@open-mercato/ai-assistant 0.6.1-develop.3246.1.dbef9d7392 → 0.6.1-develop.3256.1.fe3dec2464

package/dist/modules/ai_assistant/backend/config/ai-assistant/allowlist/AiTenantAllowlistPageClient.js

@@ -0,0 +1,338 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import * as React from "react";
+import { useQuery, useQueryClient } from "@tanstack/react-query";
+import { Loader2, Save, Shield, Trash2, Info, AlertCircle, ShieldCheck } from "lucide-react";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+import { Alert, AlertDescription, AlertTitle } from "@open-mercato/ui/primitives/alert";
+import { Badge } from "@open-mercato/ui/primitives/badge";
+import { Button } from "@open-mercato/ui/primitives/button";
+import { Checkbox } from "@open-mercato/ui/primitives/checkbox";
+import { Label } from "@open-mercato/ui/primitives/label";
+import { apiCall, apiCallOrThrow } from "@open-mercato/ui/backend/utils/apiCall";
+import { flash } from "@open-mercato/ui/backend/FlashMessages";
+import { useGuardedMutation } from "@open-mercato/ui/backend/injection/useGuardedMutation";
+async function fetchSettings() {
+  const { result, status } = await apiCallOrThrow(
+    "/api/ai_assistant/settings",
+    { method: "GET", credentials: "include" },
+    { errorMessage: "Failed to load AI settings" }
+  );
+  if (!result) throw new Error(`Failed to load settings (${status})`);
+  return result;
+}
+function snapshotToEditState(snapshot) {
+  return {
+    allowedProviders: snapshot?.allowedProviders ?? null,
+    allowedModelsByProvider: { ...snapshot?.allowedModelsByProvider ?? {} }
+  };
+}
+function AiTenantAllowlistPageClient() {
+  const t = useT();
+  const queryClient = useQueryClient();
+  const settingsQuery = useQuery({ queryKey: ["ai_assistant", "settings"], queryFn: fetchSettings, staleTime: 0 });
+  const [editState, setEditState] = React.useState({
+    allowedProviders: null,
+    allowedModelsByProvider: {}
+  });
+  const [dirty, setDirty] = React.useState(false);
+  const [saving, setSaving] = React.useState(false);
+  const [clearing, setClearing] = React.useState(false);
+  const [feedback, setFeedback] = React.useState(null);
+  const { runMutation: runSaveAllowlistMutation } = useGuardedMutation({
+    contextId: "ai-tenant-allowlist-save"
+  });
+  const { runMutation: runClearAllowlistMutation } = useGuardedMutation({
+    contextId: "ai-tenant-allowlist-clear"
+  });
+  React.useEffect(() => {
+    if (settingsQuery.data) {
+      setEditState(snapshotToEditState(settingsQuery.data.tenantAllowlist));
+      setDirty(false);
+    }
+  }, [settingsQuery.data]);
+  const pageHeader = /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
+    /* @__PURE__ */ jsxs("h1", { className: "flex items-center gap-2 text-2xl font-bold", children: [
+      /* @__PURE__ */ jsx(Shield, { className: "size-6" }),
+      t("ai_assistant.allowlist.title", "AI provider & model allowlist")
+    ] }),
+    /* @__PURE__ */ jsx("p", { className: "text-muted-foreground", children: t(
+      "ai_assistant.allowlist.subtitle",
+      "Limit which providers and models the runtime, settings, and chat picker may use for this tenant. The env allowlist is the outer constraint \u2014 tenant picks narrow it further."
+    ) })
+  ] });
+  if (settingsQuery.isLoading) {
+    return /* @__PURE__ */ jsxs("div", { className: "flex max-w-3xl flex-col gap-4", children: [
+      pageHeader,
+      /* @__PURE__ */ jsxs("div", { className: "flex w-fit items-center gap-2 rounded-md border border-border bg-card px-3 py-2 text-sm text-muted-foreground", role: "status", children: [
+        /* @__PURE__ */ jsx(Loader2, { className: "size-4 animate-spin" }),
+        t("ai_assistant.allowlist.loading", "Loading allowlist\u2026")
+      ] })
+    ] });
+  }
+  if (settingsQuery.isError || !settingsQuery.data) {
+    return /* @__PURE__ */ jsxs("div", { className: "flex max-w-3xl flex-col gap-4", children: [
+      pageHeader,
+      /* @__PURE__ */ jsxs(Alert, { variant: "destructive", children: [
+        /* @__PURE__ */ jsx(AlertCircle, { className: "size-4" }),
+        /* @__PURE__ */ jsx(AlertTitle, { children: t("ai_assistant.allowlist.loadError.title", "Failed to load allowlist") }),
+        /* @__PURE__ */ jsx(AlertDescription, { children: settingsQuery.error instanceof Error ? settingsQuery.error.message : t("ai_assistant.allowlist.loadError.body", "Try refreshing the page.") })
+      ] })
+    ] });
+  }
+  const settings = settingsQuery.data;
+  const envAllowedProviders = settings.allowlist.providers;
+  const envModelsByProvider = settings.allowlist.modelsByProvider;
+  const editableProviders = settings.allowlistProviders ?? settings.availableProviders;
+  const candidateProviders = editableProviders.filter((p) => {
+    if (envAllowedProviders === null) return true;
+    return envAllowedProviders.some((id) => id.toLowerCase() === p.id.toLowerCase());
+  });
+  const tenantPickedProviders = editState.allowedProviders;
+  const isProviderEnabled = (id) => {
+    if (tenantPickedProviders === null) return true;
+    return tenantPickedProviders.includes(id);
+  };
+  const toggleProvider = (id, next) => {
+    setDirty(true);
+    setFeedback(null);
+    setEditState((prev) => {
+      const current = prev.allowedProviders;
+      if (next) {
+        const list2 = current === null ? [id] : Array.from(/* @__PURE__ */ new Set([...current, id]));
+        return { ...prev, allowedProviders: list2 };
+      }
+      const list = current === null ? candidateProviders.map((p) => p.id).filter((pid) => pid !== id) : current.filter((pid) => pid !== id);
+      return { ...prev, allowedProviders: list };
+    });
+  };
+  const isModelEnabled = (providerId, modelId) => {
+    const list = editState.allowedModelsByProvider[providerId];
+    if (list === void 0) return true;
+    return list.includes(modelId);
+  };
+  const toggleModel = (providerId, modelId, next) => {
+    setDirty(true);
+    setFeedback(null);
+    const provider = candidateProviders.find((p) => p.id === providerId);
+    const allModelIds = provider?.defaultModels.map((m) => m.id) ?? [];
+    setEditState((prev) => {
+      const current = prev.allowedModelsByProvider[providerId];
+      const allowedModelsByProvider = { ...prev.allowedModelsByProvider };
+      if (next) {
+        const list = current === void 0 ? [modelId] : Array.from(/* @__PURE__ */ new Set([...current, modelId]));
+        allowedModelsByProvider[providerId] = list;
+      } else {
+        const baseline = current === void 0 ? allModelIds : current;
+        const list = baseline.filter((id) => id !== modelId);
+        allowedModelsByProvider[providerId] = list;
+      }
+      return { ...prev, allowedModelsByProvider };
+    });
+  };
+  const resetTenantPicks = () => {
+    setDirty(true);
+    setFeedback(null);
+    setEditState({ allowedProviders: null, allowedModelsByProvider: {} });
+  };
+  const handleSave = async () => {
+    setSaving(true);
+    setFeedback(null);
+    try {
+      await runSaveAllowlistMutation({
+        operation: async () => {
+          const { ok, status, result } = await apiCall(
+            "/api/ai_assistant/settings/allowlist",
+            {
+              method: "PUT",
+              credentials: "include",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify({
+                allowedProviders: editState.allowedProviders,
+                allowedModelsByProvider: editState.allowedModelsByProvider
+              })
+            }
+          );
+          if (!ok) {
+            throw new Error(
+              result?.error ?? t("ai_assistant.allowlist.save.error", `Save failed (${status})`)
+            );
+          }
+        },
+        context: {}
+      });
+      const successText = t("ai_assistant.allowlist.save.success", "Allowlist saved.");
+      setFeedback({ kind: "ok", text: successText });
+      flash(successText, "success");
+      setDirty(false);
+      await queryClient.invalidateQueries({ queryKey: ["ai_assistant", "settings"] });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      setFeedback({ kind: "error", text: message });
+      flash(message, "error");
+    } finally {
+      setSaving(false);
+    }
+  };
+  const handleClear = async () => {
+    setClearing(true);
+    setFeedback(null);
+    try {
+      await runClearAllowlistMutation({
+        operation: async () => {
+          const { ok, status, result } = await apiCall(
+            "/api/ai_assistant/settings/allowlist",
+            { method: "DELETE", credentials: "include" }
+          );
+          if (!ok) {
+            throw new Error(
+              result?.error ?? t("ai_assistant.allowlist.clear.error", `Clear failed (${status})`)
+            );
+          }
+        },
+        context: {}
+      });
+      const successText = t(
+        "ai_assistant.allowlist.clear.success",
+        "Tenant allowlist cleared. Env-only enforcement applies."
