@open-mercato/ai-assistant 0.5.1-develop.3036.f02c281f23 → 0.5.1-develop.3045.b4b3320cc2

package/dist/modules/ai_assistant/lib/tool-test-runner.js

@@ -0,0 +1,418 @@
+import path from "node:path";
+import fs from "node:fs";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getFixture } from "./tool-test-fixtures.js";
+import { prepareMutation } from "./prepare-mutation.js";
+import { executePendingActionConfirm } from "./pending-action-executor.js";
+function isToolDefinition(value) {
+  if (!value || typeof value !== "object") return false;
+  const candidate = value;
+  return typeof candidate.name === "string" && typeof candidate.description === "string" && candidate.inputSchema !== void 0 && typeof candidate.handler === "function";
+}
+function findGeneratedAiToolsPath() {
+  const here = (() => {
+    try {
+      return fileURLToPath(import.meta.url);
+    } catch {
+      return null;
+    }
+  })();
+  if (!here) return null;
+  let cursor = path.dirname(here);
+  for (let i = 0; i < 12; i++) {
+    const candidate = path.join(cursor, "apps", "mercato", ".mercato", "generated", "ai-tools.generated.ts");
+    if (fs.existsSync(candidate)) return candidate;
+    const next = path.dirname(cursor);
+    if (next === cursor) break;
+    cursor = next;
+  }
+  const fromCwd = path.resolve(process.cwd(), "apps", "mercato", ".mercato", "generated", "ai-tools.generated.ts");
+  if (fs.existsSync(fromCwd)) return fromCwd;
+  const fromCwdDirect = path.resolve(process.cwd(), ".mercato", "generated", "ai-tools.generated.ts");
+  if (fs.existsSync(fromCwdDirect)) return fromCwdDirect;
+  return null;
+}
+async function compileAndImportGenerated(tsPath) {
+  const jsPath = tsPath.replace(/\.ts$/, ".mjs");
+  const appRoot = path.dirname(path.dirname(path.dirname(tsPath)));
+  const tsExists = fs.existsSync(tsPath);
+  if (!tsExists) {
+    throw new Error(`Generated file not found: ${tsPath}`);
+  }
+  const jsExists = fs.existsSync(jsPath);
+  const needsCompile = !jsExists || fs.statSync(tsPath).mtimeMs > fs.statSync(jsPath).mtimeMs;
+  if (needsCompile) {
+    const esbuild = await import("esbuild");
+    const tsSource = fs.readFileSync(tsPath, "utf-8");
+    const aliasRewritten = tsSource.replace(
+      /from\s+["']@\/([^"']+)["']/g,
+      (_match, p1) => {
+        const target = path.join(appRoot, p1);
+        const candidate = fs.existsSync(target) ? target : fs.existsSync(target + ".ts") ? target + ".ts" : target;
+        return `from ${JSON.stringify(pathToFileURL(candidate).href)}`;
+      }
+    ).replace(
+      /import\s*\(\s*["']@\/([^"']+)["']\s*\)/g,
+      (_match, p1) => {
+        const target = path.join(appRoot, p1);
+        const candidate = fs.existsSync(target) ? target : fs.existsSync(target + ".ts") ? target + ".ts" : target;
+        return `import(${JSON.stringify(pathToFileURL(candidate).href)})`;
+      }
+    );
+    const result = await esbuild.transform(aliasRewritten, {
+      loader: "ts",
+      format: "esm",
+      target: "node18",
+      sourcemap: false,
+      sourcefile: tsPath
+    });
+    fs.writeFileSync(jsPath, result.code);
+  }
+  return await import(pathToFileURL(jsPath).href);
+}
+async function ensureApiRouteManifestsRegistered(generatedDir) {
+  const tsPath = path.join(generatedDir, "api-routes.generated.ts");
+  if (!fs.existsSync(tsPath)) return;
+  try {
+    const mod = await compileAndImportGenerated(tsPath);
+    const apiRoutes = mod.apiRoutes;
+    if (!Array.isArray(apiRoutes)) {
+      console.warn("[tool-test-runner] api-routes.generated.mjs returned no apiRoutes array");
+      return;
+    }
+    const registry = await import("@open-mercato/shared/modules/registry");
+    registry.registerApiRouteManifests(
+      apiRoutes
+    );
+    if (process.env.OM_TOOL_TEST_DEBUG === "1") {
+      console.log(
+        `[tool-test-runner] Registered ${apiRoutes.length} api-route manifests; getApiRouteManifests().length=${registry.getApiRouteManifests().length}`
+      );
+    }
+  } catch (error) {
+    console.warn(
+      "[tool-test-runner] Could not register api-routes manifest:",
+      error instanceof Error ? error.message : error
+    );
+  }
+}
+async function loadGeneratedTools() {
+  const tsPath = findGeneratedAiToolsPath();
+  if (!tsPath) {
+    throw new Error(
+      "Could not locate apps/<app>/.mercato/generated/ai-tools.generated.ts. Run `yarn generate` first."
+    );
+  }
+  await ensureApiRouteManifestsRegistered(path.dirname(tsPath));
+  const mod = await compileAndImportGenerated(tsPath);
+  const entries = mod.aiToolConfigEntriesRaw ?? mod.aiToolConfigEntries ?? [];
+  const result = [];
+  for (const entry of entries) {
+    if (!entry || typeof entry.moduleId !== "string") continue;
+    const tools = Array.isArray(entry.tools) ? entry.tools.filter(isToolDefinition) : [];
+    result.push({ moduleId: entry.moduleId, tools });
+  }
+  return result;
+}
+async function pickDefaultTenant(container) {
+  try {
+    const em = container.resolve("em");
+    const conn = em.getConnection();
+    const tenantRows = await conn.execute(
+      `SELECT id FROM tenants WHERE deleted_at IS NULL ORDER BY created_at ASC LIMIT 1`
+    );
+    const tenantId = Array.isArray(tenantRows) && tenantRows[0] ? String(tenantRows[0].id) : null;
+    if (!tenantId) return null;
+    const escaped = tenantId.replace(/'/g, "''");
+    const orgRows = await conn.execute(
+      `SELECT id FROM organizations WHERE tenant_id = '${escaped}' AND deleted_at IS NULL ORDER BY created_at ASC LIMIT 1`
+    );
+    const organizationId = Array.isArray(orgRows) && orgRows[0] ? String(orgRows[0].id) : null;
+    const userRows = await conn.execute(
+      `SELECT id FROM users WHERE tenant_id = '${escaped}' AND deleted_at IS NULL ORDER BY created_at ASC LIMIT 1`
+    );
+    const userId = Array.isArray(userRows) && userRows[0] ? String(userRows[0].id) : null;
+    return { tenantId, organizationId, userId };
+  } catch (error) {
+    if (process.env.OM_TOOL_TEST_DEBUG === "1") {
+      console.warn("[tool-test-runner] pickDefaultTenant failed:", error);
+    }
+    return null;
+  }
+}
+function buildSuperAdminContext(container, tenantId, organizationId, userId) {
+  return {
+    tenantId,
+    organizationId,
+    userId,
+    container,
+    userFeatures: ["*"],
+    isSuperAdmin: true
+  };
+}
+function clipPreview(value) {
+  try {
+    const json = JSON.stringify(value);
+    if (json.length <= 400) return value;
+    return `${json.slice(0, 400)}\u2026(truncated, ${json.length} bytes)`;
+  } catch {
+    return "[unserializable]";
+  }
+}
+function dummyAgentForTool(tool) {
+  const policy = "destructive-confirm-required";
+  return {
+    id: `__test__.${tool.name}`,
+    moduleId: tool.name.split(".")[0] ?? "__test__",
+    label: "Tool Test Runner",
+    description: "Synthetic agent used by the tool test runner",
+    systemPrompt: "",
+    allowedTools: [tool.name],
+    readOnly: false,
+    mutationPolicy: policy
+  };
+}
+async function executeReadTool(tool, args, container, ctx) {
+  const fresh = await createRequestContainer();
+  const freshCtx = { ...ctx, container: fresh, tool };
+  void container;
+  return tool.handler(args, freshCtx);
+}
+async function executeMutationTool(tool, args, container, ctx) {
+  const fresh = await createRequestContainer();
+  const agent = dummyAgentForTool(tool);
+  const userId = ctx.userId ?? "00000000-0000-0000-0000-000000000000";
+  const { uiPart, pendingAction } = await prepareMutation(
+    {
+      agent,
+      tool,
+      toolCallArgs: args,
+      conversationId: null,
+      mutationPolicyOverride: null
+    },
+    {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      userId,
+      features: ctx.userFeatures,
