@open-mercato/ai-assistant 0.6.6-develop.6246.1.85fd30c705 → 0.6.6-develop.6255.1.a6ee4a57c1

package/AGENTS.md

@@ -1464,6 +1464,15 @@ Agents that need multi-step tool loops configure the `loop` block on `AiAgentDef
 
 ## Changelog
 
+### 2026-06-24 - MCP dev server loads ai-tools for @app local modules (#3524)
+
+**What changed** (`lib/generated-registry-loader.ts`):
+- `rewriteGeneratedAliasImports` now also rewrites the `../../src/...` relative imports the generator emits for `@app` local modules (e.g. `from "../../src/modules/<id>/ai-tools"`), resolving them against the generated file's directory (`<appRoot>/.mercato/generated`) to absolute `file://` URLs with the same `.ts`-suffix probe used for `@/` aliases. Previously only `@/` aliases were rewritten, so the `../../src/...` specifier passed through `esbuild.transform` (transpile-only) into the compiled `.mjs` and Node ESM threw `ERR_MODULE_NOT_FOUND` resolving the extensionless `.ts`-only target. Package-backed modules (`@open-mercato/*`) were never affected — their bare specifiers resolve through `node_modules` to compiled `.js`.
+
+**Files**: `lib/generated-registry-loader.ts`. Regression test: `lib/__tests__/generated-registry-loader.test.ts` (3 cases covering static import, dynamic `import()`, and `.ts`-suffix resolution for the `../../src/...` shape).
+
+**Backward compatibility**: Strictly additive — the `rewriteGeneratedAliasImports(source, appRoot)` signature is unchanged, and `@/` aliases, bare package imports, and sibling `./` imports keep their prior behavior. Only previously-broken `../../src/...` specifiers change (from unresolved to resolved).
+
 ### 2026-06-11 - Harden latent MCP server-config module (#2672)
 
 **What changed** (`lib/mcp-server-config.ts`, currently dead code — no callers):

package/dist/modules/ai_assistant/lib/generated-registry-loader.js

@@ -68,15 +68,21 @@ function toSafeJsStringLiteral(value) {
   return escapeUnsafeJsStringChars(JSON.stringify(value));
 }
 function rewriteGeneratedAliasImports(source, appRoot) {
-  const resolveAlias = (relativePath) => {
-    const target = path.join(appRoot, relativePath);
+  const generatedDir = path.join(appRoot, ".mercato", "generated");
+  const toResolvedLiteral = (target) => {
     const candidate = fs.existsSync(target) ? target : fs.existsSync(target + ".ts") ? target + ".ts" : target;
     return toSafeJsStringLiteral(pathToFileURL(candidate).href);
   };
+  const resolveAlias = (relativePath) => toResolvedLiteral(path.join(appRoot, relativePath));
+  const resolveRelative = (specifier) => toResolvedLiteral(path.resolve(generatedDir, specifier));
   return source.replace(/from\s+["']@\/([^"']+)["']/g, (_match, relativePath) => {
     return `from ${resolveAlias(relativePath)}`;
   }).replace(/import\s*\(\s*["']@\/([^"']+)["']\s*\)/g, (_match, relativePath) => {
     return `import(${resolveAlias(relativePath)})`;
+  }).replace(/from\s+["']((?:\.\.\/)+src\/[^"']+)["']/g, (_match, specifier) => {
+    return `from ${resolveRelative(specifier)}`;
+  }).replace(/import\s*\(\s*["']((?:\.\.\/)+src\/[^"']+)["']\s*\)/g, (_match, specifier) => {
+    return `import(${resolveRelative(specifier)})`;
   });
 }
 async function ensureApiRouteManifestsRegistered() {

