@open-mercato/ai-assistant 0.6.1-develop.3246.1.dbef9d7392 → 0.6.1-develop.3256.1.fe3dec2464

package/src/modules/ai_assistant/data/repositories/__tests__/AiAgentRuntimeOverrideRepository.test.ts

@@ -0,0 +1,337 @@
+import {
+  AiAgentRuntimeOverrideRepository,
+  AiAgentRuntimeOverrideValidationError,
+} from '../AiAgentRuntimeOverrideRepository'
+import { AiAgentRuntimeOverride } from '../../entities'
+
+// ---------------------------------------------------------------------------
+// Registry mock — only exposes `get` and `list` consumed by the repository.
+// ---------------------------------------------------------------------------
+jest.mock('@open-mercato/shared/lib/ai/llm-provider-registry', () => ({
+  llmProviderRegistry: {
+    get: (id: string) => {
+      const known: Record<string, { id: string }> = {
+        anthropic: { id: 'anthropic' },
+        openai: { id: 'openai' },
+        google: { id: 'google' },
+      }
+      return known[id] ?? null
+    },
+    list: () => [{ id: 'anthropic' }, { id: 'openai' }, { id: 'google' }],
+  },
+}))
+
+// ---------------------------------------------------------------------------
+// In-memory entity manager mock.
+// ---------------------------------------------------------------------------
+type Row = {
+  id: string
+  tenantId: string
+  organizationId: string | null
+  agentId: string | null
+  providerId: string | null
+  modelId: string | null
+  baseUrl: string | null
+  updatedByUserId: string | null
+  createdAt: Date
+  updatedAt: Date
+  deletedAt: Date | null
+}
+
+let idCounter = 0
+
+function mockEm() {
+  const store: Row[] = []
+
+  function matchRow(row: Row, filter: Record<string, unknown>): boolean {
+    if ('tenantId' in filter && row.tenantId !== filter.tenantId) return false
+    if ('organizationId' in filter) {
+      const expected = filter.organizationId ?? null
+      if ((row.organizationId ?? null) !== expected) return false
+    }
+    if ('agentId' in filter) {
+      const expected = filter.agentId ?? null
+      if ((row.agentId ?? null) !== expected) return false
+    }
+    if ('deletedAt' in filter) {
+      const expected = filter.deletedAt ?? null
+      if ((row.deletedAt ?? null) !== expected) return false
+    }
+    return true
+  }
+
+  const em: any = {
+    findOne: async (_entity: unknown, where: any) => {
+      return store.find((row) => matchRow(row, where)) ?? null
+    },
+    persist: (row: Row) => {
+      em.__pendingPersist = row
+      return em
+    },
+    flush: async () => {
+      if (em.__pendingPersist) {
+        const existing = store.find((r) => r.id === em.__pendingPersist?.id)
+        if (!existing) {
+          store.push(em.__pendingPersist as Row)
+        } else {
+          Object.assign(existing, em.__pendingPersist)
+        }
+        em.__pendingPersist = null
+      }
+    },
+    create: (_entity: unknown, data: any) => {
+      idCounter += 1
+      const row: Row = {
+        id: `row-${idCounter}`,
+        tenantId: data.tenantId,
+        organizationId: data.organizationId ?? null,
+        agentId: data.agentId ?? null,
+        providerId: data.providerId ?? null,
+        modelId: data.modelId ?? null,
+        baseUrl: data.baseUrl ?? null,
+        updatedByUserId: data.updatedByUserId ?? null,
+        createdAt: new Date(),
+        updatedAt: new Date(),
+        deletedAt: data.deletedAt ?? null,
+      }
+      store.push(row)
+      return row
+    },
+    remove: (row: Row) => {
+      em.__pendingRemove = row
+      return em
+    },
+    transactional: async (fn: (tx: any) => Promise<unknown>) => {
+      return fn(em)
+    },
+    __pendingPersist: null as Row | null,
+    __pendingRemove: null as Row | null,
+    __store: store,
+  }
+
+  return em
+}
+
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+
+describe('AiAgentRuntimeOverrideRepository', () => {
+  describe('getDefault', () => {
