@lenne.tech/nest-server 12.2.0 → 12.3.1

package/dist/core/modules/ai/services/core-ai-mcp.service.js

@@ -7,36 +7,70 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 var CoreAiMcpService_1;
-import { Injectable, Logger } from '@nestjs/common';
+import { Injectable, Logger, Optional } from '@nestjs/common';
+import { RequestContext } from '../../../common/services/request-context.service.js';
+import { authorizeToolCall, effectiveMcpConfirmation, mcpConfirmationPolicy, toolRequiresConfirmation, } from '../helpers/ai-tool-authorization.helper.js';
 import { AiToolRegistry } from '../tools/ai-tool.registry.js';
+import { CoreAiToolPolicyService } from './core-ai-tool-policy.service.js';
+import { CoreAiUserSettingService } from './core-ai-user-setting.service.js';
 let CoreAiMcpService = CoreAiMcpService_1 = class CoreAiMcpService {
     toolRegistry;
+    userSettingService;
+    toolPolicyService;
     logger = new Logger(CoreAiMcpService_1.name);
-    constructor(toolRegistry) {
+    confirmationTimeoutMs = 5 * 60_000;
+    constructor(toolRegistry, userSettingService, toolPolicyService) {
         this.toolRegistry = toolRegistry;
+        this.userSettingService = userSettingService;
+        this.toolPolicyService = toolPolicyService;
     }
     mcpListTools(user) {
-        return this.toolRegistry
-            .forUser(user)
-            .map((tool) => ({ description: tool.description, inputSchema: tool.parameters, name: tool.name }));
+        return this.toolRegistry.forUser(user).map((tool) => ({
+            ...(tool.destructive || tool.mutating
+                ? { annotations: { destructiveHint: tool.destructive === true, readOnlyHint: false } }
+                : {}),
+            description: tool.description,
+            inputSchema: tool.parameters,
+            name: tool.name,
+        }));
     }
-    async mcpCallTool(user, name, args) {
+    async mcpCallTool(user, name, args, options = {}) {
         const tool = this.toolRegistry.forUser(user).find((t) => t.name === name);
         if (!tool) {
-            return { content: [{ text: `Unknown or not permitted tool: ${name}`, type: 'text' }], isError: true };
+            return this.errorResult(`Unknown or not permitted tool: ${name}`);
         }
+        const callArgs = args ?? {};
         const context = {
             currentUser: (user ?? undefined),
             serviceOptions: { currentUser: (user ?? undefined) },
         };
+        const policy = await this.evaluateToolPolicy(tool, callArgs, user);
+        if (policy?.decision === 'deny') {
+            return this.errorResult(policy.reason || `"${name}" is not permitted by policy.`);
+        }
+        const authorization = await authorizeToolCall(tool, callArgs, context);
+        if (!authorization.allowed) {
+            return this.errorResult(authorization.reason || `Not permitted: ${name}`);
+        }
+        if (policy?.decision === 'ask' || (await this.confirmationRequired(tool, user))) {
+            if (!options.confirm) {
+                return this.errorResult(`"${name}" needs the user's confirmation, and this MCP client cannot ask for it (elicitation). Nothing was run.`);
+            }
+            if (!(await this.askForConfirmation(tool, callArgs, options.confirm))) {
+                return this.errorResult(`"${name}" was not run: the user did not confirm it.`);
+            }
+        }
         try {
-            const result = await tool.execute(args ?? {}, context);
+            const result = await tool.execute(callArgs, tool.authorize ? { ...context, authorization } : context);
             return { content: [{ text: JSON.stringify(result), type: 'text' }] };
         }
         catch (err) {
             this.logger.warn(`MCP tool "${name}" failed: ${err.message}`);
-            return { content: [{ text: err.message, type: 'text' }], isError: true };
+            return this.errorResult(err.message);
         }
     }
     async createServer(user) {
@@ -45,13 +79,86 @@ let CoreAiMcpService = CoreAiMcpService_1 = class CoreAiMcpService {
         const { CallToolRequestSchema, ListToolsRequestSchema } = await import('@modelcontextprotocol/sdk/types.js');
         const server = new Server({ name: 'lt-nest-server-ai', version: '1.0.0' }, { capabilities: { tools: {} } });
         server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: this.mcpListTools(currentUser()) }));
-        server.setRequestHandler(CallToolRequestSchema, async (request) => this.mcpCallTool(currentUser(), request.params.name, request.params.arguments ?? {}));
+        server.setRequestHandler(CallToolRequestSchema, async (request, extra) => this.mcpCallTool(currentUser(), request.params.name, request.params.arguments ?? {}, {
+            confirm: server.getClientCapabilities()?.elicitation?.form
+                ? (prompt) => this.elicitConfirmation(server, prompt, extra?.requestId)
+                : undefined,
+        }));
         return server;
     }
+    async confirmationRequired(tool, user) {
+        if (!toolRequiresConfirmation(tool)) {
+            return false;
+        }
+        if (this.userSettingService) {
+            return this.userSettingService.mcpConfirmationFor(user?.id);
+        }
+        return effectiveMcpConfirmation(mcpConfirmationPolicy());
+    }
+    async evaluateToolPolicy(tool, args, user) {
+        if (!this.toolPolicyService) {
+            return undefined;
+        }
+        try {
+            return await this.toolPolicyService.evaluate(tool.name, args, {
+                roles: user?.roles ?? [],
+                tenantId: RequestContext.getTenantId(),
+                userId: user?.id,
+            });
+        }
+        catch (err) {
+            this.logger.warn(`AI tool-policy evaluation for "${tool.name}" failed: ${err.message}`);
+            return undefined;
+        }
+    }
+    confirmationPrompt(tool, args) {
+        const maxValueLength = 200;
+        const lines = Object.entries(args).map(([key, value]) => {
+            const text = typeof value === 'string' ? value : (JSON.stringify(value) ?? String(value));
+            const shown = text.length > maxValueLength ? `${text.slice(0, maxValueLength)}… (${text.length} characters)` : text;
+            return `- ${key}: ${shown}`;
+        });
+        const consequence = tool.destructive ? 'This cannot be undone.' : 'This changes data.';
+        const argumentsText = lines.length ? `\nArguments:\n${lines.join('\n')}` : '';
+        return {
+            arguments: args,
+            message: `Allow the AI assistant to run "${tool.name}"? ${consequence}${argumentsText}`,
+            tool: tool.name,
+        };
+    }
+    async askForConfirmation(tool, args, confirm) {
+        try {
+            return (await confirm(this.confirmationPrompt(tool, args))) === true;
+        }
+        catch (err) {
+            this.logger.warn(`Confirmation of MCP tool "${tool.name}" failed, not run: ${err.message}`);
+            return false;
+        }
+    }
+    async elicitConfirmation(server, prompt, requestId) {
+        const result = await server.elicitInput({
+            message: prompt.message,
+            requestedSchema: {
+                properties: {
+                    confirm: { description: `Run "${prompt.tool}" now`, title: 'Confirm', type: 'boolean' },
+                },
+                required: ['confirm'],
+                type: 'object',
+            },
+        }, { relatedRequestId: requestId, timeout: this.confirmationTimeoutMs });
+        return result?.action === 'accept' && result.content?.confirm === true;
+    }
+    errorResult(text) {
+        return { content: [{ text, type: 'text' }], isError: true };
+    }
 };
 CoreAiMcpService = CoreAiMcpService_1 = __decorate([
     Injectable(),
-    __metadata("design:paramtypes", [AiToolRegistry])
+    __param(1, Optional()),
+    __param(2, Optional()),
+    __metadata("design:paramtypes", [AiToolRegistry,
+        CoreAiUserSettingService,
+        CoreAiToolPolicyService])
 ], CoreAiMcpService);
 export { CoreAiMcpService };
 //# sourceMappingURL=core-ai-mcp.service.js.map

