{datetime.date.today()}
| Kostnad MTD | kr {mtd:.2f} |
| Daglig snitt (7d) | kr {daily:.2f} |
CostGuard by Vauco AS · opax.vauco.no
Event: {req.event}
" msg.attach(MIMEText(body, "html")) raw = base64.urlsafe_b64encode(msg.as_bytes()).decode() try: service = build("gmail", "v1", credentials=creds, cache_discovery=False) service.users().messages().send(userId="me", body={"raw": raw}).execute() return JSONResponse({"status": "ok", "to": req.to, "subject": req.subject}) except Exception as e: return JSONResponse(status_code=500, content={"status": "error", "detail": str(e)}) app.add_api_route("/notify/email", endpoint=require_auth(_notify_email), methods=["POST"]) async def _notify_sms(request: Request, req: SmsNotifyRequest): result = await _notifier.send_sms(req) if result["status"] == "not_allowed": return JSONResponse(status_code=402, content=result) if result["status"] == "not_configured": return JSONResponse(status_code=503, content=result) return JSONResponse(status_code=200 if result["status"]=="ok" else 500, content=result) app.add_api_route("/notify/sms", endpoint=require_auth(_notify_sms), methods=["POST"]) # ── ONBOARDING ENDPOINTS ───────────────────────────────────────────────────────── @app.get("/onboard") def onboard_wizard(): f = pathlib.Path(__file__).parent / "static" / "onboard.html" return FileResponse(str(f)) @app.get("/onboard/invite/{token}") async def onboard_invite_landing(token: str): """ Offentlig URL Jason sender til potensiell kunde. Validerer token, server onboard.html med prefilled data i meta-tag. IAP-exempt via IAP_EXEMPT_PREFIXES. """ if not db: raise HTTPException(status_code=503, detail="Databasefeil") store = InviteStore(db) invite = store.get(token) if not invite: raise HTTPException(status_code=404, detail="Invitasjonen er ugyldig eller utløpt.") html = (pathlib.Path(__file__).parent / "static" / "onboard.html").read_text(encoding="utf-8") # Inject invite data as a script block before inject = f""" """ html = html.replace("", inject + "\n", 1) return Response(content=html, media_type="text/html") async def _onboard_invite_create(request: Request, req: InviteCreateRequest): """ POST /onboard/invite — intern, IAP-beskyttet. Oppretter token og returnerer ferdig URL Chris/Jason kan sende til kunde. """ if not db: raise HTTPException(status_code=503, detail="Firestore ikke tilgjengelig") user = request.session.get("user", {}) created_by = user.get("email", "internal") store = InviteStore(db) token = store.create(company=req.company, email=req.email, tier=req.tier, created_by=created_by) invite_url = f"{BASE_URL}/onboard/invite/{token}" # Send invite-e-post til prospekt automatisk email_result = await _notifier.send_email(EmailNotifyRequest( to=req.email, event="custom", subject=f"🚀 Du er invitert til CostGuard — {req.company}", body_html=f"""av Vauco AS
Hei!
Du er invitert til å aktivere CostGuard for {req.company}.
Klikk på knappen nedenfor for å fullføre oppsett på 2 minutter:
Lenken er gyldig i 72 timer. Trenger du hjelp? Svar på denne e-posten.
CostGuard by Vauco AS · opax.vauco.no
Hei {req.contact}, CostGuard overvåker nå {req.gcp_project} (tier: {TIER_LABELS.get(req.tier, req.tier)}).