package/dist/modules/ai_assistant/lib/generated-registry-loader.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/ai_assistant/lib/generated-registry-loader.ts"],
-  "sourcesContent": ["/**\n * Runtime loader for `.mercato/generated/*.generated.ts` registry files.\n *\n * The generated registries import their entries through the `@/` path alias\n * (e.g. `@/.mercato/generated/ai-tools.generated`). That alias is only\n * understood by the Next.js bundler \u2014 in a standalone Node process (the\n * `mcp:dev` / `mcp:serve` MCP servers, the CLI tool-test runner) a raw\n * `import('@/.mercato/...')` throws `ERR_MODULE_NOT_FOUND: Cannot find\n * package '@/.mercato'` because Node treats `@/` as a package specifier.\n *\n * These helpers locate the generated `.ts` file on disk and compile-and-import\n * it with esbuild (transpile-only), rewriting `@/` aliases to absolute paths.\n * This mirrors `loadBootstrapData` in\n * `@open-mercato/shared/lib/bootstrap/dynamicLoader` and works in both the\n * monorepo and standalone apps.\n */\nimport path from 'node:path'\nimport fs from 'node:fs'\nimport { fileURLToPath, pathToFileURL } from 'node:url'\n\n/**\n * Locate a generated registry file (e.g. `ai-tools.generated.ts`) without\n * hardcoding the workspace layout. Searches upward from this module's compiled\n * location for a `apps/mercato/.mercato/generated/<fileName>` (monorepo), then\n * falls back to cwd-relative lookups (standalone apps run from the app dir).\n */\nexport function findGeneratedFile(fileName: string): string | null {\n  const here = (() => {\n    try {\n      return fileURLToPath(import.meta.url)\n    } catch {\n      return null\n    }\n  })()\n\n  if (here) {\n    let cursor = path.dirname(here)\n    for (let i = 0; i < 12; i++) {\n      const candidate = path.join(cursor, 'apps', 'mercato', '.mercato', 'generated', fileName)\n      if (fs.existsSync(candidate)) return candidate\n      const next = path.dirname(cursor)\n      if (next === cursor) break\n      cursor = next\n    }\n  }\n  // Fallbacks: cwd-based lookup (CLI invoked from apps/mercato, or a standalone\n  // app whose root holds `.mercato/generated`).\n  const fromCwd = path.resolve(process.cwd(), 'apps', 'mercato', '.mercato', 'generated', fileName)\n  if (fs.existsSync(fromCwd)) return fromCwd\n  const fromCwdDirect = path.resolve(process.cwd(), '.mercato', 'generated', fileName)\n  if (fs.existsSync(fromCwdDirect)) return fromCwdDirect\n  return null\n}\n\n/**\n * Compile-and-import a generated registry file on the fly. Resolves the `@/`\n * alias to the app root, transpiles TS \u2192 ESM, and emits a sibling `.mjs` we can\n * `import()` from Node. Cached on mtime so repeat calls in the same process\n * don't recompile.\n *\n * Transpile-only (no bundling): the generated registries declare an array\n * literal whose entries are static `import(\"\u2026\")` arrow functions \u2014 we want\n * those `import()` strings to stay as runtime imports so Node resolves them\n * lazily through the workspace's normal module resolution. Eagerly bundling\n * pulls Next.js / route-handler internals into the `.mjs` and breaks at runtime\n * (e.g. `next/server` package-exports map).\n */\nexport async function compileAndImportGenerated(tsPath: string): Promise<Record<string, unknown>> {\n  const jsPath = tsPath.replace(/\\.ts$/, '.mjs')\n  // appRoot is two directories up from `.mercato/generated/<file>.ts`.\n  const appRoot = path.dirname(path.dirname(path.dirname(tsPath)))\n\n  if (!fs.existsSync(tsPath)) {\n    throw new Error(`Generated file not found: ${tsPath}`)\n  }\n\n  const jsExists = fs.existsSync(jsPath)\n  const needsCompile =\n    !jsExists || fs.statSync(tsPath).mtimeMs > fs.statSync(jsPath).mtimeMs\n\n  if (needsCompile) {\n    const esbuild = await import('esbuild')\n    const tsSource = fs.readFileSync(tsPath, 'utf-8')\n    const aliasRewritten = rewriteGeneratedAliasImports(tsSource, appRoot)\n    const result = await esbuild.transform(aliasRewritten, {\n      loader: 'ts',\n      format: 'esm',\n      target: 'node18',\n      sourcemap: false,\n      sourcefile: tsPath,\n    })\n    fs.writeFileSync(jsPath, result.code)\n  }\n\n  return (await import(pathToFileURL(jsPath).href)) as Record<string, unknown>\n}\n\nconst UNSAFE_JS_STRING_CHAR_ESCAPES: Record<number, string> = {\n  0x3c: '\\\\u003C', // <  \u2014 HTML/script-tag breakout\n  0x3e: '\\\\u003E', // >  \u2014 HTML/script-tag breakout\n  0x2028: '\\\\u2028', // line separator \u2014 string content but a statement terminator pre-ES2019\n  0x2029: '\\\\u2029', // paragraph separator \u2014 same\n}\n\n/**\n * Escape characters that `JSON.stringify` leaves intact but which can still\n * break out of (or alter the meaning of) the JavaScript string literal that the\n * stringified value is embedded into \u2014 notably `<`/`>` (HTML/script-tag\n * breakout) and the U+2028 / U+2029 line separators (valid string content but\n * statement terminators in pre-ES2019 parsers). Apply this on top of\n * `JSON.stringify` so the emitted import source stays well-formed regardless of\n * the resolved path. Exported for unit testing.