@open-mercato/ai-assistant 0.6.1-develop.3291.1.6fad645fd0 → 0.6.1

package/dist/modules/ai_assistant/data/repositories/AiAgentRuntimeOverrideRepository.js

@@ -43,6 +43,87 @@ class AiAgentRuntimeOverrideRepository {
     });
     return row ?? null;
   }
+  /**
+   * Validates and normalizes the loop override fields from an input object.
+   * Throws `AiAgentRuntimeOverrideValidationError` with code
+   * `invalid_loop_override` for any validation failure.
+   *
+   * Validation rules (Phase 3 — R5 mitigation):
+   * - `loopStopWhenJson`: all items must have kind `stepCount` or `hasToolCall`.
+   *   Items with kind `custom` are rejected — they cannot be stored as JSON.
+   * - `loopActiveToolsJson`: when `agentAllowedTools` is provided, every entry
+   *   must be in that allowlist.
+   */
+  validateLoopInput(input) {
+    if (input.loopStopWhenJson != null) {
+      if (!Array.isArray(input.loopStopWhenJson)) {
+        throw new AiAgentRuntimeOverrideValidationError(
+          "loopStopWhenJson must be an array of stop condition objects.",
+          "invalid_loop_override"
+        );
+      }
+      for (const item of input.loopStopWhenJson) {
+        if (!item || typeof item !== "object" || !("kind" in item)) {
+          throw new AiAgentRuntimeOverrideValidationError(
+            'loopStopWhenJson items must have a "kind" field.',
+            "invalid_loop_override"
+          );
+        }
+        const kind = item.kind;
+        if (kind === "custom") {
+          throw new AiAgentRuntimeOverrideValidationError(
+            'loopStopWhenJson does not support kind "custom" \u2014 only "stepCount" and "hasToolCall" are JSON-safe and storable.',
+            "invalid_loop_override"
+          );
+        }
+        if (kind !== "stepCount" && kind !== "hasToolCall") {
+          throw new AiAgentRuntimeOverrideValidationError(
+            `loopStopWhenJson contains unknown kind "${String(kind)}". Allowed: "stepCount", "hasToolCall".`,
+            "invalid_loop_override"
+          );
+        }
+        if (kind === "stepCount" && typeof item.count !== "number") {
+          throw new AiAgentRuntimeOverrideValidationError(
+            'loopStopWhenJson stepCount item must have a numeric "count" field.',
+            "invalid_loop_override"
+          );
+        }
+        if (kind === "hasToolCall" && typeof item.toolName !== "string") {
+          throw new AiAgentRuntimeOverrideValidationError(
+            'loopStopWhenJson hasToolCall item must have a string "toolName" field.',
+            "invalid_loop_override"
+          );
+        }
+      }
+    }
+    if (input.loopActiveToolsJson != null) {
+      if (!Array.isArray(input.loopActiveToolsJson)) {
+        throw new AiAgentRuntimeOverrideValidationError(
+          "loopActiveToolsJson must be an array of tool name strings.",
+          "invalid_loop_override"
+        );
+      }
+      for (const name of input.loopActiveToolsJson) {
+        if (typeof name !== "string" || name.length === 0) {
+          throw new AiAgentRuntimeOverrideValidationError(
+            "loopActiveToolsJson entries must be non-empty strings.",
+            "invalid_loop_override"
+          );
+        }
+      }
+      if (input.agentAllowedTools && input.agentAllowedTools.length > 0) {
+        const outsideAllowlist = input.loopActiveToolsJson.filter(
+          (name) => !input.agentAllowedTools.includes(name)
+        );
+        if (outsideAllowlist.length > 0) {
+          throw new AiAgentRuntimeOverrideValidationError(
+            `loopActiveToolsJson contains tools outside the agent's allowedTools: ${outsideAllowlist.join(", ")}.`,
+            "invalid_loop_override"
+          );
+        }
+      }
+    }
+  }
   /**
    * Inserts or updates the runtime override for the given context.
    *
@@ -50,6 +131,11 @@ class AiAgentRuntimeOverrideRepository {
    * cannot save a typo (Phase 1.4 contract re-applied per spec §Data Models).
    * An unknown provider id throws a typed error.
    *
+   * Also validates loop override fields (R5 mitigation — Phase 3):
+   * - `loopStopWhenJson` items must use only JSON-safe kinds.
+   * - `loopActiveToolsJson` items must be a subset of `agentAllowedTools`
+   *   when that is provided.
+   *
    * The R6 base-URL allowlist check is intentionally NOT performed here —
    * that enforcement lives at the HTTP layer (PUT settings route). The
    * repository trusts that callers have already validated the value.
@@ -67,6 +153,7 @@ class AiAgentRuntimeOverrideRepository {
         );
       }
     }
+    this.validateLoopInput(input);
     const orgFilter = ctx.organizationId ?? null;
     const agentIdFilter = input.agentId ?? null;
     const hasProviderId = Object.prototype.hasOwnProperty.call(input, "providerId");
@@ -93,6 +180,13 @@ class AiAgentRuntimeOverrideRepository {
         }
         existing.updatedByUserId = ctx.userId ?? null;
         existing.updatedAt = /* @__PURE__ */ new Date();
+        if ("loopDisabled" in input) existing.loopDisabled = input.loopDisabled ?? null;
+        if ("loopMaxSteps" in input) existing.loopMaxSteps = input.loopMaxSteps ?? null;
+        if ("loopMaxToolCalls" in input) existing.loopMaxToolCalls = input.loopMaxToolCalls ?? null;
+        if ("loopMaxWallClockMs" in input) existing.loopMaxWallClockMs = input.loopMaxWallClockMs ?? null;
+        if ("loopMaxTokens" in input) existing.loopMaxTokens = input.loopMaxTokens ?? null;
+        if ("loopStopWhenJson" in input) existing.loopStopWhenJson = input.loopStopWhenJson ?? null;
+        if ("loopActiveToolsJson" in input) existing.loopActiveToolsJson = input.loopActiveToolsJson ?? null;
         await tx.persist(existing).flush();
         return existing;
       }
@@ -105,7 +199,14 @@ class AiAgentRuntimeOverrideRepository {
         baseUrl: hasBaseURL ? input.baseURL ?? null : null,
         allowedOverrideProviders: hasAllowedOverrideProviders ? input.allowedOverrideProviders ?? null : null,
         allowedOverrideModelsByProvider: hasAllowedOverrideModels ? input.allowedOverrideModelsByProvider ?? {} : {},
-        updatedByUserId: ctx.userId ?? null
+        updatedByUserId: ctx.userId ?? null,
+        loopDisabled: input.loopDisabled ?? null,
+        loopMaxSteps: input.loopMaxSteps ?? null,
+        loopMaxToolCalls: input.loopMaxToolCalls ?? null,
+        loopMaxWallClockMs: input.loopMaxWallClockMs ?? null,
+        loopMaxTokens: input.loopMaxTokens ?? null,
+        loopStopWhenJson: input.loopStopWhenJson ?? null,
+        loopActiveToolsJson: input.loopActiveToolsJson ?? null
       });
       await tx.persist(row).flush();
       return row;
@@ -143,9 +244,10 @@ class AiAgentRuntimeOverrideRepository {
   }
 }
 class AiAgentRuntimeOverrideValidationError extends Error {
-  constructor(message) {
+  constructor(message, code = "invalid_override") {
     super(message);
     this.name = "AiAgentRuntimeOverrideValidationError";
+    this.code = code;
   }
 }
 var AiAgentRuntimeOverrideRepository_default = AiAgentRuntimeOverrideRepository;

package/dist/modules/ai_assistant/data/repositories/AiAgentRuntimeOverrideRepository.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/ai_assistant/data/repositories/AiAgentRuntimeOverrideRepository.ts"],
