@endora-commerce/mod-prompt-actions 0.0.0-stage → 0.100.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Endora sp. z o.o. and the Endora Commerce contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,52 @@
-# Temporary Holding Version
+<!-- Generated by `pnpm --filter backend run manifests:generate`. Delete this line to take the file over; a README without it is never regenerated. -->
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# @endora-commerce/mod-prompt-actions
+
+Natural-language prompt mode for the admin command palette: interpret an operator instruction with an LLM, preview the plan, execute it through existing module services after explicit confirmation.
+
+## What this is
+
+An **Endora Commerce module package**. Its module id is `prompt_actions` — the identity of record in the platform's registries, in its migrations and in its setting, permission and translation codes.
+
+A module is not imported by application code. The platform discovers the extension packages an instance has installed, reads the manifest on the root subpath and composes the module from it, so installing this package and starting the instance is the whole integration.
+
+## Entry points
+
+| Import | Contents |
+| --- | --- |
+| `@endora-commerce/mod-prompt-actions` | the module manifest — its id, version, dependencies, settings and activation |
+| `@endora-commerce/mod-prompt-actions/backend` | the composition root the platform calls, with the entities, services, routes and workers it registers |
+| `@endora-commerce/mod-prompt-actions/migrations` | the module’s own schema migrations, in the order the platform runs them |
+
+## Depends on
+
+Everything below is a **peer** dependency, so the application resolves exactly one copy of each — two copies of a host or of React are a runtime failure rather than a type error. An entry marked *optional* is needed only by the layers that use it.
+
+**Endora packages**
+
+- `@endora-commerce/contracts`
+- `@endora-commerce/platform`
+
+**Third-party**
+
+- `@mikro-orm/core` ^6
+- `@mikro-orm/migrations` ^6
+- `@mikro-orm/postgresql` ^6
+- `fastify` ^5
+- `zod` ^4
+
+## What the tarball carries
+
+- `dist/` — the compiled JavaScript and its type declarations
+- `i18n/` — the translation bundles this package ships (`en`, `pl`), loaded by the platform
+- `docs/` — the package’s own pages in the Endora Commerce documentation site
+
+## Install
+
+```bash
+pnpm add @endora-commerce/mod-prompt-actions
+```
+
+## Licence
+
+MIT — the text is in `LICENSE`, beside this file.

package/dist/backend/entities/prompt-action-request.entity.d.ts

@@ -0,0 +1,37 @@
+import { OptionalProps } from '@mikro-orm/core';
+import type { PromptActionClarification, PromptActionPlan, PromptActionResult, PromptActionStatus } from '@endora-commerce/contracts';
+/**
+ * PromptActionRequest — feature 043 / data-model §1–§2.
+ *
+ * One operator-submitted natural-language instruction with its full
+ * lifecycle: interpretation output (plan or clarification), the minimal
+ * provider-neutral conversation retained for the single clarify round-trip,
+ * confirmation, execution result, and the seen-marker driving the
+ * "finished while you were away" notice (FR-018).
+ *
+ * No FK on `admin_user_id` (module_actions precedent — lifecycle owns
+ * cleanup, admin users are platform-owned).
