@open-mercato/ai-assistant 0.6.6-develop.5612.1.d382eb2f33 → 0.6.6-develop.5619.1.29f01e2c42

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:ai-assistant] found 215 entry points
+[build:ai-assistant] found 216 entry points
 [build:ai-assistant] built successfully

package/dist/index.js

@@ -118,6 +118,8 @@ import {
   handleOpenCodeMessageStreaming,
   handleOpenCodeAnswer,
   getPendingQuestions,
+  getOwnedPendingQuestions,
+  OpenCodeSessionOwnershipError,
   extractTextFromResponse,
   extractAllPartsFromResponse,
   extractMetadataFromResponse
@@ -136,6 +138,7 @@ export {
   AiPendingActionStateError,
   MUTATION_PREVIEW_CARD_COMPONENT,
   OpenCodeClient,
+  OpenCodeSessionOwnershipError,
   PENDING_ACTION_CANCELLED_EVENT_ID,
   PENDING_ACTION_CONFIRMED_EVENT_ID,
   PENDING_ACTION_EXPIRED_EVENT_ID,
@@ -173,6 +176,7 @@ export {
   extractTextFromResponse,
   features,
   getAgent,
+  getOwnedPendingQuestions,
   getPendingQuestions,
   getToolRegistry,
   handleOpenCodeAnswer,

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/index.ts"],
-  "sourcesContent": ["/**\n * @open-mercato/ai-assistant\n *\n * MCP (Model Context Protocol) server module for AI assistant integration.\n *\n * This module provides:\n * - MCP server with stdio transport for Claude Desktop integration\n * - Tool registry for modules to register AI-callable tools\n * - ACL-based permission filtering for tools\n * - Multi-tenant execution context\n *\n * @example\n * ```typescript\n * import { registerMcpTool } from '@open-mercato/ai-assistant/tools'\n * import { z } from 'zod'\n *\n * registerMcpTool({\n *   name: 'customers.search',\n *   description: 'Search for customers',\n *   inputSchema: z.object({ query: z.string() }),\n *   requiredFeatures: ['customers.people.view'],\n *   handler: async (input, ctx) => {\n *     // Implementation\n *   }\n * }, { moduleId: 'customers' })\n * ```\n */\n\n// Re-export types\nexport * from './modules/ai_assistant/lib/types'\n\n// Focused-agent definition types + helper\nexport {\n  defineAiAgent,\n  defineAiAgentExtension,\n  type AiAgentDefinition,\n  type AiAgentExtension,\n  type AiAgentSuggestion,\n  type AiAgentExecutionMode,\n  type AiAgentMutationPolicy,\n  type AiAgentAcceptedMediaType,\n  type AiAgentDataOperation,\n  type AiAgentPageContextInput,\n  type AiAgentStructuredOutput,\n  type AiAgentDataCapabilities,\n} from './modules/ai_assistant/lib/ai-agent-definition'\n\n// Additive AI tool builder\nexport { defineAiTool } from './modules/ai_assistant/lib/ai-tool-definition'\n\n// Attachment-bridge contract types (spec Phase 0 \u00A78/\u00A710, implementation-ready for Phase 3 runtime)\nexport {\n  type AttachmentSource,\n  type AiResolvedAttachmentPart,\n  type AiUiPart,\n  type AiChatRequestContext,\n} from './modules/ai_assistant/lib/attachment-bridge-types'\n\n// Prompt-composition primitives (spec Phase 0 \u00A78, implementation-ready for Phase 3 prompt composer)\nexport {\n  definePromptTemplate,\n  type PromptSectionName,\n  type PromptSection,\n  type PromptTemplate,\n} from './modules/ai_assistant/lib/prompt-composition-types'\n\n// Tool registry\nexport {\n  registerMcpTool,\n  getToolRegistry,\n  unregisterMcpTool,\n  toolRegistry,\n} from './modules/ai_assistant/lib/tool-registry'\n\n// Tool executor\nexport { executeTool } from './modules/ai_assistant/lib/tool-executor'\n\n// MCP server (stdio)\nexport { createMcpServer, runMcpServer } from './modules/ai_assistant/lib/mcp-server'\n\n// MCP HTTP server\nexport { runMcpHttpServer, type McpHttpServerOptions } from './modules/ai_assistant/lib/http-server'\n\n// MCP auth\nexport {\n  authenticateMcpRequest,\n  extractApiKeyFromHeaders,\n  type McpAuthResult,\n  type McpAuthSuccess,\n  type McpAuthFailure,\n} from './modules/ai_assistant/lib/auth'\n\n// Tool loader\nexport { loadAllModuleTools, indexToolsForSearch } from './modules/ai_assistant/lib/tool-loader'\n\n// AI Overrides \u2014 module-to-module + modules.ts + programmatic agent/tool replacement.\n// See `apps/docs/docs/framework/ai-assistant/overrides.mdx`.\nexport {\n  applyAiAgentOverrides,\n  applyAiAgentExtensions,\n  applyAiToolOverrides,\n  applyAiOverridesFromEnabledModules,\n  resetProgrammaticOverridesForTests,\n  type AiAgentOverride,\n  type AiToolOverride,\n  type AiAgentOverridesMap,\n  type AiToolOverridesMap,\n  type AiAgentOverrideConfigEntry,\n  type AiAgentExtensionConfigEntry,\n  type AiToolOverrideConfigEntry,\n  type EnabledModuleAiOverrides,\n} from './modules/ai_assistant/lib/ai-overrides'\n\n// Agent registry (Phase 1 WS-A \u2014 read-side lookup API, no policy / dispatch)\nexport {\n  loadAgentRegistry,\n  getAgent,\n  listAgents,\n  listAgentsByModule,\n  resetAgentRegistryForTests,\n} from './modules/ai_assistant/lib/agent-registry'\n\n// Agent runtime policy gate (Phase 1 WS-A \u2014 pure policy decisions, no HTTP or AI SDK wiring)\nexport {\n  checkAgentPolicy,\n  type AgentPolicyDenyCode,\n  type AgentPolicyDecision,\n  type AgentPolicyAuthContext,\n  type AgentPolicyCheckInput,\n} from './modules/ai_assistant/lib/agent-policy'\n\n// AI SDK helpers (Phase 1 WS-B \u2014 chat-mode runtime + transport glue)\nexport {\n  resolveAiAgentTools,\n  AgentPolicyError,\n  type ResolveAiAgentToolsInput,\n  type ResolvedAgentTools,\n  type AiUiPartQueue,\n} from './modules/ai_assistant/lib/agent-tools'\n\n// In-process API operation runner (Phase 1 of API-backed AI tool DRY refactor)\nexport {\n  createAiApiOperationRunner,\n  type AiApiOperationRequest,\n  type AiApiOperationResponse,\n  type AiApiOperationRunner,\n  type AiApiOperationRunnerOptions,\n  type AiApiHttpMethod,\n  type AiToolExecutionContext,\n} from './modules/ai_assistant/lib/ai-api-operation-runner'\n\n// API-backed AI tool helper (Phase 2 of API-backed AI tool DRY refactor)\nexport {\n  defineApiBackedAiTool,\n  type ApiBackedAiToolConfig,\n} from './modules/ai_assistant/lib/api-backed-tool'\n\n// Mutation-preparation helper (Phase 3 WS-C \u2014 Step 5.6)\nexport {\n  prepareMutation,\n  computeMutationIdempotencyKey,\n  AiMutationPreparationError,\n  MUTATION_PREVIEW_CARD_COMPONENT,\n  type PrepareMutationInput,\n  type PrepareMutationContext,\n  type PrepareMutationResult,\n} from './modules/ai_assistant/lib/prepare-mutation'\n\nexport {\n  runAiAgentText,\n  runAiAgentObject,\n  composeSystemPrompt,\n  type RunAiAgentTextInput,\n  type RunAiAgentObjectInput,\n  type RunAiAgentObjectOutputOverride,\n  type RunAiAgentObjectResult,\n  type RunAiAgentObjectGenerateResult,\n  type RunAiAgentObjectStreamResult,\n  type AgentRequestPageContext,\n} from './modules/ai_assistant/lib/agent-runtime'\n\nexport {\n  createAiAgentTransport,\n  type CreateAiAgentTransportInput,\n} from './modules/ai_assistant/lib/agent-transport'\n\n// Pending-action types / enums / state-machine guard (Phase 3 WS-C \u2014 Step 5.5)\nexport {\n  AI_PENDING_ACTION_STATUSES,\n  AI_PENDING_ACTION_QUEUE_MODES,\n  AI_PENDING_ACTION_ALLOWED_TRANSITIONS,\n  AI_PENDING_ACTION_TERMINAL_STATUSES,\n  AI_PENDING_ACTION_DEFAULT_TTL_SECONDS,\n  AI_PENDING_ACTION_TTL_ENV_VAR,\n  AiPendingActionStateError,\n  isAiPendingActionStatus,\n  isAiPendingActionQueueMode,\n  isTerminalAiPendingActionStatus,\n  isAllowedAiPendingActionTransition,\n  resolveAiPendingActionTtlSeconds,\n  type AiPendingActionStatus,\n  type AiPendingActionQueueMode,\n  type AiPendingActionRecordDiff,\n  type AiPendingActionFailedRecord,\n  type AiPendingActionFieldDiff,\n  type AiPendingActionExecutionResult,\n} from './modules/ai_assistant/lib/pending-action-types'\n\n// Client-facing pending-action serializer (Phase 3 WS-C \u2014 Step 5.7, reused by 5.8 / 5.9 / 5.10)\nexport {\n  serializePendingActionForClient,\n  type SerializedPendingAction,\n  type SerializablePendingActionRow,\n} from './modules/ai_assistant/lib/pending-action-client'\n\n// Pending-action confirm re-check contract (Phase 3 WS-C \u2014 Step 5.8, reused by 5.9)\nexport {\n  runPendingActionRechecks,\n  checkStatusAndExpiry,\n  checkAgentAndFeatures,\n  checkToolWhitelist,\n  checkAttachmentScope,\n  checkRecordVersion,\n  PENDING_ACTION_RECHECK_CODES,\n  isPendingActionRecheckCode,\n  type PendingActionRecheckCode,\n  type PendingActionRecheckResult,\n  type PendingActionRecheckInput,\n  type PendingActionAuthContext,\n} from './modules/ai_assistant/lib/pending-action-recheck'\n\n// Pending-action confirm executor (Phase 3 WS-C \u2014 Step 5.8)\nexport {\n  executePendingActionConfirm,\n  PENDING_ACTION_CONFIRMED_EVENT_ID,\n  type PendingActionExecuteInput,\n  type PendingActionExecuteContext,\n  type PendingActionExecuteResult,\n  type PendingActionExecuteOk,\n  type PendingActionExecuteFail,\n} from './modules/ai_assistant/lib/pending-action-executor'\n\n// Pending-action cancel executor (Phase 3 WS-C \u2014 Step 5.9)\nexport {\n  executePendingActionCancel,\n  PENDING_ACTION_CANCELLED_EVENT_ID,\n  PENDING_ACTION_EXPIRED_EVENT_ID,\n  type PendingActionCancelInput,\n  type PendingActionCancelContext,\n  type PendingActionCancelResult,\n  type PendingActionCancelStatus,\n} from './modules/ai_assistant/lib/pending-action-cancel'\n\n// Shared AI model factory (Phase 3 WS-A \u2014 Step 5.1)\nexport {\n  createModelFactory,\n  AiModelFactoryError,\n  type AiModelFactory,\n  type AiModelFactoryInput,\n  type AiModelResolution,\n  type AiModelFactoryErrorCode,\n  type AiModelInstance,\n  type CreateModelFactoryDependencies,\n} from './modules/ai_assistant/lib/model-factory'\n\n// Attachment-to-model bridge (Phase 1 WS-C \u2014 Step 3.7)\nexport {\n  resolveAttachmentParts,\n  resolveAttachmentPartsForAgent,\n  attachmentPartsToUiFileParts,\n  summarizeAttachmentPartsForPrompt,\n  type ResolveAttachmentPartsInput,\n  type AttachmentSigner,\n} from './modules/ai_assistant/lib/attachment-parts'\n\n// OpenCode client\nexport {\n  OpenCodeClient,\n  createOpenCodeClient,\n  type OpenCodeClientConfig,\n  type OpenCodeSession,\n  type OpenCodeMessage,\n  type OpenCodeHealth,\n  type OpenCodeMcpStatus,\n} from './modules/ai_assistant/lib/opencode-client'\n\n// OpenCode route handlers\nexport {\n  handleOpenCodeMessage,\n  handleOpenCodeHealth,\n  handleOpenCodeMessageStreaming,\n  handleOpenCodeAnswer,\n  getPendingQuestions,\n  extractTextFromResponse,\n  extractAllPartsFromResponse,\n  extractMetadataFromResponse,\n  type OpenCodeTestRequest,\n  type OpenCodeTestResponse,\n  type OpenCodeHealthResponse,\n  type OpenCodeResponsePart,\n  type OpenCodeResponseMetadata,\n  type OpenCodeStreamEvent,\n  type OpenCodeQuestion,\n} from './modules/ai_assistant/lib/opencode-handlers'\n\n// Module metadata\nexport { metadata, features } from './modules/ai_assistant'\n"],
