Function deriveAccountScope

server/src/training-agent/task-handlers.ts:295–306

* Extract an account-scoping string for the idempotency cache from the * tool arguments. Mirrors `sessionKeyFromArgs` but returns just the scope * portion (no `open:` prefix) so callers can feed it to `scopedPrincipal`. * * The scope is caller-controlled, so it doesn't authenticate anything — *

(args: Record<string, unknown>)

 * from seeing each other's idempotency outcomes.
 */
function deriveAccountScope(args: Record<string, unknown>): string | undefined {
  const account = (args.account as { account_id?: string; brand?: { domain?: string } } | undefined);
  if (account?.account_id && typeof account.account_id === 'string') {
    return `a:${account.account_id}`;
  }
  const domain = account?.brand?.domain
    ?? (args.brand as { domain?: string } | undefined)?.domain;
  if (typeof domain === 'string' && domain.length > 0) {
    return `b:${domain.toLowerCase()}`;
  }
  return undefined;
}

/** Clear the task store (for tests). Calls cleanup() to cancel TTL timers. */
export function clearTaskStore(): void {