+ */
+export declare class PromptActionRequest {
+    [OptionalProps]?: 'id' | 'createdAt' | 'updatedAt' | 'language' | 'provider' | 'model' | 'plan' | 'clarification' | 'conversation' | 'result' | 'error' | 'bulkOperationId' | 'seenAt' | 'confirmedAt' | 'finishedAt';
+    id: string;
+    adminUserId: string;
+    prompt: string;
+    language: string | null;
+    status: PromptActionStatus;
+    provider: string | null;
+    model: string | null;
+    plan: PromptActionPlan | null;
+    clarification: PromptActionClarification | null;
+    /** Provider-neutral transcript retained for the clarify round-trip + diagnostics. */
+    conversation: unknown | null;
+    result: PromptActionResult | null;
+    error: string | null;
+    bulkOperationId: string | null;
+    seenAt: Date | null;
+    confirmedAt: Date | null;
+    finishedAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+//# sourceMappingURL=prompt-action-request.entity.d.ts.map

package/dist/backend/entities/prompt-action-request.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-action-request.entity.d.ts","sourceRoot":"","sources":["../../../src/backend/entities/prompt-action-request.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAwB,MAAM,iBAAiB,CAAC;AAGrF,OAAO,KAAK,EACV,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;GAWG;AACH,qBAGa,mBAAmB;IAC9B,CAAC,aAAa,CAAC,CAAC,EACZ,IAAI,GACJ,WAAW,GACX,WAAW,GACX,UAAU,GACV,UAAU,GACV,OAAO,GACP,MAAM,GACN,eAAe,GACf,cAAc,GACd,QAAQ,GACR,OAAO,GACP,iBAAiB,GACjB,QAAQ,GACR,aAAa,GACb,YAAY,CAAC;IAGjB,EAAE,EAAE,MAAM,CAAgB;IAG1B,WAAW,EAAG,MAAM,CAAC;IAGrB,MAAM,EAAG,MAAM,CAAC;IAGhB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAG/B,MAAM,EAAG,kBAAkB,CAAC;IAG5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAG/B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAQ;IAG5B,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAQ;IAGrC,aAAa,EAAE,yBAAyB,GAAG,IAAI,CAAQ;IAEvD,qFAAqF;IAErF,YAAY,EAAE,OAAO,GAAG,IAAI,CAAQ;IAGpC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAQ;IAGzC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAQ;IAG5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAQ;IAGtC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAQ;IAG3B,WAAW,EAAE,IAAI,GAAG,IAAI,CAAQ;IAGhC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAQ;IAG/B,SAAS,EAAE,IAAI,CAAc;IAQ7B,SAAS,EAAE,IAAI,CAAc;CAC9B"}

package/dist/backend/entities/prompt-action-request.entity.js

@@ -0,0 +1,130 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, Index, OptionalProps, PrimaryKey, Property } from '@mikro-orm/core';
+import { GlobalEntity } from '@endora-commerce/platform/tenancy';
+import { randomUUID } from 'crypto';
+/**
+ * PromptActionRequest — feature 043 / data-model §1–§2.
+ *
+ * One operator-submitted natural-language instruction with its full
+ * lifecycle: interpretation output (plan or clarification), the minimal
+ * provider-neutral conversation retained for the single clarify round-trip,
+ * confirmation, execution result, and the seen-marker driving the
+ * "finished while you were away" notice (FR-018).
+ *
+ * No FK on `admin_user_id` (module_actions precedent — lifecycle owns
+ * cleanup, admin users are platform-owned).
+ */
+let PromptActionRequest = class PromptActionRequest {
+    [OptionalProps];
+    id = randomUUID();
+    adminUserId;
+    prompt;
+    language = null;
+    status;
+    provider = null;
+    model = null;
+    plan = null;
+    clarification = null;
+    /** Provider-neutral transcript retained for the clarify round-trip + diagnostics. */
+    conversation = null;
+    result = null;
+    error = null;
+    bulkOperationId = null;
+    seenAt = null;
+    confirmedAt = null;
+    finishedAt = null;
+    createdAt = new Date();
+    updatedAt = new Date();
+};
+__decorate([
+    PrimaryKey({ type: 'uuid' }),
+    __metadata("design:type", String)
+], PromptActionRequest.prototype, "id", void 0);
+__decorate([
+    Property({ type: 'uuid', fieldName: 'admin_user_id' }),
+    __metadata("design:type", String)
+], PromptActionRequest.prototype, "adminUserId", void 0);
+__decorate([
+    Property({ type: 'text' }),
+    __metadata("design:type", String)
+], PromptActionRequest.prototype, "prompt", void 0);
+__decorate([
+    Property({ type: 'string', length: 12, nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "language", void 0);
+__decorate([
+    Property({ type: 'string', length: 32 }),
+    __metadata("design:type", String)
+], PromptActionRequest.prototype, "status", void 0);
+__decorate([
+    Property({ type: 'string', length: 32, nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "provider", void 0);
+__decorate([
+    Property({ type: 'string', length: 120, nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "model", void 0);
+__decorate([
+    Property({ type: 'json', nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "plan", void 0);
+__decorate([
+    Property({ type: 'json', nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "clarification", void 0);
+__decorate([
+    Property({ type: 'json', nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "conversation", void 0);
+__decorate([
+    Property({ type: 'json', nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "result", void 0);