+      isSuperAdmin: ctx.isSuperAdmin,
+      container: fresh
+    }
+  );
+  const confirmTenantId = ctx.tenantId;
+  const confirmContainer = await createRequestContainer();
+  const confirmation = await executePendingActionConfirm({
+    action: pendingAction,
+    agent,
+    tool,
+    ctx: {
+      tenantId: confirmTenantId,
+      organizationId: ctx.organizationId,
+      userId,
+      container: confirmContainer,
+      userFeatures: ctx.userFeatures,
+      isSuperAdmin: ctx.isSuperAdmin
+    },
+    emitEvent: async () => {
+    }
+  });
+  if (!confirmation.ok) {
+    const error = confirmation.executionResult?.error;
+    const cause = confirmation.cause;
+    const causeMessage = cause instanceof Error ? cause.message : typeof cause === "string" ? cause : null;
+    const message = error?.message ?? causeMessage ?? "handler invocation failed";
+    throw new Error(message);
+  }
+  return {
+    status: "pending-confirmation",
+    pendingActionId: pendingAction.id,
+    expiresAt: pendingAction.expiresAt.toISOString(),
+    uiPartType: uiPart?.type ?? null,
+    handlerExecuted: true
+  };
+}
+async function resolveFixtureInput(fixture, resolved, container, ctx) {
+  if (fixture.input) return { ok: true, input: { ...fixture.input } };
+  if (!fixture.idFrom) {
+    return { ok: false, reason: "fixture has neither input nor idFrom" };
+  }
+  const sourceTool = resolved.get(fixture.idFrom);
+  if (!sourceTool) {
+    return { ok: false, reason: `idFrom tool not found: ${fixture.idFrom}` };
+  }
+  const sourceFixture = getFixture(fixture.idFrom);
+  if (!sourceFixture?.input) {
+    return {
+      ok: false,
+      reason: `idFrom source ${fixture.idFrom} has no static input fixture`
+    };
+  }
+  let listResult;
+  try {
+    listResult = await executeReadTool(
+      sourceTool,
+      { ...sourceFixture.input },
+      container,
+      ctx
+    );
+  } catch (error) {
+    return {
+      ok: false,
+      reason: `idFrom source ${fixture.idFrom} threw: ${error instanceof Error ? error.message : String(error)}`
+    };
+  }
+  const records = extractRecords(listResult);
+  if (!records.length) {
+    return {
+      ok: false,
+      reason: `idFrom source ${fixture.idFrom} returned no records`
+    };
+  }
+  const idField = "id";
+  const id = records[0][idField];
+  if (typeof id !== "string" || !id) {
+    return {
+      ok: false,
+      reason: `idFrom source ${fixture.idFrom} first record has no string id`
+    };
+  }
+  const bindAs = fixture.bindAs ?? "id";
+  return {
+    ok: true,
+    input: { [bindAs]: id, ...fixture.extra ?? {} }
+  };
+}
+function extractRecords(value) {
+  if (!value || typeof value !== "object") return [];
+  const candidate = value;
+  for (const key of ["records", "items", "people", "companies", "deals", "results", "data"]) {
+    const arr = candidate[key];
+    if (Array.isArray(arr)) return arr;
+  }
+  return [];
+}
+async function runToolTests(options = {}) {
+  const includeMutations = options.includeMutations ?? true;
+  const container = await createRequestContainer();
+  let tenantId = options.tenantId ?? null;
+  let organizationId = options.organizationId ?? null;
+  let userId = options.userId ?? null;
+  if (!tenantId) {
+    const picked = await pickDefaultTenant(container);
+    if (picked) {
+      tenantId = picked.tenantId;
+      organizationId = picked.organizationId;
+      userId = userId ?? picked.userId;
+    }
+  }
+  const ctx = buildSuperAdminContext(container, tenantId, organizationId, userId);
+  const grouped = await loadGeneratedTools();
+  const flat = [];
+  for (const group of grouped) {
+    if (options.moduleFilter && group.moduleId !== options.moduleFilter) continue;
+    for (const tool of group.tools) flat.push({ moduleId: group.moduleId, tool });
+  }
+  const resolved = /* @__PURE__ */ new Map();
+  for (const { tool } of flat) resolved.set(tool.name, tool);
+  const records = [];
+  for (const { moduleId, tool } of flat) {
+    const start = Date.now();
+    const isMutation = tool.isMutation === true;
+    const fixture = getFixture(tool.name);
+    if (!fixture) {
+      records.push({
+        module: moduleId,
+        tool: tool.name,
+        isMutation,
+        status: "skip",
+        durationMs: Date.now() - start,
+        reason: "no fixture"
+      });
+      continue;
+    }
+    if (fixture.skip) {
+      records.push({
+        module: moduleId,
+        tool: tool.name,
+        isMutation,
+        status: "skip",
+        durationMs: Date.now() - start,
+        reason: fixture.note ?? "skip-by-fixture"
+      });
+      continue;
+    }
+    if (isMutation && !includeMutations) {
+      records.push({
+        module: moduleId,
+        tool: tool.name,
+        isMutation,
+        status: "skip",
+        durationMs: Date.now() - start,
+        reason: "mutations excluded"
+      });
+      continue;
+    }
+    const inputResult = await resolveFixtureInput(fixture, resolved, container, ctx);
+    if (!inputResult.ok) {
+      records.push({
+        module: moduleId,
+        tool: tool.name,
+        isMutation,
+        status: "skip",
+        durationMs: Date.now() - start,
+        reason: inputResult.reason
+      });
+      continue;
+    }
+    try {
+      const result = isMutation ? await executeMutationTool(tool, inputResult.input, container, ctx) : await executeReadTool(tool, inputResult.input, container, ctx);
+      JSON.stringify(result);
+      if (isMutation && (typeof result !== "object" || result === null || result.status !== "pending-confirmation")) {
+        records.push({
+          module: moduleId,
+          tool: tool.name,
+          isMutation,
+          status: "fail",
+          durationMs: Date.now() - start,
+          reason: "mutation tool did not route through prepareMutation (no pending-confirmation envelope)",
+          resultPreview: clipPreview(result)
+        });
+        continue;
+      }
+      records.push({
+        module: moduleId,
+        tool: tool.name,
+        isMutation,
+        status: "pass",
+        durationMs: Date.now() - start,
+        resultPreview: clipPreview(result)
+      });
+    } catch (error) {
+      records.push({
+        module: moduleId,
+        tool: tool.name,
+        isMutation,
+        status: "fail",
+        durationMs: Date.now() - start,
+        reason: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+  const passed = records.filter((r) => r.status === "pass").length;
+  const failed = records.filter((r) => r.status === "fail").length;
+  const skipped = records.filter((r) => r.status === "skip").length;
+  return {
+    tenantId,
+    organizationId,
+    total: records.length,
+    passed,
+    failed,
+    skipped,
+    records
+  };
+}
+export {
+  runToolTests
+};
+//# sourceMappingURL=tool-test-runner.js.map

package/dist/modules/ai_assistant/lib/tool-test-runner.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/tool-test-runner.ts"],
