@open-mercato/ai-assistant 0.5.1-develop.3036.f02c281f23 → 0.5.1-develop.3045.b4b3320cc2

package/dist/modules/ai_assistant/lib/agent-tools.js

@@ -0,0 +1,223 @@
+import { dynamicTool } from "ai";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { loadAgentRegistry } from "./agent-registry.js";
+import {
+  checkAgentPolicy,
+  resolveEffectiveMutationPolicy
+} from "./agent-policy.js";
+import { toolRegistry } from "./tool-registry.js";
+import { toSafeZodSchema } from "./schema-utils.js";
+import { prepareMutation } from "./prepare-mutation.js";
+class AgentPolicyError extends Error {
+  constructor(code, message) {
+    super(message);
+    this.name = "AgentPolicyError";
+    this.code = code;
+  }
+}
+function createAiUiPartQueue() {
+  const buffer = [];
+  return {
+    enqueue: (part) => {
+      buffer.push(part);
+    },
+    drain: () => {
+      const snapshot = buffer.slice();
+      buffer.length = 0;
+      return snapshot;
+    },
+    size: () => buffer.length
+  };
+}
+function toPolicyAuthContext(ctx) {
+  return {
+    userFeatures: ctx.features,
+    isSuperAdmin: ctx.isSuperAdmin
+  };
+}
+function sanitizeToolNameForModel(name) {
+  return name.replace(/\./g, "__");
+}
+function formatToolResult(result) {
+  if (result === null || result === void 0) return "No result returned";
+  if (typeof result === "string") return result;
+  if (typeof result === "number" || typeof result === "boolean") return String(result);
+  try {
+    return JSON.stringify(result, null, 2);
+  } catch {
+    return String(result);
+  }
+}
+function buildToolHandlerContext(ctx, container, tool) {
+  return {
+    tenantId: ctx.tenantId,
+    organizationId: ctx.organizationId,
+    userId: ctx.userId,
+    container: container ?? void 0,
+    userFeatures: ctx.features,
+    isSuperAdmin: ctx.isSuperAdmin,
+    ...tool ? { tool } : {}
+  };
+}
+function formatPendingActionToolResult(agent, tool, pendingActionId, expiresAt) {
+  return formatToolResult({
+    status: "pending-confirmation",
+    agentId: agent.id,
+    toolName: tool.name,
+    pendingActionId,
+    expiresAt: expiresAt.toISOString(),
+    message: `Awaiting user confirmation for mutation "${tool.name}". The action will NOT run until the user approves it.`
+  });
+}
+function resolveIsDestructive(isDestructive, args) {
+  if (typeof isDestructive === "function") {
+    try {
+      return isDestructive(args) === true;
+    } catch {
+      return true;
+    }
+  }
+  return isDestructive === true;
+}
+function adaptToolToAiSdk(tool, ctx, mutation, container, effectiveMutationPolicy) {
+  const safeSchema = toSafeZodSchema(tool.inputSchema);
+  const handlerContext = buildToolHandlerContext(ctx, container, tool);
+  return dynamicTool({
+    description: tool.description,
+    inputSchema: safeSchema,
+    execute: async (args) => {
+      const requiresApprovalNow = (() => {
+        if (!mutation) return false;
+        if (effectiveMutationPolicy === "confirm-required") return true;
+        if (effectiveMutationPolicy === "destructive-confirm-required") {
+          return resolveIsDestructive(mutation.tool.isDestructive, args);
+        }
+        return false;
+      })();
+      if (mutation && requiresApprovalNow) {
+        try {
+          const toolCallArgs = args && typeof args === "object" && !Array.isArray(args) ? { ...args } : {};
+          const { uiPart, pendingAction } = await prepareMutation(
+            {
+              agent: mutation.agent,
+              tool: mutation.tool,
+              toolCallArgs,
+              conversationId: mutation.conversationId,
+              mutationPolicyOverride: mutation.mutationPolicyOverride
+            },
+            {
+              tenantId: mutation.ctx.tenantId,
+              organizationId: mutation.ctx.organizationId,
+              userId: mutation.ctx.userId,
+              features: mutation.ctx.features,
+              isSuperAdmin: mutation.ctx.isSuperAdmin,
+              container: mutation.container
+            }
+          );
+          mutation.uiPartQueue.enqueue(uiPart);
+          return formatPendingActionToolResult(
+            mutation.agent,
+            mutation.tool,
+            pendingAction.id,
+            pendingAction.expiresAt
+          );
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          throw new Error(
+            `Tool "${tool.name}" could not be prepared for confirmation: ${message}`
+          );
+        }
+      }
+      try {
+        const freshContainer = await createRequestContainer();
+        const freshContext = {
+          ...handlerContext,
+          container: freshContainer
+        };
+        const { executeTool } = await import("./tool-executor.js");
+        const execResult = await executeTool(tool.name, args, freshContext);
+        if (!execResult.success) {
+          throw new Error(execResult.error || "Tool execution failed");
+        }
+        return formatToolResult(execResult.result);
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Tool "${tool.name}" failed: ${message}`);
+      }
+    }
+  });
+}
+async function resolveAiAgentTools(input) {
+  await loadAgentRegistry();
+  const policyAuth = toPolicyAuthContext(input.authContext);
+  const mutationPolicyOverride = input.mutationPolicyOverride ?? null;
+  const agentDecision = checkAgentPolicy({
+    agentId: input.agentId,
+    authContext: policyAuth,
+    requestedExecutionMode: input.requestedExecutionMode ?? "chat",
+    mutationPolicyOverride
+  });
+  if (!agentDecision.ok) {
+    throw new AgentPolicyError(agentDecision.code, agentDecision.message);
+  }
+  const { agent } = agentDecision;
+  const tools = {};
+  const uiPartQueue = createAiUiPartQueue();
+  const effectiveMutationPolicy = resolveEffectiveMutationPolicy(
+    agent.mutationPolicy,
+    mutationPolicyOverride,
+    agent.id
+  );
+  const canInterceptMutations = effectiveMutationPolicy !== "read-only" && typeof input.container !== "undefined";
+  for (const toolName of agent.allowedTools) {
+    const toolDecision = checkAgentPolicy({
+      agentId: input.agentId,
+      authContext: policyAuth,
+      toolName,
+      mutationPolicyOverride
+    });
+    if (!toolDecision.ok) {
+      console.warn(
+        `[AI Agents] Skipping tool "${toolName}" for agent "${agent.id}": ${toolDecision.message}`
+      );
+      continue;
+    }
+    const record = toolDecision.tool ?? toolRegistry.getTool(toolName);
+    if (!record) {
+      console.warn(
+        `[AI Agents] Tool "${toolName}" vanished from registry between policy checks; skipping.`
+      );
+      continue;
+    }
+    try {
+      const mutationOptions = record.isMutation === true && canInterceptMutations && input.container ? {
+        agent,
+        tool: record,
+        container: input.container,
+        ctx: input.authContext,
+        mutationPolicyOverride,
+        conversationId: input.conversationId ?? null,
+        uiPartQueue
+      } : null;
+      const modelSafeToolName = sanitizeToolNameForModel(toolName);
+      tools[modelSafeToolName] = adaptToolToAiSdk(
+        record,
+        input.authContext,
+        mutationOptions,
+        input.container,
+        effectiveMutationPolicy
+      );
+    } catch (error) {
+      console.error(
+        `[AI Agents] Failed to adapt tool "${toolName}" for agent "${agent.id}":`,
+        error
+      );
+    }
+  }
+  return { agent, tools, uiPartQueue };
+}
+export {