+    it('returns null when tenantId is missing', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const result = await repo.getDefault({ tenantId: '' })
+      expect(result).toBeNull()
+    })
+
+    it('returns null when no rows exist', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const result = await repo.getDefault({ tenantId: 't1' })
+      expect(result).toBeNull()
+    })
+
+    it('returns agent-specific row over tenant-wide row', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const ctx = { tenantId: 't1', organizationId: null, userId: 'u1' }
+
+      await repo.upsertDefault({ agentId: null, providerId: 'anthropic' }, ctx)
+      await repo.upsertDefault({ agentId: 'catalog.assistant', providerId: 'openai' }, ctx)
+
+      const result = await repo.getDefault({ tenantId: 't1', agentId: 'catalog.assistant' })
+      expect(result?.providerId).toBe('openai')
+    })
+
+    it('falls back to tenant-wide row when no agent-specific row exists', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const ctx = { tenantId: 't1', organizationId: null, userId: 'u1' }
+
+      await repo.upsertDefault({ agentId: null, providerId: 'google' }, ctx)
+
+      const result = await repo.getDefault({ tenantId: 't1', agentId: 'customers.assistant' })
+      expect(result?.providerId).toBe('google')
+    })
+
+    it('never leaks across tenants (cross-tenant isolation)', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+
+      await repo.upsertDefault(
+        { agentId: 'catalog.assistant', providerId: 'anthropic' },
+        { tenantId: 'tenant-A', organizationId: null, userId: 'u1' },
+      )
+
+      const resultA = await repo.getDefault({ tenantId: 'tenant-A', agentId: 'catalog.assistant' })
+      expect(resultA?.providerId).toBe('anthropic')
+
+      const resultB = await repo.getDefault({ tenantId: 'tenant-B', agentId: 'catalog.assistant' })
+      expect(resultB).toBeNull()
+    })
+
+    it('does not return soft-deleted rows', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const ctx = { tenantId: 't1', organizationId: null, userId: 'u1' }
+
+      await repo.upsertDefault({ agentId: 'catalog.assistant', providerId: 'openai' }, ctx)
+      await repo.clearDefault({ tenantId: 't1', organizationId: null, agentId: 'catalog.assistant' })
+
+      const result = await repo.getDefault({ tenantId: 't1', agentId: 'catalog.assistant' })
+      expect(result).toBeNull()
+    })
+  })
+
+  describe('upsertDefault', () => {
+    it('inserts a new row on first call', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const ctx = { tenantId: 't1', organizationId: null, userId: 'u1' }
+
+      const row = await repo.upsertDefault({ agentId: null, providerId: 'anthropic', modelId: 'claude-haiku' }, ctx)
+      expect(row.providerId).toBe('anthropic')
+      expect(row.modelId).toBe('claude-haiku')
+      expect(row.tenantId).toBe('t1')
+    })
+
+    it('updates existing row in place (upsert)', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const ctx = { tenantId: 't1', organizationId: null, userId: 'u1' }
+
+      await repo.upsertDefault({ agentId: null, providerId: 'anthropic' }, ctx)
+      const updated = await repo.upsertDefault({ agentId: null, providerId: 'openai', modelId: 'gpt-5-mini' }, ctx)
+
+      expect(updated.providerId).toBe('openai')
+      expect(updated.modelId).toBe('gpt-5-mini')
+    })
+
+    it('throws for unknown provider id', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const ctx = { tenantId: 't1', organizationId: null, userId: 'u1' }
+
+      await expect(
+        repo.upsertDefault({ agentId: null, providerId: 'unknown-provider' }, ctx),
+      ).rejects.toThrow(AiAgentRuntimeOverrideValidationError)
+    })
+
+    it('accepts null providerId (clear the axis)', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const ctx = { tenantId: 't1', organizationId: null, userId: 'u1' }
+
