@open-mercato/ai-assistant 0.5.1-develop.3036.f02c281f23 → 0.5.1-develop.3045.b4b3320cc2

package/dist/modules/ai_assistant/lib/tool-executor.js

@@ -1,5 +1,14 @@
 import { getToolRegistry } from "./tool-registry.js";
 import { hasRequiredFeatures } from "./auth.js";
+function sanitizeEmptyStrings(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input)) return input;
+  const result = {};
+  for (const [key, value] of Object.entries(input)) {
+    if (typeof value === "string" && value.trim() === "") continue;
+    result[key] = value;
+  }
+  return result;
+}
 async function executeTool(toolName, input, context) {
   const registry = getToolRegistry();
   const tool = registry.getTool(toolName);
@@ -26,7 +35,8 @@ async function executeTool(toolName, input, context) {
       };
     }
   }
-  const parseResult = tool.inputSchema.safeParse(input);
+  const sanitizedInput = sanitizeEmptyStrings(input);
+  const parseResult = tool.inputSchema.safeParse(sanitizedInput);
   if (!parseResult.success) {
     const issues = parseResult.error.issues ?? [];
     const errorMessages = issues.map(
@@ -38,8 +48,9 @@ async function executeTool(toolName, input, context) {
       errorCode: "VALIDATION_ERROR"
     };
   }
+  const handlerContext = { ...context, tool };
   try {
-    const result = await tool.handler(parseResult.data, context);
+    const result = await tool.handler(parseResult.data, handlerContext);
     return { success: true, result };
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);

package/dist/modules/ai_assistant/lib/tool-executor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/ai_assistant/lib/tool-executor.ts"],
-  "sourcesContent": ["import type { McpToolContext, ToolExecutionResult } from './types'\nimport { getToolRegistry } from './tool-registry'\nimport { hasRequiredFeatures } from './auth'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\n\n/**\n * Execute a tool with full context and ACL checks.\n */\nexport async function executeTool(\n  toolName: string,\n  input: unknown,\n  context: McpToolContext\n): Promise<ToolExecutionResult> {\n  const registry = getToolRegistry()\n  const tool = registry.getTool(toolName)\n\n  if (!tool) {\n    return {\n      success: false,\n      error: `Tool \"${toolName}\" not found`,\n      errorCode: 'NOT_FOUND',\n    }\n  }\n\n  // ACL check\n  if (tool.requiredFeatures?.length) {\n    const rbacService = context.container.resolve<RbacService>('rbacService')\n    const hasAccess = hasRequiredFeatures(\n      tool.requiredFeatures,\n      context.userFeatures,\n      context.isSuperAdmin,\n      rbacService\n    )\n\n    if (!hasAccess) {\n      return {\n        success: false,\n        error: `Insufficient permissions for tool \"${toolName}\". Required: ${tool.requiredFeatures.join(', ')}`,\n        errorCode: 'UNAUTHORIZED',\n      }\n    }\n  }\n\n  // Input validation\n  const parseResult = tool.inputSchema.safeParse(input)\n  if (!parseResult.success) {\n    // Use any cast for Zod v4 compatibility\n    const issues = (parseResult.error as any).issues ?? []\n    const errorMessages = issues\n      .map((issue: { path: PropertyKey[]; message: string }) =>\n        `${issue.path.join('.')}: ${issue.message}`\n      )\n      .join('; ')\n    return {\n      success: false,\n      error: `Invalid input: ${errorMessages || 'Validation failed'}`,\n      errorCode: 'VALIDATION_ERROR',\n    }\n  }\n\n  // Execute tool\n  try {\n    const result = await tool.handler(parseResult.data, context)\n    return { success: true, result }\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n    console.error(`[MCP Tool] Error executing \"${toolName}\":`, error)\n    return {\n      success: false,\n      error: message,\n      errorCode: 'EXECUTION_ERROR',\n    }\n  }\n}\n"],
-  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,2BAA2B;AAMpC,eAAsB,YACpB,UACA,OACA,SAC8B;AAC9B,QAAM,WAAW,gBAAgB;AACjC,QAAM,OAAO,SAAS,QAAQ,QAAQ;AAEtC,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,SAAS,QAAQ;AAAA,MACxB,WAAW;AAAA,IACb;AAAA,EACF;AAGA,MAAI,KAAK,kBAAkB,QAAQ;AACjC,UAAM,cAAc,QAAQ,UAAU,QAAqB,aAAa;AACxE,UAAM,YAAY;AAAA,MAChB,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO,sCAAsC,QAAQ,gBAAgB,KAAK,iBAAiB,KAAK,IAAI,CAAC;AAAA,QACrG,WAAW;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAGA,QAAM,cAAc,KAAK,YAAY,UAAU,KAAK;AACpD,MAAI,CAAC,YAAY,SAAS;AAExB,UAAM,SAAU,YAAY,MAAc,UAAU,CAAC;AACrD,UAAM,gBAAgB,OACnB;AAAA,MAAI,CAAC,UACJ,GAAG,MAAM,KAAK,KAAK,GAAG,CAAC,KAAK,MAAM,OAAO;AAAA,IAC3C,EACC,KAAK,IAAI;AACZ,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,kBAAkB,iBAAiB,mBAAmB;AAAA,MAC7D,WAAW;AAAA,IACb;AAAA,EACF;AAGA,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,QAAQ,YAAY,MAAM,OAAO;AAC3D,WAAO,EAAE,SAAS,MAAM,OAAO;AAAA,EACjC,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,YAAQ,MAAM,+BAA+B,QAAQ,MAAM,KAAK;AAChE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,IACb;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { McpToolContext, ToolExecutionResult } from './types'\nimport { getToolRegistry } from './tool-registry'\nimport { hasRequiredFeatures } from './auth'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\n\n/**\n * Strip empty strings from object values so LLM-generated `\"\"` for optional\n * fields becomes `undefined` (passes `.optional()` Zod validators).\n */\nfunction sanitizeEmptyStrings(input: unknown): unknown {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) return input\n  const result: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(input as Record<string, unknown>)) {\n    if (typeof value === 'string' && value.trim() === '') continue\n    result[key] = value\n  }\n  return result\n}\n\n/**\n * Execute a tool with full context and ACL checks.\n */\nexport async function executeTool(\n  toolName: string,\n  input: unknown,\n  context: McpToolContext\n): Promise<ToolExecutionResult> {\n  const registry = getToolRegistry()\n  const tool = registry.getTool(toolName)\n\n  if (!tool) {\n    return {\n      success: false,\n      error: `Tool \"${toolName}\" not found`,\n      errorCode: 'NOT_FOUND',\n    }\n  }\n\n  // ACL check\n  if (tool.requiredFeatures?.length) {\n    const rbacService = context.container.resolve<RbacService>('rbacService')\n    const hasAccess = hasRequiredFeatures(\n      tool.requiredFeatures,\n      context.userFeatures,\n      context.isSuperAdmin,\n      rbacService\n    )\n\n    if (!hasAccess) {\n      return {\n        success: false,\n        error: `Insufficient permissions for tool \"${toolName}\". Required: ${tool.requiredFeatures.join(', ')}`,\n        errorCode: 'UNAUTHORIZED',\n      }\n    }\n  }\n\n  // LLMs often send empty strings for optional fields (e.g., `personId: \"\"`).