EAAE;MAExD,IAAIA,GAAG,GAAGsB,GAAG,IAAIL,YAAY,IAAIjB,GAAG,IAAI6B,gBAAgB,EAAE;QACxDT,KAAK,CAACI,IAAI,CAAC,gBAAgB,CAAC;QAC5BH,GAAG,GAAGrB,GAAG;MACX,CAAC,MAAM;QACLoB,KAAK,CAACI,IAAI,CAACN,MAAM,CAACO,KAAK,CAACH,GAAG,EAAEA,GAAG,GAAGM,UAAU,CAACF,MAAM,CAAC,CAAC;QACtDL,GAAG,GAAGC,GAAG,GAAGM,UAAU,CAACF,MAAM;MAC/B;IACF;IAEAN,KAAK,CAACI,IAAI,CAACN,MAAM,CAACO,KAAK,CAACI,gBAAgB,CAAC,CAAC;IAC1CX,MAAM,GAAGE,KAAK,CAACO,IAAI,CAAC,EAAE,CAAC;EACzB;EAEA,OAAOT,MAAM;AACf;AAEA,OAAO,eAAec,QAAQA,CAACC,GAAyB,EAAmB;EACzE,MAAMC,QAAQ,GAAG,WAAW,CAAC,CAAC;EAC9B,OAAO,IAAIC,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACtC,MAAMC,MAAgB,GAAG,EAAE;IAC3B,IAAIC,IAAI,GAAG,CAAC;IACZ,IAAIC,QAAQ,GAAG,KAAK;IACpBP,GAAG,CAACQ,EAAE,CAAC,MAAM,EAAGC,KAAa,IAAK;MAChCH,IAAI,IAAIG,KAAK,CAAChB,MAAM;MACpB,IAAIa,IAAI,GAAGL,QAAQ,IAAI,CAACM,QAAQ,EAAE;QAChCA,QAAQ,GAAG,IAAI;QACfP,GAAG,CAACU,MAAM,CAAC,CAAC;QACZN,MAAM,CAAC,IAAIO,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD;MACF;MACA,IAAI,CAACJ,QAAQ,EAAEF,MAAM,CAACd,IAAI,CAACkB,KAAK,CAAC;IACnC,CAAC,CAAC;IACFT,GAAG,CAACQ,EAAE,CAAC,KAAK,EAAE,MAAM;MAClB,IAAID,QAAQ,EAAE;MAEd,MAAMK,WAAW,GAAGC,QAAQ,CAACb,GAAG,CAACzC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;MACtE,IAAIqD,WAAW,GAAG,CAAC,IAAIN,IAAI,GAAGM,WAAW,EAAE;QACzCvE,GAAG,CAACyE,KAAK,CAAC;UAAEF,WAAW;UAAEG,WAAW,EAAET;QAAK,CAAC,EAAE,4CAA4C,CAAC;QAC3FF,MAAM,CAAC,IAAIO,KAAK,CAAC,4BAA4BC,WAAW,eAAeN,IAAI,EAAE,CAAC,CAAC;QAC/E;MACF;MAEA,IAAIxB,GAAG,GAAGkC,MAAM,CAACC,MAAM,CAACZ,MAAM,CAAC,CAACa,QAAQ,CAAC,MAAM,CAAC;MAEhD,IAAIpC,GAAG,CAACW,MAAM,GAAG,SAAS,EAAE;QAC1B,MAAMV,QAAQ,GAAGc,IAAI,CAACsB,GAAG,CAAC,CAAC,EAAErC,GAAG,CAACW,MAAM,GAAG,SAAS,CAAC;QACpDX,GAAG,GAAGD,sBAAsB,CAACC,GAAG,EAAEC,QAAQ,CAAC;QAC3C1C,GAAG,CAAC+E,IAAI,CAAC;UAAEC,aAAa,EAAEf,IAAI;UAAEgB,WAAW,EAAEN,MAAM,CAACO,UAAU,CAACzC,GAAG;QAAE,CAAC,EAAE,0CAA0C,CAAC;MACpH;MAEAqB,OAAO,CAACrB,GAAG,CAAC;IACd,CAAC,CAAC;IACFkB,GAAG,CAACQ,EAAE,CAAC,OAAO,EAAEJ,MAAM,CAAC;EACzB,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASoB,cAAcA,CAC5BC,OAAiC,EACjCC,eAAuB,EACG;EAC1B,IAAI,CAACD,OAAO,EAAEhC,MAAM,EAAE,OAAO,EAAE;EAC/B,IAAIkC,UAAU,GAAG,CAAC;EAClB,MAAMC,SAAmC,GAAG,EAAE;EAC9C,KAAK,IAAIC,CAAC,GAAGJ,OAAO,CAAChC,MAAM,GAAG,CAAC,EAAEoC,CAAC,IAAI,CAAC,EAAEA,CAAC,EAAE,EAAE;IAC5C,MAAMC,GAAG,GAAGL,OAAO,CAACI,CAAC,CAAC;IACtB,MAAME,QAAQ,GAAG/D,IAAI,CAACC,SAAS,CAAC6D,GAAG,CAACE,OAAO,CAAC,CAACvC,MAAM;IACnD,IAAIkC,UAAU,GAAGI,QAAQ,GAAGL,eAAe,EAAE;IAC7CC,UAAU,IAAII,QAAQ;IACtBH,SAAS,CAACK,OAAO,CAACH,GAAG,CAAC;EACxB;EACA,OAAOF,SAAS,CAACnC,MAAM,GAAG,CAAC,IAAImC,SAAS,CAAC,CAAC,CAAC,CAACM,IAAI,KAAK,MAAM,EAAEN,SAAS,CAACO,KAAK,CAAC,CAAC;EAC9E,OAAOP,SAAS;AAClB","ignoreList":[]}

package/dist/server/server-persist.d.ts

@@ -0,0 +1,43 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+import type { AgentConfig } from "./tool-router.js";
+import type { SenderContext } from "./handlers/nodes.js";
+/** Persist everything after an agent turn — messages, audit, memory, cost.
+ *  Called by both SSE chat and channel paths so nothing is ever missed. */
+export declare function persistAgentTurn(supabase: SupabaseClient, agent: AgentConfig, opts: {
+    conversationId: string;
+    storeId?: string;
+    agentId: string;
+    agentModel: string;
+    traceId: string;
+    message: string;
+    result: {
+        finalText: string;
+        toolCallCount: number;
+        toolsUsed: string[];
+        tokens: {
+            input: number;
+            output: number;
+            cacheCreation?: number;
+            cacheRead?: number;
+        };
+        costUsd: number;
+        turnCount?: number;
+        loopDetectorStats?: any;
+        turns?: Array<{
+            turn: number;
+            inputTokens: number;
+            outputTokens: number;
+            cacheRead: number;
+            cacheCreation: number;
+            toolsUsed: string[];
+            costUsd: number;
+        }>;
+        stopReason?: string;
+    };
+    source: string;
+    chatStartTime: number;
+    chatEndTime: number;
+    userId?: string;
+    userEmail?: string | null;
+    senderContext?: SenderContext;
+}): Promise<void>;

package/dist/server/server-persist.js

@@ -0,0 +1,249 @@
+// server/server-persist.ts — Agent turn persistence (messages, telemetry, memory, cost)
+// Extracted from server-agent.ts to keep each module under 300 lines.