package/dist/core/modules/ai/services/core-ai-mcp.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-ai-mcp.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/ai/services/core-ai-mcp.service.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EAAE,cAAc,EAAc,MAAM,8BAA8B,CAAC;AAgCnE,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAGI;IAFZ,MAAM,GAAG,IAAI,MAAM,CAAC,kBAAgB,CAAC,IAAI,CAAC,CAAC;IAE9D,YAA+B,YAA4B;QAA5B,iBAAY,GAAZ,YAAY,CAAgB;IAAG,CAAC;IAK/D,YAAY,CAAC,IAAmC;QAC9C,OAAO,IAAI,CAAC,YAAY;aACrB,OAAO,CAAC,IAAI,CAAC;aACb,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvG,CAAC;IAMD,KAAK,CAAC,WAAW,CACf,IAAmC,EACnC,IAAY,EACZ,IAAyB;QAEzB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,kCAAkC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACxG,CAAC;QACD,MAAM,OAAO,GAAkB;YAC7B,WAAW,EAAE,CAAC,IAAI,IAAI,SAAS,CAAiC;YAChE,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC,IAAI,IAAI,SAAS,CAAiC,EAAE;SACrF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,aAAc,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAG,GAAa,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtF,CAAC;IACH,CAAC;IAWD,KAAK,CAAC,YAAY,CAAC,IAAqC;QACtD,MAAM,WAAW,GAAG,GAAe,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC7E,MAAM,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;QAG7G,MAAM,MAAM,GAAQ,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEjH,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5G,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE,CACrE,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CACrF,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AAhEY,gBAAgB;IAD5B,UAAU,EAAE;qCAIkC,cAAc;GAHhD,gBAAgB,CAgE5B"}
+{"version":3,"file":"core-ai-mcp.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/ai/services/core-ai-mcp.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,qDAAqD,CAAC;AACrF,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAc,MAAM,8BAA8B,CAAC;AAE1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAqEtE,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAON;IACY;IACA;IARd,MAAM,GAAG,IAAI,MAAM,CAAC,kBAAgB,CAAC,IAAI,CAAC,CAAC;IAG3C,qBAAqB,GAAG,CAAC,GAAG,MAAM,CAAC;IAEtD,YACqB,YAA4B,EAChB,kBAA6C,EAC7C,iBAA2C;QAFvD,iBAAY,GAAZ,YAAY,CAAgB;QAChB,uBAAkB,GAAlB,kBAAkB,CAA2B;QAC7C,sBAAiB,GAAjB,iBAAiB,CAA0B;IACzE,CAAC;IAKJ,YAAY,CAAC,IAAmC;QAC9C,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ;gBACnC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE;gBACtF,CAAC,CAAC,EAAE,CAAC;YACP,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC,CAAC;IACN,CAAC;IAOD,KAAK,CAAC,WAAW,CACf,IAAmC,EACnC,IAAY,EACZ,IAAyB,EACzB,UAA8B,EAAE;QAEhC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,WAAW,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAkB;YAC7B,WAAW,EAAE,CAAC,IAAI,IAAI,SAAS,CAAiC;YAChE,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC,IAAI,IAAI,SAAS,CAAiC,EAAE;SACrF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,MAAM,EAAE,QAAQ,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,+BAA+B,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,IAAI,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,EAAE,QAAQ,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,WAAW,CACrB,IAAI,IAAI,wGAAwG,CACjH,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACtE,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,6CAA6C,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACtG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,aAAc,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC,WAAW,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAWD,KAAK,CAAC,YAAY,CAAC,IAAqC;QACtD,MAAM,WAAW,GAAG,GAAe,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC7E,MAAM,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;QAG7G,MAAM,MAAM,GAAQ,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEjH,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5G,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAY,EAAE,KAAU,EAAE,EAAE,CACjF,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE;YAEnF,OAAO,EAAE,MAAM,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,IAAI;gBACxD,CAAC,CAAC,CAAC,MAA6B,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;gBAC9F,CAAC,CAAC,SAAS;SACd,CAAC,CACH,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAOS,KAAK,CAAC,oBAAoB,CAAC,IAAa,EAAE,IAAmC;QACrF,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,wBAAwB,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC3D,CAAC;IAMS,KAAK,CAAC,kBAAkB,CAChC,IAAa,EACb,IAAyB,EACzB,IAAmC;QAEnC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;gBAC5D,KAAK,EAAG,IAAI,EAAE,KAAkB,IAAI,EAAE;gBACtC,QAAQ,EAAE,cAAc,CAAC,WAAW,EAAE;gBACtC,MAAM,EAAE,IAAI,EAAE,EAAE;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,IAAI,aAAc,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACnG,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IASS,kBAAkB,CAAC,IAAa,EAAE,IAAyB;QACnE,MAAM,cAAc,GAAG,GAAG,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACtD,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1F,MAAM,KAAK,GACT,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;YACxG,OAAO,KAAK,GAAG,KAAK,KAAK,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACvF,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,OAAO;YACL,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,kCAAkC,IAAI,CAAC,IAAI,MAAM,WAAW,GAAG,aAAa,EAAE;YACvF,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC;IAMS,KAAK,CAAC,kBAAkB,CAChC,IAAa,EACb,IAAyB,EACzB,OAAmD;QAEnD,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,IAAI,sBAAuB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACvG,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAMS,KAAK,CAAC,kBAAkB,CAAC,MAAW,EAAE,MAA6B,EAAE,SAAkB;QAC/F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CACrC;YACE,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,eAAe,EAAE;gBACf,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,MAAM,CAAC,IAAI,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;iBACxF;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;gBACrB,IAAI,EAAE,QAAQ;aACf;SACF,EACD,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,qBAAqB,EAAE,CACrE,CAAC;QACF,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACzE,CAAC;IAGS,WAAW,CAAC,IAAY;QAChC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9D,CAAC;CACF,CAAA;AAlNY,gBAAgB;IAD5B,UAAU,EAAE;IASR,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,QAAQ,EAAE,CAAA;qCAFsB,cAAc;QACK,wBAAwB;QACzB,uBAAuB;GATjE,gBAAgB,CAkN5B"}