\n  // Strip empty strings to `undefined` before Zod parsing so `.uuid().optional()`\n  // fields pass validation when the model meant \"omit this field\".\n  const sanitizedInput = sanitizeEmptyStrings(input)\n\n  // Input validation\n  const parseResult = tool.inputSchema.safeParse(sanitizedInput)\n  if (!parseResult.success) {\n    // Use any cast for Zod v4 compatibility\n    const issues = (parseResult.error as any).issues ?? []\n    const errorMessages = issues\n      .map((issue: { path: PropertyKey[]; message: string }) =>\n        `${issue.path.join('.')}: ${issue.message}`\n      )\n      .join('; ')\n    return {\n      success: false,\n      error: `Invalid input: ${errorMessages || 'Validation failed'}`,\n      errorCode: 'VALIDATION_ERROR',\n    }\n  }\n\n  // Execute tool. Attach `tool` to the context so handlers that build an\n  // `AiToolExecutionContext` (e.g. via `createAiApiOperationRunner`) keep their\n  // route-gate coverage check working.\n  const handlerContext: McpToolContext = { ...context, tool }\n  try {\n    const result = await tool.handler(parseResult.data, handlerContext)\n    return { success: true, result }\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n    console.error(`[MCP Tool] Error executing \"${toolName}\":`, error)\n    return {\n      success: false,\n      error: message,\n      errorCode: 'EXECUTION_ERROR',\n    }\n  }\n}\n"],
+  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,2BAA2B;AAOpC,SAAS,qBAAqB,OAAyB;AACrD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,SAAkC,CAAC;AACzC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAgC,GAAG;AAC3E,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,GAAI;AACtD,WAAO,GAAG,IAAI;AAAA,EAChB;AACA,SAAO;AACT;AAKA,eAAsB,YACpB,UACA,OACA,SAC8B;AAC9B,QAAM,WAAW,gBAAgB;AACjC,QAAM,OAAO,SAAS,QAAQ,QAAQ;AAEtC,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,SAAS,QAAQ;AAAA,MACxB,WAAW;AAAA,IACb;AAAA,EACF;AAGA,MAAI,KAAK,kBAAkB,QAAQ;AACjC,UAAM,cAAc,QAAQ,UAAU,QAAqB,aAAa;AACxE,UAAM,YAAY;AAAA,MAChB,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO,sCAAsC,QAAQ,gBAAgB,KAAK,iBAAiB,KAAK,IAAI,CAAC;AAAA,QACrG,WAAW;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAKA,QAAM,iBAAiB,qBAAqB,KAAK;AAGjD,QAAM,cAAc,KAAK,YAAY,UAAU,cAAc;AAC7D,MAAI,CAAC,YAAY,SAAS;AAExB,UAAM,SAAU,YAAY,MAAc,UAAU,CAAC;AACrD,UAAM,gBAAgB,OACnB;AAAA,MAAI,CAAC,UACJ,GAAG,MAAM,KAAK,KAAK,GAAG,CAAC,KAAK,MAAM,OAAO;AAAA,IAC3C,EACC,KAAK,IAAI;AACZ,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,kBAAkB,iBAAiB,mBAAmB;AAAA,MAC7D,WAAW;AAAA,IACb;AAAA,EACF;AAKA,QAAM,iBAAiC,EAAE,GAAG,SAAS,KAAK;AAC1D,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,QAAQ,YAAY,MAAM,cAAc;AAClE,WAAO,EAAE,SAAS,MAAM,OAAO;AAAA,EACjC,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,YAAQ,MAAM,+BAA+B,QAAQ,MAAM,KAAK;AAChE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,IACb;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/ai_assistant/lib/tool-loader.js

@@ -1,6 +1,15 @@
 import { z } from "zod";
-import { registerMcpTool, getToolRegistry } from "./tool-registry.js";
+import { registerMcpTool, getToolRegistry, toolRegistry, unregisterMcpTool } from "./tool-registry.js";
+import {
+  applyToolOverrideMap,
+  composeToolOverrideMap
+} from "./ai-overrides.js";
 import { ToolSearchService } from "./tool-search.js";
+function isModuleAiTool(value) {
+  if (!value || typeof value !== "object") return false;
+  const candidate = value;
+  return typeof candidate.name === "string" && typeof candidate.description === "string" && candidate.inputSchema !== void 0 && typeof candidate.handler === "function";
+}
 const contextWhoamiTool = {
   name: "context_whoami",
   description: "Get the current authentication context including tenant ID, organization ID, user ID, and available features. Use this to understand your current scope before performing operations.",
@@ -20,16 +29,70 @@ const contextWhoamiTool = {
 };
 function loadModuleTools(moduleId, tools) {
   for (const tool of tools) {
-    registerMcpTool(
-      {
-        name: tool.name,
-        description: tool.description,
-        inputSchema: tool.inputSchema,
-        requiredFeatures: tool.requiredFeatures,
-        handler: tool.handler
-      },
-      { moduleId }
+    registerMcpTool(tool, { moduleId });
+  }
+}
+function registerGeneratedAiToolEntries(entries) {
+  let registered = 0;
+  for (const entry of entries) {
+    if (!entry || typeof entry.moduleId !== "string") continue;
+    if (!Array.isArray(entry.tools) || entry.tools.length === 0) continue;
+    for (const candidate of entry.tools) {
+      if (!isModuleAiTool(candidate)) {
+        console.warn(
+          `[MCP Tools] Skipping malformed AI tool in module "${entry.moduleId}"`
+        );
+        continue;
+      }
+      registerMcpTool(candidate, { moduleId: entry.moduleId });
+      registered += 1;
+    }
+  }
+  return registered;
+}
+function applyAiToolOverrideEntries(entries) {
+  const overrideMap = composeToolOverrideMap(entries);
+  if (Object.keys(overrideMap).length === 0) return;
+  const baseTools = toolRegistry.getTools();
+  const overridden = applyToolOverrideMap(baseTools, overrideMap);
+  for (const [name, value] of Object.entries(overrideMap)) {
+    if (value === null) {
+      unregisterMcpTool(name);
+      console.info(`[AI Overrides] Tool "${name}" disabled by override.`);
+      continue;
+    }
+    const next = overridden.get(name);
+    if (!next) continue;
+    registerMcpTool(next, { moduleId: "ai_overrides" });
+    console.info(`[AI Overrides] Tool "${name}" replaced by override.`);
+  }
+}
+async function loadGeneratedAiToolOverrides() {
+  let entries = [];
+  try {
+    const mod = await import("@/.mercato/generated/ai-tools.generated");
+    entries = Array.isArray(mod.aiToolOverrideEntries) ? mod.aiToolOverrideEntries : [];
+  } catch {
+  }
+  applyAiToolOverrideEntries(entries);
+}
+async function loadGeneratedModuleAiTools() {
+  try {
+    const mod = await import("@/.mercato/generated/ai-tools.generated");
+    const entries = Array.isArray(mod.aiToolConfigEntries) ? mod.aiToolConfigEntries : [];
+    const count = registerGeneratedAiToolEntries(entries);
+    try {