+
+import { createLogger } from "./lib/logger.js";
+import { queueSpan, auditRowToSpan, classifyErrorType } from "./lib/clickhouse-buffer.js";
+import { getAnthropicClient } from "./server-helpers.js";
+import { extractAndStoreMemories, updateCostBudgets } from "./server-agent.js";
+import { invalidateCostCache } from "./server-cost-guard.js";
+const log = createLogger("server-persist");
+
+// ============================================================================
+// PERSIST AGENT TURN — messages, audit, memory, cost
+// ============================================================================
+
+/** Persist everything after an agent turn — messages, audit, memory, cost.
+ *  Called by both SSE chat and channel paths so nothing is ever missed. */
+export async function persistAgentTurn(supabase, agent, opts) {
+  const {
+    conversationId,
+    storeId,
+    agentId,
+    agentModel,
+    traceId,
+    message,
+    result,
+    source,
+    chatStartTime,
+    chatEndTime,
+    userId,
+    userEmail,
+    senderContext
+  } = opts;
+
+  // Persist user + assistant messages
+  try {
+    await supabase.from("ai_messages").insert([{
+      conversation_id: conversationId,
+      role: "user",
+      content: [{
+        type: "text",
+        text: message
+      }],
+      token_count: Math.ceil(message.length / 4)
+    }, {
+      conversation_id: conversationId,
+      role: "assistant",
+      content: [{
+        type: "text",
+        text: result.finalText || ""
+      }],
+      is_tool_use: result.toolCallCount > 0,
+      tool_names: result.toolsUsed?.length ? result.toolsUsed : null,
+      token_count: result.tokens.input + result.tokens.output
+    }]);
+  } catch (err) {
+    log.error({
+      err: err.message
+    }, "message persist failed");
+  }
+
+  // Update conversation metadata
+  try {
+    await supabase.from("ai_conversations").update({
+      metadata: {
+        agentName: agent.name,
+        source,
+        model: agentModel,
+        lastTurnTokens: result.tokens.input + result.tokens.output,
+        lastToolCalls: result.toolCallCount,
+        lastDurationMs: chatEndTime - chatStartTime,
+        ...(senderContext ? {
+          channel_type: senderContext.channelType || null,
+          channel_id: senderContext.channelId || null,
+          channel_name: senderContext.channelName || null,
+          sender_id: senderContext.senderId || null,
+          customer_id: senderContext.customerId || null,
+          customer_name: senderContext.customerName || null
+        } : {})
+      }
+    }).eq("id", conversationId);
+  } catch (err) {
+    log.error({
+      err: err.message
+    }, "conversation update failed");
+  }
+
+  // Telemetry: user message
+  try {
+    queueSpan(auditRowToSpan({
+      action: "chat.user_message",
+      severity: "info",
+      store_id: storeId || null,
+      resource_type: "chat_message",
+      resource_id: agentId,
+      request_id: traceId,
+      conversation_id: conversationId,
+      user_id: userId || null,
+      user_email: userEmail || null,
+      source,
+      service_name: "agent-server",
+      span_kind: "INTERNAL",
+      status_code: "OK",
+      start_time: new Date().toISOString(),
+      end_time: new Date().toISOString(),
+      duration_ms: 0,
+      input_bytes: typeof message === "string" ? message.length : 0,
+      details: {
+        message_preview: message.substring(0, 200),
+        agent_id: agentId,
+        model: agentModel,
+        conversation_id: conversationId,
+        ...(senderContext ? {
+          channel_type: senderContext.channelType || null,
+          sender_id: senderContext.senderId || null,
+          customer_id: senderContext.customerId || null
+        } : {})
+      }
+    }));
+  } catch (err) {
+    log.error({
+      err: err.message
+    }, "audit user_message failed");
+  }
+
+  // Telemetry: assistant response
+  try {
+    queueSpan(auditRowToSpan({
+      action: "chat.assistant_response",
+      severity: "info",
+      store_id: storeId || null,
+      resource_type: "chat_message",
+      resource_id: agentId,
+      request_id: traceId,
+      conversation_id: conversationId,
+      duration_ms: chatEndTime - chatStartTime,
+      user_id: userId || null,
+      user_email: userEmail || null,
+      source,
+      input_tokens: result.tokens.input,
+      output_tokens: result.tokens.output,
+      total_cost: result.costUsd,
+      model: agentModel,
+      trace_id: traceId,
+      span_kind: "INTERNAL",
+      service_name: "agent-server",
+      status_code: "OK",
+      start_time: new Date(chatStartTime).toISOString(),
+      end_time: new Date(chatEndTime).toISOString(),
+      stop_reason: result.stopReason || undefined,
+      turn_number: result.turnCount || 1,
+      details: {
+        response_preview: (result.finalText || "").substring(0, 500),
+        agent_id: agentId,
+        model: agentModel,
+        "gen_ai.request.model": agentModel,
+        "gen_ai.usage.input_tokens": result.tokens.input,
+        "gen_ai.usage.output_tokens": result.tokens.output,
+        "gen_ai.usage.cache_creation_tokens": result.tokens.cacheCreation || 0,