+      );
+      setFeedback({ kind: "ok", text: successText });
+      flash(successText, "success");
+      setDirty(false);
+      await queryClient.invalidateQueries({ queryKey: ["ai_assistant", "settings"] });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      setFeedback({ kind: "error", text: message });
+      flash(message, "error");
+    } finally {
+      setClearing(false);
+    }
+  };
+  const envBanner = envAllowedProviders === null && Object.keys(envModelsByProvider).length === 0 ? null : /* @__PURE__ */ jsxs(Alert, { children: [
+    /* @__PURE__ */ jsx(Info, { className: "h-4 w-4" }),
+    /* @__PURE__ */ jsx(AlertTitle, { children: t("ai_assistant.allowlist.envBanner.title", "Env allowlist is in effect") }),
+    /* @__PURE__ */ jsxs(AlertDescription, { className: "space-y-1", children: [
+      envAllowedProviders ? /* @__PURE__ */ jsxs("div", { children: [
+        t("ai_assistant.allowlist.envBanner.providers", "OM_AI_AVAILABLE_PROVIDERS"),
+        ": ",
+        /* @__PURE__ */ jsx("code", { className: "font-mono text-xs", children: envAllowedProviders.join(", ") })
+      ] }) : null,
+      Object.keys(envModelsByProvider).map((pid) => /* @__PURE__ */ jsxs("div", { children: [
+        /* @__PURE__ */ jsxs("code", { className: "font-mono text-xs", children: [
+          "OM_AI_AVAILABLE_MODELS_",
+          pid.toUpperCase()
+        ] }),
+        ": ",
+        envModelsByProvider[pid].join(", ")
+      ] }, pid)),
+      /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground mt-1", children: t("ai_assistant.allowlist.envBanner.note", "Tenant picks may not widen the env list \u2014 values outside it are hidden.") })
+    ] })
+  ] });
+  return /* @__PURE__ */ jsxs("div", { className: "flex flex-col gap-6 max-w-3xl", children: [
+    pageHeader,
+    envBanner,
+    feedback ? /* @__PURE__ */ jsxs(Alert, { variant: feedback.kind === "error" ? "destructive" : void 0, children: [
+      feedback.kind === "error" ? /* @__PURE__ */ jsx(AlertCircle, { className: "h-4 w-4" }) : /* @__PURE__ */ jsx(Info, { className: "h-4 w-4" }),
+      /* @__PURE__ */ jsx(AlertDescription, { children: feedback.text })
+    ] }) : null,
+    /* @__PURE__ */ jsxs("div", { className: "rounded-lg border bg-card p-6 space-y-6", children: [
+      /* @__PURE__ */ jsxs("div", { className: "flex items-start justify-between gap-3", children: [
+        /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
+          /* @__PURE__ */ jsx("h2", { className: "text-lg font-semibold", children: t("ai_assistant.allowlist.providers.title", "Providers") }),
+          /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t(
+            "ai_assistant.allowlist.providers.help",
+            "Untick to forbid the runtime from using a provider for this tenant. Tick all to inherit the env allowlist."
+          ) })
+        ] }),
+        /* @__PURE__ */ jsx(
+          "span",
+          {
+            className: settings.effectiveAllowlist.tenantOverridesActive ? "inline-flex size-8 items-center justify-center rounded-md text-status-success-icon" : "inline-flex size-8 items-center justify-center rounded-md text-status-warning-icon",
+            role: "img",
+            "aria-label": settings.effectiveAllowlist.tenantOverridesActive ? t("ai_assistant.allowlist.badge.active", "Tenant rules active") : t("ai_assistant.allowlist.badge.envOnly", "Env-only"),
+            title: settings.effectiveAllowlist.tenantOverridesActive ? t("ai_assistant.allowlist.badge.active", "Tenant rules active") : t("ai_assistant.allowlist.badge.envOnly", "Env-only"),
+            children: settings.effectiveAllowlist.tenantOverridesActive ? /* @__PURE__ */ jsx(ShieldCheck, { className: "size-5", "aria-hidden": true }) : /* @__PURE__ */ jsx(Shield, { className: "size-5", "aria-hidden": true })
+          }
+        )
+      ] }),
+      candidateProviders.length === 0 ? /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("ai_assistant.allowlist.providers.empty", "No configured providers within the env allowlist.") }) : /* @__PURE__ */ jsx("div", { className: "space-y-4", children: candidateProviders.map((provider) => {
+        const enabled = isProviderEnabled(provider.id);
+        const envModels = envModelsByProvider[provider.id];
+        const candidateModels = envModels ? provider.defaultModels.filter((m) => envModels.includes(m.id)) : provider.defaultModels;
+        return /* @__PURE__ */ jsxs("div", { className: "rounded-md border p-4 space-y-3", children: [
+          /* @__PURE__ */ jsx("div", { className: "flex items-center justify-between gap-3", children: /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-3", children: [
+            /* @__PURE__ */ jsx(
+              Checkbox,
+              {
+                id: `provider-${provider.id}`,
+                checked: enabled,
+                onCheckedChange: (value) => toggleProvider(provider.id, value === true)
+              }
+            ),
+            /* @__PURE__ */ jsx(Label, { htmlFor: `provider-${provider.id}`, className: "font-medium", children: provider.name }),
+            provider.configured ? /* @__PURE__ */ jsx(Badge, { variant: "outline", className: "text-xs", children: t("ai_assistant.allowlist.providers.configured", "configured") }) : /* @__PURE__ */ jsx(Badge, { variant: "outline", className: "text-xs text-muted-foreground", children: t("ai_assistant.allowlist.providers.notConfigured", "not configured") })
+          ] }) }),
+          enabled && candidateModels.length > 0 ? /* @__PURE__ */ jsxs("div", { className: "ml-7 space-y-2", children: [
+            /* @__PURE__ */ jsx("div", { className: "text-xs text-muted-foreground", children: t("ai_assistant.allowlist.models.help", "Tick the models tenants may pick. Empty = no model restriction (inherit env).") }),
+            /* @__PURE__ */ jsx("div", { className: "grid grid-cols-1 sm:grid-cols-2 gap-2", children: candidateModels.map((model) => {
+              const checked = isModelEnabled(provider.id, model.id);
+              return /* @__PURE__ */ jsxs(
+                "label",
+                {
+                  className: "flex items-center gap-2 text-sm",
+                  children: [
+                    /* @__PURE__ */ jsx(
+                      Checkbox,
+                      {
+                        checked,
+                        onCheckedChange: (value) => toggleModel(provider.id, model.id, value === true)
+                      }
+                    ),
+                    /* @__PURE__ */ jsx("span", { className: "font-mono text-xs", children: model.id }),
+                    model.id === provider.defaultModel ? /* @__PURE__ */ jsx(Badge, { variant: "outline", className: "text-xs", children: t("ai_assistant.allowlist.models.default", "default") }) : null
+                  ]
+                },
+                `${provider.id}-${model.id}`
+              );
+            }) })
+          ] }) : null