+__decorate([
+    Property({ type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "error", void 0);
+__decorate([
+    Property({ type: 'uuid', fieldName: 'bulk_operation_id', nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "bulkOperationId", void 0);
+__decorate([
+    Property({ type: 'datetime', fieldName: 'seen_at', nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "seenAt", void 0);
+__decorate([
+    Property({ type: 'datetime', fieldName: 'confirmed_at', nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "confirmedAt", void 0);
+__decorate([
+    Property({ type: 'datetime', fieldName: 'finished_at', nullable: true }),
+    __metadata("design:type", Object)
+], PromptActionRequest.prototype, "finishedAt", void 0);
+__decorate([
+    Property({ type: 'datetime', fieldName: 'created_at', onCreate: () => new Date() }),
+    __metadata("design:type", Date)
+], PromptActionRequest.prototype, "createdAt", void 0);
+__decorate([
+    Property({
+        type: 'datetime',
+        fieldName: 'updated_at',
+        onCreate: () => new Date(),
+        onUpdate: () => new Date(),
+    }),
+    __metadata("design:type", Date)
+], PromptActionRequest.prototype, "updatedAt", void 0);
+PromptActionRequest = __decorate([
+    GlobalEntity(),
+    Entity({ tableName: 'prompt_action_requests' }),
+    Index({ properties: ['adminUserId', 'createdAt'] })
+], PromptActionRequest);
+export { PromptActionRequest };
+//# sourceMappingURL=prompt-action-request.entity.js.map

package/dist/backend/entities/prompt-action-request.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-action-request.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/prompt-action-request.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAQpC;;;;;;;;;;;GAWG;AAII,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,CAAC,aAAa,CAAC,CAeE;IAGjB,EAAE,GAAW,UAAU,EAAE,CAAC;IAG1B,WAAW,CAAU;IAGrB,MAAM,CAAU;IAGhB,QAAQ,GAAkB,IAAI,CAAC;IAG/B,MAAM,CAAsB;IAG5B,QAAQ,GAAkB,IAAI,CAAC;IAG/B,KAAK,GAAkB,IAAI,CAAC;IAG5B,IAAI,GAA4B,IAAI,CAAC;IAGrC,aAAa,GAAqC,IAAI,CAAC;IAEvD,qFAAqF;IAErF,YAAY,GAAmB,IAAI,CAAC;IAGpC,MAAM,GAA8B,IAAI,CAAC;IAGzC,KAAK,GAAkB,IAAI,CAAC;IAG5B,eAAe,GAAkB,IAAI,CAAC;IAGtC,MAAM,GAAgB,IAAI,CAAC;IAG3B,WAAW,GAAgB,IAAI,CAAC;IAGhC,UAAU,GAAgB,IAAI,CAAC;IAG/B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAQ7B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;CAC9B,CAAA;AA1DC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;+CACH;AAG1B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;;wDAClC;AAGrB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;mDACX;AAGhB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qDAC1B;AAG/B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;mDACb;AAG5B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qDAC1B;AAG/B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDAC9B;AAG5B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDACN;AAGrC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DACY;AAIvD;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACP;AAGpC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDACF;AAGzC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDACf;AAG5B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4DACrC;AAGtC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDAC1C;AAG3B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDAC1C;AAGhC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uDAC1C;AAG/B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BACzE,IAAI;sDAAc;AAQ7B;IANC,QAAQ,CAAC;QACR,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAC1B,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;KAC3B,CAAC;8BACS,IAAI;sDAAc;AA5ElB,mBAAmB;IAH/B,YAAY,EAAE;IACd,MAAM,CAAC,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC;IAC/C,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;GACvC,mBAAmB,CA6E/B"}

package/dist/backend/index.d.ts

@@ -0,0 +1,94 @@
+import type { FastifyRequest } from 'fastify';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+import { PromptRequestService } from './services/prompt-request.service.js';
+import { PromptActionToolRegistry } from './services/tool-registry.js';
+import { PromptActionBulkProgressRegistry } from './services/bulk-progress-registry.js';
+import { LlmProviderFactory, type CredentialResolvePort, type SettingsReadPort } from './services/llm/provider-factory.js';
+import type { FetchLike } from './services/llm/provider.js';
+import { PromptActionRequest } from './entities/prompt-action-request.entity.js';
+/**
+ * `prompt_actions` — the module every other module contributes *into*
+ * (feature 072, wave 1).
+ *
+ * It owns no domain logic. Its whole job is to hold the tool catalogue that
+ * `catalog`, `inventory` and `orders` populate, hand a permission-filtered view
+ * of it to an LLM, and execute the confirmed plan through the contributors'
+ * own services. That inverts the usual direction — this module is nobody's
+ * dependency and everybody's dependant — so nothing here is a port. A port is
+ * for a name *other* modules resolve; the two names this module publishes are
+ * read by the composition root, which is not gated by anything.