+      const row = await repo.upsertDefault({ agentId: null, providerId: null, modelId: 'gpt-5-mini' }, ctx)
+      expect(row.providerId).toBeNull()
+      expect(row.modelId).toBe('gpt-5-mini')
+    })
+
+    it('requires tenantId', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+
+      await expect(
+        repo.upsertDefault({ agentId: null }, { tenantId: '', organizationId: null }),
+      ).rejects.toThrow(/tenantId/)
+    })
+  })
+
+  describe('clearDefault', () => {
+    it('returns false when no active row exists', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const cleared = await repo.clearDefault({ tenantId: 't1', organizationId: null })
+      expect(cleared).toBe(false)
+    })
+
+    it('soft-deletes the row and returns true', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const ctx = { tenantId: 't1', organizationId: null, userId: 'u1' }
+
+      await repo.upsertDefault({ agentId: null, providerId: 'anthropic' }, ctx)
+
+      const cleared = await repo.clearDefault({ tenantId: 't1', organizationId: null })
+      expect(cleared).toBe(true)
+
+      const result = await repo.getDefault({ tenantId: 't1' })
+      expect(result).toBeNull()
+    })
+
+    it('returns false when tenantId is missing', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const cleared = await repo.clearDefault({ tenantId: '' })
+      expect(cleared).toBe(false)
+    })
+
+    it('only clears the matching (org, agent) row and leaves others untouched', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+      const ctx = { tenantId: 't1', organizationId: null, userId: 'u1' }
+
+      await repo.upsertDefault({ agentId: null, providerId: 'anthropic' }, ctx)
+      await repo.upsertDefault({ agentId: 'catalog.assistant', providerId: 'openai' }, ctx)
+
+      await repo.clearDefault({ tenantId: 't1', organizationId: null, agentId: 'catalog.assistant' })
+
+      const tenantDefault = await repo.getDefault({ tenantId: 't1' })
+      expect(tenantDefault?.providerId).toBe('anthropic')
+
+      const agentRow = await repo.getDefault({ tenantId: 't1', agentId: 'catalog.assistant' })
+      expect(agentRow?.providerId).toBe('anthropic')
+    })
+  })
+
+  describe('cross-tenant isolation guarantee', () => {
+    it('two distinct tenants share no rows', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+
+      await repo.upsertDefault(
+        { agentId: null, providerId: 'anthropic', modelId: 'claude-haiku' },
+        { tenantId: 'tenant-1', organizationId: null },
+      )
+      await repo.upsertDefault(
+        { agentId: null, providerId: 'openai', modelId: 'gpt-5-mini' },
+        { tenantId: 'tenant-2', organizationId: null },
+      )
+
+      const r1 = await repo.getDefault({ tenantId: 'tenant-1' })
+      const r2 = await repo.getDefault({ tenantId: 'tenant-2' })
+
+      expect(r1?.providerId).toBe('anthropic')
+      expect(r2?.providerId).toBe('openai')
+
+      expect(r1?.tenantId).toBe('tenant-1')
+      expect(r2?.tenantId).toBe('tenant-2')
+    })
+
+    it('clearing for tenant-1 does not affect tenant-2', async () => {
+      const em = mockEm()
+      const repo = new AiAgentRuntimeOverrideRepository(em)
+
+      await repo.upsertDefault(
+        { agentId: null, providerId: 'anthropic' },
+        { tenantId: 'tenant-1', organizationId: null },
+      )
+      await repo.upsertDefault(
+        { agentId: null, providerId: 'openai' },
+        { tenantId: 'tenant-2', organizationId: null },
+      )
+
+      await repo.clearDefault({ tenantId: 'tenant-1', organizationId: null })
+
+      expect(await repo.getDefault({ tenantId: 'tenant-1' })).toBeNull()
+      expect((await repo.getDefault({ tenantId: 'tenant-2' }))?.providerId).toBe('openai')
+    })
+  })
+
+  it('returns the AiAgentRuntimeOverride entity type', async () => {
+    // Smoke test that the entity class is importable and the mock returns a
+    // shaped object the repository trusts to be an entity instance.
