whale-code 6.5.6 → 6.5.8

package/dist/server/server-chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-chat.js","names":["createLogger","sanitizeError","jsonResponse","sendSSE","resolveAndValidateStoreId","checkAgentChatRateLimit","incrementConcurrent","decrementConcurrent","checkCostBudget","checkStoreCircuitBreaker","recordStoreOutcome","extractOrCreateTrace","SessionManager","log","handleAgentChat","req","res","supabase","body","user","isServiceRole","token","corsHeaders","agentId","message","conversationHistory","source","conversationId","context","attachments","storeId","error","length","resolvedStoreId","userId","data","srStores","from","select","eq","not","limit","store_id","undefined","trace","info","id","traceId","breakerCheck","allowed","costCheck","warning","warn","rateLimitStoreId","rateCheck","writeHead","end","JSON","stringify","requestSuccess","userEmail","email","manager","session","resumeSession","createSession","surface","Connection","traceparent","clientDisconnected","on","result","executeTurn","streaming","onText","text","type","onToolStart","name","input","onToolResult","success","r","onToolProgress","progress","onSubagentProgress","evt","subagentId","subagentEvent","event","toolName","value","usage","input_tokens","tokens","output_tokens","output","cache_creation_tokens","cacheCreation","cache_read_tokens","cacheRead","cost_usd","costUsd","err"],"sources":["../../src/server/server-chat.ts"],"sourcesContent":["// server/server-chat.ts — handleAgentChat SSE handler\n// Delegates to SessionManager for unified session lifecycle.\n// Keeps the exact same function signature for backward compatibility.\n\nimport http from \"node:http\";\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createLogger } from \"./lib/logger.js\";\nimport { sanitizeError } from \"../shared/agent-core.js\";\nimport { jsonResponse, sendSSE } from \"./server-helpers.js\";\nimport { resolveAndValidateStoreId } from \"./server-store.js\";\nimport { checkAgentChatRateLimit, incrementConcurrent, decrementConcurrent } from \"./server-rate-limit.js\";\nimport { checkCostBudget } from \"./server-cost-guard.js\";\nimport { checkStoreCircuitBreaker, recordStoreOutcome } from \"./server-store-circuit-breaker.js\";\nimport { extractOrCreateTrace, type TraceContext } from \"./server-trace.js\";\nimport { SessionManager } from \"./session-manager.js\";\n\nconst log = createLogger(\"server-chat\");\n\n// ============================================================================\n// AGENT CHAT HANDLER (SSE) — delegates to SessionManager\n// ============================================================================\n\nexport async function handleAgentChat(\n  req: http.IncomingMessage,\n  res: http.ServerResponse,\n  supabase: SupabaseClient,\n  body: any,\n  user: { id: string; email?: string } | null,\n  isServiceRole: boolean,\n  token: string,\n  corsHeaders: Record<string, string>\n): Promise<void> {\n  const { agentId, message, conversationHistory, source, conversationId, context, attachments } = body;\n  let storeId: string | undefined = body.storeId;\n\n  if (!agentId || !message) {\n    jsonResponse(res, 400, { error: \"agentId and message required\" }, corsHeaders);\n    return;\n  }\n\n  if (typeof message === \"string\" && message.length > 100_000) {\n    jsonResponse(res, 400, { error: \"Message too long (max 100K characters)\" }, corsHeaders);\n    return;\n  }\n\n  const resolvedStoreId = await resolveAndValidateStoreId(\n    supabase, storeId, user, isServiceRole, token, body.userId\n  );\n\n  if (!resolvedStoreId && isServiceRole && body.userId) {\n    const { data: srStores } = await supabase\n      .from(\"users\").select(\"store_id\")\n      .eq(\"auth_user_id\", body.userId).not(\"store_id\", \"is\", null).limit(1);\n    if (srStores?.length) storeId = srStores[0].store_id;\n  } else {\n    storeId = resolvedStoreId || undefined;\n  }\n\n  if (!storeId && !isServiceRole) {\n    jsonResponse(res, 400, { error: \"storeId required for agent chat\" }, corsHeaders);\n    return;\n  }\n\n  // Extract or create W3C trace context from incoming request\n  const trace: TraceContext = extractOrCreateTrace(req);\n\n  log.info({ storeId: storeId || \"NONE\", source: body.source || \"unknown\", isServiceRole, userId: user?.id || body.userId || \"NONE\", traceId: trace.traceId }, \"agent-chat request\");\n\n  // Per-store circuit breaker — reject if store's error rate is too high\n  if (storeId) {\n    const breakerCheck = checkStoreCircuitBreaker(storeId);\n    if (!breakerCheck.allowed) {\n      jsonResponse(res, 503, { error: breakerCheck.error }, corsHeaders);\n      return;\n    }\n  }\n\n  // DB-backed cost budget check — reject if store/agent budget is exceeded (hard_stop)\n  if (storeId) {\n    const costCheck = await checkCostBudget(supabase, storeId, agentId);\n    if (!costCheck.allowed) {\n      jsonResponse(res, 402, { error: costCheck.error }, corsHeaders);\n      return;\n    }\n    if (costCheck.warning) {\n      log.warn({ storeId, agentId, warning: costCheck.warning }, \"cost budget warning\");\n    }\n  }\n\n  const rateLimitStoreId = storeId || agentId;\n  const rateCheck = checkAgentChatRateLimit(rateLimitStoreId);\n  if (!rateCheck.allowed) {\n    res.writeHead(429, { \"Content-Type\": \"application/json\", ...corsHeaders });\n    res.end(JSON.stringify({ error: rateCheck.error }));\n    return;\n  }\n  incrementConcurrent();\n  let requestSuccess = true;\n  try {\n\n  const userId: string = user?.id || body.userId || \"\";\n  const userEmail: string | null = user?.email || body.userEmail || null;\n\n  // Delegate to SessionManager\n  const manager = new SessionManager(supabase);\n  const session = conversationId\n    ? await manager.resumeSession(conversationId, \"whale_chat\")\n    : await manager.createSession({\n        storeId: storeId!,\n        agentId,\n        surface: \"whale_chat\",\n        userId,\n        userEmail,\n        message,\n      });\n\n  // SSE headers — include traceparent for distributed tracing\n  res.writeHead(200, { \"Content-Type\": \"text/event-stream\", \"Cache-Control\": \"no-cache\", Connection: \"keep-alive\", traceparent: trace.traceparent, ...corsHeaders });\n\n  let clientDisconnected = false;\n  req.on(\"close\", () => { clientDisconnected = true; });\n\n  try {\n    const result = await manager.executeTurn(session, {\n      message,\n      attachments,\n      conversationHistory,\n      context: context || undefined,\n      streaming: true,\n      onText: (text) => sendSSE(res, { type: \"text\", text }),\n      onToolStart: (name, input?) => { if (input !