+ *
+ * **`promptActionToolRegistry` is deliberately an ordinary registration.**
+ * Making it a port would mean the root gets a 503 while contributing tools if
+ * the operator switched the assistant off — at composition time, before the
+ * effective state is even loaded. Contribution has to be tolerant; it is the
+ * *routes* that gate, and they already do.
+ *
+ * **No `activation:` declaration, deliberately.** The module already ships
+ * `prompt_actions.enabled`, and it is *not* an activation control in the
+ * Constitution XVII sense: switching it off is supposed to leave the capability
+ * endpoint answering `200 {status: 'disabled'}` and submissions answering `409
+ * ASSISTANT_DISABLED`, which is what the admin palette reads to hide the prompt
+ * mode. Declaring it as the activation setting would make `ctx.routes` 503 the
+ * whole surface instead, including the probe the palette needs to *learn* the
+ * module is off. Reconciling a bespoke kill switch with the two-axis machinery
+ * is feature 073's problem, not this conversion's; until then the module is
+ * gated on the platform axis alone — which is one axis more than it had.
+ *
+ * The one behaviour change: tool visibility now resolves `effectiveState`
+ * rather than `registryCache.isEnabled`. See
+ * `test/integration/prompt_actions/deactivated-module-tools.test.ts` — the old
+ * seam advertised tools belonging to a module the operator had deactivated.
+ */
+export interface PromptActionsCradle {
+    readonly emFactory: () => EntityManager;
+    readonly auditLogService: AuditPort;
+    readonly settingsReadPort: SettingsReadPort;
+    readonly settingsChannelResolver: () => Promise<string>;
+    readonly requireAdmin: RequireAdminFactory;
+    readonly adminContextResolver: (req: FastifyRequest) => {
+        adminUserId: string;
+    };
+    readonly permissionService: {
+        hasPermission(adminUserId: string, permission: string): Promise<boolean>;
+    };
+    readonly credentialsService: CredentialResolvePort;
+    /**
+     * Pushed into by `catalog` when a deployment ships it, so a delegated bulk
+     * request can show live progress. Absent is a supported state — the request
+     * simply reports no progress — which is why this module does not declare
+     * `catalog` as a dependency for it.
+     *
+     * D-72 point 4 — a **registry keyed by contributing module**, where it used
+     * to be a single name this module defaulted to `undefined` and a composition
+     * root overwrote with `catalog`'s resolver. That shape was the last thing
+     * keeping `catalog/prompt-tools.js` named in both roots: a module may not
+     * write a name another module owns, so `catalog` could not push a resolver
+     * into a slot, only into a table.
+     */
+    readonly promptActionBulkProgressRegistry: PromptActionBulkProgressRegistry;
+    /** Test seams; a root overrides them by re-registering the name. */
+    readonly promptActionsLlmFetch: FetchLike | undefined;
+    readonly promptActionsNow: (() => Date) | undefined;
+    readonly promptActionsTtlMinutes: number | undefined;
+    readonly promptActionToolRegistry: PromptActionToolRegistry;
+    readonly llmProviderFactory: LlmProviderFactory;
+    readonly promptRequestService: PromptRequestService;
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export declare const entities: (typeof PromptActionRequest)[];
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAK5E,OAAO,EACL,oBAAoB,EAErB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,EACL,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACtB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAEjF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF,QAAQ,CAAC,iBAAiB,EAAE;QAC1B,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KAC1E,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,gCAAgC,EAAE,gCAAgC,CAAC;IAC5E,oEAAoE;IACpE,QAAQ,CAAC,qBAAqB,EAAE,SAAS,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,gBAAgB,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,uBAAuB,EAAE,MAAM,GAAG,SAAS,CAAC;IAErD,QAAQ,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;IAC5D,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;CACrD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAqIvD;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,QAAQ,gCAEpB,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,127 @@
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { effectiveState } from '@endora-commerce/platform/kernel';
+import { registerPromptActionsAdminRoutes } from './routes.admin.js';
+import { InterpreterService } from './services/interpreter.service.js';
+import { PlanExecutorService } from './services/plan-executor.service.js';
+import { PromptRequestService, } from './services/prompt-request.service.js';
+import { PromptActionToolRegistry } from './services/tool-registry.js';
+import { PromptActionBulkProgressRegistry } from './services/bulk-progress-registry.js';
+import { LlmProviderFactory, } from './services/llm/provider-factory.js';
+import { PromptActionRequest } from './entities/prompt-action-request.entity.js';
+export function registerModule(ctx) {
+    ctx.di.register({
+        // A **contribution registry**, and a plain `di.register` on purpose: it must
+        // stay one. `catalog`, `inventory` and `orders` push their tool descriptors
+        // in from `ctx.onBoot`, and boot hooks run whatever this module's effective
+        // state is, so a `providePort` gate here would throw `MODULE_DISABLED`
+        // during composition and stop the backend from starting. It would also move
+        // every edge into this name from `contributes` to `fails-closed` in the
+        // deactivation-consequence ledger, changing the sentence the operator's
+        // confirmation dialog renders (issue #192; port-publication.md §1.4).