\n */\nexport function escapeUnsafeJsStringChars(value: string): string {\n  return value.replace(\n    /[<>\\u2028\\u2029]/g,\n    (char) => UNSAFE_JS_STRING_CHAR_ESCAPES[char.charCodeAt(0)],\n  )\n}\n\n/**\n * Stringify a resolved path into a JavaScript string literal that is safe to\n * embed in generated source: `JSON.stringify` handles quoting/standard escapes,\n * and `escapeUnsafeJsStringChars` neutralizes the characters it leaves intact.\n */\nfunction toSafeJsStringLiteral(value: string): string {\n  return escapeUnsafeJsStringChars(JSON.stringify(value))\n}\n\n/**\n * Rewrite `@/...` path-alias imports (both `from \"@/x\"` and dynamic\n * `import(\"@/x\")`) in generated-registry source to absolute `file://` URLs\n * rooted at `appRoot`. The `@/` alias is a Next.js bundler convention; outside\n * the bundler Node treats `@/...` as a bare package specifier and throws\n * `ERR_MODULE_NOT_FOUND`. Exported for unit testing.\n */\nexport function rewriteGeneratedAliasImports(source: string, appRoot: string): string {\n  const resolveAlias = (relativePath: string): string => {\n    const target = path.join(appRoot, relativePath)\n    const candidate = fs.existsSync(target)\n      ? target\n      : fs.existsSync(target + '.ts')\n        ? target + '.ts'\n        : target\n    return toSafeJsStringLiteral(pathToFileURL(candidate).href)\n  }\n  return source\n    .replace(/from\\s+[\"']@\\/([^\"']+)[\"']/g, (_match, relativePath: string) => {\n      return `from ${resolveAlias(relativePath)}`\n    })\n    .replace(/import\\s*\\(\\s*[\"']@\\/([^\"']+)[\"']\\s*\\)/g, (_match, relativePath: string) => {\n      return `import(${resolveAlias(relativePath)})`\n    })\n}\n\n/**\n * Compile-and-import `api-routes.generated.ts` and register its manifest with\n * the shared registry. Many module tools are \"API-backed\" \u2014 their handlers\n * delegate to `createAiApiOperationRunner`, which fails closed with\n * \"No API route manifest registered\" unless the manifest is present. In the\n * Next.js app this is wired at bootstrap, but the standalone MCP servers\n * (`mcp:dev` / `mcp:serve`) bootstrap DI without it, so we register it here.\n *\n * Idempotent: `registerApiRouteManifests` replaces the stored manifest, so\n * calling this repeatedly (e.g. per-request HTTP handlers) is safe. Returns the\n * number of registered routes (0 when the generated file is absent).\n */\nexport async function ensureApiRouteManifestsRegistered(): Promise<number> {\n  const registry = await import('@open-mercato/shared/modules/registry')\n  // Already wired (e.g. the Next.js app bootstrap, or a prior call). Leave the\n  // existing manifest untouched so we never interfere with the in-app agents\n  // framework, which registers it at bootstrap with its own override pipeline.\n  const existing = registry.getApiRouteManifests()\n  if (existing.length > 0) return existing.length\n\n  const tsPath = findGeneratedFile('api-routes.generated.ts')\n  if (!tsPath) return 0\n  try {\n    const mod = await compileAndImportGenerated(tsPath)\n    const apiRoutes = (mod as { apiRoutes?: unknown }).apiRoutes\n    if (!Array.isArray(apiRoutes)) return 0\n    registry.registerApiRouteManifests(\n      apiRoutes as Parameters<typeof registry.registerApiRouteManifests>[0],\n    )\n    return apiRoutes.length\n  } catch (error) {\n    console.warn(\n      '[MCP Tools] Could not register api-routes manifest:',\n      error instanceof Error ? error.message : error,\n    )\n    return 0\n  }\n}\n"],
-  "mappings": "AAgBA,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,SAAS,eAAe,qBAAqB;AAQtC,SAAS,kBAAkB,UAAiC;AACjE,QAAM,QAAQ,MAAM;AAClB,QAAI;AACF,aAAO,cAAc,YAAY,GAAG;AAAA,IACtC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAEH,MAAI,MAAM;AACR,QAAI,SAAS,KAAK,QAAQ,IAAI;AAC9B,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,YAAM,YAAY,KAAK,KAAK,QAAQ,QAAQ,WAAW,YAAY,aAAa,QAAQ;AACxF,UAAI,GAAG,WAAW,SAAS,EAAG,QAAO;AACrC,YAAM,OAAO,KAAK,QAAQ,MAAM;AAChC,UAAI,SAAS,OAAQ;AACrB,eAAS;AAAA,IACX;AAAA,EACF;AAGA,QAAM,UAAU,KAAK,QAAQ,QAAQ,IAAI,GAAG,QAAQ,WAAW,YAAY,aAAa,QAAQ;AAChG,MAAI,GAAG,WAAW,OAAO,EAAG,QAAO;AACnC,QAAM,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,GAAG,YAAY,aAAa,QAAQ;AACnF,MAAI,GAAG,WAAW,aAAa,EAAG,QAAO;AACzC,SAAO;AACT;AAeA,eAAsB,0BAA0B,QAAkD;AAChG,QAAM,SAAS,OAAO,QAAQ,SAAS,MAAM;AAE7C,QAAM,UAAU,KAAK,QAAQ,KAAK,QAAQ,KAAK,QAAQ,MAAM,CAAC,CAAC;AAE/D,MAAI,CAAC,GAAG,WAAW,MAAM,GAAG;AAC1B,UAAM,IAAI,MAAM,6BAA6B,MAAM,EAAE;AAAA,EACvD;AAEA,QAAM,WAAW,GAAG,WAAW,MAAM;AACrC,QAAM,eACJ,CAAC,YAAY,GAAG,SAAS,MAAM,EAAE,UAAU,GAAG,SAAS,MAAM,EAAE;AAEjE,MAAI,cAAc;AAChB,UAAM,UAAU,MAAM,OAAO,SAAS;AACtC,UAAM,WAAW,GAAG,aAAa,QAAQ,OAAO;AAChD,UAAM,iBAAiB,6BAA6B,UAAU,OAAO;AACrE,UAAM,SAAS,MAAM,QAAQ,UAAU,gBAAgB;AAAA,MACrD,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,YAAY;AAAA,IACd,CAAC;AACD,OAAG,cAAc,QAAQ,OAAO,IAAI;AAAA,EACtC;AAEA,SAAQ,MAAM,OAAO,cAAc,MAAM,EAAE;AAC7C;AAEA,MAAM,gCAAwD;AAAA,EAC5D,IAAM;AAAA;AAAA,EACN,IAAM;AAAA;AAAA,EACN,MAAQ;AAAA;AAAA,EACR,MAAQ;AAAA;AACV;AAWO,SAAS,0BAA0B,OAAuB;AAC/D,SAAO,MAAM;AAAA,IACX;AAAA,IACA,CAAC,SAAS,8BAA8B,KAAK,WAAW,CAAC,CAAC;AAAA,EAC5D;AACF;AAOA,SAAS,sBAAsB,OAAuB;AACpD,SAAO,0BAA0B,KAAK,UAAU,KAAK,CAAC;AACxD;AASO,SAAS,6BAA6B,QAAgB,SAAyB;AACpF,QAAM,eAAe,CAAC,iBAAiC;AACrD,UAAM,SAAS,KAAK,KAAK,SAAS,YAAY;AAC9C,UAAM,YAAY,GAAG,WAAW,MAAM,IAClC,SACA,GAAG,WAAW,SAAS,KAAK,IAC1B,SAAS,QACT;AACN,WAAO,sBAAsB,cAAc,SAAS,EAAE,IAAI;AAAA,EAC5D;AACA,SAAO,OACJ,QAAQ,+BAA+B,CAAC,QAAQ,iBAAyB;AACxE,WAAO,QAAQ,aAAa,YAAY,CAAC;AAAA,EAC3C,CAAC,EACA,QAAQ,2CAA2C,CAAC,QAAQ,iBAAyB;AACpF,WAAO,UAAU,aAAa,YAAY,CAAC;AAAA,EAC7C,CAAC;AACL;AAcA,eAAsB,oCAAqD;AACzE,QAAM,WAAW,MAAM,OAAO,uCAAuC;AAIrE,QAAM,WAAW,SAAS,qBAAqB;AAC/C,MAAI,SAAS,SAAS,EAAG,QAAO,SAAS;AAEzC,QAAM,SAAS,kBAAkB,yBAAyB;AAC1D,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI;AACF,UAAM,MAAM,MAAM,0BAA0B,MAAM;AAClD,UAAM,YAAa,IAAgC;AACnD,QAAI,CAAC,MAAM,QAAQ,SAAS,EAAG,QAAO;AACtC,aAAS;AAAA,MACP;AAAA,IACF;AACA,WAAO,UAAU;AAAA,EACnB,SAAS,OAAO;AACd,YAAQ;AAAA,MACN;AAAA,MACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["/**\n * Runtime loader for `.mercato/generated/*.generated.ts` registry files.\n *\n * The generated registries import their entries through the `@/` path alias\n * (e.g. `@/.mercato/generated/ai-tools.generated`). That alias is only\n * understood by the Next.js bundler \u2014 in a standalone Node process (the\n * `mcp:dev` / `mcp:serve` MCP servers, the CLI tool-test runner) a raw\n * `import('@/.mercato/...')` throws `ERR_MODULE_NOT_FOUND: Cannot find\n * package '@/.mercato'` because Node treats `@/` as a package specifier.\n *\n * These helpers locate the generated `.ts` file on disk and compile-and-import\n * it with esbuild (transpile-only), rewriting `@/` aliases to absolute paths.\n * This mirrors `loadBootstrapData` in\n * `@open-mercato/shared/lib/bootstrap/dynamicLoader` and works in both the\n * monorepo and standalone apps.\n */\nimport path from 'node:path'\nimport fs from 'node:fs'\nimport { fileURLToPath, pathToFileURL } from 'node:url'\n\n/**\n * Locate a generated registry file (e.g. `ai-tools.generated.ts`) without\n * hardcoding the workspace layout. Searches upward from this module's compiled\n * location for a `apps/mercato/.mercato/generated/<fileName>` (monorepo), then\n * falls back to cwd-relative lookups (standalone apps run from the app dir).\n */\nexport function findGeneratedFile(fileName: string): string | null {\n  const here = (() => {\n    try {\n      return fileURLToPath(import.meta.url)\n    } catch {\n      return null\n    }\n  })()\n\n  if (here) {\n    let cursor = path.dirname(here)\n    for (let i = 0; i < 12; i++) {\n      const candidate = path.join(cursor, 'apps', 'mercato', '.mercato', 'generated', fileName)\n      if (fs.existsSync(candidate)) return candidate\n      const next = path.dirname(cursor)\n      if (next === cursor) break\n      cursor = next\n    }\n  }\n  // Fallbacks: cwd-based lookup (CLI invoked from apps/mercato, or a standalone\n  // app whose root holds `.mercato/generated`).\n  const fromCwd = path.resolve(process.cwd(), 'apps', 'mercato', '.mercato', 'generated', fileName)\n  if (fs.existsSync(fromCwd)) return fromCwd\n  const fromCwdDirect = path.resolve(process.cwd(), '.mercato', 'generated', fileName)\n  if (fs.existsSync(fromCwdDirect)) return fromCwdDirect\n  return null\n}\n\n/**\n * Compile-and-import a generated registry file on the fly. Rewrites the entry\n * specifiers Node can't resolve standalone (`@/...` aliases and the\n * `../../src/...` relative imports the generator emits for `@app` local\n * modules) to absolute file URLs, transpiles TS \u2192 ESM, and emits a sibling\n * `.mjs` we can `import()` from Node. Cached on mtime so repeat calls in the\n * same process don't recompile.\n *\n * Transpile-only (no bundling): the generated registries declare an array\n * literal whose entries are static `import(\"\u2026\")` arrow functions \u2014 we want\n * those `import()` strings to stay as runtime imports so Node resolves them\n * lazily through the workspace's normal module resolution. Eagerly bundling\n * pulls Next.js / route-handler internals into the `.mjs` and breaks at runtime\n * (e.g. `next/server` package-exports map).\n */\nexport async function compileAndImportGenerated(tsPath: string): Promise<Record<string, unknown>> {\n  const jsPath = tsPath.replace(/\\.ts$/, '.mjs')\n  // appRoot is two directories up from `.mercato/generated/<file>.ts`.