== undefined) sendSSE(res, { type: \"tool_start\", name, input: input as Record<string, unknown> }); },\n      onToolResult: (name, success, r) => sendSSE(res, { type: \"tool_result\", name, success, result: r as any }),\n      onToolProgress: (name, progress) => sendSSE(res, { type: \"tool_progress\", name, progress: progress as any }),\n      onSubagentProgress: (evt: any) => sendSSE(res, { type: \"subagent\", subagentId: evt.subagentId, subagentEvent: evt.event, name: evt.toolName }),\n      clientDisconnected: { get value() { return clientDisconnected; } },\n      source: source || \"whale_chat\",\n    });\n\n    sendSSE(res, {\n      type: \"usage\", usage: {\n        input_tokens: result.tokens.input, output_tokens: result.tokens.output,\n        cache_creation_tokens: result.tokens.cacheCreation, cache_read_tokens: result.tokens.cacheRead,\n        cost_usd: result.costUsd,\n      },\n    });\n\n    sendSSE(res, { type: \"done\", conversationId: session.id });\n  } catch (err) {\n    requestSuccess = false;\n    sendSSE(res, { type: \"error\", error: sanitizeError(err) });\n  }\n\n  res.end();\n\n  } finally {\n    decrementConcurrent();\n    // Record outcome for per-store circuit breaker\n    if (storeId) {\n      recordStoreOutcome(storeId, requestSuccess);\n    }\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;;AAIA,SAASA,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,aAAa,QAAQ,yBAAyB;AACvD,SAASC,YAAY,EAAEC,OAAO,QAAQ,qBAAqB;AAC3D,SAASC,yBAAyB,QAAQ,mBAAmB;AAC7D,SAASC,uBAAuB,EAAEC,mBAAmB,EAAEC,mBAAmB,QAAQ,wBAAwB;AAC1G,SAASC,eAAe,QAAQ,wBAAwB;AACxD,SAASC,wBAAwB,EAAEC,kBAAkB,QAAQ,mCAAmC;AAChG,SAASC,oBAAoB,QAA2B,mBAAmB;AAC3E,SAASC,cAAc,QAAQ,sBAAsB;AAErD,MAAMC,GAAG,GAAGb,YAAY,CAAC,aAAa,CAAC;;AAEvC;AACA;AACA;;AAEA,OAAO,eAAec,eAAeA,CACnCC,GAAyB,EACzBC,GAAwB,EACxBC,QAAwB,EACxBC,IAAS,EACTC,IAA2C,EAC3CC,aAAsB,EACtBC,KAAa,EACbC,WAAmC,EACpB;EACf,MAAM;IAAEC,OAAO;IAAEC,OAAO;IAAEC,mBAAmB;IAAEC,MAAM;IAAEC,cAAc;IAAEC,OAAO;IAAEC;EAAY,CAAC,GAAGX,IAAI;EACpG,IAAIY,OAA2B,GAAGZ,IAAI,CAACY,OAAO;EAE9C,IAAI,CAACP,OAAO,IAAI,CAACC,OAAO,EAAE;IACxBtB,YAAY,CAACc,GAAG,EAAE,GAAG,EAAE;MAAEe,KAAK,EAAE;IAA+B,CAAC,EAAET,WAAW,CAAC;IAC9E;EACF;EAEA,IAAI,OAAOE,OAAO,KAAK,QAAQ,IAAIA,OAAO,CAACQ,MAAM,GAAG,OAAO,EAAE;IAC3D9B,YAAY,CAACc,GAAG,EAAE,GAAG,EAAE;MAAEe,KAAK,EAAE;IAAyC,CAAC,EAAET,WAAW,CAAC;IACxF;EACF;EAEA,MAAMW,eAAe,GAAG,MAAM7B,yBAAyB,CACrDa,QAAQ,EAAEa,OAAO,EAAEX,IAAI,EAAEC,aAAa,EAAEC,KAAK,EAAEH,IAAI,CAACgB,MACtD,CAAC;EAED,IAAI,CAACD,eAAe,IAAIb,aAAa,IAAIF,IAAI,CAACgB,MAAM,EAAE;IACpD,MAAM;MAAEC,IAAI,EAAEC;IAAS,CAAC,GAAG,MAAMnB,QAAQ,CACtCoB,IAAI,CAAC,OAAO,CAAC,CAACC,MAAM,CAAC,UAAU,CAAC,CAChCC,EAAE,CAAC,cAAc,EAAErB,IAAI,CAACgB,MAAM,CAAC,CAACM,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAACC,KAAK,CAAC,CAAC,CAAC;IACvE,IAAIL,QAAQ,EAAEJ,MAAM,EAAEF,OAAO,GAAGM,QAAQ,CAAC,CAAC,CAAC,CAACM,QAAQ;EACtD,CAAC,MAAM;IACLZ,OAAO,GAAGG,eAAe,IAAIU,SAAS;EACxC;EAEA,IAAI,CAACb,OAAO,IAAI,CAACV,aAAa,EAAE;IAC9BlB,YAAY,CAACc,GAAG,EAAE,GAAG,EAAE;MAAEe,KAAK,EAAE;IAAkC,CAAC,EAAET,WAAW,CAAC;IACjF;EACF;;EAEA;EACA,MAAMsB,KAAmB,GAAGjC,oBAAoB,CAACI,GAAG,CAAC;EAErDF,GAAG,CAACgC,IAAI,CAAC;IAAEf,OAAO,EAAEA,OAAO,IAAI,MAAM;IAAEJ,MAAM,EAAER,IAAI,CAACQ,MAAM,IAAI,SAAS;IAAEN,aAAa;IAAEc,MAAM,EAAEf,IAAI,EAAE2B,EAAE,IAAI5B,IAAI,CAACgB,MAAM,IAAI,MAAM;IAAEa,OAAO,EAAEH,KAAK,CAACG;EAAQ,CAAC,EAAE,oBAAoB,CAAC;;EAElL;EACA,IAAIjB,OAAO,EAAE;IACX,MAAMkB,YAAY,GAAGvC,wBAAwB,CAACqB,OAAO,CAAC;IACtD,IAAI,CAACkB,YAAY,CAACC,OAAO,EAAE;MACzB/C,YAAY,CAACc,GAAG,EAAE,GAAG,EAAE;QAAEe,KAAK,EAAEiB,YAAY,CAACjB;MAAM,CAAC,EAAET,WAAW,CAAC;MAClE;IACF;EACF;;EAEA;EACA,IAAIQ,OAAO,EAAE;IACX,MAAMoB,SAAS,GAAG,MAAM1C,eAAe,CAACS,QAAQ,EAAEa,OAAO,EAAEP,OAAO,CAAC;IACnE,IAAI,CAAC2B,SAAS,CAACD,OAAO,EAAE;MACtB/C,YAAY,CAACc,GAAG,EAAE,GAAG,EAAE;QAAEe,KAAK,EAAEmB,SAAS,CAACnB;MAAM,CAAC,EAAET,WAAW,CAAC;MAC/D;IACF;IACA,IAAI4B,SAAS,CAACC,OAAO,EAAE;MACrBtC,GAAG,CAACuC,IAAI,CAAC;QAAEtB,OAAO;QAAEP,OAAO;QAAE4B,OAAO,EAAED,SAAS,CAACC;MAAQ,CAAC,EAAE,qBAAqB,CAAC;IACnF;EACF;EAEA,MAAME,gBAAgB,GAAGvB,OAAO,IAAIP,OAAO;EAC3C,MAAM+B,SAAS,GAAGjD,uBAAuB,CAACgD,gBAAgB,CAAC;EAC3D,IAAI,CAACC,SAAS,CAACL,OAAO,EAAE;IACtBjC,GAAG,CAACuC,SAAS,CAAC,GAAG,EAAE;MAAE,cAAc,EAAE,kBAAkB;MAAE,GAAGjC;IAAY,CAAC,CAAC;IAC1EN,GAAG,CAACwC,GAAG,CAACC,IAAI,CAACC,SAAS,CAAC;MAAE3B,KAAK,EAAEuB,SAAS,CAACvB;IAAM,CAAC,CAAC,CAAC;IACnD;EACF;EACAzB,mBAAmB,CAAC,CAAC;EACrB,IAAIqD,cAAc,GAAG,IAAI;EACzB,IAAI;IAEJ,MAAMzB,MAAc,GAAGf,IAAI,EAAE2B,EAAE,IAAI5B,IAAI,CAACgB,MAAM,IAAI,EAAE;IACpD,MAAM0B,SAAwB,GAAGzC,IAAI,EAAE0C,KAAK,IAAI3C,IAAI,CAAC0C,SAAS,IAAI,IAAI;;IAEtE;IACA,MAAME,OAAO,GAAG,IAAIlD,cAAc,CAACK,QAAQ,CAAC;IAC5C,MAAM8C,OAAO,GAAGpC,cAAc,GAC1B,MAAMmC,OAAO,CAACE,aAAa,CAACrC,cAAc,EAAE,YAAY,CAAC,GACzD,MAAMmC,OAAO,CAACG,aAAa,CAAC;MAC1BnC,OAAO,EAAEA,OAAQ;MACjBP,OAAO;MACP2C,OAAO,EAAE,YAAY;MACrBhC,MAAM;MACN0B,SAAS;MACTpC;IACF,CAAC,CAAC;;IAEN;IACAR,GAAG,CAACuC,SAAS,CAAC,GAAG,EAAE;MAAE,cAAc,EAAE,mBAAmB;MAAE,eAAe,EAAE,UAAU;MAAEY,UAAU,EAAE,YAAY;MAAEC,WAAW,EAAExB,KAAK,CAACwB,WAAW;MAAE,GAAG9C;IAAY,CAAC,CAAC;IAElK,IAAI+C,kBAAkB,GAAG,KAAK;IAC9BtD,GAAG,CAACuD,EAAE,CAAC,OAAO,EAAE,MAAM;MAAED,kBAAkB,GAAG,IAAI;IAAE,CAAC,CAAC;IAErD,IAAI;MACF,MAAME,MAAM,GAAG,MAAMT,OAAO,CAACU,WAAW,CAACT,OAAO,EAAE;QAChDvC,OAAO;QACPK,WAAW;QACXJ,mBAAmB;QACnBG,OAAO,EAAEA,OAAO,IAAIe,SAAS;QAC7B8B,SAAS,EAAE,IAAI;QACfC,MAAM,EAAGC,IAAI,IAAKxE,OAAO,CAACa,GAAG,EAAE;UAAE4D,IAAI,EAAE,MAAM;UAAED;QAAK,CAAC,CAAC;QACtDE,WAAW,EAAEA,CAACC,IAAI,EAAEC,KAAM,KAAK;UAAE,IAAIA,KAAK,KAAKpC,SAAS,EAAExC,OAAO,CAACa,GAAG,EAAE;YAAE4D,IAAI,EAAE,YAAY;YAAEE,IAAI;YAAEC,KAAK,EAAEA;UAAiC,CAAC,CAAC;QAAE,CAAC;QAChJC,YAAY,EAAEA,CAACF,IAAI,EAAEG,OAAO,EAAEC,CAAC,KAAK/E,OAAO,CAACa,GAAG,EAAE;UAAE4D,IAAI,EAAE,aAAa;UAAEE,IAAI;UAAEG,OAAO;UAAEV,MAAM,EAAEW;QAAS,CAAC,CAAC;QAC1GC,cAAc,EAAEA,CAACL,IAAI,EAAEM,QAAQ,KAAKjF,OAAO,CAACa,GAAG,EAAE;UAAE4D,IAAI,EAAE,eAAe;UAAEE,IAAI;UAAEM,QAAQ,EAAEA;QAAgB,CAAC,CAAC;QAC5GC,kBAAkB,EAAGC,GAAQ,IAAKnF,OAAO,CAACa,GAAG,EAAE;UAAE4D,IAAI,EAAE,UAAU;UAAEW,UAAU,EAAED,GAAG,CAACC,UAAU;UAAEC,aAAa,EAAEF,GAAG,CAACG,KAAK;UAAEX,IAAI,EAAEQ,GAAG,CAACI;QAAS,CAAC,CAAC;QAC9IrB,kBAAkB,EAAE;UAAE,IAAIsB,KAAKA,CAAA,EAAG;YAAE,OAAOtB,kBAAkB;UAAE;QAAE,CAAC;QAClE3C,MAAM,EAAEA,MAAM,IAAI;MACpB,CAAC,CAAC;MAEFvB,OAAO,CAACa,GAAG,EAAE;QACX4D,IAAI,EAAE,OAAO;QAAEgB,KAAK,EAAE;UACpBC,YAAY,EAAEtB,MAAM,CAACuB,MAAM,CAACf,KAAK;UAAEgB,aAAa,EAAExB,MAAM,CAACuB,MAAM,CAACE,MAAM;UACtEC,qBAAqB,EAAE1B,MAAM,CAACuB,MAAM,CAACI,aAAa;UAAEC,iBAAiB,EAAE5B,MAAM,CAACuB,MAAM,CAACM,SAAS;UAC9FC,QAAQ,EAAE9B,MAAM,CAAC+B;QACnB;MACF,CAAC,CAAC;MAEFnG,OAAO,CAACa,GAAG,EAAE;QAAE4D,IAAI,EAAE,MAAM;QAAEjD,cAAc,EAAEoC,OAAO,CAACjB;MAAG,CAAC,CAAC;IAC5D,CAAC,CAAC,OAAOyD,GAAG,EAAE;MACZ5C,cAAc,GAAG,KAAK;MACtBxD,OAAO,CAACa,GAAG,EAAE;QAAE4D,IAAI,EAAE,OAAO;QAAE7C,KAAK,EAAE9B,aAAa,CAACsG,GAAG;MAAE,CAAC,CAAC;IAC5D;IAEAvF,GAAG,CAACwC,GAAG,CAAC,CAAC;EAET,CAAC,SAAS;IACRjD,mBAAmB,CAAC,CAAC;IACrB;IACA,IAAIuB,OAAO,EAAE;MACXpB,kBAAkB,CAACoB,OAAO,EAAE6B,cAAc,CAAC;IAC7C;EACF;AACF","ignoreList":[]}