package/dist/core/modules/ai/services/core-ai-prompt-builder.service.js

@@ -103,12 +103,15 @@ let CoreAiPromptBuilderService = CoreAiPromptBuilderService_1 = class CoreAiProm
                         : '\n\n[Schemas deferred. Call `search_tools` with the tool name to fetch its parameter schema BEFORE you call it.]';
             }
         }
-        const toolCatalog = defer
-            ? (tools.map((t) => `- ${t.name}: ${this.summarizeToolDescription(t.description, summaryChars)}`).join('\n') ||
-                '(none)') + deferNote
-            : tools
-                .map((t) => `- ${t.name}: ${t.description}\n  parameters (JSON schema): ${JSON.stringify(t.parameters)}`)
-                .join('\n') || '(none)';
+        const namesOnly = supportsNativeTools && !planMode && ConfigService.get('ai.nativeToolCatalog') !== 'full';
+        const toolCatalog = namesOnly
+            ? tools.map((t) => `- ${t.name}`).join('\n') || '(none)'
+            : defer
+                ? (tools.map((t) => `- ${t.name}: ${this.summarizeToolDescription(t.description, summaryChars)}`).join('\n') ||
+                    '(none)') + deferNote
+                : tools
+                    .map((t) => `- ${t.name}: ${t.description}\n  parameters (JSON schema): ${JSON.stringify(t.parameters)}`)
+                    .join('\n') || '(none)';
         if (this.placeholderRegistry) {
             return this.placeholderRegistry.resolveAll({ toolCatalog, tools, user });
         }

