@open-mercato/ai-assistant 0.4.2-canary-c02407ff85

package/dist/modules/ai_assistant/lib/api-endpoint-index.js

@@ -0,0 +1,210 @@
+import {
+  API_ENDPOINT_ENTITY_ID,
+  GLOBAL_TENANT_ID,
+  API_ENDPOINT_SEARCH_CONFIG,
+  endpointToIndexableRecord,
+  computeEndpointsChecksum
+} from "./api-endpoint-index-config.js";
+const API_ENDPOINT_ENTITY = API_ENDPOINT_ENTITY_ID;
+let endpointsCache = null;
+let endpointsByOperationId = null;
+async function getApiEndpoints() {
+  if (endpointsCache) {
+    return endpointsCache;
+  }
+  endpointsCache = await parseApiEndpoints();
+  endpointsByOperationId = new Map(endpointsCache.map((e) => [e.operationId, e]));
+  return endpointsCache;
+}
+async function getEndpointByOperationId(operationId) {
+  await getApiEndpoints();
+  return endpointsByOperationId?.get(operationId) ?? null;
+}
+async function parseApiEndpoints() {
+  const baseUrl = process.env.NEXT_PUBLIC_API_BASE_URL || process.env.NEXT_PUBLIC_APP_URL || process.env.APP_URL || "http://localhost:3000";
+  const openApiUrl = `${baseUrl}/api/docs/openapi`;
+  try {
+    console.error(`[API Index] Fetching OpenAPI spec from ${openApiUrl}...`);
+    const response = await fetch(openApiUrl);
+    if (!response.ok) {
+      console.error(`[API Index] Failed to fetch OpenAPI spec: ${response.status} ${response.statusText}`);
+      return [];
+    }
+    const doc = await response.json();
+    console.error(`[API Index] Successfully fetched OpenAPI spec`);
+    return extractEndpoints(doc);
+  } catch (error) {
+    console.error("[API Index] Could not fetch OpenAPI spec:", error instanceof Error ? error.message : error);
+    console.error("[API Index] Make sure the app is running at", baseUrl);
+    return [];
+  }
+}
+function extractEndpoints(doc) {
+  const endpoints = [];
+  const validMethods = ["get", "post", "put", "patch", "delete"];
+  if (!doc.paths) {
+    return endpoints;
+  }
+  for (const [path, pathItem] of Object.entries(doc.paths)) {
+    if (!pathItem || typeof pathItem !== "object") continue;
+    for (const [method, operation] of Object.entries(pathItem)) {
+      if (!validMethods.includes(method.toLowerCase())) continue;
+      if (!operation || typeof operation !== "object") continue;
+      const op = operation;
+      const operationId = op.operationId || generateOperationId(path, method);
+      const endpoint = {
+        id: operationId,
+        operationId,
+        method: method.toUpperCase(),
+        path,
+        summary: op.summary || "",
+        description: op.description || op.summary || `${method.toUpperCase()} ${path}`,
+        tags: op.tags || [],
+        requiredFeatures: op["x-require-features"] || [],
+        deprecated: op.deprecated || false,
+        parameters: extractParameters(op.parameters || []),
+        requestBodySchema: extractRequestBodySchema(op.requestBody, doc.components?.schemas)
+      };
+      endpoints.push(endpoint);
+    }
+  }
+  console.error(`[API Index] Parsed ${endpoints.length} endpoints from OpenAPI spec`);
+  return endpoints;
+}
+function generateOperationId(path, method) {
+  const pathParts = path.replace(/^\//, "").replace(/\{([^}]+)\}/g, "by_$1").split("/").filter(Boolean).join("_");
+  return `${method.toLowerCase()}_${pathParts}`;
+}
+function extractParameters(params) {
+  return params.filter((p) => p.in === "path" || p.in === "query").map((p) => ({
+    name: p.name,
+    in: p.in,
+    required: p.required ?? false,
+    type: p.schema?.type || "string",
+    description: p.description || ""
+  }));
+}
+function extractRequestBodySchema(requestBody, schemas) {
+  if (!requestBody?.content?.["application/json"]?.schema) {
+    return null;
+  }
+  const schema = requestBody.content["application/json"].schema;
+  if (schema.$ref && schemas) {
+    const refPath = schema.$ref.replace("#/components/schemas/", "");
+    return schemas[refPath] || schema;
+  }
+  return schema;
+}
+let lastIndexChecksum = null;
+async function indexApiEndpoints(searchService, force = false) {
+  const endpoints = await getApiEndpoints();
+  if (endpoints.length === 0) {
+    console.error("[API Index] No endpoints to index");
+    return 0;
+  }
+  const checksum = computeEndpointsChecksum(
+    endpoints.map((e) => ({ operationId: e.operationId, method: e.method, path: e.path }))
+  );
+  if (!force && lastIndexChecksum === checksum) {
+    console.error(`[API Index] Skipping indexing - ${endpoints.length} endpoints unchanged`);
+    return 0;
+  }
+  const records = endpoints.map(
+    (endpoint) => endpointToIndexableRecord(endpoint)
+  );
+  try {
+    console.error(`[API Index] Starting bulk index of ${records.length} endpoints...`);
+    const timeoutMs = 6e4;
+    const indexPromise = searchService.bulkIndex(records);
+    const timeoutPromise = new Promise(
+      (_, reject) => setTimeout(() => reject(new Error(`Bulk index timed out after ${timeoutMs}ms`)), timeoutMs)
+    );
+    await Promise.race([indexPromise, timeoutPromise]);
+    lastIndexChecksum = checksum;
+    console.error(`[API Index] Indexed ${records.length} API endpoints for hybrid search`);
+    return records.length;
+  } catch (error) {
+    console.error("[API Index] Failed to index endpoints:", error);
+    lastIndexChecksum = checksum;
+    return records.length;
+  }
+}
+function buildSearchableContent(endpoint) {
+  const parts = [
+    endpoint.operationId,
+    endpoint.method,
+    endpoint.path,
+    endpoint.summary,
+    endpoint.description,
+    ...endpoint.tags,
+    ...endpoint.parameters.map((p) => `${p.name} ${p.description}`)
+  ];
+  return parts.filter(Boolean).join(" ");
+}
+async function searchEndpoints(searchService, query, options = {}) {
+  const { limit = API_ENDPOINT_SEARCH_CONFIG.defaultLimit, method } = options;
+  await getApiEndpoints();
+  if (searchService) {
+    try {
+      const results = await searchService.search(query, {
+        tenantId: GLOBAL_TENANT_ID,
+        organizationId: null,
+        entityTypes: [API_ENDPOINT_ENTITY_ID],
+        limit: limit * 2
+        // Get extra to account for filtering
+      });
+      const endpoints = [];
+      for (const result of results) {
+        if (endpoints.length >= limit) break;
+        const endpoint = endpointsByOperationId?.get(result.recordId);
+        if (endpoint) {
+          if (method && endpoint.method !== method.toUpperCase()) continue;
+          endpoints.push(endpoint);
+        }
+      }
+      if (endpoints.length > 0) {
+        return endpoints;
+      }
+      console.error("[API Index] No hybrid search results, falling back to in-memory search");