+    void AiAgentRuntimeOverride
+  })
+})

package/src/modules/ai_assistant/data/repositories/__tests__/AiTenantModelAllowlistRepository.test.ts

@@ -0,0 +1,181 @@
+import { AiTenantModelAllowlistRepository } from '../AiTenantModelAllowlistRepository'
+
+type Row = {
+  id: string
+  tenantId: string
+  organizationId: string | null
+  allowedProviders: string[] | null
+  allowedModelsByProvider: Record<string, string[]>
+  updatedByUserId: string | null
+  createdAt: Date
+  updatedAt: Date
+  deletedAt: Date | null
+}
+
+let idCounter = 0
+
+function mockEm() {
+  const store: Row[] = []
+
+  function matchRow(row: Row, filter: Record<string, unknown>): boolean {
+    if ('tenantId' in filter && row.tenantId !== filter.tenantId) return false
+    if ('organizationId' in filter) {
+      const expected = filter.organizationId ?? null
+      if ((row.organizationId ?? null) !== expected) return false
+    }
+    if ('deletedAt' in filter) {
+      const expected = filter.deletedAt ?? null
+      if ((row.deletedAt ?? null) !== expected) return false
+    }
+    return true
+  }
+
+  const em: any = {
+    findOne: async (_entity: unknown, where: any) => store.find((row) => matchRow(row, where)) ?? null,
+    persist: (row: Row) => {
+      em.__pendingPersist = row
+      return em
+    },
+    flush: async () => {
+      if (em.__pendingPersist) {
+        const existing = store.find((r) => r.id === em.__pendingPersist?.id)
+        if (!existing) {
+          store.push(em.__pendingPersist as Row)
+        } else {
+          Object.assign(existing, em.__pendingPersist)
+        }
+        em.__pendingPersist = null
+      }
+    },
+    create: (_entity: unknown, data: any) => {
+      idCounter += 1
+      const row: Row = {
+        id: `row-${idCounter}`,
+        tenantId: data.tenantId,
+        organizationId: data.organizationId ?? null,
+        allowedProviders: data.allowedProviders ?? null,
+        allowedModelsByProvider: data.allowedModelsByProvider ?? {},
+        updatedByUserId: data.updatedByUserId ?? null,
+        createdAt: new Date(),
+        updatedAt: new Date(),
+        deletedAt: data.deletedAt ?? null,
+      }
+      store.push(row)
+      return row
+    },
+    transactional: async (fn: (tx: any) => Promise<unknown>) => fn(em),
+    __pendingPersist: null as Row | null,
+    __store: store,
+  }
+
+  return em
+}
+
+describe('AiTenantModelAllowlistRepository', () => {
+  it('getForTenant returns null when no row exists', async () => {
+    const em = mockEm()
+    const repo = new AiTenantModelAllowlistRepository(em)
+    expect(await repo.getForTenant({ tenantId: 't1' })).toBeNull()
+  })
+
+  it('upsert creates a row with the given snapshot', async () => {
+    const em = mockEm()
+    const repo = new AiTenantModelAllowlistRepository(em)
+    const row = await repo.upsert(
+      {
+        allowedProviders: ['openai'],
+        allowedModelsByProvider: { openai: ['gpt-5-mini'] },
+      },
+      { tenantId: 't1', organizationId: null, userId: 'u1' },
+    )
+    expect(row.allowedProviders).toEqual(['openai'])
+    expect(row.allowedModelsByProvider).toEqual({ openai: ['gpt-5-mini'] })
+    expect(row.updatedByUserId).toBe('u1')
+  })
+
+  it('upsert updates an existing row in place', async () => {
+    const em = mockEm()
+    const repo = new AiTenantModelAllowlistRepository(em)
+    await repo.upsert(
+      { allowedProviders: ['openai'], allowedModelsByProvider: {} },