+      await loadGeneratedAiToolOverrides();
+    } catch (error) {
+      console.error("[AI Overrides] Failed to apply tool overrides:", error);
+    }
+    return count;
+  } catch (error) {
+    console.error(
+      "[MCP Tools] Could not load ai-tools.generated.ts (module tools unavailable):",
+      error
     );
+    return 0;
   }
 }
 async function loadAllModuleTools() {
@@ -42,6 +105,14 @@ async function loadAllModuleTools() {
   } catch (error) {
     console.error("[MCP Tools] Could not load Code Mode tools:", error);
   }
+  try {
+    const moduleToolCount = await loadGeneratedModuleAiTools();
+    console.error(
+      `[MCP Tools] Registered ${moduleToolCount} module-contributed AI tools from ai-tools.generated.ts`
+    );
+  } catch (error) {
+    console.error("[MCP Tools] Could not load module AI tools:", error);
+  }
 }
 async function indexToolsForSearch(searchService, force = false) {
   const registry = getToolRegistry();
@@ -64,9 +135,13 @@ function createToolSearchService(searchService) {
   return new ToolSearchService(searchService, registry);
 }
 export {
+  applyAiToolOverrideEntries,
   createToolSearchService,
   indexToolsForSearch,
   loadAllModuleTools,
-  loadModuleTools
+  loadGeneratedAiToolOverrides,
+  loadGeneratedModuleAiTools,
+  loadModuleTools,
+  registerGeneratedAiToolEntries
 };
 //# sourceMappingURL=tool-loader.js.map

package/dist/modules/ai_assistant/lib/tool-loader.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/ai_assistant/lib/tool-loader.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { SearchService } from '@open-mercato/search/service'\nimport { registerMcpTool, getToolRegistry } from './tool-registry'\nimport type { McpToolDefinition, McpToolContext } from './types'\nimport { ToolSearchService } from './tool-search'\n\n/**\n * Module tool definition as exported from ai-tools.ts files.\n */\ntype ModuleAiTool = {\n  name: string\n  description: string\n  inputSchema: any\n  requiredFeatures?: string[]\n  handler: (input: any, ctx: any) => Promise<unknown>\n}\n\n/**\n * Built-in context.whoami tool that returns the current authentication context.\n * This is useful for AI to understand its current tenant/org scope.\n */\nconst contextWhoamiTool: McpToolDefinition = {\n  name: 'context_whoami',\n  description:\n    'Get the current authentication context including tenant ID, organization ID, user ID, and available features. Use this to understand your current scope before performing operations.',\n  inputSchema: z.object({}),\n  requiredFeatures: [], // No specific feature required - available to all authenticated users\n  handler: async (_input: unknown, ctx: McpToolContext) => {\n    return {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      isSuperAdmin: ctx.isSuperAdmin,\n      features: ctx.userFeatures,\n      featureCount: ctx.userFeatures.length,\n    }\n  },\n}\n\n/**\n * Load and register AI tools from a module's ai-tools.ts export.\n *\n * @param moduleId - The module identifier (e.g., 'search', 'customers')\n * @param tools - Array of tool definitions from the module\n */\nexport function loadModuleTools(moduleId: string, tools: ModuleAiTool[]): void {\n  for (const tool of tools) {\n    registerMcpTool(\n      {\n        name: tool.name,\n        description: tool.description,\n        inputSchema: tool.inputSchema,\n        requiredFeatures: tool.requiredFeatures,\n        handler: tool.handler,\n      } as McpToolDefinition,\n      { moduleId }\n    )\n  }\n}\n\n/**\n * Dynamically load tools from known module paths.\n * This is called during MCP server startup.\n */\nexport async function loadAllModuleTools(): Promise<void> {\n  // 1. Register built-in tools\n  registerMcpTool(contextWhoamiTool, { moduleId: 'context' })\n  console.error('[MCP Tools] Registered built-in context_whoami tool')\n\n  // 2. Register Code Mode tools (search + execute)\n  // These two tools replace the previous api_discover, call_api, discover_schema,\n  // and all module-specific AI tools. The AI writes JavaScript that runs in a\n  // node:vm sandbox with access to the OpenAPI spec and api.request().\n  try {\n    const { loadCodeModeTools } = await import('./codemode-tools')\n    const toolCount = await loadCodeModeTools()\n    console.error(`[MCP Tools] Registered ${toolCount} Code Mode tools`)\n  } catch (error) {\n    console.error('[MCP Tools] Could not load Code Mode tools:', error)\n  }\n\n  // Note: Auto-discovered module AI tools (from ai-tools.generated.ts) and\n  // legacy API discovery tools (find_api, call_api, discover_schema) are no\n  // longer loaded. Code Mode's search + execute tools cover all use cases.\n}\n\n/**\n * Index all registered tools for hybrid search discovery.\n * This should be called after loadAllModuleTools() when the search service is available.\n *\n * @param searchService - The search service from DI container\n * @param force - Force re-indexing even if checksums match\n * @returns Indexing result with statistics\n */\nexport async function indexToolsForSearch(\n  searchService: SearchService,\n  force = false\n): Promise<{\n  indexed: number\n  skipped: number\n  strategies: string[]\n  checksum: string\n}> {\n  const registry = getToolRegistry()\n  const toolSearchService = new ToolSearchService(searchService, registry)\n\n  try {\n    const result = await toolSearchService.indexTools(force)\n\n    console.error(`[MCP Tools] Indexed ${result.indexed} tools for search`)\n    console.error(`[MCP Tools] Search strategies available: ${result.strategies.join(', ')}`)\n\n    if (result.skipped > 0) {\n      console.error(`[MCP Tools] Skipped ${result.skipped} tools (unchanged)`)\n    }\n\n    return result\n  } catch (error) {\n    console.error('[MCP Tools] Failed to index tools for search:', error)\n    throw error\n  }\n}\n\n/**\n * Create a ToolSearchService instance for tool discovery.\n * Use this to get a configured service for discovering relevant tools.