@open-mercato/ai-assistant 0.4.2-canary-c02407ff85

package/dist/frontend/utils/toolMatcher.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/frontend/utils/toolMatcher.ts"],
+  "sourcesContent": ["import type { ToolInfo } from '../types'\n\nfunction normalizeString(str: string): string {\n  return str.toLowerCase().replace(/[._-]/g, ' ')\n}\n\nfunction fuzzyMatch(query: string, target: string): boolean {\n  const normalizedQuery = normalizeString(query)\n  const normalizedTarget = normalizeString(target)\n\n  // Check if all query chars appear in order in target\n  let queryIndex = 0\n  for (let i = 0; i < normalizedTarget.length && queryIndex < normalizedQuery.length; i++) {\n    if (normalizedTarget[i] === normalizedQuery[queryIndex]) {\n      queryIndex++\n    }\n  }\n  return queryIndex === normalizedQuery.length\n}\n\nfunction scoreMatch(query: string, tool: ToolInfo): number {\n  const normalizedQuery = normalizeString(query)\n  const normalizedName = normalizeString(tool.name)\n  const normalizedDesc = normalizeString(tool.description)\n\n  let score = 0\n\n  // Exact match in name = highest score\n  if (normalizedName.includes(normalizedQuery)) {\n    score += 100\n  }\n\n  // Starts with query\n  if (normalizedName.startsWith(normalizedQuery)) {\n    score += 50\n  }\n\n  // Word boundary match\n  const nameWords = normalizedName.split(' ')\n  if (nameWords.some((word) => word.startsWith(normalizedQuery))) {\n    score += 30\n  }\n\n  // Fuzzy match in name\n  if (fuzzyMatch(normalizedQuery, normalizedName)) {\n    score += 20\n  }\n\n  // Match in description\n  if (normalizedDesc.includes(normalizedQuery)) {\n    score += 10\n  }\n\n  return score\n}\n\nexport function filterTools(tools: ToolInfo[], query: string): ToolInfo[] {\n  if (!query.trim()) {\n    return tools\n  }\n\n  const normalizedQuery = query.trim().toLowerCase()\n\n  // Score and filter tools\n  const scoredTools = tools\n    .map((tool) => ({\n      tool,\n      score: scoreMatch(normalizedQuery, tool),\n    }))\n    .filter(({ score }) => score > 0)\n    .sort((a, b) => b.score - a.score)\n\n  return scoredTools.map(({ tool }) => tool)\n}\n\nexport function groupToolsByModule(tools: ToolInfo[]): Map<string, ToolInfo[]> {\n  const grouped = new Map<string, ToolInfo[]>()\n\n  for (const tool of tools) {\n    const module = tool.module || extractModuleFromName(tool.name)\n    const existing = grouped.get(module) || []\n    existing.push(tool)\n    grouped.set(module, existing)\n  }\n\n  return grouped\n}\n\nfunction extractModuleFromName(name: string): string {\n  const parts = name.split('.')\n  return parts[0] || 'other'\n}\n\nexport function humanizeToolName(name: string): string {\n  // customers.people.create -> Create Person\n  const parts = name.split('.')\n  if (parts.length < 2) return name\n\n  const action = parts[parts.length - 1]\n  const resource = parts[parts.length - 2]\n\n  const humanAction = capitalize(action)\n  const humanResource = singularize(humanize(resource))\n\n  return `${humanAction} ${humanResource}`\n}\n\nfunction capitalize(str: string): string {\n  return str.charAt(0).toUpperCase() + str.slice(1)\n}\n\nfunction humanize(str: string): string {\n  return str.replace(/[_-]/g, ' ').replace(/([a-z])([A-Z])/g, '$1 $2')\n}\n\nfunction singularize(str: string): string {\n  if (str.endsWith('ies')) {\n    return str.slice(0, -3) + 'y'\n  }\n  if (str.endsWith('es') && !str.endsWith('ses')) {\n    return str.slice(0, -2)\n  }\n  if (str.endsWith('s') && !str.endsWith('ss')) {\n    return str.slice(0, -1)\n  }\n  return str\n}\n"],
+  "mappings": "AAEA,SAAS,gBAAgB,KAAqB;AAC5C,SAAO,IAAI,YAAY,EAAE,QAAQ,UAAU,GAAG;AAChD;AAEA,SAAS,WAAW,OAAe,QAAyB;AAC1D,QAAM,kBAAkB,gBAAgB,KAAK;AAC7C,QAAM,mBAAmB,gBAAgB,MAAM;AAG/C,MAAI,aAAa;AACjB,WAAS,IAAI,GAAG,IAAI,iBAAiB,UAAU,aAAa,gBAAgB,QAAQ,KAAK;AACvF,QAAI,iBAAiB,CAAC,MAAM,gBAAgB,UAAU,GAAG;AACvD;AAAA,IACF;AAAA,EACF;AACA,SAAO,eAAe,gBAAgB;AACxC;AAEA,SAAS,WAAW,OAAe,MAAwB;AACzD,QAAM,kBAAkB,gBAAgB,KAAK;AAC7C,QAAM,iBAAiB,gBAAgB,KAAK,IAAI;AAChD,QAAM,iBAAiB,gBAAgB,KAAK,WAAW;AAEvD,MAAI,QAAQ;AAGZ,MAAI,eAAe,SAAS,eAAe,GAAG;AAC5C,aAAS;AAAA,EACX;AAGA,MAAI,eAAe,WAAW,eAAe,GAAG;AAC9C,aAAS;AAAA,EACX;AAGA,QAAM,YAAY,eAAe,MAAM,GAAG;AAC1C,MAAI,UAAU,KAAK,CAAC,SAAS,KAAK,WAAW,eAAe,CAAC,GAAG;AAC9D,aAAS;AAAA,EACX;AAGA,MAAI,WAAW,iBAAiB,cAAc,GAAG;AAC/C,aAAS;AAAA,EACX;AAGA,MAAI,eAAe,SAAS,eAAe,GAAG;AAC5C,aAAS;AAAA,EACX;AAEA,SAAO;AACT;AAEO,SAAS,YAAY,OAAmB,OAA2B;AACxE,MAAI,CAAC,MAAM,KAAK,GAAG;AACjB,WAAO;AAAA,EACT;AAEA,QAAM,kBAAkB,MAAM,KAAK,EAAE,YAAY;AAGjD,QAAM,cAAc,MACjB,IAAI,CAAC,UAAU;AAAA,IACd;AAAA,IACA,OAAO,WAAW,iBAAiB,IAAI;AAAA,EACzC,EAAE,EACD,OAAO,CAAC,EAAE,MAAM,MAAM,QAAQ,CAAC,EAC/B,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK;AAEnC,SAAO,YAAY,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI;AAC3C;AAEO,SAAS,mBAAmB,OAA4C;AAC7E,QAAM,UAAU,oBAAI,IAAwB;AAE5C,aAAW,QAAQ,OAAO;AACxB,UAAM,SAAS,KAAK,UAAU,sBAAsB,KAAK,IAAI;AAC7D,UAAM,WAAW,QAAQ,IAAI,MAAM,KAAK,CAAC;AACzC,aAAS,KAAK,IAAI;AAClB,YAAQ,IAAI,QAAQ,QAAQ;AAAA,EAC9B;AAEA,SAAO;AACT;AAEA,SAAS,sBAAsB,MAAsB;AACnD,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,SAAO,MAAM,CAAC,KAAK;AACrB;AAEO,SAAS,iBAAiB,MAAsB;AAErD,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,MAAM,SAAS,EAAG,QAAO;AAE7B,QAAM,SAAS,MAAM,MAAM,SAAS,CAAC;AACrC,QAAM,WAAW,MAAM,MAAM,SAAS,CAAC;AAEvC,QAAM,cAAc,WAAW,MAAM;AACrC,QAAM,gBAAgB,YAAY,SAAS,QAAQ,CAAC;AAEpD,SAAO,GAAG,WAAW,IAAI,aAAa;AACxC;AAEA,SAAS,WAAW,KAAqB;AACvC,SAAO,IAAI,OAAO,CAAC,EAAE,YAAY,IAAI,IAAI,MAAM,CAAC;AAClD;AAEA,SAAS,SAAS,KAAqB;AACrC,SAAO,IAAI,QAAQ,SAAS,GAAG,EAAE,QAAQ,mBAAmB,OAAO;AACrE;AAEA,SAAS,YAAY,KAAqB;AACxC,MAAI,IAAI,SAAS,KAAK,GAAG;AACvB,WAAO,IAAI,MAAM,GAAG,EAAE,IAAI;AAAA,EAC5B;AACA,MAAI,IAAI,SAAS,IAAI,KAAK,CAAC,IAAI,SAAS,KAAK,GAAG;AAC9C,WAAO,IAAI,MAAM,GAAG,EAAE;AAAA,EACxB;AACA,MAAI,IAAI,SAAS,GAAG,KAAK,CAAC,IAAI,SAAS,IAAI,GAAG;AAC5C,WAAO,IAAI,MAAM,GAAG,EAAE;AAAA,EACxB;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/index.js