", )) internal_wh = os.environ.get("VAUCO_INTERNAL_WEBHOOK") if internal_wh: try: await _notifier.send_webhook(WebhookNotifyRequest( url=internal_wh, event="custom", title="🆕 Ny CostGuard-kunde onboardet", body=f"{req.company} ({req.gcp_project}) — tier: {req.tier}", payload={"kontakt": req.contact, "e-post": req.email, "kanaler": ", ".join(req.channels)}, )) except Exception as e: print(f"[Onboard] Intern Slack-feil: {e}", file=sys.stderr) return {"status": "ok", "customer": req.gcp_project, "company": req.company, "channels": req.channels, "notify": notify_results} # ── ROOT ────────────────────────────────────────────────────────────────────────── @app.get("/") def root(): return FileResponse(str(pathlib.Path(__file__).parent / "static" / "opax.html")) @app.get("/health") def health(): return {"status": "ok"} @app.get("/manifest.json", include_in_schema=False) def manifest(): return FileResponse(str(pathlib.Path(__file__).parent / "static" / "manifest.json")) @app.get("/sw.js", include_in_schema=False) def service_worker(): return FileResponse(str(pathlib.Path(__file__).parent / "static" / "sw.js")) # ── ADMIN ──────────────────────────────────────────────────────────────────────── @app.get('/admin') @require_auth async def admin_panel(request: Request): return FileResponse(str(pathlib.Path(__file__).parent / "static" / "admin.html")) @app.post('/admin/create-customer') @require_auth async def create_customer(request: Request): import subprocess, re, shutil data = await request.json() customer_name = data.get("customer_name", "").strip() project_id = data.get("project_id", "").strip() billing_account_id = data.get("billing_account_id", "").strip() alert_email = data.get("alert_email", "").strip() container_image = data.get("container_image", "").strip() region = data.get("region", "europe-north1").strip() if not all([customer_name, project_id, billing_account_id, alert_email, container_image]): raise HTTPException(status_code=400, detail="Alle felt er påkrevd") if not re.match(r'^[a-z0-9_-]+$', customer_name): raise HTTPException(status_code=400, detail="customer_name kan kun inneholde a-z, 0-9, - og _") customer_dir = f"infrastructure/terraform/customers/{customer_name}" template_dir = "infrastructure/terraform/customers/_template" if os.path.exists(customer_dir): raise HTTPException(status_code=409, detail=f"Kunde {customer_name} eksisterer allerede") shutil.copytree(template_dir, customer_dir) with open(f"{customer_dir}/terraform.tfvars", "w") as f: f.write(f'customer_id = "{customer_name}"\nproject_id = "{project_id}"\nregion = "{region}"\nbilling_account_id = "{billing_account_id}"\nalert_email = "{alert_email}"\nbilling_viewer_emails = ["chris.christiansen@vauco.no", "jason.vauger@vauco.no"]\ncontainer_image = "{container_image}"\n') try: init = subprocess.run(["terraform", f"-chdir={customer_dir}", "init", "-no-color"], capture_output=True, text=True, timeout=120) if init.returncode != 0: shutil.rmtree(customer_dir) raise HTTPException(status_code=500, detail=f"terraform init feilet: {init.stderr[-500:]}") apply = subprocess.run(["terraform", f"-chdir={customer_dir}", "apply", "-auto-approve", "-no-color"], capture_output=True, text=True, timeout=600) if apply.returncode != 0: raise HTTPException(status_code=500, detail=f"terraform apply feilet: {apply.stderr[-500:]}") return {"status": "ok", "customer": customer_name, "project_id": project_id} except subprocess.TimeoutExpired: raise HTTPException(status_code=504, detail="Terraform tok for lang tid") # ── BILLING ENDPOINTS ──────────────────────────────────────────────────────────── async def get_budget(request: Request): if not db: return JSONResponse(status_code=500, content={"error": "Firestore is not configured"}) try: doc = db.collection("settings").document("budget").get() return JSONResponse(content={"budget": doc.to_dict().get("limit", 500) if doc.exists else 500}) except Exception as e: return JSONResponse(status_code=500, content={"error": str(e)}) async def set_budget(request: Request, payload: BudgetUpdateRequest): if not db: return JSONResponse(status_code=500, content={"error": "Firestore is not configured"}) try: db.collection("settings").document("budget").set({"limit": payload.budget}) return JSONResponse(content={"status": "ok", "budget": payload.budget}) except Exception as e: return