+  "sourcesContent": ["/**\n * In-process AI tool test runner.\n *\n * Iterates every tool registered in `ai-tools.generated.ts`, invokes the\n * handler against a super-admin tenant context, and returns a structured\n * report. Used by the `mercato ai_assistant test-tools` CLI subcommand and\n * by `.ai/qa/tests/integration/TC-INT-AI-TOOLS.spec.ts`.\n *\n * Safety posture:\n *   - No HTTP exposure \u2014 runs only inside the Node process driving the CLI.\n *   - Mutation tools are exercised through `prepareMutation` and we assert a\n *     pending-action envelope is returned. The pending-action row is created\n *     in `ai_pending_actions` but never confirmed, so no real write happens.\n *   - Tools without an explicit fixture entry are skipped with reason\n *     `'no fixture'` rather than failing.\n */\nimport path from 'node:path'\nimport fs from 'node:fs'\nimport { fileURLToPath, pathToFileURL } from 'node:url'\nimport type { AwilixContainer } from 'awilix'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { McpToolContext, AiToolDefinition } from './types'\nimport type { AiAgentDefinition, AiAgentMutationPolicy } from './ai-agent-definition'\nimport { getFixture, type ToolFixture } from './tool-test-fixtures'\nimport { prepareMutation } from './prepare-mutation'\nimport { executePendingActionConfirm } from './pending-action-executor'\n\nexport type ToolTestStatus = 'pass' | 'fail' | 'skip'\n\nexport interface ToolTestRecord {\n  module: string\n  tool: string\n  isMutation: boolean\n  status: ToolTestStatus\n  durationMs: number\n  reason?: string\n  resultPreview?: unknown\n}\n\nexport interface ToolTestReport {\n  tenantId: string | null\n  organizationId: string | null\n  total: number\n  passed: number\n  failed: number\n  skipped: number\n  records: ToolTestRecord[]\n}\n\ninterface RawAiToolsModule {\n  aiToolConfigEntriesRaw?: { moduleId: string; tools: unknown[] }[]\n  aiToolConfigEntries?: { moduleId: string; tools: unknown[] }[]\n}\n\nfunction isToolDefinition(value: unknown): value is AiToolDefinition {\n  if (!value || typeof value !== 'object') return false\n  const candidate = value as Record<string, unknown>\n  return (\n    typeof candidate.name === 'string' &&\n    typeof candidate.description === 'string' &&\n    candidate.inputSchema !== undefined &&\n    typeof candidate.handler === 'function'\n  )\n}\n\n/**\n * Locate `apps/mercato/.mercato/generated/ai-tools.generated.ts` without\n * hardcoding the workspace layout. Searches upward from this file's\n * compiled location; in the monorepo dist this is\n * `packages/ai-assistant/dist/...` so we walk up until we hit a directory\n * containing `apps/mercato/.mercato/generated`.\n */\nfunction findGeneratedAiToolsPath(): string | null {\n  const here = (() => {\n    try {\n      return fileURLToPath(import.meta.url)\n    } catch {\n      return null\n    }\n  })()\n  if (!here) return null\n  let cursor = path.dirname(here)\n  for (let i = 0; i < 12; i++) {\n    const candidate = path.join(cursor, 'apps', 'mercato', '.mercato', 'generated', 'ai-tools.generated.ts')\n    if (fs.existsSync(candidate)) return candidate\n    const next = path.dirname(cursor)\n    if (next === cursor) break\n    cursor = next\n  }\n  // Fallback: cwd-based lookup (when CLI is invoked from apps/mercato).\n  const fromCwd = path.resolve(process.cwd(), 'apps', 'mercato', '.mercato', 'generated', 'ai-tools.generated.ts')\n  if (fs.existsSync(fromCwd)) return fromCwd\n  const fromCwdDirect = path.resolve(process.cwd(), '.mercato', 'generated', 'ai-tools.generated.ts')\n  if (fs.existsSync(fromCwdDirect)) return fromCwdDirect\n  return null\n}\n\n/**\n * Compile-and-import `ai-tools.generated.ts` on the fly. Mirrors the approach\n * used by `loadBootstrapData` in `@open-mercato/shared/lib/bootstrap/dynamicLoader`:\n * resolves the `@/` alias to the app root, marks every other package import as\n * external, and emits a sibling `.mjs` we can `import()` from Node. Cached on\n * mtime so repeat runs in the same process don't recompile.\n */\nasync function compileAndImportGenerated(tsPath: string): Promise<RawAiToolsModule> {\n  const jsPath = tsPath.replace(/\\.ts$/, '.mjs')\n  // appRoot is two directories up from `.mercato/generated/<file>.ts`.\n  const appRoot = path.dirname(path.dirname(path.dirname(tsPath)))\n  const tsExists = fs.existsSync(tsPath)\n  if (!tsExists) {\n    throw new Error(`Generated file not found: ${tsPath}`)\n  }\n  const jsExists = fs.existsSync(jsPath)\n  const needsCompile =\n    !jsExists || fs.statSync(tsPath).mtimeMs > fs.statSync(jsPath).mtimeMs\n  if (needsCompile) {\n    const esbuild = await import('esbuild')\n    // Transpile-only: don't bundle. Generated registry files only declare an\n    // array literal whose entries are static `import(\"\u2026\")` arrow functions \u2014\n    // we want those `import()` strings to stay as runtime imports so Node\n    // resolves them lazily through the workspace's normal module resolution.\n    // Eagerly bundling them pulls Next.js / route handler internals into the\n    // .mjs and breaks at runtime (e.g. `next/server` package-exports map).\n    const tsSource = fs.readFileSync(tsPath, 'utf-8')\n    // Rewrite `@/...` aliases to absolute paths so Node can resolve them.\n    const aliasRewritten = tsSource.replace(\n      /from\\s+[\"']@\\/([^\"']+)[\"']/g,\n      (_match, p1: string) => {\n        const target = path.join(appRoot, p1)\n        const candidate = fs.existsSync(target)\n          ? target\n          : fs.existsSync(target + '.ts')\n            ? target + '.ts'\n            : target\n        return `from ${JSON.stringify(pathToFileURL(candidate).href)}`\n      },\n    ).replace(\n      /import\\s*\\(\\s*[\"']@\\/([^\"']+)[\"']\\s*\\)/g,\n      (_match, p1: string) => {\n        const target = path.join(appRoot, p1)\n        const candidate = fs.existsSync(target)\n          ? target\n          : fs.existsSync(target + '.ts')\n            ? target + '.ts'\n            : target\n        return `import(${JSON.stringify(pathToFileURL(candidate).href)})`\n      },\n    )\n    const result = await esbuild.transform(aliasRewritten, {\n      loader: 'ts',\n      format: 'esm',\n      target: 'node18',\n      sourcemap: false,\n      sourcefile: tsPath,\n    })\n    fs.writeFileSync(jsPath, result.code)\n  }\n  return (await import(pathToFileURL(jsPath).href)) as RawAiToolsModule\n}\n\n/**\n * Compile-and-import `api-routes.generated.ts` and register its manifest with\n * the shared registry. Many tool handlers delegate to `aiApiOperationRunner`\n * which fails closed when no manifest is registered. Idempotent: registering\n * the same array twice is safe.\n */\nasync function ensureApiRouteManifestsRegistered(generatedDir: string): Promise<void> {\n  const tsPath = path.join(generatedDir, 'api-routes.generated.ts')\n  if (!fs.existsSync(tsPath)) return\n  try {\n    const mod = (await compileAndImportGenerated(tsPath)) as Record<string, unknown>\n    const apiRoutes = (mod as { apiRoutes?: unknown }).apiRoutes\n    if (!Array.isArray(apiRoutes)) {\n      console.warn('[tool-test-runner] api-routes.generated.mjs returned no apiRoutes array')\n      return\n    }\n    const registry = await import('@open-mercato/shared/modules/registry')\n    registry.registerApiRouteManifests(\n      apiRoutes as Parameters<typeof registry.registerApiRouteManifests>[0],\n    )\n    if (process.env.OM_TOOL_TEST_DEBUG === '1') {\n      console.log(\n        `[tool-test-runner] Registered ${apiRoutes.length} api-route manifests; getApiRouteManifests().length=${registry.getApiRouteManifests().length}`,\n      )\n    }\n  } catch (error) {\n    console.warn(\n      '[tool-test-runner] Could not register api-routes manifest:',\n      error instanceof Error ? error.message : error,\n    )\n  }\n}\n\nasync function loadGeneratedTools(): Promise<{ moduleId: string; tools: AiToolDefinition[] }[]> {\n  const tsPath = findGeneratedAiToolsPath()\n  if (!tsPath) {\n    throw new Error(\n      'Could not locate apps/<app>/.mercato/generated/ai-tools.generated.ts. Run `yarn generate` first.',\n    )\n  }\n  await ensureApiRouteManifestsRegistered(path.dirname(tsPath))\n  const mod = await compileAndImportGenerated(tsPath)\n  const entries = mod.aiToolConfigEntriesRaw ?? mod.aiToolConfigEntries ?? []\n  const result: { moduleId: string; tools: AiToolDefinition[] }[] = []\n  for (const entry of entries) {\n    if (!entry || typeof entry.moduleId !