@@ -0,0 +1,57 @@
+export * from "./modules/ai_assistant/lib/types.js";
+import {
+  registerMcpTool,
+  getToolRegistry,
+  unregisterMcpTool,
+  toolRegistry
+} from "./modules/ai_assistant/lib/tool-registry.js";
+import { executeTool } from "./modules/ai_assistant/lib/tool-executor.js";
+import { createMcpServer, runMcpServer } from "./modules/ai_assistant/lib/mcp-server.js";
+import { runMcpHttpServer } from "./modules/ai_assistant/lib/http-server.js";
+import {
+  authenticateMcpRequest,
+  extractApiKeyFromHeaders
+} from "./modules/ai_assistant/lib/auth.js";
+import { loadAllModuleTools, indexToolsForSearch } from "./modules/ai_assistant/lib/tool-loader.js";
+import {
+  OpenCodeClient,
+  createOpenCodeClient
+} from "./modules/ai_assistant/lib/opencode-client.js";
+import {
+  handleOpenCodeMessage,
+  handleOpenCodeHealth,
+  handleOpenCodeMessageStreaming,
+  handleOpenCodeAnswer,
+  getPendingQuestions,
+  extractTextFromResponse,
+  extractAllPartsFromResponse,
+  extractMetadataFromResponse
+} from "./modules/ai_assistant/lib/opencode-handlers.js";
+import { metadata, features } from "./modules/ai_assistant/index.js";
+export {
+  OpenCodeClient,
+  authenticateMcpRequest,
+  createMcpServer,
+  createOpenCodeClient,
+  executeTool,
+  extractAllPartsFromResponse,
+  extractApiKeyFromHeaders,
+  extractMetadataFromResponse,
+  extractTextFromResponse,
+  features,
+  getPendingQuestions,
+  getToolRegistry,
+  handleOpenCodeAnswer,
+  handleOpenCodeHealth,
+  handleOpenCodeMessage,
+  handleOpenCodeMessageStreaming,
+  indexToolsForSearch,
+  loadAllModuleTools,
+  metadata,
+  registerMcpTool,
+  runMcpHttpServer,
+  runMcpServer,
+  toolRegistry,
+  unregisterMcpTool
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/index.ts"],
+  "sourcesContent": ["/**\n * @open-mercato/ai-assistant\n *\n * MCP (Model Context Protocol) server module for AI assistant integration.\n *\n * This module provides:\n * - MCP server with stdio transport for Claude Desktop integration\n * - Tool registry for modules to register AI-callable tools\n * - ACL-based permission filtering for tools\n * - Multi-tenant execution context\n *\n * @example\n * ```typescript\n * import { registerMcpTool } from '@open-mercato/ai-assistant/tools'\n * import { z } from 'zod'\n *\n * registerMcpTool({\n *   name: 'customers.search',\n *   description: 'Search for customers',\n *   inputSchema: z.object({ query: z.string() }),\n *   requiredFeatures: ['customers.people.view'],\n *   handler: async (input, ctx) => {\n *     // Implementation\n *   }\n * }, { moduleId: 'customers' })\n * ```\n */\n\n// Re-export types\nexport * from './modules/ai_assistant/lib/types'\n\n// Tool registry\nexport {\n  registerMcpTool,\n  getToolRegistry,\n  unregisterMcpTool,\n  toolRegistry,\n} from './modules/ai_assistant/lib/tool-registry'\n\n// Tool executor\nexport { executeTool } from './modules/ai_assistant/lib/tool-executor'\n\n// MCP server (stdio)\nexport { createMcpServer, runMcpServer } from './modules/ai_assistant/lib/mcp-server'\n\n// MCP HTTP server\nexport { runMcpHttpServer, type McpHttpServerOptions } from './modules/ai_assistant/lib/http-server'\n\n// MCP auth\nexport {\n  authenticateMcpRequest,\n  extractApiKeyFromHeaders,\n  type McpAuthResult,\n  type McpAuthSuccess,\n  type McpAuthFailure,\n} from './modules/ai_assistant/lib/auth'\n\n// Tool loader\nexport { loadAllModuleTools, indexToolsForSearch } from './modules/ai_assistant/lib/tool-loader'\n\n// OpenCode client\nexport {\n  OpenCodeClient,\n  createOpenCodeClient,\n  type OpenCodeClientConfig,\n  type OpenCodeSession,\n  type OpenCodeMessage,\n  type OpenCodeHealth,\n  type OpenCodeMcpStatus,\n} from './modules/ai_assistant/lib/opencode-client'\n\n// OpenCode route handlers\nexport {\n  handleOpenCodeMessage,\n  handleOpenCodeHealth,\n  handleOpenCodeMessageStreaming,\n  handleOpenCodeAnswer,\n  getPendingQuestions,\n  extractTextFromResponse,\n  extractAllPartsFromResponse,\n  extractMetadataFromResponse,\n  type OpenCodeTestRequest,\n  type OpenCodeTestResponse,\n  type OpenCodeHealthResponse,\n  type OpenCodeResponsePart,\n  type OpenCodeResponseMetadata,\n  type OpenCodeStreamEvent,\n  type OpenCodeQuestion,\n} from './modules/ai_assistant/lib/opencode-handlers'\n\n// Module metadata\nexport { metadata, features } from './modules/ai_assistant'\n"],
+  "mappings": "AA6BA,cAAc;AAGd;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,mBAAmB;AAG5B,SAAS,iBAAiB,oBAAoB;AAG9C,SAAS,wBAAmD;AAG5D;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AAGP,SAAS,oBAAoB,2BAA2B;AAGxD;AAAA,EACE;AAAA,EACA;AAAA,OAMK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAQK;AAGP,SAAS,UAAU,gBAAgB;",
+  "names": []
+}

package/dist/modules/ai_assistant/acl.js

@@ -0,0 +1,14 @@
+const features = [
+  { id: "ai_assistant.view", title: "View AI Assistant Settings", module: "ai_assistant" },
+  { id: "ai_assistant.settings.manage", title: "Manage AI Assistant Settings", module: "ai_assistant" },
+  { id: "ai_assistant.mcp.serve", title: "Start MCP Server", module: "ai_assistant" },
+  { id: "ai_assistant.tools.list", title: "List MCP Tools", module: "ai_assistant" },