-  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { llmProviderRegistry } from '@open-mercato/shared/lib/ai/llm-provider-registry'\nimport { canonicalProviderId } from '../../lib/model-allowlist'\nimport { AiAgentRuntimeOverride } from '../entities'\n\nexport interface AiAgentRuntimeOverrideContext {\n  tenantId: string\n  organizationId?: string | null\n  userId?: string | null\n}\n\nexport interface AiAgentRuntimeOverrideInput {\n  /** null means tenant-wide default (no agent pinning). */\n  agentId?: string | null\n  providerId?: string | null\n  modelId?: string | null\n  baseURL?: string | null\n  allowedOverrideProviders?: string[] | null\n  allowedOverrideModelsByProvider?: Record<string, string[]>\n}\n\n/**\n * Repository for per-tenant AI runtime overrides (Phase 4a of spec\n * `2026-04-27-ai-agents-provider-model-baseurl-overrides`).\n *\n * All reads MUST filter by `tenant_id` first. The three public methods follow\n * the same fail-safe pattern as sibling repositories: `getDefault` returns\n * null on missing tenant context; `upsertDefault` validates provider id at\n * write time; `clearDefault` soft-deletes via `deleted_at`.\n *\n * Resolution precedence returned by `getDefault`:\n *   1. Agent-specific row (non-null `agent_id`) when `agentId` is provided.\n *   2. Tenant-wide row (`agent_id IS NULL`) for the same `(tenant_id, org_id)`.\n * Both rows are always scoped to the caller's `tenant_id` \u2014 cross-tenant\n * reads are impossible because every query filters `WHERE tenant_id = ?`.\n */\nexport class AiAgentRuntimeOverrideRepository {\n  constructor(private readonly em: EntityManager) {}\n\n  /**\n   * Returns the most-specific active runtime override for the given context.\n   *\n   * When `agentId` is provided, an agent-specific row takes precedence over a\n   * tenant-wide null-agent row. Returns null when neither exists.\n   *\n   * Never returns a row with `deleted_at IS NOT NULL`.\n   */\n  async getDefault(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<AiAgentRuntimeOverride | null> {\n    if (!ctx?.tenantId) return null\n\n    const orgFilter = ctx.organizationId ?? null\n\n    // Try agent-specific first when caller provided an agentId.\n    if (ctx.agentId) {\n      const agentRow = await this.em.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: ctx.agentId,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n      if (agentRow) return agentRow\n    }\n\n    // Fall back to tenant-wide row (agentId = null).\n    const tenantRow = await this.em.findOne(AiAgentRuntimeOverride, {\n      tenantId: ctx.tenantId,\n      organizationId: orgFilter,\n      agentId: null,\n      deletedAt: null,\n    } satisfies FilterQuery<AiAgentRuntimeOverride>)\n    return tenantRow ?? null\n  }\n\n  async getExact(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<AiAgentRuntimeOverride | null> {\n    if (!ctx?.tenantId) return null\n    const row = await this.em.findOne(AiAgentRuntimeOverride, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId ?? null,\n      agentId: ctx.agentId ?? null,\n      deletedAt: null,\n    } satisfies FilterQuery<AiAgentRuntimeOverride>)\n    return row ?? null\n  }\n\n  /**\n   * Inserts or updates the runtime override for the given context.\n   *\n   * Validates `providerId` against the registry at write time so an admin\n   * cannot save a typo (Phase 1.4 contract re-applied per spec \u00A7Data Models).\n   * An unknown provider id throws a typed error.\n   *\n   * The R6 base-URL allowlist check is intentionally NOT performed here \u2014\n   * that enforcement lives at the HTTP layer (PUT settings route). The\n   * repository trusts that callers have already validated the value.\n   */\n  async upsertDefault(\n    input: AiAgentRuntimeOverrideInput,\n    ctx: AiAgentRuntimeOverrideContext,\n  ): Promise<AiAgentRuntimeOverride> {\n    if (!ctx?.tenantId) {\n      throw new Error('AiAgentRuntimeOverrideRepository.upsertDefault requires tenantId')\n    }\n\n    const normalizedProviderId = input.providerId\n      ? canonicalProviderId(input.providerId, llmProviderRegistry.list().map((p) => p.id))\n      : null\n    if (input.providerId) {\n      const knownProvider = normalizedProviderId ? llmProviderRegistry.get(normalizedProviderId) : null\n      if (!knownProvider) {\n        throw new AiAgentRuntimeOverrideValidationError(\n          `Unknown provider id \"${input.providerId}\". Registered provider ids: ${llmProviderRegistry.list().map((p) => p.id).join(', ')}.`,\n        )\n      }\n    }\n\n    const orgFilter = ctx.organizationId ?? null\n    const agentIdFilter = input.agentId ?? null\n    const hasProviderId = Object.prototype.hasOwnProperty.call(input, 'providerId')\n    const hasModelId = Object.prototype.hasOwnProperty.call(input, 'modelId')\n    const hasBaseURL = Object.prototype.hasOwnProperty.call(input, 'baseURL')\n    const hasAllowedOverrideProviders = Object.prototype.hasOwnProperty.call(input, 'allowedOverrideProviders')\n    const hasAllowedOverrideModels = Object.prototype.hasOwnProperty.call(input, 'allowedOverrideModelsByProvider')\n\n    return this.em.transactional(async (tx) => {\n      const existing = await tx.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n\n      if (existing) {\n        if (hasProviderId) existing.providerId = normalizedProviderId\n        if (hasModelId) existing.modelId = input.modelId ?? null\n        if (hasBaseURL) existing.baseUrl = input.baseURL ?? null\n        if (hasAllowedOverrideProviders) {\n          existing.allowedOverrideProviders = input.allowedOverrideProviders ?? null\n        }\n        if (hasAllowedOverrideModels) {\n          existing.allowedOverrideModelsByProvider = input.allowedOverrideModelsByProvider ?? {}\n        }\n        existing.updatedByUserId = ctx.userId ?? null\n        existing.updatedAt = new Date()\n        await tx.persist(existing).flush()\n        return existing\n      }\n\n      const row = tx.create(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        providerId: hasProviderId ? normalizedProviderId : null,\n        modelId: hasModelId ? (input.modelId ?? null) : null,\n        baseUrl: hasBaseURL ? (input.baseURL ?? null) : null,\n        allowedOverrideProviders: hasAllowedOverrideProviders\n          ? (input.allowedOverrideProviders ?? null)\n          : null,\n        allowedOverrideModelsByProvider: hasAllowedOverrideModels\n          ? (input.allowedOverrideModelsByProvider ?? {})\n          : {},\n        updatedByUserId: ctx.userId ?? null,\n      } as unknown as AiAgentRuntimeOverride)\n      await tx.persist(row).flush()\n      return row\n    })\n  }\n\n  /**\n   * Soft-deletes the active override matching the given context by setting\n   * `deleted_at = now()`. Returns true when a row was found and cleared,\n   * false when no active row existed.\n   */\n  async clearDefault(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<boolean> {\n    if (!ctx?.tenantId) return false\n\n    const orgFilter = ctx.organizationId ?? null\n    const agentIdFilter = ctx.agentId ?? null\n\n    return this.em.transactional(async (tx) => {\n      const existing = await tx.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n      if (!existing) return false\n      if (\n        existing.allowedOverrideProviders != null ||\n        Object.keys(existing.allowedOverrideModelsByProvider ?? {}).length > 0\n      ) {\n        existing.providerId = null\n        existing.modelId = null\n        existing.baseUrl = null\n        existing.updatedAt = new Date()\n        await tx.persist(existing).flush()\n        return true\n      }\n      existing.deletedAt = new Date()\n      await tx.persist(existing).flush()\n      return true\n    })\n  }\n}\n\n/**\n * Thrown by `upsertDefault` when an unknown provider id is submitted.\n */\nexport class AiAgentRuntimeOverrideValidationError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'AiAgentRuntimeOverrideValidationError'\n  }\n}\n\nexport default AiAgentRuntimeOverrideRepository\n"],
-  "mappings": "AACA,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AAiChC,MAAM,iCAAiC;AAAA,EAC5C,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUjD,MAAM,WAAW,KAI0B;AACzC,QAAI,CAAC,KAAK,SAAU,QAAO;AAE3B,UAAM,YAAY,IAAI,kBAAkB;AAGxC,QAAI,IAAI,SAAS;AACf,YAAM,WAAW,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,QAC7D,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS,IAAI;AAAA,QACb,WAAW;AAAA,MACb,CAA+C;AAC/C,UAAI,SAAU,QAAO;AAAA,IACvB;AAGA,UAAM,YAAY,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,MAC9D,UAAU,IAAI;AAAA,MACd,gBAAgB;AAAA,MAChB,SAAS;AAAA,MACT,WAAW;AAAA,IACb,CAA+C;AAC/C,WAAO,aAAa;AAAA,EACtB;AAAA,EAEA,MAAM,SAAS,KAI4B;AACzC,QAAI,CAAC,KAAK,SAAU,QAAO;AAC3B,UAAM,MAAM,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,MACxD,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI,kBAAkB;AAAA,MACtC,SAAS,IAAI,WAAW;AAAA,MACxB,WAAW;AAAA,IACb,CAA+C;AAC/C,WAAO,OAAO;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,cACJ,OACA,KACiC;AACjC,QAAI,CAAC,KAAK,UAAU;AAClB,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AAEA,UAAM,uBAAuB,MAAM,aAC/B,oBAAoB,MAAM,YAAY,oBAAoB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IACjF;AACJ,QAAI,MAAM,YAAY;AACpB,YAAM,gBAAgB,uBAAuB,oBAAoB,IAAI,oBAAoB,IAAI;AAC7F,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI;AAAA,UACR,wBAAwB,MAAM,UAAU,+BAA+B,oBAAoB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,QAC/H;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,IAAI,kBAAkB;AACxC,UAAM,gBAAgB,MAAM,WAAW;AACvC,UAAM,gBAAgB,OAAO,UAAU,eAAe,KAAK,OAAO,YAAY;AAC9E,UAAM,aAAa,OAAO,UAAU,eAAe,KAAK,OAAO,SAAS;AACxE,UAAM,aAAa,OAAO,UAAU,eAAe,KAAK,OAAO,SAAS;AACxE,UAAM,8BAA8B,OAAO,UAAU,eAAe,KAAK,OAAO,0BAA0B;AAC1G,UAAM,2BAA2B,OAAO,UAAU,eAAe,KAAK,OAAO,iCAAiC;AAE9G,WAAO,KAAK,GAAG,cAAc,OAAO,OAAO;AACzC,YAAM,WAAW,MAAM,GAAG,QAAQ,wBAAwB;AAAA,QACxD,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,WAAW;AAAA,MACb,CAA+C;AAE/C,UAAI,UAAU;AACZ,YAAI,cAAe,UAAS,aAAa;AACzC,YAAI,WAAY,UAAS,UAAU,MAAM,WAAW;AACpD,YAAI,WAAY,UAAS,UAAU,MAAM,WAAW;AACpD,YAAI,6BAA6B;AAC/B,mBAAS,2BAA2B,MAAM,4BAA4B;AAAA,QACxE;AACA,YAAI,0BAA0B;AAC5B,mBAAS,kCAAkC,MAAM,mCAAmC,CAAC;AAAA,QACvF;AACA,iBAAS,kBAAkB,IAAI,UAAU;AACzC,iBAAS,YAAY,oBAAI,KAAK;AAC9B,cAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,eAAO;AAAA,MACT;AAEA,YAAM,MAAM,GAAG,OAAO,wBAAwB;AAAA,QAC5C,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,YAAY,gBAAgB,uBAAuB;AAAA,QACnD,SAAS,aAAc,MAAM,WAAW,OAAQ;AAAA,QAChD,SAAS,aAAc,MAAM,WAAW,OAAQ;AAAA,QAChD,0BAA0B,8BACrB,MAAM,4BAA4B,OACnC;AAAA,QACJ,iCAAiC,2BAC5B,MAAM,mCAAmC,CAAC,IAC3C,CAAC;AAAA,QACL,iBAAiB,IAAI,UAAU;AAAA,MACjC,CAAsC;AACtC,YAAM,GAAG,QAAQ,GAAG,EAAE,MAAM;AAC5B,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa,KAIE;AACnB,QAAI,CAAC,KAAK,SAAU,QAAO;AAE3B,UAAM,YAAY,IAAI,kBAAkB;AACxC,UAAM,gBAAgB,IAAI,WAAW;AAErC,WAAO,KAAK,GAAG,cAAc,OAAO,OAAO;AACzC,YAAM,WAAW,MAAM,GAAG,QAAQ,wBAAwB;AAAA,QACxD,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,WAAW;AAAA,MACb,CAA+C;AAC/C,UAAI,CAAC,SAAU,QAAO;AACtB,UACE,SAAS,4BAA4B,QACrC,OAAO,KAAK,SAAS,mCAAmC,CAAC,CAAC,EAAE,SAAS,GACrE;AACA,iBAAS,aAAa;AACtB,iBAAS,UAAU;AACnB,iBAAS,UAAU;AACnB,iBAAS,YAAY,oBAAI,KAAK;AAC9B,cAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,eAAO;AAAA,MACT;AACA,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACF;AAKO,MAAM,8CAA8C,MAAM;AAAA,EAC/D,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEA,IAAO,2CAAQ;",
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { llmProviderRegistry } from '@open-mercato/shared/lib/ai/llm-provider-registry'\nimport { canonicalProviderId } from '../../lib/model-allowlist'\nimport { AiAgentRuntimeOverride } from '../entities'\nimport type { AiAgentLoopStopCondition } from '../../lib/ai-agent-definition'\n\nexport interface AiAgentRuntimeOverrideContext {\n  tenantId: string\n  organizationId?: string | null\n  userId?: string | null\n}\n\nexport interface AiAgentRuntimeOverrideLoopInput {\n  /** Kill switch \u2014 when true, runtime forces stepCountIs(1). */\n  loopDisabled?: boolean | null\n  /** Override loop.maxSteps. */\n  loopMaxSteps?: number | null\n  /** Override loop.budget.maxToolCalls. */\n  loopMaxToolCalls?: number | null\n  /** Override loop.budget.maxWallClockMs. */\n  loopMaxWallClockMs?: number | null\n  /** Override loop.budget.maxTokens. */\n  loopMaxTokens?: number | null\n  /** Override loop.stopWhen \u2014 JSON-safe variants only (stepCount, hasToolCall). */\n  loopStopWhenJson?: AiAgentLoopStopCondition[] | null\n  /** Override loop.activeTools \u2014 must be a subset of agent.allowedTools. */\n  loopActiveToolsJson?: string[] | null\n}\n\nexport interface AiAgentRuntimeOverrideInput extends AiAgentRuntimeOverrideLoopInput {\n  /** null means tenant-wide default (no agent pinning). */\n  agentId?: string | null\n  providerId?: string | null\n  modelId?: string | null\n  baseURL?: string | null\n  allowedOverrideProviders?: string[] | null\n  allowedOverrideModelsByProvider?: Record<string, string[]>\n  /**\n   * Optional: the agent's declared allowedTools. When provided, loopActiveToolsJson\n   * is validated to be a subset. When omitted, allowlist validation is skipped\n   * (write-time defense only; the runtime re-validates at read time).\n   */\n  agentAllowedTools?: string[]\n}\n\n/**\n * Repository for per-tenant AI runtime overrides (Phase 4a of spec\n * `2026-04-27-ai-agents-provider-model-baseurl-overrides`).\n *\n * All reads MUST filter by `tenant_id` first. The three public methods follow\n * the same fail-safe pattern as sibling repositories: `getDefault` returns\n * null on missing tenant context; `upsertDefault` validates provider id at\n * write time; `clearDefault` soft-deletes via `deleted_at`.\n *\n * Resolution precedence returned by `getDefault`:\n *   1. Agent-specific row (non-null `agent_id`) when `agentId` is provided.\n *   2. Tenant-wide row (`agent_id IS NULL`) for the same `(tenant_id, org_id)`.\n * Both rows are always scoped to the caller's `tenant_id` \u2014 cross-tenant\n * reads are impossible because every query filters `WHERE tenant_id = ?`.\n */\nexport class AiAgentRuntimeOverrideRepository {\n  constructor(private readonly em: EntityManager) {}\n\n  /**\n   * Returns the most-specific active runtime override for the given context.\n   *\n   * When `agentId` is provided, an agent-specific row takes precedence over a\n   * tenant-wide null-agent row. Returns null when neither exists.\n   *\n   * Never returns a row with `deleted_at IS NOT NULL`.\n   */\n  async getDefault(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<AiAgentRuntimeOverride | null> {\n    if (!ctx?.tenantId) return null\n\n    const orgFilter = ctx.organizationId ?? null\n\n    // Try agent-specific first when caller provided an agentId.\n    if (ctx.agentId) {\n      const agentRow = await this.em.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: ctx.agentId,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n      if (agentRow) return agentRow\n    }\n\n    // Fall back to tenant-wide row (agentId = null).\n    const tenantRow = await this.em.findOne(AiAgentRuntimeOverride, {\n      tenantId: ctx.tenantId,\n      organizationId: orgFilter,\n      agentId: null,\n      deletedAt: null,\n    } satisfies FilterQuery<AiAgentRuntimeOverride>)\n    return tenantRow ?? null\n  }\n\n  async getExact(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<AiAgentRuntimeOverride | null> {\n    if (!ctx?.tenantId) return null\n    const row = await this.em.findOne(AiAgentRuntimeOverride, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId ?? null,\n      agentId: ctx.agentId ?? null,\n      deletedAt: null,\n    } satisfies FilterQuery<AiAgentRuntimeOverride>)\n    return row ?? null\n  }\n\n  /**\n   * Validates and normalizes the loop override fields from an input object.\n   * Throws `AiAgentRuntimeOverrideValidationError` with code\n   * `invalid_loop_override` for any validation failure.\n   *\n   * Validation rules (Phase 3 \u2014 R5 mitigation):\n   * - `loopStopWhenJson`: all items must have kind `stepCount` or `hasToolCall`.\n   *   Items with kind `custom` are rejected \u2014 they cannot be stored as JSON.\n   * - `loopActiveToolsJson`: when `agentAllowedTools` is provided, every entry\n   *   must be in that allowlist.\n   */\n  private validateLoopInput(input: AiAgentRuntimeOverrideInput): void {\n    if (input.loopStopWhenJson != null) {\n      if (!Array.isArray(input.loopStopWhenJson)) {\n        throw new AiAgentRuntimeOverrideValidationError(\n          'loopStopWhenJson must be an array of stop condition objects.',\n          'invalid_loop_override',\n        )\n      }\n      for (const item of input.loopStopWhenJson) {\n        if (!item || typeof item !== 'object' || !('kind' in item)) {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson items must have a \"kind\" field.',\n            'invalid_loop_override',\n          )\n        }\n        const kind = (item as AiAgentLoopStopCondition).kind\n        if (kind === 'custom') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson does not support kind \"custom\" \u2014 only \"stepCount\" and \"hasToolCall\" are JSON-safe and storable.',\n            'invalid_loop_override',\n          )\n        }\n        if (kind !== 'stepCount' && kind !== 'hasToolCall') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            `loopStopWhenJson contains unknown kind \"${String(kind)}\". Allowed: \"stepCount\", \"hasToolCall\".`,\n            'invalid_loop_override',\n          )\n        }\n        if (kind === 'stepCount' && typeof (item as { count?: unknown }).count !== 'number') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson stepCount item must have a numeric \"count\" field.',\n            'invalid_loop_override',\n          )\n        }\n        if (kind === 'hasToolCall' && typeof (item as { toolName?: unknown }).toolName !== 'string') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson hasToolCall item must have a string \"toolName\" field.',\n            'invalid_loop_override',\n          )\n        }\n      }\n    }\n\n    if (input.loopActiveToolsJson != null) {\n      if (!Array.isArray(input.loopActiveToolsJson)) {\n        throw new AiAgentRuntimeOverrideValidationError(\n          'loopActiveToolsJson must be an array of tool name strings.',\n          'invalid_loop_override',\n        )\n      }\n      for (const name of input.loopActiveToolsJson) {\n        if (typeof name !