+    } catch (error) {
+      console.error("[API Index] Hybrid search failed, falling back to in-memory:", error);
+    }
+  }
+  return searchEndpointsFallback(query, { limit, method });
+}
+function searchEndpointsFallback(query, options = {}) {
+  const { limit = API_ENDPOINT_SEARCH_CONFIG.defaultLimit, method } = options;
+  if (!endpointsCache) {
+    return [];
+  }
+  const queryLower = query.toLowerCase();
+  const queryTerms = queryLower.split(/\s+/).filter(Boolean);
+  let matches = endpointsCache.filter((endpoint) => {
+    const content = buildSearchableContent(endpoint).toLowerCase();
+    return queryTerms.some((term) => content.includes(term));
+  });
+  if (method) {
+    matches = matches.filter((e) => e.method === method.toUpperCase());
+  }
+  matches.sort((a, b) => {
+    const aContent = buildSearchableContent(a).toLowerCase();
+    const bContent = buildSearchableContent(b).toLowerCase();
+    const aScore = queryTerms.filter((t) => aContent.includes(t)).length;
+    const bScore = queryTerms.filter((t) => bContent.includes(t)).length;
+    return bScore - aScore;
+  });
+  return matches.slice(0, limit);
+}
+function clearEndpointCache() {
+  endpointsCache = null;
+  endpointsByOperationId = null;
+}
+export {
+  API_ENDPOINT_ENTITY,
+  clearEndpointCache,
+  getApiEndpoints,
+  getEndpointByOperationId,
+  indexApiEndpoints,
+  searchEndpoints
+};
+//# sourceMappingURL=api-endpoint-index.js.map

package/dist/modules/ai_assistant/lib/api-endpoint-index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/api-endpoint-index.ts"],
+  "sourcesContent": ["/**\n * API Endpoint Index\n *\n * Parses OpenAPI spec and indexes endpoints for discovery via hybrid search.\n */\n\nimport type { OpenApiDocument } from '@open-mercato/shared/lib/openapi'\nimport type { SearchService } from '@open-mercato/search/service'\nimport type { IndexableRecord } from '@open-mercato/search/types'\nimport {\n  API_ENDPOINT_ENTITY_ID,\n  GLOBAL_TENANT_ID,\n  API_ENDPOINT_SEARCH_CONFIG,\n  endpointToIndexableRecord,\n  computeEndpointsChecksum,\n} from './api-endpoint-index-config'\n\n/**\n * Indexed API endpoint structure\n */\nexport interface ApiEndpoint {\n  id: string\n  operationId: string\n  method: string\n  path: string\n  summary: string\n  description: string\n  tags: string[]\n  requiredFeatures: string[]\n  parameters: ApiParameter[]\n  requestBodySchema: Record<string, unknown> | null\n  deprecated: boolean\n}\n\nexport interface ApiParameter {\n  name: string\n  in: 'path' | 'query' | 'header'\n  required: boolean\n  type: string\n  description: string\n}\n\n/**\n * Entity type for API endpoints in search index\n * @deprecated Use API_ENDPOINT_ENTITY_ID from api-endpoint-index-config.ts\n */\nexport const API_ENDPOINT_ENTITY = API_ENDPOINT_ENTITY_ID\n\n/**\n * In-memory cache of parsed endpoints (avoid re-parsing on each request)\n */\nlet endpointsCache: ApiEndpoint[] | null = null\nlet endpointsByOperationId: Map<string, ApiEndpoint> | null = null\n\n/**\n * Get all parsed API endpoints (cached)\n */\nexport async function getApiEndpoints(): Promise<ApiEndpoint[]> {\n  if (endpointsCache) {\n    return endpointsCache\n  }\n\n  endpointsCache = await parseApiEndpoints()\n  endpointsByOperationId = new Map(endpointsCache.map((e) => [e.operationId, e]))\n\n  return endpointsCache\n}\n\n/**\n * Get endpoint by operationId\n */\nexport async function getEndpointByOperationId(operationId: string): Promise<ApiEndpoint | null> {\n  await getApiEndpoints() // Ensure cache is populated\n  return endpointsByOperationId?.get(operationId) ?? null\n}\n\n/**\n * Parse OpenAPI spec into indexable endpoints\n * Fetches the OpenAPI spec from the running app's /api/docs/openapi endpoint\n */\nasync function parseApiEndpoints(): Promise<ApiEndpoint[]> {\n  const baseUrl =\n    process.env.NEXT_PUBLIC_API_BASE_URL ||\n    process.env.NEXT_PUBLIC_APP_URL ||\n    process.env.APP_URL ||\n    'http://localhost:3000'\n\n  const openApiUrl = `${baseUrl}/api/docs/openapi`\n\n  try {\n    console.error(`[API Index] Fetching OpenAPI spec from ${openApiUrl}...`)\n    const response = await fetch(openApiUrl)\n\n    if (!response.ok) {\n      console.error(`[API Index] Failed to fetch OpenAPI spec: ${response.status} ${response.statusText}`)\n      return []\n    }\n\n    const doc = (await response.json()) as OpenApiDocument\n    console.error(`[API Index] Successfully fetched OpenAPI spec`)\n    return extractEndpoints(doc)\n  } catch (error) {\n    console.error('[API Index] Could not fetch OpenAPI spec:', error instanceof Error ? error.message : error)\n    console.error('[API Index] Make sure the app is running at', baseUrl)\n    return []\n  }\n}\n\n/**\n * Extract endpoints from OpenAPI document\n */\nfunction extractEndpoints(doc: OpenApiDocument): ApiEndpoint[] {\n  const endpoints: ApiEndpoint[] = []\n  const validMethods = ['get', 'post', 'put', 'patch', 'delete']\n\n  if (!doc.paths) {\n    return endpoints\n  }\n\n  for (const [path, pathItem] of Object.entries(doc.paths)) {\n    if (!pathItem || typeof pathItem !== 'object') continue\n\n    for (const [method, operation] of Object.entries(pathItem)) {\n      if (!validMethods.includes(method.toLowerCase())) continue\n      if (!operation || typeof operation !== 'object') continue\n\n      const op = operation as any\n\n      // Generate operationId if not present\n      const operationId = op.operationId || generateOperationId(path, method)\n\n      const endpoint: ApiEndpoint = {\n        id: operationId,\n        operationId,\n        method: method.toUpperCase(),\n        path,\n        summary: op.summary || '',\n        description: op.description || op.summary || `${method.toUpperCase()} ${path}`,\n        tags: op.tags || [],\n        requiredFeatures: op['x-require-features'] || [],\n        deprecated: op.deprecated || false,\n        parameters: extractParameters(op.parameters || []),\n        requestBodySchema: extractRequestBodySchema(op.requestBody, doc.components?.schemas),\n      }\n\n      endpoints.push(endpoint)\n    }\n  }\n\n  console.error(`[API Index] Parsed ${endpoints.length} endpoints from OpenAPI spec`)\n  return endpoints\n}\n\n/**\n * Generate operationId from path and method\n */\nfunction generateOperationId(path: string, method: string): string {\n  const pathParts = path\n    .replace(/^\\//, '')\n    .replace(/\\{([^}]+)\\}/g, 'by_$1')\n    .split('/')\n    .filter(Boolean)\n    .join('_')\n\n  return `${method.toLowerCase()}_${pathParts}`\n}\n\n/**\n * Extract parameter info\n */\nfunction extractParameters(params: any[]): ApiParameter[] {\n  return params\n    .filter((p) => p.in === 'path' || p.in === 'query')\n    .map((p) => ({\n      name: p.name,\n      in: p.in,\n      required: p.required ?? false,\n      type: p.schema?.type || 'string',\n      description: p.description || '',\n    }))\n}\n\n/**\n * Extract request body schema (simplified)\n */\nfunction extractRequestBodySchema(\n  requestBody: any,\n  schemas?: Record<string, any>\n): Record<string, unknown> | null {\n  if (!requestBody?.content?.