-  "mappings": "AA6BA,cAAc;AAGd;AAAA,EACE;AAAA,EACA;AAAA,OAWK;AAGP,SAAS,oBAAoB;AAW7B;AAAA,EACE;AAAA,OAIK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,mBAAmB;AAG5B,SAAS,iBAAiB,oBAAoB;AAG9C,SAAS,wBAAmD;AAG5D;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AAGP,SAAS,oBAAoB,2BAA2B;AAIx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gBAAgB;",
+  "sourcesContent": ["/**\n * @open-mercato/ai-assistant\n *\n * MCP (Model Context Protocol) server module for AI assistant integration.\n *\n * This module provides:\n * - MCP server with stdio transport for Claude Desktop integration\n * - Tool registry for modules to register AI-callable tools\n * - ACL-based permission filtering for tools\n * - Multi-tenant execution context\n *\n * @example\n * ```typescript\n * import { registerMcpTool } from '@open-mercato/ai-assistant/tools'\n * import { z } from 'zod'\n *\n * registerMcpTool({\n *   name: 'customers.search',\n *   description: 'Search for customers',\n *   inputSchema: z.object({ query: z.string() }),\n *   requiredFeatures: ['customers.people.view'],\n *   handler: async (input, ctx) => {\n *     // Implementation\n *   }\n * }, { moduleId: 'customers' })\n * ```\n */\n\n// Re-export types\nexport * from './modules/ai_assistant/lib/types'\n\n// Focused-agent definition types + helper\nexport {\n  defineAiAgent,\n  defineAiAgentExtension,\n  type AiAgentDefinition,\n  type AiAgentExtension,\n  type AiAgentSuggestion,\n  type AiAgentExecutionMode,\n  type AiAgentMutationPolicy,\n  type AiAgentAcceptedMediaType,\n  type AiAgentDataOperation,\n  type AiAgentPageContextInput,\n  type AiAgentStructuredOutput,\n  type AiAgentDataCapabilities,\n} from './modules/ai_assistant/lib/ai-agent-definition'\n\n// Additive AI tool builder\nexport { defineAiTool } from './modules/ai_assistant/lib/ai-tool-definition'\n\n// Attachment-bridge contract types (spec Phase 0 \u00A78/\u00A710, implementation-ready for Phase 3 runtime)\nexport {\n  type AttachmentSource,\n  type AiResolvedAttachmentPart,\n  type AiUiPart,\n  type AiChatRequestContext,\n} from './modules/ai_assistant/lib/attachment-bridge-types'\n\n// Prompt-composition primitives (spec Phase 0 \u00A78, implementation-ready for Phase 3 prompt composer)\nexport {\n  definePromptTemplate,\n  type PromptSectionName,\n  type PromptSection,\n  type PromptTemplate,\n} from './modules/ai_assistant/lib/prompt-composition-types'\n\n// Tool registry\nexport {\n  registerMcpTool,\n  getToolRegistry,\n  unregisterMcpTool,\n  toolRegistry,\n} from './modules/ai_assistant/lib/tool-registry'\n\n// Tool executor\nexport { executeTool } from './modules/ai_assistant/lib/tool-executor'\n\n// MCP server (stdio)\nexport { createMcpServer, runMcpServer } from './modules/ai_assistant/lib/mcp-server'\n\n// MCP HTTP server\nexport { runMcpHttpServer, type McpHttpServerOptions } from './modules/ai_assistant/lib/http-server'\n\n// MCP auth\nexport {\n  authenticateMcpRequest,\n  extractApiKeyFromHeaders,\n  type McpAuthResult,\n  type McpAuthSuccess,\n  type McpAuthFailure,\n} from './modules/ai_assistant/lib/auth'\n\n// Tool loader\nexport { loadAllModuleTools, indexToolsForSearch } from './modules/ai_assistant/lib/tool-loader'\n\n// AI Overrides \u2014 module-to-module + modules.ts + programmatic agent/tool replacement.\n// See `apps/docs/docs/framework/ai-assistant/overrides.mdx`.\nexport {\n  applyAiAgentOverrides,\n  applyAiAgentExtensions,\n  applyAiToolOverrides,\n  applyAiOverridesFromEnabledModules,\n  resetProgrammaticOverridesForTests,\n  type AiAgentOverride,\n  type AiToolOverride,\n  type AiAgentOverridesMap,\n  type AiToolOverridesMap,\n  type AiAgentOverrideConfigEntry,\n  type AiAgentExtensionConfigEntry,\n  type AiToolOverrideConfigEntry,\n  type EnabledModuleAiOverrides,\n} from './modules/ai_assistant/lib/ai-overrides'\n\n// Agent registry (Phase 1 WS-A \u2014 read-side lookup API, no policy / dispatch)\nexport {\n  loadAgentRegistry,\n  getAgent,\n  listAgents,\n  listAgentsByModule,\n  resetAgentRegistryForTests,\n} from './modules/ai_assistant/lib/agent-registry'\n\n// Agent runtime policy gate (Phase 1 WS-A \u2014 pure policy decisions, no HTTP or AI SDK wiring)\nexport {\n  checkAgentPolicy,\n  type AgentPolicyDenyCode,\n  type AgentPolicyDecision,\n  type AgentPolicyAuthContext,\n  type AgentPolicyCheckInput,\n} from './modules/ai_assistant/lib/agent-policy'\n\n// AI SDK helpers (Phase 1 WS-B \u2014 chat-mode runtime + transport glue)\nexport {\n  resolveAiAgentTools,\n  AgentPolicyError,\n  type ResolveAiAgentToolsInput,\n  type ResolvedAgentTools,\n  type AiUiPartQueue,\n} from './modules/ai_assistant/lib/agent-tools'\n\n// In-process API operation runner (Phase 1 of API-backed AI tool DRY refactor)\nexport {\n  createAiApiOperationRunner,\n  type AiApiOperationRequest,\n  type AiApiOperationResponse,\n  type AiApiOperationRunner,\n  type AiApiOperationRunnerOptions,\n  type AiApiHttpMethod,\n  type AiToolExecutionContext,\n} from './modules/ai_assistant/lib/ai-api-operation-runner'\n\n// API-backed AI tool helper (Phase 2 of API-backed AI tool DRY refactor)\nexport {\n  defineApiBackedAiTool,\n  type ApiBackedAiToolConfig,\n} from './modules/ai_assistant/lib/api-backed-tool'\n\n// Mutation-preparation helper (Phase 3 WS-C \u2014 Step 5.6)\nexport {\n  prepareMutation,\n  computeMutationIdempotencyKey,\n  AiMutationPreparationError,\n  MUTATION_PREVIEW_CARD_COMPONENT,\n  type PrepareMutationInput,\n  type PrepareMutationContext,\n  type PrepareMutationResult,\n} from './modules/ai_assistant/lib/prepare-mutation'\n\nexport {\n  runAiAgentText,\n  runAiAgentObject,\n  composeSystemPrompt,\n  type RunAiAgentTextInput,\n  type RunAiAgentObjectInput,\n  type RunAiAgentObjectOutputOverride,\n  type RunAiAgentObjectResult,\n  type RunAiAgentObjectGenerateResult,\n  type RunAiAgentObjectStreamResult,\n  type AgentRequestPageContext,\n} from './modules/ai_assistant/lib/agent-runtime'\n\nexport {\n  createAiAgentTransport,\n  type CreateAiAgentTransportInput,\n} from './modules/ai_assistant/lib/agent-transport'\n\n// Pending-action types / enums / state-machine guard (Phase 3 WS-C \u2014 Step 5.5)\nexport {\n  AI_PENDING_ACTION_STATUSES,\n  AI_PENDING_ACTION_QUEUE_MODES,\n  AI_PENDING_ACTION_ALLOWED_TRANSITIONS,\n  AI_PENDING_ACTION_TERMINAL_STATUSES,\n  AI_PENDING_ACTION_DEFAULT_TTL_SECONDS,\n  AI_PENDING_ACTION_TTL_ENV_VAR,\n  AiPendingActionStateError,\n  isAiPendingActionStatus,\n  isAiPendingActionQueueMode,\n  isTerminalAiPendingActionStatus,\n  isAllowedAiPendingActionTransition,\n  resolveAiPendingActionTtlSeconds,\n  type AiPendingActionStatus,\n  type AiPendingActionQueueMode,\n  type AiPendingActionRecordDiff,\n  type AiPendingActionFailedRecord,\n  type AiPendingActionFieldDiff,\n  type AiPendingActionExecutionResult,\n} from './modules/ai_assistant/lib/pending-action-types'\n\n// Client-facing pending-action serializer (Phase 3 WS-C \u2014 Step 5.7, reused by 5.8 / 5.9 / 5.10)\nexport {\n  serializePendingActionForClient,\n  type SerializedPendingAction,\n  type SerializablePendingActionRow,\n} from './modules/ai_assistant/lib/pending-action-client'\n\n// Pending-action confirm re-check contract (Phase 3 WS-C \u2014 Step 5.8, reused by 5.9)\nexport {\n  runPendingActionRechecks,\n  checkStatusAndExpiry,\n  checkAgentAndFeatures,\n  checkToolWhitelist,\n  checkAttachmentScope,\n  checkRecordVersion,\n  PENDING_ACTION_RECHECK_CODES,\n  isPendingActionRecheckCode,\n  type PendingActionRecheckCode,\n  type PendingActionRecheckResult,\n  type PendingActionRecheckInput,\n  type PendingActionAuthContext,\n} from './modules/ai_assistant/lib/pending-action-recheck'\n\n// Pending-action confirm executor (Phase 3 WS-C \u2014 Step 5.8)\nexport {\n  executePendingActionConfirm,\n  PENDING_ACTION_CONFIRMED_EVENT_ID,\n  type PendingActionExecuteInput,\n  type PendingActionExecuteContext,\n  type PendingActionExecuteResult,\n  type PendingActionExecuteOk,\n  type PendingActionExecuteFail,\n} from './modules/ai_assistant/lib/pending-action-executor'\n\n// Pending-action cancel executor (Phase 3 WS-C \u2014 Step 5.9)\nexport {\n  executePendingActionCancel,\n  PENDING_ACTION_CANCELLED_EVENT_ID,\n  PENDING_ACTION_EXPIRED_EVENT_ID,\n  type PendingActionCancelInput,\n  type PendingActionCancelContext,\n  type PendingActionCancelResult,\n  type PendingActionCancelStatus,\n} from './modules/ai_assistant/lib/pending-action-cancel'\n\n// Shared AI model factory (Phase 3 WS-A \u2014 Step 5.1)\nexport {\n  createModelFactory,\n  AiModelFactoryError,\n  type AiModelFactory,\n  type AiModelFactoryInput,\n  type AiModelResolution,\n  type AiModelFactoryErrorCode,\n  type AiModelInstance,\n  type CreateModelFactoryDependencies,\n} from './modules/ai_assistant/lib/model-factory'\n\n// Attachment-to-model bridge (Phase 1 WS-C \u2014 Step 3.7)\nexport {\n  resolveAttachmentParts,\n  resolveAttachmentPartsForAgent,\n  attachmentPartsToUiFileParts,\n  summarizeAttachmentPartsForPrompt,\n  type ResolveAttachmentPartsInput,\n  type AttachmentSigner,\n} from './modules/ai_assistant/lib/attachment-parts'\n\n// OpenCode client\nexport {\n  OpenCodeClient,\n  createOpenCodeClient,\n  type OpenCodeClientConfig,\n  type OpenCodeSession,\n  type OpenCodeMessage,\n  type OpenCodeHealth,\n  type OpenCodeMcpStatus,\n} from './modules/ai_assistant/lib/opencode-client'\n\n// OpenCode route handlers\nexport {\n  handleOpenCodeMessage,\n  handleOpenCodeHealth,\n  handleOpenCodeMessageStreaming,\n  handleOpenCodeAnswer,\n  getPendingQuestions,\n  getOwnedPendingQuestions,\n  OpenCodeSessionOwnershipError,\n  extractTextFromResponse,\n  extractAllPartsFromResponse,\n  extractMetadataFromResponse,\n  type OpenCodeTestRequest,\n  type OpenCodeTestResponse,\n  type OpenCodeHealthResponse,\n  type OpenCodeResponsePart,\n  type OpenCodeResponseMetadata,\n  type OpenCodeStreamEvent,\n  type OpenCodeQuestion,\n  type OpenCodeAuthContext,\n  type OpenCodeAnswerOwnershipOptions,\n} from './modules/ai_assistant/lib/opencode-handlers'\n\n// Module metadata\nexport { metadata, features } from './modules/ai_assistant'\n"],
+  "mappings": "AA6BA,cAAc;AAGd;AAAA,EACE;AAAA,EACA;AAAA,OAWK;AAGP,SAAS,oBAAoB;AAW7B;AAAA,EACE;AAAA,OAIK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,mBAAmB;AAG5B,SAAS,iBAAiB,oBAAoB;AAG9C,SAAS,wBAAmD;AAG5D;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AAGP,SAAS,oBAAoB,2BAA2B;AAIx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gBAAgB;",