+        "gen_ai.usage.cache_read_tokens": result.tokens.cacheRead || 0,
+        "gen_ai.usage.cost": result.costUsd,
+        turn_count: result.turnCount || 1,
+        tool_calls: result.toolCallCount,
+        tool_names: result.toolsUsed,
+        conversation_id: conversationId,
+        session_cost_usd: result.costUsd,
+        cache_creation_tokens: result.tokens.cacheCreation || 0,
+        cache_read_tokens: result.tokens.cacheRead || 0,
+        cache_hit_rate: result.tokens.input > 0 ? Math.round((result.tokens.cacheRead || 0) / ((result.tokens.cacheRead || 0) + result.tokens.input) * 10000) / 100 : 0,
+        cache_cost_savings_pct: result.tokens.input > 0 && (result.tokens.cacheRead || 0) > 0 ? Math.round((result.tokens.cacheRead || 0) * 0.9 / ((result.tokens.cacheRead || 0) + result.tokens.input) * 10000) / 100 : 0,
+        loop_detector_stats: result.loopDetectorStats || null,
+        turns: result.turns || [],
+        ...(senderContext ? {
+          channel_type: senderContext.channelType || null,
+          channel_id: senderContext.channelId || null,
+          channel_name: senderContext.channelName || null,
+          sender_id: senderContext.senderId || null,
+          customer_id: senderContext.customerId || null,
+          customer_name: senderContext.customerName || null
+        } : {})
+      }
+    }));
+  } catch (err) {
+    log.error({
+      err: err.message
+    }, "audit assistant_response failed");
+  }
+
+  // Memory extraction — awaited with retry
+  if (storeId && result.finalText && result.finalText.length > 50) {
+    try {
+      await extractAndStoreMemories(supabase, getAnthropicClient(agent), agentId, storeId, message, result.finalText);
+    } catch (err1) {
+      try {
+        await new Promise(r => setTimeout(r, 2000));
+        await extractAndStoreMemories(supabase, getAnthropicClient(agent), agentId, storeId, message, result.finalText);
+      } catch (err2) {
+        log.error({
+          err: err2.message
+        }, "memory extract failed after retry");
+        queueSpan(auditRowToSpan({
+          action: "memory.extraction_failed",
+          severity: "warning",
+          store_id: storeId || null,
+          resource_type: "agent_memory",
+          resource_id: agentId,
+          conversation_id: conversationId,
+          user_id: userId || null,
+          user_email: userEmail || null,
+          error_type: classifyErrorType(err2.message) || undefined,
+          service_name: "agent-server",
+          span_kind: "INTERNAL",
+          status_code: "ERROR",
+          start_time: new Date().toISOString(),
+          end_time: new Date().toISOString(),
+          error_message: err2.message,
+          details: {
+            error: err2.message,
+            user_message_preview: message.substring(0, 100)
+          }
+        }));
+      }
+    }
+  }
+
+  // Cost budget tracking — awaited with retry
+  if (storeId && result.costUsd > 0) {
+    try {
+      await updateCostBudgets(supabase, storeId, agentId, result.costUsd);
+      invalidateCostCache(storeId, agentId);
+    } catch (err1) {
+      try {
+        await new Promise(r => setTimeout(r, 1000));
+        await updateCostBudgets(supabase, storeId, agentId, result.costUsd);
+        invalidateCostCache(storeId, agentId);
+      } catch (err2) {
+        log.error({
+          err: err2.message
+        }, "cost budget update failed after retry");
+        await supabase.from("ai_conversations").update({
+          metadata: {
+            budget_sync_failed: true,
+            failed_cost_usd: result.costUsd
+          }
+        }).eq("id", conversationId).then(() => {});
+      }
+    }
+  }
+}
+//# sourceMappingURL=server-persist.js.map

package/dist/server/server-persist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-persist.js","names":["createLogger","queueSpan","auditRowToSpan","classifyErrorType","getAnthropicClient","extractAndStoreMemories","updateCostBudgets","invalidateCostCache","log","persistAgentTurn","supabase","agent","opts","conversationId","storeId","agentId","agentModel","traceId","message","result","source","chatStartTime","chatEndTime","userId","userEmail","senderContext","from","insert","conversation_id","role","content","type","text","token_count","Math","ceil","length","finalText","is_tool_use","toolCallCount","tool_names","toolsUsed","tokens","input","output","err","error","update","metadata","agentName","name","model","lastTurnTokens","lastToolCalls","lastDurationMs","channel_type","channelType","channel_id","channelId","channel_name","channelName","sender_id","senderId","customer_id","customerId","customer_name","customerName","eq","action","severity","store_id","resource_type","resource_id","request_id","user_id","user_email","service_name","span_kind","status_code","start_time","Date","toISOString","end_time","duration_ms","input_bytes","details","message_preview","substring","agent_id","input_tokens","output_tokens","total_cost","costUsd","trace_id","stop_reason","stopReason","undefined","turn_number","turnCount","response_preview","cacheCreation","cacheRead","turn_count","tool_calls","session_cost_usd","cache_creation_tokens","cache_read_tokens","cache_hit_rate","round","cache_cost_savings_pct","loop_detector_stats","loopDetectorStats","turns","err1","Promise","r","setTimeout","err2","error_type","error_message","user_message_preview","budget_sync_failed","failed_cost_usd","then"],"sources":["../../src/server/server-persist.ts"],"sourcesContent":["// server/server-persist.ts — Agent turn persistence (messages, telemetry, memory, cost)\n// Extracted from server-agent.ts to keep each module under 300 lines.