@open-mercato/ai-assistant 0.6.6-develop.6494.1.8479db6c38 → 0.6.6-develop.6505.1.6f6b83559f

package/AGENTS.md

@@ -624,6 +624,8 @@ The provider axis is resolved through `llmProviderRegistry.resolveFirstConfigure
 
 Provider-only preferences can fall through when the named provider is registered but unconfigured. Provider/model pairs are atomic: slash-qualified model ids and same-source provider/model settings fail closed when their provider is unconfigured, instead of sending a provider-specific model id to a different provider.
 
+**Vendor-prefix gateways (OpenRouter, Requesty, LiteLLM).** These OpenAI-compatible gateways use `vendor/model` model ids (e.g. `anthropic/claude-sonnet-4.5`), which collide with the slash-shorthand provider pin. Each such preset sets `usesVendorPrefixedModelIds: true` (surfaced on the `LlmProvider` port). Rule: **within a single resolution tier**, when that tier's explicit provider hint selects a *configured* vendor-prefix gateway, the tier's model token is NOT slash-split — the leading `vendor/` is part of the gateway model id (at most one leading `${gateway}/` is stripped, so the legacy `openrouter/anthropic/…` form still resolves without doubling). So `OM_AI_PROVIDER=openrouter` + `OM_AI_MODEL=anthropic/claude-sonnet-4.5` routes the full id to OpenRouter. The suppression is **intra-tier and gateway-configured only**: a higher-tier slash pin (e.g. a caller `openai/gpt-5-mini`) still wins, an *unconfigured* gateway hint still falls through to the native split, and a native provider hint (`OM_AI_PROVIDER=anthropic`) still pins natively. A caller-tier `modelOverride: 'anthropic/…'` under a *global* `OM_AI_PROVIDER=openrouter` still pins native anthropic — the caller tier carries no gateway provider hint. The persisted `provider/model` label is composed with `joinProviderModel(...)` (`@open-mercato/shared/lib/ai/model-id`), which never doubles an existing prefix.
+
 The factory throws `AiModelFactoryError` with `code: 'no_provider_configured'`
 when the registry has no configured provider and `code: 'api_key_missing'`
 when the picked provider returns an empty key — every current call site

package/dist/modules/ai_assistant/api/route/route.js

@@ -6,6 +6,7 @@ import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { llmProviderRegistry } from "@open-mercato/shared/lib/ai/llm-provider-registry";
 import { resolveOpenCodeModel } from "@open-mercato/shared/lib/ai/opencode-provider";
+import { joinProviderModel } from "@open-mercato/shared/lib/ai/model-id";
 import {
   resolveChatConfig,
   isProviderConfigured
@@ -44,7 +45,7 @@ function createRoutingModel(providerId, configuredModel) {
   } catch {
     const requested = (configuredModel ?? "").trim();
     modelId = requested.length > 0 ? requested : provider.defaultModel;
-    modelWithProvider = `${providerId}/${modelId}`;
+    modelWithProvider = joinProviderModel(providerId, modelId);
   }
   const apiKey = provider.resolveApiKey();
   if (!apiKey) {
@@ -90,7 +91,7 @@ async function POST(req) {
         throw error;
       }
       logger.debug("Using provider", { providerId: factoryResolution.providerId });
-      const modelWithProvider2 = `${factoryResolution.providerId}/${factoryResolution.modelId}`;
+      const modelWithProvider2 = joinProviderModel(factoryResolution.providerId, factoryResolution.modelId);
       logger.debug("Calling generateObject", { model: modelWithProvider2 });
       const result2 = await generateObject({
         model: factoryResolution.model,

package/dist/modules/ai_assistant/api/route/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/ai_assistant/api/route/route.ts"],
-  "sourcesContent": ["import { createLogger } from '@open-mercato/shared/lib/logger'\nimport { NextResponse, type NextRequest } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { generateObject } from '../../lib/ai-sdk'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { llmProviderRegistry } from '@open-mercato/shared/lib/ai/llm-provider-registry'\nimport { resolveOpenCodeModel } from '@open-mercato/shared/lib/ai/opencode-provider'\nimport {\n  resolveChatConfig,\n  isProviderConfigured,\n  type ChatProviderId,\n} from '../../lib/chat-config'\nimport { createModelFactory, AiModelFactoryError } from '../../lib/model-factory'\n\nconst logger = createLogger('ai_assistant')\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'AI Assistant',\n  summary: 'AI query routing',\n  methods: {\n    POST: { summary: 'Route user query to appropriate AI handler' },\n  },\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n}\n\nconst RouteResultSchema = z.object({\n  intent: z.enum(['tool', 'general_chat']),\n  toolName: z.string().optional(),\n  confidence: z.number().min(0).max(1),\n  reasoning: z.string(),\n})\n\nfunction createRoutingModel(providerId: ChatProviderId, configuredModel?: string) {\n  const provider = llmProviderRegistry.get(providerId)\n  if (!provider) {\n    throw new Error(`Unknown provider: ${providerId}`)\n  }\n\n  // resolveOpenCodeModel is still used for token parsing and provider-prefix\n  // validation (`openai/gpt-5-mini` vs `anthropic/claude-\u2026`). It falls back\n  // to the provider's defaultModel via the opencode-provider facade, which\n  // is only populated for the three native providers \u2014 if the registry\n  // returns a preset-based provider whose id is unknown to opencode-provider,\n  // we short-circuit and use the provider's own defaultModel.\n  let modelId: string\n  let modelWithProvider: string\n  try {\n    const resolved = resolveOpenCodeModel(providerId as 'anthropic' | 'openai' | 'google', {\n      overrideModel: configuredModel,\n    })\n    modelId = resolved.modelId\n    modelWithProvider = resolved.modelWithProvider\n  } catch {\n    // Preset-based provider or unknown id \u2014 fall back to the provider's own\n    // model list. The explicit override (if any) wins.\n    const requested = (configuredModel ?? '').trim()\n    modelId = requested.length > 0 ? requested : provider.defaultModel\n    modelWithProvider = `${providerId}/${modelId}`\n  }\n\n  const apiKey = provider.resolveApiKey()\n  if (!apiKey) {\n    const envKey = provider.getConfiguredEnvKey()\n    throw new Error(`${envKey} not configured for provider \"${providerId}\"`)\n  }\n\n  const model = provider.createModel({ modelId, apiKey }) as unknown as Parameters<\n    typeof generateObject\n  >[0]['model']\n  return { model, modelWithProvider }\n}\n\nexport async function POST(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const body = await req.json()\n    const { query, availableTools } = body as {\n      query: string\n      availableTools: Array<{ name: string; description: string }>\n    }\n\n    logger.debug('Routing query received', { queryChars: query?.length ?? 0 })\n    logger.debug('Available tools count', { count: availableTools?.length })\n\n    if (!query || typeof query !== 'string') {\n      return NextResponse.json({ error: 'query is required' }, { status: 400 })\n    }\n\n    if (!availableTools || !Array.isArray(availableTools)) {\n      return NextResponse.json({ error: 'availableTools array is required' }, { status: 400 })\n    }\n\n    // Get user's configured provider\n    const container = await createRequestContainer()\n    let config = await resolveChatConfig(container)\n\n    // When no DB-stored config is present, delegate provider + model resolution\n    // to createModelFactory so OM_AI_PROVIDER / OM_AI_MODEL (Phase 0 of spec\n    // 2026-04-27-ai-agents-provider-model-baseurl-overrides) and all registered\n    // OpenAI-compatible presets are respected without duplicating the\n    // resolution chain here. Legacy OPENCODE_PROVIDER / OPENCODE_MODEL envs are\n    // still honored as BC fallbacks inside the factory.\n    if (!config) {\n      let factoryResolution\n      try {\n        factoryResolution = createModelFactory(container).resolveModel({\n          callerOverride: undefined,\n        })\n      } catch (error) {\n        if (error instanceof AiModelFactoryError && error.code === 'no_provider_configured') {\n          return NextResponse.json(\n            {\n              error:\n                'No AI provider configured. Please set an API key for one of the registered providers (Anthropic, OpenAI, Google, DeepInfra, Groq, \u2026).',\n            },\n            { status: 503 },\n          )\n        }\n        throw error\n      }\n\n      logger.debug('Using provider', { providerId: factoryResolution.providerId })\n\n      const modelWithProvider = `${factoryResolution.providerId}/${factoryResolution.modelId}`\n      logger.debug('Calling generateObject', { model: modelWithProvider })\n\n      const result = await generateObject({\n        model: factoryResolution.model as Parameters<typeof generateObject>[0]['model'],\n        schema: RouteResultSchema,\n        prompt: `You are a routing assistant. Given a user query, determine if they want to use a specific tool or have a general conversation.\n\nAvailable tools:\n${availableTools.map((t) => `- ${t.name}: ${t.description}`).join('\\n')}\n\nUser query: \"${query}\"\n\nRespond with:\n- intent: \"tool\" if user wants to perform an action with a specific tool, \"general_chat\" otherwise\n- toolName: the exact tool name if intent is \"tool\"\n- confidence: 0-1 how confident you are\n- reasoning: brief explanation`,\n      })\n\n      logger.debug('Routing result', { resultKeys: Object.keys(result.object ?? {}).join(',') })\n      return NextResponse.json(result.object)\n    }\n\n    logger.debug('Using provider', { providerId: config.providerId })\n\n    // Verify the configured provider is still available\n    if (!isProviderConfigured(config.providerId)) {\n      return NextResponse.json(\n        { error: `Configured provider ${config.providerId} is no longer available. Please update settings.` },\n        { status: 503 }\n      )\n    }\n\n    // Use fast model for the configured provider\n    const { model, modelWithProvider } = createRoutingModel(config.providerId, config.model)\n\n    const toolList = availableTools\n      .map((t) => `- ${t.name}: ${t.description}`)\n      .join('\\n')\n\n    logger.debug('Calling generateObject', { model: modelWithProvider })\n\n    const result = await generateObject({\n      model,\n      schema: RouteResultSchema,\n      prompt: `You are a routing assistant. Given a user query, determine if they want to use a specific tool or have a general conversation.\n\nAvailable tools:\n${toolList}\n\nUser query: \"${query}\"\n\nRespond with:\n- intent: \"tool\" if user wants to perform an action with a specific tool, \"general_chat\" otherwise\n- toolName: the exact tool name if intent is \"tool\"\n- confidence: 0-1 how confident you are\n- reasoning: brief explanation`,\n    })\n\n    logger.debug('Routing result', { resultKeys: Object.keys(result.object ?? {}).join(',') })\n    return NextResponse.json(result.object)\n  } catch (error) {\n    logger.error('AI Route \u2014 Error routing query', { err: error })\n    return NextResponse.json(\n      { error: 'Routing request failed' },\n      { status: 500 }\n    )\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,oBAAsC;AAE/C,SAAS,sBAAsB;AAC/B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oBAAoB,2BAA2B;AAExD,MAAM,SAAS,aAAa,cAAc;AAEnC,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM,EAAE,SAAS,6CAA6C;AAAA,EAChE;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,cAAc,CAAC;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;AAAA,EACnC,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,SAAS,mBAAmB,YAA4B,iBAA0B;AAChF,QAAM,WAAW,oBAAoB,IAAI,UAAU;AACnD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,qBAAqB,UAAU,EAAE;AAAA,EACnD;AAQA,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,qBAAqB,YAAiD;AAAA,MACrF,eAAe;AAAA,IACjB,CAAC;AACD,cAAU,SAAS;AACnB,wBAAoB,SAAS;AAAA,EAC/B,QAAQ;AAGN,UAAM,aAAa,mBAAmB,IAAI,KAAK;AAC/C,cAAU,UAAU,SAAS,IAAI,YAAY,SAAS;AACtD,wBAAoB,GAAG,UAAU,IAAI,OAAO;AAAA,EAC9C;AAEA,QAAM,SAAS,SAAS,cAAc;AACtC,MAAI,CAAC,QAAQ;AACX,UAAM,SAAS,SAAS,oBAAoB;AAC5C,UAAM,IAAI,MAAM,GAAG,MAAM,iCAAiC,UAAU,GAAG;AAAA,EACzE;AAEA,QAAM,QAAQ,SAAS,YAAY,EAAE,SAAS,OAAO,CAAC;AAGtD,SAAO,EAAE,OAAO,kBAAkB;AACpC;AAEA,eAAsB,KAAK,KAAkB;AAC3C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,EAAE,OAAO,eAAe,IAAI;AAKlC,WAAO,MAAM,0BAA0B,EAAE,YAAY,OAAO,UAAU,EAAE,CAAC;AACzE,WAAO,MAAM,yBAAyB,EAAE,OAAO,gBAAgB,OAAO,CAAC;AAEvE,QAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,QAAI,CAAC,kBAAkB,CAAC,MAAM,QAAQ,cAAc,GAAG;AACrD,aAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzF;AAGA,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI,SAAS,MAAM,kBAAkB,SAAS;AAQ9C,QAAI,CAAC,QAAQ;AACX,UAAI;AACJ,UAAI;AACF,4BAAoB,mBAAmB,SAAS,EAAE,aAAa;AAAA,UAC7D,gBAAgB;AAAA,QAClB,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,iBAAiB,uBAAuB,MAAM,SAAS,0BAA0B;AACnF,iBAAO,aAAa;AAAA,YAClB;AAAA,cACE,OACE;AAAA,YACJ;AAAA,YACA,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AACA,cAAM;AAAA,MACR;AAEA,aAAO,MAAM,kBAAkB,EAAE,YAAY,kBAAkB,WAAW,CAAC;AAE3E,YAAMA,qBAAoB,GAAG,kBAAkB,UAAU,IAAI,kBAAkB,OAAO;AACtF,aAAO,MAAM,0BAA0B,EAAE,OAAOA,mBAAkB,CAAC;AAEnE,YAAMC,UAAS,MAAM,eAAe;AAAA,QAClC,OAAO,kBAAkB;AAAA,QACzB,QAAQ;AAAA,QACR,QAAQ;AAAA;AAAA;AAAA,EAGd,eAAe,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA,eAExD,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOd,CAAC;AAED,aAAO,MAAM,kBAAkB,EAAE,YAAY,OAAO,KAAKA,QAAO,UAAU,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;AACzF,aAAO,aAAa,KAAKA,QAAO,MAAM;AAAA,IACxC;AAEA,WAAO,MAAM,kBAAkB,EAAE,YAAY,OAAO,WAAW,CAAC;AAGhE,QAAI,CAAC,qBAAqB,OAAO,UAAU,GAAG;AAC5C,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,uBAAuB,OAAO,UAAU,mDAAmD;AAAA,QACpG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,EAAE,OAAO,kBAAkB,IAAI,mBAAmB,OAAO,YAAY,OAAO,KAAK;AAEvF,UAAM,WAAW,eACd,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,EAAE,WAAW,EAAE,EAC1C,KAAK,IAAI;AAEZ,WAAO,MAAM,0BAA0B,EAAE,OAAO,kBAAkB,CAAC;AAEnE,UAAM,SAAS,MAAM,eAAe;AAAA,MAClC;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA;AAAA;AAAA,EAGZ,QAAQ;AAAA;AAAA,eAEK,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOhB,CAAC;AAED,WAAO,MAAM,kBAAkB,EAAE,YAAY,OAAO,KAAK,OAAO,UAAU,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;AACzF,WAAO,aAAa,KAAK,OAAO,MAAM;AAAA,EACxC,SAAS,OAAO;AACd,WAAO,MAAM,uCAAkC,EAAE,KAAK,MAAM,CAAC;AAC7D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB;AAAA,MAClC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { createLogger } from '@open-mercato/shared/lib/logger'\nimport { NextResponse, type NextRequest } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { generateObject } from '../../lib/ai-sdk'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { llmProviderRegistry } from '@open-mercato/shared/lib/ai/llm-provider-registry'\nimport { resolveOpenCodeModel } from '@open-mercato/shared/lib/ai/opencode-provider'\nimport { joinProviderModel } from '@open-mercato/shared/lib/ai/model-id'\nimport {\n  resolveChatConfig,\n  isProviderConfigured,\n  type ChatProviderId,\n} from '../../lib/chat-config'\nimport { createModelFactory, AiModelFactoryError } from '../../lib/model-factory'\n\nconst logger = createLogger('ai_assistant')\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'AI Assistant',\n  summary: 'AI query routing',\n  methods: {\n    POST: { summary: 'Route user query to appropriate AI handler' },\n  },\n}\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n}\n\nconst RouteResultSchema = z.object({\n  intent: z.enum(['tool', 'general_chat']),\n  toolName: z.string().optional(),\n  confidence: z.number().min(0).max(1),\n  reasoning: z.string(),\n})\n\nfunction createRoutingModel(providerId: ChatProviderId, configuredModel?: string) {\n  const provider = llmProviderRegistry.get(providerId)\n  if (!provider) {\n    throw new Error(`Unknown provider: ${providerId}`)\n  }\n\n  // resolveOpenCodeModel is still used for token parsing and provider-prefix\n  // validation (`openai/gpt-5-mini` vs `anthropic/claude-\u2026`). It falls back\n  // to the provider's defaultModel via the opencode-provider facade, which\n  // is only populated for the three native providers \u2014 if the registry\n  // returns a preset-based provider whose id is unknown to opencode-provider,\n  // we short-circuit and use the provider's own defaultModel.\n  let modelId: string\n  let modelWithProvider: string\n  try {\n    const resolved = resolveOpenCodeModel(providerId as 'anthropic' | 'openai' | 'google', {\n      overrideModel: configuredModel,\n    })\n    modelId = resolved.modelId\n    modelWithProvider = resolved.modelWithProvider\n  } catch {\n    // Preset-based provider or unknown id \u2014 fall back to the provider's own\n    // model list. The explicit override (if any) wins.\n    const requested = (configuredModel ?? '').trim()\n    modelId = requested.length > 0 ? requested : provider.defaultModel\n    modelWithProvider = joinProviderModel(providerId, modelId)\n  }\n\n  const apiKey = provider.resolveApiKey()\n  if (!apiKey) {\n    const envKey = provider.getConfiguredEnvKey()\n    throw new Error(`${envKey} not configured for provider \"${providerId}\"`)\n  }\n\n  const model = provider.createModel({ modelId, apiKey }) as unknown as Parameters<\n    typeof generateObject\n  >[0]['model']\n  return { model, modelWithProvider }\n}\n\nexport async function POST(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const body = await req.json()\n    const { query, availableTools } = body as {\n      query: string\n      availableTools: Array<{ name: string; description: string }>\n    }\n\n    logger.debug('Routing query received', { queryChars: query?.length ?? 0 })\n    logger.debug('Available tools count', { count: availableTools?.length })\n\n    if (!query || typeof query !== 'string') {\n      return NextResponse.json({ error: 'query is required' }, { status: 400 })\n    }\n\n    if (!availableTools || !Array.isArray(availableTools)) {\n      return NextResponse.json({ error: 'availableTools array is required' }, { status: 400 })\n    }\n\n    // Get user's configured provider\n    const container = await createRequestContainer()\n    let config = await resolveChatConfig(container)\n\n    // When no DB-stored config is present, delegate provider + model resolution\n    // to createModelFactory so OM_AI_PROVIDER / OM_AI_MODEL (Phase 0 of spec\n    // 2026-04-27-ai-agents-provider-model-baseurl-overrides) and all registered\n    // OpenAI-compatible presets are respected without duplicating the\n    // resolution chain here. Legacy OPENCODE_PROVIDER / OPENCODE_MODEL envs are\n    // still honored as BC fallbacks inside the factory.\n    if (!config) {\n      let factoryResolution\n      try {\n        factoryResolution = createModelFactory(container).resolveModel({\n          callerOverride: undefined,\n        })\n      } catch (error) {\n        if (error instanceof AiModelFactoryError && error.code === 'no_provider_configured') {\n          return NextResponse.json(\n            {\n              error:\n                'No AI provider configured. Please set an API key for one of the registered providers (Anthropic, OpenAI, Google, DeepInfra, Groq, \u2026).',\n            },\n            { status: 503 },\n          )\n        }\n        throw error\n      }\n\n      logger.debug('Using provider', { providerId: factoryResolution.providerId })\n\n      const modelWithProvider = joinProviderModel(factoryResolution.providerId, factoryResolution.modelId)\n      logger.debug('Calling generateObject', { model: modelWithProvider })\n\n      const result = await generateObject({\n        model: factoryResolution.model as Parameters<typeof generateObject>[0]['model'],\n        schema: RouteResultSchema,\n        prompt: `You are a routing assistant. Given a user query, determine if they want to use a specific tool or have a general conversation.\n\nAvailable tools:\n${availableTools.map((t) => `- ${t.name}: ${t.description}`).join('\\n')}\n\nUser query: \"${query}\"\n\nRespond with:\n- intent: \"tool\" if user wants to perform an action with a specific tool, \"general_chat\" otherwise\n- toolName: the exact tool name if intent is \"tool\"\n- confidence: 0-1 how confident you are\n- reasoning: brief explanation`,\n      })\n\n      logger.debug('Routing result', { resultKeys: Object.keys(result.object ?? {}).join(',') })\n      return NextResponse.json(result.object)\n    }\n\n    logger.debug('Using provider', { providerId: config.providerId })\n\n    // Verify the configured provider is still available\n    if (!isProviderConfigured(config.providerId)) {\n      return NextResponse.json(\n        { error: `Configured provider ${config.providerId} is no longer available. Please update settings.` },\n        { status: 503 }\n      )\n    }\n\n    // Use fast model for the configured provider\n    const { model, modelWithProvider } = createRoutingModel(config.providerId, config.model)\n\n    const toolList = availableTools\n      .map((t) => `- ${t.name}: ${t.description}`)\n      .join('\\n')\n\n    logger.debug('Calling generateObject', { model: modelWithProvider })\n\n    const result = await generateObject({\n      model,\n      schema: RouteResultSchema,\n      prompt: `You are a routing assistant. Given a user query, determine if they want to use a specific tool or have a general conversation.\n\nAvailable tools:\n${toolList}\n\nUser query: \"${query}\"\n\nRespond with:\n- intent: \"tool\" if user wants to perform an action with a specific tool, \"general_chat\" otherwise\n- toolName: the exact tool name if intent is \"tool\"\n- confidence: 0-1 how confident you are\n- reasoning: brief explanation`,\n    })\n\n    logger.debug('Routing result', { resultKeys: Object.keys(result.object ?? {}).join(',') })\n    return NextResponse.json(result.object)\n  } catch (error) {\n    logger.error('AI Route \u2014 Error routing query', { err: error })\n    return NextResponse.json(\n      { error: 'Routing request failed' },\n      { status: 500 }\n    )\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,oBAAsC;AAE/C,SAAS,sBAAsB;AAC/B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,4BAA4B;AACrC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oBAAoB,2BAA2B;AAExD,MAAM,SAAS,aAAa,cAAc;AAEnC,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM,EAAE,SAAS,6CAA6C;AAAA,EAChE;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,cAAc,CAAC;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;AAAA,EACnC,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,SAAS,mBAAmB,YAA4B,iBAA0B;AAChF,QAAM,WAAW,oBAAoB,IAAI,UAAU;AACnD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,qBAAqB,UAAU,EAAE;AAAA,EACnD;AAQA,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,qBAAqB,YAAiD;AAAA,MACrF,eAAe;AAAA,IACjB,CAAC;AACD,cAAU,SAAS;AACnB,wBAAoB,SAAS;AAAA,EAC/B,QAAQ;AAGN,UAAM,aAAa,mBAAmB,IAAI,KAAK;AAC/C,cAAU,UAAU,SAAS,IAAI,YAAY,SAAS;AACtD,wBAAoB,kBAAkB,YAAY,OAAO;AAAA,EAC3D;AAEA,QAAM,SAAS,SAAS,cAAc;AACtC,MAAI,CAAC,QAAQ;AACX,UAAM,SAAS,SAAS,oBAAoB;AAC5C,UAAM,IAAI,MAAM,GAAG,MAAM,iCAAiC,UAAU,GAAG;AAAA,EACzE;AAEA,QAAM,QAAQ,SAAS,YAAY,EAAE,SAAS,OAAO,CAAC;AAGtD,SAAO,EAAE,OAAO,kBAAkB;AACpC;AAEA,eAAsB,KAAK,KAAkB;AAC3C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AAEzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,EAAE,OAAO,eAAe,IAAI;AAKlC,WAAO,MAAM,0BAA0B,EAAE,YAAY,OAAO,UAAU,EAAE,CAAC;AACzE,WAAO,MAAM,yBAAyB,EAAE,OAAO,gBAAgB,OAAO,CAAC;AAEvE,QAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,QAAI,CAAC,kBAAkB,CAAC,MAAM,QAAQ,cAAc,GAAG;AACrD,aAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzF;AAGA,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI,SAAS,MAAM,kBAAkB,SAAS;AAQ9C,QAAI,CAAC,QAAQ;AACX,UAAI;AACJ,UAAI;AACF,4BAAoB,mBAAmB,SAAS,EAAE,aAAa;AAAA,UAC7D,gBAAgB;AAAA,QAClB,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,iBAAiB,uBAAuB,MAAM,SAAS,0BAA0B;AACnF,iBAAO,aAAa;AAAA,YAClB;AAAA,cACE,OACE;AAAA,YACJ;AAAA,YACA,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AACA,cAAM;AAAA,MACR;AAEA,aAAO,MAAM,kBAAkB,EAAE,YAAY,kBAAkB,WAAW,CAAC;AAE3E,YAAMA,qBAAoB,kBAAkB,kBAAkB,YAAY,kBAAkB,OAAO;AACnG,aAAO,MAAM,0BAA0B,EAAE,OAAOA,mBAAkB,CAAC;AAEnE,YAAMC,UAAS,MAAM,eAAe;AAAA,QAClC,OAAO,kBAAkB;AAAA,QACzB,QAAQ;AAAA,QACR,QAAQ;AAAA;AAAA;AAAA,EAGd,eAAe,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA,eAExD,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOd,CAAC;AAED,aAAO,MAAM,kBAAkB,EAAE,YAAY,OAAO,KAAKA,QAAO,UAAU,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;AACzF,aAAO,aAAa,KAAKA,QAAO,MAAM;AAAA,IACxC;AAEA,WAAO,MAAM,kBAAkB,EAAE,YAAY,OAAO,WAAW,CAAC;AAGhE,QAAI,CAAC,qBAAqB,OAAO,UAAU,GAAG;AAC5C,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,uBAAuB,OAAO,UAAU,mDAAmD;AAAA,QACpG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,EAAE,OAAO,kBAAkB,IAAI,mBAAmB,OAAO,YAAY,OAAO,KAAK;AAEvF,UAAM,WAAW,eACd,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,EAAE,WAAW,EAAE,EAC1C,KAAK,IAAI;AAEZ,WAAO,MAAM,0BAA0B,EAAE,OAAO,kBAAkB,CAAC;AAEnE,UAAM,SAAS,MAAM,eAAe;AAAA,MAClC;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA;AAAA;AAAA,EAGZ,QAAQ;AAAA;AAAA,eAEK,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOhB,CAAC;AAED,WAAO,MAAM,kBAAkB,EAAE,YAAY,OAAO,KAAK,OAAO,UAAU,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;AACzF,WAAO,aAAa,KAAK,OAAO,MAAM;AAAA,EACxC,SAAS,OAAO;AACd,WAAO,MAAM,uCAAkC,EAAE,KAAK,MAAM,CAAC;AAC7D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB;AAAA,MAClC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
   "names": ["modelWithProvider", "result"]
 }