package/dist/server/server-cost-guard.d.ts

@@ -0,0 +1,16 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export interface CostCheckResult {
+    allowed: boolean;
+    error?: string;
+    /** True if the store is over the alert threshold but not hard-stopped */
+    warning?: string;
+}
+/** Invalidate cache for a store (called after spend is recorded) */
+export declare function invalidateCostCache(storeId: string, agentId?: string): void;
+/**
+ * Check if a store (and optionally a specific agent) is within its cost budget.
+ * Returns { allowed: true } if no budgets are configured or all are within limits.
+ * Returns { allowed: false, error } if a hard_stop budget is exceeded.
+ * Returns { allowed: true, warning } if spend exceeds alert threshold but not hard-stopped.
+ */
+export declare function checkCostBudget(supabase: SupabaseClient, storeId: string, agentId?: string): Promise<CostCheckResult>;

package/dist/server/server-cost-guard.js

@@ -0,0 +1,141 @@
+// server/server-cost-guard.ts — Pre-request cost budget enforcement
+// Checks ai_cost_budgets BEFORE processing a chat request.
+// The existing increment_cost_budget RPC tracks spend post-request;
+// this module gates admission so over-budget stores are rejected early.
+
+import { createLogger } from "./lib/logger.js";
+const log = createLogger("cost-guard");
+
+// ============================================================================
+// TYPES
+// ============================================================================
+
+// ============================================================================
+// BUDGET CACHE — avoids hitting Postgres on every request
+// TTL-based, per store+agent pair. Invalidated when spend is recorded.
+// ============================================================================
+
+const budgetCache = new Map();
+const CACHE_TTL_MS = 30_000; // 30s — balance between freshness and DB load
+const CACHE_MAX_ENTRIES = 200;
+function cacheKey(storeId, agentId) {
+  return agentId ? `${storeId}:${agentId}` : storeId;
+}
+
+/** Evict oldest entries when cache exceeds max size */
+function evictCache() {
+  if (budgetCache.size <= CACHE_MAX_ENTRIES) return;
+  const entries = [...budgetCache.entries()].sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);
+  const excess = budgetCache.size - CACHE_MAX_ENTRIES;
+  for (let i = 0; i < excess; i++) {
+    budgetCache.delete(entries[i][0]);
+  }
+}
+
+/** Invalidate cache for a store (called after spend is recorded) */
+export function invalidateCostCache(storeId, agentId) {
+  budgetCache.delete(cacheKey(storeId, agentId));
+  budgetCache.delete(storeId); // Also clear store-wide entry
+}
+
+// Periodic cleanup of stale cache entries
+setInterval(() => {
+  const now = Date.now();
+  for (const [key, entry] of budgetCache) {
+    if (now - entry.fetchedAt > CACHE_TTL_MS * 2) {
+      budgetCache.delete(key);
+    }
+  }
+}, 60_000);
+
+// ============================================================================
+// COST BUDGET CHECK
+// ============================================================================
+
+/**
+ * Check if a store (and optionally a specific agent) is within its cost budget.
+ * Returns { allowed: true } if no budgets are configured or all are within limits.
+ * Returns { allowed: false, error } if a hard_stop budget is exceeded.
+ * Returns { allowed: true, warning } if spend exceeds alert threshold but not hard-stopped.
+ */
+export async function checkCostBudget(supabase, storeId, agentId) {
+  const key = cacheKey(storeId, agentId);
+  const cached = budgetCache.get(key);
+  let budgets;
+  if (cached && Date.now() - cached.fetchedAt < CACHE_TTL_MS) {
+    budgets = cached.budgets;
+  } else {
+    // Fetch active budgets for this store that apply to this agent
+    // A budget applies if: agent_id matches OR agent_id is NULL (store-wide budget)
+    let query = supabase.from("ai_cost_budgets").select("id, store_id, agent_id, budget_type, limit_usd, current_spend_usd, is_active, hard_stop, alert_threshold_pct").eq("store_id", storeId).eq("is_active", true);
+    if (agentId) {
+      // Match agent-specific OR store-wide (agent_id IS NULL)
+      query = query.or(`agent_id.eq.${agentId},agent_id.is.null`);
+    } else {
+      query = query.is("agent_id", null);
+    }
+    const {
+      data,
+      error
+    } = await query;
+    if (error) {
+      // Fail open — don't block requests if budget check itself fails
+      log.warn({
+        error: error.message,
+        storeId
+      }, "cost budget query failed, allowing request");
+      return {
+        allowed: true
+      };
+    }
+    budgets = data || [];
+    budgetCache.set(key, {
+      budgets,
+      fetchedAt: Date.now()
+    });
+    evictCache();
+  }
+
+  // No budgets configured — allow
+  if (!budgets.length) return {
+    allowed: true
+  };
+
+  // Check each budget
+  for (const budget of budgets) {
+    const spend = budget.current_spend_usd || 0;
+    const limit = budget.limit_usd;
+    if (limit <= 0) continue; // Unlimited budget
+
+    if (spend >= limit) {
+      if (budget.hard_stop) {
+        const scope = budget.agent_id ? `agent ${budget.agent_id}` : "store";
+        log.warn({
+          storeId,
+          agentId: budget.agent_id,
+          spend,
+          limit,
+          budgetType: budget.budget_type
+        }, "cost budget hard stop");
+        return {
+          allowed: false,
+          error: `Cost budget exceeded for ${scope}: $${spend.toFixed(2)}/$${limit.toFixed(2)} (${budget.budget_type}). Contact your admin to increase the budget.`
+        };
+      }
+    }
+
+    // Alert threshold check (non-blocking)
+    const alertThreshold = (budget.alert_threshold_pct || 80) / 100;
+    if (spend >= limit * alertThreshold && spend < limit) {
+      const pct = Math.round(spend / limit * 100);
+      return {
+        allowed: true,
+        warning: `Cost budget ${pct}% utilized ($${spend.toFixed(2)}/$${limit.toFixed(2)}, ${budget.budget_type})`
+      };
+    }
+  }
+  return {
+    allowed: true
+  };
+}
+//# sourceMappingURL=server-cost-guard.js.map