== 'string') continue\n    const tools = Array.isArray(entry.tools)\n      ? entry.tools.filter(isToolDefinition)\n      : []\n    result.push({ moduleId: entry.moduleId, tools })\n  }\n  return result\n}\n\nasync function pickDefaultTenant(\n  container: AwilixContainer,\n): Promise<{ tenantId: string; organizationId: string | null; userId: string | null } | null> {\n  try {\n    const em = container.resolve<{\n      getConnection: () => { execute: (sql: string) => Promise<unknown[]> }\n    }>('em') as unknown as {\n      getConnection: () => { execute: (sql: string) => Promise<Record<string, unknown>[]> }\n    }\n    const conn = em.getConnection()\n    const tenantRows = await conn.execute(\n      `SELECT id FROM tenants WHERE deleted_at IS NULL ORDER BY created_at ASC LIMIT 1`,\n    )\n    const tenantId =\n      Array.isArray(tenantRows) && tenantRows[0]\n        ? String((tenantRows[0] as Record<string, unknown>).id)\n        : null\n    if (!tenantId) return null\n    const escaped = tenantId.replace(/'/g, \"''\")\n    const orgRows = await conn.execute(\n      `SELECT id FROM organizations WHERE tenant_id = '${escaped}' AND deleted_at IS NULL ORDER BY created_at ASC LIMIT 1`,\n    )\n    const organizationId =\n      Array.isArray(orgRows) && orgRows[0]\n        ? String((orgRows[0] as Record<string, unknown>).id)\n        : null\n    const userRows = await conn.execute(\n      `SELECT id FROM users WHERE tenant_id = '${escaped}' AND deleted_at IS NULL ORDER BY created_at ASC LIMIT 1`,\n    )\n    const userId =\n      Array.isArray(userRows) && userRows[0]\n        ? String((userRows[0] as Record<string, unknown>).id)\n        : null\n    return { tenantId, organizationId, userId }\n  } catch (error) {\n    if (process.env.OM_TOOL_TEST_DEBUG === '1') {\n      console.warn('[tool-test-runner] pickDefaultTenant failed:', error)\n    }\n    return null\n  }\n}\n\nfunction buildSuperAdminContext(\n  container: AwilixContainer,\n  tenantId: string | null,\n  organizationId: string | null,\n  userId: string | null,\n): McpToolContext {\n  return {\n    tenantId,\n    organizationId,\n    userId,\n    container,\n    userFeatures: ['*'],\n    isSuperAdmin: true,\n  }\n}\n\nfunction clipPreview(value: unknown): unknown {\n  try {\n    const json = JSON.stringify(value)\n    if (json.length <= 400) return value\n    return `${json.slice(0, 400)}\u2026(truncated, ${json.length} bytes)`\n  } catch {\n    return '[unserializable]'\n  }\n}\n\nfunction dummyAgentForTool(tool: AiToolDefinition): AiAgentDefinition {\n  // The runner never registers this agent; it's only used as input to\n  // `prepareMutation` for shape compatibility. The id namespace is namespaced\n  // under `__test__` so it cannot collide with real agents.\n  const policy: AiAgentMutationPolicy = 'destructive-confirm-required'\n  return {\n    id: `__test__.${tool.name}`,\n    moduleId: tool.name.split('.')[0] ?? '__test__',\n    label: 'Tool Test Runner',\n    description: 'Synthetic agent used by the tool test runner',\n    systemPrompt: '',\n    allowedTools: [tool.name],\n    readOnly: false,\n    mutationPolicy: policy,\n  } as AiAgentDefinition\n}\n\nasync function executeReadTool(\n  tool: AiToolDefinition,\n  args: Record<string, unknown>,\n  container: AwilixContainer,\n  ctx: McpToolContext,\n): Promise<unknown> {\n  // Mirror the dispatcher: resolve a fresh container per call so EM identity\n  // map state is clean between tools.\n  const fresh = await createRequestContainer()\n  const freshCtx: McpToolContext = { ...ctx, container: fresh, tool }\n  void container // keep arg for future use\n  return tool.handler(args as never, freshCtx)\n}\n\nasync function executeMutationTool(\n  tool: AiToolDefinition,\n  args: Record<string, unknown>,\n  container: AwilixContainer,\n  ctx: McpToolContext,\n): Promise<unknown> {\n  // Route through prepareMutation so we assert the approval contract still\n  // holds \u2014 the handler must NEVER write directly. We pass a destructive\n  // policy so the runtime treats the call as a confirmation candidate and\n  // creates a pending-action row.\n  const fresh = await createRequestContainer()\n  const agent = dummyAgentForTool(tool)\n  const userId = ctx.userId ?? '00000000-0000-0000-0000-000000000000'\n  const { uiPart, pendingAction } = await prepareMutation(\n    {\n      agent,\n      tool,\n      toolCallArgs: args,\n      conversationId: null,\n      mutationPolicyOverride: null,\n    },\n    {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId,\n      features: ctx.userFeatures,\n      isSuperAdmin: ctx.isSuperAdmin,\n      container: fresh,\n    },\n  )\n  // Exercise the actual handler via the same path the production confirm\n  // route uses. Without this, mutation tools whose handler crashes (e.g.\n  // missing `ctx.tool` for the API operation runner) would be reported as\n  // passing because `prepareMutation` never invokes the handler.\n  // `prepareMutation` already enforced `tenantId` is non-null above; cast\n  // here for the stricter `PendingActionExecuteContext` shape.\n  const confirmTenantId = ctx.tenantId as string\n  const confirmContainer = await createRequestContainer()\n  const confirmation = await executePendingActionConfirm({\n    action: pendingAction,\n    agent,\n    tool,\n    ctx: {\n      tenantId: confirmTenantId,\n      organizationId: ctx.organizationId,\n      userId,\n      container: confirmContainer,\n      userFeatures: ctx.userFeatures,\n      isSuperAdmin: ctx.isSuperAdmin,\n    },\n    emitEvent: async () => {},\n  })\n  if (!confirmation.ok) {\n    const error = (confirmation.executionResult as { error?: { message?: string } } | undefined)?.error\n    const cause = confirmation.cause\n    const causeMessage =\n      cause instanceof Error\n        ? cause.message\n        : typeof cause === 'string'\n          ? cause\n          : null\n    const message = error?.message ?? causeMessage ?? 'handler invocation failed'\n    throw new Error(message)\n  }\n  return {\n    status: 'pending-confirmation',\n    pendingActionId: pendingAction.id,\n    expiresAt: pendingAction.expiresAt.toISOString(),\n    uiPartType: (uiPart as { type?: string } | undefined)?.type ?? null,\n    handlerExecuted: true,\n  }\n}\n\nasync function resolveFixtureInput(\n  fixture: ToolFixture,\n  resolved: Map<string, AiToolDefinition>,\n  container: AwilixContainer,\n  ctx: McpToolContext,\n): Promise<{ ok: true; input: Record<string, unknown> } | { ok: false; reason: string }> {\n  if (fixture.input) return { ok: true, input: { ...fixture.input } }\n  if (!fixture.idFrom) {\n    return { ok: false, reason: 'fixture has neither input nor idFrom' }\n  }\n  const sourceTool = resolved.get(fixture.idFrom)\n  if (!sourceTool) {\n    return { ok: false, reason: `idFrom tool not found: ${fixture.idFrom}` }\n  }\n  const sourceFixture = getFixture(fixture.idFrom)\n  if (!sourceFixture?.input) {\n    return {\n      ok: false,\n      reason: `idFrom source ${fixture.idFrom} has no static input fixture`,\n    }\n  }\n  let listResult: unknown\n  try {\n    listResult = await executeReadTool(\n      sourceTool,\n      { ...sourceFixture.input },\n      container,\n      ctx,\n    )\n  } catch (error) {\n    return {\n      ok: false,\n      reason: `idFrom source ${fixture.idFrom} threw: ${\n        error instanceof Error ? error.message : String(error)\n      }`,\n    }\n  }\n  const records = extractRecords(listResult)\n  if (!records.length) {\n    return {\n      ok: false,\n      reason: `idFrom source ${fixture.idFrom} returned no records`,\n    }\n  }\n  const idField = 'id'\n  const id = (records[0] as Record<string, unknown>)[idField]\n  if (typeof id !== 'string' || !id) {\n    return {\n      ok: false,\n      reason: `idFrom source ${fixture.idFrom} first record has no string id`,\n    }\n  }\n  const bindAs = fixture.bindAs ?? 