@open-mercato/ai-assistant 0.5.1-develop.3036.f02c281f23 → 0.5.1-develop.3045.b4b3320cc2

package/dist/modules/ai_assistant/lib/prepare-mutation.js

@@ -0,0 +1,315 @@
+import { createHash } from "node:crypto";
+import { resolveEffectiveMutationPolicy } from "./agent-policy.js";
+import { AiPendingActionRepository } from "../data/repositories/AiPendingActionRepository.js";
+class AiMutationPreparationError extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "AiMutationPreparationError";
+  }
+}
+const MUTATION_PREVIEW_CARD_COMPONENT_ID = "mutation-preview-card";
+const NO_RESOLVER_SIDE_EFFECTS_MESSAGE = "Tool did not declare a field-diff resolver; action will proceed without a preview.";
+function assertTenantScope(ctx) {
+  if (!ctx.tenantId) {
+    throw new AiMutationPreparationError(
+      "tenant_scope_missing",
+      "prepareMutation requires a tenant-scoped request context."
+    );
+  }
+  return ctx.tenantId;
+}
+function resolveEm(container) {
+  if (!container) {
+    throw new AiMutationPreparationError(
+      "container_missing",
+      "prepareMutation requires an Awilix container to resolve the EntityManager."
+    );
+  }
+  let em = null;
+  try {
+    em = container.resolve("em");
+  } catch {
+    em = null;
+  }
+  if (!em) {
+    throw new AiMutationPreparationError(
+      "em_missing",
+      'prepareMutation could not resolve "em" from the container.'
+    );
+  }
+  return em;
+}
+function toolHandlerContext(ctx) {
+  return {
+    tenantId: ctx.tenantId,
+    organizationId: ctx.organizationId,
+    userId: ctx.userId,
+    container: ctx.container,
+    userFeatures: ctx.features,
+    isSuperAdmin: ctx.isSuperAdmin
+  };
+}
+function safeStringify(value) {
+  const seen = /* @__PURE__ */ new WeakSet();
+  return JSON.stringify(value, (_key, raw) => {
+    if (raw && typeof raw === "object") {
+      if (seen.has(raw)) return "[Circular]";
+      seen.add(raw);
+      const entries = Object.entries(raw);
+      entries.sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+      return entries.reduce((acc, [k, v]) => {
+        acc[k] = v;
+        return acc;
+      }, {});
+    }
+    return raw;
+  });
+}
+function computeMutationIdempotencyKey(input) {
+  const canonical = safeStringify({
+    tenant: input.tenantId,
+    org: input.organizationId ?? null,
+    agent: input.agentId,
+    conversation: input.conversationId ?? null,
+    tool: input.toolName,
+    input: input.normalizedInput ?? {}
+  });
+  return createHash("sha256").update(canonical).digest("hex");
+}
+function computeFieldDiff(before, after) {
+  const diff = [];
+  const keys = /* @__PURE__ */ new Set([
+    ...Object.keys(before ?? {}),
+    ...Object.keys(after ?? {})
+  ]);
+  for (const field of keys) {
+    const beforeValue = before ? before[field] : void 0;
+    const afterValue = after ? after[field] : void 0;
+    if (!Object.is(beforeValue, afterValue) && safeStringify(beforeValue) !== safeStringify(afterValue)) {
+      diff.push({ field, before: beforeValue, after: afterValue });
+    }
+  }
+  return diff;
+}
+function extractPatchFromArgs(args) {
+  const raw = args?.patch;
+  if (raw && typeof raw === "object" && !Array.isArray(raw)) {
+    return raw;
+  }
+  const envelope = /* @__PURE__ */ new Set([
+    "id",
+    "recordId",
+    "records",
+    "attachmentIds",
+    "_sessionToken"
+  ]);
+  const reduced = {};
+  for (const [key, value] of Object.entries(args ?? {})) {
+    if (envelope.has(key)) continue;
+    reduced[key] = value;
+  }
+  return reduced;
+}
+function matchBatchPatch(args, recordId) {
+  const rawList = args?.records;
+  if (Array.isArray(rawList)) {
+    const match = rawList.find((entry) => {
+      if (!entry || typeof entry !== "object") return false;
+      const candidate = entry;
+      return candidate.recordId === recordId || candidate.id === recordId;
+    });
+    if (match && typeof match === "object") {
+      const patch = match.patch;
+      if (patch && typeof patch === "object" && !Array.isArray(patch)) {
+        return patch;
+      }
+      const envelope = /* @__PURE__ */ new Set(["recordId", "id"]);
+      const reduced = {};
+      for (const [key, value] of Object.entries(match)) {
+        if (envelope.has(key)) continue;
+        reduced[key] = value;
+      }
+      return reduced;
+    }
+  }
+  return {};
+}
+function normalizeAttachmentIds(args) {
+  const raw = args?.attachmentIds;
+  if (!Array.isArray(raw)) return [];
+  return raw.filter((value) => typeof value === "string" && value.length > 0);
+}
+async function buildSingleRecordDiff(tool, input, ctx) {
+  const resolver = tool.loadBeforeRecord;
+  if (!resolver) {
+    console.warn(
+      `[AI Agents] prepareMutation: tool "${tool.name}" declared isMutation=true but no loadBeforeRecord resolver; shipping empty fieldDiff.`
+    );
+    return {
+      fieldDiff: [],
+      targetEntityType: null,
+      targetRecordId: null,
+      recordVersion: null,
+      sideEffectsSummary: NO_RESOLVER_SIDE_EFFECTS_MESSAGE
+    };
+  }
+  const handlerContext = toolHandlerContext(ctx);
+  const before = await resolver(
+    input.toolCallArgs,
+    handlerContext
+  );
+  if (!before) {
+    return {
+      fieldDiff: [],
+      targetEntityType: null,
+      targetRecordId: null,
+      recordVersion: null,
+      sideEffectsSummary: null
+    };
+  }
+  const patch = extractPatchFromArgs(input.toolCallArgs);
+  const fieldDiff = computeFieldDiff(before.before, patch);
+  return {
+    fieldDiff,
+    targetEntityType: before.entityType,
+    targetRecordId: before.recordId,
+    recordVersion: before.recordVersion,
+    sideEffectsSummary: null
+  };
+}
+async function buildBatchRecords(tool, input, ctx) {
+  const resolver = tool.loadBeforeRecords;
+  if (!resolver) {
+    console.warn(
+      `[AI Agents] prepareMutation: bulk tool "${tool.name}" declared isMutation=true but no loadBeforeRecords resolver; shipping empty records[].`
+    );
+    return {
+      records: null,
+      targetEntityType: null,
+      sideEffectsSummary: NO_RESOLVER_SIDE_EFFECTS_MESSAGE
+    };
+  }
+  const handlerContext = toolHandlerContext(ctx);
+  const rows = await resolver(
+    input.toolCallArgs,
+    handlerContext
+  );
+  if (!Array.isArray(rows) || rows.length === 0) {
+    return {
+      records: null,
+      targetEntityType: null,
+      sideEffectsSummary: null
+    };
+  }
+  const diffs = rows.map((row) => {
+    const patch = matchBatchPatch(input.toolCallArgs, row.recordId);
+    return {
+      recordId: row.recordId,
+      entityType: row.entityType,
+      label: row.label,
+      fieldDiff: computeFieldDiff(row.before, patch),
+      recordVersion: row.recordVersion ?? null
+    };
+  });
+  const [firstEntity] = rows;
+  return {
+    records: diffs,
+    targetEntityType: firstEntity ? firstEntity.entityType : null,
+    sideEffectsSummary: null
+  };
+}
+async function prepareMutation(input, ctx) {
+  const { agent, tool } = input;
+  if (tool.isMutation !== true) {
+    throw new AiMutationPreparationError(
+      "not_a_mutation_tool",
+      `Tool "${tool.name}" is not a mutation tool; prepareMutation should not be invoked.`
+    );
+  }
+  const effectivePolicy = resolveEffectiveMutationPolicy(
+    agent.mutationPolicy,
+    input.mutationPolicyOverride ?? null,
+    agent.id
+  );
+  if (effectivePolicy === "read-only") {
+    throw new AiMutationPreparationError(
+      "read_only_agent",
+      `Agent "${agent.id}" has effective mutationPolicy=read-only; mutation tool "${tool.name}" cannot be prepared.`
+    );
+  }
+  const tenantId = assertTenantScope(ctx);
+  const em = resolveEm(ctx.container);
+  const repo = new AiPendingActionRepository(em);
+  const isBulk = tool.isBulk === true;
+  let fieldDiff = [];
+  let records = null;
+  let targetEntityType = null;
+  let targetRecordId = null;
+  let recordVersion = null;
+  let sideEffectsSummary = null;
+  if (isBulk) {
+    const batch = await buildBatchRecords(tool, input, ctx);
+    records = batch.records;
+    targetEntityType = batch.targetEntityType;
+    sideEffectsSummary = batch.sideEffectsSummary;
+  } else {
+    const single = await buildSingleRecordDiff(tool, input, ctx);
+    fieldDiff = single.fieldDiff;
+    targetEntityType = single.targetEntityType;