+        ] }, provider.id);
+      }) })
+    ] }),
+    /* @__PURE__ */ jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [
+      /* @__PURE__ */ jsxs(Button, { onClick: () => void handleSave(), disabled: !dirty || saving, className: "gap-2", children: [
+        saving ? /* @__PURE__ */ jsx(Loader2, { className: "h-4 w-4 animate-spin" }) : /* @__PURE__ */ jsx(Save, { className: "h-4 w-4" }),
+        t("ai_assistant.allowlist.actions.save", "Save allowlist")
+      ] }),
+      /* @__PURE__ */ jsx(
+        Button,
+        {
+          variant: "outline",
+          onClick: resetTenantPicks,
+          disabled: saving || clearing,
+          className: "gap-2",
+          children: t("ai_assistant.allowlist.actions.reset", "Reset to env defaults")
+        }
+      ),
+      /* @__PURE__ */ jsxs(
+        Button,
+        {
+          variant: "ghost",
+          onClick: () => void handleClear(),
+          disabled: clearing || saving || !settings.tenantAllowlist,
+          className: "gap-2",
+          children: [
+            clearing ? /* @__PURE__ */ jsx(Loader2, { className: "h-4 w-4 animate-spin" }) : /* @__PURE__ */ jsx(Trash2, { className: "h-4 w-4" }),
+            t("ai_assistant.allowlist.actions.clearStored", "Clear stored allowlist")
+          ]
+        }
+      )
+    ] })
+  ] });
+}
+var AiTenantAllowlistPageClient_default = AiTenantAllowlistPageClient;
+export {
+  AiTenantAllowlistPageClient,
+  AiTenantAllowlistPageClient_default as default
+};
+//# sourceMappingURL=AiTenantAllowlistPageClient.js.map

package/dist/modules/ai_assistant/backend/config/ai-assistant/allowlist/AiTenantAllowlistPageClient.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/ai_assistant/backend/config/ai-assistant/allowlist/AiTenantAllowlistPageClient.tsx"],
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { useQuery, useQueryClient } from '@tanstack/react-query'\nimport { Loader2, Save, Shield, Trash2, Info, AlertCircle, ShieldCheck } from 'lucide-react'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Alert, AlertDescription, AlertTitle } from '@open-mercato/ui/primitives/alert'\nimport { Badge } from '@open-mercato/ui/primitives/badge'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Checkbox } from '@open-mercato/ui/primitives/checkbox'\nimport { Label } from '@open-mercato/ui/primitives/label'\nimport { apiCall, apiCallOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\n\ntype EnvAllowlistConfig = {\n  providers: string[] | null\n  modelsByProvider: Record<string, string[]>\n  hasRestrictions: boolean\n}\n\ntype TenantAllowlist = {\n  allowedProviders: string[] | null\n  allowedModelsByProvider: Record<string, string[]>\n}\n\ntype EffectiveAllowlist = {\n  providers: string[] | null\n  modelsByProvider: Record<string, string[]>\n  hasRestrictions: boolean\n  tenantOverridesActive: boolean\n}\n\ntype ProviderEntry = {\n  id: string\n  name: string\n  defaultModel: string\n  envKey: string | null\n  configured: boolean\n  defaultModels: Array<{ id: string; name: string; contextWindow?: number; tags?: string[] }>\n}\n\ntype SettingsResponse = {\n  availableProviders: ProviderEntry[]\n  allowlistProviders?: ProviderEntry[]\n  allowlist: EnvAllowlistConfig\n  tenantAllowlist: TenantAllowlist | null\n  effectiveAllowlist: EffectiveAllowlist\n}\n\nasync function fetchSettings(): Promise<SettingsResponse> {\n  const { result, status } = await apiCallOrThrow<SettingsResponse>(\n    '/api/ai_assistant/settings',\n    { method: 'GET', credentials: 'include' },\n    { errorMessage: 'Failed to load AI settings' },\n  )\n  if (!result) throw new Error(`Failed to load settings (${status})`)\n  return result\n}\n\ntype EditState = {\n  /** null = \"no tenant restriction (inherit env)\"; array = explicit tenant pick */\n  allowedProviders: string[] | null\n  allowedModelsByProvider: Record<string, string[]>\n}\n\nfunction snapshotToEditState(snapshot: TenantAllowlist | null): EditState {\n  return {\n    allowedProviders: snapshot?.allowedProviders ?? null,\n    allowedModelsByProvider: { ...(snapshot?.allowedModelsByProvider ?? {}) },\n  }\n}\n\nexport function AiTenantAllowlistPageClient(): React.JSX.Element {\n  const t = useT()\n  const queryClient = useQueryClient()\n  const settingsQuery = useQuery({ queryKey: ['ai_assistant', 'settings'], queryFn: fetchSettings, staleTime: 0 })\n\n  const [editState, setEditState] = React.useState<EditState>({\n    allowedProviders: null,\n    allowedModelsByProvider: {},\n  })\n  const [dirty, setDirty] = React.useState(false)\n  const [saving, setSaving] = React.useState(false)\n  const [clearing, setClearing] = React.useState(false)\n  const [feedback, setFeedback] = React.useState<{ kind: 'ok' | 'error'; text: string } | null>(null)\n  const { runMutation: runSaveAllowlistMutation } = useGuardedMutation({\n    contextId: 'ai-tenant-allowlist-save',\n  })\n  const { runMutation: runClearAllowlistMutation } = useGuardedMutation({\n    contextId: 'ai-tenant-allowlist-clear',\n  })\n\n  React.useEffect(() => {\n    if (settingsQuery.data) {\n      setEditState(snapshotToEditState(settingsQuery.data.tenantAllowlist))\n      setDirty(false)\n    }\n  }, [settingsQuery.data])\n\n  const pageHeader = (\n    <div className=\"space-y-1\">\n      <h1 className=\"flex items-center gap-2 text-2xl font-bold\">\n        <Shield className=\"size-6\" />\n        {t('ai_assistant.allowlist.title', 'AI provider & model allowlist')}\n      </h1>\n      <p className=\"text-muted-foreground\">\n        {t(\n          'ai_assistant.allowlist.subtitle',\n          'Limit which providers and models the runtime, settings, and chat picker may use for this tenant. The env allowlist is the outer constraint \u2014 tenant picks narrow it further.',\n        )}\n      </p>\n    </div>\n  )\n\n  if (settingsQuery.isLoading) {\n    return (\n      <div className=\"flex max-w-3xl flex-col gap-4\">\n        {pageHeader}\n        <div className=\"flex w-fit items-center gap-2 rounded-md border border-border bg-card px-3 py-2 text-sm text-muted-foreground\" role=\"status\">\n          <Loader2 className=\"size-4 animate-spin\" />\n          {t('ai_assistant.allowlist.loading', 'Loading allowlist\u2026')}\n        </div>\n      </div>\n    )\n  }\n\n  if (settingsQuery.isError || !settingsQuery.data) {\n    return (\n      <div className=\"flex max-w-3xl flex-col gap-4\">\n        {pageHeader}\n        <Alert variant=\"destructive\">\n          <AlertCircle className=\"size-4\" />\n          <AlertTitle>{t('ai_assistant.allowlist.loadError.title', 'Failed to load allowlist')}</AlertTitle>\n          <AlertDescription>\n            {settingsQuery.error instanceof Error\n              ? settingsQuery.error.message\n              : t('ai_assistant.allowlist.loadError.body', 'Try refreshing the page.')