package/dist/modules/ai_assistant/api/settings/route.js

@@ -4,6 +4,7 @@ import { z } from "zod";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { llmProviderRegistry } from "@open-mercato/shared/lib/ai/llm-provider-registry";
+import { joinProviderModel } from "@open-mercato/shared/lib/ai/model-id";
 import {
   OPEN_CODE_PROVIDER_IDS,
   OPEN_CODE_PROVIDERS,
@@ -112,7 +113,7 @@ async function GET(req) {
     const providerName = registryProvider?.name ?? fallbackOpenCodeProvider?.name ?? providerId;
     const defaultProviderModel = registryProvider?.defaultModel ?? fallbackOpenCodeProvider?.defaultModel ?? "";
     const configuredModelHint = env.OM_AI_MODEL?.trim() || env.OPENCODE_MODEL?.trim() || defaultProviderModel;
-    const fallbackModelWithProvider = `${providerId}/${configuredModelHint}`;
+    const fallbackModelWithProvider = joinProviderModel(providerId, configuredModelHint);
     const apiKeyConfigured = registryProvider ? registryProvider.isConfigured(env) : fallbackOpenCodeProvider ? isOpenCodeProviderConfigured(fallbackOpenCodeProviderId) : false;
     const displayEnvKey = registryProvider ? registryProvider.getConfiguredEnvKey(env) : fallbackOpenCodeProvider ? getOpenCodeProviderConfiguredEnvKey(fallbackOpenCodeProviderId) : null;
     const mcpKeyConfigured = !!process.env.MCP_SERVER_API_KEY?.trim();
@@ -296,7 +297,7 @@ async function GET(req) {
       provider: {
         id: providerId,
         name: providerName,
-        model: resolvedDefault ? `${resolvedDefault.providerId}/${resolvedDefault.modelId}` : fallbackModelWithProvider,
+        model: resolvedDefault ? joinProviderModel(resolvedDefault.providerId, resolvedDefault.modelId) : fallbackModelWithProvider,
         defaultModel: defaultProviderModel,
         envKey: displayEnvKey,
         configured: apiKeyConfigured