+    targetRecordId = single.targetRecordId;
+    recordVersion = single.recordVersion;
+    sideEffectsSummary = single.sideEffectsSummary;
+  }
+  const normalizedInput = input.toolCallArgs ?? {};
+  const conversationId = input.conversationId ?? null;
+  const idempotencyKey = computeMutationIdempotencyKey({
+    tenantId,
+    organizationId: ctx.organizationId ?? null,
+    agentId: agent.id,
+    conversationId,
+    toolName: tool.name,
+    normalizedInput
+  });
+  const pendingAction = await repo.create(
+    {
+      agentId: agent.id,
+      toolName: tool.name,
+      idempotencyKey,
+      createdByUserId: ctx.userId,
+      normalizedInput,
+      conversationId,
+      targetEntityType,
+      targetRecordId,
+      fieldDiff,
+      records,
+      sideEffectsSummary,
+      recordVersion,
+      attachmentIds: normalizeAttachmentIds(normalizedInput),
+      now: input.now
+    },
+    {
+      tenantId,
+      organizationId: ctx.organizationId ?? null,
+      userId: ctx.userId
+    }
+  );
+  const uiPart = {
+    componentId: MUTATION_PREVIEW_CARD_COMPONENT_ID,
+    props: {
+      pendingActionId: pendingAction.id,
+      expiresAt: pendingAction.expiresAt.toISOString(),
+      ...records ? { records } : { fieldDiff },
+      ...sideEffectsSummary ? { sideEffectsSummary } : {}
+    }
+  };
+  return { uiPart, pendingAction };
+}
+const MUTATION_PREVIEW_CARD_COMPONENT = MUTATION_PREVIEW_CARD_COMPONENT_ID;
+export {
+  AiMutationPreparationError,
+  MUTATION_PREVIEW_CARD_COMPONENT,
+  computeMutationIdempotencyKey,
+  prepareMutation
+};
+//# sourceMappingURL=prepare-mutation.js.map

package/dist/modules/ai_assistant/lib/prepare-mutation.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/prepare-mutation.ts"],
+  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport type { AwilixContainer } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AiAgentDefinition, AiAgentMutationPolicy } from './ai-agent-definition'\nimport type { AiChatRequestContext, AiUiPart } from './attachment-bridge-types'\nimport type {\n  AiToolDefinition,\n  AiToolLoadBeforeRecord,\n  AiToolLoadBeforeSingleRecord,\n  McpToolContext,\n} from './types'\nimport { resolveEffectiveMutationPolicy } from './agent-policy'\nimport { AiPendingActionRepository } from '../data/repositories/AiPendingActionRepository'\nimport type { AiPendingAction } from '../data/entities'\nimport type {\n  AiPendingActionFieldDiff,\n  AiPendingActionRecordDiff,\n} from './pending-action-types'\n\n/**\n * Structured error raised by {@link prepareMutation}. Callers (today the\n * agent-runtime tool wrapper installed by `resolveAiAgentTools`) turn this\n * into a tool-call failure that the model surfaces back to the user without\n * leaking internals. The runtime NEVER reaches this helper when the agent\n * is declared read-only \u2014 the policy gate rejects the tool call upstream \u2014\n * but we keep the fail-closed check as a defensive guard.\n */\nexport class AiMutationPreparationError extends Error {\n  constructor(\n    public readonly code:\n      | 'not_a_mutation_tool'\n      | 'read_only_agent'\n      | 'tenant_scope_missing'\n      | 'container_missing'\n      | 'em_missing',\n    message: string,\n  ) {\n    super(message)\n    this.name = 'AiMutationPreparationError'\n  }\n}\n\nexport interface PrepareMutationInput {\n  agent: AiAgentDefinition\n  tool: AiToolDefinition\n  toolCallArgs: Record<string, unknown>\n  conversationId?: string | null\n  /**\n   * Optional downgrade the caller already resolved (mirror of\n   * `resolveAiAgentTools({ mutationPolicyOverride })`). When omitted, the\n   * agent's code-declared policy stands alone.\n   */\n  mutationPolicyOverride?: AiAgentMutationPolicy | null\n  /**\n   * Deterministic clock hook for tests. Defaults to `new Date()`.\n   */\n  now?: Date\n}\n\nexport interface PrepareMutationContext extends AiChatRequestContext {\n  container: AwilixContainer\n}\n\nexport interface PrepareMutationResult {\n  uiPart: AiUiPart\n  pendingAction: AiPendingAction\n}\n\nconst MUTATION_PREVIEW_CARD_COMPONENT_ID = 'mutation-preview-card'\n\nconst NO_RESOLVER_SIDE_EFFECTS_MESSAGE =\n  'Tool did not declare a field-diff resolver; action will proceed without a preview.'\n\nfunction assertTenantScope(ctx: PrepareMutationContext): string {\n  if (!ctx.tenantId) {\n    throw new AiMutationPreparationError(\n      'tenant_scope_missing',\n      'prepareMutation requires a tenant-scoped request context.',\n    )\n  }\n  return ctx.tenantId\n}\n\nfunction resolveEm(container: AwilixContainer): EntityManager {\n  if (!container) {\n    throw new AiMutationPreparationError(\n      'container_missing',\n      'prepareMutation requires an Awilix container to resolve the EntityManager.',\n    )\n  }\n  let em: EntityManager | null = null\n  try {\n    em = container.resolve<EntityManager>('em')\n  } catch {\n    em = null\n  }\n  if (!em) {\n    throw new AiMutationPreparationError(\n      'em_missing',\n      'prepareMutation could not resolve \"em\" from the container.',\n    )\n  }\n  return em\n}\n\nfunction toolHandlerContext(ctx: PrepareMutationContext): McpToolContext {\n  return {\n    tenantId: ctx.tenantId,\n    organizationId: ctx.organizationId,\n    userId: ctx.userId,\n    container: ctx.container,\n    userFeatures: ctx.features,\n    isSuperAdmin: ctx.isSuperAdmin,\n  }\n}\n\nfunction safeStringify(value: unknown): string {\n  const seen = new WeakSet<object>()\n  return JSON.stringify(value, (_key, raw) => {\n    if (raw && typeof raw === 'object') {\n      if (seen.has(raw as object)) return '[Circular]'\n      seen.add(raw as object)\n      const entries = Object.entries(raw as Record<string, unknown>)\n      entries.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))\n      return entries.reduce<Record<string, unknown>>((acc, [k, v]) => {\n        acc[k] = v\n        return acc\n      }, {})\n    }\n    return raw\n  })\n}\n\n/**\n * Hashes `(tenantId, orgId, agentId, conversationId, toolName, normalizedInput)`\n * into a stable SHA-256 digest so that retries of the same tool call with the\n * same payload collapse to a single `AiPendingAction` row inside the TTL\n * window. The input is normalized through `safeStringify` to make object key\n * order irrelevant (spec \u00A78 rule `idempotencyKey prevents double-submission`).\n * Attachments are NOT included \u2014 the attachment set is captured separately on\n * the pending row so that re-uploading the same file set with a different\n * tool-call object never accidentally collides.\n */\nexport function computeMutationIdempotencyKey(input: {\n  tenantId: string\n  organizationId: string | null\n  agentId: string\n  conversationId: string | null\n  toolName: string\n  normalizedInput: Record<string, unknown>\n}): string {\n  const canonical = safeStringify({\n    tenant: input.tenantId,\n    org: input.organizationId ?? null,\n    agent: input.agentId,\n    conversation: input.conversationId ?? null,\n    tool: input.toolName,\n    input: input.normalizedInput ?? {},\n  })\n  return createHash('sha256').update(canonical).digest('hex')\n}\n\nfunction computeFieldDiff(\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n): AiPendingActionFieldDiff[] {\n  const diff: AiPendingActionFieldDiff[] = []\n  const keys = new Set<string>([\n    ...Object.keys(before ?? {}),\n    ...Object.keys(after ?? {}),\n  ])\n  for (const field of keys) {\n    const beforeValue = before ? before[field] : undefined\n    const afterValue = after ? after[field] : undefined\n    if (!Object.is(beforeValue, afterValue) && safeStringify(beforeValue) !== safeStringify(afterValue)) {\n      diff.push({ field, before: beforeValue, after: afterValue })\n    }\n  }\n  return diff\n}\n\nfunction extractPatchFromArgs(\n  args: Record<string, unknown>,\n): Record<string, unknown> {\n  const raw = args?.patch\n  if (raw && typeof raw === 'object' && !Array.isArray(raw)) {\n    return raw as Record<string, unknown>\n  }\n  // Fall back: treat the whole args object (minus well-known envelope keys)\n  // as the patch. This preserves compatibility with tools whose schema is\n  // flat (`{ productId, name }`) rather than nested (`{ productId, patch }`).