package/dist/core/modules/ai/services/core-ai-prompt-builder.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-ai-prompt-builder.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/ai/services/core-ai-prompt-builder.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAG3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAA0B,MAAM,2BAA2B,CAAC;AAuBtG,IAAM,0BAA0B,kCAAhC,MAAM,0BAA0B;IAmBJ;IACA;IACA;IApBd,MAAM,GAAG,IAAI,MAAM,CAAC,4BAA0B,CAAC,IAAI,CAAC,CAAC;IAGrD,YAAY,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAG9F,mBAAmB,GACpC,sEAAsE;QACtE,uFAAuF;QACvF,uFAAuF,CAAC;IAGvE,QAAQ,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAGrG,yBAAyB,GAAG,KAAK,CAAC;IAE1C,YACiC,eAAmC,EACnC,WAAqC,EACrC,mBAA+C;QAF/C,oBAAe,GAAf,eAAe,CAAoB;QACnC,gBAAW,GAAX,WAAW,CAA0B;QACrC,wBAAmB,GAAnB,mBAAmB,CAA4B;IAC7E,CAAC;IAOJ,KAAK,CAAC,iBAAiB,CACrB,KAAgB,EAChB,mBAA4B,EAC5B,IAAwC,EACxC,OAA4B;QAE5B,MAAM,UAAU,GAAG,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3C,UAAU,EACV,OAAO,EAAE,QAAQ,EACjB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CACzC,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAClB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,eAAe,CAAC,EAClD,OAAO,EACP,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;IAQD,KAAK,CAAC,qBAAqB,CACzB,KAAgB,EAChB,IAAwC,EACxC,OAA4B;QAE5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3C,UAAU,EACV,OAAO,EAAE,QAAQ,EACjB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CACzC,CAAC;QAIF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,eAAe,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/G,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAKD,gBAAgB,CAAC,KAAgB;QAC/B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IAOS,gBAAgB;QACxB,OAAO,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzG,CAAC;IAMS,gBAAgB;QACxB,OAAO,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC,IAAI,SAAS,CAAC;IACpE,CAAC;IAMS,KAAK,CAAC,gBAAgB,CAC9B,UAAkB,EAClB,MAAe,EACf,MAAiB;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,MAAM,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,OAAO,QAAQ;iBACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC;iBACrF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;iBACzD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACvG,CAAC;IAOS,aAAa,CACrB,KAAgB,EAChB,IAAwC,EACxC,OAAgD;QAEhD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/B,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAOS,KAAK,CAAC,aAAa,CAC3B,KAAgB,EAChB,IAAwC,EACxC,mBAAmB,GAAG,KAAK,EAC3B,QAAQ,GAAG,KAAK;QAOhB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAU,qBAAqB,CAAC,KAAK,IAAI,CAAC;QACzE,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAQrC,MAAM,YAAY,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAS,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;QAG5G,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAClC,IAAI,QAAQ,EAAE,CAAC;gBAKb,SAAS;oBACP,YAAY,GAAG,CAAC;wBACd,CAAC,CAAC,4GAA4G;4BAC5G,0GAA0G;4BAC1G,2EAA2E;wBAC7E,CAAC,CAAC,4GAA4G;4BAC5G,iBAAiB,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,SAAS;oBACP,YAAY,GAAG,CAAC;wBACd,CAAC,CAAC,4GAA4G;4BAC5G,4GAA4G;4BAC5G,2CAA2C;wBAC7C,CAAC,CAAC,kHAAkH,CAAC;YAC3H,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,KAAK;YACvB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxG,QAAQ,CAAC,GAAG,SAAS;YACzB,CAAC,CAAC,KAAK;iBACF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,iCAAiC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;iBACxG,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;QAE9B,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAGD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE;YAC5C,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YAC3E,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YAC3D,WAAW;YACX,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;YACpD,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE;SACvB,CAAC;IACJ,CAAC;IAQS,wBAAwB,CAAC,KAAc;QAC/C,IAAI,KAAK,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAID,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACtC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,0BAA0B,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iGAAiG;gBAC/F,6EAA6E,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAwBS,wBAAwB,CAAC,WAAmB,EAAE,QAAgB;QACtE,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAmBD,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAClD,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC3D,MAAM;YACR,CAAC;YACD,GAAG,GAAG,IAAI,CAAC;YACX,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;gBACpD,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YAE1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QACtE,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IAChE,CAAC;IAGS,QAAQ,CAAC,SAAmC,EAAE,OAA+B,EAAE,SAAiB;QACxG,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YAEjC,IAAI,QAAQ,CAAC,GAAG,KAAK,eAAe,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,GAAG,KAAK,eAAe,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC9D,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBAC5D,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAGS,MAAM,CAAC,QAAgB,EAAE,OAA+B;QAChE,OAAO,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;CACF,CAAA;AA1UY,0BAA0B;IADtC,UAAU,EAAE;IAoBR,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,QAAQ,EAAE,CAAA;qCAFsC,iBAAiB;QACrB,uBAAuB;QACf,yBAAyB;GArBrE,0BAA0B,CA0UtC"}