package/dist/modules/ai_assistant/api/settings/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/ai_assistant/api/settings/route.ts"],
-  "sourcesContent": ["import { createLogger } from '@open-mercato/shared/lib/logger'\nimport { NextResponse, type NextRequest } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { llmProviderRegistry } from '@open-mercato/shared/lib/ai/llm-provider-registry'\nimport {\n  OPEN_CODE_PROVIDER_IDS,\n  OPEN_CODE_PROVIDERS,\n  getOpenCodeProviderConfiguredEnvKey,\n  isOpenCodeProviderConfigured,\n} from '@open-mercato/shared/lib/ai/opencode-provider'\nimport { AiAgentRuntimeOverrideRepository, AiAgentRuntimeOverrideValidationError } from '../../data/repositories/AiAgentRuntimeOverrideRepository'\nimport { AiTenantModelAllowlistRepository } from '../../data/repositories/AiTenantModelAllowlistRepository'\nimport { isBaseurlAllowlisted, readBaseurlAllowlist } from '../../lib/baseurl-allowlist'\nimport { loadAgentRegistry, listAgents } from '../../lib/agent-registry'\nimport { createModelFactory, resolveAllowRuntimeOverride } from '../../lib/model-factory'\nimport {\n  agentOverrideModelAllowlistEnvVarName,\n  agentOverrideProviderAllowlistEnvVarName,\n  canonicalProviderId,\n  hasAllowlistSnapshotRestrictions,\n  intersectEffectiveAllowlistWithSnapshot,\n  intersectAllowlists,\n  isProviderAllowed,\n  isProviderAllowedInEffective,\n  isProviderModelAllowed,\n  isProviderModelAllowedInEffective,\n  modelAllowlistEnvVarName,\n  readAgentRuntimeOverrideAllowlist,\n  readAllowedModels,\n  readAllowedProviders,\n  readAllowlistConfig,\n  type TenantAllowlistSnapshot,\n} from '../../lib/model-allowlist'\n\nconst logger = createLogger('ai_assistant')\n\nfunction modelCatalogWithAllowlistFallback(\n  models: ReadonlyArray<{ id: string; name: string; contextWindow?: number | null; tags?: readonly string[] }>,\n  allowlistModelIds: string[] | undefined,\n): ReadonlyArray<{ id: string; name: string; contextWindow?: number | null; tags?: readonly string[] }> {\n  if (models.length > 0) return models\n  return (allowlistModelIds ?? []).map((id) => ({ id, name: id }))\n}\n\nconst runtimeOverrideUpsertSchema = z.object({\n  providerId: z.string().min(1).max(64).nullable().optional(),\n  modelId: z.string().min(1).max(256).nullable().optional(),\n  baseURL: z.string().url().max(2048).nullable().optional(),\n  agentId: z.string().min(1).max(128).nullable().optional(),\n  allowedOverrideProviders: z.array(z.string().min(1).max(64)).nullable().optional(),\n  allowedOverrideModelsByProvider: z\n    .record(z.string().min(1).max(64), z.array(z.string().min(1).max(256)))\n    .optional(),\n})\n\nconst runtimeOverrideClearSchema = z.object({\n  agentId: z.string().min(1).max(128).nullable().optional(),\n})\n\nexport type RuntimeOverrideUpsertBody = z.infer<typeof runtimeOverrideUpsertSchema>\nexport type RuntimeOverrideClearBody = z.infer<typeof runtimeOverrideClearSchema>\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'AI Assistant',\n  summary: 'AI assistant settings',\n  methods: {\n    GET: { summary: 'Get AI provider configuration' },\n    PUT: {\n      summary: 'Upsert per-tenant AI runtime override',\n      description:\n        'Creates or updates the per-tenant AI runtime override (provider, model, baseURL). ' +\n        'Optionally scoped to a specific agent via `agentId`. ' +\n        'Gated by `ai_assistant.settings.manage`. ' +\n        'baseURL must match AI_RUNTIME_BASEURL_ALLOWLIST when set.',\n      requestBody: {\n        contentType: 'application/json',\n        description: 'Override payload. All fields nullable/optional; null explicitly clears the axis.',\n        schema: runtimeOverrideUpsertSchema,\n      },\n      responses: [\n        { status: 200, description: 'Override saved. Returns the saved row.' },\n      ],\n      errors: [\n        { status: 400, description: 'Validation error: unknown provider, invalid URL, or baseURL not allowlisted.' },\n        { status: 401, description: 'Unauthenticated.' },\n        { status: 403, description: 'Caller lacks ai_assistant.settings.manage.' },\n      ],\n    },\n    DELETE: {\n      summary: 'Clear per-tenant AI runtime override',\n      description:\n        'Soft-deletes the active per-tenant runtime override. ' +\n        'Pass `agentId` to clear only the agent-specific row; omit to clear the tenant-wide default. ' +\n        'Gated by `ai_assistant.settings.manage`. Idempotent \u2014 returns 200 with `cleared: false` when no active row existed.',\n      requestBody: {\n        contentType: 'application/json',\n        description: 'Optional agentId to scope the delete.',\n        schema: runtimeOverrideClearSchema,\n      },\n      responses: [\n        { status: 200, description: 'Returns `{ cleared: boolean }` indicating whether a row was found and removed.' },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthenticated.' },\n        { status: 403, description: 'Caller lacks ai_assistant.settings.manage.' },\n      ],\n    },\n  },\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['ai_assistant.settings.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['ai_assistant.settings.manage'] },\n}\n\n/**\n * GET /api/ai_assistant/settings\n *\n * Returns the current OpenCode provider configuration from environment variables\n * plus the Phase 4a additive fields: resolvedDefault, tenantOverride, agents[],\n * and availableProviders[].defaultModels.\n */\nexport async function GET(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const env = process.env as Record<string, string | undefined>\n    const configuredProviderHint = env.OM_AI_PROVIDER?.trim() || env.OPENCODE_PROVIDER?.trim() || null\n    const registryProviders = llmProviderRegistry.list()\n    const knownProviderIdsForAllowlist: string[] = [\n      ...OPEN_CODE_PROVIDER_IDS,\n      ...registryProviders\n        .map((p) => p.id)\n        .filter((id) => !(OPEN_CODE_PROVIDER_IDS as readonly string[]).includes(id)),\n    ]\n    const registryProviderId = configuredProviderHint\n      ? canonicalProviderId(configuredProviderHint, registryProviders.map((provider) => provider.id))\n      : null\n    const registryProvider = registryProviderId ? llmProviderRegistry.get(registryProviderId) : null\n    const fallbackOpenCodeProviderId = (\n      (configuredProviderHint\n        ? canonicalProviderId(configuredProviderHint, OPEN_CODE_PROVIDER_IDS as readonly string[])\n        : null) ?? 'openai'\n    ) as keyof typeof OPEN_CODE_PROVIDERS\n    const fallbackOpenCodeProvider = OPEN_CODE_PROVIDERS[fallbackOpenCodeProviderId]\n\n    const providerId = registryProvider?.id ?? fallbackOpenCodeProviderId\n    const providerName = registryProvider?.name ?? fallbackOpenCodeProvider?.name ?? providerId\n    const defaultProviderModel = registryProvider?.defaultModel ?? fallbackOpenCodeProvider?.defaultModel ?? ''\n    const configuredModelHint = env.OM_AI_MODEL?.trim() || env.OPENCODE_MODEL?.trim() || defaultProviderModel\n    const fallbackModelWithProvider = `${providerId}/${configuredModelHint}`\n    const apiKeyConfigured = registryProvider\n      ? registryProvider.isConfigured(env)\n      : fallbackOpenCodeProvider\n        ? isOpenCodeProviderConfigured(fallbackOpenCodeProviderId)\n        : false\n    const displayEnvKey = registryProvider\n      ? registryProvider.getConfiguredEnvKey(env)\n      : fallbackOpenCodeProvider\n        ? getOpenCodeProviderConfiguredEnvKey(fallbackOpenCodeProviderId)\n        : null\n\n    // Check if MCP_SERVER_API_KEY is configured (required for MCP authentication)\n    const mcpKeyConfigured = !!process.env.MCP_SERVER_API_KEY?.trim()\n\n    // Phase 4a: resolve tenant override row and per-agent resolution matrix\n    let tenantOverride: {\n      providerId: string | null\n      modelId: string | null\n      baseURL: string | null\n      agentId: string | null\n      updatedAt: string\n    } | null = null\n\n    let agentResolutions: Array<{\n      agentId: string\n      moduleId: string\n      allowRuntimeOverride: boolean\n      allowRuntimeModelOverride: boolean\n      codeDefaultProviderId: string | null\n      codeDefaultModelId: string | null\n      override: {\n        providerId: string | null\n        modelId: string | null\n        baseURL: string | null\n        updatedAt: string\n      } | null\n      runtimeOverrideAllowlist: {\n        env: TenantAllowlistSnapshot | null\n        tenant: TenantAllowlistSnapshot | null\n        effective: ReturnType<typeof intersectAllowlists>\n        envVarNames: {\n          providers: string\n          modelsByProvider: Record<string, string>\n        }\n      }\n      providerId: string\n      modelId: string\n      baseURL: string | null\n      source: string\n    }> = []\n\n    let resolvedDefault: {\n      providerId: string\n      modelId: string\n      baseURL: string | null\n      source: string\n    } | null = null\n\n    let tenantAllowlistSnapshot: TenantAllowlistSnapshot | null = null\n\n    try {\n      const container = await createRequestContainer()\n      const tenantId = auth.tenantId ?? null\n      const organizationId = auth.orgId ?? null\n\n      if (tenantId) {\n        const em = container.resolve<EntityManager>('em')\n        const repo = new AiAgentRuntimeOverrideRepository(em)\n        const overrideRow = await repo.getDefault({ tenantId, organizationId, agentId: null })\n        if (overrideRow) {\n          tenantOverride = {\n            providerId: overrideRow.providerId ?? null,\n            modelId: overrideRow.modelId ?? null,\n            baseURL: overrideRow.baseUrl ?? null,\n            agentId: overrideRow.agentId ?? null,\n            updatedAt: overrideRow.updatedAt.toISOString(),\n          }\n        }\n\n        const allowlistRepo = new AiTenantModelAllowlistRepository(em)\n        tenantAllowlistSnapshot = await allowlistRepo.getSnapshot({\n          tenantId,\n          organizationId,\n        })\n\n        const factory = createModelFactory(container)\n        const defaultResolution = factory.resolveModel({\n          tenantAllowlist: tenantAllowlistSnapshot,\n          tenantOverride: tenantOverride\n            ? { providerId: tenantOverride.providerId, modelId: tenantOverride.modelId, baseURL: tenantOverride.baseURL }\n            : undefined,\n        })\n        resolvedDefault = {\n          providerId: defaultResolution.providerId,\n          modelId: defaultResolution.modelId,\n          baseURL: defaultResolution.baseURL ?? null,\n          source: defaultResolution.source,\n        }\n\n        await loadAgentRegistry()\n        const agents = listAgents()\n        const agentResolutionPromises = agents.map(async (agent) => {\n          const agentOverrideRow = await repo.getExact({\n            tenantId,\n            organizationId,\n            agentId: agent.id,\n          })\n          const agentTenantOverride = agentOverrideRow\n            ? {\n                providerId: agentOverrideRow.providerId ?? null,\n                modelId: agentOverrideRow.modelId ?? null,\n                baseURL: agentOverrideRow.baseUrl ?? null,\n              }\n            : (tenantOverride ?? undefined)\n          const agentResolution = factory.resolveModel({\n            moduleId: agent.moduleId,\n            agentDefaultModel: agent.defaultModel,\n            agentDefaultProvider: agent.defaultProvider,\n            agentDefaultBaseUrl: agent.defaultBaseUrl,\n            allowRuntimeOverride: resolveAllowRuntimeOverride(agent),\n            tenantOverride: agentTenantOverride,\n            tenantAllowlist: tenantAllowlistSnapshot,\n          })\n          const agentEnvAllowlist = readAgentRuntimeOverrideAllowlist(\n            env,\n            agent.id,\n            knownProviderIdsForAllowlist,\n          )\n          const agentTenantAllowlist = agentOverrideRow\n            ? {\n                allowedProviders: agentOverrideRow.allowedOverrideProviders ?? null,\n                allowedModelsByProvider: agentOverrideRow.allowedOverrideModelsByProvider ?? {},\n              }\n            : null\n          const baseEffectiveAllowlist = intersectAllowlists(\n            env,\n            knownProviderIdsForAllowlist,\n            tenantAllowlistSnapshot,\n          )\n          const agentEffectiveAllowlist = intersectEffectiveAllowlistWithSnapshot(\n            intersectEffectiveAllowlistWithSnapshot(\n              baseEffectiveAllowlist,\n              knownProviderIdsForAllowlist,\n              agentEnvAllowlist,\n            ),\n            knownProviderIdsForAllowlist,\n            agentTenantAllowlist,\n          )\n          const agentModelEnvVars = Object.fromEntries(\n            knownProviderIdsForAllowlist.map((providerId) => [\n              providerId,\n              agentOverrideModelAllowlistEnvVarName(agent.id, providerId),\n            ]),\n          )\n          return {\n            agentId: agent.id,\n            moduleId: agent.moduleId,\n            allowRuntimeOverride: resolveAllowRuntimeOverride(agent),\n            allowRuntimeModelOverride: resolveAllowRuntimeOverride(agent),\n            codeDefaultProviderId: agent.defaultProvider ?? null,\n            codeDefaultModelId: agent.defaultModel ?? null,\n            override: agentOverrideRow\n              ? {\n                  providerId: agentOverrideRow.providerId ?? null,\n                  modelId: agentOverrideRow.modelId ?? null,\n                  baseURL: agentOverrideRow.baseUrl ?? null,\n                  updatedAt: agentOverrideRow.updatedAt.toISOString(),\n                }\n              : null,\n            runtimeOverrideAllowlist: {\n              env: agentEnvAllowlist,\n              tenant: hasAllowlistSnapshotRestrictions(agentTenantAllowlist)\n                ? agentTenantAllowlist\n                : null,\n              effective: agentEffectiveAllowlist,\n              envVarNames: {\n                providers: agentOverrideProviderAllowlistEnvVarName(agent.id),\n                modelsByProvider: agentModelEnvVars,\n              },\n            },\n            providerId: agentResolution.providerId,\n            modelId: agentResolution.modelId,\n            baseURL: agentResolution.baseURL ?? null,\n            source: agentResolution.source,\n          }\n        })\n        agentResolutions = await Promise.all(agentResolutionPromises)\n      }\n    } catch (overrideError) {\n      // Phase 4a fields are best-effort \u2014 log and continue returning the base response\n      logger.warn('AI Settings \u2014 Failed to compute Phase 4a override fields', { err: overrideError })\n    }\n\n    // Build availableProviders with Phase 4a defaultModels, then clip to the\n    // EFFECTIVE allowlist \u2014 env intersected with the per-tenant snapshot.\n    // The env allowlist is the OUTER constraint; the tenant allowlist (Phase\n    // 1780-6) narrows it further. The settings UI must never offer a value\n    // the runtime would refuse to honor.\n    const allowlistConfig = readAllowlistConfig(env, knownProviderIdsForAllowlist)\n    const effectiveAllowlist = intersectAllowlists(\n      env,\n      knownProviderIdsForAllowlist,\n      tenantAllowlistSnapshot,\n    )\n\n    const allRawProviders = [\n      ...OPEN_CODE_PROVIDER_IDS.map((id) => {\n        const info = OPEN_CODE_PROVIDERS[id]\n        const registryProvider = llmProviderRegistry.get(id)\n        return {\n          id,\n          name: info.name,\n          defaultModel: info.defaultModel,\n          envKey: getOpenCodeProviderConfiguredEnvKey(id),\n          configured: isOpenCodeProviderConfigured(id),\n          defaultModels: registryProvider?.defaultModels ?? [],\n        }\n      }),\n      // Also surface any llmProviderRegistry providers not in OPEN_CODE_PROVIDER_IDS\n      ...llmProviderRegistry.list()\n        .filter((p) => !(OPEN_CODE_PROVIDER_IDS as readonly string[]).includes(p.id))\n        .map((p) => ({\n          id: p.id,\n          name: p.name,\n          defaultModel: p.defaultModels[0]?.id ?? '',\n          envKey: null,\n          configured: p.isConfigured(),\n          defaultModels: p.defaultModels,\n        })),\n    ]\n\n    const availableProviders = allRawProviders\n      .filter((p) => isProviderAllowedInEffective(effectiveAllowlist, p.id))\n      .map((p) => {\n        const effectiveModelsList = effectiveAllowlist.modelsByProvider[p.id]\n        const catalogModels = modelCatalogWithAllowlistFallback(\n          p.defaultModels,\n          effectiveModelsList,\n        )\n        const clippedDefaults = effectiveModelsList !== undefined\n          ? catalogModels.filter((m) => effectiveModelsList.includes(m.id))\n          : catalogModels\n        return {\n          ...p,\n          defaultModel: effectiveModelsList && !effectiveModelsList.includes(p.defaultModel)\n            ? (effectiveModelsList[0] ?? p.defaultModel)\n            : p.defaultModel || clippedDefaults[0]?.id || '',\n          defaultModels: clippedDefaults,\n        }\n      })\n\n    const allowlistProviders = allRawProviders\n      .filter((p) => isProviderAllowed(env, p.id))\n      .map((p) => {\n        const envModelsList = allowlistConfig.modelsByProvider[p.id]\n        const catalogModels = modelCatalogWithAllowlistFallback(\n          p.defaultModels,\n          envModelsList,\n        )\n        const envClippedDefaults = envModelsList !== undefined\n          ? catalogModels.filter((m) => envModelsList.includes(m.id))\n          : catalogModels\n        return {\n          ...p,\n          defaultModel: envModelsList && !envModelsList.includes(p.defaultModel)\n            ? (envModelsList[0] ?? p.defaultModel)\n            : p.defaultModel || envClippedDefaults[0]?.id || '',\n          defaultModels: envClippedDefaults,\n        }\n      })\n\n    return NextResponse.json({\n      provider: {\n        id: providerId,\n        name: providerName,\n        model: resolvedDefault\n          ? `${resolvedDefault.providerId}/${resolvedDefault.modelId}`\n          : fallbackModelWithProvider,\n        defaultModel: defaultProviderModel,\n        envKey: displayEnvKey,\n        configured: apiKeyConfigured,\n      },\n      availableProviders,\n      // Editable universe for the tenant allowlist page. This is clipped only\n      // by env so tenant-hidden models remain visible and can be re-enabled.\n      allowlistProviders,\n      // Snapshot of the env-driven allowlist so the UI can render hints like\n      // \"limited to: openai, anthropic\" without re-implementing the parser.\n      allowlist: allowlistConfig,\n      // Per-tenant allowlist snapshot (Phase 1780-6). `null` when no row has\n      // been persisted yet \u2014 the runtime then falls back to env-only\n      // enforcement. The UI uses this to drive the editable MultiSelect.\n      tenantAllowlist: tenantAllowlistSnapshot,\n      // Effective allowlist after intersecting env with tenant. The UI uses\n      // this to render the \"what the runtime will actually accept\" summary\n      // and to clip pickers without re-implementing the intersection.\n      effectiveAllowlist,\n      mcpKeyConfigured,\n      resolvedDefault,\n      tenantOverride,\n      agents: agentResolutions,\n    })\n  } catch (error) {\n    logger.error('AI Settings \u2014 GET error', { err: error })\n    return NextResponse.json({ error: 'Failed to fetch settings' }, { status: 500 })\n  }\n}\n\n/**\n * PUT /api/ai_assistant/settings\n *\n * Upserts the per-tenant AI runtime override (Phase 4a). Requires\n * `ai_assistant.settings.manage`. The body is Zod-validated; a `baseURL`\n * must match `AI_RUNTIME_BASEURL_ALLOWLIST` when that env var is set.\n */\nexport async function PUT(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let parsedBody: unknown\n  try {\n    parsedBody = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Request body must be valid JSON.', code: 'validation_error' }, { status: 400 })\n  }\n\n  const bodyResult = runtimeOverrideUpsertSchema.safeParse(parsedBody)\n  if (!bodyResult.success) {\n    return NextResponse.json(\n      { error: 'Invalid request body.', code: 'validation_error', issues: bodyResult.error.issues },\n      { status: 400 },\n    )\n  }\n\n  const { providerId: requestedProviderId, modelId, baseURL, agentId } = bodyResult.data\n  const knownProviderIdsForRequest = llmProviderRegistry.list().map((p) => p.id)\n  const providerId = requestedProviderId\n    ? canonicalProviderId(requestedProviderId, knownProviderIdsForRequest) ?? requestedProviderId\n    : requestedProviderId\n\n  if (baseURL && baseURL.trim().length > 0) {\n    const allowlist = readBaseurlAllowlist()\n    if (!isBaseurlAllowlisted(baseURL.trim(), allowlist)) {\n      return NextResponse.json(\n        {\n          error: `baseURL \"${baseURL}\" is not in AI_RUNTIME_BASEURL_ALLOWLIST.`,\n          code: 'baseurl_not_allowlisted',\n        },\n        { status: 400 },\n      )\n    }\n  }\n\n  const allowedOverrideProviders = bodyResult.data.allowedOverrideProviders === undefined\n    ? undefined\n    : bodyResult.data.allowedOverrideProviders?.map((id) =>\n        canonicalProviderId(id, knownProviderIdsForRequest) ?? id,\n      ) ?? null\n  const allowedOverrideModelsByProvider = bodyResult.data.allowedOverrideModelsByProvider === undefined\n    ? undefined\n    : Object.fromEntries(\n        Object.entries(bodyResult.data.allowedOverrideModelsByProvider ?? {}).map(([id, models]) => [\n          canonicalProviderId(id, knownProviderIdsForRequest) ?? id,\n          models,\n        ]),\n      )\n  const hasRuntimeOverrideAllowlistWrite =\n    allowedOverrideProviders !== undefined || allowedOverrideModelsByProvider !== undefined\n\n  // Env-driven provider/model allowlist (Phase 1780-5) intersected with the\n  // per-tenant allowlist (Phase 1780-6): the EFFECTIVE allowlist clips which\n  // (provider, model) pairs the runtime accepts. Reject settings PUT requests\n  // for pairs outside that effective set so the settings UI never persists a\n  // value the runtime would later refuse. Tenant-allowlist enforcement is\n  // best-effort here: if the snapshot lookup fails we fall back to env-only\n  // checks (the runtime still re-clips at resolution time).