['application/json']?.schema) {\n    return null\n  }\n\n  const schema = requestBody.content['application/json'].schema\n\n  // Resolve $ref if present\n  if (schema.$ref && schemas) {\n    const refPath = schema.$ref.replace('#/components/schemas/', '')\n    return schemas[refPath] || schema\n  }\n\n  return schema\n}\n\n/**\n * Checksum from last indexing operation\n */\nlet lastIndexChecksum: string | null = null\n\n/**\n * Index endpoints for search discovery using hybrid search strategies.\n * Uses checksum-based change detection to avoid unnecessary re-indexing.\n *\n * @param searchService - The search service to use for indexing\n * @param force - Force re-indexing even if checksum hasn't changed\n * @returns Number of endpoints indexed\n */\nexport async function indexApiEndpoints(\n  searchService: SearchService,\n  force = false\n): Promise<number> {\n  const endpoints = await getApiEndpoints()\n\n  if (endpoints.length === 0) {\n    console.error('[API Index] No endpoints to index')\n    return 0\n  }\n\n  // Compute checksum to detect changes\n  const checksum = computeEndpointsChecksum(\n    endpoints.map((e) => ({ operationId: e.operationId, method: e.method, path: e.path }))\n  )\n\n  // Skip if checksum matches and not forced\n  if (!force && lastIndexChecksum === checksum) {\n    console.error(`[API Index] Skipping indexing - ${endpoints.length} endpoints unchanged`)\n    return 0\n  }\n\n  // Convert to indexable records using the proper format\n  const records: IndexableRecord[] = endpoints.map((endpoint) =>\n    endpointToIndexableRecord(endpoint)\n  )\n\n  try {\n    console.error(`[API Index] Starting bulk index of ${records.length} endpoints...`)\n    // Bulk index using all available strategies (fulltext + vector)\n    // Use Promise.race with timeout to prevent hanging\n    const timeoutMs = 60000 // 60 second timeout\n    const indexPromise = searchService.bulkIndex(records)\n    const timeoutPromise = new Promise<never>((_, reject) =>\n      setTimeout(() => reject(new Error(`Bulk index timed out after ${timeoutMs}ms`)), timeoutMs)\n    )\n\n    await Promise.race([indexPromise, timeoutPromise])\n    lastIndexChecksum = checksum\n    console.error(`[API Index] Indexed ${records.length} API endpoints for hybrid search`)\n    return records.length\n  } catch (error) {\n    console.error('[API Index] Failed to index endpoints:', error)\n    // Still return the count - some strategies may have succeeded\n    lastIndexChecksum = checksum\n    return records.length\n  }\n}\n\n/**\n * Build searchable content from endpoint\n */\nfunction buildSearchableContent(endpoint: ApiEndpoint): string {\n  const parts = [\n    endpoint.operationId,\n    endpoint.method,\n    endpoint.path,\n    endpoint.summary,\n    endpoint.description,\n    ...endpoint.tags,\n    ...endpoint.parameters.map((p) => `${p.name} ${p.description}`),\n  ]\n\n  return parts.filter(Boolean).join(' ')\n}\n\n/**\n * Search endpoints using hybrid search (fulltext + vector).\n * Falls back to in-memory search if search service is not available.\n */\nexport async function searchEndpoints(\n  searchService: SearchService | null,\n  query: string,\n  options: { limit?: number; method?: string } = {}\n): Promise<ApiEndpoint[]> {\n  const { limit = API_ENDPOINT_SEARCH_CONFIG.defaultLimit, method } = options\n\n  // Ensure endpoints are loaded\n  await getApiEndpoints()\n\n  // Try hybrid search first if search service is available\n  if (searchService) {\n    try {\n      // Use hybrid search (fulltext + vector)\n      const results = await searchService.search(query, {\n        tenantId: GLOBAL_TENANT_ID,\n        organizationId: null,\n        entityTypes: [API_ENDPOINT_ENTITY_ID],\n        limit: limit * 2, // Get extra to account for filtering\n      })\n\n      // Map search results back to ApiEndpoint objects\n      const endpoints: ApiEndpoint[] = []\n      for (const result of results) {\n        if (endpoints.length >= limit) break\n\n        const endpoint = endpointsByOperationId?.get(result.recordId)\n        if (endpoint) {\n          // Apply method filter if not handled by search\n          if (method && endpoint.method !== method.toUpperCase()) continue\n          endpoints.push(endpoint)\n        }\n      }\n\n      if (endpoints.length > 0) {\n        return endpoints\n      }\n\n      // Fall through to fallback if no results from hybrid search\n      console.error('[API Index] No hybrid search results, falling back to in-memory search')\n    } catch (error) {\n      console.error('[API Index] Hybrid search failed, falling back to in-memory:', error)\n    }\n  }\n\n  // Fallback: Simple in-memory text matching\n  return searchEndpointsFallback(query, { limit, method })\n}\n\n/**\n * Fallback in-memory search when hybrid search is not available.\n */\nfunction searchEndpointsFallback(\n  query: string,\n  options: { limit?: number; method?: string } = {}\n): ApiEndpoint[] {\n  const { limit = API_ENDPOINT_SEARCH_CONFIG.defaultLimit, method } = options\n\n  if (!endpointsCache) {\n    return []\n  }\n\n  const queryLower = query.toLowerCase()\n  const queryTerms = queryLower.split(/\\s+/).filter(Boolean)\n\n  let matches = endpointsCache.filter((endpoint) => {\n    const content = buildSearchableContent(endpoint).toLowerCase()\n    return queryTerms.some((term) => content.includes(term))\n  })\n\n  // Filter by method if specified\n  if (method) {\n    matches = matches.filter((e) => e.method === method.toUpperCase())\n  }\n\n  // Sort by relevance (number of matching terms)\n  matches.sort((a, b) => {\n    const aContent = buildSearchableContent(a).toLowerCase()\n    const bContent = buildSearchableContent(b).toLowerCase()\n    const aScore = queryTerms.filter((t) => aContent.includes(t)).length\n    const bScore = queryTerms.filter((t) => bContent.includes(t)).length\n    return bScore - aScore\n  })\n\n  return matches.slice(0, limit)\n}\n\n/**\n * Clear endpoint cache (for testing)\n */\nexport function clearEndpointCache(): void {\n  endpointsCache = null\n  endpointsByOperationId = null\n}\n"],