+  AgentPolicyError,
+  resolveAiAgentTools
+};
+//# sourceMappingURL=agent-tools.js.map

package/dist/modules/ai_assistant/lib/agent-tools.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/agent-tools.ts"],
+  "sourcesContent": ["import { dynamicTool, type Tool } from 'ai'\nimport type { AwilixContainer } from 'awilix'\nimport type { ZodType } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { AiAgentDefinition, AiAgentMutationPolicy } from './ai-agent-definition'\nimport type { AiChatRequestContext, AiUiPart } from './attachment-bridge-types'\nimport type { AiToolDefinition, McpToolContext } from './types'\nimport { loadAgentRegistry } from './agent-registry'\nimport {\n  checkAgentPolicy,\n  resolveEffectiveMutationPolicy,\n  type AgentPolicyDenyCode,\n} from './agent-policy'\nimport { toolRegistry } from './tool-registry'\nimport { toSafeZodSchema } from './schema-utils'\nimport { prepareMutation } from './prepare-mutation'\n\n/**\n * Error thrown by `resolveAiAgentTools` (and downstream `runAiAgentText`) when\n * the agent-level policy check denies a request. Carries the structured deny\n * code so HTTP dispatchers can map it to a stable status and JSON body.\n */\nexport class AgentPolicyError extends Error {\n  readonly code: AgentPolicyDenyCode\n\n  constructor(code: AgentPolicyDenyCode, message: string) {\n    super(message)\n    this.name = 'AgentPolicyError'\n    this.code = code\n  }\n}\n\nexport interface ResolveAiAgentToolsInput {\n  agentId: string\n  authContext: AiChatRequestContext\n  pageContext?: Record<string, unknown>\n  attachmentIds?: string[]\n  /**\n   * Execution mode the caller intends to run the agent in. Defaults to\n   * `'chat'` to preserve the existing chat dispatcher contract. Object-mode\n   * callers (see `runAiAgentObject`) MUST pass `'object'` so the policy gate\n   * can reject chat-only agents early with `execution_mode_not_supported`.\n   */\n  requestedExecutionMode?: 'chat' | 'object'\n  /**\n   * Optional tenant-scoped mutation-policy DOWNGRADE. When supplied, the\n   * effective policy evaluated by `checkAgentPolicy` is the most restrictive\n   * of `{ agent.mutationPolicy, mutationPolicyOverride }`. Escalation is\n   * rejected at the route layer; this helper trusts callers to pass only\n   * values produced by the override repository.\n   */\n  mutationPolicyOverride?: AiAgentMutationPolicy | null\n  /**\n   * DI container used by the `prepareMutation` tool-call wrapper (Step 5.6).\n   * When present AND the agent's effective mutation policy is non-read-only,\n   * `isMutation: true` tools are intercepted: the runtime creates an\n   * `AiPendingAction` row and enqueues a `mutation-preview-card` UI part in\n   * the returned {@link ResolvedAgentTools.uiPartQueue} instead of running the\n   * tool's handler. When absent, mutation tools degrade-gracefully to the\n   * pre-5.6 pass-through adapter \u2014 existing read-only agents are unaffected.\n   */\n  container?: AwilixContainer\n  /**\n   * Optional chat-turn correlation id used when hashing the\n   * `AiPendingAction.idempotencyKey` so retries of the same mutation collapse\n   * to a single row. The chat dispatcher supplies the OpenCode / AI SDK turn\n   * id here; when omitted the hash falls back to `null` which still preserves\n   * per-tenant/org uniqueness within the TTL window.\n   */\n  conversationId?: string | null\n}\n\n/**\n * Queue of UI parts the mutation-preview wrapper accumulates during a turn.\n * The chat/object dispatcher flushes these on the next emission boundary\n * (spec \u00A79 allows either direct streaming or this queue pattern \u2014 we ship the\n * queue in Step 5.6 and the chat dispatcher will drain it in Step 5.10 when\n * the `mutation-preview-card` component registers). BC: callers that ignore\n * the field are unaffected.\n */\nexport interface AiUiPartQueue {\n  /** Pushed by the mutation wrapper; drained by the dispatcher in order. */\n  enqueue: (part: AiUiPart) => void\n  drain: () => AiUiPart[]\n  size: () => number\n}\n\nfunction createAiUiPartQueue(): AiUiPartQueue {\n  const buffer: AiUiPart[] = []\n  return {\n    enqueue: (part) => {\n      buffer.push(part)\n    },\n    drain: () => {\n      const snapshot = buffer.slice()\n      buffer.length = 0\n      return snapshot\n    },\n    size: () => buffer.length,\n  }\n}\n\nexport interface ResolvedAgentTools {\n  agent: AiAgentDefinition\n  tools: Record<string, Tool<unknown, unknown>>\n  /**\n   * Per-request UI-part queue the chat dispatcher drains between streamText\n   * chunks (Step 5.10 contract). Always present; empty when no mutation-tool\n   * calls fire during the turn.\n   */\n  uiPartQueue: AiUiPartQueue\n}\n\nfunction toPolicyAuthContext(ctx: AiChatRequestContext): {\n  userFeatures: string[]\n  isSuperAdmin: boolean\n} {\n  return {\n    userFeatures: ctx.features,\n    isSuperAdmin: ctx.isSuperAdmin,\n  }\n}\n\n/**\n * Sanitize a dotted tool name (e.g. `search.hybrid_search`) into a format\n * accepted by all major LLM providers. OpenAI requires tool names to match\n * `^[a-zA-Z0-9_-]+$`; dots are replaced with double underscores (`__`).\n * Anthropic and Google accept both formats, so this is safe across providers.\n */\nfunction sanitizeToolNameForModel(name: string): string {\n  return name.replace(/\\./g, '__')\n}\n\nfunction formatToolResult(result: unknown): string {\n  if (result === null || result === undefined) return 'No result returned'\n  if (typeof result === 'string') return result\n  if (typeof result === 'number' || typeof result === 'boolean') return String(result)\n  try {\n    return JSON.stringify(result, null, 2)\n  } catch {\n    return String(result)\n  }\n}\n\nfunction buildToolHandlerContext(\n  ctx: AiChatRequestContext,\n  container?: AwilixContainer,\n  tool?: AiToolDefinition,\n): McpToolContext {\n  return {\n    tenantId: ctx.tenantId,\n    organizationId: ctx.organizationId,\n    userId: ctx.userId,\n    container: (container ?? undefined) as unknown as McpToolContext['container'],\n    userFeatures: ctx.features,\n    isSuperAdmin: ctx.isSuperAdmin,\n    ...(tool ? { tool } : {}),\n  }\n}\n\ninterface MutationInterceptorOptions {\n  agent: AiAgentDefinition\n  tool: AiToolDefinition\n  container: AwilixContainer\n  ctx: AiChatRequestContext\n  mutationPolicyOverride: AiAgentMutationPolicy | null\n  conversationId: string | null\n  uiPartQueue: AiUiPartQueue\n}\n\nfunction formatPendingActionToolResult(\n  agent: AiAgentDefinition,\n  tool: AiToolDefinition,\n  pendingActionId: string,\n  expiresAt: Date,\n): string {\n  return formatToolResult({\n    status: 'pending-confirmation',\n    agentId: agent.id,\n    toolName: tool.name,\n    pendingActionId,\n    expiresAt: expiresAt.toISOString(),\n    message: `Awaiting user confirmation for mutation \"${tool.name}\". The action will NOT run until the user approves it.`,\n  })\n}\n\n/**\n * Per-call gating decision for the destructive-confirm-required policy.\n * Honors a static boolean OR a predicate evaluated against the actual\n * tool-call args, so a multi-operation tool (e.g.\n * `customers.manage_deal_comment` with `operation: 'create' | 'update'\n * | 'delete'`) can gate only its destructive branches without being\n * split into multiple tools.\n */\nfunction resolveIsDestructive(\n  isDestructive: boolean | ((input: unknown) => boolean) | undefined,\n  args: unknown,\n): boolean {\n  if (typeof isDestructive === 'function') {\n    try {\n      return isDestructive(args) === true\n    } catch {\n      // If the predicate throws (e.g. unexpected input shape), default to\n      // gating \u2014 fail-safe for destructive policy.