package/dist/server/server-cost-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-cost-guard.js","names":["createLogger","log","budgetCache","Map","CACHE_TTL_MS","CACHE_MAX_ENTRIES","cacheKey","storeId","agentId","evictCache","size","entries","sort","a","b","fetchedAt","excess","i","delete","invalidateCostCache","setInterval","now","Date","key","entry","checkCostBudget","supabase","cached","get","budgets","query","from","select","eq","or","is","data","error","warn","message","allowed","set","length","budget","spend","current_spend_usd","limit","limit_usd","hard_stop","scope","agent_id","budgetType","budget_type","toFixed","alertThreshold","alert_threshold_pct","pct","Math","round","warning"],"sources":["../../src/server/server-cost-guard.ts"],"sourcesContent":["// server/server-cost-guard.ts — Pre-request cost budget enforcement\n// Checks ai_cost_budgets BEFORE processing a chat request.\n// The existing increment_cost_budget RPC tracks spend post-request;\n// this module gates admission so over-budget stores are rejected early.\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createLogger } from \"./lib/logger.js\";\n\nconst log = createLogger(\"cost-guard\");\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\ninterface CostBudgetRow {\n  id: string;\n  store_id: string;\n  agent_id: string | null;\n  budget_type: string;\n  limit_usd: number;\n  current_spend_usd: number;\n  is_active: boolean;\n  hard_stop: boolean;\n  alert_threshold_pct: number;\n}\n\nexport interface CostCheckResult {\n  allowed: boolean;\n  error?: string;\n  /** True if the store is over the alert threshold but not hard-stopped */\n  warning?: string;\n}\n\n// ============================================================================\n// BUDGET CACHE — avoids hitting Postgres on every request\n// TTL-based, per store+agent pair. Invalidated when spend is recorded.\n// ============================================================================\n\ninterface CachedBudget {\n  budgets: CostBudgetRow[];\n  fetchedAt: number;\n}\n\nconst budgetCache = new Map<string, CachedBudget>();\nconst CACHE_TTL_MS = 30_000; // 30s — balance between freshness and DB load\nconst CACHE_MAX_ENTRIES = 200;\n\nfunction cacheKey(storeId: string, agentId?: string): string {\n  return agentId ? `${storeId}:${agentId}` : storeId;\n}\n\n/** Evict oldest entries when cache exceeds max size */\nfunction evictCache(): void {\n  if (budgetCache.size <= CACHE_MAX_ENTRIES) return;\n  const entries = [...budgetCache.entries()].sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);\n  const excess = budgetCache.size - CACHE_MAX_ENTRIES;\n  for (let i = 0; i < excess; i++) {\n    budgetCache.delete(entries[i][0]);\n  }\n}\n\n/** Invalidate cache for a store (called after spend is recorded) */\nexport function invalidateCostCache(storeId: string, agentId?: string): void {\n  budgetCache.delete(cacheKey(storeId, agentId));\n  budgetCache.delete(storeId); // Also clear store-wide entry\n}\n\n// Periodic cleanup of stale cache entries\nsetInterval(() => {\n  const now = Date.now();\n  for (const [key, entry] of budgetCache) {\n    if (now - entry.fetchedAt > CACHE_TTL_MS * 2) {\n      budgetCache.delete(key);\n    }\n  }\n}, 60_000);\n\n// ============================================================================\n// COST BUDGET CHECK\n// ============================================================================\n\n/**\n * Check if a store (and optionally a specific agent) is within its cost budget.\n * Returns { allowed: true } if no budgets are configured or all are within limits.\n * Returns { allowed: false, error } if a hard_stop budget is exceeded.\n * Returns { allowed: true, warning } if spend exceeds alert threshold but not hard-stopped.\n */\nexport async function checkCostBudget(\n  supabase: SupabaseClient,\n  storeId: string,\n  agentId?: string,\n): Promise<CostCheckResult> {\n  const key = cacheKey(storeId, agentId);\n  const cached = budgetCache.get(key);\n  let budgets: CostBudgetRow[];\n\n  if (cached && Date.now() - cached.fetchedAt < CACHE_TTL_MS) {\n    budgets = cached.budgets;\n  } else {\n    // Fetch active budgets for this store that apply to this agent\n    // A budget applies if: agent_id matches OR agent_id is NULL (store-wide budget)\n    let query = supabase\n      .from(\"ai_cost_budgets\")\n      .select(\"id, store_id, agent_id, budget_type, limit_usd, current_spend_usd, is_active, hard_stop, alert_threshold_pct\")\n      .eq(\"store_id\", storeId)\n      .eq(\"is_active\", true);\n\n    if (agentId) {\n      // Match agent-specific OR store-wide (agent_id IS NULL)\n      query = query.or(`agent_id.eq.