'id'\n  return {\n    ok: true,\n    input: { [bindAs]: id, ...(fixture.extra ?? {}) },\n  }\n}\n\nfunction extractRecords(value: unknown): unknown[] {\n  if (!value || typeof value !== 'object') return []\n  const candidate = value as Record<string, unknown>\n  for (const key of ['records', 'items', 'people', 'companies', 'deals', 'results', 'data']) {\n    const arr = candidate[key]\n    if (Array.isArray(arr)) return arr\n  }\n  return []\n}\n\nexport interface RunToolTestsOptions {\n  tenantId?: string | null\n  organizationId?: string | null\n  userId?: string | null\n  moduleFilter?: string | null\n  includeMutations?: boolean\n}\n\nexport async function runToolTests(\n  options: RunToolTestsOptions = {},\n): Promise<ToolTestReport> {\n  const includeMutations = options.includeMutations ?? true\n  const container = await createRequestContainer()\n  let tenantId: string | null = options.tenantId ?? null\n  let organizationId: string | null = options.organizationId ?? null\n  let userId: string | null = options.userId ?? null\n  if (!tenantId) {\n    const picked = await pickDefaultTenant(container)\n    if (picked) {\n      tenantId = picked.tenantId\n      organizationId = picked.organizationId\n      userId = userId ?? picked.userId\n    }\n  }\n  const ctx = buildSuperAdminContext(container, tenantId, organizationId, userId)\n  const grouped = await loadGeneratedTools()\n\n  const flat: { moduleId: string; tool: AiToolDefinition }[] = []\n  for (const group of grouped) {\n    if (options.moduleFilter && group.moduleId !== options.moduleFilter) continue\n    for (const tool of group.tools) flat.push({ moduleId: group.moduleId, tool })\n  }\n  const resolved = new Map<string, AiToolDefinition>()\n  for (const { tool } of flat) resolved.set(tool.name, tool)\n\n  const records: ToolTestRecord[] = []\n  for (const { moduleId, tool } of flat) {\n    const start = Date.now()\n    const isMutation = tool.isMutation === true\n    const fixture = getFixture(tool.name)\n    if (!fixture) {\n      records.push({\n        module: moduleId,\n        tool: tool.name,\n        isMutation,\n        status: 'skip',\n        durationMs: Date.now() - start,\n        reason: 'no fixture',\n      })\n      continue\n    }\n    if (fixture.skip) {\n      records.push({\n        module: moduleId,\n        tool: tool.name,\n        isMutation,\n        status: 'skip',\n        durationMs: Date.now() - start,\n        reason: fixture.note ?? 'skip-by-fixture',\n      })\n      continue\n    }\n    if (isMutation && !includeMutations) {\n      records.push({\n        module: moduleId,\n        tool: tool.name,\n        isMutation,\n        status: 'skip',\n        durationMs: Date.now() - start,\n        reason: 'mutations excluded',\n      })\n      continue\n    }\n    const inputResult = await resolveFixtureInput(fixture, resolved, container, ctx)\n    if (!inputResult.ok) {\n      records.push({\n        module: moduleId,\n        tool: tool.name,\n        isMutation,\n        status: 'skip',\n        durationMs: Date.now() - start,\n        reason: inputResult.reason,\n      })\n      continue\n    }\n    try {\n      const result = isMutation\n        ? await executeMutationTool(tool, inputResult.input, container, ctx)\n        : await executeReadTool(tool, inputResult.input, container, ctx)\n      // Result must be JSON-serializable.\n      JSON.stringify(result)\n      // Mutation tools must return a pending-confirmation envelope.\n      if (\n        isMutation &&\n        (typeof result !== 'object' ||\n          result === null ||\n          (result as Record<string, unknown>).status !== 'pending-confirmation')\n      ) {\n        records.push({\n          module: moduleId,\n          tool: tool.name,\n          isMutation,\n          status: 'fail',\n          durationMs: Date.now() - start,\n          reason: 'mutation tool did not route through prepareMutation (no pending-confirmation envelope)',\n          resultPreview: clipPreview(result),\n        })\n        continue\n      }\n      records.push({\n        module: moduleId,\n        tool: tool.name,\n        isMutation,\n        status: 'pass',\n        durationMs: Date.now() - start,\n        resultPreview: clipPreview(result),\n      })\n    } catch (error) {\n      records.push({\n        module: moduleId,\n        tool: tool.name,\n        isMutation,\n        status: 'fail',\n        durationMs: Date.now() - start,\n        reason: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n  const passed = records.filter((r) => r.status === 'pass').length\n  const failed = records.filter((r) => r.status === 'fail').length\n  const skipped = records.filter((r) => r.status === 'skip').length\n  return {\n    tenantId,\n    organizationId,\n    total: records.length,\n    passed,\n    failed,\n    skipped,\n    records,\n  }\n}\n"],
+  "mappings": "AAgBA,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,SAAS,eAAe,qBAAqB;AAE7C,SAAS,8BAA8B;AAGvC,SAAS,kBAAoC;AAC7C,SAAS,uBAAuB;AAChC,SAAS,mCAAmC;AA6B5C,SAAS,iBAAiB,OAA2C;AACnE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,YAAY;AAClB,SACE,OAAO,UAAU,SAAS,YAC1B,OAAO,UAAU,gBAAgB,YACjC,UAAU,gBAAgB,UAC1B,OAAO,UAAU,YAAY;AAEjC;AASA,SAAS,2BAA0C;AACjD,QAAM,QAAQ,MAAM;AAClB,QAAI;AACF,aAAO,cAAc,YAAY,GAAG;AAAA,IACtC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,SAAS,KAAK,QAAQ,IAAI;AAC9B,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,UAAM,YAAY,KAAK,KAAK,QAAQ,QAAQ,WAAW,YAAY,aAAa,uBAAuB;AACvG,QAAI,GAAG,WAAW,SAAS,EAAG,QAAO;AACrC,UAAM,OAAO,KAAK,QAAQ,MAAM;AAChC,QAAI,SAAS,OAAQ;AACrB,aAAS;AAAA,EACX;AAEA,QAAM,UAAU,KAAK,QAAQ,QAAQ,IAAI,GAAG,QAAQ,WAAW,YAAY,aAAa,uBAAuB;AAC/G,MAAI,GAAG,WAAW,OAAO,EAAG,QAAO;AACnC,QAAM,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,GAAG,YAAY,aAAa,uBAAuB;AAClG,MAAI,GAAG,WAAW,aAAa,EAAG,QAAO;AACzC,SAAO;AACT;AASA,eAAe,0BAA0B,QAA2C;AAClF,QAAM,SAAS,OAAO,QAAQ,SAAS,MAAM;AAE7C,QAAM,UAAU,KAAK,QAAQ,KAAK,QAAQ,KAAK,QAAQ,MAAM,CAAC,CAAC;AAC/D,QAAM,WAAW,GAAG,WAAW,MAAM;AACrC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,6BAA6B,MAAM,EAAE;AAAA,EACvD;AACA,QAAM,WAAW,GAAG,WAAW,MAAM;AACrC,QAAM,eACJ,CAAC,YAAY,GAAG,SAAS,MAAM,EAAE,UAAU,GAAG,SAAS,MAAM,EAAE;AACjE,MAAI,cAAc;AAChB,UAAM,UAAU,MAAM,OAAO,SAAS;AAOtC,UAAM,WAAW,GAAG,aAAa,QAAQ,OAAO;AAEhD,UAAM,iBAAiB,SAAS;AAAA,MAC9B;AAAA,MACA,CAAC,QAAQ,OAAe;AACtB,cAAM,SAAS,KAAK,KAAK,SAAS,EAAE;AACpC,cAAM,YAAY,GAAG,WAAW,MAAM,IAClC,SACA,GAAG,WAAW,SAAS,KAAK,IAC1B,SAAS,QACT;AACN,eAAO,QAAQ,KAAK,UAAU,cAAc,SAAS,EAAE,IAAI,CAAC;AAAA,MAC9D;AAAA,IACF,EAAE;AAAA,MACA;AAAA,MACA,CAAC,QAAQ,OAAe;AACtB,cAAM,SAAS,KAAK,KAAK,SAAS,EAAE;AACpC,cAAM,YAAY,GAAG,WAAW,MAAM,IAClC,SACA,GAAG,WAAW,SAAS,KAAK,IAC1B,SAAS,QACT;AACN,eAAO,UAAU,KAAK,UAAU,cAAc,SAAS,EAAE,IAAI,CAAC;AAAA,MAChE;AAAA,IACF;AACA,UAAM,SAAS,MAAM,QAAQ,UAAU,gBAAgB;AAAA,MACrD,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,YAAY;AAAA,IACd,CAAC;AACD,OAAG,cAAc,QAAQ,OAAO,IAAI;AAAA,EACtC;AACA,SAAQ,MAAM,OAAO,cAAc,MAAM,EAAE;AAC7C;AAQA,eAAe,kCAAkC,cAAqC;AACpF,QAAM,SAAS,KAAK,KAAK,cAAc,yBAAyB;AAChE,MAAI,CAAC,GAAG,WAAW,MAAM,EAAG;AAC5B,MAAI;AACF,UAAM,MAAO,MAAM,0BAA0B,MAAM;AACnD,UAAM,YAAa,IAAgC;AACnD,QAAI,CAAC,MAAM,QAAQ,SAAS,GAAG;AAC7B,cAAQ,KAAK,yEAAyE;AACtF;AAAA,IACF;AACA,UAAM,WAAW,MAAM,OAAO,uCAAuC;AACrE,aAAS;AAAA,MACP;AAAA,IACF;AACA,QAAI,QAAQ,IAAI,uBAAuB,KAAK;AAC1C,cAAQ;AAAA,QACN,iCAAiC,UAAU,MAAM,uDAAuD,SAAS,qBAAqB,EAAE,MAAM;AAAA,MAChJ;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,YAAQ;AAAA,MACN;AAAA,MACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAC3C;AAAA,EACF;AACF;AAEA,eAAe,qBAAiF;AAC9F,QAAM,SAAS,yBAAyB;AACxC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,kCAAkC,KAAK,QAAQ,MAAM,CAAC;AAC5D,QAAM,MAAM,MAAM,0BAA0B,MAAM;AAClD,QAAM,UAAU,IAAI,0BAA0B,IAAI,uBAAuB,CAAC;AAC1E,QAAM,SAA4D,CAAC;AACnE,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,SAAS,OAAO,MAAM,aAAa,SAAU;AAClD,UAAM,QAAQ,MAAM,QAAQ,MAAM,KAAK,IACnC,MAAM,MAAM,OAAO,gBAAgB,IACnC,CAAC;AACL,WAAO,KAAK,EAAE,UAAU,MAAM,UAAU,MAAM,CAAC;AAAA,EACjD;AACA,SAAO;AACT;AAEA,eAAe,kBACb,WAC4F;AAC5F,MAAI;AACF,UAAM,KAAK,UAAU,QAElB,IAAI;AAGP,UAAM,OAAO,GAAG,cAAc;AAC9B,UAAM,aAAa,MAAM,KAAK;AAAA,MAC5B;AAAA,IACF;AACA,UAAM,WACJ,MAAM,QAAQ,UAAU,KAAK,WAAW,CAAC,IACrC,OAAQ,WAAW,CAAC,EAA8B,EAAE,IACpD;AACN,QAAI,CAAC,SAAU,QAAO;AACtB,UAAM,UAAU,SAAS,QAAQ,MAAM,IAAI;AAC3C,UAAM,UAAU,MAAM,KAAK;AAAA,MACzB,mDAAmD,OAAO;AAAA,IAC5D;AACA,UAAM,iBACJ,MAAM,QAAQ,OAAO,KAAK,QAAQ,CAAC,IAC/B,OAAQ,QAAQ,CAAC,EAA8B,EAAE,IACjD;AACN,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,2CAA2C,OAAO;AAAA,IACpD;AACA,UAAM,SACJ,MAAM,QAAQ,QAAQ,KAAK,SAAS,CAAC,IACjC,OAAQ,SAAS,CAAC,EAA8B,EAAE,IAClD;AACN,WAAO,EAAE,UAAU,gBAAgB,OAAO;AAAA,EAC5C,SAAS,OAAO;AACd,QAAI,QAAQ,IAAI,uBAAuB,KAAK;AAC1C,cAAQ,KAAK,gDAAgD,KAAK;AAAA,IACpE;AACA,WAAO;AAAA,EACT;AACF;AAEA,SAAS,uBACP,WACA,UACA,gBACA,QACgB;AAChB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,CAAC,GAAG;AAAA,IAClB,cAAc;AAAA,EAChB;AACF;AAEA,SAAS,YAAY,OAAyB;AAC5C,MAAI;AACF,UAAM,OAAO,KAAK,UAAU,KAAK;AACjC,QAAI,KAAK,UAAU,IAAK,QAAO;AAC/B,WAAO,GAAG,KAAK,MAAM,GAAG,GAAG,CAAC,qBAAgB,KAAK,MAAM;AAAA,EACzD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,kBAAkB,MAA2C;AAIpE,QAAM,SAAgC;AACtC,SAAO;AAAA,IACL,IAAI,YAAY,KAAK,IAAI;AAAA,IACzB,UAAU,KAAK,KAAK,MAAM,GAAG,EAAE,CAAC,KAAK;AAAA,IACrC,OAAO;AAAA,IACP,aAAa;AAAA,IACb,cAAc;AAAA,IACd,cAAc,CAAC,KAAK,IAAI;AAAA,IACxB,UAAU;AAAA,IACV,gBAAgB;AAAA,EAClB;AACF;AAEA,eAAe,gBACb,MACA,MACA,WACA,KACkB;AAGlB,QAAM,QAAQ,MAAM,uBAAuB;AAC3C,QAAM,WAA2B,EAAE,GAAG,KAAK,WAAW,OAAO,KAAK;AAClE,OAAK;AACL,SAAO,KAAK,QAAQ,MAAe,QAAQ;AAC7C;AAEA,eAAe,oBACb,MACA,MACA,WACA,KACkB;AAKlB,QAAM,QAAQ,MAAM,uBAAuB;AAC3C,QAAM,QAAQ,kBAAkB,IAAI;AACpC,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,EAAE,QAAQ,cAAc,IAAI,MAAM;AAAA,IACtC;AAAA,MACE;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,wBAAwB;AAAA,IAC1B;AAAA,IACA;AAAA,MACE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,WAAW;AAAA,IACb;AAAA,EACF;AAOA,QAAM,kBAAkB,IAAI;AAC5B,QAAM,mBAAmB,MAAM,uBAAuB;AACtD,QAAM,eAAe,MAAM,4BAA4B;AAAA,IACrD,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,KAAK;AAAA,MACH,UAAU;AAAA,MACV,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,WAAW;AAAA,MACX,cAAc,IAAI;AAAA,MAClB,cAAc,IAAI;AAAA,IACpB;AAAA,IACA,WAAW,YAAY;AAAA,IAAC;AAAA,EAC1B,CAAC;AACD,MAAI,CAAC,aAAa,IAAI;AACpB,UAAM,QAAS,aAAa,iBAAkE;AAC9F,UAAM,QAAQ,aAAa;AAC3B,UAAM,eACJ,iBAAiB,QACb,MAAM,UACN,OAAO,UAAU,WACf,QACA;AACR,UAAM,UAAU,OAAO,WAAW,gBAAgB;AAClD,UAAM,IAAI,MAAM,OAAO;AAAA,EACzB;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,iBAAiB,cAAc;AAAA,IAC/B,WAAW,cAAc,UAAU,YAAY;AAAA,IAC/C,YAAa,QAA0C,QAAQ;AAAA,IAC/D,iBAAiB;AAAA,EACnB;AACF;AAEA,eAAe,oBACb,SACA,UACA,WACA,KACuF;AACvF,MAAI,QAAQ,MAAO,QAAO,EAAE,IAAI,MAAM,OAAO,EAAE,GAAG,QAAQ,MAAM,EAAE;AAClE,MAAI,CAAC,QAAQ,QAAQ;AACnB,WAAO,EAAE,IAAI,OAAO,QAAQ,uCAAuC;AAAA,EACrE;AACA,QAAM,aAAa,SAAS,IAAI,QAAQ,MAAM;AAC9C,MAAI,CAAC,YAAY;AACf,WAAO,EAAE,IAAI,OAAO,QAAQ,0BAA0B,QAAQ,MAAM,GAAG;AAAA,EACzE;AACA,QAAM,gBAAgB,WAAW,QAAQ,MAAM;AAC/C,MAAI,CAAC,eAAe,OAAO;AACzB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,iBAAiB,QAAQ,MAAM;AAAA,IACzC;AAAA,EACF;AACA,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM;AAAA,MACjB;AAAA,MACA,EAAE,GAAG,cAAc,MAAM;AAAA,MACzB;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,iBAAiB,QAAQ,MAAM,WACrC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CACvD;AAAA,IACF;AAAA,EACF;AACA,QAAM,UAAU,eAAe,UAAU;AACzC,MAAI,CAAC,QAAQ,QAAQ;AACnB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,iBAAiB,QAAQ,MAAM;AAAA,IACzC;AAAA,EACF;AACA,QAAM,UAAU;AAChB,QAAM,KAAM,QAAQ,CAAC,EAA8B,OAAO;AAC1D,MAAI,OAAO,OAAO,YAAY,CAAC,IAAI;AACjC,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,iBAAiB,QAAQ,MAAM;AAAA,IACzC;AAAA,EACF;AACA,QAAM,SAAS,QAAQ,UAAU;AACjC,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,OAAO,EAAE,CAAC,MAAM,GAAG,IAAI,GAAI,QAAQ,SAAS,CAAC,EAAG;AAAA,EAClD;AACF;AAEA,SAAS,eAAe,OAA2B;AACjD,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO,CAAC;AACjD,QAAM,YAAY;AAClB,aAAW,OAAO,CAAC,WAAW,SAAS,UAAU,aAAa,SAAS,WAAW,MAAM,GAAG;AACzF,UAAM,MAAM,UAAU,GAAG;AACzB,QAAI,MAAM,QAAQ,GAAG,EAAG,QAAO;AAAA,EACjC;AACA,SAAO,CAAC;AACV;AAUA,eAAsB,aACpB,UAA+B,CAAC,GACP;AACzB,QAAM,mBAAmB,QAAQ,oBAAoB;AACrD,QAAM,YAAY,MAAM,uBAAuB;AAC/C,MAAI,WAA0B,QAAQ,YAAY;AAClD,MAAI,iBAAgC,QAAQ,kBAAkB;AAC9D,MAAI,SAAwB,QAAQ,UAAU;AAC9C,MAAI,CAAC,UAAU;AACb,UAAM,SAAS,MAAM,kBAAkB,SAAS;AAChD,QAAI,QAAQ;AACV,iBAAW,OAAO;AAClB,uBAAiB,OAAO;AACxB,eAAS,UAAU,OAAO;AAAA,IAC5B;AAAA,EACF;AACA,QAAM,MAAM,uBAAuB,WAAW,UAAU,gBAAgB,MAAM;AAC9E,QAAM,UAAU,MAAM,mBAAmB;AAEzC,QAAM,OAAuD,CAAC;AAC9D,aAAW,SAAS,SAAS;AAC3B,QAAI,QAAQ,gBAAgB,MAAM,aAAa,QAAQ,aAAc;AACrE,eAAW,QAAQ,MAAM,MAAO,MAAK,KAAK,EAAE,UAAU,MAAM,UAAU,KAAK,CAAC;AAAA,EAC9E;AACA,QAAM,WAAW,oBAAI,IAA8B;AACnD,aAAW,EAAE,KAAK,KAAK,KAAM,UAAS,IAAI,KAAK,MAAM,IAAI;AAEzD,QAAM,UAA4B,CAAC;AACnC,aAAW,EAAE,UAAU,KAAK,KAAK,MAAM;AACrC,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,aAAa,KAAK,eAAe;AACvC,UAAM,UAAU,WAAW,KAAK,IAAI;AACpC,QAAI,CAAC,SAAS;AACZ,cAAQ,KAAK;AAAA,QACX,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,QACR,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,QAAQ;AAAA,MACV,CAAC;AACD;AAAA,IACF;AACA,QAAI,QAAQ,MAAM;AAChB,cAAQ,KAAK;AAAA,QACX,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,QACR,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,QAAQ,QAAQ,QAAQ;AAAA,MAC1B,CAAC;AACD;AAAA,IACF;AACA,QAAI,cAAc,CAAC,kBAAkB;AACnC,cAAQ,KAAK;AAAA,QACX,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,QACR,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,QAAQ;AAAA,MACV,CAAC;AACD;AAAA,IACF;AACA,UAAM,cAAc,MAAM,oBAAoB,SAAS,UAAU,WAAW,GAAG;AAC/E,QAAI,CAAC,YAAY,IAAI;AACnB,cAAQ,KAAK;AAAA,QACX,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,QACR,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,QAAQ,YAAY;AAAA,MACtB,CAAC;AACD;AAAA,IACF;AACA,QAAI;AACF,YAAM,SAAS,aACX,MAAM,oBAAoB,MAAM,YAAY,OAAO,WAAW,GAAG,IACjE,MAAM,gBAAgB,MAAM,YAAY,OAAO,WAAW,GAAG;AAEjE,WAAK,UAAU,MAAM;AAErB,UACE,eACC,OAAO,WAAW,YACjB,WAAW,QACV,OAAmC,WAAW,yBACjD;AACA,gBAAQ,KAAK;AAAA,UACX,QAAQ;AAAA,UACR,MAAM,KAAK;AAAA,UACX;AAAA,UACA,QAAQ;AAAA,UACR,YAAY,KAAK,IAAI,IAAI;AAAA,UACzB,QAAQ;AAAA,UACR,eAAe,YAAY,MAAM;AAAA,QACnC,CAAC;AACD;AAAA,MACF;AACA,cAAQ,KAAK;AAAA,QACX,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,QACR,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,eAAe,YAAY,MAAM;AAAA,MACnC,CAAC;AAAA,IACH,SAAS,OAAO;AACd,cAAQ,KAAK;AAAA,QACX,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,QACR,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC/D,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,SAAS,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE;AAC1D,QAAM,SAAS,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE;AAC1D,QAAM,UAAU,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE;AAC3D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/migrations/Migration20260419100521.js

@@ -0,0 +1,17 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260419100521_ai_assistant extends Migration {
+  async up() {
+    this.addSql(`create table "ai_agent_prompt_overrides" ("id" uuid not null default gen_random_uuid(), "tenant_id" uuid not null, "organization_id" uuid null, "agent_id" text not null, "version" int not null, "sections" jsonb not null, "notes" text null, "created_by_user_id" uuid null, "created_at" timestamptz not null, "updated_at" timestamptz not null, constraint "ai_agent_prompt_overrides_pkey" primary key ("id"));`);
+    this.addSql(`create unique index "ai_agent_prompt_overrides_tenant_org_agent_version_uq" on "ai_agent_prompt_overrides" ("tenant_id", "organization_id", "agent_id", "version") where "organization_id" is not null;`);