\n  let putEffectiveAllowlist: ReturnType<typeof intersectAllowlists> | null = null\n  if (providerId || hasRuntimeOverrideAllowlistWrite) {\n    try {\n      const previewContainer = await createRequestContainer()\n      const knownIdsForCheck = [\n        ...OPEN_CODE_PROVIDER_IDS,\n        ...llmProviderRegistry\n          .list()\n          .map((p) => p.id)\n          .filter((id) => !(OPEN_CODE_PROVIDER_IDS as readonly string[]).includes(id)),\n      ]\n      let snapshot: TenantAllowlistSnapshot | null = null\n      if (auth.tenantId) {\n        try {\n          const em = previewContainer.resolve<EntityManager>('em')\n          const allowlistRepo = new AiTenantModelAllowlistRepository(em)\n          snapshot = await allowlistRepo.getSnapshot({\n            tenantId: auth.tenantId,\n            organizationId: auth.orgId ?? null,\n          })\n        } catch {\n          snapshot = null\n        }\n      }\n      putEffectiveAllowlist = intersectAllowlists(\n        process.env as Record<string, string | undefined>,\n        knownIdsForCheck,\n        snapshot,\n      )\n    } catch {\n      putEffectiveAllowlist = null\n    }\n\n    if (providerId && putEffectiveAllowlist) {\n      if (!isProviderAllowedInEffective(putEffectiveAllowlist, providerId)) {\n        const source = putEffectiveAllowlist.tenantOverridesActive\n          ? 'the effective allowlist (env \u2229 tenant)'\n          : 'OM_AI_AVAILABLE_PROVIDERS'\n        return NextResponse.json(\n          {\n            error: `Provider \"${providerId}\" is not in ${source}.`,\n            code: 'provider_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n      if (modelId && !isProviderModelAllowedInEffective(putEffectiveAllowlist, providerId, modelId)) {\n        const source = putEffectiveAllowlist.tenantOverridesActive\n          ? `the effective allowlist (env \u2229 tenant) for \"${providerId}\"`\n          : modelAllowlistEnvVarName(providerId)\n        return NextResponse.json(\n          {\n            error: `Model \"${modelId}\" is not in ${source}.`,\n            code: 'model_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n    } else if (providerId) {\n      if (!isProviderAllowed(process.env, providerId)) {\n        return NextResponse.json(\n          {\n            error: `Provider \"${requestedProviderId}\" is not in OM_AI_AVAILABLE_PROVIDERS.`,\n            code: 'provider_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n      if (modelId && !isProviderModelAllowed(process.env, providerId, modelId)) {\n        return NextResponse.json(\n          {\n            error: `Model \"${modelId}\" is not in ${modelAllowlistEnvVarName(providerId)}.`,\n            code: 'model_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n    }\n  }\n\n  if (hasRuntimeOverrideAllowlistWrite && !agentId) {\n    return NextResponse.json(\n      {\n        error: 'agentId is required when saving chat override allowlist settings.',\n        code: 'agent_required',\n      },\n      { status: 400 },\n    )\n  }\n\n  if (Array.isArray(allowedOverrideProviders)) {\n    for (const id of allowedOverrideProviders) {\n      if (putEffectiveAllowlist && !isProviderAllowedInEffective(putEffectiveAllowlist, id)) {\n        return NextResponse.json(\n          {\n            error: `Provider \"${id}\" is not in the effective tenant allowlist; per-agent chat override choices may not widen it.`,\n            code: 'provider_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n    }\n  }\n  if (allowedOverrideModelsByProvider) {\n    for (const [id, models] of Object.entries(allowedOverrideModelsByProvider)) {\n      if (putEffectiveAllowlist && !isProviderAllowedInEffective(putEffectiveAllowlist, id)) {\n        return NextResponse.json(\n          {\n            error: `Provider \"${id}\" is not in the effective tenant allowlist; cannot save per-agent model choices for it.`,\n            code: 'provider_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n      for (const allowedModelId of models) {\n        if (\n          putEffectiveAllowlist &&\n          !isProviderModelAllowedInEffective(putEffectiveAllowlist, id, allowedModelId)\n        ) {\n          return NextResponse.json(\n            {\n              error: `Model \"${allowedModelId}\" is not in the effective tenant allowlist for \"${id}\".`,\n              code: 'model_not_allowlisted',\n            },\n            { status: 400 },\n          )\n        }\n      }\n    }\n  }\n\n  try {\n    const container = await createRequestContainer()\n    const rbacService = container.resolve<RbacService>('rbacService')\n    const acl = await rbacService.loadAcl(auth.sub, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n    const canManage = acl.isSuperAdmin || acl.features.includes('ai_assistant.settings.manage')\n    if (!canManage) {\n      return NextResponse.json({ error: 'Forbidden', code: 'forbidden' }, { status: 403 })\n    }\n\n    const em = container.resolve<EntityManager>('em')\n    const repo = new AiAgentRuntimeOverrideRepository(em)\n    const upsertInput = {\n      agentId: agentId ?? null,\n      ...(Object.prototype.hasOwnProperty.call(bodyResult.data, 'providerId')\n        ? { providerId: providerId ?? null }\n        : {}),\n      ...(Object.prototype.hasOwnProperty.call(bodyResult.data, 'modelId')\n        ? { modelId: modelId ?? null }\n        : {}),\n      ...(Object.prototype.hasOwnProperty.call(bodyResult.data, 'baseURL')\n        ? { baseURL: baseURL ?? null }\n        : {}),\n      ...(allowedOverrideProviders !== undefined\n        ? { allowedOverrideProviders }\n        : {}),\n      ...(allowedOverrideModelsByProvider !== undefined\n        ? { allowedOverrideModelsByProvider }\n        : {}),\n    }\n    const row = await repo.upsertDefault(\n      upsertInput,\n      { tenantId: auth.tenantId ?? '', organizationId: auth.orgId ?? null, userId: auth.sub },\n    )\n    return NextResponse.json({\n      id: row.id,\n      tenantId: row.tenantId,\n      organizationId: row.organizationId,\n      agentId: row.agentId,\n      providerId: row.providerId,\n      modelId: row.modelId,\n      baseURL: row.baseUrl,\n      allowedOverrideProviders: row.allowedOverrideProviders ?? null,\n      allowedOverrideModelsByProvider: row.allowedOverrideModelsByProvider ?? {},\n      updatedAt: row.updatedAt,\n    })\n  } catch (error) {\n    if (error instanceof AiAgentRuntimeOverrideValidationError) {\n      return NextResponse.json({ error: error.message, code: 'provider_unknown' }, { status: 400 })\n    }\n    logger.error('AI Settings \u2014 PUT error', { err: error })\n    return NextResponse.json({ error: 'Failed to save runtime override.' }, { status: 500 })\n  }\n}\n\n/**\n * DELETE /api/ai_assistant/settings\n *\n * Soft-deletes the active per-tenant AI runtime override (Phase 4a). Requires\n * `ai_assistant.settings.manage`. Pass `agentId` in the body to clear only\n * the agent-specific row; omit (or null) to clear the tenant-wide default.\n * Idempotent \u2014 returns `{ cleared: false }` when no active row was found.\n */\nexport async function DELETE(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let parsedBody: unknown = {}\n  try {\n    parsedBody = await req.json()\n  } catch {\n    // Body is optional for DELETE \u2014 empty body is fine\n  }\n\n  const bodyResult = runtimeOverrideClearSchema.safeParse(parsedBody)\n  if (!bodyResult.success) {\n    return NextResponse.json(\n      { error: 'Invalid request body.', code: 'validation_error', issues: bodyResult.error.issues },\n      { status: 400 },\n    )\n  }\n\n  try {\n    const container = await createRequestContainer()\n    const rbacService = container.resolve<RbacService>('rbacService')\n    const acl = await rbacService.loadAcl(auth.sub, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n    const canManage = acl.isSuperAdmin || acl.features.includes('ai_assistant.settings.manage')\n    if (!canManage) {\n      return NextResponse.json({ error: 'Forbidden', code: 'forbidden' }, { status: 403 })\n    }\n\n    const em = container.resolve<EntityManager>('em')\n    const repo = new AiAgentRuntimeOverrideRepository(em)\n    const cleared = await repo.clearDefault({\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      agentId: bodyResult.data.agentId ?? null,\n    })\n    return NextResponse.json({ cleared })\n  } catch (error) {\n    logger.error('AI Settings \u2014 DELETE error', { err: error })\n    return NextResponse.json({ error: 'Failed to clear runtime override.' }, { status: 500 })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,oBAAsC;AAC/C,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAGvC,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC,6CAA6C;AACxF,SAAS,wCAAwC;AACjD,SAAS,sBAAsB,4BAA4B;AAC3D,SAAS,mBAAmB,kBAAkB;AAC9C,SAAS,oBAAoB,mCAAmC;AAChE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,OAEK;AAEP,MAAM,SAAS,aAAa,cAAc;AAE1C,SAAS,kCACP,QACA,mBACsG;AACtG,MAAI,OAAO,SAAS,EAAG,QAAO;AAC9B,UAAQ,qBAAqB,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,MAAM,GAAG,EAAE;AACjE;AAEA,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1D,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,0BAA0B,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACjF,iCAAiC,EAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,EACrE,SAAS;AACd,CAAC;AAED,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAC1D,CAAC;AAKM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK,EAAE,SAAS,gCAAgC;AAAA,IAChD,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MAIF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yCAAyC;AAAA,MACvE;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,+EAA+E;AAAA,QAC3G,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,6CAA6C;AAAA,MAC3E;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aACE;AAAA,MAGF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iFAAiF;AAAA,MAC/G;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,6CAA6C;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EACjE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAAA,EAC5E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AACjF;AASA,eAAsB,IAAI,KAAkB;AAC1C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,MAAM,QAAQ;AACpB,UAAM,yBAAyB,IAAI,gBAAgB,KAAK,KAAK,IAAI,mBAAmB,KAAK,KAAK;AAC9F,UAAM,oBAAoB,oBAAoB,KAAK;AACnD,UAAM,+BAAyC;AAAA,MAC7C,GAAG;AAAA,MACH,GAAG,kBACA,IAAI,CAAC,MAAM,EAAE,EAAE,EACf,OAAO,CAAC,OAAO,CAAE,uBAA6C,SAAS,EAAE,CAAC;AAAA,IAC/E;AACA,UAAM,qBAAqB,yBACvB,oBAAoB,wBAAwB,kBAAkB,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC,IAC5F;AACJ,UAAM,mBAAmB,qBAAqB,oBAAoB,IAAI,kBAAkB,IAAI;AAC5F,UAAM,8BACH,yBACG,oBAAoB,wBAAwB,sBAA2C,IACvF,SAAS;AAEf,UAAM,2BAA2B,oBAAoB,0BAA0B;AAE/E,UAAM,aAAa,kBAAkB,MAAM;AAC3C,UAAM,eAAe,kBAAkB,QAAQ,0BAA0B,QAAQ;AACjF,UAAM,uBAAuB,kBAAkB,gBAAgB,0BAA0B,gBAAgB;AACzG,UAAM,sBAAsB,IAAI,aAAa,KAAK,KAAK,IAAI,gBAAgB,KAAK,KAAK;AACrF,UAAM,4BAA4B,GAAG,UAAU,IAAI,mBAAmB;AACtE,UAAM,mBAAmB,mBACrB,iBAAiB,aAAa,GAAG,IACjC,2BACE,6BAA6B,0BAA0B,IACvD;AACN,UAAM,gBAAgB,mBAClB,iBAAiB,oBAAoB,GAAG,IACxC,2BACE,oCAAoC,0BAA0B,IAC9D;AAGN,UAAM,mBAAmB,CAAC,CAAC,QAAQ,IAAI,oBAAoB,KAAK;AAGhE,QAAI,iBAMO;AAEX,QAAI,mBA0BC,CAAC;AAEN,QAAI,kBAKO;AAEX,QAAI,0BAA0D;AAE9D,QAAI;AACF,YAAM,YAAY,MAAM,uBAAuB;AAC/C,YAAM,WAAW,KAAK,YAAY;AAClC,YAAM,iBAAiB,KAAK,SAAS;AAErC,UAAI,UAAU;AACZ,cAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,cAAM,OAAO,IAAI,iCAAiC,EAAE;AACpD,cAAM,cAAc,MAAM,KAAK,WAAW,EAAE,UAAU,gBAAgB,SAAS,KAAK,CAAC;AACrF,YAAI,aAAa;AACf,2BAAiB;AAAA,YACf,YAAY,YAAY,cAAc;AAAA,YACtC,SAAS,YAAY,WAAW;AAAA,YAChC,SAAS,YAAY,WAAW;AAAA,YAChC,SAAS,YAAY,WAAW;AAAA,YAChC,WAAW,YAAY,UAAU,YAAY;AAAA,UAC/C;AAAA,QACF;AAEA,cAAM,gBAAgB,IAAI,iCAAiC,EAAE;AAC7D,kCAA0B,MAAM,cAAc,YAAY;AAAA,UACxD;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,UAAU,mBAAmB,SAAS;AAC5C,cAAM,oBAAoB,QAAQ,aAAa;AAAA,UAC7C,iBAAiB;AAAA,UACjB,gBAAgB,iBACZ,EAAE,YAAY,eAAe,YAAY,SAAS,eAAe,SAAS,SAAS,eAAe,QAAQ,IAC1G;AAAA,QACN,CAAC;AACD,0BAAkB;AAAA,UAChB,YAAY,kBAAkB;AAAA,UAC9B,SAAS,kBAAkB;AAAA,UAC3B,SAAS,kBAAkB,WAAW;AAAA,UACtC,QAAQ,kBAAkB;AAAA,QAC5B;AAEA,cAAM,kBAAkB;AACxB,cAAM,SAAS,WAAW;AAC1B,cAAM,0BAA0B,OAAO,IAAI,OAAO,UAAU;AAC1D,gBAAM,mBAAmB,MAAM,KAAK,SAAS;AAAA,YAC3C;AAAA,YACA;AAAA,YACA,SAAS,MAAM;AAAA,UACjB,CAAC;AACD,gBAAM,sBAAsB,mBACxB;AAAA,YACE,YAAY,iBAAiB,cAAc;AAAA,YAC3C,SAAS,iBAAiB,WAAW;AAAA,YACrC,SAAS,iBAAiB,WAAW;AAAA,UACvC,IACC,kBAAkB;AACvB,gBAAM,kBAAkB,QAAQ,aAAa;AAAA,YAC3C,UAAU,MAAM;AAAA,YAChB,mBAAmB,MAAM;AAAA,YACzB,sBAAsB,MAAM;AAAA,YAC5B,qBAAqB,MAAM;AAAA,YAC3B,sBAAsB,4BAA4B,KAAK;AAAA,YACvD,gBAAgB;AAAA,YAChB,iBAAiB;AAAA,UACnB,CAAC;AACD,gBAAM,oBAAoB;AAAA,YACxB;AAAA,YACA,MAAM;AAAA,YACN;AAAA,UACF;AACA,gBAAM,uBAAuB,mBACzB;AAAA,YACE,kBAAkB,iBAAiB,4BAA4B;AAAA,YAC/D,yBAAyB,iBAAiB,mCAAmC,CAAC;AAAA,UAChF,IACA;AACJ,gBAAM,yBAAyB;AAAA,YAC7B;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,gBAAM,0BAA0B;AAAA,YAC9B;AAAA,cACE;AAAA,cACA;AAAA,cACA;AAAA,YACF;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,gBAAM,oBAAoB,OAAO;AAAA,YAC/B,6BAA6B,IAAI,CAACA,gBAAe;AAAA,cAC/CA;AAAA,cACA,sCAAsC,MAAM,IAAIA,WAAU;AAAA,YAC5D,CAAC;AAAA,UACH;AACA,iBAAO;AAAA,YACL,SAAS,MAAM;AAAA,YACf,UAAU,MAAM;AAAA,YAChB,sBAAsB,4BAA4B,KAAK;AAAA,YACvD,2BAA2B,4BAA4B,KAAK;AAAA,YAC5D,uBAAuB,MAAM,mBAAmB;AAAA,YAChD,oBAAoB,MAAM,gBAAgB;AAAA,YAC1C,UAAU,mBACN;AAAA,cACE,YAAY,iBAAiB,cAAc;AAAA,cAC3C,SAAS,iBAAiB,WAAW;AAAA,cACrC,SAAS,iBAAiB,WAAW;AAAA,cACrC,WAAW,iBAAiB,UAAU,YAAY;AAAA,YACpD,IACA;AAAA,YACJ,0BAA0B;AAAA,cACxB,KAAK;AAAA,cACL,QAAQ,iCAAiC,oBAAoB,IACzD,uBACA;AAAA,cACJ,WAAW;AAAA,cACX,aAAa;AAAA,gBACX,WAAW,yCAAyC,MAAM,EAAE;AAAA,gBAC5D,kBAAkB;AAAA,cACpB;AAAA,YACF;AAAA,YACA,YAAY,gBAAgB;AAAA,YAC5B,SAAS,gBAAgB;AAAA,YACzB,SAAS,gBAAgB,WAAW;AAAA,YACpC,QAAQ,gBAAgB;AAAA,UAC1B;AAAA,QACF,CAAC;AACD,2BAAmB,MAAM,QAAQ,IAAI,uBAAuB;AAAA,MAC9D;AAAA,IACF,SAAS,eAAe;AAEtB,aAAO,KAAK,iEAA4D,EAAE,KAAK,cAAc,CAAC;AAAA,IAChG;AAOA,UAAM,kBAAkB,oBAAoB,KAAK,4BAA4B;AAC7E,UAAM,qBAAqB;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,kBAAkB;AAAA,MACtB,GAAG,uBAAuB,IAAI,CAAC,OAAO;AACpC,cAAM,OAAO,oBAAoB,EAAE;AACnC,cAAMC,oBAAmB,oBAAoB,IAAI,EAAE;AACnD,eAAO;AAAA,UACL;AAAA,UACA,MAAM,KAAK;AAAA,UACX,cAAc,KAAK;AAAA,UACnB,QAAQ,oCAAoC,EAAE;AAAA,UAC9C,YAAY,6BAA6B,EAAE;AAAA,UAC3C,eAAeA,mBAAkB,iBAAiB,CAAC;AAAA,QACrD;AAAA,MACF,CAAC;AAAA;AAAA,MAED,GAAG,oBAAoB,KAAK,EACzB,OAAO,CAAC,MAAM,CAAE,uBAA6C,SAAS,EAAE,EAAE,CAAC,EAC3E,IAAI,CAAC,OAAO;AAAA,QACX,IAAI,EAAE;AAAA,QACN,MAAM,EAAE;AAAA,QACR,cAAc,EAAE,cAAc,CAAC,GAAG,MAAM;AAAA,QACxC,QAAQ;AAAA,QACR,YAAY,EAAE,aAAa;AAAA,QAC3B,eAAe,EAAE;AAAA,MACnB,EAAE;AAAA,IACN;AAEA,UAAM,qBAAqB,gBACxB,OAAO,CAAC,MAAM,6BAA6B,oBAAoB,EAAE,EAAE,CAAC,EACpE,IAAI,CAAC,MAAM;AACV,YAAM,sBAAsB,mBAAmB,iBAAiB,EAAE,EAAE;AACpE,YAAM,gBAAgB;AAAA,QACpB,EAAE;AAAA,QACF;AAAA,MACF;AACA,YAAM,kBAAkB,wBAAwB,SAC5C,cAAc,OAAO,CAAC,MAAM,oBAAoB,SAAS,EAAE,EAAE,CAAC,IAC9D;AACJ,aAAO;AAAA,QACL,GAAG;AAAA,QACH,cAAc,uBAAuB,CAAC,oBAAoB,SAAS,EAAE,YAAY,IAC5E,oBAAoB,CAAC,KAAK,EAAE,eAC7B,EAAE,gBAAgB,gBAAgB,CAAC,GAAG,MAAM;AAAA,QAChD,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAEH,UAAM,qBAAqB,gBACxB,OAAO,CAAC,MAAM,kBAAkB,KAAK,EAAE,EAAE,CAAC,EAC1C,IAAI,CAAC,MAAM;AACV,YAAM,gBAAgB,gBAAgB,iBAAiB,EAAE,EAAE;AAC3D,YAAM,gBAAgB;AAAA,QACpB,EAAE;AAAA,QACF;AAAA,MACF;AACA,YAAM,qBAAqB,kBAAkB,SACzC,cAAc,OAAO,CAAC,MAAM,cAAc,SAAS,EAAE,EAAE,CAAC,IACxD;AACJ,aAAO;AAAA,QACL,GAAG;AAAA,QACH,cAAc,iBAAiB,CAAC,cAAc,SAAS,EAAE,YAAY,IAChE,cAAc,CAAC,KAAK,EAAE,eACvB,EAAE,gBAAgB,mBAAmB,CAAC,GAAG,MAAM;AAAA,QACnD,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAEH,WAAO,aAAa,KAAK;AAAA,MACvB,UAAU;AAAA,QACR,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,OAAO,kBACH,GAAG,gBAAgB,UAAU,IAAI,gBAAgB,OAAO,KACxD;AAAA,QACJ,cAAc;AAAA,QACd,QAAQ;AAAA,QACR,YAAY;AAAA,MACd;AAAA,MACA;AAAA;AAAA;AAAA,MAGA;AAAA;AAAA;AAAA,MAGA,WAAW;AAAA;AAAA;AAAA;AAAA,MAIX,iBAAiB;AAAA;AAAA;AAAA;AAAA,MAIjB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,IACV,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,gCAA2B,EAAE,KAAK,MAAM,CAAC;AACtD,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;AASA,eAAsB,IAAI,KAAkB;AAC1C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,MAAM,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnH;AAEA,QAAM,aAAa,4BAA4B,UAAU,UAAU;AACnE,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB,MAAM,oBAAoB,QAAQ,WAAW,MAAM,OAAO;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,EAAE,YAAY,qBAAqB,SAAS,SAAS,QAAQ,IAAI,WAAW;AAClF,QAAM,6BAA6B,oBAAoB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;AAC7E,QAAM,aAAa,sBACf,oBAAoB,qBAAqB,0BAA0B,KAAK,sBACxE;AAEJ,MAAI,WAAW,QAAQ,KAAK,EAAE,SAAS,GAAG;AACxC,UAAM,YAAY,qBAAqB;AACvC,QAAI,CAAC,qBAAqB,QAAQ,KAAK,GAAG,SAAS,GAAG;AACpD,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,YAAY,OAAO;AAAA,UAC1B,MAAM;AAAA,QACR;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,2BAA2B,WAAW,KAAK,6BAA6B,SAC1E,SACA,WAAW,KAAK,0BAA0B;AAAA,IAAI,CAAC,OAC7C,oBAAoB,IAAI,0BAA0B,KAAK;AAAA,EACzD,KAAK;AACT,QAAM,kCAAkC,WAAW,KAAK,oCAAoC,SACxF,SACA,OAAO;AAAA,IACL,OAAO,QAAQ,WAAW,KAAK,mCAAmC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,MAAM,MAAM;AAAA,MAC1F,oBAAoB,IAAI,0BAA0B,KAAK;AAAA,MACvD;AAAA,IACF,CAAC;AAAA,EACH;AACJ,QAAM,mCACJ,6BAA6B,UAAa,oCAAoC;AAShF,MAAI,wBAAuE;AAC3E,MAAI,cAAc,kCAAkC;AAClD,QAAI;AACF,YAAM,mBAAmB,MAAM,uBAAuB;AACtD,YAAM,mBAAmB;AAAA,QACvB,GAAG;AAAA,QACH,GAAG,oBACA,KAAK,EACL,IAAI,CAAC,MAAM,EAAE,EAAE,EACf,OAAO,CAAC,OAAO,CAAE,uBAA6C,SAAS,EAAE,CAAC;AAAA,MAC/E;AACA,UAAI,WAA2C;AAC/C,UAAI,KAAK,UAAU;AACjB,YAAI;AACF,gBAAM,KAAK,iBAAiB,QAAuB,IAAI;AACvD,gBAAM,gBAAgB,IAAI,iCAAiC,EAAE;AAC7D,qBAAW,MAAM,cAAc,YAAY;AAAA,YACzC,UAAU,KAAK;AAAA,YACf,gBAAgB,KAAK,SAAS;AAAA,UAChC,CAAC;AAAA,QACH,QAAQ;AACN,qBAAW;AAAA,QACb;AAAA,MACF;AACA,8BAAwB;AAAA,QACtB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACF,QAAQ;AACN,8BAAwB;AAAA,IAC1B;AAEA,QAAI,cAAc,uBAAuB;AACvC,UAAI,CAAC,6BAA6B,uBAAuB,UAAU,GAAG;AACpE,cAAM,SAAS,sBAAsB,wBACjC,gDACA;AACJ,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,aAAa,UAAU,eAAe,MAAM;AAAA,YACnD,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,WAAW,CAAC,kCAAkC,uBAAuB,YAAY,OAAO,GAAG;AAC7F,cAAM,SAAS,sBAAsB,wBACjC,oDAA+C,UAAU,MACzD,yBAAyB,UAAU;AACvC,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,UAAU,OAAO,eAAe,MAAM;AAAA,YAC7C,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF,WAAW,YAAY;AACrB,UAAI,CAAC,kBAAkB,QAAQ,KAAK,UAAU,GAAG;AAC/C,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,aAAa,mBAAmB;AAAA,YACvC,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,WAAW,CAAC,uBAAuB,QAAQ,KAAK,YAAY,OAAO,GAAG;AACxE,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,UAAU,OAAO,eAAe,yBAAyB,UAAU,CAAC;AAAA,YAC3E,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,oCAAoC,CAAC,SAAS;AAChD,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ,wBAAwB,GAAG;AAC3C,eAAW,MAAM,0BAA0B;AACzC,UAAI,yBAAyB,CAAC,6BAA6B,uBAAuB,EAAE,GAAG;AACrF,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,aAAa,EAAE;AAAA,YACtB,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,iCAAiC;AACnC,eAAW,CAAC,IAAI,MAAM,KAAK,OAAO,QAAQ,+BAA+B,GAAG;AAC1E,UAAI,yBAAyB,CAAC,6BAA6B,uBAAuB,EAAE,GAAG;AACrF,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,aAAa,EAAE;AAAA,YACtB,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,iBAAW,kBAAkB,QAAQ;AACnC,YACE,yBACA,CAAC,kCAAkC,uBAAuB,IAAI,cAAc,GAC5E;AACA,iBAAO,aAAa;AAAA,YAClB;AAAA,cACE,OAAO,UAAU,cAAc,mDAAmD,EAAE;AAAA,cACpF,MAAM;AAAA,YACR;AAAA,YACA,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,cAAc,UAAU,QAAqB,aAAa;AAChE,UAAM,MAAM,MAAM,YAAY,QAAQ,KAAK,KAAK;AAAA,MAC9C,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,UAAM,YAAY,IAAI,gBAAgB,IAAI,SAAS,SAAS,8BAA8B;AAC1F,QAAI,CAAC,WAAW;AACd,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,MAAM,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,UAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,UAAM,OAAO,IAAI,iCAAiC,EAAE;AACpD,UAAM,cAAc;AAAA,MAClB,SAAS,WAAW;AAAA,MACpB,GAAI,OAAO,UAAU,eAAe,KAAK,WAAW,MAAM,YAAY,IAClE,EAAE,YAAY,cAAc,KAAK,IACjC,CAAC;AAAA,MACL,GAAI,OAAO,UAAU,eAAe,KAAK,WAAW,MAAM,SAAS,IAC/D,EAAE,SAAS,WAAW,KAAK,IAC3B,CAAC;AAAA,MACL,GAAI,OAAO,UAAU,eAAe,KAAK,WAAW,MAAM,SAAS,IAC/D,EAAE,SAAS,WAAW,KAAK,IAC3B,CAAC;AAAA,MACL,GAAI,6BAA6B,SAC7B,EAAE,yBAAyB,IAC3B,CAAC;AAAA,MACL,GAAI,oCAAoC,SACpC,EAAE,gCAAgC,IAClC,CAAC;AAAA,IACP;AACA,UAAM,MAAM,MAAM,KAAK;AAAA,MACrB;AAAA,MACA,EAAE,UAAU,KAAK,YAAY,IAAI,gBAAgB,KAAK,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,IACxF;AACA,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI,IAAI;AAAA,MACR,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,SAAS,IAAI;AAAA,MACb,YAAY,IAAI;AAAA,MAChB,SAAS,IAAI;AAAA,MACb,SAAS,IAAI;AAAA,MACb,0BAA0B,IAAI,4BAA4B;AAAA,MAC1D,iCAAiC,IAAI,mCAAmC,CAAC;AAAA,MACzE,WAAW,IAAI;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,iBAAiB,uCAAuC;AAC1D,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,SAAS,MAAM,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AACA,WAAO,MAAM,gCAA2B,EAAE,KAAK,MAAM,CAAC;AACtD,WAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzF;AACF;AAUA,eAAsB,OAAO,KAAkB;AAC7C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI,aAAsB,CAAC;AAC3B,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AAAA,EAER;AAEA,QAAM,aAAa,2BAA2B,UAAU,UAAU;AAClE,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB,MAAM,oBAAoB,QAAQ,WAAW,MAAM,OAAO;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,cAAc,UAAU,QAAqB,aAAa;AAChE,UAAM,MAAM,MAAM,YAAY,QAAQ,KAAK,KAAK;AAAA,MAC9C,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,UAAM,YAAY,IAAI,gBAAgB,IAAI,SAAS,SAAS,8BAA8B;AAC1F,QAAI,CAAC,WAAW;AACd,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,MAAM,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,UAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,UAAM,OAAO,IAAI,iCAAiC,EAAE;AACpD,UAAM,UAAU,MAAM,KAAK,aAAa;AAAA,MACtC,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,SAAS,WAAW,KAAK,WAAW;AAAA,IACtC,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,QAAQ,CAAC;AAAA,EACtC,SAAS,OAAO;AACd,WAAO,MAAM,mCAA8B,EAAE,KAAK,MAAM,CAAC;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACF;",