\n  const envelope = new Set([\n    'id',\n    'recordId',\n    'records',\n    'attachmentIds',\n    '_sessionToken',\n  ])\n  const reduced: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(args ?? {})) {\n    if (envelope.has(key)) continue\n    reduced[key] = value\n  }\n  return reduced\n}\n\nfunction matchBatchPatch(\n  args: Record<string, unknown>,\n  recordId: string,\n): Record<string, unknown> {\n  const rawList = args?.records\n  if (Array.isArray(rawList)) {\n    const match = rawList.find((entry) => {\n      if (!entry || typeof entry !== 'object') return false\n      const candidate = entry as Record<string, unknown>\n      return candidate.recordId === recordId || candidate.id === recordId\n    })\n    if (match && typeof match === 'object') {\n      const patch = (match as Record<string, unknown>).patch\n      if (patch && typeof patch === 'object' && !Array.isArray(patch)) {\n        return patch as Record<string, unknown>\n      }\n      const envelope = new Set(['recordId', 'id'])\n      const reduced: Record<string, unknown> = {}\n      for (const [key, value] of Object.entries(match as Record<string, unknown>)) {\n        if (envelope.has(key)) continue\n        reduced[key] = value\n      }\n      return reduced\n    }\n  }\n  return {}\n}\n\nfunction normalizeAttachmentIds(args: Record<string, unknown>): string[] {\n  const raw = args?.attachmentIds\n  if (!Array.isArray(raw)) return []\n  return raw.filter((value): value is string => typeof value === 'string' && value.length > 0)\n}\n\nasync function buildSingleRecordDiff(\n  tool: AiToolDefinition,\n  input: PrepareMutationInput,\n  ctx: PrepareMutationContext,\n): Promise<{\n  fieldDiff: AiPendingActionFieldDiff[]\n  targetEntityType: string | null\n  targetRecordId: string | null\n  recordVersion: string | null\n  sideEffectsSummary: string | null\n}> {\n  const resolver = tool.loadBeforeRecord\n  if (!resolver) {\n    console.warn(\n      `[AI Agents] prepareMutation: tool \"${tool.name}\" declared isMutation=true but no loadBeforeRecord resolver; shipping empty fieldDiff.`,\n    )\n    return {\n      fieldDiff: [],\n      targetEntityType: null,\n      targetRecordId: null,\n      recordVersion: null,\n      sideEffectsSummary: NO_RESOLVER_SIDE_EFFECTS_MESSAGE,\n    }\n  }\n  const handlerContext = toolHandlerContext(ctx)\n  const before: AiToolLoadBeforeSingleRecord | null = await resolver(\n    input.toolCallArgs as never,\n    handlerContext,\n  )\n  if (!before) {\n    return {\n      fieldDiff: [],\n      targetEntityType: null,\n      targetRecordId: null,\n      recordVersion: null,\n      sideEffectsSummary: null,\n    }\n  }\n  const patch = extractPatchFromArgs(input.toolCallArgs)\n  const fieldDiff = computeFieldDiff(before.before, patch)\n  return {\n    fieldDiff,\n    targetEntityType: before.entityType,\n    targetRecordId: before.recordId,\n    recordVersion: before.recordVersion,\n    sideEffectsSummary: null,\n  }\n}\n\nasync function buildBatchRecords(\n  tool: AiToolDefinition,\n  input: PrepareMutationInput,\n  ctx: PrepareMutationContext,\n): Promise<{\n  records: AiPendingActionRecordDiff[] | null\n  targetEntityType: string | null\n  sideEffectsSummary: string | null\n}> {\n  const resolver = tool.loadBeforeRecords\n  if (!resolver) {\n    console.warn(\n      `[AI Agents] prepareMutation: bulk tool \"${tool.name}\" declared isMutation=true but no loadBeforeRecords resolver; shipping empty records[].`,\n    )\n    return {\n      records: null,\n      targetEntityType: null,\n      sideEffectsSummary: NO_RESOLVER_SIDE_EFFECTS_MESSAGE,\n    }\n  }\n  const handlerContext = toolHandlerContext(ctx)\n  const rows: AiToolLoadBeforeRecord[] = await resolver(\n    input.toolCallArgs as never,\n    handlerContext,\n  )\n  if (!Array.isArray(rows) || rows.length === 0) {\n    return {\n      records: null,\n      targetEntityType: null,\n      sideEffectsSummary: null,\n    }\n  }\n  const diffs: AiPendingActionRecordDiff[] = rows.map((row) => {\n    const patch = matchBatchPatch(input.toolCallArgs, row.recordId)\n    return {\n      recordId: row.recordId,\n      entityType: row.entityType,\n      label: row.label,\n      fieldDiff: computeFieldDiff(row.before, patch),\n      recordVersion: row.recordVersion ?? null,\n    }\n  })\n  const [firstEntity] = rows\n  return {\n    records: diffs,\n    targetEntityType: firstEntity ? firstEntity.entityType : null,\n    sideEffectsSummary: null,\n  }\n}\n\n/**\n * Intercepts a mutation tool call and turns it into an `AiPendingAction` +\n * `mutation-preview-card` UI part (spec Phase 3 WS-C \u00A79). The caller MUST\n * have already confirmed the agent's effective `mutationPolicy` is NOT\n * `read-only`; this helper repeats the check defensively because skipping it\n * would be a policy-bypass.\n *\n * The tool handler is NEVER invoked by this function \u2014 the write is\n * short-circuited and only runs from the Step 5.8 confirm route. See the\n * unit test `does not call the tool handler` for the guard.\n */\nexport async function prepareMutation(\n  input: PrepareMutationInput,\n  ctx: PrepareMutationContext,\n): Promise<PrepareMutationResult> {\n  const { agent, tool } = input\n  if (tool.isMutation !== true) {\n    throw new AiMutationPreparationError(\n      'not_a_mutation_tool',\n      `Tool \"${tool.name}\" is not a mutation tool; prepareMutation should not be invoked.`,\n    )\n  }\n  const effectivePolicy = resolveEffectiveMutationPolicy(\n    agent.mutationPolicy,\n    input.mutationPolicyOverride ?? null,\n    agent.id,\n  )\n  if (effectivePolicy === 'read-only') {\n    throw new AiMutationPreparationError(\n      'read_only_agent',\n      `Agent \"${agent.id}\" has effective mutationPolicy=read-only; mutation tool \"${tool.name}\" cannot be prepared.`,\n    )\n  }\n\n  const tenantId = assertTenantScope(ctx)\n  const em = resolveEm(ctx.container)\n  const repo = new AiPendingActionRepository(em)\n\n  const isBulk = tool.isBulk === true\n  let fieldDiff: AiPendingActionFieldDiff[] = []\n  let records: AiPendingActionRecordDiff[] | null = null\n  let targetEntityType: string | null = null\n  let targetRecordId: string | null = null\n  let recordVersion: string | null = null\n  let sideEffectsSummary: string | null = null\n\n  if (isBulk) {\n    const batch = await buildBatchRecords(tool, input, ctx)\n    records = batch.records\n    targetEntityType = batch.targetEntityType\n    sideEffectsSummary = batch.sideEffectsSummary\n  } else {\n    const single = await buildSingleRecordDiff(tool, input, ctx)\n    fieldDiff = single.fieldDiff\n    targetEntityType = single.targetEntityType\n    targetRecordId = single.targetRecordId\n    recordVersion = single.recordVersion\n    sideEffectsSummary = single.sideEffectsSummary\n  }\n\n  const normalizedInput = input.toolCallArgs ?? {}\n  const conversationId = input.conversationId ?? null\n  const idempotencyKey = computeMutationIdempotencyKey({\n    tenantId,\n    organizationId: ctx.organizationId ?? null,\n    agentId: agent.id,\n    conversationId,\n    toolName: tool.name,\n    normalizedInput,\n  })\n\n  const pendingAction = await repo.create(\n    {\n      agentId: agent.id,\n      toolName: tool.name,\n      idempotencyKey,\n      createdByUserId: ctx.userId,\n      normalizedInput,\n      conversationId,\n      targetEntityType,\n      targetRecordId,\n      fieldDiff,\n      records,\n      sideEffectsSummary,\n      recordVersion,\n      attachmentIds: normalizeAttachmentIds(normalizedInput),\n      now: input.now,\n    },\n    {\n      tenantId,\n      organizationId: ctx.organizationId ?? null,\n      userId: ctx.userId,\n    },\n  )\n\n  const uiPart: AiUiPart = {\n    componentId: MUTATION_PREVIEW_CARD_COMPONENT_ID,\n    props: {\n      pendingActionId: pendingAction.id,\n      expiresAt: pendingAction.expiresAt.toISOString(),\n      ...(records ? { records } : { fieldDiff }),\n      ...