+  "mappings": "AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA+BA,MAAM,sBAAsB;AAKnC,IAAI,iBAAuC;AAC3C,IAAI,yBAA0D;AAK9D,eAAsB,kBAA0C;AAC9D,MAAI,gBAAgB;AAClB,WAAO;AAAA,EACT;AAEA,mBAAiB,MAAM,kBAAkB;AACzC,2BAAyB,IAAI,IAAI,eAAe,IAAI,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;AAE9E,SAAO;AACT;AAKA,eAAsB,yBAAyB,aAAkD;AAC/F,QAAM,gBAAgB;AACtB,SAAO,wBAAwB,IAAI,WAAW,KAAK;AACrD;AAMA,eAAe,oBAA4C;AACzD,QAAM,UACJ,QAAQ,IAAI,4BACZ,QAAQ,IAAI,uBACZ,QAAQ,IAAI,WACZ;AAEF,QAAM,aAAa,GAAG,OAAO;AAE7B,MAAI;AACF,YAAQ,MAAM,0CAA0C,UAAU,KAAK;AACvE,UAAM,WAAW,MAAM,MAAM,UAAU;AAEvC,QAAI,CAAC,SAAS,IAAI;AAChB,cAAQ,MAAM,6CAA6C,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AACnG,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,MAAO,MAAM,SAAS,KAAK;AACjC,YAAQ,MAAM,+CAA+C;AAC7D,WAAO,iBAAiB,GAAG;AAAA,EAC7B,SAAS,OAAO;AACd,YAAQ,MAAM,6CAA6C,iBAAiB,QAAQ,MAAM,UAAU,KAAK;AACzG,YAAQ,MAAM,+CAA+C,OAAO;AACpE,WAAO,CAAC;AAAA,EACV;AACF;AAKA,SAAS,iBAAiB,KAAqC;AAC7D,QAAM,YAA2B,CAAC;AAClC,QAAM,eAAe,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ;AAE7D,MAAI,CAAC,IAAI,OAAO;AACd,WAAO;AAAA,EACT;AAEA,aAAW,CAAC,MAAM,QAAQ,KAAK,OAAO,QAAQ,IAAI,KAAK,GAAG;AACxD,QAAI,CAAC,YAAY,OAAO,aAAa,SAAU;AAE/C,eAAW,CAAC,QAAQ,SAAS,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC1D,UAAI,CAAC,aAAa,SAAS,OAAO,YAAY,CAAC,EAAG;AAClD,UAAI,CAAC,aAAa,OAAO,cAAc,SAAU;AAEjD,YAAM,KAAK;AAGX,YAAM,cAAc,GAAG,eAAe,oBAAoB,MAAM,MAAM;AAEtE,YAAM,WAAwB;AAAA,QAC5B,IAAI;AAAA,QACJ;AAAA,QACA,QAAQ,OAAO,YAAY;AAAA,QAC3B;AAAA,QACA,SAAS,GAAG,WAAW;AAAA,QACvB,aAAa,GAAG,eAAe,GAAG,WAAW,GAAG,OAAO,YAAY,CAAC,IAAI,IAAI;AAAA,QAC5E,MAAM,GAAG,QAAQ,CAAC;AAAA,QAClB,kBAAkB,GAAG,oBAAoB,KAAK,CAAC;AAAA,QAC/C,YAAY,GAAG,cAAc;AAAA,QAC7B,YAAY,kBAAkB,GAAG,cAAc,CAAC,CAAC;AAAA,QACjD,mBAAmB,yBAAyB,GAAG,aAAa,IAAI,YAAY,OAAO;AAAA,MACrF;AAEA,gBAAU,KAAK,QAAQ;AAAA,IACzB;AAAA,EACF;AAEA,UAAQ,MAAM,sBAAsB,UAAU,MAAM,8BAA8B;AAClF,SAAO;AACT;AAKA,SAAS,oBAAoB,MAAc,QAAwB;AACjE,QAAM,YAAY,KACf,QAAQ,OAAO,EAAE,EACjB,QAAQ,gBAAgB,OAAO,EAC/B,MAAM,GAAG,EACT,OAAO,OAAO,EACd,KAAK,GAAG;AAEX,SAAO,GAAG,OAAO,YAAY,CAAC,IAAI,SAAS;AAC7C;AAKA,SAAS,kBAAkB,QAA+B;AACxD,SAAO,OACJ,OAAO,CAAC,MAAM,EAAE,OAAO,UAAU,EAAE,OAAO,OAAO,EACjD,IAAI,CAAC,OAAO;AAAA,IACX,MAAM,EAAE;AAAA,IACR,IAAI,EAAE;AAAA,IACN,UAAU,EAAE,YAAY;AAAA,IACxB,MAAM,EAAE,QAAQ,QAAQ;AAAA,IACxB,aAAa,EAAE,eAAe;AAAA,EAChC,EAAE;AACN;AAKA,SAAS,yBACP,aACA,SACgC;AAChC,MAAI,CAAC,aAAa,UAAU,kBAAkB,GAAG,QAAQ;AACvD,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,YAAY,QAAQ,kBAAkB,EAAE;AAGvD,MAAI,OAAO,QAAQ,SAAS;AAC1B,UAAM,UAAU,OAAO,KAAK,QAAQ,yBAAyB,EAAE;AAC/D,WAAO,QAAQ,OAAO,KAAK;AAAA,EAC7B;AAEA,SAAO;AACT;AAKA,IAAI,oBAAmC;AAUvC,eAAsB,kBACpB,eACA,QAAQ,OACS;AACjB,QAAM,YAAY,MAAM,gBAAgB;AAExC,MAAI,UAAU,WAAW,GAAG;AAC1B,YAAQ,MAAM,mCAAmC;AACjD,WAAO;AAAA,EACT;AAGA,QAAM,WAAW;AAAA,IACf,UAAU,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,QAAQ,EAAE,QAAQ,MAAM,EAAE,KAAK,EAAE;AAAA,EACvF;AAGA,MAAI,CAAC,SAAS,sBAAsB,UAAU;AAC5C,YAAQ,MAAM,mCAAmC,UAAU,MAAM,sBAAsB;AACvF,WAAO;AAAA,EACT;AAGA,QAAM,UAA6B,UAAU;AAAA,IAAI,CAAC,aAChD,0BAA0B,QAAQ;AAAA,EACpC;AAEA,MAAI;AACF,YAAQ,MAAM,sCAAsC,QAAQ,MAAM,eAAe;AAGjF,UAAM,YAAY;AAClB,UAAM,eAAe,cAAc,UAAU,OAAO;AACpD,UAAM,iBAAiB,IAAI;AAAA,MAAe,CAAC,GAAG,WAC5C,WAAW,MAAM,OAAO,IAAI,MAAM,8BAA8B,SAAS,IAAI,CAAC,GAAG,SAAS;AAAA,IAC5F;AAEA,UAAM,QAAQ,KAAK,CAAC,cAAc,cAAc,CAAC;AACjD,wBAAoB;AACpB,YAAQ,MAAM,uBAAuB,QAAQ,MAAM,kCAAkC;AACrF,WAAO,QAAQ;AAAA,EACjB,SAAS,OAAO;AACd,YAAQ,MAAM,0CAA0C,KAAK;AAE7D,wBAAoB;AACpB,WAAO,QAAQ;AAAA,EACjB;AACF;AAKA,SAAS,uBAAuB,UAA+B;AAC7D,QAAM,QAAQ;AAAA,IACZ,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,IACT,GAAG,SAAS;AAAA,IACZ,GAAG,SAAS,WAAW,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,EAAE,WAAW,EAAE;AAAA,EAChE;AAEA,SAAO,MAAM,OAAO,OAAO,EAAE,KAAK,GAAG;AACvC;AAMA,eAAsB,gBACpB,eACA,OACA,UAA+C,CAAC,GACxB;AACxB,QAAM,EAAE,QAAQ,2BAA2B,cAAc,OAAO,IAAI;AAGpE,QAAM,gBAAgB;AAGtB,MAAI,eAAe;AACjB,QAAI;AAEF,YAAM,UAAU,MAAM,cAAc,OAAO,OAAO;AAAA,QAChD,UAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,aAAa,CAAC,sBAAsB;AAAA,QACpC,OAAO,QAAQ;AAAA;AAAA,MACjB,CAAC;AAGD,YAAM,YAA2B,CAAC;AAClC,iBAAW,UAAU,SAAS;AAC5B,YAAI,UAAU,UAAU,MAAO;AAE/B,cAAM,WAAW,wBAAwB,IAAI,OAAO,QAAQ;AAC5D,YAAI,UAAU;AAEZ,cAAI,UAAU,SAAS,WAAW,OAAO,YAAY,EAAG;AACxD,oBAAU,KAAK,QAAQ;AAAA,QACzB;AAAA,MACF;AAEA,UAAI,UAAU,SAAS,GAAG;AACxB,eAAO;AAAA,MACT;AAGA,cAAQ,MAAM,wEAAwE;AAAA,IACxF,SAAS,OAAO;AACd,cAAQ,MAAM,gEAAgE,KAAK;AAAA,IACrF;AAAA,EACF;AAGA,SAAO,wBAAwB,OAAO,EAAE,OAAO,OAAO,CAAC;AACzD;AAKA,SAAS,wBACP,OACA,UAA+C,CAAC,GACjC;AACf,QAAM,EAAE,QAAQ,2BAA2B,cAAc,OAAO,IAAI;AAEpE,MAAI,CAAC,gBAAgB;AACnB,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,aAAa,MAAM,YAAY;AACrC,QAAM,aAAa,WAAW,MAAM,KAAK,EAAE,OAAO,OAAO;AAEzD,MAAI,UAAU,eAAe,OAAO,CAAC,aAAa;AAChD,UAAM,UAAU,uBAAuB,QAAQ,EAAE,YAAY;AAC7D,WAAO,WAAW,KAAK,CAAC,SAAS,QAAQ,SAAS,IAAI,CAAC;AAAA,EACzD,CAAC;AAGD,MAAI,QAAQ;AACV,cAAU,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,OAAO,YAAY,CAAC;AAAA,EACnE;AAGA,UAAQ,KAAK,CAAC,GAAG,MAAM;AACrB,UAAM,WAAW,uBAAuB,CAAC,EAAE,YAAY;AACvD,UAAM,WAAW,uBAAuB,CAAC,EAAE,YAAY;AACvD,UAAM,SAAS,WAAW,OAAO,CAAC,MAAM,SAAS,SAAS,CAAC,CAAC,EAAE;AAC9D,UAAM,SAAS,WAAW,OAAO,CAAC,MAAM,SAAS,SAAS,CAAC,CAAC,EAAE;AAC9D,WAAO,SAAS;AAAA,EAClB,CAAC;AAED,SAAO,QAAQ,MAAM,GAAG,KAAK;AAC/B;AAKO,SAAS,qBAA2B;AACzC,mBAAiB;AACjB,2BAAyB;AAC3B;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/auth.js

@@ -0,0 +1,87 @@
+async function authenticateMcpRequest(apiKeySecret, container) {
+  if (!apiKeySecret || typeof apiKeySecret !== "string") {
+    return { success: false, error: "API key is required" };
+  }
+  const trimmedSecret = apiKeySecret.trim();
+  if (!trimmedSecret) {
+    return { success: false, error: "API key is required" };
+  }
+  if (!trimmedSecret.startsWith("omk_")) {
+    return { success: false, error: "Invalid API key format" };
+  }
+  try {
+    const em = container.resolve("em");
+    const { findApiKeyBySecret } = await import("@open-mercato/core/modules/api_keys/services/apiKeyService");
+    const apiKey = await findApiKeyBySecret(em, trimmedSecret);
+    if (!apiKey) {
+      return { success: false, error: "Invalid or expired API key" };
+    }
+    const userId = `api_key:${apiKey.id}`;
+    const rbacService = container.resolve("rbacService");
+    const acl = await rbacService.loadAcl(userId, {
+      tenantId: apiKey.tenantId ?? null,
+      organizationId: apiKey.organizationId ?? null
+    });
+    try {
+      apiKey.lastUsedAt = /* @__PURE__ */ new Date();
+      await em.persistAndFlush(apiKey);
+    } catch {
+    }
+    return {
+      success: true,
+      keyId: apiKey.id,
+      keyName: apiKey.name,
+      tenantId: apiKey.tenantId ?? null,
+      organizationId: apiKey.organizationId ?? null,
+      userId,
+      features: acl.features,