+  "sourcesContent": ["import { createLogger } from '@open-mercato/shared/lib/logger'\nimport { NextResponse, type NextRequest } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { llmProviderRegistry } from '@open-mercato/shared/lib/ai/llm-provider-registry'\nimport { joinProviderModel } from '@open-mercato/shared/lib/ai/model-id'\nimport {\n  OPEN_CODE_PROVIDER_IDS,\n  OPEN_CODE_PROVIDERS,\n  getOpenCodeProviderConfiguredEnvKey,\n  isOpenCodeProviderConfigured,\n} from '@open-mercato/shared/lib/ai/opencode-provider'\nimport { AiAgentRuntimeOverrideRepository, AiAgentRuntimeOverrideValidationError } from '../../data/repositories/AiAgentRuntimeOverrideRepository'\nimport { AiTenantModelAllowlistRepository } from '../../data/repositories/AiTenantModelAllowlistRepository'\nimport { isBaseurlAllowlisted, readBaseurlAllowlist } from '../../lib/baseurl-allowlist'\nimport { loadAgentRegistry, listAgents } from '../../lib/agent-registry'\nimport { createModelFactory, resolveAllowRuntimeOverride } from '../../lib/model-factory'\nimport {\n  agentOverrideModelAllowlistEnvVarName,\n  agentOverrideProviderAllowlistEnvVarName,\n  canonicalProviderId,\n  hasAllowlistSnapshotRestrictions,\n  intersectEffectiveAllowlistWithSnapshot,\n  intersectAllowlists,\n  isProviderAllowed,\n  isProviderAllowedInEffective,\n  isProviderModelAllowed,\n  isProviderModelAllowedInEffective,\n  modelAllowlistEnvVarName,\n  readAgentRuntimeOverrideAllowlist,\n  readAllowedModels,\n  readAllowedProviders,\n  readAllowlistConfig,\n  type TenantAllowlistSnapshot,\n} from '../../lib/model-allowlist'\n\nconst logger = createLogger('ai_assistant')\n\nfunction modelCatalogWithAllowlistFallback(\n  models: ReadonlyArray<{ id: string; name: string; contextWindow?: number | null; tags?: readonly string[] }>,\n  allowlistModelIds: string[] | undefined,\n): ReadonlyArray<{ id: string; name: string; contextWindow?: number | null; tags?: readonly string[] }> {\n  if (models.length > 0) return models\n  return (allowlistModelIds ?? []).map((id) => ({ id, name: id }))\n}\n\nconst runtimeOverrideUpsertSchema = z.object({\n  providerId: z.string().min(1).max(64).nullable().optional(),\n  modelId: z.string().min(1).max(256).nullable().optional(),\n  baseURL: z.string().url().max(2048).nullable().optional(),\n  agentId: z.string().min(1).max(128).nullable().optional(),\n  allowedOverrideProviders: z.array(z.string().min(1).max(64)).nullable().optional(),\n  allowedOverrideModelsByProvider: z\n    .record(z.string().min(1).max(64), z.array(z.string().min(1).max(256)))\n    .optional(),\n})\n\nconst runtimeOverrideClearSchema = z.object({\n  agentId: z.string().min(1).max(128).nullable().optional(),\n})\n\nexport type RuntimeOverrideUpsertBody = z.infer<typeof runtimeOverrideUpsertSchema>\nexport type RuntimeOverrideClearBody = z.infer<typeof runtimeOverrideClearSchema>\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'AI Assistant',\n  summary: 'AI assistant settings',\n  methods: {\n    GET: { summary: 'Get AI provider configuration' },\n    PUT: {\n      summary: 'Upsert per-tenant AI runtime override',\n      description:\n        'Creates or updates the per-tenant AI runtime override (provider, model, baseURL). ' +\n        'Optionally scoped to a specific agent via `agentId`. ' +\n        'Gated by `ai_assistant.settings.manage`. ' +\n        'baseURL must match AI_RUNTIME_BASEURL_ALLOWLIST when set.',\n      requestBody: {\n        contentType: 'application/json',\n        description: 'Override payload. All fields nullable/optional; null explicitly clears the axis.',\n        schema: runtimeOverrideUpsertSchema,\n      },\n      responses: [\n        { status: 200, description: 'Override saved. Returns the saved row.' },\n      ],\n      errors: [\n        { status: 400, description: 'Validation error: unknown provider, invalid URL, or baseURL not allowlisted.' },\n        { status: 401, description: 'Unauthenticated.' },\n        { status: 403, description: 'Caller lacks ai_assistant.settings.manage.' },\n      ],\n    },\n    DELETE: {\n      summary: 'Clear per-tenant AI runtime override',\n      description:\n        'Soft-deletes the active per-tenant runtime override. ' +\n        'Pass `agentId` to clear only the agent-specific row; omit to clear the tenant-wide default. ' +\n        'Gated by `ai_assistant.settings.manage`. Idempotent \u2014 returns 200 with `cleared: false` when no active row existed.',\n      requestBody: {\n        contentType: 'application/json',\n        description: 'Optional agentId to scope the delete.',\n        schema: runtimeOverrideClearSchema,\n      },\n      responses: [\n        { status: 200, description: 'Returns `{ cleared: boolean }` indicating whether a row was found and removed.' },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthenticated.' },\n        { status: 403, description: 'Caller lacks ai_assistant.settings.manage.' },\n      ],\n    },\n  },\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['ai_assistant.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['ai_assistant.settings.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['ai_assistant.settings.manage'] },\n}\n\n/**\n * GET /api/ai_assistant/settings\n *\n * Returns the current OpenCode provider configuration from environment variables\n * plus the Phase 4a additive fields: resolvedDefault, tenantOverride, agents[],\n * and availableProviders[].defaultModels.\n */\nexport async function GET(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const env = process.env as Record<string, string | undefined>\n    const configuredProviderHint = env.OM_AI_PROVIDER?.trim() || env.OPENCODE_PROVIDER?.trim() || null\n    const registryProviders = llmProviderRegistry.list()\n    const knownProviderIdsForAllowlist: string[] = [\n      ...OPEN_CODE_PROVIDER_IDS,\n      ...registryProviders\n        .map((p) => p.id)\n        .filter((id) => !(OPEN_CODE_PROVIDER_IDS as readonly string[]).includes(id)),\n    ]\n    const registryProviderId = configuredProviderHint\n      ? canonicalProviderId(configuredProviderHint, registryProviders.map((provider) => provider.id))\n      : null\n    const registryProvider = registryProviderId ? llmProviderRegistry.get(registryProviderId) : null\n    const fallbackOpenCodeProviderId = (\n      (configuredProviderHint\n        ? canonicalProviderId(configuredProviderHint, OPEN_CODE_PROVIDER_IDS as readonly string[])\n        : null) ?? 'openai'\n    ) as keyof typeof OPEN_CODE_PROVIDERS\n    const fallbackOpenCodeProvider = OPEN_CODE_PROVIDERS[fallbackOpenCodeProviderId]\n\n    const providerId = registryProvider?.id ?? fallbackOpenCodeProviderId\n    const providerName = registryProvider?.name ?? fallbackOpenCodeProvider?.name ?? providerId\n    const defaultProviderModel = registryProvider?.defaultModel ?? fallbackOpenCodeProvider?.defaultModel ?? ''\n    const configuredModelHint = env.OM_AI_MODEL?.trim() || env.OPENCODE_MODEL?.trim() || defaultProviderModel\n    const fallbackModelWithProvider = joinProviderModel(providerId, configuredModelHint)\n    const apiKeyConfigured = registryProvider\n      ? registryProvider.isConfigured(env)\n      : fallbackOpenCodeProvider\n        ? isOpenCodeProviderConfigured(fallbackOpenCodeProviderId)\n        : false\n    const displayEnvKey = registryProvider\n      ? registryProvider.getConfiguredEnvKey(env)\n      : fallbackOpenCodeProvider\n        ? getOpenCodeProviderConfiguredEnvKey(fallbackOpenCodeProviderId)\n        : null\n\n    // Check if MCP_SERVER_API_KEY is configured (required for MCP authentication)\n    const mcpKeyConfigured = !!process.env.MCP_SERVER_API_KEY?.trim()\n\n    // Phase 4a: resolve tenant override row and per-agent resolution matrix\n    let tenantOverride: {\n      providerId: string | null\n      modelId: string | null\n      baseURL: string | null\n      agentId: string | null\n      updatedAt: string\n    } | null = null\n\n    let agentResolutions: Array<{\n      agentId: string\n      moduleId: string\n      allowRuntimeOverride: boolean\n      allowRuntimeModelOverride: boolean\n      codeDefaultProviderId: string | null\n      codeDefaultModelId: string | null\n      override: {\n        providerId: string | null\n        modelId: string | null\n        baseURL: string | null\n        updatedAt: string\n      } | null\n      runtimeOverrideAllowlist: {\n        env: TenantAllowlistSnapshot | null\n        tenant: TenantAllowlistSnapshot | null\n        effective: ReturnType<typeof intersectAllowlists>\n        envVarNames: {\n          providers: string\n          modelsByProvider: Record<string, string>\n        }\n      }\n      providerId: string\n      modelId: string\n      baseURL: string | null\n      source: string\n    }> = []\n\n    let resolvedDefault: {\n      providerId: string\n      modelId: string\n      baseURL: string | null\n      source: string\n    } | null = null\n\n    let tenantAllowlistSnapshot: TenantAllowlistSnapshot | null = null\n\n    try {\n      const container = await createRequestContainer()\n      const tenantId = auth.tenantId ?? null\n      const organizationId = auth.orgId ?? null\n\n      if (tenantId) {\n        const em = container.resolve<EntityManager>('em')\n        const repo = new AiAgentRuntimeOverrideRepository(em)\n        const overrideRow = await repo.getDefault({ tenantId, organizationId, agentId: null })\n        if (overrideRow) {\n          tenantOverride = {\n            providerId: overrideRow.providerId ?? null,\n            modelId: overrideRow.modelId ?? null,\n            baseURL: overrideRow.baseUrl ?? null,\n            agentId: overrideRow.agentId ?? null,\n            updatedAt: overrideRow.updatedAt.toISOString(),\n          }\n        }\n\n        const allowlistRepo = new AiTenantModelAllowlistRepository(em)\n        tenantAllowlistSnapshot = await allowlistRepo.getSnapshot({\n          tenantId,\n          organizationId,\n        })\n\n        const factory = createModelFactory(container)\n        const defaultResolution = factory.resolveModel({\n          tenantAllowlist: tenantAllowlistSnapshot,\n          tenantOverride: tenantOverride\n            ? { providerId: tenantOverride.providerId, modelId: tenantOverride.modelId, baseURL: tenantOverride.baseURL }\n            : undefined,\n        })\n        resolvedDefault = {\n          providerId: defaultResolution.providerId,\n          modelId: defaultResolution.modelId,\n          baseURL: defaultResolution.baseURL ?? null,\n          source: defaultResolution.source,\n        }\n\n        await loadAgentRegistry()\n        const agents = listAgents()\n        const agentResolutionPromises = agents.map(async (agent) => {\n          const agentOverrideRow = await repo.getExact({\n            tenantId,\n            organizationId,\n            agentId: agent.id,\n          })\n          const agentTenantOverride = agentOverrideRow\n            ? {\n                providerId: agentOverrideRow.providerId ?? null,\n                modelId: agentOverrideRow.modelId ?? null,\n                baseURL: agentOverrideRow.baseUrl ?? null,\n              }\n            : (tenantOverride ?? undefined)\n          const agentResolution = factory.resolveModel({\n            moduleId: agent.moduleId,\n            agentDefaultModel: agent.defaultModel,\n            agentDefaultProvider: agent.defaultProvider,\n            agentDefaultBaseUrl: agent.defaultBaseUrl,\n            allowRuntimeOverride: resolveAllowRuntimeOverride(agent),\n            tenantOverride: agentTenantOverride,\n            tenantAllowlist: tenantAllowlistSnapshot,\n          })\n          const agentEnvAllowlist = readAgentRuntimeOverrideAllowlist(\n            env,\n            agent.id,\n            knownProviderIdsForAllowlist,\n          )\n          const agentTenantAllowlist = agentOverrideRow\n            ? {\n                allowedProviders: agentOverrideRow.allowedOverrideProviders ?? null,\n                allowedModelsByProvider: agentOverrideRow.allowedOverrideModelsByProvider ?? {},\n              }\n            : null\n          const baseEffectiveAllowlist = intersectAllowlists(\n            env,\n            knownProviderIdsForAllowlist,\n            tenantAllowlistSnapshot,\n          )\n          const agentEffectiveAllowlist = intersectEffectiveAllowlistWithSnapshot(\n            intersectEffectiveAllowlistWithSnapshot(\n              baseEffectiveAllowlist,\n              knownProviderIdsForAllowlist,\n              agentEnvAllowlist,\n            ),\n            knownProviderIdsForAllowlist,\n            agentTenantAllowlist,\n          )\n          const agentModelEnvVars = Object.fromEntries(\n            knownProviderIdsForAllowlist.map((providerId) => [\n              providerId,\n              agentOverrideModelAllowlistEnvVarName(agent.id, providerId),\n            ]),\n          )\n          return {\n            agentId: agent.id,\n            moduleId: agent.moduleId,\n            allowRuntimeOverride: resolveAllowRuntimeOverride(agent),\n            allowRuntimeModelOverride: resolveAllowRuntimeOverride(agent),\n            codeDefaultProviderId: agent.defaultProvider ?? null,\n            codeDefaultModelId: agent.defaultModel ?? null,\n            override: agentOverrideRow\n              ? {\n                  providerId: agentOverrideRow.providerId ?? null,\n                  modelId: agentOverrideRow.modelId ?? null,\n                  baseURL: agentOverrideRow.baseUrl ?? null,\n                  updatedAt: agentOverrideRow.updatedAt.toISOString(),\n                }\n              : null,\n            runtimeOverrideAllowlist: {\n              env: agentEnvAllowlist,\n              tenant: hasAllowlistSnapshotRestrictions(agentTenantAllowlist)\n                ? agentTenantAllowlist\n                : null,\n              effective: agentEffectiveAllowlist,\n              envVarNames: {\n                providers: agentOverrideProviderAllowlistEnvVarName(agent.id),\n                modelsByProvider: agentModelEnvVars,\n              },\n            },\n            providerId: agentResolution.providerId,\n            modelId: agentResolution.modelId,\n            baseURL: agentResolution.baseURL ?? null,\n            source: agentResolution.source,\n          }\n        })\n        agentResolutions = await Promise.all(agentResolutionPromises)\n      }\n    } catch (overrideError) {\n      // Phase 4a fields are best-effort \u2014 log and continue returning the base response\n      logger.warn('AI Settings \u2014 Failed to compute Phase 4a override fields', { err: overrideError })\n    }\n\n    // Build availableProviders with Phase 4a defaultModels, then clip to the\n    // EFFECTIVE allowlist \u2014 env intersected with the per-tenant snapshot.\n    // The env allowlist is the OUTER constraint; the tenant allowlist (Phase\n    // 1780-6) narrows it further. The settings UI must never offer a value\n    // the runtime would refuse to honor.\n    const allowlistConfig = readAllowlistConfig(env, knownProviderIdsForAllowlist)\n    const effectiveAllowlist = intersectAllowlists(\n      env,\n      knownProviderIdsForAllowlist,\n      tenantAllowlistSnapshot,\n    )\n\n    const allRawProviders = [\n      ...OPEN_CODE_PROVIDER_IDS.map((id) => {\n        const info = OPEN_CODE_PROVIDERS[id]\n        const registryProvider = llmProviderRegistry.get(id)\n        return {\n          id,\n          name: info.name,\n          defaultModel: info.defaultModel,\n          envKey: getOpenCodeProviderConfiguredEnvKey(id),\n          configured: isOpenCodeProviderConfigured(id),\n          defaultModels: registryProvider?.defaultModels ?? [],\n        }\n      }),\n      // Also surface any llmProviderRegistry providers not in OPEN_CODE_PROVIDER_IDS\n      ...llmProviderRegistry.list()\n        .filter((p) => !(OPEN_CODE_PROVIDER_IDS as readonly string[]).includes(p.id))\n        .map((p) => ({\n          id: p.id,\n          name: p.name,\n          defaultModel: p.defaultModels[0]?.id ?? '',\n          envKey: null,\n          configured: p.isConfigured(),\n          defaultModels: p.defaultModels,\n        })),\n    ]\n\n    const availableProviders = allRawProviders\n      .filter((p) => isProviderAllowedInEffective(effectiveAllowlist, p.id))\n      .map((p) => {\n        const effectiveModelsList = effectiveAllowlist.modelsByProvider[p.id]\n        const catalogModels = modelCatalogWithAllowlistFallback(\n          p.defaultModels,\n          effectiveModelsList,\n        )\n        const clippedDefaults = effectiveModelsList !== undefined\n          ? catalogModels.filter((m) => effectiveModelsList.includes(m.id))\n          : catalogModels\n        return {\n          ...p,\n          defaultModel: effectiveModelsList && !effectiveModelsList.includes(p.defaultModel)\n            ? (effectiveModelsList[0] ?? p.defaultModel)\n            : p.defaultModel || clippedDefaults[0]?.id || '',\n          defaultModels: clippedDefaults,\n        }\n      })\n\n    const allowlistProviders = allRawProviders\n      .filter((p) => isProviderAllowed(env, p.id))\n      .map((p) => {\n        const envModelsList = allowlistConfig.modelsByProvider[p.id]\n        const catalogModels = modelCatalogWithAllowlistFallback(\n          p.defaultModels,\n          envModelsList,\n        )\n        const envClippedDefaults = envModelsList !== undefined\n          ? catalogModels.filter((m) => envModelsList.includes(m.id))\n          : catalogModels\n        return {\n          ...p,\n          defaultModel: envModelsList && !envModelsList.includes(p.defaultModel)\n            ? (envModelsList[0] ?? p.defaultModel)\n            : p.defaultModel || envClippedDefaults[0]?.id || '',\n          defaultModels: envClippedDefaults,\n        }\n      })\n\n    return NextResponse.json({\n      provider: {\n        id: providerId,\n        name: providerName,\n        model: resolvedDefault\n          ? joinProviderModel(resolvedDefault.providerId, resolvedDefault.modelId)\n          : fallbackModelWithProvider,\n        defaultModel: defaultProviderModel,\n        envKey: displayEnvKey,\n        configured: apiKeyConfigured,\n      },\n      availableProviders,\n      // Editable universe for the tenant allowlist page. This is clipped only\n      // by env so tenant-hidden models remain visible and can be re-enabled.\n      allowlistProviders,\n      // Snapshot of the env-driven allowlist so the UI can render hints like\n      // \"limited to: openai, anthropic\" without re-implementing the parser.\n      allowlist: allowlistConfig,\n      // Per-tenant allowlist snapshot (Phase 1780-6). `null` when no row has\n      // been persisted yet \u2014 the runtime then falls back to env-only\n      // enforcement. The UI uses this to drive the editable MultiSelect.\n      tenantAllowlist: tenantAllowlistSnapshot,\n      // Effective allowlist after intersecting env with tenant. The UI uses\n      // this to render the \"what the runtime will actually accept\" summary\n      // and to clip pickers without re-implementing the intersection.\n      effectiveAllowlist,\n      mcpKeyConfigured,\n      resolvedDefault,\n      tenantOverride,\n      agents: agentResolutions,\n    })\n  } catch (error) {\n    logger.error('AI Settings \u2014 GET error', { err: error })\n    return NextResponse.json({ error: 'Failed to fetch settings' }, { status: 500 })\n  }\n}\n\n/**\n * PUT /api/ai_assistant/settings\n *\n * Upserts the per-tenant AI runtime override (Phase 4a). Requires\n * `ai_assistant.settings.manage`. The body is Zod-validated; a `baseURL`\n * must match `AI_RUNTIME_BASEURL_ALLOWLIST` when that env var is set.\n */\nexport async function PUT(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let parsedBody: unknown\n  try {\n    parsedBody = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Request body must be valid JSON.', code: 'validation_error' }, { status: 400 })\n  }\n\n  const bodyResult = runtimeOverrideUpsertSchema.safeParse(parsedBody)\n  if (!bodyResult.success) {\n    return NextResponse.json(\n      { error: 'Invalid request body.', code: 'validation_error', issues: bodyResult.error.issues },\n      { status: 400 },\n    )\n  }\n\n  const { providerId: requestedProviderId, modelId, baseURL, agentId } = bodyResult.data\n  const knownProviderIdsForRequest = llmProviderRegistry.list().map((p) => p.id)\n  const providerId = requestedProviderId\n    ? canonicalProviderId(requestedProviderId, knownProviderIdsForRequest) ?? requestedProviderId\n    : requestedProviderId\n\n  if (baseURL && baseURL.trim().length > 0) {\n    const allowlist = readBaseurlAllowlist()\n    if (!isBaseurlAllowlisted(baseURL.trim(), allowlist)) {\n      return NextResponse.json(\n        {\n          error: `baseURL \"${baseURL}\" is not in AI_RUNTIME_BASEURL_ALLOWLIST.`,\n          code: 'baseurl_not_allowlisted',\n        },\n        { status: 400 },\n      )\n    }\n  }\n\n  const allowedOverrideProviders = bodyResult.data.allowedOverrideProviders === undefined\n    ? undefined\n    : bodyResult.data.allowedOverrideProviders?.map((id) =>\n        canonicalProviderId(id, knownProviderIdsForRequest) ?? id,\n      ) ?? null\n  const allowedOverrideModelsByProvider = bodyResult.data.allowedOverrideModelsByProvider === undefined\n    ? undefined\n    : Object.fromEntries(\n        Object.entries(bodyResult.data.allowedOverrideModelsByProvider ?? {}).map(([id, models]) => [\n          canonicalProviderId(id, knownProviderIdsForRequest) ?? id,\n          models,\n        ]),\n      )\n  const hasRuntimeOverrideAllowlistWrite =\n    allowedOverrideProviders !== undefined || allowedOverrideModelsByProvider !== undefined\n\n  // Env-driven provider/model allowlist (Phase 1780-5) intersected with the\n  // per-tenant allowlist (Phase 1780-6): the EFFECTIVE allowlist clips which\n  // (provider, model) pairs the runtime accepts. Reject settings PUT requests\n  // for pairs outside that effective set so the settings UI never persists a\n  // value the runtime would later refuse. Tenant-allowlist enforcement is\n  // best-effort here: if the snapshot lookup fails we fall back to env-only\n  // checks (the runtime still re-clips at resolution time).