fix(cloud): unblock api/frontend typecheck — more bang-equals + index exports

Round 2 of cloud typecheck fixes after Cloud CF Deploy verify failed.

bang-equals (5 more):
- agent-gateway-router.ts (3 lines): `!owner.organization_id !== args.organizationId`
  → `owner.organization_id !== args.organizationId`
- node-autoscaler.ts: `!bootstrap.controlPlanePublicKey.trim().length === 0`
  → `bootstrap.controlPlanePublicKey.trim().length === 0`
- runtime-factory.ts: `!context.characterId === DEFAULT_AGENT_ID_STRING`
  → `context.characterId === DEFAULT_AGENT_ID_STRING`

other typecheck blockers:
- n8n-credential-bridge.ts: `!k.expires_at > now` was comparing boolean to Date.
  Fixed to `(!k.expires_at || k.expires_at > now)` matching intent.
- character.ts:155: added `!character.messageExamples ||` null guard
  exposed by the earlier bang-equals fix.

missing exports (storage proxy + vendor-connections work landed but
never wired into index):
- packages/db/repositories/index.ts + schemas/index.ts: add
  ./org-storage-quota + ./vendor-connections.

Verified: bun run --cwd cloud/apps/{api,frontend} typecheck both PASS.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: Shaw

cloud/packages/db/repositories/index.ts

@@ -96,6 +96,7 @@ export * from "./model-pricing";
 // Core Platform Repositories
 // ============================================
 export * from "./org-rate-limit-overrides";
+export * from "./org-storage-quota";
 export * from "./organization-invites";
 export * from "./organizations";
 export * from "./provider-health";
@@ -119,3 +120,4 @@ export * from "./usage-records";
 export * from "./user-mcps";
 export * from "./user-sessions";
 export * from "./users";
+export * from "./vendor-connections";

cloud/packages/db/schemas/index.ts

@@ -51,6 +51,7 @@ export * from "./managed-domains";
 export * from "./model-pricing";
 export * from "./moderation-violations";
 export * from "./org-rate-limit-overrides";
+export * from "./org-storage-quota";
 export * from "./organization-billing";
 export * from "./organization-config";
 export * from "./organization-encryption-keys";
@@ -78,6 +79,7 @@ export * from "./user-preferences";
 export * from "./user-sessions";
 export * from "./user-voices";
 export * from "./users";
+export * from "./vendor-connections";
 export * from "./vertex-model-assignments";
 export * from "./vertex-tuned-models";
 export * from "./vertex-tuning-jobs";

cloud/packages/lib/eliza/plugin-n8n-bridge/n8n-credential-bridge.ts

@@ -314,7 +314,9 @@ export class N8nCredentialBridge extends Service {
   private async getUserApiKey(userId: string, organizationId: string): Promise<string | null> {
     const keys = await apiKeysService.listByOrganization(organizationId);
     const now = new Date();
-    const userKey = keys.find((k) => k.user_id === userId && k.is_active && !k.expires_at > now);
+    const userKey = keys.find(
+      (k) => k.user_id === userId && k.is_active && (!k.expires_at || k.expires_at > now),
+    );
 
     if (!userKey) {
       logger.warn("[N8nCredentialBridge] No active API key found", {

cloud/packages/lib/eliza/runtime-factory.ts

@@ -1816,7 +1816,7 @@ export class RuntimeFactory {
       `[RuntimeFactory] Creating runtime: user=${context.userId}, mode=${context.agentMode}, char=${context.characterId || "default"}, webSearch=${context.webSearchEnabled}`,
     );
 
-    const isDefaultCharacter = !context.characterId === DEFAULT_AGENT_ID_STRING;
+    const isDefaultCharacter = context.characterId === DEFAULT_AGENT_ID_STRING;
     const loaderOptions = { webSearchEnabled: context.webSearchEnabled };
 
     const { character, plugins, modeResolution } = isDefaultCharacter

cloud/packages/lib/eliza/shared/providers/character.ts

@@ -152,7 +152,7 @@ export const characterProvider: Provider = {
     // Contextual selection: Score examples by keyword overlap with current message
     // Current: Show 3 examples (balanced for context window)
     const messageExamplesText = (() => {
-      if (character.messageExamples.length === 0) {
+      if (!character.messageExamples || character.messageExamples.length === 0) {
         return "";
       }
 

cloud/packages/lib/services/agent-gateway-router.ts

@@ -331,7 +331,7 @@ export class AgentGatewayRouterService {
       };
     }
 
-    if (!owner.organization_id !== args.organizationId) {
+    if (owner.organization_id !== args.organizationId) {
       return {
         reason: "owner_org_mismatch",
       };
@@ -578,7 +578,7 @@ export class AgentGatewayRouterService {
       };
     }
 
-    if (!owner.organization_id !== args.organizationId) {
+    if (owner.organization_id !== args.organizationId) {
       return {
         handled: false,
         reason: "owner_org_mismatch",
@@ -667,7 +667,7 @@ export class AgentGatewayRouterService {
       };
     }
 
-    if (!owner.organization_id !== args.organizationId) {
+    if (owner.organization_id !== args.organizationId) {
       return {
         handled: false,
         reason: "owner_org_mismatch",

cloud/packages/lib/services/containers/node-autoscaler.ts

@@ -182,7 +182,7 @@ export class NodeAutoscaler {
         "Cannot provision a node: HCLOUD_TOKEN is not set.",
       );
     }
-    if (!bootstrap.controlPlanePublicKey.trim().length === 0) {
+    if (bootstrap.controlPlanePublicKey.trim().length === 0) {
       throw new HetznerCloudError(
         "invalid_input",
         "controlPlanePublicKey is required to provision a node",