\n      return true\n    }\n  }\n  return isDestructive === true\n}\n\nfunction adaptToolToAiSdk(\n  tool: AiToolDefinition,\n  ctx: AiChatRequestContext,\n  mutation: MutationInterceptorOptions | null,\n  container?: AwilixContainer,\n  effectiveMutationPolicy?: 'read-only' | 'confirm-required' | 'destructive-confirm-required',\n): Tool<unknown, unknown> {\n  const safeSchema = toSafeZodSchema(tool.inputSchema as ZodType)\n  const handlerContext = buildToolHandlerContext(ctx, container, tool)\n  return dynamicTool({\n    description: tool.description,\n    inputSchema: safeSchema,\n    execute: async (args: unknown) => {\n      // Per-call gating decision. Under `destructive-confirm-required`,\n      // tools with a predicate `isDestructive(args)` may flip per call \u2014\n      // e.g. comment delete gates while comment create runs direct.\n      const requiresApprovalNow = (() => {\n        if (!mutation) return false\n        if (effectiveMutationPolicy === 'confirm-required') return true\n        if (effectiveMutationPolicy === 'destructive-confirm-required') {\n          return resolveIsDestructive(mutation.tool.isDestructive, args)\n        }\n        return false\n      })()\n      if (mutation && requiresApprovalNow) {\n        try {\n          const toolCallArgs =\n            args && typeof args === 'object' && !Array.isArray(args)\n              ? { ...(args as Record<string, unknown>) }\n              : {}\n          const { uiPart, pendingAction } = await prepareMutation(\n            {\n              agent: mutation.agent,\n              tool: mutation.tool,\n              toolCallArgs,\n              conversationId: mutation.conversationId,\n              mutationPolicyOverride: mutation.mutationPolicyOverride,\n            },\n            {\n              tenantId: mutation.ctx.tenantId,\n              organizationId: mutation.ctx.organizationId,\n              userId: mutation.ctx.userId,\n              features: mutation.ctx.features,\n              isSuperAdmin: mutation.ctx.isSuperAdmin,\n              container: mutation.container,\n            },\n          )\n          mutation.uiPartQueue.enqueue(uiPart)\n          return formatPendingActionToolResult(\n            mutation.agent,\n            mutation.tool,\n            pendingAction.id,\n            pendingAction.expiresAt,\n          )\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error)\n          throw new Error(\n            `Tool \"${tool.name}\" could not be prepared for confirmation: ${message}`,\n          )\n        }\n      }\n      try {\n        // Create a fresh container per tool call so the EM is never stale.\n        const freshContainer = await createRequestContainer()\n        const freshContext: McpToolContext = {\n          ...handlerContext,\n          container: freshContainer as unknown as McpToolContext['container'],\n        }\n        const { executeTool } = await import('./tool-executor')\n        const execResult = await executeTool(tool.name, args, freshContext)\n        if (!execResult.success) {\n          throw new Error(execResult.error || 'Tool execution failed')\n        }\n        return formatToolResult(execResult.result)\n      } catch (error) {\n        const message = error instanceof Error ? error.message : String(error)\n        throw new Error(`Tool \"${tool.name}\" failed: ${message}`)\n      }\n    },\n  })\n}\n\n/**\n * Resolves the agent's whitelisted tools into an AI SDK `tools` map, enforcing\n * the same policy gate as the HTTP dispatcher. Throws {@link AgentPolicyError}\n * on agent-level deny; tool-level denies are skipped with a `console.warn`\n * because the agent author whitelisted a tool the caller is not currently\n * permitted to execute (deterministic non-failure \u2014 the remaining tools still\n * reach the model).\n */\nexport async function resolveAiAgentTools(\n  input: ResolveAiAgentToolsInput,\n): Promise<ResolvedAgentTools> {\n  await loadAgentRegistry()\n\n  const policyAuth = toPolicyAuthContext(input.authContext)\n  const mutationPolicyOverride = input.mutationPolicyOverride ?? null\n  const agentDecision = checkAgentPolicy({\n    agentId: input.agentId,\n    authContext: policyAuth,\n    requestedExecutionMode: input.requestedExecutionMode ?? 'chat',\n    mutationPolicyOverride,\n  })\n  if (!agentDecision.ok) {\n    throw new AgentPolicyError(agentDecision.code, agentDecision.message)\n  }\n\n  const { agent } = agentDecision\n  const tools: Record<string, Tool<unknown, unknown>> = {}\n  const uiPartQueue = createAiUiPartQueue()\n  const effectiveMutationPolicy = resolveEffectiveMutationPolicy(\n    agent.mutationPolicy,\n    mutationPolicyOverride,\n    agent.id,\n  )\n  const canInterceptMutations =\n    effectiveMutationPolicy !== 'read-only' && typeof input.container !== 'undefined'\n\n  for (const toolName of agent.allowedTools) {\n    const toolDecision = checkAgentPolicy({\n      agentId: input.agentId,\n      authContext: policyAuth,\n      toolName,\n      mutationPolicyOverride,\n    })\n    if (!toolDecision.ok) {\n      console.warn(\n        `[AI Agents] Skipping tool \"${toolName}\" for agent \"${agent.id}\": ${toolDecision.message}`,\n      )\n      continue\n    }\n\n    const record = (toolDecision.tool ?? toolRegistry.getTool(toolName)) as\n      | AiToolDefinition\n      | undefined\n    if (!record) {\n      console.warn(\n        `[AI Agents] Tool \"${toolName}\" vanished from registry between policy checks; skipping.`,\n      )\n      continue\n    }\n\n    try {\n      // For any mutation tool whose policy isn't read-only, prepare the\n      // interceptor options once. The actual gate-vs-run-direct decision\n      // happens at call time inside `adaptToolToAiSdk` because under\n      // `destructive-confirm-required` `isDestructive` may be a predicate\n      // evaluated against the per-call args (e.g. a multi-operation\n      // tool with `operation: 'create' | 'update' | 'delete'` gates only\n      // the destructive branch).\n      const mutationOptions: MutationInterceptorOptions | null =\n        record.isMutation === true && canInterceptMutations && input.container\n          ? {\n              agent,\n              tool: record,\n              container: input.container,\n              ctx: input.authContext,\n              mutationPolicyOverride,\n              conversationId: input.conversationId ?? null,\n              uiPartQueue,\n            }\n          : null\n      // Sanitize tool name for model API compatibility: OpenAI requires\n      // names matching ^[a-zA-Z0-9_-]+$ (no dots). Replace dots with\n      // double underscores so `search.hybrid_search` becomes\n      // `search__hybrid_search`. The AI SDK uses the record key as the\n      // tool name sent to the model; the original dotted name stays on\n      // the `tool` object for logging and prepareMutation hashing.\n      const modelSafeToolName = sanitizeToolNameForModel(toolName)\n      tools[modelSafeToolName] = adaptToolToAiSdk(\n        record,\n        input.authContext,\n        mutationOptions,\n        input.container,\n        effectiveMutationPolicy,\n      )\n    } catch (error) {\n      console.error(\n        `[AI Agents] Failed to adapt tool \"${toolName}\" for agent \"${agent.id}\":`,\n        error,\n      )\n    }\n  }\n\n  return { agent, tools, uiPartQueue }\n}\n"],