+      isSuperAdmin: acl.isSuperAdmin
+    };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    console.error("[MCP Auth] Authentication failed:", message);
+    return { success: false, error: "Authentication failed" };
+  }
+}
+function hasRequiredFeatures(requiredFeatures, userFeatures, isSuperAdmin) {
+  if (isSuperAdmin) return true;
+  if (!requiredFeatures?.length) return true;
+  return requiredFeatures.every((required) => {
+    if (userFeatures.includes(required)) return true;
+    if (userFeatures.includes("*")) return true;
+    return userFeatures.some((feature) => {
+      if (feature.endsWith(".*")) {
+        const prefix = feature.slice(0, -2);
+        return required.startsWith(prefix + ".");
+      }
+      return false;
+    });
+  });
+}
+function extractApiKeyFromHeaders(headers) {
+  const getHeader = (name) => {
+    if (headers instanceof Headers) {
+      return headers.get(name);
+    }
+    if (headers instanceof Map) {
+      return headers.get(name) ?? null;
+    }
+    const value = headers[name] ?? headers[name.toLowerCase()];
+    return typeof value === "string" ? value : null;
+  };
+  const xApiKey = getHeader("x-api-key")?.trim();
+  if (xApiKey) {
+    return xApiKey;
+  }
+  const authHeader = getHeader("authorization")?.trim();
+  if (authHeader && authHeader.toLowerCase().startsWith("apikey ")) {
+    return authHeader.slice(7).trim();
+  }
+  return null;
+}
+export {
+  authenticateMcpRequest,
+  extractApiKeyFromHeaders,
+  hasRequiredFeatures
+};
+//# sourceMappingURL=auth.js.map

package/dist/modules/ai_assistant/lib/auth.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/auth.ts"],
+  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\n\n/**\n * Successful authentication result.\n */\nexport type McpAuthSuccess = {\n  success: true\n  keyId: string\n  keyName: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string\n  features: string[]\n  isSuperAdmin: boolean\n}\n\n/**\n * Failed authentication result.\n */\nexport type McpAuthFailure = {\n  success: false\n  error: string\n}\n\n/**\n * Result from MCP authentication.\n */\nexport type McpAuthResult = McpAuthSuccess | McpAuthFailure\n\n/**\n * Authenticate an MCP request using an API key.\n *\n * This function validates the API key secret and loads the associated\n * ACL (features, organizations, super admin status) from the key's roles.\n *\n * @param apiKeySecret - The full API key secret (e.g., 'omk_xxxx.yyyy...')\n * @param container - Awilix DI container with 'em' and 'rbacService'\n * @returns Authentication result with user context or error\n */\nexport async function authenticateMcpRequest(\n  apiKeySecret: string,\n  container: AwilixContainer\n): Promise<McpAuthResult> {\n  if (!apiKeySecret || typeof apiKeySecret !== 'string') {\n    return { success: false, error: 'API key is required' }\n  }\n\n  const trimmedSecret = apiKeySecret.trim()\n  if (!trimmedSecret) {\n    return { success: false, error: 'API key is required' }\n  }\n\n  if (!trimmedSecret.startsWith('omk_')) {\n    return { success: false, error: 'Invalid API key format' }\n  }\n\n  try {\n    const em = container.resolve('em') as EntityManager\n\n    const { findApiKeyBySecret } = await import(\n      '@open-mercato/core/modules/api_keys/services/apiKeyService'\n    )\n\n    const apiKey = await findApiKeyBySecret(em, trimmedSecret)\n\n    if (!apiKey) {\n      return { success: false, error: 'Invalid or expired API key' }\n    }\n\n    const userId = `api_key:${apiKey.id}`\n\n    const rbacService = container.resolve('rbacService') as {\n      loadAcl: (\n        userId: string,\n        scope: { tenantId: string | null; organizationId: string | null }\n      ) => Promise<{\n        isSuperAdmin: boolean\n        features: string[]\n        organizations: string[] | null\n      }>\n    }\n\n    const acl = await rbacService.loadAcl(userId, {\n      tenantId: apiKey.tenantId ?? null,\n      organizationId: apiKey.organizationId ?? null,\n    })\n\n    try {\n      apiKey.lastUsedAt = new Date()\n      await em.persistAndFlush(apiKey)\n    } catch {\n      // Best-effort update; ignore write failures\n    }\n\n    return {\n      success: true,\n      keyId: apiKey.id,\n      keyName: apiKey.name,\n      tenantId: apiKey.tenantId ?? null,\n      organizationId: apiKey.organizationId ?? null,\n      userId,\n      features: acl.features,\n      isSuperAdmin: acl.isSuperAdmin,\n    }\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n    console.error('[MCP Auth] Authentication failed:', message)\n    return { success: false, error: 'Authentication failed' }\n  }\n}\n\n/**\n * Check if user has the required features for a resource.\n *\n * Supports:\n * - Super admin bypass (always returns true)\n * - Direct feature match (e.g., 'customers.view')\n * - Global wildcard ('*' grants all features)\n * - Prefix wildcard (e.g., 'customers.*' grants 'customers.people.view')\n *\n * @param requiredFeatures - List of features required for access\n * @param userFeatures - List of features the user has\n * @param isSuperAdmin - Whether the user is a super admin\n * @returns True if user has access\n */\nexport function hasRequiredFeatures(\n  requiredFeatures: string[] | undefined,\n  userFeatures: string[],\n  isSuperAdmin: boolean\n): boolean {\n  if (isSuperAdmin) return true\n  if (!requiredFeatures?.length) return true\n\n  return requiredFeatures.every((required) => {\n    if (userFeatures.includes(required)) return true\n    if (userFeatures.includes('*')) return true\n\n    // Check wildcard patterns (e.g., 'customers.*' grants 'customers.people.view')\n    return userFeatures.some((feature) => {\n      if (feature.endsWith('.*')) {\n        const prefix = feature.slice(0, -2)\n        return required.startsWith(prefix + '.')\n      }\n      return false\n    })\n  })\n}\n\n/**\n * Extract API key from HTTP request headers.\n *\n * Supports two header formats:\n * - x-api-key: <secret>\n * - Authorization: ApiKey <secret>\n *\n * @param headers - Request headers (Map, Headers, or plain object)\n * @returns The API key secret or null if not found\n */\nexport function extractApiKeyFromHeaders(\n  headers: Headers | Map<string, string> | Record<string, string | undefined>\n): string | null {\n  const getHeader = (name: string): string | null => {\n    if (headers instanceof Headers) {\n      return headers.get(name)\n    }\n    if (headers instanceof Map) {\n      return headers.get(name) ?? null\n    }\n    const value = headers[name] ?? headers[name.toLowerCase()]\n    return typeof value === 'string' ? value : null\n  }\n\n  const xApiKey = getHeader('x-api-key')?.trim()\n  if (xApiKey) {\n    return xApiKey\n  }\n\n  const authHeader = getHeader('authorization')?.trim()\n  if (authHeader && authHeader.toLowerCase().startsWith('apikey ')) {\n    return authHeader.slice(7).trim()\n  }\n\n  return null\n}\n"],