(sideEffectsSummary ? { sideEffectsSummary } : {}),\n    },\n  }\n\n  return { uiPart, pendingAction }\n}\n\nexport const MUTATION_PREVIEW_CARD_COMPONENT = MUTATION_PREVIEW_CARD_COMPONENT_ID\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAW3B,SAAS,sCAAsC;AAC/C,SAAS,iCAAiC;AAenC,MAAM,mCAAmC,MAAM;AAAA,EACpD,YACkB,MAMhB,SACA;AACA,UAAM,OAAO;AARG;AAShB,SAAK,OAAO;AAAA,EACd;AACF;AA4BA,MAAM,qCAAqC;AAE3C,MAAM,mCACJ;AAEF,SAAS,kBAAkB,KAAqC;AAC9D,MAAI,CAAC,IAAI,UAAU;AACjB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI;AACb;AAEA,SAAS,UAAU,WAA2C;AAC5D,MAAI,CAAC,WAAW;AACd,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAA2B;AAC/B,MAAI;AACF,SAAK,UAAU,QAAuB,IAAI;AAAA,EAC5C,QAAQ;AACN,SAAK;AAAA,EACP;AACA,MAAI,CAAC,IAAI;AACP,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,KAA6C;AACvE,SAAO;AAAA,IACL,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,IACpB,QAAQ,IAAI;AAAA,IACZ,WAAW,IAAI;AAAA,IACf,cAAc,IAAI;AAAA,IAClB,cAAc,IAAI;AAAA,EACpB;AACF;AAEA,SAAS,cAAc,OAAwB;AAC7C,QAAM,OAAO,oBAAI,QAAgB;AACjC,SAAO,KAAK,UAAU,OAAO,CAAC,MAAM,QAAQ;AAC1C,QAAI,OAAO,OAAO,QAAQ,UAAU;AAClC,UAAI,KAAK,IAAI,GAAa,EAAG,QAAO;AACpC,WAAK,IAAI,GAAa;AACtB,YAAM,UAAU,OAAO,QAAQ,GAA8B;AAC7D,cAAQ,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE;AACvD,aAAO,QAAQ,OAAgC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM;AAC9D,YAAI,CAAC,IAAI;AACT,eAAO;AAAA,MACT,GAAG,CAAC,CAAC;AAAA,IACP;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAYO,SAAS,8BAA8B,OAOnC;AACT,QAAM,YAAY,cAAc;AAAA,IAC9B,QAAQ,MAAM;AAAA,IACd,KAAK,MAAM,kBAAkB;AAAA,IAC7B,OAAO,MAAM;AAAA,IACb,cAAc,MAAM,kBAAkB;AAAA,IACtC,MAAM,MAAM;AAAA,IACZ,OAAO,MAAM,mBAAmB,CAAC;AAAA,EACnC,CAAC;AACD,SAAO,WAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK;AAC5D;AAEA,SAAS,iBACP,QACA,OAC4B;AAC5B,QAAM,OAAmC,CAAC;AAC1C,QAAM,OAAO,oBAAI,IAAY;AAAA,IAC3B,GAAG,OAAO,KAAK,UAAU,CAAC,CAAC;AAAA,IAC3B,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC;AAAA,EAC5B,CAAC;AACD,aAAW,SAAS,MAAM;AACxB,UAAM,cAAc,SAAS,OAAO,KAAK,IAAI;AAC7C,UAAM,aAAa,QAAQ,MAAM,KAAK,IAAI;AAC1C,QAAI,CAAC,OAAO,GAAG,aAAa,UAAU,KAAK,cAAc,WAAW,MAAM,cAAc,UAAU,GAAG;AACnG,WAAK,KAAK,EAAE,OAAO,QAAQ,aAAa,OAAO,WAAW,CAAC;AAAA,IAC7D;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,qBACP,MACyB;AACzB,QAAM,MAAM,MAAM;AAClB,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,GAAG,GAAG;AACzD,WAAO;AAAA,EACT;AAIA,QAAM,WAAW,oBAAI,IAAI;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,UAAmC,CAAC;AAC1C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,CAAC,CAAC,GAAG;AACrD,QAAI,SAAS,IAAI,GAAG,EAAG;AACvB,YAAQ,GAAG,IAAI;AAAA,EACjB;AACA,SAAO;AACT;AAEA,SAAS,gBACP,MACA,UACyB;AACzB,QAAM,UAAU,MAAM;AACtB,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,UAAM,QAAQ,QAAQ,KAAK,CAAC,UAAU;AACpC,UAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,YAAM,YAAY;AAClB,aAAO,UAAU,aAAa,YAAY,UAAU,OAAO;AAAA,IAC7D,CAAC;AACD,QAAI,SAAS,OAAO,UAAU,UAAU;AACtC,YAAM,QAAS,MAAkC;AACjD,UAAI,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG;AAC/D,eAAO;AAAA,MACT;AACA,YAAM,WAAW,oBAAI,IAAI,CAAC,YAAY,IAAI,CAAC;AAC3C,YAAM,UAAmC,CAAC;AAC1C,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAgC,GAAG;AAC3E,YAAI,SAAS,IAAI,GAAG,EAAG;AACvB,gBAAQ,GAAG,IAAI;AAAA,MACjB;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAEA,SAAS,uBAAuB,MAAyC;AACvE,QAAM,MAAM,MAAM;AAClB,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,SAAO,IAAI,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;AAC7F;AAEA,eAAe,sBACb,MACA,OACA,KAOC;AACD,QAAM,WAAW,KAAK;AACtB,MAAI,CAAC,UAAU;AACb,YAAQ;AAAA,MACN,sCAAsC,KAAK,IAAI;AAAA,IACjD;AACA,WAAO;AAAA,MACL,WAAW,CAAC;AAAA,MACZ,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,oBAAoB;AAAA,IACtB;AAAA,EACF;AACA,QAAM,iBAAiB,mBAAmB,GAAG;AAC7C,QAAM,SAA8C,MAAM;AAAA,IACxD,MAAM;AAAA,IACN;AAAA,EACF;AACA,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,WAAW,CAAC;AAAA,MACZ,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,oBAAoB;AAAA,IACtB;AAAA,EACF;AACA,QAAM,QAAQ,qBAAqB,MAAM,YAAY;AACrD,QAAM,YAAY,iBAAiB,OAAO,QAAQ,KAAK;AACvD,SAAO;AAAA,IACL;AAAA,IACA,kBAAkB,OAAO;AAAA,IACzB,gBAAgB,OAAO;AAAA,IACvB,eAAe,OAAO;AAAA,IACtB,oBAAoB;AAAA,EACtB;AACF;AAEA,eAAe,kBACb,MACA,OACA,KAKC;AACD,QAAM,WAAW,KAAK;AACtB,MAAI,CAAC,UAAU;AACb,YAAQ;AAAA,MACN,2CAA2C,KAAK,IAAI;AAAA,IACtD;AACA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,oBAAoB;AAAA,IACtB;AAAA,EACF;AACA,QAAM,iBAAiB,mBAAmB,GAAG;AAC7C,QAAM,OAAiC,MAAM;AAAA,IAC3C,MAAM;AAAA,IACN;AAAA,EACF;AACA,MAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,KAAK,WAAW,GAAG;AAC7C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,oBAAoB;AAAA,IACtB;AAAA,EACF;AACA,QAAM,QAAqC,KAAK,IAAI,CAAC,QAAQ;AAC3D,UAAM,QAAQ,gBAAgB,MAAM,cAAc,IAAI,QAAQ;AAC9D,WAAO;AAAA,MACL,UAAU,IAAI;AAAA,MACd,YAAY,IAAI;AAAA,MAChB,OAAO,IAAI;AAAA,MACX,WAAW,iBAAiB,IAAI,QAAQ,KAAK;AAAA,MAC7C,eAAe,IAAI,iBAAiB;AAAA,IACtC;AAAA,EACF,CAAC;AACD,QAAM,CAAC,WAAW,IAAI;AACtB,SAAO;AAAA,IACL,SAAS;AAAA,IACT,kBAAkB,cAAc,YAAY,aAAa;AAAA,IACzD,oBAAoB;AAAA,EACtB;AACF;AAaA,eAAsB,gBACpB,OACA,KACgC;AAChC,QAAM,EAAE,OAAO,KAAK,IAAI;AACxB,MAAI,KAAK,eAAe,MAAM;AAC5B,UAAM,IAAI;AAAA,MACR;AAAA,MACA,SAAS,KAAK,IAAI;AAAA,IACpB;AAAA,EACF;AACA,QAAM,kBAAkB;AAAA,IACtB,MAAM;AAAA,IACN,MAAM,0BAA0B;AAAA,IAChC,MAAM;AAAA,EACR;AACA,MAAI,oBAAoB,aAAa;AACnC,UAAM,IAAI;AAAA,MACR;AAAA,MACA,UAAU,MAAM,EAAE,4DAA4D,KAAK,IAAI;AAAA,IACzF;AAAA,EACF;AAEA,QAAM,WAAW,kBAAkB,GAAG;AACtC,QAAM,KAAK,UAAU,IAAI,SAAS;AAClC,QAAM,OAAO,IAAI,0BAA0B,EAAE;AAE7C,QAAM,SAAS,KAAK,WAAW;AAC/B,MAAI,YAAwC,CAAC;AAC7C,MAAI,UAA8C;AAClD,MAAI,mBAAkC;AACtC,MAAI,iBAAgC;AACpC,MAAI,gBAA+B;AACnC,MAAI,qBAAoC;AAExC,MAAI,QAAQ;AACV,UAAM,QAAQ,MAAM,kBAAkB,MAAM,OAAO,GAAG;AACtD,cAAU,MAAM;AAChB,uBAAmB,MAAM;AACzB,yBAAqB,MAAM;AAAA,EAC7B,OAAO;AACL,UAAM,SAAS,MAAM,sBAAsB,MAAM,OAAO,GAAG;AAC3D,gBAAY,OAAO;AACnB,uBAAmB,OAAO;AAC1B,qBAAiB,OAAO;AACxB,oBAAgB,OAAO;AACvB,yBAAqB,OAAO;AAAA,EAC9B;AAEA,QAAM,kBAAkB,MAAM,gBAAgB,CAAC;AAC/C,QAAM,iBAAiB,MAAM,kBAAkB;AAC/C,QAAM,iBAAiB,8BAA8B;AAAA,IACnD;AAAA,IACA,gBAAgB,IAAI,kBAAkB;AAAA,IACtC,SAAS,MAAM;AAAA,IACf;AAAA,IACA,UAAU,KAAK;AAAA,IACf;AAAA,EACF,CAAC;AAED,QAAM,gBAAgB,MAAM,KAAK;AAAA,IAC/B;AAAA,MACE,SAAS,MAAM;AAAA,MACf,UAAU,KAAK;AAAA,MACf;AAAA,MACA,iBAAiB,IAAI;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe,uBAAuB,eAAe;AAAA,MACrD,KAAK,MAAM;AAAA,IACb;AAAA,IACA;AAAA,MACE;AAAA,MACA,gBAAgB,IAAI,kBAAkB;AAAA,MACtC,QAAQ,IAAI;AAAA,IACd;AAAA,EACF;AAEA,QAAM,SAAmB;AAAA,IACvB,aAAa;AAAA,IACb,OAAO;AAAA,MACL,iBAAiB,cAAc;AAAA,MAC/B,WAAW,cAAc,UAAU,YAAY;AAAA,MAC/C,GAAI,UAAU,EAAE,QAAQ,IAAI,EAAE,UAAU;AAAA,MACxC,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,IACrD;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,cAAc;AACjC;AAEO,MAAM,kCAAkC;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/prompt-composition-types.js

@@ -0,0 +1,7 @@
+function definePromptTemplate(template) {
+  return template;
+}
+export {
+  definePromptTemplate
+};
+//# sourceMappingURL=prompt-composition-types.js.map

package/dist/modules/ai_assistant/lib/prompt-composition-types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/prompt-composition-types.ts"],
+  "sourcesContent": ["export type PromptSectionName =\n  | 'role'\n  | 'scope'\n  | 'data'\n  | 'tools'\n  | 'attachments'\n  | 'mutationPolicy'\n  | 'responseStyle'\n  | 'overrides'\n\nexport interface PromptSection {\n  name: PromptSectionName\n  content: string\n  order?: number\n}\n\nexport interface PromptTemplate {\n  id: string\n  sections: PromptSection[]\n}\n\nexport function definePromptTemplate(template: PromptTemplate): PromptTemplate {\n  return template\n}\n"],
+  "mappings": "AAqBO,SAAS,qBAAqB,UAA0C;AAC7E,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/prompt-override-merge.js

@@ -0,0 +1,175 @@
+const CANONICAL_PROMPT_SECTIONS = [
+  "role",
+  "scope",
+  "data",
+  "tools",
+  "attachments",
+  "mutationPolicy",
+  "responseStyle",
+  "overrides"
+];
+const RESERVED_OVERRIDE_KEYS = [
+  "mutationPolicy",
+  "readOnly",
+  "allowedTools",
+  "acceptedMediaTypes"
+];
+const HEADER_MAP = {
+  role: "role",
+  scope: "scope",
+  data: "data",
+  tools: "tools",
+  attachments: "attachments",
+  "mutation policy": "mutationPolicy",
+  mutation_policy: "mutationPolicy",
+  mutationpolicy: "mutationPolicy",
+  "response style": "responseStyle",
+  response_style: "responseStyle",
+  responsestyle: "responseStyle",
+  overrides: "overrides"
+};
+function canonicalize(key) {
+  const normalized = key.trim().toLowerCase();
+  if (!normalized) return null;
+  return HEADER_MAP[normalized] ?? null;
+}
+function prettyHeader(name) {
+  switch (name) {
+    case "mutationPolicy":
+      return "MUTATION POLICY";
+    case "responseStyle":
+      return "RESPONSE STYLE";
+    default:
+      return name.toUpperCase();
+  }
+}
+function applyPromptOverride(template, override) {
+  const baseSections = [...template.sections];