== 'string' || name.length === 0) {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopActiveToolsJson entries must be non-empty strings.',\n            'invalid_loop_override',\n          )\n        }\n      }\n      if (input.agentAllowedTools && input.agentAllowedTools.length > 0) {\n        const outsideAllowlist = input.loopActiveToolsJson.filter(\n          (name) => !input.agentAllowedTools!.includes(name),\n        )\n        if (outsideAllowlist.length > 0) {\n          throw new AiAgentRuntimeOverrideValidationError(\n            `loopActiveToolsJson contains tools outside the agent's allowedTools: ${outsideAllowlist.join(', ')}.`,\n            'invalid_loop_override',\n          )\n        }\n      }\n    }\n  }\n\n  /**\n   * Inserts or updates the runtime override for the given context.\n   *\n   * Validates `providerId` against the registry at write time so an admin\n   * cannot save a typo (Phase 1.4 contract re-applied per spec \u00A7Data Models).\n   * An unknown provider id throws a typed error.\n   *\n   * Also validates loop override fields (R5 mitigation \u2014 Phase 3):\n   * - `loopStopWhenJson` items must use only JSON-safe kinds.\n   * - `loopActiveToolsJson` items must be a subset of `agentAllowedTools`\n   *   when that is provided.\n   *\n   * The R6 base-URL allowlist check is intentionally NOT performed here \u2014\n   * that enforcement lives at the HTTP layer (PUT settings route). The\n   * repository trusts that callers have already validated the value.\n   */\n  async upsertDefault(\n    input: AiAgentRuntimeOverrideInput,\n    ctx: AiAgentRuntimeOverrideContext,\n  ): Promise<AiAgentRuntimeOverride> {\n    if (!ctx?.tenantId) {\n      throw new Error('AiAgentRuntimeOverrideRepository.upsertDefault requires tenantId')\n    }\n\n    const normalizedProviderId = input.providerId\n      ? canonicalProviderId(input.providerId, llmProviderRegistry.list().map((p) => p.id))\n      : null\n    if (input.providerId) {\n      const knownProvider = normalizedProviderId ? llmProviderRegistry.get(normalizedProviderId) : null\n      if (!knownProvider) {\n        throw new AiAgentRuntimeOverrideValidationError(\n          `Unknown provider id \"${input.providerId}\". Registered provider ids: ${llmProviderRegistry.list().map((p) => p.id).join(', ')}.`,\n        )\n      }\n    }\n\n    this.validateLoopInput(input)\n\n    const orgFilter = ctx.organizationId ?? null\n    const agentIdFilter = input.agentId ?? null\n    const hasProviderId = Object.prototype.hasOwnProperty.call(input, 'providerId')\n    const hasModelId = Object.prototype.hasOwnProperty.call(input, 'modelId')\n    const hasBaseURL = Object.prototype.hasOwnProperty.call(input, 'baseURL')\n    const hasAllowedOverrideProviders = Object.prototype.hasOwnProperty.call(input, 'allowedOverrideProviders')\n    const hasAllowedOverrideModels = Object.prototype.hasOwnProperty.call(input, 'allowedOverrideModelsByProvider')\n\n    return this.em.transactional(async (tx) => {\n      const existing = await tx.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n\n      if (existing) {\n        if (hasProviderId) existing.providerId = normalizedProviderId\n        if (hasModelId) existing.modelId = input.modelId ?? null\n        if (hasBaseURL) existing.baseUrl = input.baseURL ?? null\n        if (hasAllowedOverrideProviders) {\n          existing.allowedOverrideProviders = input.allowedOverrideProviders ?? null\n        }\n        if (hasAllowedOverrideModels) {\n          existing.allowedOverrideModelsByProvider = input.allowedOverrideModelsByProvider ?? {}\n        }\n        existing.updatedByUserId = ctx.userId ?? null\n        existing.updatedAt = new Date()\n        if ('loopDisabled' in input) existing.loopDisabled = input.loopDisabled ?? null\n        if ('loopMaxSteps' in input) existing.loopMaxSteps = input.loopMaxSteps ?? null\n        if ('loopMaxToolCalls' in input) existing.loopMaxToolCalls = input.loopMaxToolCalls ?? null\n        if ('loopMaxWallClockMs' in input) existing.loopMaxWallClockMs = input.loopMaxWallClockMs ?? null\n        if ('loopMaxTokens' in input) existing.loopMaxTokens = input.loopMaxTokens ?? null\n        if ('loopStopWhenJson' in input) existing.loopStopWhenJson = input.loopStopWhenJson ?? null\n        if ('loopActiveToolsJson' in input) existing.loopActiveToolsJson = input.loopActiveToolsJson ?? null\n        await tx.persist(existing).flush()\n        return existing\n      }\n\n      const row = tx.create(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        providerId: hasProviderId ? normalizedProviderId : null,\n        modelId: hasModelId ? (input.modelId ?? null) : null,\n        baseUrl: hasBaseURL ? (input.baseURL ?? null) : null,\n        allowedOverrideProviders: hasAllowedOverrideProviders\n          ? (input.allowedOverrideProviders ?? null)\n          : null,\n        allowedOverrideModelsByProvider: hasAllowedOverrideModels\n          ? (input.allowedOverrideModelsByProvider ?? {})\n          : {},\n        updatedByUserId: ctx.userId ?? null,\n        loopDisabled: input.loopDisabled ?? null,\n        loopMaxSteps: input.loopMaxSteps ?? null,\n        loopMaxToolCalls: input.loopMaxToolCalls ?? null,\n        loopMaxWallClockMs: input.loopMaxWallClockMs ?? null,\n        loopMaxTokens: input.loopMaxTokens ?? null,\n        loopStopWhenJson: input.loopStopWhenJson ?? null,\n        loopActiveToolsJson: input.loopActiveToolsJson ?? null,\n      } as unknown as AiAgentRuntimeOverride)\n      await tx.persist(row).flush()\n      return row\n    })\n  }\n\n  /**\n   * Soft-deletes the active override matching the given context by setting\n   * `deleted_at = now()`. Returns true when a row was found and cleared,\n   * false when no active row existed.\n   */\n  async clearDefault(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<boolean> {\n    if (!ctx?.tenantId) return false\n\n    const orgFilter = ctx.organizationId ?? null\n    const agentIdFilter = ctx.agentId ?? null\n\n    return this.em.transactional(async (tx) => {\n      const existing = await tx.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n      if (!existing) return false\n      if (\n        existing.allowedOverrideProviders != null ||\n        Object.keys(existing.allowedOverrideModelsByProvider ?? {}).length > 0\n      ) {\n        existing.providerId = null\n        existing.modelId = null\n        existing.baseUrl = null\n        existing.updatedAt = new Date()\n        await tx.persist(existing).flush()\n        return true\n      }\n      existing.deletedAt = new Date()\n      await tx.persist(existing).flush()\n      return true\n    })\n  }\n}\n\n/**\n * Thrown by `upsertDefault` when validation fails (unknown provider id,\n * invalid loop override JSON).\n */\nexport class AiAgentRuntimeOverrideValidationError extends Error {\n  readonly code: string\n\n  constructor(message: string, code = 'invalid_override') {\n    super(message)\n    this.name = 'AiAgentRuntimeOverrideValidationError'\n    this.code = code\n  }\n}\n\nexport default AiAgentRuntimeOverrideRepository\n"],
+  "mappings": "AACA,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AAyDhC,MAAM,iCAAiC;AAAA,EAC5C,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUjD,MAAM,WAAW,KAI0B;AACzC,QAAI,CAAC,KAAK,SAAU,QAAO;AAE3B,UAAM,YAAY,IAAI,kBAAkB;AAGxC,QAAI,IAAI,SAAS;AACf,YAAM,WAAW,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,QAC7D,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS,IAAI;AAAA,QACb,WAAW;AAAA,MACb,CAA+C;AAC/C,UAAI,SAAU,QAAO;AAAA,IACvB;AAGA,UAAM,YAAY,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,MAC9D,UAAU,IAAI;AAAA,MACd,gBAAgB;AAAA,MAChB,SAAS;AAAA,MACT,WAAW;AAAA,IACb,CAA+C;AAC/C,WAAO,aAAa;AAAA,EACtB;AAAA,EAEA,MAAM,SAAS,KAI4B;AACzC,QAAI,CAAC,KAAK,SAAU,QAAO;AAC3B,UAAM,MAAM,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,MACxD,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI,kBAAkB;AAAA,MACtC,SAAS,IAAI,WAAW;AAAA,MACxB,WAAW;AAAA,IACb,CAA+C;AAC/C,WAAO,OAAO;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaQ,kBAAkB,OAA0C;AAClE,QAAI,MAAM,oBAAoB,MAAM;AAClC,UAAI,CAAC,MAAM,QAAQ,MAAM,gBAAgB,GAAG;AAC1C,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,iBAAW,QAAQ,MAAM,kBAAkB;AACzC,YAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,EAAE,UAAU,OAAO;AAC1D,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,cAAM,OAAQ,KAAkC;AAChD,YAAI,SAAS,UAAU;AACrB,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,SAAS,eAAe,SAAS,eAAe;AAClD,gBAAM,IAAI;AAAA,