+{"version":3,"file":"core-ai-prompt-builder.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/ai/services/core-ai-prompt-builder.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAG3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAA0B,MAAM,2BAA2B,CAAC;AAuBtG,IAAM,0BAA0B,kCAAhC,MAAM,0BAA0B;IAmBJ;IACA;IACA;IApBd,MAAM,GAAG,IAAI,MAAM,CAAC,4BAA0B,CAAC,IAAI,CAAC,CAAC;IAGrD,YAAY,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAG9F,mBAAmB,GACpC,sEAAsE;QACtE,uFAAuF;QACvF,uFAAuF,CAAC;IAGvE,QAAQ,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAGrG,yBAAyB,GAAG,KAAK,CAAC;IAE1C,YACiC,eAAmC,EACnC,WAAqC,EACrC,mBAA+C;QAF/C,oBAAe,GAAf,eAAe,CAAoB;QACnC,gBAAW,GAAX,WAAW,CAA0B;QACrC,wBAAmB,GAAnB,mBAAmB,CAA4B;IAC7E,CAAC;IAOJ,KAAK,CAAC,iBAAiB,CACrB,KAAgB,EAChB,mBAA4B,EAC5B,IAAwC,EACxC,OAA4B;QAE5B,MAAM,UAAU,GAAG,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3C,UAAU,EACV,OAAO,EAAE,QAAQ,EACjB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CACzC,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAClB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,eAAe,CAAC,EAClD,OAAO,EACP,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;IAQD,KAAK,CAAC,qBAAqB,CACzB,KAAgB,EAChB,IAAwC,EACxC,OAA4B;QAE5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3C,UAAU,EACV,OAAO,EAAE,QAAQ,EACjB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CACzC,CAAC;QAIF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,eAAe,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/G,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAKD,gBAAgB,CAAC,KAAgB;QAC/B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IAOS,gBAAgB;QACxB,OAAO,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzG,CAAC;IAMS,gBAAgB;QACxB,OAAO,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC,IAAI,SAAS,CAAC;IACpE,CAAC;IAMS,KAAK,CAAC,gBAAgB,CAC9B,UAAkB,EAClB,MAAe,EACf,MAAiB;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,MAAM,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,OAAO,QAAQ;iBACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC;iBACrF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;iBACzD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACvG,CAAC;IAOS,aAAa,CACrB,KAAgB,EAChB,IAAwC,EACxC,OAAgD;QAEhD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/B,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAOS,KAAK,CAAC,aAAa,CAC3B,KAAgB,EAChB,IAAwC,EACxC,mBAAmB,GAAG,KAAK,EAC3B,QAAQ,GAAG,KAAK;QAOhB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAU,qBAAqB,CAAC,KAAK,IAAI,CAAC;QACzE,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAQrC,MAAM,YAAY,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAS,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;QAG5G,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAClC,IAAI,QAAQ,EAAE,CAAC;gBAKb,SAAS;oBACP,YAAY,GAAG,CAAC;wBACd,CAAC,CAAC,4GAA4G;4BAC5G,0GAA0G;4BAC1G,2EAA2E;wBAC7E,CAAC,CAAC,4GAA4G;4BAC5G,iBAAiB,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,SAAS;oBACP,YAAY,GAAG,CAAC;wBACd,CAAC,CAAC,4GAA4G;4BAC5G,4GAA4G;4BAC5G,2CAA2C;wBAC7C,CAAC,CAAC,kHAAkH,CAAC;YAC3H,CAAC;QACH,CAAC;QAKD,MAAM,SAAS,GAAG,mBAAmB,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAS,sBAAsB,CAAC,KAAK,MAAM,CAAC;QACnH,MAAM,WAAW,GAAG,SAAS;YAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ;YACxD,CAAC,CAAC,KAAK;gBACL,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBACxG,QAAQ,CAAC,GAAG,SAAS;gBACzB,CAAC,CAAC,KAAK;qBACF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,iCAAiC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;qBACxG,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;QAEhC,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAGD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE;YAC5C,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YAC3E,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YAC3D,WAAW;YACX,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;YACpD,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE;SACvB,CAAC;IACJ,CAAC;IAQS,wBAAwB,CAAC,KAAc;QAC/C,IAAI,KAAK,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAID,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACtC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,0BAA0B,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iGAAiG;gBAC/F,6EAA6E,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAwBS,wBAAwB,CAAC,WAAmB,EAAE,QAAgB;QACtE,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAmBD,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAClD,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC3D,MAAM;YACR,CAAC;YACD,GAAG,GAAG,IAAI,CAAC;YACX,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;gBACpD,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YAE1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QACtE,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IAChE,CAAC;IAGS,QAAQ,CAAC,SAAmC,EAAE,OAA+B,EAAE,SAAiB;QACxG,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YAEjC,IAAI,QAAQ,CAAC,GAAG,KAAK,eAAe,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,GAAG,KAAK,eAAe,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC9D,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBAC5D,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAGS,MAAM,CAAC,QAAgB,EAAE,OAA+B;QAChE,OAAO,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;CACF,CAAA;AAjVY,0BAA0B;IADtC,UAAU,EAAE;IAoBR,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,QAAQ,EAAE,CAAA;qCAFsC,iBAAiB;QACrB,uBAAuB;QACf,yBAAyB;GArBrE,0BAA0B,CAiVtC"}