+        promptActionToolRegistry: ctx.asFunction(() => new PromptActionToolRegistry()).singleton(),
+        // The second contribution registry, and an ordinary registration for the
+        // same reason as the first: a boot hook has to be able to push into it
+        // whatever the assistant's own effective state is. The presence question
+        // is answered at enumeration, keyed on the module recorded with each
+        // entry, and the probe is wired to the kernel here — the class defaults it
+        // to always-present so a unit test that builds its own registry keeps
+        // answering about the resolvers that test registered.
+        promptActionBulkProgressRegistry: ctx
+            .asFunction(() => new PromptActionBulkProgressRegistry((moduleId) => effectiveState.isPresent(moduleId)))
+            .singleton(),
+        promptActionsLlmFetch: ctx.asFunction(() => undefined).singleton(),
+        promptActionsNow: ctx.asFunction(() => undefined).singleton(),
+        promptActionsTtlMinutes: ctx.asFunction(() => undefined).singleton(),
+        llmProviderFactory: ctx
+            .asFunction(({ promptActionsLlmFetch }) => {
+            // `credentialsService` is a **port**, so it is resolved per call
+            // rather than captured. Awilix's strict mode refuses the capture
+            // outright — a singleton may not hold a transient — and it is right
+            // to: a captured port keeps answering after the operator switches
+            // `credentials` off, so the assistant would go on decrypting API
+            // keys through a module that is supposed to be absent. Resolving per
+            // call turns that into the 503 the port exists to produce, and only
+            // on the path that actually needs a secret.
+            const credentials = {
+                resolve: (configurationCode) => ctx.cradle().credentialsService.resolve(configurationCode),
+            };
+            return new LlmProviderFactory({
+                settings: lazyPort(ctx, 'settingsReadPort'),
+                // A function-valued name, so it cannot go through `lazyPort` —
+                // that forwards method calls on an object. The closure is the same
+                // deferral by hand.
+                resolveChannelId: () => ctx.cradle().settingsChannelResolver(),
+                credentials,
+                ...(promptActionsLlmFetch === undefined
+                    ? {}
+                    : { fetchImpl: promptActionsLlmFetch }),
+            });
+        })
+            .singleton(),
+        promptRequestService: ctx
+            .asFunction(({ emFactory, auditLogService, promptActionToolRegistry, llmProviderFactory, promptActionsNow, promptActionsTtlMinutes, }) => {
+            // `maxRounds` is not threaded through a container seam: the old
+            // options type carried one and nothing ever passed it. The property
+            // it guards is covered where it belongs, in the interpreter's own
+            // unit test, which constructs the service directly.
+            const interpreter = new InterpreterService({
+                registry: promptActionToolRegistry,
+                providerFactory: llmProviderFactory,
+                ...(promptActionsNow === undefined
+                    ? {}
+                    : { now: () => promptActionsNow().getTime() }),
+            });
+            const visibilityFor = (adminUserId) => ({
+                hasPermission: (permission) => ctx.cradle().permissionService.hasPermission(adminUserId, permission),
+                // Constitution XVII: presence is the conjunction of both axes. A
+                // module the operator deactivated must not appear in the
+                // catalogue, or the assistant plans work the platform refuses.
+                isModuleInstalled: async (moduleId) => effectiveState.isPresent(moduleId),
+            });
+            // Read through the registry per call rather than captured out of it:
+            // a contributor's boot hook runs after this factory may first be
+            // resolved, and — more to the point — an operator switching a
+            // contributor off has to change the answer without a restart.