\n  let putEffectiveAllowlist: ReturnType<typeof intersectAllowlists> | null = null\n  if (providerId || hasRuntimeOverrideAllowlistWrite) {\n    try {\n      const previewContainer = await createRequestContainer()\n      const knownIdsForCheck = [\n        ...OPEN_CODE_PROVIDER_IDS,\n        ...llmProviderRegistry\n          .list()\n          .map((p) => p.id)\n          .filter((id) => !(OPEN_CODE_PROVIDER_IDS as readonly string[]).includes(id)),\n      ]\n      let snapshot: TenantAllowlistSnapshot | null = null\n      if (auth.tenantId) {\n        try {\n          const em = previewContainer.resolve<EntityManager>('em')\n          const allowlistRepo = new AiTenantModelAllowlistRepository(em)\n          snapshot = await allowlistRepo.getSnapshot({\n            tenantId: auth.tenantId,\n            organizationId: auth.orgId ?? null,\n          })\n        } catch {\n          snapshot = null\n        }\n      }\n      putEffectiveAllowlist = intersectAllowlists(\n        process.env as Record<string, string | undefined>,\n        knownIdsForCheck,\n        snapshot,\n      )\n    } catch {\n      putEffectiveAllowlist = null\n    }\n\n    if (providerId && putEffectiveAllowlist) {\n      if (!isProviderAllowedInEffective(putEffectiveAllowlist, providerId)) {\n        const source = putEffectiveAllowlist.tenantOverridesActive\n          ? 'the effective allowlist (env \u2229 tenant)'\n          : 'OM_AI_AVAILABLE_PROVIDERS'\n        return NextResponse.json(\n          {\n            error: `Provider \"${providerId}\" is not in ${source}.`,\n            code: 'provider_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n      if (modelId && !isProviderModelAllowedInEffective(putEffectiveAllowlist, providerId, modelId)) {\n        const source = putEffectiveAllowlist.tenantOverridesActive\n          ? `the effective allowlist (env \u2229 tenant) for \"${providerId}\"`\n          : modelAllowlistEnvVarName(providerId)\n        return NextResponse.json(\n          {\n            error: `Model \"${modelId}\" is not in ${source}.`,\n            code: 'model_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n    } else if (providerId) {\n      if (!isProviderAllowed(process.env, providerId)) {\n        return NextResponse.json(\n          {\n            error: `Provider \"${requestedProviderId}\" is not in OM_AI_AVAILABLE_PROVIDERS.`,\n            code: 'provider_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n      if (modelId && !isProviderModelAllowed(process.env, providerId, modelId)) {\n        return NextResponse.json(\n          {\n            error: `Model \"${modelId}\" is not in ${modelAllowlistEnvVarName(providerId)}.`,\n            code: 'model_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n    }\n  }\n\n  if (hasRuntimeOverrideAllowlistWrite && !agentId) {\n    return NextResponse.json(\n      {\n        error: 'agentId is required when saving chat override allowlist settings.',\n        code: 'agent_required',\n      },\n      { status: 400 },\n    )\n  }\n\n  if (Array.isArray(allowedOverrideProviders)) {\n    for (const id of allowedOverrideProviders) {\n      if (putEffectiveAllowlist && !isProviderAllowedInEffective(putEffectiveAllowlist, id)) {\n        return NextResponse.json(\n          {\n            error: `Provider \"${id}\" is not in the effective tenant allowlist; per-agent chat override choices may not widen it.`,\n            code: 'provider_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n    }\n  }\n  if (allowedOverrideModelsByProvider) {\n    for (const [id, models] of Object.entries(allowedOverrideModelsByProvider)) {\n      if (putEffectiveAllowlist && !isProviderAllowedInEffective(putEffectiveAllowlist, id)) {\n        return NextResponse.json(\n          {\n            error: `Provider \"${id}\" is not in the effective tenant allowlist; cannot save per-agent model choices for it.`,\n            code: 'provider_not_allowlisted',\n          },\n          { status: 400 },\n        )\n      }\n      for (const allowedModelId of models) {\n        if (\n          putEffectiveAllowlist &&\n          !isProviderModelAllowedInEffective(putEffectiveAllowlist, id, allowedModelId)\n        ) {\n          return NextResponse.json(\n            {\n              error: `Model \"${allowedModelId}\" is not in the effective tenant allowlist for \"${id}\".`,\n              code: 'model_not_allowlisted',\n            },\n            { status: 400 },\n          )\n        }\n      }\n    }\n  }\n\n  try {\n    const container = await createRequestContainer()\n    const rbacService = container.resolve<RbacService>('rbacService')\n    const acl = await rbacService.loadAcl(auth.sub, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n    const canManage = acl.isSuperAdmin || acl.features.includes('ai_assistant.settings.manage')\n    if (!canManage) {\n      return NextResponse.json({ error: 'Forbidden', code: 'forbidden' }, { status: 403 })\n    }\n\n    const em = container.resolve<EntityManager>('em')\n    const repo = new AiAgentRuntimeOverrideRepository(em)\n    const upsertInput = {\n      agentId: agentId ?? null,\n      ...(Object.prototype.hasOwnProperty.call(bodyResult.data, 'providerId')\n        ? { providerId: providerId ?? null }\n        : {}),\n      ...(Object.prototype.hasOwnProperty.call(bodyResult.data, 'modelId')\n        ? { modelId: modelId ?? null }\n        : {}),\n      ...(Object.prototype.hasOwnProperty.call(bodyResult.data, 'baseURL')\n        ? { baseURL: baseURL ?? null }\n        : {}),\n      ...(allowedOverrideProviders !== undefined\n        ? { allowedOverrideProviders }\n        : {}),\n      ...(allowedOverrideModelsByProvider !== undefined\n        ? { allowedOverrideModelsByProvider }\n        : {}),\n    }\n    const row = await repo.upsertDefault(\n      upsertInput,\n      { tenantId: auth.tenantId ?? '', organizationId: auth.orgId ?? null, userId: auth.sub },\n    )\n    return NextResponse.json({\n      id: row.id,\n      tenantId: row.tenantId,\n      organizationId: row.organizationId,\n      agentId: row.agentId,\n      providerId: row.providerId,\n      modelId: row.modelId,\n      baseURL: row.baseUrl,\n      allowedOverrideProviders: row.allowedOverrideProviders ?? null,\n      allowedOverrideModelsByProvider: row.allowedOverrideModelsByProvider ?? {},\n      updatedAt: row.updatedAt,\n    })\n  } catch (error) {\n    if (error instanceof AiAgentRuntimeOverrideValidationError) {\n      return NextResponse.json({ error: error.message, code: 'provider_unknown' }, { status: 400 })\n    }\n    logger.error('AI Settings \u2014 PUT error', { err: error })\n    return NextResponse.json({ error: 'Failed to save runtime override.' }, { status: 500 })\n  }\n}\n\n/**\n * DELETE /api/ai_assistant/settings\n *\n * Soft-deletes the active per-tenant AI runtime override (Phase 4a). Requires\n * `ai_assistant.settings.manage`. Pass `agentId` in the body to clear only\n * the agent-specific row; omit (or null) to clear the tenant-wide default.\n * Idempotent \u2014 returns `{ cleared: false }` when no active row was found.\n */\nexport async function DELETE(req: NextRequest) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let parsedBody: unknown = {}\n  try {\n    parsedBody = await req.json()\n  } catch {\n    // Body is optional for DELETE \u2014 empty body is fine\n  }\n\n  const bodyResult = runtimeOverrideClearSchema.safeParse(parsedBody)\n  if (!bodyResult.success) {\n    return NextResponse.json(\n      { error: 'Invalid request body.', code: 'validation_error', issues: bodyResult.error.issues },\n      { status: 400 },\n    )\n  }\n\n  try {\n    const container = await createRequestContainer()\n    const rbacService = container.resolve<RbacService>('rbacService')\n    const acl = await rbacService.loadAcl(auth.sub, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n    const canManage = acl.isSuperAdmin || acl.features.includes('ai_assistant.settings.manage')\n    if (!canManage) {\n      return NextResponse.json({ error: 'Forbidden', code: 'forbidden' }, { status: 403 })\n    }\n\n    const em = container.resolve<EntityManager>('em')\n    const repo = new AiAgentRuntimeOverrideRepository(em)\n    const cleared = await repo.clearDefault({\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      agentId: bodyResult.data.agentId ?? null,\n    })\n    return NextResponse.json({ cleared })\n  } catch (error) {\n    logger.error('AI Settings \u2014 DELETE error', { err: error })\n    return NextResponse.json({ error: 'Failed to clear runtime override.' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,oBAAsC;AAC/C,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAGvC,SAAS,2BAA2B;AACpC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC,6CAA6C;AACxF,SAAS,wCAAwC;AACjD,SAAS,sBAAsB,4BAA4B;AAC3D,SAAS,mBAAmB,kBAAkB;AAC9C,SAAS,oBAAoB,mCAAmC;AAChE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,OAEK;AAEP,MAAM,SAAS,aAAa,cAAc;AAE1C,SAAS,kCACP,QACA,mBACsG;AACtG,MAAI,OAAO,SAAS,EAAG,QAAO;AAC9B,UAAQ,qBAAqB,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,MAAM,GAAG,EAAE;AACjE;AAEA,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1D,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,0BAA0B,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACjF,iCAAiC,EAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,EACrE,SAAS;AACd,CAAC;AAED,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAC1D,CAAC;AAKM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK,EAAE,SAAS,gCAAgC;AAAA,IAChD,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MAIF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yCAAyC;AAAA,MACvE;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,+EAA+E;AAAA,QAC3G,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,6CAA6C;AAAA,MAC3E;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aACE;AAAA,MAGF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iFAAiF;AAAA,MAC/G;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,6CAA6C;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EACjE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAAA,EAC5E,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AACjF;AASA,eAAsB,IAAI,KAAkB;AAC1C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,MAAM,QAAQ;AACpB,UAAM,yBAAyB,IAAI,gBAAgB,KAAK,KAAK,IAAI,mBAAmB,KAAK,KAAK;AAC9F,UAAM,oBAAoB,oBAAoB,KAAK;AACnD,UAAM,+BAAyC;AAAA,MAC7C,GAAG;AAAA,MACH,GAAG,kBACA,IAAI,CAAC,MAAM,EAAE,EAAE,EACf,OAAO,CAAC,OAAO,CAAE,uBAA6C,SAAS,EAAE,CAAC;AAAA,IAC/E;AACA,UAAM,qBAAqB,yBACvB,oBAAoB,wBAAwB,kBAAkB,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC,IAC5F;AACJ,UAAM,mBAAmB,qBAAqB,oBAAoB,IAAI,kBAAkB,IAAI;AAC5F,UAAM,8BACH,yBACG,oBAAoB,wBAAwB,sBAA2C,IACvF,SAAS;AAEf,UAAM,2BAA2B,oBAAoB,0BAA0B;AAE/E,UAAM,aAAa,kBAAkB,MAAM;AAC3C,UAAM,eAAe,kBAAkB,QAAQ,0BAA0B,QAAQ;AACjF,UAAM,uBAAuB,kBAAkB,gBAAgB,0BAA0B,gBAAgB;AACzG,UAAM,sBAAsB,IAAI,aAAa,KAAK,KAAK,IAAI,gBAAgB,KAAK,KAAK;AACrF,UAAM,4BAA4B,kBAAkB,YAAY,mBAAmB;AACnF,UAAM,mBAAmB,mBACrB,iBAAiB,aAAa,GAAG,IACjC,2BACE,6BAA6B,0BAA0B,IACvD;AACN,UAAM,gBAAgB,mBAClB,iBAAiB,oBAAoB,GAAG,IACxC,2BACE,oCAAoC,0BAA0B,IAC9D;AAGN,UAAM,mBAAmB,CAAC,CAAC,QAAQ,IAAI,oBAAoB,KAAK;AAGhE,QAAI,iBAMO;AAEX,QAAI,mBA0BC,CAAC;AAEN,QAAI,kBAKO;AAEX,QAAI,0BAA0D;AAE9D,QAAI;AACF,YAAM,YAAY,MAAM,uBAAuB;AAC/C,YAAM,WAAW,KAAK,YAAY;AAClC,YAAM,iBAAiB,KAAK,SAAS;AAErC,UAAI,UAAU;AACZ,cAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,cAAM,OAAO,IAAI,iCAAiC,EAAE;AACpD,cAAM,cAAc,MAAM,KAAK,WAAW,EAAE,UAAU,gBAAgB,SAAS,KAAK,CAAC;AACrF,YAAI,aAAa;AACf,2BAAiB;AAAA,YACf,YAAY,YAAY,cAAc;AAAA,YACtC,SAAS,YAAY,WAAW;AAAA,YAChC,SAAS,YAAY,WAAW;AAAA,YAChC,SAAS,YAAY,WAAW;AAAA,YAChC,WAAW,YAAY,UAAU,YAAY;AAAA,UAC/C;AAAA,QACF;AAEA,cAAM,gBAAgB,IAAI,iCAAiC,EAAE;AAC7D,kCAA0B,MAAM,cAAc,YAAY;AAAA,UACxD;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,UAAU,mBAAmB,SAAS;AAC5C,cAAM,oBAAoB,QAAQ,aAAa;AAAA,UAC7C,iBAAiB;AAAA,UACjB,gBAAgB,iBACZ,EAAE,YAAY,eAAe,YAAY,SAAS,eAAe,SAAS,SAAS,eAAe,QAAQ,IAC1G;AAAA,QACN,CAAC;AACD,0BAAkB;AAAA,UAChB,YAAY,kBAAkB;AAAA,UAC9B,SAAS,kBAAkB;AAAA,UAC3B,SAAS,kBAAkB,WAAW;AAAA,UACtC,QAAQ,kBAAkB;AAAA,QAC5B;AAEA,cAAM,kBAAkB;AACxB,cAAM,SAAS,WAAW;AAC1B,cAAM,0BAA0B,OAAO,IAAI,OAAO,UAAU;AAC1D,gBAAM,mBAAmB,MAAM,KAAK,SAAS;AAAA,YAC3C;AAAA,YACA;AAAA,YACA,SAAS,MAAM;AAAA,UACjB,CAAC;AACD,gBAAM,sBAAsB,mBACxB;AAAA,YACE,YAAY,iBAAiB,cAAc;AAAA,YAC3C,SAAS,iBAAiB,WAAW;AAAA,YACrC,SAAS,iBAAiB,WAAW;AAAA,UACvC,IACC,kBAAkB;AACvB,gBAAM,kBAAkB,QAAQ,aAAa;AAAA,YAC3C,UAAU,MAAM;AAAA,YAChB,mBAAmB,MAAM;AAAA,YACzB,sBAAsB,MAAM;AAAA,YAC5B,qBAAqB,MAAM;AAAA,YAC3B,sBAAsB,4BAA4B,KAAK;AAAA,YACvD,gBAAgB;AAAA,YAChB,iBAAiB;AAAA,UACnB,CAAC;AACD,gBAAM,oBAAoB;AAAA,YACxB;AAAA,YACA,MAAM;AAAA,YACN;AAAA,UACF;AACA,gBAAM,uBAAuB,mBACzB;AAAA,YACE,kBAAkB,iBAAiB,4BAA4B;AAAA,YAC/D,yBAAyB,iBAAiB,mCAAmC,CAAC;AAAA,UAChF,IACA;AACJ,gBAAM,yBAAyB;AAAA,YAC7B;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,gBAAM,0BAA0B;AAAA,YAC9B;AAAA,cACE;AAAA,cACA;AAAA,cACA;AAAA,YACF;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,gBAAM,oBAAoB,OAAO;AAAA,YAC/B,6BAA6B,IAAI,CAACA,gBAAe;AAAA,cAC/CA;AAAA,cACA,sCAAsC,MAAM,IAAIA,WAAU;AAAA,YAC5D,CAAC;AAAA,UACH;AACA,iBAAO;AAAA,YACL,SAAS,MAAM;AAAA,YACf,UAAU,MAAM;AAAA,YAChB,sBAAsB,4BAA4B,KAAK;AAAA,YACvD,2BAA2B,4BAA4B,KAAK;AAAA,YAC5D,uBAAuB,MAAM,mBAAmB;AAAA,YAChD,oBAAoB,MAAM,gBAAgB;AAAA,YAC1C,UAAU,mBACN;AAAA,cACE,YAAY,iBAAiB,cAAc;AAAA,cAC3C,SAAS,iBAAiB,WAAW;AAAA,cACrC,SAAS,iBAAiB,WAAW;AAAA,cACrC,WAAW,iBAAiB,UAAU,YAAY;AAAA,YACpD,IACA;AAAA,YACJ,0BAA0B;AAAA,cACxB,KAAK;AAAA,cACL,QAAQ,iCAAiC,oBAAoB,IACzD,uBACA;AAAA,cACJ,WAAW;AAAA,cACX,aAAa;AAAA,gBACX,WAAW,yCAAyC,MAAM,EAAE;AAAA,gBAC5D,kBAAkB;AAAA,cACpB;AAAA,YACF;AAAA,YACA,YAAY,gBAAgB;AAAA,YAC5B,SAAS,gBAAgB;AAAA,YACzB,SAAS,gBAAgB,WAAW;AAAA,YACpC,QAAQ,gBAAgB;AAAA,UAC1B;AAAA,QACF,CAAC;AACD,2BAAmB,MAAM,QAAQ,IAAI,uBAAuB;AAAA,MAC9D;AAAA,IACF,SAAS,eAAe;AAEtB,aAAO,KAAK,iEAA4D,EAAE,KAAK,cAAc,CAAC;AAAA,IAChG;AAOA,UAAM,kBAAkB,oBAAoB,KAAK,4BAA4B;AAC7E,UAAM,qBAAqB;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,kBAAkB;AAAA,MACtB,GAAG,uBAAuB,IAAI,CAAC,OAAO;AACpC,cAAM,OAAO,oBAAoB,EAAE;AACnC,cAAMC,oBAAmB,oBAAoB,IAAI,EAAE;AACnD,eAAO;AAAA,UACL;AAAA,UACA,MAAM,KAAK;AAAA,UACX,cAAc,KAAK;AAAA,UACnB,QAAQ,oCAAoC,EAAE;AAAA,UAC9C,YAAY,6BAA6B,EAAE;AAAA,UAC3C,eAAeA,mBAAkB,iBAAiB,CAAC;AAAA,QACrD;AAAA,MACF,CAAC;AAAA;AAAA,MAED,GAAG,oBAAoB,KAAK,EACzB,OAAO,CAAC,MAAM,CAAE,uBAA6C,SAAS,EAAE,EAAE,CAAC,EAC3E,IAAI,CAAC,OAAO;AAAA,QACX,IAAI,EAAE;AAAA,QACN,MAAM,EAAE;AAAA,QACR,cAAc,EAAE,cAAc,CAAC,GAAG,MAAM;AAAA,QACxC,QAAQ;AAAA,QACR,YAAY,EAAE,aAAa;AAAA,QAC3B,eAAe,EAAE;AAAA,MACnB,EAAE;AAAA,IACN;AAEA,UAAM,qBAAqB,gBACxB,OAAO,CAAC,MAAM,6BAA6B,oBAAoB,EAAE,EAAE,CAAC,EACpE,IAAI,CAAC,MAAM;AACV,YAAM,sBAAsB,mBAAmB,iBAAiB,EAAE,EAAE;AACpE,YAAM,gBAAgB;AAAA,QACpB,EAAE;AAAA,QACF;AAAA,MACF;AACA,YAAM,kBAAkB,wBAAwB,SAC5C,cAAc,OAAO,CAAC,MAAM,oBAAoB,SAAS,EAAE,EAAE,CAAC,IAC9D;AACJ,aAAO;AAAA,QACL,GAAG;AAAA,QACH,cAAc,uBAAuB,CAAC,oBAAoB,SAAS,EAAE,YAAY,IAC5E,oBAAoB,CAAC,KAAK,EAAE,eAC7B,EAAE,gBAAgB,gBAAgB,CAAC,GAAG,MAAM;AAAA,QAChD,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAEH,UAAM,qBAAqB,gBACxB,OAAO,CAAC,MAAM,kBAAkB,KAAK,EAAE,EAAE,CAAC,EAC1C,IAAI,CAAC,MAAM;AACV,YAAM,gBAAgB,gBAAgB,iBAAiB,EAAE,EAAE;AAC3D,YAAM,gBAAgB;AAAA,QACpB,EAAE;AAAA,QACF;AAAA,MACF;AACA,YAAM,qBAAqB,kBAAkB,SACzC,cAAc,OAAO,CAAC,MAAM,cAAc,SAAS,EAAE,EAAE,CAAC,IACxD;AACJ,aAAO;AAAA,QACL,GAAG;AAAA,QACH,cAAc,iBAAiB,CAAC,cAAc,SAAS,EAAE,YAAY,IAChE,cAAc,CAAC,KAAK,EAAE,eACvB,EAAE,gBAAgB,mBAAmB,CAAC,GAAG,MAAM;AAAA,QACnD,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAEH,WAAO,aAAa,KAAK;AAAA,MACvB,UAAU;AAAA,QACR,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,OAAO,kBACH,kBAAkB,gBAAgB,YAAY,gBAAgB,OAAO,IACrE;AAAA,QACJ,cAAc;AAAA,QACd,QAAQ;AAAA,QACR,YAAY;AAAA,MACd;AAAA,MACA;AAAA;AAAA;AAAA,MAGA;AAAA;AAAA;AAAA,MAGA,WAAW;AAAA;AAAA;AAAA;AAAA,MAIX,iBAAiB;AAAA;AAAA;AAAA;AAAA,MAIjB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,IACV,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,gCAA2B,EAAE,KAAK,MAAM,CAAC;AACtD,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;AASA,eAAsB,IAAI,KAAkB;AAC1C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,MAAM,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnH;AAEA,QAAM,aAAa,4BAA4B,UAAU,UAAU;AACnE,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB,MAAM,oBAAoB,QAAQ,WAAW,MAAM,OAAO;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,EAAE,YAAY,qBAAqB,SAAS,SAAS,QAAQ,IAAI,WAAW;AAClF,QAAM,6BAA6B,oBAAoB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;AAC7E,QAAM,aAAa,sBACf,oBAAoB,qBAAqB,0BAA0B,KAAK,sBACxE;AAEJ,MAAI,WAAW,QAAQ,KAAK,EAAE,SAAS,GAAG;AACxC,UAAM,YAAY,qBAAqB;AACvC,QAAI,CAAC,qBAAqB,QAAQ,KAAK,GAAG,SAAS,GAAG;AACpD,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,YAAY,OAAO;AAAA,UAC1B,MAAM;AAAA,QACR;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,2BAA2B,WAAW,KAAK,6BAA6B,SAC1E,SACA,WAAW,KAAK,0BAA0B;AAAA,IAAI,CAAC,OAC7C,oBAAoB,IAAI,0BAA0B,KAAK;AAAA,EACzD,KAAK;AACT,QAAM,kCAAkC,WAAW,KAAK,oCAAoC,SACxF,SACA,OAAO;AAAA,IACL,OAAO,QAAQ,WAAW,KAAK,mCAAmC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,MAAM,MAAM;AAAA,MAC1F,oBAAoB,IAAI,0BAA0B,KAAK;AAAA,MACvD;AAAA,IACF,CAAC;AAAA,EACH;AACJ,QAAM,mCACJ,6BAA6B,UAAa,oCAAoC;AAShF,MAAI,wBAAuE;AAC3E,MAAI,cAAc,kCAAkC;AAClD,QAAI;AACF,YAAM,mBAAmB,MAAM,uBAAuB;AACtD,YAAM,mBAAmB;AAAA,QACvB,GAAG;AAAA,QACH,GAAG,oBACA,KAAK,EACL,IAAI,CAAC,MAAM,EAAE,EAAE,EACf,OAAO,CAAC,OAAO,CAAE,uBAA6C,SAAS,EAAE,CAAC;AAAA,MAC/E;AACA,UAAI,WAA2C;AAC/C,UAAI,KAAK,UAAU;AACjB,YAAI;AACF,gBAAM,KAAK,iBAAiB,QAAuB,IAAI;AACvD,gBAAM,gBAAgB,IAAI,iCAAiC,EAAE;AAC7D,qBAAW,MAAM,cAAc,YAAY;AAAA,YACzC,UAAU,KAAK;AAAA,YACf,gBAAgB,KAAK,SAAS;AAAA,UAChC,CAAC;AAAA,QACH,QAAQ;AACN,qBAAW;AAAA,QACb;AAAA,MACF;AACA,8BAAwB;AAAA,QACtB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACF,QAAQ;AACN,8BAAwB;AAAA,IAC1B;AAEA,QAAI,cAAc,uBAAuB;AACvC,UAAI,CAAC,6BAA6B,uBAAuB,UAAU,GAAG;AACpE,cAAM,SAAS,sBAAsB,wBACjC,gDACA;AACJ,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,aAAa,UAAU,eAAe,MAAM;AAAA,YACnD,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,WAAW,CAAC,kCAAkC,uBAAuB,YAAY,OAAO,GAAG;AAC7F,cAAM,SAAS,sBAAsB,wBACjC,oDAA+C,UAAU,MACzD,yBAAyB,UAAU;AACvC,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,UAAU,OAAO,eAAe,MAAM;AAAA,YAC7C,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF,WAAW,YAAY;AACrB,UAAI,CAAC,kBAAkB,QAAQ,KAAK,UAAU,GAAG;AAC/C,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,aAAa,mBAAmB;AAAA,YACvC,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,WAAW,CAAC,uBAAuB,QAAQ,KAAK,YAAY,OAAO,GAAG;AACxE,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,UAAU,OAAO,eAAe,yBAAyB,UAAU,CAAC;AAAA,YAC3E,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,oCAAoC,CAAC,SAAS;AAChD,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ,wBAAwB,GAAG;AAC3C,eAAW,MAAM,0BAA0B;AACzC,UAAI,yBAAyB,CAAC,6BAA6B,uBAAuB,EAAE,GAAG;AACrF,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,aAAa,EAAE;AAAA,YACtB,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,iCAAiC;AACnC,eAAW,CAAC,IAAI,MAAM,KAAK,OAAO,QAAQ,+BAA+B,GAAG;AAC1E,UAAI,yBAAyB,CAAC,6BAA6B,uBAAuB,EAAE,GAAG;AACrF,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,aAAa,EAAE;AAAA,YACtB,MAAM;AAAA,UACR;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,iBAAW,kBAAkB,QAAQ;AACnC,YACE,yBACA,CAAC,kCAAkC,uBAAuB,IAAI,cAAc,GAC5E;AACA,iBAAO,aAAa;AAAA,YAClB;AAAA,cACE,OAAO,UAAU,cAAc,mDAAmD,EAAE;AAAA,cACpF,MAAM;AAAA,YACR;AAAA,YACA,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,cAAc,UAAU,QAAqB,aAAa;AAChE,UAAM,MAAM,MAAM,YAAY,QAAQ,KAAK,KAAK;AAAA,MAC9C,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,UAAM,YAAY,IAAI,gBAAgB,IAAI,SAAS,SAAS,8BAA8B;AAC1F,QAAI,CAAC,WAAW;AACd,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,MAAM,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,UAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,UAAM,OAAO,IAAI,iCAAiC,EAAE;AACpD,UAAM,cAAc;AAAA,MAClB,SAAS,WAAW;AAAA,MACpB,GAAI,OAAO,UAAU,eAAe,KAAK,WAAW,MAAM,YAAY,IAClE,EAAE,YAAY,cAAc,KAAK,IACjC,CAAC;AAAA,MACL,GAAI,OAAO,UAAU,eAAe,KAAK,WAAW,MAAM,SAAS,IAC/D,EAAE,SAAS,WAAW,KAAK,IAC3B,CAAC;AAAA,MACL,GAAI,OAAO,UAAU,eAAe,KAAK,WAAW,MAAM,SAAS,IAC/D,EAAE,SAAS,WAAW,KAAK,IAC3B,CAAC;AAAA,MACL,GAAI,6BAA6B,SAC7B,EAAE,yBAAyB,IAC3B,CAAC;AAAA,MACL,GAAI,oCAAoC,SACpC,EAAE,gCAAgC,IAClC,CAAC;AAAA,IACP;AACA,UAAM,MAAM,MAAM,KAAK;AAAA,MACrB;AAAA,MACA,EAAE,UAAU,KAAK,YAAY,IAAI,gBAAgB,KAAK,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,IACxF;AACA,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI,IAAI;AAAA,MACR,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,SAAS,IAAI;AAAA,MACb,YAAY,IAAI;AAAA,MAChB,SAAS,IAAI;AAAA,MACb,SAAS,IAAI;AAAA,MACb,0BAA0B,IAAI,4BAA4B;AAAA,MAC1D,iCAAiC,IAAI,mCAAmC,CAAC;AAAA,MACzE,WAAW,IAAI;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,iBAAiB,uCAAuC;AAC1D,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,SAAS,MAAM,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AACA,WAAO,MAAM,gCAA2B,EAAE,KAAK,MAAM,CAAC;AACtD,WAAO,aAAa,KAAK,EAAE,OAAO,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzF;AACF;AAUA,eAAsB,OAAO,KAAkB;AAC7C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI,aAAsB,CAAC;AAC3B,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AAAA,EAER;AAEA,QAAM,aAAa,2BAA2B,UAAU,UAAU;AAClE,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB,MAAM,oBAAoB,QAAQ,WAAW,MAAM,OAAO;AAAA,MAC5F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,cAAc,UAAU,QAAqB,aAAa;AAChE,UAAM,MAAM,MAAM,YAAY,QAAQ,KAAK,KAAK;AAAA,MAC9C,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,UAAM,YAAY,IAAI,gBAAgB,IAAI,SAAS,SAAS,8BAA8B;AAC1F,QAAI,CAAC,WAAW;AACd,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,MAAM,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,UAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,UAAM,OAAO,IAAI,iCAAiC,EAAE;AACpD,UAAM,UAAU,MAAM,KAAK,aAAa;AAAA,MACtC,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,SAAS,WAAW,KAAK,WAAW;AAAA,IACtC,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,QAAQ,CAAC;AAAA,EACtC,SAAS,OAAO;AACd,WAAO,MAAM,mCAA8B,EAAE,KAAK,MAAM,CAAC;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACF;",
   "names": ["providerId", "registryProvider"]
 }