+  { id: "ai_assistant.mcp_servers.view", title: "View MCP Server Configurations", module: "ai_assistant" },
+  { id: "ai_assistant.mcp_servers.manage", title: "Manage MCP Server Configurations", module: "ai_assistant" }
+];
+var acl_default = features;
+export {
+  acl_default as default,
+  features
+};
+//# sourceMappingURL=acl.js.map

package/dist/modules/ai_assistant/acl.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/ai_assistant/acl.ts"],
+  "sourcesContent": ["export const features = [\n  { id: 'ai_assistant.view', title: 'View AI Assistant Settings', module: 'ai_assistant' },\n  { id: 'ai_assistant.settings.manage', title: 'Manage AI Assistant Settings', module: 'ai_assistant' },\n  { id: 'ai_assistant.mcp.serve', title: 'Start MCP Server', module: 'ai_assistant' },\n  { id: 'ai_assistant.tools.list', title: 'List MCP Tools', module: 'ai_assistant' },\n  { id: 'ai_assistant.mcp_servers.view', title: 'View MCP Server Configurations', module: 'ai_assistant' },\n  { id: 'ai_assistant.mcp_servers.manage', title: 'Manage MCP Server Configurations', module: 'ai_assistant' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,qBAAqB,OAAO,8BAA8B,QAAQ,eAAe;AAAA,EACvF,EAAE,IAAI,gCAAgC,OAAO,gCAAgC,QAAQ,eAAe;AAAA,EACpG,EAAE,IAAI,0BAA0B,OAAO,oBAAoB,QAAQ,eAAe;AAAA,EAClF,EAAE,IAAI,2BAA2B,OAAO,kBAAkB,QAAQ,eAAe;AAAA,EACjF,EAAE,IAAI,iCAAiC,OAAO,kCAAkC,QAAQ,eAAe;AAAA,EACvG,EAAE,IAAI,mCAAmC,OAAO,oCAAoC,QAAQ,eAAe;AAC7G;AAEA,IAAO,cAAQ;",
+  "names": []
+}

package/dist/modules/ai_assistant/api/chat/route.js

@@ -0,0 +1,152 @@
+import { NextResponse } from "next/server";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import {
+  handleOpenCodeMessageStreaming
+} from "../../lib/opencode-handlers.js";
+import { createOpenCodeClient } from "../../lib/opencode-client.js";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import {
+  generateSessionToken,
+  createSessionApiKey
+} from "@open-mercato/core/modules/api_keys/services/apiKeyService";
+import { UserRole } from "@open-mercato/core/modules/auth/data/entities";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["ai_assistant.view"] }
+};
+async function getUserRoleIds(em, userId, tenantId) {
+  if (!tenantId) return [];
+  const links = await findWithDecryption(
+    em,
+    UserRole,
+    { user: userId, role: { tenantId } },
+    { populate: ["role"] },
+    { tenantId, organizationId: null }
+  );
+  const linkList = Array.isArray(links) ? links : [];
+  return linkList.map((l) => l.role?.id).filter((id) => typeof id === "string" && id.length > 0);
+}
+async function POST(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  try {
+    const body = await req.json();
+    const { messages, sessionId, answerQuestion } = body;
+    const encoder = new TextEncoder();
+    const stream = new TransformStream();
+    const writer = stream.writable.getWriter();
+    let writerClosed = false;
+    const writeSSE = async (event) => {
+      if (writerClosed) return;
+      try {
+        const jsonStr = JSON.stringify(event);
+        await writer.write(encoder.encode(`data: ${jsonStr}
+
+`));
+      } catch (err) {
+        console.warn("[AI Chat] Failed to write SSE event:", event.type);
+      }
+    };
+    const closeWriter = async () => {
+      if (writerClosed) return;
+      writerClosed = true;
+      try {
+        await writer.close();
+      } catch {
+      }
+    };
+    if (answerQuestion) {
+      try {
+        const client = createOpenCodeClient();
+        await client.answerQuestion(answerQuestion.questionId, answerQuestion.answer);
+        return NextResponse.json({ success: true });
+      } catch (error) {
+        console.error("[AI Chat] Answer error:", error);
+        return NextResponse.json(
+          { error: error instanceof Error ? error.message : "Failed to answer question" },
+          { status: 500 }
+        );
+      }
+    }
+    if (!messages || !Array.isArray(messages)) {
+      return NextResponse.json({ error: "messages array is required" }, { status: 400 });
+    }
+    const lastUserMessage = messages.filter((m) => m.role === "user").pop()?.content;
+    if (!lastUserMessage) {
+      return NextResponse.json({ error: "No user message found" }, { status: 400 });
+    }
+    let sessionToken = null;
+    if (!sessionId) {
+      try {
+        const container = await createRequestContainer();
+        const em = container.resolve("em");
+        const userRoleIds = await getUserRoleIds(em, auth.sub, auth.tenantId);
+        sessionToken = generateSessionToken();
+        await createSessionApiKey(em, {
+          sessionToken,
+          userId: auth.sub,
+          userRoles: userRoleIds,
+          tenantId: auth.tenantId,
+          organizationId: auth.orgId,
+          ttlMinutes: 120
+        });
+        console.log("[AI Chat] Created session token:", sessionToken.slice(0, 12) + "...");
+      } catch (error) {
+        console.error("[AI Chat] Failed to create session key:", error);
+      }
+    }
+    let messageToSend = lastUserMessage;
+    if (sessionToken) {
+      messageToSend = `[SYSTEM: Your session token is "${sessionToken}". You MUST include "_sessionToken": "${sessionToken}" in EVERY tool call argument object. Without this, tools will fail with authorization errors.]
+
+${lastUserMessage}`;
+    }
+    ;
+    (async () => {
+      try {
+        if (sessionToken) {
+          console.log("[AI Chat] Emitting session-authorized event");
+          await writeSSE({
+            type: "session-authorized",
+            sessionToken: sessionToken.slice(0, 12) + "..."