+            const bulkProgressReader = (bulkOperationId) => ctx
+                .cradle()
+                .promptActionBulkProgressRegistry.apply(bulkOperationId);
+            return new PromptRequestService({
+                emFactory,
+                interpreter,
+                executor: new PlanExecutorService(promptActionToolRegistry),
+                visibilityFor,
+                auditLogService,
+                bulkProgressReader,
+                ...(promptActionsNow === undefined ? {} : { now: promptActionsNow }),
+                ...(promptActionsTtlMinutes === undefined
+                    ? {}
+                    : { ttlMinutes: promptActionsTtlMinutes }),
+            });
+        })
+            .singleton(),
+    });
+    ctx.routes(async (app) => {
+        const { promptRequestService, llmProviderFactory, requireAdmin, adminContextResolver } = ctx.cradle();
+        await registerPromptActionsAdminRoutes(app, {
+            requestService: promptRequestService,
+            providerFactory: llmProviderFactory,
+            requireAdmin,
+            resolveAdminContext: adminContextResolver,
+        });
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export const entities = [
+    PromptActionRequest,
+];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAE5D,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,gCAAgC,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EACL,oBAAoB,GAErB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,EACL,kBAAkB,GAGnB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAwEjF,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,uEAAuE;QACvE,4EAA4E;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,wBAAwB,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,wBAAwB,EAAE,CAAC,CAAC,SAAS,EAAE;QAE1F,yEAAyE;QACzE,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,2EAA2E;QAC3E,sEAAsE;QACtE,sDAAsD;QACtD,gCAAgC,EAAE,GAAG;aAClC,UAAU,CACT,GAAG,EAAE,CACH,IAAI,gCAAgC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CACzF;aACA,SAAS,EAAE;QAEd,qBAAqB,EAAE,GAAG,CAAC,UAAU,CAAC,GAA0B,EAAE,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE;QACzF,gBAAgB,EAAE,GAAG,CAAC,UAAU,CAAC,GAA6B,EAAE,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE;QACvF,uBAAuB,EAAE,GAAG,CAAC,UAAU,CAAC,GAAuB,EAAE,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE;QAExF,kBAAkB,EAAE,GAAG;aACpB,UAAU,CACT,CAAC,EAAE,qBAAqB,EAAuB,EAAE,EAAE;YACjD,iEAAiE;YACjE,iEAAiE;YACjE,oEAAoE;YACpE,kEAAkE;YAClE,iEAAiE;YACjE,qEAAqE;YACrE,oEAAoE;YACpE,4CAA4C;YAC5C,MAAM,WAAW,GAA0B;gBACzC,OAAO,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAC7B,GAAG,CAAC,MAAM,EAAuB,CAAC,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,CAAC;aAClF,CAAC;YACF,OAAO,IAAI,kBAAkB,CAAC;gBAC5B,QAAQ,EAAE,QAAQ,CAAmB,GAAG,EAAE,kBAAkB,CAAC;gBAC7D,+DAA+D;gBAC/D,mEAAmE;gBACnE,oBAAoB;gBACpB,gBAAgB,EAAE,GAAG,EAAE,CACrB,GAAG,CAAC,MAAM,EAAuB,CAAC,uBAAuB,EAAE;gBAC7D,WAAW;gBACX,GAAG,CAAC,qBAAqB,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC,CACF;aACA,SAAS,EAAE;QAEd,oBAAoB,EAAE,GAAG;aACtB,UAAU,CACT,CAAC,EACC,SAAS,EACT,eAAe,EACf,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,GACH,EAAE,EAAE;YACxB,gEAAgE;YAChE,oEAAoE;YACpE,kEAAkE;YAClE,oDAAoD;YACpD,MAAM,WAAW,GAAG,IAAI,kBAAkB,CAAC;gBACzC,QAAQ,EAAE,wBAAwB;gBAClC,eAAe,EAAE,kBAAkB;gBACnC,GAAG,CAAC,gBAAgB,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;aACjD,CAAC,CAAC;YAEH,MAAM,aAAa,GAA8B,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACjE,aAAa,EAAE,CAAC,UAAU,EAAE,EAAE,CAC5B,GAAG,CAAC,MAAM,EAAuB,CAAC,iBAAiB,CAAC,aAAa,CAC/D,WAAW,EACX,UAAU,CACX;gBACH,iEAAiE;gBACjE,yDAAyD;gBACzD,+DAA+D;gBAC/D,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC1E,CAAC,CAAC;YAEH,qEAAqE;YACrE,iEAAiE;YACjE,8DAA8D;YAC9D,8DAA8D;YAC9D,MAAM,kBAAkB,GAEpB,CAAC,eAAe,EAAE,EAAE,CACtB,GAAG;iBACA,MAAM,EAAuB;iBAC7B,gCAAgC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAE7D,OAAO,IAAI,oBAAoB,CAAC;gBAC9B,SAAS;gBACT,WAAW;gBACX,QAAQ,EAAE,IAAI,mBAAmB,CAAC,wBAAwB,CAAC;gBAC3D,aAAa;gBACb,eAAe;gBACf,kBAAkB;gBAClB,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC;gBACpE,GAAG,CAAC,uBAAuB,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC,CACF;aACA,SAAS,EAAE;KACf,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,YAAY,EAAE,oBAAoB,EAAE,GACpF,GAAG,CAAC,MAAM,EAAuB,CAAC;QACpC,MAAM,gCAAgC,CAAC,GAAG,EAAE;YAC1C,cAAc,EAAE,oBAAoB;YACpC,eAAe,EAAE,kBAAkB;YACnC,YAAY;YACZ,mBAAmB,EAAE,oBAAoB;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,mBAAmB;CACpB,CAAC"}