+  "mappings": "AAAA,SAAS,mBAA8B;AAGvC,SAAS,8BAA8B;AAIvC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAOzB,MAAM,yBAAyB,MAAM;AAAA,EAG1C,YAAY,MAA2B,SAAiB;AACtD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAyDA,SAAS,sBAAqC;AAC5C,QAAM,SAAqB,CAAC;AAC5B,SAAO;AAAA,IACL,SAAS,CAAC,SAAS;AACjB,aAAO,KAAK,IAAI;AAAA,IAClB;AAAA,IACA,OAAO,MAAM;AACX,YAAM,WAAW,OAAO,MAAM;AAC9B,aAAO,SAAS;AAChB,aAAO;AAAA,IACT;AAAA,IACA,MAAM,MAAM,OAAO;AAAA,EACrB;AACF;AAaA,SAAS,oBAAoB,KAG3B;AACA,SAAO;AAAA,IACL,cAAc,IAAI;AAAA,IAClB,cAAc,IAAI;AAAA,EACpB;AACF;AAQA,SAAS,yBAAyB,MAAsB;AACtD,SAAO,KAAK,QAAQ,OAAO,IAAI;AACjC;AAEA,SAAS,iBAAiB,QAAyB;AACjD,MAAI,WAAW,QAAQ,WAAW,OAAW,QAAO;AACpD,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,UAAW,QAAO,OAAO,MAAM;AACnF,MAAI;AACF,WAAO,KAAK,UAAU,QAAQ,MAAM,CAAC;AAAA,EACvC,QAAQ;AACN,WAAO,OAAO,MAAM;AAAA,EACtB;AACF;AAEA,SAAS,wBACP,KACA,WACA,MACgB;AAChB,SAAO;AAAA,IACL,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,IACpB,QAAQ,IAAI;AAAA,IACZ,WAAY,aAAa;AAAA,IACzB,cAAc,IAAI;AAAA,IAClB,cAAc,IAAI;AAAA,IAClB,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,EACzB;AACF;AAYA,SAAS,8BACP,OACA,MACA,iBACA,WACQ;AACR,SAAO,iBAAiB;AAAA,IACtB,QAAQ;AAAA,IACR,SAAS,MAAM;AAAA,IACf,UAAU,KAAK;AAAA,IACf;AAAA,IACA,WAAW,UAAU,YAAY;AAAA,IACjC,SAAS,4CAA4C,KAAK,IAAI;AAAA,EAChE,CAAC;AACH;AAUA,SAAS,qBACP,eACA,MACS;AACT,MAAI,OAAO,kBAAkB,YAAY;AACvC,QAAI;AACF,aAAO,cAAc,IAAI,MAAM;AAAA,IACjC,QAAQ;AAGN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,kBAAkB;AAC3B;AAEA,SAAS,iBACP,MACA,KACA,UACA,WACA,yBACwB;AACxB,QAAM,aAAa,gBAAgB,KAAK,WAAsB;AAC9D,QAAM,iBAAiB,wBAAwB,KAAK,WAAW,IAAI;AACnE,SAAO,YAAY;AAAA,IACjB,aAAa,KAAK;AAAA,IAClB,aAAa;AAAA,IACb,SAAS,OAAO,SAAkB;AAIhC,YAAM,uBAAuB,MAAM;AACjC,YAAI,CAAC,SAAU,QAAO;AACtB,YAAI,4BAA4B,mBAAoB,QAAO;AAC3D,YAAI,4BAA4B,gCAAgC;AAC9D,iBAAO,qBAAqB,SAAS,KAAK,eAAe,IAAI;AAAA,QAC/D;AACA,eAAO;AAAA,MACT,GAAG;AACH,UAAI,YAAY,qBAAqB;AACnC,YAAI;AACF,gBAAM,eACJ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,IACnD,EAAE,GAAI,KAAiC,IACvC,CAAC;AACP,gBAAM,EAAE,QAAQ,cAAc,IAAI,MAAM;AAAA,YACtC;AAAA,cACE,OAAO,SAAS;AAAA,cAChB,MAAM,SAAS;AAAA,cACf;AAAA,cACA,gBAAgB,SAAS;AAAA,cACzB,wBAAwB,SAAS;AAAA,YACnC;AAAA,YACA;AAAA,cACE,UAAU,SAAS,IAAI;AAAA,cACvB,gBAAgB,SAAS,IAAI;AAAA,cAC7B,QAAQ,SAAS,IAAI;AAAA,cACrB,UAAU,SAAS,IAAI;AAAA,cACvB,cAAc,SAAS,IAAI;AAAA,cAC3B,WAAW,SAAS;AAAA,YACtB;AAAA,UACF;AACA,mBAAS,YAAY,QAAQ,MAAM;AACnC,iBAAO;AAAA,YACL,SAAS;AAAA,YACT,SAAS;AAAA,YACT,cAAc;AAAA,YACd,cAAc;AAAA,UAChB;AAAA,QACF,SAAS,OAAO;AACd,gBAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,gBAAM,IAAI;AAAA,YACR,SAAS,KAAK,IAAI,6CAA6C,OAAO;AAAA,UACxE;AAAA,QACF;AAAA,MACF;AACA,UAAI;AAEF,cAAM,iBAAiB,MAAM,uBAAuB;AACpD,cAAM,eAA+B;AAAA,UACnC,GAAG;AAAA,UACH,WAAW;AAAA,QACb;AACA,cAAM,EAAE,YAAY,IAAI,MAAM,OAAO,iBAAiB;AACtD,cAAM,aAAa,MAAM,YAAY,KAAK,MAAM,MAAM,YAAY;AAClE,YAAI,CAAC,WAAW,SAAS;AACvB,gBAAM,IAAI,MAAM,WAAW,SAAS,uBAAuB;AAAA,QAC7D;AACA,eAAO,iBAAiB,WAAW,MAAM;AAAA,MAC3C,SAAS,OAAO;AACd,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,cAAM,IAAI,MAAM,SAAS,KAAK,IAAI,aAAa,OAAO,EAAE;AAAA,MAC1D;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAUA,eAAsB,oBACpB,OAC6B;AAC7B,QAAM,kBAAkB;AAExB,QAAM,aAAa,oBAAoB,MAAM,WAAW;AACxD,QAAM,yBAAyB,MAAM,0BAA0B;AAC/D,QAAM,gBAAgB,iBAAiB;AAAA,IACrC,SAAS,MAAM;AAAA,IACf,aAAa;AAAA,IACb,wBAAwB,MAAM,0BAA0B;AAAA,IACxD;AAAA,EACF,CAAC;AACD,MAAI,CAAC,cAAc,IAAI;AACrB,UAAM,IAAI,iBAAiB,cAAc,MAAM,cAAc,OAAO;AAAA,EACtE;AAEA,QAAM,EAAE,MAAM,IAAI;AAClB,QAAM,QAAgD,CAAC;AACvD,QAAM,cAAc,oBAAoB;AACxC,QAAM,0BAA0B;AAAA,IAC9B,MAAM;AAAA,IACN;AAAA,IACA,MAAM;AAAA,EACR;AACA,QAAM,wBACJ,4BAA4B,eAAe,OAAO,MAAM,cAAc;AAExE,aAAW,YAAY,MAAM,cAAc;AACzC,UAAM,eAAe,iBAAiB;AAAA,MACpC,SAAS,MAAM;AAAA,MACf,aAAa;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,aAAa,IAAI;AACpB,cAAQ;AAAA,QACN,8BAA8B,QAAQ,gBAAgB,MAAM,EAAE,MAAM,aAAa,OAAO;AAAA,MAC1F;AACA;AAAA,IACF;AAEA,UAAM,SAAU,aAAa,QAAQ,aAAa,QAAQ,QAAQ;AAGlE,QAAI,CAAC,QAAQ;AACX,cAAQ;AAAA,QACN,qBAAqB,QAAQ;AAAA,MAC/B;AACA;AAAA,IACF;AAEA,QAAI;AAQF,YAAM,kBACJ,OAAO,eAAe,QAAQ,yBAAyB,MAAM,YACzD;AAAA,QACE;AAAA,QACA,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,QACjB,KAAK,MAAM;AAAA,QACX;AAAA,QACA,gBAAgB,MAAM,kBAAkB;AAAA,QACxC;AAAA,MACF,IACA;AAON,YAAM,oBAAoB,yBAAyB,QAAQ;AAC3D,YAAM,iBAAiB,IAAI;AAAA,QACzB;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA,MAAM;AAAA,QACN;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,cAAQ;AAAA,QACN,qCAAqC,QAAQ,gBAAgB,MAAM,EAAE;AAAA,QACrE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,OAAO,OAAO,YAAY;AACrC;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/agent-transport.js

@@ -0,0 +1,25 @@
+import { DefaultChatTransport } from "ai";
+const DEFAULT_ENDPOINT = "/api/ai_assistant/ai/chat";
+function buildEndpointWithAgentQuery(endpoint, agentId) {
+  if (!agentId) return endpoint;
+  const separator = endpoint.includes("?") ? "&" : "?";
+  return `${endpoint}${separator}agent=${encodeURIComponent(agentId)}`;
+}
+function createAiAgentTransport(input) {
+  const endpoint = buildEndpointWithAgentQuery(
+    input.endpoint && input.endpoint.length > 0 ? input.endpoint : DEFAULT_ENDPOINT,
+    input.agentId
+  );
+  const extraBody = { ...input.body ?? {} };
+  if (typeof input.debug === "boolean") {
+    extraBody.debug = input.debug;
+  }
+  return new DefaultChatTransport({
+    api: endpoint,
+    body: extraBody
+  });
+}
+export {
+  createAiAgentTransport
+};
+//# sourceMappingURL=agent-transport.js.map

package/dist/modules/ai_assistant/lib/agent-transport.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/agent-transport.ts"],
+  "sourcesContent": ["import { DefaultChatTransport, type ChatTransport, type UIMessage } from 'ai'\n\n/**\n * Default dispatcher URL. Mirrors the module-id-prefixed layout emitted by the\n * app router \u2014 the spec shorthand `/api/ai/chat` appears in the source spec\n * but the generator maps it to `/api/ai_assistant/ai/chat`. Downstream\n * consumers should import this helper rather than hardcoding the literal.\n */\nconst DEFAULT_ENDPOINT = '/api/ai_assistant/ai/chat'\n\nexport interface CreateAiAgentTransportInput {\n  agentId: string\n  endpoint?: string\n  body?: Record<string, unknown>\n  debug?: boolean\n}\n\nfunction buildEndpointWithAgentQuery(endpoint: string, agentId: string): string {\n  if (!agentId) return endpoint\n  const separator = endpoint.includes('?') ? '&' : '?'\n  return `${endpoint}${separator}agent=${encodeURIComponent(agentId)}`\n}\n\n/**\n * Thin wrapper around `DefaultChatTransport` that binds the agent id as a\n * query parameter and merges any agent-specific body fields into every\n * outbound request. Returned value conforms to the AI SDK's `ChatTransport`\n * contract so consumers can plug it directly into `useChat({ transport })`.\n *\n * TODO: when the AI SDK standardizes agent-binding as a first-class input,\n * this helper can collapse into a one-liner. Until then it owns the\n * endpoint-URL convention so UI callers do not hardcode dispatcher paths.\n */\nexport function createAiAgentTransport<UI_MESSAGE extends UIMessage = UIMessage>(\n  input: CreateAiAgentTransportInput,\n): ChatTransport<UI_MESSAGE> {\n  const endpoint = buildEndpointWithAgentQuery(\n    input.endpoint && input.endpoint.length > 0 ? input.endpoint : DEFAULT_ENDPOINT,\n    input.agentId,\n  )\n\n  const extraBody: Record<string, unknown> = { ...(input.body ?? {}) }\n  if (typeof input.debug === 'boolean') {\n    extraBody.debug = input.debug\n  }\n\n  return new DefaultChatTransport<UI_MESSAGE>({\n    api: endpoint,\n    body: extraBody,\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,4BAAgE;AAQzE,MAAM,mBAAmB;AASzB,SAAS,4BAA4B,UAAkB,SAAyB;AAC9E,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,YAAY,SAAS,SAAS,GAAG,IAAI,MAAM;AACjD,SAAO,GAAG,QAAQ,GAAG,SAAS,SAAS,mBAAmB,OAAO,CAAC;AACpE;AAYO,SAAS,uBACd,OAC2B;AAC3B,QAAM,WAAW;AAAA,IACf,MAAM,YAAY,MAAM,SAAS,SAAS,IAAI,MAAM,WAAW;AAAA,IAC/D,MAAM;AAAA,EACR;AAEA,QAAM,YAAqC,EAAE,GAAI,MAAM,QAAQ,CAAC,EAAG;AACnE,MAAI,OAAO,MAAM,UAAU,WAAW;AACpC,cAAU,QAAQ,MAAM;AAAA,EAC1B;AAEA,SAAO,IAAI,qBAAiC;AAAA,IAC1C,KAAK;AAAA,IACL,MAAM;AAAA,EACR,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/ai-agent-definition.js