+          });
+        }
+        await writeSSE({ type: "thinking" });
+        await handleOpenCodeMessageStreaming(
+          {
+            message: messageToSend,
+            sessionId
+          },
+          async (event) => {
+            await writeSSE(event);
+          }
+        );
+      } catch (error) {
+        console.error("[AI Chat] OpenCode error:", error);
+        await writeSSE({
+          type: "error",
+          error: error instanceof Error ? error.message : "OpenCode request failed"
+        });
+      } finally {
+        await closeWriter();
+      }
+    })();
+    return new Response(stream.readable, {
+      headers: {
+        "Content-Type": "text/event-stream",
+        "Cache-Control": "no-cache",
+        Connection: "keep-alive"
+      }
+    });
+  } catch (error) {
+    console.error("[AI Chat] Error:", error);
+    return NextResponse.json({ error: "Chat request failed" }, { status: 500 });
+  }
+}
+export {
+  POST,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/ai_assistant/api/chat/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/ai_assistant/api/chat/route.ts"],
+  "sourcesContent": ["import { NextResponse, type NextRequest } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  handleOpenCodeMessageStreaming,\n  type OpenCodeStreamEvent,\n} from '../../lib/opencode-handlers'\nimport { createOpenCodeClient } from '../../lib/opencode-client'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport {\n  generateSessionToken,\n  createSessionApiKey,\n} from '@open-mercato/core/modules/api_keys/services/apiKeyService'\nimport { UserRole } from '@open-mercato/core/modules/auth/data/entities'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n}\n\n/**\n * Get user's role IDs from the database.\n */\nasync function getUserRoleIds(\n  em: EntityManager,\n  userId: string,\n  tenantId: string | null\n): Promise<string[]> {\n  if (!tenantId) return []\n\n  const links = await findWithDecryption(\n    em,\n    UserRole,\n    { user: userId as any, role: { tenantId } } as any,\n    { populate: ['role'] },\n    { tenantId, organizationId: null },\n  )\n  const linkList = Array.isArray(links) ? links : []\n  return linkList\n    .map((l) => (l.role as any)?.id)\n    .filter((id): id is string => typeof id === 'string' && id.length > 0)\n}\n\n/**\n * Chat endpoint that routes messages to OpenCode agent.\n * OpenCode connects to MCP server for tool access (api_discover, api_execute, api_schema).\n *\n * Emits verbose SSE events for debugging:\n * - thinking: Agent started processing\n * - metadata: Model, tokens, timing info\n * - tool-call: Tool invocation with args\n * - tool-result: Tool response\n * - text: Response text\n * - question: Confirmation question from agent\n * - done: Complete with session ID\n * - error: Error occurred\n */\nexport async function POST(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const body = await req.json()\n    const { messages, sessionId, answerQuestion } = body as {\n      messages?: Array<{ role: string; content: string }>\n      sessionId?: string\n      // For answering a question\n      answerQuestion?: {\n        questionId: string\n        answer: number\n        sessionId: string\n      }\n    }\n\n    // Create SSE stream for frontend compatibility\n    const encoder = new TextEncoder()\n    const stream = new TransformStream()\n    const writer = stream.writable.getWriter()\n    let writerClosed = false\n\n    const writeSSE = async (event: OpenCodeStreamEvent | { type: string; [key: string]: unknown }) => {\n      if (writerClosed) return // Guard against writes after close\n      try {\n        const jsonStr = JSON.stringify(event)\n        await writer.write(encoder.encode(`data: ${jsonStr}\\n\\n`))\n      } catch (err) {\n        // Writer may have been closed by client disconnect\n        console.warn('[AI Chat] Failed to write SSE event:', event.type)\n      }\n    }\n\n    const closeWriter = async () => {\n      if (writerClosed) return\n      writerClosed = true\n      try {\n        await writer.close()\n      } catch {\n        // Already closed\n      }\n    }\n\n    // Handle question answer - simple JSON response, not SSE\n    // The original SSE stream continues and will receive the follow-up response\n    if (answerQuestion) {\n      try {\n        const client = createOpenCodeClient()\n        await client.answerQuestion(answerQuestion.questionId, answerQuestion.answer)\n        return NextResponse.json({ success: true })\n      } catch (error) {\n        console.error('[AI Chat] Answer error:', error)\n        return NextResponse.json(\n          { error: error instanceof Error ? error.message : 'Failed to answer question' },\n          { status: 500 }\n        )\n      }\n    }\n\n    // Handle regular message\n    if (!messages || !Array.isArray(messages)) {\n      return NextResponse.json({ error: 'messages array is required' }, { status: 400 })\n    }\n\n    // Get the latest user message\n    const lastUserMessage = messages.filter((m) => m.role === 'user').pop()?.content\n    if (!lastUserMessage) {\n      return NextResponse.json({ error: 'No user message found' }, { status: 400 })\n    }\n\n    // For new sessions, create an ephemeral API key that inherits user permissions\n    let sessionToken: string | null = null\n    if (!sessionId) {\n      try {\n        const container = await createRequestContainer()\n        const em = container.resolve<EntityManager>('em')\n\n        // Get user's role IDs from database\n        const userRoleIds = await getUserRoleIds(em, auth.sub, auth.tenantId)\n\n        // Generate session token and create ephemeral key\n        sessionToken = generateSessionToken()\n        await createSessionApiKey(em, {\n          sessionToken,\n          userId: auth.sub,\n          userRoles: userRoleIds,\n          tenantId: auth.tenantId,\n          organizationId: auth.orgId,\n          ttlMinutes: 120,\n        })\n        console.log('[AI Chat] Created session token:', sessionToken.slice(0, 12) + '...')\n      } catch (error) {\n        console.error('[AI Chat] Failed to create session key:', error)\n        // Continue without session key - tools will use static API key auth\n      }\n    }\n\n    // Build the message to send to OpenCode\n    // If we have a session token, prepend explicit instructions for the AI to include it in tool calls\n    let messageToSend = lastUserMessage\n    if (sessionToken) {\n      messageToSend = `[SYSTEM: Your session token is \"${sessionToken}\". You MUST include \"_sessionToken\": \"${sessionToken}\" in EVERY tool call argument object. Without this, tools will fail with authorization errors.]