${agentId},agent_id.is.null`);\n    } else {\n      query = query.is(\"agent_id\", null);\n    }\n\n    const { data, error } = await query;\n\n    if (error) {\n      // Fail open — don't block requests if budget check itself fails\n      log.warn({ error: error.message, storeId }, \"cost budget query failed, allowing request\");\n      return { allowed: true };\n    }\n\n    budgets = (data || []) as CostBudgetRow[];\n    budgetCache.set(key, { budgets, fetchedAt: Date.now() });\n    evictCache();\n  }\n\n  // No budgets configured — allow\n  if (!budgets.length) return { allowed: true };\n\n  // Check each budget\n  for (const budget of budgets) {\n    const spend = budget.current_spend_usd || 0;\n    const limit = budget.limit_usd;\n\n    if (limit <= 0) continue; // Unlimited budget\n\n    if (spend >= limit) {\n      if (budget.hard_stop) {\n        const scope = budget.agent_id ? `agent ${budget.agent_id}` : \"store\";\n        log.warn({ storeId, agentId: budget.agent_id, spend, limit, budgetType: budget.budget_type }, \"cost budget hard stop\");\n        return {\n          allowed: false,\n          error: `Cost budget exceeded for ${scope}: $${spend.toFixed(2)}/$${limit.toFixed(2)} (${budget.budget_type}). Contact your admin to increase the budget.`,\n        };\n      }\n    }\n\n    // Alert threshold check (non-blocking)\n    const alertThreshold = (budget.alert_threshold_pct || 80) / 100;\n    if (spend >= limit * alertThreshold && spend < limit) {\n      const pct = Math.round((spend / limit) * 100);\n      return {\n        allowed: true,\n        warning: `Cost budget ${pct}% utilized ($${spend.toFixed(2)}/$${limit.toFixed(2)}, ${budget.budget_type})`,\n      };\n    }\n  }\n\n  return { allowed: true };\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;;AAGA,SAASA,YAAY,QAAQ,iBAAiB;AAE9C,MAAMC,GAAG,GAAGD,YAAY,CAAC,YAAY,CAAC;;AAEtC;AACA;AACA;;AAqBA;AACA;AACA;AACA;;AAOA,MAAME,WAAW,GAAG,IAAIC,GAAG,CAAuB,CAAC;AACnD,MAAMC,YAAY,GAAG,MAAM,CAAC,CAAC;AAC7B,MAAMC,iBAAiB,GAAG,GAAG;AAE7B,SAASC,QAAQA,CAACC,OAAe,EAAEC,OAAgB,EAAU;EAC3D,OAAOA,OAAO,GAAG,GAAGD,OAAO,IAAIC,OAAO,EAAE,GAAGD,OAAO;AACpD;;AAEA;AACA,SAASE,UAAUA,CAAA,EAAS;EAC1B,IAAIP,WAAW,CAACQ,IAAI,IAAIL,iBAAiB,EAAE;EAC3C,MAAMM,OAAO,GAAG,CAAC,GAAGT,WAAW,CAACS,OAAO,CAAC,CAAC,CAAC,CAACC,IAAI,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAKD,CAAC,CAAC,CAAC,CAAC,CAACE,SAAS,GAAGD,CAAC,CAAC,CAAC,CAAC,CAACC,SAAS,CAAC;EAC1F,MAAMC,MAAM,GAAGd,WAAW,CAACQ,IAAI,GAAGL,iBAAiB;EACnD,KAAK,IAAIY,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGD,MAAM,EAAEC,CAAC,EAAE,EAAE;IAC/Bf,WAAW,CAACgB,MAAM,CAACP,OAAO,CAACM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;EACnC;AACF;;AAEA;AACA,OAAO,SAASE,mBAAmBA,CAACZ,OAAe,EAAEC,OAAgB,EAAQ;EAC3EN,WAAW,CAACgB,MAAM,CAACZ,QAAQ,CAACC,OAAO,EAAEC,OAAO,CAAC,CAAC;EAC9CN,WAAW,CAACgB,MAAM,CAACX,OAAO,CAAC,CAAC,CAAC;AAC/B;;AAEA;AACAa,WAAW,CAAC,MAAM;EAChB,MAAMC,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;EACtB,KAAK,MAAM,CAACE,GAAG,EAAEC,KAAK,CAAC,IAAItB,WAAW,EAAE;IACtC,IAAImB,GAAG,GAAGG,KAAK,CAACT,SAAS,GAAGX,YAAY,GAAG,CAAC,EAAE;MAC5CF,WAAW,CAACgB,MAAM,CAACK,GAAG,CAAC;IACzB;EACF;AACF,CAAC,EAAE,MAAM,CAAC;;AAEV;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeE,eAAeA,CACnCC,QAAwB,EACxBnB,OAAe,EACfC,OAAgB,EACU;EAC1B,MAAMe,GAAG,GAAGjB,QAAQ,CAACC,OAAO,EAAEC,OAAO,CAAC;EACtC,MAAMmB,MAAM,GAAGzB,WAAW,CAAC0B,GAAG,CAACL,GAAG,CAAC;EACnC,IAAIM,OAAwB;EAE5B,IAAIF,MAAM,IAAIL,IAAI,CAACD,GAAG,CAAC,CAAC,GAAGM,MAAM,CAACZ,SAAS,GAAGX,YAAY,EAAE;IAC1DyB,OAAO,GAAGF,MAAM,CAACE,OAAO;EAC1B,CAAC,MAAM;IACL;IACA;IACA,IAAIC,KAAK,GAAGJ,QAAQ,CACjBK,IAAI,CAAC,iBAAiB,CAAC,CACvBC,MAAM,CAAC,8GAA8G,CAAC,CACtHC,EAAE,CAAC,UAAU,EAAE1B,OAAO,CAAC,CACvB0B,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC;IAExB,IAAIzB,OAAO,EAAE;MACX;MACAsB,KAAK,GAAGA,KAAK,CAACI,EAAE,CAAC,eAAe1B,OAAO,mBAAmB,CAAC;IAC7D,CAAC,MAAM;MACLsB,KAAK,GAAGA,KAAK,CAACK,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC;IACpC;IAEA,MAAM;MAAEC,IAAI;MAAEC;IAAM,CAAC,GAAG,MAAMP,KAAK;IAEnC,IAAIO,KAAK,EAAE;MACT;MACApC,GAAG,CAACqC,IAAI,CAAC;QAAED,KAAK,EAAEA,KAAK,CAACE,OAAO;QAAEhC;MAAQ,CAAC,EAAE,4CAA4C,CAAC;MACzF,OAAO;QAAEiC,OAAO,EAAE;MAAK,CAAC;IAC1B;IAEAX,OAAO,GAAIO,IAAI,IAAI,EAAsB;IACzClC,WAAW,CAACuC,GAAG,CAAClB,GAAG,EAAE;MAAEM,OAAO;MAAEd,SAAS,EAAEO,IAAI,CAACD,GAAG,CAAC;IAAE,CAAC,CAAC;IACxDZ,UAAU,CAAC,CAAC;EACd;;EAEA;EACA,IAAI,CAACoB,OAAO,CAACa,MAAM,EAAE,OAAO;IAAEF,OAAO,EAAE;EAAK,CAAC;;EAE7C;EACA,KAAK,MAAMG,MAAM,IAAId,OAAO,EAAE;IAC5B,MAAMe,KAAK,GAAGD,MAAM,CAACE,iBAAiB,IAAI,CAAC;IAC3C,MAAMC,KAAK,GAAGH,MAAM,CAACI,SAAS;IAE9B,IAAID,KAAK,IAAI,CAAC,EAAE,SAAS,CAAC;;IAE1B,IAAIF,KAAK,IAAIE,KAAK,EAAE;MAClB,IAAIH,MAAM,CAACK,SAAS,EAAE;QACpB,MAAMC,KAAK,GAAGN,MAAM,CAACO,QAAQ,GAAG,SAASP,MAAM,CAACO,QAAQ,EAAE,GAAG,OAAO;QACpEjD,GAAG,CAACqC,IAAI,CAAC;UAAE/B,OAAO;UAAEC,OAAO,EAAEmC,MAAM,CAACO,QAAQ;UAAEN,KAAK;UAAEE,KAAK;UAAEK,UAAU,EAAER,MAAM,CAACS;QAAY,CAAC,EAAE,uBAAuB,CAAC;QACtH,OAAO;UACLZ,OAAO,EAAE,KAAK;UACdH,KAAK,EAAE,4BAA4BY,KAAK,MAAML,KAAK,CAACS,OAAO,CAAC,CAAC,CAAC,KAAKP,KAAK,CAACO,OAAO,CAAC,CAAC,CAAC,KAAKV,MAAM,CAACS,WAAW;QAC5G,CAAC;MACH;IACF;;IAEA;IACA,MAAME,cAAc,GAAG,CAACX,MAAM,CAACY,mBAAmB,IAAI,EAAE,IAAI,GAAG;IAC/D,IAAIX,KAAK,IAAIE,KAAK,GAAGQ,cAAc,IAAIV,KAAK,GAAGE,KAAK,EAAE;MACpD,MAAMU,GAAG,GAAGC,IAAI,CAACC,KAAK,CAAEd,KAAK,GAAGE,KAAK,GAAI,GAAG,CAAC;MAC7C,OAAO;QACLN,OAAO,EAAE,IAAI;QACbmB,OAAO,EAAE,eAAeH,GAAG,gBAAgBZ,KAAK,CAACS,OAAO,CAAC,CAAC,CAAC,KAAKP,KAAK,CAACO,OAAO,CAAC,CAAC,CAAC,KAAKV,MAAM,CAACS,WAAW;MACzG,CAAC;IACH;EACF;EAEA,OAAO;IAAEZ,OAAO,EAAE;EAAK,CAAC;AAC1B","ignoreList":[]}