package/dist/modules/ai_assistant/lib/llm-adapters/openai.js

@@ -35,6 +35,7 @@ function createOpenAICompatibleProvider(preset) {
     envKeys: preset.envKeys,
     defaultModel: preset.defaultModel,
     defaultModels: preset.defaultModels,
+    usesVendorPrefixedModelIds: preset.usesVendorPrefixedModelIds ?? false,
     isConfigured(env) {
       return resolveApiKey(env) !== null;
     },

package/dist/modules/ai_assistant/lib/llm-adapters/openai.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/ai_assistant/lib/llm-adapters/openai.ts"],
-  "sourcesContent": ["/**\n * OpenAIAdapter \u2014 implements the LlmProvider port for the OpenAI\n * chat-completions protocol.\n *\n * This single adapter serves OpenAI itself and every OpenAI-compatible\n * backend (DeepInfra, Groq, Together, Fireworks, Azure OpenAI, LiteLLM,\n * Ollama, LocalAI, vLLM, \u2026). Vendor-specific configuration \u2014 endpoint\n * URL, available models, env var conventions \u2014 lives in\n * `./openai-compatible-presets.ts` as plain data, not code.\n *\n * The factory {@link createOpenAICompatibleProvider} takes a preset and\n * returns a fully-configured `LlmProvider` that internally calls\n * `createOpenAI({ apiKey, baseURL })` from `@ai-sdk/openai`.\n *\n * @see packages/shared/src/lib/ai/llm-provider.ts\n * @see ./openai-compatible-presets.ts\n * @see .ai/specs/implemented/2026-04-14-llm-provider-ports-and-adapters.md\n */\n\nimport { createOpenAI } from '@ai-sdk/openai'\nimport type {\n  EnvLookup,\n  LlmCreateModelOptions,\n  LlmModelInfo,\n  LlmProvider,\n} from '@open-mercato/shared/lib/ai/llm-provider'\n\n/**\n * Configuration for a single OpenAI-compatible provider instance.\n *\n * Built-in presets live in {@link ./openai-compatible-presets.ts}.\n * Downstream applications may construct custom presets at bootstrap time\n * and register them with `llmProviderRegistry.register(\n *   createOpenAICompatibleProvider(customPreset),\n * )`.\n */\nexport interface OpenAICompatiblePreset {\n  /** Stable id (e.g. `openai`, `deepinfra`, `groq`, `together`). */\n  id: string\n  /** Human-readable display name. */\n  name: string\n  /**\n   * Upstream base URL. Leave `undefined` to use the AI SDK default\n   * (`https://api.openai.com/v1`). Required for DeepInfra, Groq, etc.\n   */\n  baseURL?: string\n  /**\n   * Env var names where the adapter looks for the API key, in priority\n   * order. Each preset declares its own keys so unrelated presets never\n   * accidentally share credentials (e.g. DeepInfra uses\n   * `DEEPINFRA_API_KEY`, not `OPENAI_API_KEY`).\n   */\n  envKeys: readonly string[]\n  /** Default model id used when the caller does not specify one. */\n  defaultModel: string\n  /** Curated model catalog shown in the UI dropdown. */\n  defaultModels: readonly LlmModelInfo[]\n  /**\n   * Optional env var names for overriding the base URL at runtime.\n   * Primarily used by presets that rely on a user-supplied URL\n   * (Azure deployment, self-hosted LiteLLM, Ollama on a custom port).\n   * The first non-empty value wins and overrides {@link baseURL}.\n   */\n  baseURLEnvKeys?: readonly string[]\n}\n\nfunction readFirstNonEmpty(\n  env: EnvLookup,\n  keys: readonly string[],\n): string | null {\n  for (const key of keys) {\n    const value = env[key]\n    if (typeof value === 'string') {\n      const trimmed = value.trim()\n      if (trimmed.length > 0) return trimmed\n    }\n  }\n  return null\n}\n\n/**\n * Builds a `LlmProvider` instance bound to a specific OpenAI-compatible\n * preset. The returned object is stateless and can be registered directly\n * with `llmProviderRegistry.register(...)`.\n */\nexport function createOpenAICompatibleProvider(\n  preset: OpenAICompatiblePreset,\n): LlmProvider {\n  if (!preset.id || preset.id.length === 0) {\n    throw new Error('[OpenAIAdapter] Preset must have a non-empty id')\n  }\n  if (!preset.envKeys || preset.envKeys.length === 0) {\n    throw new Error(\n      `[OpenAIAdapter] Preset \"${preset.id}\" must declare at least one env key`,\n    )\n  }\n\n  function resolveApiKey(env?: EnvLookup): string | null {\n    return readFirstNonEmpty(env ?? process.env, preset.envKeys)\n  }\n\n  function resolveBaseURL(env?: EnvLookup): string | undefined {\n    const lookup = env ?? process.env\n    if (preset.baseURLEnvKeys && preset.baseURLEnvKeys.length > 0) {\n      const override = readFirstNonEmpty(lookup, preset.baseURLEnvKeys)\n      if (override) return override\n    }\n    return preset.baseURL\n  }\n\n  return {\n    id: preset.id,\n    name: preset.name,\n    envKeys: preset.envKeys,\n    defaultModel: preset.defaultModel,\n    defaultModels: preset.defaultModels,\n\n    isConfigured(env?: EnvLookup): boolean {\n      return resolveApiKey(env) !== null\n    },\n\n    resolveApiKey,\n\n    getConfiguredEnvKey(env?: EnvLookup): string {\n      const lookup = env ?? process.env\n      for (const key of preset.envKeys) {\n        const value = lookup[key]\n        if (typeof value === 'string' && value.trim().length > 0) {\n          return key\n        }\n      }\n      return preset.envKeys[0]\n    },\n\n    createModel(options: LlmCreateModelOptions): unknown {\n      // Per-request baseURL override wins over preset/env defaults.\n      const baseURL = options.baseURL ?? resolveBaseURL()\n      const openai = createOpenAI({\n        apiKey: options.apiKey,\n        ...(baseURL ? { baseURL } : {}),\n      })\n      return openai(options.modelId)\n    },\n  }\n}\n"],
-  "mappings": "AAmBA,SAAS,oBAAoB;AA+C7B,SAAS,kBACP,KACA,MACe;AACf,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,IAAI,GAAG;AACrB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,UAAU,MAAM,KAAK;AAC3B,UAAI,QAAQ,SAAS,EAAG,QAAO;AAAA,IACjC;AAAA,EACF;AACA,SAAO;AACT;AAOO,SAAS,+BACd,QACa;AACb,MAAI,CAAC,OAAO,MAAM,OAAO,GAAG,WAAW,GAAG;AACxC,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,MAAI,CAAC,OAAO,WAAW,OAAO,QAAQ,WAAW,GAAG;AAClD,UAAM,IAAI;AAAA,MACR,2BAA2B,OAAO,EAAE;AAAA,IACtC;AAAA,EACF;AAEA,WAAS,cAAc,KAAgC;AACrD,WAAO,kBAAkB,OAAO,QAAQ,KAAK,OAAO,OAAO;AAAA,EAC7D;AAEA,WAAS,eAAe,KAAqC;AAC3D,UAAM,SAAS,OAAO,QAAQ;AAC9B,QAAI,OAAO,kBAAkB,OAAO,eAAe,SAAS,GAAG;AAC7D,YAAM,WAAW,kBAAkB,QAAQ,OAAO,cAAc;AAChE,UAAI,SAAU,QAAO;AAAA,IACvB;AACA,WAAO,OAAO;AAAA,EAChB;AAEA,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,cAAc,OAAO;AAAA,IACrB,eAAe,OAAO;AAAA,IAEtB,aAAa,KAA0B;AACrC,aAAO,cAAc,GAAG,MAAM;AAAA,IAChC;AAAA,IAEA;AAAA,IAEA,oBAAoB,KAAyB;AAC3C,YAAM,SAAS,OAAO,QAAQ;AAC9B,iBAAW,OAAO,OAAO,SAAS;AAChC,cAAM,QAAQ,OAAO,GAAG;AACxB,YAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,iBAAO;AAAA,QACT;AAAA,MACF;AACA,aAAO,OAAO,QAAQ,CAAC;AAAA,IACzB;AAAA,IAEA,YAAY,SAAyC;AAEnD,YAAM,UAAU,QAAQ,WAAW,eAAe;AAClD,YAAM,SAAS,aAAa;AAAA,QAC1B,QAAQ,QAAQ;AAAA,QAChB,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC/B,CAAC;AACD,aAAO,OAAO,QAAQ,OAAO;AAAA,IAC/B;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * OpenAIAdapter \u2014 implements the LlmProvider port for the OpenAI\n * chat-completions protocol.\n *\n * This single adapter serves OpenAI itself and every OpenAI-compatible\n * backend (DeepInfra, Groq, Together, Fireworks, Azure OpenAI, LiteLLM,\n * Ollama, LocalAI, vLLM, \u2026). Vendor-specific configuration \u2014 endpoint\n * URL, available models, env var conventions \u2014 lives in\n * `./openai-compatible-presets.ts` as plain data, not code.\n *\n * The factory {@link createOpenAICompatibleProvider} takes a preset and\n * returns a fully-configured `LlmProvider` that internally calls\n * `createOpenAI({ apiKey, baseURL })` from `@ai-sdk/openai`.\n *\n * @see packages/shared/src/lib/ai/llm-provider.ts\n * @see ./openai-compatible-presets.ts\n * @see .ai/specs/implemented/2026-04-14-llm-provider-ports-and-adapters.md\n */\n\nimport { createOpenAI } from '@ai-sdk/openai'\nimport type {\n  EnvLookup,\n  LlmCreateModelOptions,\n  LlmModelInfo,\n  LlmProvider,\n} from '@open-mercato/shared/lib/ai/llm-provider'\n\n/**\n * Configuration for a single OpenAI-compatible provider instance.\n *\n * Built-in presets live in {@link ./openai-compatible-presets.ts}.\n * Downstream applications may construct custom presets at bootstrap time\n * and register them with `llmProviderRegistry.register(\n *   createOpenAICompatibleProvider(customPreset),\n * )`.\n */\nexport interface OpenAICompatiblePreset {\n  /** Stable id (e.g. `openai`, `deepinfra`, `groq`, `together`). */\n  id: string\n  /** Human-readable display name. */\n  name: string\n  /**\n   * Upstream base URL. Leave `undefined` to use the AI SDK default\n   * (`https://api.openai.com/v1`). Required for DeepInfra, Groq, etc.\n   */\n  baseURL?: string\n  /**\n   * Env var names where the adapter looks for the API key, in priority\n   * order. Each preset declares its own keys so unrelated presets never\n   * accidentally share credentials (e.g. DeepInfra uses\n   * `DEEPINFRA_API_KEY`, not `OPENAI_API_KEY`).\n   */\n  envKeys: readonly string[]\n  /** Default model id used when the caller does not specify one. */\n  defaultModel: string\n  /** Curated model catalog shown in the UI dropdown. */\n  defaultModels: readonly LlmModelInfo[]\n  /**\n   * Optional env var names for overriding the base URL at runtime.\n   * Primarily used by presets that rely on a user-supplied URL\n   * (Azure deployment, self-hosted LiteLLM, Ollama on a custom port).\n   * The first non-empty value wins and overrides {@link baseURL}.\n   */\n  baseURLEnvKeys?: readonly string[]\n  /**\n   * True when this gateway's model ids are `vendor/model` strings (OpenRouter,\n   * Requesty, LiteLLM). Surfaced on the resolved `LlmProvider` so the model\n   * factory suppresses intra-tier slash provider-splitting for a configured\n   * selection of this provider. Omit for non-gateway backends (openai,\n   * deepinfra, groq, \u2026).\n   */\n  usesVendorPrefixedModelIds?: boolean\n}\n\nfunction readFirstNonEmpty(\n  env: EnvLookup,\n  keys: readonly string[],\n): string | null {\n  for (const key of keys) {\n    const value = env[key]\n    if (typeof value === 'string') {\n      const trimmed = value.trim()\n      if (trimmed.length > 0) return trimmed\n    }\n  }\n  return null\n}\n\n/**\n * Builds a `LlmProvider` instance bound to a specific OpenAI-compatible\n * preset. The returned object is stateless and can be registered directly\n * with `llmProviderRegistry.register(...)`.\n */\nexport function createOpenAICompatibleProvider(\n  preset: OpenAICompatiblePreset,\n): LlmProvider {\n  if (!preset.id || preset.id.length === 0) {\n    throw new Error('[OpenAIAdapter] Preset must have a non-empty id')\n  }\n  if (!preset.envKeys || preset.envKeys.length === 0) {\n    throw new Error(\n      `[OpenAIAdapter] Preset \"${preset.id}\" must declare at least one env key`,\n    )\n  }\n\n  function resolveApiKey(env?: EnvLookup): string | null {\n    return readFirstNonEmpty(env ?? process.env, preset.envKeys)\n  }\n\n  function resolveBaseURL(env?: EnvLookup): string | undefined {\n    const lookup = env ?? process.env\n    if (preset.baseURLEnvKeys && preset.baseURLEnvKeys.length > 0) {\n      const override = readFirstNonEmpty(lookup, preset.baseURLEnvKeys)\n      if (override) return override\n    }\n    return preset.baseURL\n  }\n\n  return {\n    id: preset.id,\n    name: preset.name,\n    envKeys: preset.envKeys,\n    defaultModel: preset.defaultModel,\n    defaultModels: preset.defaultModels,\n    usesVendorPrefixedModelIds: preset.usesVendorPrefixedModelIds ?? false,\n\n    isConfigured(env?: EnvLookup): boolean {\n      return resolveApiKey(env) !== null\n    },\n\n    resolveApiKey,\n\n    getConfiguredEnvKey(env?: EnvLookup): string {\n      const lookup = env ?? process.env\n      for (const key of preset.envKeys) {\n        const value = lookup[key]\n        if (typeof value === 'string' && value.trim().length > 0) {\n          return key\n        }\n      }\n      return preset.envKeys[0]\n    },\n\n    createModel(options: LlmCreateModelOptions): unknown {\n      // Per-request baseURL override wins over preset/env defaults.\n      const baseURL = options.baseURL ?? resolveBaseURL()\n      const openai = createOpenAI({\n        apiKey: options.apiKey,\n        ...(baseURL ? { baseURL } : {}),\n      })\n      return openai(options.modelId)\n    },\n  }\n}\n"],
+  "mappings": "AAmBA,SAAS,oBAAoB;AAuD7B,SAAS,kBACP,KACA,MACe;AACf,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,IAAI,GAAG;AACrB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,UAAU,MAAM,KAAK;AAC3B,UAAI,QAAQ,SAAS,EAAG,QAAO;AAAA,IACjC;AAAA,EACF;AACA,SAAO;AACT;AAOO,SAAS,+BACd,QACa;AACb,MAAI,CAAC,OAAO,MAAM,OAAO,GAAG,WAAW,GAAG;AACxC,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,MAAI,CAAC,OAAO,WAAW,OAAO,QAAQ,WAAW,GAAG;AAClD,UAAM,IAAI;AAAA,MACR,2BAA2B,OAAO,EAAE;AAAA,IACtC;AAAA,EACF;AAEA,WAAS,cAAc,KAAgC;AACrD,WAAO,kBAAkB,OAAO,QAAQ,KAAK,OAAO,OAAO;AAAA,EAC7D;AAEA,WAAS,eAAe,KAAqC;AAC3D,UAAM,SAAS,OAAO,QAAQ;AAC9B,QAAI,OAAO,kBAAkB,OAAO,eAAe,SAAS,GAAG;AAC7D,YAAM,WAAW,kBAAkB,QAAQ,OAAO,cAAc;AAChE,UAAI,SAAU,QAAO;AAAA,IACvB;AACA,WAAO,OAAO;AAAA,EAChB;AAEA,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,cAAc,OAAO;AAAA,IACrB,eAAe,OAAO;AAAA,IACtB,4BAA4B,OAAO,8BAA8B;AAAA,IAEjE,aAAa,KAA0B;AACrC,aAAO,cAAc,GAAG,MAAM;AAAA,IAChC;AAAA,IAEA;AAAA,IAEA,oBAAoB,KAAyB;AAC3C,YAAM,SAAS,OAAO,QAAQ;AAC9B,iBAAW,OAAO,OAAO,SAAS;AAChC,cAAM,QAAQ,OAAO,GAAG;AACxB,YAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,iBAAO;AAAA,QACT;AAAA,MACF;AACA,aAAO,OAAO,QAAQ,CAAC;AAAA,IACzB;AAAA,IAEA,YAAY,SAAyC;AAEnD,YAAM,UAAU,QAAQ,WAAW,eAAe;AAClD,YAAM,SAAS,aAAa;AAAA,QAC1B,QAAQ,QAAQ;AAAA,QAChB,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC/B,CAAC;AACD,aAAO,OAAO,QAAQ,OAAO;AAAA,IAC/B;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/ai_assistant/lib/mcp-dev-key-resolution.js