YACR,2CAA2C,OAAO,IAAI,CAAC;AAAA,YACvD;AAAA,UACF;AAAA,QACF;AACA,YAAI,SAAS,eAAe,OAAQ,KAA6B,UAAU,UAAU;AACnF,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,SAAS,iBAAiB,OAAQ,KAAgC,aAAa,UAAU;AAC3F,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,MAAM,uBAAuB,MAAM;AACrC,UAAI,CAAC,MAAM,QAAQ,MAAM,mBAAmB,GAAG;AAC7C,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,iBAAW,QAAQ,MAAM,qBAAqB;AAC5C,YAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,UAAI,MAAM,qBAAqB,MAAM,kBAAkB,SAAS,GAAG;AACjE,cAAM,mBAAmB,MAAM,oBAAoB;AAAA,UACjD,CAAC,SAAS,CAAC,MAAM,kBAAmB,SAAS,IAAI;AAAA,QACnD;AACA,YAAI,iBAAiB,SAAS,GAAG;AAC/B,gBAAM,IAAI;AAAA,YACR,wEAAwE,iBAAiB,KAAK,IAAI,CAAC;AAAA,YACnG;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,cACJ,OACA,KACiC;AACjC,QAAI,CAAC,KAAK,UAAU;AAClB,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AAEA,UAAM,uBAAuB,MAAM,aAC/B,oBAAoB,MAAM,YAAY,oBAAoB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IACjF;AACJ,QAAI,MAAM,YAAY;AACpB,YAAM,gBAAgB,uBAAuB,oBAAoB,IAAI,oBAAoB,IAAI;AAC7F,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI;AAAA,UACR,wBAAwB,MAAM,UAAU,+BAA+B,oBAAoB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,QAC/H;AAAA,MACF;AAAA,IACF;AAEA,SAAK,kBAAkB,KAAK;AAE5B,UAAM,YAAY,IAAI,kBAAkB;AACxC,UAAM,gBAAgB,MAAM,WAAW;AACvC,UAAM,gBAAgB,OAAO,UAAU,eAAe,KAAK,OAAO,YAAY;AAC9E,UAAM,aAAa,OAAO,UAAU,eAAe,KAAK,OAAO,SAAS;AACxE,UAAM,aAAa,OAAO,UAAU,eAAe,KAAK,OAAO,SAAS;AACxE,UAAM,8BAA8B,OAAO,UAAU,eAAe,KAAK,OAAO,0BAA0B;AAC1G,UAAM,2BAA2B,OAAO,UAAU,eAAe,KAAK,OAAO,iCAAiC;AAE9G,WAAO,KAAK,GAAG,cAAc,OAAO,OAAO;AACzC,YAAM,WAAW,MAAM,GAAG,QAAQ,wBAAwB;AAAA,QACxD,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,WAAW;AAAA,MACb,CAA+C;AAE/C,UAAI,UAAU;AACZ,YAAI,cAAe,UAAS,aAAa;AACzC,YAAI,WAAY,UAAS,UAAU,MAAM,WAAW;AACpD,YAAI,WAAY,UAAS,UAAU,MAAM,WAAW;AACpD,YAAI,6BAA6B;AAC/B,mBAAS,2BAA2B,MAAM,4BAA4B;AAAA,QACxE;AACA,YAAI,0BAA0B;AAC5B,mBAAS,kCAAkC,MAAM,mCAAmC,CAAC;AAAA,QACvF;AACA,iBAAS,kBAAkB,IAAI,UAAU;AACzC,iBAAS,YAAY,oBAAI,KAAK;AAC9B,YAAI,kBAAkB,MAAO,UAAS,eAAe,MAAM,gBAAgB;AAC3E,YAAI,kBAAkB,MAAO,UAAS,eAAe,MAAM,gBAAgB;AAC3E,YAAI,sBAAsB,MAAO,UAAS,mBAAmB,MAAM,oBAAoB;AACvF,YAAI,wBAAwB,MAAO,UAAS,qBAAqB,MAAM,sBAAsB;AAC7F,YAAI,mBAAmB,MAAO,UAAS,gBAAgB,MAAM,iBAAiB;AAC9E,YAAI,sBAAsB,MAAO,UAAS,mBAAmB,MAAM,oBAAoB;AACvF,YAAI,yBAAyB,MAAO,UAAS,sBAAsB,MAAM,uBAAuB;AAChG,cAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,eAAO;AAAA,MACT;AAEA,YAAM,MAAM,GAAG,OAAO,wBAAwB;AAAA,QAC5C,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,YAAY,gBAAgB,uBAAuB;AAAA,QACnD,SAAS,aAAc,MAAM,WAAW,OAAQ;AAAA,QAChD,SAAS,aAAc,MAAM,WAAW,OAAQ;AAAA,QAChD,0BAA0B,8BACrB,MAAM,4BAA4B,OACnC;AAAA,QACJ,iCAAiC,2BAC5B,MAAM,mCAAmC,CAAC,IAC3C,CAAC;AAAA,QACL,iBAAiB,IAAI,UAAU;AAAA,QAC/B,cAAc,MAAM,gBAAgB;AAAA,QACpC,cAAc,MAAM,gBAAgB;AAAA,QACpC,kBAAkB,MAAM,oBAAoB;AAAA,QAC5C,oBAAoB,MAAM,sBAAsB;AAAA,QAChD,eAAe,MAAM,iBAAiB;AAAA,QACtC,kBAAkB,MAAM,oBAAoB;AAAA,QAC5C,qBAAqB,MAAM,uBAAuB;AAAA,MACpD,CAAsC;AACtC,YAAM,GAAG,QAAQ,GAAG,EAAE,MAAM;AAC5B,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa,KAIE;AACnB,QAAI,CAAC,KAAK,SAAU,QAAO;AAE3B,UAAM,YAAY,IAAI,kBAAkB;AACxC,UAAM,gBAAgB,IAAI,WAAW;AAErC,WAAO,KAAK,GAAG,cAAc,OAAO,OAAO;AACzC,YAAM,WAAW,MAAM,GAAG,QAAQ,wBAAwB;AAAA,QACxD,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,WAAW;AAAA,MACb,CAA+C;AAC/C,UAAI,CAAC,SAAU,QAAO;AACtB,UACE,SAAS,4BAA4B,QACrC,OAAO,KAAK,SAAS,mCAAmC,CAAC,CAAC,EAAE,SAAS,GACrE;AACA,iBAAS,aAAa;AACtB,iBAAS,UAAU;AACnB,iBAAS,UAAU;AACnB,iBAAS,YAAY,oBAAI,KAAK;AAC9B,cAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,eAAO;AAAA,MACT;AACA,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACF;AAMO,MAAM,8CAA8C,MAAM;AAAA,EAG/D,YAAY,SAAiB,OAAO,oBAAoB;AACtD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAEA,IAAO,2CAAQ;",
   "names": []
 }

package/dist/modules/ai_assistant/data/repositories/AiTokenUsageRepository.js

@@ -0,0 +1,168 @@
+import { AiTokenUsageEvent, AiTokenUsageDaily } from "../entities.js";
+class AiTokenUsageRepository {
+  constructor(em) {
+    this.em = em;
+  }
+  async createEvent(input) {
+    const event = this.em.create(AiTokenUsageEvent, {
+      tenantId: input.tenantId,
+      organizationId: input.organizationId ?? null,
+      userId: input.userId,
+      agentId: input.agentId,
+      moduleId: input.moduleId,
+      sessionId: input.sessionId,
+      turnId: input.turnId,
+      stepIndex: input.stepIndex,
+      providerId: input.providerId,
+      modelId: input.modelId,
+      inputTokens: input.inputTokens,
+      outputTokens: input.outputTokens,
+      cachedInputTokens: input.cachedInputTokens ?? null,
+      reasoningTokens: input.reasoningTokens ?? null,
+      finishReason: input.finishReason ?? null,
+      loopAbortReason: input.loopAbortReason ?? null
+    });
+    this.em.persist(event);
+    await this.em.flush();
+    return event;
+  }
+  /**
+   * Upserts the daily rollup row, incrementing counters atomically via
+   * `INSERT ... ON CONFLICT DO UPDATE`. The `session_count` column is
+   * incremented only when this is the first event observed for the
+   * `(tenant_id, session_id, day, agent_id, model_id)` tuple — a LATERAL
+   * NOT EXISTS check prevents double-counting.
+   *
+   * The query handles the two partial unique indexes (org IS NOT NULL vs
+   * IS NULL) by encoding `organization_id` in the EXCLUDED row and relying
+   * on the appropriate partial index the planner selects.
+   */
+  async upsertDaily(input) {
+    const connection = this.em.getConnection();
+    const now = /* @__PURE__ */ new Date();
+    const orgValue = input.organizationId ?? null;
+    const sessionCheckSql = `
+      select exists (
+        select 1 from ai_token_usage_events
+        where tenant_id = ?
+          and session_id = ?::uuid
+          and agent_id = ?
+          and model_id = ?
+          and date_trunc('day', created_at) = ?::date
+          ${orgValue !== null ? "and organization_id = ?" : "and organization_id is null"}
+      ) as already_seen
+    `;
+    const sessionCheckParams = [
+      input.tenantId,
+      input.sessionId,
+      input.agentId,
+      input.modelId,
+      input.day
+    ];
+    if (orgValue !== null) sessionCheckParams.push(orgValue);
+    const sessionRows = await connection.execute(sessionCheckSql, sessionCheckParams, "all");
+    const alreadySeen = Array.isArray(sessionRows) && sessionRows.length > 0 && sessionRows[0].already_seen === true;
+    const sessionDelta = alreadySeen ? 0 : 1;
+    if (orgValue !== null) {
+      await connection.execute(
+        `
+        insert into ai_token_usage_daily (
+          id, tenant_id, organization_id, day, agent_id, model_id, provider_id,
+          input_tokens, output_tokens, cached_input_tokens, reasoning_tokens,
+          step_count, turn_count, session_count, created_at, updated_at
+        ) values (
+          gen_random_uuid(), ?, ?, ?::date, ?, ?, ?,
+          ?, ?, ?, ?,
+          1, 1, ?, ?, ?
+        )
+        on conflict (tenant_id, day, agent_id, model_id, organization_id)
+        where organization_id is not null
+        do update set
+          input_tokens         = ai_token_usage_daily.input_tokens + excluded.input_tokens,
+          output_tokens        = ai_token_usage_daily.output_tokens + excluded.output_tokens,
+          cached_input_tokens  = ai_token_usage_daily.cached_input_tokens + excluded.cached_input_tokens,
+          reasoning_tokens     = ai_token_usage_daily.reasoning_tokens + excluded.reasoning_tokens,
+          step_count           = ai_token_usage_daily.step_count + 1,
+          turn_count           = ai_token_usage_daily.turn_count + 1,
+          session_count        = ai_token_usage_daily.session_count + excluded.session_count,
+          updated_at           = excluded.updated_at
+        `,
+        [
+          input.tenantId,
+          orgValue,
+          input.day,
+          input.agentId,
+          input.modelId,
+          input.providerId,
+          input.inputTokens,
+          input.outputTokens,
+          input.cachedInputTokens,
+          input.reasoningTokens,
+          sessionDelta,
+          now,
+          now
+        ],
+        "run"
+      );
+    } else {
+      await connection.execute(
+        `
+        insert into ai_token_usage_daily (
+          id, tenant_id, organization_id, day, agent_id, model_id, provider_id,
+          input_tokens, output_tokens, cached_input_tokens, reasoning_tokens,
+          step_count, turn_count, session_count, created_at, updated_at
+        ) values (
+          gen_random_uuid(), ?, null, ?::date, ?, ?, ?,
+          ?, ?, ?, ?,
+          1, 1, ?, ?, ?