\n *\n * @param searchService - The search service from DI container\n * @returns Configured ToolSearchService\n */\nexport function createToolSearchService(searchService: SearchService): ToolSearchService {\n  const registry = getToolRegistry()\n  return new ToolSearchService(searchService, registry)\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,iBAAiB,uBAAuB;AAEjD,SAAS,yBAAyB;AAiBlC,MAAM,oBAAuC;AAAA,EAC3C,MAAM;AAAA,EACN,aACE;AAAA,EACF,aAAa,EAAE,OAAO,CAAC,CAAC;AAAA,EACxB,kBAAkB,CAAC;AAAA;AAAA,EACnB,SAAS,OAAO,QAAiB,QAAwB;AACvD,WAAO;AAAA,MACL,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc,IAAI;AAAA,MAClB,UAAU,IAAI;AAAA,MACd,cAAc,IAAI,aAAa;AAAA,IACjC;AAAA,EACF;AACF;AAQO,SAAS,gBAAgB,UAAkB,OAA6B;AAC7E,aAAW,QAAQ,OAAO;AACxB;AAAA,MACE;AAAA,QACE,MAAM,KAAK;AAAA,QACX,aAAa,KAAK;AAAA,QAClB,aAAa,KAAK;AAAA,QAClB,kBAAkB,KAAK;AAAA,QACvB,SAAS,KAAK;AAAA,MAChB;AAAA,MACA,EAAE,SAAS;AAAA,IACb;AAAA,EACF;AACF;AAMA,eAAsB,qBAAoC;AAExD,kBAAgB,mBAAmB,EAAE,UAAU,UAAU,CAAC;AAC1D,UAAQ,MAAM,qDAAqD;AAMnE,MAAI;AACF,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,kBAAkB;AAC7D,UAAM,YAAY,MAAM,kBAAkB;AAC1C,YAAQ,MAAM,0BAA0B,SAAS,kBAAkB;AAAA,EACrE,SAAS,OAAO;AACd,YAAQ,MAAM,+CAA+C,KAAK;AAAA,EACpE;AAKF;AAUA,eAAsB,oBACpB,eACA,QAAQ,OAMP;AACD,QAAM,WAAW,gBAAgB;AACjC,QAAM,oBAAoB,IAAI,kBAAkB,eAAe,QAAQ;AAEvE,MAAI;AACF,UAAM,SAAS,MAAM,kBAAkB,WAAW,KAAK;AAEvD,YAAQ,MAAM,uBAAuB,OAAO,OAAO,mBAAmB;AACtE,YAAQ,MAAM,4CAA4C,OAAO,WAAW,KAAK,IAAI,CAAC,EAAE;AAExF,QAAI,OAAO,UAAU,GAAG;AACtB,cAAQ,MAAM,uBAAuB,OAAO,OAAO,oBAAoB;AAAA,IACzE;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,iDAAiD,KAAK;AACpE,UAAM;AAAA,EACR;AACF;AASO,SAAS,wBAAwB,eAAiD;AACvF,QAAM,WAAW,gBAAgB;AACjC,SAAO,IAAI,kBAAkB,eAAe,QAAQ;AACtD;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { SearchService } from '@open-mercato/search/service'\nimport { registerMcpTool, getToolRegistry, toolRegistry, unregisterMcpTool } from './tool-registry'\nimport {\n  applyToolOverrideMap,\n  composeToolOverrideMap,\n  type AiToolOverrideConfigEntry,\n} from './ai-overrides'\nimport type { McpToolDefinition, McpToolContext } from './types'\nimport { ToolSearchService } from './tool-search'\n\n/**\n * Module tool definition as exported from ai-tools.ts files.\n */\ntype ModuleAiTool = {\n  name: string\n  description: string\n  inputSchema: any\n  requiredFeatures?: string[]\n  handler: (input: any, ctx: any) => Promise<unknown>\n}\n\n/**\n * Shape of a single entry inside `ai-tools.generated.ts`.\n * Matches the structural contract emitted by\n * `packages/cli/src/lib/generators/extensions/ai-tools.ts`.\n */\nexport type AiToolConfigEntry = {\n  moduleId: string\n  tools: unknown[]\n}\n\nfunction isModuleAiTool(value: unknown): value is ModuleAiTool {\n  if (!value || typeof value !== 'object') return false\n  const candidate = value as Record<string, unknown>\n  return (\n    typeof candidate.name === 'string' &&\n    typeof candidate.description === 'string' &&\n    candidate.inputSchema !== undefined &&\n    typeof candidate.handler === 'function'\n  )\n}\n\n/**\n * Built-in context.whoami tool that returns the current authentication context.\n * This is useful for AI to understand its current tenant/org scope.\n */\nconst contextWhoamiTool: McpToolDefinition = {\n  name: 'context_whoami',\n  description:\n    'Get the current authentication context including tenant ID, organization ID, user ID, and available features. Use this to understand your current scope before performing operations.',\n  inputSchema: z.object({}),\n  requiredFeatures: [], // No specific feature required - available to all authenticated users\n  handler: async (_input: unknown, ctx: McpToolContext) => {\n    return {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      isSuperAdmin: ctx.isSuperAdmin,\n      features: ctx.userFeatures,\n      featureCount: ctx.userFeatures.length,\n    }\n  },\n}\n\n/**\n * Load and register AI tools from a module's ai-tools.ts export.\n *\n * @param moduleId - The module identifier (e.g., 'search', 'customers')\n * @param tools - Array of tool definitions from the module\n *\n * IMPORTANT: We register the full typed tool (spread) \u2014 never reconstruct a\n * minimal `{ name, description, inputSchema, requiredFeatures, handler }`\n * payload. Stripping fields like `isMutation`, `displayName`, `isBulk`,\n * `loadBeforeRecord(s)` makes the agent settings UI report mutation tools\n * as read-only and prevents the chat dispatcher's mutation interceptor\n * from firing.\n */\nexport function loadModuleTools(moduleId: string, tools: ModuleAiTool[]): void {\n  for (const tool of tools) {\n    registerMcpTool(tool as McpToolDefinition, { moduleId })\n  }\n}\n\n/**\n * Register the generated `aiToolConfigEntries` shape emitted by the\n * `ai-tools.generated.ts` generator extension. Entries with an empty\n * `tools` array stay silent (the generator already filters those out).\n * Invalid tool objects are skipped with a warning instead of throwing.\n *\n * Returns the number of tools actually registered so callers can log it.\n */\nexport function registerGeneratedAiToolEntries(entries: AiToolConfigEntry[]): number {\n  let registered = 0\n  for (const entry of entries) {\n    if (!entry || typeof entry.moduleId !== 'string') continue\n    if (!Array.isArray(entry.tools) || entry.tools.length === 0) continue\n    for (const candidate of entry.tools) {\n      if (!isModuleAiTool(candidate)) {\n        console.warn(\n          `[MCP Tools] Skipping malformed AI tool in module \"${entry.moduleId}\"`\n        )\n        continue\n      }\n      // Register the full typed tool \u2014 see comment on `loadModuleTools`.\n      registerMcpTool(candidate as McpToolDefinition, { moduleId: entry.moduleId })\n      registered += 1\n    }\n  }\n  return registered\n}\n\n/**\n * Apply the list of `aiToolOverrides` exports collected by the generator\n * (one entry per module) to the live tool registry. Tools mapped to\n * `null` are unregistered; tools mapped to a full definition replace the\n * existing registration. Module load order controls precedence \u2014 last\n * entry wins. The `modules.ts`-tier and programmatic overrides (set via\n * {@link applyAiOverridesFromEnabledModules} and\n * {@link applyAiToolOverrides}) supersede file-based entries.\n *\n * Safe to call when no override file is present (the entries array is\n * empty); it is a no-op then.\n */\nexport function applyAiToolOverrideEntries(\n  entries: readonly AiToolOverrideConfigEntry[],\n): void {\n  const overrideMap = composeToolOverrideMap(entries)\n  if (Object.keys(overrideMap).length === 0) return\n  const baseTools = toolRegistry.getTools() as Map<string, McpToolDefinition>\n  const overridden = applyToolOverrideMap<McpToolDefinition>(baseTools, overrideMap)\n  for (const [name, value] of Object.entries(overrideMap)) {\n    if (value === null) {\n      unregisterMcpTool(name)\n      console.info(`[AI Overrides] Tool \"${name}\" disabled by override.