\n  const appRoot = path.dirname(path.dirname(path.dirname(tsPath)))\n\n  if (!fs.existsSync(tsPath)) {\n    throw new Error(`Generated file not found: ${tsPath}`)\n  }\n\n  const jsExists = fs.existsSync(jsPath)\n  const needsCompile =\n    !jsExists || fs.statSync(tsPath).mtimeMs > fs.statSync(jsPath).mtimeMs\n\n  if (needsCompile) {\n    const esbuild = await import('esbuild')\n    const tsSource = fs.readFileSync(tsPath, 'utf-8')\n    const aliasRewritten = rewriteGeneratedAliasImports(tsSource, appRoot)\n    const result = await esbuild.transform(aliasRewritten, {\n      loader: 'ts',\n      format: 'esm',\n      target: 'node18',\n      sourcemap: false,\n      sourcefile: tsPath,\n    })\n    fs.writeFileSync(jsPath, result.code)\n  }\n\n  return (await import(pathToFileURL(jsPath).href)) as Record<string, unknown>\n}\n\nconst UNSAFE_JS_STRING_CHAR_ESCAPES: Record<number, string> = {\n  0x3c: '\\\\u003C', // <  \u2014 HTML/script-tag breakout\n  0x3e: '\\\\u003E', // >  \u2014 HTML/script-tag breakout\n  0x2028: '\\\\u2028', // line separator \u2014 string content but a statement terminator pre-ES2019\n  0x2029: '\\\\u2029', // paragraph separator \u2014 same\n}\n\n/**\n * Escape characters that `JSON.stringify` leaves intact but which can still\n * break out of (or alter the meaning of) the JavaScript string literal that the\n * stringified value is embedded into \u2014 notably `<`/`>` (HTML/script-tag\n * breakout) and the U+2028 / U+2029 line separators (valid string content but\n * statement terminators in pre-ES2019 parsers). Apply this on top of\n * `JSON.stringify` so the emitted import source stays well-formed regardless of\n * the resolved path. Exported for unit testing.\n */\nexport function escapeUnsafeJsStringChars(value: string): string {\n  return value.replace(\n    /[<>\\u2028\\u2029]/g,\n    (char) => UNSAFE_JS_STRING_CHAR_ESCAPES[char.charCodeAt(0)],\n  )\n}\n\n/**\n * Stringify a resolved path into a JavaScript string literal that is safe to\n * embed in generated source: `JSON.stringify` handles quoting/standard escapes,\n * and `escapeUnsafeJsStringChars` neutralizes the characters it leaves intact.\n */\nfunction toSafeJsStringLiteral(value: string): string {\n  return escapeUnsafeJsStringChars(JSON.stringify(value))\n}\n\n/**\n * Rewrite the two specifier shapes the generator emits for module entries in a\n * generated registry to absolute `file://` URLs Node can resolve in a\n * standalone process:\n *\n *   1. `@/...` path-alias imports (both `from \"@/x\"` and dynamic `import(\"@/x\")`).\n *      The `@/` alias is a Next.js bundler convention; outside the bundler Node\n *      treats `@/...` as a bare package specifier and throws\n *      `ERR_MODULE_NOT_FOUND`. Resolved against `appRoot`.\n *   2. `../../src/...` relative imports the generator emits for `@app` local\n *      modules (e.g. `from \"../../src/modules/<id>/ai-tools\"`). esbuild's\n *      transform (transpile-only) leaves these untouched, so the compiled\n *      `.mjs` keeps an extensionless relative specifier that resolves to a\n *      `.ts` file with no compiled `.js`/`.mjs` sibling \u2014 Node ESM then throws\n *      `ERR_MODULE_NOT_FOUND`. Resolved against the generated file's directory\n *      (`<appRoot>/.mercato/generated`), the location the generator wrote them\n *      relative to. Package-backed modules (`@open-mercato/*`) are unaffected \u2014\n *      their bare specifiers resolve through `node_modules` to compiled `.js`.\n *\n * Both shapes reuse the same `.ts`-suffix probe so a source-only TypeScript\n * target is loaded directly (Node strips types). Other specifiers (bare\n * packages, sibling `./` imports) are left untouched. Exported for unit testing.\n */\nexport function rewriteGeneratedAliasImports(source: string, appRoot: string): string {\n  const generatedDir = path.join(appRoot, '.mercato', 'generated')\n  const toResolvedLiteral = (target: string): string => {\n    const candidate = fs.existsSync(target)\n      ? target\n      : fs.existsSync(target + '.ts')\n        ? target + '.ts'\n        : target\n    return toSafeJsStringLiteral(pathToFileURL(candidate).href)\n  }\n  const resolveAlias = (relativePath: string): string =>\n    toResolvedLiteral(path.join(appRoot, relativePath))\n  const resolveRelative = (specifier: string): string =>\n    toResolvedLiteral(path.resolve(generatedDir, specifier))\n  return source\n    .replace(/from\\s+[\"']@\\/([^\"']+)[\"']/g, (_match, relativePath: string) => {\n      return `from ${resolveAlias(relativePath)}`\n    })\n    .replace(/import\\s*\\(\\s*[\"']@\\/([^\"']+)[\"']\\s*\\)/g, (_match, relativePath: string) => {\n      return `import(${resolveAlias(relativePath)})`\n    })\n    .replace(/from\\s+[\"']((?:\\.\\.\\/)+src\\/[^\"']+)[\"']/g, (_match, specifier: string) => {\n      return `from ${resolveRelative(specifier)}`\n    })\n    .replace(/import\\s*\\(\\s*[\"']((?:\\.\\.\\/)+src\\/[^\"']+)[\"']\\s*\\)/g, (_match, specifier: string) => {\n      return `import(${resolveRelative(specifier)})`\n    })\n}\n\n/**\n * Compile-and-import `api-routes.generated.ts` and register its manifest with\n * the shared registry. Many module tools are \"API-backed\" \u2014 their handlers\n * delegate to `createAiApiOperationRunner`, which fails closed with\n * \"No API route manifest registered\" unless the manifest is present. In the\n * Next.js app this is wired at bootstrap, but the standalone MCP servers\n * (`mcp:dev` / `mcp:serve`) bootstrap DI without it, so we register it here.\n *\n * Idempotent: `registerApiRouteManifests` replaces the stored manifest, so\n * calling this repeatedly (e.g. per-request HTTP handlers) is safe. Returns the\n * number of registered routes (0 when the generated file is absent).