   "names": []
 }

package/dist/modules/ai_assistant/__integration__/TC-AI-CHAT-OWNERSHIP-001-opencode-session.spec.js

@@ -0,0 +1,88 @@
+import { test, expect, request as playwrightRequest } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/modules/core/__integration__/helpers/api";
+test.describe("TC-AI-CHAT-OWNERSHIP-001: OpenCode session ownership", () => {
+  const chatPath = "/api/ai_assistant/chat";
+  test("unauthenticated answerQuestion returns 401", async ({ baseURL }) => {
+    const context = await playwrightRequest.newContext({ baseURL });
+    try {
+      const response = await context.fetch(chatPath, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        data: JSON.stringify({
+          answerQuestion: {
+            questionId: "q-anon",
+            answer: 0,
+            sessionId: "ses_attacker"
+          }
+        })
+      });
+      expect(response.status()).toBe(401);
+      const body = await response.json();
+      expect(body.error).toBeDefined();
+    } finally {
+      await context.dispose();
+    }
+  });
+  test("answerQuestion with unknown question id returns 403 with opaque message", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    const response = await request.fetch(chatPath, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      },
+      data: JSON.stringify({
+        answerQuestion: {
+          // A question id that cannot possibly exist in OpenCode's pending
+          // queue: the route looks up live questions and refuses with the
+          // same opaque code as a foreign-owner mismatch.
+          questionId: "q-does-not-exist-" + Date.now(),
+          answer: 0,
+          sessionId: "ses_does_not_exist"
+        }
+      })
+    });
+    expect(response.status()).toBe(403);
+    const body = await response.json();
+    expect(body.error).toBe("Session not available");
+  });
+  test("answerQuestion with mismatched sessionId returns 403 with opaque message", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    const response = await request.fetch(chatPath, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      },
+      data: JSON.stringify({
+        answerQuestion: {
+          questionId: "q-mismatch-" + Date.now(),
+          answer: 0,
+          // Even if a question with this id existed in OpenCode (it
+          // doesn't in the test env), the sessionId cross-check fires
+          // first and rejects with the same opaque envelope, so this
+          // sub-case shares the body assertion of the prior test.
+          sessionId: "ses_attacker"
+        }
+      })
+    });
+    expect(response.status()).toBe(403);
+    const body = await response.json();
+    expect(body.error).toBe("Session not available");
+  });
+  test("regular chat requires a messages array", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    const response = await request.fetch(chatPath, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      },
+      data: JSON.stringify({ messages: null })
+    });
+    expect(response.status()).toBe(400);
+    const body = await response.json();
+    expect(body.error).toMatch(/messages/);
+  });
+});
+//# sourceMappingURL=TC-AI-CHAT-OWNERSHIP-001-opencode-session.spec.js.map

package/dist/modules/ai_assistant/__integration__/TC-AI-CHAT-OWNERSHIP-001-opencode-session.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/__integration__/TC-AI-CHAT-OWNERSHIP-001-opencode-session.spec.ts"],
+  "sourcesContent": ["import { test, expect, request as playwrightRequest } from '@playwright/test';\nimport { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api';\n\n/**\n * TC-AI-CHAT-OWNERSHIP-001: OpenCode session ownership (security fix #1\n * from `report-high.md`, spec\n * `.ai/specs/2026-05-24-fix-opencode-session-ownership.md`).\n *\n * Exercises the HTTP surface of the OpenCode chat route\n * (`POST /api/ai_assistant/chat` \u2014 the legacy OpenCode dispatcher,\n * distinct from the new typed-agent `/api/ai_assistant/ai/chat`).\n *\n * Asserted:\n *   - Unauthenticated callers cannot resume an OpenCode session.\n *   - The `answerQuestion` short-circuit refuses unknown question ids\n *     with a 403 + opaque `{ error: 'Session not available' }`.\n *   - The `answerQuestion` short-circuit refuses sessionId / questionId\n *     mismatches with the same opaque 403.\n *   - The `answerQuestion` short-circuit refuses requests where the api_key\n *     row bound to the OpenCode session does not belong to the\n *     authenticated caller.\n *\n * Notes on scope:\n *   - The streaming branch ownership-rejection path is covered exhaustively\n *     by the Jest unit tests at\n *     `packages/ai-assistant/src/modules/ai_assistant/__tests__/opencode-handler-ownership.test.ts`\n *     and the chat-route smoke at\n *     `packages/ai-assistant/src/modules/ai_assistant/__tests__/chat-route-ownership.test.ts`.\n *     End-to-end SSE assertion requires a running OpenCode container which\n *     is not part of the default integration env; the assertions here use\n *     the HTTP-level paths that do not require OpenCode (`answerQuestion`\n *     short-circuits when the question id is unknown to OpenCode, which it\n *     always is in an isolated test environment).\n *   - A future enhancement may add an end-to-end SSE test gated on the\n *     OpenCode container availability flag.\n */\ntest.describe('TC-AI-CHAT-OWNERSHIP-001: OpenCode session ownership', () => {\n  const chatPath = '/api/ai_assistant/chat';\n\n  test('unauthenticated answerQuestion returns 401', async ({ baseURL }) => {\n    const context = await playwrightRequest.newContext({ baseURL });\n    try {\n      const response = await context.fetch(chatPath, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        data: JSON.stringify({\n          answerQuestion: {\n            questionId: 'q-anon',\n            answer: 0,\n            sessionId: 'ses_attacker',\n          },\n        }),\n      });\n\n      expect(response.status()).toBe(401);\n      const body = (await response.json()) as { error?: unknown };\n      expect(body.error).toBeDefined();\n    } finally {\n      await context.dispose();\n    }\n  });\n\n  test('answerQuestion with unknown question id returns 403 with opaque message', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin');\n\n    const response = await request.fetch(chatPath, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n      data: JSON.stringify({\n        answerQuestion: {\n          // A question id that cannot possibly exist in OpenCode's pending\n          // queue: the route looks up live questions and refuses with the\n          // same opaque code as a foreign-owner mismatch.\n          questionId: 'q-does-not-exist-' + Date.now(),\n          answer: 0,\n          sessionId: 'ses_does_not_exist',\n        },\n      }),\n    });\n\n    expect(response.status()).toBe(403);\n    const body = (await response.json()) as { error?: unknown };\n    expect(body.error).toBe('Session not available');\n  });\n\n  test('answerQuestion with mismatched sessionId returns 403 with opaque message', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin');\n\n    const response = await request.fetch(chatPath, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n      data: JSON.stringify({\n        answerQuestion: {\n          questionId: 'q-mismatch-' + Date.now(),\n          answer: 0,\n          // Even if a question with this id existed in OpenCode (it\n          // doesn't in the test env), the sessionId cross-check fires\n          // first and rejects with the same opaque envelope, so this\n          // sub-case shares the body assertion of the prior test.\n          sessionId: 'ses_attacker',\n        },\n      }),\n    });\n\n    expect(response.status()).toBe(403);\n    const body = (await response.json()) as { error?: unknown };\n    expect(body.error).toBe('Session not available');\n  });\n\n  test('regular chat requires a messages array', async ({ request }) => {\n    // Sanity-check: the streaming branch is reachable only when the body\n    // shape is valid. With OpenCode unavailable in the test env the SSE\n    // would stall, so we instead assert the input-validation gate before\n    // we ever touch the handler. This locks in the precondition the\n    // ownership-checked path relies on.\n    const token = await getAuthToken(request, 'admin');\n\n    const response = await request.fetch(chatPath, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n      data: JSON.stringify({ messages: null }),\n    });\n\n    expect(response.status()).toBe(400);\n    const body = (await response.json()) as { error?: unknown };\n    expect(body.error).toMatch(/messages/);\n  });\n});\n"],
+  "mappings": "AAAA,SAAS,MAAM,QAAQ,WAAW,yBAAyB;AAC3D,SAAS,oBAAoB;AAmC7B,KAAK,SAAS,wDAAwD,MAAM;AAC1E,QAAM,WAAW;AAEjB,OAAK,8CAA8C,OAAO,EAAE,QAAQ,MAAM;AACxE,UAAM,UAAU,MAAM,kBAAkB,WAAW,EAAE,QAAQ,CAAC;AAC9D,QAAI;AACF,YAAM,WAAW,MAAM,QAAQ,MAAM,UAAU;AAAA,QAC7C,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU;AAAA,UACnB,gBAAgB;AAAA,YACd,YAAY;AAAA,YACZ,QAAQ;AAAA,YACR,WAAW;AAAA,UACb;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAED,aAAO,SAAS,OAAO,CAAC,EAAE,KAAK,GAAG;AAClC,YAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,aAAO,KAAK,KAAK,EAAE,YAAY;AAAA,IACjC,UAAE;AACA,YAAM,QAAQ,QAAQ;AAAA,IACxB;AAAA,EACF,CAAC;AAED,OAAK,2EAA2E,OAAO,EAAE,QAAQ,MAAM;AACrG,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AAEjD,UAAM,WAAW,MAAM,QAAQ,MAAM,UAAU;AAAA,MAC7C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,gBAAgB;AAAA;AAAA;AAAA;AAAA,UAId,YAAY,sBAAsB,KAAK,IAAI;AAAA,UAC3C,QAAQ;AAAA,UACR,WAAW;AAAA,QACb;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,WAAO,SAAS,OAAO,CAAC,EAAE,KAAK,GAAG;AAClC,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,KAAK,KAAK,EAAE,KAAK,uBAAuB;AAAA,EACjD,CAAC;AAED,OAAK,4EAA4E,OAAO,EAAE,QAAQ,MAAM;AACtG,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AAEjD,UAAM,WAAW,MAAM,QAAQ,MAAM,UAAU;AAAA,MAC7C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,gBAAgB;AAAA,UACd,YAAY,gBAAgB,KAAK,IAAI;AAAA,UACrC,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,UAKR,WAAW;AAAA,QACb;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,WAAO,SAAS,OAAO,CAAC,EAAE,KAAK,GAAG;AAClC,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,KAAK,KAAK,EAAE,KAAK,uBAAuB;AAAA,EACjD,CAAC;AAED,OAAK,0CAA0C,OAAO,EAAE,QAAQ,MAAM;AAMpE,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AAEjD,UAAM,WAAW,MAAM,QAAQ,MAAM,UAAU;AAAA,MAC7C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,UAAU,KAAK,CAAC;AAAA,IACzC,CAAC;AAED,WAAO,SAAS,OAAO,CAAC,EAAE,KAAK,GAAG;AAClC,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,KAAK,KAAK,EAAE,QAAQ,UAAU;AAAA,EACvC,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/ai_assistant/api/chat/route.js