package/dist/server/server-executors.d.ts

@@ -0,0 +1,10 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+import type { SenderContext } from "./handlers/nodes.js";
+export declare function wireToolExecutor(): void;
+export declare function wireAgentExecutor(): void;
+export declare function wireBroadcasters(): void;
+export declare function invokeAgentForChannel(supabase: SupabaseClient, agentId: string, message: string, storeId: string, conversationId: string, senderContext?: SenderContext): Promise<{
+    success: boolean;
+    response?: string;
+    error?: string;
+}>;

package/dist/server/server-executors.js

@@ -0,0 +1,110 @@
+// server/server-executors.ts — Injected executors and channel agent invoker
+// Delegates to SessionManager for unified session lifecycle.
+
+import { createLogger } from "./lib/logger.js";
+import { sanitizeError } from "../shared/agent-core.js";
+import { executeTool } from "./tool-router.js";
+import { broadcastToRun } from "./server-sse.js";
+import { setToolExecutor, setAgentExecutor, setTokenBroadcaster, setStepErrorBroadcaster } from "./handlers/workflows.js";
+import { SessionManager } from "./session-manager.js";
+const log = createLogger("server-executors");
+
+// ============================================================================
+// INJECT TOOL EXECUTOR INTO WORKFLOW ENGINE
+// ============================================================================
+
+export function wireToolExecutor() {
+  setToolExecutor((supabase, toolName, args, storeId, traceId) => {
+    if (args.store_id && args.store_id !== storeId) {
+      return Promise.resolve({
+        success: false,
+        error: "Store boundary violation: workflow cannot access other stores"
+      });
+    }
+    args.store_id = storeId;
+    return executeTool(supabase, toolName, args, storeId, traceId, null, null, "workflow_engine");
+  });
+}
+
+// ============================================================================
+// INJECT AGENT EXECUTOR FOR WORKFLOW "agent" STEP TYPE
+// ============================================================================
+
+export function wireAgentExecutor() {
+  setAgentExecutor(async (supabase, agentId, prompt, storeId, maxTurns = 5, onToken, traceId) => {
+    try {
+      const manager = new SessionManager(supabase);
+      const session = await manager.createSession({
+        storeId,
+        agentId,
+        surface: "workflow"
+      });
+      const result = await manager.executeTurn(session, {
+        message: prompt,
+        streaming: !!onToken,
+        onText: onToken || undefined,
+        maxTurns,
+        source: "workflow_agent"
+      });
+      return {
+        success: true,
+        response: result.finalText || "(no response)"
+      };
+    } catch (err) {
+      return {
+        success: false,
+        error: sanitizeError(err)
+      };
+    }
+  });
+}
+
+// ============================================================================
+// TOKEN + ERROR BROADCASTERS
+// ============================================================================
+
+export function wireBroadcasters() {
+  setTokenBroadcaster((runId, stepKey, token) => {
+    broadcastToRun(runId, {
+      type: "agent_token",
+      run_id: runId,
+      step_key: stepKey,
+      token
+    });
+  });
+  setStepErrorBroadcaster((runId, data) => {
+    broadcastToRun(runId, data);
+  });
+}
+
+// ============================================================================
+// CHANNEL AGENT INVOKER — shared by channels and webchat
+// ============================================================================
+
+export async function invokeAgentForChannel(supabase, agentId, message, storeId, conversationId, senderContext) {
+  try {
+    const manager = new SessionManager(supabase);
+    const session = await manager.createSession({
+      storeId,
+      agentId,
+      surface: "channel",
+      conversationId,
+      senderContext
+    });
+    const result = await manager.executeTurn(session, {
+      message,
+      streaming: false,
+      source: "channel_agent"
+    });
+    return {
+      success: true,
+      response: result.finalText || "(no response)"
+    };
+  } catch (err) {
+    return {
+      success: false,
+      error: err.message
+    };
+  }
+}
+//# sourceMappingURL=server-executors.js.map