\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createLogger } from \"./lib/logger.js\";\nimport { queueSpan, auditRowToSpan, classifyErrorType } from \"./lib/clickhouse-buffer.js\";\nimport type { AgentConfig } from \"./tool-router.js\";\nimport type { SenderContext } from \"./handlers/nodes.js\";\nimport { getAnthropicClient } from \"./server-helpers.js\";\nimport { extractAndStoreMemories, updateCostBudgets } from \"./server-agent.js\";\nimport { invalidateCostCache } from \"./server-cost-guard.js\";\n\nconst log = createLogger(\"server-persist\");\n\n// ============================================================================\n// PERSIST AGENT TURN — messages, audit, memory, cost\n// ============================================================================\n\n/** Persist everything after an agent turn — messages, audit, memory, cost.\n *  Called by both SSE chat and channel paths so nothing is ever missed. */\nexport async function persistAgentTurn(\n  supabase: SupabaseClient,\n  agent: AgentConfig,\n  opts: {\n    conversationId: string;\n    storeId?: string;\n    agentId: string;\n    agentModel: string;\n    traceId: string;\n    message: string;\n    result: { finalText: string; toolCallCount: number; toolsUsed: string[]; tokens: { input: number; output: number; cacheCreation?: number; cacheRead?: number }; costUsd: number; turnCount?: number; loopDetectorStats?: any; turns?: Array<{ turn: number; inputTokens: number; outputTokens: number; cacheRead: number; cacheCreation: number; toolsUsed: string[]; costUsd: number }>; stopReason?: string };\n    source: string;\n    chatStartTime: number;\n    chatEndTime: number;\n    userId?: string;\n    userEmail?: string | null;\n    senderContext?: SenderContext;\n  },\n): Promise<void> {\n  const { conversationId, storeId, agentId, agentModel, traceId, message, result, source, chatStartTime, chatEndTime, userId, userEmail, senderContext } = opts;\n\n  // Persist user + assistant messages\n  try {\n    await supabase.from(\"ai_messages\").insert([\n      {\n        conversation_id: conversationId, role: \"user\",\n        content: [{ type: \"text\", text: message }],\n        token_count: Math.ceil(message.length / 4),\n      },\n      {\n        conversation_id: conversationId, role: \"assistant\",\n        content: [{ type: \"text\", text: result.finalText || \"\" }],\n        is_tool_use: result.toolCallCount > 0,\n        tool_names: result.toolsUsed?.length ? result.toolsUsed : null,\n        token_count: result.tokens.input + result.tokens.output,\n      },\n    ]);\n  } catch (err) {\n    log.error({ err: (err as Error).message }, \"message persist failed\");\n  }\n\n  // Update conversation metadata\n  try {\n    await supabase.from(\"ai_conversations\").update({\n      metadata: {\n        agentName: agent.name,\n        source,\n        model: agentModel,\n        lastTurnTokens: result.tokens.input + result.tokens.output,\n        lastToolCalls: result.toolCallCount,\n        lastDurationMs: chatEndTime - chatStartTime,\n        ...(senderContext ? {\n          channel_type: senderContext.channelType || null,\n          channel_id: senderContext.channelId || null,\n          channel_name: senderContext.channelName || null,\n          sender_id: senderContext.senderId || null,\n          customer_id: senderContext.customerId || null,\n          customer_name: senderContext.customerName || null,\n        } : {}),\n      },\n    }).eq(\"id\", conversationId);\n  } catch (err) {\n    log.error({ err: (err as Error).message }, \"conversation update failed\");\n  }\n\n  // Telemetry: user message\n  try {\n    queueSpan(auditRowToSpan({\n      action: \"chat.user_message\", severity: \"info\",\n      store_id: storeId || null, resource_type: \"chat_message\",\n      resource_id: agentId, request_id: traceId,\n      conversation_id: conversationId,\n      user_id: userId || null, user_email: userEmail || null,\n      source, service_name: \"agent-server\", span_kind: \"INTERNAL\",\n      status_code: \"OK\",\n      start_time: new Date().toISOString(), end_time: new Date().toISOString(),\n      duration_ms: 0,\n      input_bytes: typeof message === \"string\" ? message.length : 0,\n      details: {\n        message_preview: message.substring(0, 200),\n        agent_id: agentId, model: agentModel,\n        conversation_id: conversationId,\n        ...