@@ -7,7 +7,9 @@ import { createOpenCodeClient } from "../../lib/opencode-client.js";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import {
   generateSessionToken,
-  createSessionApiKey
+  createSessionApiKey,
+  bindOpencodeSessionToApiKey,
+  findApiKeyByOpencodeSessionId
 } from "@open-mercato/core/modules/api_keys/services/apiKeyService";
 import { UserRole } from "@open-mercato/core/modules/auth/data/entities";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
@@ -164,17 +166,33 @@ async function POST(req) {
       } catch {
       }
     };
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const opencodeAuth = {
+      userId: auth.sub,
+      tenantId: auth.tenantId ?? null,
+      organizationId: auth.orgId ?? null
+    };
     if (answerQuestion) {
       try {
         const client = createOpenCodeClient();
+        const pending = await client.getPendingQuestions();
+        const matching = pending.find((q) => q.id === answerQuestion.questionId);
+        if (!matching) {
+          return NextResponse.json({ error: "Session not available" }, { status: 403 });
+        }
+        if (matching.sessionID !== answerQuestion.sessionId) {
+          return NextResponse.json({ error: "Session not available" }, { status: 403 });
+        }
+        const ownerRow = await findApiKeyByOpencodeSessionId(em, matching.sessionID);
+        if (!ownerRow || ownerRow.sessionUserId !== opencodeAuth.userId || (ownerRow.tenantId ?? null) !== opencodeAuth.tenantId || (ownerRow.organizationId ?? null) !== opencodeAuth.organizationId) {
+          return NextResponse.json({ error: "Session not available" }, { status: 403 });
+        }
         await client.answerQuestion(answerQuestion.questionId, answerQuestion.answer);
         return NextResponse.json({ success: true });
       } catch (error) {
         console.error("[AI Chat] Answer error:", error);
-        return NextResponse.json(
-          { error: error instanceof Error ? error.message : "Failed to answer question" },
-          { status: 500 }
-        );
+        return NextResponse.json({ error: "Session not available" }, { status: 403 });
       }
     }
     if (!messages || !Array.isArray(messages)) {
@@ -190,8 +208,6 @@ async function POST(req) {
     let sessionToken = null;
     if (!sessionId) {
       try {
-        const container = await createRequestContainer();
-        const em = container.resolve("em");
         const userRoleIds = await getUserRoleIds(em, auth.sub, auth.tenantId);
         sessionToken = generateSessionToken();
         await createSessionApiKey(em, {
@@ -235,12 +251,26 @@ async function POST(req) {
         await handleOpenCodeMessageStreaming(
           {
             message: messageToSend,
-            sessionId
+            sessionId,
+            auth: opencodeAuth,
+            em
           },
           async (event) => {
             if (event.type === "tool-call") toolCallCount++;
             if (event.type === "metadata" && "tokens" in event) lastTokens = event.tokens;
-            if (event.type === "done" && "sessionId" in event) resultSessionId = event.sessionId;
+            if (event.type === "done" && "sessionId" in event) {
+              resultSessionId = event.sessionId;
+              if (!sessionId && sessionToken && event.sessionId) {
+                try {
+                  await bindOpencodeSessionToApiKey(em, sessionToken, event.sessionId);
+                } catch (bindErr) {
+                  console.error(
+                    "[AI Chat] Failed to bind OpenCode session to api_key:",
+                    bindErr
+                  );
+                }
+              }
+            }
             await writeSSE(event);
           }
         );

package/dist/modules/ai_assistant/api/chat/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/ai_assistant/api/chat/route.ts"],
-  "sourcesContent": ["import { NextResponse, type NextRequest } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  handleOpenCodeMessageStreaming,\n  type OpenCodeStreamEvent,\n} from '../../lib/opencode-handlers'\nimport { createOpenCodeClient } from '../../lib/opencode-client'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport {\n  generateSessionToken,\n  createSessionApiKey,\n} from '@open-mercato/core/modules/api_keys/services/apiKeyService'\nimport { UserRole } from '@open-mercato/core/modules/auth/data/entities'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\n/**\n * System instructions injected at the start of new chat sessions.\n * These ensure the AI follows the correct workflow for data operations.\n */\nconst CHAT_SYSTEM_INSTRUCTIONS = `\nYou are a helpful business assistant for Open Mercato.\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nABSOLUTE RULES \u2014 FOLLOW THESE OR BE CUT OFF\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n1. READ = GET only. If the user says find/list/show/search/get \u2192 use only GET. NEVER call PUT/POST/DELETE for a read query.\n2. PUT path = collection path. id goes in the BODY, not the URL. Example: PUT /api/customers/companies with { id: '...', name: 'New' }. There are NO /{id} path segments.\n3. Confirm before ANY write. Before POST/PUT/DELETE: present your plan in business language, then STOP and wait for user to say \"yes\". Do NOT execute the write in the same turn.\n4. Maximum 4 tool calls per message. Hard limit is 10.\n\nYou have 2 tools \u2014 both accept a \"code\" parameter with an async JavaScript arrow function.\n\nTOOL: search \u2014 discover endpoints and schemas (READ-ONLY, fast)\n  - spec.findEndpoints(keyword) \u2192 [{ path, methods }]\n  - spec.describeEndpoint(path, method) \u2192 COMPACT: { requiredFields, optionalFields, nestedCollections, example, relatedEndpoints, relatedEntity }\n  - spec.describeEntity(keyword) \u2192 { className, fields, relationships }\n\nTOOL: execute \u2014 make API calls (reads and writes)\n  - api.request({ method, path, query?, body? }) \u2192 { success, statusCode, data }\n\nCOMMON API PATHS (use directly \u2014 do NOT call findEndpoints for these):\n  /api/customers/companies      \u2014 companies (GET list, POST create, PUT update)\n  /api/customers/people         \u2014 contacts/people\n  /api/customers/deals          \u2014 deals/opportunities\n  /api/customers/activities     \u2014 activities/tasks\n  /api/sales/orders             \u2014 sales orders\n  /api/sales/quotes             \u2014 quotes\n  /api/sales/invoices           \u2014 invoices\n  /api/catalog/products         \u2014 products\n  /api/catalog/categories       \u2014 categories\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nRECIPES \u2014 follow EXACTLY for each task type\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\nFIND/LIST records (1 call):\n  For COMMON PATHS: skip describeEndpoint, go straight to execute.\n  1. execute: api.request({ method: 'GET', path: '/api/<module>/<resource>' })\n  The \"search\" query param only matches indexed text fields \u2014 it will NOT match concepts like \"Polish\" or \"large\".\n  For conceptual/subjective queries, fetch ALL records and use YOUR reasoning to identify matches from the returned data.\n  For unknown paths: 1 search + 1 execute.\n\nUPDATE a record (3-4 calls):\n  1. search: spec.describeEndpoint('/api/<module>/<resource>', 'PUT')  \u2192 learn requestBody fields AND relatedEntity\n  2. execute: GET the record \u2192 find it, get its ID\n  3. execute: PUT to the COLLECTION path with id IN THE BODY:\n     api.request({ method: 'PUT', path: '/api/<module>/<resource>', body: { id: '<uuid>', ...changes } })\n  NOTE: All CRUD endpoints use the COLLECTION path. The id goes in the request BODY, not the URL. There are NO /{id} path segments.\n\nCREATE a record (2-3 calls):\n  1. search: spec.describeEndpoint('/api/<module>/<resource>', 'POST') \u2192 gives requiredFields, optionalFields, nestedCollections, and a working example\n  2. Ask user for confirmation with the field values\n  3. execute: api.request({ method: 'POST', ...body })\n  If the endpoint has nestedCollections (like lines), include them INLINE in the body \u2014 do NOT create them separately.\n  Use the \"example\" from describeEndpoint as your template \u2014 fill in real values.\n  Example \u2014 create a quote with line items:\n    api.request({ method: 'POST', path: '/api/sales/quotes', body: {\n      currencyCode: 'EUR', customerEntityId: '<company-uuid>',\n      lines: [{ currencyCode: 'EUR', quantity: 1, productId: '<product-uuid>', name: 'Product Name', kind: 'product' }]\n    }})\n  Do NOT create lines separately. Do NOT include id, quoteId, or total fields \u2014 the server generates them.\n\nCREATE MULTIPLE records (2-3 calls):\n  1. search: spec.describeEndpoint('/api/<module>/<resource>', 'POST') \u2192 learn fields + example\n  2. execute: loop in one call:\n     async () => {\n       const results = [];\n       for (const item of items) {\n         results.push(await api.request({ method: 'POST', path: '...', body: item }));\n       }\n       return results;\n     }\n\nDISCOVER (what endpoints/entities exist) (1 call):\n  1. search: spec.findEndpoints('<keyword>') or spec.describeEntity('<keyword>')\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nHARD RULES\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n- MAXIMUM 4 tool calls per user message. You WILL be cut off after 10.\n- NEVER call findEndpoints or describeEndpoint for COMMON PATHS listed above \u2014 use them directly with execute.\n- NEVER call describeEntity if describeEndpoint already returned relatedEntity.\n- NEVER repeat a search from earlier in the conversation \u2014 reuse previous results.\n- NEVER make N+1 API calls (1 call per record). Fetch a list and reason about the results yourself.\n- When you already have the data you need from a previous call, use it \u2014 do NOT fetch more data to \"enrich\" it.\n- Do NOT write JavaScript filters/regex to match records. Fetch data with a simple api.request() call and use YOUR knowledge to interpret the results.