@@ -0,0 +1,11 @@
+function defineAiAgent(definition) {
+  return definition;
+}
+function defineAiAgentExtension(extension) {
+  return extension;
+}
+export {
+  defineAiAgent,
+  defineAiAgentExtension
+};
+//# sourceMappingURL=ai-agent-definition.js.map

package/dist/modules/ai_assistant/lib/ai-agent-definition.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/ai-agent-definition.ts"],
+  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { ZodTypeAny } from 'zod'\n\nexport type AiAgentExecutionMode = 'chat' | 'object'\n\nexport type AiAgentMutationPolicy =\n  | 'read-only'\n  | 'confirm-required'\n  | 'destructive-confirm-required'\n\nexport type AiAgentAcceptedMediaType = 'image' | 'pdf' | 'file'\n\nexport type AiAgentDataOperation = 'read' | 'search' | 'aggregate'\n\nexport interface AiAgentPageContextInput {\n  entityType: string\n  recordId: string\n  container: AwilixContainer\n  tenantId: string | null\n  organizationId: string | null\n}\n\nexport interface AiAgentStructuredOutput<TSchema = ZodTypeAny> {\n  schemaName: string\n  schema: TSchema\n  mode?: 'generate' | 'stream'\n}\n\nexport interface AiAgentDataCapabilities {\n  entities?: string[]\n  operations?: AiAgentDataOperation[]\n  searchableFields?: string[]\n}\n\nexport interface AiAgentSuggestion {\n  label: string\n  prompt: string\n}\n\nexport interface AiAgentDefinition {\n  id: string\n  moduleId: string\n  label: string\n  description: string\n  systemPrompt: string\n  allowedTools: string[]\n  suggestions?: AiAgentSuggestion[]\n  executionMode?: AiAgentExecutionMode\n  defaultModel?: string\n  acceptedMediaTypes?: AiAgentAcceptedMediaType[]\n  requiredFeatures?: string[]\n  uiParts?: string[]\n  readOnly?: boolean\n  mutationPolicy?: AiAgentMutationPolicy\n  maxSteps?: number\n  output?: AiAgentStructuredOutput\n  resolvePageContext?: (ctx: AiAgentPageContextInput) => Promise<string | null>\n  keywords?: string[]\n  domain?: string\n  dataCapabilities?: AiAgentDataCapabilities\n}\n\nexport interface AiAgentExtension {\n  targetAgentId: string\n  replaceAllowedTools?: string[]\n  deleteAllowedTools?: string[]\n  appendAllowedTools?: string[]\n  replaceSystemPrompt?: string\n  appendSystemPrompt?: string\n  replaceSuggestions?: AiAgentSuggestion[]\n  deleteSuggestions?: string[]\n  appendSuggestions?: AiAgentSuggestion[]\n  /**\n   * @deprecated Use `appendSuggestions` for new code. Preserved as the\n   * original append-only field for backward compatibility.\n   */\n  suggestions?: AiAgentSuggestion[]\n}\n\nexport function defineAiAgent(definition: AiAgentDefinition): AiAgentDefinition {\n  return definition\n}\n\nexport function defineAiAgentExtension(extension: AiAgentExtension): AiAgentExtension {\n  return extension\n}\n"],
+  "mappings": "AA+EO,SAAS,cAAc,YAAkD;AAC9E,SAAO;AACT;AAEO,SAAS,uBAAuB,WAA+C;AACpF,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/ai-agents-generated.d.js

@@ -0,0 +1 @@
+//# sourceMappingURL=ai-agents-generated.d.js.map

package/dist/modules/ai_assistant/lib/ai-agents-generated.d.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/ai-api-operation-runner.js

@@ -0,0 +1,239 @@
+import {
+  attachTrustedAuthContext
+} from "@open-mercato/shared/lib/auth/server";
+import {
+  findApiRouteManifestMatch,
+  getApiRouteManifests
+} from "@open-mercato/shared/modules/registry";
+import { hasAllFeatures } from "@open-mercato/shared/security/features";
+const MUTATION_METHODS = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
+const SYNTHETIC_ORIGIN = "http://internal.local";
+function normalizeMethod(method) {
+  const upper = method.toUpperCase();
+  if (upper === "GET" || upper === "POST" || upper === "PUT" || upper === "PATCH" || upper === "DELETE") {
+    return upper;
+  }
+  throw new Error(`Unsupported method "${method}"`);
+}
+function normalizePath(path) {
+  if (typeof path !== "string" || path.length === 0) return "/";
+  const trimmed = path.startsWith("/") ? path : `/${path}`;
+  let end = trimmed.length;
+  while (end > 1 && trimmed.charCodeAt(end - 1) === 47) end--;
+  return trimmed.slice(0, end);
+}
+function buildUrl(path, query) {
+  const url = new URL(`${SYNTHETIC_ORIGIN}/api${normalizePath(path)}`);
+  if (query) {
+    for (const [key, value] of Object.entries(query)) {
+      if (value === null || value === void 0) continue;
+      url.searchParams.append(key, String(value));
+    }
+  }
+  return url;
+}
+function buildAuthEnvelope(ctx) {
+  const userId = ctx.userId;
+  if (!userId) {
+    return { auth: null, status: "invalid" };
+  }
+  const auth = {
+    sub: userId,
+    userId,
+    tenantId: ctx.tenantId,
+    orgId: ctx.organizationId,
+    roles: [],
+    isSuperAdmin: ctx.isSuperAdmin
+  };
+  return { auth, status: "authenticated" };
+}
+function pickHandler(entry, mod, method) {
+  const direct = mod[method];
+  if (typeof direct === "function") return direct;
+  if (entry.kind === "legacy") {
+    const fallback = mod.default ?? mod.handler;
+    if (typeof fallback === "function") return fallback;
+  }
+  return null;
+}
+function extractMethodMetadata(metadata, method) {
+  if (!metadata || typeof metadata !== "object") return null;
+  const record = metadata;
+  const perMethod = record[method];
+  const source = perMethod && typeof perMethod === "object" ? perMethod : record;
+  const result = {};
+  if (typeof source.requireAuth === "boolean") {
+    result.requireAuth = source.requireAuth;
+  }
+  if (Array.isArray(source.requireFeatures)) {
+    const features = source.requireFeatures.filter((entry) => typeof entry === "string" && entry.length > 0);
+    if (features.length > 0) result.requireFeatures = features;
+  }
+  return result;
+}
+async function readResponseBody(res) {
+  const contentType = res.headers.get("content-type") ?? "";
+  if (contentType.includes("application/json")) {
+    try {
+      return await res.json();
+    } catch {
+      return null;
+    }
+  }
+  try {
+    const text = await res.text();
+    if (!text) return null;
+    try {
+      return JSON.parse(text);
+    } catch {
+      return text;
+    }
+  } catch {
+    return null;
+  }
+}
+function failure(statusCode, error, details) {
+  const response = { success: false, statusCode, error };
+  if (details !== void 0) response.details = details;
+  return response;
+}
+function normalizeError(body) {
+  if (body && typeof body === "object" && !Array.isArray(body)) {
+    const record = body;
+    const message = typeof record.error === "string" ? record.error : typeof record.message === "string" ? record.message : null;
+    if (message) {
+      const { error: _ignored, message: _ignoredMessage, ...rest } = record;
+      void _ignored;
+      void _ignoredMessage;