+  "mappings": "AAwCA,eAAsB,uBACpB,cACA,WACwB;AACxB,MAAI,CAAC,gBAAgB,OAAO,iBAAiB,UAAU;AACrD,WAAO,EAAE,SAAS,OAAO,OAAO,sBAAsB;AAAA,EACxD;AAEA,QAAM,gBAAgB,aAAa,KAAK;AACxC,MAAI,CAAC,eAAe;AAClB,WAAO,EAAE,SAAS,OAAO,OAAO,sBAAsB;AAAA,EACxD;AAEA,MAAI,CAAC,cAAc,WAAW,MAAM,GAAG;AACrC,WAAO,EAAE,SAAS,OAAO,OAAO,yBAAyB;AAAA,EAC3D;AAEA,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,UAAM,EAAE,mBAAmB,IAAI,MAAM,OACnC,4DACF;AAEA,UAAM,SAAS,MAAM,mBAAmB,IAAI,aAAa;AAEzD,QAAI,CAAC,QAAQ;AACX,aAAO,EAAE,SAAS,OAAO,OAAO,6BAA6B;AAAA,IAC/D;AAEA,UAAM,SAAS,WAAW,OAAO,EAAE;AAEnC,UAAM,cAAc,UAAU,QAAQ,aAAa;AAWnD,UAAM,MAAM,MAAM,YAAY,QAAQ,QAAQ;AAAA,MAC5C,UAAU,OAAO,YAAY;AAAA,MAC7B,gBAAgB,OAAO,kBAAkB;AAAA,IAC3C,CAAC;AAED,QAAI;AACF,aAAO,aAAa,oBAAI,KAAK;AAC7B,YAAM,GAAG,gBAAgB,MAAM;AAAA,IACjC,QAAQ;AAAA,IAER;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,OAAO;AAAA,MACd,SAAS,OAAO;AAAA,MAChB,UAAU,OAAO,YAAY;AAAA,MAC7B,gBAAgB,OAAO,kBAAkB;AAAA,MACzC;AAAA,MACA,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,IACpB;AAAA,EACF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,YAAQ,MAAM,qCAAqC,OAAO;AAC1D,WAAO,EAAE,SAAS,OAAO,OAAO,wBAAwB;AAAA,EAC1D;AACF;AAgBO,SAAS,oBACd,kBACA,cACA,cACS;AACT,MAAI,aAAc,QAAO;AACzB,MAAI,CAAC,kBAAkB,OAAQ,QAAO;AAEtC,SAAO,iBAAiB,MAAM,CAAC,aAAa;AAC1C,QAAI,aAAa,SAAS,QAAQ,EAAG,QAAO;AAC5C,QAAI,aAAa,SAAS,GAAG,EAAG,QAAO;AAGvC,WAAO,aAAa,KAAK,CAAC,YAAY;AACpC,UAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,cAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,eAAO,SAAS,WAAW,SAAS,GAAG;AAAA,MACzC;AACA,aAAO;AAAA,IACT,CAAC;AAAA,EACH,CAAC;AACH;AAYO,SAAS,yBACd,SACe;AACf,QAAM,YAAY,CAAC,SAAgC;AACjD,QAAI,mBAAmB,SAAS;AAC9B,aAAO,QAAQ,IAAI,IAAI;AAAA,IACzB;AACA,QAAI,mBAAmB,KAAK;AAC1B,aAAO,QAAQ,IAAI,IAAI,KAAK;AAAA,IAC9B;AACA,UAAM,QAAQ,QAAQ,IAAI,KAAK,QAAQ,KAAK,YAAY,CAAC;AACzD,WAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,EAC7C;AAEA,QAAM,UAAU,UAAU,WAAW,GAAG,KAAK;AAC7C,MAAI,SAAS;AACX,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,UAAU,eAAe,GAAG,KAAK;AACpD,MAAI,cAAc,WAAW,YAAY,EAAE,WAAW,SAAS,GAAG;AAChE,WAAO,WAAW,MAAM,CAAC,EAAE,KAAK;AAAA,EAClC;AAEA,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/chat-config.js

@@ -0,0 +1,117 @@
+const CHAT_CONFIG_KEY = "chat_provider";
+const CHAT_PROVIDERS = {
+  openai: {
+    name: "OpenAI",
+    envKeyRequired: "OPENAI_API_KEY",
+    defaultModel: "gpt-4o",
+    models: [
+      { id: "gpt-4o", name: "GPT-4o", contextWindow: 128e3 },
+      { id: "gpt-4o-mini", name: "GPT-4o Mini", contextWindow: 128e3 },
+      { id: "gpt-4-turbo", name: "GPT-4 Turbo", contextWindow: 128e3 },
+      { id: "gpt-3.5-turbo", name: "GPT-3.5 Turbo", contextWindow: 16385 }
+    ]
+  },
+  anthropic: {
+    name: "Anthropic",
+    envKeyRequired: "ANTHROPIC_API_KEY",
+    defaultModel: "claude-sonnet-4-5-20250929",
+    models: [
+      { id: "claude-sonnet-4-5-20250929", name: "Claude Sonnet 4.5", contextWindow: 2e5 },
+      { id: "claude-sonnet-4-20250514", name: "Claude Sonnet 4", contextWindow: 2e5 },
+      { id: "claude-3-5-sonnet-20241022", name: "Claude 3.5 Sonnet", contextWindow: 2e5 },
+      { id: "claude-3-5-haiku-20241022", name: "Claude 3.5 Haiku", contextWindow: 2e5 }
+    ]
+  },
+  google: {
+    name: "Google",
+    envKeyRequired: "GOOGLE_GENERATIVE_AI_API_KEY",
+    defaultModel: "gemini-1.5-pro",
+    models: [
+      { id: "gemini-1.5-pro", name: "Gemini 1.5 Pro", contextWindow: 2097152 },
+      { id: "gemini-1.5-flash", name: "Gemini 1.5 Flash", contextWindow: 1048576 },
+      { id: "gemini-pro", name: "Gemini Pro", contextWindow: 32e3 }
+    ]
+  }
+};
+const DEFAULT_CHAT_CONFIG = {
+  providerId: "openai",
+  model: "gpt-4o"
+};
+function isProviderConfigured(providerId) {
+  switch (providerId) {
+    case "openai":
+      return Boolean(process.env.OPENAI_API_KEY?.trim());
+    case "anthropic":
+      return Boolean(process.env.ANTHROPIC_API_KEY?.trim());
+    case "google":
+      return Boolean(process.env.GOOGLE_GENERATIVE_AI_API_KEY?.trim());
+    default:
+      return false;
+  }
+}
+function getConfiguredProviders() {
+  const providers = [];
+  const allProviders = ["openai", "anthropic", "google"];
+  for (const providerId of allProviders) {
+    if (isProviderConfigured(providerId)) {
+      providers.push(providerId);
+    }
+  }
+  return providers;
+}
+async function resolveChatConfig(resolver, options) {
+  const fallback = options?.defaultValue ?? null;
+  let service;
+  try {
+    service = resolver.resolve("moduleConfigService");
+  } catch {
+    return fallback;
+  }
+  try {
+    const value = await service.getValue("ai_assistant", CHAT_CONFIG_KEY, { defaultValue: fallback });
+    return value;
+  } catch {
+    return fallback;
+  }
+}
+async function saveChatConfig(resolver, config) {
+  let service;
+  try {
+    service = resolver.resolve("moduleConfigService");
+  } catch {
+    throw new Error("Configuration service unavailable");
+  }
+  const fullConfig = {
+    ...config,
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  await service.setValue("ai_assistant", CHAT_CONFIG_KEY, fullConfig);
+  return fullConfig;
+}
+function createDefaultConfig() {
+  return { ...DEFAULT_CHAT_CONFIG, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
+}
+function getModelInfo(providerId, modelId) {
+  const provider = CHAT_PROVIDERS[providerId];
+  if (!provider) return null;
+  return provider.models.find((m) => m.id === modelId) ?? null;
+}
+function formatContextWindow(contextWindow) {
+  if (contextWindow >= 1e6) {
+    return `${(contextWindow / 1e6).toFixed(1)}M`;
+  }
+  return `${(contextWindow / 1e3).toFixed(0)}K`;
+}
+export {
+  CHAT_CONFIG_KEY,
+  CHAT_PROVIDERS,
+  DEFAULT_CHAT_CONFIG,
+  createDefaultConfig,
+  formatContextWindow,
+  getConfiguredProviders,
+  getModelInfo,
+  isProviderConfigured,
+  resolveChatConfig,
+  saveChatConfig
+};
+//# sourceMappingURL=chat-config.js.map

package/dist/modules/ai_assistant/lib/chat-config.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/chat-config.ts"],