+      { tenantId: 't1', userId: 'u1' },
+    )
+    const updated = await repo.upsert(
+      {
+        allowedProviders: ['openai', 'anthropic'],
+        allowedModelsByProvider: { openai: ['gpt-5-mini'] },
+      },
+      { tenantId: 't1', userId: 'u2' },
+    )
+    expect(updated.allowedProviders).toEqual(['openai', 'anthropic'])
+    expect(updated.allowedModelsByProvider).toEqual({ openai: ['gpt-5-mini'] })
+    expect(updated.updatedByUserId).toBe('u2')
+    expect(em.__store.length).toBe(1)
+  })
+
+  it('getSnapshot returns a JSON-friendly snapshot of the persisted row', async () => {
+    const em = mockEm()
+    const repo = new AiTenantModelAllowlistRepository(em)
+    await repo.upsert(
+      {
+        allowedProviders: ['openai'],
+        allowedModelsByProvider: { openai: ['gpt-5-mini'] },
+      },
+      { tenantId: 't1', userId: 'u1' },
+    )
+    const snapshot = await repo.getSnapshot({ tenantId: 't1' })
+    expect(snapshot).toEqual({
+      allowedProviders: ['openai'],
+      allowedModelsByProvider: { openai: ['gpt-5-mini'] },
+    })
+  })
+
+  it('clear soft-deletes the active row', async () => {
+    const em = mockEm()
+    const repo = new AiTenantModelAllowlistRepository(em)
+    await repo.upsert(
+      { allowedProviders: ['openai'], allowedModelsByProvider: {} },
+      { tenantId: 't1', userId: 'u1' },
+    )
+    const cleared = await repo.clear({ tenantId: 't1' })
+    expect(cleared).toBe(true)
+    const after = await repo.getForTenant({ tenantId: 't1' })
+    expect(after).toBeNull()
+  })
+
+  it('clear returns false when no row exists', async () => {
+    const em = mockEm()
+    const repo = new AiTenantModelAllowlistRepository(em)
+    expect(await repo.clear({ tenantId: 't1' })).toBe(false)
+  })
+
+  it('isolates rows across tenants', async () => {
+    const em = mockEm()
+    const repo = new AiTenantModelAllowlistRepository(em)
+    await repo.upsert(
+      { allowedProviders: ['openai'], allowedModelsByProvider: {} },
+      { tenantId: 't1', userId: 'u1' },
+    )
+    await repo.upsert(
+      { allowedProviders: ['anthropic'], allowedModelsByProvider: {} },
+      { tenantId: 't2', userId: 'u2' },
+    )
+    const t1 = await repo.getSnapshot({ tenantId: 't1' })
+    const t2 = await repo.getSnapshot({ tenantId: 't2' })
+    expect(t1?.allowedProviders).toEqual(['openai'])
+    expect(t2?.allowedProviders).toEqual(['anthropic'])
+  })
+
+  it('null tenantId yields null without touching the store', async () => {
+    const em = mockEm()
+    const repo = new AiTenantModelAllowlistRepository(em)
+    expect(await repo.getForTenant({ tenantId: '' })).toBeNull()
+    await expect(
+      repo.upsert(
+        { allowedProviders: ['openai'], allowedModelsByProvider: {} },
+        { tenantId: '', userId: 'u1' },
+      ),
+    ).rejects.toThrow(/tenantId/)
+    expect(em.__store.length).toBe(0)
+  })
+})

package/src/modules/ai_assistant/frontend/components/AiAssistantSettingsPageClient.tsx

@@ -215,7 +215,7 @@ function AiAssistantSettingsContent() {
         )}
 
         <p className="text-xs text-muted-foreground mt-3">
-          Set <code className="font-mono text-overline bg-muted px-1 rounded">OPENCODE_PROVIDER</code> in .env to change provider (anthropic, openai, google).
+          Set <code className="font-mono text-overline bg-muted px-1 rounded">OM_AI_PROVIDER</code> in .env to change provider (anthropic, openai, google).