+      return Object.keys(rest).length > 0 ? { error: message, details: rest } : { error: message };
+    }
+  }
+  if (typeof body === "string" && body.length > 0) {
+    return { error: body };
+  }
+  return { error: "Request failed" };
+}
+function createAiApiOperationRunner(ctx, options = {}) {
+  let manifestPromise = null;
+  const loadManifest = async () => {
+    if (options.apiRoutes) return options.apiRoutes;
+    if (manifestPromise) return manifestPromise;
+    const loader = options.loadApiRoutes ?? defaultLoadApiRoutes;
+    manifestPromise = loader();
+    try {
+      return await manifestPromise;
+    } catch (error) {
+      manifestPromise = null;
+      throw error;
+    }
+  };
+  return {
+    async run(request) {
+      let method;
+      try {
+        method = normalizeMethod(request.method);
+      } catch (error) {
+        const message = error instanceof Error ? error.message : "Invalid method";
+        return failure(400, message);
+      }
+      const path = normalizePath(request.path);
+      let routes;
+      try {
+        routes = await loadManifest();
+      } catch (error) {
+        const message = error instanceof Error ? error.message : "Failed to load API route manifest";
+        return failure(500, `Operation runner manifest unavailable: ${message}`);
+      }
+      const match = findApiRouteManifestMatch(routes, method, path);
+      if (!match) {
+        return failure(
+          404,
+          `No documented API route matches ${method} ${path}`
+        );
+      }
+      let mod;
+      try {
+        mod = await match.route.load();
+      } catch (error) {
+        const message = error instanceof Error ? error.message : "Failed to load route module";
+        return failure(500, `Failed to load route module: ${message}`);
+      }
+      if (!("openApi" in mod) || mod.openApi === void 0 || mod.openApi === null) {
+        return failure(
+          501,
+          `Route ${method} ${path} is undocumented (missing openApi export); refusing to call from AI tool`
+        );
+      }
+      const handler = pickHandler(match.route, mod, method);
+      if (!handler) {
+        return failure(
+          405,
+          `Route ${path} does not export a handler for method ${method}`
+        );
+      }
+      const methodMetadata = extractMethodMetadata(mod.metadata, method);
+      const routeFeatures = methodMetadata?.requireFeatures ?? [];
+      const isMutation = MUTATION_METHODS.has(method);
+      if (isMutation && routeFeatures.length === 0 && !request.allowFeaturelessMutation) {
+        return failure(
+          403,
+          `Mutation route ${method} ${path} declares no requiredFeatures; refusing to call without allowFeaturelessMutation opt-in`
+        );
+      }
+      const toolFeatures = ctx.tool.requiredFeatures ?? [];
+      if (routeFeatures.length > 0 && !hasAllFeatures(toolFeatures, routeFeatures)) {
+        return failure(
+          403,
+          `AI tool "${ctx.tool.name}" requiredFeatures do not cover route ${method} ${path} requiredFeatures`,
+          { toolFeatures, routeFeatures }
+        );
+      }
+      const url = buildUrl(path, request.query);
+      const headers = new Headers();
+      const requestInit = { method, headers };
+      if (request.body !== void 0 && method !== "GET") {
+        headers.set("content-type", "application/json");
+        requestInit.body = JSON.stringify(request.body);
+      }
+      const syntheticRequest = new Request(url, requestInit);
+      attachTrustedAuthContext(syntheticRequest, buildAuthEnvelope(ctx));
+      let response;
+      try {
+        response = await handler(syntheticRequest, { params: match.params });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : "Route handler threw";
+        return failure(500, message);
+      }
+      const status = response.status;
+      const body = await readResponseBody(response);
+      if (status >= 200 && status < 300) {
+        return {
+          success: true,
+          statusCode: status,
+          data: body
+        };
+      }
+      const normalized = normalizeError(body);
+      return {
+        success: false,
+        statusCode: status,
+        error: normalized.error,
+        ...normalized.details !== void 0 ? { details: normalized.details } : {}
+      };
+    }
+  };
+}
+async function defaultLoadApiRoutes() {
+  const registered = getApiRouteManifests();
+  if (registered.length === 0) {
+    throw new Error(
+      "No API route manifest registered. Call registerApiRouteManifests(...) at app bootstrap or pass apiRoutes/loadApiRoutes to createAiApiOperationRunner."
+    );
+  }
+  return registered;
+}
+export {
+  createAiApiOperationRunner,
+  normalizePath
+};
+//# sourceMappingURL=ai-api-operation-runner.js.map

package/dist/modules/ai_assistant/lib/ai-api-operation-runner.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/ai-api-operation-runner.ts"],
+  "sourcesContent": ["// Phase 1 of spec 2026-04-27-ai-tools-api-backed-dry-refactor.md.\n//\n// In-process API operation runner used by typed AI tools to reuse existing\n// API route handlers without HTTP, fetch, or a second RBAC pass. The runner\n// resolves the matched route entry from the generated `apiRoutes` manifest,\n// validates that the route is documented (`openApi`) and that mutation routes\n// declare `requiredFeatures`, asserts the route's required features are\n// covered by the tool definition, then invokes the route handler directly with\n// a synthetic Request that carries a Symbol-keyed trusted-auth envelope so the\n// shared auth resolver short-circuits cookie/JWT/API-key parsing.\nimport {\n  attachTrustedAuthContext,\n  type AuthContext,\n  type TrustedAuthContextEnvelope,\n} from '@open-mercato/shared/lib/auth/server'\nimport {\n  findApiRouteManifestMatch,\n  getApiRouteManifests,\n  type ApiRouteManifestEntry,\n  type RouteMatchParams,\n} from '@open-mercato/shared/modules/registry'\nimport { hasAllFeatures } from '@open-mercato/shared/security/features'\nimport type { AiToolDefinition, McpToolContext } from './types'\n\nexport type AiApiHttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE'\n\nconst MUTATION_METHODS: ReadonlySet<AiApiHttpMethod> = new Set(['POST', 'PUT', 'PATCH', 'DELETE'])\n\nconst SYNTHETIC_ORIGIN = 'http://internal.local'\n\nexport type AiApiOperationRequest = {\n  method: AiApiHttpMethod\n  path: string\n  query?: Record<string, string | number | boolean | null | undefined>\n  body?: Record<string, unknown>\n  allowFeaturelessMutation?: boolean\n}\n\nexport type AiApiOperationResponse<T = unknown> = {\n  success: boolean\n  statusCode: number\n  data?: T\n  error?: string\n  details?: unknown\n}\n\nexport interface AiToolExecutionContext extends McpToolContext {\n  tool: AiToolDefinition\n}\n\nexport type AiApiOperationRunnerOptions = {\n  /** Optional override of the API route manifest (used by tests). */\n  apiRoutes?: ApiRouteManifestEntry[]\n  /** Custom loader for the API route manifest (used by tests). */\n  loadApiRoutes?: () => Promise<ApiRouteManifestEntry[]>\n}\n\nexport type AiApiOperationRunner = {\n  run<T = unknown>(request: AiApiOperationRequest): Promise<AiApiOperationResponse<T>>\n}\n\ntype ResolvedHandler = (req: Request, ctx?: { params: RouteMatchParams }) => Promise<Response> | Response\n\ntype LoadedRouteModule = Record<string, unknown>\n\ntype MethodMetadata = {\n  requireAuth?: boolean\n  requireFeatures?: string[]\n}\n\nfunction normalizeMethod(method: string): AiApiHttpMethod {\n  const upper = method.toUpperCase()\n  if (upper === 'GET' || upper === 'POST' || upper === 'PUT' || upper === 'PATCH' || upper === 'DELETE') {\n    return upper\n  }\n  throw new Error(`Unsupported method \"${method}\"`)\n}\n\n// Exported for unit testing \u2014 see __tests__/ai-api-operation-runner.test.ts.