package/dist/backend/routes.admin.d.ts

@@ -0,0 +1,30 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { PromptRequestService } from './services/prompt-request.service.js';
+import type { LlmProviderFactory } from './services/llm/provider-factory.js';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * Admin HTTP surface — feature 043 (contracts/prompt-actions-api.md).
+ *
+ *   GET    /api/v1/admin/prompt-actions/capability
+ *   POST   /api/v1/admin/prompt-actions/requests
+ *   GET    /api/v1/admin/prompt-actions/requests          (?unseen=true&limit=)
+ *   GET    /api/v1/admin/prompt-actions/requests/:id
+ *   POST   /api/v1/admin/prompt-actions/requests/:id/clarify
+ *   POST   /api/v1/admin/prompt-actions/requests/:id/confirm
+ *   POST   /api/v1/admin/prompt-actions/requests/:id/cancel
+ *   POST   /api/v1/admin/prompt-actions/requests/:id/seen
+ *
+ * All routes are gated by `requireAdmin('prompt_actions:use')`; each
+ * planned operation is additionally re-checked against its own permission
+ * inside the executor (FR-007).
+ */
+export interface PromptActionsRoutesDeps {
+    requestService: PromptRequestService;
+    providerFactory: LlmProviderFactory;
+    requireAdmin: RequireAdminFactory;
+    resolveAdminContext: (req: FastifyRequest) => {
+        adminUserId: string;
+    };
+}
+export declare function registerPromptActionsAdminRoutes(app: FastifyInstance, deps: PromptActionsRoutesDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/backend/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAW/D,OAAO,KAAK,EAAE,oBAAoB,EAAmB,MAAM,sCAAsC,CAAC;AAClG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,oBAAoB,CAAC;IACrC,eAAe,EAAE,kBAAkB,CAAC;IACpC,YAAY,EAAE,mBAAmB,CAAC;IAClC,mBAAmB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CACvE;AAED,wBAAsB,gCAAgC,CACpD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAoHf"}

package/dist/backend/routes.admin.js

@@ -0,0 +1,71 @@
+import { ClarifyRequestSchema, ERROR_CODES, PromptActionListQuerySchema, SubmitPromptRequestSchema, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { PROMPT_ACTIONS_USE_PERMISSION } from '../manifest.js';
+export async function registerPromptActionsAdminRoutes(app, deps) {
+    const { requestService, providerFactory, requireAdmin, resolveAdminContext } = deps;
+    const guard = requireAdmin(PROMPT_ACTIONS_USE_PERMISSION);
+    const operator = (request) => {
+        const { adminUserId } = resolveAdminContext(request);
+        const rid = request.headers['x-request-id'];
+        const language = request.headers['x-admin-language'];
+        return {
+            adminUserId,
+            language: typeof language === 'string' ? language : null,
+            auditCtx: {
+                ipAddress: request.ip ?? null,
+                userAgent: request.headers['user-agent'] ?? null,
+                requestId: typeof rid === 'string' ? rid : null,
+            },
+        };
+    };
+    const dto = (row) => ({
+        data: {
+            id: row.id,
+            status: row.status,
+            prompt: row.prompt,
+            plan: row.plan ?? null,
+            clarification: row.clarification ?? null,
+            result: row.result ?? null,
+            error: row.error ?? null,
+            bulkOperationId: row.bulkOperationId ?? null,
+            expiresAt: requestService.expiresAt(row)?.toISOString() ?? null,
+            seenAt: row.seenAt?.toISOString() ?? null,
+            createdAt: row.createdAt.toISOString(),
+        },
+    });
+    app.get('/api/v1/admin/prompt-actions/capability', { preHandler: guard }, async () => ({ data: await providerFactory.capability() }));
+    app.post('/api/v1/admin/prompt-actions/requests', { preHandler: guard }, async (request, reply) => {
+        const body = SubmitPromptRequestSchema.parse(request.body);
+        // Disabled / unconfigured assistants reject before any row is created.