\n- The \"search\" query param is fulltext only \u2014 it won't match nationalities, categories, or subjective criteria. For those, fetch all and reason.\n- describeEndpoint returns a COMPACT summary with requiredFields, optionalFields, and an example. Use the example as your template \u2014 fill in real values and send it.\n- For fields you don't know, OMIT them \u2014 the API uses defaults for optional fields.\n- NEVER try to set computed/total fields (amounts, totals, counts) \u2014 the server calculates them.\n- For updates: describeEndpoint gives you the field names. Go straight to GET + PUT. PUT path is the COLLECTION path, id in BODY.\n- For creates with children (e.g. quote + lines): include children INLINE in the body using the nestedCollections field name.\n\nRESPONSE RULES:\n- Be proactive \u2014 fetch data and present results, don't ask what the user wants to see.\n- Never show technical terms, IDs, JSON, or internal reasoning.\n- Present results in clean business language with **bold names** and bullet points.\n- Only ask for confirmation before create/update/delete operations.\n`.trim()\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'AI Assistant',\n  summary: 'AI chat',\n  methods: {\n    POST: { summary: 'Send message to AI agent via SSE stream' },\n  },\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n}\n\n/**\n * Get user's role IDs from the database.\n */\nasync function getUserRoleIds(\n  em: EntityManager,\n  userId: string,\n  tenantId: string | null\n): Promise<string[]> {\n  if (!tenantId) return []\n\n  const links = await findWithDecryption(\n    em,\n    UserRole,\n    { user: userId as any, role: { tenantId } } as any,\n    { populate: ['role'] },\n    { tenantId, organizationId: null },\n  )\n  const linkList = Array.isArray(links) ? links : []\n  return linkList\n    .map((l) => (l.role as any)?.id)\n    .filter((id): id is string => typeof id === 'string' && id.length > 0)\n}\n\n/**\n * Chat endpoint that routes messages to OpenCode agent.\n * OpenCode connects to MCP server for tool access (search, execute, context_whoami).\n *\n * Emits verbose SSE events for debugging:\n * - thinking: Agent started processing\n * - metadata: Model, tokens, timing info\n * - tool-call: Tool invocation with args\n * - tool-result: Tool response\n * - text: Response text\n * - question: Confirmation question from agent\n * - done: Complete with session ID\n * - error: Error occurred\n */\nexport async function POST(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const body = await req.json()\n    const { messages, sessionId, answerQuestion } = body as {\n      messages?: Array<{ role: string; content: string }>\n      sessionId?: string\n      // For answering a question\n      answerQuestion?: {\n        questionId: string\n        answer: number\n        sessionId: string\n      }\n    }\n\n    // Create SSE stream for frontend compatibility\n    const encoder = new TextEncoder()\n    const stream = new TransformStream()\n    const writer = stream.writable.getWriter()\n    let writerClosed = false\n\n    const writeSSE = async (event: OpenCodeStreamEvent | { type: string; [key: string]: unknown }) => {\n      if (writerClosed) return // Guard against writes after close\n      try {\n        const jsonStr = JSON.stringify(event)\n        await writer.write(encoder.encode(`data: ${jsonStr}\\n\\n`))\n      } catch (err) {\n        // Writer may have been closed by client disconnect\n        console.warn('[AI Chat] Failed to write SSE event:', event.type)\n      }\n    }\n\n    const closeWriter = async () => {\n      if (writerClosed) return\n      writerClosed = true\n      try {\n        await writer.close()\n      } catch {\n        // Already closed\n      }\n    }\n\n    // Handle question answer - simple JSON response, not SSE\n    // The original SSE stream continues and will receive the follow-up response\n    if (answerQuestion) {\n      try {\n        const client = createOpenCodeClient()\n        await client.answerQuestion(answerQuestion.questionId, answerQuestion.answer)\n        return NextResponse.json({ success: true })\n      } catch (error) {\n        console.error('[AI Chat] Answer error:', error)\n        return NextResponse.json(\n          { error: error instanceof Error ? error.message : 'Failed to answer question' },\n          { status: 500 }\n        )\n      }\n    }\n\n    // Handle regular message\n    if (!messages || !Array.isArray(messages)) {\n      return NextResponse.json({ error: 'messages array is required' }, { status: 400 })\n    }\n\n    // Get the latest user message\n    const lastUserMessage = messages.filter((m) => m.role === 'user').pop()?.content\n    if (!lastUserMessage) {\n      return NextResponse.json({ error: 'No user message found' }, { status: 400 })\n    }\n\n    const chatStartTime = Date.now()\n    const messagePreview = lastUserMessage.slice(0, 80).replace(/\\n/g, ' ')\n    console.error(`[AI Usage] Chat request: user=${auth.sub} session=${sessionId ? sessionId.slice(0, 16) + '...' : 'new'} message=\"${messagePreview}${lastUserMessage.length > 80 ? '...' : ''}\"`)\n\n\n    // For new sessions, create an ephemeral API key that inherits user permissions\n    // The API key secret is encrypted and stored; MCP server recovers it via session token\n    let sessionToken: string | null = null\n    if (!sessionId) {\n      try {\n        const container = await createRequestContainer()\n        const em = container.resolve<EntityManager>('em')\n\n        // Get user's role IDs from database\n        const userRoleIds = await getUserRoleIds(em, auth.sub, auth.tenantId)\n\n        // Generate session token and create ephemeral key\n        sessionToken = generateSessionToken()\n        await createSessionApiKey(em, {\n          sessionToken,\n          userId: auth.sub,\n          userRoles: userRoleIds,\n          tenantId: auth.tenantId,\n          organizationId: auth.orgId,\n          ttlMinutes: 120,\n        })\n        console.log('[AI Chat] Created session token:', sessionToken.slice(0, 12) + '...')\n      } catch (error) {\n        console.error('[AI Chat] Failed to create session key:', error)\n        // Continue without session key - tools will use static API key auth\n      }\n    }\n\n    // Build the message to send to OpenCode\n    // For NEW sessions: inject system instructions + session token\n    // For existing sessions: only inject session token if available\n    let messageToSend = ''\n\n    // For NEW sessions only, prepend system instructions\n    if (!sessionId) {\n      messageToSend = `${CHAT_SYSTEM_INSTRUCTIONS}\\n\\n`\n    }\n\n    // If we have a session token, prepend explicit instructions for the AI to include it in tool calls\n    if (sessionToken) {\n      messageToSend += `[Session Authorization: ${sessionToken}. Include \"_sessionToken\": \"${sessionToken}\" in EVERY tool call.]\\n\\n`\n    }\n\n    messageToSend += lastUserMessage\n\n    // Process in background - starts AFTER Response is returned so there's a reader for the stream\n    ;(async () => {\n      let toolCallCount = 0\n      let lastTokens: { input?: number; output?: number } | undefined\n      let resultSessionId: string | undefined\n\n      try {\n        // Emit session-authorized event first (if we have a token)\n        if (sessionToken) {\n          console.log('[AI Chat] Emitting session-authorized event')\n          await writeSSE({\n            type: 'session-authorized',\n            sessionToken: sessionToken.slice(0, 12) + '...',\n          })\n        }\n\n        // Emit thinking event for UX feedback\n        await writeSSE({ type: 'thinking' })\n\n        // Use streaming handler that supports questions\n        await handleOpenCodeMessageStreaming(\n          {\n            message: messageToSend,\n            sessionId,\n          },\n          async (event) => {\n            // Track usage from stream events\n            if (event.type === 'tool-call') toolCallCount++\n            if (event.type === 'metadata' && 'tokens' in event) lastTokens = event.tokens\n            if (event.type === 'done' && 'sessionId' in event) resultSessionId = event.sessionId\n\n            await writeSSE(event)\n          }\n        )\n      } catch (error) {\n        console.error('[AI Chat] OpenCode error:', error)\n        await writeSSE({\n          type: 'error',\n          error: error instanceof Error ? error.message : 'OpenCode request failed',\n        })\n      } finally {\n        const durationMs = Date.now() - chatStartTime\n        console.error(`[AI Usage] Chat complete: user=${auth.sub} session=${(resultSessionId || sessionId || 'unknown').slice(0, 16)}... duration=${durationMs}ms toolCalls=${toolCallCount}${lastTokens ? ` tokens={in:${lastTokens.input || 0},out:${lastTokens.output || 0}}` : ''}`)\n        await closeWriter()\n      }\n    })()\n\n    return new Response(stream.readable, {\n      headers: {\n        'Content-Type': 'text/event-stream',\n        'Cache-Control': 'no-cache',\n        Connection: 'keep-alive',\n      },\n    })\n  } catch (error) {\n    console.error('[AI Chat] Error:', error)\n    return NextResponse.json({ error: 'Chat request failed' }, { status: 500 })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAsC;AAE/C,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,4BAA4B;AACrC,SAAS,8BAA8B;AAEvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB;AACzB,SAAS,0BAA0B;AAMnC,MAAM,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmG/B,KAAK;AAEA,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM,EAAE,SAAS,0CAA0C;AAAA,EAC7D;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAKA,eAAe,eACb,IACA,QACA,UACmB;AACnB,MAAI,CAAC,SAAU,QAAO,CAAC;AAEvB,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,QAAe,MAAM,EAAE,SAAS,EAAE;AAAA,IAC1C,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,IACrB,EAAE,UAAU,gBAAgB,KAAK;AAAA,EACnC;AACA,QAAM,WAAW,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC;AACjD,SAAO,SACJ,IAAI,CAAC,MAAO,EAAE,MAAc,EAAE,EAC9B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AACzE;AAgBA,eAAsB,KAAK,KAAkB;AAC3C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,EAAE,UAAU,WAAW,eAAe,IAAI;AAYhD,UAAM,UAAU,IAAI,YAAY;AAChC,UAAM,SAAS,IAAI,gBAAgB;AACnC,UAAM,SAAS,OAAO,SAAS,UAAU;AACzC,QAAI,eAAe;AAEnB,UAAM,WAAW,OAAO,UAA0E;AAChG,UAAI,aAAc;AAClB,UAAI;AACF,cAAM,UAAU,KAAK,UAAU,KAAK;AACpC,cAAM,OAAO,MAAM,QAAQ,OAAO,SAAS,OAAO;AAAA;AAAA,CAAM,CAAC;AAAA,MAC3D,SAAS,KAAK;AAEZ,gBAAQ,KAAK,wCAAwC,MAAM,IAAI;AAAA,MACjE;AAAA,IACF;AAEA,UAAM,cAAc,YAAY;AAC9B,UAAI,aAAc;AAClB,qBAAe;AACf,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AAAA,IACF;AAIA,QAAI,gBAAgB;AAClB,UAAI;AACF,cAAM,SAAS,qBAAqB;AACpC,cAAM,OAAO,eAAe,eAAe,YAAY,eAAe,MAAM;AAC5E,eAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,MAC5C,SAAS,OAAO;AACd,gBAAQ,MAAM,2BAA2B,KAAK;AAC9C,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,4BAA4B;AAAA,UAC9E,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAGA,QAAI,CAAC,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAAG;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnF;AAGA,UAAM,kBAAkB,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,IAAI,GAAG;AACzE,QAAI,CAAC,iBAAiB;AACpB,aAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAEA,UAAM,gBAAgB,KAAK,IAAI;AAC/B,UAAM,iBAAiB,gBAAgB,MAAM,GAAG,EAAE,EAAE,QAAQ,OAAO,GAAG;AACtE,YAAQ,MAAM,iCAAiC,KAAK,GAAG,YAAY,YAAY,UAAU,MAAM,GAAG,EAAE,IAAI,QAAQ,KAAK,aAAa,cAAc,GAAG,gBAAgB,SAAS,KAAK,QAAQ,EAAE,GAAG;AAK9L,QAAI,eAA8B;AAClC,QAAI,CAAC,WAAW;AACd,UAAI;AACF,cAAM,YAAY,MAAM,uBAAuB;AAC/C,cAAM,KAAK,UAAU,QAAuB,IAAI;AAGhD,cAAM,cAAc,MAAM,eAAe,IAAI,KAAK,KAAK,KAAK,QAAQ;AAGpE,uBAAe,qBAAqB;AACpC,cAAM,oBAAoB,IAAI;AAAA,UAC5B;AAAA,UACA,QAAQ,KAAK;AAAA,UACb,WAAW;AAAA,UACX,UAAU,KAAK;AAAA,UACf,gBAAgB,KAAK;AAAA,UACrB,YAAY;AAAA,QACd,CAAC;AACD,gBAAQ,IAAI,oCAAoC,aAAa,MAAM,GAAG,EAAE,IAAI,KAAK;AAAA,MACnF,SAAS,OAAO;AACd,gBAAQ,MAAM,2CAA2C,KAAK;AAAA,MAEhE;AAAA,IACF;AAKA,QAAI,gBAAgB;AAGpB,QAAI,CAAC,WAAW;AACd,sBAAgB,GAAG,wBAAwB;AAAA;AAAA;AAAA,IAC7C;AAGA,QAAI,cAAc;AAChB,uBAAiB,2BAA2B,YAAY,+BAA+B,YAAY;AAAA;AAAA;AAAA,IACrG;AAEA,qBAAiB;AAGhB,KAAC,YAAY;AACZ,UAAI,gBAAgB;AACpB,UAAI;AACJ,UAAI;AAEJ,UAAI;AAEF,YAAI,cAAc;AAChB,kBAAQ,IAAI,6CAA6C;AACzD,gBAAM,SAAS;AAAA,YACb,MAAM;AAAA,YACN,cAAc,aAAa,MAAM,GAAG,EAAE,IAAI;AAAA,UAC5C,CAAC;AAAA,QACH;AAGA,cAAM,SAAS,EAAE,MAAM,WAAW,CAAC;AAGnC,cAAM;AAAA,UACJ;AAAA,YACE,SAAS;AAAA,YACT;AAAA,UACF;AAAA,UACA,OAAO,UAAU;AAEf,gBAAI,MAAM,SAAS,YAAa;AAChC,gBAAI,MAAM,SAAS,cAAc,YAAY,MAAO,cAAa,MAAM;AACvE,gBAAI,MAAM,SAAS,UAAU,eAAe,MAAO,mBAAkB,MAAM;AAE3E,kBAAM,SAAS,KAAK;AAAA,UACtB;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,MAAM,6BAA6B,KAAK;AAChD,cAAM,SAAS;AAAA,UACb,MAAM;AAAA,UACN,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD,CAAC;AAAA,MACH,UAAE;AACA,cAAM,aAAa,KAAK,IAAI,IAAI;AAChC,gBAAQ,MAAM,kCAAkC,KAAK,GAAG,aAAa,mBAAmB,aAAa,WAAW,MAAM,GAAG,EAAE,CAAC,gBAAgB,UAAU,gBAAgB,aAAa,GAAG,aAAa,eAAe,WAAW,SAAS,CAAC,QAAQ,WAAW,UAAU,CAAC,MAAM,EAAE,EAAE;AAC/Q,cAAM,YAAY;AAAA,MACpB;AAAA,IACF,GAAG;AAEH,WAAO,IAAI,SAAS,OAAO,UAAU;AAAA,MACnC,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,YAAY;AAAA,MACd;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,oBAAoB,KAAK;AACvC,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AACF;",
+  "sourcesContent": ["import { NextResponse, type NextRequest } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  handleOpenCodeMessageStreaming,\n  type OpenCodeAuthContext,\n  type OpenCodeStreamEvent,\n} from '../../lib/opencode-handlers'\nimport { createOpenCodeClient } from '../../lib/opencode-client'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport {\n  generateSessionToken,\n  createSessionApiKey,\n  bindOpencodeSessionToApiKey,\n  findApiKeyByOpencodeSessionId,\n} from '@open-mercato/core/modules/api_keys/services/apiKeyService'\nimport { UserRole } from '@open-mercato/core/modules/auth/data/entities'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\n/**\n * System instructions injected at the start of new chat sessions.\n * These ensure the AI follows the correct workflow for data operations.\n */\nconst CHAT_SYSTEM_INSTRUCTIONS = `\nYou are a helpful business assistant for Open Mercato.\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nABSOLUTE RULES \u2014 FOLLOW THESE OR BE CUT OFF\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n1. READ = GET only. If the user says find/list/show/search/get \u2192 use only GET. NEVER call PUT/POST/DELETE for a read query.\n2. PUT path = collection path. id goes in the BODY, not the URL. Example: PUT /api/customers/companies with { id: '...', name: 'New' }. There are NO /{id} path segments.\n3. Confirm before ANY write. Before POST/PUT/DELETE: present your plan in business language, then STOP and wait for user to say \"yes\". Do NOT execute the write in the same turn.\n4. Maximum 4 tool calls per message. Hard limit is 10.\n\nYou have 2 tools \u2014 both accept a \"code\" parameter with an async JavaScript arrow function.\n\nTOOL: search \u2014 discover endpoints and schemas (READ-ONLY, fast)\n  - spec.findEndpoints(keyword) \u2192 [{ path, methods }]\n  - spec.describeEndpoint(path, method) \u2192 COMPACT: { requiredFields, optionalFields, nestedCollections, example, relatedEndpoints, relatedEntity }\n  - spec.describeEntity(keyword) \u2192 { className, fields, relationships }\n\nTOOL: execute \u2014 make API calls (reads and writes)\n  - api.request({ method, path, query?, body? }) \u2192 { success, statusCode, data }\n\nCOMMON API PATHS (use directly \u2014 do NOT call findEndpoints for these):\n  /api/customers/companies      \u2014 companies (GET list, POST create, PUT update)\n  /api/customers/people         \u2014 contacts/people\n  /api/customers/deals          \u2014 deals/opportunities\n  /api/customers/activities     \u2014 activities/tasks\n  /api/sales/orders             \u2014 sales orders\n  /api/sales/quotes             \u2014 quotes\n  /api/sales/invoices           \u2014 invoices\n  /api/catalog/products         \u2014 products\n  /api/catalog/categories       \u2014 categories\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nRECIPES \u2014 follow EXACTLY for each task type\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\nFIND/LIST records (1 call):\n  For COMMON PATHS: skip describeEndpoint, go straight to execute.\n  1. execute: api.request({ method: 'GET', path: '/api/<module>/<resource>' })\n  The \"search\" query param only matches indexed text fields \u2014 it will NOT match concepts like \"Polish\" or \"large\".\n  For conceptual/subjective queries, fetch ALL records and use YOUR reasoning to identify matches from the returned data.\n  For unknown paths: 1 search + 1 execute.\n\nUPDATE a record (3-4 calls):\n  1. search: spec.describeEndpoint('/api/<module>/<resource>', 'PUT')  \u2192 learn requestBody fields AND relatedEntity\n  2. execute: GET the record \u2192 find it, get its ID\n  3. execute: PUT to the COLLECTION path with id IN THE BODY:\n     api.request({ method: 'PUT', path: '/api/<module>/<resource>', body: { id: '<uuid>', ...changes } })\n  NOTE: All CRUD endpoints use the COLLECTION path. The id goes in the request BODY, not the URL. There are NO /{id} path segments.\n\nCREATE a record (2-3 calls):\n  1. search: spec.describeEndpoint('/api/<module>/<resource>', 'POST') \u2192 gives requiredFields, optionalFields, nestedCollections, and a working example\n  2. Ask user for confirmation with the field values\n  3. execute: api.request({ method: 'POST', ...body })\n  If the endpoint has nestedCollections (like lines), include them INLINE in the body \u2014 do NOT create them separately.\n  Use the \"example\" from describeEndpoint as your template \u2014 fill in real values.\n  Example \u2014 create a quote with line items:\n    api.request({ method: 'POST', path: '/api/sales/quotes', body: {\n      currencyCode: 'EUR', customerEntityId: '<company-uuid>',\n      lines: [{ currencyCode: 'EUR', quantity: 1, productId: '<product-uuid>', name: 'Product Name', kind: 'product' }]\n    }})\n  Do NOT create lines separately. Do NOT include id, quoteId, or total fields \u2014 the server generates them.\n\nCREATE MULTIPLE records (2-3 calls):\n  1. search: spec.describeEndpoint('/api/<module>/<resource>', 'POST') \u2192 learn fields + example\n  2. execute: loop in one call:\n     async () => {\n       const results = [];\n       for (const item of items) {\n         results.push(await api.request({ method: 'POST', path: '...', body: item }));\n       }\n       return results;\n     }\n\nDISCOVER (what endpoints/entities exist) (1 call):\n  1. search: spec.findEndpoints('<keyword>') or spec.describeEntity('<keyword>')\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nHARD RULES\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n- MAXIMUM 4 tool calls per user message. You WILL be cut off after 10.\n- NEVER call findEndpoints or describeEndpoint for COMMON PATHS listed above \u2014 use them directly with execute.\n- NEVER call describeEntity if describeEndpoint already returned relatedEntity.\n- NEVER repeat a search from earlier in the conversation \u2014 reuse previous results.\n- NEVER make N+1 API calls (1 call per record). Fetch a list and reason about the results yourself.\n- When you already have the data you need from a previous call, use it \u2014 do NOT fetch more data to \"enrich\" it.\n- Do NOT write JavaScript filters/regex to match records. Fetch data with a simple api.request() call and use YOUR knowledge to interpret the results.\n- The \"search\" query param is fulltext only \u2014 it won't match nationalities, categories, or subjective criteria. For those, fetch all and reason.\n- describeEndpoint returns a COMPACT summary with requiredFields, optionalFields, and an example. Use the example as your template \u2014 fill in real values and send it.\n- For fields you don't know, OMIT them \u2014 the API uses defaults for optional fields.\n- NEVER try to set computed/total fields (amounts, totals, counts) \u2014 the server calculates them.\n- For updates: describeEndpoint gives you the field names. Go straight to GET + PUT. PUT path is the COLLECTION path, id in BODY.\n- For creates with children (e.g. quote + lines): include children INLINE in the body using the nestedCollections field name.\n\nRESPONSE RULES:\n- Be proactive \u2014 fetch data and present results, don't ask what the user wants to see.\n- Never show technical terms, IDs, JSON, or internal reasoning.\n- Present results in clean business language with **bold names** and bullet points.\n- Only ask for confirmation before create/update/delete operations.\n`.trim()\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'AI Assistant',\n  summary: 'AI chat',\n  methods: {\n    POST: { summary: 'Send message to AI agent via SSE stream' },\n  },\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n}\n\n/**\n * Get user's role IDs from the database.