+  "sourcesContent": ["import type { ModuleConfigService } from '@open-mercato/core/modules/configs/lib/module-config-service'\n\n// Types\nexport type ChatProviderId = 'openai' | 'anthropic' | 'google'\n\nexport type ChatModelInfo = {\n  id: string\n  name: string\n  contextWindow: number\n}\n\nexport type ChatProviderInfo = {\n  name: string\n  envKeyRequired: string\n  defaultModel: string\n  models: ChatModelInfo[]\n}\n\nexport type ChatProviderConfig = {\n  providerId: ChatProviderId\n  model: string\n  updatedAt: string\n}\n\n// Constants\nexport const CHAT_CONFIG_KEY = 'chat_provider'\n\nexport const CHAT_PROVIDERS: Record<ChatProviderId, ChatProviderInfo> = {\n  openai: {\n    name: 'OpenAI',\n    envKeyRequired: 'OPENAI_API_KEY',\n    defaultModel: 'gpt-4o',\n    models: [\n      { id: 'gpt-4o', name: 'GPT-4o', contextWindow: 128000 },\n      { id: 'gpt-4o-mini', name: 'GPT-4o Mini', contextWindow: 128000 },\n      { id: 'gpt-4-turbo', name: 'GPT-4 Turbo', contextWindow: 128000 },\n      { id: 'gpt-3.5-turbo', name: 'GPT-3.5 Turbo', contextWindow: 16385 },\n    ],\n  },\n  anthropic: {\n    name: 'Anthropic',\n    envKeyRequired: 'ANTHROPIC_API_KEY',\n    defaultModel: 'claude-sonnet-4-5-20250929',\n    models: [\n      { id: 'claude-sonnet-4-5-20250929', name: 'Claude Sonnet 4.5', contextWindow: 200000 },\n      { id: 'claude-sonnet-4-20250514', name: 'Claude Sonnet 4', contextWindow: 200000 },\n      { id: 'claude-3-5-sonnet-20241022', name: 'Claude 3.5 Sonnet', contextWindow: 200000 },\n      { id: 'claude-3-5-haiku-20241022', name: 'Claude 3.5 Haiku', contextWindow: 200000 },\n    ],\n  },\n  google: {\n    name: 'Google',\n    envKeyRequired: 'GOOGLE_GENERATIVE_AI_API_KEY',\n    defaultModel: 'gemini-1.5-pro',\n    models: [\n      { id: 'gemini-1.5-pro', name: 'Gemini 1.5 Pro', contextWindow: 2097152 },\n      { id: 'gemini-1.5-flash', name: 'Gemini 1.5 Flash', contextWindow: 1048576 },\n      { id: 'gemini-pro', name: 'Gemini Pro', contextWindow: 32000 },\n    ],\n  },\n}\n\nexport const DEFAULT_CHAT_CONFIG: Omit<ChatProviderConfig, 'updatedAt'> = {\n  providerId: 'openai',\n  model: 'gpt-4o',\n}\n\n// Provider configuration checks\nexport function isProviderConfigured(providerId: ChatProviderId): boolean {\n  switch (providerId) {\n    case 'openai':\n      return Boolean(process.env.OPENAI_API_KEY?.trim())\n    case 'anthropic':\n      return Boolean(process.env.ANTHROPIC_API_KEY?.trim())\n    case 'google':\n      return Boolean(process.env.GOOGLE_GENERATIVE_AI_API_KEY?.trim())\n    default:\n      return false\n  }\n}\n\nexport function getConfiguredProviders(): ChatProviderId[] {\n  const providers: ChatProviderId[] = []\n  const allProviders: ChatProviderId[] = ['openai', 'anthropic', 'google']\n  for (const providerId of allProviders) {\n    if (isProviderConfigured(providerId)) {\n      providers.push(providerId)\n    }\n  }\n  return providers\n}\n\n// Config resolution\ntype Resolver = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport async function resolveChatConfig(\n  resolver: Resolver,\n  options?: { defaultValue?: ChatProviderConfig | null }\n): Promise<ChatProviderConfig | null> {\n  const fallback = options?.defaultValue ?? null\n  let service: ModuleConfigService\n  try {\n    service = resolver.resolve<ModuleConfigService>('moduleConfigService')\n  } catch {\n    return fallback\n  }\n  try {\n    const value = await service.getValue<ChatProviderConfig>('ai_assistant', CHAT_CONFIG_KEY, { defaultValue: fallback })\n    return value\n  } catch {\n    return fallback\n  }\n}\n\nexport async function saveChatConfig(\n  resolver: Resolver,\n  config: Omit<ChatProviderConfig, 'updatedAt'>\n): Promise<ChatProviderConfig> {\n  let service: ModuleConfigService\n  try {\n    service = resolver.resolve<ModuleConfigService>('moduleConfigService')\n  } catch {\n    throw new Error('Configuration service unavailable')\n  }\n  const fullConfig: ChatProviderConfig = {\n    ...config,\n    updatedAt: new Date().toISOString(),\n  }\n  await service.setValue('ai_assistant', CHAT_CONFIG_KEY, fullConfig)\n  return fullConfig\n}\n\nexport function createDefaultConfig(): ChatProviderConfig {\n  return { ...DEFAULT_CHAT_CONFIG, updatedAt: new Date().toISOString() }\n}\n\n// Get model info by ID\nexport function getModelInfo(providerId: ChatProviderId, modelId: string): ChatModelInfo | null {\n  const provider = CHAT_PROVIDERS[providerId]\n  if (!provider) return null\n  return provider.models.find((m) => m.id === modelId) ?? null\n}\n\n// Format context window for display\nexport function formatContextWindow(contextWindow: number): string {\n  if (contextWindow >= 1000000) {\n    return `${(contextWindow / 1000000).toFixed(1)}M`\n  }\n  return `${(contextWindow / 1000).toFixed(0)}K`\n}\n"],
+  "mappings": "AAyBO,MAAM,kBAAkB;AAExB,MAAM,iBAA2D;AAAA,EACtE,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd,QAAQ;AAAA,MACN,EAAE,IAAI,UAAU,MAAM,UAAU,eAAe,MAAO;AAAA,MACtD,EAAE,IAAI,eAAe,MAAM,eAAe,eAAe,MAAO;AAAA,MAChE,EAAE,IAAI,eAAe,MAAM,eAAe,eAAe,MAAO;AAAA,MAChE,EAAE,IAAI,iBAAiB,MAAM,iBAAiB,eAAe,MAAM;AAAA,IACrE;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,MAAM;AAAA,IACN,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd,QAAQ;AAAA,MACN,EAAE,IAAI,8BAA8B,MAAM,qBAAqB,eAAe,IAAO;AAAA,MACrF,EAAE,IAAI,4BAA4B,MAAM,mBAAmB,eAAe,IAAO;AAAA,MACjF,EAAE,IAAI,8BAA8B,MAAM,qBAAqB,eAAe,IAAO;AAAA,MACrF,EAAE,IAAI,6BAA6B,MAAM,oBAAoB,eAAe,IAAO;AAAA,IACrF;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd,QAAQ;AAAA,MACN,EAAE,IAAI,kBAAkB,MAAM,kBAAkB,eAAe,QAAQ;AAAA,MACvE,EAAE,IAAI,oBAAoB,MAAM,oBAAoB,eAAe,QAAQ;AAAA,MAC3E,EAAE,IAAI,cAAc,MAAM,cAAc,eAAe,KAAM;AAAA,IAC/D;AAAA,EACF;AACF;AAEO,MAAM,sBAA6D;AAAA,EACxE,YAAY;AAAA,EACZ,OAAO;AACT;AAGO,SAAS,qBAAqB,YAAqC;AACxE,UAAQ,YAAY;AAAA,IAClB,KAAK;AACH,aAAO,QAAQ,QAAQ,IAAI,gBAAgB,KAAK,CAAC;AAAA,IACnD,KAAK;AACH,aAAO,QAAQ,QAAQ,IAAI,mBAAmB,KAAK,CAAC;AAAA,IACtD,KAAK;AACH,aAAO,QAAQ,QAAQ,IAAI,8BAA8B,KAAK,CAAC;AAAA,IACjE;AACE,aAAO;AAAA,EACX;AACF;AAEO,SAAS,yBAA2C;AACzD,QAAM,YAA8B,CAAC;AACrC,QAAM,eAAiC,CAAC,UAAU,aAAa,QAAQ;AACvE,aAAW,cAAc,cAAc;AACrC,QAAI,qBAAqB,UAAU,GAAG;AACpC,gBAAU,KAAK,UAAU;AAAA,IAC3B;AAAA,EACF;AACA,SAAO;AACT;AAOA,eAAsB,kBACpB,UACA,SACoC;AACpC,QAAM,WAAW,SAAS,gBAAgB;AAC1C,MAAI;AACJ,MAAI;AACF,cAAU,SAAS,QAA6B,qBAAqB;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,QAAQ,MAAM,QAAQ,SAA6B,gBAAgB,iBAAiB,EAAE,cAAc,SAAS,CAAC;AACpH,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,eACpB,UACA,QAC6B;AAC7B,MAAI;AACJ,MAAI;AACF,cAAU,SAAS,QAA6B,qBAAqB;AAAA,EACvE,QAAQ;AACN,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,QAAM,aAAiC;AAAA,IACrC,GAAG;AAAA,IACH,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC;AACA,QAAM,QAAQ,SAAS,gBAAgB,iBAAiB,UAAU;AAClE,SAAO;AACT;AAEO,SAAS,sBAA0C;AACxD,SAAO,EAAE,GAAG,qBAAqB,YAAW,oBAAI,KAAK,GAAE,YAAY,EAAE;AACvE;AAGO,SAAS,aAAa,YAA4B,SAAuC;AAC9F,QAAM,WAAW,eAAe,UAAU;AAC1C,MAAI,CAAC,SAAU,QAAO;AACtB,SAAO,SAAS,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,OAAO,KAAK;AAC1D;AAGO,SAAS,oBAAoB,eAA+B;AACjE,MAAI,iBAAiB,KAAS;AAC5B,WAAO,IAAI,gBAAgB,KAAS,QAAQ,CAAC,CAAC;AAAA,EAChD;AACA,SAAO,IAAI,gBAAgB,KAAM,QAAQ,CAAC,CAAC;AAC7C;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/client-factory.js

