Function sessionKeyFromArgs

server/src/training-agent/state.ts:376–411

(
  args: { account?: AccountRef; brand?: BrandRef; plans?: unknown },
  mode: 'open' | 'training',
  userId?: string,
  moduleId?: string,
)

 * the spec's `account` invariant on every step).
 */
export function sessionKeyFromArgs(
  args: { account?: AccountRef; brand?: BrandRef; plans?: unknown },
  mode: 'open' | 'training',
  userId?: string,
  moduleId?: string,
): string {
  if (mode === 'training' && userId) {
    const safeUser = safeKey(userId, 128, SAFE_ACCOUNT_ID_RE) ?? 'default';
    const safeModule = safeKey(moduleId, 128, SAFE_ACCOUNT_ID_RE) ?? 'default';
    return `training:${safeUser}:${safeModule}`;
  }
  const account = args.account;
  const domain = account?.brand?.domain ?? args.brand?.domain;
  const safeDomain = safeKey(domain, MAX_DOMAIN_LEN, SAFE_DOMAIN_RE);
  if (safeDomain) {
    // DNS is case-insensitive — normalise so Example.com and example.com share a session.
    return `open:${safeDomain.toLowerCase()}`;
  }
  if (domain && !safeDomain) {
    logger.debug({ domain }, 'Rejected brand.domain as session key; falling back');
  }
  if (account?.account_id) {
    const safe = safeKey(account.account_id, MAX_ACCOUNT_ID_LEN, SAFE_ACCOUNT_ID_RE);
    if (safe) return `open:${safe}`;
  }
  if (Array.isArray(args.plans) && args.plans.length > 0) {
    const first = args.plans[0] as { brand?: BrandRef } | undefined;
    const planDomain = first?.brand?.domain;
    const safePlanDomain = safeKey(planDomain, MAX_DOMAIN_LEN, SAFE_DOMAIN_RE);
    if (safePlanDomain) return `open:${safePlanDomain.toLowerCase()}`;
    if (planDomain && !safePlanDomain) {
      logger.debug({ domain: planDomain }, 'Rejected plans[0].brand.domain as session key; falling back');
    }
  }
  return 'open:default';
}

// ── TTL cleanup ──────────────────────────────────────────────────