}\n          </AlertDescription>\n        </Alert>\n      </div>\n    )\n  }\n\n  const settings = settingsQuery.data\n  const envAllowedProviders = settings.allowlist.providers\n  const envModelsByProvider = settings.allowlist.modelsByProvider\n\n  // Provider universe to render: env-allowed providers (or all configured if env unset).\n  const editableProviders = settings.allowlistProviders ?? settings.availableProviders\n  const candidateProviders = editableProviders.filter((p) => {\n    if (envAllowedProviders === null) return true\n    return envAllowedProviders.some((id) => id.toLowerCase() === p.id.toLowerCase())\n  })\n\n  const tenantPickedProviders = editState.allowedProviders\n  const isProviderEnabled = (id: string): boolean => {\n    if (tenantPickedProviders === null) return true\n    return tenantPickedProviders.includes(id)\n  }\n\n  const toggleProvider = (id: string, next: boolean): void => {\n    setDirty(true)\n    setFeedback(null)\n    setEditState((prev) => {\n      const current = prev.allowedProviders\n      if (next) {\n        const list = current === null ? [id] : Array.from(new Set([...current, id]))\n        return { ...prev, allowedProviders: list }\n      }\n      const list = current === null\n        ? candidateProviders.map((p) => p.id).filter((pid) => pid !== id)\n        : current.filter((pid) => pid !== id)\n      return { ...prev, allowedProviders: list }\n    })\n  }\n\n  const isModelEnabled = (providerId: string, modelId: string): boolean => {\n    const list = editState.allowedModelsByProvider[providerId]\n    if (list === undefined) return true\n    return list.includes(modelId)\n  }\n\n  const toggleModel = (providerId: string, modelId: string, next: boolean): void => {\n    setDirty(true)\n    setFeedback(null)\n    const provider = candidateProviders.find((p) => p.id === providerId)\n    const allModelIds = provider?.defaultModels.map((m) => m.id) ?? []\n    setEditState((prev) => {\n      const current = prev.allowedModelsByProvider[providerId]\n      const allowedModelsByProvider = { ...prev.allowedModelsByProvider }\n      if (next) {\n        const list = current === undefined ? [modelId] : Array.from(new Set([...current, modelId]))\n        allowedModelsByProvider[providerId] = list\n      } else {\n        const baseline = current === undefined ? allModelIds : current\n        const list = baseline.filter((id) => id !== modelId)\n        allowedModelsByProvider[providerId] = list\n      }\n      return { ...prev, allowedModelsByProvider }\n    })\n  }\n\n  const resetTenantPicks = (): void => {\n    setDirty(true)\n    setFeedback(null)\n    setEditState({ allowedProviders: null, allowedModelsByProvider: {} })\n  }\n\n  const handleSave = async (): Promise<void> => {\n    setSaving(true)\n    setFeedback(null)\n    try {\n      await runSaveAllowlistMutation({\n        operation: async () => {\n          const { ok, status, result } = await apiCall<{ error?: string; code?: string }>(\n            '/api/ai_assistant/settings/allowlist',\n            {\n              method: 'PUT',\n              credentials: 'include',\n              headers: { 'Content-Type': 'application/json' },\n              body: JSON.stringify({\n                allowedProviders: editState.allowedProviders,\n                allowedModelsByProvider: editState.allowedModelsByProvider,\n              }),\n            },\n          )\n          if (!ok) {\n            throw new Error(\n              result?.error ?? t('ai_assistant.allowlist.save.error', `Save failed (${status})`),\n            )\n          }\n        },\n        context: {},\n      })\n      const successText = t('ai_assistant.allowlist.save.success', 'Allowlist saved.')\n      setFeedback({ kind: 'ok', text: successText })\n      flash(successText, 'success')\n      setDirty(false)\n      await queryClient.invalidateQueries({ queryKey: ['ai_assistant', 'settings'] })\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err)\n      setFeedback({ kind: 'error', text: message })\n      flash(message, 'error')\n    } finally {\n      setSaving(false)\n    }\n  }\n\n  const handleClear = async (): Promise<void> => {\n    setClearing(true)\n    setFeedback(null)\n    try {\n      await runClearAllowlistMutation({\n        operation: async () => {\n          const { ok, status, result } = await apiCall<{ error?: string; cleared?: boolean }>(\n            '/api/ai_assistant/settings/allowlist',\n            { method: 'DELETE', credentials: 'include' },\n          )\n          if (!ok) {\n            throw new Error(\n              result?.error ?? t('ai_assistant.allowlist.clear.error', `Clear failed (${status})`),\n            )\n          }\n        },\n        context: {},\n      })\n      const successText = t(\n        'ai_assistant.allowlist.clear.success',\n        'Tenant allowlist cleared. Env-only enforcement applies.',\n      )\n      setFeedback({ kind: 'ok', text: successText })\n      flash(successText, 'success')\n      setDirty(false)\n      await queryClient.invalidateQueries({ queryKey: ['ai_assistant', 'settings'] })\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err)\n      setFeedback({ kind: 'error', text: message })\n      flash(message, 'error')\n    } finally {\n      setClearing(false)\n    }\n  }\n\n  const envBanner = envAllowedProviders === null && Object.keys(envModelsByProvider).length === 0\n    ? null\n    : (\n      <Alert>\n        <Info className=\"h-4 w-4\" />\n        <AlertTitle>{t('ai_assistant.allowlist.envBanner.title', 'Env allowlist is in effect')}</AlertTitle>\n        <AlertDescription className=\"space-y-1\">\n          {envAllowedProviders ? (\n            <div>\n              {t('ai_assistant.allowlist.envBanner.providers', 'OM_AI_AVAILABLE_PROVIDERS')}: <code className=\"font-mono text-xs\">{envAllowedProviders.join(', ')}</code>\n            </div>\n          ) : null}\n          {Object.keys(envModelsByProvider).map((pid) => (\n            <div key={pid}>\n              <code className=\"font-mono text-xs\">OM_AI_AVAILABLE_MODELS_{pid.toUpperCase()}</code>: {envModelsByProvider[pid].join(', ')}\n            </div>\n          ))}\n          <p className=\"text-xs text-muted-foreground mt-1\">\n            {t('ai_assistant.allowlist.envBanner.note', 'Tenant picks may not widen the env list \u2014 values outside it are hidden.')}\n          </p>\n        </AlertDescription>\n      </Alert>\n    )\n\n  return (\n    <div className=\"flex flex-col gap-6 max-w-3xl\">\n      {pageHeader}\n\n      {envBanner}\n\n      {feedback ? (\n        <Alert variant={feedback.kind === 'error' ? 