+  const sections = override?.sections ?? null;
+  if (!sections || typeof sections !== "object") {
+    return {
+      sections: baseSections,
+      systemPrompt: renderPrompt(baseSections)
+    };
+  }
+  assertNoReservedKeys(sections);
+  const byCanonical = /* @__PURE__ */ new Map();
+  const unknownKeys = [];
+  for (const [rawKey, value] of Object.entries(sections)) {
+    if (typeof value !== "string") continue;
+    const trimmed = value.trim();
+    if (!trimmed) continue;
+    const canonical = canonicalize(rawKey);
+    if (canonical) {
+      const existing = byCanonical.get(canonical);
+      byCanonical.set(canonical, existing ? `${existing}
+
+${trimmed}` : trimmed);
+    } else {
+      unknownKeys.push({ rawKey, value: trimmed });
+    }
+  }
+  const appended = baseSections.map((section) => {
+    const addendum = byCanonical.get(section.name);
+    if (!addendum) return section;
+    const nextContent = section.content.trim().length === 0 ? addendum : `${section.content}
+
+${addendum}`;
+    return { ...section, content: nextContent };
+  });
+  const declaredNames = new Set(appended.map((s) => s.name));
+  for (const [canonical, addendum] of byCanonical.entries()) {
+    if (!declaredNames.has(canonical)) {
+      appended.push({ name: canonical, content: addendum });
+      declaredNames.add(canonical);
+    }
+  }
+  if (unknownKeys.length > 0) {
+    const newSections = unknownKeys.map(({ rawKey, value }) => ({
+      name: "overrides",
+      content: `[${rawKey.trim().toUpperCase()}]
+${value}`
+    }));
+    const responseStyleIndex = appended.findIndex((s) => s.name === "responseStyle");
+    const overridesIndex = appended.findIndex((s) => s.name === "overrides");
+    let insertAt;
+    if (overridesIndex >= 0) {
+      insertAt = overridesIndex;
+    } else if (responseStyleIndex >= 0) {
+      insertAt = responseStyleIndex + 1;
+    } else {
+      insertAt = appended.length;
+    }
+    appended.splice(insertAt, 0, ...newSections);
+  }
+  return {
+    sections: appended,
+    systemPrompt: renderPrompt(appended)
+  };
+}
+function renderPrompt(sections) {
+  const lines = [];
+  for (const section of sections) {
+    const content = section.content.trim();
+    if (!content) continue;
+    lines.push(`[${prettyHeader(section.name)}]
+${content}`);
+  }
+  return lines.join("\n\n");
+}
+function findReservedKeys(sections) {
+  if (!sections || typeof sections !== "object") return [];
+  const reservedSet = new Set(RESERVED_OVERRIDE_KEYS.map((key) => key.toLowerCase()));
+  const hits = [];
+  for (const key of Object.keys(sections)) {
+    if (reservedSet.has(key.trim().toLowerCase())) {
+      hits.push(key);
+    }
+  }
+  return hits;
+}
+function assertNoReservedKeys(sections) {
+  const hits = findReservedKeys(sections);
+  if (hits.length > 0) {
+    throw new PromptOverrideReservedKeyError(hits);
+  }
+}
+class PromptOverrideReservedKeyError extends Error {
+  constructor(keys) {
+    super(
+      `Prompt override includes reserved policy keys: ${keys.join(", ")}. Policy fields (${RESERVED_OVERRIDE_KEYS.join(", ")}) are never editable via prompt overrides.`
+    );
+    this.keys = keys;
+    this.code = "reserved_key";
+    this.name = "PromptOverrideReservedKeyError";
+  }
+}
+function composeSystemPromptWithOverride(baseSystemPrompt, override) {
+  if (!override?.sections || Object.keys(override.sections).length === 0) {
+    return baseSystemPrompt;
+  }
+  const template = {
+    id: "legacy-system-prompt",
+    sections: [
+      { name: "role", content: baseSystemPrompt },
+      { name: "scope", content: "" },
+      { name: "data", content: "" },
+      { name: "tools", content: "" },
+      { name: "attachments", content: "" },
+      { name: "mutationPolicy", content: "" },
+      { name: "responseStyle", content: "" }
+    ]
+  };
+  const applied = applyPromptOverride(template, override);
+  return applied.systemPrompt;
+}
+export {
+  CANONICAL_PROMPT_SECTIONS,
+  PromptOverrideReservedKeyError,
+  RESERVED_OVERRIDE_KEYS,
+  applyPromptOverride,
+  composeSystemPromptWithOverride,
+  findReservedKeys,
+  renderPrompt
+};
+//# sourceMappingURL=prompt-override-merge.js.map

package/dist/modules/ai_assistant/lib/prompt-override-merge.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/prompt-override-merge.ts"],
+  "sourcesContent": ["import type {\n  PromptSection,\n  PromptSectionName,\n  PromptTemplate,\n} from './prompt-composition-types'\n\n/**\n * Canonical prompt section names the built-in agent prompt templates ship.\n * These align with the 7 section headers the spec (\u00A78) mandates, plus the\n * free-form `overrides` bucket the template already reserves.\n */\nexport const CANONICAL_PROMPT_SECTIONS: readonly PromptSectionName[] = [\n  'role',\n  'scope',\n  'data',\n  'tools',\n  'attachments',\n  'mutationPolicy',\n  'responseStyle',\n  'overrides',\n] as const\n\n/**\n * Reserved keys that MUST NOT appear in a prompt override. These name policy\n * fields that live on the agent definition itself \u2014 allowing them to be\n * modified via the prompt-override layer would let a tenant silently escalate\n * an agent beyond the mutation / tool / attachment contract enforced by\n * `checkAgentPolicy` at dispatch time.\n */\nexport const RESERVED_OVERRIDE_KEYS: readonly string[] = [\n  'mutationPolicy',\n  'readOnly',\n  'allowedTools',\n  'acceptedMediaTypes',\n] as const\n\nconst HEADER_MAP: Readonly<Record<string, PromptSectionName>> = {\n  role: 'role',\n  scope: 'scope',\n  data: 'data',\n  tools: 'tools',\n  attachments: 'attachments',\n  'mutation policy': 'mutationPolicy',\n  mutation_policy: 'mutationPolicy',\n  mutationpolicy: 'mutationPolicy',\n  'response style': 'responseStyle',\n  response_style: 'responseStyle',\n  responsestyle: 'responseStyle',\n  overrides: 'overrides',\n}\n\nfunction canonicalize(key: string): PromptSectionName | null {\n  const normalized = key.trim().toLowerCase()\n  if (!normalized) return null\n  return HEADER_MAP[normalized] ?? null\n}\n\nfunction prettyHeader(name: PromptSectionName): string {\n  switch (name) {\n    case 'mutationPolicy':\n      return 'MUTATION POLICY'\n    case 'responseStyle':\n      return 'RESPONSE STYLE'\n    default:\n      return name.toUpperCase()\n  }\n}\n\nexport interface AppliedPromptOverride {\n  sections: PromptSection[]\n  systemPrompt: string\n}\n\nexport interface PromptOverrideInput {\n  /** Additive text keyed by canonical section id or free-form new header. */\n  sections: Record<string, string> | null | undefined\n}\n\n/**\n * Applies an additive prompt override to a built-in template. Rules:\n *\n * - A canonical section key (`role`, `scope`, `data`, `tools`, `attachments`,\n *   `MUTATION POLICY`, `RESPONSE STYLE`, `overrides`) APPENDS the override\n *   text below the built-in section content with a blank line separator.\n *   The built-in content is never removed or rewritten.\n * - A non-canonical key is treated as a brand-new section and inserted\n *   after the canonical `RESPONSE STYLE` position (before `overrides`,\n *   if any). Canonical section order is always preserved.\n * - Empty or whitespace-only override values are ignored.\n * - If any reserved policy key is present (`mutationPolicy`, `readOnly`,\n *   `allowedTools`, `acceptedMediaTypes`), this function throws. Call sites\n *   SHOULD validate via {@link validatePromptOverrideInput} first so the\n *   error surfaces as a 400 to the API caller.\n */\nexport function applyPromptOverride(\n  template: PromptTemplate,\n  override: PromptOverrideInput | null | undefined,\n): AppliedPromptOverride {\n  const baseSections = [...template.sections]\n  const sections = override?.sections ?? null\n\n  if (!sections || typeof sections !== 'object') {\n    return {\n      sections: baseSections,\n      systemPrompt: renderPrompt(baseSections),\n    }\n  }\n\n  assertNoReservedKeys(sections)\n\n  // First pass: append to canonical sections.\n  const byCanonical = new Map<PromptSectionName, string>()\n  const unknownKeys: Array<{ rawKey: string; value: string }> = []\n  for (const [rawKey, value] of Object.entries(sections)) {\n    if (typeof value !