\\n\\n${lastUserMessage}`\n    }\n\n    // Process in background - starts AFTER Response is returned so there's a reader for the stream\n    ;(async () => {\n      try {\n        // Emit session-authorized event first (if we have a token)\n        if (sessionToken) {\n          console.log('[AI Chat] Emitting session-authorized event')\n          await writeSSE({\n            type: 'session-authorized',\n            sessionToken: sessionToken.slice(0, 12) + '...',\n          })\n        }\n\n        // Emit thinking event for UX feedback\n        await writeSSE({ type: 'thinking' })\n\n        // Use streaming handler that supports questions\n        await handleOpenCodeMessageStreaming(\n          {\n            message: messageToSend,\n            sessionId,\n          },\n          async (event) => {\n            await writeSSE(event)\n          }\n        )\n      } catch (error) {\n        console.error('[AI Chat] OpenCode error:', error)\n        await writeSSE({\n          type: 'error',\n          error: error instanceof Error ? error.message : 'OpenCode request failed',\n        })\n      } finally {\n        await closeWriter()\n      }\n    })()\n\n    return new Response(stream.readable, {\n      headers: {\n        'Content-Type': 'text/event-stream',\n        'Cache-Control': 'no-cache',\n        Connection: 'keep-alive',\n      },\n    })\n  } catch (error) {\n    console.error('[AI Chat] Error:', error)\n    return NextResponse.json({ error: 'Chat request failed' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAsC;AAC/C,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,4BAA4B;AACrC,SAAS,8BAA8B;AAEvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB;AACzB,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAKA,eAAe,eACb,IACA,QACA,UACmB;AACnB,MAAI,CAAC,SAAU,QAAO,CAAC;AAEvB,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,QAAe,MAAM,EAAE,SAAS,EAAE;AAAA,IAC1C,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,IACrB,EAAE,UAAU,gBAAgB,KAAK;AAAA,EACnC;AACA,QAAM,WAAW,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC;AACjD,SAAO,SACJ,IAAI,CAAC,MAAO,EAAE,MAAc,EAAE,EAC9B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AACzE;AAgBA,eAAsB,KAAK,KAAkB;AAC3C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,EAAE,UAAU,WAAW,eAAe,IAAI;AAYhD,UAAM,UAAU,IAAI,YAAY;AAChC,UAAM,SAAS,IAAI,gBAAgB;AACnC,UAAM,SAAS,OAAO,SAAS,UAAU;AACzC,QAAI,eAAe;AAEnB,UAAM,WAAW,OAAO,UAA0E;AAChG,UAAI,aAAc;AAClB,UAAI;AACF,cAAM,UAAU,KAAK,UAAU,KAAK;AACpC,cAAM,OAAO,MAAM,QAAQ,OAAO,SAAS,OAAO;AAAA;AAAA,CAAM,CAAC;AAAA,MAC3D,SAAS,KAAK;AAEZ,gBAAQ,KAAK,wCAAwC,MAAM,IAAI;AAAA,MACjE;AAAA,IACF;AAEA,UAAM,cAAc,YAAY;AAC9B,UAAI,aAAc;AAClB,qBAAe;AACf,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AAAA,IACF;AAIA,QAAI,gBAAgB;AAClB,UAAI;AACF,cAAM,SAAS,qBAAqB;AACpC,cAAM,OAAO,eAAe,eAAe,YAAY,eAAe,MAAM;AAC5E,eAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,MAC5C,SAAS,OAAO;AACd,gBAAQ,MAAM,2BAA2B,KAAK;AAC9C,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,4BAA4B;AAAA,UAC9E,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAGA,QAAI,CAAC,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAAG;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnF;AAGA,UAAM,kBAAkB,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,IAAI,GAAG;AACzE,QAAI,CAAC,iBAAiB;AACpB,aAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAGA,QAAI,eAA8B;AAClC,QAAI,CAAC,WAAW;AACd,UAAI;AACF,cAAM,YAAY,MAAM,uBAAuB;AAC/C,cAAM,KAAK,UAAU,QAAuB,IAAI;AAGhD,cAAM,cAAc,MAAM,eAAe,IAAI,KAAK,KAAK,KAAK,QAAQ;AAGpE,uBAAe,qBAAqB;AACpC,cAAM,oBAAoB,IAAI;AAAA,UAC5B;AAAA,UACA,QAAQ,KAAK;AAAA,UACb,WAAW;AAAA,UACX,UAAU,KAAK;AAAA,UACf,gBAAgB,KAAK;AAAA,UACrB,YAAY;AAAA,QACd,CAAC;AACD,gBAAQ,IAAI,oCAAoC,aAAa,MAAM,GAAG,EAAE,IAAI,KAAK;AAAA,MACnF,SAAS,OAAO;AACd,gBAAQ,MAAM,2CAA2C,KAAK;AAAA,MAEhE;AAAA,IACF;AAIA,QAAI,gBAAgB;AACpB,QAAI,cAAc;AAChB,sBAAgB,mCAAmC,YAAY,yCAAyC,YAAY;AAAA;AAAA,EAAsG,eAAe;AAAA,IAC3O;AAGA;AAAC,KAAC,YAAY;AACZ,UAAI;AAEF,YAAI,cAAc;AAChB,kBAAQ,IAAI,6CAA6C;AACzD,gBAAM,SAAS;AAAA,YACb,MAAM;AAAA,YACN,cAAc,aAAa,MAAM,GAAG,EAAE,IAAI;AAAA,UAC5C,CAAC;AAAA,QACH;AAGA,cAAM,SAAS,EAAE,MAAM,WAAW,CAAC;AAGnC,cAAM;AAAA,UACJ;AAAA,YACE,SAAS;AAAA,YACT;AAAA,UACF;AAAA,UACA,OAAO,UAAU;AACf,kBAAM,SAAS,KAAK;AAAA,UACtB;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,MAAM,6BAA6B,KAAK;AAChD,cAAM,SAAS;AAAA,UACb,MAAM;AAAA,UACN,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD,CAAC;AAAA,MACH,UAAE;AACA,cAAM,YAAY;AAAA,MACpB;AAAA,IACF,GAAG;AAEH,WAAO,IAAI,SAAS,OAAO,UAAU;AAAA,MACnC,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,YAAY;AAAA,MACd;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,oBAAoB,KAAK;AACvC,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/api/health/route.js

@@ -0,0 +1,27 @@
+import { NextResponse } from "next/server";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { handleOpenCodeHealth } from "../../lib/opencode-handlers.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["ai_assistant.view"] }
+};
+async function GET(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  try {
+    const health = await handleOpenCodeHealth();
+    return NextResponse.json(health);
+  } catch (error) {
+    console.error("[AI Health] Error:", error);
+    return NextResponse.json(
+      { error: "Failed to check health", message: error instanceof Error ? error.message : "Unknown error" },
+      { status: 500 }
+    );
+  }
+}
+export {
+  GET,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/ai_assistant/api/health/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/ai_assistant/api/health/route.ts"],
+  "sourcesContent": ["import { NextResponse, type NextRequest } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { handleOpenCodeHealth } from '../../lib/opencode-handlers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n}\n\n/**\n * GET /api/ai_assistant/health\n *\n * Returns OpenCode and MCP connection status.\n */\nexport async function GET(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const health = await handleOpenCodeHealth()\n    return NextResponse.json(health)\n  } catch (error) {\n    console.error('[AI Health] Error:', error)\n    return NextResponse.json(\n      { error: 'Failed to check health', message: error instanceof Error ? error.message : 'Unknown error' },\n      { status: 500 }\n    )\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAsC;AAC/C,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACnE;AAOA,eAAsB,IAAI,KAAkB;AAC1C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,qBAAqB;AAC1C,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,OAAO;AACd,YAAQ,MAAM,sBAAsB,KAAK;AACzC,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,0BAA0B,SAAS,iBAAiB,QAAQ,MAAM,UAAU,gBAAgB;AAAA,MACrG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/api/route/route.js

@@ -0,0 +1,123 @@
+import { NextResponse } from "next/server";
+import { generateObject } from "../../lib/ai-sdk.js";
+import {
+  createOpenAI,
+  createAnthropic,
+  createGoogleGenerativeAI
+} from "../../lib/ai-sdk.js";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import {
+  resolveChatConfig,
+  isProviderConfigured
+} from "../../lib/chat-config.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["ai_assistant.view"] }
+};
+const RouteResultSchema = z.object({
+  intent: z.enum(["tool", "general_chat"]),
+  toolName: z.string().optional(),
+  confidence: z.number().min(0).max(1),