'destructive' : undefined}>\n          {feedback.kind === 'error' ? <AlertCircle className=\"h-4 w-4\" /> : <Info className=\"h-4 w-4\" />}\n          <AlertDescription>{feedback.text}</AlertDescription>\n        </Alert>\n      ) : null}\n\n      <div className=\"rounded-lg border bg-card p-6 space-y-6\">\n        <div className=\"flex items-start justify-between gap-3\">\n          <div className=\"space-y-1\">\n            <h2 className=\"text-lg font-semibold\">{t('ai_assistant.allowlist.providers.title', 'Providers')}</h2>\n            <p className=\"text-sm text-muted-foreground\">\n              {t(\n                'ai_assistant.allowlist.providers.help',\n                'Untick to forbid the runtime from using a provider for this tenant. Tick all to inherit the env allowlist.',\n              )}\n            </p>\n          </div>\n          <span\n            className={\n              settings.effectiveAllowlist.tenantOverridesActive\n                ? 'inline-flex size-8 items-center justify-center rounded-md text-status-success-icon'\n                : 'inline-flex size-8 items-center justify-center rounded-md text-status-warning-icon'\n            }\n            role=\"img\"\n            aria-label={\n              settings.effectiveAllowlist.tenantOverridesActive\n                ? t('ai_assistant.allowlist.badge.active', 'Tenant rules active')\n                : t('ai_assistant.allowlist.badge.envOnly', 'Env-only')\n            }\n            title={\n              settings.effectiveAllowlist.tenantOverridesActive\n                ? t('ai_assistant.allowlist.badge.active', 'Tenant rules active')\n                : t('ai_assistant.allowlist.badge.envOnly', 'Env-only')\n            }\n          >\n            {settings.effectiveAllowlist.tenantOverridesActive ? (\n              <ShieldCheck className=\"size-5\" aria-hidden />\n            ) : (\n              <Shield className=\"size-5\" aria-hidden />\n            )}\n          </span>\n        </div>\n\n        {candidateProviders.length === 0 ? (\n          <p className=\"text-sm text-muted-foreground\">\n            {t('ai_assistant.allowlist.providers.empty', 'No configured providers within the env allowlist.')}\n          </p>\n        ) : (\n          <div className=\"space-y-4\">\n            {candidateProviders.map((provider) => {\n              const enabled = isProviderEnabled(provider.id)\n              const envModels = envModelsByProvider[provider.id]\n              const candidateModels = envModels\n                ? provider.defaultModels.filter((m) => envModels.includes(m.id))\n                : provider.defaultModels\n              return (\n                <div key={provider.id} className=\"rounded-md border p-4 space-y-3\">\n                  <div className=\"flex items-center justify-between gap-3\">\n                    <div className=\"flex items-center gap-3\">\n                      <Checkbox\n                        id={`provider-${provider.id}`}\n                        checked={enabled}\n                        onCheckedChange={(value) => toggleProvider(provider.id, value === true)}\n                      />\n                      <Label htmlFor={`provider-${provider.id}`} className=\"font-medium\">\n                        {provider.name}\n                      </Label>\n                      {provider.configured ? (\n                        <Badge variant=\"outline\" className=\"text-xs\">\n                          {t('ai_assistant.allowlist.providers.configured', 'configured')}\n                        </Badge>\n                      ) : (\n                        <Badge variant=\"outline\" className=\"text-xs text-muted-foreground\">\n                          {t('ai_assistant.allowlist.providers.notConfigured', 'not configured')}\n                        </Badge>\n                      )}\n                    </div>\n                  </div>\n\n                  {enabled && candidateModels.length > 0 ? (\n                    <div className=\"ml-7 space-y-2\">\n                      <div className=\"text-xs text-muted-foreground\">\n                        {t('ai_assistant.allowlist.models.help', 'Tick the models tenants may pick. Empty = no model restriction (inherit env).')}\n                      </div>\n                      <div className=\"grid grid-cols-1 sm:grid-cols-2 gap-2\">\n                        {candidateModels.map((model) => {\n                          const checked = isModelEnabled(provider.id, model.id)\n                          return (\n                            <label\n                              key={`${provider.id}-${model.id}`}\n                              className=\"flex items-center gap-2 text-sm\"\n                            >\n                              <Checkbox\n                                checked={checked}\n                                onCheckedChange={(value) => toggleModel(provider.id, model.id, value === true)}\n                              />\n                              <span className=\"font-mono text-xs\">{model.id}</span>\n                              {model.id === provider.defaultModel ? (\n                                <Badge variant=\"outline\" className=\"text-xs\">\n                                  {t('ai_assistant.allowlist.models.default', 'default')}\n                                </Badge>\n                              ) : null}\n                            </label>\n                          )\n                        })}\n                      </div>\n                    </div>\n                  ) : null}\n                </div>\n              )\n            })}\n          </div>\n        )}\n      </div>\n\n      <div className=\"flex flex-wrap items-center gap-2\">\n        <Button onClick={() => void handleSave()} disabled={!dirty || saving} className=\"gap-2\">\n          {saving ? <Loader2 className=\"h-4 w-4 animate-spin\" /> : <Save className=\"h-4 w-4\" />}\n          {t('ai_assistant.allowlist.actions.save', 'Save allowlist')}\n        </Button>\n        <Button\n          variant=\"outline\"\n          onClick={resetTenantPicks}\n          disabled={saving || clearing}\n          className=\"gap-2\"\n        >\n          {t('ai_assistant.allowlist.actions.reset', 'Reset to env defaults')}\n        </Button>\n        <Button\n          variant=\"ghost\"\n          onClick={() => void handleClear()}\n          disabled={clearing || saving || !settings.tenantAllowlist}\n          className=\"gap-2\"\n        >\n          {clearing ? <Loader2 className=\"h-4 w-4 animate-spin\" /> : <Trash2 className=\"h-4 w-4\" />}\n          {t('ai_assistant.allowlist.actions.clearStored', 'Clear stored allowlist')}\n        </Button>\n      </div>\n    </div>\n  )\n}\n\nexport default AiTenantAllowlistPageClient\n"],