\n */\nasync function getUserRoleIds(\n  em: EntityManager,\n  userId: string,\n  tenantId: string | null\n): Promise<string[]> {\n  if (!tenantId) return []\n\n  const links = await findWithDecryption(\n    em,\n    UserRole,\n    { user: userId as any, role: { tenantId } } as any,\n    { populate: ['role'] },\n    { tenantId, organizationId: null },\n  )\n  const linkList = Array.isArray(links) ? links : []\n  return linkList\n    .map((l) => (l.role as any)?.id)\n    .filter((id): id is string => typeof id === 'string' && id.length > 0)\n}\n\n/**\n * Chat endpoint that routes messages to OpenCode agent.\n * OpenCode connects to MCP server for tool access (search, execute, context_whoami).\n *\n * Emits verbose SSE events for debugging:\n * - thinking: Agent started processing\n * - metadata: Model, tokens, timing info\n * - tool-call: Tool invocation with args\n * - tool-result: Tool response\n * - text: Response text\n * - question: Confirmation question from agent\n * - done: Complete with session ID\n * - error: Error occurred\n */\nexport async function POST(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const body = await req.json()\n    const { messages, sessionId, answerQuestion } = body as {\n      messages?: Array<{ role: string; content: string }>\n      sessionId?: string\n      // For answering a question\n      answerQuestion?: {\n        questionId: string\n        answer: number\n        sessionId: string\n      }\n    }\n\n    // Create SSE stream for frontend compatibility\n    const encoder = new TextEncoder()\n    const stream = new TransformStream()\n    const writer = stream.writable.getWriter()\n    let writerClosed = false\n\n    const writeSSE = async (event: OpenCodeStreamEvent | { type: string; [key: string]: unknown }) => {\n      if (writerClosed) return // Guard against writes after close\n      try {\n        const jsonStr = JSON.stringify(event)\n        await writer.write(encoder.encode(`data: ${jsonStr}\\n\\n`))\n      } catch (err) {\n        // Writer may have been closed by client disconnect\n        console.warn('[AI Chat] Failed to write SSE event:', event.type)\n      }\n    }\n\n    const closeWriter = async () => {\n      if (writerClosed) return\n      writerClosed = true\n      try {\n        await writer.close()\n      } catch {\n        // Already closed\n      }\n    }\n\n    // Resolve a request-scoped EntityManager once \u2014 needed both by the\n    // answerQuestion short-circuit (for ownership re-check) and by the\n    // streaming branch (for session-token mint + post-`done` binding).\n    const container = await createRequestContainer()\n    const em = container.resolve<EntityManager>('em')\n\n    const opencodeAuth: OpenCodeAuthContext = {\n      userId: auth.sub,\n      tenantId: auth.tenantId ?? null,\n      organizationId: auth.orgId ?? null,\n    }\n\n    // Handle question answer - simple JSON response, not SSE\n    // The original SSE stream continues and will receive the follow-up response\n    if (answerQuestion) {\n      try {\n        const client = createOpenCodeClient()\n        // Resolve the question's actual sessionID from OpenCode \u2014 never\n        // trust the caller-supplied `answerQuestion.sessionId` blindly.\n        const pending = await client.getPendingQuestions()\n        const matching = pending.find((q) => q.id === answerQuestion.questionId)\n        if (!matching) {\n          // Unknown / stale question id \u2014 same opaque response as a\n          // foreign-owner mismatch to avoid leaking which case occurred.\n          return NextResponse.json({ error: 'Session not available' }, { status: 403 })\n        }\n        if (matching.sessionID !== answerQuestion.sessionId) {\n          return NextResponse.json({ error: 'Session not available' }, { status: 403 })\n        }\n        // Look up the api_key row bound to this OpenCode session and\n        // assert ownership matches the authenticated caller.\n        const ownerRow = await findApiKeyByOpencodeSessionId(em, matching.sessionID)\n        if (\n          !ownerRow ||\n          ownerRow.sessionUserId !== opencodeAuth.userId ||\n          (ownerRow.tenantId ?? null) !== opencodeAuth.tenantId ||\n          (ownerRow.organizationId ?? null) !== opencodeAuth.organizationId\n        ) {\n          return NextResponse.json({ error: 'Session not available' }, { status: 403 })\n        }\n\n        await client.answerQuestion(answerQuestion.questionId, answerQuestion.answer)\n        return NextResponse.json({ success: true })\n      } catch (error) {\n        // Fail-closed: any failure during the answerQuestion path \u2014 ownership\n        // mismatch, OpenCode unreachable, getPendingQuestions throwing,\n        // findApiKeyByOpencodeSessionId throwing \u2014 returns the same opaque\n        // 403 envelope used for ownership rejection. This matches finding #1's\n        // security intent that the answerQuestion short-circuit MUST NOT leak\n        // whether the failure was authorization vs backend connectivity vs\n        // implementation error. The real reason is captured in server logs.\n        console.error('[AI Chat] Answer error:', error)\n        return NextResponse.json({ error: 'Session not available' }, { status: 403 })\n      }\n    }\n\n    // Handle regular message\n    if (!messages || !Array.isArray(messages)) {\n      return NextResponse.json({ error: 'messages array is required' }, { status: 400 })\n    }\n\n    // Get the latest user message\n    const lastUserMessage = messages.filter((m) => m.role === 'user').pop()?.content\n    if (!lastUserMessage) {\n      return NextResponse.json({ error: 'No user message found' }, { status: 400 })\n    }\n\n    const chatStartTime = Date.now()\n    const messagePreview = lastUserMessage.slice(0, 80).replace(/\\n/g, ' ')\n    console.error(`[AI Usage] Chat request: user=${auth.sub} session=${sessionId ? sessionId.slice(0, 16) + '...' : 'new'} message=\"${messagePreview}${lastUserMessage.length > 80 ? '...' : ''}\"`)\n\n\n    // For new sessions, create an ephemeral API key that inherits user permissions\n    // The API key secret is encrypted and stored; MCP server recovers it via session token\n    let sessionToken: string | null = null\n    if (!sessionId) {\n      try {\n        // Get user's role IDs from database\n        const userRoleIds = await getUserRoleIds(em, auth.sub, auth.tenantId)\n\n        // Generate session token and create ephemeral key\n        sessionToken = generateSessionToken()\n        await createSessionApiKey(em, {\n          sessionToken,\n          userId: auth.sub,\n          userRoles: userRoleIds,\n          tenantId: auth.tenantId,\n          organizationId: auth.orgId,\n          ttlMinutes: 120,\n        })\n        console.log('[AI Chat] Created session token:', sessionToken.slice(0, 12) + '...')\n      } catch (error) {\n        console.error('[AI Chat] Failed to create session key:', error)\n        // Continue without session key - tools will use static API key auth\n      }\n    }\n\n    // Build the message to send to OpenCode\n    // For NEW sessions: inject system instructions + session token\n    // For existing sessions: only inject session token if available\n    let messageToSend = ''\n\n    // For NEW sessions only, prepend system instructions\n    if (!sessionId) {\n      messageToSend = `${CHAT_SYSTEM_INSTRUCTIONS}\\n\\n`\n    }\n\n    // If we have a session token, prepend explicit instructions for the AI to include it in tool calls\n    if (sessionToken) {\n      messageToSend += `[Session Authorization: ${sessionToken}. Include \"_sessionToken\": \"${sessionToken}\" in EVERY tool call.]\\n\\n`\n    }\n\n    messageToSend += lastUserMessage\n\n    // Process in background - starts AFTER Response is returned so there's a reader for the stream\n    ;(async () => {\n      let toolCallCount = 0\n      let lastTokens: { input?: number; output?: number } | undefined\n      let resultSessionId: string | undefined\n\n      try {\n        // Emit session-authorized event first (if we have a token)\n        if (sessionToken) {\n          console.log('[AI Chat] Emitting session-authorized event')\n          await writeSSE({\n            type: 'session-authorized',\n            sessionToken: sessionToken.slice(0, 12) + '...',\n          })\n        }\n\n        // Emit thinking event for UX feedback\n        await writeSSE({ type: 'thinking' })\n\n        // Use streaming handler that supports questions\n        await handleOpenCodeMessageStreaming(\n          {\n            message: messageToSend,\n            sessionId,\n            auth: opencodeAuth,\n            em,\n          },\n          async (event) => {\n            // Track usage from stream events\n            if (event.type === 'tool-call') toolCallCount++\n            if (event.type === 'metadata' && 'tokens' in event) lastTokens = event.tokens\n            if (event.type === 'done' && 'sessionId' in event) {\n              resultSessionId = event.sessionId\n              // First-time binding: when the caller did NOT supply a\n              // sessionId (i.e., this is a freshly minted chat) and we\n              // successfully created a session token earlier, bind the\n              // newly-resolved OpenCode session id to that api_key row so\n              // subsequent resumes can be authorized.\n              if (!sessionId && sessionToken && event.sessionId) {\n                try {\n                  await bindOpencodeSessionToApiKey(em, sessionToken, event.sessionId)\n                } catch (bindErr) {\n                  // The response stream is already in-flight \u2014 surface the\n                  // failure to logs without disturbing the SSE pipeline.\n                  console.error(\n                    '[AI Chat] Failed to bind OpenCode session to api_key:',\n                    bindErr\n                  )\n                }\n              }\n            }\n\n            await writeSSE(event)\n          }\n        )\n      } catch (error) {\n        console.error('[AI Chat] OpenCode error:', error)\n        await writeSSE({\n          type: 'error',\n          error: error instanceof Error ? error.message : 'OpenCode request failed',\n        })\n      } finally {\n        const durationMs = Date.now() - chatStartTime\n        console.error(`[AI Usage] Chat complete: user=${auth.sub} session=${(resultSessionId || sessionId || 'unknown').slice(0, 16)}... duration=${durationMs}ms toolCalls=${toolCallCount}${lastTokens ? ` tokens={in:${lastTokens.input || 0},out:${lastTokens.output || 0}}` : ''}`)\n        await closeWriter()\n      }\n    })()\n\n    return new Response(stream.readable, {\n      headers: {\n        'Content-Type': 'text/event-stream',\n        'Cache-Control': 'no-cache',\n        Connection: 'keep-alive',\n      },\n    })\n  } catch (error) {\n    console.error('[AI Chat] Error:', error)\n    return NextResponse.json({ error: 'Chat request failed' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAsC;AAE/C,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,OAGK;AACP,SAAS,4BAA4B;AACrC,SAAS,8BAA8B;AAEvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB;AACzB,SAAS,0BAA0B;AAMnC,MAAM,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmG/B,KAAK;AAEA,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM,EAAE,SAAS,0CAA0C;AAAA,EAC7D;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAKA,eAAe,eACb,IACA,QACA,UACmB;AACnB,MAAI,CAAC,SAAU,QAAO,CAAC;AAEvB,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,QAAe,MAAM,EAAE,SAAS,EAAE;AAAA,IAC1C,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,IACrB,EAAE,UAAU,gBAAgB,KAAK;AAAA,EACnC;AACA,QAAM,WAAW,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC;AACjD,SAAO,SACJ,IAAI,CAAC,MAAO,EAAE,MAAc,EAAE,EAC9B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AACzE;AAgBA,eAAsB,KAAK,KAAkB;AAC3C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,EAAE,UAAU,WAAW,eAAe,IAAI;AAYhD,UAAM,UAAU,IAAI,YAAY;AAChC,UAAM,SAAS,IAAI,gBAAgB;AACnC,UAAM,SAAS,OAAO,SAAS,UAAU;AACzC,QAAI,eAAe;AAEnB,UAAM,WAAW,OAAO,UAA0E;AAChG,UAAI,aAAc;AAClB,UAAI;AACF,cAAM,UAAU,KAAK,UAAU,KAAK;AACpC,cAAM,OAAO,MAAM,QAAQ,OAAO,SAAS,OAAO;AAAA;AAAA,CAAM,CAAC;AAAA,MAC3D,SAAS,KAAK;AAEZ,gBAAQ,KAAK,wCAAwC,MAAM,IAAI;AAAA,MACjE;AAAA,IACF;AAEA,UAAM,cAAc,YAAY;AAC9B,UAAI,aAAc;AAClB,qBAAe;AACf,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AAAA,IACF;AAKA,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAuB,IAAI;AAEhD,UAAM,eAAoC;AAAA,MACxC,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,IAChC;AAIA,QAAI,gBAAgB;AAClB,UAAI;AACF,cAAM,SAAS,qBAAqB;AAGpC,cAAM,UAAU,MAAM,OAAO,oBAAoB;AACjD,cAAM,WAAW,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,eAAe,UAAU;AACvE,YAAI,CAAC,UAAU;AAGb,iBAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QAC9E;AACA,YAAI,SAAS,cAAc,eAAe,WAAW;AACnD,iBAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QAC9E;AAGA,cAAM,WAAW,MAAM,8BAA8B,IAAI,SAAS,SAAS;AAC3E,YACE,CAAC,YACD,SAAS,kBAAkB,aAAa,WACvC,SAAS,YAAY,UAAU,aAAa,aAC5C,SAAS,kBAAkB,UAAU,aAAa,gBACnD;AACA,iBAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QAC9E;AAEA,cAAM,OAAO,eAAe,eAAe,YAAY,eAAe,MAAM;AAC5E,eAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,MAC5C,SAAS,OAAO;AAQd,gBAAQ,MAAM,2BAA2B,KAAK;AAC9C,eAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC9E;AAAA,IACF;AAGA,QAAI,CAAC,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAAG;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnF;AAGA,UAAM,kBAAkB,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,IAAI,GAAG;AACzE,QAAI,CAAC,iBAAiB;AACpB,aAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAEA,UAAM,gBAAgB,KAAK,IAAI;AAC/B,UAAM,iBAAiB,gBAAgB,MAAM,GAAG,EAAE,EAAE,QAAQ,OAAO,GAAG;AACtE,YAAQ,MAAM,iCAAiC,KAAK,GAAG,YAAY,YAAY,UAAU,MAAM,GAAG,EAAE,IAAI,QAAQ,KAAK,aAAa,cAAc,GAAG,gBAAgB,SAAS,KAAK,QAAQ,EAAE,GAAG;AAK9L,QAAI,eAA8B;AAClC,QAAI,CAAC,WAAW;AACd,UAAI;AAEF,cAAM,cAAc,MAAM,eAAe,IAAI,KAAK,KAAK,KAAK,QAAQ;AAGpE,uBAAe,qBAAqB;AACpC,cAAM,oBAAoB,IAAI;AAAA,UAC5B;AAAA,UACA,QAAQ,KAAK;AAAA,UACb,WAAW;AAAA,UACX,UAAU,KAAK;AAAA,UACf,gBAAgB,KAAK;AAAA,UACrB,YAAY;AAAA,QACd,CAAC;AACD,gBAAQ,IAAI,oCAAoC,aAAa,MAAM,GAAG,EAAE,IAAI,KAAK;AAAA,MACnF,SAAS,OAAO;AACd,gBAAQ,MAAM,2CAA2C,KAAK;AAAA,MAEhE;AAAA,IACF;AAKA,QAAI,gBAAgB;AAGpB,QAAI,CAAC,WAAW;AACd,sBAAgB,GAAG,wBAAwB;AAAA;AAAA;AAAA,IAC7C;AAGA,QAAI,cAAc;AAChB,uBAAiB,2BAA2B,YAAY,+BAA+B,YAAY;AAAA;AAAA;AAAA,IACrG;AAEA,qBAAiB;AAGhB,KAAC,YAAY;AACZ,UAAI,gBAAgB;AACpB,UAAI;AACJ,UAAI;AAEJ,UAAI;AAEF,YAAI,cAAc;AAChB,kBAAQ,IAAI,6CAA6C;AACzD,gBAAM,SAAS;AAAA,YACb,MAAM;AAAA,YACN,cAAc,aAAa,MAAM,GAAG,EAAE,IAAI;AAAA,UAC5C,CAAC;AAAA,QACH;AAGA,cAAM,SAAS,EAAE,MAAM,WAAW,CAAC;AAGnC,cAAM;AAAA,UACJ;AAAA,YACE,SAAS;AAAA,YACT;AAAA,YACA,MAAM;AAAA,YACN;AAAA,UACF;AAAA,UACA,OAAO,UAAU;AAEf,gBAAI,MAAM,SAAS,YAAa;AAChC,gBAAI,MAAM,SAAS,cAAc,YAAY,MAAO,cAAa,MAAM;AACvE,gBAAI,MAAM,SAAS,UAAU,eAAe,OAAO;AACjD,gCAAkB,MAAM;AAMxB,kBAAI,CAAC,aAAa,gBAAgB,MAAM,WAAW;AACjD,oBAAI;AACF,wBAAM,4BAA4B,IAAI,cAAc,MAAM,SAAS;AAAA,gBACrE,SAAS,SAAS;AAGhB,0BAAQ;AAAA,oBACN;AAAA,oBACA;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAEA,kBAAM,SAAS,KAAK;AAAA,UACtB;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,MAAM,6BAA6B,KAAK;AAChD,cAAM,SAAS;AAAA,UACb,MAAM;AAAA,UACN,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD,CAAC;AAAA,MACH,UAAE;AACA,cAAM,aAAa,KAAK,IAAI,IAAI;AAChC,gBAAQ,MAAM,kCAAkC,KAAK,GAAG,aAAa,mBAAmB,aAAa,WAAW,MAAM,GAAG,EAAE,CAAC,gBAAgB,UAAU,gBAAgB,aAAa,GAAG,aAAa,eAAe,WAAW,SAAS,CAAC,QAAQ,WAAW,UAAU,CAAC,MAAM,EAAE,EAAE;AAC/Q,cAAM,YAAY;AAAA,MACpB;AAAA,IACF,GAAG;AAEH,WAAO,IAAI,SAAS,OAAO,UAAU;AAAA,MACnC,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,YAAY;AAAA,MACd;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,oBAAoB,KAAK;AACvC,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AACF;",
   "names": []
 }

package/dist/modules/ai_assistant/lib/opencode-handlers.js

@@ -1,3 +1,4 @@
+import { findApiKeyByOpencodeSessionId } from "@open-mercato/core/modules/api_keys/services/apiKeyService";
 import {
   createOpenCodeClient
 } from "./opencode-client.js";
@@ -8,14 +9,39 @@ function getClient() {
   }
   return clientInstance;
 }
+class OpenCodeSessionOwnershipError extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "OpenCodeSessionOwnershipError";
+  }
+}
+async function assertOpencodeSessionOwnership(em, opencodeSessionId, auth) {
+  const row = await findApiKeyByOpencodeSessionId(em, opencodeSessionId);
+  if (!row) {
+    throw new OpenCodeSessionOwnershipError("session_unbound", "Session not available");
+  }
+  const rowTenantId = row.tenantId ?? null;
+  const rowOrgId = row.organizationId ?? null;
+  if (row.sessionUserId !== auth.userId || rowTenantId !== auth.tenantId || rowOrgId !== auth.organizationId) {
+    throw new OpenCodeSessionOwnershipError("session_owner_mismatch", "Session not available");
+  }
+}
 async function handleOpenCodeMessage(request) {
   const client = getClient();
-  const { message, sessionId, model } = request;
+  const { message, sessionId, model, auth, em } = request;
   if (!message) {
     throw new Error("Message is required");
   }
   let session;
   if (sessionId) {
+    if (!auth || !em) {
+      throw new OpenCodeSessionOwnershipError(
+        "session_unbound",
+        "OpenCode session resume requires auth context"
+      );
+    }
+    await assertOpencodeSessionOwnership(em, sessionId, auth);
     session = await client.getSession(sessionId);
   } else {
     session = await client.createSession();
@@ -93,7 +119,7 @@ function extractMetadataFromResponse(result) {
 }
 async function handleOpenCodeMessageStreaming(request, onEvent) {
   const client = getClient();
-  const { message, sessionId, model } = request;
+  const { message, sessionId, model, auth, em } = request;
   const startTime = Date.now();
   const usageStats = {
     toolCalls: 0,
@@ -109,6 +135,19 @@ async function handleOpenCodeMessageStreaming(request, onEvent) {
   try {
     let session;
     if (sessionId) {
+      if (!auth || !em) {
+        await onEvent({ type: "error", error: "Session not available" });
+        return;
+      }
+      try {
+        await assertOpencodeSessionOwnership(em, sessionId, auth);
+      } catch (err) {
+        if (err instanceof OpenCodeSessionOwnershipError) {
+          await onEvent({ type: "error", error: "Session not available" });
+          return;
+        }
+        throw err;
+      }
       session = await client.getSession(sessionId);
     } else {
       session = await client.createSession();
@@ -376,9 +415,37 @@ async function handleOpenCodeMessageStreaming(request, onEvent) {
     });
   }
 }
-async function handleOpenCodeAnswer(questionId, answer, sessionId, onEvent) {
+async function handleOpenCodeAnswer(questionId, answer, sessionId, onEvent, ownership) {
   const client = getClient();
   try {
+    const pending = await client.getPendingQuestions();
+    const matchingQuestion = pending.find((q) => q.id === questionId);
+    if (!matchingQuestion) {
+      await onEvent({ type: "error", error: "Session not available" });
+      return;
+    }
+    if (matchingQuestion.sessionID !== sessionId) {
+      await onEvent({ type: "error", error: "Session not available" });
+      return;
+    }
+    if (ownership?.auth && ownership?.em) {
+      try {
+        await assertOpencodeSessionOwnership(
+          ownership.em,
+          matchingQuestion.sessionID,
+          ownership.auth
+        );
+      } catch (err) {
+        if (err instanceof OpenCodeSessionOwnershipError) {
+          await onEvent({ type: "error", error: "Session not available" });
+          return;
+        }
+        throw err;
+      }
+    } else {
+      await onEvent({ type: "error", error: "Session not available" });
+      return;
+    }
     await client.answerQuestion(questionId, answer);
     await onEvent({ type: "thinking" });
     const maxAttempts = 30;
@@ -419,14 +486,34 @@ async function handleOpenCodeAnswer(questionId, answer, sessionId, onEvent) {
     });
   }
 }
-async function getPendingQuestions() {
+async function getOwnedPendingQuestions(em, auth) {
   const client = getClient();
-  return client.getPendingQuestions();
+  const all = await client.getPendingQuestions();
+  if (!Array.isArray(all) || all.length === 0) return [];
+  const owned = [];
+  for (const question of all) {
+    const sessionId = question?.sessionID;
+    if (!sessionId) continue;
+    const row = await findApiKeyByOpencodeSessionId(em, sessionId);
+    if (!row) continue;
+    if (row.sessionUserId !== auth.userId || (row.tenantId ?? null) !== auth.tenantId || (row.organizationId ?? null) !== auth.organizationId) {
+      continue;
+    }
+    owned.push(question);
+  }
+  return owned;
+}
+async function getPendingQuestions() {
+  throw new Error(
+    "getPendingQuestions() is no longer safe to call without an auth context \u2014 use getOwnedPendingQuestions(em, auth) instead. See .ai/specs/2026-05-24-fix-opencode-session-ownership.md"
+  );
 }
 export {
+  OpenCodeSessionOwnershipError,
   extractAllPartsFromResponse,
   extractMetadataFromResponse,
   extractTextFromResponse,
+  getOwnedPendingQuestions,
   getPendingQuestions,
   handleOpenCodeAnswer,
   handleOpenCodeHealth,