+        )
+        on conflict (tenant_id, day, agent_id, model_id)
+        where organization_id is null
+        do update set
+          input_tokens         = ai_token_usage_daily.input_tokens + excluded.input_tokens,
+          output_tokens        = ai_token_usage_daily.output_tokens + excluded.output_tokens,
+          cached_input_tokens  = ai_token_usage_daily.cached_input_tokens + excluded.cached_input_tokens,
+          reasoning_tokens     = ai_token_usage_daily.reasoning_tokens + excluded.reasoning_tokens,
+          step_count           = ai_token_usage_daily.step_count + 1,
+          turn_count           = ai_token_usage_daily.turn_count + 1,
+          session_count        = ai_token_usage_daily.session_count + excluded.session_count,
+          updated_at           = excluded.updated_at
+        `,
+        [
+          input.tenantId,
+          input.day,
+          input.agentId,
+          input.modelId,
+          input.providerId,
+          input.inputTokens,
+          input.outputTokens,
+          input.cachedInputTokens,
+          input.reasoningTokens,
+          sessionDelta,
+          now,
+          now
+        ],
+        "run"
+      );
+    }
+  }
+  async listEventsForSession(tenantId, sessionId, limit = 200) {
+    return this.em.find(
+      AiTokenUsageEvent,
+      { tenantId, sessionId },
+      { orderBy: { createdAt: "ASC", stepIndex: "ASC" }, limit }
+    );
+  }
+  async listDailyRollup(tenantId, from, to, filters = {}) {
+    const where = { tenantId, day: { $gte: from, $lte: to } };
+    if (filters.agentId) where.agentId = filters.agentId;
+    if (filters.modelId) where.modelId = filters.modelId;
+    return this.em.find(AiTokenUsageDaily, where, {
+      orderBy: { day: "ASC", agentId: "ASC", modelId: "ASC" }
+    });
+  }
+}
+export {
+  AiTokenUsageRepository
+};
+//# sourceMappingURL=AiTokenUsageRepository.js.map

package/dist/modules/ai_assistant/data/repositories/AiTokenUsageRepository.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/ai_assistant/data/repositories/AiTokenUsageRepository.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { AiTokenUsageEvent, AiTokenUsageDaily } from '../entities'\n\nexport interface CreateTokenUsageEventInput {\n  tenantId: string\n  organizationId?: string | null\n  userId: string\n  agentId: string\n  moduleId: string\n  sessionId: string\n  turnId: string\n  stepIndex: number\n  providerId: string\n  modelId: string\n  inputTokens: number\n  outputTokens: number\n  cachedInputTokens?: number | null\n  reasoningTokens?: number | null\n  finishReason?: string | null\n  loopAbortReason?: string | null\n}\n\nexport interface UpsertTokenUsageDailyInput {\n  tenantId: string\n  organizationId?: string | null\n  day: string\n  agentId: string\n  modelId: string\n  providerId: string\n  sessionId: string\n  inputTokens: number\n  outputTokens: number\n  cachedInputTokens: number\n  reasoningTokens: number\n}\n\n/**\n * Repository for the Phase 6 token-usage event log and daily rollup tables.\n *\n * `upsertDaily` uses raw SQL to perform the CONFLICT-based incremental update\n * because MikroORM does not expose `INSERT ... ON CONFLICT DO UPDATE` for\n * arbitrary expressions. The LATERAL session-count check guards against\n * double-counting a session within the same `(tenant, day, agent, model)` tuple.\n *\n * All writes are fail-open \u2014 callers MUST wrap invocations in try/catch and\n * log at `warn` rather than rethrowing (R12: recorder must never break a turn).\n *\n * Phase 6.1 + 6.3 of spec `2026-04-28-ai-agents-agentic-loop-controls`.\n */\nexport class AiTokenUsageRepository {\n  constructor(private readonly em: EntityManager) {}\n\n  async createEvent(input: CreateTokenUsageEventInput): Promise<AiTokenUsageEvent> {\n    const event = this.em.create(AiTokenUsageEvent, {\n      tenantId: input.tenantId,\n      organizationId: input.organizationId ?? null,\n      userId: input.userId,\n      agentId: input.agentId,\n      moduleId: input.moduleId,\n      sessionId: input.sessionId,\n      turnId: input.turnId,\n      stepIndex: input.stepIndex,\n      providerId: input.providerId,\n      modelId: input.modelId,\n      inputTokens: input.inputTokens,\n      outputTokens: input.outputTokens,\n      cachedInputTokens: input.cachedInputTokens ?? null,\n      reasoningTokens: input.reasoningTokens ?? null,\n      finishReason: input.finishReason ?? null,\n      loopAbortReason: input.loopAbortReason ?? null,\n    })\n    this.em.persist(event)\n    await this.em.flush()\n    return event\n  }\n\n  /**\n   * Upserts the daily rollup row, incrementing counters atomically via\n   * `INSERT ... ON CONFLICT DO UPDATE`. The `session_count` column is\n   * incremented only when this is the first event observed for the\n   * `(tenant_id, session_id, day, agent_id, model_id)` tuple \u2014 a LATERAL\n   * NOT EXISTS check prevents double-counting.\n   *\n   * The query handles the two partial unique indexes (org IS NOT NULL vs\n   * IS NULL) by encoding `organization_id` in the EXCLUDED row and relying\n   * on the appropriate partial index the planner selects.\n   */\n  async upsertDaily(input: UpsertTokenUsageDailyInput): Promise<void> {\n    const connection = this.em.getConnection()\n    const now = new Date()\n    const orgValue = input.organizationId ?? null\n\n    // Determine if this is the first event for this session in the window\n    // (used to guard the session_count increment).\n    const sessionCheckSql = `\n      select exists (\n        select 1 from ai_token_usage_events\n        where tenant_id = ?\n          and session_id = ?::uuid\n          and agent_id = ?\n          and model_id = ?\n          and date_trunc('day', created_at) = ?::date\n          ${orgValue !== null ? 'and organization_id = ?' : 'and organization_id is null'}\n      ) as already_seen\n    `\n    const sessionCheckParams: unknown[] = [\n      input.tenantId,\n      input.sessionId,\n      input.agentId,\n      input.modelId,\n      input.day,\n    ]\n    if (orgValue !== null) sessionCheckParams.push(orgValue)\n\n    const sessionRows = await connection.execute(sessionCheckSql, sessionCheckParams, 'all')\n    const alreadySeen =\n      Array.isArray(sessionRows) &&\n      sessionRows.length > 0 &&\n      (sessionRows[0] as Record<string, unknown>).already_seen === true\n\n    const sessionDelta = alreadySeen ? 0 : 1\n\n    if (orgValue !== null) {\n      await connection.execute(\n        `\n        insert into ai_token_usage_daily (\n          id, tenant_id, organization_id, day, agent_id, model_id, provider_id,\n          input_tokens, output_tokens, cached_input_tokens, reasoning_tokens,\n          step_count, turn_count, session_count, created_at, updated_at\n        ) values (\n          gen_random_uuid(), ?, ?, ?::date, ?, ?, ?,\n          ?, ?, ?, ?,\n          1, 1, ?, ?, ?\n        )\n        on conflict (tenant_id, day, agent_id, model_id, organization_id)\n        where organization_id is not null\n        do update set\n          input_tokens         = ai_token_usage_daily.input_tokens + excluded.input_tokens,\n          output_tokens        = ai_token_usage_daily.output_tokens + excluded.output_tokens,\n          cached_input_tokens  = ai_token_usage_daily.cached_input_tokens + excluded.cached_input_tokens,\n          reasoning_tokens     = ai_token_usage_daily.reasoning_tokens + excluded.reasoning_tokens,\n          step_count           = ai_token_usage_daily.step_count + 1,\n          turn_count           = ai_token_usage_daily.turn_count + 1,\n          session_count        = ai_token_usage_daily.session_count + excluded.session_count,\n          updated_at           = excluded.updated_at\n        `,\n        [\n          input.tenantId, orgValue, input.day, input.agentId, input.modelId, input.providerId,\n          input.inputTokens, input.outputTokens, input.cachedInputTokens, input.reasoningTokens,\n          sessionDelta, now, now,\n        ],\n        'run',\n      )\n    } else {\n      await connection.execute(\n        `\n        insert into ai_token_usage_daily (\n          id, tenant_id, organization_id, day, agent_id, model_id, provider_id,\n          input_tokens, output_tokens, cached_input_tokens, reasoning_tokens,\n          step_count, turn_count, session_count, created_at, updated_at\n        ) values (\n          gen_random_uuid(), ?, null, ?::date, ?, ?, ?,\n          ?, ?, ?, ?,\n          1, 1, ?, ?, ?\n        )\n        on conflict (tenant_id, day, agent_id, model_id)\n        where organization_id is null\n        do update set\n          input_tokens         = ai_token_usage_daily.input_tokens + excluded.input_tokens,\n          output_tokens        = ai_token_usage_daily.output_tokens + excluded.output_tokens,\n          cached_input_tokens  = ai_token_usage_daily.cached_input_tokens + excluded.cached_input_tokens,\n          reasoning_tokens     = ai_token_usage_daily.reasoning_tokens + excluded.reasoning_tokens,\n          step_count           = ai_token_usage_daily.step_count + 1,\n          turn_count           = ai_token_usage_daily.turn_count + 1,\n          session_count        = ai_token_usage_daily.session_count + excluded.session_count,\n          updated_at           = excluded.updated_at\n        `,\n        [\n          input.tenantId, input.day, input.agentId, input.modelId, input.providerId,\n          input.inputTokens, input.outputTokens, input.cachedInputTokens, input.reasoningTokens,\n          sessionDelta, now, now,\n        ],\n        'run',\n      )\n    }\n  }\n\n  async listEventsForSession(\n    tenantId: string,\n    sessionId: string,\n    limit = 200,\n  ): Promise<AiTokenUsageEvent[]> {\n    return this.em.find(\n      AiTokenUsageEvent,\n      { tenantId, sessionId },\n      { orderBy: { createdAt: 'ASC', stepIndex: 'ASC' }, limit },\n    )\n  }\n\n  async listDailyRollup(\n    tenantId: string,\n    from: string,\n    to: string,\n    filters: { agentId?: string; modelId?: string } = {},\n  ): Promise<AiTokenUsageDaily[]> {\n    const where: Record<string, unknown> = { tenantId, day: { $gte: from, $lte: to } }\n    if (filters.agentId) where.agentId = filters.agentId\n    if (filters.modelId) where.modelId = filters.modelId\n    return this.em.find(AiTokenUsageDaily, where, {\n      orderBy: { day: 'ASC', agentId: 'ASC', modelId: 'ASC' },\n    })\n  }\n}\n"],