package/dist/server/server-executors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-executors.js","names":["createLogger","sanitizeError","executeTool","broadcastToRun","setToolExecutor","setAgentExecutor","setTokenBroadcaster","setStepErrorBroadcaster","SessionManager","log","wireToolExecutor","supabase","toolName","args","storeId","traceId","store_id","Promise","resolve","success","error","wireAgentExecutor","agentId","prompt","maxTurns","onToken","manager","session","createSession","surface","result","executeTurn","message","streaming","onText","undefined","source","response","finalText","err","wireBroadcasters","runId","stepKey","token","type","run_id","step_key","data","invokeAgentForChannel","conversationId","senderContext"],"sources":["../../src/server/server-executors.ts"],"sourcesContent":["// server/server-executors.ts — Injected executors and channel agent invoker\n// Delegates to SessionManager for unified session lifecycle.\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createLogger } from \"./lib/logger.js\";\nimport { sanitizeError } from \"../shared/agent-core.js\";\nimport { executeTool } from \"./tool-router.js\";\nimport { broadcastToRun } from \"./server-sse.js\";\nimport {\n  setToolExecutor, setAgentExecutor, setTokenBroadcaster, setStepErrorBroadcaster,\n} from \"./handlers/workflows.js\";\nimport type { SenderContext } from \"./handlers/nodes.js\";\nimport { SessionManager } from \"./session-manager.js\";\n\nconst log = createLogger(\"server-executors\");\n\n// ============================================================================\n// INJECT TOOL EXECUTOR INTO WORKFLOW ENGINE\n// ============================================================================\n\nexport function wireToolExecutor(): void {\n  setToolExecutor((supabase, toolName, args, storeId, traceId) => {\n    if (args.store_id && args.store_id !== storeId) {\n      return Promise.resolve({ success: false, error: \"Store boundary violation: workflow cannot access other stores\" });\n    }\n    args.store_id = storeId;\n    return executeTool(supabase, toolName, args, storeId, traceId, null, null, \"workflow_engine\");\n  });\n}\n\n// ============================================================================\n// INJECT AGENT EXECUTOR FOR WORKFLOW \"agent\" STEP TYPE\n// ============================================================================\n\nexport function wireAgentExecutor(): void {\n  setAgentExecutor(async (supabase, agentId, prompt, storeId, maxTurns = 5, onToken, traceId) => {\n    try {\n      const manager = new SessionManager(supabase);\n      const session = await manager.createSession({\n        storeId,\n        agentId,\n        surface: \"workflow\",\n      });\n\n      const result = await manager.executeTurn(session, {\n        message: prompt,\n        streaming: !!onToken,\n        onText: onToken || undefined,\n        maxTurns,\n        source: \"workflow_agent\",\n      });\n\n      return { success: true, response: result.finalText || \"(no response)\" };\n    } catch (err) {\n      return { success: false, error: sanitizeError(err) };\n    }\n  });\n}\n\n// ============================================================================\n// TOKEN + ERROR BROADCASTERS\n// ============================================================================\n\nexport function wireBroadcasters(): void {\n  setTokenBroadcaster((runId, stepKey, token) => {\n    broadcastToRun(runId, { type: \"agent_token\", run_id: runId, step_key: stepKey, token });\n  });\n\n  setStepErrorBroadcaster((runId, data) => {\n    broadcastToRun(runId, data);\n  });\n}\n\n// ============================================================================\n// CHANNEL AGENT INVOKER — shared by channels and webchat\n// ============================================================================\n\nexport async function invokeAgentForChannel(\n  supabase: SupabaseClient, agentId: string, message: string, storeId: string, conversationId: string,\n  senderContext?: SenderContext,\n): Promise<{ success: boolean; response?: string; error?: string }> {\n  try {\n    const manager = new SessionManager(supabase);\n    const session = await manager.createSession({\n      storeId,\n      agentId,\n      surface: \"channel\",\n      conversationId,\n      senderContext,\n    });\n\n    const result = await manager.executeTurn(session, {\n      message,\n      streaming: false,\n      source: \"channel_agent\",\n    });\n\n    return { success: true, response: result.finalText || \"(no response)\" };\n  } catch (err) {\n    return { success: false, error: (err as Error).message };\n  }\n}\n"],"mappings":"AAAA;AACA;;AAGA,SAASA,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,aAAa,QAAQ,yBAAyB;AACvD,SAASC,WAAW,QAAQ,kBAAkB;AAC9C,SAASC,cAAc,QAAQ,iBAAiB;AAChD,SACEC,eAAe,EAAEC,gBAAgB,EAAEC,mBAAmB,EAAEC,uBAAuB,QAC1E,yBAAyB;AAEhC,SAASC,cAAc,QAAQ,sBAAsB;AAErD,MAAMC,GAAG,GAAGT,YAAY,CAAC,kBAAkB,CAAC;;AAE5C;AACA;AACA;;AAEA,OAAO,SAASU,gBAAgBA,CAAA,EAAS;EACvCN,eAAe,CAAC,CAACO,QAAQ,EAAEC,QAAQ,EAAEC,IAAI,EAAEC,OAAO,EAAEC,OAAO,KAAK;IAC9D,IAAIF,IAAI,CAACG,QAAQ,IAAIH,IAAI,CAACG,QAAQ,KAAKF,OAAO,EAAE;MAC9C,OAAOG,OAAO,CAACC,OAAO,CAAC;QAAEC,OAAO,EAAE,KAAK;QAAEC,KAAK,EAAE;MAAgE,CAAC,CAAC;IACpH;IACAP,IAAI,CAACG,QAAQ,GAAGF,OAAO;IACvB,OAAOZ,WAAW,CAACS,QAAQ,EAAEC,QAAQ,EAAEC,IAAI,EAAEC,OAAO,EAAEC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,CAAC;EAC/F,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;;AAEA,OAAO,SAASM,iBAAiBA,CAAA,EAAS;EACxChB,gBAAgB,CAAC,OAAOM,QAAQ,EAAEW,OAAO,EAAEC,MAAM,EAAET,OAAO,EAAEU,QAAQ,GAAG,CAAC,EAAEC,OAAO,EAAEV,OAAO,KAAK;IAC7F,IAAI;MACF,MAAMW,OAAO,GAAG,IAAIlB,cAAc,CAACG,QAAQ,CAAC;MAC5C,MAAMgB,OAAO,GAAG,MAAMD,OAAO,CAACE,aAAa,CAAC;QAC1Cd,OAAO;QACPQ,OAAO;QACPO,OAAO,EAAE;MACX,CAAC,CAAC;MAEF,MAAMC,MAAM,GAAG,MAAMJ,OAAO,CAACK,WAAW,CAACJ,OAAO,EAAE;QAChDK,OAAO,EAAET,MAAM;QACfU,SAAS,EAAE,CAAC,CAACR,OAAO;QACpBS,MAAM,EAAET,OAAO,IAAIU,SAAS;QAC5BX,QAAQ;QACRY,MAAM,EAAE;MACV,CAAC,CAAC;MAEF,OAAO;QAAEjB,OAAO,EAAE,IAAI;QAAEkB,QAAQ,EAAEP,MAAM,CAACQ,SAAS,IAAI;MAAgB,CAAC;IACzE,CAAC,CAAC,OAAOC,GAAG,EAAE;MACZ,OAAO;QAAEpB,OAAO,EAAE,KAAK;QAAEC,KAAK,EAAEnB,aAAa,CAACsC,GAAG;MAAE,CAAC;IACtD;EACF,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;;AAEA,OAAO,SAASC,gBAAgBA,CAAA,EAAS;EACvClC,mBAAmB,CAAC,CAACmC,KAAK,EAAEC,OAAO,EAAEC,KAAK,KAAK;IAC7CxC,cAAc,CAACsC,KAAK,EAAE;MAAEG,IAAI,EAAE,aAAa;MAAEC,MAAM,EAAEJ,KAAK;MAAEK,QAAQ,EAAEJ,OAAO;MAAEC;IAAM,CAAC,CAAC;EACzF,CAAC,CAAC;EAEFpC,uBAAuB,CAAC,CAACkC,KAAK,EAAEM,IAAI,KAAK;IACvC5C,cAAc,CAACsC,KAAK,EAAEM,IAAI,CAAC;EAC7B,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;;AAEA,OAAO,eAAeC,qBAAqBA,CACzCrC,QAAwB,EAAEW,OAAe,EAAEU,OAAe,EAAElB,OAAe,EAAEmC,cAAsB,EACnGC,aAA6B,EACqC;EAClE,IAAI;IACF,MAAMxB,OAAO,GAAG,IAAIlB,cAAc,CAACG,QAAQ,CAAC;IAC5C,MAAMgB,OAAO,GAAG,MAAMD,OAAO,CAACE,aAAa,CAAC;MAC1Cd,OAAO;MACPQ,OAAO;MACPO,OAAO,EAAE,SAAS;MAClBoB,cAAc;MACdC;IACF,CAAC,CAAC;IAEF,MAAMpB,MAAM,GAAG,MAAMJ,OAAO,CAACK,WAAW,CAACJ,OAAO,EAAE;MAChDK,OAAO;MACPC,SAAS,EAAE,KAAK;MAChBG,MAAM,EAAE;IACV,CAAC,CAAC;IAEF,OAAO;MAAEjB,OAAO,EAAE,IAAI;MAAEkB,QAAQ,EAAEP,MAAM,CAACQ,SAAS,IAAI;IAAgB,CAAC;EACzE,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,OAAO;MAAEpB,OAAO,EAAE,KAAK;MAAEC,KAAK,EAAGmB,GAAG,CAAWP;IAAQ,CAAC;EAC1D;AACF","ignoreList":[]}

package/dist/server/server-helpers.d.ts

@@ -0,0 +1,49 @@
+import http from "node:http";
+import Anthropic from "@anthropic-ai/sdk";
+import type { AgentConfig } from "./tool-router.js";
+export interface ServerContext {
+    supabase: import("@supabase/supabase-js").SupabaseClient;
+    corsHeaders: Record<string, string>;
+    url: URL;
+    pathname: string;
+    body?: any;
+    clientIp?: string;
+}
+export interface StreamEvent {
+    type: "text" | "tool_start" | "tool_result" | "tool_progress" | "error" | "done" | "usage" | "subagent";
+    text?: string;
+    name?: string;
+    input?: Record<string, unknown>;
+    result?: unknown;
+    success?: boolean;
+    error?: string;
+    progress?: unknown;
+    usage?: {
+        input_tokens: number;
+        output_tokens: number;
+        cache_creation_tokens?: number;
+        cache_read_tokens?: number;
+        cost_usd?: number;
+    };
+    conversationId?: string;
+    subagentId?: string;
+    subagentEvent?: string;
+}
+/** Timing-safe secret comparison — hash both to fixed length to avoid leaking secret length */
+export declare function safeCompare(a: string, b: string): boolean;
+export declare function getCorsHeaders(origin?: string): Record<string, string>;
+export declare function jsonResponse(res: http.ServerResponse, status: number, data: unknown, corsHeaders: Record<string, string>): void;
+export declare function sendSSE(res: http.ServerResponse, event: StreamEvent): void;
+export declare function getAnthropicClient(agent: AgentConfig): Anthropic;
+/**
+ * Strip large base64 data fields from a JSON string up to `keepFrom` offset.
+ * Uses a linear indexOf scan — safe on strings of any size (no regex stack overflow).
+ */
+export declare function stripLargeBase64Fields(raw: string, keepFrom: number): string;
+export declare function readBody(req: http.IncomingMessage): Promise<string>;
+/**
+ * Compact conversation history to fit within a total character budget.
+ * Only enforces a total budget by walking newest-to-oldest and
+ * dropping the oldest messages that don't fit.
+ */
+export declare function compactHistory(history: Anthropic.MessageParam[], maxHistoryChars: number): Anthropic.MessageParam[];