\n// `path` arrives from agent tool inputs (LLM-controlled), so trailing-slash\n// stripping is implemented as a linear character-code scan rather than the\n// /\\/+$/ regex (CodeQL js/polynomial-redos: regex exhibits polynomial\n// backtracking on long runs of `/`). The loop is O(n) regardless of input.\nexport function normalizePath(path: string): string {\n  if (typeof path !== 'string' || path.length === 0) return '/'\n  const trimmed = path.startsWith('/') ? path : `/${path}`\n  let end = trimmed.length\n  while (end > 1 && trimmed.charCodeAt(end - 1) === 47 /* '/' */) end--\n  return trimmed.slice(0, end)\n}\n\nfunction buildUrl(path: string, query?: AiApiOperationRequest['query']): URL {\n  const url = new URL(`${SYNTHETIC_ORIGIN}/api${normalizePath(path)}`)\n  if (query) {\n    for (const [key, value] of Object.entries(query)) {\n      if (value === null || value === undefined) continue\n      url.searchParams.append(key, String(value))\n    }\n  }\n  return url\n}\n\nfunction buildAuthEnvelope(ctx: AiToolExecutionContext): TrustedAuthContextEnvelope {\n  const userId = ctx.userId\n  if (!userId) {\n    return { auth: null, status: 'invalid' }\n  }\n  const auth: AuthContext = {\n    sub: userId,\n    userId,\n    tenantId: ctx.tenantId,\n    orgId: ctx.organizationId,\n    roles: [],\n    isSuperAdmin: ctx.isSuperAdmin,\n  }\n  return { auth, status: 'authenticated' }\n}\n\nfunction pickHandler(entry: ApiRouteManifestEntry, mod: LoadedRouteModule, method: AiApiHttpMethod): ResolvedHandler | null {\n  const direct = mod[method]\n  if (typeof direct === 'function') return direct as ResolvedHandler\n  if (entry.kind === 'legacy') {\n    const fallback = mod.default ?? mod.handler\n    if (typeof fallback === 'function') return fallback as ResolvedHandler\n  }\n  return null\n}\n\nfunction extractMethodMetadata(metadata: unknown, method: AiApiHttpMethod): MethodMetadata | null {\n  if (!metadata || typeof metadata !== 'object') return null\n  const record = metadata as Record<string, unknown>\n  const perMethod = record[method]\n  const source: Record<string, unknown> = perMethod && typeof perMethod === 'object'\n    ? (perMethod as Record<string, unknown>)\n    : record\n  const result: MethodMetadata = {}\n  if (typeof source.requireAuth === 'boolean') {\n    result.requireAuth = source.requireAuth\n  }\n  if (Array.isArray(source.requireFeatures)) {\n    const features = source.requireFeatures.filter((entry): entry is string => typeof entry === 'string' && entry.length > 0)\n    if (features.length > 0) result.requireFeatures = features\n  }\n  return result\n}\n\nasync function readResponseBody(res: Response): Promise<unknown> {\n  const contentType = res.headers.get('content-type') ?? ''\n  if (contentType.includes('application/json')) {\n    try {\n      return await res.json()\n    } catch {\n      return null\n    }\n  }\n  try {\n    const text = await res.text()\n    if (!text) return null\n    try {\n      return JSON.parse(text)\n    } catch {\n      return text\n    }\n  } catch {\n    return null\n  }\n}\n\nfunction failure(statusCode: number, error: string, details?: unknown): AiApiOperationResponse {\n  const response: AiApiOperationResponse = { success: false, statusCode, error }\n  if (details !== undefined) response.details = details\n  return response\n}\n\nfunction normalizeError(body: unknown): { error: string; details?: unknown } {\n  if (body && typeof body === 'object' && !Array.isArray(body)) {\n    const record = body as Record<string, unknown>\n    const message = typeof record.error === 'string'\n      ? record.error\n      : typeof record.message === 'string'\n        ? record.message\n        : null\n    if (message) {\n      const { error: _ignored, message: _ignoredMessage, ...rest } = record\n      void _ignored\n      void _ignoredMessage\n      return Object.keys(rest).length > 0 ? { error: message, details: rest } : { error: message }\n    }\n  }\n  if (typeof body === 'string' && body.length > 0) {\n    return { error: body }\n  }\n  return { error: 'Request failed' }\n}\n\nexport function createAiApiOperationRunner(\n  ctx: AiToolExecutionContext,\n  options: AiApiOperationRunnerOptions = {},\n): AiApiOperationRunner {\n  let manifestPromise: Promise<ApiRouteManifestEntry[]> | null = null\n\n  const loadManifest = async (): Promise<ApiRouteManifestEntry[]> => {\n    if (options.apiRoutes) return options.apiRoutes\n    if (manifestPromise) return manifestPromise\n    const loader = options.loadApiRoutes ?? defaultLoadApiRoutes\n    manifestPromise = loader()\n    try {\n      return await manifestPromise\n    } catch (error) {\n      manifestPromise = null\n      throw error\n    }\n  }\n\n  return {\n    async run<T = unknown>(request: AiApiOperationRequest): Promise<AiApiOperationResponse<T>> {\n      let method: AiApiHttpMethod\n      try {\n        method = normalizeMethod(request.method)\n      } catch (error) {\n        const message = error instanceof Error ? error.message : 'Invalid method'\n        return failure(400, message) as AiApiOperationResponse<T>\n      }\n      const path = normalizePath(request.path)\n\n      let routes: ApiRouteManifestEntry[]\n      try {\n        routes = await loadManifest()\n      } catch (error) {\n        const message = error instanceof Error ? error.message : 'Failed to load API route manifest'\n        return failure(500, `Operation runner manifest unavailable: ${message}`) as AiApiOperationResponse<T>\n      }\n\n      const match = findApiRouteManifestMatch(routes, method, path)\n      if (!match) {\n        return failure(\n          404,\n          `No documented API route matches ${method} ${path}`,\n        ) as AiApiOperationResponse<T>\n      }\n\n      let mod: LoadedRouteModule\n      try {\n        mod = (await match.route.load()) as LoadedRouteModule\n      } catch (error) {\n        const message = error instanceof Error ? error.message : 'Failed to load route module'\n        return failure(500, `Failed to load route module: ${message}`) as AiApiOperationResponse<T>\n      }\n\n      if (!('openApi' in mod) || mod.openApi === undefined || mod.openApi === null) {\n        return failure(\n          501,\n          `Route ${method} ${path} is undocumented (missing openApi export); refusing to call from AI tool`,\n        ) as AiApiOperationResponse<T>\n      }\n\n      const handler = pickHandler(match.route, mod, method)\n      if (!handler) {\n        return failure(\n          405,\n          `Route ${path} does not export a handler for method ${method}`,\n        ) as AiApiOperationResponse<T>\n      }\n\n      const methodMetadata = extractMethodMetadata(mod.metadata, method)\n      const routeFeatures = methodMetadata?.requireFeatures ?? []\n      const isMutation = MUTATION_METHODS.has(method)\n\n      if (isMutation && routeFeatures.length === 0 && !request.allowFeaturelessMutation) {\n        return failure(\n          403,\n          `Mutation route ${method} ${path} declares no requiredFeatures; refusing to call without allowFeaturelessMutation opt-in`,\n        ) as AiApiOperationResponse<T>\n      }\n\n      const toolFeatures = ctx.tool.requiredFeatures ?? []\n      if (routeFeatures.length > 0 && !hasAllFeatures(toolFeatures, routeFeatures)) {\n        return failure(\n          403,\n          `AI tool \"${ctx.tool.name}\" requiredFeatures do not cover route ${method} ${path} requiredFeatures`,\n          { toolFeatures, routeFeatures },\n        ) as AiApiOperationResponse<T>\n      }\n\n      const url = buildUrl(path, request.query)\n      const headers = new Headers()\n      const requestInit: RequestInit = { method, headers }\n      if (request.body !