== 'string') continue\n    const trimmed = value.trim()\n    if (!trimmed) continue\n    const canonical = canonicalize(rawKey)\n    if (canonical) {\n      const existing = byCanonical.get(canonical)\n      byCanonical.set(canonical, existing ? `${existing}\\n\\n${trimmed}` : trimmed)\n    } else {\n      unknownKeys.push({ rawKey, value: trimmed })\n    }\n  }\n\n  const appended: PromptSection[] = baseSections.map((section) => {\n    const addendum = byCanonical.get(section.name)\n    if (!addendum) return section\n    const nextContent = section.content.trim().length === 0\n      ? addendum\n      : `${section.content}\\n\\n${addendum}`\n    return { ...section, content: nextContent }\n  })\n\n  // If a canonical section wasn't already present but an override targets it,\n  // append it using its canonical header. Catalog / customer templates ship\n  // all 7 canonical headers today, but we defend against future templates\n  // that may omit some.\n  const declaredNames = new Set(appended.map((s) => s.name))\n  for (const [canonical, addendum] of byCanonical.entries()) {\n    if (!declaredNames.has(canonical)) {\n      appended.push({ name: canonical, content: addendum })\n      declaredNames.add(canonical)\n    }\n  }\n\n  // Brand-new sections inject after RESPONSE STYLE. We insert by splitting the\n  // array at the index directly after `responseStyle`. If `overrides` is\n  // already present, new sections land before it so `overrides` stays last.\n  if (unknownKeys.length > 0) {\n    const newSections: PromptSection[] = unknownKeys.map(({ rawKey, value }) => ({\n      name: 'overrides',\n      content: `[${rawKey.trim().toUpperCase()}]\\n${value}`,\n    }))\n    const responseStyleIndex = appended.findIndex((s) => s.name === 'responseStyle')\n    const overridesIndex = appended.findIndex((s) => s.name === 'overrides')\n    let insertAt: number\n    if (overridesIndex >= 0) {\n      insertAt = overridesIndex\n    } else if (responseStyleIndex >= 0) {\n      insertAt = responseStyleIndex + 1\n    } else {\n      insertAt = appended.length\n    }\n    appended.splice(insertAt, 0, ...newSections)\n  }\n\n  return {\n    sections: appended,\n    systemPrompt: renderPrompt(appended),\n  }\n}\n\n/**\n * Produces a flat string representation of a prompt template. The runtime uses\n * this when the agent definition declares sections but the underlying call\n * site expects a single-string `systemPrompt` (today: both `runAiAgentText`\n * and `runAiAgentObject`).\n */\nexport function renderPrompt(sections: readonly PromptSection[]): string {\n  const lines: string[] = []\n  for (const section of sections) {\n    const content = section.content.trim()\n    if (!content) continue\n    lines.push(`[${prettyHeader(section.name)}]\\n${content}`)\n  }\n  return lines.join('\\n\\n')\n}\n\n/**\n * Returns the list of reserved keys present in the supplied override payload.\n * Empty array means the body is safe for persistence. Call this before the\n * repository `save` so the API layer can reject with a 400 / `reserved_key`.\n */\nexport function findReservedKeys(sections: Record<string, unknown> | null | undefined): string[] {\n  if (!sections || typeof sections !== 'object') return []\n  const reservedSet = new Set(RESERVED_OVERRIDE_KEYS.map((key) => key.toLowerCase()))\n  const hits: string[] = []\n  for (const key of Object.keys(sections)) {\n    if (reservedSet.has(key.trim().toLowerCase())) {\n      hits.push(key)\n    }\n  }\n  return hits\n}\n\nfunction assertNoReservedKeys(sections: Record<string, unknown>): void {\n  const hits = findReservedKeys(sections)\n  if (hits.length > 0) {\n    throw new PromptOverrideReservedKeyError(hits)\n  }\n}\n\nexport class PromptOverrideReservedKeyError extends Error {\n  readonly code = 'reserved_key'\n  constructor(public readonly keys: readonly string[]) {\n    super(\n      `Prompt override includes reserved policy keys: ${keys.join(', ')}. ` +\n        `Policy fields (${RESERVED_OVERRIDE_KEYS.join(', ')}) are never editable via prompt overrides.`,\n    )\n    this.name = 'PromptOverrideReservedKeyError'\n  }\n}\n\n/**\n * Convenience wrapper: composes the full system prompt for a legacy agent that\n * ships a single-string `systemPrompt`. Returns the base unchanged when no\n * override is present. When an override is present, the base is treated as the\n * `role` section and overrides are layered via {@link applyPromptOverride}.\n */\nexport function composeSystemPromptWithOverride(\n  baseSystemPrompt: string,\n  override: PromptOverrideInput | null | undefined,\n): string {\n  if (!override?.sections || Object.keys(override.sections).length === 0) {\n    return baseSystemPrompt\n  }\n  const template: PromptTemplate = {\n    id: 'legacy-system-prompt',\n    sections: [\n      { name: 'role', content: baseSystemPrompt },\n      { name: 'scope', content: '' },\n      { name: 'data', content: '' },\n      { name: 'tools', content: '' },\n      { name: 'attachments', content: '' },\n      { name: 'mutationPolicy', content: '' },\n      { name: 'responseStyle', content: '' },\n    ],\n  }\n  const applied = applyPromptOverride(template, override)\n  return applied.systemPrompt\n}\n"],
+  "mappings": "AAWO,MAAM,4BAA0D;AAAA,EACrE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AASO,MAAM,yBAA4C;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,aAA0D;AAAA,EAC9D,MAAM;AAAA,EACN,OAAO;AAAA,EACP,MAAM;AAAA,EACN,OAAO;AAAA,EACP,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,WAAW;AACb;AAEA,SAAS,aAAa,KAAuC;AAC3D,QAAM,aAAa,IAAI,KAAK,EAAE,YAAY;AAC1C,MAAI,CAAC,WAAY,QAAO;AACxB,SAAO,WAAW,UAAU,KAAK;AACnC;AAEA,SAAS,aAAa,MAAiC;AACrD,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO,KAAK,YAAY;AAAA,EAC5B;AACF;AA4BO,SAAS,oBACd,UACA,UACuB;AACvB,QAAM,eAAe,CAAC,GAAG,SAAS,QAAQ;AAC1C,QAAM,WAAW,UAAU,YAAY;AAEvC,MAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAC7C,WAAO;AAAA,MACL,UAAU;AAAA,MACV,cAAc,aAAa,YAAY;AAAA,IACzC;AAAA,EACF;AAEA,uBAAqB,QAAQ;AAG7B,QAAM,cAAc,oBAAI,IAA+B;AACvD,QAAM,cAAwD,CAAC;AAC/D,aAAW,CAAC,QAAQ,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG;AACtD,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,QAAS;AACd,UAAM,YAAY,aAAa,MAAM;AACrC,QAAI,WAAW;AACb,YAAM,WAAW,YAAY,IAAI,SAAS;AAC1C,kBAAY,IAAI,WAAW,WAAW,GAAG,QAAQ;AAAA;AAAA,EAAO,OAAO,KAAK,OAAO;AAAA,IAC7E,OAAO;AACL,kBAAY,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC;AAAA,IAC7C;AAAA,EACF;AAEA,QAAM,WAA4B,aAAa,IAAI,CAAC,YAAY;AAC9D,UAAM,WAAW,YAAY,IAAI,QAAQ,IAAI;AAC7C,QAAI,CAAC,SAAU,QAAO;AACtB,UAAM,cAAc,QAAQ,QAAQ,KAAK,EAAE,WAAW,IAClD,WACA,GAAG,QAAQ,OAAO;AAAA;AAAA,EAAO,QAAQ;AACrC,WAAO,EAAE,GAAG,SAAS,SAAS,YAAY;AAAA,EAC5C,CAAC;AAMD,QAAM,gBAAgB,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AACzD,aAAW,CAAC,WAAW,QAAQ,KAAK,YAAY,QAAQ,GAAG;AACzD,QAAI,CAAC,cAAc,IAAI,SAAS,GAAG;AACjC,eAAS,KAAK,EAAE,MAAM,WAAW,SAAS,SAAS,CAAC;AACpD,oBAAc,IAAI,SAAS;AAAA,IAC7B;AAAA,EACF;AAKA,MAAI,YAAY,SAAS,GAAG;AAC1B,UAAM,cAA+B,YAAY,IAAI,CAAC,EAAE,QAAQ,MAAM,OAAO;AAAA,MAC3E,MAAM;AAAA,MACN,SAAS,IAAI,OAAO,KAAK,EAAE,YAAY,CAAC;AAAA,EAAM,KAAK;AAAA,IACrD,EAAE;AACF,UAAM,qBAAqB,SAAS,UAAU,CAAC,MAAM,EAAE,SAAS,eAAe;AAC/E,UAAM,iBAAiB,SAAS,UAAU,CAAC,MAAM,EAAE,SAAS,WAAW;AACvE,QAAI;AACJ,QAAI,kBAAkB,GAAG;AACvB,iBAAW;AAAA,IACb,WAAW,sBAAsB,GAAG;AAClC,iBAAW,qBAAqB;AAAA,IAClC,OAAO;AACL,iBAAW,SAAS;AAAA,IACtB;AACA,aAAS,OAAO,UAAU,GAAG,GAAG,WAAW;AAAA,EAC7C;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,cAAc,aAAa,QAAQ;AAAA,EACrC;AACF;AAQO,SAAS,aAAa,UAA4C;AACvE,QAAM,QAAkB,CAAC;AACzB,aAAW,WAAW,UAAU;AAC9B,UAAM,UAAU,QAAQ,QAAQ,KAAK;AACrC,QAAI,CAAC,QAAS;AACd,UAAM,KAAK,IAAI,aAAa,QAAQ,IAAI,CAAC;AAAA,EAAM,OAAO,EAAE;AAAA,EAC1D;AACA,SAAO,MAAM,KAAK,MAAM;AAC1B;AAOO,SAAS,iBAAiB,UAAgE;AAC/F,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO,CAAC;AACvD,QAAM,cAAc,IAAI,IAAI,uBAAuB,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;AAClF,QAAM,OAAiB,CAAC;AACxB,aAAW,OAAO,OAAO,KAAK,QAAQ,GAAG;AACvC,QAAI,YAAY,IAAI,IAAI,KAAK,EAAE,YAAY,CAAC,GAAG;AAC7C,WAAK,KAAK,GAAG;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,UAAyC;AACrE,QAAM,OAAO,iBAAiB,QAAQ;AACtC,MAAI,KAAK,SAAS,GAAG;AACnB,UAAM,IAAI,+BAA+B,IAAI;AAAA,EAC/C;AACF;AAEO,MAAM,uCAAuC,MAAM;AAAA,EAExD,YAA4B,MAAyB;AACnD;AAAA,MACE,kDAAkD,KAAK,KAAK,IAAI,CAAC,oBAC7C,uBAAuB,KAAK,IAAI,CAAC;AAAA,IACvD;AAJ0B;AAD5B,SAAS,OAAO;AAMd,SAAK,OAAO;AAAA,EACd;AACF;AAQO,SAAS,gCACd,kBACA,UACQ;AACR,MAAI,CAAC,UAAU,YAAY,OAAO,KAAK,SAAS,QAAQ,EAAE,WAAW,GAAG;AACtE,WAAO;AAAA,EACT;AACA,QAAM,WAA2B;AAAA,IAC/B,IAAI;AAAA,IACJ,UAAU;AAAA,MACR,EAAE,MAAM,QAAQ,SAAS,iBAAiB;AAAA,MAC1C,EAAE,MAAM,SAAS,SAAS,GAAG;AAAA,MAC7B,EAAE,MAAM,QAAQ,SAAS,GAAG;AAAA,MAC5B,EAAE,MAAM,SAAS,SAAS,GAAG;AAAA,MAC7B,EAAE,MAAM,eAAe,SAAS,GAAG;AAAA,MACnC,EAAE,MAAM,kBAAkB,SAAS,GAAG;AAAA,MACtC,EAAE,MAAM,iBAAiB,SAAS,GAAG;AAAA,IACvC;AAAA,EACF;AACA,QAAM,UAAU,oBAAoB,UAAU,QAAQ;AACtD,SAAO,QAAQ;AACjB;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/schema-utils.js