+  "mappings": ";AAsGM,SACE,KADF;AApGN,YAAY,WAAW;AACvB,SAAS,UAAU,sBAAsB;AACzC,SAAS,SAAS,MAAM,QAAQ,QAAQ,MAAM,aAAa,mBAAmB;AAC9E,SAAS,YAAY;AACrB,SAAS,OAAO,kBAAkB,kBAAkB;AACpD,SAAS,aAAa;AACtB,SAAS,cAAc;AACvB,SAAS,gBAAgB;AACzB,SAAS,aAAa;AACtB,SAAS,SAAS,sBAAsB;AACxC,SAAS,aAAa;AACtB,SAAS,0BAA0B;AAqCnC,eAAe,gBAA2C;AACxD,QAAM,EAAE,QAAQ,OAAO,IAAI,MAAM;AAAA,IAC/B;AAAA,IACA,EAAE,QAAQ,OAAO,aAAa,UAAU;AAAA,IACxC,EAAE,cAAc,6BAA6B;AAAA,EAC/C;AACA,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,4BAA4B,MAAM,GAAG;AAClE,SAAO;AACT;AAQA,SAAS,oBAAoB,UAA6C;AACxE,SAAO;AAAA,IACL,kBAAkB,UAAU,oBAAoB;AAAA,IAChD,yBAAyB,EAAE,GAAI,UAAU,2BAA2B,CAAC,EAAG;AAAA,EAC1E;AACF;AAEO,SAAS,8BAAiD;AAC/D,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,eAAe;AACnC,QAAM,gBAAgB,SAAS,EAAE,UAAU,CAAC,gBAAgB,UAAU,GAAG,SAAS,eAAe,WAAW,EAAE,CAAC;AAE/G,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAoB;AAAA,IAC1D,kBAAkB;AAAA,IAClB,yBAAyB,CAAC;AAAA,EAC5B,CAAC;AACD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,KAAK;AAC9C,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAAS,KAAK;AAChD,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,KAAK;AACpD,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAwD,IAAI;AAClG,QAAM,EAAE,aAAa,yBAAyB,IAAI,mBAAmB;AAAA,IACnE,WAAW;AAAA,EACb,CAAC;AACD,QAAM,EAAE,aAAa,0BAA0B,IAAI,mBAAmB;AAAA,IACpE,WAAW;AAAA,EACb,CAAC;AAED,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc,MAAM;AACtB,mBAAa,oBAAoB,cAAc,KAAK,eAAe,CAAC;AACpE,eAAS,KAAK;AAAA,IAChB;AAAA,EACF,GAAG,CAAC,cAAc,IAAI,CAAC;AAEvB,QAAM,aACJ,qBAAC,SAAI,WAAU,aACb;AAAA,yBAAC,QAAG,WAAU,8CACZ;AAAA,0BAAC,UAAO,WAAU,UAAS;AAAA,MAC1B,EAAE,gCAAgC,+BAA+B;AAAA,OACpE;AAAA,IACA,oBAAC,OAAE,WAAU,yBACV;AAAA,MACC;AAAA,MACA;AAAA,IACF,GACF;AAAA,KACF;AAGF,MAAI,cAAc,WAAW;AAC3B,WACE,qBAAC,SAAI,WAAU,iCACZ;AAAA;AAAA,MACD,qBAAC,SAAI,WAAU,iHAAgH,MAAK,UAClI;AAAA,4BAAC,WAAQ,WAAU,uBAAsB;AAAA,QACxC,EAAE,kCAAkC,yBAAoB;AAAA,SAC3D;AAAA,OACF;AAAA,EAEJ;AAEA,MAAI,cAAc,WAAW,CAAC,cAAc,MAAM;AAChD,WACE,qBAAC,SAAI,WAAU,iCACZ;AAAA;AAAA,MACD,qBAAC,SAAM,SAAQ,eACb;AAAA,4BAAC,eAAY,WAAU,UAAS;AAAA,QAChC,oBAAC,cAAY,YAAE,0CAA0C,0BAA0B,GAAE;AAAA,QACrF,oBAAC,oBACE,wBAAc,iBAAiB,QAC5B,cAAc,MAAM,UACpB,EAAE,yCAAyC,0BAA0B,GAC3E;AAAA,SACF;AAAA,OACF;AAAA,EAEJ;AAEA,QAAM,WAAW,cAAc;AAC/B,QAAM,sBAAsB,SAAS,UAAU;AAC/C,QAAM,sBAAsB,SAAS,UAAU;AAG/C,QAAM,oBAAoB,SAAS,sBAAsB,SAAS;AAClE,QAAM,qBAAqB,kBAAkB,OAAO,CAAC,MAAM;AACzD,QAAI,wBAAwB,KAAM,QAAO;AACzC,WAAO,oBAAoB,KAAK,CAAC,OAAO,GAAG,YAAY,MAAM,EAAE,GAAG,YAAY,CAAC;AAAA,EACjF,CAAC;AAED,QAAM,wBAAwB,UAAU;AACxC,QAAM,oBAAoB,CAAC,OAAwB;AACjD,QAAI,0BAA0B,KAAM,QAAO;AAC3C,WAAO,sBAAsB,SAAS,EAAE;AAAA,EAC1C;AAEA,QAAM,iBAAiB,CAAC,IAAY,SAAwB;AAC1D,aAAS,IAAI;AACb,gBAAY,IAAI;AAChB,iBAAa,CAAC,SAAS;AACrB,YAAM,UAAU,KAAK;AACrB,UAAI,MAAM;AACR,cAAMA,QAAO,YAAY,OAAO,CAAC,EAAE,IAAI,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,CAAC;AAC3E,eAAO,EAAE,GAAG,MAAM,kBAAkBA,MAAK;AAAA,MAC3C;AACA,YAAM,OAAO,YAAY,OACrB,mBAAmB,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,QAAQ,EAAE,IAC9D,QAAQ,OAAO,CAAC,QAAQ,QAAQ,EAAE;AACtC,aAAO,EAAE,GAAG,MAAM,kBAAkB,KAAK;AAAA,IAC3C,CAAC;AAAA,EACH;AAEA,QAAM,iBAAiB,CAAC,YAAoB,YAA6B;AACvE,UAAM,OAAO,UAAU,wBAAwB,UAAU;AACzD,QAAI,SAAS,OAAW,QAAO;AAC/B,WAAO,KAAK,SAAS,OAAO;AAAA,EAC9B;AAEA,QAAM,cAAc,CAAC,YAAoB,SAAiB,SAAwB;AAChF,aAAS,IAAI;AACb,gBAAY,IAAI;AAChB,UAAM,WAAW,mBAAmB,KAAK,CAAC,MAAM,EAAE,OAAO,UAAU;AACnE,UAAM,cAAc,UAAU,cAAc,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC;AACjE,iBAAa,CAAC,SAAS;AACrB,YAAM,UAAU,KAAK,wBAAwB,UAAU;AACvD,YAAM,0BAA0B,EAAE,GAAG,KAAK,wBAAwB;AAClE,UAAI,MAAM;AACR,cAAM,OAAO,YAAY,SAAY,CAAC,OAAO,IAAI,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;AAC1F,gCAAwB,UAAU,IAAI;AAAA,MACxC,OAAO;AACL,cAAM,WAAW,YAAY,SAAY,cAAc;AACvD,cAAM,OAAO,SAAS,OAAO,CAAC,OAAO,OAAO,OAAO;AACnD,gCAAwB,UAAU,IAAI;AAAA,MACxC;AACA,aAAO,EAAE,GAAG,MAAM,wBAAwB;AAAA,IAC5C,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,MAAY;AACnC,aAAS,IAAI;AACb,gBAAY,IAAI;AAChB,iBAAa,EAAE,kBAAkB,MAAM,yBAAyB,CAAC,EAAE,CAAC;AAAA,EACtE;AAEA,QAAM,aAAa,YAA2B;AAC5C,cAAU,IAAI;AACd,gBAAY,IAAI;AAChB,QAAI;AACF,YAAM,yBAAyB;AAAA,QAC7B,WAAW,YAAY;AACrB,gBAAM,EAAE,IAAI,QAAQ,OAAO,IAAI,MAAM;AAAA,YACnC;AAAA,YACA;AAAA,cACE,QAAQ;AAAA,cACR,aAAa;AAAA,cACb,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,MAAM,KAAK,UAAU;AAAA,gBACnB,kBAAkB,UAAU;AAAA,gBAC5B,yBAAyB,UAAU;AAAA,cACrC,CAAC;AAAA,YACH;AAAA,UACF;AACA,cAAI,CAAC,IAAI;AACP,kBAAM,IAAI;AAAA,cACR,QAAQ,SAAS,EAAE,qCAAqC,gBAAgB,MAAM,GAAG;AAAA,YACnF;AAAA,UACF;AAAA,QACF;AAAA,QACA,SAAS,CAAC;AAAA,MACZ,CAAC;AACD,YAAM,cAAc,EAAE,uCAAuC,kBAAkB;AAC/E,kBAAY,EAAE,MAAM,MAAM,MAAM,YAAY,CAAC;AAC7C,YAAM,aAAa,SAAS;AAC5B,eAAS,KAAK;AACd,YAAM,YAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,UAAU,EAAE,CAAC;AAAA,IAChF,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,kBAAY,EAAE,MAAM,SAAS,MAAM,QAAQ,CAAC;AAC5C,YAAM,SAAS,OAAO;AAAA,IACxB,UAAE;AACA,gBAAU,KAAK;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,cAAc,YAA2B;AAC7C,gBAAY,IAAI;AAChB,gBAAY,IAAI;AAChB,QAAI;AACF,YAAM,0BAA0B;AAAA,QAC9B,WAAW,YAAY;AACrB,gBAAM,EAAE,IAAI,QAAQ,OAAO,IAAI,MAAM;AAAA,YACnC;AAAA,YACA,EAAE,QAAQ,UAAU,aAAa,UAAU;AAAA,UAC7C;AACA,cAAI,CAAC,IAAI;AACP,kBAAM,IAAI;AAAA,cACR,QAAQ,SAAS,EAAE,sCAAsC,iBAAiB,MAAM,GAAG;AAAA,YACrF;AAAA,UACF;AAAA,QACF;AAAA,QACA,SAAS,CAAC;AAAA,MACZ,CAAC;AACD,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,MACF;AACA,kBAAY,EAAE,MAAM,MAAM,MAAM,YAAY,CAAC;AAC7C,YAAM,aAAa,SAAS;AAC5B,eAAS,KAAK;AACd,YAAM,YAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,UAAU,EAAE,CAAC;AAAA,IAChF,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,kBAAY,EAAE,MAAM,SAAS,MAAM,QAAQ,CAAC;AAC5C,YAAM,SAAS,OAAO;AAAA,IACxB,UAAE;AACA,kBAAY,KAAK;AAAA,IACnB;AAAA,EACF;AAEA,QAAM,YAAY,wBAAwB,QAAQ,OAAO,KAAK,mBAAmB,EAAE,WAAW,IAC1F,OAEA,qBAAC,SACC;AAAA,wBAAC,QAAK,WAAU,WAAU;AAAA,IAC1B,oBAAC,cAAY,YAAE,0CAA0C,4BAA4B,GAAE;AAAA,IACvF,qBAAC,oBAAiB,WAAU,aACzB;AAAA,4BACC,qBAAC,SACE;AAAA,UAAE,8CAA8C,2BAA2B;AAAA,QAAE;AAAA,QAAE,oBAAC,UAAK,WAAU,qBAAqB,8BAAoB,KAAK,IAAI,GAAE;AAAA,SACtJ,IACE;AAAA,MACH,OAAO,KAAK,mBAAmB,EAAE,IAAI,CAAC,QACrC,qBAAC,SACC;AAAA,6BAAC,UAAK,WAAU,qBAAoB;AAAA;AAAA,UAAwB,IAAI,YAAY;AAAA,WAAE;AAAA,QAAO;AAAA,QAAG,oBAAoB,GAAG,EAAE,KAAK,IAAI;AAAA,WADlH,GAEV,CACD;AAAA,MACD,oBAAC,OAAE,WAAU,sCACV,YAAE,yCAAyC,8EAAyE,GACvH;AAAA,OACF;AAAA,KACF;AAGJ,SACE,qBAAC,SAAI,WAAU,iCACZ;AAAA;AAAA,IAEA;AAAA,IAEA,WACC,qBAAC,SAAM,SAAS,SAAS,SAAS,UAAU,gBAAgB,QACzD;AAAA,eAAS,SAAS,UAAU,oBAAC,eAAY,WAAU,WAAU,IAAK,oBAAC,QAAK,WAAU,WAAU;AAAA,MAC7F,oBAAC,oBAAkB,mBAAS,MAAK;AAAA,OACnC,IACE;AAAA,IAEJ,qBAAC,SAAI,WAAU,2CACb;AAAA,2BAAC,SAAI,WAAU,0CACb;AAAA,6BAAC,SAAI,WAAU,aACb;AAAA,8BAAC,QAAG,WAAU,yBAAyB,YAAE,0CAA0C,WAAW,GAAE;AAAA,UAChG,oBAAC,OAAE,WAAU,iCACV;AAAA,YACC;AAAA,YACA;AAAA,UACF,GACF;AAAA,WACF;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,WACE,SAAS,mBAAmB,wBACxB,uFACA;AAAA,YAEN,MAAK;AAAA,YACL,cACE,SAAS,mBAAmB,wBACxB,EAAE,uCAAuC,qBAAqB,IAC9D,EAAE,wCAAwC,UAAU;AAAA,YAE1D,OACE,SAAS,mBAAmB,wBACxB,EAAE,uCAAuC,qBAAqB,IAC9D,EAAE,wCAAwC,UAAU;AAAA,YAGzD,mBAAS,mBAAmB,wBAC3B,oBAAC,eAAY,WAAU,UAAS,eAAW,MAAC,IAE5C,oBAAC,UAAO,WAAU,UAAS,eAAW,MAAC;AAAA;AAAA,QAE3C;AAAA,SACF;AAAA,MAEC,mBAAmB,WAAW,IAC7B,oBAAC,OAAE,WAAU,iCACV,YAAE,0CAA0C,mDAAmD,GAClG,IAEA,oBAAC,SAAI,WAAU,aACZ,6BAAmB,IAAI,CAAC,aAAa;AACpC,cAAM,UAAU,kBAAkB,SAAS,EAAE;AAC7C,cAAM,YAAY,oBAAoB,SAAS,EAAE;AACjD,cAAM,kBAAkB,YACpB,SAAS,cAAc,OAAO,CAAC,MAAM,UAAU,SAAS,EAAE,EAAE,CAAC,IAC7D,SAAS;AACb,eACE,qBAAC,SAAsB,WAAU,mCAC/B;AAAA,8BAAC,SAAI,WAAU,2CACb,+BAAC,SAAI,WAAU,2BACb;AAAA;AAAA,cAAC;AAAA;AAAA,gBACC,IAAI,YAAY,SAAS,EAAE;AAAA,gBAC3B,SAAS;AAAA,gBACT,iBAAiB,CAAC,UAAU,eAAe,SAAS,IAAI,UAAU,IAAI;AAAA;AAAA,YACxE;AAAA,YACA,oBAAC,SAAM,SAAS,YAAY,SAAS,EAAE,IAAI,WAAU,eAClD,mBAAS,MACZ;AAAA,YACC,SAAS,aACR,oBAAC,SAAM,SAAQ,WAAU,WAAU,WAChC,YAAE,+CAA+C,YAAY,GAChE,IAEA