         </p>
       </div>
 

package/src/modules/ai_assistant/i18n/de.json

@@ -87,6 +87,31 @@
   "ai_assistant.agents.tools.subtitle": "In Phase 2 schreibgeschützte Oberfläche. Bearbeitung pro Tool und Mutationsrichtlinie folgen in Schritt 5.4 / Phase 3.",
   "ai_assistant.agents.tools.title": "Erlaubte Tools",
   "ai_assistant.agents.tools.tooltipDisabled": "Bearbeitbar, sobald Phase 3 die Mutationsrichtlinien-Steuerung liefert.",
+  "ai_assistant.allowlist.actions.clearStored": "Gespeicherte Liste löschen",
+  "ai_assistant.allowlist.actions.reset": "Auf ENV-Standard zurücksetzen",
+  "ai_assistant.allowlist.actions.save": "Liste speichern",
+  "ai_assistant.allowlist.badge.active": "Mandantenregeln aktiv",
+  "ai_assistant.allowlist.badge.envOnly": "Nur ENV",
+  "ai_assistant.allowlist.clear.error": "Löschen fehlgeschlagen",
+  "ai_assistant.allowlist.clear.success": "Mandantenliste gelöscht. Es gilt nur die ENV-Erzwingung.",
+  "ai_assistant.allowlist.envBanner.note": "Mandantenauswahl darf die ENV-Liste nicht erweitern — Werte außerhalb sind ausgeblendet.",
+  "ai_assistant.allowlist.envBanner.providers": "OM_AI_AVAILABLE_PROVIDERS",
+  "ai_assistant.allowlist.envBanner.title": "ENV-Liste ist aktiv",
+  "ai_assistant.allowlist.loadError.body": "Bitte Seite neu laden.",
+  "ai_assistant.allowlist.loadError.title": "Liste konnte nicht geladen werden",
+  "ai_assistant.allowlist.loading": "Lade Liste …",
+  "ai_assistant.allowlist.models.default": "Standard",
+  "ai_assistant.allowlist.models.help": "Modelle ankreuzen, die Mandanten wählen dürfen. Leer = keine Modellbeschränkung (ENV erben).",
+  "ai_assistant.allowlist.navTitle": "AI Allowlist",
+  "ai_assistant.allowlist.providers.configured": "konfiguriert",
+  "ai_assistant.allowlist.providers.empty": "Keine konfigurierten Anbieter innerhalb der ENV-Liste.",
+  "ai_assistant.allowlist.providers.help": "Abwählen, um die Verwendung eines Anbieters für diesen Mandanten zu verbieten. Alle wählen, um ENV zu erben.",
+  "ai_assistant.allowlist.providers.notConfigured": "nicht konfiguriert",
+  "ai_assistant.allowlist.providers.title": "Anbieter",
+  "ai_assistant.allowlist.save.error": "Speichern fehlgeschlagen",
+  "ai_assistant.allowlist.save.success": "Liste gespeichert.",
+  "ai_assistant.allowlist.subtitle": "Schränke Anbieter und Modelle ein, die für diesen Mandanten verwendet werden dürfen. Die ENV-Liste ist die äußere Beschränkung — die Mandantenauswahl engt sie weiter ein.",
+  "ai_assistant.allowlist.title": "Anbieter- & Modell-Allowlist",
   "ai_assistant.chat.assistantRoleLabel": "Assistent",
   "ai_assistant.chat.attachFile": "Attach file",
   "ai_assistant.chat.betaChip": "beta",
@@ -220,7 +245,7 @@
   "ai_assistant.launcher.hint.launch": "Launch",
   "ai_assistant.launcher.hint.navigate": "Navigate",
   "ai_assistant.launcher.searchPlaceholder": "Search assistants...",
-  "ai_assistant.launcher.setup.body": "KI-Assistenten sind installiert, aber es ist kein Anbieterschlüssel konfiguriert. Lege OPENCODE_PROVIDER und einen passenden API-Schlüssel in deiner .env-Datei fest und starte die App neu.",
+  "ai_assistant.launcher.setup.body": "KI-Assistenten sind installiert, aber es ist kein Anbieterschlüssel konfiguriert. Lege OM_AI_PROVIDER und einen passenden API-Schlüssel in deiner .env-Datei fest und starte die App neu.",