@@ -25,7 +25,8 @@ function jsonSchemaToZod(jsonSchema) {
     const properties = jsonSchema.properties;
     const required = jsonSchema.required || [];
     const additionalProperties = jsonSchema.additionalProperties;
-    if (additionalProperties && (!properties || Object.keys(properties).length === 0)) {
+    const hasFixedProperties = properties && Object.keys(properties).length > 0;
+    if (additionalProperties && !hasFixedProperties && properties === void 0) {
       if (typeof additionalProperties === "object") {
         return z.record(z.string(), jsonSchemaToZod(additionalProperties));
       }
@@ -79,6 +80,9 @@ function toSafeZodSchema(schema) {
   }
   try {
     const jsonSchema = z.toJSONSchema(schema, { unrepresentable: "any" });
+    if (jsonSchema.type === "object" && !jsonSchema.properties) {
+      jsonSchema.properties = {};
+    }
     const safeSchema = jsonSchemaToZod(jsonSchema);
     safeSchemaCache.set(schema, safeSchema);
     return safeSchema;

package/dist/modules/ai_assistant/lib/schema-utils.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/ai_assistant/lib/schema-utils.ts"],
-  "sourcesContent": ["import { z, type ZodType } from 'zod'\n\n/**\n * Cache for converted safe schemas to avoid repeated conversions per request.\n */\nconst safeSchemaCache = new WeakMap<ZodType, ZodType>()\n\n/**\n * Convert a JSON Schema to a simple Zod schema.\n * This creates a schema that can be converted back to JSON Schema without errors.\n *\n * Supports:\n * - Basic types: string, number, integer, boolean, null\n * - Arrays with item types\n * - Objects with properties and required fields\n * - Records/dictionaries via additionalProperties\n * - Union types via anyOf/oneOf\n * - Enum values\n */\nexport function jsonSchemaToZod(jsonSchema: Record<string, unknown>): ZodType {\n  const type = jsonSchema.type as string | undefined\n\n  if (type === 'string') {\n    return z.string()\n  }\n  if (type === 'number' || type === 'integer') {\n    return z.number()\n  }\n  if (type === 'boolean') {\n    return z.boolean()\n  }\n  if (type === 'null') {\n    return z.null()\n  }\n  if (type === 'array') {\n    const items = jsonSchema.items as Record<string, unknown> | undefined\n    if (items) {\n      return z.array(jsonSchemaToZod(items))\n    }\n    return z.array(z.unknown())\n  }\n  if (type === 'object') {\n    const properties = jsonSchema.properties as Record<string, Record<string, unknown>> | undefined\n    const required = (jsonSchema.required as string[]) || []\n    const additionalProperties = jsonSchema.additionalProperties\n\n    // Handle z.record() - objects with additionalProperties but no fixed properties\n    if (additionalProperties && (!properties || Object.keys(properties).length === 0)) {\n      // This is a record/dictionary type - allow any properties\n      if (typeof additionalProperties === 'object') {\n        return z.record(z.string(), jsonSchemaToZod(additionalProperties as Record<string, unknown>))\n      }\n      // additionalProperties: true means any value\n      return z.record(z.string(), z.unknown())\n    }\n\n    if (properties) {\n      const shape: Record<string, ZodType> = {}\n      for (const [key, propSchema] of Object.entries(properties)) {\n        let fieldSchema = jsonSchemaToZod(propSchema)\n        // Make field optional if not in required array\n        if (!required.includes(key)) {\n          fieldSchema = fieldSchema.optional()\n        }\n        shape[key] = fieldSchema\n      }\n      // If additionalProperties is allowed, use passthrough\n      if (additionalProperties) {\n        return z.object(shape).passthrough()\n      }\n      return z.object(shape)\n    }\n\n    // Empty object with additionalProperties - treat as record\n    if (additionalProperties) {\n      return z.record(z.string(), z.unknown())\n    }\n    return z.object({})\n  }\n\n  // Handle union types (anyOf, oneOf)\n  const anyOf = jsonSchema.anyOf as Record<string, unknown>[] | undefined\n  const oneOf = jsonSchema.oneOf as Record<string, unknown>[] | undefined\n  const unionTypes = anyOf || oneOf\n  if (unionTypes && unionTypes.length >= 2) {\n    const schemas = unionTypes.map(s => jsonSchemaToZod(s))\n    return z.union(schemas as [ZodType, ZodType, ...ZodType[]])\n  }\n\n  // Handle nullable via anyOf with null\n  if (anyOf && anyOf.length === 2) {\n    const types = anyOf.map((s) => s.type)\n    if (types.includes('null')) {\n      const nonNullSchema = anyOf.find((s) => s.type !== 'null')\n      if (nonNullSchema) {\n        return jsonSchemaToZod(nonNullSchema).nullable()\n      }\n    }\n  }\n\n  // Handle enum\n  const enumValues = jsonSchema.enum as string[] | undefined\n  if (enumValues && enumValues.length > 0) {\n    return z.enum(enumValues as [string, ...string[]])\n  }\n\n  // Fallback for empty schemas (like Date converted with unrepresentable: 'any')\n  return z.unknown()\n}\n\n/**\n * Convert a Zod schema to a safe Zod schema that has no Date types.\n * Uses JSON Schema as an intermediate format to handle all Zod v4 internal complexities.\n * Results are cached to avoid repeated conversions.\n *\n * @param schema - The original Zod schema\n * @returns A safe Zod schema without Date types\n */\nexport function toSafeZodSchema(schema: ZodType): ZodType {\n  // Check cache first\n  const cached = safeSchemaCache.get(schema)\n  if (cached) {\n    return cached\n  }\n\n  try {\n    // Use Zod 4's toJSONSchema with unrepresentable: 'any' to handle Date types\n    const jsonSchema = z.toJSONSchema(schema, { unrepresentable: 'any' }) as Record<string, unknown>\n\n    // Convert back to a simple Zod schema without Date types\n    const safeSchema = jsonSchemaToZod(jsonSchema)\n\n    // Cache the result\n    safeSchemaCache.set(schema, safeSchema)\n\n    return safeSchema\n  } catch (error) {\n    console.error('[Schema Utils] Error converting schema:', error)\n    // Fallback to the original schema if conversion fails\n    return schema\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,SAAuB;AAKhC,MAAM,kBAAkB,oBAAI,QAA0B;AAc/C,SAAS,gBAAgB,YAA8C;AAC5E,QAAM,OAAO,WAAW;AAExB,MAAI,SAAS,UAAU;AACrB,WAAO,EAAE,OAAO;AAAA,EAClB;AACA,MAAI,SAAS,YAAY,SAAS,WAAW;AAC3C,WAAO,EAAE,OAAO;AAAA,EAClB;AACA,MAAI,SAAS,WAAW;AACtB,WAAO,EAAE,QAAQ;AAAA,EACnB;AACA,MAAI,SAAS,QAAQ;AACnB,WAAO,EAAE,KAAK;AAAA,EAChB;AACA,MAAI,SAAS,SAAS;AACpB,UAAM,QAAQ,WAAW;AACzB,QAAI,OAAO;AACT,aAAO,EAAE,MAAM,gBAAgB,KAAK,CAAC;AAAA,IACvC;AACA,WAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;AAAA,EAC5B;AACA,MAAI,SAAS,UAAU;AACrB,UAAM,aAAa,WAAW;AAC9B,UAAM,WAAY,WAAW,YAAyB,CAAC;AACvD,UAAM,uBAAuB,WAAW;AAGxC,QAAI,yBAAyB,CAAC,cAAc,OAAO,KAAK,UAAU,EAAE,WAAW,IAAI;AAEjF,UAAI,OAAO,yBAAyB,UAAU;AAC5C,eAAO,EAAE,OAAO,EAAE,OAAO,GAAG,gBAAgB,oBAA+C,CAAC;AAAA,MAC9F;AAEA,aAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,IACzC;AAEA,QAAI,YAAY;AACd,YAAM,QAAiC,CAAC;AACxC,iBAAW,CAAC,KAAK,UAAU,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC1D,YAAI,cAAc,gBAAgB,UAAU;AAE5C,YAAI,CAAC,SAAS,SAAS,GAAG,GAAG;AAC3B,wBAAc,YAAY,SAAS;AAAA,QACrC;AACA,cAAM,GAAG,IAAI;AAAA,MACf;AAEA,UAAI,sBAAsB;AACxB,eAAO,EAAE,OAAO,KAAK,EAAE,YAAY;AAAA,MACrC;AACA,aAAO,EAAE,OAAO,KAAK;AAAA,IACvB;AAGA,QAAI,sBAAsB;AACxB,aAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,IACzC;AACA,WAAO,EAAE,OAAO,CAAC,CAAC;AAAA,EACpB;AAGA,QAAM,QAAQ,WAAW;AACzB,QAAM,QAAQ,WAAW;AACzB,QAAM,aAAa,SAAS;AAC5B,MAAI,cAAc,WAAW,UAAU,GAAG;AACxC,UAAM,UAAU,WAAW,IAAI,OAAK,gBAAgB,CAAC,CAAC;AACtD,WAAO,EAAE,MAAM,OAA2C;AAAA,EAC5D;AAGA,MAAI,SAAS,MAAM,WAAW,GAAG;AAC/B,UAAM,QAAQ,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI;AACrC,QAAI,MAAM,SAAS,MAAM,GAAG;AAC1B,YAAM,gBAAgB,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM;AACzD,UAAI,eAAe;AACjB,eAAO,gBAAgB,aAAa,EAAE,SAAS;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AAGA,QAAM,aAAa,WAAW;AAC9B,MAAI,cAAc,WAAW,SAAS,GAAG;AACvC,WAAO,EAAE,KAAK,UAAmC;AAAA,EACnD;AAGA,SAAO,EAAE,QAAQ;AACnB;AAUO,SAAS,gBAAgB,QAA0B;AAExD,QAAM,SAAS,gBAAgB,IAAI,MAAM;AACzC,MAAI,QAAQ;AACV,WAAO;AAAA,EACT;AAEA,MAAI;AAEF,UAAM,aAAa,EAAE,aAAa,QAAQ,EAAE,iBAAiB,MAAM,CAAC;AAGpE,UAAM,aAAa,gBAAgB,UAAU;AAG7C,oBAAgB,IAAI,QAAQ,UAAU;AAEtC,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,2CAA2C,KAAK;AAE9D,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["import { z, type ZodType } from 'zod'\n\n/**\n * Cache for converted safe schemas to avoid repeated conversions per request.\n */\nconst safeSchemaCache = new WeakMap<ZodType, ZodType>()\n\n/**\n * Convert a JSON Schema to a simple Zod schema.\n * This creates a schema that can be converted back to JSON Schema without errors.\n *\n * Supports:\n * - Basic types: string, number, integer, boolean, null\n * - Arrays with item types\n * - Objects with properties and required fields\n * - Records/dictionaries via additionalProperties\n * - Union types via anyOf/oneOf\n * - Enum values\n */\nexport function jsonSchemaToZod(jsonSchema: Record<string, unknown>): ZodType {\n  const type = jsonSchema.type as string | undefined\n\n  if (type === 'string') {\n    return z.string()\n  }\n  if (type === 'number' || type === 'integer') {\n    return z.number()\n  }\n  if (type === 'boolean') {\n    return z.boolean()\n  }\n  if (type === 'null') {\n    return z.null()\n  }\n  if (type === 'array') {\n    const items = jsonSchema.items as Record<string, unknown> | undefined\n    if (items) {\n      return z.array(jsonSchemaToZod(items))\n    }\n    return z.array(z.unknown())\n  }\n  if (type === 'object') {\n    const properties = jsonSchema.properties as Record<string, Record<string, unknown>> | undefined\n    const required = (jsonSchema.required as string[]) || []\n    const additionalProperties = jsonSchema.additionalProperties\n\n    // Handle z.record() - objects with additionalProperties but no fixed properties.\n    // Skip the record path when properties is present but empty \u2014 that is a\n    // no-arg object schema, not a dictionary. OpenAI requires `properties: {}`\n    // in the JSON Schema, and `z.object({})` produces that, whereas\n    // `z.record()` does not.\n    const hasFixedProperties = properties && Object.keys(properties).length > 0\n    if (additionalProperties && !hasFixedProperties && properties === undefined) {\n      // This is a record/dictionary type - allow any properties\n      if (typeof additionalProperties === 'object') {\n        return z.record(z.string(), jsonSchemaToZod(additionalProperties as Record<string, unknown>))\n      }\n      // additionalProperties: true means any value\n      return z.record(z.string(), z.unknown())\n    }\n\n    if (properties) {\n      const shape: Record<string, ZodType> = {}\n      for (const [key, propSchema] of Object.entries(properties)) {\n        let fieldSchema = jsonSchemaToZod(propSchema)\n        // Make field optional if not in required array\n        if (!required.includes(key)) {\n          fieldSchema = fieldSchema.optional()\n        }\n        shape[key] = fieldSchema\n      }\n      // If additionalProperties is allowed, use passthrough\n      if (additionalProperties) {\n        return z.object(shape).passthrough()\n      }\n      return z.object(shape)\n    }\n\n    // Empty object with additionalProperties - treat as record\n    if (additionalProperties) {\n      return z.record(z.string(), z.unknown())\n    }\n    return z.object({})\n  }\n\n  // Handle union types (anyOf, oneOf)\n  const anyOf = jsonSchema.anyOf as Record<string, unknown>[] | undefined\n  const oneOf = jsonSchema.oneOf as Record<string, unknown>[] | undefined\n  const unionTypes = anyOf || oneOf\n  if (unionTypes && unionTypes.length >= 2) {\n    const schemas = unionTypes.map(s => jsonSchemaToZod(s))\n    return z.union(schemas as [ZodType, ZodType, ...ZodType[]])\n  }\n\n  // Handle nullable via anyOf with null\n  if (anyOf && anyOf.length === 2) {\n    const types = anyOf.map((s) => s.type)\n    if (types.includes('null')) {\n      const nonNullSchema = anyOf.find((s) => s.type !== 'null')\n      if (nonNullSchema) {\n        return jsonSchemaToZod(nonNullSchema).nullable()\n      }\n    }\n  }\n\n  // Handle enum\n  const enumValues = jsonSchema.enum as string[] | undefined\n  if (enumValues && enumValues.length > 0) {\n    return z.enum(enumValues as [string, ...string[]])\n  }\n\n  // Fallback for empty schemas (like Date converted with unrepresentable: 'any')\n  return z.unknown()\n}\n\n/**\n * Convert a Zod schema to a safe Zod schema that has no Date types.\n * Uses JSON Schema as an intermediate format to handle all Zod v4 internal complexities.\n * Results are cached to avoid repeated conversions.\n *\n * @param schema - The original Zod schema\n * @returns A safe Zod schema without Date types\n */\nexport function toSafeZodSchema(schema: ZodType): ZodType {\n  // Check cache first\n  const cached = safeSchemaCache.get(schema)\n  if (cached) {\n    return cached\n  }\n\n  try {\n    // Use Zod 4's toJSONSchema with unrepresentable: 'any' to handle Date types\n    const jsonSchema = z.toJSONSchema(schema, { unrepresentable: 'any' }) as Record<string, unknown>\n\n    // OpenAI requires `properties` on object schemas. Empty passthrough objects\n    // (tools that take no args) roundtrip as `{ type: \"object\", additionalProperties: true }`\n    // without `properties`, which OpenAI rejects. Ensure `properties` is present.\n    if (jsonSchema.type === 'object' && !jsonSchema.properties) {\n      jsonSchema.properties = {}\n    }\n\n    // Convert back to a simple Zod schema without Date types\n    const safeSchema = jsonSchemaToZod(jsonSchema)\n\n    // Cache the result\n    safeSchemaCache.set(schema, safeSchema)\n\n    return safeSchema\n  } catch (error) {\n    console.error('[Schema Utils] Error converting schema:', error)\n    // Fallback to the original schema if conversion fails\n    return schema\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAuB;AAKhC,MAAM,kBAAkB,oBAAI,QAA0B;AAc/C,SAAS,gBAAgB,YAA8C;AAC5E,QAAM,OAAO,WAAW;AAExB,MAAI,SAAS,UAAU;AACrB,WAAO,EAAE,OAAO;AAAA,EAClB;AACA,MAAI,SAAS,YAAY,SAAS,WAAW;AAC3C,WAAO,EAAE,OAAO;AAAA,EAClB;AACA,MAAI,SAAS,WAAW;AACtB,WAAO,EAAE,QAAQ;AAAA,EACnB;AACA,MAAI,SAAS,QAAQ;AACnB,WAAO,EAAE,KAAK;AAAA,EAChB;AACA,MAAI,SAAS,SAAS;AACpB,UAAM,QAAQ,WAAW;AACzB,QAAI,OAAO;AACT,aAAO,EAAE,MAAM,gBAAgB,KAAK,CAAC;AAAA,IACvC;AACA,WAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;AAAA,EAC5B;AACA,MAAI,SAAS,UAAU;AACrB,UAAM,aAAa,WAAW;AAC9B,UAAM,WAAY,WAAW,YAAyB,CAAC;AACvD,UAAM,uBAAuB,WAAW;AAOxC,UAAM,qBAAqB,cAAc,OAAO,KAAK,UAAU,EAAE,SAAS;AAC1E,QAAI,wBAAwB,CAAC,sBAAsB,eAAe,QAAW;AAE3E,UAAI,OAAO,yBAAyB,UAAU;AAC5C,eAAO,EAAE,OAAO,EAAE,OAAO,GAAG,gBAAgB,oBAA+C,CAAC;AAAA,MAC9F;AAEA,aAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,IACzC;AAEA,QAAI,YAAY;AACd,YAAM,QAAiC,CAAC;AACxC,iBAAW,CAAC,KAAK,UAAU,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC1D,YAAI,cAAc,gBAAgB,UAAU;AAE5C,YAAI,CAAC,SAAS,SAAS,GAAG,GAAG;AAC3B,wBAAc,YAAY,SAAS;AAAA,QACrC;AACA,cAAM,GAAG,IAAI;AAAA,MACf;AAEA,UAAI,sBAAsB;AACxB,eAAO,EAAE,OAAO,KAAK,EAAE,YAAY;AAAA,MACrC;AACA,aAAO,EAAE,OAAO,KAAK;AAAA,IACvB;AAGA,QAAI,sBAAsB;AACxB,aAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,IACzC;AACA,WAAO,EAAE,OAAO,CAAC,CAAC;AAAA,EACpB;AAGA,QAAM,QAAQ,WAAW;AACzB,QAAM,QAAQ,WAAW;AACzB,QAAM,aAAa,SAAS;AAC5B,MAAI,cAAc,WAAW,UAAU,GAAG;AACxC,UAAM,UAAU,WAAW,IAAI,OAAK,gBAAgB,CAAC,CAAC;AACtD,WAAO,EAAE,MAAM,OAA2C;AAAA,EAC5D;AAGA,MAAI,SAAS,MAAM,WAAW,GAAG;AAC/B,UAAM,QAAQ,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI;AACrC,QAAI,MAAM,SAAS,MAAM,GAAG;AAC1B,YAAM,gBAAgB,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM;AACzD,UAAI,eAAe;AACjB,eAAO,gBAAgB,aAAa,EAAE,SAAS;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AAGA,QAAM,aAAa,WAAW;AAC9B,MAAI,cAAc,WAAW,SAAS,GAAG;AACvC,WAAO,EAAE,KAAK,UAAmC;AAAA,EACnD;AAGA,SAAO,EAAE,QAAQ;AACnB;AAUO,SAAS,gBAAgB,QAA0B;AAExD,QAAM,SAAS,gBAAgB,IAAI,MAAM;AACzC,MAAI,QAAQ;AACV,WAAO;AAAA,EACT;AAEA,MAAI;AAEF,UAAM,aAAa,EAAE,aAAa,QAAQ,EAAE,iBAAiB,MAAM,CAAC;AAKpE,QAAI,WAAW,SAAS,YAAY,CAAC,WAAW,YAAY;AAC1D,iBAAW,aAAa,CAAC;AAAA,IAC3B;AAGA,UAAM,aAAa,gBAAgB,UAAU;AAG7C,oBAAgB,IAAI,QAAQ,UAAU;AAEtC,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,2CAA2C,KAAK;AAE9D,WAAO;AAAA,EACT;AACF;",
   "names": []
 }