+    this.addSql(`create unique index "ai_agent_prompt_overrides_tenant_agent_version_null_org_uq" on "ai_agent_prompt_overrides" ("tenant_id", "agent_id", "version") where "organization_id" is null;`);
+    this.addSql(`create index "ai_agent_prompt_overrides_tenant_org_agent_version_idx" on "ai_agent_prompt_overrides" ("tenant_id", "organization_id", "agent_id", "version" desc);`);
+    this.addSql(`create index "ai_agent_prompt_overrides_tenant_agent_idx" on "ai_agent_prompt_overrides" ("tenant_id", "agent_id");`);
+  }
+  async down() {
+    this.addSql(`drop table if exists "ai_agent_prompt_overrides" cascade;`);
+  }
+}
+export {
+  Migration20260419100521_ai_assistant
+};
+//# sourceMappingURL=Migration20260419100521.js.map

package/dist/modules/ai_assistant/migrations/Migration20260419100521.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/migrations/Migration20260419100521.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260419100521_ai_assistant extends Migration {\n\n  override async up(): Promise<void> {\n    this.addSql(`create table \"ai_agent_prompt_overrides\" (\"id\" uuid not null default gen_random_uuid(), \"tenant_id\" uuid not null, \"organization_id\" uuid null, \"agent_id\" text not null, \"version\" int not null, \"sections\" jsonb not null, \"notes\" text null, \"created_by_user_id\" uuid null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, constraint \"ai_agent_prompt_overrides_pkey\" primary key (\"id\"));`);\n    this.addSql(`create unique index \"ai_agent_prompt_overrides_tenant_org_agent_version_uq\" on \"ai_agent_prompt_overrides\" (\"tenant_id\", \"organization_id\", \"agent_id\", \"version\") where \"organization_id\" is not null;`);\n    this.addSql(`create unique index \"ai_agent_prompt_overrides_tenant_agent_version_null_org_uq\" on \"ai_agent_prompt_overrides\" (\"tenant_id\", \"agent_id\", \"version\") where \"organization_id\" is null;`);\n    this.addSql(`create index \"ai_agent_prompt_overrides_tenant_org_agent_version_idx\" on \"ai_agent_prompt_overrides\" (\"tenant_id\", \"organization_id\", \"agent_id\", \"version\" desc);`);\n    this.addSql(`create index \"ai_agent_prompt_overrides_tenant_agent_idx\" on \"ai_agent_prompt_overrides\" (\"tenant_id\", \"agent_id\");`);\n  }\n\n  override async down(): Promise<void> {\n    this.addSql(`drop table if exists \"ai_agent_prompt_overrides\" cascade;`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,6CAA6C,UAAU;AAAA,EAElE,MAAe,KAAoB;AACjC,SAAK,OAAO,wZAAwZ;AACpa,SAAK,OAAO,yMAAyM;AACrN,SAAK,OAAO,uLAAuL;AACnM,SAAK,OAAO,oKAAoK;AAChL,SAAK,OAAO,qHAAqH;AAAA,EACnI;AAAA,EAEA,MAAe,OAAsB;AACnC,SAAK,OAAO,2DAA2D;AAAA,EACzE;AAEF;",
+  "names": []
+}

package/dist/modules/ai_assistant/migrations/Migration20260419132948.js

@@ -0,0 +1,16 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260419132948_ai_assistant extends Migration {
+  async up() {
+    this.addSql(`create table "ai_agent_mutation_policy_overrides" ("id" uuid not null default gen_random_uuid(), "tenant_id" uuid not null, "organization_id" uuid null, "agent_id" text not null, "mutation_policy" text not null, "notes" text null, "created_by_user_id" uuid null, "created_at" timestamptz not null, "updated_at" timestamptz not null, constraint "ai_agent_mutation_policy_overrides_pkey" primary key ("id"));`);
+    this.addSql(`create unique index "ai_agent_mutation_policy_overrides_tenant_org_agent_uq" on "ai_agent_mutation_policy_overrides" ("tenant_id", "organization_id", "agent_id") where "organization_id" is not null;`);
+    this.addSql(`create unique index "ai_agent_mutation_policy_overrides_tenant_agent_null_org_uq" on "ai_agent_mutation_policy_overrides" ("tenant_id", "agent_id") where "organization_id" is null;`);
+    this.addSql(`create index "ai_agent_mutation_policy_overrides_tenant_agent_idx" on "ai_agent_mutation_policy_overrides" ("tenant_id", "agent_id");`);
+  }
+  async down() {
+    this.addSql(`drop table if exists "ai_agent_mutation_policy_overrides" cascade;`);
+  }
+}
+export {
+  Migration20260419132948_ai_assistant
+};
+//# sourceMappingURL=Migration20260419132948.js.map

package/dist/modules/ai_assistant/migrations/Migration20260419132948.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/migrations/Migration20260419132948.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260419132948_ai_assistant extends Migration {\n\n  override async up(): Promise<void> {\n    this.addSql(`create table \"ai_agent_mutation_policy_overrides\" (\"id\" uuid not null default gen_random_uuid(), \"tenant_id\" uuid not null, \"organization_id\" uuid null, \"agent_id\" text not null, \"mutation_policy\" text not null, \"notes\" text null, \"created_by_user_id\" uuid null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, constraint \"ai_agent_mutation_policy_overrides_pkey\" primary key (\"id\"));`);\n    this.addSql(`create unique index \"ai_agent_mutation_policy_overrides_tenant_org_agent_uq\" on \"ai_agent_mutation_policy_overrides\" (\"tenant_id\", \"organization_id\", \"agent_id\") where \"organization_id\" is not null;`);\n    this.addSql(`create unique index \"ai_agent_mutation_policy_overrides_tenant_agent_null_org_uq\" on \"ai_agent_mutation_policy_overrides\" (\"tenant_id\", \"agent_id\") where \"organization_id\" is null;`);\n    this.addSql(`create index \"ai_agent_mutation_policy_overrides_tenant_agent_idx\" on \"ai_agent_mutation_policy_overrides\" (\"tenant_id\", \"agent_id\");`);\n  }\n\n  override async down(): Promise<void> {\n    this.addSql(`drop table if exists \"ai_agent_mutation_policy_overrides\" cascade;`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,6CAA6C,UAAU;AAAA,EAElE,MAAe,KAAoB;AACjC,SAAK,OAAO,wZAAwZ;AACpa,SAAK,OAAO,wMAAwM;AACpN,SAAK,OAAO,sLAAsL;AAClM,SAAK,OAAO,uIAAuI;AAAA,EACrJ;AAAA,EAEA,MAAe,OAAsB;AACnC,SAAK,OAAO,oEAAoE;AAAA,EAClF;AAEF;",
+  "names": []
+}

package/dist/modules/ai_assistant/migrations/Migration20260419134235.js

@@ -0,0 +1,17 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260419134235_ai_assistant extends Migration {
+  async up() {
+    this.addSql(`create table "ai_pending_actions" ("id" uuid not null default gen_random_uuid(), "tenant_id" uuid not null, "organization_id" uuid null, "agent_id" text not null, "tool_name" text not null, "conversation_id" text null, "target_entity_type" text null, "target_record_id" text null, "normalized_input" jsonb not null, "field_diff" jsonb not null default '[]', "records" jsonb null, "failed_records" jsonb null, "side_effects_summary" text null, "record_version" text null, "attachment_ids" jsonb not null default '[]', "idempotency_key" text not null, "created_by_user_id" uuid not null, "status" text not null, "queue_mode" text not null default 'inline', "execution_result" jsonb null, "created_at" timestamptz not null, "expires_at" timestamptz not null, "resolved_at" timestamptz null, "resolved_by_user_id" uuid null, constraint "ai_pending_actions_pkey" primary key ("id"));`);
+    this.addSql(`create unique index "ai_pending_actions_tenant_org_idempotency_uq" on "ai_pending_actions" ("tenant_id", "organization_id", "idempotency_key") where "organization_id" is not null;`);
+    this.addSql(`create unique index "ai_pending_actions_tenant_idem_null_org_uq" on "ai_pending_actions" ("tenant_id", "idempotency_key") where "organization_id" is null;`);
+    this.addSql(`create index "ai_pending_actions_tenant_org_agent_status_idx" on "ai_pending_actions" ("tenant_id", "organization_id", "agent_id", "status");`);
+    this.addSql(`create index "ai_pending_actions_tenant_org_status_expires_idx" on "ai_pending_actions" ("tenant_id", "organization_id", "status", "expires_at");`);
+  }
+  async down() {
+    this.addSql(`drop table if exists "ai_pending_actions" cascade;`);