+  reasoning: z.string()
+});
+const ROUTING_MODELS = {
+  anthropic: "claude-3-5-haiku-20241022",
+  openai: "gpt-4o-mini",
+  google: "gemini-1.5-flash"
+};
+function createRoutingModel(providerId) {
+  const modelId = ROUTING_MODELS[providerId];
+  switch (providerId) {
+    case "openai": {
+      const apiKey = process.env.OPENAI_API_KEY;
+      if (!apiKey) throw new Error("OPENAI_API_KEY not configured");
+      const openai = createOpenAI({ apiKey });
+      return openai(modelId);
+    }
+    case "anthropic": {
+      const apiKey = process.env.ANTHROPIC_API_KEY;
+      if (!apiKey) throw new Error("ANTHROPIC_API_KEY not configured");
+      const anthropic = createAnthropic({ apiKey });
+      return anthropic(modelId);
+    }
+    case "google": {
+      const apiKey = process.env.GOOGLE_GENERATIVE_AI_API_KEY;
+      if (!apiKey) throw new Error("GOOGLE_GENERATIVE_AI_API_KEY not configured");
+      const google = createGoogleGenerativeAI({ apiKey });
+      return google(modelId);
+    }
+    default:
+      throw new Error(`Unknown provider: ${providerId}`);
+  }
+}
+async function POST(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  try {
+    const body = await req.json();
+    const { query, availableTools } = body;
+    console.log("[AI Route] Routing query:", query);
+    console.log("[AI Route] Available tools count:", availableTools?.length);
+    if (!query || typeof query !== "string") {
+      return NextResponse.json({ error: "query is required" }, { status: 400 });
+    }
+    if (!availableTools || !Array.isArray(availableTools)) {
+      return NextResponse.json({ error: "availableTools array is required" }, { status: 400 });
+    }
+    const container = await createRequestContainer();
+    let config = await resolveChatConfig(container);
+    if (!config) {
+      const providers = ["openai", "anthropic", "google"];
+      const configuredProvider = providers.find((p) => isProviderConfigured(p));
+      if (!configuredProvider) {
+        return NextResponse.json(
+          { error: "No AI provider configured. Please set an API key for OpenAI, Anthropic, or Google." },
+          { status: 503 }
+        );
+      }
+      config = { providerId: configuredProvider, model: "", updatedAt: "" };
+    }
+    console.log("[AI Route] Using provider:", config.providerId);
+    if (!isProviderConfigured(config.providerId)) {
+      return NextResponse.json(
+        { error: `Configured provider ${config.providerId} is no longer available. Please update settings.` },
+        { status: 503 }
+      );
+    }
+    const model = createRoutingModel(config.providerId);
+    const toolList = availableTools.map((t) => `- ${t.name}: ${t.description}`).join("\n");
+    console.log("[AI Route] Calling generateObject with", ROUTING_MODELS[config.providerId]);
+    const result = await generateObject({
+      model,
+      schema: RouteResultSchema,
+      prompt: `You are a routing assistant. Given a user query, determine if they want to use a specific tool or have a general conversation.
+
+Available tools:
+${toolList}
+
+User query: "${query}"
+
+Respond with:
+- intent: "tool" if user wants to perform an action with a specific tool, "general_chat" otherwise
+- toolName: the exact tool name if intent is "tool"
+- confidence: 0-1 how confident you are
+- reasoning: brief explanation`
+    });
+    console.log("[AI Route] Result:", result.object);
+    return NextResponse.json(result.object);
+  } catch (error) {
+    console.error("[AI Route] Error routing query:", error);
+    return NextResponse.json(
+      { error: "Routing request failed" },
+      { status: 500 }
+    );
+  }
+}
+export {
+  POST,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/ai_assistant/api/route/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/ai_assistant/api/route/route.ts"],
+  "sourcesContent": ["import { NextResponse, type NextRequest } from 'next/server'\nimport { generateObject } from '../../lib/ai-sdk'\nimport {\n  createOpenAI,\n  createAnthropic,\n  createGoogleGenerativeAI,\n} from '../../lib/ai-sdk'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  resolveChatConfig,\n  isProviderConfigured,\n  type ChatProviderId,\n} from '../../lib/chat-config'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n}\n\nconst RouteResultSchema = z.object({\n  intent: z.enum(['tool', 'general_chat']),\n  toolName: z.string().optional(),\n  confidence: z.number().min(0).max(1),\n  reasoning: z.string(),\n})\n\n// Fast/cheap models for each provider\nconst ROUTING_MODELS: Record<ChatProviderId, string> = {\n  anthropic: 'claude-3-5-haiku-20241022',\n  openai: 'gpt-4o-mini',\n  google: 'gemini-1.5-flash',\n}\n\nfunction createRoutingModel(providerId: ChatProviderId) {\n  const modelId = ROUTING_MODELS[providerId]\n\n  switch (providerId) {\n    case 'openai': {\n      const apiKey = process.env.OPENAI_API_KEY\n      if (!apiKey) throw new Error('OPENAI_API_KEY not configured')\n      const openai = createOpenAI({ apiKey })\n      return openai(modelId) as unknown as Parameters<typeof generateObject>[0]['model']\n    }\n    case 'anthropic': {\n      const apiKey = process.env.ANTHROPIC_API_KEY\n      if (!apiKey) throw new Error('ANTHROPIC_API_KEY not configured')\n      const anthropic = createAnthropic({ apiKey })\n      return anthropic(modelId) as unknown as Parameters<typeof generateObject>[0]['model']\n    }\n    case 'google': {\n      const apiKey = process.env.GOOGLE_GENERATIVE_AI_API_KEY\n      if (!apiKey) throw new Error('GOOGLE_GENERATIVE_AI_API_KEY not configured')\n      const google = createGoogleGenerativeAI({ apiKey })\n      return google(modelId) as unknown as Parameters<typeof generateObject>[0]['model']\n    }\n    default:\n      throw new Error(`Unknown provider: ${providerId}`)\n  }\n}\n\nexport async function POST(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const body = await req.json()\n    const { query, availableTools } = body as {\n      query: string\n      availableTools: Array<{ name: string; description: string }>\n    }\n\n    console.log('[AI Route] Routing query:', query)\n    console.log('[AI Route] Available tools count:', availableTools?.length)\n\n    if (!query || typeof query !== 'string') {\n      return NextResponse.json({ error: 'query is required' }, { status: 400 })\n    }\n\n    if (!availableTools || !Array.isArray(availableTools)) {\n      return NextResponse.json({ error: 'availableTools array is required' }, { status: 400 })\n    }\n\n    // Get user's configured provider\n    const container = await createRequestContainer()\n    let config = await resolveChatConfig(container)\n\n    // Fallback to first configured provider\n    if (!config) {\n      const providers: ChatProviderId[] = ['openai', 'anthropic', 'google']\n      const configuredProvider = providers.find((p) => isProviderConfigured(p))\n      if (!configuredProvider) {\n        return NextResponse.json(\n          { error: 'No AI provider configured. Please set an API key for OpenAI, Anthropic, or Google.' },\n          { status: 503 }\n        )\n      }\n      config = { providerId: configuredProvider, model: '', updatedAt: '' }\n    }\n\n    console.log('[AI Route] Using provider:', config.providerId)\n\n    // Verify the configured provider is still available\n    if (!isProviderConfigured(config.providerId)) {\n      return NextResponse.json(\n        { error: `Configured provider ${config.providerId} is no longer available. Please update settings.