== undefined && method !== 'GET') {\n        headers.set('content-type', 'application/json')\n        requestInit.body = JSON.stringify(request.body)\n      }\n\n      const syntheticRequest = new Request(url, requestInit)\n      attachTrustedAuthContext(syntheticRequest, buildAuthEnvelope(ctx))\n\n      let response: Response\n      try {\n        response = await handler(syntheticRequest, { params: match.params })\n      } catch (error) {\n        const message = error instanceof Error ? error.message : 'Route handler threw'\n        return failure(500, message) as AiApiOperationResponse<T>\n      }\n\n      const status = response.status\n      const body = await readResponseBody(response)\n      if (status >= 200 && status < 300) {\n        return {\n          success: true,\n          statusCode: status,\n          data: body as T,\n        }\n      }\n      const normalized = normalizeError(body)\n      return {\n        success: false,\n        statusCode: status,\n        error: normalized.error,\n        ...(normalized.details !== undefined ? { details: normalized.details } : {}),\n      }\n    },\n  }\n}\n\nasync function defaultLoadApiRoutes(): Promise<ApiRouteManifestEntry[]> {\n  const registered = getApiRouteManifests()\n  if (registered.length === 0) {\n    throw new Error(\n      'No API route manifest registered. Call registerApiRouteManifests(...) at app bootstrap or pass apiRoutes/loadApiRoutes to createAiApiOperationRunner.',\n    )\n  }\n  return registered\n}\n\n"],
+  "mappings": "AAUA;AAAA,EACE;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,sBAAsB;AAK/B,MAAM,mBAAiD,oBAAI,IAAI,CAAC,QAAQ,OAAO,SAAS,QAAQ,CAAC;AAEjG,MAAM,mBAAmB;AA0CzB,SAAS,gBAAgB,QAAiC;AACxD,QAAM,QAAQ,OAAO,YAAY;AACjC,MAAI,UAAU,SAAS,UAAU,UAAU,UAAU,SAAS,UAAU,WAAW,UAAU,UAAU;AACrG,WAAO;AAAA,EACT;AACA,QAAM,IAAI,MAAM,uBAAuB,MAAM,GAAG;AAClD;AAOO,SAAS,cAAc,MAAsB;AAClD,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAC1D,QAAM,UAAU,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI;AACtD,MAAI,MAAM,QAAQ;AAClB,SAAO,MAAM,KAAK,QAAQ,WAAW,MAAM,CAAC,MAAM,GAAc;AAChE,SAAO,QAAQ,MAAM,GAAG,GAAG;AAC7B;AAEA,SAAS,SAAS,MAAc,OAA6C;AAC3E,QAAM,MAAM,IAAI,IAAI,GAAG,gBAAgB,OAAO,cAAc,IAAI,CAAC,EAAE;AACnE,MAAI,OAAO;AACT,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,UAAI,UAAU,QAAQ,UAAU,OAAW;AAC3C,UAAI,aAAa,OAAO,KAAK,OAAO,KAAK,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,KAAyD;AAClF,QAAM,SAAS,IAAI;AACnB,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,MAAM,MAAM,QAAQ,UAAU;AAAA,EACzC;AACA,QAAM,OAAoB;AAAA,IACxB,KAAK;AAAA,IACL;AAAA,IACA,UAAU,IAAI;AAAA,IACd,OAAO,IAAI;AAAA,IACX,OAAO,CAAC;AAAA,IACR,cAAc,IAAI;AAAA,EACpB;AACA,SAAO,EAAE,MAAM,QAAQ,gBAAgB;AACzC;AAEA,SAAS,YAAY,OAA8B,KAAwB,QAAiD;AAC1H,QAAM,SAAS,IAAI,MAAM;AACzB,MAAI,OAAO,WAAW,WAAY,QAAO;AACzC,MAAI,MAAM,SAAS,UAAU;AAC3B,UAAM,WAAW,IAAI,WAAW,IAAI;AACpC,QAAI,OAAO,aAAa,WAAY,QAAO;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,UAAmB,QAAgD;AAChG,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO;AACtD,QAAM,SAAS;AACf,QAAM,YAAY,OAAO,MAAM;AAC/B,QAAM,SAAkC,aAAa,OAAO,cAAc,WACrE,YACD;AACJ,QAAM,SAAyB,CAAC;AAChC,MAAI,OAAO,OAAO,gBAAgB,WAAW;AAC3C,WAAO,cAAc,OAAO;AAAA,EAC9B;AACA,MAAI,MAAM,QAAQ,OAAO,eAAe,GAAG;AACzC,UAAM,WAAW,OAAO,gBAAgB,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;AACxH,QAAI,SAAS,SAAS,EAAG,QAAO,kBAAkB;AAAA,EACpD;AACA,SAAO;AACT;AAEA,eAAe,iBAAiB,KAAiC;AAC/D,QAAM,cAAc,IAAI,QAAQ,IAAI,cAAc,KAAK;AACvD,MAAI,YAAY,SAAS,kBAAkB,GAAG;AAC5C,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI,CAAC,KAAM,QAAO;AAClB,QAAI;AACF,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,QAAQ,YAAoB,OAAe,SAA2C;AAC7F,QAAM,WAAmC,EAAE,SAAS,OAAO,YAAY,MAAM;AAC7E,MAAI,YAAY,OAAW,UAAS,UAAU;AAC9C,SAAO;AACT;AAEA,SAAS,eAAe,MAAqD;AAC3E,MAAI,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AAC5D,UAAM,SAAS;AACf,UAAM,UAAU,OAAO,OAAO,UAAU,WACpC,OAAO,QACP,OAAO,OAAO,YAAY,WACxB,OAAO,UACP;AACN,QAAI,SAAS;AACX,YAAM,EAAE,OAAO,UAAU,SAAS,iBAAiB,GAAG,KAAK,IAAI;AAC/D,WAAK;AACL,WAAK;AACL,aAAO,OAAO,KAAK,IAAI,EAAE,SAAS,IAAI,EAAE,OAAO,SAAS,SAAS,KAAK,IAAI,EAAE,OAAO,QAAQ;AAAA,IAC7F;AAAA,EACF;AACA,MAAI,OAAO,SAAS,YAAY,KAAK,SAAS,GAAG;AAC/C,WAAO,EAAE,OAAO,KAAK;AAAA,EACvB;AACA,SAAO,EAAE,OAAO,iBAAiB;AACnC;AAEO,SAAS,2BACd,KACA,UAAuC,CAAC,GAClB;AACtB,MAAI,kBAA2D;AAE/D,QAAM,eAAe,YAA8C;AACjE,QAAI,QAAQ,UAAW,QAAO,QAAQ;AACtC,QAAI,gBAAiB,QAAO;AAC5B,UAAM,SAAS,QAAQ,iBAAiB;AACxC,sBAAkB,OAAO;AACzB,QAAI;AACF,aAAO,MAAM;AAAA,IACf,SAAS,OAAO;AACd,wBAAkB;AAClB,YAAM;AAAA,IACR;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,IAAiB,SAAoE;AACzF,UAAI;AACJ,UAAI;AACF,iBAAS,gBAAgB,QAAQ,MAAM;AAAA,MACzC,SAAS,OAAO;AACd,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,eAAO,QAAQ,KAAK,OAAO;AAAA,MAC7B;AACA,YAAM,OAAO,cAAc,QAAQ,IAAI;AAEvC,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,aAAa;AAAA,MAC9B,SAAS,OAAO;AACd,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,eAAO,QAAQ,KAAK,0CAA0C,OAAO,EAAE;AAAA,MACzE;AAEA,YAAM,QAAQ,0BAA0B,QAAQ,QAAQ,IAAI;AAC5D,UAAI,CAAC,OAAO;AACV,eAAO;AAAA,UACL;AAAA,UACA,mCAAmC,MAAM,IAAI,IAAI;AAAA,QACnD;AAAA,MACF;AAEA,UAAI;AACJ,UAAI;AACF,cAAO,MAAM,MAAM,MAAM,KAAK;AAAA,MAChC,SAAS,OAAO;AACd,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,eAAO,QAAQ,KAAK,gCAAgC,OAAO,EAAE;AAAA,MAC/D;AAEA,UAAI,EAAE,aAAa,QAAQ,IAAI,YAAY,UAAa,IAAI,YAAY,MAAM;AAC5E,eAAO;AAAA,UACL;AAAA,UACA,SAAS,MAAM,IAAI,IAAI;AAAA,QACzB;AAAA,MACF;AAEA,YAAM,UAAU,YAAY,MAAM,OAAO,KAAK,MAAM;AACpD,UAAI,CAAC,SAAS;AACZ,eAAO;AAAA,UACL;AAAA,UACA,SAAS,IAAI,yCAAyC,MAAM;AAAA,QAC9D;AAAA,MACF;AAEA,YAAM,iBAAiB,sBAAsB,IAAI,UAAU,MAAM;AACjE,YAAM,gBAAgB,gBAAgB,mBAAmB,CAAC;AAC1D,YAAM,aAAa,iBAAiB,IAAI,MAAM;AAE9C,UAAI,cAAc,cAAc,WAAW,KAAK,CAAC,QAAQ,0BAA0B;AACjF,eAAO;AAAA,UACL;AAAA,UACA,kBAAkB,MAAM,IAAI,IAAI;AAAA,QAClC;AAAA,MACF;AAEA,YAAM,eAAe,IAAI,KAAK,oBAAoB,CAAC;AACnD,UAAI,cAAc,SAAS,KAAK,CAAC,eAAe,cAAc,aAAa,GAAG;AAC5E,eAAO;AAAA,UACL;AAAA,UACA,YAAY,IAAI,KAAK,IAAI,yCAAyC,MAAM,IAAI,IAAI;AAAA,UAChF,EAAE,cAAc,cAAc;AAAA,QAChC;AAAA,MACF;AAEA,YAAM,MAAM,SAAS,MAAM,QAAQ,KAAK;AACxC,YAAM,UAAU,IAAI,QAAQ;AAC5B,YAAM,cAA2B,EAAE,QAAQ,QAAQ;AACnD,UAAI,QAAQ,SAAS,UAAa,WAAW,OAAO;AAClD,gBAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,oBAAY,OAAO,KAAK,UAAU,QAAQ,IAAI;AAAA,MAChD;AAEA,YAAM,mBAAmB,IAAI,QAAQ,KAAK,WAAW;AACrD,+BAAyB,kBAAkB,kBAAkB,GAAG,CAAC;AAEjE,UAAI;AACJ,UAAI;AACF,mBAAW,MAAM,QAAQ,kBAAkB,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,MACrE,SAAS,OAAO;AACd,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,eAAO,QAAQ,KAAK,OAAO;AAAA,MAC7B;AAEA,YAAM,SAAS,SAAS;AACxB,YAAM,OAAO,MAAM,iBAAiB,QAAQ;AAC5C,UAAI,UAAU,OAAO,SAAS,KAAK;AACjC,eAAO;AAAA,UACL,SAAS;AAAA,UACT,YAAY;AAAA,UACZ,MAAM;AAAA,QACR;AAAA,MACF;AACA,YAAM,aAAa,eAAe,IAAI;AACtC,aAAO;AAAA,QACL,SAAS;AAAA,QACT,YAAY;AAAA,QACZ,OAAO,WAAW;AAAA,QAClB,GAAI,WAAW,YAAY,SAAY,EAAE,SAAS,WAAW,QAAQ,IAAI,CAAC;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAe,uBAAyD;AACtE,QAAM,aAAa,qBAAqB;AACxC,MAAI,WAAW,WAAW,GAAG;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;",
+  "names": []
+}