   "ai_assistant.launcher.setup.docs": "Dokumentation zum KI-Assistenten",
   "ai_assistant.launcher.setup.settingsDocs": "Anbietereinstellungen",
   "ai_assistant.launcher.setup.title": "Konfiguriere einen KI-Anbieter, um Assistenten zu verwenden",
@@ -244,6 +269,12 @@
   "ai_assistant.mcp.notGenerated": "Nicht generiert",
   "ai_assistant.mcp.saveKeyWarning": "Speichern Sie diesen Schlüssel jetzt — er wird nicht erneut angezeigt!",
   "ai_assistant.mcp.title": "MCP-Konfiguration",
+  "ai_assistant.modelPicker.activeBadge": "aktiv",
+  "ai_assistant.modelPicker.defaultBadge": "Standard",
+  "ai_assistant.modelPicker.defaultLabel": "Modell: Standard",
+  "ai_assistant.modelPicker.listAriaLabel": "Verfügbare Modelle",
+  "ai_assistant.modelPicker.triggerAriaLabel": "KI-Modell auswählen",
+  "ai_assistant.modelPicker.useDefault": "Standard des Agenten verwenden",
   "ai_assistant.playground.agentPickerLabel": "Agent",
   "ai_assistant.playground.chat.notSupportedBody": "Wählen Sie einen Agenten, dessen Ausführungsmodus \"chat\" ist, oder wechseln Sie zum Objekt-Modus-Tab.",
   "ai_assistant.playground.chat.notSupportedTitle": "Chat-Modus ist für diesen Agenten nicht verfügbar.",
@@ -271,6 +302,11 @@
   "ai_assistant.playground.object.run": "Objekt ausführen",
   "ai_assistant.playground.object.shortcutHint": "Drücken Sie Cmd/Ctrl+Enter zum Ausführen.",
   "ai_assistant.playground.refresh": "Agenten aktualisieren",
+  "ai_assistant.playground.resolution.baseUrl": "Basis-URL",
+  "ai_assistant.playground.resolution.model": "Modell",
+  "ai_assistant.playground.resolution.none": "—",
+  "ai_assistant.playground.resolution.provider": "Anbieter",
+  "ai_assistant.playground.resolution.source": "Quelle",
   "ai_assistant.playground.retry": "Wiederholen",
   "ai_assistant.playground.subtitle": "Testen Sie jeden registrierten KI-Agenten End-to-End. Verwenden Sie das Debug-Panel, um Request- und Response-Payloads zu inspizieren, und den Objekt-Modus-Tab, um strukturierte Ausgabe zu betrachten.",
   "ai_assistant.playground.tabs.chat": "Chat",
@@ -289,6 +325,59 @@
   "ai_assistant.session.llmInstructions": "LLM-Anweisungen",
   "ai_assistant.session.title": "Sitzungs-API-Schlüssel",
   "ai_assistant.session.tokenLabel": "Sitzungstoken",
+  "ai_assistant.settings.agentIdColumn": "Agent",
+  "ai_assistant.settings.agentOverridesDescription": "Aufgelöstes Modell für jeden registrierten Agenten. Agenten mit einer benutzerdefinierten Überschreibung zeigen eine Löschen-Schaltfläche.",
+  "ai_assistant.settings.agentOverridesTitle": "Modellauflösung pro Agent",
+  "ai_assistant.settings.clearAgentError": "Agenten-Überschreibung konnte nicht gelöscht werden.",
+  "ai_assistant.settings.clearAgentSuccess": "Agenten-Überschreibung gelöscht.",
+  "ai_assistant.settings.clearError": "Überschreibung konnte nicht gelöscht werden.",
+  "ai_assistant.settings.clearOverride": "Überschreibung löschen",
+  "ai_assistant.settings.clearSuccess": "Standard-Modell-Überschreibung gelöscht.",
+  "ai_assistant.settings.configured": "Konfiguriert",
+  "ai_assistant.settings.connected": "Verbunden",
+  "ai_assistant.settings.connecting": "Verbindet...",
+  "ai_assistant.settings.connectionsTitle": "Verbindungen",
+  "ai_assistant.settings.currentOverride": "Aktuelle Überschreibung:",