` },\n        { status: 503 }\n      )\n    }\n\n    // Use fast model for the configured provider\n    const model = createRoutingModel(config.providerId)\n\n    const toolList = availableTools\n      .map((t) => `- ${t.name}: ${t.description}`)\n      .join('\\n')\n\n    console.log('[AI Route] Calling generateObject with', ROUTING_MODELS[config.providerId])\n\n    const result = await generateObject({\n      model,\n      schema: RouteResultSchema,\n      prompt: `You are a routing assistant. Given a user query, determine if they want to use a specific tool or have a general conversation.\n\nAvailable tools:\n${toolList}\n\nUser query: \"${query}\"\n\nRespond with:\n- intent: \"tool\" if user wants to perform an action with a specific tool, \"general_chat\" otherwise\n- toolName: the exact tool name if intent is \"tool\"\n- confidence: 0-1 how confident you are\n- reasoning: brief explanation`,\n    })\n\n    console.log('[AI Route] Result:', result.object)\n    return NextResponse.json(result.object)\n  } catch (error) {\n    console.error('[AI Route] Error routing query:', error)\n    return NextResponse.json(\n      { error: 'Routing request failed' },\n      { status: 500 }\n    )\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAsC;AAC/C,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,cAAc,CAAC;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;AAAA,EACnC,WAAW,EAAE,OAAO;AACtB,CAAC;AAGD,MAAM,iBAAiD;AAAA,EACrD,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,SAAS,mBAAmB,YAA4B;AACtD,QAAM,UAAU,eAAe,UAAU;AAEzC,UAAQ,YAAY;AAAA,IAClB,KAAK,UAAU;AACb,YAAM,SAAS,QAAQ,IAAI;AAC3B,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,+BAA+B;AAC5D,YAAM,SAAS,aAAa,EAAE,OAAO,CAAC;AACtC,aAAO,OAAO,OAAO;AAAA,IACvB;AAAA,IACA,KAAK,aAAa;AAChB,YAAM,SAAS,QAAQ,IAAI;AAC3B,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,kCAAkC;AAC/D,YAAM,YAAY,gBAAgB,EAAE,OAAO,CAAC;AAC5C,aAAO,UAAU,OAAO;AAAA,IAC1B;AAAA,IACA,KAAK,UAAU;AACb,YAAM,SAAS,QAAQ,IAAI;AAC3B,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6CAA6C;AAC1E,YAAM,SAAS,yBAAyB,EAAE,OAAO,CAAC;AAClD,aAAO,OAAO,OAAO;AAAA,IACvB;AAAA,IACA;AACE,YAAM,IAAI,MAAM,qBAAqB,UAAU,EAAE;AAAA,EACrD;AACF;AAEA,eAAsB,KAAK,KAAkB;AAC3C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,EAAE,OAAO,eAAe,IAAI;AAKlC,YAAQ,IAAI,6BAA6B,KAAK;AAC9C,YAAQ,IAAI,qCAAqC,gBAAgB,MAAM;AAEvE,QAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,QAAI,CAAC,kBAAkB,CAAC,MAAM,QAAQ,cAAc,GAAG;AACrD,aAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzF;AAGA,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI,SAAS,MAAM,kBAAkB,SAAS;AAG9C,QAAI,CAAC,QAAQ;AACX,YAAM,YAA8B,CAAC,UAAU,aAAa,QAAQ;AACpE,YAAM,qBAAqB,UAAU,KAAK,CAAC,MAAM,qBAAqB,CAAC,CAAC;AACxE,UAAI,CAAC,oBAAoB;AACvB,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,qFAAqF;AAAA,UAC9F,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,eAAS,EAAE,YAAY,oBAAoB,OAAO,IAAI,WAAW,GAAG;AAAA,IACtE;AAEA,YAAQ,IAAI,8BAA8B,OAAO,UAAU;AAG3D,QAAI,CAAC,qBAAqB,OAAO,UAAU,GAAG;AAC5C,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,uBAAuB,OAAO,UAAU,mDAAmD;AAAA,QACpG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,QAAQ,mBAAmB,OAAO,UAAU;AAElD,UAAM,WAAW,eACd,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,EAAE,WAAW,EAAE,EAC1C,KAAK,IAAI;AAEZ,YAAQ,IAAI,0CAA0C,eAAe,OAAO,UAAU,CAAC;AAEvF,UAAM,SAAS,MAAM,eAAe;AAAA,MAClC;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA;AAAA;AAAA,EAGZ,QAAQ;AAAA;AAAA,eAEK,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOhB,CAAC;AAED,YAAQ,IAAI,sBAAsB,OAAO,MAAM;AAC/C,WAAO,aAAa,KAAK,OAAO,MAAM;AAAA,EACxC,SAAS,OAAO;AACd,YAAQ,MAAM,mCAAmC,KAAK;AACtD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB;AAAA,MAClC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/api/settings/route.js

@@ -0,0 +1,60 @@
+import { NextResponse } from "next/server";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["ai_assistant.view"] }
+};
+const PROVIDERS = {
+  anthropic: {
+    name: "Anthropic",
+    defaultModel: "claude-haiku-4-5-20251001",
+    envKey: "OPENCODE_ANTHROPIC_API_KEY"
+  },
+  openai: {
+    name: "OpenAI",
+    defaultModel: "gpt-4o-mini",
+    envKey: "OPENCODE_OPENAI_API_KEY"
+  },
+  google: {
+    name: "Google",
+    defaultModel: "gemini-2.0-flash",
+    envKey: "OPENCODE_GOOGLE_API_KEY"
+  }
+};
+async function GET(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  try {
+    const providerId = process.env.OPENCODE_PROVIDER || "anthropic";
+    const providerInfo = PROVIDERS[providerId] || PROVIDERS.anthropic;
+    const apiKeyConfigured = !!process.env[providerInfo.envKey];
+    const customModel = process.env.OPENCODE_MODEL;
+    const model = customModel || `${providerId}/${providerInfo.defaultModel}`;
+    return NextResponse.json({
+      provider: {
+        id: providerId,
+        name: providerInfo.name,
+        model,
+        defaultModel: providerInfo.defaultModel,
+        envKey: providerInfo.envKey,
+        configured: apiKeyConfigured
+      },
+      availableProviders: Object.entries(PROVIDERS).map(([id, info]) => ({
+        id,
+        name: info.name,
+        defaultModel: info.defaultModel,
+        envKey: info.envKey,
+        configured: !!process.env[info.envKey]
+      }))
+    });
+  } catch (error) {
+    console.error("[AI Settings] GET error:", error);
+    return NextResponse.json({ error: "Failed to fetch settings" }, { status: 500 });
+  }
+}
+export {
+  GET,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/ai_assistant/api/settings/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/ai_assistant/api/settings/route.ts"],