package/dist/core/modules/ai/services/core-ai-user-setting.service.d.ts

@@ -0,0 +1,17 @@
+import { Logger } from '@nestjs/common';
+import type { Model } from 'mongoose';
+import { CrudService } from '../../../common/services/crud.service.js';
+import type { CoreModelConstructor } from '../../../common/types/core-model-constructor.type.js';
+import type { CoreAiSettingsInput } from '../inputs/core-ai-settings.input.js';
+import { CoreAiSettings } from '../models/core-ai-settings.model.js';
+import { AiUserSettingDocument, CoreAiUserSetting } from '../models/core-ai-user-setting.model.js';
+export declare class CoreAiUserSettingService extends CrudService<CoreAiUserSetting, CoreAiUserSetting, CoreAiUserSetting> {
+    protected readonly mainDbModel: Model<AiUserSettingDocument>;
+    protected readonly mainModelConstructor: CoreModelConstructor<CoreAiUserSetting>;
+    protected readonly logger: Logger;
+    constructor(mainDbModel: Model<AiUserSettingDocument>, mainModelConstructor: CoreModelConstructor<CoreAiUserSetting>);
+    getSettings(userId: string | undefined): Promise<CoreAiSettings>;
+    updateSettings(userId: string, input: CoreAiSettingsInput): Promise<CoreAiSettings>;
+    mcpConfirmationFor(userId: string | undefined): Promise<boolean>;
+    protected findForUser(userId: string): Promise<CoreAiUserSetting | undefined>;
+}