+        const capability = await providerFactory.capability();
+        if (capability.status === 'disabled') {
+            throw new HttpError(409, ERROR_CODES.ASSISTANT_DISABLED, 'The prompt assistant is disabled on this platform.');
+        }
+        if (capability.status === 'not_configured') {
+            throw new HttpError(409, ERROR_CODES.ASSISTANT_NOT_CONFIGURED, 'The prompt assistant is not configured — set the provider, model and API key in Settings.');
+        }
+        const row = await requestService.submit(operator(request), body.prompt);
+        reply.code(201);
+        return dto(row);
+    });
+    app.get('/api/v1/admin/prompt-actions/requests', { preHandler: guard }, async (request) => {
+        const q = PromptActionListQuerySchema.parse(request.query ?? {});
+        const rows = q.unseen
+            ? await requestService.listUnseenFinished(operator(request), q.limit)
+            : [];
+        return { data: rows.map((r) => dto(r).data) };
+    });
+    app.get('/api/v1/admin/prompt-actions/requests/:id', { preHandler: guard }, async (request) => dto(await requestService.get(operator(request), request.params.id)));
+    app.post('/api/v1/admin/prompt-actions/requests/:id/clarify', { preHandler: guard }, async (request) => {
+        const body = ClarifyRequestSchema.parse(request.body);
+        const row = await requestService.clarify(operator(request), request.params.id, body);
+        return dto(row);
+    });
+    app.post('/api/v1/admin/prompt-actions/requests/:id/confirm', { preHandler: guard }, async (request) => dto(await requestService.confirm(operator(request), request.params.id)));
+    app.post('/api/v1/admin/prompt-actions/requests/:id/cancel', { preHandler: guard }, async (request) => dto(await requestService.cancel(operator(request), request.params.id)));
+    app.post('/api/v1/admin/prompt-actions/requests/:id/seen', { preHandler: guard }, async (request, reply) => {
+        await requestService.markSeen(operator(request), request.params.id);
+        reply.code(204);
+    });
+}
+//# sourceMappingURL=routes.admin.js.map

package/dist/backend/routes.admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.js","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,2BAA2B,EAC3B,yBAAyB,GAE1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AA8B/D,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,GAAoB,EACpB,IAA6B;IAE7B,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;IACpF,MAAM,KAAK,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAC;IAE1D,MAAM,QAAQ,GAAG,CAAC,OAAuB,EAAmB,EAAE;QAC5D,MAAM,EAAE,WAAW,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACrD,OAAO;YACL,WAAW;YACX,QAAQ,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YACxD,QAAQ,EAAE;gBACR,SAAS,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;gBAC7B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI;gBAChD,SAAS,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;aAChD;SACF,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,CAAC,GAAwB,EAAoC,EAAE,CAAC,CAAC;QAC3E,IAAI,EAAE;YACJ,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;YACxC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;YAC1B,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI;YACxB,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;YAC5C,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI;YAC/D,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,IAAI;YACzC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;SACvC;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,yCAAyC,EACzC,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC,UAAU,EAAE,EAAE,CAAC,CAC3D,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,uCAAuC,EACvC,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,uEAAuE;QACvE,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,CAAC;QACtD,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,kBAAkB,EAC9B,oDAAoD,CACrD,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAC3C,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,wBAAwB,EACpC,2FAA2F,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,uCAAuC,EACvC,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,CAAC,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM;YACnB,CAAC,CAAC,MAAM,cAAc,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;YACrE,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IAChD,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,2CAA2C,EAC3C,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACvF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,mDAAmD,EACnD,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,mDAAmD,EACnD,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAC3F,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,kDAAkD,EAClD,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAC1F,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,gDAAgD,EAChD,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CACF,CAAC;AACJ,CAAC"}