+  "sourcesContent": ["import { NextResponse, type NextRequest } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n}\n\n// Provider information\nconst PROVIDERS = {\n  anthropic: {\n    name: 'Anthropic',\n    defaultModel: 'claude-haiku-4-5-20251001',\n    envKey: 'OPENCODE_ANTHROPIC_API_KEY',\n  },\n  openai: {\n    name: 'OpenAI',\n    defaultModel: 'gpt-4o-mini',\n    envKey: 'OPENCODE_OPENAI_API_KEY',\n  },\n  google: {\n    name: 'Google',\n    defaultModel: 'gemini-2.0-flash',\n    envKey: 'OPENCODE_GOOGLE_API_KEY',\n  },\n} as const\n\ntype ProviderId = keyof typeof PROVIDERS\n\n/**\n * GET /api/ai_assistant/settings\n *\n * Returns the current OpenCode provider configuration from environment variables.\n */\nexport async function GET(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    // Read provider config from environment\n    const providerId = (process.env.OPENCODE_PROVIDER || 'anthropic') as ProviderId\n    const providerInfo = PROVIDERS[providerId] || PROVIDERS.anthropic\n\n    // Check if the provider's API key is configured\n    const apiKeyConfigured = !!process.env[providerInfo.envKey]\n\n    // Get model (custom or default)\n    const customModel = process.env.OPENCODE_MODEL\n    const model = customModel || `${providerId}/${providerInfo.defaultModel}`\n\n    return NextResponse.json({\n      provider: {\n        id: providerId,\n        name: providerInfo.name,\n        model,\n        defaultModel: providerInfo.defaultModel,\n        envKey: providerInfo.envKey,\n        configured: apiKeyConfigured,\n      },\n      availableProviders: Object.entries(PROVIDERS).map(([id, info]) => ({\n        id,\n        name: info.name,\n        defaultModel: info.defaultModel,\n        envKey: info.envKey,\n        configured: !!process.env[info.envKey],\n      })),\n    })\n  } catch (error) {\n    console.error('[AI Settings] GET error:', error)\n    return NextResponse.json({ error: 'Failed to fetch settings' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAsC;AAC/C,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACnE;AAGA,MAAM,YAAY;AAAA,EAChB,WAAW;AAAA,IACT,MAAM;AAAA,IACN,cAAc;AAAA,IACd,QAAQ;AAAA,EACV;AAAA,EACA,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,cAAc;AAAA,IACd,QAAQ;AAAA,EACV;AAAA,EACA,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,cAAc;AAAA,IACd,QAAQ;AAAA,EACV;AACF;AASA,eAAsB,IAAI,KAAkB;AAC1C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AAEF,UAAM,aAAc,QAAQ,IAAI,qBAAqB;AACrD,UAAM,eAAe,UAAU,UAAU,KAAK,UAAU;AAGxD,UAAM,mBAAmB,CAAC,CAAC,QAAQ,IAAI,aAAa,MAAM;AAG1D,UAAM,cAAc,QAAQ,IAAI;AAChC,UAAM,QAAQ,eAAe,GAAG,UAAU,IAAI,aAAa,YAAY;AAEvE,WAAO,aAAa,KAAK;AAAA,MACvB,UAAU;AAAA,QACR,IAAI;AAAA,QACJ,MAAM,aAAa;AAAA,QACnB;AAAA,QACA,cAAc,aAAa;AAAA,QAC3B,QAAQ,aAAa;AAAA,QACrB,YAAY;AAAA,MACd;AAAA,MACA,oBAAoB,OAAO,QAAQ,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO;AAAA,QACjE;AAAA,QACA,MAAM,KAAK;AAAA,QACX,cAAc,KAAK;AAAA,QACnB,QAAQ,KAAK;AAAA,QACb,YAAY,CAAC,CAAC,QAAQ,IAAI,KAAK,MAAM;AAAA,MACvC,EAAE;AAAA,IACJ,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/api/tools/execute/route.js

@@ -0,0 +1,58 @@
+import { NextResponse } from "next/server";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { executeTool } from "../../../lib/tool-executor.js";
+import { loadAllModuleTools } from "../../../lib/tool-loader.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["ai_assistant.view"] }
+};
+async function POST(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  try {
+    const body = await req.json();
+    const { toolName, args = {} } = body;
+    if (!toolName || typeof toolName !== "string") {
+      return NextResponse.json({ error: "toolName is required" }, { status: 400 });
+    }
+    const container = await createRequestContainer();
+    const rbacService = container.resolve("rbacService");
+    const acl = await rbacService.loadAcl(auth.sub, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId
+    });
+    await loadAllModuleTools();
+    const toolContext = {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+      userId: auth.sub,
+      container,
+      userFeatures: acl.features,
+      isSuperAdmin: acl.isSuperAdmin
+    };
+    const result = await executeTool(toolName, args, toolContext);
+    if (!result.success) {
+      return NextResponse.json(
+        { success: false, error: result.error },
+        { status: result.errorCode === "UNAUTHORIZED" ? 403 : 400 }
+      );
+    }
+    return NextResponse.json({
+      success: true,
+      result: result.result
+    });
+  } catch (error) {
+    console.error("[AI Tools] Error executing tool:", error);
+    return NextResponse.json(
+      { success: false, error: "Tool execution failed" },
+      { status: 500 }
+    );
+  }
+}
+export {
+  POST,
+  metadata
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/ai_assistant/api/tools/execute/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/ai_assistant/api/tools/execute/route.ts"],
+  "sourcesContent": ["import { NextResponse, type NextRequest } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { executeTool } from '../../../lib/tool-executor'\nimport { loadAllModuleTools } from '../../../lib/tool-loader'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport type { McpToolContext } from '../../../lib/types'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n}\n\nexport async function POST(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const body = await req.json()\n    const { toolName, args = {} } = body\n\n    if (!toolName || typeof toolName !== 'string') {\n      return NextResponse.json({ error: 'toolName is required' }, { status: 400 })\n    }\n\n    const container = await createRequestContainer()\n    const rbacService = container.resolve<RbacService>('rbacService')\n\n    // Load ACL for user\n    const acl = await rbacService.loadAcl(auth.sub, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n\n    // Ensure tools are loaded\n    await loadAllModuleTools()\n\n    // Build tool context\n    const toolContext: McpToolContext = {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n      container,\n      userFeatures: acl.features,\n      isSuperAdmin: acl.isSuperAdmin,\n    }\n\n    // Execute the tool\n    const result = await executeTool(toolName, args, toolContext)\n\n    if (!result.success) {\n      return NextResponse.json(\n        { success: false, error: result.error },\n        { status: result.errorCode === 'UNAUTHORIZED' ? 403 : 400 }\n      )\n    }\n\n    return NextResponse.json({\n      success: true,\n      result: result.result,\n    })\n  } catch (error) {\n    console.error('[AI Tools] Error executing tool:', error)\n    return NextResponse.json(\n      { success: false, error: 'Tool execution failed' },\n      { status: 500 }\n    )\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAsC;AAC/C,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,mBAAmB;AAC5B,SAAS,0BAA0B;AAI5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,eAAsB,KAAK,KAAkB;AAC3C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,EAAE,UAAU,OAAO,CAAC,EAAE,IAAI;AAEhC,QAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAC7C,aAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7E;AAEA,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,cAAc,UAAU,QAAqB,aAAa;AAGhE,UAAM,MAAM,MAAM,YAAY,QAAQ,KAAK,KAAK;AAAA,MAC9C,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AAGD,UAAM,mBAAmB;AAGzB,UAAM,cAA8B;AAAA,MAClC,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb;AAAA,MACA,cAAc,IAAI;AAAA,MAClB,cAAc,IAAI;AAAA,IACpB;AAGA,UAAM,SAAS,MAAM,YAAY,UAAU,MAAM,WAAW;AAE5D,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,SAAS,OAAO,OAAO,OAAO,MAAM;AAAA,QACtC,EAAE,QAAQ,OAAO,cAAc,iBAAiB,MAAM,IAAI;AAAA,MAC5D;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,SAAS;AAAA,MACT,QAAQ,OAAO;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,oCAAoC,KAAK;AACvD,WAAO,aAAa;AAAA,MAClB,EAAE,SAAS,OAAO,OAAO,wBAAwB;AAAA,MACjD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
+  "names": []
+}