`)\n      continue\n    }\n    const next = overridden.get(name)\n    if (!next) continue\n    // Re-register through the public path so moduleMap stays consistent.\n    registerMcpTool(next as McpToolDefinition, { moduleId: 'ai_overrides' })\n    console.info(`[AI Overrides] Tool \"${name}\" replaced by override.`)\n  }\n}\n\n/**\n * Read `aiToolOverrideEntries` from `ai-tools.generated.ts` and apply\n * them on top of the live tool registry. Safe to call when the file is\n * missing (pre-generate builds, tests) \u2014 applies only the\n * `modules.ts`-tier and programmatic overrides in that case.\n */\nexport async function loadGeneratedAiToolOverrides(): Promise<void> {\n  let entries: AiToolOverrideConfigEntry[] = []\n  try {\n    const mod = (await import(\n      '@/.mercato/generated/ai-tools.generated'\n    )) as { aiToolOverrideEntries?: unknown[] }\n    entries = Array.isArray(mod.aiToolOverrideEntries)\n      ? (mod.aiToolOverrideEntries as AiToolOverrideConfigEntry[])\n      : []\n  } catch {\n    // No override file generated.\n  }\n  applyAiToolOverrideEntries(entries)\n}\n\n/**\n * Load the generated `ai-tools.generated.ts` file emitted by\n * `yarn generate` and register every declared module tool through the\n * existing `registerMcpTool` path. Safe to call when the generated file\n * is missing (e.g., tests or pre-generate builds) \u2014 returns 0.\n */\nexport async function loadGeneratedModuleAiTools(): Promise<number> {\n  try {\n    const mod = (await import(\n      '@/.mercato/generated/ai-tools.generated'\n    )) as { aiToolConfigEntries?: AiToolConfigEntry[] }\n    const entries = Array.isArray(mod.aiToolConfigEntries)\n      ? mod.aiToolConfigEntries\n      : []\n    const count = registerGeneratedAiToolEntries(entries)\n    // Apply module-to-module + programmatic tool overrides AFTER the base\n    // registrations so disable / replace semantics work end-to-end.\n    try {\n      await loadGeneratedAiToolOverrides()\n    } catch (error) {\n      console.error('[AI Overrides] Failed to apply tool overrides:', error)\n    }\n    return count\n  } catch (error) {\n    console.error(\n      '[MCP Tools] Could not load ai-tools.generated.ts (module tools unavailable):',\n      error\n    )\n    return 0\n  }\n}\n\n/**\n * Dynamically load tools from known module paths.\n * This is called during MCP server startup.\n */\nexport async function loadAllModuleTools(): Promise<void> {\n  // 1. Register built-in tools\n  registerMcpTool(contextWhoamiTool, { moduleId: 'context' })\n  console.error('[MCP Tools] Registered built-in context_whoami tool')\n\n  // 2. Register Code Mode tools (search + execute)\n  // These two tools replace the previous api_discover, call_api, discover_schema,\n  // and all module-specific AI tools. The AI writes JavaScript that runs in a\n  // node:vm sandbox with access to the OpenAPI spec and api.request().\n  try {\n    const { loadCodeModeTools } = await import('./codemode-tools')\n    const toolCount = await loadCodeModeTools()\n    console.error(`[MCP Tools] Registered ${toolCount} Code Mode tools`)\n  } catch (error) {\n    console.error('[MCP Tools] Could not load Code Mode tools:', error)\n  }\n\n  // 3. Register module-contributed tools from ai-tools.generated.ts.\n  // Code Mode stays untouched; module tools are additive. Missing\n  // generated file is not fatal (pre-generate builds, tests).\n  try {\n    const moduleToolCount = await loadGeneratedModuleAiTools()\n    console.error(\n      `[MCP Tools] Registered ${moduleToolCount} module-contributed AI tools from ai-tools.generated.ts`\n    )\n  } catch (error) {\n    console.error('[MCP Tools] Could not load module AI tools:', error)\n  }\n}\n\n/**\n * Index all registered tools for hybrid search discovery.\n * This should be called after loadAllModuleTools() when the search service is available.\n *\n * @param searchService - The search service from DI container\n * @param force - Force re-indexing even if checksums match\n * @returns Indexing result with statistics\n */\nexport async function indexToolsForSearch(\n  searchService: SearchService,\n  force = false\n): Promise<{\n  indexed: number\n  skipped: number\n  strategies: string[]\n  checksum: string\n}> {\n  const registry = getToolRegistry()\n  const toolSearchService = new ToolSearchService(searchService, registry)\n\n  try {\n    const result = await toolSearchService.indexTools(force)\n\n    console.error(`[MCP Tools] Indexed ${result.indexed} tools for search`)\n    console.error(`[MCP Tools] Search strategies available: ${result.strategies.join(', ')}`)\n\n    if (result.skipped > 0) {\n      console.error(`[MCP Tools] Skipped ${result.skipped} tools (unchanged)`)\n    }\n\n    return result\n  } catch (error) {\n    console.error('[MCP Tools] Failed to index tools for search:', error)\n    throw error\n  }\n}\n\n/**\n * Create a ToolSearchService instance for tool discovery.\n * Use this to get a configured service for discovering relevant tools.\n *\n * @param searchService - The search service from DI container\n * @returns Configured ToolSearchService\n */\nexport function createToolSearchService(searchService: SearchService): ToolSearchService {\n  const registry = getToolRegistry()\n  return new ToolSearchService(searchService, registry)\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,iBAAiB,iBAAiB,cAAc,yBAAyB;AAClF;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAEP,SAAS,yBAAyB;AAuBlC,SAAS,eAAe,OAAuC;AAC7D,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,YAAY;AAClB,SACE,OAAO,UAAU,SAAS,YAC1B,OAAO,UAAU,gBAAgB,YACjC,UAAU,gBAAgB,UAC1B,OAAO,UAAU,YAAY;AAEjC;AAMA,MAAM,oBAAuC;AAAA,EAC3C,MAAM;AAAA,EACN,aACE;AAAA,EACF,aAAa,EAAE,OAAO,CAAC,CAAC;AAAA,EACxB,kBAAkB,CAAC;AAAA;AAAA,EACnB,SAAS,OAAO,QAAiB,QAAwB;AACvD,WAAO;AAAA,MACL,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc,IAAI;AAAA,MAClB,UAAU,IAAI;AAAA,MACd,cAAc,IAAI,aAAa;AAAA,IACjC;AAAA,EACF;AACF;AAeO,SAAS,gBAAgB,UAAkB,OAA6B;AAC7E,aAAW,QAAQ,OAAO;AACxB,oBAAgB,MAA2B,EAAE,SAAS,CAAC;AAAA,EACzD;AACF;AAUO,SAAS,+BAA+B,SAAsC;AACnF,MAAI,aAAa;AACjB,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,SAAS,OAAO,MAAM,aAAa,SAAU;AAClD,QAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,KAAK,MAAM,MAAM,WAAW,EAAG;AAC7D,eAAW,aAAa,MAAM,OAAO;AACnC,UAAI,CAAC,eAAe,SAAS,GAAG;AAC9B,gBAAQ;AAAA,UACN,qDAAqD,MAAM,QAAQ;AAAA,QACrE;AACA;AAAA,MACF;AAEA,sBAAgB,WAAgC,EAAE,UAAU,MAAM,SAAS,CAAC;AAC5E,oBAAc;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAcO,SAAS,2BACd,SACM;AACN,QAAM,cAAc,uBAAuB,OAAO;AAClD,MAAI,OAAO,KAAK,WAAW,EAAE,WAAW,EAAG;AAC3C,QAAM,YAAY,aAAa,SAAS;AACxC,QAAM,aAAa,qBAAwC,WAAW,WAAW;AACjF,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,WAAW,GAAG;AACvD,QAAI,UAAU,MAAM;AAClB,wBAAkB,IAAI;AACtB,cAAQ,KAAK,wBAAwB,IAAI,yBAAyB;AAClE;AAAA,IACF;AACA,UAAM,OAAO,WAAW,IAAI,IAAI;AAChC,QAAI,CAAC,KAAM;AAEX,oBAAgB,MAA2B,EAAE,UAAU,eAAe,CAAC;AACvE,YAAQ,KAAK,wBAAwB,IAAI,yBAAyB;AAAA,EACpE;AACF;AAQA,eAAsB,+BAA8C;AAClE,MAAI,UAAuC,CAAC;AAC5C,MAAI;AACF,UAAM,MAAO,MAAM,OACjB,yCACF;AACA,cAAU,MAAM,QAAQ,IAAI,qBAAqB,IAC5C,IAAI,wBACL,CAAC;AAAA,EACP,QAAQ;AAAA,EAER;AACA,6BAA2B,OAAO;AACpC;AAQA,eAAsB,6BAA8C;AAClE,MAAI;AACF,UAAM,MAAO,MAAM,OACjB,yCACF;AACA,UAAM,UAAU,MAAM,QAAQ,IAAI,mBAAmB,IACjD,IAAI,sBACJ,CAAC;AACL,UAAM,QAAQ,+BAA+B,OAAO;AAGpD,QAAI;AACF,YAAM,6BAA6B;AAAA,IACrC,SAAS,OAAO;AACd,cAAQ,MAAM,kDAAkD,KAAK;AAAA,IACvE;AACA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,qBAAoC;AAExD,kBAAgB,mBAAmB,EAAE,UAAU,UAAU,CAAC;AAC1D,UAAQ,MAAM,qDAAqD;AAMnE,MAAI;AACF,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,kBAAkB;AAC7D,UAAM,YAAY,MAAM,kBAAkB;AAC1C,YAAQ,MAAM,0BAA0B,SAAS,kBAAkB;AAAA,EACrE,SAAS,OAAO;AACd,YAAQ,MAAM,+CAA+C,KAAK;AAAA,EACpE;AAKA,MAAI;AACF,UAAM,kBAAkB,MAAM,2BAA2B;AACzD,YAAQ;AAAA,MACN,0BAA0B,eAAe;AAAA,IAC3C;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,+CAA+C,KAAK;AAAA,EACpE;AACF;AAUA,eAAsB,oBACpB,eACA,QAAQ,OAMP;AACD,QAAM,WAAW,gBAAgB;AACjC,QAAM,oBAAoB,IAAI,kBAAkB,eAAe,QAAQ;AAEvE,MAAI;AACF,UAAM,SAAS,MAAM,kBAAkB,WAAW,KAAK;AAEvD,YAAQ,MAAM,uBAAuB,OAAO,OAAO,mBAAmB;AACtE,YAAQ,MAAM,4CAA4C,OAAO,WAAW,KAAK,IAAI,CAAC,EAAE;AAExF,QAAI,OAAO,UAAU,GAAG;AACtB,cAAQ,MAAM,uBAAuB,OAAO,OAAO,oBAAoB;AAAA,IACzE;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,iDAAiD,KAAK;AACpE,UAAM;AAAA,EACR;AACF;AASO,SAAS,wBAAwB,eAAiD;AACvF,QAAM,WAAW,gBAAgB;AACjC,SAAO,IAAI,kBAAkB,eAAe,QAAQ;AACtD;",
   "names": []
 }

package/dist/modules/ai_assistant/lib/tool-test-fixtures.js

@@ -0,0 +1,120 @@
+const f = (fixture) => fixture;
+const toolFixtures = {
+  // -------------------- ai_assistant module --------------------
+  "meta.describe_agent": f({
+    input: { agentId: "customers.account_assistant" }
+  }),
+  "attachments.list_record_attachments": f({
+    input: { entityType: "customers:person", recordId: "00000000-0000-0000-0000-000000000000", limit: 5 },
+    note: "Empty result is a valid response; we only assert shape."
+  }),
+  "attachments.read_attachment": f({
+    skip: true,
+    note: "Requires a real attachment id \u2014 covered by attachment-bridge integration tests."
+  }),
+  "search.hybrid_search": f({
+    input: { q: "demo", limit: 5 }
+  }),
+  "search.get_record_context": f({
+    skip: true,
+    note: "Requires a known record id from the search index; covered by hybrid_search tests."
+  }),
+  // -------------------- search module --------------------
+  search_query: f({ input: { q: "demo", limit: 5 } }),
+  search_status: f({ input: {} }),
+  search_get: f({ skip: true, note: "Requires a known indexed record id." }),
+  search_schema: f({ input: {} }),
+  search_aggregate: f({ skip: true, note: "Requires field config; covered by search module unit tests." }),
+  search_reindex: f({ skip: true, note: "Mutation tool \u2014 would trigger a real reindex job." }),
+  // -------------------- customers module --------------------
+  "customers.list_people": f({ input: { limit: 5 } }),
+  "customers.get_person": f({
+    skip: true,
+    note: "Underlying route packages/core/.../customers/api/people/[id]/route.js imports `next/server` which Node ESM cannot resolve from package dist. Bug \u2014 re-enable once the route is ESM-clean or routed through the operation runner with a different loader."
+  }),
+  "customers.list_companies": f({ input: { limit: 5 } }),
+  "customers.get_company": f({
+    skip: true,
+    note: "Same next/server ESM-resolution issue as customers.get_person."
+  }),
+  "customers.list_deals": f({ input: { limit: 5 } }),
+  "customers.get_deal": f({
+    skip: true,
+    note: "Same next/server ESM-resolution issue as customers.get_person."
+  }),
+  "customers.list_activities": f({ input: { limit: 5 } }),
+  "customers.list_tasks": f({ input: { limit: 5 } }),
+  "customers.list_addresses": f({
+    idFrom: "customers.list_people",
+    bindAs: "entityId",
+    extra: { entityType: "person" },
+    note: 'Schema requires { entityType: "person" | "company", entityId }.'
+  }),
+  "customers.list_tags": f({ input: { limit: 5 } }),
+  "customers.get_settings": f({ input: {} }),
+  "customers.update_deal_stage": f({
+    idFrom: "customers.list_deals",
+    bindAs: "dealId",
+    extra: { toStage: "open" },
+    note: "Mutation \u2014 schema requires exactly one of { toPipelineStageId, toStage }."
+  }),
+  // -------------------- catalog module --------------------
+  "catalog.list_products": f({ input: { limit: 5 } }),
+  "catalog.search_products": f({ input: { query: "demo", limit: 5 } }),
+  "catalog.get_product": f({ idFrom: "catalog.list_products", bindAs: "productId" }),
+  "catalog.get_product_bundle": f({ idFrom: "catalog.list_products", bindAs: "productId" }),
+  "catalog.list_categories": f({ input: { limit: 10 } }),
+  "catalog.list_variants": f({ idFrom: "catalog.list_products", bindAs: "productId" }),
+  "catalog.list_offers": f({
+    skip: true,
+    note: "Tool requiredFeatures do not cover the underlying GET /catalog/offers route requiredFeatures \u2014 real ACL config drift. Re-enable after fixing catalog.list_offers requiredFeatures to include the route gates."
+  }),
+  "catalog.list_media": f({ idFrom: "catalog.list_products", bindAs: "productId" }),
+  "catalog.list_tags": f({ input: { limit: 10 } }),
+  "catalog.get_configuration": f({ input: {} }),
+  // Authoring/structured-output tools — they call the LLM, skip in test mode
+  // so TC-INT-AI-TOOLS still passes in CI without provider API keys.
+  "catalog.draft_description_from_attributes": f({ skip: true, note: "LLM-backed authoring tool." }),
+  "catalog.extract_attributes_from_description": f({ skip: true, note: "LLM-backed authoring tool." }),
+  "catalog.draft_description_from_media": f({ skip: true, note: "LLM-backed authoring tool." }),
+  "catalog.suggest_title_variants": f({ skip: true, note: "LLM-backed authoring tool." }),
+  "catalog.suggest_price_adjustment": f({ skip: true, note: "LLM-backed authoring tool." }),
+  // Mutation tools — exercised via prepareMutation only.