(senderContext ? {\n          channel_type: senderContext.channelType || null,\n          sender_id: senderContext.senderId || null,\n          customer_id: senderContext.customerId || null,\n        } : {}),\n      },\n    }));\n  } catch (err) {\n    log.error({ err: (err as Error).message }, \"audit user_message failed\");\n  }\n\n  // Telemetry: assistant response\n  try {\n    queueSpan(auditRowToSpan({\n      action: \"chat.assistant_response\", severity: \"info\",\n      store_id: storeId || null, resource_type: \"chat_message\",\n      resource_id: agentId, request_id: traceId,\n      conversation_id: conversationId,\n      duration_ms: chatEndTime - chatStartTime,\n      user_id: userId || null, user_email: userEmail || null,\n      source,\n      input_tokens: result.tokens.input, output_tokens: result.tokens.output,\n      total_cost: result.costUsd, model: agentModel,\n      trace_id: traceId, span_kind: \"INTERNAL\",\n      service_name: \"agent-server\", status_code: \"OK\",\n      start_time: new Date(chatStartTime).toISOString(),\n      end_time: new Date(chatEndTime).toISOString(),\n      stop_reason: result.stopReason || undefined,\n      turn_number: result.turnCount || 1,\n      details: {\n        response_preview: (result.finalText || \"\").substring(0, 500),\n        agent_id: agentId, model: agentModel,\n        \"gen_ai.request.model\": agentModel,\n        \"gen_ai.usage.input_tokens\": result.tokens.input,\n        \"gen_ai.usage.output_tokens\": result.tokens.output,\n        \"gen_ai.usage.cache_creation_tokens\": result.tokens.cacheCreation || 0,\n        \"gen_ai.usage.cache_read_tokens\": result.tokens.cacheRead || 0,\n        \"gen_ai.usage.cost\": result.costUsd,\n        turn_count: result.turnCount || 1,\n        tool_calls: result.toolCallCount,\n        tool_names: result.toolsUsed,\n        conversation_id: conversationId,\n        session_cost_usd: result.costUsd,\n        cache_creation_tokens: result.tokens.cacheCreation || 0,\n        cache_read_tokens: result.tokens.cacheRead || 0,\n        cache_hit_rate: result.tokens.input > 0\n          ? Math.round((result.tokens.cacheRead || 0) / ((result.tokens.cacheRead || 0) + result.tokens.input) * 10000) / 100\n          : 0,\n        cache_cost_savings_pct: result.tokens.input > 0 && (result.tokens.cacheRead || 0) > 0\n          ? Math.round((result.tokens.cacheRead || 0) * 0.9 / ((result.tokens.cacheRead || 0) + result.tokens.input) * 10000) / 100\n          : 0,\n        loop_detector_stats: result.loopDetectorStats || null,\n        turns: result.turns || [],\n        ...(senderContext ? {\n          channel_type: senderContext.channelType || null,\n          channel_id: senderContext.channelId || null,\n          channel_name: senderContext.channelName || null,\n          sender_id: senderContext.senderId || null,\n          customer_id: senderContext.customerId || null,\n          customer_name: senderContext.customerName || null,\n        } : {}),\n      },\n    }));\n  } catch (err) {\n    log.error({ err: (err as Error).message }, \"audit assistant_response failed\");\n  }\n\n  // Memory extraction — awaited with retry\n  if (storeId && result.finalText && result.finalText.length > 50) {\n    try {\n      await extractAndStoreMemories(supabase, getAnthropicClient(agent), agentId, storeId, message, result.finalText);\n    } catch (err1: any) {\n      try {\n        await new Promise(r => setTimeout(r, 2000));\n        await extractAndStoreMemories(supabase, getAnthropicClient(agent), agentId, storeId, message, result.finalText);\n      } catch (err2: any) {\n        log.error({ err: err2.message }, \"memory extract failed after retry\");\n        queueSpan(auditRowToSpan({\n          action: \"memory.extraction_failed\", severity: \"warning\",\n          store_id: storeId || null, resource_type: \"agent_memory\",\n          resource_id: agentId, conversation_id: conversationId,\n          user_id: userId || null, user_email: userEmail || null,\n          error_type: classifyErrorType(err2.message) || undefined,\n          service_name: \"agent-server\", span_kind: \"INTERNAL\", status_code: \"ERROR\",\n          start_time: new Date().toISOString(), end_time: new Date().toISOString(),\n          error_message: err2.message,\n          details: { error: err2.message, user_message_preview: message.substring(0, 100) },\n        }));\n      }\n    }\n  }\n\n  // Cost budget tracking — awaited with retry\n  if (storeId && result.costUsd > 0) {\n    try {\n      await updateCostBudgets(supabase, storeId, agentId, result.costUsd);\n      invalidateCostCache(storeId, agentId);\n    } catch (err1: any) {\n      try {\n        await new Promise(r => setTimeout(r, 1000));\n        await updateCostBudgets(supabase, storeId, agentId, result.costUsd);\n        invalidateCostCache(storeId, agentId);\n      } catch (err2: any) {\n        log.error({ err: err2.message }, \"cost budget update failed after retry\");\n        await supabase.from(\"ai_conversations\").update({\n          metadata: { budget_sync_failed: true, failed_cost_usd: result.costUsd },\n        }).eq(\"id\", conversationId).then(() => {});\n      }\n    }\n  }\n}\n"],"mappings":"AAAA;AACA;;AAGA,SAASA,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,SAAS,EAAEC,cAAc,EAAEC,iBAAiB,QAAQ,4BAA4B;AAGzF,SAASC,kBAAkB,QAAQ,qBAAqB;AACxD,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,mBAAmB;AAC9E,SAASC,mBAAmB,QAAQ,wBAAwB;AAE5D,MAAMC,GAAG,GAAGR,YAAY,CAAC,gBAAgB,CAAC;;AAE1C;AACA;AACA;;AAEA;AACA;AACA,OAAO,eAAeS,gBAAgBA,CACpCC,QAAwB,EACxBC,KAAkB,EAClBC,IAcC,EACc;EACf,MAAM;IAAEC,cAAc;IAAEC,OAAO;IAAEC,OAAO;IAAEC,UAAU;IAAEC,OAAO;IAAEC,OAAO;IAAEC,MAAM;IAAEC,MAAM;IAAEC,aAAa;IAAEC,WAAW;IAAEC,MAAM;IAAEC,SAAS;IAAEC;EAAc,CAAC,GAAGb,IAAI;;EAE7J;EACA,IAAI;IACF,MAAMF,QAAQ,CAACgB,IAAI,CAAC,aAAa,CAAC,CAACC,MAAM,CAAC,CACxC;MACEC,eAAe,EAAEf,cAAc;MAAEgB,IAAI,EAAE,MAAM;MAC7CC,OAAO,EAAE,CAAC;QAAEC,IAAI,EAAE,MAAM;QAAEC,IAAI,EAAEd;MAAQ,CAAC,CAAC;MAC1Ce,WAAW,EAAEC,IAAI,CAACC,IAAI,CAACjB,OAAO,CAACkB,MAAM,GAAG,CAAC;IAC3C,CAAC,EACD;MACER,eAAe,EAAEf,cAAc;MAAEgB,IAAI,EAAE,WAAW;MAClDC,OAAO,EAAE,CAAC;QAAEC,IAAI,EAAE,MAAM;QAAEC,IAAI,EAAEb,MAAM,CAACkB,SAAS,IAAI;MAAG,CAAC,CAAC;MACzDC,WAAW,EAAEnB,MAAM,CAACoB,aAAa,GAAG,CAAC;MACrCC,UAAU,EAAErB,MAAM,CAACsB,SAAS,EAAEL,MAAM,GAAGjB,MAAM,CAACsB,SAAS,GAAG,IAAI;MAC9DR,WAAW,EAAEd,MAAM,CAACuB,MAAM,CAACC,KAAK,GAAGxB,MAAM,CAACuB,MAAM,CAACE;IACnD,CAAC,CACF,CAAC;EACJ,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZrC,GAAG,CAACsC,KAAK,CAAC;MAAED,GAAG,EAAGA,GAAG,CAAW3B;IAAQ,CAAC,EAAE,wBAAwB,CAAC;EACtE;;EAEA;EACA,IAAI;IACF,MAAMR,QAAQ,CAACgB,IAAI,CAAC,kBAAkB,CAAC,CAACqB,MAAM,CAAC;MAC7CC,QAAQ,EAAE;QACRC,SAAS,EAAEtC,KAAK,CAACuC,IAAI;QACrB9B,MAAM;QACN+B,KAAK,EAAEnC,UAAU;QACjBoC,cAAc,EAAEjC,MAAM,CAACuB,MAAM,CAACC,KAAK,GAAGxB,MAAM,CAACuB,MAAM,CAACE,MAAM;QAC1DS,aAAa,EAAElC,MAAM,CAACoB,aAAa;QACnCe,cAAc,EAAEhC,WAAW,GAAGD,aAAa;QAC3C,IAAII,aAAa,GAAG;UAClB8B,YAAY,EAAE9B,aAAa,CAAC+B,WAAW,IAAI,IAAI;UAC/CC,UAAU,EAAEhC,aAAa,CAACiC,SAAS,IAAI,IAAI;UAC3CC,YAAY,EAAElC,aAAa,CAACmC,WAAW,IAAI,IAAI;UAC/CC,SAAS,EAAEpC,aAAa,CAACqC,QAAQ,IAAI,IAAI;UACzCC,WAAW,EAAEtC,aAAa,CAACuC,UAAU,IAAI,IAAI;UAC7CC,aAAa,EAAExC,aAAa,CAACyC,YAAY,IAAI;QAC/C,CAAC,GAAG,CAAC,CAAC;MACR;IACF,CAAC,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEtD,cAAc,CAAC;EAC7B,CAAC,CAAC,OAAOgC,GAAG,EAAE;IACZrC,GAAG,CAACsC,KAAK,CAAC;MAAED,GAAG,EAAGA,GAAG,CAAW3B;IAAQ,CAAC,EAAE,4BAA4B,CAAC;EAC1E;;EAEA;EACA,IAAI;IACFjB,SAAS,CAACC,cAAc,CAAC;MACvBkE,MAAM,EAAE,mBAAmB;MAAEC,QAAQ,EAAE,MAAM;MAC7CC,QAAQ,EAAExD,OAAO,IAAI,IAAI;MAAEyD,aAAa,EAAE,cAAc;MACxDC,WAAW,EAAEzD,OAAO;MAAE0D,UAAU,EAAExD,OAAO;MACzCW,eAAe,EAAEf,cAAc;MAC/B6D,OAAO,EAAEnD,MAAM,IAAI,IAAI;MAAEoD,UAAU,EAAEnD,SAAS,IAAI,IAAI;MACtDJ,MAAM;MAAEwD,YAAY,EAAE,cAAc;MAAEC,SAAS,EAAE,UAAU;MAC3DC,WAAW,EAAE,IAAI;MACjBC,UAAU,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;MAAEC,QAAQ,EAAE,IAAIF,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;MACxEE,WAAW,EAAE,CAAC;MACdC,WAAW,EAAE,OAAOlE,OAAO,KAAK,QAAQ,GAAGA,OAAO,CAACkB,MAAM,GAAG,CAAC;MAC7DiD,OAAO,EAAE;QACPC,eAAe,EAAEpE,OAAO,CAACqE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;QAC1CC,QAAQ,EAAEzE,OAAO;QAAEoC,KAAK,EAAEnC,UAAU;QACpCY,eAAe,EAAEf,cAAc;QAC/B,IAAIY,aAAa,GAAG;UAClB8B,YAAY,EAAE9B,aAAa,CAAC+B,WAAW,IAAI,IAAI;UAC/CK,SAAS,EAAEpC,aAAa,CAACqC,QAAQ,IAAI,IAAI;UACzCC,WAAW,EAAEtC,aAAa,CAACuC,UAAU,IAAI;QAC3C,CAAC,GAAG,CAAC,CAAC;MACR;IACF,CAAC,CAAC,CAAC;EACL,CAAC,CAAC,OAAOnB,GAAG,EAAE;IACZrC,GAAG,CAACsC,KAAK,CAAC;MAAED,GAAG,EAAGA,GAAG,CAAW3B;IAAQ,CAAC,EAAE,2BAA2B,CAAC;EACzE;;EAEA;EACA,IAAI;IACFjB,SAAS,CAACC,cAAc,CAAC;MACvBkE,MAAM,EAAE,yBAAyB;MAAEC,QAAQ,EAAE,MAAM;MACnDC,QAAQ,EAAExD,OAAO,IAAI,IAAI;MAAEyD,aAAa,EAAE,cAAc;MACxDC,WAAW,EAAEzD,OAAO;MAAE0D,UAAU,EAAExD,OAAO;MACzCW,eAAe,EAAEf,cAAc;MAC/BsE,WAAW,EAAE7D,WAAW,GAAGD,aAAa;MACxCqD,OAAO,EAAEnD,MAAM,IAAI,IAAI;MAAEoD,UAAU,EAAEnD,SAAS,IAAI,IAAI;MACtDJ,MAAM;MACNqE,YAAY,EAAEtE,MAAM,CAACuB,MAAM,CAACC,KAAK;MAAE+C,aAAa,EAAEvE,MAAM,CAACuB,MAAM,CAACE,MAAM;MACtE+C,UAAU,EAAExE,MAAM,CAACyE,OAAO;MAAEzC,KAAK,EAAEnC,UAAU;MAC7C6E,QAAQ,EAAE5E,OAAO;MAAE4D,SAAS,EAAE,UAAU;MACxCD,YAAY,EAAE,cAAc;MAAEE,WAAW,EAAE,IAAI;MAC/CC,UAAU,EAAE,IAAIC,IAAI,CAAC3D,aAAa,CAAC,CAAC4D,WAAW,CAAC,CAAC;MACjDC,QAAQ,EAAE,IAAIF,IAAI,CAAC1D,WAAW,CAAC,CAAC2D,WAAW,CAAC,CAAC;MAC7Ca,WAAW,EAAE3E,MAAM,CAAC4E,UAAU,IAAIC,SAAS;MAC3CC,WAAW,EAAE9E,MAAM,CAAC+E,SAAS,IAAI,CAAC;MAClCb,OAAO,EAAE;QACPc,gBAAgB,EAAE,CAAChF,MAAM,CAACkB,SAAS,IAAI,EAAE,EAAEkD,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;QAC5DC,QAAQ,EAAEzE,OAAO;QAAEoC,KAAK,EAAEnC,UAAU;QACpC,sBAAsB,EAAEA,UAAU;QAClC,2BAA2B,EAAEG,MAAM,CAACuB,MAAM,CAACC,KAAK;QAChD,4BAA4B,EAAExB,MAAM,CAACuB,MAAM,CAACE,MAAM;QAClD,oCAAoC,EAAEzB,MAAM,CAACuB,MAAM,CAAC0D,aAAa,IAAI,CAAC;QACtE,gCAAgC,EAAEjF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC;QAC9D,mBAAmB,EAAElF,MAAM,CAACyE,OAAO;QACnCU,UAAU,EAAEnF,MAAM,CAAC+E,SAAS,IAAI,CAAC;QACjCK,UAAU,EAAEpF,MAAM,CAACoB,aAAa;QAChCC,UAAU,EAAErB,MAAM,CAACsB,SAAS;QAC5Bb,eAAe,EAAEf,cAAc;QAC/B2F,gBAAgB,EAAErF,MAAM,CAACyE,OAAO;QAChCa,qBAAqB,EAAEtF,MAAM,CAACuB,MAAM,CAAC0D,aAAa,IAAI,CAAC;QACvDM,iBAAiB,EAAEvF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC;QAC/CM,cAAc,EAAExF,MAAM,CAACuB,MAAM,CAACC,KAAK,GAAG,CAAC,GACnCT,IAAI,CAAC0E,KAAK,CAAC,CAACzF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC,KAAK,CAAClF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC,IAAIlF,MAAM,CAACuB,MAAM,CAACC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG,GACjH,CAAC;QACLkE,sBAAsB,EAAE1F,MAAM,CAACuB,MAAM,CAACC,KAAK,GAAG,CAAC,IAAI,CAACxB,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC,IAAI,CAAC,GACjFnE,IAAI,CAAC0E,KAAK,CAAC,CAACzF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC,IAAI,GAAG,IAAI,CAAClF,MAAM,CAACuB,MAAM,CAAC2D,SAAS,IAAI,CAAC,IAAIlF,MAAM,CAACuB,MAAM,CAACC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG,GACvH,CAAC;QACLmE,mBAAmB,EAAE3F,MAAM,CAAC4F,iBAAiB,IAAI,IAAI;QACrDC,KAAK,EAAE7F,MAAM,CAAC6F,KAAK,IAAI,EAAE;QACzB,IAAIvF,aAAa,GAAG;UAClB8B,YAAY,EAAE9B,aAAa,CAAC+B,WAAW,IAAI,IAAI;UAC/CC,UAAU,EAAEhC,aAAa,CAACiC,SAAS,IAAI,IAAI;UAC3CC,YAAY,EAAElC,aAAa,CAACmC,WAAW,IAAI,IAAI;UAC/CC,SAAS,EAAEpC,aAAa,CAACqC,QAAQ,IAAI,IAAI;UACzCC,WAAW,EAAEtC,aAAa,CAACuC,UAAU,IAAI,IAAI;UAC7CC,aAAa,EAAExC,aAAa,CAACyC,YAAY,IAAI;QAC/C,CAAC,GAAG,CAAC,CAAC;MACR;IACF,CAAC,CAAC,CAAC;EACL,CAAC,CAAC,OAAOrB,GAAG,EAAE;IACZrC,GAAG,CAACsC,KAAK,CAAC;MAAED,GAAG,EAAGA,GAAG,CAAW3B;IAAQ,CAAC,EAAE,iCAAiC,CAAC;EAC/E;;EAEA;EACA,IAAIJ,OAAO,IAAIK,MAAM,CAACkB,SAAS,IAAIlB,MAAM,CAACkB,SAAS,CAACD,MAAM,GAAG,EAAE,EAAE;IAC/D,IAAI;MACF,MAAM/B,uBAAuB,CAACK,QAAQ,EAAEN,kBAAkB,CAACO,KAAK,CAAC,EAAEI,OAAO,EAAED,OAAO,EAAEI,OAAO,EAAEC,MAAM,CAACkB,SAAS,CAAC;IACjH,CAAC,CAAC,OAAO4E,IAAS,EAAE;MAClB,IAAI;QACF,MAAM,IAAIC,OAAO,CAACC,CAAC,IAAIC,UAAU,CAACD,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM9G,uBAAuB,CAACK,QAAQ,EAAEN,kBAAkB,CAACO,KAAK,CAAC,EAAEI,OAAO,EAAED,OAAO,EAAEI,OAAO,EAAEC,MAAM,CAACkB,SAAS,CAAC;MACjH,CAAC,CAAC,OAAOgF,IAAS,EAAE;QAClB7G,GAAG,CAACsC,KAAK,CAAC;UAAED,GAAG,EAAEwE,IAAI,CAACnG;QAAQ,CAAC,EAAE,mCAAmC,CAAC;QACrEjB,SAAS,CAACC,cAAc,CAAC;UACvBkE,MAAM,EAAE,0BAA0B;UAAEC,QAAQ,EAAE,SAAS;UACvDC,QAAQ,EAAExD,OAAO,IAAI,IAAI;UAAEyD,aAAa,EAAE,cAAc;UACxDC,WAAW,EAAEzD,OAAO;UAAEa,eAAe,EAAEf,cAAc;UACrD6D,OAAO,EAAEnD,MAAM,IAAI,IAAI;UAAEoD,UAAU,EAAEnD,SAAS,IAAI,IAAI;UACtD8F,UAAU,EAAEnH,iBAAiB,CAACkH,IAAI,CAACnG,OAAO,CAAC,IAAI8E,SAAS;UACxDpB,YAAY,EAAE,cAAc;UAAEC,SAAS,EAAE,UAAU;UAAEC,WAAW,EAAE,OAAO;UACzEC,UAAU,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;UAAEC,QAAQ,EAAE,IAAIF,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;UACxEsC,aAAa,EAAEF,IAAI,CAACnG,OAAO;UAC3BmE,OAAO,EAAE;YAAEvC,KAAK,EAAEuE,IAAI,CAACnG,OAAO;YAAEsG,oBAAoB,EAAEtG,OAAO,CAACqE,SAAS,CAAC,CAAC,EAAE,GAAG;UAAE;QAClF,CAAC,CAAC,CAAC;MACL;IACF;EACF;;EAEA;EACA,IAAIzE,OAAO,IAAIK,MAAM,CAACyE,OAAO,GAAG,CAAC,EAAE;IACjC,IAAI;MACF,MAAMtF,iBAAiB,CAACI,QAAQ,EAAEI,OAAO,EAAEC,OAAO,EAAEI,MAAM,CAACyE,OAAO,CAAC;MACnErF,mBAAmB,CAACO,OAAO,EAAEC,OAAO,CAAC;IACvC,CAAC,CAAC,OAAOkG,IAAS,EAAE;MAClB,IAAI;QACF,MAAM,IAAIC,OAAO,CAACC,CAAC,IAAIC,UAAU,CAACD,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM7G,iBAAiB,CAACI,QAAQ,EAAEI,OAAO,EAAEC,OAAO,EAAEI,MAAM,CAACyE,OAAO,CAAC;QACnErF,mBAAmB,CAACO,OAAO,EAAEC,OAAO,CAAC;MACvC,CAAC,CAAC,OAAOsG,IAAS,EAAE;QAClB7G,GAAG,CAACsC,KAAK,CAAC;UAAED,GAAG,EAAEwE,IAAI,CAACnG;QAAQ,CAAC,EAAE,uCAAuC,CAAC;QACzE,MAAMR,QAAQ,CAACgB,IAAI,CAAC,kBAAkB,CAAC,CAACqB,MAAM,CAAC;UAC7CC,QAAQ,EAAE;YAAEyE,kBAAkB,EAAE,IAAI;YAAEC,eAAe,EAAEvG,MAAM,CAACyE;UAAQ;QACxE,CAAC,CAAC,CAACzB,EAAE,CAAC,IAAI,EAAEtD,cAAc,CAAC,CAAC8G,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;MAC5C;IACF;EACF;AACF","ignoreList":[]}

package/dist/server/server-rate-limit.d.ts

@@ -0,0 +1,9 @@
+import http from "node:http";
+/** Check IP rate limit and send 429 with proper headers if exceeded */
+export declare function sendIpRateLimit(res: http.ServerResponse, ip: string, headers: Record<string, string>): boolean;
+export declare function checkAgentChatRateLimit(storeId: string): {
+    allowed: boolean;
+    error?: string;
+};
+export declare function incrementConcurrent(): void;
+export declare function decrementConcurrent(): void;

package/dist/server/server-rate-limit.js

@@ -0,0 +1,77 @@
+// server/server-rate-limit.ts — Rate limiting helpers for the agent server
+// Extracted from index.ts for modularity.
+
+import { rateLimiter } from "./lib/rate-limiter.js";
+
+// ============================================================================
+// IP RATE LIMITING
+// ============================================================================
+
+/** Check IP rate limit and send 429 with proper headers if exceeded */
+export function sendIpRateLimit(res, ip, headers) {
+  const result = rateLimiter.checkRequest(`ip:${ip}`, "unauthenticated");
+  if (result.allowed) return false;
+  res.writeHead(429, {
+    "Retry-After": String(Math.ceil(result.retryAfterMs / 1000) || 1),
+    "X-RateLimit-Remaining": "0",
+    "Content-Type": "application/json",
+    ...headers
+  });
+  res.end(JSON.stringify({
+    error: "Too many requests"
+  }));
+  return true;
+}
+
+// ============================================================================
+// AGENT CHAT RATE LIMITING — per-store + global concurrent cap
+// ============================================================================
+
+const agentChatLimiter = new Map();
+const AGENT_CHAT_MAX_PER_MIN = 60;
+const AGENT_CHAT_MAX_CONCURRENT = 10;
+let agentChatConcurrent = 0;
+
+// Periodically clean up stale entries to prevent unbounded Map growth
+setInterval(() => {
+  const now = Date.now();
+  for (const [key, entry] of agentChatLimiter) {
+    if (now - entry.windowStart > 120_000) {
+      agentChatLimiter.delete(key);
+    }
+  }
+}, 60_000);
+export function checkAgentChatRateLimit(storeId) {
+  if (agentChatConcurrent >= AGENT_CHAT_MAX_CONCURRENT) {
+    return {
+      allowed: false,
+      error: "Too many concurrent agent sessions. Please wait."