,oBAAC,SAAM,SAAQ,WAAU,WAAU,iCAChC,YAAE,kDAAkD,gBAAgB,GACvE;AAAA,aAEJ,GACF;AAAA,UAEC,WAAW,gBAAgB,SAAS,IACnC,qBAAC,SAAI,WAAU,kBACb;AAAA,gCAAC,SAAI,WAAU,iCACZ,YAAE,sCAAsC,+EAA+E,GAC1H;AAAA,YACA,oBAAC,SAAI,WAAU,yCACZ,0BAAgB,IAAI,CAAC,UAAU;AAC9B,oBAAM,UAAU,eAAe,SAAS,IAAI,MAAM,EAAE;AACpD,qBACE;AAAA,gBAAC;AAAA;AAAA,kBAEC,WAAU;AAAA,kBAEV;AAAA;AAAA,sBAAC;AAAA;AAAA,wBACC;AAAA,wBACA,iBAAiB,CAAC,UAAU,YAAY,SAAS,IAAI,MAAM,IAAI,UAAU,IAAI;AAAA;AAAA,oBAC/E;AAAA,oBACA,oBAAC,UAAK,WAAU,qBAAqB,gBAAM,IAAG;AAAA,oBAC7C,MAAM,OAAO,SAAS,eACrB,oBAAC,SAAM,SAAQ,WAAU,WAAU,WAChC,YAAE,yCAAyC,SAAS,GACvD,IACE;AAAA;AAAA;AAAA,gBAZC,GAAG,SAAS,EAAE,IAAI,MAAM,EAAE;AAAA,cAajC;AAAA,YAEJ,CAAC,GACH;AAAA,aACF,IACE;AAAA,aAnDI,SAAS,EAoDnB;AAAA,MAEJ,CAAC,GACH;AAAA,OAEJ;AAAA,IAEA,qBAAC,SAAI,WAAU,qCACb;AAAA,2BAAC,UAAO,SAAS,MAAM,KAAK,WAAW,GAAG,UAAU,CAAC,SAAS,QAAQ,WAAU,SAC7E;AAAA,iBAAS,oBAAC,WAAQ,WAAU,wBAAuB,IAAK,oBAAC,QAAK,WAAU,WAAU;AAAA,QAClF,EAAE,uCAAuC,gBAAgB;AAAA,SAC5D;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAQ;AAAA,UACR,SAAS;AAAA,UACT,UAAU,UAAU;AAAA,UACpB,WAAU;AAAA,UAET,YAAE,wCAAwC,uBAAuB;AAAA;AAAA,MACpE;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAQ;AAAA,UACR,SAAS,MAAM,KAAK,YAAY;AAAA,UAChC,UAAU,YAAY,UAAU,CAAC,SAAS;AAAA,UAC1C,WAAU;AAAA,UAET;AAAA,uBAAW,oBAAC,WAAQ,WAAU,wBAAuB,IAAK,oBAAC,UAAO,WAAU,WAAU;AAAA,YACtF,EAAE,8CAA8C,wBAAwB;AAAA;AAAA;AAAA,MAC3E;AAAA,OACF;AAAA,KACF;AAEJ;AAEA,IAAO,sCAAQ;",
+  "names": ["list"]
+}

package/dist/modules/ai_assistant/backend/config/ai-assistant/allowlist/page.js

@@ -0,0 +1,10 @@
+import { jsx } from "react/jsx-runtime";
+import { Page, PageBody } from "@open-mercato/ui/backend/Page";
+import { AiTenantAllowlistPageClient } from "./AiTenantAllowlistPageClient.js";
+async function AiAssistantAllowlistPage() {
+  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(AiTenantAllowlistPageClient, {}) }) });
+}
+export {
+  AiAssistantAllowlistPage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/ai_assistant/backend/config/ai-assistant/allowlist/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/ai_assistant/backend/config/ai-assistant/allowlist/page.tsx"],
+  "sourcesContent": ["import { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { AiTenantAllowlistPageClient } from './AiTenantAllowlistPageClient'\n\nexport default async function AiAssistantAllowlistPage() {\n  return (\n    <Page>\n      <PageBody>\n        <AiTenantAllowlistPageClient />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": "AAOQ;AAPR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,mCAAmC;AAE5C,eAAO,2BAAkD;AACvD,SACE,oBAAC,QACC,8BAAC,YACC,8BAAC,+BAA4B,GAC/B,GACF;AAEJ;",
+  "names": []
+}

package/dist/modules/ai_assistant/backend/config/ai-assistant/allowlist/page.meta.js

@@ -0,0 +1,25 @@
+import React from "react";
+const allowlistIcon = React.createElement(
+  "svg",
+  { width: 16, height: 16, viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: 2, strokeLinecap: "round", strokeLinejoin: "round" },
+  React.createElement("path", { d: "M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z" }),
+  React.createElement("path", { d: "m9 12 2 2 4-4" })
+);
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["ai_assistant.settings.manage"],
+  pageTitle: "AI Allowlist",
+  pageTitleKey: "ai_assistant.allowlist.navTitle",
+  pageGroup: "Module Configs",
+  pageGroupKey: "settings.sections.moduleConfigs",
+  pageOrder: 432,
+  icon: allowlistIcon,
+  pageContext: "settings",
+  breadcrumb: [
+    { label: "AI Allowlist", labelKey: "ai_assistant.allowlist.navTitle" }
+  ]
+};
+export {
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/ai_assistant/backend/config/ai-assistant/allowlist/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/ai_assistant/backend/config/ai-assistant/allowlist/page.meta.ts"],
+  "sourcesContent": ["import React from 'react'\n\nconst allowlistIcon = React.createElement(\n  'svg',\n  { width: 16, height: 16, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round' },\n  React.createElement('path', { d: 'M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z' }),\n  React.createElement('path', { d: 'm9 12 2 2 4-4' }),\n)\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['ai_assistant.settings.manage'],\n  pageTitle: 'AI Allowlist',\n  pageTitleKey: 'ai_assistant.allowlist.navTitle',\n  pageGroup: 'Module Configs',\n  pageGroupKey: 'settings.sections.moduleConfigs',\n  pageOrder: 432,\n  icon: allowlistIcon,\n  pageContext: 'settings' as const,\n  breadcrumb: [\n    { label: 'AI Allowlist', labelKey: 'ai_assistant.allowlist.navTitle' },\n  ],\n} as const\n"],
+  "mappings": "AAAA,OAAO,WAAW;AAElB,MAAM,gBAAgB,MAAM;AAAA,EAC1B;AAAA,EACA,EAAE,OAAO,IAAI,QAAQ,IAAI,SAAS,aAAa,MAAM,QAAQ,QAAQ,gBAAgB,aAAa,GAAG,eAAe,SAAS,gBAAgB,QAAQ;AAAA,EACrJ,MAAM,cAAc,QAAQ,EAAE,GAAG,8CAA8C,CAAC;AAAA,EAChF,MAAM,cAAc,QAAQ,EAAE,GAAG,gBAAgB,CAAC;AACpD;AAEO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,8BAA8B;AAAA,EAChD,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,MAAM;AAAA,EACN,aAAa;AAAA,EACb,YAAY;AAAA,IACV,EAAE,OAAO,gBAAgB,UAAU,kCAAkC;AAAA,EACvE;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/backend/config/ai-assistant/legacy/page.js

@@ -2,7 +2,7 @@ import { jsx } from "react/jsx-runtime";
 import { Page, PageBody } from "@open-mercato/ui/backend/Page";
 import { AiAssistantSettingsPageClient } from "../../../../components/AiAssistantSettingsPageClient.js";
 async function AiAssistantLegacySettingsPage() {
-  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(AiAssistantSettingsPageClient, {}) }) });
+  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(AiAssistantSettingsPageClient, { launchMode: "legacy", showVisibilityControl: true }) }) });
 }
 export {
   AiAssistantLegacySettingsPage as default

package/dist/modules/ai_assistant/backend/config/ai-assistant/legacy/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/ai_assistant/backend/config/ai-assistant/legacy/page.tsx"],
-  "sourcesContent": ["import { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { AiAssistantSettingsPageClient } from '../../../../components/AiAssistantSettingsPageClient'\n\nexport default async function AiAssistantLegacySettingsPage() {\n  return (\n    <Page>\n      <PageBody>\n        <AiAssistantSettingsPageClient />\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": "AAOQ;AAPR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,qCAAqC;AAE9C,eAAO,gCAAuD;AAC5D,SACE,oBAAC,QACC,8BAAC,YACC,8BAAC,iCAA8B,GACjC,GACF;AAEJ;",
+  "sourcesContent": ["import { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { AiAssistantSettingsPageClient } from '../../../../components/AiAssistantSettingsPageClient'\n\nexport default async function AiAssistantLegacySettingsPage() {\n  return (\n    <Page>\n      <PageBody>\n        <AiAssistantSettingsPageClient launchMode=\"legacy\" showVisibilityControl />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": "AAOQ;AAPR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,qCAAqC;AAE9C,eAAO,gCAAuD;AAC5D,SACE,oBAAC,QACC,8BAAC,YACC,8BAAC,iCAA8B,YAAW,UAAS,uBAAqB,MAAC,GAC3E,GACF;AAEJ;",