+  }
+}
+export {
+  Migration20260419134235_ai_assistant
+};
+//# sourceMappingURL=Migration20260419134235.js.map

package/dist/modules/ai_assistant/migrations/Migration20260419134235.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/migrations/Migration20260419134235.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260419134235_ai_assistant extends Migration {\n\n  override async up(): Promise<void> {\n    this.addSql(`create table \"ai_pending_actions\" (\"id\" uuid not null default gen_random_uuid(), \"tenant_id\" uuid not null, \"organization_id\" uuid null, \"agent_id\" text not null, \"tool_name\" text not null, \"conversation_id\" text null, \"target_entity_type\" text null, \"target_record_id\" text null, \"normalized_input\" jsonb not null, \"field_diff\" jsonb not null default '[]', \"records\" jsonb null, \"failed_records\" jsonb null, \"side_effects_summary\" text null, \"record_version\" text null, \"attachment_ids\" jsonb not null default '[]', \"idempotency_key\" text not null, \"created_by_user_id\" uuid not null, \"status\" text not null, \"queue_mode\" text not null default 'inline', \"execution_result\" jsonb null, \"created_at\" timestamptz not null, \"expires_at\" timestamptz not null, \"resolved_at\" timestamptz null, \"resolved_by_user_id\" uuid null, constraint \"ai_pending_actions_pkey\" primary key (\"id\"));`);\n    this.addSql(`create unique index \"ai_pending_actions_tenant_org_idempotency_uq\" on \"ai_pending_actions\" (\"tenant_id\", \"organization_id\", \"idempotency_key\") where \"organization_id\" is not null;`);\n    this.addSql(`create unique index \"ai_pending_actions_tenant_idem_null_org_uq\" on \"ai_pending_actions\" (\"tenant_id\", \"idempotency_key\") where \"organization_id\" is null;`);\n    this.addSql(`create index \"ai_pending_actions_tenant_org_agent_status_idx\" on \"ai_pending_actions\" (\"tenant_id\", \"organization_id\", \"agent_id\", \"status\");`);\n    this.addSql(`create index \"ai_pending_actions_tenant_org_status_expires_idx\" on \"ai_pending_actions\" (\"tenant_id\", \"organization_id\", \"status\", \"expires_at\");`);\n  }\n\n  override async down(): Promise<void> {\n    this.addSql(`drop table if exists \"ai_pending_actions\" cascade;`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,6CAA6C,UAAU;AAAA,EAElE,MAAe,KAAoB;AACjC,SAAK,OAAO,g3BAAg3B;AAC53B,SAAK,OAAO,qLAAqL;AACjM,SAAK,OAAO,4JAA4J;AACxK,SAAK,OAAO,+IAA+I;AAC3J,SAAK,OAAO,mJAAmJ;AAAA,EACjK;AAAA,EAEA,MAAe,OAAsB;AACnC,SAAK,OAAO,oDAAoD;AAAA,EAClE;AAEF;",
+  "names": []
+}

package/dist/modules/ai_assistant/setup.js

@@ -1,3 +1,36 @@
+const PENDING_ACTION_CLEANUP_SCHEDULE_ID = "ai_assistant:pending-action-cleanup";
+async function ensurePendingActionCleanupSchedule(container) {
+  if (!container) return;
+  let schedulerService;
+  try {
+    schedulerService = container.resolve("schedulerService");
+  } catch {
+    schedulerService = void 0;
+  }
+  if (!schedulerService) return;
+  try {
+    await schedulerService.register({
+      id: PENDING_ACTION_CLEANUP_SCHEDULE_ID,
+      name: "AI pending-action cleanup",
+      description: "Sweep pending AI mutation approvals whose TTL elapsed without confirm/cancel and flip them to expired.",
+      scopeType: "system",
+      scheduleType: "interval",
+      scheduleValue: "5m",
+      timezone: "UTC",
+      targetType: "queue",
+      targetQueue: "ai-pending-action-cleanup",
+      targetPayload: {},
+      sourceType: "module",
+      sourceModule: "ai_assistant",
+      isEnabled: true
+    });
+  } catch (error) {
+    console.warn(
+      "[ai_assistant] Failed to register pending-action cleanup schedule:",
+      error instanceof Error ? error.message : error
+    );
+  }
+}
 const setup = {
   defaultRoleFeatures: {
     admin: [
@@ -9,6 +42,9 @@ const setup = {
       "ai_assistant.mcp_servers.manage"
     ],
     employee: ["ai_assistant.view"]
+  },
+  async seedDefaults({ container }) {
+    await ensurePendingActionCleanupSchedule(container);
   }
 };
 var setup_default = setup;

package/dist/modules/ai_assistant/setup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/ai_assistant/setup.ts"],
-  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    admin: [\n      'ai_assistant.view',\n      'ai_assistant.settings.manage',\n      'ai_assistant.mcp.serve',\n      'ai_assistant.tools.list',\n      'ai_assistant.mcp_servers.view',\n      'ai_assistant.mcp_servers.manage',\n    ],\n    employee: ['ai_assistant.view'],\n  },\n}\n\nexport default setup\n"],
-  "mappings": "AAEO,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA,IACnB,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU,CAAC,mBAAmB;AAAA,EAChC;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\n\nconst PENDING_ACTION_CLEANUP_SCHEDULE_ID = 'ai_assistant:pending-action-cleanup'\n\n/**\n * System-scoped recurring schedule: every 5 minutes, enqueue a job to the\n * `ai-pending-action-cleanup` queue so the worker can sweep rows whose TTL\n * elapsed without any confirm/cancel activity (Step 5.12). The schedule id\n * is stable and `scheduler.register()` is an upsert, so calling this from\n * every tenant bootstrap stays idempotent.\n */\nasync function ensurePendingActionCleanupSchedule(\n  container: import('awilix').AwilixContainer | undefined,\n): Promise<void> {\n  if (!container) return\n  let schedulerService:\n    | {\n        register: (registration: Record<string, unknown>) => Promise<void>\n      }\n    | undefined\n  try {\n    schedulerService = container.resolve('schedulerService')\n  } catch {\n    schedulerService = undefined\n  }\n  if (!schedulerService) return\n  try {\n    await schedulerService.register({\n      id: PENDING_ACTION_CLEANUP_SCHEDULE_ID,\n      name: 'AI pending-action cleanup',\n      description:\n        'Sweep pending AI mutation approvals whose TTL elapsed without confirm/cancel and flip them to expired.',\n      scopeType: 'system',\n      scheduleType: 'interval',\n      scheduleValue: '5m',\n      timezone: 'UTC',\n      targetType: 'queue',\n      targetQueue: 'ai-pending-action-cleanup',\n      targetPayload: {},\n      sourceType: 'module',\n      sourceModule: 'ai_assistant',\n      isEnabled: true,\n    })\n  } catch (error) {\n    console.warn(\n      '[ai_assistant] Failed to register pending-action cleanup schedule:',\n      error instanceof Error ? error.message : error,\n    )\n  }\n}\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    admin: [\n      'ai_assistant.view',\n      'ai_assistant.settings.manage',\n      'ai_assistant.mcp.serve',\n      'ai_assistant.tools.list',\n      'ai_assistant.mcp_servers.view',\n      'ai_assistant.mcp_servers.manage',\n    ],\n    employee: ['ai_assistant.view'],\n  },\n\n  async seedDefaults({ container }) {\n    await ensurePendingActionCleanupSchedule(container)\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AAEA,MAAM,qCAAqC;AAS3C,eAAe,mCACb,WACe;AACf,MAAI,CAAC,UAAW;AAChB,MAAI;AAKJ,MAAI;AACF,uBAAmB,UAAU,QAAQ,kBAAkB;AAAA,EACzD,QAAQ;AACN,uBAAmB;AAAA,EACrB;AACA,MAAI,CAAC,iBAAkB;AACvB,MAAI;AACF,UAAM,iBAAiB,SAAS;AAAA,MAC9B,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,aACE;AAAA,MACF,WAAW;AAAA,MACX,cAAc;AAAA,MACd,eAAe;AAAA,MACf,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,aAAa;AAAA,MACb,eAAe,CAAC;AAAA,MAChB,YAAY;AAAA,MACZ,cAAc;AAAA,MACd,WAAW;AAAA,IACb,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ;AAAA,MACN;AAAA,MACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAC3C;AAAA,EACF;AACF;AAEO,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA,IACnB,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU,CAAC,mBAAmB;AAAA,EAChC;AAAA,EAEA,MAAM,aAAa,EAAE,UAAU,GAAG;AAChC,UAAM,mCAAmC,SAAS;AAAA,EACpD;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }