@open-mercato/ai-assistant 0.6.1-develop.3291.1.6fad645fd0 → 0.6.1

package/dist/modules/ai_assistant/i18n/en.json

@@ -8,6 +8,24 @@
   "ai_assistant.agents.empty.title": "No AI agents are registered for your role yet.",
   "ai_assistant.agents.loadErrorTitle": "Failed to load AI agents",
   "ai_assistant.agents.loadingAgents": "Loading AI agents...",
+  "ai_assistant.agents.loop_policy.clear": "Clear override",
+  "ai_assistant.agents.loop_policy.clearedMessage": "Loop policy override cleared; agent is using its declared defaults.",
+  "ai_assistant.agents.loop_policy.disabledBadge": "Loop disabled",
+  "ai_assistant.agents.loop_policy.errorTitle": "Failed to update loop policy",
+  "ai_assistant.agents.loop_policy.killSwitchDescription": "When enabled, the agent runs as a single model call with no tool loop.",
+  "ai_assistant.agents.loop_policy.killSwitchLabel": "Kill switch",
+  "ai_assistant.agents.loop_policy.loadErrorTitle": "Failed to load loop policy",
+  "ai_assistant.agents.loop_policy.loading": "Loading loop policy...",
+  "ai_assistant.agents.loop_policy.maxStepsLabel": "Max steps",
+  "ai_assistant.agents.loop_policy.maxTokensLabel": "Max tokens",
+  "ai_assistant.agents.loop_policy.maxToolCallsLabel": "Max tool calls",
+  "ai_assistant.agents.loop_policy.maxWallClockMsLabel": "Max wall-clock (ms)",
+  "ai_assistant.agents.loop_policy.noOverridePlaceholder": "No override",
+  "ai_assistant.agents.loop_policy.save": "Save override",
+  "ai_assistant.agents.loop_policy.savedMessage": "Loop policy override saved.",
+  "ai_assistant.agents.loop_policy.savedTitle": "Loop policy updated",
+  "ai_assistant.agents.loop_policy.subtitle": "Set per-tenant budget limits or disable the agentic loop for this agent.",
+  "ai_assistant.agents.loop_policy.title": "Loop policy",
   "ai_assistant.agents.meta.executionMode": "Execution mode",
   "ai_assistant.agents.meta.id": "Agent id",
   "ai_assistant.agents.meta.maxSteps": "Max steps",
@@ -17,6 +35,22 @@
   "ai_assistant.agents.meta.readOnlyNo": "No",
   "ai_assistant.agents.meta.readOnlyYes": "Yes",
   "ai_assistant.agents.meta.unlimited": "Unlimited",
+  "ai_assistant.agents.model_override.allowlistCustom": "custom",
+  "ai_assistant.agents.model_override.allowlistInherited": "inherited",
+  "ai_assistant.agents.model_override.allowlistReset": "Inherit",
+  "ai_assistant.agents.model_override.allowlistSave": "Save choices",
+  "ai_assistant.agents.model_override.anyProvider": "first configured",
+  "ai_assistant.agents.model_override.clear": "Clear override",
+  "ai_assistant.agents.model_override.codeDefault": "Code-declared default",
+  "ai_assistant.agents.model_override.defaultBadge": "default",
+  "ai_assistant.agents.model_override.model": "Model",
+  "ai_assistant.agents.model_override.noOverride": "No per-agent override",
+  "ai_assistant.agents.model_override.provider": "Provider",
+  "ai_assistant.agents.model_override.providerDefault": "provider default",
+  "ai_assistant.agents.model_override.save": "Save override",
+  "ai_assistant.agents.model_override.saved": "Model override saved.",
+  "ai_assistant.agents.model_override.tenantOverride": "Tenant override",
+  "ai_assistant.agents.model_override.title": "Provider and model",
   "ai_assistant.agents.mutation_policy.clear": "Clear override",
   "ai_assistant.agents.mutation_policy.clearedMessage": "Mutation policy override cleared; agent is using its code-declared policy.",
   "ai_assistant.agents.mutation_policy.codeDeclared": "Code-declared",
@@ -112,6 +146,7 @@
   "ai_assistant.allowlist.save.success": "Allowlist saved.",
   "ai_assistant.allowlist.subtitle": "Limit which providers and models the runtime, settings, and chat picker may use for this tenant. The env allowlist is the outer constraint — tenant picks narrow it further.",
   "ai_assistant.allowlist.title": "AI provider & model allowlist",
+  "ai_assistant.chat.agentTasksTitle": "Agent tasks",
   "ai_assistant.chat.assistantRoleLabel": "Assistant",
   "ai_assistant.chat.attachFile": "Attach file",
   "ai_assistant.chat.betaChip": "beta",
@@ -257,6 +292,8 @@
   "ai_assistant.launcher.welcome.suggestion3": "Suggest things to try",
   "ai_assistant.launcher.welcome.suggestion4": "How do I use this assistant?",
   "ai_assistant.launcher.writesBadge": "Can write",
+  "ai_assistant.loop.disabledBanner.description": "The agentic loop has been disabled for this agent by a tenant administrator. Each turn runs as a single model call. To re-enable the loop, update the Loop policy in AI assistant settings.",
+  "ai_assistant.loop.disabledBanner.title": "Agent loop disabled by tenant policy",
   "ai_assistant.mcp.apiKeyLabel": "API Key:",
   "ai_assistant.mcp.close": "Close",
   "ai_assistant.mcp.copied": "Copied!",
@@ -272,9 +309,11 @@
   "ai_assistant.modelPicker.activeBadge": "active",
   "ai_assistant.modelPicker.defaultBadge": "default",
   "ai_assistant.modelPicker.defaultLabel": "Model: Default",
+  "ai_assistant.modelPicker.defaultWithModelLabel": "Default: {{model}}",
   "ai_assistant.modelPicker.listAriaLabel": "Available models",
   "ai_assistant.modelPicker.triggerAriaLabel": "Select AI model",
   "ai_assistant.modelPicker.useDefault": "Use agent default",
+  "ai_assistant.modelPicker.useDefaultWithModel": "Use agent default: {{model}}",
   "ai_assistant.playground.agentPickerLabel": "Agent",
   "ai_assistant.playground.chat.notSupportedBody": "Pick an agent whose execution mode is \"chat\", or switch to the object-mode tab.",
   "ai_assistant.playground.chat.notSupportedTitle": "Chat mode is not available for this agent.",
@@ -346,6 +385,7 @@
   "ai_assistant.settings.envKeyMissing": "{{key}} not set",
   "ai_assistant.settings.generateMcpConfig": "Generate MCP Config",
   "ai_assistant.settings.generateSessionKey": "Generate Session Key",
+  "ai_assistant.settings.launchDescription": "Open the AI assistant from this page.",
   "ai_assistant.settings.llmProviderLabel": "LLM Provider:",
   "ai_assistant.settings.loading": "Loading settings...",
   "ai_assistant.settings.mcpAuthLabel": "MCP Authentication:",
@@ -362,6 +402,7 @@
   "ai_assistant.settings.notAvailable": "Not available",
   "ai_assistant.settings.notConfigured": "Not configured",
   "ai_assistant.settings.openButton": "Open AI Assistant",
+  "ai_assistant.settings.openSelectorButton": "Open AI assistants",
   "ai_assistant.settings.pageDescription": "Configure and monitor the AI assistant",
   "ai_assistant.settings.pageTitle": "AI Assistant Settings",
   "ai_assistant.settings.providerColumn": "Provider",
@@ -382,5 +423,37 @@
   "ai_assistant.status.executing": "Executing tools...",
   "ai_assistant.status.responding": "Responding...",
   "ai_assistant.status.thinking": "Thinking...",
-  "ai_assistant.status.working": "Working..."
+  "ai_assistant.status.working": "Working...",
+  "ai_assistant.usage.apply": "Apply",
+  "ai_assistant.usage.col.agent": "Agent",
+  "ai_assistant.usage.col.day": "Day",
+  "ai_assistant.usage.col.finishReason": "Finish",
+  "ai_assistant.usage.col.inputTokens": "Input",
+  "ai_assistant.usage.col.model": "Model",
+  "ai_assistant.usage.col.outputTokens": "Output",
+  "ai_assistant.usage.col.session": "Session",
+  "ai_assistant.usage.col.sessions": "Sessions",
+  "ai_assistant.usage.col.startedAt": "Started",
+  "ai_assistant.usage.col.step": "Step",
+  "ai_assistant.usage.col.steps": "Steps",
+  "ai_assistant.usage.dailyBreakdown": "Daily breakdown",
+  "ai_assistant.usage.error": "Failed to load usage data.",
+  "ai_assistant.usage.errorDetail": "Failed to load session events.",
+  "ai_assistant.usage.errorSessions": "Failed to load sessions.",
+  "ai_assistant.usage.from": "From",
+  "ai_assistant.usage.inputTokens": "Input tokens",
+  "ai_assistant.usage.loading": "Loading usage data...",
+  "ai_assistant.usage.loadingDetail": "Loading session events...",
+  "ai_assistant.usage.loadingSessions": "Loading sessions...",
+  "ai_assistant.usage.navTitle": "AI Usage",
+  "ai_assistant.usage.next": "Next",
+  "ai_assistant.usage.noSessions": "No sessions found for the selected period.",
+  "ai_assistant.usage.outputTokens": "Output tokens",
+  "ai_assistant.usage.prev": "Previous",
+  "ai_assistant.usage.sessionDetail": "Session detail",
+  "ai_assistant.usage.sessions": "Sessions",
+  "ai_assistant.usage.sessionsList": "Sessions",
+  "ai_assistant.usage.steps": "Steps",
+  "ai_assistant.usage.title": "Token Usage Statistics",
+  "ai_assistant.usage.to": "To"
 }

package/dist/modules/ai_assistant/i18n/es.json

@@ -8,6 +8,24 @@
   "ai_assistant.agents.empty.title": "Todavía no hay agentes de IA registrados para su rol.",
   "ai_assistant.agents.loadErrorTitle": "No se pudieron cargar los agentes de IA",
   "ai_assistant.agents.loadingAgents": "Cargando agentes de IA...",
+  "ai_assistant.agents.loop_policy.clear": "Limpiar anulación",
+  "ai_assistant.agents.loop_policy.clearedMessage": "Anulación de política de bucle eliminada; el agente usa sus valores predeterminados declarados.",
+  "ai_assistant.agents.loop_policy.disabledBadge": "Bucle desactivado",
+  "ai_assistant.agents.loop_policy.errorTitle": "Error al actualizar la política de bucle",
+  "ai_assistant.agents.loop_policy.killSwitchDescription": "Cuando está activado, el agente se ejecuta como una sola llamada al modelo sin bucle de herramientas.",
+  "ai_assistant.agents.loop_policy.killSwitchLabel": "Interruptor de emergencia",
+  "ai_assistant.agents.loop_policy.loadErrorTitle": "Error al cargar la política de bucle",
+  "ai_assistant.agents.loop_policy.loading": "Cargando política de bucle...",
+  "ai_assistant.agents.loop_policy.maxStepsLabel": "Máx. pasos",
+  "ai_assistant.agents.loop_policy.maxTokensLabel": "Máx. tokens",
+  "ai_assistant.agents.loop_policy.maxToolCallsLabel": "Máx. llamadas a herramientas",
+  "ai_assistant.agents.loop_policy.maxWallClockMsLabel": "Máx. tiempo real (ms)",
+  "ai_assistant.agents.loop_policy.noOverridePlaceholder": "Sin anulación",
+  "ai_assistant.agents.loop_policy.save": "Guardar anulación",
+  "ai_assistant.agents.loop_policy.savedMessage": "Anulación de política de bucle guardada.",
+  "ai_assistant.agents.loop_policy.savedTitle": "Política de bucle actualizada",
+  "ai_assistant.agents.loop_policy.subtitle": "Establezca límites de presupuesto por inquilino o desactive el bucle agentivo para este agente.",
+  "ai_assistant.agents.loop_policy.title": "Política de bucle",
   "ai_assistant.agents.meta.executionMode": "Modo de ejecución",
   "ai_assistant.agents.meta.id": "ID del agente",
   "ai_assistant.agents.meta.maxSteps": "Pasos máx.",
@@ -17,6 +35,22 @@
   "ai_assistant.agents.meta.readOnlyNo": "No",
   "ai_assistant.agents.meta.readOnlyYes": "Sí",
   "ai_assistant.agents.meta.unlimited": "Sin límite",
+  "ai_assistant.agents.model_override.allowlistCustom": "personalizado",
+  "ai_assistant.agents.model_override.allowlistInherited": "heredado",
+  "ai_assistant.agents.model_override.allowlistReset": "Heredar",
+  "ai_assistant.agents.model_override.allowlistSave": "Guardar opciones",
+  "ai_assistant.agents.model_override.anyProvider": "primer configurado",
+  "ai_assistant.agents.model_override.clear": "Eliminar sobrescritura",
+  "ai_assistant.agents.model_override.codeDefault": "Predeterminado declarado en código",
+  "ai_assistant.agents.model_override.defaultBadge": "predeterminado",
+  "ai_assistant.agents.model_override.model": "Modelo",
+  "ai_assistant.agents.model_override.noOverride": "Sin sobrescritura por agente",
+  "ai_assistant.agents.model_override.provider": "Proveedor",
+  "ai_assistant.agents.model_override.providerDefault": "predeterminado del proveedor",
+  "ai_assistant.agents.model_override.save": "Guardar sobrescritura",
+  "ai_assistant.agents.model_override.saved": "Sobrescritura de modelo guardada.",
+  "ai_assistant.agents.model_override.tenantOverride": "Sobrescritura del tenant",
+  "ai_assistant.agents.model_override.title": "Proveedor y modelo",
   "ai_assistant.agents.mutation_policy.clear": "Eliminar sobrescritura",
   "ai_assistant.agents.mutation_policy.clearedMessage": "Sobrescritura de política de mutación eliminada; el agente usa la política declarada en el código.",
   "ai_assistant.agents.mutation_policy.codeDeclared": "Declarada en el código",
@@ -112,6 +146,7 @@
   "ai_assistant.allowlist.save.success": "Lista guardada.",
   "ai_assistant.allowlist.subtitle": "Limita los proveedores y modelos que el runtime, los ajustes y el selector de chat pueden usar para este inquilino. La lista ENV es la restricción externa — las elecciones del inquilino la reducen.",
   "ai_assistant.allowlist.title": "Lista de proveedores y modelos AI",
+  "ai_assistant.chat.agentTasksTitle": "Tareas del agente",
   "ai_assistant.chat.assistantRoleLabel": "Asistente",
   "ai_assistant.chat.attachFile": "Attach file",
   "ai_assistant.chat.betaChip": "beta",
@@ -257,6 +292,8 @@
   "ai_assistant.launcher.welcome.suggestion3": "Suggest things to try",
   "ai_assistant.launcher.welcome.suggestion4": "How do I use this assistant?",
   "ai_assistant.launcher.writesBadge": "Can write",
+  "ai_assistant.loop.disabledBanner.description": "El bucle agentivo ha sido desactivado para este agente por un administrador del inquilino. Cada turno se ejecuta como una sola llamada al modelo. Para volver a habilitar el bucle, actualice la Política de bucle en la configuración del asistente de IA.",
+  "ai_assistant.loop.disabledBanner.title": "Bucle de agente desactivado por política del inquilino",
   "ai_assistant.mcp.apiKeyLabel": "API Key:",
   "ai_assistant.mcp.close": "Cerrar",
   "ai_assistant.mcp.copied": "Copiado",
@@ -271,10 +308,12 @@
   "ai_assistant.mcp.title": "Configuración MCP",
   "ai_assistant.modelPicker.activeBadge": "activo",
   "ai_assistant.modelPicker.defaultBadge": "predeterminado",
-  "ai_assistant.modelPicker.defaultLabel": "Predeterminado ({{provider}} / {{model}})",
+  "ai_assistant.modelPicker.defaultLabel": "Modelo: Predeterminado",
+  "ai_assistant.modelPicker.defaultWithModelLabel": "Predeterminado: {{model}}",
   "ai_assistant.modelPicker.listAriaLabel": "Seleccionar proveedor y modelo",
   "ai_assistant.modelPicker.triggerAriaLabel": "Selector de modelo de IA",
   "ai_assistant.modelPicker.useDefault": "Usar predeterminado",
+  "ai_assistant.modelPicker.useDefaultWithModel": "Usar predeterminado del agente: {{model}}",
   "ai_assistant.playground.agentPickerLabel": "Agente",
   "ai_assistant.playground.chat.notSupportedBody": "Elija un agente cuyo modo de ejecución sea \"chat\" o cambie a la pestaña de modo objeto.",
   "ai_assistant.playground.chat.notSupportedTitle": "El modo chat no está disponible para este agente.",
@@ -346,6 +385,7 @@
   "ai_assistant.settings.envKeyMissing": "Variable de entorno no configurada",
   "ai_assistant.settings.generateMcpConfig": "Generar configuración MCP",
   "ai_assistant.settings.generateSessionKey": "Generar clave de sesión",
+  "ai_assistant.settings.launchDescription": "Abra el asistente de IA desde esta página.",
   "ai_assistant.settings.llmProviderLabel": "Proveedor LLM",
   "ai_assistant.settings.loading": "Cargando ajustes...",
   "ai_assistant.settings.mcpAuthLabel": "Autenticación MCP",
@@ -362,6 +402,7 @@
   "ai_assistant.settings.notAvailable": "N/D",
   "ai_assistant.settings.notConfigured": "No configurado",
   "ai_assistant.settings.openButton": "Abrir",
+  "ai_assistant.settings.openSelectorButton": "Abrir asistentes de IA",
   "ai_assistant.settings.pageDescription": "Configure los proveedores de IA, las sobrescrituras de modelo y las herramientas de desarrollador.",
   "ai_assistant.settings.pageTitle": "Configuración del asistente de IA",
   "ai_assistant.settings.providerColumn": "Proveedor",
@@ -382,5 +423,37 @@
   "ai_assistant.status.executing": "Ejecutando herramientas...",
   "ai_assistant.status.responding": "Respondiendo...",
   "ai_assistant.status.thinking": "Pensando...",
-  "ai_assistant.status.working": "Procesando..."
+  "ai_assistant.status.working": "Procesando...",
+  "ai_assistant.usage.apply": "Aplicar",
+  "ai_assistant.usage.col.agent": "Agente",
+  "ai_assistant.usage.col.day": "Día",
+  "ai_assistant.usage.col.finishReason": "Final",
+  "ai_assistant.usage.col.inputTokens": "Entrada",
+  "ai_assistant.usage.col.model": "Modelo",
+  "ai_assistant.usage.col.outputTokens": "Salida",
+  "ai_assistant.usage.col.session": "Sesión",
+  "ai_assistant.usage.col.sessions": "Sesiones",
+  "ai_assistant.usage.col.startedAt": "Inicio",
+  "ai_assistant.usage.col.step": "Paso",
+  "ai_assistant.usage.col.steps": "Pasos",
+  "ai_assistant.usage.dailyBreakdown": "Desglose diario",
+  "ai_assistant.usage.error": "No se pudieron cargar los datos de uso.",
+  "ai_assistant.usage.errorDetail": "No se pudieron cargar los eventos de sesión.",
+  "ai_assistant.usage.errorSessions": "No se pudieron cargar las sesiones.",
+  "ai_assistant.usage.from": "Desde",
+  "ai_assistant.usage.inputTokens": "Tokens de entrada",
+  "ai_assistant.usage.loading": "Cargando datos de uso...",
+  "ai_assistant.usage.loadingDetail": "Cargando eventos de sesión...",
+  "ai_assistant.usage.loadingSessions": "Cargando sesiones...",
+  "ai_assistant.usage.navTitle": "Uso de IA",
+  "ai_assistant.usage.next": "Siguiente",
+  "ai_assistant.usage.noSessions": "No se encontraron sesiones para el período seleccionado.",
+  "ai_assistant.usage.outputTokens": "Tokens de salida",
+  "ai_assistant.usage.prev": "Anterior",
+  "ai_assistant.usage.sessionDetail": "Detalle de sesión",
+  "ai_assistant.usage.sessions": "Sesiones",
+  "ai_assistant.usage.sessionsList": "Sesiones",
+  "ai_assistant.usage.steps": "Pasos",
+  "ai_assistant.usage.title": "Estadísticas de uso de tokens",
+  "ai_assistant.usage.to": "Hasta"
 }

package/dist/modules/ai_assistant/i18n/pl.json

@@ -8,6 +8,24 @@
   "ai_assistant.agents.empty.title": "Brak zarejestrowanych agentów AI dla Twojej roli.",
   "ai_assistant.agents.loadErrorTitle": "Nie udało się wczytać agentów AI",
   "ai_assistant.agents.loadingAgents": "Wczytywanie agentów AI...",
+  "ai_assistant.agents.loop_policy.clear": "Wyczyść nadpisanie",
+  "ai_assistant.agents.loop_policy.clearedMessage": "Nadpisanie polityki pętli wyczyszczone; agent używa swoich domyślnych ustawień.",
+  "ai_assistant.agents.loop_policy.disabledBadge": "Pętla wyłączona",
+  "ai_assistant.agents.loop_policy.errorTitle": "Nie udało się zaktualizować polityki pętli",
+  "ai_assistant.agents.loop_policy.killSwitchDescription": "Po włączeniu agent działa jako pojedyncze wywołanie modelu bez pętli narzędziowej.",
+  "ai_assistant.agents.loop_policy.killSwitchLabel": "Wyłącznik awaryjny",
+  "ai_assistant.agents.loop_policy.loadErrorTitle": "Nie udało się załadować polityki pętli",
+  "ai_assistant.agents.loop_policy.loading": "Ładowanie polityki pętli...",
+  "ai_assistant.agents.loop_policy.maxStepsLabel": "Maks. kroków",
+  "ai_assistant.agents.loop_policy.maxTokensLabel": "Maks. tokenów",
+  "ai_assistant.agents.loop_policy.maxToolCallsLabel": "Maks. wywołań narzędzi",
+  "ai_assistant.agents.loop_policy.maxWallClockMsLabel": "Maks. czas rzeczywisty (ms)",
+  "ai_assistant.agents.loop_policy.noOverridePlaceholder": "Brak nadpisania",
+  "ai_assistant.agents.loop_policy.save": "Zapisz nadpisanie",
+  "ai_assistant.agents.loop_policy.savedMessage": "Nadpisanie polityki pętli zapisane.",
+  "ai_assistant.agents.loop_policy.savedTitle": "Polityka pętli zaktualizowana",
+  "ai_assistant.agents.loop_policy.subtitle": "Ustaw limity budżetu na poziomie dzierżawcy lub wyłącz agentyczną pętlę dla tego agenta.",
+  "ai_assistant.agents.loop_policy.title": "Polityka pętli",
   "ai_assistant.agents.meta.executionMode": "Tryb wykonywania",
   "ai_assistant.agents.meta.id": "Identyfikator agenta",
   "ai_assistant.agents.meta.maxSteps": "Maks. kroków",
@@ -17,6 +35,22 @@
   "ai_assistant.agents.meta.readOnlyNo": "Nie",
   "ai_assistant.agents.meta.readOnlyYes": "Tak",
   "ai_assistant.agents.meta.unlimited": "Bez limitu",
+  "ai_assistant.agents.model_override.allowlistCustom": "niestandardowe",
+  "ai_assistant.agents.model_override.allowlistInherited": "dziedziczone",
+  "ai_assistant.agents.model_override.allowlistReset": "Dziedzicz",
+  "ai_assistant.agents.model_override.allowlistSave": "Zapisz wybór",
+  "ai_assistant.agents.model_override.anyProvider": "pierwszy skonfigurowany",
+  "ai_assistant.agents.model_override.clear": "Wyczyść nadpisanie",
+  "ai_assistant.agents.model_override.codeDefault": "Domyślne z kodu",
+  "ai_assistant.agents.model_override.defaultBadge": "domyślne",
+  "ai_assistant.agents.model_override.model": "Model",
+  "ai_assistant.agents.model_override.noOverride": "Brak nadpisania dla agenta",
+  "ai_assistant.agents.model_override.provider": "Dostawca",
+  "ai_assistant.agents.model_override.providerDefault": "domyślne dostawcy",
+  "ai_assistant.agents.model_override.save": "Zapisz nadpisanie",
+  "ai_assistant.agents.model_override.saved": "Nadpisanie modelu zapisane.",
+  "ai_assistant.agents.model_override.tenantOverride": "Nadpisanie tenant",
+  "ai_assistant.agents.model_override.title": "Dostawca i model",
   "ai_assistant.agents.mutation_policy.clear": "Wyczyść nadpisanie",
   "ai_assistant.agents.mutation_policy.clearedMessage": "Nadpisanie polityki mutacji usunięte; agent korzysta z polityki zadeklarowanej w kodzie.",
   "ai_assistant.agents.mutation_policy.codeDeclared": "Zadeklarowane w kodzie",
@@ -112,6 +146,7 @@
   "ai_assistant.allowlist.save.success": "Lista zapisana.",
   "ai_assistant.allowlist.subtitle": "Ogranicz dostawców i modele dostępne dla tego najemcy. Lista ENV jest zewnętrznym ograniczeniem — wybory najemcy je zawężają.",
   "ai_assistant.allowlist.title": "Lista dozwolonych dostawców i modeli AI",
+  "ai_assistant.chat.agentTasksTitle": "Zadania agenta",
   "ai_assistant.chat.assistantRoleLabel": "Asystent",
   "ai_assistant.chat.attachFile": "Attach file",
   "ai_assistant.chat.betaChip": "beta",
@@ -257,6 +292,8 @@
   "ai_assistant.launcher.welcome.suggestion3": "Suggest things to try",
   "ai_assistant.launcher.welcome.suggestion4": "How do I use this assistant?",
   "ai_assistant.launcher.writesBadge": "Can write",
+  "ai_assistant.loop.disabledBanner.description": "Agentyczna pętla została wyłączona dla tego agenta przez administratora dzierżawcy. Każda tura wykonywana jest jako pojedyncze wywołanie modelu. Aby ponownie włączyć pętlę, zaktualizuj politykę pętli w ustawieniach asystenta AI.",
+  "ai_assistant.loop.disabledBanner.title": "Pętla agenta wyłączona przez politykę dzierżawcy",
   "ai_assistant.mcp.apiKeyLabel": "Klucz API:",
   "ai_assistant.mcp.close": "Zamknij",
   "ai_assistant.mcp.copied": "Skopiowano!",
@@ -272,9 +309,11 @@
   "ai_assistant.modelPicker.activeBadge": "aktywny",
   "ai_assistant.modelPicker.defaultBadge": "domyślny",
   "ai_assistant.modelPicker.defaultLabel": "Model: Domyślny",
+  "ai_assistant.modelPicker.defaultWithModelLabel": "Domyślnie: {{model}}",
   "ai_assistant.modelPicker.listAriaLabel": "Dostępne modele",
   "ai_assistant.modelPicker.triggerAriaLabel": "Wybierz model AI",
   "ai_assistant.modelPicker.useDefault": "Użyj domyślnego agenta",
+  "ai_assistant.modelPicker.useDefaultWithModel": "Użyj domyślnego agenta: {{model}}",
   "ai_assistant.playground.agentPickerLabel": "Agent",
   "ai_assistant.playground.chat.notSupportedBody": "Wybierz agenta, którego tryb wykonywania to \"chat\", lub przełącz się na zakładkę trybu obiektowego.",
   "ai_assistant.playground.chat.notSupportedTitle": "Tryb czatu nie jest dostępny dla tego agenta.",
@@ -346,6 +385,7 @@
   "ai_assistant.settings.envKeyMissing": "{{key}} nie ustawiony",
   "ai_assistant.settings.generateMcpConfig": "Generuj konfigurację MCP",
   "ai_assistant.settings.generateSessionKey": "Generuj klucz sesji",
+  "ai_assistant.settings.launchDescription": "Otwórz asystenta AI z tej strony.",
   "ai_assistant.settings.llmProviderLabel": "Dostawca LLM:",
   "ai_assistant.settings.loading": "Wczytywanie ustawień...",
   "ai_assistant.settings.mcpAuthLabel": "Uwierzytelnianie MCP:",
@@ -362,6 +402,7 @@
   "ai_assistant.settings.notAvailable": "Niedostępny",
   "ai_assistant.settings.notConfigured": "Nieskonfigurowany",
   "ai_assistant.settings.openButton": "Otwórz asystenta AI",
+  "ai_assistant.settings.openSelectorButton": "Otwórz asystentów AI",
   "ai_assistant.settings.pageDescription": "Konfiguruj i monitoruj asystenta AI",
   "ai_assistant.settings.pageTitle": "Ustawienia asystenta AI",
   "ai_assistant.settings.providerColumn": "Dostawca",
@@ -382,5 +423,37 @@
   "ai_assistant.status.executing": "Wykonywanie narzędzi...",
   "ai_assistant.status.responding": "Odpowiadanie...",
   "ai_assistant.status.thinking": "Myślenie...",
-  "ai_assistant.status.working": "Przetwarzanie..."
+  "ai_assistant.status.working": "Przetwarzanie...",
+  "ai_assistant.usage.apply": "Zastosuj",
+  "ai_assistant.usage.col.agent": "Agent",
+  "ai_assistant.usage.col.day": "Dzień",
+  "ai_assistant.usage.col.finishReason": "Zakończenie",
+  "ai_assistant.usage.col.inputTokens": "Wejście",
+  "ai_assistant.usage.col.model": "Model",
+  "ai_assistant.usage.col.outputTokens": "Wyjście",
+  "ai_assistant.usage.col.session": "Sesja",
+  "ai_assistant.usage.col.sessions": "Sesje",
+  "ai_assistant.usage.col.startedAt": "Start",
+  "ai_assistant.usage.col.step": "Krok",
+  "ai_assistant.usage.col.steps": "Kroki",
+  "ai_assistant.usage.dailyBreakdown": "Podział dzienny",
+  "ai_assistant.usage.error": "Nie udało się wczytać danych użycia.",
+  "ai_assistant.usage.errorDetail": "Nie udało się wczytać zdarzeń sesji.",
+  "ai_assistant.usage.errorSessions": "Nie udało się wczytać sesji.",
+  "ai_assistant.usage.from": "Od",
+  "ai_assistant.usage.inputTokens": "Tokeny wejściowe",
+  "ai_assistant.usage.loading": "Wczytywanie danych użycia...",
+  "ai_assistant.usage.loadingDetail": "Wczytywanie zdarzeń sesji...",
+  "ai_assistant.usage.loadingSessions": "Wczytywanie sesji...",
+  "ai_assistant.usage.navTitle": "Użycie AI",
+  "ai_assistant.usage.next": "Następna",
+  "ai_assistant.usage.noSessions": "Nie znaleziono sesji dla wybranego okresu.",
+  "ai_assistant.usage.outputTokens": "Tokeny wyjściowe",
+  "ai_assistant.usage.prev": "Poprzednia",
+  "ai_assistant.usage.sessionDetail": "Szczegóły sesji",
+  "ai_assistant.usage.sessions": "Sesje",
+  "ai_assistant.usage.sessionsList": "Sesje",
+  "ai_assistant.usage.steps": "Kroki",
+  "ai_assistant.usage.title": "Statystyki użycia tokenów",
+  "ai_assistant.usage.to": "Do"
 }

package/dist/modules/ai_assistant/lib/agent-policy.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/ai_assistant/lib/agent-policy.ts"],
-  "sourcesContent": ["import { getAgent } from './agent-registry'\nimport { hasRequiredFeatures } from './auth'\nimport { toolRegistry } from './tool-registry'\nimport type {\n  AiAgentAcceptedMediaType,\n  AiAgentDefinition,\n  AiAgentMutationPolicy,\n} from './ai-agent-definition'\nimport type { AiToolDefinition } from './types'\n\nexport type AgentPolicyDenyCode =\n  | 'agent_unknown'\n  | 'agent_features_denied'\n  | 'tool_not_whitelisted'\n  | 'tool_unknown'\n  | 'tool_features_denied'\n  | 'mutation_blocked_by_readonly'\n  | 'mutation_blocked_by_policy'\n  | 'execution_mode_not_supported'\n  | 'attachment_type_not_accepted'\n\nexport type AgentPolicyDecision =\n  | { ok: true; agent: AiAgentDefinition; tool?: AiToolDefinition }\n  | { ok: false; code: AgentPolicyDenyCode; message: string }\n\nexport interface AgentPolicyAuthContext {\n  userFeatures: string[]\n  isSuperAdmin: boolean\n}\n\nexport interface AgentPolicyCheckInput {\n  agentId: string\n  authContext: AgentPolicyAuthContext\n  toolName?: string\n  attachmentMediaTypes?: string[]\n  requestedExecutionMode?: 'chat' | 'object'\n  /**\n   * Optional tenant-scoped downgrade for the agent's code-declared\n   * `mutationPolicy`. When supplied, the effective policy is the MOST\n   * RESTRICTIVE of `{ code-declared, override }` \u2014 escalation is never\n   * allowed through this channel (that is enforced at the route layer).\n   * Callers that omit this field get the exact pre-Step-5.4 behavior.\n   */\n  mutationPolicyOverride?: AiAgentMutationPolicy | null\n}\n\n/**\n * Restrictiveness ranking of `AiAgentMutationPolicy` (most restrictive first).\n * `read-only` blocks all mutation tools. `destructive-confirm-required` forces\n * confirmation for every write (including non-destructive ones). `confirm-required`\n * is the least restrictive policy \u2014 writes go through a single confirmation.\n *\n * This ordering is load-bearing for both the runtime's effective-policy\n * computation AND the route-layer escalation guard. Changing the order is a\n * security-sensitive change.\n */\nconst POLICY_RESTRICTIVENESS: Record<AiAgentMutationPolicy, number> = {\n  'read-only': 0,\n  'destructive-confirm-required': 1,\n  'confirm-required': 2,\n}\n\nexport function isKnownMutationPolicy(value: unknown): value is AiAgentMutationPolicy {\n  return (\n    value === 'read-only' ||\n    value === 'confirm-required' ||\n    value === 'destructive-confirm-required'\n  )\n}\n\n/**\n * Returns the effective mutation policy \u2014 the MOST RESTRICTIVE of\n * `{ codeDeclared, override }`. Missing override \u2192 `codeDeclared`. A corrupt\n * override value (unknown string from DB) is logged and falls back to\n * `codeDeclared` so the system fails SAFE when a schema drift leaks through.\n */\nexport function resolveEffectiveMutationPolicy(\n  codeDeclared: AiAgentMutationPolicy | undefined,\n  override: AiAgentMutationPolicy | null | undefined,\n  agentId?: string,\n): AiAgentMutationPolicy {\n  const base: AiAgentMutationPolicy =\n    codeDeclared && isKnownMutationPolicy(codeDeclared) ? codeDeclared : 'read-only'\n  if (override === undefined || override === null) return base\n  if (!isKnownMutationPolicy(override)) {\n    console.warn(\n      `[AI Agents] Ignoring corrupt mutationPolicy override for agent \"${agentId ?? '<unknown>'}\": ${String(\n        override,\n      )}. Falling back to code-declared policy \"${base}\".`,\n    )\n    return base\n  }\n  const baseRank = POLICY_RESTRICTIVENESS[base]\n  const overrideRank = POLICY_RESTRICTIVENESS[override]\n  return overrideRank < baseRank ? override : base\n}\n\n/**\n * Returns `true` when `candidate` would WIDEN `codeDeclared` \u2014 i.e. would\n * grant the agent more mutation surface than its code declares. Used by the\n * mutation-policy override route to reject escalation attempts with 400.\n */\nexport function isMutationPolicyEscalation(\n  codeDeclared: AiAgentMutationPolicy | undefined,\n  candidate: AiAgentMutationPolicy,\n): boolean {\n  const base: AiAgentMutationPolicy =\n    codeDeclared && isKnownMutationPolicy(codeDeclared) ? codeDeclared : 'read-only'\n  return POLICY_RESTRICTIVENESS[candidate] > POLICY_RESTRICTIVENESS[base]\n}\n\nfunction classifyMediaType(value: string): AiAgentAcceptedMediaType {\n  const normalized = value.trim().toLowerCase()\n  if (normalized.startsWith('image/')) return 'image'\n  if (normalized === 'application/pdf') return 'pdf'\n  return 'file'\n}\n\nfunction isAgentReadOnly(agent: AiAgentDefinition): boolean {\n  if (typeof agent.readOnly === 'boolean') return agent.readOnly\n  return true\n}\n\n/**\n * Returns the effective mutation policy for a policy-check invocation \u2014 the\n * most restrictive of `{ agent.mutationPolicy, input.mutationPolicyOverride }`.\n * Pure-lookup helper; no I/O. Callers that need to know the same value outside\n * of a policy check should use {@link resolveEffectiveMutationPolicy} directly.\n */\nfunction resolvePolicyCheckMutationPolicy(\n  agent: AiAgentDefinition,\n  override: AiAgentMutationPolicy | null | undefined,\n): AiAgentMutationPolicy {\n  return resolveEffectiveMutationPolicy(agent.mutationPolicy, override, agent.id)\n}\n\nfunction hasAgentStructuredOutput(agent: AiAgentDefinition): boolean {\n  return Boolean(agent.output)\n}\n\nfunction agentExecutionMode(agent: AiAgentDefinition): 'chat' | 'object' {\n  return agent.executionMode ?? 'chat'\n}\n\nexport function checkAgentPolicy(input: AgentPolicyCheckInput): AgentPolicyDecision {\n  const {\n    agentId,\n    authContext,\n    toolName,\n    attachmentMediaTypes,\n    requestedExecutionMode,\n    mutationPolicyOverride,\n  } = input\n\n  const agent = getAgent(agentId)\n  if (!agent) {\n    return {\n      ok: false,\n      code: 'agent_unknown',\n      message: `Agent \"${agentId}\" is not registered.`,\n    }\n  }\n\n  const agentFeatures = agent.requiredFeatures ?? []\n  if (\n    !hasRequiredFeatures(agentFeatures, authContext.userFeatures, authContext.isSuperAdmin)\n  ) {\n    return {\n      ok: false,\n      code: 'agent_features_denied',\n      message: `Access to agent \"${agentId}\" requires features: ${agentFeatures.join(', ')}`,\n    }\n  }\n\n  let resolvedTool: AiToolDefinition | undefined\n  if (typeof toolName === 'string') {\n    if (!agent.allowedTools.includes(toolName)) {\n      return {\n        ok: false,\n        code: 'tool_not_whitelisted',\n        message: `Tool \"${toolName}\" is not whitelisted for agent \"${agentId}\".`,\n      }\n    }\n\n    const toolRecord = toolRegistry.getTool(toolName) as AiToolDefinition | undefined\n    if (!toolRecord) {\n      return {\n        ok: false,\n        code: 'tool_unknown',\n        message: `Tool \"${toolName}\" is not registered in the tool registry.`,\n      }\n    }\n\n    const toolFeatures = toolRecord.requiredFeatures ?? []\n    if (\n      !hasRequiredFeatures(toolFeatures, authContext.userFeatures, authContext.isSuperAdmin)\n    ) {\n      return {\n        ok: false,\n        code: 'tool_features_denied',\n        message: `Access to tool \"${toolName}\" requires features: ${toolFeatures.join(', ')}`,\n      }\n    }\n\n    if (toolRecord.isMutation === true) {\n      if (isAgentReadOnly(agent)) {\n        return {\n          ok: false,\n          code: 'mutation_blocked_by_readonly',\n          message: `Mutation tool \"${toolName}\" cannot be executed by read-only agent \"${agentId}\".`,\n        }\n      }\n      const effectivePolicy = resolvePolicyCheckMutationPolicy(agent, mutationPolicyOverride)\n      if (effectivePolicy === 'read-only') {\n        return {\n          ok: false,\n          code: 'mutation_blocked_by_policy',\n          message: `Mutation tool \"${toolName}\" is blocked by agent \"${agentId}\" mutationPolicy=read-only.`,\n        }\n      }\n    }\n\n    resolvedTool = toolRecord\n  }\n\n  if (requestedExecutionMode) {\n    const declaredMode = agentExecutionMode(agent)\n    if (requestedExecutionMode === 'object') {\n      if (declaredMode !== 'object' && !hasAgentStructuredOutput(agent)) {\n        return {\n          ok: false,\n          code: 'execution_mode_not_supported',\n          message: `Agent \"${agentId}\" does not support execution mode \"object\" (no output schema declared).`,\n        }\n      }\n    } else if (requestedExecutionMode === 'chat') {\n      if (declaredMode === 'object' && hasAgentStructuredOutput(agent)) {\n        return {\n          ok: false,\n          code: 'execution_mode_not_supported',\n          message: `Agent \"${agentId}\" is declared as object-mode and cannot run via chat transport.`,\n        }\n      }\n    }\n  }\n\n  if (Array.isArray(attachmentMediaTypes) && attachmentMediaTypes.length > 0) {\n    const accepted = agent.acceptedMediaTypes\n    if (!accepted || accepted.length === 0) {\n      return {\n        ok: false,\n        code: 'attachment_type_not_accepted',\n        message: `Agent \"${agentId}\" does not accept attachments.`,\n      }\n    }\n    const acceptedSet = new Set<AiAgentAcceptedMediaType>(accepted)\n    for (const raw of attachmentMediaTypes) {\n      const kind = classifyMediaType(raw)\n      if (!acceptedSet.has(kind)) {\n        return {\n          ok: false,\n          code: 'attachment_type_not_accepted',\n          message: `Agent \"${agentId}\" does not accept media type \"${raw}\" (classified as \"${kind}\").`,\n        }\n      }\n    }\n  }\n\n  return { ok: true, agent, tool: resolvedTool }\n}\n"],
-  "mappings": "AAAA,SAAS,gBAAgB;AACzB,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAsD7B,MAAM,yBAAgE;AAAA,EACpE,aAAa;AAAA,EACb,gCAAgC;AAAA,EAChC,oBAAoB;AACtB;AAEO,SAAS,sBAAsB,OAAgD;AACpF,SACE,UAAU,eACV,UAAU,sBACV,UAAU;AAEd;AAQO,SAAS,+BACd,cACA,UACA,SACuB;AACvB,QAAM,OACJ,gBAAgB,sBAAsB,YAAY,IAAI,eAAe;AACvE,MAAI,aAAa,UAAa,aAAa,KAAM,QAAO;AACxD,MAAI,CAAC,sBAAsB,QAAQ,GAAG;AACpC,YAAQ;AAAA,MACN,mEAAmE,WAAW,WAAW,MAAM;AAAA,QAC7F;AAAA,MACF,CAAC,2CAA2C,IAAI;AAAA,IAClD;AACA,WAAO;AAAA,EACT;AACA,QAAM,WAAW,uBAAuB,IAAI;AAC5C,QAAM,eAAe,uBAAuB,QAAQ;AACpD,SAAO,eAAe,WAAW,WAAW;AAC9C;AAOO,SAAS,2BACd,cACA,WACS;AACT,QAAM,OACJ,gBAAgB,sBAAsB,YAAY,IAAI,eAAe;AACvE,SAAO,uBAAuB,SAAS,IAAI,uBAAuB,IAAI;AACxE;AAEA,SAAS,kBAAkB,OAAyC;AAClE,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,WAAW,WAAW,QAAQ,EAAG,QAAO;AAC5C,MAAI,eAAe,kBAAmB,QAAO;AAC7C,SAAO;AACT;AAEA,SAAS,gBAAgB,OAAmC;AAC1D,MAAI,OAAO,MAAM,aAAa,UAAW,QAAO,MAAM;AACtD,SAAO;AACT;AAQA,SAAS,iCACP,OACA,UACuB;AACvB,SAAO,+BAA+B,MAAM,gBAAgB,UAAU,MAAM,EAAE;AAChF;AAEA,SAAS,yBAAyB,OAAmC;AACnE,SAAO,QAAQ,MAAM,MAAM;AAC7B;AAEA,SAAS,mBAAmB,OAA6C;AACvE,SAAO,MAAM,iBAAiB;AAChC;AAEO,SAAS,iBAAiB,OAAmD;AAClF,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,QAAQ,SAAS,OAAO;AAC9B,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,SAAS,UAAU,OAAO;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,gBAAgB,MAAM,oBAAoB,CAAC;AACjD,MACE,CAAC,oBAAoB,eAAe,YAAY,cAAc,YAAY,YAAY,GACtF;AACA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,SAAS,oBAAoB,OAAO,wBAAwB,cAAc,KAAK,IAAI,CAAC;AAAA,IACtF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI,OAAO,aAAa,UAAU;AAChC,QAAI,CAAC,MAAM,aAAa,SAAS,QAAQ,GAAG;AAC1C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,SAAS,SAAS,QAAQ,mCAAmC,OAAO;AAAA,MACtE;AAAA,IACF;AAEA,UAAM,aAAa,aAAa,QAAQ,QAAQ;AAChD,QAAI,CAAC,YAAY;AACf,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF;AAEA,UAAM,eAAe,WAAW,oBAAoB,CAAC;AACrD,QACE,CAAC,oBAAoB,cAAc,YAAY,cAAc,YAAY,YAAY,GACrF;AACA,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,SAAS,mBAAmB,QAAQ,wBAAwB,aAAa,KAAK,IAAI,CAAC;AAAA,MACrF;AAAA,IACF;AAEA,QAAI,WAAW,eAAe,MAAM;AAClC,UAAI,gBAAgB,KAAK,GAAG;AAC1B,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS,kBAAkB,QAAQ,4CAA4C,OAAO;AAAA,QACxF;AAAA,MACF;AACA,YAAM,kBAAkB,iCAAiC,OAAO,sBAAsB;AACtF,UAAI,oBAAoB,aAAa;AACnC,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS,kBAAkB,QAAQ,0BAA0B,OAAO;AAAA,QACtE;AAAA,MACF;AAAA,IACF;AAEA,mBAAe;AAAA,EACjB;AAEA,MAAI,wBAAwB;AAC1B,UAAM,eAAe,mBAAmB,KAAK;AAC7C,QAAI,2BAA2B,UAAU;AACvC,UAAI,iBAAiB,YAAY,CAAC,yBAAyB,KAAK,GAAG;AACjE,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS,UAAU,OAAO;AAAA,QAC5B;AAAA,MACF;AAAA,IACF,WAAW,2BAA2B,QAAQ;AAC5C,UAAI,iBAAiB,YAAY,yBAAyB,KAAK,GAAG;AAChE,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS,UAAU,OAAO;AAAA,QAC5B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ,oBAAoB,KAAK,qBAAqB,SAAS,GAAG;AAC1E,UAAM,WAAW,MAAM;AACvB,QAAI,CAAC,YAAY,SAAS,WAAW,GAAG;AACtC,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,SAAS,UAAU,OAAO;AAAA,MAC5B;AAAA,IACF;AACA,UAAM,cAAc,IAAI,IAA8B,QAAQ;AAC9D,eAAW,OAAO,sBAAsB;AACtC,YAAM,OAAO,kBAAkB,GAAG;AAClC,UAAI,CAAC,YAAY,IAAI,IAAI,GAAG;AAC1B,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS,UAAU,OAAO,iCAAiC,GAAG,qBAAqB,IAAI;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,IAAI,MAAM,OAAO,MAAM,aAAa;AAC/C;",
+  "sourcesContent": ["import { getAgent } from './agent-registry'\nimport { hasRequiredFeatures } from './auth'\nimport { toolRegistry } from './tool-registry'\nimport type {\n  AiAgentAcceptedMediaType,\n  AiAgentDefinition,\n  AiAgentMutationPolicy,\n} from './ai-agent-definition'\nimport type { AiToolDefinition } from './types'\n\nexport type AgentPolicyDenyCode =\n  | 'agent_unknown'\n  | 'agent_features_denied'\n  | 'tool_not_whitelisted'\n  | 'tool_unknown'\n  | 'tool_features_denied'\n  | 'mutation_blocked_by_readonly'\n  | 'mutation_blocked_by_policy'\n  | 'execution_mode_not_supported'\n  | 'attachment_type_not_accepted'\n  // Loop policy codes \u2014 Phase 0 of spec 2026-04-28-ai-agents-agentic-loop-controls\n  /** Object-mode rejects loop primitives that the SDK ignores for generateObject. */\n  | 'loop_unsupported_in_object_mode'\n  /** User prepareStep returned a tools map with a raw (unwrapped) mutation handler. */\n  | 'loop_violates_mutation_policy'\n  /** loop.activeTools contained names outside agent.allowedTools (thrown for caller-supplied overrides; warning-only for agent-declared). */\n  | 'loop_active_tools_outside_allowlist'\n  /** agent.loop.allowRuntimeOverride is false and a per-call loop override was supplied. */\n  | 'loop_runtime_override_disabled'\n\nexport type AgentPolicyDecision =\n  | { ok: true; agent: AiAgentDefinition; tool?: AiToolDefinition }\n  | { ok: false; code: AgentPolicyDenyCode; message: string }\n\nexport interface AgentPolicyAuthContext {\n  userFeatures: string[]\n  isSuperAdmin: boolean\n}\n\nexport interface AgentPolicyCheckInput {\n  agentId: string\n  authContext: AgentPolicyAuthContext\n  toolName?: string\n  attachmentMediaTypes?: string[]\n  requestedExecutionMode?: 'chat' | 'object'\n  /**\n   * Optional tenant-scoped downgrade for the agent's code-declared\n   * `mutationPolicy`. When supplied, the effective policy is the MOST\n   * RESTRICTIVE of `{ code-declared, override }` \u2014 escalation is never\n   * allowed through this channel (that is enforced at the route layer).\n   * Callers that omit this field get the exact pre-Step-5.4 behavior.\n   */\n  mutationPolicyOverride?: AiAgentMutationPolicy | null\n}\n\n/**\n * Restrictiveness ranking of `AiAgentMutationPolicy` (most restrictive first).\n * `read-only` blocks all mutation tools. `destructive-confirm-required` forces\n * confirmation for every write (including non-destructive ones). `confirm-required`\n * is the least restrictive policy \u2014 writes go through a single confirmation.\n *\n * This ordering is load-bearing for both the runtime's effective-policy\n * computation AND the route-layer escalation guard. Changing the order is a\n * security-sensitive change.\n */\nconst POLICY_RESTRICTIVENESS: Record<AiAgentMutationPolicy, number> = {\n  'read-only': 0,\n  'destructive-confirm-required': 1,\n  'confirm-required': 2,\n}\n\nexport function isKnownMutationPolicy(value: unknown): value is AiAgentMutationPolicy {\n  return (\n    value === 'read-only' ||\n    value === 'confirm-required' ||\n    value === 'destructive-confirm-required'\n  )\n}\n\n/**\n * Returns the effective mutation policy \u2014 the MOST RESTRICTIVE of\n * `{ codeDeclared, override }`. Missing override \u2192 `codeDeclared`. A corrupt\n * override value (unknown string from DB) is logged and falls back to\n * `codeDeclared` so the system fails SAFE when a schema drift leaks through.\n */\nexport function resolveEffectiveMutationPolicy(\n  codeDeclared: AiAgentMutationPolicy | undefined,\n  override: AiAgentMutationPolicy | null | undefined,\n  agentId?: string,\n): AiAgentMutationPolicy {\n  const base: AiAgentMutationPolicy =\n    codeDeclared && isKnownMutationPolicy(codeDeclared) ? codeDeclared : 'read-only'\n  if (override === undefined || override === null) return base\n  if (!isKnownMutationPolicy(override)) {\n    console.warn(\n      `[AI Agents] Ignoring corrupt mutationPolicy override for agent \"${agentId ?? '<unknown>'}\": ${String(\n        override,\n      )}. Falling back to code-declared policy \"${base}\".`,\n    )\n    return base\n  }\n  const baseRank = POLICY_RESTRICTIVENESS[base]\n  const overrideRank = POLICY_RESTRICTIVENESS[override]\n  return overrideRank < baseRank ? override : base\n}\n\n/**\n * Returns `true` when `candidate` would WIDEN `codeDeclared` \u2014 i.e. would\n * grant the agent more mutation surface than its code declares. Used by the\n * mutation-policy override route to reject escalation attempts with 400.\n */\nexport function isMutationPolicyEscalation(\n  codeDeclared: AiAgentMutationPolicy | undefined,\n  candidate: AiAgentMutationPolicy,\n): boolean {\n  const base: AiAgentMutationPolicy =\n    codeDeclared && isKnownMutationPolicy(codeDeclared) ? codeDeclared : 'read-only'\n  return POLICY_RESTRICTIVENESS[candidate] > POLICY_RESTRICTIVENESS[base]\n}\n\nfunction classifyMediaType(value: string): AiAgentAcceptedMediaType {\n  const normalized = value.trim().toLowerCase()\n  if (normalized.startsWith('image/')) return 'image'\n  if (normalized === 'application/pdf') return 'pdf'\n  return 'file'\n}\n\nfunction isAgentReadOnly(agent: AiAgentDefinition): boolean {\n  if (typeof agent.readOnly === 'boolean') return agent.readOnly\n  return true\n}\n\n/**\n * Returns the effective mutation policy for a policy-check invocation \u2014 the\n * most restrictive of `{ agent.mutationPolicy, input.mutationPolicyOverride }`.\n * Pure-lookup helper; no I/O. Callers that need to know the same value outside\n * of a policy check should use {@link resolveEffectiveMutationPolicy} directly.\n */\nfunction resolvePolicyCheckMutationPolicy(\n  agent: AiAgentDefinition,\n  override: AiAgentMutationPolicy | null | undefined,\n): AiAgentMutationPolicy {\n  return resolveEffectiveMutationPolicy(agent.mutationPolicy, override, agent.id)\n}\n\nfunction hasAgentStructuredOutput(agent: AiAgentDefinition): boolean {\n  return Boolean(agent.output)\n}\n\nfunction agentExecutionMode(agent: AiAgentDefinition): 'chat' | 'object' {\n  return agent.executionMode ?? 'chat'\n}\n\nexport function checkAgentPolicy(input: AgentPolicyCheckInput): AgentPolicyDecision {\n  const {\n    agentId,\n    authContext,\n    toolName,\n    attachmentMediaTypes,\n    requestedExecutionMode,\n    mutationPolicyOverride,\n  } = input\n\n  const agent = getAgent(agentId)\n  if (!agent) {\n    return {\n      ok: false,\n      code: 'agent_unknown',\n      message: `Agent \"${agentId}\" is not registered.`,\n    }\n  }\n\n  const agentFeatures = agent.requiredFeatures ?? []\n  if (\n    !hasRequiredFeatures(agentFeatures, authContext.userFeatures, authContext.isSuperAdmin)\n  ) {\n    return {\n      ok: false,\n      code: 'agent_features_denied',\n      message: `Access to agent \"${agentId}\" requires features: ${agentFeatures.join(', ')}`,\n    }\n  }\n\n  let resolvedTool: AiToolDefinition | undefined\n  if (typeof toolName === 'string') {\n    if (!agent.allowedTools.includes(toolName)) {\n      return {\n        ok: false,\n        code: 'tool_not_whitelisted',\n        message: `Tool \"${toolName}\" is not whitelisted for agent \"${agentId}\".`,\n      }\n    }\n\n    const toolRecord = toolRegistry.getTool(toolName) as AiToolDefinition | undefined\n    if (!toolRecord) {\n      return {\n        ok: false,\n        code: 'tool_unknown',\n        message: `Tool \"${toolName}\" is not registered in the tool registry.`,\n      }\n    }\n\n    const toolFeatures = toolRecord.requiredFeatures ?? []\n    if (\n      !hasRequiredFeatures(toolFeatures, authContext.userFeatures, authContext.isSuperAdmin)\n    ) {\n      return {\n        ok: false,\n        code: 'tool_features_denied',\n        message: `Access to tool \"${toolName}\" requires features: ${toolFeatures.join(', ')}`,\n      }\n    }\n\n    if (toolRecord.isMutation === true) {\n      if (isAgentReadOnly(agent)) {\n        return {\n          ok: false,\n          code: 'mutation_blocked_by_readonly',\n          message: `Mutation tool \"${toolName}\" cannot be executed by read-only agent \"${agentId}\".`,\n        }\n      }\n      const effectivePolicy = resolvePolicyCheckMutationPolicy(agent, mutationPolicyOverride)\n      if (effectivePolicy === 'read-only') {\n        return {\n          ok: false,\n          code: 'mutation_blocked_by_policy',\n          message: `Mutation tool \"${toolName}\" is blocked by agent \"${agentId}\" mutationPolicy=read-only.`,\n        }\n      }\n    }\n\n    resolvedTool = toolRecord\n  }\n\n  if (requestedExecutionMode) {\n    const declaredMode = agentExecutionMode(agent)\n    if (requestedExecutionMode === 'object') {\n      if (declaredMode !== 'object' && !hasAgentStructuredOutput(agent)) {\n        return {\n          ok: false,\n          code: 'execution_mode_not_supported',\n          message: `Agent \"${agentId}\" does not support execution mode \"object\" (no output schema declared).`,\n        }\n      }\n    } else if (requestedExecutionMode === 'chat') {\n      if (declaredMode === 'object' && hasAgentStructuredOutput(agent)) {\n        return {\n          ok: false,\n          code: 'execution_mode_not_supported',\n          message: `Agent \"${agentId}\" is declared as object-mode and cannot run via chat transport.`,\n        }\n      }\n    }\n  }\n\n  if (Array.isArray(attachmentMediaTypes) && attachmentMediaTypes.length > 0) {\n    const accepted = agent.acceptedMediaTypes\n    if (!accepted || accepted.length === 0) {\n      return {\n        ok: false,\n        code: 'attachment_type_not_accepted',\n        message: `Agent \"${agentId}\" does not accept attachments.`,\n      }\n    }\n    const acceptedSet = new Set<AiAgentAcceptedMediaType>(accepted)\n    for (const raw of attachmentMediaTypes) {\n      const kind = classifyMediaType(raw)\n      if (!acceptedSet.has(kind)) {\n        return {\n          ok: false,\n          code: 'attachment_type_not_accepted',\n          message: `Agent \"${agentId}\" does not accept media type \"${raw}\" (classified as \"${kind}\").`,\n        }\n      }\n    }\n  }\n\n  return { ok: true, agent, tool: resolvedTool }\n}\n"],
+  "mappings": "AAAA,SAAS,gBAAgB;AACzB,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AA+D7B,MAAM,yBAAgE;AAAA,EACpE,aAAa;AAAA,EACb,gCAAgC;AAAA,EAChC,oBAAoB;AACtB;AAEO,SAAS,sBAAsB,OAAgD;AACpF,SACE,UAAU,eACV,UAAU,sBACV,UAAU;AAEd;AAQO,SAAS,+BACd,cACA,UACA,SACuB;AACvB,QAAM,OACJ,gBAAgB,sBAAsB,YAAY,IAAI,eAAe;AACvE,MAAI,aAAa,UAAa,aAAa,KAAM,QAAO;AACxD,MAAI,CAAC,sBAAsB,QAAQ,GAAG;AACpC,YAAQ;AAAA,MACN,mEAAmE,WAAW,WAAW,MAAM;AAAA,QAC7F;AAAA,MACF,CAAC,2CAA2C,IAAI;AAAA,IAClD;AACA,WAAO;AAAA,EACT;AACA,QAAM,WAAW,uBAAuB,IAAI;AAC5C,QAAM,eAAe,uBAAuB,QAAQ;AACpD,SAAO,eAAe,WAAW,WAAW;AAC9C;AAOO,SAAS,2BACd,cACA,WACS;AACT,QAAM,OACJ,gBAAgB,sBAAsB,YAAY,IAAI,eAAe;AACvE,SAAO,uBAAuB,SAAS,IAAI,uBAAuB,IAAI;AACxE;AAEA,SAAS,kBAAkB,OAAyC;AAClE,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,MAAI,WAAW,WAAW,QAAQ,EAAG,QAAO;AAC5C,MAAI,eAAe,kBAAmB,QAAO;AAC7C,SAAO;AACT;AAEA,SAAS,gBAAgB,OAAmC;AAC1D,MAAI,OAAO,MAAM,aAAa,UAAW,QAAO,MAAM;AACtD,SAAO;AACT;AAQA,SAAS,iCACP,OACA,UACuB;AACvB,SAAO,+BAA+B,MAAM,gBAAgB,UAAU,MAAM,EAAE;AAChF;AAEA,SAAS,yBAAyB,OAAmC;AACnE,SAAO,QAAQ,MAAM,MAAM;AAC7B;AAEA,SAAS,mBAAmB,OAA6C;AACvE,SAAO,MAAM,iBAAiB;AAChC;AAEO,SAAS,iBAAiB,OAAmD;AAClF,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,QAAQ,SAAS,OAAO;AAC9B,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,SAAS,UAAU,OAAO;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,gBAAgB,MAAM,oBAAoB,CAAC;AACjD,MACE,CAAC,oBAAoB,eAAe,YAAY,cAAc,YAAY,YAAY,GACtF;AACA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,SAAS,oBAAoB,OAAO,wBAAwB,cAAc,KAAK,IAAI,CAAC;AAAA,IACtF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI,OAAO,aAAa,UAAU;AAChC,QAAI,CAAC,MAAM,aAAa,SAAS,QAAQ,GAAG;AAC1C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,SAAS,SAAS,QAAQ,mCAAmC,OAAO;AAAA,MACtE;AAAA,IACF;AAEA,UAAM,aAAa,aAAa,QAAQ,QAAQ;AAChD,QAAI,CAAC,YAAY;AACf,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF;AAEA,UAAM,eAAe,WAAW,oBAAoB,CAAC;AACrD,QACE,CAAC,oBAAoB,cAAc,YAAY,cAAc,YAAY,YAAY,GACrF;AACA,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,SAAS,mBAAmB,QAAQ,wBAAwB,aAAa,KAAK,IAAI,CAAC;AAAA,MACrF;AAAA,IACF;AAEA,QAAI,WAAW,eAAe,MAAM;AAClC,UAAI,gBAAgB,KAAK,GAAG;AAC1B,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS,kBAAkB,QAAQ,4CAA4C,OAAO;AAAA,QACxF;AAAA,MACF;AACA,YAAM,kBAAkB,iCAAiC,OAAO,sBAAsB;AACtF,UAAI,oBAAoB,aAAa;AACnC,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS,kBAAkB,QAAQ,0BAA0B,OAAO;AAAA,QACtE;AAAA,MACF;AAAA,IACF;AAEA,mBAAe;AAAA,EACjB;AAEA,MAAI,wBAAwB;AAC1B,UAAM,eAAe,mBAAmB,KAAK;AAC7C,QAAI,2BAA2B,UAAU;AACvC,UAAI,iBAAiB,YAAY,CAAC,yBAAyB,KAAK,GAAG;AACjE,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS,UAAU,OAAO;AAAA,QAC5B;AAAA,MACF;AAAA,IACF,WAAW,2BAA2B,QAAQ;AAC5C,UAAI,iBAAiB,YAAY,yBAAyB,KAAK,GAAG;AAChE,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS,UAAU,OAAO;AAAA,QAC5B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ,oBAAoB,KAAK,qBAAqB,SAAS,GAAG;AAC1E,UAAM,WAAW,MAAM;AACvB,QAAI,CAAC,YAAY,SAAS,WAAW,GAAG;AACtC,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,SAAS,UAAU,OAAO;AAAA,MAC5B;AAAA,IACF;AACA,UAAM,cAAc,IAAI,IAA8B,QAAQ;AAC9D,eAAW,OAAO,sBAAsB;AACtC,YAAM,OAAO,kBAAkB,GAAG;AAClC,UAAI,CAAC,YAAY,IAAI,IAAI,GAAG;AAC1B,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,SAAS,UAAU,OAAO,iCAAiC,GAAG,qBAAqB,IAAI;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,IAAI,MAAM,OAAO,MAAM,aAAa;AAC/C;",
   "names": []
 }