+    };
+  }
+  const now = Date.now();
+  let entry = agentChatLimiter.get(storeId);
+  if (!entry || now - entry.windowStart > 60_000) {
+    entry = {
+      count: 0,
+      windowStart: now
+    };
+    agentChatLimiter.set(storeId, entry);
+  }
+  entry.count++;
+  if (entry.count > AGENT_CHAT_MAX_PER_MIN) {
+    return {
+      allowed: false,
+      error: `Rate limit exceeded: ${AGENT_CHAT_MAX_PER_MIN}/min for agent chat`
+    };
+  }
+  return {
+    allowed: true
+  };
+}
+export function incrementConcurrent() {
+  agentChatConcurrent++;
+}
+export function decrementConcurrent() {
+  agentChatConcurrent--;
+}
+//# sourceMappingURL=server-rate-limit.js.map

package/dist/server/server-rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-rate-limit.js","names":["rateLimiter","sendIpRateLimit","res","ip","headers","result","checkRequest","allowed","writeHead","String","Math","ceil","retryAfterMs","end","JSON","stringify","error","agentChatLimiter","Map","AGENT_CHAT_MAX_PER_MIN","AGENT_CHAT_MAX_CONCURRENT","agentChatConcurrent","setInterval","now","Date","key","entry","windowStart","delete","checkAgentChatRateLimit","storeId","get","count","set","incrementConcurrent","decrementConcurrent"],"sources":["../../src/server/server-rate-limit.ts"],"sourcesContent":["// server/server-rate-limit.ts — Rate limiting helpers for the agent server\n// Extracted from index.ts for modularity.\n\nimport http from \"node:http\";\nimport { rateLimiter } from \"./lib/rate-limiter.js\";\n\n// ============================================================================\n// IP RATE LIMITING\n// ============================================================================\n\n/** Check IP rate limit and send 429 with proper headers if exceeded */\nexport function sendIpRateLimit(res: http.ServerResponse, ip: string, headers: Record<string, string>): boolean {\n  const result = rateLimiter.checkRequest(`ip:${ip}`, \"unauthenticated\");\n  if (result.allowed) return false;\n  res.writeHead(429, {\n    \"Retry-After\": String(Math.ceil(result.retryAfterMs / 1000) || 1),\n    \"X-RateLimit-Remaining\": \"0\",\n    \"Content-Type\": \"application/json\",\n    ...headers,\n  });\n  res.end(JSON.stringify({ error: \"Too many requests\" }));\n  return true;\n}\n\n// ============================================================================\n// AGENT CHAT RATE LIMITING — per-store + global concurrent cap\n// ============================================================================\n\nconst agentChatLimiter = new Map<string, { count: number; windowStart: number }>();\nconst AGENT_CHAT_MAX_PER_MIN = 60;\nconst AGENT_CHAT_MAX_CONCURRENT = 10;\nlet agentChatConcurrent = 0;\n\n// Periodically clean up stale entries to prevent unbounded Map growth\nsetInterval(() => {\n  const now = Date.now();\n  for (const [key, entry] of agentChatLimiter) {\n    if (now - entry.windowStart > 120_000) {\n      agentChatLimiter.delete(key);\n    }\n  }\n}, 60_000);\n\nexport function checkAgentChatRateLimit(storeId: string): { allowed: boolean; error?: string } {\n  if (agentChatConcurrent >= AGENT_CHAT_MAX_CONCURRENT) {\n    return { allowed: false, error: \"Too many concurrent agent sessions. Please wait.\" };\n  }\n\n  const now = Date.now();\n  let entry = agentChatLimiter.get(storeId);\n  if (!entry || now - entry.windowStart > 60_000) {\n    entry = { count: 0, windowStart: now };\n    agentChatLimiter.set(storeId, entry);\n  }\n  entry.count++;\n  if (entry.count > AGENT_CHAT_MAX_PER_MIN) {\n    return { allowed: false, error: `Rate limit exceeded: ${AGENT_CHAT_MAX_PER_MIN}/min for agent chat` };\n  }\n  return { allowed: true };\n}\n\nexport function incrementConcurrent(): void { agentChatConcurrent++; }\nexport function decrementConcurrent(): void { agentChatConcurrent--; }\n"],"mappings":"AAAA;AACA;;AAGA,SAASA,WAAW,QAAQ,uBAAuB;;AAEnD;AACA;AACA;;AAEA;AACA,OAAO,SAASC,eAAeA,CAACC,GAAwB,EAAEC,EAAU,EAAEC,OAA+B,EAAW;EAC9G,MAAMC,MAAM,GAAGL,WAAW,CAACM,YAAY,CAAC,MAAMH,EAAE,EAAE,EAAE,iBAAiB,CAAC;EACtE,IAAIE,MAAM,CAACE,OAAO,EAAE,OAAO,KAAK;EAChCL,GAAG,CAACM,SAAS,CAAC,GAAG,EAAE;IACjB,aAAa,EAAEC,MAAM,CAACC,IAAI,CAACC,IAAI,CAACN,MAAM,CAACO,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,uBAAuB,EAAE,GAAG;IAC5B,cAAc,EAAE,kBAAkB;IAClC,GAAGR;EACL,CAAC,CAAC;EACFF,GAAG,CAACW,GAAG,CAACC,IAAI,CAACC,SAAS,CAAC;IAAEC,KAAK,EAAE;EAAoB,CAAC,CAAC,CAAC;EACvD,OAAO,IAAI;AACb;;AAEA;AACA;AACA;;AAEA,MAAMC,gBAAgB,GAAG,IAAIC,GAAG,CAAiD,CAAC;AAClF,MAAMC,sBAAsB,GAAG,EAAE;AACjC,MAAMC,yBAAyB,GAAG,EAAE;AACpC,IAAIC,mBAAmB,GAAG,CAAC;;AAE3B;AACAC,WAAW,CAAC,MAAM;EAChB,MAAMC,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;EACtB,KAAK,MAAM,CAACE,GAAG,EAAEC,KAAK,CAAC,IAAIT,gBAAgB,EAAE;IAC3C,IAAIM,GAAG,GAAGG,KAAK,CAACC,WAAW,GAAG,OAAO,EAAE;MACrCV,gBAAgB,CAACW,MAAM,CAACH,GAAG,CAAC;IAC9B;EACF;AACF,CAAC,EAAE,MAAM,CAAC;AAEV,OAAO,SAASI,uBAAuBA,CAACC,OAAe,EAAwC;EAC7F,IAAIT,mBAAmB,IAAID,yBAAyB,EAAE;IACpD,OAAO;MAAEb,OAAO,EAAE,KAAK;MAAES,KAAK,EAAE;IAAmD,CAAC;EACtF;EAEA,MAAMO,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;EACtB,IAAIG,KAAK,GAAGT,gBAAgB,CAACc,GAAG,CAACD,OAAO,CAAC;EACzC,IAAI,CAACJ,KAAK,IAAIH,GAAG,GAAGG,KAAK,CAACC,WAAW,GAAG,MAAM,EAAE;IAC9CD,KAAK,GAAG;MAAEM,KAAK,EAAE,CAAC;MAAEL,WAAW,EAAEJ;IAAI,CAAC;IACtCN,gBAAgB,CAACgB,GAAG,CAACH,OAAO,EAAEJ,KAAK,CAAC;EACtC;EACAA,KAAK,CAACM,KAAK,EAAE;EACb,IAAIN,KAAK,CAACM,KAAK,GAAGb,sBAAsB,EAAE;IACxC,OAAO;MAAEZ,OAAO,EAAE,KAAK;MAAES,KAAK,EAAE,wBAAwBG,sBAAsB;IAAsB,CAAC;EACvG;EACA,OAAO;IAAEZ,OAAO,EAAE;EAAK,CAAC;AAC1B;AAEA,OAAO,SAAS2B,mBAAmBA,CAAA,EAAS;EAAEb,mBAAmB,EAAE;AAAE;AACrE,OAAO,SAASc,mBAAmBA,CAAA,EAAS;EAAEd,mBAAmB,EAAE;AAAE","ignoreList":[]}

package/dist/server/server-routes-approvals.d.ts

@@ -0,0 +1,4 @@
+import http from "node:http";
+import { type ServerContext } from "./server-helpers.js";
+export declare function handleGuestApproval(req: http.IncomingMessage, res: http.ServerResponse, ctx: ServerContext): Promise<boolean>;
+export declare function handleApprovalRespond(req: http.IncomingMessage, res: http.ServerResponse, ctx: ServerContext): Promise<boolean>;