   "names": []
 }

package/dist/modules/ai_assistant/backend/config/ai-assistant/playground/AiPlaygroundPageClient.js

@@ -62,28 +62,35 @@ function PlaygroundNoAgents() {
 }
 function AgentDetails({ agent }) {
   const t = useT();
-  return /* @__PURE__ */ jsxs("div", { className: "rounded-md border border-border bg-muted/30 p-3 text-sm", children: [
-    /* @__PURE__ */ jsx("div", { className: "font-semibold", children: agent.label }),
-    /* @__PURE__ */ jsx("p", { className: "mt-1 text-xs text-muted-foreground", children: agent.description }),
-    /* @__PURE__ */ jsxs("dl", { className: "mt-3 grid grid-cols-2 gap-2 text-xs", children: [
-      /* @__PURE__ */ jsxs("div", { children: [
-        /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.meta.module", "Module") }),
-        /* @__PURE__ */ jsx("dd", { className: "font-mono", children: agent.moduleId })
-      ] }),
-      /* @__PURE__ */ jsxs("div", { children: [
-        /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.meta.executionMode", "Execution mode") }),
-        /* @__PURE__ */ jsx("dd", { className: "font-mono", children: agent.executionMode })
-      ] }),
-      /* @__PURE__ */ jsxs("div", { children: [
-        /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.meta.mutationPolicy", "Mutation policy") }),
-        /* @__PURE__ */ jsx("dd", { className: "font-mono", children: agent.mutationPolicy })
-      ] }),
-      /* @__PURE__ */ jsxs("div", { children: [
-        /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.meta.tools", "Allowed tools") }),
-        /* @__PURE__ */ jsx("dd", { className: "font-mono", children: agent.allowedTools.length })
-      ] })
-    ] })
-  ] });
+  return /* @__PURE__ */ jsxs(
+    "div",
+    {
+      className: "rounded-md border border-border bg-muted/30 p-3 text-sm",
+      "data-ai-playground-agent": agent.id,
+      children: [
+        /* @__PURE__ */ jsx("div", { className: "font-semibold", children: agent.label }),
+        /* @__PURE__ */ jsx("p", { className: "mt-1 text-xs text-muted-foreground", children: agent.description }),
+        /* @__PURE__ */ jsxs("dl", { className: "mt-3 grid grid-cols-2 gap-2 text-xs", children: [
+          /* @__PURE__ */ jsxs("div", { children: [
+            /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.meta.module", "Module") }),
+            /* @__PURE__ */ jsx("dd", { className: "font-mono", children: agent.moduleId })
+          ] }),
+          /* @__PURE__ */ jsxs("div", { children: [
+            /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.meta.executionMode", "Execution mode") }),
+            /* @__PURE__ */ jsx("dd", { className: "font-mono", children: agent.executionMode })
+          ] }),
+          /* @__PURE__ */ jsxs("div", { children: [
+            /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.meta.mutationPolicy", "Mutation policy") }),
+            /* @__PURE__ */ jsx("dd", { className: "font-mono", children: agent.mutationPolicy })
+          ] }),
+          /* @__PURE__ */ jsxs("div", { children: [
+            /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.meta.tools", "Allowed tools") }),
+            /* @__PURE__ */ jsx("dd", { className: "font-mono", children: agent.allowedTools.length })
+          ] })
+        ] })
+      ]
+    }
+  );
 }
 function buildDebugTools(agent) {
   if (agent.tools && agent.tools.length > 0) {
@@ -115,6 +122,47 @@ function buildDebugPromptSections(agent) {
   }
   return sections;
 }
+async function fetchAgentResolutions() {
+  const result = await apiCall("/api/ai_assistant/settings");
+  if (!result.ok || !result.result) return { agents: [] };
+  return { agents: result.result.agents ?? [] };
+}
+function ModelResolutionPanel({ agentId }) {
+  const t = useT();
+  const { data } = useQuery({
+    queryKey: ["ai_assistant", "settings", "agents"],
+    queryFn: fetchAgentResolutions,
+    staleTime: 3e4
+  });
+  const resolution = data?.agents.find((agent) => agent.agentId === agentId);
+  if (!resolution) return null;
+  return /* @__PURE__ */ jsxs(
+    "dl",
+    {
+      className: "grid grid-cols-2 gap-x-4 gap-y-1 rounded-md border border-border bg-muted/30 p-3 text-xs sm:grid-cols-4",
+      "data-ai-playground-model-resolution": agentId,
+      "data-ai-playground-resolution-panel": agentId,
+      children: [
+        /* @__PURE__ */ jsxs("div", { children: [
+          /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.resolution.provider", "Provider") }),
+          /* @__PURE__ */ jsx("dd", { className: "font-mono", "data-ai-playground-resolution-provider": true, children: resolution.providerId })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { children: [
+          /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.resolution.model", "Model") }),
+          /* @__PURE__ */ jsx("dd", { className: "font-mono", "data-ai-playground-resolution-model": true, children: resolution.modelId })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { children: [
+          /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.resolution.baseUrl", "Base URL") }),
+          /* @__PURE__ */ jsx("dd", { className: "font-mono", "data-ai-playground-resolution-base-url": true, children: resolution.baseURL ?? t("ai_assistant.playground.resolution.none", "\u2014") })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { children: [
+          /* @__PURE__ */ jsx("dt", { className: "font-medium text-muted-foreground", children: t("ai_assistant.playground.resolution.source", "Source") }),
+          /* @__PURE__ */ jsx("dd", { className: "font-mono", "data-ai-playground-resolution-source": true, children: resolution.source })
+        ] })
+      ]
+    }
+  );
+}
 function readPlaygroundUiPartSeeds() {
   if (typeof window === "undefined") return [];
   try {
@@ -155,20 +203,20 @@ function ChatLane({ agent, debug }) {
       ) })
     ] });
   }
-  return /* @__PURE__ */ jsx(
+  return /* @__PURE__ */ jsx("div", { "data-ai-playground-chat": agent.id, children: /* @__PURE__ */ jsx(
     AiChat,
     {
       agent: agent.id,
       pageContext: { source: "playground", pageId: "ai_assistant.playground" },
       debug,
       registry,
-      className: "min-h-[360px]",
+      className: "min-h-96",
       debugTools,
       debugPromptSections,
       uiParts
     },
     agent.id
-  );
+  ) });
 }
 function ObjectLane({ agent }) {
   const t = useT();
@@ -435,7 +483,8 @@ function AiPlaygroundPageClient() {
           )
         ] })
       ] }),
-      selectedAgent ? /* @__PURE__ */ jsx(AgentDetails, { agent: selectedAgent }) : null
+      selectedAgent ? /* @__PURE__ */ jsx(AgentDetails, { agent: selectedAgent }) : null,
+      selectedAgent ? /* @__PURE__ */ jsx(ModelResolutionPanel, { agentId: selectedAgent.id }) : null
     ] }),
     selectedAgent ? /* @__PURE__ */ jsxs(
       Tabs,