+  "catalog.update_product": f({
+    idFrom: "catalog.list_products",
+    bindAs: "productId",
+    extra: { subtitle: "tool-test-runner-noop" },
+    note: "Single optional field tweak; prepareMutation produces a preview card."
+  }),
+  "catalog.bulk_update_products": f({
+    skip: true,
+    note: "Bulk mutation; needs records[] with versions \u2014 covered by catalog merchandising integration test."
+  }),
+  "catalog.apply_attribute_extraction": f({
+    skip: true,
+    note: "Bulk mutation tied to extract_attributes output."
+  }),
+  "catalog.update_product_media_descriptions": f({
+    skip: true,
+    note: "Bulk mutation tied to draft_media_descriptions output."
+  }),
+  // -------------------- inbox_ops module --------------------
+  inbox_ops_list_proposals: f({ input: { limit: 5 } }),
+  inbox_ops_get_proposal: f({ idFrom: "inbox_ops_list_proposals" }),
+  inbox_ops_categorize_email: f({
+    skip: true,
+    note: "Requires a queued email payload; LLM-backed."
+  }),
+  inbox_ops_accept_action: f({
+    skip: true,
+    note: "Mutation that finalizes a proposal; covered by inbox_ops integration tests."
+  })
+};
+function getFixture(toolName) {
+  return toolFixtures[toolName];
+}
+export {
+  getFixture,
+  toolFixtures
+};
+//# sourceMappingURL=tool-test-fixtures.js.map

package/dist/modules/ai_assistant/lib/tool-test-fixtures.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/tool-test-fixtures.ts"],
+  "sourcesContent": ["/**\n * Per-tool sample inputs used by `tool-test-runner.ts` (see also the\n * `test-tools` CLI subcommand and `TC-INT-AI-TOOLS.spec.ts`).\n *\n * Inputs are deliberately conservative \u2014 every entry is the smallest valid\n * shape that exercises the handler against demo-seeded data. ID-shaped tools\n * declare `idFrom` so the runner first runs the sibling list tool and threads\n * the discovered id through; this avoids hand-rolling fixture UUIDs that go\n * stale every time the demo seed regenerates.\n *\n * Tools without a fixture are skipped with reason `'no fixture'` rather than\n * failing \u2014 keeps the test green for newly added tools until a maintainer\n * adds an entry. Mutation tools share this map and are exercised through\n * `prepareMutation`; the runner asserts they return a pending-action envelope\n * and never confirms the action.\n */\n\nexport type ToolFixtureValueRef = { idFrom: string; field?: string }\n\nexport type ToolFixtureInput = Record<string, unknown> | ToolFixtureValueRef\n\nexport interface ToolFixture {\n  /** When `true` the runner skips this tool with reason `'skip-by-fixture'`. */\n  skip?: boolean\n  /** Static input passed to the handler. Overrides `idFrom`-based inputs. */\n  input?: Record<string, unknown>\n  /**\n   * When set, the runner calls the named list tool first, picks the first\n   * record, reads `field` (default `id`) from it, and merges it into the input\n   * under the key declared by `bindAs` (default `id`).\n   */\n  idFrom?: string\n  bindAs?: string\n  /** Optional extra static fields merged on top of the chained input. */\n  extra?: Record<string, unknown>\n  /** Free-form note explaining the fixture choice. */\n  note?: string\n}\n\nconst f = (fixture: ToolFixture): ToolFixture => fixture\n\nexport const toolFixtures: Record<string, ToolFixture> = {\n  // -------------------- ai_assistant module --------------------\n  'meta.describe_agent': f({\n    input: { agentId: 'customers.account_assistant' },\n  }),\n  'attachments.list_record_attachments': f({\n    input: { entityType: 'customers:person', recordId: '00000000-0000-0000-0000-000000000000', limit: 5 },\n    note: 'Empty result is a valid response; we only assert shape.',\n  }),\n  'attachments.read_attachment': f({\n    skip: true,\n    note: 'Requires a real attachment id \u2014 covered by attachment-bridge integration tests.',\n  }),\n  'search.hybrid_search': f({\n    input: { q: 'demo', limit: 5 },\n  }),\n  'search.get_record_context': f({\n    skip: true,\n    note: 'Requires a known record id from the search index; covered by hybrid_search tests.',\n  }),\n\n  // -------------------- search module --------------------\n  search_query: f({ input: { q: 'demo', limit: 5 } }),\n  search_status: f({ input: {} }),\n  search_get: f({ skip: true, note: 'Requires a known indexed record id.' }),\n  search_schema: f({ input: {} }),\n  search_aggregate: f({ skip: true, note: 'Requires field config; covered by search module unit tests.' }),\n  search_reindex: f({ skip: true, note: 'Mutation tool \u2014 would trigger a real reindex job.' }),\n\n  // -------------------- customers module --------------------\n  'customers.list_people': f({ input: { limit: 5 } }),\n  'customers.get_person': f({\n    skip: true,\n    note: 'Underlying route packages/core/.../customers/api/people/[id]/route.js imports `next/server` which Node ESM cannot resolve from package dist. Bug \u2014 re-enable once the route is ESM-clean or routed through the operation runner with a different loader.',\n  }),\n  'customers.list_companies': f({ input: { limit: 5 } }),\n  'customers.get_company': f({\n    skip: true,\n    note: 'Same next/server ESM-resolution issue as customers.get_person.',\n  }),\n  'customers.list_deals': f({ input: { limit: 5 } }),\n  'customers.get_deal': f({\n    skip: true,\n    note: 'Same next/server ESM-resolution issue as customers.get_person.',\n  }),\n  'customers.list_activities': f({ input: { limit: 5 } }),\n  'customers.list_tasks': f({ input: { limit: 5 } }),\n  'customers.list_addresses': f({\n    idFrom: 'customers.list_people',\n    bindAs: 'entityId',\n    extra: { entityType: 'person' },\n    note: 'Schema requires { entityType: \"person\" | \"company\", entityId }.',\n  }),\n  'customers.list_tags': f({ input: { limit: 5 } }),\n  'customers.get_settings': f({ input: {} }),\n  'customers.update_deal_stage': f({\n    idFrom: 'customers.list_deals',\n    bindAs: 'dealId',\n    extra: { toStage: 'open' },\n    note: 'Mutation \u2014 schema requires exactly one of { toPipelineStageId, toStage }.',\n  }),\n\n  // -------------------- catalog module --------------------\n  'catalog.list_products': f({ input: { limit: 5 } }),\n  'catalog.search_products': f({ input: { query: 'demo', limit: 5 } }),\n  'catalog.get_product': f({ idFrom: 'catalog.list_products', bindAs: 'productId' }),\n  'catalog.get_product_bundle': f({ idFrom: 'catalog.list_products', bindAs: 'productId' }),\n  'catalog.list_categories': f({ input: { limit: 10 } }),\n  'catalog.list_variants': f({ idFrom: 'catalog.list_products', bindAs: 'productId' }),\n  'catalog.list_offers': f({\n    skip: true,\n    note: 'Tool requiredFeatures do not cover the underlying GET /catalog/offers route requiredFeatures \u2014 real ACL config drift. Re-enable after fixing catalog.list_offers requiredFeatures to include the route gates.',\n  }),\n  'catalog.list_media': f({ idFrom: 'catalog.list_products', bindAs: 'productId' }),\n  'catalog.list_tags': f({ input: { limit: 10 } }),\n  'catalog.get_configuration': f({ input: {} }),\n  // Authoring/structured-output tools \u2014 they call the LLM, skip in test mode\n  // so TC-INT-AI-TOOLS still passes in CI without provider API keys.