@@ -26,41 +26,54 @@ function checkMcpConfigPermissions(configPath, fileStat, currentUid, warn) {
     };
   }
   if ((fileStat.mode & 63) !== 0) {
-    warn(
-      `${configPath} is accessible to group/other (mode ${(fileStat.mode & 511).toString(8)}); it contains a live API key \u2014 restrict it with: chmod 600 ${configPath}`
-    );
+    const reason = `${configPath} is accessible to group/other (mode ${(fileStat.mode & 511).toString(8)}); it contains a live API key \u2014 restrict it with: chmod 600 ${configPath}`;
+    warn(reason);
+    return { ok: false, reason };
   }
   return { ok: true };
 }
+function isSameFile(openedFile, pathEntry) {
+  return openedFile.dev === pathEntry.dev && openedFile.ino === pathEntry.ino;
+}
 async function getApiKeyFromMcpJson() {
   const envKey = process.env.OPEN_MERCATO_API_KEY;
   if (envKey && envKey.trim().length > 0) {
     return envKey.trim();
   }
-  const { readFile, stat } = await import("node:fs/promises");
-  const { existsSync } = await import("node:fs");
+  const { lstat, open } = await import("node:fs/promises");
+  const { constants, existsSync } = await import("node:fs");
   try {
     const projectRoot = findProjectRoot(process.cwd(), existsSync);
     const mcpJsonPath = resolve(projectRoot, MCP_CONFIG_FILENAME);
-    if (!existsSync(mcpJsonPath)) {
-      return void 0;
+    let openFlags = constants.O_RDONLY;
+    if (process.platform !== "win32") {
+      openFlags |= constants.O_NOFOLLOW | constants.O_NONBLOCK;
     }
-    const fileStat = await stat(mcpJsonPath);
-    const currentUid = typeof process.getuid === "function" ? process.getuid() : null;
-    const permissionCheck = checkMcpConfigPermissions(
-      mcpJsonPath,
-      { uid: fileStat.uid, mode: fileStat.mode },
-      currentUid,
-      (message) => log(`Warning: ${message}`)
-    );
-    if (!permissionCheck.ok) {
-      log(`Error: ${permissionCheck.reason}`);
-      return void 0;
+    const fileHandle = await open(mcpJsonPath, openFlags);
+    try {
+      const [fileStat, pathStat] = await Promise.all([fileHandle.stat(), lstat(mcpJsonPath)]);
+      if (!fileStat.isFile() || pathStat.isSymbolicLink() || !pathStat.isFile() || !isSameFile(fileStat, pathStat)) {
+        log(`Error: refusing to read ${mcpJsonPath}: it is not the opened regular file`);
+        return void 0;
+      }
+      const currentUid = typeof process.getuid === "function" ? process.getuid() : null;
+      const permissionCheck = checkMcpConfigPermissions(
+        mcpJsonPath,
+        { uid: fileStat.uid, mode: fileStat.mode },
+        currentUid,
+        (message) => log(`Warning: ${message}`)
+      );
+      if (!permissionCheck.ok) {
+        log(`Error: ${permissionCheck.reason}`);
+        return void 0;
+      }
+      const content = await fileHandle.readFile({ encoding: "utf-8" });
+      const config = JSON.parse(content);
+      const serverConfig = config?.mcpServers?.["open-mercato"];
+      return serverConfig?.headers?.["x-api-key"];
+    } finally {
+      await fileHandle.close();
     }
-    const content = await readFile(mcpJsonPath, "utf-8");
-    const config = JSON.parse(content);
-    const serverConfig = config?.mcpServers?.["open-mercato"];
-    return serverConfig?.headers?.["x-api-key"];
   } catch {
     return void 0;
   }

package/dist/modules/ai_assistant/lib/mcp-dev-key-resolution.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/ai_assistant/lib/mcp-dev-key-resolution.ts"],
-  "sourcesContent": ["import { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolve, dirname } from 'node:path'\n\nconst logger = createLogger('ai_assistant')\n\nconst MCP_CONFIG_FILENAME = '.mcp.json'\n\n// Markers that identify a project/repo root. The lookup stops at the first\n// ancestor that has one of these, so the secret is only ever read from the\n// project root \u2014 never from an unbounded walk up to the filesystem root.\nconst PROJECT_ROOT_MARKERS = ['.git', 'yarn.lock', 'pnpm-lock.yaml', 'package-lock.json'] as const\n\nconst log = (message: string, ...args: unknown[]) => {\n  logger.info(message, args.length > 0 ? { details: args.map((arg) => String(arg)).join(' ') } : undefined)\n}\n\ntype PermissionStat = { uid: number; mode: number }\n\n/**\n * Resolve the project root by walking up from `startDir` to the nearest\n * ancestor containing a project-root marker. Falls back to `startDir` (never\n * the filesystem root) when no marker is found, so a planted `.mcp.json` in a\n * writable ancestor such as `/tmp` can never be picked up.\n */\nexport function findProjectRoot(startDir: string, exists: (path: string) => boolean): string {\n  let dir = resolve(startDir)\n  while (true) {\n    for (const marker of PROJECT_ROOT_MARKERS) {\n      if (exists(resolve(dir, marker))) return dir\n    }\n    const parent = dirname(dir)\n    if (parent === dir) return resolve(startDir)\n    dir = parent\n  }\n}\n\n/**\n * Validate the ownership and permissions of `.mcp.json` before its secret is\n * read. Refuses when the file is owned by another user (a planted/shadowed\n * config) and warns loudly when it is accessible to group/other (the key is a\n * live secret). POSIX-only: when `currentUid` is null (e.g. Windows) the checks\n * are skipped.\n */\nexport function checkMcpConfigPermissions(\n  configPath: string,\n  fileStat: PermissionStat,\n  currentUid: number | null,\n  warn: (message: string) => void,\n): { ok: boolean; reason?: string } {\n  if (currentUid === null) return { ok: true }\n  if (fileStat.uid !== currentUid) {\n    return {\n      ok: false,\n      reason: `refusing to read ${configPath}: it is owned by uid ${fileStat.uid}, not the current user (uid ${currentUid})`,\n    }\n  }\n  if ((fileStat.mode & 0o077) !== 0) {\n    warn(\n      `${configPath} is accessible to group/other (mode ${(fileStat.mode & 0o777).toString(8)}); it contains a live API key \u2014 restrict it with: chmod 600 ${configPath}`,\n    )\n  }\n  return { ok: true }\n}\n\n/**\n * Resolve the dev MCP server's API key.\n *\n * Priority: `OPEN_MERCATO_API_KEY` env var, then `headers.x-api-key` from a\n * single `.mcp.json` read from the detected project root. The lookup is bounded\n * to the project root (it never walks up to the filesystem root), and the file\n * is ownership/permission-checked before its secret is read.\n */\nexport async function getApiKeyFromMcpJson(): Promise<string | undefined> {\n  const envKey = process.env.OPEN_MERCATO_API_KEY\n  if (envKey && envKey.trim().length > 0) {\n    return envKey.trim()\n  }\n\n  const { readFile, stat } = await import('node:fs/promises')\n  const { existsSync } = await import('node:fs')\n\n  try {\n    const projectRoot = findProjectRoot(process.cwd(), existsSync)\n    const mcpJsonPath = resolve(projectRoot, MCP_CONFIG_FILENAME)\n    if (!existsSync(mcpJsonPath)) {\n      return undefined\n    }\n\n    const fileStat = await stat(mcpJsonPath)\n    const currentUid = typeof process.getuid === 'function' ? process.getuid() : null\n    const permissionCheck = checkMcpConfigPermissions(\n      mcpJsonPath,\n      { uid: fileStat.uid, mode: fileStat.mode },\n      currentUid,\n      (message) => log(`Warning: ${message}`),\n    )\n    if (!permissionCheck.ok) {\n      log(`Error: ${permissionCheck.reason}`)\n      return undefined\n    }\n\n    const content = await readFile(mcpJsonPath, 'utf-8')\n    const config = JSON.parse(content)\n    const serverConfig = config?.mcpServers?.['open-mercato']\n\n    return serverConfig?.headers?.['x-api-key']\n  } catch {\n    return undefined\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS,eAAe;AAEjC,MAAM,SAAS,aAAa,cAAc;AAE1C,MAAM,sBAAsB;AAK5B,MAAM,uBAAuB,CAAC,QAAQ,aAAa,kBAAkB,mBAAmB;AAExF,MAAM,MAAM,CAAC,YAAoB,SAAoB;AACnD,SAAO,KAAK,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC,QAAQ,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,IAAI,MAAS;AAC1G;AAUO,SAAS,gBAAgB,UAAkB,QAA2C;AAC3F,MAAI,MAAM,QAAQ,QAAQ;AAC1B,SAAO,MAAM;AACX,eAAW,UAAU,sBAAsB;AACzC,UAAI,OAAO,QAAQ,KAAK,MAAM,CAAC,EAAG,QAAO;AAAA,IAC3C;AACA,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK,QAAO,QAAQ,QAAQ;AAC3C,UAAM;AAAA,EACR;AACF;AASO,SAAS,0BACd,YACA,UACA,YACA,MACkC;AAClC,MAAI,eAAe,KAAM,QAAO,EAAE,IAAI,KAAK;AAC3C,MAAI,SAAS,QAAQ,YAAY;AAC/B,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,oBAAoB,UAAU,wBAAwB,SAAS,GAAG,+BAA+B,UAAU;AAAA,IACrH;AAAA,EACF;AACA,OAAK,SAAS,OAAO,QAAW,GAAG;AACjC;AAAA,MACE,GAAG,UAAU,wCAAwC,SAAS,OAAO,KAAO,SAAS,CAAC,CAAC,oEAA+D,UAAU;AAAA,IAClK;AAAA,EACF;AACA,SAAO,EAAE,IAAI,KAAK;AACpB;AAUA,eAAsB,uBAAoD;AACxE,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,UAAU,OAAO,KAAK,EAAE,SAAS,GAAG;AACtC,WAAO,OAAO,KAAK;AAAA,EACrB;AAEA,QAAM,EAAE,UAAU,KAAK,IAAI,MAAM,OAAO,kBAAkB;AAC1D,QAAM,EAAE,WAAW,IAAI,MAAM,OAAO,SAAS;AAE7C,MAAI;AACF,UAAM,cAAc,gBAAgB,QAAQ,IAAI,GAAG,UAAU;AAC7D,UAAM,cAAc,QAAQ,aAAa,mBAAmB;AAC5D,QAAI,CAAC,WAAW,WAAW,GAAG;AAC5B,aAAO;AAAA,IACT;AAEA,UAAM,WAAW,MAAM,KAAK,WAAW;AACvC,UAAM,aAAa,OAAO,QAAQ,WAAW,aAAa,QAAQ,OAAO,IAAI;AAC7E,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA,EAAE,KAAK,SAAS,KAAK,MAAM,SAAS,KAAK;AAAA,MACzC;AAAA,MACA,CAAC,YAAY,IAAI,YAAY,OAAO,EAAE;AAAA,IACxC;AACA,QAAI,CAAC,gBAAgB,IAAI;AACvB,UAAI,UAAU,gBAAgB,MAAM,EAAE;AACtC,aAAO;AAAA,IACT;AAEA,UAAM,UAAU,MAAM,SAAS,aAAa,OAAO;AACnD,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,UAAM,eAAe,QAAQ,aAAa,cAAc;AAExD,WAAO,cAAc,UAAU,WAAW;AAAA,EAC5C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["import { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolve, dirname } from 'node:path'\n\nconst logger = createLogger('ai_assistant')\n\nconst MCP_CONFIG_FILENAME = '.mcp.json'\n\n// Markers that identify a project/repo root. The lookup stops at the first\n// ancestor that has one of these, so the secret is only ever read from the\n// project root \u2014 never from an unbounded walk up to the filesystem root.\nconst PROJECT_ROOT_MARKERS = ['.git', 'yarn.lock', 'pnpm-lock.yaml', 'package-lock.json'] as const\n\nconst log = (message: string, ...args: unknown[]) => {\n  logger.info(message, args.length > 0 ? { details: args.map((arg) => String(arg)).join(' ') } : undefined)\n}\n\ntype PermissionStat = { uid: number; mode: number }\n\n/**\n * Resolve the project root by walking up from `startDir` to the nearest\n * ancestor containing a project-root marker. Falls back to `startDir` (never\n * the filesystem root) when no marker is found, so a planted `.mcp.json` in a\n * writable ancestor such as `/tmp` can never be picked up.\n */\nexport function findProjectRoot(startDir: string, exists: (path: string) => boolean): string {\n  let dir = resolve(startDir)\n  while (true) {\n    for (const marker of PROJECT_ROOT_MARKERS) {\n      if (exists(resolve(dir, marker))) return dir\n    }\n    const parent = dirname(dir)\n    if (parent === dir) return resolve(startDir)\n    dir = parent\n  }\n}\n\n/**\n * Validate the ownership and permissions of `.mcp.json` before its secret is\n * read. Refuses when the file is owned by another user (a planted/shadowed\n * config) or accessible to group/other (the key is a live secret). POSIX-only:\n * when `currentUid` is null (e.g. Windows) the ownership and mode checks are\n * skipped; descriptor/path identity checks still apply.\n */\nexport function checkMcpConfigPermissions(\n  configPath: string,\n  fileStat: PermissionStat,\n  currentUid: number | null,\n  warn: (message: string) => void,\n): { ok: boolean; reason?: string } {\n  if (currentUid === null) return { ok: true }\n  if (fileStat.uid !== currentUid) {\n    return {\n      ok: false,\n      reason: `refusing to read ${configPath}: it is owned by uid ${fileStat.uid}, not the current user (uid ${currentUid})`,\n    }\n  }\n  if ((fileStat.mode & 0o077) !== 0) {\n    const reason = `${configPath} is accessible to group/other (mode ${(fileStat.mode & 0o777).toString(8)}); it contains a live API key \u2014 restrict it with: chmod 600 ${configPath}`\n    warn(reason)\n    return { ok: false, reason }\n  }\n  return { ok: true }\n}\n\ntype FileIdentity = { dev: number; ino: number }\n\nfunction isSameFile(openedFile: FileIdentity, pathEntry: FileIdentity): boolean {\n  return openedFile.dev === pathEntry.dev && openedFile.ino === pathEntry.ino\n}\n\n/**\n * Resolve the dev MCP server's API key.\n *\n * Priority: `OPEN_MERCATO_API_KEY` env var, then `headers.x-api-key` from a\n * single `.mcp.json` read from the detected project root. The lookup is bounded\n * to the project root (it never walks up to the filesystem root), and the file\n * is ownership/permission-checked before its secret is read.\n */\nexport async function getApiKeyFromMcpJson(): Promise<string | undefined> {\n  const envKey = process.env.OPEN_MERCATO_API_KEY\n  if (envKey && envKey.trim().length > 0) {\n    return envKey.trim()\n  }\n\n  const { lstat, open } = await import('node:fs/promises')\n  const { constants, existsSync } = await import('node:fs')\n\n  try {\n    const projectRoot = findProjectRoot(process.cwd(), existsSync)\n    const mcpJsonPath = resolve(projectRoot, MCP_CONFIG_FILENAME)\n    let openFlags = constants.O_RDONLY\n    if (process.platform !== 'win32') {\n      openFlags |= constants.O_NOFOLLOW | constants.O_NONBLOCK\n    }\n\n    const fileHandle = await open(mcpJsonPath, openFlags)\n    try {\n      const [fileStat, pathStat] = await Promise.all([fileHandle.stat(), lstat(mcpJsonPath)])\n      if (\n        !fileStat.isFile() ||\n        pathStat.isSymbolicLink() ||\n        !pathStat.isFile() ||\n        !isSameFile(fileStat, pathStat)\n      ) {\n        log(`Error: refusing to read ${mcpJsonPath}: it is not the opened regular file`)\n        return undefined\n      }\n\n      const currentUid = typeof process.getuid === 'function' ? process.getuid() : null\n      const permissionCheck = checkMcpConfigPermissions(\n        mcpJsonPath,\n        { uid: fileStat.uid, mode: fileStat.mode },\n        currentUid,\n        (message) => log(`Warning: ${message}`),\n      )\n      if (!permissionCheck.ok) {\n        log(`Error: ${permissionCheck.reason}`)\n        return undefined\n      }\n\n      const content = await fileHandle.readFile({ encoding: 'utf-8' })\n      const config = JSON.parse(content)\n      const serverConfig = config?.mcpServers?.['open-mercato']\n\n      return serverConfig?.headers?.['x-api-key']\n    } finally {\n      await fileHandle.close()\n    }\n  } catch {\n    return undefined\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS,eAAe;AAEjC,MAAM,SAAS,aAAa,cAAc;AAE1C,MAAM,sBAAsB;AAK5B,MAAM,uBAAuB,CAAC,QAAQ,aAAa,kBAAkB,mBAAmB;AAExF,MAAM,MAAM,CAAC,YAAoB,SAAoB;AACnD,SAAO,KAAK,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC,QAAQ,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,IAAI,MAAS;AAC1G;AAUO,SAAS,gBAAgB,UAAkB,QAA2C;AAC3F,MAAI,MAAM,QAAQ,QAAQ;AAC1B,SAAO,MAAM;AACX,eAAW,UAAU,sBAAsB;AACzC,UAAI,OAAO,QAAQ,KAAK,MAAM,CAAC,EAAG,QAAO;AAAA,IAC3C;AACA,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK,QAAO,QAAQ,QAAQ;AAC3C,UAAM;AAAA,EACR;AACF;AASO,SAAS,0BACd,YACA,UACA,YACA,MACkC;AAClC,MAAI,eAAe,KAAM,QAAO,EAAE,IAAI,KAAK;AAC3C,MAAI,SAAS,QAAQ,YAAY;AAC/B,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,oBAAoB,UAAU,wBAAwB,SAAS,GAAG,+BAA+B,UAAU;AAAA,IACrH;AAAA,EACF;AACA,OAAK,SAAS,OAAO,QAAW,GAAG;AACjC,UAAM,SAAS,GAAG,UAAU,wCAAwC,SAAS,OAAO,KAAO,SAAS,CAAC,CAAC,oEAA+D,UAAU;AAC/K,SAAK,MAAM;AACX,WAAO,EAAE,IAAI,OAAO,OAAO;AAAA,EAC7B;AACA,SAAO,EAAE,IAAI,KAAK;AACpB;AAIA,SAAS,WAAW,YAA0B,WAAkC;AAC9E,SAAO,WAAW,QAAQ,UAAU,OAAO,WAAW,QAAQ,UAAU;AAC1E;AAUA,eAAsB,uBAAoD;AACxE,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,UAAU,OAAO,KAAK,EAAE,SAAS,GAAG;AACtC,WAAO,OAAO,KAAK;AAAA,EACrB;AAEA,QAAM,EAAE,OAAO,KAAK,IAAI,MAAM,OAAO,kBAAkB;AACvD,QAAM,EAAE,WAAW,WAAW,IAAI,MAAM,OAAO,SAAS;AAExD,MAAI;AACF,UAAM,cAAc,gBAAgB,QAAQ,IAAI,GAAG,UAAU;AAC7D,UAAM,cAAc,QAAQ,aAAa,mBAAmB;AAC5D,QAAI,YAAY,UAAU;AAC1B,QAAI,QAAQ,aAAa,SAAS;AAChC,mBAAa,UAAU,aAAa,UAAU;AAAA,IAChD;AAEA,UAAM,aAAa,MAAM,KAAK,aAAa,SAAS;AACpD,QAAI;AACF,YAAM,CAAC,UAAU,QAAQ,IAAI,MAAM,QAAQ,IAAI,CAAC,WAAW,KAAK,GAAG,MAAM,WAAW,CAAC,CAAC;AACtF,UACE,CAAC,SAAS,OAAO,KACjB,SAAS,eAAe,KACxB,CAAC,SAAS,OAAO,KACjB,CAAC,WAAW,UAAU,QAAQ,GAC9B;AACA,YAAI,2BAA2B,WAAW,qCAAqC;AAC/E,eAAO;AAAA,MACT;AAEA,YAAM,aAAa,OAAO,QAAQ,WAAW,aAAa,QAAQ,OAAO,IAAI;AAC7E,YAAM,kBAAkB;AAAA,QACtB;AAAA,QACA,EAAE,KAAK,SAAS,KAAK,MAAM,SAAS,KAAK;AAAA,QACzC;AAAA,QACA,CAAC,YAAY,IAAI,YAAY,OAAO,EAAE;AAAA,MACxC;AACA,UAAI,CAAC,gBAAgB,IAAI;AACvB,YAAI,UAAU,gBAAgB,MAAM,EAAE;AACtC,eAAO;AAAA,MACT;AAEA,YAAM,UAAU,MAAM,WAAW,SAAS,EAAE,UAAU,QAAQ,CAAC;AAC/D,YAAM,SAAS,KAAK,MAAM,OAAO;AACjC,YAAM,eAAe,QAAQ,aAAa,cAAc;AAExD,aAAO,cAAc,UAAU,WAAW;AAAA,IAC5C,UAAE;AACA,YAAM,WAAW,MAAM;AAAA,IACzB;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/dist/modules/ai_assistant/lib/model-factory.js

@@ -87,6 +87,24 @@ function parseSlashShorthand(token, registry) {
   if (!provider) return { providerHint: null, modelId: token };
   return { providerHint: before, modelId: after };
 }
+function stripLeadingProviderPrefix(token, providerId) {
+  const prefix = `${providerId}/`;
+  return token.startsWith(prefix) ? token.slice(prefix.length) : token;
+}
+function isConfiguredVendorPrefixGateway(providerId, registry, env) {
+  if (!providerId || !registry.get) return false;
+  const provider = registry.get(providerId);
+  return provider?.usesVendorPrefixedModelIds === true && provider.isConfigured(env);
+}
+function parseTierModel(token, tierProviderHint, registry, env) {
+  if (tierProviderHint && isConfiguredVendorPrefixGateway(tierProviderHint, registry, env)) {
+    return {
+      providerHint: tierProviderHint,
+      modelId: stripLeadingProviderPrefix(token, tierProviderHint)
+    };
+  }
+  return parseSlashShorthand(token, registry);
+}
 function resolveAllowRuntimeOverride(input) {
   if (input.allowRuntimeOverride !== void 0) return input.allowRuntimeOverride !== false;
   if (input.allowRuntimeModelOverride !== void 0) return input.allowRuntimeModelOverride !== false;
@@ -109,12 +127,6 @@ function createModelFactory(_container, deps = {}) {
       const moduleModelRaw = hasModule ? readModuleModelEnvOverride(env, input.moduleId) : null;
       const agentModelRaw = normalizeOverride(input.agentDefaultModel);
       const globalModelRaw = readGlobalModelFromEnv(env);
-      const requestModelParsed = requestModelRaw ? parseSlashShorthand(requestModelRaw, registry) : null;
-      const callerParsed = callerRaw ? parseSlashShorthand(callerRaw, registry) : null;
-      const tenantModelParsed = tenantModelRaw ? parseSlashShorthand(tenantModelRaw, registry) : null;
-      const moduleModelParsed = moduleModelRaw ? parseSlashShorthand(moduleModelRaw, registry) : null;
-      const agentModelParsed = agentModelRaw ? parseSlashShorthand(agentModelRaw, registry) : null;
-      const globalModelParsed = globalModelRaw ? parseSlashShorthand(globalModelRaw, registry) : null;
       const providerOverrideRaw = normalizeOverride(input.providerOverride);
       const moduleProviderRaw = hasModule ? readModuleProviderEnvOverride(env, input.moduleId) : null;
       const agentDefaultProviderRaw = normalizeOverride(input.agentDefaultProvider);
@@ -124,6 +136,12 @@ function createModelFactory(_container, deps = {}) {
       const tenantProviderHint = normalizeProviderHint(tenantProviderRaw, registry);
       const moduleProviderHint = normalizeProviderHint(moduleProviderRaw, registry);
       const agentDefaultProviderHint = normalizeProviderHint(agentDefaultProviderRaw, registry);
+      const requestModelParsed = requestModelRaw ? parseTierModel(requestModelRaw, requestProviderHint, registry, env) : null;
+      const callerParsed = callerRaw ? parseTierModel(callerRaw, providerOverrideHint, registry, env) : null;
+      const tenantModelParsed = tenantModelRaw ? parseTierModel(tenantModelRaw, tenantProviderHint, registry, env) : null;
+      const moduleModelParsed = moduleModelRaw ? parseTierModel(moduleModelRaw, moduleProviderHint, registry, env) : null;
+      const agentModelParsed = agentModelRaw ? parseTierModel(agentModelRaw, agentDefaultProviderHint, registry, env) : null;
+      const globalModelParsed = globalModelRaw ? parseTierModel(globalModelRaw, globalProviderRaw, registry, env) : null;
       const providerHintCandidates = [
         requestModelParsed?.providerHint ?? null,
         requestProviderHint,
@@ -315,6 +333,7 @@ export {
   AiModelFactoryError,
   createModelFactory,
   parseSlashShorthand,
+  parseTierModel,
   resolveAllowRuntimeOverride
 };
 //# sourceMappingURL=model-factory.js.map