\n */\nexport async function ensureApiRouteManifestsRegistered(): Promise<number> {\n  const registry = await import('@open-mercato/shared/modules/registry')\n  // Already wired (e.g. the Next.js app bootstrap, or a prior call). Leave the\n  // existing manifest untouched so we never interfere with the in-app agents\n  // framework, which registers it at bootstrap with its own override pipeline.\n  const existing = registry.getApiRouteManifests()\n  if (existing.length > 0) return existing.length\n\n  const tsPath = findGeneratedFile('api-routes.generated.ts')\n  if (!tsPath) return 0\n  try {\n    const mod = await compileAndImportGenerated(tsPath)\n    const apiRoutes = (mod as { apiRoutes?: unknown }).apiRoutes\n    if (!Array.isArray(apiRoutes)) return 0\n    registry.registerApiRouteManifests(\n      apiRoutes as Parameters<typeof registry.registerApiRouteManifests>[0],\n    )\n    return apiRoutes.length\n  } catch (error) {\n    console.warn(\n      '[MCP Tools] Could not register api-routes manifest:',\n      error instanceof Error ? error.message : error,\n    )\n    return 0\n  }\n}\n"],
+  "mappings": "AAgBA,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,SAAS,eAAe,qBAAqB;AAQtC,SAAS,kBAAkB,UAAiC;AACjE,QAAM,QAAQ,MAAM;AAClB,QAAI;AACF,aAAO,cAAc,YAAY,GAAG;AAAA,IACtC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAEH,MAAI,MAAM;AACR,QAAI,SAAS,KAAK,QAAQ,IAAI;AAC9B,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,YAAM,YAAY,KAAK,KAAK,QAAQ,QAAQ,WAAW,YAAY,aAAa,QAAQ;AACxF,UAAI,GAAG,WAAW,SAAS,EAAG,QAAO;AACrC,YAAM,OAAO,KAAK,QAAQ,MAAM;AAChC,UAAI,SAAS,OAAQ;AACrB,eAAS;AAAA,IACX;AAAA,EACF;AAGA,QAAM,UAAU,KAAK,QAAQ,QAAQ,IAAI,GAAG,QAAQ,WAAW,YAAY,aAAa,QAAQ;AAChG,MAAI,GAAG,WAAW,OAAO,EAAG,QAAO;AACnC,QAAM,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,GAAG,YAAY,aAAa,QAAQ;AACnF,MAAI,GAAG,WAAW,aAAa,EAAG,QAAO;AACzC,SAAO;AACT;AAiBA,eAAsB,0BAA0B,QAAkD;AAChG,QAAM,SAAS,OAAO,QAAQ,SAAS,MAAM;AAE7C,QAAM,UAAU,KAAK,QAAQ,KAAK,QAAQ,KAAK,QAAQ,MAAM,CAAC,CAAC;AAE/D,MAAI,CAAC,GAAG,WAAW,MAAM,GAAG;AAC1B,UAAM,IAAI,MAAM,6BAA6B,MAAM,EAAE;AAAA,EACvD;AAEA,QAAM,WAAW,GAAG,WAAW,MAAM;AACrC,QAAM,eACJ,CAAC,YAAY,GAAG,SAAS,MAAM,EAAE,UAAU,GAAG,SAAS,MAAM,EAAE;AAEjE,MAAI,cAAc;AAChB,UAAM,UAAU,MAAM,OAAO,SAAS;AACtC,UAAM,WAAW,GAAG,aAAa,QAAQ,OAAO;AAChD,UAAM,iBAAiB,6BAA6B,UAAU,OAAO;AACrE,UAAM,SAAS,MAAM,QAAQ,UAAU,gBAAgB;AAAA,MACrD,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,YAAY;AAAA,IACd,CAAC;AACD,OAAG,cAAc,QAAQ,OAAO,IAAI;AAAA,EACtC;AAEA,SAAQ,MAAM,OAAO,cAAc,MAAM,EAAE;AAC7C;AAEA,MAAM,gCAAwD;AAAA,EAC5D,IAAM;AAAA;AAAA,EACN,IAAM;AAAA;AAAA,EACN,MAAQ;AAAA;AAAA,EACR,MAAQ;AAAA;AACV;AAWO,SAAS,0BAA0B,OAAuB;AAC/D,SAAO,MAAM;AAAA,IACX;AAAA,IACA,CAAC,SAAS,8BAA8B,KAAK,WAAW,CAAC,CAAC;AAAA,EAC5D;AACF;AAOA,SAAS,sBAAsB,OAAuB;AACpD,SAAO,0BAA0B,KAAK,UAAU,KAAK,CAAC;AACxD;AAyBO,SAAS,6BAA6B,QAAgB,SAAyB;AACpF,QAAM,eAAe,KAAK,KAAK,SAAS,YAAY,WAAW;AAC/D,QAAM,oBAAoB,CAAC,WAA2B;AACpD,UAAM,YAAY,GAAG,WAAW,MAAM,IAClC,SACA,GAAG,WAAW,SAAS,KAAK,IAC1B,SAAS,QACT;AACN,WAAO,sBAAsB,cAAc,SAAS,EAAE,IAAI;AAAA,EAC5D;AACA,QAAM,eAAe,CAAC,iBACpB,kBAAkB,KAAK,KAAK,SAAS,YAAY,CAAC;AACpD,QAAM,kBAAkB,CAAC,cACvB,kBAAkB,KAAK,QAAQ,cAAc,SAAS,CAAC;AACzD,SAAO,OACJ,QAAQ,+BAA+B,CAAC,QAAQ,iBAAyB;AACxE,WAAO,QAAQ,aAAa,YAAY,CAAC;AAAA,EAC3C,CAAC,EACA,QAAQ,2CAA2C,CAAC,QAAQ,iBAAyB;AACpF,WAAO,UAAU,aAAa,YAAY,CAAC;AAAA,EAC7C,CAAC,EACA,QAAQ,4CAA4C,CAAC,QAAQ,cAAsB;AAClF,WAAO,QAAQ,gBAAgB,SAAS,CAAC;AAAA,EAC3C,CAAC,EACA,QAAQ,wDAAwD,CAAC,QAAQ,cAAsB;AAC9F,WAAO,UAAU,gBAAgB,SAAS,CAAC;AAAA,EAC7C,CAAC;AACL;AAcA,eAAsB,oCAAqD;AACzE,QAAM,WAAW,MAAM,OAAO,uCAAuC;AAIrE,QAAM,WAAW,SAAS,qBAAqB;AAC/C,MAAI,SAAS,SAAS,EAAG,QAAO,SAAS;AAEzC,QAAM,SAAS,kBAAkB,yBAAyB;AAC1D,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI;AACF,UAAM,MAAM,MAAM,0BAA0B,MAAM;AAClD,UAAM,YAAa,IAAgC;AACnD,QAAI,CAAC,MAAM,QAAQ,SAAS,EAAG,QAAO;AACtC,aAAS;AAAA,MACP;AAAA,IACF;AACA,WAAO,UAAU;AAAA,EACnB,SAAS,OAAO;AACd,YAAQ;AAAA,MACN;AAAA,MACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/ai-assistant",
-  "version": "0.6.6-develop.6246.1.85fd30c705",
+  "version": "0.6.6-develop.6255.1.a6ee4a57c1",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -99,16 +99,16 @@
     "zod-to-json-schema": "^3.25.2"
   },
   "peerDependencies": {
-    "@open-mercato/shared": "0.6.6-develop.6246.1.85fd30c705",
-    "@open-mercato/ui": "0.6.6-develop.6246.1.85fd30c705",
+    "@open-mercato/shared": "0.6.6-develop.6255.1.a6ee4a57c1",
+    "@open-mercato/ui": "0.6.6-develop.6255.1.a6ee4a57c1",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "zod": ">=3.23.0"
   },
   "devDependencies": {
-    "@open-mercato/cli": "0.6.6-develop.6246.1.85fd30c705",
-    "@open-mercato/shared": "0.6.6-develop.6246.1.85fd30c705",
-    "@open-mercato/ui": "0.6.6-develop.6246.1.85fd30c705",
+    "@open-mercato/cli": "0.6.6-develop.6255.1.a6ee4a57c1",
+    "@open-mercato/shared": "0.6.6-develop.6255.1.a6ee4a57c1",
+    "@open-mercato/ui": "0.6.6-develop.6255.1.a6ee4a57c1",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
     "react": "19.2.7",