JSONResponse(status_code=500, content={"error": str(e)}) app.add_api_route("/billing/budget", endpoint=require_auth(get_budget), methods=["GET"]) app.add_api_route("/billing/budget", endpoint=require_auth(set_budget), methods=["POST"]) @app.post("/billing/email-report") async def trigger_email_report(): result = await _notifier.send_email(EmailNotifyRequest(event="digest")) if result["status"] == "not_configured": return JSONResponse(status_code=200, content={"status": "not_configured", "error": result["detail"]}) return JSONResponse(status_code=200 if result["status"]=="ok" else 500, content=result) @app.post("/billing/snapshot") async def create_daily_snapshot(request: Request): await trigger_email_report() return JSONResponse(content={"status": "ok", "snapshot_id": str(datetime.date.today())}) async def get_history(request: Request): if not db: return JSONResponse(status_code=500, content={"error": "Firestore is not configured"}) try: end_date = datetime.date.today() start_date = end_date - datetime.timedelta(days=90) docs = db.collection("daily_snapshots").where("created_at", ">=", start_date.isoformat()).order_by("created_at", direction=firestore.Query.DESCENDING).limit(90).stream() history = [{"date": doc.id, **doc.to_dict()} for doc in docs] history.reverse() return JSONResponse(content={"history": history}) except Exception as e: return JSONResponse(status_code=500, content={"error": str(e)}) app.add_api_route("/billing/history", endpoint=require_auth(get_history), methods=["GET"]) async def authenticated_billing_summary(request: Request): try: return BillingAgent().get_summary() except Exception as exc: return JSONResponse(status_code=500, content={"error": str(exc)}) app.add_api_route("/billing/summary", endpoint=require_auth(authenticated_billing_summary), methods=["GET"]) async def authenticated_billing_forecast(request: Request): try: return BillingAgent().get_forecast() except Exception as exc: return JSONResponse(status_code=500, content={"error": str(exc)}) app.add_api_route("/billing/forecast", endpoint=require_auth(authenticated_billing_forecast), methods=["GET"]) async def authenticated_billing_anomalies(request: Request): try: return AnomalyDetector().detect_anomalies() except Exception as exc: return JSONResponse(status_code=500, content={"error": str(exc)}) app.add_api_route("/billing/anomalies", endpoint=require_auth(authenticated_billing_anomalies), methods=["GET"]) async def authenticated_billing_credits(request: Request, days: int = 90): try: return JSONResponse(BillingAgent().get_credits_status(days=days)) except Exception as exc: return JSONResponse(status_code=500, content={"error": str(exc)}) app.add_api_route("/billing/credits", endpoint=require_auth(authenticated_billing_credits), methods=["GET"]) @app.get("/billing-dashboard") def billing_dashboard_view(request: Request): return RedirectResponse(url='/static/billing-dashboard.html') @app.post("/billing/subscribe") def subscribe_for_push(sub: PushSubscription): if not db: raise HTTPException(status_code=500, detail="Firestore is not configured") try: db.collection("push_subscribers").document(sub.token).set({"budget_nok": sub.budget_nok, "subscribed_at": firestore.SERVER_TIMESTAMP}) return {"status": "ok"} except Exception as e: raise HTTPException(status_code=500, detail=str(e)) @app.post("/billing/budget-webhook") async def budget_webhook(payload: BudgetWebhookPayload): if not db: return {"status": "error", "detail": "Firestore not configured"} try: data = base64.b64decode(payload.message.get("data", "")).decode("utf-8") data_json = json.loads(data) cost_amount = data_json.get("costAmount", 0) budget_amount = data_json.get("budgetAmount", 0) if budget_amount > 0 and (cost_amount / budget_amount) > 0.8: percent_used = round((cost_amount / budget_amount) * 100) tokens = [s.id for s in db.collection("push_subscribers").stream()] if tokens: messaging.send_multicast(messaging.MulticastMessage(tokens=tokens, notification=messaging.Notification(title="⚠️ CostGuard Varsel", body=f"Du har brukt {percent_used}% av budsjett (kr {int(cost_amount)} av kr {int(budget_amount)})"))) return {"status": "processed"} except Exception as e: return {"status": "error", "detail": str(e)} @app.get("/billing/live") @cached(TTLCache(maxsize=1, ttl=3600)) async def billing_live(request: Request): user = request.session.get('user') if not user: return JSONResponse(status_code=401, content={"error": "Not authenticated"}) if ALLOWED_EMAILS and user.get('email') not in ALLOWED_EMAILS: return JSONResponse(status_code=403, content={"error": "Email not allowed"}) bq_forecast = BillingAgent().get_forecast() bq_forecast["data_source"] = "BigQuery Fallback" return bq_forecast # ── AWS BILLING ─────────────────────────────────────────────────────────────── async def authenticated_aws_billing_summary(request: Request): try: return AWSBillingAgent().get_summary() except Exception as exc: return JSONResponse(status_code=500, content={"error": str(exc)}) app.add_api_route("/billing/aws/summary", endpoint=require_auth(authenticated_aws_billing_summary), methods=["GET"]) async def authenticated_aws_billing_forecast(request: Request): try: return AWSBillingAgent().get_forecast() except Exception as exc: return JSONResponse(status_code=500, content={"error": str(exc)}) app.add_api_route("/billing/aws/forecast", endpoint=require_auth(authenticated_aws_billing_forecast), methods=["GET"]) # ── AGENT ENDPOINTS ─────────────────────────────────────────────────────────── @app.post("/run") async def run_agent(req: RunRequest): # ← async def try: authorize_mode(req.user_id, req.mode) except ValueError as e: raise HTTPException(status_code=400, detail=str(e)) except PermissionError as e: raise HTTPException(status_code=403, detail=str(e)) store = get_store() start = time.monotonic() error_msg = None response = None try: from agent import _run_async # ← importer async-funksjonen response = await _run_async( # ← await direkte message=req.message, user_id=req.user_id, session_id=req.session_id, mode=req.mode, ) except Exception as e: error_msg = str(e) raise HTTPException(status_code=500, detail=error_msg) finally: duration = round(time.monotonic() - start, 3) success = error_msg is None model = "gemini-2.5-flash" if req.mode in ("light", "A") else "gemini-2.5-pro" log_agent_call(agent_id=AGENT_ID, input_payload={"message": req.message, "mode": req.mode}, output=response, model_used=model, mode=req.mode, duration_s=duration, success=success, error=error_msg) store.push(AGENT_ID, "last_duration_s", duration) store.push(AGENT_ID, "last_mode", req.mode) store.push(AGENT_ID, "last_success", success) if response: store.push(AGENT_ID, "last_result_preview", response[:200]) return {"response": response} @app.post("/run/dag") async def run_dag(req: DagRequest): try: authorize_mode(req.user_id, req.mode) except ValueError as e: raise HTTPException(status_code=400, detail=str(e)) except PermissionError as e: raise HTTPException(status_code=403, detail=str(e)) from agent import _run_async def make_agent_fn(msg, idx): async def _agent_fn(payload): return await _run_async(message=msg, user_id=payload["user_id"], session_id=f"{payload['session_id']}-dag-{idx}", mode=payload["mode"]) _agent_fn.__name__ = f"opax-dag-{idx}" return _agent_fn payload = {"user_id": req.user_id, "session_id": req.session_id, "mode": req.mode} agent_fns = [make_agent_fn(msg, i) for i, msg in enumerate(req.messages)] agent_ids = [f"opax-dag-{i}" for i in range(len(req.messages))] start = time.monotonic() tasks = build_agent_dag(agent_fns, payload, agent_ids) results = await execute_dag(tasks, scheduler=req.scheduler) total_dur = round(time.monotonic() - start, 3) store = get_store() log_dag_execution(dag_id=req.session_id, agent_results=results, total_duration_s=total_dur) store.push(AGENT_ID, "last_dag_total_duration_s", total_dur) store.push(AGENT_ID, "last_dag_agent_count", len(tasks)) store.push(AGENT_ID, "last_dag_success_count", sum(1 for r in results if r["success"])) return { "total_duration_s": total_dur, "results": [{"index": i, "message": req.messages[i], "response": r["result"], "success": r["success"], "duration_s": r["duration_s"], "error": r["error"]} for i, r in enumerate(results)], } @app.get("/state") def get_state(): return get_store().snapshot() @app.get("/state/agents") def list_agents(): return {"agents": get_store().list_agents()} @app.get("/state/aggregate/{key}") def aggregate_key(key: str): return get_store().aggregate(key) @app.get("/telemetry/history") def telemetry_history(limit: int = 50): return {"history": get_store().history(limit=limit)} if __name__ == "__main__": import uvicorn port = int(os.environ.get("PORT", 8080)) uvicorn.run(app, host="0.0.0.0", port=port)