package/dist/core/modules/ai/services/core-ai-user-setting.service.js

@@ -0,0 +1,72 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var CoreAiUserSettingService_1;
+import { ForbiddenException, Inject, Injectable, Logger } from '@nestjs/common';
+import { InjectModel } from '../../../common/persistence/mongo/mongoose-compat.js';
+import { upsertRecord } from '../../../common/persistence/store-upsert.js';
+import { CrudService } from '../../../common/services/crud.service.js';
+import { ErrorCode } from '../../error-code/index.js';
+import { effectiveMcpConfirmation, mcpConfirmationPolicy } from '../helpers/ai-tool-authorization.helper.js';
+import { CoreAiSettings } from '../models/core-ai-settings.model.js';
+import { AI_USER_SETTING_CLASS, AI_USER_SETTING_MODEL } from '../core-ai.constants.js';
+let CoreAiUserSettingService = CoreAiUserSettingService_1 = class CoreAiUserSettingService extends CrudService {
+    mainDbModel;
+    mainModelConstructor;
+    logger = new Logger(CoreAiUserSettingService_1.name);
+    constructor(mainDbModel, mainModelConstructor) {
+        super();
+        this.mainDbModel = mainDbModel;
+        this.mainModelConstructor = mainModelConstructor;
+    }
+    async getSettings(userId) {
+        const policy = mcpConfirmationPolicy();
+        const stored = userId ? await this.findForUser(userId) : undefined;
+        const settings = new CoreAiSettings();
+        settings.mcpConfirmation = effectiveMcpConfirmation(policy, stored?.mcpConfirmation);
+        settings.mcpConfirmationEnforced = policy.enforced;
+        return settings;
+    }
+    async updateSettings(userId, input) {
+        if (typeof input?.mcpConfirmation === 'boolean') {
+            if (mcpConfirmationPolicy().enforced) {
+                throw new ForbiddenException(ErrorCode.AI_SETTING_ENFORCED);
+            }
+            await upsertRecord(this.dataStore, { userId }, { mcpConfirmation: input.mcpConfirmation });
+        }
+        return this.getSettings(userId);
+    }
+    async mcpConfirmationFor(userId) {
+        const policy = mcpConfirmationPolicy();
+        if (policy.enforced || !userId) {
+            return policy.default;
+        }
+        try {
+            return effectiveMcpConfirmation(policy, (await this.findForUser(userId))?.mcpConfirmation);
+        }
+        catch (err) {
+            this.logger.warn(`AI settings of user ${userId} could not be read, MCP asks: ${err.message}`);
+            return true;
+        }
+    }
+    async findForUser(userId) {
+        return (await this.dataStore.findOne({ userId })) ?? undefined;
+    }
+};
+CoreAiUserSettingService = CoreAiUserSettingService_1 = __decorate([
+    Injectable(),
+    __param(0, InjectModel(AI_USER_SETTING_MODEL)),
+    __param(1, Inject(AI_USER_SETTING_CLASS)),
+    __metadata("design:paramtypes", [Function, Object])
+], CoreAiUserSettingService);
+export { CoreAiUserSettingService };
+//# sourceMappingURL=core-ai-user-setting.service.js.map

package/dist/core/modules/ai/services/core-ai-user-setting.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-ai-user-setting.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/ai/services/core-ai-user-setting.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,sDAAsD,CAAC;AAGnF,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAEvE,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAE7G,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAGrE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAahF,IAAM,wBAAwB,gCAA9B,MAAM,wBAAyB,SAAQ,WAAoE;IAI9C;IAEpC;IALX,MAAM,GAAG,IAAI,MAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAEtE,YACkE,WAAyC,EAE7E,oBAA6D;QAEzF,KAAK,EAAE,CAAC;QAJwD,gBAAW,GAAX,WAAW,CAA8B;QAE7E,yBAAoB,GAApB,oBAAoB,CAAyC;IAG3F,CAAC;IAKD,KAAK,CAAC,WAAW,CAAC,MAA0B;QAC1C,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;QACtC,QAAQ,CAAC,eAAe,GAAG,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;QACrF,QAAQ,CAAC,uBAAuB,GAAG,MAAM,CAAC,QAAQ,CAAC;QACnD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAMD,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,KAA0B;QAC7D,IAAI,OAAO,KAAK,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;YAChD,IAAI,qBAAqB,EAAE,CAAC,QAAQ,EAAE,CAAC;gBACrC,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAMD,KAAK,CAAC,kBAAkB,CAAC,MAA0B;QACjD,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,wBAAwB,CAAC,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,MAAM,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACzG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAGS,KAAK,CAAC,WAAW,CAAC,MAAc;QACxC,OAAQ,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAA8B,IAAI,SAAS,CAAC;IAC/F,CAAC;CACF,CAAA;AA1DY,wBAAwB;IADpC,UAAU,EAAE;IAKR,WAAA,WAAW,CAAC,qBAAqB,CAAC,CAAA;IAClC,WAAA,MAAM,CAAC,qBAAqB,CAAC,CAAA;;GALrB,wBAAwB,CA0DpC"}

package/dist/core/modules/ai/services/core-ai.service.d.ts

@@ -68,11 +68,13 @@ export declare class CoreAiService {
     protected readonly placeholderRegistry?: CoreAiPlaceholderRegistry;
     protected readonly coreRedisService?: CoreRedisService;
     protected readonly logger: Logger;
+    protected crowdedContextWarned?: Set<string>;
     protected rateLimitStore?: RateLimitStore;
     constructor(connectionService: CoreAiConnectionService, providerFactory: LlmProviderFactory, toolRegistry: AiToolRegistry, promptBuilder: CoreAiPromptBuilderService, interactionService?: CoreAiInteractionService, conversationService?: CoreAiConversationService, budgetService?: CoreAiBudgetService, connectionResolver?: CoreAiConnectionResolverService, hintService?: CoreAiPromptHintService, toolGrantService?: CoreAiToolGrantService, hookRegistry?: AiHookRegistry, toolPolicyService?: CoreAiToolPolicyService, modeService?: CoreAiModeService, placeholderRegistry?: CoreAiPlaceholderRegistry, coreRedisService?: CoreRedisService);
     prompt(input: CoreAiPromptInput, serviceOptions: ServiceOptions, hooks?: {
         onAction?: (action: CoreAiAction) => void;
     }): Promise<CoreAiResponse>;
+    protected scopeConversation(input: CoreAiPromptInput, serviceOptions: ServiceOptions): Promise<CoreAiPromptInput>;
     protected resolvePromptPlaceholders(input: CoreAiPromptInput, serviceOptions: ServiceOptions): Promise<CoreAiPromptInput>;
     protected unavailableResponse(input: CoreAiPromptInput, language?: string): CoreAiResponse;
     protected readonly detectionBackoff: Map<string, number>;
@@ -102,7 +104,7 @@ export declare class CoreAiService {
     }, completion: LlmResponse): void;
     protected toAction(call: LlmToolCall): CoreAiAction;
     protected baseResponse(connectionId: string, input: CoreAiPromptInput): CoreAiResponse;
-    protected persistTurn(input: CoreAiPromptInput, response: CoreAiResponse): Promise<void>;
+    protected persistTurn(input: CoreAiPromptInput, response: CoreAiResponse, run: AiRunContext): Promise<void>;
     protected auditRecord(input: CoreAiPromptInput, run: AiRunContext, response: CoreAiResponse, usage: {
         completionTokens: number;
         promptTokens: number;
@@ -122,8 +124,11 @@ export declare class CoreAiService {
     protected firstBalancedJson(text: string, from: number): null | string;
     protected estimateTokens(text: string): number;
     protected contextBudget(connection: ResolvedAiConnection): number;
-    protected compactMessages(messages: LlmMessage[], connection: ResolvedAiConnection): Promise<number>;
-    protected fitMessagesToContext(messages: LlmMessage[], connection: ResolvedAiConnection): void;
+    protected messageBudget(connection: ResolvedAiConnection, reservedTokens?: number): number;
+    protected crowdedContextShare(): number;
+    protected warnOnCrowdedContext(connection: ResolvedAiConnection, fixedTokens: number): void;
+    protected compactMessages(messages: LlmMessage[], connection: ResolvedAiConnection, reservedTokens?: number): Promise<number>;
+    protected fitMessagesToContext(messages: LlmMessage[], connection: ResolvedAiConnection, reservedTokens?: number): void;
     protected capToolResults(serialized: string): string;
     protected evaluateToolPolicies(toolCalls: LlmToolCall[], tools: IAiTool[], run: AiRunContext): Promise<{
         asked: LlmToolCall[];