+  "ai_assistant.settings.defaultOverrideDescription": "Legen Sie einen mandantenweiten Standard-Anbieter und ein Modell fest. Agenten mit einer Überschreibung pro Agent oder einem bestimmten defaultModel haben Vorrang.",
+  "ai_assistant.settings.defaultOverrideTitle": "Standard-Modell-Überschreibung",
+  "ai_assistant.settings.developerToolsTitle": "Entwicklertools",
+  "ai_assistant.settings.disconnected": "Getrennt",
+  "ai_assistant.settings.envKeyConfigured": "{{key}} konfiguriert",
+  "ai_assistant.settings.envKeyMissing": "{{key}} nicht gesetzt",
+  "ai_assistant.settings.generateMcpConfig": "MCP-Konfiguration generieren",
+  "ai_assistant.settings.generateSessionKey": "Sitzungsschlüssel generieren",
+  "ai_assistant.settings.llmProviderLabel": "LLM-Anbieter:",
+  "ai_assistant.settings.loading": "Einstellungen werden geladen...",
+  "ai_assistant.settings.mcpAuthLabel": "MCP-Authentifizierung:",
+  "ai_assistant.settings.mcpAuthNote": "Erforderlich für den KI-Zugriff auf Plattform-Tools über den MCP-Server.",
+  "ai_assistant.settings.mcpConfigDescription": "Konfiguration für Claude Code oder andere MCP-Clients generieren.",
+  "ai_assistant.settings.mcpConfigTitle": "MCP-Konfiguration",
+  "ai_assistant.settings.mcpKeyConfigured": "MCP_SERVER_API_KEY konfiguriert",
+  "ai_assistant.settings.mcpKeyMissing": "MCP_SERVER_API_KEY nicht gesetzt",
+  "ai_assistant.settings.mcpToolsCount": "Tools",
+  "ai_assistant.settings.mcpToolsTitle": "MCP-Tools",
+  "ai_assistant.settings.meilisearchNote": "Meilisearch ist für die API-Endpunkt-Erkennung erforderlich. Endpunkte werden automatisch beim Start des MCP-Servers indiziert.",
+  "ai_assistant.settings.modelColumn": "Modell",
+  "ai_assistant.settings.modelLabel": "Modell",
+  "ai_assistant.settings.notAvailable": "Nicht verfügbar",
+  "ai_assistant.settings.notConfigured": "Nicht konfiguriert",
+  "ai_assistant.settings.openButton": "KI-Assistent öffnen",
+  "ai_assistant.settings.pageDescription": "KI-Assistent konfigurieren und überwachen",
+  "ai_assistant.settings.pageTitle": "KI-Assistent-Einstellungen",
+  "ai_assistant.settings.providerColumn": "Anbieter",
+  "ai_assistant.settings.providerLabel": "Anbieter",
+  "ai_assistant.settings.saveError": "Überschreibung konnte nicht gespeichert werden.",
+  "ai_assistant.settings.saveOverride": "Überschreibung speichern",
+  "ai_assistant.settings.saveSuccess": "Standard-Modell-Überschreibung gespeichert.",
+  "ai_assistant.settings.selectModel": "Modell auswählen",
+  "ai_assistant.settings.selectProvider": "Anbieter auswählen",
+  "ai_assistant.settings.sessionKeyDescription": "Temporären Token für programmatischen LLM-Zugriff generieren. Läuft nach 2 Stunden ab.",
+  "ai_assistant.settings.sessionKeyTitle": "Sitzungs-API-Schlüssel",
+  "ai_assistant.settings.sourceColumn": "Quelle",
+  "ai_assistant.settings.visibilityDisabled": "Im Header ausgeblendet. Aktivieren, um den Button und den Cmd+J-Shortcut anzuzeigen.",
+  "ai_assistant.settings.visibilityEnabled": "Im Header sichtbar mit aktiviertem Cmd+J-Shortcut.",
+  "ai_assistant.settings.visibilityTitle": "KI-Assistent",
+  "ai_assistant.settings.visibilityToggleLabel": "Sichtbarkeit",
   "ai_assistant.status.analyzing": "Anfrage wird analysiert...",
   "ai_assistant.status.executing": "Tools werden ausgeführt...",
   "ai_assistant.status.responding": "Antwort wird erstellt...",