@@ -0,0 +1,60 @@
+async function createMcpClient(options) {
+  const { mode, apiKeySecret } = options;
+  if (!apiKeySecret) {
+    throw new Error("API key secret is required");
+  }
+  switch (mode) {
+    case "in-process": {
+      if (!options.container) {
+        throw new Error("DI container is required for in-process mode");
+      }
+      const { InProcessMcpClient } = await import("./in-process-client.js");
+      return InProcessMcpClient.create({
+        apiKeySecret,
+        container: options.container
+      });
+    }
+    case "stdio": {
+      const { McpClient } = await import("./mcp-client.js");
+      const stdioOptions = {
+        transport: "stdio",
+        apiKeySecret
+      };
+      if (options.stdioCommand) {
+        stdioOptions.command = options.stdioCommand;
+      }
+      if (options.stdioArgs) {
+        stdioOptions.args = options.stdioArgs;
+      } else {
+        stdioOptions.args = [
+          "mercato",
+          "ai_assistant",
+          "mcp:serve",
+          "--api-key",
+          apiKeySecret
+        ];
+      }
+      if (options.cwd) {
+        stdioOptions.cwd = options.cwd;
+      }
+      return McpClient.connect(stdioOptions);
+    }
+    case "http": {
+      if (!options.httpUrl) {
+        throw new Error("HTTP URL is required for http mode");
+      }
+      const { McpClient } = await import("./mcp-client.js");
+      return McpClient.connect({
+        transport: "http",
+        apiKeySecret,
+        url: options.httpUrl
+      });
+    }
+    default:
+      throw new Error(`Unknown client mode: ${mode}`);
+  }
+}
+export {
+  createMcpClient
+};
+//# sourceMappingURL=client-factory.js.map

package/dist/modules/ai_assistant/lib/client-factory.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/client-factory.ts"],
+  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { McpClientInterface } from './types'\n\n/**\n * Client connection mode.\n */\nexport type ClientMode = 'in-process' | 'stdio' | 'http'\n\n/**\n * Options for creating an MCP client.\n */\nexport type CreateClientOptions = {\n  /** Connection mode */\n  mode: ClientMode\n  /** API key secret for authentication */\n  apiKeySecret: string\n  /** DI container (required for in-process mode) */\n  container?: AwilixContainer\n  /** HTTP server URL (required for http mode) */\n  httpUrl?: string\n  /** Custom command for stdio mode (default: 'yarn') */\n  stdioCommand?: string\n  /** Custom args for stdio mode (default: mercato mcp:serve) */\n  stdioArgs?: string[]\n  /** Working directory for stdio mode */\n  cwd?: string\n}\n\n/**\n * Create an MCP client with the specified connection mode.\n *\n * All modes authenticate via API key, ensuring consistent ACL enforcement.\n *\n * @example\n * ```typescript\n * // In-process mode (fastest, same process)\n * const client = await createMcpClient({\n *   mode: 'in-process',\n *   apiKeySecret: 'omk_xxx.yyy',\n *   container: diContainer,\n * })\n *\n * // Stdio mode (subprocess)\n * const client = await createMcpClient({\n *   mode: 'stdio',\n *   apiKeySecret: 'omk_xxx.yyy',\n * })\n *\n * // HTTP mode (network)\n * const client = await createMcpClient({\n *   mode: 'http',\n *   apiKeySecret: 'omk_xxx.yyy',\n *   httpUrl: 'http://localhost:3001/mcp',\n * })\n *\n * // Use client (same interface for all modes)\n * const tools = await client.listTools()\n * const result = await client.callTool('search.query', { query: 'test' })\n * await client.close()\n * ```\n */\nexport async function createMcpClient(options: CreateClientOptions): Promise<McpClientInterface> {\n  const { mode, apiKeySecret } = options\n\n  if (!apiKeySecret) {\n    throw new Error('API key secret is required')\n  }\n\n  switch (mode) {\n    case 'in-process': {\n      if (!options.container) {\n        throw new Error('DI container is required for in-process mode')\n      }\n\n      const { InProcessMcpClient } = await import('./in-process-client')\n      return InProcessMcpClient.create({\n        apiKeySecret,\n        container: options.container,\n      })\n    }\n\n    case 'stdio': {\n      const { McpClient } = await import('./mcp-client')\n\n      const stdioOptions: any = {\n        transport: 'stdio' as const,\n        apiKeySecret,\n      }\n\n      if (options.stdioCommand) {\n        stdioOptions.command = options.stdioCommand\n      }\n\n      if (options.stdioArgs) {\n        stdioOptions.args = options.stdioArgs\n      } else {\n        // Default args include the API key\n        stdioOptions.args = [\n          'mercato',\n          'ai_assistant',\n          'mcp:serve',\n          '--api-key',\n          apiKeySecret,\n        ]\n      }\n\n      if (options.cwd) {\n        stdioOptions.cwd = options.cwd\n      }\n\n      return McpClient.connect(stdioOptions)\n    }\n\n    case 'http': {\n      if (!options.httpUrl) {\n        throw new Error('HTTP URL is required for http mode')\n      }\n\n      const { McpClient } = await import('./mcp-client')\n      return McpClient.connect({\n        transport: 'http',\n        apiKeySecret,\n        url: options.httpUrl,\n      })\n    }\n\n    default:\n      throw new Error(`Unknown client mode: ${mode}`)\n  }\n}\n"],
+  "mappings": "AA6DA,eAAsB,gBAAgB,SAA2D;AAC/F,QAAM,EAAE,MAAM,aAAa,IAAI;AAE/B,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAEA,UAAQ,MAAM;AAAA,IACZ,KAAK,cAAc;AACjB,UAAI,CAAC,QAAQ,WAAW;AACtB,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,YAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,qBAAqB;AACjE,aAAO,mBAAmB,OAAO;AAAA,QAC/B;AAAA,QACA,WAAW,QAAQ;AAAA,MACrB,CAAC;AAAA,IACH;AAAA,IAEA,KAAK,SAAS;AACZ,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,cAAc;AAEjD,YAAM,eAAoB;AAAA,QACxB,WAAW;AAAA,QACX;AAAA,MACF;AAEA,UAAI,QAAQ,cAAc;AACxB,qBAAa,UAAU,QAAQ;AAAA,MACjC;AAEA,UAAI,QAAQ,WAAW;AACrB,qBAAa,OAAO,QAAQ;AAAA,MAC9B,OAAO;AAEL,qBAAa,OAAO;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,UAAI,QAAQ,KAAK;AACf,qBAAa,MAAM,QAAQ;AAAA,MAC7B;AAEA,aAAO,UAAU,QAAQ,YAAY;AAAA,IACvC;AAAA,IAEA,KAAK,QAAQ;AACX,UAAI,CAAC,QAAQ,SAAS;AACpB,cAAM,IAAI,MAAM,oCAAoC;AAAA,MACtD;AAEA,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,cAAc;AACjD,aAAO,UAAU,QAAQ;AAAA,QACvB,WAAW;AAAA,QACX;AAAA,QACA,KAAK,QAAQ;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA;AACE,YAAM,IAAI,MAAM,wBAAwB,IAAI,EAAE;AAAA,EAClD;AACF;",
+  "names": []
+}