package/dist/core/modules/ai/services/core-ai.service.js

@@ -17,6 +17,7 @@ import { CoreRedisService } from '../../../common/services/core-redis.service.js
 import { InMemoryRateLimitStore, RedisRateLimitStore, } from '../../../common/services/rate-limit-store.js';
 import { RequestContext } from '../../../common/services/request-context.service.js';
 import { ErrorCode } from '../../error-code/index.js';
+import { authorizeToolCall, toolRequiresConfirmation } from '../helpers/ai-tool-authorization.helper.js';
 import { CoreAiAction } from '../models/core-ai-action.model.js';
 import { CoreAiResponse } from '../models/core-ai-response.model.js';
 import { CoreAiUsage } from '../models/core-ai-usage.model.js';
@@ -52,6 +53,7 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
     placeholderRegistry;
     coreRedisService;
     logger = new Logger(CoreAiService_1.name);
+    crowdedContextWarned;
     rateLimitStore;
     constructor(connectionService, providerFactory, toolRegistry, promptBuilder, interactionService, conversationService, budgetService, connectionResolver, hintService, toolGrantService, hookRegistry, toolPolicyService, modeService, placeholderRegistry, coreRedisService) {
         this.connectionService = connectionService;
@@ -72,7 +74,7 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
     }
     async prompt(input, serviceOptions, hooks) {
         const mode = input.mode || ConfigService.get('ai.defaultMode') || 'auto';
-        const resolvedInput = await this.resolvePromptPlaceholders(input, serviceOptions);
+        const resolvedInput = await this.scopeConversation(await this.resolvePromptPlaceholders(input, serviceOptions), serviceOptions);
         const run = await this.prepareRun(resolvedInput, serviceOptions);
         if (!run) {
             return this.unavailableResponse(resolvedInput, serviceOptions?.language);
@@ -84,6 +86,13 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
         await this.attachBudgetSummary(response, run);
         return response;
     }
+    async scopeConversation(input, serviceOptions) {
+        if (!input?.conversationId) {
+            return input;
+        }
+        const owned = await this.conversationService?.isOwnedBy(input.conversationId, serviceOptions?.currentUser?.id);
+        return owned ? input : { ...input, conversationId: undefined };
+    }
     async resolvePromptPlaceholders(input, serviceOptions) {
         if (!this.placeholderRegistry || !input?.prompt || !input.prompt.includes('{{')) {
             return input;
@@ -219,6 +228,8 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
             language,
         });
         const toolSchemas = this.promptBuilder.buildToolSchemas(tools);
+        const toolTokens = provider.capabilities.nativeTools ? this.estimateTokens(JSON.stringify(toolSchemas)) : 0;
+        this.warnOnCrowdedContext(connection, this.estimateTokens(systemPrompt) + toolTokens);
         const jsonMode = provider.capabilities.nativeTools ? { jsonResponse: false } : {};
         const messages = [{ content: systemPrompt, role: 'system' }];
         for (const turn of history) {
@@ -251,8 +262,8 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
                 break;
             }
             iterations++;
-            await this.compactMessages(messages, connection);
-            this.fitMessagesToContext(messages, connection);
+            await this.compactMessages(messages, connection, toolTokens);
+            this.fitMessagesToContext(messages, connection, toolTokens);
             const completion = await provider.chat(messages, toolSchemas, {
                 ...jsonMode,
                 maxTokens: connection.defaultMaxTokens,
@@ -377,8 +388,9 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
             response.pendingQuestion = pendingQuestion;
         }
         if (input.conversationId && this.conversationService && !requiresConfirmation && !pendingQuestion) {
-            await this.conversationService.appendMessage(input.conversationId, { content: input.prompt, role: 'user' });
-            await this.conversationService.appendMessage(input.conversationId, { content: finalText, role: 'assistant' });
+            const owner = currentUser?.id;
+            await this.conversationService.appendMessage(input.conversationId, { content: input.prompt, role: 'user' }, owner);
+            await this.conversationService.appendMessage(input.conversationId, { content: finalText, role: 'assistant' }, owner);
         }
         await this.audit({
             actions: actions.map((a) => ({ name: a.name, success: a.success })),
@@ -400,6 +412,7 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
         const usage = { completionTokens: 0, promptTokens: 0, totalTokens: 0 };
         const chatOptions = { maxTokens: connection.defaultMaxTokens, temperature: connection.defaultTemperature };
         const planSystemPrompt = await this.promptBuilder.buildPlanSystemPrompt(tools, currentUser, { language });
+        this.warnOnCrowdedContext(connection, this.estimateTokens(planSystemPrompt));
         const messages = [{ content: planSystemPrompt, role: 'system' }];
         for (const turn of history) {
             messages.push({ content: turn.content, role: turn.role === 'assistant' ? 'assistant' : 'user' });
@@ -482,7 +495,7 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
         response.plan = planActions;
         response.text = finalText;
         response.usage = Object.assign(new CoreAiUsage(), usage);
-        await this.persistTurn(input, response);
+        await this.persistTurn(input, response, run);
         await this.audit(this.auditRecord(input, run, response, usage));
         return response;
     }
@@ -547,23 +560,10 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
         if (!tool) {
             return { allowed: false, reason: `Unknown or not permitted tool: ${call.name}` };
         }
-        if (!tool.authorize) {
-            return { allowed: true };
-        }
-        const result = await tool.authorize(call.arguments ?? {}, context);
-        return typeof result === 'boolean' ? { allowed: result } : result;
+        return authorizeToolCall(tool, call.arguments ?? {}, context);
     }
     confirmationRequiredFor(tool, input) {
-        if (tool.destructive) {
-            return true;
-        }
-        if (!tool.mutating) {
-            return false;
-        }
-        const cfg = ConfigService.get('ai.confirmation.mutating');
-        const enforced = cfg?.enforced === true;
-        const adminDefault = cfg?.default === true;
-        return enforced ? true : (input.requireConfirmation ?? adminDefault);
+        return toolRequiresConfirmation(tool, input.requireConfirmation);
     }
     translate(key, language, params = {}) {
         const lang = (language || 'en').slice(0, 2).toLowerCase();
@@ -633,10 +633,11 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
         response.conversationId = input.conversationId;
         return response;
     }
-    async persistTurn(input, response) {
+    async persistTurn(input, response, run) {
         if (input.conversationId && this.conversationService && !response.requiresConfirmation && !response.denied) {
-            await this.conversationService.appendMessage(input.conversationId, { content: input.prompt, role: 'user' });
-            await this.conversationService.appendMessage(input.conversationId, { content: response.text, role: 'assistant' });
+            const owner = run?.currentUser?.id;
+            await this.conversationService.appendMessage(input.conversationId, { content: input.prompt, role: 'user' }, owner);
+            await this.conversationService.appendMessage(input.conversationId, { content: response.text, role: 'assistant' }, owner);
         }
     }
     auditRecord(input, run, response, usage) {
@@ -726,8 +727,21 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
                 action.arguments = decision.args;
             }
         }
+        const authorization = await this.authorizeCall(call, availableTools, context);
+        if (!authorization.allowed) {
+            action.success = false;
+            action.result = {
+                error: {
+                    code: 'TOOL_NOT_AVAILABLE',
+                    hint: 'The user may not run this tool with these arguments. Do not retry it; explain this to the user.',
+                    message: authorization.reason || `Not permitted: ${call.name}`,
+                },
+            };
+            return action;
+        }
+        const toolContext = tool.authorize ? { ...context, authorization } : context;
         try {
-            const raw = await tool.execute(call.arguments ?? {}, context);
+            const raw = await tool.execute(call.arguments ?? {}, toolContext);
             let success = true;
             let payload = raw;
             let message;
@@ -898,14 +912,39 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
         const margin = 256;
         return Math.max(512, window - reserve - margin);
     }
-    async compactMessages(messages, connection) {
+    messageBudget(connection, reservedTokens = 0) {
+        return Math.max(512, this.contextBudget(connection) - Math.max(0, reservedTokens));
+    }
+    crowdedContextShare() {
+        return 0.5;
+    }
+    warnOnCrowdedContext(connection, fixedTokens) {
+        const budget = this.contextBudget(connection);
+        const key = connection.id ?? connection.name ?? '';
+        const warned = (this.crowdedContextWarned ??= new Set());
+        if (fixedTokens <= budget * this.crowdedContextShare() || warned.has(key)) {
+            return;
+        }
+        if (warned.size >= 1000) {
+            warned.clear();
+        }
+        warned.add(key);
+        const window = connection.contextWindow
+            ? `its context window of ${connection.contextWindow}`
+            : `the ai.contextWindow fallback of ${ConfigService.get('ai.contextWindow') ?? 8192} (the connection has no context window of its own)`;
+        this.logger.warn(`AI connection "${connection.name ?? key}": the system prompt and tool definitions take ~${fixedTokens} of ` +
+            `${budget} input tokens (${window}). Little room is left for the conversation: older turns are dropped ` +
+            `early and a long message is cut. Set the connection's contextWindow, or shrink the tool catalog ` +
+            `(ai.deferToolSchemas, fewer tools per role).`);
+    }
+    async compactMessages(messages, connection, reservedTokens = 0) {
         if (ConfigService.get('ai.compaction') === false) {
             return 0;
         }
         if (messages.length <= 3) {
             return 0;
         }
-        const budget = this.contextBudget(connection);
+        const budget = this.messageBudget(connection, reservedTokens);
         const total = () => messages.reduce((sum, m) => sum + this.estimateTokens(m.content) + 4, 0);
         if (total() <= budget) {
             return 0;
@@ -943,11 +982,11 @@ let CoreAiService = CoreAiService_1 = class CoreAiService {
             return 0;
         }
     }
-    fitMessagesToContext(messages, connection) {
+    fitMessagesToContext(messages, connection, reservedTokens = 0) {
         if (messages.length === 0) {
             return;
         }
-        const budget = this.contextBudget(connection);
+        const budget = this.messageBudget(connection, reservedTokens);
         const total = () => messages.reduce((sum, m) => sum + this.estimateTokens(m.content) + 4, 0);
         let dropped = 0;
         while (total() > budget && messages.length > 2) {