package/src/modules/ai_assistant/lib/__tests__/generated-registry-loader.test.ts

@@ -73,6 +73,53 @@ describe('rewriteGeneratedAliasImports', () => {
     ].join('\n')
     expect(rewriteGeneratedAliasImports(source, makeTempDir())).toBe(source)
   })
+
+  // Regression for issue #3524: the MCP dev server crashed with
+  //   "ERR_MODULE_NOT_FOUND: Cannot find module '.../src/modules/<id>/ai-tools'"
+  // because the generator emits `../../src/modules/<id>/ai-tools` relative
+  // imports for @app local modules, which the rewriter previously left intact.
+  // esbuild.transform keeps them verbatim, so Node ESM can't resolve the
+  // extensionless `.ts`-only specifier from the compiled `.mjs`.
+
+  it('rewrites a `../../src/...` @app relative import to an absolute file URL', () => {
+    const appRoot = makeTempDir()
+    const out = rewriteGeneratedAliasImports(
+      `import * as AI_TOOLS from "../../src/modules/media_campaigns/ai-tools"`,
+      appRoot,
+    )
+    const expectedUrl = pathToFileURL(
+      path.join(appRoot, 'src', 'modules', 'media_campaigns', 'ai-tools'),
+    ).href
+    expect(out).toBe(`import * as AI_TOOLS from ${safeJsLiteral(expectedUrl)}`)
+    expect(out).not.toContain('../../src/')
+  })
+
+  it('rewrites a dynamic `import("../../src/...")` @app call to an absolute file URL', () => {
+    const appRoot = makeTempDir()
+    const specifier = '"../../src/modules/media_campaigns/ai-tools"'
+    const source = `const load = () => import(${specifier})`
+    const out = rewriteGeneratedAliasImports(source, appRoot)
+    const expectedUrl = pathToFileURL(
+      path.join(appRoot, 'src', 'modules', 'media_campaigns', 'ai-tools'),
+    ).href
+    expect(out).toBe(source.replace(specifier, safeJsLiteral(expectedUrl)))
+    expect(out).not.toContain('../../src/')
+  })
+
+  it('appends `.ts` for a `../../src/...` @app import that exists only as TypeScript', () => {
+    const appRoot = makeTempDir()
+    const moduleDir = path.join(appRoot, 'src', 'modules', 'media_campaigns')
+    fs.mkdirSync(moduleDir, { recursive: true })
+    fs.writeFileSync(path.join(moduleDir, 'ai-tools.ts'), 'export const aiTools = []\n')
+
+    const out = rewriteGeneratedAliasImports(
+      `import * as AI_TOOLS from "../../src/modules/media_campaigns/ai-tools"`,
+      appRoot,
+    )
+
+    const expectedUrl = pathToFileURL(path.join(moduleDir, 'ai-tools.ts')).href
+    expect(out).toBe(`import * as AI_TOOLS from ${safeJsLiteral(expectedUrl)}`)
+  })
 })
 