+  "mappings": "AACA,SAAS,mBAAmB,yBAAyB;AAgD9C,MAAM,uBAAuB;AAAA,EAClC,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA,EAEjD,MAAM,YAAY,OAA+D;AAC/E,UAAM,QAAQ,KAAK,GAAG,OAAO,mBAAmB;AAAA,MAC9C,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,QAAQ,MAAM;AAAA,MACd,SAAS,MAAM;AAAA,MACf,UAAU,MAAM;AAAA,MAChB,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM;AAAA,MACd,WAAW,MAAM;AAAA,MACjB,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,aAAa,MAAM;AAAA,MACnB,cAAc,MAAM;AAAA,MACpB,mBAAmB,MAAM,qBAAqB;AAAA,MAC9C,iBAAiB,MAAM,mBAAmB;AAAA,MAC1C,cAAc,MAAM,gBAAgB;AAAA,MACpC,iBAAiB,MAAM,mBAAmB;AAAA,IAC5C,CAAC;AACD,SAAK,GAAG,QAAQ,KAAK;AACrB,UAAM,KAAK,GAAG,MAAM;AACpB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,YAAY,OAAkD;AAClE,UAAM,aAAa,KAAK,GAAG,cAAc;AACzC,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,WAAW,MAAM,kBAAkB;AAIzC,UAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAQhB,aAAa,OAAO,4BAA4B,6BAA6B;AAAA;AAAA;AAGrF,UAAM,qBAAgC;AAAA,MACpC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AACA,QAAI,aAAa,KAAM,oBAAmB,KAAK,QAAQ;AAEvD,UAAM,cAAc,MAAM,WAAW,QAAQ,iBAAiB,oBAAoB,KAAK;AACvF,UAAM,cACJ,MAAM,QAAQ,WAAW,KACzB,YAAY,SAAS,KACpB,YAAY,CAAC,EAA8B,iBAAiB;AAE/D,UAAM,eAAe,cAAc,IAAI;AAEvC,QAAI,aAAa,MAAM;AACrB,YAAM,WAAW;AAAA,QACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAsBA;AAAA,UACE,MAAM;AAAA,UAAU;AAAA,UAAU,MAAM;AAAA,UAAK,MAAM;AAAA,UAAS,MAAM;AAAA,UAAS,MAAM;AAAA,UACzE,MAAM;AAAA,UAAa,MAAM;AAAA,UAAc,MAAM;AAAA,UAAmB,MAAM;AAAA,UACtE;AAAA,UAAc;AAAA,UAAK;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF,OAAO;AACL,YAAM,WAAW;AAAA,QACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAsBA;AAAA,UACE,MAAM;AAAA,UAAU,MAAM;AAAA,UAAK,MAAM;AAAA,UAAS,MAAM;AAAA,UAAS,MAAM;AAAA,UAC/D,MAAM;AAAA,UAAa,MAAM;AAAA,UAAc,MAAM;AAAA,UAAmB,MAAM;AAAA,UACtE;AAAA,UAAc;AAAA,UAAK;AAAA,QACrB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,qBACJ,UACA,WACA,QAAQ,KACsB;AAC9B,WAAO,KAAK,GAAG;AAAA,MACb;AAAA,MACA,EAAE,UAAU,UAAU;AAAA,MACtB,EAAE,SAAS,EAAE,WAAW,OAAO,WAAW,MAAM,GAAG,MAAM;AAAA,IAC3D;AAAA,EACF;AAAA,EAEA,MAAM,gBACJ,UACA,MACA,IACA,UAAkD,CAAC,GACrB;AAC9B,UAAM,QAAiC,EAAE,UAAU,KAAK,EAAE,MAAM,MAAM,MAAM,GAAG,EAAE;AACjF,QAAI,QAAQ,QAAS,OAAM,UAAU,QAAQ;AAC7C,QAAI,QAAQ,QAAS,OAAM,UAAU,QAAQ;AAC7C,WAAO,KAAK,GAAG,KAAK,mBAAmB,OAAO;AAAA,MAC5C,SAAS,EAAE,KAAK,OAAO,SAAS,OAAO,SAAS,MAAM;AAAA,IACxD,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/events.js

@@ -17,6 +17,14 @@ const events = [
     label: "AI Pending Action Expired",
     entity: "ai_pending_action",
     category: "system"
+  },
+  {
+    id: "ai.token_usage.recorded",
+    label: "AI Token Usage Recorded",
+    entity: "token_usage",
+    category: "system",
+    clientBroadcast: false,
+    portalBroadcast: false
   }
 ];
 const eventsConfig = createModuleEvents({

package/dist/modules/ai_assistant/events.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/ai_assistant/events.ts"],
-  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\n/**\n * AI Assistant Module Events\n *\n * Typed declarations for the pending-action lifecycle events emitted by\n * the Phase 3 WS-C mutation approval flow. The event IDs are FROZEN per\n * `BACKWARD_COMPATIBILITY.md` \u00A75 (contract surface #5) and MUST NOT be\n * renamed; additive payload changes are allowed.\n *\n * - `ai.action.confirmed` \u2014 emitted by `executePendingActionConfirm`\n *   (Step 5.8) after the `pending \u2192 confirmed \u2192 executing \u2192 {confirmed|\n *   failed}` transition. The handler's outcome lives in\n *   `executionResult`; partial-stale rows carry the surviving stale\n *   records via `failedRecords`.\n * - `ai.action.cancelled` \u2014 emitted by `executePendingActionCancel`\n *   (Step 5.9) after the atomic `pending \u2192 cancelled` transition.\n * - `ai.action.expired` \u2014 emitted by the Step 5.9 expired short-circuit\n *   AND by the Step 5.12 cleanup worker when the TTL elapses. The\n *   worker is the actor in that path, so `resolvedByUserId` is NOT part\n *   of the payload.\n */\nconst events = [\n  {\n    id: 'ai.action.confirmed',\n    label: 'AI Pending Action Confirmed',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.action.cancelled',\n    label: 'AI Pending Action Cancelled',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.action.expired',\n    label: 'AI Pending Action Expired',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n] as const\n\nexport const eventsConfig = createModuleEvents({\n  moduleId: 'ai_assistant',\n  events,\n})\n\n/** Type-safe event emitter for the ai_assistant module. */\nexport const emitAiAssistantEvent = eventsConfig.emit\n\n/** Event IDs declared by the ai_assistant module. */\nexport type AiAssistantEventId = (typeof events)[number]['id']\n\n/**\n * Typed payload contracts for each ai_assistant event. Payloads are\n * additive-only \u2014 extend existing fields rather than renaming/removing.\n */\nexport interface AiActionFailedRecordPayload {\n  recordId: string\n  error: { code: string; message: string }\n}\n\nexport interface AiActionExecutionResultPayload {\n  recordId?: string\n  commandName?: string\n  error?: { code: string; message: string }\n}\n\nexport interface AiActionConfirmedPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string\n  resolvedByUserId: string\n  resolvedAt: string\n  executionResult: AiActionExecutionResultPayload | null\n  failedRecords?: AiActionFailedRecordPayload[] | null\n}\n\nexport interface AiActionCancelledPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string\n  resolvedByUserId: string\n  resolvedAt: string\n  executionResult: AiActionExecutionResultPayload | null\n  reason?: string\n}\n\nexport interface AiActionExpiredPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string | null\n  resolvedByUserId: null\n  resolvedAt: string\n  expiresAt?: string\n  expiredAt?: string\n}\n\nexport default eventsConfig\n"],
-  "mappings": "AAAA,SAAS,0BAA0B;AAsBnC,MAAM,SAAS;AAAA,EACb;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AACF;AAEO,MAAM,eAAe,mBAAmB;AAAA,EAC7C,UAAU;AAAA,EACV;AACF,CAAC;AAGM,MAAM,uBAAuB,aAAa;AA8DjD,IAAO,iBAAQ;",
+  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\n/**\n * AI Assistant Module Events\n *\n * Typed declarations for the pending-action lifecycle events emitted by\n * the Phase 3 WS-C mutation approval flow. The event IDs are FROZEN per\n * `BACKWARD_COMPATIBILITY.md` \u00A75 (contract surface #5) and MUST NOT be\n * renamed; additive payload changes are allowed.\n *\n * - `ai.action.confirmed` \u2014 emitted by `executePendingActionConfirm`\n *   (Step 5.8) after the `pending \u2192 confirmed \u2192 executing \u2192 {confirmed|\n *   failed}` transition. The handler's outcome lives in\n *   `executionResult`; partial-stale rows carry the surviving stale\n *   records via `failedRecords`.\n * - `ai.action.cancelled` \u2014 emitted by `executePendingActionCancel`\n *   (Step 5.9) after the atomic `pending \u2192 cancelled` transition.\n * - `ai.action.expired` \u2014 emitted by the Step 5.9 expired short-circuit\n *   AND by the Step 5.12 cleanup worker when the TTL elapses. The\n *   worker is the actor in that path, so `resolvedByUserId` is NOT part\n *   of the payload.\n */\nconst events = [\n  {\n    id: 'ai.action.confirmed',\n    label: 'AI Pending Action Confirmed',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.action.cancelled',\n    label: 'AI Pending Action Cancelled',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.action.expired',\n    label: 'AI Pending Action Expired',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.token_usage.recorded',\n    label: 'AI Token Usage Recorded',\n    entity: 'token_usage',\n    category: 'system' as const,\n    clientBroadcast: false,\n    portalBroadcast: false,\n  },\n] as const\n\nexport const eventsConfig = createModuleEvents({\n  moduleId: 'ai_assistant',\n  events,\n})\n\n/** Type-safe event emitter for the ai_assistant module. */\nexport const emitAiAssistantEvent = eventsConfig.emit\n\n/** Event IDs declared by the ai_assistant module. */\nexport type AiAssistantEventId = (typeof events)[number]['id']\n\n/**\n * Typed payload contracts for each ai_assistant event. Payloads are\n * additive-only \u2014 extend existing fields rather than renaming/removing.\n */\nexport interface AiActionFailedRecordPayload {\n  recordId: string\n  error: { code: string; message: string }\n}\n\nexport interface AiActionExecutionResultPayload {\n  recordId?: string\n  commandName?: string\n  error?: { code: string; message: string }\n}\n\nexport interface AiActionConfirmedPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string\n  resolvedByUserId: string\n  resolvedAt: string\n  executionResult: AiActionExecutionResultPayload | null\n  failedRecords?: AiActionFailedRecordPayload[] | null\n}\n\nexport interface AiActionCancelledPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string\n  resolvedByUserId: string\n  resolvedAt: string\n  executionResult: AiActionExecutionResultPayload | null\n  reason?: string\n}\n\nexport interface AiActionExpiredPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string | null\n  resolvedByUserId: null\n  resolvedAt: string\n  expiresAt?: string\n  expiredAt?: string\n}\n\nexport default eventsConfig\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAsBnC,MAAM,SAAS;AAAA,EACb;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AACF;AAEO,MAAM,eAAe,mBAAmB;AAAA,EAC7C,UAAU;AAAA,EACV;AACF,CAAC;AAGM,MAAM,uBAAuB,aAAa;AA8DjD,IAAO,iBAAQ;",
   "names": []
 }

package/dist/modules/ai_assistant/i18n/de.json

@@ -8,6 +8,24 @@
   "ai_assistant.agents.empty.title": "Für Ihre Rolle sind noch keine KI-Agenten registriert.",
   "ai_assistant.agents.loadErrorTitle": "KI-Agenten konnten nicht geladen werden",
   "ai_assistant.agents.loadingAgents": "KI-Agenten werden geladen...",
+  "ai_assistant.agents.loop_policy.clear": "Überschreibung löschen",
+  "ai_assistant.agents.loop_policy.clearedMessage": "Loop-Richtlinien-Überschreibung gelöscht; Agent verwendet seine deklarierten Standardwerte.",
+  "ai_assistant.agents.loop_policy.disabledBadge": "Loop deaktiviert",
+  "ai_assistant.agents.loop_policy.errorTitle": "Loop-Richtlinie konnte nicht aktualisiert werden",
+  "ai_assistant.agents.loop_policy.killSwitchDescription": "Wenn aktiviert, läuft der Agent als einzelner Modellaufruf ohne Toolschleife.",
+  "ai_assistant.agents.loop_policy.killSwitchLabel": "Kill-Schalter",
+  "ai_assistant.agents.loop_policy.loadErrorTitle": "Loop-Richtlinie konnte nicht geladen werden",
+  "ai_assistant.agents.loop_policy.loading": "Loop-Richtlinie wird geladen...",
+  "ai_assistant.agents.loop_policy.maxStepsLabel": "Max. Schritte",
+  "ai_assistant.agents.loop_policy.maxTokensLabel": "Max. Tokens",
+  "ai_assistant.agents.loop_policy.maxToolCallsLabel": "Max. Tool-Aufrufe",
+  "ai_assistant.agents.loop_policy.maxWallClockMsLabel": "Max. Echtzeit (ms)",
+  "ai_assistant.agents.loop_policy.noOverridePlaceholder": "Keine Überschreibung",
+  "ai_assistant.agents.loop_policy.save": "Überschreibung speichern",
+  "ai_assistant.agents.loop_policy.savedMessage": "Loop-Richtlinien-Überschreibung gespeichert.",
+  "ai_assistant.agents.loop_policy.savedTitle": "Loop-Richtlinie aktualisiert",
+  "ai_assistant.agents.loop_policy.subtitle": "Legen Sie mandantenweite Budget-Limits fest oder deaktivieren Sie den agentischen Loop für diesen Agenten.",
+  "ai_assistant.agents.loop_policy.title": "Loop-Richtlinie",
   "ai_assistant.agents.meta.executionMode": "Ausführungsmodus",
   "ai_assistant.agents.meta.id": "Agenten-ID",
   "ai_assistant.agents.meta.maxSteps": "Max. Schritte",
@@ -17,6 +35,22 @@
   "ai_assistant.agents.meta.readOnlyNo": "Nein",
   "ai_assistant.agents.meta.readOnlyYes": "Ja",
   "ai_assistant.agents.meta.unlimited": "Unbegrenzt",
+  "ai_assistant.agents.model_override.allowlistCustom": "benutzerdefiniert",
+  "ai_assistant.agents.model_override.allowlistInherited": "geerbt",
+  "ai_assistant.agents.model_override.allowlistReset": "Erben",
+  "ai_assistant.agents.model_override.allowlistSave": "Auswahl speichern",
+  "ai_assistant.agents.model_override.anyProvider": "erste konfigurierte",
+  "ai_assistant.agents.model_override.clear": "Überschreibung löschen",
+  "ai_assistant.agents.model_override.codeDefault": "Im Code deklarierter Standard",
+  "ai_assistant.agents.model_override.defaultBadge": "Standard",
+  "ai_assistant.agents.model_override.model": "Modell",
+  "ai_assistant.agents.model_override.noOverride": "Keine agentenspezifische Überschreibung",
+  "ai_assistant.agents.model_override.provider": "Anbieter",
+  "ai_assistant.agents.model_override.providerDefault": "Anbieter-Standard",
+  "ai_assistant.agents.model_override.save": "Überschreibung speichern",
+  "ai_assistant.agents.model_override.saved": "Modell-Überschreibung gespeichert.",
+  "ai_assistant.agents.model_override.tenantOverride": "Mandanten-Überschreibung",
+  "ai_assistant.agents.model_override.title": "Anbieter und Modell",
   "ai_assistant.agents.mutation_policy.clear": "Überschreibung löschen",
   "ai_assistant.agents.mutation_policy.clearedMessage": "Überschreibung der Mutationsrichtlinie gelöscht; Agent verwendet die im Code deklarierte Richtlinie.",
   "ai_assistant.agents.mutation_policy.codeDeclared": "Im Code deklariert",
@@ -112,6 +146,7 @@
   "ai_assistant.allowlist.save.success": "Liste gespeichert.",
   "ai_assistant.allowlist.subtitle": "Schränke Anbieter und Modelle ein, die für diesen Mandanten verwendet werden dürfen. Die ENV-Liste ist die äußere Beschränkung — die Mandantenauswahl engt sie weiter ein.",
   "ai_assistant.allowlist.title": "Anbieter- & Modell-Allowlist",
+  "ai_assistant.chat.agentTasksTitle": "Agent-Aufgaben",
   "ai_assistant.chat.assistantRoleLabel": "Assistent",
   "ai_assistant.chat.attachFile": "Attach file",
   "ai_assistant.chat.betaChip": "beta",
@@ -257,6 +292,8 @@
   "ai_assistant.launcher.welcome.suggestion3": "Suggest things to try",
   "ai_assistant.launcher.welcome.suggestion4": "How do I use this assistant?",
   "ai_assistant.launcher.writesBadge": "Can write",
+  "ai_assistant.loop.disabledBanner.description": "Der agentische Loop wurde für diesen Agenten von einem Mandantenadministrator deaktiviert. Jeder Durchlauf wird als einzelner Modellaufruf ausgeführt. Um den Loop wieder zu aktivieren, aktualisieren Sie die Loop-Richtlinie in den KI-Assistenten-Einstellungen.",
+  "ai_assistant.loop.disabledBanner.title": "Agenten-Loop durch Mandantenrichtlinie deaktiviert",
   "ai_assistant.mcp.apiKeyLabel": "API-Schlüssel:",
   "ai_assistant.mcp.close": "Schließen",
   "ai_assistant.mcp.copied": "Kopiert!",
@@ -272,9 +309,11 @@
   "ai_assistant.modelPicker.activeBadge": "aktiv",
   "ai_assistant.modelPicker.defaultBadge": "Standard",
   "ai_assistant.modelPicker.defaultLabel": "Modell: Standard",
+  "ai_assistant.modelPicker.defaultWithModelLabel": "Standard: {{model}}",
   "ai_assistant.modelPicker.listAriaLabel": "Verfügbare Modelle",
   "ai_assistant.modelPicker.triggerAriaLabel": "KI-Modell auswählen",
   "ai_assistant.modelPicker.useDefault": "Standard des Agenten verwenden",
+  "ai_assistant.modelPicker.useDefaultWithModel": "Standard des Agenten verwenden: {{model}}",
   "ai_assistant.playground.agentPickerLabel": "Agent",
   "ai_assistant.playground.chat.notSupportedBody": "Wählen Sie einen Agenten, dessen Ausführungsmodus \"chat\" ist, oder wechseln Sie zum Objekt-Modus-Tab.",
   "ai_assistant.playground.chat.notSupportedTitle": "Chat-Modus ist für diesen Agenten nicht verfügbar.",
@@ -346,6 +385,7 @@
   "ai_assistant.settings.envKeyMissing": "{{key}} nicht gesetzt",
   "ai_assistant.settings.generateMcpConfig": "MCP-Konfiguration generieren",
   "ai_assistant.settings.generateSessionKey": "Sitzungsschlüssel generieren",
+  "ai_assistant.settings.launchDescription": "Öffnen Sie den KI-Assistenten von dieser Seite.",
   "ai_assistant.settings.llmProviderLabel": "LLM-Anbieter:",
   "ai_assistant.settings.loading": "Einstellungen werden geladen...",
   "ai_assistant.settings.mcpAuthLabel": "MCP-Authentifizierung:",
@@ -362,6 +402,7 @@
   "ai_assistant.settings.notAvailable": "Nicht verfügbar",
   "ai_assistant.settings.notConfigured": "Nicht konfiguriert",
   "ai_assistant.settings.openButton": "KI-Assistent öffnen",
+  "ai_assistant.settings.openSelectorButton": "KI-Assistenten öffnen",
   "ai_assistant.settings.pageDescription": "KI-Assistent konfigurieren und überwachen",
   "ai_assistant.settings.pageTitle": "KI-Assistent-Einstellungen",
   "ai_assistant.settings.providerColumn": "Anbieter",
@@ -382,5 +423,37 @@
   "ai_assistant.status.executing": "Tools werden ausgeführt...",
   "ai_assistant.status.responding": "Antwort wird erstellt...",
   "ai_assistant.status.thinking": "Denkt nach...",
-  "ai_assistant.status.working": "Arbeitet..."
+  "ai_assistant.status.working": "Arbeitet...",
+  "ai_assistant.usage.apply": "Anwenden",
+  "ai_assistant.usage.col.agent": "Agent",
+  "ai_assistant.usage.col.day": "Tag",
+  "ai_assistant.usage.col.finishReason": "Abschluss",
+  "ai_assistant.usage.col.inputTokens": "Eingabe",
+  "ai_assistant.usage.col.model": "Modell",
+  "ai_assistant.usage.col.outputTokens": "Ausgabe",
+  "ai_assistant.usage.col.session": "Sitzung",
+  "ai_assistant.usage.col.sessions": "Sitzungen",
+  "ai_assistant.usage.col.startedAt": "Gestartet",
+  "ai_assistant.usage.col.step": "Schritt",
+  "ai_assistant.usage.col.steps": "Schritte",
+  "ai_assistant.usage.dailyBreakdown": "Tägliche Aufschlüsselung",
+  "ai_assistant.usage.error": "Nutzungsdaten konnten nicht geladen werden.",
+  "ai_assistant.usage.errorDetail": "Sitzungsereignisse konnten nicht geladen werden.",
+  "ai_assistant.usage.errorSessions": "Sitzungen konnten nicht geladen werden.",
+  "ai_assistant.usage.from": "Von",
+  "ai_assistant.usage.inputTokens": "Eingabe-Tokens",
+  "ai_assistant.usage.loading": "Nutzungsdaten werden geladen...",
+  "ai_assistant.usage.loadingDetail": "Sitzungsereignisse werden geladen...",
+  "ai_assistant.usage.loadingSessions": "Sitzungen werden geladen...",
+  "ai_assistant.usage.navTitle": "KI-Nutzung",
+  "ai_assistant.usage.next": "Weiter",
+  "ai_assistant.usage.noSessions": "Für den ausgewählten Zeitraum wurden keine Sitzungen gefunden.",
+  "ai_assistant.usage.outputTokens": "Ausgabe-Tokens",
+  "ai_assistant.usage.prev": "Zurück",
+  "ai_assistant.usage.sessionDetail": "Sitzungsdetails",
+  "ai_assistant.usage.sessions": "Sitzungen",
+  "ai_assistant.usage.sessionsList": "Sitzungen",
+  "ai_assistant.usage.steps": "Schritte",
+  "ai_assistant.usage.title": "Token-Nutzungsstatistik",
+  "ai_assistant.usage.to": "Bis"
 }