package/dist/server/server-helpers.js

@@ -0,0 +1,210 @@
+// server/server-helpers.ts — Shared HTTP utilities for the agent server
+// Extracted from index.ts for modularity.
+
+import { timingSafeEqual, createHash } from "node:crypto";
+import Anthropic from "@anthropic-ai/sdk";
+import { createLogger } from "./lib/logger.js";
+const log = createLogger("server-helpers");
+
+// ============================================================================
+// CONSTANTS (exported for use by other modules)
+// ============================================================================
+
+const ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;
+const ALLOWED_ORIGINS = (process.env.ALLOWED_ORIGINS || "http://localhost:3000,http://127.0.0.1:3000").split(",").map(s => s.trim());
+
+// ============================================================================
+// TYPES (exported)
+// ============================================================================
+
+// ============================================================================
+// TIMING-SAFE COMPARISON
+// ============================================================================
+
+/** Timing-safe secret comparison — hash both to fixed length to avoid leaking secret length */
+export function safeCompare(a, b) {
+  if (!a || !b) return false;
+  const hashA = createHash("sha256").update(a).digest();
+  const hashB = createHash("sha256").update(b).digest();
+  return timingSafeEqual(hashA, hashB);
+}
+
+// ============================================================================
+// CORS
+// ============================================================================
+
+export function getCorsHeaders(origin) {
+  const headers = {
+    "X-Content-Type-Options": "nosniff",
+    "X-Frame-Options": "DENY",
+    "X-XSS-Protection": "0",
+    "Referrer-Policy": "strict-origin-when-cross-origin"
+  };
+  if (ALLOWED_ORIGINS.includes("*")) {
+    headers["Access-Control-Allow-Origin"] = "*";
+  } else if (origin && ALLOWED_ORIGINS.includes(origin)) {
+    headers["Access-Control-Allow-Origin"] = origin;
+    headers["Vary"] = "Origin";
+  }
+  headers["Access-Control-Allow-Methods"] = "GET, POST, OPTIONS";
+  headers["Access-Control-Allow-Headers"] = "Content-Type, Authorization, X-Store-Id";
+  return headers;
+}
+
+// ============================================================================
+// JSON & SSE RESPONSE HELPERS
+// ============================================================================
+
+export function jsonResponse(res, status, data, corsHeaders) {
+  res.writeHead(status, {
+    "Content-Type": "application/json",
+    ...corsHeaders
+  });
+  res.end(JSON.stringify(data));
+}
+export function sendSSE(res, event) {
+  try {
+    if (res.destroyed || res.writableEnded) return;
+    res.write(`data: ${JSON.stringify(event)}\n\n`);
+  } catch {/* client disconnected — benign */}
+}
+export function getAnthropicClient(agent) {
+  const key = agent.api_key || ANTHROPIC_API_KEY;
+  return new Anthropic({
+    apiKey: key,
+    timeout: 15 * 60 * 1000
+  }); // 15 min for tool-heavy requests
+}
+
+// ============================================================================
+// REQUEST BODY READING
+// ============================================================================
+
+/**
+ * Strip large base64 data fields from a JSON string up to `keepFrom` offset.
+ * Uses a linear indexOf scan — safe on strings of any size (no regex stack overflow).
+ */
+export function stripLargeBase64Fields(raw, keepFrom) {
+  const MIN_DATA_LEN = 8_000;
+
+  // Pass 1: Strip "data":"<large base64>" fields (Anthropic image source blocks)
+  let result = raw;
+  {
+    const DATA_MARKER = '"data":"';
+    const parts = [];
+    let pos = 0;
+    while (pos < keepFrom) {
+      const idx = result.indexOf(DATA_MARKER, pos);
+      if (idx === -1 || idx >= keepFrom) {
+        parts.push(result.slice(pos, keepFrom));
+        pos = keepFrom;
+        break;
+      }
+      parts.push(result.slice(pos, idx + DATA_MARKER.length));
+      pos = idx + DATA_MARKER.length;
+      let end = pos;
+      while (end < result.length && result[end] !== '"') end++;
+      if (end - pos >= MIN_DATA_LEN && end <= keepFrom) {
+        parts.push('"');
+        pos = end + 1;
+      }
+    }
+    parts.push(result.slice(keepFrom));
+    result = parts.join("");
+  }
+
+  // Pass 2: Strip __IMAGE__<mime>__<large base64> text markers
+  {
+    const IMG_MARKER = "__IMAGE__";
+    const adjustedKeepFrom = Math.min(keepFrom, result.length);
+    const parts = [];
+    let pos = 0;
+    while (pos < adjustedKeepFrom) {
+      const idx = result.indexOf(IMG_MARKER, pos);
+      if (idx === -1 || idx >= adjustedKeepFrom) {
+        parts.push(result.slice(pos, adjustedKeepFrom));
+        pos = adjustedKeepFrom;
+        break;
+      }
+      parts.push(result.slice(pos, idx));
+      let end = idx;
+      while (end < result.length && result[end] !== '"') end++;
+      if (end - idx >= MIN_DATA_LEN && end <= adjustedKeepFrom) {
+        parts.push("[image pruned]");
+        pos = end;
+      } else {
+        parts.push(result.slice(idx, idx + IMG_MARKER.length));
+        pos = idx + IMG_MARKER.length;
+      }
+    }
+    parts.push(result.slice(adjustedKeepFrom));
+    result = parts.join("");
+  }
+  return result;
+}
+export async function readBody(req) {
+  const MAX_BODY = 524_288_000; // 500MB
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    let size = 0;
+    let rejected = false;
+    req.on("data", chunk => {
+      size += chunk.length;
+      if (size > MAX_BODY && !rejected) {
+        rejected = true;
+        req.resume();
+        reject(new Error("Request body too large (max 500MB)"));
+        return;
+      }
+      if (!rejected) chunks.push(chunk);
+    });
+    req.on("end", () => {
+      if (rejected) return;
+      const declaredLen = parseInt(req.headers["content-length"] || "0", 10);
+      if (declaredLen > 0 && size < declaredLen) {
+        log.error({
+          declaredLen,
+          receivedLen: size
+        }, "Request body truncated during transmission");
+        reject(new Error(`Body truncated: expected ${declaredLen} bytes, got ${size}`));
+        return;
+      }
+      let raw = Buffer.concat(chunks).toString("utf8");
+      if (raw.length > 1_000_000) {
+        const keepFrom = Math.max(0, raw.length - 1_048_576);
+        raw = stripLargeBase64Fields(raw, keepFrom);
+        log.info({
+          originalBytes: size,
+          prunedBytes: Buffer.byteLength(raw)
+        }, "Pruned old base64 data from request body");
+      }
+      resolve(raw);
+    });
+    req.on("error", reject);
+  });
+}
+
+// ============================================================================
+// HISTORY COMPACTION
+// ============================================================================
+
+/**
+ * Compact conversation history to fit within a total character budget.
+ * Only enforces a total budget by walking newest-to-oldest and
+ * dropping the oldest messages that don't fit.
+ */
+export function compactHistory(history, maxHistoryChars) {
+  if (!history?.length) return [];
+  let totalChars = 0;
+  const compacted = [];
+  for (let i = history.length - 1; i >= 0; i--) {
+    const msg = history[i];
+    const msgChars = JSON.stringify(msg.content).length;
+    if (totalChars + msgChars > maxHistoryChars) break;
+    totalChars += msgChars;
+    compacted.unshift(msg);
+  }
+  while (compacted.length > 0 && compacted[0].role !== "user") compacted.shift();
+  return compacted;
+}
+//# sourceMappingURL=server-helpers.js.map