\n  'catalog.draft_description_from_attributes': f({ skip: true, note: 'LLM-backed authoring tool.' }),\n  'catalog.extract_attributes_from_description': f({ skip: true, note: 'LLM-backed authoring tool.' }),\n  'catalog.draft_description_from_media': f({ skip: true, note: 'LLM-backed authoring tool.' }),\n  'catalog.suggest_title_variants': f({ skip: true, note: 'LLM-backed authoring tool.' }),\n  'catalog.suggest_price_adjustment': f({ skip: true, note: 'LLM-backed authoring tool.' }),\n  // Mutation tools \u2014 exercised via prepareMutation only.\n  'catalog.update_product': f({\n    idFrom: 'catalog.list_products',\n    bindAs: 'productId',\n    extra: { subtitle: 'tool-test-runner-noop' },\n    note: 'Single optional field tweak; prepareMutation produces a preview card.',\n  }),\n  'catalog.bulk_update_products': f({\n    skip: true,\n    note: 'Bulk mutation; needs records[] with versions \u2014 covered by catalog merchandising integration test.',\n  }),\n  'catalog.apply_attribute_extraction': f({\n    skip: true,\n    note: 'Bulk mutation tied to extract_attributes output.',\n  }),\n  'catalog.update_product_media_descriptions': f({\n    skip: true,\n    note: 'Bulk mutation tied to draft_media_descriptions output.',\n  }),\n\n  // -------------------- inbox_ops module --------------------\n  inbox_ops_list_proposals: f({ input: { limit: 5 } }),\n  inbox_ops_get_proposal: f({ idFrom: 'inbox_ops_list_proposals' }),\n  inbox_ops_categorize_email: f({\n    skip: true,\n    note: 'Requires a queued email payload; LLM-backed.',\n  }),\n  inbox_ops_accept_action: f({\n    skip: true,\n    note: 'Mutation that finalizes a proposal; covered by inbox_ops integration tests.',\n  }),\n}\n\nexport function getFixture(toolName: string): ToolFixture | undefined {\n  return toolFixtures[toolName]\n}\n"],
+  "mappings": "AAuCA,MAAM,IAAI,CAAC,YAAsC;AAE1C,MAAM,eAA4C;AAAA;AAAA,EAEvD,uBAAuB,EAAE;AAAA,IACvB,OAAO,EAAE,SAAS,8BAA8B;AAAA,EAClD,CAAC;AAAA,EACD,uCAAuC,EAAE;AAAA,IACvC,OAAO,EAAE,YAAY,oBAAoB,UAAU,wCAAwC,OAAO,EAAE;AAAA,IACpG,MAAM;AAAA,EACR,CAAC;AAAA,EACD,+BAA+B,EAAE;AAAA,IAC/B,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAAA,EACD,wBAAwB,EAAE;AAAA,IACxB,OAAO,EAAE,GAAG,QAAQ,OAAO,EAAE;AAAA,EAC/B,CAAC;AAAA,EACD,6BAA6B,EAAE;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAAA;AAAA,EAGD,cAAc,EAAE,EAAE,OAAO,EAAE,GAAG,QAAQ,OAAO,EAAE,EAAE,CAAC;AAAA,EAClD,eAAe,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;AAAA,EAC9B,YAAY,EAAE,EAAE,MAAM,MAAM,MAAM,sCAAsC,CAAC;AAAA,EACzE,eAAe,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;AAAA,EAC9B,kBAAkB,EAAE,EAAE,MAAM,MAAM,MAAM,8DAA8D,CAAC;AAAA,EACvG,gBAAgB,EAAE,EAAE,MAAM,MAAM,MAAM,yDAAoD,CAAC;AAAA;AAAA,EAG3F,yBAAyB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;AAAA,EAClD,wBAAwB,EAAE;AAAA,IACxB,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAAA,EACD,4BAA4B,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;AAAA,EACrD,yBAAyB,EAAE;AAAA,IACzB,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAAA,EACD,wBAAwB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;AAAA,EACjD,sBAAsB,EAAE;AAAA,IACtB,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAAA,EACD,6BAA6B,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;AAAA,EACtD,wBAAwB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;AAAA,EACjD,4BAA4B,EAAE;AAAA,IAC5B,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,OAAO,EAAE,YAAY,SAAS;AAAA,IAC9B,MAAM;AAAA,EACR,CAAC;AAAA,EACD,uBAAuB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;AAAA,EAChD,0BAA0B,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;AAAA,EACzC,+BAA+B,EAAE;AAAA,IAC/B,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,OAAO,EAAE,SAAS,OAAO;AAAA,IACzB,MAAM;AAAA,EACR,CAAC;AAAA;AAAA,EAGD,yBAAyB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;AAAA,EAClD,2BAA2B,EAAE,EAAE,OAAO,EAAE,OAAO,QAAQ,OAAO,EAAE,EAAE,CAAC;AAAA,EACnE,uBAAuB,EAAE,EAAE,QAAQ,yBAAyB,QAAQ,YAAY,CAAC;AAAA,EACjF,8BAA8B,EAAE,EAAE,QAAQ,yBAAyB,QAAQ,YAAY,CAAC;AAAA,EACxF,2BAA2B,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,CAAC;AAAA,EACrD,yBAAyB,EAAE,EAAE,QAAQ,yBAAyB,QAAQ,YAAY,CAAC;AAAA,EACnF,uBAAuB,EAAE;AAAA,IACvB,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAAA,EACD,sBAAsB,EAAE,EAAE,QAAQ,yBAAyB,QAAQ,YAAY,CAAC;AAAA,EAChF,qBAAqB,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,CAAC;AAAA,EAC/C,6BAA6B,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;AAAA;AAAA;AAAA,EAG5C,6CAA6C,EAAE,EAAE,MAAM,MAAM,MAAM,6BAA6B,CAAC;AAAA,EACjG,+CAA+C,EAAE,EAAE,MAAM,MAAM,MAAM,6BAA6B,CAAC;AAAA,EACnG,wCAAwC,EAAE,EAAE,MAAM,MAAM,MAAM,6BAA6B,CAAC;AAAA,EAC5F,kCAAkC,EAAE,EAAE,MAAM,MAAM,MAAM,6BAA6B,CAAC;AAAA,EACtF,oCAAoC,EAAE,EAAE,MAAM,MAAM,MAAM,6BAA6B,CAAC;AAAA;AAAA,EAExF,0BAA0B,EAAE;AAAA,IAC1B,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,OAAO,EAAE,UAAU,wBAAwB;AAAA,IAC3C,MAAM;AAAA,EACR,CAAC;AAAA,EACD,gCAAgC,EAAE;AAAA,IAChC,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAAA,EACD,sCAAsC,EAAE;AAAA,IACtC,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAAA,EACD,6CAA6C,EAAE;AAAA,IAC7C,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAAA;AAAA,EAGD,0BAA0B,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;AAAA,EACnD,wBAAwB,EAAE,EAAE,QAAQ,2BAA2B,CAAC;AAAA,EAChE,4BAA4B,EAAE;AAAA,IAC5B,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAAA,EACD,yBAAyB,EAAE;AAAA,IACzB,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AACH;AAEO,SAAS,WAAW,UAA2C;AACpE,SAAO,aAAa,QAAQ;AAC9B;",
+  "names": []
+}