 describe('escapeUnsafeJsStringChars', () => {

package/src/modules/ai_assistant/lib/generated-registry-loader.ts

@@ -53,10 +53,12 @@ export function findGeneratedFile(fileName: string): string | null {
 }
 
 /**
- * Compile-and-import a generated registry file on the fly. Resolves the `@/`
- * alias to the app root, transpiles TS → ESM, and emits a sibling `.mjs` we can
- * `import()` from Node. Cached on mtime so repeat calls in the same process
- * don't recompile.
+ * Compile-and-import a generated registry file on the fly. Rewrites the entry
+ * specifiers Node can't resolve standalone (`@/...` aliases and the
+ * `../../src/...` relative imports the generator emits for `@app` local
+ * modules) to absolute file URLs, transpiles TS → ESM, and emits a sibling
+ * `.mjs` we can `import()` from Node. Cached on mtime so repeat calls in the
+ * same process don't recompile.
  *
  * Transpile-only (no bundling): the generated registries declare an array
  * literal whose entries are static `import("…")` arrow functions — we want
@@ -128,15 +130,31 @@ function toSafeJsStringLiteral(value: string): string {
 }
 
 /**
- * Rewrite `@/...` path-alias imports (both `from "@/x"` and dynamic
- * `import("@/x")`) in generated-registry source to absolute `file://` URLs
- * rooted at `appRoot`. The `@/` alias is a Next.js bundler convention; outside
- * the bundler Node treats `@/...` as a bare package specifier and throws
- * `ERR_MODULE_NOT_FOUND`. Exported for unit testing.
+ * Rewrite the two specifier shapes the generator emits for module entries in a
+ * generated registry to absolute `file://` URLs Node can resolve in a
+ * standalone process:
+ *
+ *   1. `@/...` path-alias imports (both `from "@/x"` and dynamic `import("@/x")`).
+ *      The `@/` alias is a Next.js bundler convention; outside the bundler Node
+ *      treats `@/...` as a bare package specifier and throws
+ *      `ERR_MODULE_NOT_FOUND`. Resolved against `appRoot`.
+ *   2. `../../src/...` relative imports the generator emits for `@app` local
+ *      modules (e.g. `from "../../src/modules/<id>/ai-tools"`). esbuild's
+ *      transform (transpile-only) leaves these untouched, so the compiled
+ *      `.mjs` keeps an extensionless relative specifier that resolves to a
+ *      `.ts` file with no compiled `.js`/`.mjs` sibling — Node ESM then throws
+ *      `ERR_MODULE_NOT_FOUND`. Resolved against the generated file's directory
+ *      (`<appRoot>/.mercato/generated`), the location the generator wrote them
+ *      relative to. Package-backed modules (`@open-mercato/*`) are unaffected —
+ *      their bare specifiers resolve through `node_modules` to compiled `.js`.
+ *
+ * Both shapes reuse the same `.ts`-suffix probe so a source-only TypeScript
+ * target is loaded directly (Node strips types). Other specifiers (bare
+ * packages, sibling `./` imports) are left untouched. Exported for unit testing.
  */
 export function rewriteGeneratedAliasImports(source: string, appRoot: string): string {
-  const resolveAlias = (relativePath: string): string => {
-    const target = path.join(appRoot, relativePath)
+  const generatedDir = path.join(appRoot, '.mercato', 'generated')
+  const toResolvedLiteral = (target: string): string => {
     const candidate = fs.existsSync(target)
       ? target
       : fs.existsSync(target + '.ts')
@@ -144,6 +162,10 @@ export function rewriteGeneratedAliasImports(source: string, appRoot: string): s
         : target
     return toSafeJsStringLiteral(pathToFileURL(candidate).href)
   }
+  const resolveAlias = (relativePath: string): string =>
+    toResolvedLiteral(path.join(appRoot, relativePath))
+  const resolveRelative = (specifier: string): string =>
+    toResolvedLiteral(path.resolve(generatedDir, specifier))
   return source
     .replace(/from\s+["']@\/([^"']+)["']/g, (_match, relativePath: string) => {
       return `from ${resolveAlias(relativePath)}`
@@ -151,6 +173,12 @@ export function rewriteGeneratedAliasImports(source: string, appRoot: string): s
     .replace(/import\s*\(\s*["']@\/([^"']+)["']\s*\)/g, (_match, relativePath: string) => {
       return `import(${resolveAlias(relativePath)})`
     })
+    .replace(/from\s+["']((?:\.\.\/)+src\/[^"']+)["']/g, (_match, specifier: string) => {
+      return `from ${resolveRelative(specifier)}`
+    })
+    .replace(/import\s*\(\s*["']((?:\.\.\/)+src\/[^"']+)["']\s*\)/g, (_match, specifier: string) => {
+      return `import(${resolveRelative(specifier)})`
+    })
 }
 
 /**